ReactOS  0.4.15-dev-3287-gfec35dc
pstypes.h
Go to the documentation of this file.
1 /*++ NDK Version: 0098
2 
3 Copyright (c) Alex Ionescu. All rights reserved.
4 
5 Header Name:
6 
7  pstypes.h
8 
9 Abstract:
10 
11  Type definitions for the Process Manager
12 
13 Author:
14 
15  Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
16 
17 --*/
18 
19 #ifndef _PSTYPES_H
20 #define _PSTYPES_H
21 
22 //
23 // Dependencies
24 //
25 #include <umtypes.h>
26 #include <ldrtypes.h>
27 #include <mmtypes.h>
28 #include <obtypes.h>
29 #include <rtltypes.h>
30 #ifndef NTOS_MODE_USER
31 #include <extypes.h>
32 #include <setypes.h>
33 #endif
34 
35 #ifdef __cplusplus
36 extern "C" {
37 #endif
38 
39 #ifndef NTOS_MODE_USER
40 
41 //
42 // Kernel Exported Object Types
43 //
45 
46 #endif // !NTOS_MODE_USER
47 
48 //
49 // KUSER_SHARED_DATA location in User Mode
50 //
51 #define USER_SHARED_DATA (0x7FFE0000)
52 
53 //
54 // Global Flags
55 //
56 #define FLG_STOP_ON_EXCEPTION 0x00000001
57 #define FLG_SHOW_LDR_SNAPS 0x00000002
58 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
59 #define FLG_STOP_ON_HUNG_GUI 0x00000008
60 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
61 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
62 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
63 #define FLG_HEAP_VALIDATE_ALL 0x00000080
64 #define FLG_APPLICATION_VERIFIER 0x00000100
65 #define FLG_POOL_ENABLE_TAGGING 0x00000400
66 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
67 #define FLG_USER_STACK_TRACE_DB 0x00001000
68 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
69 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
70 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
71 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
72 #define FLG_ENABLE_CSRDEBUG 0x00020000
73 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
74 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
75 #if (NTDDI_VERSION < NTDDI_WINXP)
76 #define FLG_HEAP_ENABLE_CALL_TRACING 0x00100000
77 #else
78 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
79 #endif
80 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
81 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
82 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
83 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
84 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
85 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
86 #define FLG_VALID_BITS 0x07FFFFFF
87 
88 //
89 // Flags for NtCreateProcessEx
90 //
91 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
92 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
93 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
94 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
95 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
96 #define PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS PROCESS_CREATE_FLAGS_LARGE_PAGES
97 #define PROCESS_CREATE_FLAGS_LEGAL_MASK (PROCESS_CREATE_FLAGS_BREAKAWAY | \
98  PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT | \
99  PROCESS_CREATE_FLAGS_INHERIT_HANDLES | \
100  PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE | \
101  PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS)
102 
103 //
104 // Process priority classes
105 //
106 #define PROCESS_PRIORITY_CLASS_INVALID 0
107 #define PROCESS_PRIORITY_CLASS_IDLE 1
108 #define PROCESS_PRIORITY_CLASS_NORMAL 2
109 #define PROCESS_PRIORITY_CLASS_HIGH 3
110 #define PROCESS_PRIORITY_CLASS_REALTIME 4
111 #define PROCESS_PRIORITY_CLASS_BELOW_NORMAL 5
112 #define PROCESS_PRIORITY_CLASS_ABOVE_NORMAL 6
113 
114 //
115 // Process base priorities
116 //
117 #define PROCESS_PRIORITY_IDLE 3
118 #define PROCESS_PRIORITY_NORMAL 8
119 #define PROCESS_PRIORITY_NORMAL_FOREGROUND 9
120 
121 //
122 // Process memory priorities
123 //
124 #define MEMORY_PRIORITY_BACKGROUND 0
125 #define MEMORY_PRIORITY_UNKNOWN 1
126 #define MEMORY_PRIORITY_FOREGROUND 2
127 
128 //
129 // Process Priority Separation Values (OR)
130 //
131 #define PSP_DEFAULT_QUANTUMS 0x00
132 #define PSP_VARIABLE_QUANTUMS 0x04
133 #define PSP_FIXED_QUANTUMS 0x08
134 #define PSP_LONG_QUANTUMS 0x10
135 #define PSP_SHORT_QUANTUMS 0x20
136 
137 //
138 // Process Handle Tracing Values
139 //
140 #define PROCESS_HANDLE_TRACE_TYPE_OPEN 1
141 #define PROCESS_HANDLE_TRACE_TYPE_CLOSE 2
142 #define PROCESS_HANDLE_TRACE_TYPE_BADREF 3
143 #define PROCESS_HANDLE_TRACING_MAX_STACKS 16
144 
145 #ifndef NTOS_MODE_USER
146 //
147 // Thread Access Types
148 //
149 #define THREAD_QUERY_INFORMATION 0x0040
150 #define THREAD_SET_THREAD_TOKEN 0x0080
151 #define THREAD_IMPERSONATE 0x0100
152 #define THREAD_DIRECT_IMPERSONATION 0x0200
153 
154 //
155 // Process Access Types
156 //
157 #define PROCESS_TERMINATE 0x0001
158 #define PROCESS_CREATE_THREAD 0x0002
159 #define PROCESS_SET_SESSIONID 0x0004
160 #define PROCESS_VM_OPERATION 0x0008
161 #define PROCESS_VM_READ 0x0010
162 #define PROCESS_VM_WRITE 0x0020
163 #define PROCESS_CREATE_PROCESS 0x0080
164 #define PROCESS_SET_QUOTA 0x0100
165 #define PROCESS_SET_INFORMATION 0x0200
166 #define PROCESS_QUERY_INFORMATION 0x0400
167 #define PROCESS_SUSPEND_RESUME 0x0800
168 #define PROCESS_QUERY_LIMITED_INFORMATION 0x1000
169 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
170 #define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
171  SYNCHRONIZE | \
172  0xFFFF)
173 #else
174 #define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
175  SYNCHRONIZE | \
176  0xFFF)
177 #endif
178 
179 //
180 // Thread Base Priorities
181 //
182 #define THREAD_BASE_PRIORITY_LOWRT 15
183 #define THREAD_BASE_PRIORITY_MAX 2
184 #define THREAD_BASE_PRIORITY_MIN -2
185 #define THREAD_BASE_PRIORITY_IDLE -15
186 
187 //
188 // TLS Slots
189 //
190 #define TLS_MINIMUM_AVAILABLE 64
191 
192 //
193 // TEB Active Frame Flags
194 //
195 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x1
196 
197 //
198 // Job Access Types
199 //
200 #define JOB_OBJECT_ASSIGN_PROCESS 0x1
201 #define JOB_OBJECT_SET_ATTRIBUTES 0x2
202 #define JOB_OBJECT_QUERY 0x4
203 #define JOB_OBJECT_TERMINATE 0x8
204 #define JOB_OBJECT_SET_SECURITY_ATTRIBUTES 0x10
205 #define JOB_OBJECT_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
206  SYNCHRONIZE | \
207  31)
208 
209 //
210 // Job Limit Flags
211 //
212 #define JOB_OBJECT_LIMIT_WORKINGSET 0x1
213 #define JOB_OBJECT_LIMIT_PROCESS_TIME 0x2
214 #define JOB_OBJECT_LIMIT_JOB_TIME 0x4
215 #define JOB_OBJECT_LIMIT_ACTIVE_PROCESS 0x8
216 #define JOB_OBJECT_LIMIT_AFFINITY 0x10
217 #define JOB_OBJECT_LIMIT_PRIORITY_CLASS 0x20
218 #define JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME 0x40
219 #define JOB_OBJECT_LIMIT_SCHEDULING_CLASS 0x80
220 #define JOB_OBJECT_LIMIT_PROCESS_MEMORY 0x100
221 #define JOB_OBJECT_LIMIT_JOB_MEMORY 0x200
222 #define JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION 0x400
223 #define JOB_OBJECT_LIMIT_BREAKAWAY_OK 0x800
224 #define JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK 0x1000
225 #define JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE 0x2000
226 
227 //
228 // Job Security Limit Flags
229 //
230 #define JOB_OBJECT_SECURITY_NO_ADMIN 0x0001
231 #define JOB_OBJECT_SECURITY_RESTRICTED_TOKEN 0x0002
232 #define JOB_OBJECT_SECURITY_ONLY_TOKEN 0x0004
233 #define JOB_OBJECT_SECURITY_FILTER_TOKENS 0x0008
234 
235 //
236 // Cross Thread Flags
237 //
238 #define CT_TERMINATED_BIT 0x1
239 #define CT_DEAD_THREAD_BIT 0x2
240 #define CT_HIDE_FROM_DEBUGGER_BIT 0x4
241 #define CT_ACTIVE_IMPERSONATION_INFO_BIT 0x8
242 #define CT_SYSTEM_THREAD_BIT 0x10
243 #define CT_HARD_ERRORS_ARE_DISABLED_BIT 0x20
244 #define CT_BREAK_ON_TERMINATION_BIT 0x40
245 #define CT_SKIP_CREATION_MSG_BIT 0x80
246 #define CT_SKIP_TERMINATION_MSG_BIT 0x100
247 
248 //
249 // Same Thread Passive Flags
250 //
251 #define STP_ACTIVE_EX_WORKER_BIT 0x1
252 #define STP_EX_WORKER_CAN_WAIT_USER_BIT 0x2
253 #define STP_MEMORY_MAKER_BIT 0x4
254 #define STP_KEYED_EVENT_IN_USE_BIT 0x8
255 
256 //
257 // Same Thread APC Flags
258 //
259 #define STA_LPC_RECEIVED_MSG_ID_VALID_BIT 0x1
260 #define STA_LPC_EXIT_THREAD_CALLED_BIT 0x2
261 #define STA_ADDRESS_SPACE_OWNER_BIT 0x4
262 #define STA_OWNS_WORKING_SET_BITS 0x1F8
263 
264 //
265 // Kernel Process flags (maybe in ketypes.h?)
