Min version | XP | XP SP2 | 2003/XP64 | 2003/XP64 SP1 | Vista | Vista SP1 | 7 | 8 Pre RTM | 8 Pre RTM | 8 | 8.1 Update 1 | 8.1 | 10 Pre RTM | 10 Pre RTM | 10 | 10 | ||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Max version | XP SP1 | XP SP3 | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | 8.1 Update 1 | 10 TH2 | |||||||||||||||
Architecture | x86 | x86 | x86 | x86 | x64 | x86 | x86 | x64 | x86 | x64 | x86 | x64 | x86 | x86 | x64 | x86 | x64 | x64 | x64 | x86 | x64 | |
x86 offset offset:bitpos | Field Name | x64 offset offset:bitpos | ||||||||||||||||||||
0x0000 | struct _DISPATCHER_HEADER Header | 0x0000 | ||||||||||||||||||||
0x0010 | struct _LIST_ENTRY ProfileListHead | 0x0018 | ||||||||||||||||||||
0x0018 | unsigned long[2] DirectoryTableBase | uint64_t[2] DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | unsigned long DirectoryTableBase | uint64_t DirectoryTableBase | 0x0028 | |||||||
0x001C | uintptr_t Unused0 | struct _KGDTENTRY LdtDescriptor | struct _KGDTENTRY LdtDescriptor | struct _KGDTENTRY LdtDescriptor | struct _KGDTENTRY LdtDescriptor | struct _KGDTENTRY LdtDescriptor | 0x0030 | |||||||||||||||
0x0020 | struct _KGDTENTRY LdtDescriptor | struct _KGDTENTRY LdtDescriptor | ||||||||||||||||||||
0x0024 | struct _KIDTENTRY Int21Descriptor | struct _KIDTENTRY Int21Descriptor | struct _KIDTENTRY Int21Descriptor | struct _KIDTENTRY Int21Descriptor | struct _KIDTENTRY Int21Descriptor | |||||||||||||||||
0x0028 | struct _KIDTENTRY Int21Descriptor | struct _KIDTENTRY Int21Descriptor | ||||||||||||||||||||
0x002C | struct _LIST_ENTRY ThreadListHead | 0x0030 | ||||||||||||||||||||
0x0030 | uint16_t IopmOffset | 0x0038 | ||||||||||||||||||||
0x0032 | uint8_t Iopl | uint8_t Iopl | uint8_t Unused1 | |||||||||||||||||||
0x0033 | uint8_t Unused | uint8_t Unused | uint8_t Unused2 | |||||||||||||||||||
0x0034 | unsigned long ActiveProcessors | volatile unsigned long ActiveProcessors | volatile uint64_t ActiveProcessors | volatile unsigned long ActiveProcessors | volatile uint64_t ActiveProcessors | unsigned long ProcessLock | uint64_t ProcessLock | unsigned long ProcessLock | uint64_t ProcessLock | unsigned long ProcessLock | 0x0040 | |||||||||||
unsigned long Spare0 | unsigned long Spare0 | unsigned long Spare0 | 0x0044 | |||||||||||||||||||
0x0038 | unsigned long KernelTime | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | uint64_t DeepFreezeStartTime | 0x0048 | |||||||||||
0x003C | unsigned long UserTime | 0x004C | ||||||||||||||||||||
0x0040 | struct _LIST_ENTRY ReadyListHead | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | 0x0050 | |||||||||||||||||
void * Reserved1 | void * InstrumentationCallback | 0x0068 | ||||||||||||||||||||
0x0044 | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | 0x0070 | ||||||||||||||||||
0x0044 | struct _LIST_ENTRY ReadyListHead | 0x0090 | ||||||||||||||||||||
unsigned long Unused2 | 0x00D4 | |||||||||||||||||||||
0x0044 | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | 0x00F0 | |||||||||||||||||
