Created
April 11, 2021 20:55
-
-
Save valkheim/374da034502736daed348d5c059f150f to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/* | |
This file has been generated by IDA. | |
It contains local type definitions from | |
the type library 'ntoskrnl.exe' | |
*/ | |
#define __int8 char | |
#define __int16 short | |
#define __int32 int | |
#define __int64 long long | |
struct _RTL_BALANCED_NODE; | |
struct _KSCB; | |
struct _KTHREAD; | |
struct _KQUEUE; | |
struct _KWAIT_BLOCK; | |
struct _THREAD_PERFORMANCE_DATA; | |
struct _KTHREAD_COUNTERS; | |
struct _XSTATE_SAVE; | |
struct _XSAVE_AREA_HEADER; | |
struct _XSAVE_AREA; | |
struct _RTL_UMS_CONTEXT; | |
struct _UMS_CONTROL_BLOCK; | |
struct _KEXCEPTION_FRAME; | |
struct _KUMS_CONTEXT_HEADER; | |
struct _KAPC; | |
struct _KNODE; | |
struct _LOOKASIDE_LIST_EX; | |
struct _GENERAL_LOOKASIDE; | |
struct _KPRCB; | |
struct _KSTATIC_AFFINITY_BLOCK; | |
struct _RTL_HASH_TABLE; | |
struct _PROCESSOR_IDLE_CONSTRAINTS; | |
struct _PROCESSOR_IDLE_DEPENDENCY; | |
struct _PROCESSOR_IDLE_PREPARE_INFO; | |
struct _PERFINFO_PPM_STATE_SELECTION; | |
struct _PPM_SELECTION_DEPENDENCY; | |
struct _PPM_SELECTION_MENU_ENTRY; | |
struct _PPM_VETO_ENTRY; | |
struct _PPM_IDLE_STATES; | |
struct _PROC_IDLE_ACCOUNTING; | |
struct _PROC_FEEDBACK_COUNTER; | |
struct _PERF_CONTROL_STATE_SELECTION; | |
struct _PROC_PERF_CONSTRAINT; | |
struct _PROC_PERF_DOMAIN; | |
struct _PROC_PERF_CHECK; | |
struct _PROC_PERF_LOAD; | |
struct _PROC_PERF_HISTORY; | |
struct _PPM_CONCURRENCY_ACCOUNTING; | |
struct _MDL; | |
struct _TERMINATION_PORT; | |
struct _ETHREAD; | |
struct _DEVICE_OBJECT; | |
struct _DRIVER_OBJECT; | |
struct _IO_CLIENT_EXTENSION; | |
struct _VPB; | |
struct _SECTION_OBJECT_POINTERS; | |
struct _FILE_OBJECT; | |
struct _IO_COMPLETION_CONTEXT; | |
struct _OWNER_ENTRY; | |
struct _ERESOURCE; | |
struct _FS_FILTER_SECTION_SYNC_OUTPUT; | |
struct _IRP; | |
struct _FS_FILTER_CALLBACK_DATA; | |
struct _FS_FILTER_CALLBACKS; | |
struct _DRIVER_EXTENSION; | |
struct _IO_STATUS_BLOCK; | |
struct _FILE_BASIC_INFORMATION; | |
struct _FILE_STANDARD_INFORMATION; | |
struct _EPROCESS; | |
struct _FILE_NETWORK_OPEN_INFORMATION; | |
struct _COMPRESSED_DATA_INFO; | |
struct _FAST_IO_DISPATCH; | |
struct _IO_TIMER; | |
struct _POP_COOLING_EXTENSION; | |
struct _DEVICE_OBJECT_POWER_EXTENSION; | |
struct _DEVOBJ_EXTENSION; | |
struct _GUID; | |
struct _THREAD_ENERGY_VALUES; | |
struct _PROCESS_DISK_COUNTERS; | |
struct _EJOB; | |
struct _IO_MINI_COMPLETION_PACKET_USER; | |
struct _OBJECT_DIRECTORY_ENTRY; | |
struct _DEVICE_MAP; | |
struct _OBJECT_DIRECTORY; | |
struct _SEP_LOGON_SESSION_REFERENCES; | |
struct _RTL_DYNAMIC_HASH_TABLE; | |
struct _SID_AND_ATTRIBUTES; | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION; | |
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION; | |
struct _SEP_SID_VALUES_BLOCK; | |
struct _ESERVERSILO_GLOBALS; | |
struct _ETW_FILTER_PID; | |
struct _ETW_FILTER_STRING_TOKEN; | |
struct _ETW_FILTER_EVENT_NAME_DATA; | |
struct _EVENT_FILTER_LEVEL_KW; | |
struct _ETW_PAYLOAD_FILTER; | |
struct _EVENT_FILTER_HEADER; | |
struct _ETW_FILTER_HEADER; | |
struct _ETW_SILODRIVERSTATE; | |
struct _EX_RUNDOWN_REF_CACHE_AWARE; | |
struct _ETW_DECODE_CONTROL_ENTRY; | |
struct _WMI_BUFFER_HEADER; | |
struct _ETW_REALTIME_CONSUMER; | |
struct _SECURITY_QUALITY_OF_SERVICE; | |
struct _TOKEN_PRIVILEGES; | |
struct _TOKEN_ACCESS_INFORMATION; | |
struct _ETW_APC_ENTRY; | |
struct _ETW_PMC_SUPPORT; | |
struct _ETW_LBR_SUPPORT; | |
struct _ETW_HW_TRACE_EXT_INTERFACE; | |
struct _ETW_IPT_SUPPORT; | |
struct _EPARTITION; | |
struct _WMI_LOGGER_CONTEXT; | |
struct _ETW_SILO_TRACING_BLOCK; | |
struct _WNF_SCOPE_INSTANCE; | |
struct _WNF_SCOPE_MAP; | |
struct _SILO_USER_SHARED_DATA; | |
struct _PROCESS_EXTENDED_ENERGY_VALUES; | |
union _JOBOBJECT_ENERGY_TRACKING_STATE; | |
struct _KLOCK_ENTRY; | |
struct _PEB_LDR_DATA; | |
struct _RTL_USER_PROCESS_PARAMETERS; | |
struct _RTL_CRITICAL_SECTION; | |
struct _RTL_CRITICAL_SECTION_DEBUG; | |
struct _LEAP_SECOND_DATA; | |
struct _PEB; | |
struct _MMPTE; | |
struct _MMWSL_INSTANCE; | |
struct _MI_CACHED_PTES; | |
struct _MM_SESSION_SPACE; | |
struct _HANDLE_TABLE_ENTRY_INFO; | |
union _HANDLE_TABLE_ENTRY; | |
struct _HANDLE_TRACE_DEBUG_INFO; | |
struct _HANDLE_TABLE; | |
struct _EWOW64PROCESS; | |
struct _OBJECT_NAME_INFORMATION; | |
struct _PO_DIAG_STACK_RECORD; | |
struct _IMAGE_RUNTIME_FUNCTION_ENTRY; | |
struct _DYNAMIC_FUNCTION_TABLE; | |
struct _INVERTED_FUNCTION_TABLE; | |
struct _ACCESS_STATE; | |
struct _IO_SECURITY_CONTEXT; | |
struct _NAMED_PIPE_CREATE_PARAMETERS; | |
struct _MAILSLOT_CREATE_PARAMETERS; | |
struct _FILE_GET_QUOTA_INFORMATION; | |
struct _INTERFACE; | |
struct _DEVICE_CAPABILITIES; | |
struct _IO_RESOURCE_REQUIREMENTS_LIST; | |
struct _POWER_SEQUENCE; | |
struct _CM_RESOURCE_LIST; | |
struct _IO_STACK_LOCATION; | |
struct _POP_FX_DEVICE; | |
struct _PO_DEVICE_NOTIFY; | |
struct _POP_IRP_DATA; | |
struct _DEVICE_NODE; | |
struct PEPHANDLE__; | |
struct _POP_FX_PLUGIN; | |
struct _POP_FX_WORK_POOL; | |
struct _DEVICE_RELATIONS; | |
struct _PNP_DEVICE_EVENT_ENTRY; | |
struct _WDT_HANDLE; | |
struct _PNP_WATCHDOG; | |
struct _DEVICE_OBJECT_LIST; | |
struct _RELATION_LIST; | |
struct DOCK_INTERFACE; | |
struct _PENDING_RELATIONS_LIST_ENTRY; | |
struct _PNP_REBALANCE_TRACE_CONTEXT; | |
struct POHANDLE__; | |
struct _ACPI_METHOD_ARGUMENT_V1; | |
struct _PEP_WORK_INFORMATION; | |
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO; | |
struct _PEP_CRASHDUMP_INFORMATION; | |
struct _POP_FX_IDLE_STATE; | |
struct _POP_FX_PROVIDER; | |
struct _POP_FX_DEPENDENT; | |
struct _POP_FX_COMPONENT; | |
struct _PO_FX_PERF_STATE_CHANGE; | |
struct _PO_FX_PERF_STATE; | |
struct _PO_FX_COMPONENT_PERF_SET; | |
struct _POP_FX_PERF_SET; | |
struct _POP_FX_PERF_INFO; | |
struct _POP_DEVICE_POWER_PROFILE; | |
struct _POP_POWER_PLANE; | |
struct _POP_COMPONENT_POWER_PROFILE; | |
struct _POP_FX_LOG_ENTRY; | |
struct _KSHARED_READY_QUEUE; | |
struct _PROCESSOR_PROFILE_CONTROL_AREA; | |
struct _REQUEST_MAILBOX; | |
struct _EXCEPTION_RECORD; | |
struct _KPCR; | |
union _KIDTENTRY64; | |
struct _SCATTER_GATHER_LIST; | |
struct _DMA_ADAPTER_INFO; | |
struct _DMA_TRANSFER_INFO; | |
struct _ADAPTER_OBJECT; | |
struct _HALP_DMA_DOMAIN_OBJECT; | |
struct _DMA_COMMON_BUFFER_ENTRY; | |
struct _DMA_COMMON_BUFFER_VECTOR; | |
struct _DMA_OPERATIONS; | |
struct _HALP_DMA_TRANSLATION_ENTRY; | |
struct _HALP_DMA_TRANSLATION_BUFFER; | |
struct _HALP_DMA_MASTER_ADAPTER_OBJECT; | |
struct _DMA_TRANSFER_CONTEXT; | |
struct _HALP_DMA_CHANNEL; | |
struct _DMA_REQUEST_LINE_BINDING_DESCRIPTION; | |
struct _DMA_SCATTER_GATHER_LIST; | |
struct _HALP_DMA_CONTROLLER; | |
struct _EXT_IOMMU_DEVICE_ID; | |
struct _TEB_ACTIVE_FRAME_CONTEXT; | |
struct _MMCLONE_DESCRIPTOR; | |
struct _MMCLONE_BLOCK; | |
struct _MI_FREE_LARGE_PAGE_LIST; | |
struct _MI_LARGE_PAGE_LISTS_CHANGING; | |
struct _MI_WRITE_MODES; | |
struct _PHYSICAL_MEMORY_DESCRIPTOR; | |
struct _MI_NODE_INFORMATION; | |
struct _SEGMENT; | |
struct _MI_CONTROL_AREA_WAIT_BLOCK; | |
struct _MI_IMAGE_SECURITY_REFERENCE; | |
struct _CONTROL_AREA; | |
struct _MMEXTEND_INFO; | |
struct _MI_SECTION_IMAGE_INFORMATION; | |
struct _MI_PARTITION; | |
struct _MMPAGING_FILE; | |
struct _MMMOD_WRITER_MDL_ENTRY; | |
struct _MI_PAGING_FILE_SPACE_BITMAPS; | |
struct _MI_PAGEFILE_BITMAPS_CACHE_ENTRY; | |
struct _MMCLONE_HEADER; | |
struct _MMVAD_SHORT; | |
struct _MI_VAD_EVENT_BLOCK; | |
struct _SUBSECTION; | |
struct _MI_PER_SESSION_PROTOS; | |
union $64BF8D68F4C6DABEA529B0ACD8B9FDD3; | |
struct _MMINPAGE_SUPPORT; | |
union $E2393686A935BA9A0F5BEB93494C4E0B; | |
struct _CELL_DATA; | |
struct _HV_GET_CELL_CONTEXT; | |
struct CMP_OFFSET_ARRAY; | |
struct _HBASE_BLOCK; | |
struct _CMSI_PROCESS_TUPLE; | |
struct _HMAP_TABLE; | |
struct _HMAP_DIRECTORY; | |
struct _CM_NAME_CONTROL_BLOCK; | |
struct _CM_KEY_SECURITY_CACHE; | |
struct _CM_INDEX_HINT_BLOCK; | |
struct _CM_KEY_BODY; | |
struct _CM_NOTIFY_BLOCK; | |
struct _CM_KCB_LAYER_INFO; | |
struct _CM_KEY_HASH_TABLE_ENTRY; | |
struct _CM_KEY_SECURITY_CACHE_ENTRY; | |
struct _CM_WORKITEM; | |
struct _CM_RM; | |
struct _HIVE_WAIT_PACKET; | |
struct _CMP_VOLUME_MANAGER; | |
struct _CMP_VOLUME_CONTEXT; | |
struct _CMHIVE; | |
struct _KENLISTMENT; | |
struct _KRESOURCEMANAGER; | |
struct _KTM; | |
struct _KTRANSACTION; | |
struct _CM_TRANS; | |
struct _CM_KCB_UOW; | |
struct _CM_UOW_SET_SD_DATA; | |
struct _CM_UOW_KEY_STATE_MODIFICATION; | |
struct _CM_UOW_SET_VALUE_LIST_DATA; | |
struct _CM_UOW_SET_VALUE_KEY_DATA; | |
struct _CMP_DISCARD_AND_REPLACE_KCB_CONTEXT; | |
union $F49F80DE594A7B45213B2AFAA22C2965; | |
union $C35D87A14AF336782CA0E1698B155F25; | |
struct _KIST_LINK_FRAME; | |
struct _VACB_ARRAY_HEADER; | |
struct _VACB; | |
struct _MBCB; | |
struct _CACHE_MANAGER_CALLBACKS; | |
struct _CACHE_UNINITIALIZE_EVENT; | |
struct _WRITE_BEHIND_THROUGHPUT; | |
struct _ASYNC_READ_THREAD_STATS; | |
struct _CC_PARTITION; | |
struct _HEAP; | |
struct _HEAP_TAG_ENTRY; | |
struct _HEAP_PSEUDO_TAG_ENTRY; | |
struct _HEAP_LOCK; | |
struct _KALPC_MESSAGE; | |
struct _KALPC_RESERVE; | |
struct _KALPC_SECURITY_DATA; | |
struct _KALPC_SECTION; | |
struct _KALPC_VIEW; | |
struct _KALPC_REGION; | |
struct _KALPC_HANDLE_DATA; | |
struct _ALPC_COMMUNICATION_INFO; | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE; | |
struct _ALPC_COMPLETION_LIST_HEADER; | |
struct _ALPC_COMPLETION_LIST; | |
struct _PALPC_PORT_REFERENCE_WAIT_BLOCK; | |
struct _SEP_LUID_TO_INDEX_MAP_ENTRY; | |
struct _SEP_TOKEN_DIAG_TRACK_ENTRY; | |
struct _WHEAP_ERROR_RECORD_WRAPPER; | |
struct _VI_DEADLOCK_RESOURCE; | |
struct _VI_DEADLOCK_THREAD; | |
struct _SUPPORTED_RANGES; | |
struct _CONFIGURATION_COMPONENT; | |
struct _INTERRUPT_CONNECTION_DATA; | |
struct _RTL_RANGE; | |
struct _TRIAGE_POP_IRP_DATA; | |
struct _TRIAGE_POP_FX_DEVICE; | |
struct _POP_TRIGGER_WAIT; | |
struct _OBJECT_SYMBOLIC_LINK; | |
struct _EX_PARTITION; | |
struct _EX_WORK_QUEUE_MANAGER; | |
struct _ETW_QUEUE_ENTRY; | |
struct _ETW_PROVIDER_TRAITS; | |
struct _LPCP_NONPAGED_PORT_QUEUE; | |
struct _LPCP_PORT_QUEUE; | |
/* 1 */ | |
enum _POOL_TYPE : __int32 | |
{ | |
NonPagedPool = 0x0, | |
NonPagedPoolExecute = 0x0, | |
PagedPool = 0x1, | |
NonPagedPoolMustSucceed = 0x2, | |
DontUseThisType = 0x3, | |
NonPagedPoolCacheAligned = 0x4, | |
PagedPoolCacheAligned = 0x5, | |
NonPagedPoolCacheAlignedMustS = 0x6, | |
MaxPoolType = 0x7, | |
NonPagedPoolBase = 0x0, | |
NonPagedPoolBaseMustSucceed = 0x2, | |
NonPagedPoolBaseCacheAligned = 0x4, | |
NonPagedPoolBaseCacheAlignedMustS = 0x6, | |
NonPagedPoolSession = 0x20, | |
PagedPoolSession = 0x21, | |
NonPagedPoolMustSucceedSession = 0x22, | |
DontUseThisTypeSession = 0x23, | |
NonPagedPoolCacheAlignedSession = 0x24, | |
PagedPoolCacheAlignedSession = 0x25, | |
NonPagedPoolCacheAlignedMustSSession = 0x26, | |
NonPagedPoolNx = 0x200, | |
NonPagedPoolNxCacheAligned = 0x204, | |
NonPagedPoolSessionNx = 0x220, | |
}; | |
/* 2 */ | |
enum _EX_POOL_PRIORITY : __int32 | |
{ | |
LowPoolPriority = 0x0, | |
LowPoolPrioritySpecialPoolOverrun = 0x8, | |
LowPoolPrioritySpecialPoolUnderrun = 0x9, | |
NormalPoolPriority = 0x10, | |
NormalPoolPrioritySpecialPoolOverrun = 0x18, | |
NormalPoolPrioritySpecialPoolUnderrun = 0x19, | |
HighPoolPriority = 0x20, | |
HighPoolPrioritySpecialPoolOverrun = 0x28, | |
HighPoolPrioritySpecialPoolUnderrun = 0x29, | |
}; | |
/* 3 */ | |
enum _EVENT_TYPE : __int32 | |
{ | |
NotificationEvent = 0x0, | |
SynchronizationEvent = 0x1, | |
}; | |
/* 4 */ | |
enum _MEMORY_CACHING_TYPE : __int32 | |
{ | |
MmNonCached = 0x0, | |
MmCached = 0x1, | |
MmWriteCombined = 0x2, | |
MmHardwareCoherentCached = 0x3, | |
MmNonCachedUnordered = 0x4, | |
MmUSWCCached = 0x5, | |
MmMaximumCacheType = 0x6, | |
MmNotMapped = 0xFFFFFFFF, | |
}; | |
/* 5 */ | |
enum _FILE_INFORMATION_CLASS : __int32 | |
{ | |
FileDirectoryInformation = 0x1, | |
FileFullDirectoryInformation = 0x2, | |
FileBothDirectoryInformation = 0x3, | |
FileBasicInformation = 0x4, | |
FileStandardInformation = 0x5, | |
FileInternalInformation = 0x6, | |
FileEaInformation = 0x7, | |
FileAccessInformation = 0x8, | |
FileNameInformation = 0x9, | |
FileRenameInformation = 0xA, | |
FileLinkInformation = 0xB, | |
FileNamesInformation = 0xC, | |
FileDispositionInformation = 0xD, | |
FilePositionInformation = 0xE, | |
FileFullEaInformation = 0xF, | |
FileModeInformation = 0x10, | |
FileAlignmentInformation = 0x11, | |
FileAllInformation = 0x12, | |
FileAllocationInformation = 0x13, | |
FileEndOfFileInformation = 0x14, | |
FileAlternateNameInformation = 0x15, | |
FileStreamInformation = 0x16, | |
FilePipeInformation = 0x17, | |
FilePipeLocalInformation = 0x18, | |
FilePipeRemoteInformation = 0x19, | |
FileMailslotQueryInformation = 0x1A, | |
FileMailslotSetInformation = 0x1B, | |
FileCompressionInformation = 0x1C, | |
FileObjectIdInformation = 0x1D, | |
FileCompletionInformation = 0x1E, | |
FileMoveClusterInformation = 0x1F, | |
FileQuotaInformation = 0x20, | |
FileReparsePointInformation = 0x21, | |
FileNetworkOpenInformation = 0x22, | |
FileAttributeTagInformation = 0x23, | |
FileTrackingInformation = 0x24, | |
FileIdBothDirectoryInformation = 0x25, | |
FileIdFullDirectoryInformation = 0x26, | |
FileValidDataLengthInformation = 0x27, | |
FileShortNameInformation = 0x28, | |
FileIoCompletionNotificationInformation = 0x29, | |
FileIoStatusBlockRangeInformation = 0x2A, | |
FileIoPriorityHintInformation = 0x2B, | |
FileSfioReserveInformation = 0x2C, | |
FileSfioVolumeInformation = 0x2D, | |
FileHardLinkInformation = 0x2E, | |
FileProcessIdsUsingFileInformation = 0x2F, | |
FileNormalizedNameInformation = 0x30, | |
FileNetworkPhysicalNameInformation = 0x31, | |
FileIdGlobalTxDirectoryInformation = 0x32, | |
FileIsRemoteDeviceInformation = 0x33, | |
FileUnusedInformation = 0x34, | |
FileNumaNodeInformation = 0x35, | |
FileStandardLinkInformation = 0x36, | |
FileRemoteProtocolInformation = 0x37, | |
FileRenameInformationBypassAccessCheck = 0x38, | |
FileLinkInformationBypassAccessCheck = 0x39, | |
FileVolumeNameInformation = 0x3A, | |
FileIdInformation = 0x3B, | |
FileIdExtdDirectoryInformation = 0x3C, | |
FileReplaceCompletionInformation = 0x3D, | |
FileHardLinkFullIdInformation = 0x3E, | |
FileIdExtdBothDirectoryInformation = 0x3F, | |
FileDispositionInformationEx = 0x40, | |
FileRenameInformationEx = 0x41, | |
FileRenameInformationExBypassAccessCheck = 0x42, | |
FileDesiredStorageClassInformation = 0x43, | |
FileStatInformation = 0x44, | |
FileMemoryPartitionInformation = 0x45, | |
FileStatLxInformation = 0x46, | |
FileCaseSensitiveInformation = 0x47, | |
FileLinkInformationEx = 0x48, | |
FileLinkInformationExBypassAccessCheck = 0x49, | |
FileStorageReserveIdInformation = 0x4A, | |
FileCaseSensitiveInformationForceAccessCheck = 0x4B, | |
FileMaximumInformation = 0x4C, | |
}; | |
/* 6 */ | |
enum _DIRECTORY_NOTIFY_INFORMATION_CLASS : __int32 | |
{ | |
DirectoryNotifyInformation = 0x1, | |
DirectoryNotifyExtendedInformation = 0x2, | |
}; | |
/* 7 */ | |
enum _FSINFOCLASS : __int32 | |
{ | |
FileFsVolumeInformation = 0x1, | |
FileFsLabelInformation = 0x2, | |
FileFsSizeInformation = 0x3, | |
FileFsDeviceInformation = 0x4, | |
FileFsAttributeInformation = 0x5, | |
FileFsControlInformation = 0x6, | |
FileFsFullSizeInformation = 0x7, | |
FileFsObjectIdInformation = 0x8, | |
FileFsDriverPathInformation = 0x9, | |
FileFsVolumeFlagsInformation = 0xA, | |
FileFsSectorSizeInformation = 0xB, | |
FileFsDataCopyInformation = 0xC, | |
FileFsMetadataSizeInformation = 0xD, | |
FileFsFullSizeInformationEx = 0xE, | |
FileFsMaximumInformation = 0xF, | |
}; | |
/* 8 */ | |
enum _DEVICE_RELATION_TYPE : __int32 | |
{ | |
BusRelations = 0x0, | |
EjectionRelations = 0x1, | |
PowerRelations = 0x2, | |
RemovalRelations = 0x3, | |
TargetDeviceRelation = 0x4, | |
SingleBusRelations = 0x5, | |
TransportRelations = 0x6, | |
}; | |
/* 9 */ | |
enum BUS_QUERY_ID_TYPE : __int32 | |
{ | |
BusQueryDeviceID = 0x0, | |
BusQueryHardwareIDs = 0x1, | |
BusQueryCompatibleIDs = 0x2, | |
BusQueryInstanceID = 0x3, | |
BusQueryDeviceSerialNumber = 0x4, | |
BusQueryContainerID = 0x5, | |
}; | |
/* 10 */ | |
enum DEVICE_TEXT_TYPE : __int32 | |
{ | |
DeviceTextDescription = 0x0, | |
DeviceTextLocationInformation = 0x1, | |
}; | |
/* 11 */ | |
enum _DEVICE_USAGE_NOTIFICATION_TYPE : __int32 | |
{ | |
DeviceUsageTypeUndefined = 0x0, | |
DeviceUsageTypePaging = 0x1, | |
DeviceUsageTypeHibernation = 0x2, | |
DeviceUsageTypeDumpFile = 0x3, | |
DeviceUsageTypeBoot = 0x4, | |
DeviceUsageTypePostDisplay = 0x5, | |
DeviceUsageTypeGuestAssigned = 0x6, | |
}; | |
/* 12 */ | |
enum _SYSTEM_POWER_STATE : __int32 | |
{ | |
PowerSystemUnspecified = 0x0, | |
PowerSystemWorking = 0x1, | |
PowerSystemSleeping1 = 0x2, | |
PowerSystemSleeping2 = 0x3, | |
PowerSystemSleeping3 = 0x4, | |
PowerSystemHibernate = 0x5, | |
PowerSystemShutdown = 0x6, | |
PowerSystemMaximum = 0x7, | |
}; | |
/* 13 */ | |
enum _POWER_STATE_TYPE : __int32 | |
{ | |
SystemPowerState = 0x0, | |
DevicePowerState = 0x1, | |
}; | |
/* 14 */ | |
enum POWER_ACTION : __int32 | |
{ | |
PowerActionNone = 0x0, | |
PowerActionReserved = 0x1, | |
PowerActionSleep = 0x2, | |
PowerActionHibernate = 0x3, | |
PowerActionShutdown = 0x4, | |
PowerActionShutdownReset = 0x5, | |
PowerActionShutdownOff = 0x6, | |
PowerActionWarmEject = 0x7, | |
PowerActionDisplayOff = 0x8, | |
}; | |
/* 15 */ | |
enum _DEVICE_POWER_STATE : __int32 | |
{ | |
PowerDeviceUnspecified = 0x0, | |
PowerDeviceD0 = 0x1, | |
PowerDeviceD1 = 0x2, | |
PowerDeviceD2 = 0x3, | |
PowerDeviceD3 = 0x4, | |
PowerDeviceMaximum = 0x5, | |
}; | |
/* 16 */ | |
enum _DEVICE_WAKE_DEPTH : __int32 | |
{ | |
DeviceWakeDepthNotWakeable = 0x0, | |
DeviceWakeDepthD0 = 0x1, | |
DeviceWakeDepthD1 = 0x2, | |
DeviceWakeDepthD2 = 0x3, | |
DeviceWakeDepthD3hot = 0x4, | |
DeviceWakeDepthD3cold = 0x5, | |
DeviceWakeDepthMaximum = 0x6, | |
}; | |
/* 17 */ | |
enum _WHEA_ERROR_SOURCE_TYPE : __int32 | |
{ | |
WheaErrSrcTypeMCE = 0x0, | |
WheaErrSrcTypeCMC = 0x1, | |
WheaErrSrcTypeCPE = 0x2, | |
WheaErrSrcTypeNMI = 0x3, | |
WheaErrSrcTypePCIe = 0x4, | |
WheaErrSrcTypeGeneric = 0x5, | |
WheaErrSrcTypeINIT = 0x6, | |
WheaErrSrcTypeBOOT = 0x7, | |
WheaErrSrcTypeSCIGeneric = 0x8, | |
WheaErrSrcTypeIPFMCA = 0x9, | |
WheaErrSrcTypeIPFCMC = 0xA, | |
WheaErrSrcTypeIPFCPE = 0xB, | |
WheaErrSrcTypeGenericV2 = 0xC, | |
WheaErrSrcTypeSCIGenericV2 = 0xD, | |
WheaErrSrcTypeBMC = 0xE, | |
WheaErrSrcTypePMEM = 0xF, | |
WheaErrSrcTypeDeviceDriver = 0x10, | |
WheaErrSrcTypeMax = 0x11, | |
}; | |
/* 18 */ | |
enum _WHEA_ERROR_SOURCE_STATE : __int32 | |
{ | |
WheaErrSrcStateStopped = 0x1, | |
WheaErrSrcStateStarted = 0x2, | |
WheaErrSrcStateRemoved = 0x3, | |
WheaErrSrcStateRemovePending = 0x4, | |
}; | |
/* 19 */ | |
enum _WHEA_EVENT_LOG_ENTRY_TYPE : __int32 | |
{ | |
WheaEventLogEntryTypeInformational = 0x0, | |
WheaEventLogEntryTypeWarning = 0x1, | |
WheaEventLogEntryTypeError = 0x2, | |
}; | |
/* 20 */ | |
enum _WHEA_EVENT_LOG_ENTRY_ID : __int32 | |
{ | |
WheaEventLogEntryIdCmcPollingTimeout = 0x80000001, | |
WheaEventLogEntryIdWheaInit = 0x80000002, | |
WheaEventLogEntryIdCmcSwitchToPolling = 0x80000003, | |
WheaEventLogEntryIdDroppedCorrectedError = 0x80000004, | |
WheaEventLogEntryIdStartedReportHwError = 0x80000005, | |
WheaEventLogEntryIdPFAMemoryOfflined = 0x80000006, | |
WheaEventLogEntryIdPFAMemoryRemoveMonitor = 0x80000007, | |
WheaEventLogEntryIdPFAMemoryPolicy = 0x80000008, | |
WheaEventLogEntryIdPshedInjectError = 0x80000009, | |
WheaEventLogEntryIdOscCapabilities = 0x8000000A, | |
WheaEventLogEntryIdPshedPluginRegister = 0x8000000B, | |
WheaEventLogEntryIdAddRemoveErrorSource = 0x8000000C, | |
WheaEventLogEntryIdWorkQueueItem = 0x8000000D, | |
WheaEventLogEntryIdAttemptErrorRecovery = 0x8000000E, | |
WheaEventLogEntryIdMcaFoundErrorInBank = 0x8000000F, | |
WheaEventLogEntryIdMcaStuckErrorCheck = 0x80000010, | |
WheaEventLogEntryIdMcaErrorCleared = 0x80000011, | |
WheaEventLogEntryIdClearedPoison = 0x80000012, | |
WheaEventLogEntryIdProcessEINJ = 0x80000013, | |
WheaEventLogEntryIdProcessHEST = 0x80000014, | |
WheaEventLogEntryIdCreateGenericRecord = 0x80000015, | |
WheaEventLogEntryIdErrorRecord = 0x80000016, | |
WheaEventLogEntryIdErrorRecordLimit = 0x80000017, | |
WheaEventLogEntryIdErrSrcArrayInvalid = 0x80000019, | |
WheaEventLogEntryIdAcpiTimeOut = 0x8000001A, | |
WheaEventLogCmciRestart = 0x8000001B, | |
WheaEventLogCmciFinalRestart = 0x8000001C, | |
WheaEventLogEntryEtwOverFlow = 0x8000001D, | |
WheaEventLogAzccRootBusSearchErr = 0x8000001E, | |
WheaEventLogAzccRootBusList = 0x8000001F, | |
WheaEventLogEntryIdErrSrcInvalid = 0x80000020, | |
WheaEventLogEntryIdGenericErrMemMap = 0x80000021, | |
WheaEventLogEntryIdPshedCallbackCollision = 0x80000022, | |
WheaEventLogEntryIdSELBugCheckProgress = 0x80000023, | |
WheaEventLogEntryIdPshedPluginLoad = 0x80000024, | |
WheaEventLogEntryIdPshedPluginUnload = 0x80000025, | |
WheaEventLogEntryIdPshedPluginSupported = 0x80000026, | |
WheaEventLogEntryIdDeviceDriver = 0x80000027, | |
WheaEventLogEntryIdCmciImplPresent = 0x80000028, | |
WheaEventLogEntryIdCmciInitError = 0x80000029, | |
WheaEventLogEntryIdSELBugCheckRecovery = 0x8000002A, | |
WheaEventLogEntryIdDrvErrSrcInvalid = 0x8000002B, | |
WheaEventLogEntryIdDrvHandleBusy = 0x8000002C, | |
WheaEventLogEntryIdWheaHeartbeat = 0x8000002D, | |
WheaEventLogAzccRootBusPoisonSet = 0x8000002E, | |
WheaEventLogEntryIdSELBugCheckInfo = 0x8000002F, | |
WheaEventLogEntryIdErrDimmInfoMismatch = 0x80000030, | |
WheaEventLogEntryIdeDpcEnabled = 0x80000031, | |
}; | |
/* 21 */ | |
enum _WHEA_ERROR_TYPE : __int32 | |
{ | |
WheaErrTypeProcessor = 0x0, | |
WheaErrTypeMemory = 0x1, | |
WheaErrTypePCIExpress = 0x2, | |
WheaErrTypeNMI = 0x3, | |
WheaErrTypePCIXBus = 0x4, | |
WheaErrTypePCIXDevice = 0x5, | |
WheaErrTypeGeneric = 0x6, | |
WheaErrTypePmem = 0x7, | |
}; | |
/* 22 */ | |
enum _WHEA_ERROR_SEVERITY : __int32 | |
{ | |
WheaErrSevRecoverable = 0x0, | |
WheaErrSevFatal = 0x1, | |
WheaErrSevCorrected = 0x2, | |
WheaErrSevInformational = 0x3, | |
}; | |
/* 23 */ | |
enum _WHEA_ERROR_PACKET_DATA_FORMAT : __int32 | |
{ | |
WheaDataFormatIPFSalRecord = 0x0, | |
WheaDataFormatXPFMCA = 0x1, | |
WheaDataFormatMemory = 0x2, | |
WheaDataFormatPCIExpress = 0x3, | |
WheaDataFormatNMIPort = 0x4, | |
WheaDataFormatPCIXBus = 0x5, | |
WheaDataFormatPCIXDevice = 0x6, | |
WheaDataFormatGeneric = 0x7, | |
WheaDataFormatMax = 0x8, | |
}; | |
/* 24 */ | |
enum _KINTERRUPT_POLARITY : __int32 | |
{ | |
InterruptPolarityUnknown = 0x0, | |
InterruptActiveHigh = 0x1, | |
InterruptRisingEdge = 0x1, | |
InterruptActiveLow = 0x2, | |
InterruptFallingEdge = 0x2, | |
InterruptActiveBoth = 0x3, | |
InterruptActiveBothTriggerLow = 0x3, | |
InterruptActiveBothTriggerHigh = 0x4, | |
}; | |
/* 25 */ | |
enum _KINTERRUPT_MODE : __int32 | |
{ | |
LevelSensitive = 0x0, | |
Latched = 0x1, | |
}; | |
/* 26 */ | |
enum _REG_NOTIFY_CLASS : __int32 | |
{ | |
RegNtDeleteKey = 0x0, | |
RegNtPreDeleteKey = 0x0, | |
RegNtSetValueKey = 0x1, | |
RegNtPreSetValueKey = 0x1, | |
RegNtDeleteValueKey = 0x2, | |
RegNtPreDeleteValueKey = 0x2, | |
RegNtSetInformationKey = 0x3, | |
RegNtPreSetInformationKey = 0x3, | |
RegNtRenameKey = 0x4, | |
RegNtPreRenameKey = 0x4, | |
RegNtEnumerateKey = 0x5, | |
RegNtPreEnumerateKey = 0x5, | |
RegNtEnumerateValueKey = 0x6, | |
RegNtPreEnumerateValueKey = 0x6, | |
RegNtQueryKey = 0x7, | |
RegNtPreQueryKey = 0x7, | |
RegNtQueryValueKey = 0x8, | |
RegNtPreQueryValueKey = 0x8, | |
RegNtQueryMultipleValueKey = 0x9, | |
RegNtPreQueryMultipleValueKey = 0x9, | |
RegNtPreCreateKey = 0xA, | |
RegNtPostCreateKey = 0xB, | |
RegNtPreOpenKey = 0xC, | |
RegNtPostOpenKey = 0xD, | |
RegNtKeyHandleClose = 0xE, | |
RegNtPreKeyHandleClose = 0xE, | |
RegNtPostDeleteKey = 0xF, | |
RegNtPostSetValueKey = 0x10, | |
RegNtPostDeleteValueKey = 0x11, | |
RegNtPostSetInformationKey = 0x12, | |
RegNtPostRenameKey = 0x13, | |
RegNtPostEnumerateKey = 0x14, | |
RegNtPostEnumerateValueKey = 0x15, | |
RegNtPostQueryKey = 0x16, | |
RegNtPostQueryValueKey = 0x17, | |
RegNtPostQueryMultipleValueKey = 0x18, | |
RegNtPostKeyHandleClose = 0x19, | |
RegNtPreCreateKeyEx = 0x1A, | |
RegNtPostCreateKeyEx = 0x1B, | |
RegNtPreOpenKeyEx = 0x1C, | |
RegNtPostOpenKeyEx = 0x1D, | |
RegNtPreFlushKey = 0x1E, | |
RegNtPostFlushKey = 0x1F, | |
RegNtPreLoadKey = 0x20, | |
RegNtPostLoadKey = 0x21, | |
RegNtPreUnLoadKey = 0x22, | |
RegNtPostUnLoadKey = 0x23, | |
RegNtPreQueryKeySecurity = 0x24, | |
RegNtPostQueryKeySecurity = 0x25, | |
RegNtPreSetKeySecurity = 0x26, | |
RegNtPostSetKeySecurity = 0x27, | |
RegNtCallbackObjectContextCleanup = 0x28, | |
RegNtPreRestoreKey = 0x29, | |
RegNtPostRestoreKey = 0x2A, | |
RegNtPreSaveKey = 0x2B, | |
RegNtPostSaveKey = 0x2C, | |
RegNtPreReplaceKey = 0x2D, | |
RegNtPostReplaceKey = 0x2E, | |
RegNtPreQueryKeyName = 0x2F, | |
RegNtPostQueryKeyName = 0x30, | |
MaxRegNtNotifyClass = 0x31, | |
}; | |
/* 27 */ | |
enum _HALP_DMA_MAP_BUFFER_TYPE : __int32 | |
{ | |
HalpDmaContiguousMapBuffer = 0x0, | |
HalpDmaNonContiguousMapBuffer = 0x1, | |
HalpDmaMaximumMapBufferType = 0x2, | |
}; | |
/* 28 */ | |
enum _KNOWN_CONTROLLER_TYPE : __int32 | |
{ | |
InterruptControllerInvalid = 0x0, | |
InterruptControllerPic = 0x1, | |
InterruptControllerApic = 0x2, | |
InterruptControllerGic = 0x3, | |
InterruptControllerGicV3 = 0x4, | |
InterruptControllerGicV4 = 0x5, | |
InterruptControllerBcm = 0x6, | |
InterruptControllerUnknown = 0x1000, | |
}; | |
/* 29 */ | |
enum _INTERRUPT_PROBLEM : __int32 | |
{ | |
InterruptProblemNone = 0x0, | |
InterruptProblemMadtParsingFailure = 0x1, | |
InterruptProblemNoControllersFound = 0x2, | |
InterruptProblemFailedDiscovery = 0x3, | |
InterruptProblemInitializeLocalUnitFailed = 0x4, | |
InterruptProblemInitializeIoUnitFailed = 0x5, | |
InterruptProblemSetLogicalIdFailed = 0x6, | |
InterruptProblemSetLineStateFailed = 0x7, | |
InterruptProblemGenerateMessageFailed = 0x8, | |
InterruptProblemConvertIdFailed = 0x9, | |
InterruptProblemCmciSetupFailed = 0xA, | |
InterruptProblemQueryMaxProcessorsCalledTooEarly = 0xB, | |
InterruptProblemProcessorReset = 0xC, | |
InterruptProblemStartProcessorFailed = 0xD, | |
InterruptProblemProcessorNotAlive = 0xE, | |
InterruptProblemLowerIrqlViolation = 0xF, | |
InterruptProblemInvalidIrql = 0x10, | |
InterruptProblemNoSuchController = 0x11, | |
InterruptProblemNoSuchLines = 0x12, | |
InterruptProblemBadConnectionData = 0x13, | |
InterruptProblemBadRoutingData = 0x14, | |
InterruptProblemInvalidProcessor = 0x15, | |
InterruptProblemFailedToAttainTarget = 0x16, | |
InterruptProblemUnsupportedWiringConfiguration = 0x17, | |
InterruptProblemSpareAlreadyStarted = 0x18, | |
InterruptProblemClusterNotFullyReplaced = 0x19, | |
InterruptProblemNewClusterAlreadyActive = 0x1A, | |
InterruptProblemNewClusterTooLarge = 0x1B, | |
InterruptProblemCannotHardwareQuiesce = 0x1C, | |
InterruptProblemIpiDestinationUpdateFailed = 0x1D, | |
InterruptProblemNoMemory = 0x1E, | |
InterruptProblemNoIrtEntries = 0x1F, | |
InterruptProblemConnectionDataBaitAndSwitch = 0x20, | |
InterruptProblemInvalidLogicalFlatId = 0x21, | |
InterruptProblemDeinitializeLocalUnitFailed = 0x22, | |
InterruptProblemDeinitializeIoUnitFailed = 0x23, | |
InterruptProblemMismatchedThermalLvtIsr = 0x24, | |
InterruptProblemHvRetargetFailed = 0x25, | |
InterruptProblemDeferredErrorSetupFailed = 0x26, | |
}; | |
/* 30 */ | |
enum _IO_ALLOCATION_ACTION : __int32 | |
{ | |
KeepObject = 0x1, | |
DeallocateObject = 0x2, | |
DeallocateObjectKeepRegisters = 0x3, | |
}; | |
/* 31 */ | |
enum _MODE : __int32 | |
{ | |
KernelMode = 0x0, | |
UserMode = 0x1, | |
MaximumMode = 0x2, | |
}; | |
/* 32 */ | |
enum _MEMORY_CACHING_TYPE_ORIG : __int32 | |
{ | |
MmFrameBufferCached = 0x2, | |
}; | |
/* 33 */ | |
enum _INTERLOCKED_RESULT : __int32 | |
{ | |
ResultNegative = 0x1, | |
ResultZero = 0x0, | |
ResultPositive = 0x2, | |
}; | |
/* 34 */ | |
enum _WHEA_CPU_VENDOR : __int32 | |
{ | |
WheaCpuVendorOther = 0x0, | |
WheaCpuVendorIntel = 0x1, | |
WheaCpuVendorAmd = 0x2, | |
}; | |
/* 35 */ | |
enum _HAL_INIT_PHASE : __int32 | |
{ | |
HalInitPhaseBspProcEarly = 0x0, | |
HalInitPhaseBspProcEarlyMmReady = 0x1, | |
HalInitPhaseBspProcEarlyTimerReady = 0x2, | |
HalInitPhaseBspProcEarlyEnd = 0x3, | |
HalInitPhasePnProcEarly = 0x4, | |
HalInitPhasePnProcEarlyInterruptsReady = 0x5, | |
HalInitPhasePnProcEarlyEnd = 0x6, | |
HalInitPhaseBspSystemEarly = 0x7, | |
HalInitPhaseBspSystemEarlyAcpiReady = 0x8, | |
HalInitPhaseBspSystemEarlyHalExtensionsReady = 0x9, | |
HalInitPhaseBspSystemEarlyInterruptsAlmostReady = 0xA, | |
HalInitPhaseBspSystemEarlyIommusReady = 0xB, | |
HalInitPhaseBspSystemEarlyInterruptsReady = 0xC, | |
HalInitPhaseBspSystemEarlyDmaReady = 0xC, | |
HalInitPhaseBspSystemEarlyProcReady = 0xD, | |
HalInitPhaseBspSystemEarlyHwPerfCntReady = 0xE, | |
HalInitPhaseBspSystemEarlyAllocationDone = 0xF, | |
HalInitPhaseBspSystemEarlyEnd = 0x10, | |
HalInitPhaseBspSystemLate = 0x11, | |
HalInitPhaseBspSystemLateEnd = 0x12, | |
HalInitPhasePnSystemLate = 0x13, | |
HalInitPhasePnSystemLateEnd = 0x14, | |
HalInitPhaseAllProcStartComplete = 0x15, | |
HalInitPhaseAllProcStartCompleteEnd = 0x16, | |
HalInitPhaseExPhase1Ready = 0x17, | |
HalInitPhaseExPhase1ReadyEnd = 0x18, | |
HalInitPhaseAcpiPdoStarted = 0x19, | |
HalInitPhaseAcpiPdoStartedEnd = 0x1A, | |
HalInitPhaseReportResources = 0x1B, | |
HalInitPhaseReportResourcesEnd = 0x1C, | |
HalInitPhaseReportCoreSystemResources = 0x1D, | |
HalInitPhaseReportCoreSystemResourcesEnd = 0x1E, | |
HalInitPhaseLateSystemActions = 0x1F, | |
HalInitPhaseLateSystemActionsTelemetryReady = 0x20, | |
HalInitPhaseLateSystemActionsEnd = 0x21, | |
}; | |
/* 36 */ | |
enum _USER_ACTIVITY_PRESENCE : __int32 | |
{ | |
PowerUserPresent = 0x0, | |
PowerUserNotPresent = 0x1, | |
PowerUserInactive = 0x2, | |
PowerUserMaximum = 0x3, | |
PowerUserInvalid = 0x3, | |
}; | |
/* 37 */ | |
enum _INTERFACE_TYPE : __int32 | |
{ | |
InterfaceTypeUndefined = 0xFFFFFFFF, | |
Internal = 0x0, | |
Isa = 0x1, | |
Eisa = 0x2, | |
MicroChannel = 0x3, | |
TurboChannel = 0x4, | |
PCIBus = 0x5, | |
VMEBus = 0x6, | |
NuBus = 0x7, | |
PCMCIABus = 0x8, | |
CBus = 0x9, | |
MPIBus = 0xA, | |
MPSABus = 0xB, | |
ProcessorInternal = 0xC, | |
InternalPowerBus = 0xD, | |
PNPISABus = 0xE, | |
PNPBus = 0xF, | |
Vmcs = 0x10, | |
ACPIBus = 0x11, | |
MaximumInterfaceType = 0x12, | |
}; | |
/* 38 */ | |
enum _EXCEPTION_DISPOSITION : __int32 | |
{ | |
ExceptionContinueExecution = 0x0, | |
ExceptionContinueSearch = 0x1, | |
ExceptionNestedException = 0x2, | |
ExceptionCollidedUnwind = 0x3, | |
}; | |
/* 39 */ | |
enum _SECURITY_IMPERSONATION_LEVEL : __int32 | |
{ | |
SecurityAnonymous = 0x0, | |
SecurityIdentification = 0x1, | |
SecurityImpersonation = 0x2, | |
SecurityDelegation = 0x3, | |
}; | |
/* 40 */ | |
enum _INTERRUPT_RESULT : __int32 | |
{ | |
InterruptBeginFatalError = 0x0, | |
InterruptBeginLine = 0x1, | |
InterruptBeginSpurious = 0x2, | |
InterruptBeginVector = 0x3, | |
InterruptBeginNone = 0x4, | |
}; | |
/* 41 */ | |
enum _DMA_WIDTH : __int32 | |
{ | |
Width8Bits = 0x0, | |
Width16Bits = 0x1, | |
Width32Bits = 0x2, | |
Width64Bits = 0x3, | |
WidthNoWrap = 0x4, | |
MaximumDmaWidth = 0x5, | |
}; | |
/* 42 */ | |
enum _EXT_IOMMU_TRANSLATION_TYPE : __int32 | |
{ | |
ExtTranslationTypePassThrough = 0x0, | |
ExtTranslationTypeBlocked = 0x1, | |
ExtTranslationTypeTranslate = 0x2, | |
ExtTranslationTypeSafePassThrough = 0x3, | |
ExtTranslationTypeInvalid = 0x4, | |
}; | |
/* 43 */ | |
enum _HALP_DMA_ADAPTER_ALLOCATION_STATE : __int32 | |
{ | |
HalpDmaAdapterAllocationStateNone = 0x0, | |
HalpDmaAdapterAllocateChannel = 0x1, | |
HalpDmaAdapterAllocateMapRegisters = 0x2, | |
HalpDmaAdapterAllocateChannelRemapResources = 0x3, | |
HalpDmaAdapterAllocationStateComplete = 0x4, | |
HalpDmaAdapterAllocationStateMax = 0x5, | |
}; | |
/* 44 */ | |
enum _HAL_DMA_CRASH_DUMP_REGISTER_TYPE : __int32 | |
{ | |
HalDmaCrashDumpRegisterSet1 = 0x0, | |
HalDmaCrashDumpRegisterSet2 = 0x1, | |
HalDmaCrashDumpRegisterSetMax = 0x2, | |
}; | |
/* 45 */ | |
enum DMA_COMPLETION_STATUS : __int32 | |
{ | |
DmaComplete = 0x0, | |
DmaAborted = 0x1, | |
DmaError = 0x2, | |
DmaCancelled = 0x3, | |
}; | |
/* 46 */ | |
enum _DMA_INTERRUPT_TYPE : __int32 | |
{ | |
InterruptTypeCompletion = 0x0, | |
InterruptTypeError = 0x1, | |
InterruptTypeCancelled = 0x2, | |
}; | |
/* 47 */ | |
enum _INTERRUPT_TARGET_TYPE : __int32 | |
{ | |
InterruptTargetInvalid = 0x0, | |
InterruptTargetAllIncludingSelf = 0x1, | |
InterruptTargetAllExcludingSelf = 0x2, | |
InterruptTargetSelfOnly = 0x3, | |
InterruptTargetPhysical = 0x4, | |
InterruptTargetLogicalFlat = 0x5, | |
InterruptTargetLogicalClustered = 0x6, | |
InterruptTargetRemapIndex = 0x7, | |
InterruptTargetHypervisor = 0x8, | |
}; | |
/* 48 */ | |
enum _IRQ_PRIORITY : __int32 | |
{ | |
IrqPriorityUndefined = 0x0, | |
IrqPriorityLow = 0x1, | |
IrqPriorityNormal = 0x2, | |
IrqPriorityHigh = 0x3, | |
}; | |
/* 49 */ | |
enum _HALP_EMERGENCY_LA_QUEUE_TYPE : __int32 | |
{ | |
HalpDmaLegacyLaQueueEntry = 0x0, | |
HalpDmaThinLaQueueEntry = 0x1, | |
HalpDmaLaQueueEntryMax = 0x2, | |
}; | |
/* 50 */ | |
enum _WHEA_RECOVERY_CONTEXT_ERROR_TYPE : __int32 | |
{ | |
WheaRecoveryContextErrorTypeMemory = 0x1, | |
WheaRecoveryContextErrorTypePmem = 0x2, | |
WheaRecoveryContextErrorTypeMax = 0x3, | |
}; | |
/* 51 */ | |
enum _EXT_IOMMU_DEVICE_TYPE : __int32 | |
{ | |
EXT_IOMMU_DEVICE_TYPE_INVALID = 0x0, | |
EXT_IOMMU_DEVICE_TYPE_PCI = 0x1, | |
EXT_IOMMU_DEVICE_TYPE_ACPI = 0x2, | |
EXT_IOMMU_DEVICE_TYPE_IOAPIC = 0x3, | |
EXT_IOMMU_DEVICE_TYPE_LOGICAL = 0x4, | |
EXT_IOMMU_DEVICE_TYPE_GIC = 0x5, | |
EXT_IOMMU_DEVICE_TYPE_TEST = 0x6, | |
EXT_IOMMU_DEVICE_TYPE_MAX = 0x7, | |
}; | |
/* 52 */ | |
enum SE_WS_APPX_SIGNATURE_ORIGIN : __int32 | |
{ | |
SE_WS_APPX_SIGNATURE_ORIGIN_NOT_VALIDATED = 0x0, | |
SE_WS_APPX_SIGNATURE_ORIGIN_UNKNOWN = 0x1, | |
SE_WS_APPX_SIGNATURE_ORIGIN_APPSTORE = 0x2, | |
SE_WS_APPX_SIGNATURE_ORIGIN_WINDOWS = 0x3, | |
SE_WS_APPX_SIGNATURE_ORIGIN_ENTERPRISE = 0x4, | |
}; | |
/* 53 */ | |
enum _PS_MITIGATION_OPTION : __int32 | |
{ | |
PS_MITIGATION_OPTION_NX = 0x0, | |
PS_MITIGATION_OPTION_SEHOP = 0x1, | |
PS_MITIGATION_OPTION_FORCE_RELOCATE_IMAGES = 0x2, | |
PS_MITIGATION_OPTION_HEAP_TERMINATE = 0x3, | |
PS_MITIGATION_OPTION_BOTTOM_UP_ASLR = 0x4, | |
PS_MITIGATION_OPTION_HIGH_ENTROPY_ASLR = 0x5, | |
PS_MITIGATION_OPTION_STRICT_HANDLE_CHECKS = 0x6, | |
PS_MITIGATION_OPTION_WIN32K_SYSTEM_CALL_DISABLE = 0x7, | |
PS_MITIGATION_OPTION_EXTENSION_POINT_DISABLE = 0x8, | |
PS_MITIGATION_OPTION_PROHIBIT_DYNAMIC_CODE = 0x9, | |
PS_MITIGATION_OPTION_CONTROL_FLOW_GUARD = 0xA, | |
PS_MITIGATION_OPTION_BLOCK_NON_MICROSOFT_BINARIES = 0xB, | |
PS_MITIGATION_OPTION_FONT_DISABLE = 0xC, | |
PS_MITIGATION_OPTION_IMAGE_LOAD_NO_REMOTE = 0xD, | |
PS_MITIGATION_OPTION_IMAGE_LOAD_NO_LOW_LABEL = 0xE, | |
PS_MITIGATION_OPTION_IMAGE_LOAD_PREFER_SYSTEM32 = 0xF, | |
PS_MITIGATION_OPTION_RETURN_FLOW_GUARD = 0x10, | |
PS_MITIGATION_OPTION_LOADER_INTEGRITY_CONTINUITY = 0x11, | |
PS_MITIGATION_OPTION_STRICT_CONTROL_FLOW_GUARD = 0x12, | |
PS_MITIGATION_OPTION_RESTRICT_SET_THREAD_CONTEXT = 0x13, | |
PS_MITIGATION_OPTION_ROP_STACKPIVOT = 0x14, | |
PS_MITIGATION_OPTION_ROP_CALLER_CHECK = 0x15, | |
PS_MITIGATION_OPTION_ROP_SIMEXEC = 0x16, | |
PS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER = 0x17, | |
PS_MITIGATION_OPTION_EXPORT_ADDRESS_FILTER_PLUS = 0x18, | |
PS_MITIGATION_OPTION_RESTRICT_CHILD_PROCESS_CREATION = 0x19, | |
PS_MITIGATION_OPTION_IMPORT_ADDRESS_FILTER = 0x1A, | |
PS_MITIGATION_OPTION_MODULE_TAMPERING_PROTECTION = 0x1B, | |
PS_MITIGATION_OPTION_RESTRICT_INDIRECT_BRANCH_PREDICTION = 0x1C, | |
PS_MITIGATION_OPTION_SPECULATIVE_STORE_BYPASS_DISABLE = 0x1D, | |
PS_MITIGATION_OPTION_ALLOW_DOWNGRADE_DYNAMIC_CODE_POLICY = 0x1E, | |
PS_MITIGATION_OPTION_CET_USER_SHADOW_STACKS = 0x1F, | |
PS_MITIGATION_OPTION_USER_CET_SET_CONTEXT_IP_VALIDATION = 0x20, | |
PS_MITIGATION_OPTION_BLOCK_NON_CET_BINARIES = 0x21, | |
PS_MITIGATION_OPTION_CET_DYNAMIC_APIS_OUT_OF_PROC_ONLY = 0x24, | |
}; | |
/* 54 */ | |
enum _NT_PRODUCT_TYPE : __int32 | |
{ | |
NtProductWinNt = 0x1, | |
NtProductLanManNt = 0x2, | |
NtProductServer = 0x3, | |
}; | |
/* 55 */ | |
enum _ALTERNATIVE_ARCHITECTURE_TYPE : __int32 | |
{ | |
StandardDesign = 0x0, | |
NEC98x86 = 0x1, | |
EndAlternatives = 0x2, | |
}; | |
/* 56 */ | |
enum _TP_CALLBACK_PRIORITY : __int32 | |
{ | |
TP_CALLBACK_PRIORITY_HIGH = 0x0, | |
TP_CALLBACK_PRIORITY_NORMAL = 0x1, | |
TP_CALLBACK_PRIORITY_LOW = 0x2, | |
TP_CALLBACK_PRIORITY_INVALID = 0x3, | |
TP_CALLBACK_PRIORITY_COUNT = 0x3, | |
}; | |
/* 57 */ | |
enum _PP_NPAGED_LOOKASIDE_NUMBER : __int32 | |
{ | |
LookasideSmallIrpList = 0x0, | |
LookasideMediumIrpList = 0x1, | |
LookasideLargeIrpList = 0x2, | |
LookasideMdlList = 0x3, | |
LookasideCreateInfoList = 0x4, | |
LookasideNameBufferList = 0x5, | |
LookasideTwilightList = 0x6, | |
LookasideCompletionList = 0x7, | |
LookasideScratchBufferList = 0x8, | |
LookasideMaximumList = 0x9, | |
}; | |
/* 58 */ | |
enum _EX_GEN_RANDOM_DOMAIN : __int32 | |
{ | |
ExGenRandomDomainKernel = 0x0, | |
ExGenRandomDomainFirst = 0x0, | |
ExGenRandomDomainUserVisible = 0x1, | |
ExGenRandomDomainMax = 0x2, | |
}; | |
/* 59 */ | |
enum _SYSTEM_DLL_TYPE : __int32 | |
{ | |
PsNativeSystemDll = 0x0, | |
PsWowX86SystemDll = 0x1, | |
PsWowArm32SystemDll = 0x2, | |
PsWowAmd64SystemDll = 0x3, | |
PsWowChpeX86SystemDll = 0x4, | |
PsVsmEnclaveRuntimeDll = 0x5, | |
PsSystemDllTotalTypes = 0x6, | |
}; | |
/* 60 */ | |
enum _IO_PRIORITY_HINT : __int32 | |
{ | |
IoPriorityVeryLow = 0x0, | |
IoPriorityLow = 0x1, | |
IoPriorityNormal = 0x2, | |
IoPriorityHigh = 0x3, | |
IoPriorityCritical = 0x4, | |
MaxIoPriorityTypes = 0x5, | |
}; | |
/* 61 */ | |
enum _MM_PAGE_ACCESS_TYPE : __int32 | |
{ | |
MmPteAccessType = 0x0, | |
MmCcReadAheadType = 0x1, | |
MmPfnRepurposeType = 0x2, | |
MmMaximumPageAccessType = 0x3, | |
}; | |
/* 62 */ | |
enum _PF_FILE_ACCESS_TYPE : __int32 | |
{ | |
PfFileAccessTypeRead = 0x0, | |
PfFileAccessTypeWrite = 0x1, | |
PfFileAccessTypeMax = 0x2, | |
}; | |
/* 63 */ | |
enum _EVENT_INFO_CLASS : __int32 | |
{ | |
EventProviderBinaryTrackInfo = 0x0, | |
EventProviderSetReserved1 = 0x1, | |
EventProviderSetTraits = 0x2, | |
EventProviderUseDescriptorType = 0x3, | |
MaxEventInfo = 0x4, | |
}; | |
/* 64 */ | |
enum wil_ReportingKind : __int32 | |
{ | |
wil_ReportingKind_None = 0x0, | |
wil_ReportingKind_UniqueUsage = 0x1, | |
wil_ReportingKind_UniqueOpportunity = 0x2, | |
wil_ReportingKind_DeviceUsage = 0x3, | |
wil_ReportingKind_DeviceOpportunity = 0x4, | |
wil_ReportingKind_TotalDuration = 0x5, | |
wil_ReportingKind_PausedDuration = 0x6, | |
}; | |
/* 65 */ | |
enum wil_details_ServiceReportingKind : __int32 | |
{ | |
wil_details_ServiceReportingKind_UniqueUsage = 0x0, | |
wil_details_ServiceReportingKind_UniqueOpportunity = 0x1, | |
wil_details_ServiceReportingKind_DeviceUsage = 0x2, | |
wil_details_ServiceReportingKind_DeviceOpportunity = 0x3, | |
wil_details_ServiceReportingKind_PotentialUniqueUsage = 0x4, | |
wil_details_ServiceReportingKind_PotentialUniqueOpportunity = 0x5, | |
wil_details_ServiceReportingKind_PotentialDeviceUsage = 0x6, | |
wil_details_ServiceReportingKind_PotentialDeviceOpportunity = 0x7, | |
wil_details_ServiceReportingKind_EnabledTotalDuration = 0x8, | |
wil_details_ServiceReportingKind_EnabledPausedDuration = 0x9, | |
wil_details_ServiceReportingKind_DisabledTotalDuration = 0xA, | |
wil_details_ServiceReportingKind_DisabledPausedDuration = 0xB, | |
wil_details_ServiceReportingKind_CustomEnabledBase = 0x64, | |
wil_details_ServiceReportingKind_CustomDisabledBase = 0x96, | |
wil_details_ServiceReportingKind_Store = 0xFE, | |
wil_details_ServiceReportingKind_None = 0xFF, | |
wil_details_ServiceReportingKind_VariantDevicePotentialBase = 0x100, | |
wil_details_ServiceReportingKind_VariantDeviceUsageBase = 0x140, | |
wil_details_ServiceReportingKind_VariantUniquePotentialBase = 0x180, | |
wil_details_ServiceReportingKind_VariantUniqueUsageBase = 0x1C0, | |
}; | |
/* 66 */ | |
enum wil_VariantReportingKind : __int32 | |
{ | |
wil_VariantReportingKind_None = 0x0, | |
wil_VariantReportingKind_UniqueUsage = 0x1, | |
wil_VariantReportingKind_DeviceUsage = 0x2, | |
}; | |
/* 67 */ | |
enum wil_FeatureEnabledStateOptions : __int32 | |
{ | |
wil_FeatureEnabledStateOptions_None = 0x0, | |
wil_FeatureEnabledStateOptions_VariantConfig = 0x1, | |
}; | |
/* 68 */ | |
enum wil_FeatureEnabledStateKind : __int32 | |
{ | |
wil_FeatureEnabledStateKind_Service = 0x1, | |
wil_FeatureEnabledStateKind_User = 0x2, | |
wil_FeatureEnabledStateKind_Test = 0x3, | |
}; | |
/* 69 */ | |
enum wil_FeatureEnabledState : __int32 | |
{ | |
wil_FeatureEnabledState_Default = 0x0, | |
wil_FeatureEnabledState_Disabled = 0x1, | |
wil_FeatureEnabledState_Enabled = 0x2, | |
}; | |
/* 70 */ | |
enum wil_details_StagingConfigFeatureFields : __int32 | |
{ | |
wil_details_StagingConfigFeatureFields_None = 0x0, | |
wil_details_StagingConfigFeatureFields_ServiceState = 0x1, | |
wil_details_StagingConfigFeatureFields_UserState = 0x2, | |
wil_details_StagingConfigFeatureFields_TestState = 0x4, | |
wil_details_StagingConfigFeatureFields_Variant = 0x8, | |
}; | |
/* 71 */ | |
enum wil_FeatureStore : __int32 | |
{ | |
wil_FeatureStore_Machine = 0x0, | |
wil_FeatureStore_User = 0x1, | |
wil_FeatureStore_All = 0x2, | |
}; | |
/* 72 */ | |
enum wil_FeatureVariantPayloadKind : __int32 | |
{ | |
wil_FeatureVariantPayloadKind_None = 0x0, | |
wil_FeatureVariantPayloadKind_Resident = 0x1, | |
wil_FeatureVariantPayloadKind_External = 0x2, | |
}; | |
/* 73 */ | |
enum wil_FeatureChangeTime : __int32 | |
{ | |
wil_FeatureChangeTime_OnRead = 0x0, | |
wil_FeatureChangeTime_OnReload = 0x1, | |
wil_FeatureChangeTime_OnSession = 0x2, | |
wil_FeatureChangeTime_OnReboot = 0x3, | |
}; | |
/* 74 */ | |
enum _RTL_FEATURE_CONFIGURATION_TYPE : __int32 | |
{ | |
RtlFeatureConfigurationBoot = 0x0, | |
RtlFeatureConfigurationRuntime = 0x1, | |
RtlFeatureConfigurationCount = 0x2, | |
}; | |
/* 75 */ | |
enum wil_details_ServiceReportingOptions : __int32 | |
{ | |
wil_details_ServiceReportingOptions_None = 0x0, | |
wil_details_ServiceReportingOptions_VariantConfig = 0x1, | |
}; | |
/* 76 */ | |
enum wil_details_FeatureTestStateKind : __int32 | |
{ | |
wil_details_FeatureTestStateKind_EnabledState = 0x0, | |
wil_details_FeatureTestStateKind_Variant = 0x1, | |
}; | |
/* 77 */ | |
enum wil_UsageReportingMode : __int32 | |
{ | |
wil_UsageReportingMode_Default = 0x0, | |
wil_UsageReportingMode_SuppressPotential = 0x1, | |
wil_UsageReportingMode_SuppressImplicit = 0x2, | |
}; | |
/* 78 */ | |
enum _MMLISTS : __int32 | |
{ | |
ZeroedPageList = 0x0, | |
FreePageList = 0x1, | |
StandbyPageList = 0x2, | |
ModifiedPageList = 0x3, | |
ModifiedNoWritePageList = 0x4, | |
BadPageList = 0x5, | |
ActiveAndValid = 0x6, | |
TransitionPage = 0x7, | |
}; | |
/* 79 */ | |
enum _MI_PFN_CACHE_ATTRIBUTE : __int32 | |
{ | |
MiNonCached = 0x0, | |
MiCached = 0x1, | |
MiWriteCombined = 0x2, | |
MiNotMapped = 0x3, | |
}; | |
/* 80 */ | |
enum _MI_SYSTEM_VA_TYPE : __int32 | |
{ | |
MiVaUnused = 0x0, | |
MiVaSessionSpace = 0x1, | |
MiVaProcessSpace = 0x2, | |
MiVaBootLoaded = 0x3, | |
MiVaPfnDatabase = 0x4, | |
MiVaNonPagedPool = 0x5, | |
MiVaPagedPool = 0x6, | |
MiVaSpecialPoolPaged = 0x7, | |
MiVaSystemCache = 0x8, | |
MiVaSystemPtes = 0x9, | |
MiVaHal = 0xA, | |
MiVaSessionGlobalSpace = 0xB, | |
MiVaDriverImages = 0xC, | |
MiVaSystemPtesLarge = 0xD, | |
MiVaKernelStacks = 0xE, | |
MiVaSecureNonPagedPool = 0xF, | |
MiVaMaximumType = 0x10, | |
}; | |
/* 81 */ | |
enum _CM_LOAD_FAILURE_TYPE : __int32 | |
{ | |
_None = 0x0, | |
_CmpCreateHive = 0x1, | |
_HvpBuildMap = 0x3, | |
_HvpBuildMapForLoaderHive = 0x4, | |
_HvpInitMap = 0x5, | |
_HvLoadHive = 0x6, | |
_HvpMapHiveImage = 0x7, | |
_HvpRecoverData = 0x8, | |
_CmpValidateHiveSecurityDescriptors = 0x9, | |
_HvpEnlistBinInMap = 0xA, | |
_CmCheckRegistry = 0xB, | |
_CmRegistryIO = 0xC, | |
_CmCheckRegistry2 = 0xD, | |
_CmpCheckKey = 0xE, | |
_CmpCheckValueList = 0xF, | |
_HvCheckHive = 0x10, | |
_HvCheckBin = 0x11, | |
_HvpGetLogEntryDirtyVector = 0x12, | |
_HvpReadLogEntryHeader = 0x13, | |
_HvpReadLogEntry = 0x14, | |
_CmpMountPreloadedHives = 0x15, | |
_CmpLoadHiveThread = 0x16, | |
_CmpCheckLeaf = 0x17, | |
_HvHiveStartFileBacked = 0x18, | |
_HvStartHiveMemoryBacked = 0x19, | |
_HvpEnlistFreeCells = 0x1A, | |
_HvpPerformLogFileRecovery = 0x1B, | |
_CmpInitHiveFromFile = 0x1C, | |
_CmpLoadKeyCommon = 0x1D, | |
_CmpLinkHiveToMaster = 0x1E, | |
_CmLoadKey = 0x1F, | |
_CmLoadAppKey = 0x20, | |
_CmpResolveHiveLoadConflict = 0x21, | |
}; | |
/* 82 */ | |
enum UoWActionType : __int32 | |
{ | |
UoWAddThisKey = 0x0, | |
UoWAddChildKey = 0x1, | |
UoWDeleteThisKey = 0x2, | |
UoWDeleteChildKey = 0x3, | |
UoWSetValueNew = 0x4, | |
UoWSetValueExisting = 0x5, | |
UoWDeleteValue = 0x6, | |
UoWSetKeyUserFlags = 0x7, | |
UoWSetLastWriteTime = 0x8, | |
UoWSetSecurityDescriptor = 0x9, | |
UoWRenameSubKey = 0xA, | |
UoWRenameOldSubKey = 0xB, | |
UoWRenameNewSubKey = 0xC, | |
UoWIsolation = 0xD, | |
UoWInvalid = 0xE, | |
}; | |
/* 83 */ | |
enum HSTORAGE_TYPE : __int32 | |
{ | |
Stable = 0x0, | |
Volatile = 0x1, | |
InvalidStorage = 0x2, | |
}; | |
/* 84 */ | |
enum _CMP_FAILURE_INJECTION_POINT : __int32 | |
{ | |
CmpFailurePointPoolAllocation = 0x0, | |
CmpFailurePointViewMapping = 0x1, | |
CmpFailurePointViewPinning = 0x2, | |
CmpFailurePointResourceCharging = 0x3, | |
CmpFailurePointFileWrite = 0x4, | |
CmpFailurePointFileRead = 0x5, | |
CmpFailurePointCacheFlush = 0x6, | |
CmpFailurePointFlush = 0x7, | |
CmpFailurePointFlushAndPurge = 0x8, | |
CmpFailurePointForceLargeBin = 0x9, | |
CmpFailurePointDontFixAlignment = 0xA, | |
CmpFailurePointAllocateCell = 0xB, | |
CmpFailurePointMarkDirty = 0xC, | |
CmpFailurePointForceMultiLevelMap = 0xD, | |
CmpFailurePointAllocateContiguousLogEntry = 0xE, | |
CmpFailurePointAllocateKcb = 0xF, | |
CmpFailurePointCreateKeyBody = 0x10, | |
CmpFailurePointForceFreeKcb = 0x11, | |
CmpFailurePointKcbLockUpgrade = 0x12, | |
CmpFailurePointKcbLockUpgradeDelay = 0x13, | |
CmpFailurePointKeyEnumResumeContextVerification = 0x14, | |
CmpFailurePointKeyEnumForceRetry = 0x15, | |
CmpFailurePointForceReorganization = 0x16, | |
CmpFailurePointForceLazyCOWByPolicy = 0x17, | |
CmpFailureInjectionPointCount = 0x18, | |
}; | |
/* 85 */ | |
enum _PCW_CALLBACK_TYPE : __int32 | |
{ | |
PcwCallbackAddCounter = 0x0, | |
PcwCallbackRemoveCounter = 0x1, | |
PcwCallbackEnumerateInstances = 0x2, | |
PcwCallbackCollectData = 0x3, | |
}; | |
/* 86 */ | |
enum _KHETERO_CPU_POLICY : __int32 | |
{ | |
KHeteroCpuPolicyAll = 0x0, | |
KHeteroCpuPolicyLarge = 0x1, | |
KHeteroCpuPolicyLargeOrIdle = 0x2, | |
KHeteroCpuPolicySmall = 0x3, | |
KHeteroCpuPolicySmallOrIdle = 0x4, | |
KHeteroCpuPolicyDynamic = 0x5, | |
KHeteroCpuPolicyStaticMax = 0x5, | |
KHeteroCpuPolicyBiasedSmall = 0x6, | |
KHeteroCpuPolicyBiasedLarge = 0x7, | |
KHeteroCpuPolicyDefault = 0x8, | |
KHeteroCpuPolicyMax = 0x9, | |
}; | |
/* 87 */ | |
enum _PNP_DEVNODE_STATE : __int32 | |
{ | |
DeviceNodeUnspecified = 0x300, | |
DeviceNodeUninitialized = 0x301, | |
DeviceNodeInitialized = 0x302, | |
DeviceNodeDriversAdded = 0x303, | |
DeviceNodeResourcesAssigned = 0x304, | |
DeviceNodeStartPending = 0x305, | |
DeviceNodeStartCompletion = 0x306, | |
DeviceNodeStartPostWork = 0x307, | |
DeviceNodeStarted = 0x308, | |
DeviceNodeQueryStopped = 0x309, | |
DeviceNodeStopped = 0x30A, | |
DeviceNodeRestartCompletion = 0x30B, | |
DeviceNodeEnumeratePending = 0x30C, | |
DeviceNodeEnumerateCompletion = 0x30D, | |
DeviceNodeAwaitingQueuedDeletion = 0x30E, | |
DeviceNodeAwaitingQueuedRemoval = 0x30F, | |
DeviceNodeQueryRemoved = 0x310, | |
DeviceNodeRemovePendingCloses = 0x311, | |
DeviceNodeRemoved = 0x312, | |
DeviceNodeDeletePendingCloses = 0x313, | |
DeviceNodeDeleted = 0x314, | |
MaxDeviceNodeState = 0x315, | |
}; | |
/* 88 */ | |
enum PROFILE_STATUS : __int32 | |
{ | |
DOCK_NOTDOCKDEVICE = 0x0, | |
DOCK_QUIESCENT = 0x1, | |
DOCK_ARRIVING = 0x2, | |
DOCK_DEPARTING = 0x3, | |
DOCK_EJECTIRP_COMPLETED = 0x4, | |
}; | |
/* 89 */ | |
enum _ARBITER_REQUEST_SOURCE : __int32 | |
{ | |
ArbiterRequestUndefined = 0xFFFFFFFF, | |
ArbiterRequestLegacyReported = 0x0, | |
ArbiterRequestHalReported = 0x1, | |
ArbiterRequestLegacyAssigned = 0x2, | |
ArbiterRequestPnpDetected = 0x3, | |
ArbiterRequestPnpEnumerated = 0x4, | |
}; | |
/* 90 */ | |
enum _POWER_REQUEST_TYPE : __int32 | |
{ | |
PowerRequestDisplayRequired = 0x0, | |
PowerRequestSystemRequired = 0x1, | |
PowerRequestAwayModeRequired = 0x2, | |
PowerRequestExecutionRequired = 0x3, | |
}; | |
/* 91 */ | |
enum _POWER_REQUEST_TYPE_INTERNAL : __int32 | |
{ | |
PowerRequestDisplayRequiredInternal = 0x0, | |
PowerRequestSystemRequiredInternal = 0x1, | |
PowerRequestAwayModeRequiredInternal = 0x2, | |
PowerRequestExecutionRequiredInternal = 0x3, | |
PowerRequestPerfBoostRequiredInternal = 0x4, | |
PowerRequestActiveLockScreenInternal = 0x5, | |
PowerRequestInternalInvalid = 0x6, | |
}; | |
/* 92 */ | |
enum _PEP_ACPI_RESOURCE_TYPE : __int32 | |
{ | |
PepAcpiMemory = 0x0, | |
PepAcpiIoPort = 0x1, | |
PepAcpiInterrupt = 0x2, | |
PepAcpiGpioIo = 0x3, | |
PepAcpiGpioInt = 0x4, | |
PepAcpiSpbI2c = 0x5, | |
PepAcpiSpbSpi = 0x6, | |
PepAcpiSpbUart = 0x7, | |
PepAcpiExtendedMemory = 0x8, | |
PepAcpiExtendedIo = 0x9, | |
}; | |
/* 93 */ | |
enum _GPIO_PIN_CONFIG_TYPE : __int32 | |
{ | |
PullDefault = 0x0, | |
PullUp = 0x1, | |
PullDown = 0x2, | |
PullNone = 0x3, | |
}; | |
/* 94 */ | |
enum _GPIO_PIN_IORESTRICTION_TYPE : __int32 | |
{ | |
IoRestrictionNone = 0x0, | |
IoRestrictionInputOnly = 0x1, | |
IoRestrictionOutputOnly = 0x2, | |
IoRestrictionNoneAndPreserve = 0x3, | |
}; | |
/* 95 */ | |
enum SYSTEM_POWER_CONDITION : __int32 | |
{ | |
PoAc = 0x0, | |
PoDc = 0x1, | |
PoHot = 0x2, | |
PoConditionMaximum = 0x3, | |
}; | |
/* 96 */ | |
enum _SERVERSILO_STATE : __int32 | |
{ | |
SERVERSILO_INITING = 0x0, | |
SERVERSILO_STARTED = 0x1, | |
SERVERSILO_SHUTTING_DOWN = 0x2, | |
SERVERSILO_TERMINATING = 0x3, | |
SERVERSILO_TERMINATED = 0x4, | |
}; | |
/* 97 */ | |
enum _OPENCOUNT_REASON : __int32 | |
{ | |
OpenCount_SkipLogging = 0x0, | |
OpenCount_AsyncRead = 0x1, | |
OpenCount_FlushCache = 0x2, | |
OpenCount_GetDirtyPage = 0x3, | |
OpenCount_GetFlushedVDL = 0x4, | |
OpenCount_InitCachemap1 = 0x5, | |
OpenCount_InitCachemap2 = 0x6, | |
OpenCount_InitCachemap3 = 0x7, | |
OpenCount_InitCachemap4 = 0x8, | |
OpenCount_InitCachemap5 = 0x9, | |
OpenCount_MdlWrite = 0xA, | |
OpenCount_MdlWriteAbort = 0xB, | |
OpenCount_NotifyMappedWrite = 0xC, | |
OpenCount_NotifyMappedWriteCompCallback = 0xD, | |
OpenCount_PurgeCache = 0xE, | |
OpenCount_PurgeCacheActiveViews = 0xF, | |
OpenCount_ReadAhead = 0x10, | |
OpenCount_SetFileSize = 0x11, | |
OpenCount_SetFileSizeSection = 0x12, | |
OpenCount_UninitCachemapReadAhead = 0x13, | |
OpenCount_UninitCachemapReg = 0x14, | |
OpenCount_UnmapInactiveViews = 0x15, | |
OpenCount_UnmapInactiveViews1 = 0x16, | |
OpenCount_UnmapInactiveViews2 = 0x17, | |
OpenCount_UnmapInactiveViews3 = 0x18, | |
OpenCount_WriteBehind = 0x19, | |
OpenCount_WriteBehindComplete = 0x1A, | |
OpenCount_WriteBehindFailAcquire = 0x1B, | |
}; | |
/* 98 */ | |
enum RTLP_CSPARSE_BITMAP_STATE : __int32 | |
{ | |
CommitBitmapInvalid = 0x0, | |
UserBitmapInvalid = 0x1, | |
UserBitmapValid = 0x2, | |
}; | |
/* 99 */ | |
enum _RTLP_HP_ADDRESS_SPACE_TYPE : __int32 | |
{ | |
HeapAddressUser = 0x0, | |
HeapAddressKernel = 0x1, | |
HeapAddressSession = 0x2, | |
HeapAddressSecureKernel = 0x3, | |
HeapAddressTypeMax = 0x4, | |
}; | |
/* 100 */ | |
enum _RTLP_HP_LOCK_TYPE : __int32 | |
{ | |
HeapLockPaged = 0x0, | |
HeapLockNonPaged = 0x1, | |
HeapLockTypeMax = 0x2, | |
}; | |
/* 101 */ | |
enum _HEAP_LFH_LOCKMODE : __int32 | |
{ | |
HeapLockNotHeld = 0x0, | |
HeapLockShared = 0x1, | |
HeapLockExclusive = 0x2, | |
}; | |
/* 102 */ | |
enum _HEAP_SEG_RANGE_TYPE : __int32 | |
{ | |
HeapSegRangeUser = 0x0, | |
HeapSegRangeInternal = 0x1, | |
HeapSegRangeLFH = 0x2, | |
HeapSegRangeVS = 0x3, | |
HeapSegRangeTypeMax = 0x3, | |
}; | |
/* 103 */ | |
enum _RTLP_HP_ALLOCATOR : __int32 | |
{ | |
RtlpHpSegmentSm = 0x0, | |
RtlpHpSegmentLg = 0x1, | |
RtlpHpSegmentTypes = 0x2, | |
RtlpHpHugeAllocator = 0x2, | |
RtlpHpAllocatorMax = 0x3, | |
}; | |
/* 104 */ | |
enum _HEAP_FAILURE_TYPE : __int32 | |
{ | |
heap_failure_internal = 0x0, | |
heap_failure_unknown = 0x1, | |
heap_failure_generic = 0x2, | |
heap_failure_entry_corruption = 0x3, | |
heap_failure_multiple_entries_corruption = 0x4, | |
heap_failure_virtual_block_corruption = 0x5, | |
heap_failure_buffer_overrun = 0x6, | |
heap_failure_buffer_underrun = 0x7, | |
heap_failure_block_not_busy = 0x8, | |
heap_failure_invalid_argument = 0x9, | |
heap_failure_invalid_allocation_type = 0xA, | |
heap_failure_usage_after_free = 0xB, | |
heap_failure_cross_heap_operation = 0xC, | |
heap_failure_freelists_corruption = 0xD, | |
heap_failure_listentry_corruption = 0xE, | |
heap_failure_lfh_bitmap_mismatch = 0xF, | |
heap_failure_segment_lfh_bitmap_corruption = 0x10, | |
heap_failure_segment_lfh_double_free = 0x11, | |
heap_failure_vs_subsegment_corruption = 0x12, | |
heap_failure_null_heap = 0x13, | |
heap_failure_allocation_limit = 0x14, | |
heap_failure_commit_limit = 0x15, | |
heap_failure_invalid_va_mgr_query = 0x16, | |
}; | |
/* 105 */ | |
enum _BLOB_ID : __int32 | |
{ | |
BLOB_TYPE_UNKNOWN = 0x0, | |
BLOB_TYPE_CONNECTION_INFO = 0x1, | |
BLOB_TYPE_MESSAGE = 0x2, | |
BLOB_TYPE_SECURITY_CONTEXT = 0x3, | |
BLOB_TYPE_SECTION = 0x4, | |
BLOB_TYPE_REGION = 0x5, | |
BLOB_TYPE_VIEW = 0x6, | |
BLOB_TYPE_RESERVE = 0x7, | |
BLOB_TYPE_DIRECT_TRANSFER = 0x8, | |
BLOB_TYPE_HANDLE_DATA = 0x9, | |
BLOB_TYPE_MAX_ID = 0xA, | |
}; | |
/* 106 */ | |
enum _KWAIT_REASON : __int32 | |
{ | |
Executive = 0x0, | |
FreePage = 0x1, | |
PageIn = 0x2, | |
PoolAllocation = 0x3, | |
DelayExecution = 0x4, | |
Suspended = 0x5, | |
UserRequest = 0x6, | |
WrExecutive = 0x7, | |
WrFreePage = 0x8, | |
WrPageIn = 0x9, | |
WrPoolAllocation = 0xA, | |
WrDelayExecution = 0xB, | |
WrSuspended = 0xC, | |
WrUserRequest = 0xD, | |
WrSpare0 = 0xE, | |
WrQueue = 0xF, | |
WrLpcReceive = 0x10, | |
WrLpcReply = 0x11, | |
WrVirtualMemory = 0x12, | |
WrPageOut = 0x13, | |
WrRendezvous = 0x14, | |
WrKeyedEvent = 0x15, | |
WrTerminated = 0x16, | |
WrProcessInSwap = 0x17, | |
WrCpuRateControl = 0x18, | |
WrCalloutStack = 0x19, | |
WrKernel = 0x1A, | |
WrResource = 0x1B, | |
WrPushLock = 0x1C, | |
WrMutex = 0x1D, | |
WrQuantumEnd = 0x1E, | |
WrDispatchInt = 0x1F, | |
WrPreempted = 0x20, | |
WrYieldExecution = 0x21, | |
WrFastMutex = 0x22, | |
WrGuardedMutex = 0x23, | |
WrRundown = 0x24, | |
WrAlertByThreadId = 0x25, | |
WrDeferredPreempt = 0x26, | |
WrPhysicalFault = 0x27, | |
MaximumWaitReason = 0x28, | |
}; | |
/* 107 */ | |
enum _LOCK_OPERATION : __int32 | |
{ | |
IoReadAccess = 0x0, | |
IoWriteAccess = 0x1, | |
IoModifyAccess = 0x2, | |
}; | |
/* 108 */ | |
enum _IOP_PRIORITY_HINT : __int32 | |
{ | |
IopIoPriorityNotSet = 0x0, | |
IopIoPriorityVeryLow = 0x1, | |
IopIoPriorityLow = 0x2, | |
IopIoPriorityNormal = 0x3, | |
IopIoPriorityHigh = 0x4, | |
IopIoPriorityCritical = 0x5, | |
MaxIopIoPriorityTypes = 0x6, | |
}; | |
/* 109 */ | |
enum _TRANSFER_TYPE : __int32 | |
{ | |
ReadTransfer = 0x0, | |
WriteTransfer = 0x1, | |
OtherTransfer = 0x2, | |
}; | |
/* 110 */ | |
enum _CREATE_FILE_TYPE : __int32 | |
{ | |
CreateFileTypeNone = 0x0, | |
CreateFileTypeNamedPipe = 0x1, | |
CreateFileTypeMailslot = 0x2, | |
}; | |
/* 111 */ | |
enum _ETW_BUFFER_STATE : __int32 | |
{ | |
EtwBufferStateFree = 0x0, | |
EtwBufferStateGeneralLogging = 0x1, | |
EtwBufferStateCSwitch = 0x2, | |
EtwBufferStateFlush = 0x3, | |
EtwBufferStatePendingCompression = 0x4, | |
EtwBufferStateCompressed = 0x5, | |
EtwBufferStatePlaceholder = 0x6, | |
EtwBufferStateMaximum = 0x7, | |
}; | |
/* 112 */ | |
enum _ETW_RT_EVENT_LOSS : __int32 | |
{ | |
EtwRtEventNoLoss = 0x0, | |
EtwRtEventLost = 0x1, | |
EtwRtBufferLost = 0x2, | |
EtwRtBackupLost = 0x3, | |
EtwRtEventLossMax = 0x4, | |
}; | |
/* 113 */ | |
enum _ETW_PERIODIC_TIMER_STATE : __int32 | |
{ | |
EtwpPeriodicTimerUnset = 0x0, | |
EtwpPeriodicTimerSet = 0x1, | |
}; | |
/* 114 */ | |
enum ETW_COMPRESSION_RESUMPTION_MODE : __int32 | |
{ | |
EtwCompressionModeRestart = 0x0, | |
EtwCompressionModeNoDisable = 0x1, | |
EtwCompressionModeNoRestart = 0x2, | |
}; | |
/* 115 */ | |
enum _KPROFILE_SOURCE : __int32 | |
{ | |
ProfileTime = 0x0, | |
ProfileAlignmentFixup = 0x1, | |
ProfileTotalIssues = 0x2, | |
ProfilePipelineDry = 0x3, | |
ProfileLoadInstructions = 0x4, | |
ProfilePipelineFrozen = 0x5, | |
ProfileBranchInstructions = 0x6, | |
ProfileTotalNonissues = 0x7, | |
ProfileDcacheMisses = 0x8, | |
ProfileIcacheMisses = 0x9, | |
ProfileCacheMisses = 0xA, | |
ProfileBranchMispredictions = 0xB, | |
ProfileStoreInstructions = 0xC, | |
ProfileFpInstructions = 0xD, | |
ProfileIntegerInstructions = 0xE, | |
Profile2Issue = 0xF, | |
Profile3Issue = 0x10, | |
Profile4Issue = 0x11, | |
ProfileSpecialInstructions = 0x12, | |
ProfileTotalCycles = 0x13, | |
ProfileIcacheIssues = 0x14, | |
ProfileDcacheAccesses = 0x15, | |
ProfileMemoryBarrierCycles = 0x16, | |
ProfileLoadLinkedIssues = 0x17, | |
ProfileMaximum = 0x18, | |
}; | |
/* 116 */ | |
enum _TOKEN_TYPE : __int32 | |
{ | |
TokenPrimary = 0x1, | |
TokenImpersonation = 0x2, | |
}; | |
/* 117 */ | |
enum _WNF_STATE_NAME_LIFETIME : __int32 | |
{ | |
WnfWellKnownStateName = 0x0, | |
WnfPermanentStateName = 0x1, | |
WnfPersistentStateName = 0x2, | |
WnfTemporaryStateName = 0x3, | |
}; | |
/* 118 */ | |
enum _WNF_DATA_SCOPE : __int32 | |
{ | |
WnfDataScopeSystem = 0x0, | |
WnfDataScopeSession = 0x1, | |
WnfDataScopeUser = 0x2, | |
WnfDataScopeProcess = 0x3, | |
WnfDataScopeMachine = 0x4, | |
WnfDataScopePhysicalMachine = 0x5, | |
}; | |
/* 119 */ | |
enum _WNF_SUBSCRIPTION_STATE : __int32 | |
{ | |
WNF_SUB_STATE_QUIESCENT = 0x0, | |
WNF_SUB_STATE_READY_TO_DELIVER = 0x1, | |
WNF_SUB_STATE_IN_DELIVERY = 0x2, | |
WNF_SUB_STATE_RETRY = 0x3, | |
}; | |
/* 120 */ | |
enum _IO_RATE_CONTROL_TYPE : __int32 | |
{ | |
IoRateControlTypeCapMin = 0x0, | |
IoRateControlTypeIopsCap = 0x0, | |
IoRateControlTypeBandwidthCap = 0x1, | |
IoRateControlTypeTimePercentCap = 0x2, | |
IoRateControlTypeCapMax = 0x2, | |
IoRateControlTypeReservationMin = 0x3, | |
IoRateControlTypeIopsReservation = 0x3, | |
IoRateControlTypeBandwidthReservation = 0x4, | |
IoRateControlTypeTimePercentReservation = 0x5, | |
IoRateControlTypeReservationMax = 0x5, | |
IoRateControlTypeCriticalReservationMin = 0x6, | |
IoRateControlTypeIopsCriticalReservation = 0x6, | |
IoRateControlTypeBandwidthCriticalReservation = 0x7, | |
IoRateControlTypeTimePercentCriticalReservation = 0x8, | |
IoRateControlTypeCriticalReservationMax = 0x8, | |
IoRateControlTypeSoftCapMin = 0x9, | |
IoRateControlTypeIopsSoftCap = 0x9, | |
IoRateControlTypeBandwidthSoftCap = 0xA, | |
IoRateControlTypeTimePercentSoftCap = 0xB, | |
IoRateControlTypeSoftCapMax = 0xB, | |
IoRateControlTypeLimitExcessNotifyMin = 0xC, | |
IoRateControlTypeIopsLimitExcessNotify = 0xC, | |
IoRateControlTypeBandwidthLimitExcessNotify = 0xD, | |
IoRateControlTypeTimePercentLimitExcessNotify = 0xE, | |
IoRateControlTypeLimitExcessNotifyMax = 0xE, | |
IoRateControlTypeMax = 0xF, | |
}; | |
/* 121 */ | |
enum _JOBOBJECTINFOCLASS : __int32 | |
{ | |
JobObjectBasicAccountingInformation = 0x1, | |
JobObjectBasicLimitInformation = 0x2, | |
JobObjectBasicProcessIdList = 0x3, | |
JobObjectBasicUIRestrictions = 0x4, | |
JobObjectSecurityLimitInformation = 0x5, | |
JobObjectEndOfJobTimeInformation = 0x6, | |
JobObjectAssociateCompletionPortInformation = 0x7, | |
JobObjectBasicAndIoAccountingInformation = 0x8, | |
JobObjectExtendedLimitInformation = 0x9, | |
JobObjectJobSetInformation = 0xA, | |
JobObjectGroupInformation = 0xB, | |
JobObjectNotificationLimitInformation = 0xC, | |
JobObjectLimitViolationInformation = 0xD, | |
JobObjectGroupInformationEx = 0xE, | |
JobObjectCpuRateControlInformation = 0xF, | |
JobObjectCompletionFilter = 0x10, | |
JobObjectCompletionCounter = 0x11, | |
JobObjectFreezeInformation = 0x12, | |
JobObjectExtendedAccountingInformation = 0x13, | |
JobObjectWakeInformation = 0x14, | |
JobObjectBackgroundInformation = 0x15, | |
JobObjectSchedulingRankBiasInformation = 0x16, | |
JobObjectTimerVirtualizationInformation = 0x17, | |
JobObjectCycleTimeNotification = 0x18, | |
JobObjectClearEvent = 0x19, | |
JobObjectInterferenceInformation = 0x1A, | |
JobObjectClearPeakJobMemoryUsed = 0x1B, | |
JobObjectMemoryUsageInformation = 0x1C, | |
JobObjectSharedCommit = 0x1D, | |
JobObjectContainerId = 0x1E, | |
JobObjectIoRateControlInformation = 0x1F, | |
JobObjectSiloRootDirectory = 0x25, | |
JobObjectServerSiloBasicInformation = 0x26, | |
JobObjectServerSiloUserSharedData = 0x27, | |
JobObjectServerSiloInitialize = 0x28, | |
JobObjectServerSiloRunningState = 0x29, | |
JobObjectIoAttribution = 0x2A, | |
JobObjectMemoryPartitionInformation = 0x2B, | |
JobObjectContainerTelemetryId = 0x2C, | |
JobObjectSiloSystemRoot = 0x2D, | |
JobObjectEnergyTrackingState = 0x2E, | |
JobObjectThreadImpersonationInformation = 0x2F, | |
JobObjectReserved1Information = 0x12, | |
JobObjectReserved2Information = 0x13, | |
JobObjectReserved3Information = 0x14, | |
JobObjectReserved4Information = 0x15, | |
JobObjectReserved5Information = 0x16, | |
JobObjectReserved6Information = 0x17, | |
JobObjectReserved7Information = 0x18, | |
JobObjectReserved8Information = 0x19, | |
JobObjectReserved9Information = 0x1A, | |
JobObjectReserved10Information = 0x1B, | |
JobObjectReserved11Information = 0x1C, | |
JobObjectReserved12Information = 0x1D, | |
JobObjectReserved13Information = 0x1E, | |
JobObjectReserved14Information = 0x1F, | |
JobObjectNetRateControlInformation = 0x20, | |
JobObjectNotificationLimitInformation2 = 0x21, | |
JobObjectLimitViolationInformation2 = 0x22, | |
JobObjectCreateSilo = 0x23, | |
JobObjectSiloBasicInformation = 0x24, | |
JobObjectReserved15Information = 0x25, | |
JobObjectReserved16Information = 0x26, | |
JobObjectReserved17Information = 0x27, | |
JobObjectReserved18Information = 0x28, | |
JobObjectReserved19Information = 0x29, | |
JobObjectReserved20Information = 0x2A, | |
JobObjectReserved21Information = 0x2B, | |
JobObjectReserved22Information = 0x2C, | |
JobObjectReserved23Information = 0x2D, | |
JobObjectReserved24Information = 0x2E, | |
JobObjectReserved25Information = 0x2F, | |
MaxJobObjectInfoClass = 0x30, | |
}; | |
/* 122 */ | |
enum _OBJECT_INFORMATION_CLASS : __int32 | |
{ | |
ObjectBasicInformation = 0x0, | |
