Min version	2003/XP64 SP1	2003/XP64 SP2	Vista SP1	Vista SP2	7	7 SP1	7 SP1	8 Pre RTM	8	8.1	8.1 Update 1	10 Pre RTM	10 Pre RTM	10	10 TH2
Max version			Vista SP2
x64 offset offset:bitpos	Field Name
0x0000	struct _KTHREAD Tcb	struct _KTHREAD Tcb	struct _KTHREAD Tcb		struct _KTHREAD Tcb		struct _KTHREAD Tcb	struct _KTHREAD Tcb	struct _KTHREAD Tcb	struct _KTHREAD Tcb	struct _KTHREAD Tcb		struct _KTHREAD Tcb
0x0308		union _LARGE_INTEGER CreateTime
0x0310		union _LARGE_INTEGER ExitTime
0x0310		struct _LIST_ENTRY LpcReplyChain
0x0310		struct _LIST_ENTRY KeyedWaitChain
0x0320	union _LARGE_INTEGER CreateTime	long ExitStatus
0x0320		void * OfsChain
0x0328	union _LARGE_INTEGER ExitTime	struct _LIST_ENTRY PostBlockList
0x0328	struct _LIST_ENTRY LpcReplyChain
0x0328	struct _LIST_ENTRY KeyedWaitChain
0x0330			union _LARGE_INTEGER CreateTime
0x0338	long ExitStatus	struct _TERMINATION_PORT * TerminationPort	union _LARGE_INTEGER ExitTime
0x0338	void * OfsChain	struct _ETHREAD * ReaperLink	struct _LIST_ENTRY KeyedWaitChain
0x0338		void * KeyedWaitValue
0x0340	struct _LIST_ENTRY PostBlockList	uint64_t ActiveTimerListLock						union _LARGE_INTEGER CreateTime
0x0348		struct _LIST_ENTRY ActiveTimerListHead	long ExitStatus					union _LARGE_INTEGER ExitTime	union _LARGE_INTEGER CreateTime
0x0348			void * OfsChain					struct _LIST_ENTRY KeyedWaitChain
0x0350	struct _TERMINATION_PORT * TerminationPort		struct _LIST_ENTRY PostBlockList						union _LARGE_INTEGER ExitTime
0x0350	struct _ETHREAD * ReaperLink		void * ForwardLinkShadow						struct _LIST_ENTRY KeyedWaitChain
0x0350	void * KeyedWaitValue
0x0358	uint64_t ActiveTimerListLock	struct _CLIENT_ID Cid	void * StartAddress					void * ChargeOnlySession
0x0360	struct _LIST_ENTRY ActiveTimerListHead		struct _TERMINATION_PORT * TerminationPort		union _LARGE_INTEGER CreateTime			struct _LIST_ENTRY PostBlockList	void * ChargeOnlySession
0x0360			struct _ETHREAD * ReaperLink					void * ForwardLinkShadow
0x0360			void * KeyedWaitValue
0x0360			void * Win32StartParameter
0x0368		struct _KSEMAPHORE LpcReplySemaphore	uint64_t ActiveTimerListLock		union _LARGE_INTEGER ExitTime		union _LARGE_INTEGER CreateTime	void * StartAddress	struct _LIST_ENTRY PostBlockList
0x0368		struct _KSEMAPHORE KeyedWaitSemaphore			struct _LIST_ENTRY KeyedWaitChain				void * ForwardLinkShadow
0x0370	struct _CLIENT_ID Cid		struct _LIST_ENTRY ActiveTimerListHead				union _LARGE_INTEGER ExitTime	struct _TERMINATION_PORT * TerminationPort	void * StartAddress
0x0370							struct _LIST_ENTRY KeyedWaitChain	struct _ETHREAD * ReaperLink
0x0370								void * KeyedWaitValue
0x0378					long ExitStatus			uint64_t ActiveTimerListLock	struct _TERMINATION_PORT * TerminationPort
0x0378									struct _ETHREAD * ReaperLink
0x0378									void * KeyedWaitValue
0x0380	struct _KSEMAPHORE LpcReplySemaphore		struct _CLIENT_ID Cid		struct _LIST_ENTRY PostBlockList		long ExitStatus	struct _LIST_ENTRY ActiveTimerListHead	uint64_t ActiveTimerListLock
0x0380	struct _KSEMAPHORE KeyedWaitSemaphore				void * ForwardLinkShadow
0x0388		void * LpcReplyMessage			void * StartAddress		struct _LIST_ENTRY PostBlockList		struct _LIST_ENTRY ActiveTimerListHead
0x0388		void * LpcWaitingOnPort					void * ForwardLinkShadow
0x0390		struct _PS_IMPERSONATION_INFORMATION * ImpersonationInfo	struct _KSEMAPHORE KeyedWaitSemaphore		struct _TERMINATION_PORT * TerminationPort		void * StartAddress	struct _CLIENT_ID Cid
0x0390			struct _KSEMAPHORE AlpcWaitSemaphore		struct _ETHREAD * ReaperLink
0x0390					void * KeyedWaitValue
0x0398		struct _LIST_ENTRY IrpList			uint64_t ActiveTimerListLock		struct _TERMINATION_PORT * TerminationPort		struct _CLIENT_ID Cid
0x0398							struct _ETHREAD * ReaperLink
0x0398							void * KeyedWaitValue
0x03A0	void * LpcReplyMessage				struct _LIST_ENTRY ActiveTimerListHead		uint64_t ActiveTimerListLock	struct _KSEMAPHORE KeyedWaitSemaphore
0x03A0	void * LpcWaitingOnPort							struct _KSEMAPHORE AlpcWaitSemaphore
