KernelMemoryRead/main.cpp at main · skyzehook/KernelMemoryRead · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
#include <Windows.h>
#include <iostream>


#define IOCTL_SET_PID CTL_CODE(FILE_DEVICE_UNKNOWN, 0x800, METHOD_BUFFERED, FILE_ANY_ACCESS)

int main()
{
    HWND hwnd = FindWindowA(NULL, "AssaultCube");
    DWORD pID = 0;
    GetWindowThreadProcessId(hwnd, &pID);
    std::cout << pID << std::endl;

    LPCWSTR devicePath = L"\\\\.\\KernelMemoryRead";

    HANDLE hDevice = CreateFileW(
        devicePath,
        GENERIC_WRITE,
        0,
        nullptr,
        OPEN_EXISTING,
        FILE_ATTRIBUTE_NORMAL,
        nullptr
    );

    if (hDevice == INVALID_HANDLE_VALUE)
    {
        std::cout << "failed to open driver error: " << GetLastError() << std::endl;
        std::cout << "driver is not loaded\n";
        return 1;
    }

    DWORD bytes = 0;
    BOOL req = DeviceIoControl(
        hDevice,
        IOCTL_SET_PID,
        &pID,
        sizeof(pID),
        nullptr,
        0,
        &bytes,
        nullptr
    );


    if (!req)
    {
        std::cout << "DeviceIoControl failed error: " << GetLastError() << std::endl;
        CloseHandle(hDevice);
        return 1;
    }


    std::cout << "pID sen to driver!!!!\n";
    Sleep(1500);

    CloseHandle(hDevice);
    return 0;
}