Min version2003/XP64Vista8.1 Update 1
Max version2003/XP64 SP2810 TH2
x86 offset
offset:bitpos
Field Name
0x0000struct _NT_TIB
NtTib
0x0000struct _EXCEPTION_REGISTRATION_RECORD *
Used_ExceptionList
0x0004void *
Used_StackBase
0x0008void *
PerfGlobalGroupMask
void *
Spare2
unsigned long
MxCsr
0x000Cvoid *
TssCopy
0x0010unsigned long
ContextSwitches
0x0014unsigned long
SetMemberCopy
0x0018void *
Used_Self
0x001Cstruct _KPCR *
SelfPcr
0x0020struct _KPRCB *
Prcb
0x0024uint8_t
Irql
0x0028unsigned long
IRR
0x002Cunsigned long
IrrActive
0x0030unsigned long
IDR
0x0034void *
KdVersionBlock
0x0038struct _KIDTENTRY *
IDT
0x003Cstruct _KGDTENTRY *
GDT
0x0040struct _KTSS *
TSS
0x0044uint16_t
MajorVersion
0x0046uint16_t
MinorVersion
0x0048unsigned long
SetMember
0x004Cunsigned long
StallScaleFactor
0x0050uint8_t
SpareUnused
0x0051uint8_t
Number
0x0052uint8_t
Spare0
0x0053uint8_t
SecondLevelCacheAssociativity
0x0054unsigned long
VdmAlert
0x0058unsigned long[14]
KernelReserved
0x0090unsigned long
SecondLevelCacheSize
0x0094unsigned long[16]
HalReserved
0x00D4unsigned long
InterruptMode
0x00D8uint8_t
Spare1
0x00DCunsigned long[17]
KernelReserved2
0x0120struct _KPRCB
PrcbData