search

ufrisk / MemProcFS

MemProcFS
GNU Affero General Public License v3.0
2.81k stars 352 forks source link

[Question] Function to retrieve physical section map #204

Closed 0xGabriella closed 10 months ago

0xGabriella commented 10 months ago

Just wondering, if theres any function that i can use to dump/retrieve physical section map like MmGetPhysicalMemoryRanges in Windows KMDF?. Thank you so much.

ufrisk commented 10 months ago

Hi,

This would be: VMMDLL_Map_GetPhysMem

Please let me know if this is the function you're looking at.

0xGabriella commented 10 months ago

Thank you, that is the function im looking for. Also sorry for late reply. Also 1 more, if there's any function to dump all process CR3/DTB. Thank you so much <3

0xGabriella commented 10 months ago

nvm looks like i found it in the vmm example. Thank you so much https://github.com/ufrisk/MemProcFS/blob/master/vmm_example/vmmdll_example.c#L1422

ufrisk commented 10 months ago

Super nice that you found what you were looking for. I hope this will work well enough 👍