d9/d42/win8__x86_8c_source.html

/* Version definitions */

#undef NTDDI_VERSION

#define NTDDI_VERSION NTDDI_WIN8

#undef _WIN32_WINNT

#define _WIN32_WINNT _WIN32_WINNT_WIN8


#include <ntifs.h>

#include <ndk/ntndk.h>


#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName) \

    C_ASSERT(FIELD_OFFSET(Type, MemberName) == Offset); \

    C_ASSERT(FIELD_SIZE(Type, MemberName) == sizeof(MemberType));


/* KTHREAD */

C_ASSERT_FIELD(KTHREAD, 0x000, DISPATCHER_HEADER, Header)

C_ASSERT_FIELD(KTHREAD, 0x010, PVOID, SListFaultAddress)

C_ASSERT_FIELD(KTHREAD, 0x018, ULONG64, QuantumTarget)

C_ASSERT_FIELD(KTHREAD, 0x020, PVOID, InitialStack)

C_ASSERT_FIELD(KTHREAD, 0x024, PVOID, StackLimit)

C_ASSERT_FIELD(KTHREAD, 0x028, PVOID, StackBase)

C_ASSERT_FIELD(KTHREAD, 0x02C, ULONG, ThreadLock)

C_ASSERT_FIELD(KTHREAD, 0x030, ULONG64, CycleTime)

C_ASSERT_FIELD(KTHREAD, 0x038, ULONG, HighCycleTime)

C_ASSERT_FIELD(KTHREAD, 0x03C, PVOID, ServiceTable)

C_ASSERT_FIELD(KTHREAD, 0x040, ULONG, CurrentRunTime)

C_ASSERT_FIELD(KTHREAD, 0x044, ULONG, ExpectedRunTime)

C_ASSERT_FIELD(KTHREAD, 0x048, PVOID, KernelStack)

C_ASSERT_FIELD(KTHREAD, 0x04C, PXSAVE_FORMAT, StateSaveArea)

C_ASSERT_FIELD(KTHREAD, 0x050, struct _KSCHEDULING_GROUP*, SchedulingGroup)

C_ASSERT_FIELD(KTHREAD, 0x054, KWAIT_STATUS_REGISTER, WaitRegister)

C_ASSERT_FIELD(KTHREAD, 0x055, UCHAR, Running)

C_ASSERT_FIELD(KTHREAD, 0x056, UCHAR[2], Alerted)

C_ASSERT_FIELD(KTHREAD, 0x058, LONG, MiscFlags)

C_ASSERT_FIELD(KTHREAD, 0x05C, LONG, ThreadFlags)

C_ASSERT_FIELD(KTHREAD, 0x060, ULONG, Spare0)

C_ASSERT_FIELD(KTHREAD, 0x064, ULONG, SystemCallNumber)

C_ASSERT_FIELD(KTHREAD, 0x068, PVOID, FirstArgument)

C_ASSERT_FIELD(KTHREAD, 0x06C, PKTRAP_FRAME, TrapFrame)

C_ASSERT_FIELD(KTHREAD, 0x070, KAPC_STATE, ApcState)

C_ASSERT_FIELD(KTHREAD, 0x087, CHAR, Priority)

C_ASSERT_FIELD(KTHREAD, 0x088, ULONG, UserIdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x08C, ULONG, ContextSwitches)

C_ASSERT_FIELD(KTHREAD, 0x090, UCHAR, State)

C_ASSERT_FIELD(KTHREAD, 0x091, CHAR, NpxState)

C_ASSERT_FIELD(KTHREAD, 0x092, UCHAR, WaitIrql)

C_ASSERT_FIELD(KTHREAD, 0x093, CHAR, WaitMode)

C_ASSERT_FIELD(KTHREAD, 0x094, LONG, WaitStatus)

C_ASSERT_FIELD(KTHREAD, 0x098, PKWAIT_BLOCK, WaitBlockList)

C_ASSERT_FIELD(KTHREAD, 0x09C, LIST_ENTRY, WaitListEntry)

C_ASSERT_FIELD(KTHREAD, 0x09C, SINGLE_LIST_ENTRY, SwapListEntry)

C_ASSERT_FIELD(KTHREAD, 0x0A4, PKQUEUE, Queue)

C_ASSERT_FIELD(KTHREAD, 0x0A8, PVOID, Teb)

C_ASSERT_FIELD(KTHREAD, 0x0B0, ULONG64, RelativeTimerBias)

