NtReadVirtualMemory

Function parameters

Parameters

ProcessHandle:HANDLE
BaseAddress:?PVOID
Buffer:LPVOID
NumberOfBytesToRead:SIZE_T
NumberOfBytesRead:?*SIZE_T

Functions in this namespace

Functions

NtQueryInformationProcess
NtQueryInformationThread
NtQuerySystemInformation
NtSetInformationThread
RtlGetVersion
RtlCaptureStackBackTrace
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlGetSystemTimePrecise
NtQueryInformationFile
NtSetInformationFile
NtQueryAttributesFile
RtlQueryPerformanceCounter
RtlQueryPerformanceFrequency
NtQueryPerformanceCounter
NtCreateFile
NtCreateSection
NtMapViewOfSection
NtUnmapViewOfSection
NtDeviceIoControlFile
NtFsControlFile
NtClose
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlGetFullPathName_U: Returns the number of bytes written to `Buffer`.
NtQueryDirectoryFile
NtCreateKeyedEvent
NtReleaseKeyedEvent
NtWaitForKeyedEvent
RtlSetCurrentDirectory_U
NtQueryObject
NtQueryVolumeInformationFile
RtlWakeAddressAll
RtlWakeAddressSingle
RtlWaitOnAddress
RtlEqualUnicodeString
RtlUpcaseUnicodeChar
NtLockFile
NtUnlockFile
NtOpenKey
RtlQueryRegistryValues
NtReadVirtualMemory
NtWriteVirtualMemory
NtProtectVirtualMemory
RtlExitUserProcess
NtCreateNamedPipeFile
NtAllocateVirtualMemory
NtFreeVirtualMemory

Source

Implementation

pub extern "ntdll" fn NtReadVirtualMemory(
    ProcessHandle: HANDLE,
    BaseAddress: ?PVOID,
    Buffer: LPVOID,
    NumberOfBytesToRead: SIZE_T,
    NumberOfBytesRead: ?*SIZE_T,
) callconv(.winapi) NTSTATUS