ppc / ntoskrnl /

_KPROCESS

← first 1 build latest →
struct _KPROCESS {
unsigned long DirectoryTableBase[2];/* 0x18 8 */
unsigned long ProcessPid;/* 0x20 4 */
unsigned long ProcessSequence;/* 0x24 4 */
unsigned long ActiveProcessors;/* 0x28 4 */
unsigned long KernelTime;/* 0x2c 4 */
unsigned long UserTime;/* 0x30 4 */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned long ProcessLock;/* 0x4c 4 */
unsigned long Affinity;/* 0x50 4 */
unsigned short StackCount;/* 0x54 2 */
char BasePriority;/* 0x56 1 */
char ThreadQuantum;/* 0x57 1 */
unsigned char AutoAlignment;/* 0x58 1 */
unsigned char State;/* 0x59 1 */
unsigned char ThreadSeed;/* 0x5a 1 */
unsigned char DisableBoost;/* 0x5b 1 */
};
/* source: NT 4.0 DDK (August 1996) PPC LIBCNTPR.LIB CodeView type records; _EPROCESS/_ETHREAD offsets match KDEXTPPC.DLL (NT 4.0 Server CD) */
size 92 (0x5c)20 members0 holespadding 02 cachelines
Used in (2)