-
-
Save 7etsuo/87fff8795270fc0a123f94df2dc4647c to your computer and use it in GitHub Desktop.
r0
This file has been truncated, but you can view the full file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} | |
struct _WMI_FLTIO_NOTIFY_ROUTINES{ TimeStampRoutine* TimeStampRoutine; FailureNotifyRoutine* FailureNotifyRoutine; InitiationNotifyRoutine* InitiationNotifyRoutine; CompletionNotifyRoutine* CompletionNotifyRoutine; FastCompletionNotifyRoutine* FastCompletionNotifyRoutine; IoRedirectionNotifyRoutine* IoRedirectionNotifyRoutine; } | |
TimeStampRoutine TimeStampRoutine,void* TimeStampRoutine( _ETW_KERNEL_TRACE_TIMESTAMP* unsigned ) | |
FailureNotifyRoutine FailureNotifyRoutine,void* FailureNotifyRoutine( void* unsigned, int , uint ) | |
InitiationNotifyRoutine InitiationNotifyRoutine,void* InitiationNotifyRoutine( _IRP* ) | |
CompletionNotifyRoutine CompletionNotifyRoutine,void CompletionNotifyRoutine( uint , uint* , _IRP* ) | |
FastCompletionNotifyRoutine FastCompletionNotifyRoutine,void* FastCompletionNotifyRoutine( void* unsigned, int , uint , uint16* , _ETW_KERNEL_TRACE_TIMESTAMP* ) | |
IoRedirectionNotifyRoutine IoRedirectionNotifyRoutine,void* IoRedirectionNotifyRoutine( _IRP** _FILE_OBJECT ) | |
$0D5D251ED7BB211D541240C8DF525F70, | |
struct _WMI_FLTIO_NOTIFY_ROUTINES{ TimeStampRoutine* TimeStampRoutine; FailureNotifyRoutine* FailureNotifyRoutine; InitiationNotifyRoutine* InitiationNotifyRoutine; CompletionNotifyRoutine* CompletionNotifyRoutine; FastCompletionNotifyRoutine* FastCompletionNotifyRoutine; IoRedirectionNotifyRoutine* IoRedirectionNotifyRoutine; } | |
typedef $94554CE5BAF2B0A5015EC9592005A800 $0D5D251ED7BB211D541240C8DF525F70 ; | |
$0D5D251ED7BB211D541240C8DF525F70 | |
typedef $94554CE5BAF2B0A5015EC9592005A800 $0D5D251ED7BB211D541240C8DF525F70 ; | |
ENTRY( UID($94554CE5BAF2B0A5015EC9592005A800,"$94554CE5BAF2B0A5015EC9592005A800") , P(NONE), .varType = $Typedef,{ .Typedef = { (member){ ID($0D5D251ED7BB211D541240C8DF525F70), &allTypes[ID($0D5D251ED7BB211D541240C8DF525F70)], .named = "", P(NONE) } } }), | |
MaxCount uint | |
DeviceList _DEVICE_RELATIONS | |
struct _PDO_DEVICE_LIST_ENUM_CONTEXT{ uint MaxCount; _DEVICE_RELATIONS* DeviceList; } | |
_KRESOURCEMANAGER_COMPLETION_BINDING | |
typedef PKRESOURCEMANAGER_COMPLETION_BINDING* _KRESOURCEMANAGER_COMPLETION_BINDING ; | |
char | |
union __m256i{ char [16]; } | |
struct _PEB{ uint8 InheritedAddressSpace; uint8 ReadImageFileExecOptions; uint8 BeingDebugged; $48836EB32FB81E2B39F3268EB62EB772 ___u3; void* Mutant; void* ImageBaseAddress; _PEB_LDR_DATA* Ldr; _RTL_USER_PROCESS_PARAMETERS* ProcessParameters; void* SubSystemData; void* ProcessHeap; _RTL_CRITICAL_SECTION* FastPebLock; _SLIST_HEADER* AtlThunkSListPtr; void* IFEOKey; $F46366362C4FF4357F3524B73CADD001 ___u13; $6F1CA9A36B21C857AE5467E073440320 ___u14; uint SystemReserved [2]; } | |
struct _MI_SYSTEM_INFORMATION{ _MI_POOL_STATE Pools; _MI_SECTION_STATE Sections; _MI_SYSTEM_IMAGE_STATE SystemImages; _MI_SESSION_STATE Sessions; _MI_PROCESS_STATE Processes; _MI_HARDWARE_STATE Hardware; _MI_SYSTEM_VA_STATE SystemVa; _MI_COMBINE_STATE PageCombines; _MI_PAGELIST_STATE PageLists; _MI_PARTITION_STATE Partitions; _MI_SHUTDOWN_STATE Shutdowns; _MI_ERROR_STATE Errors; _MI_ACCESS_LOG_STATE AccessLog; _MI_DEBUGGER_STATE Debugger; _MI_STANDBY_STATE Standby; _MI_SYSTEM_PTE_STATE SystemPtes; _MI_IO_PAGE_STATE IoPages; _MI_PAGING_IO_STATE PagingIo; _MI_COMMON_PAGE_STATE CommonPages; _MI_SYSTEM_TRIM_STATE Trims; _MI_RESAVAIL_TRACKER ResTrack; uint Cookie; int ZeroingDisabled; void** BootRegistryRuns; uint8 FullyInitialized; uint8 SafeBooted; uint8 LargePfnBitMapsReady; _RTL_BITMAP LargePfnBitMap [1]; } | |
struct ACPI_INTERFACE_STANDARD2{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
} | |
struct ACPI_REGS_INTERFACE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
ReadAcpiRegister* ReadAcpiRegister; | |
WriteAcpiRegister* WriteAcpiRegister; | |
} | |
struct ALLOCATED_NSN{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} Entry; | |
struct _VRP_NAMESPACE_NODE{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Path; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} TargetKeyPath; | |
uint Flags; | |
}* Key; | |
} | |
struct ANON_OBJECT_HEADER{ | |
uint16 Sig1; | |
uint16 Sig2; | |
uint16 Version; | |
uint16 Machine; | |
uint TimeDateStamp; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ClassID; | |
uint SizeOfData; | |
} | |
struct ANON_OBJECT_HEADER_BIGOBJ{ | |
uint16 Sig1; | |
uint16 Sig2; | |
uint16 Version; | |
uint16 Machine; | |
uint TimeDateStamp; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ClassID; | |
uint SizeOfData; | |
uint Flags; | |
uint MetaDataSize; | |
uint MetaDataOffset; | |
uint NumberOfSections; | |
uint PointerToSymbolTable; | |
uint NumberOfSymbols; | |
} | |
struct ANON_OBJECT_HEADER_V2{ | |
uint16 Sig1; | |
uint16 Sig2; | |
uint16 Version; | |
uint16 Machine; | |
uint TimeDateStamp; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ClassID; | |
uint SizeOfData; | |
uint Flags; | |
uint MetaDataSize; | |
uint MetaDataOffset; | |
} | |
struct ARRAY_INFO{ | |
int Dimension; | |
uint* BufferConformanceMark; | |
uint* BufferVarianceMark; | |
uint* MaxCountArray; | |
uint* OffsetArray; | |
uint* ActualCountArray; | |
} | |
struct BATTERY_REPORTING_SCALE{ | |
uint Granularity; | |
uint Capacity; | |
} | |
struct BCD_OBJECT_KEY_NAME{ | |
struct _KEY_NAME_INFORMATION{ | |
uint NameLength; | |
wchar_t Name; | |
} NameInfo; | |
wchar_t Buffer; | |
} | |
struct BEST_DOCK_TO_EJECT{ | |
uint Depth; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* PhysicalDeviceObject; | |
} | |
struct BITMAPV4HEADER{ | |
uint bV4Size; | |
int bV4Width; | |
int bV4Height; | |
uint16 bV4Planes; | |
uint16 bV4BitCount; | |
uint bV4V4Compression; | |
uint bV4SizeImage; | |
int bV4XPelsPerMeter; | |
int bV4YPelsPerMeter; | |
uint bV4ClrUsed; | |
uint bV4ClrImportant; | |
uint bV4RedMask; | |
uint bV4GreenMask; | |
uint bV4BlueMask; | |
uint bV4AlphaMask; | |
uint bV4CSType; | |
struct tagICEXYZTRIPLE{ | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzRed; | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzGreen; | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzBlue; | |
} bV4Endpoints; | |
uint bV4GammaRed; | |
uint bV4GammaGreen; | |
uint bV4GammaBlue; | |
} | |
struct BITMAPV5HEADER{ | |
uint bV5Size; | |
int bV5Width; | |
int bV5Height; | |
uint16 bV5Planes; | |
uint16 bV5BitCount; | |
uint bV5Compression; | |
uint bV5SizeImage; | |
int bV5XPelsPerMeter; | |
int bV5YPelsPerMeter; | |
uint bV5ClrUsed; | |
uint bV5ClrImportant; | |
uint bV5RedMask; | |
uint bV5GreenMask; | |
uint bV5BlueMask; | |
uint bV5AlphaMask; | |
uint bV5CSType; | |
struct tagICEXYZTRIPLE{ | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzRed; | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzGreen; | |
struct tagCIEXYZ{ | |
int ciexyzX; | |
int ciexyzY; | |
int ciexyzZ; | |
} ciexyzBlue; | |
} bV5Endpoints; | |
uint bV5GammaRed; | |
uint bV5GammaGreen; | |
uint bV5GammaBlue; | |
uint bV5Intent; | |
uint bV5ProfileData; | |
uint bV5ProfileSize; | |
uint bV5Reserved; | |
} | |
struct BREAK_ON_STATUS_BUFFER{ | |
int NtStatus; | |
uint Win32Error; | |
uint ThreadId; | |
uint ProcessId; | |
char ImageFileName; | |
} | |
struct BSD_BOOT_STATUS_DATA{ | |
uint Version; | |
_NT_PRODUCT_TYPE ProductType; | |
uint8 AutoAdvancedBoot; | |
uint8 AdvancedBootMenuTimeout; | |
uint8 LastBootSucceeded; | |
uint8 LastBootShutdown; | |
uint8 SleepInProgress; | |
struct _BSD_POWER_TRANSITION{ | |
int64 PowerButtonTimestamp; | |
uint8 SystemRunning; | |
uint8 SleepInProgress; | |
uint8 ConnectedStandbyInProgress; | |
uint8 CsEntryScenarioInstanceId; | |
uint SystemSleepTransitionsToOn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} LastReferenceTime; | |
uint LastReferenceTimeCheckSum; | |
} PowerTransition; | |
uint8 BootAttemptCount; | |
uint8 LastBootCheckpoint; | |
uint LastBootId; | |
uint LastSuccessfulShutdownBootId; | |
uint LastReportedAbnormalShudownBootId; | |
struct _BSD_FATAL_ERROR_INFO{ | |
uint BootId; | |
uint RepeatCount; | |
uint OtherErrorCount; | |
uint Code; | |
int Status; | |
} ErrorInfo; | |
} | |
struct BSMINFO{ | |
uint cbSize; | |
struct HDESK__{ | |
int ; | |
}* hdesk; | |
struct HWND__{ | |
int ; | |
}* hwnd; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} luid; | |
} | |
struct BULK_SECURITY_TEST_DATA{ | |
uint DesiredAccess; | |
uint SecurityIds; | |
} | |
struct B_TREE_DBG_NODE_POOL{ | |
} | |
struct B_TREE_DBG_NODE_POOL__NP_CTX{ | |
uint NodeCount; | |
void* RefLeaves; | |
} | |
struct B_TREE_DUMMY_NODE_POOL{ | |
} | |
struct B_TREE_DUMMY_NODE_POOL__NP_CTX{ | |
} | |
struct B_TREE_NODE_HDR{ | |
uint32 EntryCount:16; | |
uint32 Depth:8; | |
uint32 LeafNode:8; | |
} | |
struct BeArgs{ | |
uint SavedEbp; | |
uint ReturnAddress; | |
uint BugCheckCode; | |
uint BcP1; | |
uint BcP2; | |
uint BcP3; | |
uint BcP4; | |
} | |
struct BeFrame{ | |
uint SavedFlags; | |
uint SavedEax; | |
uint SavedEbp; | |
uint ReturnAddress; | |
} | |
struct CHARGING_POWERSOURCE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
NotificationCallback* NotificationCallback; | |
void* NotificationContext; | |
} | |
struct CLEAR_PROBLEM_CONTEXT{ | |
uint Problem; | |
uint Restart; | |
uint Limit; | |
} | |
struct CMP_CHECK_REGISTRY_STACK_ENTRY{ | |
uint Cell; | |
uint ParentCell; | |
uint PriorSibling; | |
uint ChildIndex; | |
uint8 CellChecked; | |
} | |
struct CMP_COPY_STACK_ENTRY{ | |
uint SourceCell; | |
uint TargetCell; | |
uint i; | |
int32 CopiedDepth:3; | |
uint8 SkippedEntries:1; | |
uint8 TargetCellDirty:1; | |
} | |
struct CMP_OFFSET_ARRAY{ | |
uint FileOffset; | |
void* DataBuffer; | |
uint DataLength; | |
} | |
struct CM_CREATE_KEY_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Header; | |
HSTORAGE_TYPE StorageType; | |
uint DescriptorLength; | |
void* Descriptor; | |
} | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} | |
struct CM_LOGREC_BIG_RECORD{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Record; | |
uint NrChunks; | |
uint ChunkNo; | |
uint DataSize; | |
} | |
struct CM_Power_Data_s{ | |
uint PD_Size; | |
_DEVICE_POWER_STATE PD_MostRecentPowerState; | |
uint PD_Capabilities; | |
uint PD_D1Latency; | |
uint PD_D2Latency; | |
uint PD_D3Latency; | |
_DEVICE_POWER_STATE PD_PowerStateMapping; | |
} | |
struct CM_RENAME_KEY_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Header; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} NewKeyName; | |
} | |
struct CM_RESTART_AREA{ | |
union _CLS_LSN{ | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} offset; | |
ULONGLONG ullOffset; | |
} RestartLsn; | |
} | |
struct CM_SET_KEY_USER_FLAGS_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} ; | |
uint NewFlags; | |
} | |
struct CM_SET_LAST_WRITE_TIME_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Header; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} NewLastWriteTime; | |
} | |
struct CM_SET_SECURITY_DESCRIPTOR_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Header; | |
uint NewDescriptorLength; | |
void* NewDescriptor; | |
} | |
struct CM_SET_VALUE_NEW_LOGREC{ | |
struct CM_LOGREC{ | |
uint CheckSum; | |
uint Size; | |
uint Type; | |
uint Action; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} KtmUow; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} Header; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ValueName; | |
uint ValueType; | |
uint DataSize; | |
void* Data; | |
} | |
struct COPYFILE2_EXTENDED_PARAMETERS{ | |
uint dwSize; | |
uint dwCopyFlags; | |
int* pfCancel; | |
pProgressRoutine* pProgressRoutine; | |
void* pvCallbackContext; | |
} | |
struct CPPEH_RECORD{ | |
DWORD old_esp; | |
} | |
struct CREATE_USN_JOURNAL_DATA{ | |
uint64 MaximumSize; | |
uint64 AllocationDelta; | |
} | |
struct CalendarNlsDataItems{ | |
uint16 iCalendar; | |
uint16 iTwoDigitYearMax; | |
uint saShortDate; | |
uint saYearMonth; | |
uint saLongDate; | |
uint saEraNames; | |
uint waaEraRanges; | |
uint saDayNames; | |
uint saAbbrevDayNames; | |
uint saMonthNames; | |
uint saAbbrevMonthNames; | |
uint sCalendarName; | |
uint saMonthDay; | |
uint saAbbrevEraNames; | |
uint saSuperShortDayNames; | |
uint sRelativeLongDate; | |
uint sPadding; | |
uint sPadding2; | |
uint sPadding3; | |
} | |
struct CbFrame{ | |
uint ReturnAddress; | |
uint OutputBuffer; | |
uint OutputLength; | |
uint ReturnStatus; | |
} | |
struct CuFrame{ | |
uint SavedEdi; | |
uint SavedEsi; | |
uint SavedEbx; | |
uint SavedEbp; | |
uint Return; | |
uint OutputBuffer; | |
uint OutputLength; | |
uint NewInitialStack; | |
uint NewStackBase; | |
} | |
struct CultureDataType{ | |
wchar_t* cultureName; | |
uint16 langID; | |
int parentItem; | |
} | |
struct DBGKD_INTERNAL_BREAKPOINT{ | |
uint64 Addr; | |
uint Flags; | |
uint Calls; | |
uint CallsLastCheck; | |
uint MaxCallsPerPeriod; | |
uint MinInstructions; | |
uint MaxInstructions; | |
uint TotalInstructions; | |
uint Handle; | |
void* Thread; | |
uint64 ReturnAddress; | |
} | |
struct DEBUG_DEVICE_ADDRESS{ | |
uint8 Type; | |
uint8 Valid; | |
uint8 Reserved; | |
} | |
struct DEBUG_MEMORY_REQUIREMENTS{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Start; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MaxEnd; | |
void* VirtualAddress; | |
uint Length; | |
uint8 Cached; | |
uint8 Aligned; | |
} | |
struct DELETE_USN_JOURNAL_DATA{ | |
uint64 UsnJournalID; | |
uint DeleteFlags; | |
} | |
struct DEVICE_INSTANCE_DRIVER_PROPERTY{ | |
_CM_REG_PROP Property; | |
uint8 IsClassProperty; | |
} | |
struct DEVICE_SERVICE_ITERATOR_CONTEXT{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* DeviceInstancePath; | |
Iterator* Iterator; | |
void* Context; | |
} | |
struct DIRWALK_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Directory; | |
wchar_t Name; | |
} | |
struct DISPATCH_INFO{ | |
CONNECT_TYPE Type; | |
struct _KINTERRUPT{ | |
__int16 Type; | |
__int16 Size; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} InterruptListEntry; | |
ServiceRoutine* ServiceRoutine; | |
MessageServiceRoutine* MessageServiceRoutine; | |
uint MessageIndex; | |
void* ServiceContext; | |
uint SpinLock; | |
uint TickCount; | |
uint* ActualLock; | |
DispatchAddress* DispatchAddress; | |
uint Vector; | |
uint8 Irql; | |
uint8 SynchronizeIrql; | |
uint8 FloatingSave; | |
uint8 Connected; | |
uint Number; | |
uint8 ShareVector; | |
uint8 EmulateActiveBoth; | |
uint16 ActiveCount; | |
int InternalState; | |
_KINTERRUPT_MODE Mode; | |
_KINTERRUPT_POLARITY Polarity; | |
uint ServiceCount; | |
uint DispatchCount; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
}* PassiveEvent; | |
void* DisconnectData; | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _M128A FloatRegisters; | |
}* StateSaveArea; | |
struct _KSCHEDULING_GROUP{ | |
struct _KSCHEDULING_GROUP_POLICY Policy; | |
uint RelativeWeight; | |
uint ChildMinRate; | |
uint ChildMinWeight; | |
uint ChildTotalWeight; | |
uint64 QueryHistoryTimeStamp; | |
int64 NotificationCycles; | |
int64 MaxQuotaLimitCycles; | |
int64 MaxQuotaCyclesRemaining; | |
union $7E4164C3926CB86377AC4CFD3751C28A ___u9; | |
struct _KDPC* NotificationDpc; | |
struct _LIST_ENTRY ChildList; | |
struct _KSCHEDULING_GROUP* Parent; | |
struct _KSCB PerProcessor; | |
}* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER{ | |
uint8 Flags; | |
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1; | |
} WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
}* ServiceThread; | |
struct _INTERRUPT_CONNECTION_DATA{ | |
uint Count; | |
struct _INTERRUPT_VECTOR_DATA{ | |
INTERRUPT_CONNECTION_TYPE Type; | |
uint Vector; | |
uint8 Irql; | |
_KINTERRUPT_POLARITY Polarity; | |
_KINTERRUPT_MODE Mode; | |
struct _GROUP_AFFINITY TargetProcessors; | |
struct _INTERRUPT_REMAPPING_INFO IntRemapInfo; | |
struct $9C4F338B70295F7B2047FA8931243165 ControllerInput; | |
uint64 HvDeviceId; | |
union $88BE5936E0EB352A1D17F89E2E2B4B32 ___u9; | |
} Vectors; | |
}* ConnectionData; | |
void* IntTrackEntry; | |
struct _ISRDPCSTATS{ | |
uint64 IsrTime; | |
uint64 IsrTimeStart; | |
uint64 IsrCount; | |
uint64 DpcTime; | |
uint64 DpcTimeStart; | |
uint64 DpcCount; | |
uint8 IsrActive; | |
uint8 Reserved; | |
} IsrDpcStats; | |
void* RedirectObject; | |
}* Interrupt; | |
InterruptDispatch* InterruptDispatch; | |
ChainedDispatch* ChainedDispatch; | |
} | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} | |
struct DISPLAYCONFIG_ADAPTER_NAME{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
wchar_t adapterDevicePath; | |
} | |
struct DISPLAYCONFIG_DESKTOP_IMAGE_INFO{ | |
struct _POINTL{ | |
int x; | |
int y; | |
} PathSourceSize; | |
struct _RECTL{ | |
int left; | |
int top; | |
int right; | |
int bottom; | |
} DesktopImageRegion; | |
struct _RECTL{ | |
int left; | |
int top; | |
int right; | |
int bottom; | |
} DesktopImageClip; | |
} | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} | |
struct DISPLAYCONFIG_MODE_INFO{ | |
DISPLAYCONFIG_MODE_INFO_TYPE infoType; | |
uint id; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
union { | |
struct DISPLAYCONFIG_TARGET_MODE{ | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{ | |
uint64 pixelRate; | |
struct DISPLAYCONFIG_RATIONAL hSyncFreq; | |
struct DISPLAYCONFIG_RATIONAL vSyncFreq; | |
struct DISPLAYCONFIG_2DREGION activeSize; | |
struct DISPLAYCONFIG_2DREGION totalSize; | |
union $26365528C13EE39B63AD05330581E1D7 ___u5; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
} ; | |
} ; | |
struct DISPLAYCONFIG_SOURCE_MODE{ | |
uint width; | |
uint height; | |
DISPLAYCONFIG_PIXELFORMAT pixelFormat; | |
struct _POINTL{ | |
int x; | |
int y; | |
} position; | |
} sourceMode; | |
struct DISPLAYCONFIG_DESKTOP_IMAGE_INFO{ | |
struct _POINTL{ | |
int x; | |
int y; | |
} PathSourceSize; | |
struct _RECTL{ | |
int left; | |
int top; | |
int right; | |
int bottom; | |
} DesktopImageRegion; | |
struct _RECTL{ | |
int left; | |
int top; | |
int right; | |
int bottom; | |
} DesktopImageClip; | |
} desktopImageInfo; | |
} ___u3; | |
} | |
struct DISPLAYCONFIG_PATH_INFO{ | |
struct DISPLAYCONFIG_PATH_SOURCE_INFO{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
union { | |
uint modeInfoIdx; | |
struct { | |
uint32 cloneGroupId:16; | |
uint32 sourceModeInfoIdx:16; | |
} __s1; | |
} ___u2; | |
uint statusFlags; | |
} sourceInfo; | |
struct DISPLAYCONFIG_PATH_TARGET_INFO{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
union { | |
uint modeInfoIdx; | |
struct { | |
uint32 desktopModeInfoIdx:16; | |
uint32 targetModeInfoIdx:16; | |
} __s1; | |
} ___u2; | |
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology; | |
DISPLAYCONFIG_ROTATION rotation; | |
DISPLAYCONFIG_SCALING scaling; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} refreshRate; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
int targetAvailable; | |
uint statusFlags; | |
} targetInfo; | |
uint flags; | |
} | |
struct DISPLAYCONFIG_PATH_SOURCE_INFO{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
union { | |
uint modeInfoIdx; | |
struct { | |
uint32 cloneGroupId:16; | |
uint32 sourceModeInfoIdx:16; | |
} __s1; | |
} ___u2; | |
uint statusFlags; | |
} | |
struct DISPLAYCONFIG_PATH_TARGET_INFO{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
union { | |
uint modeInfoIdx; | |
struct { | |
uint32 desktopModeInfoIdx:16; | |
uint32 targetModeInfoIdx:16; | |
} __s1; | |
} ___u2; | |
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology; | |
DISPLAYCONFIG_ROTATION rotation; | |
DISPLAYCONFIG_SCALING scaling; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} refreshRate; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
int targetAvailable; | |
uint statusFlags; | |
} | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} | |
struct DISPLAYCONFIG_SET_TARGET_PERSISTENCE{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
union { | |
struct { | |
uint32 bootPersistenceOn:1; | |
uint32 reserved:31; | |
} ; | |
uint value; | |
} ___u1; | |
} | |
struct DISPLAYCONFIG_SOURCE_DEVICE_NAME{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
wchar_t viewGdiDeviceName; | |
} | |
struct DISPLAYCONFIG_SOURCE_MODE{ | |
uint width; | |
uint height; | |
DISPLAYCONFIG_PIXELFORMAT pixelFormat; | |
struct _POINTL{ | |
int x; | |
int y; | |
} position; | |
} | |
struct DISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
union { | |
struct { | |
uint32 disableMonitorVirtualResolution:1; | |
uint32 reserved:31; | |
} __s0; | |
uint value; | |
} ___u1; | |
} | |
struct DISPLAYCONFIG_TARGET_BASE_TYPE{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY baseOutputTechnology; | |
} | |
struct DISPLAYCONFIG_TARGET_DEVICE_NAME{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} header; | |
struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS{ | |
union { | |
struct { | |
uint32 friendlyNameFromEdid:1; | |
uint32 friendlyNameForced:1; | |
uint32 edidIdsValid:1; | |
uint32 reserved:29; | |
} __s0; | |
uint value; | |
} ___u0; | |
} flags; | |
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology; | |
uint16 edidManufactureId; | |
uint16 edidProductCodeId; | |
uint connectorInstance; | |
wchar_t monitorFriendlyDeviceName; | |
} | |
struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS{ | |
union { | |
struct { | |
uint32 friendlyNameFromEdid:1; | |
uint32 friendlyNameForced:1; | |
uint32 edidIdsValid:1; | |
uint32 reserved:29; | |
} __s0; | |
uint value; | |
} ___u0; | |
} | |
struct DISPLAYCONFIG_TARGET_MODE{ | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{ | |
uint64 pixelRate; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} hSyncFreq; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} vSyncFreq; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} activeSize; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} totalSize; | |
union { | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_{ | |
uint32 videoStandard:16; | |
uint32 vSyncFreqDivider:6; | |
uint32 reserved:10; | |
} AdditionalSignalInfo; | |
uint videoStandard; | |
} ___u5; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
} ; | |
} | |
struct DISPLAYCONFIG_TARGET_PREFERRED_MODE{ | |
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{ | |
DISPLAYCONFIG_DEVICE_INFO_TYPE type; | |
uint size; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} adapterId; | |
uint id; | |
} ; | |
uint width; | |
uint height; | |
struct DISPLAYCONFIG_TARGET_MODE{ | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{ | |
uint64 pixelRate; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} hSyncFreq; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} vSyncFreq; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} activeSize; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} totalSize; | |
union { | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_ AdditionalSignalInfo; | |
uint videoStandard; | |
} ___u5; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
} ; | |
} targetMode; | |
} | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{ | |
uint64 pixelRate; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} hSyncFreq; | |
struct DISPLAYCONFIG_RATIONAL{ | |
uint Numerator; | |
uint Denominator; | |
} vSyncFreq; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} activeSize; | |
struct DISPLAYCONFIG_2DREGION{ | |
uint cx; | |
uint cy; | |
} totalSize; | |
union { | |
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_{ | |
uint32 videoStandard:16; | |
uint32 vSyncFreqDivider:6; | |
uint32 reserved:10; | |
} AdditionalSignalInfo; | |
uint videoStandard; | |
} ___u5; | |
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering; | |
} | |
struct DLGITEMTEMPLATE{ | |
uint style; | |
uint dwExtendedStyle; | |
__int16 x; | |
__int16 y; | |
__int16 cx; | |
__int16 cy; | |
uint16 id; | |
} | |
struct DLGTEMPLATE{ | |
uint style; | |
uint dwExtendedStyle; | |
uint16 cdit; | |
__int16 x; | |
__int16 y; | |
__int16 cx; | |
__int16 cy; | |
} | |
struct DOCK_INTERFACE{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
ProfileDepartureSetMode* ProfileDepartureSetMode; | |
ProfileDepartureUpdate* ProfileDepartureUpdate; | |
} | |
struct DPI_AWARENESS_CONTEXT__{ | |
int unused; | |
} | |
struct DispLocals{ | |
uint16 ; | |
uint16 wUser2; | |
uint16 savCntrl; | |
uint16 setCntrl; | |
uint16 StatusWord; | |
_TBYTE Fac; | |
uint Function; | |
uint8 ErrorType; | |
uint8 bUser3; | |
uint typ; | |
uint nam; | |
uint64 arg1; | |
uint64 arg2; | |
uint64 retval; | |
uint8 savebuf; | |
_BYTE gap3B; | |
} | |
struct ECDT{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
struct _GEN_ADDR{ | |
uint8 AddressSpaceID; | |
uint8 BitWidth; | |
uint8 BitOffset; | |
uint8 AccessSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Address; | |
} Control; | |
struct _GEN_ADDR{ | |
uint8 AddressSpaceID; | |
uint8 BitWidth; | |
uint8 BitOffset; | |
uint8 AccessSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Address; | |
} Data; | |
uint Uid; | |
uint8 GpeBit; | |
char Id; | |
} | |
struct EFI_CAPSULE_BLOCK_DESCRIPTOR{ | |
uint64 Length; | |
union { | |
uint64 DataBlock; | |
uint64 ContinuationPointer; | |
} Union; | |
} | |
struct EFI_CAPSULE_HEADER{ | |
struct EFI_GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} CapsuleGuid; | |
uint HeaderSize; | |
uint Flags; | |
uint CapsuleImageSize; | |
} | |
struct EFI_GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} | |
struct EVENTWORKCONTEXT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _REGENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
union { | |
void* Target; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
WmiEntry** WmiEntry; | |
} ___u1; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* PDO; | |
struct tagDATASOURCE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainDSList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ISHead; | |
uint ProviderId; | |
uint ProcessId; | |
uint MofResourceCount; | |
struct MOFRESOURCE{ | |
struct _LIST_ENTRY MainMRList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
wchar_t* RegistryPath; | |
wchar_t* MofResourceName; | |
}** MofResources; | |
struct MOFRESOURCE{ | |
struct _LIST_ENTRY MainMRList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
wchar_t* RegistryPath; | |
wchar_t* MofResourceName; | |
}* StaticMofResources; | |
}* DataSource; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
}* Deregistered; | |
union _REGSTATE{ | |
int Value; | |
struct { | |
uint32 RefCount:24; | |
uint32 TraceFlags:4; | |
uint32 Callback:1; | |
uint32 NoIrps:1; | |
uint32 Traced:1; | |
uint32 Rundown:1; | |
} __s1; | |
} State; | |
uint MaxInstanceNames; | |
}* RegEntry; | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union { | |
uint64 HistoricalContext; | |
struct { | |
uint Version; | |
uint Linkage; | |
} __s1; | |
} ___u2; | |
union { | |
uint CountLost; | |
void* KernelHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
} ___u3; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint ClientContext; | |
uint Flags; | |
}* Wnode; | |
} | |
struct EVENT_INSTANCE_INFO{ | |
void* RegHandle; | |
uint InstanceId; | |
} | |
struct EXP_INITIALIZE_GLOBAL_CALLBACKS{ | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}** CallBackObject; | |
wchar_t* CallbackName; | |
} | |
struct EXT_API_VERSION{ | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
uint16 Revision; | |
uint16 Reserved; | |
} | |
struct EX_BOOT_DEVICE_HANDLE__{ | |
int unused; | |
} | |
struct FILE_ID_DESCRIPTOR{ | |
uint ; | |
_FILE_ID_TYPE Type; | |
union { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FileId; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ObjectId; | |
struct _FILE_ID_128{ | |
uint8 ; | |
} ExtendedFileId; | |
} ___u2; | |
} | |
struct FIND_BY_SID_DATA{ | |
uint Restart; | |
struct _SID{ | |
BYTE Revision; | |
BYTE SubAuthorityCount; | |
struct _SID_IDENTIFIER_AUTHORITY{ | |
BYTE Value; | |
} ; | |
} Sid; | |
} | |
struct FIND_BY_SID_OUTPUT{ | |
uint NextEntryOffset; | |
uint FileIndex; | |
uint FileNameLength; | |
wchar_t FileName; | |
} | |
struct FLASHWINFO{ | |
uint cbSize; | |
struct HWND__{ | |
int ; | |
}* hwnd; | |
uint dwFlags; | |
uint uCount; | |
uint dwTimeout; | |
} | |
struct GUIDREGINFO{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint InstanceCount; | |
uint Flags; | |
} | |
struct HACCEL__{ | |
int unused; | |
} | |
struct HAL_DISPATCH{ | |
uint ; | |
HalQuerySystemInformation* HalQuerySystemInformation; | |
HalSetSystemInformation* HalSetSystemInformation; | |
HalQueryBusSlots* HalQueryBusSlots; | |
uint Spare1; | |
HalExamineMBR* HalExamineMBR; | |
HalIoReadPartitionTable* HalIoReadPartitionTable; | |
HalIoSetPartitionInformation* HalIoSetPartitionInformation; | |
HalIoWritePartitionTable* HalIoWritePartitionTable; | |
HalReferenceHandlerForBus** HalReferenceHandlerForBus; | |
HalReferenceBusHandler* HalReferenceBusHandler; | |
HalDereferenceBusHandler* HalDereferenceBusHandler; | |
HalInitPnpDriver* HalInitPnpDriver; | |
HalInitPowerManagement* HalInitPowerManagement; | |
HalGetDmaAdapter** HalGetDmaAdapter; | |
HalGetInterruptTranslator* HalGetInterruptTranslator; | |
HalStartMirroring* HalStartMirroring; | |
HalEndMirroring* HalEndMirroring; | |
HalMirrorPhysicalMemory* HalMirrorPhysicalMemory; | |
HalEndOfBoot* HalEndOfBoot; | |
HalMirrorVerify* HalMirrorVerify; | |
HalGetCachedAcpiTable** HalGetCachedAcpiTable; | |
HalSetPciErrorHandlerCallback* HalSetPciErrorHandlerCallback; | |
} | |
struct HAL_PRIVATE_DISPATCH{ | |
uint Version; | |
HalHandlerForBus** HalHandlerForBus; | |
HalHandlerForConfigSpace** HalHandlerForConfigSpace; | |
HalLocateHiberRanges* HalLocateHiberRanges; | |
HalRegisterBusHandler* HalRegisterBusHandler; | |
HalSetWakeEnable* HalSetWakeEnable; | |
HalSetWakeAlarm* HalSetWakeAlarm; | |
HalPciTranslateBusAddress* HalPciTranslateBusAddress; | |
HalPciAssignSlotResources* HalPciAssignSlotResources; | |
HalHaltSystem* HalHaltSystem; | |
HalFindBusAddressTranslation* HalFindBusAddressTranslation; | |
HalResetDisplay* HalResetDisplay; | |
HalAllocateMapRegisters* HalAllocateMapRegisters; | |
KdSetupPciDeviceForDebugging* KdSetupPciDeviceForDebugging; | |
KdReleasePciDeviceForDebugging* KdReleasePciDeviceForDebugging; | |
KdGetAcpiTablePhase0** KdGetAcpiTablePhase0; | |
KdCheckPowerButton* KdCheckPowerButton; | |
HalVectorToIDTEntry* HalVectorToIDTEntry; | |
KdMapPhysicalMemory64** KdMapPhysicalMemory64; | |
KdUnmapVirtualAddress* KdUnmapVirtualAddress; | |
KdGetPciDataByOffset* KdGetPciDataByOffset; | |
KdSetPciDataByOffset* KdSetPciDataByOffset; | |
HalGetInterruptVectorOverride* HalGetInterruptVectorOverride; | |
HalGetVectorInputOverride* HalGetVectorInputOverride; | |
HalLoadMicrocode* HalLoadMicrocode; | |
HalUnloadMicrocode* HalUnloadMicrocode; | |
HalPostMicrocodeUpdate* HalPostMicrocodeUpdate; | |
HalAllocateMessageTargetOverride* HalAllocateMessageTargetOverride; | |
HalFreeMessageTargetOverride* HalFreeMessageTargetOverride; | |
HalDpReplaceBegin* HalDpReplaceBegin; | |
HalDpReplaceTarget* HalDpReplaceTarget; | |
HalDpReplaceControl* HalDpReplaceControl; | |
HalDpReplaceEnd* HalDpReplaceEnd; | |
HalPrepareForBugcheck* HalPrepareForBugcheck; | |
HalQueryWakeTime* HalQueryWakeTime; | |
HalReportIdleStateUsage* HalReportIdleStateUsage; | |
HalTscSynchronization* HalTscSynchronization; | |
HalWheaInitProcessorGenericSection* HalWheaInitProcessorGenericSection; | |
HalStopLegacyUsbInterrupts* HalStopLegacyUsbInterrupts; | |
HalReadWheaPhysicalMemory* HalReadWheaPhysicalMemory; | |
HalWriteWheaPhysicalMemory* HalWriteWheaPhysicalMemory; | |
HalDpMaskLevelTriggeredInterrupts* HalDpMaskLevelTriggeredInterrupts; | |
HalDpUnmaskLevelTriggeredInterrupts* HalDpUnmaskLevelTriggeredInterrupts; | |
HalDpGetInterruptReplayState* HalDpGetInterruptReplayState; | |
HalDpReplayInterrupts* HalDpReplayInterrupts; | |
HalQueryIoPortAccessSupported* HalQueryIoPortAccessSupported; | |
KdSetupIntegratedDeviceForDebugging* KdSetupIntegratedDeviceForDebugging; | |
KdReleaseIntegratedDeviceForDebugging* KdReleaseIntegratedDeviceForDebugging; | |
HalGetEnlightenmentInformation* HalGetEnlightenmentInformation; | |
HalAllocateEarlyPages** HalAllocateEarlyPages; | |
HalMapEarlyPages** HalMapEarlyPages; | |
void* Dummy1; | |
void* Dummy2; | |
HalNotifyProcessorFreeze* HalNotifyProcessorFreeze; | |
HalPrepareProcessorForIdle* HalPrepareProcessorForIdle; | |
HalRegisterLogRoutine* HalRegisterLogRoutine; | |
HalResumeProcessorFromIdle* HalResumeProcessorFromIdle; | |
void* Dummy; | |
HalVectorToIDTEntryEx* HalVectorToIDTEntryEx; | |
HalSecondaryInterruptQueryPrimaryInformation* HalSecondaryInterruptQueryPrimaryInformation; | |
HalMaskInterrupt* HalMaskInterrupt; | |
HalUnmaskInterrupt* HalUnmaskInterrupt; | |
HalIsInterruptTypeSecondary* HalIsInterruptTypeSecondary; | |
HalAllocateGsivForSecondaryInterrupt* HalAllocateGsivForSecondaryInterrupt; | |
HalAddInterruptRemapping* HalAddInterruptRemapping; | |
HalRemoveInterruptRemapping* HalRemoveInterruptRemapping; | |
HalSaveAndDisableHvEnlightenment* HalSaveAndDisableHvEnlightenment; | |
HalRestoreHvEnlightenment* HalRestoreHvEnlightenment; | |
HalFlushIoBuffersExternalCache* HalFlushIoBuffersExternalCache; | |
HalFlushExternalCache* HalFlushExternalCache; | |
HalPciEarlyRestore* HalPciEarlyRestore; | |
HalGetProcessorId* HalGetProcessorId; | |
HalAllocatePmcCounterSet* HalAllocatePmcCounterSet; | |
HalCollectPmcCounters* HalCollectPmcCounters; | |
HalFreePmcCounterSet* HalFreePmcCounterSet; | |
HalProcessorHalt* HalProcessorHalt; | |
HalTimerQueryCycleCounter* HalTimerQueryCycleCounter; | |
void* Dummy3; | |
HalPciMarkHiberPhase* HalPciMarkHiberPhase; | |
HalQueryProcessorRestartEntryPoint* HalQueryProcessorRestartEntryPoint; | |
HalRequestInterrupt* HalRequestInterrupt; | |
HalEnumerateUnmaskedInterrupts* HalEnumerateUnmaskedInterrupts; | |
HalFlushAndInvalidatePageExternalCache* HalFlushAndInvalidatePageExternalCache; | |
KdEnumerateDebuggingDevices* KdEnumerateDebuggingDevices; | |
HalFlushIoRectangleExternalCache* HalFlushIoRectangleExternalCache; | |
HalPowerEarlyRestore* HalPowerEarlyRestore; | |
HalQueryCapsuleCapabilities* HalQueryCapsuleCapabilities; | |
HalUpdateCapsule* HalUpdateCapsule; | |
HalPciMultiStageResumeCapable* HalPciMultiStageResumeCapable; | |
HalDmaFreeCrashDumpRegisters* HalDmaFreeCrashDumpRegisters; | |
HalAcpiAoacCapable* HalAcpiAoacCapable; | |
HalInterruptSetDestination* HalInterruptSetDestination; | |
HalGetClockConfiguration* HalGetClockConfiguration; | |
HalClockTimerActivate* HalClockTimerActivate; | |
HalClockTimerInitialize* HalClockTimerInitialize; | |
HalClockTimerStop* HalClockTimerStop; | |
HalClockTimerArm* HalClockTimerArm; | |
HalTimerOnlyClockInterruptPending* HalTimerOnlyClockInterruptPending; | |
HalAcpiGetMultiNode** HalAcpiGetMultiNode; | |
HalPowerSetRebootHandler** HalPowerSetRebootHandler; | |
HalIommuRegisterDispatchTable* HalIommuRegisterDispatchTable; | |
HalTimerWatchdogStart* HalTimerWatchdogStart; | |
HalTimerWatchdogResetCountdown* HalTimerWatchdogResetCountdown; | |
HalTimerWatchdogStop* HalTimerWatchdogStop; | |
HalTimerWatchdogGeneratedLastReset* HalTimerWatchdogGeneratedLastReset; | |
HalTimerWatchdogTriggerSystemReset* HalTimerWatchdogTriggerSystemReset; | |
HalInterruptVectorDataToGsiv* HalInterruptVectorDataToGsiv; | |
HalInterruptGetHighestPriorityInterrupt* HalInterruptGetHighestPriorityInterrupt; | |
HalProcessorOn* HalProcessorOn; | |
HalProcessorOff* HalProcessorOff; | |
HalProcessorFreeze* HalProcessorFreeze; | |
HalDmaLinkDeviceObjectByToken* HalDmaLinkDeviceObjectByToken; | |
HalDmaCheckAdapterToken* HalDmaCheckAdapterToken; | |
HalPciLateRestore* HalPciLateRestore; | |
HalTimerConvertPerformanceCounterToAuxiliaryCounter* HalTimerConvertPerformanceCounterToAuxiliaryCounter; | |
HalTimerConvertAuxiliaryCounterToPerformanceCounter* HalTimerConvertAuxiliaryCounterToPerformanceCounter; | |
HalTimerQueryAuxiliaryCounterFrequency* HalTimerQueryAuxiliaryCounterFrequency; | |
HalConnectThermalInterrupt* HalConnectThermalInterrupt; | |
HalIsEFIRuntimeActive* HalIsEFIRuntimeActive; | |
HalTimerQueryAndResetRtcErrors* HalTimerQueryAndResetRtcErrors; | |
} | |
struct HANDLE_ENUM_CONTEXT{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* DeviceObject; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} Header; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY{ | |
uint16 ; | |
uint16 BaseLow; | |
union $4729093EE83589A5C42FEEDA1FD4429B HighWord; | |
} LdtDescriptor; | |
struct _KIDTENTRY{ | |
uint16 Offset; | |
uint16 Selector; | |
uint16 Access; | |
uint16 ExtendedOffset; | |
} Int21Descriptor; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ReadyListHead; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SwapListEntry; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} ActiveProcessors; | |
union { | |
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0; | |
int ProcessFlags; | |
} ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS{ | |
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0; | |
uint8 ExecuteOptions; | |
uint8 ExecuteOptionsNV; | |
} Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct { | |
uint32 ; | |
uint32 AccountingFolded:1; | |
uint32 NewProcessReported:1; | |
uint32 ExitProcessReported:1; | |
uint32 ReportCommitChanges:1; | |
uint32 LastReportMemory:1; | |
uint32 ForceWakeCharge:1; | |
uint32 CrossSessionCreate:1; | |
uint32 NeedsHandleRundown:1; | |
uint32 RefTraceEnabled:1; | |
uint32 DisableDynamicCode:1; | |
uint32 EmptyJobEvaluated:1; | |
uint32 DefaultPagePriority:3; | |
uint32 PrimaryTokenFrozen:1; | |
uint32 ProcessVerifierTarget:1; | |
uint32 StackRandomizationDisabled:1; | |
uint32 AffinityPermanent:1; | |
uint32 AffinityUpdateEnable:1; | |
uint32 PropagateNode:1; | |
uint32 ExplicitAffinity:1; | |
uint32 ProcessExecutionState:2; | |
uint32 DisallowStrippedImages:1; | |
uint32 HighEntropyASLREnabled:1; | |
uint32 ExtensionPointDisable:1; | |
uint32 ForceRelocateImages:1; | |
uint32 ProcessStateChangeRequest:2; | |
uint32 ProcessStateChangeInProgress:1; | |
uint32 DisallowWin32kSystemCalls:1; | |
} __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct { | |
uint32 CreateReported:1; | |
uint32 NoDebugInherit:1; | |
uint32 ProcessExiting:1; | |
uint32 ProcessDelete:1; | |
uint32 ControlFlowGuardEnabled:1; | |
uint32 VmDeleted:1; | |
uint32 OutswapEnabled:1; | |
uint32 Outswapped:1; | |
uint32 FailFastOnCommitFail:1; | |
uint32 Wow64VaSpace4Gb:1; | |
uint32 AddressSpaceInitialized:2; | |
uint32 SetTimerResolution:1; | |
uint32 BreakOnTermination:1; | |
uint32 DeprioritizeViews:1; | |
uint32 WriteWatch:1; | |
uint32 ProcessInSession:1; | |
uint32 OverrideAddressSpace:1; | |
uint32 HasAddressSpace:1; | |
uint32 LaunchPrefetched:1; | |
uint32 Background:1; | |
uint32 VmTopDown:1; | |
uint32 ImageNotifyDone:1; | |
uint32 PdeUpdateNeeded:1; | |
uint32 VdmAllowed:1; | |
uint32 ProcessRundown:1; | |
uint32 ProcessInserted:1; | |
uint32 DefaultIoPriority:3; | |
uint32 ProcessSelfDelete:1; | |
uint32 SetTimerResolutionLink:1; | |
} __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
CallBack* CallBack; | |
void* Context; | |
} | |
struct HBITMAP__{ | |
int unused; | |
} | |
struct HBRUSH__{ | |
int ; | |
} | |
struct HCOLORSPACE__{ | |
int ; | |
} | |
struct HDC__{ | |
int ; | |
} | |
struct HDESK__{ | |
int ; | |
} | |
struct HDRVDBCTX__{ | |
int ; | |
} | |
struct HENHMETAFILE__{ | |
int ; | |
} | |
struct HFONT__{ | |
int ; | |
} | |
struct HGESTUREINFO__{ | |
int ; | |
} | |
struct HGLRC__{ | |
int ; | |
} | |
struct HHOOK__{ | |
int ; | |
} | |
struct HICON__{ | |
int ; | |
} | |
struct HIMCC__{ | |
int ; | |
} | |
struct HIMC__{ | |
int ; | |
} | |
struct HINPROCDEVQUERY__{ | |
int ; | |
} | |
struct HINSTANCE__{ | |
int ; | |
} | |
struct HKEY__{ | |
int ; | |
} | |
struct HKL__{ | |
int ; | |
} | |
struct HLSURF__{ | |
int ; | |
} | |
struct HMENU__{ | |
int ; | |
} | |
struct HMETAFILE__{ | |
int ; | |
} | |
struct HMONITOR__{ | |
int ; | |
} | |
struct HPALETTE__{ | |
int ; | |
} | |
struct HPEN__{ | |
int ; | |
} | |
struct HPNPCTX__{ | |
int ; | |
} | |
struct HPNPOPCTX__{ | |
int ; | |
} | |
struct HRAWINPUT__{ | |
int ; | |
} | |
struct HRGN__{ | |
int ; | |
} | |
struct HRSRC__{ | |
int ; | |
} | |
struct HSPRITE__{ | |
int ; | |
} | |
struct HSTR__{ | |
int ; | |
} | |
struct HSYSCTX__{ | |
int ; | |
} | |
struct HTASK__{ | |
int ; | |
} | |
struct HTOUCHINPUT__{ | |
int ; | |
} | |
struct HUMPD__{ | |
int ; | |
} | |
struct HWINEVENTHOOK__{ | |
int ; | |
} | |
struct HWINSTA__{ | |
int ; | |
} | |
struct HWND__{ | |
int ; | |
} | |
struct HihFrame{ | |
uint ; | |
uint SavedEsi; | |
uint SavedEdi; | |
uint Return; | |
uint InCtlLow; | |
uint InCtlHigh; | |
uint InPhysLow; | |
uint InPhysHigh; | |
uint OutPhysLow; | |
uint OutPhysHigh; | |
} | |
struct IMAGE_AUX_SYMBOL_TOKEN_DEF{ | |
uint8 bAuxType; | |
uint8 bReserved; | |
uint SymbolTableIndex; | |
uint8 rgbReserved; | |
} | |
struct IMAGE_COR20_HEADER{ | |
uint cb; | |
uint16 MajorRuntimeVersion; | |
uint16 MinorRuntimeVersion; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} MetaData; | |
uint Flags; | |
union { | |
uint ; | |
uint EntryPointRVA; | |
} ___u5; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} Resources; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} StrongNameSignature; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} CodeManagerTable; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} VTableFixups; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} ExportAddressTableJumps; | |
struct _IMAGE_DATA_DIRECTORY{ | |
uint VirtualAddress; | |
uint Size; | |
} ManagedNativeHeader; | |
} | |
struct IMPORT_OBJECT_HEADER{ | |
uint16 Sig1; | |
uint16 Sig2; | |
uint16 Version; | |
uint16 Machine; | |
uint TimeDateStamp; | |
uint SizeOfData; | |
union { | |
uint16 Ordinal; | |
uint16 Hint; | |
} ___u6; | |
uint16 Type:2; | |
uint16 NameType:3; | |
uint16 Reserved:11; | |
} | |
struct INSTID{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint BaseId; | |
} | |
struct IO_GET_LEGACY_VETO_LIST_CONTEXT{ | |
wchar_t** VetoList; | |
uint VetoListLength; | |
_PNP_VETO_TYPE* VetoType; | |
int* Status; | |
} | |
struct IRPLOG_DATA{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* DeviceObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} HashLink; | |
uint Flags; | |
uint DeviceType; | |
uint MaximumElementCount; | |
uint Head; | |
struct _IRPLOG_SNAPSHOT{ | |
uint ; | |
uint8 MajorFunction; | |
uint8 MinorFunction; | |
uint8 Flags; | |
uint8 Control; | |
uint64 ArgArray; | |
} SnapshotArray; | |
} | |
struct IRPLOG_HEAD{ | |
uint Locked; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
} | |
struct IRP_MAJOR_VERIFIER_ROUTINES{ | |
DumpIrpStack* DumpIrpStack; | |
VerifyNewRequest* VerifyNewRequest; | |
VerifyStackDownward* VerifyStackDownward; | |
VerifyStackUpward* VerifyStackUpward; | |
IsSystemRestrictedIrp* IsSystemRestrictedIrp; | |
AdvanceIrpStatus* AdvanceIrpStatus; | |
IsValidIrpStatus* IsValidIrpStatus; | |
IsNewRequest* IsNewRequest; | |
VerifyNewIrp* VerifyNewIrp; | |
VerifyFinalIrpStack* VerifyFinalIrpStack; | |
TestStartedPdoStack* TestStartedPdoStack; | |
BuildIrpLogEntry* BuildIrpLogEntry; | |
} | |
struct ISBASENAME{ | |
uint BaseIndex; | |
wchar_t BaseName; | |
} | |
struct ISSTATICENAMES{ | |
wchar_t* StaticNamePtr; | |
} | |
struct IretFrame{ | |
uint ; | |
uint IretCs; | |
uint IretEFlags; | |
} | |
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION{ | |
int64 MaxIops; | |
int64 MaxBandwidth; | |
int64 ReservationIops; | |
wchar_t* VolumeName; | |
uint BaseIoSize; | |
uint ControlFlags; | |
} | |
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE{ | |
int64 MaxIops; | |
int64 MaxBandwidth; | |
int64 ReservationIops; | |
wchar_t* VolumeName; | |
uint BaseIoSize; | |
JOB_OBJECT_IO_RATE_CONTROL_FLAGS ControlFlags; | |
uint16 VolumeNameLength; | |
} | |
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2{ | |
int64 MaxIops; | |
int64 MaxBandwidth; | |
int64 ReservationIops; | |
wchar_t* VolumeName; | |
uint BaseIoSize; | |
JOB_OBJECT_IO_RATE_CONTROL_FLAGS ControlFlags; | |
uint16 VolumeNameLength; | |
int64 CriticalReservationIops; | |
int64 ReservationBandwidth; | |
int64 CriticalReservationBandwidth; | |
int64 MaxTimePercent; | |
int64 ReservationTimePercent; | |
int64 CriticalReservationTimePercent; | |
} | |
struct JOBOBJECT_LIMIT_VIOLATION_INFORMATION_2{ | |
uint LimitFlags; | |
uint ViolationLimitFlags; | |
uint64 IoReadBytes; | |
uint64 IoReadBytesLimit; | |
uint64 IoWriteBytes; | |
uint64 IoWriteBytesLimit; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} PerJobUserTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} PerJobUserTimeLimit; | |
uint64 JobMemory; | |
union { | |
uint64 JobHighMemoryLimit; | |
uint64 JobMemoryLimit; | |
} ___u9; | |
union { | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlTolerance; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlTolerance; | |
} ___u10; | |
union { | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlToleranceLimit; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlToleranceLimit; | |
} ___u11; | |
uint64 JobLowMemoryLimit; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlTolerance; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlToleranceLimit; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlTolerance; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlToleranceLimit; | |
} | |
struct JOBOBJECT_NET_RATE_CONTROL_INFORMATION{ | |
uint64 MaxBandwidth; | |
JOB_OBJECT_NET_RATE_CONTROL_FLAGS ControlFlags; | |
uint8 DscpTag; | |
} | |
struct JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2{ | |
uint64 IoReadBytesLimit; | |
uint64 IoWriteBytesLimit; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} PerJobUserTimeLimit; | |
union { | |
uint64 JobHighMemoryLimit; | |
uint64 JobMemoryLimit; | |
} ___u3; | |
union { | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlTolerance; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlTolerance; | |
} ___u4; | |
union { | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL RateControlToleranceInterval; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL CpuRateControlToleranceInterval; | |
} ___u5; | |
uint LimitFlags; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlTolerance; | |
uint64 JobLowMemoryLimit; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL IoRateControlToleranceInterval; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlTolerance; | |
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL NetRateControlToleranceInterval; | |
} | |
struct KERNEL_ERROR_HANDLER_INFO{ | |
uint Version; | |
uint Padding; | |
KernelMcaDelivery* KernelMcaDelivery; | |
KernelCmcDelivery* KernelCmcDelivery; | |
KernelCpeDelivery* KernelCpeDelivery; | |
KernelMceDelivery* KernelMceDelivery; | |
} | |
struct KEY_PID_ARRAY{ | |
void* PID; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} KeyName; | |
} | |
struct KMOD{ | |
uint8 RmDisplaceOnly; | |
uint8 RmSib; | |
uint8 RmDisplace; | |
uint8 Disp; | |
} | |
struct KoFrame{ | |
uint SavedEbp; | |
uint KoReturnAddress; | |
uint Parameter; | |
uint Callout; | |
uint InitialStack; | |
uint CommitSize; | |
} | |
struct LIST_ENTRY32{ | |
uint Flink; | |
uint Blink; | |
} | |
struct LIST_ENTRY64{ | |
uint64 Flink; | |
uint64 Blink; | |
} | |
struct LanguageNameDataType_tag{ | |
uint16 langID; | |
wchar_t* cultureName; | |
} | |
struct LocaleNlsDataItems{ | |
uint sName; | |
uint sOpenTypeLanguageTag; | |
uint16 iLanguage; | |
uint16 iResourceId; | |
uint16 iDigits; | |
uint16 iNegativeNumber; | |
uint16 iCurrencyDigits; | |
uint16 iCurrency; | |
uint16 iNegativeCurrency; | |
uint16 iLeadingZeros; | |
uint16 iFlags; | |
uint16 iFirstDayOfWeek; | |
uint16 iFirstWeekOfYear; | |
uint16 iCountry; | |
uint16 iMeasure; | |
uint16 iDigitSubstitution; | |
uint waGrouping; | |
uint waMonetaryGrouping; | |
uint sListSeparator; | |
uint sDecimalSeparator; | |
uint sThousandSeparator; | |
uint sCurrency; | |
uint sMonetaryDecimal; | |
uint sMonetaryThousand; | |
uint sPositiveSign; | |
uint sNegativeSign; | |
uint sAM1159; | |
uint sPM2359; | |
uint saNativeDigits; | |
uint saTimeFormat; | |
uint saShortDate; | |
uint saLongDate; | |
uint saYearMonth; | |
uint saDuration; | |
uint16 iDefaultLanguage; | |
uint16 iDefaultAnsiCodePage; | |
uint16 iDefaultOemCodePage; | |
uint16 iDefaultMacCodePage; | |
uint16 iDefaultEbcdicCodePage; | |
uint16 iOldGeoId; | |
uint16 iPaperSize; | |
uint16 iLocalizedCalendar; | |
uint waCalendars; | |
uint sAbbrevLang; | |
uint sISO639Language; | |
uint sEnglishLanguage; | |
uint sNativeLanguage; | |
uint sEnglishCountry; | |
uint sNativeCountry; | |
uint sUnused; | |
uint sISO3166CountryName; | |
uint sIntlMonetarySymbol; | |
uint sEnglishCurrency; | |
uint sNativeCurrency; | |
uint waFontSignature; | |
uint sISO639Language2; | |
uint sISO3166CountryName2; | |
uint sParent; | |
uint saDayNames; | |
uint saAbbrevDayNames; | |
uint saMonthNames; | |
uint saAbbrevMonthNames; | |
uint saMonthGenitiveNames; | |
uint saAbbrevMonthGenitiveNames; | |
uint saNativeCalendarNames; | |
uint saAltSortID; | |
uint16 iNegativePercent; | |
uint16 iPositivePercent; | |
uint16 iUnused4; | |
uint16 iReadingLayout; | |
uint16 iUnusedA; | |
uint16 iUnusedB; | |
uint iUnusedC; | |
uint sEnglishDisplayName; | |
uint sNativeDisplayName; | |
uint sPercent; | |
uint sNaN; | |
uint sPositiveInfinity; | |
uint sNegativeInfinity; | |
uint sSingleMonthDayV5; | |
uint sAdEra; | |
uint sAbbrevAdEra; | |
uint sReserved0; | |
uint sConsoleFallbackName; | |
uint saShortTime; | |
uint saSuperShortDayNames; | |
uint sReserved1; | |
uint sSpecificCulture; | |
uint sKeyboardsToInstall; | |
uint sScripts; | |
uint sRelativeLongDate; | |
uint iGeoId; | |
uint sShortestAM; | |
uint sShortestPM; | |
uint saMonthDay; | |
uint sReserved5; | |
} | |
struct MARK_HANDLE_INFO{ | |
union { | |
uint UsnSourceInfo; | |
uint CopyNumber; | |
} ___u0; | |
void* VolumeHandle; | |
uint HandleInfo; | |
} | |
struct MBR{ | |
uint8 _BootStrapCode; | |
} | |
struct MBR_ENTRY{ | |
uint8 ; | |
struct _CHS{ | |
uint8 Head; | |
uint8 Sector; | |
uint8 Cylinder; | |
} _First; | |
uint8 _Type; | |
struct _CHS{ | |
uint8 Head; | |
uint8 Sector; | |
uint8 Cylinder; | |
} _Last; | |
uint _FirstLba; | |
uint _LbaCount; | |
} | |
struct MENUITEMTEMPLATE{ | |
uint16 mtOption; | |
uint16 mtID; | |
wchar_t mtString; | |
} | |
struct MENUITEMTEMPLATEHEADER{ | |
uint16 versionNumber; | |
uint16 offset; | |
} | |
struct MFT_ENUM_DATA_V0{ | |
uint64 StartFileReferenceNumber; | |
int64 LowUsn; | |
int64 HighUsn; | |
} | |
struct MFT_ENUM_DATA_V1{ | |
uint64 StartFileReferenceNumber; | |
int64 LowUsn; | |
int64 HighUsn; | |
uint16 MinMajorVersion; | |
uint16 MaxMajorVersion; | |
} | |
struct MOFRESOURCE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainMRList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
wchar_t* RegistryPath; | |
wchar_t* MofResourceName; | |
} | |
struct MOVE_FILE_DATA{ | |
void* FileHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingVcn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingLcn; | |
uint ClusterCount; | |
} | |
struct MOVE_FILE_RECORD_DATA{ | |
void* FileHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} SourceFileRecord; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TargetFileRecord; | |
} | |
struct MSIX_TABLE_POINTER{ | |
union { | |
struct { | |
uint32 BaseIndexRegister:3; | |
uint32 Reserved:29; | |
} __s0; | |
uint TableOffset; | |
} ___u0; | |
} | |
struct NOTIFY_USER_POWER_SETTING{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
} | |
struct NP_CONTEXT__NP_CALLBACKS{ | |
} | |
struct NP_CONTEXT__NP_CTX{ | |
struct NP_CONTEXT{ | |
struct NP_CONTEXT___NP_PARAMETERS{ | |
uint ; | |
uint ReservedNodeCount; | |
struct NP_CONTEXT__NP_CALLBACKS{ | |
} Cb; | |
} Params; | |
uint AllocatedCount; | |
uint PagedOutCount; | |
uint CleanCount; | |
uint BaseTime; | |
union _NP_LEAF_PTR{ | |
void* Ptr; | |
uint Key; | |
struct { | |
uint32 ; | |
uint32 HasRef:1; | |
uint32 LastAccessTime:10; | |
} __s2; | |
struct { | |
uint32 OverlapsValid:1; | |
uint32 OverlapsHasRef:1; | |
uint32 RefCount:10; | |
} __s3; | |
struct _NP_LEAF_PTR___unnamed_type_NodeCtx_{ | |
uint32 OverlapsValid:1; | |
uint32 Dirty:1; | |
} NodeCtx; | |
}* EntryToPageOut; | |
struct _PF_QUEUE{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} Tail; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
}* Head; | |
} ReservedNodes; | |
struct NP_CONTEXT___unnamed_type_Stats_{ | |
uint PageOutCount; | |
uint PageInCount; | |
uint PageOutErrors; | |
uint PageInErrors; | |
} Stats; | |
}* NodePool; | |
} | |
struct NP_CONTEXT___NP_PARAMETERS{ | |
uint ; | |
uint ReservedNodeCount; | |
struct NP_CONTEXT__NP_CALLBACKS{ | |
} Cb; | |
} | |
struct NTFS_EXTENDED_VOLUME_DATA{ | |
uint ByteCount; | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
uint BytesPerPhysicalSector; | |
uint16 LfsMajorVersion; | |
uint16 LfsMinorVersion; | |
uint MaxDeviceTrimExtentCount; | |
uint MaxDeviceTrimByteCount; | |
uint MaxVolumeTrimExtentCount; | |
uint MaxVolumeTrimByteCount; | |
} | |
struct NTFS_FILE_RECORD_INPUT_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FileReferenceNumber; | |
} | |
struct NTFS_FILE_RECORD_OUTPUT_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ; | |
uint FileRecordLength; | |
uint8 FileRecordBuffer; | |
} | |
struct NTFS_VOLUME_DATA_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} VolumeSerialNumber; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} NumberSectors; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TotalClusters; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FreeClusters; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TotalReserved; | |
uint BytesPerSector; | |
uint BytesPerCluster; | |
uint BytesPerFileRecordSegment; | |
uint ClustersPerFileRecordSegment; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MftValidDataLength; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MftStartLcn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Mft2StartLcn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MftZoneStart; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MftZoneEnd; | |
} | |
struct OBJECT_EVENT_INFO{ | |
struct _WMIGUIDOBJECT{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
} Event; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
struct _REGENTRY{ | |
struct _LIST_ENTRY ; | |
union $7414A2632EEFB962F92D19748410088A ___u1; | |
struct _DEVICE_OBJECT* PDO; | |
struct tagDATASOURCE* DataSource; | |
struct _KEVENT* Deregistered; | |
union _REGSTATE State; | |
uint MaxInstanceNames; | |
}* RegEntry; | |
} ___u1; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} GEObjectList; | |
struct tagGUIDENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainGEList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
uint ISCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ObjectHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ISHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint EventRefCount; | |
uint CollectRefCount; | |
struct _WMIP_GUIDENTRY_NONPAGED{ | |
struct _KEVENT CollectInProgress; | |
struct _WORK_QUEUE_ITEM LegacyWorkItem; | |
}* NonPaged; | |
uint64 LegacyEtwHandle; | |
uint LegacyEtwToken; | |
uint64 LegacyEnableContext; | |
struct _WMIP_SYNCHRONOUS_ETW_WORK{ | |
struct _LIST_ENTRY Link; | |
struct tagGUIDENTRY* GuidEntry; | |
struct _LIST_ENTRY WorkHead; | |
struct _LIST_ENTRY WaiterHead; | |
}* LegacyEtwSynchronous; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LegacyWorkHead; | |
uint LegacyEtwProviderCount; | |
}* GuidEntry; | |
uint Type; | |
union { | |
Callback* Callback; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* Irp; | |
} ___u5; | |
union { | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpObjectList; | |
} ___u6; | |
struct WMIEVENTQUEUE{ | |
uint8* Buffer; | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union $17F5F6B9B423D014088DA483A95A1998 ___u2; | |
union $BA041AB2AD4C696C73568B3B98A89B4C ___u3; | |
struct _GUID Guid; | |
uint ClientContext; | |
uint Flags; | |
}* LastWnode; | |
uint MaxBufferSize; | |
uint NextOffset; | |
uint EventsLost; | |
} HiPriority; | |
struct WMIEVENTQUEUE{ | |
uint8* Buffer; | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union $17F5F6B9B423D014088DA483A95A1998 ___u2; | |
union $BA041AB2AD4C696C73568B3B98A89B4C ___u3; | |
struct _GUID Guid; | |
uint ClientContext; | |
uint Flags; | |
}* LastWnode; | |
uint MaxBufferSize; | |
uint NextOffset; | |
uint EventsLost; | |
} LoPriority; | |
uint8 EnableRequestSent; | |
uint Flags; | |
}* GuidObject; | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union { | |
uint64 HistoricalContext; | |
struct { | |
uint Version; | |
uint Linkage; | |
} __s1; | |
} ___u2; | |
union { | |
uint CountLost; | |
void* KernelHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
} ___u3; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint ClientContext; | |
uint Flags; | |
}* NextWnode; | |
} | |
struct OFFSETINSTANCEDATAANDLENGTH{ | |
uint OffsetInstanceData; | |
uint LengthInstanceData; | |
} | |
struct PCI_AGP_EXTENDED_CAPABILITY{ | |
struct _PCI_AGP_ISOCH_STATUS{ | |
uint32 ErrorCode:2; | |
uint32 Rsvd1:1; | |
uint32 Isoch_L:3; | |
uint32 Isoch_Y:2; | |
uint32 Isoch_N:8; | |
uint32 Rsvd2:16; | |
} IsochStatus; | |
struct _PCI_AGP_CONTROL{ | |
uint32 Rsvd1:7; | |
uint32 GTLB_Enable:1; | |
uint32 AP_Enable:1; | |
uint32 CAL_Disable:1; | |
uint32 Rsvd2:22; | |
} AgpControl; | |
uint16 ApertureSize; | |
struct _PCI_AGP_APERTURE_PAGE_SIZE{ | |
uint16 PageSizeMask:11; | |
uint16 Rsvd1:1; | |
uint16 PageSizeSelect:4; | |
} AperturePageSize; | |
uint GartLow; | |
uint GartHigh; | |
struct _PCI_AGP_ISOCH_COMMAND{ | |
uint16 Rsvd1:6; | |
uint16 Isoch_Y:2; | |
uint16 Isoch_N:8; | |
} IsochCommand; | |
} | |
struct PCI_HT_CAPABILITY{ | |
struct _PCI_CAPABILITIES_HEADER{ | |
uint8 CapabilityID; | |
uint8 Next; | |
} Header; | |
union { | |
struct { | |
uint16 ; | |
uint16 CapabilityType:5; | |
} Generic; | |
struct { | |
uint16 Index:8; | |
uint16 Reserved:3; | |
uint16 CapabilityType:5; | |
} Interrupt; | |
struct { | |
uint16 Enable:1; | |
uint16 Fixed:1; | |
uint16 Reserved:9; | |
uint16 CapabilityType:5; | |
} MsiMapping; | |
} Command; | |
union { | |
uint InterruptDataPort; | |
struct { | |
uint32 Reserved:20; | |
uint32 AddressLow:12; | |
} MsiMapping; | |
} Offset04; | |
union { | |
struct { | |
uint ; | |
} MsiMapping; | |
} Offset08; | |
} | |
struct PCI_HT_INTERRUPT_INDEX_1{ | |
uint16 Reserved1; | |
uint8 LastInterrupt; | |
uint8 Reserved2; | |
} | |
struct PCI_HT_INTERRUPT_INDEX_N{ | |
union { | |
struct { | |
uint32 Mask:1; | |
uint32 Polarity:1; | |
uint32 MessageType:3; | |
uint32 RequestEOI:1; | |
uint32 DestinationMode:1; | |
uint32 MessageType3:1; | |
uint32 Destination:8; | |
uint32 Vector:8; | |
uint32 ExtendedAddress:8; | |
} bits; | |
uint AsULONG; | |
} LowPart; | |
union { | |
struct { | |
uint32 ExtendedDestination:24; | |
uint32 Reserved:6; | |
uint32 PassPW:1; | |
uint32 WaitingForEOI:1; | |
} bits; | |
uint AsULONG; | |
} HighPart; | |
} | |
struct PCI_MSIX_CAPABILITY{ | |
struct _PCI_CAPABILITIES_HEADER{ | |
uint8 CapabilityID; | |
uint8 Next; | |
} Header; | |
struct { | |
uint16 TableSize:11; | |
uint16 Reserved:3; | |
uint16 FunctionMask:1; | |
uint16 MSIXEnable:1; | |
} MessageControl; | |
struct MSIX_TABLE_POINTER{ | |
union { | |
struct { | |
uint32 BaseIndexRegister:3; | |
uint32 Reserved:29; | |
} __s0; | |
uint TableOffset; | |
} ___u0; | |
} MessageTable; | |
struct MSIX_TABLE_POINTER{ | |
union { | |
struct { | |
uint32 BaseIndexRegister:3; | |
uint32 Reserved:29; | |
} __s0; | |
uint TableOffset; | |
} ___u0; | |
} PBATable; | |
} | |
struct PCI_MSIX_TABLE_ENTRY{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MessageAddress; | |
uint MessageData; | |
struct { | |
uint32 Mask:1; | |
uint32 Reserved:15; | |
uint32 StLower:8; | |
uint32 StUpper:8; | |
} VectorControl; | |
} | |
struct PCI_MSI_CAPABILITY{ | |
struct _PCI_CAPABILITIES_HEADER{ | |
uint8 CapabilityID; | |
uint8 Next; | |
} Header; | |
struct _PCI_MSI_MESSAGE_CONTROL{ | |
uint16 MSIEnable:1; | |
uint16 MultipleMessageCapable:3; | |
uint16 MultipleMessageEnable:3; | |
uint16 CapableOf64Bits:1; | |
uint16 PerVectorMaskCapable:1; | |
uint16 Reserved:7; | |
} MessageControl; | |
union { | |
struct _PCI_MSI_MESSAGE_ADDRESS{ | |
uint32 Reserved:2; | |
uint32 Address:30; | |
} Register; | |
uint Raw; | |
} MessageAddressLower; | |
union { | |
struct { | |
uint16 MessageData; | |
uint16 Reserved; | |
uint MaskBits; | |
uint PendingBits; | |
} Option32Bit; | |
struct { | |
uint MessageAddressUpper; | |
uint16 MessageData; | |
uint16 Reserved; | |
uint MaskBits; | |
uint PendingBits; | |
} Option64Bit; | |
} ___u3; | |
} | |
struct PCI_MSI_CAPABILITY___PCI_MSI_MESSAGE_CONTROL{ | |
uint16 MSIEnable:1; | |
uint16 MultipleMessageCapable:3; | |
uint16 MultipleMessageEnable:3; | |
uint16 CapableOf64Bits:1; | |
uint16 PerVectorMaskCapable:1; | |
uint16 Reserved:7; | |
} | |
struct PCI_X_CAPABILITY{ | |
struct _PCI_CAPABILITIES_HEADER{ | |
uint8 CapabilityID; | |
uint8 Next; | |
} Header; | |
union { | |
struct { | |
uint16 ; | |
uint16 EnableRelaxedOrdering:1; | |
uint16 MaxMemoryReadByteCount:2; | |
uint16 MaxOutstandingSplitTransactions:3; | |
uint16 Reserved:9; | |
} bits; | |
uint16 AsUSHORT; | |
} Command; | |
union { | |
struct { | |
uint32 ; | |
uint32 DeviceNumber:5; | |
uint32 BusNumber:8; | |
uint32 Device64Bit:1; | |
uint32 Capable133MHz:1; | |
uint32 SplitCompletionDiscarded:1; | |
uint32 UnexpectedSplitCompletion:1; | |
uint32 DeviceComplexity:1; | |
uint32 DesignedMaxMemoryReadByteCount:2; | |
uint32 DesignedMaxOutstandingSplitTransactions:3; | |
uint32 DesignedMaxCumulativeReadSize:3; | |
uint32 ReceivedSplitCompletionErrorMessage:1; | |
uint32 CapablePCIX266:1; | |
uint32 CapablePCIX533:1; | |
} bits; | |
uint AsULONG; | |
} Status; | |
} | |
struct PC_DISK{ | |
void* _Device; | |
struct _DISK_GEOMETRY{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Cylinders; | |
_MEDIA_TYPE MediaType; | |
uint TracksPerCylinder; | |
uint SectorsPerTrack; | |
uint BytesPerSector; | |
} _Geometry; | |
uint64 _SectorCount; | |
uint _SectorShift; | |
_PARTITION_STYLE _Style; | |
void* _Buffer; | |
} | |
struct PC_ENVIRONMENT{ | |
} | |
struct PC_GPT{ | |
struct PC_DISK{ | |
void* _Device; | |
struct _DISK_GEOMETRY{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} Cylinders; | |
_MEDIA_TYPE MediaType; | |
uint TracksPerCylinder; | |
uint SectorsPerTrack; | |
uint BytesPerSector; | |
} _Geometry; | |
uint64 _SectorCount; | |
uint _SectorShift; | |
_PARTITION_STYLE _Style; | |
void* _Buffer; | |
}* _Disk; | |
} | |
struct PC_MBR{ | |
struct PC_DISK{ | |
void* _Device; | |
struct _DISK_GEOMETRY{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} Cylinders; | |
_MEDIA_TYPE MediaType; | |
uint TracksPerCylinder; | |
uint SectorsPerTrack; | |
uint BytesPerSector; | |
} _Geometry; | |
uint64 _SectorCount; | |
uint _SectorShift; | |
_PARTITION_STYLE _Style; | |
void* _Buffer; | |
}* ; | |
} | |
struct PC_RAW{ | |
struct PC_DISK{ | |
void* _Device; | |
struct _DISK_GEOMETRY{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} Cylinders; | |
_MEDIA_TYPE MediaType; | |
uint TracksPerCylinder; | |
uint SectorsPerTrack; | |
uint BytesPerSector; | |
} _Geometry; | |
uint64 _SectorCount; | |
uint _SectorShift; | |
_PARTITION_STYLE _Style; | |
void* _Buffer; | |
}* ; | |
} | |
struct PEPHANDLE__{ | |
int ; | |
} | |
struct PLUGPLAY_CONTROL_HANDLER_DATA{ | |
_PLUGPLAY_CONTROL_CLASS ; | |
uint ControlDataSize; | |
ControlFunction* ControlFunction; | |
uint8 ControlServerSiloOk; | |
} | |
struct POHANDLE__{ | |
int unused; | |
} | |
struct POP_FLUSH_VOLUME{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
int Count; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Wait; | |
uint8 Hold; | |
uint8 Release; | |
} | |
struct POP_MCB_CONTEXT{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
}* FirstMcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
}* Mcb; | |
uint64 Base; | |
} | |
struct POP_POWER_REQUEST_ENTRY{ | |
struct _PO_POWER_REQUEST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
uint SessionId; | |
uint SupportedRequestMask; | |
uint RequestOverrideMask; | |
int Id; | |
uint PowerRequestCount; | |
}* Request; | |
int Id; | |
} | |
struct POWERBROADCAST_SETTING{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} PowerSetting; | |
uint DataLength; | |
uint8 Data; | |
} | |
struct POWER_ACTION_POLICY{ | |
POWER_ACTION Action; | |
uint Flags; | |
uint EventCode; | |
} | |
struct POWER_STATE_HANDLER{ | |
POWER_STATE_HANDLER_TYPE Type; | |
uint8 RtcWake; | |
uint8 Spare; | |
} | |
struct POWER_STATE_NOTIFY_HANDLER{ | |
Handler* Handler; | |
void* Context; | |
} | |
struct PO_ENERGY_SAVER_SETTING{ | |
PO_ENERGY_SAVER_MODE Mode; | |
uint BatteryThreshold; | |
uint UserAway; | |
} | |
struct PO_ENERGY_SAVER_STATE_DATA{ | |
PO_ENERGY_SAVER_STATE Status; | |
} | |
struct PO_MEMORY_IMAGE{ | |
uint ; | |
uint ImageType; | |
uint CheckSum; | |
uint LengthSelf; | |
uint PageSelf; | |
uint PageSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} SystemTime; | |
uint64 InterruptTime; | |
uint64 FeatureFlags; | |
uint8 HiberFlags; | |
uint8 spare; | |
} | |
struct PPM_IDLESTATE_EVENT{ | |
uint NewState; | |
uint OldState; | |
uint64 Processors; | |
} | |
struct PPM_IDLE_ACCOUNTING{ | |
uint StateCount; | |
uint TotalTransitions; | |
uint ResetCount; | |
uint64 StartTime; | |
struct PPM_IDLE_STATE_ACCOUNTING{ | |
uint IdleTransitions; | |
uint FailedTransitions; | |
uint InvalidBucketIndex; | |
uint64 TotalTime; | |
uint IdleTimeBuckets; | |
} State; | |
} | |
struct PPM_IDLE_ACCOUNTING_EX{ | |
uint StateCount; | |
uint TotalTransitions; | |
uint ResetCount; | |
uint AbortCount; | |
uint64 StartTime; | |
struct PPM_IDLE_STATE_ACCOUNTING_EX{ | |
uint64 TotalTime; | |
uint IdleTransitions; | |
uint FailedTransitions; | |
uint InvalidBucketIndex; | |
uint MinTimeUs; | |
uint MaxTimeUs; | |
uint CancelledTransitions; | |
struct PPM_IDLE_STATE_BUCKET_EX{ | |
uint64 TotalTimeUs; | |
uint MinTimeUs; | |
uint MaxTimeUs; | |
uint Count; | |
} IdleTimeBuckets; | |
} State; | |
} | |
struct PPM_IDLE_STATE_ACCOUNTING{ | |
uint IdleTransitions; | |
uint FailedTransitions; | |
uint InvalidBucketIndex; | |
uint64 TotalTime; | |
uint IdleTimeBuckets; | |
} | |
struct PPM_IDLE_STATE_ACCOUNTING_EX{ | |
uint64 TotalTime; | |
uint IdleTransitions; | |
uint FailedTransitions; | |
uint InvalidBucketIndex; | |
uint MinTimeUs; | |
uint MaxTimeUs; | |
uint CancelledTransitions; | |
struct PPM_IDLE_STATE_BUCKET_EX{ | |
uint64 TotalTimeUs; | |
uint MinTimeUs; | |
uint MaxTimeUs; | |
uint Count; | |
} IdleTimeBuckets; | |
} | |
struct PPM_IDLE_STATE_BUCKET_EX{ | |
uint64 TotalTimeUs; | |
uint MinTimeUs; | |
uint MaxTimeUs; | |
uint Count; | |
} | |
struct PPM_PERFSTATE_DOMAIN_EVENT{ | |
uint State; | |
uint Latency; | |
uint Speed; | |
uint64 Processors; | |
} | |
struct PPM_PERFSTATE_EVENT{ | |
uint State; | |
uint Status; | |
uint Latency; | |
uint Speed; | |
uint Processor; | |
} | |
struct PPM_THERMALCHANGE_EVENT{ | |
uint Thermalraint; | |
uint64 Processors; | |
} | |
struct PPM_THERMAL_POLICY_EVENT{ | |
uint8 Mode; | |
uint64 Processors; | |
} | |
struct PPM_WMI_IDLE_STATE{ | |
uint Latency; | |
uint Power; | |
uint TimeCheck; | |
uint8 PromotePercent; | |
uint8 DemotePercent; | |
uint8 StateType; | |
uint8 Reserved; | |
uint StateFlags; | |
uint Context; | |
uint IdleHandler; | |
uint Reserved1; | |
} | |
struct PPM_WMI_IDLE_STATES{ | |
uint Type; | |
uint Count; | |
uint TargetState; | |
uint OldState; | |
uint64 TargetProcessors; | |
struct PPM_WMI_IDLE_STATE{ | |
uint Latency; | |
uint Power; | |
uint TimeCheck; | |
uint8 PromotePercent; | |
uint8 DemotePercent; | |
uint8 StateType; | |
uint8 Reserved; | |
uint StateFlags; | |
uint Context; | |
uint IdleHandler; | |
uint Reserved1; | |
} State; | |
} | |
struct PPM_WMI_IDLE_STATES_EX{ | |
uint Type; | |
uint Count; | |
uint TargetState; | |
uint OldState; | |
void* TargetProcessors; | |
struct PPM_WMI_IDLE_STATE{ | |
uint Latency; | |
uint Power; | |
uint TimeCheck; | |
uint8 PromotePercent; | |
uint8 DemotePercent; | |
uint8 StateType; | |
uint8 Reserved; | |
uint StateFlags; | |
uint Context; | |
uint IdleHandler; | |
uint Reserved1; | |
} State; | |
} | |
struct PPM_WMI_LEGACY_PERFSTATE{ | |
uint Frequency; | |
uint Flags; | |
uint PercentFrequency; | |
} | |
struct PPM_WMI_PERF_STATE{ | |
uint Frequency; | |
uint Power; | |
uint8 PercentFrequency; | |
uint8 IncreaseLevel; | |
uint8 DecreaseLevel; | |
uint8 Type; | |
uint IncreaseTime; | |
uint DecreaseTime; | |
uint64 Control; | |
uint64 Status; | |
uint HitCount; | |
uint Reserved1; | |
uint64 Reserved2; | |
uint64 Reserved3; | |
} | |
struct PPM_WMI_PERF_STATES{ | |
uint Count; | |
uint MaxFrequency; | |
uint CurrentState; | |
uint MaxPerfState; | |
uint MinPerfState; | |
uint LowestPerfState; | |
uint Thermalraint; | |
uint8 BusyAdjThreshold; | |
uint8 PolicyType; | |
uint8 Type; | |
uint8 Reserved; | |
uint TimerInterval; | |
uint64 TargetProcessors; | |
uint PStateHandler; | |
uint PStateContext; | |
uint TStateHandler; | |
uint TStateContext; | |
uint FeedbackHandler; | |
uint Reserved1; | |
uint64 Reserved2; | |
struct PPM_WMI_PERF_STATE{ | |
uint Frequency; | |
uint Power; | |
uint8 PercentFrequency; | |
uint8 IncreaseLevel; | |
uint8 DecreaseLevel; | |
uint8 Type; | |
uint IncreaseTime; | |
uint DecreaseTime; | |
uint64 Control; | |
uint64 Status; | |
uint HitCount; | |
uint Reserved1; | |
uint64 Reserved2; | |
uint64 Reserved3; | |
} State; | |
} | |
struct PPM_WMI_PERF_STATES_EX{ | |
uint Count; | |
uint MaxFrequency; | |
uint CurrentState; | |
uint MaxPerfState; | |
uint MinPerfState; | |
uint LowestPerfState; | |
uint Thermalraint; | |
uint8 BusyAdjThreshold; | |
uint8 PolicyType; | |
uint8 Type; | |
uint8 Reserved; | |
uint TimerInterval; | |
void* TargetProcessors; | |
uint PStateHandler; | |
uint PStateContext; | |
uint TStateHandler; | |
uint TStateContext; | |
uint FeedbackHandler; | |
uint Reserved1; | |
uint64 Reserved2; | |
struct PPM_WMI_PERF_STATE{ | |
uint Frequency; | |
uint Power; | |
uint8 PercentFrequency; | |
uint8 IncreaseLevel; | |
uint8 DecreaseLevel; | |
uint8 Type; | |
uint IncreaseTime; | |
uint DecreaseTime; | |
uint64 Control; | |
uint64 Status; | |
uint HitCount; | |
uint Reserved1; | |
uint64 Reserved2; | |
uint64 Reserved3; | |
} State; | |
} | |
struct PROCESSOR_IDLESTATE_INFO{ | |
uint TimeCheck; | |
uint8 DemotePercent; | |
uint8 PromotePercent; | |
uint8 Spare; | |
} | |
struct PROCESSOR_IDLESTATE_POLICY{ | |
uint16 Revision; | |
union { | |
uint16 AsUSHORT; | |
struct { | |
uint16 AllowScaling:1; | |
uint16 Disabled:1; | |
uint16 Reserved:14; | |
} __s1; | |
} Flags; | |
uint PolicyCount; | |
struct PROCESSOR_IDLESTATE_INFO{ | |
uint TimeCheck; | |
uint8 DemotePercent; | |
uint8 PromotePercent; | |
uint8 Spare; | |
} Policy; | |
} | |
struct PROCESSOR_IDLE_TIMES{ | |
uint64 StartTime; | |
uint64 EndTime; | |
uint Reserved; | |
} | |
struct PROCESSOR_OBJECT_INFO{ | |
uint PhysicalID; | |
uint PBlkAddress; | |
uint8 PBlkLength; | |
} | |
struct PROCESSOR_OBJECT_INFO_EX{ | |
uint PhysicalID; | |
uint PBlkAddress; | |
uint8 PBlkLength; | |
uint InitialApicId; | |
} | |
struct PROCESSOR_PERFSTATE_POLICY{ | |
uint Revision; | |
uint8 MaxThrottle; | |
uint8 MinThrottle; | |
uint8 BusyAdjThreshold; | |
union { | |
uint8 Spare; | |
union { | |
uint8 AsUCHAR; | |
struct { | |
uint8 NoDomainAccounting:1; | |
uint8 IncreasePolicy:2; | |
uint8 DecreasePolicy:2; | |
uint8 Reserved:3; | |
} __s1; | |
} Flags; | |
} ___u4; | |
uint TimeCheck; | |
uint IncreaseTime; | |
uint DecreaseTime; | |
uint IncreasePercent; | |
uint DecreasePercent; | |
} | |
struct PROCESS_DRIVER_CONTEXT{ | |
uint8 Add; | |
} | |
struct PTRCACHE{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ; | |
struct tagInstanceSet{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} GuidISList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DSISList; | |
struct tagGUIDENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainGEList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
uint ISCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ObjectHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ISHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint EventRefCount; | |
uint CollectRefCount; | |
struct _WMIP_GUIDENTRY_NONPAGED{ | |
struct _KEVENT CollectInProgress; | |
struct _WORK_QUEUE_ITEM LegacyWorkItem; | |
}* NonPaged; | |
uint64 LegacyEtwHandle; | |
uint LegacyEtwToken; | |
uint64 LegacyEnableContext; | |
struct _WMIP_SYNCHRONOUS_ETW_WORK{ | |
struct _LIST_ENTRY Link; | |
struct tagGUIDENTRY* GuidEntry; | |
struct _LIST_ENTRY WorkHead; | |
struct _LIST_ENTRY WaiterHead; | |
}* LegacyEtwSynchronous; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LegacyWorkHead; | |
uint LegacyEtwProviderCount; | |
}* GuidEntry; | |
struct tagDATASOURCE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainDSList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ISHead; | |
uint ProviderId; | |
uint ProcessId; | |
uint MofResourceCount; | |
struct MOFRESOURCE{ | |
struct _LIST_ENTRY MainMRList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
wchar_t* RegistryPath; | |
wchar_t* MofResourceName; | |
}** MofResources; | |
struct MOFRESOURCE{ | |
struct _LIST_ENTRY MainMRList; | |
uint Flags; | |
int RefCount; | |
uint Signature; | |
wchar_t* RegistryPath; | |
wchar_t* MofResourceName; | |
}* StaticMofResources; | |
}* DataSource; | |
uint Count; | |
uint WADInstanceNameSize; | |
uint ProviderId; | |
union { | |
struct ISBASENAME{ | |
uint BaseIndex; | |
wchar_t BaseName; | |
}* IsBaseName; | |
struct ISSTATICENAMES{ | |
wchar_t* StaticNamePtr; | |
}* IsStaticNames; | |
} ___u10; | |
}* InstanceSet; | |
} | |
struct QUERY_CONTEXT{ | |
struct _DEVICE_NODE{ | |
struct _DEVICE_NODE* ; | |
struct _DEVICE_NODE* Child; | |
struct _DEVICE_NODE* Parent; | |
struct _DEVICE_NODE* LastChild; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* PhysicalDeviceObject; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} InstancePath; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ServiceName; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* PendingIrp; | |
struct _POP_FX_DEVICE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* Irp; | |
struct _POP_IRP_DATA{ | |
struct _LIST_ENTRY Link; | |
struct _IRP* Irp; | |
struct _DEVICE_OBJECT* Pdo; | |
struct _DEVICE_OBJECT* TargetDevice; | |
struct _DEVICE_OBJECT* CurrentDevice; | |
uint64 WatchdogStart; | |
struct _KTIMER WatchdogTimer; | |
struct _KDPC WatchdogDpc; | |
uint8 MinorFunction; | |
_POWER_STATE_TYPE PowerStateType; | |
union _POWER_STATE PowerState; | |
uint8 WatchdogEnabled; | |
struct _POP_FX_DEVICE* FxDevice; | |
uint8 SystemTransition; | |
uint8 NotifyPEP; | |
union $232730CC8E4136B75E91A7FC956FAE90 ___u15; | |
}* IrpData; | |
union _POP_FX_DEVICE_STATUS{ | |
int Value; | |
struct $BF01A2388BF57D4C31A65726CFD79900 __s1; | |
} Status; | |
int PowerReqCall; | |
int PowerNotReqCall; | |
struct _DEVICE_NODE{ | |
struct _DEVICE_NODE* ; | |
struct _DEVICE_NODE* Child; | |
struct _DEVICE_NODE* Parent; | |
struct _DEVICE_NODE* LastChild; | |
struct _DEVICE_OBJECT* PhysicalDeviceObject; | |
struct _UNICODE_STRING InstancePath; | |
struct _UNICODE_STRING ServiceName; | |
struct _IRP* PendingIrp; | |
struct _POP_FX_DEVICE* FxDevice; | |
int FxDeviceLock; | |
struct _KEVENT FxRemoveEvent; | |
int FxActivationCount; | |
int FxSleepCount; | |
struct _POP_FX_PLUGIN* Plugin; | |
uint Level; | |
union _POWER_STATE CurrentPowerState; | |
struct _PO_DEVICE_NOTIFY Notify; | |
struct _PO_IRP_MANAGER PoIrpManager; | |
struct _UNICODE_STRING UniqueId; | |
uint PowerFlags; | |
_PNP_DEVNODE_STATE State; | |
_PNP_DEVNODE_STATE PreviousState; | |
_PNP_DEVNODE_STATE StateHistory; | |
}* DevNode; | |
struct PEPHANDLE__{ | |
int ; | |
}* DpmContext; | |
struct _POP_FX_PLUGIN{ | |
struct _LIST_ENTRY Link; | |
uint Version; | |
uint64 Flags; | |
struct _KQUEUE WorkQueue; | |
AcceptDeviceNotification* AcceptDeviceNotification; | |
AcceptProcessorNotification* AcceptProcessorNotification; | |
AcceptAcpiNotification* AcceptAcpiNotification; | |
uint WorkOrderCount; | |
struct _POP_FX_WORK_ORDER WorkOrders; | |
}* Plugin; | |
struct PEPHANDLE__{ | |
int ; | |
}* PluginHandle; | |
struct _POP_FX_PLUGIN{ | |
struct _LIST_ENTRY Link; | |
uint Version; | |
uint64 Flags; | |
struct _KQUEUE WorkQueue; | |
AcceptDeviceNotification* AcceptDeviceNotification; | |
AcceptProcessorNotification* AcceptProcessorNotification; | |
AcceptAcpiNotification* AcceptAcpiNotification; | |
uint WorkOrderCount; | |
struct _POP_FX_WORK_ORDER WorkOrders; | |
}* AcpiPlugin; | |
struct PEPHANDLE__{ | |
int ; | |
}* AcpiPluginHandle; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* TargetDevice; | |
struct _POP_FX_DRIVER_CALLBACKS{ | |
ComponentActive* ComponentActive; | |
ComponentIdle* ComponentIdle; | |
ComponentIdleState* ComponentIdleState; | |
DevicePowerRequired* DevicePowerRequired; | |
DevicePowerNotRequired* DevicePowerNotRequired; | |
PowerControl* PowerControl; | |
ComponentCriticalTransition* ComponentCriticalTransition; | |
} Callbacks; | |
void* DriverContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AcpiLink; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} DeviceId; | |
struct _IO_REMOVE_LOCK{ | |
struct _IO_REMOVE_LOCK_COMMON_BLOCK Common; | |
} RemoveLock; | |
struct _IO_REMOVE_LOCK{ | |
struct _IO_REMOVE_LOCK_COMMON_BLOCK Common; | |
} AcpiRemoveLock; | |
struct _POP_FX_WORK_ORDER{ | |
struct _WORK_QUEUE_ITEM WorkItem; | |
int WorkCount; | |
void* Context; | |
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO* WatchdogTimerInfo; | |
} WorkOrder; | |
uint IdleLock; | |
struct _KTIMER{ | |
struct _DISPATCHER_HEADER ; | |
} IdleTimer; | |
struct _KDPC{ | |
ULONG TargetInfoAsUlong; | |
UCHAR Type; | |
UCHAR Importance; | |
USHORT Number; | |
struct _SINGLE_LIST_ENTRY ; | |
} IdleDpc; | |
uint64 IdleTimeout; | |
uint64 IdleStamp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* NextIrpDeviceObject; | |
}* FxDevice; | |
int FxDeviceLock; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
} FxRemoveEvent; | |
int FxActivationCount; | |
int FxSleepCount; | |
struct _POP_FX_PLUGIN{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
uint Version; | |
uint64 Flags; | |
struct _KQUEUE{ | |
struct _DISPATCHER_HEADER ; | |
} WorkQueue; | |
AcceptDeviceNotification* AcceptDeviceNotification; | |
AcceptProcessorNotification* AcceptProcessorNotification; | |
AcceptAcpiNotification* AcceptAcpiNotification; | |
uint WorkOrderCount; | |
struct _POP_FX_WORK_ORDER{ | |
struct _WORK_QUEUE_ITEM WorkItem; | |
int WorkCount; | |
void* Context; | |
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO* WatchdogTimerInfo; | |
} WorkOrders; | |
}* Plugin; | |
uint Level; | |
union _POWER_STATE{ | |
SYSTEM_POWER_STATE SystemState; | |
DEVICE_POWER_STATE DeviceState; | |
} CurrentPowerState; | |
struct _PO_DEVICE_NOTIFY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PowerChildren; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PowerParents; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* TargetDevice; | |
uint8 OrderLevel; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
wchar_t* DeviceName; | |
wchar_t* DriverName; | |
uint ChildCount; | |
uint ActiveChild; | |
uint ParentCount; | |
uint ActiveParent; | |
} Notify; | |
struct _PO_IRP_MANAGER{ | |
struct _PO_IRP_QUEUE{ | |
struct _IRP* CurrentIrp; | |
struct _IRP* PendingIrpList; | |
} DeviceIrpQueue; | |
struct _PO_IRP_QUEUE{ | |
struct _IRP* CurrentIrp; | |
struct _IRP* PendingIrpList; | |
} SystemIrpQueue; | |
} PoIrpManager; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} UniqueId; | |
uint PowerFlags; | |
_PNP_DEVNODE_STATE State; | |
_PNP_DEVNODE_STATE PreviousState; | |
_PNP_DEVNODE_STATE StateHistory; | |
}* DeviceNode; | |
struct _ADD_CONTEXT{ | |
uint DriverStartType; | |
uint8 LoadDriver; | |
}* AddContext; | |
struct _DRIVER_LIST_ENTRY{ | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DRIVER_LIST_ENTRY* NextEntry; | |
}* DriverLists; | |
} | |
struct RANGE_USERDATA_HEADER{ | |
uint Count; | |
