Hello.
I would like to ask you for guidelines for accessing memory in kernel mode.
-
Assuming I have to access kernel paged memory. Can I just read this memory at passive level w/o _try/_except block? If no - what are aprticular cases in which it would not work?
-
Same as 1. but for user mode memory (assuming passive level and reading memory from process in which context kernel mode code is executing)
-
What for are __try/__except block?
-
When locking of memory (Mm* functions) and MDLs should be used?
I’m sorry for that big amount of questions, but I would like to organize this things…
thank you very much for help