Skip to content

Instantly share code, notes, and snippets.

@7etsuo
Created April 22, 2025 09:39
Show Gist options
  • Save 7etsuo/87fff8795270fc0a123f94df2dc4647c to your computer and use it in GitHub Desktop.
Save 7etsuo/87fff8795270fc0a123f94df2dc4647c to your computer and use it in GitHub Desktop.
r0
This file has been truncated, but you can view the full file.
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
}
struct _WMI_FLTIO_NOTIFY_ROUTINES{ TimeStampRoutine* TimeStampRoutine; FailureNotifyRoutine* FailureNotifyRoutine; InitiationNotifyRoutine* InitiationNotifyRoutine; CompletionNotifyRoutine* CompletionNotifyRoutine; FastCompletionNotifyRoutine* FastCompletionNotifyRoutine; IoRedirectionNotifyRoutine* IoRedirectionNotifyRoutine; }
TimeStampRoutine TimeStampRoutine,void* TimeStampRoutine( _ETW_KERNEL_TRACE_TIMESTAMP* unsigned )
FailureNotifyRoutine FailureNotifyRoutine,void* FailureNotifyRoutine( void* unsigned, int , uint )
InitiationNotifyRoutine InitiationNotifyRoutine,void* InitiationNotifyRoutine( _IRP* )
CompletionNotifyRoutine CompletionNotifyRoutine,void CompletionNotifyRoutine( uint , uint* , _IRP* )
FastCompletionNotifyRoutine FastCompletionNotifyRoutine,void* FastCompletionNotifyRoutine( void* unsigned, int , uint , uint16* , _ETW_KERNEL_TRACE_TIMESTAMP* )
IoRedirectionNotifyRoutine IoRedirectionNotifyRoutine,void* IoRedirectionNotifyRoutine( _IRP** _FILE_OBJECT )
$0D5D251ED7BB211D541240C8DF525F70,
struct _WMI_FLTIO_NOTIFY_ROUTINES{ TimeStampRoutine* TimeStampRoutine; FailureNotifyRoutine* FailureNotifyRoutine; InitiationNotifyRoutine* InitiationNotifyRoutine; CompletionNotifyRoutine* CompletionNotifyRoutine; FastCompletionNotifyRoutine* FastCompletionNotifyRoutine; IoRedirectionNotifyRoutine* IoRedirectionNotifyRoutine; }
typedef $94554CE5BAF2B0A5015EC9592005A800 $0D5D251ED7BB211D541240C8DF525F70 ;
$0D5D251ED7BB211D541240C8DF525F70
typedef $94554CE5BAF2B0A5015EC9592005A800 $0D5D251ED7BB211D541240C8DF525F70 ;
ENTRY( UID($94554CE5BAF2B0A5015EC9592005A800,"$94554CE5BAF2B0A5015EC9592005A800") , P(NONE), .varType = $Typedef,{ .Typedef = { (member){ ID($0D5D251ED7BB211D541240C8DF525F70), &allTypes[ID($0D5D251ED7BB211D541240C8DF525F70)], .named = "", P(NONE) } } }),
MaxCount uint
DeviceList _DEVICE_RELATIONS
struct _PDO_DEVICE_LIST_ENUM_CONTEXT{ uint MaxCount; _DEVICE_RELATIONS* DeviceList; }
_KRESOURCEMANAGER_COMPLETION_BINDING
typedef PKRESOURCEMANAGER_COMPLETION_BINDING* _KRESOURCEMANAGER_COMPLETION_BINDING ;
char
union __m256i{ char [16]; }
struct _PEB{ uint8 InheritedAddressSpace; uint8 ReadImageFileExecOptions; uint8 BeingDebugged; $48836EB32FB81E2B39F3268EB62EB772 ___u3; void* Mutant; void* ImageBaseAddress; _PEB_LDR_DATA* Ldr; _RTL_USER_PROCESS_PARAMETERS* ProcessParameters; void* SubSystemData; void* ProcessHeap; _RTL_CRITICAL_SECTION* FastPebLock; _SLIST_HEADER* AtlThunkSListPtr; void* IFEOKey; $F46366362C4FF4357F3524B73CADD001 ___u13; $6F1CA9A36B21C857AE5467E073440320 ___u14; uint SystemReserved [2]; }
struct _MI_SYSTEM_INFORMATION{ _MI_POOL_STATE Pools; _MI_SECTION_STATE Sections; _MI_SYSTEM_IMAGE_STATE SystemImages; _MI_SESSION_STATE Sessions; _MI_PROCESS_STATE Processes; _MI_HARDWARE_STATE Hardware; _MI_SYSTEM_VA_STATE SystemVa; _MI_COMBINE_STATE PageCombines; _MI_PAGELIST_STATE PageLists; _MI_PARTITION_STATE Partitions; _MI_SHUTDOWN_STATE Shutdowns; _MI_ERROR_STATE Errors; _MI_ACCESS_LOG_STATE AccessLog; _MI_DEBUGGER_STATE Debugger; _MI_STANDBY_STATE Standby; _MI_SYSTEM_PTE_STATE SystemPtes; _MI_IO_PAGE_STATE IoPages; _MI_PAGING_IO_STATE PagingIo; _MI_COMMON_PAGE_STATE CommonPages; _MI_SYSTEM_TRIM_STATE Trims; _MI_RESAVAIL_TRACKER ResTrack; uint Cookie; int ZeroingDisabled; void** BootRegistryRuns; uint8 FullyInitialized; uint8 SafeBooted; uint8 LargePfnBitMapsReady; _RTL_BITMAP LargePfnBitMap [1]; }
struct ACPI_INTERFACE_STANDARD2{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
}
struct ACPI_REGS_INTERFACE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
ReadAcpiRegister* ReadAcpiRegister;
WriteAcpiRegister* WriteAcpiRegister;
}
struct ALLOCATED_NSN{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} Entry;
struct _VRP_NAMESPACE_NODE{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Path;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} TargetKeyPath;
uint Flags;
}* Key;
}
struct ANON_OBJECT_HEADER{
uint16 Sig1;
uint16 Sig2;
uint16 Version;
uint16 Machine;
uint TimeDateStamp;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ClassID;
uint SizeOfData;
}
struct ANON_OBJECT_HEADER_BIGOBJ{
uint16 Sig1;
uint16 Sig2;
uint16 Version;
uint16 Machine;
uint TimeDateStamp;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ClassID;
uint SizeOfData;
uint Flags;
uint MetaDataSize;
uint MetaDataOffset;
uint NumberOfSections;
uint PointerToSymbolTable;
uint NumberOfSymbols;
}
struct ANON_OBJECT_HEADER_V2{
uint16 Sig1;
uint16 Sig2;
uint16 Version;
uint16 Machine;
uint TimeDateStamp;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ClassID;
uint SizeOfData;
uint Flags;
uint MetaDataSize;
uint MetaDataOffset;
}
struct ARRAY_INFO{
int Dimension;
uint* BufferConformanceMark;
uint* BufferVarianceMark;
uint* MaxCountArray;
uint* OffsetArray;
uint* ActualCountArray;
}
struct BATTERY_REPORTING_SCALE{
uint Granularity;
uint Capacity;
}
struct BCD_OBJECT_KEY_NAME{
struct _KEY_NAME_INFORMATION{
uint NameLength;
wchar_t Name;
} NameInfo;
wchar_t Buffer;
}
struct BEST_DOCK_TO_EJECT{
uint Depth;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* PhysicalDeviceObject;
}
struct BITMAPV4HEADER{
uint bV4Size;
int bV4Width;
int bV4Height;
uint16 bV4Planes;
uint16 bV4BitCount;
uint bV4V4Compression;
uint bV4SizeImage;
int bV4XPelsPerMeter;
int bV4YPelsPerMeter;
uint bV4ClrUsed;
uint bV4ClrImportant;
uint bV4RedMask;
uint bV4GreenMask;
uint bV4BlueMask;
uint bV4AlphaMask;
uint bV4CSType;
struct tagICEXYZTRIPLE{
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzRed;
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzGreen;
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzBlue;
} bV4Endpoints;
uint bV4GammaRed;
uint bV4GammaGreen;
uint bV4GammaBlue;
}
struct BITMAPV5HEADER{
uint bV5Size;
int bV5Width;
int bV5Height;
uint16 bV5Planes;
uint16 bV5BitCount;
uint bV5Compression;
uint bV5SizeImage;
int bV5XPelsPerMeter;
int bV5YPelsPerMeter;
uint bV5ClrUsed;
uint bV5ClrImportant;
uint bV5RedMask;
uint bV5GreenMask;
uint bV5BlueMask;
uint bV5AlphaMask;
uint bV5CSType;
struct tagICEXYZTRIPLE{
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzRed;
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzGreen;
struct tagCIEXYZ{
int ciexyzX;
int ciexyzY;
int ciexyzZ;
} ciexyzBlue;
} bV5Endpoints;
uint bV5GammaRed;
uint bV5GammaGreen;
uint bV5GammaBlue;
uint bV5Intent;
uint bV5ProfileData;
uint bV5ProfileSize;
uint bV5Reserved;
}
struct BREAK_ON_STATUS_BUFFER{
int NtStatus;
uint Win32Error;
uint ThreadId;
uint ProcessId;
char ImageFileName;
}
struct BSD_BOOT_STATUS_DATA{
uint Version;
_NT_PRODUCT_TYPE ProductType;
uint8 AutoAdvancedBoot;
uint8 AdvancedBootMenuTimeout;
uint8 LastBootSucceeded;
uint8 LastBootShutdown;
uint8 SleepInProgress;
struct _BSD_POWER_TRANSITION{
int64 PowerButtonTimestamp;
uint8 SystemRunning;
uint8 SleepInProgress;
uint8 ConnectedStandbyInProgress;
uint8 CsEntryScenarioInstanceId;
uint SystemSleepTransitionsToOn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} LastReferenceTime;
uint LastReferenceTimeCheckSum;
} PowerTransition;
uint8 BootAttemptCount;
uint8 LastBootCheckpoint;
uint LastBootId;
uint LastSuccessfulShutdownBootId;
uint LastReportedAbnormalShudownBootId;
struct _BSD_FATAL_ERROR_INFO{
uint BootId;
uint RepeatCount;
uint OtherErrorCount;
uint Code;
int Status;
} ErrorInfo;
}
struct BSMINFO{
uint cbSize;
struct HDESK__{
int ;
}* hdesk;
struct HWND__{
int ;
}* hwnd;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} luid;
}
struct BULK_SECURITY_TEST_DATA{
uint DesiredAccess;
uint SecurityIds;
}
struct B_TREE_DBG_NODE_POOL{
}
struct B_TREE_DBG_NODE_POOL__NP_CTX{
uint NodeCount;
void* RefLeaves;
}
struct B_TREE_DUMMY_NODE_POOL{
}
struct B_TREE_DUMMY_NODE_POOL__NP_CTX{
}
struct B_TREE_NODE_HDR{
uint32 EntryCount:16;
uint32 Depth:8;
uint32 LeafNode:8;
}
struct BeArgs{
uint SavedEbp;
uint ReturnAddress;
uint BugCheckCode;
uint BcP1;
uint BcP2;
uint BcP3;
uint BcP4;
}
struct BeFrame{
uint SavedFlags;
uint SavedEax;
uint SavedEbp;
uint ReturnAddress;
}
struct CHARGING_POWERSOURCE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
NotificationCallback* NotificationCallback;
void* NotificationContext;
}
struct CLEAR_PROBLEM_CONTEXT{
uint Problem;
uint Restart;
uint Limit;
}
struct CMP_CHECK_REGISTRY_STACK_ENTRY{
uint Cell;
uint ParentCell;
uint PriorSibling;
uint ChildIndex;
uint8 CellChecked;
}
struct CMP_COPY_STACK_ENTRY{
uint SourceCell;
uint TargetCell;
uint i;
int32 CopiedDepth:3;
uint8 SkippedEntries:1;
uint8 TargetCellDirty:1;
}
struct CMP_OFFSET_ARRAY{
uint FileOffset;
void* DataBuffer;
uint DataLength;
}
struct CM_CREATE_KEY_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Header;
HSTORAGE_TYPE StorageType;
uint DescriptorLength;
void* Descriptor;
}
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
}
struct CM_LOGREC_BIG_RECORD{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Record;
uint NrChunks;
uint ChunkNo;
uint DataSize;
}
struct CM_Power_Data_s{
uint PD_Size;
_DEVICE_POWER_STATE PD_MostRecentPowerState;
uint PD_Capabilities;
uint PD_D1Latency;
uint PD_D2Latency;
uint PD_D3Latency;
_DEVICE_POWER_STATE PD_PowerStateMapping;
}
struct CM_RENAME_KEY_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Header;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} NewKeyName;
}
struct CM_RESTART_AREA{
union _CLS_LSN{
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
} offset;
ULONGLONG ullOffset;
} RestartLsn;
}
struct CM_SET_KEY_USER_FLAGS_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} ;
uint NewFlags;
}
struct CM_SET_LAST_WRITE_TIME_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Header;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} NewLastWriteTime;
}
struct CM_SET_SECURITY_DESCRIPTOR_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Header;
uint NewDescriptorLength;
void* NewDescriptor;
}
struct CM_SET_VALUE_NEW_LOGREC{
struct CM_LOGREC{
uint CheckSum;
uint Size;
uint Type;
uint Action;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} KtmUow;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
} Header;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ValueName;
uint ValueType;
uint DataSize;
void* Data;
}
struct COPYFILE2_EXTENDED_PARAMETERS{
uint dwSize;
uint dwCopyFlags;
int* pfCancel;
pProgressRoutine* pProgressRoutine;
void* pvCallbackContext;
}
struct CPPEH_RECORD{
DWORD old_esp;
}
struct CREATE_USN_JOURNAL_DATA{
uint64 MaximumSize;
uint64 AllocationDelta;
}
struct CalendarNlsDataItems{
uint16 iCalendar;
uint16 iTwoDigitYearMax;
uint saShortDate;
uint saYearMonth;
uint saLongDate;
uint saEraNames;
uint waaEraRanges;
uint saDayNames;
uint saAbbrevDayNames;
uint saMonthNames;
uint saAbbrevMonthNames;
uint sCalendarName;
uint saMonthDay;
uint saAbbrevEraNames;
uint saSuperShortDayNames;
uint sRelativeLongDate;
uint sPadding;
uint sPadding2;
uint sPadding3;
}
struct CbFrame{
uint ReturnAddress;
uint OutputBuffer;
uint OutputLength;
uint ReturnStatus;
}
struct CuFrame{
uint SavedEdi;
uint SavedEsi;
uint SavedEbx;
uint SavedEbp;
uint Return;
uint OutputBuffer;
uint OutputLength;
uint NewInitialStack;
uint NewStackBase;
}
struct CultureDataType{
wchar_t* cultureName;
uint16 langID;
int parentItem;
}
struct DBGKD_INTERNAL_BREAKPOINT{
uint64 Addr;
uint Flags;
uint Calls;
uint CallsLastCheck;
uint MaxCallsPerPeriod;
uint MinInstructions;
uint MaxInstructions;
uint TotalInstructions;
uint Handle;
void* Thread;
uint64 ReturnAddress;
}
struct DEBUG_DEVICE_ADDRESS{
uint8 Type;
uint8 Valid;
uint8 Reserved;
}
struct DEBUG_MEMORY_REQUIREMENTS{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Start;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MaxEnd;
void* VirtualAddress;
uint Length;
uint8 Cached;
uint8 Aligned;
}
struct DELETE_USN_JOURNAL_DATA{
uint64 UsnJournalID;
uint DeleteFlags;
}
struct DEVICE_INSTANCE_DRIVER_PROPERTY{
_CM_REG_PROP Property;
uint8 IsClassProperty;
}
struct DEVICE_SERVICE_ITERATOR_CONTEXT{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* DeviceInstancePath;
Iterator* Iterator;
void* Context;
}
struct DIRWALK_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Directory;
wchar_t Name;
}
struct DISPATCH_INFO{
CONNECT_TYPE Type;
struct _KINTERRUPT{
__int16 Type;
__int16 Size;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} InterruptListEntry;
ServiceRoutine* ServiceRoutine;
MessageServiceRoutine* MessageServiceRoutine;
uint MessageIndex;
void* ServiceContext;
uint SpinLock;
uint TickCount;
uint* ActualLock;
DispatchAddress* DispatchAddress;
uint Vector;
uint8 Irql;
uint8 SynchronizeIrql;
uint8 FloatingSave;
uint8 Connected;
uint Number;
uint8 ShareVector;
uint8 EmulateActiveBoth;
uint16 ActiveCount;
int InternalState;
_KINTERRUPT_MODE Mode;
_KINTERRUPT_POLARITY Polarity;
uint ServiceCount;
uint DispatchCount;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
}* PassiveEvent;
void* DisconnectData;
struct _KTHREAD{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _M128A FloatRegisters;
}* StateSaveArea;
struct _KSCHEDULING_GROUP{
struct _KSCHEDULING_GROUP_POLICY Policy;
uint RelativeWeight;
uint ChildMinRate;
uint ChildMinWeight;
uint ChildTotalWeight;
uint64 QueryHistoryTimeStamp;
int64 NotificationCycles;
int64 MaxQuotaLimitCycles;
int64 MaxQuotaCyclesRemaining;
union $7E4164C3926CB86377AC4CFD3751C28A ___u9;
struct _KDPC* NotificationDpc;
struct _LIST_ENTRY ChildList;
struct _KSCHEDULING_GROUP* Parent;
struct _KSCB PerProcessor;
}* SchedulingGroup;
union _KWAIT_STATUS_REGISTER{
uint8 Flags;
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1;
} WaitRegister;
uint8 Running;
uint8 Alerted;
}* ServiceThread;
struct _INTERRUPT_CONNECTION_DATA{
uint Count;
struct _INTERRUPT_VECTOR_DATA{
INTERRUPT_CONNECTION_TYPE Type;
uint Vector;
uint8 Irql;
_KINTERRUPT_POLARITY Polarity;
_KINTERRUPT_MODE Mode;
struct _GROUP_AFFINITY TargetProcessors;
struct _INTERRUPT_REMAPPING_INFO IntRemapInfo;
struct $9C4F338B70295F7B2047FA8931243165 ControllerInput;
uint64 HvDeviceId;
union $88BE5936E0EB352A1D17F89E2E2B4B32 ___u9;
} Vectors;
}* ConnectionData;
void* IntTrackEntry;
struct _ISRDPCSTATS{
uint64 IsrTime;
uint64 IsrTimeStart;
uint64 IsrCount;
uint64 DpcTime;
uint64 DpcTimeStart;
uint64 DpcCount;
uint8 IsrActive;
uint8 Reserved;
} IsrDpcStats;
void* RedirectObject;
}* Interrupt;
InterruptDispatch* InterruptDispatch;
ChainedDispatch* ChainedDispatch;
}
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
}
struct DISPLAYCONFIG_ADAPTER_NAME{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
wchar_t adapterDevicePath;
}
struct DISPLAYCONFIG_DESKTOP_IMAGE_INFO{
struct _POINTL{
int x;
int y;
} PathSourceSize;
struct _RECTL{
int left;
int top;
int right;
int bottom;
} DesktopImageRegion;
struct _RECTL{
int left;
int top;
int right;
int bottom;
} DesktopImageClip;
}
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
}
struct DISPLAYCONFIG_MODE_INFO{
DISPLAYCONFIG_MODE_INFO_TYPE infoType;
uint id;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
union {
struct DISPLAYCONFIG_TARGET_MODE{
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{
uint64 pixelRate;
struct DISPLAYCONFIG_RATIONAL hSyncFreq;
struct DISPLAYCONFIG_RATIONAL vSyncFreq;
struct DISPLAYCONFIG_2DREGION activeSize;
struct DISPLAYCONFIG_2DREGION totalSize;
union $26365528C13EE39B63AD05330581E1D7 ___u5;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
} ;
} ;
struct DISPLAYCONFIG_SOURCE_MODE{
uint width;
uint height;
DISPLAYCONFIG_PIXELFORMAT pixelFormat;
struct _POINTL{
int x;
int y;
} position;
} sourceMode;
struct DISPLAYCONFIG_DESKTOP_IMAGE_INFO{
struct _POINTL{
int x;
int y;
} PathSourceSize;
struct _RECTL{
int left;
int top;
int right;
int bottom;
} DesktopImageRegion;
struct _RECTL{
int left;
int top;
int right;
int bottom;
} DesktopImageClip;
} desktopImageInfo;
} ___u3;
}
struct DISPLAYCONFIG_PATH_INFO{
struct DISPLAYCONFIG_PATH_SOURCE_INFO{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
union {
uint modeInfoIdx;
struct {
uint32 cloneGroupId:16;
uint32 sourceModeInfoIdx:16;
} __s1;
} ___u2;
uint statusFlags;
} sourceInfo;
struct DISPLAYCONFIG_PATH_TARGET_INFO{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
union {
uint modeInfoIdx;
struct {
uint32 desktopModeInfoIdx:16;
uint32 targetModeInfoIdx:16;
} __s1;
} ___u2;
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology;
DISPLAYCONFIG_ROTATION rotation;
DISPLAYCONFIG_SCALING scaling;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} refreshRate;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
int targetAvailable;
uint statusFlags;
} targetInfo;
uint flags;
}
struct DISPLAYCONFIG_PATH_SOURCE_INFO{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
union {
uint modeInfoIdx;
struct {
uint32 cloneGroupId:16;
uint32 sourceModeInfoIdx:16;
} __s1;
} ___u2;
uint statusFlags;
}
struct DISPLAYCONFIG_PATH_TARGET_INFO{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
union {
uint modeInfoIdx;
struct {
uint32 desktopModeInfoIdx:16;
uint32 targetModeInfoIdx:16;
} __s1;
} ___u2;
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology;
DISPLAYCONFIG_ROTATION rotation;
DISPLAYCONFIG_SCALING scaling;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} refreshRate;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
int targetAvailable;
uint statusFlags;
}
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
}
struct DISPLAYCONFIG_SET_TARGET_PERSISTENCE{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
union {
struct {
uint32 bootPersistenceOn:1;
uint32 reserved:31;
} ;
uint value;
} ___u1;
}
struct DISPLAYCONFIG_SOURCE_DEVICE_NAME{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
wchar_t viewGdiDeviceName;
}
struct DISPLAYCONFIG_SOURCE_MODE{
uint width;
uint height;
DISPLAYCONFIG_PIXELFORMAT pixelFormat;
struct _POINTL{
int x;
int y;
} position;
}
struct DISPLAYCONFIG_SUPPORT_VIRTUAL_RESOLUTION{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
union {
struct {
uint32 disableMonitorVirtualResolution:1;
uint32 reserved:31;
} __s0;
uint value;
} ___u1;
}
struct DISPLAYCONFIG_TARGET_BASE_TYPE{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY baseOutputTechnology;
}
struct DISPLAYCONFIG_TARGET_DEVICE_NAME{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} header;
struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS{
union {
struct {
uint32 friendlyNameFromEdid:1;
uint32 friendlyNameForced:1;
uint32 edidIdsValid:1;
uint32 reserved:29;
} __s0;
uint value;
} ___u0;
} flags;
DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY outputTechnology;
uint16 edidManufactureId;
uint16 edidProductCodeId;
uint connectorInstance;
wchar_t monitorFriendlyDeviceName;
}
struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS{
union {
struct {
uint32 friendlyNameFromEdid:1;
uint32 friendlyNameForced:1;
uint32 edidIdsValid:1;
uint32 reserved:29;
} __s0;
uint value;
} ___u0;
}
struct DISPLAYCONFIG_TARGET_MODE{
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{
uint64 pixelRate;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} hSyncFreq;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} vSyncFreq;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} activeSize;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} totalSize;
union {
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_{
uint32 videoStandard:16;
uint32 vSyncFreqDivider:6;
uint32 reserved:10;
} AdditionalSignalInfo;
uint videoStandard;
} ___u5;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
} ;
}
struct DISPLAYCONFIG_TARGET_PREFERRED_MODE{
struct DISPLAYCONFIG_DEVICE_INFO_HEADER{
DISPLAYCONFIG_DEVICE_INFO_TYPE type;
uint size;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} adapterId;
uint id;
} ;
uint width;
uint height;
struct DISPLAYCONFIG_TARGET_MODE{
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{
uint64 pixelRate;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} hSyncFreq;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} vSyncFreq;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} activeSize;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} totalSize;
union {
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_ AdditionalSignalInfo;
uint videoStandard;
} ___u5;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
} ;
} targetMode;
}
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO{
uint64 pixelRate;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} hSyncFreq;
struct DISPLAYCONFIG_RATIONAL{
uint Numerator;
uint Denominator;
} vSyncFreq;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} activeSize;
struct DISPLAYCONFIG_2DREGION{
uint cx;
uint cy;
} totalSize;
union {
struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO___unnamed_tag____unnamed_type_AdditionalSignalInfo_{
uint32 videoStandard:16;
uint32 vSyncFreqDivider:6;
uint32 reserved:10;
} AdditionalSignalInfo;
uint videoStandard;
} ___u5;
DISPLAYCONFIG_SCANLINE_ORDERING scanLineOrdering;
}
struct DLGITEMTEMPLATE{
uint style;
uint dwExtendedStyle;
__int16 x;
__int16 y;
__int16 cx;
__int16 cy;
uint16 id;
}
struct DLGTEMPLATE{
uint style;
uint dwExtendedStyle;
uint16 cdit;
__int16 x;
__int16 y;
__int16 cx;
__int16 cy;
}
struct DOCK_INTERFACE{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
ProfileDepartureSetMode* ProfileDepartureSetMode;
ProfileDepartureUpdate* ProfileDepartureUpdate;
}
struct DPI_AWARENESS_CONTEXT__{
int unused;
}
struct DispLocals{
uint16 ;
uint16 wUser2;
uint16 savCntrl;
uint16 setCntrl;
uint16 StatusWord;
_TBYTE Fac;
uint Function;
uint8 ErrorType;
uint8 bUser3;
uint typ;
uint nam;
uint64 arg1;
uint64 arg2;
uint64 retval;
uint8 savebuf;
_BYTE gap3B;
}
struct ECDT{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
struct _GEN_ADDR{
uint8 AddressSpaceID;
uint8 BitWidth;
uint8 BitOffset;
uint8 AccessSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Address;
} Control;
struct _GEN_ADDR{
uint8 AddressSpaceID;
uint8 BitWidth;
uint8 BitOffset;
uint8 AccessSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Address;
} Data;
uint Uid;
uint8 GpeBit;
char Id;
}
struct EFI_CAPSULE_BLOCK_DESCRIPTOR{
uint64 Length;
union {
uint64 DataBlock;
uint64 ContinuationPointer;
} Union;
}
struct EFI_CAPSULE_HEADER{
struct EFI_GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} CapsuleGuid;
uint HeaderSize;
uint Flags;
uint CapsuleImageSize;
}
struct EFI_GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}
struct EVENTWORKCONTEXT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _REGENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
union {
void* Target;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
WmiEntry** WmiEntry;
} ___u1;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* PDO;
struct tagDATASOURCE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainDSList;
uint Flags;
int RefCount;
uint Signature;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ISHead;
uint ProviderId;
uint ProcessId;
uint MofResourceCount;
struct MOFRESOURCE{
struct _LIST_ENTRY MainMRList;
uint Flags;
int RefCount;
uint Signature;
wchar_t* RegistryPath;
wchar_t* MofResourceName;
}** MofResources;
struct MOFRESOURCE{
struct _LIST_ENTRY MainMRList;
uint Flags;
int RefCount;
uint Signature;
wchar_t* RegistryPath;
wchar_t* MofResourceName;
}* StaticMofResources;
}* DataSource;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
}* Deregistered;
union _REGSTATE{
int Value;
struct {
uint32 RefCount:24;
uint32 TraceFlags:4;
uint32 Callback:1;
uint32 NoIrps:1;
uint32 Traced:1;
uint32 Rundown:1;
} __s1;
} State;
uint MaxInstanceNames;
}* RegEntry;
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union {
uint64 HistoricalContext;
struct {
uint Version;
uint Linkage;
} __s1;
} ___u2;
union {
uint CountLost;
void* KernelHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
} ___u3;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint ClientContext;
uint Flags;
}* Wnode;
}
struct EVENT_INSTANCE_INFO{
void* RegHandle;
uint InstanceId;
}
struct EXP_INITIALIZE_GLOBAL_CALLBACKS{
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}** CallBackObject;
wchar_t* CallbackName;
}
struct EXT_API_VERSION{
uint16 MajorVersion;
uint16 MinorVersion;
uint16 Revision;
uint16 Reserved;
}
struct EX_BOOT_DEVICE_HANDLE__{
int unused;
}
struct FILE_ID_DESCRIPTOR{
uint ;
_FILE_ID_TYPE Type;
union {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FileId;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ObjectId;
struct _FILE_ID_128{
uint8 ;
} ExtendedFileId;
} ___u2;
}
struct FIND_BY_SID_DATA{
uint Restart;
struct _SID{
BYTE Revision;
BYTE SubAuthorityCount;
struct _SID_IDENTIFIER_AUTHORITY{
BYTE Value;
} ;
} Sid;
}
struct FIND_BY_SID_OUTPUT{
uint NextEntryOffset;
uint FileIndex;
uint FileNameLength;
wchar_t FileName;
}
struct FLASHWINFO{
uint cbSize;
struct HWND__{
int ;
}* hwnd;
uint dwFlags;
uint uCount;
uint dwTimeout;
}
struct GUIDREGINFO{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint InstanceCount;
uint Flags;
}
struct HACCEL__{
int unused;
}
struct HAL_DISPATCH{
uint ;
HalQuerySystemInformation* HalQuerySystemInformation;
HalSetSystemInformation* HalSetSystemInformation;
HalQueryBusSlots* HalQueryBusSlots;
uint Spare1;
HalExamineMBR* HalExamineMBR;
HalIoReadPartitionTable* HalIoReadPartitionTable;
HalIoSetPartitionInformation* HalIoSetPartitionInformation;
HalIoWritePartitionTable* HalIoWritePartitionTable;
HalReferenceHandlerForBus** HalReferenceHandlerForBus;
HalReferenceBusHandler* HalReferenceBusHandler;
HalDereferenceBusHandler* HalDereferenceBusHandler;
HalInitPnpDriver* HalInitPnpDriver;
HalInitPowerManagement* HalInitPowerManagement;
HalGetDmaAdapter** HalGetDmaAdapter;
HalGetInterruptTranslator* HalGetInterruptTranslator;
HalStartMirroring* HalStartMirroring;
HalEndMirroring* HalEndMirroring;
HalMirrorPhysicalMemory* HalMirrorPhysicalMemory;
HalEndOfBoot* HalEndOfBoot;
HalMirrorVerify* HalMirrorVerify;
HalGetCachedAcpiTable** HalGetCachedAcpiTable;
HalSetPciErrorHandlerCallback* HalSetPciErrorHandlerCallback;
}
struct HAL_PRIVATE_DISPATCH{
uint Version;
HalHandlerForBus** HalHandlerForBus;
HalHandlerForConfigSpace** HalHandlerForConfigSpace;
HalLocateHiberRanges* HalLocateHiberRanges;
HalRegisterBusHandler* HalRegisterBusHandler;
HalSetWakeEnable* HalSetWakeEnable;
HalSetWakeAlarm* HalSetWakeAlarm;
HalPciTranslateBusAddress* HalPciTranslateBusAddress;
HalPciAssignSlotResources* HalPciAssignSlotResources;
HalHaltSystem* HalHaltSystem;
HalFindBusAddressTranslation* HalFindBusAddressTranslation;
HalResetDisplay* HalResetDisplay;
HalAllocateMapRegisters* HalAllocateMapRegisters;
KdSetupPciDeviceForDebugging* KdSetupPciDeviceForDebugging;
KdReleasePciDeviceForDebugging* KdReleasePciDeviceForDebugging;
KdGetAcpiTablePhase0** KdGetAcpiTablePhase0;
KdCheckPowerButton* KdCheckPowerButton;
HalVectorToIDTEntry* HalVectorToIDTEntry;
KdMapPhysicalMemory64** KdMapPhysicalMemory64;
KdUnmapVirtualAddress* KdUnmapVirtualAddress;
KdGetPciDataByOffset* KdGetPciDataByOffset;
KdSetPciDataByOffset* KdSetPciDataByOffset;
HalGetInterruptVectorOverride* HalGetInterruptVectorOverride;
HalGetVectorInputOverride* HalGetVectorInputOverride;
HalLoadMicrocode* HalLoadMicrocode;
HalUnloadMicrocode* HalUnloadMicrocode;
HalPostMicrocodeUpdate* HalPostMicrocodeUpdate;
HalAllocateMessageTargetOverride* HalAllocateMessageTargetOverride;
HalFreeMessageTargetOverride* HalFreeMessageTargetOverride;
HalDpReplaceBegin* HalDpReplaceBegin;
HalDpReplaceTarget* HalDpReplaceTarget;
HalDpReplaceControl* HalDpReplaceControl;
HalDpReplaceEnd* HalDpReplaceEnd;
HalPrepareForBugcheck* HalPrepareForBugcheck;
HalQueryWakeTime* HalQueryWakeTime;
HalReportIdleStateUsage* HalReportIdleStateUsage;
HalTscSynchronization* HalTscSynchronization;
HalWheaInitProcessorGenericSection* HalWheaInitProcessorGenericSection;
HalStopLegacyUsbInterrupts* HalStopLegacyUsbInterrupts;
HalReadWheaPhysicalMemory* HalReadWheaPhysicalMemory;
HalWriteWheaPhysicalMemory* HalWriteWheaPhysicalMemory;
HalDpMaskLevelTriggeredInterrupts* HalDpMaskLevelTriggeredInterrupts;
HalDpUnmaskLevelTriggeredInterrupts* HalDpUnmaskLevelTriggeredInterrupts;
HalDpGetInterruptReplayState* HalDpGetInterruptReplayState;
HalDpReplayInterrupts* HalDpReplayInterrupts;
HalQueryIoPortAccessSupported* HalQueryIoPortAccessSupported;
KdSetupIntegratedDeviceForDebugging* KdSetupIntegratedDeviceForDebugging;
KdReleaseIntegratedDeviceForDebugging* KdReleaseIntegratedDeviceForDebugging;
HalGetEnlightenmentInformation* HalGetEnlightenmentInformation;
HalAllocateEarlyPages** HalAllocateEarlyPages;
HalMapEarlyPages** HalMapEarlyPages;
void* Dummy1;
void* Dummy2;
HalNotifyProcessorFreeze* HalNotifyProcessorFreeze;
HalPrepareProcessorForIdle* HalPrepareProcessorForIdle;
HalRegisterLogRoutine* HalRegisterLogRoutine;
HalResumeProcessorFromIdle* HalResumeProcessorFromIdle;
void* Dummy;
HalVectorToIDTEntryEx* HalVectorToIDTEntryEx;
HalSecondaryInterruptQueryPrimaryInformation* HalSecondaryInterruptQueryPrimaryInformation;
HalMaskInterrupt* HalMaskInterrupt;
HalUnmaskInterrupt* HalUnmaskInterrupt;
HalIsInterruptTypeSecondary* HalIsInterruptTypeSecondary;
HalAllocateGsivForSecondaryInterrupt* HalAllocateGsivForSecondaryInterrupt;
HalAddInterruptRemapping* HalAddInterruptRemapping;
HalRemoveInterruptRemapping* HalRemoveInterruptRemapping;
HalSaveAndDisableHvEnlightenment* HalSaveAndDisableHvEnlightenment;
HalRestoreHvEnlightenment* HalRestoreHvEnlightenment;
HalFlushIoBuffersExternalCache* HalFlushIoBuffersExternalCache;
HalFlushExternalCache* HalFlushExternalCache;
HalPciEarlyRestore* HalPciEarlyRestore;
HalGetProcessorId* HalGetProcessorId;
HalAllocatePmcCounterSet* HalAllocatePmcCounterSet;
HalCollectPmcCounters* HalCollectPmcCounters;
HalFreePmcCounterSet* HalFreePmcCounterSet;
HalProcessorHalt* HalProcessorHalt;
HalTimerQueryCycleCounter* HalTimerQueryCycleCounter;
void* Dummy3;
HalPciMarkHiberPhase* HalPciMarkHiberPhase;
HalQueryProcessorRestartEntryPoint* HalQueryProcessorRestartEntryPoint;
HalRequestInterrupt* HalRequestInterrupt;
HalEnumerateUnmaskedInterrupts* HalEnumerateUnmaskedInterrupts;
HalFlushAndInvalidatePageExternalCache* HalFlushAndInvalidatePageExternalCache;
KdEnumerateDebuggingDevices* KdEnumerateDebuggingDevices;
HalFlushIoRectangleExternalCache* HalFlushIoRectangleExternalCache;
HalPowerEarlyRestore* HalPowerEarlyRestore;
HalQueryCapsuleCapabilities* HalQueryCapsuleCapabilities;
HalUpdateCapsule* HalUpdateCapsule;
HalPciMultiStageResumeCapable* HalPciMultiStageResumeCapable;
HalDmaFreeCrashDumpRegisters* HalDmaFreeCrashDumpRegisters;
HalAcpiAoacCapable* HalAcpiAoacCapable;
HalInterruptSetDestination* HalInterruptSetDestination;
HalGetClockConfiguration* HalGetClockConfiguration;
HalClockTimerActivate* HalClockTimerActivate;
HalClockTimerInitialize* HalClockTimerInitialize;
HalClockTimerStop* HalClockTimerStop;
HalClockTimerArm* HalClockTimerArm;
HalTimerOnlyClockInterruptPending* HalTimerOnlyClockInterruptPending;
HalAcpiGetMultiNode** HalAcpiGetMultiNode;
HalPowerSetRebootHandler** HalPowerSetRebootHandler;
HalIommuRegisterDispatchTable* HalIommuRegisterDispatchTable;
HalTimerWatchdogStart* HalTimerWatchdogStart;
HalTimerWatchdogResetCountdown* HalTimerWatchdogResetCountdown;
HalTimerWatchdogStop* HalTimerWatchdogStop;
HalTimerWatchdogGeneratedLastReset* HalTimerWatchdogGeneratedLastReset;
HalTimerWatchdogTriggerSystemReset* HalTimerWatchdogTriggerSystemReset;
HalInterruptVectorDataToGsiv* HalInterruptVectorDataToGsiv;
HalInterruptGetHighestPriorityInterrupt* HalInterruptGetHighestPriorityInterrupt;
HalProcessorOn* HalProcessorOn;
HalProcessorOff* HalProcessorOff;
HalProcessorFreeze* HalProcessorFreeze;
HalDmaLinkDeviceObjectByToken* HalDmaLinkDeviceObjectByToken;
HalDmaCheckAdapterToken* HalDmaCheckAdapterToken;
HalPciLateRestore* HalPciLateRestore;
HalTimerConvertPerformanceCounterToAuxiliaryCounter* HalTimerConvertPerformanceCounterToAuxiliaryCounter;
HalTimerConvertAuxiliaryCounterToPerformanceCounter* HalTimerConvertAuxiliaryCounterToPerformanceCounter;
HalTimerQueryAuxiliaryCounterFrequency* HalTimerQueryAuxiliaryCounterFrequency;
HalConnectThermalInterrupt* HalConnectThermalInterrupt;
HalIsEFIRuntimeActive* HalIsEFIRuntimeActive;
HalTimerQueryAndResetRtcErrors* HalTimerQueryAndResetRtcErrors;
}
struct HANDLE_ENUM_CONTEXT{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* DeviceObject;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} Header;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY{
uint16 ;
uint16 BaseLow;
union $4729093EE83589A5C42FEEDA1FD4429B HighWord;
} LdtDescriptor;
struct _KIDTENTRY{
uint16 Offset;
uint16 Selector;
uint16 Access;
uint16 ExtendedOffset;
} Int21Descriptor;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ReadyListHead;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SwapListEntry;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} ActiveProcessors;
union {
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0;
int ProcessFlags;
} ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS{
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0;
uint8 ExecuteOptions;
uint8 ExecuteOptionsNV;
} Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct {
uint32 ;
uint32 AccountingFolded:1;
uint32 NewProcessReported:1;
uint32 ExitProcessReported:1;
uint32 ReportCommitChanges:1;
uint32 LastReportMemory:1;
uint32 ForceWakeCharge:1;
uint32 CrossSessionCreate:1;
uint32 NeedsHandleRundown:1;
uint32 RefTraceEnabled:1;
uint32 DisableDynamicCode:1;
uint32 EmptyJobEvaluated:1;
uint32 DefaultPagePriority:3;
uint32 PrimaryTokenFrozen:1;
uint32 ProcessVerifierTarget:1;
uint32 StackRandomizationDisabled:1;
uint32 AffinityPermanent:1;
uint32 AffinityUpdateEnable:1;
uint32 PropagateNode:1;
uint32 ExplicitAffinity:1;
uint32 ProcessExecutionState:2;
uint32 DisallowStrippedImages:1;
uint32 HighEntropyASLREnabled:1;
uint32 ExtensionPointDisable:1;
uint32 ForceRelocateImages:1;
uint32 ProcessStateChangeRequest:2;
uint32 ProcessStateChangeInProgress:1;
uint32 DisallowWin32kSystemCalls:1;
} __s1;
} ___u6;
union {
uint Flags;
struct {
uint32 CreateReported:1;
uint32 NoDebugInherit:1;
uint32 ProcessExiting:1;
uint32 ProcessDelete:1;
uint32 ControlFlowGuardEnabled:1;
uint32 VmDeleted:1;
uint32 OutswapEnabled:1;
uint32 Outswapped:1;
uint32 FailFastOnCommitFail:1;
uint32 Wow64VaSpace4Gb:1;
uint32 AddressSpaceInitialized:2;
uint32 SetTimerResolution:1;
uint32 BreakOnTermination:1;
uint32 DeprioritizeViews:1;
uint32 WriteWatch:1;
uint32 ProcessInSession:1;
uint32 OverrideAddressSpace:1;
uint32 HasAddressSpace:1;
uint32 LaunchPrefetched:1;
uint32 Background:1;
uint32 VmTopDown:1;
uint32 ImageNotifyDone:1;
uint32 PdeUpdateNeeded:1;
uint32 VdmAllowed:1;
uint32 ProcessRundown:1;
uint32 ProcessInserted:1;
uint32 DefaultIoPriority:3;
uint32 ProcessSelfDelete:1;
uint32 SetTimerResolutionLink:1;
} __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* Process;
CallBack* CallBack;
void* Context;
}
struct HBITMAP__{
int unused;
}
struct HBRUSH__{
int ;
}
struct HCOLORSPACE__{
int ;
}
struct HDC__{
int ;
}
