Main Page | Class Hierarchy | Class List | File List | Class Members | File Members

_EPROCESS Struct Reference

#include <ps.h>

List of all members.

Public Attributes

KPROCESS Pcb
NTSTATUS ExitStatus
KEVENT LockEvent
ULONG LockCount
LARGE_INTEGER CreateTime
LARGE_INTEGER ExitTime
PKTHREAD LockOwner
HANDLE UniqueProcessId
LIST_ENTRY ActiveProcessLinks
SIZE_T QuotaPeakPoolUsage [2]
SIZE_T QuotaPoolUsage [2]
SIZE_T PagefileUsage
SIZE_T CommitCharge
SIZE_T PeakPagefileUsage
SIZE_T PeakVirtualSize
SIZE_T VirtualSize
MMSUPPORT Vm
LIST_ENTRY SessionProcessLinks
PVOID DebugPort
PVOID ExceptionPort
PHANDLE_TABLE ObjectTable
PACCESS_TOKEN Token
FAST_MUTEX WorkingSetLock
PFN_NUMBER WorkingSetPage
BOOLEAN ProcessOutswapEnabled
BOOLEAN ProcessOutswapped
UCHAR AddressSpaceInitialized
BOOLEAN AddressSpaceDeleted
FAST_MUTEX AddressCreationLock
KSPIN_LOCK HyperSpaceLock
_ETHREAD * ForkInProgress
USHORT VmOperation
UCHAR ForkWasSuccessful
UCHAR MmAgressiveWsTrimMask
PKEVENT VmOperationEvent
PVOID PaeTop
ULONG LastFaultCount
ULONG ModifiedPageCount
PVOID VadRoot
PVOID VadHint
PVOID CloneRoot
PFN_NUMBER NumberOfPrivatePages
PFN_NUMBER NumberOfLockedPages
USHORT NextPageColor
BOOLEAN ExitProcessCalled
BOOLEAN CreateProcessReported
HANDLE SectionHandle
PPEB Peb
PVOID SectionBaseAddress
PEPROCESS_QUOTA_BLOCK QuotaBlock
NTSTATUS LastThreadExitStatus
PPAGEFAULT_HISTORY WorkingSetWatch
HANDLE Win32WindowStation
HANDLE InheritedFromUniqueProcessId
ACCESS_MASK GrantedAccess
ULONG DefaultHardErrorProcessing
PVOID LdtInformation
PVOID VadFreeHint
PVOID VdmObjects
PVOID DeviceMap
ULONG SessionId
LIST_ENTRY PhysicalVadList
ULONG PaePageDirectoryPage
UCHAR ImageFileName [16]
ULONG VmTrimFaultValue
BOOLEAN SetTimerResolution
UCHAR PriorityClass
PVOID Win32Process
_EJOB * Job
ULONG JobStatus
LIST_ENTRY JobLinks
PVOID LockedPagesList
PVOID SecurityPort
PWOW64_PROCESS Wow64Process
LARGE_INTEGER ReadOperationCount
LARGE_INTEGER WriteOperationCount
LARGE_INTEGER OtherOperationCount
LARGE_INTEGER ReadTransferCount
LARGE_INTEGER WriteTransferCount
LARGE_INTEGER OtherTransferCount
SIZE_T CommitChargeLimit
SIZE_T CommitChargePeak
LIST_ENTRY ThreadListHead
PRTL_BITMAP VadPhysicalPagesBitMap
ULONG_PTR VadPhysicalPages
KSPIN_LOCK AweLock

Member Data Documentation

LIST_ENTRY _EPROCESS::ActiveProcessLinks
 

Definition at line 176 of file ps.h.

FAST_MUTEX _EPROCESS::AddressCreationLock
 

Definition at line 217 of file ps.h.

