Description of the 'memcpy_pa' function in HyperDbg Scripts
memcpy_pa
memcpy_pa( PhysicalDestination, PhysicalSource, Num );
[PhysicalDestination]
A MASM-like expressionarrow-up-right to evaluate which is the physical address of the destination (physical) buffer.
[PhysicalSource]
A MASM-like expressionarrow-up-right to evaluate which is the physical address of the source buffer.
[Num]
A MASM-like expressionarrow-up-right to evaluate which is the size (length) of the bytes to be copied.
Copies the contents of the source physical address to the destination (physical) buffer.
None
memcpy_pa(6de00000 , @rax, 40);
Copies 0x40 bytes from the physical buffer pointed by the RAX register to the buffer which its physical address is 6de00000.
6de00000
Please note that the size argument is passed in the HEX format.
Make sure to acquire a spinlock if the destination buffer might be accessed by different cores simultaneously.
This function checks for the validity of both the source and the destination address before performing the copy.
The support for this function is added from v0.13.
memcpyarrow-up-right
Last updated 11 months ago