struct HDESK__{
int ;
}
struct HDRVDBCTX__{
int ;
}
struct HENHMETAFILE__{
int ;
}
struct HFONT__{
int ;
}
struct HGESTUREINFO__{
int ;
}
struct HGLRC__{
int ;
}
struct HHOOK__{
int ;
}
struct HICON__{
int ;
}
struct HIMCC__{
int ;
}
struct HIMC__{
int ;
}
struct HINPROCDEVQUERY__{
int ;
}
struct HINSTANCE__{
int ;
}
struct HKEY__{
int ;
}
struct HKL__{
int ;
}
struct HLSURF__{
int ;
}
struct HMENU__{
int ;
}
struct HMETAFILE__{
int ;
}
struct HMONITOR__{
int ;
}
struct HPALETTE__{
int ;
}
struct HPEN__{
int ;
}
struct HPNPCTX__{
int ;
}
struct HPNPOPCTX__{
int ;
}
struct HRAWINPUT__{
int ;
}
struct HRGN__{
int ;
}
struct HRSRC__{
int ;
}
struct HSPRITE__{
int ;
}
struct HSTR__{
int ;
}
struct HSYSCTX__{
int ;
}
struct HTASK__{
int ;
}
struct HTOUCHINPUT__{
int ;
}
struct HUMPD__{
int ;
}
struct HWINEVENTHOOK__{
int ;
}
struct HWINSTA__{
int ;
}
struct HWND__{
int ;
}
struct HihFrame{
uint ;
uint SavedEsi;
uint SavedEdi;
uint Return;
uint InCtlLow;
uint InCtlHigh;
uint InPhysLow;
uint InPhysHigh;
uint OutPhysLow;
uint OutPhysHigh;
}
struct IMAGE_AUX_SYMBOL_TOKEN_DEF{
uint8 bAuxType;
uint8 bReserved;
uint SymbolTableIndex;
uint8 rgbReserved;
}
struct IMAGE_COR20_HEADER{
uint cb;
uint16 MajorRuntimeVersion;
uint16 MinorRuntimeVersion;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} MetaData;
uint Flags;
union {
uint ;
uint EntryPointRVA;
} ___u5;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} Resources;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} StrongNameSignature;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} CodeManagerTable;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} VTableFixups;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} ExportAddressTableJumps;
struct _IMAGE_DATA_DIRECTORY{
uint VirtualAddress;
uint Size;
} ManagedNativeHeader;
}
struct IMPORT_OBJECT_HEADER{
uint16 Sig1;
uint16 Sig2;
uint16 Version;
uint16 Machine;
uint TimeDateStamp;
uint SizeOfData;
union {
uint16 Ordinal;
uint16 Hint;
} ___u6;
uint16 Type:2;
uint16 NameType:3;
uint16 Reserved:11;
}
struct INSTID{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint BaseId;
}
struct IO_GET_LEGACY_VETO_LIST_CONTEXT{
wchar_t** VetoList;
uint VetoListLength;
_PNP_VETO_TYPE* VetoType;
int* Status;
}
struct IRPLOG_DATA{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* DeviceObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} HashLink;
uint Flags;
uint DeviceType;
uint MaximumElementCount;
uint Head;
struct _IRPLOG_SNAPSHOT{
uint ;
uint8 MajorFunction;
uint8 MinorFunction;
uint8 Flags;
uint8 Control;
uint64 ArgArray;
} SnapshotArray;
}
struct IRPLOG_HEAD{
uint Locked;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
}
struct IRP_MAJOR_VERIFIER_ROUTINES{
DumpIrpStack* DumpIrpStack;
VerifyNewRequest* VerifyNewRequest;
VerifyStackDownward* VerifyStackDownward;
VerifyStackUpward* VerifyStackUpward;
IsSystemRestrictedIrp* IsSystemRestrictedIrp;
AdvanceIrpStatus* AdvanceIrpStatus;
IsValidIrpStatus* IsValidIrpStatus;
IsNewRequest* IsNewRequest;
VerifyNewIrp* VerifyNewIrp;
VerifyFinalIrpStack* VerifyFinalIrpStack;
TestStartedPdoStack* TestStartedPdoStack;
BuildIrpLogEntry* BuildIrpLogEntry;
}
struct ISBASENAME{
uint BaseIndex;
wchar_t BaseName;
}
struct ISSTATICENAMES{
wchar_t* StaticNamePtr;
}
struct IretFrame{
uint ;
uint IretCs;
uint IretEFlags;
}
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION{
int64 MaxIops;
int64 MaxBandwidth;
int64 ReservationIops;
wchar_t* VolumeName;
uint BaseIoSize;
uint ControlFlags;
}
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE{
int64 MaxIops;
int64 MaxBandwidth;
int64 ReservationIops;
wchar_t* VolumeName;
uint BaseIoSize;
JOB_OBJECT_IO_RATE_CONTROL_FLAGS ControlFlags;
uint16 VolumeNameLength;
}
struct JOBOBJECT_IO_RATE_CONTROL_INFORMATION_NATIVE_V2{
int64 MaxIops;
int64 MaxBandwidth;
int64 ReservationIops;
wchar_t* VolumeName;
uint BaseIoSize;
JOB_OBJECT_IO_RATE_CONTROL_FLAGS ControlFlags;
uint16 VolumeNameLength;
int64 CriticalReservationIops;
int64 ReservationBandwidth;
int64 CriticalReservationBandwidth;
int64 MaxTimePercent;
int64 ReservationTimePercent;
int64 CriticalReservationTimePercent;
}
struct JOBOBJECT_LIMIT_VIOLATION_INFORMATION_2{
uint LimitFlags;
uint ViolationLimitFlags;
uint64 IoReadBytes;
uint64 IoReadBytesLimit;
uint64 IoWriteBytes;
uint64 IoWriteBytesLimit;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} PerJobUserTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} PerJobUserTimeLimit;
uint64 JobMemory;
union {
uint64 JobHighMemoryLimit;
uint64 JobMemoryLimit;
} ___u9;
union {
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlTolerance;
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlTolerance;
} ___u10;
union {
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlToleranceLimit;
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlToleranceLimit;
} ___u11;
uint64 JobLowMemoryLimit;
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlTolerance;
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlToleranceLimit;
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlTolerance;
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlToleranceLimit;
}
struct JOBOBJECT_NET_RATE_CONTROL_INFORMATION{
uint64 MaxBandwidth;
JOB_OBJECT_NET_RATE_CONTROL_FLAGS ControlFlags;
uint8 DscpTag;
}
struct JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION_2{
uint64 IoReadBytesLimit;
uint64 IoWriteBytesLimit;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} PerJobUserTimeLimit;
union {
uint64 JobHighMemoryLimit;
uint64 JobMemoryLimit;
} ___u3;
union {
_JOBOBJECT_RATE_CONTROL_TOLERANCE RateControlTolerance;
_JOBOBJECT_RATE_CONTROL_TOLERANCE CpuRateControlTolerance;
} ___u4;
union {
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL RateControlToleranceInterval;
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL CpuRateControlToleranceInterval;
} ___u5;
uint LimitFlags;
_JOBOBJECT_RATE_CONTROL_TOLERANCE IoRateControlTolerance;
uint64 JobLowMemoryLimit;
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL IoRateControlToleranceInterval;
_JOBOBJECT_RATE_CONTROL_TOLERANCE NetRateControlTolerance;
_JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL NetRateControlToleranceInterval;
}
struct KERNEL_ERROR_HANDLER_INFO{
uint Version;
uint Padding;
KernelMcaDelivery* KernelMcaDelivery;
KernelCmcDelivery* KernelCmcDelivery;
KernelCpeDelivery* KernelCpeDelivery;
KernelMceDelivery* KernelMceDelivery;
}
struct KEY_PID_ARRAY{
void* PID;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} KeyName;
}
struct KMOD{
uint8 RmDisplaceOnly;
uint8 RmSib;
uint8 RmDisplace;
uint8 Disp;
}
struct KoFrame{
uint SavedEbp;
uint KoReturnAddress;
uint Parameter;
uint Callout;
uint InitialStack;
uint CommitSize;
}
struct LIST_ENTRY32{
uint Flink;
uint Blink;
}
struct LIST_ENTRY64{
uint64 Flink;
uint64 Blink;
}
struct LanguageNameDataType_tag{
uint16 langID;
wchar_t* cultureName;
}
struct LocaleNlsDataItems{
uint sName;
uint sOpenTypeLanguageTag;
uint16 iLanguage;
uint16 iResourceId;
uint16 iDigits;
uint16 iNegativeNumber;
uint16 iCurrencyDigits;
uint16 iCurrency;
uint16 iNegativeCurrency;
uint16 iLeadingZeros;
uint16 iFlags;
uint16 iFirstDayOfWeek;
uint16 iFirstWeekOfYear;
uint16 iCountry;
uint16 iMeasure;
uint16 iDigitSubstitution;
uint waGrouping;
uint waMonetaryGrouping;
uint sListSeparator;
uint sDecimalSeparator;
uint sThousandSeparator;
uint sCurrency;
uint sMonetaryDecimal;
uint sMonetaryThousand;
uint sPositiveSign;
uint sNegativeSign;
uint sAM1159;
uint sPM2359;
uint saNativeDigits;
uint saTimeFormat;
uint saShortDate;
uint saLongDate;
uint saYearMonth;
uint saDuration;
uint16 iDefaultLanguage;
uint16 iDefaultAnsiCodePage;
uint16 iDefaultOemCodePage;
uint16 iDefaultMacCodePage;
uint16 iDefaultEbcdicCodePage;
uint16 iOldGeoId;
uint16 iPaperSize;
uint16 iLocalizedCalendar;
uint waCalendars;
uint sAbbrevLang;
uint sISO639Language;
uint sEnglishLanguage;
uint sNativeLanguage;
uint sEnglishCountry;
uint sNativeCountry;
uint sUnused;
uint sISO3166CountryName;
uint sIntlMonetarySymbol;
uint sEnglishCurrency;
uint sNativeCurrency;
uint waFontSignature;
uint sISO639Language2;
uint sISO3166CountryName2;
uint sParent;
uint saDayNames;
uint saAbbrevDayNames;
uint saMonthNames;
uint saAbbrevMonthNames;
uint saMonthGenitiveNames;
uint saAbbrevMonthGenitiveNames;
uint saNativeCalendarNames;
uint saAltSortID;
uint16 iNegativePercent;
uint16 iPositivePercent;
uint16 iUnused4;
uint16 iReadingLayout;
uint16 iUnusedA;
uint16 iUnusedB;
uint iUnusedC;
uint sEnglishDisplayName;
uint sNativeDisplayName;
uint sPercent;
uint sNaN;
uint sPositiveInfinity;
uint sNegativeInfinity;
uint sSingleMonthDayV5;
uint sAdEra;
uint sAbbrevAdEra;
uint sReserved0;
uint sConsoleFallbackName;
uint saShortTime;
uint saSuperShortDayNames;
uint sReserved1;
uint sSpecificCulture;
uint sKeyboardsToInstall;
uint sScripts;
uint sRelativeLongDate;
uint iGeoId;
uint sShortestAM;
uint sShortestPM;
uint saMonthDay;
uint sReserved5;
}
struct MARK_HANDLE_INFO{
union {
uint UsnSourceInfo;
uint CopyNumber;
} ___u0;
void* VolumeHandle;
uint HandleInfo;
}
struct MBR{
uint8 _BootStrapCode;
}
struct MBR_ENTRY{
uint8 ;
struct _CHS{
uint8 Head;
uint8 Sector;
uint8 Cylinder;
} _First;
uint8 _Type;
struct _CHS{
uint8 Head;
uint8 Sector;
uint8 Cylinder;
} _Last;
uint _FirstLba;
uint _LbaCount;
}
struct MENUITEMTEMPLATE{
uint16 mtOption;
uint16 mtID;
wchar_t mtString;
}
struct MENUITEMTEMPLATEHEADER{
uint16 versionNumber;
uint16 offset;
}
struct MFT_ENUM_DATA_V0{
uint64 StartFileReferenceNumber;
int64 LowUsn;
int64 HighUsn;
}
struct MFT_ENUM_DATA_V1{
uint64 StartFileReferenceNumber;
int64 LowUsn;
int64 HighUsn;
uint16 MinMajorVersion;
uint16 MaxMajorVersion;
}
struct MOFRESOURCE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainMRList;
uint Flags;
int RefCount;
uint Signature;
wchar_t* RegistryPath;
wchar_t* MofResourceName;
}
struct MOVE_FILE_DATA{
void* FileHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingVcn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingLcn;
uint ClusterCount;
}
struct MOVE_FILE_RECORD_DATA{
void* FileHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} SourceFileRecord;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TargetFileRecord;
}
struct MSIX_TABLE_POINTER{
union {
struct {
uint32 BaseIndexRegister:3;
uint32 Reserved:29;
} __s0;
uint TableOffset;
} ___u0;
}
struct NOTIFY_USER_POWER_SETTING{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
}
struct NP_CONTEXT__NP_CALLBACKS{
}
struct NP_CONTEXT__NP_CTX{
struct NP_CONTEXT{
struct NP_CONTEXT___NP_PARAMETERS{
uint ;
uint ReservedNodeCount;
struct NP_CONTEXT__NP_CALLBACKS{
} Cb;
} Params;
uint AllocatedCount;
uint PagedOutCount;
uint CleanCount;
uint BaseTime;
union _NP_LEAF_PTR{
void* Ptr;
uint Key;
struct {
uint32 ;
uint32 HasRef:1;
uint32 LastAccessTime:10;
} __s2;
struct {
uint32 OverlapsValid:1;
uint32 OverlapsHasRef:1;
uint32 RefCount:10;
} __s3;
struct _NP_LEAF_PTR___unnamed_type_NodeCtx_{
uint32 OverlapsValid:1;
uint32 Dirty:1;
} NodeCtx;
}* EntryToPageOut;
struct _PF_QUEUE{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} Tail;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
}* Head;
} ReservedNodes;
struct NP_CONTEXT___unnamed_type_Stats_{
uint PageOutCount;
uint PageInCount;
uint PageOutErrors;
uint PageInErrors;
} Stats;
}* NodePool;
}
struct NP_CONTEXT___NP_PARAMETERS{
uint ;
uint ReservedNodeCount;
struct NP_CONTEXT__NP_CALLBACKS{
} Cb;
}
struct NTFS_EXTENDED_VOLUME_DATA{
uint ByteCount;
uint16 MajorVersion;
uint16 MinorVersion;
uint BytesPerPhysicalSector;
uint16 LfsMajorVersion;
uint16 LfsMinorVersion;
uint MaxDeviceTrimExtentCount;
uint MaxDeviceTrimByteCount;
uint MaxVolumeTrimExtentCount;
uint MaxVolumeTrimByteCount;
}
struct NTFS_FILE_RECORD_INPUT_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FileReferenceNumber;
}
struct NTFS_FILE_RECORD_OUTPUT_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ;
uint FileRecordLength;
uint8 FileRecordBuffer;
}
struct NTFS_VOLUME_DATA_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} VolumeSerialNumber;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} NumberSectors;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TotalClusters;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FreeClusters;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TotalReserved;
uint BytesPerSector;
uint BytesPerCluster;
uint BytesPerFileRecordSegment;
uint ClustersPerFileRecordSegment;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MftValidDataLength;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MftStartLcn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Mft2StartLcn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MftZoneStart;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MftZoneEnd;
}
struct OBJECT_EVENT_INFO{
struct _WMIGUIDOBJECT{
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
} Event;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
struct _REGENTRY{
struct _LIST_ENTRY ;
union $7414A2632EEFB962F92D19748410088A ___u1;
struct _DEVICE_OBJECT* PDO;
struct tagDATASOURCE* DataSource;
struct _KEVENT* Deregistered;
union _REGSTATE State;
uint MaxInstanceNames;
}* RegEntry;
} ___u1;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} GEObjectList;
struct tagGUIDENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainGEList;
uint Flags;
int RefCount;
uint Signature;
uint ISCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ObjectHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ISHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint EventRefCount;
uint CollectRefCount;
struct _WMIP_GUIDENTRY_NONPAGED{
struct _KEVENT CollectInProgress;
struct _WORK_QUEUE_ITEM LegacyWorkItem;
}* NonPaged;
uint64 LegacyEtwHandle;
uint LegacyEtwToken;
uint64 LegacyEnableContext;
struct _WMIP_SYNCHRONOUS_ETW_WORK{
struct _LIST_ENTRY Link;
struct tagGUIDENTRY* GuidEntry;
struct _LIST_ENTRY WorkHead;
struct _LIST_ENTRY WaiterHead;
}* LegacyEtwSynchronous;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LegacyWorkHead;
uint LegacyEtwProviderCount;
}* GuidEntry;
uint Type;
union {
Callback* Callback;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* Irp;
} ___u5;
union {
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpObjectList;
} ___u6;
struct WMIEVENTQUEUE{
uint8* Buffer;
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union $17F5F6B9B423D014088DA483A95A1998 ___u2;
union $BA041AB2AD4C696C73568B3B98A89B4C ___u3;
struct _GUID Guid;
uint ClientContext;
uint Flags;
}* LastWnode;
uint MaxBufferSize;
uint NextOffset;
uint EventsLost;
} HiPriority;
struct WMIEVENTQUEUE{
uint8* Buffer;
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union $17F5F6B9B423D014088DA483A95A1998 ___u2;
union $BA041AB2AD4C696C73568B3B98A89B4C ___u3;
struct _GUID Guid;
uint ClientContext;
uint Flags;
}* LastWnode;
uint MaxBufferSize;
uint NextOffset;
uint EventsLost;
} LoPriority;
uint8 EnableRequestSent;
uint Flags;
}* GuidObject;
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union {
uint64 HistoricalContext;
struct {
uint Version;
uint Linkage;
} __s1;
} ___u2;
union {
uint CountLost;
void* KernelHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
} ___u3;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint ClientContext;
uint Flags;
}* NextWnode;
}
struct OFFSETINSTANCEDATAANDLENGTH{
uint OffsetInstanceData;
uint LengthInstanceData;
}
struct PCI_AGP_EXTENDED_CAPABILITY{
struct _PCI_AGP_ISOCH_STATUS{
uint32 ErrorCode:2;
uint32 Rsvd1:1;
uint32 Isoch_L:3;
uint32 Isoch_Y:2;
uint32 Isoch_N:8;
uint32 Rsvd2:16;
} IsochStatus;
struct _PCI_AGP_CONTROL{
uint32 Rsvd1:7;
uint32 GTLB_Enable:1;
uint32 AP_Enable:1;
uint32 CAL_Disable:1;
uint32 Rsvd2:22;
} AgpControl;
uint16 ApertureSize;
struct _PCI_AGP_APERTURE_PAGE_SIZE{
uint16 PageSizeMask:11;
uint16 Rsvd1:1;
uint16 PageSizeSelect:4;
} AperturePageSize;
uint GartLow;
uint GartHigh;
struct _PCI_AGP_ISOCH_COMMAND{
uint16 Rsvd1:6;
uint16 Isoch_Y:2;
uint16 Isoch_N:8;
} IsochCommand;
}
struct PCI_HT_CAPABILITY{
struct _PCI_CAPABILITIES_HEADER{
uint8 CapabilityID;
uint8 Next;
} Header;
union {
struct {
uint16 ;
uint16 CapabilityType:5;
} Generic;
struct {
uint16 Index:8;
uint16 Reserved:3;
uint16 CapabilityType:5;
} Interrupt;
struct {
uint16 Enable:1;
uint16 Fixed:1;
uint16 Reserved:9;
uint16 CapabilityType:5;
} MsiMapping;
} Command;
union {
uint InterruptDataPort;
struct {
uint32 Reserved:20;
uint32 AddressLow:12;
} MsiMapping;
} Offset04;
union {
struct {
uint ;
} MsiMapping;
} Offset08;
}
struct PCI_HT_INTERRUPT_INDEX_1{
uint16 Reserved1;
uint8 LastInterrupt;
uint8 Reserved2;
}
struct PCI_HT_INTERRUPT_INDEX_N{
union {
struct {
uint32 Mask:1;
uint32 Polarity:1;
uint32 MessageType:3;
uint32 RequestEOI:1;
uint32 DestinationMode:1;
uint32 MessageType3:1;
uint32 Destination:8;
uint32 Vector:8;
uint32 ExtendedAddress:8;
} bits;
uint AsULONG;
} LowPart;
union {
struct {
uint32 ExtendedDestination:24;
uint32 Reserved:6;
uint32 PassPW:1;
uint32 WaitingForEOI:1;
} bits;
uint AsULONG;
} HighPart;
}
struct PCI_MSIX_CAPABILITY{
struct _PCI_CAPABILITIES_HEADER{
uint8 CapabilityID;
uint8 Next;
} Header;
struct {
uint16 TableSize:11;
uint16 Reserved:3;
uint16 FunctionMask:1;
uint16 MSIXEnable:1;
} MessageControl;
struct MSIX_TABLE_POINTER{
union {
struct {
uint32 BaseIndexRegister:3;
uint32 Reserved:29;
} __s0;
uint TableOffset;
} ___u0;
} MessageTable;
struct MSIX_TABLE_POINTER{
union {
struct {
uint32 BaseIndexRegister:3;
uint32 Reserved:29;
} __s0;
uint TableOffset;
} ___u0;
} PBATable;
}
struct PCI_MSIX_TABLE_ENTRY{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MessageAddress;
uint MessageData;
struct {
uint32 Mask:1;
uint32 Reserved:15;
uint32 StLower:8;
uint32 StUpper:8;
} VectorControl;
}
struct PCI_MSI_CAPABILITY{
struct _PCI_CAPABILITIES_HEADER{
uint8 CapabilityID;
uint8 Next;
} Header;
struct _PCI_MSI_MESSAGE_CONTROL{
uint16 MSIEnable:1;
uint16 MultipleMessageCapable:3;
uint16 MultipleMessageEnable:3;
uint16 CapableOf64Bits:1;
uint16 PerVectorMaskCapable:1;
uint16 Reserved:7;
} MessageControl;
union {
struct _PCI_MSI_MESSAGE_ADDRESS{
uint32 Reserved:2;
uint32 Address:30;
} Register;
uint Raw;
} MessageAddressLower;
union {
struct {
uint16 MessageData;
uint16 Reserved;
uint MaskBits;
uint PendingBits;
} Option32Bit;
struct {
uint MessageAddressUpper;
uint16 MessageData;
uint16 Reserved;
uint MaskBits;
uint PendingBits;
} Option64Bit;
} ___u3;
}
struct PCI_MSI_CAPABILITY___PCI_MSI_MESSAGE_CONTROL{
uint16 MSIEnable:1;
uint16 MultipleMessageCapable:3;
uint16 MultipleMessageEnable:3;
uint16 CapableOf64Bits:1;
uint16 PerVectorMaskCapable:1;
uint16 Reserved:7;
}
struct PCI_X_CAPABILITY{
struct _PCI_CAPABILITIES_HEADER{
uint8 CapabilityID;
uint8 Next;
} Header;
union {
struct {
uint16 ;
uint16 EnableRelaxedOrdering:1;
uint16 MaxMemoryReadByteCount:2;
uint16 MaxOutstandingSplitTransactions:3;
uint16 Reserved:9;
} bits;
uint16 AsUSHORT;
} Command;
union {
struct {
uint32 ;
uint32 DeviceNumber:5;
uint32 BusNumber:8;
uint32 Device64Bit:1;
uint32 Capable133MHz:1;
uint32 SplitCompletionDiscarded:1;
uint32 UnexpectedSplitCompletion:1;
uint32 DeviceComplexity:1;
uint32 DesignedMaxMemoryReadByteCount:2;
uint32 DesignedMaxOutstandingSplitTransactions:3;
uint32 DesignedMaxCumulativeReadSize:3;
uint32 ReceivedSplitCompletionErrorMessage:1;
uint32 CapablePCIX266:1;
uint32 CapablePCIX533:1;
} bits;
uint AsULONG;
} Status;
}
struct PC_DISK{
void* _Device;
struct _DISK_GEOMETRY{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Cylinders;
_MEDIA_TYPE MediaType;
uint TracksPerCylinder;
uint SectorsPerTrack;
uint BytesPerSector;
} _Geometry;
uint64 _SectorCount;
uint _SectorShift;
_PARTITION_STYLE _Style;
void* _Buffer;
}
struct PC_ENVIRONMENT{
}
struct PC_GPT{
struct PC_DISK{
void* _Device;
struct _DISK_GEOMETRY{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} Cylinders;
_MEDIA_TYPE MediaType;
uint TracksPerCylinder;
uint SectorsPerTrack;
uint BytesPerSector;
} _Geometry;
uint64 _SectorCount;
uint _SectorShift;
_PARTITION_STYLE _Style;
void* _Buffer;
}* _Disk;
}
struct PC_MBR{
struct PC_DISK{
void* _Device;
struct _DISK_GEOMETRY{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} Cylinders;
_MEDIA_TYPE MediaType;
uint TracksPerCylinder;
uint SectorsPerTrack;
uint BytesPerSector;
} _Geometry;
uint64 _SectorCount;
uint _SectorShift;
_PARTITION_STYLE _Style;
void* _Buffer;
}* ;
}
struct PC_RAW{
struct PC_DISK{
void* _Device;
struct _DISK_GEOMETRY{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} Cylinders;
_MEDIA_TYPE MediaType;
uint TracksPerCylinder;
uint SectorsPerTrack;
uint BytesPerSector;
} _Geometry;
uint64 _SectorCount;
uint _SectorShift;
_PARTITION_STYLE _Style;
void* _Buffer;
}* ;
}
struct PEPHANDLE__{
int ;
}
struct PLUGPLAY_CONTROL_HANDLER_DATA{
_PLUGPLAY_CONTROL_CLASS ;
uint ControlDataSize;
ControlFunction* ControlFunction;
uint8 ControlServerSiloOk;
}
struct POHANDLE__{
int unused;
}
struct POP_FLUSH_VOLUME{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
int Count;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Wait;
uint8 Hold;
uint8 Release;
}
struct POP_MCB_CONTEXT{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
}* FirstMcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
}* Mcb;
uint64 Base;
}
struct POP_POWER_REQUEST_ENTRY{
struct _PO_POWER_REQUEST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
uint SessionId;
uint SupportedRequestMask;
uint RequestOverrideMask;
int Id;
uint PowerRequestCount;
}* Request;
int Id;
}
struct POWERBROADCAST_SETTING{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} PowerSetting;
uint DataLength;
uint8 Data;
}
struct POWER_ACTION_POLICY{
POWER_ACTION Action;
uint Flags;
uint EventCode;
}
struct POWER_STATE_HANDLER{
POWER_STATE_HANDLER_TYPE Type;
uint8 RtcWake;
uint8 Spare;
}
struct POWER_STATE_NOTIFY_HANDLER{
Handler* Handler;
void* Context;
}
struct PO_ENERGY_SAVER_SETTING{
PO_ENERGY_SAVER_MODE Mode;
uint BatteryThreshold;
uint UserAway;
}
struct PO_ENERGY_SAVER_STATE_DATA{
PO_ENERGY_SAVER_STATE Status;
}
struct PO_MEMORY_IMAGE{
uint ;
uint ImageType;
uint CheckSum;
uint LengthSelf;
uint PageSelf;
uint PageSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} SystemTime;
uint64 InterruptTime;
uint64 FeatureFlags;
uint8 HiberFlags;
uint8 spare;
}
struct PPM_IDLESTATE_EVENT{
uint NewState;
uint OldState;
uint64 Processors;
}
struct PPM_IDLE_ACCOUNTING{
uint StateCount;
uint TotalTransitions;
uint ResetCount;
uint64 StartTime;
struct PPM_IDLE_STATE_ACCOUNTING{
uint IdleTransitions;
uint FailedTransitions;
uint InvalidBucketIndex;
uint64 TotalTime;
uint IdleTimeBuckets;
} State;
}
struct PPM_IDLE_ACCOUNTING_EX{
uint StateCount;
uint TotalTransitions;
uint ResetCount;
uint AbortCount;
uint64 StartTime;
struct PPM_IDLE_STATE_ACCOUNTING_EX{
uint64 TotalTime;
uint IdleTransitions;
uint FailedTransitions;
uint InvalidBucketIndex;
uint MinTimeUs;
uint MaxTimeUs;
uint CancelledTransitions;
struct PPM_IDLE_STATE_BUCKET_EX{
uint64 TotalTimeUs;
uint MinTimeUs;
uint MaxTimeUs;
uint Count;
} IdleTimeBuckets;
} State;
}
struct PPM_IDLE_STATE_ACCOUNTING{
uint IdleTransitions;
uint FailedTransitions;
uint InvalidBucketIndex;
uint64 TotalTime;
uint IdleTimeBuckets;
}
struct PPM_IDLE_STATE_ACCOUNTING_EX{
uint64 TotalTime;
uint IdleTransitions;
uint FailedTransitions;
uint InvalidBucketIndex;
uint MinTimeUs;
uint MaxTimeUs;
uint CancelledTransitions;
struct PPM_IDLE_STATE_BUCKET_EX{
uint64 TotalTimeUs;
uint MinTimeUs;
uint MaxTimeUs;
uint Count;
} IdleTimeBuckets;
}
struct PPM_IDLE_STATE_BUCKET_EX{
uint64 TotalTimeUs;
uint MinTimeUs;
uint MaxTimeUs;
uint Count;
}
struct PPM_PERFSTATE_DOMAIN_EVENT{
uint State;
uint Latency;
uint Speed;
uint64 Processors;
}
struct PPM_PERFSTATE_EVENT{
uint State;
uint Status;
uint Latency;
uint Speed;
uint Processor;
}
struct PPM_THERMALCHANGE_EVENT{
uint Thermalraint;
uint64 Processors;
}
struct PPM_THERMAL_POLICY_EVENT{
uint8 Mode;
uint64 Processors;
}
struct PPM_WMI_IDLE_STATE{
uint Latency;
uint Power;
uint TimeCheck;
uint8 PromotePercent;
uint8 DemotePercent;
uint8 StateType;
uint8 Reserved;
uint StateFlags;
uint Context;
uint IdleHandler;
uint Reserved1;
}
struct PPM_WMI_IDLE_STATES{
uint Type;
uint Count;
uint TargetState;
uint OldState;
uint64 TargetProcessors;
struct PPM_WMI_IDLE_STATE{
uint Latency;
uint Power;
uint TimeCheck;
uint8 PromotePercent;
uint8 DemotePercent;
uint8 StateType;
uint8 Reserved;
uint StateFlags;
uint Context;
uint IdleHandler;
uint Reserved1;
} State;
}
struct PPM_WMI_IDLE_STATES_EX{
uint Type;
uint Count;
uint TargetState;
uint OldState;
void* TargetProcessors;
struct PPM_WMI_IDLE_STATE{
uint Latency;
uint Power;
uint TimeCheck;
uint8 PromotePercent;
uint8 DemotePercent;
uint8 StateType;
uint8 Reserved;
uint StateFlags;
uint Context;
uint IdleHandler;
uint Reserved1;
} State;
}
struct PPM_WMI_LEGACY_PERFSTATE{
uint Frequency;
uint Flags;
uint PercentFrequency;
}
struct PPM_WMI_PERF_STATE{
uint Frequency;
uint Power;
uint8 PercentFrequency;
uint8 IncreaseLevel;
uint8 DecreaseLevel;
uint8 Type;
uint IncreaseTime;
uint DecreaseTime;
uint64 Control;
uint64 Status;
uint HitCount;
uint Reserved1;
uint64 Reserved2;
uint64 Reserved3;
}
struct PPM_WMI_PERF_STATES{
uint Count;
uint MaxFrequency;
uint CurrentState;
uint MaxPerfState;
uint MinPerfState;
uint LowestPerfState;
uint Thermalraint;
uint8 BusyAdjThreshold;
uint8 PolicyType;
uint8 Type;
uint8 Reserved;
uint TimerInterval;
uint64 TargetProcessors;
uint PStateHandler;
uint PStateContext;
uint TStateHandler;
uint TStateContext;
uint FeedbackHandler;
uint Reserved1;
uint64 Reserved2;
struct PPM_WMI_PERF_STATE{
uint Frequency;
uint Power;
uint8 PercentFrequency;
uint8 IncreaseLevel;
uint8 DecreaseLevel;
uint8 Type;
uint IncreaseTime;
uint DecreaseTime;
uint64 Control;
uint64 Status;
uint HitCount;
uint Reserved1;
uint64 Reserved2;
uint64 Reserved3;
} State;
}
struct PPM_WMI_PERF_STATES_EX{
uint Count;
uint MaxFrequency;
uint CurrentState;
uint MaxPerfState;
uint MinPerfState;
uint LowestPerfState;
uint Thermalraint;
uint8 BusyAdjThreshold;
uint8 PolicyType;
uint8 Type;
uint8 Reserved;
uint TimerInterval;
void* TargetProcessors;
uint PStateHandler;
uint PStateContext;
uint TStateHandler;
uint TStateContext;
uint FeedbackHandler;
uint Reserved1;
uint64 Reserved2;
struct PPM_WMI_PERF_STATE{
uint Frequency;
uint Power;
uint8 PercentFrequency;
uint8 IncreaseLevel;
uint8 DecreaseLevel;
uint8 Type;
uint IncreaseTime;
uint DecreaseTime;
uint64 Control;
uint64 Status;
uint HitCount;
uint Reserved1;
uint64 Reserved2;
uint64 Reserved3;
} State;
}
struct PROCESSOR_IDLESTATE_INFO{
uint TimeCheck;
uint8 DemotePercent;
uint8 PromotePercent;
uint8 Spare;
}
struct PROCESSOR_IDLESTATE_POLICY{
uint16 Revision;
union {
uint16 AsUSHORT;
struct {
uint16 AllowScaling:1;
uint16 Disabled:1;
uint16 Reserved:14;
} __s1;
} Flags;
uint PolicyCount;
struct PROCESSOR_IDLESTATE_INFO{
uint TimeCheck;
uint8 DemotePercent;
uint8 PromotePercent;
uint8 Spare;
} Policy;
}
struct PROCESSOR_IDLE_TIMES{
uint64 StartTime;
uint64 EndTime;
uint Reserved;
}
struct PROCESSOR_OBJECT_INFO{
uint PhysicalID;
uint PBlkAddress;
uint8 PBlkLength;
}
struct PROCESSOR_OBJECT_INFO_EX{
uint PhysicalID;
uint PBlkAddress;
uint8 PBlkLength;
uint InitialApicId;
}
struct PROCESSOR_PERFSTATE_POLICY{
uint Revision;
uint8 MaxThrottle;
uint8 MinThrottle;
uint8 BusyAdjThreshold;
union {
uint8 Spare;
union {
uint8 AsUCHAR;
struct {
uint8 NoDomainAccounting:1;
uint8 IncreasePolicy:2;
uint8 DecreasePolicy:2;
uint8 Reserved:3;
} __s1;
} Flags;
} ___u4;
uint TimeCheck;
uint IncreaseTime;
uint DecreaseTime;
uint IncreasePercent;
uint DecreasePercent;
}
struct PROCESS_DRIVER_CONTEXT{
uint8 Add;
}
struct PTRCACHE{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ;
struct tagInstanceSet{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} GuidISList;
uint Flags;
int RefCount;
uint Signature;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DSISList;
struct tagGUIDENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainGEList;
uint Flags;
int RefCount;
uint Signature;
uint ISCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ObjectHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ISHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint EventRefCount;
uint CollectRefCount;
struct _WMIP_GUIDENTRY_NONPAGED{
struct _KEVENT CollectInProgress;
struct _WORK_QUEUE_ITEM LegacyWorkItem;
}* NonPaged;
uint64 LegacyEtwHandle;
uint LegacyEtwToken;
uint64 LegacyEnableContext;
struct _WMIP_SYNCHRONOUS_ETW_WORK{
struct _LIST_ENTRY Link;
struct tagGUIDENTRY* GuidEntry;
struct _LIST_ENTRY WorkHead;
struct _LIST_ENTRY WaiterHead;
}* LegacyEtwSynchronous;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LegacyWorkHead;
uint LegacyEtwProviderCount;
}* GuidEntry;
struct tagDATASOURCE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainDSList;
uint Flags;
int RefCount;
uint Signature;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ISHead;
uint ProviderId;
uint ProcessId;
uint MofResourceCount;
struct MOFRESOURCE{
struct _LIST_ENTRY MainMRList;
uint Flags;
int RefCount;
uint Signature;
wchar_t* RegistryPath;
wchar_t* MofResourceName;
}** MofResources;
struct MOFRESOURCE{
struct _LIST_ENTRY MainMRList;
uint Flags;
int RefCount;
uint Signature;
wchar_t* RegistryPath;
wchar_t* MofResourceName;
}* StaticMofResources;
}* DataSource;
uint Count;
uint WADInstanceNameSize;
uint ProviderId;
union {
struct ISBASENAME{
uint BaseIndex;
wchar_t BaseName;
}* IsBaseName;
struct ISSTATICENAMES{
wchar_t* StaticNamePtr;
}* IsStaticNames;
} ___u10;
}* InstanceSet;
}
struct QUERY_CONTEXT{
struct _DEVICE_NODE{
struct _DEVICE_NODE* ;
struct _DEVICE_NODE* Child;
struct _DEVICE_NODE* Parent;
struct _DEVICE_NODE* LastChild;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* PhysicalDeviceObject;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} InstancePath;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ServiceName;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* PendingIrp;
struct _POP_FX_DEVICE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* Irp;
struct _POP_IRP_DATA{
struct _LIST_ENTRY Link;
struct _IRP* Irp;
struct _DEVICE_OBJECT* Pdo;
struct _DEVICE_OBJECT* TargetDevice;
struct _DEVICE_OBJECT* CurrentDevice;
uint64 WatchdogStart;
struct _KTIMER WatchdogTimer;
struct _KDPC WatchdogDpc;
uint8 MinorFunction;
_POWER_STATE_TYPE PowerStateType;
union _POWER_STATE PowerState;
uint8 WatchdogEnabled;
struct _POP_FX_DEVICE* FxDevice;
uint8 SystemTransition;
uint8 NotifyPEP;
union $232730CC8E4136B75E91A7FC956FAE90 ___u15;
}* IrpData;
union _POP_FX_DEVICE_STATUS{
int Value;
struct $BF01A2388BF57D4C31A65726CFD79900 __s1;
} Status;
int PowerReqCall;
int PowerNotReqCall;
struct _DEVICE_NODE{
struct _DEVICE_NODE* ;
struct _DEVICE_NODE* Child;
struct _DEVICE_NODE* Parent;
struct _DEVICE_NODE* LastChild;
struct _DEVICE_OBJECT* PhysicalDeviceObject;
struct _UNICODE_STRING InstancePath;
struct _UNICODE_STRING ServiceName;
struct _IRP* PendingIrp;
struct _POP_FX_DEVICE* FxDevice;
int FxDeviceLock;
struct _KEVENT FxRemoveEvent;
int FxActivationCount;
int FxSleepCount;
struct _POP_FX_PLUGIN* Plugin;
uint Level;
union _POWER_STATE CurrentPowerState;
struct _PO_DEVICE_NOTIFY Notify;
struct _PO_IRP_MANAGER PoIrpManager;
struct _UNICODE_STRING UniqueId;
uint PowerFlags;
_PNP_DEVNODE_STATE State;
_PNP_DEVNODE_STATE PreviousState;
_PNP_DEVNODE_STATE StateHistory;
}* DevNode;
struct PEPHANDLE__{
int ;
}* DpmContext;
struct _POP_FX_PLUGIN{
struct _LIST_ENTRY Link;
uint Version;
uint64 Flags;
struct _KQUEUE WorkQueue;
AcceptDeviceNotification* AcceptDeviceNotification;
AcceptProcessorNotification* AcceptProcessorNotification;
AcceptAcpiNotification* AcceptAcpiNotification;
uint WorkOrderCount;
struct _POP_FX_WORK_ORDER WorkOrders;
}* Plugin;
struct PEPHANDLE__{
int ;
}* PluginHandle;
struct _POP_FX_PLUGIN{
struct _LIST_ENTRY Link;
uint Version;
uint64 Flags;
struct _KQUEUE WorkQueue;
AcceptDeviceNotification* AcceptDeviceNotification;
AcceptProcessorNotification* AcceptProcessorNotification;
AcceptAcpiNotification* AcceptAcpiNotification;
uint WorkOrderCount;
struct _POP_FX_WORK_ORDER WorkOrders;
}* AcpiPlugin;
struct PEPHANDLE__{
int ;
}* AcpiPluginHandle;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* TargetDevice;
struct _POP_FX_DRIVER_CALLBACKS{
ComponentActive* ComponentActive;
ComponentIdle* ComponentIdle;
ComponentIdleState* ComponentIdleState;
DevicePowerRequired* DevicePowerRequired;
DevicePowerNotRequired* DevicePowerNotRequired;
PowerControl* PowerControl;
ComponentCriticalTransition* ComponentCriticalTransition;
} Callbacks;
void* DriverContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AcpiLink;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} DeviceId;
struct _IO_REMOVE_LOCK{
struct _IO_REMOVE_LOCK_COMMON_BLOCK Common;
} RemoveLock;
struct _IO_REMOVE_LOCK{
struct _IO_REMOVE_LOCK_COMMON_BLOCK Common;
} AcpiRemoveLock;
struct _POP_FX_WORK_ORDER{
struct _WORK_QUEUE_ITEM WorkItem;
int WorkCount;
void* Context;
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO* WatchdogTimerInfo;
} WorkOrder;
uint IdleLock;
struct _KTIMER{
struct _DISPATCHER_HEADER ;
} IdleTimer;
struct _KDPC{
ULONG TargetInfoAsUlong;
UCHAR Type;
UCHAR Importance;
USHORT Number;
struct _SINGLE_LIST_ENTRY ;
} IdleDpc;
uint64 IdleTimeout;
uint64 IdleStamp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* NextIrpDeviceObject;
}* FxDevice;
int FxDeviceLock;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
} FxRemoveEvent;
int FxActivationCount;
int FxSleepCount;
struct _POP_FX_PLUGIN{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
uint Version;
uint64 Flags;
struct _KQUEUE{
struct _DISPATCHER_HEADER ;
} WorkQueue;
AcceptDeviceNotification* AcceptDeviceNotification;
AcceptProcessorNotification* AcceptProcessorNotification;
AcceptAcpiNotification* AcceptAcpiNotification;
uint WorkOrderCount;
struct _POP_FX_WORK_ORDER{
struct _WORK_QUEUE_ITEM WorkItem;
int WorkCount;
void* Context;
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO* WatchdogTimerInfo;
} WorkOrders;
}* Plugin;
uint Level;
union _POWER_STATE{
SYSTEM_POWER_STATE SystemState;
DEVICE_POWER_STATE DeviceState;
} CurrentPowerState;
struct _PO_DEVICE_NOTIFY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PowerChildren;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PowerParents;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* TargetDevice;
uint8 OrderLevel;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
wchar_t* DeviceName;
wchar_t* DriverName;
uint ChildCount;
uint ActiveChild;
uint ParentCount;
uint ActiveParent;
} Notify;
struct _PO_IRP_MANAGER{
struct _PO_IRP_QUEUE{
struct _IRP* CurrentIrp;
struct _IRP* PendingIrpList;
} DeviceIrpQueue;
struct _PO_IRP_QUEUE{
struct _IRP* CurrentIrp;
struct _IRP* PendingIrpList;
} SystemIrpQueue;
} PoIrpManager;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} UniqueId;
uint PowerFlags;
_PNP_DEVNODE_STATE State;
_PNP_DEVNODE_STATE PreviousState;
_PNP_DEVNODE_STATE StateHistory;
}* DeviceNode;
struct _ADD_CONTEXT{
uint DriverStartType;
uint8 LoadDriver;
}* AddContext;
struct _DRIVER_LIST_ENTRY{
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DRIVER_LIST_ENTRY* NextEntry;
}* DriverLists;
}
struct RANGE_USERDATA_HEADER{
uint Count;
}
struct READ_FILE_USN_DATA{
uint16 ;
uint16 MaxMajorVersion;
