PsApiGetMappedFileName Method

Checks whether the specified address is within a memory-mapped file in the address space of the specified process. If so, the function returns the name of the memory-mapped file.

Definition

Namespace: DevCase.Win32.NativeMethods
Assembly: DevCase.net48 (in DevCase.net48.dll) Version: 6.0.0.0 (6.0)
XMLNS for XAML: Not mapped to an xmlns.
[DllImportAttribute("PsApi.dll", CharSet = CharSet.Auto, BestFitMapping = false, 
	ThrowOnUnmappableChar = true, SetLastError = true)]
public static uint GetMappedFileName(
	IntPtr hProcess,
	IntPtr address,
	StringBuilder filename,
	uint size
)

Parameters

hProcess  IntPtr
A handle to the process.

The handle must have the QueryInformation and VirtualMemoryRead access right.

address  IntPtr
The address to be verified.
filename  StringBuilder
A pointer to the buffer that receives the name of the memory-mapped file to which the address specified by lpv belongs.
size  UInt32
The size of the filename buffer, in characters.

Return Value

UInt32
If the function succeeds, the return value specifies the length of the string copied to the buffer, in characters.

If the function fails, the return value is zero

Remarks

See Also