pstypes.h File Reference

#include <umtypes.h>
#include <ldrtypes.h>
#include <mmtypes.h>
#include <obtypes.h>
#include <rtltypes.h>
#include <extypes.h>
#include <setypes.h>
#include "peb_teb.h"
#include <pshpack1.h>
#include <poppack.h>

Include dependency graph for pstypes.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_PEB_FREE_BLOCK
struct	_INITIAL_PEB
struct	_INITIAL_TEB
struct	_TEB_ACTIVE_FRAME_CONTEXT
struct	_TEB_ACTIVE_FRAME_CONTEXT_EX
struct	_TEB_ACTIVE_FRAME
struct	_TEB_ACTIVE_FRAME_EX
struct	_CLIENT_ID32
struct	_CLIENT_ID64
struct	_PROCESS_PRIORITY_CLASS
struct	_PROCESS_FOREGROUND_BACKGROUND
struct	_APPHELP_CACHE_SERVICE_LOOKUP
struct	_THREAD_BASIC_INFORMATION
struct	_JOB_SET_ARRAY
struct	_EPROCESS_QUOTA_ENTRY
struct	_EPROCESS_QUOTA_BLOCK
struct	_PAGEFAULT_HISTORY
struct	_PS_IMPERSONATION_INFORMATION
struct	_TERMINATION_PORT
struct	_PSP_RATE_APC
struct	_ETHREAD
struct	_EPROCESS
struct	_PS_JOB_TOKEN_FILTER
struct	_EJOB
struct	_JOBOBJECT_BASIC_ACCOUNTING_INFORMATION
struct	_JOBOBJECT_BASIC_LIMIT_INFORMATION
struct	_JOBOBJECT_BASIC_PROCESS_ID_LIST
struct	_JOBOBJECT_BASIC_UI_RESTRICTIONS
struct	_JOBOBJECT_SECURITY_LIMIT_INFORMATION
struct	_JOBOBJECT_END_OF_JOB_TIME_INFORMATION
struct	_JOBOBJECT_ASSOCIATE_COMPLETION_PORT
struct	JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
struct	_JOBOBJECT_EXTENDED_LIMIT_INFORMATION
struct	_WIN32_POWEREVENT_PARAMETERS
struct	_WIN32_POWERSTATE_PARAMETERS
struct	_WIN32_JOBCALLOUT_PARAMETERS
struct	_WIN32_OPENMETHOD_PARAMETERS
struct	_WIN32_OKAYTOCLOSEMETHOD_PARAMETERS
struct	_WIN32_CLOSEMETHOD_PARAMETERS
struct	_WIN32_DELETEMETHOD_PARAMETERS
struct	_WIN32_PARSEMETHOD_PARAMETERS
struct	_WIN32_CALLOUTS_FPNS

Macros
#define	USER_SHARED_DATA   (0x7FFE0000)
#define	FLG_STOP_ON_EXCEPTION   0x00000001
#define	FLG_SHOW_LDR_SNAPS   0x00000002
#define	FLG_DEBUG_INITIAL_COMMAND   0x00000004
#define	FLG_STOP_ON_HUNG_GUI   0x00000008
#define	FLG_HEAP_ENABLE_TAIL_CHECK   0x00000010
#define	FLG_HEAP_ENABLE_FREE_CHECK   0x00000020
#define	FLG_HEAP_VALIDATE_PARAMETERS   0x00000040
#define	FLG_HEAP_VALIDATE_ALL   0x00000080
#define	FLG_APPLICATION_VERIFIER   0x00000100
#define	FLG_POOL_ENABLE_TAGGING   0x00000400
#define	FLG_HEAP_ENABLE_TAGGING   0x00000800
#define	FLG_USER_STACK_TRACE_DB   0x00001000
#define	FLG_KERNEL_STACK_TRACE_DB   0x00002000
#define	FLG_MAINTAIN_OBJECT_TYPELIST   0x00004000
#define	FLG_HEAP_ENABLE_TAG_BY_DLL   0x00008000
#define	FLG_DISABLE_STACK_EXTENSION   0x00010000
#define	FLG_ENABLE_CSRDEBUG   0x00020000
#define	FLG_ENABLE_KDEBUG_SYMBOL_LOAD   0x00040000
#define	FLG_DISABLE_PAGE_KERNEL_STACKS   0x00080000
#define	FLG_ENABLE_SYSTEM_CRIT_BREAKS   0x00100000
#define	FLG_HEAP_DISABLE_COALESCING   0x00200000
#define	FLG_ENABLE_CLOSE_EXCEPTIONS   0x00400000
#define	FLG_ENABLE_EXCEPTION_LOGGING   0x00800000
#define	FLG_ENABLE_HANDLE_TYPE_TAGGING   0x01000000
#define	FLG_HEAP_PAGE_ALLOCS   0x02000000
#define	FLG_DEBUG_INITIAL_COMMAND_EX   0x04000000
#define	FLG_VALID_BITS   0x07FFFFFF
#define	PROCESS_CREATE_FLAGS_BREAKAWAY   0x00000001
#define	PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT   0x00000002
#define	PROCESS_CREATE_FLAGS_INHERIT_HANDLES   0x00000004
#define	PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE   0x00000008
#define	PROCESS_CREATE_FLAGS_LARGE_PAGES   0x00000010
#define	PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS   PROCESS_CREATE_FLAGS_LARGE_PAGES
#define	PROCESS_CREATE_FLAGS_LEGAL_MASK
#define	PROCESS_PRIORITY_CLASS_INVALID   0
#define	PROCESS_PRIORITY_CLASS_IDLE   1
#define	PROCESS_PRIORITY_CLASS_NORMAL   2
#define	PROCESS_PRIORITY_CLASS_HIGH   3
#define	PROCESS_PRIORITY_CLASS_REALTIME   4
#define	PROCESS_PRIORITY_CLASS_BELOW_NORMAL   5
#define	PROCESS_PRIORITY_CLASS_ABOVE_NORMAL   6
#define	PROCESS_PRIORITY_IDLE   3
#define	PROCESS_PRIORITY_NORMAL   8
#define	PROCESS_PRIORITY_NORMAL_FOREGROUND   9
#define	MEMORY_PRIORITY_BACKGROUND   0
#define	MEMORY_PRIORITY_UNKNOWN   1
#define	MEMORY_PRIORITY_FOREGROUND   2
#define	PSP_DEFAULT_QUANTUMS   0x00
#define	PSP_VARIABLE_QUANTUMS   0x04
#define	PSP_FIXED_QUANTUMS   0x08
#define	PSP_LONG_QUANTUMS   0x10
#define	PSP_SHORT_QUANTUMS   0x20
#define	THREAD_QUERY_INFORMATION   0x0040
#define	THREAD_SET_THREAD_TOKEN   0x0080
#define	THREAD_IMPERSONATE   0x0100
#define	THREAD_DIRECT_IMPERSONATION   0x0200
#define	PROCESS_TERMINATE   0x0001
#define	PROCESS_CREATE_THREAD   0x0002
#define	PROCESS_SET_SESSIONID   0x0004
#define	PROCESS_VM_OPERATION   0x0008
#define	PROCESS_VM_READ   0x0010
#define	PROCESS_VM_WRITE   0x0020
#define	PROCESS_CREATE_PROCESS   0x0080
#define	PROCESS_SET_QUOTA   0x0100
#define	PROCESS_SET_INFORMATION   0x0200
#define	PROCESS_QUERY_INFORMATION   0x0400
#define	PROCESS_SUSPEND_RESUME   0x0800
#define	PROCESS_QUERY_LIMITED_INFORMATION   0x1000
#define	PROCESS_ALL_ACCESS
#define	THREAD_BASE_PRIORITY_LOWRT   15
#define	THREAD_BASE_PRIORITY_MAX   2
#define	THREAD_BASE_PRIORITY_MIN   -2
#define	THREAD_BASE_PRIORITY_IDLE   -15
#define	TLS_MINIMUM_AVAILABLE   64
#define	TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED   0x1
#define	JOB_OBJECT_ASSIGN_PROCESS   0x1
#define	JOB_OBJECT_SET_ATTRIBUTES   0x2
#define	JOB_OBJECT_QUERY   0x4
#define	JOB_OBJECT_TERMINATE   0x8
#define	JOB_OBJECT_SET_SECURITY_ATTRIBUTES   0x10
#define	JOB_OBJECT_ALL_ACCESS
#define	JOB_OBJECT_LIMIT_WORKINGSET   0x1
#define	JOB_OBJECT_LIMIT_PROCESS_TIME   0x2
#define	JOB_OBJECT_LIMIT_JOB_TIME   0x4
#define	JOB_OBJECT_LIMIT_ACTIVE_PROCESS   0x8
#define	JOB_OBJECT_LIMIT_AFFINITY   0x10
#define	JOB_OBJECT_LIMIT_PRIORITY_CLASS   0x20
#define	JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME   0x40
#define	JOB_OBJECT_LIMIT_SCHEDULING_CLASS   0x80
#define	JOB_OBJECT_LIMIT_PROCESS_MEMORY   0x100
#define	JOB_OBJECT_LIMIT_JOB_MEMORY   0x200
#define	JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION   0x400
#define	JOB_OBJECT_LIMIT_BREAKAWAY_OK   0x800
#define	JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK   0x1000
#define	JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE   0x2000
#define	CT_TERMINATED_BIT   0x1
#define	CT_DEAD_THREAD_BIT   0x2
#define	CT_HIDE_FROM_DEBUGGER_BIT   0x4
#define	CT_ACTIVE_IMPERSONATION_INFO_BIT   0x8
#define	CT_SYSTEM_THREAD_BIT   0x10
#define	CT_HARD_ERRORS_ARE_DISABLED_BIT   0x20
#define	CT_BREAK_ON_TERMINATION_BIT   0x40
#define	CT_SKIP_CREATION_MSG_BIT   0x80
#define	CT_SKIP_TERMINATION_MSG_BIT   0x100
#define	STP_ACTIVE_EX_WORKER_BIT   0x1
#define	STP_EX_WORKER_CAN_WAIT_USER_BIT   0x2
#define	STP_MEMORY_MAKER_BIT   0x4
#define	STP_KEYED_EVENT_IN_USE_BIT   0x8
#define	STA_LPC_RECEIVED_MSG_ID_VALID_BIT   0x1
#define	STA_LPC_EXIT_THREAD_CALLED_BIT   0x2
#define	STA_ADDRESS_SPACE_OWNER_BIT   0x4
#define	STA_OWNS_WORKING_SET_BITS   0x1F8
#define	KPSF_AUTO_ALIGNMENT_BIT   0
#define	KPSF_DISABLE_BOOST_BIT   1
#define	PSF_CREATE_REPORTED_BIT   0x1
#define	PSF_NO_DEBUG_INHERIT_BIT   0x2
#define	PSF_PROCESS_EXITING_BIT   0x4
#define	PSF_PROCESS_DELETE_BIT   0x8
#define	PSF_WOW64_SPLIT_PAGES_BIT   0x10
#define	PSF_VM_DELETED_BIT   0x20
#define	PSF_OUTSWAP_ENABLED_BIT   0x40
#define	PSF_OUTSWAPPED_BIT   0x80
#define	PSF_FORK_FAILED_BIT   0x100
#define	PSF_WOW64_VA_SPACE_4GB_BIT   0x200
#define	PSF_ADDRESS_SPACE_INITIALIZED_BIT   0x400
#define	PSF_SET_TIMER_RESOLUTION_BIT   0x1000
#define	PSF_BREAK_ON_TERMINATION_BIT   0x2000
#define	PSF_SESSION_CREATION_UNDERWAY_BIT   0x4000
#define	PSF_WRITE_WATCH_BIT   0x8000
#define	PSF_PROCESS_IN_SESSION_BIT   0x10000
#define	PSF_OVERRIDE_ADDRESS_SPACE_BIT   0x20000
#define	PSF_HAS_ADDRESS_SPACE_BIT   0x40000
#define	PSF_LAUNCH_PREFETCHED_BIT   0x80000
#define	PSF_INJECT_INPAGE_ERRORS_BIT   0x100000
#define	PSF_VM_TOP_DOWN_BIT   0x200000
#define	PSF_IMAGE_NOTIFY_DONE_BIT   0x400000
#define	PSF_PDE_UPDATE_NEEDED_BIT   0x800000
#define	PSF_VDM_ALLOWED_BIT   0x1000000
#define	PSF_SWAP_ALLOWED_BIT   0x2000000
#define	PSF_CREATE_FAILED_BIT   0x4000000
#define	PSF_DEFAULT_IO_PRIORITY_BIT   0x8000000
#define	PSF2_PROTECTED_BIT   0x800
#define	TLS_EXPANSION_SLOTS   1024