}
struct READ_USN_JOURNAL_DATA_V0{
int64 StartUsn;
uint ReasonMask;
uint ReturnOnlyOnClose;
uint64 Timeout;
uint64 BytesToWaitFor;
uint64 UsnJournalID;
}
struct READ_USN_JOURNAL_DATA_V1{
int64 StartUsn;
uint ReasonMask;
uint ReturnOnlyOnClose;
uint64 Timeout;
uint64 BytesToWaitFor;
uint64 UsnJournalID;
uint16 MinMajorVersion;
uint16 MaxMajorVersion;
}
struct REFS_VOLUME_DATA_BUFFER{
uint ByteCount;
uint MajorVersion;
uint MinorVersion;
uint BytesPerPhysicalSector;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} VolumeSerialNumber;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} NumberSectors;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TotalClusters;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FreeClusters;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TotalReserved;
uint BytesPerSector;
uint BytesPerCluster;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MaximumSizeOfResidentFile;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Reserved;
}
struct RENAME_UOW_CONTEXT_{
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union {
struct _CM_KEY_HASH{
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} ;
struct {
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} __s1;
} ___u8;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} KcbPushlock;
union {
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
}* Owner;
int SharedCount;
} ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK{
uint32 Compressed:1;
uint32 RefCount:31;
union {
struct _CM_NAME_HASH NameHash;
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1;
} ___u2;
}* NameBlock;
struct _CM_KEY_SECURITY_CACHE{
uint Cell;
uint ConvKey;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} List;
uint DescriptorLength;
uint RealRefCount;
struct _SECURITY_DESCRIPTOR_RELATIVE{
uint8 Revision;
uint8 Sbz1;
uint16 Control;
uint Owner;
uint Group;
uint Sacl;
uint Dacl;
} Descriptor;
}* CachedSecurity;
struct _CACHED_CHILD_LIST{
uint Count;
union {
uint ValueList;
struct _CM_KEY_CONTROL_BLOCK* RealKcb;
} ___u1;
} ValueCache;
union {
struct _CM_INDEX_HINT_BLOCK{
uint Count;
uint HashKey;
}* IndexHint;
uint HashKey;
uint SubKeyCount;
} ___u21;
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyListHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FreeListEntry;
} ___u22;
struct _CM_KEY_BODY{
uint Type;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union $8440638E30A9331A41296104787125B0 ___u8;
struct _EX_PUSH_LOCK KcbPushlock;
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK* NameBlock;
struct _CM_KEY_SECURITY_CACHE* CachedSecurity;
struct _CACHED_CHILD_LIST ValueCache;
union $8F0591D9D3A7A30BBAE496525511E483 ___u21;
union $523FADD81025DDC728A1E47F6561D96B ___u22;
struct _CM_KEY_BODY* KeyBodyArray;
}* KeyControlBlock;
struct _CM_NOTIFY_BLOCK{
struct _LIST_ENTRY HiveList;
struct _LIST_ENTRY PostList;
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock;
struct _CM_KEY_BODY* KeyBody;
uint32 Filter:30;
uint32 WatchTree:1;
uint32 NotifyPending:1;
struct _SECURITY_SUBJECT_CONTEXT SubjectContext;
}* NotifyBlock;
void* ProcessID;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyList;
uint32 Flags:16;
uint32 HandleTags:16;
union _CM_TRANS_PTR{
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0;
void* TransPtr;
} Trans;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* KtmUow;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ContextListHead;
}* KeyBodyArray;
}* OldParent;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union {
struct _CM_KEY_HASH{
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} ;
struct {
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} __s1;
} ___u8;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} KcbPushlock;
union {
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
}* Owner;
int SharedCount;
} ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK{
uint32 Compressed:1;
uint32 RefCount:31;
union {
struct _CM_NAME_HASH NameHash;
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1;
} ___u2;
}* NameBlock;
struct _CM_KEY_SECURITY_CACHE{
uint Cell;
uint ConvKey;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} List;
uint DescriptorLength;
uint RealRefCount;
struct _SECURITY_DESCRIPTOR_RELATIVE{
uint8 Revision;
uint8 Sbz1;
uint16 Control;
uint Owner;
uint Group;
uint Sacl;
uint Dacl;
} Descriptor;
}* CachedSecurity;
struct _CACHED_CHILD_LIST{
uint Count;
union {
uint ValueList;
struct _CM_KEY_CONTROL_BLOCK* RealKcb;
} ___u1;
} ValueCache;
union {
struct _CM_INDEX_HINT_BLOCK{
uint Count;
uint HashKey;
}* IndexHint;
uint HashKey;
uint SubKeyCount;
} ___u21;
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyListHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FreeListEntry;
} ___u22;
struct _CM_KEY_BODY{
uint Type;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union $8440638E30A9331A41296104787125B0 ___u8;
struct _EX_PUSH_LOCK KcbPushlock;
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK* NameBlock;
struct _CM_KEY_SECURITY_CACHE* CachedSecurity;
struct _CACHED_CHILD_LIST ValueCache;
union $8F0591D9D3A7A30BBAE496525511E483 ___u21;
union $523FADD81025DDC728A1E47F6561D96B ___u22;
struct _CM_KEY_BODY* KeyBodyArray;
}* KeyControlBlock;
struct _CM_NOTIFY_BLOCK{
struct _LIST_ENTRY HiveList;
struct _LIST_ENTRY PostList;
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock;
struct _CM_KEY_BODY* KeyBody;
uint32 Filter:30;
uint32 WatchTree:1;
uint32 NotifyPending:1;
struct _SECURITY_SUBJECT_CONTEXT SubjectContext;
}* NotifyBlock;
void* ProcessID;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyList;
uint32 Flags:16;
uint32 HandleTags:16;
union _CM_TRANS_PTR{
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0;
void* TransPtr;
} Trans;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* KtmUow;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ContextListHead;
}* KeyBodyArray;
}* NewParent;
}
struct RETRIEVAL_POINTERS_BUFFER{
uint ExtentCount;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingVcn;
struct {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} NextVcn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Lcn;
} Extents;
}
struct ROUTING_TOKEN{
void* LinkNode;
uint StaticVector;
uint8 Flags;
}
struct RPC_CLIENT_INFORMATION1{
uint8* UserName;
uint8* ComputerName;
uint16 Privilege;
uint AuthFlags;
}
struct RPC_DISPATCH_TABLE{
uint DispatchTableCount;
DispatchTable** DispatchTable;
int Reserved;
}
struct RPC_ENDPOINT_TEMPLATEA{
uint Version;
uint8* ProtSeq;
uint8* Endpoint;
void* SecurityDescriptor;
uint Backlog;
}
struct RPC_ENDPOINT_TEMPLATEW{
uint Version;
uint16* ProtSeq;
uint16* Endpoint;
void* SecurityDescriptor;
uint Backlog;
}
struct RPC_IF_ID_VECTOR{
uint Count;
struct _RPC_IF_ID{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Uuid;
uint16 VersMajor;
uint16 VersMinor;
}* IfId;
}
struct RPC_INTERFACE_TEMPLATEA{
uint Version;
void* IfSpec;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* MgrTypeUuid;
void* MgrEpv;
uint Flags;
uint MaxCalls;
uint MaxRpcSize;
IfCallback* IfCallback;
struct _UUID_VECTOR{
uint Count;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* Uuid;
}* UuidVector;
uint8* Annotation;
void* SecurityDescriptor;
}
struct RPC_INTERFACE_TEMPLATEW{
uint Version;
void* IfSpec;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* MgrTypeUuid;
void* MgrEpv;
uint Flags;
uint MaxCalls;
uint MaxRpcSize;
IfCallback* IfCallback;
struct _UUID_VECTOR{
uint Count;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* Uuid;
}* UuidVector;
uint16* Annotation;
void* SecurityDescriptor;
}
struct RPC_STATS_VECTOR{
uint Count;
uint Stats;
}
struct RTL_ACE_DATA{
uint8 AceType;
uint8 InheritFlags;
uint8 AceFlags;
uint Mask;
void** Sid;
}
struct RegInfo{
uint RiSegSs;
uint RiEsp;
uint RiEFlags;
uint RiSegCs;
uint RiEip;
uint RiTrapFrame;
uint RiCsLimit;
uint RiCsBase;
uint RiCsFlags;
uint RiSsLimit;
uint RiSsBase;
uint RiSsFlags;
uint RiPrefixFlags;
uint RiOperand;
}
struct RegistrationNode{
uint Next;
uint Handler;
uint EH4ScopeTable;
uint TryLevel;
}
struct SCOPE_ID{
union {
struct {
uint32 Zone:28;
uint32 Level:4;
} __s0;
uint Value;
} ___u0;
}
struct SC_ALLOCATION{
}
struct SC_DISPATCH{
}
struct SC_HANDLE__{
int ;
}
struct SC_PACKET{
struct SC_PACKET* ;
struct SC_PACKET* _ParentPacket;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _ChildListHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _ChildListEntry;
int _RefCount;
uint _Flags;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* ;
}* _Irp;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* _Event;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* _Mdl;
uint64 _Param1;
uint64 _Offset;
uint _Length;
uint _Column;
uint _Copy;
int _CopiesMask;
uint8 _Function;
_SC_OPERATION _Operation;
_SC_STATE _State;
uint8 _AllocationIndex;
int _RepairMask;
int _Status;
uint _Priority;
uint64 _Param2;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _QueueListEntry;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _BucketListEntry;
struct SC_DISPATCH{
}* _Owner;
struct SC_DISPATCH{
}* _Object;
}
struct SC_SEQUENTIAL{
struct SC_PACKET{
struct SC_PACKET* ;
struct SC_PACKET* _ParentPacket;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _ChildListHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _ChildListEntry;
int _RefCount;
uint _Flags;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* _Irp;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
}* _Event;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* _Mdl;
uint64 _Param1;
uint64 _Offset;
uint _Length;
uint _Column;
uint _Copy;
int _CopiesMask;
uint8 _Function;
_SC_OPERATION _Operation;
_SC_STATE _State;
uint8 _AllocationIndex;
int _RepairMask;
int _Status;
uint _Priority;
uint64 _Param2;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _QueueListEntry;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _BucketListEntry;
struct SC_DISPATCH{
}* _Owner;
struct SC_DISPATCH{
}* _Object;
}* _Packet;
void* _Mapping;
void* _Param1;
uint _Length;
uint8 _InUse;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} _ListHead;
void* _Lock;
}
struct SERVICE_STATUS_HANDLE__{
int unused;
}
struct SERVICE_TRIGGER_CUSTOM_STATE_ID{
uint ;
}
struct SET_POWER_SETTING_VALUE{
uint ;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
SYSTEM_POWER_CONDITION PowerCondition;
uint DataLength;
uint8 Data;
}
struct SHELLHOOKINFO{
struct HWND__{
int ;
}* hwnd;
struct tagRECT{
int left;
int top;
int right;
int bottom;
} rc;
}
struct SLIT_TABLE{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint64 LocalityCount;
}
struct SMBIOSVERSIONINFO{
uint8 Used20CallingMethod;
uint8 SMBiosMajorVersion;
uint8 SMBiosMinorVersion;
uint8 DMIBiosRevision;
}
struct SMBIOS_EVENTLOG_INFO{
uint16 LogTypeDescLength;
uint8 LogHeaderDescExists;
uint8 Reserved;
uint16 LogAreaLength;
uint16 LogHeaderStart;
uint16 LogDataStart;
uint8 AccessMethod;
uint8 LogStatus;
uint LogChangeToken;
uint AccessMethodAddress;
uint8 LogHeaderFormat;
uint8 NumberLogTypeDesc;
uint8 LengthEachLogTypeDesc;
uint8 VariableData;
}
struct SP_RESILIENCY_INFO{
_SP_RESILIENCY_TYPE Type;
uint FaultTolerance;
uint NumberOfCopies;
uint NumberOfGroups;
uint NumberOfColumns;
uint Interleave;
}
struct SSPCallCipherTextData{
uint cbCipherText;
uint8* pbCipherText;
uint cbCiphersUsed;
uint8* pbCiphersUsed;
uint cbCipherKey;
uint8* pbCipherKey;
}
struct SSPCallParameter{
uint cbData;
uint8* pbData;
}
struct SSPCallParameters{
uint cParams;
uint cbData;
uint8* pbData;
}
struct STARTING_LCN_INPUT_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingLcn;
}
struct STARTING_LCN_INPUT_BUFFER_EX{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ;
uint Flags;
}
struct STARTING_VCN_INPUT_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingVcn;
}
struct STORAGE_BREAK_RESERVATION_REQUEST{
uint ;
uint8 _unused;
uint8 PathId;
uint8 TargetId;
uint8 Lun;
}
struct SYSTEM_BATTERY_STATE{
uint8 AcOnLine;
uint8 BatteryPresent;
uint8 Charging;
uint8 Discharging;
uint8 Spare1;
}
struct SYSTEM_POWER_CAPABILITIES{
uint8 PowerButtonPresent;
uint8 SleepButtonPresent;
uint8 LidPresent;
uint8 SystemS1;
uint8 SystemS2;
uint8 SystemS3;
uint8 SystemS4;
uint8 SystemS5;
uint8 HiberFilePresent;
uint8 FullWake;
uint8 VideoDimPresent;
uint8 ApmPresent;
uint8 UpsPresent;
uint8 ThermalControl;
uint8 ProcessorThrottle;
uint8 ProcessorMinThrottle;
uint8 ProcessorMaxThrottle;
uint8 FastSystemS4;
uint8 Hiberboot;
uint8 WakeAlarmPresent;
uint8 AoAc;
uint8 DiskSpinDown;
uint8 HiberFileType;
uint8 AoAcConnectivitySupported;
uint8 spare3;
}
struct SYSTEM_POWER_LEVEL{
uint8 Enable;
uint8 Spare;
}
struct ScFrame{
uint SavedEbp;
uint SavedEdi;
uint SavedEsi;
uint SavedEbx;
uint Return;
uint SwapIrql;
}
struct ScopeTable{
uint GSCookieOffset;
uint GSCookieXOROffset;
uint EHCookieOffset;
uint EHCookieXOROffset;
uint ScopeRecord;
}
struct ScopeTableRecord{
uint EnclosingLevel;
uint FilterFunc;
union {
uint HandlerAddress;
uint FinallyFunc;
} ___u2;
}
struct SpcsFrame{
uint ReturnAddress;
uint ProcessorState;
}
struct SsFrame{
uint SavedEbp;
uint ReturnAddress;
uint SsProcessorState;
}
struct StEtaHelper{
}
struct StRpDeviceIoHelper{
}
struct TESTHOOKCALLBACK_REGISTRATION_STRUCT{
uint CallbackIndex;
Callback* Callback;
}
struct TUNNEL{
struct _FAST_MUTEX{
LONG Count;
void* ;
} Mutex;
struct _RTL_SPLAY_LINKS{
struct _RTL_SPLAY_LINKS* Parent;
struct _RTL_SPLAY_LINKS* LeftChild;
struct _RTL_SPLAY_LINKS* RightChild;
}* Cache;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerQueue;
uint16 NumEntries;
}
struct TUNNEL_NODE{
struct _RTL_SPLAY_LINKS{
struct _RTL_SPLAY_LINKS* Parent;
struct _RTL_SPLAY_LINKS* LeftChild;
struct _RTL_SPLAY_LINKS* RightChild;
} CacheLinks;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListLinks;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
uint64 DirKey;
uint Flags;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} LongName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ShortName;
void* TunnelData;
uint TunnelDataLength;
}
struct UNICODE_STRING3264{
uint16 Length;
uint16 MaximumLength;
union {
wchar_t* Buffer;
uint64 Dummy;
} ___u2;
}
struct USN_JOURNAL_DATA_V0{
uint64 UsnJournalID;
int64 FirstUsn;
int64 NextUsn;
int64 LowestValidUsn;
int64 MaxUsn;
uint64 MaximumSize;
uint64 AllocationDelta;
}
struct USN_JOURNAL_DATA_V1{
uint64 UsnJournalID;
int64 FirstUsn;
int64 NextUsn;
int64 LowestValidUsn;
int64 MaxUsn;
uint64 MaximumSize;
uint64 AllocationDelta;
uint16 MinSupportedMajorVersion;
uint16 MaxSupportedMajorVersion;
}
struct USN_JOURNAL_DATA_V2{
uint64 UsnJournalID;
int64 FirstUsn;
int64 NextUsn;
int64 LowestValidUsn;
int64 MaxUsn;
uint64 MaximumSize;
uint64 AllocationDelta;
uint16 MinSupportedMajorVersion;
uint16 MaxSupportedMajorVersion;
uint Flags;
uint64 RangeTrackChunkSize;
int64 RangeTrackFileSizeThreshold;
}
struct USN_RANGE_TRACK_OUTPUT{
int64 Usn;
}
struct USN_RECORD_COMMON_HEADER{
uint ;
uint16 MajorVersion;
uint16 MinorVersion;
}
struct USN_RECORD_EXTENT{
int64 Offset;
int64 Length;
}
struct USN_RECORD_V2{
uint RecordLength;
uint16 MajorVersion;
uint16 MinorVersion;
uint64 FileReferenceNumber;
uint64 ParentFileReferenceNumber;
int64 Usn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
uint Reason;
uint SourceInfo;
uint SecurityId;
uint FileAttributes;
uint16 FileNameLength;
uint16 FileNameOffset;
wchar_t FileName;
}
struct USN_RECORD_V3{
uint RecordLength;
uint16 MajorVersion;
uint16 MinorVersion;
struct _FILE_ID_128{
uint8 ;
} FileReferenceNumber;
struct _FILE_ID_128{
uint8 ;
} ParentFileReferenceNumber;
int64 Usn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
uint Reason;
uint SourceInfo;
uint SecurityId;
uint FileAttributes;
uint16 FileNameLength;
uint16 FileNameOffset;
wchar_t FileName;
}
struct USN_RECORD_V4{
struct USN_RECORD_COMMON_HEADER{
uint ;
uint16 MajorVersion;
uint16 MinorVersion;
} Header;
struct _FILE_ID_128{
uint8 ;
} FileReferenceNumber;
struct _FILE_ID_128{
uint8 ;
} ParentFileReferenceNumber;
int64 Usn;
uint Reason;
uint SourceInfo;
uint RemainingExtents;
uint16 NumberOfExtents;
uint16 ExtentSize;
struct USN_RECORD_EXTENT{
int64 Offset;
int64 Length;
} Extents;
}
struct USN_TRACK_MODIFIED_RANGES{
uint Flags;
uint Unused;
uint64 ChunkSize;
int64 FileSizeThreshold;
}
struct UnwindGuardNode{
uint Next;
uint Handler;
uint SecurityCookie;
uint OrigTargetLevel;
uint OrigEstablisher;
uint OrigCookiePointer;
uint FramePointer;
}
struct VACB_LEVEL_ALLOCATION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} VacbLevelList;
void* VacbLevelWithBcbListHeads;
uint VacbLevelsAllocated;
}
struct VERIFIER_EXTENSION{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* PhysicalDeviceObject;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* LowerDeviceObject;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* Self;
VF_DEVOBJ_TYPE DevObjType;
struct _IO_REMOVE_LOCK{
struct _IO_REMOVE_LOCK_COMMON_BLOCK{
uint8 ;
uint8 Reserved;
} Common;
} RemoveLock;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} RemoveDpcEvent;
uint DeviceUsageLock;
uint DeviceUsageCount;
uint Flags;
}
struct VFWMI_DEVICE_EXTENSION{
uint SiloNumber;
}
struct VI_CALLOUT_STRUCT{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* ;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* ;
}* Irp;
int ReturnStatus;
}
struct VLOCK{
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
}
struct VOLUME_BITMAP_BUFFER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} BitmapSize;
uint8 Buffer;
}
struct WARBIRD__CFeistel64{
uint8* RoundID;
uint8* RandPool;
}
struct WHEAWMIGUIDREGINFO{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* Guid;
uint InstanceCount;
uint Flags;
}
struct WHEA_PCIXDEVICE_REGISTER_PAIR{
uint64 Register;
uint64 Data;
}
struct WMIEVENTQUEUE{
uint8* Buffer;
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union {
uint64 HistoricalContext;
struct {
uint Version;
uint Linkage;
} __s1;
} ___u2;
union {
uint CountLost;
void* KernelHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
} ___u3;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint ClientContext;
uint Flags;
}* LastWnode;
uint MaxBufferSize;
uint NextOffset;
uint EventsLost;
}
struct WMIFHTOINSTANCENAME{
union {
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} FileHandle;
uint SizeNeeded;
} ___u0;
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} KernelHandle;
uint BaseIndex;
uint16 InstanceNameLength;
wchar_t InstanceNames;
}
struct WMIGUIDLISTINFO{
uint TotalGuidCount;
uint ReturnedGuidCount;
struct WMIGUIDPROPERTIES{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint GuidType;
uint LoggerId;
uint EnableLevel;
uint EnableFlags;
uint8 IsEnabled;
} GuidList;
}
struct WMIGUIDPROPERTIES{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint GuidType;
uint LoggerId;
uint EnableLevel;
uint EnableFlags;
uint8 IsEnabled;
}
struct WMIMOFENTRY{
uint RegPathOffset;
uint ResourceOffset;
uint Flags;
}
struct WMIMOFLIST{
uint MofListCount;
struct WMIMOFENTRY{
uint RegPathOffset;
uint ResourceOffset;
uint Flags;
} MofEntry;
}
struct WMIOPENGUIDBLOCK{
struct _OBJECT_ATTRIBUTES{
ULONG Length;
void* ;
}* ObjectAttributes;
uint DesiredAccess;
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} Handle;
}
struct WMIQADMULTIPLE{
uint HandleCount;
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} Handles;
}
struct WMIQSIINFO{
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} Handle;
struct UNICODE_STRING3264{
uint16 Length;
uint16 MaximumLength;
union {
wchar_t* Buffer;
uint64 Dummy;
} ___u2;
} InstanceName;
}
struct WMIQSIMULTIPLE{
uint QueryCount;
struct WMIQSIINFO{
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} Handle;
struct UNICODE_STRING3264{
uint16 Length;
uint16 MaximumLength;
union {
wchar_t* Buffer;
uint64 Dummy;
} ___u2;
} InstanceName;
} QsiInfo;
}
struct WMIQUERYGUIDINFO{
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} KernelHandle;
uint8 IsExpensive;
}
struct WMIRECEIVENOTIFICATION{
uint HandleCount;
union HANDLE3264{
void* Handle;
uint64 Handle64;
uint Handle32;
} Handles;
}
struct WMIREGGUIDW{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint Flags;
uint InstanceCount;
union {
uint InstanceNameList;
uint BaseNameOffset;
uint Pdo;
uint InstanceInfo;
} ___u3;
}
struct WMIREGINFOW{
uint BufferSize;
uint NextWmiRegInfo;
uint RegistryPath;
uint MofResourceName;
uint GuidCount;
struct WMIREGGUIDW{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint Flags;
uint InstanceCount;
union {
uint InstanceNameList;
uint BaseNameOffset;
uint Pdo;
uint InstanceInfo;
} ___u3;
} WmiRegGuid;
}
struct WMITRACE_NOTIFY_HEADER{
struct _WNODE_HEADER{
uint ;
uint ProviderId;
union {
uint64 HistoricalContext;
struct {
uint Version;
uint Linkage;
} __s1;
} ___u2;
union {
uint CountLost;
void* KernelHandle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
} ___u3;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Guid;
uint ClientContext;
uint Flags;
} Wnode;
uint64 LoggerContext;
uint64 SecurityToken;
}
struct WMIVERSIONINFO{
uint Version;
}
struct XSAVE_CPU_ERRATA{
uint ;
struct XSAVE_CPU_INFO{
uint8 Processor;
uint16 Family;
uint16 Model;
uint16 Stepping;
uint16 ExtendedModel;
uint ExtendedFamily;
uint64 MicrocodeVersion;
uint Reserved;
} Errata;
}
struct XSAVE_CPU_INFO{
uint8 Processor;
uint16 Family;
uint16 Model;
uint16 Stepping;
uint16 ExtendedModel;
uint ExtendedFamily;
uint64 MicrocodeVersion;
uint Reserved;
}
struct _ABC{
int abcA;
uint abcB;
int abcC;
}
struct _ABCFLOAT{
float abcfA;
float abcfB;
float abcfC;
}
struct _AB_LOCK_KEY{
void* MaskedLockPtr;
uint SessionId;
}
struct _AB_PRIORITY{
union {
struct {
char CpuPriority;
char IoPriority;
char IoQoSPriority;
char Spare;
} __s0;
uint AllPriorities;
} ___u0;
}
struct _ACCESS_ALLOWED_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} ;
uint Mask;
uint SidStart;
}
struct _ACCESS_ALLOWED_CALLBACK_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint SidStart;
}
struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ObjectType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InheritedObjectType;
uint SidStart;
}
struct _ACCESS_ALLOWED_OBJECT_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ObjectType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InheritedObjectType;
uint SidStart;
}
struct _ACCESS_DENIED_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint SidStart;
}
struct _ACCESS_DENIED_CALLBACK_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint SidStart;
}
struct _ACCESS_DENIED_CALLBACK_OBJECT_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ObjectType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InheritedObjectType;
uint SidStart;
}
struct _ACCESS_DENIED_OBJECT_ACE{
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
} Header;
uint Mask;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ObjectType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InheritedObjectType;
uint SidStart;
}
struct _ACCESS_METHOD_ADDRESS{
union {
struct {
uint16 IndexAddr;
uint16 DataAddr;
} IndexIo;
uint PhysicalAddress32;
uint16 GPNVHandle;
} AccessMethodAddress;
}
struct _ACCESS_REASONS{
uint ;
}
struct _ACCESS_REASON_CONTEXT_SD_INFO{
void* ;
uint CapeCount;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* CapeNames;
}
struct _ACCESS_STATE{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} ;
}
struct _ACE{
uint AceType;
uint AceFlags;
uint AccessMask;
uint SidStart;
}
struct _ACE_HEADER{
uint8 AceType;
uint8 AceFlags;
uint16 AceSize;
}
struct _ACL{
BYTE AclRevision;
BYTE Sbz1;
WORD AclSize;
WORD AceCount;
WORD Sbz2;
}
struct _ACL_REVISION_INFORMATION{
uint AclRevision;
}
struct _ACL_SIZE_INFORMATION{
uint ;
uint AclBytesInUse;
uint AclBytesFree;
}
struct _ACPI_BIOS_INFORMATION{
uint BootArchitecture;
uint PreferredProfile;
uint Capabilities;
}
struct _ACPI_CALLBACK_REQUEST_PARAMETERS{
_ACPI_CALLBACK_REQUEST_TYPE Type;
void* AcpiContext;
uint RequestId;
union {
struct _PEP_WORK_INFORMATION{
_PEP_WORK_TYPE WorkType;
union {
struct _PEP_WORK_ACTIVE_COMPLETE ActiveComplete;
struct _PEP_WORK_IDLE_STATE IdleState;
struct _PEP_WORK_DEVICE_POWER DevicePower;
struct _PEP_WORK_POWER_CONTROL PowerControl;
struct _PEP_WORK_DEVICE_IDLE DeviceIdle;
struct _PEP_WORK_COMPLETE_IDLE_STATE CompleteIdleState;
struct _PEP_WORK_COMPLETE_PERF_STATE CompletePerfState;
struct _PEP_WORK_ACPI_NOTIFY AcpiNotify;
struct _PEP_WORK_ACPI_EVALUATE_CONTROL_METHOD_COMPLETE ControlMethodComplete;
} ___u1;
}* WorkInformation;
struct _PEP_ACPI_REQUEST_CONVERT_TO_BIOS_RESOURCES{
int TranslationStatus;
union _PEP_ACPI_RESOURCE{
_PEP_ACPI_RESOURCE_TYPE ;
struct _PEP_ACPI_IO_MEMORY_RESOURCE IoMemory;
struct _PEP_ACPI_INTERRUPT_RESOURCE Interrupt;
struct _PEP_ACPI_GPIO_RESOURCE Gpio;
struct _PEP_ACPI_SPB_I2C_RESOURCE SpbI2c;
struct _PEP_ACPI_SPB_SPI_RESOURCE SpbSpi;
struct _PEP_ACPI_SPB_UART_RESOURCE SpbUart;
struct _PEP_ACPI_EXTENDED_ADDRESS ExtendedAddress;
}* InputBuffer;
uint InputBufferSize;
void* OutputBuffer;
uint OutputBufferSize;
uint Flags;
}* ResourceInformation;
} ___u3;
}
struct _ACPI_CMOS_INTERFACE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
ReadCmos* ReadCmos;
WriteCmos* WriteCmos;
}
struct _ACPI_DEBUGGING_DEVICE_IN_USE{
uint NameSpacePathLength;
wchar_t NameSpacePath;
}
struct _ACPI_DEVICE_INFORMATION_OUTPUT_BUFFER{
uint Signature;
uint16 Size;
uint8 Revision;
uint8 Reserved0;
uint16 VendorIdStringOffset;
uint16 VendorStringLength;
uint16 DeviceIdStringOffset;
uint16 SubSystemIdStringOffset;
uint16 SubSystemStringLength;
uint16 SubDeviceIdStringOffset;
uint16 InstanceIdLength;
uint16 InstanceIdOffset;
uint16 BaseClassCode;
uint16 HardwareRevision;
uint8 ProgrammingInterface;
uint8 Reserved1;
uint16 SubClassCode;
}
struct _ACPI_ENUM_CHILD{
uint Flags;
uint NameLength;
char Name;
}
struct _ACPI_ENUM_CHILDREN_INPUT_BUFFER{
uint Signature;
uint Flags;
uint NameLength;
char Name;
}
struct _ACPI_ENUM_CHILDREN_OUTPUT_BUFFER{
uint Signature;
uint NumberOfChildren;
struct _ACPI_ENUM_CHILD{
uint Flags;
uint NameLength;
char Name;
} Children;
}
struct _ACPI_EVAL_INPUT_BUFFER{
uint Signature;
union {
uint8 ;
} ___u1;
}
struct _ACPI_EVAL_INPUT_BUFFER_COMPLEX{
uint Signature;
union {
uint8 ;
} ___u1;
uint Size;
uint ArgumentCount;
struct _ACPI_METHOD_ARGUMENT{
uint16 Type;
uint16 DataLength;
union {
uint Argument;
uint8 Data;
} ___u2;
} Argument;
}
struct _ACPI_EVAL_INPUT_BUFFER_COMPLEX_EX{
uint Signature;
char MethodName;
}
struct _ACPI_EVAL_INPUT_BUFFER_EX{
uint Signature;
char MethodName;
}
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_INTEGER{
uint Signature;
union {
uint8 ;
} ___u1;
uint IntegerArgument;
}
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_INTEGER_EX{
uint Signature;
char MethodName;
}
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_STRING{
uint Signature;
union {
uint8 ;
} ___u1;
uint StringLength;
uint8 String;
}
struct _ACPI_EVAL_INPUT_BUFFER_SIMPLE_STRING_EX{
uint Signature;
char MethodName;
}
struct _ACPI_EVAL_OUTPUT_BUFFER{
uint Signature;
uint Length;
uint Count;
struct _ACPI_METHOD_ARGUMENT{
uint16 Type;
uint16 DataLength;
union {
uint Argument;
uint8 Data;
} ___u2;
} Argument;
}
struct _ACPI_GET_DEVICE_SPECIFIC_DATA{
uint Signature;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Section;
uint PropertyNameLength;
uint8 PropertyName;
}
struct _ACPI_INTERFACE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
}
struct _ACPI_MANIPULATE_GLOBAL_LOCK_BUFFER{
uint Signature;
void* LockObject;
}
struct _ACPI_METHOD_ARGUMENT{
uint16 Type;
uint16 DataLength;
union {
uint Argument;
uint8 Data;
} ___u2;
}
struct _ACPI_MPST{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint8 SubspaceId;
uint8 Reserved2;
}
struct _ACPI_MSCT{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint DomainInfoOffset;
uint ProximityDomainCount;
uint ClockDomainCount;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} MaximumPhysicalAddress;
}
struct _ACPI_MSCT_ENTRY{
uint8 Revision;
uint8 Length;
uint DomainIdRangeLow;
uint DomainIdRangeHigh;
uint ProcessorCapacity;
uint64 MemoryCapacity;
}
struct _ACPI_PLD_BUFFER{
uint32 Revision:7;
uint32 IgnoreColor:1;
uint32 Color:24;
uint32 Width:16;
uint32 Height:16;
uint32 UserVisible:1;
uint32 Dock:1;
uint32 Lid:1;
uint32 Panel:3;
uint32 VerticalPosition:2;
uint32 HorizontalPosition:2;
uint32 Shape:4;
uint32 GroupOrientation:1;
uint32 GroupToken:8;
uint32 GroupPosition:8;
uint32 Bay:1;
uint32 Ejectable:1;
uint32 EjectionRequired:1;
uint32 CabinetNumber:8;
uint32 CardCageNumber:8;
uint32 Reserved:14;
}
struct _ACPI_PLD_V2_BUFFER{
uint32 Revision:7;
uint32 IgnoreColor:1;
uint32 Color:24;
uint32 Width:16;
uint32 Height:16;
uint32 UserVisible:1;
uint32 Dock:1;
uint32 Lid:1;
uint32 Panel:3;
uint32 VerticalPosition:2;
uint32 HorizontalPosition:2;
uint32 Shape:4;
uint32 GroupOrientation:1;
uint32 GroupToken:8;
uint32 GroupPosition:8;
uint32 Bay:1;
uint32 Ejectable:1;
uint32 EjectionRequired:1;
uint32 CabinetNumber:8;
uint32 CardCageNumber:8;
uint32 Reference:1;
uint32 Rotation:4;
uint32 Order:5;
uint32 Reserved:4;
uint16 VerticalOffset;
uint16 HorizontalOffset;
}
struct _ACPI_REAL_TIME{
uint16 Year;
uint8 Month;
uint8 Day;
uint8 Hour;
uint8 Minute;
uint8 Second;
uint8 Valid;
uint16 Milliseconds;
__int16 TimeZone;
uint8 DayLight;
uint8 Reserved1;
}
struct _ACPI_SRAT{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint TableRevision;
uint Reserved;
}
struct _ACPI_SRAT_ENTRY{
uint8 Type;
uint8 Length;
union {
struct {
uint8 ProximityDomainLow;
uint8 ApicId;
struct {
uint32 Enabled:1;
uint32 Reserved:31;
} Flags;
uint8 SApicEid;
uint8 ProximityDomainHigh;
} ApicAffinity;
struct {
uint ;
uint8 Reserved;
} MemoryAffinity;
struct {
uint8 Reserved;
} X2ApicAffinity;
} ___u2;
}
struct _ACPI_WPBT_TABLE{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint HandoffMemorySize;
uint64 HandoffMemoryLocation;
uint8 ContentLayout;
uint8 ContentType;
uint16 CommandLineArgumentsLength;
wchar_t CommandLineArguments;
}
struct _ACTIVATION_CONTEXT_ASSEMBLY_DATA{
uint Size;
uint Flags;
wchar_t* AssemblyName;
uint AssemblyNameLength;
uint HashAlgorithm;
uint PseudoKey;
}
struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION{
uint ulFlags;
uint ulEncodedAssemblyIdentityLength;
uint ulManifestPathType;
uint ulManifestPathLength;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} liManifestLastWriteTime;
uint ulPolicyPathType;
uint ulPolicyPathLength;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} liPolicyLastWriteTime;
uint ulMetadataSatelliteRosterIndex;
uint ulManifestVersionMajor;
uint ulManifestVersionMinor;
uint ulPolicyVersionMajor;
uint ulPolicyVersionMinor;
uint ulAssemblyDirectoryNameLength;
wchar_t* lpAssemblyEncodedAssemblyIdentity;
wchar_t* lpAssemblyManifestPath;
wchar_t* lpAssemblyPolicyPath;
wchar_t* lpAssemblyDirectoryName;
uint ulFileCount;
}
struct _ACTIVATION_CONTEXT_BASIC_INFORMATION{
union {
_ACTIVATION_CONTEXT* ;
void* hActCtx;
} ___u0;
union {
uint Flags;
uint dwFlags;
} ___u1;
}
struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION{
uint ElementCount;
struct _COMPATIBILITY_CONTEXT_ELEMENT{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Id;
ACTCTX_COMPATIBILITY_ELEMENT_TYPE Type;
} Elements;
}
struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION{
uint dwFlags;
uint ulFormatVersion;
uint ulAssemblyCount;
uint ulRootManifestPathType;
uint ulRootManifestPathChars;
uint ulRootConfigurationPathType;
uint ulRootConfigurationPathChars;
uint ulAppDirPathType;
uint ulAppDirPathChars;
wchar_t* lpRootManifestPath;
wchar_t* lpRootConfigurationPath;
wchar_t* lpAppDirPath;
}
struct _ACTIVATION_CONTEXT_QUERY_INDEX{
uint ulAssemblyIndex;
uint ulFileIndexInAssembly;
}
struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION{
uint ulFlags;
ACTCTX_REQUESTED_RUN_LEVEL RunLevel;
uint UiAccess;
}
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA{
uint Size;
uint DataFormatVersion;
void* Data;
uint Length;
void* SectionGlobalData;
uint SectionGlobalDataLength;
void* SectionBase;
uint SectionTotalLength;
_ACTIVATION_CONTEXT* ActivationContext;
uint AssemblyRosterIndex;
uint Flags;
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA{
} AssemblyMetadata;
}
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600{
uint Size;
uint DataFormatVersion;
void* Data;
uint Length;
void* SectionGlobalData;
uint SectionGlobalDataLength;
void* SectionBase;
uint SectionTotalLength;
_ACTIVATION_CONTEXT* ActivationContext;
uint AssemblyRosterIndex;
uint Flags;
}
struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA{
}
struct _ACTIVATION_CONTEXT_STACK{
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME{
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME* Previous;
_ACTIVATION_CONTEXT* ActivationContext;
uint Flags;
}* ActiveFrame;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FrameListCache;
uint Flags;
uint NextCookieSequenceNumber;
uint StackId;
}
struct _ACTIVATION_CONTEXT_STACK32{
uint ActiveFrame;
struct LIST_ENTRY32{
uint Flink;
uint Blink;
} FrameListCache;
uint Flags;
uint NextCookieSequenceNumber;
uint StackId;
}
struct _ACTIVATION_CONTEXT_STACK64{
uint64 ActiveFrame;
struct LIST_ENTRY64{
uint64 Flink;
uint64 Blink;
} FrameListCache;
uint Flags;
uint NextCookieSequenceNumber;
uint StackId;
}
struct _ACTIVEMARK_FOOTER{
char FooterTag;
}
struct _ACTIVE_CONNECT_BLOCK{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
uint Gsiv;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* ActualConnectLock;
int* ActualReferenceCount;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} LocalConnectLock;
int LocalReferenceCount;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* DeleteLock;
}
struct _ADAPTER_INFORMATION{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _DMA_ADAPTER{
uint16 Version;
uint16 Size;
struct _DMA_OPERATIONS{
uint Size;
PutDmaAdapter* PutDmaAdapter;
AllocateCommonBuffer** AllocateCommonBuffer;
FreeCommonBuffer* FreeCommonBuffer;
AllocateAdapterChannel* AllocateAdapterChannel;
FlushAdapterBuffers* FlushAdapterBuffers;
FreeAdapterChannel* FreeAdapterChannel;
FreeMapRegisters* FreeMapRegisters;
MapTransfer* MapTransfer;
GetDmaAlignment* GetDmaAlignment;
ReadDmaCounter* ReadDmaCounter;
GetScatterGatherList* GetScatterGatherList;
PutScatterGatherList* PutScatterGatherList;
CalculateScatterGatherList* CalculateScatterGatherList;
BuildScatterGatherList* BuildScatterGatherList;
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList;
GetDmaAdapterInfo* GetDmaAdapterInfo;
GetDmaTransferInfo* GetDmaTransferInfo;
InitializeDmaTransferContext* InitializeDmaTransferContext;
AllocateCommonBufferEx** AllocateCommonBufferEx;
AllocateAdapterChannelEx* AllocateAdapterChannelEx;
ConfigureAdapterChannel* ConfigureAdapterChannel;
CancelAdapterChannel* CancelAdapterChannel;
MapTransferEx* MapTransferEx;
GetScatterGatherListEx* GetScatterGatherListEx;
BuildScatterGatherListEx* BuildScatterGatherListEx;
FlushAdapterBuffersEx* FlushAdapterBuffersEx;
FreeAdapterObject* FreeAdapterObject;
CancelMappedTransfer* CancelMappedTransfer;
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer;
FlushDmaBuffer* FlushDmaBuffer;
JoinDmaDomain* JoinDmaDomain;
LeaveDmaDomain* LeaveDmaDomain;
GetDmaDomain** GetDmaDomain;
}* DmaOperations;
}* DmaAdapter;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* DeviceObject;
uint8 DeferredRemove;
uint8 UseContiguousBuffers;
