| Min version | 2003/XP64 SP1 | 2003/XP64 SP2 | Vista SP1 | 7 | 8 Pre RTM | 8 | 8.1 | 8.1 Update 1 | 8.1 Update 1 | 10 Pre RTM | 10 Pre RTM | 10 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Max version | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | 8.1 Update 1 | 10 TH2 | |||||||
| x64 offset offset:bitpos | Field Name | |||||||||||
| 0x0000 | unsigned long MxCsr | |||||||||||
| 0x0004 | uint8_t Number | uint16_t Number | uint8_t LegacyNumber | |||||||||
| 0x0005 | uint8_t NestingLevel | uint8_t ReservedMustBeZero | ||||||||||
| 0x0006 | uint8_t InterruptRequest | |||||||||||
| 0x0007 | uint8_t IdleHalt | |||||||||||
| 0x0008 | struct _KTHREAD * CurrentThread | |||||||||||
| 0x0010 | struct _KTHREAD * NextThread | |||||||||||
| 0x0018 | struct _KTHREAD * IdleThread | |||||||||||
| 0x0020 | uint64_t UserRsp | uint8_t NestingLevel | ||||||||||
| 0x0021 | uint8_t Group | uint8_t[3] PrcbPad00 | uint8_t ClockOwner | |||||||||
| 0x0022 | uint8_t[6] PrcbPad00 | uint8_t PendingTick | uint8_t PendingTickFlags | |||||||||
| 0x0022:0x00 | uint8_t PendingTick | |||||||||||
| 0x0022:0x01 | uint8_t PendingBackupTick | |||||||||||
| 0x0023 | uint8_t[1] PrcbPad00 | uint8_t IdleState | ||||||||||
| 0x0024 | unsigned long Number | |||||||||||
| 0x0028 | uint64_t RspBase | |||||||||||
| 0x0030 | uint64_t PrcbLock | |||||||||||
| 0x0038 | uint64_t SetMember | uint64_t PrcbPad01 | char * PriorityState | |||||||||
| 0x0040 | struct _KPROCESSOR_STATE ProcessorState | |||||||||||
| 0x05F0 | char CpuType | |||||||||||
| 0x05F1 | char CpuID | |||||||||||
| 0x05F2 | uint16_t CpuStep | uint16_t CpuStep | ||||||||||
| 0x05F2 | uint8_t CpuStepping | |||||||||||
| 0x05F3 | uint8_t CpuModel | |||||||||||
| 0x05F4 | unsigned long MHz | |||||||||||
| 0x05F8 | uint64_t[8] HalReserved | |||||||||||
| 0x0638 | uint16_t MinorVersion | |||||||||||
| 0x063A | uint16_t MajorVersion | |||||||||||
| 0x063C | uint8_t BuildType | |||||||||||
| 0x063D | uint8_t CpuVendor | |||||||||||
| 0x063E | uint8_t InitialApicId | uint8_t CoresPerPhysicalProcessor | ||||||||||
| 0x063F | uint8_t LogicalProcessorsPerPhysicalProcessor | uint8_t CoresPerPhysicalProcessor | uint8_t LogicalProcessorsPerCore | |||||||||
| 0x0640 | unsigned long ApicMask | struct _KNODE * ParentNode | ||||||||||
| 0x0644 | uint8_t CFlushSize | unsigned long CFlushSize | ||||||||||
| 0x0645 | uint8_t[3] PrcbPad0x | uint8_t[2] PrcbPad0x | ||||||||||
| 0x0647 | uint8_t LogicalProcessorsPerCore | |||||||||||
| 0x0648 | void * AcpiReserved | uint64_t GroupSetMember | ||||||||||
| 0x0650 | uint64_t[4] PrcbPad00 | uint64_t[1] PrcbPad00 | unsigned long InitialApicId | uint8_t Group | ||||||||
| 0x0651 | uint8_t GroupIndex | |||||||||||
| 0x0652 | uint8_t[2] PrcbPad05 | |||||||||||
| 0x0654 | unsigned long Stride | unsigned long ApicMask | unsigned long InitialApicId | |||||||||
| 0x0658 | uint64_t PackageProcessorSet | uint64_t[3] PrcbPad01 | uint16_t Group | unsigned long CFlushSize | unsigned long ScbOffset | |||||||
| 0x065C | unsigned long ApicMask | |||||||||||
| 0x0660 | uint64_t CoreProcessorSet | uint64_t GroupSetMember | void * AcpiReserved | |||||||||
| 0x0668 | unsigned long Stride | uint8_t GroupIndex | unsigned long InitialApicId | unsigned long CFlushSize | ||||||||
| 0x066C | unsigned long[1] PrcbPad01 | unsigned long PrcbPad10 | ||||||||||
| 0x0670 | struct _KSPIN_LOCK_QUEUE[33] LockQueue | struct _KSPIN_LOCK_QUEUE[49] LockQueue | struct _KSPIN_LOCK_QUEUE[17] LockQueue | |||||||||
| 0x0780 | struct _PP_LOOKASIDE_LIST[16] PPLookasideList | |||||||||||
| 0x0880 | struct _PP_LOOKASIDE_LIST[16] PPLookasideList | struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList | struct _GENERAL_LOOKASIDE_POOL[32] PPNxPagedLookasideList | |||||||||
| 0x0980 | struct _PP_LOOKASIDE_LIST[32] PPNPagedLookasideList | struct _PP_LOOKASIDE_LIST[16] PPLookasideList | ||||||||||
| 0x0A80 | struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList | |||||||||||
| 0x0B80 | struct _PP_LOOKASIDE_LIST[32] PPPagedLookasideList | |||||||||||
| 0x0D80 | volatile uint64_t PacketBarrier | |||||||||||
| 0x0D88 | struct _SINGLE_LIST_ENTRY DeferredReadyListHead | |||||||||||
| 0x0D90 | volatile long MmPageFaultCount | |||||||||||
| 0x0D94 | volatile long MmCopyOnWriteCount | |||||||||||
| 0x0D98 | volatile long MmTransitionCount | |||||||||||
| 0x0D9C | volatile long MmCacheTransitionCount | |||||||||||
| 0x0DA0 | volatile long MmDemandZeroCount | |||||||||||
| 0x0DA4 | volatile long MmPageReadCount | |||||||||||
| 0x0DA8 | volatile long MmPageReadIoCount | |||||||||||
| 0x0DAC | volatile long MmCacheReadCount | |||||||||||
| 0x0DB0 | volatile long MmCacheIoCount | |||||||||||
| 0x0DB4 | volatile long MmDirtyPagesWriteCount | |||||||||||
| 0x0DB8 | volatile long MmDirtyWriteIoCount | |||||||||||
| 0x0DBC | volatile long MmMappedPagesWriteCount | |||||||||||
| 0x0DC0 | volatile long MmMappedWriteIoCount | |||||||||||
| 0x0DC4 | long LookasideIrpFloat | |||||||||||
| 0x0DC8 | unsigned long KeSystemCalls | |||||||||||
| 0x0DCC | volatile long IoReadOperationCount | |||||||||||
| 0x0DD0 | volatile long IoWriteOperationCount | |||||||||||
| 0x0DD4 | volatile long IoOtherOperationCount | |||||||||||
| 0x0DD8 | union _LARGE_INTEGER IoReadTransferCount | |||||||||||
| 0x0DE0 | union _LARGE_INTEGER IoWriteTransferCount | |||||||||||
| 0x0DE8 | union _LARGE_INTEGER IoOtherTransferCount | |||||||||||
| 0x0DF0 | unsigned long KeContextSwitches | |||||||||||
| 0x0DF4 | uint8_t[12] PrcbPad2 | |||||||||||
| 0x0E00 | volatile uint64_t TargetSet | |||||||||||
| 0x0E08 | volatile unsigned long IpiFrozen | |||||||||||
| 0x0E0C | uint8_t[116] PrcbPad3 | |||||||||||
| 0x0E80 | struct _REQUEST_MAILBOX[64] RequestMailbox | |||||||||||
| 0x1480 | struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList | struct _GENERAL_LOOKASIDE_POOL[32] PPNPagedLookasideList | ||||||||||
| 0x1680 | struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList | |||||||||||
| 0x1E80 | volatile uint64_t SenderSummary | |||||||||||
| 0x1E88 | uint8_t[120] PrcbPad4 | |||||||||||
| 0x1F00 | struct _KDPC_DATA[2] DpcData | |||||||||||
| 0x1F40 | void * DpcStack | |||||||||||
| 0x1F48 | void * SavedRsp | |||||||||||
| 0x1F50 | long MaximumDpcQueueDepth | |||||||||||
| 0x1F54 | unsigned long DpcRequestRate | |||||||||||
| 0x1F58 | unsigned long MinimumDpcRate | |||||||||||
| 0x1F5C | volatile uint8_t DpcInterruptRequested | |||||||||||
| 0x1F5D | volatile uint8_t DpcThreadRequested | |||||||||||
| 0x1F5E | volatile uint8_t DpcRoutineActive | |||||||||||
| 0x1F5F | volatile uint8_t DpcThreadActive | |||||||||||
| 0x1F60 | volatile uint64_t TimerHand | |||||||||||
| 0x1F60 | volatile uint64_t TimerRequest | |||||||||||
| 0x1F68 | long TickOffset | |||||||||||
| 0x1F6C | long MasterOffset | |||||||||||
| 0x1F70 | unsigned long DpcLastCount | |||||||||||
| 0x1F74 | uint8_t ThreadDpcEnable | |||||||||||
| 0x1F75 | volatile uint8_t QuantumEnd | |||||||||||
| 0x1F76 | uint8_t PrcbPad50 | |||||||||||
| 0x1F77 | volatile uint8_t IdleSchedule | |||||||||||
| 0x1F78 | long DpcSetEventRequest | |||||||||||
| 0x1F7C | long PrcbPad40 | |||||||||||
| 0x1F80 | void * DpcThread | |||||||||||
| 0x1F88 | struct _KEVENT DpcEvent | |||||||||||
| 0x1FA0 | struct _KDPC CallDpc | |||||||||||
| 0x1FE0 | uint64_t[4] PrcbPad7 | |||||||||||
| 0x2000 | struct _LIST_ENTRY WaitListHead | |||||||||||
| 0x2010 | unsigned long ReadySummary | |||||||||||
| 0x2014 | unsigned long QueueIndex | |||||||||||
| 0x2018 | struct _LIST_ENTRY[32] DispatcherReadyListHead | |||||||||||
| 0x2080 | volatile long PacketBarrier | struct _GENERAL_LOOKASIDE_POOL[32] PPPagedLookasideList | ||||||||||
| 0x2088 | struct _SINGLE_LIST_ENTRY DeferredReadyListHead | |||||||||||
| 0x2090 | volatile long MmPageFaultCount | |||||||||||
| 0x2094 | volatile long MmCopyOnWriteCount | |||||||||||
| 0x2098 | volatile long MmTransitionCount | |||||||||||
| 0x209C | volatile long MmDemandZeroCount | |||||||||||
| 0x20A0 | volatile long MmPageReadCount | |||||||||||
| 0x20A4 | volatile long MmPageReadIoCount | |||||||||||
| 0x20A8 | volatile long MmDirtyPagesWriteCount | |||||||||||
| 0x20AC | volatile long MmDirtyWriteIoCount | |||||||||||
| 0x20B0 | volatile long MmMappedPagesWriteCount | |||||||||||
| 0x20B4 | volatile long MmMappedWriteIoCount | |||||||||||
| 0x20B8 | unsigned long KeSystemCalls | |||||||||||
| 0x20BC | unsigned long KeContextSwitches | |||||||||||
| 0x20C0 | unsigned long CcFastReadNoWait | |||||||||||
| 0x20C4 | unsigned long CcFastReadWait | |||||||||||
| 0x20C8 | unsigned long CcFastReadNotPossible | |||||||||||
| 0x20CC | unsigned long CcCopyReadNoWait | |||||||||||
| 0x20D0 | unsigned long CcCopyReadWait | |||||||||||
| 0x20D4 | unsigned long CcCopyReadNoWaitMiss | |||||||||||
| 0x20D8 | long LookasideIrpFloat | |||||||||||
| 0x20DC | volatile long IoReadOperationCount | |||||||||||
| 0x20E0 | volatile long IoWriteOperationCount | |||||||||||
| 0x20E4 | volatile long IoOtherOperationCount | |||||||||||
| 0x20E8 | union _LARGE_INTEGER IoReadTransferCount | |||||||||||
| 0x20F0 | union _LARGE_INTEGER IoWriteTransferCount | |||||||||||
| 0x20F8 | union _LARGE_INTEGER IoOtherTransferCount | |||||||||||
| 0x2100 | volatile long TargetCount | |||||||||||
| 0x2104 | volatile unsigned long IpiFrozen | |||||||||||
| 0x2180 | struct _KDPC_DATA[2] DpcData | |||||||||||
| 0x21C0 | void * DpcStack | |||||||||||
| 0x21C8 | long MaximumDpcQueueDepth | |||||||||||
| 0x21CC | unsigned long DpcRequestRate | |||||||||||
| 0x21D0 | unsigned long MinimumDpcRate | |||||||||||
| 0x21D4 | unsigned long DpcLastCount | |||||||||||
| 0x21D8 | uint8_t ThreadDpcEnable | |||||||||||
| 0x21D9 | volatile uint8_t QuantumEnd | |||||||||||
| 0x21DA | volatile uint8_t DpcRoutineActive | |||||||||||
| 0x21DB | volatile uint8_t IdleSchedule | |||||||||||
| 0x21DC | volatile long DpcRequestSummary | |||||||||||
| 0x21DC | int16_t[2] DpcRequestSlot | |||||||||||
| 0x21DC | int16_t NormalDpcState | |||||||||||
| 0x21DE:0x00 | volatile uint16_t DpcThreadActive | |||||||||||
| 0x21DE | int16_t ThreadDpcState | |||||||||||
| 0x21E0 | volatile unsigned long TimerHand | |||||||||||
| 0x21E4 | long MasterOffset | |||||||||||
| 0x21E8 | unsigned long LastTick | |||||||||||
| 0x21EC | unsigned long UnusedPad | |||||||||||
| 0x21F0 | uint64_t[2] PrcbPad50 | |||||||||||
| 0x2200 | struct _KTIMER_TABLE TimerTable | |||||||||||
| 0x2218 | unsigned long InterruptCount | |||||||||||
| 0x221C | unsigned long KernelTime | |||||||||||
| 0x2220 | unsigned long UserTime | |||||||||||
| 0x2224 | unsigned long DpcTime | |||||||||||
| 0x2228 | unsigned long InterruptTime | |||||||||||
| 0x222C | unsigned long AdjustDpcThreshold | |||||||||||
| 0x2230 | uint8_t SkipTick | |||||||||||
| 0x2231 | uint8_t DebuggerSavedIRQL | |||||||||||
| 0x2232 | uint8_t PollSlot | |||||||||||
| 0x2233 | uint8_t[13] PrcbPad8 | |||||||||||
| 0x2240 | struct _KNODE * ParentNode | |||||||||||
| 0x2248 | uint64_t MultiThreadProcessorSet | |||||||||||
| 0x2250 | struct _KPRCB * MultiThreadSetMaster | |||||||||||
| 0x2258 | long Sleeping | |||||||||||
| 0x225C | unsigned long[1] PrcbPad90 | |||||||||||
| 0x2260 | unsigned long DebugDpcTime | |||||||||||
| 0x2264 | unsigned long PageColor | |||||||||||
| 0x2268 | unsigned long NodeColor | |||||||||||
| 0x226C | unsigned long NodeShiftedColor | |||||||||||
| 0x2270 | unsigned long SecondaryColorMask | |||||||||||
| 0x2274 | uint8_t[12] PrcbPad9 | |||||||||||
| 0x2280 | unsigned long CcFastReadNoWait | volatile uint64_t PacketBarrier | ||||||||||
| 0x2284 | unsigned long CcFastReadWait | |||||||||||
| 0x2288 | unsigned long CcFastReadNotPossible | struct _SINGLE_LIST_ENTRY DeferredReadyListHead | ||||||||||
| 0x228C | unsigned long CcCopyReadNoWait | |||||||||||
| 0x2290 | unsigned long CcCopyReadWait | volatile long MmPageFaultCount | ||||||||||
| 0x2294 | unsigned long CcCopyReadNoWaitMiss | volatile long MmCopyOnWriteCount | ||||||||||
| 0x2298 | unsigned long KeAlignmentFixupCount | volatile long MmTransitionCount | ||||||||||
| 0x229C | unsigned long KeDcacheFlushCount | volatile long MmDemandZeroCount | ||||||||||
| 0x22A0 | unsigned long KeExceptionDispatchCount | volatile long MmPageReadCount | ||||||||||
| 0x22A4 | unsigned long KeFirstLevelTbFills | volatile long MmPageReadIoCount | ||||||||||
| 0x22A8 | unsigned long KeFloatingEmulationCount | volatile long MmDirtyPagesWriteCount | ||||||||||
| 0x22AC | unsigned long KeIcacheFlushCount | volatile long MmDirtyWriteIoCount | ||||||||||
| 0x22B0 | unsigned long KeSecondLevelTbFills | volatile long MmMappedPagesWriteCount | ||||||||||
| 0x22B4 | uint8_t[13] VendorString | volatile long MmMappedWriteIoCount | ||||||||||
| 0x22B8 | unsigned long KeSystemCalls | |||||||||||
| 0x22BC | unsigned long KeContextSwitches | |||||||||||
| 0x22C0 | unsigned long CcFastReadNoWait | |||||||||||
| 0x22C1 | uint8_t[2] PrcbPad10 | |||||||||||
| 0x22C4 | unsigned long FeatureBits | unsigned long CcFastReadWait | ||||||||||
| 0x22C8 | union _LARGE_INTEGER UpdateSignature | unsigned long CcFastReadNotPossible | ||||||||||
| 0x22CC | unsigned long CcCopyReadNoWait | |||||||||||
| 0x22D0 | struct _PROCESSOR_POWER_STATE PowerState | unsigned long CcCopyReadWait | ||||||||||
| 0x22D4 | unsigned long CcCopyReadNoWaitMiss | |||||||||||
| 0x22D8 | long LookasideIrpFloat | |||||||||||
| 0x22DC | volatile long IoReadOperationCount | |||||||||||
| 0x22E0 | volatile long IoWriteOperationCount | |||||||||||
| 0x22E4 | volatile long IoOtherOperationCount | |||||||||||
| 0x22E8 | union _LARGE_INTEGER IoReadTransferCount | |||||||||||
| 0x22F0 | union _LARGE_INTEGER IoWriteTransferCount | |||||||||||
| 0x22F8 | union _LARGE_INTEGER IoOtherTransferCount | |||||||||||
| 0x2300 | volatile uint64_t TargetSet | |||||||||||
| 0x2308 | volatile unsigned long IpiFrozen | |||||||||||
| 0x230C | uint8_t[116] PrcbPad3 | |||||||||||
| 0x2380 | struct _REQUEST_MAILBOX[64] RequestMailbox | |||||||||||
| 0x2440 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x247C | unsigned long CacheCount | |||||||||||
| 0x2480 | void * EtwSupport | |||||||||||
| 0x2C80 | volatile long PacketBarrier | uint64_t PrcbPad20 | ||||||||||
| 0x2C88 | struct _SINGLE_LIST_ENTRY DeferredReadyListHead | |||||||||||
| 0x2C90 | volatile long MmPageFaultCount | |||||||||||
| 0x2C94 | volatile long MmCopyOnWriteCount | |||||||||||
| 0x2C98 | volatile long MmTransitionCount | |||||||||||
| 0x2C9C | volatile long MmDemandZeroCount | |||||||||||
| 0x2CA0 | volatile long MmPageReadCount | |||||||||||
| 0x2CA4 | volatile long MmPageReadIoCount | |||||||||||
| 0x2CA8 | volatile long MmDirtyPagesWriteCount | |||||||||||
| 0x2CAC | volatile long MmDirtyWriteIoCount | |||||||||||
| 0x2CB0 | volatile long MmMappedPagesWriteCount | |||||||||||
| 0x2CB4 | volatile long MmMappedWriteIoCount | |||||||||||
| 0x2CB8 | unsigned long KeSystemCalls | |||||||||||
| 0x2CBC | unsigned long KeContextSwitches | |||||||||||
| 0x2CC0 | unsigned long CcFastReadNoWait | uint16_t LdtSelector | ||||||||||
| 0x2CC2 | uint16_t PrcbPad40 | |||||||||||
| 0x2CC4 | unsigned long CcFastReadWait | unsigned long CcFastReadNoWait | ||||||||||
| 0x2CC8 | unsigned long CcFastReadNotPossible | unsigned long CcFastReadWait | ||||||||||
| 0x2CCC | unsigned long CcCopyReadNoWait | unsigned long CcFastReadNotPossible | ||||||||||
