Untitled

ULONG NTAPI hNtQueryVirtualMemory(HANDLE ProcessHandle, PVOID BaseAddress, MEMORY_INFORMATION_CLASS MemoryInformationClass, PVOID MemoryInformation, ULONG MemoryInformationLength, PULONG ReturnLength) {

  removeJMPHook(&hiNtQueryVirtualMemory);

 

  ULONG x = NtQueryVirtualMemory(ProcessHandle, BaseAddress, MemoryInformationClass, MemoryInformation, MemoryInformationLength, ReturnLength);

 

  setJMPHook(&hiNtQueryVirtualMemory, hNtQueryVirtualMemory);

  return x;