ZwQueryVirtualMemory

function ZwQueryVirtualMemory(

  ProcessHandle: HANDLE;

  BaseAddress: PVOID;

  MemoryInformationClass: MEMORY_INFORMATION_CLASS;

  MemoryInformation: PVOID;

  MemoryInformationLength: ULONG;

  ReturnLength: PULONG

):NTSTATUS;