Process Hacker
_PEB Struct Reference

#include <ntpebteb.h>

Data Fields

BOOLEAN InheritedAddressSpace
 
BOOLEAN ReadImageFileExecOptions
 
BOOLEAN BeingDebugged
 
union {
   BOOLEAN   BitField
 
   struct {
      BOOLEAN   ImageUsesLargePages: 1
 
      BOOLEAN   IsProtectedProcess: 1
 
      BOOLEAN   IsImageDynamicallyRelocated: 1
 
      BOOLEAN   SkipPatchingUser32Forwarders: 1
 
      BOOLEAN   IsPackagedProcess: 1
 
      BOOLEAN   IsAppContainer: 1
 
      BOOLEAN   IsProtectedProcessLight: 1
 
      BOOLEAN   SpareBits: 1
 
   } 
 
}; 
 
HANDLE Mutant
 
PVOID ImageBaseAddress
 
PPEB_LDR_DATA Ldr
 
PRTL_USER_PROCESS_PARAMETERS ProcessParameters
 
PVOID SubSystemData
 
PVOID ProcessHeap
 
PRTL_CRITICAL_SECTION FastPebLock
 
PVOID AtlThunkSListPtr
 
PVOID IFEOKey
 
union {
   ULONG   CrossProcessFlags
 
   struct {
      ULONG   ProcessInJob: 1
 
      ULONG   ProcessInitializing: 1
 
      ULONG   ProcessUsingVEH: 1
 
      ULONG   ProcessUsingVCH: 1
 
      ULONG   ProcessUsingFTH: 1
 
      ULONG   ReservedBits0: 27
 
   } 
 
   ULONG   EnvironmentUpdateCount
 
}; 
 
union {
   PVOID   KernelCallbackTable
 
   PVOID   UserSharedInfoPtr
 
}; 
 
ULONG SystemReserved [1]
 
ULONG AtlThunkSListPtr32
 
PVOID ApiSetMap
 
ULONG TlsExpansionCounter
 
PVOID TlsBitmap
 
ULONG TlsBitmapBits [2]
 
PVOID ReadOnlySharedMemoryBase
 
PVOID HotpatchInformation
 
PVOID * ReadOnlyStaticServerData
 
PVOID AnsiCodePageData
 
PVOID OemCodePageData
 
PVOID UnicodeCaseTableData
 
ULONG NumberOfProcessors
 
ULONG NtGlobalFlag
 
LARGE_INTEGER CriticalSectionTimeout
 
SIZE_T HeapSegmentReserve
 
SIZE_T HeapSegmentCommit
 
SIZE_T HeapDeCommitTotalFreeThreshold
 
SIZE_T HeapDeCommitFreeBlockThreshold
 
ULONG NumberOfHeaps
 
ULONG MaximumNumberOfHeaps
 
PVOID * ProcessHeaps
 
PVOID GdiSharedHandleTable
 
PVOID ProcessStarterHelper
 
ULONG GdiDCAttributeList
 
PRTL_CRITICAL_SECTION LoaderLock
 
ULONG OSMajorVersion
 
ULONG OSMinorVersion
 
USHORT OSBuildNumber
 
USHORT OSCSDVersion
 
ULONG OSPlatformId
 
ULONG ImageSubsystem
 
ULONG ImageSubsystemMajorVersion
 
ULONG ImageSubsystemMinorVersion
 
ULONG_PTR ImageProcessAffinityMask
 
GDI_HANDLE_BUFFER GdiHandleBuffer
 
PVOID PostProcessInitRoutine
 
PVOID TlsExpansionBitmap
 
ULONG TlsExpansionBitmapBits [32]
 
ULONG SessionId
 
ULARGE_INTEGER AppCompatFlags
 
ULARGE_INTEGER AppCompatFlagsUser
 
PVOID pShimData
 
PVOID AppCompatInfo
 
UNICODE_STRING CSDVersion
 
PVOID ActivationContextData
 
PVOID ProcessAssemblyStorageMap
 
PVOID SystemDefaultActivationContextData
 
PVOID SystemAssemblyStorageMap
 
SIZE_T MinimumStackCommit
 
PVOID * FlsCallback
 
LIST_ENTRY FlsListHead
 
PVOID FlsBitmap
 
ULONG FlsBitmapBits [FLS_MAXIMUM_AVAILABLE/(sizeof(ULONG)*8)]
 
ULONG FlsHighIndex
 
PVOID WerRegistrationData
 
PVOID WerShipAssertPtr
 
PVOID pContextData
 
PVOID pImageHeaderHash
 
union {
   ULONG   TracingFlags
 
   struct {
      ULONG   HeapTracingEnabled: 1
 
      ULONG   CritSecTracingEnabled: 1
 
      ULONG   LibLoaderTracingEnabled: 1
 
      ULONG   SpareTracingBits: 29
 
   } 
 
}; 
 
ULONGLONG CsrServerReadOnlySharedMemoryBase
 

Detailed Description

Definition at line 8 of file ntpebteb.h.

