#ifndef _NTPSAPI_H
// psapi:PSAPI_WS_WATCH_INFORMATION_EX
typedef struct _PROCESS_WS_WATCH_INFORMATION_EX
{
union
{
PROCESS_WS_WATCH_INFORMATION BasicInfo;
struct
{
PVOID FaultingPc;
PVOID FaultingVa;
};
};
ULONG_PTR FaultingThreadId;
ULONG_PTR Flags;
} PROCESS_WS_WATCH_INFORMATION_EX, *PPROCESS_WS_WATCH_INFORMATION_EX;
View code on GitHub
This structure defines an extended Working Set Watch entry.
NtQueryInformationProcess
with ProcessWorkingSetWatchEx
(42)A nested PROCESS_WS_WATCH_INFORMATION
structure with basic information about the page fault.
The ID of the thread that caused the page fault.
This field is currently unused.