IDkmMemoryOperation.InvisibleWriteMemory(DkmProcess, UInt64, Byte[]) Method
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Write memory to the target process, but hide the write from calls to ReadMemory. This API may be used to patch instructions or data within the target process to implement debugger features. Before data transfer occurs, the system verifies that all data in the base address and memory of the specified size is accessible for write access, and if it is not accessible, the function raises an E_INVALID_MEMORY_ADDRESS error.
public:
void InvisibleWriteMemory(Microsoft::VisualStudio::Debugger::DkmProcess ^ process, System::UInt64 address, cli::array <System::Byte> ^ data);public void InvisibleWriteMemory (Microsoft.VisualStudio.Debugger.DkmProcess process, ulong address, byte[] data);abstract member InvisibleWriteMemory : Microsoft.VisualStudio.Debugger.DkmProcess * uint64 * byte[] -> unitPublic Sub InvisibleWriteMemory (process As DkmProcess, address As ULong, data As Byte())Parameters
- process
- DkmProcess
[In] DkmProcess represents a target process which is being debugged. The debugger debugs processes, so this is the basic unit of debugging. A DkmProcess can represent a system process or a virtual process such as minidumps.
- address
- UInt64
[In] The base address from which to write the target process's memory.
- data
- Byte[]
[In] Data to be written in the address space of the specified process.