ObjectNameInformation = 0x1, | |
ObjectTypeInformation = 0x2, | |
ObjectTypesInformation = 0x3, | |
ObjectHandleFlagInformation = 0x4, | |
ObjectSessionInformation = 0x5, | |
ObjectSessionObjectInformation = 0x6, | |
MaxObjectInfoClass = 0x7, | |
}; | |
/* 123 */ | |
enum PPM_IDLE_BUCKET_TIME_TYPE : __int32 | |
{ | |
PpmIdleBucketTimeInQpc = 0x0, | |
PpmIdleBucketTimeIn100ns = 0x1, | |
PpmIdleBucketTimeMaximum = 0x2, | |
}; | |
/* 124 */ | |
enum _FILE_OBJECT_EXTENSION_TYPE : __int32 | |
{ | |
FoExtTypeTransactionParams = 0x0, | |
FoExtTypeInternal = 0x1, | |
FoExtTypeIosbRange = 0x2, | |
FoExtTypeGeneric = 0x3, | |
FoExtTypeSfio = 0x4, | |
FoExtTypeSymlink = 0x5, | |
FoExtTypeOplockKey = 0x6, | |
FoExtTypeSilo = 0x7, | |
FoExtTypeMemoryPartitionInfo = 0x8, | |
MaxFoExtTypes = 0x9, | |
}; | |
/* 125 */ | |
enum _IO_SESSION_STATE : __int32 | |
{ | |
IoSessionStateCreated = 0x1, | |
IoSessionStateInitialized = 0x2, | |
IoSessionStateConnected = 0x3, | |
IoSessionStateDisconnected = 0x4, | |
IoSessionStateDisconnectedLoggedOn = 0x5, | |
IoSessionStateLoggedOn = 0x6, | |
IoSessionStateLoggedOff = 0x7, | |
IoSessionStateTerminated = 0x8, | |
IoSessionStateMax = 0x9, | |
}; | |
/* 126 */ | |
enum _PROCESS_SECTION_TYPE : __int32 | |
{ | |
ProcessSectionData = 0x0, | |
ProcessSectionImage = 0x1, | |
ProcessSectionImageNx = 0x2, | |
ProcessSectionPagefileBacked = 0x3, | |
ProcessSectionMax = 0x4, | |
}; | |
/* 127 */ | |
enum _POP_DIRECTED_DRIPS_PROBLEM_DEVICE_REASON : __int32 | |
{ | |
DirectedDripsProblemDeviceReasonSpecialDevice = 0x0, | |
DirectedDripsProblemDeviceReasonNoDfx = 0x1, | |
DirectedDripsProblemDeviceReasonNoPs4 = 0x2, | |
DirectedDripsProblemDeviceReasonNoPs4Root = 0x3, | |
DirectedDripsProblemDeviceReasonComponentContraint = 0x4, | |
DirectedDripsProblemDeviceReasonDfxFailure = 0x5, | |
DirectedDripsProblemDeviceReasonPagingDevice = 0x6, | |
DirectedDripsProblemDeviceReasonDebuggingDevice = 0x7, | |
DirectedDripsProblemDeviceReasonDfxNotAllowed = 0x8, | |
DirectedDripsProblemDeviceReasonMax = 0x9, | |
}; | |
/* 128 */ | |
enum FEATURE_CHANGE_TIME : __int32 | |
{ | |
FEATURE_CHANGE_TIME_READ = 0x0, | |
FEATURE_CHANGE_TIME_MODULE_RELOAD = 0x1, | |
FEATURE_CHANGE_TIME_SESSION = 0x2, | |
FEATURE_CHANGE_TIME_REBOOT = 0x3, | |
FEATURE_CHANGE_TIME_USER_FLAG = 0x80, | |
}; | |
/* 129 */ | |
enum _EX_HEAP_TYPE : __int32 | |
{ | |
ExHeapTypeNonPagedMin = 0x0, | |
ExHeapTypeNonPaged = 0x0, | |
ExHeapTypeNonPagedMax = 0x1, | |
ExHeapTypeNonPagedNx = 0x1, | |
ExHeapTypePagedMin = 0x2, | |
ExHeapTypePaged = 0x2, | |
ExHeapTypePagedMax = 0x3, | |
ExHeapTypeMmSt = 0x3, | |
ExHeapTypeMax = 0x4, | |
ExHeapTypeSpecialMax = 0x4, | |
}; | |
/* 130 */ | |
enum _OB_OPEN_REASON : __int32 | |
{ | |
ObCreateHandle = 0x0, | |
ObOpenHandle = 0x1, | |
ObDuplicateHandle = 0x2, | |
ObInheritHandle = 0x3, | |
ObMaxOpenReason = 0x4, | |
}; | |
/* 131 */ | |
enum _SECURITY_OPERATION_CODE : __int32 | |
{ | |
SetSecurityDescriptor = 0x0, | |
QuerySecurityDescriptor = 0x1, | |
DeleteSecurityDescriptor = 0x2, | |
AssignSecurityDescriptor = 0x3, | |
}; | |
/* 132 */ | |
enum _RTL_FEATURE_ENABLED_STATE_OPTIONS : __int32 | |
{ | |
FeatureEnabledStateOptionsNone = 0x0, | |
FeatureEnabledStateOptionsWexpConfig = 0x1, | |
}; | |
/* 133 */ | |
enum _POP_PEP_NOTIFY_DEVICE_DSTATE_REASON : __int32 | |
{ | |
PepNotifyDeviceDStateReasonNone = 0x0, | |
PepNotifyDeviceDStateReasonSystemTransition = 0x1, | |
PepNotifyDeviceDStateReasonDfx = 0x2, | |
PepNotifyDeviceDStateReasonMax = 0x3, | |
}; | |
/* 134 */ | |
enum _RTLP_HP_MEMORY_TYPE : __int32 | |
{ | |
HeapMemoryPaged = 0x0, | |
HeapMemoryNonPaged = 0x1, | |
HeapMemoryLargePage = 0x2, | |
HeapMemoryHugePage = 0x3, | |
HeapMemoryTypeMax = 0x4, | |
}; | |
/* 135 */ | |
enum _DEVPROP_OPERATOR : __int32 | |
{ | |
DEVPROP_OPERATOR_MODIFIER_NOT = 0x10000, | |
DEVPROP_OPERATOR_MODIFIER_IGNORE_CASE = 0x20000, | |
DEVPROP_OPERATOR_NONE = 0x0, | |
DEVPROP_OPERATOR_EXISTS = 0x1, | |
DEVPROP_OPERATOR_NOT_EXISTS = 0x10001, | |
DEVPROP_OPERATOR_EQUALS = 0x2, | |
DEVPROP_OPERATOR_NOT_EQUALS = 0x10002, | |
DEVPROP_OPERATOR_GREATER_THAN = 0x3, | |
DEVPROP_OPERATOR_LESS_THAN = 0x4, | |
DEVPROP_OPERATOR_GREATER_THAN_EQUALS = 0x5, | |
DEVPROP_OPERATOR_LESS_THAN_EQUALS = 0x6, | |
DEVPROP_OPERATOR_EQUALS_IGNORE_CASE = 0x20002, | |
DEVPROP_OPERATOR_NOT_EQUALS_IGNORE_CASE = 0x30002, | |
DEVPROP_OPERATOR_BITWISE_AND = 0x7, | |
DEVPROP_OPERATOR_BITWISE_OR = 0x8, | |
DEVPROP_OPERATOR_BEGINS_WITH = 0x9, | |
DEVPROP_OPERATOR_ENDS_WITH = 0xA, | |
DEVPROP_OPERATOR_CONTAINS = 0xB, | |
DEVPROP_OPERATOR_BEGINS_WITH_IGNORE_CASE = 0x20009, | |
DEVPROP_OPERATOR_ENDS_WITH_IGNORE_CASE = 0x2000A, | |
DEVPROP_OPERATOR_CONTAINS_IGNORE_CASE = 0x2000B, | |
DEVPROP_OPERATOR_LIST_CONTAINS = 0x1000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_BEGINS_WITH = 0x2000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_ENDS_WITH = 0x3000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_CONTAINS = 0x4000, | |
DEVPROP_OPERATOR_LIST_CONTAINS_IGNORE_CASE = 0x21000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_BEGINS_WITH_IGNORE_CASE = 0x22000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_ENDS_WITH_IGNORE_CASE = 0x23000, | |
DEVPROP_OPERATOR_LIST_ELEMENT_CONTAINS_IGNORE_CASE = 0x24000, | |
DEVPROP_OPERATOR_AND_OPEN = 0x100000, | |
DEVPROP_OPERATOR_AND_CLOSE = 0x200000, | |
DEVPROP_OPERATOR_OR_OPEN = 0x300000, | |
DEVPROP_OPERATOR_OR_CLOSE = 0x400000, | |
DEVPROP_OPERATOR_NOT_OPEN = 0x500000, | |
DEVPROP_OPERATOR_NOT_CLOSE = 0x600000, | |
DEVPROP_OPERATOR_ARRAY_CONTAINS = 0x10000000, | |
DEVPROP_OPERATOR_MASK_EVAL = 0xFFF, | |
DEVPROP_OPERATOR_MASK_LIST = 0xF000, | |
DEVPROP_OPERATOR_MASK_MODIFIER = 0xF0000, | |
DEVPROP_OPERATOR_MASK_NOT_LOGICAL = 0xF00FFFFF, | |
DEVPROP_OPERATOR_MASK_LOGICAL = 0xFF00000, | |
DEVPROP_OPERATOR_MASK_ARRAY = 0xF0000000, | |
}; | |
/* 136 */ | |
enum _KWAIT_BLOCK_STATE : __int32 | |
{ | |
WaitBlockBypassStart = 0x0, | |
WaitBlockBypassComplete = 0x1, | |
WaitBlockSuspendBypassStart = 0x2, | |
WaitBlockSuspendBypassComplete = 0x3, | |
WaitBlockActive = 0x4, | |
WaitBlockInactive = 0x5, | |
WaitBlockSuspended = 0x6, | |
WaitBlockAllStates = 0x7, | |
}; | |
/* 137 */ | |
enum _VI_DEADLOCK_RESOURCE_TYPE : __int32 | |
{ | |
VfDeadlockUnknown = 0x0, | |
VfDeadlockMutex = 0x1, | |
VfDeadlockMutexAbandoned = 0x2, | |
VfDeadlockFastMutex = 0x3, | |
VfDeadlockFastMutexUnsafe = 0x4, | |
VfDeadlockSpinLock = 0x5, | |
VfDeadlockInStackQueuedSpinLock = 0x6, | |
VfDeadlockUnusedSpinLock = 0x7, | |
VfDeadlockEresource = 0x8, | |
VfDeadlockTypeMaximum = 0x9, | |
}; | |
/* 138 */ | |
enum _MI_ALTERNATE_LOCK_VA_TYPE : __int32 | |
{ | |
AlternateLockVaTypeSystemPtes = 0x0, | |
AlternateLockVaTypeNonPagedPool = 0x1, | |
AlternateLockVaTypeUser = 0x2, | |
AlternateLockVaTypeSystem = 0x3, | |
AlternateLockVaTypeMaximum = 0x4, | |
}; | |
/* 139 */ | |
enum _POP_SLEEP_CHECKPOINT : __int32 | |
{ | |
PopSleepCheckpointInvalid = 0x0, | |
PopSleepCheckpointPowerTransitionStart = 0x1, | |
PopSleepCheckpointSuspendAppsBefore = 0x2, | |
PopSleepCheckpointSuspendAppsAfter = 0x3, | |
PopSleepCheckpointSuspendServicesBefore = 0x4, | |
PopSleepCheckpointSuspendServicesAfter = 0x5, | |
PopSleepCheckpointNotifySuperfetchBefore = 0x6, | |
PopSleepCheckpointNotifySuperfetchAfter = 0x7, | |
PopSleepCheckpointNotifyCallbacksBefore = 0x8, | |
PopSleepCheckpointNotifyCallbacksAfter = 0x9, | |
PopSleepCheckpointSleepTransactionCommitted = 0xA, | |
PopSleepCheckpointQueryDriversBefore = 0xB, | |
PopSleepCheckpointQueryDriversAfter = 0xC, | |
PopSleepCheckpointAllocatingHiberContext = 0xD, | |
PopSleepCheckpointSuspendDriversBefore = 0xE, | |
PopSleepCheckpointPreSleepNotification = 0x10, | |
PopSleepCheckpointInterruptsDisabledBegin = 0x11, | |
PopSleepCheckpointInvokeHandlerBefore = 0x12, | |
PopSleepCheckpointSaveHiberContextBegin = 0x13, | |
PopSleepCheckpointInitializeDumpStackFailed = 0x14, | |
PopSleepCheckpointHiberWriteFailed = 0x15, | |
PopSleepCheckpointHiberFileTooSmall = 0x16, | |
PopSleepCheckpointSaveHiberContextFailed = 0x17, | |
PopSleepCheckpointSaveHiberContextEnd = 0x18, | |
PopSleepCheckpointHiberKernelHandoff = 0x19, | |
PopSleepCheckpointInvokeHandlerAfter = 0x1A, | |
PopSleepCheckpointReadHiberfileBefore = 0x1B, | |
PopSleepCheckpointInitializeDumpStackForReadFailed = 0x1C, | |
PopSleepCheckpointHiberReadFailed = 0x1D, | |
PopSleepCheckpointChecksumFailure = 0x1E, | |
PopSleepCheckpointDecompressionFailed = 0x1F, | |
PopSleepCheckpointReadHiberfileAfter = 0x20, | |
PopSleepCheckpointInterruptsDisabledEnd = 0x21, | |
PopSleepCheckpointWakeDriversAfter = 0x24, | |
PopSleepCheckpointResumeAppsBefore = 0x25, | |
PopSleepCheckpointResumeAppsAfter = 0x26, | |
PopSleepCheckpointResumeServicesBefore = 0x27, | |
PopSleepCheckpointResumeServicesAfter = 0x28, | |
PopSleepCheckpointPowerTransitionEnd = 0x29, | |
PopSleepCheckpointAllocatingHiberContextNoFileObject = 0x2A, | |
PopSleepCheckpointAllocatingHiberContextGetDumpStackFailed = 0x2B, | |
PopSleepCheckpointAllocatingHiberContextLoadResumeContextFailed = 0x2C, | |
PopSleepCheckpointAllocatingHiberContextBcdOpenFailed = 0x2D, | |
PopSleepCheckpointAllocatingHiberContextEstablishResumeObjectFailed = 0x2E, | |
PopSleepCheckpointAllocatingHiberContextSetPendingResumeFailed = 0x2F, | |
PopSleepCheckpointAllocatingHiberContextAllocateIoPagesPagesFailed = 0x30, | |
PopSleepCheckpointAllocatingHiberContextAdapterBuffersInvalid1 = 0x31, | |
PopSleepCheckpointAllocatingHiberContextAllocateDumpPagesFailed = 0x32, | |
PopSleepCheckpointAllocatingHiberContextAdapterBuffersInvalid2 = 0x33, | |
PopSleepCheckpointAllocatingHiberContextUnHibernatedMdlFailed = 0x34, | |
PopSleepCheckpointAllocatingHiberContextSecureResourcesFailed = 0x35, | |
PopSleepCheckpointPrepareSleepBefore = 0x36, | |
PopSleepCheckpointPrepareSleepAfter = 0x37, | |
PopSleepCheckpointBootstatAvailable = 0x38, | |
PopSleepCheckpointMax = 0x39, | |
}; | |
/* 140 */ | |
enum PDC_CS_PHASE : __int32 | |
{ | |
PdcNoCsPhase = 0x0, | |
PdcConnectionPhase = 0x1, | |
PdcShellPhase = 0x2, | |
PdcPlmPhase = 0x3, | |
PdcMaintenancePhase = 0x4, | |
PdcDamPhase = 0x5, | |
PdcLowPowerPhase = 0x6, | |
PdcResiliencyNotificationPhase = 0x7, | |
PdcResiliencyPhase = 0x8, | |
PdcInvalidPhase = 0x9, | |
PdcMaxPhase = 0x9, | |
}; | |
/* 141 */ | |
enum _MI_MEMORY_EVENT_TYPES : __int32 | |
{ | |
LowPagedPoolEvent = 0x0, | |
HighPagedPoolEvent = 0x1, | |
LowNonPagedPoolEvent = 0x2, | |
HighNonPagedPoolEvent = 0x3, | |
LowAvailablePagesEvent = 0x4, | |
HighAvailablePagesEvent = 0x5, | |
LowCommitEvent = 0x6, | |
HighCommitEvent = 0x7, | |
MaximumCommitEvent = 0x8, | |
BadMemoryDetectedEvent = 0x9, | |
PhysicalMemoryChangeEvent = 0xA, | |
TotalNumberOfMemoryEvents = 0xB, | |
}; | |
/* 142 */ | |
enum JOB_OBJECT_IO_RATE_CONTROL_FLAGS : __int32 | |
{ | |
JOB_OBJECT_IO_RATE_CONTROL_ENABLE = 0x1, | |
JOB_OBJECT_IO_RATE_CONTROL_STANDALONE_VOLUME = 0x2, | |
JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ALL = 0x4, | |
JOB_OBJECT_IO_RATE_CONTROL_FORCE_UNIT_ACCESS_ON_SOFT_CAP = 0x8, | |
JOB_OBJECT_IO_RATE_CONTROL_VALID_FLAGS = 0xF, | |
}; | |
/* 143 */ | |
enum _KOBJECTS : __int32 | |
{ | |
EventNotificationObject = 0x0, | |
EventSynchronizationObject = 0x1, | |
MutantObject = 0x2, | |
ProcessObject = 0x3, | |
QueueObject = 0x4, | |
SemaphoreObject = 0x5, | |
ThreadObject = 0x6, | |
GateObject = 0x7, | |
TimerNotificationObject = 0x8, | |
TimerSynchronizationObject = 0x9, | |
Spare2Object = 0xA, | |
Spare3Object = 0xB, | |
Spare4Object = 0xC, | |
Spare5Object = 0xD, | |
Spare6Object = 0xE, | |
Spare7Object = 0xF, | |
Spare8Object = 0x10, | |
ProfileCallbackObject = 0x11, | |
ApcObject = 0x12, | |
DpcObject = 0x13, | |
DeviceQueueObject = 0x14, | |
PriQueueObject = 0x15, | |
InterruptObject = 0x16, | |
ProfileObject = 0x17, | |
Timer2NotificationObject = 0x18, | |
Timer2SynchronizationObject = 0x19, | |
ThreadedDpcObject = 0x1A, | |
MaximumKernelObject = 0x1B, | |
}; | |
/* 144 */ | |
enum _POP_SLEEP_CHECKPOINT_STATUS : __int32 | |
{ | |
PopSleepCheckpointStatusDisabled = 0x0, | |
PopSleepCheckpointStatusEnabledDueToDirtyShutdown = 0x1, | |
PopSleepCheckpointStatusEnabledManually = 0x4, | |
PopSleepCheckpointStatusEnabledExperiment = 0x4, | |
PopSleepCheckpointStatusEnabledMax = 0x7, | |
PopSleepCheckpointStatusFailedNotEfiSystem = 0x8, | |
PopSleepCheckpointStatusFailedInsufficientSpace = 0x9, | |
PopSleepCheckpointStatusFailedTooSlow = 0xA, | |
PopSleepCheckpointStatusFailedOtherError = 0xF, | |
PopSleepCheckpointStatusMax = 0xF, | |
}; | |
/* 145 */ | |
enum PDC_RESOURCE : __int32 | |
{ | |
PdcResourceSystemForeground = 0x0, | |
PdcResourceUniversalApplications = 0x1, | |
PdcResourceWin32 = 0x2, | |
PdcResourceNetwork = 0x3, | |
PdcResourceSystemBackground = 0x4, | |
PdcResourceMin = 0x0, | |
PdcResourceMax = 0x4, | |
}; | |
/* 146 */ | |
enum TlgIn_t : __int32 | |
{ | |
TlgInNULL = 0x0, | |
TlgInUNICODESTRING = 0x1, | |
TlgInANSISTRING = 0x2, | |
TlgInINT8 = 0x3, | |
TlgInUINT8 = 0x4, | |
TlgInINT16 = 0x5, | |
TlgInUINT16 = 0x6, | |
TlgInINT32 = 0x7, | |
TlgInUINT32 = 0x8, | |
TlgInINT64 = 0x9, | |
TlgInUINT64 = 0xA, | |
TlgInFLOAT = 0xB, | |
TlgInDOUBLE = 0xC, | |
TlgInBOOL32 = 0xD, | |
TlgInBINARY = 0xE, | |
TlgInGUID = 0xF, | |
_TlgInPOINTER_unsupported = 0x10, | |
TlgInFILETIME = 0x11, | |
TlgInSYSTEMTIME = 0x12, | |
TlgInSID = 0x13, | |
TlgInHEXINT32 = 0x14, | |
TlgInHEXINT64 = 0x15, | |
TlgInCOUNTEDSTRING = 0x16, | |
TlgInCOUNTEDANSISTRING = 0x17, | |
_TlgInSTRUCT = 0x18, | |
TlgInCOUNTEDBINARY = 0x19, | |
_TlgInMax = 0x1A, | |
TlgInINTPTR = 0x9, | |
TlgInUINTPTR = 0xA, | |
TlgInPOINTER = 0x15, | |
TlgInLONG = 0x7, | |
TlgInULONG = 0x8, | |
TlgInHEXLONG = 0x14, | |
_TlgInCcount = 0x20, | |
TlgInVcount = 0x40, | |
_TlgInChain = 0x80, | |
_TlgInCustom = 0x60, | |
_TlgInTypeMask = 0x1F, | |
_TlgInCountMask = 0x60, | |
_TlgInFlagMask = 0xE0, | |
}; | |
/* 147 */ | |
enum _BUGCHECK_RECOVERY_LOG_EVENT : __int32 | |
{ | |
RecoveryEventStart = 0x0, | |
RecoveryEventPhase1Status = 0x1, | |
RecoveryEventPhase2Status = 0x2, | |
RecoveryEventMax = 0x3, | |
}; | |
/* 148 */ | |
enum _POWER_INFORMATION_LEVEL_INTERNAL : __int32 | |
{ | |
PowerInternalAcpiInterfaceRegister = 0x0, | |
PowerInternalS0LowPowerIdleInfo = 0x1, | |
PowerInternalReapplyBrightnessSettings = 0x2, | |
PowerInternalUserAbsencePrediction = 0x3, | |
PowerInternalUserAbsencePredictionCapability = 0x4, | |
PowerInternalPoProcessorLatencyHint = 0x5, | |
PowerInternalStandbyNetworkRequest = 0x6, | |
PowerInternalDirtyTransitionInformation = 0x7, | |
PowerInternalSetBackgroundTaskState = 0x8, | |
PowerInternalReservedDoNotUseEnum9 = 0x9, | |
PowerInternalReservedDoNotUseEnum10 = 0xA, | |
PowerInternalReservedDoNotUseEnum11 = 0xB, | |
PowerInternalReservedDoNotUseEnum12 = 0xC, | |
PowerInternalReservedDoNotUseEnum13 = 0xD, | |
PowerInternalReservedDoNotUseEnum14 = 0xE, | |
PowerInternalReservedDoNotUseEnum15 = 0xF, | |
PowerInternalReservedDoNotUseEnum16 = 0x10, | |
PowerInternalReservedDoNotUseEnum17 = 0x11, | |
PowerInternalBootSessionStandbyActivationInformation = 0x12, | |
PowerInternalSessionPowerState = 0x13, | |
PowerInternalSessionTerminalInput = 0x14, | |
PowerInternalSetWatchdog = 0x15, | |
PowerInternalPhysicalPowerButtonPressInfoAtBoot = 0x16, | |
PowerInternalExternalMonitorConnected = 0x17, | |
PowerInternalHighPrecisionBrightnessSettings = 0x18, | |
PowerInternalWinrtScreenToggle = 0x19, | |
PowerInternalPpmQosDisable = 0x1A, | |
PowerInternalTransitionCheckpoint = 0x1B, | |
PowerInternalInputControllerState = 0x1C, | |
PowerInternalFirmwareResetReason = 0x1D, | |
PowerInternalPpmSchedulerQosSupport = 0x1E, | |
PowerInternalBootStatGet = 0x1F, | |
PowerInternalBootStatSet = 0x20, | |
PowerInternalCallHasNotReturnedWatchdog = 0x21, | |
PowerInternalBootStatCheckIntegrity = 0x22, | |
PowerInternalBootStatRestoreDefaults = 0x23, | |
PowerInternalHostEsStateUpdate = 0x24, | |
PowerInternalGetPowerActionState = 0x25, | |
PowerInternalBootStatUnlock = 0x26, | |
PowerInternalWakeOnVoiceState = 0x27, | |
PowerInternalDeepSleepBlock = 0x28, | |
PowerInternalIsPoFxDevice = 0x29, | |
PowerInternalPowerTransitionExtensionAtBoot = 0x2A, | |
PowerInternalProcessorBrandedFrequency = 0x2B, | |
PowerInternalTimeBrokerExpirationReason = 0x2C, | |
PowerInternalNotifyUserShutdownStatus = 0x2D, | |
PowerInternalPowerRequestTerminalCoreWindow = 0x2E, | |
PowerInternalProcessorIdleVeto = 0x2F, | |
PowerInternalPlatformIdleVeto = 0x30, | |
PowerInternalIsLongPowerButtonBugcheckEnabled = 0x31, | |
PowerInternalAutoChkCausedReboot = 0x32, | |
PowerInternalSetWakeAlarmOverride = 0x33, | |
PowerInternalDirectedFxAddTestDevice = 0x35, | |
PowerInternalDirectedFxRemoveTestDevice = 0x36, | |
PowerInternalDirectedFxSetMode = 0x38, | |
PowerInternalRegisterPowerPlane = 0x39, | |
PowerInternalSetDirectedDripsFlags = 0x3A, | |
PowerInternalClearDirectedDripsFlags = 0x3B, | |
PowerInternalRetrieveHiberFileResumeContext = 0x3C, | |
PowerInternalReadHiberFilePage = 0x3D, | |
PowerInternalLastBootSucceeded = 0x3E, | |
PowerInternalQuerySleepStudyHelperRoutineBlock = 0x3F, | |
PowerInternalDirectedDripsQueryCapabilities = 0x40, | |
PowerInternalClearConstraints = 0x41, | |
PowerInternalSoftParkVelocityEnabled = 0x42, | |
PowerInternalQueryIntelPepCapabilities = 0x43, | |
PowerInformationInternalMaximum = 0x44, | |
}; | |
/* 149 */ | |
enum _PS_STD_HANDLE_STATE : __int32 | |
{ | |
PsNeverDuplicate = 0x0, | |
PsRequestDuplicate = 0x1, | |
PsAlwaysDuplicate = 0x2, | |
PsMaxStdHandleStates = 0x3, | |
}; | |
/* 150 */ | |
enum _MEMORY_PHYSICAL_CONTIGUITY_UNIT_STATE : __int32 | |
{ | |
MemoryNotContiguous = 0x0, | |
MemoryAlignedAndContiguous = 0x1, | |
MemoryNotResident = 0x2, | |
MemoryNotEligibleToMakeContiguous = 0x3, | |
MemoryContiguityStateMax = 0x4, | |
}; | |
/* 151 */ | |
enum _PS_WAKE_REASON : __int32 | |
{ | |
PsWakeReasonUser = 0x0, | |
PsWakeReasonExecutionRequired = 0x1, | |
PsWakeReasonKernel = 0x2, | |
PsWakeReasonInstrumentation = 0x3, | |
PsWakeReasonPreserveProcess = 0x4, | |
PsWakeReasonActivityReference = 0x5, | |
PsWakeReasonWorkOnBehalf = 0x6, | |
PsMaxWakeReasons = 0x7, | |
}; | |
/* 152 */ | |
enum _RTL_MEMORY_TYPE : __int32 | |
{ | |
MemoryTypePaged = 0x0, | |
MemoryTypeNonPaged = 0x1, | |
MemoryTypeLargePage = 0x2, | |
MemoryTypeHugePage = 0x3, | |
MemoryTypeMax = 0x4, | |
}; | |
/* 153 */ | |
enum wil_FeatureStage : __int32 | |
{ | |
wil_FeatureStage_AlwaysDisabled = 0x0, | |
wil_FeatureStage_DisabledByDefault = 0x1, | |
wil_FeatureStage_EnabledByDefault = 0x2, | |
wil_FeatureStage_AlwaysEnabled = 0x3, | |
}; | |
/* 154 */ | |
enum _KHETERO_RUNNING_TYPE : __int32 | |
{ | |
KHeteroShortRunning = 0x0, | |
KHeteroLongRunning = 0x1, | |
KHeteroRunningTypeMax = 0x2, | |
}; | |
/* 155 */ | |
enum _HARDWARE_COUNTER_TYPE : __int32 | |
{ | |
PMCCounter = 0x0, | |
MaxHardwareCounterType = 0x1, | |
}; | |
/* 156 */ | |
enum _MI_SLAB_ALLOCATOR_PROTECTION : __int32 | |
{ | |
MiSlabAllocatorProtectionReadExecute = 0x0, | |
MiSlabAllocatorProtectionReadOnly = 0x1, | |
MiSlabAllocatorProtectionNoAccess = 0x2, | |
MiSlabAllocatorProtectionReadWrite = 0x3, | |
MiSlabAllocatorProtectionMax = 0x4, | |
}; | |
/* 157 */ | |
enum _KTHREAD_TAG : __int32 | |
{ | |
KThreadTagNone = 0x0, | |
KThreadTagMediaBuffering = 0x1, | |
KThreadTagDeadline = 0x2, | |
KThreadTagMax = 0x3, | |
}; | |
/* 158 */ | |
enum _ETW_PERFECT_HASH_FUNCTION_TYPE : __int32 | |
{ | |
ETW_PHF_EVENT_ID = 0x0, | |
ETW_PHF_STACK_WALK = 0x1, | |
ETW_PHF_MAX_COUNT = 0x2, | |
}; | |
/* 159 */ | |
enum _MI_ENCLAVE_TYPE : __int32 | |
{ | |
MiEnclaveNone = 0x0, | |
MiEnclaveHardware = 0x1, | |
MiEnclaveVsm = 0x2, | |
MiEnclaveMax = 0x3, | |
}; | |
/* 160 */ | |
enum _POWER_INFORMATION_LEVEL_INTERNAL_TTMTCAPI : __int32 | |
{ | |
PowerInformationInternalTtmFirst = 0x1000, | |
PowerInternalTtmOpenTerminal = 0x1000, | |
PowerInternalTtmCreateTerminal = 0x1001, | |
PowerInternalTtmEvacuateDevices = 0x1002, | |
PowerInternalTtmCreateTerminalEventQueue = 0x1003, | |
PowerInternalTtmGetTerminalEvent = 0x1004, | |
PowerInternalTtmSetDefaultDeviceAssignment = 0x1005, | |
PowerInternalTtmAssignDevice = 0x1006, | |
PowerInternalTtmSetDisplayState = 0x1007, | |
PowerInternalTtmSetDisplayTimeouts = 0x1008, | |
PowerInternalTtmSetDisplayPowerRequest = 0x1009, | |
PowerInternalTtmSetInputWakeCapability = 0x100A, | |
PowerInformationInternalTtmLast = 0x100A, | |
}; | |
/* 161 */ | |
enum _TYPE_OF_MEMORY : __int32 | |
{ | |
LoaderExceptionBlock = 0x0, | |
LoaderSystemBlock = 0x1, | |
LoaderFree = 0x2, | |
LoaderBad = 0x3, | |
LoaderLoadedProgram = 0x4, | |
LoaderFirmwareTemporary = 0x5, | |
LoaderFirmwarePermanent = 0x6, | |
LoaderOsloaderHeap = 0x7, | |
LoaderOsloaderStack = 0x8, | |
LoaderSystemCode = 0x9, | |
LoaderHalCode = 0xA, | |
LoaderBootDriver = 0xB, | |
LoaderConsoleInDriver = 0xC, | |
LoaderConsoleOutDriver = 0xD, | |
LoaderStartupDpcStack = 0xE, | |
LoaderStartupKernelStack = 0xF, | |
LoaderStartupPanicStack = 0x10, | |
LoaderStartupPcrPage = 0x11, | |
LoaderStartupPdrPage = 0x12, | |
LoaderRegistryData = 0x13, | |
LoaderMemoryData = 0x14, | |
LoaderNlsData = 0x15, | |
LoaderSpecialMemory = 0x16, | |
LoaderBBTMemory = 0x17, | |
LoaderZero = 0x18, | |
LoaderXIPRom = 0x19, | |
LoaderHALCachedMemory = 0x1A, | |
LoaderLargePageFiller = 0x1B, | |
LoaderErrorLogMemory = 0x1C, | |
LoaderVsmMemory = 0x1D, | |
LoaderFirmwareCode = 0x1E, | |
LoaderFirmwareData = 0x1F, | |
LoaderFirmwareReserved = 0x20, | |
LoaderEnclaveMemory = 0x21, | |
LoaderFirmwareKsr = 0x22, | |
LoaderEnclaveKsr = 0x23, | |
LoaderSkMemory = 0x24, | |
LoaderSkFirmwareReserved = 0x25, | |
LoaderIoSpaceMemoryZeroed = 0x26, | |
LoaderIoSpaceMemoryFree = 0x27, | |
LoaderIoSpaceMemoryKsr = 0x28, | |
LoaderMaximum = 0x29, | |
}; | |
/* 162 */ | |
enum _VRF_RULE_CLASS_ID : __int32 | |
{ | |
VrfSpecialPoolRuleClass = 0x0, | |
VrfForceIrqlRuleClass = 0x1, | |
VrfAllocationFailuresRuleClass = 0x2, | |
VrfTrackingPoolAllocationsRuleClass = 0x3, | |
VrfIORuleClass = 0x4, | |
VrfDeadlockPreventionRuleClass = 0x5, | |
VrfEnhancedIORuleClass = 0x6, | |
VrfDMARuleClass = 0x7, | |
VrfSecurityRuleClass = 0x8, | |
VrfForcePendingIORequestRuleClass = 0x9, | |
VrfIRPTrackingRuleClass = 0xA, | |
VrfMiscellaneousRuleClass = 0xB, | |
VrfMoreDebuggingRuleClass = 0xC, | |
VrfMDLInvariantStackRuleClass = 0xD, | |
VrfMDLInvariantDriverRuleClass = 0xE, | |
VrfPowerDelayFuzzingRuleClass = 0xF, | |
VrfPortMiniportRuleClass = 0x10, | |
VrfStandardDDIRuleClass = 0x11, | |
VrfAutoFailRuleClass = 0x12, | |
VrfAdditionalDDIRuleClass = 0x13, | |
VrfRuleClassBase = 0x14, | |
VrfNdisWifiRuleClass = 0x15, | |
VrfDriverLoggingRuleClass = 0x16, | |
VrfSyncDelayFuzzingRuleClass = 0x17, | |
VrfVMSwitchingRuleClass = 0x18, | |
VrfCodeIntegrityRuleClass = 0x19, | |
VrfBelow4GBAllocationRuleClass = 0x1A, | |
VrfProcessorBranchTraceRuleClass = 0x1B, | |
VrfAdvancedMMRuleClass = 0x1C, | |
VrfExtendingXDVTimeLimit = 0x1D, | |
VrfSystemBIOSRuleClass = 0x1E, | |
VrfHardwareRuleClass = 0x1F, | |
VrfStateSepRuleClass = 0x20, | |
VrfWDFRuleClass = 0x21, | |
VrfMoreIrqlRuleClass = 0x22, | |
VrfXDVPlatformMode = 0x23, | |
VrfStandalonePlatformMode = 0x24, | |
VrfPlatformModeTest = 0x25, | |
VrfInfoDisclosureIRPRule = 0x26, | |
VrfLwSpecialPool = 0x27, | |
VrfAVXCorruption = 0x28, | |
VrfAccessModeMismatch = 0x29, | |
ReservedForDVRF42 = 0x2A, | |
ReservedForDVRF43 = 0x2B, | |
ReservedForDVRF44 = 0x2C, | |
ReservedForDVRF45 = 0x2D, | |
ReservedForDVRF46 = 0x2E, | |
ReservedForDVRF47 = 0x2F, | |
ReservedForDVRF48 = 0x30, | |
ReservedForDVRF49 = 0x31, | |
ReservedForDVRF50 = 0x32, | |
ReservedForDVRF51 = 0x33, | |
ReservedForDVRF52 = 0x34, | |
ReservedForDVRF53 = 0x35, | |
ReservedForDVRF54 = 0x36, | |
ReservedForDVRF55 = 0x37, | |
ReservedForDVRF56 = 0x38, | |
ReservedForDVRF57 = 0x39, | |
ReservedForDVRF58 = 0x3A, | |
ReservedForDVRF59 = 0x3B, | |
ReservedForDVRF60 = 0x3C, | |
ReservedForDVRF61 = 0x3D, | |
ReservedForDVRF62 = 0x3E, | |
ReservedForDVRF63 = 0x3F, | |
VrfRuleClassSizeMax = 0x40, | |
}; | |
/* 163 */ | |
enum _KE_WAKE_SOURCE_TYPE : __int32 | |
{ | |
KeWakeSourceTypeSpuriousWake = 0x0, | |
KeWakeSourceTypeSpuriousClock = 0x1, | |
KeWakeSourceTypeSpuriousInterrupt = 0x2, | |
KeWakeSourceTypeQueryFailure = 0x3, | |
KeWakeSourceTypeAccountingFailure = 0x4, | |
KeWakeSourceTypeStaticSourceMax = 0x4, | |
KeWakeSourceTypeInterrupt = 0x5, | |
KeWakeSourceTypeIRTimer = 0x6, | |
KeWakeSourceTypeMax = 0x7, | |
}; | |
/* 164 */ | |
enum _MI_WORKING_SET_TYPE : __int32 | |
{ | |
MiWorkingSetTypeSystemCache = 0x0, | |
MiWorkingSetTypeSystemViews = 0x1, | |
MiWorkingSetTypePartitionMaximum = 0x1, | |
MiWorkingSetTypePagedPool = 0x2, | |
MiWorkingSetTypePagableMaximum = 0x2, | |
MiWorkingSetTypeSystemPtes = 0x3, | |
MiWorkingSetTypeKernelStacks = 0x4, | |
MiWorkingSetTypeNonPagedPool = 0x5, | |
MiWorkingSetTypeMaximum = 0x6, | |
}; | |
/* 165 */ | |
enum _KTIMER2_COLLECTION_INDEX : __int32 | |
{ | |
KTimer2CollectionNoWake = 0x0, | |
KTimer2CollectionHr = 0x1, | |
KTimer2CollectionPseudoHr = 0x2, | |
KTimer2CollectionFinite = 0x3, | |
KTimer2CollectionIr = 0x4, | |
KTimer2CollectionNotInserted = 0x10, | |
KTimer2CollectionInvalid = 0x15, | |
KTimer2CollectionOptional = 0x20, | |
KTimer2CollectionMin = 0x0, | |
KTimer2CollectionMax = 0x5, | |
KTimer2CollectionNode1 = 0x2, | |
}; | |
/* 166 */ | |
enum _SKSERVICE : __int32 | |
{ | |
SECURESERVICE_NONE = 0x0, | |
SECURESERVICE_PHASE4_INIT = 0x1, | |
SECURESERVICE_START_PROCESSOR = 0x2, | |
SECURESERVICE_FINISH_START_PROCESSOR = 0x3, | |
SECURESERVICE_REGISTER_SYSTEM_DLLS = 0x4, | |
SECURESERVICE_REGISTER_SYSTEM_PROCESS = 0x5, | |
SECURESERVICE_CREATE_PROCESS = 0x6, | |
SECURESERVICE_INITIALIZE_PROCESS = 0x7, | |
SECURESERVICE_CREATE_THREAD = 0x8, | |
SECURESERVICE_REQUEST_THREAD_EXIT = 0x9, | |
SECURESERVICE_TERMINATE_THREAD = 0xA, | |
SECURESERVICE_RUNDOWN_PROCESS = 0xB, | |
SECURESERVICE_DEBUG_PROCESS = 0xC, | |
SECURESERVICE_GET_TEB_ADDRESS = 0xD, | |
SECURESERVICE_GET_CONTEXT = 0xE, | |
SECURESERVICE_SET_CONTEXT = 0xF, | |
SECURESERVICE_SEND_ATTACH_NOTIFICATIONS = 0x10, | |
SECURESERVICE_GET_ETW_DEBUG_ID = 0x11, | |
SECURESERVICE_GET_ON_DEMAND_DEBUG_CHALLENGE = 0x12, | |
SECURESERVICE_ENABLE_ON_DEMAND_DEBUG_WITH_RESPONSE = 0x13, | |
SECURESERVICE_RETRIEVE_MAILBOX = 0x14, | |
SECURESERVICE_IS_TRUSTLET_RUNNING = 0x15, | |
SECURESERVICE_CREATE_SECURE_ALLOCATION = 0x16, | |
SECURESERVICE_FILL_SECURE_ALLOCATION = 0x17, | |
SECURESERVICE_MAKE_CODE_CATALOG = 0x18, | |
SECURESERVICE_CREATE_SECURE_IMAGE = 0x19, | |
SECURESERVICE_FINALIZE_SECURE_IMAGE_HASH = 0x1A, | |
SECURESERVICE_FINISH_SECURE_IMAGE_VALIDATION = 0x1B, | |
SECURESERVICE_PREPARE_IMAGE_RELOCATIONS = 0x1C, | |
SECURESERVICE_RELOCATE_IMAGE = 0x1D, | |
SECURESERVICE_CLOSE_SECURE_HANDLE = 0x1E, | |
SECURESERVICE_VALIDATE_DYNAMIC_CODE = 0x1F, | |
SECURESERVICE_TRANSFER_IMAGE_VERSION_RESOURCE = 0x20, | |
SECURESERVICE_SET_CODE_INTEGRITY_POLICY = 0x21, | |
SECURESERVICE_EXCHANGE_ENTROPY = 0x22, | |
SECURESERVICE_ALLOCATE_HIBERNATE_RESOURCES = 0x23, | |
SECURESERVICE_FREE_HIBERNATE_RESOURCES = 0x24, | |
SECURESERVICE_CONFIGURE_DYNAMIC_MEMORY = 0x25, | |
SECURESERVICE_DEBUG_PROTECT_MEMORY = 0x26, | |
SECURESERVICE_DEBUG_READ_WRITE_MEMORY = 0x27, | |
SECURESERVICE_QUERY_VIRTUAL_MEMORY = 0x28, | |
SECURESERVICE_CAPTURE_IMAGE_IAT = 0x29, | |
SECURESERVICE_FREE_IMAGE_IAT = 0x2A, | |
SECURESERVICE_APPLY_FIXUPS = 0x2B, | |
SECURESERVICE_MARK_IMAGE_PROTECTED = 0x2C, | |
SECURESERVICE_CREATE_ENCLAVE = 0x2D, | |
SECURESERVICE_LOAD_ENCLAVE_DATA = 0x2E, | |
SECURESERVICE_LOAD_ENCLAVE_MODULE = 0x2F, | |
SECURESERVICE_INITIALIZE_ENCLAVE = 0x30, | |
SECURESERVICE_TERMINATE_ENCLAVE = 0x31, | |
SECURESERVICE_DELETE_ENCLAVE = 0x32, | |
SECURESERVICE_CONNECT_SW_INTERRUPT = 0x33, | |
SECURESERVICE_RELAX_HYPERGUARD_QUOTA = 0x34, | |
SECURESERVICE_LIVEDUMP_QUERY_SECONDARYDATA_SIZE = 0x35, | |
SECURESERVICE_LIVEDUMP_START = 0x36, | |
SECURESERVICE_LIVEDUMP_ADD_BUFFER = 0x37, | |
SECURESERVICE_LIVEDUMP_SETUP_BUFFER = 0x38, | |
SECURESERVICE_LIVEDUMP_FINALIZE = 0x39, | |
SECURESERVICE_LIVEDUMP_ABORT = 0x3A, | |
SECURESERVICE_LIVEDUMP_CAPTURE_PROCESS = 0x3B, | |
SECURESERVICE_NOTIFY_POWER_STATE = 0x3C, | |
SECURESERVICE_QUERY_PROFILE_INFORMATION = 0x3D, | |
SECURESERVICE_UPDATE_FREEZE_BIAS = 0x3E, | |
SECURESERVICE_CREATE_SECURE_SECTION = 0x3F, | |
SECURESERVICE_DELETE_SECURE_SECTION = 0x40, | |
SECURESERVICE_QUERY_SECURE_DEVICE = 0x41, | |
SECURESERVICE_UNPROTECT_SECURE_DEVICE = 0x42, | |
SECURESERVICE_DETERMINE_HOT_PATCH_TYPE = 0x43, | |
SECURESERVICE_OBTAIN_PATCH_UNDO_TABLE_SIZE = 0x44, | |
SECURESERVICE_OBTAIN_PATCH_UNDO_TABLE = 0x45, | |
SECURESERVICE_APPLY_HOT_PATCH = 0x46, | |
SECURESERVICE_REVERT_HOT_PATCH = 0x47, | |
SECURESERVICE_PREPARE_DRIVER_FOR_PATCH = 0x48, | |
SECURESERVICE_PROVISION_DUMP_KEYS = 0x49, | |
SECURESERVICE_CAPTURE_PGO_DATA = 0x4A, | |
SECURESERVICE_START_PROFILE = 0x4B, | |
SECURESERVICE_STOP_PROFILE = 0x4C, | |
SECURESERVICE_SET_TRACEPOINT = 0x4D, | |
SECURESERVICE_NO_TRACING_FIRST = 0xBF, | |
SECURESERVICE_GET_PEB_ADDRESS = 0xC0, | |
SECURESERVICE_VALIDATE_SECURE_IMAGE_PAGES = 0xC1, | |
SECURESERVICE_PRE_INIT_FIRST = 0xCF, | |
SECURESERVICE_PHASE3_INIT = 0xD0, | |
SECURESERVICE_PERIODIC = 0xD1, | |
SECURESERVICE_WORK_QUEUE = 0xD2, | |
SECURESERVICE_RESERVE_PROTECTED_PAGES = 0xD3, | |
SECURESERVICE_APPLY_DYNAMIC_RELOCATIONS = 0xD4, | |
SECURESERVICE_ETW_ENABLE_CALLBACK = 0xD5, | |
SECURESERVICE_INITIALIZE_SECURE_POOL = 0xD6, | |
SECURESERVICE_INITIALIZE_KERNEL_CFG = 0xD7, | |
SECURESERVICE_LOAD_DRIVER = 0xD8, | |
SECURESERVICE_UNLOAD_DRIVER = 0xD9, | |
SECURESERVICE_ENABLE_CFG_TARGET = 0xDA, | |
SECURESERVICE_COMPLETE_SLAB_CONFIGURATION = 0xDB, | |
SECURESERVICE_INITIALIZE_RETPOLINE = 0xDC, | |
SECURESERVICE_PERFORM_RETPOLINE_RELOCATIONS = 0xDD, | |
SECURESERVICE_UPDATE_IMPORT_RELOCATIONS = 0xDE, | |
SECURESERVICE_DISPATCH_LEVEL_FIRST = 0xEF, | |
SECURESERVICE_FLUSH_ADDRESS_SPACE = 0xF0, | |
SECURESERVICE_FAST_FLUSH_RANGE_LIST = 0xF1, | |
SECURESERVICE_SLOW_FLUSH_RANGE_LIST = 0xF2, | |
SECURESERVICE_REMOVE_PROTECTED_PAGE = 0xF3, | |
SECURESERVICE_COPY_PROTECTED_PAGE = 0xF4, | |
SECURESERVICE_REGISTER_PROTECTED_PAGE = 0xF5, | |
SECURESERVICE_DISAMBIGUATE_PROTECTED_PAGE = 0xF6, | |
SECURESERVICE_MAKE_PROTECTED_PAGE_WRITABLE = 0xF7, | |
SECURESERVICE_MAKE_PROTECTED_PAGE_EXECUTABLE = 0xF8, | |
SECURESERVICE_QUERY_STRONG_CODE_FEATURES = 0xF9, | |
SECURESERVICE_INVOKE_EFI_RUNTIME_SERVICE = 0xFA, | |
SECURESERVICE_LIVEDUMP_COLLECT_LIVE_DUMP = 0xFB, | |
SECURESERVICE_REGISTER_LOG_PAGES = 0xFC, | |
SECURESERVICE_RECLAIM_PARTITION_PAGES = 0xFD, | |
SECURESERVICE_BIND_NT_KERNEL_IMPORTS = 0xFE, | |
SECURESERVICE_SET_PLACEHOLDER_PAGES = 0xFF, | |
SECURESERVICE_QUERY_SPECULATION_CONTROL_FEATURES = 0x100, | |
SECURESERVICE_PROTECT_KERNEL_DATA_PAGE = 0x101, | |
SECURESERVICE_VERIFY_PAGE = 0x102, | |
SECURESERVICE_PREPARE_FOR_HIBERNATION = 0x103, | |
SECURESERVICE_PREPARE_FOR_CRASHDUMP = 0x104, | |
SECURESERVICE_REPORT_BUGCHECK_PROGRESS = 0x105, | |
SECURESERVICE_SHUTDOWN = 0x106, | |
SECURESERVICE_QUERY_SECURE_PCI_INFO = 0x107, | |
SECURESERVICE_ACCESS_PCI_DEVICE = 0x108, | |
SECURESERVICE_REINITIALIZE_DEBUGGER_TRANSPORT = 0x109, | |
SECURESERVICE_KSR_CALL = 0x10A, | |
SECURESERVICE_SVC_CALL = 0x10B, | |
SECURESERVICE_BUGCHECK = 0x700, | |
SECURESERVICE_LIMITED_MODE_SERVICE_START = 0x800, | |
