2OOO, 5 December
NtQueryVirtualMemory
NtQueryVirtualMemory
NTSYSAPI
NTSTATUS
NTAPI
NtQueryVirtualMemory(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
IN MEMORY_INFORMATION_CLASS MemoryInformationClass,
OUT PVOID Buffer,
IN ULONG Length,
OUT PULONG ResultLength OPTIONAL );
Function NtQueryVirtualMemory retrieves parameters of
queried memory block.
- ProcessHandle HANDLE to process
containing queried address in process'es address space.
- BaseAddress Virtual address to
query.
- MemoryInformationClass Information
class defined in MEMORY_INFORMATION_CLASS
enumeration type. Currently only one class is supported.
- Buffer As long as only MemoryBasicInformation is
supported, this value points to structure
MEMORY_BASIC_INFORMATION, defined in
<WINNT.h> and described in MS SDK.
- Length Length of Buffer, in bytes.
- ResultLength Optionally pointer to
ULONG value receiving required size of Buffer, in bytes.
- Documented by:
- Tomasz Nowak
- Reactos
Requirements:
- Library: ntdll.lib
See also:
- MEMORY_BASIC_INFORMATION
- MEMORY_INFORMATION_CLASS
-
NtAllocateVirtualMemory
-
NtFreeVirtualMemory
-
NtLockVirtualMemory
-
NtProtectVirtualMemory