ReactOS 0.4.15-dev-8231-g29a56f3
pstypes.h
Go to the documentation of this file.
1/*++ NDK Version: 0098
2
3Copyright (c) Alex Ionescu. All rights reserved.
4
5Header Name:
6
7 pstypes.h
8
9Abstract:
10
11 Type definitions for the Process Manager
12
13Author:
14
15 Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
16
17--*/
18
19#ifndef _PSTYPES_H
20#define _PSTYPES_H
21
22//
23// Dependencies
24//
25#include <umtypes.h>
26#include <ldrtypes.h>
27#include <mmtypes.h>
28#include <obtypes.h>
29#include <rtltypes.h>
30#ifndef NTOS_MODE_USER
31#include <extypes.h>
32#include <setypes.h>
33#endif
34
35#ifdef __cplusplus
36extern "C" {
37#endif
38
39#ifndef NTOS_MODE_USER
40
41//
42// Kernel Exported Object Types
43//
45
46#endif // !NTOS_MODE_USER
47
48//
49// KUSER_SHARED_DATA location in User Mode
50//
51#define USER_SHARED_DATA (0x7FFE0000)
52
53//
54// Global Flags
55//
56#define FLG_STOP_ON_EXCEPTION 0x00000001
57#define FLG_SHOW_LDR_SNAPS 0x00000002
58#define FLG_DEBUG_INITIAL_COMMAND 0x00000004
59#define FLG_STOP_ON_HUNG_GUI 0x00000008
60#define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
61#define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
62#define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
63#define FLG_HEAP_VALIDATE_ALL 0x00000080
64#define FLG_APPLICATION_VERIFIER 0x00000100
65#define FLG_POOL_ENABLE_TAGGING 0x00000400
66#define FLG_HEAP_ENABLE_TAGGING 0x00000800
67#define FLG_USER_STACK_TRACE_DB 0x00001000
68#define FLG_KERNEL_STACK_TRACE_DB 0x00002000
69#define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
70#define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
71#define FLG_DISABLE_STACK_EXTENSION 0x00010000
72#define FLG_ENABLE_CSRDEBUG 0x00020000
73#define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
74#define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
75#if (NTDDI_VERSION < NTDDI_WINXP)
76#define FLG_HEAP_ENABLE_CALL_TRACING 0x00100000
77#else
78#define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
79#endif
80#define FLG_HEAP_DISABLE_COALESCING 0x00200000
81#define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
82#define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
83#define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
84#define FLG_HEAP_PAGE_ALLOCS 0x02000000
85#define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
86#define FLG_VALID_BITS 0x07FFFFFF
87
88//
89// Flags for NtCreateProcessEx
90//
91#define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
92#define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
93#define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
94#define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
95#define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
96#define PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS PROCESS_CREATE_FLAGS_LARGE_PAGES
97#define PROCESS_CREATE_FLAGS_LEGAL_MASK (PROCESS_CREATE_FLAGS_BREAKAWAY | \
98 PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT | \
99 PROCESS_CREATE_FLAGS_INHERIT_HANDLES | \
100 PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE | \
101 PROCESS_CREATE_FLAGS_ALL_LARGE_PAGE_FLAGS)
102
103//
104// Process priority classes
105//
106#define PROCESS_PRIORITY_CLASS_INVALID 0
107#define PROCESS_PRIORITY_CLASS_IDLE 1
108#define PROCESS_PRIORITY_CLASS_NORMAL 2
109#define PROCESS_PRIORITY_CLASS_HIGH 3
110#define PROCESS_PRIORITY_CLASS_REALTIME 4
111#define PROCESS_PRIORITY_CLASS_BELOW_NORMAL 5
112#define PROCESS_PRIORITY_CLASS_ABOVE_NORMAL 6
113
114//
115// Process base priorities
116//
117#define PROCESS_PRIORITY_IDLE 3
118#define PROCESS_PRIORITY_NORMAL 8
119#define PROCESS_PRIORITY_NORMAL_FOREGROUND 9
120
121//
122// Process memory priorities
123//
124#define MEMORY_PRIORITY_BACKGROUND 0
125#define MEMORY_PRIORITY_UNKNOWN 1
126#define MEMORY_PRIORITY_FOREGROUND 2
127
128//
129// Process Priority Separation Values (OR)
130//
131#define PSP_DEFAULT_QUANTUMS 0x00
132#define PSP_VARIABLE_QUANTUMS 0x04
133#define PSP_FIXED_QUANTUMS 0x08
134#define PSP_LONG_QUANTUMS 0x10
135#define PSP_SHORT_QUANTUMS 0x20
136
137//
138// Process Handle Tracing Values
139//
140#define PROCESS_HANDLE_TRACE_TYPE_OPEN 1
141#define PROCESS_HANDLE_TRACE_TYPE_CLOSE 2
142#define PROCESS_HANDLE_TRACE_TYPE_BADREF 3
143#define PROCESS_HANDLE_TRACING_MAX_STACKS 16
144
145#ifndef NTOS_MODE_USER
146//
147// Thread Access Types
148//
149#define THREAD_QUERY_INFORMATION 0x0040
150#define THREAD_SET_THREAD_TOKEN 0x0080
151#define THREAD_IMPERSONATE 0x0100
152#define THREAD_DIRECT_IMPERSONATION 0x0200
153
154//
155// Process Access Types
156//
157#define PROCESS_TERMINATE 0x0001
158#define PROCESS_CREATE_THREAD 0x0002
159#define PROCESS_SET_SESSIONID 0x0004
160#define PROCESS_VM_OPERATION 0x0008
161#define PROCESS_VM_READ 0x0010
162#define PROCESS_VM_WRITE 0x0020
163#define PROCESS_CREATE_PROCESS 0x0080
164#define PROCESS_SET_QUOTA 0x0100
165#define PROCESS_SET_INFORMATION 0x0200
166#define PROCESS_QUERY_INFORMATION 0x0400
167#define PROCESS_SUSPEND_RESUME 0x0800
168#define PROCESS_QUERY_LIMITED_INFORMATION 0x1000
169#if (NTDDI_VERSION >= NTDDI_LONGHORN)
170#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
171 SYNCHRONIZE | \
172 0xFFFF)
173#else
174#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
175 SYNCHRONIZE | \
176 0xFFF)
177#endif
178
179//
180// Thread Base Priorities
181//
182#define THREAD_BASE_PRIORITY_LOWRT 15
183#define THREAD_BASE_PRIORITY_MAX 2
184#define THREAD_BASE_PRIORITY_MIN -2
185#define THREAD_BASE_PRIORITY_IDLE -15
186
187//
188// TLS Slots
189//
190#define TLS_MINIMUM_AVAILABLE 64
191
192//
193// TEB Active Frame Flags
194//
195#define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x1
196
197//
198// Job Access Types
199//
200#define JOB_OBJECT_ASSIGN_PROCESS 0x1
201#define JOB_OBJECT_SET_ATTRIBUTES 0x2
202#define JOB_OBJECT_QUERY 0x4
203#define JOB_OBJECT_TERMINATE 0x8
204#define JOB_OBJECT_SET_SECURITY_ATTRIBUTES 0x10
205#define JOB_OBJECT_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | \
206 SYNCHRONIZE | \
207 31)
208
209//
210// Job Limit Flags
211//
212#define JOB_OBJECT_LIMIT_WORKINGSET 0x1
213#define JOB_OBJECT_LIMIT_PROCESS_TIME 0x2
214#define JOB_OBJECT_LIMIT_JOB_TIME 0x4
215#define JOB_OBJECT_LIMIT_ACTIVE_PROCESS 0x8
216#define JOB_OBJECT_LIMIT_AFFINITY 0x10
217#define JOB_OBJECT_LIMIT_PRIORITY_CLASS 0x20
218#define JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME 0x40
219#define JOB_OBJECT_LIMIT_SCHEDULING_CLASS 0x80
220#define JOB_OBJECT_LIMIT_PROCESS_MEMORY 0x100
221#define JOB_OBJECT_LIMIT_JOB_MEMORY 0x200
222#define JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION 0x400
223#define JOB_OBJECT_LIMIT_BREAKAWAY_OK 0x800
224#define JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK 0x1000
225#define JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE 0x2000
226
227//
228// Job Security Limit Flags
229//
230#define JOB_OBJECT_SECURITY_NO_ADMIN 0x0001
231#define JOB_OBJECT_SECURITY_RESTRICTED_TOKEN 0x0002
232#define JOB_OBJECT_SECURITY_ONLY_TOKEN 0x0004
233#define JOB_OBJECT_SECURITY_FILTER_TOKENS 0x0008
234
235//
236// Cross Thread Flags
237//
238#define CT_TERMINATED_BIT 0x1
239#define CT_DEAD_THREAD_BIT 0x2
240#define CT_HIDE_FROM_DEBUGGER_BIT 0x4
241#define CT_ACTIVE_IMPERSONATION_INFO_BIT 0x8
242#define CT_SYSTEM_THREAD_BIT 0x10
243#define CT_HARD_ERRORS_ARE_DISABLED_BIT 0x20
244#define CT_BREAK_ON_TERMINATION_BIT 0x40
245#define CT_SKIP_CREATION_MSG_BIT 0x80
246#define CT_SKIP_TERMINATION_MSG_BIT 0x100
247
248//
249// Same Thread Passive Flags
250//
251#define STP_ACTIVE_EX_WORKER_BIT 0x1
252#define STP_EX_WORKER_CAN_WAIT_USER_BIT 0x2
253#define STP_MEMORY_MAKER_BIT 0x4
254#define STP_KEYED_EVENT_IN_USE_BIT 0x8
255
256//
257// Same Thread APC Flags
258//
259#define STA_LPC_RECEIVED_MSG_ID_VALID_BIT 0x1
260#define STA_LPC_EXIT_THREAD_CALLED_BIT 0x2
261#define STA_ADDRESS_SPACE_OWNER_BIT 0x4
262#define STA_OWNS_WORKING_SET_BITS 0x1F8
263
264//
265// Kernel Process flags (maybe in ketypes.h?)