}; | |
/* 167 */ | |
enum _PS_PROTECTED_TYPE : __int32 | |
{ | |
PsProtectedTypeNone = 0x0, | |
PsProtectedTypeProtectedLight = 0x1, | |
PsProtectedTypeProtected = 0x2, | |
PsProtectedTypeMax = 0x3, | |
}; | |
/* 168 */ | |
enum _BUS_DATA_TYPE : __int32 | |
{ | |
ConfigurationSpaceUndefined = 0xFFFFFFFF, | |
Cmos = 0x0, | |
EisaConfiguration = 0x1, | |
Pos = 0x2, | |
CbusConfiguration = 0x3, | |
PCIConfiguration = 0x4, | |
VMEConfiguration = 0x5, | |
NuBusConfiguration = 0x6, | |
PCMCIAConfiguration = 0x7, | |
MPIConfiguration = 0x8, | |
MPSAConfiguration = 0x9, | |
PNPISAConfiguration = 0xA, | |
SgiInternalConfiguration = 0xB, | |
MaximumBusDataType = 0xC, | |
}; | |
/* 169 */ | |
enum KD_CALLBACK_ACTION : __int32 | |
{ | |
KdConfigureDeviceAndContinue = 0x0, | |
KdSkipDeviceAndContinue = 0x1, | |
KdConfigureDeviceAndStop = 0x2, | |
KdSkipDeviceAndStop = 0x3, | |
}; | |
/* 170 */ | |
enum _HAL_CLOCK_TIMER_MODE : __int32 | |
{ | |
HalClockTimerModePeriodic = 0x0, | |
HalClockTimerModeOneShot = 0x1, | |
HalClockTimerModeMax = 0x2, | |
}; | |
/* 171 */ | |
enum _HAL_PROCESSOR_STAT_TYPE : __int32 | |
{ | |
HalProcessorStatResidency = 0x0, | |
HalProcessorStatCount = 0x1, | |
HalProcessorStatMax = 0x2, | |
}; | |
/* 172 */ | |
enum _MI_CFG_BITMAP_TYPE : __int32 | |
{ | |
CfgBitMapNative = 0x0, | |
CfgBitMapWow64 = 0x1, | |
CfgBitMapMax = 0x2, | |
}; | |
/* 173 */ | |
enum _PROCESS_VA_TYPE : __int32 | |
{ | |
ProcessVAImage = 0x0, | |
ProcessVASection = 0x1, | |
ProcessVAPrivate = 0x2, | |
ProcessVAMax = 0x3, | |
}; | |
/* 174 */ | |
enum _PS_RESOURCE_TYPE : __int32 | |
{ | |
PsResourceNonPagedPool = 0x0, | |
PsResourcePagedPool = 0x1, | |
PsResourcePageFile = 0x2, | |
PsResourceWorkingSet = 0x3, | |
PsResourceMax = 0x4, | |
}; | |
/* 175 */ | |
enum _HEAP_SEGMGR_LARGE_PAGE_POLICY : __int32 | |
{ | |
HeapSegMgrNoLargePages = 0x0, | |
HeapSegMgrEnableLargePages = 0x1, | |
HeapSegMgrNormalPolicy = 0x1, | |
HeapSegMgrForceSmall = 0x2, | |
HeapSegMgrForceLarge = 0x3, | |
HeapSegMgrForceRandom = 0x4, | |
HeapSegMgrLargePagePolicyMax = 0x5, | |
}; | |
/* 176 */ | |
enum _RTL_FEATURE_CONFIGURATION_PRIORITY : __int32 | |
{ | |
FeatureConfigurationPriorityImageDefault = 0x0, | |
FeatureConfigurationPriorityService = 0x4, | |
FeatureConfigurationPriorityUser = 0x8, | |
FeatureConfigurationPriorityUserPolicy = 0xA, | |
FeatureConfigurationPriorityTest = 0xC, | |
FeatureConfigurationPriorityImageOverride = 0xF, | |
FeatureConfigurationPriorityMax = 0xF, | |
}; | |
/* 177 */ | |
enum _PERFINFO_KERNELMEMORY_USAGE_TYPE : __int32 | |
{ | |
PerfInfoMemUsagePfnMetadata = 0x0, | |
PerfInfoMemUsageMax = 0x1, | |
}; | |
/* 178 */ | |
enum FEATURE_ENABLED_STATE : __int32 | |
{ | |
FEATURE_ENABLED_STATE_DEFAULT = 0x0, | |
FEATURE_ENABLED_STATE_DISABLED = 0x1, | |
FEATURE_ENABLED_STATE_ENABLED = 0x2, | |
FEATURE_ENABLED_STATE_HAS_NOTIFICATION = 0x80, | |
FEATURE_ENABLED_STATE_HAS_VARIANT_CONFIGURATION = 0x40, | |
}; | |
/* 179 */ | |
enum IRPLOCK : __int32 | |
{ | |
IRPLOCK_CANCELABLE = 0x0, | |
IRPLOCK_CANCEL_STARTED = 0x1, | |
IRPLOCK_CANCEL_COMPLETE = 0x2, | |
IRPLOCK_COMPLETED = 0x3, | |
}; | |
/* 180 */ | |
enum _PNP_DEVICE_DELETE_TYPE : __int32 | |
{ | |
QueryRemoveDevice = 0x0, | |
CancelRemoveDevice = 0x1, | |
RemoveDevice = 0x2, | |
SurpriseRemoveDevice = 0x3, | |
EjectDevice = 0x4, | |
RemoveFailedDevice = 0x5, | |
RemoveUnstartedFailedDevice = 0x6, | |
MaxDeviceDeleteType = 0x7, | |
}; | |
/* 181 */ | |
enum _MI_MEMORY_HIGHLOW : __int32 | |
{ | |
MiMemoryHigh = 0x0, | |
MiMemoryLow = 0x1, | |
MiMemoryHighLow = 0x2, | |
}; | |
/* 182 */ | |
enum _PS_PROTECTED_SIGNER : __int32 | |
{ | |
PsProtectedSignerNone = 0x0, | |
PsProtectedSignerAuthenticode = 0x1, | |
PsProtectedSignerCodeGen = 0x2, | |
PsProtectedSignerAntimalware = 0x3, | |
PsProtectedSignerLsa = 0x4, | |
PsProtectedSignerWindows = 0x5, | |
PsProtectedSignerWinTcb = 0x6, | |
PsProtectedSignerWinSystem = 0x7, | |
PsProtectedSignerApp = 0x8, | |
PsProtectedSignerMax = 0x9, | |
}; | |
/* 183 */ | |
enum POWER_POLICY_DEVICE_TYPE : __int32 | |
{ | |
PolicyDeviceSystemButton = 0x0, | |
PolicyDeviceThermalZone = 0x1, | |
PolicyDeviceBattery = 0x2, | |
PolicyDeviceMemory = 0x3, | |
PolicyInitiatePowerActionAPI = 0x4, | |
PolicySetPowerStateAPI = 0x5, | |
PolicyImmediateDozeS4 = 0x6, | |
PolicySystemIdle = 0x7, | |
PolicyDeviceWakeAlarm = 0x8, | |
PolicyDeviceFan = 0x9, | |
PolicyCsBatterySaver = 0xA, | |
PolicyImmediateDozeS4Predicted = 0xB, | |
PolicyImmediateDozeS4PredictedNoWake = 0xC, | |
PolicyImmediateDozeS4AdaptiveBudget = 0xD, | |
PolicyImmediateDozeS4AdaptiveReserveNoWake = 0xE, | |
PolicySystemInitiatedShutdown = 0xF, | |
PolicyDeviceMax = 0x10, | |
}; | |
/* 184 */ | |
enum _PCI_BUSMASTER_RID_TYPE : __int32 | |
{ | |
BusmasterRidFromDeviceRid = 0x0, | |
BusmasterRidFromBridgeRid = 0x1, | |
BusmasterRidFromMultipleBridges = 0x2, | |
}; | |
/* 185 */ | |
enum _WORKING_SET_TYPE : __int32 | |
{ | |
WorkingSetTypeUser = 0x0, | |
WorkingSetTypeSession = 0x1, | |
WorkingSetTypeSystemTypes = 0x2, | |
WorkingSetTypeSystemCache = 0x2, | |
WorkingSetTypePagedPool = 0x3, | |
WorkingSetTypeSystemViews = 0x4, | |
WorkingSetTypePagableMaximum = 0x4, | |
WorkingSetTypeSystemPtes = 0x5, | |
WorkingSetTypeKernelStacks = 0x6, | |
WorkingSetTypeNonPagedPool = 0x7, | |
WorkingSetTypeMaximum = 0x8, | |
}; | |
/* 186 */ | |
enum _DEVICE_RELATION_LEVEL : __int32 | |
{ | |
RELATION_LEVEL_REMOVE_EJECT = 0x0, | |
RELATION_LEVEL_DEPENDENT = 0x1, | |
RELATION_LEVEL_DIRECT_DESCENDANT = 0x2, | |
}; | |
/* 187 */ | |
enum _ETW_STRING_TOKEN_TYPE : __int32 | |
{ | |
ETW_STRING_TOKEN_EXE = 0x0, | |
ETW_STRING_TOKEN_PACKAGE_ID = 0x1, | |
ETW_STRING_TOKEN_PKG_APP_ID = 0x2, | |
ETW_STRING_TOKEN_CONTAINER = 0x3, | |
ETW_STRING_TOKEN_MAX_COUNT = 0x4, | |
}; | |
/* 188 */ | |
enum _POP_FX_WORK_POOL_QUEUE : __int32 | |
{ | |
PopFxWorkPoolQueueEmergency = 0x0, | |
PopFxWorkPoolQueuePlugin = 0x1, | |
PopFxWorkPoolQueueMax = 0x2, | |
}; | |
/* 189 */ | |
enum _POP_SYSTEM_IDLE_EVENT_TYPE : __int32 | |
{ | |
PopSystemIdleEventTypeMonitorOffUserInput = 0x0, | |
PopSystemIdleEventTypeMonitorOnUserInput = 0x1, | |
PopSystemIdleEventTypeUserPresence = 0x2, | |
PopSystemIdleEventTypeResumeFromSxSystemPowerState = 0x3, | |
PopSystemIdleEventTypeMax = 0x4, | |
PopSystemIdleEventTypeInvalid = 0x4, | |
}; | |
/* 190 */ | |
enum _MI_DYNAMICBASE_BITMAP : __int32 | |
{ | |
DynamicBaseBitMapNative = 0x0, | |
DynamicBaseBitMap64Low = 0x1, | |
DynamicBaseBitMap64LowWow = 0x2, | |
DynamicBaseBitMap32WowFirst = 0x3, | |
DynamicBaseBitMap32WowLast = 0x3, | |
DynamicBaseBitMapInvalid = 0x4, | |
DynamicBaseBitMapMax = 0x4, | |
}; | |
/* 191 */ | |
enum PS_CREATE_STATE : __int32 | |
{ | |
PsCreateInitialState = 0x0, | |
PsCreateFailOnFileOpen = 0x1, | |
PsCreateFailOnSectionCreate = 0x2, | |
PsCreateFailExeFormat = 0x3, | |
PsCreateFailMachineMismatch = 0x4, | |
PsCreateFailExeName = 0x5, | |
PsCreateSuccess = 0x6, | |
PsCreateMaximumStates = 0x7, | |
}; | |
/* 192 */ | |
enum _KTHREAD_PPM_POLICY : __int32 | |
{ | |
ThreadPpmDefault = 0x0, | |
ThreadPpmThrottle = 0x1, | |
ThreadPpmSemiThrottle = 0x2, | |
ThreadPpmNoThrottle = 0x3, | |
MaxThreadPpmPolicy = 0x4, | |
}; | |
/* 193 */ | |
enum _KPROCESS_PPM_POLICY : __int32 | |
{ | |
ProcessPpmDefault = 0x0, | |
ProcessPpmThrottle = 0x1, | |
ProcessPpmSemiThrottle = 0x2, | |
ProcessPpmNoThrottle = 0x3, | |
ProcessPpmWindowMinimized = 0x4, | |
ProcessPpmWindowOccluded = 0x5, | |
ProcessPpmWindowVisible = 0x6, | |
ProcessPpmWindowInFocus = 0x7, | |
MaxProcessPpmPolicy = 0x8, | |
}; | |
/* 194 */ | |
enum _MI_SHARED_USER_PAGE_TYPES : __int32 | |
{ | |
MiSharedUserPageKernel = 0x0, | |
MiSharedUserPageHypervisor = 0x1, | |
MiSharedUserPageMaximum = 0x2, | |
}; | |
/* 195 */ | |
enum _TlgBlob_t : __int32 | |
{ | |
_TlgBlobNone = 0x0, | |
_TlgBlobEnd = 0x1, | |
_TlgBlobProvider = 0x2, | |
_TlgBlobEvent3 = 0x3, | |
_TlgBlobProvider3 = 0x4, | |
_TlgBlobEvent2 = 0x5, | |
_TlgBlobEvent4 = 0x6, | |
_TlgBlobMax = 0x7, | |
}; | |
/* 196 */ | |
enum _KTHREAD_STATE : __int32 | |
{ | |
Initialized = 0x0, | |
Ready = 0x1, | |
Running = 0x2, | |
Standby = 0x3, | |
Terminated = 0x4, | |
Waiting = 0x5, | |
Transition = 0x6, | |
DeferredReady = 0x7, | |
GateWaitObsolete = 0x8, | |
WaitingForProcessInSwap = 0x9, | |
}; | |
/* 197 */ | |
enum _CM_DIRTY_VECTOR_OPERATION : __int32 | |
{ | |
DirtyVectorModified = 0x0, | |
DirtyDataCaptureStart = 0x1, | |
DirtyDataCaptureEnd = 0x2, | |
}; | |
/* 198 */ | |
enum _SYSTEM_PROCESS_CLASSIFICATION : __int32 | |
{ | |
SystemProcessClassificationNormal = 0x0, | |
SystemProcessClassificationSystem = 0x1, | |
SystemProcessClassificationSecureSystem = 0x2, | |
SystemProcessClassificationMemCompression = 0x3, | |
SystemProcessClassificationRegistry = 0x4, | |
SystemProcessClassificationMaximum = 0x5, | |
}; | |
/* 199 */ | |
enum _PNP_DEVICE_ACTION_REQUEST : __int32 | |
{ | |
AssignResources = 0x0, | |
ClearDeviceProblem = 0x1, | |
ClearProblem = 0x2, | |
ClearEjectProblem = 0x3, | |
HaltDevice = 0x4, | |
QueryPowerRelations = 0x5, | |
Rebalance = 0x6, | |
ReenumerateBootDevices = 0x7, | |
ReenumerateDeviceOnly = 0x8, | |
ReenumerateDeviceTree = 0x9, | |
ReenumerateRootDevices = 0xA, | |
RequeryDeviceState = 0xB, | |
ResetDevice = 0xC, | |
ResourceRequirementsChanged = 0xD, | |
RestartEnumeration = 0xE, | |
SetDeviceProblem = 0xF, | |
StartDevice = 0x10, | |
StartSystemDevicesPass0 = 0x11, | |
StartSystemDevicesPass1 = 0x12, | |
NotifyTransportRelationsChange = 0x13, | |
NotifyEjectionRelationsChange = 0x14, | |
ConfigureDevice = 0x15, | |
ConfigureDeviceClass = 0x16, | |
ConfigureDeviceExtensions = 0x17, | |
ConfigureDeviceReset = 0x18, | |
ClearDmaGuardProblem = 0x19, | |
PnpDeviceActionRequestMax = 0x1A, | |
}; | |
/* 200 */ | |
enum _PO_HIBER_FORCE_DISABLE_REASON : __int32 | |
{ | |
PoHiberForceDisableReasonPolicy = 0x0, | |
PoHiberForceDisableReasonGuardedHost = 0x1, | |
PoHiberForceDisableReasonMax = 0x2, | |
}; | |
/* 201 */ | |
enum _WOW64_SHARED_INFORMATION : __int32 | |
{ | |
SharedNtdll32LdrInitializeThunk = 0x0, | |
SharedNtdll32KiUserExceptionDispatcher = 0x1, | |
SharedNtdll32KiUserApcDispatcher = 0x2, | |
SharedNtdll32KiUserCallbackDispatcher = 0x3, | |
SharedNtdll32RtlUserThreadStart = 0x4, | |
SharedNtdll32pQueryProcessDebugInformationRemote = 0x5, | |
SharedNtdll32BaseAddress = 0x6, | |
SharedNtdll32LdrSystemDllInitBlock = 0x7, | |
SharedNtdll32RtlpFreezeTimeBias = 0x8, | |
Wow64SharedPageEntriesCount = 0x9, | |
}; | |
/* 202 */ | |
enum _PROCESSOR_CACHE_TYPE : __int32 | |
{ | |
CacheUnified = 0x0, | |
CacheInstruction = 0x1, | |
CacheData = 0x2, | |
CacheTrace = 0x3, | |
}; | |
/* 203 */ | |
enum _MI_KSTACK_TYPE : __int32 | |
{ | |
MiRegularKstack = 0x0, | |
MiShortLivedKstack = 0x1, | |
MiMaximumKstack = 0x2, | |
}; | |
/* 204 */ | |
enum _ETW_GUID_TYPE : __int32 | |
{ | |
EtwTraceGuidType = 0x0, | |
EtwNotificationGuidType = 0x1, | |
EtwGroupGuidType = 0x2, | |
EtwGuidTypeMax = 0x3, | |
}; | |
/* 205 */ | |
enum _POP_DEEP_SLEEP_DISENGAGE_REASON : __int32 | |
{ | |
PopDeepSleepDisengageReasonInactive = 0x0, | |
PopDeepSleepDisengageReasonNonAoAc = 0x1, | |
PopDeepSleepDisengageReasonPendingIrps = 0x2, | |
PopDeepSleepDisengageReasonPowerSettings = 0x3, | |
PopDeepSleepDisengageReasonDozeS4WorkerQueued = 0x4, | |
PopDeepSleepDisengageReasonSystemPowerTransition = 0x5, | |
PopDeepSleepDisengageReasonDeviceBlockingDrips = 0x6, | |
PopDeepSleepDisengageReasonAcpi = 0x7, | |
PopDeepSleepDisengageReasonDirectedDripsTransition = 0x8, | |
PopDeepSleepDisengageReasonPepPreVeto = 0x9, | |
PopDeepSleepDisengageReasonMax = 0xA, | |
}; | |
/* 206 */ | |
enum _KI_CALLBACK : __int32 | |
{ | |
KiCallbackNmi = 0x0, | |
KiCallbackBound = 0x1, | |
KiCallbackSx = 0x2, | |
KiCallbackCount = 0x3, | |
KiFirstCallback = 0x0, | |
}; | |
/* 207 */ | |
enum INTERRUPT_CONNECTION_TYPE : __int32 | |
{ | |
InterruptTypeControllerInput = 0x0, | |
InterruptTypeXapicMessage = 0x1, | |
InterruptTypeHypertransport = 0x2, | |
InterruptTypeMessageRequest = 0x3, | |
}; | |
/* 208 */ | |
enum HAL_APIC_DESTINATION_MODE : __int32 | |
{ | |
ApicDestinationModePhysical = 0x1, | |
ApicDestinationModeLogicalFlat = 0x2, | |
ApicDestinationModeLogicalClustered = 0x3, | |
ApicDestinationModeUnknown = 0x4, | |
}; | |
/* 209 */ | |
enum _KWAIT_STATE : __int32 | |
{ | |
WaitInProgress = 0x0, | |
WaitCommitted = 0x1, | |
WaitAborted = 0x2, | |
WaitSuspendInProgress = 0x3, | |
WaitSuspended = 0x4, | |
WaitResumeInProgress = 0x5, | |
WaitResumeAborted = 0x6, | |
WaitFirstSuspendState = 0x3, | |
WaitLastSuspendState = 0x6, | |
MaximumWaitState = 0x7, | |
}; | |
/* 210 */ | |
enum _MI_SUBVAD_LISTS : __int32 | |
{ | |
MiSubVadPebTebAny = 0x0, | |
MiSubVadPebTebBelow4gb = 0x1, | |
MiSubVadMaximum = 0x2, | |
}; | |
/* 211 */ | |
enum _MI_ASSIGNED_REGION_TYPES : __int32 | |
{ | |
AssignedRegionNonPagedPool = 0x0, | |
AssignedRegionPagedPool = 0x1, | |
AssignedRegionSystemCache = 0x2, | |
AssignedRegionSystemPtes = 0x3, | |
AssignedRegionUltraZero = 0x4, | |
AssignedRegionPfnDatabase = 0x5, | |
AssignedRegionCfg = 0x6, | |
AssignedRegionHyperSpace = 0x7, | |
AssignedRegionKernelStacks = 0x8, | |
AssignedRegionPageTables = 0x9, | |
AssignedRegionSession = 0xA, | |
AssignedRegionSecureNonPagedPool = 0xB, | |
AssignedRegionSystemImages = 0xC, | |
AssignedRegionMaximum = 0xD, | |
}; | |
/* 212 */ | |
enum _POLICY_AUDIT_EVENT_TYPE : __int32 | |
{ | |
AuditCategorySystem = 0x0, | |
AuditCategoryLogon = 0x1, | |
AuditCategoryObjectAccess = 0x2, | |
AuditCategoryPrivilegeUse = 0x3, | |
AuditCategoryDetailedTracking = 0x4, | |
AuditCategoryPolicyChange = 0x5, | |
AuditCategoryAccountManagement = 0x6, | |
AuditCategoryDirectoryServiceAccess = 0x7, | |
AuditCategoryAccountLogon = 0x8, | |
}; | |
/* 213 */ | |
enum KD_NAMESPACE_ENUM : __int32 | |
{ | |
KdNameSpacePCI = 0x0, | |
KdNameSpaceACPI = 0x1, | |
KdNameSpaceAny = 0x2, | |
KdNameSpaceNone = 0x3, | |
KdNameSpaceMax = 0x4, | |
}; | |
/* 214 */ | |
enum _PO_CS_DEVICE_NOTIFICATION_TYPE : __int32 | |
{ | |
PoCsDeviceNotificationStorage = 0x0, | |
PoCsDeviceNotificationWiFi = 0x1, | |
PoCsDeviceNotificationMbn = 0x2, | |
PoCsDeviceNotificationAudio = 0x3, | |
PoCsDeviceNotificationEthernet = 0x4, | |
PoCsDeviceNotificationMaximum = 0x5, | |
}; | |
/* 215 */ | |
enum _MI_VAD_64K_TYPES : __int32 | |
{ | |
MiVad64KPrivate = 0x0, | |
MiVad64KShared = 0x1, | |
MiVad64KTypes = 0x2, | |
}; | |
/* 216 */ | |
enum _EXQUEUEINDEX : __int32 | |
{ | |
ExPoolUntrusted = 0x0, | |
IoPoolUntrusted = 0x1, | |
ExPoolMax = 0x8, | |
}; | |
/* 217 */ | |
enum _KPROCESS_STATE : __int32 | |
{ | |
ProcessInMemory = 0x0, | |
ProcessOutOfMemory = 0x1, | |
ProcessInTransition = 0x2, | |
ProcessOutTransition = 0x3, | |
ProcessInSwap = 0x4, | |
ProcessOutSwap = 0x5, | |
ProcessRetryOutSwap = 0x6, | |
ProcessAllSwapStates = 0x7, | |
}; | |
/* 218 */ | |
enum _KENLISTMENT_STATE : __int32 | |
{ | |
KEnlistmentUninitialized = 0x0, | |
KEnlistmentActive = 0x100, | |
KEnlistmentPreparing = 0x101, | |
KEnlistmentPrepared = 0x102, | |
KEnlistmentInDoubt = 0x103, | |
KEnlistmentCommitted = 0x104, | |
KEnlistmentCommittedNotify = 0x105, | |
KEnlistmentCommitRequested = 0x106, | |
KEnlistmentAborted = 0x107, | |
KEnlistmentDelegated = 0x108, | |
KEnlistmentDelegatedDisconnected = 0x109, | |
KEnlistmentPrePreparing = 0x10A, | |
KEnlistmentForgotten = 0x10B, | |
KEnlistmentRecovering = 0x10C, | |
KEnlistmentAborting = 0x10D, | |
KEnlistmentReadOnly = 0x10E, | |
KEnlistmentOutcomeUnavailable = 0x10F, | |
KEnlistmentOffline = 0x110, | |
KEnlistmentPrePrepared = 0x111, | |
KEnlistmentInitialized = 0x112, | |
}; | |
/* 219 */ | |
enum _ADD_DRIVER_STAGE : __int32 | |
{ | |
ClassConfigFilters = 0x0, | |
LowerDeviceFilters = 0x1, | |
LowerClassFilters = 0x2, | |
DeviceService = 0x3, | |
UpperDeviceFilters = 0x4, | |
UpperClassFilters = 0x5, | |
MaximumAddStage = 0x6, | |
}; | |
/* 220 */ | |
enum _INVPCID_TYPE : __int32 | |
{ | |
InvpcidIndividualAddress = 0x0, | |
InvpcidSingleContext = 0x1, | |
InvpcidAllContextAndGlobals = 0x2, | |
InvpcidAllContext = 0x3, | |
}; | |
/* 221 */ | |
enum TlgOut_t : __int32 | |
{ | |
TlgOutNULL = 0x0, | |
TlgOutNOPRINT = 0x1, | |
TlgOutSTRING = 0x2, | |
TlgOutBOOLEAN = 0x3, | |
TlgOutHEX = 0x4, | |
TlgOutPID = 0x5, | |
TlgOutTID = 0x6, | |
TlgOutPORT = 0x7, | |
TlgOutIPV4 = 0x8, | |
TlgOutIPV6 = 0x9, | |
TlgOutSOCKETADDRESS = 0xA, | |
TlgOutXML = 0xB, | |
TlgOutJSON = 0xC, | |
TlgOutWIN32ERROR = 0xD, | |
TlgOutNTSTATUS = 0xE, | |
TlgOutHRESULT = 0xF, | |
TlgOutFILETIME = 0x10, | |
TlgOutSIGNED = 0x11, | |
TlgOutUNSIGNED = 0x12, | |
TlgOutUTF8 = 0x23, | |
TlgOutPKCS7_WITH_TYPE_INFO = 0x24, | |
TlgOutCODE_POINTER = 0x25, | |
TlgOutDATETIME_UTC = 0x26, | |
_TlgOutMax = 0x27, | |
_TlgOutChain = 0x80, | |
_TlgOutTypeMask = 0x7F, | |
}; | |
/* 222 */ | |
enum _MI_IO_PFN_TYPE : __int32 | |
{ | |
MiIoPfnProbes = 0x0, | |
MiIoPfnMaps = 0x1, | |
MiIoPfnUnmapped = 0x2, | |
MiMaximumIoPfnType = 0x3, | |
}; | |
/* 223 */ | |
enum _TRACE_INFORMATION_CLASS : __int32 | |
{ | |
TraceIdClass = 0x0, | |
TraceHandleClass = 0x1, | |
TraceEnableFlagsClass = 0x2, | |
TraceEnableLevelClass = 0x3, | |
GlobalLoggerHandleClass = 0x4, | |
EventLoggerHandleClass = 0x5, | |
AllLoggerHandlesClass = 0x6, | |
TraceHandleByNameClass = 0x7, | |
LoggerEventsLostClass = 0x8, | |
TraceSessionSettingsClass = 0x9, | |
LoggerEventsLoggedClass = 0xA, | |
DiskIoNotifyRoutinesClass = 0xB, | |
TraceInformationClassReserved1 = 0xC, | |
AllPossibleNotifyRoutinesClass = 0xC, | |
FltIoNotifyRoutinesClass = 0xD, | |
TraceInformationClassReserved2 = 0xE, | |
WdfNotifyRoutinesClass = 0xF, | |
MaxTraceInformationClass = 0x10, | |
}; | |
/* 224 */ | |
enum _MI_PARTITION_THREAD : __int32 | |
{ | |
MiZeroPageThreadSlot = 0x0, | |
MiRebuildLargePagesThreadSlot = 0x1, | |
MiPartitionWorkingSetManagerSlot = 0x2, | |
MiDereferenceSegmentThreadSlot = 0x3, | |
MiModifiedPageWriterSlot = 0x4, | |
MiMappedPageWriterSlot = 0x5, | |
MiNumberOfPartitionThreads = 0x6, | |
}; | |
/* 225 */ | |
enum _PERFINFO_MM_STAT : __int32 | |
{ | |
PerfInfoMMStatNotUsed = 0x0, | |
PerfInfoMMStatAggregatePageCombine = 0x1, | |
PerfInfoMMStatIterationPageCombine = 0x2, | |
PerfInfoMMStatMax = 0x3, | |
}; | |
/* 226 */ | |
enum _MI_WRITE_TYPES : __int32 | |
{ | |
WriteTypeCached = 0x0, | |
WriteTypeNonTemporal = 0x1, | |
WriteTypeMaximum = 0x2, | |
}; | |
/* 227 */ | |
enum _PNP_VETO_TYPE : __int32 | |
{ | |
PNP_VetoTypeUnknown = 0x0, | |
PNP_VetoLegacyDevice = 0x1, | |
PNP_VetoPendingClose = 0x2, | |
PNP_VetoWindowsApp = 0x3, | |
PNP_VetoWindowsService = 0x4, | |
PNP_VetoOutstandingOpen = 0x5, | |
PNP_VetoDevice = 0x6, | |
PNP_VetoDriver = 0x7, | |
PNP_VetoIllegalDeviceRequest = 0x8, | |
PNP_VetoInsufficientPower = 0x9, | |
PNP_VetoNonDisableable = 0xA, | |
PNP_VetoLegacyDriver = 0xB, | |
PNP_VetoInsufficientRights = 0xC, | |
PNP_VetoAlreadyRemoved = 0xD, | |
}; | |
/* 228 */ | |
enum _MI_SLAB_ALLOCATOR_TYPE : __int32 | |
{ | |
MiSlabAllocatorTypeSlatProtected = 0x0, | |
MiSlabAllocatorTypeUnprotected = 0x1, | |
MiSlabAllocatorTypeMax = 0x2, | |
}; | |
/* 229 */ | |
enum PDCCLIENTID : __int32 | |
{ | |
PDC_INVALID_CLIENT = 0x0, | |
PDC_PLM_CLIENT = 0x1, | |
PDC_NQM_CLIENT = 0x2, | |
PDC_WNS_CLIENT = 0x3, | |
PDC_DAM_CLIENT = 0x4, | |
PDC_WCM_CLIENT = 0x5, | |
PDC_NCSI_CLIENT = 0x7, | |
PDC_DHCP_CLIENT = 0x8, | |
PDC_TCPIP_CLIENT = 0x9, | |
PDC_WU_CLIENT = 0xB, | |
PDC_GP_CLIENT = 0xC, | |
PDC_NCA_CLIENT = 0xE, | |
PDC_BI_CLIENT = 0xF, | |
PDC_MSCHED_CLIENT = 0x10, | |
PDC_SUSPENDRESUME_CLIENT = 0x11, | |
PDC_INTERNAL_CLIENT = 0x12, | |
PDC_DEFAULT_KM_TEST_CLIENT_EXEMPTED = 0x13, | |
PDC_DEFAULT_UM_TEST_CLIENT_EXEMPTED = 0x14, | |
PDC_DAM_PHASE_TEST_CLIENT = 0x15, | |
PDC_LOW_POWER_PHASE_TEST_CLIENT = 0x16, | |
PDC_RESILIENCY_NOTIFICATION_PHASE_TEST_CLIENT = 0x17, | |
PDC_NQM_RESILIENCY_TEST_CLIENT = 0x18, | |
PDC_DAM_RESILIENCY_TEST_CLIENT = 0x19, | |
PDC_DAM_KM_TEST_CLIENT = 0x1A, | |
PDC_DAM_UM_TEST_CLIENT = 0x1B, | |
PDC_SINGLETON_TEST_CLIENT = 0x1C, | |
PDC_NETWORK_SERVICE_TEST_CLIENT = 0x1D, | |
PDC_NETWORK_SERVICE2_TEST_CLIENT = 0x1E, | |
PDC_SYSTEM_SERVICE_TEST_CLIENT = 0x1F, | |
PDC_ACTIV_NOTIF_DAM_RESIL_TEST_CLIENT = 0x20, | |
PDC_ACTIV_NOTIF_NET_RESIL_TEST_CLIENT = 0x21, | |
PDC_SHELL_CLIENT = 0x22, | |
PDC_MAINTENANCE_CLIENT = 0x23, | |
PDC_SYNC_CLIENT = 0x24, | |
PDC_IDM_CLIENT = 0x25, | |
PDC_CORTANA_VOICE_ACTIVATION_CLIENT = 0x26, | |
PDC_TETHERING_CLIENT = 0x27, | |
PDC_AUDIO_CLIENT = 0x28, | |
PDC_LOCK_SCREEN = 0x29, | |
PDC_LREC_CLIENT = 0x2A, | |
PDC_WP_BW_CLIENT = 0x2B, | |
PDC_WP_MEDIA_STREAMING_CLIENT = 0x2C, | |
PDC_WP_MAPS_CLIENT = 0x2E, | |
PDC_WP_SYNC_CLIENT = 0x2F, | |
PDC_SETTING_SYNC_CLIENT = 0x30, | |
PDC_WP_EDM_CLIENT = 0x31, | |
PDC_WP_WALLET_CLIENT = 0x32, | |
PDC_WP_LOCATION_CLIENT = 0x33, | |
PDC_WP_CM_CLIENT = 0x35, | |
PDC_WP_DCP_CLIENT = 0x36, | |
PDC_WP_WIFIAUTO_CLIENT = 0x37, | |
PDC_BITLOCKER_CLIENT = 0x38, | |
PDC_MDM_CERTINSTALLER_CLIENT = 0x39, | |
PDC_WP_IM_CLIENT = 0x3A, | |
PDC_WP_MMS_CLIENT = 0x3B, | |
PDC_DEVICEENROLLER_CLIENT = 0x3C, | |
PDC_WP_WIFI_SCANNING_CLIENT = 0x3D, | |
PDC_WP_OMADM_CLIENT = 0x3E, | |
PDC_WP_TELEMETRY_CHECK_CLIENT = 0x3F, | |
PDC_WP_DIS_CLIENT = 0x40, | |
PDC_BITS_CLIENT = 0x41, | |
PDC_WP_VOIP_EXECUTION_CLIENT = 0x42, | |
PDC_WP_RESERVED_CLIENT3 = 0x43, | |
PDC_SLEEP_STUDY_CLIENT = 0x44, | |
PDC_WP_AUTOTIMEUPDATE_CLIENT = 0x45, | |
PDC_HYPERV_CLIENT = 0x46, | |
PDC_KM_SIGNAL_CLIENT = 0x47, | |
PDC_UM_SIGNAL_CLIENT = 0x48, | |
PDC_DEVICE_HEALTH_ATTESTATION_CLIENT = 0x49, | |
PDC_XB_SYSTEM_CLIENT = 0x4A, | |
PDC_XB_HOST_CLIENT = 0x4B, | |
PDC_PRINT_JOB_MANAGER_CLIENT = 0x4C, | |
PDC_TELEMETRY_CLIENT = 0x4D, | |
PDC_ERROR_REPORTING_CLIENT = 0x4E, | |
PDC_XBOX_NTM = 0x4F, | |
PDC_CBE_CLIENT = 0x50, | |
PDC_FIND_MY_PHONE_CLIENT = 0x51, | |
PDC_COMMAND_CHANNEL_CLIENT = 0x52, | |
PDC_PPM_PROFILES_CLIENT = 0x53, | |
PDC_WIFI_CALLING_CLIENT = 0x54, | |
PDC_WU_REBOOT_CLIENT = 0x55, | |
PDC_SYSMAIN_CLIENT = 0x56, | |
PDC_XBOX_UPDATE_CLIENT = 0x57, | |
PDC_CHAT_SERVICE_CLIENT = 0x58, | |
PDC_FIND_MY_DEVICE_CLIENT = 0x59, | |
PDC_NOTIFICATION_FORWARDING_AND_ACTION_CLIENT = 0x5A, | |
PDC_INSTALL_AGENT_CLIENT = 0x5B, | |
PDC_XBOX_WAKE_ON_VOICE = 0x5C, | |
PDC_PLM_AUDIO_CLIENT = 0x5D, | |
PDC_WP_BCKAUDIO_CLIENT = 0x5E, | |
PDC_WAKE_ON_LAN_CLIENT = 0x5F, | |
PDC_WP_CLOUD_MESSAGING_CLIENT = 0x60, | |
PDC_DATA_MIGRATION_MANAGER = 0x61, | |
PDC_EVENT_SOUND_MANAGER_CLIENT = 0x62, | |
PDC_WWAN_DORMANCY_HINT_CLIENT = 0x63, | |
PDC_HAM_CLIENT = 0x64, | |
PDC_FILESHARINGSERVER_CLIENT = 0x65, | |
PDC_DIRECTED_DRIPS_TASK_CLIENT = 0x66, | |
PDC_DIRECTED_DRIPS_LPE_CLIENT = 0x67, | |
PDC_DIRECTED_DRIPS_PLM_CLIENT = 0x68, | |
PDC_HTTPSDATASOURCE_CLIENT = 0x69, | |
PDC_TERMINALSERVER_CONNECTION_CLIENT = 0x6A, | |
PDC_TERMINALSERVER_SESSION_CLIENT = 0x6B, | |
PDC_ANYNETWORK_RESILIENCY_CLIENT = 0x6C, | |
PDC_XBOX_NUI_CLIENT = 0x6E, | |
PDC_WIFI_CALLING_IMS_CLIENT = 0x6F, | |
PDC_SLEEPSTUDY_HELPER_USER_CLIENT = 0x70, | |
PDC_SLEEPSTUDY_HELPER_KERNEL_CLIENT = 0x71, | |
PDC_CONTAINER_MANAGER_CLIENT = 0x72, | |
PDC_NUMBER_OF_CLIENTS = 0x73, | |
}; | |
/* 230 */ | |
enum SLEEPSTUDY_SPM_SCENARIO_CS_EXIT : __int32 | |
{ | |
SpmScenarioStopReasonUnspecified = 0x10, | |
SpmScenarioStopReasonCsExit = 0x11, | |
SpmScenarioStopReasonInternalSegmentTransition = 0x12, | |
SpmScenarioStopReasonMax = 0x13, | |
}; | |
/* 231 */ | |
enum PROFILE_DEPARTURE_STYLE : __int32 | |
{ | |
PDS_UPDATE_DEFAULT = 0x1, | |
PDS_UPDATE_ON_REMOVE = 0x2, | |
PDS_UPDATE_ON_INTERFACE = 0x3, | |
PDS_UPDATE_ON_EJECT = 0x4, | |
}; | |
/* 232 */ | |
enum LSA_FOREST_TRUST_RECORD_TYPE : __int32 | |
{ | |
ForestTrustTopLevelName = 0x0, | |
ForestTrustTopLevelNameEx = 0x1, | |
ForestTrustDomainInfo = 0x2, | |
ForestTrustRecordTypeLast = 0x2, | |
}; | |
/* 233 */ | |
enum _PROC_HYPERVISOR_STATE : __int32 | |
{ | |
ProcHypervisorNone = 0x0, | |
ProcHypervisorPresent = 0x1, | |
ProcHypervisorPower = 0x2, | |
ProcHypervisorHvCounters = 0x3, | |
}; | |
/* 234 */ | |
enum _KHETERO_CPU_QOS : __int32 | |
{ | |
KHeteroCpuQosDefault = 0x0, | |
KHeteroCpuQosHigh = 0x0, | |
KHeteroCpuQosMedium = 0x1, | |
KHeteroCpuQosLow = 0x2, | |
KHeteroCpuQosMultimedia = 0x3, | |
KHeteroCpuQosDeadline = 0x4, | |
KHeteroCpuQosDynamic = 0x5, | |
KHeteroCpuQosMax = 0x5, | |
}; | |
/* 235 */ | |
enum _KRESOURCEMANAGER_STATE : __int32 | |
{ | |
KResourceManagerUninitialized = 0x0, | |
KResourceManagerOffline = 0x1, | |
KResourceManagerOnline = 0x2, | |
}; | |
/* 236 */ | |
enum _THREAD_WORKLOAD_CLASS : __int32 | |
{ | |
ThreadWorkloadClassDefault = 0x0, | |
ThreadWorkloadClassGraphics = 0x1, | |
MaxThreadWorkloadClass = 0x2, | |
}; | |
/* 237 */ | |
enum _SEP_CACHED_HANDLES_ENTRY_TYPE : __int32 | |
{ | |
SepCachedHandlesEntryLowbox = 0x0, | |
SepCachedHandlesEntryBnoIsolation = 0x1, | |
}; | |
/* 238 */ | |
enum _POP_DEVICE_IDLE_TYPE : __int32 | |
{ | |
DeviceIdleNormal = 0x0, | |
DeviceIdleDisk = 0x1, | |
}; | |
/* 239 */ | |
enum _MI_CROSS_PARTITION_CHARGE_TYPE : __int32 | |
{ | |
MiCrossPartitionSectionResAvailCharge = 0x0, | |
MiCrossPartitionSectionCommitCharge = 0x1, | |
MiCrossPartitionPageCombineResAvailCharge = 0x2, | |
MiCrossPartitionPageCombineCommitCharge = 0x3, | |
MiCrossPartitionLargePageResAvailCharge = 0x4, | |
MiCrossPartitionLargePageCommitCharge = 0x5, | |
MiCrossPartitionPageCloneResAvailCharge = 0x6, | |
MiCrossPartitionMaximumCharge = 0x7, | |
}; | |
/* 240 */ | |
enum _HV_EXT_EPF_MODE : __int32 | |
{ | |
HvExtEpfModeMin = 0x0, | |
HvExtEpfModeNt = 0x0, | |
HvExtEpfModeMax = 0x1, | |
}; | |
/* 241 */ | |
enum _PNP_REBALANCE_REASON : __int32 | |
{ | |
RebalanceReasonUnknown = 0x0, | |
RebalanceReasonRequirementsChanged = 0x1, | |
RebalanceReasonNewDevice = 0x2, | |
}; | |
/* 242 */ | |
enum _PNP_REBALANCE_FAILURE : __int32 | |
{ | |
RebalanceFailureNone = 0x0, | |
RebalanceFailureDisabled = 0x1, | |
RebalanceFailureNoMemory = 0x2, | |
RebalanceFailureQueryStopUnexpectedVeto = 0x3, | |
RebalanceFailureNoRequirements = 0x4, | |
RebalanceFailureNoCandidates = 0x5, | |
RebalanceFailureNoConfiguration = 0x6, | |
}; | |
/* 243 */ | |
enum _PNP_DEVNODE_QUERY_REBALANCE_VETO_REASON : __int32 | |
{ | |
DeviceQueryRebalanceSucceeded = 0x0, | |
DeviceQueryStopFailed = 0x1, | |
DeviceFailedGetNewResourceRequirement = 0x2, | |
DeviceInUnexpectedState = 0x3, | |
DeviceNotSupportQueryRebalance = 0x4, | |
}; | |
/* 244 */ | |
enum _POP_POWER_ACTION_WATCHDOG_STATE : __int32 | |
{ | |
PopPowerActionWatchdogStateDisabled = 0x0, | |
PopPowerActionWatchdogStateTransitioning = 0x1, | |
PopPowerActionWatchdogStateResuming = 0x2, | |
PopPowerActionWatchdogStateMax = 0x3, | |
}; | |
/* 245 */ | |
enum _SYSTEM_FEATURE_CONFIGURATION_SECTION_TYPE : __int32 | |
{ | |
SystemFeatureConfigurationSectionTypeBoot = 0x0, | |
SystemFeatureConfigurationSectionTypeRuntime = 0x1, | |
SystemFeatureConfigurationSectionTypeUsageTriggers = 0x2, | |
SystemFeatureConfigurationSectionTypeCount = 0x3, | |
}; | |
/* 246 */ | |
enum _PS_ATTRIBUTE_NUM : __int32 | |
{ | |
PsAttributeParentProcess = 0x0, | |
PsAttributeDebugObject = 0x1, | |
PsAttributeToken = 0x2, | |
PsAttributeClientId = 0x3, | |
PsAttributeTebAddress = 0x4, | |
PsAttributeImageName = 0x5, | |
PsAttributeImageInfo = 0x6, | |
PsAttributeMemoryReserve = 0x7, | |
PsAttributePriorityClass = 0x8, | |
PsAttributeErrorMode = 0x9, | |
PsAttributeStdHandleInfo = 0xA, | |
PsAttributeHandleList = 0xB, | |
PsAttributeGroupAffinity = 0xC, | |
PsAttributePreferredNode = 0xD, | |
PsAttributeIdealProcessor = 0xE, | |
PsAttributeUmsThread = 0xF, | |
PsAttributeMitigationOptions = 0x10, | |
PsAttributeProtectionLevel = 0x11, | |
PsAttributeSecureProcess = 0x12, | |
PsAttributeJobList = 0x13, | |
PsAttributeChildProcessPolicy = 0x14, | |
PsAttributeAllApplicationPackagesPolicy = 0x15, | |
PsAttributeWin32kFilter = 0x16, | |
PsAttributeSafeOpenPromptOriginClaim = 0x17, | |
PsAttributeBnoIsolation = 0x18, | |
PsAttributeDesktopAppPolicy = 0x19, | |
PsAttributeChpe = 0x1A, | |
PsAttributeMitigationAuditOptions = 0x1B, | |
PsAttributeMax = 0x1C, | |
}; | |
/* 247 */ | |
enum _PPM_PERF_QOS_DISABLE_REASON : __int32 | |
{ | |
PpmPerfQosDisableInternal = 0x0, | |
PpmPerfQosDisableNoProfile = 0x1, | |
PpmPerfQosDisableNoPolicy = 0x2, | |
PpmPerfQosDisableInsufficientPolicy = 0x3, | |
PpmPerfQosDisableMaxOverride = 0x4, | |
PpmPerfQosDisableLowLatency = 0x5, | |
PpmPerfQosDisableSmtScheduler = 0x6, | |
PpmPerfQosDisableNoHardwareSupport = 0x7, | |
PpmPerfQosDisableGroupPolicy = 0x8, | |
PpmPerfQosDisableMax = 0x9, | |
}; | |
/* 248 */ | |
enum _MI_VAD_ALLOCATION_CELL_TYPE : __int32 | |
{ | |
MiVadBottomUp = 0x0, | |
MiVadStackPebTeb = 0x1, | |
MiVadReserved64 = 0x2, | |
MiVadAllocationCellMaximum = 0x3, | |
}; | |
/* 249 */ | |
enum _ConnectionResourceConsumerDesc : __int32 | |
{ | |
ConnectionResourceConsumerDescIsUndefined = 0x0, | |
ConnectionResourceConsumerDescIsDevice = 0x1, | |
ConnectionResourceConsumerDescIsOpregion = 0x2, | |
ConnectionResourceConsumerDescMax = 0x3, | |
}; | |
/* 250 */ | |
enum _SYSTEM_INFORMATION_CLASS : __int32 | |
{ | |
SystemBasicInformation = 0x0, | |
SystemProcessorInformation = 0x1, | |
SystemPerformanceInformation = 0x2, | |
SystemTimeOfDayInformation = 0x3, | |
SystemPathInformation = 0x4, | |
SystemProcessInformation = 0x5, | |
SystemCallCountInformation = 0x6, | |
SystemDeviceInformation = 0x7, | |
SystemProcessorPerformanceInformation = 0x8, | |
SystemFlagsInformation = 0x9, | |
SystemCallTimeInformation = 0xA, | |
SystemModuleInformation = 0xB, | |
SystemLocksInformation = 0xC, | |
SystemStackTraceInformation = 0xD, | |
SystemPagedPoolInformation = 0xE, | |
SystemNonPagedPoolInformation = 0xF, | |
SystemHandleInformation = 0x10, | |
SystemObjectInformation = 0x11, | |
SystemPageFileInformation = 0x12, | |
SystemVdmInstemulInformation = 0x13, | |
SystemVdmBopInformation = 0x14, | |
SystemFileCacheInformation = 0x15, | |
SystemPoolTagInformation = 0x16, | |
SystemInterruptInformation = 0x17, | |
SystemDpcBehaviorInformation = 0x18, | |
SystemFullMemoryInformation = 0x19, | |
SystemLoadGdiDriverInformation = 0x1A, | |
SystemUnloadGdiDriverInformation = 0x1B, | |
SystemTimeAdjustmentInformation = 0x1C, | |
SystemSummaryMemoryInformation = 0x1D, | |
SystemMirrorMemoryInformation = 0x1E, | |
SystemPerformanceTraceInformation = 0x1F, | |
SystemObsolete0 = 0x20, | |
SystemExceptionInformation = 0x21, | |
SystemCrashDumpStateInformation = 0x22, | |
SystemKernelDebuggerInformation = 0x23, | |
SystemContextSwitchInformation = 0x24, | |
SystemRegistryQuotaInformation = 0x25, | |
SystemExtendServiceTableInformation = 0x26, | |
SystemPrioritySeperation = 0x27, | |
SystemVerifierAddDriverInformation = 0x28, | |
SystemVerifierRemoveDriverInformation = 0x29, | |
SystemProcessorIdleInformation = 0x2A, | |
SystemLegacyDriverInformation = 0x2B, | |
SystemCurrentTimeZoneInformation = 0x2C, | |
SystemLookasideInformation = 0x2D, | |
SystemTimeSlipNotification = 0x2E, | |
SystemSessionCreate = 0x2F, | |
SystemSessionDetach = 0x30, | |
SystemSessionInformation = 0x31, | |
SystemRangeStartInformation = 0x32, | |
SystemVerifierInformation = 0x33, | |
SystemVerifierThunkExtend = 0x34, | |
SystemSessionProcessInformation = 0x35, | |
SystemLoadGdiDriverInSystemSpace = 0x36, | |
SystemNumaProcessorMap = 0x37, | |
SystemPrefetcherInformation = 0x38, | |
SystemExtendedProcessInformation = 0x39, | |
