Referenced by: TSysProcMonThread, GetProcessPEB32


_PEB32 = record
  InheritedAddressSpace: BOOLEAN;
  ReadImageFileExecOptions: BOOLEAN;
  BeingDebugged: BOOLEAN;
  BitField: BOOLEAN;
  Mutant: Cardinal;
  ImageBaseAddress: Cardinal;
  Ldr: Cardinal;
  ProcessParameters: Cardinal;
  SubSystemData: Cardinal;
  ProcessHeap: Cardinal;
  FastPebLock: Cardinal;
  AtlThunkSListPtr: Cardinal;
  IFEOKey: Cardinal;
  CrossProcessFlags: ULONG;
  KernelCallbackTable: Cardinal;
  SystemReserved: ULONG;
  AtlThunkSListPtr32: ULONG;
  ApiSetMap: Cardinal;
  TlsExpansionCounter: ULONG;
  TlsBitmap: Cardinal;
  TlsBitmapBits: array[0..1] of ULONG;
  ReadOnlySharedMemoryBase: Cardinal;
  HotpatchInformation: Cardinal;
  ReadOnlyStaticServerData: Cardinal;
  AnsiCodePageData: Cardinal;
  OemCodePageData: Cardinal;
  UnicodeCaseTableData: Cardinal;
  NumberOfProcessors: ULONG;
  NtGlobalFlag: ULONG;
  CriticalSectionTimeout: LARGE_INTEGER;
  HeapSegmentReserve: Cardinal;
  HeapSegmentCommit: Cardinal;
  HeapDeCommitTotalFreeThreshold: Cardinal;
  HeapDeCommitFreeBlockThreshold: Cardinal;
  NumberOfHeaps: ULONG;
  MaximumNumberOfHeaps: ULONG;
  ProcessHeaps: Cardinal;
  GdiSharedHandleTable: Cardinal;
  ProcessStarterHelper: Cardinal;
  GdiDCAttributeList: ULONG;
  LoaderLock: Cardinal;
  OSMajorVersion: ULONG;
  OSMinorVersion: ULONG;
  OSBuildNumber: USHORT;
  OSCSDVersion: USHORT;
  OSPlatformId: ULONG;
  ImageSubsystem: ULONG;
  ImageSubsystemMajorVersion: ULONG;
  ImageSubsystemMinorVersion: ULONG;
  ImageProcessAffinityMask: Cardinal;
  GdiHandleBuffer: GDI_HANDLE_BUFFER32;
  PostProcessInitRoutine: Cardinal;
  TlsExpansionBitmap: Cardinal;
  TlsExpansionBitmapBits: array[0..31] of ULONG;
  SessionId: ULONG;
  AppCompatFlags: ULARGE_INTEGER;
  AppCompatFlagsUser: ULARGE_INTEGER;
  pShimData: Cardinal;
  AppCompatInfo: Cardinal;
  CSDVersion: UNICODE_STRING32;
  ActivationContextData: Cardinal;
  ProcessAssemblyStorageMap: Cardinal;
  SystemDefaultActivationContextData: Cardinal;
  SystemAssemblyStorageMap: Cardinal;
  MinimumStackCommit: Cardinal;
  SparePointers: array[0..1] of Cardinal;
  PatchLoaderData: cardinal;
  ChpeV2ProcessInfo: cardinal;
  AppModelFeatureState: cardinal;
  SpareULongs: array[0..1] of Cardinal;
  ActiveCodePage: USHORT;
  OemCodePage: USHORT;
  UseCaseMapping: USHORT;
  UnusedNlsField: USHORT;
  WerRegistrationData: Cardinal;
  WerShipAssertPtr: Cardinal;
  pContextData: Cardinal;
  pImageHeaderHash: Cardinal;
  TracingFlags: ULONG;
  CsrServerReadOnlySharedMemoryBase: ULONGLONG;
  TppWorkerpListLock: cardinal;
end;
PEB32 = _PEB32;
TPEB32 = PEB32;
PPEB32 = ^PEB32;


Created with the Personal Edition of HelpNDoc: Effortlessly Convert Your Word Doc to an eBook: A Step-by-Step Guide