26 #ifndef NTOS_MODE_USER 41 #define TABLE_NUMBER_BITS 1 42 #define TABLE_OFFSET_BITS 12 47 #define NUMBER_SERVICE_TABLES 2 48 #define NTOS_SERVICE_INDEX 0 49 #define WIN32K_SERVICE_INDEX 1 62 #define BITS_PER_ENTRY 5 // (1 << 5) = 32 bytes 64 #define BITS_PER_ENTRY 4 // (1 << 4) = 16 bytes 71 #define SERVICE_TABLE_SHIFT (12 - BITS_PER_ENTRY) 78 #define SERVICE_TABLE_MASK (((1 << TABLE_NUMBER_BITS) - 1) << BITS_PER_ENTRY) 83 #define SERVICE_NUMBER_MASK ((1 << TABLE_OFFSET_BITS) - 1) 90 #define SERVICE_TABLE_TEST (WIN32K_SERVICE_INDEX << BITS_PER_ENTRY) 95 #define CONTEXT_DEBUGGER (CONTEXT_FULL | CONTEXT_FLOATING_POINT) 100 #define SSDT_MAX_ENTRIES 2 105 #define PROCESSOR_ARCHITECTURE_INTEL 0 106 #define PROCESSOR_ARCHITECTURE_MIPS 1 107 #define PROCESSOR_ARCHITECTURE_ALPHA 2 108 #define PROCESSOR_ARCHITECTURE_PPC 3 109 #define PROCESSOR_ARCHITECTURE_SHX 4 110 #define PROCESSOR_ARCHITECTURE_ARM 5 111 #define PROCESSOR_ARCHITECTURE_IA64 6 112 #define PROCESSOR_ARCHITECTURE_ALPHA64 7 113 #define PROCESSOR_ARCHITECTURE_MSIL 8 114 #define PROCESSOR_ARCHITECTURE_AMD64 9 115 #define PROCESSOR_ARCHITECTURE_UNKNOWN 0xFFFF 120 #define KOBJECT_TYPE_MASK 0x7F 121 #define KOBJECT_LOCK_BIT 0x80 126 #define THREAD_ALERT_INCREMENT 2 131 #define KI_USER_SHARED_DATA_PHYSICAL 0x41000 136 #define MAX_QUANTUM 0x7F 137 #define WAIT_QUANTUM_DECREMENT 1 138 #define CLOCK_QUANTUM_DECREMENT 3 143 #define KF_V86_VIS 0x00000001 144 #define KF_RDTSC 0x00000002 145 #define KF_CR4 0x00000004 146 #define KF_CMOV 0x00000008 147 #define KF_GLOBAL_PAGE 0x00000010 148 #define KF_LARGE_PAGE 0x00000020 149 #define KF_MTRR 0x00000040 150 #define KF_CMPXCHG8B 0x00000080 151 #define KF_MMX 0x00000100 152 #define KF_WORKING_PTE 0x00000200 153 #define KF_PAT 0x00000400 154 #define KF_FXSR 0x00000800 155 #define KF_FAST_SYSCALL 0x00001000 156 #define KF_XMMI 0x00002000 157 #define KF_3DNOW 0x00004000 158 #define KF_AMDK6MTRR 0x00008000 159 #define KF_XMMI64 0x00010000 160 #define KF_DTS 0x00020000 161 #define KF_BRANCH 0x00020000 // from ksamd64.inc 162 #define KF_SSE3 0x00080000 163 #define KF_CMPXCHG16B 0x00100000 164 #define KF_XSTATE 0x00800000 // from ks386.inc, ksamd64.inc 165 #define KF_NX_BIT 0x20000000 166 #define KF_NX_DISABLED 0x40000000 167 #define KF_NX_ENABLED 0x80000000 169 #define KF_XSAVEOPT_BIT 15 170 #define KF_XSTATE_BIT 23 171 #define KF_RDWRFSGSBASE_BIT 28 176 #define KI_EXCEPTION_INTERNAL 0x10000000 177 #define KI_EXCEPTION_ACCESS_VIOLATION (KI_EXCEPTION_INTERNAL | 0x04) 187 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 200 #ifndef NTOS_MODE_USER 205 #define DISPATCH_LENGTH 4 206 #elif (NTDDI_VERSION >= NTDDI_LONGHORN) 207 #define DISPATCH_LENGTH 135 209 #define DISPATCH_LENGTH 106 212 #else // NTOS_MODE_USER 222 #define SharedUserData ((KUSER_SHARED_DATA *)USER_SHARED_DATA) 228 #define IsNEC_98 (SharedUserData->AlternativeArchitecture == NEC98x86) 232 #define IsNotNEC_98 (SharedUserData->AlternativeArchitecture != NEC98x86) 249 #define IsNEC_98 (FALSE) 253 #define IsNotNEC_98 (TRUE) 269 #define MAX_WOW64_SHARED_ENTRIES 16 274 #define PROCESSOR_FEATURE_MAX 64 407 #if (NTDDI_VERSION >= NTDDI_WINXPSP2) 408 #define NX_SUPPORT_POLICY_ALWAYSOFF 0 409 #define NX_SUPPORT_POLICY_ALWAYSON 1 410 #define NX_SUPPORT_POLICY_OPTIN 2 411 #define NX_SUPPORT_POLICY_OPTOUT 3 414 #endif // NTOS_MODE_USER 429 #if (NTDDI_VERSION >= NTDDI_WS03) 522 #ifdef NTOS_MODE_USER 584 #if (NTDDI_VERSION >= NTDDI_WINXPSP2) 604 #if (NTDDI_VERSION >= NTDDI_WS03) 608 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 610 ULONG HeapTracingPid[2];
611 ULONG CritSecTracingPid[2];
632 #include "pshpack1.h" 633 typedef struct _VdmVirtualIca
646 } VDMVIRTUALICA, *PVDMVIRTUALICA;
649 typedef struct _VdmIcaUserData
652 PVDMVIRTUALICA pIcaMaster;
653 PVDMVIRTUALICA pIcaSlave;
662 } VDMICAUSERDATA, *PVDMICAUSERDATA;
664 typedef struct _VDM_INITIALIZE_DATA
667 PVDMICAUSERDATA IcaUserData;
668 } VDM_INITIALIZE_DATA, *PVDM_INITIALIZE_DATA;
715 #if (NTDDI_VERSION >= NTDDI_LONGHORN) || defined(_M_ARM) || defined(_M_AMD64) 789 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 795 #if defined(_M_AMD64) || defined(_M_ARM) 801 #if (NTDDI_VERSION >= NTDDI_LONGHORN) || defined(_M_ARM) 879 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 896 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 901 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 936 #if (NTDDI_VERSION >= NTDDI_WIN7) 973 #if (NTDDI_VERSION >= NTDDI_WIN8) 981 #if (NTDDI_VERSION >= NTDDI_WINBLUE) 988 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 6.4.9841.0 1019 #if (NTDDI_VERSION >= NTDDI_WIN10) 1067 volatile UCHAR HeadNodeByte;
1080 #if (NTDDI_VERSION >= NTDDI_WIN10) 1083 volatile UCHAR WaitingAndBusyByte;
1142 #if (NTDDI_VERSION < NTDDI_WIN8) 1147 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1160 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1168 ULONG KernelStackResident:1;
1174 ULONG GdiFlushActive:1;
1192 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1194 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1214 #if !defined(_M_AMD64) && !defined(_M_ARM64) // [ 1222 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1230 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1235 ULONG KernelStackResident:1;
1241 ULONG GdiFlushActive:1;
1251 #if (NTDDI_VERSION < NTDDI_LONGHORN) 1255 volatile UCHAR SwapBusy;
1264 #if !defined(_M_AMD64) && !defined(_M_ARM64) // [ 1278 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1287 #if !defined(_WIN64) // [ 1298 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1299 ULONG EtwStackTraceApc1Inserted:1;
1300 ULONG EtwStackTraceApc2Inserted:1;
1301 ULONG CycleChargePending:1;
1306 ULONG ReservedFlags:23;
1308 LONG ReservedFlags:30;