} | |
struct READ_FILE_USN_DATA{ | |
uint16 ; | |
uint16 MaxMajorVersion; | |
} | |
struct READ_USN_JOURNAL_DATA_V0{ | |
int64 StartUsn; | |
uint ReasonMask; | |
uint ReturnOnlyOnClose; | |
uint64 Timeout; | |
uint64 BytesToWaitFor; | |
uint64 UsnJournalID; | |
} | |
struct READ_USN_JOURNAL_DATA_V1{ | |
int64 StartUsn; | |
uint ReasonMask; | |
uint ReturnOnlyOnClose; | |
uint64 Timeout; | |
uint64 BytesToWaitFor; | |
uint64 UsnJournalID; | |
uint16 MinMajorVersion; | |
uint16 MaxMajorVersion; | |
} | |
struct REFS_VOLUME_DATA_BUFFER{ | |
uint ByteCount; | |
uint MajorVersion; | |
uint MinorVersion; | |
uint BytesPerPhysicalSector; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} VolumeSerialNumber; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} NumberSectors; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TotalClusters; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FreeClusters; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TotalReserved; | |
uint BytesPerSector; | |
uint BytesPerCluster; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MaximumSizeOfResidentFile; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Reserved; | |
} | |
struct RENAME_UOW_CONTEXT_{ | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union { | |
struct _CM_KEY_HASH{ | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} ; | |
struct { | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} __s1; | |
} ___u8; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} KcbPushlock; | |
union { | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
}* Owner; | |
int SharedCount; | |
} ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK{ | |
uint32 Compressed:1; | |
uint32 RefCount:31; | |
union { | |
struct _CM_NAME_HASH NameHash; | |
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1; | |
} ___u2; | |
}* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE{ | |
uint Cell; | |
uint ConvKey; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} List; | |
uint DescriptorLength; | |
uint RealRefCount; | |
struct _SECURITY_DESCRIPTOR_RELATIVE{ | |
uint8 Revision; | |
uint8 Sbz1; | |
uint16 Control; | |
uint Owner; | |
uint Group; | |
uint Sacl; | |
uint Dacl; | |
} Descriptor; | |
}* CachedSecurity; | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union { | |
uint ValueList; | |
struct _CM_KEY_CONTROL_BLOCK* RealKcb; | |
} ___u1; | |
} ValueCache; | |
union { | |
struct _CM_INDEX_HINT_BLOCK{ | |
uint Count; | |
uint HashKey; | |
}* IndexHint; | |
uint HashKey; | |
uint SubKeyCount; | |
} ___u21; | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyListHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FreeListEntry; | |
} ___u22; | |
struct _CM_KEY_BODY{ | |
uint Type; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union $8440638E30A9331A41296104787125B0 ___u8; | |
struct _EX_PUSH_LOCK KcbPushlock; | |
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE* CachedSecurity; | |
struct _CACHED_CHILD_LIST ValueCache; | |
union $8F0591D9D3A7A30BBAE496525511E483 ___u21; | |
union $523FADD81025DDC728A1E47F6561D96B ___u22; | |
struct _CM_KEY_BODY* KeyBodyArray; | |
}* KeyControlBlock; | |
struct _CM_NOTIFY_BLOCK{ | |
struct _LIST_ENTRY HiveList; | |
struct _LIST_ENTRY PostList; | |
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock; | |
struct _CM_KEY_BODY* KeyBody; | |
uint32 Filter:30; | |
uint32 WatchTree:1; | |
uint32 NotifyPending:1; | |
struct _SECURITY_SUBJECT_CONTEXT SubjectContext; | |
}* NotifyBlock; | |
void* ProcessID; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyList; | |
uint32 Flags:16; | |
uint32 HandleTags:16; | |
union _CM_TRANS_PTR{ | |
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0; | |
void* TransPtr; | |
} Trans; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* KtmUow; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ContextListHead; | |
}* KeyBodyArray; | |
}* OldParent; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union { | |
struct _CM_KEY_HASH{ | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} ; | |
struct { | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} __s1; | |
} ___u8; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} KcbPushlock; | |
union { | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
}* Owner; | |
int SharedCount; | |
} ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK{ | |
uint32 Compressed:1; | |
uint32 RefCount:31; | |
union { | |
struct _CM_NAME_HASH NameHash; | |
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1; | |
} ___u2; | |
}* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE{ | |
uint Cell; | |
uint ConvKey; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} List; | |
uint DescriptorLength; | |
uint RealRefCount; | |
struct _SECURITY_DESCRIPTOR_RELATIVE{ | |
uint8 Revision; | |
uint8 Sbz1; | |
uint16 Control; | |
uint Owner; | |
uint Group; | |
uint Sacl; | |
uint Dacl; | |
} Descriptor; | |
}* CachedSecurity; | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union { | |
uint ValueList; | |
struct _CM_KEY_CONTROL_BLOCK* RealKcb; | |
} ___u1; | |
} ValueCache; | |
union { | |
struct _CM_INDEX_HINT_BLOCK{ | |
uint Count; | |
uint HashKey; | |
}* IndexHint; | |
uint HashKey; | |
uint SubKeyCount; | |
} ___u21; | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyListHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FreeListEntry; | |
} ___u22; | |
struct _CM_KEY_BODY{ | |
uint Type; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union $8440638E30A9331A41296104787125B0 ___u8; | |
struct _EX_PUSH_LOCK KcbPushlock; | |
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE* CachedSecurity; | |
struct _CACHED_CHILD_LIST ValueCache; | |
union $8F0591D9D3A7A30BBAE496525511E483 ___u21; | |
union $523FADD81025DDC728A1E47F6561D96B ___u22; | |
struct _CM_KEY_BODY* KeyBodyArray; | |
}* KeyControlBlock; | |
struct _CM_NOTIFY_BLOCK{ | |
struct _LIST_ENTRY HiveList; | |
struct _LIST_ENTRY PostList; | |
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock; | |
struct _CM_KEY_BODY* KeyBody; | |
uint32 Filter:30; | |
uint32 WatchTree:1; | |
uint32 NotifyPending:1; | |
struct _SECURITY_SUBJECT_CONTEXT SubjectContext; | |
}* NotifyBlock; | |
void* ProcessID; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyList; | |
uint32 Flags:16; | |
uint32 HandleTags:16; | |
union _CM_TRANS_PTR{ | |
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0; | |
void* TransPtr; | |
} Trans; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* KtmUow; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ContextListHead; | |
}* KeyBodyArray; | |
}* NewParent; | |
} | |
struct RETRIEVAL_POINTERS_BUFFER{ | |
uint ExtentCount; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingVcn; | |
struct { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} NextVcn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Lcn; | |
} Extents; | |
} | |
struct ROUTING_TOKEN{ | |
void* LinkNode; | |
uint StaticVector; | |
uint8 Flags; | |
} | |
struct RPC_CLIENT_INFORMATION1{ | |
uint8* UserName; | |
uint8* ComputerName; | |
uint16 Privilege; | |
uint AuthFlags; | |
} | |
struct RPC_DISPATCH_TABLE{ | |
uint DispatchTableCount; | |
DispatchTable** DispatchTable; | |
int Reserved; | |
} | |
struct RPC_ENDPOINT_TEMPLATEA{ | |
uint Version; | |
uint8* ProtSeq; | |
uint8* Endpoint; | |
void* SecurityDescriptor; | |
uint Backlog; | |
} | |
struct RPC_ENDPOINT_TEMPLATEW{ | |
uint Version; | |
uint16* ProtSeq; | |
uint16* Endpoint; | |
void* SecurityDescriptor; | |
uint Backlog; | |
} | |
struct RPC_IF_ID_VECTOR{ | |
uint Count; | |
struct _RPC_IF_ID{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Uuid; | |
uint16 VersMajor; | |
uint16 VersMinor; | |
}* IfId; | |
} | |
struct RPC_INTERFACE_TEMPLATEA{ | |
uint Version; | |
void* IfSpec; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* MgrTypeUuid; | |
void* MgrEpv; | |
uint Flags; | |
uint MaxCalls; | |
uint MaxRpcSize; | |
IfCallback* IfCallback; | |
struct _UUID_VECTOR{ | |
uint Count; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* Uuid; | |
}* UuidVector; | |
uint8* Annotation; | |
void* SecurityDescriptor; | |
} | |
struct RPC_INTERFACE_TEMPLATEW{ | |
uint Version; | |
void* IfSpec; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* MgrTypeUuid; | |
void* MgrEpv; | |
uint Flags; | |
uint MaxCalls; | |
uint MaxRpcSize; | |
IfCallback* IfCallback; | |
struct _UUID_VECTOR{ | |
uint Count; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* Uuid; | |
}* UuidVector; | |
uint16* Annotation; | |
void* SecurityDescriptor; | |
} | |
struct RPC_STATS_VECTOR{ | |
uint Count; | |
uint Stats; | |
} | |
struct RTL_ACE_DATA{ | |
uint8 AceType; | |
uint8 InheritFlags; | |
uint8 AceFlags; | |
uint Mask; | |
void** Sid; | |
} | |
struct RegInfo{ | |
uint RiSegSs; | |
uint RiEsp; | |
uint RiEFlags; | |
uint RiSegCs; | |
uint RiEip; | |
uint RiTrapFrame; | |
uint RiCsLimit; | |
uint RiCsBase; | |
uint RiCsFlags; | |
uint RiSsLimit; | |
uint RiSsBase; | |
uint RiSsFlags; | |
uint RiPrefixFlags; | |
uint RiOperand; | |
} | |
struct RegistrationNode{ | |
uint Next; | |
uint Handler; | |
uint EH4ScopeTable; | |
uint TryLevel; | |
} | |
struct SCOPE_ID{ | |
union { | |
struct { | |
uint32 Zone:28; | |
uint32 Level:4; | |
} __s0; | |
uint Value; | |
} ___u0; | |
} | |
struct SC_ALLOCATION{ | |
} | |
struct SC_DISPATCH{ | |
} | |
struct SC_HANDLE__{ | |
int ; | |
} | |
struct SC_PACKET{ | |
struct SC_PACKET* ; | |
struct SC_PACKET* _ParentPacket; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _ChildListHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _ChildListEntry; | |
int _RefCount; | |
uint _Flags; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* ; | |
}* _Irp; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* _Event; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* _Mdl; | |
uint64 _Param1; | |
uint64 _Offset; | |
uint _Length; | |
uint _Column; | |
uint _Copy; | |
int _CopiesMask; | |
uint8 _Function; | |
_SC_OPERATION _Operation; | |
_SC_STATE _State; | |
uint8 _AllocationIndex; | |
int _RepairMask; | |
int _Status; | |
uint _Priority; | |
uint64 _Param2; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _QueueListEntry; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _BucketListEntry; | |
struct SC_DISPATCH{ | |
}* _Owner; | |
struct SC_DISPATCH{ | |
}* _Object; | |
} | |
struct SC_SEQUENTIAL{ | |
struct SC_PACKET{ | |
struct SC_PACKET* ; | |
struct SC_PACKET* _ParentPacket; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _ChildListHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _ChildListEntry; | |
int _RefCount; | |
uint _Flags; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* _Irp; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
}* _Event; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* _Mdl; | |
uint64 _Param1; | |
uint64 _Offset; | |
uint _Length; | |
uint _Column; | |
uint _Copy; | |
int _CopiesMask; | |
uint8 _Function; | |
_SC_OPERATION _Operation; | |
_SC_STATE _State; | |
uint8 _AllocationIndex; | |
int _RepairMask; | |
int _Status; | |
uint _Priority; | |
uint64 _Param2; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _QueueListEntry; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _BucketListEntry; | |
struct SC_DISPATCH{ | |
}* _Owner; | |
struct SC_DISPATCH{ | |
}* _Object; | |
}* _Packet; | |
void* _Mapping; | |
void* _Param1; | |
uint _Length; | |
uint8 _InUse; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} _ListHead; | |
void* _Lock; | |
} | |
struct SERVICE_STATUS_HANDLE__{ | |
int unused; | |
} | |
struct SERVICE_TRIGGER_CUSTOM_STATE_ID{ | |
uint ; | |
} | |
struct SET_POWER_SETTING_VALUE{ | |
uint ; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
SYSTEM_POWER_CONDITION PowerCondition; | |
uint DataLength; | |
uint8 Data; | |
} | |
struct SHELLHOOKINFO{ | |
struct HWND__{ | |
int ; | |
}* hwnd; | |
struct tagRECT{ | |
int left; | |
int top; | |
int right; | |
int bottom; | |
} rc; | |
} | |
struct SLIT_TABLE{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint64 LocalityCount; | |
} | |
struct SMBIOSVERSIONINFO{ | |
uint8 Used20CallingMethod; | |
uint8 SMBiosMajorVersion; | |
uint8 SMBiosMinorVersion; | |
uint8 DMIBiosRevision; | |
} | |
struct SMBIOS_EVENTLOG_INFO{ | |
uint16 LogTypeDescLength; | |
uint8 LogHeaderDescExists; | |
uint8 Reserved; | |
uint16 LogAreaLength; | |
uint16 LogHeaderStart; | |
uint16 LogDataStart; | |
uint8 AccessMethod; | |
uint8 LogStatus; | |
uint LogChangeToken; | |
uint AccessMethodAddress; | |
uint8 LogHeaderFormat; | |
uint8 NumberLogTypeDesc; | |
uint8 LengthEachLogTypeDesc; | |
uint8 VariableData; | |
} | |
struct SP_RESILIENCY_INFO{ | |
_SP_RESILIENCY_TYPE Type; | |
uint FaultTolerance; | |
uint NumberOfCopies; | |
uint NumberOfGroups; | |
uint NumberOfColumns; | |
uint Interleave; | |
} | |
struct SSPCallCipherTextData{ | |
uint cbCipherText; | |
uint8* pbCipherText; | |
uint cbCiphersUsed; | |
uint8* pbCiphersUsed; | |
uint cbCipherKey; | |
uint8* pbCipherKey; | |
} | |
struct SSPCallParameter{ | |
uint cbData; | |
uint8* pbData; | |
} | |
struct SSPCallParameters{ | |
uint cParams; | |
uint cbData; | |
uint8* pbData; | |
} | |
struct STARTING_LCN_INPUT_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingLcn; | |
} | |
struct STARTING_LCN_INPUT_BUFFER_EX{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ; | |
uint Flags; | |
} | |
struct STARTING_VCN_INPUT_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingVcn; | |
} | |
struct STORAGE_BREAK_RESERVATION_REQUEST{ | |
uint ; | |
uint8 _unused; | |
uint8 PathId; | |
uint8 TargetId; | |
uint8 Lun; | |
} | |
struct SYSTEM_BATTERY_STATE{ | |
uint8 AcOnLine; | |
uint8 BatteryPresent; | |
uint8 Charging; | |
uint8 Discharging; | |
uint8 Spare1; | |
} | |
struct SYSTEM_POWER_CAPABILITIES{ | |
uint8 PowerButtonPresent; | |
uint8 SleepButtonPresent; | |
uint8 LidPresent; | |
uint8 SystemS1; | |
uint8 SystemS2; | |
uint8 SystemS3; | |
uint8 SystemS4; | |
uint8 SystemS5; | |
uint8 HiberFilePresent; | |
uint8 FullWake; | |
uint8 VideoDimPresent; | |
uint8 ApmPresent; | |
uint8 UpsPresent; | |
uint8 ThermalControl; | |
uint8 ProcessorThrottle; | |
uint8 ProcessorMinThrottle; | |
uint8 ProcessorMaxThrottle; | |
uint8 FastSystemS4; | |
uint8 Hiberboot; | |
uint8 WakeAlarmPresent; | |
uint8 AoAc; | |
uint8 DiskSpinDown; | |
uint8 HiberFileType; | |
uint8 AoAcConnectivitySupported; | |
uint8 spare3; | |
} | |
struct SYSTEM_POWER_LEVEL{ | |
uint8 Enable; | |
uint8 Spare; | |
} | |
struct ScFrame{ | |
uint SavedEbp; | |
uint SavedEdi; | |
uint SavedEsi; | |
uint SavedEbx; | |
uint Return; | |
uint SwapIrql; | |
} | |
struct ScopeTable{ | |
uint GSCookieOffset; | |
uint GSCookieXOROffset; | |
uint EHCookieOffset; | |
uint EHCookieXOROffset; | |
uint ScopeRecord; | |
} | |
struct ScopeTableRecord{ | |
uint EnclosingLevel; | |
uint FilterFunc; | |
union { | |
uint HandlerAddress; | |
uint FinallyFunc; | |
} ___u2; | |
} | |
struct SpcsFrame{ | |
uint ReturnAddress; | |
uint ProcessorState; | |
} | |
struct SsFrame{ | |
uint SavedEbp; | |
uint ReturnAddress; | |
uint SsProcessorState; | |
} | |
struct StEtaHelper{ | |
} | |
struct StRpDeviceIoHelper{ | |
} | |
struct TESTHOOKCALLBACK_REGISTRATION_STRUCT{ | |
uint CallbackIndex; | |
Callback* Callback; | |
} | |
struct TUNNEL{ | |
struct _FAST_MUTEX{ | |
LONG Count; | |
void* ; | |
} Mutex; | |
struct _RTL_SPLAY_LINKS{ | |
struct _RTL_SPLAY_LINKS* Parent; | |
struct _RTL_SPLAY_LINKS* LeftChild; | |
struct _RTL_SPLAY_LINKS* RightChild; | |
}* Cache; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerQueue; | |
uint16 NumEntries; | |
} | |
struct TUNNEL_NODE{ | |
struct _RTL_SPLAY_LINKS{ | |
struct _RTL_SPLAY_LINKS* Parent; | |
struct _RTL_SPLAY_LINKS* LeftChild; | |
struct _RTL_SPLAY_LINKS* RightChild; | |
} CacheLinks; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListLinks; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint64 DirKey; | |
uint Flags; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} LongName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ShortName; | |
void* TunnelData; | |
uint TunnelDataLength; | |
} | |
struct UNICODE_STRING3264{ | |
uint16 Length; | |
uint16 MaximumLength; | |
union { | |
wchar_t* Buffer; | |
uint64 Dummy; | |
} ___u2; | |
} | |
struct USN_JOURNAL_DATA_V0{ | |
uint64 UsnJournalID; | |
int64 FirstUsn; | |
int64 NextUsn; | |
int64 LowestValidUsn; | |
int64 MaxUsn; | |
uint64 MaximumSize; | |
uint64 AllocationDelta; | |
} | |
struct USN_JOURNAL_DATA_V1{ | |
uint64 UsnJournalID; | |
int64 FirstUsn; | |
int64 NextUsn; | |
int64 LowestValidUsn; | |
int64 MaxUsn; | |
uint64 MaximumSize; | |
uint64 AllocationDelta; | |
uint16 MinSupportedMajorVersion; | |
uint16 MaxSupportedMajorVersion; | |
} | |
struct USN_JOURNAL_DATA_V2{ | |
uint64 UsnJournalID; | |
int64 FirstUsn; | |
int64 NextUsn; | |
int64 LowestValidUsn; | |
int64 MaxUsn; | |
uint64 MaximumSize; | |
uint64 AllocationDelta; | |
uint16 MinSupportedMajorVersion; | |
uint16 MaxSupportedMajorVersion; | |
uint Flags; | |
uint64 RangeTrackChunkSize; | |
int64 RangeTrackFileSizeThreshold; | |
} | |
struct USN_RANGE_TRACK_OUTPUT{ | |
int64 Usn; | |
} | |
struct USN_RECORD_COMMON_HEADER{ | |
uint ; | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
} | |
struct USN_RECORD_EXTENT{ | |
int64 Offset; | |
int64 Length; | |
} | |
struct USN_RECORD_V2{ | |
uint RecordLength; | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
uint64 FileReferenceNumber; | |
uint64 ParentFileReferenceNumber; | |
int64 Usn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint Reason; | |
uint SourceInfo; | |
uint SecurityId; | |
uint FileAttributes; | |
uint16 FileNameLength; | |
uint16 FileNameOffset; | |
wchar_t FileName; | |
} | |
struct USN_RECORD_V3{ | |
uint RecordLength; | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
struct _FILE_ID_128{ | |
uint8 ; | |
} FileReferenceNumber; | |
struct _FILE_ID_128{ | |
uint8 ; | |
} ParentFileReferenceNumber; | |
int64 Usn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint Reason; | |
uint SourceInfo; | |
uint SecurityId; | |
uint FileAttributes; | |
uint16 FileNameLength; | |
uint16 FileNameOffset; | |
wchar_t FileName; | |
} | |
struct USN_RECORD_V4{ | |
struct USN_RECORD_COMMON_HEADER{ | |
uint ; | |
uint16 MajorVersion; | |
uint16 MinorVersion; | |
} Header; | |
struct _FILE_ID_128{ | |
uint8 ; | |
} FileReferenceNumber; | |
struct _FILE_ID_128{ | |
uint8 ; | |
} ParentFileReferenceNumber; | |
int64 Usn; | |
uint Reason; | |
uint SourceInfo; | |
uint RemainingExtents; | |
uint16 NumberOfExtents; | |
uint16 ExtentSize; | |
struct USN_RECORD_EXTENT{ | |
int64 Offset; | |
int64 Length; | |
} Extents; | |
} | |
struct USN_TRACK_MODIFIED_RANGES{ | |
uint Flags; | |
uint Unused; | |
uint64 ChunkSize; | |
int64 FileSizeThreshold; | |
} | |
struct UnwindGuardNode{ | |
uint Next; | |
uint Handler; | |
uint SecurityCookie; | |
uint OrigTargetLevel; | |
uint OrigEstablisher; | |
uint OrigCookiePointer; | |
uint FramePointer; | |
} | |
struct VACB_LEVEL_ALLOCATION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} VacbLevelList; | |
void* VacbLevelWithBcbListHeads; | |
uint VacbLevelsAllocated; | |
} | |
struct VERIFIER_EXTENSION{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* PhysicalDeviceObject; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* LowerDeviceObject; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* Self; | |
VF_DEVOBJ_TYPE DevObjType; | |
struct _IO_REMOVE_LOCK{ | |
struct _IO_REMOVE_LOCK_COMMON_BLOCK{ | |
uint8 ; | |
uint8 Reserved; | |
} Common; | |
} RemoveLock; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} RemoveDpcEvent; | |
uint DeviceUsageLock; | |
uint DeviceUsageCount; | |
uint Flags; | |
} | |
struct VFWMI_DEVICE_EXTENSION{ | |
uint SiloNumber; | |
} | |
struct VI_CALLOUT_STRUCT{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* ; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* ; | |
}* Irp; | |
int ReturnStatus; | |
} | |
struct VLOCK{ | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
} | |
struct VOLUME_BITMAP_BUFFER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} BitmapSize; | |
uint8 Buffer; | |
} | |
struct WARBIRD__CFeistel64{ | |
uint8* RoundID; | |
uint8* RandPool; | |
} | |
struct WHEAWMIGUIDREGINFO{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* Guid; | |
uint InstanceCount; | |
uint Flags; | |
} | |
struct WHEA_PCIXDEVICE_REGISTER_PAIR{ | |
uint64 Register; | |
uint64 Data; | |
} | |
struct WMIEVENTQUEUE{ | |
uint8* Buffer; | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union { | |
uint64 HistoricalContext; | |
struct { | |
uint Version; | |
uint Linkage; | |
} __s1; | |
} ___u2; | |
union { | |
uint CountLost; | |
void* KernelHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
} ___u3; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint ClientContext; | |
uint Flags; | |
}* LastWnode; | |
uint MaxBufferSize; | |
uint NextOffset; | |
uint EventsLost; | |
} | |
struct WMIFHTOINSTANCENAME{ | |
union { | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} FileHandle; | |
uint SizeNeeded; | |
} ___u0; | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} KernelHandle; | |
uint BaseIndex; | |
uint16 InstanceNameLength; | |
wchar_t InstanceNames; | |
} | |
struct WMIGUIDLISTINFO{ | |
uint TotalGuidCount; | |
uint ReturnedGuidCount; | |
struct WMIGUIDPROPERTIES{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint GuidType; | |
uint LoggerId; | |
uint EnableLevel; | |
uint EnableFlags; | |
uint8 IsEnabled; | |
} GuidList; | |
} | |
struct WMIGUIDPROPERTIES{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint GuidType; | |
uint LoggerId; | |
uint EnableLevel; | |
uint EnableFlags; | |
uint8 IsEnabled; | |
} | |
struct WMIMOFENTRY{ | |
uint RegPathOffset; | |
uint ResourceOffset; | |
uint Flags; | |
} | |
struct WMIMOFLIST{ | |
uint MofListCount; | |
struct WMIMOFENTRY{ | |
uint RegPathOffset; | |
uint ResourceOffset; | |
uint Flags; | |
} MofEntry; | |
} | |
struct WMIOPENGUIDBLOCK{ | |
struct _OBJECT_ATTRIBUTES{ | |
ULONG Length; | |
void* ; | |
}* ObjectAttributes; | |
uint DesiredAccess; | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} Handle; | |
} | |
struct WMIQADMULTIPLE{ | |
uint HandleCount; | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} Handles; | |
} | |
struct WMIQSIINFO{ | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} Handle; | |
struct UNICODE_STRING3264{ | |
uint16 Length; | |
uint16 MaximumLength; | |
union { | |
wchar_t* Buffer; | |
uint64 Dummy; | |
} ___u2; | |
} InstanceName; | |
} | |
struct WMIQSIMULTIPLE{ | |
uint QueryCount; | |
struct WMIQSIINFO{ | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} Handle; | |
struct UNICODE_STRING3264{ | |
uint16 Length; | |
uint16 MaximumLength; | |
union { | |
wchar_t* Buffer; | |
uint64 Dummy; | |
} ___u2; | |
} InstanceName; | |
} QsiInfo; | |
} | |
struct WMIQUERYGUIDINFO{ | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} KernelHandle; | |
uint8 IsExpensive; | |
} | |
struct WMIRECEIVENOTIFICATION{ | |
uint HandleCount; | |
union HANDLE3264{ | |
void* Handle; | |
uint64 Handle64; | |
uint Handle32; | |
} Handles; | |
} | |
struct WMIREGGUIDW{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint Flags; | |
uint InstanceCount; | |
union { | |
uint InstanceNameList; | |
uint BaseNameOffset; | |
uint Pdo; | |
uint InstanceInfo; | |
} ___u3; | |
} | |
struct WMIREGINFOW{ | |
uint BufferSize; | |
uint NextWmiRegInfo; | |
uint RegistryPath; | |
uint MofResourceName; | |
uint GuidCount; | |
struct WMIREGGUIDW{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint Flags; | |
uint InstanceCount; | |
union { | |
uint InstanceNameList; | |
uint BaseNameOffset; | |
uint Pdo; | |
uint InstanceInfo; | |
} ___u3; | |
} WmiRegGuid; | |
} | |
struct WMITRACE_NOTIFY_HEADER{ | |
struct _WNODE_HEADER{ | |
uint ; | |
uint ProviderId; | |
union { | |
uint64 HistoricalContext; | |
struct { | |
uint Version; | |
uint Linkage; | |
} __s1; | |
} ___u2; | |
union { | |
uint CountLost; | |
void* KernelHandle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
} ___u3; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Guid; | |
uint ClientContext; | |
uint Flags; | |
} Wnode; | |
uint64 LoggerContext; | |
uint64 SecurityToken; | |
} | |
struct WMIVERSIONINFO{ | |
uint Version; | |
} | |
struct XSAVE_CPU_ERRATA{ | |
uint ; | |
struct XSAVE_CPU_INFO{ | |
uint8 Processor; | |
uint16 Family; | |
uint16 Model; | |
uint16 Stepping; | |
uint16 ExtendedModel; | |
uint ExtendedFamily; | |
uint64 MicrocodeVersion; | |
uint Reserved; | |
} Errata; | |
} | |
struct XSAVE_CPU_INFO{ | |
uint8 Processor; | |
uint16 Family; | |
uint16 Model; | |
uint16 Stepping; | |
uint16 ExtendedModel; | |
uint ExtendedFamily; | |
uint64 MicrocodeVersion; | |
uint Reserved; | |
} | |
struct _ABC{ | |
int abcA; | |
uint abcB; | |
int abcC; | |
} | |
struct _ABCFLOAT{ | |
float abcfA; | |
float abcfB; | |
float abcfC; | |
} | |
struct _AB_LOCK_KEY{ | |
void* MaskedLockPtr; | |
uint SessionId; | |
} | |
struct _AB_PRIORITY{ | |
union { | |
struct { | |
char CpuPriority; | |
char IoPriority; | |
char IoQoSPriority; | |
char Spare; | |
} __s0; | |
uint AllPriorities; | |
} ___u0; | |
} | |
struct _ACCESS_ALLOWED_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} ; | |
uint Mask; | |
uint SidStart; | |
} | |
struct _ACCESS_ALLOWED_CALLBACK_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint SidStart; | |
} | |
struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ObjectType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InheritedObjectType; | |
uint SidStart; | |
} | |
struct _ACCESS_ALLOWED_OBJECT_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ObjectType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InheritedObjectType; | |
uint SidStart; | |
} | |
struct _ACCESS_DENIED_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint SidStart; | |
} | |
struct _ACCESS_DENIED_CALLBACK_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint SidStart; | |
} | |
struct _ACCESS_DENIED_CALLBACK_OBJECT_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ObjectType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InheritedObjectType; | |
uint SidStart; | |
} | |
struct _ACCESS_DENIED_OBJECT_ACE{ | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} Header; | |
uint Mask; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ObjectType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InheritedObjectType; | |
uint SidStart; | |
} | |
struct _ACCESS_METHOD_ADDRESS{ | |
union { | |
struct { | |
uint16 IndexAddr; | |
uint16 DataAddr; | |
} IndexIo; | |
uint PhysicalAddress32; | |
uint16 GPNVHandle; | |
} AccessMethodAddress; | |
} | |
struct _ACCESS_REASONS{ | |
uint ; | |
} | |
struct _ACCESS_REASON_CONTEXT_SD_INFO{ | |
void* ; | |
uint CapeCount; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* CapeNames; | |
} | |
struct _ACCESS_STATE{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} ; | |
} | |
struct _ACE{ | |
uint AceType; | |
uint AceFlags; | |
uint AccessMask; | |
uint SidStart; | |
} | |
struct _ACE_HEADER{ | |
uint8 AceType; | |
uint8 AceFlags; | |
uint16 AceSize; | |
} | |
struct _ACL{ | |
BYTE AclRevision; | |
BYTE Sbz1; | |
WORD AclSize; | |
WORD AceCount; | |
WORD Sbz2; | |
} | |
struct _ACL_REVISION_INFORMATION{ | |
uint AclRevision; | |
} | |
struct _ACL_SIZE_INFORMATION{ | |
uint ; | |
uint AclBytesInUse; | |
uint AclBytesFree; | |
} | |
struct _ACPI_BIOS_INFORMATION{ | |
uint BootArchitecture; | |
uint PreferredProfile; | |
uint Capabilities; | |
} | |
struct _ACPI_CALLBACK_REQUEST_PARAMETERS{ | |
_ACPI_CALLBACK_REQUEST_TYPE Type; | |
void* AcpiContext; | |
uint RequestId; | |
union { | |
struct _PEP_WORK_INFORMATION{ | |
_PEP_WORK_TYPE WorkType; | |
union { | |
struct _PEP_WORK_ACTIVE_COMPLETE ActiveComplete; | |
struct _PEP_WORK_IDLE_STATE IdleState; | |
struct _PEP_WORK_DEVICE_POWER DevicePower; | |
struct _PEP_WORK_POWER_CONTROL PowerControl; | |
struct _PEP_WORK_DEVICE_IDLE DeviceIdle; | |
struct _PEP_WORK_COMPLETE_IDLE_STATE CompleteIdleState; | |
struct _PEP_WORK_COMPLETE_PERF_STATE CompletePerfState; | |
struct _PEP_WORK_ACPI_NOTIFY AcpiNotify; | |
struct _PEP_WORK_ACPI_EVALUATE_CONTROL_METHOD_COMPLETE ControlMethodComplete; | |
} ___u1; | |
}* WorkInformation; | |
struct _PEP_ACPI_REQUEST_CONVERT_TO_BIOS_RESOURCES{ | |
int TranslationStatus; | |
union _PEP_ACPI_RESOURCE{ | |
_PEP_ACPI_RESOURCE_TYPE ; | |
struct _PEP_ACPI_IO_MEMORY_RESOURCE IoMemory; | |
struct _PEP_ACPI_INTERRUPT_RESOURCE Interrupt; | |
struct _PEP_ACPI_GPIO_RESOURCE Gpio; | |
struct _PEP_ACPI_SPB_I2C_RESOURCE SpbI2c; | |
struct _PEP_ACPI_SPB_SPI_RESOURCE SpbSpi; | |
struct _PEP_ACPI_SPB_UART_RESOURCE SpbUart; | |
struct _PEP_ACPI_EXTENDED_ADDRESS ExtendedAddress; | |
}* InputBuffer; | |
uint InputBufferSize; | |
void* OutputBuffer; | |
uint OutputBufferSize; | |
uint Flags; | |
}* ResourceInformation; | |
} ___u3; | |
} | |
struct _ACPI_CMOS_INTERFACE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
ReadCmos* ReadCmos; | |
WriteCmos* WriteCmos; | |
} | |
struct _ACPI_DEBUGGING_DEVICE_IN_USE{ | |
uint NameSpacePathLength; | |
wchar_t NameSpacePath; | |
} | |
struct _ACPI_DEVICE_INFORMATION_OUTPUT_BUFFER{ | |
uint Signature; | |
uint16 Size; | |
uint8 Revision; | |
uint8 Reserved0; | |
uint16 VendorIdStringOffset; | |
uint16 VendorStringLength; | |
uint16 DeviceIdStringOffset; | |
uint16 SubSystemIdStringOffset; | |
uint16 SubSystemStringLength; | |
uint16 SubDeviceIdStringOffset; | |
uint16 InstanceIdLength; | |
uint16 InstanceIdOffset; | |
uint16 BaseClassCode; | |
uint16 HardwareRevision; | |
uint8 ProgrammingInterface; | |
uint8 Reserved1; | |
uint16 SubClassCode; | |
} | |
struct _ACPI_ENUM_CHILD{ | |
uint Flags; | |
uint NameLength; | |
char Name; | |
} | |
struct _ACPI_ENUM_CHILDREN_INPUT_BUFFER{ | |
uint Signature; | |
uint Flags; | |
uint NameLength; | |
char Name; | |
} | |
struct _ACPI_ENUM_CHILDREN_OUTPUT_BUFFER{ | |
uint Signature; | |
uint NumberOfChildren; | |
struct _ACPI_ENUM_CHILD{ | |
uint Flags; | |
uint NameLength; | |
char Name; | |
} Children; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER{ | |
uint Signature; | |
union { | |
uint8 ; | |
} ___u1; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_COMPLEX{ | |
uint Signature; | |
union { | |
uint8 ; | |
} ___u1; | |
uint Size; | |
uint ArgumentCount; | |
struct _ACPI_METHOD_ARGUMENT{ | |
uint16 Type; | |
uint16 DataLength; | |
union { | |
uint Argument; | |
uint8 Data; | |
} ___u2; | |
} Argument; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_COMPLEX_EX{ | |
uint Signature; | |
char MethodName; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_EX{ | |
uint Signature; | |
char MethodName; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_INTEGER{ | |
uint Signature; | |
union { | |
uint8 ; | |
} ___u1; | |
uint IntegerArgument; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_INTEGER_EX{ | |
uint Signature; | |
char MethodName; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_STRING{ | |
uint Signature; | |
union { | |
uint8 ; | |
} ___u1; | |
uint StringLength; | |
uint8 String; | |
} | |
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_STRING_EX{ | |
uint Signature; | |
char MethodName; | |
} | |
struct _ACPI_EVAL_OUTPUT_BUFFER{ | |
uint Signature; | |
uint Length; | |
uint Count; | |
struct _ACPI_METHOD_ARGUMENT{ | |
uint16 Type; | |
uint16 DataLength; | |
union { | |
uint Argument; | |
uint8 Data; | |
} ___u2; | |
} Argument; | |
} | |
struct _ACPI_GET_DEVICE_SPECIFIC_DATA{ | |
uint Signature; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Section; | |
uint PropertyNameLength; | |
uint8 PropertyName; | |
} | |
struct _ACPI_INTERFACE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
} | |
struct _ACPI_MANIPULATE_GLOBAL_LOCK_BUFFER{ | |
uint Signature; | |
void* LockObject; | |
} | |
struct _ACPI_METHOD_ARGUMENT{ | |
uint16 Type; | |
uint16 DataLength; | |
union { | |
uint Argument; | |
uint8 Data; | |
} ___u2; | |
} | |
struct _ACPI_MPST{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint8 SubspaceId; | |
uint8 Reserved2; | |
} | |
struct _ACPI_MSCT{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint DomainInfoOffset; | |
uint ProximityDomainCount; | |
uint ClockDomainCount; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} MaximumPhysicalAddress; | |
} | |
struct _ACPI_MSCT_ENTRY{ | |
uint8 Revision; | |
uint8 Length; | |
uint DomainIdRangeLow; | |
uint DomainIdRangeHigh; | |
uint ProcessorCapacity; | |
uint64 MemoryCapacity; | |
} | |
struct _ACPI_PLD_BUFFER{ | |
uint32 Revision:7; | |
uint32 IgnoreColor:1; | |
uint32 Color:24; | |
uint32 Width:16; | |
uint32 Height:16; | |
uint32 UserVisible:1; | |
uint32 Dock:1; | |
uint32 Lid:1; | |
uint32 Panel:3; | |
uint32 VerticalPosition:2; | |
uint32 HorizontalPosition:2; | |
uint32 Shape:4; | |
uint32 GroupOrientation:1; | |
uint32 GroupToken:8; | |
uint32 GroupPosition:8; | |
uint32 Bay:1; | |
uint32 Ejectable:1; | |
uint32 EjectionRequired:1; | |
uint32 CabinetNumber:8; | |
uint32 CardCageNumber:8; | |
uint32 Reserved:14; | |
} | |
struct _ACPI_PLD_V2_BUFFER{ | |
uint32 Revision:7; | |
uint32 IgnoreColor:1; | |
uint32 Color:24; | |
uint32 Width:16; | |
uint32 Height:16; | |
uint32 UserVisible:1; | |
uint32 Dock:1; | |
uint32 Lid:1; | |
uint32 Panel:3; | |
uint32 VerticalPosition:2; | |
uint32 HorizontalPosition:2; | |
uint32 Shape:4; | |
uint32 GroupOrientation:1; | |
uint32 GroupToken:8; | |
uint32 GroupPosition:8; | |
uint32 Bay:1; | |
uint32 Ejectable:1; | |
uint32 EjectionRequired:1; | |
uint32 CabinetNumber:8; | |
uint32 CardCageNumber:8; | |
uint32 Reference:1; | |
uint32 Rotation:4; | |
uint32 Order:5; | |
uint32 Reserved:4; | |
uint16 VerticalOffset; | |
uint16 HorizontalOffset; | |
} | |
struct _ACPI_REAL_TIME{ | |
uint16 Year; | |
uint8 Month; | |
uint8 Day; | |
uint8 Hour; | |
uint8 Minute; | |
uint8 Second; | |
uint8 Valid; | |
uint16 Milliseconds; | |
__int16 TimeZone; | |
uint8 DayLight; | |
uint8 Reserved1; | |
} | |
struct _ACPI_SRAT{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint TableRevision; | |
uint Reserved; | |
} | |
struct _ACPI_SRAT_ENTRY{ | |
uint8 Type; | |
uint8 Length; | |
union { | |
struct { | |
uint8 ProximityDomainLow; | |
uint8 ApicId; | |
struct { | |
uint32 Enabled:1; | |
uint32 Reserved:31; | |
} Flags; | |
uint8 SApicEid; | |
uint8 ProximityDomainHigh; | |
} ApicAffinity; | |
struct { | |
uint ; | |
uint8 Reserved; | |
} MemoryAffinity; | |
struct { | |
uint8 Reserved; | |
} X2ApicAffinity; | |
} ___u2; | |
} | |
struct _ACPI_WPBT_TABLE{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint HandoffMemorySize; | |
uint64 HandoffMemoryLocation; | |
uint8 ContentLayout; | |
uint8 ContentType; | |
uint16 CommandLineArgumentsLength; | |
wchar_t CommandLineArguments; | |
} | |
struct _ACTIVATION_CONTEXT_ASSEMBLY_DATA{ | |
uint Size; | |
uint Flags; | |
wchar_t* AssemblyName; | |
uint AssemblyNameLength; | |
uint HashAlgorithm; | |
uint PseudoKey; | |
} | |
struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION{ | |
uint ulFlags; | |
uint ulEncodedAssemblyIdentityLength; | |
uint ulManifestPathType; | |
uint ulManifestPathLength; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} liManifestLastWriteTime; | |
uint ulPolicyPathType; | |
uint ulPolicyPathLength; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} liPolicyLastWriteTime; | |
uint ulMetadataSatelliteRosterIndex; | |
uint ulManifestVersionMajor; | |
uint ulManifestVersionMinor; | |
uint ulPolicyVersionMajor; | |
uint ulPolicyVersionMinor; | |
uint ulAssemblyDirectoryNameLength; | |
wchar_t* lpAssemblyEncodedAssemblyIdentity; | |
wchar_t* lpAssemblyManifestPath; | |
wchar_t* lpAssemblyPolicyPath; | |
wchar_t* lpAssemblyDirectoryName; | |
uint ulFileCount; | |
} | |
struct _ACTIVATION_CONTEXT_BASIC_INFORMATION{ | |
union { | |
_ACTIVATION_CONTEXT* ; | |
void* hActCtx; | |
} ___u0; | |
union { | |
uint Flags; | |
uint dwFlags; | |
} ___u1; | |
} | |
struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION{ | |
uint ElementCount; | |
struct _COMPATIBILITY_CONTEXT_ELEMENT{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Id; | |
ACTCTX_COMPATIBILITY_ELEMENT_TYPE Type; | |
} Elements; | |
} | |
struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION{ | |
uint dwFlags; | |
uint ulFormatVersion; | |
uint ulAssemblyCount; | |
uint ulRootManifestPathType; | |
uint ulRootManifestPathChars; | |
uint ulRootConfigurationPathType; | |
uint ulRootConfigurationPathChars; | |
uint ulAppDirPathType; | |
uint ulAppDirPathChars; | |
wchar_t* lpRootManifestPath; | |
wchar_t* lpRootConfigurationPath; | |
wchar_t* lpAppDirPath; | |
} | |
struct _ACTIVATION_CONTEXT_QUERY_INDEX{ | |
uint ulAssemblyIndex; | |
uint ulFileIndexInAssembly; | |
} | |
struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION{ | |
uint ulFlags; | |
ACTCTX_REQUESTED_RUN_LEVEL RunLevel; | |
uint UiAccess; | |
} | |
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA{ | |
uint Size; | |
uint DataFormatVersion; | |
void* Data; | |
uint Length; | |
void* SectionGlobalData; | |
uint SectionGlobalDataLength; | |
void* SectionBase; | |
uint SectionTotalLength; | |
_ACTIVATION_CONTEXT* ActivationContext; | |
uint AssemblyRosterIndex; | |
uint Flags; | |
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA{ | |
} AssemblyMetadata; | |
} | |
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600{ | |
uint Size; | |
uint DataFormatVersion; | |
void* Data; | |
uint Length; | |
void* SectionGlobalData; | |
uint SectionGlobalDataLength; | |
void* SectionBase; | |
uint SectionTotalLength; | |
_ACTIVATION_CONTEXT* ActivationContext; | |
uint AssemblyRosterIndex; | |
uint Flags; | |
} | |
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA{ | |
} | |
struct _ACTIVATION_CONTEXT_STACK{ | |
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME{ | |
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME* Previous; | |
_ACTIVATION_CONTEXT* ActivationContext; | |
uint Flags; | |
}* ActiveFrame; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FrameListCache; | |
uint Flags; | |
uint NextCookieSequenceNumber; | |
uint StackId; | |
} | |
struct _ACTIVATION_CONTEXT_STACK32{ | |
uint ActiveFrame; | |
struct LIST_ENTRY32{ | |
uint Flink; | |
uint Blink; | |
} FrameListCache; | |
uint Flags; | |
uint NextCookieSequenceNumber; | |
uint StackId; | |
} | |
struct _ACTIVATION_CONTEXT_STACK64{ | |
uint64 ActiveFrame; | |
struct LIST_ENTRY64{ | |
uint64 Flink; | |
uint64 Blink; | |
} FrameListCache; | |
uint Flags; | |
uint NextCookieSequenceNumber; | |
uint StackId; | |
} | |
struct _ACTIVEMARK_FOOTER{ | |
char FooterTag; | |
} | |
struct _ACTIVE_CONNECT_BLOCK{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
uint Gsiv; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* ActualConnectLock; | |
int* ActualReferenceCount; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} LocalConnectLock; | |
int LocalReferenceCount; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* DeleteLock; | |
} | |
struct _ADAPTER_INFORMATION{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _DMA_ADAPTER{ | |
uint16 Version; | |
uint16 Size; | |
struct _DMA_OPERATIONS{ | |
uint Size; | |
PutDmaAdapter* PutDmaAdapter; | |
AllocateCommonBuffer** AllocateCommonBuffer; | |
FreeCommonBuffer* FreeCommonBuffer; | |
AllocateAdapterChannel* AllocateAdapterChannel; | |
FlushAdapterBuffers* FlushAdapterBuffers; | |
FreeAdapterChannel* FreeAdapterChannel; | |
FreeMapRegisters* FreeMapRegisters; | |
MapTransfer* MapTransfer; | |
GetDmaAlignment* GetDmaAlignment; | |
ReadDmaCounter* ReadDmaCounter; | |
GetScatterGatherList* GetScatterGatherList; | |
PutScatterGatherList* PutScatterGatherList; | |
CalculateScatterGatherList* CalculateScatterGatherList; | |
BuildScatterGatherList* BuildScatterGatherList; | |
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList; | |
GetDmaAdapterInfo* GetDmaAdapterInfo; | |
GetDmaTransferInfo* GetDmaTransferInfo; | |
InitializeDmaTransferContext* InitializeDmaTransferContext; | |
AllocateCommonBufferEx** AllocateCommonBufferEx; | |
AllocateAdapterChannelEx* AllocateAdapterChannelEx; | |
