[DisplayName ("Processes"): Amended, Description ("Win32_Process class represents a sequence of events in the Win32. Any sequence of interactions of one or more processors, run some code, and data entry is a child or a member of this class. \ NExample: client application that runs in the Win32. "): Amended ToSubclass, AMENDMENT, LOCALE (0x0419)]
class Win32_Process: CIM_Process
{
[DisplayName ("The path to the executable file"): Amended, Description ("ExecutablePath property specifies the path to the executable process. \ NExample: C: \ \ WINDOWS \ \ EXPLORER.EXE"): Amended ToSubclass] string ExecutablePath;
[DisplayName ("The maximum working set size"): Amended, Description ("MaximumWorkingSetSize property specifies the maximum working set size of the process. Working set of the process - a set of pages available in the process of physical RAM. These pages are resident and available to the application time. \ NExample : 1413120. "): Amended ToSubclass] uint32 MaximumWorkingSetSize;
[DisplayName ("Minimum working set size"): Amended, Description ("MinimumWorkingSetSize property specifies the minimum working set size of the process. Working set of the process - a set of pages available in the process of physical RAM. These pages are resident and available to the application time. \ NExample : 20 480. "): Amended ToSubclass] uint32 MinimumWorkingSetSize;
[DisplayName ("The number of page faults"): Amended, Description ("property specifies the number of errors PageFaults page was generated process. \ NExample 10"): Amended ToSubclass] uint32 PageFaults;
[DisplayName ("Using swap file"): Amended, Description ("Property PageFileUsage indicates the size of the paging file used by the process at this time. \ NExample: 102 435"): Amended ToSubclass] uint32 PageFileUsage;
[DisplayName ("Using a swap file (peak)"): Amended, Description ("PeakPageFileUsage property specifies the maximum size of the paging file used during the process of life. \ NExample: 102 367"): Amended ToSubclass] uint32 PeakPageFileUsage;
[DisplayName ("working set size (peak)"): Amended, Description ("Property PeakWorkingSetSize indicates the peak working set size of the process. \ NExample: 1413120"): Amended ToSubclass] uint32 PeakWorkingSetSize;
[DisplayName ("process id"): Amended, Description ("ProcessId property contains the process ID. This property is important since the inception of the process, before the end of his work."): Amended ToSubclass] uint32 ProcessId;
[DisplayName ("The quota for non-paged pool"): Amended, Description ("QuotaNonPagedPoolUsage property specifies the size used by the process of non-paged pool. \ NExample 15"): Amended ToSubclass] uint32 QuotaNonPagedPoolUsage;
[DisplayName ("Quota Paged Pool"): Amended, Description ("QuotaPagedPoolUsage property specifies the size of the process used by the paged pool. \ NExample 22"): Amended ToSubclass] uint32 QuotaPagedPoolUsage;
[DisplayName ("Queen of the quota for non-paged pool"): Amended, Description ("Property QuotaPeakNonPagedPoolUsage indicates the peak value of the size used by the process of non-paged pool. \ NExample 31"): Amended ToSubclass] uint32 QuotaPeakNonPagedPoolUsage;
[DisplayName ("Peak paged pool quota"): Amended, Description ("Property QuotaPeakPagedPoolUsage indicates the peak value of the size used by the process of paged pool. \ N Example: 31"): Amended ToSubclass] uint32 QuotaPeakPagedPoolUsage;
[DisplayName ("Version of Windows"): Amended, Description ("WindowsVersion property indicates the version of Windows, in which the process works. \ NExample: 4.0"): Amended ToSubclass] string WindowsVersion;
[DisplayName ("Priority"): Amended, Description ("The Priority property specifies the priority of the process. The higher the value, the higher the priority to the process. Valid values ​​range from 0 (lowest priority) to 31 (highest). \ nExample 7. "): Amended ToSubclass] uint32 Priority;
[DisplayName ("counter flow"): Amended, Description ("Property ThreadCount indicates the number of active threads in the process. Instruction is \" unit of execution \ "process. Stream is an object that performs the instructions. Every running process has at least a stream. This property is used only for Windows NT. "): Amended ToSubclass] uint32 ThreadCount;
[DisplayName ("Handle Count"): Amended, Description ("Property HandleCount indicates the total number of handles currently open process. This number represents the sum of the number of handles open by each thread in the process. Descriptor is used to work with system resources. Each corresponds to the descriptor table entry descriptors. This record contains the addresses of resources and tools to determine the type of resource. "): Amended ToSubclass] uint32 HandleCount;
[DisplayName ("ID of the parent process"): Amended, Description ("Property ParentProcessId specifies the unique identifier of the process that created this process. Process IDs can be reused, so they are relevant only for the lifetime of the process. Process specified ParentProcessId, can be interrupted, so ParentProcessId can not point to a running process. Also, it is possible that incorrectly indicates ParentProcessId process re-uses the ID of the parent process. Based on the value of the property CreationDate can determine whether the parent is created later in the process. "): Amended ToSubclass ] uint32 ParentProcessId;
[DisplayName ("session ID"): Amended, Description ("Property SessionId specifies a unique identifier that is generated by the operating system when creating a session. A session is defined as the time between input and output of the system."): Amended ToSubclass] uint32 SessionId;
[DisplayName ("The private page count"): Amended, Description ("Property PrivatePageCount indicates the current number of pages that are only available to this process"): Amended ToSubclass] uint64 PrivatePageCount;
[DisplayName ("Peak virtual address space usage"): Amended, Description ("Property PeakVirtualSize specifies the maximum size of virtual address space used by the process at a time. Use of virtual address space does not necessarily imply corresponding use of the pages in memory or on disk. However, the virtual space course and its excessive use of the process can limit its ability to load libraries. "): Amended ToSubclass] uint64 PeakVirtualSize;
[DisplayName ("Use of virtual address space"): Amended, Description ("Property VirtualSize indicates the current size of the virtual address space used by the process, in bytes. Use of virtual address space does not necessarily imply corresponding use of the pages in memory or on disk. However, the virtual space course and its excessive use of the process can limit its ability to load libraries. "): Amended ToSubclass] uint64 VirtualSize;
[DisplayName ("The number of read operations"): Amended, Description ("Property ReadOperationCount indicates the number of read operations."): Amended ToSubclass] uint64 ReadOperationCount;
[DisplayName ("The number of write operations"): Amended, Description ("Property WriteOperationCount indicates the number of write operations performed."): Amended ToSubclass] uint64 WriteOperationCount;
[DisplayName ("The number of other operations"): Amended, Description ("Property OtherOperationCount indicates the number of executed IO operations other than read and write operations."): Amended ToSubclass] uint64 OtherOperationCount;
[DisplayName ("meter reading data"): Amended, Description ("ReadTransferCount property specifies the size of read data."): Amended ToSubclass] uint64 ReadTransferCount;
[DisplayName ("Counter Write Data Transfer"): Amended, Description ("WriteTransferCount property specifies the size of the recorded data."): Amended ToSubclass] uint64 WriteTransferCount;
[DisplayName ("Count data with other operations"): Amended, Description ("OtherTransferCount property specifies the size of data transferred during operations other than IO."): Amended ToSubclass] uint64 OtherTransferCount;
[DisplayName ("Command line for starting the process"): Amended, Description ("CommandLine property specifies the command line used to start the process, if it is used."): Amended ToSubclass] string CommandLine;
[Description ("Time in kernel mode, in 100 nanoseconds. If this information is missing, the value 0."): Amended ToSubclass] uint64 KernelModeTime;
[Description ("Time in user mode, 100 nanoseconds. If this information is missing, the value 0."): Amended ToSubclass] uint64 UserModeTime;
[Description ("The Create method creates a new process. \ NMetod returns an integer: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges; \ n8 - Unknown error; \ n9 - the user does not have sufficient privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the error code Win32. "): Amended ToSubclass, Values ​​{" Successful completion "," Access Denied "," Insufficient privileges " "Unknown error", "Path not found", "Invalid parameter", "Other"}: Amended ToSubclass] uint32 Create ([In: ToSubclass, Description ("CommandLine parameter specifies the command line to execute. system adds a NULL character to the command line, truncating it if necessary to specify the file that was used. "): Amended ToSubclass] string CommandLine, [In: ToSubclass, Description (" The parameter indicates the current volume CurrentDirectory and location for the child process. It is essential that the current folder existed. The user can specify an absolute or relative path (including the current working directory.) If the value is NULL, the new process will use the same path as the calling process. This option is primarily designed for shells that run the application, and indicates the working that and the folder for the application. "): Amended ToSubclass] string CurrentDirectory, [In: ToSubclass, Description (" The parameter is ProcessStartupInformation initial configuration process Win32. It includes information used in window displays, and error handling, as well as the characteristics of the application command line. \ n \ nUchtite that in Windows XP and later, the property WinstationDesktop (which was previously the default was set to \ "winsta0 \ \ default \") in all cases be ignored. Instead of the old value is an empty string (\ "\") . "): Amended ToSubclass] Win32_ProcessStartup ProcessStartupInformation, [Out: ToSubclass, Description (" ProcessId parameter contains the ID of the process. This property is important since the inception of the process, before the end of his work. "): Amended ToSubclass] uint32 ProcessId);
[Description ("Terminate method terminates the process and all its child processes. \ NMetod returns one of the following integer values: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges; \ n8 - Unknown error; \ n9 - user does not have the necessary privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the error code Win32. "): Amended ToSubclass, Values ​​{" Successful completion "," Access Denied "," Insufficient privileges "," Unknown error "," Path not found "," Invalid parameter "," Other "}: Amended ToSubclass] uint32 Terminate ([In: ToSubclass, Description (" Reason parameter indicates the exit code for process and all its streams, which were suspended as a result of this call. "): Amended ToSubclass] uint32 Reason);
[Description ("The method returns GetOwner credentials of the owner (user name and domain name), under which the process works. \ NMetod returns one of the following integer values: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges; \ n8 - Unknown error; \ n9 - user does not have the necessary privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the error code Win32. "): Amended ToSubclass, Values {"Successful completion", "Access Denied", "Insufficient privileges", "Unknown error", "Path not found", "Invalid parameter", "Other"}: Amended ToSubclass] uint32 GetOwner ([Out: ToSubclass, Description ("The User parameter returns the name of the user who owns the process."): Amended ToSubclass] string User, [Out: ToSubclass, Description ("The parameter Domain returns the domain name in which the process works."): Amended ToSubclass] string Domain );
[Description ("The method gets GetOwnerSid SID (SID) of the owner of this process. \ NMetod returns one of the following integer values: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges ; \ n8 - Unknown error; \ n9 - user does not have the necessary privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the error code Win32. "): Amended ToSubclass, Values ​​{" Successful completion "," Rejected Access "," Insufficient privileges "," Unknown error "," Path not found "," Invalid parameter "," Other "}: Amended ToSubclass] uint32 GetOwnerSid ([Out: ToSubclass, Description (" Sid property returns a handle identifier Security for this process. "): Amended ToSubclass] string Sid);
[Description ("The method SetPriority trying to change the priority of the process. To set the priority of equal Realtime (real time), the caller must have the privilege of SeIncreaseBasePriorityPrivilege. Without it the highest possible priority to - High (high). \ NMetod returns one of the following integer values: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges; \ n8 - Unknown error; \ n9 - user does not have the necessary privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the error code Win32. "): Amended ToSubclass, Values ​​{" Successful completion "," Access Denied "," Insufficient privileges "," Unknown error "," Path not found "," The parameter is incorrect " "Other"}: Amended ToSubclass] uint32 SetPriority ([in, Description ("The Priority parameter specifies the new priority class for the process. Values: \ nProstoy - Indicates to process streams of commands that work only when the system is idle. Running threads command processor is interrupted instruction flow process, which has a higher priority. An example is a program saver. idle priority class inherits all the child processes. \ nNizhe average - points to a process that has a higher priority class IDLE_PRIORITY_CLASS, but below NORMAL_PRIORITY_CLASS. for Windows 2000. \ nSredny - indicated for the process with no special requirements for priority implementation. \ nVyshe average - points to the process, the priority is higher than the class NORMAL_PRIORITY_CLASS, but below HIGH_PRIORITY_CLASS. for Windows 2000. \ nVysoky priority - indicates a process that performs time-critical task that should be execute immediately. Streams commands interrupt thread execution priority or medium priority idle. An example is the Task Manager, which should appear on the screen at the request of the user, regardless of the operating system. Use a class of high priority should be with caution, since this class of applications can take all the available CPU time. \ nRealnoe time - Specify the processes that have the highest possible priority. Streams of this class of command terminates the flow of commands all other processes, including the flow of the operating system, perform important tasks. For example, real-time process that executes for longer than moment, may cause a delay updating the disk cache, or a freeze of the mouse pointer. \ n "): Amended ToSubclass, Values ​​{" Idle "," Below Average "," Normal "," Above Average "," high importance "," Real Time " }: Amended ToSubclass] sint32 Priority);
[Description ("The method AttachDebugger starts the debugger process, registered as the default debugger. However, Dr. Watson is not supported. \ NMetod returns 'total error' if it detects an illegal string to the registry key, or one of the following integer values: \ n0 - success; \ n2 - the user does not have access to requested data; \ n3 - you do not have sufficient privileges; \ n8 - Unknown error; \ n9 - user does not have the necessary privileges; \ n21 - Invalid parameter. \ nFor more return values ​​are described in the documentation for error code Win32. "): Amended ToSubclass, Values ​​{" Successful completion "," Access Denied "," Insufficient privileges "," Unknown error "," Path not found "," Invalid parameter ", "Other"}: Amended ToSubclass] uint32 AttachDebugger ();
};
Here you can go ahead to put x)