x64x86arm64ia64alphamipsppc / ntoskrnl

_KPROCESS

← 3.10.404.1 4 builds latest →
struct _KPROCESS {
unsigned long DirectoryTableBase[2];/* 0x18 8 */
unsigned long ActiveProcessors;/* 0x20 4 */
unsigned long KernelTime;/* 0x24 4 */
unsigned long UserTime;/* 0x28 4 */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned long ProcessLock;/* 0x44 4 */
unsigned long Affinity;/* 0x48 4 */
unsigned short StackCount;/* 0x4c 2 */
char BasePriority;/* 0x4e 1 */
char ThreadQuantum;/* 0x4f 1 */
unsigned char AutoAlignment;/* 0x50 1 */
unsigned char State;/* 0x51 1 */
unsigned char ThreadSeed;/* 0x52 1 */
unsigned char DisableBoost;/* 0x53 1 */
};
/* source: NT 4.0 DDK (August 1996) MIPS LIBCNTPR.LIB CodeView type records; _EPROCESS/_ETHREAD offsets match KDEXTMIP.DLL (NT 4.0 Server CD) */
size 84 (0x54)18 members0 holespadding 02 cachelines
Used in (2)