The VirtualQueryEx function provides information about a range of pages within the virtual address space of a specified process.
DWORD VirtualQueryEx(
HANDLE hProcess, |
// handle of process |
LPCVOID lpAddress, |
// address of region |
PMEMORY_BASIC_INFORMATION lpBuffer, |
// address of information buffer |
DWORD dwLength |
// size of buffer |
); |
The return value is the actual number of bytes returned in the information buffer.
VirtualQueryEx provides information about a region of consecutive pages beginning at a specified address that share the following attributes:
The VirtualQueryEx function determines the attributes of the first page in the region and then scans subsequent pages until it scans the entire range of pages, or until it encounters a page with a nonmatching set of attributes. The function returns the attributes and the size, in bytes, of the region of pages with matching attributes. For example, if there is a 40 megabyte (MB) region of free memory, and VirtualQueryEx is called on a page that is 10 MB into the region, the function will obtain a state of MEM_FREE and a size of 30 MB.
This function is identical to the VirtualQuery function, except that it enables access to information about memory in a specified process.
GetSystemInfo, MEMORY_BASIC_INFORMATION, VirtualAlloc, VirtualProtectEx, VirtualQuery