BOOLEAN _EPROCESS::AddressSpaceDeleted
 

Definition at line 216 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), MiEmptyAllWorkingSetsWorker(), MiEmptyWorkingSet(), MiMapLockedPagesInUserSpace(), MmAdjustWorkingSetSize(), MmCleanProcessAddressSpace(), MmCopyVirtualMemory(), MmMapUserAddressesToPage(), MmWorkingSetManager(), NtAllocateUserPhysicalPages(), NtAllocateVirtualMemory(), NtFreeUserPhysicalPages(), NtFreeVirtualMemory(), and NtQueryVirtualMemory().

UCHAR _EPROCESS::AddressSpaceInitialized
 

Definition at line 215 of file ps.h.

Referenced by MmCleanProcessAddressSpace().

KSPIN_LOCK _EPROCESS::AweLock
 

Definition at line 311 of file ps.h.

Referenced by MmInitSystem().

PVOID _EPROCESS::CloneRoot
 

Definition at line 229 of file ps.h.

Referenced by MmCleanProcessAddressSpace().

SIZE_T _EPROCESS::CommitCharge
 

Definition at line 186 of file ps.h.

Referenced by MiInsertVad(), MiRemoveVad(), MmCleanProcessAddressSpace(), NtAllocateVirtualMemory(), NtFreeVirtualMemory(), and PsChangeJobMemoryUsage().

SIZE_T _EPROCESS::CommitChargeLimit
 

Definition at line 304 of file ps.h.

Referenced by MiInsertVad(), NtAllocateVirtualMemory(), and PspApplyJobLimitsToProcess().

SIZE_T _EPROCESS::CommitChargePeak
 

Definition at line 305 of file ps.h.

Referenced by MiInsertVad(), NtAllocateVirtualMemory(), and PspFoldProcessAccountingIntoJob().

BOOLEAN _EPROCESS::CreateProcessReported
 

Definition at line 239 of file ps.h.

Referenced by DbgkCreateThread().

LARGE_INTEGER _EPROCESS::CreateTime
 

Definition at line 170 of file ps.h.

PVOID _EPROCESS::DebugPort
 

Definition at line 199 of file ps.h.

Referenced by DbgkCreateThread(), DbgkExitProcess(), DbgkExitThread(), DbgkForwardException(), DbgkMapViewOfSection(), DbgkUnMapViewOfSection(), and xxxActivateDebugger().

ULONG _EPROCESS::DefaultHardErrorProcessing
 

Definition at line 255 of file ps.h.

Referenced by ExpRaiseHardError(), and PspCreateProcess().

PVOID _EPROCESS::DeviceMap
 

Definition at line 259 of file ps.h.

Referenced by ObSetDeviceMap().

PVOID _EPROCESS::ExceptionPort
 

Definition at line 200 of file ps.h.

Referenced by DbgkForwardException(), and ExpRaiseHardError().

BOOLEAN _EPROCESS::ExitProcessCalled
 

Definition at line 233 of file ps.h.

Referenced by xxxWaitForInputIdle().

NTSTATUS _EPROCESS::ExitStatus
 

Definition at line 167 of file ps.h.

Referenced by PspExitThread().

LARGE_INTEGER _EPROCESS::ExitTime
 

Definition at line 171 of file ps.h.

Referenced by PspExitThread().

ULONGLONG _EPROCESS::Filler
 

Definition at line 270 of file ps.h.

struct _ETHREAD* _EPROCESS::ForkInProgress
 

Definition at line 219 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), MiCopyOnWrite(), and MmAccessFault().

UCHAR _EPROCESS::ForkWasSuccessful
 

Definition at line 221 of file ps.h.

Referenced by MiCloneProcessAddressSpace().

ACCESS_MASK _EPROCESS::GrantedAccess
 

Definition at line 254 of file ps.h.

Referenced by ObReferenceObjectByHandle(), and PsLookupProcessByProcessId().

KSPIN_LOCK _EPROCESS::HyperSpaceLock
 

Definition at line 218 of file ps.h.

UCHAR _EPROCESS::ImageFileName[16]
 

Definition at line 273 of file ps.h.

Referenced by ExpGetProcessInformation(), LpcpGetCreatorName(), MiCheckProcessTrimCriteria(), MmWorkingSetManager(), and PspInitPhase0().

