Skip to content

Instantly share code, notes, and snippets.

@nmulasmajic

nmulasmajic/KPCR - Windows 10 (15063.0.amd64fre.rs2_release.170317-1834).txt Secret

Created July 9, 2017 18:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nmulasmajic/0d81e17f94fce1ae3c260908bf44c853 to your computer and use it in GitHub Desktop.
Save nmulasmajic/0d81e17f94fce1ae3c260908bf44c853 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
KPCR - Windows 10 (15063.0.amd64fre.rs2_release.170317-1834).txt
kd> dt nt!_KPCR -b
+0x000 NtTib : _NT_TIB
+0x000 ExceptionList : Ptr64
+0x008 StackBase : Ptr64
+0x010 StackLimit : Ptr64
+0x018 SubSystemTib : Ptr64
+0x020 FiberData : Ptr64
+0x020 Version : Uint4B
+0x028 ArbitraryUserPointer : Ptr64
+0x030 Self : Ptr64
+0x000 GdtBase : Ptr64
+0x008 TssBase : Ptr64
+0x010 UserRsp : Uint8B
+0x018 Self : Ptr64
+0x020 CurrentPrcb : Ptr64
+0x028 LockArray : Ptr64
+0x030 Used_Self : Ptr64
+0x038 IdtBase : Ptr64
+0x040 Unused : Uint8B
+0x050 Irql : UChar
+0x051 SecondLevelCacheAssociativity : UChar
+0x052 ObsoleteNumber : UChar
+0x053 Fill0 : UChar
+0x054 Unused0 : Uint4B
+0x060 MajorVersion : Uint2B
+0x062 MinorVersion : Uint2B
+0x064 StallScaleFactor : Uint4B
+0x068 Unused1 : Ptr64
+0x080 KernelReserved : Uint4B
+0x0bc SecondLevelCacheSize : Uint4B
+0x0c0 HalReserved : Uint4B
+0x100 Unused2 : Uint4B
+0x108 KdVersionBlock : Ptr64
+0x110 Unused3 : Ptr64
+0x118 PcrAlign1 : Uint4B
+0x180 Prcb : _KPRCB
+0x000 MxCsr : Uint4B
+0x004 LegacyNumber : UChar
+0x005 ReservedMustBeZero : UChar
+0x006 InterruptRequest : UChar
+0x007 IdleHalt : UChar
+0x008 CurrentThread : Ptr64
+0x010 NextThread : Ptr64
+0x018 IdleThread : Ptr64
+0x020 NestingLevel : UChar
+0x021 ClockOwner : UChar
+0x022 PendingTickFlags : UChar
+0x022 PendingTick : Pos 0, 1 Bit
+0x022 PendingBackupTick : Pos 1, 1 Bit
+0x023 IdleState : UChar
+0x024 Number : Uint4B
+0x028 RspBase : Uint8B
+0x030 PrcbLock : Uint8B
+0x038 PriorityState : Ptr64
+0x040 CpuType : Char
+0x041 CpuID : Char
+0x042 CpuStep : Uint2B
+0x042 CpuStepping : UChar
+0x043 CpuModel : UChar
+0x044 MHz : Uint4B
+0x048 HalReserved : Uint8B
+0x088 MinorVersion : Uint2B
+0x08a MajorVersion : Uint2B
+0x08c BuildType : UChar
+0x08d CpuVendor : UChar
+0x08e CoresPerPhysicalProcessor : UChar
+0x08f LogicalProcessorsPerCore : UChar
+0x090 PrcbPad04 : Uint8B
+0x0c0 ParentNode : Ptr64
+0x0c8 GroupSetMember : Uint8B
+0x0d0 Group : UChar
+0x0d1 GroupIndex : UChar
+0x0d2 PrcbPad05 : UChar
+0x0d4 InitialApicId : Uint4B
+0x0d8 ScbOffset : Uint4B
+0x0dc ApicMask : Uint4B
+0x0e0 AcpiReserved : Ptr64
+0x0e8 CFlushSize : Uint4B
+0x0ec PrcbPad10 : Uint4B
+0x0f0 PrcbPad11 : Uint8B
+0x100 ProcessorState : _KPROCESSOR_STATE
+0x000 SpecialRegisters : _KSPECIAL_REGISTERS
+0x000 Cr0 : Uint8B
+0x008 Cr2 : Uint8B
+0x010 Cr3 : Uint8B
+0x018 Cr4 : Uint8B
+0x020 KernelDr0 : Uint8B
+0x028 KernelDr1 : Uint8B
+0x030 KernelDr2 : Uint8B
+0x038 KernelDr3 : Uint8B
+0x040 KernelDr6 : Uint8B
+0x048 KernelDr7 : Uint8B
+0x050 Gdtr : _KDESCRIPTOR
+0x000 Pad : Uint2B
+0x006 Limit : Uint2B
+0x008 Base : Ptr64
+0x060 Idtr : _KDESCRIPTOR
+0x000 Pad : Uint2B
+0x006 Limit : Uint2B
+0x008 Base : Ptr64
+0x070 Tr : Uint2B
+0x072 Ldtr : Uint2B
+0x074 MxCsr : Uint4B
+0x078 DebugControl : Uint8B
+0x080 LastBranchToRip : Uint8B
+0x088 LastBranchFromRip : Uint8B
+0x090 LastExceptionToRip : Uint8B
+0x098 LastExceptionFromRip : Uint8B
+0x0a0 Cr8 : Uint8B
+0x0a8 MsrGsBase : Uint8B
+0x0b0 MsrGsSwap : Uint8B
+0x0b8 MsrStar : Uint8B
+0x0c0 MsrLStar : Uint8B
+0x0c8 MsrCStar : Uint8B
+0x0d0 MsrSyscallMask : Uint8B
+0x0d8 Xcr0 : Uint8B
+0x0e0 MsrFsBase : Uint8B
+0x0e8 SpecialPadding0 : Uint8B
+0x0f0 ContextFrame : _CONTEXT
+0x000 P1Home : Uint8B
+0x008 P2Home : Uint8B
+0x010 P3Home : Uint8B
+0x018 P4Home : Uint8B
