mirror of
https://github.com/0xJs/BYOVD_read_write_primitive
synced 2026-06-06 15:04:29 +00:00
0xjs
70 lines
2.9 KiB
C
70 lines
2.9 KiB
C
/*
|
|
Stores all macro's and function prototypes used across the project
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <windows.h>
|
|
#include <stdio.h>
|
|
|
|
#include "structs.h"
|
|
#include "config.h"
|
|
#include "typedef.h"
|
|
|
|
// ***** GLOBAL VARIABLES ***** //
|
|
Offsets g_Offsets;
|
|
|
|
// ***** HELPER FUNCTIONS FOR PRINTING ***** //
|
|
#define okay(msg, ...) printf("[+] "msg "\n", ##__VA_ARGS__);
|
|
#define info(msg, ...) printf("[i] "msg "\n", ##__VA_ARGS__);
|
|
#define error(msg, ...) printf("[-] "msg "\n", ##__VA_ARGS__);
|
|
|
|
#define okayW(msg, ...) wprintf(L"[+] " msg L"\n", ##__VA_ARGS__)
|
|
#define infoW(msg, ...) wprintf(L"[i] " msg L"\n", ##__VA_ARGS__)
|
|
#define errorW(msg, ...) wprintf(L"[-] " msg L"\n", ##__VA_ARGS__)
|
|
|
|
// NT Macro for succes of syscalls
|
|
#define NT_SUCCESS(status) (((NTSTATUS)(status)) >= 0) // https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/using-ntstatus-values
|
|
|
|
// Tabbed versions for info without the [i]
|
|
#define infoW_t(msg, ...) wprintf(L"\t" msg L"\n", ##__VA_ARGS__)
|
|
#define info_t(msg, ...) printf("\t"msg "\n", ##__VA_ARGS__);
|
|
|
|
// ***** HELPER FUNCTION TO GET HANDLE TO CURRENT PROCESS OR THREAD ***** //
|
|
#define NtCurrentProcess() ((HANDLE)-1) // Return the pseudo handle for the current process
|
|
#define NtCurrentThread() ((HANDLE)-2) // Return the pseudo handle for the current thread
|
|
|
|
// ***** FUNCTION PROTOTYPES ***** //
|
|
// Function prototypes are needed so each source file is aware of the function's signature
|
|
// (name, return type, and parameters) before the compiler encounters the function call.
|
|
|
|
// For functions in 'helpers.c'
|
|
int errorWin32(IN const char* msg);
|
|
int errorNT(IN const char* msg, IN NTSTATUS ntstatus);
|
|
void print_bytes(IN void* ptr, IN int size);
|
|
|
|
// For functions in 'driver_un_loading.c'
|
|
BOOL LoadDriver(IN LPCWSTR lpwcDriverName, IN LPCWSTR lpwcDriverPath);
|
|
BOOL UnloadDriver(IN LPCWSTR lpwcDriverName);
|
|
HANDLE GetDeviceHandle(IN LPCWSTR lpwcDriverSymlink);
|
|
BOOL WriteDriverToFile(IN LPWSTR pszDriverName, IN PBYTE pbDriver, IN DWORD dwDriverSize, OUT LPWSTR* pszFullDriverPath);
|
|
|
|
// For functions in 'driverReadWrite.c'
|
|
DWORD ReadMemoryPrimitive(IN HANDLE hDevice, IN DWORD dwSize, IN DWORD64 dwAddress);
|
|
BOOL WriteMemoryPrimitive(IN HANDLE hDevice, IN DWORD dwSize, IN DWORD64 dwAddress, IN DWORD dwValue);
|
|
BYTE ReadMemoryBYTE(IN HANDLE Device, IN DWORD64 Address);
|
|
WORD ReadMemoryWORD(IN HANDLE Device, IN DWORD64 Address);
|
|
DWORD ReadMemoryDWORD(IN HANDLE Device, IN DWORD64 Address);
|
|
DWORD64 ReadMemoryDWORD64(IN HANDLE Device, IN DWORD64 Address);
|
|
void WriteMemoryDWORD64(IN HANDLE Device, IN DWORD64 Address, IN DWORD64 Value);
|
|
|
|
// For functions in 'IO.c'
|
|
BOOL WriteFileW(IN LPCWSTR wszFileName, IN PBYTE pbFileContent, IN DWORD dwFileSize);
|
|
BOOL RemoveFileW(IN LPCWSTR wszFileName);
|
|
|
|
// For functions in 'protection.c'
|
|
BOOL GetOffsets();
|
|
void PrintOffsets();
|
|
BOOL ChangeProtectionLevel(IN DWORD64 dwPID, DWORD dwProtectionLevel);
|
|
BOOL SpawnProtectedProcess();
|