Boo Signature:

[DllImport("ntdll.dll", SetLastError : true)]
def NtWow64QueryInformationProcess64(
     hProcess as IntPtr,
     ProcessBasicInformation as UInt32,
     ref ProcessInformation64 as PROCESS_BASIC_INFORMATION64,
     ProcessInformationLength as UInt32,
     ref ReturnLength as UInt32) as UInt32:
def NtWow64QueryInformationProcess64(hProcess as IntPtr, ProcessBasicInformation as UInt32, ref ProcessInformation as PROCESS_BASIC_INFORMATION64, ProcessInformationLength as UInt32, ref ReturnLength as UInt32) as NTSTATUS:
     pass

User-Defined Types:

[StructLayout(LayoutKind.Sequential)]
struct PROCESS_BASIC_INFORMATION64:
     [MarshalAs(UnmanagedType.ByValArray, SizeConst : 2)]
     Reserved1 as (IntPtr)
     PebBaseAddress as UInt64
     [MarshalAs(UnmanagedType.ByValArray, SizeConst : 4)]
     Reserved2 as (IntPtr)
     [MarshalAs(UnmanagedType.ByValArray, SizeConst : 2)]
     UniqueProcessId as (IntPtr)
     [MarshalAs(UnmanagedType.ByValArray, SizeConst : 2)]
     Reserved3 as (IntPtr)

Alternative Managed API:

Do you know one? Please contribute it!

Notes:

None.

Tips & Tricks:

Please add some!

Sample Code:

Please add some!

Please edit this page!

Do you have...

• helpful tips or sample code to share for using this API in managed code?
• corrections to the existing content?
• variations of the signature you want to share?
• additional languages you want to include?

Select "Edit This Page" on the right hand toolbar and edit it! Or add new pages containing supporting types needed for this API (structures, delegates, and more).