brown wrote: > NTSTATUS ns = NtQuerySystemInformation ( SystemProcessInformation, pspi, dSize, NULL ); > You didn't read what I said - that function you trying to use is not implemented (that class in not implemented - just a stub). And I even linked it so you can see. And I told you to use other API available from kernel32.