Struct KmProcess 

pub struct KmProcess { /* private fields */ }

kernel process wrapper for memory operations

Implementations

impl KmProcess

pub fn open(process_id: u32) -> KmResult<Self>

open process by ID

pub fn eprocess(&self) -> &Eprocess

get EPROCESS

pub fn id(&self) -> u32

get process ID

pub fn attach(&mut self) -> KmResult<()>

attach to process address space

pub fn detach(&mut self)

detach from process address space

pub fn read<T: Copy>(&mut self, address: u64) -> KmResult<T>

read memory from process

pub fn read_bytes(&mut self, address: u64, buffer: &mut [u8]) -> KmResult<usize>

read bytes from process

pub fn write<T: Copy>(&mut self, address: u64, value: &T) -> KmResult<()>

write memory to process

pub fn write_bytes(&mut self, address: u64, buffer: &[u8]) -> KmResult<usize>

write bytes to process

pub fn allocate( &mut self, size: usize, protection: u32, preferred_address: Option<u64>, ) -> KmResult<u64>

allocate virtual memory in process

pub fn free(&mut self, address: u64) -> KmResult<()>

free virtual memory in process

pub fn protect( &mut self, address: u64, size: usize, protection: u32, ) -> KmResult<u32>

change memory protection

pub fn get_module_base(&mut self, module_name: &[u16]) -> KmResult<u64>

get module base address by name

Trait Implementations

impl Drop for KmProcess

fn drop(&mut self)

Executes the destructor for this type.