Page 2 of 2 FirstFirst 12
Results 16 to 19 of 19

Thread: ProtectVirtualMemory from r0

  1. #16
    |< x != '+' BanMe's Avatar
    Join Date
    Oct 2008
    Location
    Farmington NH
    Posts
    510
    Blog Entries
    4
    eh it was all just fun for me..I still gotta do the 64 bit version of the function/signature but I hope you enjoy it

    regards BanMe
    No hate for the lost children;
    more love for the paths we walk,
    'words' shatter the truth we seek.
    from the heart and mind of Me
    me, to you.. down and across

    No more words from me, to you...
    Hate and love shatter the heart and Mind of Me.
    For the Lost Children;For the paths we walk; the real truth we seek!

  2. #17
    No worry, it's for fun for me too. And yes, I enjoy it ehehe

  3. #18
    Why don't you just get the PTEs you need and change the protection that way? Or grab the VADs and walk them? Seems easier than all this stuff, and the structures haven't changed
    --
    Best regards,
    Alex Ionescu

  4. #19
    Hi Alex,

    you're true. I was just trying to get an idea how to use "internal" non-exported functions... Same thing in my other thread on KeStackAttachProcess.
    Anyway, thanks for the tips

    Orkblutt

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •