_MI_PROCESS_STATE

//0x48 bytes (sizeof) struct _MI_PROCESS_STATE { VOID* SystemDllBase; //0x0 ULONG ColorSeed; //0x8 LONG RotatingUniprocessorNumber; //0xc union _LARGE_INTEGER CriticalSectionTimeout; //0x10 struct _LIST_ENTRY ProcessList; //0x18 struct _MMPTE* SharedUserDataPte[2]; //0x28 VOID* HypervisorSharedVa; //0x38 ULONGLONG VadSecureCookie; //0x40 };