How can I find if an arbitrary process is running under wow64?

Posted by LCC on Stack Overflow See other posts from Stack Overflow or by LCC
Published on 2010-06-02T22:46:38Z Indexed on 2010/06/02 22:54 UTC
Read the original article Hit count: 132

Filed under:
|

I need a tool which will discover whether an arbitrary process is running in x86 or x64 mode on a machine. I need to do this programatically from C++, based on a process ID.

There has to be some way to do this (as you can clearly see it from the task manager). Does anyone know of a windows api that will tell you, given a process ID, whether the application is running under wow64?

Another approach would be to figure out, based on the process id, the executable name/path that is running and try to read the PE headers out of the file. Does anyone have a code snippet that would accomplish that?

© Stack Overflow or respective owner

Related posts about c++

Related posts about Windows