Edit

IDebugSystemObjects::GetCurrentProcessDataOffset method (dbgeng.h)

  • Article

The GetCurrentProcessDataOffset method returns the location of the system data structure describing the current process.

Syntax

HRESULT GetCurrentProcessDataOffset(
  [out] PULONG64 Offset
);

Parameters

[out] Offset

Receives the location in the target's virtual address space of the system data structure describing the current process.

Return value

This method may also return error values. See Return Values for more details.

Return code Description
S_OK
 The method was successful.

Remarks

In user-mode debugging, the location returned is of the process environment block (PEB) for the current process. This is the same location returned by GetCurrentProcessPeb.

In kernel-mode debugging, the location returned is of the KPROCESS structure for the system process in which the last event occurred.

Note   In kernel mode, the current process of the target is always the single virtual process the debugger engine created for the kernel. However, because events may occur in different system processes, the KPROCESS location returned by this method may change.
 
For more information about processes, see Threads and Processes. For details about the PEB and KPROCESS structures, see Microsoft Windows Internals by David Solomon and Mark Russinovich.

Requirements

Requirement Value
Target Platform Desktop
Header dbgeng.h (include Dbgeng.h)