+0x000 Header : _DISPATCHER_HEADER
+0x010 SListFaultAddress : Ptr32 Void
+0x018 QuantumTarget : Uint8B
+0x020 InitialStack : Ptr32 Void
+0x024 StackLimit : Ptr32 Void
+0x028 StackBase : Ptr32 Void
+0x02c ThreadLock : Uint4B
+0x030 CycleTime : Uint8B
+0x038 HighCycleTime : Uint4B
+0x03c ServiceTable : Ptr32 Void
+0x040 CurrentRunTime : Uint4B
+0x044 ExpectedRunTime : Uint4B
+0x048 KernelStack : Ptr32 Void
+0x04c StateSaveArea : Ptr32 _XSAVE_FORMAT
+0x050 SchedulingGroup : Ptr32 _KSCHEDULING_GROUP
+0x054 WaitRegister : _KWAIT_STATUS_REGISTER
+0x055 Running : UChar
+0x056 Alerted : [2] UChar
+0x058 KernelStackResident : Pos 0, 1 Bit
+0x058 ReadyTransition : Pos 1, 1 Bit
+0x058 ProcessReadyQueue : Pos 2, 1 Bit
+0x058 WaitNext : Pos 3, 1 Bit
+0x058 SystemAffinityActive : Pos 4, 1 Bit
+0x058 Alertable : Pos 5, 1 Bit
+0x058 CodePatchInProgress : Pos 6, 1 Bit
+0x058 UserStackWalkActive : Pos 7, 1 Bit
+0x058 ApcInterruptRequest : Pos 8, 1 Bit
+0x058 QuantumEndMigrate : Pos 9, 1 Bit
+0x058 UmsDirectedSwitchEnable : Pos 10, 1 Bit
+0x058 TimerActive : Pos 11, 1 Bit
+0x058 SystemThread : Pos 12, 1 Bit
+0x058 ProcessDetachActive : Pos 13, 1 Bit
+0x058 CalloutActive : Pos 14, 1 Bit
+0x058 ScbReadyQueue : Pos 15, 1 Bit
+0x058 ApcQueueable : Pos 16, 1 Bit
+0x058 ReservedStackInUse : Pos 17, 1 Bit
+0x058 UmsPerformingSyscall : Pos 18, 1 Bit
+0x058 DisableStackCheck : Pos 19, 1 Bit
+0x058 Reserved : Pos 20, 12 Bits
+0x058 MiscFlags : Int4B
+0x05c AutoAlignment : Pos 0, 1 Bit
+0x05c DisableBoost : Pos 1, 1 Bit
+0x05c UserAffinitySet : Pos 2, 1 Bit
+0x05c AlertedByThreadId : Pos 3, 1 Bit
+0x05c QuantumDonation : Pos 4, 1 Bit
+0x05c EnableStackSwap : Pos 5, 1 Bit
+0x05c GuiThread : Pos 6, 1 Bit
+0x05c DisableQuantum : Pos 7, 1 Bit
+0x05c ChargeOnlyGroup : Pos 8, 1 Bit
+0x05c DeferPreemption : Pos 9, 1 Bit
+0x05c QueueDeferPreemption : Pos 10, 1 Bit
+0x05c ForceDeferSchedule : Pos 11, 1 Bit
+0x05c ExplicitIdealProcessor : Pos 12, 1 Bit
+0x05c FreezeCount : Pos 13, 1 Bit
+0x05c EtwStackTraceApcInserted : Pos 14, 8 Bits
+0x05c ReservedFlags : Pos 22, 10 Bits
+0x05c ThreadFlags : Int4B
+0x060 Spare0 : Uint4B
+0x064 SystemCallNumber : Uint4B
+0x068 FirstArgument : Ptr32 Void
+0x06c TrapFrame : Ptr32 _KTRAP_FRAME
+0x070 ApcState : _KAPC_STATE
+0x070 ApcStateFill : [23] UChar
+0x087 Priority : Char
+0x088 UserIdealProcessor : Uint4B
+0x08c ContextSwitches : Uint4B
+0x090 State : UChar
+0x091 NpxState : Char
+0x092 WaitIrql : UChar
+0x093 WaitMode : Char
+0x094 WaitStatus : Int4B
+0x098 WaitBlockList : Ptr32 _KWAIT_BLOCK
+0x09c WaitListEntry : _LIST_ENTRY
+0x09c SwapListEntry : _SINGLE_LIST_ENTRY
+0x0a4 Queue : Ptr32 _KQUEUE
+0x0a8 Teb : Ptr32 Void
+0x0b0 Timer : _KTIMER
+0x0d8 WaitBlock : [4] _KWAIT_BLOCK
+0x0d8 WaitBlockFill8 : [20] UChar
+0x0ec ThreadCounters : Ptr32 _KTHREAD_COUNTERS
+0x0d8 WaitBlockFill9 : [44] UChar
+0x104 XStateSave : Ptr32 _XSTATE_SAVE
+0x0d8 WaitBlockFill10 : [68] UChar
+0x11c Win32Thread : Ptr32 Void
+0x0d8 WaitBlockFill11 : [88] UChar
+0x130 WaitTime : Uint4B
+0x134 KernelApcDisable : Int2B
+0x136 SpecialApcDisable : Int2B
+0x134 CombinedApcDisable : Uint4B
+0x138 QueueListEntry : _LIST_ENTRY
+0x140 NextProcessor : Uint4B
+0x144 DeferredProcessor : Uint4B
+0x148 Process : Ptr32 _KPROCESS
+0x14c UserAffinity : _GROUP_AFFINITY
+0x14c UserAffinityFill : [6] UChar
+0x152 PreviousMode : Char
+0x153 BasePriority : Char
+0x154 PriorityDecrement : Char
+0x154 ForegroundBoost : Pos 0, 4 Bits
+0x154 UnusualBoost : Pos 4, 4 Bits
+0x155 Preempted : UChar
+0x156 AdjustReason : UChar
+0x157 AdjustIncrement : Char
+0x158 Affinity : _GROUP_AFFINITY
+0x158 AffinityFill : [6] UChar
+0x15e ApcStateIndex : UChar
+0x15f WaitBlockCount : UChar
+0x160 IdealProcessor : Uint4B
+0x164 ApcStatePointer : [2] Ptr32 _KAPC_STATE
+0x16c SavedApcState : _KAPC_STATE
+0x16c SavedApcStateFill : [23] UChar
+0x183 WaitReason : UChar
+0x184 SuspendCount : Char
+0x185 Saturation : Char
+0x186 SListFaultCount : Uint2B
+0x188 SchedulerApc : _KAPC
+0x188 SchedulerApcFill0 : [1] UChar
+0x189 ResourceIndex : UChar
+0x188 SchedulerApcFill1 : [3] UChar
+0x18b QuantumReset : UChar
+0x188 SchedulerApcFill2 : [4] UChar
+0x18c KernelTime : Uint4B
+0x188 SchedulerApcFill3 : [36] UChar
+0x1ac WaitPrcb : Ptr32 _KPRCB
+0x188 SchedulerApcFill4 : [40] UChar
+0x1b0 LegoData : Ptr32 Void
+0x188 SchedulerApcFill5 : [47] UChar
+0x1b7 CallbackNestingLevel : UChar
+0x1b8 UserTime : Uint4B
+0x1bc SuspendEvent : _KEVENT
+0x1cc ThreadListEntry : _LIST_ENTRY
+0x1d4 MutantListHead : _LIST_ENTRY
dt _ETHREAD
+0x000 Tcb : _KTHREAD
+0x1e0 CreateTime : _LARGE_INTEGER
+0x1e8 ExitTime : _LARGE_INTEGER
+0x1e8 KeyedWaitChain : _LIST_ENTRY
+0x1f0 ChargeOnlySession : Ptr32 Void
+0x1f4 PostBlockList : _LIST_ENTRY
+0x1f4 ForwardLinkShadow : Ptr32 Void
+0x1f8 StartAddress : Ptr32 Void
+0x1fc TerminationPort : Ptr32 _TERMINATION_PORT
+0x1fc ReaperLink : Ptr32 _ETHREAD
+0x1fc KeyedWaitValue : Ptr32 Void
+0x200 ActiveTimerListLock : Uint4B
+0x204 ActiveTimerListHead : _LIST_ENTRY
+0x20c Cid : _CLIENT_ID
+0x214 KeyedWaitSemaphore : _KSEMAPHORE
+0x214 AlpcWaitSemaphore : _KSEMAPHORE
+0x228 ClientSecurity : _PS_CLIENT_SECURITY_CONTEXT
+0x22c IrpList : _LIST_ENTRY
+0x234 TopLevelIrp : Uint4B
+0x238 DeviceToVerify : Ptr32 _DEVICE_OBJECT
+0x23c SparePointer : Ptr32 Void
+0x240 Win32StartAddress : Ptr32 Void
+0x244 LegacyPowerObject : Ptr32 Void
+0x248 ThreadListEntry : _LIST_ENTRY
+0x250 RundownProtect : _EX_RUNDOWN_REF
+0x254 ThreadLock : _EX_PUSH_LOCK
+0x258 ReadClusterSize : Uint4B
+0x25c MmLockOrdering : Int4B
+0x260 CmLockOrdering : Int4B
+0x264 CrossThreadFlags : Uint4B
+0x264 Terminated : Pos 0, 1 Bit
+0x264 ThreadInserted : Pos 1, 1 Bit
+0x264 HideFromDebugger : Pos 2, 1 Bit
+0x264 ActiveImpersonationInfo : Pos 3, 1 Bit
+0x264 HardErrorsAreDisabled : Pos 4, 1 Bit
+0x264 BreakOnTermination : Pos 5, 1 Bit
+0x264 SkipCreationMsg : Pos 6, 1 Bit
+0x264 SkipTerminationMsg : Pos 7, 1 Bit
+0x264 CopyTokenOnOpen : Pos 8, 1 Bit
+0x264 ThreadIoPriority : Pos 9, 3 Bits
+0x264 ThreadPagePriority : Pos 12, 3 Bits
+0x264 RundownFail : Pos 15, 1 Bit
+0x264 UmsForceQueueTermination : Pos 16, 1 Bit
+0x264 ReservedCrossThreadFlags : Pos 17, 15 Bits
+0x268 SameThreadPassiveFlags : Uint4B
+0x268 ActiveExWorker : Pos 0, 1 Bit
+0x268 MemoryMaker : Pos 1, 1 Bit
+0x268 ClonedThread : Pos 2, 1 Bit
+0x268 KeyedEventInUse : Pos 3, 1 Bit
+0x268 SelfTerminate : Pos 4, 1 Bit
+0x26c SameThreadApcFlags : Uint4B
+0x26c Spare : Pos 0, 1 Bit
+0x26c StartAddressInvalid : Pos 1, 1 Bit
+0x26c EtwCalloutActive : Pos 2, 1 Bit
+0x26c OwnsProcessWorkingSetExclusive : Pos 3, 1 Bit
+0x26c OwnsProcessWorkingSetShared : Pos 4, 1 Bit
+0x26c OwnsSystemCacheWorkingSetExclusive : Pos 5, 1 Bit
+0x26c OwnsSystemCacheWorkingSetShared : Pos 6, 1 Bit
+0x26c OwnsSessionWorkingSetExclusive : Pos 7, 1 Bit
+0x26d OwnsSessionWorkingSetShared : Pos 0, 1 Bit
+0x26d OwnsProcessAddressSpaceExclusive : Pos 1, 1 Bit
+0x26d OwnsProcessAddressSpaceShared : Pos 2, 1 Bit
+0x26d SuppressSymbolLoad : Pos 3, 1 Bit
+0x26d Prefetching : Pos 4, 1 Bit
+0x26d OwnsVadExclusive : Pos 5, 1 Bit
+0x26d OwnsChangeControlAreaExclusive : Pos 6, 1 Bit
+0x26d OwnsChangeControlAreaShared : Pos 7, 1 Bit
+0x26e OwnsPagedPoolWorkingSetExclusive : Pos 0, 1 Bit
+0x26e OwnsPagedPoolWorkingSetShared : Pos 1, 1 Bit
+0x26e OwnsSystemPtesWorkingSetExclusive : Pos 2, 1 Bit
+0x26e OwnsSystemPtesWorkingSetShared : Pos 3, 1 Bit
+0x26e TrimTrigger : Pos 4, 2 Bits
+0x26e Spare2 : Pos 6, 2 Bits
+0x26f PriorityRegionActive : UChar
+0x270 CacheManagerActive : UChar
+0x271 DisablePageFaultClustering : UChar
+0x272 ActiveFaultCount : UChar
+0x273 LockOrderState : UChar
+0x274 AlpcMessageId : Uint4B
+0x278 AlpcMessage : Ptr32 Void
+0x278 AlpcReceiveAttributeSet : Uint4B
+0x27c ExitStatus : Int4B
+0x280 AlpcWaitListEntry : _LIST_ENTRY
+0x288 CacheManagerCount : Uint4B
+0x28c IoBoostCount : Uint4B
+0x290 IrpListLock : Uint4B
+0x294 ReservedForSynchTracking : Ptr32 Void
+0x298 CmCallbackListHead : _SINGLE_LIST_ENTRY
+0x29c ActivityId : Ptr32 _GUID
+0x2a0 WnfContext : Ptr32 Void
+0x2a4 SeLearningModeListHead : _SINGLE_LIST_ENTRY
+0x2a8 RelativeTimerBias : Uint8
Комментариев нет:
Отправить комментарий