CEL_EXTRA_PROCESS_INFO (Compact 2013)
3/28/2014
This structure stores additional information about a process.
Syntax
typedef struct __CEL_EXTRA_PROCESS_INFO {
HANDLE hProcess;
DWORD dwCodeBase
DWORD dwVMLen;
DWORD dwOID;
WCHAR szFullPath[0];
} CEL_EXTRA_PROCESS_INFO, *PCEL_EXTRA_PROCESS_INFO;
Members
- hProcess
Handle to the process.
- dwCodeBase
Starting address for the executable code.
- dwVMLen
Length of the executable code, which starts at the dwCodeBase address.
- dwOID
If the file is in the RAM/ROM file system, this value will be the OID of the file. Otherwise, this value is zero.
szFullPath
If the file is not in the RAM/ROM file system, this value is the full path to the executable. The length of the path is derived from the event length.If the file is in the RAM/ROM file system, this value is an empty, NULL-terminated string.
Remarks
If the OID is nonzero, the full path will not be provided. For Windows Embedded Compact, use the OID and the CREATE_SYSTEMGUID macro to call CeOidGetInfoEx2 (CEDB) to obtain the full path and other information about the file.
Requirements
Header |
celog.h |
See Also
Reference
CeLog Event Tracking Structures
CEL_PROCESS_CREATE