You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
126 lines
3.2 KiB
126 lines
3.2 KiB
#pragma once
|
|
#include <windows.h>
|
|
#include <mutex>
|
|
#include <cstdint>
|
|
#include <filesystem>
|
|
#include <iostream>
|
|
#include <map>
|
|
|
|
#pragma pack ( push, 1 )
|
|
typedef struct _GIOMAP
|
|
{
|
|
unsigned long interface_type;
|
|
unsigned long bus;
|
|
uintptr_t physical_address;
|
|
unsigned long io_space;
|
|
unsigned long size;
|
|
} GIOMAP;
|
|
#pragma pack ( pop )
|
|
|
|
constexpr char driver_name[] = "gdrv";
|
|
const char* driver_path = (std::filesystem::current_path().string() + "\\driver\\gdrv.sys").c_str();
|
|
|
|
namespace physmeme
|
|
{
|
|
/*
|
|
please code this function depending on your method of physical read/write.
|
|
*/
|
|
inline HANDLE load_drv()
|
|
{
|
|
const SC_HANDLE manager = OpenSCManager(nullptr, nullptr, SC_MANAGER_CREATE_SERVICE);
|
|
|
|
if (!manager)
|
|
return false;
|
|
|
|
SC_HANDLE service_handle = CreateService(manager,
|
|
driver_name,
|
|
driver_name,
|
|
SERVICE_START | SERVICE_STOP | DELETE, SERVICE_KERNEL_DRIVER,
|
|
SERVICE_DEMAND_START,
|
|
SERVICE_ERROR_IGNORE,
|
|
driver_path, nullptr, nullptr, nullptr, nullptr, nullptr);
|
|
|
|
if (!service_handle)
|
|
service_handle = OpenService(manager, driver_name, SERVICE_START);
|
|
|
|
if (!service_handle)
|
|
{
|
|
CloseServiceHandle(manager);
|
|
return false;
|
|
}
|
|
|
|
bool result = StartService(service_handle, 0, nullptr);
|
|
|
|
if (!result)
|
|
printf("[-] failed to start service, last_error=%d\n", GetLastError());
|
|
|
|
CloseServiceHandle(service_handle);
|
|
CloseServiceHandle(manager);
|
|
|
|
auto handle = CreateFile("\\\\.\\GIO", GENERIC_READ | GENERIC_WRITE, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);
|
|
std::cout << "[+] service started, handle: " << handle << std::endl;
|
|
return handle;
|
|
}
|
|
|
|
inline HANDLE drv_handle = load_drv();
|
|
|
|
/*
|
|
please code this function depending on your method of physical read/write.
|
|
*/
|
|
inline bool unload_drv()
|
|
{
|
|
const SC_HANDLE manager = OpenSCManager(nullptr, nullptr, SC_MANAGER_CREATE_SERVICE);
|
|
|
|
if (!manager)
|
|
return false;
|
|
|
|
const SC_HANDLE service_handle = OpenService(manager, driver_name, SERVICE_STOP | DELETE);
|
|
if (!service_handle)
|
|
{
|
|
CloseServiceHandle(manager);
|
|
return false;
|
|
}
|
|
|
|
SERVICE_STATUS status = { 0 };
|
|
bool result = ControlService(service_handle, SERVICE_CONTROL_STOP, &status);
|
|
|
|
DeleteService(service_handle);
|
|
CloseServiceHandle(service_handle);
|
|
CloseServiceHandle(manager);
|
|
return result;
|
|
}
|
|
|
|
/*
|
|
please code this function depending on your method of physical read/write.
|
|
*/
|
|
inline std::uintptr_t map_phys(
|
|
std::uintptr_t addr,
|
|
std::size_t size
|
|
)
|
|
{
|
|
GIOMAP in_buffer = { 0, 0, addr, 0, size };
|
|
uintptr_t out_buffer[2] = { 0 };
|
|
unsigned long returned = 0;
|
|
DeviceIoControl(drv_handle, 0xC3502004, reinterpret_cast<LPVOID>(&in_buffer), sizeof(in_buffer),
|
|
reinterpret_cast<LPVOID>(out_buffer), sizeof(out_buffer), &returned, NULL);
|
|
return out_buffer[0];
|
|
}
|
|
|
|
/*
|
|
please code this function depending on your method of physical read/write.
|
|
*/
|
|
inline bool unmap_phys(
|
|
std::uintptr_t addr,
|
|
std::size_t size
|
|
)
|
|
{
|
|
uintptr_t in_buffer = addr;
|
|
uintptr_t out_buffer[2] = { 0 };
|
|
|
|
unsigned long returned = 0;
|
|
DeviceIoControl(drv_handle, 0xC3502008, reinterpret_cast<LPVOID>(&in_buffer), sizeof(in_buffer),
|
|
reinterpret_cast<LPVOID>(out_buffer), sizeof(out_buffer), &returned, NULL);
|
|
|
|
return out_buffer[0];
|
|
}
|
|
} |