266 //
267 #define KPSF_AUTO_ALIGNMENT_BIT 0
268 #define KPSF_DISABLE_BOOST_BIT 1
269 
270 //
271 // Process Flags
272 //
273 #define PSF_CREATE_REPORTED_BIT 0x1
274 #define PSF_NO_DEBUG_INHERIT_BIT 0x2
275 #define PSF_PROCESS_EXITING_BIT 0x4
276 #define PSF_PROCESS_DELETE_BIT 0x8
277 #define PSF_WOW64_SPLIT_PAGES_BIT 0x10
278 #define PSF_VM_DELETED_BIT 0x20
279 #define PSF_OUTSWAP_ENABLED_BIT 0x40
280 #define PSF_OUTSWAPPED_BIT 0x80
281 #define PSF_FORK_FAILED_BIT 0x100
282 #define PSF_WOW64_VA_SPACE_4GB_BIT 0x200
283 #define PSF_ADDRESS_SPACE_INITIALIZED_BIT 0x400
284 #define PSF_SET_TIMER_RESOLUTION_BIT 0x1000
285 #define PSF_BREAK_ON_TERMINATION_BIT 0x2000
286 #define PSF_SESSION_CREATION_UNDERWAY_BIT 0x4000
287 #define PSF_WRITE_WATCH_BIT 0x8000
288 #define PSF_PROCESS_IN_SESSION_BIT 0x10000
289 #define PSF_OVERRIDE_ADDRESS_SPACE_BIT 0x20000
290 #define PSF_HAS_ADDRESS_SPACE_BIT 0x40000
291 #define PSF_LAUNCH_PREFETCHED_BIT 0x80000
292 #define PSF_INJECT_INPAGE_ERRORS_BIT 0x100000
293 #define PSF_VM_TOP_DOWN_BIT 0x200000
294 #define PSF_IMAGE_NOTIFY_DONE_BIT 0x400000
295 #define PSF_PDE_UPDATE_NEEDED_BIT 0x800000
296 #define PSF_VDM_ALLOWED_BIT 0x1000000
297 #define PSF_SWAP_ALLOWED_BIT 0x2000000
298 #define PSF_CREATE_FAILED_BIT 0x4000000
299 #define PSF_DEFAULT_IO_PRIORITY_BIT 0x8000000
300 
301 //
302 // Vista Process Flags
303 //
304 #define PSF2_PROTECTED_BIT 0x800
305 #endif
306 
307 //
308 // TLS/FLS Defines
309 //
310 #define TLS_EXPANSION_SLOTS 1024
311 
312 #ifdef NTOS_MODE_USER
313 //
314 // Thread Native Base Priorities
315 //
316 #define LOW_PRIORITY 0
317 #define LOW_REALTIME_PRIORITY 16
318 #define HIGH_PRIORITY 31
319 #define MAXIMUM_PRIORITY 32
320 
321 //
322 // Current Process/Thread built-in 'special' handles
323 //
324 #define NtCurrentProcess() ((HANDLE)(LONG_PTR)-1)
325 #define ZwCurrentProcess() NtCurrentProcess()
326 #define NtCurrentThread() ((HANDLE)(LONG_PTR)-2)
327 #define ZwCurrentThread() NtCurrentThread()
328 
329 //
330 // Process/Thread/Job Information Classes for NtQueryInformationProcess/Thread/Job
331 //
332 typedef enum _PROCESSINFOCLASS
333 {
338  ProcessTimes,
383 
384 typedef enum _THREADINFOCLASS
385 {
387  ThreadTimes,
416 
417 #else
418 
420 {
425 
427 {
440 
441 //
442 // Power Event Events for Win32K Power Event Callback
443 //
444 typedef enum _PSPOWEREVENTTYPE
445 {
460 
461 //
462 // Power State Tasks for Win32K Power State Callback
463 //
464 typedef enum _POWERSTATETASK
465 {
483 
484 //
485 // Win32K Job Callback Types
486 //
488 {
493 
494 //
495 // Win32K Thread Callback Types
496 //
498 {
502 
503 //
504 // Declare empty structure definitions so that they may be referenced by
505 // routines before they are defined
506 //
507 struct _W32THREAD;
508 struct _W32PROCESS;
509 //struct _ETHREAD;
518 
519 //
520 // Win32K Process and Thread Callbacks
521 //
522 typedef
523 NTSTATUS
524 (NTAPI *PKWIN32_PROCESS_CALLOUT)(
525  _In_ struct _EPROCESS *Process,
527 );
528 
529 typedef
530 NTSTATUS
532  _In_ struct _ETHREAD *Thread,
534 );
535 
536 typedef
537 NTSTATUS
539  VOID
540 );
541 
542 typedef
543 NTSTATUS
546 );
547 
548 typedef
549 NTSTATUS
552 );
553 
554 typedef
555 NTSTATUS
558 );
559 
560 typedef
561 NTSTATUS
563  VOID
564 );
565 
566 typedef
567 NTSTATUS
570 );
571 
572 typedef
573 NTSTATUS
576 );
577 
578 typedef
579 NTSTATUS
582 );
583 
584 typedef
585 NTSTATUS
588 );
589 
590 typedef
591 NTSTATUS
594 );
595 
596 typedef
597 NTSTATUS
600 );
601 
602 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
603 typedef
604 NTSTATUS
606  _In_ struct _EPROCESS *Process,
609 );
610 #endif
611 
612 //
613 // Lego Callback
614 //
615 typedef
616 VOID
619 );
620 
621 #endif
622 
623 typedef NTSTATUS
625  VOID
626 );
627 
628 //
629 // Descriptor Table Entry Definition
630 //
631 #if (_M_IX86)
632 #define _DESCRIPTOR_TABLE_ENTRY_DEFINED
633 typedef struct _DESCRIPTOR_TABLE_ENTRY
634 {
635  ULONG Selector;
637 } DESCRIPTOR_TABLE_ENTRY, *PDESCRIPTOR_TABLE_ENTRY;
638 #endif
639 
640 //
641 // PEB Lock Routine
642 //
643 typedef VOID
645  PVOID PebLock
646 );
647 
648 //
649 // PEB Free Block Descriptor
650 //
651 typedef struct _PEB_FREE_BLOCK
652 {
653  struct _PEB_FREE_BLOCK* Next;
654  ULONG Size;
656 
657 //
658 // Initial PEB
659 //
660 typedef struct _INITIAL_PEB
661 {
665  union
666  {
668 #if (NTDDI_VERSION >= NTDDI_WS03)
669  struct
670  {
672 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
676 #else
677  BOOLEAN SpareBits:7;
678 #endif
679  };
680 #else
681  BOOLEAN SpareBool;
682 #endif
683  };
686 
687 //
688 // Initial TEB
689 //
690 typedef struct _INITIAL_TEB
691 {
698 
699 //
700 // TEB Active Frame Structures
701 //
703 {
708 
710 {
715 
716 typedef struct _TEB_ACTIVE_FRAME
717 {
722 typedef const struct _TEB_ACTIVE_FRAME *PCTEB_ACTIVE_FRAME;
723 
724 typedef struct _TEB_ACTIVE_FRAME_EX
725 {
730 
731 typedef struct _CLIENT_ID32
732 {
736 
737 typedef struct _CLIENT_ID64
738 {
742 
743 #if (NTDDI_VERSION < NTDDI_WS03)
744 typedef struct _Wx86ThreadState
745 {
746  PULONG CallBx86Eip;
747  PVOID DeallocationCpu;
748  BOOLEAN UseKnownWx86Dll;
749  CHAR OleStubInvoked;
750 } Wx86ThreadState, *PWx86ThreadState;
751 #endif
752 
753 //
754 // PEB.AppCompatFlags
755 // Tag FLAG_MASK_KERNEL
756 //
757 typedef enum _APPCOMPAT_FLAGS
758 {
764  DisableCicero = 0x100,
775  DoNotAddToCache = 0x80000000,
777 
778 
779 //
780 // PEB.AppCompatFlagsUser.LowPart
781 // Tag FLAG_MASK_USER
782 //
784 {
794  NoGdiBatching = 0x200,
798  AllTheDdeHacks = 0x2000,
800  NoCharDeadKey = 0x8000,
803  NoDdeSync = 0x40000,
804  NoGhost = 0x80000,
805  NoDdeAsyncReg = 0x100000,
806  StrictLLHook = 0x200000,
807  NoShadow = 0x400000,
809  HighDpiAware = 0x2000000,
810  OpenGLEmfAware = 0x4000000,
812  NoPaddedBorder = 0x10000000,
813  ForceLegacyResizeCM = 0x20000000,
814  HardwareAudioMixer = 0x40000000,
816 #if 0
817  DisableWindowArrangement = 0x100000000,
818  ReorderWaveForCommunications = 0x200000000,
819  NoGdiHwAcceleration = 0x400000000,
820 #endif
822 
823 //
824 // PEB.AppCompatFlagsUser.HighPart
825 // Tag FLAG_MASK_USER
826 //
828 {
833 
834 //
835 // Process Environment Block (PEB)