266//
267#define KPSF_AUTO_ALIGNMENT_BIT 0
268#define KPSF_DISABLE_BOOST_BIT 1
269
270//
271// Process Flags
272//
273#define PSF_CREATE_REPORTED_BIT 0x1
274#define PSF_NO_DEBUG_INHERIT_BIT 0x2
275#define PSF_PROCESS_EXITING_BIT 0x4
276#define PSF_PROCESS_DELETE_BIT 0x8
277#define PSF_WOW64_SPLIT_PAGES_BIT 0x10
278#define PSF_VM_DELETED_BIT 0x20
279#define PSF_OUTSWAP_ENABLED_BIT 0x40
280#define PSF_OUTSWAPPED_BIT 0x80
281#define PSF_FORK_FAILED_BIT 0x100
282#define PSF_WOW64_VA_SPACE_4GB_BIT 0x200
283#define PSF_ADDRESS_SPACE_INITIALIZED_BIT 0x400
284#define PSF_SET_TIMER_RESOLUTION_BIT 0x1000
285#define PSF_BREAK_ON_TERMINATION_BIT 0x2000
286#define PSF_SESSION_CREATION_UNDERWAY_BIT 0x4000
287#define PSF_WRITE_WATCH_BIT 0x8000
288#define PSF_PROCESS_IN_SESSION_BIT 0x10000
289#define PSF_OVERRIDE_ADDRESS_SPACE_BIT 0x20000
290#define PSF_HAS_ADDRESS_SPACE_BIT 0x40000
291#define PSF_LAUNCH_PREFETCHED_BIT 0x80000
292#define PSF_INJECT_INPAGE_ERRORS_BIT 0x100000
293#define PSF_VM_TOP_DOWN_BIT 0x200000
294#define PSF_IMAGE_NOTIFY_DONE_BIT 0x400000
295#define PSF_PDE_UPDATE_NEEDED_BIT 0x800000
296#define PSF_VDM_ALLOWED_BIT 0x1000000
297#define PSF_SWAP_ALLOWED_BIT 0x2000000
298#define PSF_CREATE_FAILED_BIT 0x4000000
299#define PSF_DEFAULT_IO_PRIORITY_BIT 0x8000000
300
301//
302// Vista Process Flags
303//
304#define PSF2_PROTECTED_BIT 0x800
305#endif
306
307//
308// TLS/FLS Defines
309//
310#define TLS_EXPANSION_SLOTS 1024
311
312#ifdef NTOS_MODE_USER
313//
314// Thread Native Base Priorities
315//
316#define LOW_PRIORITY 0
317#define LOW_REALTIME_PRIORITY 16
318#define HIGH_PRIORITY 31
319#define MAXIMUM_PRIORITY 32
320
321//
322// Current Process/Thread built-in 'special' handles
323//
324#define NtCurrentProcess() ((HANDLE)(LONG_PTR)-1)
325#define ZwCurrentProcess() NtCurrentProcess()
326#define NtCurrentThread() ((HANDLE)(LONG_PTR)-2)
327#define ZwCurrentThread() NtCurrentThread()
328
329//
330// Process/Thread/Job Information Classes for NtQueryInformationProcess/Thread/Job
331//
332typedef enum _PROCESSINFOCLASS
333{
383
384typedef enum _THREADINFOCLASS
385{
416
417#else
418
420{
425
427{
440
441//
442// Power Event Events for Win32K Power Event Callback
443//
445{
460
461//
462// Power State Tasks for Win32K Power State Callback
463//
464typedef enum _POWERSTATETASK
465{
483
484//
485// Win32K Job Callback Types
486//
488{
493
494//
495// Win32K Thread Callback Types
496//
498{
502
503//
504// Declare empty structure definitions so that they may be referenced by
505// routines before they are defined
506//
507struct _W32THREAD;
508struct _W32PROCESS;
509//struct _ETHREAD;
518
519//
520// Win32K Process and Thread Callbacks
521//
522typedef
525 _In_ struct _EPROCESS *Process,
527);
528
529typedef
532 _In_ struct _ETHREAD *Thread,
534);
535
536typedef
539 VOID
540);
541
542typedef
546);
547
548typedef
552);
553
554typedef
558);
559
560typedef
563 VOID
564);
565
566typedef
570);
571
572typedef
576);
577
578typedef
582);
583
584typedef
588);
589
590typedef
594);
595
596typedef
600);
601
602#if (NTDDI_VERSION >= NTDDI_LONGHORN)
603typedef
606 _In_ struct _EPROCESS *Process,
609);
610#endif
611
612//
613// Lego Callback
614//
615typedef
619);
620
621#endif
622
623typedef NTSTATUS
625 VOID
626);
627
628//
629// Descriptor Table Entry Definition
630//
631#if (_M_IX86)
632#define _DESCRIPTOR_TABLE_ENTRY_DEFINED
633typedef struct _DESCRIPTOR_TABLE_ENTRY
634{
635 ULONG Selector;
637} DESCRIPTOR_TABLE_ENTRY, *PDESCRIPTOR_TABLE_ENTRY;
638#endif
639
640//
641// PEB Lock Routine
642//
643typedef VOID
645 PVOID PebLock
646);
647
648//
649// PEB Free Block Descriptor
650//
651typedef struct _PEB_FREE_BLOCK
652{
653 struct _PEB_FREE_BLOCK* Next;
654 ULONG Size;
656
657//
658// Initial PEB
659//
660typedef struct _INITIAL_PEB
661{
665 union
666 {
668#if (NTDDI_VERSION >= NTDDI_WS03)
669 struct
670 {
672#if (NTDDI_VERSION >= NTDDI_LONGHORN)
676#else
678#endif
679 };
680#else
681 BOOLEAN SpareBool;
682#endif
683 };
686
687//
688// Initial TEB
689//
690typedef struct _INITIAL_TEB
691{
698
699//
700// TEB Active Frame Structures
701//
703{
708
710{
715
716typedef struct _TEB_ACTIVE_FRAME
717{
723
725{
730
731typedef struct _CLIENT_ID32
732{
736
737typedef struct _CLIENT_ID64
738{
742
743#if (NTDDI_VERSION < NTDDI_WS03)
744typedef struct _Wx86ThreadState
745{
746 PULONG CallBx86Eip;
747 PVOID DeallocationCpu;
748 BOOLEAN UseKnownWx86Dll;
749 CHAR OleStubInvoked;
750} Wx86ThreadState, *PWx86ThreadState;
751#endif
752
753//
754// PEB.AppCompatFlags
755// Tag FLAG_MASK_KERNEL
756//
758{
775 DoNotAddToCache = 0x80000000,
777
778
779//
780// PEB.AppCompatFlagsUser.LowPart
781// Tag FLAG_MASK_USER
782//
784{
803 NoDdeSync = 0x40000,
804 NoGhost = 0x80000,
805 NoDdeAsyncReg = 0x100000,
806 StrictLLHook = 0x200000,
807 NoShadow = 0x400000,
809 HighDpiAware = 0x2000000,
810 OpenGLEmfAware = 0x4000000,
812 NoPaddedBorder = 0x10000000,
814 HardwareAudioMixer = 0x40000000,
816#if 0
817 DisableWindowArrangement = 0x100000000,
818 ReorderWaveForCommunications = 0x200000000,
819 NoGdiHwAcceleration = 0x400000000,
820#endif
822
823//
824// PEB.AppCompatFlagsUser.HighPart
825// Tag FLAG_MASK_USER
826//
828{
833
834//
835// Process Environment Block (PEB)
836// Thread Environment Block (TEB)
837//
838#include "peb_teb.h"
839
840#ifdef _WIN64
841//
842// Explicit 32 bit PEB/TEB
843//
844#define EXPLICIT_32BIT
845#include "peb_teb.h"
846#undef EXPLICIT_32BIT
847
848//
849// Explicit 64 bit PEB/TEB
850//
851#define EXPLICIT_64BIT
852#include "peb_teb.h"
853#undef EXPLICIT_64BIT
854#endif
855
856#ifdef NTOS_MODE_USER
857
858//
859// Process Information Structures for NtQueryProcessInformation
860//
861typedef struct _PROCESS_BASIC_INFORMATION
862{
870
871typedef struct _PROCESS_ACCESS_TOKEN
872{
876
878{
879 union
880 {
881 struct
882 {
884 } Set;
885 struct
886 {
888 UCHAR DriveType[32];
889 } Query;
890 };
892
893typedef struct _KERNEL_USER_TIMES
894{
900
901typedef struct _POOLED_USAGE_AND_LIMITS
902{
913
915{
919
920typedef struct _PROCESS_SESSION_INFORMATION
921{
924
926{
929 ULONG Type;
932
934{
939
940#endif
941
943{
948
949typedef struct _PROCESS_LDT_SIZE
950{
953
955{
959
960// Compatibility with windows, see CORE-16757, CORE-17106, CORE-17247
962
964{
967
968//
969// Apphelp SHIM Cache
970//
972{
978
982
983
985{
989
990
991//
992// Thread Information Structures for NtQueryProcessInformation
993//
994typedef struct _THREAD_BASIC_INFORMATION
995{
1003
1004#ifndef NTOS_MODE_USER
1005
1006//
1007// Job Set Array
1008//
1009typedef struct _JOB_SET_ARRAY
1010{
1015
1016//
1017// Process Quota Type
1018//
1019typedef enum _PS_QUOTA_TYPE
1020{
1024#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1026#endif
1027#if (NTDDI_VERSION == NTDDI_LONGHORN)
1029#endif
1032
1033//
1034// EPROCESS Quota Structures
1035//
1037{
1043
1045{
1051
1052//
1053// Process Pagefault History
1054//
1056{
1063
1064//
1065// Process Impersonation Information
1066//
1068{
1074
1075//
1076// Process Termination Port
1077//
1078typedef struct _TERMINATION_PORT
1079{
1083
1084//
1085// Per-Process APC Rate Limiting
1086//
1087typedef struct _PSP_RATE_APC
1088{
1089 union
1090 {
1093 };
1097
1098//
1099// Executive Thread (ETHREAD)
1100//
1101typedef struct _ETHREAD
1102{
1105 union
