PF_OPERATION_PROCESS - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTPFAPI_H

/**
 * The PF_OPERATION_PROCESS structure starts or ends an operation scenario for the calling process.
 * \remarks The payload must be exactly 12 bytes with 4-byte alignment. Version must be 1 and Reserved
 * must be zero. Invalid fields or an incorrect payload length return STATUS_INVALID_PARAMETER.
 * Success can be a no-op when the operation scenario is disabled.
 */
typedef struct _PF_OPERATION_PROCESS
{
    UCHAR Version;                              // Request version: PF_SN_OPERATION_PROCESS_VERSION (1).
    UCHAR Action;                               // PF_OPERATION_PROCESS_ACTION
    USHORT Reserved;
    ULONG OpFlags;                              // Begin: 0..4 (bit 2 cannot be combined with bits 0..1); end: 0..1.
    ULONG Value;                                // Operation-specific value incorporated into the scenario identifier.
} PF_OPERATION_PROCESS, *PPF_OPERATION_PROCESS;

#endif

View code on GitHub

NtDoc

No description available.