d8/db0/win7__x86_8c_source.html

/* Version definitions */

#undef NTDDI_VERSION

#define NTDDI_VERSION NTDDI_WIN7

#undef _WIN32_WINNT

#define _WIN32_WINNT _WIN32_WINNT_WIN7


#include <ntifs.h>

#include <ndk/ntndk.h>


#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName) \

    C_ASSERT(FIELD_OFFSET(Type, MemberName) == Offset); \

    C_ASSERT(FIELD_SIZE(Type, MemberName) == sizeof(MemberType));


/* KTHREAD */

C_ASSERT_FIELD(KTHREAD, 0x000, DISPATCHER_HEADER, Header)

C_ASSERT_FIELD(KTHREAD, 0x010, ULONG64, CycleTime)

C_ASSERT_FIELD(KTHREAD, 0x018, ULONG, HighCycleTime)

C_ASSERT_FIELD(KTHREAD, 0x020, ULONG64, QuantumTarget)

C_ASSERT_FIELD(KTHREAD, 0x028, PVOID, InitialStack)

C_ASSERT_FIELD(KTHREAD, 0x02C, PVOID, StackLimit)

C_ASSERT_FIELD(KTHREAD, 0x030, PVOID, KernelStack)

C_ASSERT_FIELD(KTHREAD, 0x034, ULONG, ThreadLock)

C_ASSERT_FIELD(KTHREAD, 0x038, KWAIT_STATUS_REGISTER, WaitRegister)

C_ASSERT_FIELD(KTHREAD, 0x039, UCHAR, Running)

C_ASSERT_FIELD(KTHREAD, 0x03A, UCHAR[2], Alerted)

C_ASSERT_FIELD(KTHREAD, 0x03C, LONG, MiscFlags)

C_ASSERT_FIELD(KTHREAD, 0x040, KAPC_STATE, ApcState)

C_ASSERT_FIELD(KTHREAD, 0x040, UCHAR[23], ApcStateFill)

C_ASSERT_FIELD(KTHREAD, 0x057, CHAR, Priority)

C_ASSERT_FIELD(KTHREAD, 0x058, ULONG, NextProcessor)

C_ASSERT_FIELD(KTHREAD, 0x05C, ULONG, DeferredProcessor)

C_ASSERT_FIELD(KTHREAD, 0x060, ULONG, ApcQueueLock)

C_ASSERT_FIELD(KTHREAD, 0x064, ULONG, ContextSwitches)

C_ASSERT_FIELD(KTHREAD, 0x068, UCHAR, State)

C_ASSERT_FIELD(KTHREAD, 0x069, CHAR, NpxState)

C_ASSERT_FIELD(KTHREAD, 0x06A, UCHAR, WaitIrql)

C_ASSERT_FIELD(KTHREAD, 0x06B, CHAR, WaitMode)

C_ASSERT_FIELD(KTHREAD, 0x06C, LONG, WaitStatus)

C_ASSERT_FIELD(KTHREAD, 0x070, PKWAIT_BLOCK, WaitBlockList)

C_ASSERT_FIELD(KTHREAD, 0x074, LIST_ENTRY, WaitListEntry)

C_ASSERT_FIELD(KTHREAD, 0x074, SINGLE_LIST_ENTRY, SwapListEntry)

C_ASSERT_FIELD(KTHREAD, 0x07C, PKQUEUE, Queue)

C_ASSERT_FIELD(KTHREAD, 0x080, ULONG, WaitTime)

C_ASSERT_FIELD(KTHREAD, 0x084, SHORT, KernelApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x086, SHORT, SpecialApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x084, ULONG, CombinedApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x088, PVOID, Teb)

C_ASSERT_FIELD(KTHREAD, 0x090, KTIMER, Timer)

C_ASSERT_FIELD(KTHREAD, 0x0B8, LONG, ThreadFlags)

C_ASSERT_FIELD(KTHREAD, 0x0BC, PVOID, ServiceTable)

C_ASSERT_FIELD(KTHREAD, 0x0C0, KWAIT_BLOCK[4], WaitBlock)

C_ASSERT_FIELD(KTHREAD, 0x120, LIST_ENTRY, QueueListEntry)

C_ASSERT_FIELD(KTHREAD, 0x128, PKTRAP_FRAME, TrapFrame)

C_ASSERT_FIELD(KTHREAD, 0x12C, PVOID, FirstArgument)

C_ASSERT_FIELD(KTHREAD, 0x130, PVOID, CallbackStack)

C_ASSERT_FIELD(KTHREAD, 0x130, ULONG, CallbackDepth)

C_ASSERT_FIELD(KTHREAD, 0x134, UCHAR, ApcStateIndex)

C_ASSERT_FIELD(KTHREAD, 0x135, CHAR, BasePriority)

C_ASSERT_FIELD(KTHREAD, 0x136, CHAR, PriorityDecrement)

C_ASSERT_FIELD(KTHREAD, 0x137, UCHAR, Preempted)

C_ASSERT_FIELD(KTHREAD, 0x138, UCHAR, AdjustReason)

C_ASSERT_FIELD(KTHREAD, 0x139, CHAR, AdjustIncrement)

C_ASSERT_FIELD(KTHREAD, 0x13A, CHAR, PreviousMode)

C_ASSERT_FIELD(KTHREAD, 0x13B, CHAR, Saturation)

C_ASSERT_FIELD(KTHREAD, 0x13C, ULONG, SystemCallNumber)

C_ASSERT_FIELD(KTHREAD, 0x140, ULONG, FreezeCount)

C_ASSERT_FIELD(KTHREAD, 0x144, GROUP_AFFINITY, UserAffinity)

C_ASSERT_FIELD(KTHREAD, 0x150, PKPROCESS, Process)

C_ASSERT_FIELD(KTHREAD, 0x154, GROUP_AFFINITY, Affinity)

C_ASSERT_FIELD(KTHREAD, 0x160, ULONG, IdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x164, ULONG, UserIdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x168, PKAPC_STATE[2], ApcStatePointer)

C_ASSERT_FIELD(KTHREAD, 0x170, KAPC_STATE, SavedApcState)

C_ASSERT_FIELD(KTHREAD, 0x170, UCHAR[23], SavedApcStateFill)

C_ASSERT_FIELD(KTHREAD, 0x187, UCHAR, WaitReason)

C_ASSERT_FIELD(KTHREAD, 0x188, CHAR, SuspendCount)

C_ASSERT_FIELD(KTHREAD, 0x189, CHAR, Spare1)

C_ASSERT_FIELD(KTHREAD, 0x18A, UCHAR, OtherPlatformFill)

C_ASSERT_FIELD(KTHREAD, 0x18C, PVOID, Win32Thread)

C_ASSERT_FIELD(KTHREAD, 0x190, PVOID, StackBase)

C_ASSERT_FIELD(KTHREAD, 0x194, KAPC, SuspendApc)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR, SuspendApcFill0)

C_ASSERT_FIELD(KTHREAD, 0x195, UCHAR, ResourceIndex)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR[3], SuspendApcFill1)

C_ASSERT_FIELD(KTHREAD, 0x197, UCHAR, QuantumReset)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR[4], SuspendApcFill2)

C_ASSERT_FIELD(KTHREAD, 0x198, ULONG, KernelTime)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR[36], SuspendApcFill3)

C_ASSERT_FIELD(KTHREAD, 0x1B8, PKPRCB, WaitPrcb)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR[40], SuspendApcFill4)

C_ASSERT_FIELD(KTHREAD, 0x1BC, PVOID, LegoData)

C_ASSERT_FIELD(KTHREAD, 0x194, UCHAR[47], SuspendApcFill5)

C_ASSERT_FIELD(KTHREAD, 0x1C3, UCHAR, LargeStack)

C_ASSERT_FIELD(KTHREAD, 0x1C4, ULONG, UserTime)

C_ASSERT_FIELD(KTHREAD, 0x1C8, KSEMAPHORE, SuspendSemaphore)

C_ASSERT_FIELD(KTHREAD, 0x1C8, UCHAR[20], SuspendSemaphorefill)

C_ASSERT_FIELD(KTHREAD, 0x1DC, ULONG, SListFaultCount)

C_ASSERT_FIELD(KTHREAD, 0x1E0, LIST_ENTRY, ThreadListEntry)

C_ASSERT_FIELD(KTHREAD, 0x1E8, LIST_ENTRY, MutantListHead)

C_ASSERT_FIELD(KTHREAD, 0x1F0, PVOID, SListFaultAddress)

C_ASSERT_FIELD(KTHREAD, 0x1F4, KTHREAD_COUNTERS*, ThreadCounters)

C_ASSERT_FIELD(KTHREAD, 0x1F8, XSTATE_SAVE*, XStateSave)


/* KUSER_SHARED_DATA */

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x000, ULONG, TickCountLowDeprecated)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x004, ULONG, TickCountMultiplier)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x008, KSYSTEM_TIME, InterruptTime)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x014, KSYSTEM_TIME, SystemTime)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x020, KSYSTEM_TIME, TimeZoneBias)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x02C, USHORT, ImageNumberLow)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x02E, USHORT, ImageNumberHigh)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x030, WCHAR[260], NtSystemRoot)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x238, ULONG, MaxStackTraceDepth)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x23C, ULONG, CryptoExponent)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x240, ULONG, TimeZoneId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x244, ULONG, LargePageMinimum)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x248, ULONG[7], Reserved2)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x264, NT_PRODUCT_TYPE, NtProductType)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x268, BOOLEAN, ProductTypeIsValid)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x26C, ULONG, NtMajorVersion)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x270, ULONG, NtMinorVersion)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x274, BOOLEAN[64], ProcessorFeatures)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2B4, ULONG, Reserved1)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2B8, ULONG, Reserved3)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2BC, ULONG, TimeSlip)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C0, ALTERNATIVE_ARCHITECTURE_TYPE, AlternativeArchitecture)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C4, ULONG[1], AltArchitecturePad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C8, LARGE_INTEGER, SystemExpirationDate)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D0, ULONG, SuiteMask)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D4, BOOLEAN, KdDebuggerEnabled)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D5, UCHAR, MitigationPolicies) // NXSupportPolicy

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D8, ULONG, ActiveConsoleId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2DC, ULONG, DismountCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E0, ULONG, ComPlusPackage)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E4, ULONG, LastSystemRITEventTickCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E8, ULONG, NumberOfPhysicalPages)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2EC, BOOLEAN, SafeBootMode)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2ED, UCHAR, TscQpcData)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2EE, UCHAR[2], TscQpcPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F0, ULONG, SharedDataFlags)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F4, ULONG[1], DataFlagsPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F8, ULONGLONG, TestRetInstruction)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x300, ULONG, SystemCall)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x304, ULONG, SystemCallReturn)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x308, ULONGLONG[3], SystemCallPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, KSYSTEM_TIME, TickCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, ULONGLONG, TickCountQuad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, ULONG[3], ReservedTickCountOverlay)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x32C, ULONG[1], TickCountPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x330, ULONG, Cookie)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x334, ULONG[1], CookiePad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x338, ULONGLONG, ConsoleSessionForegroundProcessId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x340, ULONG[16], DEPRECATED_Wow64SharedInformation)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x380, USHORT[16], UserModeGlobalLogger)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A0, ULONG, ImageFileExecutionOptions)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A4, ULONG, LangGenerationCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A8, ULONGLONG, Reserved5)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3B0, ULONGLONG, InterruptTimeBias)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3B8, ULONGLONG, QpcBias) // TscQpcBias

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C0, ULONG, ActiveProcessorCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C4, USHORT, ActiveGroupCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C6, USHORT, Reserved4)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C8, ULONG, AitSamplingValue)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3CC, ULONG, AppCompatFlag)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3D0, ULONGLONG, SystemDllNativeRelocation)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3D8, ULONG, SystemDllWowRelocation)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3DC, ULONG[1], XStatePad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3E0, XSTATE_CONFIGURATION, XState)

PreviousMode
_In_ PVOID _In_ ULONG _Out_ PVOID _In_ ULONG _Inout_ PULONG _In_ KPROCESSOR_MODE PreviousMode
Definition: KdSystemDebugControl.c:35

BOOLEAN
unsigned char BOOLEAN
Definition: ProcessorBind.h:185

ServiceTable
static SERVICE_TABLE_ENTRYW ServiceTable[2]
Definition: eventlog.c:24

Reserved2
@ Reserved2
Definition: bcd.h:202

Reserved1
@ Reserved1
Definition: bcd.h:201

Header
Definition: Header.h:9

Timer
Definition: cppunit_timer.h:24

NT_PRODUCT_TYPE
enum _NT_PRODUCT_TYPE NT_PRODUCT_TYPE

Process
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
Definition: fsrtlfuncs.h:223

void
Definition: nsiface.idl:2307

KdDebuggerEnabled
BOOLEAN KdDebuggerEnabled
Definition: kddata.c:82

ULONG64
unsigned __int64 ULONG64
Definition: imports.h:198

Running
@ Running
Definition: ketypes.h:390

ntndk.h

NtSystemRoot
UNICODE_STRING NtSystemRoot
Definition: init.c:76

NtMajorVersion
ULONG NtMajorVersion
Definition: init.c:45

NtMinorVersion
ULONG NtMinorVersion
Definition: init.c:46

ApcState
_Out_ PKAPC_STATE ApcState
Definition: mm.h:1770

SHORT
short SHORT
Definition: pedump.c:59

LONG
long LONG
Definition: pedump.c:60

USHORT
unsigned short USHORT
Definition: pedump.c:61

Reserved3
@ Reserved3
Definition: sacdrv.h:1471

Reserved4
@ Reserved4
Definition: sacdrv.h:1472

Reserved5
@ Reserved5
Definition: sacdrv.h:1473

State
Definition: stack_allocator.h:18

_DISPATCHER_HEADER
Definition: ketypes.h:740

_GROUP_AFFINITY
Definition: ntbasedef.h:671

_KAPC
Definition: ketypes.h:547

_KPRCB
Definition: ketypes.h:649

_KPROCESS
Definition: ketypes.h:2246

_KQUEUE
Definition: ketypes.h:1578

_KSEMAPHORE
Definition: ketypes.h:815

_KSYSTEM_TIME
Definition: ketypes.h:928

_KTHREAD_COUNTERS
Definition: ketypes.h:1184

_KTHREAD
Definition: ketypes.h:1823

_KTIMER
Definition: ketypes.h:851

_KTRAP_FRAME
Definition: ketypes.h:401

_KUSER_SHARED_DATA
Definition: ketypes.h:1271

_KWAIT_BLOCK
Definition: ketypes.h:455

_LIST_ENTRY
Definition: typedefs.h:120

_SINGLE_LIST_ENTRY
Definition: ntbasedef.h:640

_XSTATE_CONFIGURATION
Definition: ketypes.h:1222

_XSTATE_SAVE
Definition: ketypes.h:989

ULONG
uint32_t ULONG
Definition: typedefs.h:59

ULONGLONG
uint64_t ULONGLONG
Definition: typedefs.h:67

_KWAIT_STATUS_REGISTER
Definition: ketypes.h:1161

_LARGE_INTEGER
Definition: typedefs.h:103

Queue
_Must_inspect_result_ _In_ WDFDEVICE _In_ PIRP _In_ WDFQUEUE Queue
Definition: wdfdevice.h:2225

Priority
_In_ WDFINTERRUPT _In_ WDF_INTERRUPT_POLICY _In_ WDF_INTERRUPT_PRIORITY Priority
Definition: wdfinterrupt.h:655

C_ASSERT_FIELD
#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName)
Definition: win7_x86.c:10

Cookie
_In_opt_ PVOID _Out_ PLARGE_INTEGER Cookie
Definition: cmfuncs.h:14

Affinity
_In_ ULONG _In_ ULONG _In_ ULONG _Out_ PKIRQL _Out_ PKAFFINITY Affinity
Definition: halfuncs.h:174

UserTime
_Out_ PULONG UserTime
Definition: kefuncs.h:759

PKAPC_STATE
* PKAPC_STATE
Definition: ketypes.h:1572

KAPC_STATE
KAPC_STATE
Definition: ketypes.h:1572

ALTERNATIVE_ARCHITECTURE_TYPE
enum _ALTERNATIVE_ARCHITECTURE_TYPE ALTERNATIVE_ARCHITECTURE_TYPE

UCHAR
unsigned char UCHAR
Definition: xmlstorage.h:181

WCHAR
__wchar_t WCHAR
Definition: xmlstorage.h:180

CHAR
char CHAR
Definition: xmlstorage.h:175