C_ASSERT_FIELD(KTHREAD, 0x0B8, KTIMER, Timer)

C_ASSERT_FIELD(KTHREAD, 0x0E0, KWAIT_BLOCK[4], WaitBlock)

C_ASSERT_FIELD(KTHREAD, 0x0F4, PKTHREAD_COUNTERS, ThreadCounters)

C_ASSERT_FIELD(KTHREAD, 0x10C, PXSTATE_SAVE, XStateSave)

C_ASSERT_FIELD(KTHREAD, 0x124, PVOID, Win32Thread)

C_ASSERT_FIELD(KTHREAD, 0x138, ULONG, WaitTime)

C_ASSERT_FIELD(KTHREAD, 0x13C, SHORT, KernelApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x13E, SHORT, SpecialApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x13C, ULONG, CombinedApcDisable)

C_ASSERT_FIELD(KTHREAD, 0x140, LIST_ENTRY, QueueListEntry)

C_ASSERT_FIELD(KTHREAD, 0x148, ULONG, NextProcessor)

C_ASSERT_FIELD(KTHREAD, 0x14C, ULONG, DeferredProcessor)

C_ASSERT_FIELD(KTHREAD, 0x150, PKPROCESS, Process)

C_ASSERT_FIELD(KTHREAD, 0x154, GROUP_AFFINITY, UserAffinity)

C_ASSERT_FIELD(KTHREAD, 0x15A, CHAR, PreviousMode)

C_ASSERT_FIELD(KTHREAD, 0x15B, CHAR, BasePriority)

C_ASSERT_FIELD(KTHREAD, 0x15C, CHAR, PriorityDecrement)

C_ASSERT_FIELD(KTHREAD, 0x15D, UCHAR, Preempted)

C_ASSERT_FIELD(KTHREAD, 0x15E, UCHAR, AdjustReason)

C_ASSERT_FIELD(KTHREAD, 0x15F, CHAR, AdjustIncrement)

C_ASSERT_FIELD(KTHREAD, 0x160, GROUP_AFFINITY, Affinity)

C_ASSERT_FIELD(KTHREAD, 0x166, UCHAR, ApcStateIndex)

C_ASSERT_FIELD(KTHREAD, 0x167, UCHAR, WaitBlockCount)

C_ASSERT_FIELD(KTHREAD, 0x168, ULONG, IdealProcessor)

C_ASSERT_FIELD(KTHREAD, 0x174, KAPC_STATE, SavedApcState)

C_ASSERT_FIELD(KTHREAD, 0x18B, UCHAR, WaitReason)

C_ASSERT_FIELD(KTHREAD, 0x18C, CHAR, SuspendCount)

C_ASSERT_FIELD(KTHREAD, 0x18D, CHAR, Saturation)

C_ASSERT_FIELD(KTHREAD, 0x18E, USHORT, SListFaultCount)

C_ASSERT_FIELD(KTHREAD, 0x190, KAPC, SchedulerApc)

C_ASSERT_FIELD(KTHREAD, 0x191, UCHAR, ResourceIndex)

C_ASSERT_FIELD(KTHREAD, 0x193, UCHAR, QuantumReset)

C_ASSERT_FIELD(KTHREAD, 0x194, ULONG, KernelTime)

C_ASSERT_FIELD(KTHREAD, 0x1B4, PKPRCB, WaitPrcb)

C_ASSERT_FIELD(KTHREAD, 0x1B8, PVOID, LegoData)

C_ASSERT_FIELD(KTHREAD, 0x1BF, UCHAR, CallbackNestingLevel)

C_ASSERT_FIELD(KTHREAD, 0x1C0, ULONG, UserTime)

C_ASSERT_FIELD(KTHREAD, 0x1C4, KEVENT, SuspendEvent)

C_ASSERT_FIELD(KTHREAD, 0x1D4, LIST_ENTRY, ThreadListEntry)

C_ASSERT_FIELD(KTHREAD, 0x1DC, LIST_ENTRY, MutantListHead)


