#ifndef _NTRTL_H
typedef _Function_class_(QUERY_VIRTUAL_MEMORY_CALLBACK)
NTSTATUS NTAPI QUERY_VIRTUAL_MEMORY_CALLBACK(
_Inout_ HANDLE CallbackContext,
_In_ HANDLE ProcessHandle,
_In_opt_ PVOID BaseAddress,
_In_ HEAP_MEMORY_INFO_CLASS MemoryInformationClass,
_Out_writes_bytes_(MemoryInformationLength) PVOID MemoryInformation,
_In_ SIZE_T MemoryInformationLength,
_Out_opt_ PSIZE_T ReturnLength
);
View code on GitHub// ntifs.h
QUERY_VIRTUAL_MEMORY_CALLBACK QueryVirtualMemoryCallback;
NTSTATUS QueryVirtualMemoryCallback(
HANDLE CallbackContext,
HANDLE ProcessHandle,
PVOID BaseAddress,
HEAP_MEMORY_INFO_CLASS MemoryInformationClass,
PVOID MemoryInformation,
SIZE_T MemoryInformationLength,
PSIZE_T ReturnLength
)
{...}
View the official Windows Driver Kit DDI referenceThis callback function is documented in Windows Driver Kit.
Reserved for system use.
CallbackContextReserved for system use.
ProcessHandleReserved for system use.
BaseAddressReserved for system use.
MemoryInformationClassReserved for system use.
MemoryInformationReserved for system use.
MemoryInformationLengthReserved for system use.
ReturnLengthReserved for system use.
Reserved for system use.