d7/d9e/win2003__x64_8c_source.html

/* Version definitions */

#undef NTDDI_VERSION

#define NTDDI_VERSION NTDDI_WS03SP1

#undef _WIN32_WINNT

#define _WIN32_WINNT _WIN32_WINNT_WS03


#include <ntifs.h>

#include <ndk/ntndk.h>


#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName) \

    C_ASSERT(FIELD_OFFSET(Type, MemberName) == Offset); \

    C_ASSERT(FIELD_SIZE(Type, MemberName) == sizeof(MemberType));


/* KTHREAD */

C_ASSERT_FIELD(KTHREAD, 0x000, DISPATCHER_HEADER, Header)

C_ASSERT_FIELD(KTHREAD, 0x018, LIST_ENTRY, MutantListHead)

C_ASSERT_FIELD(KTHREAD, 0x028, PVOID, InitialStack)

C_ASSERT_FIELD(KTHREAD, 0x030, PVOID, StackLimit)

C_ASSERT_FIELD(KTHREAD, 0x038, PVOID, KernelStack)

C_ASSERT_FIELD(KTHREAD, 0x040, ULONG64, ThreadLock)

C_ASSERT_FIELD(KTHREAD, 0x048, KAPC_STATE, ApcState)

C_ASSERT_FIELD(KTHREAD, 0x048, UCHAR[43], ApcStateFill)

C_ASSERT_FIELD(KTHREAD, 0x073, UCHAR, ApcQueueable)

C_ASSERT_FIELD(KTHREAD, 0x074, UCHAR, NextProcessor)

C_ASSERT_FIELD(KTHREAD, 0x075, UCHAR, DeferredProcessor)

C_ASSERT_FIELD(KTHREAD, 0x076, UCHAR, AdjustReason)

C_ASSERT_FIELD(KTHREAD, 0x077, CHAR, AdjustIncrement)

C_ASSERT_FIELD(KTHREAD, 0x078, ULONG64, ApcQueueLock)

C_ASSERT_FIELD(KTHREAD, 0x080, LONG64, WaitStatus)

C_ASSERT_FIELD(KTHREAD, 0x088, PKWAIT_BLOCK, WaitBlockList)

C_ASSERT_FIELD(KTHREAD, 0x088, PKGATE, GateObject)

C_ASSERT_FIELD(KTHREAD, 0x090, UCHAR, Alertable)

C_ASSERT_FIELD(KTHREAD, 0x091, UCHAR, WaitNext)

C_ASSERT_FIELD(KTHREAD, 0x092, UCHAR, WaitReason)

C_ASSERT_FIELD(KTHREAD, 0x093, CHAR, Priority)

C_ASSERT_FIELD(KTHREAD, 0x094, UCHAR, EnableStackSwap)

C_ASSERT_FIELD(KTHREAD, 0x095, UCHAR, SwapBusy)

C_ASSERT_FIELD(KTHREAD, 0x096, UCHAR[2], Alerted)

C_ASSERT_FIELD(KTHREAD, 0x098, LIST_ENTRY, WaitListEntry)

C_ASSERT_FIELD(KTHREAD, 0x098, SINGLE_LIST_ENTRY, SwapListEntry)

C_ASSERT_FIELD(KTHREAD, 0x0A8, PKQUEUE, Queue)

C_ASSERT_FIELD(KTHREAD, 0x0B0, PVOID, Teb)

C_ASSERT_FIELD(KTHREAD, 0x0B8, KTIMER, Timer)

C_ASSERT_FIELD(KTHREAD, 0x0B8, UCHAR[60], TimerFill)

C_ASSERT_FIELD(KTHREAD, 0x0F4, LONG, ThreadFlags)

C_ASSERT_FIELD(KTHREAD, 0x0F8, KWAIT_BLOCK[4], WaitBlock)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[43], WaitBlockFill0)

C_ASSERT_FIELD(KTHREAD, 0x123, UCHAR, SystemAffinityActive)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[91], WaitBlockFill1)

C_ASSERT_FIELD(KTHREAD, 0x153, CHAR, PreviousMode)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[139], WaitBlockFill2)

C_ASSERT_FIELD(KTHREAD, 0x183, UCHAR, ResourceIndex)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[187], WaitBlockFill3)

C_ASSERT_FIELD(KTHREAD, 0x1B3, UCHAR, LargeStack)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[44], WaitBlockFill4)

C_ASSERT_FIELD(KTHREAD, 0x124, ULONG, ContextSwitches)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[92], WaitBlockFill5)

C_ASSERT_FIELD(KTHREAD, 0x154, UCHAR, State)

C_ASSERT_FIELD(KTHREAD, 0x155, UCHAR, NpxState)

C_ASSERT_FIELD(KTHREAD, 0x156, UCHAR, WaitIrql)

C_ASSERT_FIELD(KTHREAD, 0x157, CHAR, WaitMode)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[140], WaitBlockFill6)

C_ASSERT_FIELD(KTHREAD, 0x184, ULONG, WaitTime)

C_ASSERT_FIELD(KTHREAD, 0x0F8, UCHAR[188], WaitBlockFill7)

C_ASSERT_FIELD(KTHREAD, 0x1B4, SHORT, KernelApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x1B6, SHORT, SpecialApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x1B4, ULONG, CombinedApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x1B8, LIST_ENTRY, QueueListEntry)

C_ASSERT_FIELD(KTHREAD, 0x1C8, PKTRAP_FRAME, TrapFrame)

C_ASSERT_FIELD(KTHREAD, 0x1D0, PVOID, CallbackStack)

C_ASSERT_FIELD(KTHREAD, 0x1D8, PVOID, ServiceTable)

C_ASSERT_FIELD(KTHREAD, 0x1E0, ULONG, KernelLimit)

C_ASSERT_FIELD(KTHREAD, 0x1E4, UCHAR, ApcStateIndex)

C_ASSERT_FIELD(KTHREAD, 0x1E5, UCHAR, IdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x1E6, UCHAR, Preempted)

C_ASSERT_FIELD(KTHREAD, 0x1E7, UCHAR, ProcessReadyQueue)

C_ASSERT_FIELD(KTHREAD, 0x1E8, PVOID, Win32kTable)

C_ASSERT_FIELD(KTHREAD, 0x1F0, ULONG, Win32kLimit)

C_ASSERT_FIELD(KTHREAD, 0x1F4, UCHAR, KernelStackResident)

C_ASSERT_FIELD(KTHREAD, 0x1F5, CHAR, BasePriority)

C_ASSERT_FIELD(KTHREAD, 0x1F6, CHAR, PriorityDecrement)

C_ASSERT_FIELD(KTHREAD, 0x1F7, CHAR, Saturation)

C_ASSERT_FIELD(KTHREAD, 0x1F8, ULONG64, UserAffinity)

C_ASSERT_FIELD(KTHREAD, 0x200, PKPROCESS, Process)

C_ASSERT_FIELD(KTHREAD, 0x208, ULONG64, Affinity)

C_ASSERT_FIELD(KTHREAD, 0x210, PKAPC_STATE[2], ApcStatePointer)

C_ASSERT_FIELD(KTHREAD, 0x220, KAPC_STATE, SavedApcState)

C_ASSERT_FIELD(KTHREAD, 0x220, UCHAR[43], SavedApcStateFill)

C_ASSERT_FIELD(KTHREAD, 0x24B, CHAR, FreezeCount)

C_ASSERT_FIELD(KTHREAD, 0x24C, CHAR, SuspendCount)

C_ASSERT_FIELD(KTHREAD, 0x24D, UCHAR, UserIdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x24E, UCHAR, CalloutActive)

C_ASSERT_FIELD(KTHREAD, 0x24F, UCHAR, CodePatchInProgress)

C_ASSERT_FIELD(KTHREAD, 0x250, PVOID, Win32Thread)

C_ASSERT_FIELD(KTHREAD, 0x258, PVOID, StackBase)

C_ASSERT_FIELD(KTHREAD, 0x260, KAPC, SuspendApc)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR, SuspendApcFill0)

C_ASSERT_FIELD(KTHREAD, 0x261, CHAR, Quantum)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR[3], SuspendApcFill1)

C_ASSERT_FIELD(KTHREAD, 0x263, UCHAR, QuantumReset)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR[4], SuspendApcFill2)

C_ASSERT_FIELD(KTHREAD, 0x264, ULONG, KernelTime)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR[64], SuspendApcFill3)

C_ASSERT_FIELD(KTHREAD, 0x2A0, PVOID, TlsArray)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR[72], SuspendApcFill4)

C_ASSERT_FIELD(KTHREAD, 0x2A8, PVOID, LegoData)

C_ASSERT_FIELD(KTHREAD, 0x260, UCHAR[83], SuspendApcFill5)

C_ASSERT_FIELD(KTHREAD, 0x2B3, UCHAR, PowerState)

C_ASSERT_FIELD(KTHREAD, 0x2B4, ULONG, UserTime)

C_ASSERT_FIELD(KTHREAD, 0x2B8, KSEMAPHORE, SuspendSemaphore)

C_ASSERT_FIELD(KTHREAD, 0x2B8, UCHAR[28], SuspendSemaphorefill)

C_ASSERT_FIELD(KTHREAD, 0x2D4, ULONG, SListFaultCount)

C_ASSERT_FIELD(KTHREAD, 0x2D8, LIST_ENTRY, ThreadListEntry)

C_ASSERT_FIELD(KTHREAD, 0x2E8, PVOID, SListFaultAddress)

C_ASSERT_FIELD(KTHREAD, 0x2F0, LONG64, ReadOperationCount)

C_ASSERT_FIELD(KTHREAD, 0x2F8, LONG64, WriteOperationCount)

C_ASSERT_FIELD(KTHREAD, 0x300, LONG64, OtherOperationCount)

C_ASSERT_FIELD(KTHREAD, 0x308, LONG64, ReadTransferCount)

C_ASSERT_FIELD(KTHREAD, 0x310, LONG64, WriteTransferCount)

C_ASSERT_FIELD(KTHREAD, 0x318, LONG64, OtherTransferCount)


/* TEB */

C_ASSERT_FIELD(TEB, 0x000, NT_TIB, NtTib)

C_ASSERT_FIELD(TEB, 0x038, PVOID, EnvironmentPointer)

C_ASSERT_FIELD(TEB, 0x040, CLIENT_ID, ClientId)

C_ASSERT_FIELD(TEB, 0x050, PVOID, ActiveRpcHandle)

C_ASSERT_FIELD(TEB, 0x058, PVOID, ThreadLocalStoragePointer)

C_ASSERT_FIELD(TEB, 0x060, PPEB, ProcessEnvironmentBlock)

C_ASSERT_FIELD(TEB, 0x068, ULONG, LastErrorValue)

C_ASSERT_FIELD(TEB, 0x06C, ULONG, CountOfOwnedCriticalSections)

C_ASSERT_FIELD(TEB, 0x070, PVOID, CsrClientThread)

C_ASSERT_FIELD(TEB, 0x078, PVOID, Win32ThreadInfo)

C_ASSERT_FIELD(TEB, 0x080, ULONG[26], User32Reserved)

C_ASSERT_FIELD(TEB, 0x0E8, ULONG[5], UserReserved)

C_ASSERT_FIELD(TEB, 0x100, PVOID, WOW32Reserved)

C_ASSERT_FIELD(TEB, 0x108, ULONG, CurrentLocale)

C_ASSERT_FIELD(TEB, 0x10C, ULONG, FpSoftwareStatusRegister)

C_ASSERT_FIELD(TEB, 0x110, PVOID[54], SystemReserved1)

C_ASSERT_FIELD(TEB, 0x2C0, LONG, ExceptionCode)

C_ASSERT_FIELD(TEB, 0x2C8, PACTIVATION_CONTEXT_STACK, ActivationContextStackPointer)

C_ASSERT_FIELD(TEB, 0x2D0, UCHAR[28], SpareBytes1)

C_ASSERT_FIELD(TEB, 0x2F0, GDI_TEB_BATCH, GdiTebBatch)

C_ASSERT_FIELD(TEB, 0x7D8, CLIENT_ID, RealClientId)

C_ASSERT_FIELD(TEB, 0x7E8, PVOID, GdiCachedProcessHandle)

C_ASSERT_FIELD(TEB, 0x7F0, ULONG, GdiClientPID)

C_ASSERT_FIELD(TEB, 0x7F4, ULONG, GdiClientTID)

C_ASSERT_FIELD(TEB, 0x7F8, PVOID, GdiThreadLocalInfo)

C_ASSERT_FIELD(TEB, 0x800, ULONG64[62], Win32ClientInfo)

C_ASSERT_FIELD(TEB, 0x9F0, PVOID[233], glDispatchTable)

C_ASSERT_FIELD(TEB, 0x1138, ULONG64[29], glReserved1)

C_ASSERT_FIELD(TEB, 0x1220, PVOID, glReserved2)

C_ASSERT_FIELD(TEB, 0x1228, PVOID, glSectionInfo)

C_ASSERT_FIELD(TEB, 0x1230, PVOID, glSection)

C_ASSERT_FIELD(TEB, 0x1238, PVOID, glTable)

C_ASSERT_FIELD(TEB, 0x1240, PVOID, glCurrentRC)

C_ASSERT_FIELD(TEB, 0x1248, PVOID, glContext)

C_ASSERT_FIELD(TEB, 0x1250, ULONG, LastStatusValue)

C_ASSERT_FIELD(TEB, 0x1258, UNICODE_STRING, StaticUnicodeString)

C_ASSERT_FIELD(TEB, 0x1268, WCHAR[261], StaticUnicodeBuffer)

C_ASSERT_FIELD(TEB, 0x1478, PVOID, DeallocationStack)

C_ASSERT_FIELD(TEB, 0x1480, PVOID[64], TlsSlots)

C_ASSERT_FIELD(TEB, 0x1680, LIST_ENTRY, TlsLinks)

C_ASSERT_FIELD(TEB, 0x1690, PVOID, Vdm)

C_ASSERT_FIELD(TEB, 0x1698, PVOID, ReservedForNtRpc)

C_ASSERT_FIELD(TEB, 0x16A0, PVOID[2], DbgSsReserved)

C_ASSERT_FIELD(TEB, 0x16B0, ULONG, HardErrorMode)

C_ASSERT_FIELD(TEB, 0x16B8, PVOID[14], Instrumentation)

C_ASSERT_FIELD(TEB, 0x1728, PVOID, SubProcessTag)

C_ASSERT_FIELD(TEB, 0x1730, PVOID, EtwTraceData)

C_ASSERT_FIELD(TEB, 0x1738, PVOID, WinSockData)

C_ASSERT_FIELD(TEB, 0x1740, ULONG, GdiBatchCount)

C_ASSERT_FIELD(TEB, 0x1744, UCHAR, InDbgPrint)

C_ASSERT_FIELD(TEB, 0x1745, UCHAR, FreeStackOnTermination)

C_ASSERT_FIELD(TEB, 0x1746, UCHAR, HasFiberData)

C_ASSERT_FIELD(TEB, 0x1747, UCHAR, IdealProcessor)

C_ASSERT_FIELD(TEB, 0x1748, ULONG, GuaranteedStackBytes)

C_ASSERT_FIELD(TEB, 0x1750, PVOID, ReservedForPerf)

C_ASSERT_FIELD(TEB, 0x1758, PVOID, ReservedForOle)

C_ASSERT_FIELD(TEB, 0x1760, ULONG, WaitingOnLoaderLock)

C_ASSERT_FIELD(TEB, 0x1768, ULONG64, SparePointer1)

C_ASSERT_FIELD(TEB, 0x1770, ULONG64, SoftPatchPtr1)

C_ASSERT_FIELD(TEB, 0x1778, ULONG64, SoftPatchPtr2)

C_ASSERT_FIELD(TEB, 0x1780, PVOID*, TlsExpansionSlots)

C_ASSERT_FIELD(TEB, 0x1788, PVOID, DeallocationBStore)

C_ASSERT_FIELD(TEB, 0x1790, PVOID, BStoreLimit)

C_ASSERT_FIELD(TEB, 0x1798, ULONG, ImpersonationLocale)

C_ASSERT_FIELD(TEB, 0x179C, ULONG, IsImpersonating)

C_ASSERT_FIELD(TEB, 0x17A0, PVOID, NlsCache)

C_ASSERT_FIELD(TEB, 0x17A8, PVOID, pShimData)

C_ASSERT_FIELD(TEB, 0x17B0, ULONG, HeapVirtualAffinity)

C_ASSERT_FIELD(TEB, 0x17B8, PVOID, CurrentTransactionHandle)

C_ASSERT_FIELD(TEB, 0x17C0, PTEB_ACTIVE_FRAME, ActiveFrame)

C_ASSERT_FIELD(TEB, 0x17C8, PVOID, FlsData)

C_ASSERT_FIELD(TEB, 0x17D0, UCHAR, SafeThunkCall)

C_ASSERT_FIELD(TEB, 0x17D1, UCHAR[3], BooleanSpare)

ServiceTable
static SERVICE_TABLE_ENTRYW ServiceTable[2]
Definition: eventlog.c:24

ExceptionCode
_Inout_ PIRP _In_ NTSTATUS ExceptionCode
Definition: cdprocs.h:1774

Header
Definition: Header.h:9

Timer
Definition: cppunit_timer.h:24

Process
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
Definition: fsrtlfuncs.h:223

void
Definition: nsiface.idl:2307

ULONG64
unsigned __int64 ULONG64
Definition: imports.h:198

Alertable
_In_ PVOID _In_ BOOLEAN Alertable
Definition: exfuncs.h:453

GateObject
@ GateObject
Definition: ketypes.h:413

ntndk.h

ApcState
_Out_ PKAPC_STATE ApcState
Definition: mm.h:1765

SHORT
short SHORT
Definition: pedump.c:59

LONG
long LONG
Definition: pedump.c:60

State
Definition: stack_allocator.h:18

_ACTIVATION_CONTEXT_STACK
Definition: rtltypes.h:972

_CLIENT_ID
Definition: compat.h:824

_DISPATCHER_HEADER
Definition: ketypes.h:740

_GDI_TEB_BATCH
Definition: compat.h:830

_KAPC
Definition: ketypes.h:547

_KGATE
Definition: ketypes.h:822

_KPROCESS
Definition: ketypes.h:2083

_KQUEUE
Definition: ketypes.h:1415

_KSEMAPHORE
Definition: ketypes.h:815

_KTHREAD
Definition: ketypes.h:1660

_KTIMER
Definition: ketypes.h:851

_KTRAP_FRAME
Definition: ketypes.h:377

_KWAIT_BLOCK
Definition: ketypes.h:455

_LIST_ENTRY
Definition: typedefs.h:120

_NT_TIB
Definition: compat.h:710

_PEB
Definition: btrfs_drv.h:1907

_SINGLE_LIST_ENTRY
Definition: ntbasedef.h:628

_TEB_ACTIVE_FRAME
Definition: pstypes.h:717

_TEB
Definition: compat.h:836

_UNICODE_STRING
Definition: env_spec_w32.h:368

LONG64
int64_t LONG64
Definition: typedefs.h:68

ULONG
uint32_t ULONG
Definition: typedefs.h:59

Queue
_Must_inspect_result_ _In_ WDFDEVICE _In_ PIRP _In_ WDFQUEUE Queue
Definition: wdfdevice.h:2225

PowerState
_Must_inspect_result_ _In_ PWDFDEVICE_INIT _In_ WDF_DEVICE_POWER_STATE PowerState
Definition: wdfdevice.h:3034

Priority
_In_ WDFINTERRUPT _In_ WDF_INTERRUPT_POLICY _In_ WDF_INTERRUPT_PRIORITY Priority
Definition: wdfinterrupt.h:655

C_ASSERT_FIELD
#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName)
Definition: win2003_x64.c:10

Affinity
_In_ ULONG _In_ ULONG _In_ ULONG _Out_ PKIRQL _Out_ PKAFFINITY Affinity
Definition: halfuncs.h:174

UserTime
_Out_ PULONG UserTime
Definition: kefuncs.h:759

ClientId
_Out_ PCLIENT_ID ClientId
Definition: kefuncs.h:1151

PKAPC_STATE
* PKAPC_STATE
Definition: ketypes.h:1409

KAPC_STATE
KAPC_STATE
Definition: ketypes.h:1409

PreviousMode
_In_ KPROCESSOR_MODE PreviousMode
Definition: sefuncs.h:103

UCHAR
unsigned char UCHAR
Definition: xmlstorage.h:181

WCHAR
__wchar_t WCHAR
Definition: xmlstorage.h:180

CHAR
char CHAR
Definition: xmlstorage.h:175