阅读:5074回复:34
Windows 7 ntoskrnl.exe and ntkrnlpa.exe use all structure header file
struct _WINDOWS7_7000__KPROCESS /* sizeof 00000098 152 */
{ /* off 0x0000 */ struct _WINDOWS7_7000__DISPATCHER_HEADER Header; /* off 0x0010 */ struct _WINDOWS7_7000__LIST_ENTRY ProfileListHead; /* off 0x0018 */ unsigned long DirectoryTableBase; /* off 0x001c */ struct _WINDOWS7_7000__KGDTENTRY LdtDescriptor; /* off 0x0024 */ struct _WINDOWS7_7000__KIDTENTRY Int21Descriptor; /* off 0x002c */ struct _WINDOWS7_7000__KAFFINITY_EX ActiveProcessors; /* off 0x0038 */ unsigned long KernelTime; /* off 0x003c */ unsigned long UserTime; /* off 0x0040 */ struct _WINDOWS7_7000__LIST_ENTRY ReadyListHead; /* off 0x0048 */ struct _WINDOWS7_7000__SINGLE_LIST_ENTRY SwapListEntry; /* off 0x004c */ void* VdmTrapcHandler; /* off 0x0050 */ struct _WINDOWS7_7000__LIST_ENTRY ThreadListHead; /* off 0x0058 */ unsigned long ProcessLock; /* off 0x005c */ struct _WINDOWS7_7000__KAFFINITY_EX Affinity; union { struct { /* off 0x0068 */ long AutoAlignment:1 /* start bit 0 */; /* off 0x0068 */ long DisableBoost:1 /* start bit 1 */; /* off 0x0068 */ long DisableQuantum:1 /* start bit 2 */; /* off 0x0068 */ unsigned long ActiveGroupsMask:1 /* start bit 3 */; /* off 0x0068 */ long ReservedFlags:28 /* start bit 4 */; }; /* off 0x0068 */ long ProcessFlags; }; /* off 0x006c */ char BasePriority; /* off 0x006d */ char QuantumReset; /* off 0x006e */ unsigned char Visited; /* off 0x006f */ unsigned char Unused3; /* off 0x0070 */ unsigned long ThreadSeed[1]; /* off 0x0074 */ unsigned short IdealNode[1]; /* off 0x0076 */ unsigned short IdealGlobalNode; union { /* off 0x0078 */ struct _WINDOWS7_7000__KEXECUTE_OPTIONS Flags; /* off 0x0078 */ unsigned char ExecuteOptions; }; /* off 0x0079 */ unsigned char Unused1; /* off 0x007a */ unsigned short IopmOffset; /* off 0x007c */ unsigned long Unused4; /* off 0x0080 */ union _WINDOWS7_7000__KSTACK_COUNT StackCount; /* off 0x0084 */ struct _WINDOWS7_7000__LIST_ENTRY ProcessListEntry; /* off 0x0090 */ unsigned __int64 CycleTime; }; |
|
|
沙发#
发布于:2010-04-27 12:02
看看,thanks!
|
|
板凳#
发布于:2010-04-26 21:24
哪弄来的?
|
|
|
地板#
发布于:2010-04-25 21:37
顶之。。。。
|
|
地下室#
发布于:2010-04-25 11:06
look下
|
|
5楼#
发布于:2010-04-20 21:03
回 楼主(wuyanfeng) 的帖子
学习下,谢谢 |
|
6楼#
发布于:2010-04-11 23:05
|
|
7楼#
发布于:2010-04-02 21:55
ms有用,看看
|
|
8楼#
发布于:2010-04-02 17:33
我也看看。。这个正好~!!
|
|
9楼#
发布于:2010-03-19 10:23
好!
|
|
10楼#
发布于:2010-03-12 12:14
see
|
|
11楼#
发布于:2010-03-11 14:01
太牛了,膜拜一下。
|
|
12楼#
发布于:2010-02-08 14:29
看下
|
|
13楼#
发布于:2010-02-07 19:18
看看是什么东西。。
|
|
14楼#
发布于:2010-01-19 18:52
adsfafadf
|
|
15楼#
发布于:2010-01-03 03:06
不懂的 不懂的不懂的不懂的
|
|
16楼#
发布于:2009-12-22 15:41
学习下,谢谢
|
|
17楼#
发布于:2009-12-07 14:54
学习一下,多谢楼主
|
|
|
18楼#
发布于:2009-11-18 21:23
不会没有吧?看看。。。。
|
|
19楼#
发布于:2009-11-18 20:54
谢谢,来看看
|
|
|
上一页
下一页