Hello, guys!

I’m sorry, I’m new to this forum, but I really need your assistance. So, when Microsoft released a Service Pack 1 for Windows 2003 and x64 software developers got a headache, because they can’t read memory ranges from user mode application any more. The only way to get a handle of the \Device\PhysicalMemory object is to call a function from Ring0 mode. Here is a TechNet note.

Before releasing Service Pack 1 I used ZwOpenSection function to get a handle of the \Device\PhysicalMemory object, then I call ZwMapViewOfSection API function to map a memory address range into the address range of my processor.

Now I have a problem:
I don’t know which functions I need to use in the kernel mode driver written by František Gábriš. My there is small example, huh?

Thanks guys for help!