Function GetProcessPeb

WinSysCore/Processes.cpp:26–32

}

static bool GetProcessPeb(HANDLE hProcess, PPEB peb) {
	PROCESS_BASIC_INFORMATION info;
	if(!NT_SUCCESS(::NtQueryInformationProcess(hProcess,ProcessBasicInformation,&info,sizeof(info),nullptr)))
		return false;

	return ::ReadProcessMemory(hProcess, info.PebBaseAddress, peb, sizeof(*peb), nullptr);
}

static bool GetExtendedInfo(HANDLE hProcess, PROCESS_EXTENDED_BASIC_INFORMATION* info) {
	ULONG len;