uint8 UseDmaChannel;
int HandleCount;
void* CallingAddress;
struct _DMA_OPERATIONS{
uint Size;
PutDmaAdapter* PutDmaAdapter;
AllocateCommonBuffer** AllocateCommonBuffer;
FreeCommonBuffer* FreeCommonBuffer;
AllocateAdapterChannel* AllocateAdapterChannel;
FlushAdapterBuffers* FlushAdapterBuffers;
FreeAdapterChannel* FreeAdapterChannel;
FreeMapRegisters* FreeMapRegisters;
MapTransfer* MapTransfer;
GetDmaAlignment* GetDmaAlignment;
ReadDmaCounter* ReadDmaCounter;
GetScatterGatherList* GetScatterGatherList;
PutScatterGatherList* PutScatterGatherList;
CalculateScatterGatherList* CalculateScatterGatherList;
BuildScatterGatherList* BuildScatterGatherList;
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList;
GetDmaAdapterInfo* GetDmaAdapterInfo;
GetDmaTransferInfo* GetDmaTransferInfo;
InitializeDmaTransferContext* InitializeDmaTransferContext;
AllocateCommonBufferEx** AllocateCommonBufferEx;
AllocateAdapterChannelEx* AllocateAdapterChannelEx;
ConfigureAdapterChannel* ConfigureAdapterChannel;
CancelAdapterChannel* CancelAdapterChannel;
MapTransferEx* MapTransferEx;
GetScatterGatherListEx* GetScatterGatherListEx;
BuildScatterGatherListEx* BuildScatterGatherListEx;
FlushAdapterBuffersEx* FlushAdapterBuffersEx;
FreeAdapterObject* FreeAdapterObject;
CancelMappedTransfer* CancelMappedTransfer;
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer;
FlushDmaBuffer* FlushDmaBuffer;
JoinDmaDomain* JoinDmaDomain;
LeaveDmaDomain* LeaveDmaDomain;
GetDmaDomain** GetDmaDomain;
}* RealDmaOperations;
struct _HAL_VERIFIER_LOCKED_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint SpinLock;
} ScatterGatherLists;
struct _HAL_VERIFIER_LOCKED_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint SpinLock;
} CommonBuffers;
struct _HAL_VERIFIER_LOCKED_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint SpinLock;
} MapRegisterFiles;
struct _HAL_VERIFIER_LOCKED_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint SpinLock;
} ChannelWcbList;
uint MaximumMapRegisters;
uint AllocatedMapRegisters;
int ActiveMapRegisters;
uint AllocatedScatterGatherLists;
int ActiveScatterGatherLists;
uint AllocatedCommonBuffers;
uint FreedCommonBuffers;
uint AllocatedAdapterChannels;
uint FreedAdapterChannels;
uint MappedTransferWithoutFlushing;
struct _DEVICE_DESCRIPTION{
uint Version;
uint8 Master;
uint8 ScatterGather;
uint8 DemandMode;
uint8 AutoInitialize;
uint8 Dma32BitAddresses;
uint8 IgnoreCount;
uint8 Reserved1;
uint8 Dma64BitAddresses;
uint BusNumber;
uint DmaChannel;
_INTERFACE_TYPE InterfaceType;
_DMA_WIDTH DmaWidth;
_DMA_SPEED DmaSpeed;
uint MaximumLength;
uint DmaPort;
uint DmaAddressWidth;
uint DmaControllerInstance;
uint DmaRequestLine;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} DeviceAddress;
} DeviceDescription;
uint AdapterChannelMapRegisters;
void** ContiguousBuffers;
uint SuccessfulContiguousAllocations;
uint FailedContiguousAllocations;
uint AllocationLock;
uint AllocationStorage;
}
struct _ADAPTER_OBJECT{
struct _DMA_ADAPTER{
uint16 Version;
uint16 Size;
struct _DMA_OPERATIONS{
uint Size;
PutDmaAdapter* PutDmaAdapter;
AllocateCommonBuffer** AllocateCommonBuffer;
FreeCommonBuffer* FreeCommonBuffer;
AllocateAdapterChannel* AllocateAdapterChannel;
FlushAdapterBuffers* FlushAdapterBuffers;
FreeAdapterChannel* FreeAdapterChannel;
FreeMapRegisters* FreeMapRegisters;
MapTransfer* MapTransfer;
GetDmaAlignment* GetDmaAlignment;
ReadDmaCounter* ReadDmaCounter;
GetScatterGatherList* GetScatterGatherList;
PutScatterGatherList* PutScatterGatherList;
CalculateScatterGatherList* CalculateScatterGatherList;
BuildScatterGatherList* BuildScatterGatherList;
BuildMdlFromScatterGatherList* BuildMdlFromScatterGatherList;
GetDmaAdapterInfo* GetDmaAdapterInfo;
GetDmaTransferInfo* GetDmaTransferInfo;
InitializeDmaTransferContext* InitializeDmaTransferContext;
AllocateCommonBufferEx** AllocateCommonBufferEx;
AllocateAdapterChannelEx* AllocateAdapterChannelEx;
ConfigureAdapterChannel* ConfigureAdapterChannel;
CancelAdapterChannel* CancelAdapterChannel;
MapTransferEx* MapTransferEx;
GetScatterGatherListEx* GetScatterGatherListEx;
BuildScatterGatherListEx* BuildScatterGatherListEx;
FlushAdapterBuffersEx* FlushAdapterBuffersEx;
FreeAdapterObject* FreeAdapterObject;
CancelMappedTransfer* CancelMappedTransfer;
AllocateDomainCommonBuffer* AllocateDomainCommonBuffer;
FlushDmaBuffer* FlushDmaBuffer;
JoinDmaDomain* JoinDmaDomain;
LeaveDmaDomain* LeaveDmaDomain;
GetDmaDomain** GetDmaDomain;
}* DmaOperations;
} DmaAdapter;
struct _ADAPTER_OBJECT* RealAdapterObject;
}
struct _ADD_CONTEXT{
uint DriverStartType;
uint8 LoadDriver;
}
struct _ADJUST_INTERRUPT_TIME_CONTEXT{
uint8 AdjustPerfCounter;
uint KiNumber;
uint64 Adjustment;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} NewCount;
int HalNumber;
int Barrier;
}
struct _ADMINISTRATOR_POWER_POLICY{
_SYSTEM_POWER_STATE MinSleep;
_SYSTEM_POWER_STATE MaxSleep;
uint MinVideoTimeout;
uint MaxVideoTimeout;
uint MinSpindownTimeout;
uint MaxSpindownTimeout;
}
struct _AGGREGATED_PAYLOAD_FILTER{
uint16 MagicValue:12;
uint16 DescriptorVersion:4;
uint16 Size;
uint16 PredicateCount;
uint16 Reserved;
uint64 HashedEventIdBitmap;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ProviderGuid;
uint16 EachEventTableOffset;
uint16 EachEventTableLength;
uint16 PayloadDecoderTableOffset;
uint16 PayloadDecoderTableLength;
uint16 EventFilterTableOffset;
uint16 EventFilterTableLength;
uint16 UNICODEStringTableOffset;
uint16 UNICODEStringTableLength;
uint16 ANSIStringTableOffset;
uint16 ANSIStringTableLength;
struct _EVENT_PAYLOAD_PREDICATE{
uint16 FieldIndex;
uint16 CompareOp;
uint64 Value;
} PredicateTable;
}
struct _AGP_TARGET_BUS_INTERFACE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
SetBusData* SetBusData;
GetBusData* GetBusData;
uint8 CapabilityID;
}
struct _AHC_SERVICE_CLEAR{
_AHC_INFO_CLASS InfoClass;
}
struct _AHC_SERVICE_DATA{
struct _AHC_SERVICE_LOOKUP{
_AHC_INFO_CLASS InfoClass;
uint HintFlags;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
void* ProcessHandle;
uint16 ExeType;
uint16 Padding;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
wchar_t* Environment;
uint EnvironmentSize;
} ;
struct _AHC_SERVICE_UPDATE{
_AHC_INFO_CLASS InfoClass;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
void* Data;
uint DataSize;
} Update;
struct _AHC_SERVICE_DATACACHE{
void* FileHandle;
uint16 ExeType;
uint16 Padding;
uint HintFlags;
void* ProcessHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FileName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Environment;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
uint CustomDataSize;
uint8* CustomData;
} Cache;
struct _AHC_SERVICE_LOOKUP_CDB{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
} LookupCdb;
struct _AHC_SERVICE_CLEAR{
_AHC_INFO_CLASS InfoClass;
} Clear;
struct _AHC_SERVICE_REMOVE{
_AHC_INFO_CLASS ;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
} Remove;
struct _AHC_SERVICE_HWID_QUERY{
uint8 QueryResult;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} HwId;
} HwIdQuery;
int DriverStatus;
void* ParamsOut;
uint ParamsOutSize;
}
struct _AHC_SERVICE_DATACACHE{
void* FileHandle;
uint16 ExeType;
uint16 Padding;
uint HintFlags;
void* ProcessHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FileName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Environment;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
uint CustomDataSize;
uint8* CustomData;
}
struct _AHC_SERVICE_HWID_QUERY{
uint8 QueryResult;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} HwId;
}
struct _AHC_SERVICE_LOOKUP{
_AHC_INFO_CLASS InfoClass;
uint HintFlags;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
void* ProcessHandle;
uint16 ExeType;
uint16 Padding;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
wchar_t* Environment;
uint EnvironmentSize;
}
struct _AHC_SERVICE_LOOKUP_CDB{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
}
struct _AHC_SERVICE_REMOVE{
_AHC_INFO_CLASS ;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
}
struct _AHC_SERVICE_UPDATE{
_AHC_INFO_CLASS InfoClass;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} PackageAlias;
void* FileHandle;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ExeSignature;
void* Data;
uint DataSize;
}
struct _ALPC_BASIC_INFORMATION{
uint Flags;
uint SequenceNo;
void* PortContext;
}
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY{
void* Object;
}* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct {
uint32 QueueType:3;
uint32 QueuePortType:4;
uint32 Canceled:1;
uint32 Ready:1;
uint32 ReleaseMessage:1;
uint32 SharedQuota:1;
uint32 ReplyWaitReply:1;
uint32 OwnerPortReference:1;
uint32 ReserveReference:1;
uint32 ReceiverReference:1;
uint32 ViewAttributeRetrieved:1;
uint32 InDispatch:1;
} s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
}* HandleTable;
void* Handle;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA{
struct _ALPC_HANDLE_TABLE* HandleTable;
void* ContextHandle;
struct _EPROCESS* OwningProcess;
struct _ALPC_PORT* OwnerPort;
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity;
union $EC07C1C8CE165EEF793582D3B20FAFCF u1;
}* SecurityData;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* View;
struct _KALPC_HANDLE_DATA{
uint ObjectType;
uint Count;
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext;
}* HandleData;
union _KALPC_DIRECT_EVENT{
uint Event;
struct $4D527ECE92544168B5228C7BC3E57A97 __s1;
} DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA{
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket;
} WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1;
ULONG Length;
} u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2;
ULONG ZeroInit;
} u2;
struct _CLIENT_ID{
void* ;
} ;
} PortMessage;
}* CloseMessage;
}
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} Header;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY{
uint16 ;
uint16 BaseLow;
union $4729093EE83589A5C42FEEDA1FD4429B HighWord;
} LdtDescriptor;
struct _KIDTENTRY{
uint16 Offset;
uint16 Selector;
uint16 Access;
uint16 ExtendedOffset;
} Int21Descriptor;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ReadyListHead;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SwapListEntry;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} ActiveProcessors;
union {
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0;
int ProcessFlags;
} ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS{
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0;
uint8 ExecuteOptions;
uint8 ExecuteOptionsNV;
} Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct {
uint32 ;
uint32 AccountingFolded:1;
uint32 NewProcessReported:1;
uint32 ExitProcessReported:1;
uint32 ReportCommitChanges:1;
uint32 LastReportMemory:1;
uint32 ForceWakeCharge:1;
uint32 CrossSessionCreate:1;
uint32 NeedsHandleRundown:1;
uint32 RefTraceEnabled:1;
uint32 DisableDynamicCode:1;
uint32 EmptyJobEvaluated:1;
uint32 DefaultPagePriority:3;
uint32 PrimaryTokenFrozen:1;
uint32 ProcessVerifierTarget:1;
uint32 StackRandomizationDisabled:1;
uint32 AffinityPermanent:1;
uint32 AffinityUpdateEnable:1;
uint32 PropagateNode:1;
uint32 ExplicitAffinity:1;
uint32 ProcessExecutionState:2;
uint32 DisallowStrippedImages:1;
uint32 HighEntropyASLREnabled:1;
uint32 ExtensionPointDisable:1;
uint32 ForceRelocateImages:1;
uint32 ProcessStateChangeRequest:2;
uint32 ProcessStateChangeInProgress:1;
uint32 DisallowWin32kSystemCalls:1;
} __s1;
} ___u6;
union {
uint Flags;
struct {
uint32 CreateReported:1;
uint32 NoDebugInherit:1;
uint32 ProcessExiting:1;
uint32 ProcessDelete:1;
uint32 ControlFlowGuardEnabled:1;
uint32 VmDeleted:1;
uint32 OutswapEnabled:1;
uint32 Outswapped:1;
uint32 FailFastOnCommitFail:1;
uint32 Wow64VaSpace4Gb:1;
uint32 AddressSpaceInitialized:2;
uint32 SetTimerResolution:1;
uint32 BreakOnTermination:1;
uint32 DeprioritizeViews:1;
uint32 WriteWatch:1;
uint32 ProcessInSession:1;
uint32 OverrideAddressSpace:1;
uint32 HasAddressSpace:1;
uint32 LaunchPrefetched:1;
uint32 Background:1;
uint32 VmTopDown:1;
uint32 ImageNotifyDone:1;
uint32 PdeUpdateNeeded:1;
uint32 VdmAllowed:1;
uint32 ProcessRundown:1;
uint32 ProcessInserted:1;
uint32 DefaultIoPriority:3;
uint32 ProcessSelfDelete:1;
uint32 SetTimerResolutionLink:1;
} __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE{
union {
struct $4E72BEF561229C205E949B0F7BD0A0C9 s1;
int64 Value;
} u1;
} State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}
struct _ALPC_COMPLETION_LIST_DATABASE{
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
uint Count;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
}
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE{
union {
struct {
uint64 Head:24;
uint64 Tail:24;
uint64 ActiveThreadCount:16;
} s1;
int64 Value;
} u1;
} State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} UserLock;
uint64 EndMagic;
}
struct _ALPC_COMPLETION_LIST_STATE{
union {
struct {
uint64 Head:24;
uint64 Tail:24;
uint64 ActiveThreadCount:16;
} s1;
int64 Value;
} u1;
}
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint PacketType;
void* KeyContext;
void* ApcContext;
int IoStatus;
uint IoStatusInformation;
MiniPacketCallback* MiniPacketCallback;
void* Context;
uint8 Allocated;
}* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* Lookaside;
} Entry;
}
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint PacketType;
void* KeyContext;
void* ApcContext;
int IoStatus;
uint IoStatusInformation;
MiniPacketCallback* MiniPacketCallback;
void* Context;
uint8 Allocated;
}* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER{
struct _LIST_ENTRY ListEntry;
uint PacketType;
void* KeyContext;
void* ApcContext;
int IoStatus;
uint IoStatusInformation;
MiniPacketCallback* MiniPacketCallback;
void* Context;
uint8 Allocated;
}* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* Lookaside;
} Entry;
}* Lookaside;
}
struct _ALPC_CONTEXT_ATTR{
void* PortContext;
void* MessageContext;
uint Sequence;
uint MessageId;
uint CallbackId;
}
struct _ALPC_DATA_VIEW_ATTR{
uint Flags;
void* SectionHandle;
void* ViewBase;
uint ViewSize;
}
struct _ALPC_DEFERRED_MESSAGE_CONTEXT{
void* TargetPortReference;
void* PortObjectReference;
}
struct _ALPC_DIRECT_ATTR{
void* Event;
}
struct _ALPC_DISPATCH_CONTEXT{
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct {
uint32 QueueType:3;
uint32 QueuePortType:4;
uint32 Canceled:1;
uint32 Ready:1;
uint32 ReleaseMessage:1;
uint32 SharedQuota:1;
uint32 ReplyWaitReply:1;
uint32 OwnerPortReference:1;
uint32 ReserveReference:1;
uint32 ReceiverReference:1;
uint32 ViewAttributeRetrieved:1;
uint32 InDispatch:1;
} s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
}* HandleTable;
void* Handle;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA{
struct _ALPC_HANDLE_TABLE* HandleTable;
void* ContextHandle;
struct _EPROCESS* OwningProcess;
struct _ALPC_PORT* OwnerPort;
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity;
union $EC07C1C8CE165EEF793582D3B20FAFCF u1;
}* SecurityData;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* View;
struct _KALPC_HANDLE_DATA{
uint ObjectType;
uint Count;
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext;
}* HandleData;
union _KALPC_DIRECT_EVENT{
uint Event;
struct $4D527ECE92544168B5228C7BC3E57A97 __s1;
} DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA{
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket;
} WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1;
ULONG Length;
} u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2;
ULONG ZeroInit;
} u2;
struct _CLIENT_ID{
void* ;
} ;
} PortMessage;
}* Message;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY{
void* Object;
}* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _M128A FloatRegisters;
}* StateSaveArea;
struct _KSCHEDULING_GROUP{
struct _KSCHEDULING_GROUP_POLICY Policy;
uint RelativeWeight;
uint ChildMinRate;
uint ChildMinWeight;
uint ChildTotalWeight;
uint64 QueryHistoryTimeStamp;
int64 NotificationCycles;
int64 MaxQuotaLimitCycles;
int64 MaxQuotaCyclesRemaining;
union $7E4164C3926CB86377AC4CFD3751C28A ___u9;
struct _KDPC* NotificationDpc;
struct _LIST_ENTRY ChildList;
struct _KSCHEDULING_GROUP* Parent;
struct _KSCB PerProcessor;
}* SchedulingGroup;
union _KWAIT_STATUS_REGISTER{
uint8 Flags;
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1;
} WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ExitTime;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PostBlockList;
struct {
void* ForwardLinkShadow;
void* StartAddress;
} __s1;
} ___u4;
union {
struct _TERMINATION_PORT{
struct _TERMINATION_PORT* Next;
void* Port;
}* TerminationPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
} KeyedWaitSemaphore;
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
} AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct {
uint32 ImpersonationLevel:2;
uint32 EffectiveOnly:1;
} __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct {
uint32 Terminated:1;
uint32 ThreadInserted:1;
uint32 HideFromDebugger:1;
uint32 ActiveImpersonationInfo:1;
uint32 HardErrorsAreDisabled:1;
uint32 BreakOnTermination:1;
uint32 SkipCreationMsg:1;
uint32 SkipTerminationMsg:1;
uint32 CopyTokenOnOpen:1;
uint32 ThreadIoPriority:3;
uint32 ThreadPagePriority:3;
uint32 RundownFail:1;
uint32 UmsForceQueueTermination:1;
uint32 IndirectCpuSets:1;
uint32 DisableDynamicCodeOptOut:1;
uint32 ExplicitCaseSensitivity:1;
uint32 ReservedCrossThreadFlags:12;
} __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct {
uint32 ActiveExWorker:1;
uint32 MemoryMaker:1;
uint32 StoreLockThread:2;
uint32 ClonedThread:1;
uint32 KeyedEventInUse:1;
uint32 SelfTerminate:1;
uint32 RespectIoPriority:1;
uint32 ActivePageLists:1;
uint32 ReservedSameThreadPassiveFlags:23;
} __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct {
uint8 OwnsProcessAddressSpaceExclusive:1;
uint8 OwnsProcessAddressSpaceShared:1;
uint8 HardFaultBehavior:1;
uint8 StartAddressInvalid:1;
uint8 EtwCalloutActive:1;
uint8 SuppressSymbolLoad:1;
uint8 Prefetching:1;
uint8 OwnsVadExclusive:1;
uint8 SystemPagePriorityActive:1;
uint8 SystemPagePriority:3;
} __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} Event;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} JobLinks;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProcessListHead;
struct _ERESOURCE{
struct _LIST_ENTRY ;
} JobLock;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalUserTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalKernelTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalCycleTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ThisPeriodTotalUserTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} PerProcessUserTimeLimit;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _JOB_ACCESS_STATE{
union $4D9FF25A0471468DBB67647A63600223 Data;
struct _SECURITY_SUBJECT_CONTEXT CapturedContext;
}* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS{
uint64 BytesRead;
uint64 BytesWritten;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 FlushOperationCount;
} DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} EffectiveAffinity;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* TargetThread;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* TargetPort;
union _KALPC_DIRECT_EVENT{
uint Event;
struct {
uint32 ;
uint32 Reserved:31;
} __s1;
} DirectEvent;
uint Flags;
uint16 TotalLength;
uint16 Type;
uint16 DataInfoOffset;
uint8 SignalCompletion;
uint8 PostedToCompletionList;
}
struct _ALPC_HANDLE_ATTR{
union {
uint Flags;
struct {
uint32 Reserved0:16;
uint32 SameAccess:1;
uint32 SameAttributes:1;
uint32 Indirect:1;
uint32 Inherit:1;
uint32 Reserved1:12;
} __s1;
} ___u0;
union {
void* Handle;
struct _ALPC_HANDLE_ATTR32{
union {
uint Flags;
struct $2B1E20AF9DBFF65B03BD756E2C7B1060 __s1;
} ___u0;
uint Handle;
uint ObjectType;
union {
uint DesiredAccess;
uint GrantedAccess;
} ___u3;
}* HandleAttrArray;
} ___u1;
union {
uint ObjectType;
uint HandleCount;
} ___u2;
union {
uint DesiredAccess;
uint GrantedAccess;
} ___u3;
}
struct _ALPC_HANDLE_ATTR32{
union {
uint Flags;
struct {
uint32 Reserved0:16;
uint32 SameAccess:1;
uint32 SameAttributes:1;
uint32 Indirect:1;
uint32 Inherit:1;
uint32 Reserved1:12;
} __s1;
} ___u0;
uint Handle;
uint ObjectType;
union {
uint DesiredAccess;
uint GrantedAccess;
} ___u3;
}
struct _ALPC_HANDLE_ENTRY{
void* Object;
}
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY{
void* Object;
}* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
}
struct _ALPC_LOG_CALLBACK{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
LogRoutine* LogRoutine;
}
struct _ALPC_LOG_ENTRY{
struct _CLIENT_ID{
void* ;
} Thread;
uint Type;
void* Data;
}
struct _ALPC_LOG_ENTRY_RECEIVE_MESSAGE{
uint MessageId;
}
struct _ALPC_LOG_ENTRY_SEND_MESSAGE{
uint ;
}
struct _ALPC_LOG_ENTRY_UNWAIT{
int ;
}
struct _ALPC_LOG_ENTRY_WAIT_FOR_NEW_MESSAGE{
uint ;
wchar_t PortName;
}
struct _ALPC_LOG_ENTRY_WAIT_FOR_REPLY{
uint MessageId;
}
struct _ALPC_LOG_TYPE_CLOSE_PORT{
uint ;
}
struct _ALPC_LOG_TYPE_CONNECT_FAIL{
uint ;
int Status;
}
struct _ALPC_LOG_TYPE_CONNECT_REQUEST{
uint MessageId;
}
struct _ALPC_LOG_TYPE_CONNECT_SUCCESS{
uint ;
}
struct _ALPC_MESSAGE_ATTRIBUTES{
uint ;
uint ValidAttributes;
}
struct _ALPC_MESSAGE_HANDLE_INFORMATION{
uint Index;
uint Flags;
uint Handle;
uint ObjectType;
uint GrantedAccess;
}
struct _ALPC_MESSAGE_LOG{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} HashEntry;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct {
uint32 QueueType:3;
uint32 QueuePortType:4;
uint32 Canceled:1;
uint32 Ready:1;
uint32 ReleaseMessage:1;
uint32 SharedQuota:1;
uint32 ReplyWaitReply:1;
uint32 OwnerPortReference:1;
uint32 ReserveReference:1;
uint32 ReceiverReference:1;
uint32 ViewAttributeRetrieved:1;
uint32 InDispatch:1;
} s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
}* HandleTable;
void* Handle;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA{
struct _ALPC_HANDLE_TABLE* HandleTable;
void* ContextHandle;
struct _EPROCESS* OwningProcess;
struct _ALPC_PORT* OwnerPort;
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity;
union $EC07C1C8CE165EEF793582D3B20FAFCF u1;
}* SecurityData;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* View;
struct _KALPC_HANDLE_DATA{
uint ObjectType;
uint Count;
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext;
}* HandleData;
union _KALPC_DIRECT_EVENT{
uint Event;
struct $4D527ECE92544168B5228C7BC3E57A97 __s1;
} DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA{
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket;
} WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1;
ULONG Length;
} u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2;
ULONG ZeroInit;
} u2;
struct _CLIENT_ID{
void* ;
} ;
} PortMessage;
}* Message;
uint MessageId;
uint Valid;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SnapshotListHead;
}
struct _ALPC_MESSAGE_SNAPSHOT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
uint State;
int ReferenceMask;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* QueuePort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _M128A FloatRegisters;
}* StateSaveArea;
struct _KSCHEDULING_GROUP{
struct _KSCHEDULING_GROUP_POLICY Policy;
uint RelativeWeight;
uint ChildMinRate;
uint ChildMinWeight;
uint ChildTotalWeight;
uint64 QueryHistoryTimeStamp;
int64 NotificationCycles;
int64 MaxQuotaLimitCycles;
int64 MaxQuotaCyclesRemaining;
union $7E4164C3926CB86377AC4CFD3751C28A ___u9;
struct _KDPC* NotificationDpc;
struct _LIST_ENTRY ChildList;
struct _KSCHEDULING_GROUP* Parent;
struct _KSCB PerProcessor;
}* SchedulingGroup;
union _KWAIT_STATUS_REGISTER{
uint8 Flags;
struct $6E3F869BADF0AE2AE79CB2D8108FC64A __s1;
} WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ExitTime;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PostBlockList;
struct {
void* ForwardLinkShadow;
void* StartAddress;
} __s1;
} ___u4;
union {
struct _TERMINATION_PORT{
struct _TERMINATION_PORT* Next;
void* Port;
}* TerminationPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
} KeyedWaitSemaphore;
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER ;
} AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct {
uint32 ImpersonationLevel:2;
uint32 EffectiveOnly:1;
} __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct {
uint32 Terminated:1;
uint32 ThreadInserted:1;
uint32 HideFromDebugger:1;
uint32 ActiveImpersonationInfo:1;
uint32 HardErrorsAreDisabled:1;
uint32 BreakOnTermination:1;
uint32 SkipCreationMsg:1;
uint32 SkipTerminationMsg:1;
uint32 CopyTokenOnOpen:1;
uint32 ThreadIoPriority:3;
uint32 ThreadPagePriority:3;
uint32 RundownFail:1;
uint32 UmsForceQueueTermination:1;
uint32 IndirectCpuSets:1;
uint32 DisableDynamicCodeOptOut:1;
uint32 ExplicitCaseSensitivity:1;
uint32 ReservedCrossThreadFlags:12;
} __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct {
uint32 ActiveExWorker:1;
uint32 MemoryMaker:1;
uint32 StoreLockThread:2;
uint32 ClonedThread:1;
uint32 KeyedEventInUse:1;
uint32 SelfTerminate:1;
uint32 RespectIoPriority:1;
uint32 ActivePageLists:1;
uint32 ReservedSameThreadPassiveFlags:23;
} __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct {
uint8 OwnsProcessAddressSpaceExclusive:1;
uint8 OwnsProcessAddressSpaceShared:1;
uint8 HardFaultBehavior:1;
uint8 StartAddressInvalid:1;
uint8 EtwCalloutActive:1;
uint8 SuppressSymbolLoad:1;
uint8 Prefetching:1;
uint8 OwnsVadExclusive:1;
uint8 SystemPagePriorityActive:1;
uint8 SystemPagePriority:3;
} __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT{
struct _DISPATCHER_HEADER ;
} Event;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} JobLinks;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProcessListHead;
struct _ERESOURCE{
struct _LIST_ENTRY ;
} JobLock;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalUserTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalKernelTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TotalCycleTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ThisPeriodTotalUserTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} PerProcessUserTimeLimit;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _JOB_ACCESS_STATE{
union $4D9FF25A0471468DBB67647A63600223 Data;
struct _SECURITY_SUBJECT_CONTEXT CapturedContext;
}* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS{
uint64 BytesRead;
uint64 BytesWritten;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 FlushOperationCount;
} DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} EffectiveAffinity;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* WaitingThread;
void* ClientContext;
void* ServerContext;
void* ReturnAddress;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761{
CSHORT DataLength;
CSHORT TotalLength;
} s1;
ULONG Length;
} u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0{
CSHORT Type;
CSHORT DataInfoOffset;
} s2;
ULONG ZeroInit;
} u2;
struct _CLIENT_ID{
void* ;
} ;
} PortMessage;
}
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY{
void* Object;
}* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct $40D38832C2761F9E4FAAB4DBAA54BD10 s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT* OwnerPort;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* Handle;
struct _KALPC_MESSAGE* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA* SecurityData;
struct _KALPC_VIEW* View;
struct _KALPC_HANDLE_DATA* HandleData;
union _KALPC_DIRECT_EVENT DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD Tcb;
union _LARGE_INTEGER CreateTime;
union $86EDFF8F3255E8D5942210EACE9B5270 ___u2;
void* ChargeOnlySession;
union $8AB20302AE8F0FAB1664C14CAF6EE8F7 ___u4;
union $7615A1CCCFB6FA5CF276810BA3C9BD6C ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY ActiveTimerListHead;
struct _CLIENT_ID Cid;
union $0C382D283C97C56CABCE5365E406B33D ___u9;
union _PS_CLIENT_SECURITY_CONTEXT ClientSecurity;
struct _LIST_ENTRY IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY ThreadListEntry;
struct _EX_RUNDOWN_REF RundownProtect;
struct _EX_PUSH_LOCK ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union $32E3DFE505F3C2BCEAB393E367BD3A9E ___u21;
union $07F055B842A8A3729F87700B15A1AF62 ___u22;
union $EED492FABA83FCDC1852E93B7F83D3DE ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union $BCDEC18C25A84109137EA1753A3327D2 ___u29;
struct _LIST_ENTRY AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY BoostList;
struct _LIST_ENTRY DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY CmCallbackListHead;
struct _GUID* ActivityId;
struct _SINGLE_LIST_ENTRY SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES* EnergyValues;
void* CmDbgInfo;
union $5163EFD1C9AF4E067A77641DC349F5DD ___u54;
struct _EJOB* Silo;
struct _UNICODE_STRING* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6 u2;
struct _CLIENT_ID ;
} PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} Header;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY{
uint16 ;
uint16 BaseLow;
union $4729093EE83589A5C42FEEDA1FD4429B HighWord;
} LdtDescriptor;
struct _KIDTENTRY{
uint16 Offset;
uint16 Selector;
uint16 Access;
uint16 ExtendedOffset;
} Int21Descriptor;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ReadyListHead;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SwapListEntry;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} ActiveProcessors;
union {
struct $2270EEC0AA7D5A95D8241B5905E94C92 __s0;
int ProcessFlags;
} ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS{
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 __s0;
uint8 ExecuteOptions;
uint8 ExecuteOptionsNV;
} Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct {
uint32 ;
uint32 AccountingFolded:1;
uint32 NewProcessReported:1;
uint32 ExitProcessReported:1;
uint32 ReportCommitChanges:1;
uint32 LastReportMemory:1;
uint32 ForceWakeCharge:1;
uint32 CrossSessionCreate:1;
uint32 NeedsHandleRundown:1;
uint32 RefTraceEnabled:1;
uint32 DisableDynamicCode:1;
uint32 EmptyJobEvaluated:1;
uint32 DefaultPagePriority:3;
uint32 PrimaryTokenFrozen:1;
uint32 ProcessVerifierTarget:1;
uint32 StackRandomizationDisabled:1;
uint32 AffinityPermanent:1;
uint32 AffinityUpdateEnable:1;
uint32 PropagateNode:1;
uint32 ExplicitAffinity:1;
uint32 ProcessExecutionState:2;
uint32 DisallowStrippedImages:1;
uint32 HighEntropyASLREnabled:1;
uint32 ExtensionPointDisable:1;
uint32 ForceRelocateImages:1;
uint32 ProcessStateChangeRequest:2;
uint32 ProcessStateChangeInProgress:1;
uint32 DisallowWin32kSystemCalls:1;
} __s1;
} ___u6;
union {
uint Flags;
struct {
uint32 CreateReported:1;
uint32 NoDebugInherit:1;
uint32 ProcessExiting:1;
uint32 ProcessDelete:1;
uint32 ControlFlowGuardEnabled:1;
uint32 VmDeleted:1;
uint32 OutswapEnabled:1;
uint32 Outswapped:1;
uint32 FailFastOnCommitFail:1;
uint32 Wow64VaSpace4Gb:1;
uint32 AddressSpaceInitialized:2;
uint32 SetTimerResolution:1;
uint32 BreakOnTermination:1;
uint32 DeprioritizeViews:1;
uint32 WriteWatch:1;
uint32 ProcessInSession:1;
uint32 OverrideAddressSpace:1;
uint32 HasAddressSpace:1;
uint32 LaunchPrefetched:1;
uint32 Background:1;
uint32 VmTopDown:1;
uint32 ImageNotifyDone:1;
uint32 PdeUpdateNeeded:1;
uint32 VdmAllowed:1;
uint32 ProcessRundown:1;
uint32 ProcessInserted:1;
uint32 DefaultIoPriority:3;
uint32 ProcessSelfDelete:1;
uint32 SetTimerResolutionLink:1;
} __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY{
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ListEntry;
struct _IO_MINI_COMPLETION_PACKET_USER{
struct _LIST_ENTRY ListEntry;
uint PacketType;
void* KeyContext;
void* ApcContext;
int IoStatus;
uint IoStatusInformation;
MiniPacketCallback* MiniPacketCallback;
void* Context;
uint8 Allocated;
}* Packet;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* Lookaside;
} Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
}* ;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
}* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} CompletionListLock;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER{
uint64 StartMagic;
uint TotalSize;
uint ListOffset;
uint ListSize;
uint BitmapOffset;
uint BitmapSize;
uint DataOffset;
uint DataSize;
uint AttributeFlags;
uint AttributeSize;
struct _ALPC_COMPLETION_LIST_STATE{
union $E1067AE6A1E7F9D323832C08491E14C9 u1;
} State;
uint LastMessageId;
uint LastCallbackId;
uint PostCount;
uint ReturnCount;
uint LogSequenceNumber;
struct _RTL_SRWLOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} UserLock;
uint64 EndMagic;
}* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
} ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct {
uint32 Initialized:1;
uint32 Type:2;
uint32 ConnectionPending:1;
uint32 ConnectionRefused:1;
uint32 Disconnected:1;
uint32 Closed:1;
uint32 NoFlushOnClose:1;
uint32 ReturnExtendedInfo:1;
uint32 Waitable:1;
uint32 DynamicSecurity:1;
uint32 Wow64CompletionList:1;
uint32 Lpc:1;
uint32 LpcToLpc:1;
uint32 HasCompletionList:1;
uint32 HadCompletionList:1;
uint32 EnableCompletionList:1;
} s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* PortQueue;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* WaitingThread;
union {
struct {
uint32 QueueType:3;
uint32 QueuePortType:4;
uint32 Canceled:1;
uint32 Ready:1;
uint32 ReleaseMessage:1;
uint32 SharedQuota:1;
uint32 ReplyWaitReply:1;
uint32 OwnerPortReference:1;
uint32 ReserveReference:1;
uint32 ReceiverReference:1;
uint32 ViewAttributeRetrieved:1;
uint32 InDispatch:1;
} s1;
uint State;
} u1;
int SequenceNo;
union {
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* QuotaProcess;
void* QuotaBlock;
} ___u6;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelSequencePort;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CancelListEntry;
struct _KALPC_RESERVE{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
}* HandleTable;
void* Handle;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* Message;
int Active;
}* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES{
void* ClientContext;
void* ServerContext;
void* PortContext;
void* CancelPortContext;
struct _KALPC_SECURITY_DATA{
struct _ALPC_HANDLE_TABLE* HandleTable;
void* ContextHandle;
struct _EPROCESS* OwningProcess;
struct _ALPC_PORT* OwnerPort;
struct _SECURITY_CLIENT_CONTEXT DynamicSecurity;
union $EC07C1C8CE165EEF793582D3B20FAFCF u1;
}* SecurityData;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* View;
struct _KALPC_HANDLE_DATA{
uint ObjectType;
uint Count;
struct _OB_DUPLICATE_OBJECT_STATE DuplicateContext;
}* HandleData;
union _KALPC_DIRECT_EVENT{
uint Event;
struct $4D527ECE92544168B5228C7BC3E57A97 __s1;
} DirectEvent;
struct _KALPC_WORK_ON_BEHALF_DATA{
struct _ALPC_WORK_ON_BEHALF_TICKET Ticket;
} WorkOnBehalfData;
} MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ServerCommunicationPort;
struct _ALPC_PORT{
struct _LIST_ENTRY PortListEntry;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _EPROCESS* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT StaticSecurity;
struct _EX_PUSH_LOCK IncomingQueueLock;
struct _LIST_ENTRY MainQueue;
struct _LIST_ENTRY LargeMessageQueue;
struct _EX_PUSH_LOCK PendingQueueLock;
struct _LIST_ENTRY PendingQueue;
struct _EX_PUSH_LOCK DirectQueueLock;
struct _LIST_ENTRY DirectQueue;
struct _EX_PUSH_LOCK WaitQueueLock;
struct _LIST_ENTRY WaitQueue;
union $88D6E373BE80179858F4516B453B5B0E ___u17;
struct _ALPC_PORT_ATTRIBUTES PortAttributes;
struct _EX_PUSH_LOCK ResourceListLock;
struct _LIST_ENTRY ResourceListHead;
struct _EX_PUSH_LOCK PortObjectLock;
struct _ALPC_COMPLETION_LIST* CompletionList;
