Lines Matching refs:RoutineName
4302 UNICODE_STRING RoutineName;
4304 RtlInitUnicodeString(&RoutineName, L"ObGetObjectType");
4305 g_pfnObGetObjectType = (PFNOBGETOBJECTTYPE)MmGetSystemRoutineAddress(&RoutineName);
4307 RtlInitUnicodeString(&RoutineName, L"ObRegisterCallbacks");
4308 g_pfnObRegisterCallbacks = (PFNOBREGISTERCALLBACKS)MmGetSystemRoutineAddress(&RoutineName);
4310 RtlInitUnicodeString(&RoutineName, L"ObUnRegisterCallbacks");
4311 g_pfnObUnRegisterCallbacks = (PFNOBUNREGISTERCALLBACKS)MmGetSystemRoutineAddress(&RoutineName);
4313 RtlInitUnicodeString(&RoutineName, L"PsSetCreateProcessNotifyRoutineEx");
4314 g_pfnPsSetCreateProcessNotifyRoutineEx = (PFNPSSETCREATEPROCESSNOTIFYROUTINEEX)MmGetSystemRoutineAddress(&RoutineName);
4316 RtlInitUnicodeString(&RoutineName, L"PsReferenceProcessFilePointer");
4317 g_pfnPsReferenceProcessFilePointer = (PFNPSREFERENCEPROCESSFILEPOINTER)MmGetSystemRoutineAddress(&RoutineName);
4319 RtlInitUnicodeString(&RoutineName, L"PsIsProtectedProcessLight");
4320 g_pfnPsIsProtectedProcessLight = (PFNPSISPROTECTEDPROCESSLIGHT)MmGetSystemRoutineAddress(&RoutineName);
4322 RtlInitUnicodeString(&RoutineName, L"ZwAlpcCreatePort");
4323 g_pfnZwAlpcCreatePort = (PFNZWALPCCREATEPORT)MmGetSystemRoutineAddress(&RoutineName);
4325 RtlInitUnicodeString(&RoutineName, L"ZwQueryVirtualMemory"); /* Yes, using Zw version here. */
4326 g_pfnNtQueryVirtualMemory = (PFNNTQUERYVIRTUALMEMORY)MmGetSystemRoutineAddress(&RoutineName);