SystemRecommendedSharedDataAlignment = 0x3A, | |
SystemComPlusPackage = 0x3B, | |
SystemNumaAvailableMemory = 0x3C, | |
SystemProcessorPowerInformation = 0x3D, | |
SystemEmulationBasicInformation = 0x3E, | |
SystemEmulationProcessorInformation = 0x3F, | |
SystemExtendedHandleInformation = 0x40, | |
SystemLostDelayedWriteInformation = 0x41, | |
SystemBigPoolInformation = 0x42, | |
SystemSessionPoolTagInformation = 0x43, | |
SystemSessionMappedViewInformation = 0x44, | |
SystemHotpatchInformation = 0x45, | |
SystemObjectSecurityMode = 0x46, | |
SystemWatchdogTimerHandler = 0x47, | |
SystemWatchdogTimerInformation = 0x48, | |
SystemLogicalProcessorInformation = 0x49, | |
SystemWow64SharedInformationObsolete = 0x4A, | |
SystemRegisterFirmwareTableInformationHandler = 0x4B, | |
SystemFirmwareTableInformation = 0x4C, | |
SystemModuleInformationEx = 0x4D, | |
SystemVerifierTriageInformation = 0x4E, | |
SystemSuperfetchInformation = 0x4F, | |
SystemMemoryListInformation = 0x50, | |
SystemFileCacheInformationEx = 0x51, | |
SystemThreadPriorityClientIdInformation = 0x52, | |
SystemProcessorIdleCycleTimeInformation = 0x53, | |
SystemVerifierCancellationInformation = 0x54, | |
SystemProcessorPowerInformationEx = 0x55, | |
SystemRefTraceInformation = 0x56, | |
SystemSpecialPoolInformation = 0x57, | |
SystemProcessIdInformation = 0x58, | |
SystemErrorPortInformation = 0x59, | |
SystemBootEnvironmentInformation = 0x5A, | |
SystemHypervisorInformation = 0x5B, | |
SystemVerifierInformationEx = 0x5C, | |
SystemTimeZoneInformation = 0x5D, | |
SystemImageFileExecutionOptionsInformation = 0x5E, | |
SystemCoverageInformation = 0x5F, | |
SystemPrefetchPatchInformation = 0x60, | |
SystemVerifierFaultsInformation = 0x61, | |
SystemSystemPartitionInformation = 0x62, | |
SystemSystemDiskInformation = 0x63, | |
SystemProcessorPerformanceDistribution = 0x64, | |
SystemNumaProximityNodeInformation = 0x65, | |
SystemDynamicTimeZoneInformation = 0x66, | |
SystemCodeIntegrityInformation = 0x67, | |
SystemProcessorMicrocodeUpdateInformation = 0x68, | |
SystemProcessorBrandString = 0x69, | |
SystemVirtualAddressInformation = 0x6A, | |
SystemLogicalProcessorAndGroupInformation = 0x6B, | |
SystemProcessorCycleTimeInformation = 0x6C, | |
SystemStoreInformation = 0x6D, | |
SystemRegistryAppendString = 0x6E, | |
SystemAitSamplingValue = 0x6F, | |
SystemVhdBootInformation = 0x70, | |
SystemCpuQuotaInformation = 0x71, | |
SystemNativeBasicInformation = 0x72, | |
SystemErrorPortTimeouts = 0x73, | |
SystemLowPriorityIoInformation = 0x74, | |
SystemBootEntropyInformation = 0x75, | |
SystemVerifierCountersInformation = 0x76, | |
SystemPagedPoolInformationEx = 0x77, | |
SystemSystemPtesInformationEx = 0x78, | |
SystemNodeDistanceInformation = 0x79, | |
SystemAcpiAuditInformation = 0x7A, | |
SystemBasicPerformanceInformation = 0x7B, | |
SystemQueryPerformanceCounterInformation = 0x7C, | |
SystemSessionBigPoolInformation = 0x7D, | |
SystemBootGraphicsInformation = 0x7E, | |
SystemScrubPhysicalMemoryInformation = 0x7F, | |
SystemBadPageInformation = 0x80, | |
SystemProcessorProfileControlArea = 0x81, | |
SystemCombinePhysicalMemoryInformation = 0x82, | |
SystemEntropyInterruptTimingInformation = 0x83, | |
SystemConsoleInformation = 0x84, | |
SystemPlatformBinaryInformation = 0x85, | |
SystemPolicyInformation = 0x86, | |
SystemHypervisorProcessorCountInformation = 0x87, | |
SystemDeviceDataInformation = 0x88, | |
SystemDeviceDataEnumerationInformation = 0x89, | |
SystemMemoryTopologyInformation = 0x8A, | |
SystemMemoryChannelInformation = 0x8B, | |
SystemBootLogoInformation = 0x8C, | |
SystemProcessorPerformanceInformationEx = 0x8D, | |
SystemCriticalProcessErrorLogInformation = 0x8E, | |
SystemSecureBootPolicyInformation = 0x8F, | |
SystemPageFileInformationEx = 0x90, | |
SystemSecureBootInformation = 0x91, | |
SystemEntropyInterruptTimingRawInformation = 0x92, | |
SystemPortableWorkspaceEfiLauncherInformation = 0x93, | |
SystemFullProcessInformation = 0x94, | |
SystemKernelDebuggerInformationEx = 0x95, | |
SystemBootMetadataInformation = 0x96, | |
SystemSoftRebootInformation = 0x97, | |
SystemElamCertificateInformation = 0x98, | |
SystemOfflineDumpConfigInformation = 0x99, | |
SystemProcessorFeaturesInformation = 0x9A, | |
SystemRegistryReconciliationInformation = 0x9B, | |
SystemEdidInformation = 0x9C, | |
SystemManufacturingInformation = 0x9D, | |
SystemEnergyEstimationConfigInformation = 0x9E, | |
SystemHypervisorDetailInformation = 0x9F, | |
SystemProcessorCycleStatsInformation = 0xA0, | |
SystemVmGenerationCountInformation = 0xA1, | |
SystemTrustedPlatformModuleInformation = 0xA2, | |
SystemKernelDebuggerFlags = 0xA3, | |
SystemCodeIntegrityPolicyInformation = 0xA4, | |
SystemIsolatedUserModeInformation = 0xA5, | |
SystemHardwareSecurityTestInterfaceResultsInformation = 0xA6, | |
SystemSingleModuleInformation = 0xA7, | |
SystemAllowedCpuSetsInformation = 0xA8, | |
SystemVsmProtectionInformation = 0xA9, | |
SystemInterruptCpuSetsInformation = 0xAA, | |
SystemSecureBootPolicyFullInformation = 0xAB, | |
SystemCodeIntegrityPolicyFullInformation = 0xAC, | |
SystemAffinitizedInterruptProcessorInformation = 0xAD, | |
SystemRootSiloInformation = 0xAE, | |
SystemCpuSetInformation = 0xAF, | |
SystemCpuSetTagInformation = 0xB0, | |
SystemWin32WerStartCallout = 0xB1, | |
SystemSecureKernelProfileInformation = 0xB2, | |
SystemCodeIntegrityPlatformManifestInformation = 0xB3, | |
SystemInterruptSteeringInformation = 0xB4, | |
SystemSupportedProcessorArchitectures = 0xB5, | |
SystemMemoryUsageInformation = 0xB6, | |
SystemCodeIntegrityCertificateInformation = 0xB7, | |
SystemPhysicalMemoryInformation = 0xB8, | |
SystemControlFlowTransition = 0xB9, | |
SystemKernelDebuggingAllowed = 0xBA, | |
SystemActivityModerationExeState = 0xBB, | |
SystemActivityModerationUserSettings = 0xBC, | |
SystemCodeIntegrityPoliciesFullInformation = 0xBD, | |
SystemCodeIntegrityUnlockInformation = 0xBE, | |
SystemIntegrityQuotaInformation = 0xBF, | |
SystemFlushInformation = 0xC0, | |
SystemProcessorIdleMaskInformation = 0xC1, | |
SystemSecureDumpEncryptionInformation = 0xC2, | |
SystemWriteConstraintInformation = 0xC3, | |
SystemKernelVaShadowInformation = 0xC4, | |
SystemHypervisorSharedPageInformation = 0xC5, | |
SystemFirmwareBootPerformanceInformation = 0xC6, | |
SystemCodeIntegrityVerificationInformation = 0xC7, | |
SystemFirmwarePartitionInformation = 0xC8, | |
SystemSpeculationControlInformation = 0xC9, | |
SystemDmaGuardPolicyInformation = 0xCA, | |
SystemEnclaveLaunchControlInformation = 0xCB, | |
SystemWorkloadAllowedCpuSetsInformation = 0xCC, | |
SystemCodeIntegrityUnlockModeInformation = 0xCD, | |
SystemLeapSecondInformation = 0xCE, | |
SystemFlags2Information = 0xCF, | |
SystemSecurityModelInformation = 0xD0, | |
SystemCodeIntegritySyntheticCacheInformation = 0xD1, | |
SystemFeatureConfigurationInformation = 0xD2, | |
SystemFeatureConfigurationSectionInformation = 0xD3, | |
SystemFeatureUsageSubscriptionInformation = 0xD4, | |
SystemSecureSpeculationControlInformation = 0xD5, | |
SystemSpacesBootInformation = 0xD6, | |
SystemFwRamdiskInformation = 0xD7, | |
SystemWheaIpmiHardwareInformation = 0xD8, | |
SystemDifSetRuleClassInformation = 0xD9, | |
SystemDifClearRuleClassInformation = 0xDA, | |
SystemDifApplyPluginVerificationOnDriver = 0xDB, | |
SystemDifRemovePluginVerificationOnDriver = 0xDC, | |
SystemShadowStackInformation = 0xDD, | |
SystemBuildVersionInformation = 0xDE, | |
SystemPoolLimitInformation = 0xDF, | |
SystemCodeIntegrityAddDynamicStore = 0xE0, | |
SystemCodeIntegrityClearDynamicStores = 0xE1, | |
SystemPoolZeroingInformation = 0xE3, | |
MaxSystemInfoClass = 0xE4, | |
}; | |
/* 251 */ | |
enum _PROCESS_TERMINATE_REQUEST_REASON : __int32 | |
{ | |
ProcessTerminateRequestReasonNone = 0x0, | |
ProcessTerminateCommitFail = 0x1, | |
ProcessTerminateWriteToExecuteMemory = 0x2, | |
ProcessTerminateAttachedWriteToExecuteMemory = 0x3, | |
ProcessTerminateRequestReasonMax = 0x4, | |
}; | |
/* 252 */ | |
enum _VRF_TRIAGE_CONTEXT : __int32 | |
{ | |
VRF_TRIAGE_CONTEXT_NONE = 0x0, | |
VRF_TRIAGE_CONTEXT_DEFAULT = 0x1, | |
VRF_TRIAGE_CONTEXT_DEVELOPMENT = 0x1, | |
VRF_TRIAGE_CONTEXT_CERTIFICATION = 0x2, | |
VRF_TRIAGE_CONTEXT_FLIGHT_TARGETED = 0x3, | |
VRF_TRIAGE_CONTEXT_FLIGHT_DIAGNOSTICS = 0x4, | |
VRF_TRIAGE_CONTEXT_FLIGHT_MONITORING = 0x5, | |
NUM_VRF_TRIAGE_CONTEXTS = 0x6, | |
}; | |
/* 253 */ | |
enum _REQUESTER_TYPE : __int32 | |
{ | |
KernelRequester = 0x0, | |
UserProcessRequester = 0x1, | |
UserSharedServiceRequester = 0x2, | |
}; | |
/* 254 */ | |
enum _KERNEL_STACK_LIMITS : __int32 | |
{ | |
BugcheckStackLimits = 0x0, | |
DPCStackLimits = 0x1, | |
ExpandedStackLimits = 0x2, | |
NormalStackLimits = 0x3, | |
Win32kStackLimits = 0x4, | |
SwapBusyStackLimits = 0x5, | |
IsrStackLimits = 0x6, | |
DebuggerStackLimits = 0x7, | |
NmiStackLimits = 0x8, | |
MachineCheckStackLimits = 0x9, | |
ExceptionStackLimits = 0xA, | |
MaximumStackLimits = 0xB, | |
}; | |
/* 255 */ | |
enum ReplacesCorHdrNumericDefines : __int32 | |
{ | |
COMIMAGE_FLAGS_ILONLY = 0x1, | |
COMIMAGE_FLAGS_32BITREQUIRED = 0x2, | |
COMIMAGE_FLAGS_IL_LIBRARY = 0x4, | |
COMIMAGE_FLAGS_STRONGNAMESIGNED = 0x8, | |
COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 0x10, | |
COMIMAGE_FLAGS_TRACKDEBUGDATA = 0x10000, | |
COMIMAGE_FLAGS_32BITPREFERRED = 0x20000, | |
COR_VERSION_MAJOR_V2 = 0x2, | |
COR_VERSION_MAJOR = 0x2, | |
COR_VERSION_MINOR = 0x5, | |
COR_DELETED_NAME_LENGTH = 0x8, | |
COR_VTABLEGAP_NAME_LENGTH = 0x8, | |
NATIVE_TYPE_MAX_CB = 0x1, | |
COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE = 0xFF, | |
IMAGE_COR_MIH_METHODRVA = 0x1, | |
IMAGE_COR_MIH_EHRVA = 0x2, | |
IMAGE_COR_MIH_BASICBLOCK = 0x8, | |
COR_VTABLE_32BIT = 0x1, | |
COR_VTABLE_64BIT = 0x2, | |
COR_VTABLE_FROM_UNMANAGED = 0x4, | |
COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN = 0x8, | |
COR_VTABLE_CALL_MOST_DERIVED = 0x10, | |
IMAGE_COR_EATJ_THUNK_SIZE = 0x20, | |
MAX_CLASS_NAME = 0x400, | |
MAX_PACKAGE_NAME = 0x400, | |
}; | |
/* 256 */ | |
enum _ARBITER_RESULT : __int32 | |
{ | |
ArbiterResultUndefined = 0xFFFFFFFF, | |
ArbiterResultSuccess = 0x0, | |
ArbiterResultExternalConflict = 0x1, | |
ArbiterResultNullRequest = 0x2, | |
}; | |
/* 257 */ | |
enum PDC_ACTIVITY_TYPE : __int32 | |
{ | |
PdcNetwork = 0x0, | |
PdcSystem = 0x1, | |
PdcTimer = 0x2, | |
PdcAllNetworks = 0x3, | |
PdcAnyNetwork = 0x4, | |
PdcInvalidActivity = 0x5, | |
PdcMaxActivity = 0x5, | |
}; | |
/* 258 */ | |
enum JOB_OBJECT_NET_RATE_CONTROL_FLAGS : __int32 | |
{ | |
JOB_OBJECT_NET_RATE_CONTROL_ENABLE = 0x1, | |
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH = 0x2, | |
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG = 0x4, | |
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS = 0x7, | |
}; | |
/* 259 */ | |
enum _MI_INPAGE_SUPPORT_TYPES : __int32 | |
{ | |
MiInPageSupportExpanded = 0x0, | |
MiInPageSupportRegular = 0x1, | |
MiInPageSupportMaximum = 0x2, | |
}; | |
/* 260 */ | |
enum _MI_MIRROR_BITMAP_TYPES : __int32 | |
{ | |
MirrorBitmapTypeNormal = 0x0, | |
MirrorBitmapTypeInterlocked = 0x1, | |
MirrorBitmapTypeMaximum = 0x2, | |
}; | |
/* 261 */ | |
enum _POP_IO_STATUS : __int32 | |
{ | |
IoReady = 0x0, | |
IoPending = 0x1, | |
IoDone = 0x2, | |
}; | |
/* 262 */ | |
enum KTM_STATE : __int32 | |
{ | |
KKtmUninitialized = 0x0, | |
KKtmInitialized = 0x1, | |
KKtmRecovering = 0x2, | |
KKtmOnline = 0x3, | |
KKtmRecoveryFailed = 0x4, | |
KKtmOffline = 0x5, | |
}; | |
/* 263 */ | |
enum _LDR_DLL_LOAD_REASON : __int32 | |
{ | |
LoadReasonStaticDependency = 0x0, | |
LoadReasonStaticForwarderDependency = 0x1, | |
LoadReasonDynamicForwarderDependency = 0x2, | |
LoadReasonDelayloadDependency = 0x3, | |
LoadReasonDynamicLoad = 0x4, | |
LoadReasonAsImageLoad = 0x5, | |
LoadReasonAsDataLoad = 0x6, | |
LoadReasonEnclavePrimary = 0x7, | |
LoadReasonEnclaveDependency = 0x8, | |
LoadReasonUnknown = 0xFFFFFFFF, | |
}; | |
/* 264 */ | |
enum _KCONTINUE_TYPE : __int32 | |
{ | |
KCONTINUE_UNWIND = 0x0, | |
KCONTINUE_RESUME = 0x1, | |
KCONTINUE_LONGJUMP = 0x2, | |
KCONTINUE_SET = 0x3, | |
KCONTINUE_LAST = 0x4, | |
}; | |
/* 265 */ | |
enum _RTL_GENERIC_COMPARE_RESULTS : __int32 | |
{ | |
GenericLessThan = 0x0, | |
GenericGreaterThan = 0x1, | |
GenericEqual = 0x2, | |
}; | |
/* 266 */ | |
enum _PO_MODERN_SLEEP_ACTION : __int32 | |
{ | |
PoModernSleepActionGlobalActivatorsVeto = 0x0, | |
PoModernSleepActionNonBlockingPhases = 0x1, | |
PoModernSleepActionForceIdle = 0x2, | |
PoModernSleepActionMinimalBlockingNotificationClients = 0x3, | |
PoModernSleepActionMax = 0x4, | |
}; | |
/* 267 */ | |
enum _FAULT_INFORMATION_ARCH : __int32 | |
{ | |
FaultInformationInvalid = 0x0, | |
FaultInformationArm64 = 0x1, | |
FaultInformationX64 = 0x2, | |
}; | |
/* 268 */ | |
enum _DMA_SPEED : __int32 | |
{ | |
Compatible = 0x0, | |
TypeA = 0x1, | |
TypeB = 0x2, | |
TypeC = 0x3, | |
TypeF = 0x4, | |
MaximumDmaSpeed = 0x5, | |
}; | |
/* 269 */ | |
enum _MI_AVAILABLE_PAGE_WAIT_TYPES : __int32 | |
{ | |
AvailablePagesWaitLow = 0x0, | |
AvailablePagesWaitHigh = 0x1, | |
AvailablePagesWaitVeryHigh = 0x2, | |
AvailablePagesWaitMaximum = 0x3, | |
}; | |
/* 270 */ | |
enum _DOMAIN_CONFIGURATION_ARCH : __int32 | |
{ | |
DomainConfigurationArm64 = 0x0, | |
DomainConfigurationInvalid = 0x1, | |
}; | |
/* 271 */ | |
enum _ETW_HEADER_TYPE : __int32 | |
{ | |
EtwHeaderTypeNative = 0x0, | |
EtwHeaderTypeWow = 0x1, | |
EtwHeaderTypeMax = 0x2, | |
}; | |
/* 272 */ | |
enum _FUNCTION_TABLE_TYPE : __int32 | |
{ | |
RF_SORTED = 0x0, | |
RF_UNSORTED = 0x1, | |
RF_CALLBACK = 0x2, | |
RF_KERNEL_DYNAMIC = 0x3, | |
}; | |
/* 273 */ | |
enum _PROCESSOR_PRESENCE : __int32 | |
{ | |
ProcessorPresenceNt = 0x0, | |
ProcessorPresenceHv = 0x1, | |
ProcessorPresenceHidden = 0x2, | |
}; | |
/* 274 */ | |
enum _CM_SHARE_DISPOSITION : __int32 | |
{ | |
CmResourceShareUndetermined = 0x0, | |
CmResourceShareDeviceExclusive = 0x1, | |
CmResourceShareDriverExclusive = 0x2, | |
CmResourceShareShared = 0x3, | |
}; | |
/* 275 */ | |
enum _ARBITER_ACTION : __int32 | |
{ | |
ArbiterActionTestAllocation = 0x0, | |
ArbiterActionRetestAllocation = 0x1, | |
ArbiterActionCommitAllocation = 0x2, | |
ArbiterActionRollbackAllocation = 0x3, | |
ArbiterActionQueryAllocatedResources = 0x4, | |
ArbiterActionWriteReservedResources = 0x5, | |
ArbiterActionQueryConflict = 0x6, | |
ArbiterActionQueryArbitrate = 0x7, | |
ArbiterActionAddReserved = 0x8, | |
ArbiterActionBootAllocation = 0x9, | |
}; | |
/* 276 */ | |
enum _MACHINE_CHECK_NESTING_LEVEL : __int32 | |
{ | |
McheckNormal = 0x0, | |
McheckNmi = 0x1, | |
McheckNestingLevels = 0x2, | |
}; | |
/* 277 */ | |
enum _FAULT_INFORMATION_ARM64_TYPE : __int32 | |
{ | |
UnsupportedUpstreamTransaction = 0x0, | |
AddressSizeFault = 0x1, | |
TlbMatchConflict = 0x2, | |
ExternalFault = 0x3, | |
PermissionFault = 0x4, | |
AccessFlagFault = 0x5, | |
TranslationFault = 0x6, | |
MaxFaultType = 0x7, | |
}; | |
/* 278 */ | |
enum _KTRANSACTION_STATE : __int32 | |
{ | |
KTransactionUninitialized = 0x0, | |
KTransactionActive = 0x1, | |
KTransactionPreparing = 0x2, | |
KTransactionPrepared = 0x3, | |
KTransactionInDoubt = 0x4, | |
KTransactionCommitted = 0x5, | |
KTransactionAborted = 0x6, | |
KTransactionDelegated = 0x7, | |
KTransactionPrePreparing = 0x8, | |
KTransactionForgotten = 0x9, | |
KTransactionRecovering = 0xA, | |
KTransactionPrePrepared = 0xB, | |
}; | |
/* 279 */ | |
enum _KTRANSACTION_OUTCOME : __int32 | |
{ | |
KTxOutcomeUninitialized = 0x0, | |
KTxOutcomeUndetermined = 0x1, | |
KTxOutcomeCommitted = 0x2, | |
KTxOutcomeAborted = 0x3, | |
KTxOutcomeUnavailable = 0x4, | |
}; | |
/* 280 */ | |
enum _LDR_DDAG_STATE : __int32 | |
{ | |
LdrModulesMerged = 0xFFFFFFFB, | |
LdrModulesInitError = 0xFFFFFFFC, | |
LdrModulesSnapError = 0xFFFFFFFD, | |
LdrModulesUnloaded = 0xFFFFFFFE, | |
LdrModulesUnloading = 0xFFFFFFFF, | |
LdrModulesPlaceHolder = 0x0, | |
LdrModulesMapping = 0x1, | |
LdrModulesMapped = 0x2, | |
LdrModulesWaitingForDependencies = 0x3, | |
LdrModulesSnapping = 0x4, | |
LdrModulesSnapped = 0x5, | |
LdrModulesCondensed = 0x6, | |
LdrModulesReadyToInit = 0x7, | |
LdrModulesInitializing = 0x8, | |
LdrModulesReadyToRun = 0x9, | |
}; | |
/* 281 */ | |
enum _PNP_WATCHDOG_TYPE : __int32 | |
{ | |
PNP_EVENT_WORKER_WATCHDOG = 0x1, | |
PNP_DEVICE_COMPLETION_QUEUE_WATCHDOG = 0x2, | |
PNP_DELAYED_REMOVE_WORKER_WATCHDOG = 0x3, | |
PNP_ADD_DEVICE_WATCHDOG = 0x4, | |
PNP_DRIVER_ENTRY_WATCHDOG = 0x5, | |
}; | |
/* 282 */ | |
enum _PLUGPLAY_EVENT_CATEGORY : __int32 | |
{ | |
HardwareProfileChangeEvent = 0x0, | |
TargetDeviceChangeEvent = 0x1, | |
DeviceClassChangeEvent = 0x2, | |
CustomDeviceEvent = 0x3, | |
DeviceInstallEvent = 0x4, | |
DeviceArrivalEvent = 0x5, | |
VetoEvent = 0x6, | |
BlockedDriverEvent = 0x7, | |
InvalidIDEvent = 0x8, | |
DevicePropertyChangeEvent = 0x9, | |
DeviceInstanceRemovalEvent = 0xA, | |
DeviceInstanceStartedEvent = 0xB, | |
MaxPlugEventCategory = 0xC, | |
}; | |
/* 283 */ | |
enum _DUMP_EVENTS : __int32 | |
{ | |
DUMP_EVENT_NONE = 0x0, | |
DUMP_EVENT_HIBER_RESUME = 0x1, | |
DUMP_EVENT_HIBER_RESUME_END = 0x2, | |
}; | |
/* 284 */ | |
enum _PEP_WORK_TYPE : __int32 | |
{ | |
PepWorkActiveComplete = 0x0, | |
PepWorkRequestIdleState = 0x1, | |
PepWorkDevicePower = 0x2, | |
PepWorkRequestPowerControl = 0x3, | |
PepWorkDeviceIdle = 0x4, | |
PepWorkCompleteIdleState = 0x5, | |
PepWorkCompletePerfState = 0x6, | |
PepWorkAcpiNotify = 0x7, | |
PepWorkAcpiEvaluateControlMethodComplete = 0x8, | |
PepWorkMax = 0x9, | |
}; | |
/* 285 */ | |
enum _CONFIGURATION_CLASS : __int32 | |
{ | |
SystemClass = 0x0, | |
ProcessorClass = 0x1, | |
CacheClass = 0x2, | |
AdapterClass = 0x3, | |
ControllerClass = 0x4, | |
PeripheralClass = 0x5, | |
MemoryClass = 0x6, | |
MaximumClass = 0x7, | |
}; | |
/* 286 */ | |
enum _CONFIGURATION_TYPE : __int32 | |
{ | |
ArcSystem = 0x0, | |
CentralProcessor = 0x1, | |
FloatingPointProcessor = 0x2, | |
PrimaryIcache = 0x3, | |
PrimaryDcache = 0x4, | |
SecondaryIcache = 0x5, | |
SecondaryDcache = 0x6, | |
SecondaryCache = 0x7, | |
EisaAdapter = 0x8, | |
TcAdapter = 0x9, | |
ScsiAdapter = 0xA, | |
DtiAdapter = 0xB, | |
MultiFunctionAdapter = 0xC, | |
DiskController = 0xD, | |
TapeController = 0xE, | |
CdromController = 0xF, | |
WormController = 0x10, | |
SerialController = 0x11, | |
NetworkController = 0x12, | |
DisplayController = 0x13, | |
ParallelController = 0x14, | |
PointerController = 0x15, | |
KeyboardController = 0x16, | |
AudioController = 0x17, | |
OtherController = 0x18, | |
DiskPeripheral = 0x19, | |
FloppyDiskPeripheral = 0x1A, | |
TapePeripheral = 0x1B, | |
ModemPeripheral = 0x1C, | |
MonitorPeripheral = 0x1D, | |
PrinterPeripheral = 0x1E, | |
PointerPeripheral = 0x1F, | |
KeyboardPeripheral = 0x20, | |
TerminalPeripheral = 0x21, | |
OtherPeripheral = 0x22, | |
LinePeripheral = 0x23, | |
NetworkPeripheral = 0x24, | |
SystemMemory = 0x25, | |
DockingInformation = 0x26, | |
RealModeIrqRoutingTable = 0x27, | |
RealModePCIEnumeration = 0x28, | |
MaximumType = 0x29, | |
}; | |
/* 287 */ | |
enum $E629E57EB416A4DD55ADB1883CE94280 : __int32 | |
{ | |
KTMOH_CommitTransaction_Result = 0x1, | |
KTMOH_RollbackTransaction_Result = 0x2, | |
}; | |
/* 288 */ | |
enum _ETW_NOTIFICATION_TYPE : __int32 | |
{ | |
EtwNotificationTypeNoReply = 0x1, | |
EtwNotificationTypeLegacyEnable = 0x2, | |
EtwNotificationTypeEnable = 0x3, | |
EtwNotificationTypePrivateLogger = 0x4, | |
EtwNotificationTypePerflib = 0x5, | |
EtwNotificationTypeAudio = 0x6, | |
EtwNotificationTypeSession = 0x7, | |
EtwNotificationTypeReserved = 0x8, | |
EtwNotificationTypeCredentialUI = 0x9, | |
EtwNotificationTypeInProcSession = 0xA, | |
EtwNotificationTypeFilteredPrivateLogger = 0xB, | |
EtwNotificationTypeMax = 0xC, | |
}; | |
/* 289 */ | |
enum _PO_FX_PERF_STATE_UNIT : __int32 | |
{ | |
PoFxPerfStateUnitOther = 0x0, | |
PoFxPerfStateUnitFrequency = 0x1, | |
PoFxPerfStateUnitBandwidth = 0x2, | |
PoFxPerfStateUnitMaximum = 0x3, | |
}; | |
/* 290 */ | |
enum _PO_FX_PERF_STATE_TYPE : __int32 | |
{ | |
PoFxPerfStateTypeDiscrete = 0x0, | |
PoFxPerfStateTypeRange = 0x1, | |
PoFxPerfStateTypeMaximum = 0x2, | |
}; | |
/* 291 */ | |
enum _BOOT_ENTROPY_SOURCE_ID : __int32 | |
{ | |
BootEntropySourceNone = 0x0, | |
BootEntropySourceSeedfile = 0x1, | |
BootEntropySourceExternal = 0x2, | |
BootEntropySourceTpm = 0x3, | |
BootEntropySourceRdrand = 0x4, | |
BootEntropySourceTime = 0x5, | |
BootEntropySourceAcpiOem0 = 0x6, | |
BootEntropySourceUefi = 0x7, | |
BootEntropySourceCng = 0x8, | |
BootEntropySourceTcbTpm = 0x9, | |
BootEntropySourceTcbRdrand = 0xA, | |
BootMaxEntropySources = 0xA, | |
}; | |
/* 292 */ | |
enum _BOOT_ENTROPY_SOURCE_RESULT_CODE : __int32 | |
{ | |
BootEntropySourceStructureUninitialized = 0x0, | |
BootEntropySourceDisabledByPolicy = 0x1, | |
BootEntropySourceNotPresent = 0x2, | |
BootEntropySourceError = 0x3, | |
BootEntropySourceSuccess = 0x4, | |
}; | |
/* 293 */ | |
enum _FS_FILTER_SECTION_SYNC_TYPE : __int32 | |
{ | |
SyncTypeOther = 0x0, | |
SyncTypeCreateSection = 0x1, | |
}; | |
/* 294 */ | |
struct LIST_ENTRY64 | |
{ | |
unsigned __int64 Flink; | |
unsigned __int64 Blink; | |
}; | |
/* 295 */ | |
struct LIST_ENTRY32 | |
{ | |
unsigned int Flink; | |
unsigned int Blink; | |
}; | |
/* 296 */ | |
struct _LIST_ENTRY | |
{ | |
_LIST_ENTRY *Flink; | |
_LIST_ENTRY *Blink; | |
}; | |
/* 297 */ | |
struct $08481D05807C14C022C64127DBCB0DC5 | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Signalling; | |
unsigned __int8 Size; | |
unsigned __int8 Reserved1; | |
}; | |
/* 298 */ | |
struct $BDD1DEEA9085FB2031C94E38C028AF9F | |
{ | |
unsigned __int8 TimerType; | |
unsigned __int8 TimerControlFlags; | |
unsigned __int8 Hand; | |
unsigned __int8 TimerMiscFlags; | |
}; | |
/* 299 */ | |
struct $02F1E2651E9D26351CD44793F2F78E1F | |
{ | |
unsigned __int8 Timer2Type; | |
unsigned __int8 Absolute : 1; | |
unsigned __int8 Wake : 1; | |
unsigned __int8 EncodedTolerableDelay : 6; | |
unsigned __int8 Timer2ComponentId; | |
unsigned __int8 Index : 6; | |
unsigned __int8 Inserted : 1; | |
unsigned __int8 Expired : 1; | |
}; | |
/* 300 */ | |
struct $E9B6E411B508381891F0374539EA7718 | |
{ | |
unsigned __int8 QueueType; | |
unsigned __int8 Timer2Flags; | |
unsigned __int8 QueueSize; | |
unsigned __int8 Timer2RelativeId; | |
}; | |
/* 301 */ | |
struct $82359CCE575330AAB08AF0894BC28AE0 | |
{ | |
unsigned __int8 ThreadType; | |
unsigned __int8 Timer2Inserted : 1; | |
unsigned __int8 Timer2Expiring : 1; | |
unsigned __int8 Timer2CancelPending : 1; | |
unsigned __int8 Timer2SetPending : 1; | |
unsigned __int8 Timer2Running : 1; | |
unsigned __int8 Timer2Disabled : 1; | |
unsigned __int8 Timer2ReservedFlags : 2; | |
unsigned __int8 ThreadControlFlags; | |
unsigned __int8 QueueReserved; | |
}; | |
/* 302 */ | |
struct $15D1686C1B6B91F828FF4FDCD9195D5F | |
{ | |
unsigned __int8 MutantType; | |
unsigned __int8 QueueControlFlags; | |
unsigned __int8 CycleProfiling : 1; | |
unsigned __int8 CounterProfiling : 1; | |
unsigned __int8 GroupScheduling : 1; | |
unsigned __int8 AffinitySet : 1; | |
unsigned __int8 Tagged : 1; | |
unsigned __int8 EnergyProfiling : 1; | |
unsigned __int8 SchedulerAssist : 1; | |
unsigned __int8 ThreadReservedControlFlags : 1; | |
unsigned __int8 DebugActive; | |
}; | |
/* 303 */ | |
struct $087A677B78B542EC5A7B75A6231DAD57 | |
{ | |
_BYTE gap0; | |
unsigned __int8 Abandoned : 1; | |
unsigned __int8 DisableIncrement : 1; | |
unsigned __int8 QueueReservedControlFlags : 6; | |
unsigned __int8 DpcActive; | |
unsigned __int8 ActiveDR7 : 1; | |
unsigned __int8 Instrumented : 1; | |
unsigned __int8 Minimal : 1; | |
unsigned __int8 Reserved4 : 2; | |
unsigned __int8 AltSyscall : 1; | |
unsigned __int8 UmsScheduled : 1; | |
unsigned __int8 UmsPrimary : 1; | |
}; | |
/* 304 */ | |
struct $4C0D29959C2537B70A4EE9FE3BDDA353 | |
{ | |
_BYTE gap0; | |
unsigned __int8 ThreadReserved; | |
_BYTE gap2; | |
unsigned __int8 MutantReserved; | |
}; | |
/* 305 */ | |
struct $4B94A638C9572C40F7312179A2B431F6 | |
{ | |
_BYTE gap0; | |
unsigned __int8 MutantSize; | |
}; | |
/* 306 */ | |
union $B3B51F8DEC5E51D465FABA568F2DB23D | |
{ | |
volatile int Lock; | |
int LockNV; | |
$08481D05807C14C022C64127DBCB0DC5 __s2; | |
$BDD1DEEA9085FB2031C94E38C028AF9F __s3; | |
$02F1E2651E9D26351CD44793F2F78E1F __s4; | |
$E9B6E411B508381891F0374539EA7718 __s5; | |
$82359CCE575330AAB08AF0894BC28AE0 __s6; | |
$15D1686C1B6B91F828FF4FDCD9195D5F __s7; | |
$087A677B78B542EC5A7B75A6231DAD57 __s8; | |
$4C0D29959C2537B70A4EE9FE3BDDA353 __s9; | |
$4B94A638C9572C40F7312179A2B431F6 __s10; | |
}; | |
/* 307 */ | |
struct _DISPATCHER_HEADER | |
{ | |
$B3B51F8DEC5E51D465FABA568F2DB23D ___u0; | |
int SignalState; | |
_LIST_ENTRY WaitListHead; | |
}; | |
/* 308 */ | |
struct _M128A | |
{ | |
unsigned __int64 Low; | |
__int64 High; | |
}; | |
/* 309 */ | |
struct _XSAVE_FORMAT | |
{ | |
unsigned __int16 ControlWord; | |
unsigned __int16 StatusWord; | |
unsigned __int8 TagWord; | |
unsigned __int8 Reserved1; | |
unsigned __int16 ErrorOpcode; | |
unsigned int ErrorOffset; | |
unsigned __int16 ErrorSelector; | |
unsigned __int16 Reserved2; | |
unsigned int DataOffset; | |
unsigned __int16 DataSelector; | |
unsigned __int16 Reserved3; | |
unsigned int MxCsr; | |
unsigned int MxCsr_Mask; | |
_M128A FloatRegisters[8]; | |
_M128A XmmRegisters[16]; | |
unsigned __int8 Reserved4[96]; | |
}; | |
/* 310 */ | |
struct $6FAEF29703B46FE98A6AEC7A76F7EDDE | |
{ | |
unsigned __int16 Weight; | |
unsigned __int16 MaxRate; | |
}; | |
/* 311 */ | |
union $2F2564D6633E78FA7F137D4A682FCAF0 | |
{ | |
unsigned int Value; | |
$6FAEF29703B46FE98A6AEC7A76F7EDDE __s1; | |
unsigned __int16 MinRate; | |
}; | |
/* 312 */ | |
struct $DD3BF4DB80F86D830756FEADC1CBB3C9 | |
{ | |
unsigned __int32 Type : 1; | |
unsigned __int32 Disabled : 1; | |
unsigned __int32 RankBias : 1; | |
unsigned __int32 Spare1 : 29; | |
}; | |
/* 313 */ | |
union $8299178FCCCC9A862FB25900C27DD66D | |
{ | |
unsigned int AllFlags; | |
$DD3BF4DB80F86D830756FEADC1CBB3C9 __s1; | |
}; | |
/* 314 */ | |
struct _KSCHEDULING_GROUP_POLICY | |
{ | |
$2F2564D6633E78FA7F137D4A682FCAF0 ___u0; | |
$8299178FCCCC9A862FB25900C27DD66D ___u1; | |
}; | |
/* 315 */ | |
struct _SINGLE_LIST_ENTRY | |
{ | |
_SINGLE_LIST_ENTRY *Next; | |
}; | |
/* 317 */ | |
struct $82623AFB470F8517B6D8F9E43441C7E1 | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Importance; | |
volatile unsigned __int16 Number; | |
}; | |
/* 318 */ | |
union $F4FC2570E6A2ADE009E800B0F5683360 | |
{ | |
unsigned int TargetInfoAsUlong; | |
$82623AFB470F8517B6D8F9E43441C7E1 __s1; | |
}; | |
/* 316 */ | |
struct _KDPC | |
{ | |
$F4FC2570E6A2ADE009E800B0F5683360 ___u0; | |
_SINGLE_LIST_ENTRY DpcListEntry; | |
unsigned __int64 ProcessorHistory; | |
void (__fastcall *DeferredRoutine)(_KDPC *, void *, void *, void *); | |
void *DeferredContext; | |
void *SystemArgument1; | |
void *SystemArgument2; | |
void *DpcData; | |
}; | |
/* 330 */ | |
union $17B81ADA4C5E97C599021AC19D2A6B6D | |
{ | |
_LIST_ENTRY SchedulingGroupList; | |
_LIST_ENTRY Sibling; | |
}; | |
/* 319 */ | |
struct _KSCHEDULING_GROUP | |
{ | |
_KSCHEDULING_GROUP_POLICY Policy; | |
unsigned int RelativeWeight; | |
unsigned int ChildMinRate; | |
unsigned int ChildMinWeight; | |
unsigned int ChildTotalWeight; | |
unsigned __int64 QueryHistoryTimeStamp; | |
__int64 NotificationCycles; | |
__int64 MaxQuotaLimitCycles; | |
volatile __int64 MaxQuotaCyclesRemaining; | |
$17B81ADA4C5E97C599021AC19D2A6B6D ___u9; | |
_KDPC *NotificationDpc; | |
_LIST_ENTRY ChildList; | |
_KSCHEDULING_GROUP *Parent; | |
__declspec(align(32)) _KSCB PerProcessor[1]; | |
}; | |
/* 321 */ | |
struct $D050A9FC11C9F62029640BC48E0C9117 | |
{ | |
_RTL_BALANCED_NODE *Left; | |
_RTL_BALANCED_NODE *Right; | |
}; | |
/* 322 */ | |
union $586CF573BC38D694E2ED87BF12D5709A | |
{ | |
_RTL_BALANCED_NODE *Children[2]; | |
$D050A9FC11C9F62029640BC48E0C9117 __s1; | |
}; | |
/* 323 */ | |
struct $424C8BBEF8F6C852886B4C6E806B5DB0 | |
{ | |
unsigned __int8 Red : 1; | |
}; | |
/* 324 */ | |
struct $D962A830273E2DCC2CD9A73DF8740260 | |
{ | |
unsigned __int8 Balance : 2; | |
}; | |
/* 325 */ | |
union $B32DFA1BE0A79F1CA05B27AD6FA30444 | |
{ | |
$424C8BBEF8F6C852886B4C6E806B5DB0 __s0; | |
$D962A830273E2DCC2CD9A73DF8740260 __s1; | |
unsigned __int64 ParentValue; | |
}; | |
/* 320 */ | |
struct _RTL_BALANCED_NODE | |
{ | |
$586CF573BC38D694E2ED87BF12D5709A ___u0; | |
$B32DFA1BE0A79F1CA05B27AD6FA30444 ___u1; | |
}; | |
/* 326 */ | |
struct $7D93978C745EB1C2D28075BAF55422B4 | |
{ | |
unsigned __int8 Encoded : 1; | |
}; | |
/* 327 */ | |
union $8E914957894DD2BA1BC26273A9B0921D | |
{ | |
$7D93978C745EB1C2D28075BAF55422B4 __s0; | |
_RTL_BALANCED_NODE *Min; | |
}; | |
/* 328 */ | |
struct _RTL_RB_TREE | |
{ | |
_RTL_BALANCED_NODE *Root; | |
$8E914957894DD2BA1BC26273A9B0921D ___u1; | |
}; | |
/* 329 */ | |
struct _KSCB | |
{ | |
unsigned __int64 GenerationCycles; | |
unsigned __int64 MinQuotaCycleTarget; | |
unsigned __int64 MaxQuotaCycleTarget; | |
unsigned __int64 RankCycleTarget; | |
unsigned __int64 LongTermCycles; | |
unsigned __int64 LastReportedCycles; | |
volatile unsigned __int64 OverQuotaHistory; | |
unsigned __int64 ReadyTime; | |
unsigned __int64 InsertTime; | |
_LIST_ENTRY PerProcessorList; | |
_RTL_BALANCED_NODE QueueNode; | |
unsigned __int8 Inserted : 1; | |
unsigned __int8 MaxOverQuota : 1; | |
unsigned __int8 MinOverQuota : 1; | |
unsigned __int8 RankBias : 1; | |
unsigned __int8 SoftCap : 1; | |
unsigned __int8 ShareRankOwner : 1; | |
unsigned __int8 Spare1 : 2; | |
unsigned __int8 Depth; | |
unsigned __int16 ReadySummary; | |
unsigned int Rank; | |
volatile unsigned int *ShareRank; | |
volatile unsigned int OwnerShareRank; | |
_LIST_ENTRY ReadyListHead[16]; | |
_RTL_RB_TREE ChildScbQueue; | |
_KSCB *Parent; | |
_KSCB *Root; | |
}; | |
/* 331 */ | |
struct $6E3F869BADF0AE2AE79CB2D8108FC64A | |
{ | |
unsigned __int8 State : 3; | |
unsigned __int8 Affinity : 1; | |
unsigned __int8 Priority : 1; | |
unsigned __int8 Apc : 1; | |
unsigned __int8 UserApc : 1; | |
unsigned __int8 Alert : 1; | |
}; | |
/* 332 */ | |
union _KWAIT_STATUS_REGISTER | |
{ | |
unsigned __int8 Flags; | |
$6E3F869BADF0AE2AE79CB2D8108FC64A __s1; | |
}; | |
/* 333 */ | |
union $0A5B921805314784846D9B1A1C65E0B8 | |
{ | |
char PreviousMode; | |
unsigned __int8 InterruptRetpolineState; | |
}; | |
/* 334 */ | |
union $E1E85BDFF120969F243E40972FB7AAD0 | |
{ | |
unsigned __int8 FaultIndicator; | |
unsigned __int8 NmiMsrIbrs; | |
}; | |
/* 335 */ | |
union $8F6355D5F60D214191165731D383CB8C | |
{ | |
unsigned __int64 GsBase; | |
unsigned __int64 GsSwap; | |
}; | |
/* 336 */ | |
union $7C5DE26D70D5BE3946A1648545D65AE0 | |
{ | |
unsigned __int64 FaultAddress; | |
unsigned __int64 ContextRecord; | |
}; | |
/* 337 */ | |
union $70C7D383085E14057A40B90B0C71A2A2 | |
{ | |
unsigned __int64 ErrorCode; | |
unsigned __int64 ExceptionFrame; | |
}; | |
/* 338 */ | |
struct _KTRAP_FRAME | |
{ | |
unsigned __int64 P1Home; | |
unsigned __int64 P2Home; | |
unsigned __int64 P3Home; | |
unsigned __int64 P4Home; | |
unsigned __int64 P5; | |
$0A5B921805314784846D9B1A1C65E0B8 ___u5; | |
unsigned __int8 PreviousIrql; | |
$E1E85BDFF120969F243E40972FB7AAD0 ___u7; | |
unsigned __int8 ExceptionActive; | |
unsigned int MxCsr; | |
unsigned __int64 Rax; | |
unsigned __int64 Rcx; | |
unsigned __int64 Rdx; | |
unsigned __int64 R8; | |
unsigned __int64 R9; | |
