Min version | 2003/XP64 SP1 | Vista SP1 | 7 | 8 Pre RTM | 8 | 8.1 | 10 Pre RTM | 10 Pre RTM | 10 |
---|---|---|---|---|---|---|---|---|---|
Max version | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | 8.1 Update 1 | 10 TH2 | ||||
x64 offset offset:bitpos | Field Name | ||||||||
0x0000 | struct _DISPATCHER_HEADER Header | ||||||||
0x0018 | struct _LIST_ENTRY ProfileListHead | ||||||||
0x0028 | uint64_t[2] DirectoryTableBase | uint64_t DirectoryTableBase | |||||||
0x0030 | uint64_t Unused0 | struct _LIST_ENTRY ThreadListHead | |||||||
0x0038 | uint16_t IopmOffset | ||||||||
0x0040 | volatile uint64_t ActiveProcessors | uint64_t ProcessLock | unsigned long ProcessLock | ||||||
0x0044 | unsigned long Spare0 | ||||||||
0x0048 | unsigned long KernelTime | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | struct _KAFFINITY_EX Affinity | uint64_t DeepFreezeStartTime | ||||
0x004C | unsigned long UserTime | ||||||||
0x0050 | struct _LIST_ENTRY ReadyListHead | struct _KAFFINITY_EX Affinity | |||||||
0x0060 | struct _SINGLE_LIST_ENTRY SwapListEntry | ||||||||
0x0068 | void * Reserved1 | void * InstrumentationCallback | |||||||
0x0070 | struct _LIST_ENTRY ThreadListHead | struct _LIST_ENTRY ReadyListHead | |||||||
0x0080 | uint64_t ProcessLock | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||
0x0088 | uint64_t Affinity | volatile struct _KAFFINITY_EX ActiveProcessors | |||||||
0x0090:0x00 | long AutoAlignment | volatile long AutoAlignment | struct _LIST_ENTRY ReadyListHead | ||||||
0x0090 | long ProcessFlags | volatile long ProcessFlags | |||||||
0x0090:0x01 | long DisableBoost | volatile long DisableBoost | |||||||
0x0090:0x02 | long DisableQuantum | volatile long DisableQuantum | |||||||
0x0090:0x03 | long ReservedFlags | volatile long ReservedFlags | |||||||
0x0094 | char BasePriority | ||||||||
0x0095 | char QuantumReset | ||||||||
0x0096 | uint8_t State | ||||||||
0x0097 | uint8_t ThreadSeed | ||||||||
0x0098 | uint8_t PowerState | ||||||||
0x0099 | uint8_t IdealNode | ||||||||
0x009A | uint8_t Visited | ||||||||
0x009B | struct _KEXECUTE_OPTIONS Flags | ||||||||
0x009B | uint8_t ExecuteOptions | ||||||||
0x00A0 | uint64_t StackCount | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||
0x00A8 | struct _LIST_ENTRY ProcessListEntry | volatile struct _KAFFINITY_EX ActiveProcessors | |||||||
0x00B0:0x00 | volatile long AutoAlignment | ||||||||
0x00B0 | volatile long ProcessFlags | ||||||||
0x00B0:0x01 | volatile long DisableBoost | ||||||||
0x00B0:0x02 | volatile long DisableQuantum | ||||||||
0x00B0:0x03 | volatile unsigned long ActiveGroupsMask | ||||||||
0x00B0:0x07 | volatile long ReservedFlags | ||||||||
0x00B4 | char BasePriority | ||||||||
0x00B5 | char QuantumReset | ||||||||
0x00B6 | uint8_t Visited | ||||||||
0x00B7 | uint8_t Unused3 | ||||||||
0x00B8 | volatile uint64_t CycleTime | unsigned long[4] ThreadSeed | |||||||
0x00C8 | uint16_t[4] IdealNode | ||||||||
0x00D0 | uint16_t IdealGlobalNode | ||||||||
0x00D2 | union _KEXECUTE_OPTIONS Flags | ||||||||
0x00D3 | uint8_t Unused1 | ||||||||
0x00D4 | unsigned long Unused2 | ||||||||
0x00D8 | unsigned long Unused4 | ||||||||
0x00DC | union _KSTACK_COUNT StackCount | ||||||||
0x00E0 | struct _LIST_ENTRY ProcessListEntry | ||||||||
0x00F0 | volatile uint64_t CycleTime | volatile long AutoAlignment | struct _LIST_ENTRY ReadyListHead | ||||||
0x00F0 | volatile long ProcessFlags | ||||||||
0x00F0:0x01 | volatile long DisableBoost | ||||||||
0x00F0:0x02 | volatile long DisableQuantum | ||||||||
0x00F0:0x03 | volatile long AffinitySet | ||||||||
0x00F0:0x04 | volatile unsigned long DeepFreeze | ||||||||
0x00F0:0x05 | volatile unsigned long IdleAware | ||||||||
0x00F0:0x06 | unsigned long TimerVirtualization | ||||||||
0x00F0:0x07 | volatile unsigned long ActiveGroupsMask | ||||||||
0x00F0:0x0F | volatile long ReservedFlags | ||||||||
0x00F4 | char BasePriority | ||||||||
0x00F5 | char QuantumReset | ||||||||
0x00F6 | uint8_t Visited | ||||||||
0x00F7 | union _KEXECUTE_OPTIONS Flags | ||||||||
0x00F8 | unsigned long KernelTime | unsigned long[8] ThreadSeed | struct _LIST_ENTRY ReadyListHead | ||||||
0x00FC | unsigned long UserTime | ||||||||
0x0100 | void * InstrumentationCallback | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||
0x0108 | union _KGDTENTRY64 LdtSystemDescriptor | volatile struct _KAFFINITY_EX ActiveProcessors | struct _SINGLE_LIST_ENTRY SwapListEntry | ||||||
0x0110 | volatile struct _KAFFINITY_EX ActiveProcessors | ||||||||
0x0118 | void * LdtBaseAddress | uint16_t[8] IdealNode | |||||||
0x0120 | struct _KGUARDED_MUTEX LdtProcessLock | ||||||||
0x0128 | uint16_t IdealGlobalNode | ||||||||
0x012A | uint16_t Spare0 | ||||||||
0x012C | union _KSTACK_COUNT StackCount | ||||||||
0x0130 | struct _LIST_ENTRY ProcessListEntry | ||||||||
0x0140 | volatile uint64_t CycleTime | ||||||||
0x0148 | uint64_t ContextSwitches | ||||||||
0x0150 | unsigned long FreezeCount | ||||||||
0x0154 | unsigned long KernelTime | ||||||||
0x0158 | uint16_t LdtFreeSelectorHint | unsigned long UserTime | |||||||
0x015A | uint16_t LdtTableLength | ||||||||
0x015C | uint16_t LdtFreeSelectorHint | ||||||||
0x015E | uint16_t LdtTableLength | ||||||||
0x0160 | union _KGDTENTRY64 LdtSystemDescriptor | ||||||||
0x0170 | void * LdtBaseAddress | ||||||||
0x0178 | struct _FAST_MUTEX LdtProcessLock | ||||||||
0x01B0 | void * InstrumentationCallback | long AutoAlignment | |||||||
0x01B0 | volatile long ProcessFlags | ||||||||
0x01B0:0x01 | long DisableBoost | ||||||||
0x01B0:0x02 | long DisableQuantum | ||||||||
0x01B0:0x03 | long AffinitySet | ||||||||
0x01B0:0x04 | unsigned long DeepFreeze | ||||||||
0x01B0:0x05 | unsigned long TimerVirtualization | ||||||||
