Quote Originally Posted by Arianax View Post
The documentation advises against using that function because it changes with updates to the OS so its functionality cannot be guaranteed.
I generally agree about not using undocumented apis, but I make an exception in this case (in fact, ntquerysysteminformation is the only undocumented api that I have used or recommend using). I've used it since about 1996 and it's unlikely to change since the Windows task manager apps relies on it.