Min versionXPXP SP22003/XP642003/XP64 SP1VistaVista SP178 Pre RTM8 Pre RTM88.1 Update 18.110 Pre RTM10 Pre RTM1010
Max versionXP SP1XP SP32003/XP64 SP2Vista SP27 SP18.1 Update 110 TH2
Architecturex86x86x86x86x64x86x86x64x86x64x86x64x86x86x64x86x64x64x64x86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000struct _DISPATCHER_HEADER
Header
0x0000
0x0010struct _LIST_ENTRY
ProfileListHead
0x0018
0x0018unsigned long[2]
DirectoryTableBase
uint64_t[2]
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
unsigned long
DirectoryTableBase
uint64_t
DirectoryTableBase
0x0028
0x001Cuintptr_t
Unused0
struct _KGDTENTRY
LdtDescriptor
struct _KGDTENTRY
LdtDescriptor
struct _KGDTENTRY
LdtDescriptor
struct _KGDTENTRY
LdtDescriptor
struct _KGDTENTRY
LdtDescriptor
0x0030
0x0020struct _KGDTENTRY
LdtDescriptor
struct _KGDTENTRY
LdtDescriptor
0x0024struct _KIDTENTRY
Int21Descriptor
struct _KIDTENTRY
Int21Descriptor
struct _KIDTENTRY
Int21Descriptor
struct _KIDTENTRY
Int21Descriptor
struct _KIDTENTRY
Int21Descriptor
0x0028struct _KIDTENTRY
Int21Descriptor
struct _KIDTENTRY
Int21Descriptor
0x002Cstruct _LIST_ENTRY
ThreadListHead
0x0030
0x0030uint16_t
IopmOffset
0x0038
0x0032uint8_t
Iopl
uint8_t
Iopl
uint8_t
Unused1
0x0033uint8_t
Unused
uint8_t
Unused
uint8_t
Unused2
0x0034unsigned long
ActiveProcessors
volatile unsigned long
ActiveProcessors
volatile uint64_t
ActiveProcessors
volatile unsigned long
ActiveProcessors
volatile uint64_t
ActiveProcessors
unsigned long
ProcessLock
uint64_t
ProcessLock
unsigned long
ProcessLock
uint64_t
ProcessLock
unsigned long
ProcessLock
0x0040
unsigned long
Spare0
unsigned long
Spare0
unsigned long
Spare0
0x0044
0x0038unsigned long
KernelTime
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
uint64_t
DeepFreezeStartTime
0x0048
0x003Cunsigned long
UserTime
0x004C
0x0040struct _LIST_ENTRY
ReadyListHead
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
struct _KAFFINITY_EX
Affinity
0x0050
void *
Reserved1
void *
InstrumentationCallback
0x0068
0x0044struct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
0x0070
0x0044struct _LIST_ENTRY
ReadyListHead
0x0090
unsigned long
Unused2
0x00D4
0x0044struct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
0x00F0
0x0048struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0060
0x004Cvoid *
VdmTrapcHandler
void *
VdmTrapcHandler
struct _SINGLE_LIST_ENTRY
SwapListEntry
struct _SINGLE_LIST_ENTRY
SwapListEntry
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0080
0x004Cstruct _SINGLE_LIST_ENTRY
SwapListEntry
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x00A0
0x004Cstruct _LIST_ENTRY
ReadyListHead
struct _LIST_ENTRY
ReadyListHead
0x00F8
0x004Cvoid *
InstrumentationCallback
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0100
0x0050struct _LIST_ENTRY
ThreadListHead
struct _LIST_ENTRY
ThreadListHead
struct _LIST_ENTRY
ThreadListHead
struct _LIST_ENTRY
ThreadListHead
0x0070
0x0050volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
0x0088
0x0050volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
0x00A8
0x0050struct _LIST_ENTRY
ThreadListHead
struct _LIST_ENTRY
ThreadListHead
volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
0x0108
0x0054union _KGDTENTRY64
LdtSystemDescriptor
struct _SINGLE_LIST_ENTRY
SwapListEntry
0x0108
0x0058uintptr_t
ProcessLock
uintptr_t
ProcessLock
uintptr_t
ProcessLock
uintptr_t
ProcessLock
0x0080
0x0058volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
volatile struct _KAFFINITY_EX
ActiveProcessors
0x0110
0x005Cuintptr_t
Affinity
uintptr_t
Affinity
uintptr_t
Affinity
uintptr_t
Affinity
0x0088
0x005C:0x00volatile long
AutoAlignment
0x00B0:0x00
0x005Cvolatile long
ProcessFlags
volatile long
ProcessFlags
0x00B0
0x005C:0x00unsigned long
Affinity
unsigned long
Affinity
volatile long
AutoAlignment
long
AutoAlignment
0x00F0:0x00
0x005Cvolatile long
ProcessFlags
0x00F0
struct _KGUARDED_MUTEX
LdtProcessLock
0x0120
uint16_t
LdtTableLength
0x015A
uint16_t
LdtFreeSelectorHint
0x015C
uint16_t
LdtTableLength
0x015E
union _KGDTENTRY64
LdtSystemDescriptor
0x0160
void *
LdtBaseAddress
0x0170
struct _FAST_MUTEX
LdtProcessLock
0x0178
0x005C:0x00void *
InstrumentationCallback
long
AutoAlignment
0x01B0
0x005Cvolatile long
ProcessFlags
volatile long
ProcessFlags
volatile long
ProcessFlags
volatile long
ProcessFlags
0x01B0
0x005C:0x01volatile long
DisableBoost
volatile long
DisableBoost
0x00B0:0x01
0x005C:0x01volatile long
DisableBoost
volatile long
DisableBoost
0x00F0:0x01
0x005C:0x01long
DisableBoost
0x01B0:0x01
0x005C:0x02volatile long
DisableQuantum
volatile long
DisableQuantum
0x00B0:0x02
0x005C:0x02volatile long
DisableQuantum
volatile long
DisableQuantum
0x00F0:0x02
0x005C:0x02long
DisableQuantum
0x01B0:0x02
0x005C:0x03volatile unsigned long
ActiveGroupsMask
volatile unsigned long
ActiveGroupsMask
0x00B0:0x03
0x005C:0x03volatile long
AffinitySet
volatile long
AffinitySet
0x00F0:0x03
0x005C:0x03long
AffinitySet
0x01B0:0x03
0x005C:0x04volatile long
ReservedFlags
volatile long
ReservedFlags
0x00B0:0x07
0x005C:0x04volatile unsigned long
DeepFreeze
volatile unsigned long
DeepFreeze
0x00F0:0x04
0x005C:0x04unsigned long
DeepFreeze
0x01B0:0x04
0x005C:0x05volatile unsigned long
IdleAware
volatile unsigned long
IdleAware
0x00F0:0x05
0x005C:0x05unsigned long
TimerVirtualization
0x01B0:0x05
0x005C:0x06unsigned long
TimerVirtualization
unsigned long
TimerVirtualization
unsigned long
ActiveGroupsMask
0x00F0:0x06
0x005C:0x06unsigned long
ActiveGroupsMask
unsigned long
CheckStackExtents
0x01B0:0x06
0x005C:0x07volatile unsigned long
ActiveGroupsMask
volatile unsigned long
ActiveGroupsMask
long
ReservedFlags
0x00F0:0x07
0x005C:0x07unsigned long
ActiveGroupsMask
unsigned long
ActiveGroupsMask
0x01B0:0x07
0x005C:0x07long
ReservedFlags
long
ReservedFlags
0x01B0:0x1A
0x005C:0x08volatile long
ReservedFlags
volatile long
ReservedFlags
0x00F0:0x0F
0x005C:0x08long
ReservedFlags
0x01B0:0x1B
0x0060:0x00long
AutoAlignment
volatile long
AutoAlignment
0x0090:0x00
0x0060long
ProcessFlags
long
ProcessFlags
volatile long
ProcessFlags
volatile long
ProcessFlags
0x0090
0x0060uint16_t
StackCount
volatile long
AutoAlignment
char
BasePriority
char
BasePriority
char
BasePriority
0x00B4
0x0060volatile long
ProcessFlags
char
BasePriority
char
BasePriority
0x00F4
0x0060char
BasePriority
char
BasePriority
char
BasePriority
char
BasePriority
0x01B4
0x0060:0x01long
DisableBoost
volatile long
DisableBoost
0x0090:0x01
0x0060:0x02long
DisableQuantum
volatile long
DisableQuantum
0x0090:0x02
0x0060:0x03long
ReservedFlags
long
ReservedFlags
volatile long
ReservedFlags
volatile long
ReservedFlags
0x0090:0x03
0x0061char
QuantumReset
char
QuantumReset
char
QuantumReset
0x00B5
0x0061char
QuantumReset
char
QuantumReset
0x00F5
0x0061char
QuantumReset
0x01B5
0x0062char
BasePriority
uint8_t
Visited
uint8_t
Visited
uint8_t
Visited
0x00B6
0x0062uint8_t
Visited
uint8_t
Visited
0x00F6
0x0062uint8_t
Visited
0x01B6
0x0063char
ThreadQuantum
uint8_t
Unused3
uint8_t
Unused3
union _KEXECUTE_OPTIONS
Flags
0x00B7
0x0063union _KEXECUTE_OPTIONS
Flags
union _KEXECUTE_OPTIONS
Flags
0x00F7
0x0063union _KEXECUTE_OPTIONS
Flags
0x01B7
0x0064char
BasePriority
char
BasePriority
char
BasePriority
char
BasePriority
0x0094
0x0064uint8_t
AutoAlignment
char
BasePriority
x86: unsigned long[1] / x64: unsigned long[4]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[4]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[4]
ThreadSeed
0x00B8
0x0064x86: unsigned long[1] / x64: unsigned long[8]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[8]
ThreadSeed
0x00F8
0x0064x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
long
AutoAlignment
0x01B8
0x0064volatile long
ProcessFlags
0x01B8
0x0064:0x01long
DisableBoost
0x01B8:0x01
0x0064:0x02long
DisableQuantum
0x01B8:0x02
0x0064:0x03long
AffinitySet
unsigned long
DeepFreeze
0x01B8:0x03
0x0064:0x04unsigned long
DeepFreeze
unsigned long
TimerVirtualization
0x01B8:0x04
0x0064:0x05unsigned long
TimerVirtualization
unsigned long
CheckStackExtents
0x01B8:0x05
0x0064:0x06unsigned long
CheckStackExtents
unsigned long
SpareFlags0
0x01B8:0x06
0x0065char
QuantumReset
char
QuantumReset
0x0095
unsigned long
SecureProcess
unsigned long
SpareFlags0
0x01B8:0x07
0x0065uint8_t
State
char
QuantumReset
unsigned long
ActiveGroupsMask
0x01B8:0x08
0x0064:0x09long
ReservedFlags
long
ReservedFlags
long
ReservedFlags
0x01B8:0x1C
0x0066uint8_t
ThreadSeed
uint8_t
State
0x0096
0x0067uint8_t
DisableBoost
uint8_t
ThreadSeed
0x0097
0x0068uint8_t
PowerState
uint8_t
PowerState
uint8_t
PowerState
uint8_t
PowerState
0x0098
0x0068uint8_t
PowerState
uint8_t
PowerState
x86: uint16_t[1] / x64: uint16_t[4]
IdealNode
x86: uint16_t[1] / x64: uint16_t[4]
IdealNode
x86: uint16_t[1] / x64: uint16_t[4]
IdealNode
0x00C8
0x0068void *
LdtBaseAddress
x86: uint16_t[1] / x64: uint16_t[8]
IdealNode
x86: uint16_t[1] / x64: uint16_t[8]
IdealNode
0x0118
0x0068char
BasePriority
char
BasePriority
char
BasePriority
0x01BC
0x0068x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
0x0208
0x0069uint8_t
IdealNode
uint8_t
IdealNode
uint8_t
IdealNode
uint8_t
IdealNode
0x0099
0x0069uint8_t
DisableQuantum
uint8_t
IdealNode
char
QuantumReset
0x01BD
0x006Auint8_t
Visited
uint8_t
Visited
uint8_t
Visited
uint8_t
Visited
0x009A
0x006Auint16_t
IdealGlobalNode
uint16_t
IdealGlobalNode
0x00D0
0x006Auint16_t
IdealGlobalNode
uint16_t
IdealGlobalNode
0x0128
0x006Auint8_t
IdealNode
uint8_t
Visited
uint16_t
IdealGlobalNode
uint8_t
Visited
uint8_t
Visited
uint8_t
Visited
0x01BE
0x006Auint16_t
IdealGlobalNode
uint16_t
IdealGlobalNode
uint16_t
IdealGlobalNode
uint16_t
IdealGlobalNode
0x0230
0x006Buint8_t
ExecuteOptions
struct _KEXECUTE_OPTIONS
Flags
uint8_t
ExecuteOptions
struct _KEXECUTE_OPTIONS
Flags
0x009B
0x006Buint8_t
ExecuteOptions
uint8_t
ExecuteOptions
uint8_t
ExecuteOptions
uint8_t
ExecuteOptions
0x009B
0x006Buint8_t
Spare
struct _KEXECUTE_OPTIONS
Flags
uint8_t
Spare
struct _KEXECUTE_OPTIONS
Flags
union _KEXECUTE_OPTIONS
Flags
0x01BF
0x006Cuintptr_t
StackCount
uintptr_t
StackCount
uintptr_t
StackCount
uintptr_t
StackCount
0x00A0
0x006Cunion _KEXECUTE_OPTIONS
Flags
union _KEXECUTE_OPTIONS
Flags
0x00D2
0x006Cunsigned long
StackCount
uint16_t
Spare0
uint16_t
Spare0
uint16_t
Spare1
0x012A
0x006Cx86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
x86: unsigned long[1] / x64: unsigned long[20]
ThreadSeed
0x01C0
0x006Cuint16_t
Spare1
uint16_t
Spare1
uint16_t
Spare1
uint16_t
Spare1
0x0232
0x006Duint8_t
Unused1
0x00D3
0x006Euint16_t
IopmOffset
uint16_t
IopmOffset
uint16_t
IopmOffset
uint16_t
IopmOffset
0x0070struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
unsigned long
Spare1
struct _KSCHEDULING_GROUP * volatile
SchedulingGroup
0x00A8
0x0070unsigned long
Unused4
unsigned long
Unused4
0x00D8
0x0070x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
x86: uint16_t[1] / x64: uint16_t[20]
IdealNode
0x0210
0x0070struct _KSCHEDULING_GROUP *
SchedulingGroup
struct _KSCHEDULING_GROUP *
SchedulingGroup
struct _KSCHEDULING_GROUP *
SchedulingGroup
struct _KSCHEDULING_GROUP *
SchedulingGroup
0x0258
0x0072uint16_t
IdealGlobalNode
0x0238
0x0074union _KSTACK_COUNT
StackCount
union _KSTACK_COUNT
StackCount
volatile union _KSTACK_COUNT
StackCount
0x00DC
0x0074union _KSTACK_COUNT
StackCount
union _KSTACK_COUNT
StackCount
0x012C
0x0074volatile union _KSTACK_COUNT
StackCount
volatile union _KSTACK_COUNT
StackCount
volatile union _KSTACK_COUNT
StackCount
volatile union _KSTACK_COUNT
StackCount
0x0234
0x0074uint16_t
Spare1
uint16_t
Spare1
0x023A
0x0076uint16_t
IopmOffset
0x0078volatile uint64_t
CycleTime
volatile uint64_t
CycleTime
0x00B8
0x0078volatile uint64_t
CycleTime
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
0x00E0
0x0078struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
0x0130
0x0078struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
struct _LIST_ENTRY
ProcessListEntry
uint16_t
IdealGlobalNode
0x0238
0x0078struct _KSCHEDULING_GROUP *
SchedulingGroup
0x0260
0x007Cvolatile union _KSTACK_COUNT
StackCount
0x023C
0x0080volatile uint64_t
CycleTime
volatile uint64_t
CycleTime
0x00F0
0x0080volatile uint64_t
CycleTime
volatile uint64_t
CycleTime
0x0140
0x0080struct _LIST_ENTRY
ProcessListEntry
0x0240
0x0080uint64_t
CycleTime
0x0248
0x0088unsigned long
KernelTime
unsigned long
KernelTime
uint64_t
ContextSwitches
struct _LIST_ENTRY
ReadyListHead
0x00F8
0x0088uint64_t
ContextSwitches
uint64_t
ContextSwitches
0x0148
0x0088uint64_t
ContextSwitches
uint64_t
ContextSwitches
uint64_t
ContextSwitches
uint64_t
ContextSwitches
uint64_t
CycleTime
uint64_t
CycleTime
uint64_t
CycleTime
0x0250
0x008Cunsigned long
UserTime
0x00FC
0x0090unsigned long
FreezeCount
unsigned long
FreezeCount
0x0150
0x0090void *
VdmTrapcHandler
unsigned long
FreezeCount
uint64_t
ContextSwitches
uint64_t
ContextSwitches
uint64_t
ContextSwitches
0x0258
0x0090unsigned long
FreezeCount
struct _KSCHEDULING_GROUP *
SchedulingGroup
0x0260
0x0094unsigned long
KernelTime
unsigned long
KernelTime
0x0154
0x0094unsigned long
KernelTime
0x0264
0x0098uint16_t
LdtFreeSelectorHint
unsigned long
UserTime
unsigned long
UserTime
unsigned long
UserTime
0x0158
0x0098unsigned long
UserTime
unsigned long
FreezeCount
0x0268
0x009Cvoid *
VdmTrapcHandler
void *
VdmTrapcHandler
uint16_t
LdtFreeSelectorHint
void *
VdmTrapcHandler
uint16_t
LdtFreeSelectorHint
unsigned long
KernelTime
unsigned long
KernelTime
unsigned long
KernelTime
0x026C
uint16_t
LdtTableLength
uint16_t
LdtTableLength
0x026E
0x00A0union _KGDTENTRY64
LdtSystemDescriptor
union _KGDTENTRY64
LdtSystemDescriptor
unsigned long
UserTime
unsigned long
UserTime
0x0270
0x00A4void *
VdmTrapcHandler