IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
IN MEMORY_INFORMATION_CLASS MemoryInformationClass,
OUT PVOID Buffer,
IN ULONG Length,
OUT PULONG ResultLength OPTIONAL );
Function NtQueryVirtualMemory retrieves parameters of queried memory block.
ProcessHandle
HANDLE to process containing queried address in process'es address space.
BaseAddress
Virtual address to query.
MemoryInformationClass
Information class defined in MEMORY_INFORMATION_CLASS enumeration type. Currently only one class is supported.
Buffer
As long as only MemoryBasicInformation is supported, this value points to structure MEMORY_BASIC_INFORMATION, defined in <WINNT.h> and described in MS SDK.
Length
Length of Buffer, in bytes.
ResultLength
Optionally pointer to ULONG value receiving required size of Buffer, in bytes.