ConfigureAdapterChannel* ConfigureAdapterChannel; | |
CancelAdapterChannel* CancelAdapterChannel; | |
MapTransferEx* MapTransferEx; | |
GetScatterGatherListEx* GetScatterGatherListEx; | |
BuildScatterGatherListEx* BuildScatterGatherListEx; | |
FlushAdapterBuffersEx* FlushAdapterBuffersEx; | |
FreeAdapterObject* FreeAdapterObject; | |
CancelMappedTransfer* CancelMappedTransfer; | |
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer; | |
FlushDmaBuffer* FlushDmaBuffer; | |
JoinDmaDomain* JoinDmaDomain; | |
LeaveDmaDomain* LeaveDmaDomain; | |
GetDmaDomain** GetDmaDomain; | |
}* DmaOperations; | |
}* DmaAdapter; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* DeviceObject; | |
uint8 DeferredRemove; | |
uint8 UseContiguousBuffers; | |
uint8 UseDmaChannel; | |
int HandleCount; | |
void* CallingAddress; | |
struct _DMA_OPERATIONS{ | |
uint Size; | |
PutDmaAdapter* PutDmaAdapter; | |
AllocateCommonBuffer** AllocateCommonBuffer; | |
FreeCommonBuffer* FreeCommonBuffer; | |
AllocateAdapterChannel* AllocateAdapterChannel; | |
FlushAdapterBuffers* FlushAdapterBuffers; | |
FreeAdapterChannel* FreeAdapterChannel; | |
FreeMapRegisters* FreeMapRegisters; | |
MapTransfer* MapTransfer; | |
GetDmaAlignment* GetDmaAlignment; | |
ReadDmaCounter* ReadDmaCounter; | |
GetScatterGatherList* GetScatterGatherList; | |
PutScatterGatherList* PutScatterGatherList; | |
CalculateScatterGatherList* CalculateScatterGatherList; | |
BuildScatterGatherList* BuildScatterGatherList; | |
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList; | |
GetDmaAdapterInfo* GetDmaAdapterInfo; | |
GetDmaTransferInfo* GetDmaTransferInfo; | |
InitializeDmaTransferContext* InitializeDmaTransferContext; | |
AllocateCommonBufferEx** AllocateCommonBufferEx; | |
AllocateAdapterChannelEx* AllocateAdapterChannelEx; | |
ConfigureAdapterChannel* ConfigureAdapterChannel; | |
CancelAdapterChannel* CancelAdapterChannel; | |
MapTransferEx* MapTransferEx; | |
GetScatterGatherListEx* GetScatterGatherListEx; | |
BuildScatterGatherListEx* BuildScatterGatherListEx; | |
FlushAdapterBuffersEx* FlushAdapterBuffersEx; | |
FreeAdapterObject* FreeAdapterObject; | |
CancelMappedTransfer* CancelMappedTransfer; | |
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer; | |
FlushDmaBuffer* FlushDmaBuffer; | |
JoinDmaDomain* JoinDmaDomain; | |
LeaveDmaDomain* LeaveDmaDomain; | |
GetDmaDomain** GetDmaDomain; | |
}* RealDmaOperations; | |
struct _HAL_VERIFIER_LOCKED_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint SpinLock; | |
} ScatterGatherLists; | |
struct _HAL_VERIFIER_LOCKED_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint SpinLock; | |
} CommonBuffers; | |
struct _HAL_VERIFIER_LOCKED_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint SpinLock; | |
} MapRegisterFiles; | |
struct _HAL_VERIFIER_LOCKED_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint SpinLock; | |
} ChannelWcbList; | |
uint MaximumMapRegisters; | |
uint AllocatedMapRegisters; | |
int ActiveMapRegisters; | |
uint AllocatedScatterGatherLists; | |
int ActiveScatterGatherLists; | |
uint AllocatedCommonBuffers; | |
uint FreedCommonBuffers; | |
uint AllocatedAdapterChannels; | |
uint FreedAdapterChannels; | |
uint MappedTransferWithoutFlushing; | |
struct _DEVICE_DESCRIPTION{ | |
uint Version; | |
uint8 Master; | |
uint8 ScatterGather; | |
uint8 DemandMode; | |
uint8 AutoInitialize; | |
uint8 Dma32BitAddresses; | |
uint8 IgnoreCount; | |
uint8 Reserved1; | |
uint8 Dma64BitAddresses; | |
uint BusNumber; | |
uint DmaChannel; | |
_INTERFACE_TYPE InterfaceType; | |
_DMA_WIDTH DmaWidth; | |
_DMA_SPEED DmaSpeed; | |
uint MaximumLength; | |
uint DmaPort; | |
uint DmaAddressWidth; | |
uint DmaControllerInstance; | |
uint DmaRequestLine; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} DeviceAddress; | |
} DeviceDescription; | |
uint AdapterChannelMapRegisters; | |
void** ContiguousBuffers; | |
uint SuccessfulContiguousAllocations; | |
uint FailedContiguousAllocations; | |
uint AllocationLock; | |
uint AllocationStorage; | |
} | |
struct _ADAPTER_OBJECT{ | |
struct _DMA_ADAPTER{ | |
uint16 Version; | |
uint16 Size; | |
struct _DMA_OPERATIONS{ | |
uint Size; | |
PutDmaAdapter* PutDmaAdapter; | |
AllocateCommonBuffer** AllocateCommonBuffer; | |
FreeCommonBuffer* FreeCommonBuffer; | |
AllocateAdapterChannel* AllocateAdapterChannel; | |
FlushAdapterBuffers* FlushAdapterBuffers; | |
FreeAdapterChannel* FreeAdapterChannel; | |
FreeMapRegisters* FreeMapRegisters; | |
MapTransfer* MapTransfer; | |
GetDmaAlignment* GetDmaAlignment; | |
ReadDmaCounter* ReadDmaCounter; | |
GetScatterGatherList* GetScatterGatherList; | |
PutScatterGatherList* PutScatterGatherList; | |
CalculateScatterGatherList* CalculateScatterGatherList; | |
BuildScatterGatherList* BuildScatterGatherList; | |
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList; | |
GetDmaAdapterInfo* GetDmaAdapterInfo; | |
GetDmaTransferInfo* GetDmaTransferInfo; | |
InitializeDmaTransferContext* InitializeDmaTransferContext; | |
AllocateCommonBufferEx** AllocateCommonBufferEx; | |
AllocateAdapterChannelEx* AllocateAdapterChannelEx; | |
ConfigureAdapterChannel* ConfigureAdapterChannel; | |
CancelAdapterChannel* CancelAdapterChannel; | |
MapTransferEx* MapTransferEx; | |
GetScatterGatherListEx* GetScatterGatherListEx; | |
BuildScatterGatherListEx* BuildScatterGatherListEx; | |
FlushAdapterBuffersEx* FlushAdapterBuffersEx; | |
FreeAdapterObject* FreeAdapterObject; | |
CancelMappedTransfer* CancelMappedTransfer; | |
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer; | |
FlushDmaBuffer* FlushDmaBuffer; | |
JoinDmaDomain* JoinDmaDomain; | |
LeaveDmaDomain* LeaveDmaDomain; | |
GetDmaDomain** GetDmaDomain; | |
}* DmaOperations; | |
} DmaAdapter; | |
struct _ADAPTER_OBJECT* RealAdapterObject; | |
} | |
struct _ADD_CONTEXT{ | |
uint DriverStartType; | |
uint8 LoadDriver; | |
} | |
struct _ADJUST_INTERRUPT_TIME_CONTEXT{ | |
uint8 AdjustPerfCounter; | |
uint KiNumber; | |
uint64 Adjustment; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} NewCount; | |
int HalNumber; | |
int Barrier; | |
} | |
struct _ADMINISTRATOR_POWER_POLICY{ | |
_SYSTEM_POWER_STATE MinSleep; | |
_SYSTEM_POWER_STATE MaxSleep; | |
uint MinVideoTimeout; | |
uint MaxVideoTimeout; | |
uint MinSpindownTimeout; | |
uint MaxSpindownTimeout; | |
} | |
struct _AGGREGATED_PAYLOAD_FILTER{ | |
uint16 MagicValue:12; | |
uint16 DescriptorVersion:4; | |
uint16 Size; | |
uint16 PredicateCount; | |
uint16 Reserved; | |
uint64 HashedEventIdBitmap; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ProviderGuid; | |
uint16 EachEventTableOffset; | |
uint16 EachEventTableLength; | |
uint16 PayloadDecoderTableOffset; | |
uint16 PayloadDecoderTableLength; | |
uint16 EventFilterTableOffset; | |
uint16 EventFilterTableLength; | |
uint16 UNICODEStringTableOffset; | |
uint16 UNICODEStringTableLength; | |
uint16 ANSIStringTableOffset; | |
uint16 ANSIStringTableLength; | |
struct _EVENT_PAYLOAD_PREDICATE{ | |
uint16 FieldIndex; | |
uint16 CompareOp; | |
uint64 Value; | |
} PredicateTable; | |
} | |
struct _AGP_TARGET_BUS_INTERFACE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
SetBusData* SetBusData; | |
GetBusData* GetBusData; | |
uint8 CapabilityID; | |
} | |
struct _AHC_SERVICE_CLEAR{ | |
_AHC_INFO_CLASS InfoClass; | |
} | |
struct _AHC_SERVICE_DATA{ | |
struct _AHC_SERVICE_LOOKUP{ | |
_AHC_INFO_CLASS InfoClass; | |
uint HintFlags; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
void* ProcessHandle; | |
uint16 ExeType; | |
uint16 Padding; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
wchar_t* Environment; | |
uint EnvironmentSize; | |
} ; | |
struct _AHC_SERVICE_UPDATE{ | |
_AHC_INFO_CLASS InfoClass; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
void* Data; | |
uint DataSize; | |
} Update; | |
struct _AHC_SERVICE_DATACACHE{ | |
void* FileHandle; | |
uint16 ExeType; | |
uint16 Padding; | |
uint HintFlags; | |
void* ProcessHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FileName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Environment; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
uint CustomDataSize; | |
uint8* CustomData; | |
} Cache; | |
struct _AHC_SERVICE_LOOKUP_CDB{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
} LookupCdb; | |
struct _AHC_SERVICE_CLEAR{ | |
_AHC_INFO_CLASS InfoClass; | |
} Clear; | |
struct _AHC_SERVICE_REMOVE{ | |
_AHC_INFO_CLASS ; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
} Remove; | |
struct _AHC_SERVICE_HWID_QUERY{ | |
uint8 QueryResult; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} HwId; | |
} HwIdQuery; | |
int DriverStatus; | |
void* ParamsOut; | |
uint ParamsOutSize; | |
} | |
struct _AHC_SERVICE_DATACACHE{ | |
void* FileHandle; | |
uint16 ExeType; | |
uint16 Padding; | |
uint HintFlags; | |
void* ProcessHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FileName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Environment; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
uint CustomDataSize; | |
uint8* CustomData; | |
} | |
struct _AHC_SERVICE_HWID_QUERY{ | |
uint8 QueryResult; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} HwId; | |
} | |
struct _AHC_SERVICE_LOOKUP{ | |
_AHC_INFO_CLASS InfoClass; | |
uint HintFlags; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
void* ProcessHandle; | |
uint16 ExeType; | |
uint16 Padding; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
wchar_t* Environment; | |
uint EnvironmentSize; | |
} | |
struct _AHC_SERVICE_LOOKUP_CDB{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
} | |
struct _AHC_SERVICE_REMOVE{ | |
_AHC_INFO_CLASS ; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
} | |
struct _AHC_SERVICE_UPDATE{ | |
_AHC_INFO_CLASS InfoClass; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} PackageAlias; | |
void* FileHandle; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ExeSignature; | |
void* Data; | |
uint DataSize; | |
} | |
struct _ALPC_BASIC_INFORMATION{ | |
uint Flags; | |
uint SequenceNo; | |
void* PortContext; | |
} | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY{ | |
void* Object; | |
}* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct { | |
uint32 QueueType:3; | |
uint32 QueuePortType:4; | |
uint32 Canceled:1; | |
uint32 Ready:1; | |
uint32 ReleaseMessage:1; | |
uint32 SharedQuota:1; | |
uint32 ReplyWaitReply:1; | |
uint32 OwnerPortReference:1; | |
uint32 ReserveReference:1; | |
uint32 ReceiverReference:1; | |
uint32 ViewAttributeRetrieved:1; | |
uint32 InDispatch:1; | |
} s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
}* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA{ | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* ContextHandle; | |
struct _EPROCESS* OwningProcess; | |
struct _ALPC_PORT* OwnerPort; | |
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity; | |
union $EC07C1C8CE165EEF793582D3B20FAFCF u1; | |
}* SecurityData; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* View; | |
struct _KALPC_HANDLE_DATA{ | |
uint ObjectType; | |
uint Count; | |
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext; | |
}* HandleData; | |
union _KALPC_DIRECT_EVENT{ | |
uint Event; | |
struct $4D527ECE92544168B5228C7BC3E57A97 __s1; | |
} DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA{ | |
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket; | |
} WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{ | |
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1; | |
ULONG Length; | |
} u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{ | |
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2; | |
ULONG ZeroInit; | |
} u2; | |
struct _CLIENT_ID{ | |
void* ; | |
} ; | |
} PortMessage; | |
}* CloseMessage; | |
} | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} Header; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY{ | |
uint16 ; | |
uint16 BaseLow; | |
union $4729093EE83589A5C42FEEDA1FD4429B HighWord; | |
} LdtDescriptor; | |
struct _KIDTENTRY{ | |
uint16 Offset; | |
uint16 Selector; | |
uint16 Access; | |
uint16 ExtendedOffset; | |
} Int21Descriptor; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ReadyListHead; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SwapListEntry; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} ActiveProcessors; | |
union { | |
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0; | |
int ProcessFlags; | |
} ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS{ | |
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0; | |
uint8 ExecuteOptions; | |
uint8 ExecuteOptionsNV; | |
} Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct { | |
uint32 ; | |
uint32 AccountingFolded:1; | |
uint32 NewProcessReported:1; | |
uint32 ExitProcessReported:1; | |
uint32 ReportCommitChanges:1; | |
uint32 LastReportMemory:1; | |
uint32 ForceWakeCharge:1; | |
uint32 CrossSessionCreate:1; | |
uint32 NeedsHandleRundown:1; | |
uint32 RefTraceEnabled:1; | |
uint32 DisableDynamicCode:1; | |
uint32 EmptyJobEvaluated:1; | |
uint32 DefaultPagePriority:3; | |
uint32 PrimaryTokenFrozen:1; | |
uint32 ProcessVerifierTarget:1; | |
uint32 StackRandomizationDisabled:1; | |
uint32 AffinityPermanent:1; | |
uint32 AffinityUpdateEnable:1; | |
uint32 PropagateNode:1; | |
uint32 ExplicitAffinity:1; | |
uint32 ProcessExecutionState:2; | |
uint32 DisallowStrippedImages:1; | |
uint32 HighEntropyASLREnabled:1; | |
uint32 ExtensionPointDisable:1; | |
uint32 ForceRelocateImages:1; | |
uint32 ProcessStateChangeRequest:2; | |
uint32 ProcessStateChangeInProgress:1; | |
uint32 DisallowWin32kSystemCalls:1; | |
} __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct { | |
uint32 CreateReported:1; | |
uint32 NoDebugInherit:1; | |
uint32 ProcessExiting:1; | |
uint32 ProcessDelete:1; | |
uint32 ControlFlowGuardEnabled:1; | |
uint32 VmDeleted:1; | |
uint32 OutswapEnabled:1; | |
uint32 Outswapped:1; | |
uint32 FailFastOnCommitFail:1; | |
uint32 Wow64VaSpace4Gb:1; | |
uint32 AddressSpaceInitialized:2; | |
uint32 SetTimerResolution:1; | |
uint32 BreakOnTermination:1; | |
uint32 DeprioritizeViews:1; | |
uint32 WriteWatch:1; | |
uint32 ProcessInSession:1; | |
uint32 OverrideAddressSpace:1; | |
uint32 HasAddressSpace:1; | |
uint32 LaunchPrefetched:1; | |
uint32 Background:1; | |
uint32 VmTopDown:1; | |
uint32 ImageNotifyDone:1; | |
uint32 PdeUpdateNeeded:1; | |
uint32 VdmAllowed:1; | |
uint32 ProcessRundown:1; | |
uint32 ProcessInserted:1; | |
uint32 DefaultIoPriority:3; | |
uint32 ProcessSelfDelete:1; | |
uint32 SetTimerResolutionLink:1; | |
} __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE{ | |
union { | |
struct $4E72BEF561229C205E949B0F7BD0A0C9 s1; | |
int64 Value; | |
} u1; | |
} State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
} | |
struct _ALPC_COMPLETION_LIST_DATABASE{ | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
uint Count; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
} | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE{ | |
union { | |
struct { | |
uint64 Head:24; | |
uint64 Tail:24; | |
uint64 ActiveThreadCount:16; | |
} s1; | |
int64 Value; | |
} u1; | |
} State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} UserLock; | |
uint64 EndMagic; | |
} | |
struct _ALPC_COMPLETION_LIST_STATE{ | |
union { | |
struct { | |
uint64 Head:24; | |
uint64 Tail:24; | |
uint64 ActiveThreadCount:16; | |
} s1; | |
int64 Value; | |
} u1; | |
} | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint PacketType; | |
void* KeyContext; | |
void* ApcContext; | |
int IoStatus; | |
uint IoStatusInformation; | |
MiniPacketCallback* MiniPacketCallback; | |
void* Context; | |
uint8 Allocated; | |
}* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* Lookaside; | |
} Entry; | |
} | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint PacketType; | |
void* KeyContext; | |
void* ApcContext; | |
int IoStatus; | |
uint IoStatusInformation; | |
MiniPacketCallback* MiniPacketCallback; | |
void* Context; | |
uint8 Allocated; | |
}* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER{ | |
struct _LIST_ENTRY ListEntry; | |
uint PacketType; | |
void* KeyContext; | |
void* ApcContext; | |
int IoStatus; | |
uint IoStatusInformation; | |
MiniPacketCallback* MiniPacketCallback; | |
void* Context; | |
uint8 Allocated; | |
}* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* Lookaside; | |
} Entry; | |
}* Lookaside; | |
} | |
struct _ALPC_CONTEXT_ATTR{ | |
void* PortContext; | |
void* MessageContext; | |
uint Sequence; | |
uint MessageId; | |
uint CallbackId; | |
} | |
struct _ALPC_DATA_VIEW_ATTR{ | |
uint Flags; | |
void* SectionHandle; | |
void* ViewBase; | |
uint ViewSize; | |
} | |
struct _ALPC_DEFERRED_MESSAGE_CONTEXT{ | |
void* TargetPortReference; | |
void* PortObjectReference; | |
} | |
struct _ALPC_DIRECT_ATTR{ | |
void* Event; | |
} | |
struct _ALPC_DISPATCH_CONTEXT{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct { | |
uint32 QueueType:3; | |
uint32 QueuePortType:4; | |
uint32 Canceled:1; | |
uint32 Ready:1; | |
uint32 ReleaseMessage:1; | |
uint32 SharedQuota:1; | |
uint32 ReplyWaitReply:1; | |
uint32 OwnerPortReference:1; | |
uint32 ReserveReference:1; | |
uint32 ReceiverReference:1; | |
uint32 ViewAttributeRetrieved:1; | |
uint32 InDispatch:1; | |
} s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
}* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA{ | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* ContextHandle; | |
struct _EPROCESS* OwningProcess; | |
struct _ALPC_PORT* OwnerPort; | |
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity; | |
union $EC07C1C8CE165EEF793582D3B20FAFCF u1; | |
}* SecurityData; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* View; | |
struct _KALPC_HANDLE_DATA{ | |
uint ObjectType; | |
uint Count; | |
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext; | |
}* HandleData; | |
union _KALPC_DIRECT_EVENT{ | |
uint Event; | |
struct $4D527ECE92544168B5228C7BC3E57A97 __s1; | |
} DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA{ | |
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket; | |
} WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{ | |
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1; | |
ULONG Length; | |
} u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{ | |
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2; | |
ULONG ZeroInit; | |
} u2; | |
struct _CLIENT_ID{ | |
void* ; | |
} ; | |
} PortMessage; | |
}* Message; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY{ | |
void* Object; | |
}* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _M128A FloatRegisters; | |
}* StateSaveArea; | |
struct _KSCHEDULING_GROUP{ | |
struct _KSCHEDULING_GROUP_POLICY Policy; | |
uint RelativeWeight; | |
uint ChildMinRate; | |
uint ChildMinWeight; | |
uint ChildTotalWeight; | |
uint64 QueryHistoryTimeStamp; | |
int64 NotificationCycles; | |
int64 MaxQuotaLimitCycles; | |
int64 MaxQuotaCyclesRemaining; | |
union $7E4164C3926CB86377AC4CFD3751C28A ___u9; | |
struct _KDPC* NotificationDpc; | |
struct _LIST_ENTRY ChildList; | |
struct _KSCHEDULING_GROUP* Parent; | |
struct _KSCB PerProcessor; | |
}* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER{ | |
uint8 Flags; | |
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1; | |
} WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ExitTime; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PostBlockList; | |
struct { | |
void* ForwardLinkShadow; | |
void* StartAddress; | |
} __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT{ | |
struct _TERMINATION_PORT* Next; | |
void* Port; | |
}* TerminationPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
} KeyedWaitSemaphore; | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
} AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct { | |
uint32 ImpersonationLevel:2; | |
uint32 EffectiveOnly:1; | |
} __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct { | |
uint32 Terminated:1; | |
uint32 ThreadInserted:1; | |
uint32 HideFromDebugger:1; | |
uint32 ActiveImpersonationInfo:1; | |
uint32 HardErrorsAreDisabled:1; | |
uint32 BreakOnTermination:1; | |
uint32 SkipCreationMsg:1; | |
uint32 SkipTerminationMsg:1; | |
uint32 CopyTokenOnOpen:1; | |
uint32 ThreadIoPriority:3; | |
uint32 ThreadPagePriority:3; | |
uint32 RundownFail:1; | |
uint32 UmsForceQueueTermination:1; | |
uint32 IndirectCpuSets:1; | |
uint32 DisableDynamicCodeOptOut:1; | |
uint32 ExplicitCaseSensitivity:1; | |
uint32 ReservedCrossThreadFlags:12; | |
} __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct { | |
uint32 ActiveExWorker:1; | |
uint32 MemoryMaker:1; | |
uint32 StoreLockThread:2; | |
uint32 ClonedThread:1; | |
uint32 KeyedEventInUse:1; | |
uint32 SelfTerminate:1; | |
uint32 RespectIoPriority:1; | |
uint32 ActivePageLists:1; | |
uint32 ReservedSameThreadPassiveFlags:23; | |
} __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct { | |
uint8 OwnsProcessAddressSpaceExclusive:1; | |
uint8 OwnsProcessAddressSpaceShared:1; | |
uint8 HardFaultBehavior:1; | |
uint8 StartAddressInvalid:1; | |
uint8 EtwCalloutActive:1; | |
uint8 SuppressSymbolLoad:1; | |
uint8 Prefetching:1; | |
uint8 OwnsVadExclusive:1; | |
uint8 SystemPagePriorityActive:1; | |
uint8 SystemPagePriority:3; | |
} __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} Event; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} JobLinks; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProcessListHead; | |
struct _ERESOURCE{ | |
struct _LIST_ENTRY ; | |
} JobLock; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalUserTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalKernelTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalCycleTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} PerProcessUserTimeLimit; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _JOB_ACCESS_STATE{ | |
union $4D9FF25A0471468DBB67647A63600223 Data; | |
struct _SECURITY_SUBJECT_CONTEXT CapturedContext; | |
}* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS{ | |
uint64 BytesRead; | |
uint64 BytesWritten; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 FlushOperationCount; | |
} DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} EffectiveAffinity; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* TargetThread; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* TargetPort; | |
union _KALPC_DIRECT_EVENT{ | |
uint Event; | |
struct { | |
uint32 ; | |
uint32 Reserved:31; | |
} __s1; | |
} DirectEvent; | |
uint Flags; | |
uint16 TotalLength; | |
uint16 Type; | |
uint16 DataInfoOffset; | |
uint8 SignalCompletion; | |
uint8 PostedToCompletionList; | |
} | |
struct _ALPC_HANDLE_ATTR{ | |
union { | |
uint Flags; | |
struct { | |
uint32 Reserved0:16; | |
uint32 SameAccess:1; | |
uint32 SameAttributes:1; | |
uint32 Indirect:1; | |
uint32 Inherit:1; | |
uint32 Reserved1:12; | |
} __s1; | |
} ___u0; | |
union { | |
void* Handle; | |
struct _ALPC_HANDLE_ATTR32{ | |
union { | |
uint Flags; | |
struct $2B1E20AF9DBFF65B03BD756E2C7B1060 __s1; | |
} ___u0; | |
uint Handle; | |
uint ObjectType; | |
union { | |
uint DesiredAccess; | |
uint GrantedAccess; | |
} ___u3; | |
}* HandleAttrArray; | |
} ___u1; | |
union { | |
uint ObjectType; | |
uint HandleCount; | |
} ___u2; | |
union { | |
uint DesiredAccess; | |
uint GrantedAccess; | |
} ___u3; | |
} | |
struct _ALPC_HANDLE_ATTR32{ | |
union { | |
uint Flags; | |
struct { | |
uint32 Reserved0:16; | |
uint32 SameAccess:1; | |
uint32 SameAttributes:1; | |
uint32 Indirect:1; | |
uint32 Inherit:1; | |
uint32 Reserved1:12; | |
} __s1; | |
} ___u0; | |
uint Handle; | |
uint ObjectType; | |
union { | |
uint DesiredAccess; | |
uint GrantedAccess; | |
} ___u3; | |
} | |
struct _ALPC_HANDLE_ENTRY{ | |
void* Object; | |
} | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY{ | |
void* Object; | |
}* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
} | |
struct _ALPC_LOG_CALLBACK{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
LogRoutine* LogRoutine; | |
} | |
struct _ALPC_LOG_ENTRY{ | |
struct _CLIENT_ID{ | |
void* ; | |
} Thread; | |
uint Type; | |
void* Data; | |
} | |
struct _ALPC_LOG_ENTRY_RECEIVE_MESSAGE{ | |
uint MessageId; | |
} | |
struct _ALPC_LOG_ENTRY_SEND_MESSAGE{ | |
uint ; | |
} | |
struct _ALPC_LOG_ENTRY_UNWAIT{ | |
int ; | |
} | |
struct _ALPC_LOG_ENTRY_WAIT_FOR_NEW_MESSAGE{ | |
uint ; | |
wchar_t PortName; | |
} | |
struct _ALPC_LOG_ENTRY_WAIT_FOR_REPLY{ | |
uint MessageId; | |
} | |
struct _ALPC_LOG_TYPE_CLOSE_PORT{ | |
uint ; | |
} | |
struct _ALPC_LOG_TYPE_CONNECT_FAIL{ | |
uint ; | |
int Status; | |
} | |
struct _ALPC_LOG_TYPE_CONNECT_REQUEST{ | |
uint MessageId; | |
} | |
struct _ALPC_LOG_TYPE_CONNECT_SUCCESS{ | |
uint ; | |
} | |
struct _ALPC_MESSAGE_ATTRIBUTES{ | |
uint ; | |
uint ValidAttributes; | |
} | |
struct _ALPC_MESSAGE_HANDLE_INFORMATION{ | |
uint Index; | |
uint Flags; | |
uint Handle; | |
uint ObjectType; | |
uint GrantedAccess; | |
} | |
struct _ALPC_MESSAGE_LOG{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} HashEntry; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct { | |
uint32 QueueType:3; | |
uint32 QueuePortType:4; | |
uint32 Canceled:1; | |
uint32 Ready:1; | |
uint32 ReleaseMessage:1; | |
uint32 SharedQuota:1; | |
uint32 ReplyWaitReply:1; | |
uint32 OwnerPortReference:1; | |
uint32 ReserveReference:1; | |
uint32 ReceiverReference:1; | |
uint32 ViewAttributeRetrieved:1; | |
uint32 InDispatch:1; | |
} s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
}* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA{ | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* ContextHandle; | |
struct _EPROCESS* OwningProcess; | |
struct _ALPC_PORT* OwnerPort; | |
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity; | |
union $EC07C1C8CE165EEF793582D3B20FAFCF u1; | |
}* SecurityData; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* View; | |
struct _KALPC_HANDLE_DATA{ | |
uint ObjectType; | |
uint Count; | |
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext; | |
}* HandleData; | |
union _KALPC_DIRECT_EVENT{ | |
uint Event; | |
struct $4D527ECE92544168B5228C7BC3E57A97 __s1; | |
} DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA{ | |
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket; | |
} WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{ | |
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1; | |
ULONG Length; | |
} u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{ | |
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2; | |
ULONG ZeroInit; | |
} u2; | |
struct _CLIENT_ID{ | |
void* ; | |
} ; | |
} PortMessage; | |
}* Message; | |
uint MessageId; | |
uint Valid; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SnapshotListHead; | |
} | |
struct _ALPC_MESSAGE_SNAPSHOT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
uint State; | |
int ReferenceMask; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* QueuePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _M128A FloatRegisters; | |
}* StateSaveArea; | |
struct _KSCHEDULING_GROUP{ | |
struct _KSCHEDULING_GROUP_POLICY Policy; | |
uint RelativeWeight; | |
uint ChildMinRate; | |
uint ChildMinWeight; | |
uint ChildTotalWeight; | |
uint64 QueryHistoryTimeStamp; | |
int64 NotificationCycles; | |
int64 MaxQuotaLimitCycles; | |
int64 MaxQuotaCyclesRemaining; | |
union $7E4164C3926CB86377AC4CFD3751C28A ___u9; | |
struct _KDPC* NotificationDpc; | |
struct _LIST_ENTRY ChildList; | |
struct _KSCHEDULING_GROUP* Parent; | |
struct _KSCB PerProcessor; | |
}* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER{ | |
uint8 Flags; | |
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1; | |
} WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ExitTime; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PostBlockList; | |
struct { | |
void* ForwardLinkShadow; | |
void* StartAddress; | |
} __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT{ | |
struct _TERMINATION_PORT* Next; | |
void* Port; | |
}* TerminationPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
} KeyedWaitSemaphore; | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER ; | |
} AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct { | |
uint32 ImpersonationLevel:2; | |
uint32 EffectiveOnly:1; | |
} __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct { | |
uint32 Terminated:1; | |
uint32 ThreadInserted:1; | |
uint32 HideFromDebugger:1; | |
uint32 ActiveImpersonationInfo:1; | |
uint32 HardErrorsAreDisabled:1; | |
uint32 BreakOnTermination:1; | |
uint32 SkipCreationMsg:1; | |
uint32 SkipTerminationMsg:1; | |
uint32 CopyTokenOnOpen:1; | |
uint32 ThreadIoPriority:3; | |
uint32 ThreadPagePriority:3; | |
uint32 RundownFail:1; | |
uint32 UmsForceQueueTermination:1; | |
uint32 IndirectCpuSets:1; | |
uint32 DisableDynamicCodeOptOut:1; | |
uint32 ExplicitCaseSensitivity:1; | |
uint32 ReservedCrossThreadFlags:12; | |
} __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct { | |
uint32 ActiveExWorker:1; | |
uint32 MemoryMaker:1; | |
uint32 StoreLockThread:2; | |
uint32 ClonedThread:1; | |
uint32 KeyedEventInUse:1; | |
uint32 SelfTerminate:1; | |
uint32 RespectIoPriority:1; | |
uint32 ActivePageLists:1; | |
uint32 ReservedSameThreadPassiveFlags:23; | |
} __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct { | |
uint8 OwnsProcessAddressSpaceExclusive:1; | |
uint8 OwnsProcessAddressSpaceShared:1; | |
uint8 HardFaultBehavior:1; | |
uint8 StartAddressInvalid:1; | |
uint8 EtwCalloutActive:1; | |
uint8 SuppressSymbolLoad:1; | |
uint8 Prefetching:1; | |
uint8 OwnsVadExclusive:1; | |
uint8 SystemPagePriorityActive:1; | |
uint8 SystemPagePriority:3; | |
} __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER ; | |
} Event; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} JobLinks; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProcessListHead; | |
struct _ERESOURCE{ | |
struct _LIST_ENTRY ; | |
} JobLock; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalUserTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalKernelTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TotalCycleTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} PerProcessUserTimeLimit; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _JOB_ACCESS_STATE{ | |
union $4D9FF25A0471468DBB67647A63600223 Data; | |
struct _SECURITY_SUBJECT_CONTEXT CapturedContext; | |
}* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS{ | |
uint64 BytesRead; | |
uint64 BytesWritten; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 FlushOperationCount; | |
} DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} EffectiveAffinity; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
void* ClientContext; | |
void* ServerContext; | |
void* ReturnAddress; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{ | |
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761{ | |
CSHORT DataLength; | |
CSHORT TotalLength; | |
} s1; | |
ULONG Length; | |
} u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{ | |
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0{ | |
CSHORT Type; | |
CSHORT DataInfoOffset; | |
} s2; | |
ULONG ZeroInit; | |
} u2; | |
struct _CLIENT_ID{ | |
void* ; | |
} ; | |
} PortMessage; | |
} | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY{ | |
void* Object; | |
}* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT* OwnerPort; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA* SecurityData; | |
struct _KALPC_VIEW* View; | |
struct _KALPC_HANDLE_DATA* HandleData; | |
union _KALPC_DIRECT_EVENT DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD Tcb; | |
union _LARGE_INTEGER CreateTime; | |
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2; | |
void* ChargeOnlySession; | |
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4; | |
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY ActiveTimerListHead; | |
struct _CLIENT_ID Cid; | |
union $0C382D283C97C56CABCE5365E406B33D ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
struct _LIST_ENTRY IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY ThreadListEntry; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
struct _EX_PUSH_LOCK ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21; | |
union $07F055B842A8A3729F87700B15A1AF62 ___u22; | |
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union $BCDEC18C25A84109137EA1753A3327D2 ___u29; | |
struct _LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY BoostList; | |
struct _LIST_ENTRY DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY CmCallbackListHead; | |
struct _GUID* ActivityId; | |
struct _SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES* EnergyValues; | |
void* CmDbgInfo; | |
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54; | |
struct _EJOB* Silo; | |
struct _UNICODE_STRING* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2; | |
struct _CLIENT_ID ; | |
} PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} Header; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY{ | |
uint16 ; | |
uint16 BaseLow; | |
union $4729093EE83589A5C42FEEDA1FD4429B HighWord; | |
} LdtDescriptor; | |
struct _KIDTENTRY{ | |
uint16 Offset; | |
uint16 Selector; | |
uint16 Access; | |
uint16 ExtendedOffset; | |
} Int21Descriptor; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ReadyListHead; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SwapListEntry; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} ActiveProcessors; | |
union { | |
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0; | |
int ProcessFlags; | |
} ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS{ | |
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0; | |
uint8 ExecuteOptions; | |
uint8 ExecuteOptionsNV; | |
} Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct { | |
uint32 ; | |
uint32 AccountingFolded:1; | |
uint32 NewProcessReported:1; | |
uint32 ExitProcessReported:1; | |
uint32 ReportCommitChanges:1; | |
uint32 LastReportMemory:1; | |
uint32 ForceWakeCharge:1; | |
uint32 CrossSessionCreate:1; | |
uint32 NeedsHandleRundown:1; | |
uint32 RefTraceEnabled:1; | |
uint32 DisableDynamicCode:1; | |
uint32 EmptyJobEvaluated:1; | |
uint32 DefaultPagePriority:3; | |
uint32 PrimaryTokenFrozen:1; | |
uint32 ProcessVerifierTarget:1; | |
uint32 StackRandomizationDisabled:1; | |
uint32 AffinityPermanent:1; | |
uint32 AffinityUpdateEnable:1; | |
uint32 PropagateNode:1; | |
uint32 ExplicitAffinity:1; | |
uint32 ProcessExecutionState:2; | |
uint32 DisallowStrippedImages:1; | |
uint32 HighEntropyASLREnabled:1; | |
uint32 ExtensionPointDisable:1; | |
uint32 ForceRelocateImages:1; | |
uint32 ProcessStateChangeRequest:2; | |
uint32 ProcessStateChangeInProgress:1; | |
uint32 DisallowWin32kSystemCalls:1; | |
} __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct { | |
uint32 CreateReported:1; | |
uint32 NoDebugInherit:1; | |
uint32 ProcessExiting:1; | |
uint32 ProcessDelete:1; | |
uint32 ControlFlowGuardEnabled:1; | |
uint32 VmDeleted:1; | |
uint32 OutswapEnabled:1; | |
uint32 Outswapped:1; | |
uint32 FailFastOnCommitFail:1; | |
uint32 Wow64VaSpace4Gb:1; | |
uint32 AddressSpaceInitialized:2; | |
uint32 SetTimerResolution:1; | |
uint32 BreakOnTermination:1; | |
uint32 DeprioritizeViews:1; | |
uint32 WriteWatch:1; | |
uint32 ProcessInSession:1; | |
uint32 OverrideAddressSpace:1; | |
uint32 HasAddressSpace:1; | |
uint32 LaunchPrefetched:1; | |
uint32 Background:1; | |
uint32 VmTopDown:1; | |
uint32 ImageNotifyDone:1; | |
uint32 PdeUpdateNeeded:1; | |
uint32 VdmAllowed:1; | |
uint32 ProcessRundown:1; | |
uint32 ProcessInserted:1; | |
uint32 DefaultIoPriority:3; | |
uint32 ProcessSelfDelete:1; | |
uint32 SetTimerResolutionLink:1; | |
} __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{ | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ListEntry; | |
struct _IO_MINI_COMPLETION_PACKET_USER{ | |
struct _LIST_ENTRY ListEntry; | |
uint PacketType; | |
void* KeyContext; | |
void* ApcContext; | |
int IoStatus; | |
uint IoStatusInformation; | |
MiniPacketCallback* MiniPacketCallback; | |
void* Context; | |
uint8 Allocated; | |
}* Packet; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* Lookaside; | |
} Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
}* ; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
}* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} CompletionListLock; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER{ | |
uint64 StartMagic; | |
uint TotalSize; | |
uint ListOffset; | |
uint ListSize; | |
uint BitmapOffset; | |
uint BitmapSize; | |
uint DataOffset; | |
uint DataSize; | |
uint AttributeFlags; | |
uint AttributeSize; | |
struct _ALPC_COMPLETION_LIST_STATE{ | |
union $E1067AE6A1E7F9D323832C08491E14C9 u1; | |
} State; | |
uint LastMessageId; | |
uint LastCallbackId; | |
uint PostCount; | |
uint ReturnCount; | |
uint LogSequenceNumber; | |
struct _RTL_SRWLOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} UserLock; | |
uint64 EndMagic; | |
}* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
} ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct { | |
uint32 Initialized:1; | |
uint32 Type:2; | |
uint32 ConnectionPending:1; | |
uint32 ConnectionRefused:1; | |
uint32 Disconnected:1; | |
uint32 Closed:1; | |
uint32 NoFlushOnClose:1; | |
uint32 ReturnExtendedInfo:1; | |
uint32 Waitable:1; | |
uint32 DynamicSecurity:1; | |
uint32 Wow64CompletionList:1; | |
uint32 Lpc:1; | |
uint32 LpcToLpc:1; | |
uint32 HasCompletionList:1; | |
uint32 HadCompletionList:1; | |
uint32 EnableCompletionList:1; | |
} s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* PortQueue; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* WaitingThread; | |
union { | |
struct { | |
uint32 QueueType:3; | |
uint32 QueuePortType:4; | |
uint32 Canceled:1; | |
uint32 Ready:1; | |
uint32 ReleaseMessage:1; | |
uint32 SharedQuota:1; | |
uint32 ReplyWaitReply:1; | |
uint32 OwnerPortReference:1; | |
uint32 ReserveReference:1; | |
uint32 ReceiverReference:1; | |
uint32 ViewAttributeRetrieved:1; | |
uint32 InDispatch:1; | |
} s1; | |
uint State; | |
} u1; | |
int SequenceNo; | |
union { | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* QuotaProcess; | |
void* QuotaBlock; | |
} ___u6; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelSequencePort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CancelListEntry; | |
struct _KALPC_RESERVE{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
}* HandleTable; | |
void* Handle; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* Message; | |
int Active; | |
}* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES{ | |
void* ClientContext; | |
void* ServerContext; | |
void* PortContext; | |
void* CancelPortContext; | |
struct _KALPC_SECURITY_DATA{ | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* ContextHandle; | |
struct _EPROCESS* OwningProcess; | |
struct _ALPC_PORT* OwnerPort; | |
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity; | |
union $EC07C1C8CE165EEF793582D3B20FAFCF u1; | |
}* SecurityData; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* View; | |
struct _KALPC_HANDLE_DATA{ | |
uint ObjectType; | |
uint Count; | |
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext; | |
}* HandleData; | |
union _KALPC_DIRECT_EVENT{ | |
uint Event; | |
struct $4D527ECE92544168B5228C7BC3E57A97 __s1; | |
} DirectEvent; | |
struct _KALPC_WORK_ON_BEHALF_DATA{ | |
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket; | |
} WorkOnBehalfData; | |
} MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ServerCommunicationPort; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _EPROCESS* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT StaticSecurity; | |
struct _EX_PUSH_LOCK IncomingQueueLock; | |
struct _LIST_ENTRY MainQueue; | |
struct _LIST_ENTRY LargeMessageQueue; | |
struct _EX_PUSH_LOCK PendingQueueLock; | |
struct _LIST_ENTRY PendingQueue; | |
struct _EX_PUSH_LOCK DirectQueueLock; | |
struct _LIST_ENTRY DirectQueue; | |
struct _EX_PUSH_LOCK WaitQueueLock; | |
struct _LIST_ENTRY WaitQueue; | |
union $88D6E373BE80179858F4516B453B5B0E ___u17; | |
struct _ALPC_PORT_ATTRIBUTES PortAttributes; | |
struct _EX_PUSH_LOCK ResourceListLock; | |
struct _LIST_ENTRY ResourceListHead; | |
struct _EX_PUSH_LOCK PortObjectLock; | |
struct _ALPC_COMPLETION_LIST* CompletionList; | |