0x03A8	struct _PS_IMPERSONATION_INFORMATION * ImpersonationInfo	uint64_t TopLevelIrp					struct _LIST_ENTRY ActiveTimerListHead		struct _KSEMAPHORE KeyedWaitSemaphore
0x03A8									struct _KSEMAPHORE AlpcWaitSemaphore
0x03B0	struct _LIST_ENTRY IrpList	struct _DEVICE_OBJECT * DeviceToVerify	union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity		struct _CLIENT_ID Cid
0x03B8		struct _EPROCESS * ThreadsProcess	struct _LIST_ENTRY IrpList				struct _CLIENT_ID Cid
0x03C0	uint64_t TopLevelIrp	void * StartAddress			struct _KSEMAPHORE KeyedWaitSemaphore			union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity
0x03C0					struct _KSEMAPHORE AlpcWaitSemaphore
0x03C8	struct _DEVICE_OBJECT * DeviceToVerify	void * Win32StartAddress	uint64_t TopLevelIrp				struct _KSEMAPHORE KeyedWaitSemaphore	struct _LIST_ENTRY IrpList	union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity
0x03C8		unsigned long LpcReceivedMessageId					struct _KSEMAPHORE AlpcWaitSemaphore
0x03D0	struct _EPROCESS * ThreadsProcess	struct _LIST_ENTRY ThreadListEntry	struct _DEVICE_OBJECT * DeviceToVerify						struct _LIST_ENTRY IrpList
0x03D8	void * StartAddress		union _PSP_RATE_APC * RateControlApc					uint64_t TopLevelIrp
0x03E0	void * Win32StartAddress	struct _EX_RUNDOWN_REF RundownProtect	void * Win32StartAddress		union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity			struct _DEVICE_OBJECT * DeviceToVerify	uint64_t TopLevelIrp
0x03E0	unsigned long LpcReceivedMessageId
0x03E8	struct _LIST_ENTRY ThreadListEntry	struct _EX_PUSH_LOCK ThreadLock	void * SparePtr0		struct _LIST_ENTRY IrpList		union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity	void * SparePointer	struct _DEVICE_OBJECT * DeviceToVerify
0x03F0		unsigned long LpcReplyMessageId	struct _LIST_ENTRY ThreadListEntry				struct _LIST_ENTRY IrpList	void * Win32StartAddress
0x03F4		unsigned long ReadClusterSize
0x03F8	struct _EX_RUNDOWN_REF RundownProtect	unsigned long GrantedAccess			uint64_t TopLevelIrp			void * LegacyPowerObject
0x03FC		unsigned long CrossThreadFlags
0x03FC:0x00		unsigned long Terminated
0x03FC:0x01		unsigned long DeadThread
0x03FC:0x02		unsigned long HideFromDebugger
0x03FC:0x03		unsigned long ActiveImpersonationInfo
0x03FC:0x04		unsigned long SystemThread
0x03FC:0x05		unsigned long HardErrorsAreDisabled
0x03FC:0x06		unsigned long BreakOnTermination
0x03FC:0x07		unsigned long SkipCreationMsg
0x03FC:0x08		unsigned long SkipTerminationMsg
0x0400	struct _EX_PUSH_LOCK ThreadLock	unsigned long SameThreadPassiveFlags	struct _EX_RUNDOWN_REF RundownProtect		struct _DEVICE_OBJECT * DeviceToVerify		uint64_t TopLevelIrp	struct _LIST_ENTRY ThreadListEntry
0x0400:0x00		unsigned long ActiveExWorker
0x0400:0x01		unsigned long ExWorkerCanWaitUser
0x0400:0x02		unsigned long MemoryMaker
0x0400:0x03		unsigned long KeyedEventInUse
0x0404		unsigned long SameThreadApcFlags
0x0404:0x00		uint8_t LpcReceivedMsgIdValid
0x0404:0x01		uint8_t LpcExitThreadCalled
0x0404:0x02		uint8_t AddressSpaceOwner
0x0404:0x03		uint8_t OwnsProcessWorkingSetExclusive
0x0404:0x04		uint8_t OwnsProcessWorkingSetShared
0x0404:0x05		uint8_t OwnsSystemWorkingSetExclusive
0x0404:0x06		uint8_t OwnsSystemWorkingSetShared
0x0404:0x07		uint8_t OwnsSessionWorkingSetExclusive
0x0405:0x00		uint8_t OwnsSessionWorkingSetShared
0x0405:0x01		uint8_t ApcNeeded
0x0408	unsigned long LpcReplyMessageId	uint8_t ForwardClusterOnly	struct _EX_PUSH_LOCK ThreadLock		union _PSP_CPU_QUOTA_APC * CpuQuotaApc		struct _DEVICE_OBJECT * DeviceToVerify
0x0409		uint8_t DisablePageFaultClustering
0x040A		uint8_t ActiveFaultCount
0x040C	unsigned long ReadClusterSize
0x0410	unsigned long GrantedAccess		unsigned long ReadClusterSize		void * Win32StartAddress		union _PSP_CPU_QUOTA_APC * CpuQuotaApc	struct _EX_RUNDOWN_REF RundownProtect
0x0414	unsigned long CrossThreadFlags		volatile long MmLockOrdering
0x0414:0x00	unsigned long Terminated
0x0414:0x01	unsigned long DeadThread
0x0414:0x02	unsigned long HideFromDebugger
0x0414:0x03	unsigned long ActiveImpersonationInfo
0x0414:0x04	unsigned long SystemThread