struct _CALLBACK_OBJECT* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK* ReferenceNoWait;
union $3BE6C8A17BF3A407A973D2F8D322E6D7 u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ClientCommunicationPort;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CommunicationList;
struct _ALPC_HANDLE_TABLE{
struct _ALPC_HANDLE_ENTRY* ;
uint TotalHandles;
uint Flags;
struct _EX_PUSH_LOCK Lock;
} HandleTable;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CloseMessage;
}* CommunicationInfo;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* ConnectionPort;
struct _ETHREAD{
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
} Tcb;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
union {
union _LARGE_INTEGER ExitTime;
struct _LIST_ENTRY KeyedWaitChain;
} ___u2;
void* ChargeOnlySession;
union {
struct _LIST_ENTRY PostBlockList;
struct $03D8BF64EDBF31DF6271812E8E91AA90 __s1;
} ___u4;
union {
struct _TERMINATION_PORT* TerminationPort;
struct _ETHREAD* ReaperLink;
void* KeyedWaitValue;
} ___u5;
uint ActiveTimerListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveTimerListHead;
struct _CLIENT_ID{
void* ;
} Cid;
union {
struct _KSEMAPHORE KeyedWaitSemaphore;
struct _KSEMAPHORE AlpcWaitSemaphore;
} ___u9;
union _PS_CLIENT_SECURITY_CONTEXT{
uint ImpersonationData;
void* ImpersonationToken;
struct $1A30BD48594F07D7F88BEB957A5A6000 __s2;
} ClientSecurity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} IrpList;
uint TopLevelIrp;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceToVerify;
void* Win32StartAddress;
void* LegacyPowerObject;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListEntry;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ThreadLock;
uint ReadClusterSize;
int MmLockOrdering;
union {
uint CrossThreadFlags;
struct $EA0E2B7A02475792EFF5832EDD125F8B __s1;
} ___u21;
union {
uint SameThreadPassiveFlags;
struct $91ED664B87E64AC5C771B1DF262577BA __s1;
} ___u22;
union {
uint SameThreadApcFlags;
struct $BEAA8316AFBC3276284AB117A4289881 __s1;
} ___u23;
uint8 CacheManagerActive;
uint8 DisablePageFaultClustering;
uint8 ActiveFaultCount;
uint8 LockOrderState;
uint AlpcMessageId;
union {
void* AlpcMessage;
uint AlpcReceiveAttributeSet;
} ___u29;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} AlpcWaitListEntry;
int ExitStatus;
uint CacheManagerCount;
uint IoBoostCount;
uint IoQoSBoostCount;
uint IoQoSThrottleCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BoostList;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DeboostList;
uint BoostListLock;
uint IrpListLock;
void* ReservedForSynchTracking;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} CmCallbackListHead;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* ActivityId;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SeLearningModeListHead;
void* VerifierContext;
uint KernelStackReference;
void* AdjustedClientToken;
void* WorkOnBehalfThread;
struct _PS_PROPERTY_SET{
struct _LIST_ENTRY ListHead;
uint Lock;
} PropertySet;
void* PicoContext;
uint UserFsBase;
uint UserGsBase;
struct _THREAD_ENERGY_VALUES{
uint64 Cycles;
}* EnergyValues;
void* CmDbgInfo;
union {
uint SelectedCpuSets;
uint* SelectedCpuSetsIndirect;
} ___u54;
struct _EJOB{
struct _KEVENT Event;
struct _LIST_ENTRY JobLinks;
struct _LIST_ENTRY ProcessListHead;
struct _ERESOURCE JobLock;
union _LARGE_INTEGER TotalUserTime;
union _LARGE_INTEGER TotalKernelTime;
union _LARGE_INTEGER TotalCycleTime;
union _LARGE_INTEGER ThisPeriodTotalUserTime;
union _LARGE_INTEGER ThisPeriodTotalKernelTime;
uint64 TotalContextSwitches;
uint TotalPageFaultCount;
uint TotalProcesses;
uint ActiveProcesses;
uint TotalTerminatedProcesses;
union _LARGE_INTEGER PerProcessUserTimeLimit;
union _LARGE_INTEGER PerJobUserTimeLimit;
uint MinimumWorkingSetSize;
uint MaximumWorkingSetSize;
uint LimitFlags;
uint ActiveProcessLimit;
struct _KAFFINITY_EX Affinity;
struct _JOB_ACCESS_STATE* AccessState;
void* AccessStateQuotaReference;
uint UIRestrictionsClass;
uint EndOfJobTimeAction;
void* CompletionPort;
void* CompletionKey;
uint64 CompletionCount;
uint SessionId;
uint SchedulingClass;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
struct _PROCESS_DISK_COUNTERS DiskIoInfo;
uint ProcessMemoryLimit;
uint JobMemoryLimit;
uint JobTotalMemoryLimit;
uint PeakProcessMemoryUsed;
uint PeakJobMemoryUsed;
struct _KAFFINITY_EX EffectiveAffinity;
union _LARGE_INTEGER EffectivePerProcessUserTimeLimit;
uint EffectiveMinimumWorkingSetSize;
uint EffectiveMaximumWorkingSetSize;
uint EffectiveProcessMemoryLimit;
struct _EJOB* EffectiveProcessMemoryLimitJob;
struct _EJOB* EffectivePerProcessUserTimeLimitJob;
struct _EJOB* EffectiveNetIoRateLimitJob;
struct _EJOB* EffectiveHeapAttributionJob;
uint EffectiveLimitFlags;
uint EffectiveSchedulingClass;
uint EffectiveFreezeCount;
uint EffectiveBackgroundCount;
uint EffectiveSwapCount;
uint EffectiveNotificationLimitCount;
uint8 EffectivePriorityClass;
uint8 PriorityClass;
uint8 NestingDepth;
uint8 Reserved1;
}* Silo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ThreadName;
uint ReadyTime;
}* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE{
union _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B{
struct _PORT_MESSAGE__$4EBEB1676D792DDF3923F32E76E5BE5B__$6C8CBE65BF7A4262EFF6621133D95761 s1;
ULONG Length;
} u1;
union _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6{
struct _PORT_MESSAGE__$06AD8C8F9C754E7AB89541C43F1D35F6__$F0E1DFBA26AABCCA630D04E70B9C03C0 s2;
ULONG ZeroInit;
} u2;
struct _CLIENT_ID{
void* ;
} ;
} PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}
struct _ALPC_PORT_ASSOCIATE_COMPLETION_PORT{
void* CompletionKey;
void* CompletionPort;
}
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
} SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
}
struct _ALPC_PORT_CALLBACK_INFORMATION{
void* CallbackObject;
void* Context;
}
struct _ALPC_PORT_COMPLETION_LIST_INFORMATION{
void* Buffer;
uint Size;
uint ConcurrencyCount;
uint AttributeFlags;
}
struct _ALPC_PORT_MESSAGE_ZONE_INFORMATION{
void* Buffer;
uint Size;
}
struct _ALPC_PROCESS_CONTEXT{
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ViewListHead;
uint PagedPoolQuotaCache;
}
struct _ALPC_SECURITY_ATTR{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE{
DWORD Length;
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
BOOLEAN EffectiveOnly;
}* QoS;
void* ContextHandle;
}
struct _ALPC_SERVER_INFORMATION{
union {
struct {
void* ThreadHandle;
} In;
struct {
uint8 ThreadBlocked;
void* ConnectedProcessId;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ConnectionPortName;
} Out;
} ___u0;
}
struct _ALPC_TOKEN_ATTR{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} ;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} AuthenticationId;
struct _LUID{
DWORD LowPart;
LONG HighPart;
} ModifiedId;
}
struct _ALPC_VIEW_SEARCH_CONTEXT{
void* Address;
struct _KALPC_VIEW{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ViewListEntry;
struct _KALPC_REGION{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegionListEntry;
struct _KALPC_SECTION{
void* SectionObject;
uint Size;
struct _ALPC_HANDLE_TABLE* HandleTable;
void* SectionHandle;
struct _EPROCESS* OwnerProcess;
struct _ALPC_PORT* OwnerPort;
union $0162C4737AB11A67EA208E698973BEED u1;
uint NumberOfRegions;
struct _LIST_ENTRY RegionListHead;
}* Section;
uint Offset;
uint Size;
uint ViewSize;
union {
struct $F014C0A758420810DE3C33759D3E14FE s1;
} u1;
uint NumberOfViews;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ViewListHead;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* ReadOnlyView;
struct _KALPC_VIEW{
struct _LIST_ENTRY ViewListEntry;
struct _KALPC_REGION* Region;
struct _ALPC_PORT* OwnerPort;
struct _EPROCESS* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union $350BAB9B07E839D8A1E6DC65E0DB800E u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY ProcessViewListEntry;
}* ReadWriteView;
}* Region;
struct _ALPC_PORT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PortListEntry;
struct _ALPC_COMMUNICATION_INFO{
struct _ALPC_PORT* ConnectionPort;
struct _ALPC_PORT* ServerCommunicationPort;
struct _ALPC_PORT* ClientCommunicationPort;
struct _LIST_ENTRY CommunicationList;
struct _ALPC_HANDLE_TABLE HandleTable;
struct _KALPC_MESSAGE* CloseMessage;
}* CommunicationInfo;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE{
uint ;
uint Size;
uint ActiveCount;
uint PendingNullCount;
uint PendingCheckCompletionListCount;
uint PendingDelete;
struct _SINGLE_LIST_ENTRY FreeListHead;
void* CompletionPort;
void* CompletionKey;
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry;
}* CompletionPacketLookaside;
void* PortContext;
struct _SECURITY_CLIENT_CONTEXT{
struct _SECURITY_QUALITY_OF_SERVICE ;
} StaticSecurity;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} IncomingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} MainQueue;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LargeMessageQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PendingQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} PendingQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} DirectQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DirectQueue;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} WaitQueueLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WaitQueue;
union {
struct _KSEMAPHORE* ;
struct _KEVENT* DummyEvent;
} ___u17;
struct _ALPC_PORT_ATTRIBUTES{
uint Flags;
struct _SECURITY_QUALITY_OF_SERVICE SecurityQos;
uint MaxMessageLength;
uint MemoryBandwidth;
uint MaxPoolUsage;
uint MaxSectionSize;
uint MaxViewSize;
uint MaxTotalSectionSize;
uint DupObjectTypes;
} PortAttributes;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ResourceListLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceListHead;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} PortObjectLock;
struct _ALPC_COMPLETION_LIST{
struct _LIST_ENTRY Entry;
struct _EPROCESS* OwnerProcess;
struct _EX_PUSH_LOCK CompletionListLock;
struct _MDL* Mdl;
void* UserVa;
void* UserLimit;
void* DataUserVa;
void* SystemVa;
uint TotalSize;
struct _ALPC_COMPLETION_LIST_HEADER* Header;
void* List;
uint ListSize;
void* Bitmap;
uint BitmapSize;
void* Data;
uint DataSize;
uint BitmapLimit;
uint BitmapNextHint;
uint ConcurrencyCount;
uint AttributeFlags;
uint AttributeSize;
}* CompletionList;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
void* CallbackContext;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} CanceledQueue;
int SequenceNo;
int ReferenceNo;
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK{
struct _KEVENT ;
int DesiredReferenceNo;
}* ReferenceNoWait;
union {
struct $0FABBAB89B4942942836DBD8B35C9423 s1;
uint State;
} u1;
struct _ALPC_PORT* TargetQueuePort;
struct _ALPC_PORT* TargetSequencePort;
struct _KALPC_MESSAGE{
struct _LIST_ENTRY Entry;
struct _ALPC_PORT* PortQueue;
struct _ALPC_PORT* OwnerPort;
struct _ETHREAD* WaitingThread;
union $EE0F50013E9027E6CF0CFCF452353101 u1;
int SequenceNo;
union $1ADE7DDF238903B210BDB4D394452192 ___u6;
struct _ALPC_PORT* CancelSequencePort;
struct _ALPC_PORT* CancelQueuePort;
int CancelSequenceNo;
struct _LIST_ENTRY CancelListEntry;
struct _KALPC_RESERVE* Reserve;
struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes;
void* DataUserVa;
struct _ALPC_COMMUNICATION_INFO* CommunicationInfo;
struct _ALPC_PORT* ConnectionPort;
struct _ETHREAD* ServerThread;
void* WakeReference;
void* ExtensionBuffer;
uint ExtensionBufferSize;
struct _PORT_MESSAGE PortMessage;
}* CachedMessage;
uint MainQueueLength;
uint LargeMessageQueueLength;
uint PendingQueueLength;
uint DirectQueueLength;
uint CanceledQueueLength;
uint WaitQueueLength;
}* OwnerPort;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* OwnerProcess;
void* Address;
uint Size;
void* SecureViewHandle;
void* WriteAccessHandle;
union {
struct {
uint32 WriteAccess:1;
uint32 AutoRelease:1;
uint32 ForceUnlink:1;
} s1;
} u1;
uint NumberOfOwnerMessages;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProcessViewListEntry;
}* View;
}
struct _ALPC_WORK_ON_BEHALF_ATTR{
struct _ALPC_WORK_ON_BEHALF_TICKET{
uint ;
uint ThreadCreationTimeLow;
} Ticket;
}
struct _ALPC_WORK_ON_BEHALF_TICKET{
uint ;
uint ThreadCreationTimeLow;
}
struct _ALPHA_CONTEXT{
uint FltF0;
uint FltF1;
uint FltF2;
uint FltF3;
uint FltF4;
uint FltF5;
uint FltF6;
uint FltF7;
uint FltF8;
uint FltF9;
uint FltF10;
uint FltF11;
uint FltF12;
uint FltF13;
uint FltF14;
uint FltF15;
uint FltF16;
uint FltF17;
uint FltF18;
uint FltF19;
uint FltF20;
uint FltF21;
uint FltF22;
uint FltF23;
uint FltF24;
uint FltF25;
uint FltF26;
uint FltF27;
uint FltF28;
uint FltF29;
uint FltF30;
uint FltF31;
uint IntV0;
uint IntT0;
uint IntT1;
uint IntT2;
uint IntT3;
uint IntT4;
uint IntT5;
uint IntT6;
uint IntT7;
uint IntS0;
uint IntS1;
uint IntS2;
uint IntS3;
uint IntS4;
uint IntS5;
uint IntFp;
uint IntA0;
uint IntA1;
uint IntA2;
uint IntA3;
uint IntA4;
uint IntA5;
uint IntT8;
uint IntT9;
uint IntT10;
uint IntT11;
uint IntRa;
uint IntT12;
uint IntAt;
uint IntGp;
uint IntSp;
uint IntZero;
uint Fpcr;
uint SoftFpcr;
uint Fir;
uint Psr;
uint ContextFlags;
uint HighFltF0;
uint HighFltF1;
uint HighFltF2;
uint HighFltF3;
uint HighFltF4;
uint HighFltF5;
uint HighFltF6;
uint HighFltF7;
uint HighFltF8;
uint HighFltF9;
uint HighFltF10;
uint HighFltF11;
uint HighFltF12;
uint HighFltF13;
uint HighFltF14;
uint HighFltF15;
uint HighFltF16;
uint HighFltF17;
uint HighFltF18;
uint HighFltF19;
uint HighFltF20;
uint HighFltF21;
uint HighFltF22;
uint HighFltF23;
uint HighFltF24;
uint HighFltF25;
uint HighFltF26;
uint HighFltF27;
uint HighFltF28;
uint HighFltF29;
uint HighFltF30;
uint HighFltF31;
uint HighIntV0;
uint HighIntT0;
uint HighIntT1;
uint HighIntT2;
uint HighIntT3;
uint HighIntT4;
uint HighIntT5;
uint HighIntT6;
uint HighIntT7;
uint HighIntS0;
uint HighIntS1;
uint HighIntS2;
uint HighIntS3;
uint HighIntS4;
uint HighIntS5;
uint HighIntFp;
uint HighIntA0;
uint HighIntA1;
uint HighIntA2;
uint HighIntA3;
uint HighIntA4;
uint HighIntA5;
uint HighIntT8;
uint HighIntT9;
uint HighIntT10;
uint HighIntT11;
uint HighIntRa;
uint HighIntT12;
uint HighIntAt;
uint HighIntGp;
uint HighIntSp;
uint HighIntZero;
uint HighFpcr;
uint HighSoftFpcr;
uint HighFir;
long doubleDoNotUseThisField;
uint HighFill;
}
struct _ALPHA_DBGKD_CONTROL_REPORT{
uint InstructionCount;
uint8 InstructionStream;
}
struct _ALPHA_NT5_CONTEXT{
uint64 FltF0;
uint64 FltF1;
uint64 FltF2;
uint64 FltF3;
uint64 FltF4;
uint64 FltF5;
uint64 FltF6;
uint64 FltF7;
uint64 FltF8;
uint64 FltF9;
uint64 FltF10;
uint64 FltF11;
uint64 FltF12;
uint64 FltF13;
uint64 FltF14;
uint64 FltF15;
uint64 FltF16;
uint64 FltF17;
uint64 FltF18;
uint64 FltF19;
uint64 FltF20;
uint64 FltF21;
uint64 FltF22;
uint64 FltF23;
uint64 FltF24;
uint64 FltF25;
uint64 FltF26;
uint64 FltF27;
uint64 FltF28;
uint64 FltF29;
uint64 FltF30;
uint64 FltF31;
uint64 IntV0;
uint64 IntT0;
uint64 IntT1;
uint64 IntT2;
uint64 IntT3;
uint64 IntT4;
uint64 IntT5;
uint64 IntT6;
uint64 IntT7;
uint64 IntS0;
uint64 IntS1;
uint64 IntS2;
uint64 IntS3;
uint64 IntS4;
uint64 IntS5;
uint64 IntFp;
uint64 IntA0;
uint64 IntA1;
uint64 IntA2;
uint64 IntA3;
uint64 IntA4;
uint64 IntA5;
uint64 IntT8;
uint64 IntT9;
uint64 IntT10;
uint64 IntT11;
uint64 IntRa;
uint64 IntT12;
uint64 IntAt;
uint64 IntGp;
uint64 IntSp;
uint64 IntZero;
uint64 Fpcr;
uint64 SoftFpcr;
uint64 Fir;
uint Psr;
uint ContextFlags;
uint Fill;
}
struct _ALPHA_NT5_KPROCESSOR_STATE{
struct _ALPHA_NT5_CONTEXT{
uint64 FltF0;
uint64 FltF1;
uint64 FltF2;
uint64 FltF3;
uint64 FltF4;
uint64 FltF5;
uint64 FltF6;
uint64 FltF7;
uint64 FltF8;
uint64 FltF9;
uint64 FltF10;
uint64 FltF11;
uint64 FltF12;
uint64 FltF13;
uint64 FltF14;
uint64 FltF15;
uint64 FltF16;
uint64 FltF17;
uint64 FltF18;
uint64 FltF19;
uint64 FltF20;
uint64 FltF21;
uint64 FltF22;
uint64 FltF23;
uint64 FltF24;
uint64 FltF25;
uint64 FltF26;
uint64 FltF27;
uint64 FltF28;
uint64 FltF29;
uint64 FltF30;
uint64 FltF31;
uint64 IntV0;
uint64 IntT0;
uint64 IntT1;
uint64 IntT2;
uint64 IntT3;
uint64 IntT4;
uint64 IntT5;
uint64 IntT6;
uint64 IntT7;
uint64 IntS0;
uint64 IntS1;
uint64 IntS2;
uint64 IntS3;
uint64 IntS4;
uint64 IntS5;
uint64 IntFp;
uint64 IntA0;
uint64 IntA1;
uint64 IntA2;
uint64 IntA3;
uint64 IntA4;
uint64 IntA5;
uint64 IntT8;
uint64 IntT9;
uint64 IntT10;
uint64 IntT11;
uint64 IntRa;
uint64 IntT12;
uint64 IntAt;
uint64 IntGp;
uint64 IntSp;
uint64 IntZero;
uint64 Fpcr;
uint64 SoftFpcr;
uint64 Fir;
uint Psr;
uint ContextFlags;
uint Fill;
} ContextFrame;
}
struct _ALT_RESOURCE_MODULE{
uint16 ;
void* ModuleBase;
void* ModuleManifest;
uint ModuleCheckSum;
void* AlternateModule;
void* AlternateFileHandle;
uint AlternateFileSize;
uint CMFSegmentIndex;
uint CMFResourceOnlySegIndex;
uint ErrorCode;
}
struct _AMD64_CONTEXT{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint64 P6Home;
uint ContextFlags;
uint MxCsr;
uint16 SegCs;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint16 SegSs;
uint EFlags;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 Rbx;
uint64 Rsp;
uint64 Rbp;
uint64 Rsi;
uint64 Rdi;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 R12;
uint64 R13;
uint64 R14;
uint64 R15;
uint64 Rip;
union {
struct _AMD64_XMM_SAVE_AREA32{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
} FltSave;
struct {
struct _AMD64_M128{
uint64 Low;
int64 High;
} Header;
} __s1;
} ___u38;
struct _AMD64_M128{
uint64 Low;
int64 High;
} VectorRegister;
}
struct _AMD64_DBGKD_CONTROL_REPORT{
uint64 Dr6;
uint64 Dr7;
uint EFlags;
uint16 InstructionCount;
uint16 ReportFlags;
uint8 InstructionStream;
}
struct _AMD64_DBGKD_CONTROL_SET{
uint TraceFlag;
uint64 Dr7;
uint64 CurrentSymbolStart;
uint64 CurrentSymbolEnd;
}
struct _AMD64_DESCRIPTOR{
uint16 Pad;
}
struct _AMD64_DYNAMIC_FUNCTION_TABLE{
struct LIST_ENTRY64{
uint64 Flink;
uint64 Blink;
} ;
uint64 FunctionTable;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
uint64 MinimumAddress;
uint64 MaximumAddress;
uint64 BaseAddress;
uint64 Callback;
uint64 Context;
uint64 OutOfProcessCallbackDll;
_AMD64_FUNCTION_TABLE_TYPE Type;
uint EntryCount;
}
struct _AMD64_FIBER{
uint64 FiberData;
uint64 ExceptionList;
uint64 StackBase;
uint64 StackLimit;
uint64 DeallocationStack;
struct _AMD64_CONTEXT{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint64 P6Home;
uint ContextFlags;
uint MxCsr;
uint16 SegCs;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint16 SegSs;
uint EFlags;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 Rbx;
uint64 Rsp;
uint64 Rbp;
uint64 Rsi;
uint64 Rdi;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 R12;
uint64 R13;
uint64 R14;
uint64 R15;
uint64 Rip;
union {
struct _AMD64_XMM_SAVE_AREA32{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128 FloatRegisters;
} FltSave;
struct {
struct _AMD64_M128 Header;
} __s1;
} ___u38;
struct _AMD64_M128{
uint64 Low;
int64 High;
} VectorRegister;
} FiberContext;
uint64 Wx86Tib;
}
struct _AMD64_KPROCESSOR_STATE{
struct _AMD64_KSPECIAL_REGISTERS{
uint64 Cr0;
uint64 Cr2;
uint64 Cr3;
uint64 Cr4;
uint64 KernelDr0;
uint64 KernelDr1;
uint64 KernelDr2;
uint64 KernelDr3;
uint64 KernelDr6;
uint64 KernelDr7;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Gdtr;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Idtr;
uint16 Tr;
uint16 Ldtr;
uint MxCsr;
uint64 DebugControl;
uint64 LastBranchToRip;
uint64 LastBranchFromRip;
uint64 LastExceptionToRip;
uint64 LastExceptionFromRip;
uint64 Cr8;
uint64 MsrGsBase;
uint64 MsrGsSwap;
uint64 MsrStar;
uint64 MsrLStar;
uint64 MsrCStar;
uint64 MsrSyscallMask;
uint64 Xcr0;
} SpecialRegisters;
uint64 Fill;
struct _AMD64_CONTEXT{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint64 P6Home;
uint ContextFlags;
uint MxCsr;
uint16 SegCs;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint16 SegSs;
uint EFlags;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 Rbx;
uint64 Rsp;
uint64 Rbp;
uint64 Rsi;
uint64 Rdi;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 R12;
uint64 R13;
uint64 R14;
uint64 R15;
uint64 Rip;
union {
struct _AMD64_XMM_SAVE_AREA32{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128 FloatRegisters;
} FltSave;
struct {
struct _AMD64_M128 Header;
} __s1;
} ___u38;
struct _AMD64_M128{
uint64 Low;
int64 High;
} VectorRegister;
} ContextFrame;
}
struct _AMD64_KSPECIAL_REGISTERS{
uint64 Cr0;
uint64 Cr2;
uint64 Cr3;
uint64 Cr4;
uint64 KernelDr0;
uint64 KernelDr1;
uint64 KernelDr2;
uint64 KernelDr3;
uint64 KernelDr6;
uint64 KernelDr7;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Gdtr;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Idtr;
uint16 Tr;
uint16 Ldtr;
uint MxCsr;
uint64 DebugControl;
uint64 LastBranchToRip;
uint64 LastBranchFromRip;
uint64 LastExceptionToRip;
uint64 LastExceptionFromRip;
uint64 Cr8;
uint64 MsrGsBase;
uint64 MsrGsSwap;
uint64 MsrStar;
uint64 MsrLStar;
uint64 MsrCStar;
uint64 MsrSyscallMask;
uint64 Xcr0;
}
struct _AMD64_KSWITCH_FRAME{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint MxCsr;
uint8 ApcBypass;
uint8 Fill1;
}
struct _AMD64_KTRAP_FRAME{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5;
char PreviousMode;
uint8 PreviousIrql;
uint8 FaultIndicator;
uint8 ExceptionActive;
uint MxCsr;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 Spare0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm1;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm2;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm3;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm4;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm5;
uint64 FaultAddress;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 DebugControl;
uint64 LastBranchToRip;
uint64 LastBranchFromRip;
uint64 LastExceptionToRip;
uint64 LastExceptionFromRip;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint64 TrapFrame;
uint64 Rbx;
uint64 Rdi;
uint64 Rsi;
uint64 Rbp;
uint64 ErrorCode;
uint64 Rip;
uint16 SegCs;
uint16 Fill1;
}
struct _AMD64_LEGACY_SAVE_AREA{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
}
struct _AMD64_M128{
uint64 Low;
int64 High;
}
struct _AMD64_OBSOLETE_CONTEXT_1{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint64 P6Home;
uint ContextFlags;
uint MxCsr;
uint16 SegCs;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint16 SegSs;
uint EFlags;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 Rbx;
uint64 Rsp;
uint64 Rbp;
uint64 Rsi;
uint64 Rdi;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 R12;
uint64 R13;
uint64 R14;
uint64 R15;
uint64 Rip;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm1;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm2;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm3;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm4;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm5;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm6;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm7;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm8;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm9;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm10;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm11;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm12;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm13;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm14;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm15;
struct _AMD64_LEGACY_SAVE_AREA{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
} FltSave;
uint64 DebugControl;
uint64 LastBranchToRip;
uint64 LastBranchFromRip;
uint64 LastExceptionToRip;
uint64 LastExceptionFromRip;
uint64 VectorControl;
struct _AMD64_M128{
uint64 Low;
int64 High;
} VectorRegister;
}
struct _AMD64_OBSOLETE_CONTEXT_2{
uint64 P1Home;
uint64 P2Home;
uint64 P3Home;
uint64 P4Home;
uint64 P5Home;
uint64 P6Home;
uint ContextFlags;
uint MxCsr;
uint16 SegCs;
uint16 SegDs;
uint16 SegEs;
uint16 SegFs;
uint16 SegGs;
uint16 SegSs;
uint EFlags;
uint64 Dr0;
uint64 Dr1;
uint64 Dr2;
uint64 Dr3;
uint64 Dr6;
uint64 Dr7;
uint64 Rax;
uint64 Rcx;
uint64 Rdx;
uint64 Rbx;
uint64 Rsp;
uint64 Rbp;
uint64 Rsi;
uint64 Rdi;
uint64 R8;
uint64 R9;
uint64 R10;
uint64 R11;
uint64 R12;
uint64 R13;
uint64 R14;
uint64 R15;
uint64 Rip;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm1;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm2;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm3;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm4;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm5;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm6;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm7;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm8;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm9;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm10;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm11;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm12;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm13;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm14;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Xmm15;
struct _AMD64_XMM_SAVE_AREA32_2{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
} FltSave;
struct _AMD64_M128{
uint64 Low;
int64 High;
} VectorRegister;
}
struct _AMD64_OBSOLETE_KSPECIAL_REGISTERS{
uint64 Cr0;
uint64 Cr2;
uint64 Cr3;
uint64 Cr4;
uint64 KernelDr0;
uint64 KernelDr1;
uint64 KernelDr2;
uint64 KernelDr3;
uint64 KernelDr6;
uint64 KernelDr7;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Gdtr;
struct _AMD64_DESCRIPTOR{
uint16 Pad;
} Idtr;
uint16 Tr;
uint16 Ldtr;
uint MxCsr;
uint64 DebugControl;
uint64 LastBranchToRip;
uint64 LastBranchFromRip;
uint64 LastExceptionToRip;
uint64 LastExceptionFromRip;
uint64 Cr8;
uint64 MsrGsBase;
uint64 MsrGsSwap;
uint64 MsrStar;
uint64 MsrLStar;
uint64 MsrCStar;
uint64 MsrSyscallMask;
}
struct _AMD64_UNWIND_INFO{
uint8 Version:3;
uint8 Flags:5;
uint8 SizeOfProlog;
uint8 CountOfCodes;
uint8 FrameRegister:4;
uint8 FrameOffset:4;
union _AMD64_UNWIND_CODE{
struct {
uint8 CodeOffset;
uint8 UnwindOp:4;
uint8 OpInfo:4;
} __s0;
uint16 FrameOffset;
} UnwindCode;
}
struct _AMD64_XMM_SAVE_AREA32{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
}
struct _AMD64_XMM_SAVE_AREA32_2{
uint16 ControlWord;
uint16 StatusWord;
uint8 TagWord;
uint8 Reserved1;
uint16 ErrorOpcode;
uint ErrorOffset;
uint16 ErrorSelector;
uint16 Reserved2;
uint DataOffset;
uint16 DataSelector;
uint16 Reserved3;
uint MxCsr;
uint MxCsr_Mask;
struct _AMD64_M128{
uint64 Low;
int64 High;
} FloatRegisters;
}
struct _APICTABLE{
uint8 Type;
uint8 Length;
}
struct _API_SET_HASH_ENTRY{
uint Hash;
uint Index;
}
struct _API_SET_NAMESPACE{
uint Version;
uint Size;
uint Flags;
uint Count;
uint EntryOffset;
uint HashOffset;
uint HashFactor;
}
struct _API_SET_NAMESPACE_ARRAY_V2{
uint Version;
uint Count;
struct _API_SET_NAMESPACE_ENTRY_V2{
uint NameOffset;
uint NameLength;
uint DataOffset;
} Array;
}
struct _API_SET_NAMESPACE_ARRAY_V4{
uint Version;
uint Size;
uint Flags;
uint Count;
struct _API_SET_NAMESPACE_ENTRY_V4{
uint Flags;
uint NameOffset;
uint NameLength;
uint AliasOffset;
uint AliasLength;
uint DataOffset;
} Array;
}
struct _API_SET_NAMESPACE_ENTRY{
uint Flags;
uint NameOffset;
uint NameLength;
uint HashedLength;
uint ValueOffset;
uint ValueCount;
}
struct _API_SET_NAMESPACE_ENTRY_V2{
uint NameOffset;
uint NameLength;
uint DataOffset;
}
struct _API_SET_NAMESPACE_ENTRY_V4{
uint Flags;
uint NameOffset;
uint NameLength;
uint AliasOffset;
uint AliasLength;
uint DataOffset;
}
struct _API_SET_SCHEMA_EXTENSION_NODE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Links;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FileName;
int Status;
}
struct _API_SET_VALUE_ARRAY_V2{
uint Count;
struct _API_SET_VALUE_ENTRY_V2{
uint NameOffset;
uint NameLength;
uint ValueOffset;
uint ValueLength;
} Array;
}
struct _API_SET_VALUE_ARRAY_V4{
uint Flags;
uint Count;
struct _API_SET_VALUE_ENTRY_V4{
uint Flags;
uint NameOffset;
uint NameLength;
uint ValueOffset;
uint ValueLength;
} Array;
}
struct _API_SET_VALUE_ENTRY{
uint Flags;
uint NameOffset;
uint NameLength;
uint ValueOffset;
uint ValueLength;
}
struct _API_SET_VALUE_ENTRY_V2{
uint NameOffset;
uint NameLength;
uint ValueOffset;
uint ValueLength;
}
struct _API_SET_VALUE_ENTRY_V4{
uint Flags;
uint NameOffset;
uint NameLength;
uint ValueOffset;
uint ValueLength;
}
struct _APPHELP_INFO{
uint dwHtmlHelpID;
uint dwSeverity;
wchar_t* lpszAppName;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} guidID;
uint tiExe;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} guidDB;
int bOfflineContent;
int bUseHTMLHelp;
wchar_t* lpszChmFile;
wchar_t* lpszDetailsFile;
int bPreserveChoice;
int bMSI;
}
struct _APPLICATIONLAUNCH_SETTING_VALUE{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ActivationTime;
uint Flags;
uint ButtonInstanceID;
}
struct _APP_MEMORY_INFORMATION{
uint64 AvailableCommit;
uint64 PrivateCommitUsage;
uint64 PeakPrivateCommitUsage;
uint64 TotalCommitUsage;
}
struct _ARBITER_ADD_RESERVED_PARAMETERS{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* ReserveDevice;
}
struct _ARBITER_ALLOCATION_STATE{
uint64 ;
uint64 End;
uint64 CurrentMinimum;
uint64 CurrentMaximum;
struct _ARBITER_LIST_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint AlternativeCount;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection;
} u;
}* Alternatives;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* PhysicalDeviceObject;
_ARBITER_REQUEST_SOURCE RequestSource;
uint Flags;
int WorkSpace;
_INTERFACE_TYPE InterfaceType;
uint SlotNumber;
uint BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Generic;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Port;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197 Interrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444 MessageInterrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Memory;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F Dma;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935 BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278 DeviceSpecificData;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB Memory40;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928 Memory48;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F Memory64;
} u;
}* Assignment;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection;
} u;
}* SelectedAlternative;
_ARBITER_RESULT Result;
}* Entry;
struct _ARBITER_ALTERNATIVE{
uint64 Minimum;
uint64 Maximum;
uint64 Length;
uint64 Alignment;
int Priority;
uint Flags;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection;
} u;
}* Descriptor;
uint Reserved;
}* CurrentAlternative;
uint AlternativeCount;
struct _ARBITER_ALTERNATIVE{
uint64 Minimum;
uint64 Maximum;
uint64 Length;
uint64 Alignment;
int Priority;
uint Flags;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6 Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5 Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547 DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8 Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559 Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A Connection;
} u;
}* Descriptor;
uint Reserved;
}* Alternatives;
uint16 Flags;
uint8 RangeAttributes;
uint8 RangeAvailableAttributes;
uint WorkSpace;
}
struct _ARBITER_ALTERNATIVE{
uint64 Minimum;
uint64 Maximum;
uint64 Length;
uint64 Alignment;
int Priority;
uint Flags;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{
ULONG MinimumVector;
ULONG MaximumVector;
IRQ_DEVICE_POLICY AffinityPolicy;
IRQ_PRIORITY PriorityPolicy;
KAFFINITY TargetedProcessors;
} Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{
ULONG MinimumChannel;
ULONG MaximumChannel;
} Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{
ULONG RequestLine;
ULONG Reserved;
ULONG Channel;
ULONG TransferWidth;
} DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{
ULONG Length;
ULONG MinBusNumber;
ULONG MaxBusNumber;
ULONG Reserved;
} BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{
ULONG Priority;
ULONG Reserved1;
ULONG Reserved2;
} ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{
ULONG ;
ULONG Alignment40;
union _LARGE_INTEGER ;
} Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{
ULONG Length48;
ULONG Alignment48;
union _LARGE_INTEGER ;
} Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{
ULONG Length64;
ULONG Alignment64;
union _LARGE_INTEGER ;
} Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{
UCHAR Class;
UCHAR Type;
UCHAR Reserved1;
UCHAR Reserved2;
ULONG IdLowPart;
ULONG IdHighPart;
} Connection;
} u;
}* Descriptor;
uint Reserved;
}
struct _ARBITER_BOOT_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
}
struct _ARBITER_CONFLICT_INFO{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* ;
uint64 Start;
uint64 End;
}
struct _ARBITER_INSTANCE{
uint Signature;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* MutexEvent;
wchar_t* Name;
wchar_t* OrderingName;
int ResourceType;
struct _RTL_RANGE_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
}* Allocation;
struct _RTL_RANGE_LIST{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
}* PossibleAllocation;
struct _ARBITER_ORDERING_LIST{
uint16 Count;
uint16 Maximum;
struct _ARBITER_ORDERING{
uint64 Start;
uint64 End;
}* Orderings;
} OrderingList;
struct _ARBITER_ORDERING_LIST{
uint16 Count;
uint16 Maximum;
struct _ARBITER_ORDERING{
uint64 Start;
uint64 End;
}* Orderings;
} ReservedList;
int ReferenceCount;
struct _ARBITER_INTERFACE{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
ArbiterHandler* ArbiterHandler;
uint Flags;
}* Interface;
uint AllocationStackMaxSize;
struct _ARBITER_ALLOCATION_STATE{
uint64 ;
uint64 End;
uint64 CurrentMinimum;
uint64 CurrentMaximum;
struct _ARBITER_LIST_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint AlternativeCount;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u;
}* Alternatives;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* PhysicalDeviceObject;
_ARBITER_REQUEST_SOURCE RequestSource;
uint Flags;
int WorkSpace;
_INTERFACE_TYPE InterfaceType;
uint SlotNumber;
uint BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u;
}* Assignment;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u;
}* SelectedAlternative;
_ARBITER_RESULT Result;
}* Entry;
struct _ARBITER_ALTERNATIVE{
uint64 Minimum;
uint64 Maximum;
uint64 Length;
uint64 Alignment;
int Priority;
uint Flags;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u;
}* Descriptor;
uint Reserved;
}* CurrentAlternative;
uint AlternativeCount;
struct _ARBITER_ALTERNATIVE{
uint64 Minimum;
uint64 Maximum;
uint64 Length;
uint64 Alignment;
int Priority;
uint Flags;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u;
}* Descriptor;
uint Reserved;
}* Alternatives;
uint16 Flags;
uint8 RangeAttributes;
uint8 RangeAvailableAttributes;
uint WorkSpace;
}* AllocationStack;
UnpackRequirement* UnpackRequirement;
PackResource* PackResource;
UnpackResource* UnpackResource;
ScoreRequirement* ScoreRequirement;
TestAllocation* TestAllocation;
RetestAllocation* RetestAllocation;
CommitAllocation* CommitAllocation;
RollbackAllocation* RollbackAllocation;
BootAllocation* BootAllocation;
QueryArbitrate* QueryArbitrate;
QueryConflict* QueryConflict;
AddReserved* AddReserved;
StartArbiter* StartArbiter;
PreprocessEntry* PreprocessEntry;
AllocateEntry* AllocateEntry;
GetNextAllocationRange* GetNextAllocationRange;
FindSuitableRange* FindSuitableRange;
AddAllocation* AddAllocation;
