mips / ntdllntoskrnl

_RTL_PROCESS_MODULE_INFORMATION

incomplete only the Native API and process/thread environment structures two MIPS binaries were compiled with (_TEB, _PEB, _KPCR, RTL, object/file/registry information classes, image headers): no kernel objects


struct _RTL_PROCESS_MODULE_INFORMATION {
    void* Section;/* 0x0  4 */
    void* MappedBase;/* 0x4  4 */
    void* ImageBase;/* 0x8  4 */
    unsigned long ImageSize;/* 0xc  4 */
    unsigned long Flags;/* 0x10  4 */
    unsigned short LoadOrderIndex;/* 0x14  2 */
    unsigned short InitOrderIndex;/* 0x16  2 */
    unsigned short LoadCount;/* 0x18  2 */
    unsigned short OffsetToFileName;/* 0x1a  2 */
    unsigned char FullPathName[256];/* 0x1c  256 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h */

size 284 (0x11c)10 members0 holespadding 05 cachelines

Used in (1)

_RTL_PROCESS_MODULES