Field Documentation

union { ... }
union { ... }
union { ... }
union { ... }
PVOID ActivationContextData

Definition at line 113 of file ntpebteb.h.

PVOID AnsiCodePageData

Definition at line 66 of file ntpebteb.h.

PVOID ApiSetMap

Definition at line 59 of file ntpebteb.h.

ULARGE_INTEGER AppCompatFlags

Definition at line 106 of file ntpebteb.h.

ULARGE_INTEGER AppCompatFlagsUser

Definition at line 107 of file ntpebteb.h.

PVOID AppCompatInfo

Definition at line 109 of file ntpebteb.h.

PVOID AtlThunkSListPtr

Definition at line 36 of file ntpebteb.h.

ULONG AtlThunkSListPtr32

Definition at line 58 of file ntpebteb.h.

BOOLEAN BeingDebugged

Definition at line 12 of file ntpebteb.h.

BOOLEAN BitField

Definition at line 15 of file ntpebteb.h.

LARGE_INTEGER CriticalSectionTimeout

Definition at line 73 of file ntpebteb.h.

ULONG CritSecTracingEnabled

Definition at line 136 of file ntpebteb.h.

ULONG CrossProcessFlags

Definition at line 40 of file ntpebteb.h.

UNICODE_STRING CSDVersion

Definition at line 111 of file ntpebteb.h.

ULONGLONG CsrServerReadOnlySharedMemoryBase

Definition at line 141 of file ntpebteb.h.

ULONG EnvironmentUpdateCount

Definition at line 50 of file ntpebteb.h.

PRTL_CRITICAL_SECTION FastPebLock

Definition at line 35 of file ntpebteb.h.

PVOID FlsBitmap

Definition at line 122 of file ntpebteb.h.

ULONG FlsBitmapBits[FLS_MAXIMUM_AVAILABLE/(sizeof(ULONG)*8)]

Definition at line 123 of file ntpebteb.h.

PVOID* FlsCallback

Definition at line 120 of file ntpebteb.h.

ULONG FlsHighIndex

Definition at line 124 of file ntpebteb.h.

LIST_ENTRY FlsListHead

Definition at line 121 of file ntpebteb.h.

ULONG GdiDCAttributeList

Definition at line 85 of file ntpebteb.h.

GDI_HANDLE_BUFFER GdiHandleBuffer

Definition at line 98 of file ntpebteb.h.

PVOID GdiSharedHandleTable

Definition at line 83 of file ntpebteb.h.

SIZE_T HeapDeCommitFreeBlockThreshold

Definition at line 77 of file ntpebteb.h.

SIZE_T HeapDeCommitTotalFreeThreshold

Definition at line 76 of file ntpebteb.h.

SIZE_T HeapSegmentCommit

Definition at line 75 of file ntpebteb.h.

SIZE_T HeapSegmentReserve

Definition at line 74 of file ntpebteb.h.

ULONG HeapTracingEnabled

Definition at line 135 of file ntpebteb.h.

PVOID HotpatchInformation

Definition at line 64 of file ntpebteb.h.

PVOID IFEOKey

Definition at line 37 of file ntpebteb.h.

PVOID ImageBaseAddress

Definition at line 30 of file ntpebteb.h.

ULONG_PTR ImageProcessAffinityMask

Definition at line 97 of file ntpebteb.h.

ULONG ImageSubsystem

Definition at line 94 of file ntpebteb.h.

ULONG ImageSubsystemMajorVersion

Definition at line 95 of file ntpebteb.h.

ULONG ImageSubsystemMinorVersion

Definition at line 96 of file ntpebteb.h.

BOOLEAN ImageUsesLargePages

Definition at line 18 of file ntpebteb.h.

BOOLEAN InheritedAddressSpace

Definition at line 10 of file ntpebteb.h.

BOOLEAN IsAppContainer

Definition at line 23 of file ntpebteb.h.

BOOLEAN IsImageDynamicallyRelocated

Definition at line 20 of file ntpebteb.h.

BOOLEAN IsPackagedProcess

Definition at line 22 of file ntpebteb.h.

BOOLEAN IsProtectedProcess

Definition at line 19 of file ntpebteb.h.

