Classes | |
class | MemoryFactory |
class | IMemory |
struct | LinuxData |
class | MemoryFactoryImpl |
class | MemoryFile |
class | MemoryOsSpecific |
Functions | |
DECLARE_EXCEPTION (MemoryException) | |
Base class for all Memory operations. | |
DECLARE_EXCEPTION_EX (AccessError, memory, MemoryException) | |
DECLARE_EXCEPTION_EX (OutOfBounds, memory, MemoryException) | |
int | LoadNtdllFuncs (void) |
HANDLE | OpenMemAccess (void) |
int | CloseMemAccess (HANDLE hPhysMem) |
int | MapMem (HANDLE hPhysMem, PVOID pBaseAddr, PDWORD pPhysAddr, PDWORD pSize) |
int | UnMapMem (PVOID pBaseAddr) |
static BOOL | setPrivilege (LPCTSTR privilegeName, BOOL enable) |
void | readPhysicalMemoryMap (HANDLE hPhysMem, u8 *buffer, u64 offset, unsigned int length) |
void | readPhysicalMemoryDebugSysctl (u8 *buffer, u64 offset, unsigned int length) |
void | enumSystemFirmwareTables (u8 *buffer, u64 offset, unsigned int length) |
DEFINE_EXCEPTION_EX (AccessErrorImpl, memory, AccessError) | |
DEFINE_EXCEPTION_EX (OutOfBoundsImpl, memory, OutOfBounds) | |
Variables | |
NtOpenSectionPtr | NtOpenSection = NULL |
NtClosePtr | NtClose = NULL |
NtMapViewOfSectionPtr | NtMapViewOfSection = NULL |
NtUnmapViewOfSectionPtr | NtUnmapViewOfSection = NULL |
RtlInitUnicodeStringPtr | RtlInitUnicodeString = NULL |
ZwSystemDebugControlPtr | ZwSystemDebugControl = NULL |
EnumSystemFirmwareTablesPtr | EnumSystemFirmwareTables = NULL |
GetSystemFirmwareTablePtr | GetSystemFirmwareTable = NULL |
u8 * | CBlockBuffer = NULL |
u8 * | EBlockBuffer = NULL |
|
Definition at line 97 of file Memory_Windows.cpp. References NT_SUCCESS, and NtClose. |
|
Base class for all Memory operations.
|
|
|
|
|
|
|
|
|
|
Definition at line 253 of file Memory_Windows.cpp. References CBlockBuffer, EBlockBuffer, and EnumSystemFirmwareTables. |
|
Definition at line 49 of file Memory_Windows.cpp. References EnumSystemFirmwareTables, GetSystemFirmwareTable, NtClose, NtMapViewOfSection, NtOpenSection, NtUnmapViewOfSection, RtlInitUnicodeString, and cmos::ZwSystemDebugControl. |
|
Definition at line 111 of file Memory_Windows.cpp. References NT_SUCCESS, NtCurrentProcess, NtMapViewOfSection, and ViewShare. Referenced by readPhysicalMemoryMap(). |
|
Definition at line 78 of file Memory_Windows.cpp. References InitializeObjectAttributes, NT_SUCCESS, NtOpenSection, OBJ_CASE_INSENSITIVE, RtlInitUnicodeString, and SECTION_MAP_READ. |
|
Definition at line 227 of file Memory_Windows.cpp. References _, DebugSysReadPhysicalMemory, NT_SUCCESS, and cmos::ZwSystemDebugControl. |
|
Definition at line 171 of file Memory_Windows.cpp. References _, MapMem(), and UnMapMem(). |
|
Definition at line 146 of file Memory_Windows.cpp. |
|
Definition at line 132 of file Memory_Windows.cpp. References NT_SUCCESS, NtCurrentProcess, and NtUnmapViewOfSection. Referenced by readPhysicalMemoryMap(). |
|
Definition at line 46 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(). |
|
Definition at line 47 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(). |
|
Definition at line 44 of file Memory_Windows.cpp. Referenced by enumSystemFirmwareTables(), and LoadNtdllFuncs(). |
|
Definition at line 45 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(). |
|
Definition at line 38 of file Memory_Windows.cpp. Referenced by CloseMemAccess(), and LoadNtdllFuncs(). |
|
Definition at line 39 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and MapMem(). |
|
Definition at line 37 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and OpenMemAccess(). |
|
Definition at line 40 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and UnMapMem(). |
|
Definition at line 41 of file Memory_Windows.cpp. Referenced by LoadNtdllFuncs(), and OpenMemAccess(). |
|
Definition at line 42 of file Memory_Windows.cpp. |