BacktrackAllocation* BacktrackAllocation;
OverrideConflict* OverrideConflict;
InitializeRangeList* InitializeRangeList;
uint8 TransactionInProgress;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* TransactionEvent;
void* Extension;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* BusDeviceObject;
void* ConflictCallbackContext;
ConflictCallback* ConflictCallback;
}
struct _ARBITER_INTERFACE{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
ArbiterHandler* ArbiterHandler;
uint Flags;
}
struct _ARBITER_LIST_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
uint AlternativeCount;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{
ULONG MinimumVector;
ULONG MaximumVector;
IRQ_DEVICE_POLICY AffinityPolicy;
IRQ_PRIORITY PriorityPolicy;
KAFFINITY TargetedProcessors;
} Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{
ULONG MinimumChannel;
ULONG MaximumChannel;
} Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{
ULONG RequestLine;
ULONG Reserved;
ULONG Channel;
ULONG TransferWidth;
} DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{
ULONG Length;
ULONG MinBusNumber;
ULONG MaxBusNumber;
ULONG Reserved;
} BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{
ULONG Priority;
ULONG Reserved1;
ULONG Reserved2;
} ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{
ULONG ;
ULONG Alignment40;
union _LARGE_INTEGER ;
} Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{
ULONG Length48;
ULONG Alignment48;
union _LARGE_INTEGER ;
} Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{
ULONG Length64;
ULONG Alignment64;
union _LARGE_INTEGER ;
} Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{
UCHAR Class;
UCHAR Type;
UCHAR Reserved1;
UCHAR Reserved2;
ULONG IdLowPart;
ULONG IdHighPart;
} Connection;
} u;
}* Alternatives;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* PhysicalDeviceObject;
_ARBITER_REQUEST_SOURCE RequestSource;
uint Flags;
int WorkSpace;
_INTERFACE_TYPE InterfaceType;
uint SlotNumber;
uint BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Generic;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Port;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{
ULONG ;
ULONG Vector;
KAFFINITY Affinity;
} Interrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated;
} MessageInterrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Memory;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{
ULONG Channel;
ULONG Port;
ULONG Reserved1;
} Dma;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{
ULONG Start;
ULONG Length;
ULONG Reserved;
} BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{
ULONG DataSize;
ULONG Reserved1;
ULONG Reserved2;
} DeviceSpecificData;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{
union _LARGE_INTEGER ;
} Memory40;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{
union _LARGE_INTEGER ;
} Memory48;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{
union _LARGE_INTEGER ;
} Memory64;
} u;
}* Assignment;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{
ULONG MinimumVector;
ULONG MaximumVector;
IRQ_DEVICE_POLICY AffinityPolicy;
IRQ_PRIORITY PriorityPolicy;
KAFFINITY TargetedProcessors;
} Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{
ULONG MinimumChannel;
ULONG MaximumChannel;
} Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{
ULONG RequestLine;
ULONG Reserved;
ULONG Channel;
ULONG TransferWidth;
} DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{
ULONG Length;
ULONG MinBusNumber;
ULONG MaxBusNumber;
ULONG Reserved;
} BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{
ULONG Priority;
ULONG Reserved1;
ULONG Reserved2;
} ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{
ULONG ;
ULONG Alignment40;
union _LARGE_INTEGER ;
} Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{
ULONG Length48;
ULONG Alignment48;
union _LARGE_INTEGER ;
} Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{
ULONG Length64;
ULONG Alignment64;
union _LARGE_INTEGER ;
} Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{
UCHAR Class;
UCHAR Type;
UCHAR Reserved1;
UCHAR Reserved2;
ULONG IdLowPart;
ULONG IdHighPart;
} Connection;
} u;
}* SelectedAlternative;
_ARBITER_RESULT Result;
}
struct _ARBITER_ORDERING{
uint64 Start;
uint64 End;
}
struct _ARBITER_ORDERING_LIST{
uint16 Count;
uint16 Maximum;
struct _ARBITER_ORDERING{
uint64 Start;
uint64 End;
}* Orderings;
}
struct _ARBITER_PARAMETERS{
union {
struct _ARBITER_TEST_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
uint AllocateFromCount;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u;
}* AllocateFrom;
} TestAllocation;
struct _ARBITER_RETEST_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
uint AllocateFromCount;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F u;
}* AllocateFrom;
} RetestAllocation;
struct _ARBITER_BOOT_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
} BootAllocation;
struct _ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS{
struct _CM_PARTIAL_RESOURCE_LIST{
USHORT Version;
USHORT Revision;
ULONG Count;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR ;
}** ;
} QueryAllocatedResources;
struct _ARBITER_QUERY_CONFLICT_PARAMETERS{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02 u;
}* ConflictingResource;
uint* ConflictCount;
struct _ARBITER_CONFLICT_INFO{
struct _DEVICE_OBJECT* ;
uint64 Start;
uint64 End;
}** Conflicts;
} QueryConflict;
struct _ARBITER_QUERY_ARBITRATE_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ;
} QueryArbitrate;
struct _ARBITER_ADD_RESERVED_PARAMETERS{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ReserveDevice;
} AddReserved;
} Parameters;
}
struct _ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS{
struct _CM_PARTIAL_RESOURCE_LIST{
USHORT Version;
USHORT Revision;
ULONG Count;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Generic;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Port;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197 Interrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444 MessageInterrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2 Memory;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F Dma;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845 DevicePrivate;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935 BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278 DeviceSpecificData;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB Memory40;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928 Memory48;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F Memory64;
} u;
} ;
}** ;
}
struct _ARBITER_QUERY_ARBITRATE_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ;
}
struct _ARBITER_QUERY_CONFLICT_PARAMETERS{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* ;
struct _IO_RESOURCE_DESCRIPTOR{
UCHAR Option;
UCHAR Type;
UCHAR ShareDisposition;
UCHAR Spare1;
USHORT Flags;
USHORT Spare2;
union _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02{
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Port;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Memory;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$A5682085F38B4530410BC09C233C00C6{
ULONG MinimumVector;
ULONG MaximumVector;
IRQ_DEVICE_POLICY AffinityPolicy;
IRQ_PRIORITY PriorityPolicy;
KAFFINITY TargetedProcessors;
} Interrupt;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$17B187B8C3CC0C2C04D148A62457C1B5{
ULONG MinimumChannel;
ULONG MaximumChannel;
} Dma;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$711A32C7DEC837C87D3D622B5D6CA547{
ULONG RequestLine;
ULONG Reserved;
ULONG Channel;
ULONG TransferWidth;
} DmaV3;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$6F2DCCC140478981F4C84F12EF58F0E8{
ULONG Length;
ULONG Alignment;
union _LARGE_INTEGER ;
} Generic;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$CFEA0CDFCF8B31E537C8D44F49AF209A{
ULONG Length;
ULONG MinBusNumber;
ULONG MaxBusNumber;
ULONG Reserved;
} BusNumber;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$F28011FF41998B198A306197E74BFABD{
ULONG Priority;
ULONG Reserved1;
ULONG Reserved2;
} ConfigData;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$90A8EEE83C9F91E29DD5F8EE42946559{
ULONG ;
ULONG Alignment40;
union _LARGE_INTEGER ;
} Memory40;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$9B5808D9D572DC66358F5E90A8A74F4F{
ULONG Length48;
ULONG Alignment48;
union _LARGE_INTEGER ;
} Memory48;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$DA030873C766E4C7B95104F99E17565C{
ULONG Length64;
ULONG Alignment64;
union _LARGE_INTEGER ;
} Memory64;
struct _IO_RESOURCE_DESCRIPTOR__$E0BCE46F03EEBF143E8289580A8E6C02__$ACFC0B8B00258A4187B421B4FDF1B18A{
UCHAR Class;
UCHAR Type;
UCHAR Reserved1;
UCHAR Reserved2;
ULONG IdLowPart;
ULONG IdHighPart;
} Connection;
} u;
}* ConflictingResource;
uint* ConflictCount;
struct _ARBITER_CONFLICT_INFO{
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* ;
uint64 Start;
uint64 End;
}** Conflicts;
}
struct _ARBITER_RETEST_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
uint AllocateFromCount;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Generic;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Port;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{
ULONG ;
ULONG Vector;
KAFFINITY Affinity;
} Interrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated;
} MessageInterrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Memory;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{
ULONG Channel;
ULONG Port;
ULONG Reserved1;
} Dma;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{
ULONG Start;
ULONG Length;
ULONG Reserved;
} BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{
ULONG DataSize;
ULONG Reserved1;
ULONG Reserved2;
} DeviceSpecificData;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{
union _LARGE_INTEGER ;
} Memory40;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{
union _LARGE_INTEGER ;
} Memory48;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{
union _LARGE_INTEGER ;
} Memory64;
} u;
}* AllocateFrom;
}
struct _ARBITER_TEST_ALLOCATION_PARAMETERS{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
}* ArbitrationList;
uint AllocateFromCount;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR{
UCHAR Type;
UCHAR ShareDisposition;
USHORT Flags;
union _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Generic;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Port;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BB7094CF39B58C60385FAAA7DFEE1197{
ULONG ;
ULONG Vector;
KAFFINITY Affinity;
} Interrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$4320D89A9BBD0A464899BC45363B6444{
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$D155ACCA6E988C466DB4311FB52073D0 Raw;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$__$__$DE3CCB929DB832FEAC38EBA7195AFD95__$BB7094CF39B58C60385FAAA7DFEE1197 Translated;
} MessageInterrupt;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$BBBCA153A119060DF311607C16E36BB2{
union _LARGE_INTEGER ;
} Memory;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$1F3D6AF14FC8FA95287DDF447D6BE47F{
ULONG Channel;
ULONG Port;
ULONG Reserved1;
} Dma;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$812F79A5FC2BE6FE62CE9F41854F4845{
ULONG Data;
} DevicePrivate;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$D2EE30319AFD96435F4334D8E12C7935{
ULONG Start;
ULONG Length;
ULONG Reserved;
} BusNumber;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$6BF00F84A5C727E3B25245E9FBDFB278{
ULONG DataSize;
ULONG Reserved1;
ULONG Reserved2;
} DeviceSpecificData;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$EB36DC85652755C8EC8C69A205B736DB{
union _LARGE_INTEGER ;
} Memory40;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$08205AB7C2167E8C9C2BF0274334A928{
union _LARGE_INTEGER ;
} Memory48;
struct _CM_PARTIAL_RESOURCE_DESCRIPTOR__$ADB721E5076B7192632491DCDDDBEB4F__$05881B79B3CAFBFC2EAF6FE4C8FAB51F{
union _LARGE_INTEGER ;
} Memory64;
} u;
}* AllocateFrom;
}
struct _ARC_DISK_INFORMATION{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} DiskSignatures;
}
struct _ARC_DISK_SIGNATURE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
uint Signature;
char* ArcName;
uint CheckSum;
uint8 ValidPartitionTable;
uint8 xInt13;
uint8 IsGpt;
uint8 Reserved;
uint8 GptSignature;
}
struct _ARM64_CONTEXT{
uint ContextFlags;
uint Cpsr;
uint64 X;
}
struct _ARM64_DBGKD_CONTROL_REPORT{
uint Cpsr;
uint InstructionCount;
uint8 InstructionStream;
}
struct _ARM64_DBGKD_CONTROL_SET{
uint Continue;
uint TraceFlag;
uint64 CurrentSymbolStart;
uint64 CurrentSymbolEnd;
}
struct _ARM64_DYNAMIC_FUNCTION_TABLE{
struct LIST_ENTRY64{
uint64 Flink;
uint64 Blink;
} ListEntry;
uint64 FunctionTable;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
uint64 MinimumAddress;
uint64 MaximumAddress;
uint64 BaseAddress;
uint64 Callback;
uint64 Context;
uint64 OutOfProcessCallbackDll;
_ARM64_FUNCTION_TABLE_TYPE Type;
uint EntryCount;
}
struct _ARM64_FIBER{
uint64 FiberData;
uint64 ExceptionList;
uint64 StackBase;
uint64 StackLimit;
uint64 DeallocationStack;
struct _ARM64_CONTEXT{
uint ContextFlags;
uint Cpsr;
uint64 X;
} FiberContext;
}
struct _ARM64_KPROCESSOR_STATE{
struct _ARM64_KSPECIAL_REGISTERS{
uint64 Elr_El1;
uint Spsr_El1;
uint64 Tpidr_El0;
uint64 Tpidrro_El0;
uint64 Tpidr_El1;
uint64 KernelBvr;
} SpecialRegisters;
struct _ARM64_CONTEXT{
uint ContextFlags;
uint Cpsr;
uint64 X;
} ContextFrame;
}
struct _ARM64_KSPECIAL_REGISTERS{
uint64 Elr_El1;
uint Spsr_El1;
uint64 Tpidr_El0;
uint64 Tpidrro_El0;
uint64 Tpidr_El1;
uint64 KernelBvr;
}
struct _ARM64_KSWITCH_FRAME{
uint8 ApcBypass;
uint8 Fill;
}
struct _ARM64_KTRAP_FRAME{
uint8 ExceptionActive;
uint8 ContextFromKFramesUnwound;
uint8 DebugRegistersValid;
union {
char PreviousMode;
uint8 PreviousIrql;
} ___u3;
uint FaultStatus;
union {
uint64 ;
uint64 TrapFrame;
} ___u5;
void* VfpState;
uint Bcr;
}
struct _ARM64_VFP_STATE{
struct _ARM64_VFP_STATE* Link;
uint Fpcr;
uint Fpsr;
union _ARM64_NEON128{
struct {
uint64 Low;
int64 High;
} __s0;
long doubleD;
} V;
}
struct _ARMCE_CONTEXT{
uint ContextFlags;
uint R0;
uint R1;
uint R2;
uint R3;
uint R4;
uint R5;
uint R6;
uint R7;
uint R8;
uint R9;
uint R10;
uint R11;
uint R12;
uint Sp;
uint Lr;
uint Pc;
uint Cpsr;
}
struct _ARMCE_DBGKD_CONTROL_REPORT{
uint Cpsr;
uint InstructionCount;
uint8 InstructionStream;
}
struct _ARMCE_DBGKD_CONTROL_SET{
uint Continue;
uint CurrentSymbolStart;
uint CurrentSymbolEnd;
}
struct _ARMCE_KPROCESSOR_STATE{
struct _ARMCE_KSPECIAL_REGISTERS{
uint Cp15_Cr0_Id;
uint Cp15_Cr0_CacheType;
uint Cp15_Cr1_Control;
uint Cp15_Cr2_Ttb;
uint Cp15_Cr3_Dacr;
uint Cp15_Cr5_FaultStatus;
uint Cp15_Cr5_FaultAddress;
uint Cp15_Cr13_ProcessId;
} SpecialRegisters;
struct _ARMCE_CONTEXT{
uint ContextFlags;
uint R0;
uint R1;
uint R2;
uint R3;
uint R4;
uint R5;
uint R6;
uint R7;
uint R8;
uint R9;
uint R10;
uint R11;
uint R12;
uint Sp;
uint Lr;
uint Pc;
uint Cpsr;
} ContextFrame;
}
struct _ARMCE_KSPECIAL_REGISTERS{
uint Cp15_Cr0_Id;
uint Cp15_Cr0_CacheType;
uint Cp15_Cr1_Control;
uint Cp15_Cr2_Ttb;
uint Cp15_Cr3_Dacr;
uint Cp15_Cr5_FaultStatus;
uint Cp15_Cr5_FaultAddress;
uint Cp15_Cr13_ProcessId;
}
struct _ARMCE_KSWITCH_FRAME{
uint8 ApcBypass;
uint8 Fill;
}
struct _ARM_CONTEXT{
uint ContextFlags;
uint R0;
uint R1;
uint R2;
uint R3;
uint R4;
uint R5;
uint R6;
uint R7;
uint R8;
uint R9;
uint R10;
uint R11;
uint R12;
uint Sp;
uint Lr;
uint Pc;
uint Cpsr;
uint Fpscr;
uint Padding;
union {
struct _ARM_NEON128{
uint64 ;
int64 High;
} Q;
} ___u20;
uint Bvr;
}
struct _ARM_DBGKD_CONTROL_REPORT{
uint Cpsr;
uint InstructionCount;
uint8 InstructionStream;
}
struct _ARM_DBGKD_CONTROL_SET{
uint Continue;
uint CurrentSymbolStart;
uint CurrentSymbolEnd;
}
struct _ARM_DYNAMIC_FUNCTION_TABLE{
struct LIST_ENTRY32{
uint Flink;
uint Blink;
} ListEntry;
uint FunctionTable;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
uint MinimumAddress;
uint MaximumAddress;
uint BaseAddress;
uint Callback;
uint Context;
uint OutOfProcessCallbackDll;
_ARM_FUNCTION_TABLE_TYPE Type;
uint EntryCount;
}
struct _ARM_ERRATA_INFO{
union {
uint Flags;
struct {
uint32 SignalIpiOnTlbFlush:1;
uint32 Reserved:31;
} __s1;
} ___u0;
}
struct _ARM_FIBER{
uint ;
uint ExceptionList;
uint StackBase;
uint StackLimit;
uint DeallocationStack;
struct _ARM_CONTEXT{
uint ContextFlags;
uint R0;
uint R1;
uint R2;
uint R3;
uint R4;
uint R5;
uint R6;
uint R7;
uint R8;
uint R9;
uint R10;
uint R11;
uint R12;
uint Sp;
uint Lr;
uint Pc;
uint Cpsr;
uint Fpscr;
uint Padding;
union {
struct _ARM_NEON128{
uint64 ;
int64 High;
} Q;
} ___u20;
uint Bvr;
} FiberContext;
}
struct _ARM_KPROCESSOR_STATE{
struct _ARM_KSPECIAL_REGISTERS{
uint Reserved;
} SpecialRegisters;
struct _ARM_CONTEXT{
uint ContextFlags;
uint R0;
uint R1;
uint R2;
uint R3;
uint R4;
uint R5;
uint R6;
uint R7;
uint R8;
uint R9;
uint R10;
uint R11;
uint R12;
uint Sp;
uint Lr;
uint Pc;
uint Cpsr;
uint Fpscr;
uint Padding;
union {
struct _ARM_NEON128{
uint64 ;
int64 High;
} Q;
} ___u20;
uint Bvr;
} ContextFrame;
}
struct _ARM_KSPECIAL_REGISTERS{
uint Reserved;
}
struct _ARM_KSWITCH_FRAME{
uint8 ;
uint8 Fill;
}
struct _ARM_KTRAP_FRAME{
uint Arg3;
uint FaultStatus;
union {
uint FaultAddress;
uint TrapFrame;
} ___u2;
uint Reserved;
uint8 ExceptionActive;
uint8 ContextFromKFramesUnwound;
uint8 DebugRegistersValid;
union {
char PreviousMode;
uint8 PreviousIrql;
} ___u7;
uint VfpState;
uint Bvr;
}
struct _ARM_LOADER_BLOCK{
uint PlaceHolder;
}
struct _ARM_NEON128{
uint64 ;
int64 High;
}
struct _ARM_VFP_STATE{
struct _ARM_VFP_STATE* Link;
uint Fpscr;
uint Fpinst;
uint Fpinst2;
uint64 VfpD;
}
struct _ASL_ATTRIBUTE{
ASL_ATTRIBUTE_TYPE Type;
uint Length;
uint64 Value;
uint Flags;
}
struct _ASL_ATTRIBUTE_NAMES{
ASL_ATTRIBUTE_INDEX Index;
wchar_t* Name;
}
struct _ASL_FILE_KIND_DETAIL_TO_STRING{
ASL_FILE_KIND_DETAIL FileKindDetailValue;
wchar_t* FileKindDetailString;
}
struct _ASL_FILE_MAPPING{
wchar_t FullPath;
}
struct _ASL_FILE_PARTIAL_VIEW{
void* ;
uint ViewSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ViewFileOffset;
void* SecureHandle;
}
struct _ASL_LARGE_FILE_MAP{
struct _RTL_FILE_MAP{
void* FileHandle;
void* FileSection;
uint64 FileSize;
void* ViewBase;
uint ViewSize;
void* SecureHandle;
uint8 OwnsHandle;
uint8 OwnsSection;
uint8 OwnsView;
uint8 MappedAsImage;
}* OriginalFileMapPtr;
void* FileSection;
struct _ASL_FILE_PARTIAL_VIEW{
void* ;
uint ViewSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ViewFileOffset;
void* SecureHandle;
} StartOfFile;
struct _ASL_FILE_PARTIAL_VIEW{
void* ;
uint ViewSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ViewFileOffset;
void* SecureHandle;
} EndOfFile;
}
struct _ASL_LOG_CHANNEL{
char Name;
}
struct _ASL_MANAGED_STORAGE_SIGNATURE{
uint ;
uint16 MajorVer;
uint16 MinorVer;
uint ExtraData;
uint VersionStringLength;
}
struct _ASL_STRING_HASH{
uint HashSize;
struct _ASL_STRING_HASH_ELEMENT{
wchar_t* HashString;
uint StringRef;
struct _ASL_STRING_HASH_ELEMENT* Next;
}** HashElementTable;
}
struct _ASL_STRING_HASH_ELEMENT{
wchar_t* HashString;
uint StringRef;
struct _ASL_STRING_HASH_ELEMENT* Next;
}
struct _ASL_STRING_VALID_XML_RANGES{
wchar_t LowerInclusiveValue;
wchar_t UpperInclusiveValue;
}
struct _ASL_VERSION_INFO_ROOT{
uint16 TotalLength;
uint16 ValueLength;
uint16 Type;
wchar_t KeyString;
}
struct _ASL_VER_BLK_HDR{
uint16 TotalLength;
uint16 ValueLength;
uint16 Type;
wchar_t KeyString;
}
struct _ASSEMBLY_FILE_DETAILED_INFORMATION{
uint ulFlags;
uint ulFilenameLength;
uint ulPathLength;
wchar_t* lpFileName;
wchar_t* lpFilePath;
}
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT{
void* ResolutionContext;
uint RootIndex;
uint8 CancelResolution;
uint8 NoMoreEntries;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Root;
}
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING{
void* Data;
uint AssemblyRosterIndex;
void* ResolutionContext;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Root;
uint8 KnownRoot;
uint RootCount;
uint8 CancelResolution;
}
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING{
void* ResolutionContext;
}
struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL{
void* ;
uint RootIndexUsed;
}
struct _ASYNC_DECOMPRESS_CHUNK_CONTEXT{
struct _WORK_QUEUE_ITEM{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} WorkItem;
uint8* UncompressedBuffer;
uint8* EndOfUncompressedBufferPlus1;
uint8* CompressedBuffer;
uint8* EndOfCompressedBufferPlus1;
uint* FinalUncompressedChunkSize;
uint IgnoredFinalUncompressedChunkSize;
struct _ASYNC_DECOMPRESS_CONTEXT{
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY ;
} ;
} Event;
uint ReferenceCount;
int Status;
}* DecompressContext;
}
struct _ASYNC_DECOMPRESS_CONTEXT{
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Event;
uint ReferenceCount;
int Status;
}
struct _ASYNC_READ_THREAD_STATS{
uint CurrentLoad;
}
struct _ASYNC_TDC_WORK_ITEM{
struct _WORK_QUEUE_ITEM{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* DeviceObject;
Callback* Callback;
void* Context;
struct _TARGET_DEVICE_CUSTOM_NOTIFICATION{
USHORT Version;
USHORT Size;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
}* NotificationStructure;
}
struct _ATA_PASSTHROUGH12{
uint8 OperationCode;
uint8 Reserved1:1;
uint8 Protocol:4;
uint8 MultipleCount:3;
uint8 TLength:2;
uint8 ByteBlock:1;
uint8 TDir:1;
uint8 Reserved2:1;
uint8 CkCond:1;
uint8 Offline:2;
uint8 Features;
uint8 SectorCount;
uint8 LbaLow;
uint8 LbaMid;
uint8 LbaHigh;
uint8 Device;
uint8 Command;
uint8 Reserved3;
uint8 Control;
}
struct _ATA_PASSTHROUGH16{
uint8 OperationCode;
uint8 Extend:1;
uint8 Protocol:4;
uint8 MultipleCount:3;
uint8 TLength:2;
uint8 ByteBlock:1;
uint8 TDir:1;
uint8 Reserved1:1;
uint8 CkCond:1;
uint8 Offline:2;
uint8 Features15_8;
uint8 Features7_0;
uint8 SectorCount15_8;
uint8 SectorCount7_0;
uint8 LbaLow15_8;
uint8 LbaLow7_0;
uint8 LbaMid15_8;
uint8 LbaMid7_0;
uint8 LbaHigh15_8;
uint8 LbaHigh7_0;
uint8 Device;
uint8 Command;
uint8 Control;
}
struct _ATA_PASS_THROUGH_DIRECT{
uint16 Length;
uint16 AtaFlags;
uint8 PathId;
uint8 TargetId;
uint8 Lun;
uint8 ReservedAsUchar;
uint DataTransferLength;
uint TimeOutValue;
uint ReservedAsUlong;
void* DataBuffer;
uint8 PreviousTaskFile;
}
struct _ATA_PASS_THROUGH_EX{
uint16 Length;
uint16 AtaFlags;
uint8 PathId;
uint8 TargetId;
uint8 Lun;
uint8 ReservedAsUchar;
uint DataTransferLength;
uint TimeOutValue;
uint ReservedAsUlong;
uint DataBufferOffset;
uint8 PreviousTaskFile;
}
struct _ATOMIC_CREATE_ECP_CONTEXT{
uint16 Size;
uint16 InFlags;
uint16 OutFlags;
uint16 ReparseBufferLength;
struct _REPARSE_DATA_BUFFER{
uint ReparseTag;
uint16 ReparseDataLength;
uint16 Reserved;
union {
struct {
uint16 SubstituteNameOffset;
uint16 SubstituteNameLength;
uint16 PrintNameOffset;
uint16 PrintNameLength;
uint Flags;
wchar_t PathBuffer;
} SymbolicLinkReparseBuffer;
struct {
uint16 SubstituteNameOffset;
uint16 SubstituteNameLength;
uint16 PrintNameOffset;
uint16 PrintNameLength;
wchar_t PathBuffer;
} MountPointReparseBuffer;
struct {
uint8 ;
} GenericReparseBuffer;
} ___u3;
}* ReparseBuffer;
int64 FileSize;
int64 ValidDataLength;
}
struct _ATOM_BASIC_INFORMATION{
uint16 UsageCount;
uint16 Flags;
uint16 NameLength;
wchar_t Name;
}
struct _ATOM_TABLE_INFORMATION{
uint NumberOfAtoms;
uint16 Atoms;
}
struct _ATSR{
uint8 Flags;
uint8 Reserved;
uint16 SegmentNumber;
struct _DEVICESCOPE{
uint8 Type;
uint8 Length;
uint8 Reserved;
} DeviceScope;
}
struct _ATTRIBUTES_AND_SID{
uint Attributes;
uint SidStart;
}
struct _ATTRIBUTE_MAP{
uint16 Tag;
ASL_ATTRIBUTE_INDEX Index;
}
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION{
uint DeviceGroupsCount;
struct _SID_AND_ATTRIBUTES{
void* ;
}* pDeviceGroups;
uint RestrictedDeviceGroupsCount;
struct _SID_AND_ATTRIBUTES{
void* ;
}* pRestrictedDeviceGroups;
struct _SID_AND_ATTRIBUTES_HASH{
uint SidCount;
struct _SID_AND_ATTRIBUTES{
void* ;
}* SidAttr;
uint Hash;
} DeviceGroupsHash;
struct _SID_AND_ATTRIBUTES_HASH{
uint SidCount;
struct _SID_AND_ATTRIBUTES{
void* ;
}* SidAttr;
uint Hash;
} RestrictedDeviceGroupsHash;
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}* pUserSecurityAttributes;
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}* pDeviceSecurityAttributes;
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}* pRestrictedUserSecurityAttributes;
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}* pRestrictedDeviceSecurityAttributes;
}
struct _AUTHZBASEP_SECURITY_ATTRIBUTE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListLink;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingListLink;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
uint16 ValueType;
uint Flags;
uint InternalFlags;
uint ValueCount;
uint DeletedValueCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ValuesList;
uint WorkingValueCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingValuesList;
}
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}
struct _AUTHZBASEP_SECURITY_ATTRIBUTE_QUERY{
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION{
uint SecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} SecurityAttributesList;
uint WorkingSecurityAttributeCount;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingSecurityAttributesList;
}* pInfo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} AttributeName;
uint16 ValueType;
uint Flags;
uint ValueCount;
union {
int64* pInt64;
uint64* pUint64;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* pString;
struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE{
uint64 Version;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
}* pFqbn;
struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{
void* pValue;
uint ValueLength;
}* pBinary;
} Value;
uint ResumeCookie;
}
struct _AUTHZBASEP_SECURITY_ATTRIBUTE_VALUE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListLink;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} WorkingListLink;
uint Flags;
union {
int64 Int64;
uint64 Uint64;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} String;
struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE{
uint64 Version;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
} Fqbn;
struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{
void* pValue;
uint ValueLength;
} OctetString;
} Value;
}
struct _AUX_ACCESS_DATA{
struct _PRIVILEGE_SET{
DWORD PrivilegeCount;
DWORD Control;
struct _LUID_AND_ATTRIBUTES{
struct _LUID{
DWORD LowPart;
LONG HighPart;
} ;
} ;
}* PrivilegesUsed;
struct _GENERIC_MAPPING{
ACCESS_MASK GenericRead;
ACCESS_MASK GenericWrite;
ACCESS_MASK GenericExecute;
ACCESS_MASK GenericAll;
} GenericMapping;
uint AccessesToAudit;
uint MaximumAuditMask;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} TransactionId;
void* NewSecurityDescriptor;
void* ExistingSecurityDescriptor;
void* ParentSecurityDescriptor;
DeRefSecurityDescriptor* DeRefSecurityDescriptor;
void* SDLock;
struct _ACCESS_REASONS{
uint ;
} AccessReasons;
uint8 GenerateStagingEvents;
}
struct _AVX_EXTENDED_CONTEXT{
union {
uint8 ReservedAVXExRegisters;
} ___u0;
}
struct _AVX_YMM_REGISTERS{
struct _VECTOR_128BIT_REGISTERS{
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm1;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm2;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm3;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm4;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm5;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm6;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm7;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm8;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm9;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm10;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm11;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm12;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm13;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm14;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm15;
} ;
struct _VECTOR_128BIT_REGISTERS{
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm0;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm1;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm2;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm3;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm4;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm5;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm6;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm7;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm8;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm9;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm10;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm11;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm12;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm13;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm14;
struct _AMD64_M128{
uint64 Low;
int64 High;
} Ymm15;
} HighPart;
}
struct _AWEINFO{
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} VadPhysicalPagesBitMap;
struct _EX_PUSH_LOCK_AUTO_EXPAND{
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} ;
struct _EX_PUSH_LOCK_AUTO_EXPAND_STATE{
union {
struct $B8BE16A3D12D2052ACAC7615E36C3DCE __s0;
uint Value;
} ___u0;
} State;
uint Stats;
} PushLock;
struct _RTL_AVL_TREE{
struct _RTL_BALANCED_NODE{
union {
struct _RTL_BALANCED_NODE* ;
} ___u0;
union {
struct $424C8BBEF8F6C852886B4C6E806B5DB0 __s0;
struct $D962A830273E2DCC2CD9A73DF8740260 __s1;
uint ParentValue;
} ___u1;
}* Root;
} AweVadRoot;
}
struct _AsActivator{
uint Id;
uint Reserved;
}
struct _AsConnection{
uint8 Reserved;
}
struct _AsDevice{
uint64 ;
struct _Component{
uint Signature;
uint Id;
} Component;
}
struct _AsPreVeto{
uint PreVetoSignature;
uint16 PlatformIdleState;
uint16 Reserved1;
uint VetoCode;
uint8 Reserved2;
}
struct _AsSocSubsystem{
uint SubsystemSignature;
uint16 PlatformIdleState;
uint16 SubsystemIndex;
uint8 Reserved;
}
struct _BAPD_ITEM_DESCRIPTOR{
union {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} PhysAddr;
void* VirtualAddr;
} u;
uint Length;
}
struct _BAPD_ITEM_V1{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Application;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} DataType;
uint Revision;
uint DataSize;
uint DataOffset;
}
struct _BAPD_LIST_ITEM{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Entry;
struct _BAPD_ITEM_DESCRIPTOR{
union {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} PhysAddr;
void* VirtualAddr;
} u;
uint Length;
} ItemDesc;
}
struct _BASE_MCB{
uint MaximumPairCount;
uint PairCount;
uint16 PoolType;
uint16 Flags;
void* Mapping;
}
struct _BATTERY_CHARGER_STATUS{
_BATTERY_CHARGING_SOURCE_TYPE Type;
uint VaData;
}
struct _BATTERY_CHARGING_SOURCE{
_BATTERY_CHARGING_SOURCE_TYPE Type;
uint MaxCurrent;
}
struct _BATTERY_CHARGING_SOURCE_INFORMATION{
_BATTERY_CHARGING_SOURCE_TYPE Type;
uint8 SourceOnline;
}
struct _BATTERY_DEVICE_STATE{
struct _BATTERY_INFORMATION{
uint Capabilities;
uint8 Technology;
uint8 Reserved;
} Information;
struct _BATTERY_STATUS{
uint PowerState;
uint Capacity;
uint Voltage;
int Rate;
} Status;
}
struct _BATTERY_INFORMATION{
uint Capabilities;
uint8 Technology;
uint8 Reserved;
}
struct _BATTERY_MANUFACTURE_DATE{
uint8 Day;
uint8 Month;
uint16 Year;
}
struct _BATTERY_QUERY_INFORMATION{
uint BatteryTag;
BATTERY_QUERY_INFORMATION_LEVEL InformationLevel;
uint AtRate;
}
struct _BATTERY_SET_INFORMATION{
uint BatteryTag;
BATTERY_SET_INFORMATION_LEVEL InformationLevel;
uint8 Buffer;
}
struct _BATTERY_STATUS{
uint PowerState;
uint Capacity;
uint Voltage;
int Rate;
}
struct _BATTERY_USB_CHARGER_STATUS{
_BATTERY_CHARGING_SOURCE_TYPE Type;
uint Reserved;
uint Flags;
uint MaxCurrent;
uint Voltage;
_USB_CHARGER_PORT PortType;
uint64 PortId;
void* PowerSourceInformation;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} OemCharger;
}
struct _BATTERY_WAIT_STATUS{
uint BatteryTag;
uint Timeout;
uint PowerState;
uint LowCapacity;
uint HighCapacity;
}
struct _BCB{
union {
struct _MBCB{
__int16 NodeTypeCode;
__int16 NodeIsInZone;
uint PagesToWrite;
uint DirtyPages;
uint Reserved;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BitmapRanges;
int64 ResumeWritePage;
int64 MostRecentlyDirtiedPage;
struct _BITMAP_RANGE{
struct _LIST_ENTRY Links;
int64 BasePage;
uint FirstDirtyPage;
uint LastDirtyPage;
uint DirtyPages;
uint* Bitmap;
} BitmapRange1;
struct _BITMAP_RANGE{
struct _LIST_ENTRY Links;
int64 BasePage;
uint FirstDirtyPage;
uint LastDirtyPage;
uint DirtyPages;
uint* Bitmap;
} BitmapRange2;
struct _BITMAP_RANGE{
struct _LIST_ENTRY Links;
int64 BasePage;
uint FirstDirtyPage;
uint LastDirtyPage;
uint DirtyPages;
uint* Bitmap;
} BitmapRange3;
} Dummy;
struct {
__int16 NodeTypeCode;
uint8 Dirty;
uint8 Reserved;
uint ByteLength;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} FileOffset;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BcbLinks;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} BeyondLastByte;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} OldestLsn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} NewestLsn;
struct _VACB{
void* BaseAddress;
struct _SHARED_CACHE_MAP* SharedCacheMap;
union $F71FD6E462B66E625B8330A67E94FF41 Overlay;
struct _VACB_ARRAY_HEADER* ArrayHead;
}* Vacb;
uint PinCount;
struct _ERESOURCE{
struct _LIST_ENTRY ;
} Resource;
struct _SHARED_CACHE_MAP{
__int16 NodeTypeCode;
__int16 NodeByteSize;
uint OpenCount;
union _LARGE_INTEGER FileSize;
struct _LIST_ENTRY BcbList;
union _LARGE_INTEGER SectionSize;
union _LARGE_INTEGER ValidDataLength;
union _LARGE_INTEGER ValidDataGoal;
struct _VACB* InitialVacbs;
}* SharedCacheMap;
void* BaseAddress;
} __s1;
} ___u0;
}
struct _BCB_TRIM_NOTIFICATION_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
Callback* Callback;
}
struct _BCD80{
uint16 W;
}
struct _BCDE_BOOLEAN{
uint8 ;
uint8 Pad;
}
struct _BCDE_DEVICE{
uint DeviceType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} AdditionalOptions;
union {
struct {
uint ParentOffset;
wchar_t Path;
} File;
struct {
wchar_t ;
} Partition;
struct {
uint Type;
uint ParentOffset;
uint ElementType;
wchar_t Path;
} Locate;
struct {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InterfaceInstance;
} Vmbus;
struct {
uint8 Data;
} Unknown;
struct _BCDE_DEVICE_QUALIFIED_PARTITION{
uint PartitionStyle;
uint Reserved;
union {
struct $A32995490EFBE0199A6E820B9FDA0321 Mbr;
struct $EF60B6C0ACF960F10D493F7E54F872BC Gpt;
} ___u2;
} QualifiedPartition;
} ___u2;
}
struct _BCDE_DEVICE_QUALIFIED_PARTITION{
uint PartitionStyle;
uint Reserved;
union {
struct {
uint ;
uint64 PartitionOffset;
} Mbr;
struct {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} DiskSignature;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} PartitionSignature;
} Gpt;
} ___u2;
}
struct _BCDE_INTEGER{
uint64 Value;
}
struct _BCDE_INTEGER_LIST{
uint64 ;
}
struct _BCDE_OBJECT{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
}
struct _BCDE_OBJECT_LIST{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
}
struct _BCDE_STRING{
wchar_t ;
}
struct _BCDI_ELEMENT{
struct _BCDI_ELEMENT* ;
union _BCDE_UNPACKED_DATA_TYPE{
struct {
uint32 ;
uint32 Format:4;
uint32 Class:4;
} __s0;
uint PackedValue;
} ParentDataType;
struct _BCD_ELEMENT_DESCRIPTION{
uint Version;
uint Type;
uint DataSize;
} Description;
char Data;
}
struct _BCDI_OBJECT_TRACKER{
struct _BCDI_OBJECT_TRACKER* Previous;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* Object;
}
struct _BCD_ELEMENT{