BOOLEAN IsProtectedProcessLight

Definition at line 24 of file ntpebteb.h.

PVOID KernelCallbackTable

Definition at line 54 of file ntpebteb.h.

Definition at line 31 of file ntpebteb.h.

ULONG LibLoaderTracingEnabled

Definition at line 137 of file ntpebteb.h.

Definition at line 87 of file ntpebteb.h.

ULONG MaximumNumberOfHeaps

Definition at line 80 of file ntpebteb.h.

SIZE_T MinimumStackCommit

Definition at line 118 of file ntpebteb.h.

HANDLE Mutant

Definition at line 28 of file ntpebteb.h.

ULONG NtGlobalFlag

Definition at line 71 of file ntpebteb.h.

ULONG NumberOfHeaps

Definition at line 79 of file ntpebteb.h.

ULONG NumberOfProcessors

Definition at line 70 of file ntpebteb.h.

PVOID OemCodePageData

Definition at line 67 of file ntpebteb.h.

USHORT OSBuildNumber

Definition at line 91 of file ntpebteb.h.

USHORT OSCSDVersion

Definition at line 92 of file ntpebteb.h.

ULONG OSMajorVersion

Definition at line 89 of file ntpebteb.h.

ULONG OSMinorVersion

Definition at line 90 of file ntpebteb.h.

ULONG OSPlatformId

Definition at line 93 of file ntpebteb.h.

PVOID pContextData

Definition at line 128 of file ntpebteb.h.

PVOID pImageHeaderHash

Definition at line 129 of file ntpebteb.h.

PVOID PostProcessInitRoutine

Definition at line 99 of file ntpebteb.h.

PVOID ProcessAssemblyStorageMap

Definition at line 114 of file ntpebteb.h.

PVOID ProcessHeap

Definition at line 34 of file ntpebteb.h.

PVOID* ProcessHeaps

Definition at line 81 of file ntpebteb.h.

ULONG ProcessInitializing

Definition at line 44 of file ntpebteb.h.

ULONG ProcessInJob

Definition at line 43 of file ntpebteb.h.

PRTL_USER_PROCESS_PARAMETERS ProcessParameters

Definition at line 32 of file ntpebteb.h.

PVOID ProcessStarterHelper

Definition at line 84 of file ntpebteb.h.

ULONG ProcessUsingFTH

Definition at line 47 of file ntpebteb.h.

ULONG ProcessUsingVCH

Definition at line 46 of file ntpebteb.h.

ULONG ProcessUsingVEH

Definition at line 45 of file ntpebteb.h.

PVOID pShimData

Definition at line 108 of file ntpebteb.h.

BOOLEAN ReadImageFileExecOptions

Definition at line 11 of file ntpebteb.h.

PVOID ReadOnlySharedMemoryBase

Definition at line 63 of file ntpebteb.h.

PVOID* ReadOnlyStaticServerData

Definition at line 65 of file ntpebteb.h.

ULONG ReservedBits0

Definition at line 48 of file ntpebteb.h.

ULONG SessionId

Definition at line 104 of file ntpebteb.h.

BOOLEAN SkipPatchingUser32Forwarders

Definition at line 21 of file ntpebteb.h.

BOOLEAN SpareBits

Definition at line 25 of file ntpebteb.h.

ULONG SpareTracingBits

Definition at line 138 of file ntpebteb.h.

PVOID SubSystemData

Definition at line 33 of file ntpebteb.h.

PVOID SystemAssemblyStorageMap

Definition at line 116 of file ntpebteb.h.

PVOID SystemDefaultActivationContextData

Definition at line 115 of file ntpebteb.h.

ULONG SystemReserved[1]

Definition at line 57 of file ntpebteb.h.

PVOID TlsBitmap

Definition at line 61 of file ntpebteb.h.

ULONG TlsBitmapBits[2]

Definition at line 62 of file ntpebteb.h.

PVOID TlsExpansionBitmap

Definition at line 101 of file ntpebteb.h.

ULONG TlsExpansionBitmapBits[32]

Definition at line 102 of file ntpebteb.h.

ULONG TlsExpansionCounter

Definition at line 60 of file ntpebteb.h.

ULONG TracingFlags

Definition at line 132 of file ntpebteb.h.

PVOID UnicodeCaseTableData

Definition at line 68 of file ntpebteb.h.

PVOID UserSharedInfoPtr

Definition at line 55 of file ntpebteb.h.

PVOID WerRegistrationData

Definition at line 126 of file ntpebteb.h.

PVOID WerShipAssertPtr

Definition at line 127 of file ntpebteb.h.


The documentation for this struct was generated from the following file: