Min version7
Max version10 TH2
x64 offset
offset:bitpos
Field Name
0x0000struct _NT_TIB
NtTib
0x0000union _KGDTENTRY64 *
GdtBase
0x0008struct _KTSS64 *
TssBase
0x0010uint64_t
UserRsp
0x0018struct _KPCR *
Self
0x0020struct _KPRCB *
CurrentPrcb
0x0028struct _KSPIN_LOCK_QUEUE *
LockArray
0x0030void *
Used_Self
0x0038union _KIDTENTRY64 *
IdtBase
0x0040uint64_t[2]
Unused
0x0050uint8_t
Irql
0x0051uint8_t
SecondLevelCacheAssociativity
0x0052uint8_t
ObsoleteNumber
0x0053uint8_t
Fill0
0x0054unsigned long[3]
Unused0
0x0060uint16_t
MajorVersion
0x0062uint16_t
MinorVersion
0x0064unsigned long
StallScaleFactor
0x0068void *[3]
Unused1
0x0080unsigned long[15]
KernelReserved
0x00BCunsigned long
SecondLevelCacheSize
0x00C0unsigned long[16]
HalReserved
0x0100unsigned long
Unused2
0x0108void *
KdVersionBlock
0x0110void *
Unused3
0x0118unsigned long[24]
PcrAlign1
0x0180struct _KPRCB
Prcb