Process Hacker
_PEB32 Struct Reference

#include <ntwow64.h>

Public Member Functions

 WOW64_POINTER (HANDLE) Mutant
 
 WOW64_POINTER (PVOID) ImageBaseAddress
 
 WOW64_POINTER (PPEB_LDR_DATA) Ldr
 
 WOW64_POINTER (PRTL_USER_PROCESS_PARAMETERS) ProcessParameters
 
 WOW64_POINTER (PVOID) SubSystemData
 
 WOW64_POINTER (PVOID) ProcessHeap
 
 WOW64_POINTER (PRTL_CRITICAL_SECTION) FastPebLock
 
 WOW64_POINTER (PVOID) AtlThunkSListPtr
 
 WOW64_POINTER (PVOID) IFEOKey
 
 WOW64_POINTER (PVOID) ApiSetMap
 
 WOW64_POINTER (PVOID) TlsBitmap
 
 WOW64_POINTER (PVOID) ReadOnlySharedMemoryBase
 
 WOW64_POINTER (PVOID) HotpatchInformation
 
 WOW64_POINTER (PVOID *) ReadOnlyStaticServerData
 
 WOW64_POINTER (PVOID) AnsiCodePageData
 
 WOW64_POINTER (PVOID) OemCodePageData
 
 WOW64_POINTER (PVOID) UnicodeCaseTableData
 
 WOW64_POINTER (SIZE_T) HeapSegmentReserve
 
 WOW64_POINTER (SIZE_T) HeapSegmentCommit
 
 WOW64_POINTER (SIZE_T) HeapDeCommitTotalFreeThreshold
 
 WOW64_POINTER (SIZE_T) HeapDeCommitFreeBlockThreshold
 
 WOW64_POINTER (PVOID *) ProcessHeaps
 
 WOW64_POINTER (PVOID) GdiSharedHandleTable
 
 WOW64_POINTER (PVOID) ProcessStarterHelper
 
 WOW64_POINTER (PRTL_CRITICAL_SECTION) LoaderLock
 
 WOW64_POINTER (ULONG_PTR) ImageProcessAffinityMask
 
 WOW64_POINTER (PVOID) PostProcessInitRoutine
 
 WOW64_POINTER (PVOID) TlsExpansionBitmap
 
 WOW64_POINTER (PVOID) pShimData
 
 WOW64_POINTER (PVOID) AppCompatInfo
 
 WOW64_POINTER (PVOID) ActivationContextData
 
 WOW64_POINTER (PVOID) ProcessAssemblyStorageMap
 
 WOW64_POINTER (PVOID) SystemDefaultActivationContextData
 
 WOW64_POINTER (PVOID) SystemAssemblyStorageMap
 
 WOW64_POINTER (SIZE_T) MinimumStackCommit
 
 WOW64_POINTER (PVOID *) FlsCallback
 
 WOW64_POINTER (PVOID) FlsBitmap
 
 WOW64_POINTER (PVOID) WerRegistrationData
 
 WOW64_POINTER (PVOID) WerShipAssertPtr
 
 WOW64_POINTER (PVOID) pContextData
 
 WOW64_POINTER (PVOID) pImageHeaderHash
 

Data Fields

BOOLEAN InheritedAddressSpace
 
BOOLEAN ReadImageFileExecOptions
 
BOOLEAN BeingDebugged
 
union {
   BOOLEAN   BitField
 
   struct {
      BOOLEAN   ImageUsesLargePages: 1
 
      BOOLEAN   IsProtectedProcess: 1
 
      BOOLEAN   IsLegacyProcess: 1
 
      BOOLEAN   IsImageDynamicallyRelocated: 1
 
      BOOLEAN   SkipPatchingUser32Forwarders: 1
 
      BOOLEAN   IsPackagedProcess: 1
 
      BOOLEAN   IsAppContainer: 1
 
      BOOLEAN   SpareBits: 1
 
   } 
 
}; 
 
union {
   ULONG   CrossProcessFlags
 
   struct {
      ULONG   ProcessInJob: 1
 
      ULONG   ProcessInitializing: 1
 
      ULONG   ProcessUsingVEH: 1
 
      ULONG   ProcessUsingVCH: 1
 
      ULONG   ProcessUsingFTH: 1
 
      ULONG   ReservedBits0: 27
 
   } 
 
   ULONG   EnvironmentUpdateCount
 
}; 
 
union {
}; 
 
