Min version	XP	XP SP2	2003/XP64	2003/XP64 SP1	2003/XP64 SP2	Vista	Vista SP1	7	8 Pre RTM	8 Pre RTM	8	8.1 Update 1	8.1 Update 1	8.1 Update 1	10
Max version	XP SP1	XP SP3		2003/XP64 SP2			Vista SP2	7 SP1
x86 offset offset:bitpos	Field Name
0x0000	uint16_t MinorVersion
0x0002	uint16_t MajorVersion
0x0004	struct _KTHREAD * CurrentThread
0x0008	struct _KTHREAD * NextThread
0x000C	struct _KTHREAD * IdleThread
0x0010	char Number					uint8_t Number		uint8_t LegacyNumber
0x0011	char Reserved					uint8_t NestingLevel
0x0012	uint16_t BuildType
0x0014	unsigned long SetMember							char CpuType
0x0015								char CpuID
0x0016								uint16_t CpuStep
0x0016								uint8_t CpuStepping
0x0017								uint8_t CpuModel
0x0018	char CpuType							struct _KPROCESSOR_STATE ProcessorState
0x0019	char CpuID
0x001A	uint16_t CpuStep					uint16_t CpuStep
0x001A						uint8_t CpuStepping
0x001B						uint8_t CpuModel
0x001C	struct _KPROCESSOR_STATE ProcessorState
0x0338								unsigned long[16] KernelReserved				struct _KNODE * ParentNode
0x033C	unsigned long[16] KernelReserved											char * PriorityState
0x0340												unsigned long[14] KernelReserved
0x0378								unsigned long[16] HalReserved
0x037C	unsigned long[16] HalReserved
0x03B8								unsigned long CFlushSize
0x03BC	uint8_t[92] PrcbPad0					unsigned long CFlushSize		uint8_t CoresPerPhysicalProcessor
0x03BD								uint8_t LogicalProcessorsPerCore
0x03BE								uint8_t[2] PrcbPad0				uint8_t CpuVendor
0x03BF												uint8_t[1] PrcbPad0
0x03C0						uint8_t[88] PrcbPad0	uint8_t CoresPerPhysicalProcessor	unsigned long MHz
0x03C1							uint8_t LogicalProcessorsPerCore
0x03C2							uint8_t[2] PrcbPad0
0x03C4							unsigned long MHz	uint8_t CpuVendor				uint8_t GroupIndex
0x03C5								uint8_t GroupIndex				uint8_t Group
0x03C6								uint16_t Group				uint8_t[2] PrcbPad05
0x03C8							uint8_t[80] PrcbPad1	unsigned long GroupSetMember
0x03CC								unsigned long Number
0x03D0								uint8_t[72] PrcbPad1	uint8_t ClockOwner
0x03D1									uint8_t PendingTick			uint8_t PendingTickFlags
0x03D1:0x00												uint8_t PendingTick
0x03D1:0x01												uint8_t PendingBackupTick
0x03D2									uint8_t[70] PrcbPad1			uint8_t[70] PrcbPad10
0x0418	struct _KSPIN_LOCK_QUEUE[16] LockQueue			struct _KSPIN_LOCK_QUEUE[33] LockQueue			struct _KSPIN_LOCK_QUEUE[49] LockQueue	struct _KSPIN_LOCK_QUEUE[17] LockQueue
0x0498	uint8_t[8] PrcbPad1
0x04A0	struct _KTHREAD * NpxThread							struct _KTHREAD * NpxThread				unsigned long InterruptCount
0x04A4	unsigned long InterruptCount							unsigned long InterruptCount				unsigned long KernelTime
0x04A8	unsigned long KernelTime							unsigned long KernelTime				unsigned long UserTime
0x04AC	unsigned long UserTime							unsigned long UserTime				unsigned long DpcTime
0x04B0	unsigned long DpcTime							unsigned long DpcTime				unsigned long DpcTimeCount
0x04B4	unsigned long DebugDpcTime							unsigned long DpcTimeCount				unsigned long InterruptTime
0x04B8	unsigned long InterruptTime							unsigned long InterruptTime				unsigned long AdjustDpcThreshold
0x04BC	unsigned long AdjustDpcThreshold							unsigned long AdjustDpcThreshold				unsigned long PageColor
0x04C0	unsigned long PageColor							unsigned long PageColor				uint8_t DebuggerSavedIRQL
0x04C1												uint8_t NodeColor
0x04C2												uint8_t[6] PrcbPad20			uint8_t DeepSleep
0x04C3															uint8_t[5] PrcbPad20
0x04C4	unsigned long SkipTick		uint8_t SkipTick					uint8_t DebuggerSavedIRQL
0x04C5			uint8_t DebuggerSavedIRQL					uint8_t NodeColor
0x04C6			uint8_t[6] Spare1					uint8_t[2] PrcbPad20
0x04C8	uint8_t MultiThreadSetBusy							unsigned long NodeShiftedColor
0x04C9	uint8_t[3] Spare2
0x04CC	struct _KNODE * ParentNode							struct _KNODE * ParentNode				unsigned long SecondaryColorMask
0x04D0	unsigned long MultiThreadProcessorSet							unsigned long SecondaryColorMask				unsigned long DpcTimeLimit
0x04D4	struct _KPRCB * MultiThreadSetMaster							unsigned long DpcTimeLimit				unsigned long[3] PrcbPad21
0x04D8	unsigned long[2] ThreadStartCount							unsigned long[2] PrcbPad21
0x04E0	unsigned long CcFastReadNoWait							unsigned long CcFastReadNoWait
0x04E4	unsigned long CcFastReadWait							unsigned long CcFastReadWait
0x04E8	unsigned long CcFastReadNotPossible							unsigned long CcFastReadNotPossible
0x04EC	unsigned long CcCopyReadNoWait							unsigned long CcCopyReadNoWait
0x04F0	unsigned long CcCopyReadWait							unsigned long CcCopyReadWait
0x04F4	unsigned long CcCopyReadNoWaitMiss							unsigned long CcCopyReadNoWaitMiss
0x04F8	unsigned long KeAlignmentFixupCount							volatile long MmSpinLockOrdering
0x04FC	unsigned long KeContextSwitches		unsigned long SpareCounter0					volatile long IoReadOperationCount
0x0500	unsigned long KeDcacheFlushCount							volatile long IoWriteOperationCount
0x0504	unsigned long KeExceptionDispatchCount							volatile long IoOtherOperationCount
0x0508	unsigned long KeFirstLevelTbFills							union _LARGE_INTEGER IoReadTransferCount
0x050C	unsigned long KeFloatingEmulationCount
0x0510	unsigned long KeIcacheFlushCount							union _LARGE_INTEGER IoWriteTransferCount
0x0514	unsigned long KeSecondLevelTbFills
0x0518	unsigned long KeSystemCalls							union _LARGE_INTEGER IoOtherTransferCount
0x051C	unsigned long[1] SpareCounter0		unsigned long SpareCounter1
0x0520	struct _PP_LOOKASIDE_LIST[16] PPLookasideList			struct _KTHREAD * NpxThread				unsigned long CcFastMdlReadNoWait
0x0524				unsigned long InterruptCount				unsigned long CcFastMdlReadWait
0x0528				unsigned long KernelTime				unsigned long CcFastMdlReadNotPossible
0x052C				unsigned long UserTime				unsigned long CcMapDataNoWait
0x0530				unsigned long DpcTime				unsigned long CcMapDataWait
0x0534				unsigned long DebugDpcTime		unsigned long DpcTimeCount		unsigned long CcPinMappedDataCount
0x0538				unsigned long InterruptTime				unsigned long CcPinReadNoWait
0x053C				unsigned long AdjustDpcThreshold				unsigned long CcPinReadWait
0x0540				unsigned long PageColor				unsigned long CcMdlReadNoWait
0x0544				uint8_t SkipTick				unsigned long CcMdlReadWait
0x0545				uint8_t DebuggerSavedIRQL
0x0546				uint8_t NodeColor
0x0547				uint8_t Spare1		uint8_t PollSlot
0x0548				unsigned long NodeShiftedColor				unsigned long CcLazyWriteHotSpots
0x054C				struct _KNODE * ParentNode				unsigned long CcLazyWriteIos
0x0550				unsigned long MultiThreadProcessorSet				unsigned long CcLazyWritePages
0x0554				struct _KPRCB * MultiThreadSetMaster				unsigned long CcDataFlushes
0x0558				unsigned long SecondaryColorMask				unsigned long CcDataPages
0x055C				long Sleeping		unsigned long DpcTimeLimit		unsigned long CcLostDelayedWrites
0x0560				unsigned long CcFastReadNoWait				unsigned long CcFastReadResourceMiss
0x0564				unsigned long CcFastReadWait				unsigned long CcCopyReadWaitMiss
0x0568				unsigned long CcFastReadNotPossible				unsigned long CcFastMdlReadResourceMiss
0x056C				unsigned long CcCopyReadNoWait				unsigned long CcMapDataNoWaitMiss
0x0570				unsigned long CcCopyReadWait				unsigned long CcMapDataWaitMiss
0x0574				unsigned long CcCopyReadNoWaitMiss				unsigned long CcPinReadNoWaitMiss
0x0578				unsigned long KeAlignmentFixupCount		volatile long MmSpinLockOrdering	unsigned long CcPinReadWaitMiss
0x057C				unsigned long SpareCounter0		volatile long IoReadOperationCount	unsigned long CcMdlReadNoWaitMiss
0x0580				unsigned long KeDcacheFlushCount		volatile long IoWriteOperationCount	unsigned long CcMdlReadWaitMiss
0x0584				unsigned long KeExceptionDispatchCount		volatile long IoOtherOperationCount	unsigned long CcReadAheadIos
0x0588				unsigned long KeFirstLevelTbFills		union _LARGE_INTEGER IoReadTransferCount	unsigned long KeAlignmentFixupCount
0x058C				unsigned long KeFloatingEmulationCount			unsigned long KeExceptionDispatchCount
0x0590				unsigned long KeIcacheFlushCount		union _LARGE_INTEGER IoWriteTransferCount	unsigned long KeSystemCalls
0x0594				unsigned long KeSecondLevelTbFills			unsigned long AvailableTime
0x0598				unsigned long KeSystemCalls		union _LARGE_INTEGER IoOtherTransferCount	unsigned long[2] PrcbPad22
0x059C				volatile long IoReadOperationCount
0x05A0	struct _PP_LOOKASIDE_LIST[32] PPNPagedLookasideList			volatile long IoWriteOperationCount		unsigned long CcFastMdlReadNoWait	struct _KTHREAD * NpxThread	struct _PP_LOOKASIDE_LIST[16] PPLookasideList
0x05A4				volatile long IoOtherOperationCount		unsigned long CcFastMdlReadWait	unsigned long InterruptCount
0x05A8				union _LARGE_INTEGER IoReadTransferCount		unsigned long CcFastMdlReadNotPossible	unsigned long KernelTime
0x05AC						unsigned long CcMapDataNoWait	unsigned long UserTime
0x05B0				union _LARGE_INTEGER IoWriteTransferCount		unsigned long CcMapDataWait	unsigned long DpcTime
0x05B4						unsigned long CcPinMappedDataCount	unsigned long DpcTimeCount
0x05B8				union _LARGE_INTEGER IoOtherTransferCount		unsigned long CcPinReadNoWait	unsigned long InterruptTime
0x05BC						unsigned long CcPinReadWait	unsigned long AdjustDpcThreshold
0x05C0				unsigned long[8] SpareCounter1		unsigned long CcMdlReadNoWait	unsigned long PageColor
0x05C4						unsigned long CcMdlReadWait	uint8_t SkipTick
0x05C5							uint8_t DebuggerSavedIRQL
0x05C6							uint8_t NodeColor
0x05C7							uint8_t PollSlot
0x05C8						unsigned long CcLazyWriteHotSpots	unsigned long NodeShiftedColor
0x05CC						unsigned long CcLazyWriteIos	struct _KNODE * ParentNode
0x05D0						unsigned long CcLazyWritePages	unsigned long MultiThreadProcessorSet
0x05D4						unsigned long CcDataFlushes	struct _KPRCB * MultiThreadSetMaster
0x05D8						unsigned long CcDataPages	unsigned long SecondaryColorMask
0x05DC						unsigned long CcLostDelayedWrites	unsigned long DpcTimeLimit
0x05E0				struct _PP_LOOKASIDE_LIST[16] PPLookasideList		unsigned long CcFastReadResourceMiss	unsigned long CcFastReadNoWait
0x05E4						unsigned long CcCopyReadWaitMiss	unsigned long CcFastReadWait
0x05E8						unsigned long CcFastMdlReadResourceMiss	unsigned long CcFastReadNotPossible
0x05EC						unsigned long CcMapDataNoWaitMiss	unsigned long CcCopyReadNoWait
0x05F0						unsigned long CcMapDataWaitMiss	unsigned long CcCopyReadWait
0x05F4						unsigned long CcPinReadNoWaitMiss	unsigned long CcCopyReadNoWaitMiss
0x05F8						unsigned long CcPinReadWaitMiss	volatile long MmSpinLockOrdering
0x05FC						unsigned long CcMdlReadNoWaitMiss	volatile long IoReadOperationCount
0x0600						unsigned long CcMdlReadWaitMiss	volatile long IoWriteOperationCount
0x0604						unsigned long CcReadAheadIos	volatile long IoOtherOperationCount
0x0608						unsigned long KeAlignmentFixupCount	union _LARGE_INTEGER IoReadTransferCount
0x060C						unsigned long KeExceptionDispatchCount
0x0610						unsigned long KeSystemCalls	union _LARGE_INTEGER IoWriteTransferCount
0x0614						unsigned long[3] PrcbPad1
0x0618							union _LARGE_INTEGER IoOtherTransferCount
0x0620						struct _PP_LOOKASIDE_LIST[16] PPLookasideList	unsigned long CcFastMdlReadNoWait	struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList	struct _GENERAL_LOOKASIDE_POOL[32] PPNxPagedLookasideList
0x0624							unsigned long CcFastMdlReadWait
0x0628							unsigned long CcFastMdlReadNotPossible
0x062C							unsigned long CcMapDataNoWait
0x0630							unsigned long CcMapDataWait
0x0634							unsigned long CcPinMappedDataCount
0x0638							unsigned long CcPinReadNoWait
0x063C							unsigned long CcPinReadWait
0x0640							unsigned long CcMdlReadNoWait
0x0644							unsigned long CcMdlReadWait
0x0648							unsigned long CcLazyWriteHotSpots
0x064C							unsigned long CcLazyWriteIos
0x0650							unsigned long CcLazyWritePages
0x0654							unsigned long CcDataFlushes
0x0658							unsigned long CcDataPages
0x065C							unsigned long CcLostDelayedWrites
0x0660				struct _PP_LOOKASIDE_LIST[32] PPNPagedLookasideList			unsigned long CcFastReadResourceMiss
0x0664							unsigned long CcCopyReadWaitMiss
0x0668							unsigned long CcFastMdlReadResourceMiss
0x066C							unsigned long CcMapDataNoWaitMiss
0x0670							unsigned long CcMapDataWaitMiss
0x0674							unsigned long CcPinReadNoWaitMiss
0x0678							unsigned long CcPinReadWaitMiss
0x067C							unsigned long CcMdlReadNoWaitMiss
0x0680							unsigned long CcMdlReadWaitMiss
0x0684							unsigned long CcReadAheadIos
0x0688							unsigned long KeAlignmentFixupCount
0x068C							unsigned long KeExceptionDispatchCount
0x0690							unsigned long KeSystemCalls
0x0694							unsigned long[3] PrcbPad2
0x06A0	struct _PP_LOOKASIDE_LIST[32] PPPagedLookasideList					struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList	struct _PP_LOOKASIDE_LIST[16] PPLookasideList
0x0720							struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList
0x0760				struct _PP_LOOKASIDE_LIST[32] PPPagedLookasideList
0x07A0	volatile unsigned long PacketBarrier
0x07A4	volatile unsigned long ReverseStall
0x07A8	void * IpiFrame
0x07AC	uint8_t[52] PrcbPad2
0x07E0	void * volatile[3] CurrentPacket
0x07EC	volatile unsigned long TargetSet
0x07F0	function * volatile WorkerRoutine
0x07F4	volatile unsigned long IpiFrozen
0x07F8	uint8_t[40] PrcbPad3
0x0820	volatile unsigned long RequestSummary
0x0824	volatile struct _KPRCB * SignalDone
0x0828	uint8_t[56] PrcbPad4
0x0860	struct _LIST_ENTRY DpcListHead		struct _KDPC_DATA[2] DpcData	volatile unsigned long PacketBarrier
0x0864				volatile unsigned long ReverseStall
0x0868	void * DpcStack			void * IpiFrame
0x086C	unsigned long DpcCount			uint8_t[52] PrcbPad2
0x0870	volatile unsigned long DpcQueueDepth
0x0874	volatile unsigned long DpcRoutineActive
0x0878	volatile unsigned long DpcInterruptRequested
0x087C	unsigned long DpcLastCount
0x0880	unsigned long DpcRequestRate
0x0884	unsigned long MaximumDpcQueueDepth
0x0888	unsigned long MinimumDpcRate		void * DpcStack
0x088C	unsigned long QuantumEnd		unsigned long MaximumDpcQueueDepth
0x0890	uint8_t[16] PrcbPad5		unsigned long DpcRequestRate
0x0894			unsigned long MinimumDpcRate
0x0898			volatile uint8_t DpcInterruptRequested
0x0899			volatile uint8_t DpcThreadRequested
0x089A			volatile uint8_t DpcRoutineActive
0x089B			volatile uint8_t DpcThreadActive
0x089C			unsigned long PrcbLock
0x08A0	unsigned long DpcLock		unsigned long DpcLastCount	void * volatile[3] CurrentPacket
0x08A4	uint8_t[60] PrcbPad6	uint8_t[28] PrcbPad6	volatile unsigned long TimerHand
0x08A8			volatile unsigned long TimerRequest
0x08AC			void * DpcThread	volatile unsigned long TargetSet
0x08B0			struct _KEVENT DpcEvent	function * volatile WorkerRoutine
0x08B4				volatile unsigned long IpiFrozen
0x08B8				uint8_t[40] PrcbPad3
0x08C0		struct _KDPC CallDpc	uint8_t ThreadDpcEnable
0x08C1			volatile uint8_t QuantumEnd
0x08C2			uint8_t PrcbPad50
0x08C3			volatile uint8_t IdleSchedule
0x08C4			long DpcSetEventRequest
0x08C8			uint8_t[22] PrcbPad5
0x08E0	void * ChainedInterruptList		struct _KDPC CallDpc	volatile unsigned long RequestSummary
0x08E4	long LookasideIrpFloat			volatile struct _KPRCB * SignalDone
0x08E8	unsigned long[6] SpareFields0			uint8_t[56] PrcbPad4
0x0900	uint8_t[13] VendorString		unsigned long[8] PrcbPad7
0x090D	uint8_t InitialApicId
0x090E	uint8_t LogicalProcessorsPerPhysicalProcessor
0x0910	unsigned long MHz
0x0914	unsigned long FeatureBits
0x0918	union _LARGE_INTEGER UpdateSignature
0x0920	struct _FX_SAVE_AREA NpxSaveArea		struct _LIST_ENTRY WaitListHead	struct _KDPC_DATA[2] DpcData
0x0928			unsigned long ReadySummary
0x092C			unsigned long SelectNextLast
0x0930			struct _LIST_ENTRY[32] DispatcherReadyListHead
0x0948				void * DpcStack
0x094C				unsigned long MaximumDpcQueueDepth
0x0950				unsigned long DpcRequestRate
0x0954				unsigned long MinimumDpcRate
0x0958				volatile uint8_t DpcInterruptRequested
0x0959				volatile uint8_t DpcThreadRequested
0x095A				volatile uint8_t DpcRoutineActive
0x095B				volatile uint8_t DpcThreadActive
0x095C				unsigned long PrcbLock
0x0960				unsigned long DpcLastCount
0x0964				volatile unsigned long TimerHand
0x0968				volatile unsigned long TimerRequest
0x096C				void * DpcThread
0x0970				struct _KEVENT DpcEvent
0x0980				uint8_t ThreadDpcEnable
0x0981				volatile uint8_t QuantumEnd
0x0982				uint8_t PrcbPad50
0x0983				volatile uint8_t IdleSchedule
0x0984				long DpcSetEventRequest
0x0988				uint8_t[18] PrcbPad5
0x099C				long TickOffset
0x09A0				struct _KDPC CallDpc
0x09C0				unsigned long[8] PrcbPad7
0x09E0				struct _LIST_ENTRY WaitListHead
0x09E8				unsigned long ReadySummary
0x09EC				unsigned long QueueIndex
0x09F0				struct _LIST_ENTRY[32] DispatcherReadyListHead
0x0A30			struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x0A34			unsigned long[11] PrcbPad72
0x0A60			void * ChainedInterruptList
0x0A64			long LookasideIrpFloat
0x0A68			unsigned long[4] SpareFields0
0x0A78			uint8_t[13] VendorString
0x0A85			uint8_t InitialApicId
0x0A86			uint8_t LogicalProcessorsPerPhysicalProcessor
0x0A88			unsigned long MHz
0x0A8C			unsigned long FeatureBits
0x0A90			union _LARGE_INTEGER UpdateSignature
0x0A98			volatile uint64_t IsrTime
0x0AA0			struct _FX_SAVE_AREA NpxSaveArea
0x0AF0				struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x0AF4				unsigned long[11] PrcbPad72
0x0B20				void * ChainedInterruptList
0x0B24				long LookasideIrpFloat
0x0B28				volatile long MmPageFaultCount
0x0B2C				volatile long MmCopyOnWriteCount
0x0B30	struct _PROCESSOR_POWER_STATE PowerState			volatile long MmTransitionCount
0x0B34				volatile long MmCacheTransitionCount
0x0B38				volatile long MmDemandZeroCount
0x0B3C				volatile long MmPageReadCount
0x0B40				volatile long MmPageReadIoCount
0x0B44				volatile long MmCacheReadCount
0x0B48				volatile long MmCacheIoCount
0x0B4C				volatile long MmDirtyPagesWriteCount
0x0B50				volatile long MmDirtyWriteIoCount
0x0B54				volatile long MmMappedPagesWriteCount
0x0B58				volatile long MmMappedWriteIoCount
0x0B5C				unsigned long[1] SpareFields0
0x0B60				uint8_t[13] VendorString
0x0B6D				uint8_t InitialApicId
0x0B6E				uint8_t LogicalProcessorsPerPhysicalProcessor
0x0B70				unsigned long MHz
0x0B74				unsigned long FeatureBits
0x0B78				union _LARGE_INTEGER UpdateSignature
0x0B80				volatile uint64_t IsrTime