1106 {
1110 };
1111 union
1112 {
1115 };
1117 union
1118 {
1122#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1124#endif
1125 };
1129#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1131#else
1132 union
1133 {
1134 KSEMAPHORE LpcReplySemaphore;
1136 };
1137 union
1138 {
1139 PVOID LpcReplyMessage;
1140 PVOID LpcWaitingOnPort;
1141 };
1142#endif
1147#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1149#else
1150 struct _EPROCESS *ThreadsProcess;
1151#endif
1153 union
1154 {
1157 };
1161#if (NTDDI_VERSION < NTDDI_LONGHORN)
1162 ULONG LpcReplyMessageId;
1163#endif
1165#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1167#else
1169#endif
1170 union
1171 {
1172 struct
1173 {
1175#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1177#else
1178 ULONG DeadThread:1;
1179#endif
1187#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1192#endif
1193 };
1195 };
1196 union
1197 {
1198 struct
1199 {
1204#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1206#endif
1207 };
1209 };
1210 union
1211 {
1212 struct
1213 {
1216#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1218#else
1219 ULONG AddressSpaceOwner:1;
1220#endif
1227#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1231#else
1232 ULONG ApcNeeded:1;
1233#endif
1234 };
1236 };
1237#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1239#else
1240 UCHAR ForwardClusterOnly;
1241#endif
1244#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1246 union
1247 {
1250 };
1254#endif
1256
1257//
1258// Executive Process (EPROCESS)
1259//
1260typedef struct _EPROCESS
1261{
1276#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1277 union
1278 {
1282 };
1283#else
1284 PVOID ExceptionPort;
1285#endif
1289#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1292#else
1294 KSPIN_LOCK HyperSpaceLock;
1295#endif
1303 struct _EJOB *Job;
1314#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1317#else
1318 PVOID Spare0[3];
1319#endif
1320 union
1321 {
1324 };
1331#ifdef _M_AMD64
1332 struct _WOW64_PROCESS *Wow64Process;
1333#else
1335#endif
1337#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1339#else
1341#endif
1344 struct _PEB* Peb;
1357#ifdef _M_AMD64
1358 ULONG Spares[2];
1359#else
1361#endif
1363#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1364 union
1365 {
1366 struct
1367 {
1383 };
1385 };
1386#else
1387 ULONG JobStatus;
1388#endif
1389 union
1390 {
1391 struct
1392 {
1406#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1408#else
1409 ULONG SessionCreationUnderway:1;
1410#endif
1422#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1424#else
1425 ULONG CreateFailed:1;
1426#endif
1428#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1430#else
1431 ULONG Spare1:1;
1432 ULONG Spare2:1;
1433#endif
1434 };
1436 };
1438#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1440#else
1441 USHORT NextPageColor;
1442#endif
1443 union
1444 {
1445 struct
1446 {
1449 };
1451 };
1456
1457//
1458// Job Token Filter Data
1459//
1460#include <pshpack1.h>
1462{
1473
1474//
1475// Executive Job (EJOB)
1476//
1477typedef struct _EJOB
1478{
1520#if (NTDDI_VERSION >= NTDDI_WINXP) && (NTDDI_VERSION < NTDDI_WS03)
1522#elif (NTDDI_VERSION >= NTDDI_WS03) && (NTDDI_VERSION < NTDDI_LONGHORN)
1524#elif (NTDDI_VERSION >= NTDDI_LONGHORN)
1526#endif
1531#include <poppack.h>
1532
1533//
1534// Job Information Structures for NtQueryInformationJobObject
1535//
1536
1538{
1548
1550{
1561
1563{
1568
1570{
1573
1575{
1582
1584{
1587
1589{
1593
1595{
1599
1601{
1609
1610
1611//
1612// Win32K Callback Registration Data
1613//
1615{
1619
1621{
1628
1630{
1635
1637{
1644
1646{
1652
1654{
1661
1663{
1666
1668{
1680
1682{
1699#if (NTDDI_VERSION >= NTDDI_LONGHORN)
1701#endif
1703
1704#endif // !NTOS_MODE_USER
1705
1706#ifdef __cplusplus
1707}; // extern "C"
1708#endif
1709
1710#endif // _PSTYPES_H
unsigned char BOOLEAN
Type
Definition: Type.h:7
#define VOID
Definition: acefi.h:82
LONG NTSTATUS
Definition: precomp.h:26
@ Create
Definition: registry.c:563
#define NTSYSAPI
Definition: ntoskrnl.h:12
#define NTSTATUS
Definition: precomp.h:21
ULONG_PTR KAFFINITY
Definition: compat.h:85
_THREADINFOCLASS
Definition: compat.h:934
@ ThreadEnableAlignmentFaultFixup
Definition: compat.h:942
@ ThreadDescriptorTableEntry
Definition: compat.h:941
@ ThreadEventPair_Reusable
Definition: compat.h:943
@ ThreadAmILastThread
Definition: compat.h:947
@ ThreadTimes
Definition: compat.h:936
@ ThreadPagePriority
Definition: compat.h:959
@ ThreadCSwitchMon
Definition: compat.h:962
@ ThreadPriority
Definition: compat.h:937
@ MaxThreadInfoClass
Definition: compat.h:969
@ ThreadIdealProcessor
Definition: compat.h:948
@ ThreadActualBasePriority
Definition: compat.h:960
@ ThreadSwitchLegacyState
Definition: compat.h:954
@ ThreadQuerySetWin32StartAddress
Definition: compat.h:944
@ ThreadIsTerminated
Definition: compat.h:955
@ ThreadLastSystemCall
Definition: compat.h:956
@ ThreadBreakOnTermination
Definition: compat.h:953
@ ThreadImpersonationToken
Definition: compat.h:940
@ ThreadSetTlsArrayAddress
Definition: compat.h:950
@ ThreadAffinityMask
Definition: compat.h:939
@ ThreadBasePriority
Definition: compat.h:938
@ ThreadTebInformation
Definition: compat.h:961
@ ThreadIoPriority
Definition: compat.h:957
@ ThreadCycleTime
Definition: compat.h:958
@ ThreadBasicInformation
Definition: compat.h:935
@ ThreadPriorityBoost
Definition: compat.h:949
@ ThreadPerformanceCount
Definition: compat.h:946
@ ThreadIsIoPending
Definition: compat.h:951
@ ThreadZeroTlsCell
Definition: compat.h:945
@ ThreadHideFromDebugger
Definition: compat.h:952
enum _THREADINFOCLASS THREADINFOCLASS
Definition: thread.c:101
LONG KPRIORITY
Definition: compat.h:803
ULONG KSPIN_LOCK
Definition: env_spec_w32.h:72
ULONG ERESOURCE
Definition: env_spec_w32.h:594
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD Thread
Definition: fltkernel.h:2653
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
Definition: fsrtlfuncs.h:223
struct _PAGEFAULT_HISTORY * PPAGEFAULT_HISTORY
struct _PROCESS_PRIORITY_CLASS PROCESS_PRIORITY_CLASS
struct _WIN32_JOBCALLOUT_PARAMETERS WIN32_JOBCALLOUT_PARAMETERS
struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION
struct _EPROCESS EPROCESS
struct _INITIAL_TEB INITIAL_TEB
const struct _TEB_ACTIVE_FRAME_CONTEXT * PCTEB_ACTIVE_FRAME_CONTEXT
Definition: pstypes.h:707
_PSPOWEREVENTTYPE
Definition: pstypes.h:445
@ PsW32DisplayState
Definition: pstypes.h:451
@ PsW32GdiOffRequest
Definition: pstypes.h:457
@ PsW32SetStateFailed
Definition: pstypes.h:453
@ PsW32PowerPolicyChanged
Definition: pstypes.h:448
@ PsW32GdiPrepareResumeUI
Definition: pstypes.h:456
@ PsW32CapabilitiesChanged
Definition: pstypes.h:452
@ PsW32GdiOff
Definition: pstypes.h:454
@ PsW32SystemPowerState
Definition: pstypes.h:449
@ PsW32MonitorOff
Definition: pstypes.h:458
@ PsW32GdiOn
Definition: pstypes.h:455
@ PsW32FullWake
Definition: pstypes.h:446
@ PsW32EventCode
Definition: pstypes.h:447
@ PsW32SystemTime
Definition: pstypes.h:450
struct _WIN32_CLOSEMETHOD_PARAMETERS * PWIN32_CLOSEMETHOD_PARAMETERS
struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION PJOBOBJECT_END_OF_JOB_TIME_INFORMATION
enum _APPCOMPAT_USERFLAGS_HIGHPART APPCOMPAT_USERFLAGS_HIGHPART
struct _TERMINATION_PORT * PTERMINATION_PORT