+0x020 P5Home : Uint8B
+0x028 P6Home : Uint8B
+0x030 ContextFlags : Uint4B
+0x034 MxCsr : Uint4B
+0x038 SegCs : Uint2B
+0x03a SegDs : Uint2B
+0x03c SegEs : Uint2B
+0x03e SegFs : Uint2B
+0x040 SegGs : Uint2B
+0x042 SegSs : Uint2B
+0x044 EFlags : Uint4B
+0x048 Dr0 : Uint8B
+0x050 Dr1 : Uint8B
+0x058 Dr2 : Uint8B
+0x060 Dr3 : Uint8B
+0x068 Dr6 : Uint8B
+0x070 Dr7 : Uint8B
+0x078 Rax : Uint8B
+0x080 Rcx : Uint8B
+0x088 Rdx : Uint8B
+0x090 Rbx : Uint8B
+0x098 Rsp : Uint8B
+0x0a0 Rbp : Uint8B
+0x0a8 Rsi : Uint8B
+0x0b0 Rdi : Uint8B
+0x0b8 R8 : Uint8B
+0x0c0 R9 : Uint8B
+0x0c8 R10 : Uint8B
+0x0d0 R11 : Uint8B
+0x0d8 R12 : Uint8B
+0x0e0 R13 : Uint8B
+0x0e8 R14 : Uint8B
+0x0f0 R15 : Uint8B
+0x0f8 Rip : Uint8B
+0x100 FltSave : _XSAVE_FORMAT
+0x000 ControlWord : Uint2B
+0x002 StatusWord : Uint2B
+0x004 TagWord : UChar
+0x005 Reserved1 : UChar
+0x006 ErrorOpcode : Uint2B
+0x008 ErrorOffset : Uint4B
+0x00c ErrorSelector : Uint2B
+0x00e Reserved2 : Uint2B
+0x010 DataOffset : Uint4B
+0x014 DataSelector : Uint2B
+0x016 Reserved3 : Uint2B
+0x018 MxCsr : Uint4B
+0x01c MxCsr_Mask : Uint4B
+0x020 FloatRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x0a0 XmmRegisters : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1a0 Reserved4 : UChar
+0x100 Header : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x120 Legacy : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1a0 Xmm0 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1b0 Xmm1 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1c0 Xmm2 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1d0 Xmm3 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1e0 Xmm4 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x1f0 Xmm5 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x200 Xmm6 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x210 Xmm7 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x220 Xmm8 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x230 Xmm9 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x240 Xmm10 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x250 Xmm11 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x260 Xmm12 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x270 Xmm13 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x280 Xmm14 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x290 Xmm15 : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x300 VectorRegister : _M128A
+0x000 Low : Uint8B
+0x008 High : Int8B
+0x4a0 VectorControl : Uint8B
+0x4a8 DebugControl : Uint8B
+0x4b0 LastBranchToRip : Uint8B
+0x4b8 LastBranchFromRip : Uint8B
+0x4c0 LastExceptionToRip : Uint8B
+0x4c8 LastExceptionFromRip : Uint8B
+0x6c0 PrcbPad12 : Uint8B
+0x6f0 LockQueue : _KSPIN_LOCK_QUEUE
+0x000 Next : Ptr64
+0x008 Lock : Ptr64
+0x800 PPLookasideList : _PP_LOOKASIDE_LIST
+0x000 P : Ptr64
+0x008 L : Ptr64
+0x900 PPNxPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x008 Region : Uint8B
+0x000 HeaderX64 : <unnamed-tag>
+0x000 Depth : Pos 0, 16 Bits
+0x000 Sequence : Pos 16, 48 Bits
+0x008 Reserved : Pos 0, 4 Bits
+0x008 NextEntry : Pos 4, 60 Bits
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 Depth : Uint2B
+0x012 MaximumDepth : Uint2B
+0x014 TotalAllocates : Uint4B
+0x018 AllocateMisses : Uint4B
+0x018 AllocateHits : Uint4B
+0x01c TotalFrees : Uint4B
+0x020 FreeMisses : Uint4B
+0x020 FreeHits : Uint4B
+0x024 Type :
NonPagedPool = 0n0
NonPagedPoolExecute = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolBase = 0n0
NonPagedPoolBaseMustSucceed = 0n2
NonPagedPoolBaseCacheAligned = 0n4
NonPagedPoolBaseCacheAlignedMustS = 0n6
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
NonPagedPoolNx = 0n512
NonPagedPoolNxCacheAligned = 0n516
NonPagedPoolSessionNx = 0n544