/* KUSER_SHARED_DATA */

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x000, ULONG, TickCountLowDeprecated)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x004, ULONG, TickCountMultiplier)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x008, KSYSTEM_TIME, InterruptTime)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x014, KSYSTEM_TIME, SystemTime)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x020, KSYSTEM_TIME, TimeZoneBias)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x02C, USHORT, ImageNumberLow)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x02E, USHORT, ImageNumberHigh)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x030, WCHAR[260], NtSystemRoot)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x238, ULONG, MaxStackTraceDepth)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x23C, ULONG, CryptoExponent)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x240, ULONG, TimeZoneId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x244, ULONG, LargePageMinimum)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x248, ULONG, AitSamplingValue)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x24C, ULONG, AppCompatFlag)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x250, ULONGLONG, RNGSeedVersion)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x258, ULONG, GlobalValidationRunlevel)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x25C, LONG, TimeZoneBiasStamp)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x260, ULONG, Reserved2)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x264, NT_PRODUCT_TYPE, NtProductType)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x268, BOOLEAN, ProductTypeIsValid)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x269, UCHAR[1], Reserved0)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x26A, USHORT, NativeProcessorArchitecture)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x26C, ULONG, NtMajorVersion)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x270, ULONG, NtMinorVersion)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x274, BOOLEAN[64], ProcessorFeatures)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2B4, ULONG, Reserved1)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2B8, ULONG, Reserved3)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2BC, ULONG, TimeSlip)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C0, ALTERNATIVE_ARCHITECTURE_TYPE, AlternativeArchitecture)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C4, ULONG[1], AltArchitecturePad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2C8, LARGE_INTEGER, SystemExpirationDate)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D0, ULONG, SuiteMask)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D4, BOOLEAN, KdDebuggerEnabled)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D5, UCHAR, MitigationPolicies)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D6, UCHAR[2], Reserved6)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2D8, ULONG, ActiveConsoleId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2DC, ULONG, DismountCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E0, ULONG, ComPlusPackage)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E4, ULONG, LastSystemRITEventTickCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2E8, ULONG, NumberOfPhysicalPages)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2EC, BOOLEAN, SafeBootMode)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2ED, UCHAR[3], Reserved12)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F0, ULONG, SharedDataFlags)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F4, ULONG[1], DataFlagsPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x2F8, ULONGLONG, TestRetInstruction)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x300, LONGLONG, QpcFrequency)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x308, ULONGLONG[3], SystemCallPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, KSYSTEM_TIME, TickCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, ULONGLONG, TickCountQuad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x320, ULONG[3], ReservedTickCountOverlay)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x32C, ULONG[1], TickCountPad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x330, ULONG, Cookie)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x334, ULONG[1], CookiePad)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x338, ULONGLONG, ConsoleSessionForegroundProcessId)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x340, ULONGLONG, TimeUpdateSequence)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x348, ULONGLONG, BaselineSystemTimeQpc)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x350, ULONGLONG, BaselineInterruptTimeQpc)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x358, ULONGLONG, QpcSystemTimeIncrement)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x360, ULONGLONG, QpcInterruptTimeIncrement)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x368, ULONG, QpcSystemTimeIncrement32)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x36C, ULONG, QpcInterruptTimeIncrement32)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x370, UCHAR, QpcSystemTimeIncrementShift)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x371, UCHAR, QpcInterruptTimeIncrementShift)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x372, UCHAR[14], Reserved8)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x380, USHORT[16], UserModeGlobalLogger)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A0, ULONG, ImageFileExecutionOptions)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A4, ULONG, LangGenerationCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3A8, ULONGLONG, Reserved4)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3B0, ULONGLONG, InterruptTimeBias)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3B8, ULONGLONG, QpcBias) // TscQpcBias

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C0, ULONG, ActiveProcessorCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C4, UCHAR, ActiveGroupCount)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C5, UCHAR, Reserved9)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C6, USHORT, QpcData) // TscQpcData

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3C8, LARGE_INTEGER, TimeZoneBiasEffectiveStart)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3D0, LARGE_INTEGER, TimeZoneBiasEffectiveEnd)

C_ASSERT_FIELD(KUSER_SHARED_DATA, 0x3D8, XSTATE_CONFIGURATION, XState)

PreviousMode
_In_ PVOID _In_ ULONG _Out_ PVOID _In_ ULONG _Inout_ PULONG _In_ KPROCESSOR_MODE PreviousMode
Definition: KdSystemDebugControl.c:35

BOOLEAN
unsigned char BOOLEAN
Definition: ProcessorBind.h:185

ServiceTable
static SERVICE_TABLE_ENTRYW ServiceTable[2]
Definition: eventlog.c:24

Reserved2
@ Reserved2
Definition: bcd.h:202

Reserved1
@ Reserved1
Definition: bcd.h:201

Header
Definition: Header.h:9

Timer
Definition: cppunit_timer.h:24

NT_PRODUCT_TYPE
enum _NT_PRODUCT_TYPE NT_PRODUCT_TYPE

Process
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
Definition: fsrtlfuncs.h:223

void
Definition: nsiface.idl:2307

KdDebuggerEnabled
BOOLEAN KdDebuggerEnabled
Definition: kddata.c:82

ULONG64
unsigned __int64 ULONG64
Definition: imports.h:198

Running
@ Running
Definition: ketypes.h:390

ntndk.h

NtSystemRoot
UNICODE_STRING NtSystemRoot
Definition: init.c:76

NtMajorVersion
ULONG NtMajorVersion
Definition: init.c:45

NtMinorVersion
ULONG NtMinorVersion
Definition: init.c:46

ApcState
_Out_ PKAPC_STATE ApcState
Definition: mm.h:1770

SHORT
short SHORT
Definition: pedump.c:59

LONG
long LONG
Definition: pedump.c:60

USHORT
unsigned short USHORT
Definition: pedump.c:61

Reserved3
@ Reserved3
Definition: sacdrv.h:1471

Reserved4
@ Reserved4
Definition: sacdrv.h:1472

State
Definition: stack_allocator.h:18

_DISPATCHER_HEADER
Definition: ketypes.h:740

_GROUP_AFFINITY
Definition: ntbasedef.h:671

_KAPC
Definition: ketypes.h:547

_KEVENT
Definition: ketypes.h:811

_KPRCB
Definition: ketypes.h:649

_KPROCESS
Definition: ketypes.h:2246

_KQUEUE
Definition: ketypes.h:1578

_KSYSTEM_TIME
Definition: ketypes.h:928

_KTHREAD_COUNTERS
Definition: ketypes.h:1184

_KTHREAD
Definition: ketypes.h:1823

_KTIMER
Definition: ketypes.h:851

_KTRAP_FRAME
Definition: ketypes.h:401

_KUSER_SHARED_DATA
Definition: ketypes.h:1271

_KWAIT_BLOCK
Definition: ketypes.h:455

_LIST_ENTRY
Definition: typedefs.h:120

_SINGLE_LIST_ENTRY
Definition: ntbasedef.h:640

_XSTATE_CONFIGURATION
Definition: ketypes.h:1222

_XSTATE_SAVE
Definition: ketypes.h:989

LONGLONG
int64_t LONGLONG
Definition: typedefs.h:68

ULONG
uint32_t ULONG
Definition: typedefs.h:59

ULONGLONG
uint64_t ULONGLONG
Definition: typedefs.h:67

_KWAIT_STATUS_REGISTER
Definition: ketypes.h:1161

_LARGE_INTEGER
Definition: typedefs.h:103

Queue
_Must_inspect_result_ _In_ WDFDEVICE _In_ PIRP _In_ WDFQUEUE Queue
Definition: wdfdevice.h:2225

Priority
_In_ WDFINTERRUPT _In_ WDF_INTERRUPT_POLICY _In_ WDF_INTERRUPT_PRIORITY Priority
Definition: wdfinterrupt.h:655

C_ASSERT_FIELD
#define C_ASSERT_FIELD(Type, Offset, MemberType, MemberName)
Definition: win8_x86.c:10

Cookie
_In_opt_ PVOID _Out_ PLARGE_INTEGER Cookie
Definition: cmfuncs.h:14

Affinity
_In_ ULONG _In_ ULONG _In_ ULONG _Out_ PKIRQL _Out_ PKAFFINITY Affinity
Definition: halfuncs.h:174

UserTime
_Out_ PULONG UserTime
Definition: kefuncs.h:759

KAPC_STATE
KAPC_STATE
Definition: ketypes.h:1572

PXSAVE_FORMAT
* PXSAVE_FORMAT
Definition: ketypes.h:963

ALTERNATIVE_ARCHITECTURE_TYPE
enum _ALTERNATIVE_ARCHITECTURE_TYPE ALTERNATIVE_ARCHITECTURE_TYPE

UCHAR
unsigned char UCHAR
Definition: xmlstorage.h:181

WCHAR
__wchar_t WCHAR
Definition: xmlstorage.h:180

CHAR
char CHAR
Definition: xmlstorage.h:175