NTSTATUS(NTAPI * PKWIN32_SESSION_CALLOUT)(_In_ PVOID Parameter)
Definition: pstypes.h:598
struct _EPROCESS_QUOTA_ENTRY * PEPROCESS_QUOTA_ENTRY
struct _JOBOBJECT_BASIC_UI_RESTRICTIONS JOBOBJECT_BASIC_UI_RESTRICTIONS
struct _THREAD_BASIC_INFORMATION THREAD_BASIC_INFORMATION
struct _PS_JOB_TOKEN_FILTER PS_JOB_TOKEN_FILTER
struct _TERMINATION_PORT TERMINATION_PORT
_APPCOMPAT_USERFLAGS_HIGHPART
Definition: pstypes.h:828
@ NoGdiHwAcceleration
Definition: pstypes.h:831
@ ReorderWaveForCommunications
Definition: pstypes.h:830
@ DisableWindowArrangement
Definition: pstypes.h:829
struct _PSP_RATE_APC * PPSP_RATE_APC
struct _PROCESS_PRIORITY_CLASS * PPROCESS_PRIORITY_CLASS
VOID(NTAPI * PLEGO_NOTIFY_ROUTINE)(_In_ PKTHREAD Thread)
Definition: pstypes.h:617
struct _PS_IMPERSONATION_INFORMATION * PPS_IMPERSONATION_INFORMATION
struct _PAGEFAULT_HISTORY PAGEFAULT_HISTORY
const struct _TEB_ACTIVE_FRAME * PCTEB_ACTIVE_FRAME
Definition: pstypes.h:722
NTSTATUS(NTAPI * PKWIN32_PROCESS_CALLOUT)(_In_ struct _EPROCESS *Process, _In_ BOOLEAN Create)
Definition: pstypes.h:524
struct _EPROCESS_QUOTA_BLOCK * PEPROCESS_QUOTA_BLOCK
struct _CLIENT_ID32 CLIENT_ID32
const struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PCTEB_ACTIVE_FRAME_CONTEXT_EX
Definition: pstypes.h:714
struct _INITIAL_PEB * PINITIAL_PEB
struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX
enum _PSW32THREADCALLOUTTYPE PSW32THREADCALLOUTTYPE
struct _WIN32_POWERSTATE_PARAMETERS WIN32_POWERSTATE_PARAMETERS
struct _JOBOBJECT_BASIC_PROCESS_ID_LIST JOBOBJECT_BASIC_PROCESS_ID_LIST
_PSW32JOBCALLOUTTYPE
Definition: pstypes.h:488
@ PsW32JobCalloutTerminate
Definition: pstypes.h:491
@ PsW32JobCalloutAddProcess
Definition: pstypes.h:490
@ PsW32JobCalloutSetInformation
Definition: pstypes.h:489
struct _WIN32_PARSEMETHOD_PARAMETERS * PWIN32_PARSEMETHOD_PARAMETERS
enum _PSW32JOBCALLOUTTYPE PSW32JOBCALLOUTTYPE
struct _WIN32_DELETEMETHOD_PARAMETERS WIN32_DELETEMETHOD_PARAMETERS
enum _JOBOBJECTINFOCLASS JOBOBJECTINFOCLASS
struct _PROCESS_LDT_INFORMATION PROCESS_LDT_INFORMATION
struct _WIN32_POWEREVENT_PARAMETERS WIN32_POWEREVENT_PARAMETERS
struct _TEB_ACTIVE_FRAME_CONTEXT * PTEB_ACTIVE_FRAME_CONTEXT
struct _TEB_ACTIVE_FRAME * PTEB_ACTIVE_FRAME
NTSTATUS(NTAPI * PKWIN32_PARSEMETHOD_CALLOUT)(_In_ struct _WIN32_PARSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:592
_APPCOMPAT_FLAGS
Definition: pstypes.h:758
@ UserDisableForwarderPatch
Definition: pstypes.h:773
@ EnableLegacyNTFSFlagsForDocfileOpens
Definition: pstypes.h:771
@ FTMFromCurrentAPI
Definition: pstypes.h:761
@ GetShortPathNameNT4
Definition: pstypes.h:759
@ GetDiskFreeSpace2GB
Definition: pstypes.h:760
@ DisableCicero
Definition: pstypes.h:764
@ DoNotAddToCache
Definition: pstypes.h:775
@ DisallowCOMBindingNotifications
Definition: pstypes.h:762
@ DisableMaybeNULLSizeisConsistencycheck
Definition: pstypes.h:768
@ DisableAdvancedRPCrangeCheck
Definition: pstypes.h:769
@ EnableLegacyExceptionHandlinginOLE
Definition: pstypes.h:766
@ Ole32ValidatePointers
Definition: pstypes.h:763
@ DisableNDRIIDConsistencyCheck
Definition: pstypes.h:772
@ DisableNewWMPAINTDispatchInOLE
Definition: pstypes.h:774
@ Ole32EnableAsyncDocFile
Definition: pstypes.h:765
@ DisableAdvanceRPCClientHardening
Definition: pstypes.h:767
@ EnableLegacyExceptionHandlingInRPC
Definition: pstypes.h:770
struct _EJOB EJOB
enum _APPHELPCACHESERVICECLASS APPHELPCACHESERVICECLASS
struct _WIN32_CALLOUTS_FPNS WIN32_CALLOUTS_FPNS
struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS * PWIN32_OKAYTOCLOSEMETHOD_PARAMETERS
struct _JOBOBJECT_BASIC_LIMIT_INFORMATION * PJOBOBJECT_BASIC_LIMIT_INFORMATION
struct _WIN32_DELETEMETHOD_PARAMETERS * PWIN32_DELETEMETHOD_PARAMETERS
struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME
struct _CLIENT_ID64 CLIENT_ID64
struct _EJOB * PEJOB
NTSTATUS(NTAPI * PKWIN32_JOB_CALLOUT)(_In_ struct _WIN32_JOBCALLOUT_PARAMETERS *Parameters)
Definition: pstypes.h:556
enum _PSPROCESSPRIORITYMODE PSPROCESSPRIORITYMODE
struct _CLIENT_ID32 * PCLIENT_ID32
struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION JOBOBJECT_SECURITY_LIMIT_INFORMATION
struct _PROCESS_LDT_SIZE PROCESS_LDT_SIZE
struct _WIN32_JOBCALLOUT_PARAMETERS * PWIN32_JOBCALLOUT_PARAMETERS
struct _APPHELP_CACHE_SERVICE_LOOKUP APPHELP_CACHE_SERVICE_LOOKUP
NTSTATUS(NTAPI * PPOST_PROCESS_INIT_ROUTINE)(VOID)
Definition: pstypes.h:624
enum _APPCOMPAT_USERFLAGS APPCOMPAT_USERFLAGS
struct _JOB_SET_ARRAY * PJOB_SET_ARRAY
struct _WIN32_OPENMETHOD_PARAMETERS * PWIN32_OPENMETHOD_PARAMETERS
_APPHELPCACHESERVICECLASS
Definition: pstypes.h:972
@ ApphelpDBGReadRegistry
Definition: pstypes.h:979
@ ApphelpCacheServiceLookup
Definition: pstypes.h:973
@ ApphelpCacheServiceRemove
Definition: pstypes.h:974
@ ApphelpCacheServiceUpdate
Definition: pstypes.h:975
@ ApphelpCacheServiceDump
Definition: pstypes.h:977
@ ApphelpDBGWriteRegistry
Definition: pstypes.h:980
@ ApphelpCacheServiceFlush
Definition: pstypes.h:976
struct _JOBOBJECT_BASIC_PROCESS_ID_LIST * PJOBOBJECT_BASIC_PROCESS_ID_LIST
struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION JOBOBJECT_END_OF_JOB_TIME_INFORMATION
struct _TEB_ACTIVE_FRAME_EX * PTEB_ACTIVE_FRAME_EX
struct _APPHELP_CACHE_SERVICE_LOOKUP * PAPPHELP_CACHE_SERVICE_LOOKUP
struct _PSP_RATE_APC PSP_RATE_APC
struct _PROCESS_LDT_SIZE * PPROCESS_LDT_SIZE
NTSTATUS(NTAPI * PKWIN32_OPENMETHOD_CALLOUT)(_In_ struct _WIN32_OPENMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:568
struct JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION * PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION
_PSPROCESSPRIORITYMODE
Definition: pstypes.h:420
@ PsProcessPrioritySpinning
Definition: pstypes.h:423
@ PsProcessPriorityForeground
Definition: pstypes.h:421
@ PsProcessPriorityBackground
Definition: pstypes.h:422
enum _PS_QUOTA_TYPE PS_QUOTA_TYPE
struct _EPROCESS_QUOTA_ENTRY EPROCESS_QUOTA_ENTRY
struct _INITIAL_TEB * PINITIAL_TEB
struct _WIN32_POWERSTATE_PARAMETERS * PWIN32_POWERSTATE_PARAMETERS
NTSTATUS(NTAPI * PKWIN32_GLOBALATOMTABLE_CALLOUT)(VOID)
Definition: pstypes.h:538
struct _WIN32_OPENMETHOD_PARAMETERS WIN32_OPENMETHOD_PARAMETERS
_JOBOBJECTINFOCLASS
Definition: pstypes.h:427
@ JobObjectAssociateCompletionPortInformation
Definition: pstypes.h:434
@ JobObjectBasicLimitInformation
Definition: pstypes.h:429
@ JobObjectBasicAndIoAccountingInformation
Definition: pstypes.h:435
@ JobObjectBasicAccountingInformation
Definition: pstypes.h:428
@ JobObjectSecurityLimitInformation
Definition: pstypes.h:432
@ JobObjectExtendedLimitInformation
Definition: pstypes.h:436
@ JobObjectEndOfJobTimeInformation
Definition: pstypes.h:433
@ JobObjectBasicUIRestrictions
Definition: pstypes.h:431
@ JobObjectBasicProcessIdList
Definition: pstypes.h:430
@ MaxJobObjectInfoClass
Definition: pstypes.h:438
@ JobObjectJobSetInformation
Definition: pstypes.h:437
struct _THREAD_BASIC_INFORMATION * PTHREAD_BASIC_INFORMATION
enum _APPCOMPAT_FLAGS APPCOMPAT_FLAGS
struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION JOBOBJECT_EXTENDED_LIMIT_INFORMATION
struct _ETHREAD ETHREAD
struct _CLIENT_ID64 * PCLIENT_ID64
struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION JOBOBJECT_BASIC_ACCOUNTING_INFORMATION
struct _PROCESS_LDT_INFORMATION * PPROCESS_LDT_INFORMATION
POBJECT_TYPE NTSYSAPI PsJobType
Definition: job.c:20
enum _PSPOWEREVENTTYPE PSPOWEREVENTTYPE
_APPCOMPAT_USERFLAGS
Definition: pstypes.h:784
@ OpenGLEmfAware
Definition: pstypes.h:810
@ No50StylebitsInSetWindowLong
Definition: pstypes.h:787
@ HighDpiAware
Definition: pstypes.h:809
@ HardwareAudioMixer
Definition: pstypes.h:814
@ NoGhost
Definition: pstypes.h:804
@ NoPaddedBorder
Definition: pstypes.h:812
@ StrictLLHook
Definition: pstypes.h:806
@ UseDefaultCharset
Definition: pstypes.h:799
@ NoDdeSync
Definition: pstypes.h:803
@ NoMouseHideInEdit
Definition: pstypes.h:793
@ EnableTransparantBltMirror
Definition: pstypes.h:811
@ GiveupForeground
Definition: pstypes.h:791
@ FontSubstitution
Definition: pstypes.h:795
@ NoCharDeadKey
Definition: pstypes.h:800
@ DisableAnimation
Definition: pstypes.h:785
@ NoDdeAsyncReg
Definition: pstypes.h:805
@ No50StylebitsInCreateWindow
Definition: pstypes.h:796
@ DisableDrawPatternRect
Definition: pstypes.h:788
@ NoTryExceptForWindowProc
Definition: pstypes.h:801
@ NoCustomPaperSizes
Definition: pstypes.h:797
@ DisableSWCursorOnMoveSize
Definition: pstypes.h:815
@ NoShadow
Definition: pstypes.h:807
@ DisableKeyboardCues
Definition: pstypes.h:786
@ NoGdiBatching
Definition: pstypes.h:794
@ AlwaysActiveMenus
Definition: pstypes.h:792
@ NoDDETerminateDuringDestroy
Definition: pstypes.h:790
@ AllTheDdeHacks
Definition: pstypes.h:798
@ ForceLegacyResizeCM
Definition: pstypes.h:813
@ NoTimerCallbackProtection
Definition: pstypes.h:808
@ NoInitInsertReplaceFlags
Definition: pstypes.h:802
@ MSShellDialog
Definition: pstypes.h:789
struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS WIN32_OKAYTOCLOSEMETHOD_PARAMETERS
struct _TEB_ACTIVE_FRAME_CONTEXT TEB_ACTIVE_FRAME_CONTEXT
struct _WIN32_CLOSEMETHOD_PARAMETERS WIN32_CLOSEMETHOD_PARAMETERS
_PSW32THREADCALLOUTTYPE
Definition: pstypes.h:498
@ PsW32ThreadCalloutInitialize
Definition: pstypes.h:499
@ PsW32ThreadCalloutExit
Definition: pstypes.h:500
NTSTATUS(NTAPI * PKWIN32_WIN32DATACOLLECTION_CALLOUT)(_In_ struct _EPROCESS *Process, _In_ PVOID Callback, _In_ PVOID Context)
Definition: pstypes.h:605
struct _JOBOBJECT_BASIC_LIMIT_INFORMATION JOBOBJECT_BASIC_LIMIT_INFORMATION
NTSTATUS(NTAPI * PKWIN32_POWERSTATE_CALLOUT)(_In_ struct _WIN32_POWERSTATE_PARAMETERS *Parameters)
Definition: pstypes.h:550
struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION * PJOBOBJECT_SECURITY_LIMIT_INFORMATION
NTSTATUS(NTAPI * PKWIN32_POWEREVENT_CALLOUT)(_In_ struct _WIN32_POWEREVENT_PARAMETERS *Parameters)
Definition: pstypes.h:544
const struct _TEB_ACTIVE_FRAME_EX * PCTEB_ACTIVE_FRAME_EX
Definition: pstypes.h:729
struct _PS_JOB_TOKEN_FILTER * PPS_JOB_TOKEN_FILTER
VOID(NTAPI * PPEBLOCKROUTINE)(PVOID PebLock)
Definition: pstypes.h:644
struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION * PJOBOBJECT_EXTENDED_LIMIT_INFORMATION
struct _PEB_FREE_BLOCK PEB_FREE_BLOCK
struct _PEB_FREE_BLOCK * PPEB_FREE_BLOCK
struct _INITIAL_PEB INITIAL_PEB
NTSTATUS(NTAPI * PKWIN32_OKTOCLOSEMETHOD_CALLOUT)(_In_ struct _WIN32_OKAYTOCLOSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:574
struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PTEB_ACTIVE_FRAME_CONTEXT_EX
struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT * PJOBOBJECT_ASSOCIATE_COMPLETION_PORT
_PS_QUOTA_TYPE
Definition: pstypes.h:1020
@ PsQuotaTypes
Definition: pstypes.h:1030
@ PsNonPagedPool
Definition: pstypes.h:1021
@ PsCpuRate
Definition: pstypes.h:1028
@ PsWorkingSet
Definition: pstypes.h:1025
@ PsPageFile
Definition: pstypes.h:1023
@ PsPagedPool
Definition: pstypes.h:1022
NTSTATUS(NTAPI * PKWIN32_DELETEMETHOD_CALLOUT)(_In_ struct _WIN32_DELETEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:586
struct _EPROCESS_QUOTA_BLOCK EPROCESS_QUOTA_BLOCK
struct _PROCESS_FOREGROUND_BACKGROUND * PPROCESS_FOREGROUND_BACKGROUND
struct _WIN32_PARSEMETHOD_PARAMETERS WIN32_PARSEMETHOD_PARAMETERS
struct _PS_IMPERSONATION_INFORMATION PS_IMPERSONATION_INFORMATION
struct _JOB_SET_ARRAY JOB_SET_ARRAY
struct _WIN32_POWEREVENT_PARAMETERS * PWIN32_POWEREVENT_PARAMETERS
enum _POWERSTATETASK POWERSTATETASK
_POWERSTATETASK
Definition: pstypes.h:465
@ PowerState_NotifyWL
Definition: pstypes.h:475
@ PowerState_QueryServices
Definition: pstypes.h:469
@ PowerState_QueryAppsFailed
Definition: pstypes.h:470
@ PowerState_ResumeServices
Definition: pstypes.h:477
@ PowerState_BlockInput
Definition: pstypes.h:480
@ PowerState_BlockSessionSwitch
Definition: pstypes.h:466
@ PowerState_Init
Definition: pstypes.h:467
@ PowerState_ShowUI
Definition: pstypes.h:474
@ PowerState_UnblockInput
Definition: pstypes.h:481
@ PowerState_QueryApps
Definition: pstypes.h:468
@ PowerState_ResumeApps
Definition: pstypes.h:476
@ PowerState_SuspendServices
Definition: pstypes.h:473
@ PowerState_SuspendApps
Definition: pstypes.h:472
@ PowerState_UnBlockSessionSwitch
Definition: pstypes.h:478
@ PowerState_QueryServicesFailed
Definition: pstypes.h:471
@ PowerState_End
Definition: pstypes.h:479
NTSTATUS(NTAPI * PGDI_BATCHFLUSH_ROUTINE)(VOID)
Definition: pstypes.h:562
struct _TEB_ACTIVE_FRAME_CONTEXT_EX TEB_ACTIVE_FRAME_CONTEXT_EX
struct _PROCESS_FOREGROUND_BACKGROUND PROCESS_FOREGROUND_BACKGROUND
NTSTATUS(NTAPI * PKWIN32_THREAD_CALLOUT)(_In_ struct _ETHREAD *Thread, _In_ PSW32THREADCALLOUTTYPE Type)
Definition: pstypes.h:531
struct _JOBOBJECT_BASIC_UI_RESTRICTIONS * PJOBOBJECT_BASIC_UI_RESTRICTIONS
struct _WIN32_CALLOUTS_FPNS * PWIN32_CALLOUTS_FPNS
NTSTATUS(NTAPI * PKWIN32_CLOSEMETHOD_CALLOUT)(_In_ struct _WIN32_CLOSEMETHOD_PARAMETERS *Parameters)
Definition: pstypes.h:580
struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT JOBOBJECT_ASSOCIATE_COMPLETION_PORT
_PROCESSINFOCLASS
Definition: winternl.h:393
@ ProcessDebugPort
Definition: winternl.h:395
@ ProcessBreakOnTermination
Definition: winternl.h:398
@ ProcessBasicInformation
Definition: winternl.h:394
@ ProcessWow64Information
Definition: winternl.h:396
@ ProcessImageFileName
Definition: winternl.h:397
struct _PROCESS_BASIC_INFORMATION * PPROCESS_BASIC_INFORMATION
enum _PROCESSINFOCLASS PROCESSINFOCLASS
Definition: loader.c:63
struct _PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION
struct _KERNEL_USER_TIMES KERNEL_USER_TIMES
struct _KERNEL_USER_TIMES * PKERNEL_USER_TIMES
@ ProcessPagePriority
Definition: winternl.h:894
@ ProcessLUIDDeviceMapsEnabled
Definition: winternl.h:884
@ ProcessMemoryAllocationMode
Definition: winternl.h:901
@ ProcessTlsInformation
Definition: winternl.h:890
@ ProcessWx86Information
Definition: winternl.h:875
@ ProcessDebugFlags
Definition: winternl.h:887
@ MaxProcessInfoClass
Definition: winternl.h:906
@ ProcessSessionInformation
Definition: winternl.h:880
@ ProcessWorkingSetWatchEx
Definition: winternl.h:897
@ ProcessAffinityMask
Definition: winternl.h:877
@ ProcessInstrumentationCallback
Definition: winternl.h:895
@ ProcessImageFileMapping
Definition: winternl.h:899
@ ProcessIoPortHandlers
Definition: winternl.h:869
@ ProcessRaisePriority
Definition: winternl.h:862
@ ProcessVmCounters
Definition: winternl.h:859
@ ProcessPriorityClass
Definition: winternl.h:874
@ ProcessPriorityBoost
Definition: winternl.h:878
@ ProcessImageInformation
Definition: winternl.h:892
@ ProcessExecuteFlags
Definition: winternl.h:889
@ ProcessCookie
Definition: winternl.h:891
@ ProcessPooledUsageAndLimits