0x0B88				uint64_t SpareField1
0x0B90				struct _FX_SAVE_AREA NpxSaveArea
0x0CB0			struct _PROCESSOR_POWER_STATE PowerState
0x0DA0				struct _PROCESSOR_POWER_STATE PowerState
0x0EC0					void * EtwSupport
0x0F20						struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList	struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList
0x0FA0														struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList
0x1020															struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList
0x1820						volatile unsigned long PacketBarrier	struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList
0x1824						volatile long ReverseStall
0x1828						void * IpiFrame
0x182C						uint8_t[52] PrcbPad3
0x1860						void * volatile[3] CurrentPacket
0x186C						volatile unsigned long TargetSet
0x1870						function * volatile WorkerRoutine
0x1874						volatile unsigned long IpiFrozen
0x1878						uint8_t[40] PrcbPad4
0x18A0						volatile unsigned long PacketBarrier								volatile unsigned long RequestSummary
0x18A4						volatile long ReverseStall								struct _KPRCB * volatile SignalDone
0x18A8						void * IpiFrame								uint8_t[56] PrcbPad50
0x18AC						uint8_t[52] PrcbPad2
0x18E0						void * volatile[3] CurrentPacket								struct _KDPC_DATA[2] DpcData
0x18EC						volatile unsigned long TargetSet
0x18F0						function * volatile WorkerRoutine
0x18F4						volatile unsigned long IpiFrozen
0x18F8						uint8_t[40] PrcbPad3
0x1908														void * DpcStack
0x190C														long MaximumDpcQueueDepth
0x1910														unsigned long DpcRequestRate
0x1914														unsigned long MinimumDpcRate
0x1918														unsigned long DpcLastCount
0x191C														unsigned long PrcbLock
0x1920						volatile unsigned long RequestSummary								volatile unsigned long PacketBarrier	struct _KGATE DpcGate
0x1924						struct _KPRCB * volatile SignalDone								volatile long ReverseStall
0x1928						uint8_t[56] PrcbPad4								void * IpiFrame
0x192C														uint8_t[52] PrcbPad3
0x1930															uint8_t ThreadDpcEnable
0x1931															volatile uint8_t QuantumEnd
0x1932															volatile uint8_t DpcRoutineActive
0x1933															volatile uint8_t IdleSchedule
0x1934															volatile long DpcRequestSummary
0x1934															int16_t[2] DpcRequestSlot
0x1934															int16_t NormalDpcState
0x1936:0x00															volatile uint16_t DpcThreadActive
0x1936															int16_t ThreadDpcState
0x1938															volatile unsigned long TimerHand
0x193C															unsigned long LastTick
0x1940															long MasterOffset
0x1944															unsigned long[2] PrcbPad41
0x194C															unsigned long PeriodicCount
0x1950															unsigned long PeriodicBias
0x1958															uint64_t TickOffset
0x1960						struct _KDPC_DATA[2] DpcData								void * volatile[3] CurrentPacket	struct _KTIMER_TABLE TimerTable
0x196C														volatile unsigned long TargetSet
0x1970														function * volatile WorkerRoutine
0x1974														volatile unsigned long IpiFrozen
0x1978														uint8_t[40] PrcbPad4
0x1988						void * DpcStack
0x198C						long MaximumDpcQueueDepth
0x1990						unsigned long DpcRequestRate
0x1994						unsigned long MinimumDpcRate
0x1998						volatile uint8_t DpcInterruptRequested
0x1999						volatile uint8_t DpcThreadRequested
0x199A						volatile uint8_t DpcRoutineActive
0x199B						volatile uint8_t DpcThreadActive
0x199C						unsigned long PrcbLock
0x19A0	unsigned long DpcLastCount	volatile unsigned long RequestSummary
0x19A4	volatile unsigned long TimerHand	struct _KPRCB * volatile SignalDone
0x19A8	volatile unsigned long TimerRequest	uint8_t[56] PrcbPad5
0x19AC	void * PrcbPad41
0x19B0	struct _KEVENT DpcEvent
0x19C0	uint8_t ThreadDpcEnable
0x19C1	volatile uint8_t QuantumEnd
0x19C2	uint8_t PrcbPad50
0x19C3	volatile uint8_t IdleSchedule
0x19C4	long DpcSetEventRequest
0x19C8	long Sleeping
0x19CC	unsigned long PeriodicCount
0x19D0	unsigned long PeriodicBias
0x19D4	uint8_t[6] PrcbPad5
0x19DC	long TickOffset
0x19E0	struct _KDPC CallDpc	struct _KDPC_DATA[2] DpcData
0x1A00	long ClockKeepAlive
0x1A04	uint8_t ClockCheckSlot
0x1A05	uint8_t ClockPollCycle
0x1A06	uint8_t[2] PrcbPad6
0x1A08	long DpcWatchdogPeriod	void * DpcStack
0x1A0C	long DpcWatchdogCount	long MaximumDpcQueueDepth
0x1A10	long ThreadWatchdogPeriod	unsigned long DpcRequestRate
0x1A14	long ThreadWatchdogCount	unsigned long MinimumDpcRate
0x1A18	unsigned long[2] PrcbPad70	volatile uint8_t DpcInterruptRequested
0x1A19		volatile uint8_t DpcThreadRequested
0x1A1A		volatile uint8_t DpcRoutineActive
0x1A1B		volatile uint8_t DpcThreadActive
0x1A1C		unsigned long PrcbLock
0x1A20	struct _LIST_ENTRY WaitListHead	unsigned long DpcLastCount
0x1A24		volatile unsigned long TimerHand
0x1A28	unsigned long WaitLock	volatile unsigned long TimerRequest
0x1A2C	unsigned long ReadySummary	void * PrcbPad41
0x1A30	unsigned long QueueIndex	struct _KEVENT DpcEvent
0x1A34	struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x1A38	uint64_t StartCycles
0x1A40	uint64_t CycleTime	uint8_t ThreadDpcEnable
0x1A41		volatile uint8_t QuantumEnd
0x1A42		uint8_t PrcbPad50
0x1A43		volatile uint8_t IdleSchedule
0x1A44		long DpcSetEventRequest
0x1A48	uint64_t[3] PrcbPad71	long Sleeping
0x1A4C		unsigned long PeriodicCount
0x1A50		unsigned long PeriodicBias
0x1A54		uint8_t[6] PrcbPad51
0x1A5C		long TickOffset
0x1A60	struct _LIST_ENTRY[32] DispatcherReadyListHead	struct _KDPC CallDpc
0x1A80		long ClockKeepAlive
0x1A84		uint8_t ClockCheckSlot
0x1A85		uint8_t ClockPollCycle
0x1A86		uint8_t[2] PrcbPad6
0x1A88		long DpcWatchdogPeriod
0x1A8C		long DpcWatchdogCount
0x1A90		long ThreadWatchdogPeriod
0x1A94		long ThreadWatchdogCount
0x1A98		unsigned long[2] PrcbPad70
0x1AA0		struct _LIST_ENTRY WaitListHead
0x1AA8		unsigned long WaitLock
0x1AAC		unsigned long ReadySummary
0x1AB0		unsigned long QueueIndex
0x1AB4		struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x1AB8		uint64_t StartCycles
0x1AC0		uint64_t CycleTime
0x1AC8		uint64_t[3] PrcbPad71