Typedefs
typedef enum _PSPROCESSPRIORITYMODE	PSPROCESSPRIORITYMODE
typedef enum _JOBOBJECTINFOCLASS	JOBOBJECTINFOCLASS
typedef enum _PSPOWEREVENTTYPE	PSPOWEREVENTTYPE
typedef enum _POWERSTATETASK	POWERSTATETASK
typedef enum _PSW32JOBCALLOUTTYPE	PSW32JOBCALLOUTTYPE
typedef enum _PSW32THREADCALLOUTTYPE	PSW32THREADCALLOUTTYPE
typedef _In_ BOOLEAN	Create
typedef NTSTATUS(NTAPI *	PKWIN32_THREAD_CALLOUT) (_In_ struct _ETHREAD *Thread, _In_ PSW32THREADCALLOUTTYPE Type)
typedef NTSTATUS(NTAPI *	PKWIN32_GLOBALATOMTABLE_CALLOUT) (VOID)
typedef NTSTATUS(NTAPI *	PKWIN32_POWEREVENT_CALLOUT) (_In_ struct _WIN32_POWEREVENT_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_POWERSTATE_CALLOUT) (_In_ struct _WIN32_POWERSTATE_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_JOB_CALLOUT) (_In_ struct _WIN32_JOBCALLOUT_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PGDI_BATCHFLUSH_ROUTINE) (VOID)
typedef NTSTATUS(NTAPI *	PKWIN32_OPENMETHOD_CALLOUT) (_In_ struct _WIN32_OPENMETHOD_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_OKTOCLOSEMETHOD_CALLOUT) (_In_ struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_CLOSEMETHOD_CALLOUT) (_In_ struct _WIN32_CLOSEMETHOD_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_DELETEMETHOD_CALLOUT) (_In_ struct _WIN32_DELETEMETHOD_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_PARSEMETHOD_CALLOUT) (_In_ struct _WIN32_PARSEMETHOD_PARAMETERS *Parameters)
typedef NTSTATUS(NTAPI *	PKWIN32_SESSION_CALLOUT) (_In_ PVOID Parameter)
typedef NTSTATUS(NTAPI *	PKWIN32_WIN32DATACOLLECTION_CALLOUT) (_In_ struct _EPROCESS *Process, _In_ PVOID Callback, _In_ PVOID Context)
typedef VOID(NTAPI *	PLEGO_NOTIFY_ROUTINE) (_In_ PKTHREAD Thread)
typedef NTSTATUS(NTAPI *	PPOST_PROCESS_INIT_ROUTINE) (VOID)
typedef VOID(NTAPI *	PPEBLOCKROUTINE) (PVOID PebLock)
typedef struct _PEB_FREE_BLOCK	PEB_FREE_BLOCK
typedef struct _PEB_FREE_BLOCK *	PPEB_FREE_BLOCK
typedef struct _INITIAL_PEB	INITIAL_PEB
typedef struct _INITIAL_PEB *	PINITIAL_PEB
typedef struct _INITIAL_TEB	INITIAL_TEB
typedef struct _INITIAL_TEB *	PINITIAL_TEB
typedef struct _TEB_ACTIVE_FRAME_CONTEXT	TEB_ACTIVE_FRAME_CONTEXT
typedef struct _TEB_ACTIVE_FRAME_CONTEXT *	PTEB_ACTIVE_FRAME_CONTEXT
typedef const struct _TEB_ACTIVE_FRAME_CONTEXT *	PCTEB_ACTIVE_FRAME_CONTEXT
typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX	TEB_ACTIVE_FRAME_CONTEXT_EX
typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX *	PTEB_ACTIVE_FRAME_CONTEXT_EX
typedef const struct _TEB_ACTIVE_FRAME_CONTEXT_EX *	PCTEB_ACTIVE_FRAME_CONTEXT_EX
typedef struct _TEB_ACTIVE_FRAME	TEB_ACTIVE_FRAME
typedef struct _TEB_ACTIVE_FRAME *	PTEB_ACTIVE_FRAME
typedef const struct _TEB_ACTIVE_FRAME *	PCTEB_ACTIVE_FRAME
typedef struct _TEB_ACTIVE_FRAME_EX	TEB_ACTIVE_FRAME_EX
typedef struct _TEB_ACTIVE_FRAME_EX *	PTEB_ACTIVE_FRAME_EX
typedef const struct _TEB_ACTIVE_FRAME_EX *	PCTEB_ACTIVE_FRAME_EX
typedef struct _CLIENT_ID32	CLIENT_ID32
typedef struct _CLIENT_ID32 *	PCLIENT_ID32
typedef struct _CLIENT_ID64	CLIENT_ID64
typedef struct _CLIENT_ID64 *	PCLIENT_ID64
typedef enum _APPCOMPAT_FLAGS	APPCOMPAT_FLAGS
typedef enum _APPCOMPAT_USERFLAGS	APPCOMPAT_USERFLAGS
typedef enum _APPCOMPAT_USERFLAGS_HIGHPART	APPCOMPAT_USERFLAGS_HIGHPART
typedef struct _PROCESS_PRIORITY_CLASS	PROCESS_PRIORITY_CLASS
typedef struct _PROCESS_PRIORITY_CLASS *	PPROCESS_PRIORITY_CLASS
typedef struct _PROCESS_FOREGROUND_BACKGROUND	PROCESS_FOREGROUND_BACKGROUND
typedef struct _PROCESS_FOREGROUND_BACKGROUND *	PPROCESS_FOREGROUND_BACKGROUND
typedef enum _APPHELPCACHESERVICECLASS	APPHELPCACHESERVICECLASS
typedef struct _APPHELP_CACHE_SERVICE_LOOKUP	APPHELP_CACHE_SERVICE_LOOKUP
typedef struct _APPHELP_CACHE_SERVICE_LOOKUP *	PAPPHELP_CACHE_SERVICE_LOOKUP
typedef struct _THREAD_BASIC_INFORMATION	THREAD_BASIC_INFORMATION
typedef struct _THREAD_BASIC_INFORMATION *	PTHREAD_BASIC_INFORMATION
typedef struct _JOB_SET_ARRAY	JOB_SET_ARRAY
typedef struct _JOB_SET_ARRAY *	PJOB_SET_ARRAY
typedef struct _EPROCESS_QUOTA_ENTRY	EPROCESS_QUOTA_ENTRY
typedef struct _EPROCESS_QUOTA_ENTRY *	PEPROCESS_QUOTA_ENTRY
typedef struct _EPROCESS_QUOTA_BLOCK	EPROCESS_QUOTA_BLOCK
typedef struct _EPROCESS_QUOTA_BLOCK *	PEPROCESS_QUOTA_BLOCK
typedef struct _PAGEFAULT_HISTORY	PAGEFAULT_HISTORY
typedef struct _PAGEFAULT_HISTORY *	PPAGEFAULT_HISTORY
typedef struct _PS_IMPERSONATION_INFORMATION	PS_IMPERSONATION_INFORMATION
typedef struct _PS_IMPERSONATION_INFORMATION *	PPS_IMPERSONATION_INFORMATION
typedef struct _TERMINATION_PORT	TERMINATION_PORT
typedef struct _TERMINATION_PORT *	PTERMINATION_PORT
typedef struct _PSP_RATE_APC	PSP_RATE_APC
typedef struct _PSP_RATE_APC *	PPSP_RATE_APC
typedef struct _ETHREAD	ETHREAD
typedef struct _EPROCESS	EPROCESS
typedef struct _PS_JOB_TOKEN_FILTER	PS_JOB_TOKEN_FILTER
typedef struct _PS_JOB_TOKEN_FILTER *	PPS_JOB_TOKEN_FILTER
typedef struct _EJOB	EJOB
typedef struct _EJOB *	PEJOB
typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION	JOBOBJECT_BASIC_ACCOUNTING_INFORMATION
typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION *	PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION
typedef struct _JOBOBJECT_BASIC_LIMIT_INFORMATION	JOBOBJECT_BASIC_LIMIT_INFORMATION
typedef struct _JOBOBJECT_BASIC_LIMIT_INFORMATION *	PJOBOBJECT_BASIC_LIMIT_INFORMATION
typedef struct _JOBOBJECT_BASIC_PROCESS_ID_LIST	JOBOBJECT_BASIC_PROCESS_ID_LIST
typedef struct _JOBOBJECT_BASIC_PROCESS_ID_LIST *	PJOBOBJECT_BASIC_PROCESS_ID_LIST
typedef struct _JOBOBJECT_BASIC_UI_RESTRICTIONS	JOBOBJECT_BASIC_UI_RESTRICTIONS
typedef struct _JOBOBJECT_BASIC_UI_RESTRICTIONS *	PJOBOBJECT_BASIC_UI_RESTRICTIONS
typedef struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION	JOBOBJECT_SECURITY_LIMIT_INFORMATION
typedef struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION *	PJOBOBJECT_SECURITY_LIMIT_INFORMATION
typedef struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION	JOBOBJECT_END_OF_JOB_TIME_INFORMATION
typedef struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION	PJOBOBJECT_END_OF_JOB_TIME_INFORMATION
typedef struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT	JOBOBJECT_ASSOCIATE_COMPLETION_PORT
typedef struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT *	PJOBOBJECT_ASSOCIATE_COMPLETION_PORT
typedef struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION	JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
typedef struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION *	PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
typedef struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION	JOBOBJECT_EXTENDED_LIMIT_INFORMATION
typedef struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION *	PJOBOBJECT_EXTENDED_LIMIT_INFORMATION
typedef struct _WIN32_POWEREVENT_PARAMETERS	WIN32_POWEREVENT_PARAMETERS
typedef struct _WIN32_POWEREVENT_PARAMETERS *	PWIN32_POWEREVENT_PARAMETERS
typedef struct _WIN32_POWERSTATE_PARAMETERS	WIN32_POWERSTATE_PARAMETERS
typedef struct _WIN32_POWERSTATE_PARAMETERS *	PWIN32_POWERSTATE_PARAMETERS
typedef struct _WIN32_JOBCALLOUT_PARAMETERS	WIN32_JOBCALLOUT_PARAMETERS
typedef struct _WIN32_JOBCALLOUT_PARAMETERS *	PWIN32_JOBCALLOUT_PARAMETERS
typedef struct _WIN32_OPENMETHOD_PARAMETERS	WIN32_OPENMETHOD_PARAMETERS
typedef struct _WIN32_OPENMETHOD_PARAMETERS *	PWIN32_OPENMETHOD_PARAMETERS
typedef struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS	WIN32_OKAYTOCLOSEMETHOD_PARAMETERS
typedef struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS *	PWIN32_OKAYTOCLOSEMETHOD_PARAMETERS
typedef struct _WIN32_CLOSEMETHOD_PARAMETERS	WIN32_CLOSEMETHOD_PARAMETERS
typedef struct _WIN32_CLOSEMETHOD_PARAMETERS *	PWIN32_CLOSEMETHOD_PARAMETERS
typedef struct _WIN32_DELETEMETHOD_PARAMETERS	WIN32_DELETEMETHOD_PARAMETERS
typedef struct _WIN32_DELETEMETHOD_PARAMETERS *	PWIN32_DELETEMETHOD_PARAMETERS
typedef struct _WIN32_PARSEMETHOD_PARAMETERS	WIN32_PARSEMETHOD_PARAMETERS
typedef struct _WIN32_PARSEMETHOD_PARAMETERS *	PWIN32_PARSEMETHOD_PARAMETERS
typedef struct _WIN32_CALLOUTS_FPNS	WIN32_CALLOUTS_FPNS
typedef struct _WIN32_CALLOUTS_FPNS *	PWIN32_CALLOUTS_FPNS