ULONG SystemReserved [1]
 
ULONG AtlThunkSListPtr32
 
ULONG TlsExpansionCounter
 
ULONG TlsBitmapBits [2]
 
ULONG NumberOfProcessors
 
ULONG NtGlobalFlag
 
LARGE_INTEGER CriticalSectionTimeout
 
ULONG NumberOfHeaps
 
ULONG MaximumNumberOfHeaps
 
ULONG GdiDCAttributeList
 
ULONG OSMajorVersion
 
ULONG OSMinorVersion
 
USHORT OSBuildNumber
 
USHORT OSCSDVersion
 
ULONG OSPlatformId
 
ULONG ImageSubsystem
 
ULONG ImageSubsystemMajorVersion
 
ULONG ImageSubsystemMinorVersion
 
GDI_HANDLE_BUFFER32 GdiHandleBuffer
 
ULONG TlsExpansionBitmapBits [32]
 
ULONG SessionId
 
ULARGE_INTEGER AppCompatFlags
 
ULARGE_INTEGER AppCompatFlagsUser
 
UNICODE_STRING32 CSDVersion
 
LIST_ENTRY32 FlsListHead
 
ULONG FlsBitmapBits [FLS_MAXIMUM_AVAILABLE/(sizeof(ULONG)*8)]
 
ULONG FlsHighIndex
 
union {
   ULONG   TracingFlags
 
   struct {
      ULONG   HeapTracingEnabled: 1
 
      ULONG   CritSecTracingEnabled: 1
 
      ULONG   LibLoaderTracingEnabled: 1
 
      ULONG   SpareTracingBits: 29
 
   } 
 
}; 
 
ULONGLONG CsrServerReadOnlySharedMemoryBase
 

Detailed Description

Definition at line 229 of file ntwow64.h.

Member Function Documentation

WOW64_POINTER ( HANDLE  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PPEB_LDR_DATA  )
WOW64_POINTER ( PRTL_USER_PROCESS_PARAMETERS  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PRTL_CRITICAL_SECTION  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID *  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( SIZE_T  )
WOW64_POINTER ( SIZE_T  )
WOW64_POINTER ( SIZE_T  )
WOW64_POINTER ( SIZE_T  )
WOW64_POINTER ( PVOID *  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PRTL_CRITICAL_SECTION  )
WOW64_POINTER ( ULONG_PTR  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( SIZE_T  )
WOW64_POINTER ( PVOID *  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )
WOW64_POINTER ( PVOID  )

Field Documentation

union { ... }
union { ... }
union { ... }
union { ... }
ULARGE_INTEGER AppCompatFlags

Definition at line 327 of file ntwow64.h.

ULARGE_INTEGER AppCompatFlagsUser

Definition at line 328 of file ntwow64.h.

ULONG AtlThunkSListPtr32

Definition at line 279 of file ntwow64.h.

BOOLEAN BeingDebugged

Definition at line 233 of file ntwow64.h.

BOOLEAN BitField

Definition at line 236 of file ntwow64.h.

LARGE_INTEGER CriticalSectionTimeout

Definition at line 294 of file ntwow64.h.

ULONG CritSecTracingEnabled

Definition at line 357 of file ntwow64.h.

ULONG CrossProcessFlags

Definition at line 261 of file ntwow64.h.

UNICODE_STRING32 CSDVersion

Definition at line 332 of file ntwow64.h.

ULONGLONG CsrServerReadOnlySharedMemoryBase

Definition at line 362 of file ntwow64.h.

