NtAllocateVirtualMemory Done, but don't update size of *ptr

the blue arrow are the process and is equal at CurrentProcess.
the green arrow are the ptr address, and the red signal are the size of process_parameters.

process_parameters is the ptr at we want allocate but don't update the size.

what i am doing Wrong?

this is the process_parameters statment:

let mut process_parameters: PRTL_USER_PROCESS_PARAMETERS =
zeroed::<PRTL_USER_PROCESS_PARAMETERS>();

I update the let allocate= NtAllocateVirtualMemory();

let status= NtAllocateVirtualMemory(); and then check !NT_SUCCESS and Still with Success!

This topic was automatically closed 90 days after the last reply. We invite you to open a new topic if you have further questions or comments.