PPEB Struct Reference

#include <ntddk_ex.h>

Data Fields
BOOLEAN	InheritedAddressSpace
BOOLEAN	ReadImageFileExecOptions
BOOLEAN	BeingDebugged
BOOLEAN	SpareBool
HANDLE	Mutant
PVOID	ImageBaseAddress
PPEB_LDR_DATA	Ldr
struct _RTL_USER_PROCESS_PARAMETERS *	ProcessParameters
PVOID	SubSystemData
PVOID	ProcessHeap
PVOID	FastPebLock
PVOID	FastPebLockRoutine
PVOID	FastPebUnlockRoutine
ULONG	EnvironmentUpdateCount
PVOID	KernelCallbackTable
HANDLE	EventLogSection
PVOID	EventLog
PPEB_FREE_BLOCK	FreeList
ULONG	TlsExpansionCounter
PVOID	TlsBitmap
ULONG	TlsBitmapBits [2]
PVOID	ReadOnlySharedMemoryBase
PVOID	ReadOnlySharedMemoryHeap
PVOID *	ReadOnlyStaticServerData
PVOID	AnsiCodePageData
PVOID	OemCodePageData
PVOID	UnicodeCaseTableData
ULONG	NumberOfProcessors
ULONG	NtGlobalFlag
LARGE_INTEGER	CriticalSectionTimeout
ULONG	HeapSegmentReserve
ULONG	HeapSegmentCommit
ULONG	HeapDeCommitTotalFreeThreshold
ULONG	HeapDeCommitFreeBlockThreshold
ULONG	NumberOfHeaps
ULONG	MaximumNumberOfHeaps
PVOID *	ProcessHeaps
PVOID	GdiSharedHandleTable
PVOID	ProcessStarterHelper
PVOID	GdiDCAttributeList
PVOID	LoaderLock
ULONG	OSMajorVersion
ULONG	OSMinorVersion
ULONG	OSBuildNumber
ULONG	OSPlatformId
ULONG	ImageSubsystem
ULONG	ImageSubsystemMajorVersion
ULONG	ImageSubsystemMinorVersion
ULONG	ImageProcessAffinityMask
ULONG	GdiHandleBuffer [GDI_HANDLE_BUFFER_SIZE]
HMODULE	ImageBaseAddress
PPEB_LDR_DATA	LdrData
RTL_USER_PROCESS_PARAMETERS *	ProcessParameters
HANDLE	ProcessHeap
PRTL_CRITICAL_SECTION	FastPebLock
PVOID	EventLogSection
PVOID	FreeList
PRTL_BITMAP	TlsBitmap
BYTE	Spare2 [4]
ULONG	ImageSubSystem
ULONG	ImageSubSystemMajorVersion
ULONG	ImageSubSystemMinorVersion
ULONG	PostProcessInitRoutine
PRTL_BITMAP	TlsExpansionBitmap
ULONG	TlsExpansionBitmapBits [32]
ULONG	SessionId

---

Detailed Description

Definition at line 238 of file ntddk_ex.h.

---

The documentation for this struct was generated from the following files:

• drivers/storage/ide/uniata/ntddk_ex.h
• include/psdk/winternl.h