ZwQueryVirtualMemory
NTSTATUS __stdcall ZwQueryVirtualMemory(
PVOID ProcessHandle,
PVOID BaseAddress,
MEMORY_INFORMATION_CLASS MemoryInformationClass,
PVOID MemoryInformation,
UINT64 MemoryInformationLength,
UINT64 *ReturnLength){
NTSTATUS result;
_disable();
__readeflags();
KiServiceInternal();
return result;
}Referenced by:
EtwTimLogControlProtectionUserModeReturnMismatch
EtwTimLogRedirectionTrustPolicy
EtwTimLogUserCetSetContextIpValidationFailure
EtwpTiQueryVad
KiVerifyContextXStateCetUEnabled
LdrpResGetMappingSize
PspFreeCurrentThreadUserShadowStack
PspFreeUserFiberShadowStack
RtlCreateHeap
RtlpHpFixedHeapCreate
SMKM_STORE::SmStPrioritizeRegionsStore
SMKM_STORE::SmStTrimWsStoreBatch
SepGetStackTraceHash
VerifierMmUnmapLockedPages
sub_14065E218