#ifndef _NTMMAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
typedef enum _MEMORY_INFORMATION_CLASS
{
MemoryBasicInformation, // q: MEMORY_BASIC_INFORMATION
MemoryWorkingSetInformation, // q: MEMORY_WORKING_SET_INFORMATION
MemoryMappedFilenameInformation, // q: UNICODE_STRING
MemoryRegionInformation, // q: MEMORY_REGION_INFORMATION
MemoryWorkingSetExInformation, // q: MEMORY_WORKING_SET_EX_INFORMATION // since VISTA
MemorySharedCommitInformation, // q: MEMORY_SHARED_COMMIT_INFORMATION // since WIN8
MemoryImageInformation, // q: MEMORY_IMAGE_INFORMATION
MemoryRegionInformationEx, // q: MEMORY_REGION_INFORMATION
MemoryPrivilegedBasicInformation, // q: MEMORY_BASIC_INFORMATION
MemoryEnclaveImageInformation, // q: MEMORY_ENCLAVE_IMAGE_INFORMATION // since REDSTONE3
MemoryBasicInformationCapped, // q: 10
MemoryPhysicalContiguityInformation, // q: MEMORY_PHYSICAL_CONTIGUITY_INFORMATION // since 20H1
MemoryBadInformation, // q: since WIN11
MemoryBadInformationAllProcesses, // qs: not implemented // since 22H1
MemoryImageExtensionInformation, // q: MEMORY_IMAGE_EXTENSION_INFORMATION // since 24H2
MaxMemoryInfoClass
} MEMORY_INFORMATION_CLASS;
View code on GitHub
// ntifs.h
typedef enum _MEMORY_INFORMATION_CLASS {
MemoryBasicInformation
} MEMORY_INFORMATION_CLASS;
View the official Windows Driver Kit DDI reference
No description available.
Defines classes of memory information that can be retrieved by using the ZwQueryVirtualMemory function.
MemoryBasicInformation
Memory information described in the MEMORY_BASIC_INFORMATION structure will be retrieved.
Currently, only the MemoryBasicInformation value is supported for use with the ZwQueryVirtualMemory routine.
This enumeration is documented in Windows Driver Kit.
Enumeration type MEMORY_INFORMATION_CLASS
specify type of information returned in a call to NtQueryVirtualMemory
function. Currently only one class is defined.
Result buffer contains structure MEMORY_BASIC_INFORMATION
.