CEL_EXTRA_PROCESS_INFO (Compact 2013)

  • Article

3/28/2014

This structure stores additional information about a process.

Syntax

typedef struct __CEL_EXTRA_PROCESS_INFO {
  HANDLE hProcess;
  DWORD dwCodeBase
  DWORD dwVMLen;
  DWORD dwOID;
  WCHAR szFullPath[0];
} CEL_EXTRA_PROCESS_INFO, *PCEL_EXTRA_PROCESS_INFO;

Members

  • hProcess
    Handle to the process.
  • dwCodeBase
    Starting address for the executable code.
  • dwVMLen
    Length of the executable code, which starts at the dwCodeBase address.
  • dwOID
    If the file is in the RAM/ROM file system, this value will be the OID of the file. Otherwise, this value is zero.

  • szFullPath
    If the file is not in the RAM/ROM file system, this value is the full path to the executable. The length of the path is derived from the event length.

    If the file is in the RAM/ROM file system, this value is an empty, NULL-terminated string.

Remarks

If the OID is nonzero, the full path will not be provided. For Windows Embedded Compact, use the OID and the CREATE_SYSTEMGUID macro to call CeOidGetInfoEx2 (CEDB) to obtain the full path and other information about the file.

Requirements

Header

celog.h

See Also

Reference

CeLog Event Tracking Structures
CEL_PROCESS_CREATE

Other Resources

CeOidGetInfoEx2 (CEDB)
CREATE_SYSTEMGUID