Classes | |
| class | IMemory |
| struct | LinuxData |
| class | MemoryFactory |
| class | MemoryFactoryImpl |
| class | MemoryFile |
| class | MemoryOsSpecific |
Functions | |
| DECLARE_EXCEPTION (MemoryException) | |
| Base class for all Memory operations. | |
| DECLARE_EXCEPTION_EX (AccessError, memory, MemoryException) | |
| DECLARE_EXCEPTION_EX (OutOfBounds, memory, MemoryException) | |
| int | LoadNtdllFuncs (void) |
| HANDLE | OpenMemAccess (void) |
| int | CloseMemAccess (HANDLE hPhysMem) |
| int | MapMem (HANDLE hPhysMem, PVOID pBaseAddr, PDWORD pPhysAddr, PDWORD pSize) |
| int | UnMapMem (PVOID pBaseAddr) |
| BOOL | setPrivilege (LPCTSTR privilegeName, BOOL enable) |
| void | readPhysicalMemoryMap (HANDLE hPhysMem, u8 *buffer, u64 offset, unsigned int length) |
| void | readPhysicalMemoryDebugSysctl (u8 *buffer, u64 offset, unsigned int length) |
| void | enumSystemFirmwareTables (u8 *buffer, u64 offset, unsigned int length) |
| DEFINE_EXCEPTION_EX (AccessErrorImpl, memory, AccessError) | |
| DEFINE_EXCEPTION_EX (OutOfBoundsImpl, memory, OutOfBounds) | |
Variables | |
| NtOpenSectionPtr | NtOpenSection = NULL |
| NtClosePtr | NtClose = NULL |
| NtMapViewOfSectionPtr | NtMapViewOfSection = NULL |
| NtUnmapViewOfSectionPtr | NtUnmapViewOfSection = NULL |
| RtlInitUnicodeStringPtr | RtlInitUnicodeString = NULL |
| ZwSystemDebugControlPtr | ZwSystemDebugControl = NULL |
| EnumSystemFirmwareTablesPtr | EnumSystemFirmwareTables = NULL |
| GetSystemFirmwareTablePtr | GetSystemFirmwareTable = NULL |
| u8 * | CBlockBuffer = NULL |
| u8 * | EBlockBuffer = NULL |
|
|
Definition at line 97 of file Memory_Windows.cpp. References CloseMemAccess(), NT_SUCCESS, NtClose, and NTSTATUS. Referenced by CloseMemAccess(). |
|
|
Base class for all Memory operations.
|
|
||||||||||||||||
|
|
|
||||||||||||||||
|
|
|
||||||||||||||||
|
|
|
||||||||||||||||
|
|
|
||||||||||||||||
|
Definition at line 253 of file Memory_Windows.cpp. References _, CBlockBuffer, EBlockBuffer, EnumSystemFirmwareTables, enumSystemFirmwareTables(), GetSystemFirmwareTable, and u8. Referenced by enumSystemFirmwareTables(). |
|
|
Definition at line 49 of file Memory_Windows.cpp. References EnumSystemFirmwareTables, GetSystemFirmwareTable, NtClose, NtMapViewOfSection, NtOpenSection, NtUnmapViewOfSection, and RtlInitUnicodeString. |
|
||||||||||||||||||||
|
Definition at line 111 of file Memory_Windows.cpp. References MapMem(), NT_SUCCESS, NtCurrentProcess, NtMapViewOfSection, NTSTATUS, PHYSICAL_ADDRESS, and ViewShare. Referenced by MapMem(), and readPhysicalMemoryMap(). |
|
|
Definition at line 78 of file Memory_Windows.cpp. References InitializeObjectAttributes, NT_SUCCESS, NtOpenSection, NTSTATUS, OBJ_CASE_INSENSITIVE, OBJECT_ATTRIBUTES, OpenMemAccess(), RtlInitUnicodeString, SECTION_MAP_READ, and UNICODE_STRING. Referenced by OpenMemAccess(). |
|
||||||||||||||||
|
Definition at line 227 of file Memory_Windows.cpp. References _, MEM_STRUCT::Addr, DebugSysReadPhysicalMemory, NT_SUCCESS, NTSTATUS, MEM_STRUCT::NumBytes, MEM_STRUCT::pBuf, readPhysicalMemoryDebugSysctl(), and u8. Referenced by readPhysicalMemoryDebugSysctl(). |
|
||||||||||||||||||||
|
Definition at line 171 of file Memory_Windows.cpp. References _, MapMem(), readPhysicalMemoryMap(), u8, and UnMapMem(). Referenced by readPhysicalMemoryMap(). |
|
||||||||||||
|
Definition at line 146 of file Memory_Windows.cpp. References setPrivilege(). Referenced by setPrivilege(). |
|
|
Definition at line 132 of file Memory_Windows.cpp. References NT_SUCCESS, NtCurrentProcess, NTSTATUS, NtUnmapViewOfSection, and UnMapMem(). Referenced by readPhysicalMemoryMap(), and UnMapMem(). |
|
|
Definition at line 46 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(). |
|
|
Definition at line 47 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(). |
|
|
Definition at line 44 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(), and LoadNtdllFuncs(). |
|
|
Definition at line 45 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(), and LoadNtdllFuncs(). |
|
|
Definition at line 38 of file Memory_Windows.cpp. Referenced by CloseMemAccess(), and LoadNtdllFuncs(). |
|
|
Definition at line 39 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and MapMem(). |
|
|
Definition at line 37 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and OpenMemAccess(). |
|
|
Definition at line 40 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and UnMapMem(). |
|
|
Definition at line 41 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and OpenMemAccess(). |
|
|
Definition at line 42 of file Memory_Windows.cpp. |
1.3.5