+0x028 Tag : Uint4B
+0x02c Size : Uint4B
+0x030 AllocateEx : Ptr64
+0x030 Allocate : Ptr64
+0x038 FreeEx : Ptr64
+0x038 Free : Ptr64
+0x040 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x050 LastTotalAllocates : Uint4B
+0x054 LastAllocateMisses : Uint4B
+0x054 LastAllocateHits : Uint4B
+0x058 Future : Uint4B
+0x1500 PPNPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x008 Region : Uint8B
+0x000 HeaderX64 : <unnamed-tag>
+0x000 Depth : Pos 0, 16 Bits
+0x000 Sequence : Pos 16, 48 Bits
+0x008 Reserved : Pos 0, 4 Bits
+0x008 NextEntry : Pos 4, 60 Bits
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 Depth : Uint2B
+0x012 MaximumDepth : Uint2B
+0x014 TotalAllocates : Uint4B
+0x018 AllocateMisses : Uint4B
+0x018 AllocateHits : Uint4B
+0x01c TotalFrees : Uint4B
+0x020 FreeMisses : Uint4B
+0x020 FreeHits : Uint4B
+0x024 Type :
NonPagedPool = 0n0
NonPagedPoolExecute = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolBase = 0n0
NonPagedPoolBaseMustSucceed = 0n2
NonPagedPoolBaseCacheAligned = 0n4
NonPagedPoolBaseCacheAlignedMustS = 0n6
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
NonPagedPoolNx = 0n512
NonPagedPoolNxCacheAligned = 0n516
NonPagedPoolSessionNx = 0n544
+0x028 Tag : Uint4B
+0x02c Size : Uint4B
+0x030 AllocateEx : Ptr64
+0x030 Allocate : Ptr64
+0x038 FreeEx : Ptr64
+0x038 Free : Ptr64
+0x040 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x050 LastTotalAllocates : Uint4B
+0x054 LastAllocateMisses : Uint4B
+0x054 LastAllocateHits : Uint4B
+0x058 Future : Uint4B
+0x2100 PPPagedLookasideList : _GENERAL_LOOKASIDE_POOL
+0x000 ListHead : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x008 Region : Uint8B
+0x000 HeaderX64 : <unnamed-tag>
+0x000 Depth : Pos 0, 16 Bits
+0x000 Sequence : Pos 16, 48 Bits
+0x008 Reserved : Pos 0, 4 Bits
+0x008 NextEntry : Pos 4, 60 Bits
+0x000 SingleListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 Depth : Uint2B
+0x012 MaximumDepth : Uint2B
+0x014 TotalAllocates : Uint4B
+0x018 AllocateMisses : Uint4B
+0x018 AllocateHits : Uint4B
+0x01c TotalFrees : Uint4B
+0x020 FreeMisses : Uint4B
+0x020 FreeHits : Uint4B
+0x024 Type :
NonPagedPool = 0n0
NonPagedPoolExecute = 0n0
PagedPool = 0n1
NonPagedPoolMustSucceed = 0n2
DontUseThisType = 0n3
NonPagedPoolCacheAligned = 0n4
PagedPoolCacheAligned = 0n5
NonPagedPoolCacheAlignedMustS = 0n6
MaxPoolType = 0n7
NonPagedPoolBase = 0n0
NonPagedPoolBaseMustSucceed = 0n2
NonPagedPoolBaseCacheAligned = 0n4
NonPagedPoolBaseCacheAlignedMustS = 0n6
NonPagedPoolSession = 0n32
PagedPoolSession = 0n33
NonPagedPoolMustSucceedSession = 0n34
DontUseThisTypeSession = 0n35
NonPagedPoolCacheAlignedSession = 0n36
PagedPoolCacheAlignedSession = 0n37
NonPagedPoolCacheAlignedMustSSession = 0n38
NonPagedPoolNx = 0n512
NonPagedPoolNxCacheAligned = 0n516
NonPagedPoolSessionNx = 0n544
+0x028 Tag : Uint4B
+0x02c Size : Uint4B
+0x030 AllocateEx : Ptr64
+0x030 Allocate : Ptr64
+0x038 FreeEx : Ptr64
+0x038 Free : Ptr64
+0x040 ListEntry : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x050 LastTotalAllocates : Uint4B
+0x054 LastAllocateMisses : Uint4B
+0x054 LastAllocateHits : Uint4B
+0x058 Future : Uint4B
+0x2d00 PrcbPad20 : Uint8B
+0x2d08 DeferredReadyListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x2d10 MmPageFaultCount : Int4B
+0x2d14 MmCopyOnWriteCount : Int4B
+0x2d18 MmTransitionCount : Int4B
+0x2d1c MmDemandZeroCount : Int4B
+0x2d20 MmPageReadCount : Int4B
+0x2d24 MmPageReadIoCount : Int4B
+0x2d28 MmDirtyPagesWriteCount : Int4B
+0x2d2c MmDirtyWriteIoCount : Int4B
+0x2d30 MmMappedPagesWriteCount : Int4B
+0x2d34 MmMappedWriteIoCount : Int4B
+0x2d38 KeSystemCalls : Uint4B
+0x2d3c KeContextSwitches : Uint4B
+0x2d40 PrcbPad40 : Uint4B
+0x2d44 CcFastReadNoWait : Uint4B
+0x2d48 CcFastReadWait : Uint4B