struct _BCD_ELEMENT_DESCRIPTION{
uint Version;
uint Type;
uint DataSize;
}* Description;
void* Data;
}
struct _BCD_ELEMENT_DESCRIPTION{
uint Version;
uint Type;
uint DataSize;
}
struct _BCD_GUID_CACHED_VALUES{
uint64 Time;
int AllocatedCount;
uint16 Sequence;
uint8 Seed;
}
struct _BCD_OBJECT{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Identifier;
struct _BCD_OBJECT_DESCRIPTION{
uint Version;
uint Type;
}* Description;
}
struct _BCD_OBJECT_DESCRIPTION{
uint Version;
uint Type;
}
struct _BCD_PRIVILEGE_STATE{
uint Privilege;
uint8 PreviouslyEnabled;
uint8 Impersonating;
}
struct _BCRYPT_ALGORITHM_IDENTIFIER{
wchar_t* pszName;
uint dwClass;
uint dwFlags;
}
struct _BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO{
uint cbSize;
uint dwInfoVersion;
uint8* pbNonce;
uint cbNonce;
uint8* pbAuthData;
uint cbAuthData;
uint8* pbTag;
uint cbTag;
uint8* pbMacContext;
uint cbMacContext;
uint cbAAD;
uint64 cbData;
uint dwFlags;
}
struct _BCRYPT_PROVIDER_NAME{
wchar_t* pszProviderName;
}
struct _BCryptBuffer{
uint ;
uint BufferType;
void* pvBuffer;
}
struct _BCryptBufferDesc{
uint ulVersion;
uint cBuffers;
struct _BCryptBuffer{
uint ;
uint BufferType;
void* pvBuffer;
}* pBuffers;
}
struct _BDCB_IMAGE_INFORMATION{
_BDCB_CLASSIFICATION Classification;
uint ImageFlags;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ImageName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} RegistryPath;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificatePublisher;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificateIssuer;
void* ImageHash;
void* CertificateThumbprint;
uint ImageHashAlgorithm;
uint ThumbprintHashAlgorithm;
uint ImageHashLength;
uint CertificateThumbprintLength;
}
struct _BDCB_STATUS_UPDATE_CONTEXT{
_BDCB_STATUS_UPDATE_TYPE StatusType;
}
struct _BGCONSOLE_CACHE_DATA{
uint ;
uint Background;
wchar_t Character;
wchar_t Reserved;
}
struct _BGCONSOLE_INTERFACE{
Initialize* Initialize;
ClearScreen* ClearScreen;
SetTextColor* SetTextColor;
DisplayString* DisplayString;
DisplayCharacter* DisplayCharacter;
GetState* GetState;
GetCursorState* GetCursorState;
SetCursor* SetCursor;
}
struct _BGCONSOLE_INTERNAL_STATE{
uint Columns;
uint Rows;
uint Flags;
uint Foreground;
uint Background;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Resolution;
uint PointSize;
void* CharacterContext;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Glyph;
struct _CARTESIAN_COORDINATE{
uint X;
uint Y;
} Pad;
struct _CURSOR_COORDINATE{
uint Column;
uint Row;
} Cursor;
uint CursorSize;
struct _BGCONSOLE_CACHE_DATA{
uint ;
uint Background;
wchar_t Character;
wchar_t Reserved;
} Cache;
}
struct _BGCRITICAL_MODE_STATE{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} MainMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ErrorMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} AutomaticRestartMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ManualRestartMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} NoDumpAutomaticRestartMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} NoDumpManualRestartMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ProgressMessageSingularPartOne;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ProgressMessageSingularPartTwo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ProgressMessagePluralPartOne;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ProgressMessagePluralPartTwo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} DriverMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} StopCodeMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} UrlMessage;
struct _CHARACTER_CONTEXT{
void* FontHandle;
uint PointSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} CharacterSize;
void* RegionHandle;
}* CharacterContext;
}
struct _BGFX_BUGCHECK_CONTEXT{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* MainMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ErrorMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} BugCode;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} BugData;
}
struct _BGFX_BUGCHECK_PROGRESS_CONTEXT{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* RestartMessage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ProgressMessageOne;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
}* ProgressMessageTwo;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ProgressValue;
}
struct _BGFX_CONSOLE_STATE{
uint Width;
uint Height;
uint Columns;
uint Rows;
uint FontWidth;
uint FontHeight;
uint PadX;
uint PadY;
}
struct _BGFX_FONT_DATA{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _BGFX_FONT_FILE_DATA{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _FILE_IMAGE{
void* Image;
uint SizeOfImage;
uint Flags;
void* CurrentPosition;
}* FileHandle;
uint NumberOfFonts;
uint FontFlags;
struct {
uint32 TtcTableDirectory:1;
uint32 Reserved:31;
} Flags;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FontListHead;
}* ParentFontFile;
struct _MAPPING_TABLE{
uint SegmentCount;
void* BaseAllocation;
uint16* StartCode;
uint16* EndCode;
__int16* Delta;
uint16* RangeOffset;
uint16* GlyphIdArray;
}* MappingTable;
wchar_t* FamilyName;
uint FontIndex;
uint OffsetTableOffset;
uint CmapOffset;
uint EbdtOffset;
uint EblcOffset;
uint GlyfOffset;
uint HeadOffset;
uint HmtxOffset;
uint LocaOffset;
uint16 LocaFormat;
uint16 AdvanceWidthMax;
__int16 XMaxExtent;
__int16 Ascender;
__int16 Descender;
__int16 Baseline;
uint16 NumberOfHorizontalMetrics;
uint NumberOfStrikes;
uint ResolutionDPI;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} StrikeListHead;
uint16 UnitsPerEm;
}
struct _BGFX_FONT_FILE_DATA{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _FILE_IMAGE{
void* Image;
uint SizeOfImage;
uint Flags;
void* CurrentPosition;
}* FileHandle;
uint NumberOfFonts;
uint FontFlags;
struct {
uint32 TtcTableDirectory:1;
uint32 Reserved:31;
} Flags;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FontListHead;
}
struct _BGFX_RESUME_CONTEXT{
uint ResumeContextSize;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* ScratchMdl;
void* ScratchMemory;
uint ScratchMemorySize;
}
struct _BGRT_TABLE{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint16 Version;
uint8 Status;
uint8 ImageType;
uint64 LogoAddress;
uint OffsetX;
uint OffsetY;
}
struct _BG_EXTERNAL_CONTEXT{
struct _BGFX_RESUME_CONTEXT{
uint ResumeContextSize;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* ScratchMdl;
void* ScratchMemory;
uint ScratchMemorySize;
} ResumeContext;
struct _INBV_DISPLAY_CONTEXT{
uint8 FrameBufferValid;
uint8 FrameBufferMapped;
uint8 DisplayRotation;
struct _INBV_MODE_INFORMATION{
uint Height;
uint Width;
uint Stride;
_INBV_PIXEL_FORMAT PixelFormat;
} ModeInformation;
void* ShadowBuffer;
union {
void* FrameBuffer;
BltRoutine* BltRoutine;
} VideoMemory;
} DisplayContext;
void* SystemFontImage;
uint SystemFontImageSize;
uint SystemFontInitDataSize;
void* ConsoleFontImage;
uint ConsoleFontImageSize;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Application;
uint Version;
uint Flags;
uint FadeFrames;
void* MuiFileBase;
uint MuiFileSize;
struct _BG_RESOURCE_PACK{
void* Background;
void* PagedBackground;
uint BackgroundSize;
struct _OFFSET{
uint X;
uint Y;
} Offset;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Area;
void* QrBitmap;
uint QrBitmapSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} QrBitmapArea;
struct _GRAPHICS_RECTANGLE{
uint Height;
uint Width;
uint BitsPerPixel;
uint Size;
uint Flags;
void* Data;
struct _BITMAP_IMAGE{
uint HeaderSize;
uint Width;
uint Height;
uint16 Planes;
uint16 BitsPerPixel;
uint Compression;
uint DataSize;
uint HorizontalResolution;
uint VerticalResolution;
uint NumberOfColors;
uint NumberOfImportantColors;
} Bitmap;
}* QrDisplayRectangle;
} Resources;
uint64 BackgroundTransitionTime;
void* ReservePool;
uint ReservePoolSize;
void* TextRegionContext;
void* AnimationRegionContext;
struct _EDID_INFORMATION{
uint8 Edid;
} EdidInformation;
_BG_CONSOLE_LOCALE ConsoleLocale;
}
struct _BG_INTERNAL_CONTEXT{
struct _INBV_DISPLAY_CONTEXT{
uint8 FrameBufferValid;
uint8 FrameBufferMapped;
uint8 DisplayRotation;
struct _INBV_MODE_INFORMATION{
uint Height;
uint Width;
uint Stride;
_INBV_PIXEL_FORMAT PixelFormat;
} ModeInformation;
void* ShadowBuffer;
union {
void* FrameBuffer;
BltRoutine* BltRoutine;
} VideoMemory;
} DisplayContext;
struct _INBV_DISPLAY_CONTEXT{
uint8 FrameBufferValid;
uint8 FrameBufferMapped;
uint8 DisplayRotation;
struct _INBV_MODE_INFORMATION{
uint Height;
uint Width;
uint Stride;
_INBV_PIXEL_FORMAT PixelFormat;
} ModeInformation;
void* ShadowBuffer;
union {
void* FrameBuffer;
BltRoutine* BltRoutine;
} VideoMemory;
} CachedDisplayContext;
struct _SYSTEM_BOOT_GRAPHICS_INFORMATION{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FrameBuffer;
uint Width;
uint Height;
uint PixelStride;
uint Flags;
_SYSTEM_PIXEL_FORMAT Format;
uint DisplayRotation;
} GraphicsInformation;
uint Flags;
uint FadeFrames;
uint LogoOffset;
uint ProgressOffset;
uint ProgressSize;
uint TextControlOffset;
uint TextControlSize;
uint FadeTotalSize;
uint AnimationCacheSize;
uint AnimationFrameSize;
uint AnimationRegionSize;
uint TextRegionSize;
struct _BG_EXTERNAL_CONTEXT{
struct _BGFX_RESUME_CONTEXT{
uint ResumeContextSize;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ScratchMdl;
void* ScratchMemory;
uint ScratchMemorySize;
} ResumeContext;
struct _INBV_DISPLAY_CONTEXT{
uint8 FrameBufferValid;
uint8 FrameBufferMapped;
uint8 DisplayRotation;
struct _INBV_MODE_INFORMATION{
uint Height;
uint Width;
uint Stride;
_INBV_PIXEL_FORMAT PixelFormat;
} ModeInformation;
void* ShadowBuffer;
union {
void* FrameBuffer;
BltRoutine* BltRoutine;
} VideoMemory;
} DisplayContext;
void* SystemFontImage;
uint SystemFontImageSize;
uint SystemFontInitDataSize;
void* ConsoleFontImage;
uint ConsoleFontImageSize;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Application;
uint Version;
uint Flags;
uint FadeFrames;
void* MuiFileBase;
uint MuiFileSize;
struct _BG_RESOURCE_PACK{
void* Background;
void* PagedBackground;
uint BackgroundSize;
struct _OFFSET{
uint X;
uint Y;
} Offset;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Area;
void* QrBitmap;
uint QrBitmapSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} QrBitmapArea;
struct _GRAPHICS_RECTANGLE{
uint Height;
uint Width;
uint BitsPerPixel;
uint Size;
uint Flags;
void* Data;
struct _BITMAP_IMAGE Bitmap;
}* QrDisplayRectangle;
} Resources;
uint64 BackgroundTransitionTime;
void* ReservePool;
uint ReservePoolSize;
void* TextRegionContext;
void* AnimationRegionContext;
struct _EDID_INFORMATION{
uint8 Edid;
} EdidInformation;
_BG_CONSOLE_LOCALE ConsoleLocale;
}* ResumeContext;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} Application;
struct _BG_RESOURCE_PACK{
void* Background;
void* PagedBackground;
uint BackgroundSize;
struct _OFFSET{
uint X;
uint Y;
} Offset;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Area;
void* QrBitmap;
uint QrBitmapSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} QrBitmapArea;
struct _GRAPHICS_RECTANGLE{
uint Height;
uint Width;
uint BitsPerPixel;
uint Size;
uint Flags;
void* Data;
struct _BITMAP_IMAGE{
uint HeaderSize;
uint Width;
uint Height;
uint16 Planes;
uint16 BitsPerPixel;
uint Compression;
uint DataSize;
uint HorizontalResolution;
uint VerticalResolution;
uint NumberOfColors;
uint NumberOfImportantColors;
} Bitmap;
}* QrDisplayRectangle;
} Resources;
uint64 BackgroundTransitionTime;
struct _FILE_IMAGE{
void* Image;
uint SizeOfImage;
uint Flags;
void* CurrentPosition;
}* ConsoleFont;
struct _FILE_IMAGE{
void* Image;
uint SizeOfImage;
uint Flags;
void* CurrentPosition;
}* SystemFont;
struct _FILE_IMAGE{
void* Image;
uint SizeOfImage;
uint Flags;
void* CurrentPosition;
}* BootResourceMui;
void* AnimationRegion;
void* TextRegion;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} BootRestoreList;
struct _EDID_INFORMATION{
uint8 Edid;
} EdidInformation;
uint* FrameBufferAccessCounter;
_BG_CONSOLE_LOCALE ConsoleLocale;
}
struct _BG_RASTERIZER_WORKSPACE{
void* Buffer;
uint BufferSize;
uint BytesConsumed;
}
struct _BG_RESOURCE_PACK{
void* Background;
void* PagedBackground;
uint BackgroundSize;
struct _OFFSET{
uint X;
uint Y;
} Offset;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} Area;
void* QrBitmap;
uint QrBitmapSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} QrBitmapArea;
struct _GRAPHICS_RECTANGLE{
uint Height;
uint Width;
uint BitsPerPixel;
uint Size;
uint Flags;
void* Data;
struct _BITMAP_IMAGE{
uint HeaderSize;
uint Width;
uint Height;
uint16 Planes;
uint16 BitsPerPixel;
uint Compression;
uint DataSize;
uint HorizontalResolution;
uint VerticalResolution;
uint NumberOfColors;
uint NumberOfImportantColors;
} Bitmap;
}* QrDisplayRectangle;
}
struct _BG_WORKSPACE{
struct _BG_RASTERIZER_WORKSPACE{
void* Buffer;
uint BufferSize;
uint BytesConsumed;
} RasterizerWorkspace;
}
struct _BIN_COUNT{
struct _BIN_RANGE{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartValue;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Length;
} ;
uint BinCount;
}
struct _BIN_RANGE{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartValue;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Length;
}
struct _BIN_RESULTS{
uint NumberOfBins;
struct _BIN_COUNT{
struct _BIN_RANGE{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} StartValue;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} Length;
} ;
uint BinCount;
} BinCounts;
}
struct _BITMAPINFOHEADER{
uint biSize;
int biWidth;
int biHeight;
uint16 biPlanes;
uint16 biBitCount;
uint biCompression;
uint biSizeImage;
int biXPelsPerMeter;
int biYPelsPerMeter;
uint biClrUsed;
uint biClrImportant;
}
struct _BITMAP_CACHE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
uint8* CompressedBitmaps;
uint8* DecompressionBuffer;
void* DecompressionWorkSpace;
uint CompressedBitmapsSize;
uint DecompressionBufferSize;
uint Size;
uint EntryCount;
}
struct _BITMAP_DUMP{
uint Signature;
uint ValidDump;
uint DumpOptions;
uint8 Reserved;
}
struct _BITMAP_IMAGE{
uint HeaderSize;
uint Width;
uint Height;
uint16 Planes;
uint16 BitsPerPixel;
uint Compression;
uint DataSize;
uint HorizontalResolution;
uint VerticalResolution;
uint NumberOfColors;
uint NumberOfImportantColors;
}
struct _BITMAP_IMAGE_PROLOG{
uint16 Identifier;
uint FileSize;
uint Reserved;
uint DataOffset;
}
struct _BITMAP_RANGE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Links;
int64 BasePage;
uint FirstDirtyPage;
uint LastDirtyPage;
uint DirtyPages;
uint* Bitmap;
}
struct _BI_FILE_INFORMATION{
uint VolumeSerialNumber;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FileIndex;
}
struct _BLANK_MEDIA{
uint8 OperationCode;
uint8 BlankType:3;
uint8 Reserved1:1;
uint8 Immediate:1;
uint8 Reserved2:3;
uint8 AddressOrTrack;
}
struct _BLDR_DATA_TABLE_ENTRY{
struct _KLDR_DATA_TABLE_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} InLoadOrderLinks;
void* ExceptionTable;
uint ExceptionTableSize;
void* GpValue;
struct _NON_PAGED_DEBUG_INFO{
uint16 Signature;
uint16 Flags;
uint Size;
uint16 Machine;
uint16 Characteristics;
uint TimeDateStamp;
uint CheckSum;
uint SizeOfImage;
uint64 ImageBase;
}* NonPagedDebugInfo;
void* DllBase;
void* EntryPoint;
uint SizeOfImage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FullDllName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} BaseDllName;
uint Flags;
uint16 LoadCount;
union {
struct {
uint16 ;
uint16 SignatureType:3;
uint16 Unused:9;
} __s0;
uint16 EntireField;
} u1;
void* SectionPointer;
uint CheckSum;
uint CoverageSectionSize;
void* CoverageSection;
void* LoadedImports;
void* Spare;
uint SizeOfImageNotRounded;
uint TimeDateStamp;
} KldrEntry;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificatePublisher;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificateIssuer;
void* ImageHash;
void* CertificateThumbprint;
uint ImageHashAlgorithm;
uint ThumbprintHashAlgorithm;
uint ImageHashLength;
uint CertificateThumbprintLength;
uint LoadInformation;
uint Flags;
}
struct _BLENDFUNCTION{
uint8 BlendOp;
uint8 BlendFlags;
uint8 SourceantAlpha;
uint8 AlphaFormat;
}
struct _BLOB{
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ResourceList;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} FreeListEntry;
} ___u0;
union {
struct {
uint8 ReferenceCache:1;
uint8 Lookaside:1;
uint8 Initializing:1;
uint8 Deleted:1;
} s1;
uint8 Flags;
} u1;
uint8 ResourceId;
__int16 CachedReferences;
int ReferenceCount;
uint Pad;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} Lock;
}
struct _BLOB_COUNTERS{
uint CreatedObjects;
uint DeletedObjects;
}
struct _BLOB_TYPE{
_BLOB_ID ResourceId;
uint PoolTag;
uint LookasideIndex;
uint Flags;
struct _BLOB_COUNTERS{
uint CreatedObjects;
uint DeletedObjects;
}* Counters;
DeleteProcedure* DeleteProcedure;
DestroyProcedure* DestroyProcedure;
uint UsualSize;
}
struct _BLOCK_IO_IDENTIFIER{
uint BlockIoType;
union {
struct _HARD_DISK_IDENTIFIER{
uint ;
union {
struct $91CD65F9D380A2591BF1731802970D49 Mbr;
struct $A4FFB701C84E64A1C6C179A1048ED3B6 Gpt;
struct $C5DBB1A92022CECA30BC99CDC85AFF40 Raw;
} ___u1;
} HardDisk;
struct _REMOVABLE_DISK_IDENTIFIER{
uint DriveNumber;
} RemovableDisk;
struct _CDROM_IDENTIFIER{
uint CdromNumber;
} Cdrom;
struct _FILE_IDENTIFIER{
struct _FILE_PATH{
uint Version;
uint Length;
uint Type;
uint8 FilePath;
} SourcePath;
} File;
struct _RAM_DISK_IDENTIFIER{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} ImageBase;
uint64 ImageSize;
uint ImageOffset;
struct _FILE_IDENTIFIER{
struct _FILE_PATH SourcePath;
} Source;
} RamDisk;
struct _HARD_DISK_IDENTIFIER{
uint ;
union {
struct $91CD65F9D380A2591BF1731802970D49 Mbr;
struct $A4FFB701C84E64A1C6C179A1048ED3B6 Gpt;
struct $C5DBB1A92022CECA30BC99CDC85AFF40 Raw;
} ___u1;
} VirtualHardDisk;
} u;
}
struct _BL_LOG_ENTRY_HEADER{
uint Timestamp;
uint DataSize;
BL_LOG_ENTRY_TYPE LogType;
}
struct _BL_LOG_ETW_EVENT{
struct _BL_LOG_ENTRY_HEADER{
uint Timestamp;
uint DataSize;
BL_LOG_ENTRY_TYPE LogType;
} Header;
uint8 Reserved;
}
struct _BL_LOG_HEADER{
struct _BL_LOG_ENTRY_HEADER{
uint Timestamp;
uint DataSize;
BL_LOG_ENTRY_TYPE LogType;
} Header;
uint64 TraceSize;
uint Version;
uint ScenarioType;
union {
struct {
uint64 HiberFileSize;
} ;
struct {
uint64 Spare;
} Boot;
} ___u4;
}
struct _BOOTDISK_INFORMATION{
int64 BootPartitionOffset;
int64 SystemPartitionOffset;
uint BootDeviceSignature;
uint SystemDeviceSignature;
}
struct _BOOTDISK_INFORMATION_EX{
int64 BootPartitionOffset;
int64 SystemPartitionOffset;
uint BootDeviceSignature;
uint SystemDeviceSignature;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} BootDeviceGuid;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} SystemDeviceGuid;
uint8 BootDeviceIsGpt;
uint8 SystemDeviceIsGpt;
}
struct _BOOTDISK_INFORMATION_LITE{
uint NumberEntries;
struct _LOADER_PARTITION_INFORMATION_EX{
uint PartitionStyle;
uint PartitionNumber;
union {
uint ;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} DeviceId;
} ___u2;
uint Flags;
} Entries;
}
struct _BOOTVID_INTERFACE{
NotifyDisplayOwnershipLost* NotifyDisplayOwnershipLost;
AcquireDisplayOwnership* AcquireDisplayOwnership;
NotifyDisplayOwnershipChange* NotifyDisplayOwnershipChange;
ResetDisplay* ResetDisplay;
SolidColorFill* SolidColorFill;
DisplayString* DisplayString;
EnableBootDriver* EnableBootDriver;
IsBootDriverInstalled* IsBootDriverInstalled;
CheckDisplayOwnership* CheckDisplayOwnership;
SetScrollRegion* SetScrollRegion;
SetTextColor* SetTextColor;
DriverInitialize* DriverInitialize;
BitBlt* BitBlt;
UpdateProgressBar* UpdateProgressBar;
SetProgressBarSubset* SetProgressBarSubset;
IndicateProgress* IndicateProgress;
GetResourceAddress** GetResourceAddress;
SetDisplayOwnership* SetDisplayOwnership;
GetDisplayState* GetDisplayState;
AcquireLock* AcquireLock;
ReleaseLock* ReleaseLock;
ReleaseResources* ReleaseResources;
SetVirtualFrameBuffer* SetVirtualFrameBuffer;
}
struct _BOOT_AREA_INFO{
uint BootSectorCount;
struct {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} Offset;
} BootSectors;
}
struct _BOOT_DISK_CONTEXT{
struct _PARTITION_INFORMATION_EX{
_PARTITION_STYLE PartitionStyle;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingOffset;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} PartitionLength;
uint PartitionNumber;
uint8 RewritePartition;
union {
struct _PARTITION_INFORMATION_MBR{
uint8 PartitionType;
uint8 BootIndicator;
uint8 RecognizedPartition;
uint HiddenSectors;
struct _GUID PartitionId;
} Mbr;
struct _PARTITION_INFORMATION_GPT{
struct _GUID PartitionType;
struct _GUID PartitionId;
uint64 Attributes;
wchar_t Name;
} Gpt;
} ___u5;
}* PartitionInformation;
void* Signature;
wchar_t* RelativePath;
uint* VolumeNumber;
}
struct _BOOT_DRIVER_LIST_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FilePath;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} RegistryPath;
struct _BLDR_DATA_TABLE_ENTRY{
struct _KLDR_DATA_TABLE_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} InLoadOrderLinks;
void* ExceptionTable;
uint ExceptionTableSize;
void* GpValue;
struct _NON_PAGED_DEBUG_INFO{
uint16 Signature;
uint16 Flags;
uint Size;
uint16 Machine;
uint16 Characteristics;
uint TimeDateStamp;
uint CheckSum;
uint SizeOfImage;
uint64 ImageBase;
}* NonPagedDebugInfo;
void* DllBase;
void* EntryPoint;
uint SizeOfImage;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FullDllName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} BaseDllName;
uint Flags;
uint16 LoadCount;
union {
struct $1E2A795FFD7D7084A69DFCF07622B245 __s0;
uint16 EntireField;
} u1;
void* SectionPointer;
uint CheckSum;
uint CoverageSectionSize;
void* CoverageSection;
void* LoadedImports;
void* Spare;
uint SizeOfImageNotRounded;
uint TimeDateStamp;
} KldrEntry;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificatePublisher;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificateIssuer;
void* ImageHash;
void* CertificateThumbprint;
uint ImageHashAlgorithm;
uint ThumbprintHashAlgorithm;
uint ImageHashLength;
uint CertificateThumbprintLength;
uint LoadInformation;
uint Flags;
}* LdrEntry;
int LoadStatus;
uint LoadInformation;
}
struct _BOOT_DRIVER_NODE{
struct _BOOT_DRIVER_LIST_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} FilePath;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} RegistryPath;
struct _BLDR_DATA_TABLE_ENTRY{
struct _KLDR_DATA_TABLE_ENTRY{
struct _LIST_ENTRY InLoadOrderLinks;
void* ExceptionTable;
uint ExceptionTableSize;
void* GpValue;
struct _NON_PAGED_DEBUG_INFO* NonPagedDebugInfo;
void* DllBase;
void* EntryPoint;
uint SizeOfImage;
struct _UNICODE_STRING FullDllName;
struct _UNICODE_STRING BaseDllName;
uint Flags;
uint16 LoadCount;
union $9B787A8457723ACE6646AFAD9A586D79 u1;
void* SectionPointer;
uint CheckSum;
uint CoverageSectionSize;
void* CoverageSection;
void* LoadedImports;
void* Spare;
uint SizeOfImageNotRounded;
uint TimeDateStamp;
} KldrEntry;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificatePublisher;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} CertificateIssuer;
void* ImageHash;
void* CertificateThumbprint;
uint ImageHashAlgorithm;
uint ThumbprintHashAlgorithm;
uint ImageHashLength;
uint CertificateThumbprintLength;
uint LoadInformation;
uint Flags;
}* LdrEntry;
int LoadStatus;
uint LoadInformation;
} ListEntry;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} DriverDependencies;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Group;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
uint Tag;
uint ErrorControl;
}
struct _BOOT_ENTROPY_LDR_RESULT{
uint maxEntropySources;
struct _BOOT_ENTROPY_SOURCE_LDR_RESULT{
_BOOT_ENTROPY_SOURCE_ID SourceId;
uint64 Policy;
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode;
int ResultStatus;
uint64 Time;
uint EntropyLength;
uint8 EntropyData;
} EntropySourceResult;
}
struct _BOOT_ENTROPY_NT_RESULT{
uint maxEntropySources;
struct _BOOT_ENTROPY_SOURCE_NT_RESULT{
_BOOT_ENTROPY_SOURCE_ID SourceId;
uint64 Policy;
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode;
int ResultStatus;
uint64 Time;
uint EntropyLength;
uint8 EntropyData;
} EntropySourceResult;
}
struct _BOOT_ENTROPY_SOURCE_LDR_RESULT{
_BOOT_ENTROPY_SOURCE_ID SourceId;
uint64 Policy;
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode;
int ResultStatus;
uint64 Time;
uint EntropyLength;
uint8 EntropyData;
}
struct _BOOT_ENTROPY_SOURCE_NT_RESULT{
_BOOT_ENTROPY_SOURCE_ID SourceId;
uint64 Policy;
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode;
int ResultStatus;
uint64 Time;
uint EntropyLength;
uint8 EntropyData;
}
struct _BOOT_ENTRY{
uint Version;
uint Length;
uint Id;
uint Attributes;
uint FriendlyNameOffset;
uint BootFilePathOffset;
uint OsOptionsLength;
uint8 OsOptions;
}
struct _BOOT_ENTRY_LIST{
uint NextEntryOffset;
struct _BOOT_ENTRY{
uint Version;
uint Length;
uint Id;
uint Attributes;
uint FriendlyNameOffset;
uint BootFilePathOffset;
uint OsOptionsLength;
uint8 OsOptions;
} BootEntry;
}
struct _BOOT_ENTRY_OPTION{
uint Type;
uint DataOffset;
uint DataSize;
uint AssociatedOptionsOffset;
uint NextOptionOffset;
uint8 Invalid;
uint8 FveHashState;
uint8 Reserved;
}
struct _BOOT_ENVIRONMENT_DEVICE{
uint DeviceType;
uint Flags;
uint Size;
uint Pad;
union {
struct _BLOCK_IO_IDENTIFIER{
uint BlockIoType;
union {
struct _HARD_DISK_IDENTIFIER HardDisk;
struct _REMOVABLE_DISK_IDENTIFIER RemovableDisk;
struct _CDROM_IDENTIFIER Cdrom;
struct _FILE_IDENTIFIER File;
struct _RAM_DISK_IDENTIFIER RamDisk;
struct _HARD_DISK_IDENTIFIER VirtualHardDisk;
} u;
} BlockIo;
struct _PARTITION_IDENTIFIER{
union {
struct $82E979006F6A881053417FDE709EA08D ElTorito;
struct $8E495A39B2736E2AE1A5656A59C4F9CB Gpt;
struct $DA27E566B1AD51147DC1DE2358E20AAD Mbr;
} ___u0;
struct _BLOCK_IO_IDENTIFIER{
uint BlockIoType;
union $EB1A69AD9D8D74B1D76CE5BB98A737D6 u;
} ParentIdentifier;
} Partition;
struct _PARTITION_IDENTIFIER_EX{
union {
struct $82E979006F6A881053417FDE709EA08D ElTorito;
struct $8E495A39B2736E2AE1A5656A59C4F9CB Gpt;
struct $1E1F86A0F2B00E983347D511AE7D75EF Mbr;
} ___u0;
struct _BLOCK_IO_IDENTIFIER{
uint BlockIoType;
union $EB1A69AD9D8D74B1D76CE5BB98A737D6 u;
} ParentIdentifier;
} PartitionEx;
struct _SERIAL_PORT_IDENTIFIER{
uint ;
union {
uint PortNumber;
struct _GEN_ADDR BaseAddress;
} u;
} SerialPort;
struct _UDP_IDENTIFIER{
uint HwType;
uint8 HwAddress;
} Udp;
struct _LOCATE_IDENTIFIER{
uint Type;
uint ElementType;
uint ParentOffset;
wchar_t Path;
} Locate;
struct _VMBUS_IDENTIFIER{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InterfaceType;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InterfaceInstance;
} Vmbus;
} u;
}
struct _BOOT_LOG_RECORD{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} LoadedString;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} NotLoadedString;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} LogFileName;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} HeaderString;
struct _ERESOURCE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} Resource;
uint NextKey;
uint8 FileLogging;
}
struct _BOOT_OPTIONS{
ULONG Version;
ULONG Length;
ULONG Timeout;
ULONG CurrentBootEntryId;
ULONG NextBootEntryId;
WCHAR HeadlessRedirection;
}
struct _BOOT_RESTORE_MEMORY_HEADER{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _MEMORY_HEADER{
uint Tag;
uint Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS Pcb;
struct _EX_PUSH_LOCK ProcessLock;
struct _EX_RUNDOWN_REF RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY ActiveProcessLinks;
union $BA35CD1A9B0B952C2FF605A2CE8D0287 ___u6;
union $E0E0D624404DF07A2689F0A1FA7BC9B3 ___u7;
union _LARGE_INTEGER CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* Mdl;
uint8 Memory;
} MemoryHeader;
}
struct _BOOT_TABLE{
struct _DESCRIPTION_HEADER{
uint Signature;
uint Length;
uint8 Revision;
uint8 Checksum;
char OEMID;
} Header;
uint8 CMOSIndex;
uint8 Reserved;
}
struct _BREAKPOINT_ENTRY{
void* Address;
struct _KPROCESS{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} Header;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY{
uint16 ;
uint16 BaseLow;
union {
struct $FBC66EAC05680F83721AC9CD3CC76218 Bytes;
struct $A3BAC9569453E46653D4C53B8339026E Bits;
} HighWord;
} LdtDescriptor;
struct _KIDTENTRY{
uint16 Offset;
uint16 Selector;
uint16 Access;
uint16 ExtendedOffset;
} Int21Descriptor;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} Affinity;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ReadyListHead;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} SwapListEntry;
struct _KAFFINITY_EX{
uint16 Count;
uint16 Size;
uint Reserved;
uint Bitmap;
} ActiveProcessors;
union {
struct {
int32 AutoAlignment:1;
int32 DisableBoost:1;
int32 DisableQuantum:1;
uint32 DeepFreeze:1;
uint32 TimerVirtualization:1;
uint32 CheckStackExtents:1;
uint32 SpareFlags0:2;
uint32 ActiveGroupsMask:1;
int32 ReservedFlags:23;
} __s0;
int ProcessFlags;
} ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS{
struct {
uint8 ExecuteDisable:1;
uint8 ExecuteEnable:1;
uint8 DisableThunkEmulation:1;
uint8 Permanent:1;
uint8 ExecuteDispatchEnable:1;
uint8 ImageDispatchEnable:1;
uint8 DisableExceptionChainValidation:1;
uint8 Spare:1;
} __s0;
uint8 ExecuteOptions;
uint8 ExecuteOptionsNV;
} Flags;
uint ThreadSeed;
}* Process;
uint64 BreakInstruction;
uint64 Content;
uint Flags;
uint8 BreakInstructionSize;
uint8 BreakInstructionAlignment;
}
struct _BSD_BOOT_LOG_CONTROL{
uint Version;
uint BootLogStart;
uint BootLogSize;
uint NextBootLogEntry;
}
struct _BSD_BOOT_LOG_EVENT_HEADER{
uint64 TimeStamp;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ApplicationId;
uint EntrySize;
uint Level;
uint ApplicationType;
uint EventCode;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_APP_LAUNCH{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ApplicationIdentifier;
uint LaunchReason;
wchar_t ApplicationPath;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_APP_RETURN{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ApplicationIdentifier;
int Status;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_BCD_FAILURE{
int Status;
wchar_t BcdPath;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_FVE_RECOVERY{
uint RecoveryError;
uint BadBcdOption;
wchar_t ApplicationPath;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_GENERAL_FAILURE{
int Status;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_INVALID_BCD_ENTRY{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint ElementId;
int Status;
wchar_t Description;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_LOAD_FAILURE{
int Status;
wchar_t FilePath;
}
struct _BSD_EVENT_LOGDATA_BOOTMGR_NO_VALID_OS_FAILURE{
int Status;
wchar_t BcdPath;
}
struct _BSD_EVENT_LOGDATA_INITIALIZED{
struct _TIME_FIELDS{
CSHORT Year;
CSHORT Month;
CSHORT Day;
CSHORT Hour;
CSHORT Minute;
CSHORT Second;
CSHORT Milliseconds;
CSHORT Weekday;
} SystemTime;
uint64 TimeStampMultiplier;
}
struct _BSD_FATAL_ERROR_INFO{
uint BootId;
uint RepeatCount;
uint OtherErrorCount;
uint Code;
int Status;
}
struct _BSD_LOGDATA_EVENT_ACPI_FAILURE{
int Status;
}
struct _BSD_LOGDATA_OSLOADER_EVENT_GENERAL_FAILURE{
int ;
}
struct _BSD_LOGDATA_OSLOADER_EVENT_HIVE_FAILURE{
int ;
wchar_t HivePath;
}
struct _BSD_LOGDATA_OSLOADER_EVENT_LOAD_FAILURE{
uint Size;
uint ErrorCode;
int Status;
wchar_t FilePath;
}
struct _BSD_POWER_TRANSITION{
int64 PowerButtonTimestamp;
uint8 SystemRunning;
uint8 SleepInProgress;
uint8 ConnectedStandbyInProgress;
uint8 CsEntryScenarioInstanceId;
uint SystemSleepTransitionsToOn;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} LastReferenceTime;
uint LastReferenceTimeCheckSum;
}
struct _BTH_DEVICE_INFO{
uint flags;
uint64 address;
uint classOfDevice;
char name;
}
struct _BTH_LOCAL_RADIO_INFO{
struct _BTH_DEVICE_INFO{
uint flags;
uint64 address;
uint classOfDevice;
char name;
} localInfo;
uint flags;
uint16 hciRevision;
uint8 hciVersion;
struct _BTH_RADIO_INFO{
uint64 lmpSupportedFeatures;
uint16 mfg;
uint16 lmpSubversion;
uint8 lmpVersion;
} radioInfo;
}
struct _BTH_RADIO_INFO{
uint64 lmpSupportedFeatures;
uint16 mfg;
uint16 lmpSubversion;
uint8 lmpVersion;
}
struct _BT_PROGRESS_INDICATOR{
uint Count;
uint Expected;
uint Percentage;
}
struct _BUFFER_CONTEXT{
uint64 BytesInProgress;
uint64 BytesCompleted;
}
struct _BUS_HANDLER{
uint Version;
_INTERFACE_TYPE InterfaceType;
_BUS_DATA_TYPE ConfigurationType;
uint BusNumber;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS* Process;
void* ;
}* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP* CurrentIrp;
struct _IO_TIMER* ;
}* DeviceObject;
}* ;
}* DeviceObject;
struct _BUS_HANDLER* ParentHandler;
void* BusData;
uint DeviceControlExtensionSize;
struct _SUPPORTED_RANGES{
uint16 Version;
uint8 Sorted;
uint8 Reserved;
uint NoIO;
struct _SUPPORTED_RANGE{
struct _SUPPORTED_RANGE* Next;
uint SystemAddressSpace;
int64 SystemBase;
int64 Base;
int64 Limit;
} IO;
uint NoMemory;
struct _SUPPORTED_RANGE{
struct _SUPPORTED_RANGE* Next;
uint SystemAddressSpace;
int64 SystemBase;
int64 Base;
int64 Limit;
} Memory;
uint NoPrefetchMemory;
struct _SUPPORTED_RANGE{
struct _SUPPORTED_RANGE* Next;
uint SystemAddressSpace;
int64 SystemBase;
int64 Base;
int64 Limit;
} PrefetchMemory;
uint NoDma;
struct _SUPPORTED_RANGE{
struct _SUPPORTED_RANGE* Next;
uint SystemAddressSpace;
int64 SystemBase;
int64 Base;
int64 Limit;
} Dma;
}* BusAddresses;
uint Reserved;
}
struct _BUS_INTERFACE_STANDARD{
uint16 Size;
uint16 Version;
void* Context;
InterfaceReference* InterfaceReference;
InterfaceDereference* InterfaceDereference;
TranslateBusAddress* TranslateBusAddress;
GetDmaAdapter** GetDmaAdapter;
SetBusData* SetBusData;
GetBusData* GetBusData;
}
struct _BY_HANDLE_FILE_INFORMATION{
uint dwFileAttributes;
struct _FILETIME{
uint dwLowDateTime;
uint dwHighDateTime;
} ftCreationTime;
struct _FILETIME{
uint dwLowDateTime;
uint dwHighDateTime;
} ftLastAccessTime;
struct _FILETIME{
uint dwLowDateTime;
uint dwHighDateTime;
} ftLastWriteTime;
uint dwVolumeSerialNumber;
uint nFileSizeHigh;
uint nFileSizeLow;
uint nNumberOfLinks;
uint nFileIndexHigh;
uint nFileIndexLow;
}
struct _B_TREE_NODE_STATS{
uint Count;
uint EntriesPerBlock;
uint FillPercentBuckets;
}
struct _B_TREE_SERIALIZE_INFO{
uint Depth;
uint RootKey;
uint EntryCount;
}
struct _B_TREE_STATS{
uint EntryCount;
uint BlockSize;
uint Depth;
struct _B_TREE_NODE_STATS{
uint Count;
uint EntriesPerBlock;
uint FillPercentBuckets;
} NodeType;
}
struct _BitField{
uint16 Position;
uint16 Size;
}
struct _BvgaProgressState{
uint Floor;
uint Ceiling;
uint Bias;
}
struct _C8_EXCEPTION_REGISTRATION{
_BYTE gap0;
}
struct _C9_EXCEPTION_REGISTRATION{
uint ;
uint er_handler;
uint scopetable;
uint trylevel;
}
struct _CACHED_BITMAP{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
struct _GRAPHICS_RECTANGLE{
uint Height;
uint Width;
uint BitsPerPixel;
uint Size;
uint Flags;
void* Data;
struct _BITMAP_IMAGE{
uint HeaderSize;
uint Width;
uint Height;
uint16 Planes;
uint16 BitsPerPixel;
uint Compression;
uint DataSize;
uint HorizontalResolution;
uint VerticalResolution;
uint NumberOfColors;
uint NumberOfImportantColors;
} Bitmap;
}* Bitmap;
void* FontHandle;
uint BitmapFragmentOffset;
uint FontIndex;
uint PointSize;
uint AdvanceWidth;
int TopRow;
uint HorizontalFactor;
uint VerticalFactor;
wchar_t Character;
uint WorkspaceBytesConsumed;
}
struct _CACHED_CHILD_LIST{
uint Count;
union {