HANDLE _EPROCESS::InheritedFromUniqueProcessId
 

Definition at line 253 of file ps.h.

Referenced by CheckAllowForeground(), and xxxCreateThreadInfo().

struct _EJOB* _EPROCESS::Job
 

Definition at line 285 of file ps.h.

Referenced by MiInsertVad(), NtAllocateVirtualMemory(), NtQueryInformationJobObject(), NtSetInformationThread(), PsChangeJobMemoryUsage(), PsChangeQuantumTable(), PspAddProcessToJob(), PspCreateProcess(), PspCreateThread(), PspExitThread(), PspProcessDelete(), and PsReportProcessMemoryLimitViolation().

LIST_ENTRY _EPROCESS::JobLinks
 

Definition at line 287 of file ps.h.

Referenced by PspAddProcessToJob(), and PspRemoveProcessFromJob().

ULONG _EPROCESS::JobStatus
 

Definition at line 286 of file ps.h.

Referenced by MiInsertVad(), MiRemoveVad(), MmCleanProcessAddressSpace(), NtAllocateVirtualMemory(), NtFreeVirtualMemory(), NtQueryInformationJobObject(), NtSetInformationJobObject(), PsChangeJobMemoryUsage(), PsEnforceExecutionTimeLimits(), PspAddProcessToJob(), PspApplyJobLimitsToProcessSet(), PspCreateThread(), PspExitProcessFromJob(), PspFoldProcessAccountingIntoJob(), PspRemoveProcessFromJob(), PspTerminateAllProcessesInJob(), and PsReportProcessMemoryLimitViolation().

ULONG _EPROCESS::LastFaultCount
 

Definition at line 225 of file ps.h.

NTSTATUS _EPROCESS::LastThreadExitStatus
 

Definition at line 250 of file ps.h.

Referenced by PspExitThread().

PVOID _EPROCESS::LdtInformation
 

Definition at line 256 of file ps.h.

Referenced by NtSetLdtEntries(), and PspQueryDescriptorThread().

ULONG _EPROCESS::LockCount
 

Definition at line 169 of file ps.h.

PVOID _EPROCESS::LockedPagesList
 

Definition at line 288 of file ps.h.

Referenced by MiAddMdlTracker(), and MmCleanProcessAddressSpace().

KEVENT _EPROCESS::LockEvent
 

Definition at line 168 of file ps.h.

PKTHREAD _EPROCESS::LockOwner
 

Definition at line 172 of file ps.h.

UCHAR _EPROCESS::MmAgressiveWsTrimMask
 

Definition at line 222 of file ps.h.

ULONG _EPROCESS::ModifiedPageCount
 

Definition at line 226 of file ps.h.

Referenced by MmAccessFault().

USHORT _EPROCESS::NextPageColor
 

Definition at line 232 of file ps.h.

Referenced by MiGetPageForHeader(), MmAccessFault(), and MmCreateProcessAddressSpace().

PFN_NUMBER _EPROCESS::NumberOfLockedPages
 

Definition at line 231 of file ps.h.

Referenced by MmCleanProcessAddressSpace(), and MmProbeAndLockPages().

PFN_NUMBER _EPROCESS::NumberOfPrivatePages
 

Definition at line 230 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), MiCopyOnWrite(), MiGrowWsleHash(), MiRemoveWorkingSetPages(), MmAccessFault(), and MmCleanProcessAddressSpace().

PHANDLE_TABLE _EPROCESS::ObjectTable
 

Definition at line 201 of file ps.h.

Referenced by ObInitProcess(), ObInitProcess2(), ObKillProcess(), and PspCreateThread().

LARGE_INTEGER _EPROCESS::OtherOperationCount
 

Definition at line 299 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

LARGE_INTEGER _EPROCESS::OtherTransferCount
 

Definition at line 302 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

ULONG _EPROCESS::PaePageDirectoryPage
 

Definition at line 272 of file ps.h.

Referenced by MmInSwapProcess().