836 // Thread Environment Block (TEB)
837 //
838 #include "peb_teb.h"
839 
840 #ifdef _WIN64
841 //
842 // Explicit 32 bit PEB/TEB
843 //
844 #define EXPLICIT_32BIT
845 #include "peb_teb.h"
846 #undef EXPLICIT_32BIT
847 
848 //
849 // Explicit 64 bit PEB/TEB
850 //
851 #define EXPLICIT_64BIT
852 #include "peb_teb.h"
853 #undef EXPLICIT_64BIT
854 #endif
855 
856 #ifdef NTOS_MODE_USER
857 
858 //
859 // Process Information Structures for NtQueryProcessInformation
860 //
861 typedef struct _PROCESS_BASIC_INFORMATION
862 {
870 
871 typedef struct _PROCESS_ACCESS_TOKEN
872 {
873  HANDLE Token;
874  HANDLE Thread;
876 
877 typedef struct _PROCESS_DEVICEMAP_INFORMATION
878 {
879  union
880  {
881  struct
882  {
884  } Set;
885  struct
886  {
887  ULONG DriveMap;
888  UCHAR DriveType[32];
889  } Query;
890  };
892 
893 typedef struct _KERNEL_USER_TIMES
894 {
900 
901 typedef struct _POOLED_USAGE_AND_LIMITS
902 {
913 
914 typedef struct _PROCESS_WS_WATCH_INFORMATION
915 {
919 
920 typedef struct _PROCESS_SESSION_INFORMATION
921 {
924 
925 typedef struct _PROCESS_HANDLE_TRACING_ENTRY
926 {
927  HANDLE Handle;
929  ULONG Type;
932 
933 typedef struct _PROCESS_HANDLE_TRACING_QUERY
934 {
935  HANDLE Handle;
939 
940 #endif
941 
943 {
948 
949 typedef struct _PROCESS_LDT_SIZE
950 {
953 
955 {
959 
960 // Compatibility with windows, see CORE-16757, CORE-17106, CORE-17247
961 C_ASSERT(sizeof(PROCESS_PRIORITY_CLASS) == 2);
962 
964 {
967 
968 //
969 // Apphelp SHIM Cache
970 //
972 {
978 
982 
983 
985 {
989 
990 
991 //
992 // Thread Information Structures for NtQueryProcessInformation
993 //
994 typedef struct _THREAD_BASIC_INFORMATION
995 {
1003 
1004 #ifndef NTOS_MODE_USER
1005 
1006 //
1007 // Job Set Array
1008 //
1009 typedef struct _JOB_SET_ARRAY
1010 {
1015 
1016 //
1017 // Process Quota Type
1018 //
1019 typedef enum _PS_QUOTA_TYPE
1020 {
1024 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1026 #endif
1027 #if (NTDDI_VERSION == NTDDI_LONGHORN)
1029 #endif
1031 } PS_QUOTA_TYPE;
1032 
1033 //
1034 // EPROCESS Quota Structures
1035 //
1037 {
1043 
1045 {
1051 
1052 //
1053 // Process Pagefault History
1054 //
1055 typedef struct _PAGEFAULT_HISTORY
1056 {
1063 
1064 //
1065 // Process Impersonation Information
1066 //
1068 {
1074 
1075 //
1076 // Process Termination Port
1077 //
1078 typedef struct _TERMINATION_PORT
1079 {
1083 
1084 //
1085 // Per-Process APC Rate Limiting
1086 //
1087 typedef struct _PSP_RATE_APC
1088 {
1089  union
1090  {
1093  };
1097 
1098 //
1099 // Executive Thread (ETHREAD)
1100 //
1101 typedef struct _ETHREAD
1102 {
1105  union
1106  {
1110  };
1111  union
1112  {
1115  };
1117  union
1118  {
1122 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1124 #endif
1125  };
1129 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1131 #else
1132  union
1133  {
1134  KSEMAPHORE LpcReplySemaphore;
1136  };
1137  union
1138  {
1139  PVOID LpcReplyMessage;
1140  PVOID LpcWaitingOnPort;
1141  };
1142 #endif
1147 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1149 #else
1150  struct _EPROCESS *ThreadsProcess;
1151 #endif
1153  union
1154  {
1157  };
1161 #if (NTDDI_VERSION < NTDDI_LONGHORN)
1162  ULONG LpcReplyMessageId;
1163 #endif
1165 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1167 #else
1169 #endif
1170  union
1171  {
1172  struct
1173  {
1175 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1177 #else
1178  ULONG DeadThread:1;
1179 #endif
1187 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1192 #endif
1193  };
1195  };
1196  union
1197  {
1198  struct
1199  {
1204 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1206 #endif
1207  };
1209  };
1210  union
1211  {
1212  struct
1213  {
1216 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1218 #else
1219  ULONG AddressSpaceOwner:1;
1220 #endif
1227 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1231 #else
1232  ULONG ApcNeeded:1;
1233 #endif
1234  };
1236  };
1237 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1239 #else
1240  UCHAR ForwardClusterOnly;
1241 #endif
1244 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1246  union
1247  {
1250  };
1254 #endif
1255 } ETHREAD;
1256 
1257 //
1258 // Executive Process (EPROCESS)
1259 //
1260 typedef struct _EPROCESS
1261 {
1276 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1277  union
1278  {
1282  };
1283 #else
1284  PVOID ExceptionPort;
1285 #endif
1289 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1292 #else
1294  KSPIN_LOCK HyperSpaceLock;
1295 #endif
1303  struct _EJOB *Job;
1314 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1317 #else
1318  PVOID Spare0[3];
1319 #endif
1320  union
1321  {
1324  };
1331 #ifdef _M_AMD64
1332  struct _WOW64_PROCESS *Wow64Process;
1333 #else
1335 #endif
1337 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1339 #else
1341 #endif
1344  struct _PEB* Peb;
1357 #ifdef _M_AMD64
1358  ULONG Spares[2];
1359 #else
1361 #endif
1363 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1364  union
1365  {
1366  struct
1367  {
1383  };
1385  };
1386 #else
1387  ULONG JobStatus;
1388 #endif
1389  union
1390  {
1391  struct
1392  {
1406 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1408 #else
1409  ULONG SessionCreationUnderway:1;
1410 #endif
1422 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1424 #else
1425  ULONG CreateFailed:1;
1426 #endif
1428 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1430 #else
1431  ULONG Spare1:1;
1432  ULONG Spare2:1;
1433 #endif
1434  };
1436  };
1438 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1440 #else
1441  USHORT NextPageColor;
1442 #endif
1443  union
1444  {
1445  struct
1446  {
1449  };
1451  };
1455 } EPROCESS;
1456 
1457 //
1458 // Job Token Filter Data
1459 //
1460 #include <pshpack1.h>
1461 typedef struct _PS_JOB_TOKEN_FILTER
1462 {
1473 
1474 //
1475 // Executive Job (EJOB)
1476 //
1477 typedef struct _EJOB
1478 {
1520 #if (NTDDI_VERSION >= NTDDI_WINXP) && (NTDDI_VERSION < NTDDI_WS03)
1522 #elif (NTDDI_VERSION >= NTDDI_WS03) && (NTDDI_VERSION < NTDDI_LONGHORN)
1524 #elif (NTDDI_VERSION >= NTDDI_LONGHORN)
1526 #endif
1530 } EJOB, *PEJOB;
