Struct ProcessOps 

pub struct ProcessOps<'a> { /* private fields */ }

process memory operations via kernel driver

Implementations

impl<'a> ProcessOps<'a>

pub fn pid(&self) -> u32

get process ID

pub fn read<T: Copy>(&self, address: u64) -> ClientResult<T>

read value from process memory

pub fn read_bytes(&self, address: u64, size: usize) -> ClientResult<Vec<u8>>

read bytes from process memory

pub fn write<T: Copy>(&self, address: u64, value: &T) -> ClientResult<()>

write value to process memory

pub fn write_bytes(&self, address: u64, data: &[u8]) -> ClientResult<()>

write bytes to process memory

pub fn get_module_base(&self, module_name: &str) -> ClientResult<u64>

get module base address

pub fn allocate(&self, size: u64, protection: u32) -> ClientResult<u64>

allocate virtual memory

pub fn allocate_at( &self, address: u64, size: u64, protection: u32, ) -> ClientResult<u64>

allocate memory at preferred address

pub fn free(&self, address: u64) -> ClientResult<()>

free allocated memory

pub fn protect( &self, address: u64, size: u64, protection: u32, ) -> ClientResult<u32>

change memory protection

pub fn read_string(&self, address: u64, max_len: usize) -> ClientResult<String>

read null-terminated string

pub fn read_wstring( &self, address: u64, max_chars: usize, ) -> ClientResult<String>

read null-terminated wide string