struct _CALLBACK_OBJECT* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait; | |
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ClientCommunicationPort; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CommunicationList; | |
struct _ALPC_HANDLE_TABLE{ | |
struct _ALPC_HANDLE_ENTRY* ; | |
uint TotalHandles; | |
uint Flags; | |
struct _EX_PUSH_LOCK Lock; | |
} HandleTable; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CloseMessage; | |
}* CommunicationInfo; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* ConnectionPort; | |
struct _ETHREAD{ | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
} Tcb; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
union { | |
union _LARGE_INTEGER ExitTime; | |
struct _LIST_ENTRY KeyedWaitChain; | |
} ___u2; | |
void* ChargeOnlySession; | |
union { | |
struct _LIST_ENTRY PostBlockList; | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
} ___u4; | |
union { | |
struct _TERMINATION_PORT* TerminationPort; | |
struct _ETHREAD* ReaperLink; | |
void* KeyedWaitValue; | |
} ___u5; | |
uint ActiveTimerListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveTimerListHead; | |
struct _CLIENT_ID{ | |
void* ; | |
} Cid; | |
union { | |
struct _KSEMAPHORE KeyedWaitSemaphore; | |
struct _KSEMAPHORE AlpcWaitSemaphore; | |
} ___u9; | |
union _PS_CLIENT_SECURITY_CONTEXT{ | |
uint ImpersonationData; | |
void* ImpersonationToken; | |
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2; | |
} ClientSecurity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} IrpList; | |
uint TopLevelIrp; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceToVerify; | |
void* Win32StartAddress; | |
void* LegacyPowerObject; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListEntry; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ThreadLock; | |
uint ReadClusterSize; | |
int MmLockOrdering; | |
union { | |
uint CrossThreadFlags; | |
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1; | |
} ___u21; | |
union { | |
uint SameThreadPassiveFlags; | |
struct $91ED664B87E64AC5C771B1DF262577BA __s1; | |
} ___u22; | |
union { | |
uint SameThreadApcFlags; | |
struct $BEAA8316AFBC3276284AB117A4289881 __s1; | |
} ___u23; | |
uint8 CacheManagerActive; | |
uint8 DisablePageFaultClustering; | |
uint8 ActiveFaultCount; | |
uint8 LockOrderState; | |
uint AlpcMessageId; | |
union { | |
void* AlpcMessage; | |
uint AlpcReceiveAttributeSet; | |
} ___u29; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} AlpcWaitListEntry; | |
int ExitStatus; | |
uint CacheManagerCount; | |
uint IoBoostCount; | |
uint IoQoSBoostCount; | |
uint IoQoSThrottleCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BoostList; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DeboostList; | |
uint BoostListLock; | |
uint IrpListLock; | |
void* ReservedForSynchTracking; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} CmCallbackListHead; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* ActivityId; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SeLearningModeListHead; | |
void* VerifierContext; | |
uint KernelStackReference; | |
void* AdjustedClientToken; | |
void* WorkOnBehalfThread; | |
struct _PS_PROPERTY_SET{ | |
struct _LIST_ENTRY ListHead; | |
uint Lock; | |
} PropertySet; | |
void* PicoContext; | |
uint UserFsBase; | |
uint UserGsBase; | |
struct _THREAD_ENERGY_VALUES{ | |
uint64 Cycles; | |
}* EnergyValues; | |
void* CmDbgInfo; | |
union { | |
uint SelectedCpuSets; | |
uint* SelectedCpuSetsIndirect; | |
} ___u54; | |
struct _EJOB{ | |
struct _KEVENT Event; | |
struct _LIST_ENTRY JobLinks; | |
struct _LIST_ENTRY ProcessListHead; | |
struct _ERESOURCE JobLock; | |
union _LARGE_INTEGER TotalUserTime; | |
union _LARGE_INTEGER TotalKernelTime; | |
union _LARGE_INTEGER TotalCycleTime; | |
union _LARGE_INTEGER ThisPeriodTotalUserTime; | |
union _LARGE_INTEGER ThisPeriodTotalKernelTime; | |
uint64 TotalContextSwitches; | |
uint TotalPageFaultCount; | |
uint TotalProcesses; | |
uint ActiveProcesses; | |
uint TotalTerminatedProcesses; | |
union _LARGE_INTEGER PerProcessUserTimeLimit; | |
union _LARGE_INTEGER PerJobUserTimeLimit; | |
uint MinimumWorkingSetSize; | |
uint MaximumWorkingSetSize; | |
uint LimitFlags; | |
uint ActiveProcessLimit; | |
struct _KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE* AccessState; | |
void* AccessStateQuotaReference; | |
uint UIRestrictionsClass; | |
uint EndOfJobTimeAction; | |
void* CompletionPort; | |
void* CompletionKey; | |
uint64 CompletionCount; | |
uint SessionId; | |
uint SchedulingClass; | |
uint64 ReadOperationCount; | |
uint64 WriteOperationCount; | |
uint64 OtherOperationCount; | |
uint64 ReadTransferCount; | |
uint64 WriteTransferCount; | |
uint64 OtherTransferCount; | |
struct _PROCESS_DISK_COUNTERS DiskIoInfo; | |
uint ProcessMemoryLimit; | |
uint JobMemoryLimit; | |
uint JobTotalMemoryLimit; | |
uint PeakProcessMemoryUsed; | |
uint PeakJobMemoryUsed; | |
struct _KAFFINITY_EX EffectiveAffinity; | |
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
uint EffectiveMinimumWorkingSetSize; | |
uint EffectiveMaximumWorkingSetSize; | |
uint EffectiveProcessMemoryLimit; | |
struct _EJOB* EffectiveProcessMemoryLimitJob; | |
struct _EJOB* EffectivePerProcessUserTimeLimitJob; | |
struct _EJOB* EffectiveNetIoRateLimitJob; | |
struct _EJOB* EffectiveHeapAttributionJob; | |
uint EffectiveLimitFlags; | |
uint EffectiveSchedulingClass; | |
uint EffectiveFreezeCount; | |
uint EffectiveBackgroundCount; | |
uint EffectiveSwapCount; | |
uint EffectiveNotificationLimitCount; | |
uint8 EffectivePriorityClass; | |
uint8 PriorityClass; | |
uint8 NestingDepth; | |
uint8 Reserved1; | |
}* Silo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ThreadName; | |
uint ReadyTime; | |
}* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE{ | |
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{ | |
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1; | |
ULONG Length; | |
} u1; | |
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{ | |
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2; | |
ULONG ZeroInit; | |
} u2; | |
struct _CLIENT_ID{ | |
void* ; | |
} ; | |
} PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
} | |
struct _ALPC_PORT_ASSOCIATE_COMPLETION_PORT{ | |
void* CompletionKey; | |
void* CompletionPort; | |
} | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
} SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} | |
struct _ALPC_PORT_CALLBACK_INFORMATION{ | |
void* CallbackObject; | |
void* Context; | |
} | |
struct _ALPC_PORT_COMPLETION_LIST_INFORMATION{ | |
void* Buffer; | |
uint Size; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
} | |
struct _ALPC_PORT_MESSAGE_ZONE_INFORMATION{ | |
void* Buffer; | |
uint Size; | |
} | |
struct _ALPC_PROCESS_CONTEXT{ | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ViewListHead; | |
uint PagedPoolQuotaCache; | |
} | |
struct _ALPC_SECURITY_ATTR{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE{ | |
DWORD Length; | |
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode; | |
BOOLEAN EffectiveOnly; | |
}* QoS; | |
void* ContextHandle; | |
} | |
struct _ALPC_SERVER_INFORMATION{ | |
union { | |
struct { | |
void* ThreadHandle; | |
} In; | |
struct { | |
uint8 ThreadBlocked; | |
void* ConnectedProcessId; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ConnectionPortName; | |
} Out; | |
} ___u0; | |
} | |
struct _ALPC_TOKEN_ATTR{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} ; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} AuthenticationId; | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} ModifiedId; | |
} | |
struct _ALPC_VIEW_SEARCH_CONTEXT{ | |
void* Address; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ViewListEntry; | |
struct _KALPC_REGION{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegionListEntry; | |
struct _KALPC_SECTION{ | |
void* SectionObject; | |
uint Size; | |
struct _ALPC_HANDLE_TABLE* HandleTable; | |
void* SectionHandle; | |
struct _EPROCESS* OwnerProcess; | |
struct _ALPC_PORT* OwnerPort; | |
union $0162C4737AB11A67EA208E698973BEED u1; | |
uint NumberOfRegions; | |
struct _LIST_ENTRY RegionListHead; | |
}* Section; | |
uint Offset; | |
uint Size; | |
uint ViewSize; | |
union { | |
struct $F014C0A758420810DE3C33759D3E14FE s1; | |
} u1; | |
uint NumberOfViews; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ViewListHead; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* ReadOnlyView; | |
struct _KALPC_VIEW{ | |
struct _LIST_ENTRY ViewListEntry; | |
struct _KALPC_REGION* Region; | |
struct _ALPC_PORT* OwnerPort; | |
struct _EPROCESS* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union $350BAB9B07E839D8A1E6DC65E0DB800E u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY ProcessViewListEntry; | |
}* ReadWriteView; | |
}* Region; | |
struct _ALPC_PORT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PortListEntry; | |
struct _ALPC_COMMUNICATION_INFO{ | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ALPC_PORT* ServerCommunicationPort; | |
struct _ALPC_PORT* ClientCommunicationPort; | |
struct _LIST_ENTRY CommunicationList; | |
struct _ALPC_HANDLE_TABLE HandleTable; | |
struct _KALPC_MESSAGE* CloseMessage; | |
}* CommunicationInfo; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{ | |
uint ; | |
uint Size; | |
uint ActiveCount; | |
uint PendingNullCount; | |
uint PendingCheckCompletionListCount; | |
uint PendingDelete; | |
struct _SINGLE_LIST_ENTRY FreeListHead; | |
void* CompletionPort; | |
void* CompletionKey; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry; | |
}* CompletionPacketLookaside; | |
void* PortContext; | |
struct _SECURITY_CLIENT_CONTEXT{ | |
struct _SECURITY_QUALITY_OF_SERVICE ; | |
} StaticSecurity; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} IncomingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} MainQueue; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LargeMessageQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PendingQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} PendingQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} DirectQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DirectQueue; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} WaitQueueLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WaitQueue; | |
union { | |
struct _KSEMAPHORE* ; | |
struct _KEVENT* DummyEvent; | |
} ___u17; | |
struct _ALPC_PORT_ATTRIBUTES{ | |
uint Flags; | |
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
uint MaxMessageLength; | |
uint MemoryBandwidth; | |
uint MaxPoolUsage; | |
uint MaxSectionSize; | |
uint MaxViewSize; | |
uint MaxTotalSectionSize; | |
uint DupObjectTypes; | |
} PortAttributes; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ResourceListLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceListHead; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} PortObjectLock; | |
struct _ALPC_COMPLETION_LIST{ | |
struct _LIST_ENTRY Entry; | |
struct _EPROCESS* OwnerProcess; | |
struct _EX_PUSH_LOCK CompletionListLock; | |
struct _MDL* Mdl; | |
void* UserVa; | |
void* UserLimit; | |
void* DataUserVa; | |
void* SystemVa; | |
uint TotalSize; | |
struct _ALPC_COMPLETION_LIST_HEADER* Header; | |
void* List; | |
uint ListSize; | |
void* Bitmap; | |
uint BitmapSize; | |
void* Data; | |
uint DataSize; | |
uint BitmapLimit; | |
uint BitmapNextHint; | |
uint ConcurrencyCount; | |
uint AttributeFlags; | |
uint AttributeSize; | |
}* CompletionList; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
void* CallbackContext; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{ | |
struct _KEVENT ; | |
int DesiredReferenceNo; | |
}* ReferenceNoWait; | |
union { | |
struct $0FABBAB89B4942942836DBD8B35C9423 s1; | |
uint State; | |
} u1; | |
struct _ALPC_PORT* TargetQueuePort; | |
struct _ALPC_PORT* TargetSequencePort; | |
struct _KALPC_MESSAGE{ | |
struct _LIST_ENTRY Entry; | |
struct _ALPC_PORT* PortQueue; | |
struct _ALPC_PORT* OwnerPort; | |
struct _ETHREAD* WaitingThread; | |
union $EE0F50013E9027E6CF0CFCF452353101 u1; | |
int SequenceNo; | |
union $1ADE7DDF238903B210BDB4D394452192 ___u6; | |
struct _ALPC_PORT* CancelSequencePort; | |
struct _ALPC_PORT* CancelQueuePort; | |
int CancelSequenceNo; | |
struct _LIST_ENTRY CancelListEntry; | |
struct _KALPC_RESERVE* Reserve; | |
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void* DataUserVa; | |
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; | |
struct _ALPC_PORT* ConnectionPort; | |
struct _ETHREAD* ServerThread; | |
void* WakeReference; | |
void* ExtensionBuffer; | |
uint ExtensionBufferSize; | |
struct _PORT_MESSAGE PortMessage; | |
}* CachedMessage; | |
uint MainQueueLength; | |
uint LargeMessageQueueLength; | |
uint PendingQueueLength; | |
uint DirectQueueLength; | |
uint CanceledQueueLength; | |
uint WaitQueueLength; | |
}* OwnerPort; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* OwnerProcess; | |
void* Address; | |
uint Size; | |
void* SecureViewHandle; | |
void* WriteAccessHandle; | |
union { | |
struct { | |
uint32 WriteAccess:1; | |
uint32 AutoRelease:1; | |
uint32 ForceUnlink:1; | |
} s1; | |
} u1; | |
uint NumberOfOwnerMessages; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProcessViewListEntry; | |
}* View; | |
} | |
struct _ALPC_WORK_ON_BEHALF_ATTR{ | |
struct _ALPC_WORK_ON_BEHALF_TICKET{ | |
uint ; | |
uint ThreadCreationTimeLow; | |
} Ticket; | |
} | |
struct _ALPC_WORK_ON_BEHALF_TICKET{ | |
uint ; | |
uint ThreadCreationTimeLow; | |
} | |
struct _ALPHA_CONTEXT{ | |
uint FltF0; | |
uint FltF1; | |
uint FltF2; | |
uint FltF3; | |
uint FltF4; | |
uint FltF5; | |
uint FltF6; | |
uint FltF7; | |
uint FltF8; | |
uint FltF9; | |
uint FltF10; | |
uint FltF11; | |
uint FltF12; | |
uint FltF13; | |
uint FltF14; | |
uint FltF15; | |
uint FltF16; | |
uint FltF17; | |
uint FltF18; | |
uint FltF19; | |
uint FltF20; | |
uint FltF21; | |
uint FltF22; | |
uint FltF23; | |
uint FltF24; | |
uint FltF25; | |
uint FltF26; | |
uint FltF27; | |
uint FltF28; | |
uint FltF29; | |
uint FltF30; | |
uint FltF31; | |
uint IntV0; | |
uint IntT0; | |
uint IntT1; | |
uint IntT2; | |
uint IntT3; | |
uint IntT4; | |
uint IntT5; | |
uint IntT6; | |
uint IntT7; | |
uint IntS0; | |
uint IntS1; | |
uint IntS2; | |
uint IntS3; | |
uint IntS4; | |
uint IntS5; | |
uint IntFp; | |
uint IntA0; | |
uint IntA1; | |
uint IntA2; | |
uint IntA3; | |
uint IntA4; | |
uint IntA5; | |
uint IntT8; | |
uint IntT9; | |
uint IntT10; | |
uint IntT11; | |
uint IntRa; | |
uint IntT12; | |
uint IntAt; | |
uint IntGp; | |
uint IntSp; | |
uint IntZero; | |
uint Fpcr; | |
uint SoftFpcr; | |
uint Fir; | |
uint Psr; | |
uint ContextFlags; | |
uint HighFltF0; | |
uint HighFltF1; | |
uint HighFltF2; | |
uint HighFltF3; | |
uint HighFltF4; | |
uint HighFltF5; | |
uint HighFltF6; | |
uint HighFltF7; | |
uint HighFltF8; | |
uint HighFltF9; | |
uint HighFltF10; | |
uint HighFltF11; | |
uint HighFltF12; | |
uint HighFltF13; | |
uint HighFltF14; | |
uint HighFltF15; | |
uint HighFltF16; | |
uint HighFltF17; | |
uint HighFltF18; | |
uint HighFltF19; | |
uint HighFltF20; | |
uint HighFltF21; | |
uint HighFltF22; | |
uint HighFltF23; | |
uint HighFltF24; | |
uint HighFltF25; | |
uint HighFltF26; | |
uint HighFltF27; | |
uint HighFltF28; | |
uint HighFltF29; | |
uint HighFltF30; | |
uint HighFltF31; | |
uint HighIntV0; | |
uint HighIntT0; | |
uint HighIntT1; | |
uint HighIntT2; | |
uint HighIntT3; | |
uint HighIntT4; | |
uint HighIntT5; | |
uint HighIntT6; | |
uint HighIntT7; | |
uint HighIntS0; | |
uint HighIntS1; | |
uint HighIntS2; | |
uint HighIntS3; | |
uint HighIntS4; | |
uint HighIntS5; | |
uint HighIntFp; | |
uint HighIntA0; | |
uint HighIntA1; | |
uint HighIntA2; | |
uint HighIntA3; | |
uint HighIntA4; | |
uint HighIntA5; | |
uint HighIntT8; | |
uint HighIntT9; | |
uint HighIntT10; | |
uint HighIntT11; | |
uint HighIntRa; | |
uint HighIntT12; | |
uint HighIntAt; | |
uint HighIntGp; | |
uint HighIntSp; | |
uint HighIntZero; | |
uint HighFpcr; | |
uint HighSoftFpcr; | |
uint HighFir; | |
long doubleDoNotUseThisField; | |
uint HighFill; | |
} | |
struct _ALPHA_DBGKD_CONTROL_REPORT{ | |
uint InstructionCount; | |
uint8 InstructionStream; | |
} | |
struct _ALPHA_NT5_CONTEXT{ | |
uint64 FltF0; | |
uint64 FltF1; | |
uint64 FltF2; | |
uint64 FltF3; | |
uint64 FltF4; | |
uint64 FltF5; | |
uint64 FltF6; | |
uint64 FltF7; | |
uint64 FltF8; | |
uint64 FltF9; | |
uint64 FltF10; | |
uint64 FltF11; | |
uint64 FltF12; | |
uint64 FltF13; | |
uint64 FltF14; | |
uint64 FltF15; | |
uint64 FltF16; | |
uint64 FltF17; | |
uint64 FltF18; | |
uint64 FltF19; | |
uint64 FltF20; | |
uint64 FltF21; | |
uint64 FltF22; | |
uint64 FltF23; | |
uint64 FltF24; | |
uint64 FltF25; | |
uint64 FltF26; | |
uint64 FltF27; | |
uint64 FltF28; | |
uint64 FltF29; | |
uint64 FltF30; | |
uint64 FltF31; | |
uint64 IntV0; | |
uint64 IntT0; | |
uint64 IntT1; | |
uint64 IntT2; | |
uint64 IntT3; | |
uint64 IntT4; | |
uint64 IntT5; | |
uint64 IntT6; | |
uint64 IntT7; | |
uint64 IntS0; | |
uint64 IntS1; | |
uint64 IntS2; | |
uint64 IntS3; | |
uint64 IntS4; | |
uint64 IntS5; | |
uint64 IntFp; | |
uint64 IntA0; | |
uint64 IntA1; | |
uint64 IntA2; | |
uint64 IntA3; | |
uint64 IntA4; | |
uint64 IntA5; | |
uint64 IntT8; | |
uint64 IntT9; | |
uint64 IntT10; | |
uint64 IntT11; | |
uint64 IntRa; | |
uint64 IntT12; | |
uint64 IntAt; | |
uint64 IntGp; | |
uint64 IntSp; | |
uint64 IntZero; | |
uint64 Fpcr; | |
uint64 SoftFpcr; | |
uint64 Fir; | |
uint Psr; | |
uint ContextFlags; | |
uint Fill; | |
} | |
struct _ALPHA_NT5_KPROCESSOR_STATE{ | |
struct _ALPHA_NT5_CONTEXT{ | |
uint64 FltF0; | |
uint64 FltF1; | |
uint64 FltF2; | |
uint64 FltF3; | |
uint64 FltF4; | |
uint64 FltF5; | |
uint64 FltF6; | |
uint64 FltF7; | |
uint64 FltF8; | |
uint64 FltF9; | |
uint64 FltF10; | |
uint64 FltF11; | |
uint64 FltF12; | |
uint64 FltF13; | |
uint64 FltF14; | |
uint64 FltF15; | |
uint64 FltF16; | |
uint64 FltF17; | |
uint64 FltF18; | |
uint64 FltF19; | |
uint64 FltF20; | |
uint64 FltF21; | |
uint64 FltF22; | |
uint64 FltF23; | |
uint64 FltF24; | |
uint64 FltF25; | |
uint64 FltF26; | |
uint64 FltF27; | |
uint64 FltF28; | |
uint64 FltF29; | |
uint64 FltF30; | |
uint64 FltF31; | |
uint64 IntV0; | |
uint64 IntT0; | |
uint64 IntT1; | |
uint64 IntT2; | |
uint64 IntT3; | |
uint64 IntT4; | |
uint64 IntT5; | |
uint64 IntT6; | |
uint64 IntT7; | |
uint64 IntS0; | |
uint64 IntS1; | |
uint64 IntS2; | |
uint64 IntS3; | |
uint64 IntS4; | |
uint64 IntS5; | |
uint64 IntFp; | |
uint64 IntA0; | |
uint64 IntA1; | |
uint64 IntA2; | |
uint64 IntA3; | |
uint64 IntA4; | |
uint64 IntA5; | |
uint64 IntT8; | |
uint64 IntT9; | |
uint64 IntT10; | |
uint64 IntT11; | |
uint64 IntRa; | |
uint64 IntT12; | |
uint64 IntAt; | |
uint64 IntGp; | |
uint64 IntSp; | |
uint64 IntZero; | |
uint64 Fpcr; | |
uint64 SoftFpcr; | |
uint64 Fir; | |
uint Psr; | |
uint ContextFlags; | |
uint Fill; | |
} ContextFrame; | |
} | |
struct _ALT_RESOURCE_MODULE{ | |
uint16 ; | |
void* ModuleBase; | |
void* ModuleManifest; | |
uint ModuleCheckSum; | |
void* AlternateModule; | |
void* AlternateFileHandle; | |
uint AlternateFileSize; | |
uint CMFSegmentIndex; | |
uint CMFResourceOnlySegIndex; | |
uint ErrorCode; | |
} | |
struct _AMD64_CONTEXT{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint64 P6Home; | |
uint ContextFlags; | |
uint MxCsr; | |
uint16 SegCs; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint16 SegSs; | |
uint EFlags; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 Rbx; | |
uint64 Rsp; | |
uint64 Rbp; | |
uint64 Rsi; | |
uint64 Rdi; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 R12; | |
uint64 R13; | |
uint64 R14; | |
uint64 R15; | |
uint64 Rip; | |
union { | |
struct _AMD64_XMM_SAVE_AREA32{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} FltSave; | |
struct { | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Header; | |
} __s1; | |
} ___u38; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} VectorRegister; | |
} | |
struct _AMD64_DBGKD_CONTROL_REPORT{ | |
uint64 Dr6; | |
uint64 Dr7; | |
uint EFlags; | |
uint16 InstructionCount; | |
uint16 ReportFlags; | |
uint8 InstructionStream; | |
} | |
struct _AMD64_DBGKD_CONTROL_SET{ | |
uint TraceFlag; | |
uint64 Dr7; | |
uint64 CurrentSymbolStart; | |
uint64 CurrentSymbolEnd; | |
} | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} | |
struct _AMD64_DYNAMIC_FUNCTION_TABLE{ | |
struct LIST_ENTRY64{ | |
uint64 Flink; | |
uint64 Blink; | |
} ; | |
uint64 FunctionTable; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint64 MinimumAddress; | |
uint64 MaximumAddress; | |
uint64 BaseAddress; | |
uint64 Callback; | |
uint64 Context; | |
uint64 OutOfProcessCallbackDll; | |
_AMD64_FUNCTION_TABLE_TYPE Type; | |
uint EntryCount; | |
} | |
struct _AMD64_FIBER{ | |
uint64 FiberData; | |
uint64 ExceptionList; | |
uint64 StackBase; | |
uint64 StackLimit; | |
uint64 DeallocationStack; | |
struct _AMD64_CONTEXT{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint64 P6Home; | |
uint ContextFlags; | |
uint MxCsr; | |
uint16 SegCs; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint16 SegSs; | |
uint EFlags; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 Rbx; | |
uint64 Rsp; | |
uint64 Rbp; | |
uint64 Rsi; | |
uint64 Rdi; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 R12; | |
uint64 R13; | |
uint64 R14; | |
uint64 R15; | |
uint64 Rip; | |
union { | |
struct _AMD64_XMM_SAVE_AREA32{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128 FloatRegisters; | |
} FltSave; | |
struct { | |
struct _AMD64_M128 Header; | |
} __s1; | |
} ___u38; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} VectorRegister; | |
} FiberContext; | |
uint64 Wx86Tib; | |
} | |
struct _AMD64_KPROCESSOR_STATE{ | |
struct _AMD64_KSPECIAL_REGISTERS{ | |
uint64 Cr0; | |
uint64 Cr2; | |
uint64 Cr3; | |
uint64 Cr4; | |
uint64 KernelDr0; | |
uint64 KernelDr1; | |
uint64 KernelDr2; | |
uint64 KernelDr3; | |
uint64 KernelDr6; | |
uint64 KernelDr7; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Gdtr; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Idtr; | |
uint16 Tr; | |
uint16 Ldtr; | |
uint MxCsr; | |
uint64 DebugControl; | |
uint64 LastBranchToRip; | |
uint64 LastBranchFromRip; | |
uint64 LastExceptionToRip; | |
uint64 LastExceptionFromRip; | |
uint64 Cr8; | |
uint64 MsrGsBase; | |
uint64 MsrGsSwap; | |
uint64 MsrStar; | |
uint64 MsrLStar; | |
uint64 MsrCStar; | |
uint64 MsrSyscallMask; | |
uint64 Xcr0; | |
} SpecialRegisters; | |
uint64 Fill; | |
struct _AMD64_CONTEXT{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint64 P6Home; | |
uint ContextFlags; | |
uint MxCsr; | |
uint16 SegCs; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint16 SegSs; | |
uint EFlags; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 Rbx; | |
uint64 Rsp; | |
uint64 Rbp; | |
uint64 Rsi; | |
uint64 Rdi; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 R12; | |
uint64 R13; | |
uint64 R14; | |
uint64 R15; | |
uint64 Rip; | |
union { | |
struct _AMD64_XMM_SAVE_AREA32{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128 FloatRegisters; | |
} FltSave; | |
struct { | |
struct _AMD64_M128 Header; | |
} __s1; | |
} ___u38; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} VectorRegister; | |
} ContextFrame; | |
} | |
struct _AMD64_KSPECIAL_REGISTERS{ | |
uint64 Cr0; | |
uint64 Cr2; | |
uint64 Cr3; | |
uint64 Cr4; | |
uint64 KernelDr0; | |
uint64 KernelDr1; | |
uint64 KernelDr2; | |
uint64 KernelDr3; | |
uint64 KernelDr6; | |
uint64 KernelDr7; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Gdtr; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Idtr; | |
uint16 Tr; | |
uint16 Ldtr; | |
uint MxCsr; | |
uint64 DebugControl; | |
uint64 LastBranchToRip; | |
uint64 LastBranchFromRip; | |
uint64 LastExceptionToRip; | |
uint64 LastExceptionFromRip; | |
uint64 Cr8; | |
uint64 MsrGsBase; | |
uint64 MsrGsSwap; | |
uint64 MsrStar; | |
uint64 MsrLStar; | |
uint64 MsrCStar; | |
uint64 MsrSyscallMask; | |
uint64 Xcr0; | |
} | |
struct _AMD64_KSWITCH_FRAME{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint MxCsr; | |
uint8 ApcBypass; | |
uint8 Fill1; | |
} | |
struct _AMD64_KTRAP_FRAME{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5; | |
char PreviousMode; | |
uint8 PreviousIrql; | |
uint8 FaultIndicator; | |
uint8 ExceptionActive; | |
uint MxCsr; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 Spare0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm1; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm2; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm3; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm4; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm5; | |
uint64 FaultAddress; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 DebugControl; | |
uint64 LastBranchToRip; | |
uint64 LastBranchFromRip; | |
uint64 LastExceptionToRip; | |
uint64 LastExceptionFromRip; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint64 TrapFrame; | |
uint64 Rbx; | |
uint64 Rdi; | |
uint64 Rsi; | |
uint64 Rbp; | |
uint64 ErrorCode; | |
uint64 Rip; | |
uint16 SegCs; | |
uint16 Fill1; | |
} | |
struct _AMD64_LEGACY_SAVE_AREA{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} | |
struct _AMD64_OBSOLETE_CONTEXT_1{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint64 P6Home; | |
uint ContextFlags; | |
uint MxCsr; | |
uint16 SegCs; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint16 SegSs; | |
uint EFlags; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 Rbx; | |
uint64 Rsp; | |
uint64 Rbp; | |
uint64 Rsi; | |
uint64 Rdi; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 R12; | |
uint64 R13; | |
uint64 R14; | |
uint64 R15; | |
uint64 Rip; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm1; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm2; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm3; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm4; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm5; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm6; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm7; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm8; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm9; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm10; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm11; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm12; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm13; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm14; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm15; | |
struct _AMD64_LEGACY_SAVE_AREA{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} FltSave; | |
uint64 DebugControl; | |
uint64 LastBranchToRip; | |
uint64 LastBranchFromRip; | |
uint64 LastExceptionToRip; | |
uint64 LastExceptionFromRip; | |
uint64 VectorControl; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} VectorRegister; | |
} | |
struct _AMD64_OBSOLETE_CONTEXT_2{ | |
uint64 P1Home; | |
uint64 P2Home; | |
uint64 P3Home; | |
uint64 P4Home; | |
uint64 P5Home; | |
uint64 P6Home; | |
uint ContextFlags; | |
uint MxCsr; | |
uint16 SegCs; | |
uint16 SegDs; | |
uint16 SegEs; | |
uint16 SegFs; | |
uint16 SegGs; | |
uint16 SegSs; | |
uint EFlags; | |
uint64 Dr0; | |
uint64 Dr1; | |
uint64 Dr2; | |
uint64 Dr3; | |
uint64 Dr6; | |
uint64 Dr7; | |
uint64 Rax; | |
uint64 Rcx; | |
uint64 Rdx; | |
uint64 Rbx; | |
uint64 Rsp; | |
uint64 Rbp; | |
uint64 Rsi; | |
uint64 Rdi; | |
uint64 R8; | |
uint64 R9; | |
uint64 R10; | |
uint64 R11; | |
uint64 R12; | |
uint64 R13; | |
uint64 R14; | |
uint64 R15; | |
uint64 Rip; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm1; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm2; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm3; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm4; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm5; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm6; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm7; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm8; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm9; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm10; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm11; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm12; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm13; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm14; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Xmm15; | |
struct _AMD64_XMM_SAVE_AREA32_2{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} FltSave; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} VectorRegister; | |
} | |
struct _AMD64_OBSOLETE_KSPECIAL_REGISTERS{ | |
uint64 Cr0; | |
uint64 Cr2; | |
uint64 Cr3; | |
uint64 Cr4; | |
uint64 KernelDr0; | |
uint64 KernelDr1; | |
uint64 KernelDr2; | |
uint64 KernelDr3; | |
uint64 KernelDr6; | |
uint64 KernelDr7; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Gdtr; | |
struct _AMD64_DESCRIPTOR{ | |
uint16 Pad; | |
} Idtr; | |
uint16 Tr; | |
uint16 Ldtr; | |
uint MxCsr; | |
uint64 DebugControl; | |
uint64 LastBranchToRip; | |
uint64 LastBranchFromRip; | |
uint64 LastExceptionToRip; | |
uint64 LastExceptionFromRip; | |
uint64 Cr8; | |
uint64 MsrGsBase; | |
uint64 MsrGsSwap; | |
uint64 MsrStar; | |
uint64 MsrLStar; | |
uint64 MsrCStar; | |
uint64 MsrSyscallMask; | |
} | |
struct _AMD64_UNWIND_INFO{ | |
uint8 Version:3; | |
uint8 Flags:5; | |
uint8 SizeOfProlog; | |
uint8 CountOfCodes; | |
uint8 FrameRegister:4; | |
uint8 FrameOffset:4; | |
union _AMD64_UNWIND_CODE{ | |
struct { | |
uint8 CodeOffset; | |
uint8 UnwindOp:4; | |
uint8 OpInfo:4; | |
} __s0; | |
uint16 FrameOffset; | |
} UnwindCode; | |
} | |
struct _AMD64_XMM_SAVE_AREA32{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} | |
struct _AMD64_XMM_SAVE_AREA32_2{ | |
uint16 ControlWord; | |
uint16 StatusWord; | |
uint8 TagWord; | |
uint8 Reserved1; | |
uint16 ErrorOpcode; | |
uint ErrorOffset; | |
uint16 ErrorSelector; | |
uint16 Reserved2; | |
uint DataOffset; | |
uint16 DataSelector; | |
uint16 Reserved3; | |
uint MxCsr; | |
uint MxCsr_Mask; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} FloatRegisters; | |
} | |
struct _APICTABLE{ | |
uint8 Type; | |
uint8 Length; | |
} | |
struct _API_SET_HASH_ENTRY{ | |
uint Hash; | |
uint Index; | |
} | |
struct _API_SET_NAMESPACE{ | |
uint Version; | |
uint Size; | |
uint Flags; | |
uint Count; | |
uint EntryOffset; | |
uint HashOffset; | |
uint HashFactor; | |
} | |
struct _API_SET_NAMESPACE_ARRAY_V2{ | |
uint Version; | |
uint Count; | |
struct _API_SET_NAMESPACE_ENTRY_V2{ | |
uint NameOffset; | |
uint NameLength; | |
uint DataOffset; | |
} Array; | |
} | |
struct _API_SET_NAMESPACE_ARRAY_V4{ | |
uint Version; | |
uint Size; | |
uint Flags; | |
uint Count; | |
struct _API_SET_NAMESPACE_ENTRY_V4{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint AliasOffset; | |
uint AliasLength; | |
uint DataOffset; | |
} Array; | |
} | |
struct _API_SET_NAMESPACE_ENTRY{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint HashedLength; | |
uint ValueOffset; | |
uint ValueCount; | |
} | |
struct _API_SET_NAMESPACE_ENTRY_V2{ | |
uint NameOffset; | |
uint NameLength; | |
uint DataOffset; | |
} | |
struct _API_SET_NAMESPACE_ENTRY_V4{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint AliasOffset; | |
uint AliasLength; | |
uint DataOffset; | |
} | |
struct _API_SET_SCHEMA_EXTENSION_NODE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Links; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FileName; | |
int Status; | |
} | |
struct _API_SET_VALUE_ARRAY_V2{ | |
uint Count; | |
struct _API_SET_VALUE_ENTRY_V2{ | |
uint NameOffset; | |
uint NameLength; | |
uint ValueOffset; | |
uint ValueLength; | |
} Array; | |
} | |
struct _API_SET_VALUE_ARRAY_V4{ | |
uint Flags; | |
uint Count; | |
struct _API_SET_VALUE_ENTRY_V4{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint ValueOffset; | |
uint ValueLength; | |
} Array; | |
} | |
struct _API_SET_VALUE_ENTRY{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint ValueOffset; | |
uint ValueLength; | |
} | |
struct _API_SET_VALUE_ENTRY_V2{ | |
uint NameOffset; | |
uint NameLength; | |
uint ValueOffset; | |
uint ValueLength; | |
} | |
struct _API_SET_VALUE_ENTRY_V4{ | |
uint Flags; | |
uint NameOffset; | |
uint NameLength; | |
uint ValueOffset; | |
uint ValueLength; | |
} | |
struct _APPHELP_INFO{ | |
uint dwHtmlHelpID; | |
uint dwSeverity; | |
wchar_t* lpszAppName; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} guidID; | |
uint tiExe; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} guidDB; | |
int bOfflineContent; | |
int bUseHTMLHelp; | |
wchar_t* lpszChmFile; | |
wchar_t* lpszDetailsFile; | |
int bPreserveChoice; | |
int bMSI; | |
} | |
struct _APPLICATIONLAUNCH_SETTING_VALUE{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ActivationTime; | |
uint Flags; | |
uint ButtonInstanceID; | |
} | |
struct _APP_MEMORY_INFORMATION{ | |
uint64 AvailableCommit; | |
uint64 PrivateCommitUsage; | |
uint64 PeakPrivateCommitUsage; | |
uint64 TotalCommitUsage; | |
} | |
struct _ARBITER_ADD_RESERVED_PARAMETERS{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* ReserveDevice; | |
} | |
struct _ARBITER_ALLOCATION_STATE{ | |
uint64 ; | |
uint64 End; | |
uint64 CurrentMinimum; | |
uint64 CurrentMaximum; | |
struct _ARBITER_LIST_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint AlternativeCount; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection; | |
} u; | |
}* Alternatives; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* PhysicalDeviceObject; | |
_ARBITER_REQUEST_SOURCE RequestSource; | |
uint Flags; | |
int WorkSpace; | |
_INTERFACE_TYPE InterfaceType; | |
uint SlotNumber; | |
uint BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Generic; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Port; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197 Interrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444 MessageInterrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Memory; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F Dma; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935 BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278 DeviceSpecificData; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB Memory40; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928 Memory48; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F Memory64; | |
} u; | |
}* Assignment; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection; | |
} u; | |
}* SelectedAlternative; | |
_ARBITER_RESULT Result; | |
}* Entry; | |
struct _ARBITER_ALTERNATIVE{ | |
uint64 Minimum; | |
uint64 Maximum; | |
uint64 Length; | |
uint64 Alignment; | |
int Priority; | |
uint Flags; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection; | |
} u; | |
}* Descriptor; | |
uint Reserved; | |
}* CurrentAlternative; | |
uint AlternativeCount; | |
struct _ARBITER_ALTERNATIVE{ | |
uint64 Minimum; | |
uint64 Maximum; | |
uint64 Length; | |
uint64 Alignment; | |
int Priority; | |
uint Flags; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection; | |
} u; | |
}* Descriptor; | |
uint Reserved; | |
}* Alternatives; | |
uint16 Flags; | |
uint8 RangeAttributes; | |
uint8 RangeAvailableAttributes; | |
uint WorkSpace; | |
} | |
struct _ARBITER_ALTERNATIVE{ | |
uint64 Minimum; | |
uint64 Maximum; | |
uint64 Length; | |
uint64 Alignment; | |
int Priority; | |
uint Flags; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{ | |
ULONG MinimumVector; | |
ULONG MaximumVector; | |
IRQ_DEVICE_POLICY AffinityPolicy; | |
IRQ_PRIORITY PriorityPolicy; | |
KAFFINITY TargetedProcessors; | |
} Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{ | |
ULONG MinimumChannel; | |
ULONG MaximumChannel; | |
} Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{ | |
ULONG RequestLine; | |
ULONG Reserved; | |
ULONG Channel; | |
ULONG TransferWidth; | |
} DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{ | |
ULONG Length; | |
ULONG MinBusNumber; | |
ULONG MaxBusNumber; | |
ULONG Reserved; | |
} BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{ | |
ULONG Priority; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{ | |
ULONG ; | |
ULONG Alignment40; | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{ | |
ULONG Length48; | |
ULONG Alignment48; | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{ | |
ULONG Length64; | |
ULONG Alignment64; | |
union _LARGE_INTEGER ; | |
} Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{ | |
UCHAR Class; | |
UCHAR Type; | |
UCHAR Reserved1; | |
UCHAR Reserved2; | |
ULONG IdLowPart; | |
ULONG IdHighPart; | |
} Connection; | |
} u; | |
}* Descriptor; | |
uint Reserved; | |
} | |
struct _ARBITER_BOOT_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
} | |
struct _ARBITER_CONFLICT_INFO{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* ; | |
uint64 Start; | |
uint64 End; | |
} | |
struct _ARBITER_INSTANCE{ | |
uint Signature; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* MutexEvent; | |
wchar_t* Name; | |
wchar_t* OrderingName; | |
int ResourceType; | |
struct _RTL_RANGE_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
}* Allocation; | |
struct _RTL_RANGE_LIST{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
}* PossibleAllocation; | |
struct _ARBITER_ORDERING_LIST{ | |
uint16 Count; | |
uint16 Maximum; | |
struct _ARBITER_ORDERING{ | |
uint64 Start; | |
uint64 End; | |
}* Orderings; | |
} OrderingList; | |
struct _ARBITER_ORDERING_LIST{ | |
uint16 Count; | |
uint16 Maximum; | |
struct _ARBITER_ORDERING{ | |
uint64 Start; | |
uint64 End; | |
}* Orderings; | |
} ReservedList; | |
int ReferenceCount; | |
struct _ARBITER_INTERFACE{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
ArbiterHandler* ArbiterHandler; | |
uint Flags; | |
}* Interface; | |
uint AllocationStackMaxSize; | |
struct _ARBITER_ALLOCATION_STATE{ | |
uint64 ; | |
uint64 End; | |
uint64 CurrentMinimum; | |
uint64 CurrentMaximum; | |
struct _ARBITER_LIST_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint AlternativeCount; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u; | |
}* Alternatives; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* PhysicalDeviceObject; | |
_ARBITER_REQUEST_SOURCE RequestSource; | |
uint Flags; | |
int WorkSpace; | |
_INTERFACE_TYPE InterfaceType; | |
uint SlotNumber; | |
uint BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u; | |
}* Assignment; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u; | |
}* SelectedAlternative; | |
_ARBITER_RESULT Result; | |
}* Entry; | |
struct _ARBITER_ALTERNATIVE{ | |
uint64 Minimum; | |
uint64 Maximum; | |
uint64 Length; | |
uint64 Alignment; | |
int Priority; | |
uint Flags; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u; | |
}* Descriptor; | |
uint Reserved; | |
}* CurrentAlternative; | |
uint AlternativeCount; | |
struct _ARBITER_ALTERNATIVE{ | |
uint64 Minimum; | |
uint64 Maximum; | |
uint64 Length; | |
uint64 Alignment; | |
int Priority; | |
uint Flags; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u; | |
}* Descriptor; | |
uint Reserved; | |
}* Alternatives; | |
uint16 Flags; | |
uint8 RangeAttributes; | |
uint8 RangeAvailableAttributes; | |
uint WorkSpace; | |
}* AllocationStack; | |
UnpackRequirement* UnpackRequirement; | |
PackResource* PackResource; | |
UnpackResource* UnpackResource; | |
ScoreRequirement* ScoreRequirement; | |
TestAllocation* TestAllocation; | |
RetestAllocation* RetestAllocation; | |
CommitAllocation* CommitAllocation; | |
RollbackAllocation* RollbackAllocation; | |
BootAllocation* BootAllocation; | |
QueryArbitrate* QueryArbitrate; | |
QueryConflict* QueryConflict; | |
AddReserved* AddReserved; | |
StartArbiter* StartArbiter; | |
PreprocessEntry* PreprocessEntry; | |
AllocateEntry* AllocateEntry; | |
GetNextAllocationRange* GetNextAllocationRange; | |
FindSuitableRange* FindSuitableRange; | |
AddAllocation* AddAllocation; | |
BacktrackAllocation* BacktrackAllocation; | |
OverrideConflict* OverrideConflict; | |
InitializeRangeList* InitializeRangeList; | |
uint8 TransactionInProgress; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* TransactionEvent; | |
void* Extension; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* BusDeviceObject; | |
void* ConflictCallbackContext; | |
ConflictCallback* ConflictCallback; | |
} | |