unsigned __int64 R10; | |
unsigned __int64 R11; | |
$8F6355D5F60D214191165731D383CB8C ___u17; | |
_M128A Xmm0; | |
_M128A Xmm1; | |
_M128A Xmm2; | |
_M128A Xmm3; | |
_M128A Xmm4; | |
_M128A Xmm5; | |
$7C5DE26D70D5BE3946A1648545D65AE0 ___u24; | |
unsigned __int64 Dr0; | |
unsigned __int64 Dr1; | |
unsigned __int64 Dr2; | |
unsigned __int64 Dr3; | |
unsigned __int64 Dr6; | |
unsigned __int64 Dr7; | |
unsigned __int64 DebugControl; | |
unsigned __int64 LastBranchToRip; | |
unsigned __int64 LastBranchFromRip; | |
unsigned __int64 LastExceptionToRip; | |
unsigned __int64 LastExceptionFromRip; | |
unsigned __int16 SegDs; | |
unsigned __int16 SegEs; | |
unsigned __int16 SegFs; | |
unsigned __int16 SegGs; | |
unsigned __int64 TrapFrame; | |
unsigned __int64 Rbx; | |
unsigned __int64 Rdi; | |
unsigned __int64 Rsi; | |
unsigned __int64 Rbp; | |
$70C7D383085E14057A40B90B0C71A2A2 ___u45; | |
unsigned __int64 Rip; | |
unsigned __int16 SegCs; | |
unsigned __int8 Fill0; | |
unsigned __int8 Logging; | |
unsigned __int16 Fill1[2]; | |
unsigned int EFlags; | |
unsigned int Fill2; | |
unsigned __int64 Rsp; | |
unsigned __int16 SegSs; | |
unsigned __int16 Fill3; | |
unsigned int Fill4; | |
}; | |
/* 339 */ | |
struct _KAFFINITY_EX | |
{ | |
unsigned __int16 Count; | |
unsigned __int16 Size; | |
unsigned int Reserved; | |
unsigned __int64 Bitmap[20]; | |
}; | |
/* 340 */ | |
struct $0C2F1B0043396E6CDBDB29D72BF92FF3 | |
{ | |
unsigned __int8 ExecuteDisable : 1; | |
unsigned __int8 ExecuteEnable : 1; | |
unsigned __int8 DisableThunkEmulation : 1; | |
unsigned __int8 Permanent : 1; | |
unsigned __int8 ExecuteDispatchEnable : 1; | |
unsigned __int8 ImageDispatchEnable : 1; | |
unsigned __int8 DisableExceptionChainValidation : 1; | |
unsigned __int8 Spare : 1; | |
}; | |
/* 341 */ | |
union _KEXECUTE_OPTIONS | |
{ | |
$0C2F1B0043396E6CDBDB29D72BF92FF3 __s0; | |
volatile unsigned __int8 ExecuteOptions; | |
unsigned __int8 ExecuteOptionsNV; | |
}; | |
/* 342 */ | |
struct $1855273A941156425EBA8D11C2577346 | |
{ | |
unsigned __int32 State : 3; | |
unsigned __int32 StackCount : 29; | |
}; | |
/* 343 */ | |
volatile union _KSTACK_COUNT | |
{ | |
int Value; | |
$1855273A941156425EBA8D11C2577346 __s1; | |
}; | |
/* 344 */ | |
struct $96CD4C94BAF617C0075F34B41386C5E3 | |
{ | |
unsigned __int32 AutoAlignment : 1; | |
unsigned __int32 DisableBoost : 1; | |
unsigned __int32 DisableQuantum : 1; | |
unsigned __int32 DeepFreeze : 1; | |
unsigned __int32 TimerVirtualization : 1; | |
unsigned __int32 CheckStackExtents : 1; | |
unsigned __int32 CacheIsolationEnabled : 1; | |
unsigned __int32 PpmPolicy : 3; | |
unsigned __int32 VaSpaceDeleted : 1; | |
unsigned __int32 ReservedFlags : 21; | |
}; | |
/* 345 */ | |
union $BE800DC54F7475222DC1CD5AC3634B93 | |
{ | |
$96CD4C94BAF617C0075F34B41386C5E3 __s0; | |
volatile int ProcessFlags; | |
}; | |
/* 346 */ | |
struct _KPROCESS | |
{ | |
_DISPATCHER_HEADER Header; | |
_LIST_ENTRY ProfileListHead; | |
unsigned __int64 DirectoryTableBase; | |
_LIST_ENTRY ThreadListHead; | |
unsigned int ProcessLock; | |
unsigned int ProcessTimerDelay; | |
unsigned __int64 DeepFreezeStartTime; | |
_KAFFINITY_EX Affinity; | |
unsigned __int64 AffinityPadding[12]; | |
_LIST_ENTRY ReadyListHead; | |
_SINGLE_LIST_ENTRY SwapListEntry; | |
volatile _KAFFINITY_EX ActiveProcessors; | |
unsigned __int64 ActiveProcessorsPadding[12]; | |
$BE800DC54F7475222DC1CD5AC3634B93 ___u13; | |
unsigned int ActiveGroupsMask; | |
char BasePriority; | |
char QuantumReset; | |
char Visited; | |
_KEXECUTE_OPTIONS Flags; | |
unsigned __int16 ThreadSeed[20]; | |
unsigned __int16 ThreadSeedPadding[12]; | |
unsigned __int16 IdealProcessor[20]; | |
unsigned __int16 IdealProcessorPadding[12]; | |
unsigned __int16 IdealNode[20]; | |
unsigned __int16 IdealNodePadding[12]; | |
unsigned __int16 IdealGlobalNode; | |
unsigned __int16 Spare1; | |
volatile _KSTACK_COUNT StackCount; | |
_LIST_ENTRY ProcessListEntry; | |
unsigned __int64 CycleTime; | |
unsigned __int64 ContextSwitches; | |
_KSCHEDULING_GROUP *SchedulingGroup; | |
unsigned int FreezeCount; | |
unsigned int KernelTime; | |
unsigned int UserTime; | |
unsigned int ReadyTime; | |
unsigned __int64 UserDirectoryTableBase; | |
unsigned __int8 AddressPolicy; | |
unsigned __int8 Spare2[71]; | |
void *InstrumentationCallback; | |
union | |
{ | |
unsigned __int64 SecureHandle; | |
struct | |
{ | |
unsigned __int64 SecureProcess : 1; | |
unsigned __int64 Unused : 1; | |
} Flags; | |
} SecureState; | |
unsigned __int64 KernelWaitTime; | |
unsigned __int64 UserWaitTime; | |
unsigned __int64 EndPadding[8]; | |
}; | |
/* 347 */ | |
struct $B5CD178F87BE184A5118D4920C61026E | |
{ | |
unsigned __int8 KernelApcInProgress : 1; | |
unsigned __int8 SpecialApcInProgress : 1; | |
}; | |
/* 348 */ | |
union $0F17BA0A224C7411EC8484776E91B0D7 | |
{ | |
unsigned __int8 InProgressFlags; | |
$B5CD178F87BE184A5118D4920C61026E __s1; | |
}; | |
/* 349 */ | |
struct $A85FE12DE136A601A0C0FDA7C2290F98 | |
{ | |
unsigned __int8 SpecialUserApcPending : 1; | |
unsigned __int8 UserApcPending : 1; | |
}; | |
/* 350 */ | |
union $A775162FAF44C83B95A75F4232ACBC20 | |
{ | |
unsigned __int8 UserApcPendingAll; | |
$A85FE12DE136A601A0C0FDA7C2290F98 __s1; | |
}; | |
/* 351 */ | |
struct __declspec(align(8)) _KAPC_STATE | |
{ | |
_LIST_ENTRY ApcListHead[2]; | |
_KPROCESS *Process; | |
$0F17BA0A224C7411EC8484776E91B0D7 ___u2; | |
unsigned __int8 KernelApcPending; | |
$A775162FAF44C83B95A75F4232ACBC20 ___u4; | |
}; | |
/* 925 */ | |
struct $BF47041B248301F87E570BEB78208C5A | |
{ | |
unsigned __int32 AutoBoostActive : 1; | |
unsigned __int32 ReadyTransition : 1; | |
unsigned __int32 WaitNext : 1; | |
unsigned __int32 SystemAffinityActive : 1; | |
unsigned __int32 Alertable : 1; | |
unsigned __int32 UserStackWalkActive : 1; | |
unsigned __int32 ApcInterruptRequest : 1; | |
unsigned __int32 QuantumEndMigrate : 1; | |
unsigned __int32 UmsDirectedSwitchEnable : 1; | |
unsigned __int32 TimerActive : 1; | |
unsigned __int32 SystemThread : 1; | |
unsigned __int32 ProcessDetachActive : 1; | |
unsigned __int32 CalloutActive : 1; | |
unsigned __int32 ScbReadyQueue : 1; | |
unsigned __int32 ApcQueueable : 1; | |
unsigned __int32 ReservedStackInUse : 1; | |
unsigned __int32 UmsPerformingSyscall : 1; | |
unsigned __int32 TimerSuspended : 1; | |
unsigned __int32 SuspendedWaitMode : 1; | |
unsigned __int32 SuspendSchedulerApcWait : 1; | |
unsigned __int32 CetUserShadowStack : 1; | |
unsigned __int32 BypassProcessFreeze : 1; | |
unsigned __int32 Reserved : 10; | |
unsigned __int32 ThreadFlagsSpare : 2; | |
}; | |
/* 926 */ | |
union $FE3068A677907C0AB8F4C09953461BD9 | |
{ | |
$BF47041B248301F87E570BEB78208C5A __s0; | |
int MiscFlags; | |
}; | |
/* 929 */ | |
struct $8D995CA2A9FB9A9BA87CDEAEE28C5B38 | |
{ | |
unsigned __int8 UserHeteroCpuPolicy : 7; | |
unsigned __int8 ExplicitSystemHeteroCpuPolicy : 1; | |
unsigned __int8 RunningNonRetpolineCode : 1; | |
unsigned __int8 SpecCtrlSpare : 7; | |
}; | |
/* 930 */ | |
struct $17B5D64BD2FF62CE3CACC85A250970C4 | |
{ | |
_BYTE gap0; | |
unsigned __int8 SpecCtrl; | |
}; | |
/* 931 */ | |
union $32A17EC32631DFD6796C9D496FD99967 | |
{ | |
$8D995CA2A9FB9A9BA87CDEAEE28C5B38 __s0; | |
$17B5D64BD2FF62CE3CACC85A250970C4 __s1; | |
}; | |
/* 932 */ | |
struct $27C39FE7D46E5A4FF9CC918391431252 | |
{ | |
unsigned __int8 ApcStateFill[43]; | |
char Priority; | |
unsigned int UserIdealProcessor; | |
}; | |
/* 933 */ | |
union $5C0BDA7A94BD1A3DE1D07DAD6EADD29C | |
{ | |
_KAPC_STATE ApcState; | |
$27C39FE7D46E5A4FF9CC918391431252 __s1; | |
}; | |
/* 934 */ | |
union $C0EA9626315ADC08889F21CDCAE6905D | |
{ | |
_LIST_ENTRY WaitListEntry; | |
_SINGLE_LIST_ENTRY SwapListEntry; | |
}; | |
/* 356 */ | |
struct $B950AFB169DC87688B328897744C612F | |
{ | |
unsigned int LowPart; | |
unsigned int HighPart; | |
}; | |
/* 357 */ | |
union _ULARGE_INTEGER | |
{ | |
$B950AFB169DC87688B328897744C612F __s0; | |
struct | |
{ | |
unsigned int LowPart; | |
unsigned int HighPart; | |
} u; | |
unsigned __int64 QuadPart; | |
}; | |
/* 358 */ | |
struct _KTIMER | |
{ | |
_DISPATCHER_HEADER Header; | |
_ULARGE_INTEGER DueTime; | |
_LIST_ENTRY TimerListEntry; | |
_KDPC *Dpc; | |
unsigned __int16 Processor; | |
unsigned __int16 TimerType; | |
unsigned int Period; | |
}; | |
/* 354 */ | |
union $A23FFFC5E5BB669480A739F4255F7B35 | |
{ | |
_KTHREAD *Thread; | |
_KQUEUE *NotificationQueue; | |
}; | |
/* 355 */ | |
struct _KWAIT_BLOCK | |
{ | |
_LIST_ENTRY WaitListEntry; | |
unsigned __int8 WaitType; | |
volatile unsigned __int8 BlockState; | |
unsigned __int16 WaitKey; | |
int SpareLong; | |
$A23FFFC5E5BB669480A739F4255F7B35 ___u5; | |
void *Object; | |
void *SparePtr; | |
}; | |
/* 935 */ | |
struct $6F75370A431B7BFF0B7D9AAB2F24EE1A | |
{ | |
unsigned __int8 WaitBlockFill4[20]; | |
unsigned int ContextSwitches; | |
}; | |
/* 936 */ | |
struct $B3BEF7BDBC168283DEA09510CE83D7F4 | |
{ | |
unsigned __int8 WaitBlockFill5[68]; | |
volatile unsigned __int8 State; | |
char Spare13; | |
unsigned __int8 WaitIrql; | |
char WaitMode; | |
}; | |
/* 937 */ | |
struct $0625A4ED2E94AAC2B93F9283FDDC7823 | |
{ | |
unsigned __int8 WaitBlockFill6[116]; | |
unsigned int WaitTime; | |
}; | |
/* 938 */ | |
struct $7DCC36E0B5D486429C75DF67089ED0A4 | |
{ | |
unsigned __int8 WaitBlockFill7[164]; | |
__int16 KernelApcDisable; | |
__int16 SpecialApcDisable; | |
}; | |
/* 939 */ | |
struct $89037DCE3F49E69CF6B8C50FA0C75ED6 | |
{ | |
unsigned __int8 WaitBlockFill8[40]; | |
_KTHREAD_COUNTERS *ThreadCounters; | |
}; | |
/* 940 */ | |
struct $EB9D278A5EABC9A7C2C77664A9F61555 | |
{ | |
unsigned __int8 WaitBlockFill9[88]; | |
_XSTATE_SAVE *XStateSave; | |
}; | |
/* 941 */ | |
struct $140DB8AD990C2662C5C5F9B8A33FB5CC | |
{ | |
unsigned __int8 WaitBlockFill10[136]; | |
void *volatile Win32Thread; | |
_BYTE gap90[20]; | |
unsigned int CombinedApcDisable; | |
}; | |
/* 942 */ | |
struct $703CE096A824E8E9F4C93072BAC7DF8D | |
{ | |
unsigned __int8 WaitBlockFill11[176]; | |
_UMS_CONTROL_BLOCK *Ucb; | |
_KUMS_CONTEXT_HEADER *volatile Uch; | |
}; | |
/* 943 */ | |
union $AF5AD6FB3D77642AF799D10D5AB8B86B | |
{ | |
_KWAIT_BLOCK WaitBlock[4]; | |
$6F75370A431B7BFF0B7D9AAB2F24EE1A __s1; | |
$B3BEF7BDBC168283DEA09510CE83D7F4 __s2; | |
$0625A4ED2E94AAC2B93F9283FDDC7823 __s3; | |
$7DCC36E0B5D486429C75DF67089ED0A4 __s4; | |
$89037DCE3F49E69CF6B8C50FA0C75ED6 __s5; | |
$EB9D278A5EABC9A7C2C77664A9F61555 __s6; | |
$140DB8AD990C2662C5C5F9B8A33FB5CC __s7; | |
$703CE096A824E8E9F4C93072BAC7DF8D __s8; | |
}; | |
/* 944 */ | |
struct $7A246959401267273691882055157DF5 | |
{ | |
unsigned __int32 BamQosLevel : 8; | |
unsigned __int32 ThreadFlags2Reserved : 24; | |
}; | |
/* 945 */ | |
union $FD30E25BB714FCAE4C3E1F0F36AEF239 | |
{ | |
volatile int ThreadFlags2; | |
$7A246959401267273691882055157DF5 __s1; | |
}; | |
/* 946 */ | |
struct $A66FD9C9E5CAEF30185BA12A0EDC69A5 | |
{ | |
unsigned __int32 NextProcessorNumber : 31; | |
unsigned __int32 SharedReadyQueue : 1; | |
}; | |
/* 947 */ | |
union $40060A4BFE81911F6AA294A29A40B471 | |
{ | |
volatile unsigned int NextProcessor; | |
$A66FD9C9E5CAEF30185BA12A0EDC69A5 __s1; | |
}; | |
/* 384 */ | |
struct _GROUP_AFFINITY | |
{ | |
unsigned __int64 Mask; | |
unsigned __int16 Group; | |
unsigned __int16 Reserved[3]; | |
}; | |
/* 948 */ | |
struct $B6CB51A1DA3434545E27A8C20E08B827 | |
{ | |
unsigned __int8 UserAffinityFill[10]; | |
char PreviousMode; | |
char BasePriority; | |
char PriorityDecrement; | |
unsigned __int8 Preempted; | |
unsigned __int8 AdjustReason; | |
char AdjustIncrement; | |
}; | |
/* 949 */ | |
struct $775302594AD818E82139DBA2B203CCC9 | |
{ | |
_BYTE gap0[12]; | |
unsigned __int8 ForegroundBoost : 4; | |
unsigned __int8 UnusualBoost : 4; | |
}; | |
/* 950 */ | |
union $980EF19D63EC4061F8B5EDA84CE39A42 | |
{ | |
_GROUP_AFFINITY UserAffinity; | |
$B6CB51A1DA3434545E27A8C20E08B827 __s1; | |
$775302594AD818E82139DBA2B203CCC9 __s2; | |
}; | |
/* 951 */ | |
struct $858DB5840CCD0218D6D1AB3973B9F998 | |
{ | |
unsigned __int8 AffinityFill[10]; | |
unsigned __int8 ApcStateIndex; | |
unsigned __int8 WaitBlockCount; | |
unsigned int IdealProcessor; | |
}; | |
/* 952 */ | |
union $C70B94FEA40DE135AD1206484BEA7BB3 | |
{ | |
_GROUP_AFFINITY Affinity; | |
$858DB5840CCD0218D6D1AB3973B9F998 __s1; | |
}; | |
/* 953 */ | |
struct $D86763B09EF7CE5906B402ED884C55FE | |
{ | |
unsigned __int8 SavedApcStateFill[43]; | |
unsigned __int8 WaitReason; | |
char SuspendCount; | |
char Saturation; | |
unsigned __int16 SListFaultCount; | |
}; | |
/* 954 */ | |
union $40B2B82BA5C60C21B0F281989A5698FD | |
{ | |
_KAPC_STATE SavedApcState; | |
$D86763B09EF7CE5906B402ED884C55FE __s1; | |
}; | |
/* 386 */ | |
struct $A4AAEBE17064129B4EF2F6E6989DD381 | |
{ | |
void (__fastcall *KernelRoutine)(_KAPC *, void (__fastcall **)(void *, void *, void *), void **, void **, void **); | |
void (__fastcall *RundownRoutine)(_KAPC *); | |
void (__fastcall *NormalRoutine)(void *, void *, void *); | |
}; | |
/* 387 */ | |
union $3574815F2B51B603889BF93131BDB59F | |
{ | |
$A4AAEBE17064129B4EF2F6E6989DD381 __s0; | |
void *Reserved[3]; | |
}; | |
/* 385 */ | |
struct __declspec(align(8)) _KAPC | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 SpareByte0; | |
unsigned __int8 Size; | |
unsigned __int8 SpareByte1; | |
unsigned int SpareLong0; | |
_KTHREAD *Thread; | |
_LIST_ENTRY ApcListEntry; | |
$3574815F2B51B603889BF93131BDB59F ___u7; | |
void *NormalContext; | |
void *SystemArgument1; | |
void *SystemArgument2; | |
char ApcStateIndex; | |
char ApcMode; | |
unsigned __int8 Inserted; | |
}; | |
/* 955 */ | |
struct $5156F59DA89B43E5E0F57279B28160E6 | |
{ | |
unsigned __int8 SchedulerApcFill0[1]; | |
unsigned __int8 ResourceIndex; | |
}; | |
/* 956 */ | |
struct $B7D851223C17C6BA83CF7063C2464C70 | |
{ | |
unsigned __int8 SchedulerApcFill1[3]; | |
unsigned __int8 QuantumReset; | |
unsigned int KernelTime; | |
}; | |
/* 957 */ | |
struct $C1E4F7AAF58438506F0E120CBA04DB73 | |
{ | |
unsigned __int8 SchedulerApcFill3[64]; | |
_KPRCB *volatile WaitPrcb; | |
void *LegoData; | |
}; | |
/* 958 */ | |
struct $3EC6920169D450C7BC757B6CC342656A | |
{ | |
unsigned __int8 SchedulerApcFill5[83]; | |
unsigned __int8 CallbackNestingLevel; | |
unsigned int UserTime; | |
}; | |
/* 959 */ | |
union $F53D2521132C5FB5B78AA293BD42D6C1 | |
{ | |
_KAPC SchedulerApc; | |
$5156F59DA89B43E5E0F57279B28160E6 __s1; | |
$B7D851223C17C6BA83CF7063C2464C70 __s2; | |
unsigned __int8 SchedulerApcFill2[4]; | |
$C1E4F7AAF58438506F0E120CBA04DB73 __s4; | |
unsigned __int8 SchedulerApcFill4[72]; | |
$3EC6920169D450C7BC757B6CC342656A __s6; | |
}; | |
/* 375 */ | |
struct _KEVENT | |
{ | |
_DISPATCHER_HEADER Header; | |
}; | |
/* 960 */ | |
struct $6205BA8A9DA1EFBA9FB251BE9BBF1142 | |
{ | |
_SINGLE_LIST_ENTRY ForegroundDpcStackListEntry; | |
unsigned __int64 InGlobalForegroundList; | |
}; | |
/* 961 */ | |
union $764F9978E1FEBBF5EAB1C8D6540014E0 | |
{ | |
_LIST_ENTRY GlobalForegroundListEntry; | |
$6205BA8A9DA1EFBA9FB251BE9BBF1142 __s1; | |
}; | |
/* 962 */ | |
struct $512ADB7001AF5792636BE2A0E143DFD4 | |
{ | |
unsigned __int32 ThreadFlags3Reserved : 8; | |
unsigned __int32 PpmPolicy : 2; | |
unsigned __int32 ThreadFlags3Reserved2 : 22; | |
}; | |
/* 963 */ | |
union $8B91D677343EBB10C4C14A08C4C4E56C | |
{ | |
volatile int ThreadFlags3; | |
$512ADB7001AF5792636BE2A0E143DFD4 __s1; | |
}; | |
/* 964 */ | |
struct $9D2E353005429669631FD9BAC502CA13 | |
{ | |
_SINGLE_LIST_ENTRY UpdateVpThreadPriorityDpcStackListEntry; | |
unsigned __int64 InGlobalUpdateVpThreadPriorityList; | |
}; | |
/* 965 */ | |
union $763B5E30575F0D921E625DB4E9EF089A | |
{ | |
_LIST_ENTRY GlobalUpdateVpThreadPriorityListEntry; | |
$9D2E353005429669631FD9BAC502CA13 __s1; | |
}; | |
/* 352 */ | |
struct _KTHREAD | |
{ | |
_DISPATCHER_HEADER Header; | |
void *SListFaultAddress; | |
unsigned __int64 QuantumTarget; | |
void *InitialStack; | |
void *volatile StackLimit; | |
void *StackBase; | |
unsigned __int64 ThreadLock; | |
volatile unsigned __int64 CycleTime; | |
unsigned int CurrentRunTime; | |
unsigned int ExpectedRunTime; | |
void *KernelStack; | |
_XSAVE_FORMAT *StateSaveArea; | |
_KSCHEDULING_GROUP *volatile SchedulingGroup; | |
_KWAIT_STATUS_REGISTER WaitRegister; | |
volatile unsigned __int8 Running; | |
unsigned __int8 Alerted[2]; | |
$FE3068A677907C0AB8F4C09953461BD9 ___u16; | |
volatile unsigned __int8 Tag; | |
unsigned __int8 SystemHeteroCpuPolicy; | |
$32A17EC32631DFD6796C9D496FD99967 ___u20; | |
unsigned int SystemCallNumber; | |
unsigned int ReadyTime; | |
void *FirstArgument; | |
_KTRAP_FRAME *TrapFrame; | |
$5C0BDA7A94BD1A3DE1D07DAD6EADD29C ___u25; | |
volatile __int64 WaitStatus; | |
_KWAIT_BLOCK *WaitBlockList; | |
$C0EA9626315ADC08889F21CDCAE6905D ___u28; | |
_DISPATCHER_HEADER *volatile Queue; | |
void *Teb; | |
unsigned __int64 RelativeTimerBias; | |
_KTIMER Timer; | |
$AF5AD6FB3D77642AF799D10D5AB8B86B ___u33; | |
$FD30E25BB714FCAE4C3E1F0F36AEF239 ___u34; | |
unsigned int Spare21; | |
_LIST_ENTRY QueueListEntry; | |
$40060A4BFE81911F6AA294A29A40B471 ___u37; | |
int QueuePriority; | |
_KPROCESS *Process; | |
$980EF19D63EC4061F8B5EDA84CE39A42 ___u40; | |
unsigned __int64 AffinityVersion; | |
$C70B94FEA40DE135AD1206484BEA7BB3 ___u42; | |
unsigned __int64 NpxState; | |
$40B2B82BA5C60C21B0F281989A5698FD ___u44; | |
$F53D2521132C5FB5B78AA293BD42D6C1 ___u45; | |
_KEVENT SuspendEvent; | |
_LIST_ENTRY ThreadListEntry; | |
_LIST_ENTRY MutantListHead; | |
unsigned __int8 AbEntrySummary; | |
unsigned __int8 AbWaitEntryCount; | |
unsigned __int8 AbAllocationRegionCount; | |
char SystemPriority; | |
unsigned int SecureThreadCookie; | |
_KLOCK_ENTRY *LockEntries; | |
_SINGLE_LIST_ENTRY PropagateBoostsEntry; | |
_SINGLE_LIST_ENTRY IoSelfBoostsEntry; | |
unsigned __int8 PriorityFloorCounts[16]; | |
unsigned __int8 PriorityFloorCountsReserved[16]; | |
unsigned int PriorityFloorSummary; | |
volatile int AbCompletedIoBoostCount; | |
volatile int AbCompletedIoQoSBoostCount; | |
volatile __int16 KeReferenceCount; | |
unsigned __int8 AbOrphanedEntrySummary; | |
unsigned __int8 AbOwnedEntryCount; | |
unsigned int ForegroundLossTime; | |
$764F9978E1FEBBF5EAB1C8D6540014E0 ___u66; | |
__int64 ReadOperationCount; | |
__int64 WriteOperationCount; | |
__int64 OtherOperationCount; | |
__int64 ReadTransferCount; | |
__int64 WriteTransferCount; | |
__int64 OtherTransferCount; | |
_KSCB *QueuedScb; | |
volatile unsigned int ThreadTimerDelay; | |
$8B91D677343EBB10C4C14A08C4C4E56C ___u75; | |
unsigned __int64 TracingPrivate[1]; | |
void *SchedulerAssist; | |
void *volatile AbWaitObject; | |
unsigned int ReservedPreviousReadyTimeValue; | |
unsigned __int64 KernelWaitTime; | |
unsigned __int64 UserWaitTime; | |
$763B5E30575F0D921E625DB4E9EF089A ___u82; | |
int SchedulerAssistPriorityFloor; | |
unsigned int Spare28; | |
unsigned __int64 EndPadding[5]; | |
}; | |
/* 353 */ | |
struct _KQUEUE | |
{ | |
_DISPATCHER_HEADER Header; | |
_LIST_ENTRY EntryListHead; | |
volatile unsigned int CurrentCount; | |
unsigned int MaximumCount; | |
_LIST_ENTRY ThreadListHead; | |
}; | |
/* 360 */ | |
struct _COUNTER_READING | |
{ | |
_HARDWARE_COUNTER_TYPE Type; | |
unsigned int Index; | |
unsigned __int64 Start; | |
unsigned __int64 Total; | |
}; | |
/* 362 */ | |
struct _KTHREAD_COUNTERS | |
{ | |
unsigned __int64 WaitReasonBitMap; | |
_THREAD_PERFORMANCE_DATA *UserData; | |
unsigned int Flags; | |
unsigned int ContextSwitches; | |
unsigned __int64 CycleTimeBias; | |
unsigned __int64 HardwareCounters; | |
_COUNTER_READING HwCounter[16]; | |
}; | |
/* 366 */ | |
struct _XSTATE_CONTEXT | |
{ | |
unsigned __int64 Mask; | |
unsigned int Length; | |
unsigned int Reserved1; | |
_XSAVE_AREA *Area; | |
void *Buffer; | |
}; | |
/* 363 */ | |
struct _XSTATE_SAVE | |
{ | |
_XSTATE_SAVE *Prev; | |
_KTHREAD *Thread; | |
unsigned __int8 Level; | |
_XSTATE_CONTEXT XStateContext; | |
}; | |
/* 376 */ | |
struct __unaligned __declspec(align(4)) $A9734B1B3F068F83F19CCFB3E51D12D3 | |
{ | |
_KQUEUE *UmsAssociatedQueue; | |
_LIST_ENTRY *UmsQueueListEntry; | |
_KEVENT UmsWaitEvent; | |
void *StagingArea; | |
unsigned __int32 UmsPrimaryDeliveredContext : 1; | |
unsigned __int32 UmsAssociatedQueueUsed : 1; | |
unsigned __int32 UmsThreadParked : 1; | |
}; | |
/* 377 */ | |
struct $D975DC4EA90AE2F30BFF6785FAE044E1 | |
{ | |
_BYTE gap0[48]; | |
unsigned int UmsFlags; | |
}; | |
/* 378 */ | |
union $BEB08D3847ADDB66C021C3B9BE84DEDE | |
{ | |
_KQUEUE UmsQueue; | |
$A9734B1B3F068F83F19CCFB3E51D12D3 __s1; | |
$D975DC4EA90AE2F30BFF6785FAE044E1 __s2; | |
}; | |
/* 379 */ | |
struct _UMS_CONTROL_BLOCK | |
{ | |
_RTL_UMS_CONTEXT *UmsContext; | |
_SINGLE_LIST_ENTRY *CompletionListEntry; | |
_KEVENT *CompletionListEvent; | |
unsigned int ServiceSequenceNumber; | |
$BEB08D3847ADDB66C021C3B9BE84DEDE ___u4; | |
_LIST_ENTRY QueueEntry; | |
_RTL_UMS_CONTEXT *YieldingUmsContext; | |
void *YieldingParam; | |
void *UmsTeb; | |
}; | |
/* 381 */ | |
struct $6C44F11E89E9D437446E352FCF63E4B7 | |
{ | |
unsigned __int64 Volatile : 1; | |
unsigned __int64 Reserved : 63; | |
}; | |
/* 382 */ | |
union $96B2EC5290A364024CF1710EDC989DAA | |
{ | |
$6C44F11E89E9D437446E352FCF63E4B7 __s0; | |
unsigned __int64 Flags; | |
}; | |
/* 383 */ | |
struct _KUMS_CONTEXT_HEADER | |
{ | |
unsigned __int64 P1Home; | |
unsigned __int64 P2Home; | |
unsigned __int64 P3Home; | |
unsigned __int64 P4Home; | |
void *StackTop; | |
unsigned __int64 StackSize; | |
unsigned __int64 RspOffset; | |
unsigned __int64 Rip; | |
_XSAVE_FORMAT *FltSave; | |
$96B2EC5290A364024CF1710EDC989DAA ___u9; | |
_KTRAP_FRAME *TrapFrame; | |
_KEXCEPTION_FRAME *ExceptionFrame; | |
_KTHREAD *SourceThread; | |
unsigned __int64 Return; | |
}; | |
/* 910 */ | |
struct $77895C0986AC25977C4D7841AB2A3C85 | |
{ | |
unsigned __int8 PendingTick : 1; | |
unsigned __int8 PendingBackupTick : 1; | |
}; | |
/* 911 */ | |
union $75567B324E45BF40FCCFA8B626A1AAD9 | |
{ | |
unsigned __int8 PendingTickFlags; | |
$77895C0986AC25977C4D7841AB2A3C85 __s1; | |
}; | |
/* 912 */ | |
struct $765B7FFCC4FB01A5AB0EE4EE9D978908 | |
{ | |
unsigned __int8 CpuStepping; | |
unsigned __int8 CpuModel; | |
}; | |
/* 913 */ | |
union $D5CFCF4BC71A43326E732C53C7CDBC83 | |
{ | |
unsigned __int16 CpuStep; | |
$765B7FFCC4FB01A5AB0EE4EE9D978908 __s1; | |
}; | |
/* 395 */ | |
struct $FA7086906B11B84E19C202CDD64679A5 | |
{ | |
unsigned __int32 BamQosLevel : 8; | |
unsigned __int32 PendingQosUpdate : 2; | |
unsigned __int32 CacheIsolationEnabled : 1; | |
unsigned __int32 TracepointActive : 1; | |
unsigned __int32 PrcbFlagsReserved : 20; | |
}; | |
/* 396 */ | |
union _KPRCBFLAG | |
{ | |
volatile int PrcbFlags; | |
$FA7086906B11B84E19C202CDD64679A5 __s1; | |
}; | |
/* 914 */ | |
struct $F9801463BC74AAD8CD5B7383B4B0C725 | |
{ | |
unsigned __int64 TrappedSecurityDomain; | |
unsigned __int8 BpbState; | |
unsigned __int8 BpbFeatures; | |
unsigned __int8 BpbCurrentSpecCtrl; | |
unsigned __int8 BpbKernelSpecCtrl; | |
unsigned __int8 BpbNmiSpecCtrl; | |
unsigned __int8 BpbUserSpecCtrl; | |
volatile __int16 PairRegister; | |
}; | |
/* 915 */ | |
struct $A5717B385D067D2DE88ABB8DF0FEE1BB | |
{ | |
_BYTE gap0[8]; | |
unsigned __int8 BpbCpuIdle : 1; | |
unsigned __int8 BpbFlushRsbOnTrap : 1; | |
unsigned __int8 BpbIbpbOnReturn : 1; | |
unsigned __int8 BpbIbpbOnTrap : 1; | |
unsigned __int8 BpbIbpbOnRetpolineExit : 1; | |
unsigned __int8 BpbStateReserved : 3; | |
unsigned __int8 BpbClearOnIdle : 1; | |
unsigned __int8 BpbEnabled : 1; | |
unsigned __int8 BpbSmep : 1; | |
unsigned __int8 BpbFeaturesReserved : 5; | |
}; | |
/* 916 */ | |
union $9211DD59A49FFE3016B1DCEF04367D0B | |
{ | |
$F9801463BC74AAD8CD5B7383B4B0C725 __s0; | |
unsigned __int64 PrcbPad11[2]; | |
$A5717B385D067D2DE88ABB8DF0FEE1BB __s2; | |
}; | |
/* 397 */ | |
struct _KDESCRIPTOR | |
{ | |
unsigned __int16 Pad[3]; | |
unsigned __int16 Limit; | |
void *Base; | |
}; | |
/* 398 */ | |
struct _KSPECIAL_REGISTERS | |
{ | |
unsigned __int64 Cr0; | |
unsigned __int64 Cr2; | |
unsigned __int64 Cr3; | |
unsigned __int64 Cr4; | |
unsigned __int64 KernelDr0; | |
unsigned __int64 KernelDr1; | |
unsigned __int64 KernelDr2; | |
unsigned __int64 KernelDr3; | |
unsigned __int64 KernelDr6; | |
unsigned __int64 KernelDr7; | |
_KDESCRIPTOR Gdtr; | |
_KDESCRIPTOR Idtr; | |
unsigned __int16 Tr; | |
unsigned __int16 Ldtr; | |
unsigned int MxCsr; | |
unsigned __int64 DebugControl; | |
unsigned __int64 LastBranchToRip; | |
unsigned __int64 LastBranchFromRip; | |
unsigned __int64 LastExceptionToRip; | |
unsigned __int64 LastExceptionFromRip; | |
unsigned __int64 Cr8; | |
unsigned __int64 MsrGsBase; | |
unsigned __int64 MsrGsSwap; | |
unsigned __int64 MsrStar; | |
unsigned __int64 MsrLStar; | |
unsigned __int64 MsrCStar; | |
unsigned __int64 MsrSyscallMask; | |
unsigned __int64 Xcr0; | |
unsigned __int64 MsrFsBase; | |
unsigned __int64 SpecialPadding0; | |
}; | |
/* 367 */ | |
struct $9D2D227E7ACC7D621E4558D052CBE87C | |
{ | |
_M128A Header[2]; | |
_M128A Legacy[8]; | |
_M128A Xmm0; | |
_M128A Xmm1; | |
_M128A Xmm2; | |
_M128A Xmm3; | |
_M128A Xmm4; | |
_M128A Xmm5; | |
_M128A Xmm6; | |
_M128A Xmm7; | |
_M128A Xmm8; | |
_M128A Xmm9; | |
_M128A Xmm10; | |
_M128A Xmm11; | |
_M128A Xmm12; | |
_M128A Xmm13; | |
_M128A Xmm14; | |
_M128A Xmm15; | |
}; | |
/* 368 */ | |
union $5C0604B9C7B01C3FA107FCCA842D6757 | |
{ | |
_XSAVE_FORMAT FltSave; | |
$9D2D227E7ACC7D621E4558D052CBE87C __s1; | |
}; | |
/* 369 */ | |
struct _CONTEXT | |
{ | |
unsigned __int64 P1Home; | |
unsigned __int64 P2Home; | |
unsigned __int64 P3Home; | |
unsigned __int64 P4Home; | |
unsigned __int64 P5Home; | |
unsigned __int64 P6Home; | |
unsigned int ContextFlags; | |
unsigned int MxCsr; | |
unsigned __int16 SegCs; | |
unsigned __int16 SegDs; | |
unsigned __int16 SegEs; | |
unsigned __int16 SegFs; | |
unsigned __int16 SegGs; | |
unsigned __int16 SegSs; | |
unsigned int EFlags; | |
unsigned __int64 Dr0; | |
unsigned __int64 Dr1; | |
unsigned __int64 Dr2; | |
unsigned __int64 Dr3; | |
unsigned __int64 Dr6; | |
unsigned __int64 Dr7; | |
unsigned __int64 Rax; | |
unsigned __int64 Rcx; | |
unsigned __int64 Rdx; | |
unsigned __int64 Rbx; | |
unsigned __int64 Rsp; | |
unsigned __int64 Rbp; | |
unsigned __int64 Rsi; | |
unsigned __int64 Rdi; | |
unsigned __int64 R8; | |
unsigned __int64 R9; | |
unsigned __int64 R10; | |
unsigned __int64 R11; | |
unsigned __int64 R12; | |
unsigned __int64 R13; | |
unsigned __int64 R14; | |
unsigned __int64 R15; | |
unsigned __int64 Rip; | |
$5C0604B9C7B01C3FA107FCCA842D6757 ___u38; | |
_M128A VectorRegister[26]; | |
unsigned __int64 VectorControl; | |
unsigned __int64 DebugControl; | |
unsigned __int64 LastBranchToRip; | |
unsigned __int64 LastBranchFromRip; | |
unsigned __int64 LastExceptionToRip; | |
unsigned __int64 LastExceptionFromRip; | |
}; | |
/* 399 */ | |
struct _KPROCESSOR_STATE | |
{ | |
_KSPECIAL_REGISTERS SpecialRegisters; | |
_CONTEXT ContextFrame; | |
}; | |
/* 917 */ | |
struct $725846672478B32AD74B7F3030FCEF95 | |
{ | |
unsigned __int8 BpbRetpolineExitSpecCtrl; | |
unsigned __int8 BpbTrappedRetpolineExitSpecCtrl; | |
unsigned __int8 BpbTrappedBpbState; | |
unsigned __int8 BpbRetpolineState; | |
unsigned int PrcbPad12b; | |
}; | |
/* 918 */ | |
struct $B322546ACB42664770FF328C0ADAAFF8 | |
{ | |
_BYTE gap0[2]; | |
unsigned __int8 BpbTrappedCpuIdle : 1; | |
unsigned __int8 BpbTrappedFlushRsbOnTrap : 1; | |
unsigned __int8 BpbTrappedIbpbOnReturn : 1; | |
unsigned __int8 BpbTrappedIbpbOnTrap : 1; | |
unsigned __int8 BpbTrappedIbpbOnRetpolineExit : 1; | |
unsigned __int8 BpbtrappedBpbStateReserved : 3; | |
unsigned __int8 BpbRunningNonRetpolineCode : 1; | |
unsigned __int8 BpbIndirectCallsSafe : 1; | |
unsigned __int8 BpbRetpolineEnabled : 1; | |
unsigned __int8 BpbRetpolineStateReserved : 5; | |
}; | |
/* 919 */ | |
union $A80F39091AF37B1A3E7E4E208BA849AD | |
{ | |
$725846672478B32AD74B7F3030FCEF95 __s0; | |
unsigned __int64 PrcbPad12a; | |
$B322546ACB42664770FF328C0ADAAFF8 __s2; | |
}; | |
/* 400 */ | |
struct _KSPIN_LOCK_QUEUE | |
{ | |
_KSPIN_LOCK_QUEUE *volatile Next; | |
unsigned __int64 *volatile Lock; | |
}; | |
/* 412 */ | |
struct _PP_LOOKASIDE_LIST | |
{ | |
_GENERAL_LOOKASIDE *P; | |
_GENERAL_LOOKASIDE *L; | |
}; | |
/* 401 */ | |
struct $37C35E5C8CCF236A60767E3040AC49D0 | |
{ | |
unsigned __int64 Alignment; | |
unsigned __int64 Region; | |
}; | |
/* 402 */ | |
union _SLIST_HEADER | |
{ | |
$37C35E5C8CCF236A60767E3040AC49D0 __s0; | |
struct | |
{ | |
unsigned __int64 Depth : 16; | |
unsigned __int64 Sequence : 48; | |
unsigned __int64 Reserved : 4; | |
unsigned __int64 NextEntry : 60; | |
} HeaderX64; | |
}; | |
/* 404 */ | |
union $D9318E5461FBD001CF06AEEF6A9BA32B | |
{ | |
_SLIST_HEADER ListHead; | |
_SINGLE_LIST_ENTRY SingleListHead; | |
}; | |
/* 405 */ | |
union $9D02AA4AC86E49CEAF084B97B97744B1 | |
{ | |
unsigned int AllocateMisses; | |
unsigned int AllocateHits; | |
}; | |
/* 406 */ | |
union $4290DA71080BA5C562B380EC38D3C295 | |
{ | |
unsigned int FreeMisses; | |
unsigned int FreeHits; | |
}; | |
/* 407 */ | |
union $609F7953459DED3393456EC56E47AB4E | |
{ | |
void *(__fastcall *AllocateEx)(_POOL_TYPE, unsigned __int64, unsigned int, _LOOKASIDE_LIST_EX *); | |
void *(__fastcall *Allocate)(_POOL_TYPE, unsigned __int64, unsigned int); | |
}; | |
/* 408 */ | |
union $99A3AD952844BD1662DDA06B4C8C1657 | |
{ | |
void (__fastcall *FreeEx)(void *, _LOOKASIDE_LIST_EX *); | |
void (__fastcall *Free)(void *); | |
}; | |
/* 409 */ | |
union $BA67176EA55FA2D963EA02A98A2C99D2 | |
{ | |
unsigned int LastAllocateMisses; | |
unsigned int LastAllocateHits; | |
}; | |
/* 410 */ | |
struct _GENERAL_LOOKASIDE_POOL | |
{ | |
$D9318E5461FBD001CF06AEEF6A9BA32B ___u0; | |
unsigned __int16 Depth; | |
unsigned __int16 MaximumDepth; | |
unsigned int TotalAllocates; | |
$9D02AA4AC86E49CEAF084B97B97744B1 ___u4; | |
unsigned int TotalFrees; | |
$4290DA71080BA5C562B380EC38D3C295 ___u6; | |
_POOL_TYPE Type; | |
unsigned int Tag; | |
unsigned int Size; | |
$609F7953459DED3393456EC56E47AB4E ___u10; | |
$99A3AD952844BD1662DDA06B4C8C1657 ___u11; | |
_LIST_ENTRY ListEntry; | |
unsigned int LastTotalAllocates; | |
$BA67176EA55FA2D963EA02A98A2C99D2 ___u14; | |
unsigned int Future[2]; | |
}; | |
/* 413 */ | |
struct $FAF74743FBE1C8632047CFB668F7028A | |
{ | |
unsigned int LowPart; | |
int HighPart; | |
}; | |
/* 414 */ | |
union _LARGE_INTEGER | |
{ | |
$FAF74743FBE1C8632047CFB668F7028A __s0; | |
struct | |
{ | |
unsigned int LowPart; | |
int HighPart; | |
} u; | |
__int64 QuadPart; | |
}; | |
/* 419 */ | |
struct _KDPC_LIST | |
{ | |
_SINGLE_LIST_ENTRY ListHead; | |
_SINGLE_LIST_ENTRY *LastEntry; | |
}; | |
/* 420 */ | |
struct _KDPC_DATA | |
{ | |
_KDPC_LIST DpcList; | |
unsigned __int64 DpcLock; | |
volatile int DpcQueueDepth; | |
unsigned int DpcCount; | |
_KDPC *volatile ActiveDpc; | |
}; | |
/* 920 */ | |
struct $A14E8C9598FEC320F05702613B784A64 | |
{ | |
__int16 NormalDpcState; | |
__int16 ThreadDpcState; | |
}; | |
/* 921 */ | |
struct $62DA18D6A05C474F028C1781FA2A668F | |
{ | |
unsigned __int32 DpcNormalProcessingActive : 1; | |
unsigned __int32 DpcNormalProcessingRequested : 1; | |
unsigned __int32 DpcNormalThreadSignal : 1; | |
unsigned __int32 DpcNormalTimerExpiration : 1; | |
unsigned __int32 DpcNormalDpcPresent : 1; | |
unsigned __int32 DpcNormalLocalInterrupt : 1; | |
unsigned __int32 DpcNormalSpare : 10; | |
unsigned __int32 DpcThreadActive : 1; | |
unsigned __int32 DpcThreadRequested : 1; | |
unsigned __int32 DpcThreadSpare : 14; | |
