Min versionXPXP SP22003/XP642003/XP64 SP1VistaVista SP178 Pre RTM8 Pre RTM88.1 Update 110
Max versionXP SP1XP SP32003/XP64 SP2Vista SP27 SP1
x86 offset
offset:bitpos
Field Name
0x0000struct _DISPATCHER_HEADER
Header
0x0010struct _LIST_ENTRY
ProfileListHead
0x0018unsigned long[2]
DirectoryTableBase
unsigned long
DirectoryTableBase
0x001Cunsigned long
Unused0
struct _KGDTENTRY
LdtDescriptor
0x0020struct _KGDTENTRY
LdtDescriptor
0x0024struct _KIDTENTRY
Int21Descriptor
0x0028struct _KIDTENTRY
Int21Descriptor
0x002Cstruct _LIST_ENTRY
ThreadListHead
0x0030uint16_t
IopmOffset
0x0032uint8_t
Iopl
uint8_t
Unused1
0x0033uint8_t
Unused
uint8_t
Unused2
0x0034unsigned long
ActiveProcessors
volatile unsigned long
ActiveProcessors
unsigned long
ProcessLock
0x0038unsigned long
KernelTime
struct _KAFFINITY_EX
Affinity
uint64_t
DeepFreezeStartTime
0x003Cunsigned long
UserTime
0x0040struct _LIST_ENTRY
ReadyListHead
struct _KAFFINITY_EX
Affinity
0x0044struct _LIST_ENTRY
ReadyListHead
0x0048struct _SINGLE_LIST_ENTRY
SwapListEntry
0x004Cvoid *
VdmTrapcHandler
struct _SINGLE_LIST_ENTRY
SwapListEntry
struct _LIST_ENTRY
ReadyListHead
0x0050struct _LIST_ENTRY
ThreadListHead
volatile struct _KAFFINITY_EX
ActiveProcessors
0x0054struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0058unsigned long
ProcessLock
volatile struct _KAFFINITY_EX
ActiveProcessors
0x005Cunsigned long
Affinity
volatile long
AutoAlignment
long
AutoAlignment
0x005Cvolatile long
ProcessFlags
0x005C:0x01volatile long
DisableBoost
long
DisableBoost
0x005C:0x02volatile long
DisableQuantum
long
DisableQuantum
0x005C:0x03volatile unsigned long
ActiveGroupsMask
volatile long
AffinitySet
long
AffinitySet
0x005C:0x04volatile long
ReservedFlags
volatile unsigned long
DeepFreeze
unsigned long
DeepFreeze
0x005C:0x05volatile unsigned long
IdleAware
unsigned long
TimerVirtualization
0x005C:0x06unsigned long
TimerVirtualization
unsigned long
ActiveGroupsMask
unsigned long
CheckStackExtents
0x005C:0x07volatile unsigned long
ActiveGroupsMask
long
ReservedFlags
unsigned long
ActiveGroupsMask
0x005C:0x08volatile long
ReservedFlags
long
ReservedFlags
0x0060uint16_t
StackCount
long
AutoAlignment
volatile long
AutoAlignment
char
BasePriority
0x0060long
ProcessFlags
volatile long
ProcessFlags
0x0060:0x01long
DisableBoost
volatile long
DisableBoost
0x0060:0x02long
DisableQuantum
volatile long
DisableQuantum
0x0060:0x03long
ReservedFlags
volatile long
ReservedFlags
0x0061char
QuantumReset
0x0062char
BasePriority
uint8_t
Visited
0x0063char
ThreadQuantum
uint8_t
Unused3
union _KEXECUTE_OPTIONS
Flags
0x0064uint8_t
AutoAlignment
char
BasePriority
unsigned long[1]
ThreadSeed
long
AutoAlignment
0x0064volatile long
ProcessFlags
0x0064:0x01long
DisableBoost
0x0064:0x02long
DisableQuantum
0x0064:0x03unsigned long
DeepFreeze
0x0064:0x04unsigned long
TimerVirtualization
0x0064:0x05unsigned long
CheckStackExtents
0x0064:0x06unsigned long
SpareFlags0
0x0065uint8_t
State
char
QuantumReset
unsigned long
ActiveGroupsMask
0x0064:0x09long
ReservedFlags
0x0066uint8_t
ThreadSeed
uint8_t
State
0x0067uint8_t
DisableBoost
uint8_t
ThreadSeed
0x0068uint8_t
PowerState
uint16_t[1]
IdealNode
char
BasePriority
0x0069uint8_t
DisableQuantum
uint8_t
IdealNode
char
QuantumReset
0x006Auint8_t
IdealNode
uint8_t
Visited
uint16_t
IdealGlobalNode
uint8_t
Visited
0x006Buint8_t
Spare
struct _KEXECUTE_OPTIONS
Flags
uint8_t
Spare
struct _KEXECUTE_OPTIONS
Flags
union _KEXECUTE_OPTIONS
Flags
0x006Buint8_t
ExecuteOptions
uint8_t
ExecuteOptions
0x006Cunsigned long
StackCount
union _KEXECUTE_OPTIONS
Flags
uint16_t
Spare0
uint16_t
Spare1
unsigned long[1]
ThreadSeed
0x006Duint8_t
Unused1
0x006Euint16_t
IopmOffset
0x0070struct _LIST_ENTRY
ProcessListEntry
unsigned long
Unused4
unsigned long
Spare1
struct _KSCHEDULING_GROUP * volatile
SchedulingGroup
struct _KSCHEDULING_GROUP *
SchedulingGroup
uint16_t[1]
IdealNode
0x0072uint16_t
IdealGlobalNode
0x0074union _KSTACK_COUNT
StackCount
volatile union _KSTACK_COUNT
StackCount
uint16_t
Spare1
0x0076uint16_t
IopmOffset
0x0078volatile uint64_t
CycleTime
struct _LIST_ENTRY
ProcessListEntry
struct _KSCHEDULING_GROUP *
SchedulingGroup
0x007Cvolatile union _KSTACK_COUNT
StackCount
0x0080volatile uint64_t
CycleTime
uint64_t
CycleTime
struct _LIST_ENTRY
ProcessListEntry
0x0088unsigned long
KernelTime
uint64_t
ContextSwitches
uint64_t
CycleTime
0x008Cunsigned long
UserTime
0x0090void *
VdmTrapcHandler
unsigned long
FreezeCount
uint64_t
ContextSwitches
0x0094unsigned long
KernelTime
0x0098unsigned long
UserTime
unsigned long
FreezeCount
0x009Cvoid *
VdmTrapcHandler
unsigned long
KernelTime
0x00A0unsigned long
UserTime
0x00A4void *
VdmTrapcHandler