#ifndef _NTMMAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
typedef enum _MEMORY_INFORMATION_CLASS
{
MemoryBasicInformation, // q: MEMORY_BASIC_INFORMATION
MemoryWorkingSetInformation, // q: MEMORY_WORKING_SET_INFORMATION
MemoryMappedFilenameInformation, // q: UNICODE_STRING
MemoryRegionInformation, // q: MEMORY_REGION_INFORMATION
MemoryWorkingSetExInformation, // q: MEMORY_WORKING_SET_EX_INFORMATION // since VISTA
MemorySharedCommitInformation, // q: MEMORY_SHARED_COMMIT_INFORMATION // since WIN8
MemoryImageInformation, // q: MEMORY_IMAGE_INFORMATION
MemoryRegionInformationEx, // q: MEMORY_REGION_INFORMATION
MemoryPrivilegedBasicInformation, // q: MEMORY_BASIC_INFORMATION
MemoryEnclaveImageInformation, // q: MEMORY_ENCLAVE_IMAGE_INFORMATION // since REDSTONE3
MemoryBasicInformationCapped, // q: 10
MemoryPhysicalContiguityInformation, // q: MEMORY_PHYSICAL_CONTIGUITY_INFORMATION // since 20H1
MemoryBadInformation, // q: since WIN11
MemoryBadInformationAllProcesses, // qs: not implemented // since 22H1
MemoryImageExtensionInformation, // q: MEMORY_IMAGE_EXTENSION_INFORMATION // since 24H2
MaxMemoryInfoClass
} MEMORY_INFORMATION_CLASS;
View code on GitHub// ntifs.h
typedef enum _MEMORY_INFORMATION_CLASS {
MemoryBasicInformation
} MEMORY_INFORMATION_CLASS;
View the official Windows Driver Kit DDI referenceNo description available.
Defines classes of memory information that can be retrieved by using the ZwQueryVirtualMemory function.
MemoryBasicInformationMemory information described in the MEMORY_BASIC_INFORMATION structure will be retrieved.
Currently, only the MemoryBasicInformation value is supported for use with the ZwQueryVirtualMemory routine.
This enumeration is documented in Windows Driver Kit.
Enumeration type MEMORY_INFORMATION_CLASS specify type of information returned in a call to NtQueryVirtualMemory function. Currently only one class is defined.
Result buffer contains structure MEMORY_BASIC_INFORMATION.