EPROCESS Struct Reference

#include <pstypes.h>

Data Fields
KPROCESS	Pcb
EX_PUSH_LOCK	ProcessLock
LARGE_INTEGER	CreateTime
LARGE_INTEGER	ExitTime
EX_RUNDOWN_REF	RundownProtect
HANDLE	UniqueProcessId
LIST_ENTRY	ActiveProcessLinks
SIZE_T	QuotaUsage [3]
SIZE_T	QuotaPeak [3]
SIZE_T	CommitCharge
SIZE_T	PeakVirtualSize
SIZE_T	VirtualSize
LIST_ENTRY	SessionProcessLinks
PVOID	DebugPort
union {
PVOID   ExceptionPortData
ULONG   ExceptionPortValue
UCHAR   ExceptionPortState:3
};
PHANDLE_TABLE	ObjectTable
EX_FAST_REF	Token
PFN_NUMBER	WorkingSetPage
EX_PUSH_LOCK	AddressCreationLock
PETHREAD	RotateInProgress
PETHREAD	ForkInProgress
ULONG_PTR	HardwareTrigger
PMM_AVL_TABLE	PhysicalVadRoot
PVOID	CloneRoot
PFN_NUMBER	NumberOfPrivatePages
PFN_NUMBER	NumberOfLockedPages
PVOID *	Win32Process
struct _EJOB *	Job
PVOID	SectionObject
PVOID	SectionBaseAddress
PEPROCESS_QUOTA_BLOCK	QuotaBlock
PPAGEFAULT_HISTORY	WorkingSetWatch
PVOID	Win32WindowStation
HANDLE	InheritedFromUniqueProcessId
PVOID	LdtInformation
PVOID	VadFreeHint
PVOID	VdmObjects
PVOID	DeviceMap
PVOID	EtwDataSource
PVOID	FreeTebHint
union {
HARDWARE_PTE   PageDirectoryPte
ULONGLONG   Filler
};
PVOID	Session
CHAR	ImageFileName [16]
LIST_ENTRY	JobLinks
PVOID	LockedPagesList
LIST_ENTRY	ThreadListHead
PVOID	SecurityPort
PVOID	PaeTop
ULONG	ActiveThreads
ULONG	ImagePathHash
ULONG	DefaultHardErrorProcessing
NTSTATUS	LastThreadExitStatus
struct _PEB *	Peb
EX_FAST_REF	PrefetchTrace
LARGE_INTEGER	ReadOperationCount
LARGE_INTEGER	WriteOperationCount
LARGE_INTEGER	OtherOperationCount
LARGE_INTEGER	ReadTransferCount
LARGE_INTEGER	WriteTransferCount
LARGE_INTEGER	OtherTransferCount
SIZE_T	CommitChargeLimit
SIZE_T	CommitChargePeak
PVOID	AweInfo
SE_AUDIT_PROCESS_CREATION_INFO	SeAuditProcessCreationInfo
MMSUPPORT	Vm
LIST_ENTRY	MmProcessLinks
ULONG	ModifiedPageCount
union {
struct {
ULONG   JobNotReallyActive:1
ULONG   AccountingFolded:1
ULONG   NewProcessReported:1
ULONG   ExitProcessReported:1
ULONG   ReportCommitChanges:1
ULONG   LastReportMemory:1
ULONG   ReportPhysicalPageChanges:1
ULONG   HandleTableRundown:1
ULONG   NeedsHandleRundown:1
ULONG   RefTraceEnabled:1
ULONG   NumaAware:1
ULONG   ProtectedProcess:1
ULONG   DefaultPagePriority:3
ULONG   ProcessDeleteSelf:1
ULONG   ProcessVerifierTarget:1
}
ULONG   Flags2
};
union {
struct {
ULONG   CreateReported:1
ULONG   NoDebugInherit:1
ULONG   ProcessExiting:1
ULONG   ProcessDelete:1
ULONG   Wow64SplitPages:1
ULONG   VmDeleted:1
ULONG   OutswapEnabled:1
ULONG   Outswapped:1
ULONG   ForkFailed:1
ULONG   Wow64VaSpace4Gb:1
ULONG   AddressSpaceInitialized:2
ULONG   SetTimerResolution:1
ULONG   BreakOnTermination:1
ULONG   DeprioritizeViews:1
ULONG   WriteWatch:1
ULONG   ProcessInSession:1
ULONG   OverrideAddressSpace:1
ULONG   HasAddressSpace:1
ULONG   LaunchPrefetched:1
ULONG   InjectInpageErrors:1
ULONG   VmTopDown:1
ULONG   ImageNotifyDone:1
ULONG   PdeUpdateNeeded:1
ULONG   VdmAllowed:1
ULONG   SmapAllowed:1
ULONG   ProcessInserted:1
ULONG   DefaultIoPriority:3
ULONG   SparePsFlags1:2
}
ULONG   Flags
};
NTSTATUS	ExitStatus
USHORT	Spare7
union {
struct {
UCHAR   SubSystemMinorVersion
UCHAR   SubSystemMajorVersion
}
USHORT   SubSystemVersion
};
UCHAR	PriorityClass
MM_AVL_TABLE	VadRoot
ULONG	Cookie

---

Detailed Description

Definition at line 1059 of file pstypes.h.

---

The documentation for this struct was generated from the following file:

• include/ndk/pstypes.h