Simple question, but is there a win32 API call to retrieve if a process handle has the PROCESS_QUERY_INFORMATION access flag in order to successfully call IsWow64Process? AccessCheck Function – MSDN seems like it’d work but I’m not sure if that’s checking the same sort of flags.
Simple question, but is there a win32 API call to retrieve if a process
Share
Have a look at the
NtQueryObject()function. Set itsObjectInformationClassparameter toObjectBasicInformationto request the handle’sPUBLIC_OBJECT_BASIC_INFORMATIONstruct, which has aGrantedAccessmember of typeACCESS_MASK, which might containPROCESS_QUERY_INFORMATION.