#ifndef _NTPSAPI_H
// Reserve objects
#if (PHNT_MODE != PHNT_MODE_KERNEL)
#if (PHNT_VERSION >= PHNT_20H1)
// rev
NTSYSCALLAPI
NTSTATUS
NTAPI
NtPssCaptureVaSpaceBulk(
_In_ HANDLE ProcessHandle,
_In_opt_ PVOID BaseAddress,
_In_ PNTPSS_MEMORY_BULK_INFORMATION BulkInformation,
_In_ SIZE_T BulkInformationLength,
_Out_opt_ PSIZE_T ReturnLength
);
View code on GitHub
#ifndef _NTZWAPI_H
NTSYSCALLAPI
NTSTATUS
NTAPI
ZwPssCaptureVaSpaceBulk(
_In_ HANDLE ProcessHandle,
_In_opt_ PVOID BaseAddress,
_In_ PNTPSS_MEMORY_BULK_INFORMATION BulkInformation,
_In_ SIZE_T BulkInformationLength,
_Out_opt_ PSIZE_T ReturnLength
);
View code on GitHub
No description available.