PVOID _EPROCESS::PaeTop
 

Definition at line 224 of file ps.h.

Referenced by MmInSwapProcess(), and MmOutSwapProcess().

HARDWARE_PTE _EPROCESS::PageDirectoryPte
 

Definition at line 269 of file ps.h.

Referenced by MmInSwapProcess(), and MmOutSwapProcess().

SIZE_T _EPROCESS::PagefileUsage
 

Definition at line 185 of file ps.h.

KPROCESS _EPROCESS::Pcb
 

Definition at line 166 of file ps.h.

Referenced by DbgkCreateThread(), ExpGetProcessInformation(), IopStartNetworkForRemoteBoot(), MiCheckForCrashDump(), MiEmptyAllWorkingSetsWorker(), MiLoadImageSection(), MiLoadSystemImage(), MiSessionAddProcess(), MmAccessFault(), MmOutSwapProcess(), MmWorkingSetManager(), NtAllocateUserPhysicalPages(), NtAllocateVirtualMemory(), NtClose(), NtCreateProfile(), NtFreeUserPhysicalPages(), NtFreeVirtualMemory(), NtQueryInformationJobObject(), NtQuerySystemInformation(), NtQueryVirtualMemory(), NtSetInformationJobObject(), NtSetInformationObject(), NtSetInformationThread(), NtSetLdtEntries(), NtWaitForMultipleObjects(), ObpCreateHandle(), ObpCreateUnnamedHandle(), PsAssignImpersonationToken(), PsChangeQuantumTable(), PsEnforceExecutionTimeLimits(), PsLookupProcessByProcessId(), PspAddProcessToJob(), PspApplyJobLimitsToProcess(), PspCreateThread(), PspExitThread(), PspFoldProcessAccountingIntoJob(), PspInitPhase0(), PspUserThreadStartup(), SepRmCallLsa(), VdmpDelayInterrupt(), VdmpInitialize(), VdmpQueueInterrupt(), xxxCreateDisconnectDesktop(), xxxCreateWindowStation(), and xxxMinMaximize().

SIZE_T _EPROCESS::PeakPagefileUsage
 

Definition at line 187 of file ps.h.

SIZE_T _EPROCESS::PeakVirtualSize
 

Definition at line 193 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), and NtAllocateVirtualMemory().

PPEB _EPROCESS::Peb
 

Definition at line 246 of file ps.h.

Referenced by PspCreateProcess(), PspExitThread(), and xxxCreateThreadInfo().

LIST_ENTRY _EPROCESS::PhysicalVadList
 

Definition at line 267 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), MiRemoveUserPhysicalPagesVad(), MmCleanProcessAddressSpace(), MmInitSystem(), MmProbeAndLockPages(), NtMapUserPhysicalPages(), and NtMapUserPhysicalPagesScatter().

UCHAR _EPROCESS::PriorityClass
 

Definition at line 276 of file ps.h.

Referenced by NtSetInformationThread(), PsChangeQuantumTable(), PspApplyJobLimitsToProcess(), PspCreateProcess(), and SetForegroundPriorityProcess().

BOOLEAN _EPROCESS::ProcessOutswapEnabled
 

Definition at line 213 of file ps.h.

Referenced by MiCheckProcessTrimCriteria(), MiDetermineWsTrimAmount(), MmInSwapProcess(), MmOutSwapProcess(), and MmWorkingSetManager().

BOOLEAN _EPROCESS::ProcessOutswapped
 

Definition at line 214 of file ps.h.

Referenced by MmInSwapProcess(), MmOutSwapProcess(), and MmWorkingSetManager().

PEPROCESS_QUOTA_BLOCK _EPROCESS::QuotaBlock
 

Definition at line 249 of file ps.h.

SIZE_T _EPROCESS::QuotaPeakPoolUsage[2]
 

Definition at line 182 of file ps.h.

SIZE_T _EPROCESS::QuotaPoolUsage[2]
 

Definition at line 183 of file ps.h.