| 0x2CD0 | unsigned long CcCopyReadWait | unsigned long CcCopyReadNoWait | ||||||||||
| 0x2CD4 | unsigned long CcCopyReadNoWaitMiss | unsigned long CcCopyReadWait | ||||||||||
| 0x2CD8 | long LookasideIrpFloat | unsigned long CcCopyReadNoWaitMiss | ||||||||||
| 0x2CDC | volatile long IoReadOperationCount | |||||||||||
| 0x2CE0 | volatile long IoWriteOperationCount | |||||||||||
| 0x2CE4 | volatile long IoOtherOperationCount | |||||||||||
| 0x2CE8 | union _LARGE_INTEGER IoReadTransferCount | |||||||||||
| 0x2CF0 | union _LARGE_INTEGER IoWriteTransferCount | |||||||||||
| 0x2CF8 | union _LARGE_INTEGER IoOtherTransferCount | |||||||||||
| 0x2D00 | volatile long TargetCount | volatile long PacketBarrier | ||||||||||
| 0x2D04 | volatile unsigned long IpiFrozen | volatile long TargetCount | ||||||||||
| 0x2D08 | unsigned long[30] PrcbPad40 | volatile unsigned long IpiFrozen | ||||||||||
| 0x2D0C | unsigned long[29] PrcbPad40 | |||||||||||
| 0x2D10 | void * IsrDpcStats | |||||||||||
| 0x2D18 | unsigned long DeviceInterrupts | |||||||||||
| 0x2D1C | long LookasideIrpFloat | |||||||||||
| 0x2D20 | unsigned long InterruptLastCount | |||||||||||
| 0x2D24 | unsigned long InterruptRate | |||||||||||
| 0x2D28 | unsigned long[22] PrcbPad41 | |||||||||||
| 0x2D80 | struct _KDPC_DATA[2] DpcData | struct _KDPC_DATA[2] DpcData | ||||||||||
| 0x2DC0 | void * DpcStack | |||||||||||
| 0x2DC8 | long MaximumDpcQueueDepth | |||||||||||
| 0x2DCC | unsigned long DpcRequestRate | |||||||||||
| 0x2DD0 | unsigned long MinimumDpcRate | void * DpcStack | ||||||||||
| 0x2DD4 | unsigned long DpcLastCount | |||||||||||
| 0x2DD8 | uint8_t ThreadDpcEnable | long MaximumDpcQueueDepth | ||||||||||
| 0x2DD9 | volatile uint8_t QuantumEnd | |||||||||||
| 0x2DDA | volatile uint8_t DpcRoutineActive | |||||||||||
| 0x2DDB | volatile uint8_t IdleSchedule | |||||||||||
| 0x2DDC | volatile long DpcRequestSummary | unsigned long DpcRequestRate | ||||||||||
| 0x2DDC | int16_t[2] DpcRequestSlot | |||||||||||
| 0x2DDC | int16_t NormalDpcState | int16_t NormalDpcState | ||||||||||
| 0x2DDC:0x00 | unsigned long DpcNormalProcessingActive | |||||||||||
| 0x2DDC:0x01 | unsigned long DpcNormalProcessingRequested | |||||||||||
| 0x2DDC:0x02 | unsigned long DpcNormalThreadSignal | |||||||||||
| 0x2DDC:0x03 | unsigned long DpcNormalTimerExpiration | |||||||||||
| 0x2DDC:0x04 | unsigned long DpcNormalDpcPresent | |||||||||||
| 0x2DDC:0x05 | unsigned long DpcNormalLocalInterrupt | |||||||||||
| 0x2DDC:0x06 | unsigned long DpcNormalSpare | |||||||||||
| 0x2DDE:0x00 | volatile uint16_t DpcThreadActive | int16_t ThreadDpcState | ||||||||||
| 0x2DDE | int16_t ThreadDpcState | unsigned long DpcThreadActive | ||||||||||
| 0x2DDC:0x11 | unsigned long DpcThreadRequested | |||||||||||
| 0x2DDC:0x12 | unsigned long DpcThreadSpare | |||||||||||
| 0x2DE0 | volatile unsigned long TimerHand | unsigned long LastTimerHand | unsigned long MinimumDpcRate | |||||||||
| 0x2DE4 | long MasterOffset | unsigned long LastTick | unsigned long DpcLastCount | |||||||||
| 0x2DE8 | unsigned long LastTick | unsigned long ClockInterrupts | uint8_t ThreadDpcEnable | |||||||||
| 0x2DE9 | volatile uint8_t QuantumEnd | |||||||||||
| 0x2DEA | volatile uint8_t DpcRoutineActive | |||||||||||
| 0x2DEB | volatile uint8_t IdleSchedule | |||||||||||
| 0x2DEC | unsigned long ClockInterrupts | unsigned long ReadyScanTick | volatile long DpcRequestSummary | |||||||||
| 0x2DEC | int16_t[2] DpcRequestSlot | |||||||||||
| 0x2DEC | int16_t NormalDpcState | |||||||||||
| 0x2DEC:0x00 | unsigned long DpcNormalProcessingActive | |||||||||||
| 0x2DEC:0x01 | unsigned long DpcNormalProcessingRequested | |||||||||||
| 0x2DEC:0x02 | unsigned long DpcNormalThreadSignal | |||||||||||
| 0x2DEC:0x03 | unsigned long DpcNormalTimerExpiration | |||||||||||
| 0x2DEC:0x04 | unsigned long DpcNormalDpcPresent | |||||||||||
| 0x2DEC:0x05 | unsigned long DpcNormalLocalInterrupt | |||||||||||
| 0x2DEC:0x06 | unsigned long DpcNormalSpare | |||||||||||
| 0x2DEE | int16_t ThreadDpcState | |||||||||||
| 0x2DEC:0x10 | unsigned long DpcThreadActive | |||||||||||
| 0x2DEC:0x11 | unsigned long DpcThreadRequested | |||||||||||
| 0x2DEC:0x12 | unsigned long DpcThreadSpare | |||||||||||
| 0x2DF0 | unsigned long ReadyScanTick | uint8_t BalanceState | unsigned long LastTimerHand | |||||||||
| 0x2DF1 | uint8_t[7] PrcbPad50 | |||||||||||
| 0x2DF4 | uint8_t BalanceState | unsigned long LastTick | ||||||||||
| 0x2DF5 | uint8_t[11] PrcbPad50 | |||||||||||
| 0x2DF8 | unsigned long InterruptLastCount | unsigned long ClockInterrupts | ||||||||||
| 0x2DFC | unsigned long InterruptRate | unsigned long ReadyScanTick | ||||||||||
| 0x2E00 | struct _KTIMER_TABLE TimerTable | void *[208] InterruptObject | void *[256] InterruptObject | |||||||||
| 0x3380 | volatile uint64_t SenderSummary | |||||||||||
| 0x3388 | uint8_t[120] PrcbPad4 | |||||||||||
| 0x3400 | struct _KDPC_DATA[2] DpcData | |||||||||||
| 0x3440 | void * DpcStack | |||||||||||
| 0x3448 | void * SparePtr0 | |||||||||||
| 0x3450 | long MaximumDpcQueueDepth | |||||||||||
| 0x3454 | unsigned long DpcRequestRate | |||||||||||
| 0x3458 | unsigned long MinimumDpcRate | |||||||||||
| 0x345C | volatile uint8_t DpcInterruptRequested | |||||||||||
| 0x345D | volatile uint8_t DpcThreadRequested | |||||||||||
| 0x345E | volatile uint8_t DpcRoutineActive | |||||||||||
| 0x345F | volatile uint8_t DpcThreadActive | |||||||||||
| 0x3460 | volatile uint64_t TimerHand | |||||||||||
| 0x3460 | volatile uint64_t TimerRequest | |||||||||||
| 0x3468 | long TickOffset | |||||||||||
| 0x346C | long MasterOffset | |||||||||||
| 0x3470 | unsigned long DpcLastCount | |||||||||||
| 0x3474 | uint8_t ThreadDpcEnable | |||||||||||
| 0x3475 | volatile uint8_t QuantumEnd | |||||||||||
| 0x3476 | uint8_t PrcbPad50 | |||||||||||
| 0x3477 | volatile uint8_t IdleSchedule | |||||||||||
| 0x3478 | long DpcSetEventRequest | |||||||||||
| 0x347C | unsigned long KeExceptionDispatchCount | |||||||||||
| 0x3480 | struct _KEVENT DpcEvent | struct _KTIMER_TABLE TimerTable | ||||||||||
| 0x3498 | void * PrcbPad51 | |||||||||||
| 0x34A0 | struct _KDPC CallDpc | |||||||||||
| 0x34E0 | long ClockKeepAlive | |||||||||||
| 0x34E4 | uint8_t ClockCheckSlot | |||||||||||
| 0x34E5 | uint8_t ClockPollCycle | |||||||||||
| 0x34E6 | uint8_t[2] PrcbPad6 | |||||||||||
| 0x34E8 | long DpcWatchdogPeriod | |||||||||||
| 0x34EC | long DpcWatchdogCount | |||||||||||
| 0x34F0 | uint64_t[2] PrcbPad70 | |||||||||||
| 0x3500 | struct _LIST_ENTRY WaitListHead | |||||||||||
| 0x3510 | uint64_t WaitLock | |||||||||||
| 0x3518 | unsigned long ReadySummary | |||||||||||
| 0x351C | unsigned long QueueIndex | |||||||||||
| 0x3520 | uint64_t[12] PrcbPad71 | |||||||||||
| 0x3580 | struct _LIST_ENTRY[32] DispatcherReadyListHead | |||||||||||
| 0x3600 | struct _KTIMER_TABLE TimerTable | |||||||||||
| 0x3780 | unsigned long InterruptCount | |||||||||||
| 0x3784 | unsigned long KernelTime | |||||||||||
| 0x3788 | unsigned long UserTime | |||||||||||
| 0x378C | unsigned long DpcTime | |||||||||||
| 0x3790 | unsigned long InterruptTime | |||||||||||
| 0x3794 | unsigned long AdjustDpcThreshold | |||||||||||
| 0x3798 | uint8_t SkipTick | |||||||||||
| 0x3799 | uint8_t DebuggerSavedIRQL | |||||||||||
| 0x379A | uint8_t PollSlot | |||||||||||
| 0x379B | uint8_t[5] PrcbPad80 | |||||||||||
| 0x37A0 | unsigned long DpcTimeCount | |||||||||||
| 0x37A4 | unsigned long DpcTimeLimit | |||||||||||
| 0x37A8 | unsigned long PeriodicCount | |||||||||||
| 0x37AC | unsigned long PeriodicBias | |||||||||||
| 0x37B0 | uint64_t[2] PrcbPad81 | |||||||||||
| 0x37C0 | struct _KNODE * ParentNode | |||||||||||
| 0x37C8 | uint64_t MultiThreadProcessorSet | |||||||||||
| 0x37D0 | struct _KPRCB * MultiThreadSetMaster | |||||||||||
| 0x37D8 | uint64_t StartCycles | |||||||||||
| 0x37E0 | volatile long MmSpinLockOrdering | |||||||||||
| 0x37E4 | unsigned long PageColor | |||||||||||
| 0x37E8 | unsigned long NodeColor | |||||||||||
| 0x37EC | unsigned long NodeShiftedColor | |||||||||||
| 0x37F0 | unsigned long SecondaryColorMask | |||||||||||
| 0x37F4 | long Sleeping | |||||||||||
| 0x37F8 | uint64_t CycleTime | |||||||||||
| 0x3800 | unsigned long CcFastMdlReadNoWait | |||||||||||
| 0x3804 | unsigned long CcFastMdlReadWait | |||||||||||
| 0x3808 | unsigned long CcFastMdlReadNotPossible | |||||||||||
| 0x380C | unsigned long CcMapDataNoWait | |||||||||||
| 0x3810 | unsigned long CcMapDataWait | |||||||||||
| 0x3814 | unsigned long CcPinMappedDataCount | |||||||||||
| 0x3818 | unsigned long CcPinReadNoWait | |||||||||||
| 0x381C | unsigned long CcPinReadWait | |||||||||||
| 0x3820 | unsigned long CcMdlReadNoWait | |||||||||||
| 0x3824 | unsigned long CcMdlReadWait | |||||||||||
| 0x3828 | unsigned long CcLazyWriteHotSpots | |||||||||||
| 0x382C | unsigned long CcLazyWriteIos | |||||||||||
| 0x3830 | unsigned long CcLazyWritePages | |||||||||||
| 0x3834 | unsigned long CcDataFlushes | |||||||||||
| 0x3838 | unsigned long CcDataPages | |||||||||||
| 0x383C | unsigned long CcLostDelayedWrites | |||||||||||
| 0x3840 | unsigned long CcFastReadResourceMiss | |||||||||||
| 0x3844 | unsigned long CcCopyReadWaitMiss | |||||||||||
| 0x3848 | unsigned long CcFastMdlReadResourceMiss | |||||||||||
| 0x384C | unsigned long CcMapDataNoWaitMiss | |||||||||||
| 0x3850 | unsigned long CcMapDataWaitMiss | |||||||||||
| 0x3854 | unsigned long CcPinReadNoWaitMiss | |||||||||||
| 0x3858 | unsigned long CcPinReadWaitMiss | |||||||||||
| 0x385C | unsigned long CcMdlReadNoWaitMiss | |||||||||||
| 0x3860 | unsigned long CcMdlReadWaitMiss | |||||||||||
| 0x3864 | unsigned long CcReadAheadIos | |||||||||||
| 0x3868 | volatile long MmCacheTransitionCount | |||||||||||
| 0x386C | volatile long MmCacheReadCount | |||||||||||
| 0x3870 | volatile long MmCacheIoCount | |||||||||||
| 0x3874 | unsigned long[3] PrcbPad91 | |||||||||||
| 0x3880 | struct _PROCESSOR_POWER_STATE PowerState | |||||||||||
| 0x3998 | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x399C | uint8_t[13] VendorString | |||||||||||
| 0x39A9 | uint8_t[3] PrcbPad10 | |||||||||||
| 0x39AC | unsigned long FeatureBits | |||||||||||
| 0x39B0 | union _LARGE_INTEGER UpdateSignature | |||||||||||
| 0x39B8 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x39F8 | struct _KTIMER DpcWatchdogTimer | |||||||||||
| 0x3A38 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x3A74 | unsigned long CacheCount | |||||||||||
| 0x3A78 | volatile unsigned long CachedCommit | |||||||||||
| 0x3A7C | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x3A80 | void * HyperPte | |||||||||||
| 0x3A88 | void * WheaInfo | |||||||||||
| 0x3A90 | void * EtwSupport | |||||||||||
| 0x3AA0 | union _SLIST_HEADER InterruptObjectPool | |||||||||||
| 0x3AB0 | union _SLIST_HEADER HypercallPageList | |||||||||||
| 0x3AC0 | void * HypercallPageVirtual | |||||||||||
| 0x3AC8 | void * VirtualApicAssist | |||||||||||
| 0x3AD0 | uint64_t * StatisticsPage | |||||||||||
| 0x3AD8 | void * RateControl | |||||||||||
| 0x3AE0 | uint64_t[5] CacheProcessorMask | |||||||||||
| 0x3B08 | uint64_t PackageProcessorSet | |||||||||||
| 0x3B10 | uint64_t CoreProcessorSet | |||||||||||
| 0x4400 | struct _KGATE DpcGate | |||||||||||
| 0x4418 | void * PrcbPad52 | |||||||||||
| 0x4420 | struct _KDPC CallDpc | |||||||||||
| 0x4460 | long ClockKeepAlive | |||||||||||
| 0x4464 | uint8_t ClockCheckSlot | |||||||||||
| 0x4465 | uint8_t ClockPollCycle | |||||||||||
| 0x4466 | uint16_t NmiActive | |||||||||||
| 0x4468 | long DpcWatchdogPeriod | |||||||||||
| 0x446C | long DpcWatchdogCount | |||||||||||
| 0x4470 | uint64_t TickOffset | |||||||||||
| 0x4478 | volatile long KeSpinLockOrdering | |||||||||||
| 0x447C | unsigned long PrcbPad70 | |||||||||||
| 0x4480 | struct _LIST_ENTRY WaitListHead | |||||||||||
| 0x4490 | uint64_t WaitLock | |||||||||||
| 0x4498 | unsigned long ReadySummary | |||||||||||
| 0x449C | unsigned long QueueIndex | |||||||||||
| 0x44A0 | struct _KDPC TimerExpirationDpc | |||||||||||
| 0x44E0 | uint64_t[4] PrcbPad72 | |||||||||||
| 0x4500 | struct _LIST_ENTRY[32] DispatcherReadyListHead | |||||||||||
| 0x4700 | unsigned long InterruptCount | |||||||||||
| 0x4704 | unsigned long KernelTime | |||||||||||
| 0x4708 | unsigned long UserTime | |||||||||||
| 0x470C | unsigned long DpcTime | |||||||||||
| 0x4710 | unsigned long InterruptTime | |||||||||||
| 0x4714 | unsigned long AdjustDpcThreshold | |||||||||||
| 0x4718 | uint8_t DebuggerSavedIRQL | |||||||||||
| 0x4719 | uint8_t[7] PrcbPad80 | |||||||||||
| 0x4720 | unsigned long DpcTimeCount | |||||||||||
| 0x4724 | unsigned long DpcTimeLimit | |||||||||||
| 0x4728 | unsigned long PeriodicCount | |||||||||||
| 0x472C | unsigned long PeriodicBias | |||||||||||
| 0x4730 | unsigned long AvailableTime | |||||||||||
| 0x4734 | unsigned long KeExceptionDispatchCount | |||||||||||
| 0x4738 | struct _KNODE * ParentNode | |||||||||||
| 0x4740 | uint64_t StartCycles | |||||||||||
| 0x4748 | uint64_t[3] PrcbPad82 | |||||||||||
| 0x4760 | volatile long MmSpinLockOrdering | |||||||||||
| 0x4764 | unsigned long PageColor | |||||||||||
| 0x4768 | unsigned long NodeColor | |||||||||||
| 0x476C | unsigned long NodeShiftedColor | |||||||||||
| 0x4770 | unsigned long SecondaryColorMask | |||||||||||
| 0x4774 | unsigned long PrcbPad83 | |||||||||||
| 0x4778 | uint64_t CycleTime | |||||||||||
| 0x4780 | unsigned long CcFastMdlReadNoWait | |||||||||||
| 0x4784 | unsigned long CcFastMdlReadWait | |||||||||||
| 0x4788 | unsigned long CcFastMdlReadNotPossible | |||||||||||
| 0x478C | unsigned long CcMapDataNoWait | |||||||||||
| 0x4790 | unsigned long CcMapDataWait | |||||||||||
| 0x4794 | unsigned long CcPinMappedDataCount | |||||||||||
| 0x4798 | unsigned long CcPinReadNoWait | |||||||||||
| 0x479C | unsigned long CcPinReadWait | |||||||||||
| 0x47A0 | unsigned long CcMdlReadNoWait | |||||||||||
| 0x47A4 | unsigned long CcMdlReadWait | |||||||||||
| 0x47A8 | unsigned long CcLazyWriteHotSpots | |||||||||||
| 0x47AC | unsigned long CcLazyWriteIos | |||||||||||
| 0x47B0 | unsigned long CcLazyWritePages | |||||||||||
| 0x47B4 | unsigned long CcDataFlushes | |||||||||||
| 0x47B8 | unsigned long CcDataPages | |||||||||||
| 0x47BC | unsigned long CcLostDelayedWrites | |||||||||||
| 0x47C0 | unsigned long CcFastReadResourceMiss | |||||||||||
| 0x47C4 | unsigned long CcCopyReadWaitMiss | |||||||||||
| 0x47C8 | unsigned long CcFastMdlReadResourceMiss | |||||||||||
| 0x47CC | unsigned long CcMapDataNoWaitMiss | |||||||||||
| 0x47D0 | unsigned long CcMapDataWaitMiss | |||||||||||
| 0x47D4 | unsigned long CcPinReadNoWaitMiss | |||||||||||
| 0x47D8 | unsigned long CcPinReadWaitMiss | |||||||||||
| 0x47DC | unsigned long CcMdlReadNoWaitMiss | |||||||||||
| 0x47E0 | unsigned long CcMdlReadWaitMiss | |||||||||||
| 0x47E4 | unsigned long CcReadAheadIos | |||||||||||
| 0x47E8 | volatile long MmCacheTransitionCount | |||||||||||
| 0x47EC | volatile long MmCacheReadCount | |||||||||||
| 0x47F0 | volatile long MmCacheIoCount | |||||||||||
| 0x47F4 | unsigned long[1] PrcbPad91 | |||||||||||
| 0x47F8 | uint64_t RuntimeAccumulation | |||||||||||
| 0x4800 | struct _PROCESSOR_POWER_STATE PowerState | |||||||||||
| 0x4900 | uint8_t[16] PrcbPad92 | |||||||||||
| 0x4910 | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x4918 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x4958 | struct _KTIMER DpcWatchdogTimer | |||||||||||
| 0x4998 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x49D4 | unsigned long CacheCount | |||||||||||
| 0x49D8 | volatile unsigned long CachedCommit | |||||||||||
| 0x49DC | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x49E0 | void * HyperPte | |||||||||||
| 0x49E8 | void * WheaInfo | |||||||||||
| 0x49F0 | void * EtwSupport | |||||||||||
| 0x4A00 | union _SLIST_HEADER InterruptObjectPool | |||||||||||
| 0x4A10 | union _SLIST_HEADER HypercallPageList | |||||||||||
| 0x4A20 | void * HypercallPageVirtual | |||||||||||
| 0x4A28 | void * VirtualApicAssist | |||||||||||
| 0x4A30 | uint64_t * StatisticsPage | |||||||||||
| 0x4A38 | void * RateControl | |||||||||||
| 0x4A40 | uint64_t[5] CacheProcessorMask | |||||||||||
| 0x4A68 | struct _KAFFINITY_EX PackageProcessorSet | |||||||||||
| 0x4A90 | uint64_t CoreProcessorSet | |||||||||||
| 0x4A98 | void * PebsIndexAddress | |||||||||||
| 0x4AA0 | uint64_t[12] PrcbPad93 | |||||||||||
| 0x4B00 | unsigned long SpinLockAcquireCount | |||||||||||
| 0x4B04 | unsigned long SpinLockContentionCount | |||||||||||
| 0x4B08 | unsigned long SpinLockSpinCount | |||||||||||
| 0x4B0C | unsigned long IpiSendRequestBroadcastCount | |||||||||||
| 0x4B10 | unsigned long IpiSendRequestRoutineCount | |||||||||||
| 0x4B14 | unsigned long IpiSendSoftwareInterruptCount | |||||||||||
| 0x4B18 | unsigned long ExInitializeResourceCount | |||||||||||
| 0x4B1C | unsigned long ExReInitializeResourceCount | |||||||||||
| 0x4B20 | unsigned long ExDeleteResourceCount | |||||||||||
| 0x4B24 | unsigned long ExecutiveResourceAcquiresCount | |||||||||||
| 0x4B28 | unsigned long ExecutiveResourceContentionsCount | |||||||||||
| 0x4B2C | unsigned long ExecutiveResourceReleaseExclusiveCount | |||||||||||
| 0x4B30 | unsigned long ExecutiveResourceReleaseSharedCount | |||||||||||
| 0x4B34 | unsigned long ExecutiveResourceConvertsCount | |||||||||||
| 0x4B38 | unsigned long ExAcqResExclusiveAttempts | |||||||||||
| 0x4B3C | unsigned long ExAcqResExclusiveAcquiresExclusive | |||||||||||
| 0x4B40 | unsigned long ExAcqResExclusiveAcquiresExclusiveRecursive | |||||||||||
| 0x4B44 | unsigned long ExAcqResExclusiveWaits | |||||||||||
| 0x4B48 | unsigned long ExAcqResExclusiveNotAcquires | |||||||||||
| 0x4B4C | unsigned long ExAcqResSharedAttempts | |||||||||||
| 0x4B50 | unsigned long ExAcqResSharedAcquiresExclusive | |||||||||||
| 0x4B54 | unsigned long ExAcqResSharedAcquiresShared | |||||||||||
| 0x4B58 | unsigned long ExAcqResSharedAcquiresSharedRecursive | |||||||||||
| 0x4B5C | unsigned long ExAcqResSharedWaits | |||||||||||
| 0x4B60 | unsigned long ExAcqResSharedNotAcquires | |||||||||||
| 0x4B64 | unsigned long ExAcqResSharedStarveExclusiveAttempts | |||||||||||
| 0x4B68 | unsigned long ExAcqResSharedStarveExclusiveAcquiresExclusive | |||||||||||
| 0x4B6C | unsigned long ExAcqResSharedStarveExclusiveAcquiresShared | |||||||||||
| 0x4B70 | unsigned long ExAcqResSharedStarveExclusiveAcquiresSharedRecursive | |||||||||||
| 0x4B74 | unsigned long ExAcqResSharedStarveExclusiveWaits | |||||||||||
| 0x4B78 | unsigned long ExAcqResSharedStarveExclusiveNotAcquires | |||||||||||
| 0x4B7C | unsigned long ExAcqResSharedWaitForExclusiveAttempts | |||||||||||
| 0x4B80 | unsigned long ExAcqResSharedWaitForExclusiveAcquiresExclusive | |||||||||||
| 0x4B84 | unsigned long ExAcqResSharedWaitForExclusiveAcquiresShared | |||||||||||
| 0x4B88 | unsigned long ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive | |||||||||||
| 0x4B8C | unsigned long ExAcqResSharedWaitForExclusiveWaits | |||||||||||
| 0x4B90 | unsigned long ExAcqResSharedWaitForExclusiveNotAcquires | |||||||||||
| 0x4B94 | unsigned long ExSetResOwnerPointerExclusive | |||||||||||
| 0x4B98 | unsigned long ExSetResOwnerPointerSharedNew | |||||||||||
| 0x4B9C | unsigned long ExSetResOwnerPointerSharedOld | |||||||||||
| 0x4BA0 | unsigned long ExTryToAcqExclusiveAttempts | |||||||||||
| 0x4BA4 | unsigned long ExTryToAcqExclusiveAcquires | |||||||||||
| 0x4BA8 | unsigned long ExBoostExclusiveOwner | |||||||||||
| 0x4BAC | unsigned long ExBoostSharedOwners | |||||||||||
| 0x4BB0 | unsigned long ExEtwSynchTrackingNotificationsCount | |||||||||||
| 0x4BB4 | unsigned long ExEtwSynchTrackingNotificationsAccountedCount | |||||||||||
| 0x4BB8 | uint8_t[13] VendorString | |||||||||||
| 0x4BC5 | uint8_t[3] PrcbPad10 | |||||||||||
| 0x4BC8 | unsigned long FeatureBits | |||||||||||
| 0x4BD0 | union _LARGE_INTEGER UpdateSignature | |||||||||||
| 0x4BD8 | struct _CONTEXT * Context | |||||||||||
| 0x4BE0 | unsigned long ContextFlags | |||||||||||
| 0x4BE8 | struct _XSAVE_AREA * ExtendedState | |||||||||||
| 0x4C00 | struct _REQUEST_MAILBOX * Mailbox | |||||||||||
| 0x4C80 | struct _REQUEST_MAILBOX[1] RequestMailbox | |||||||||||
| 0x5000 | struct _KGATE DpcGate | |||||||||||
| 0x5018 | void * PrcbPad52 | |||||||||||
| 0x5020 | struct _KDPC CallDpc | |||||||||||
| 0x5060 | long ClockKeepAlive | |||||||||||
| 0x5064 | uint8_t[2] PrcbPad60 | |||||||||||
| 0x5066 | uint16_t NmiActive | |||||||||||
| 0x5068 | long DpcWatchdogPeriod | |||||||||||
| 0x506C | long DpcWatchdogCount | |||||||||||
| 0x5070 | volatile long KeSpinLockOrdering | |||||||||||
| 0x5074 | unsigned long[1] PrcbPad70 | |||||||||||
| 0x5078 | void * CachedPtes | |||||||||||
| 0x5080 | struct _LIST_ENTRY WaitListHead | |||||||||||
| 0x5090 | uint64_t WaitLock | |||||||||||
| 0x5098 | unsigned long ReadySummary | |||||||||||
| 0x509C | unsigned long QueueIndex | long AffinitizedSelectionMask | ||||||||||
| 0x50A0 | struct _KDPC TimerExpirationDpc | unsigned long ReadyQueueWeight | unsigned long QueueIndex | |||||||||
| 0x50A4 | unsigned long PrcbPad75 | unsigned long[3] PrcbPad75 | ||||||||||
| 0x50A8 | struct _KDPC TimerExpirationDpc | |||||||||||
| 0x50B0 | struct _KDPC TimerExpirationDpc | |||||||||||
| 0x50E0 | struct _RTL_RB_TREE ScbQueue | |||||||||||
| 0x50E8 | struct _KPRCB * BuddyPrcb | |||||||||||
| 0x50F0 | struct _LIST_ENTRY ScbList | struct _RTL_RB_TREE ScbQueue | ||||||||||
| 0x5100 | struct _LIST_ENTRY[32] DispatcherReadyListHead | |||||||||||
| 0x5300 | unsigned long InterruptCount | |||||||||||
| 0x5304 | unsigned long KernelTime | |||||||||||
| 0x5308 | unsigned long UserTime | |||||||||||
| 0x530C | unsigned long DpcTime | |||||||||||
| 0x5310 | unsigned long InterruptTime | |||||||||||
| 0x5314 | unsigned long AdjustDpcThreshold | |||||||||||
| 0x5318 | uint8_t DebuggerSavedIRQL | |||||||||||
| 0x5319 | uint8_t GroupSchedulingOverQuota | |||||||||||
| 0x531A | uint8_t[6] PrcbPad80 | volatile uint8_t DeepSleep | ||||||||||
| 0x531B | uint8_t[1] PrcbPad80 | |||||||||||
| 0x531C | unsigned long ScbOffset | |||||||||||
| 0x5320 | unsigned long DpcTimeCount | |||||||||||
| 0x5324 | unsigned long DpcTimeLimit | |||||||||||
| 0x5328 | unsigned long PeriodicCount | |||||||||||
| 0x532C | unsigned long PeriodicBias | |||||||||||
| 0x5330 | unsigned long AvailableTime | |||||||||||
| 0x5334 | unsigned long KeExceptionDispatchCount | |||||||||||
| 0x5338 | struct _KNODE * ParentNode | uint64_t StartCycles | ||||||||||
| 0x5340 | uint64_t StartCycles | uint64_t GenerationTarget | ||||||||||
| 0x5348 | uint64_t GenerationTarget | uint64_t AffinitizedCycles | ||||||||||
| 0x5350 | unsigned long ScbOffset | uint64_t AffinitizedCycles | uint64_t[2] PrcbPad81 | |||||||||
| 0x5354 | unsigned long[1] PrcbPad82 | |||||||||||
| 0x5358 | uint64_t AffinitizedCycles | uint64_t PrcbPad81 | ||||||||||
| 0x5360 | volatile long MmSpinLockOrdering | |||||||||||
| 0x5364 | unsigned long PageColor | |||||||||||
| 0x5368 | unsigned long NodeColor | |||||||||||
| 0x536C | unsigned long NodeShiftedColor | |||||||||||
| 0x5370 | unsigned long SecondaryColorMask | |||||||||||
| 0x5374 | unsigned long PrcbPad83 | |||||||||||
| 0x5378 | uint64_t CycleTime | |||||||||||
| 0x5380 | unsigned long CcFastMdlReadNoWait | |||||||||||
| 0x5384 | unsigned long CcFastMdlReadWait | |||||||||||
| 0x5388 | unsigned long CcFastMdlReadNotPossible | |||||||||||
| 0x538C | unsigned long CcMapDataNoWait | |||||||||||
| 0x5390 | unsigned long CcMapDataWait | |||||||||||
| 0x5394 | unsigned long CcPinMappedDataCount | |||||||||||
| 0x5398 | unsigned long CcPinReadNoWait | |||||||||||
| 0x539C | unsigned long CcPinReadWait | |||||||||||
| 0x53A0 | unsigned long CcMdlReadNoWait | |||||||||||
| 0x53A4 | unsigned long CcMdlReadWait | |||||||||||
| 0x53A8 | unsigned long CcLazyWriteHotSpots | |||||||||||
| 0x53AC | unsigned long CcLazyWriteIos | |||||||||||
| 0x53B0 | unsigned long CcLazyWritePages | |||||||||||
| 0x53B4 | unsigned long CcDataFlushes | |||||||||||
| 0x53B8 | unsigned long CcDataPages | |||||||||||
| 0x53BC | unsigned long CcLostDelayedWrites | |||||||||||
| 0x53C0 | unsigned long CcFastReadResourceMiss | |||||||||||
| 0x53C4 | unsigned long CcCopyReadWaitMiss | |||||||||||
| 0x53C8 | unsigned long CcFastMdlReadResourceMiss | |||||||||||
| 0x53CC | unsigned long CcMapDataNoWaitMiss | |||||||||||
| 0x53D0 | unsigned long CcMapDataWaitMiss | |||||||||||
| 0x53D4 | unsigned long CcPinReadNoWaitMiss | |||||||||||
| 0x53D8 | unsigned long CcPinReadWaitMiss | |||||||||||
| 0x53DC | unsigned long CcMdlReadNoWaitMiss | |||||||||||
| 0x53E0 | unsigned long CcMdlReadWaitMiss | |||||||||||
| 0x53E4 | unsigned long CcReadAheadIos | |||||||||||
| 0x53E8 | volatile long MmCacheTransitionCount | |||||||||||
| 0x53EC | volatile long MmCacheReadCount | |||||||||||
| 0x53F0 | volatile long MmCacheIoCount | |||||||||||
| 0x53F4 | unsigned long[3] PrcbPad91 | |||||||||||
| 0x5400 | struct _PROCESSOR_POWER_STATE PowerState | struct _PROCESSOR_POWER_STATE PowerState | struct _PROCESSOR_POWER_STATE PowerState | |||||||||
| 0x5578 | unsigned long[6] PrcbPad92 | |||||||||||
| 0x5590 | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x5598 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x55C8 | struct _LIST_ENTRY ScbList | |||||||||||
| 0x55D8 | struct _KTIMER DpcWatchdogTimer | unsigned long[22] PrcbPad92 | ||||||||||
| 0x55E0 | struct _LIST_ENTRY ScbList | |||||||||||
| 0x55F0 | unsigned long[19] PrcbPad92 | |||||||||||
| 0x5618 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x5630 | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x5638 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x563C | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x5640 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x5654 | unsigned long CacheCount | |||||||||||
| 0x5658 | volatile unsigned long CachedCommit | |||||||||||
| 0x565C | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x5660 | void * HyperPte | |||||||||||
| 0x5668 | void * WheaInfo | |||||||||||
| 0x5670 | void * EtwSupport | |||||||||||
| 0x5678 | struct _KTIMER DpcWatchdogTimer | |||||||||||
| 0x5680 | union _SLIST_HEADER InterruptObjectPool | struct _KTIMER DpcWatchdogTimer | struct _KGATE DpcGate | |||||||||
| 0x5690 | union _SLIST_HEADER HypercallPageList | |||||||||||
| 0x5698 | void * PrcbPad52 | |||||||||||
| 0x56A0 | void * HypercallPageVirtual | struct _KDPC CallDpc | ||||||||||
| 0x56A8 | void * VirtualApicAssist | |||||||||||
| 0x56B0 | uint64_t * StatisticsPage | |||||||||||
| 0x56B8 | uint64_t[5] CacheProcessorMask | struct _CACHE_DESCRIPTOR[5] Cache | ||||||||||
| 0x56C0 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x56E0 | struct _KAFFINITY_EX PackageProcessorSet | long ClockKeepAlive | ||||||||||
| 0x56E4 | uint8_t[2] PrcbPad60 | |||||||||||
| 0x56E6 | uint16_t NmiActive | |||||||||||
| 0x56E8 | long DpcWatchdogPeriod | |||||||||||
| 0x56EC | long DpcWatchdogCount | |||||||||||
| 0x56F0 | volatile long KeSpinLockOrdering | |||||||||||
| 0x56F4 | unsigned long CacheCount | unsigned long[1] PrcbPad70 | ||||||||||
| 0x56F8 | volatile unsigned long CachedCommit | void * CachedPtes | ||||||||||
| 0x56FC | volatile unsigned long CachedResidentAvailable | unsigned long CacheCount | ||||||||||
| 0x5700 | void * HyperPte | volatile unsigned long CachedCommit | struct _LIST_ENTRY WaitListHead | |||||||||
| 0x5704 | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x5708 | void * WheaInfo | void * HyperPte | ||||||||||
| 0x5710 | void * EtwSupport | void * WheaInfo | uint64_t WaitLock | |||||||||
| 0x5718 | void * EtwSupport | unsigned long ReadySummary | ||||||||||
| 0x571C | long AffinitizedSelectionMask | |||||||||||
| 0x5720 | union _SLIST_HEADER InterruptObjectPool | unsigned long QueueIndex | ||||||||||
| 0x5724 | unsigned long[3] PrcbPad75 | |||||||||||
| 0x5728 | uint64_t CoreProcessorSet | |||||||||||
| 0x5730 | struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea | union _SLIST_HEADER HypercallPageList | struct _KDPC TimerExpirationDpc | |||||||||
| 0x5738 | void * ProfileEventIndexAddress | |||||||||||
| 0x5740 | uint64_t[8] PrcbPad93 | void * HypercallPageVirtual | ||||||||||
| 0x5748 | void * VirtualApicAssist | |||||||||||
| 0x5750 | uint64_t * StatisticsPage | |||||||||||
| 0x5758 | struct _KAFFINITY_EX PackageProcessorSet | |||||||||||
| 0x5770 | struct _RTL_RB_TREE ScbQueue | |||||||||||
| 0x5780 | struct _SYNCH_COUNTERS SynchCounters | struct _LIST_ENTRY[32] DispatcherReadyListHead | ||||||||||
| 0x5800 | uint64_t[5] CacheProcessorMask | uint64_t SharedReadyQueueMask | struct _KGATE DpcGate | |||||||||
| 0x5808 | struct _KSHARED_READY_QUEUE * SharedReadyQueue | |||||||||||
| 0x5810 | uint64_t CoreProcessorSet | |||||||||||
| 0x5818 | uint64_t ScanSiblingMask | void * PrcbPad52 | ||||||||||
| 0x5820 | uint64_t LLCMask | struct _KDPC CallDpc | ||||||||||
| 0x5828 | uint64_t ScanSiblingMask | uint64_t[5] CacheProcessorMask | ||||||||||
| 0x5830 | unsigned long ScanSiblingIndex | |||||||||||
| 0x5834 | unsigned long LLCLevel | |||||||||||
| 0x5838 | uint8_t[13] VendorString | uint64_t CoreProcessorSet | ||||||||||
| 0x5840 | struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea | |||||||||||
| 0x5845 | uint8_t[3] PrcbPad10 | |||||||||||
| 0x5848 | unsigned long FeatureBits | void * ProfileEventIndexAddress | ||||||||||
| 0x5850 | union _LARGE_INTEGER UpdateSignature | uint64_t[6] PrcbPad94 | unsigned long ScanSiblingIndex | |||||||||
| 0x5854 | unsigned long SharedReadyQueueOffset | |||||||||||
| 0x5858 | struct _CONTEXT * Context | struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea | ||||||||||
| 0x5860 | unsigned long ContextFlags | void * ProfileEventIndexAddress | long ClockKeepAlive | |||||||||
| 0x5864 | uint8_t[2] PrcbPad60 | |||||||||||
| 0x5866 | uint16_t NmiActive | |||||||||||
| 0x5868 | struct _XSAVE_AREA * ExtendedState | uint64_t[3] PrcbPad94 | long DpcWatchdogPeriod | |||||||||
| 0x586C | long DpcWatchdogCount | |||||||||||
| 0x5870 | volatile long KeSpinLockOrdering | |||||||||||
| 0x5874 | unsigned long[1] PrcbPad70 | |||||||||||
| 0x5878 | void * CachedPtes | |||||||||||
| 0x5880 | struct _ENTROPY_TIMING_STATE EntropyTimingState | struct _SYNCH_COUNTERS SynchCounters | struct _LIST_ENTRY WaitListHead | |||||||||
| 0x5890 | uint64_t WaitLock | |||||||||||
| 0x5898 | unsigned long ReadySummary | |||||||||||
| 0x589C | long AffinitizedSelectionMask | |||||||||||
| 0x58A0 | unsigned long QueueIndex | |||||||||||
| 0x58A4 | unsigned long[3] PrcbPad75 | |||||||||||
| 0x58B0 | struct _KDPC TimerExpirationDpc | |||||||||||
| 0x58F0 | struct _RTL_RB_TREE ScbQueue | |||||||||||
| 0x5900 | struct _LIST_ENTRY[32] DispatcherReadyListHead | |||||||||||
| 0x5938 | struct _FILESYSTEM_DISK_COUNTERS FsCounters | uint64_t PteBitCache | ||||||||||
| 0x5940 | unsigned long PteBitOffset | |||||||||||
| 0x5948 | uint8_t[13] VendorString | struct _FILESYSTEM_DISK_COUNTERS FsCounters | ||||||||||
| 0x5955 | uint8_t[3] PrcbPad10 | |||||||||||
| 0x5958 | unsigned long FeatureBits | uint8_t[13] VendorString | ||||||||||
| 0x5960 | union _LARGE_INTEGER UpdateSignature | |||||||||||
| 0x5965 | uint8_t[3] PrcbPad10 | |||||||||||
| 0x5968 | struct _CONTEXT * Context | uint64_t FeatureBits | ||||||||||
| 0x5970 | unsigned long ContextFlagsInit | unsigned long PrcbPad11 | ||||||||||
| 0x5978 | struct _XSAVE_AREA * ExtendedState | union _LARGE_INTEGER UpdateSignature | ||||||||||
| 0x5980 | struct _KENTROPY_TIMING_STATE EntropyTimingState | struct _CONTEXT * Context | unsigned long InterruptCount | |||||||||
| 0x5984 | unsigned long KernelTime | |||||||||||
| 0x5988 | unsigned long ContextFlagsInit | unsigned long UserTime | ||||||||||
| 0x598C | unsigned long DpcTime | |||||||||||
| 0x5990 | struct _XSAVE_AREA * ExtendedState | unsigned long InterruptTime | ||||||||||
| 0x5994 | unsigned long AdjustDpcThreshold | |||||||||||
| 0x5998 | void * IsrStack | uint8_t DebuggerSavedIRQL | ||||||||||
| 0x5999 | uint8_t GroupSchedulingOverQuota | |||||||||||
| 0x599A | volatile uint8_t DeepSleep | |||||||||||
| 0x599B | uint8_t[5] PrcbPad80 | |||||||||||
| 0x59A0 | struct _KENTROPY_TIMING_STATE EntropyTimingState | unsigned long DpcTimeCount | ||||||||||
| 0x59A4 | unsigned long DpcTimeLimit | |||||||||||
| 0x59A8 | unsigned long PeriodicCount | |||||||||||
| 0x59AC | unsigned long PeriodicBias | |||||||||||
| 0x59B0 | unsigned long AvailableTime | |||||||||||
| 0x59B4 | unsigned long KeExceptionDispatchCount | |||||||||||
| 0x59B8 | uint64_t StartCycles | |||||||||||
| 0x59C0 | uint64_t TaggedCyclesStart | |||||||||||
| 0x59C8 | uint64_t[2] TaggedCycles | |||||||||||
| 0x59D8 | uint64_t GenerationTarget | |||||||||||
| 0x59E0 | uint64_t AffinitizedCycles | |||||||||||
| 0x59E8 | volatile unsigned long DeviceInterruptCount | |||||||||||
| 0x59EC | unsigned long[28] PrcbPad81 | |||||||||||
| 0x5A00 | struct _REQUEST_MAILBOX * Mailbox | |||||||||||
| 0x5A40 | struct _REQUEST_MAILBOX[1] RequestMailbox | |||||||||||
| 0x5A5C | volatile long MmSpinLockOrdering | |||||||||||
| 0x5A60 | unsigned long PageColor | |||||||||||
| 0x5A64 | unsigned long NodeColor | |||||||||||
| 0x5A68 | unsigned long NodeShiftedColor | |||||||||||
| 0x5A6C | unsigned long SecondaryColorMask | |||||||||||
| 0x5A70 | unsigned long PrcbPad83 | |||||||||||
| 0x5A78 | uint64_t CycleTime | |||||||||||
| 0x5A80 | unsigned long CcFastMdlReadNoWait | |||||||||||
| 0x5A84 | unsigned long CcFastMdlReadWait | |||||||||||
| 0x5A88 | unsigned long CcFastMdlReadNotPossible | |||||||||||
| 0x5A8C | unsigned long CcMapDataNoWait | |||||||||||
| 0x5A90 | unsigned long CcMapDataWait | |||||||||||
| 0x5A94 | unsigned long CcPinMappedDataCount | |||||||||||
| 0x5A98 | unsigned long CcPinReadNoWait | |||||||||||
| 0x5A9C | unsigned long CcPinReadWait | |||||||||||
| 0x5AA0 | unsigned long CcMdlReadNoWait | |||||||||||
| 0x5AA4 | unsigned long CcMdlReadWait | |||||||||||
| 0x5AA8 | unsigned long CcLazyWriteHotSpots | |||||||||||
| 0x5AAC | unsigned long CcLazyWriteIos | |||||||||||
| 0x5AB0 | unsigned long CcLazyWritePages | |||||||||||
| 0x5AB4 | unsigned long CcDataFlushes | |||||||||||
| 0x5AB8 | unsigned long CcDataPages | |||||||||||
| 0x5ABC | unsigned long CcLostDelayedWrites | |||||||||||
| 0x5AC0 | unsigned long CcFastReadResourceMiss | |||||||||||
| 0x5AC4 | unsigned long CcCopyReadWaitMiss | |||||||||||
| 0x5AC8 | unsigned long CcFastMdlReadResourceMiss | |||||||||||
| 0x5ACC | unsigned long CcMapDataNoWaitMiss | |||||||||||
| 0x5AD0 | unsigned long CcMapDataWaitMiss | |||||||||||
| 0x5AD4 | unsigned long CcPinReadNoWaitMiss | |||||||||||
| 0x5AD8 | unsigned long CcPinReadWaitMiss | |||||||||||
| 0x5ADC | unsigned long CcMdlReadNoWaitMiss | |||||||||||
| 0x5AE0 | unsigned long CcMdlReadWaitMiss | |||||||||||
| 0x5AE4 | unsigned long CcReadAheadIos | |||||||||||
| 0x5AE8 | volatile long MmCacheTransitionCount | |||||||||||
| 0x5AEC | volatile long MmCacheReadCount | |||||||||||
| 0x5AF0 | struct _SINGLE_LIST_ENTRY AbSelfIoBoostsList | volatile long MmCacheIoCount | ||||||||||
| 0x5AF4 | unsigned long[3] PrcbPad91 | |||||||||||
| 0x5AF8 | struct _SINGLE_LIST_ENTRY AbPropagateBoostsList | |||||||||||
| 0x5B00 | struct _REQUEST_MAILBOX * Mailbox | struct _KDPC AbDpc | struct _PROCESSOR_POWER_STATE PowerState | unsigned long InterruptCount | ||||||||
| 0x5B04 | unsigned long KernelTime | |||||||||||
| 0x5B08 | unsigned long UserTime | |||||||||||
| 0x5B0C | unsigned long DpcTime | |||||||||||
| 0x5B10 | unsigned long InterruptTime | |||||||||||
| 0x5B14 | unsigned long AdjustDpcThreshold | |||||||||||
| 0x5B18 | uint8_t DebuggerSavedIRQL | |||||||||||
| 0x5B19 | uint8_t GroupSchedulingOverQuota | |||||||||||
| 0x5B1A | volatile uint8_t DeepSleep | |||||||||||
| 0x5B1B | uint8_t[5] PrcbPad80 | |||||||||||
| 0x5B20 | unsigned long DpcTimeCount | |||||||||||
| 0x5B24 | unsigned long DpcTimeLimit | |||||||||||
| 0x5B28 | unsigned long PeriodicCount | |||||||||||
| 0x5B2C | unsigned long PeriodicBias | |||||||||||
| 0x5B30 | unsigned long AvailableTime | |||||||||||
| 0x5B34 | unsigned long KeExceptionDispatchCount | |||||||||||
| 0x5B38 | uint64_t StartCycles | |||||||||||
| 0x5B40 | struct _REQUEST_MAILBOX[1] RequestMailbox | struct _REQUEST_MAILBOX * Mailbox | struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent | uint64_t TaggedCyclesStart | |||||||
| 0x5B48 | uint64_t[2] TaggedCycles | |||||||||||
| 0x5B58 | uint64_t GenerationTarget | |||||||||||
| 0x5B60 | uint64_t AffinitizedCycles | |||||||||||
| 0x5B68 | volatile unsigned long DeviceInterruptCount | unsigned long[29] PrcbPad81 | ||||||||||
| 0x5B6C | unsigned long[28] PrcbPad81 | |||||||||||
| 0x5B80 | struct _REQUEST_MAILBOX[1] RequestMailbox | |||||||||||
| 0x5B94 | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious | |||||||||||
| 0x5BDC | volatile long MmSpinLockOrdering | |||||||||||
| 0x5BE0 | unsigned long PageColor | |||||||||||
| 0x5BE4 | unsigned long NodeColor | |||||||||||
| 0x5BE8 | struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace | unsigned long NodeShiftedColor | ||||||||||
| 0x5BEC | unsigned long SecondaryColorMask | |||||||||||
| 0x5BF0 | unsigned long PrcbPad83 | |||||||||||
| 0x5BF8 | uint64_t CycleTime | |||||||||||
| 0x5C00 | uint64_t[2][4] Cycles | |||||||||||
| 0x5C40 | unsigned long TimerExpirationTraceCount | unsigned long[16] PrcbPad84 | ||||||||||
| 0x5C80 | struct _REQUEST_MAILBOX * Mailbox | unsigned long CcFastMdlReadNoWait | ||||||||||
| 0x5C84 | unsigned long CcFastMdlReadWait | |||||||||||
| 0x5C88 | unsigned long CcFastMdlReadNotPossible | |||||||||||
| 0x5C8C | unsigned long CcMapDataNoWait | |||||||||||
| 0x5C90 | unsigned long CcMapDataWait | |||||||||||
| 0x5C94 | unsigned long CcPinMappedDataCount | |||||||||||
| 0x5C98 | unsigned long CcPinReadNoWait | |||||||||||
| 0x5C9C | unsigned long CcPinReadWait | |||||||||||
| 0x5CA0 | unsigned long CcMdlReadNoWait | |||||||||||
| 0x5CA4 | unsigned long CcMdlReadWait | |||||||||||
| 0x5CA8 | unsigned long CcLazyWriteHotSpots | |||||||||||
| 0x5CAC | unsigned long CcLazyWriteIos | |||||||||||
| 0x5CB0 | unsigned long CcLazyWritePages | |||||||||||
| 0x5CB4 | unsigned long CcDataFlushes | |||||||||||
| 0x5CB8 | unsigned long CcDataPages | |||||||||||
| 0x5CBC | unsigned long CcLostDelayedWrites | |||||||||||
| 0x5CC0 | struct _REQUEST_MAILBOX[1] RequestMailbox | unsigned long CcFastReadResourceMiss | ||||||||||
| 0x5CC4 | unsigned long CcCopyReadWaitMiss | |||||||||||
| 0x5CC8 | unsigned long CcFastMdlReadResourceMiss | |||||||||||
| 0x5CCC | unsigned long CcMapDataNoWaitMiss | |||||||||||
| 0x5CD0 | struct _LIST_ENTRY ScbList | unsigned long CcMapDataWaitMiss | ||||||||||
| 0x5CD4 | unsigned long CcPinReadNoWaitMiss | |||||||||||
| 0x5CD8 | unsigned long CcPinReadWaitMiss | |||||||||||
| 0x5CDC | unsigned long CcMdlReadNoWaitMiss | |||||||||||
| 0x5CE0 | unsigned long[7] PrcbPad92 | unsigned long CcMdlReadWaitMiss | ||||||||||
| 0x5CE4 | unsigned long CcReadAheadIos | |||||||||||
| 0x5CE8 | unsigned long TimerExpirationTraceCount | volatile long MmCacheTransitionCount | ||||||||||
| 0x5CEC | volatile long MmCacheReadCount | |||||||||||
| 0x5CF0 | volatile long MmCacheIoCount | |||||||||||
| 0x5CF4 | unsigned long[3] PrcbPad91 | |||||||||||
| 0x5CFC | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x5D00 | struct _REQUEST_MAILBOX * Mailbox | struct _KDPC DpcWatchdogDpc | struct _PROCESSOR_POWER_STATE PowerState | struct _PROCESSOR_POWER_STATE PowerState | ||||||||
| 0x5D40 | struct _REQUEST_MAILBOX[1] RequestMailbox | struct _KTIMER DpcWatchdogTimer | ||||||||||
| 0x5D80 | struct _CACHE_DESCRIPTOR[5] Cache | |||||||||||
| 0x5DBC | unsigned long CacheCount | |||||||||||
| 0x5DC0 | volatile unsigned long CachedCommit | |||||||||||
| 0x5DC4 | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x5DC8 | void * HyperPte | |||||||||||
| 0x5DD0 | void * WheaInfo | |||||||||||
| 0x5DD8 | void * EtwSupport | |||||||||||
| 0x5DE0 | union _SLIST_HEADER InterruptObjectPool | |||||||||||
| 0x5DF0 | union _SLIST_HEADER HypercallPageList | |||||||||||
| 0x5E00 | void * HypercallPageVirtual | |||||||||||
| 0x5E08 | void * VirtualApicAssist | |||||||||||
| 0x5E10 | uint64_t * StatisticsPage | |||||||||||
| 0x5E18 | struct _KAFFINITY_EX PackageProcessorSet | |||||||||||
| 0x5EB8 | struct _LIST_ENTRY ScbList | |||||||||||
| 0x5EC0 | uint64_t SharedReadyQueueMask | |||||||||||
| 0x5EC8 | struct _KSHARED_READY_QUEUE * SharedReadyQueue | unsigned long[13] PrcbPad92 | ||||||||||
| 0x5ED0 | uint64_t CoreProcessorSet | struct _LIST_ENTRY ScbList | ||||||||||
| 0x5ED8 | uint64_t ScanSiblingMask | |||||||||||
| 0x5EE0 | uint64_t LLCMask | unsigned long[7] PrcbPad92 | ||||||||||
| 0x5EE8 | uint64_t[5] CacheProcessorMask | |||||||||||
| 0x5EFC | unsigned long KeAlignmentFixupCount | |||||||||||
| 0x5F00 | struct _KDPC DpcWatchdogDpc | |||||||||||
| 0x5F10 | unsigned long ScanSiblingIndex | |||||||||||
| 0x5F18 | struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea | |||||||||||
| 0x5F20 | void * ProfileEventIndexAddress | |||||||||||
| 0x5F28 | uint64_t[11] PrcbPad94 | |||||||||||
| 0x5F40 | struct _KTIMER DpcWatchdogTimer | |||||||||||
| 0x5F80 | struct _SYNCH_COUNTERS SynchCounters | struct _CACHE_DESCRIPTOR[5] Cache | ||||||||||
| 0x5FBC | unsigned long CacheCount | |||||||||||
| 0x5FC0 | volatile unsigned long CachedCommit | |||||||||||
| 0x5FC4 | volatile unsigned long CachedResidentAvailable | |||||||||||
| 0x5FC8 | void * HyperPte | |||||||||||
| 0x5FD0 | void * WheaInfo | |||||||||||
| 0x5FD8 | void * EtwSupport | |||||||||||
| 0x5FE0 | union _SLIST_HEADER InterruptObjectPool | |||||||||||
| 0x5FF0 | union _SLIST_HEADER HypercallPageList | |||||||||||
| 0x6000 | void * HypercallCachedPages | |||||||||||
| 0x6008 | void * VirtualApicAssist | |||||||||||
| 0x6010 | uint64_t * StatisticsPage | |||||||||||
| 0x6018 | struct _KAFFINITY_EX PackageProcessorSet | |||||||||||
| 0x6038 | uint64_t PteBitCache | |||||||||||
| 0x6040 | unsigned long PteBitOffset | |||||||||||
| 0x6048 | struct _FILESYSTEM_DISK_COUNTERS FsCounters | |||||||||||
| 0x6058 | uint8_t[13] VendorString | |||||||||||
| 0x6065 | uint8_t[3] PrcbPad100 | |||||||||||
| 0x6068 | uint64_t FeatureBits | |||||||||||
| 0x6070 | unsigned long PrcbPad110 | |||||||||||
| 0x6078 | union _LARGE_INTEGER UpdateSignature | |||||||||||
| 0x6080 | struct _CONTEXT * Context | |||||||||||
| 0x6088 | unsigned long ContextFlagsInit | |||||||||||
| 0x6090 | struct _XSAVE_AREA * ExtendedState | |||||||||||
| 0x6098 | void * IsrStack | |||||||||||
| 0x60A0 | struct _KENTROPY_TIMING_STATE EntropyTimingState | |||||||||||
| 0x60C0 | uint64_t SharedReadyQueueMask | |||||||||||
| 0x60C8 | struct _KSHARED_READY_QUEUE * SharedReadyQueue | |||||||||||
| 0x60D0 | uint64_t CoreProcessorSet | unsigned long SharedQueueScanOwner | ||||||||||
| 0x60D4 | unsigned long ScanSiblingIndex | |||||||||||
| 0x60D8 | uint64_t ScanSiblingMask | uint64_t CoreProcessorSet | ||||||||||
| 0x60E0 | uint64_t LLCMask | uint64_t ScanSiblingMask | ||||||||||
| 0x60E8 | uint64_t[5] CacheProcessorMask | uint64_t LLCMask | ||||||||||
| 0x60F0 | uint64_t[5] CacheProcessorMask | |||||||||||
| 0x6110 | unsigned long ScanSiblingIndex | |||||||||||
| 0x6118 | struct _PROCESSOR_PROFILE_CONTROL_AREA * ProcessorProfileControlArea | |||||||||||
| 0x6120 | void * ProfileEventIndexAddress | |||||||||||
| 0x6128 | uint64_t[11] PrcbPad94 | |||||||||||
| 0x6180 | struct _SYNCH_COUNTERS SynchCounters | |||||||||||
| 0x61F0 | struct _SINGLE_LIST_ENTRY AbSelfIoBoostsList | |||||||||||
| 0x61F8 | struct _SINGLE_LIST_ENTRY AbPropagateBoostsList | |||||||||||
| 0x6200 | struct _KDPC AbDpc | |||||||||||
| 0x6238 | uint64_t PteBitCache | |||||||||||
| 0x6240 | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent | unsigned long PteBitOffset | ||||||||||
| 0x6248 | struct _FILESYSTEM_DISK_COUNTERS FsCounters | |||||||||||
| 0x6258 | uint8_t[13] VendorString | |||||||||||
| 0x6265 | uint8_t[3] PrcbPad100 | |||||||||||
| 0x6268 | uint64_t FeatureBits | |||||||||||
| 0x6270 | unsigned long PrcbPad110 | |||||||||||
| 0x6278 | union _LARGE_INTEGER UpdateSignature | |||||||||||
| 0x6280 | struct _CONTEXT * Context | |||||||||||
| 0x6288 | unsigned long ContextFlagsInit | |||||||||||
| 0x6290 | struct _XSAVE_AREA * ExtendedState | |||||||||||
| 0x6294 | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious | |||||||||||
| 0x6298 | void * IsrStack | |||||||||||
| 0x62A0 | struct _KENTROPY_TIMING_STATE EntropyTimingState | |||||||||||
| 0x6300 | struct _KSHARED_READY_QUEUE LocalSharedReadyQueue | |||||||||||
| 0x63F0 | struct _SINGLE_LIST_ENTRY AbSelfIoBoostsList | |||||||||||
| 0x63F8 | struct _SINGLE_LIST_ENTRY AbPropagateBoostsList | |||||||||||
| 0x6400 | struct _KDPC AbDpc | |||||||||||
| 0x6440 | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent | |||||||||||
| 0x6494 | struct _IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious | |||||||||||
| 0x6500 | struct _KSHARED_READY_QUEUE LocalSharedReadyQueue | struct _KSHARED_READY_QUEUE LocalSharedReadyQueue | ||||||||||
| 0x6568 | struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace | |||||||||||
| 0x6668 | unsigned long TimerExpirationTraceCount | |||||||||||
| 0x6670 | void * ExSaPageArray | |||||||||||
| 0x6680 | struct _REQUEST_MAILBOX * Mailbox | |||||||||||
| 0x66C0 | struct _REQUEST_MAILBOX[1] RequestMailbox | |||||||||||
| 0x6760 | struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace | |||||||||||
| 0x6768 | struct _KTIMER_EXPIRATION_TRACE[16] TimerExpirationTrace | |||||||||||
| 0x6860 | unsigned long TimerExpirationTraceCount | |||||||||||
| 0x6868 | unsigned long TimerExpirationTraceCount | void * ExSaPageArray | ||||||||||
| 0x6870 | void * ExSaPageArray | |||||||||||
| 0x6880 | struct _REQUEST_MAILBOX * Mailbox | |||||||||||
| 0x68C0 | struct _REQUEST_MAILBOX[1] RequestMailbox | |||||||||||