0x1AE0		struct _LIST_ENTRY[32] DispatcherReadyListHead
0x1B60	void * ChainedInterruptList
0x1B64	long LookasideIrpFloat
0x1B68	volatile long MmPageFaultCount
0x1B6C	volatile long MmCopyOnWriteCount
0x1B70	volatile long MmTransitionCount
0x1B74	volatile long MmCacheTransitionCount
0x1B78	volatile long MmDemandZeroCount
0x1B7C	volatile long MmPageReadCount
0x1B80	volatile long MmPageReadIoCount
0x1B84	volatile long MmCacheReadCount
0x1B88	volatile long MmCacheIoCount
0x1B8C	volatile long MmDirtyPagesWriteCount
0x1B90	volatile long MmDirtyWriteIoCount
0x1B94	volatile long MmMappedPagesWriteCount
0x1B98	volatile long MmMappedWriteIoCount
0x1B9C	volatile unsigned long CachedCommit
0x1BA0	volatile unsigned long CachedResidentAvailable
0x1BA4	void * HyperPte
0x1BA8	uint8_t CpuVendor
0x1BA9	uint8_t[3] PrcbPad9
0x1BAC	uint8_t[13] VendorString
0x1BB9	uint8_t InitialApicId
0x1BBA	uint8_t CoresPerPhysicalProcessor
0x1BBB	uint8_t LogicalProcessorsPerPhysicalProcessor
0x1BBC	unsigned long MHz
0x1BC0	unsigned long FeatureBits
0x1BC8	union _LARGE_INTEGER UpdateSignature
0x1BD0	volatile uint64_t IsrTime
0x1BD8	uint64_t SpareField1
0x1BE0	struct _FX_SAVE_AREA NpxSaveArea	void * ChainedInterruptList
0x1BE4		long LookasideIrpFloat
0x1BE8		volatile long MmPageFaultCount
0x1BEC		volatile long MmCopyOnWriteCount
0x1BF0		volatile long MmTransitionCount
0x1BF4		volatile long MmCacheTransitionCount
0x1BF8		volatile long MmDemandZeroCount
0x1BFC		volatile long MmPageReadCount
0x1C00		volatile long MmPageReadIoCount
0x1C04		volatile long MmCacheReadCount
0x1C08		volatile long MmCacheIoCount
0x1C0C		volatile long MmDirtyPagesWriteCount
0x1C10		volatile long MmDirtyWriteIoCount
0x1C14		volatile long MmMappedPagesWriteCount
0x1C18		volatile long MmMappedWriteIoCount
0x1C1C		volatile unsigned long CachedCommit
0x1C20		volatile unsigned long CachedResidentAvailable
0x1C24		void * HyperPte
0x1C28		uint8_t CpuVendor
0x1C29		uint8_t[3] PrcbPad8
0x1C2C		uint8_t[13] VendorString
0x1C39		uint8_t InitialApicId
0x1C3A		uint8_t LogicalProcessorsPerPhysicalProcessor
0x1C3B		uint8_t[5] PrcbPad9
0x1C40		unsigned long FeatureBits
0x1C48		union _LARGE_INTEGER UpdateSignature
0x1C50		volatile uint64_t IsrTime
0x1C58		uint64_t SpareField1
0x1C60		struct _FX_SAVE_AREA NpxSaveArea
0x1DF0	struct _PROCESSOR_POWER_STATE PowerState
0x1E70		struct _PROCESSOR_POWER_STATE PowerState
0x1ED0	struct _KDPC DpcWatchdogDpc
0x1EF0	struct _KTIMER DpcWatchdogTimer
0x1F18	void * WheaInfo
0x1F1C	void * EtwSupport
0x1F20	union _SLIST_HEADER InterruptObjectPool
0x1F28	union _LARGE_INTEGER HypercallPagePhysical
0x1F30	void * HypercallPageVirtual
0x1F34	void * RateControl
0x1F38	struct _CACHE_DESCRIPTOR[5] Cache	struct _KDPC DpcWatchdogDpc
0x1F58		struct _KTIMER DpcWatchdogTimer
0x1F74	unsigned long CacheCount
0x1F78	unsigned long[5] CacheProcessorMask
0x1F80		void * WheaInfo
0x1F84		void * EtwSupport
0x1F88		union _SLIST_HEADER InterruptObjectPool
0x1F8C	uint8_t LogicalProcessorsPerCore
0x1F8D	uint8_t[3] PrcbPad8
0x1F90	unsigned long PackageProcessorSet	union _SLIST_HEADER HypercallPageList
0x1F94	unsigned long CoreProcessorSet
0x1F98		void * HypercallPageVirtual
0x1F9C		void * VirtualApicAssist
0x1FA0		uint64_t * StatisticsPage
0x1FA4		void * RateControl
0x1FA8		struct _CACHE_DESCRIPTOR[5] Cache
0x1FE4		unsigned long CacheCount
0x1FE8		unsigned long[5] CacheProcessorMask
0x1FFC		unsigned long PackageProcessorSet
0x2000		unsigned long CoreProcessorSet
0x2120			volatile unsigned long PacketBarrier						volatile long PacketBarrier
0x2124			volatile long ReverseStall
0x2128			void * IpiFrame
0x212C			uint8_t[52] PrcbPad3
0x2160			void * volatile[3] CurrentPacket
0x216C			volatile unsigned long TargetSet
0x2170			function * volatile WorkerRoutine
0x2174			volatile unsigned long IpiFrozen
0x2178			uint8_t[40] PrcbPad4
0x21A0			volatile unsigned long RequestSummary
0x21A4			struct _KPRCB * volatile SignalDone						volatile long TargetCount
0x21A8			uint8_t[56] PrcbPad50	uint8_t[48] PrcbPad50		uint8_t[40] PrcbPad50
0x21D0						unsigned long InterruptLastCount
0x21D4						unsigned long InterruptRate
0x21D8				unsigned long InterruptLastCount		unsigned long DeviceInterrupts
0x21DC				unsigned long InterruptRate		void * IsrDpcStats
0x21E0			struct _KDPC_DATA[2] DpcData			struct _KDPC_DATA[2] DpcData
0x2208			void * DpcStack
0x220C			long MaximumDpcQueueDepth
0x2210			unsigned long DpcRequestRate			void * DpcStack
0x2214			unsigned long MinimumDpcRate			long MaximumDpcQueueDepth
0x2218			unsigned long DpcLastCount			unsigned long DpcRequestRate
0x221C			unsigned long PrcbLock			unsigned long MinimumDpcRate
0x2220			struct _KGATE DpcGate			unsigned long DpcLastCount
0x2224						unsigned long PrcbLock
0x2228						struct _KGATE DpcGate
0x2230			uint8_t ThreadDpcEnable
0x2231			volatile uint8_t QuantumEnd
0x2232			volatile uint8_t DpcRoutineActive
0x2233			volatile uint8_t IdleSchedule
0x2234			volatile long DpcRequestSummary
0x2234			int16_t[2] DpcRequestSlot
0x2234			int16_t NormalDpcState	int16_t NormalDpcState
0x2234:0x00				unsigned long DpcNormalProcessingActive
0x2234:0x01				unsigned long DpcNormalProcessingRequested
0x2234:0x02				unsigned long DpcNormalThreadSignal
0x2234:0x03				unsigned long DpcNormalTimerExpiration
0x2234:0x04				unsigned long DpcNormalDpcPresent
0x2234:0x05				unsigned long DpcNormalLocalInterrupt
0x2234:0x06				unsigned long DpcNormalSpare
0x2236:0x00			volatile uint16_t DpcThreadActive	int16_t ThreadDpcState
0x2236			int16_t ThreadDpcState	unsigned long DpcThreadActive
0x2234:0x11				unsigned long DpcThreadRequested
0x2234:0x12				unsigned long DpcThreadSpare
0x2238			volatile unsigned long TimerHand	unsigned long LastTimerHand		uint8_t ThreadDpcEnable			uint8_t IdleState
0x2239						volatile uint8_t QuantumEnd
0x223A						volatile uint8_t DpcRoutineActive
0x223B						volatile uint8_t IdleSchedule
0x223C			unsigned long LastTick			volatile long DpcRequestSummary
0x223C						int16_t[2] DpcRequestSlot
0x223C						int16_t NormalDpcState
