SECTION_INFORMATION_CLASS - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
#ifndef _NTMMAPI_H

//
// Sections
//

// On x64 NtQuerySection accepts classes 0..3 only.
// Class 4 is implemented by the internal MmGetSectionInformation helper,
// but is rejected by NtQuerySection. Retain it for other implementations.
typedef enum _SECTION_INFORMATION_CLASS
{
    SectionBasicInformation,            // q; SECTION_BASIC_INFORMATION
    SectionImageInformation,            // q; SECTION_IMAGE_INFORMATION
    SectionRelocationInformation,       // q; SECTION_RELOCATION_INFORMATION // since WIN7
    SectionOriginalBaseInformation,     // q; SECTION_ORIGINAL_BASE_INFORMATION // since REDSTONE
    SectionInternalImageInformation,    // q; SECTION_INTERNAL_IMAGE_INFORMATION // since REDSTONE2
    MaxSectionInfoClass
} SECTION_INFORMATION_CLASS;

#endif

View code on GitHub

NtDoc

No description available.

Edit description on GitHub

NTinternals.net (undocumented.ntinternals.net)

Enumeration type SECTION_INFORMATION_CLASS is used in a call to NtQuerySection function.

This type can be one of:

SectionBasicInformation

Result buffer contains structure SECTION_BASIC_INFORMATION. Buffer size should be set to 0x0C.

SectionImageInformation

Result buffer contains structure SECTION_IMAGE_INFORMATION. Buffer size should be set to 0x28. This information class is accessible only where section was created with HANDLE to open executable file (see NtCreateSection for details).

Documented by

See also

Edit description on GitHub