typedef struct _KPROCESS { DISPATCHER_HEADER Header; LIST_ENTRY ProfileListHead; ULONG DirectoryTableBase; ULONG Unused0; KGDTENTRY LdtDescriptor; KIDTENTRY Int21Descriptor; WORD IopmOffset; UCHAR Iopl; UCHAR Unused; ULONG ActiveProcessors; ULONG KernelTime; ULONG UserTime; LIST_ENTRY ReadyListHead; SINGLE_LIST_ENTRY SwapListEntry; PVOID VdmTrapcHandler; LIST_ENTRY ThreadListHead; ULONG ProcessLock; ULONG Affinity; union { ULONG AutoAlignment: 1; ULONG DisableBoost: 1; ULONG DisableQuantum: 1; ULONG ReservedFlags: 29; LONG ProcessFlags; }; CHAR BasePriority; CHAR QuantumReset; UCHAR State; UCHAR ThreadSeed; UCHAR PowerState; UCHAR IdealNode; UCHAR Visited; union { KEXECUTE_OPTIONS Flags; UCHAR ExecuteOptions; }; ULONG StackCount; LIST_ENTRY ProcessListEntry; UINT64 CycleTime; } KPROCESS, *PKPROCESS;
출처 : http://www.nirsoft.net/kernel_struct/vista/KPROCESS.html
'O / S > Window' 카테고리의 다른 글
Memory.dmp (0) | 2015.10.09 |
---|---|
Jump List App ID (0) | 2015.09.27 |
OpenSCManager FAILED 5 Error (0) | 2015.09.18 |
EPROCESS struct (0) | 2015.09.14 |
Windows System Error Codes (0) | 2015.07.06 |