x64x86arm64ia64alphamipsppc / ntoskrnl

_KPROCESS

← 4.0.1381.1 2 builds latest →
struct _KPROCESS {
unsigned long DirectoryTableBase[2];/* 0x18 8 */
union {
struct {
unsigned long ActiveProcessors;/* 0x20 4 */
unsigned long RunOnProcessors;/* 0x24 4 */
};/* 0x20 8 */
unsigned __int64 Alignment;/* 0x20 8 */
};/* 0x20 8 */
unsigned __int64 ProcessSequence;/* 0x28 8 */
unsigned long ProcessAsn;/* 0x30 4 */
unsigned long KernelTime;/* 0x34 4 */
unsigned long UserTime;/* 0x38 4 */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned long ProcessLock;/* 0x54 4 */
unsigned long Affinity;/* 0x58 4 */
unsigned short StackCount;/* 0x5c 2 */
char BasePriority;/* 0x5e 1 */
char ThreadQuantum;/* 0x5f 1 */
unsigned char AutoAlignment;/* 0x60 1 */
unsigned char State;/* 0x61 1 */
unsigned char ThreadSeed;/* 0x62 1 */
unsigned char DisableBoost;/* 0x63 1 */
unsigned char PowerState;/* 0x64 1 */
unsigned char DisableQuantum;/* 0x65 1 */
unsigned char Spare[2];/* 0x66 2 */
};
/* source: Windows 2000 RC2 DDK Alpha libcntpr.lib CodeView type records; build 2128 per the DDK's ntverp.h */
size 104 (0x68)25 members0 holespadding 02 cachelines
Used in (2)