+0x2d4c CcFastReadNotPossible : Uint4B
+0x2d50 CcCopyReadNoWait : Uint4B
+0x2d54 CcCopyReadWait : Uint4B
+0x2d58 CcCopyReadNoWaitMiss : Uint4B
+0x2d5c IoReadOperationCount : Int4B
+0x2d60 IoWriteOperationCount : Int4B
+0x2d64 IoOtherOperationCount : Int4B
+0x2d68 IoReadTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x2d70 IoWriteTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x2d78 IoOtherTransferCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x2d80 PacketBarrier : Int4B
+0x2d84 TargetCount : Int4B
+0x2d88 IpiFrozen : Uint4B
+0x2d90 IsrDpcStats : Ptr64
+0x2d98 DeviceInterrupts : Uint4B
+0x2d9c LookasideIrpFloat : Int4B
+0x2da0 InterruptLastCount : Uint4B
+0x2da4 InterruptRate : Uint4B
+0x2da8 LastNonHrTimerExpiration : Uint8B
+0x2db0 PrcbPad41 : Uint4B
+0x2e00 DpcData : _KDPC_DATA
+0x000 DpcList : _KDPC_LIST
+0x000 ListHead : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x008 LastEntry : Ptr64
+0x010 DpcLock : Uint8B
+0x018 DpcQueueDepth : Int4B
+0x01c DpcCount : Uint4B
+0x020 ActiveDpc : Ptr64
+0x2e50 DpcStack : Ptr64
+0x2e58 MaximumDpcQueueDepth : Int4B
+0x2e5c DpcRequestRate : Uint4B
+0x2e60 MinimumDpcRate : Uint4B
+0x2e64 DpcLastCount : Uint4B
+0x2e68 ThreadDpcEnable : UChar
+0x2e69 QuantumEnd : UChar
+0x2e6a DpcRoutineActive : UChar
+0x2e6b IdleSchedule : UChar
+0x2e6c DpcRequestSummary : Int4B
+0x2e6c DpcRequestSlot : Int2B
+0x2e6c NormalDpcState : Int2B
+0x2e6e ThreadDpcState : Int2B
+0x2e6c DpcNormalProcessingActive : Pos 0, 1 Bit
+0x2e6c DpcNormalProcessingRequested : Pos 1, 1 Bit
+0x2e6c DpcNormalThreadSignal : Pos 2, 1 Bit
+0x2e6c DpcNormalTimerExpiration : Pos 3, 1 Bit
+0x2e6c DpcNormalDpcPresent : Pos 4, 1 Bit
+0x2e6c DpcNormalLocalInterrupt : Pos 5, 1 Bit
+0x2e6c DpcNormalSpare : Pos 6, 10 Bits
+0x2e6c DpcThreadActive : Pos 16, 1 Bit
+0x2e6c DpcThreadRequested : Pos 17, 1 Bit
+0x2e6c DpcThreadSpare : Pos 18, 14 Bits
+0x2e70 LastTimerHand : Uint4B
+0x2e74 LastTick : Uint4B
+0x2e78 ClockInterrupts : Uint4B
+0x2e7c ReadyScanTick : Uint4B
+0x2e80 InterruptObject : Ptr64
+0x3680 TimerTable : _KTIMER_TABLE
+0x000 TimerExpiry : Ptr64
+0x200 TimerEntries : _KTIMER_TABLE_ENTRY
+0x000 Lock : Uint8B
+0x008 Entry : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x018 Time : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x5880 DpcGate : _KGATE
+0x000 Header : _DISPATCHER_HEADER
+0x000 Lock : Int4B
+0x000 LockNV : Int4B
+0x000 Type : UChar
+0x001 Signalling : UChar
+0x002 Size : UChar
+0x003 Reserved1 : UChar
+0x000 TimerType : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Wake : Pos 1, 1 Bit
+0x001 EncodedTolerableDelay : Pos 2, 6 Bits
+0x002 Hand : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 6 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x000 Timer2Type : UChar
+0x001 Timer2Flags : UChar
+0x001 Timer2Inserted : Pos 0, 1 Bit
+0x001 Timer2Expiring : Pos 1, 1 Bit
+0x001 Timer2CancelPending : Pos 2, 1 Bit
+0x001 Timer2SetPending : Pos 3, 1 Bit
+0x001 Timer2Running : Pos 4, 1 Bit
+0x001 Timer2Disabled : Pos 5, 1 Bit
+0x001 Timer2ReservedFlags : Pos 6, 2 Bits
+0x002 Timer2ComponentId : UChar
+0x003 Timer2RelativeId : UChar
+0x000 QueueType : UChar
+0x001 QueueControlFlags : UChar
+0x001 Abandoned : Pos 0, 1 Bit
+0x001 DisableIncrement : Pos 1, 1 Bit
+0x001 QueueReservedControlFlags : Pos 2, 6 Bits
+0x002 QueueSize : UChar
+0x003 QueueReserved : UChar
+0x000 ThreadType : UChar
+0x001 ThreadReserved : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CycleProfiling : Pos 0, 1 Bit
+0x002 CounterProfiling : Pos 1, 1 Bit
+0x002 GroupScheduling : Pos 2, 1 Bit
+0x002 AffinitySet : Pos 3, 1 Bit
+0x002 Tagged : Pos 4, 1 Bit
+0x002 EnergyProfiling : Pos 5, 1 Bit
+0x002 ThreadReservedControlFlags : Pos 6, 2 Bits
