53 L"\\Registry\\Machine\\System\\CurrentControlSet\\" 110 DPRINT1(
"Couldn't open \\Device\\PhysicalMemory\n");
118 Status = ZwMapViewOfSection(PhysMemHandle,
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
IN CINT OUT PVOID IN ULONG OUT PULONG ReturnLength
__INTRIN_INLINE void __writecr4(unsigned int Data)
struct _KEY_VALUE_BASIC_INFORMATION KEY_VALUE_BASIC_INFORMATION
#define OBJ_CASE_INSENSITIVE
#define STATUS_INVALID_PARAMETER
NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)
_In_ ULONGLONG _In_ ULONGLONG _In_ BOOLEAN Enable
#define OBJ_KERNEL_HANDLE
#define RtlMoveMemory(Destination, Source, Length)
NTSTATUS NTAPI NtVdmControl(IN ULONG ControlCode, IN PVOID ControlData)
#define SECTION_ALL_ACCESS
__INTRIN_INLINE uintptr_t __readeflags(void)
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
NTSTATUS NTAPI VdmpInitialize(PVOID ControlData)
_IRQL_requires_same_ typedef _In_ ULONG ControlCode
_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID _Out_ PREGHANDLE RegHandle
#define NtCurrentProcess()
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID * BaseAddress
#define NT_SUCCESS(StatCode)
#define EXCEPTION_EXECUTE_HANDLER
__INTRIN_INLINE void __writeeflags(uintptr_t Value)
__INTRIN_INLINE unsigned long __readcr4(void)
_In_ ULONG _In_ ULONG Offset
VOID NTAPI Ki386VdmEnablePentiumExtentions(IN BOOLEAN Enable)
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T ViewSize
void __cdecl _disable(void)
NTSYSAPI VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
#define InitializeObjectAttributes(p, n, a, r, s)
#define _SEH2_EXCEPT(...)
VOID NTAPI KeI386VdmInitialize(VOID)
#define _SEH2_GetExceptionCode()
#define _SEH2_YIELD(__stmt)
NTSYSAPI NTSTATUS NTAPI ZwOpenSection(_Out_ PHANDLE SectionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
BOOLEAN KeI386VirtualIntExtensions
NTSTATUS NTAPI VdmpStartExecution(VOID)
#define RTL_CONSTANT_STRING(s)