Min version2003/XP64 SP1Vista SP178 Pre RTM88.110 Pre RTM10 Pre RTM10
Max version2003/XP64 SP2Vista SP27 SP18.1 Update 110 TH2
x64 offset
offset:bitpos
Field Name
0x0000struct _DISPATCHER_HEADER
Header
0x0018struct _LIST_ENTRY
ProfileListHead
0x0028uint64_t[2]
DirectoryTableBase
uint64_t
DirectoryTableBase
0x0030uint64_t
Unused0
struct _LIST_ENTRY
ThreadListHead
0x0038uint16_t
IopmOffset
0x0040volatile uint64_t
ActiveProcessors
uint64_t
ProcessLock
unsigned long
ProcessLock
0x0044unsigned long
Spare0
0x0048unsigned long
KernelTime
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
uint64_t
DeepFreezeStartTime
0x004Cunsigned long
UserTime
0x0050struct _LIST_ENTRY
ReadyListHead
struct _KAFFINITY_EX
Affinity
0x0060struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0068void *
Reserved1
void *
InstrumentationCallback
0x0070struct _LIST_ENTRY
ThreadListHead
struct _LIST_ENTRY
ReadyListHead
0x0080uint64_t
ProcessLock
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0088uint64_t
Affinity
volatile struct _KAFFINITY_EX
ActiveProcessors
0x0090:0x00long
AutoAlignment
volatile long
AutoAlignment
struct _LIST_ENTRY
ReadyListHead
0x0090long
ProcessFlags
volatile long
ProcessFlags
0x0090:0x01long
DisableBoost
volatile long
DisableBoost
0x0090:0x02long
DisableQuantum
volatile long
DisableQuantum
0x0090:0x03long
ReservedFlags
volatile long
ReservedFlags
0x0094char
BasePriority
0x0095char
QuantumReset
0x0096uint8_t
State
0x0097uint8_t
ThreadSeed
0x0098uint8_t
PowerState
0x0099uint8_t
IdealNode
0x009Auint8_t
Visited
0x009Bstruct _KEXECUTE_OPTIONS
Flags
0x009Buint8_t
ExecuteOptions
0x00A0uint64_t
StackCount
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x00A8struct _LIST_ENTRY
ProcessListEntry
volatile struct _KAFFINITY_EX
ActiveProcessors
0x00B0:0x00volatile long
AutoAlignment
0x00B0volatile long
ProcessFlags
0x00B0:0x01volatile long
DisableBoost
0x00B0:0x02volatile long
DisableQuantum
0x00B0:0x03volatile unsigned long
ActiveGroupsMask
0x00B0:0x07volatile long
ReservedFlags
0x00B4char
BasePriority
0x00B5char
QuantumReset
0x00B6uint8_t
Visited
0x00B7uint8_t
Unused3
0x00B8volatile uint64_t
CycleTime
unsigned long[4]
ThreadSeed
0x00C8uint16_t[4]
IdealNode
0x00D0uint16_t
IdealGlobalNode
0x00D2union _KEXECUTE_OPTIONS
Flags
0x00D3uint8_t
Unused1
0x00D4unsigned long
Unused2
0x00D8unsigned long
Unused4
0x00DCunion _KSTACK_COUNT
StackCount
0x00E0struct _LIST_ENTRY
ProcessListEntry
0x00F0volatile uint64_t
CycleTime
volatile long
AutoAlignment
struct _LIST_ENTRY
ReadyListHead
0x00F0volatile long
ProcessFlags
0x00F0:0x01volatile long
DisableBoost
0x00F0:0x02volatile long
DisableQuantum
0x00F0:0x03volatile long
AffinitySet
0x00F0:0x04volatile unsigned long
DeepFreeze
0x00F0:0x05volatile unsigned long
IdleAware
0x00F0:0x06unsigned long
TimerVirtualization
0x00F0:0x07volatile unsigned long
ActiveGroupsMask
0x00F0:0x0Fvolatile long
ReservedFlags
0x00F4char
BasePriority
0x00F5char
QuantumReset
0x00F6uint8_t
Visited
0x00F7union _KEXECUTE_OPTIONS
Flags
0x00F8unsigned long
KernelTime
unsigned long[8]
ThreadSeed
struct _LIST_ENTRY
ReadyListHead
0x00FCunsigned long
UserTime
0x0100void *
InstrumentationCallback
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0108union _KGDTENTRY64
LdtSystemDescriptor
volatile struct _KAFFINITY_EX
ActiveProcessors
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0110volatile struct _KAFFINITY_EX
ActiveProcessors
0x0118void *
LdtBaseAddress
uint16_t[8]
IdealNode
0x0120struct _KGUARDED_MUTEX
LdtProcessLock
0x0128uint16_t
IdealGlobalNode
0x012Auint16_t
Spare0
0x012Cunion _KSTACK_COUNT
StackCount
0x0130struct _LIST_ENTRY
ProcessListEntry
0x0140volatile uint64_t
CycleTime
0x0148uint64_t
ContextSwitches
0x0150unsigned long
FreezeCount
0x0154unsigned long
KernelTime
0x0158uint16_t
LdtFreeSelectorHint
unsigned long
UserTime
0x015Auint16_t
LdtTableLength
0x015Cuint16_t
LdtFreeSelectorHint
0x015Euint16_t
LdtTableLength
0x0160union _KGDTENTRY64
LdtSystemDescriptor
0x0170void *
LdtBaseAddress
0x0178struct _FAST_MUTEX
LdtProcessLock
0x01B0void *
InstrumentationCallback
long
AutoAlignment
0x01B0volatile long
ProcessFlags
0x01B0:0x01long
DisableBoost
0x01B0:0x02long
DisableQuantum
0x01B0:0x03long
AffinitySet
0x01B0:0x04unsigned long
DeepFreeze
0x01B0:0x05unsigned long
TimerVirtualization
0x01B0:0x06unsigned long
ActiveGroupsMask
unsigned long
CheckStackExtents
0x01B0:0x07unsigned long
ActiveGroupsMask
0x01B0:0x1Along
ReservedFlags
0x01B0:0x1Blong
ReservedFlags
0x01B4char
BasePriority
0x01B5char
QuantumReset
0x01B6uint8_t
Visited
0x01B7union _KEXECUTE_OPTIONS
Flags
0x01B8unsigned long[20]
ThreadSeed
long
AutoAlignment
0x01B8volatile long
ProcessFlags
0x01B8:0x01long
DisableBoost
0x01B8:0x02long
DisableQuantum
0x01B8:0x03long
AffinitySet
unsigned long
DeepFreeze
0x01B8:0x04unsigned long
DeepFreeze
unsigned long
TimerVirtualization
0x01B8:0x05unsigned long
TimerVirtualization
unsigned long
CheckStackExtents
0x01B8:0x06unsigned long
CheckStackExtents
unsigned long
SpareFlags0
0x01B8:0x07unsigned long
SecureProcess
unsigned long
SpareFlags0
0x01B8:0x08unsigned long
ActiveGroupsMask
0x01B8:0x1Clong
ReservedFlags
0x01BCchar
BasePriority
0x01BDchar
QuantumReset
0x01BEuint8_t
Visited
0x01BFunion _KEXECUTE_OPTIONS
Flags
0x01C0unsigned long[20]
ThreadSeed
0x0208uint16_t[20]
IdealNode
0x0210uint16_t[20]
IdealNode
0x0230uint16_t
IdealGlobalNode
0x0232uint16_t
Spare1
0x0234volatile union _KSTACK_COUNT
StackCount
0x0238struct _LIST_ENTRY
ProcessListEntry
uint16_t
IdealGlobalNode
0x023Auint16_t
Spare1
0x023Cvolatile union _KSTACK_COUNT
StackCount
0x0240struct _LIST_ENTRY
ProcessListEntry
0x0248uint64_t
CycleTime
0x0250uint64_t
ContextSwitches
uint64_t
CycleTime
0x0258struct _KSCHEDULING_GROUP *
SchedulingGroup
uint64_t
ContextSwitches
0x0260unsigned long
FreezeCount
struct _KSCHEDULING_GROUP *
SchedulingGroup
0x0264unsigned long
KernelTime
0x0268unsigned long
UserTime
unsigned long
FreezeCount
0x026Cuint16_t
LdtFreeSelectorHint
unsigned long
KernelTime
0x026Euint16_t
LdtTableLength
0x0270union _KGDTENTRY64
LdtSystemDescriptor
unsigned long
UserTime
0x0274uint16_t
LdtFreeSelectorHint
0x0276uint16_t
LdtTableLength
0x0278union _KGDTENTRY64
LdtSystemDescriptor
0x0280void *
LdtBaseAddress
0x0288struct _FAST_MUTEX
LdtProcessLock
void *
LdtBaseAddress
0x0290struct _FAST_MUTEX
LdtProcessLock
0x02C0void *
InstrumentationCallback
0x02C8void *
InstrumentationCallback
0x02D0uint64_t
SecurePid