#ifndef _NTRTL_H
typedef _Function_class_(ALLOCATE_VIRTUAL_MEMORY_EX_CALLBACK)
NTSTATUS NTAPI ALLOCATE_VIRTUAL_MEMORY_EX_CALLBACK(
_Inout_ HANDLE CallbackContext,
_In_ HANDLE ProcessHandle,
_Inout_ _At_ (*BaseAddress, _Readable_bytes_ (*RegionSize) _Writable_bytes_ (*RegionSize) _Post_readable_byte_size_ (*RegionSize)) PVOID* BaseAddress,
_Inout_ PSIZE_T RegionSize,
_In_ ULONG AllocationType,
_In_ ULONG PageProtection,
_Inout_updates_opt_(ExtendedParameterCount) PMEM_EXTENDED_PARAMETER ExtendedParameters,
_In_ ULONG ExtendedParameterCount
);
View code on GitHub// ntifs.h
ALLOCATE_VIRTUAL_MEMORY_EX_CALLBACK AllocateVirtualMemoryExCallback;
NTSTATUS AllocateVirtualMemoryExCallback(
HANDLE CallbackContext,
HANDLE ProcessHandle,
PVOID *BaseAddress,
PSIZE_T RegionSize,
ULONG AllocationType,
ULONG PageProtection,
PMEM_EXTENDED_PARAMETER ExtendedParameters,
ULONG ExtendedParameterCount
)
{...}
View the official Windows Driver Kit DDI referenceThis callback function is documented in Windows Driver Kit.
Reserved for system use.
CallbackContextReserved for system use.
ProcessHandleReserved for system use.
BaseAddressReserved for system use.
RegionSizeReserved for system use.
AllocationTypeReserved for system use.
PageProtectionReserved for system use.
ExtendedParametersReserved for system use.
ExtendedParameterCountReserved for system use.
Reserved for system use.