Definition: winternl.h:870
@ ProcessLdtSize
Definition: winternl.h:867
@ ProcessIoCounters
Definition: winternl.h:858
@ ProcessImageFileNameWin32
Definition: winternl.h:898
@ ProcessDefaultHardErrorMode
Definition: winternl.h:868
@ ProcessAffinityUpdateMode
Definition: winternl.h:900
@ ProcessEnableAlignmentFaultFixup
Definition: winternl.h:873
@ ProcessDeviceMap
Definition: winternl.h:879
@ ProcessBasePriority
Definition: winternl.h:861
@ ProcessQuotaLimits
Definition: winternl.h:857
@ ProcessCycleTime
Definition: winternl.h:893
@ ProcessAccessToken
Definition: winternl.h:865
@ ProcessHandleTracing
Definition: winternl.h:888
@ ProcessThreadStackAllocation
Definition: winternl.h:896
@ ProcessForegroundInformation
Definition: winternl.h:881
@ ProcessTimes
Definition: winternl.h:860
@ ProcessDebugObjectHandle
Definition: winternl.h:886
@ ProcessExceptionPort
Definition: winternl.h:864
@ ProcessWorkingSetWatch
Definition: winternl.h:871
@ ProcessLdtInformation
Definition: winternl.h:866
@ ProcessHandleCount
Definition: winternl.h:876
@ ProcessUserModeIOPL
Definition: winternl.h:872
struct _PROCESS_HANDLE_TRACING_ENTRY * PPROCESS_HANDLE_TRACING_ENTRY
struct _PROCESS_ACCESS_TOKEN PROCESS_ACCESS_TOKEN
struct _PROCESS_DEVICEMAP_INFORMATION PROCESS_DEVICEMAP_INFORMATION
struct _PROCESS_DEVICEMAP_INFORMATION * PPROCESS_DEVICEMAP_INFORMATION
struct _PROCESS_ACCESS_TOKEN * PPROCESS_ACCESS_TOKEN
struct _PROCESS_WS_WATCH_INFORMATION PROCESS_WS_WATCH_INFORMATION
struct _PROCESS_SESSION_INFORMATION PROCESS_SESSION_INFORMATION
#define PROCESS_HANDLE_TRACING_MAX_STACKS
Definition: pstypes.h:230
struct _PROCESS_WS_WATCH_INFORMATION * PPROCESS_WS_WATCH_INFORMATION
struct _POOLED_USAGE_AND_LIMITS * PPOOLED_USAGE_AND_LIMITS
@ ProcessIoPriority
Definition: pstypes.h:266
struct _PROCESS_SESSION_INFORMATION * PPROCESS_SESSION_INFORMATION
struct _PROCESS_HANDLE_TRACING_QUERY * PPROCESS_HANDLE_TRACING_QUERY
struct _PROCESS_HANDLE_TRACING_QUERY PROCESS_HANDLE_TRACING_QUERY
struct _PROCESS_HANDLE_TRACING_ENTRY PROCESS_HANDLE_TRACING_ENTRY
struct _POOLED_USAGE_AND_LIMITS POOLED_USAGE_AND_LIMITS
#define C_ASSERT(e)
Definition: intsafe.h:73
enum _SECURITY_IMPERSONATION_LEVEL SECURITY_IMPERSONATION_LEVEL
unsigned __int64 ULONG64
Definition: imports.h:198
#define _Out_
Definition: ms_sal.h:345
#define _In_
Definition: ms_sal.h:308
enum _OB_OPEN_REASON OB_OPEN_REASON
ULONG ACCESS_MASK
Definition: nt_native.h:40
POWER_ACTION
Definition: ntpoapi.h:122
enum _SYSTEM_POWER_STATE SYSTEM_POWER_STATE
unsigned short USHORT
Definition: pedump.c:61
ULONG PFN_NUMBER
Definition: ke.h:9
JOBOBJECT_BASIC_ACCOUNTING_INFORMATION BasicInfo
Definition: pstypes.h:1596
UNICODE_STRING ImageName
Definition: pstypes.h:986
ULONG UniqueProcess
Definition: pstypes.h:733
ULONG UniqueThread
Definition: pstypes.h:734
ULONG64 UniqueThread
Definition: pstypes.h:740
ULONG64 UniqueProcess
Definition: pstypes.h:739
LARGE_INTEGER ThisPeriodTotalUserTime
Definition: pstypes.h:1485
ULONGLONG OtherTransferCount
Definition: pstypes.h:1513
LARGE_INTEGER TotalKernelTime
Definition: pstypes.h:1484
ULONG CurrentJobMemoryUsed
Definition: pstypes.h:1519
ULONG LimitFlags
Definition: pstypes.h:1493
ULONG TotalProcesses
Definition: pstypes.h:1488
ULONG ActiveProcessLimit
Definition: pstypes.h:1496
LIST_ENTRY ProcessListHead
Definition: pstypes.h:1481
UCHAR PriorityClass
Definition: pstypes.h:1498
ULONG UIRestrictionsClass
Definition: pstypes.h:1499
ULONGLONG OtherOperationCount
Definition: pstypes.h:1510
LARGE_INTEGER PerJobUserTimeLimit
Definition: pstypes.h:1492
ULONG Affinity
Definition: pstypes.h:1497
PVOID CompletionPort
Definition: pstypes.h:1504
ULONG ActiveProcesses
Definition: pstypes.h:1489
KEVENT Event
Definition: pstypes.h:1479
ULONG PeakProcessMemoryUsed
Definition: pstypes.h:1517
ULONG ProcessMemoryLimit
Definition: pstypes.h:1515
ULONGLONG ReadTransferCount
Definition: pstypes.h:1511
ULONG SchedulingClass
Definition: pstypes.h:1507
ULONG TotalPageFaultCount
Definition: pstypes.h:1487
ULONG MinimumWorkingSetSize
Definition: pstypes.h:1494
PVOID Token
Definition: pstypes.h:1501
PVOID CompletionKey
Definition: pstypes.h:1505
LIST_ENTRY JobLinks
Definition: pstypes.h:1480
ULONG PeakJobMemoryUsed
Definition: pstypes.h:1518
ULONG TotalTerminatedProcesses
Definition: pstypes.h:1490
ULONG JobFlags
Definition: pstypes.h:1529
ULONG MaximumWorkingSetSize
Definition: pstypes.h:1495
ULONG SecurityLimitFlags
Definition: pstypes.h:1500
IO_COUNTERS IoInfo
Definition: pstypes.h:1514
LARGE_INTEGER TotalUserTime
Definition: pstypes.h:1483
ULONGLONG ReadOperationCount
Definition: pstypes.h:1508
LARGE_INTEGER ThisPeriodTotalKernelTime
Definition: pstypes.h:1486
ULONGLONG WriteOperationCount
Definition: pstypes.h:1509
EX_PUSH_LOCK MemoryLimitsLock
Definition: pstypes.h:1525
PPS_JOB_TOKEN_FILTER Filter
Definition: pstypes.h:1502
ULONG JobMemoryLimit
Definition: pstypes.h:1516
ULONGLONG WriteTransferCount
Definition: pstypes.h:1512
ERESOURCE JobLock
Definition: pstypes.h:1482
LIST_ENTRY JobSetLinks
Definition: pstypes.h:1527
ULONG MemberLevel
Definition: pstypes.h:1528
ULONG EndOfJobTimeAction
Definition: pstypes.h:1503
LARGE_INTEGER PerProcessUserTimeLimit
Definition: pstypes.h:1491
ULONG SessionId
Definition: pstypes.h:1506
EPROCESS_QUOTA_ENTRY QuotaEntry[PsQuotaTypes]
Definition: pstypes.h:1046
LIST_ENTRY QuotaList
Definition: pstypes.h:1047
Definition: pstypes.h:1037
SIZE_T Return
Definition: pstypes.h:1041
SIZE_T Usage
Definition: pstypes.h:1038
SIZE_T Limit
Definition: pstypes.h:1039
SIZE_T Peak
Definition: pstypes.h:1040
PVOID ExceptionPortData
Definition: pstypes.h:1279
PVOID LockedPagesList
Definition: pstypes.h:1328
ULONG ExitProcessReported
Definition: pstypes.h:1371
LIST_ENTRY ActiveProcessLinks
Definition: pstypes.h:1268
EX_FAST_REF PrefetchTrace
Definition: pstypes.h:1345
USHORT Spare7
Definition: pstypes.h:1439
SIZE_T CommitCharge
Definition: pstypes.h:1271
PVOID SectionObject
Definition: pstypes.h:1304
PVOID VadFreeHint
Definition: pstypes.h:1311
MM_AVL_TABLE VadRoot
Definition: pstypes.h:1453
PVOID SecurityPort
Definition: pstypes.h:1330
ULONG RefTraceEnabled
Definition: pstypes.h:1377
UCHAR SubSystemMinorVersion
Definition: pstypes.h:1447
struct _PEB * Peb
Definition: pstypes.h:1344
LIST_ENTRY ThreadListHead
Definition: pstypes.h:1329
ULONG ProcessDeleteSelf
Definition: pstypes.h:1381
ULONG DeprioritizeViews
Definition: pstypes.h:1407
PVOID VdmObjects
Definition: pstypes.h:1312
UCHAR SubSystemMajorVersion
Definition: pstypes.h:1448
ULONG ExceptionPortValue
Definition: pstypes.h:1280
ULONG SetTimerResolution
Definition: pstypes.h:1404
PMM_AVL_TABLE PhysicalVadRoot
Definition: pstypes.h:1298
ULONG ProcessVerifierTarget
Definition: pstypes.h:1382
SIZE_T CommitChargeLimit
Definition: pstypes.h:1352
ULONG HandleTableRundown
Definition: pstypes.h:1375
NTSTATUS ExitStatus
Definition: pstypes.h:1437
PFN_NUMBER NumberOfPrivatePages
Definition: pstypes.h:1300
PVOID Session
Definition: pstypes.h:1325
PVOID DebugPort
Definition: pstypes.h:1275
KPROCESS Pcb
Definition: pstypes.h:1262
ULONG Flags2
Definition: pstypes.h:1384
EX_FAST_REF Token
Definition: pstypes.h:1287
ULONG HasAddressSpace
Definition: pstypes.h:1414
ULONG PdeUpdateNeeded
Definition: pstypes.h:1419
MMSUPPORT Vm
Definition: pstypes.h:1356