0x223C:0x00						unsigned long DpcNormalProcessingActive
0x223C:0x01						unsigned long DpcNormalProcessingRequested
0x223C:0x02						unsigned long DpcNormalThreadSignal
0x223C:0x03						unsigned long DpcNormalTimerExpiration
0x223C:0x04	unsigned long DpcNormalDpcPresent
0x223C:0x05	unsigned long DpcNormalLocalInterrupt
0x223C:0x06	unsigned long DpcNormalSpare
0x223E	int16_t ThreadDpcState
0x223C:0x10	unsigned long DpcThreadActive
0x223C:0x11	unsigned long DpcThreadRequested
0x223C:0x12	unsigned long DpcThreadSpare
0x2240	long MasterOffset	unsigned long PeriodicCount		unsigned long LastTimerHand
0x2244	unsigned long PeriodicCount	unsigned long PeriodicBias		unsigned long LastTick
0x2248	unsigned long PeriodicBias	unsigned long ClockInterrupts		unsigned long PeriodicCount
0x224C	unsigned long ClockInterrupts	unsigned long ReadyScanTick		unsigned long PeriodicBias
0x2250	unsigned long ReadyScanTick	uint8_t BalanceState		unsigned long ClockInterrupts
0x2251		uint8_t GroupSchedulingOverQuota
0x2252		uint8_t[10] PrcbPad41
0x2254	uint8_t BalanceState			unsigned long ReadyScanTick
0x2255	uint8_t GroupSchedulingOverQuota
0x2256	uint8_t[6] PrcbPad41
0x2258				uint8_t GroupSchedulingOverQuota
0x2259				uint8_t[3] PrcbPad41			uint8_t ThreadDpcEnable
0x225A							uint8_t[2] PrcbPad41
0x2260	struct _KTIMER_TABLE TimerTable
0x31A0								struct _KDPC CallDpc
0x31C0								long ClockKeepAlive
0x31C4								uint8_t ClockCheckSlot
0x31C5								uint8_t ClockPollCycle
0x31C6								uint8_t[2] PrcbPad6
0x31C8								long DpcWatchdogPeriod
0x31CC								long DpcWatchdogCount
0x31D0								long ThreadWatchdogPeriod
0x31D4								long ThreadWatchdogCount
0x31D8								volatile long KeSpinLockOrdering
0x31DC								unsigned long[1] PrcbPad70
0x31E0								struct _LIST_ENTRY WaitListHead
0x31E8								unsigned long WaitLock
0x31EC								unsigned long ReadySummary
0x31F0								unsigned long QueueIndex
0x31F4								struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x31F8								uint64_t StartCycles
0x3200								volatile uint64_t CycleTime
0x3208								volatile unsigned long HighCycleTime
0x320C								unsigned long PrcbPad71
0x3210								uint64_t[2] PrcbPad72
0x3220								struct _LIST_ENTRY[32] DispatcherReadyListHead
0x3320								void * ChainedInterruptList
0x3324								long LookasideIrpFloat
0x3328								volatile long MmPageFaultCount
0x332C								volatile long MmCopyOnWriteCount
0x3330								volatile long MmTransitionCount
0x3334								volatile long MmCacheTransitionCount
0x3338								volatile long MmDemandZeroCount
0x333C								volatile long MmPageReadCount
0x3340								volatile long MmPageReadIoCount
0x3344								volatile long MmCacheReadCount
0x3348								volatile long MmCacheIoCount
0x334C								volatile long MmDirtyPagesWriteCount
0x3350								volatile long MmDirtyWriteIoCount
0x3354								volatile long MmMappedPagesWriteCount
0x3358								volatile long MmMappedWriteIoCount
0x335C								volatile unsigned long CachedCommit
0x3360								volatile unsigned long CachedResidentAvailable
0x3364								void * HyperPte
0x3368								uint8_t[4] PrcbPad8
0x336C								uint8_t[13] VendorString
0x3379								uint8_t InitialApicId
0x337A								uint8_t LogicalProcessorsPerPhysicalProcessor
0x337B								uint8_t[5] PrcbPad9
0x3380								unsigned long FeatureBits
0x3388								union _LARGE_INTEGER UpdateSignature
0x3390								volatile uint64_t IsrTime
0x3398								uint64_t RuntimeAccumulation
0x33A0								struct _PROCESSOR_POWER_STATE PowerState
0x3468								struct _KDPC DpcWatchdogDpc
0x3488								struct _KTIMER DpcWatchdogTimer
0x34B0								void * WheaInfo
0x34B4								void * EtwSupport
0x34B8								union _SLIST_HEADER InterruptObjectPool
0x34C0								union _SLIST_HEADER HypercallPageList
0x34C8								void * HypercallPageVirtual
0x34CC								void * VirtualApicAssist
0x34D0								uint64_t * StatisticsPage
0x34D4								void * RateControl
0x34D8								struct _CACHE_DESCRIPTOR[5] Cache
0x3514								unsigned long CacheCount
0x3518								unsigned long[5] CacheProcessorMask
0x352C	struct _KAFFINITY_EX PackageProcessorSet
0x3538	unsigned long[1] PrcbPad91
0x353C	unsigned long CoreProcessorSet
0x3540	struct _KDPC TimerExpirationDpc
0x3560	unsigned long SpinLockAcquireCount
0x3564	unsigned long SpinLockContentionCount
0x3568	unsigned long SpinLockSpinCount
0x356C	unsigned long IpiSendRequestBroadcastCount
0x3570	unsigned long IpiSendRequestRoutineCount
0x3574	unsigned long IpiSendSoftwareInterruptCount
0x3578	unsigned long ExInitializeResourceCount
0x357C	unsigned long ExReInitializeResourceCount
0x3580	unsigned long ExDeleteResourceCount
0x3584	unsigned long ExecutiveResourceAcquiresCount
0x3588	unsigned long ExecutiveResourceContentionsCount
0x358C	unsigned long ExecutiveResourceReleaseExclusiveCount
0x3590	unsigned long ExecutiveResourceReleaseSharedCount
0x3594	unsigned long ExecutiveResourceConvertsCount
0x3598	unsigned long ExAcqResExclusiveAttempts
0x359C	unsigned long ExAcqResExclusiveAcquiresExclusive
0x35A0	unsigned long ExAcqResExclusiveAcquiresExclusiveRecursive
0x35A4	unsigned long ExAcqResExclusiveWaits
0x35A8	unsigned long ExAcqResExclusiveNotAcquires
0x35AC	unsigned long ExAcqResSharedAttempts
0x35B0	unsigned long ExAcqResSharedAcquiresExclusive
0x35B4	unsigned long ExAcqResSharedAcquiresShared
0x35B8	unsigned long ExAcqResSharedAcquiresSharedRecursive
0x35BC	unsigned long ExAcqResSharedWaits
0x35C0	unsigned long ExAcqResSharedNotAcquires
0x35C4	unsigned long ExAcqResSharedStarveExclusiveAttempts
0x35C8	unsigned long ExAcqResSharedStarveExclusiveAcquiresExclusive
0x35CC	unsigned long ExAcqResSharedStarveExclusiveAcquiresShared
0x35D0	unsigned long ExAcqResSharedStarveExclusiveAcquiresSharedRecursive
0x35D4	unsigned long ExAcqResSharedStarveExclusiveWaits
0x35D8	unsigned long ExAcqResSharedStarveExclusiveNotAcquires
0x35DC	unsigned long ExAcqResSharedWaitForExclusiveAttempts
0x35E0	unsigned long ExAcqResSharedWaitForExclusiveAcquiresExclusive
0x35E4	unsigned long ExAcqResSharedWaitForExclusiveAcquiresShared
