ppc / ntoskrnl /
_KPROCESS
← first 1 build latest →struct _KPROCESS { struct _DISPATCHER_HEADER Header;/* 0x0 16 */ struct _LIST_ENTRY ProfileListHead;/* 0x10 8 */ unsigned long DirectoryTableBase[2];/* 0x18 8 */ unsigned long ProcessPid;/* 0x20 4 */ unsigned long ProcessSequence;/* 0x24 4 */ unsigned long ActiveProcessors;/* 0x28 4 */ unsigned long KernelTime;/* 0x2c 4 */ unsigned long UserTime;/* 0x30 4 */ struct _LIST_ENTRY ReadyListHead;/* 0x34 8 */ struct _LIST_ENTRY SwapListEntry;/* 0x3c 8 */ /* ── cacheline 1 boundary (64 bytes) ── */ struct _LIST_ENTRY ThreadListHead;/* 0x44 8 */ unsigned long ProcessLock;/* 0x4c 4 */ unsigned long Affinity;/* 0x50 4 */ unsigned short StackCount;/* 0x54 2 */ char BasePriority;/* 0x56 1 */ char ThreadQuantum;/* 0x57 1 */ unsigned char AutoAlignment;/* 0x58 1 */ unsigned char State;/* 0x59 1 */ unsigned char ThreadSeed;/* 0x5a 1 */ unsigned char DisableBoost;/* 0x5b 1 */};/* source: NT 4.0 DDK (August 1996) PPC LIBCNTPR.LIB CodeView type records; _EPROCESS/_ETHREAD offsets match KDEXTPPC.DLL (NT 4.0 Server CD) */size 92 (0x5c)20 members0 holespadding 02 cachelines
Used in (2)