The iswow64process function determines the number of program bits

IsWow64Process The return value is TRUE&FALSE, stay MSDN The explanation and definition are as follows ：

BOOL IsWow64Process( 
 HANDLE hProcess,  // Target process handle 
 PBOOL Wow64Process // Inverse value TRUE&FALSE
 );

The IsWow64Process function determines whether the specified process is running under WOW64.

in other words IsWow64Process Function is used to determine whether the specified process is in WOW64 Run in a virtual environment . In fact, this function does not have the function of judging the number of digits in essence . However, through the analysis of a given function example, it is not difficult for us to get a popular explanation of the return value of the function .

Therefore, the true number of bits of the target cannot be obtained only according to the return value , We might as well add the judgment of system digits , Make two comparisons , It's easy to get the number of target processes ！ use GetNativeSystemInfo Function to judge the number of bits of the system, which will not be repeated here , Here's how to use IsWow64Process Function to judge the target process ！

DWORD IsTargetArchitecture()
{
    
	BOOL IsWow64;
	DWORD TargetArchitecture = X86;
	HANDLE ProcessHandle;

	if (!IsWow64Process(ProcessHandle, &IsWow64))  // Determine whether the function 
	{
    
		return FALSE;
	}
	if (IsWow64) // really 32 position 
	{
    
		TargetArchitecture = X86;  // Target process bits 
	}
	else {
    
		SYSTEM_INFO SystemInfo = {
     0 };
		GetNativeSystemInfo(&SystemInfo);  // Get system information 
		if (SystemInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_AMD64) // Get the number of bits in the system 64
			TargetArchitecture = X64;
		else if (SystemInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_INTEL)// Get the number of bits in the system 32
			TargetArchitecture = X86;
		else
			return FALSE;
	}
	return TargetArchitecture;
}