0x35E8	unsigned long ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive
0x35EC	unsigned long ExAcqResSharedWaitForExclusiveWaits
0x35F0	unsigned long ExAcqResSharedWaitForExclusiveNotAcquires
0x35F4	unsigned long ExSetResOwnerPointerExclusive
0x35F8	unsigned long ExSetResOwnerPointerSharedNew
0x35FC	unsigned long ExSetResOwnerPointerSharedOld
0x3600	unsigned long ExTryToAcqExclusiveAttempts
0x3604	unsigned long ExTryToAcqExclusiveAcquires
0x3608	unsigned long ExBoostExclusiveOwner
0x360C	unsigned long ExBoostSharedOwners
0x3610	unsigned long ExEtwSynchTrackingNotificationsCount
0x3614	unsigned long ExEtwSynchTrackingNotificationsAccountedCount
0x3618	struct _CONTEXT * Context
0x361C	unsigned long ContextFlags
0x3620	struct _XSAVE_AREA * ExtendedState
0x3AA0		struct _KDPC CallDpc
0x3AC0		long ClockKeepAlive
0x3AC4		uint8_t[4] PrcbPad6
0x3AC8		long DpcWatchdogPeriod
0x3ACC		long DpcWatchdogCount
0x3AD0		long ThreadWatchdogPeriod	volatile long KeSpinLockOrdering
0x3AD4		long ThreadWatchdogCount	unsigned long[1] PrcbPad70
0x3AD8		volatile long KeSpinLockOrdering	unsigned long QueueIndex
0x3ADC		unsigned long[1] PrcbPad70	struct _SINGLE_LIST_ENTRY DeferredReadyListHead
0x3AE0		struct _LIST_ENTRY WaitListHead			unsigned long ReadySummary
0x3AE4					long AffinitizedSelectionMask
0x3AE8		unsigned long WaitLock
0x3AEC		unsigned long ReadySummary			struct _LIST_ENTRY WaitListHead
0x3AF0		unsigned long QueueIndex	unsigned long ReadyQueueWeight
0x3AF4		struct _SINGLE_LIST_ENTRY DeferredReadyListHead	struct _KPRCB * BuddyPrcb		unsigned long ScbOffset
0x3AF8		uint64_t StartCycles
0x3B00		uint64_t GenerationTarget						uint64_t TaggedCyclesStart
0x3B08		volatile uint64_t CycleTime						uint64_t[2] TaggedCycles
0x3B10		volatile unsigned long HighCycleTime			uint64_t AffinitizedCycles
0x3B14		unsigned long ScbOffset
0x3B18		uint64_t AffinitizedCycles			volatile unsigned long HighCycleTime			uint64_t GenerationTarget
0x3B1C					unsigned long PrcbPad71
0x3B20		struct _LIST_ENTRY[32] DispatcherReadyListHead						volatile uint64_t CycleTime
0x3B28								uint64_t AffinitizedCycles
0x3B30								volatile unsigned long HighCycleTime
0x3B38								uint64_t[2][4] Cycles
0x3B78								unsigned long[10] PrcbPad71
0x3BA0								struct _LIST_ENTRY[32] DispatcherReadyListHead
0x3C20		void * ChainedInterruptList
0x3C24		long LookasideIrpFloat
0x3C28		struct _RTL_RB_TREE ScbQueue
0x3C30		struct _LIST_ENTRY ScbList
0x3C38		volatile long MmPageFaultCount
0x3C3C		volatile long MmCopyOnWriteCount
0x3C40		volatile long MmTransitionCount
0x3C44		volatile long MmCacheTransitionCount
0x3C48		volatile long MmDemandZeroCount
0x3C4C		volatile long MmPageReadCount
0x3C50		volatile long MmPageReadIoCount
0x3C54		volatile long MmCacheReadCount
0x3C58		volatile long MmCacheIoCount
0x3C5C		volatile long MmDirtyPagesWriteCount
0x3C60		volatile long MmDirtyWriteIoCount
0x3C64		volatile long MmMappedPagesWriteCount
0x3C68		volatile long MmMappedWriteIoCount
0x3C6C		volatile unsigned long CachedCommit
0x3C70		volatile unsigned long CachedResidentAvailable
0x3C74		void * HyperPte
0x3C78		uint8_t[4] PrcbPad8
0x3C7C		uint8_t[13] VendorString
0x3C89		uint8_t InitialApicId
0x3C8A		uint8_t LogicalProcessorsPerPhysicalProcessor
0x3C8B		uint8_t[5] PrcbPad9
0x3C90		unsigned long FeatureBits
0x3C98		union _LARGE_INTEGER UpdateSignature
0x3CA0		volatile uint64_t IsrTime						void * ChainedInterruptList
0x3CA4								long LookasideIrpFloat
0x3CA8		unsigned long Stride			unsigned long[2] PrcbPad90			struct _RTL_RB_TREE ScbQueue
0x3CAC		unsigned long PrcbPad90
0x3CB0		struct _PROCESSOR_POWER_STATE PowerState	struct _PROCESSOR_POWER_STATE PowerState	struct _PROCESSOR_POWER_STATE PowerState	struct _PROCESSOR_POWER_STATE PowerState			struct _LIST_ENTRY ScbList
0x3CB8								volatile long MmPageFaultCount
0x3CBC								volatile long MmCopyOnWriteCount
0x3CC0								volatile long MmTransitionCount
0x3CC4								volatile long MmCacheTransitionCount
0x3CC8	volatile long MmDemandZeroCount
0x3CCC	volatile long MmPageReadCount
0x3CD0	volatile long MmPageReadIoCount
0x3CD4	volatile long MmCacheReadCount
0x3CD8	volatile long MmCacheIoCount
0x3CDC	volatile long MmDirtyPagesWriteCount
0x3CE0	volatile long MmDirtyWriteIoCount
0x3CE4	volatile long MmMappedPagesWriteCount
0x3CE8	volatile long MmMappedWriteIoCount
0x3CEC	volatile unsigned long CachedCommit
0x3CF0	volatile unsigned long CachedResidentAvailable
0x3CF4	void * HyperPte
0x3CF8	uint8_t[4] PrcbPad8
0x3CFC	uint8_t[13] VendorString
0x3D09	uint8_t InitialApicId
0x3D0A	uint8_t LogicalProcessorsPerPhysicalProcessor
0x3D0B	uint8_t[1] PrcbPad9
0x3D10	uint64_t FeatureBits
0x3D18	union _LARGE_INTEGER UpdateSignature
0x3D20	volatile uint64_t IsrTime
0x3D28	unsigned long[2] PrcbPad90
0x3D30	struct _PROCESSOR_POWER_STATE PowerState
0x3DE0		unsigned long[6] PrcbPad91
0x3DF8		struct _KDPC DpcWatchdogDpc
0x3E18		struct _KTIMER DpcWatchdogTimer
0x3E30				unsigned long[1] PrcbPad91
0x3E34				struct _KDPC DpcWatchdogDpc
0x3E40		void * WheaInfo			unsigned long[13] PrcbPad91
0x3E44		void * EtwSupport
0x3E48		union _SLIST_HEADER InterruptObjectPool	unsigned long[11] PrcbPad91
0x3E50		union _SLIST_HEADER HypercallPageList
0x3E58		void * HypercallPageVirtual		struct _KTIMER DpcWatchdogTimer
0x3E5C		void * VirtualApicAssist
0x3E60		uint64_t * StatisticsPage
0x3E64		void * RateControl
0x3E68		struct _CACHE_DESCRIPTOR[5] Cache
0x3E74			struct _KDPC DpcWatchdogDpc		struct _KDPC DpcWatchdogDpc
0x3E80				union _SLIST_HEADER HypercallPageList
0x3E88				void * HypercallPageVirtual
0x3E8C				void * VirtualApicAssist
0x3E90				uint64_t * StatisticsPage
0x3E94				struct _CACHE_DESCRIPTOR[5] Cache
0x3E98			struct _KTIMER DpcWatchdogTimer		struct _KTIMER DpcWatchdogTimer
0x3EA4		unsigned long CacheCount
0x3EA8		unsigned long[5] CacheProcessorMask
0x3EB0	unsigned long[17] PrcbPad91
0x3EBC		struct _KAFFINITY_EX PackageProcessorSet
0x3EC0			union _SLIST_HEADER HypercallPageList		union _SLIST_HEADER HypercallPageList