SIZE_T CommitChargePeak
Definition: pstypes.h:1353
ULONG ImageNotifyDone
Definition: pstypes.h:1418
ULONG VdmAllowed
Definition: pstypes.h:1420
struct _EJOB * Job
Definition: pstypes.h:1303
ULONG ProcessExiting
Definition: pstypes.h:1395
LARGE_INTEGER WriteTransferCount
Definition: pstypes.h:1350
ULONG DefaultPagePriority
Definition: pstypes.h:1380
ULONGLONG Filler
Definition: pstypes.h:1323
EX_PUSH_LOCK ProcessLock
Definition: pstypes.h:1263
HANDLE InheritedFromUniqueProcessId
Definition: pstypes.h:1309
UCHAR ExceptionPortState
Definition: pstypes.h:1281
ULONG WriteWatch
Definition: pstypes.h:1411
ULONG OverrideAddressSpace
Definition: pstypes.h:1413
ULONG NoDebugInherit
Definition: pstypes.h:1394
ULONG NumaAware
Definition: pstypes.h:1378
ULONG Flags
Definition: pstypes.h:1435
ULONG ProtectedProcess
Definition: pstypes.h:1379
PVOID CloneRoot
Definition: pstypes.h:1299
HARDWARE_PTE PageDirectoryPte
Definition: pstypes.h:1322
ULONG ProcessInserted
Definition: pstypes.h:1423
PEPROCESS_QUOTA_BLOCK QuotaBlock
Definition: pstypes.h:1306
ULONG Wow64VaSpace4Gb
Definition: pstypes.h:1402
LIST_ENTRY MmProcessLinks
Definition: pstypes.h:1360
PVOID LdtInformation
Definition: pstypes.h:1310
ULONG AccountingFolded
Definition: pstypes.h:1369
PVOID * Win32Process
Definition: pstypes.h:1302
PVOID FreeTebHint
Definition: pstypes.h:1316
ULONG SmapAllowed
Definition: pstypes.h:1421
EX_PUSH_LOCK AddressCreationLock
Definition: pstypes.h:1290
ULONG CreateReported
Definition: pstypes.h:1393
PETHREAD ForkInProgress
Definition: pstypes.h:1296
PFN_NUMBER NumberOfLockedPages
Definition: pstypes.h:1301
LIST_ENTRY JobLinks
Definition: pstypes.h:1327
PVOID SectionBaseAddress
Definition: pstypes.h:1305
ULONG_PTR HardwareTrigger
Definition: pstypes.h:1297
PHANDLE_TABLE ObjectTable
Definition: pstypes.h:1286
ULONG Wow64SplitPages
Definition: pstypes.h:1397
ULONG InjectInpageErrors
Definition: pstypes.h:1416
ULONG SparePsFlags1
Definition: pstypes.h:1429
ULONG ReportPhysicalPageChanges
Definition: pstypes.h:1374
LARGE_INTEGER CreateTime
Definition: pstypes.h:1264
PETHREAD RotateInProgress
Definition: pstypes.h:1291
ULONG OutswapEnabled
Definition: pstypes.h:1399
HANDLE UniqueProcessId
Definition: pstypes.h:1267
SIZE_T PeakVirtualSize
Definition: pstypes.h:1272
ULONG ProcessDelete
Definition: pstypes.h:1396
NTSTATUS LastThreadExitStatus
Definition: pstypes.h:1343
ULONG ForkFailed
Definition: pstypes.h:1401
SE_AUDIT_PROCESS_CREATION_INFO SeAuditProcessCreationInfo
Definition: pstypes.h:1355
ULONG Outswapped
Definition: pstypes.h:1400
ULONG LaunchPrefetched
Definition: pstypes.h:1415
ULONG LastReportMemory
Definition: pstypes.h:1373
LARGE_INTEGER ReadTransferCount
Definition: pstypes.h:1349
ULONG ImagePathHash
Definition: pstypes.h:1338
CHAR ImageFileName[16]
Definition: pstypes.h:1326
UCHAR PriorityClass
Definition: pstypes.h:1452
PVOID Win32WindowStation
Definition: pstypes.h:1308
ULONG AddressSpaceInitialized
Definition: pstypes.h:1403
ULONG JobNotReallyActive
Definition: pstypes.h:1368
USHORT SubSystemVersion
Definition: pstypes.h:1450
ULONG NeedsHandleRundown
Definition: pstypes.h:1376
LARGE_INTEGER ReadOperationCount
Definition: pstypes.h:1346
PVOID PaeTop
Definition: pstypes.h:1334
LARGE_INTEGER ExitTime
Definition: pstypes.h:1265
PPAGEFAULT_HISTORY WorkingSetWatch
Definition: pstypes.h:1307
SIZE_T VirtualSize
Definition: pstypes.h:1273
ULONG VmDeleted
Definition: pstypes.h:1398
LIST_ENTRY SessionProcessLinks
Definition: pstypes.h:1274
LARGE_INTEGER OtherTransferCount
Definition: pstypes.h:1351
ULONG BreakOnTermination
Definition: pstypes.h:1405
ULONG ProcessInSession
Definition: pstypes.h:1412
ULONG NewProcessReported
Definition: pstypes.h:1370
ULONG VmTopDown
Definition: pstypes.h:1417
ULONG DefaultHardErrorProcessing
Definition: pstypes.h:1342
SIZE_T QuotaUsage[PsQuotaTypes]
Definition: pstypes.h:1269
LARGE_INTEGER WriteOperationCount
Definition: pstypes.h:1347
PFN_NUMBER WorkingSetPage
Definition: pstypes.h:1288
ULONG ActiveThreads
Definition: pstypes.h:1336
PVOID DeviceMap
Definition: pstypes.h:1313
ULONG DefaultIoPriority
Definition: pstypes.h:1427
ULONG Cookie
Definition: pstypes.h:1454
ULONG ModifiedPageCount
Definition: pstypes.h:1362
SIZE_T QuotaPeak[PsQuotaTypes]
Definition: pstypes.h:1270
PVOID EtwDataSource
Definition: pstypes.h:1315
PVOID AweInfo
Definition: pstypes.h:1354
EX_RUNDOWN_REF RundownProtect
Definition: pstypes.h:1266
ULONG ReportCommitChanges
Definition: pstypes.h:1372
LARGE_INTEGER OtherOperationCount
Definition: pstypes.h:1348
ULONG SkipTerminationMsg
Definition: pstypes.h:1186
PKSTART_ROUTINE StartAddress
Definition: pstypes.h:1155
ULONG ThreadIoPriority
Definition: pstypes.h:1189
LARGE_INTEGER ExitTime
Definition: pstypes.h:1107
PPS_IMPERSONATION_INFORMATION ImpersonationInfo
Definition: pstypes.h:1143
NTSTATUS ExitStatus
Definition: pstypes.h:1113
KTHREAD Tcb
Definition: pstypes.h:1103
ULONG RateApcState
Definition: pstypes.h:1205
UCHAR CacheManagerActive
Definition: pstypes.h:1238
ULONG SpareUlong0
Definition: pstypes.h:1166
PVOID AlpcMessage
Definition: pstypes.h:1248
ULONG AlpcReceiveAttributeSet
Definition: pstypes.h:1249
ULONG OwnsSessionWorkingSetExclusive
Definition: pstypes.h:1225
EX_RUNDOWN_REF RundownProtect
Definition: pstypes.h:1159
ULONG_PTR TopLevelIrp
Definition: pstypes.h:1145
ULONG ExWorkerCanWaitUser
Definition: pstypes.h:1201
ULONG MemoryMaker
Definition: pstypes.h:1202
ULONG SameThreadApcFlags
Definition: pstypes.h:1235
ULONG ReadClusterSize
Definition: pstypes.h:1164
ULONG CacheManagerCount
Definition: pstypes.h:1253
ULONG AlpcMessageId
Definition: pstypes.h:1245
PVOID Win32StartAddress
Definition: pstypes.h:1152
ULONG OwnsSessionWorkingSetShared
Definition: pstypes.h:1226
CLIENT_ID Cid
Definition: pstypes.h:1128
UCHAR DisablePageFaultClustering
Definition: pstypes.h:1242
LIST_ENTRY IrpList
Definition: pstypes.h:1144
struct _TERMINATION_PORT * TerminationPort
Definition: pstypes.h:1119
ULONG CreateMsgSent
Definition: pstypes.h:1188
ULONG ThreadPagePriority
Definition: pstypes.h:1190
ULONG ThreadInserted
Definition: pstypes.h:1176
PVOID KeyedWaitValue
Definition: pstypes.h:1121
ULONG ActiveExWorker
Definition: pstypes.h:1200
UCHAR ActiveFaultCount
Definition: pstypes.h:1243
ULONG LpcReceivedMsgIdValid
Definition: pstypes.h:1214
EX_PUSH_LOCK ThreadLock
Definition: pstypes.h:1160
LIST_ENTRY ActiveTimerListHead
Definition: pstypes.h:1127
ULONG PriorityRegionActive
Definition: pstypes.h:1230
ULONG Spare1
Definition: pstypes.h:1229
KSPIN_LOCK ActiveTimerListLock
Definition: pstypes.h:1126
ULONG OwnsSystemWorkingSetShared
Definition: pstypes.h:1224
PDEVICE_OBJECT DeviceToVerify
Definition: pstypes.h:1146
LIST_ENTRY AlpcWaitListEntry
Definition: pstypes.h:1251
ULONG LpcReceivedMessageId
Definition: pstypes.h:1156
LARGE_INTEGER CreateTime
Definition: pstypes.h:1104
ULONG OwnsProcessWorkingSetShared
Definition: pstypes.h:1222
ULONG ActiveImpersonationInfo
Definition: pstypes.h:1181
ULONG Spare
Definition: pstypes.h:1217
ULONG SameThreadPassiveFlags
Definition: pstypes.h:1208
ULONG PendingRatecontrol
Definition: pstypes.h:1191
ULONG LpcExitThreadCalled
Definition: pstypes.h:1215
ULONG SkipCreationMsg
Definition: pstypes.h:1185
ULONG OwnsProcessWorkingSetExclusive
Definition: pstypes.h:1221
ULONG BreakOnTermination