0x0414:0x05	unsigned long HardErrorsAreDisabled
0x0414:0x06	unsigned long BreakOnTermination
0x0414:0x07	unsigned long SkipCreationMsg
0x0414:0x08	unsigned long SkipTerminationMsg
0x0418	unsigned long SameThreadPassiveFlags		unsigned long CrossThreadFlags		void * LegacyPowerObject		void * Win32StartAddress	struct _EX_PUSH_LOCK ThreadLock
0x0418:0x00	unsigned long ActiveExWorker		unsigned long Terminated
0x0418:0x01	unsigned long ExWorkerCanWaitUser		unsigned long ThreadInserted
0x0418:0x02	unsigned long MemoryMaker		unsigned long HideFromDebugger
0x0418:0x03	unsigned long KeyedEventInUse		unsigned long ActiveImpersonationInfo
0x0418:0x04			unsigned long SystemThread
0x0418:0x05			unsigned long HardErrorsAreDisabled
0x0418:0x06			unsigned long BreakOnTermination
0x0418:0x07			unsigned long SkipCreationMsg
0x0418:0x08			unsigned long SkipTerminationMsg
0x0418:0x09			unsigned long CopyTokenOnOpen
0x0418:0x0A			unsigned long ThreadIoPriority
0x0418:0x0D			unsigned long ThreadPagePriority
0x0418:0x10			unsigned long RundownFail
0x041C	unsigned long SameThreadApcFlags		unsigned long SameThreadPassiveFlags
0x041C:0x00	uint8_t LpcReceivedMsgIdValid		unsigned long ActiveExWorker
0x041C:0x01	uint8_t LpcExitThreadCalled		unsigned long ExWorkerCanWaitUser
0x041C:0x02	uint8_t AddressSpaceOwner		unsigned long MemoryMaker
0x041C:0x03	uint8_t OwnsProcessWorkingSetExclusive		unsigned long ClonedThread
0x041C:0x04	uint8_t OwnsProcessWorkingSetShared		unsigned long KeyedEventInUse
0x041C:0x05	uint8_t OwnsSystemWorkingSetExclusive		unsigned long RateApcState
0x041C:0x06	uint8_t OwnsSystemWorkingSetShared
0x041C:0x07	uint8_t OwnsSessionWorkingSetExclusive		unsigned long SelfTerminate
0x041D:0x00	uint8_t OwnsSessionWorkingSetShared
0x041D:0x01	uint8_t ApcNeeded
0x0420	uint8_t ForwardClusterOnly		unsigned long SameThreadApcFlags		struct _LIST_ENTRY ThreadListEntry		void * LegacyPowerObject	unsigned long ReadClusterSize
0x0420:0x00			uint8_t Spare
0x0420:0x01			volatile uint8_t StartAddressInvalid
0x0420:0x02			uint8_t EtwPageFaultCalloutActive
0x0420:0x03			uint8_t OwnsProcessWorkingSetExclusive
0x0420:0x04			uint8_t OwnsProcessWorkingSetShared
0x0420:0x05			uint8_t OwnsSystemWorkingSetExclusive
0x0420:0x06			uint8_t OwnsSystemWorkingSetShared
0x0420:0x07			uint8_t OwnsSessionWorkingSetExclusive
0x0421	uint8_t DisablePageFaultClustering		uint8_t OwnsSessionWorkingSetShared
0x0421:0x01			uint8_t OwnsProcessAddressSpaceExclusive
0x0421:0x02			uint8_t OwnsProcessAddressSpaceShared
0x0421:0x03			uint8_t SuppressSymbolLoad
0x0421:0x04			uint8_t Prefetching
0x0421:0x05			uint8_t OwnsDynamicMemoryShared
0x0421:0x06			uint8_t OwnsChangeControlAreaExclusive
0x0421:0x07			uint8_t OwnsChangeControlAreaShared
0x0422	uint8_t ActiveFaultCount		uint8_t Spare1
0x0423			uint8_t PriorityRegionActive
0x0424			uint8_t CacheManagerActive					volatile long MmLockOrdering
0x0425			uint8_t DisablePageFaultClustering
0x0426			uint8_t ActiveFaultCount
0x0428			uint64_t AlpcMessageId				struct _LIST_ENTRY ThreadListEntry	volatile long CmLockOrdering
0x042C								unsigned long CrossThreadFlags
0x042C:0x00								unsigned long Terminated
0x042C:0x01								unsigned long ThreadInserted
0x042C:0x02								unsigned long HideFromDebugger
0x042C:0x03		unsigned long ActiveImpersonationInfo
0x042C:0x04		unsigned long HardErrorsAreDisabled
0x042C:0x05		unsigned long BreakOnTermination
0x042C:0x06		unsigned long SkipCreationMsg
0x042C:0x07		unsigned long SkipTerminationMsg
0x042C:0x08		unsigned long CopyTokenOnOpen
0x042C:0x09		unsigned long ThreadIoPriority
0x042C:0x0C		unsigned long ThreadPagePriority
0x042C:0x0F		unsigned long RundownFail
0x042C:0x10		unsigned long UmsForceQueueTermination
0x042C:0x11		unsigned long ReservedCrossThreadFlags
0x0430		void * AlpcMessage		struct _EX_RUNDOWN_REF RundownProtect		unsigned long SameThreadPassiveFlags
0x0430		unsigned long AlpcReceiveAttributeSet				unsigned long ActiveExWorker
0x0430:0x01						unsigned long MemoryMaker
0x0430:0x02						unsigned long ClonedThread
0x0430:0x03						unsigned long KeyedEventInUse
0x0430:0x04						unsigned long SelfTerminate
0x0434						unsigned long SameThreadApcFlags
0x0434:0x00						uint8_t Spare
0x0434:0x01						volatile uint8_t StartAddressInvalid
0x0434:0x02						uint8_t EtwCalloutActive
0x0434:0x03						uint8_t OwnsProcessWorkingSetExclusive
0x0434:0x04						uint8_t OwnsProcessWorkingSetShared
0x0434:0x05						uint8_t OwnsSystemCacheWorkingSetExclusive
0x0434:0x06						uint8_t OwnsSystemCacheWorkingSetShared
0x0434:0x07						uint8_t OwnsSessionWorkingSetExclusive
0x0435:0x00						uint8_t OwnsSessionWorkingSetShared
0x0435:0x01						uint8_t OwnsProcessAddressSpaceExclusive
0x0435:0x02						uint8_t OwnsProcessAddressSpaceShared
0x0435:0x03						uint8_t SuppressSymbolLoad
0x0435:0x04						uint8_t Prefetching
0x0435:0x05						uint8_t OwnsVadExclusive
0x0435:0x06						uint8_t OwnsChangeControlAreaExclusive
0x0435:0x07						uint8_t OwnsChangeControlAreaShared
0x0436:0x00						uint8_t OwnsPagedPoolWorkingSetExclusive
0x0436:0x01						uint8_t OwnsPagedPoolWorkingSetShared
0x0436:0x02						uint8_t OwnsSystemPtesWorkingSetExclusive
0x0436:0x03						uint8_t OwnsSystemPtesWorkingSetShared
0x0436:0x04						uint8_t TrimTrigger
0x0436:0x06						uint8_t Spare2
0x0437						uint8_t PriorityRegionActive
0x0438		struct _LIST_ENTRY AlpcWaitListEntry		struct _EX_PUSH_LOCK ThreadLock		struct _EX_RUNDOWN_REF RundownProtect	uint8_t CacheManagerActive
0x0439							uint8_t DisablePageFaultClustering
0x043A							uint8_t ActiveFaultCount
0x043B							uint8_t LockOrderState
0x0440				unsigned long ReadClusterSize		struct _EX_PUSH_LOCK ThreadLock	uint64_t AlpcMessageId
0x0444				volatile long MmLockOrdering
0x0448		unsigned long CacheManagerCount		unsigned long CrossThreadFlags		unsigned long ReadClusterSize	void * AlpcMessage
0x0448:0x00				unsigned long Terminated			unsigned long AlpcReceiveAttributeSet
0x0448:0x01				unsigned long ThreadInserted
0x0448:0x02				unsigned long HideFromDebugger
0x0448:0x03				unsigned long ActiveImpersonationInfo
0x0448:0x04				unsigned long SystemThread	unsigned long Reserved
0x0448:0x05				unsigned long HardErrorsAreDisabled
0x0448:0x06				unsigned long BreakOnTermination
0x0448:0x07	unsigned long SkipCreationMsg
0x0448:0x08	unsigned long SkipTerminationMsg
0x0448:0x09	unsigned long CopyTokenOnOpen
0x0448:0x0A	unsigned long ThreadIoPriority
0x0448:0x0D	unsigned long ThreadPagePriority
0x0448:0x10	unsigned long RundownFail
0x0448:0x11	unsigned long NeedsWorkingSetAging
0x044C		unsigned long KernelStackReference	unsigned long SameThreadPassiveFlags		volatile long MmLockOrdering
0x044C:0x00			unsigned long ActiveExWorker
0x044C:0x01			unsigned long ExWorkerCanWaitUser
0x044C:0x02			unsigned long MemoryMaker
0x044C:0x03			unsigned long ClonedThread
0x044C:0x04			unsigned long KeyedEventInUse
0x044C:0x05			unsigned long RateApcState
0x044C:0x07			unsigned long SelfTerminate
0x0450			unsigned long SameThreadApcFlags		unsigned long CrossThreadFlags	long ExitStatus
0x0450:0x00			uint8_t Spare		unsigned long Terminated
0x0450:0x01			volatile uint8_t StartAddressInvalid		unsigned long ThreadInserted
0x0450:0x02			uint8_t EtwPageFaultCalloutActive		unsigned long HideFromDebugger
0x0450:0x03			uint8_t OwnsProcessWorkingSetExclusive		unsigned long ActiveImpersonationInfo
0x0450:0x04			uint8_t OwnsProcessWorkingSetShared		unsigned long Reserved
0x0450:0x05			uint8_t OwnsSystemCacheWorkingSetExclusive		unsigned long HardErrorsAreDisabled
0x0450:0x06			uint8_t OwnsSystemCacheWorkingSetShared		unsigned long BreakOnTermination
0x0450:0x07			uint8_t OwnsSessionWorkingSetExclusive		unsigned long SkipCreationMsg
0x0451:0x00			uint8_t OwnsSessionWorkingSetShared		unsigned long SkipTerminationMsg
0x0451:0x01			uint8_t OwnsProcessAddressSpaceExclusive		unsigned long CopyTokenOnOpen
0x0451:0x02			uint8_t OwnsProcessAddressSpaceShared		unsigned long ThreadIoPriority
0x0451:0x03			uint8_t SuppressSymbolLoad
0x0451:0x04			uint8_t Prefetching