0x0048 | struct _SINGLE_LIST_ENTRY SwapListEntry | 0x0060 | ||||||||||||||||||||
0x004C | void * VdmTrapcHandler | void * VdmTrapcHandler | struct _SINGLE_LIST_ENTRY SwapListEntry | struct _SINGLE_LIST_ENTRY SwapListEntry | struct _SINGLE_LIST_ENTRY SwapListEntry | 0x0080 | ||||||||||||||||
0x004C | struct _SINGLE_LIST_ENTRY SwapListEntry | struct _SINGLE_LIST_ENTRY SwapListEntry | 0x00A0 | |||||||||||||||||||
0x004C | struct _LIST_ENTRY ReadyListHead | struct _LIST_ENTRY ReadyListHead | 0x00F8 | |||||||||||||||||||
0x004C | void * InstrumentationCallback | struct _SINGLE_LIST_ENTRY SwapListEntry | 0x0100 | |||||||||||||||||||
0x0050 | struct _LIST_ENTRY ThreadListHead | struct _LIST_ENTRY ThreadListHead | struct _LIST_ENTRY ThreadListHead | struct _LIST_ENTRY ThreadListHead | 0x0070 | |||||||||||||||||
0x0050 | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | 0x0088 | |||||||||||||||||||
0x0050 | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | 0x00A8 | |||||||||||||||||||
0x0050 | struct _LIST_ENTRY ThreadListHead | struct _LIST_ENTRY ThreadListHead | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | 0x0108 | |||||||||||||||
0x0054 | union _KGDTENTRY64 LdtSystemDescriptor | struct _SINGLE_LIST_ENTRY SwapListEntry | 0x0108 | |||||||||||||||||||
0x0058 | uintptr_t ProcessLock | uintptr_t ProcessLock | uintptr_t ProcessLock | uintptr_t ProcessLock | 0x0080 | |||||||||||||||||
0x0058 | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | volatile struct _KAFFINITY_EX ActiveProcessors | 0x0110 | ||||||||||||||||||
0x005C | uintptr_t Affinity | uintptr_t Affinity | uintptr_t Affinity | uintptr_t Affinity | 0x0088 | |||||||||||||||||
0x005C:0x00 | volatile long AutoAlignment | 0x00B0:0x00 | ||||||||||||||||||||
0x005C | volatile long ProcessFlags | volatile long ProcessFlags | 0x00B0 | |||||||||||||||||||
0x005C:0x00 | unsigned long Affinity | unsigned long Affinity | volatile long AutoAlignment | long AutoAlignment | 0x00F0:0x00 | |||||||||||||||||
0x005C | volatile long ProcessFlags | 0x00F0 | ||||||||||||||||||||
struct _KGUARDED_MUTEX LdtProcessLock | 0x0120 | |||||||||||||||||||||
uint16_t LdtTableLength | 0x015A | |||||||||||||||||||||
uint16_t LdtFreeSelectorHint | 0x015C | |||||||||||||||||||||
uint16_t LdtTableLength | 0x015E | |||||||||||||||||||||
union _KGDTENTRY64 LdtSystemDescriptor | 0x0160 | |||||||||||||||||||||
void * LdtBaseAddress | 0x0170 | |||||||||||||||||||||
struct _FAST_MUTEX LdtProcessLock | 0x0178 | |||||||||||||||||||||
0x005C:0x00 | void * InstrumentationCallback | long AutoAlignment | 0x01B0 | |||||||||||||||||||
0x005C | volatile long ProcessFlags | volatile long ProcessFlags | volatile long ProcessFlags | volatile long ProcessFlags | 0x01B0 | |||||||||||||||||
0x005C:0x01 | volatile long DisableBoost | volatile long DisableBoost | 0x00B0:0x01 | |||||||||||||||||||
0x005C:0x01 | volatile long DisableBoost | volatile long DisableBoost | 0x00F0:0x01 | |||||||||||||||||||
0x005C:0x01 | long DisableBoost | 0x01B0:0x01 | ||||||||||||||||||||
