#ifndef _NTRTL_H
typedef struct _RTL_USER_PROCESS_INFORMATION
{
ULONG Length;
HANDLE ProcessHandle;
HANDLE ThreadHandle;
CLIENT_ID ClientId;
SECTION_IMAGE_INFORMATION ImageInformation;
} RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
View code on GitHub
Size of structure, in bytes.
HANDLE to newly created Process object.
HANDLE to Thread object representing main thread in process.
Unique Id of process and thread.
Some information from PE header. Created in result of call NtQuerySection
with SectionImageInformation
class.