Enumerations
enum	_PSPROCESSPRIORITYMODE { PsProcessPriorityForeground, PsProcessPriorityBackground, PsProcessPrioritySpinning }
enum	_JOBOBJECTINFOCLASS {   JobObjectBasicAccountingInformation = 1, JobObjectBasicLimitInformation, JobObjectBasicProcessIdList, JobObjectBasicUIRestrictions,   JobObjectSecurityLimitInformation, JobObjectEndOfJobTimeInformation, JobObjectAssociateCompletionPortInformation, JobObjectBasicAndIoAccountingInformation,   JobObjectExtendedLimitInformation, JobObjectJobSetInformation, MaxJobObjectInfoClass, JobObjectBasicAccountingInformation = 1,   JobObjectBasicLimitInformation, JobObjectBasicProcessIdList, JobObjectBasicUIRestrictions, JobObjectSecurityLimitInformation,   JobObjectEndOfJobTimeInformation, JobObjectAssociateCompletionPortInformation, JobObjectBasicAndIoAccountingInformation, JobObjectExtendedLimitInformation,   JobObjectJobSetInformation, JobObjectGroupInformation, MaxJobObjectInfoClass }
enum	_PSPOWEREVENTTYPE {   PsW32FullWake = 0, PsW32EventCode = 1, PsW32PowerPolicyChanged = 2, PsW32SystemPowerState = 3,   PsW32SystemTime = 4, PsW32DisplayState = 5, PsW32CapabilitiesChanged = 6, PsW32SetStateFailed = 7,   PsW32GdiOff = 8, PsW32GdiOn = 9, PsW32GdiPrepareResumeUI = 10, PsW32GdiOffRequest = 11,   PsW32MonitorOff = 12 }
enum	_POWERSTATETASK {   PowerState_BlockSessionSwitch = 0, PowerState_Init = 1, PowerState_QueryApps = 2, PowerState_QueryServices = 3,   PowerState_QueryAppsFailed = 4, PowerState_QueryServicesFailed = 5, PowerState_SuspendApps = 6, PowerState_SuspendServices = 7,   PowerState_ShowUI = 8, PowerState_NotifyWL = 9, PowerState_ResumeApps = 10, PowerState_ResumeServices = 11,   PowerState_UnBlockSessionSwitch = 12, PowerState_End = 13, PowerState_BlockInput = 14, PowerState_UnblockInput = 15 }
enum	_PSW32JOBCALLOUTTYPE { PsW32JobCalloutSetInformation = 0, PsW32JobCalloutAddProcess = 1, PsW32JobCalloutTerminate = 2 }
enum	_PSW32THREADCALLOUTTYPE { PsW32ThreadCalloutInitialize, PsW32ThreadCalloutExit }
enum	_APPCOMPAT_FLAGS {   GetShortPathNameNT4 = 0x1, GetDiskFreeSpace2GB = 0x8, FTMFromCurrentAPI = 0x20, DisallowCOMBindingNotifications = 0x40,   Ole32ValidatePointers = 0x80, DisableCicero = 0x100, Ole32EnableAsyncDocFile = 0x200, EnableLegacyExceptionHandlinginOLE = 0x400,   DisableAdvanceRPCClientHardening = 0x800, DisableMaybeNULLSizeisConsistencycheck = 0x1000, DisableAdvancedRPCrangeCheck = 0x4000, EnableLegacyExceptionHandlingInRPC = 0x8000,   EnableLegacyNTFSFlagsForDocfileOpens = 0x10000, DisableNDRIIDConsistencyCheck = 0x20000, UserDisableForwarderPatch = 0x40000, DisableNewWMPAINTDispatchInOLE = 0x100000,   DoNotAddToCache = 0x80000000 }
enum	_APPCOMPAT_USERFLAGS {   DisableAnimation = 0x1, DisableKeyboardCues = 0x2, No50StylebitsInSetWindowLong = 0x4, DisableDrawPatternRect = 0x8,   MSShellDialog = 0x10, NoDDETerminateDuringDestroy = 0x20, GiveupForeground = 0x40, AlwaysActiveMenus = 0x80,   NoMouseHideInEdit = 0x100, NoGdiBatching = 0x200, FontSubstitution = 0x400, No50StylebitsInCreateWindow = 0x800,   NoCustomPaperSizes = 0x1000, AllTheDdeHacks = 0x2000, UseDefaultCharset = 0x4000, NoCharDeadKey = 0x8000,   NoTryExceptForWindowProc = 0x10000, NoInitInsertReplaceFlags = 0x20000, NoDdeSync = 0x40000, NoGhost = 0x80000,   NoDdeAsyncReg = 0x100000, StrictLLHook = 0x200000, NoShadow = 0x400000, NoTimerCallbackProtection = 0x1000000,   HighDpiAware = 0x2000000, OpenGLEmfAware = 0x4000000, EnableTransparantBltMirror = 0x8000000, NoPaddedBorder = 0x10000000,   ForceLegacyResizeCM = 0x20000000, HardwareAudioMixer = 0x40000000, DisableSWCursorOnMoveSize = 0x80000000 }
enum	_APPCOMPAT_USERFLAGS_HIGHPART { DisableWindowArrangement = 0x1, ReorderWaveForCommunications = 0x2, NoGdiHwAcceleration = 0x4 }
enum	_APPHELPCACHESERVICECLASS {   ApphelpCacheServiceLookup = 0, ApphelpCacheServiceRemove = 1, ApphelpCacheServiceUpdate = 2, ApphelpCacheServiceFlush = 3,   ApphelpCacheServiceDump = 4, ApphelpDBGReadRegistry = 0x100, ApphelpDBGWriteRegistry = 0x101 }

Functions
typedef	NTSTATUS (NTAPI *PKWIN32_PROCESS_CALLOUT)(_In_ struct _EPROCESS *Process

Variables
POBJECT_TYPE NTSYSAPI	PsJobType

Macro Definition Documentation

CT_ACTIVE_IMPERSONATION_INFO_BIT

#define CT_ACTIVE_IMPERSONATION_INFO_BIT   0x8

Definition at line 225 of file pstypes.h.

Referenced by PsDisableImpersonation(), PsImpersonateClient(), PspDeleteThreadSecurity(), PsRestoreImpersonation(), PsRevertThreadToSelf(), and SepInitializationPhase0().

CT_BREAK_ON_TERMINATION_BIT

#define CT_BREAK_ON_TERMINATION_BIT   0x40

Definition at line 228 of file pstypes.h.

Referenced by NtSetInformationThread().

CT_DEAD_THREAD_BIT

#define CT_DEAD_THREAD_BIT   0x2

Definition at line 223 of file pstypes.h.

Referenced by PspCreateThread().

CT_HARD_ERRORS_ARE_DISABLED_BIT

#define CT_HARD_ERRORS_ARE_DISABLED_BIT   0x20

Definition at line 227 of file pstypes.h.

CT_HIDE_FROM_DEBUGGER_BIT

#define CT_HIDE_FROM_DEBUGGER_BIT   0x4

Definition at line 224 of file pstypes.h.

Referenced by NtSetInformationThread().

CT_SKIP_CREATION_MSG_BIT

#define CT_SKIP_CREATION_MSG_BIT   0x80

Definition at line 229 of file pstypes.h.

Referenced by DbgkpSetProcessDebugObject().

CT_SKIP_TERMINATION_MSG_BIT

#define CT_SKIP_TERMINATION_MSG_BIT   0x100

Definition at line 230 of file pstypes.h.

CT_SYSTEM_THREAD_BIT

#define CT_SYSTEM_THREAD_BIT   0x10

Definition at line 226 of file pstypes.h.

Referenced by PspCreateThread().

CT_TERMINATED_BIT

#define CT_TERMINATED_BIT   0x1

Definition at line 222 of file pstypes.h.

Referenced by PspTerminateThreadByPointer().

FLG_APPLICATION_VERIFIER

#define FLG_APPLICATION_VERIFIER   0x00000100

Definition at line 64 of file pstypes.h.

Referenced by AVrfDllLoadNotification(), AVrfDllUnloadNotification(), AVrfInitializeVerifier(), LdrpInitializeExecutionOptions(), LdrpInitializeProcess(), and LdrpWalkImportDescriptor().

FLG_DEBUG_INITIAL_COMMAND

#define FLG_DEBUG_INITIAL_COMMAND   0x00000004

Definition at line 58 of file pstypes.h.

Referenced by _main().

FLG_DEBUG_INITIAL_COMMAND_EX

#define FLG_DEBUG_INITIAL_COMMAND_EX   0x04000000

Definition at line 85 of file pstypes.h.

Referenced by _main().

FLG_DISABLE_PAGE_KERNEL_STACKS

#define FLG_DISABLE_PAGE_KERNEL_STACKS   0x00080000

Definition at line 74 of file pstypes.h.

FLG_DISABLE_STACK_EXTENSION

#define FLG_DISABLE_STACK_EXTENSION   0x00010000

Definition at line 71 of file pstypes.h.

Referenced by MiCheckForUserStackOverflow().

FLG_ENABLE_CLOSE_EXCEPTIONS

#define FLG_ENABLE_CLOSE_EXCEPTIONS   0x00400000

Definition at line 81 of file pstypes.h.

Referenced by ExpInitializeExecutive().

FLG_ENABLE_CSRDEBUG

#define FLG_ENABLE_CSRDEBUG   0x00020000

Definition at line 72 of file pstypes.h.

Referenced by RtlCreateUserProcess().

FLG_ENABLE_EXCEPTION_LOGGING

#define FLG_ENABLE_EXCEPTION_LOGGING   0x00800000

Definition at line 82 of file pstypes.h.

Referenced by ExpInitializeExecutive(), and RtlpCheckLogException().

FLG_ENABLE_HANDLE_TYPE_TAGGING

#define FLG_ENABLE_HANDLE_TYPE_TAGGING   0x01000000

Definition at line 83 of file pstypes.h.

FLG_ENABLE_KDEBUG_SYMBOL_LOAD

#define FLG_ENABLE_KDEBUG_SYMBOL_LOAD   0x00040000

Definition at line 73 of file pstypes.h.

Referenced by ExpInitializeExecutive(), and MiLoadImageSection().

FLG_ENABLE_SYSTEM_CRIT_BREAKS

#define FLG_ENABLE_SYSTEM_CRIT_BREAKS   0x00100000

Definition at line 78 of file pstypes.h.

Referenced by RtlSetProcessIsCritical(), and RtlSetThreadIsCritical().

FLG_HEAP_DISABLE_COALESCING

#define FLG_HEAP_DISABLE_COALESCING   0x00200000

Definition at line 80 of file pstypes.h.