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Minimal : Pos 2, 1 Bit
+0x003 Reserved4 : Pos 3, 3 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x000 MutantType : UChar
+0x001 MutantSize : UChar
+0x002 DpcActive : UChar
+0x003 MutantReserved : UChar
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x5898 PrcbPad52 : Ptr64
+0x58a0 CallDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x58e0 ClockKeepAlive : Int4B
+0x58e4 PrcbPad60 : UChar
+0x58e6 NmiActive : Uint2B
+0x58e8 DpcWatchdogPeriod : Int4B
+0x58ec DpcWatchdogCount : Int4B
+0x58f0 KeSpinLockOrdering : Int4B
+0x58f4 DpcWatchdogProfileCumulativeDpcThreshold : Uint4B
+0x58f8 CachedPtes : Ptr64
+0x5900 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x5910 WaitLock : Uint8B
+0x5918 ReadySummary : Uint4B
+0x591c AffinitizedSelectionMask : Int4B
+0x5920 QueueIndex : Uint4B
+0x5924 PrcbPad75 : Uint4B
+0x5930 TimerExpirationDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x5970 ScbQueue : _RTL_RB_TREE
+0x000 Root : Ptr64
+0x008 Encoded : Pos 0, 1 Bit
+0x008 Min : Ptr64
+0x5980 DispatcherReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x5b80 InterruptCount : Uint4B
+0x5b84 KernelTime : Uint4B
+0x5b88 UserTime : Uint4B
+0x5b8c DpcTime : Uint4B
+0x5b90 InterruptTime : Uint4B
+0x5b94 AdjustDpcThreshold : Uint4B
+0x5b98 DebuggerSavedIRQL : UChar
+0x5b99 GroupSchedulingOverQuota : UChar
+0x5b9a DeepSleep : UChar
+0x5b9b PrcbPad80 : UChar
+0x5ba0 DpcTimeCount : Uint4B
+0x5ba4 DpcTimeLimit : Uint4B
+0x5ba8 PeriodicCount : Uint4B
+0x5bac PeriodicBias : Uint4B
+0x5bb0 AvailableTime : Uint4B
+0x5bb4 KeExceptionDispatchCount : Uint4B
+0x5bb8 ReadyThreadCount : Uint4B
+0x5bc0 StartCycles : Uint8B
+0x5bc8 TaggedCyclesStart : Uint8B
+0x5bd0 TaggedCycles : Uint8B
+0x5be0 GenerationTarget : Uint8B
+0x5be8 AffinitizedCycles : Uint8B
+0x5bf0 ImportantCycles : Uint8B
+0x5bf8 UnimportantCycles : Uint8B
+0x5c00 ReadyQueueExpectedRunTime : Uint8B
+0x5c08 PrcbPad81 : Uint4B
+0x5c5c DpcWatchdogProfileSingleDpcThreshold : Uint4B
+0x5c60 MmSpinLockOrdering : Int4B
+0x5c64 PageColor : Uint4B
+0x5c68 NodeColor : Uint4B
+0x5c6c NodeShiftedColor : Uint4B
+0x5c70 SecondaryColorMask : Uint4B
+0x5c74 PrcbPad83 : Uint4B
+0x5c78 CycleTime : Uint8B
+0x5c80 Cycles : Uint8B
+0x5cc0 PrcbPad84 : Uint4B
+0x5d00 CcFastMdlReadNoWait : Uint4B
+0x5d04 CcFastMdlReadWait : Uint4B
+0x5d08 CcFastMdlReadNotPossible : Uint4B
+0x5d0c CcMapDataNoWait : Uint4B
+0x5d10 CcMapDataWait : Uint4B
+0x5d14 CcPinMappedDataCount : Uint4B
+0x5d18 CcPinReadNoWait : Uint4B
+0x5d1c CcPinReadWait : Uint4B
+0x5d20 CcMdlReadNoWait : Uint4B
+0x5d24 CcMdlReadWait : Uint4B
+0x5d28 CcLazyWriteHotSpots : Uint4B
+0x5d2c CcLazyWriteIos : Uint4B
+0x5d30 CcLazyWritePages : Uint4B
+0x5d34 CcDataFlushes : Uint4B
+0x5d38 CcDataPages : Uint4B
+0x5d3c CcLostDelayedWrites : Uint4B
+0x5d40 CcFastReadResourceMiss : Uint4B
+0x5d44 CcCopyReadWaitMiss : Uint4B
+0x5d48 CcFastMdlReadResourceMiss : Uint4B
+0x5d4c CcMapDataNoWaitMiss : Uint4B
+0x5d50 CcMapDataWaitMiss : Uint4B
+0x5d54 CcPinReadNoWaitMiss : Uint4B
+0x5d58 CcPinReadWaitMiss : Uint4B
+0x5d5c CcMdlReadNoWaitMiss : Uint4B
+0x5d60 CcMdlReadWaitMiss : Uint4B
+0x5d64 CcReadAheadIos : Uint4B
+0x5d68 MmCacheTransitionCount : Int4B
+0x5d6c MmCacheReadCount : Int4B
+0x5d70 MmCacheIoCount : Int4B
+0x5d74 PrcbPad91 : Uint4B
+0x5d80 PowerState : _PROCESSOR_POWER_STATE
+0x000 IdleStates : Ptr64
+0x008 IdleAccounting : Ptr64
+0x010 IdleTimeLast : Uint8B
+0x018 IdleTimeTotal : Uint8B
+0x020 IdleTimeEntry : Uint8B
+0x028 IdleTimeExpiration : Uint8B
+0x030 NonInterruptibleTransition : UChar
+0x031 PepWokenTransition : UChar
+0x032 EfficiencyClass : UChar
+0x033 SchedulingClass : UChar
+0x034 TargetIdleState : Uint4B
+0x038 IdlePolicy : _PROC_IDLE_POLICY
+0x000 PromotePercent : UChar
+0x001 DemotePercent : UChar
+0x002 PromotePercentBase : UChar
+0x003 DemotePercentBase : UChar
+0x004 AllowScaling : UChar
+0x005 ForceLightIdle : UChar
+0x040 Synchronization : _PPM_IDLE_SYNCHRONIZATION_STATE
+0x000 AsLong : Int4B
+0x000 RefCount : Pos 0, 24 Bits
+0x000 State : Pos 24, 8 Bits
+0x048 PerfFeedback : _PROC_FEEDBACK
+0x000 Lock : Uint8B
+0x008 CyclesLast : Uint8B
+0x010 CyclesActive : Uint8B
+0x018 Counters : Ptr64
+0x028 LastUpdateTime : Uint8B
+0x030 UnscaledTime : Uint8B
+0x038 UnaccountedTime : Int8B
+0x040 ScaledTime : Uint8B
+0x050 UnaccountedKernelTime : Uint8B
+0x058 PerformanceScaledKernelTime : Uint8B
+0x060 UserTimeLast : Uint4B
+0x064 KernelTimeLast : Uint4B
+0x068 IdleGenerationNumberLast : Uint8B
+0x070 HvActiveTimeLast : Uint8B
+0x078 StallCyclesLast : Uint8B
+0x080 StallTime : Uint8B
+0x088 KernelTimesIndex : UChar
+0x0d8 Hypervisor :
ProcHypervisorNone = 0n0
ProcHypervisorPresent = 0n1
ProcHypervisorPower = 0n2
ProcHypervisorHvCounters = 0n3
+0x0dc LastSysTime : Uint4B
+0x0e0 WmiDispatchPtr : Uint8B
+0x0e8 WmiInterfaceEnabled : Int4B
+0x0f0 FFHThrottleStateInfo : _PPM_FFH_THROTTLE_STATE_INFO
+0x000 EnableLogging : UChar
+0x004 MismatchCount : Uint4B
+0x008 Initialized : UChar
+0x010 LastValue : Uint8B
+0x018 LastLogTickCount : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x110 PerfActionDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x150 PerfActionMask : Int4B
+0x158 HvIdleCheck : _PROC_IDLE_SNAP
+0x000 Time : Uint8B
+0x008 Idle : Uint8B
+0x168 PerfCheck : Ptr64
+0x170 Domain : Ptr64
+0x178 PerfConstraint : Ptr64
+0x180 Concurrency : Ptr64
+0x188 ClassConcurrency : Ptr64
+0x190 Load : Ptr64
+0x198 PerfHistory : Ptr64
+0x1a0 GuaranteedPerformancePercent : UChar
+0x1a1 HvTargetState : UChar
+0x1a2 Parked : UChar
+0x1a4 LatestPerformancePercent : Uint4B
+0x1a8 AveragePerformancePercent : Uint4B
+0x1ac LatestAffinitizedPercent : Uint4B
+0x1b0 RelativePerformance : Uint4B
+0x1b4 Utility : Uint4B
+0x1b8 AffinitizedUtility : Uint4B
+0x1c0 SnapTimeLast : Uint8B
+0x1c0 EnergyConsumed : Uint8B
+0x1c8 ActiveTime : Uint8B
+0x1d0 TotalTime : Uint8B
+0x5f58 ScbList : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x5f68 ForceIdleDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x5fa8 PrcbPad92 : Uint4B
+0x5ff0 KeAlignmentFixupCount : Uint4B
+0x5ff8 DpcWatchdogDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x6038 DpcWatchdogTimer : _KTIMER
+0x000 Header : _DISPATCHER_HEADER
+0x000 Lock : Int4B
+0x000 LockNV : Int4B
+0x000 Type : UChar
+0x001 Signalling : UChar
+0x002 Size : UChar
+0x003 Reserved1 : UChar
+0x000 TimerType : UChar
+0x001 TimerControlFlags : UChar
+0x001 Absolute : Pos 0, 1 Bit
+0x001 Wake : Pos 1, 1 Bit
+0x001 EncodedTolerableDelay : Pos 2, 6 Bits
+0x002 Hand : UChar
+0x003 TimerMiscFlags : UChar
+0x003 Index : Pos 0, 6 Bits
+0x003 Inserted : Pos 6, 1 Bit
+0x003 Expired : Pos 7, 1 Bit
+0x000 Timer2Type : UChar
+0x001 Timer2Flags : UChar
+0x001 Timer2Inserted : Pos 0, 1 Bit
+0x001 Timer2Expiring : Pos 1, 1 Bit
+0x001 Timer2CancelPending : Pos 2, 1 Bit
+0x001 Timer2SetPending : Pos 3, 1 Bit
+0x001 Timer2Running : Pos 4, 1 Bit
+0x001 Timer2Disabled : Pos 5, 1 Bit
+0x001 Timer2ReservedFlags : Pos 6, 2 Bits
+0x002 Timer2ComponentId : UChar
+0x003 Timer2RelativeId : UChar
+0x000 QueueType : UChar
+0x001 QueueControlFlags : UChar
+0x001 Abandoned : Pos 0, 1 Bit
+0x001 DisableIncrement : Pos 1, 1 Bit
+0x001 QueueReservedControlFlags : Pos 2, 6 Bits
+0x002 QueueSize : UChar
+0x003 QueueReserved : UChar
+0x000 ThreadType : UChar
+0x001 ThreadReserved : UChar
+0x002 ThreadControlFlags : UChar
+0x002 CycleProfiling : Pos 0, 1 Bit
+0x002 CounterProfiling : Pos 1, 1 Bit
+0x002 GroupScheduling : Pos 2, 1 Bit
