NtAllocateVirtualMemory

Shellcode Loader

Allocate memory for executing shellcode later.

Overview

Alokasi dengan NtAllocateVirtualMemory dan dealokasi dengan NtFreeVirtualMemory.

NTSTATUS NtAllocateVirtualMemory (HANDLE ProcessHandle, PVOID BaseAddress, ULONG ZeroBits, PULONG RegionSize, ULONG AllocationType, ULONG Protect);

NTSTATUS NtProtectVirtualMemory (HANDLE ProcessHandle, PVOID * BaseAddress, PULONG NumberOfBytesToProtect, ULONG NewAccessProtection, PULONG OldAccessProtection);

NTSTATUS NtFreeVirtualMemory (HANDLE ProcessHandle, PVOID * BaseAddress, PULONG RegionSize, ULONG FreeType);

Reference

• NTInternals NtAllocateVirtualMemory
• NTInternals NtProtectVirtualMemory
• NTInternals NtFreeVirtualMemory