@msdn=http://search.microsoft.com/search/results.aspx?qu=$$$ @pinvoke=http://pinvoke.net/$$$.htm Summary: The NtCreateSection routine creates a section object. !!!!C# Signature: [DllImport("ntdll.dll", SetLastError = true, ExactSpelling = true)] static extern UInt32 NtCreateSection( ref IntPtr SectionHandle, UInt32 DesiredAccess, IntPtr ObjectAttributes, ref UInt32 MaximumSize, UInt32 SectionPageProtection, UInt32 AllocationAttributes, IntPtr FileHandle); !!!!Boo Signature: [DllImport("ntdll.dll")] def NtCreateSection(ref SectionHandle as IntPtr, DesiredAccess as UInt32, ObjectAttributes as IntPtr, ref MaximumSize as LARGE_INTEGER, SectionPageProtection as UInt32, AllocationAttributes as UInt32, FileHandle as IntPtr) as UInt32: pass !!!!User-Defined Types: [StructLayout(LayoutKind.Explicit, Size:8)] struct LARGE_INTEGER: [FieldOffset(0)]QuadPart as UInt64 [FieldOffset(0)]LowPart as UInt32 [FieldOffset(4)]HighPart as UInt32 !!!!Alternative Managed API: Do you know one? Please contribute it! !!!!Notes: None. !!!!Tips & Tricks: Please add some! !!!!C# Code: //Below is the sample code for creating Section with RWX permissions. IntPtr SectionHandle = IntPtr.Zero; uint MaximumSize = 2048; private static uint SEC_COMMIT = 0x08000000; private static uint SECTION_MAP_WRITE = 0x0002; private static uint SECTION_MAP_READ = 0x0004; private static uint SECTION_MAP_EXECUTE = 0x0008; private static uint SECTION_ALL_ACCESS = SECTION_MAP_WRITE | SECTION_MAP_READ | SECTION_MAP_EXECUTE; uint res = NtCreateSection(ref SectionHandle, SECTION_ALL_ACCESS, IntPtr.Zero, ref MaximumSize, EXECUTE_READ_WRITE, SEC_COMMIT,IntPtr.Zero); // res = 0 indicates a successful creation of section Documentation: NtCreateSection@msdn on MSDN
Edit ntdll.NtCreateSec...
You do not have permission to change this page. If you feel this is in error, please send feedback with the contact link on the main page.