0x0451:0x05			uint8_t OwnsDynamicMemoryShared		unsigned long ThreadPagePriority
0x0451:0x06			uint8_t OwnsChangeControlAreaExclusive
0x0451:0x07			uint8_t OwnsChangeControlAreaShared
0x0452:0x00			uint8_t OwnsPagedPoolWorkingSetExclusive		unsigned long RundownFail
0x0452:0x01			uint8_t OwnsPagedPoolWorkingSetShared		unsigned long NeedsWorkingSetAging
0x0452:0x02			uint8_t OwnsSystemPtesWorkingSetExclusive
0x0452:0x03			uint8_t OwnsSystemPtesWorkingSetShared
0x0452:0x04			uint8_t TrimTrigger
0x0452:0x06			uint8_t Spare1
0x0453			uint8_t PriorityRegionActive
0x0454			uint8_t CacheManagerActive		unsigned long SameThreadPassiveFlags
0x0454:0x00					unsigned long ActiveExWorker
0x0454:0x01					unsigned long ExWorkerCanWaitUser
0x0454:0x02					unsigned long MemoryMaker
0x0454:0x03					unsigned long ClonedThread
0x0454:0x04					unsigned long KeyedEventInUse
0x0454:0x05					unsigned long RateApcState
0x0454:0x07					unsigned long SelfTerminate
0x0455			uint8_t DisablePageFaultClustering
0x0456			uint8_t ActiveFaultCount
0x0457			uint8_t LockOrderState
0x0458			uint64_t AlpcMessageId		unsigned long SameThreadApcFlags	struct _LIST_ENTRY AlpcWaitListEntry
0x0458:0x00					uint8_t Spare
0x0458:0x01					volatile uint8_t StartAddressInvalid
0x0458:0x02					uint8_t EtwPageFaultCalloutActive
0x0458:0x03					uint8_t OwnsProcessWorkingSetExclusive
0x0458:0x04					uint8_t OwnsProcessWorkingSetShared
0x0458:0x05					uint8_t OwnsSystemCacheWorkingSetExclusive
0x0458:0x06					uint8_t OwnsSystemCacheWorkingSetShared
0x0458:0x07					uint8_t OwnsSessionWorkingSetExclusive
0x0459:0x00					uint8_t OwnsSessionWorkingSetShared
0x0459:0x01					uint8_t OwnsProcessAddressSpaceExclusive
0x0459:0x02					uint8_t OwnsProcessAddressSpaceShared
0x0459:0x03					uint8_t SuppressSymbolLoad
0x0459:0x04					uint8_t Prefetching
0x0459:0x05					uint8_t OwnsDynamicMemoryShared
0x0459:0x06					uint8_t OwnsChangeControlAreaExclusive
0x0459:0x07					uint8_t OwnsChangeControlAreaShared
0x045A:0x00					uint8_t OwnsPagedPoolWorkingSetExclusive
0x045A:0x01					uint8_t OwnsPagedPoolWorkingSetShared
0x045A:0x02					uint8_t OwnsSystemPtesWorkingSetExclusive
0x045A:0x03					uint8_t OwnsSystemPtesWorkingSetShared
0x045A:0x04	uint8_t TrimTrigger
0x045A:0x06	uint8_t Spare1
0x045B	uint8_t PriorityRegionActive
0x045C	uint8_t CacheManagerActive
0x045D	uint8_t DisablePageFaultClustering
0x045E	uint8_t ActiveFaultCount
0x045F	uint8_t LockOrderState
0x0460	void * AlpcMessage		uint64_t AlpcMessageId
0x0460	unsigned long AlpcReceiveAttributeSet
0x0468	struct _LIST_ENTRY AlpcWaitListEntry		void * AlpcMessage	unsigned long CacheManagerCount
0x0468			unsigned long AlpcReceiveAttributeSet
0x046C				unsigned long IoBoostCount
0x0470			struct _LIST_ENTRY AlpcWaitListEntry	uint64_t IrpListLock	struct _LIST_ENTRY BoostList
0x0478	unsigned long CacheManagerCount			void * ReservedForSynchTracking
0x047C	unsigned long IoBoostCount
0x0480	uint64_t IrpListLock		unsigned long CacheManagerCount	struct _SINGLE_LIST_ENTRY CmCallbackListHead	struct _LIST_ENTRY DeboostList
0x0484			unsigned long IoBoostCount
0x0488	void * ReservedForSynchTracking		uint64_t IrpListLock	const struct _GUID * ActivityId
0x0490	struct _SINGLE_LIST_ENTRY CmCallbackListHead		void * ReservedForSynchTracking	void * WnfContext	uint64_t BoostListLock
0x0498			struct _SINGLE_LIST_ENTRY CmCallbackListHead	struct _SINGLE_LIST_ENTRY SeLearningModeListHead	uint64_t IrpListLock
0x04A0			unsigned long KernelStackReference	uint64_t RelativeTimerBias	void * ReservedForSynchTracking
0x04A8					struct _SINGLE_LIST_ENTRY CmCallbackListHead
0x04B0					const struct _GUID * ActivityId
0x04B8					void * WnfContext
0x04C0					unsigned long KernelStackReference
0x0598						union _LARGE_INTEGER CreateTime
0x05A0						union _LARGE_INTEGER ExitTime
0x05A0						struct _LIST_ENTRY KeyedWaitChain
0x05B0						void * ChargeOnlySession
0x05B8						struct _LIST_ENTRY PostBlockList
0x05B8						void * ForwardLinkShadow
0x05C0						void * StartAddress
