mirror of
https://github.com/bb107/MemoryModulePP
synced 2026-06-08 13:15:33 +00:00
Boring
27 lines
490 B
C
27 lines
490 B
C
#pragma once
|
|
|
|
typedef struct _SEARCH_CONTEXT {
|
|
union {
|
|
IN PVOID MemoryBuffer;
|
|
size_t InBufferPtr;
|
|
};
|
|
union {
|
|
IN DWORD BufferLength;
|
|
size_t reserved0;
|
|
};
|
|
|
|
union {
|
|
OUT PVOID MemoryBlockInSection;
|
|
size_t OutBufferPtr;
|
|
};
|
|
union {
|
|
DWORD RemainingLength;
|
|
size_t reserved1;
|
|
};
|
|
}SEARCH_CONTEXT, * PSEARCH_CONTEXT;
|
|
|
|
NTSTATUS NTAPI RtlFindMemoryBlockFromModuleSection(
|
|
IN HMODULE hModule OPTIONAL,
|
|
IN LPCSTR lpSectionName OPTIONAL,
|
|
IN OUT PSEARCH_CONTEXT SearchContext
|
|
); |