//0x2e0 bytes (sizeof)
struct _KPROCESS
{
struct _DISPATCHER_HEADER Header; //0x0
struct _LIST_ENTRY ProfileListHead; //0x18
ULONGLONG DirectoryTableBase; //0x28
struct _LIST_ENTRY ThreadListHead; //0x30
ULONG ProcessLock; //0x40
ULONG ProcessTimerDelay; //0x44
ULONGLONG DeepFreezeStartTime; //0x48
struct _KAFFINITY_EX Affinity; //0x50
struct _LIST_ENTRY ReadyListHead; //0xf8
struct _SINGLE_LIST_ENTRY SwapListEntry; //0x108
volatile struct _KAFFINITY_EX ActiveProcessors; //0x110
union
{
struct
{
ULONG AutoAlignment:1; //0x1b8
ULONG DisableBoost:1; //0x1b8
ULONG DisableQuantum:1; //0x1b8
ULONG DeepFreeze:1; //0x1b8
ULONG TimerVirtualization:1; //0x1b8
ULONG CheckStackExtents:1; //0x1b8
ULONG CacheIsolationEnabled:1; //0x1b8
ULONG PpmPolicy:3; //0x1b8
ULONG VaSpaceDeleted:1; //0x1b8
ULONG ReservedFlags:21; //0x1b8
};
volatile LONG ProcessFlags; //0x1b8
};
ULONG ActiveGroupsMask; //0x1bc
CHAR BasePriority; //0x1c0
CHAR QuantumReset; //0x1c1
CHAR Visited; //0x1c2
union _KEXECUTE_OPTIONS Flags; //0x1c3
USHORT ThreadSeed[20]; //0x1c4
USHORT IdealProcessor[20]; //0x1ec
USHORT IdealNode[20]; //0x214
USHORT IdealGlobalNode; //0x23c
USHORT Spare1; //0x23e
unionvolatile _KSTACK_COUNT StackCount; //0x240
struct _LIST_ENTRY ProcessListEntry; //0x248
ULONGLONG CycleTime; //0x258
ULONGLONG ContextSwitches; //0x260
struct _KSCHEDULING_GROUP* SchedulingGroup; //0x268
ULONG FreezeCount; //0x270
ULONG KernelTime; //0x274
ULONG UserTime; //0x278
ULONG ReadyTime; //0x27c
ULONGLONG UserDirectoryTableBase; //0x280
UCHAR AddressPolicy; //0x288
UCHAR Spare2[71]; //0x289
VOID* InstrumentationCallback; //0x2d0
union
{
ULONGLONG SecureHandle; //0x2d8
struct
{
ULONGLONG SecureProcess:1; //0x2d8
ULONGLONG Unused:1; //0x2d8
} Flags; //0x2d8
} SecureState; //0x2d8
};