0x3EC8		struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea	void * HypercallPageVirtual		void * HypercallPageVirtual
0x3ECC		void * ProfileEventIndexAddress	void * VirtualApicAssist		void * VirtualApicAssist
0x3ED0		unsigned long[11] PrcbPad92	uint64_t * StatisticsPage	unsigned long CacheCount	uint64_t * StatisticsPage
0x3ED4			struct _CACHE_DESCRIPTOR[5] Cache	struct _KAFFINITY_EX PackageProcessorSet	struct _CACHE_DESCRIPTOR[5] Cache
0x3EE0				unsigned long[5] CacheProcessorMask
0x3EF4	unsigned long ScanSiblingMask			struct _KDPC DpcWatchdogDpc
0x3EF8	unsigned long CoreProcessorSet
0x3EFC	unsigned long CoreProcessorSet	unsigned long ScanSiblingIndex
0x3F00	struct _KDPC TimerExpirationDpc	unsigned long LLCLevel
0x3F04		void * WheaInfo
0x3F08		void * EtwSupport
0x3F10		unsigned long CacheCount	union _SLIST_HEADER InterruptObjectPool		unsigned long CacheCount
0x3F14		struct _KAFFINITY_EX PackageProcessorSet		struct _KAFFINITY_EX PackageProcessorSet
0x3F18			unsigned long[8] PrcbPad92				struct _KTIMER DpcWatchdogTimer
0x3F20	struct _SYNCH_COUNTERS SynchCounters	unsigned long[5] CacheProcessorMask		unsigned long SharedReadyQueueMask
0x3F24				struct _KSHARED_READY_QUEUE * SharedReadyQueue
0x3F28				unsigned long CoreProcessorSet
0x3F2C				unsigned long ScanSiblingMask
0x3F30				unsigned long LLCMask
0x3F34		unsigned long ScanSiblingMask		unsigned long[5] CacheProcessorMask
0x3F38		unsigned long CoreProcessorSet	struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea
0x3F3C		unsigned long ScanSiblingIndex	void * ProfileEventIndexAddress
0x3F40		unsigned long LLCLevel	struct _KDPC TimerExpirationDpc				union _SLIST_HEADER HypercallPageList
0x3F44		void * WheaInfo
0x3F48		void * EtwSupport		unsigned long ScanSiblingIndex			void * HypercallCachedPages
0x3F4C				void * WheaInfo			void * VirtualApicAssist
0x3F50		union _SLIST_HEADER InterruptObjectPool		void * EtwSupport			uint64_t * StatisticsPage
0x3F54							struct _CACHE_DESCRIPTOR[5] Cache
0x3F58		unsigned long[8] PrcbPad92		union _SLIST_HEADER InterruptObjectPool
0x3F60			struct _SYNCH_COUNTERS SynchCounters	unsigned long SharedReadyQueueOffset
0x3F64				unsigned long[2] PrcbPad92
0x3F6C				unsigned long PteBitCache
0x3F70				unsigned long PteBitOffset
0x3F74				unsigned long PrcbPad93
0x3F78		struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea		struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea
0x3F7C		void * ProfileEventIndexAddress		void * ProfileEventIndexAddress
0x3F80		struct _KDPC TimerExpirationDpc		struct _KDPC TimerExpirationDpc
0x3F90							unsigned long CacheCount
0x3F94							struct _KAFFINITY_EX PackageProcessorSet
0x3FA0		struct _SYNCH_COUNTERS SynchCounters		struct _SYNCH_COUNTERS SynchCounters			unsigned long SharedReadyQueueMask
0x3FA4							struct _KSHARED_READY_QUEUE * SharedReadyQueue
0x3FA8							unsigned long SharedQueueScanOwner
0x3FAC							unsigned long CoreProcessorSet
0x3FB0							unsigned long ScanSiblingMask
0x3FB4							unsigned long LLCMask
0x3FB8							unsigned long[5] CacheProcessorMask
0x3FCC							unsigned long ScanSiblingIndex
0x3FD0							void * WheaInfo
0x3FD4							void * EtwSupport
0x3FD8	struct _CONTEXT * Context						union _SLIST_HEADER InterruptObjectPool
0x3FDC	unsigned long ContextFlags
0x3FE0	struct _XSAVE_AREA * ExtendedState						unsigned long[3] PrcbPad92
0x3FE8	struct _ENTROPY_TIMING_STATE EntropyTimingState
0x3FEC							unsigned long PteBitCache
0x3FF0							unsigned long PteBitOffset
0x3FF4							unsigned long PrcbPad93
0x3FF8							struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea
0x3FFC							void * ProfileEventIndexAddress
0x4000							struct _KDPC TimerExpirationDpc
0x4018			struct _FILESYSTEM_DISK_COUNTERS FsCounters
0x4020							struct _SYNCH_COUNTERS SynchCounters
0x4028			struct _CONTEXT * Context
0x402C			unsigned long ContextFlagsInit
0x4030			struct _XSAVE_AREA * ExtendedState
0x4034			struct _KENTROPY_TIMING_STATE EntropyTimingState
0x4058		struct _FILESYSTEM_DISK_COUNTERS FsCounters		struct _FILESYSTEM_DISK_COUNTERS FsCounters
0x4068		struct _CONTEXT * Context		struct _CONTEXT * Context
0x406C		unsigned long ContextFlagsInit		unsigned long ContextFlagsInit
0x4070		struct _XSAVE_AREA * ExtendedState		struct _XSAVE_AREA * ExtendedState
0x4074		struct _KENTROPY_TIMING_STATE EntropyTimingState		struct _KENTROPY_TIMING_STATE EntropyTimingState
0x40D8							struct _FILESYSTEM_DISK_COUNTERS FsCounters
0x40E8							struct _CONTEXT * Context
0x40EC							unsigned long ContextFlagsInit
0x40F0							struct _XSAVE_AREA * ExtendedState
0x40F4							struct _KENTROPY_TIMING_STATE EntropyTimingState
0x419C				void * IsrStack
0x41A0				struct _KINTERRUPT *[208] VectorToInterruptObject
0x421C							void * IsrStack
0x4220							struct _KINTERRUPT *[208] VectorToInterruptObject
0x44E0				struct _SINGLE_LIST_ENTRY AbSelfIoBoostsList
0x44E4				struct _SINGLE_LIST_ENTRY AbPropagateBoostsList
0x44E8				struct _KDPC AbDpc
0x4508					struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace	struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent
0x455C						struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious
0x4560							struct _SINGLE_LIST_ENTRY AbSelfIoBoostsList
0x4564							struct _SINGLE_LIST_ENTRY AbPropagateBoostsList
0x4568							struct _KDPC AbDpc
0x4588							struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent
0x45B0						struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace
0x45DC							struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious
0x4608					unsigned long TimerExpirationTraceCount
0x4630							struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace
0x46B0						unsigned long TimerExpirationTraceCount
0x4730							unsigned long TimerExpirationTraceCount
0x4734							void * ExSaPageArray
0x4738							unsigned long[10] PrcbPad100
0x4760							struct _KSHARED_READY_QUEUE LocalSharedReadyQueue
0x4894							uint8_t[12] PrcbPad95
0x48A0							struct _REQUEST_MAILBOX * Mailbox
0x48A4							uint8_t[60] PrcbPad
0x48E0							struct _REQUEST_MAILBOX[1] RequestMailbox