struct _ARBITER_INTERFACE{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
ArbiterHandler* ArbiterHandler; | |
uint Flags; | |
} | |
struct _ARBITER_LIST_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
uint AlternativeCount; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{ | |
ULONG MinimumVector; | |
ULONG MaximumVector; | |
IRQ_DEVICE_POLICY AffinityPolicy; | |
IRQ_PRIORITY PriorityPolicy; | |
KAFFINITY TargetedProcessors; | |
} Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{ | |
ULONG MinimumChannel; | |
ULONG MaximumChannel; | |
} Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{ | |
ULONG RequestLine; | |
ULONG Reserved; | |
ULONG Channel; | |
ULONG TransferWidth; | |
} DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{ | |
ULONG Length; | |
ULONG MinBusNumber; | |
ULONG MaxBusNumber; | |
ULONG Reserved; | |
} BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{ | |
ULONG Priority; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{ | |
ULONG ; | |
ULONG Alignment40; | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{ | |
ULONG Length48; | |
ULONG Alignment48; | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{ | |
ULONG Length64; | |
ULONG Alignment64; | |
union _LARGE_INTEGER ; | |
} Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{ | |
UCHAR Class; | |
UCHAR Type; | |
UCHAR Reserved1; | |
UCHAR Reserved2; | |
ULONG IdLowPart; | |
ULONG IdHighPart; | |
} Connection; | |
} u; | |
}* Alternatives; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* PhysicalDeviceObject; | |
_ARBITER_REQUEST_SOURCE RequestSource; | |
uint Flags; | |
int WorkSpace; | |
_INTERFACE_TYPE InterfaceType; | |
uint SlotNumber; | |
uint BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{ | |
ULONG ; | |
ULONG Vector; | |
KAFFINITY Affinity; | |
} Interrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated; | |
} MessageInterrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{ | |
ULONG Channel; | |
ULONG Port; | |
ULONG Reserved1; | |
} Dma; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{ | |
ULONG Start; | |
ULONG Length; | |
ULONG Reserved; | |
} BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{ | |
ULONG DataSize; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} DeviceSpecificData; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{ | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{ | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{ | |
union _LARGE_INTEGER ; | |
} Memory64; | |
} u; | |
}* Assignment; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{ | |
ULONG MinimumVector; | |
ULONG MaximumVector; | |
IRQ_DEVICE_POLICY AffinityPolicy; | |
IRQ_PRIORITY PriorityPolicy; | |
KAFFINITY TargetedProcessors; | |
} Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{ | |
ULONG MinimumChannel; | |
ULONG MaximumChannel; | |
} Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{ | |
ULONG RequestLine; | |
ULONG Reserved; | |
ULONG Channel; | |
ULONG TransferWidth; | |
} DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{ | |
ULONG Length; | |
ULONG MinBusNumber; | |
ULONG MaxBusNumber; | |
ULONG Reserved; | |
} BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{ | |
ULONG Priority; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{ | |
ULONG ; | |
ULONG Alignment40; | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{ | |
ULONG Length48; | |
ULONG Alignment48; | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{ | |
ULONG Length64; | |
ULONG Alignment64; | |
union _LARGE_INTEGER ; | |
} Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{ | |
UCHAR Class; | |
UCHAR Type; | |
UCHAR Reserved1; | |
UCHAR Reserved2; | |
ULONG IdLowPart; | |
ULONG IdHighPart; | |
} Connection; | |
} u; | |
}* SelectedAlternative; | |
_ARBITER_RESULT Result; | |
} | |
struct _ARBITER_ORDERING{ | |
uint64 Start; | |
uint64 End; | |
} | |
struct _ARBITER_ORDERING_LIST{ | |
uint16 Count; | |
uint16 Maximum; | |
struct _ARBITER_ORDERING{ | |
uint64 Start; | |
uint64 End; | |
}* Orderings; | |
} | |
struct _ARBITER_PARAMETERS{ | |
union { | |
struct _ARBITER_TEST_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
uint AllocateFromCount; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u; | |
}* AllocateFrom; | |
} TestAllocation; | |
struct _ARBITER_RETEST_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
uint AllocateFromCount; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u; | |
}* AllocateFrom; | |
} RetestAllocation; | |
struct _ARBITER_BOOT_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
} BootAllocation; | |
struct _ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS{ | |
struct _CM_PARTIAL_RESOURCE_LIST{ | |
USHORT Version; | |
USHORT Revision; | |
ULONG Count; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR ; | |
}** ; | |
} QueryAllocatedResources; | |
struct _ARBITER_QUERY_CONFLICT_PARAMETERS{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u; | |
}* ConflictingResource; | |
uint* ConflictCount; | |
struct _ARBITER_CONFLICT_INFO{ | |
struct _DEVICE_OBJECT* ; | |
uint64 Start; | |
uint64 End; | |
}** Conflicts; | |
} QueryConflict; | |
struct _ARBITER_QUERY_ARBITRATE_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ; | |
} QueryArbitrate; | |
struct _ARBITER_ADD_RESERVED_PARAMETERS{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ReserveDevice; | |
} AddReserved; | |
} Parameters; | |
} | |
struct _ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS{ | |
struct _CM_PARTIAL_RESOURCE_LIST{ | |
USHORT Version; | |
USHORT Revision; | |
ULONG Count; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Generic; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Port; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197 Interrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444 MessageInterrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Memory; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F Dma; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935 BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278 DeviceSpecificData; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB Memory40; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928 Memory48; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F Memory64; | |
} u; | |
} ; | |
}** ; | |
} | |
struct _ARBITER_QUERY_ARBITRATE_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ; | |
} | |
struct _ARBITER_QUERY_CONFLICT_PARAMETERS{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* ; | |
struct _IO_RESOURCE_DESCRIPTOR{ | |
UCHAR Option; | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
UCHAR Spare1; | |
USHORT Flags; | |
USHORT Spare2; | |
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{ | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{ | |
ULONG MinimumVector; | |
ULONG MaximumVector; | |
IRQ_DEVICE_POLICY AffinityPolicy; | |
IRQ_PRIORITY PriorityPolicy; | |
KAFFINITY TargetedProcessors; | |
} Interrupt; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{ | |
ULONG MinimumChannel; | |
ULONG MaximumChannel; | |
} Dma; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{ | |
ULONG RequestLine; | |
ULONG Reserved; | |
ULONG Channel; | |
ULONG TransferWidth; | |
} DmaV3; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{ | |
ULONG Length; | |
ULONG Alignment; | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{ | |
ULONG Length; | |
ULONG MinBusNumber; | |
ULONG MaxBusNumber; | |
ULONG Reserved; | |
} BusNumber; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{ | |
ULONG Priority; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} ConfigData; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{ | |
ULONG ; | |
ULONG Alignment40; | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{ | |
ULONG Length48; | |
ULONG Alignment48; | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{ | |
ULONG Length64; | |
ULONG Alignment64; | |
union _LARGE_INTEGER ; | |
} Memory64; | |
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{ | |
UCHAR Class; | |
UCHAR Type; | |
UCHAR Reserved1; | |
UCHAR Reserved2; | |
ULONG IdLowPart; | |
ULONG IdHighPart; | |
} Connection; | |
} u; | |
}* ConflictingResource; | |
uint* ConflictCount; | |
struct _ARBITER_CONFLICT_INFO{ | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* ; | |
uint64 Start; | |
uint64 End; | |
}** Conflicts; | |
} | |
struct _ARBITER_RETEST_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
uint AllocateFromCount; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{ | |
ULONG ; | |
ULONG Vector; | |
KAFFINITY Affinity; | |
} Interrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated; | |
} MessageInterrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{ | |
ULONG Channel; | |
ULONG Port; | |
ULONG Reserved1; | |
} Dma; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{ | |
ULONG Start; | |
ULONG Length; | |
ULONG Reserved; | |
} BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{ | |
ULONG DataSize; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} DeviceSpecificData; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{ | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{ | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{ | |
union _LARGE_INTEGER ; | |
} Memory64; | |
} u; | |
}* AllocateFrom; | |
} | |
struct _ARBITER_TEST_ALLOCATION_PARAMETERS{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
}* ArbitrationList; | |
uint AllocateFromCount; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{ | |
UCHAR Type; | |
UCHAR ShareDisposition; | |
USHORT Flags; | |
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Generic; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Port; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{ | |
ULONG ; | |
ULONG Vector; | |
KAFFINITY Affinity; | |
} Interrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{ | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated; | |
} MessageInterrupt; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{ | |
union _LARGE_INTEGER ; | |
} Memory; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{ | |
ULONG Channel; | |
ULONG Port; | |
ULONG Reserved1; | |
} Dma; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{ | |
ULONG Data; | |
} DevicePrivate; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{ | |
ULONG Start; | |
ULONG Length; | |
ULONG Reserved; | |
} BusNumber; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{ | |
ULONG DataSize; | |
ULONG Reserved1; | |
ULONG Reserved2; | |
} DeviceSpecificData; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{ | |
union _LARGE_INTEGER ; | |
} Memory40; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{ | |
union _LARGE_INTEGER ; | |
} Memory48; | |
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{ | |
union _LARGE_INTEGER ; | |
} Memory64; | |
} u; | |
}* AllocateFrom; | |
} | |
struct _ARC_DISK_INFORMATION{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} DiskSignatures; | |
} | |
struct _ARC_DISK_SIGNATURE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
uint Signature; | |
char* ArcName; | |
uint CheckSum; | |
uint8 ValidPartitionTable; | |
uint8 xInt13; | |
uint8 IsGpt; | |
uint8 Reserved; | |
uint8 GptSignature; | |
} | |
struct _ARM64_CONTEXT{ | |
uint ContextFlags; | |
uint Cpsr; | |
uint64 X; | |
} | |
struct _ARM64_DBGKD_CONTROL_REPORT{ | |
uint Cpsr; | |
uint InstructionCount; | |
uint8 InstructionStream; | |
} | |
struct _ARM64_DBGKD_CONTROL_SET{ | |
uint Continue; | |
uint TraceFlag; | |
uint64 CurrentSymbolStart; | |
uint64 CurrentSymbolEnd; | |
} | |
struct _ARM64_DYNAMIC_FUNCTION_TABLE{ | |
struct LIST_ENTRY64{ | |
uint64 Flink; | |
uint64 Blink; | |
} ListEntry; | |
uint64 FunctionTable; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint64 MinimumAddress; | |
uint64 MaximumAddress; | |
uint64 BaseAddress; | |
uint64 Callback; | |
uint64 Context; | |
uint64 OutOfProcessCallbackDll; | |
_ARM64_FUNCTION_TABLE_TYPE Type; | |
uint EntryCount; | |
} | |
struct _ARM64_FIBER{ | |
uint64 FiberData; | |
uint64 ExceptionList; | |
uint64 StackBase; | |
uint64 StackLimit; | |
uint64 DeallocationStack; | |
struct _ARM64_CONTEXT{ | |
uint ContextFlags; | |
uint Cpsr; | |
uint64 X; | |
} FiberContext; | |
} | |
struct _ARM64_KPROCESSOR_STATE{ | |
struct _ARM64_KSPECIAL_REGISTERS{ | |
uint64 Elr_El1; | |
uint Spsr_El1; | |
uint64 Tpidr_El0; | |
uint64 Tpidrro_El0; | |
uint64 Tpidr_El1; | |
uint64 KernelBvr; | |
} SpecialRegisters; | |
struct _ARM64_CONTEXT{ | |
uint ContextFlags; | |
uint Cpsr; | |
uint64 X; | |
} ContextFrame; | |
} | |
struct _ARM64_KSPECIAL_REGISTERS{ | |
uint64 Elr_El1; | |
uint Spsr_El1; | |
uint64 Tpidr_El0; | |
uint64 Tpidrro_El0; | |
uint64 Tpidr_El1; | |
uint64 KernelBvr; | |
} | |
struct _ARM64_KSWITCH_FRAME{ | |
uint8 ApcBypass; | |
uint8 Fill; | |
} | |
struct _ARM64_KTRAP_FRAME{ | |
uint8 ExceptionActive; | |
uint8 ContextFromKFramesUnwound; | |
uint8 DebugRegistersValid; | |
union { | |
char PreviousMode; | |
uint8 PreviousIrql; | |
} ___u3; | |
uint FaultStatus; | |
union { | |
uint64 ; | |
uint64 TrapFrame; | |
} ___u5; | |
void* VfpState; | |
uint Bcr; | |
} | |
struct _ARM64_VFP_STATE{ | |
struct _ARM64_VFP_STATE* Link; | |
uint Fpcr; | |
uint Fpsr; | |
union _ARM64_NEON128{ | |
struct { | |
uint64 Low; | |
int64 High; | |
} __s0; | |
long doubleD; | |
} V; | |
} | |
struct _ARMCE_CONTEXT{ | |
uint ContextFlags; | |
uint R0; | |
uint R1; | |
uint R2; | |
uint R3; | |
uint R4; | |
uint R5; | |
uint R6; | |
uint R7; | |
uint R8; | |
uint R9; | |
uint R10; | |
uint R11; | |
uint R12; | |
uint Sp; | |
uint Lr; | |
uint Pc; | |
uint Cpsr; | |
} | |
struct _ARMCE_DBGKD_CONTROL_REPORT{ | |
uint Cpsr; | |
uint InstructionCount; | |
uint8 InstructionStream; | |
} | |
struct _ARMCE_DBGKD_CONTROL_SET{ | |
uint Continue; | |
uint CurrentSymbolStart; | |
uint CurrentSymbolEnd; | |
} | |
struct _ARMCE_KPROCESSOR_STATE{ | |
struct _ARMCE_KSPECIAL_REGISTERS{ | |
uint Cp15_Cr0_Id; | |
uint Cp15_Cr0_CacheType; | |
uint Cp15_Cr1_Control; | |
uint Cp15_Cr2_Ttb; | |
uint Cp15_Cr3_Dacr; | |
uint Cp15_Cr5_FaultStatus; | |
uint Cp15_Cr5_FaultAddress; | |
uint Cp15_Cr13_ProcessId; | |
} SpecialRegisters; | |
struct _ARMCE_CONTEXT{ | |
uint ContextFlags; | |
uint R0; | |
uint R1; | |
uint R2; | |
uint R3; | |
uint R4; | |
uint R5; | |
uint R6; | |
uint R7; | |
uint R8; | |
uint R9; | |
uint R10; | |
uint R11; | |
uint R12; | |
uint Sp; | |
uint Lr; | |
uint Pc; | |
uint Cpsr; | |
} ContextFrame; | |
} | |
struct _ARMCE_KSPECIAL_REGISTERS{ | |
uint Cp15_Cr0_Id; | |
uint Cp15_Cr0_CacheType; | |
uint Cp15_Cr1_Control; | |
uint Cp15_Cr2_Ttb; | |
uint Cp15_Cr3_Dacr; | |
uint Cp15_Cr5_FaultStatus; | |
uint Cp15_Cr5_FaultAddress; | |
uint Cp15_Cr13_ProcessId; | |
} | |
struct _ARMCE_KSWITCH_FRAME{ | |
uint8 ApcBypass; | |
uint8 Fill; | |
} | |
struct _ARM_CONTEXT{ | |
uint ContextFlags; | |
uint R0; | |
uint R1; | |
uint R2; | |
uint R3; | |
uint R4; | |
uint R5; | |
uint R6; | |
uint R7; | |
uint R8; | |
uint R9; | |
uint R10; | |
uint R11; | |
uint R12; | |
uint Sp; | |
uint Lr; | |
uint Pc; | |
uint Cpsr; | |
uint Fpscr; | |
uint Padding; | |
union { | |
struct _ARM_NEON128{ | |
uint64 ; | |
int64 High; | |
} Q; | |
} ___u20; | |
uint Bvr; | |
} | |
struct _ARM_DBGKD_CONTROL_REPORT{ | |
uint Cpsr; | |
uint InstructionCount; | |
uint8 InstructionStream; | |
} | |
struct _ARM_DBGKD_CONTROL_SET{ | |
uint Continue; | |
uint CurrentSymbolStart; | |
uint CurrentSymbolEnd; | |
} | |
struct _ARM_DYNAMIC_FUNCTION_TABLE{ | |
struct LIST_ENTRY32{ | |
uint Flink; | |
uint Blink; | |
} ListEntry; | |
uint FunctionTable; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint MinimumAddress; | |
uint MaximumAddress; | |
uint BaseAddress; | |
uint Callback; | |
uint Context; | |
uint OutOfProcessCallbackDll; | |
_ARM_FUNCTION_TABLE_TYPE Type; | |
uint EntryCount; | |
} | |
struct _ARM_ERRATA_INFO{ | |
union { | |
uint Flags; | |
struct { | |
uint32 SignalIpiOnTlbFlush:1; | |
uint32 Reserved:31; | |
} __s1; | |
} ___u0; | |
} | |
struct _ARM_FIBER{ | |
uint ; | |
uint ExceptionList; | |
uint StackBase; | |
uint StackLimit; | |
uint DeallocationStack; | |
struct _ARM_CONTEXT{ | |
uint ContextFlags; | |
uint R0; | |
uint R1; | |
uint R2; | |
uint R3; | |
uint R4; | |
uint R5; | |
uint R6; | |
uint R7; | |
uint R8; | |
uint R9; | |
uint R10; | |
uint R11; | |
uint R12; | |
uint Sp; | |
uint Lr; | |
uint Pc; | |
uint Cpsr; | |
uint Fpscr; | |
uint Padding; | |
union { | |
struct _ARM_NEON128{ | |
uint64 ; | |
int64 High; | |
} Q; | |
} ___u20; | |
uint Bvr; | |
} FiberContext; | |
} | |
struct _ARM_KPROCESSOR_STATE{ | |
struct _ARM_KSPECIAL_REGISTERS{ | |
uint Reserved; | |
} SpecialRegisters; | |
struct _ARM_CONTEXT{ | |
uint ContextFlags; | |
uint R0; | |
uint R1; | |
uint R2; | |
uint R3; | |
uint R4; | |
uint R5; | |
uint R6; | |
uint R7; | |
uint R8; | |
uint R9; | |
uint R10; | |
uint R11; | |
uint R12; | |
uint Sp; | |
uint Lr; | |
uint Pc; | |
uint Cpsr; | |
uint Fpscr; | |
uint Padding; | |
union { | |
struct _ARM_NEON128{ | |
uint64 ; | |
int64 High; | |
} Q; | |
} ___u20; | |
uint Bvr; | |
} ContextFrame; | |
} | |
struct _ARM_KSPECIAL_REGISTERS{ | |
uint Reserved; | |
} | |
struct _ARM_KSWITCH_FRAME{ | |
uint8 ; | |
uint8 Fill; | |
} | |
struct _ARM_KTRAP_FRAME{ | |
uint Arg3; | |
uint FaultStatus; | |
union { | |
uint FaultAddress; | |
uint TrapFrame; | |
} ___u2; | |
uint Reserved; | |
uint8 ExceptionActive; | |
uint8 ContextFromKFramesUnwound; | |
uint8 DebugRegistersValid; | |
union { | |
char PreviousMode; | |
uint8 PreviousIrql; | |
} ___u7; | |
uint VfpState; | |
uint Bvr; | |
} | |
struct _ARM_LOADER_BLOCK{ | |
uint PlaceHolder; | |
} | |
struct _ARM_NEON128{ | |
uint64 ; | |
int64 High; | |
} | |
struct _ARM_VFP_STATE{ | |
struct _ARM_VFP_STATE* Link; | |
uint Fpscr; | |
uint Fpinst; | |
uint Fpinst2; | |
uint64 VfpD; | |
} | |
struct _ASL_ATTRIBUTE{ | |
ASL_ATTRIBUTE_TYPE Type; | |
uint Length; | |
uint64 Value; | |
uint Flags; | |
} | |
struct _ASL_ATTRIBUTE_NAMES{ | |
ASL_ATTRIBUTE_INDEX Index; | |
wchar_t* Name; | |
} | |
struct _ASL_FILE_KIND_DETAIL_TO_STRING{ | |
ASL_FILE_KIND_DETAIL FileKindDetailValue; | |
wchar_t* FileKindDetailString; | |
} | |
struct _ASL_FILE_MAPPING{ | |
wchar_t FullPath; | |
} | |
struct _ASL_FILE_PARTIAL_VIEW{ | |
void* ; | |
uint ViewSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ViewFileOffset; | |
void* SecureHandle; | |
} | |
struct _ASL_LARGE_FILE_MAP{ | |
struct _RTL_FILE_MAP{ | |
void* FileHandle; | |
void* FileSection; | |
uint64 FileSize; | |
void* ViewBase; | |
uint ViewSize; | |
void* SecureHandle; | |
uint8 OwnsHandle; | |
uint8 OwnsSection; | |
uint8 OwnsView; | |
uint8 MappedAsImage; | |
}* OriginalFileMapPtr; | |
void* FileSection; | |
struct _ASL_FILE_PARTIAL_VIEW{ | |
void* ; | |
uint ViewSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ViewFileOffset; | |
void* SecureHandle; | |
} StartOfFile; | |
struct _ASL_FILE_PARTIAL_VIEW{ | |
void* ; | |
uint ViewSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ViewFileOffset; | |
void* SecureHandle; | |
} EndOfFile; | |
} | |
struct _ASL_LOG_CHANNEL{ | |
char Name; | |
} | |
struct _ASL_MANAGED_STORAGE_SIGNATURE{ | |
uint ; | |
uint16 MajorVer; | |
uint16 MinorVer; | |
uint ExtraData; | |
uint VersionStringLength; | |
} | |
struct _ASL_STRING_HASH{ | |
uint HashSize; | |
struct _ASL_STRING_HASH_ELEMENT{ | |
wchar_t* HashString; | |
uint StringRef; | |
struct _ASL_STRING_HASH_ELEMENT* Next; | |
}** HashElementTable; | |
} | |
struct _ASL_STRING_HASH_ELEMENT{ | |
wchar_t* HashString; | |
uint StringRef; | |
struct _ASL_STRING_HASH_ELEMENT* Next; | |
} | |
struct _ASL_STRING_VALID_XML_RANGES{ | |
wchar_t LowerInclusiveValue; | |
wchar_t UpperInclusiveValue; | |
} | |
struct _ASL_VERSION_INFO_ROOT{ | |
uint16 TotalLength; | |
uint16 ValueLength; | |
uint16 Type; | |
wchar_t KeyString; | |
} | |
struct _ASL_VER_BLK_HDR{ | |
uint16 TotalLength; | |
uint16 ValueLength; | |
uint16 Type; | |
wchar_t KeyString; | |
} | |
struct _ASSEMBLY_FILE_DETAILED_INFORMATION{ | |
uint ulFlags; | |
uint ulFilenameLength; | |
uint ulPathLength; | |
wchar_t* lpFileName; | |
wchar_t* lpFilePath; | |
} | |
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT{ | |
void* ResolutionContext; | |
uint RootIndex; | |
uint8 CancelResolution; | |
uint8 NoMoreEntries; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Root; | |
} | |
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING{ | |
void* Data; | |
uint AssemblyRosterIndex; | |
void* ResolutionContext; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Root; | |
uint8 KnownRoot; | |
uint RootCount; | |
uint8 CancelResolution; | |
} | |
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING{ | |
void* ResolutionContext; | |
} | |
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL{ | |
void* ; | |
uint RootIndexUsed; | |
} | |
struct _ASYNC_DECOMPRESS_CHUNK_CONTEXT{ | |
struct _WORK_QUEUE_ITEM{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} WorkItem; | |
uint8* UncompressedBuffer; | |
uint8* EndOfUncompressedBufferPlus1; | |
uint8* CompressedBuffer; | |
uint8* EndOfCompressedBufferPlus1; | |
uint* FinalUncompressedChunkSize; | |
uint IgnoredFinalUncompressedChunkSize; | |
struct _ASYNC_DECOMPRESS_CONTEXT{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY ; | |
} ; | |
} Event; | |
uint ReferenceCount; | |
int Status; | |
}* DecompressContext; | |
} | |
struct _ASYNC_DECOMPRESS_CONTEXT{ | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Event; | |
uint ReferenceCount; | |
int Status; | |
} | |
struct _ASYNC_READ_THREAD_STATS{ | |
uint CurrentLoad; | |
} | |
struct _ASYNC_TDC_WORK_ITEM{ | |
struct _WORK_QUEUE_ITEM{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* DeviceObject; | |
Callback* Callback; | |
void* Context; | |
struct _TARGET_DEVICE_CUSTOM_NOTIFICATION{ | |
USHORT Version; | |
USHORT Size; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
}* NotificationStructure; | |
} | |
struct _ATA_PASSTHROUGH12{ | |
uint8 OperationCode; | |
uint8 Reserved1:1; | |
uint8 Protocol:4; | |
uint8 MultipleCount:3; | |
uint8 TLength:2; | |
uint8 ByteBlock:1; | |
uint8 TDir:1; | |
uint8 Reserved2:1; | |
uint8 CkCond:1; | |
uint8 Offline:2; | |
uint8 Features; | |
uint8 SectorCount; | |
uint8 LbaLow; | |
uint8 LbaMid; | |
uint8 LbaHigh; | |
uint8 Device; | |
uint8 Command; | |
uint8 Reserved3; | |
uint8 Control; | |
} | |
struct _ATA_PASSTHROUGH16{ | |
uint8 OperationCode; | |
uint8 Extend:1; | |
uint8 Protocol:4; | |
uint8 MultipleCount:3; | |
uint8 TLength:2; | |
uint8 ByteBlock:1; | |
uint8 TDir:1; | |
uint8 Reserved1:1; | |
uint8 CkCond:1; | |
uint8 Offline:2; | |
uint8 Features15_8; | |
uint8 Features7_0; | |
uint8 SectorCount15_8; | |
uint8 SectorCount7_0; | |
uint8 LbaLow15_8; | |
uint8 LbaLow7_0; | |
uint8 LbaMid15_8; | |
uint8 LbaMid7_0; | |
uint8 LbaHigh15_8; | |
uint8 LbaHigh7_0; | |
uint8 Device; | |
uint8 Command; | |
uint8 Control; | |
} | |
struct _ATA_PASS_THROUGH_DIRECT{ | |
uint16 Length; | |
uint16 AtaFlags; | |
uint8 PathId; | |
uint8 TargetId; | |
uint8 Lun; | |
uint8 ReservedAsUchar; | |
uint DataTransferLength; | |
uint TimeOutValue; | |
uint ReservedAsUlong; | |
void* DataBuffer; | |
uint8 PreviousTaskFile; | |
} | |
struct _ATA_PASS_THROUGH_EX{ | |
uint16 Length; | |
uint16 AtaFlags; | |
uint8 PathId; | |
uint8 TargetId; | |
uint8 Lun; | |
uint8 ReservedAsUchar; | |
uint DataTransferLength; | |
uint TimeOutValue; | |
uint ReservedAsUlong; | |
uint DataBufferOffset; | |
uint8 PreviousTaskFile; | |
} | |
struct _ATOMIC_CREATE_ECP_CONTEXT{ | |
uint16 Size; | |
uint16 InFlags; | |
uint16 OutFlags; | |
uint16 ReparseBufferLength; | |
struct _REPARSE_DATA_BUFFER{ | |
uint ReparseTag; | |
uint16 ReparseDataLength; | |
uint16 Reserved; | |
union { | |
struct { | |
uint16 SubstituteNameOffset; | |
uint16 SubstituteNameLength; | |
uint16 PrintNameOffset; | |
uint16 PrintNameLength; | |
uint Flags; | |
wchar_t PathBuffer; | |
} SymbolicLinkReparseBuffer; | |
struct { | |
uint16 SubstituteNameOffset; | |
uint16 SubstituteNameLength; | |
uint16 PrintNameOffset; | |
uint16 PrintNameLength; | |
wchar_t PathBuffer; | |
} MountPointReparseBuffer; | |
struct { | |
uint8 ; | |
} GenericReparseBuffer; | |
} ___u3; | |
}* ReparseBuffer; | |
int64 FileSize; | |
int64 ValidDataLength; | |
} | |
struct _ATOM_BASIC_INFORMATION{ | |
uint16 UsageCount; | |
uint16 Flags; | |
uint16 NameLength; | |
wchar_t Name; | |
} | |
struct _ATOM_TABLE_INFORMATION{ | |
uint NumberOfAtoms; | |
uint16 Atoms; | |
} | |
struct _ATSR{ | |
uint8 Flags; | |
uint8 Reserved; | |
uint16 SegmentNumber; | |
struct _DEVICESCOPE{ | |
uint8 Type; | |
uint8 Length; | |
uint8 Reserved; | |
} DeviceScope; | |
} | |
struct _ATTRIBUTES_AND_SID{ | |
uint Attributes; | |
uint SidStart; | |
} | |
struct _ATTRIBUTE_MAP{ | |
uint16 Tag; | |
ASL_ATTRIBUTE_INDEX Index; | |
} | |
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION{ | |
uint DeviceGroupsCount; | |
struct _SID_AND_ATTRIBUTES{ | |
void* ; | |
}* pDeviceGroups; | |
uint RestrictedDeviceGroupsCount; | |
struct _SID_AND_ATTRIBUTES{ | |
void* ; | |
}* pRestrictedDeviceGroups; | |
struct _SID_AND_ATTRIBUTES_HASH{ | |
uint SidCount; | |
struct _SID_AND_ATTRIBUTES{ | |
void* ; | |
}* SidAttr; | |
uint Hash; | |
} DeviceGroupsHash; | |
struct _SID_AND_ATTRIBUTES_HASH{ | |
uint SidCount; | |
struct _SID_AND_ATTRIBUTES{ | |
void* ; | |
}* SidAttr; | |
uint Hash; | |
} RestrictedDeviceGroupsHash; | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
}* pUserSecurityAttributes; | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
}* pDeviceSecurityAttributes; | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
}* pRestrictedUserSecurityAttributes; | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
}* pRestrictedDeviceSecurityAttributes; | |
} | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListLink; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingListLink; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
uint16 ValueType; | |
uint Flags; | |
uint InternalFlags; | |
uint ValueCount; | |
uint DeletedValueCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ValuesList; | |
uint WorkingValueCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingValuesList; | |
} | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
} | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTE_QUERY{ | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint SecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} SecurityAttributesList; | |
uint WorkingSecurityAttributeCount; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingSecurityAttributesList; | |
}* pInfo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} AttributeName; | |
uint16 ValueType; | |
uint Flags; | |
uint ValueCount; | |
union { | |
int64* pInt64; | |
uint64* pUint64; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* pString; | |
struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE{ | |
uint64 Version; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
}* pFqbn; | |
struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{ | |
void* pValue; | |
uint ValueLength; | |
}* pBinary; | |
} Value; | |
uint ResumeCookie; | |
} | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTE_VALUE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListLink; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} WorkingListLink; | |
uint Flags; | |
union { | |
int64 Int64; | |
uint64 Uint64; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} String; | |
struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE{ | |
uint64 Version; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
} Fqbn; | |
struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{ | |
void* pValue; | |
uint ValueLength; | |
} OctetString; | |
} Value; | |
} | |
struct _AUX_ACCESS_DATA{ | |
struct _PRIVILEGE_SET{ | |
DWORD PrivilegeCount; | |
DWORD Control; | |
struct _LUID_AND_ATTRIBUTES{ | |
struct _LUID{ | |
DWORD LowPart; | |
LONG HighPart; | |
} ; | |
} ; | |
}* PrivilegesUsed; | |
struct _GENERIC_MAPPING{ | |
ACCESS_MASK GenericRead; | |
ACCESS_MASK GenericWrite; | |
ACCESS_MASK GenericExecute; | |
ACCESS_MASK GenericAll; | |
} GenericMapping; | |
uint AccessesToAudit; | |
uint MaximumAuditMask; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} TransactionId; | |
void* NewSecurityDescriptor; | |
void* ExistingSecurityDescriptor; | |
void* ParentSecurityDescriptor; | |
DeRefSecurityDescriptor* DeRefSecurityDescriptor; | |
void* SDLock; | |
struct _ACCESS_REASONS{ | |
uint ; | |
} AccessReasons; | |
uint8 GenerateStagingEvents; | |
} | |
struct _AVX_EXTENDED_CONTEXT{ | |
union { | |
uint8 ReservedAVXExRegisters; | |
} ___u0; | |
} | |
struct _AVX_YMM_REGISTERS{ | |
struct _VECTOR_128BIT_REGISTERS{ | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm1; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm2; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm3; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm4; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm5; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm6; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm7; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm8; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm9; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm10; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm11; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm12; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm13; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm14; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm15; | |
} ; | |
struct _VECTOR_128BIT_REGISTERS{ | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm0; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm1; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm2; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm3; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm4; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm5; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm6; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm7; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm8; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm9; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm10; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm11; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm12; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm13; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm14; | |
struct _AMD64_M128{ | |
uint64 Low; | |
int64 High; | |
} Ymm15; | |
} HighPart; | |
} | |
struct _AWEINFO{ | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} VadPhysicalPagesBitMap; | |
struct _EX_PUSH_LOCK_AUTO_EXPAND{ | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ; | |
struct _EX_PUSH_LOCK_AUTO_EXPAND_STATE{ | |
union { | |
struct $B8BE16A3D12D2052ACAC7615E36C3DCE __s0; | |
uint Value; | |
} ___u0; | |
} State; | |
uint Stats; | |
} PushLock; | |
struct _RTL_AVL_TREE{ | |
struct _RTL_BALANCED_NODE{ | |
union { | |
struct _RTL_BALANCED_NODE* ; | |
} ___u0; | |
union { | |
struct $424C8BBEF8F6C852886B4C6E806B5DB0 __s0; | |
struct $D962A830273E2DCC2CD9A73DF8740260 __s1; | |
uint ParentValue; | |
} ___u1; | |
}* Root; | |
} AweVadRoot; | |
} | |
struct _AsActivator{ | |
uint Id; | |
uint Reserved; | |
} | |
struct _AsConnection{ | |
uint8 Reserved; | |
} | |
struct _AsDevice{ | |
uint64 ; | |
struct _Component{ | |
uint Signature; | |
uint Id; | |
} Component; | |
} | |
struct _AsPreVeto{ | |
uint PreVetoSignature; | |
uint16 PlatformIdleState; | |
uint16 Reserved1; | |
uint VetoCode; | |
uint8 Reserved2; | |
} | |
struct _AsSocSubsystem{ | |
uint SubsystemSignature; | |
uint16 PlatformIdleState; | |
uint16 SubsystemIndex; | |
uint8 Reserved; | |
} | |
struct _BAPD_ITEM_DESCRIPTOR{ | |
union { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} PhysAddr; | |
void* VirtualAddr; | |
} u; | |
uint Length; | |
} | |
struct _BAPD_ITEM_V1{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Application; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} DataType; | |
uint Revision; | |
uint DataSize; | |
uint DataOffset; | |
} | |
struct _BAPD_LIST_ITEM{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Entry; | |
struct _BAPD_ITEM_DESCRIPTOR{ | |
union { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} PhysAddr; | |
void* VirtualAddr; | |
} u; | |
uint Length; | |
} ItemDesc; | |
} | |
struct _BASE_MCB{ | |
uint MaximumPairCount; | |
uint PairCount; | |
uint16 PoolType; | |
uint16 Flags; | |
void* Mapping; | |
} | |
struct _BATTERY_CHARGER_STATUS{ | |
_BATTERY_CHARGING_SOURCE_TYPE Type; | |
uint VaData; | |
} | |
struct _BATTERY_CHARGING_SOURCE{ | |
_BATTERY_CHARGING_SOURCE_TYPE Type; | |
uint MaxCurrent; | |
} | |
struct _BATTERY_CHARGING_SOURCE_INFORMATION{ | |
_BATTERY_CHARGING_SOURCE_TYPE Type; | |
uint8 SourceOnline; | |
} | |
struct _BATTERY_DEVICE_STATE{ | |
struct _BATTERY_INFORMATION{ | |
uint Capabilities; | |
uint8 Technology; | |
uint8 Reserved; | |
} Information; | |
struct _BATTERY_STATUS{ | |
uint PowerState; | |
uint Capacity; | |
uint Voltage; | |
int Rate; | |
} Status; | |
} | |
struct _BATTERY_INFORMATION{ | |
uint Capabilities; | |
uint8 Technology; | |
uint8 Reserved; | |
} | |
struct _BATTERY_MANUFACTURE_DATE{ | |
uint8 Day; | |
uint8 Month; | |
uint16 Year; | |
} | |
struct _BATTERY_QUERY_INFORMATION{ | |
uint BatteryTag; | |
BATTERY_QUERY_INFORMATION_LEVEL InformationLevel; | |
uint AtRate; | |
} | |
struct _BATTERY_SET_INFORMATION{ | |
uint BatteryTag; | |
BATTERY_SET_INFORMATION_LEVEL InformationLevel; | |
uint8 Buffer; | |
} | |
struct _BATTERY_STATUS{ | |
uint PowerState; | |
uint Capacity; | |
uint Voltage; | |
int Rate; | |
} | |
struct _BATTERY_USB_CHARGER_STATUS{ | |
_BATTERY_CHARGING_SOURCE_TYPE Type; | |
uint Reserved; | |
uint Flags; | |
uint MaxCurrent; | |
uint Voltage; | |
_USB_CHARGER_PORT PortType; | |
uint64 PortId; | |
void* PowerSourceInformation; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} OemCharger; | |
} | |
struct _BATTERY_WAIT_STATUS{ | |
uint BatteryTag; | |
uint Timeout; | |
uint PowerState; | |
uint LowCapacity; | |
uint HighCapacity; | |
} | |
struct _BCB{ | |
union { | |
struct _MBCB{ | |
__int16 NodeTypeCode; | |
__int16 NodeIsInZone; | |
uint PagesToWrite; | |
uint DirtyPages; | |
uint Reserved; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BitmapRanges; | |
int64 ResumeWritePage; | |
int64 MostRecentlyDirtiedPage; | |
struct _BITMAP_RANGE{ | |
struct _LIST_ENTRY Links; | |
int64 BasePage; | |
uint FirstDirtyPage; | |
uint LastDirtyPage; | |
uint DirtyPages; | |
uint* Bitmap; | |
} BitmapRange1; | |
struct _BITMAP_RANGE{ | |
struct _LIST_ENTRY Links; | |
int64 BasePage; | |
uint FirstDirtyPage; | |
uint LastDirtyPage; | |
uint DirtyPages; | |
uint* Bitmap; | |
} BitmapRange2; | |
struct _BITMAP_RANGE{ | |
struct _LIST_ENTRY Links; | |
int64 BasePage; | |
uint FirstDirtyPage; | |
uint LastDirtyPage; | |
uint DirtyPages; | |
uint* Bitmap; | |
} BitmapRange3; | |
} Dummy; | |
struct { | |
__int16 NodeTypeCode; | |
uint8 Dirty; | |
uint8 Reserved; | |
uint ByteLength; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} FileOffset; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BcbLinks; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} BeyondLastByte; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} OldestLsn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} NewestLsn; | |
struct _VACB{ | |
void* BaseAddress; | |
struct _SHARED_CACHE_MAP* SharedCacheMap; | |
union $F71FD6E462B66E625B8330A67E94FF41 Overlay; | |
struct _VACB_ARRAY_HEADER* ArrayHead; | |
}* Vacb; | |
uint PinCount; | |
struct _ERESOURCE{ | |
struct _LIST_ENTRY ; | |
} Resource; | |
struct _SHARED_CACHE_MAP{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteSize; | |
uint OpenCount; | |
union _LARGE_INTEGER FileSize; | |
struct _LIST_ENTRY BcbList; | |
union _LARGE_INTEGER SectionSize; | |
union _LARGE_INTEGER ValidDataLength; | |
union _LARGE_INTEGER ValidDataGoal; | |
struct _VACB* InitialVacbs; | |
}* SharedCacheMap; | |
void* BaseAddress; | |
} __s1; | |
} ___u0; | |
} | |
struct _BCB_TRIM_NOTIFICATION_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
Callback* Callback; | |
} | |
struct _BCD80{ | |
uint16 W; | |
} | |
struct _BCDE_BOOLEAN{ | |
uint8 ; | |
uint8 Pad; | |
} | |
struct _BCDE_DEVICE{ | |
uint DeviceType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} AdditionalOptions; | |
union { | |
struct { | |
uint ParentOffset; | |
wchar_t Path; | |
} File; | |
struct { | |
wchar_t ; | |
} Partition; | |
struct { | |
uint Type; | |
uint ParentOffset; | |
uint ElementType; | |
wchar_t Path; | |
} Locate; | |
struct { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InterfaceInstance; | |
} Vmbus; | |
struct { | |
uint8 Data; | |
} Unknown; | |
struct _BCDE_DEVICE_QUALIFIED_PARTITION{ | |
uint PartitionStyle; | |
uint Reserved; | |
union { | |
struct $A32995490EFBE0199A6E820B9FDA0321 Mbr; | |
struct $EF60B6C0ACF960F10D493F7E54F872BC Gpt; | |
} ___u2; | |
} QualifiedPartition; | |
} ___u2; | |
} | |
struct _BCDE_DEVICE_QUALIFIED_PARTITION{ | |
uint PartitionStyle; | |
uint Reserved; | |
union { | |
struct { | |
uint ; | |
uint64 PartitionOffset; | |
} Mbr; | |
struct { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} DiskSignature; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} PartitionSignature; | |
} Gpt; | |
} ___u2; | |
} | |
struct _BCDE_INTEGER{ | |
uint64 Value; | |
} | |
struct _BCDE_INTEGER_LIST{ | |
uint64 ; | |
} | |
struct _BCDE_OBJECT{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
} | |
struct _BCDE_OBJECT_LIST{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
} | |
struct _BCDE_STRING{ | |
wchar_t ; | |
} | |
struct _BCDI_ELEMENT{ | |
struct _BCDI_ELEMENT* ; | |
union _BCDE_UNPACKED_DATA_TYPE{ | |
struct { | |
uint32 ; | |
uint32 Format:4; | |
uint32 Class:4; | |
} __s0; | |
uint PackedValue; | |
} ParentDataType; | |
struct _BCD_ELEMENT_DESCRIPTION{ | |
uint Version; | |
uint Type; | |
uint DataSize; | |
} Description; | |
char Data; | |
} | |
struct _BCDI_OBJECT_TRACKER{ | |
struct _BCDI_OBJECT_TRACKER* Previous; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* Object; | |
} | |
struct _BCD_ELEMENT{ | |
struct _BCD_ELEMENT_DESCRIPTION{ | |
uint Version; | |
uint Type; | |
uint DataSize; | |
}* Description; | |
void* Data; | |
} | |
struct _BCD_ELEMENT_DESCRIPTION{ | |
uint Version; | |
uint Type; | |
uint DataSize; | |
} | |
struct _BCD_GUID_CACHED_VALUES{ | |
uint64 Time; | |
int AllocatedCount; | |
uint16 Sequence; | |
uint8 Seed; | |
} | |
struct _BCD_OBJECT{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Identifier; | |
struct _BCD_OBJECT_DESCRIPTION{ | |
uint Version; | |
uint Type; | |
}* Description; | |
} | |
struct _BCD_OBJECT_DESCRIPTION{ | |
uint Version; | |
uint Type; | |
} | |
struct _BCD_PRIVILEGE_STATE{ | |
uint Privilege; | |
uint8 PreviouslyEnabled; | |
uint8 Impersonating; | |
} | |
struct _BCRYPT_ALGORITHM_IDENTIFIER{ | |
wchar_t* pszName; | |
uint dwClass; | |
uint dwFlags; | |
} | |
struct _BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO{ | |
uint cbSize; | |
uint dwInfoVersion; | |
uint8* pbNonce; | |
uint cbNonce; | |
uint8* pbAuthData; | |
uint cbAuthData; | |
uint8* pbTag; | |
uint cbTag; | |
uint8* pbMacContext; | |
uint cbMacContext; | |
uint cbAAD; | |
uint64 cbData; | |
uint dwFlags; | |
} | |
struct _BCRYPT_PROVIDER_NAME{ | |
wchar_t* pszProviderName; | |
} | |
struct _BCryptBuffer{ | |
uint ; | |
uint BufferType; | |
void* pvBuffer; | |
} | |
struct _BCryptBufferDesc{ | |
uint ulVersion; | |
uint cBuffers; | |
struct _BCryptBuffer{ | |
uint ; | |
uint BufferType; | |
void* pvBuffer; | |
}* pBuffers; | |
} | |
struct _BDCB_IMAGE_INFORMATION{ | |
_BDCB_CLASSIFICATION Classification; | |
uint ImageFlags; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ImageName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} RegistryPath; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificatePublisher; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificateIssuer; | |
void* ImageHash; | |
void* CertificateThumbprint; | |
uint ImageHashAlgorithm; | |
uint ThumbprintHashAlgorithm; | |
uint ImageHashLength; | |
uint CertificateThumbprintLength; | |
} | |
struct _BDCB_STATUS_UPDATE_CONTEXT{ | |
_BDCB_STATUS_UPDATE_TYPE StatusType; | |
} | |
struct _BGCONSOLE_CACHE_DATA{ | |
uint ; | |
uint Background; | |
wchar_t Character; | |
wchar_t Reserved; | |
} | |
struct _BGCONSOLE_INTERFACE{ | |
Initialize* Initialize; | |
ClearScreen* ClearScreen; | |
SetTextColor* SetTextColor; | |
DisplayString* DisplayString; | |
DisplayCharacter* DisplayCharacter; | |
GetState* GetState; | |
GetCursorState* GetCursorState; | |
SetCursor* SetCursor; | |
} | |
struct _BGCONSOLE_INTERNAL_STATE{ | |
uint Columns; | |
uint Rows; | |
uint Flags; | |
uint Foreground; | |
uint Background; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Resolution; | |
uint PointSize; | |
void* CharacterContext; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Glyph; | |
struct _CARTESIAN_COORDINATE{ | |
uint X; | |
uint Y; | |
} Pad; | |
struct _CURSOR_COORDINATE{ | |
uint Column; | |
uint Row; | |
} Cursor; | |
uint CursorSize; | |
struct _BGCONSOLE_CACHE_DATA{ | |
uint ; | |
uint Background; | |
wchar_t Character; | |
wchar_t Reserved; | |
} Cache; | |
} | |
struct _BGCRITICAL_MODE_STATE{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} MainMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ErrorMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} AutomaticRestartMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ManualRestartMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} NoDumpAutomaticRestartMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} NoDumpManualRestartMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ProgressMessageSingularPartOne; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ProgressMessageSingularPartTwo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ProgressMessagePluralPartOne; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ProgressMessagePluralPartTwo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} DriverMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} StopCodeMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} UrlMessage; | |
struct _CHARACTER_CONTEXT{ | |
void* FontHandle; | |
uint PointSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} CharacterSize; | |
void* RegionHandle; | |
}* CharacterContext; | |
} | |
struct _BGFX_BUGCHECK_CONTEXT{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* MainMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ErrorMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} BugCode; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} BugData; | |
} | |
struct _BGFX_BUGCHECK_PROGRESS_CONTEXT{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* RestartMessage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ProgressMessageOne; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
}* ProgressMessageTwo; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ProgressValue; | |
} | |
struct _BGFX_CONSOLE_STATE{ | |
uint Width; | |
uint Height; | |
uint Columns; | |
uint Rows; | |
uint FontWidth; | |
uint FontHeight; | |
uint PadX; | |
uint PadY; | |
} | |
struct _BGFX_FONT_DATA{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _BGFX_FONT_FILE_DATA{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _FILE_IMAGE{ | |
void* Image; | |
uint SizeOfImage; | |
uint Flags; | |
void* CurrentPosition; | |
}* FileHandle; | |
uint NumberOfFonts; | |
uint FontFlags; | |
struct { | |
uint32 TtcTableDirectory:1; | |
uint32 Reserved:31; | |
} Flags; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FontListHead; | |
}* ParentFontFile; | |
struct _MAPPING_TABLE{ | |
uint SegmentCount; | |
void* BaseAllocation; | |
uint16* StartCode; | |
uint16* EndCode; | |
__int16* Delta; | |
uint16* RangeOffset; | |
uint16* GlyphIdArray; | |
}* MappingTable; | |
wchar_t* FamilyName; | |
uint FontIndex; | |
uint OffsetTableOffset; | |
uint CmapOffset; | |
uint EbdtOffset; | |
uint EblcOffset; | |
uint GlyfOffset; | |
uint HeadOffset; | |
uint HmtxOffset; | |
uint LocaOffset; | |
uint16 LocaFormat; | |
uint16 AdvanceWidthMax; | |
__int16 XMaxExtent; | |
__int16 Ascender; | |
__int16 Descender; | |
__int16 Baseline; | |
uint16 NumberOfHorizontalMetrics; | |
uint NumberOfStrikes; | |
uint ResolutionDPI; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} StrikeListHead; | |
uint16 UnitsPerEm; | |
} | |
struct _BGFX_FONT_FILE_DATA{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _FILE_IMAGE{ | |
void* Image; | |
uint SizeOfImage; | |
uint Flags; | |
void* CurrentPosition; | |
}* FileHandle; | |
uint NumberOfFonts; | |
uint FontFlags; | |
struct { | |
uint32 TtcTableDirectory:1; | |
uint32 Reserved:31; | |
} Flags; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FontListHead; | |
} | |
struct _BGFX_RESUME_CONTEXT{ | |
uint ResumeContextSize; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* ScratchMdl; | |
void* ScratchMemory; | |
uint ScratchMemorySize; | |
} | |
struct _BGRT_TABLE{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint16 Version; | |
uint8 Status; | |
uint8 ImageType; | |
uint64 LogoAddress; | |
uint OffsetX; | |
uint OffsetY; | |
} | |
struct _BG_EXTERNAL_CONTEXT{ | |
struct _BGFX_RESUME_CONTEXT{ | |
uint ResumeContextSize; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* ScratchMdl; | |
void* ScratchMemory; | |
uint ScratchMemorySize; | |
} ResumeContext; | |
struct _INBV_DISPLAY_CONTEXT{ | |
uint8 FrameBufferValid; | |
uint8 FrameBufferMapped; | |
uint8 DisplayRotation; | |
struct _INBV_MODE_INFORMATION{ | |
uint Height; | |
uint Width; | |
uint Stride; | |
_INBV_PIXEL_FORMAT PixelFormat; | |
} ModeInformation; | |
void* ShadowBuffer; | |
union { | |
void* FrameBuffer; | |
BltRoutine* BltRoutine; | |
} VideoMemory; | |
} DisplayContext; | |
void* SystemFontImage; | |
uint SystemFontImageSize; | |
uint SystemFontInitDataSize; | |
void* ConsoleFontImage; | |
uint ConsoleFontImageSize; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Application; | |
uint Version; | |
uint Flags; | |
uint FadeFrames; | |
void* MuiFileBase; | |
uint MuiFileSize; | |
struct _BG_RESOURCE_PACK{ | |
void* Background; | |
void* PagedBackground; | |
uint BackgroundSize; | |
struct _OFFSET{ | |
uint X; | |
uint Y; | |
} Offset; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Area; | |
void* QrBitmap; | |
uint QrBitmapSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} QrBitmapArea; | |
struct _GRAPHICS_RECTANGLE{ | |
uint Height; | |
uint Width; | |
uint BitsPerPixel; | |
uint Size; | |
uint Flags; | |
void* Data; | |
struct _BITMAP_IMAGE{ | |
uint HeaderSize; | |
uint Width; | |
uint Height; | |
uint16 Planes; | |
uint16 BitsPerPixel; | |
uint Compression; | |
uint DataSize; | |
uint HorizontalResolution; | |
uint VerticalResolution; | |
uint NumberOfColors; | |
uint NumberOfImportantColors; | |
} Bitmap; | |
}* QrDisplayRectangle; | |
} Resources; | |
uint64 BackgroundTransitionTime; | |
void* ReservePool; | |
uint ReservePoolSize; | |
void* TextRegionContext; | |
void* AnimationRegionContext; | |
struct _EDID_INFORMATION{ | |
uint8 Edid; | |
} EdidInformation; | |
_BG_CONSOLE_LOCALE ConsoleLocale; | |
} | |
struct _BG_INTERNAL_CONTEXT{ | |
struct _INBV_DISPLAY_CONTEXT{ | |
uint8 FrameBufferValid; | |
uint8 FrameBufferMapped; | |
uint8 DisplayRotation; | |
struct _INBV_MODE_INFORMATION{ | |
uint Height; | |
uint Width; | |
uint Stride; | |
_INBV_PIXEL_FORMAT PixelFormat; | |
} ModeInformation; | |
void* ShadowBuffer; | |
union { | |
void* FrameBuffer; | |
BltRoutine* BltRoutine; | |
} VideoMemory; | |
} DisplayContext; | |
struct _INBV_DISPLAY_CONTEXT{ | |
uint8 FrameBufferValid; | |
uint8 FrameBufferMapped; | |
uint8 DisplayRotation; | |
struct _INBV_MODE_INFORMATION{ | |
uint Height; | |
uint Width; | |
uint Stride; | |
_INBV_PIXEL_FORMAT PixelFormat; | |
} ModeInformation; | |
void* ShadowBuffer; | |
union { | |
void* FrameBuffer; | |
BltRoutine* BltRoutine; | |
} VideoMemory; | |
} CachedDisplayContext; | |
struct _SYSTEM_BOOT_GRAPHICS_INFORMATION{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FrameBuffer; | |
uint Width; | |
uint Height; | |
uint PixelStride; | |
uint Flags; | |
_SYSTEM_PIXEL_FORMAT Format; | |
uint DisplayRotation; | |
} GraphicsInformation; | |
uint Flags; | |
uint FadeFrames; | |
uint LogoOffset; | |
uint ProgressOffset; | |
uint ProgressSize; | |
uint TextControlOffset; | |
uint TextControlSize; | |
uint FadeTotalSize; | |
uint AnimationCacheSize; | |
uint AnimationFrameSize; | |
uint AnimationRegionSize; | |
uint TextRegionSize; | |
struct _BG_EXTERNAL_CONTEXT{ | |
struct _BGFX_RESUME_CONTEXT{ | |
uint ResumeContextSize; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ScratchMdl; | |
void* ScratchMemory; | |
uint ScratchMemorySize; | |
} ResumeContext; | |
struct _INBV_DISPLAY_CONTEXT{ | |
uint8 FrameBufferValid; | |
uint8 FrameBufferMapped; | |
uint8 DisplayRotation; | |
struct _INBV_MODE_INFORMATION{ | |
uint Height; | |
uint Width; | |
uint Stride; | |
_INBV_PIXEL_FORMAT PixelFormat; | |
} ModeInformation; | |
void* ShadowBuffer; | |
union { | |
void* FrameBuffer; | |
BltRoutine* BltRoutine; | |
} VideoMemory; | |
} DisplayContext; | |
void* SystemFontImage; | |
uint SystemFontImageSize; | |
uint SystemFontInitDataSize; | |
void* ConsoleFontImage; | |
uint ConsoleFontImageSize; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Application; | |
uint Version; | |
uint Flags; | |
uint FadeFrames; | |
void* MuiFileBase; | |
uint MuiFileSize; | |
struct _BG_RESOURCE_PACK{ | |
void* Background; | |
void* PagedBackground; | |
uint BackgroundSize; | |
struct _OFFSET{ | |
uint X; | |
uint Y; | |
} Offset; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Area; | |
void* QrBitmap; | |
uint QrBitmapSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} QrBitmapArea; | |
struct _GRAPHICS_RECTANGLE{ | |
uint Height; | |
uint Width; | |
uint BitsPerPixel; | |
uint Size; | |
uint Flags; | |
void* Data; | |
struct _BITMAP_IMAGE Bitmap; | |
}* QrDisplayRectangle; | |
} Resources; | |
uint64 BackgroundTransitionTime; | |
void* ReservePool; | |
uint ReservePoolSize; | |
void* TextRegionContext; | |
void* AnimationRegionContext; | |
struct _EDID_INFORMATION{ | |
uint8 Edid; | |
} EdidInformation; | |
_BG_CONSOLE_LOCALE ConsoleLocale; | |
}* ResumeContext; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} Application; | |
struct _BG_RESOURCE_PACK{ | |
void* Background; | |
void* PagedBackground; | |
uint BackgroundSize; | |
struct _OFFSET{ | |
uint X; | |
uint Y; | |
} Offset; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Area; | |
void* QrBitmap; | |
uint QrBitmapSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} QrBitmapArea; | |
struct _GRAPHICS_RECTANGLE{ | |
uint Height; | |
uint Width; | |
uint BitsPerPixel; | |
uint Size; | |
uint Flags; | |
void* Data; | |
struct _BITMAP_IMAGE{ | |
uint HeaderSize; | |
uint Width; | |
uint Height; | |
uint16 Planes; | |
uint16 BitsPerPixel; | |
uint Compression; | |
uint DataSize; | |
uint HorizontalResolution; | |
uint VerticalResolution; | |
uint NumberOfColors; | |
uint NumberOfImportantColors; | |
} Bitmap; | |
}* QrDisplayRectangle; | |
} Resources; | |
uint64 BackgroundTransitionTime; | |
struct _FILE_IMAGE{ | |
void* Image; | |
uint SizeOfImage; | |
uint Flags; | |
void* CurrentPosition; | |
}* ConsoleFont; | |
struct _FILE_IMAGE{ | |
void* Image; | |
uint SizeOfImage; | |
uint Flags; | |
void* CurrentPosition; | |
}* SystemFont; | |
struct _FILE_IMAGE{ | |
void* Image; | |
uint SizeOfImage; | |
uint Flags; | |
void* CurrentPosition; | |
}* BootResourceMui; | |
void* AnimationRegion; | |
void* TextRegion; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} BootRestoreList; | |
struct _EDID_INFORMATION{ | |
uint8 Edid; | |
} EdidInformation; | |
uint* FrameBufferAccessCounter; | |
_BG_CONSOLE_LOCALE ConsoleLocale; | |
} | |
struct _BG_RASTERIZER_WORKSPACE{ | |
void* Buffer; | |
uint BufferSize; | |
uint BytesConsumed; | |
} | |
struct _BG_RESOURCE_PACK{ | |
void* Background; | |
void* PagedBackground; | |
uint BackgroundSize; | |
struct _OFFSET{ | |
uint X; | |
uint Y; | |
} Offset; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} Area; | |
void* QrBitmap; | |
uint QrBitmapSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} QrBitmapArea; | |
struct _GRAPHICS_RECTANGLE{ | |
uint Height; | |
uint Width; | |
uint BitsPerPixel; | |
uint Size; | |
uint Flags; | |
void* Data; | |
struct _BITMAP_IMAGE{ | |
uint HeaderSize; | |
uint Width; | |
uint Height; | |
uint16 Planes; | |
uint16 BitsPerPixel; | |
uint Compression; | |
uint DataSize; | |
uint HorizontalResolution; | |
uint VerticalResolution; | |
uint NumberOfColors; | |
uint NumberOfImportantColors; | |
} Bitmap; | |
}* QrDisplayRectangle; | |
} | |
struct _BG_WORKSPACE{ | |
struct _BG_RASTERIZER_WORKSPACE{ | |
void* Buffer; | |
uint BufferSize; | |
uint BytesConsumed; | |
} RasterizerWorkspace; | |
} | |
struct _BIN_COUNT{ | |
struct _BIN_RANGE{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartValue; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Length; | |
} ; | |
uint BinCount; | |
} | |
struct _BIN_RANGE{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartValue; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Length; | |
} | |
struct _BIN_RESULTS{ | |
uint NumberOfBins; | |
struct _BIN_COUNT{ | |
struct _BIN_RANGE{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} StartValue; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} Length; | |
} ; | |
uint BinCount; | |
} BinCounts; | |
} | |
struct _BITMAPINFOHEADER{ | |
uint biSize; | |
int biWidth; | |
int biHeight; | |
uint16 biPlanes; | |
uint16 biBitCount; | |
uint biCompression; | |
uint biSizeImage; | |
int biXPelsPerMeter; | |
int biYPelsPerMeter; | |
uint biClrUsed; | |
uint biClrImportant; | |
} | |
struct _BITMAP_CACHE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
uint8* CompressedBitmaps; | |
uint8* DecompressionBuffer; | |
void* DecompressionWorkSpace; | |
uint CompressedBitmapsSize; | |
uint DecompressionBufferSize; | |
uint Size; | |
uint EntryCount; | |
} | |
struct _BITMAP_DUMP{ | |
uint Signature; | |
uint ValidDump; | |
uint DumpOptions; | |
uint8 Reserved; | |
} | |
struct _BITMAP_IMAGE{ | |
uint HeaderSize; | |
uint Width; | |
uint Height; | |
uint16 Planes; | |
uint16 BitsPerPixel; | |
uint Compression; | |
uint DataSize; | |
uint HorizontalResolution; | |
uint VerticalResolution; | |
uint NumberOfColors; | |
uint NumberOfImportantColors; | |
} | |
struct _BITMAP_IMAGE_PROLOG{ | |
uint16 Identifier; | |
uint FileSize; | |
uint Reserved; | |
uint DataOffset; | |
} | |
struct _BITMAP_RANGE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Links; | |
int64 BasePage; | |
uint FirstDirtyPage; | |
uint LastDirtyPage; | |
uint DirtyPages; | |
uint* Bitmap; | |
} | |
struct _BI_FILE_INFORMATION{ | |
uint VolumeSerialNumber; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FileIndex; | |
} | |
struct _BLANK_MEDIA{ | |
uint8 OperationCode; | |
uint8 BlankType:3; | |
uint8 Reserved1:1; | |
uint8 Immediate:1; | |
uint8 Reserved2:3; | |
uint8 AddressOrTrack; | |
} | |
struct _BLDR_DATA_TABLE_ENTRY{ | |
struct _KLDR_DATA_TABLE_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} InLoadOrderLinks; | |
void* ExceptionTable; | |
uint ExceptionTableSize; | |
void* GpValue; | |
struct _NON_PAGED_DEBUG_INFO{ | |
uint16 Signature; | |
uint16 Flags; | |
uint Size; | |
uint16 Machine; | |
uint16 Characteristics; | |
uint TimeDateStamp; | |
uint CheckSum; | |
uint SizeOfImage; | |
uint64 ImageBase; | |
}* NonPagedDebugInfo; | |
void* DllBase; | |
void* EntryPoint; | |
uint SizeOfImage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FullDllName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} BaseDllName; | |
uint Flags; | |
uint16 LoadCount; | |
union { | |
struct { | |
uint16 ; | |
uint16 SignatureType:3; | |
uint16 Unused:9; | |
} __s0; | |
uint16 EntireField; | |
} u1; | |
void* SectionPointer; | |
uint CheckSum; | |
uint CoverageSectionSize; | |
void* CoverageSection; | |
void* LoadedImports; | |
void* Spare; | |
uint SizeOfImageNotRounded; | |
uint TimeDateStamp; | |
} KldrEntry; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificatePublisher; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificateIssuer; | |
void* ImageHash; | |
void* CertificateThumbprint; | |
uint ImageHashAlgorithm; | |
uint ThumbprintHashAlgorithm; | |
uint ImageHashLength; | |
uint CertificateThumbprintLength; | |
uint LoadInformation; | |
uint Flags; | |
} | |
struct _BLENDFUNCTION{ | |
uint8 BlendOp; | |
uint8 BlendFlags; | |
uint8 SourceantAlpha; | |
uint8 AlphaFormat; | |
} | |
struct _BLOB{ | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ResourceList; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} FreeListEntry; | |
} ___u0; | |
union { | |
struct { | |
uint8 ReferenceCache:1; | |
uint8 Lookaside:1; | |
uint8 Initializing:1; | |
uint8 Deleted:1; | |
} s1; | |
uint8 Flags; | |
} u1; | |
uint8 ResourceId; | |
__int16 CachedReferences; | |
int ReferenceCount; | |
uint Pad; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} Lock; | |
} | |
struct _BLOB_COUNTERS{ | |
uint CreatedObjects; | |
uint DeletedObjects; | |
} | |
struct _BLOB_TYPE{ | |
_BLOB_ID ResourceId; | |
uint PoolTag; | |
uint LookasideIndex; | |
uint Flags; | |
struct _BLOB_COUNTERS{ | |
uint CreatedObjects; | |
uint DeletedObjects; | |
}* Counters; | |
DeleteProcedure* DeleteProcedure; | |
DestroyProcedure* DestroyProcedure; | |
uint UsualSize; | |
} | |
struct _BLOCK_IO_IDENTIFIER{ | |
uint BlockIoType; | |
union { | |
struct _HARD_DISK_IDENTIFIER{ | |
uint ; | |
union { | |
struct $91CD65F9D380A2591BF1731802970D49 Mbr; | |
struct $A4FFB701C84E64A1C6C179A1048ED3B6 Gpt; | |
struct $C5DBB1A92022CECA30BC99CDC85AFF40 Raw; | |
} ___u1; | |
} HardDisk; | |
struct _REMOVABLE_DISK_IDENTIFIER{ | |
uint DriveNumber; | |
} RemovableDisk; | |
struct _CDROM_IDENTIFIER{ | |
uint CdromNumber; | |
} Cdrom; | |
struct _FILE_IDENTIFIER{ | |
struct _FILE_PATH{ | |
uint Version; | |
uint Length; | |
uint Type; | |
uint8 FilePath; | |
} SourcePath; | |
} File; | |
struct _RAM_DISK_IDENTIFIER{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} ImageBase; | |
uint64 ImageSize; | |
uint ImageOffset; | |
struct _FILE_IDENTIFIER{ | |
struct _FILE_PATH SourcePath; | |
} Source; | |
} RamDisk; | |
struct _HARD_DISK_IDENTIFIER{ | |
uint ; | |
union { | |
struct $91CD65F9D380A2591BF1731802970D49 Mbr; | |
struct $A4FFB701C84E64A1C6C179A1048ED3B6 Gpt; | |
struct $C5DBB1A92022CECA30BC99CDC85AFF40 Raw; | |
} ___u1; | |
} VirtualHardDisk; | |
} u; | |
} | |
struct _BL_LOG_ENTRY_HEADER{ | |
uint Timestamp; | |
uint DataSize; | |
BL_LOG_ENTRY_TYPE LogType; | |
} | |
struct _BL_LOG_ETW_EVENT{ | |
struct _BL_LOG_ENTRY_HEADER{ | |
uint Timestamp; | |
uint DataSize; | |
BL_LOG_ENTRY_TYPE LogType; | |
} Header; | |
uint8 Reserved; | |
} | |
struct _BL_LOG_HEADER{ | |
struct _BL_LOG_ENTRY_HEADER{ | |
uint Timestamp; | |
uint DataSize; | |
BL_LOG_ENTRY_TYPE LogType; | |
} Header; | |
uint64 TraceSize; | |
uint Version; | |
uint ScenarioType; | |
union { | |
struct { | |
uint64 HiberFileSize; | |
} ; | |
struct { | |
uint64 Spare; | |
} Boot; | |
} ___u4; | |
} | |
struct _BOOTDISK_INFORMATION{ | |
int64 BootPartitionOffset; | |
int64 SystemPartitionOffset; | |
uint BootDeviceSignature; | |
uint SystemDeviceSignature; | |
} | |
struct _BOOTDISK_INFORMATION_EX{ | |
int64 BootPartitionOffset; | |
int64 SystemPartitionOffset; | |
uint BootDeviceSignature; | |
uint SystemDeviceSignature; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} BootDeviceGuid; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} SystemDeviceGuid; | |
uint8 BootDeviceIsGpt; | |
uint8 SystemDeviceIsGpt; | |
} | |
struct _BOOTDISK_INFORMATION_LITE{ | |
uint NumberEntries; | |
struct _LOADER_PARTITION_INFORMATION_EX{ | |
uint PartitionStyle; | |
uint PartitionNumber; | |
union { | |
uint ; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} DeviceId; | |
} ___u2; | |
uint Flags; | |
} Entries; | |
} | |
struct _BOOTVID_INTERFACE{ | |
NotifyDisplayOwnershipLost* NotifyDisplayOwnershipLost; | |
AcquireDisplayOwnership* AcquireDisplayOwnership; | |
NotifyDisplayOwnershipChange* NotifyDisplayOwnershipChange; | |
ResetDisplay* ResetDisplay; | |
SolidColorFill* SolidColorFill; | |
DisplayString* DisplayString; | |
EnableBootDriver* EnableBootDriver; | |
IsBootDriverInstalled* IsBootDriverInstalled; | |
CheckDisplayOwnership* CheckDisplayOwnership; | |
SetScrollRegion* SetScrollRegion; | |
SetTextColor* SetTextColor; | |
DriverInitialize* DriverInitialize; | |
BitBlt* BitBlt; | |
UpdateProgressBar* UpdateProgressBar; | |
SetProgressBarSubset* SetProgressBarSubset; | |
IndicateProgress* IndicateProgress; | |
GetResourceAddress** GetResourceAddress; | |
SetDisplayOwnership* SetDisplayOwnership; | |
GetDisplayState* GetDisplayState; | |
AcquireLock* AcquireLock; | |
ReleaseLock* ReleaseLock; | |
ReleaseResources* ReleaseResources; | |
SetVirtualFrameBuffer* SetVirtualFrameBuffer; | |
} | |
struct _BOOT_AREA_INFO{ | |
uint BootSectorCount; | |
struct { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} Offset; | |
} BootSectors; | |
} | |
struct _BOOT_DISK_CONTEXT{ | |
struct _PARTITION_INFORMATION_EX{ | |
_PARTITION_STYLE PartitionStyle; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingOffset; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} PartitionLength; | |
uint PartitionNumber; | |
uint8 RewritePartition; | |
union { | |
struct _PARTITION_INFORMATION_MBR{ | |
uint8 PartitionType; | |
uint8 BootIndicator; | |
uint8 RecognizedPartition; | |
uint HiddenSectors; | |
struct _GUID PartitionId; | |
} Mbr; | |
struct _PARTITION_INFORMATION_GPT{ | |
struct _GUID PartitionType; | |
struct _GUID PartitionId; | |
uint64 Attributes; | |
wchar_t Name; | |
} Gpt; | |
} ___u5; | |
}* PartitionInformation; | |
void* Signature; | |
wchar_t* RelativePath; | |
uint* VolumeNumber; | |
} | |
struct _BOOT_DRIVER_LIST_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FilePath; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} RegistryPath; | |
struct _BLDR_DATA_TABLE_ENTRY{ | |
struct _KLDR_DATA_TABLE_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} InLoadOrderLinks; | |
void* ExceptionTable; | |
uint ExceptionTableSize; | |
void* GpValue; | |
struct _NON_PAGED_DEBUG_INFO{ | |
uint16 Signature; | |
uint16 Flags; | |
uint Size; | |
uint16 Machine; | |
uint16 Characteristics; | |
uint TimeDateStamp; | |
uint CheckSum; | |
uint SizeOfImage; | |
uint64 ImageBase; | |
}* NonPagedDebugInfo; | |
void* DllBase; | |
void* EntryPoint; | |
uint SizeOfImage; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FullDllName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} BaseDllName; | |
uint Flags; | |
uint16 LoadCount; | |
union { | |
struct $1E2A795FFD7D7084A69DFCF07622B245 __s0; | |
uint16 EntireField; | |
} u1; | |
void* SectionPointer; | |
uint CheckSum; | |
uint CoverageSectionSize; | |
void* CoverageSection; | |
void* LoadedImports; | |
void* Spare; | |
uint SizeOfImageNotRounded; | |
uint TimeDateStamp; | |
} KldrEntry; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificatePublisher; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificateIssuer; | |
void* ImageHash; | |
void* CertificateThumbprint; | |
uint ImageHashAlgorithm; | |
uint ThumbprintHashAlgorithm; | |
uint ImageHashLength; | |
uint CertificateThumbprintLength; | |
uint LoadInformation; | |
uint Flags; | |
}* LdrEntry; | |
int LoadStatus; | |
uint LoadInformation; | |
} | |
struct _BOOT_DRIVER_NODE{ | |
struct _BOOT_DRIVER_LIST_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} FilePath; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} RegistryPath; | |
struct _BLDR_DATA_TABLE_ENTRY{ | |
struct _KLDR_DATA_TABLE_ENTRY{ | |
struct _LIST_ENTRY InLoadOrderLinks; | |
void* ExceptionTable; | |
uint ExceptionTableSize; | |
void* GpValue; | |
struct _NON_PAGED_DEBUG_INFO* NonPagedDebugInfo; | |
void* DllBase; | |
void* EntryPoint; | |
uint SizeOfImage; | |
struct _UNICODE_STRING FullDllName; | |
struct _UNICODE_STRING BaseDllName; | |
uint Flags; | |
uint16 LoadCount; | |
union $9B787A8457723ACE6646AFAD9A586D79 u1; | |
void* SectionPointer; | |
uint CheckSum; | |
uint CoverageSectionSize; | |
void* CoverageSection; | |
void* LoadedImports; | |
void* Spare; | |
uint SizeOfImageNotRounded; | |
uint TimeDateStamp; | |
} KldrEntry; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificatePublisher; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} CertificateIssuer; | |
void* ImageHash; | |
void* CertificateThumbprint; | |
uint ImageHashAlgorithm; | |
uint ThumbprintHashAlgorithm; | |
uint ImageHashLength; | |
uint CertificateThumbprintLength; | |
uint LoadInformation; | |
uint Flags; | |
}* LdrEntry; | |
int LoadStatus; | |
uint LoadInformation; | |
} ListEntry; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} DriverDependencies; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Group; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
uint Tag; | |
uint ErrorControl; | |
} | |
struct _BOOT_ENTROPY_LDR_RESULT{ | |
uint maxEntropySources; | |
struct _BOOT_ENTROPY_SOURCE_LDR_RESULT{ | |
_BOOT_ENTROPY_SOURCE_ID SourceId; | |
uint64 Policy; | |
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode; | |
int ResultStatus; | |
uint64 Time; | |
uint EntropyLength; | |
uint8 EntropyData; | |
} EntropySourceResult; | |
} | |
struct _BOOT_ENTROPY_NT_RESULT{ | |
uint maxEntropySources; | |
struct _BOOT_ENTROPY_SOURCE_NT_RESULT{ | |
_BOOT_ENTROPY_SOURCE_ID SourceId; | |
uint64 Policy; | |
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode; | |
int ResultStatus; | |
uint64 Time; | |
uint EntropyLength; | |
uint8 EntropyData; | |
} EntropySourceResult; | |
} | |
struct _BOOT_ENTROPY_SOURCE_LDR_RESULT{ | |
_BOOT_ENTROPY_SOURCE_ID SourceId; | |
uint64 Policy; | |
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode; | |
int ResultStatus; | |
uint64 Time; | |
uint EntropyLength; | |
uint8 EntropyData; | |
} | |
struct _BOOT_ENTROPY_SOURCE_NT_RESULT{ | |
_BOOT_ENTROPY_SOURCE_ID SourceId; | |
uint64 Policy; | |
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode; | |
int ResultStatus; | |
uint64 Time; | |
uint EntropyLength; | |
uint8 EntropyData; | |
} | |
struct _BOOT_ENTRY{ | |
uint Version; | |
uint Length; | |
uint Id; | |
uint Attributes; | |
uint FriendlyNameOffset; | |
uint BootFilePathOffset; | |
uint OsOptionsLength; | |
uint8 OsOptions; | |
} | |
struct _BOOT_ENTRY_LIST{ | |
uint NextEntryOffset; | |
struct _BOOT_ENTRY{ | |
uint Version; | |
uint Length; | |
uint Id; | |
uint Attributes; | |
uint FriendlyNameOffset; | |
uint BootFilePathOffset; | |
uint OsOptionsLength; | |
uint8 OsOptions; | |
} BootEntry; | |
} | |
struct _BOOT_ENTRY_OPTION{ | |
uint Type; | |
uint DataOffset; | |
uint DataSize; | |
uint AssociatedOptionsOffset; | |
uint NextOptionOffset; | |
uint8 Invalid; | |
uint8 FveHashState; | |
uint8 Reserved; | |
} | |
struct _BOOT_ENVIRONMENT_DEVICE{ | |
uint DeviceType; | |
uint Flags; | |
uint Size; | |
uint Pad; | |
union { | |
struct _BLOCK_IO_IDENTIFIER{ | |
uint BlockIoType; | |
union { | |
struct _HARD_DISK_IDENTIFIER HardDisk; | |
struct _REMOVABLE_DISK_IDENTIFIER RemovableDisk; | |
struct _CDROM_IDENTIFIER Cdrom; | |
struct _FILE_IDENTIFIER File; | |
struct _RAM_DISK_IDENTIFIER RamDisk; | |
struct _HARD_DISK_IDENTIFIER VirtualHardDisk; | |
} u; | |
} BlockIo; | |
struct _PARTITION_IDENTIFIER{ | |
union { | |
struct $82E979006F6A881053417FDE709EA08D ElTorito; | |
struct $8E495A39B2736E2AE1A5656A59C4F9CB Gpt; | |
struct $DA27E566B1AD51147DC1DE2358E20AAD Mbr; | |
} ___u0; | |
struct _BLOCK_IO_IDENTIFIER{ | |
uint BlockIoType; | |
union $EB1A69AD9D8D74B1D76CE5BB98A737D6 u; | |
} ParentIdentifier; | |
} Partition; | |
struct _PARTITION_IDENTIFIER_EX{ | |
union { | |
struct $82E979006F6A881053417FDE709EA08D ElTorito; | |
struct $8E495A39B2736E2AE1A5656A59C4F9CB Gpt; | |
struct $1E1F86A0F2B00E983347D511AE7D75EF Mbr; | |
} ___u0; | |
struct _BLOCK_IO_IDENTIFIER{ | |
uint BlockIoType; | |
union $EB1A69AD9D8D74B1D76CE5BB98A737D6 u; | |
} ParentIdentifier; | |
} PartitionEx; | |
struct _SERIAL_PORT_IDENTIFIER{ | |
uint ; | |
union { | |
uint PortNumber; | |
struct _GEN_ADDR BaseAddress; | |
} u; | |
} SerialPort; | |
struct _UDP_IDENTIFIER{ | |
uint HwType; | |
uint8 HwAddress; | |
} Udp; | |
struct _LOCATE_IDENTIFIER{ | |
uint Type; | |
uint ElementType; | |
uint ParentOffset; | |
wchar_t Path; | |
} Locate; | |
struct _VMBUS_IDENTIFIER{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InterfaceType; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InterfaceInstance; | |
} Vmbus; | |
} u; | |
} | |
struct _BOOT_LOG_RECORD{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} LoadedString; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} NotLoadedString; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} LogFileName; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} HeaderString; | |
struct _ERESOURCE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} Resource; | |
uint NextKey; | |
uint8 FileLogging; | |
} | |
struct _BOOT_OPTIONS{ | |
ULONG Version; | |
ULONG Length; | |
ULONG Timeout; | |
ULONG CurrentBootEntryId; | |
ULONG NextBootEntryId; | |
WCHAR HeadlessRedirection; | |
} | |
struct _BOOT_RESTORE_MEMORY_HEADER{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _MEMORY_HEADER{ | |
uint Tag; | |
uint Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS Pcb; | |
struct _EX_PUSH_LOCK ProcessLock; | |
struct _EX_RUNDOWN_REF RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY ActiveProcessLinks; | |
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6; | |
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7; | |
union _LARGE_INTEGER CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* Mdl; | |
uint8 Memory; | |
} MemoryHeader; | |
} | |
struct _BOOT_TABLE{ | |
struct _DESCRIPTION_HEADER{ | |
uint Signature; | |
uint Length; | |
uint8 Revision; | |
uint8 Checksum; | |
char OEMID; | |
} Header; | |
uint8 CMOSIndex; | |
uint8 Reserved; | |
} | |
struct _BREAKPOINT_ENTRY{ | |
void* Address; | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} Header; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY{ | |
uint16 ; | |
uint16 BaseLow; | |
union { | |
struct $FBC66EAC05680F83721AC9CD3CC76218 Bytes; | |
struct $A3BAC9569453E46653D4C53B8339026E Bits; | |
} HighWord; | |
} LdtDescriptor; | |
struct _KIDTENTRY{ | |
uint16 Offset; | |
uint16 Selector; | |
uint16 Access; | |
uint16 ExtendedOffset; | |
} Int21Descriptor; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} Affinity; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ReadyListHead; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} SwapListEntry; | |
struct _KAFFINITY_EX{ | |
uint16 Count; | |
uint16 Size; | |
uint Reserved; | |
uint Bitmap; | |
} ActiveProcessors; | |
union { | |
struct { | |
int32 AutoAlignment:1; | |
int32 DisableBoost:1; | |
int32 DisableQuantum:1; | |
uint32 DeepFreeze:1; | |
uint32 TimerVirtualization:1; | |
uint32 CheckStackExtents:1; | |
uint32 SpareFlags0:2; | |
uint32 ActiveGroupsMask:1; | |
int32 ReservedFlags:23; | |
} __s0; | |
int ProcessFlags; | |
} ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS{ | |
struct { | |
uint8 ExecuteDisable:1; | |
uint8 ExecuteEnable:1; | |
uint8 DisableThunkEmulation:1; | |
uint8 Permanent:1; | |
uint8 ExecuteDispatchEnable:1; | |
uint8 ImageDispatchEnable:1; | |
uint8 DisableExceptionChainValidation:1; | |
uint8 Spare:1; | |
} __s0; | |
uint8 ExecuteOptions; | |
uint8 ExecuteOptionsNV; | |
} Flags; | |
uint ThreadSeed; | |
}* Process; | |
uint64 BreakInstruction; | |
uint64 Content; | |
uint Flags; | |
uint8 BreakInstructionSize; | |
uint8 BreakInstructionAlignment; | |
} | |
struct _BSD_BOOT_LOG_CONTROL{ | |
uint Version; | |
uint BootLogStart; | |
uint BootLogSize; | |
uint NextBootLogEntry; | |
} | |
struct _BSD_BOOT_LOG_EVENT_HEADER{ | |
uint64 TimeStamp; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ApplicationId; | |
uint EntrySize; | |
uint Level; | |
uint ApplicationType; | |
uint EventCode; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_APP_LAUNCH{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ApplicationIdentifier; | |
uint LaunchReason; | |
wchar_t ApplicationPath; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_APP_RETURN{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ApplicationIdentifier; | |
int Status; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_BCD_FAILURE{ | |
int Status; | |
wchar_t BcdPath; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_FVE_RECOVERY{ | |
uint RecoveryError; | |
uint BadBcdOption; | |
wchar_t ApplicationPath; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_GENERAL_FAILURE{ | |
int Status; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_INVALID_BCD_ENTRY{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint ElementId; | |
int Status; | |
wchar_t Description; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_LOAD_FAILURE{ | |
int Status; | |
wchar_t FilePath; | |
} | |
struct _BSD_EVENT_LOGDATA_BOOTMGR_NO_VALID_OS_FAILURE{ | |
int Status; | |
wchar_t BcdPath; | |
} | |
struct _BSD_EVENT_LOGDATA_INITIALIZED{ | |
struct _TIME_FIELDS{ | |
CSHORT Year; | |
CSHORT Month; | |
CSHORT Day; | |
CSHORT Hour; | |
CSHORT Minute; | |
CSHORT Second; | |
CSHORT Milliseconds; | |
CSHORT Weekday; | |
} SystemTime; | |
uint64 TimeStampMultiplier; | |
} | |
struct _BSD_FATAL_ERROR_INFO{ | |
uint BootId; | |
uint RepeatCount; | |
uint OtherErrorCount; | |
uint Code; | |
int Status; | |
} | |
struct _BSD_LOGDATA_EVENT_ACPI_FAILURE{ | |
int Status; | |
} | |
struct _BSD_LOGDATA_OSLOADER_EVENT_GENERAL_FAILURE{ | |
int ; | |
} | |
struct _BSD_LOGDATA_OSLOADER_EVENT_HIVE_FAILURE{ | |
int ; | |
wchar_t HivePath; | |
} | |
struct _BSD_LOGDATA_OSLOADER_EVENT_LOAD_FAILURE{ | |
uint Size; | |
uint ErrorCode; | |
int Status; | |
wchar_t FilePath; | |
} | |
struct _BSD_POWER_TRANSITION{ | |
int64 PowerButtonTimestamp; | |
uint8 SystemRunning; | |
uint8 SleepInProgress; | |
uint8 ConnectedStandbyInProgress; | |
uint8 CsEntryScenarioInstanceId; | |
uint SystemSleepTransitionsToOn; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} LastReferenceTime; | |
uint LastReferenceTimeCheckSum; | |
} | |
struct _BTH_DEVICE_INFO{ | |
uint flags; | |
uint64 address; | |
uint classOfDevice; | |
char name; | |
} | |
struct _BTH_LOCAL_RADIO_INFO{ | |
struct _BTH_DEVICE_INFO{ | |
uint flags; | |
uint64 address; | |
uint classOfDevice; | |
char name; | |
} localInfo; | |
uint flags; | |
uint16 hciRevision; | |
uint8 hciVersion; | |
struct _BTH_RADIO_INFO{ | |
uint64 lmpSupportedFeatures; | |
uint16 mfg; | |
uint16 lmpSubversion; | |
uint8 lmpVersion; | |
} radioInfo; | |
} | |
struct _BTH_RADIO_INFO{ | |
uint64 lmpSupportedFeatures; | |
uint16 mfg; | |
uint16 lmpSubversion; | |
uint8 lmpVersion; | |
} | |
struct _BT_PROGRESS_INDICATOR{ | |
uint Count; | |
uint Expected; | |
uint Percentage; | |
} | |
struct _BUFFER_CONTEXT{ | |
uint64 BytesInProgress; | |
uint64 BytesCompleted; | |
} | |
struct _BUS_HANDLER{ | |
uint Version; | |
_INTERFACE_TYPE InterfaceType; | |
_BUS_DATA_TYPE ConfigurationType; | |
uint BusNumber; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS* Process; | |
void* ; | |
}* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP* CurrentIrp; | |
struct _IO_TIMER* ; | |
}* DeviceObject; | |
}* ; | |
}* DeviceObject; | |
struct _BUS_HANDLER* ParentHandler; | |
void* BusData; | |
uint DeviceControlExtensionSize; | |
struct _SUPPORTED_RANGES{ | |
uint16 Version; | |
uint8 Sorted; | |
uint8 Reserved; | |
uint NoIO; | |
struct _SUPPORTED_RANGE{ | |
struct _SUPPORTED_RANGE* Next; | |
uint SystemAddressSpace; | |
int64 SystemBase; | |
int64 Base; | |
int64 Limit; | |
} IO; | |
uint NoMemory; | |
struct _SUPPORTED_RANGE{ | |
struct _SUPPORTED_RANGE* Next; | |
uint SystemAddressSpace; | |
int64 SystemBase; | |
int64 Base; | |
int64 Limit; | |
} Memory; | |
uint NoPrefetchMemory; | |
struct _SUPPORTED_RANGE{ | |
struct _SUPPORTED_RANGE* Next; | |
uint SystemAddressSpace; | |
int64 SystemBase; | |
int64 Base; | |
int64 Limit; | |
} PrefetchMemory; | |
uint NoDma; | |
struct _SUPPORTED_RANGE{ | |
struct _SUPPORTED_RANGE* Next; | |
uint SystemAddressSpace; | |
int64 SystemBase; | |
int64 Base; | |
int64 Limit; | |
} Dma; | |
}* BusAddresses; | |
uint Reserved; | |
} | |
struct _BUS_INTERFACE_STANDARD{ | |
uint16 Size; | |
uint16 Version; | |
void* Context; | |
InterfaceReference* InterfaceReference; | |
InterfaceDereference* InterfaceDereference; | |
TranslateBusAddress* TranslateBusAddress; | |
GetDmaAdapter** GetDmaAdapter; | |
SetBusData* SetBusData; | |
GetBusData* GetBusData; | |
} | |
struct _BY_HANDLE_FILE_INFORMATION{ | |
uint dwFileAttributes; | |
struct _FILETIME{ | |
uint dwLowDateTime; | |
uint dwHighDateTime; | |
} ftCreationTime; | |
struct _FILETIME{ | |
uint dwLowDateTime; | |
uint dwHighDateTime; | |
} ftLastAccessTime; | |
struct _FILETIME{ | |
uint dwLowDateTime; | |
uint dwHighDateTime; | |
} ftLastWriteTime; | |
uint dwVolumeSerialNumber; | |
uint nFileSizeHigh; | |
uint nFileSizeLow; | |
uint nNumberOfLinks; | |
uint nFileIndexHigh; | |
uint nFileIndexLow; | |
} | |
struct _B_TREE_NODE_STATS{ | |
uint Count; | |
uint EntriesPerBlock; | |
uint FillPercentBuckets; | |
} | |
struct _B_TREE_SERIALIZE_INFO{ | |
uint Depth; | |
uint RootKey; | |
uint EntryCount; | |
} | |
struct _B_TREE_STATS{ | |
uint EntryCount; | |
uint BlockSize; | |
uint Depth; | |
struct _B_TREE_NODE_STATS{ | |
uint Count; | |
uint EntriesPerBlock; | |
uint FillPercentBuckets; | |
} NodeType; | |
} | |
struct _BitField{ | |
uint16 Position; | |
uint16 Size; | |
} | |
struct _BvgaProgressState{ | |
uint Floor; | |
uint Ceiling; | |
uint Bias; | |
} | |
struct _C8_EXCEPTION_REGISTRATION{ | |
_BYTE gap0; | |
} | |
struct _C9_EXCEPTION_REGISTRATION{ | |
uint ; | |
uint er_handler; | |
uint scopetable; | |
uint trylevel; | |
} | |
struct _CACHED_BITMAP{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
struct _GRAPHICS_RECTANGLE{ | |
uint Height; | |
uint Width; | |
uint BitsPerPixel; | |
uint Size; | |
uint Flags; | |
void* Data; | |
struct _BITMAP_IMAGE{ | |
uint HeaderSize; | |
uint Width; | |
uint Height; | |
uint16 Planes; | |
uint16 BitsPerPixel; | |
uint Compression; | |
uint DataSize; | |
uint HorizontalResolution; | |
uint VerticalResolution; | |
uint NumberOfColors; | |
uint NumberOfImportantColors; | |
} Bitmap; | |
}* Bitmap; | |
void* FontHandle; | |
uint BitmapFragmentOffset; | |
uint FontIndex; | |
uint PointSize; | |
uint AdvanceWidth; | |
int TopRow; | |
uint HorizontalFactor; | |
uint VerticalFactor; | |
wchar_t Character; | |
uint WorkspaceBytesConsumed; | |
} | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union { | |
uint ValueList; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union { | |
struct _CM_KEY_HASH ; | |
struct $8C76650B9D0D53F784E8151F3B0A2734 __s1; | |
} ___u8; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} KcbPushlock; | |
union { | |
struct _KTHREAD* Owner; | |
int SharedCount; | |
} ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK{ | |
uint32 Compressed:1; | |
uint32 RefCount:31; | |
union $49B239AEB2AEE6A15DE76968D87B453D ___u2; | |
}* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE{ | |
uint Cell; | |
uint ConvKey; | |
struct _LIST_ENTRY List; | |
uint DescriptorLength; | |
uint RealRefCount; | |
struct _SECURITY_DESCRIPTOR_RELATIVE Descriptor; | |
}* CachedSecurity; | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union $A95660FC635BECCFF6281EBEFA4319E8 ___u1; | |
} ValueCache; | |
union { | |
struct _CM_INDEX_HINT_BLOCK* IndexHint; | |
uint HashKey; | |
uint SubKeyCount; | |
} ___u21; | |
union { | |
struct _LIST_ENTRY KeyBodyListHead; | |
struct _LIST_ENTRY FreeListEntry; | |
} ___u22; | |
struct _CM_KEY_BODY{ | |
uint Type; | |
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock; | |
struct _CM_NOTIFY_BLOCK* NotifyBlock; | |
void* ProcessID; | |
struct _LIST_ENTRY KeyBodyList; | |
uint32 Flags:16; | |
uint32 HandleTags:16; | |
union _CM_TRANS_PTR Trans; | |
struct _GUID* KtmUow; | |
struct _LIST_ENTRY ContextListHead; | |
}* KeyBodyArray; | |
}* RealKcb; | |
} ___u1; | |
} | |
struct _CACHED_KSTACK_LIST{ | |
union _SLIST_HEADER{ | |
ULONGLONG Alignment; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ; | |
} SListHead; | |
int MinimumFree; | |
uint Misses; | |
uint MissesLast; | |
uint AllStacksInUse; | |
} | |
struct _CACHE_DESCRIPTOR{ | |
uint8 Level; | |
uint8 Associativity; | |
uint16 LineSize; | |
uint Size; | |
_PROCESSOR_CACHE_TYPE Type; | |
} | |
struct _CACHE_MANAGER_CALLBACKS{ | |
AcquireForLazyWrite* AcquireForLazyWrite; | |
ReleaseFromLazyWrite* ReleaseFromLazyWrite; | |
AcquireForReadAhead* AcquireForReadAhead; | |
ReleaseFromReadAhead* ReleaseFromReadAhead; | |
} | |
struct _CACHE_RELATIONSHIP{ | |
uint8 Level; | |
uint8 Associativity; | |
uint16 LineSize; | |
uint CacheSize; | |
_PROCESSOR_CACHE_TYPE Type; | |
uint8 Reserved; | |
} | |
struct _CACHE_UNINITIALIZE_EVENT{ | |
struct _CACHE_UNINITIALIZE_EVENT* Next; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Event; | |
} | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
} | |
struct _CALLBACK_REGISTRATION{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Link; | |
struct _CALLBACK_OBJECT{ | |
uint Signature; | |
uint Lock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} RegisteredCallbacks; | |
uint8 AllowMultipleCallbacks; | |
uint8 reserved; | |
}* CallbackObject; | |
CallbackFunction* CallbackFunction; | |
void* CallbackContext; | |
uint Busy; | |
uint8 UnregisterWaiting; | |
} | |
struct _CALL_FRAME{ | |
void* ReturnAddress; | |
void* Param1; | |
void* Param2; | |
void* CompatibilityArea; | |
} | |
struct _CALL_HASH_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListEntry; | |
void* CallersAddress; | |
void* CallersCaller; | |
uint CallCount; | |
} | |
struct _CALL_PERFORMANCE_DATA{ | |
uint SpinLock; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} HashTable; | |
} | |
struct _CARTESIAN_COORDINATE{ | |
uint X; | |
uint Y; | |
} | |
struct _CBuffer{ | |
uint8* Cursor; | |
uint BytesRemaining; | |
} | |
struct _CC_ASYNC_READ_CONTEXT{ | |
CompletionRoutine* CompletionRoutine; | |
void* Context; | |
struct _MDL{ | |
struct _MDL* Next; | |
CSHORT Size; | |
CSHORT MdlFlags; | |
struct _EPROCESS{ | |
struct _KPROCESS{ | |
struct _DISPATCHER_HEADER Header; | |
struct _LIST_ENTRY ProfileListHead; | |
uint DirectoryTableBase; | |
struct _KGDTENTRY LdtDescriptor; | |
struct _KIDTENTRY Int21Descriptor; | |
struct _LIST_ENTRY ThreadListHead; | |
uint ProcessLock; | |
uint64 DeepFreezeStartTime; | |
struct _KAFFINITY_EX Affinity; | |
struct _LIST_ENTRY ReadyListHead; | |
struct _SINGLE_LIST_ENTRY SwapListEntry; | |
struct _KAFFINITY_EX ActiveProcessors; | |
union $427D086510B26CB5555F571AB1564219 ___u12; | |
char BasePriority; | |
char QuantumReset; | |
uint8 Visited; | |
union _KEXECUTE_OPTIONS Flags; | |
uint ThreadSeed; | |
} Pcb; | |
struct _EX_PUSH_LOCK{ | |
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0; | |
} ProcessLock; | |
struct _EX_RUNDOWN_REF{ | |
union $D38EED4BDC297EF4E8AB109731647B99 ___u0; | |
} RundownProtect; | |
void* VdmObjects; | |
void* UniqueProcessId; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ActiveProcessLinks; | |
union { | |
uint Flags2; | |
struct $B086715FCDD6AD291B34987B050CE732 __s1; | |
} ___u6; | |
union { | |
uint Flags; | |
struct $3F23548A817FAD3B1B9066DD80952630 __s1; | |
} ___u7; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} CreateTime; | |
uint ProcessQuotaUsage; | |
}* Process; | |
void* ; | |
}* Mdl; | |
char RequestorMode; | |
uint NestingLevel; | |
} | |
struct _CC_EXTERNAL_CACHE_INFO{ | |
Callback* Callback; | |
struct _DIRTY_PAGE_STATISTICS{ | |
uint DirtyPages; | |
uint DirtyPagesLastScan; | |
uint DirtyPagesScheduledLastScan; | |
} DirtyPageStatistics; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} Links; | |
} | |
struct _CC_FILE_SIZES{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} AllocationSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FileSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ValidDataLength; | |
} | |
struct _CC_TEST_EVENT{ | |
_CC_TEST_EVENT_TYPE EventType; | |
uint Enable; | |
uint PersistAcrossReboot; | |
union { | |
struct { | |
uint Interval; | |
} MappingFailure; | |
uint64 MaximumVAUsage; | |
struct { | |
uint cLRUInvocations; | |
uint cFreeVACBs; | |
uint cTotalVACBsAllocated; | |
} StatisticsVACB; | |
} Parameters; | |
} | |
struct _CDB10{ | |
uint8 OperationCode; | |
uint8 RelativeAddress:1; | |
uint8 Reserved1:2; | |
uint8 ForceUnitAccess:1; | |
uint8 DisablePageOut:1; | |
uint8 LogicalUnitNumber:3; | |
uint8 LogicalBlockByte0; | |
uint8 LogicalBlockByte1; | |
uint8 LogicalBlockByte2; | |
uint8 LogicalBlockByte3; | |
uint8 Reserved2; | |
uint8 TransferBlocksMsb; | |
uint8 TransferBlocksLsb; | |
uint8 Control; | |
} | |
struct _CDB12{ | |
uint8 OperationCode; | |
uint8 RelativeAddress:1; | |
uint8 Reserved1:2; | |
uint8 ForceUnitAccess:1; | |
uint8 DisablePageOut:1; | |
uint8 LogicalUnitNumber:3; | |
uint8 LogicalBlock; | |
} | |
struct _CDB16{ | |
uint8 OperationCode; | |
uint8 Reserved1:3; | |
uint8 ForceUnitAccess:1; | |
uint8 DisablePageOut:1; | |
uint8 Protection:3; | |
uint8 LogicalBlock; | |
} | |
struct _CDB6FORMAT{ | |
uint8 OperationCode; | |
uint8 FormatControl:5; | |
uint8 LogicalUnitNumber:3; | |
uint8 FReserved1; | |
uint8 InterleaveMsb; | |
uint8 InterleaveLsb; | |
uint8 FReserved2; | |
} | |
struct _CDB6GENERIC{ | |
uint8 OperationCode; | |
uint8 Immediate:1; | |
uint8 CommandUniqueBits:4; | |
uint8 LogicalUnitNumber:3; | |
uint8 CommandUniqueBytes; | |
} | |
struct _CDB6INQUIRY{ | |
uint8 OperationCode; | |
uint8 Reserved1:5; | |
uint8 LogicalUnitNumber:3; | |
uint8 PageCode; | |
uint8 IReserved; | |
uint8 AllocationLength; | |
uint8 Control; | |
} | |
struct _CDB6INQUIRY3{ | |
uint8 OperationCode; | |
uint8 EnableVitalProductData:1; | |
uint8 CommandSupportData:1; | |
uint8 Reserved1:6; | |
uint8 PageCode; | |
uint8 Reserved2; | |
uint8 AllocationLength; | |
uint8 Control; | |
} | |
struct _CDB6READWRITE{ | |
uint8 OperationCode; | |
uint8 LogicalBlockMsb1:5; | |
uint8 LogicalUnitNumber:3; | |
uint8 LogicalBlockMsb0; | |
uint8 LogicalBlockLsb; | |
uint8 TransferBlocks; | |
uint8 Control; | |
} | |
struct _CDB6READWRITETAPE{ | |
uint8 OperationCode; | |
uint8 VendorSpecific:5; | |
uint8 Reserved:3; | |
uint8 TransferLenMSB; | |
uint8 TransferLen; | |
uint8 TransferLenLSB; | |
uint8 Link:1; | |
uint8 Flag:1; | |
uint8 Reserved1:4; | |
uint8 VendorUnique:2; | |
} | |
struct _CDB6VERIFY{ | |
uint8 OperationCode; | |
uint8 Fixed:1; | |
uint8 ByteCompare:1; | |
uint8 Immediate:1; | |
uint8 Reserved:2; | |
uint8 LogicalUnitNumber:3; | |
uint8 VerificationLength; | |
} | |
struct _CDROM_IDENTIFIER{ | |
uint CdromNumber; | |
} | |
struct _CELL_DATA{ | |
union _u{ | |
struct _CM_KEY_NODE{ | |
uint16 Signature; | |
uint16 Flags; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} LastWriteTime; | |
uint8 AccessBits; | |
uint8 LayerSemantics:2; | |
uint8 Spare1:5; | |
uint8 InheritClass:1; | |
uint16 Spare2; | |
uint Parent; | |
uint SubKeyCounts; | |
} ; | |
struct _CM_KEY_VALUE{ | |
uint16 Signature; | |
uint16 NameLength; | |
uint DataLength; | |
uint Data; | |
uint Type; | |
uint16 Flags; | |
uint16 Spare; | |
wchar_t Name; | |
} KeyValue; | |
struct _CM_KEY_SECURITY{ | |
uint16 Signature; | |
uint16 Reserved; | |
uint Flink; | |
uint Blink; | |
uint ReferenceCount; | |
uint DescriptorLength; | |
struct _SECURITY_DESCRIPTOR_RELATIVE{ | |
uint8 Revision; | |
uint8 Sbz1; | |
uint16 Control; | |
uint Owner; | |
uint Group; | |
uint Sacl; | |
uint Dacl; | |
} Descriptor; | |
} KeySecurity; | |
struct _CM_KEY_INDEX{ | |
uint16 Signature; | |
uint16 Count; | |
uint List; | |
} KeyIndex; | |
struct _CM_BIG_DATA{ | |
uint16 Signature; | |
uint16 Count; | |
uint List; | |
} ValueData; | |
uint KeyList; | |
} ; | |
} | |
struct _CENTRAL_ACCESS_POLICY{ | |
void* ; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Description; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ChangeId; | |
uint Flags; | |
uint CAPECount; | |
struct _CENTRAL_ACCESS_POLICY_ENTRY{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Description; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ChangeId; | |
uint LengthAppliesTo; | |
uint8* AppliesTo; | |
uint LengthSD; | |
void* SD; | |
uint LengthStagedSD; | |
void* StagedSD; | |
uint Flags; | |
}** CAPEs; | |
} | |
struct _CENTRAL_ACCESS_POLICY_ENTRY{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Name; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Description; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ChangeId; | |
uint LengthAppliesTo; | |
uint8* AppliesTo; | |
uint LengthSD; | |
void* SD; | |
uint LengthStagedSD; | |
void* StagedSD; | |
uint Flags; | |
} | |
struct _CFG_CALL_TARGET_INFO{ | |
uint Offset; | |
uint Flags; | |
} | |
struct _CFG_CALL_TARGET_LIST_INFORMATION{ | |
uint NumberOfEntries; | |
uint Reserved; | |
uint* NumberOfEntriesProcessed; | |
struct _CFG_CALL_TARGET_INFO{ | |
uint Offset; | |
uint Flags; | |
}* CallTargetInfo; | |
} | |
struct _CHARACTER_CACHE{ | |
struct _TEXT_CACHE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
uint EntryCount; | |
} TextCache; | |
struct _BITMAP_CACHE{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ListHead; | |
uint8* CompressedBitmaps; | |
uint8* DecompressionBuffer; | |
void* DecompressionWorkSpace; | |
uint CompressedBitmapsSize; | |
uint DecompressionBufferSize; | |
uint Size; | |
uint EntryCount; | |
} BitmapCache; | |
uint8 TextCacheEnabled; | |
uint8 BitmapCacheEnabled; | |
} | |
struct _CHARACTER_CONTEXT{ | |
void* FontHandle; | |
uint PointSize; | |
struct _RECTANGLE{ | |
uint Width; | |
uint Height; | |
uint Stride; | |
} CharacterSize; | |
void* RegionHandle; | |
} | |
struct _CHILD_LIST{ | |
uint Count; | |
uint List; | |
} | |
struct _CHS{ | |
uint8 Head; | |
uint8 Sector; | |
uint8 Cylinder; | |
} | |
struct _CHUNKINFO{ | |
struct _PAGED_LOOKASIDE_LIST{ | |
struct _GENERAL_LOOKASIDE{ | |
union _SLIST_HEADER{ | |
ULONGLONG Alignment; | |
struct _SINGLE_LIST_ENTRY ; | |
} ; | |
} ; | |
}* Lookaside; | |
uint EntrySize; | |
EntryCleanup* EntryCleanup; | |
uint InitialFlags; | |
uint Signature; | |
} | |
struct _CI_LOG_MMCSS_START{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} Header; | |
} | |
struct _CI_LOG_MMCSS_STOP{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} ; | |
} | |
struct _CI_LOG_SCHEDULER_EVENT{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} ; | |
uint ProcessId; | |
uint ThreadId; | |
uint Priority; | |
uint TaskIndex; | |
} | |
struct _CI_LOG_SCHEDULER_SLEEP{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} Header; | |
} | |
struct _CI_LOG_SCHEDULER_SLEEP_RESPONSE{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} ; | |
} | |
struct _CI_LOG_SCHEDULER_WAKEUP{ | |
struct _EVENT_TRACE_HEADER{ | |
uint16 Size; | |
union { | |
uint16 FieldTypeFlags; | |
struct { | |
uint8 HeaderType; | |
uint8 MarkerFlags; | |
} __s1; | |
} ___u1; | |
union { | |
uint Version; | |
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{ | |
uint8 Type; | |
uint8 Level; | |
uint16 Version; | |
} Class; | |
} ___u2; | |
uint ThreadId; | |
uint ProcessId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
union { | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
uint64 GuidPtr; | |
} ___u6; | |
union { | |
struct { | |
uint KernelTime; | |
uint UserTime; | |
} __s0; | |
uint64 ProcessorTime; | |
struct { | |
uint ClientContext; | |
uint Flags; | |
} __s2; | |
} ___u7; | |
} ; | |
uint Reason; | |
} | |
struct _CI_MINTCB_LIST{ | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} ImageName; | |
uint8 ExeSigningLevel; | |
uint8 DllSigningLevel; | |
struct _PS_PROTECTION{ | |
union { | |
uint8 Level; | |
struct { | |
uint8 Type:3; | |
uint8 Audit:1; | |
uint8 Signer:4; | |
} __s1; | |
} ___u0; | |
} ProtectionLevel; | |
_FIRMWARE_TYPE TargetFirmware; | |
} | |
struct _CI_NGEN_PATHS{ | |
uint PathCount; | |
uint16 PathMinLength; | |
uint16 PathMaxLength; | |
struct _UNICODE_STRING{ | |
USHORT Length; | |
USHORT MaximumLength; | |
WCHAR* ; | |
} Paths; | |
} | |
struct _CI_PROTECTED_MAPPING{ | |
uint8 ExeSigningLevel; | |
uint8 DllSigningLevel; | |
} | |
struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION{ | |
uint16 Version; | |
uint16 Reserved; | |
uint AttributeCount; | |
union { | |
struct _CLAIM_SECURITY_ATTRIBUTE_V1{ | |
wchar_t* Name; | |
uint16 ValueType; | |
uint16 Reserved; | |
uint Flags; | |
uint ValueCount; | |
union { | |
int64* ; | |
uint64* pUint64; | |
wchar_t** ppString; | |
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE* pFqbn; | |
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE* pOctetString; | |
} Values; | |
}* pAttributeV1; | |
} Attribute; | |
} | |
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE{ | |
uint64 Version; | |
wchar_t* Name; | |
} | |
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{ | |
void* pValue; | |
uint ValueLength; | |
} | |
struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1{ | |
uint Name; | |
uint16 ValueType; | |
uint16 Reserved; | |
uint Flags; | |
uint ValueCount; | |
union { | |
uint ; | |
} Values; | |
} | |
struct _CLAIM_SECURITY_ATTRIBUTE_V1{ | |
wchar_t* Name; | |
uint16 ValueType; | |
uint16 Reserved; | |
uint Flags; | |
uint ValueCount; | |
union { | |
int64* ; | |
uint64* pUint64; | |
wchar_t** ppString; | |
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE{ | |
uint64 Version; | |
wchar_t* Name; | |
}* pFqbn; | |
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{ | |
void* pValue; | |
uint ValueLength; | |
}* pOctetString; | |
} Values; | |
} | |
struct _CLASS_MEDIA_CHANGE_CONTEXT{ | |
uint MediaChangeCount; | |
uint NewState; | |
} | |
struct _CLFS_LOG_NAME_INFORMATION{ | |
uint16 NameLengthInBytes; | |
wchar_t Name; | |
} | |
struct _CLFS_MGMT_CLIENT_REGISTRATION{ | |
ULONG Version; | |
} | |
struct _CLFS_MGMT_NOTIFICATION{ | |
_CLFS_MGMT_NOTIFICATION_TYPE Notification; | |
union _CLS_LSN{ | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} offset; | |
ULONGLONG ullOffset; | |
} Lsn; | |
uint16 LogIsPinned; | |
} | |
struct _CLFS_MGMT_POLICY{ | |
uint Version; | |
uint LengthInBytes; | |
uint PolicyFlags; | |
_CLFS_MGMT_POLICY_TYPE PolicyType; | |
union { | |
struct { | |
uint Containers; | |
} MaximumSize; | |
struct { | |
uint Containers; | |
} MinimumSize; | |
struct { | |
uint SizeInBytes; | |
} NewContainerSize; | |
struct { | |
uint AbsoluteGrowthInContainers; | |
uint RelativeGrowthPercentage; | |
} GrowthRate; | |
struct { | |
uint MinimumAvailablePercentage; | |
uint MinimumAvailableContainers; | |
} LogTail; | |
struct { | |
uint Percentage; | |
} AutoShrink; | |
struct { | |
uint Enabled; | |
} AutoGrow; | |
struct { | |
uint16 ; | |
wchar_t PrefixString; | |
} NewContainerPrefix; | |
struct { | |
uint64 ; | |
} NewContainerSuffix; | |
struct { | |
uint16 ExtensionLengthInBytes; | |
wchar_t ExtensionString; | |
} NewContainerExtension; | |
} PolicyParameters; | |
} | |
struct _CLFS_NODE_ID{ | |
uint cType; | |
uint cbNode; | |
} | |
struct _CLFS_PHYSICAL_LSN_INFORMATION{ | |
uint8 StreamIdentifier; | |
union _CLS_LSN{ | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} offset; | |
ULONGLONG ullOffset; | |
} VirtualLsn; | |
union _CLS_LSN{ | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} offset; | |
ULONGLONG ullOffset; | |
} PhysicalLsn; | |
} | |
struct _CLFS_STREAM_ID_INFORMATION{ | |
uint8 StreamIdentifier; | |
} | |
struct _CLIENT_ID{ | |
void* ; | |
} | |
struct _CLIENT_ID32{ | |
uint UniqueProcess; | |
uint UniqueThread; | |
} | |
struct _CLIENT_ID64{ | |
uint64 UniqueProcess; | |
uint64 UniqueThread; | |
} | |
struct _CLIP_OPTIONAL_INFO{ | |
uint dwEvaluationFlags; | |
uint dwBasicPolicyFlags; | |
uint dwMinExpirationTime; | |
uint dwMinPollingTime; | |
} | |
struct _CLOCK_INTERVAL_REQUEST{ | |
struct _RTL_BALANCED_NODE{ | |
union { | |
struct _RTL_BALANCED_NODE{ | |
union $8488FA04B10264E961ED499116D7D232 ___u0; | |
union $344060F409ADCF48D316BF50CD4CF06F ___u1; | |
}* ; | |
} ___u0; | |
union { | |
struct { | |
uint8 Red:1; | |
} __s0; | |
struct { | |
uint8 Balance:2; | |
} __s1; | |
uint ParentValue; | |
} ___u1; | |
} RbNode; | |
uint8 Inserted; | |
uint Interval; | |
} | |
struct _CLOSE_TRACK{ | |
uint8 OperationCode; | |
uint8 Immediate:1; | |
uint8 Reserved1:7; | |
uint8 Track:1; | |
uint8 Session:1; | |
uint8 Reserved2:6; | |
uint8 Reserved3; | |
uint8 TrackNumber; | |
} | |
struct _CLOUD_COMMAND{ | |
uint Version; | |
uint CommandCode; | |
union { | |
struct { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} RecallOffset; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} RecallLength; | |
} InitiateRecall; | |
struct { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} DeflateOffset; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} DeflateLength; | |
} Deflate; | |
struct { | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} NewServerFileSize; | |
uint FileIdentityOffset; | |
uint FileIdentityLength; | |
} UpdatePlaceholderIdentity; | |
struct { | |
union { | |
void* ServiceIdentity; | |
uint64 Alignment; | |
} u; | |
uint Length; | |
uint Flags; | |
} CreateServiceIdentity; | |
struct { | |
union { | |
void* ServiceIdentity; | |
uint64 Alignment; | |
} u; | |
uint Length; | |
uint Flags; | |
} ConnectServiceIdentity; | |
struct { | |
union { | |
void* ServiceIdentity; | |
uint64 Alignment; | |
} u; | |
uint Length; | |
uint Flags; | |
} DeleteServiceIdentity; | |
struct { | |
uint FirstBlobContextOffset; | |
uint BlobCount; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} Timeout; | |
uint Flags; | |
} PropertyOperation; | |
} ___u2; | |
} | |
struct _CLOUD_DATA_TRANSFER{ | |
struct _FILE_ID_128{ | |
uint8 ; | |
} TargetFileId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} RequiredOffset; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ByteOffset; | |
uint RequiredLength; | |
uint Length; | |
uint Flags; | |
int ServiceStatus; | |
} | |
struct _CLOUD_PROPERTY_BLOB_CONTEXT{ | |
uint BlobType; | |
uint BufferLength; | |
union { | |
void* Buffer; | |
uint64 Alignment; | |
} ___u2; | |
uint BlobLength; | |
int Status; | |
} | |
struct _CLOUD_PROVIDER_GET_EXTERNAL_INFO{ | |
uint Version; | |
uint Flags; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} BytesLocallyPresent; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} BytesMetadata; | |
uint ServiceIdentityOffset; | |
uint ServiceIdentityLength; | |
uint FileIdentityOffset; | |
uint FileIdentityLength; | |
} | |
struct _CLOUD_PROVIDER_MESSAGE{ | |
uint Version; | |
uint MessageCode; | |
struct { | |
struct _FILE_ID_128{ | |
uint8 ; | |
} FileId; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ContainingOffset; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ContainingLength; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} RequiredOffset; | |
uint RequiredLength; | |
uint Flags; | |
uint Alignment; | |
uint FileIdentityOffset; | |
uint FileIdentityLength; | |
uint ServiceIdentityOffset; | |
uint ServiceIdentityLength; | |
} FetchData; | |
} | |
struct _CLOUD_PROVIDER_SET_EXTERNAL_INFO{ | |
uint Version; | |
uint Flags; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} FileSize; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} CreationTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ModifiedTime; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} AccessedTime; | |
uint FileAttributes; | |
uint Reserved; | |
uint FileIdentityOffset; | |
uint FileIdentityLength; | |
} | |
struct _CLS_ARCHIVE_DESCRIPTOR{ | |
uint64 coffLow; | |
uint64 coffHigh; | |
struct _CLS_CONTAINER_INFORMATION{ | |
uint FileAttributes; | |
uint64 CreationTime; | |
uint64 LastAccessTime; | |
uint64 LastWriteTime; | |
int64 ContainerSize; | |
uint FileNameActualLength; | |
uint FileNameLength; | |
wchar_t FileName; | |
} infoContainer; | |
} | |
struct _CLS_CONTAINER_INFORMATION{ | |
uint FileAttributes; | |
uint64 CreationTime; | |
uint64 LastAccessTime; | |
uint64 LastWriteTime; | |
int64 ContainerSize; | |
uint FileNameActualLength; | |
uint FileNameLength; | |
wchar_t FileName; | |
} | |
struct _CLS_INFORMATION{ | |
LONGLONG TotalAvailable; | |
LONGLONG CurrentAvailable; | |
LONGLONG TotalReservation; | |
ULONGLONG BaseFileSize; | |
ULONGLONG ContainerSize; | |
ULONG TotalContainers; | |
ULONG FreeContainers; | |
ULONG TotalClients; | |
ULONG Attributes; | |
ULONG FlushThreshold; | |
ULONG SectorSize; | |
union _CLS_LSN{ | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} offset; | |
ULONGLONG ullOffset; | |
} ; | |
} | |
struct _CLS_IO_STATISTICS{ | |
struct _CLS_IO_STATISTICS_HEADER{ | |
uint8 ubMajorVersion; | |
uint8 ubMinorVersion; | |
_CLFS_IOSTATS_CLASS eStatsClass; | |
uint16 cbLength; | |
uint coffData; | |
} hdrIoStats; | |
uint64 cFlush; | |
uint64 cbFlush; | |
uint64 cMetaFlush; | |
uint64 cbMetaFlush; | |
} | |
struct _CLS_IO_STATISTICS_HEADER{ | |
uint8 ubMajorVersion; | |
uint8 ubMinorVersion; | |
_CLFS_IOSTATS_CLASS eStatsClass; | |
uint16 cbLength; | |
uint coffData; | |
} | |
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{ | |
CLFS_RECORD_INDEX idxRecord; | |
CLFS_CONTAINER_ID cidContainer; | |
} | |
struct _CLS_SCAN_CONTEXT{ | |
struct _CLFS_NODE_ID{ | |
uint cType; | |
uint cbNode; | |
} cidNode; | |
struct _FILE_OBJECT{ | |
CSHORT ; | |
CSHORT Size; | |
struct _DEVICE_OBJECT{ | |
CSHORT Type; | |
USHORT Size; | |
LONG ReferenceCount; | |
struct _DRIVER_OBJECT{ | |
CSHORT Type; | |
CSHORT Size; | |
struct _DEVICE_OBJECT* ; | |
}* DriverObject; | |
struct _DEVICE_OBJECT* NextDevice; | |
struct _DEVICE_OBJECT* AttachedDevice; | |
struct _IRP{ | |
CSHORT Type; | |
USHORT Size; | |
struct _MDL* ; | |
}* CurrentIrp; | |
struct _IO_TIMER{ | |
__int16 Type; | |
__int16 TimerFlag; | |
struct _LIST_ENTRY TimerList; | |
TimerRoutine* TimerRoutine; | |
void* Context; | |
struct _DEVICE_OBJECT* DeviceObject; | |
}* ; | |
}* ; | |
}* plfoLog; | |
uint cIndex; | |
uint cContainers; | |
uint cContainersReturned; | |
uint8 eScanMode; | |
struct _CLS_CONTAINER_INFORMATION{ | |
uint FileAttributes; | |
uint64 CreationTime; | |
uint64 LastAccessTime; | |
uint64 LastWriteTime; | |
int64 ContainerSize; | |
uint FileNameActualLength; | |
uint FileNameLength; | |
wchar_t FileName; | |
}* pinfoContainer; | |
} | |
struct _CLS_WRITE_ENTRY{ | |
void* ; | |
} | |
struct _CLUSTER_RANGE{ | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} StartingCluster; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{ | |
DWORD LowPart; | |
LONG HighPart; | |
} u; | |
LONGLONG QuadPart; | |
} ClusterCount; | |
} | |
struct _CMAPI_INPUT_CREATE_DEVICE_DATA{ | |
uint cbSize; | |
uint Flags; | |
wchar_t* DeviceId; | |
uint DeviceIdSize; | |
wchar_t* ParentDeviceId; | |
uint ParentDeviceIdSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_DEVICE_LIST_DATA{ | |
uint cbSize; | |
uint Flags; | |
wchar_t* Filter; | |
uint FilterSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_ENUMERATE_DATA{ | |
uint cbSize; | |
uint Flags; | |
_CMAPI_ENUMERATE_SUBKEYS_TYPE EnumerateType; | |
uint Index; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_INTERFACE_ALIAS_DATA{ | |
uint cbSize; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InterfaceAliasClassGuid; | |
wchar_t* Symlink; | |
uint SymlinkSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_INTERFACE_LIST_DATA{ | |
uint cbSize; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ClassGuid; | |
wchar_t* Filter; | |
uint FilterSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_OBJECT_DATA{ | |
uint cbSize; | |
uint Flags; | |
_CMAPI_OBJECT_TYPE ObjectType; | |
wchar_t* ObjectName; | |
uint ObjectNameSize; | |
uint Type; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_PROBLEM_DATA{ | |
uint cbSize; | |
uint Flags; | |
wchar_t DeviceId; | |
} | |
struct _CMAPI_INPUT_PROPERTY_DATA{ | |
uint cbSize; | |
uint Flags; | |
_CMAPI_OBJECT_TYPE ObjectType; | |
wchar_t* ObjectName; | |
uint ObjectNameSize; | |
struct _DEVPROPKEY{ | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} ; | |
} Property; | |
uint PropertyType; | |
void* PropertyBuffer; | |
uint PropertyBufferSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_REGISTER_INTERFACE_DATA{ | |
uint cbSize; | |
uint Flags; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
} InterfaceClassGuid; | |
wchar_t* DeviceId; | |
uint DeviceIdSize; | |
wchar_t* ReferenceString; | |
uint ReferenceStringSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_REGISTRY_DATA{ | |
uint cbSize; | |
uint Flags; | |
_CMAPI_OBJECT_TYPE ObjectType; | |
wchar_t* ObjectName; | |
uint ObjectNameSize; | |
uint DesiredAccess; | |
_CMAPI_DISPOSITION Disposition; | |
uint HardwareProfileId; | |
uint OutputSize; | |
} | |
struct _CMAPI_INPUT_REGISTRY_PROPERTY_DATA{ | |
uint cbSize; | |
uint Flags; | |
_CMAPI_OBJECT_TYPE ObjectType; | |
wchar_t* ObjectName; | |
uint ObjectNameSize; | |
_CMAPI_REG_PROP Property; | |
uint PropertyType; | |
void* PropertyBuffer; | |
uint PropertyBufferSize; | |
uint OutputSize; | |
} | |
struct _CMAPI_RESULT_BUFFER_DATA{ | |
uint cbSize; | |
int Result; | |
uint RequiredSize; | |
uint Type; | |
uint8 Buffer; | |
} | |
struct _CMAPI_RESULT_DATA{ | |
uint cbSize; | |
int Result; | |
} | |
struct _CMAPI_RESULT_DEPTH_DATA{ | |
uint cbSize; | |
int Result; | |
uint Depth; | |
} | |
struct _CMAPI_RESULT_HANDLE_DATA{ | |
uint cbSize; | |
int Result; | |
void* __ptr64Handle; | |
} | |
struct _CMAPI_RESULT_STATUS_DATA{ | |
uint cbSize; | |
int Result; | |
uint Status; | |
uint Problem; | |
int ProblemStatus; | |
} | |
struct _CMAP_TABLE{ | |
uint16 Version; | |
uint16 NumTables; | |
struct _ENCODING_RECORD{ | |
uint16 ; | |
uint16 EncodingId; | |
uint Offset; | |
} EncodingRecord; | |
} | |
struct _CMC_DRIVER_INFO{ | |
ExceptionCallback* ExceptionCallback; | |
DpcCallback* DpcCallback; | |
void* DeviceContext; | |
} | |
struct _CMFThreadParams{ | |
uint AllocationAttributes; | |
uint CacheIndex; | |
uint DesiredAccess; | |
uint8 Detached; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
}* DoneEvent; | |
uint Flags; | |
uint Index; | |
uint PageAccess; | |
int Status; | |
void** TargetModule; | |
uint What; | |
} | |
struct _CMHIVE{ | |
struct _HHIVE{ | |
uint Signature; | |
GetCellRoutine** GetCellRoutine; | |
ReleaseCellRoutine* ReleaseCellRoutine; | |
Allocate** Allocate; | |
Free* Free; | |
FileWrite* FileWrite; | |
FileRead* FileRead; | |
void* HiveLoadFailure; | |
struct _HBASE_BLOCK{ | |
uint Signature; | |
uint Sequence1; | |
uint Sequence2; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint Major; | |
uint Minor; | |
uint Type; | |
uint Format; | |
uint RootCell; | |
uint Length; | |
uint Cluster; | |
uint8 FileName; | |
}* BaseBlock; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} DirtyVector; | |
uint DirtyCount; | |
uint DirtyAlloc; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} UnreconciledVector; | |
uint UnreconciledCount; | |
uint BaseBlockAlloc; | |
uint Cluster; | |
uint8 Flat:1; | |
uint8 ReadOnly:1; | |
uint8 SystemCacheBacked:1; | |
uint8 Reserved:5; | |
uint8 DirtyFlag; | |
uint HvBinHeadersUse; | |
uint HvFreeCellsUse; | |
uint HvUsedCellsUse; | |
uint CmUsedCellsUse; | |
uint HiveFlags; | |
uint CurrentLog; | |
uint CurrentLogSequence; | |
uint CurrentLogMinimumSequence; | |
uint CurrentLogOffset; | |
uint MinimumLogSequence; | |
uint LogFileSizeCap; | |
uint8 LogDataPresent; | |
} Hive; | |
void* FileHandles; | |
} | |
struct _CMP_APP_HIVE_LOAD_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} HiveListEntry; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LoaderListEntry; | |
void* Key; | |
uint8 KeyIsString; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Event; | |
struct _EX_RUNDOWN_REF{ | |
union { | |
uint Count; | |
void* Ptr; | |
} ___u0; | |
} Rundown; | |
} | |
struct _CMP_BOOT_LOAD_CONTROL{ | |
wchar_t* LoadPath; | |
uint ArrayIndex; | |
struct _CM_COMPONENT_HASH{ | |
uint Hash; | |
} HashKey; | |
int Flags; | |
int Reference; | |
} | |
struct _CMP_DISCARD_AND_REPLACE_KCB_CONTEXT{ | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union { | |
struct _CM_KEY_HASH{ | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} ; | |
struct { | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} __s1; | |
} ___u8; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} KcbPushlock; | |
union { | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
}* Owner; | |
int SharedCount; | |
} ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK{ | |
uint32 Compressed:1; | |
uint32 RefCount:31; | |
union { | |
struct _CM_NAME_HASH NameHash; | |
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1; | |
} ___u2; | |
}* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE{ | |
uint Cell; | |
uint ConvKey; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} List; | |
uint DescriptorLength; | |
uint RealRefCount; | |
struct _SECURITY_DESCRIPTOR_RELATIVE{ | |
uint8 Revision; | |
uint8 Sbz1; | |
uint16 Control; | |
uint Owner; | |
uint Group; | |
uint Sacl; | |
uint Dacl; | |
} Descriptor; | |
}* CachedSecurity; | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union { | |
uint ValueList; | |
struct _CM_KEY_CONTROL_BLOCK* RealKcb; | |
} ___u1; | |
} ValueCache; | |
union { | |
struct _CM_INDEX_HINT_BLOCK{ | |
uint Count; | |
uint HashKey; | |
}* IndexHint; | |
uint HashKey; | |
uint SubKeyCount; | |
} ___u21; | |
union { | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyListHead; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} FreeListEntry; | |
} ___u22; | |
struct _CM_KEY_BODY{ | |
uint Type; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union $8440638E30A9331A41296104787125B0 ___u8; | |
struct _EX_PUSH_LOCK KcbPushlock; | |
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE* CachedSecurity; | |
struct _CACHED_CHILD_LIST ValueCache; | |
union $8F0591D9D3A7A30BBAE496525511E483 ___u21; | |
union $523FADD81025DDC728A1E47F6561D96B ___u22; | |
struct _CM_KEY_BODY* KeyBodyArray; | |
}* KeyControlBlock; | |
struct _CM_NOTIFY_BLOCK{ | |
struct _LIST_ENTRY HiveList; | |
struct _LIST_ENTRY PostList; | |
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock; | |
struct _CM_KEY_BODY* KeyBody; | |
uint32 Filter:30; | |
uint32 WatchTree:1; | |
uint32 NotifyPending:1; | |
struct _SECURITY_SUBJECT_CONTEXT SubjectContext; | |
}* NotifyBlock; | |
void* ProcessID; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} KeyBodyList; | |
uint32 Flags:16; | |
uint32 HandleTags:16; | |
union _CM_TRANS_PTR{ | |
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0; | |
void* TransPtr; | |
} Trans; | |
struct _GUID{ | |
uint Data1; | |
uint16 Data2; | |
uint16 Data3; | |
uint8 Data4; | |
}* KtmUow; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ContextListHead; | |
}* KeyBodyArray; | |
}* BaseKcb; | |
int PrepareStatus; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ClonedKcbListHead; | |
} | |
struct _CMP_FLUSH_NOTIFIES_CONTEXT{ | |
uint Flags; | |
uint8 RegLockExclusive; | |
} | |
struct _CMP_KEY_ENUM_STACK{ | |
__int16 TopLayer; | |
uint8 EnumerationStarted; | |
struct _CM_KEY_NODE_STACK{ | |
__int16 TopLayer; | |
struct _CM_KEY_NODE_STACK_ENTRY{ | |
struct _HHIVE{ | |
uint Signature; | |
GetCellRoutine** GetCellRoutine; | |
ReleaseCellRoutine* ReleaseCellRoutine; | |
Allocate** Allocate; | |
Free* Free; | |
FileWrite* FileWrite; | |
FileRead* FileRead; | |
void* HiveLoadFailure; | |
struct _HBASE_BLOCK* BaseBlock; | |
struct _RTL_BITMAP DirtyVector; | |
uint DirtyCount; | |
uint DirtyAlloc; | |
struct _RTL_BITMAP UnreconciledVector; | |
uint UnreconciledCount; | |
uint BaseBlockAlloc; | |
uint Cluster; | |
uint8 Flat:1; | |
uint8 ReadOnly:1; | |
uint8 SystemCacheBacked:1; | |
uint8 Reserved:5; | |
uint8 DirtyFlag; | |
uint HvBinHeadersUse; | |
uint HvFreeCellsUse; | |
uint HvUsedCellsUse; | |
uint CmUsedCellsUse; | |
uint HiveFlags; | |
uint CurrentLog; | |
uint CurrentLogSequence; | |
uint CurrentLogMinimumSequence; | |
uint CurrentLogOffset; | |
uint MinimumLogSequence; | |
uint LogFileSizeCap; | |
uint8 LogDataPresent; | |
}* Hive; | |
uint KeyCell; | |
struct _CM_KEY_NODE{ | |
uint16 Signature; | |
uint16 Flags; | |
union _LARGE_INTEGER LastWriteTime; | |
uint8 AccessBits; | |
uint8 LayerSemantics:2; | |
uint8 Spare1:5; | |
uint8 InheritClass:1; | |
uint16 Spare2; | |
uint Parent; | |
uint SubKeyCounts; | |
}* KeyNode; | |
struct _HV_GET_CELL_CONTEXT{ | |
uint Cell; | |
struct _HV_GET_BIN_CONTEXT BinContext; | |
} KeyNodeContext; | |
} LocalEntries; | |
} CurrentKeyNodeStack; | |
struct _CMP_KEY_ENUM_STACK_ENTRY{ | |
struct _HHIVE{ | |
uint Signature; | |
GetCellRoutine** GetCellRoutine; | |
ReleaseCellRoutine* ReleaseCellRoutine; | |
Allocate** Allocate; | |
Free* Free; | |
FileWrite* FileWrite; | |
FileRead* FileRead; | |
void* HiveLoadFailure; | |
struct _HBASE_BLOCK{ | |
uint Signature; | |
uint Sequence1; | |
uint Sequence2; | |
union _LARGE_INTEGER TimeStamp; | |
uint Major; | |
uint Minor; | |
uint Type; | |
uint Format; | |
uint RootCell; | |
uint Length; | |
uint Cluster; | |
uint8 FileName; | |
}* BaseBlock; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} DirtyVector; | |
uint DirtyCount; | |
uint DirtyAlloc; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} UnreconciledVector; | |
uint UnreconciledCount; | |
uint BaseBlockAlloc; | |
uint Cluster; | |
uint8 Flat:1; | |
uint8 ReadOnly:1; | |
uint8 SystemCacheBacked:1; | |
uint8 Reserved:5; | |
uint8 DirtyFlag; | |
uint HvBinHeadersUse; | |
uint HvFreeCellsUse; | |
uint HvUsedCellsUse; | |
uint CmUsedCellsUse; | |
uint HiveFlags; | |
uint CurrentLog; | |
uint CurrentLogSequence; | |
uint CurrentLogMinimumSequence; | |
uint CurrentLogOffset; | |
uint MinimumLogSequence; | |
uint LogFileSizeCap; | |
uint8 LogDataPresent; | |
}* Hive; | |
uint CurrentIndex; | |
} LocalEntries; | |
} | |
struct _CMP_KEY_ENUM_STACK_ENTRY{ | |
struct _HHIVE{ | |
uint Signature; | |
GetCellRoutine** GetCellRoutine; | |
ReleaseCellRoutine* ReleaseCellRoutine; | |
Allocate** Allocate; | |
Free* Free; | |
FileWrite* FileWrite; | |
FileRead* FileRead; | |
void* HiveLoadFailure; | |
struct _HBASE_BLOCK{ | |
uint Signature; | |
uint Sequence1; | |
uint Sequence2; | |
union _LARGE_INTEGER{ | |
DWORD LowPart; | |
LONG HighPart; | |
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u; | |
LONGLONG QuadPart; | |
} TimeStamp; | |
uint Major; | |
uint Minor; | |
uint Type; | |
uint Format; | |
uint RootCell; | |
uint Length; | |
uint Cluster; | |
uint8 FileName; | |
}* BaseBlock; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} DirtyVector; | |
uint DirtyCount; | |
uint DirtyAlloc; | |
struct _RTL_BITMAP{ | |
ULONG ; | |
ULONG* ; | |
} UnreconciledVector; | |
uint UnreconciledCount; | |
uint BaseBlockAlloc; | |
uint Cluster; | |
uint8 Flat:1; | |
uint8 ReadOnly:1; | |
uint8 SystemCacheBacked:1; | |
uint8 Reserved:5; | |
uint8 DirtyFlag; | |
uint HvBinHeadersUse; | |
uint HvFreeCellsUse; | |
uint HvUsedCellsUse; | |
uint CmUsedCellsUse; | |
uint HiveFlags; | |
uint CurrentLog; | |
uint CurrentLogSequence; | |
uint CurrentLogMinimumSequence; | |
uint CurrentLogOffset; | |
uint MinimumLogSequence; | |
uint LogFileSizeCap; | |
uint8 LogDataPresent; | |
}* Hive; | |
uint CurrentIndex; | |
} | |
struct _CMP_LAZY_WRITER_PARAMETERS{ | |
struct _KTIMER{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Timer; | |
struct _KDPC{ | |
ULONG TargetInfoAsUlong; | |
UCHAR Type; | |
UCHAR Importance; | |
USHORT Number; | |
struct _SINGLE_LIST_ENTRY{ | |
struct _SINGLE_LIST_ENTRY* Next; | |
} ; | |
} Dpc; | |
struct _KEVENT{ | |
struct _DISPATCHER_HEADER{ | |
LONG ; | |
LONG LockNV; | |
UCHAR Type; | |
UCHAR Signalling; | |
UCHAR Size; | |
UCHAR Reserved1; | |
UCHAR TimerType; | |
UCHAR TimerControlFlags; | |
uint8 Absolute:1; | |
uint8 Wake:1; | |
uint8 EncodedTolerableDelay:6; | |
UCHAR Hand; | |
UCHAR TimerMiscFlags; | |
uint8 Index:1; | |
uint8 Processor:5; | |
uint8 Inserted:1; | |
uint8 Expired:1; | |
UCHAR Timer2Type; | |
UCHAR Timer2Flags; | |
uint8 Timer2Inserted:1; | |
uint8 Timer2Expiring:1; | |
uint8 Timer2CancelPending:1; | |
uint8 Timer2SetPending:1; | |
uint8 Timer2Running:1; | |
uint8 Timer2Disabled:1; | |
uint8 Timer2ReservedFlags:2; | |
UCHAR Timer2ComponentId; | |
UCHAR Timer2RelativeId; | |
UCHAR QueueType; | |
UCHAR QueueControlFlags; | |
uint8 Abandoned:1; | |
uint8 DisableIncrement:1; | |
uint8 QueueReservedControlFlags:6; | |
UCHAR QueueSize; | |
UCHAR QueueReserved; | |
UCHAR ThreadType; | |
UCHAR ThreadReserved; | |
UCHAR ThreadControlFlags; | |
uint8 CycleProfiling:1; | |
uint8 CounterProfiling:1; | |
uint8 GroupScheduling:1; | |
uint8 AffinitySet:1; | |
uint8 Tagged:1; | |
uint8 EnergyProfiling:1; | |
uint8 SchedulerAssist:1; | |
uint8 Instrumented:1; | |
UCHAR DebugActive; | |
UCHAR MutantType; | |
UCHAR MutantSize; | |
BOOLEAN DpcActive; | |
UCHAR MutantReserved; | |
LONG SignalState; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} ; | |
} ; | |
} Event; | |
uint Lock; | |
WriteRoutine* WriteRoutine; | |
uint64 Status; | |
uint EligibilityDelaySeconds; | |
uint DefaultRearmTimeSeconds; | |
uint DefaultToleranceMs; | |
uint RetryIntervalSeconds; | |
} | |
struct _CMP_SILO_CONTEXT{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LockEntryHead; | |
uint8 LockListUnderCleanup; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct { | |
uint32 Locked:1; | |
uint32 Waiting:1; | |
uint32 Waking:1; | |
uint32 MultipleShared:1; | |
uint32 Shared:28; | |
} __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} ContextLock; | |
} | |
struct _CMP_SILO_LOCK_ENTRY{ | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} LockEntryList; | |
uint LockCount; | |
struct _CM_KEY_CONTROL_BLOCK{ | |
uint RefCount; | |
uint32 ExtFlags:16; | |
uint32 PrivateAlloc:1; | |
uint32 Discarded:1; | |
uint32 HiveUnloaded:1; | |
uint32 Decommissioned:1; | |
uint32 LockTablePresent:1; | |
uint32 TotalLevels:10; | |
union { | |
struct _CM_KEY_HASH{ | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} ; | |
struct { | |
struct _CM_PATH_HASH ConvKey; | |
struct _CM_KEY_HASH* NextHash; | |
struct _HHIVE* KeyHive; | |
uint KeyCell; | |
} __s1; | |
} ___u8; | |
struct _EX_PUSH_LOCK{ | |
union { | |
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0; | |
uint Value; | |
void* Ptr; | |
} ___u0; | |
} KcbPushlock; | |
union { | |
struct _KTHREAD{ | |
struct _DISPATCHER_HEADER ; | |
void* SListFaultAddress; | |
uint64 QuantumTarget; | |
void* InitialStack; | |
void* StackLimit; | |
void* StackBase; | |
uint ThreadLock; | |
uint64 CycleTime; | |
uint HighCycleTime; | |
void* ServiceTable; | |
uint CurrentRunTime; | |
uint ExpectedRunTime; | |
void* KernelStack; | |
struct _XSAVE_FORMAT* StateSaveArea; | |
struct _KSCHEDULING_GROUP* SchedulingGroup; | |
union _KWAIT_STATUS_REGISTER WaitRegister; | |
uint8 Running; | |
uint8 Alerted; | |
}* Owner; | |
int SharedCount; | |
} ___u10; | |
uint8 DelayedDeref:1; | |
uint8 DelayedClose:1; | |
uint8 Parking:1; | |
uint8 LayerSemantics; | |
__int16 LayerHeight; | |
uint SlotHint; | |
struct _CM_KEY_CONTROL_BLOCK* ParentKcb; | |
struct _CM_NAME_CONTROL_BLOCK{ | |
uint32 Compressed:1; | |
uint32 RefCount:31; | |
union { | |
struct _CM_NAME_HASH NameHash; | |
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1; | |
} ___u2; | |
}* NameBlock; | |
struct _CM_KEY_SECURITY_CACHE{ | |
uint Cell; | |
uint ConvKey; | |
struct _LIST_ENTRY{ | |
struct _LIST_ENTRY* ; | |
struct _LIST_ENTRY* Blink; | |
} List; | |
uint DescriptorLength; | |
uint RealRefCount; | |
struct _SECURITY_DESCRIPTOR_RELATIVE{ | |
uint8 Revision; | |
uint8 Sbz1; | |
uint16 Control; | |
uint Owner; | |
uint Group; | |
uint Sacl; | |
uint Dacl; | |
} Descriptor; | |
}* CachedSecurity; | |
struct _CACHED_CHILD_LIST{ | |
uint Count; | |
union { | |
uint ValueList; | |
struct _CM_KEY_CONTROL_BLOCK* RealKcb; | |
} ___u1; | |
} ValueCache; | |
union { | |
struct _CM_INDEX_HINT_BLOCK{ | |
uint Count; | |
uint HashKey; | |
}* Index |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment