Documentation regarding windows KTHREAD | Thread Control Block | Reverse Engineering | Page 1

steady bone Dec 4, 2022, 1:27 PM

#

What's the difference between the following variables:
InitialStack
StackLimit
StackBase
KernelStack

The names seem misleading because I've seen some code use them in a weird way

Vergilius Project

Take a look into the depths of Windows kernels and reveal more than 60000 undocumented structures.

#

Documentation regarding windows KTHREAD | Thread Control Block

cedar glacier Dec 4, 2022, 5:34 PM

#

Check out Geoff Chappell's site on KTHREAD

steady bone Dec 5, 2022, 7:29 AM

#

He doesn't explain the field I stated

#

But I ended finding the answer from another discord

#Documentation regarding windows KTHREAD | Thread Control Block