From dd89bb8ad4fe184a34b5dbdda237e640fc82121b Mon Sep 17 00:00:00 2001 From: midipix Date: Mon, 27 Jul 2015 04:01:18 -0400 Subject: entered advanced internal development stage. --- src/section/ntapi_tt_get_section_name.c | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 src/section/ntapi_tt_get_section_name.c (limited to 'src/section') diff --git a/src/section/ntapi_tt_get_section_name.c b/src/section/ntapi_tt_get_section_name.c new file mode 100644 index 0000000..744bfe7 --- /dev/null +++ b/src/section/ntapi_tt_get_section_name.c @@ -0,0 +1,32 @@ +/********************************************************/ +/* ntapi: Native API core library */ +/* Copyright (C) 2013,2014,2015 Z. Gilboa */ +/* Released under GPLv2 and GPLv3; see COPYING.NTAPI. */ +/********************************************************/ + +#include +#include +#include +#include +#include "ntapi_impl.h" + +int32_t __stdcall __ntapi_tt_get_section_name( + __in void * addr, + __out nt_mem_sec_name * buffer, + __in uint32_t buffer_size) +{ + size_t len; + + /* init buffer */ + buffer->section_name.strlen = 0; + buffer->section_name.maxlen = (uint16_t)(buffer_size - sizeof(nt_unicode_string)); + buffer->section_name.buffer = buffer->section_name_buffer; + + return __ntapi->zw_query_virtual_memory( + NT_CURRENT_PROCESS_HANDLE, + addr, + NT_MEMORY_SECTION_NAME, + buffer, + buffer_size, + &len); +} -- cgit v1.2.3