uint ValueList;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union {
struct _CM_KEY_HASH ;
struct $8C76650B9D0D53F784E8151F3B0A2734 __s1;
} ___u8;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} KcbPushlock;
union {
struct _KTHREAD* Owner;
int SharedCount;
} ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK{
uint32 Compressed:1;
uint32 RefCount:31;
union $49B239AEB2AEE6A15DE76968D87B453D ___u2;
}* NameBlock;
struct _CM_KEY_SECURITY_CACHE{
uint Cell;
uint ConvKey;
struct _LIST_ENTRY List;
uint DescriptorLength;
uint RealRefCount;
struct _SECURITY_DESCRIPTOR_RELATIVE Descriptor;
}* CachedSecurity;
struct _CACHED_CHILD_LIST{
uint Count;
union $A95660FC635BECCFF6281EBEFA4319E8 ___u1;
} ValueCache;
union {
struct _CM_INDEX_HINT_BLOCK* IndexHint;
uint HashKey;
uint SubKeyCount;
} ___u21;
union {
struct _LIST_ENTRY KeyBodyListHead;
struct _LIST_ENTRY FreeListEntry;
} ___u22;
struct _CM_KEY_BODY{
uint Type;
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock;
struct _CM_NOTIFY_BLOCK* NotifyBlock;
void* ProcessID;
struct _LIST_ENTRY KeyBodyList;
uint32 Flags:16;
uint32 HandleTags:16;
union _CM_TRANS_PTR Trans;
struct _GUID* KtmUow;
struct _LIST_ENTRY ContextListHead;
}* KeyBodyArray;
}* RealKcb;
} ___u1;
}
struct _CACHED_KSTACK_LIST{
union _SLIST_HEADER{
ULONGLONG Alignment;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ;
} SListHead;
int MinimumFree;
uint Misses;
uint MissesLast;
uint AllStacksInUse;
}
struct _CACHE_DESCRIPTOR{
uint8 Level;
uint8 Associativity;
uint16 LineSize;
uint Size;
_PROCESSOR_CACHE_TYPE Type;
}
struct _CACHE_MANAGER_CALLBACKS{
AcquireForLazyWrite* AcquireForLazyWrite;
ReleaseFromLazyWrite* ReleaseFromLazyWrite;
AcquireForReadAhead* AcquireForReadAhead;
ReleaseFromReadAhead* ReleaseFromReadAhead;
}
struct _CACHE_RELATIONSHIP{
uint8 Level;
uint8 Associativity;
uint16 LineSize;
uint CacheSize;
_PROCESSOR_CACHE_TYPE Type;
uint8 Reserved;
}
struct _CACHE_UNINITIALIZE_EVENT{
struct _CACHE_UNINITIALIZE_EVENT* Next;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Event;
}
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}
struct _CALLBACK_REGISTRATION{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Link;
struct _CALLBACK_OBJECT{
uint Signature;
uint Lock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} RegisteredCallbacks;
uint8 AllowMultipleCallbacks;
uint8 reserved;
}* CallbackObject;
CallbackFunction* CallbackFunction;
void* CallbackContext;
uint Busy;
uint8 UnregisterWaiting;
}
struct _CALL_FRAME{
void* ReturnAddress;
void* Param1;
void* Param2;
void* CompatibilityArea;
}
struct _CALL_HASH_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListEntry;
void* CallersAddress;
void* CallersCaller;
uint CallCount;
}
struct _CALL_PERFORMANCE_DATA{
uint SpinLock;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} HashTable;
}
struct _CARTESIAN_COORDINATE{
uint X;
uint Y;
}
struct _CBuffer{
uint8* Cursor;
uint BytesRemaining;
}
struct _CC_ASYNC_READ_CONTEXT{
CompletionRoutine* CompletionRoutine;
void* Context;
struct _MDL{
struct _MDL* Next;
CSHORT Size;
CSHORT MdlFlags;
struct _EPROCESS{
struct _KPROCESS{
struct _DISPATCHER_HEADER Header;
struct _LIST_ENTRY ProfileListHead;
uint DirectoryTableBase;
struct _KGDTENTRY LdtDescriptor;
struct _KIDTENTRY Int21Descriptor;
struct _LIST_ENTRY ThreadListHead;
uint ProcessLock;
uint64 DeepFreezeStartTime;
struct _KAFFINITY_EX Affinity;
struct _LIST_ENTRY ReadyListHead;
struct _SINGLE_LIST_ENTRY SwapListEntry;
struct _KAFFINITY_EX ActiveProcessors;
union $427D086510B26CB5555F571AB1564219 ___u12;
char BasePriority;
char QuantumReset;
uint8 Visited;
union _KEXECUTE_OPTIONS Flags;
uint ThreadSeed;
} Pcb;
struct _EX_PUSH_LOCK{
union $FF2316A0930A301DA9084F7EC6D0B7DA ___u0;
} ProcessLock;
struct _EX_RUNDOWN_REF{
union $D38EED4BDC297EF4E8AB109731647B99 ___u0;
} RundownProtect;
void* VdmObjects;
void* UniqueProcessId;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ActiveProcessLinks;
union {
uint Flags2;
struct $B086715FCDD6AD291B34987B050CE732 __s1;
} ___u6;
union {
uint Flags;
struct $3F23548A817FAD3B1B9066DD80952630 __s1;
} ___u7;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} CreateTime;
uint ProcessQuotaUsage;
}* Process;
void* ;
}* Mdl;
char RequestorMode;
uint NestingLevel;
}
struct _CC_EXTERNAL_CACHE_INFO{
Callback* Callback;
struct _DIRTY_PAGE_STATISTICS{
uint DirtyPages;
uint DirtyPagesLastScan;
uint DirtyPagesScheduledLastScan;
} DirtyPageStatistics;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} Links;
}
struct _CC_FILE_SIZES{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} AllocationSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FileSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ValidDataLength;
}
struct _CC_TEST_EVENT{
_CC_TEST_EVENT_TYPE EventType;
uint Enable;
uint PersistAcrossReboot;
union {
struct {
uint Interval;
} MappingFailure;
uint64 MaximumVAUsage;
struct {
uint cLRUInvocations;
uint cFreeVACBs;
uint cTotalVACBsAllocated;
} StatisticsVACB;
} Parameters;
}
struct _CDB10{
uint8 OperationCode;
uint8 RelativeAddress:1;
uint8 Reserved1:2;
uint8 ForceUnitAccess:1;
uint8 DisablePageOut:1;
uint8 LogicalUnitNumber:3;
uint8 LogicalBlockByte0;
uint8 LogicalBlockByte1;
uint8 LogicalBlockByte2;
uint8 LogicalBlockByte3;
uint8 Reserved2;
uint8 TransferBlocksMsb;
uint8 TransferBlocksLsb;
uint8 Control;
}
struct _CDB12{
uint8 OperationCode;
uint8 RelativeAddress:1;
uint8 Reserved1:2;
uint8 ForceUnitAccess:1;
uint8 DisablePageOut:1;
uint8 LogicalUnitNumber:3;
uint8 LogicalBlock;
}
struct _CDB16{
uint8 OperationCode;
uint8 Reserved1:3;
uint8 ForceUnitAccess:1;
uint8 DisablePageOut:1;
uint8 Protection:3;
uint8 LogicalBlock;
}
struct _CDB6FORMAT{
uint8 OperationCode;
uint8 FormatControl:5;
uint8 LogicalUnitNumber:3;
uint8 FReserved1;
uint8 InterleaveMsb;
uint8 InterleaveLsb;
uint8 FReserved2;
}
struct _CDB6GENERIC{
uint8 OperationCode;
uint8 Immediate:1;
uint8 CommandUniqueBits:4;
uint8 LogicalUnitNumber:3;
uint8 CommandUniqueBytes;
}
struct _CDB6INQUIRY{
uint8 OperationCode;
uint8 Reserved1:5;
uint8 LogicalUnitNumber:3;
uint8 PageCode;
uint8 IReserved;
uint8 AllocationLength;
uint8 Control;
}
struct _CDB6INQUIRY3{
uint8 OperationCode;
uint8 EnableVitalProductData:1;
uint8 CommandSupportData:1;
uint8 Reserved1:6;
uint8 PageCode;
uint8 Reserved2;
uint8 AllocationLength;
uint8 Control;
}
struct _CDB6READWRITE{
uint8 OperationCode;
uint8 LogicalBlockMsb1:5;
uint8 LogicalUnitNumber:3;
uint8 LogicalBlockMsb0;
uint8 LogicalBlockLsb;
uint8 TransferBlocks;
uint8 Control;
}
struct _CDB6READWRITETAPE{
uint8 OperationCode;
uint8 VendorSpecific:5;
uint8 Reserved:3;
uint8 TransferLenMSB;
uint8 TransferLen;
uint8 TransferLenLSB;
uint8 Link:1;
uint8 Flag:1;
uint8 Reserved1:4;
uint8 VendorUnique:2;
}
struct _CDB6VERIFY{
uint8 OperationCode;
uint8 Fixed:1;
uint8 ByteCompare:1;
uint8 Immediate:1;
uint8 Reserved:2;
uint8 LogicalUnitNumber:3;
uint8 VerificationLength;
}
struct _CDROM_IDENTIFIER{
uint CdromNumber;
}
struct _CELL_DATA{
union _u{
struct _CM_KEY_NODE{
uint16 Signature;
uint16 Flags;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} LastWriteTime;
uint8 AccessBits;
uint8 LayerSemantics:2;
uint8 Spare1:5;
uint8 InheritClass:1;
uint16 Spare2;
uint Parent;
uint SubKeyCounts;
} ;
struct _CM_KEY_VALUE{
uint16 Signature;
uint16 NameLength;
uint DataLength;
uint Data;
uint Type;
uint16 Flags;
uint16 Spare;
wchar_t Name;
} KeyValue;
struct _CM_KEY_SECURITY{
uint16 Signature;
uint16 Reserved;
uint Flink;
uint Blink;
uint ReferenceCount;
uint DescriptorLength;
struct _SECURITY_DESCRIPTOR_RELATIVE{
uint8 Revision;
uint8 Sbz1;
uint16 Control;
uint Owner;
uint Group;
uint Sacl;
uint Dacl;
} Descriptor;
} KeySecurity;
struct _CM_KEY_INDEX{
uint16 Signature;
uint16 Count;
uint List;
} KeyIndex;
struct _CM_BIG_DATA{
uint16 Signature;
uint16 Count;
uint List;
} ValueData;
uint KeyList;
} ;
}
struct _CENTRAL_ACCESS_POLICY{
void* ;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Description;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ChangeId;
uint Flags;
uint CAPECount;
struct _CENTRAL_ACCESS_POLICY_ENTRY{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Description;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ChangeId;
uint LengthAppliesTo;
uint8* AppliesTo;
uint LengthSD;
void* SD;
uint LengthStagedSD;
void* StagedSD;
uint Flags;
}** CAPEs;
}
struct _CENTRAL_ACCESS_POLICY_ENTRY{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Name;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Description;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ChangeId;
uint LengthAppliesTo;
uint8* AppliesTo;
uint LengthSD;
void* SD;
uint LengthStagedSD;
void* StagedSD;
uint Flags;
}
struct _CFG_CALL_TARGET_INFO{
uint Offset;
uint Flags;
}
struct _CFG_CALL_TARGET_LIST_INFORMATION{
uint NumberOfEntries;
uint Reserved;
uint* NumberOfEntriesProcessed;
struct _CFG_CALL_TARGET_INFO{
uint Offset;
uint Flags;
}* CallTargetInfo;
}
struct _CHARACTER_CACHE{
struct _TEXT_CACHE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
uint EntryCount;
} TextCache;
struct _BITMAP_CACHE{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ListHead;
uint8* CompressedBitmaps;
uint8* DecompressionBuffer;
void* DecompressionWorkSpace;
uint CompressedBitmapsSize;
uint DecompressionBufferSize;
uint Size;
uint EntryCount;
} BitmapCache;
uint8 TextCacheEnabled;
uint8 BitmapCacheEnabled;
}
struct _CHARACTER_CONTEXT{
void* FontHandle;
uint PointSize;
struct _RECTANGLE{
uint Width;
uint Height;
uint Stride;
} CharacterSize;
void* RegionHandle;
}
struct _CHILD_LIST{
uint Count;
uint List;
}
struct _CHS{
uint8 Head;
uint8 Sector;
uint8 Cylinder;
}
struct _CHUNKINFO{
struct _PAGED_LOOKASIDE_LIST{
struct _GENERAL_LOOKASIDE{
union _SLIST_HEADER{
ULONGLONG Alignment;
struct _SINGLE_LIST_ENTRY ;
} ;
} ;
}* Lookaside;
uint EntrySize;
EntryCleanup* EntryCleanup;
uint InitialFlags;
uint Signature;
}
struct _CI_LOG_MMCSS_START{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} Header;
}
struct _CI_LOG_MMCSS_STOP{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} ;
}
struct _CI_LOG_SCHEDULER_EVENT{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} ;
uint ProcessId;
uint ThreadId;
uint Priority;
uint TaskIndex;
}
struct _CI_LOG_SCHEDULER_SLEEP{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} Header;
}
struct _CI_LOG_SCHEDULER_SLEEP_RESPONSE{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} ;
}
struct _CI_LOG_SCHEDULER_WAKEUP{
struct _EVENT_TRACE_HEADER{
uint16 Size;
union {
uint16 FieldTypeFlags;
struct {
uint8 HeaderType;
uint8 MarkerFlags;
} __s1;
} ___u1;
union {
uint Version;
struct _EVENT_TRACE_HEADER___unnamed_tag____unnamed_type_Class_{
uint8 Type;
uint8 Level;
uint16 Version;
} Class;
} ___u2;
uint ThreadId;
uint ProcessId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} TimeStamp;
union {
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
uint64 GuidPtr;
} ___u6;
union {
struct {
uint KernelTime;
uint UserTime;
} __s0;
uint64 ProcessorTime;
struct {
uint ClientContext;
uint Flags;
} __s2;
} ___u7;
} ;
uint Reason;
}
struct _CI_MINTCB_LIST{
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} ImageName;
uint8 ExeSigningLevel;
uint8 DllSigningLevel;
struct _PS_PROTECTION{
union {
uint8 Level;
struct {
uint8 Type:3;
uint8 Audit:1;
uint8 Signer:4;
} __s1;
} ___u0;
} ProtectionLevel;
_FIRMWARE_TYPE TargetFirmware;
}
struct _CI_NGEN_PATHS{
uint PathCount;
uint16 PathMinLength;
uint16 PathMaxLength;
struct _UNICODE_STRING{
USHORT Length;
USHORT MaximumLength;
WCHAR* ;
} Paths;
}
struct _CI_PROTECTED_MAPPING{
uint8 ExeSigningLevel;
uint8 DllSigningLevel;
}
struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION{
uint16 Version;
uint16 Reserved;
uint AttributeCount;
union {
struct _CLAIM_SECURITY_ATTRIBUTE_V1{
wchar_t* Name;
uint16 ValueType;
uint16 Reserved;
uint Flags;
uint ValueCount;
union {
int64* ;
uint64* pUint64;
wchar_t** ppString;
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE* pFqbn;
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE* pOctetString;
} Values;
}* pAttributeV1;
} Attribute;
}
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE{
uint64 Version;
wchar_t* Name;
}
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{
void* pValue;
uint ValueLength;
}
struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1{
uint Name;
uint16 ValueType;
uint16 Reserved;
uint Flags;
uint ValueCount;
union {
uint ;
} Values;
}
struct _CLAIM_SECURITY_ATTRIBUTE_V1{
wchar_t* Name;
uint16 ValueType;
uint16 Reserved;
uint Flags;
uint ValueCount;
union {
int64* ;
uint64* pUint64;
wchar_t** ppString;
struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE{
uint64 Version;
wchar_t* Name;
}* pFqbn;
struct _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE{
void* pValue;
uint ValueLength;
}* pOctetString;
} Values;
}
struct _CLASS_MEDIA_CHANGE_CONTEXT{
uint MediaChangeCount;
uint NewState;
}
struct _CLFS_LOG_NAME_INFORMATION{
uint16 NameLengthInBytes;
wchar_t Name;
}
struct _CLFS_MGMT_CLIENT_REGISTRATION{
ULONG Version;
}
struct _CLFS_MGMT_NOTIFICATION{
_CLFS_MGMT_NOTIFICATION_TYPE Notification;
union _CLS_LSN{
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
} offset;
ULONGLONG ullOffset;
} Lsn;
uint16 LogIsPinned;
}
struct _CLFS_MGMT_POLICY{
uint Version;
uint LengthInBytes;
uint PolicyFlags;
_CLFS_MGMT_POLICY_TYPE PolicyType;
union {
struct {
uint Containers;
} MaximumSize;
struct {
uint Containers;
} MinimumSize;
struct {
uint SizeInBytes;
} NewContainerSize;
struct {
uint AbsoluteGrowthInContainers;
uint RelativeGrowthPercentage;
} GrowthRate;
struct {
uint MinimumAvailablePercentage;
uint MinimumAvailableContainers;
} LogTail;
struct {
uint Percentage;
} AutoShrink;
struct {
uint Enabled;
} AutoGrow;
struct {
uint16 ;
wchar_t PrefixString;
} NewContainerPrefix;
struct {
uint64 ;
} NewContainerSuffix;
struct {
uint16 ExtensionLengthInBytes;
wchar_t ExtensionString;
} NewContainerExtension;
} PolicyParameters;
}
struct _CLFS_NODE_ID{
uint cType;
uint cbNode;
}
struct _CLFS_PHYSICAL_LSN_INFORMATION{
uint8 StreamIdentifier;
union _CLS_LSN{
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
} offset;
ULONGLONG ullOffset;
} VirtualLsn;
union _CLS_LSN{
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
} offset;
ULONGLONG ullOffset;
} PhysicalLsn;
}
struct _CLFS_STREAM_ID_INFORMATION{
uint8 StreamIdentifier;
}
struct _CLIENT_ID{
void* ;
}
struct _CLIENT_ID32{
uint UniqueProcess;
uint UniqueThread;
}
struct _CLIENT_ID64{
uint64 UniqueProcess;
uint64 UniqueThread;
}
struct _CLIP_OPTIONAL_INFO{
uint dwEvaluationFlags;
uint dwBasicPolicyFlags;
uint dwMinExpirationTime;
uint dwMinPollingTime;
}
struct _CLOCK_INTERVAL_REQUEST{
struct _RTL_BALANCED_NODE{
union {
struct _RTL_BALANCED_NODE{
union $8488FA04B10264E961ED499116D7D232 ___u0;
union $344060F409ADCF48D316BF50CD4CF06F ___u1;
}* ;
} ___u0;
union {
struct {
uint8 Red:1;
} __s0;
struct {
uint8 Balance:2;
} __s1;
uint ParentValue;
} ___u1;
} RbNode;
uint8 Inserted;
uint Interval;
}
struct _CLOSE_TRACK{
uint8 OperationCode;
uint8 Immediate:1;
uint8 Reserved1:7;
uint8 Track:1;
uint8 Session:1;
uint8 Reserved2:6;
uint8 Reserved3;
uint8 TrackNumber;
}
struct _CLOUD_COMMAND{
uint Version;
uint CommandCode;
union {
struct {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} RecallOffset;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} RecallLength;
} InitiateRecall;
struct {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} DeflateOffset;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} DeflateLength;
} Deflate;
struct {
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} NewServerFileSize;
uint FileIdentityOffset;
uint FileIdentityLength;
} UpdatePlaceholderIdentity;
struct {
union {
void* ServiceIdentity;
uint64 Alignment;
} u;
uint Length;
uint Flags;
} CreateServiceIdentity;
struct {
union {
void* ServiceIdentity;
uint64 Alignment;
} u;
uint Length;
uint Flags;
} ConnectServiceIdentity;
struct {
union {
void* ServiceIdentity;
uint64 Alignment;
} u;
uint Length;
uint Flags;
} DeleteServiceIdentity;
struct {
uint FirstBlobContextOffset;
uint BlobCount;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} Timeout;
uint Flags;
} PropertyOperation;
} ___u2;
}
struct _CLOUD_DATA_TRANSFER{
struct _FILE_ID_128{
uint8 ;
} TargetFileId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} RequiredOffset;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ByteOffset;
uint RequiredLength;
uint Length;
uint Flags;
int ServiceStatus;
}
struct _CLOUD_PROPERTY_BLOB_CONTEXT{
uint BlobType;
uint BufferLength;
union {
void* Buffer;
uint64 Alignment;
} ___u2;
uint BlobLength;
int Status;
}
struct _CLOUD_PROVIDER_GET_EXTERNAL_INFO{
uint Version;
uint Flags;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} BytesLocallyPresent;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} BytesMetadata;
uint ServiceIdentityOffset;
uint ServiceIdentityLength;
uint FileIdentityOffset;
uint FileIdentityLength;
}
struct _CLOUD_PROVIDER_MESSAGE{
uint Version;
uint MessageCode;
struct {
struct _FILE_ID_128{
uint8 ;
} FileId;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ContainingOffset;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ContainingLength;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} RequiredOffset;
uint RequiredLength;
uint Flags;
uint Alignment;
uint FileIdentityOffset;
uint FileIdentityLength;
uint ServiceIdentityOffset;
uint ServiceIdentityLength;
} FetchData;
}
struct _CLOUD_PROVIDER_SET_EXTERNAL_INFO{
uint Version;
uint Flags;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} FileSize;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} CreationTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ModifiedTime;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} AccessedTime;
uint FileAttributes;
uint Reserved;
uint FileIdentityOffset;
uint FileIdentityLength;
}
struct _CLS_ARCHIVE_DESCRIPTOR{
uint64 coffLow;
uint64 coffHigh;
struct _CLS_CONTAINER_INFORMATION{
uint FileAttributes;
uint64 CreationTime;
uint64 LastAccessTime;
uint64 LastWriteTime;
int64 ContainerSize;
uint FileNameActualLength;
uint FileNameLength;
wchar_t FileName;
} infoContainer;
}
struct _CLS_CONTAINER_INFORMATION{
uint FileAttributes;
uint64 CreationTime;
uint64 LastAccessTime;
uint64 LastWriteTime;
int64 ContainerSize;
uint FileNameActualLength;
uint FileNameLength;
wchar_t FileName;
}
struct _CLS_INFORMATION{
LONGLONG TotalAvailable;
LONGLONG CurrentAvailable;
LONGLONG TotalReservation;
ULONGLONG BaseFileSize;
ULONGLONG ContainerSize;
ULONG TotalContainers;
ULONG FreeContainers;
ULONG TotalClients;
ULONG Attributes;
ULONG FlushThreshold;
ULONG SectorSize;
union _CLS_LSN{
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
} offset;
ULONGLONG ullOffset;
} ;
}
struct _CLS_IO_STATISTICS{
struct _CLS_IO_STATISTICS_HEADER{
uint8 ubMajorVersion;
uint8 ubMinorVersion;
_CLFS_IOSTATS_CLASS eStatsClass;
uint16 cbLength;
uint coffData;
} hdrIoStats;
uint64 cFlush;
uint64 cbFlush;
uint64 cMetaFlush;
uint64 cbMetaFlush;
}
struct _CLS_IO_STATISTICS_HEADER{
uint8 ubMajorVersion;
uint8 ubMinorVersion;
_CLFS_IOSTATS_CLASS eStatsClass;
uint16 cbLength;
uint coffData;
}
struct _CLS_LSN__$9D6AF620F42688F877DD8DA3B185267E{
CLFS_RECORD_INDEX idxRecord;
CLFS_CONTAINER_ID cidContainer;
}
struct _CLS_SCAN_CONTEXT{
struct _CLFS_NODE_ID{
uint cType;
uint cbNode;
} cidNode;
struct _FILE_OBJECT{
CSHORT ;
CSHORT Size;
struct _DEVICE_OBJECT{
CSHORT Type;
USHORT Size;
LONG ReferenceCount;
struct _DRIVER_OBJECT{
CSHORT Type;
CSHORT Size;
struct _DEVICE_OBJECT* ;
}* DriverObject;
struct _DEVICE_OBJECT* NextDevice;
struct _DEVICE_OBJECT* AttachedDevice;
struct _IRP{
CSHORT Type;
USHORT Size;
struct _MDL* ;
}* CurrentIrp;
struct _IO_TIMER{
__int16 Type;
__int16 TimerFlag;
struct _LIST_ENTRY TimerList;
TimerRoutine* TimerRoutine;
void* Context;
struct _DEVICE_OBJECT* DeviceObject;
}* ;
}* ;
}* plfoLog;
uint cIndex;
uint cContainers;
uint cContainersReturned;
uint8 eScanMode;
struct _CLS_CONTAINER_INFORMATION{
uint FileAttributes;
uint64 CreationTime;
uint64 LastAccessTime;
uint64 LastWriteTime;
int64 ContainerSize;
uint FileNameActualLength;
uint FileNameLength;
wchar_t FileName;
}* pinfoContainer;
}
struct _CLS_WRITE_ENTRY{
void* ;
}
struct _CLUSTER_RANGE{
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} StartingCluster;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E{
DWORD LowPart;
LONG HighPart;
} u;
LONGLONG QuadPart;
} ClusterCount;
}
struct _CMAPI_INPUT_CREATE_DEVICE_DATA{
uint cbSize;
uint Flags;
wchar_t* DeviceId;
uint DeviceIdSize;
wchar_t* ParentDeviceId;
uint ParentDeviceIdSize;
uint OutputSize;
}
struct _CMAPI_INPUT_DEVICE_LIST_DATA{
uint cbSize;
uint Flags;
wchar_t* Filter;
uint FilterSize;
uint OutputSize;
}
struct _CMAPI_INPUT_ENUMERATE_DATA{
uint cbSize;
uint Flags;
_CMAPI_ENUMERATE_SUBKEYS_TYPE EnumerateType;
uint Index;
uint OutputSize;
}
struct _CMAPI_INPUT_INTERFACE_ALIAS_DATA{
uint cbSize;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InterfaceAliasClassGuid;
wchar_t* Symlink;
uint SymlinkSize;
uint OutputSize;
}
struct _CMAPI_INPUT_INTERFACE_LIST_DATA{
uint cbSize;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ClassGuid;
wchar_t* Filter;
uint FilterSize;
uint OutputSize;
}
struct _CMAPI_INPUT_OBJECT_DATA{
uint cbSize;
uint Flags;
_CMAPI_OBJECT_TYPE ObjectType;
wchar_t* ObjectName;
uint ObjectNameSize;
uint Type;
uint OutputSize;
}
struct _CMAPI_INPUT_PROBLEM_DATA{
uint cbSize;
uint Flags;
wchar_t DeviceId;
}
struct _CMAPI_INPUT_PROPERTY_DATA{
uint cbSize;
uint Flags;
_CMAPI_OBJECT_TYPE ObjectType;
wchar_t* ObjectName;
uint ObjectNameSize;
struct _DEVPROPKEY{
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} ;
} Property;
uint PropertyType;
void* PropertyBuffer;
uint PropertyBufferSize;
uint OutputSize;
}
struct _CMAPI_INPUT_REGISTER_INTERFACE_DATA{
uint cbSize;
uint Flags;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
} InterfaceClassGuid;
wchar_t* DeviceId;
uint DeviceIdSize;
wchar_t* ReferenceString;
uint ReferenceStringSize;
uint OutputSize;
}
struct _CMAPI_INPUT_REGISTRY_DATA{
uint cbSize;
uint Flags;
_CMAPI_OBJECT_TYPE ObjectType;
wchar_t* ObjectName;
uint ObjectNameSize;
uint DesiredAccess;
_CMAPI_DISPOSITION Disposition;
uint HardwareProfileId;
uint OutputSize;
}
struct _CMAPI_INPUT_REGISTRY_PROPERTY_DATA{
uint cbSize;
uint Flags;
_CMAPI_OBJECT_TYPE ObjectType;
wchar_t* ObjectName;
uint ObjectNameSize;
_CMAPI_REG_PROP Property;
uint PropertyType;
void* PropertyBuffer;
uint PropertyBufferSize;
uint OutputSize;
}
struct _CMAPI_RESULT_BUFFER_DATA{
uint cbSize;
int Result;
uint RequiredSize;
uint Type;
uint8 Buffer;
}
struct _CMAPI_RESULT_DATA{
uint cbSize;
int Result;
}
struct _CMAPI_RESULT_DEPTH_DATA{
uint cbSize;
int Result;
uint Depth;
}
struct _CMAPI_RESULT_HANDLE_DATA{
uint cbSize;
int Result;
void* __ptr64Handle;
}
struct _CMAPI_RESULT_STATUS_DATA{
uint cbSize;
int Result;
uint Status;
uint Problem;
int ProblemStatus;
}
struct _CMAP_TABLE{
uint16 Version;
uint16 NumTables;
struct _ENCODING_RECORD{
uint16 ;
uint16 EncodingId;
uint Offset;
} EncodingRecord;
}
struct _CMC_DRIVER_INFO{
ExceptionCallback* ExceptionCallback;
DpcCallback* DpcCallback;
void* DeviceContext;
}
struct _CMFThreadParams{
uint AllocationAttributes;
uint CacheIndex;
uint DesiredAccess;
uint8 Detached;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
}* DoneEvent;
uint Flags;
uint Index;
uint PageAccess;
int Status;
void** TargetModule;
uint What;
}
struct _CMHIVE{
struct _HHIVE{
uint Signature;
GetCellRoutine** GetCellRoutine;
ReleaseCellRoutine* ReleaseCellRoutine;
Allocate** Allocate;
Free* Free;
FileWrite* FileWrite;
FileRead* FileRead;
void* HiveLoadFailure;
struct _HBASE_BLOCK{
uint Signature;
uint Sequence1;
uint Sequence2;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
uint Major;
uint Minor;
uint Type;
uint Format;
uint RootCell;
uint Length;
uint Cluster;
uint8 FileName;
}* BaseBlock;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} DirtyVector;
uint DirtyCount;
uint DirtyAlloc;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} UnreconciledVector;
uint UnreconciledCount;
uint BaseBlockAlloc;
uint Cluster;
uint8 Flat:1;
uint8 ReadOnly:1;
uint8 SystemCacheBacked:1;
uint8 Reserved:5;
uint8 DirtyFlag;
uint HvBinHeadersUse;
uint HvFreeCellsUse;
uint HvUsedCellsUse;
uint CmUsedCellsUse;
uint HiveFlags;
uint CurrentLog;
uint CurrentLogSequence;
uint CurrentLogMinimumSequence;
uint CurrentLogOffset;
uint MinimumLogSequence;
uint LogFileSizeCap;
uint8 LogDataPresent;
} Hive;
void* FileHandles;
}
struct _CMP_APP_HIVE_LOAD_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} HiveListEntry;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LoaderListEntry;
void* Key;
uint8 KeyIsString;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Event;
struct _EX_RUNDOWN_REF{
union {
uint Count;
void* Ptr;
} ___u0;
} Rundown;
}
struct _CMP_BOOT_LOAD_CONTROL{
wchar_t* LoadPath;
uint ArrayIndex;
struct _CM_COMPONENT_HASH{
uint Hash;
} HashKey;
int Flags;
int Reference;
}
struct _CMP_DISCARD_AND_REPLACE_KCB_CONTEXT{
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union {
struct _CM_KEY_HASH{
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} ;
struct {
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} __s1;
} ___u8;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} KcbPushlock;
union {
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
}* Owner;
int SharedCount;
} ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK{
uint32 Compressed:1;
uint32 RefCount:31;
union {
struct _CM_NAME_HASH NameHash;
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1;
} ___u2;
}* NameBlock;
struct _CM_KEY_SECURITY_CACHE{
uint Cell;
uint ConvKey;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} List;
uint DescriptorLength;
uint RealRefCount;
struct _SECURITY_DESCRIPTOR_RELATIVE{
uint8 Revision;
uint8 Sbz1;
uint16 Control;
uint Owner;
uint Group;
uint Sacl;
uint Dacl;
} Descriptor;
}* CachedSecurity;
struct _CACHED_CHILD_LIST{
uint Count;
union {
uint ValueList;
struct _CM_KEY_CONTROL_BLOCK* RealKcb;
} ___u1;
} ValueCache;
union {
struct _CM_INDEX_HINT_BLOCK{
uint Count;
uint HashKey;
}* IndexHint;
uint HashKey;
uint SubKeyCount;
} ___u21;
union {
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyListHead;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} FreeListEntry;
} ___u22;
struct _CM_KEY_BODY{
uint Type;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union $8440638E30A9331A41296104787125B0 ___u8;
struct _EX_PUSH_LOCK KcbPushlock;
union $2D779510DCB527C2A76ABB9E1FE19D82 ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK* NameBlock;
struct _CM_KEY_SECURITY_CACHE* CachedSecurity;
struct _CACHED_CHILD_LIST ValueCache;
union $8F0591D9D3A7A30BBAE496525511E483 ___u21;
union $523FADD81025DDC728A1E47F6561D96B ___u22;
struct _CM_KEY_BODY* KeyBodyArray;
}* KeyControlBlock;
struct _CM_NOTIFY_BLOCK{
struct _LIST_ENTRY HiveList;
struct _LIST_ENTRY PostList;
struct _CM_KEY_CONTROL_BLOCK* KeyControlBlock;
struct _CM_KEY_BODY* KeyBody;
uint32 Filter:30;
uint32 WatchTree:1;
uint32 NotifyPending:1;
struct _SECURITY_SUBJECT_CONTEXT SubjectContext;
}* NotifyBlock;
void* ProcessID;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} KeyBodyList;
uint32 Flags:16;
uint32 HandleTags:16;
union _CM_TRANS_PTR{
struct $861B1FA969793BB00BEBC4CA28CF50F1 __s0;
void* TransPtr;
} Trans;
struct _GUID{
uint Data1;
uint16 Data2;
uint16 Data3;
uint8 Data4;
}* KtmUow;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ContextListHead;
}* KeyBodyArray;
}* BaseKcb;
int PrepareStatus;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ClonedKcbListHead;
}
struct _CMP_FLUSH_NOTIFIES_CONTEXT{
uint Flags;
uint8 RegLockExclusive;
}
struct _CMP_KEY_ENUM_STACK{
__int16 TopLayer;
uint8 EnumerationStarted;
struct _CM_KEY_NODE_STACK{
__int16 TopLayer;
struct _CM_KEY_NODE_STACK_ENTRY{
struct _HHIVE{
uint Signature;
GetCellRoutine** GetCellRoutine;
ReleaseCellRoutine* ReleaseCellRoutine;
Allocate** Allocate;
Free* Free;
FileWrite* FileWrite;
FileRead* FileRead;
void* HiveLoadFailure;
struct _HBASE_BLOCK* BaseBlock;
struct _RTL_BITMAP DirtyVector;
uint DirtyCount;
uint DirtyAlloc;
struct _RTL_BITMAP UnreconciledVector;
uint UnreconciledCount;
uint BaseBlockAlloc;
uint Cluster;
uint8 Flat:1;
uint8 ReadOnly:1;
uint8 SystemCacheBacked:1;
uint8 Reserved:5;
uint8 DirtyFlag;
uint HvBinHeadersUse;
uint HvFreeCellsUse;
uint HvUsedCellsUse;
uint CmUsedCellsUse;
uint HiveFlags;
uint CurrentLog;
uint CurrentLogSequence;
uint CurrentLogMinimumSequence;
uint CurrentLogOffset;
uint MinimumLogSequence;
uint LogFileSizeCap;
uint8 LogDataPresent;
}* Hive;
uint KeyCell;
struct _CM_KEY_NODE{
uint16 Signature;
uint16 Flags;
union _LARGE_INTEGER LastWriteTime;
uint8 AccessBits;
uint8 LayerSemantics:2;
uint8 Spare1:5;
uint8 InheritClass:1;
uint16 Spare2;
uint Parent;
uint SubKeyCounts;
}* KeyNode;
struct _HV_GET_CELL_CONTEXT{
uint Cell;
struct _HV_GET_BIN_CONTEXT BinContext;
} KeyNodeContext;
} LocalEntries;
} CurrentKeyNodeStack;
struct _CMP_KEY_ENUM_STACK_ENTRY{
struct _HHIVE{
uint Signature;
GetCellRoutine** GetCellRoutine;
ReleaseCellRoutine* ReleaseCellRoutine;
Allocate** Allocate;
Free* Free;
FileWrite* FileWrite;
FileRead* FileRead;
void* HiveLoadFailure;
struct _HBASE_BLOCK{
uint Signature;
uint Sequence1;
uint Sequence2;
union _LARGE_INTEGER TimeStamp;
uint Major;
uint Minor;
uint Type;
uint Format;
uint RootCell;
uint Length;
uint Cluster;
uint8 FileName;
}* BaseBlock;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} DirtyVector;
uint DirtyCount;
uint DirtyAlloc;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} UnreconciledVector;
uint UnreconciledCount;
uint BaseBlockAlloc;
uint Cluster;
uint8 Flat:1;
uint8 ReadOnly:1;
uint8 SystemCacheBacked:1;
uint8 Reserved:5;
uint8 DirtyFlag;
uint HvBinHeadersUse;
uint HvFreeCellsUse;
uint HvUsedCellsUse;
uint CmUsedCellsUse;
uint HiveFlags;
uint CurrentLog;
uint CurrentLogSequence;
uint CurrentLogMinimumSequence;
uint CurrentLogOffset;
uint MinimumLogSequence;
uint LogFileSizeCap;
uint8 LogDataPresent;
}* Hive;
uint CurrentIndex;
} LocalEntries;
}
struct _CMP_KEY_ENUM_STACK_ENTRY{
struct _HHIVE{
uint Signature;
GetCellRoutine** GetCellRoutine;
ReleaseCellRoutine* ReleaseCellRoutine;
Allocate** Allocate;
Free* Free;
FileWrite* FileWrite;
FileRead* FileRead;
void* HiveLoadFailure;
struct _HBASE_BLOCK{
uint Signature;
uint Sequence1;
uint Sequence2;
union _LARGE_INTEGER{
DWORD LowPart;
LONG HighPart;
struct _LARGE_INTEGER__$837407842DC9087486FDFA5FEB63B74E u;
LONGLONG QuadPart;
} TimeStamp;
uint Major;
uint Minor;
uint Type;
uint Format;
uint RootCell;
uint Length;
uint Cluster;
uint8 FileName;
}* BaseBlock;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} DirtyVector;
uint DirtyCount;
uint DirtyAlloc;
struct _RTL_BITMAP{
ULONG ;
ULONG* ;
} UnreconciledVector;
uint UnreconciledCount;
uint BaseBlockAlloc;
uint Cluster;
uint8 Flat:1;
uint8 ReadOnly:1;
uint8 SystemCacheBacked:1;
uint8 Reserved:5;
uint8 DirtyFlag;
uint HvBinHeadersUse;
uint HvFreeCellsUse;
uint HvUsedCellsUse;
uint CmUsedCellsUse;
uint HiveFlags;
uint CurrentLog;
uint CurrentLogSequence;
uint CurrentLogMinimumSequence;
uint CurrentLogOffset;
uint MinimumLogSequence;
uint LogFileSizeCap;
uint8 LogDataPresent;
}* Hive;
uint CurrentIndex;
}
struct _CMP_LAZY_WRITER_PARAMETERS{
struct _KTIMER{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Timer;
struct _KDPC{
ULONG TargetInfoAsUlong;
UCHAR Type;
UCHAR Importance;
USHORT Number;
struct _SINGLE_LIST_ENTRY{
struct _SINGLE_LIST_ENTRY* Next;
} ;
} Dpc;
struct _KEVENT{
struct _DISPATCHER_HEADER{
LONG ;
LONG LockNV;
UCHAR Type;
UCHAR Signalling;
UCHAR Size;
UCHAR Reserved1;
UCHAR TimerType;
UCHAR TimerControlFlags;
uint8 Absolute:1;
uint8 Wake:1;
uint8 EncodedTolerableDelay:6;
UCHAR Hand;
UCHAR TimerMiscFlags;
uint8 Index:1;
uint8 Processor:5;
uint8 Inserted:1;
uint8 Expired:1;
UCHAR Timer2Type;
UCHAR Timer2Flags;
uint8 Timer2Inserted:1;
uint8 Timer2Expiring:1;
uint8 Timer2CancelPending:1;
uint8 Timer2SetPending:1;
uint8 Timer2Running:1;
uint8 Timer2Disabled:1;
uint8 Timer2ReservedFlags:2;
UCHAR Timer2ComponentId;
UCHAR Timer2RelativeId;
UCHAR QueueType;
UCHAR QueueControlFlags;
uint8 Abandoned:1;
uint8 DisableIncrement:1;
uint8 QueueReservedControlFlags:6;
UCHAR QueueSize;
UCHAR QueueReserved;
UCHAR ThreadType;
UCHAR ThreadReserved;
UCHAR ThreadControlFlags;
uint8 CycleProfiling:1;
uint8 CounterProfiling:1;
uint8 GroupScheduling:1;
uint8 AffinitySet:1;
uint8 Tagged:1;
uint8 EnergyProfiling:1;
uint8 SchedulerAssist:1;
uint8 Instrumented:1;
UCHAR DebugActive;
UCHAR MutantType;
UCHAR MutantSize;
BOOLEAN DpcActive;
UCHAR MutantReserved;
LONG SignalState;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} ;
} ;
} Event;
uint Lock;
WriteRoutine* WriteRoutine;
uint64 Status;
uint EligibilityDelaySeconds;
uint DefaultRearmTimeSeconds;
uint DefaultToleranceMs;
uint RetryIntervalSeconds;
}
struct _CMP_SILO_CONTEXT{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LockEntryHead;
uint8 LockListUnderCleanup;
struct _EX_PUSH_LOCK{
union {
struct {
uint32 Locked:1;
uint32 Waiting:1;
uint32 Waking:1;
uint32 MultipleShared:1;
uint32 Shared:28;
} __s0;
uint Value;
void* Ptr;
} ___u0;
} ContextLock;
}
struct _CMP_SILO_LOCK_ENTRY{
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} LockEntryList;
uint LockCount;
struct _CM_KEY_CONTROL_BLOCK{
uint RefCount;
uint32 ExtFlags:16;
uint32 PrivateAlloc:1;
uint32 Discarded:1;
uint32 HiveUnloaded:1;
uint32 Decommissioned:1;
uint32 LockTablePresent:1;
uint32 TotalLevels:10;
union {
struct _CM_KEY_HASH{
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} ;
struct {
struct _CM_PATH_HASH ConvKey;
struct _CM_KEY_HASH* NextHash;
struct _HHIVE* KeyHive;
uint KeyCell;
} __s1;
} ___u8;
struct _EX_PUSH_LOCK{
union {
struct $64EDA4DD838E80CF9A7DD220E06F3FD2 __s0;
uint Value;
void* Ptr;
} ___u0;
} KcbPushlock;
union {
struct _KTHREAD{
struct _DISPATCHER_HEADER ;
void* SListFaultAddress;
uint64 QuantumTarget;
void* InitialStack;
void* StackLimit;
void* StackBase;
uint ThreadLock;
uint64 CycleTime;
uint HighCycleTime;
void* ServiceTable;
uint CurrentRunTime;
uint ExpectedRunTime;
void* KernelStack;
struct _XSAVE_FORMAT* StateSaveArea;
struct _KSCHEDULING_GROUP* SchedulingGroup;
union _KWAIT_STATUS_REGISTER WaitRegister;
uint8 Running;
uint8 Alerted;
}* Owner;
int SharedCount;
} ___u10;
uint8 DelayedDeref:1;
uint8 DelayedClose:1;
uint8 Parking:1;
uint8 LayerSemantics;
__int16 LayerHeight;
uint SlotHint;
struct _CM_KEY_CONTROL_BLOCK* ParentKcb;
struct _CM_NAME_CONTROL_BLOCK{
uint32 Compressed:1;
uint32 RefCount:31;
union {
struct _CM_NAME_HASH NameHash;
struct $E52D0BEBE6959F2EFCCBF8BE8EB1CDBD __s1;
} ___u2;
}* NameBlock;
struct _CM_KEY_SECURITY_CACHE{
uint Cell;
uint ConvKey;
struct _LIST_ENTRY{
struct _LIST_ENTRY* ;
struct _LIST_ENTRY* Blink;
} List;
uint DescriptorLength;
uint RealRefCount;
struct _SECURITY_DESCRIPTOR_RELATIVE{
uint8 Revision;
uint8 Sbz1;
uint16 Control;
uint Owner;
uint Group;
uint Sacl;
uint Dacl;
} Descriptor;
}* CachedSecurity;
struct _CACHED_CHILD_LIST{
uint Count;
union {
uint ValueList;
struct _CM_KEY_CONTROL_BLOCK* RealKcb;
} ___u1;
} ValueCache;
union {
struct _CM_INDEX_HINT_BLOCK{
uint Count;
uint HashKey;
}* Index
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment