Min versionXPXP SP22003/XP642003/XP64 SP1VistaVista SP178 Pre RTM8 Pre RTM88.1 Update 18.18.1 Update 110 Pre RTM
Max versionXP SP1XP SP32003/XP64 SP2Vista SP27 SP188.1 Update 110 TH2
Architecturex86x86x86x64x86x64x86x64x86x64x86x64x86x64x86x64x86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000struct _LIST_ENTRY
InLoadOrderLinks
0x0000
0x0008struct _LIST_ENTRY
InMemoryOrderLinks
0x0010
0x0010struct _LIST_ENTRY
InInitializationOrderLinks
struct _LIST_ENTRY
InInitializationOrderLinks
struct _LIST_ENTRY
InInitializationOrderLinks
0x0020
0x0010struct _LIST_ENTRY
InProgressLinks
0x0020
0x0018void *
DllBase
0x0030
0x001Cvoid *
EntryPoint
0x0038
0x0020unsigned long
SizeOfImage
0x0040
0x0024struct _UNICODE_STRING
FullDllName
0x0048
0x002Cstruct _UNICODE_STRING
BaseDllName
0x0058
0x0034unsigned long
Flags
uint8_t[4]
FlagGroup
0x0068
0x0034unsigned long
Flags
0x0068
0x0034:0x00unsigned long
PackagedBinary
0x0068:0x00
0x0034:0x01unsigned long
MarkedForRemoval
0x0068:0x01
0x0034:0x02unsigned long
ImageDll
0x0068:0x02
0x0034:0x03unsigned long
LoadNotificationsSent
0x0068:0x03
0x0034:0x04unsigned long
TelemetryEntryProcessed
0x0068:0x04
0x0034:0x05unsigned long
ProcessStaticImport
0x0068:0x05
0x0034:0x06unsigned long
InLegacyLists
0x0068:0x06
0x0034:0x07unsigned long
InIndexes
0x0068:0x07
0x0034:0x08unsigned long
ShimDll
0x0068:0x08
0x0034:0x09unsigned long
InExceptionTable
0x0068:0x09
0x0034:0x0Aunsigned long
ReservedFlags1
0x0068:0x0A
0x0034:0x0Cunsigned long
LoadInProgress
0x0068:0x0C
0x0034:0x0Dunsigned long
ReservedFlags2
unsigned long
LoadConfigProcessed
0x0068:0x0D
0x0034:0x0Eunsigned long
EntryProcessed
0x0068:0x0E
0x0034:0x0Funsigned long
ReservedFlags3
unsigned long
ProtectDelayLoad
0x0068:0x0F
0x0034:0x10unsigned long
ReservedFlags3
0x0068:0x10
0x0034:0x12unsigned long
DontCallForThreads
0x0068:0x12
0x0034:0x13unsigned long
ProcessAttachCalled
0x0068:0x13
0x0034:0x14unsigned long
ProcessAttachFailed
0x0068:0x14
0x0034:0x15unsigned long
CorDeferredValidate
0x0068:0x15
0x0034:0x16unsigned long
CorImage
0x0068:0x16
0x0034:0x17unsigned long
DontRelocate
0x0068:0x17
0x0034:0x18unsigned long
CorILOnly
0x0068:0x18
0x0034:0x19unsigned long
ReservedFlags5
0x0068:0x19
0x0034:0x1Cunsigned long
Redirected
0x0068:0x1C
0x0034:0x1Dunsigned long
ReservedFlags6
0x0068:0x1D
0x0034:0x1Funsigned long
CompatDatabaseProcessed
0x0068:0x1F
0x0038uint16_t
LoadCount
uint16_t
ObsoleteLoadCount
0x006C
0x003Auint16_t
TlsIndex
0x006E
0x003Cstruct _LIST_ENTRY
HashLinks
struct _LIST_ENTRY
HashLinks
0x0070
0x003Cvoid *
SectionPointer
0x0070
0x0040unsigned long
CheckSum
0x0078
0x0044unsigned long
TimeDateStamp
unsigned long
TimeDateStamp
0x0080
0x0044void *
LoadedImports
0x0080
0x0048void *
EntryPointActivationContext
struct _ACTIVATION_CONTEXT *
EntryPointActivationContext
0x0088
0x004Cvoid *
PatchInformation
void *
Spare
void *
Lock
0x0090
0x0050struct _LIST_ENTRY
ForwarderLinks
struct _LDR_DDAG_NODE *
DdagNode
0x0098
0x0054struct _LIST_ENTRY
NodeModuleLink
0x00A0
0x0058struct _LIST_ENTRY
ServiceTagLinks
0x00A8
0x005Cstruct _LDRP_DLL_SNAP_CONTEXT *
SnapContext
struct _LDRP_LOAD_CONTEXT *
LoadContext
0x00B0
0x0060struct _LIST_ENTRY
StaticLinks
void *
SwitchBackContext
void *
ParentDllBase
0x00B8
0x0064struct _RTL_BALANCED_NODE
BaseAddressIndexNode
void *
SwitchBackContext
0x00C0
0x0068void *
ContextInformation
struct _RTL_BALANCED_NODE
BaseAddressIndexNode
0x00C8
0x006Cuintptr_t
OriginalBase
0x00D0
0x0070union _LARGE_INTEGER
LoadTime
union _LARGE_INTEGER
LoadTime
struct _RTL_BALANCED_NODE
MappingInfoIndexNode
0x00D8
0x0074struct _RTL_BALANCED_NODE
MappingInfoIndexNode
0x00E0
0x007Cuintptr_t
OriginalBase
0x00F0
0x0080union _LARGE_INTEGER
LoadTime
uintptr_t
OriginalBase
0x00F8
0x0088unsigned long
BaseNameHashValue
union _LARGE_INTEGER
LoadTime
0x0100
0x0090unsigned long
BaseNameHashValue
0x0108
0x0094enum _LDR_DLL_LOAD_REASON
LoadReason
0x010C
0x0098unsigned long
ImplicitPathOptions
0x0110
0x009Cunsigned long
ReferenceCount
0x0114