I know that Windows processes are mapped in ram by loading the PE header and then the following sections (.text .data etc..) and that I can read them with ReadProcessMemory, but what's the point of VirtualQueryEx? I think it should read one page at a time (the memory pages used by the paging system) but I don't see how memory pages are related to the PE sections.. what if I wanted to scan through just the .text sections, should I use VirtualQueryEx too or the pages aren't related to their contents?