1313 #if defined(_WIN64) && (NTDDI_VERSION < NTDDI_WIN7) // [ 1317 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1318 #if defined(_WIN64) // [ 1327 #if (NTDDI_VERSION < NTDDI_WIN7) // [ 1331 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1332 UCHAR IdealProcessor;
1345 UCHAR ResourceIndex;
1357 ULONG ContextSwitches;
1372 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1375 UCHAR WaitBlockFill7[168];
1376 PVOID TebMappedLowVa;
1377 struct _UMS_CONTROL_BLOCK* Ucb;
1382 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1383 UCHAR WaitBlockFill8[188];
1391 SHORT KernelApcDisable;
1392 SHORT SpecialApcDisable;
1394 ULONG CombinedApcDisable;
1401 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1402 PVOID FirstArgument;
1405 PVOID CallbackStack;
1409 PVOID CallbackStack;
1411 #if (NTDDI_VERSION < NTDDI_LONGHORN) || ((NTDDI_VERSION < NTDDI_WIN7) && !defined(_WIN64)) // [ 1414 #if (NTDDI_VERSION < NTDDI_LONGHORN) && defined(_WIN64) // [ 1417 UCHAR ApcStateIndex;
1418 #if (NTDDI_VERSION < NTDDI_LONGHORN) // [ 1419 UCHAR IdealProcessor;
1429 SCHAR PriorityDecrement;
1430 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1433 CHAR AdjustIncrement;
1434 #if (NTDDI_VERSION >= NTDDI_WIN7) 1441 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1442 ULONG SystemCallNumber;
1443 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1449 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1453 ULONG IdealProcessor;
1454 ULONG UserIdealProcessor;
1467 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1477 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1480 UCHAR UserIdealProcessor;
1482 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1483 #elif (NTDDI_VERSION >= NTDDI_LONGHORN) // ][ 1486 UCHAR CalloutActive;
1489 UCHAR CodePatchInProgress;
1493 #if defined(_M_IX86) // [ 1494 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1495 UCHAR OtherPlatformFill;
1507 UCHAR SuspendApcFill0[1];
1508 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1509 UCHAR ResourceIndex;
1510 #elif (NTDDI_VERSION >= NTDDI_LONGHORN) // ][ 1518 UCHAR SuspendApcFill1[3];
1523 UCHAR SuspendApcFill2[4];
1529 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 1543 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1563 ULONG SListFaultCount;
1568 ULONG SListFaultCount;
1571 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 1574 PVOID SListFaultAddress;
1575 #ifdef _M_AMD64 // [ 1576 LONG64 ReadOperationCount;
1577 LONG64 WriteOperationCount;
1578 LONG64 OtherOperationCount;
1579 LONG64 ReadTransferCount;
1580 LONG64 WriteTransferCount;
1581 LONG64 OtherTransferCount;
1583 #if (NTDDI_VERSION >= NTDDI_WIN7) // [ 1586 #elif (NTDDI_VERSION >= NTDDI_LONGHORN) // ][ 1587 PVOID MdlForLockedTeb;
1591 #else // not (NTDDI_VERSION < NTDDI_WIN8) 1593 #if defined(_WIN64) && (NTDDI_VERSION < 0x06032580) // since WIN 8.1 Update1 6.3.9600.16384 1594 #define NUMBER_OF_LOCK_ENTRIES 5 1596 #define NUMBER_OF_LOCK_ENTRIES 6 1626 #if (NTDDI_VERSION < NTDDI_WIN10) 1627 ULONG KernelStackResident : 1;
