| Min version | XP | XP SP2 | 2003/XP64 | 2003/XP64 SP1 | Vista | Vista SP1 | 7 | 8 Pre RTM | 8 Pre RTM | 8 | 8.1 Update 1 | 10 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Max version | XP SP1 | XP SP3 | 2003/XP64 SP2 | Vista SP2 | 7 SP1 | |||||||
| x86 offset offset:bitpos | Field Name | |||||||||||
| 0x0000 | struct _DISPATCHER_HEADER Header | |||||||||||
| 0x0010 | struct _LIST_ENTRY ProfileListHead | |||||||||||
| 0x0018 | unsigned long[2] DirectoryTableBase | unsigned long DirectoryTableBase | ||||||||||
| 0x001C | unsigned long Unused0 | struct _KGDTENTRY LdtDescriptor | ||||||||||
| 0x0020 | struct _KGDTENTRY LdtDescriptor | |||||||||||
| 0x0024 | struct _KIDTENTRY Int21Descriptor | |||||||||||
| 0x0028 | struct _KIDTENTRY Int21Descriptor | |||||||||||
| 0x002C | struct _LIST_ENTRY ThreadListHead | |||||||||||
| 0x0030 | uint16_t IopmOffset | |||||||||||
| 0x0032 | uint8_t Iopl | uint8_t Unused1 | ||||||||||
| 0x0033 | uint8_t Unused | uint8_t Unused2 | ||||||||||
| 0x0034 | unsigned long ActiveProcessors | volatile unsigned long ActiveProcessors | unsigned long ProcessLock | |||||||||
| 0x0038 | unsigned long KernelTime | struct _KAFFINITY_EX Affinity | uint64_t DeepFreezeStartTime | |||||||||
| 0x003C | unsigned long UserTime | |||||||||||
| 0x0040 | struct _LIST_ENTRY ReadyListHead | struct _KAFFINITY_EX Affinity | ||||||||||
| 0x0044 | struct _LIST_ENTRY ReadyListHead | |||||||||||
| 0x0048 | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||||||
| 0x004C | void * VdmTrapcHandler | struct _SINGLE_LIST_ENTRY SwapListEntry | struct _LIST_ENTRY ReadyListHead | |||||||||
| 0x0050 | struct _LIST_ENTRY ThreadListHead | volatile struct _KAFFINITY_EX ActiveProcessors | ||||||||||
| 0x0054 | struct _SINGLE_LIST_ENTRY SwapListEntry | |||||||||||
| 0x0058 | unsigned long ProcessLock | volatile struct _KAFFINITY_EX ActiveProcessors | ||||||||||
| 0x005C | unsigned long Affinity | volatile long AutoAlignment | long AutoAlignment | |||||||||
| 0x005C | volatile long ProcessFlags | |||||||||||
| 0x005C:0x01 | volatile long DisableBoost | long DisableBoost | ||||||||||
| 0x005C:0x02 | volatile long DisableQuantum | long DisableQuantum | ||||||||||
| 0x005C:0x03 | volatile unsigned long ActiveGroupsMask | volatile long AffinitySet | long AffinitySet | |||||||||
| 0x005C:0x04 | volatile long ReservedFlags | volatile unsigned long DeepFreeze | unsigned long DeepFreeze | |||||||||
| 0x005C:0x05 | volatile unsigned long IdleAware | unsigned long TimerVirtualization | ||||||||||
| 0x005C:0x06 | unsigned long TimerVirtualization | unsigned long ActiveGroupsMask | unsigned long CheckStackExtents | |||||||||
| 0x005C:0x07 | volatile unsigned long ActiveGroupsMask | long ReservedFlags | unsigned long ActiveGroupsMask | |||||||||
| 0x005C:0x08 | volatile long ReservedFlags | long ReservedFlags | ||||||||||
| 0x0060 | uint16_t StackCount | long AutoAlignment | volatile long AutoAlignment | char BasePriority | ||||||||
| 0x0060 | long ProcessFlags | volatile long ProcessFlags | ||||||||||
| 0x0060:0x01 | long DisableBoost | volatile long DisableBoost | ||||||||||