0x01B0:0x06 | unsigned long ActiveGroupsMask | unsigned long CheckStackExtents | |||||||
0x01B0:0x07 | unsigned long ActiveGroupsMask | ||||||||
0x01B0:0x1A | long ReservedFlags | ||||||||
0x01B0:0x1B | long ReservedFlags | ||||||||
0x01B4 | char BasePriority | ||||||||
0x01B5 | char QuantumReset | ||||||||
0x01B6 | uint8_t Visited | ||||||||
0x01B7 | union _KEXECUTE_OPTIONS Flags | ||||||||
0x01B8 | unsigned long[20] ThreadSeed | long AutoAlignment | |||||||
0x01B8 | volatile long ProcessFlags | ||||||||
0x01B8:0x01 | long DisableBoost | ||||||||
0x01B8:0x02 | long DisableQuantum | ||||||||
0x01B8:0x03 | long AffinitySet | unsigned long DeepFreeze | |||||||
0x01B8:0x04 | unsigned long DeepFreeze | unsigned long TimerVirtualization | |||||||
0x01B8:0x05 | unsigned long TimerVirtualization | unsigned long CheckStackExtents | |||||||
0x01B8:0x06 | unsigned long CheckStackExtents | unsigned long SpareFlags0 | |||||||
0x01B8:0x07 | unsigned long SecureProcess | unsigned long SpareFlags0 | |||||||
0x01B8:0x08 | unsigned long ActiveGroupsMask | ||||||||
0x01B8:0x1C | long ReservedFlags | ||||||||
0x01BC | char BasePriority | ||||||||
0x01BD | char QuantumReset | ||||||||
0x01BE | uint8_t Visited | ||||||||
0x01BF | union _KEXECUTE_OPTIONS Flags | ||||||||
0x01C0 | unsigned long[20] ThreadSeed | ||||||||
0x0208 | uint16_t[20] IdealNode | ||||||||
0x0210 | uint16_t[20] IdealNode | ||||||||
0x0230 | uint16_t IdealGlobalNode | ||||||||
0x0232 | uint16_t Spare1 | ||||||||
0x0234 | volatile union _KSTACK_COUNT StackCount | ||||||||
0x0238 | struct _LIST_ENTRY ProcessListEntry | uint16_t IdealGlobalNode | |||||||
0x023A | uint16_t Spare1 | ||||||||
0x023C | volatile union _KSTACK_COUNT StackCount | ||||||||
0x0240 | struct _LIST_ENTRY ProcessListEntry | ||||||||
0x0248 | uint64_t CycleTime | ||||||||
0x0250 | uint64_t ContextSwitches | uint64_t CycleTime | |||||||
0x0258 | struct _KSCHEDULING_GROUP * SchedulingGroup | uint64_t ContextSwitches | |||||||
0x0260 | unsigned long FreezeCount | struct _KSCHEDULING_GROUP * SchedulingGroup | |||||||
0x0264 | unsigned long KernelTime | ||||||||
0x0268 | unsigned long UserTime | unsigned long FreezeCount | |||||||
0x026C | uint16_t LdtFreeSelectorHint | unsigned long KernelTime | |||||||
0x026E | uint16_t LdtTableLength | ||||||||
0x0270 | union _KGDTENTRY64 LdtSystemDescriptor | unsigned long UserTime | |||||||
0x0274 | uint16_t LdtFreeSelectorHint | ||||||||
0x0276 | uint16_t LdtTableLength | ||||||||
0x0278 | union _KGDTENTRY64 LdtSystemDescriptor | ||||||||
0x0280 | void * LdtBaseAddress | ||||||||
0x0288 | struct _FAST_MUTEX LdtProcessLock | void * LdtBaseAddress | |||||||
0x0290 | struct _FAST_MUTEX LdtProcessLock | ||||||||
0x02C0 | void * InstrumentationCallback | ||||||||
0x02C8 | void * InstrumentationCallback | ||||||||
0x02D0 | uint64_t SecurePid |