+0x002 AffinitySet : Pos 3, 1 Bit
+0x002 Tagged : Pos 4, 1 Bit
+0x002 EnergyProfiling : Pos 5, 1 Bit
+0x002 ThreadReservedControlFlags : Pos 6, 2 Bits
+0x003 DebugActive : UChar
+0x003 ActiveDR7 : Pos 0, 1 Bit
+0x003 Instrumented : Pos 1, 1 Bit
+0x003 Minimal : Pos 2, 1 Bit
+0x003 Reserved4 : Pos 3, 3 Bits
+0x003 UmsScheduled : Pos 6, 1 Bit
+0x003 UmsPrimary : Pos 7, 1 Bit
+0x000 MutantType : UChar
+0x001 MutantSize : UChar
+0x002 DpcActive : UChar
+0x003 MutantReserved : UChar
+0x004 SignalState : Int4B
+0x008 WaitListHead : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x018 DueTime : _ULARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Uint4B
+0x000 QuadPart : Uint8B
+0x020 TimerListEntry : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x030 Dpc : Ptr64
+0x038 Processor : Uint4B
+0x03c Period : Uint4B
+0x6078 Cache : _CACHE_DESCRIPTOR
+0x000 Level : UChar
+0x001 Associativity : UChar
+0x002 LineSize : Uint2B
+0x004 Size : Uint4B
+0x008 Type :
CacheUnified = 0n0
CacheInstruction = 0n1
CacheData = 0n2
CacheTrace = 0n3
+0x60b4 CacheCount : Uint4B
+0x60b8 CachedCommit : Uint4B
+0x60bc CachedResidentAvailable : Uint4B
+0x60c0 HyperPte : Ptr64
+0x60c8 WheaInfo : Ptr64
+0x60d0 EtwSupport : Ptr64
+0x60e0 InterruptObjectPool : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x008 Region : Uint8B
+0x000 HeaderX64 : <unnamed-tag>
+0x000 Depth : Pos 0, 16 Bits
+0x000 Sequence : Pos 16, 48 Bits
+0x008 Reserved : Pos 0, 4 Bits
+0x008 NextEntry : Pos 4, 60 Bits
+0x60f0 HypercallPageList : _SLIST_HEADER
+0x000 Alignment : Uint8B
+0x008 Region : Uint8B
+0x000 HeaderX64 : <unnamed-tag>
+0x000 Depth : Pos 0, 16 Bits
+0x000 Sequence : Pos 16, 48 Bits
+0x008 Reserved : Pos 0, 4 Bits
+0x008 NextEntry : Pos 4, 60 Bits
+0x6100 HypercallCachedPages : Ptr64
+0x6108 VirtualApicAssist : Ptr64
+0x6110 StatisticsPage : Ptr64
+0x6118 PackageProcessorSet : _KAFFINITY_EX
+0x000 Count : Uint2B
+0x002 Size : Uint2B
+0x004 Reserved : Uint4B
+0x008 Bitmap : Uint8B
+0x61c0 SharedReadyQueueMask : Uint8B
+0x61c8 SharedReadyQueue : Ptr64
+0x61d0 SharedQueueScanOwner : Uint4B
+0x61d4 ScanSiblingIndex : Uint4B
+0x61d8 CoreProcessorSet : Uint8B
+0x61e0 ScanSiblingMask : Uint8B
+0x61e8 LLCMask : Uint8B
+0x61f0 CacheProcessorMask : Uint8B
+0x6218 ProcessorProfileControlArea : Ptr64
+0x6220 ProfileEventIndexAddress : Ptr64
+0x6228 DpcWatchdogProfile : Ptr64
+0x6230 DpcWatchdogProfileCurrentEmptyCapture : Ptr64
+0x6238 PrcbPad94 : Uint8B
+0x6280 SynchCounters : _SYNCH_COUNTERS
+0x000 SpinLockAcquireCount : Uint4B
+0x004 SpinLockContentionCount : Uint4B
+0x008 SpinLockSpinCount : Uint4B
+0x00c IpiSendRequestBroadcastCount : Uint4B
+0x010 IpiSendRequestRoutineCount : Uint4B
+0x014 IpiSendSoftwareInterruptCount : Uint4B
+0x018 ExInitializeResourceCount : Uint4B
+0x01c ExReInitializeResourceCount : Uint4B
+0x020 ExDeleteResourceCount : Uint4B
+0x024 ExecutiveResourceAcquiresCount : Uint4B
+0x028 ExecutiveResourceContentionsCount : Uint4B
+0x02c ExecutiveResourceReleaseExclusiveCount : Uint4B
+0x030 ExecutiveResourceReleaseSharedCount : Uint4B
+0x034 ExecutiveResourceConvertsCount : Uint4B
+0x038 ExAcqResExclusiveAttempts : Uint4B
+0x03c ExAcqResExclusiveAcquiresExclusive : Uint4B
+0x040 ExAcqResExclusiveAcquiresExclusiveRecursive : Uint4B
+0x044 ExAcqResExclusiveWaits : Uint4B
+0x048 ExAcqResExclusiveNotAcquires : Uint4B
+0x04c ExAcqResSharedAttempts : Uint4B
+0x050 ExAcqResSharedAcquiresExclusive : Uint4B
+0x054 ExAcqResSharedAcquiresShared : Uint4B
+0x058 ExAcqResSharedAcquiresSharedRecursive : Uint4B
+0x05c ExAcqResSharedWaits : Uint4B
+0x060 ExAcqResSharedNotAcquires : Uint4B
+0x064 ExAcqResSharedStarveExclusiveAttempts : Uint4B
+0x068 ExAcqResSharedStarveExclusiveAcquiresExclusive : Uint4B