Referenced by heap_flags_from_global_flag(), RtlCreateHeap(), and START_TEST().

FLG_HEAP_ENABLE_FREE_CHECK

#define FLG_HEAP_ENABLE_FREE_CHECK   0x00000020

Definition at line 61 of file pstypes.h.

Referenced by heap_flags_from_global_flag(), RtlCreateHeap(), and START_TEST().

FLG_HEAP_ENABLE_TAG_BY_DLL

#define FLG_HEAP_ENABLE_TAG_BY_DLL   0x00008000

Definition at line 70 of file pstypes.h.

Referenced by LdrpWalkImportDescriptor(), and START_TEST().

FLG_HEAP_ENABLE_TAGGING

#define FLG_HEAP_ENABLE_TAGGING   0x00000800

Definition at line 66 of file pstypes.h.

Referenced by START_TEST().

FLG_HEAP_ENABLE_TAIL_CHECK

#define FLG_HEAP_ENABLE_TAIL_CHECK   0x00000010

Definition at line 60 of file pstypes.h.

Referenced by heap_flags_from_global_flag(), LdrUnloadDll(), RtlCreateHeap(), and START_TEST().

FLG_HEAP_PAGE_ALLOCS

#define FLG_HEAP_PAGE_ALLOCS   0x02000000

Definition at line 84 of file pstypes.h.

Referenced by DisplayImageInfo(), heap_flags_from_global_flag(), LdrpInitializeApplicationVerifierPackage(), LdrpInitializeExecutionOptions(), LdrpWalkImportDescriptor(), ModifyStatus(), START_TEST(), and test_child_heap().

FLG_HEAP_VALIDATE_ALL

#define FLG_HEAP_VALIDATE_ALL   0x00000080

Definition at line 63 of file pstypes.h.

Referenced by heap_flags_from_global_flag(), RtlCreateHeap(), and START_TEST().

FLG_HEAP_VALIDATE_PARAMETERS

#define FLG_HEAP_VALIDATE_PARAMETERS   0x00000040

Definition at line 62 of file pstypes.h.

Referenced by heap_flags_from_global_flag(), RtlCreateHeap(), and START_TEST().

FLG_KERNEL_STACK_TRACE_DB

#define FLG_KERNEL_STACK_TRACE_DB   0x00002000

Definition at line 68 of file pstypes.h.

Referenced by ExpInitializeExecutive(), and ObReferenceFileObjectForWrite().

FLG_MAINTAIN_OBJECT_TYPELIST

#define FLG_MAINTAIN_OBJECT_TYPELIST   0x00004000

Definition at line 69 of file pstypes.h.

Referenced by ObCreateObjectType().

FLG_POOL_ENABLE_TAGGING

#define FLG_POOL_ENABLE_TAGGING   0x00000400

Definition at line 65 of file pstypes.h.

Referenced by START_TEST().

FLG_SHOW_LDR_SNAPS

#define FLG_SHOW_LDR_SNAPS   0x00000002

Definition at line 57 of file pstypes.h.

Referenced by LdrpInitializeProcess(), and MmLoadSystemImage().

FLG_STOP_ON_EXCEPTION

#define FLG_STOP_ON_EXCEPTION   0x00000001

Definition at line 56 of file pstypes.h.

Referenced by KdpReport().

FLG_STOP_ON_HUNG_GUI

#define FLG_STOP_ON_HUNG_GUI   0x00000008

Definition at line 59 of file pstypes.h.

FLG_USER_STACK_TRACE_DB

#define FLG_USER_STACK_TRACE_DB   0x00001000

Definition at line 67 of file pstypes.h.

Referenced by LdrpInitializeProcess(), and RtlCreateHeap().

FLG_VALID_BITS

#define FLG_VALID_BITS   0x07FFFFFF

Definition at line 86 of file pstypes.h.

JOB_OBJECT_ALL_ACCESS

#define JOB_OBJECT_ALL_ACCESS

Value:

(STANDARD_RIGHTS_REQUIRED | \
                                                 SYNCHRONIZE | \
                                                 31)

Definition at line 197 of file pstypes.h.

Referenced by PspInitPhase0().

JOB_OBJECT_ASSIGN_PROCESS

#define JOB_OBJECT_ASSIGN_PROCESS   0x1

Definition at line 192 of file pstypes.h.

Referenced by NtAssignProcessToJobObject().

JOB_OBJECT_LIMIT_ACTIVE_PROCESS

#define JOB_OBJECT_LIMIT_ACTIVE_PROCESS   0x8

Definition at line 207 of file pstypes.h.

JOB_OBJECT_LIMIT_AFFINITY

#define JOB_OBJECT_LIMIT_AFFINITY   0x10

Definition at line 208 of file pstypes.h.

JOB_OBJECT_LIMIT_BREAKAWAY_OK

#define JOB_OBJECT_LIMIT_BREAKAWAY_OK   0x800

Definition at line 215 of file pstypes.h.

Referenced by test_BreakawayOk().

JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION

#define JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION   0x400

Definition at line 214 of file pstypes.h.

JOB_OBJECT_LIMIT_JOB_MEMORY

#define JOB_OBJECT_LIMIT_JOB_MEMORY   0x200

Definition at line 213 of file pstypes.h.

JOB_OBJECT_LIMIT_JOB_TIME

#define JOB_OBJECT_LIMIT_JOB_TIME   0x4

Definition at line 206 of file pstypes.h.

JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE

#define JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE   0x2000

Definition at line 217 of file pstypes.h.

Referenced by test_KillOnJobClose().

JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME

#define JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME   0x40

Definition at line 210 of file pstypes.h.

JOB_OBJECT_LIMIT_PRIORITY_CLASS

#define JOB_OBJECT_LIMIT_PRIORITY_CLASS   0x20

Definition at line 209 of file pstypes.h.

Referenced by SetInformationJobObject().

JOB_OBJECT_LIMIT_PROCESS_MEMORY

#define JOB_OBJECT_LIMIT_PROCESS_MEMORY   0x100

Definition at line 212 of file pstypes.h.

JOB_OBJECT_LIMIT_PROCESS_TIME

#define JOB_OBJECT_LIMIT_PROCESS_TIME   0x2

Definition at line 205 of file pstypes.h.

JOB_OBJECT_LIMIT_SCHEDULING_CLASS

#define JOB_OBJECT_LIMIT_SCHEDULING_CLASS   0x80

Definition at line 211 of file pstypes.h.

JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK

#define JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK   0x1000

Definition at line 216 of file pstypes.h.

Referenced by test_BreakawayOk().

JOB_OBJECT_LIMIT_WORKINGSET

#define JOB_OBJECT_LIMIT_WORKINGSET   0x1

Definition at line 204 of file pstypes.h.

Referenced by SetInformationJobObject().

JOB_OBJECT_QUERY

#define JOB_OBJECT_QUERY   0x4

Definition at line 194 of file pstypes.h.

Referenced by NtIsProcessInJob(), and NtQueryInformationJobObject().

JOB_OBJECT_SET_ATTRIBUTES

#define JOB_OBJECT_SET_ATTRIBUTES   0x2

Definition at line 193 of file pstypes.h.

Referenced by NtSetInformationJobObject().

JOB_OBJECT_SET_SECURITY_ATTRIBUTES

#define JOB_OBJECT_SET_SECURITY_ATTRIBUTES   0x10

Definition at line 196 of file pstypes.h.

Referenced by NtSetInformationJobObject().

JOB_OBJECT_TERMINATE

#define JOB_OBJECT_TERMINATE   0x8

Definition at line 195 of file pstypes.h.

Referenced by NtTerminateJobObject().

KPSF_AUTO_ALIGNMENT_BIT

#define KPSF_AUTO_ALIGNMENT_BIT   0

Definition at line 251 of file pstypes.h.

Referenced by KeSetAutoAlignmentProcess().

KPSF_DISABLE_BOOST_BIT

#define KPSF_DISABLE_BOOST_BIT   1

Definition at line 252 of file pstypes.h.

Referenced by KeSetDisableBoostProcess().

MEMORY_PRIORITY_BACKGROUND

#define MEMORY_PRIORITY_BACKGROUND   0

Definition at line 124 of file pstypes.h.

Referenced by MmSetMemoryPriorityProcess(), NtSetInformationProcess(), PsChangeQuantumTable(), and PspComputeQuantumAndPriority().

MEMORY_PRIORITY_FOREGROUND

#define MEMORY_PRIORITY_FOREGROUND   2

Definition at line 126 of file pstypes.h.

Referenced by KiDeferredReadyThread(), NtSetInformationProcess(), and PspComputeQuantumAndPriority().

MEMORY_PRIORITY_UNKNOWN

#define MEMORY_PRIORITY_UNKNOWN   1

Definition at line 125 of file pstypes.h.

PROCESS_ALL_ACCESS

#define PROCESS_ALL_ACCESS

Value:

(STANDARD_RIGHTS_REQUIRED | \
                                                 SYNCHRONIZE | \
                                                 0xFFFF)

Definition at line 162 of file pstypes.h.

PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS

#define PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS   PROCESS_CREATE_FLAGS_LARGE_PAGES

Definition at line 96 of file pstypes.h.

PROCESS_CREATE_FLAGS_BREAKAWAY

#define PROCESS_CREATE_FLAGS_BREAKAWAY   0x00000001

Definition at line 91 of file pstypes.h.

Referenced by CreateProcessInternalW(), and NtCreateProcess().

PROCESS_CREATE_FLAGS_INHERIT_HANDLES

#define PROCESS_CREATE_FLAGS_INHERIT_HANDLES   0x00000004

Definition at line 93 of file pstypes.h.

Referenced by CreateProcessInternalW(), NtCreateProcess(), and PspCreateProcess().

PROCESS_CREATE_FLAGS_LARGE_PAGES

#define PROCESS_CREATE_FLAGS_LARGE_PAGES   0x00000010

Definition at line 95 of file pstypes.h.

Referenced by CreateProcessInternalW(), and PspCreateProcess().

PROCESS_CREATE_FLAGS_LEGAL_MASK

#define PROCESS_CREATE_FLAGS_LEGAL_MASK

Value:

(PROCESS_CREATE_FLAGS_BREAKAWAY | \
                                                     PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT | \
                                                     PROCESS_CREATE_FLAGS_INHERIT_HANDLES | \
                                                     PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE | \
                                                     PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS)

Definition at line 97 of file pstypes.h.

Referenced by PspCreateProcess().

PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT

#define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT   0x00000002

Definition at line 92 of file pstypes.h.

Referenced by CreateProcessInternalW(), NtCreateProcess(), and PspCreateProcess().

PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE

#define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE   0x00000008

Definition at line 94 of file pstypes.h.

PROCESS_CREATE_PROCESS

#define PROCESS_CREATE_PROCESS   0x0080

Definition at line 155 of file pstypes.h.

Referenced by PspCreateProcess(), PspSetPrimaryToken(), and test_process_access().

PROCESS_CREATE_THREAD

#define PROCESS_CREATE_THREAD   0x0002

Definition at line 150 of file pstypes.h.

Referenced by ProcessIdToHandle(), PspCreateProcess(), PspCreateThread(), PspSetPrimaryToken(), and test_process_access().

PROCESS_PRIORITY_CLASS_ABOVE_NORMAL

#define PROCESS_PRIORITY_CLASS_ABOVE_NORMAL   6

Definition at line 112 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), NtSetInformationProcess(), QueryInformationJobObject(), SetInformationJobObject(), and SetPriorityClass().

PROCESS_PRIORITY_CLASS_BELOW_NORMAL

#define PROCESS_PRIORITY_CLASS_BELOW_NORMAL   5

Definition at line 111 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), PspCreateProcess(), QueryInformationJobObject(), SetInformationJobObject(), and SetPriorityClass().

