public static Process GetParentProcess(IntPtr handle)
{
ProcessUtils pbi = new ProcessUtils();
int returnLength;
int status = NtQueryInformationProcess(handle, 0, ref pbi, Marshal.SizeOf(pbi), out returnLength);
if (status != 0)
throw new Win32Exception(status);
try {
return Process.GetProcessById(pbi.InheritedFromUniqueProcessId.ToInt32());
} catch (ArgumentException) {
// not found
return null;
}
}
private static extern int NtQueryInformationProcess(IntPtr processHandle, int processInformationClass, ref ProcessUtils processInformation, int processInformationLength, out int returnLength);
private static extern int NtQueryInformationProcess(IntPtr processHandle, int processInformationClass, ref ProcessUtils processInformation, int processInformationLength, out int returnLength);