Min version | 7 |
---|---|
Max version | 10 TH2 |
x64 offset offset:bitpos | Field Name |
0x0000 | struct _NT_TIB NtTib |
0x0000 | union _KGDTENTRY64 * GdtBase |
0x0008 | struct _KTSS64 * TssBase |
0x0010 | uint64_t UserRsp |
0x0018 | struct _KPCR * Self |
0x0020 | struct _KPRCB * CurrentPrcb |
0x0028 | struct _KSPIN_LOCK_QUEUE * LockArray |
0x0030 | void * Used_Self |
0x0038 | union _KIDTENTRY64 * IdtBase |
0x0040 | uint64_t[2] Unused |
0x0050 | uint8_t Irql |
0x0051 | uint8_t SecondLevelCacheAssociativity |
0x0052 | uint8_t ObsoleteNumber |
0x0053 | uint8_t Fill0 |
0x0054 | unsigned long[3] Unused0 |
0x0060 | uint16_t MajorVersion |
0x0062 | uint16_t MinorVersion |
0x0064 | unsigned long StallScaleFactor |
0x0068 | void *[3] Unused1 |
0x0080 | unsigned long[15] KernelReserved |
0x00BC | unsigned long SecondLevelCacheSize |
0x00C0 | unsigned long[16] HalReserved |
0x0100 | unsigned long Unused2 |
0x0108 | void * KdVersionBlock |
0x0110 | void * Unused3 |
0x0118 | unsigned long[24] PcrAlign1 |
0x0180 | struct _KPRCB Prcb |