For ZwQueryVirtualMemory fans by ZwQueryVirtualMemory fans

/** * The ZwQueryVirtualMemory routine queries information about a region of virtual memory in a process. * * \param ProcessHandle A handle to the process whose memory information is to be queried. * \param BaseAddress A pointer to the base address of the region of pages to be queried. * \param MemoryInformationClass The type of information to be queried. * \param MemoryInformation A pointer to a buffer that receives the memory information. * \param MemoryInformationLength The size of the buffer pointed to by the MemoryInformation parameter. * \param ReturnLength A pointer to a variable that receives the number of bytes returned in the MemoryInformation buffer. * \return NTSTATUS Successful or errant status. */ _Kernel_entry_ NTSYSCALLAPI NTSTATUS NTAPI ZwQueryVirtualMemory( _In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ MEMORY_INFORMATION_CLASS MemoryInformationClass, _Out_writes_bytes_(MemoryInformationLength) PVOID MemoryInformation, _In_ SIZE_T MemoryInformationLength, _Out_opt_ PSIZE_T ReturnLength );