0x005C:0x02 | volatile long DisableQuantum | volatile long DisableQuantum | 0x00B0:0x02 | |||||||||||||||||||
0x005C:0x02 | volatile long DisableQuantum | volatile long DisableQuantum | 0x00F0:0x02 | |||||||||||||||||||
0x005C:0x02 | long DisableQuantum | 0x01B0:0x02 | ||||||||||||||||||||
0x005C:0x03 | volatile unsigned long ActiveGroupsMask | volatile unsigned long ActiveGroupsMask | 0x00B0:0x03 | |||||||||||||||||||
0x005C:0x03 | volatile long AffinitySet | volatile long AffinitySet | 0x00F0:0x03 | |||||||||||||||||||
0x005C:0x03 | long AffinitySet | 0x01B0:0x03 | ||||||||||||||||||||
0x005C:0x04 | volatile long ReservedFlags | volatile long ReservedFlags | 0x00B0:0x07 | |||||||||||||||||||
0x005C:0x04 | volatile unsigned long DeepFreeze | volatile unsigned long DeepFreeze | 0x00F0:0x04 | |||||||||||||||||||
0x005C:0x04 | unsigned long DeepFreeze | 0x01B0:0x04 | ||||||||||||||||||||
0x005C:0x05 | volatile unsigned long IdleAware | volatile unsigned long IdleAware | 0x00F0:0x05 | |||||||||||||||||||
0x005C:0x05 | unsigned long TimerVirtualization | 0x01B0:0x05 | ||||||||||||||||||||
0x005C:0x06 | unsigned long TimerVirtualization | unsigned long TimerVirtualization | unsigned long ActiveGroupsMask | 0x00F0:0x06 | ||||||||||||||||||
0x005C:0x06 | unsigned long ActiveGroupsMask | unsigned long CheckStackExtents | 0x01B0:0x06 | |||||||||||||||||||
0x005C:0x07 | volatile unsigned long ActiveGroupsMask | volatile unsigned long ActiveGroupsMask | long ReservedFlags | 0x00F0:0x07 | ||||||||||||||||||
0x005C:0x07 | unsigned long ActiveGroupsMask | unsigned long ActiveGroupsMask | 0x01B0:0x07 | |||||||||||||||||||
0x005C:0x07 | long ReservedFlags | long ReservedFlags | 0x01B0:0x1A | |||||||||||||||||||
0x005C:0x08 | volatile long ReservedFlags | volatile long ReservedFlags | 0x00F0:0x0F | |||||||||||||||||||
0x005C:0x08 | long ReservedFlags | 0x01B0:0x1B | ||||||||||||||||||||
0x0060:0x00 | long AutoAlignment | volatile long AutoAlignment | 0x0090:0x00 | |||||||||||||||||||
0x0060 | long ProcessFlags | long ProcessFlags | volatile long ProcessFlags | volatile long ProcessFlags | 0x0090 | |||||||||||||||||
0x0060 | uint16_t StackCount | volatile long AutoAlignment | char BasePriority | char BasePriority | char BasePriority | 0x00B4 | ||||||||||||||||
0x0060 | volatile long ProcessFlags | char BasePriority | char BasePriority | 0x00F4 | ||||||||||||||||||
0x0060 | char BasePriority | char BasePriority | char BasePriority | char BasePriority | 0x01B4 | |||||||||||||||||
0x0060:0x01 | long DisableBoost | volatile long DisableBoost | 0x0090:0x01 | |||||||||||||||||||
0x0060:0x02 | long DisableQuantum | volatile long DisableQuantum | 0x0090:0x02 | |||||||||||||||||||
0x0060:0x03 | long ReservedFlags | long ReservedFlags | volatile long ReservedFlags | volatile long ReservedFlags | 0x0090:0x03 | |||||||||||||||||
0x0061 | char QuantumReset | char QuantumReset | char QuantumReset | 0x00B5 | ||||||||||||||||||
0x0061 | char QuantumReset | char QuantumReset | 0x00F5 | |||||||||||||||||||
0x0061 | char QuantumReset | 0x01B5 | ||||||||||||||||||||
0x0062 | char BasePriority | uint8_t Visited | uint8_t Visited | uint8_t Visited | 0x00B6 | |||||||||||||||||
0x0062 | uint8_t Visited | uint8_t Visited | 0x00F6 | |||||||||||||||||||
0x0062 | uint8_t Visited | 0x01B6 | ||||||||||||||||||||
0x0063 | char ThreadQuantum | uint8_t Unused3 | uint8_t Unused3 | union _KEXECUTE_OPTIONS Flags | 0x00B7 | |||||||||||||||||
0x0063 | union _KEXECUTE_OPTIONS Flags | union _KEXECUTE_OPTIONS Flags | 0x00F7 | |||||||||||||||||||
0x0063 | union _KEXECUTE_OPTIONS Flags | 0x01B7 | ||||||||||||||||||||
0x0064 | char BasePriority | char BasePriority | char BasePriority | char BasePriority | 0x0094 | |||||||||||||||||
0x0064 | uint8_t AutoAlignment | char BasePriority | x86: unsigned long[1] / x64: unsigned long[4] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[4] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[4] ThreadSeed | 0x00B8 | ||||||||||||||||
0x0064 | x86: unsigned long[1] / x64: unsigned long[8] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[8] ThreadSeed | 0x00F8 | |||||||||||||||||||
0x0064 | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | long AutoAlignment | 0x01B8 | ||||||||||||||||
0x0064 | volatile long ProcessFlags | 0x01B8 | ||||||||||||||||||||
0x0064:0x01 | long DisableBoost | 0x01B8:0x01 | ||||||||||||||||||||
0x0064:0x02 | long DisableQuantum | 0x01B8:0x02 | ||||||||||||||||||||
0x0064:0x03 | long AffinitySet | unsigned long DeepFreeze | 0x01B8:0x03 | |||||||||||||||||||
0x0064:0x04 | unsigned long DeepFreeze | unsigned long TimerVirtualization | 0x01B8:0x04 | |||||||||||||||||||
0x0064:0x05 | unsigned long TimerVirtualization | unsigned long CheckStackExtents | 0x01B8:0x05 | |||||||||||||||||||
0x0064:0x06 | unsigned long CheckStackExtents | unsigned long SpareFlags0 | 0x01B8:0x06 | |||||||||||||||||||
0x0065 | char QuantumReset | char QuantumReset | 0x0095 | |||||||||||||||||||
unsigned long SecureProcess | unsigned long SpareFlags0 | 0x01B8:0x07 | ||||||||||||||||||||
0x0065 | uint8_t State | char QuantumReset | unsigned long ActiveGroupsMask | 0x01B8:0x08 | ||||||||||||||||||
0x0064:0x09 | long ReservedFlags | long ReservedFlags | long ReservedFlags | 0x01B8:0x1C | ||||||||||||||||||
0x0066 | uint8_t ThreadSeed | uint8_t State | 0x0096 | |||||||||||||||||||
0x0067 | uint8_t DisableBoost | uint8_t ThreadSeed | 0x0097 | |||||||||||||||||||
0x0068 | uint8_t PowerState | uint8_t PowerState | uint8_t PowerState | uint8_t PowerState | 0x0098 | |||||||||||||||||
0x0068 | uint8_t PowerState | uint8_t PowerState | x86: uint16_t[1] / x64: uint16_t[4] IdealNode | x86: uint16_t[1] / x64: uint16_t[4] IdealNode | x86: uint16_t[1] / x64: uint16_t[4] IdealNode | 0x00C8 | ||||||||||||||||
0x0068 | void * LdtBaseAddress | x86: uint16_t[1] / x64: uint16_t[8] IdealNode | x86: uint16_t[1] / x64: uint16_t[8] IdealNode | 0x0118 | ||||||||||||||||||
0x0068 | char BasePriority | char BasePriority | char BasePriority | 0x01BC | ||||||||||||||||||
0x0068 | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | 0x0208 | |||||||||||||||||
0x0069 | uint8_t IdealNode | uint8_t IdealNode | uint8_t IdealNode | uint8_t IdealNode | 0x0099 | |||||||||||||||||
0x0069 | uint8_t DisableQuantum | uint8_t IdealNode | char QuantumReset | 0x01BD | ||||||||||||||||||
0x006A | uint8_t Visited | uint8_t Visited | uint8_t Visited | uint8_t Visited | 0x009A | |||||||||||||||||
0x006A | uint16_t IdealGlobalNode | uint16_t IdealGlobalNode | 0x00D0 | |||||||||||||||||||
0x006A | uint16_t IdealGlobalNode | uint16_t IdealGlobalNode | 0x0128 | |||||||||||||||||||
0x006A | uint8_t IdealNode | uint8_t Visited | uint16_t IdealGlobalNode | uint8_t Visited | uint8_t Visited | uint8_t Visited | 0x01BE | |||||||||||||||
0x006A | uint16_t IdealGlobalNode | uint16_t IdealGlobalNode | uint16_t IdealGlobalNode | uint16_t IdealGlobalNode | 0x0230 | |||||||||||||||||
0x006B | uint8_t ExecuteOptions | struct _KEXECUTE_OPTIONS Flags | uint8_t ExecuteOptions | struct _KEXECUTE_OPTIONS Flags | 0x009B | |||||||||||||||||
0x006B | uint8_t ExecuteOptions | uint8_t ExecuteOptions | uint8_t ExecuteOptions | uint8_t ExecuteOptions | 0x009B | |||||||||||||||||
0x006B | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | union _KEXECUTE_OPTIONS Flags | 0x01BF | ||||||||||||||||
0x006C | uintptr_t StackCount | uintptr_t StackCount | uintptr_t StackCount | uintptr_t StackCount | 0x00A0 | |||||||||||||||||
0x006C | union _KEXECUTE_OPTIONS Flags | union _KEXECUTE_OPTIONS Flags | 0x00D2 | |||||||||||||||||||
0x006C | unsigned long StackCount | uint16_t Spare0 | uint16_t Spare0 | uint16_t Spare1 | 0x012A | |||||||||||||||||
0x006C | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | x86: unsigned long[1] / x64: unsigned long[20] ThreadSeed | 0x01C0 | ||||||||||||||||||
0x006C | uint16_t Spare1 | uint16_t Spare1 | uint16_t Spare1 | uint16_t Spare1 | 0x0232 | |||||||||||||||||
0x006D | uint8_t Unused1 | 0x00D3 | ||||||||||||||||||||
0x006E | uint16_t IopmOffset | uint16_t IopmOffset | uint16_t IopmOffset | uint16_t IopmOffset | ||||||||||||||||||
0x0070 | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | unsigned long Spare1 | struct _KSCHEDULING_GROUP * volatile SchedulingGroup | 0x00A8 | |||||||||||||||
0x0070 | unsigned long Unused4 | unsigned long Unused4 | 0x00D8 | |||||||||||||||||||
0x0070 | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | x86: uint16_t[1] / x64: uint16_t[20] IdealNode | 0x0210 | ||||||||||||||||||
0x0070 | struct _KSCHEDULING_GROUP * SchedulingGroup | struct _KSCHEDULING_GROUP * SchedulingGroup | struct _KSCHEDULING_GROUP * SchedulingGroup | struct _KSCHEDULING_GROUP * SchedulingGroup | 0x0258 | |||||||||||||||||
0x0072 | uint16_t IdealGlobalNode | 0x0238 | ||||||||||||||||||||
0x0074 | union _KSTACK_COUNT StackCount | union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | 0x00DC | ||||||||||||||||||
0x0074 | union _KSTACK_COUNT StackCount | union _KSTACK_COUNT StackCount | 0x012C | |||||||||||||||||||
0x0074 | volatile union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | 0x0234 | |||||||||||||||||
0x0074 | uint16_t Spare1 | uint16_t Spare1 | 0x023A | |||||||||||||||||||
0x0076 | uint16_t IopmOffset | |||||||||||||||||||||
0x0078 | volatile uint64_t CycleTime | volatile uint64_t CycleTime | 0x00B8 | |||||||||||||||||||
0x0078 | volatile uint64_t CycleTime | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | 0x00E0 | |||||||||||||||||
0x0078 | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | 0x0130 | |||||||||||||||||||
0x0078 | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | struct _LIST_ENTRY ProcessListEntry | uint16_t IdealGlobalNode | 0x0238 | ||||||||||||||||
0x0078 | struct _KSCHEDULING_GROUP * SchedulingGroup | 0x0260 | ||||||||||||||||||||
0x007C | volatile union _KSTACK_COUNT StackCount | 0x023C | ||||||||||||||||||||
0x0080 | volatile uint64_t CycleTime | volatile uint64_t CycleTime | 0x00F0 | |||||||||||||||||||
0x0080 | volatile uint64_t CycleTime | volatile uint64_t CycleTime | 0x0140 | |||||||||||||||||||
0x0080 | struct _LIST_ENTRY ProcessListEntry | 0x0240 | ||||||||||||||||||||
0x0080 | uint64_t CycleTime | 0x0248 | ||||||||||||||||||||
0x0088 | unsigned long KernelTime | unsigned long KernelTime | uint64_t ContextSwitches | struct _LIST_ENTRY ReadyListHead | 0x00F8 | |||||||||||||||||
0x0088 | uint64_t ContextSwitches | uint64_t ContextSwitches | 0x0148 | |||||||||||||||||||
0x0088 | uint64_t ContextSwitches | uint64_t ContextSwitches | uint64_t ContextSwitches | uint64_t ContextSwitches | uint64_t CycleTime | uint64_t CycleTime | uint64_t CycleTime | 0x0250 | ||||||||||||||
0x008C | unsigned long UserTime | 0x00FC | ||||||||||||||||||||
0x0090 | unsigned long FreezeCount | unsigned long FreezeCount | 0x0150 | |||||||||||||||||||
0x0090 | void * VdmTrapcHandler | unsigned long FreezeCount | uint64_t ContextSwitches | uint64_t ContextSwitches | uint64_t ContextSwitches | 0x0258 | ||||||||||||||||
0x0090 | unsigned long FreezeCount | struct _KSCHEDULING_GROUP * SchedulingGroup | 0x0260 | |||||||||||||||||||
0x0094 | unsigned long KernelTime | unsigned long KernelTime | 0x0154 | |||||||||||||||||||
0x0094 | unsigned long KernelTime | 0x0264 | ||||||||||||||||||||
0x0098 | uint16_t LdtFreeSelectorHint | unsigned long UserTime | unsigned long UserTime | unsigned long UserTime | 0x0158 | |||||||||||||||||
0x0098 | unsigned long UserTime | unsigned long FreezeCount | 0x0268 | |||||||||||||||||||
0x009C | void * VdmTrapcHandler | void * VdmTrapcHandler | uint16_t LdtFreeSelectorHint | void * VdmTrapcHandler | uint16_t LdtFreeSelectorHint | unsigned long KernelTime | unsigned long KernelTime | unsigned long KernelTime | 0x026C | |||||||||||||
uint16_t LdtTableLength | uint16_t LdtTableLength | 0x026E | ||||||||||||||||||||
0x00A0 | union _KGDTENTRY64 LdtSystemDescriptor | union _KGDTENTRY64 LdtSystemDescriptor | unsigned long UserTime | unsigned long UserTime | 0x0270 | |||||||||||||||||
0x00A4 | void * VdmTrapcHandler |