LARGE_INTEGER _EPROCESS::ReadOperationCount
 

Definition at line 297 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

LARGE_INTEGER _EPROCESS::ReadTransferCount
 

Definition at line 300 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

PVOID _EPROCESS::SectionBaseAddress
 

Definition at line 247 of file ps.h.

Referenced by DbgkCreateThread(), PspCreateProcess(), and xxxCreateThreadInfo().

HANDLE _EPROCESS::SectionHandle
 

Definition at line 240 of file ps.h.

Referenced by DbgkCreateThread(), and PspCreateProcess().

PVOID _EPROCESS::SecurityPort
 

Definition at line 294 of file ps.h.

ULONG _EPROCESS::SessionId
 

Definition at line 265 of file ps.h.

Referenced by ExpGetProcessInformation(), IoGetRequestorSessionId(), NtUserGetGuiResources(), and PspCreateProcess().

LIST_ENTRY _EPROCESS::SessionProcessLinks
 

Definition at line 197 of file ps.h.

Referenced by MiSessionAddProcess(), and MiSessionRemoveProcess().

BOOLEAN _EPROCESS::SetTimerResolution
 

Definition at line 275 of file ps.h.

UCHAR _EPROCESS::SubSystemMajorVersion
 

Definition at line 280 of file ps.h.

UCHAR _EPROCESS::SubSystemMinorVersion
 

Definition at line 279 of file ps.h.

USHORT _EPROCESS::SubSystemVersion
 

Definition at line 282 of file ps.h.

Referenced by ObInitProcess2().

LIST_ENTRY _EPROCESS::ThreadListHead
 

Definition at line 307 of file ps.h.

Referenced by GetEProcessData(), NtQueryInformationThread(), NtSetInformationThread(), PspApplyJobLimitsToProcess(), PspCreateThread(), PspExitThread(), and PspTerminateProcess().

PACCESS_TOKEN _EPROCESS::Token
 

Definition at line 207 of file ps.h.

Referenced by PspProcessDelete(), and SeAuditProcessExit().

HANDLE _EPROCESS::UniqueProcessId
 

Definition at line 174 of file ps.h.

Referenced by DbgkCreateThread(), IoGetRequestorProcessId(), MiAddValidPageToWorkingSet(), NtQueryInformationJobObject(), NtSetInformationJobObject(), ObGetObjectInformation(), PsChangeJobMemoryUsage(), PsEnforceExecutionTimeLimits(), PspAddProcessToJob(), PspCreateProcess(), PspCreateThread(), PspExitThread(), PsReportProcessMemoryLimitViolation(), xxxActivateDebugger(), xxxCreateDesktop2(), and xxxCreateThreadInfo().

PVOID _EPROCESS::VadFreeHint
 

Definition at line 257 of file ps.h.

Referenced by MiFindEmptyAddressRange(), MiInsertVad(), MiRemoveVad(), and MmSecureVirtualMemory().

PVOID _EPROCESS::VadHint
 

Definition at line 228 of file ps.h.

Referenced by MiInsertVad(), MiLocateAddress(), MiRemoveVad(), and MmSecureVirtualMemory().

ULONG_PTR _EPROCESS::VadPhysicalPages
 

Definition at line 310 of file ps.h.

Referenced by MiRemoveUserPhysicalPagesVad(), NtAllocateUserPhysicalPages(), and NtFreeUserPhysicalPages().

PRTL_BITMAP _EPROCESS::VadPhysicalPagesBitMap
 

Definition at line 309 of file ps.h.

Referenced by MiRemoveUserPhysicalPagesVad(), NtAllocateUserPhysicalPages(), NtFreeUserPhysicalPages(), NtMapUserPhysicalPages(), and NtMapUserPhysicalPagesScatter().

PVOID _EPROCESS::VadRoot
 

Definition at line 227 of file ps.h.

Referenced by MiFindEmptyAddressRange(), MiInsertVad(), MiLocateAddress(), MiRemoveVad(), MmCleanProcessAddressSpace(), MmSecureVirtualMemory(), and NtQueryVirtualMemory().

