Function GetProcessPlatform

ReClass/Utils.cpp:311–352

}

int GetProcessPlatform( HANDLE hProcess )
{
    PVOID Wow64Info;
    NTSTATUS Status;

	if (hProcess == (HANDLE)((LONG_PTR)-1))
	{
		#if defined(_M_X64)
        return ProcessPlatformX64;
        #else
        return ProcessPlatformX86;
		#endif
	}

	switch (Utils::GetProcessorArchitecture( ))
	{
	case PROCESSOR_ARCHITECTURE_INTEL:
		return ProcessPlatformX86;
	case PROCESSOR_ARCHITECTURE_AMD64:
		//check on 64-bit platforms
        Status = ntdll::NtQueryInformationProcess( hProcess, ProcessWow64Information, &Wow64Info, sizeof( Wow64Info ), NULL );
		if (NT_SUCCESS( Status ))
		{
            #if defined(_M_X64)
            return (Wow64Info != NULL) ? ProcessPlatformX86 : ProcessPlatformX64;      	
			#else
            return (Wow64Info == NULL) ? ProcessPlatformX64 : ProcessPlatformX86;
			#endif
		}

        #if defined(_M_X64)
        return ProcessPlatformX64;      
		#else
        return ProcessPlatformX86;
		#endif

    //case PROCESSOR_ARCHITECTURE_IA64:
    //case PROCESSOR_ARCHITECTURE_ALPHA64:
	}

	return ProcessPlatformNotSupported;
}

HANDLE NtCreateThreadEx( HANDLE hProcess, LPVOID lpRemoteThreadStart, LPVOID lpParam, DWORD createFlags, DWORD* threadId )
{