ULONG EnvironmentUpdateCount

Definition at line 271 of file ntwow64.h.

ULONG FlsBitmapBits[FLS_MAXIMUM_AVAILABLE/(sizeof(ULONG)*8)]

Definition at line 344 of file ntwow64.h.

ULONG FlsHighIndex

Definition at line 345 of file ntwow64.h.

LIST_ENTRY32 FlsListHead

Definition at line 342 of file ntwow64.h.

ULONG GdiDCAttributeList

Definition at line 306 of file ntwow64.h.

GDI_HANDLE_BUFFER32 GdiHandleBuffer

Definition at line 319 of file ntwow64.h.

ULONG HeapTracingEnabled

Definition at line 356 of file ntwow64.h.

ULONG ImageSubsystem

Definition at line 315 of file ntwow64.h.

ULONG ImageSubsystemMajorVersion

Definition at line 316 of file ntwow64.h.

ULONG ImageSubsystemMinorVersion

Definition at line 317 of file ntwow64.h.

BOOLEAN ImageUsesLargePages

Definition at line 239 of file ntwow64.h.

BOOLEAN InheritedAddressSpace

Definition at line 231 of file ntwow64.h.

BOOLEAN IsAppContainer

Definition at line 245 of file ntwow64.h.

BOOLEAN IsImageDynamicallyRelocated

Definition at line 242 of file ntwow64.h.

BOOLEAN IsLegacyProcess

Definition at line 241 of file ntwow64.h.

BOOLEAN IsPackagedProcess

Definition at line 244 of file ntwow64.h.

BOOLEAN IsProtectedProcess

Definition at line 240 of file ntwow64.h.

ULONG LibLoaderTracingEnabled

Definition at line 358 of file ntwow64.h.

ULONG MaximumNumberOfHeaps

Definition at line 301 of file ntwow64.h.

ULONG NtGlobalFlag

Definition at line 292 of file ntwow64.h.

ULONG NumberOfHeaps

Definition at line 300 of file ntwow64.h.

ULONG NumberOfProcessors

Definition at line 291 of file ntwow64.h.

USHORT OSBuildNumber

Definition at line 312 of file ntwow64.h.

USHORT OSCSDVersion

Definition at line 313 of file ntwow64.h.

ULONG OSMajorVersion

Definition at line 310 of file ntwow64.h.

ULONG OSMinorVersion

Definition at line 311 of file ntwow64.h.

ULONG OSPlatformId

Definition at line 314 of file ntwow64.h.

ULONG ProcessInitializing

Definition at line 265 of file ntwow64.h.

ULONG ProcessInJob

Definition at line 264 of file ntwow64.h.

ULONG ProcessUsingFTH

Definition at line 268 of file ntwow64.h.

ULONG ProcessUsingVCH

Definition at line 267 of file ntwow64.h.

ULONG ProcessUsingVEH

Definition at line 266 of file ntwow64.h.

BOOLEAN ReadImageFileExecOptions

Definition at line 232 of file ntwow64.h.

ULONG ReservedBits0

Definition at line 269 of file ntwow64.h.

ULONG SessionId

Definition at line 325 of file ntwow64.h.

BOOLEAN SkipPatchingUser32Forwarders

Definition at line 243 of file ntwow64.h.

BOOLEAN SpareBits

Definition at line 246 of file ntwow64.h.

ULONG SpareTracingBits

Definition at line 359 of file ntwow64.h.

ULONG SystemReserved[1]

Definition at line 278 of file ntwow64.h.

ULONG TlsBitmapBits[2]

Definition at line 283 of file ntwow64.h.

ULONG TlsExpansionBitmapBits[32]

Definition at line 323 of file ntwow64.h.

ULONG TlsExpansionCounter

Definition at line 281 of file ntwow64.h.

ULONG TracingFlags

Definition at line 353 of file ntwow64.h.


The documentation for this struct was generated from the following file: