x64 / ntdllntoskrnl

_RTL_UMS_CONTEXT

← 10.0.18362.1621 13 builds latest →
struct _RTL_UMS_CONTEXT {
/* 8 bytes padding */
/* ── cacheline 19 boundary (1216 bytes) ── */
void* Teb;/* 0x4e0 8 */
void* UserContext;/* 0x4e8 8 */
union {
struct {
volatile unsigned long ScheduledThread : 1;/* 0x4f0:0 4 */
volatile unsigned long Suspended : 1;/* 0x4f0:1 4 */
volatile unsigned long VolatileContext : 1;/* 0x4f0:2 4 */
volatile unsigned long Terminated : 1;/* 0x4f0:3 4 */
volatile unsigned long DebugActive : 1;/* 0x4f0:4 4 */
volatile unsigned long RunningOnSelfThread : 1;/* 0x4f0:5 4 */
volatile unsigned long DenyRunningOnSelfThread : 1;/* 0x4f0:6 4 */
};/* 0x4f0 4 */
volatile long Flags;/* 0x4f0 4 */
};/* 0x4f0 4 */
/* 4 bytes padding */
union {
struct {
volatile unsigned __int64 KernelUpdateLock : 2;/* 0x4f8:0 8 */
volatile unsigned __int64 PrimaryClientID : 62;/* 0x4f8:2 8 */
};/* 0x4f8 8 */
volatile unsigned __int64 ContextLock;/* 0x4f8 8 */
};/* 0x4f8 8 */
/* ── cacheline 20 boundary (1280 bytes) ── */
unsigned long SwitchCount;/* 0x508 4 */
unsigned long KernelYieldCount;/* 0x50c 4 */
unsigned long MixedYieldCount;/* 0x510 4 */
unsigned long YieldCount;/* 0x514 4 */
};
size 1312 (0x520)20 members2 holes (12 bytes)padding 821 cachelines
Used in (1)