1531 #include <poppack.h>
1532 
1533 //
1534 // Job Information Structures for NtQueryInformationJobObject
1535 //
1536 
1538 {
1548 
1550 {
1561 
1563 {
1568 
1570 {
1573 
1575 {
1582 
1584 {
1587 
1589 {
1593 
1595 {
1599 
1601 {
1609 
1610 
1611 //
1612 // Win32K Callback Registration Data
1613 //
1615 {
1619 
1621 {
1628 
1630 {
1635 
1637 {
1644 
1646 {
1652 
1654 {
1661 
1663 {
1666 
1668 {
1680 
1681 typedef struct _WIN32_CALLOUTS_FPNS
1682 {
1683  PKWIN32_PROCESS_CALLOUT ProcessCallout;
1699 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
1701 #endif
1703 
1704 #endif // !NTOS_MODE_USER
1705 
1706 #ifdef __cplusplus
1707 }; // extern "C"
1708 #endif
1709 
1710 #endif // _PSTYPES_H
KSEMAPHORE KeyedWaitSemaphore
Definition: pstypes.h:1130
LARGE_INTEGER WriteOperationCount
Definition: pstypes.h:1347
PCTEB_ACTIVE_FRAME_CONTEXT Context
Definition: pstypes.h:720
ULONG LimitFlags
Definition: pstypes.h:1493
PKWIN32_POWERSTATE_CALLOUT PowerStateCallout
Definition: pstypes.h:1687
enum _JOBOBJECTINFOCLASS JOBOBJECTINFOCLASS
struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION * PJOBOBJECT_EXTENDED_LIMIT_INFORMATION
_APPCOMPAT_USERFLAGS
Definition: pstypes.h:783
LIST_ENTRY PostBlockList
Definition: pstypes.h:1116
ULONGLONG Filler
Definition: pstypes.h:1323
struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION JOBOBJECT_EXTENDED_LIMIT_INFORMATION
BOOLEAN SpareBits
Definition: pstypes.h:675
ULONG64 UniqueProcess
Definition: pstypes.h:739
const struct _TEB_ACTIVE_FRAME_CONTEXT * PCTEB_ACTIVE_FRAME_CONTEXT
Definition: pstypes.h:707
struct _INITIAL_TEB * PINITIAL_TEB
LIST_ENTRY MmProcessLinks
Definition: pstypes.h:1360
NTSTATUS(NTAPI * PKWIN32_WIN32DATACOLLECTION_CALLOUT)(_In_ struct _EPROCESS *Process, _In_ PVOID Callback, _In_ PVOID Context)
Definition: pstypes.h:605
LARGE_INTEGER ExitTime
Definition: pstypes.h:1107
HARDWARE_PTE PageDirectoryPte
Definition: pstypes.h:1322
ULONG EndOfJobTimeAction
Definition: pstypes.h:1503
ULONG Wow64SplitPages
Definition: pstypes.h:1397
LIST_ENTRY ThreadListEntry
Definition: pstypes.h:1158
LARGE_INTEGER ReadOperationCount
Definition: pstypes.h:1346
#define PROCESS_HANDLE_TRACING_MAX_STACKS
Definition: pstypes.h:143
ULONG JobFlags
Definition: pstypes.h:1529
ULONG Spare1
Definition: pstypes.h:1229
NTSTATUS(NTAPI * PKWIN32_GLOBALATOMTABLE_CALLOUT)(VOID)
Definition: pstypes.h:538
struct _PROCESS_FOREGROUND_BACKGROUND PROCESS_FOREGROUND_BACKGROUND
ULONG SkipTerminationMsg
Definition: pstypes.h:1186
_Must_inspect_result_ _In_ WDFIORESLIST _In_ PIO_RESOURCE_DESCRIPTOR Descriptor
Definition: wdfresource.h:339
PVOID Win32StartParameter
Definition: pstypes.h:1123
struct _WIN32_POWERSTATE_PARAMETERS * PWIN32_POWERSTATE_PARAMETERS
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
Definition: pstypes.h:1072
ULONG CapturedGroupCount
Definition: pstypes.h:1466
ULONG ReportCommitChanges
Definition: pstypes.h:1372
KAFFINITY AffinityMask
Definition: compat.h:789
_Must_inspect_result_ _In_ WDFQUEUE _In_opt_ WDFREQUEST _In_opt_ WDFFILEOBJECT _Inout_opt_ PWDF_REQUEST_PARAMETERS Parameters
Definition: wdfio.h:863
PKWIN32_SESSION_CALLOUT WindowStationOkToCloseProcedure
Definition: pstypes.h:1694
enum _APPCOMPAT_FLAGS APPCOMPAT_FLAGS
OB_OPEN_REASON OpenReason
Definition: pstypes.h:1638
UCHAR CacheManagerActive
Definition: pstypes.h:1238
SINGLE_LIST_ENTRY NextApc
Definition: pstypes.h:1091
EPROCESS_QUOTA_ENTRY QuotaEntry[PsQuotaTypes]
Definition: pstypes.h:1046
struct _EPROCESS_QUOTA_ENTRY EPROCESS_QUOTA_ENTRY
ULONG WriteWatch
Definition: pstypes.h:1411
Definition: ntbasedef.h:628
ULONG Flags2
Definition: pstypes.h:1384
ULONG OwnsSystemWorkingSetShared
Definition: pstypes.h:1224
#define _Out_
Definition: ms_sal.h:345
#define ANYSIZE_ARRAY
Definition: typedefs.h:46
PGDI_BATCHFLUSH_ROUTINE BatchFlushRoutine
Definition: pstypes.h:1689
ULONG BreakOnTermination
Definition: pstypes.h:1405
BOOLEAN BitField
Definition: pstypes.h:667
LIST_ENTRY KeyedWaitChain
Definition: pstypes.h:1109
HANDLE InheritedFromUniqueProcessId
Definition: pstypes.h:1309
PPSP_RATE_APC RateControlApc
Definition: pstypes.h:1148
SIZE_T PeakVirtualSize
Definition: pstypes.h:1272
LARGE_INTEGER TotalUserTime
Definition: pstypes.h:1483
struct _PSP_RATE_APC PSP_RATE_APC
struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION JOBOBJECT_SECURITY_LIMIT_INFORMATION
struct _CLIENT_ID64 CLIENT_ID64
_In_ BOOLEAN Create
Definition: pstypes.h:527
ULONG CapturedPrivilegesLength
Definition: pstypes.h:1471
struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION JOBOBJECT_END_OF_JOB_TIME_INFORMATION
UCHAR SubSystemMajorVersion
Definition: pstypes.h:1448
ULONG MemoryMaker
Definition: pstypes.h:1202
char CHAR
Definition: xmlstorage.h:175
LARGE_INTEGER CreateTime
Definition: pstypes.h:1104
LARGE_INTEGER ThisPeriodTotalKernelTime
Definition: pstypes.h:1486
KEVENT Event
Definition: pstypes.h:1479
struct _PS_JOB_TOKEN_FILTER * PPS_JOB_TOKEN_FILTER
struct _KERNEL_USER_TIMES KERNEL_USER_TIMES
LONG NTSTATUS
Definition: precomp.h:26
struct _PROCESS_DEVICEMAP_INFORMATION PROCESS_DEVICEMAP_INFORMATION
struct _PROCESS_ACCESS_TOKEN * PPROCESS_ACCESS_TOKEN
struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION * PJOBOBJECT_SECURITY_LIMIT_INFORMATION
LARGE_INTEGER UserTime
Definition: winternl.h:1063
EX_RUNDOWN_REF RundownProtect
Definition: pstypes.h:1159
struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS WIN32_OKAYTOCLOSEMETHOD_PARAMETERS
KTHREAD Tcb
Definition: pstypes.h:1103
PVOID ExceptionPortData
Definition: pstypes.h:1279
PFN_NUMBER NumberOfPrivatePages
Definition: pstypes.h:1300
PSID_AND_ATTRIBUTES CapturedSids
Definition: pstypes.h:1464
struct _POOLED_USAGE_AND_LIMITS POOLED_USAGE_AND_LIMITS
ULONG LpcReceivedMessageId
Definition: pstypes.h:1156
ULONG JobNotReallyActive
Definition: pstypes.h:1368
SIZE_T QuotaUsage[PsQuotaTypes]
Definition: pstypes.h:1269
NTSTATUS(NTAPI * PKWIN32_THREAD_CALLOUT)(_In_ struct _ETHREAD *Thread, _In_ PSW32THREADCALLOUTTYPE Type)
Definition: pstypes.h:531
_PSPROCESSPRIORITYMODE
Definition: pstypes.h:419
ERESOURCE JobLock
Definition: pstypes.h:1482
struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
LIST_ENTRY ActiveTimerListHead
Definition: pstypes.h:1127
ULONG AlpcMessageId
Definition: pstypes.h:1245
ULONG TotalTerminatedProcesses
Definition: pstypes.h:1490
NTSTATUS(NTAPI * PKWIN32_POWERSTATE_CALLOUT)(_In_ struct _WIN32_POWERSTATE_PARAMETERS *Parameters)
Definition: pstypes.h:550
PVOID CloneRoot
Definition: pstypes.h:1299
struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION PJOBOBJECT_END_OF_JOB_TIME_INFORMATION
PKWIN32_POWEREVENT_CALLOUT PowerEventCallout
Definition: pstypes.h:1686
NTSTATUS(NTAPI * PKWIN32_JOB_CALLOUT)(_In_ struct _WIN32_JOBCALLOUT_PARAMETERS *Parameters)
Definition: pstypes.h:556
struct _PROCESS_LDT_SIZE * PPROCESS_LDT_SIZE
ULONG OutswapEnabled
Definition: pstypes.h:1399
struct _PROCESS_LDT_INFORMATION * PPROCESS_LDT_INFORMATION
PFN_NUMBER NumberOfLockedPages
Definition: pstypes.h:1301
struct _WIN32_POWERSTATE_PARAMETERS WIN32_POWERSTATE_PARAMETERS
ULONG ProcessVerifierTarget
Definition: pstypes.h:1382
PVOID Token
Definition: pstypes.h:1501
struct _PROCESS_DEVICEMAP_INFORMATION * PPROCESS_DEVICEMAP_INFORMATION
KPROCESSOR_MODE AccessMode
Definition: pstypes.h:1672
_POWERSTATETASK
Definition: pstypes.h:464
ULONG CapturedGroupsLength
Definition: pstypes.h:1468
struct _PROCESS_HANDLE_TRACING_QUERY * PPROCESS_HANDLE_TRACING_QUERY
ULONG Type
Definition: pstypes.h:399
SIZE_T CommitChargeLimit
Definition: pstypes.h:1352
PKWIN32_THREAD_CALLOUT ThreadCallout
Definition: pstypes.h:1684
struct _PEB_FREE_BLOCK * PPEB_FREE_BLOCK
PTOKEN_PRIVILEGES PrivilegesToDelete
Definition: pstypes.h:1579
struct _EJOB * Job
Definition: pstypes.h:1303
PVOID KeyedWaitValue
Definition: pstypes.h:1121
KAPC RateApc
Definition: pstypes.h:1095
_In_ PVOID Parameter
Definition: ldrtypes.h:241
struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS * PWIN32_OKAYTOCLOSEMETHOD_PARAMETERS
char * LPSTR
Definition: xmlstorage.h:182
ULONG Cookie
Definition: pstypes.h:1454
ULONGLONG WriteTransferCount
Definition: pstypes.h:1512
struct _TERMINATION_PORT * Next
Definition: pstypes.h:1080
struct _CLIENT_ID32 * PCLIENT_ID32
struct _INITIAL_PEB INITIAL_PEB
struct _WIN32_POWEREVENT_PARAMETERS WIN32_POWEREVENT_PARAMETERS
#define NTSYSAPI
Definition: ntoskrnl.h:14
ULONG PeakProcessMemoryUsed
Definition: pstypes.h:1517
VOID(NTAPI * PPEBLOCKROUTINE)(PVOID PebLock)
Definition: pstypes.h:644
struct _PROCESS_LDT_SIZE PROCESS_LDT_SIZE
struct _PROCESS_DEVICEMAP_INFORMATION::@3922::@3923 Set
struct _TERMINATION_PORT * PTERMINATION_PORT
ULONG ActiveProcesses
Definition: pstypes.h:1489
ULONG ForkFailed
Definition: pstypes.h:1401
_JOBOBJECTINFOCLASS
Definition: pstypes.h:426
enum _SYSTEM_POWER_STATE SYSTEM_POWER_STATE
NTSTATUS LastThreadExitStatus
Definition: pstypes.h:1343
NTSTATUS(NTAPI * PKWIN32_SESSION_CALLOUT)(_In_ PVOID Parameter)
Definition: pstypes.h:598
HANDLE UniqueProcessId
Definition: pstypes.h:1267
LONG KPRIORITY
Definition: compat.h:662
ULONG PdeUpdateNeeded
Definition: pstypes.h:1419
PKWIN32_SESSION_CALLOUT DesktopCloseProcedure
Definition: pstypes.h:1692
SIZE_T Return
Definition: pstypes.h:1041
KPRIORITY BasePriority
Definition: compat.h:791
ULONG Affinity
Definition: pstypes.h:1497
ULONG_PTR HardwareTrigger
Definition: pstypes.h:1297
PKSTART_ROUTINE StartAddress
Definition: pstypes.h:1155
ULONG ThreadIoPriority
Definition: pstypes.h:1189
uint32_t ULONG_PTR
Definition: typedefs.h:65
LARGE_INTEGER CreateTime
Definition: pstypes.h:1264
NTSTATUS ExitStatus
Definition: pstypes.h:1437
LARGE_INTEGER ExitTime
Definition: winternl.h:1061
PVOID DeviceMap
Definition: pstypes.h:1313
SIZE_T PeakNonPagedPoolUsage
Definition: pstypes.h:138
UCHAR PriorityClass
Definition: pstypes.h:1452
struct _APPHELP_CACHE_SERVICE_LOOKUP * PAPPHELP_CACHE_SERVICE_LOOKUP
ULONG NumaAware
Definition: pstypes.h:1378
ULONG CacheManagerCount
Definition: pstypes.h:1253
_APPHELPCACHESERVICECLASS
Definition: pstypes.h:971
struct _ETHREAD * ReaperLink
Definition: pstypes.h:1120
struct _WIN32_JOBCALLOUT_PARAMETERS * PWIN32_JOBCALLOUT_PARAMETERS
ULONG AccountingFolded
Definition: pstypes.h:1369
PKWIN32_SESSION_CALLOUT WindowStationDeleteProcedure
Definition: pstypes.h:1696
ULONG OwnsSessionWorkingSetShared
Definition: pstypes.h:1226
ULONG PFN_NUMBER
Definition: ke.h:9
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
Definition: IoEaTest.cpp:117
PPS_IMPERSONATION_INFORMATION ImpersonationInfo
Definition: pstypes.h:1143
KSTART_ROUTINE * PKSTART_ROUTINE
Definition: ketypes.h:487
struct _WIN32_CALLOUTS_FPNS WIN32_CALLOUTS_FPNS
ULONG ProcessExiting
Definition: pstypes.h:1395
const struct _TEB_ACTIVE_FRAME_EX * PCTEB_ACTIVE_FRAME_EX
Definition: pstypes.h:729
struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
KSEMAPHORE AlpcWaitSemaphore
Definition: pstypes.h:1252
JOBOBJECT_BASIC_ACCOUNTING_INFORMATION BasicInfo
Definition: pstypes.h:1596
ULONG ThreadInserted
Definition: pstypes.h:1176
enum _SECURITY_IMPERSONATION_LEVEL SECURITY_IMPERSONATION_LEVEL
JOBOBJECT_BASIC_LIMIT_INFORMATION BasicLimitInformation
Definition: pstypes.h:1602
ULONG RefTraceEnabled
Definition: pstypes.h:1377
typedef NTSTATUS(NTAPI *PKWIN32_PROCESS_CALLOUT)(_In_ struct _EPROCESS *Process
ULONG ActiveThreads
Definition: pstypes.h:1336
PVOID Win32StartAddress
Definition: pstypes.h:1152
ULONG ActiveExWorker
Definition: pstypes.h:1200
ULONG OwnsSessionWorkingSetExclusive
Definition: pstypes.h:1225
enum _PROCESSINFOCLASS PROCESSINFOCLASS
struct _WIN32_JOBCALLOUT_PARAMETERS WIN32_JOBCALLOUT_PARAMETERS
ULONGLONG ReadTransferCount
Definition: pstypes.h:1511
struct _PROCESS_PRIORITY_CLASS PROCESS_PRIORITY_CLASS
struct _PROCESS_ACCESS_TOKEN PROCESS_ACCESS_TOKEN
PVOID Win32WindowStation
Definition: pstypes.h:1308
BOOLEAN ReadImageFileExecOptions
Definition: pstypes.h:663
PKWIN32_JOB_CALLOUT JobCallout
Definition: pstypes.h:1688
unsigned char BOOLEAN
struct _KERNEL_USER_TIMES * PKERNEL_USER_TIMES
VOID(NTAPI * PLEGO_NOTIFY_ROUTINE)(_In_ PKTHREAD Thread)
Definition: pstypes.h:617
LIST_ENTRY LpcReplyChain
Definition: pstypes.h:1108
BOOLEAN ImageUsesLargePages
Definition: pstypes.h:671
ULONG SchedulingClass
Definition: pstypes.h:1507
struct _PEB * Peb
Definition: pstypes.h:1344
TEB_ACTIVE_FRAME BasicFrame
Definition: pstypes.h:726
