98 PVOID pvSectionObject;
103 if (!pSection)
return NULL;
139 PVOID pvSectionObject;
144 if (!pSection)
return NULL;
231 DPRINT1(
"Failed to unmap a section @ %p Status=0x%x\n",
260 DPRINT1(
"MmUnmapViewInSessionSpace failed: 0x%lx\n",
Status);
322 *ppvSection = pSection;
354 if (!pFileView)
return NULL;
492 DPRINT1(
"MmUnmapViewInSessionSpace failed: 0x%lx\n",
Status);
NTSTATUS NTAPI MmUnmapViewInSystemSpace(IN PVOID MappedBase)
NTSTATUS NTAPI MmUnmapViewInSessionSpace(IN PVOID MappedBase)
NTSTATUS NTAPI MmMapViewInSessionSpace(IN PVOID Section, OUT PVOID *MappedBase, IN OUT PSIZE_T ViewSize)
NTSTATUS NTAPI MmUnmapViewOfSection(IN PEPROCESS Process, IN PVOID BaseAddress)
#define FILE_NON_DIRECTORY_FILE
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
#define NT_SUCCESS(StatCode)
#define FILE_ATTRIBUTE_NORMAL
#define __drv_preferredFunction(func, why)
#define __drv_allocatesMem(kind)
GLfloat GLfloat GLfloat GLfloat h
#define PROCESS_VM_OPERATION
#define OBJ_KERNEL_HANDLE
#define OBJ_CASE_INSENSITIVE
_In_ BOOL _In_ HANDLE hProcess
struct _FILEVIEW * PFILEVIEW
static OUT PIO_STATUS_BLOCK IoStatusBlock
static OUT PIO_STATUS_BLOCK OUT PVOID FileInformation
#define InitializeObjectAttributes(p, n, a, r, s)
#define MM_ALLOCATION_GRANULARITY
NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)
#define _Outptr_result_bytebuffer_(s)
#define _Post_writable_byte_size_(s)
#define _Out_writes_bytes_(s)
#define PAGE_EXECUTE_READ
#define SECTION_ALL_ACCESS
NTSYSAPI VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
#define NtCurrentProcess()
#define PAGE_EXECUTE_READWRITE
NTSTATUS NTAPI ObReferenceObjectByHandle(IN HANDLE Handle, IN ACCESS_MASK DesiredAccess, IN POBJECT_TYPE ObjectType, IN KPROCESSOR_MODE AccessMode, OUT PVOID *Object, OUT POBJECT_HANDLE_INFORMATION HandleInformation OPTIONAL)
void * EngAllocMem(int zero, unsigned long size, int tag=0)
NTSTATUS NTAPI MmMapViewInSystemSpace(IN PVOID SectionObject, OUT PVOID *MappedBase, IN OUT PSIZE_T ViewSize)
NTSTATUS NTAPI MmMapViewOfSection(IN PVOID SectionObject, IN PEPROCESS Process, IN OUT PVOID *BaseAddress, IN ULONG_PTR ZeroBits, IN SIZE_T CommitSize, IN OUT PLARGE_INTEGER SectionOffset OPTIONAL, IN OUT PSIZE_T ViewSize, IN SECTION_INHERIT InheritDisposition, IN ULONG AllocationType, IN ULONG Protect)
NTSTATUS NTAPI MmCreateSection(OUT PVOID *Section, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL, IN PLARGE_INTEGER MaximumSize, IN ULONG SectionPageProtection, IN ULONG AllocationAttributes, IN HANDLE FileHandle OPTIONAL, IN PFILE_OBJECT FileObject OPTIONAL)
LARGE_INTEGER LastWriteTime
#define RtlZeroMemory(Destination, Length)
PVOID NTAPI EngCreateSectionHack(_In_ ULONG fl, _In_ SIZE_T cjSize, _In_ ULONG ulTag)
HANDLE APIENTRY EngLoadModule(_In_ LPWSTR pwsz)
HANDLE APIENTRY EngLoadModuleForWrite(_In_ LPWSTR pwsz, _In_ ULONG cjSizeOfModule)
VOID NTAPI EngUnmapSectionView(_In_ PVOID pvBits, _In_ ULONG cjOffset, _In_ HANDLE hSecure)
PVOID NTAPI EngCreateSection(_In_ ULONG fl, _In_ SIZE_T cjSize, _In_ ULONG ulTag)
VOID APIENTRY EngUnmapFontFileFD(_In_ ULONG_PTR iFile)
VOID APIENTRY EngFreeModule(_In_ _Post_invalid_ HANDLE h)
BOOL APIENTRY EngUnmapFile(_In_ ULONG_PTR iFile)
BOOL APIENTRY EngFreeSectionMem(_In_opt_ PVOID pvSection, _In_opt_ PVOID pvMappedBase)
PVOID NTAPI EngMapSectionView(_In_ HANDLE hSection, _In_ SIZE_T cjSize, _In_ ULONG cjOffset, _Out_ PHANDLE phSecure)
HANDLE ghSystem32Directory
_Check_return_ PFILEVIEW NTAPI EngLoadModuleEx(_In_z_ LPWSTR pwsz, _In_ ULONG cjSizeOfModule, _In_ FLONG fl)
VOID APIENTRY EngUnmapFontFile(_In_ ULONG_PTR iFile)
_In_ ULONG _In_ ULONG ulTag
_Check_return_ _Outptr_result_bytebuffer_ pcjBuf PULONG * ppjBuf
_Check_return_ _Out_ PULONG pulSize
_Check_return_ _Outptr_result_bytebuffer_ pcjBuf PULONG _Out_ ULONG * pcjBuf
ENGAPI HANDLE APIENTRY EngSecureMem(_In_reads_bytes_(cjLength) PVOID Address, _In_ ULONG cjLength)
ENGAPI VOID APIENTRY EngUnsecureMem(_In_ HANDLE hSecure)
_In_ const BITMAPINFO _In_ UINT _In_opt_ HANDLE hSection
#define ObDereferenceObject
#define PsGetCurrentProcess