1632 #if (NTDDI_VERSION < NTDDI_WIN10TH2) 1639 #if (NTDDI_VERSION < NTDDI_WIN81) 1640 ULONG CodePatchInProgress : 1;
1678 #if (NTDDI_VERSION >= 0x060324D7) // since 6.3.9431.0 1679 ULONG TerminationApcRequest : 1;
1681 #if (NTDDI_VERSION >= 0x06032580) // since 6.3.9600.16384 1682 ULONG AutoBoostEntriesExhausted : 1;
1684 #if (NTDDI_VERSION >= 0x06032580) // since 6.3.9600.17031 1685 ULONG KernelStackResident : 1;
1687 #if (NTDDI_VERSION >= NTDDI_WIN10) 1693 #if (NTDDI_VERSION < NTDDI_WIN10) 1694 ULONG ReservedFlags : 10;
1700 #if (NTDDI_VERSION >= NTDDI_WIN10) 1730 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 10.0.10074.0 1748 #if (NTDDI_VERSION >= NTDDI_WIN8 ) // since 6.2.9200.16384 1766 #if (NTDDI_VERSION >= NTDDI_WIN10) 1812 struct _UMS_CONTROL_BLOCK* Ucb;
1813 struct _KUMS_CONTEXT_HEADER* Uch;
1830 PVOID TebMappedLowVa;
1833 #if (NTDDI_VERSION >= 0x060223F0) // since 6.2.9200.16384 1839 ULONG NextProcessorNumber : 31;
1840 ULONG SharedReadyQueue : 1;
1873 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 10.0.10240.16384 1888 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 10.0.10240.16384 1951 #if (NTDDI_VERSION >= NTDDI_WIN10) 1956 ULONG SecureThreadCookie;
1958 #elif (NTDDI_VERSION >= NTDDI_WINBLUE) // 6.3.9431.0 1962 #if (NTDDI_VERSION >= NTDDI_WINBLUE ) // since 6.3.9600.16384 1969 #if (NTDDI_VERSION >= NTDDI_WIN10_RS1) 1973 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 10.0.10240.16384 1976 volatile SHORT AbReferenceCount;
1978 #if (NTDDI_VERSION >= 0x06040000) // since 6.4.9841.0 1979 UCHAR AbOrphanedEntrySummary;
1980 UCHAR AbOwnedEntryCount;
1998 LONG64 ReadOperationCount;
1999 LONG64 WriteOperationCount;
2000 LONG64 OtherOperationCount;
2001 LONG64 ReadTransferCount;
2002 LONG64 WriteTransferCount;
2003 LONG64 OtherTransferCount;
2005 #if (NTDDI_VERSION >= NTDDI_WIN10) // since 10.0.10041.0 2016 #define ASSERT_THREAD(object) \ 2017 ASSERT((((object)->Header.Type & KOBJECT_TYPE_MASK) == ThreadObject)) 2026 #if (NTDDI_VERSION >= NTDDI_LONGHORN) 2032 #if defined(_M_IX86) 2037 #if defined(_M_IX86) 2075 #if (NTDDI_VERSION >= NTDDI_LONGHORN) // [ 2080 #define ASSERT_PROCESS(object) \ 2081 ASSERT((((object)->Header.Type & KOBJECT_TYPE_MASK) == ProcessObject)) 2092 LONG TableBaseGpOffset;
2097 #if (NTDDI_VERSION >= NTDDI_WIN8) 2113 #define KENTROPY_TIMING_INTERRUPTS_PER_BUFFER 0x400 2114 #define KENTROPY_TIMING_BUFFER_MASK 0x7ff 2115 #define KENTROPY_TIMING_ANALYSIS 0x0 2141 #endif // !NTOS_MODE_USER 2143 #endif // _KETYPES_H
UCHAR SuspendApcFill3[FIELD_OFFSET(KAPC, SystemArgument1)]
struct _KTIMER_TABLE KTIMER_TABLE
LONG AbCompletedIoQoSBoostCount
_Must_inspect_result_ typedef _In_ PVOID Unused
ULONG ExAcqResSharedWaitForExclusiveAttempts
enum _KPROCESS_STATE * PKPROCESS_STATE
USHORT UserModeGlobalLogger[16]
ULONG EtwStackTraceApcInserted
struct _KENTROPY_TIMING_STATE KENTROPY_TIMING_STATE