0x05C8						struct _TERMINATION_PORT * TerminationPort
0x05C8						struct _ETHREAD * ReaperLink
0x05C8						void * KeyedWaitValue
0x05D0						uint64_t ActiveTimerListLock	union _LARGE_INTEGER CreateTime
0x05D8						struct _LIST_ENTRY ActiveTimerListHead	union _LARGE_INTEGER ExitTime		union _LARGE_INTEGER CreateTime
0x05D8							struct _LIST_ENTRY KeyedWaitChain
0x05E0									union _LARGE_INTEGER ExitTime
0x05E0									struct _LIST_ENTRY KeyedWaitChain
0x05E8						struct _CLIENT_ID Cid	void * ChargeOnlySession
0x05F0							struct _LIST_ENTRY PostBlockList		void * ChargeOnlySession
0x05F0							void * ForwardLinkShadow
0x05F8						struct _KSEMAPHORE KeyedWaitSemaphore	void * StartAddress		struct _LIST_ENTRY PostBlockList
0x05F8						struct _KSEMAPHORE AlpcWaitSemaphore			void * ForwardLinkShadow
0x0600							struct _TERMINATION_PORT * TerminationPort		void * StartAddress
0x0600							struct _ETHREAD * ReaperLink
0x0600							void * KeyedWaitValue
0x0608							uint64_t ActiveTimerListLock		struct _TERMINATION_PORT * TerminationPort
0x0608									struct _ETHREAD * ReaperLink
0x0608									void * KeyedWaitValue
0x0610							struct _LIST_ENTRY ActiveTimerListHead		uint64_t ActiveTimerListLock
0x0618						union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity			struct _LIST_ENTRY ActiveTimerListHead
0x0620						struct _LIST_ENTRY IrpList	struct _CLIENT_ID Cid
0x0628									struct _CLIENT_ID Cid
0x0630						uint64_t TopLevelIrp	struct _KSEMAPHORE KeyedWaitSemaphore
0x0630							struct _KSEMAPHORE AlpcWaitSemaphore
0x0638						struct _DEVICE_OBJECT * DeviceToVerify			struct _KSEMAPHORE KeyedWaitSemaphore
0x0638									struct _KSEMAPHORE AlpcWaitSemaphore
0x0640						void * Win32StartAddress
0x0648						void * LegacyPowerObject
0x0650						struct _LIST_ENTRY ThreadListEntry	union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity
0x0658							struct _LIST_ENTRY IrpList		union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity
0x0660						struct _EX_RUNDOWN_REF RundownProtect			struct _LIST_ENTRY IrpList
0x0668						struct _EX_PUSH_LOCK ThreadLock	uint64_t TopLevelIrp
0x0670						unsigned long ReadClusterSize	struct _DEVICE_OBJECT * DeviceToVerify		uint64_t TopLevelIrp
0x0674						volatile long MmLockOrdering
0x0678						volatile long CmLockOrdering	void * Win32StartAddress		struct _DEVICE_OBJECT * DeviceToVerify
0x067C						unsigned long CrossThreadFlags
0x067C:0x00						unsigned long Terminated
0x067C:0x01						unsigned long ThreadInserted
0x067C:0x02						unsigned long HideFromDebugger
0x067C:0x03						unsigned long ActiveImpersonationInfo
0x067C:0x04						unsigned long HardErrorsAreDisabled
0x067C:0x05						unsigned long BreakOnTermination
0x067C:0x06						unsigned long SkipCreationMsg
0x067C:0x07						unsigned long SkipTerminationMsg
0x067C:0x08						unsigned long CopyTokenOnOpen
0x067C:0x09						unsigned long ThreadIoPriority
0x067C:0x0C						unsigned long ThreadPagePriority
0x067C:0x0F						unsigned long RundownFail
0x067C:0x10						unsigned long UmsForceQueueTermination
0x067C:0x11						unsigned long ReservedCrossThreadFlags
0x0680	unsigned long SameThreadPassiveFlags	void * LegacyPowerObject				void * Win32StartAddress
0x0680:0x00	unsigned long ActiveExWorker
0x0680:0x01	unsigned long MemoryMaker
0x0680:0x02	unsigned long ClonedThread
0x0680:0x03	unsigned long KeyedEventInUse
0x0680:0x04	unsigned long SelfTerminate
0x0684	unsigned long SameThreadApcFlags
0x0684:0x00	uint8_t HardFaultBehavior
0x0684:0x01	volatile uint8_t StartAddressInvalid
0x0684:0x02	uint8_t EtwCalloutActive
0x0684:0x03	uint8_t OwnsProcessWorkingSetExclusive
0x0684:0x04	uint8_t OwnsProcessWorkingSetShared
0x0684:0x05	uint8_t OwnsSystemCacheWorkingSetExclusive
0x0684:0x06	uint8_t OwnsSystemCacheWorkingSetShared
0x0684:0x07	uint8_t OwnsSessionWorkingSetExclusive
0x0685:0x00	uint8_t OwnsSessionWorkingSetShared
0x0685:0x01	uint8_t OwnsProcessAddressSpaceExclusive
0x0685:0x02	uint8_t OwnsProcessAddressSpaceShared
0x0685:0x03	uint8_t SuppressSymbolLoad
0x0685:0x04	uint8_t Prefetching
0x0685:0x05	uint8_t OwnsVadExclusive
0x0685:0x06	uint8_t OwnsChangeControlAreaExclusive
0x0685:0x07	uint8_t OwnsChangeControlAreaShared
0x0686:0x00	uint8_t OwnsPagedPoolWorkingSetExclusive
0x0686:0x01	uint8_t OwnsPagedPoolWorkingSetShared
0x0686:0x02	uint8_t OwnsSystemPtesWorkingSetExclusive
0x0686:0x03	uint8_t OwnsSystemPtesWorkingSetShared
0x0686:0x04	uint8_t TrimTrigger
0x0686:0x06	uint8_t Spare2
0x0687:0x00	uint8_t SystemPagePriorityActive
0x0687:0x01	uint8_t SystemPagePriority
0x0687:0x04	uint8_t Spare3
0x0688	uint8_t CacheManagerActive	struct _LIST_ENTRY ThreadListEntry		void * LegacyPowerObject
0x0689	uint8_t DisablePageFaultClustering
0x068A	uint8_t ActiveFaultCount
0x068B	uint8_t LockOrderState
0x0690	uint64_t AlpcMessageId			struct _LIST_ENTRY ThreadListEntry
0x0698	void * AlpcMessage	struct _EX_RUNDOWN_REF RundownProtect
0x0698	unsigned long AlpcReceiveAttributeSet
0x06A0	long ExitStatus	struct _EX_PUSH_LOCK ThreadLock		struct _EX_RUNDOWN_REF RundownProtect
0x06A8	struct _LIST_ENTRY AlpcWaitListEntry	unsigned long ReadClusterSize		struct _EX_PUSH_LOCK ThreadLock
0x06AC		volatile long MmLockOrdering
0x06B0		volatile long CmLockOrdering		unsigned long ReadClusterSize
0x06B4		unsigned long CrossThreadFlags		volatile long MmLockOrdering
0x06B4:0x00		unsigned long Terminated
0x06B4:0x01		unsigned long ThreadInserted
0x06B4:0x02		unsigned long HideFromDebugger
0x06B4:0x03		unsigned long ActiveImpersonationInfo
0x06B4:0x04		unsigned long HardErrorsAreDisabled
0x06B4:0x05		unsigned long BreakOnTermination
0x06B4:0x06		unsigned long SkipCreationMsg
0x06B4:0x07		unsigned long SkipTerminationMsg
0x06B4:0x08		unsigned long CopyTokenOnOpen
0x06B4:0x09		unsigned long ThreadIoPriority
0x06B4:0x0C		unsigned long ThreadPagePriority
0x06B4:0x0F		unsigned long RundownFail
0x06B4:0x10		unsigned long UmsForceQueueTermination
0x06B4:0x11		unsigned long ReservedCrossThreadFlags
0x06B8	unsigned long CacheManagerCount	unsigned long SameThreadPassiveFlags		volatile long CmLockOrdering
0x06B8:0x00		unsigned long ActiveExWorker
0x06B8:0x01		unsigned long MemoryMaker
0x06B8:0x02		unsigned long ClonedThread
0x06B8:0x03		unsigned long KeyedEventInUse
0x06B8:0x04		unsigned long SelfTerminate
0x06BC	unsigned long IoBoostCount	unsigned long SameThreadApcFlags		unsigned long CrossThreadFlags
0x06BC:0x00		uint8_t HardFaultBehavior	uint8_t OwnsProcessAddressSpaceExclusive	unsigned long Terminated
0x06BC:0x01		volatile uint8_t StartAddressInvalid	uint8_t OwnsProcessAddressSpaceShared	unsigned long ThreadInserted
0x06BC:0x02		uint8_t EtwCalloutActive	uint8_t HardFaultBehavior	unsigned long HideFromDebugger
0x06BC:0x03		uint8_t OwnsProcessWorkingSetExclusive	volatile uint8_t StartAddressInvalid	unsigned long ActiveImpersonationInfo
0x06BC:0x04		uint8_t OwnsProcessWorkingSetShared	uint8_t EtwCalloutActive	unsigned long HardErrorsAreDisabled
0x06BC:0x05		uint8_t OwnsSystemCacheWorkingSetExclusive	uint8_t SuppressSymbolLoad	unsigned long BreakOnTermination
0x06BC:0x06		uint8_t OwnsSystemCacheWorkingSetShared	uint8_t Prefetching	unsigned long SkipCreationMsg
0x06BC:0x07		uint8_t OwnsSessionWorkingSetExclusive	uint8_t OwnsVadExclusive	unsigned long SkipTerminationMsg
0x06BD:0x00		uint8_t OwnsSessionWorkingSetShared	uint8_t SystemPagePriorityActive	unsigned long CopyTokenOnOpen
0x06BD:0x01		uint8_t OwnsProcessAddressSpaceExclusive	uint8_t SystemPagePriority	unsigned long ThreadIoPriority
0x06BD:0x02		uint8_t OwnsProcessAddressSpaceShared
0x06BD:0x03		uint8_t SuppressSymbolLoad
0x06BD:0x04		uint8_t Prefetching		unsigned long ThreadPagePriority
0x06BD:0x05		uint8_t OwnsVadExclusive
0x06BD:0x06		uint8_t OwnsChangeControlAreaExclusive
0x06BD:0x07		uint8_t OwnsChangeControlAreaShared		unsigned long RundownFail
0x06BE:0x00		uint8_t OwnsPagedPoolWorkingSetExclusive		unsigned long UmsForceQueueTermination
0x06BE:0x01		uint8_t OwnsPagedPoolWorkingSetShared		unsigned long ReservedCrossThreadFlags	unsigned long IndirectCpuSets
0x06BE:0x02		uint8_t OwnsSystemPtesWorkingSetExclusive			unsigned long ReservedCrossThreadFlags
0x06BE:0x03		uint8_t OwnsSystemPtesWorkingSetShared
0x06BE:0x04		uint8_t TrimTrigger
0x06BE:0x06		uint8_t Spare2
0x06BF:0x00		uint8_t SystemPagePriorityActive
0x06BF:0x01		uint8_t SystemPagePriority
0x06BF:0x04		uint8_t Spare3
0x06C0	struct _LIST_ENTRY BoostList	uint8_t CacheManagerActive		unsigned long SameThreadPassiveFlags
0x06C0:0x00				unsigned long ActiveExWorker
0x06C0:0x01				unsigned long MemoryMaker
0x06C0:0x02				unsigned long ClonedThread		unsigned long StoreLockThread
0x06C0:0x03				unsigned long KeyedEventInUse		unsigned long ClonedThread
0x06C0:0x04				unsigned long SelfTerminate		unsigned long KeyedEventInUse
0x06C0:0x05					unsigned long RespectIoPriority	unsigned long SelfTerminate
0x06C0:0x06					unsigned long ReservedSameThreadPassiveFlags	unsigned long RespectIoPriority
0x06C0:0x07						unsigned long ReservedSameThreadPassiveFlags
0x06C1		uint8_t DisablePageFaultClustering
0x06C2		uint8_t ActiveFaultCount
0x06C3		uint8_t LockOrderState
0x06C4				unsigned long SameThreadApcFlags
0x06C4:0x00				uint8_t OwnsProcessAddressSpaceExclusive
0x06C4:0x01				uint8_t OwnsProcessAddressSpaceShared
0x06C4:0x02				uint8_t HardFaultBehavior
0x06C4:0x03				volatile uint8_t StartAddressInvalid
0x06C4:0x04				uint8_t EtwCalloutActive
0x06C4:0x05				uint8_t SuppressSymbolLoad
0x06C4:0x06				uint8_t Prefetching
0x06C4:0x07				uint8_t OwnsVadExclusive
0x06C5:0x00				uint8_t SystemPagePriorityActive
0x06C5:0x01				uint8_t SystemPagePriority
0x06C8		uint64_t AlpcMessageId		uint8_t CacheManagerActive
0x06C9				uint8_t DisablePageFaultClustering
0x06CA				uint8_t ActiveFaultCount
0x06CB				uint8_t LockOrderState
0x06D0	struct _LIST_ENTRY DeboostList	void * AlpcMessage		uint64_t AlpcMessageId
0x06D0		unsigned long AlpcReceiveAttributeSet
0x06D8		long ExitStatus		void * AlpcMessage
0x06D8				unsigned long AlpcReceiveAttributeSet
0x06E0	uint64_t BoostListLock	struct _LIST_ENTRY AlpcWaitListEntry		long ExitStatus
0x06E8	uint64_t IrpListLock			struct _LIST_ENTRY AlpcWaitListEntry
0x06F0	void * ReservedForSynchTracking	unsigned long CacheManagerCount
0x06F4		unsigned long IoBoostCount
0x06F8	struct _SINGLE_LIST_ENTRY CmCallbackListHead	struct _LIST_ENTRY BoostList		unsigned long CacheManagerCount
0x06FC				unsigned long IoBoostCount
0x0700	const struct _GUID * ActivityId			struct _LIST_ENTRY BoostList
0x0708	struct _SINGLE_LIST_ENTRY SeLearningModeListHead	struct _LIST_ENTRY DeboostList
0x0710	void * VerifierContext			struct _LIST_ENTRY DeboostList
0x0718	unsigned long KernelStackReference	uint64_t BoostListLock
0x0720	void * AdjustedClientToken	uint64_t IrpListLock		uint64_t BoostListLock
0x0728	unsigned long UserFsBase	void * ReservedForSynchTracking		uint64_t IrpListLock
0x0730	uint64_t UserGsBase	struct _SINGLE_LIST_ENTRY CmCallbackListHead		void * ReservedForSynchTracking
0x0738	void * PicoContext	const struct _GUID * ActivityId		struct _SINGLE_LIST_ENTRY CmCallbackListHead
0x0740		struct _SINGLE_LIST_ENTRY SeLearningModeListHead		const struct _GUID * ActivityId
0x0748		void * VerifierContext		struct _SINGLE_LIST_ENTRY SeLearningModeListHead
0x0750		unsigned long KernelStackReference		void * VerifierContext
0x0758		void * AdjustedClientToken		unsigned long KernelStackReference
0x0760		unsigned long UserFsBase	struct _ETHREAD * WorkingOnBehalfClient	void * AdjustedClientToken
0x0768		uint64_t UserGsBase	unsigned long UserFsBase	void * WorkingOnBehalfClient
0x0770		void * PicoContext	uint64_t UserGsBase	struct _PS_PROPERTY_SET PropertySet
0x0778			void * PicoContext
0x0780			struct _PROCESS_ENERGY_VALUES * EnergyValues
0x0788				void * PicoContext
0x0790				unsigned long UserFsBase
0x0798				uint64_t UserGsBase
0x07A0				struct _THREAD_ENERGY_VALUES * EnergyValues
0x07A8				volatile unsigned long CmCellReferences
0x07B0					uint64_t SelectedCpuSets
0x07B0					uint64_t * SelectedCpuSetsIndirect
0x07B8					struct _ESILO * Silo	struct _EJOB * Silo