Definition: pstypes.h:1184
ULONG CrossThreadFlags
Definition: pstypes.h:1194
PPSP_RATE_APC RateControlApc
Definition: pstypes.h:1148
PVOID OfsChain
Definition: pstypes.h:1114
KSEMAPHORE KeyedWaitSemaphore
Definition: pstypes.h:1130
LIST_ENTRY KeyedWaitChain
Definition: pstypes.h:1109
ULONG SystemThread
Definition: pstypes.h:1182
ULONG KeyedEventInUse
Definition: pstypes.h:1203
ULONG HardErrorsAreDisabled
Definition: pstypes.h:1183
ULONG SuppressSymbolLoad
Definition: pstypes.h:1228
KSEMAPHORE AlpcWaitSemaphore
Definition: pstypes.h:1252
struct _ETHREAD * ReaperLink
Definition: pstypes.h:1120
PVOID Win32StartParameter
Definition: pstypes.h:1123
LIST_ENTRY ThreadListEntry
Definition: pstypes.h:1158
LIST_ENTRY LpcReplyChain
Definition: pstypes.h:1108
ULONG HideFromDebugger
Definition: pstypes.h:1180
ULONG OwnsSystemWorkingSetExclusive
Definition: pstypes.h:1223
ULONG Terminated
Definition: pstypes.h:1174
LIST_ENTRY PostBlockList
Definition: pstypes.h:1116
BOOLEAN ImageUsesLargePages
Definition: pstypes.h:671
BOOLEAN IsLegacyProcess
Definition: pstypes.h:674
BOOLEAN IsProtectedProcess
Definition: pstypes.h:673
BOOLEAN InheritedAddressSpace
Definition: pstypes.h:662
BOOLEAN ReadImageFileExecOptions
Definition: pstypes.h:663
BOOLEAN BeingDebugged
Definition: pstypes.h:664
BOOLEAN SpareBits
Definition: pstypes.h:675
BOOLEAN BitField
Definition: pstypes.h:667
HANDLE Mutant
Definition: pstypes.h:684
PVOID StackBase
Definition: pstypes.h:694
PVOID PreviousStackBase
Definition: pstypes.h:692
PVOID AllocatedStackBase
Definition: pstypes.h:696
PVOID StackLimit
Definition: pstypes.h:695
PVOID PreviousStackLimit
Definition: pstypes.h:693
LARGE_INTEGER PerProcessUserTimeLimit
Definition: pstypes.h:1551
JOBOBJECT_BASIC_LIMIT_INFORMATION BasicLimitInformation
Definition: pstypes.h:1602
PTOKEN_PRIVILEGES PrivilegesToDelete
Definition: pstypes.h:1579
ULONG MemberLevel
Definition: pstypes.h:1012
HANDLE JobHandle
Definition: pstypes.h:1011
Definition: ketypes.h:547
LARGE_INTEGER UserTime
Definition: winternl.h:1063
LARGE_INTEGER CreateTime
Definition: winternl.h:1060
LARGE_INTEGER KernelTime
Definition: winternl.h:1062
LARGE_INTEGER ExitTime
Definition: winternl.h:1061
Definition: compat.h:777
Definition: typedefs.h:120
KSPIN_LOCK SpinLock
Definition: pstypes.h:1059
PROCESS_WS_WATCH_INFORMATION WatchInfo[1]
Definition: pstypes.h:1061
struct _PEB_FREE_BLOCK * Next
Definition: ntddk_ex.h:230
SIZE_T PeakNonPagedPoolUsage
Definition: pstypes.h:138
ULONG_PTR InheritedFromUniqueProcessId
Definition: pstypes.h:340
struct _PROCESS_DEVICEMAP_INFORMATION::@4188::@4190 Query
struct _PROCESS_DEVICEMAP_INFORMATION::@4188::@4189 Set
Definition: pstypes.h:396
HANDLE Handle
Definition: pstypes.h:397
ULONG Type
Definition: pstypes.h:399
CLIENT_ID ClientId
Definition: pstypes.h:398
PVOID Stacks[PROCESS_HANDLE_TRACING_MAX_STACKS]
Definition: pstypes.h:400
PROCESS_HANDLE_TRACING_ENTRY HandleTrace[1]
Definition: pstypes.h:406
LDT_ENTRY LdtEntries[ANYSIZE_ARRAY]
Definition: pstypes.h:946
ULONGLONG TargetGEneration
Definition: pstypes.h:1094
SINGLE_LIST_ENTRY NextApc
Definition: pstypes.h:1091
ULONGLONG ExcessCycles
Definition: pstypes.h:1092
KAPC RateApc
Definition: pstypes.h:1095
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel
Definition: pstypes.h:1072
ULONG CapturedSidsLength
Definition: pstypes.h:1465
PSID_AND_ATTRIBUTES CapturedSids
Definition: pstypes.h:1464
ULONG CapturedGroupsLength
Definition: pstypes.h:1468
ULONG CapturedGroupCount
Definition: pstypes.h:1466
PSID_AND_ATTRIBUTES CapturedGroups
Definition: pstypes.h:1467
ULONG CapturedPrivilegeCount
Definition: pstypes.h:1469
PLUID_AND_ATTRIBUTES CapturedPrivileges
Definition: pstypes.h:1470
ULONG CapturedPrivilegesLength
Definition: pstypes.h:1471
Definition: ntbasedef.h:628
TEB_ACTIVE_FRAME_CONTEXT BasicContext
Definition: pstypes.h:711
TEB_ACTIVE_FRAME BasicFrame
Definition: pstypes.h:726
PVOID ExtensionIdentifier
Definition: pstypes.h:727
PCTEB_ACTIVE_FRAME_CONTEXT Context
Definition: pstypes.h:720
struct _TEB_ACTIVE_FRAME * Previous
Definition: pstypes.h:719
struct _TERMINATION_PORT * Next
Definition: pstypes.h:1080
KPRIORITY BasePriority
Definition: compat.h:932
KAFFINITY AffinityMask
Definition: compat.h:930
PKWIN32_POWEREVENT_CALLOUT PowerEventCallout
Definition: pstypes.h:1686
PKWIN32_SESSION_CALLOUT WindowStationOkToCloseProcedure
Definition: pstypes.h:1694
PKWIN32_PROCESS_CALLOUT ProcessCallout
Definition: pstypes.h:1683
PKWIN32_SESSION_CALLOUT WindowStationDeleteProcedure
Definition: pstypes.h:1696
PKWIN32_SESSION_CALLOUT WindowStationParseProcedure
Definition: pstypes.h:1697
PKWIN32_SESSION_CALLOUT DesktopOkToCloseProcedure
Definition: pstypes.h:1691
PKWIN32_WIN32DATACOLLECTION_CALLOUT Win32DataCollectionProcedure
Definition: pstypes.h:1700
PKWIN32_POWERSTATE_CALLOUT PowerStateCallout
Definition: pstypes.h:1687
PKWIN32_SESSION_CALLOUT DesktopOpenProcedure
Definition: pstypes.h:1690
PKWIN32_SESSION_CALLOUT DesktopDeleteProcedure
Definition: pstypes.h:1693
PKWIN32_SESSION_CALLOUT DesktopCloseProcedure
Definition: pstypes.h:1692
PKWIN32_GLOBALATOMTABLE_CALLOUT GlobalAtomTableCallout
Definition: pstypes.h:1685
PKWIN32_SESSION_CALLOUT WindowStationOpenProcedure
Definition: pstypes.h:1698
PKWIN32_THREAD_CALLOUT ThreadCallout
Definition: pstypes.h:1684
PGDI_BATCHFLUSH_ROUTINE BatchFlushRoutine
Definition: pstypes.h:1689
PKWIN32_SESSION_CALLOUT WindowStationCloseProcedure
Definition: pstypes.h:1695
PKWIN32_JOB_CALLOUT JobCallout
Definition: pstypes.h:1688
PSW32JOBCALLOUTTYPE CalloutType
Definition: pstypes.h:1632
OB_OPEN_REASON OpenReason
Definition: pstypes.h:1638
PUNICODE_STRING RemainingName
Definition: pstypes.h:1675
_Out_ PUNICODE_STRING CompleteName
Definition: pstypes.h:1674
PSECURITY_QUALITY_OF_SERVICE SecurityQos
Definition: pstypes.h:1677
KPROCESSOR_MODE AccessMode
Definition: pstypes.h:1672
PSPOWEREVENTTYPE EventNumber
Definition: pstypes.h:1616
SYSTEM_POWER_STATE MinSystemState
Definition: pstypes.h:1624
POWERSTATETASK PowerStateTask
Definition: pstypes.h:1626
uint32_t * PULONG
Definition: typedefs.h:59
#define ANYSIZE_ARRAY
Definition: typedefs.h:46
#define NTAPI
Definition: typedefs.h:36
ULONG_PTR SIZE_T
Definition: typedefs.h:80
const char * PCSTR
Definition: typedefs.h:52
uint32_t ULONG_PTR
Definition: typedefs.h:65
uint32_t ULONG
Definition: typedefs.h:59
uint64_t ULONGLONG
Definition: typedefs.h:67
_In_ WDFINTERRUPT _In_ PFN_WDF_INTERRUPT_SYNCHRONIZE Callback
Definition: wdfinterrupt.h:458
_Must_inspect_result_ _In_ WDFQUEUE _In_opt_ WDFREQUEST _In_opt_ WDFFILEOBJECT _Inout_opt_ PWDF_REQUEST_PARAMETERS Parameters
Definition: wdfio.h:869
_Must_inspect_result_ _In_ WDFIORESLIST _In_ PIO_RESOURCE_DESCRIPTOR Descriptor
Definition: wdfresource.h:342
FAST_MUTEX
Definition: extypes.h:17
KSTART_ROUTINE * PKSTART_ROUTINE
Definition: ketypes.h:499
CCHAR KPROCESSOR_MODE
Definition: ketypes.h:7
_Inout_opt_ PVOID Parameter
Definition: rtltypes.h:336
_In_ PSECURITY_SUBJECT_CONTEXT _In_ BOOLEAN _In_ ACCESS_MASK _In_ ACCESS_MASK _Outptr_opt_ PPRIVILEGE_SET _In_ PGENERIC_MAPPING _In_ KPROCESSOR_MODE _Out_ PACCESS_MASK GrantedAccess
Definition: sefuncs.h:20
char * LPSTR
Definition: xmlstorage.h:182
unsigned char UCHAR
Definition: xmlstorage.h:181
char CHAR
Definition: xmlstorage.h:175