PROCESS_PRIORITY_CLASS_HIGH

#define PROCESS_PRIORITY_CLASS_HIGH   3

Definition at line 109 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), QueryInformationJobObject(), SetInformationJobObject(), and SetPriorityClass().

PROCESS_PRIORITY_CLASS_IDLE

#define PROCESS_PRIORITY_CLASS_IDLE   1

Definition at line 107 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), PsChangeQuantumTable(), PspComputeQuantumAndPriority(), PspCreateProcess(), QueryInformationJobObject(), SetInformationJobObject(), and SetPriorityClass().

PROCESS_PRIORITY_CLASS_INVALID

#define PROCESS_PRIORITY_CLASS_INVALID   0

Definition at line 106 of file pstypes.h.

Referenced by CreateProcessInternalW().

PROCESS_PRIORITY_CLASS_NORMAL

#define PROCESS_PRIORITY_CLASS_NORMAL   2

Definition at line 108 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), PspCreateProcess(), QueryInformationJobObject(), SetInformationJobObject(), and SetPriorityClass().

PROCESS_PRIORITY_CLASS_REALTIME

#define PROCESS_PRIORITY_CLASS_REALTIME   4

Definition at line 110 of file pstypes.h.

Referenced by CreateProcessInternalW(), GetPriorityClass(), NtSetInformationProcess(), NtSetInformationThread(), QueryInformationJobObject(), and SetInformationJobObject().

PROCESS_PRIORITY_IDLE

#define PROCESS_PRIORITY_IDLE   3

Definition at line 117 of file pstypes.h.

PROCESS_PRIORITY_NORMAL

#define PROCESS_PRIORITY_NORMAL   8

Definition at line 118 of file pstypes.h.

Referenced by PspCreateProcess().

PROCESS_PRIORITY_NORMAL_FOREGROUND

#define PROCESS_PRIORITY_NORMAL_FOREGROUND   9

Definition at line 119 of file pstypes.h.

PROCESS_QUERY_INFORMATION

#define PROCESS_QUERY_INFORMATION   0x0400

Definition at line 158 of file pstypes.h.

Referenced by CloseProcessAndVerify_(), CsrSetProcessSecurity(), doChild(), get_process_name_from_pid(), GetOwnerModuleFromPidEntry(), GetProcessVersion(), MiQueryMemoryBasicInformation(), MiQueryMemorySectionName(), NtCreateProfile(), NtIsProcessInJob(), NtQueryInformationProcess(), NtUserGetGuiResources(), NtUserResolveDesktop(), NtUserWaitForInputIdle(), OpenUserRegistryPathPerProcessId(), PerfDataGetCommandLine(), PerfDataRefresh(), PrintProcess(), ProcessIdToHandle(), ProcessIdToSessionId(), ProcessList_Update(), ProcessPage_OnEndProcess(), ProcessPage_OnEndProcessTree(), ProcessPage_OnSetAffinity(), ProcessPageShowContextMenu(), PsOpenTokenOfProcess(), PspCreateProcess(), PspSetPrimaryToken(), SmpHandleConnectionRequest(), START_TEST(), test_OpenProcess(), test_process_access(), test_query_process_handlecount(), test_query_process_times(), test_query_process_vm(), test_token_security_descriptor(), and UserpFormatMessages().

PROCESS_QUERY_LIMITED_INFORMATION

#define PROCESS_QUERY_LIMITED_INFORMATION   0x1000

Definition at line 160 of file pstypes.h.

PROCESS_SET_INFORMATION

#define PROCESS_SET_INFORMATION   0x0200

Definition at line 157 of file pstypes.h.

Referenced by DoSetPriority(), NtSetInformationProcess(), ProcessPage_OnSetAffinity(), PspCreateProcess(), PspSetPrimaryToken(), and test_process_access().

PROCESS_SET_QUOTA

#define PROCESS_SET_QUOTA   0x0100

Definition at line 156 of file pstypes.h.

Referenced by PspCreateProcess(), PspSetPrimaryToken(), and test_process_access().

PROCESS_SET_SESSIONID

#define PROCESS_SET_SESSIONID   0x0004

Definition at line 151 of file pstypes.h.

Referenced by NtSetInformationProcess().

PROCESS_SUSPEND_RESUME

#define PROCESS_SUSPEND_RESUME   0x0800

Definition at line 159 of file pstypes.h.

Referenced by CsrSetProcessSecurity(), NtDebugActiveProcess(), NtRemoveProcessDebug(), NtResumeProcess(), NtSetInformationProcess(), NtSuspendProcess(), ProcessIdToHandle(), and test_process_access().

PROCESS_TERMINATE

#define PROCESS_TERMINATE   0x0001

Definition at line 149 of file pstypes.h.

Referenced by CsrSetProcessSecurity(), ExecuteKill(), Ghost_DestroyTarget(), NtAssignProcessToJobObject(), NtTerminateProcess(), ProcessKeys(), ProcessPage_OnEndProcess(), ProcessPage_OnEndProcessTree(), PspCreateProcess(), PspSetPrimaryToken(), START_TEST(), terminate_processes(), test_process_access(), test_process_security_child(), and test_RtlQueryPackageIdentity().

PROCESS_VM_OPERATION

#define PROCESS_VM_OPERATION   0x0008

Definition at line 152 of file pstypes.h.

Referenced by _Success_(), CsrSetProcessSecurity(), DebugChannels_FillList(), DebugChannels_OnNotify(), GetProcessHandleFromHwnd(), LsapCheckLogonProcess(), LsapEnumLogonSessions(), LsapGetLogonSessionData(), NtAllocateVirtualMemory(), NtFlushVirtualMemory(), NtFreeVirtualMemory(), NtGetWriteWatch(), NtLockVirtualMemory(), NtMapViewOfSection(), NtProtectVirtualMemory(), NtResetWriteWatch(), NtUnlockVirtualMemory(), NtUnmapViewOfSection(), NtUserProcessConnect(), ProcessIdToHandle(), PspCreateProcess(), PspSetPrimaryToken(), test_OpenProcess(), and test_process_access().

PROCESS_VM_READ

#define PROCESS_VM_READ   0x0010

Definition at line 153 of file pstypes.h.

Referenced by CsrSetProcessSecurity(), DebugChannels_FillList(), DebugChannels_OnNotify(), get_process_name_from_pid(), GetOwnerModuleFromPidEntry(), GetProcessHandleFromHwnd(), GetProcessVersion(), LsapCheckLogonProcess(), LsapEnumLogonSessions(), LsapGetLogonSessionData(), NtReadVirtualMemory(), OpenUserRegistryPathPerProcessId(), PerfDataGetCommandLine(), ProcessIdToHandle(), ProcessList_Update(), PspCreateProcess(), PspSetPrimaryToken(), START_TEST(), test_process_access(), test_process_security(), test_process_security_child(), test_query_process_vm(), test_readvirtualmemory(), Toolhelp32ReadProcessMemory(), and UserpFormatMessages().

PROCESS_VM_WRITE

#define PROCESS_VM_WRITE   0x0020

Definition at line 154 of file pstypes.h.

Referenced by CsrSetProcessSecurity(), DebugChannels_OnNotify(), GetProcessHandleFromHwnd(), LsapCheckLogonProcess(), LsapEnumLogonSessions(), LsapGetLogonSessionData(), MockObReferenceObjectByHandle(), NtFlushInstructionCache(), NtWriteVirtualMemory(), ProcessIdToHandle(), PspCreateProcess(), PspSetPrimaryToken(), and test_process_access().

PSF2_PROTECTED_BIT

#define PSF2_PROTECTED_BIT   0x800

Definition at line 288 of file pstypes.h.

PSF_ADDRESS_SPACE_INITIALIZED_BIT

#define PSF_ADDRESS_SPACE_INITIALIZED_BIT   0x400

Definition at line 267 of file pstypes.h.

PSF_BREAK_ON_TERMINATION_BIT

#define PSF_BREAK_ON_TERMINATION_BIT   0x2000

Definition at line 269 of file pstypes.h.

Referenced by NtSetInformationProcess().

PSF_CREATE_FAILED_BIT

#define PSF_CREATE_FAILED_BIT   0x4000000

Definition at line 282 of file pstypes.h.

PSF_CREATE_REPORTED_BIT

#define PSF_CREATE_REPORTED_BIT   0x1

Definition at line 257 of file pstypes.h.

Referenced by DbgkCreateThread(), DbgkpSendApiMessage(), DbgkpSendApiMessageLpc(), and DbgkpSetProcessDebugObject().

PSF_DEFAULT_IO_PRIORITY_BIT

#define PSF_DEFAULT_IO_PRIORITY_BIT   0x8000000

Definition at line 283 of file pstypes.h.

PSF_FORK_FAILED_BIT

#define PSF_FORK_FAILED_BIT   0x100

Definition at line 265 of file pstypes.h.

PSF_HAS_ADDRESS_SPACE_BIT

#define PSF_HAS_ADDRESS_SPACE_BIT   0x40000

Definition at line 274 of file pstypes.h.

Referenced by PspCreateProcess().

PSF_IMAGE_NOTIFY_DONE_BIT

#define PSF_IMAGE_NOTIFY_DONE_BIT   0x400000

Definition at line 278 of file pstypes.h.

Referenced by DbgkCreateThread().

PSF_INJECT_INPAGE_ERRORS_BIT

#define PSF_INJECT_INPAGE_ERRORS_BIT   0x100000

Definition at line 276 of file pstypes.h.

PSF_LAUNCH_PREFETCHED_BIT

#define PSF_LAUNCH_PREFETCHED_BIT   0x80000

Definition at line 275 of file pstypes.h.

PSF_NO_DEBUG_INHERIT_BIT

#define PSF_NO_DEBUG_INHERIT_BIT   0x2

Definition at line 258 of file pstypes.h.

Referenced by DbgkpSetProcessDebugObject(), NtSetInformationProcess(), and PspCreateProcess().

PSF_OUTSWAP_ENABLED_BIT

#define PSF_OUTSWAP_ENABLED_BIT   0x40

Definition at line 263 of file pstypes.h.

PSF_OUTSWAPPED_BIT

#define PSF_OUTSWAPPED_BIT   0x80

Definition at line 264 of file pstypes.h.

PSF_OVERRIDE_ADDRESS_SPACE_BIT

#define PSF_OVERRIDE_ADDRESS_SPACE_BIT   0x20000

Definition at line 273 of file pstypes.h.

PSF_PDE_UPDATE_NEEDED_BIT

#define PSF_PDE_UPDATE_NEEDED_BIT   0x800000

Definition at line 279 of file pstypes.h.

PSF_PROCESS_DELETE_BIT

#define PSF_PROCESS_DELETE_BIT   0x8

Definition at line 260 of file pstypes.h.

Referenced by NtTerminateProcess(), PspExitThread(), PspTerminateProcess(), and PsSetProcessWin32Process().

PSF_PROCESS_EXITING_BIT

#define PSF_PROCESS_EXITING_BIT   0x4

Definition at line 259 of file pstypes.h.

Referenced by PspExitProcess(), and PspIsProcessExiting().

PSF_PROCESS_IN_SESSION_BIT

#define PSF_PROCESS_IN_SESSION_BIT   0x10000

Definition at line 272 of file pstypes.h.

Referenced by MiDereferenceSession(), MiSessionAddProcess(), MiSessionRemoveProcess(), MmSessionCreate(), and MmSessionDelete().

PSF_SESSION_CREATION_UNDERWAY_BIT

#define PSF_SESSION_CREATION_UNDERWAY_BIT   0x4000

Definition at line 270 of file pstypes.h.

Referenced by MiSessionCreateInternal().

PSF_SET_TIMER_RESOLUTION_BIT

#define PSF_SET_TIMER_RESOLUTION_BIT   0x1000

Definition at line 268 of file pstypes.h.

PSF_SWAP_ALLOWED_BIT

#define PSF_SWAP_ALLOWED_BIT   0x2000000

Definition at line 281 of file pstypes.h.

PSF_VDM_ALLOWED_BIT

#define PSF_VDM_ALLOWED_BIT   0x1000000

Definition at line 280 of file pstypes.h.

Referenced by NtSetInformationProcess().

PSF_VM_DELETED_BIT

#define PSF_VM_DELETED_BIT   0x20

Definition at line 262 of file pstypes.h.

PSF_VM_TOP_DOWN_BIT

#define PSF_VM_TOP_DOWN_BIT   0x200000

Definition at line 277 of file pstypes.h.

PSF_WOW64_SPLIT_PAGES_BIT

#define PSF_WOW64_SPLIT_PAGES_BIT   0x10

Definition at line 261 of file pstypes.h.

PSF_WOW64_VA_SPACE_4GB_BIT

#define PSF_WOW64_VA_SPACE_4GB_BIT   0x200

Definition at line 266 of file pstypes.h.

PSF_WRITE_WATCH_BIT

#define PSF_WRITE_WATCH_BIT   0x8000

Definition at line 271 of file pstypes.h.

PSP_DEFAULT_QUANTUMS

#define PSP_DEFAULT_QUANTUMS   0x00

Definition at line 131 of file pstypes.h.

PSP_FIXED_QUANTUMS

#define PSP_FIXED_QUANTUMS   0x08

Definition at line 133 of file pstypes.h.

Referenced by PsChangeQuantumTable().

PSP_LONG_QUANTUMS

#define PSP_LONG_QUANTUMS   0x10

Definition at line 134 of file pstypes.h.

Referenced by PsChangeQuantumTable().

PSP_SHORT_QUANTUMS

#define PSP_SHORT_QUANTUMS   0x20

Definition at line 135 of file pstypes.h.

Referenced by PsChangeQuantumTable().

PSP_VARIABLE_QUANTUMS

#define PSP_VARIABLE_QUANTUMS   0x04

Definition at line 132 of file pstypes.h.

Referenced by PsChangeQuantumTable().

STA_ADDRESS_SPACE_OWNER_BIT

#define STA_ADDRESS_SPACE_OWNER_BIT   0x4

Definition at line 245 of file pstypes.h.

STA_LPC_EXIT_THREAD_CALLED_BIT

#define STA_LPC_EXIT_THREAD_CALLED_BIT   0x2

Definition at line 244 of file pstypes.h.

STA_LPC_RECEIVED_MSG_ID_VALID_BIT

#define STA_LPC_RECEIVED_MSG_ID_VALID_BIT   0x1

Definition at line 243 of file pstypes.h.

STA_OWNS_WORKING_SET_BITS

#define STA_OWNS_WORKING_SET_BITS   0x1F8

Definition at line 246 of file pstypes.h.

STP_ACTIVE_EX_WORKER_BIT

#define STP_ACTIVE_EX_WORKER_BIT   0x1

Definition at line 235 of file pstypes.h.

STP_EX_WORKER_CAN_WAIT_USER_BIT

#define STP_EX_WORKER_CAN_WAIT_USER_BIT   0x2

Definition at line 236 of file pstypes.h.

STP_KEYED_EVENT_IN_USE_BIT

#define STP_KEYED_EVENT_IN_USE_BIT   0x8

Definition at line 238 of file pstypes.h.

STP_MEMORY_MAKER_BIT

#define STP_MEMORY_MAKER_BIT   0x4

Definition at line 237 of file pstypes.h.

TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED

#define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED   0x1

Definition at line 187 of file pstypes.h.

THREAD_BASE_PRIORITY_IDLE

#define THREAD_BASE_PRIORITY_IDLE   -15

Definition at line 177 of file pstypes.h.

Referenced by NtSetInformationThread().

THREAD_BASE_PRIORITY_LOWRT

#define THREAD_BASE_PRIORITY_LOWRT   15

Definition at line 174 of file pstypes.h.

Referenced by NtSetInformationThread().

THREAD_BASE_PRIORITY_MAX

#define THREAD_BASE_PRIORITY_MAX   2

Definition at line 175 of file pstypes.h.

Referenced by NtSetInformationThread().

THREAD_BASE_PRIORITY_MIN

#define THREAD_BASE_PRIORITY_MIN   -2

Definition at line 176 of file pstypes.h.

Referenced by NtSetInformationThread().

THREAD_DIRECT_IMPERSONATION

#define THREAD_DIRECT_IMPERSONATION   0x0200

Definition at line 144 of file pstypes.h.

Referenced by NtImpersonateThread().

THREAD_IMPERSONATE

#define THREAD_IMPERSONATE   0x0100

Definition at line 143 of file pstypes.h.

Referenced by NtImpersonateThread().

THREAD_QUERY_INFORMATION

#define THREAD_QUERY_INFORMATION   0x0040

Definition at line 141 of file pstypes.h.

Referenced by IMM_GetThreadData(), NtOpenThreadTokenEx(), NtQueryInformationThread(), NtUserQueryInformationThread(), PrintThreads(), PspCreateThread(), test_GetThreadTimes(), test_thread_priority(), and test_thread_security().

THREAD_SET_THREAD_TOKEN

#define THREAD_SET_THREAD_TOKEN   0x0080

Definition at line 142 of file pstypes.h.

Referenced by CreateLogoffSecurityAttributes(), NtSetInformationThread(), test_process_security(), and test_process_security_child().

TLS_EXPANSION_SLOTS

#define TLS_EXPANSION_SLOTS   1024

Definition at line 294 of file pstypes.h.

Referenced by LdrpInitializeProcess(), NtSetInformationThread(), TlsAlloc(), TlsFree(), TlsGetValue(), and TlsSetValue().

TLS_MINIMUM_AVAILABLE

#define TLS_MINIMUM_AVAILABLE   64

Definition at line 182 of file pstypes.h.

USER_SHARED_DATA

#define USER_SHARED_DATA   (0x7FFE0000)

Definition at line 51 of file pstypes.h.

Referenced by MiDeletePte(), and MmCleanProcessAddressSpace().

Typedef Documentation

APPCOMPAT_FLAGS

typedef enum _APPCOMPAT_FLAGS APPCOMPAT_FLAGS

APPCOMPAT_USERFLAGS

typedef enum _APPCOMPAT_USERFLAGS APPCOMPAT_USERFLAGS

APPCOMPAT_USERFLAGS_HIGHPART

typedef enum _APPCOMPAT_USERFLAGS_HIGHPART APPCOMPAT_USERFLAGS_HIGHPART

APPHELP_CACHE_SERVICE_LOOKUP

typedef struct _APPHELP_CACHE_SERVICE_LOOKUP APPHELP_CACHE_SERVICE_LOOKUP

APPHELPCACHESERVICECLASS

typedef enum _APPHELPCACHESERVICECLASS APPHELPCACHESERVICECLASS

CLIENT_ID32

typedef struct _CLIENT_ID32 CLIENT_ID32

CLIENT_ID64

typedef struct _CLIENT_ID64 CLIENT_ID64

Create

typedef _In_ BOOLEAN Create

Definition at line 511 of file pstypes.h.

EJOB

typedef struct _EJOB EJOB

EPROCESS

typedef struct _EPROCESS EPROCESS

EPROCESS_QUOTA_BLOCK

typedef struct _EPROCESS_QUOTA_BLOCK EPROCESS_QUOTA_BLOCK

EPROCESS_QUOTA_ENTRY

typedef struct _EPROCESS_QUOTA_ENTRY EPROCESS_QUOTA_ENTRY

ETHREAD

typedef struct _ETHREAD ETHREAD

INITIAL_PEB

typedef struct _INITIAL_PEB INITIAL_PEB

INITIAL_TEB

typedef struct _INITIAL_TEB INITIAL_TEB

JOB_SET_ARRAY

typedef struct _JOB_SET_ARRAY JOB_SET_ARRAY

JOBOBJECT_ASSOCIATE_COMPLETION_PORT

typedef struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT JOBOBJECT_ASSOCIATE_COMPLETION_PORT

JOBOBJECT_BASIC_ACCOUNTING_INFORMATION

typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION JOBOBJECT_BASIC_ACCOUNTING_INFORMATION

JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION

typedef struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION

JOBOBJECT_BASIC_LIMIT_INFORMATION

typedef struct _JOBOBJECT_BASIC_LIMIT_INFORMATION JOBOBJECT_BASIC_LIMIT_INFORMATION

JOBOBJECT_BASIC_PROCESS_ID_LIST

typedef struct _JOBOBJECT_BASIC_PROCESS_ID_LIST JOBOBJECT_BASIC_PROCESS_ID_LIST

JOBOBJECT_BASIC_UI_RESTRICTIONS

typedef struct _JOBOBJECT_BASIC_UI_RESTRICTIONS JOBOBJECT_BASIC_UI_RESTRICTIONS

JOBOBJECT_END_OF_JOB_TIME_INFORMATION

typedef struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION JOBOBJECT_END_OF_JOB_TIME_INFORMATION

JOBOBJECT_EXTENDED_LIMIT_INFORMATION

typedef struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION JOBOBJECT_EXTENDED_LIMIT_INFORMATION

JOBOBJECT_SECURITY_LIMIT_INFORMATION

typedef struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION JOBOBJECT_SECURITY_LIMIT_INFORMATION

JOBOBJECTINFOCLASS

typedef enum _JOBOBJECTINFOCLASS JOBOBJECTINFOCLASS

PAGEFAULT_HISTORY

typedef struct _PAGEFAULT_HISTORY PAGEFAULT_HISTORY

PAPPHELP_CACHE_SERVICE_LOOKUP

typedef struct _APPHELP_CACHE_SERVICE_LOOKUP * PAPPHELP_CACHE_SERVICE_LOOKUP

PCLIENT_ID32

typedef struct _CLIENT_ID32 * PCLIENT_ID32

PCLIENT_ID64

typedef struct _CLIENT_ID64 * PCLIENT_ID64

PCTEB_ACTIVE_FRAME

typedef const struct _TEB_ACTIVE_FRAME* PCTEB_ACTIVE_FRAME

Definition at line 706 of file pstypes.h.

PCTEB_ACTIVE_FRAME_CONTEXT

typedef const struct _TEB_ACTIVE_FRAME_CONTEXT* PCTEB_ACTIVE_FRAME_CONTEXT

Definition at line 691 of file pstypes.h.

PCTEB_ACTIVE_FRAME_CONTEXT_EX

typedef const struct _TEB_ACTIVE_FRAME_CONTEXT_EX* PCTEB_ACTIVE_FRAME_CONTEXT_EX

Definition at line 698 of file pstypes.h.

PCTEB_ACTIVE_FRAME_EX

typedef const struct _TEB_ACTIVE_FRAME_EX* PCTEB_ACTIVE_FRAME_EX

Definition at line 713 of file pstypes.h.

PEB_FREE_BLOCK

typedef struct _PEB_FREE_BLOCK PEB_FREE_BLOCK

PEJOB

typedef struct _EJOB * PEJOB

PEPROCESS_QUOTA_BLOCK

typedef struct _EPROCESS_QUOTA_BLOCK * PEPROCESS_QUOTA_BLOCK

PEPROCESS_QUOTA_ENTRY

typedef struct _EPROCESS_QUOTA_ENTRY * PEPROCESS_QUOTA_ENTRY

PGDI_BATCHFLUSH_ROUTINE

typedef NTSTATUS(NTAPI * PGDI_BATCHFLUSH_ROUTINE) (VOID)

Definition at line 546 of file pstypes.h.

PINITIAL_PEB

typedef struct _INITIAL_PEB * PINITIAL_PEB

PINITIAL_TEB

typedef struct _INITIAL_TEB * PINITIAL_TEB

PJOB_SET_ARRAY

typedef struct _JOB_SET_ARRAY * PJOB_SET_ARRAY

PJOBOBJECT_ASSOCIATE_COMPLETION_PORT

typedef struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT * PJOBOBJECT_ASSOCIATE_COMPLETION_PORT

PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION

typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION

PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION

typedef struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION

PJOBOBJECT_BASIC_LIMIT_INFORMATION

typedef struct _JOBOBJECT_BASIC_LIMIT_INFORMATION * PJOBOBJECT_BASIC_LIMIT_INFORMATION

PJOBOBJECT_BASIC_PROCESS_ID_LIST

typedef struct _JOBOBJECT_BASIC_PROCESS_ID_LIST * PJOBOBJECT_BASIC_PROCESS_ID_LIST

PJOBOBJECT_BASIC_UI_RESTRICTIONS

typedef struct _JOBOBJECT_BASIC_UI_RESTRICTIONS * PJOBOBJECT_BASIC_UI_RESTRICTIONS

PJOBOBJECT_END_OF_JOB_TIME_INFORMATION

typedef struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION PJOBOBJECT_END_OF_JOB_TIME_INFORMATION

PJOBOBJECT_EXTENDED_LIMIT_INFORMATION

typedef struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION * PJOBOBJECT_EXTENDED_LIMIT_INFORMATION

PJOBOBJECT_SECURITY_LIMIT_INFORMATION

typedef struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION * PJOBOBJECT_SECURITY_LIMIT_INFORMATION

PKWIN32_CLOSEMETHOD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_CLOSEMETHOD_CALLOUT) (_In_ struct _WIN32_CLOSEMETHOD_PARAMETERS *Parameters)

Definition at line 564 of file pstypes.h.

PKWIN32_DELETEMETHOD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_DELETEMETHOD_CALLOUT) (_In_ struct _WIN32_DELETEMETHOD_PARAMETERS *Parameters)

Definition at line 570 of file pstypes.h.

PKWIN32_GLOBALATOMTABLE_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_GLOBALATOMTABLE_CALLOUT) (VOID)

Definition at line 522 of file pstypes.h.

PKWIN32_JOB_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_JOB_CALLOUT) (_In_ struct _WIN32_JOBCALLOUT_PARAMETERS *Parameters)

Definition at line 540 of file pstypes.h.

PKWIN32_OKTOCLOSEMETHOD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_OKTOCLOSEMETHOD_CALLOUT) (_In_ struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS *Parameters)

Definition at line 558 of file pstypes.h.

PKWIN32_OPENMETHOD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_OPENMETHOD_CALLOUT) (_In_ struct _WIN32_OPENMETHOD_PARAMETERS *Parameters)

Definition at line 552 of file pstypes.h.

PKWIN32_PARSEMETHOD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_PARSEMETHOD_CALLOUT) (_In_ struct _WIN32_PARSEMETHOD_PARAMETERS *Parameters)

Definition at line 576 of file pstypes.h.

PKWIN32_POWEREVENT_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_POWEREVENT_CALLOUT) (_In_ struct _WIN32_POWEREVENT_PARAMETERS *Parameters)

Definition at line 528 of file pstypes.h.

PKWIN32_POWERSTATE_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_POWERSTATE_CALLOUT) (_In_ struct _WIN32_POWERSTATE_PARAMETERS *Parameters)

Definition at line 534 of file pstypes.h.

PKWIN32_SESSION_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_SESSION_CALLOUT) (_In_ PVOID Parameter)

Definition at line 582 of file pstypes.h.

PKWIN32_THREAD_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_THREAD_CALLOUT) (_In_ struct _ETHREAD *Thread, _In_ PSW32THREADCALLOUTTYPE Type)

Definition at line 515 of file pstypes.h.

PKWIN32_WIN32DATACOLLECTION_CALLOUT

typedef NTSTATUS(NTAPI * PKWIN32_WIN32DATACOLLECTION_CALLOUT) (_In_ struct _EPROCESS *Process, _In_ PVOID Callback, _In_ PVOID Context)

Definition at line 589 of file pstypes.h.

PLEGO_NOTIFY_ROUTINE

typedef VOID(NTAPI * PLEGO_NOTIFY_ROUTINE) (_In_ PKTHREAD Thread)

Definition at line 601 of file pstypes.h.

POWERSTATETASK

typedef enum _POWERSTATETASK POWERSTATETASK

PPAGEFAULT_HISTORY

typedef struct _PAGEFAULT_HISTORY * PPAGEFAULT_HISTORY

PPEB_FREE_BLOCK

typedef struct _PEB_FREE_BLOCK * PPEB_FREE_BLOCK

PPEBLOCKROUTINE

typedef VOID(NTAPI * PPEBLOCKROUTINE) (PVOID PebLock)

Definition at line 628 of file pstypes.h.

PPOST_PROCESS_INIT_ROUTINE

typedef NTSTATUS(NTAPI * PPOST_PROCESS_INIT_ROUTINE) (VOID)

Definition at line 608 of file pstypes.h.

PPROCESS_FOREGROUND_BACKGROUND

typedef struct _PROCESS_FOREGROUND_BACKGROUND * PPROCESS_FOREGROUND_BACKGROUND

PPROCESS_PRIORITY_CLASS

typedef struct _PROCESS_PRIORITY_CLASS * PPROCESS_PRIORITY_CLASS

PPS_IMPERSONATION_INFORMATION

typedef struct _PS_IMPERSONATION_INFORMATION * PPS_IMPERSONATION_INFORMATION

PPS_JOB_TOKEN_FILTER

typedef struct _PS_JOB_TOKEN_FILTER * PPS_JOB_TOKEN_FILTER

PPSP_RATE_APC

typedef struct _PSP_RATE_APC * PPSP_RATE_APC

PROCESS_FOREGROUND_BACKGROUND

typedef struct _PROCESS_FOREGROUND_BACKGROUND PROCESS_FOREGROUND_BACKGROUND

PROCESS_PRIORITY_CLASS

typedef struct _PROCESS_PRIORITY_CLASS PROCESS_PRIORITY_CLASS

PS_IMPERSONATION_INFORMATION

typedef struct _PS_IMPERSONATION_INFORMATION PS_IMPERSONATION_INFORMATION

PS_JOB_TOKEN_FILTER

typedef struct _PS_JOB_TOKEN_FILTER PS_JOB_TOKEN_FILTER

PSP_RATE_APC

typedef struct _PSP_RATE_APC PSP_RATE_APC

PSPOWEREVENTTYPE

typedef enum _PSPOWEREVENTTYPE PSPOWEREVENTTYPE

PSPROCESSPRIORITYMODE

typedef enum _PSPROCESSPRIORITYMODE PSPROCESSPRIORITYMODE

PSW32JOBCALLOUTTYPE

typedef enum _PSW32JOBCALLOUTTYPE PSW32JOBCALLOUTTYPE

PSW32THREADCALLOUTTYPE

typedef enum _PSW32THREADCALLOUTTYPE PSW32THREADCALLOUTTYPE

PTEB_ACTIVE_FRAME

typedef struct _TEB_ACTIVE_FRAME * PTEB_ACTIVE_FRAME

PTEB_ACTIVE_FRAME_CONTEXT

typedef struct _TEB_ACTIVE_FRAME_CONTEXT * PTEB_ACTIVE_FRAME_CONTEXT

PTEB_ACTIVE_FRAME_CONTEXT_EX

typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PTEB_ACTIVE_FRAME_CONTEXT_EX

PTEB_ACTIVE_FRAME_EX

typedef struct _TEB_ACTIVE_FRAME_EX * PTEB_ACTIVE_FRAME_EX

PTERMINATION_PORT

typedef struct _TERMINATION_PORT * PTERMINATION_PORT

PTHREAD_BASIC_INFORMATION

typedef struct _THREAD_BASIC_INFORMATION * PTHREAD_BASIC_INFORMATION

PWIN32_CALLOUTS_FPNS

typedef struct _WIN32_CALLOUTS_FPNS * PWIN32_CALLOUTS_FPNS

PWIN32_CLOSEMETHOD_PARAMETERS

typedef struct _WIN32_CLOSEMETHOD_PARAMETERS * PWIN32_CLOSEMETHOD_PARAMETERS

PWIN32_DELETEMETHOD_PARAMETERS

typedef struct _WIN32_DELETEMETHOD_PARAMETERS * PWIN32_DELETEMETHOD_PARAMETERS

PWIN32_JOBCALLOUT_PARAMETERS

typedef struct _WIN32_JOBCALLOUT_PARAMETERS * PWIN32_JOBCALLOUT_PARAMETERS

PWIN32_OKAYTOCLOSEMETHOD_PARAMETERS

typedef struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS * PWIN32_OKAYTOCLOSEMETHOD_PARAMETERS

PWIN32_OPENMETHOD_PARAMETERS

typedef struct _WIN32_OPENMETHOD_PARAMETERS * PWIN32_OPENMETHOD_PARAMETERS

PWIN32_PARSEMETHOD_PARAMETERS

typedef struct _WIN32_PARSEMETHOD_PARAMETERS * PWIN32_PARSEMETHOD_PARAMETERS

PWIN32_POWEREVENT_PARAMETERS

typedef struct _WIN32_POWEREVENT_PARAMETERS * PWIN32_POWEREVENT_PARAMETERS

PWIN32_POWERSTATE_PARAMETERS

typedef struct _WIN32_POWERSTATE_PARAMETERS * PWIN32_POWERSTATE_PARAMETERS

TEB_ACTIVE_FRAME

typedef struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME

TEB_ACTIVE_FRAME_CONTEXT

typedef struct _TEB_ACTIVE_FRAME_CONTEXT TEB_ACTIVE_FRAME_CONTEXT

TEB_ACTIVE_FRAME_CONTEXT_EX

typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX TEB_ACTIVE_FRAME_CONTEXT_EX

TEB_ACTIVE_FRAME_EX

typedef struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX

TERMINATION_PORT

typedef struct _TERMINATION_PORT TERMINATION_PORT

THREAD_BASIC_INFORMATION

typedef struct _THREAD_BASIC_INFORMATION THREAD_BASIC_INFORMATION

WIN32_CALLOUTS_FPNS

typedef struct _WIN32_CALLOUTS_FPNS WIN32_CALLOUTS_FPNS

WIN32_CLOSEMETHOD_PARAMETERS

typedef struct _WIN32_CLOSEMETHOD_PARAMETERS WIN32_CLOSEMETHOD_PARAMETERS

WIN32_DELETEMETHOD_PARAMETERS

typedef struct _WIN32_DELETEMETHOD_PARAMETERS WIN32_DELETEMETHOD_PARAMETERS

WIN32_JOBCALLOUT_PARAMETERS

typedef struct _WIN32_JOBCALLOUT_PARAMETERS WIN32_JOBCALLOUT_PARAMETERS

WIN32_OKAYTOCLOSEMETHOD_PARAMETERS

typedef struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS WIN32_OKAYTOCLOSEMETHOD_PARAMETERS

WIN32_OPENMETHOD_PARAMETERS

typedef struct _WIN32_OPENMETHOD_PARAMETERS WIN32_OPENMETHOD_PARAMETERS

WIN32_PARSEMETHOD_PARAMETERS

typedef struct _WIN32_PARSEMETHOD_PARAMETERS WIN32_PARSEMETHOD_PARAMETERS

WIN32_POWEREVENT_PARAMETERS

typedef struct _WIN32_POWEREVENT_PARAMETERS WIN32_POWEREVENT_PARAMETERS

WIN32_POWERSTATE_PARAMETERS

typedef struct _WIN32_POWERSTATE_PARAMETERS WIN32_POWERSTATE_PARAMETERS

Enumeration Type Documentation

_APPCOMPAT_FLAGS

enum _APPCOMPAT_FLAGS

Enumerator
GetShortPathNameNT4
GetDiskFreeSpace2GB
FTMFromCurrentAPI
DisallowCOMBindingNotifications
Ole32ValidatePointers
DisableCicero
Ole32EnableAsyncDocFile
EnableLegacyExceptionHandlinginOLE
DisableAdvanceRPCClientHardening
DisableMaybeNULLSizeisConsistencycheck
DisableAdvancedRPCrangeCheck
EnableLegacyExceptionHandlingInRPC
EnableLegacyNTFSFlagsForDocfileOpens
DisableNDRIIDConsistencyCheck
UserDisableForwarderPatch
DisableNewWMPAINTDispatchInOLE
DoNotAddToCache

Definition at line 741 of file pstypes.h.

{
    GetShortPathNameNT4 = 0x1,
    GetDiskFreeSpace2GB = 0x8,
    FTMFromCurrentAPI = 0x20,
    DisallowCOMBindingNotifications = 0x40,
    Ole32ValidatePointers = 0x80,
    DisableCicero = 0x100,
    Ole32EnableAsyncDocFile = 0x200,
    EnableLegacyExceptionHandlinginOLE = 0x400,
    DisableAdvanceRPCClientHardening = 0x800,
    DisableMaybeNULLSizeisConsistencycheck = 0x1000,
    DisableAdvancedRPCrangeCheck = 0x4000,
    EnableLegacyExceptionHandlingInRPC = 0x8000,
    EnableLegacyNTFSFlagsForDocfileOpens = 0x10000,
    DisableNDRIIDConsistencyCheck = 0x20000,
    UserDisableForwarderPatch = 0x40000,
    DisableNewWMPAINTDispatchInOLE = 0x100000,
    DoNotAddToCache = 0x80000000,
} APPCOMPAT_FLAGS;

_APPCOMPAT_USERFLAGS

enum _APPCOMPAT_USERFLAGS

Enumerator
DisableAnimation
DisableKeyboardCues
No50StylebitsInSetWindowLong
DisableDrawPatternRect
MSShellDialog
NoDDETerminateDuringDestroy
GiveupForeground
AlwaysActiveMenus
NoMouseHideInEdit
NoGdiBatching
FontSubstitution
No50StylebitsInCreateWindow
NoCustomPaperSizes
AllTheDdeHacks
UseDefaultCharset
NoCharDeadKey
NoTryExceptForWindowProc
NoInitInsertReplaceFlags
NoDdeSync
NoGhost
NoDdeAsyncReg
StrictLLHook
NoShadow
NoTimerCallbackProtection
HighDpiAware
OpenGLEmfAware
EnableTransparantBltMirror
NoPaddedBorder
ForceLegacyResizeCM
HardwareAudioMixer
DisableSWCursorOnMoveSize

Definition at line 767 of file pstypes.h.

{
    DisableAnimation = 0x1,
    DisableKeyboardCues = 0x2,
    No50StylebitsInSetWindowLong = 0x4,
    DisableDrawPatternRect = 0x8,
    MSShellDialog = 0x10,
    NoDDETerminateDuringDestroy = 0x20,
    GiveupForeground = 0x40,
    AlwaysActiveMenus = 0x80,
    NoMouseHideInEdit = 0x100,
    NoGdiBatching = 0x200,
    FontSubstitution = 0x400,
    No50StylebitsInCreateWindow = 0x800,
    NoCustomPaperSizes = 0x1000,
    AllTheDdeHacks = 0x2000,
    UseDefaultCharset = 0x4000,
    NoCharDeadKey = 0x8000,
    NoTryExceptForWindowProc = 0x10000,
    NoInitInsertReplaceFlags = 0x20000,
    NoDdeSync = 0x40000,
    NoGhost = 0x80000,
    NoDdeAsyncReg = 0x100000,
    StrictLLHook = 0x200000,
    NoShadow = 0x400000,
    NoTimerCallbackProtection = 0x1000000,
    HighDpiAware = 0x2000000,
    OpenGLEmfAware = 0x4000000,
    EnableTransparantBltMirror = 0x8000000,
    NoPaddedBorder = 0x10000000,
    ForceLegacyResizeCM = 0x20000000,
    HardwareAudioMixer = 0x40000000,
    DisableSWCursorOnMoveSize = 0x80000000,
#if 0
    DisableWindowArrangement = 0x100000000,
    ReorderWaveForCommunications = 0x200000000,
    NoGdiHwAcceleration = 0x400000000,
#endif
} APPCOMPAT_USERFLAGS;

_APPCOMPAT_USERFLAGS_HIGHPART

enum _APPCOMPAT_USERFLAGS_HIGHPART

Enumerator
DisableWindowArrangement
ReorderWaveForCommunications
NoGdiHwAcceleration

Definition at line 811 of file pstypes.h.

{
    DisableWindowArrangement = 0x1,
    ReorderWaveForCommunications = 0x2,
    NoGdiHwAcceleration = 0x4,
} APPCOMPAT_USERFLAGS_HIGHPART;

_APPHELPCACHESERVICECLASS

enum _APPHELPCACHESERVICECLASS

Enumerator
ApphelpCacheServiceLookup
ApphelpCacheServiceRemove
ApphelpCacheServiceUpdate
ApphelpCacheServiceFlush
ApphelpCacheServiceDump
ApphelpDBGReadRegistry
ApphelpDBGWriteRegistry

Definition at line 919 of file pstypes.h.

{
    ApphelpCacheServiceLookup = 0,
    ApphelpCacheServiceRemove = 1,
    ApphelpCacheServiceUpdate = 2,
    ApphelpCacheServiceFlush = 3,
    ApphelpCacheServiceDump = 4,

    ApphelpDBGReadRegistry = 0x100,
    ApphelpDBGWriteRegistry = 0x101,
} APPHELPCACHESERVICECLASS;

_JOBOBJECTINFOCLASS

enum _JOBOBJECTINFOCLASS

Enumerator
JobObjectBasicAccountingInformation
JobObjectBasicLimitInformation
JobObjectBasicProcessIdList
JobObjectBasicUIRestrictions
JobObjectSecurityLimitInformation
JobObjectEndOfJobTimeInformation
JobObjectAssociateCompletionPortInformation
JobObjectBasicAndIoAccountingInformation
JobObjectExtendedLimitInformation
JobObjectJobSetInformation
MaxJobObjectInfoClass
JobObjectBasicAccountingInformation
JobObjectBasicLimitInformation
JobObjectBasicProcessIdList
JobObjectBasicUIRestrictions
JobObjectSecurityLimitInformation
JobObjectEndOfJobTimeInformation
JobObjectAssociateCompletionPortInformation
JobObjectBasicAndIoAccountingInformation
JobObjectExtendedLimitInformation
JobObjectJobSetInformation
JobObjectGroupInformation
MaxJobObjectInfoClass

Definition at line 410 of file pstypes.h.

{
    JobObjectBasicAccountingInformation = 1,
    JobObjectBasicLimitInformation,
    JobObjectBasicProcessIdList,
    JobObjectBasicUIRestrictions,
    JobObjectSecurityLimitInformation,
    JobObjectEndOfJobTimeInformation,
    JobObjectAssociateCompletionPortInformation,
    JobObjectBasicAndIoAccountingInformation,
    JobObjectExtendedLimitInformation,
    JobObjectJobSetInformation,
    MaxJobObjectInfoClass
} JOBOBJECTINFOCLASS;

_POWERSTATETASK

enum _POWERSTATETASK

Enumerator
PowerState_BlockSessionSwitch
PowerState_Init
PowerState_QueryApps
PowerState_QueryServices
PowerState_QueryAppsFailed
PowerState_QueryServicesFailed
PowerState_SuspendApps
PowerState_SuspendServices
PowerState_ShowUI
PowerState_NotifyWL
PowerState_ResumeApps
PowerState_ResumeServices
PowerState_UnBlockSessionSwitch
PowerState_End
PowerState_BlockInput
PowerState_UnblockInput

Definition at line 448 of file pstypes.h.

{
    PowerState_BlockSessionSwitch = 0,
    PowerState_Init = 1,
    PowerState_QueryApps = 2,
    PowerState_QueryServices = 3,
    PowerState_QueryAppsFailed = 4,
    PowerState_QueryServicesFailed = 5,
    PowerState_SuspendApps = 6,
    PowerState_SuspendServices = 7,
    PowerState_ShowUI = 8,
    PowerState_NotifyWL = 9,
    PowerState_ResumeApps = 10,
    PowerState_ResumeServices = 11,
    PowerState_UnBlockSessionSwitch = 12,
    PowerState_End = 13,
    PowerState_BlockInput = 14,
    PowerState_UnblockInput = 15,
} POWERSTATETASK;

_PSPOWEREVENTTYPE

enum _PSPOWEREVENTTYPE

Enumerator
PsW32FullWake
PsW32EventCode
PsW32PowerPolicyChanged
PsW32SystemPowerState
PsW32SystemTime
PsW32DisplayState
PsW32CapabilitiesChanged
PsW32SetStateFailed
PsW32GdiOff
PsW32GdiOn
PsW32GdiPrepareResumeUI
PsW32GdiOffRequest
PsW32MonitorOff

Definition at line 428 of file pstypes.h.

{
    PsW32FullWake = 0,
    PsW32EventCode = 1,
    PsW32PowerPolicyChanged = 2,
    PsW32SystemPowerState = 3,
    PsW32SystemTime = 4,
    PsW32DisplayState = 5,
    PsW32CapabilitiesChanged = 6,
    PsW32SetStateFailed = 7,
    PsW32GdiOff = 8,
    PsW32GdiOn = 9,
    PsW32GdiPrepareResumeUI = 10,
    PsW32GdiOffRequest = 11,
    PsW32MonitorOff = 12,
} PSPOWEREVENTTYPE;

_PSPROCESSPRIORITYMODE

enum _PSPROCESSPRIORITYMODE

Enumerator
PsProcessPriorityForeground
PsProcessPriorityBackground
PsProcessPrioritySpinning

Definition at line 403 of file pstypes.h.

{
    PsProcessPriorityForeground,
    PsProcessPriorityBackground,
    PsProcessPrioritySpinning
} PSPROCESSPRIORITYMODE;

_PSW32JOBCALLOUTTYPE

enum _PSW32JOBCALLOUTTYPE

Enumerator
PsW32JobCalloutSetInformation
PsW32JobCalloutAddProcess
PsW32JobCalloutTerminate

Definition at line 471 of file pstypes.h.

{
   PsW32JobCalloutSetInformation = 0,
   PsW32JobCalloutAddProcess = 1,
   PsW32JobCalloutTerminate = 2,
} PSW32JOBCALLOUTTYPE;

_PSW32THREADCALLOUTTYPE

enum _PSW32THREADCALLOUTTYPE

Enumerator
PsW32ThreadCalloutInitialize
PsW32ThreadCalloutExit

Definition at line 481 of file pstypes.h.

{
    PsW32ThreadCalloutInitialize,
    PsW32ThreadCalloutExit,
} PSW32THREADCALLOUTTYPE;

Function Documentation

NTSTATUS()

typedef NTSTATUS

(

NTAPI *

PKWIN32_PROCESS_CALLOUT

)

Variable Documentation

PsJobType

POBJECT_TYPE NTSYSAPI PsJobType

Definition at line 20 of file job.c.