+0x06c ExAcqResSharedStarveExclusiveAcquiresShared : Uint4B
+0x070 ExAcqResSharedStarveExclusiveAcquiresSharedRecursive : Uint4B
+0x074 ExAcqResSharedStarveExclusiveWaits : Uint4B
+0x078 ExAcqResSharedStarveExclusiveNotAcquires : Uint4B
+0x07c ExAcqResSharedWaitForExclusiveAttempts : Uint4B
+0x080 ExAcqResSharedWaitForExclusiveAcquiresExclusive : Uint4B
+0x084 ExAcqResSharedWaitForExclusiveAcquiresShared : Uint4B
+0x088 ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive : Uint4B
+0x08c ExAcqResSharedWaitForExclusiveWaits : Uint4B
+0x090 ExAcqResSharedWaitForExclusiveNotAcquires : Uint4B
+0x094 ExSetResOwnerPointerExclusive : Uint4B
+0x098 ExSetResOwnerPointerSharedNew : Uint4B
+0x09c ExSetResOwnerPointerSharedOld : Uint4B
+0x0a0 ExTryToAcqExclusiveAttempts : Uint4B
+0x0a4 ExTryToAcqExclusiveAcquires : Uint4B
+0x0a8 ExBoostExclusiveOwner : Uint4B
+0x0ac ExBoostSharedOwners : Uint4B
+0x0b0 ExEtwSynchTrackingNotificationsCount : Uint4B
+0x0b4 ExEtwSynchTrackingNotificationsAccountedCount : Uint4B
+0x6338 PteBitCache : Uint8B
+0x6340 PteBitOffset : Uint4B
+0x6348 FsCounters : _FILESYSTEM_DISK_COUNTERS
+0x000 FsBytesRead : Uint8B
+0x008 FsBytesWritten : Uint8B
+0x6358 VendorString : UChar
+0x6365 PrcbPad100 : UChar
+0x6367 PendingVirtualLittle : UChar
+0x6368 FeatureBits : Uint8B
+0x6370 PrcbPad110 : Uint4B
+0x6378 UpdateSignature : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x6380 Context : Ptr64
+0x6388 ContextFlagsInit : Uint4B
+0x6390 ExtendedState : Ptr64
+0x6398 IsrStack : Ptr64
+0x63a0 EntropyTimingState : _KENTROPY_TIMING_STATE
+0x000 EntropyCount : Uint4B
+0x004 Buffer : Uint4B
+0x108 Dpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x148 LastDeliveredBuffer : Uint4B
+0x64f0 AbSelfIoBoostsList : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x64f8 AbPropagateBoostsList : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x6500 AbDpc : _KDPC
+0x000 TargetInfoAsUlong : Uint4B
+0x000 Type : UChar
+0x001 Importance : UChar
+0x002 Number : Uint2B
+0x008 DpcListEntry : _SINGLE_LIST_ENTRY
+0x000 Next : Ptr64
+0x010 ProcessorHistory : Uint8B
+0x018 DeferredRoutine : Ptr64
+0x020 DeferredContext : Ptr64
+0x028 SystemArgument1 : Ptr64
+0x030 SystemArgument2 : Ptr64
+0x038 DpcData : Ptr64
+0x6540 IoIrpStackProfilerCurrent : _IOP_IRP_STACK_PROFILER
+0x000 Profile : Uint4B
+0x050 TotalIrps : Uint4B
+0x6594 IoIrpStackProfilerPrevious : _IOP_IRP_STACK_PROFILER
+0x000 Profile : Uint4B
+0x050 TotalIrps : Uint4B
+0x6600 LocalSharedReadyQueue : _KSHARED_READY_QUEUE
+0x000 Lock : Uint8B
+0x008 ReadySummary : Uint4B
+0x010 ReadyListHead : _LIST_ENTRY
+0x000 Flink : Ptr64
+0x008 Blink : Ptr64
+0x210 RunningSummary : Char
+0x250 Span : UChar
+0x251 LowProcIndex : UChar
+0x252 QueueIndex : UChar
+0x253 ProcCount : UChar
+0x254 ScanOwner : UChar
+0x255 Spare : UChar
+0x258 Affinity : Uint8B
+0x260 ReadyThreadCount : Uint4B
+0x268 ReadyQueueExpectedRunTime : Uint8B
+0x6870 TimerExpirationTrace : _KTIMER_EXPIRATION_TRACE
+0x000 InterruptTime : Uint8B
+0x008 PerformanceCounter : _LARGE_INTEGER
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 u : <unnamed-tag>
+0x000 LowPart : Uint4B
+0x004 HighPart : Int4B
+0x000 QuadPart : Int8B
+0x6970 TimerExpirationTraceCount : Uint4B
+0x6978 ExSaPageArray : Ptr64
+0x6980 SecureFault : _KSECURE_FAULT_INFORMATION
+0x000 FaultCode : Uint8B
+0x008 FaultVa : Uint8B
+0x69c0 Mailbox : Ptr64
+0x6a00 RequestMailbox : _REQUEST_MAILBOX
+0x000 Next : Ptr64
+0x008 RequestSummary : Uint8B
+0x010 RequestPacket : _KREQUEST_PACKET
+0x000 CurrentPacket : Ptr64
+0x018 WorkerRoutine : Ptr64
+0x030 NodeTargetCountAddr : Ptr64
+0x038 NodeTargetCount : Int4B
kd> ?? sizeof(nt!_KPCR)
unsigned int64 0x6bc0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment