Include NtQueryInformationProcess function and its associated structures like PROCESS_BASIC_INFORMATION/PEB/RTL_USER_PROCESS_PARAMETERS

Is your feature request related to a problem? Please describe. I would request that we include NtQueryInformationProcess into Vanara.PInvoke.NTDll, and also put the associated structures for the function in suitable locations.

On a side note, given a UNICODE_STRING from the Vanara library, can I read its buffer contents from another process in an idiomatic way?

[ThomasLebrun]

Using the code available here (https://stackoverflow.com/a/16142791/1438337), I get the correct CommandLine.

I’ve noticed there is a difference between this code and your: there is an offset when reading PebBaseAddress and when getting UNICODE_STRING_WOW64 / RTL_USER_PROCESS_PARAMETERS (offseet with different values according to x32/x64): maybe that could be the issue ?

I would like, if possible, not having to do the P/Invoke import on my side and rely on your lib instead 😃

[dahall]

public static string GetString(in UNICODE_STRING us, HPROCESS hProc)
{
	using var mem = new SafeCoTaskMemString(us.MaximumLength);
	return ReadProcessMemory(hProc, us.Buffer, mem, mem.Size, out _) ? mem : string.Empty;
}