xa_windows_peb Struct Reference

Windows PEB information. More...

Data Fields
uint32_t	ImageBaseAddress
uint32_t	ProcessHeap

---

Detailed Description

Windows PEB information.

This struct holds process information found in the PEB, which is part of the EPROCESS structure. You can fill the values in the struct using the xa_windows_get_peb function. Note that this struct does not contain all information from the PEB.

---

Field Documentation

uint32_t xa_windows_peb::ImageBaseAddress

initial address of executable code

uint32_t xa_windows_peb::ProcessHeap

initial address of the heap

---

The documentation for this struct was generated from the following file:

• xenaccess.h

---