ULONG ExTryToAcqExclusiveAttempts
struct _KDPC_DATA KDPC_DATA
enum _KAPC_ENVIRONMENT KAPC_ENVIRONMENT
ULONG LastDeliveredBuffer
_ALTERNATIVE_ARCHITECTURE_TYPE
volatile LONG AbCompletedIoBoostCount
KTIMER_TABLE_ENTRY TimerEntries[256]
ULONG_PTR DirectoryTableBase
USHORT IoNormalPriorityWaiterCount
struct _EXCEPTION_REGISTRATION_RECORD * ExceptionList
_In_ ULONG _In_opt_ POBJECT_ATTRIBUTES _In_opt_ HANDLE _Out_opt_ PCLIENT_ID _In_ PKSTART_ROUTINE StartRoutine
SINGLE_LIST_ENTRY * LastEntry
ULONG ExSetResOwnerPointerExclusive
LARGE_INTEGER SystemExpirationDate
ULONG UserStackWalkActive
ULONG ExSetResOwnerPointerSharedOld
ULONG ExAcqResExclusiveAttempts
UCHAR SchedulerApcFill2[FIELD_OFFSET(KAPC, SpareLong0)]
struct _KTHREAD_COUNTERS * ThreadCounters
UCHAR SchedulerApcFill5[FIELD_OFFSET(KAPC, Inserted)+1]
ULONG ProcessDetachActive
PKSERVICE_ROUTINE MessageServiceRoutine
struct _KTIMER_TABLE_ENTRY * PKTIMER_TABLE_ENTRY
LONGLONG ConsoleSessionForegroundProcessId
ULONG CommitFailTerminateRequest
union _KWAIT_STATUS_REGISTER KWAIT_STATUS_REGISTER
ULONGLONG TestRetInstruction
_In_ ULONG _In_ ULONG State
enum _KCONTINUE_STATUS KCONTINUE_STATUS
struct _KUSER_SHARED_DATA * PKUSER_SHARED_DATA
ULONG UmsPerformingSyscall
struct _KDPC_LIST KDPC_LIST
BOOLEAN Alerted[MaximumMode]
_In_ LARGE_INTEGER _In_ ULONG Period
struct _KEXECUTE_OPTIONS KEXECUTE_OPTIONS
ULONG ExEtwSynchTrackingNotificationsCount
ULONG IpiSendRequestBroadcastCount
ULONG ExAcqResSharedAttempts
PKWAIT_BLOCK WaitBlockList
#define NUMBER_OF_LOCK_ENTRIES
struct _KEVENT_PAIR * PKEVENT_PAIR
struct _KEVENT_PAIR KEVENT_PAIR
ULONG NTSYSAPI KiDmaIoCoherency
struct _SINGLE_LIST_ENTRY * PfnDeferredList
KLOCK_ENTRY_LOCK_STATE LockState
ULONG NTSYSAPI KeIcacheFlushCount
volatile KSYSTEM_TIME InterruptTime
ULONG ExAcqResExclusiveAcquiresExclusiveRecursive
ULONG ExAcqResSharedStarveExclusiveAttempts
ULONG ExAcqResSharedStarveExclusiveWaits
struct _SYNCH_COUNTERS SYNCH_COUNTERS
FIXME: should move to rtltypes.h, but we can't include it here.
SINGLE_LIST_ENTRY FreeListEntry
ULONG ExAcqResSharedWaits
ULONG UmsDirectedSwitchEnable
ULONG ExAcqResSharedStarveExclusiveAcquiresExclusive
struct _KDPC_DATA * PKDPC_DATA
enum _KPROCESS_STATE KPROCESS_STATE
volatile ULONG HighCycleTime
KSERVICE_ROUTINE * PKSERVICE_ROUTINE
ULONG ExplicitIdealProcessor
ULONG ExAcqResSharedAcquiresExclusive
SLIST_HEADER DeadStackList
BOOLEAN NTSYSAPI KiEnableTimerWatchdog
struct _RTL_RB_TREE * PRTL_RB_TREE
struct _COUNTER_READING * PCOUNTER_READING
struct _KPROCESS * Process
ULONG ExecutiveResourceReleaseSharedCount
UCHAR PriorityFloorCounts[16]
ULONG ExBoostSharedOwners
RTL_BALANCED_NODE TreeNode
VOID(NTAPI * PKSYSTEM_ROUTINE)(PKSTART_ROUTINE StartRoutine, PVOID StartContext)
struct _GETSETCONTEXT GETSETCONTEXT
SINGLE_LIST_ENTRY ForegroundDpcStackListEntry
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
UCHAR CallbackNestingLevel
ULONG ImageFileExecutionOptions
KSTART_ROUTINE * PKSTART_ROUTINE
volatile KSYSTEM_TIME SystemTime
ULONG ExAcqResSharedWaitForExclusiveAcquiresShared
ULONG ExAcqResSharedStarveExclusiveAcquiresShared
ULONG ExAcqResSharedStarveExclusiveNotAcquires
ULONG ExAcqResSharedNotAcquires
ULONG ExSetResOwnerPointerSharedNew
NT_PRODUCT_TYPE NtProductType
UCHAR SystemHeteroCpuPolicy
ULONG SystemAffinityActive
struct _KTHREAD_COUNTERS * PKTHREAD_COUNTERS
BOOLEAN KdDebuggerEnabled
ULONG ExAcqResSharedAcquiresShared
ULONG TickCountMultiplier
ULONG ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive
UCHAR ImageDispatchEnable
volatile UCHAR CrossThreadReleasableAndBusyByte
UCHAR UserHeteroCpuPolicy
ULONG ApcInterruptRequest
LIST_ENTRY ProfileListEntry
enum _KPROFILE_SOURCE KPROFILE_SOURCE
enum _KINTERRUPT_MODE KINTERRUPT_MODE
ULONG TickCountLowDeprecated
SINGLE_LIST_ENTRY ListHead
enum _VDMSERVICECLASS VDMSERVICECLASS
struct _KLOCK_ENTRY_LOCK_STATE * PKLOCK_ENTRY_LOCK_STATE
LIST_ENTRY QueueListEntry
LIST_ENTRY ProcessListEntry
_Reserved_ PVOID Reserved
VOID(NTAPI * PKKERNEL_ROUTINE)(IN struct _KAPC *Apc, IN OUT PKNORMAL_ROUTINE *NormalRoutine OPTIONAL, IN OUT PVOID *NormalContext OPTIONAL, IN OUT PVOID *SystemArgument1 OPTIONAL, IN OUT PVOID *SystemArgument2 OPTIONAL)
UCHAR WaitBlockFill10[2 *sizeof(KWAIT_BLOCK)+FIELD_OFFSET(KWAIT_BLOCK, SparePtr)]
struct DECLSPEC_ALIGN(16) _M128A
LIST_ENTRY ThreadListHead
enum _KTHREAD_STATE KTHREAD_STATE
UCHAR DisableThunkEmulation
struct _KSYSTEM_TIME KSYSTEM_TIME
struct _LOADER_PARAMETER_BLOCK NTSYSAPI * KeLoaderBlock
#define MAX_WOW64_SHARED_ENTRIES
struct _KSYSTEM_TIME * PKSYSTEM_TIME
ULONG ExecutiveResourceAcquiresCount
enum _EVENT_TYPE EVENT_TYPE
ULONG ExDeleteResourceCount
union _KWAIT_STATUS_REGISTER * PKWAIT_STATUS_REGISTER
UCHAR ExplicitSystemHeteroCpuPolicy
struct _KNODE::_flags Flags
struct _KLOCK_ENTRY_LOCK_STATE KLOCK_ENTRY_LOCK_STATE
volatile KSYSTEM_TIME TickCount
VOID(NTAPI * PKINTERRUPT_ROUTINE)(VOID)
_In_opt_ PVOID _In_opt_ PVOID SystemArgument1
SINGLE_LIST_ENTRY PropagateBoostsEntry
LIST_ENTRY InterruptListEntry
volatile INT_PTR WaitStatus
struct _KPROCESS KPROCESS
_In_ KPROCESSOR_MODE PreviousMode
VOID(NTAPI * PTIMER_APC_ROUTINE)(_In_ PVOID TimerContext, _In_ ULONG TimerLowValue, _In_ LONG TimerHighValue)
ULONG NTSYSAPI KeMaximumIncrement
struct _KLOCK_ENTRY KLOCK_ENTRY
VOID(NTAPI * PKRUNDOWN_ROUTINE)(IN struct _KAPC *Apc)
struct _THREAD_PERFORMANCE_DATA * UserData
#define PROCESSOR_FEATURE_MAX
ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture
SINGLE_LIST_ENTRY SwapListEntry
ULONG ExAcqResExclusiveNotAcquires
SINGLE_LIST_ENTRY SwapListEntry
struct _KUSER_SHARED_DATA KUSER_SHARED_DATA
ULONG DbgElevationEnabled
volatile VOID * StackLimit
_In_ ULONG _In_ ULONG _In_ ULONG _Out_ PKIRQL _Out_ PKAFFINITY Affinity
enum _WAIT_TYPE WAIT_TYPE
struct _RTL_RB_TREE RTL_RB_TREE
FIXME: should move to rtltypes.h, but we can't include it here.
SINGLE_LIST_ENTRY IoSelfBoostsEntry
KINTERRUPT_POLARITY Polarity
#define RTL_SIZEOF_THROUGH_FIELD(type, field)
UCHAR WaitBlockFill8[FIELD_OFFSET(KWAIT_BLOCK, SparePtr)]
ULONG ExReInitializeResourceCount
struct _KSCHEDULING_GROUP * SchedulingGroup
struct _PP_LOOKASIDE_LIST * PPP_LOOKASIDE_LIST
UCHAR AffinityFill[FIELD_OFFSET(GROUP_AFFINITY, Reserved)]
struct _GENERAL_LOOKASIDE * L
ULONG GuaranteedStackBytes
ULONG NumberOfPhysicalPages
enum _KINTERRUPT_POLARITY KINTERRUPT_POLARITY
enum _TIMER_TYPE TIMER_TYPE
struct _KTHREAD_COUNTERS KTHREAD_COUNTERS
ULONG ExBoostExclusiveOwner
enum _NT_PRODUCT_TYPE * PNT_PRODUCT_TYPE
COUNTER_READING HwCounter[16]
PKSERVICE_ROUTINE ServiceRoutine
ULONG ExecutiveResourceConvertsCount
ULONG64 RelativeTimerBias
ULONG ExecutiveResourceContentionsCount
ULONG ExAcqResSharedWaitForExclusiveAcquiresExclusive
ULONG_PTR InGlobalForegroundList
UCHAR SchedulerApcFill4[FIELD_OFFSET(KAPC, SystemArgument2)]
struct _GETSETCONTEXT * PGETSETCONTEXT
UCHAR ApcStateFill[RTL_SIZEOF_THROUGH_FIELD(KAPC_STATE, UserApcPending)]
volatile ULONG ActiveConsoleId
volatile KSYSTEM_TIME TimeZoneBias
ULONG ExAcqResSharedAcquiresSharedRecursive
_Must_inspect_result_ _In_ WDFCOLLECTION _In_ WDFOBJECT Object
ULONG IpiSendRequestRoutineCount
ULONG PriorityFloorSummary
ULONG ExAcqResSharedStarveExclusiveAcquiresSharedRecursive
struct _KTIMER_TABLE * PKTIMER_TABLE
_In_opt_ PVOID _In_opt_ PVOID _In_opt_ PVOID SystemArgument2
ULONG ExAcqResExclusiveAcquiresExclusive
ULONG DispatchCode[DISPATCH_LENGTH]
UCHAR SavedApcStateFill[FIELD_OFFSET(KAPC_STATE, UserApcPending)+1]
ULONG NTSYSAPI KeMinimumIncrement
ULONG QueueDeferPreemption
volatile ULONG DpcQueueDepth
ULONG ExTryToAcqExclusiveAcquires
ULONG DbgInstallerDetectEnabled
KLOCK_ENTRY LockEntries[NUMBER_OF_LOCK_ENTRIES]
ULONG SpinLockContentionCount
UCHAR SchedulerApcFill1[FIELD_OFFSET(KAPC, SpareByte1)]
struct _GENERAL_LOOKASIDE * P
struct _SYNCH_COUNTERS * PSYNCH_COUNTERS
volatile ULONG64 TickCountQuad
_Must_inspect_result_ _In_ PWDFDEVICE_INIT _In_ WDF_DEVICE_POWER_STATE PowerState
ULONG ExAcqResExclusiveWaits
enum _ALTERNATIVE_ARCHITECTURE_TYPE ALTERNATIVE_ARCHITECTURE_TYPE
struct _KPROFILE * PKPROFILE
volatile KAFFINITY ActiveProcessors
volatile ULONG64 CycleTime
#define FIELD_OFFSET(t, f)
LIST_ENTRY ProfileListHead
ULONG SpinLockAcquireCount
ULONGLONG SystemCallPad[3]
ULONG ExInitializeResourceCount
UCHAR SchedulerApcFill0[FIELD_OFFSET(KAPC, SpareByte0)]
LIST_ENTRY ThreadListEntry
ULONG LastSystemRITEventTickCount
enum _NT_PRODUCT_TYPE NT_PRODUCT_TYPE
enum _KTHREAD_STATE * PKTHREAD_STATE
struct _KSERVICE_TABLE_DESCRIPTOR KSERVICE_TABLE_DESCRIPTOR
struct _KENTROPY_TIMING_STATE * PKENTROPY_TIMING_STATE
struct _COUNTER_READING COUNTER_READING
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
ULONG_PTR CrossThreadReleasable
enum _KWAIT_REASON KWAIT_REASON
LIST_ENTRY GlobalForegroundListEntry
UCHAR UserAffinityFill[FIELD_OFFSET(GROUP_AFFINITY, Reserved)]
XSAVE_FORMAT * StateSaveArea
KSERVICE_TABLE_DESCRIPTOR NTSYSAPI KeServiceDescriptorTable[SSDT_MAX_ENTRIES]
struct _KINTERRUPT KINTERRUPT
ULONG NTSYSAPI KeDcacheFlushCount
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID TimerContext
struct _KEXECUTE_OPTIONS * PKEXECUTE_OPTIONS
ULONG IpiSendSoftwareInterruptCount
SLIST_HEADER PfnDereferenceSListHead
struct _KDPC_LIST * PKDPC_LIST
struct _KWAIT_BLOCK KWAIT_BLOCK
VOID(NTAPI * PKNORMAL_ROUTINE)(IN PVOID NormalContext OPTIONAL, IN PVOID SystemArgument1 OPTIONAL, IN PVOID SystemArgument2 OPTIONAL)
ULONG ExAcqResSharedWaitForExclusiveWaits
enum _KPROFILE_SOURCE KPROFILE_SOURCE
enum _HARDWARE_COUNTER_TYPE Type
UCHAR WaitBlockFill9[1 *sizeof(KWAIT_BLOCK)+FIELD_OFFSET(KWAIT_BLOCK, SparePtr)]
PKINTERRUPT_ROUTINE DispatchAddress
UCHAR ExecuteDispatchEnable
ULONG DbgErrorPortPresent
enum _ADJUST_REASON ADJUST_REASON
struct _KPROFILE KPROFILE
ULONG_PTR AffinityVersion
struct _KTIMER_TABLE_ENTRY KTIMER_TABLE_ENTRY
GROUP_AFFINITY UserAffinity
struct _KLOCK_ENTRY * PKLOCK_ENTRY
ULONG_PTR NTSYSAPI KiBugCheckData[]
_In_ LONG _In_ LONG Limit
KWAIT_STATUS_REGISTER WaitRegister
ULONG ProcessStackCountDecremented
SERVICE_TABLE_ENTRYW ServiceTable[]
ULONG ExAcqResSharedWaitForExclusiveNotAcquires
ULONG ExecutiveResourceReleaseExclusiveCount
struct _ACTIVATION_CONTEXT_STACK * ActivationContextStackPointer
#define THREAD_WAIT_OBJECTS
BOOLEAN ProcessorFeatures[PROCESSOR_FEATURE_MAX]
struct _KSERVICE_TABLE_DESCRIPTOR * PKSERVICE_TABLE_DESCRIPTOR
volatile SHORT KeReferenceCount
LIST_ENTRY MutantListHead
UCHAR WaitBlockFill11[3 *sizeof(KWAIT_BLOCK)+FIELD_OFFSET(KWAIT_BLOCK, Object)]
ULONG ExEtwSynchTrackingNotificationsAccountedCount
volatile ULONG DismountCount
BOOLEAN ProductTypeIsValid
ULONG Wow64SharedInformation[MAX_WOW64_SHARED_ENTRIES]
struct _PP_LOOKASIDE_LIST PP_LOOKASIDE_LIST
KSERVICE_TABLE_DESCRIPTOR NTSYSAPI KeServiceDescriptorTableShadow[SSDT_MAX_ENTRIES]