NtQuerySection
NtQuerySection
NTSYSAPI
NTSTATUS
NTAPI
NtQuerySection(
IN HANDLE SectionHandle,
IN SECTION_INFORMATION_CLASS InformationClass,
OUT PVOID InformationBuffer,
IN ULONG InformationBufferSize,
OUT PULONG ResultLength OPTIONAL );
InformationClass
Use one of following:
SectionBasicInformation // Result is SECTION_BASIC_INFORMATION structure
SectionImageInformation // Result is SECTION_IMAGE_INFORMATION structure
SectionImageInformation Are avaiable only for file-based sections.
Requirements:
Library: ntdll.lib
See also:
NtCreateProcess
NtCreateSection
NtOpenSection
SECTION_BASIC_INFORMATION
SECTION_IMAGE_INFORMATION