Min version | XP | XP SP2 | 2003/XP64 | 2003/XP64 SP1 | Vista | Vista SP1 | 7 | 8 Pre RTM | 8 Pre RTM | 8 | 8.1 Update 1 | 10 |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Max version | XP SP1 | XP SP3 | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | |||||||
x86 offset offset:bitpos | Field Name | |||||||||||
0x0000 | struct _DISPATCHER_HEADER Header | |||||||||||
0x0010 | struct _LIST_ENTRY ProfileListHead | |||||||||||
0x0018 | unsigned long[2] DirectoryTableBase | unsigned long DirectoryTableBase | ||||||||||
0x001C | unsigned long Unused0 | struct _KGDTENTRY LdtDescriptor | ||||||||||
0x0020 | struct _KGDTENTRY LdtDescriptor | |||||||||||
0x0024 | struct _KIDTENTRY Int21Descriptor | |||||||||||
0x0028 | struct _KIDTENTRY Int21Descriptor | |||||||||||
0x002C | struct _LIST_ENTRY ThreadListHead | |||||||||||
0x0030 | uint16_t IopmOffset | |||||||||||
0x0032 | uint8_t Iopl | uint8_t Unused1 | ||||||||||
0x0033 | uint8_t Unused | uint8_t Unused2 | ||||||||||
0x0034 | unsigned long ActiveProcessors | volatile unsigned long ActiveProcessors | unsigned long ProcessLock | |||||||||
0x0038 | unsigned long KernelTime | struct _KAFFINITY_EX Affinity | uint64_t DeepFreezeStartTime | |||||||||
0x003C | unsigned long UserTime | |||||||||||
0x0040 | struct _LIST_ENTRY ReadyListHead | struct _KAFFINITY_EX Affinity | ||||||||||
0x0044 | struct _LIST_ENTRY ReadyListHead | |||||||||||
0x0048 | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||||||
0x004C | void * VdmTrapcHandler | struct _SINGLE_LIST_ENTRY SwapListEntry | struct _LIST_ENTRY ReadyListHead | |||||||||
0x0050 | struct _LIST_ENTRY ThreadListHead | volatile struct _KAFFINITY_EX ActiveProcessors | ||||||||||
0x0054 | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||||||
0x0058 | unsigned long ProcessLock | volatile struct _KAFFINITY_EX ActiveProcessors | ||||||||||
0x005C | unsigned long Affinity | volatile long AutoAlignment | long AutoAlignment | |||||||||
0x005C | volatile long ProcessFlags | |||||||||||
0x005C:0x01 | volatile long DisableBoost | long DisableBoost | ||||||||||
0x005C:0x02 | volatile long DisableQuantum | long DisableQuantum | ||||||||||
0x005C:0x03 | volatile unsigned long ActiveGroupsMask | volatile long AffinitySet | long AffinitySet | |||||||||
0x005C:0x04 | volatile long ReservedFlags | volatile unsigned long DeepFreeze | unsigned long DeepFreeze | |||||||||
0x005C:0x05 | volatile unsigned long IdleAware | unsigned long TimerVirtualization | ||||||||||
0x005C:0x06 | unsigned long TimerVirtualization | unsigned long ActiveGroupsMask | unsigned long CheckStackExtents | |||||||||
0x005C:0x07 | volatile unsigned long ActiveGroupsMask | long ReservedFlags | unsigned long ActiveGroupsMask | |||||||||
0x005C:0x08 | volatile long ReservedFlags | long ReservedFlags | ||||||||||
0x0060 | uint16_t StackCount | long AutoAlignment | volatile long AutoAlignment | char BasePriority | ||||||||
0x0060 | long ProcessFlags | volatile long ProcessFlags | ||||||||||
0x0060:0x01 | long DisableBoost | volatile long DisableBoost | ||||||||||
0x0060:0x02 | long DisableQuantum | volatile long DisableQuantum | ||||||||||
0x0060:0x03 | long ReservedFlags | volatile long ReservedFlags | ||||||||||
0x0061 | char QuantumReset | |||||||||||
0x0062 | char BasePriority | uint8_t Visited | ||||||||||
0x0063 | char ThreadQuantum | uint8_t Unused3 | union _KEXECUTE_OPTIONS Flags | |||||||||
0x0064 | uint8_t AutoAlignment | char BasePriority | unsigned long[1] ThreadSeed | long AutoAlignment | ||||||||
0x0064 | volatile long ProcessFlags | |||||||||||
0x0064:0x01 | long DisableBoost | |||||||||||
0x0064:0x02 | long DisableQuantum | |||||||||||
0x0064:0x03 | unsigned long DeepFreeze | |||||||||||
0x0064:0x04 | unsigned long TimerVirtualization | |||||||||||
0x0064:0x05 | unsigned long CheckStackExtents | |||||||||||
0x0064:0x06 | unsigned long SpareFlags0 | |||||||||||
0x0065 | uint8_t State | char QuantumReset | unsigned long ActiveGroupsMask | |||||||||
0x0064:0x09 | long ReservedFlags | |||||||||||
0x0066 | uint8_t ThreadSeed | uint8_t State | ||||||||||
0x0067 | uint8_t DisableBoost | uint8_t ThreadSeed | ||||||||||
0x0068 | uint8_t PowerState | uint16_t[1] IdealNode | char BasePriority | |||||||||
0x0069 | uint8_t DisableQuantum | uint8_t IdealNode | char QuantumReset | |||||||||
0x006A | uint8_t IdealNode | uint8_t Visited | uint16_t IdealGlobalNode | uint8_t Visited | ||||||||
0x006B | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | union _KEXECUTE_OPTIONS Flags | |||||||
0x006B | uint8_t ExecuteOptions | uint8_t ExecuteOptions | ||||||||||
0x006C | unsigned long StackCount | union _KEXECUTE_OPTIONS Flags | uint16_t Spare0 | uint16_t Spare1 | unsigned long[1] ThreadSeed | |||||||
0x006D | uint8_t Unused1 | |||||||||||
0x006E | uint16_t IopmOffset | |||||||||||
0x0070 | struct _LIST_ENTRY ProcessListEntry | unsigned long Unused4 | unsigned long Spare1 | struct _KSCHEDULING_GROUP * volatile SchedulingGroup | struct _KSCHEDULING_GROUP * SchedulingGroup | uint16_t[1] IdealNode | ||||||
0x0072 | uint16_t IdealGlobalNode | |||||||||||
0x0074 | union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | uint16_t Spare1 | |||||||||
0x0076 | uint16_t IopmOffset | |||||||||||
0x0078 | volatile uint64_t CycleTime | struct _LIST_ENTRY ProcessListEntry | struct _KSCHEDULING_GROUP * SchedulingGroup | |||||||||
0x007C | volatile union _KSTACK_COUNT StackCount | |||||||||||
0x0080 | volatile uint64_t CycleTime | uint64_t CycleTime | struct _LIST_ENTRY ProcessListEntry | |||||||||
0x0088 | unsigned long KernelTime | uint64_t ContextSwitches | uint64_t CycleTime | |||||||||
0x008C | unsigned long UserTime | |||||||||||
0x0090 | void * VdmTrapcHandler | unsigned long FreezeCount | uint64_t ContextSwitches | |||||||||
0x0094 | unsigned long KernelTime | |||||||||||
0x0098 | unsigned long UserTime | unsigned long FreezeCount | ||||||||||
0x009C | void * VdmTrapcHandler | unsigned long KernelTime | ||||||||||
0x00A0 | unsigned long UserTime | |||||||||||
0x00A4 | void * VdmTrapcHandler |