Min version8 Pre RTM8
Max version10 TH2
x64 offset
offset:bitpos
Field Name
0x0000struct _LIST_ENTRY
ListEntry
0x0010struct _RUNTIME_FUNCTION *
FunctionTable
struct _IMAGE_RUNTIME_FUNCTION_ENTRY *
FunctionTable
0x0018union _LARGE_INTEGER
TimeStamp
0x0020uint64_t
MinimumAddress
0x0028uint64_t
MaximumAddress
0x0030uint64_t
BaseAddress
0x0038function *
Callback
0x0040void *
Context
0x0048uint16_t *
OutOfProcessCallbackDll
0x0050enum _FUNCTION_TABLE_TYPE
Type
0x0054unsigned long
EntryCount