文件名称：系统内核结构
文件大小：34KB
文件格式：H
更新时间：2015-02-28 06:29:11
EPROCESS TEB KTHREAD ETHREAD KEXECUTE
大部分常用系统结果 已经还原成C语言格式的 typedef struct _EPROCESS_XP_SP3 // 107 elements, 0x260 bytes (sizeof) { /*0x000*/ struct _KPROCESS_XP_SP3 Pcb; // 29 elements, 0x6C bytes (sizeof) /*0x06C*/ struct _EX_PUSH_LOCK ProcessLock; // 5 elements, 0x4 bytes (sizeof) /*0x070*/ union _LARGE_INTEGER CreateTime; // 4 elements, 0x8 bytes (sizeof) /*0x078*/ union _LARGE_INTEGER ExitTime; // 4 elements, 0x8 bytes (sizeof) /*0x080*/ struct _EX_RUNDOWN_REF RundownProtect; // 2 elements, 0x4 bytes (sizeof) /*0x084*/ VOID* UniqueProcessId; /*0x088*/ struct _LIST_ENTRY ActiveProcessLinks; // 2 elements, 0x8 bytes (sizeof) /*0x090*/ ULONG32 QuotaUsage[3]; /*0x09C*/ ULONG32 QuotaPeak[3]; /*0x0A8*/ ULONG32 CommitCharge; /*0x0AC*/ ULONG32 PeakVirtualSize; /*0x0B0*/ ULONG32 VirtualSize; /*0x0B4*/ struct _LIST_ENTRY SessionProcessLinks; // 2 elements, 0x8 bytes (sizeof) /*0x0BC*/ VOID* DebugPort; 其他内详.....