On Thu Oct 17 09:35:48 2024 +0000, Alexandre Julliard wrote:
Calling NtQueryInformationProcess is the right thing to do (except you'd need to check the info class).
You're right: On 64-bit, NtQueryInformationProcess behaves the same as NtWow64QueryInformationProcess64. We just need to filter out info classes other than ProcessBasicInformation. Fixed.