PVOID _EPROCESS::VdmObjects
 

Definition at line 258 of file ps.h.

Referenced by VdmpDelayIntDpcRoutine(), VdmpDelayInterrupt(), VdmpInitialize(), and VdmpQueueInterrupt().

SIZE_T _EPROCESS::VirtualSize
 

Definition at line 194 of file ps.h.

Referenced by MiCloneProcessAddressSpace(), NtAllocateVirtualMemory(), and NtFreeVirtualMemory().

MMSUPPORT _EPROCESS::Vm
 

Definition at line 196 of file ps.h.

Referenced by MiAddValidPageToWorkingSet(), MiCheckProcessTrimCriteria(), MiCloneProcessAddressSpace(), MiDereferenceSession(), MiEliminateWorkingSetEntry(), MiEmptyAllWorkingSetsWorker(), MiFlushTbAndCapture(), MiInitMachineDependent(), MiSessionAddProcess(), MiSessionRemoveProcess(), MmAccessFault(), MmAdjustWorkingSetSize(), MmAllowWorkingSetExpansion(), MmCleanProcessAddressSpace(), MmCreateProcessAddressSpace(), MmInSwapProcess(), MmOutSwapProcess(), MmSessionCreate(), MmSessionDelete(), MmWorkingSetManager(), NtQueryInformationJobObject(), NtSetInformationJobObject(), PsChangeQuantumTable(), PspAddProcessToJob(), PspApplyJobLimitsToProcess(), and PspFoldProcessAccountingIntoJob().

USHORT _EPROCESS::VmOperation
 

Definition at line 220 of file ps.h.

Referenced by MmCleanProcessAddressSpace(), and MmCopyVirtualMemory().

PKEVENT _EPROCESS::VmOperationEvent
 

Definition at line 223 of file ps.h.

Referenced by MmCleanProcessAddressSpace(), and MmCopyVirtualMemory().

ULONG _EPROCESS::VmTrimFaultValue
 

Definition at line 274 of file ps.h.

PVOID _EPROCESS::Win32Process
 

Definition at line 284 of file ps.h.

Referenced by InitMapSharedSection(), InitSystemThread(), NtUserGetGuiResources(), NtUserInitialize(), PspExitThread(), RawInputThread(), UserCommitSharedMemory(), xxxCreateThreadInfo(), xxxSetProcessInitState(), xxxUserNotifyProcessCreate(), and xxxWaitForInputIdle().

HANDLE _EPROCESS::Win32WindowStation
 

Definition at line 252 of file ps.h.

Referenced by UserSetConsoleProcessWindowStation(), and xxxSetProcessWindowStation().

FAST_MUTEX _EPROCESS::WorkingSetLock
 

Definition at line 211 of file ps.h.

Referenced by MiEmptyWorkingSet(), and MmWorkingSetManager().

PFN_NUMBER _EPROCESS::WorkingSetPage
 

Definition at line 212 of file ps.h.

Referenced by MiInitMachineDependent(), MmInSwapProcess(), and MmOutSwapProcess().

PPAGEFAULT_HISTORY _EPROCESS::WorkingSetWatch
 

Definition at line 251 of file ps.h.

Referenced by PsWatchWorkingSet().

PWOW64_PROCESS _EPROCESS::Wow64Process
 

Definition at line 295 of file ps.h.

Referenced by MmCleanProcessAddressSpace(), NtAllocateVirtualMemory(), NtFreeVirtualMemory(), NtQueryVirtualMemory(), NtSetInformationThread(), and PspExitThread().

LARGE_INTEGER _EPROCESS::WriteOperationCount
 

Definition at line 298 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

LARGE_INTEGER _EPROCESS::WriteTransferCount
 

Definition at line 301 of file ps.h.

Referenced by NtQueryInformationJobObject(), and PspFoldProcessAccountingIntoJob().

The documentation for this struct was generated from the following file:
Generated on Sat May 15 19:46:16 2004 for test by doxygen 1.3.7