NTSTATUS(NTAPI * PPOST_PROCESS_INIT_ROUTINE)(VOID)
Definition: pstypes.h:624
ULONG SameThreadPassiveFlags
Definition: pstypes.h:1208
LARGE_INTEGER OtherTransferCount
Definition: pstypes.h:1351
ULONG ReportPhysicalPageChanges
Definition: pstypes.h:1374
#define _In_
Definition: ms_sal.h:308
PVOID AlpcMessage
Definition: pstypes.h:1248
PVOID StackBase
Definition: pstypes.h:694
LIST_ENTRY ProcessListHead
Definition: pstypes.h:1481
struct _PROCESS_HANDLE_TRACING_QUERY PROCESS_HANDLE_TRACING_QUERY
struct _WIN32_CLOSEMETHOD_PARAMETERS * PWIN32_CLOSEMETHOD_PARAMETERS
ULONG SpareUlong0
Definition: pstypes.h:1166
struct _TEB_ACTIVE_FRAME_EX * PTEB_ACTIVE_FRAME_EX
LARGE_INTEGER ThisPeriodTotalUserTime
Definition: pstypes.h:1485
PKWIN32_SESSION_CALLOUT DesktopOkToCloseProcedure
Definition: pstypes.h:1691
ULONG Outswapped
Definition: pstypes.h:1400
LIST_ENTRY ThreadListHead
Definition: pstypes.h:1329
enum _PSW32THREADCALLOUTTYPE PSW32THREADCALLOUTTYPE
ULONG MemberLevel
Definition: pstypes.h:1528
LARGE_INTEGER PerProcessUserTimeLimit
Definition: pstypes.h:1491
PKWIN32_SESSION_CALLOUT DesktopDeleteProcedure
Definition: pstypes.h:1693
PVOID SectionObject
Definition: pstypes.h:1304
ULONG HandleTableRundown
Definition: pstypes.h:1375
PVOID VdmObjects
Definition: pstypes.h:1312
struct _TERMINATION_PORT * TerminationPort
Definition: pstypes.h:1119
TEB_ACTIVE_FRAME_CONTEXT BasicContext
Definition: pstypes.h:711
ULONG_PTR InheritedFromUniqueProcessId
Definition: pstypes.h:340
struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PTEB_ACTIVE_FRAME_CONTEXT_EX
ULONG CreateReported
Definition: pstypes.h:1393
EX_PUSH_LOCK AddressCreationLock
Definition: pstypes.h:1290
struct _JOBOBJECT_BASIC_PROCESS_ID_LIST * PJOBOBJECT_BASIC_PROCESS_ID_LIST
PVOID Session
Definition: pstypes.h:1325
ULONG MemberLevel
Definition: pstypes.h:1012
BOOLEAN BeingDebugged
Definition: pstypes.h:664
SE_AUDIT_PROCESS_CREATION_INFO SeAuditProcessCreationInfo
Definition: pstypes.h:1355
FAST_MUTEX
Definition: extypes.h:17
UNICODE_STRING ImageName
Definition: pstypes.h:986
ULONG CurrentJobMemoryUsed
Definition: pstypes.h:1519
PVOID SecurityPort
Definition: pstypes.h:1330
struct _PAGEFAULT_HISTORY * PPAGEFAULT_HISTORY
LIST_ENTRY SessionProcessLinks
Definition: pstypes.h:1274
struct _PROCESS_SESSION_INFORMATION * PPROCESS_SESSION_INFORMATION
struct _WIN32_PARSEMETHOD_PARAMETERS WIN32_PARSEMETHOD_PARAMETERS
struct _WIN32_DELETEMETHOD_PARAMETERS * PWIN32_DELETEMETHOD_PARAMETERS
struct _TEB_ACTIVE_FRAME * PTEB_ACTIVE_FRAME
ULONG AlpcReceiveAttributeSet
Definition: pstypes.h:1249
enum _THREADINFOCLASS THREADINFOCLASS
UCHAR SubSystemMinorVersion
Definition: pstypes.h:1447
ULONG ModifiedPageCount
Definition: pstypes.h:1362
ULONG VmDeleted
Definition: pstypes.h:1398
_PSW32JOBCALLOUTTYPE
Definition: pstypes.h:487
struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION
ULONG VmTopDown
Definition: pstypes.h:1417
struct _TEB_ACTIVE_FRAME_CONTEXT_EX TEB_ACTIVE_FRAME_CONTEXT_EX
ULONG MaximumWorkingSetSize
Definition: pstypes.h:1495
struct _PROCESS_FOREGROUND_BACKGROUND * PPROCESS_FOREGROUND_BACKGROUND
PVOID CompletionPort
Definition: pstypes.h:1504
EX_PUSH_LOCK MemoryLimitsLock
Definition: pstypes.h:1525
struct _PROCESS_HANDLE_TRACING_ENTRY PROCESS_HANDLE_TRACING_ENTRY
ULONG ExitProcessReported
Definition: pstypes.h:1371
ULONG NeedsHandleRundown
Definition: pstypes.h:1376
SIZE_T QuotaPeak[PsQuotaTypes]
Definition: pstypes.h:1270
struct _EPROCESS_QUOTA_ENTRY * PEPROCESS_QUOTA_ENTRY
ULONG UniqueProcess
Definition: pstypes.h:733
EX_FAST_REF Token
Definition: pstypes.h:1287
struct _POOLED_USAGE_AND_LIMITS * PPOOLED_USAGE_AND_LIMITS
uint64_t ULONGLONG
Definition: typedefs.h:67
LARGE_INTEGER CreateTime
Definition: winternl.h:1060
PKWIN32_GLOBALATOMTABLE_CALLOUT GlobalAtomTableCallout
Definition: pstypes.h:1685
CLIENT_ID Cid
Definition: pstypes.h:1128
LIST_ENTRY JobLinks
Definition: pstypes.h:1480
ULONG NewProcessReported
Definition: pstypes.h:1370
UCHAR ExceptionPortState
Definition: pstypes.h:1281
_PSW32THREADCALLOUTTYPE
Definition: pstypes.h:497
struct _WIN32_POWEREVENT_PARAMETERS * PWIN32_POWEREVENT_PARAMETERS
struct _EPROCESS EPROCESS
HANDLE JobHandle
Definition: pstypes.h:1011
PKWIN32_SESSION_CALLOUT WindowStationCloseProcedure
Definition: pstypes.h:1695
_APPCOMPAT_USERFLAGS_HIGHPART
Definition: pstypes.h:827
struct _THREAD_BASIC_INFORMATION THREAD_BASIC_INFORMATION
PVOID AweInfo
Definition: pstypes.h:1354
SIZE_T CommitChargePeak
Definition: pstypes.h:1353
Type
Definition: Type.h:6
ULONG SkipCreationMsg
Definition: pstypes.h:1185
struct _JOB_SET_ARRAY JOB_SET_ARRAY
struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD Thread
Definition: fltkernel.h:2652
ULONG ImagePathHash
Definition: pstypes.h:1338
ULONG BreakOnTermination
Definition: pstypes.h:1184
enum _POWERSTATETASK POWERSTATETASK
ULONG_PTR TopLevelIrp
Definition: pstypes.h:1145
PVOID CompletionKey
Definition: pstypes.h:1505
struct _PS_JOB_TOKEN_FILTER PS_JOB_TOKEN_FILTER
PSPOWEREVENTTYPE EventNumber
Definition: pstypes.h:1616
NTSTATUS(NTAPI * PKWIN32_POWEREVENT_CALLOUT)(_In_ struct _WIN32_POWEREVENT_PARAMETERS *Parameters)
Definition: pstypes.h:544
CCHAR KPROCESSOR_MODE
Definition: ketypes.h:7
struct _WIN32_CLOSEMETHOD_PARAMETERS WIN32_CLOSEMETHOD_PARAMETERS
enum _PSPOWEREVENTTYPE PSPOWEREVENTTYPE
ULONG ActiveImpersonationInfo
Definition: pstypes.h:1181
struct _PAGEFAULT_HISTORY PAGEFAULT_HISTORY
ULONG SmapAllowed
Definition: pstypes.h:1421
LARGE_INTEGER WriteTransferCount
Definition: pstypes.h:1350
ULONG DefaultIoPriority
Definition: pstypes.h:1427
PVOID StackLimit
Definition: pstypes.h:695
ULONGLONG TargetGEneration
Definition: pstypes.h:1094
BOOLEAN IsLegacyProcess
Definition: pstypes.h:674
unsigned __int64 ULONG64
Definition: imports.h:198
ULONG VdmAllowed
Definition: pstypes.h:1420
PLUID_AND_ATTRIBUTES CapturedPrivileges
Definition: pstypes.h:1470
struct _PROCESS_DEVICEMAP_INFORMATION::@3922::@3924 Query
PEPROCESS_QUOTA_BLOCK QuotaBlock
Definition: pstypes.h:1306
ULONG SetTimerResolution
Definition: pstypes.h:1404
struct _PROCESS_PRIORITY_CLASS * PPROCESS_PRIORITY_CLASS
unsigned char UCHAR
Definition: xmlstorage.h:181
PVOID * Win32Process
Definition: pstypes.h:1302
LARGE_INTEGER PerJobUserTimeLimit
Definition: pstypes.h:1492
KSPIN_LOCK SpinLock
Definition: pstypes.h:1059
_PS_QUOTA_TYPE
Definition: pstypes.h:1019
PKWIN32_SESSION_CALLOUT DesktopOpenProcedure
Definition: pstypes.h:1690
ULONG CrossThreadFlags
Definition: pstypes.h:1194
LARGE_INTEGER TotalKernelTime
Definition: pstypes.h:1484
ULONG ProcessInserted
Definition: pstypes.h:1423
ULONG CapturedSidsLength
Definition: pstypes.h:1465
LIST_ENTRY ActiveProcessLinks
Definition: pstypes.h:1268
ULONG JobMemoryLimit
Definition: pstypes.h:1516
POWER_ACTION
Definition: ntpoapi.h:122
PSID_AND_ATTRIBUTES CapturedGroups
Definition: pstypes.h:1467
_PSPOWEREVENTTYPE
Definition: pstypes.h:444
PVOID AllocatedStackBase
Definition: pstypes.h:696
#define VOID
Definition: acefi.h:82
PSECURITY_QUALITY_OF_SERVICE SecurityQos
Definition: pstypes.h:1677
ULONG ReadClusterSize
Definition: pstypes.h:1164
PPS_JOB_TOKEN_FILTER Filter
Definition: pstypes.h:1502
EX_FAST_REF PrefetchTrace
Definition: pstypes.h:1345
struct _PROCESS_WS_WATCH_INFORMATION * PPROCESS_WS_WATCH_INFORMATION
struct _PROCESS_BASIC_INFORMATION * PPROCESS_BASIC_INFORMATION
Definition: ketypes.h:535
ULONG SecurityLimitFlags
Definition: pstypes.h:1500
EX_RUNDOWN_REF RundownProtect
Definition: pstypes.h:1266
PDEVICE_OBJECT DeviceToVerify
Definition: pstypes.h:1146
ULONG ProcessMemoryLimit
Definition: pstypes.h:1515
Definition: typedefs.h:119
PVOID LdtInformation
Definition: pstypes.h:1310
KPROCESS Pcb
Definition: pstypes.h:1262
ULONGLONG OtherOperationCount
Definition: pstypes.h:1510
ULONG OwnsSystemWorkingSetExclusive
Definition: pstypes.h:1223
ULONG TotalProcesses
Definition: pstypes.h:1488
PVOID ExtensionIdentifier
Definition: pstypes.h:727
ULONG SuppressSymbolLoad
Definition: pstypes.h:1228
LDT_ENTRY LdtEntries[ANYSIZE_ARRAY]
Definition: pstypes.h:946
UCHAR PriorityClass
Definition: pstypes.h:1498
PPAGEFAULT_HISTORY WorkingSetWatch
Definition: pstypes.h:1307
struct _PS_IMPERSONATION_INFORMATION PS_IMPERSONATION_INFORMATION
PROCESS_WS_WATCH_INFORMATION WatchInfo[1]
Definition: pstypes.h:1061
ULONG SystemThread
Definition: pstypes.h:1182
PVOID LockedPagesList
Definition: pstypes.h:1328
PVOID VadFreeHint
Definition: pstypes.h:1311
ULONG ActiveProcessLimit
Definition: pstypes.h:1496
NTSTATUS(NTAPI * PGDI_BATCHFLUSH_ROUTINE)(VOID)
Definition: pstypes.h:562
MMSUPPORT Vm
Definition: pstypes.h:1356
_APPCOMPAT_FLAGS
Definition: pstypes.h:757
struct _PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION
ULONG ImageNotifyDone
Definition: pstypes.h:1418
ULONG LastReportMemory
Definition: pstypes.h:1373
struct _EPROCESS_QUOTA_BLOCK EPROCESS_QUOTA_BLOCK
LARGE_INTEGER PerProcessUserTimeLimit
Definition: pstypes.h:1551
_PROCESSINFOCLASS
Definition: winternl.h:392
_In_ WDFINTERRUPT _In_ PFN_WDF_INTERRUPT_SYNCHRONIZE Callback
Definition: wdfinterrupt.h:456
enum _OB_OPEN_REASON OB_OPEN_REASON
SYSTEM_POWER_STATE MinSystemState
Definition: pstypes.h:1624
PVOID OfsChain
Definition: pstypes.h:1114
CLIENT_ID ClientId
Definition: pstypes.h:398
Definition: compat.h:636
const struct _TEB_ACTIVE_FRAME * PCTEB_ACTIVE_FRAME
Definition: pstypes.h:722
struct _INITIAL_PEB * PINITIAL_PEB
PHANDLE_TABLE ObjectTable
Definition: pstypes.h:1286
PMM_AVL_TABLE PhysicalVadRoot
Definition: pstypes.h:1298
ULONG_PTR SIZE_T
Definition: typedefs.h:80
HANDLE Mutant
Definition: pstypes.h:684
ULONG OverrideAddressSpace
Definition: pstypes.h:1413
struct _PROCESS_WS_WATCH_INFORMATION PROCESS_WS_WATCH_INFORMATION
ULONG ExceptionPortValue
Definition: pstypes.h:1280
NTSTATUS(NTAPI * PKWIN32_DELETEMETHOD_CALLOUT)(_In_ struct _WIN32_DELETEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:586
ULONG LaunchPrefetched
Definition: pstypes.h:1415
ULONG HasAddressSpace
Definition: pstypes.h:1414
struct _WIN32_DELETEMETHOD_PARAMETERS WIN32_DELETEMETHOD_PARAMETERS
NTSTATUS ExitStatus
Definition: pstypes.h:1113
ULONGLONG OtherTransferCount
Definition: pstypes.h:1513
ULONG LpcExitThreadCalled
Definition: pstypes.h:1215
LIST_ENTRY AlpcWaitListEntry
Definition: pstypes.h:1251
enum _PSW32JOBCALLOUTTYPE PSW32JOBCALLOUTTYPE
struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT JOBOBJECT_ASSOCIATE_COMPLETION_PORT
struct _TEB_ACTIVE_FRAME_CONTEXT * PTEB_ACTIVE_FRAME_CONTEXT
struct _TEB_ACTIVE_FRAME * Previous
Definition: pstypes.h:719
SIZE_T Usage
Definition: pstypes.h:1038
struct _PROCESS_SESSION_INFORMATION PROCESS_SESSION_INFORMATION
PVOID DebugPort
Definition: pstypes.h:1275
ULONG PendingRatecontrol
Definition: pstypes.h:1191
Definition: pstypes.h:396
USHORT Spare7
Definition: pstypes.h:1439
unsigned short USHORT
Definition: pedump.c:61
ULONG SparePsFlags1
Definition: pstypes.h:1429
struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION JOBOBJECT_BASIC_ACCOUNTING_INFORMATION
ULONG MinimumWorkingSetSize
Definition: pstypes.h:1494
struct _ETHREAD ETHREAD
ULONG_PTR KAFFINITY
Definition: compat.h:85
ULONG UIRestrictionsClass
Definition: pstypes.h:1499
struct _WIN32_CALLOUTS_FPNS * PWIN32_CALLOUTS_FPNS
NTSTATUS(NTAPI * PKWIN32_CLOSEMETHOD_CALLOUT)(_In_ struct _WIN32_CLOSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:580
LIST_ENTRY QuotaList
Definition: pstypes.h:1047
struct _CLIENT_ID64 * PCLIENT_ID64
struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT * PJOBOBJECT_ASSOCIATE_COMPLETION_PORT
ULONG Terminated
Definition: pstypes.h:1174
ULONG KSPIN_LOCK
Definition: env_spec_w32.h:72
enum _APPHELPCACHESERVICECLASS APPHELPCACHESERVICECLASS
SIZE_T Limit
Definition: pstypes.h:1039
ULONG TotalPageFaultCount
Definition: pstypes.h:1487
ULONG OwnsProcessWorkingSetShared
Definition: pstypes.h:1222
PVOID EtwDataSource
Definition: pstypes.h:1315
UCHAR ActiveFaultCount
Definition: pstypes.h:1243
HANDLE Handle
Definition: pstypes.h:397
struct _APPHELP_CACHE_SERVICE_LOOKUP APPHELP_CACHE_SERVICE_LOOKUP
ULONG CapturedPrivilegeCount
Definition: pstypes.h:1469
unsigned int * PULONG
Definition: retypes.h:1
LIST_ENTRY JobLinks
Definition: pstypes.h:1327
PETHREAD RotateInProgress
Definition: pstypes.h:1291
struct _JOBOBJECT_BASIC_LIMIT_INFORMATION JOBOBJECT_BASIC_LIMIT_INFORMATION
NTSTATUS(NTAPI * PKWIN32_OPENMETHOD_CALLOUT)(_In_ struct _WIN32_OPENMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:568
ULONG DeprioritizeViews
Definition: pstypes.h:1407
LIST_ENTRY JobSetLinks
Definition: pstypes.h:1527
PVOID Stacks[PROCESS_HANDLE_TRACING_MAX_STACKS]
Definition: pstypes.h:400
struct _EPROCESS_QUOTA_BLOCK * PEPROCESS_QUOTA_BLOCK
ULONGLONG ReadOperationCount
Definition: pstypes.h:1508
ULONG DefaultHardErrorProcessing
Definition: pstypes.h:1342
struct _WIN32_OPENMETHOD_PARAMETERS WIN32_OPENMETHOD_PARAMETERS
ULONG SessionId
Definition: pstypes.h:1506
struct _THREAD_BASIC_INFORMATION * PTHREAD_BASIC_INFORMATION
ULONG Flags
Definition: pstypes.h:1435
ULONG NoDebugInherit
Definition: pstypes.h:1394
LARGE_INTEGER OtherOperationCount
Definition: pstypes.h:1348
LARGE_INTEGER ReadTransferCount
Definition: pstypes.h:1349
_THREADINFOCLASS
Definition: compat.h:793
ULONG ProcessDelete
Definition: pstypes.h:1396
const struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PCTEB_ACTIVE_FRAME_CONTEXT_EX
Definition: pstypes.h:714
PVOID FreeTebHint
Definition: pstypes.h:1316
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
Definition: fsrtlfuncs.h:219
ULONG DefaultPagePriority
Definition: pstypes.h:1380
struct tagContext Context
Definition: acpixf.h:1034
ULONGLONG WriteOperationCount
Definition: pstypes.h:1509
struct _WIN32_OPENMETHOD_PARAMETERS * PWIN32_OPENMETHOD_PARAMETERS
PSW32JOBCALLOUTTYPE CalloutType
Definition: pstypes.h:1632
struct _INITIAL_TEB INITIAL_TEB
ULONG ProtectedProcess
Definition: pstypes.h:1379
ULONG ERESOURCE
Definition: env_spec_w32.h:594
CHAR ImageFileName[16]
Definition: pstypes.h:1326
PKWIN32_SESSION_CALLOUT WindowStationOpenProcedure
Definition: pstypes.h:1698
unsigned int ULONG
Definition: retypes.h:1
ULONG KeyedEventInUse
Definition: pstypes.h:1203
ULONG ProcessDeleteSelf
Definition: pstypes.h:1381
PVOID PaeTop
Definition: pstypes.h:1334
Definition: pstypes.h:1036
struct _JOBOBJECT_BASIC_PROCESS_ID_LIST JOBOBJECT_BASIC_PROCESS_ID_LIST
struct _EJOB EJOB
EX_PUSH_LOCK ProcessLock
Definition: pstypes.h:1263
ULONG PriorityRegionActive
Definition: pstypes.h:1230
struct _PS_IMPERSONATION_INFORMATION * PPS_IMPERSONATION_INFORMATION
const char * PCSTR
Definition: typedefs.h:52
PETHREAD ForkInProgress
Definition: pstypes.h:1296
ULONG OwnsProcessWorkingSetExclusive
Definition: pstypes.h:1221
struct _JOBOBJECT_BASIC_LIMIT_INFORMATION * PJOBOBJECT_BASIC_LIMIT_INFORMATION
POWERSTATETASK PowerStateTask
Definition: pstypes.h:1626
NTSTATUS(NTAPI * PKWIN32_OKTOCLOSEMETHOD_CALLOUT)(_In_ struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:574
PUNICODE_STRING RemainingName
Definition: pstypes.h:1675
ULONG ExWorkerCanWaitUser
Definition: pstypes.h:1201
struct _EJOB * PEJOB
enum _PSPROCESSPRIORITYMODE PSPROCESSPRIORITYMODE
PKWIN32_SESSION_CALLOUT WindowStationParseProcedure
Definition: pstypes.h:1697
enum _APPCOMPAT_USERFLAGS APPCOMPAT_USERFLAGS
ULONG AddressSpaceInitialized
Definition: pstypes.h:1403
UCHAR DisablePageFaultClustering
Definition: pstypes.h:1242
ULONG SameThreadApcFlags
Definition: pstypes.h:1235
USHORT SubSystemVersion
Definition: pstypes.h:1450
ULONG Wow64VaSpace4Gb
Definition: pstypes.h:1402
PKWIN32_PROCESS_CALLOUT ProcessCallout
Definition: pstypes.h:1683
PVOID PreviousStackBase
Definition: pstypes.h:692
EX_PUSH_LOCK ThreadLock
Definition: pstypes.h:1160
struct _WIN32_PARSEMETHOD_PARAMETERS * PWIN32_PARSEMETHOD_PARAMETERS
PVOID PreviousStackLimit
Definition: pstypes.h:693
_In_ PSECURITY_SUBJECT_CONTEXT _In_ BOOLEAN _In_ ACCESS_MASK _In_ ACCESS_MASK _Outptr_opt_ PPRIVILEGE_SET _In_ PGENERIC_MAPPING _In_ KPROCESSOR_MODE _Out_ PACCESS_MASK GrantedAccess
Definition: sefuncs.h:13
struct _CLIENT_ID32 CLIENT_ID32
LARGE_INTEGER ExitTime
Definition: pstypes.h:1265
ULONG HardErrorsAreDisabled
Definition: pstypes.h:1183
PVOID SectionBaseAddress
Definition: pstypes.h:1305
SIZE_T VirtualSize
Definition: pstypes.h:1273
SIZE_T CommitCharge
Definition: pstypes.h:1271
struct _PEB_FREE_BLOCK * Next
Definition: ntddk_ex.h:230
struct _PSP_RATE_APC * PPSP_RATE_APC
MM_AVL_TABLE VadRoot
Definition: pstypes.h:1453
ULONG HideFromDebugger
Definition: pstypes.h:1180
_Out_ PUNICODE_STRING CompleteName
Definition: pstypes.h:1674
ULONG UniqueThread
Definition: pstypes.h:734
enum _APPCOMPAT_USERFLAGS_HIGHPART APPCOMPAT_USERFLAGS_HIGHPART
struct _JOBOBJECT_BASIC_UI_RESTRICTIONS * PJOBOBJECT_BASIC_UI_RESTRICTIONS
enum _PS_QUOTA_TYPE PS_QUOTA_TYPE
ULONG64 UniqueThread
Definition: pstypes.h:740
ULONGLONG ExcessCycles
Definition: pstypes.h:1092
LARGE_INTEGER KernelTime
Definition: winternl.h:1062
struct _TERMINATION_PORT TERMINATION_PORT
struct _JOBOBJECT_BASIC_UI_RESTRICTIONS JOBOBJECT_BASIC_UI_RESTRICTIONS
struct _PEB_FREE_BLOCK PEB_FREE_BLOCK
LIST_ENTRY IrpList
Definition: pstypes.h:1144
PKWIN32_WIN32DATACOLLECTION_CALLOUT Win32DataCollectionProcedure
Definition: pstypes.h:1700
POBJECT_TYPE NTSYSAPI PsJobType
Definition: job.c:20
BOOLEAN IsProtectedProcess
Definition: pstypes.h:673
struct _PROCESS_HANDLE_TRACING_ENTRY * PPROCESS_HANDLE_TRACING_ENTRY
struct _TEB_ACTIVE_FRAME_CONTEXT TEB_ACTIVE_FRAME_CONTEXT
ULONG InjectInpageErrors
Definition: pstypes.h:1416
ULONG ACCESS_MASK
Definition: nt_native.h:40
struct _PROCESS_LDT_INFORMATION PROCESS_LDT_INFORMATION
SIZE_T Peak
Definition: pstypes.h:1040
ULONG CreateMsgSent
Definition: pstypes.h:1188
ULONG ThreadPagePriority
Definition: pstypes.h:1190
struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME
ULONG LpcReceivedMsgIdValid
Definition: pstypes.h:1214
BOOLEAN InheritedAddressSpace
Definition: pstypes.h:662
PFN_NUMBER WorkingSetPage
Definition: pstypes.h:1288
ULONG RateApcState
Definition: pstypes.h:1205
ULONG PeakJobMemoryUsed
Definition: pstypes.h:1518
IO_COUNTERS IoInfo
Definition: pstypes.h:1514
C_ASSERT(sizeof(PROCESS_PRIORITY_CLASS)==2)
struct _JOB_SET_ARRAY * PJOB_SET_ARRAY
ULONG ProcessInSession
Definition: pstypes.h:1412
ULONG Spare
Definition: pstypes.h:1217
NTSTATUS(NTAPI * PKWIN32_PARSEMETHOD_CALLOUT)(_In_ struct _WIN32_PARSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:592
PROCESS_HANDLE_TRACING_ENTRY HandleTrace[1]
Definition: pstypes.h:406
KSPIN_LOCK ActiveTimerListLock
Definition: pstypes.h:1126