| 0x0060:0x02 | long DisableQuantum | volatile long DisableQuantum | ||||||||||
| 0x0060:0x03 | long ReservedFlags | volatile long ReservedFlags | ||||||||||
| 0x0061 | char QuantumReset | |||||||||||
| 0x0062 | char BasePriority | uint8_t Visited | ||||||||||
| 0x0063 | char ThreadQuantum | uint8_t Unused3 | union _KEXECUTE_OPTIONS Flags | |||||||||
| 0x0064 | uint8_t AutoAlignment | char BasePriority | unsigned long[1] ThreadSeed | long AutoAlignment | ||||||||
| 0x0064 | volatile long ProcessFlags | |||||||||||
| 0x0064:0x01 | long DisableBoost | |||||||||||
| 0x0064:0x02 | long DisableQuantum | |||||||||||
| 0x0064:0x03 | unsigned long DeepFreeze | |||||||||||
| 0x0064:0x04 | unsigned long TimerVirtualization | |||||||||||
| 0x0064:0x05 | unsigned long CheckStackExtents | |||||||||||
| 0x0064:0x06 | unsigned long SpareFlags0 | |||||||||||
| 0x0065 | uint8_t State | char QuantumReset | unsigned long ActiveGroupsMask | |||||||||
| 0x0064:0x09 | long ReservedFlags | |||||||||||
| 0x0066 | uint8_t ThreadSeed | uint8_t State | ||||||||||
| 0x0067 | uint8_t DisableBoost | uint8_t ThreadSeed | ||||||||||
| 0x0068 | uint8_t PowerState | uint16_t[1] IdealNode | char BasePriority | |||||||||
| 0x0069 | uint8_t DisableQuantum | uint8_t IdealNode | char QuantumReset | |||||||||
| 0x006A | uint8_t IdealNode | uint8_t Visited | uint16_t IdealGlobalNode | uint8_t Visited | ||||||||
| 0x006B | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | uint8_t Spare | struct _KEXECUTE_OPTIONS Flags | union _KEXECUTE_OPTIONS Flags | |||||||
| 0x006B | uint8_t ExecuteOptions | uint8_t ExecuteOptions | ||||||||||
| 0x006C | unsigned long StackCount | union _KEXECUTE_OPTIONS Flags | uint16_t Spare0 | uint16_t Spare1 | unsigned long[1] ThreadSeed | |||||||
| 0x006D | uint8_t Unused1 | |||||||||||
| 0x006E | uint16_t IopmOffset | |||||||||||
| 0x0070 | struct _LIST_ENTRY ProcessListEntry | unsigned long Unused4 | unsigned long Spare1 | struct _KSCHEDULING_GROUP * volatile SchedulingGroup | struct _KSCHEDULING_GROUP * SchedulingGroup | uint16_t[1] IdealNode | ||||||
| 0x0072 | uint16_t IdealGlobalNode | |||||||||||
| 0x0074 | union _KSTACK_COUNT StackCount | volatile union _KSTACK_COUNT StackCount | uint16_t Spare1 | |||||||||
| 0x0076 | uint16_t IopmOffset | |||||||||||
| 0x0078 | volatile uint64_t CycleTime | struct _LIST_ENTRY ProcessListEntry | struct _KSCHEDULING_GROUP * SchedulingGroup | |||||||||
| 0x007C | volatile union _KSTACK_COUNT StackCount | |||||||||||
| 0x0080 | volatile uint64_t CycleTime | uint64_t CycleTime | struct _LIST_ENTRY ProcessListEntry | |||||||||
| 0x0088 | unsigned long KernelTime | uint64_t ContextSwitches | uint64_t CycleTime | |||||||||
| 0x008C | unsigned long UserTime | |||||||||||
| 0x0090 | void * VdmTrapcHandler | unsigned long FreezeCount | uint64_t ContextSwitches | |||||||||
| 0x0094 | unsigned long KernelTime | |||||||||||
| 0x0098 | unsigned long UserTime | unsigned long FreezeCount | ||||||||||
| 0x009C | void * VdmTrapcHandler | unsigned long KernelTime | ||||||||||
| 0x00A0 | unsigned long UserTime | |||||||||||
| 0x00A4 | void * VdmTrapcHandler | |||||||||||