}; | |
/* 922 */ | |
union $83A83C62A2BEFBBAF9DE7F69CAF49A3A | |
{ | |
volatile int DpcRequestSummary; | |
__int16 DpcRequestSlot[2]; | |
$A14E8C9598FEC320F05702613B784A64 __s2; | |
$62DA18D6A05C474F028C1781FA2A668F __s3; | |
}; | |
/* 421 */ | |
struct _KTIMER_TABLE_ENTRY | |
{ | |
unsigned __int64 Lock; | |
_LIST_ENTRY Entry; | |
_ULARGE_INTEGER Time; | |
}; | |
/* 422 */ | |
struct _KTIMER_TABLE_STATE | |
{ | |
unsigned __int64 LastTimerExpiration[2]; | |
unsigned int LastTimerHand[2]; | |
}; | |
/* 423 */ | |
struct _KTIMER_TABLE | |
{ | |
_KTIMER *TimerExpiry[64]; | |
_KTIMER_TABLE_ENTRY TimerEntries[2][256]; | |
_KTIMER_TABLE_STATE TableState; | |
}; | |
/* 424 */ | |
struct _KGATE | |
{ | |
_DISPATCHER_HEADER Header; | |
}; | |
/* 923 */ | |
struct $587E166413A0BC9D4B6487D1ABA99C2F | |
{ | |
unsigned __int8 NmiActive; | |
unsigned __int8 MceActive; | |
}; | |
/* 924 */ | |
union $44970D6ADA288FAA23D797B10881BC0E | |
{ | |
$587E166413A0BC9D4B6487D1ABA99C2F __s0; | |
unsigned __int16 CombinedNmiMceActive; | |
}; | |
/* 442 */ | |
struct _PROC_IDLE_POLICY | |
{ | |
unsigned __int8 PromotePercent; | |
unsigned __int8 DemotePercent; | |
unsigned __int8 PromotePercentBase; | |
unsigned __int8 DemotePercentBase; | |
unsigned __int8 AllowScaling; | |
unsigned __int8 ForceLightIdle; | |
}; | |
/* 443 */ | |
struct $4C54FEED1D206CF6DD53948246B9325F | |
{ | |
__int32 RefCount : 24; | |
unsigned __int32 State : 8; | |
}; | |
/* 444 */ | |
volatile union _PPM_IDLE_SYNCHRONIZATION_STATE | |
{ | |
int AsLong; | |
$4C54FEED1D206CF6DD53948246B9325F __s1; | |
}; | |
/* 447 */ | |
struct __declspec(align(8)) _PROC_FEEDBACK | |
{ | |
unsigned __int64 Lock; | |
unsigned __int64 CyclesLast; | |
unsigned __int64 CyclesActive; | |
_PROC_FEEDBACK_COUNTER *Counters[2]; | |
unsigned __int64 LastUpdateTime; | |
unsigned __int64 UnscaledTime; | |
volatile __int64 UnaccountedTime; | |
unsigned __int64 ScaledTime[2]; | |
unsigned __int64 UnaccountedKernelTime; | |
unsigned __int64 PerformanceScaledKernelTime; | |
unsigned int UserTimeLast; | |
unsigned int KernelTimeLast; | |
unsigned __int64 IdleGenerationNumberLast; | |
unsigned __int64 HvActiveTimeLast; | |
unsigned __int64 StallCyclesLast; | |
unsigned __int64 StallTime; | |
unsigned __int8 KernelTimesIndex; | |
unsigned __int8 CounterDiscardsIdleTime; | |
}; | |
/* 448 */ | |
struct _PPM_FFH_THROTTLE_STATE_INFO | |
{ | |
unsigned __int8 EnableLogging; | |
unsigned int MismatchCount; | |
unsigned __int8 Initialized; | |
unsigned __int64 LastValue; | |
_LARGE_INTEGER LastLogTickCount; | |
}; | |
/* 449 */ | |
struct _PROC_IDLE_SNAP | |
{ | |
unsigned __int64 Time; | |
unsigned __int64 Idle; | |
}; | |
/* 450 */ | |
struct __declspec(align(4)) _PROC_PERF_CHECK_CONTEXT | |
{ | |
_PROC_PERF_DOMAIN *Domain; | |
_PROC_PERF_CONSTRAINT *Constraint; | |
_PROC_PERF_CHECK *PerfCheck; | |
_PROC_PERF_LOAD *Load; | |
_PROC_PERF_HISTORY *PerfHistory; | |
unsigned int Utility; | |
unsigned int AffinitizedUtility; | |
unsigned int MediaUtility; | |
unsigned __int16 LatestAffinitizedPercent; | |
unsigned __int16 AveragePerformancePercent; | |
unsigned int RelativePerformance; | |
unsigned __int8 NtProcessor; | |
}; | |
/* 886 */ | |
union $1295C7652040702D9335A0311A3EC089 | |
{ | |
unsigned __int64 SnapTimeLast; | |
unsigned __int64 EnergyConsumed; | |
}; | |
/* 887 */ | |
struct _PROCESSOR_POWER_STATE | |
{ | |
_PPM_IDLE_STATES *IdleStates; | |
_PROC_IDLE_ACCOUNTING *IdleAccounting; | |
unsigned __int64 IdleTimeLast; | |
unsigned __int64 IdleTimeTotal; | |
volatile unsigned __int64 IdleTimeEntry; | |
unsigned __int64 IdleTimeExpiration; | |
unsigned __int8 NonInterruptibleTransition; | |
unsigned __int8 PepWokenTransition; | |
unsigned __int8 HvTargetState; | |
unsigned __int8 SoftParked; | |
unsigned int TargetIdleState; | |
_PROC_IDLE_POLICY IdlePolicy; | |
volatile _PPM_IDLE_SYNCHRONIZATION_STATE Synchronization; | |
_PROC_FEEDBACK PerfFeedback; | |
_PROC_HYPERVISOR_STATE Hypervisor; | |
unsigned int LastSysTime; | |
unsigned __int64 WmiDispatchPtr; | |
int WmiInterfaceEnabled; | |
_PPM_FFH_THROTTLE_STATE_INFO FFHThrottleStateInfo; | |
_KDPC PerfActionDpc; | |
volatile int PerfActionMask; | |
_PROC_IDLE_SNAP HvIdleCheck; | |
_PROC_PERF_CHECK_CONTEXT CheckContext; | |
_PPM_CONCURRENCY_ACCOUNTING *Concurrency; | |
_PPM_CONCURRENCY_ACCOUNTING *ClassConcurrency; | |
unsigned __int8 ArchitecturalEfficiencyClass; | |
unsigned __int8 PerformanceSchedulingClass; | |
unsigned __int8 EfficiencySchedulingClass; | |
unsigned __int8 Unused; | |
unsigned __int8 Parked; | |
unsigned __int8 LongPriorQosPeriod; | |
$1295C7652040702D9335A0311A3EC089 ___u31; | |
unsigned __int64 ActiveTime; | |
unsigned __int64 TotalTime; | |
_POP_FX_DEVICE *FxDevice; | |
unsigned __int64 LastQosTranstionTsc; | |
unsigned __int64 QosTransitionHysteresis; | |
_KHETERO_CPU_QOS RequestedQosClass; | |
_KHETERO_CPU_QOS ResolvedQosClass; | |
unsigned __int16 QosEquivalencyMask; | |
unsigned __int16 HwFeedbackTableIndex; | |
unsigned __int8 HwFeedbackParkHint; | |
unsigned __int8 HwFeedbackPerformanceClass; | |
unsigned __int8 HwFeedbackEfficiencyClass; | |
unsigned __int8 HeteroCoreType; | |
}; | |
/* 888 */ | |
struct _CACHE_DESCRIPTOR | |
{ | |
unsigned __int8 Level; | |
unsigned __int8 Associativity; | |
unsigned __int16 LineSize; | |
unsigned int Size; | |
_PROCESSOR_CACHE_TYPE Type; | |
}; | |
/* 895 */ | |
struct _SYNCH_COUNTERS | |
{ | |
unsigned int SpinLockAcquireCount; | |
unsigned int SpinLockContentionCount; | |
unsigned int SpinLockSpinCount; | |
unsigned int IpiSendRequestBroadcastCount; | |
unsigned int IpiSendRequestRoutineCount; | |
unsigned int IpiSendSoftwareInterruptCount; | |
unsigned int ExInitializeResourceCount; | |
unsigned int ExReInitializeResourceCount; | |
unsigned int ExDeleteResourceCount; | |
unsigned int ExecutiveResourceAcquiresCount; | |
unsigned int ExecutiveResourceContentionsCount; | |
unsigned int ExecutiveResourceReleaseExclusiveCount; | |
unsigned int ExecutiveResourceReleaseSharedCount; | |
unsigned int ExecutiveResourceConvertsCount; | |
unsigned int ExAcqResExclusiveAttempts; | |
unsigned int ExAcqResExclusiveAcquiresExclusive; | |
unsigned int ExAcqResExclusiveAcquiresExclusiveRecursive; | |
unsigned int ExAcqResExclusiveWaits; | |
unsigned int ExAcqResExclusiveNotAcquires; | |
unsigned int ExAcqResSharedAttempts; | |
unsigned int ExAcqResSharedAcquiresExclusive; | |
unsigned int ExAcqResSharedAcquiresShared; | |
unsigned int ExAcqResSharedAcquiresSharedRecursive; | |
unsigned int ExAcqResSharedWaits; | |
unsigned int ExAcqResSharedNotAcquires; | |
unsigned int ExAcqResSharedStarveExclusiveAttempts; | |
unsigned int ExAcqResSharedStarveExclusiveAcquiresExclusive; | |
unsigned int ExAcqResSharedStarveExclusiveAcquiresShared; | |
unsigned int ExAcqResSharedStarveExclusiveAcquiresSharedRecursive; | |
unsigned int ExAcqResSharedStarveExclusiveWaits; | |
unsigned int ExAcqResSharedStarveExclusiveNotAcquires; | |
unsigned int ExAcqResSharedWaitForExclusiveAttempts; | |
unsigned int ExAcqResSharedWaitForExclusiveAcquiresExclusive; | |
unsigned int ExAcqResSharedWaitForExclusiveAcquiresShared; | |
unsigned int ExAcqResSharedWaitForExclusiveAcquiresSharedRecursive; | |
unsigned int ExAcqResSharedWaitForExclusiveWaits; | |
unsigned int ExAcqResSharedWaitForExclusiveNotAcquires; | |
unsigned int ExSetResOwnerPointerExclusive; | |
unsigned int ExSetResOwnerPointerSharedNew; | |
unsigned int ExSetResOwnerPointerSharedOld; | |
unsigned int ExTryToAcqExclusiveAttempts; | |
unsigned int ExTryToAcqExclusiveAcquires; | |
unsigned int ExBoostExclusiveOwner; | |
unsigned int ExBoostSharedOwners; | |
unsigned int ExEtwSynchTrackingNotificationsCount; | |
unsigned int ExEtwSynchTrackingNotificationsAccountedCount; | |
}; | |
/* 896 */ | |
struct _FILESYSTEM_DISK_COUNTERS | |
{ | |
unsigned __int64 FsBytesRead; | |
unsigned __int64 FsBytesWritten; | |
}; | |
/* 897 */ | |
struct __declspec(align(8)) _KENTROPY_TIMING_STATE | |
{ | |
unsigned int EntropyCount; | |
unsigned int Buffer[64]; | |
_KDPC Dpc; | |
unsigned int LastDeliveredBuffer; | |
}; | |
/* 898 */ | |
struct $437EDEAFE33DAFED4793B8A3A762EFC4 | |
{ | |
unsigned __int8 PairLocalLow; | |
unsigned __int8 PairLocalForceStibp : 1; | |
unsigned __int8 Reserved : 4; | |
unsigned __int8 Frozen : 1; | |
unsigned __int8 ForceUntrusted : 1; | |
unsigned __int8 SynchIpi : 1; | |
}; | |
/* 899 */ | |
union $9B0DB048E916DFCAC47A6246A740EE37 | |
{ | |
__int16 PairLocal; | |
$437EDEAFE33DAFED4793B8A3A762EFC4 __s1; | |
}; | |
/* 900 */ | |
struct $65F3014B83CBA7D0B98DA1788953A33A | |
{ | |
unsigned __int8 PairRemoteLow; | |
unsigned __int8 Reserved2; | |
}; | |
/* 901 */ | |
union $DA89C21E214F92A73FACC20358EF345A | |
{ | |
__int16 PairRemote; | |
$65F3014B83CBA7D0B98DA1788953A33A __s1; | |
}; | |
/* 902 */ | |
struct _IOP_IRP_STACK_PROFILER | |
{ | |
unsigned int Profile[20]; | |
unsigned int TotalIrps; | |
}; | |
/* 903 */ | |
struct _KSECURE_FAULT_INFORMATION | |
{ | |
unsigned __int64 FaultCode; | |
unsigned __int64 FaultVa; | |
}; | |
/* 889 */ | |
struct _KSHARED_READY_QUEUE | |
{ | |
unsigned __int64 Lock; | |
unsigned int ReadySummary; | |
_LIST_ENTRY ReadyListHead[32]; | |
char RunningSummary[64]; | |
unsigned __int8 Span; | |
unsigned __int8 LowProcIndex; | |
unsigned __int8 QueueIndex; | |
unsigned __int8 ProcCount; | |
unsigned __int8 ScanOwner; | |
unsigned __int8 Spare[3]; | |
unsigned __int64 Affinity; | |
unsigned int ReadyThreadCount; | |
unsigned __int64 ReadyQueueExpectedRunTime; | |
}; | |
/* 904 */ | |
struct _KTIMER_EXPIRATION_TRACE | |
{ | |
unsigned __int64 InterruptTime; | |
_LARGE_INTEGER PerformanceCounter; | |
}; | |
/* 907 */ | |
struct _MACHINE_FRAME | |
{ | |
unsigned __int64 Rip; | |
unsigned __int16 SegCs; | |
unsigned __int16 Fill1[3]; | |
unsigned int EFlags; | |
unsigned int Fill2; | |
unsigned __int64 Rsp; | |
unsigned __int16 SegSs; | |
unsigned __int16 Fill3[3]; | |
}; | |
/* 908 */ | |
struct _MACHINE_CHECK_CONTEXT | |
{ | |
_MACHINE_FRAME MachineFrame; | |
unsigned __int64 Rax; | |
unsigned __int64 Rcx; | |
unsigned __int64 Rdx; | |
unsigned __int64 GsBase; | |
unsigned __int64 Cr3; | |
}; | |
/* 909 */ | |
struct __declspec(align(8)) _KLOCK_QUEUE_HANDLE | |
{ | |
_KSPIN_LOCK_QUEUE LockQueue; | |
unsigned __int8 OldIrql; | |
}; | |
/* 906 */ | |
struct _KREQUEST_PACKET | |
{ | |
void *CurrentPacket[3]; | |
void (__fastcall *WorkerRoutine)(void *, void *, void *, void *); | |
}; | |
/* 905 */ | |
struct __declspec(align(8)) _REQUEST_MAILBOX | |
{ | |
_REQUEST_MAILBOX *Next; | |
unsigned __int64 RequestSummary; | |
_KREQUEST_PACKET RequestPacket; | |
volatile int *NodeTargetCountAddr; | |
volatile int NodeTargetCount; | |
}; | |
/* 415 */ | |
struct _KPRCB | |
{ | |
unsigned int MxCsr; | |
unsigned __int8 LegacyNumber; | |
unsigned __int8 ReservedMustBeZero; | |
unsigned __int8 InterruptRequest; | |
unsigned __int8 IdleHalt; | |
_KTHREAD *CurrentThread; | |
_KTHREAD *NextThread; | |
_KTHREAD *IdleThread; | |
unsigned __int8 NestingLevel; | |
unsigned __int8 ClockOwner; | |
$75567B324E45BF40FCCFA8B626A1AAD9 ___u10; | |
unsigned __int8 IdleState; | |
unsigned int Number; | |
unsigned __int64 RspBase; | |
unsigned __int64 PrcbLock; | |
char *PriorityState; | |
char CpuType; | |
char CpuID; | |
$D5CFCF4BC71A43326E732C53C7CDBC83 ___u18; | |
unsigned int MHz; | |
unsigned __int64 HalReserved[8]; | |
unsigned __int16 MinorVersion; | |
unsigned __int16 MajorVersion; | |
unsigned __int8 BuildType; | |
unsigned __int8 CpuVendor; | |
unsigned __int8 CoresPerPhysicalProcessor; | |
unsigned __int8 LogicalProcessorsPerCore; | |
unsigned __int64 TscFrequency; | |
unsigned __int64 PrcbPad04[5]; | |
_KNODE *ParentNode; | |
unsigned __int64 GroupSetMember; | |
unsigned __int8 Group; | |
unsigned __int8 GroupIndex; | |
unsigned __int8 PrcbPad05[2]; | |
unsigned int InitialApicId; | |
unsigned int ScbOffset; | |
unsigned int ApicMask; | |
void *AcpiReserved; | |
unsigned int CFlushSize; | |
_KPRCBFLAG PrcbFlags; | |
$9211DD59A49FFE3016B1DCEF04367D0B ___u40; | |
_KPROCESSOR_STATE ProcessorState; | |
_XSAVE_AREA_HEADER *ExtendedSupervisorState; | |
unsigned int ProcessorSignature; | |
unsigned int ProcessorFlags; | |
$A80F39091AF37B1A3E7E4E208BA849AD ___u45; | |
unsigned __int64 PrcbPad12[3]; | |
_KSPIN_LOCK_QUEUE LockQueue[17]; | |
_PP_LOOKASIDE_LIST PPLookasideList[16]; | |
_GENERAL_LOOKASIDE_POOL PPNxPagedLookasideList[32]; | |
_GENERAL_LOOKASIDE_POOL PPNPagedLookasideList[32]; | |
_GENERAL_LOOKASIDE_POOL PPPagedLookasideList[32]; | |
unsigned __int64 MsrIa32TsxCtrl; | |
_SINGLE_LIST_ENTRY DeferredReadyListHead; | |
volatile int MmPageFaultCount; | |
volatile int MmCopyOnWriteCount; | |
volatile int MmTransitionCount; | |
volatile int MmDemandZeroCount; | |
volatile int MmPageReadCount; | |
volatile int MmPageReadIoCount; | |
volatile int MmDirtyPagesWriteCount; | |
volatile int MmDirtyWriteIoCount; | |
volatile int MmMappedPagesWriteCount; | |
volatile int MmMappedWriteIoCount; | |
unsigned int KeSystemCalls; | |
unsigned int KeContextSwitches; | |
unsigned int PrcbPad40; | |
unsigned int CcFastReadNoWait; | |
unsigned int CcFastReadWait; | |
unsigned int CcFastReadNotPossible; | |
unsigned int CcCopyReadNoWait; | |
unsigned int CcCopyReadWait; | |
unsigned int CcCopyReadNoWaitMiss; | |
volatile int IoReadOperationCount; | |
volatile int IoWriteOperationCount; | |
volatile int IoOtherOperationCount; | |
_LARGE_INTEGER IoReadTransferCount; | |
_LARGE_INTEGER IoWriteTransferCount; | |
_LARGE_INTEGER IoOtherTransferCount; | |
volatile int PacketBarrier; | |
volatile int TargetCount; | |
volatile unsigned int IpiFrozen; | |
unsigned int PrcbPad30; | |
void *IsrDpcStats; | |
unsigned int DeviceInterrupts; | |
int LookasideIrpFloat; | |
unsigned int InterruptLastCount; | |
unsigned int InterruptRate; | |
unsigned __int64 PrcbPad31; | |
_KPRCB *PairPrcb; | |
_KSTATIC_AFFINITY_BLOCK StaticAffinity; | |
unsigned __int64 PrcbPad35[5]; | |
_SLIST_HEADER InterruptObjectPool; | |
_RTL_HASH_TABLE *DpcRuntimeHistoryHashTable; | |
_KDPC *DpcRuntimeHistoryHashTableCleanupDpc; | |
void (__fastcall *CurrentDpcRoutine)(_KDPC *, void *, void *, void *); | |
unsigned __int64 CurrentDpcRuntimeHistoryCached; | |
unsigned __int64 CurrentDpcStartTime; | |
unsigned __int64 PrcbPad41[1]; | |
_KDPC_DATA DpcData[2]; | |
void *DpcStack; | |
int MaximumDpcQueueDepth; | |
unsigned int DpcRequestRate; | |
unsigned int MinimumDpcRate; | |
unsigned int DpcLastCount; | |
unsigned __int8 ThreadDpcEnable; | |
volatile unsigned __int8 QuantumEnd; | |
volatile unsigned __int8 DpcRoutineActive; | |
volatile unsigned __int8 IdleSchedule; | |
$83A83C62A2BEFBBAF9DE7F69CAF49A3A ___u109; | |
unsigned int PrcbPad93; | |
unsigned int LastTick; | |
unsigned int ClockInterrupts; | |
unsigned int ReadyScanTick; | |
void *InterruptObject[256]; | |
_KTIMER_TABLE TimerTable; | |
unsigned int PrcbPad92[10]; | |
_KGATE DpcGate; | |
void *PrcbPad52; | |
_KDPC CallDpc; | |
int ClockKeepAlive; | |
unsigned __int8 PrcbPad60[2]; | |
$44970D6ADA288FAA23D797B10881BC0E ___u122; | |
int DpcWatchdogPeriod; | |
int DpcWatchdogCount; | |
volatile int KeSpinLockOrdering; | |
unsigned int DpcWatchdogProfileCumulativeDpcThreshold; | |
void *CachedPtes; | |
_LIST_ENTRY WaitListHead; | |
unsigned __int64 WaitLock; | |
unsigned int ReadySummary; | |
int AffinitizedSelectionMask; | |
unsigned int QueueIndex; | |
unsigned int PrcbPad75[2]; | |
unsigned int DpcWatchdogSequenceNumber; | |
_KDPC TimerExpirationDpc; | |
_RTL_RB_TREE ScbQueue; | |
_LIST_ENTRY DispatcherReadyListHead[32]; | |
unsigned int InterruptCount; | |
unsigned int KernelTime; | |
unsigned int UserTime; | |
unsigned int DpcTime; | |
unsigned int InterruptTime; | |
unsigned int AdjustDpcThreshold; | |
unsigned __int8 DebuggerSavedIRQL; | |
unsigned __int8 GroupSchedulingOverQuota; | |
volatile unsigned __int8 DeepSleep; | |
unsigned __int8 PrcbPad80; | |
unsigned int DpcTimeCount; | |
unsigned int DpcTimeLimit; | |
unsigned int PeriodicCount; | |
unsigned int PeriodicBias; | |
unsigned int AvailableTime; | |
unsigned int KeExceptionDispatchCount; | |
unsigned int ReadyThreadCount; | |
unsigned __int64 ReadyQueueExpectedRunTime; | |
unsigned __int64 StartCycles; | |
unsigned __int64 TaggedCyclesStart; | |
unsigned __int64 TaggedCycles[3]; | |
unsigned __int64 AffinitizedCycles; | |
unsigned __int64 ImportantCycles; | |
unsigned __int64 UnimportantCycles; | |
unsigned int DpcWatchdogProfileSingleDpcThreshold; | |
volatile int MmSpinLockOrdering; | |
void *volatile CachedStack; | |
unsigned int PageColor; | |
unsigned int NodeColor; | |
unsigned int NodeShiftedColor; | |
unsigned int SecondaryColorMask; | |
unsigned __int8 PrcbPad81[6]; | |
unsigned __int8 ExceptionStackActive; | |
unsigned __int8 TbFlushListActive; | |
void *ExceptionStack; | |
unsigned __int64 PrcbPad82[1]; | |
unsigned __int64 CycleTime; | |
unsigned __int64 Cycles[4][2]; | |
unsigned int CcFastMdlReadNoWait; | |
unsigned int CcFastMdlReadWait; | |
unsigned int CcFastMdlReadNotPossible; | |
unsigned int CcMapDataNoWait; | |
unsigned int CcMapDataWait; | |
unsigned int CcPinMappedDataCount; | |
unsigned int CcPinReadNoWait; | |
unsigned int CcPinReadWait; | |
unsigned int CcMdlReadNoWait; | |
unsigned int CcMdlReadWait; | |
unsigned int CcLazyWriteHotSpots; | |
unsigned int CcLazyWriteIos; | |
unsigned int CcLazyWritePages; | |
unsigned int CcDataFlushes; | |
unsigned int CcDataPages; | |
unsigned int CcLostDelayedWrites; | |
unsigned int CcFastReadResourceMiss; | |
unsigned int CcCopyReadWaitMiss; | |
unsigned int CcFastMdlReadResourceMiss; | |
unsigned int CcMapDataNoWaitMiss; | |
unsigned int CcMapDataWaitMiss; | |
unsigned int CcPinReadNoWaitMiss; | |
unsigned int CcPinReadWaitMiss; | |
unsigned int CcMdlReadNoWaitMiss; | |
unsigned int CcMdlReadWaitMiss; | |
unsigned int CcReadAheadIos; | |
volatile int MmCacheTransitionCount; | |
volatile int MmCacheReadCount; | |
volatile int MmCacheIoCount; | |
unsigned int PrcbPad91; | |
void *MmInternal; | |
_PROCESSOR_POWER_STATE PowerState; | |
void *HyperPte; | |
_LIST_ENTRY ScbList; | |
_KDPC ForceIdleDpc; | |
_KDPC DpcWatchdogDpc; | |
_KTIMER DpcWatchdogTimer; | |
_CACHE_DESCRIPTOR Cache[5]; | |
unsigned int CacheCount; | |
volatile unsigned int CachedCommit; | |
volatile unsigned int CachedResidentAvailable; | |
void *WheaInfo; | |
void *EtwSupport; | |
void *ExSaPageArray; | |
unsigned int KeAlignmentFixupCount; | |
unsigned int PrcbPad95; | |
_SLIST_HEADER HypercallPageList; | |
unsigned __int64 *StatisticsPage; | |
unsigned __int64 GenerationTarget; | |
unsigned __int64 PrcbPad85[4]; | |
void *HypercallCachedPages; | |
void *VirtualApicAssist; | |
_KAFFINITY_EX PackageProcessorSet; | |
unsigned int PackageId; | |
unsigned int PrcbPad86; | |
unsigned __int64 SharedReadyQueueMask; | |
_KSHARED_READY_QUEUE *SharedReadyQueue; | |
unsigned int SharedQueueScanOwner; | |
unsigned int ScanSiblingIndex; | |
unsigned __int64 CoreProcessorSet; | |
unsigned __int64 ScanSiblingMask; | |
unsigned __int64 LLCMask; | |
unsigned __int64 CacheProcessorMask[5]; | |
_PROCESSOR_PROFILE_CONTROL_AREA *ProcessorProfileControlArea; | |
void *ProfileEventIndexAddress; | |
void **DpcWatchdogProfile; | |
void **DpcWatchdogProfileCurrentEmptyCapture; | |
void *SchedulerAssist; | |
_SYNCH_COUNTERS SynchCounters; | |
unsigned __int64 PrcbPad94; | |
_FILESYSTEM_DISK_COUNTERS FsCounters; | |
unsigned __int8 VendorString[13]; | |
unsigned __int8 PrcbPad100[3]; | |
unsigned __int64 FeatureBits; | |
_LARGE_INTEGER UpdateSignature; | |
unsigned __int64 PteBitCache; | |
unsigned int PteBitOffset; | |
unsigned int PrcbPad105; | |
_CONTEXT *Context; | |
unsigned int ContextFlagsInit; | |
unsigned int PrcbPad115; | |
_XSAVE_AREA *ExtendedState; | |
void *IsrStack; | |
_KENTROPY_TIMING_STATE EntropyTimingState; | |
unsigned __int64 PrcbPad110; | |
struct | |
{ | |
unsigned int UpdateCycle; | |
$9B0DB048E916DFCAC47A6246A740EE37 ___u1; | |
$DA89C21E214F92A73FACC20358EF345A ___u2; | |
unsigned __int8 Trace[24]; | |
unsigned __int64 LocalDomain; | |
unsigned __int64 RemoteDomain; | |
_KTHREAD *Thread; | |
} StibpPairingTrace; | |
_SINGLE_LIST_ENTRY AbSelfIoBoostsList; | |
_SINGLE_LIST_ENTRY AbPropagateBoostsList; | |
_KDPC AbDpc; | |
_IOP_IRP_STACK_PROFILER IoIrpStackProfilerCurrent; | |
_IOP_IRP_STACK_PROFILER IoIrpStackProfilerPrevious; | |
_KSECURE_FAULT_INFORMATION SecureFault; | |
unsigned __int64 PrcbPad120; | |
_KSHARED_READY_QUEUE LocalSharedReadyQueue; | |
unsigned __int64 PrcbPad125[2]; | |
unsigned int TimerExpirationTraceCount; | |
unsigned int PrcbPad127; | |
_KTIMER_EXPIRATION_TRACE TimerExpirationTrace[16]; | |
unsigned __int64 PrcbPad128[7]; | |
_REQUEST_MAILBOX *Mailbox; | |
unsigned __int64 PrcbPad130[7]; | |
_MACHINE_CHECK_CONTEXT McheckContext[2]; | |
unsigned __int64 PrcbPad134[4]; | |
_KLOCK_QUEUE_HANDLE SelfmapLockHandle[4]; | |
unsigned __int64 PrcbPad134a[4]; | |
unsigned __int8 PrcbPad138[128]; | |
unsigned __int8 PrcbPad138a[64]; | |
unsigned __int64 KernelDirectoryTableBase; | |
unsigned __int64 RspBaseShadow; | |
unsigned __int64 UserRspShadow; | |
unsigned int ShadowFlags; | |
unsigned int PrcbPad138b; | |
unsigned __int64 PrcbPad138c; | |
unsigned __int16 PrcbPad138d; | |
unsigned __int16 VerwSelector; | |
unsigned int DbgMceNestingLevel; | |
unsigned int DbgMceFlags; | |
unsigned int PrcbPad139b; | |
unsigned __int64 PrcbPad140[505]; | |
unsigned __int64 PrcbPad140a[8]; | |
unsigned __int64 PrcbPad141[504]; | |
unsigned __int8 PrcbPad141a[64]; | |
_REQUEST_MAILBOX RequestMailbox[1]; | |
}; | |
/* 661 */ | |
union $DFCABA25F430707429802D3DBED2B9C2 | |
{ | |
_RTL_BALANCED_NODE TreeNode; | |
_SINGLE_LIST_ENTRY FreeListEntry; | |
}; | |
/* 662 */ | |
struct $EC07B23C3B7FAD634FE04CB02D3D38F8 | |
{ | |
unsigned __int8 EntryOffset; | |
unsigned __int8 ThreadLocalFlags; | |
unsigned __int8 AcquiredByte; | |
unsigned __int8 CrossThreadFlags; | |
}; | |
/* 663 */ | |
struct $60D245BA30E2816A1CB14DA501A70A87 | |
{ | |
unsigned __int32 StaticState : 8; | |
unsigned __int32 WaitingBit : 1; | |
unsigned __int32 Spare0 : 7; | |
unsigned __int32 AcquiredBit : 1; | |
unsigned __int32 : 7; | |
unsigned __int32 HeadNodeBit : 1; | |
unsigned __int32 IoPriorityBit : 1; | |
unsigned __int32 IoQoSWaiter : 1; | |
unsigned __int32 Spare1 : 5; | |
}; | |
/* 664 */ | |
struct $7736FC1F35A4C7F440DCABE0BD2221F9 | |
{ | |
unsigned __int32 : 8; | |
unsigned __int32 AllFlags : 24; | |
}; | |
/* 665 */ | |
union $9148A20DFF497AF9C4A61C7ED9522B6F | |
{ | |
unsigned int EntryFlags; | |
$EC07B23C3B7FAD634FE04CB02D3D38F8 __s1; | |
$60D245BA30E2816A1CB14DA501A70A87 __s2; | |
$7736FC1F35A4C7F440DCABE0BD2221F9 __s3; | |
}; | |
/* 653 */ | |
struct $A1A49EE4C6E599293708B9EDC35F5B5E | |
{ | |
unsigned __int64 CrossThreadReleasable : 1; | |
unsigned __int64 Busy : 1; | |
unsigned __int64 Reserved : 61; | |
unsigned __int64 InTree : 1; | |
}; | |
/* 654 */ | |
union $33C269271B3B5D8E937A755A27765C0A | |
{ | |
$A1A49EE4C6E599293708B9EDC35F5B5E __s0; | |
void *LockState; | |
}; | |
/* 655 */ | |
struct $3D3B8FE0BB28675FF9A69FDF4E0F0C17 | |
{ | |
unsigned int SessionId; | |
unsigned int SessionPad; | |
}; | |
/* 656 */ | |
union $1339906AC62C22B63CA5D1ADD8343769 | |
{ | |
void *SessionState; | |
$3D3B8FE0BB28675FF9A69FDF4E0F0C17 __s1; | |
}; | |
/* 657 */ | |
struct _KLOCK_ENTRY_LOCK_STATE | |
{ | |
$33C269271B3B5D8E937A755A27765C0A ___u0; | |
$1339906AC62C22B63CA5D1ADD8343769 ___u1; | |
}; | |
/* 666 */ | |
struct $B44277A236BA2515446CFE9D2BD19FA1 | |
{ | |
void *volatile LockUnsafe; | |
void *SessionState; | |
}; | |
/* 667 */ | |
struct $A60C83F7E7D4D797BA8C6A44D96D42F2 | |
{ | |
volatile unsigned __int8 CrossThreadReleasableAndBusyByte; | |
unsigned __int8 Reserved[6]; | |
volatile unsigned __int8 InTreeByte; | |
unsigned int SessionId; | |
unsigned int SessionPad; | |
}; | |
/* 668 */ | |
union $D575C25741A3F57B5AD1E064E275E892 | |
{ | |
_KLOCK_ENTRY_LOCK_STATE LockState; | |
$B44277A236BA2515446CFE9D2BD19FA1 __s1; | |
$A60C83F7E7D4D797BA8C6A44D96D42F2 __s2; | |
}; | |
/* 669 */ | |
union $60F5535D0915A995472209829E5D43FC | |
{ | |
_RTL_RB_TREE OwnerTree; | |
char CpuPriorityKey; | |
}; | |
/* 658 */ | |
struct $985BA4769A85FD4AE85CD88F5E2D6C9B | |
{ | |
unsigned __int32 AllBoosts : 17; | |
unsigned __int32 Reserved : 15; | |
}; | |
/* 659 */ | |
struct $3FFCD8F9FD83D2CCCD4C5C5A1C244794 | |
{ | |
unsigned __int16 CpuBoostsBitmap : 15; | |
unsigned __int16 IoBoost : 1; | |
unsigned __int16 IoQoSBoost : 1; | |
unsigned __int16 IoNormalPriorityWaiterCount : 8; | |
unsigned __int16 IoQoSWaiterCount : 7; | |
}; | |
/* 660 */ | |
union _KLOCK_ENTRY_BOOST_BITMAP | |
{ | |
unsigned int AllFields; | |
$985BA4769A85FD4AE85CD88F5E2D6C9B __s1; | |
$3FFCD8F9FD83D2CCCD4C5C5A1C244794 __s2; | |
}; | |
/* 670 */ | |
struct _KLOCK_ENTRY | |
{ | |
$DFCABA25F430707429802D3DBED2B9C2 ___u0; | |
$9148A20DFF497AF9C4A61C7ED9522B6F ___u1; | |
unsigned int SpareFlags; | |
$D575C25741A3F57B5AD1E064E275E892 ___u3; | |
$60F5535D0915A995472209829E5D43FC ___u4; | |
_RTL_RB_TREE WaiterTree; | |
unsigned __int64 EntryLock; | |
_KLOCK_ENTRY_BOOST_BITMAP BoostBitmap; | |
unsigned int SparePad; | |
}; | |
/* 359 */ | |
struct _PROCESSOR_NUMBER | |
{ | |
unsigned __int16 Group; | |
unsigned __int8 Number; | |
unsigned __int8 Reserved; | |
}; | |
/* 361 */ | |
struct _THREAD_PERFORMANCE_DATA | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
_PROCESSOR_NUMBER ProcessorNumber; | |
unsigned int ContextSwitches; | |
unsigned int HwCountersCount; | |
volatile unsigned __int64 UpdateCount; | |
unsigned __int64 WaitReasonBitMap; | |
unsigned __int64 HardwareCounters; | |
_COUNTER_READING CycleTime; | |
_COUNTER_READING HwCounters[16]; | |
}; | |
/* 364 */ | |
struct _XSAVE_AREA_HEADER | |
{ | |
unsigned __int64 Mask; | |
unsigned __int64 CompactionMask; | |
unsigned __int64 Reserved2[6]; | |
}; | |
/* 365 */ | |
struct _XSAVE_AREA | |
{ | |
_XSAVE_FORMAT LegacyState; | |
_XSAVE_AREA_HEADER Header; | |
}; | |
/* 371 */ | |
struct $EE958A3EEEF3B432DBF345C9EA16AB2C | |
{ | |
unsigned __int32 ScheduledThread : 1; | |
unsigned __int32 Suspended : 1; | |
unsigned __int32 VolatileContext : 1; | |
unsigned __int32 Terminated : 1; | |
unsigned __int32 DebugActive : 1; | |
unsigned __int32 RunningOnSelfThread : 1; | |
unsigned __int32 DenyRunningOnSelfThread : 1; | |
}; | |
/* 372 */ | |
union $C007264E33FEDA0366194DB89F1D29DF | |
{ | |
$EE958A3EEEF3B432DBF345C9EA16AB2C __s0; | |
volatile int Flags; | |
}; | |
/* 373 */ | |
struct $F0BB6DED5B863CB5C1D5B6781ED3F5BA | |
{ | |
unsigned __int64 KernelUpdateLock : 2; | |
unsigned __int64 PrimaryClientID : 62; | |
}; | |
/* 374 */ | |
union $D471D725278CCCDDA2C22047BBBF7463 | |
{ | |
$F0BB6DED5B863CB5C1D5B6781ED3F5BA __s0; | |
volatile unsigned __int64 ContextLock; | |
}; | |
/* 370 */ | |
struct _RTL_UMS_CONTEXT | |
{ | |
_SINGLE_LIST_ENTRY Link; | |
__declspec(align(16)) _CONTEXT Context; | |
void *Teb; | |
void *UserContext; | |
$C007264E33FEDA0366194DB89F1D29DF ___u4; | |
$D471D725278CCCDDA2C22047BBBF7463 ___u5; | |
_RTL_UMS_CONTEXT *PrimaryUmsContext; | |
unsigned int SwitchCount; | |
unsigned int KernelYieldCount; | |
unsigned int MixedYieldCount; | |
unsigned int YieldCount; | |
}; | |
/* 380 */ | |
struct _KEXCEPTION_FRAME | |
{ | |
unsigned __int64 P1Home; | |
unsigned __int64 P2Home; | |
unsigned __int64 P3Home; | |
unsigned __int64 P4Home; | |
unsigned __int64 P5; | |
unsigned __int64 Spare1; | |
_M128A Xmm6; | |
_M128A Xmm7; | |
_M128A Xmm8; | |
_M128A Xmm9; | |
_M128A Xmm10; | |
_M128A Xmm11; | |
_M128A Xmm12; | |
_M128A Xmm13; | |
_M128A Xmm14; | |
_M128A Xmm15; | |
unsigned __int64 TrapFrame; | |
unsigned __int64 OutputBuffer; | |
unsigned __int64 OutputLength; | |
unsigned __int64 Spare2; | |
unsigned __int64 MxCsr; | |
unsigned __int64 Rbp; | |
unsigned __int64 Rbx; | |
unsigned __int64 Rdi; | |
unsigned __int64 Rsi; | |
unsigned __int64 R12; | |
unsigned __int64 R13; | |
unsigned __int64 R14; | |
unsigned __int64 R15; | |
unsigned __int64 Return; | |
}; | |
/* 392 */ | |
struct $0546781C5EA3D12C7B8713B38AAAA7E7 | |
{ | |
unsigned __int8 AffinityFill[10]; | |
unsigned __int16 NodeNumber; | |
unsigned __int16 PrimaryNodeNumber; | |
unsigned __int16 Spare0; | |
}; | |
/* 393 */ | |
union $99C0D1666D6FEADA535ACEB8B2437576 | |
{ | |
_GROUP_AFFINITY Affinity; | |
$0546781C5EA3D12C7B8713B38AAAA7E7 __s1; | |
}; | |
/* 388 */ | |
struct _flags | |
{ | |
unsigned __int8 Removable : 1; | |
unsigned __int8 GroupAssigned : 1; | |
unsigned __int8 GroupCommitted : 1; | |
unsigned __int8 GroupAssignmentFixed : 1; | |
unsigned __int8 ProcessorOnly : 1; | |
unsigned __int8 SmtSetsPresent : 1; | |
unsigned __int8 Fill : 2; | |
}; | |
/* 389 */ | |
struct _KHETERO_PROCESSOR_SET | |
{ | |
unsigned __int64 IdealMask; | |
unsigned __int64 PreferredMask; | |
unsigned __int64 AvailableMask; | |
}; | |
/* 390 */ | |
struct $30B55DB978BF6002BB343F706FAE00D7 | |
{ | |
unsigned __int64 SingleCoreSet; | |
unsigned __int64 SmtSet; | |
}; | |
/* 391 */ | |
union _KQOS_GROUPING_SETS | |
{ | |
$30B55DB978BF6002BB343F706FAE00D7 __s0; | |
}; | |
/* 394 */ | |
struct _KNODE | |
{ | |
unsigned __int64 IdleNonParkedCpuSet; | |
unsigned __int64 IdleSmtSet; | |
unsigned __int64 NonPairedSmtSet; | |
unsigned __int64 IdleCpuSet; | |
__declspec(align(64)) unsigned __int64 DeepIdleSet; | |
unsigned __int64 IdleConstrainedSet; | |
unsigned __int64 NonParkedSet; | |
unsigned __int64 SoftParkedSet; | |
unsigned __int64 NonIsrTargetedSet; | |
int ParkLock; | |
unsigned __int16 ThreadSeed; | |
unsigned __int16 ProcessSeed; | |
__declspec(align(32)) unsigned int SiblingMask; | |
$99C0D1666D6FEADA535ACEB8B2437576 ___u13; | |
unsigned __int64 SharedReadyQueueMask; | |
unsigned __int64 StrideMask; | |
unsigned int ProximityId; | |
unsigned int Lowest; | |
unsigned int Highest; | |
unsigned __int8 MaximumProcessors; | |
_flags Flags; | |
unsigned __int8 Spare10; | |
_KHETERO_PROCESSOR_SET HeteroSets[5]; | |
unsigned __int64 PpmConfiguredQosSets[5]; | |
unsigned __int64 Spare11; | |
_KQOS_GROUPING_SETS QosGroupingSets; | |
unsigned __int64 QosPreemptibleSet; | |
unsigned __int64 LLCLeaders; | |
}; | |
/* 411 */ | |
struct __declspec(align(64)) _GENERAL_LOOKASIDE | |
{ | |
$D9318E5461FBD001CF06AEEF6A9BA32B ___u0; | |
unsigned __int16 Depth; | |
unsigned __int16 MaximumDepth; | |
unsigned int TotalAllocates; | |
$9D02AA4AC86E49CEAF084B97B97744B1 ___u4; | |
unsigned int TotalFrees; | |
$4290DA71080BA5C562B380EC38D3C295 ___u6; | |
_POOL_TYPE Type; | |
unsigned int Tag; | |
unsigned int Size; | |
$609F7953459DED3393456EC56E47AB4E ___u10; | |
$99A3AD952844BD1662DDA06B4C8C1657 ___u11; | |
_LIST_ENTRY ListEntry; | |
unsigned int LastTotalAllocates; | |
$BA67176EA55FA2D963EA02A98A2C99D2 ___u14; | |
unsigned int Future[2]; | |
}; | |
/* 403 */ | |
struct _LOOKASIDE_LIST_EX | |
{ | |
_GENERAL_LOOKASIDE_POOL L; | |
}; | |
/* 416 */ | |
union $69E0CAE5652EB475CFF531B956741601 | |
{ | |
_KAFFINITY_EX KeFlushTbAffinity; | |
_KAFFINITY_EX KeFlushWbAffinity; | |
_KAFFINITY_EX KeSyncContextAffinity; | |
}; | |
/* 417 */ | |
struct _KSTATIC_AFFINITY_BLOCK | |
{ | |
$69E0CAE5652EB475CFF531B956741601 ___u0; | |
_KAFFINITY_EX KeFlushTbDeepIdleAffinity; | |
_KAFFINITY_EX KeIpiSendAffinity; | |
_KAFFINITY_EX KeIpiSendIpiSet; | |
}; | |
/* 418 */ | |
struct _RTL_HASH_TABLE | |
{ | |
unsigned int EntryCount; | |
unsigned __int32 MaskBitCount : 5; | |
unsigned __int32 BucketCount : 27; | |
_SINGLE_LIST_ENTRY *Buckets; | |
}; | |
/* 425 */ | |
struct __declspec(align(2)) _PROCESSOR_IDLE_CONSTRAINTS | |
{ | |
unsigned __int64 TotalTime; | |
unsigned __int64 IdleTime; | |
unsigned __int64 ExpectedIdleDuration; | |
unsigned __int64 MaxIdleDuration; | |
unsigned int OverrideState; | |
unsigned int TimeCheck; | |
unsigned __int8 PromotePercent; | |
unsigned __int8 DemotePercent; | |
unsigned __int8 Parked; | |
unsigned __int8 Interruptible; | |
unsigned __int8 PlatformIdle; | |
unsigned __int8 ExpectedWakeReason; | |
unsigned __int8 IdleStateMax; | |
}; | |
/* 427 */ | |
struct __declspec(align(8)) _PROCESSOR_IDLE_PREPARE_INFO | |
{ | |
void *Context; | |
_PROCESSOR_IDLE_CONSTRAINTS Constraints; | |
unsigned int DependencyCount; | |
unsigned int DependencyUsed; | |
_PROCESSOR_IDLE_DEPENDENCY *DependencyArray; | |
unsigned int PlatformIdleStateIndex; | |
unsigned int ProcessorIdleStateIndex; | |
unsigned int IdleSelectFailureMask; | |
}; | |
/* 429 */ | |
struct _PPM_SELECTION_MENU | |
{ | |
unsigned int Count; | |
_PPM_SELECTION_MENU_ENTRY *Entries; | |
}; | |
/* 432 */ | |
struct _PPM_COORDINATED_SELECTION | |
{ | |
unsigned int MaximumStates; | |
unsigned int SelectedStates; | |
unsigned int DefaultSelection; | |
unsigned int *Selection; | |
}; | |
/* 433 */ | |
struct _UNICODE_STRING | |
{ | |
unsigned __int16 Length; | |
unsigned __int16 MaximumLength; | |
wchar_t *Buffer; | |
}; | |
/* 435 */ | |
struct _PPM_VETO_ACCOUNTING | |
{ | |
volatile int VetoPresent; | |
_LIST_ENTRY VetoListHead; | |
unsigned __int8 CsAccountingBlocks; | |
unsigned __int8 BlocksDrips; | |
unsigned int PreallocatedVetoCount; | |
_PPM_VETO_ENTRY *PreallocatedVetoList; | |
}; | |
/* 436 */ | |
struct _PPM_IDLE_STATE | |
{ | |
_KAFFINITY_EX DomainMembers; | |
_UNICODE_STRING Name; | |
unsigned int Latency; | |
unsigned int BreakEvenDuration; | |
unsigned int Power; | |
unsigned int StateFlags; | |
_PPM_VETO_ACCOUNTING VetoAccounting; | |
unsigned __int8 StateType; | |
unsigned __int8 InterruptsEnabled; | |
unsigned __int8 Interruptible; | |
unsigned __int8 ContextRetained; | |
unsigned __int8 CacheCoherent; | |
unsigned __int8 WakesSpuriously; | |
unsigned __int8 PlatformOnly; | |
unsigned __int8 NoCState; | |
}; | |
/* 437 */ | |
struct _PPM_IDLE_STATES | |
{ | |
unsigned __int8 InterfaceVersion; | |
unsigned __int8 IdleOverride; | |
unsigned __int8 EstimateIdleDuration; | |
unsigned __int8 ExitLatencyTraceEnabled; | |
unsigned __int8 NonInterruptibleTransition; | |
unsigned __int8 UnaccountedTransition; | |
unsigned __int8 IdleDurationLimited; | |
unsigned __int8 IdleCheckLimited; | |
unsigned __int8 StrictVetoBias; | |
unsigned int ExitLatencyCountdown; | |
unsigned int TargetState; | |
unsigned int ActualState; | |
unsigned int OldState; | |
unsigned int OverrideIndex; | |
unsigned int ProcessorIdleCount; | |
unsigned int Type; | |
unsigned __int64 LevelId; | |
unsigned __int16 ReasonFlags; | |
volatile unsigned __int64 InitiateWakeStamp; | |
int PreviousStatus; | |
unsigned int PreviousCancelReason; | |
_KAFFINITY_EX PrimaryProcessorMask; | |
_KAFFINITY_EX SecondaryProcessorMask; | |
void (__fastcall *IdlePrepare)(_PROCESSOR_IDLE_PREPARE_INFO *); | |
int (__fastcall *IdlePreExecute)(void *, unsigned int, unsigned int, unsigned int, unsigned int *); | |
int (__fastcall *IdleExecute)(void *, unsigned __int64, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int *); | |
unsigned int (__fastcall *IdlePreselect)(void *, _PROCESSOR_IDLE_CONSTRAINTS *); | |
unsigned int (__fastcall *IdleTest)(void *, unsigned int, unsigned int); | |
unsigned int (__fastcall *IdleAvailabilityCheck)(void *, unsigned int); | |
void (__fastcall *IdleComplete)(void *, unsigned int, unsigned int, unsigned int, unsigned int *); | |
void (__fastcall *IdleCancel)(void *, unsigned int); | |
unsigned __int8 (__fastcall *IdleIsHalted)(void *); | |
unsigned __int8 (__fastcall *IdleInitiateWake)(void *); | |
_PROCESSOR_IDLE_PREPARE_INFO PrepareInfo; | |
_KAFFINITY_EX DeepIdleSnapshot; | |
_PERFINFO_PPM_STATE_SELECTION *Tracing; | |
_PERFINFO_PPM_STATE_SELECTION *CoordinatedTracing; | |
_PPM_SELECTION_MENU ProcessorMenu; | |
_PPM_SELECTION_MENU CoordinatedMenu; | |
_PPM_COORDINATED_SELECTION CoordinatedSelection; | |
_PPM_IDLE_STATE State[1]; | |
}; | |
/* 438 */ | |
struct _PPM_SELECTION_STATISTICS | |
{ | |
unsigned __int64 SelectedCount; | |
unsigned __int64 VetoCount; | |
unsigned __int64 PreVetoCount; | |
unsigned __int64 WrongProcessorCount; | |
unsigned __int64 LatencyCount; | |
unsigned __int64 IdleDurationCount; | |
unsigned __int64 DeviceDependencyCount; | |
unsigned __int64 ProcessorDependencyCount; | |
unsigned __int64 PlatformOnlyCount; | |
unsigned __int64 InterruptibleCount; | |
unsigned __int64 LegacyOverrideCount; | |
unsigned __int64 CstateCheckCount; | |
unsigned __int64 NoCStateCount; | |
unsigned __int64 CoordinatedDependencyCount; | |
unsigned __int64 NotClockOwnerCount; | |
_PPM_VETO_ACCOUNTING *PreVetoAccounting; | |
}; | |
/* 439 */ | |
struct __declspec(align(8)) _PROC_IDLE_STATE_BUCKET | |
{ | |
unsigned __int64 TotalTime; | |
unsigned __int64 MinTime; | |
unsigned __int64 MaxTime; | |
unsigned int Count; | |
}; | |
/* 440 */ | |
struct _PROC_IDLE_STATE_ACCOUNTING | |
{ | |
unsigned __int64 TotalTime; | |
unsigned int CancelCount; | |
unsigned int FailureCount; | |
unsigned int SuccessCount; | |
unsigned int InvalidBucketIndex; | |
unsigned __int64 MinTime; | |
unsigned __int64 MaxTime; | |
_PPM_SELECTION_STATISTICS SelectionStatistics; | |
_PROC_IDLE_STATE_BUCKET IdleTimeBuckets[26]; | |
}; | |
/* 441 */ | |
struct _PROC_IDLE_ACCOUNTING | |
{ | |
unsigned int StateCount; | |
unsigned int TotalTransitions; | |
unsigned int ResetCount; | |
unsigned int AbortCount; | |
unsigned __int64 StartTime; | |
unsigned __int64 PriorIdleTime; | |
PPM_IDLE_BUCKET_TIME_TYPE TimeUnit; | |
_PROC_IDLE_STATE_ACCOUNTING State[1]; | |
}; | |
/* 445 */ | |
union $23D3264716E8BCDB05722CA6474DA032 | |
{ | |
void (__fastcall *InstantaneousRead)(unsigned __int64, unsigned int *); | |
void (__fastcall *DifferentialRead)(unsigned __int64, unsigned __int8, unsigned __int64 *, unsigned __int64 *); | |
}; | |
/* 446 */ | |
struct _PROC_FEEDBACK_COUNTER | |
{ | |
$23D3264716E8BCDB05722CA6474DA032 ___u0; | |
unsigned __int64 LastActualCount; | |
unsigned __int64 LastReferenceCount; | |
unsigned int CachedValue; | |
__declspec(align(8)) unsigned __int8 Affinitized; | |
unsigned __int8 Differential; | |
unsigned __int8 DiscardIdleTime; | |
unsigned __int8 Scaling; | |
unsigned __int64 Context; | |
}; | |
/* 453 */ | |
struct __declspec(align(4)) _PROC_PERF_QOS_CLASS_POLICY | |
{ | |
unsigned int MaxPolicyPercent; | |
unsigned int MaxEquivalentFrequencyPercent; | |
unsigned int MinPolicyPercent; | |
unsigned int AutonomousActivityWindow; | |
unsigned int EnergyPerfPreference; | |
unsigned __int8 ProvideGuidance; | |
unsigned __int8 AllowThrottling; | |
unsigned __int8 PerfBoostMode; | |
unsigned __int8 LatencyHintPerf; | |
unsigned __int8 TrackDesiredCrossClass; | |
}; | |
/* 451 */ | |
struct __declspec(align(4)) _PERF_CONTROL_STATE_SELECTION | |
{ | |
unsigned __int64 SelectedState; | |
unsigned int SelectedPercent; | |
unsigned int SelectedFrequency; | |
unsigned int MinPercent; | |
unsigned int MaxPercent; | |
unsigned int TolerancePercent; | |
unsigned int EppPercent; | |
unsigned int AutonomousActivityWindow; | |
unsigned __int8 Autonomous; | |
unsigned __int8 InheritFromDomain; | |
}; | |
/* 454 */ | |
struct __declspec(align(2)) _PROC_PERF_DOMAIN | |
{ | |
_LIST_ENTRY Link; | |
_PROC_PERF_CHECK_CONTEXT *Master; | |
_KAFFINITY_EX Members; | |
unsigned __int64 DomainContext; | |
unsigned int ProcessorCount; | |
unsigned __int8 EfficiencyClass; | |
unsigned __int8 NominalPerformanceClass; | |
unsigned __int8 HighestPerformanceClass; | |
_PROCESSOR_PRESENCE Presence; | |
_PROC_PERF_CONSTRAINT *Processors; | |
void (__fastcall *GetFFHThrottleState)(unsigned __int64 *); | |
void (__fastcall *TimeWindowHandler)(unsigned __int64, unsigned int); | |
void (__fastcall *BoostPolicyHandler)(unsigned __int64, unsigned int); | |
void (__fastcall *BoostModeHandler)(unsigned __int64, unsigned int); | |
void (__fastcall *AutonomousActivityWindowHandler)(unsigned __int64, unsigned int); | |
void (__fastcall *AutonomousModeHandler)(unsigned __int64, unsigned int); | |
void (__fastcall *ReinitializeHandler)(unsigned __int64); | |
unsigned int (__fastcall *PerfSelectionHandler)(unsigned __int64, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int *, unsigned __int64 *); | |
void (__fastcall *PerfControlHandler)(unsigned __int64, _PERF_CONTROL_STATE_SELECTION *, unsigned __int8, unsigned __int8); | |
void (__fastcall *PerfControlHandlerHidden)(unsigned __int64, _PERF_CONTROL_STATE_SELECTION *, unsigned __int8, unsigned __int8); | |
void (__fastcall *DomainPerfControlHandler)(unsigned __int64, _PERF_CONTROL_STATE_SELECTION *, unsigned __int8, unsigned __int8); | |
unsigned int MaxFrequency; | |
unsigned int NominalFrequency; | |
unsigned int MaxPercent; | |
unsigned int MinPerfPercent; | |
unsigned int MinThrottlePercent; | |
unsigned int AdvertizedMaximumFrequency; | |
unsigned __int64 MinimumRelativePerformance; | |
unsigned __int64 NominalRelativePerformance; | |
unsigned __int8 NominalRelativePerformancePercent; | |
unsigned __int8 Coordination; | |
unsigned __int8 HardPlatformCap; | |
unsigned __int8 AffinitizeControl; | |
unsigned __int8 EfficientThrottle; | |
unsigned __int8 AllowSchedulerDirectedPerfStates; | |
unsigned __int8 InitiateAllProcessors; | |
unsigned __int8 AutonomousMode; | |
unsigned __int8 ProvideGuidance; | |
unsigned int DesiredPercent; | |
unsigned int GuaranteedPercent; | |
unsigned __int8 EngageResponsivenessOverrides; | |
_PROC_PERF_QOS_CLASS_POLICY QosPolicies[5]; | |
unsigned int QosDisableReasons[5]; | |
unsigned __int16 QosEquivalencyMasks[5]; | |
unsigned __int8 QosSupported; | |
volatile unsigned int SelectionGeneration; | |
_PERF_CONTROL_STATE_SELECTION QosSelection[5]; | |
unsigned __int64 PerfChangeTime; | |
unsigned int PerfChangeIntervalCount; | |
unsigned __int8 Force; | |
unsigned __int8 Update; | |
unsigned __int8 Apply; | |
}; | |
/* 452 */ | |
struct _PROC_PERF_CONSTRAINT | |
{ | |
_PROC_PERF_CHECK_CONTEXT *CheckContext; | |
unsigned __int64 PerfContext; | |
_PROCESSOR_PRESENCE Presence; | |
unsigned int ProcessorId; | |
unsigned int PlatformCap; | |
unsigned int ThermalCap; | |
unsigned int LimitReasons; | |
unsigned __int64 PlatformCapStartTime; | |
unsigned int ProcCap; | |
unsigned int ProcFloor; | |
unsigned int TargetPercent; | |
unsigned __int8 EngageResponsivenessOverrides; | |
unsigned __int8 ResponsivenessChangeCount; | |
_PERF_CONTROL_STATE_SELECTION Selection; | |
unsigned int DomainSelectionGeneration; | |
unsigned int PreviousFrequency; | |
unsigned int PreviousPercent; | |
unsigned int LatestFrequencyPercent; | |
unsigned int LatestPerformancePercent; | |
unsigned __int8 Force; | |
unsigned __int8 UseQosUpdateLock; | |
unsigned __int64 QosUpdateLock; | |
}; | |
/* 455 */ | |
struct __declspec(align(8)) _PROC_PERF_CHECK_SNAP | |
{ | |
unsigned __int64 Time; | |
unsigned __int64 Active; | |
unsigned __int64 Stall; | |
unsigned __int64 FrequencyScaledActive; | |
unsigned __int64 PerformanceScaledActive; | |
unsigned __int64 PerformanceScaledKernelActive; | |
unsigned __int64 CyclesActive; | |
unsigned __int64 CyclesAffinitized; | |
unsigned __int64 TaggedThreadCycles[3]; | |
unsigned int ResponsivenessEvents; | |
}; | |
/* 456 */ | |
struct __declspec(align(8)) _PROC_PERF_CHECK | |
{ | |
unsigned __int64 LastActive; | |
unsigned __int64 LastTime; | |
unsigned __int64 LastStall; | |
unsigned int LastResponsivenessEvents; | |
_PROC_PERF_CHECK_SNAP LastPerfCheckSnap; | |
_PROC_PERF_CHECK_SNAP CurrentSnap; | |
_PROC_PERF_CHECK_SNAP LastDeliveredSnap; | |
unsigned int LastDeliveredPerformance; | |
unsigned int LastDeliveredFrequency; | |
unsigned __int8 TaggedThreadPercent[3]; | |
unsigned __int8 Class0FloorPerfSelection; | |
unsigned __int8 Class1MinimumPerfSelection; | |
unsigned int CurrentResponsivenessEvents; | |
}; | |
/* 457 */ | |
struct _PROC_PERF_LOAD | |
{ | |
unsigned __int8 BusyPercentage; | |
unsigned __int8 FrequencyPercentage; | |
}; | |
/* 458 */ | |
struct __declspec(align(2)) _PROC_PERF_HISTORY_ENTRY | |
{ | |
unsigned __int16 Utility; | |
unsigned __int16 AffinitizedUtility; | |
unsigned __int16 Frequency; | |
unsigned __int8 TaggedPercent[3]; | |
}; | |
/* 459 */ | |
struct __declspec(align(4)) _PROC_PERF_HISTORY | |
{ | |
unsigned int Count; | |
unsigned int Slot; | |
unsigned int UtilityTotal; | |
unsigned int AffinitizedUtilityTotal; | |
unsigned int FrequencyTotal; | |
unsigned int TaggedPercentTotal[3]; | |
_PROC_PERF_HISTORY_ENTRY HistoryList[1]; | |
}; | |
/* 460 */ | |
struct _PPM_CONCURRENCY_ACCOUNTING | |
{ | |
unsigned __int64 Lock; | |
unsigned int Processors; | |
unsigned int ActiveProcessors; | |
unsigned __int64 LastUpdateTime; | |
unsigned __int64 TotalTime; | |
unsigned __int64 AccumulatedTime[1]; | |
}; | |
/* 819 */ | |
struct $4CCC065527AC26049AC1DF7692B94D6D | |
{ | |
unsigned __int32 SystemTransition : 1; | |
unsigned __int32 PepD0Notify : 1; | |
unsigned __int32 IdleTimerOn : 1; | |
unsigned __int32 IgnoreIdleTimeout : 1; | |
unsigned __int32 IrpInUse : 1; | |
unsigned __int32 IrpPending : 1; | |
unsigned __int32 DPNRDeviceNotified : 1; | |
unsigned __int32 DPNRReceivedFromPep : 1; | |
unsigned __int32 IrpFirstPendingIndex : 1; | |
unsigned __int32 IrpLastPendingIndex : 1; | |
unsigned __int32 SIrpBlocked : 1; | |
unsigned __int32 BlockFastResume : 1; | |
unsigned __int32 DirectedPoweredDown : 1; | |
unsigned __int32 DirectedTransitionInProgress : 1; | |
unsigned __int32 Reserved : 18; | |
}; | |
/* 820 */ | |
volatile union _POP_FX_DEVICE_STATUS | |
{ | |
int Value; | |
$4CCC065527AC26049AC1DF7692B94D6D __s1; | |
}; | |
/* 841 */ | |
struct _POP_FX_DRIVER_CALLBACKS | |
{ | |
void (__fastcall *ComponentActive)(void *, unsigned int); | |
void (__fastcall *ComponentIdle)(void *, unsigned int); | |
void (__fastcall *ComponentIdleState)(void *, unsigned int, unsigned int); | |
void (__fastcall *DevicePowerRequired)(void *); | |
void (__fastcall *DevicePowerNotRequired)(void *); | |
int (__fastcall *PowerControl)(void *, const _GUID *, void *, unsigned __int64, void *, unsigned __int64, unsigned __int64 *); | |
void (__fastcall *ComponentCriticalTransition)(void *, unsigned int, unsigned __int8); | |
void (__fastcall *DripsWatchdogCallback)(void *, _DEVICE_OBJECT *, unsigned int); | |
void (__fastcall *DirectedPowerUpCallback)(void *, unsigned int); | |
void (__fastcall *DirectedPowerDownCallback)(void *, unsigned int); | |
}; | |
/* 842 */ | |
struct _IO_REMOVE_LOCK_COMMON_BLOCK | |
{ | |
unsigned __int8 Removed; | |
unsigned __int8 Reserved[3]; | |
int IoCount; | |
_KEVENT RemoveEvent; | |
}; | |
/* 843 */ | |
struct _IO_REMOVE_LOCK | |
{ | |
_IO_REMOVE_LOCK_COMMON_BLOCK Common; | |
}; | |
/* 601 */ | |
struct _WORK_QUEUE_ITEM | |
{ | |
_LIST_ENTRY List; | |
void (__fastcall *WorkerRoutine)(void *); | |
void *Parameter; | |
}; | |
/* 844 */ | |
struct _POP_FX_WORK_ORDER | |
{ | |
_WORK_QUEUE_ITEM WorkItem; | |
int WorkCount; | |
void *Context; | |
_POP_FX_WORK_ORDER_WATCHDOG_INFO *WatchdogTimerInfo; | |
}; | |
/* 805 */ | |
union _POWER_STATE | |
{ | |
_SYSTEM_POWER_STATE SystemState; | |
_DEVICE_POWER_STATE DeviceState; | |
}; | |
/* 861 */ | |
struct _POP_FX_ACTIVE_TIME_ACCOUNTING | |
{ | |
unsigned __int64 Total; | |
unsigned __int64 Unattributed; | |
unsigned __int64 Buckets[5]; | |
unsigned __int64 PerBucket[5]; | |
}; | |
/* 862 */ | |
struct _POP_FX_ACCOUNTING | |
{ | |
unsigned __int64 Lock; | |
unsigned __int8 Active; | |
unsigned int DripsRequiredState; | |
int Level; | |
__int64 ActiveStamp; | |
_POP_FX_ACTIVE_TIME_ACCOUNTING CsActiveTimeAccounting; | |
_POP_FX_ACTIVE_TIME_ACCOUNTING CsCriticalActiveTimeAccounting; | |
}; | |
/* 884 */ | |
struct __declspec(align(8)) _POP_FX_DRIPS_WATCHDOG_CONTEXT | |
{ | |
_LIST_ENTRY Link; | |
unsigned int ComponentIndex; | |
_DEVICE_NODE **ChildDevices; | |
unsigned int ChildDeviceCount; | |
}; | |
/* 859 */ | |
struct _POP_FX_WORK_ORDER_WATCHDOG_INFO | |
{ | |
_LIST_ENTRY Link; | |
_KTIMER Timer; | |
_KDPC Dpc; | |
_POP_FX_WORK_ORDER *WorkOrder; | |
_PEP_WORK_INFORMATION *CurrentWorkInfo; | |
unsigned __int64 WatchdogStart; | |
_KTHREAD *WorkerThread; | |
}; | |
/* 885 */ | |
struct _POP_FX_DEVICE_DIRECTED_TRANSITION_STATE | |
{ | |
void *CompletionContext; | |
int CompletionStatus; | |
unsigned __int32 DIrpPending : 1; | |
unsigned __int32 DIrpCompleted : 1; | |
}; | |
/* 815 */ | |
struct _POP_FX_DEVICE | |
{ | |
_LIST_ENTRY Link; | |
_IRP *Irp; | |
_POP_IRP_DATA *IrpData; | |
volatile _POP_FX_DEVICE_STATUS Status; | |
volatile int PowerReqCall; | |
volatile int PowerNotReqCall; | |
_DEVICE_NODE *DevNode; | |
PEPHANDLE__ *DpmContext; | |
_POP_FX_PLUGIN *Plugin; | |
PEPHANDLE__ *PluginHandle; | |
_POP_FX_PLUGIN *AcpiPlugin; | |
PEPHANDLE__ *AcpiPluginHandle; | |
_DEVICE_OBJECT *DeviceObject; | |
_DEVICE_OBJECT *TargetDevice; | |
_POP_FX_DRIVER_CALLBACKS Callbacks; | |
void *DriverContext; | |
_LIST_ENTRY AcpiLink; | |
_UNICODE_STRING DeviceId; | |
volatile int CommonReferenceFlags; | |
_IO_REMOVE_LOCK RemoveLock; | |
_IO_REMOVE_LOCK AcpiRemoveLock; | |
_POP_FX_WORK_ORDER WorkOrder; | |
unsigned __int64 IdleLock; | |
_KTIMER IdleTimer; | |
_KDPC IdleDpc; | |
unsigned __int64 IdleTimeout; | |
unsigned __int64 IdleStamp; | |
_DEVICE_OBJECT *NextIrpDeviceObject[2]; | |
_POWER_STATE NextIrpPowerState[2]; | |
void (__fastcall *NextIrpCallerCompletion[2])(_DEVICE_OBJECT *, unsigned __int8, _POWER_STATE, void *, _IO_STATUS_BLOCK *); | |
void *NextIrpCallerContext[2]; | |
_KEVENT IrpCompleteEvent; | |
unsigned __int8 (__fastcall *PowerOnDumpDeviceCallback)(_PEP_CRASHDUMP_INFORMATION *); | |
_POP_FX_ACCOUNTING Accounting; | |
volatile unsigned int Flags; | |
unsigned int ComponentCount; | |
_POP_FX_COMPONENT **Components; | |
unsigned int LogEntries; | |
_POP_FX_LOG_ENTRY *Log; | |
volatile int LogIndex; | |
_DRIVER_OBJECT *DripsWatchdogDriverObject; | |
_POP_FX_DRIPS_WATCHDOG_CONTEXT DripsWatchdogContext; | |
unsigned int DirectedTimeout; | |
_POP_FX_WORK_ORDER DirectedWorkOrder; | |
_POP_FX_WORK_ORDER_WATCHDOG_INFO DirectedWorkWatchdogInfo; | |
unsigned __int64 DirectedLock; | |
volatile int DirectedTransitionCallCount; | |
_POP_FX_DEVICE_DIRECTED_TRANSITION_STATE DirectedTransitionState; | |
_POP_DEVICE_POWER_PROFILE *PowerProfile; | |
_UNICODE_STRING FriendlyName; | |
}; | |
/* 890 */ | |
struct _PEBS_DS_SAVE_AREA32 | |
{ | |
unsigned int BtsBufferBase; | |
unsigned int BtsIndex; | |
unsigned int BtsAbsoluteMaximum; | |
unsigned int BtsInterruptThreshold; | |
unsigned int PebsBufferBase; | |
unsigned int PebsIndex; | |
unsigned int PebsAbsoluteMaximum; | |
unsigned int PebsInterruptThreshold; | |
unsigned __int64 PebsGpCounterReset[8]; | |
unsigned __int64 PebsFixedCounterReset[4]; | |
}; | |
/* 891 */ | |
struct _PEBS_DS_SAVE_AREA64 | |
{ | |
unsigned __int64 BtsBufferBase; | |
unsigned __int64 BtsIndex; | |
unsigned __int64 BtsAbsoluteMaximum; | |
unsigned __int64 BtsInterruptThreshold; | |
unsigned __int64 PebsBufferBase; | |
unsigned __int64 PebsIndex; | |
unsigned __int64 PebsAbsoluteMaximum; | |
unsigned __int64 PebsInterruptThreshold; | |
unsigned __int64 PebsGpCounterReset[8]; | |
unsigned __int64 PebsFixedCounterReset[4]; | |
}; | |
/* 892 */ | |
union $EC5E77FB1A6D602F28063F8B6D192E73 | |
{ | |
_PEBS_DS_SAVE_AREA32 As32Bit; | |
_PEBS_DS_SAVE_AREA64 As64Bit; | |
}; | |
/* 893 */ | |
struct _PEBS_DS_SAVE_AREA | |
{ | |
$EC5E77FB1A6D602F28063F8B6D192E73 ___u0; | |
}; | |
/* 894 */ | |
struct _PROCESSOR_PROFILE_CONTROL_AREA | |
{ | |
_PEBS_DS_SAVE_AREA PebsDsSaveArea; | |
}; | |
/* 426 */ | |
struct __declspec(align(2)) _PROCESSOR_IDLE_DEPENDENCY | |
{ | |
unsigned int ProcessorIndex; | |
unsigned __int8 ExpectedState; | |
unsigned __int8 AllowDeeperStates; | |
unsigned __int8 LooseDependency; | |
}; | |
/* 428 */ | |
struct _PERFINFO_PPM_STATE_SELECTION | |
{ | |
unsigned int SelectedState; | |
unsigned int VetoedStates; | |
unsigned int VetoReason[1]; | |
}; | |
/* 431 */ | |
struct _PPM_SELECTION_MENU_ENTRY | |
{ | |
unsigned __int8 StrictDependency; | |
unsigned __int8 InitiatingState; | |
unsigned __int8 DependentState; | |
unsigned int StateIndex; | |
unsigned int Dependencies; | |
_PPM_SELECTION_DEPENDENCY *DependencyList; | |
}; | |
/* 434 */ | |
struct _PPM_VETO_ENTRY | |
{ | |
_LIST_ENTRY Link; | |
unsigned int VetoReason; | |
unsigned int ReferenceCount; | |
unsigned __int64 HitCount; | |
unsigned __int64 LastActivationTime; | |
unsigned __int64 TotalActiveTime; | |
unsigned __int64 CsActivationTime; | |
unsigned __int64 CsActiveTime; | |
}; | |
/* 496 */ | |
union $250F5FE22B4503EFD7D48C86CC7F2167 | |
{ | |
int Status; | |
void *Pointer; | |
}; | |
/* 497 */ | |
struct _IO_STATUS_BLOCK | |
{ | |
$250F5FE22B4503EFD7D48C86CC7F2167 ___u0; | |
unsigned __int64 Information; | |
}; | |
/* 783 */ | |
union $90B7B9E2AE185F997E104583FE5A81D4 | |
{ | |
void (__fastcall *UserApcRoutine)(void *, _IO_STATUS_BLOCK *, unsigned int); | |
void *IssuingProcess; | |
}; | |
/* 505 */ | |
struct __declspec(align(4)) _KDEVICE_QUEUE_ENTRY | |
{ | |
_LIST_ENTRY DeviceListEntry; | |
unsigned int SortKey; | |
unsigned __int8 Inserted; | |
}; | |
/* 813 */ | |
union $F9A7266688BBB10A2DDD64478C4453F4 | |
{ | |
_KDEVICE_QUEUE_ENTRY DeviceQueueEntry; | |
void *DriverContext[4]; | |
}; | |
/* 814 */ | |
union $40D5A933C886140D0624780101EF3FA0 | |
{ | |
_IO_STACK_LOCATION *CurrentStackLocation; | |
unsigned int PacketType; | |
}; | |
/* 491 */ | |
struct _IRP | |
{ | |
__int16 Type; | |
unsigned __int16 Size; | |
unsigned __int16 AllocationProcessorNumber; | |
unsigned __int16 Reserved; | |
_MDL *MdlAddress; | |
unsigned int Flags; | |
union | |
{ | |
_IRP *MasterIrp; | |
int IrpCount; | |
void *SystemBuffer; | |
} AssociatedIrp; | |
_LIST_ENTRY ThreadListEntry; | |
_IO_STATUS_BLOCK IoStatus; | |
char RequestorMode; | |
unsigned __int8 PendingReturned; | |
char StackCount; | |
char CurrentLocation; | |
unsigned __int8 Cancel; | |
unsigned __int8 CancelIrql; | |
char ApcEnvironment; | |
unsigned __int8 AllocationFlags; | |
_IO_STATUS_BLOCK *UserIosb; | |
_KEVENT *UserEvent; | |
union | |
{ | |
struct | |
{ | |
$90B7B9E2AE185F997E104583FE5A81D4 ___u0; | |
void *UserApcContext; | |
} AsynchronousParameters; | |
_LARGE_INTEGER AllocationSize; | |
} Overlay; | |
void (__fastcall *CancelRoutine)(_DEVICE_OBJECT *, _IRP *); | |
void *UserBuffer; | |
union | |
{ | |
struct | |
{ | |
$F9A7266688BBB10A2DDD64478C4453F4 ___u0; | |
_ETHREAD *Thread; | |
char *AuxiliaryBuffer; | |
_LIST_ENTRY ListEntry; | |
$40D5A933C886140D0624780101EF3FA0 ___u4; | |
_FILE_OBJECT *OriginalFileObject; | |
void *IrpExtension; | |
} Overlay; | |
_KAPC Apc; | |
void *CompletionKey; | |
} Tail; | |
}; | |
/* 817 */ | |
union $8CEC4B7F71BF05A366BE93E8BB44D07C | |
{ | |
struct __declspec(align(8)) | |
{ | |
void (__fastcall *CallerCompletion)(_DEVICE_OBJECT *, unsigned __int8, _POWER_STATE, void *, _IO_STATUS_BLOCK *); | |
void *CallerContext; | |
_DEVICE_OBJECT *CallerDevice; | |
unsigned __int8 SystemWake; | |
} Device; | |
struct __declspec(align(8)) | |
{ | |
_PO_DEVICE_NOTIFY *NotifyDevice; | |
unsigned __int8 FxDeviceActivated; | |
} System; | |
}; | |
/* 818 */ | |
struct __declspec(align(8)) _POP_IRP_DATA | |
{ | |
_LIST_ENTRY Link; | |
_IRP *Irp; | |
_DEVICE_OBJECT *Pdo; | |
_DEVICE_OBJECT *TargetDevice; | |
_DEVICE_OBJECT *CurrentDevice; | |
unsigned __int64 WatchdogStart; | |
_KTIMER WatchdogTimer; | |
_KDPC WatchdogDpc; | |
unsigned __int8 MinorFunction; | |
_POWER_STATE_TYPE PowerStateType; | |
_POWER_STATE PowerState; | |
unsigned __int8 WatchdogEnabled; | |
_POP_FX_DEVICE *FxDevice; | |
unsigned __int8 SystemTransition; | |
unsigned __int8 NotifyPEP; | |
int IrpSequenceID; | |
$8CEC4B7F71BF05A366BE93E8BB44D07C ___u16; | |
_POP_PEP_NOTIFY_DEVICE_DSTATE_REASON DStateReason; | |
}; | |
/* 816 */ | |
struct _PO_DEVICE_NOTIFY | |
{ | |
_LIST_ENTRY Link; | |
_LIST_ENTRY PowerChildren; | |
_LIST_ENTRY PowerParents; | |
_DEVICE_OBJECT *TargetDevice; | |
unsigned __int8 OrderLevel; | |
_DEVICE_OBJECT *DeviceObject; | |
wchar_t *DeviceName; | |
wchar_t *DriverName; | |
unsigned int ChildCount; | |
unsigned int ActiveChild; | |
unsigned int ParentCount; | |
unsigned int ActiveParent; | |
}; | |
/* 826 */ | |
struct _PO_IRP_QUEUE | |
{ | |
_IRP *CurrentIrp; | |
_IRP *PendingIrpList; | |
}; | |
/* 827 */ | |
struct _PO_IRP_MANAGER | |
{ | |
_PO_IRP_QUEUE DeviceIrpQueue; | |
_PO_IRP_QUEUE SystemIrpQueue; | |
}; | |
/* 517 */ | |
struct _GUID | |
{ | |
unsigned int Data1; | |
unsigned __int16 Data2; | |
unsigned __int16 Data3; | |
unsigned __int8 Data4[8]; | |
}; | |
/* 840 */ | |
struct _PO_DIRECTED_DRIPS_STATE | |
{ | |
_LIST_ENTRY QueueLink; | |
_LIST_ENTRY VisitedQueueLink; | |
volatile unsigned int Flags; | |
unsigned int CachedFlags; | |
unsigned int DeviceUsageCount; | |
void *Diagnostic; | |
}; | |
/* 821 */ | |
struct _DEVICE_NODE | |
{ | |
_DEVICE_NODE *Sibling; | |
_DEVICE_NODE *Child; | |
_DEVICE_NODE *Parent; | |
_DEVICE_NODE *LastChild; | |
_DEVICE_OBJECT *PhysicalDeviceObject; | |
_UNICODE_STRING InstancePath; | |
_UNICODE_STRING ServiceName; | |
_IRP *PendingIrp; | |
_POP_FX_DEVICE *FxDevice; | |
volatile int FxDeviceLock; | |
_KEVENT FxRemoveEvent; | |
volatile int FxActivationCount; | |
volatile int FxSleepCount; | |
_UNICODE_STRING UniqueId; | |
_POP_FX_PLUGIN *Plugin; | |
unsigned int Level; | |
_POWER_STATE CurrentPowerState; | |
_PO_DEVICE_NOTIFY Notify; | |
_PO_IRP_MANAGER PoIrpManager; | |
volatile int PowerFlags; | |
_PNP_DEVNODE_STATE State; | |
_PNP_DEVNODE_STATE PreviousState; | |
_PNP_DEVNODE_STATE StateHistory[20]; | |
unsigned int StateHistoryEntry; | |
int CompletionStatus; | |
unsigned int Flags; | |
unsigned int UserFlags; | |
unsigned int Problem; | |
int ProblemStatus; | |
_CM_RESOURCE_LIST *ResourceList; | |
_CM_RESOURCE_LIST *ResourceListTranslated; | |
_DEVICE_OBJECT *DuplicatePDO; | |
_IO_RESOURCE_REQUIREMENTS_LIST *ResourceRequirements; | |
_INTERFACE_TYPE InterfaceType; | |
unsigned int BusNumber; | |
_INTERFACE_TYPE ChildInterfaceType; | |
unsigned int ChildBusNumber; | |
unsigned __int16 ChildBusTypeIndex; | |
unsigned __int8 RemovalPolicy; | |
unsigned __int8 HardwareRemovalPolicy; | |
_LIST_ENTRY TargetDeviceNotify; | |
_LIST_ENTRY DeviceArbiterList; | |
_LIST_ENTRY DeviceTranslatorList; | |
unsigned __int16 NoTranslatorMask; | |
unsigned __int16 QueryTranslatorMask; | |
unsigned __int16 NoArbiterMask; | |
unsigned __int16 QueryArbiterMask; | |
union | |
{ | |
_DEVICE_NODE *LegacyDeviceNode; | |
_DEVICE_RELATIONS *PendingDeviceRelations; | |
void *Information; | |
} OverUsed1; | |
union | |
{ | |
_DEVICE_NODE *NextResourceDeviceNode; | |
} OverUsed2; | |
_CM_RESOURCE_LIST *BootResources; | |
_CM_RESOURCE_LIST *BootResourcesTranslated; | |
unsigned int CapabilityFlags; | |
struct | |
{ | |
PROFILE_STATUS DockStatus; | |
_LIST_ENTRY ListEntry; | |
wchar_t *SerialNumber; | |
} DockInfo; | |
unsigned int DisableableDepends; | |
_LIST_ENTRY PendedSetInterfaceState; | |
_LIST_ENTRY LegacyBusListEntry; | |
unsigned int DriverUnloadRetryCount; | |
_DEVICE_NODE *PreviousParent; | |
int DeletedChildren; | |
unsigned int NumaNodeIndex; | |
_GUID ContainerID; | |
unsigned __int8 OverrideFlags; | |
unsigned int DeviceIdsHash; | |
unsigned __int8 RequiresUnloadedDriver; | |
_PENDING_RELATIONS_LIST_ENTRY *PendingEjectRelations; | |
unsigned int StateFlags; | |
_PNP_REBALANCE_TRACE_CONTEXT *RebalanceContext; | |
struct _DEVICE_NODE_IOMMU_EXTENSION *IommuExtension; | |
_PO_DIRECTED_DRIPS_STATE DirectedDripsState; | |
}; | |
/* 822 */ | |
struct PEPHANDLE__ | |
{ | |
int unused; | |
}; | |
/* 473 */ | |
struct __declspec(align(8)) _KSEMAPHORE | |
{ | |
_DISPATCHER_HEADER Header; | |
int Limit; | |
}; | |
/* 825 */ | |
struct _POP_FX_WORK_POOL_ITEM | |
{ | |
_POP_FX_WORK_POOL *WorkPool; | |
_WORK_QUEUE_ITEM WorkItem; | |
}; | |
/* 824 */ | |
struct _POP_FX_WORK_POOL | |
{ | |
_POP_FX_PLUGIN *Plugin; | |
unsigned __int64 EmergencyWorkQueueLock; | |
_LIST_ENTRY EmergencyWorkQueue; | |
_KSEMAPHORE WorkPoolQueues[2]; | |
volatile int WorkItemStatus; | |
_POP_FX_WORK_POOL_ITEM WorkItems[4]; | |
_KTHREAD *EmergencyWorkerThread; | |
_KTHREAD *DynamicWorkerThreads[4]; | |
}; | |
/* 823 */ | |
struct _POP_FX_PLUGIN | |
{ | |
_LIST_ENTRY Link; | |
unsigned int Version; | |
unsigned __int64 Flags; | |
_KQUEUE WorkQueue; | |
unsigned __int8 (__fastcall *AcceptDeviceNotification)(unsigned int, void *); | |
unsigned __int8 (__fastcall *AcceptProcessorNotification)(PEPHANDLE__ *, unsigned int, void *); | |
unsigned __int8 (__fastcall *AcceptAcpiNotification)(unsigned int, void *); | |
_POP_FX_WORK_POOL PluginWorkPool; | |
}; | |
/* 506 */ | |
struct $CE3A8E5EDE0500FA055299FCDFC33F17 | |
{ | |
_LIST_ENTRY DmaWaitEntry; | |
unsigned int NumberOfChannels; | |
unsigned __int32 SyncCallback : 1; | |
unsigned __int32 DmaContext : 1; | |
unsigned __int32 ZeroMapRegisters : 1; | |
unsigned __int32 Reserved : 9; | |
unsigned __int32 NumberOfRemapPages : 20; | |
}; | |
/* 507 */ | |
union $E2C95FACCED2D09C1BCCFDD7CCE2D601 | |
{ | |
_KDEVICE_QUEUE_ENTRY WaitQueueEntry; | |
$CE3A8E5EDE0500FA055299FCDFC33F17 __s1; | |
}; | |
/* 508 */ | |
struct _WAIT_CONTEXT_BLOCK | |
{ | |
$E2C95FACCED2D09C1BCCFDD7CCE2D601 ___u0; | |
_IO_ALLOCATION_ACTION (__fastcall *DeviceRoutine)(_DEVICE_OBJECT *, _IRP *, void *, void *); | |
void *DeviceContext; | |
unsigned int NumberOfMapRegisters; | |
void *DeviceObject; | |
void *CurrentIrp; | |
_KDPC *BufferChainingDpc; | |
}; | |
/* 509 */ | |
struct $18E3EACC1E717291AA7C720ECCD5C45C | |
{ | |
__int64 Reserved : 8; | |
__int64 Hint : 56; | |
}; | |
/* 510 */ | |
union $7F365C28F4B157F53FDF53AA0555593B | |
{ | |
unsigned __int8 Busy; | |
$18E3EACC1E717291AA7C720ECCD5C45C __s1; | |
}; | |
/* 511 */ | |
struct _KDEVICE_QUEUE | |
{ | |
__int16 Type; | |
__int16 Size; | |
_LIST_ENTRY DeviceListHead; | |
unsigned __int64 Lock; | |
$7F365C28F4B157F53FDF53AA0555593B ___u4; | |
}; | |
/* 476 */ | |
struct __declspec(align(16)) _DEVICE_OBJECT | |
{ | |
__int16 Type; | |
unsigned __int16 Size; | |
int ReferenceCount; | |
_DRIVER_OBJECT *DriverObject; | |
_DEVICE_OBJECT *NextDevice; | |
_DEVICE_OBJECT *AttachedDevice; | |
_IRP *CurrentIrp; | |
_IO_TIMER *Timer; | |
unsigned int Flags; | |
unsigned int Characteristics; | |
_VPB *Vpb; | |
void *DeviceExtension; | |
unsigned int DeviceType; | |
char StackSize; | |
union | |
{ | |
_LIST_ENTRY ListEntry; | |
_WAIT_CONTEXT_BLOCK Wcb; | |
} Queue; | |
unsigned int AlignmentRequirement; | |
_KDEVICE_QUEUE DeviceQueue; | |
_KDPC Dpc; | |
unsigned int ActiveThreadCount; | |
void *SecurityDescriptor; | |
_KEVENT DeviceLock; | |
unsigned __int16 SectorSize; | |
unsigned __int16 Spare1; | |
_DEVOBJ_EXTENSION *DeviceObjectExtension; | |
void *Reserved; | |
}; | |
/* 860 */ | |
struct _PEP_CRASHDUMP_INFORMATION | |
{ | |
PEPHANDLE__ *DeviceHandle; | |
void *DeviceContext; | |
}; | |
/* 863 */ | |
struct $BE89F16392544B30D814E7277EA7E79E | |
{ | |
int Value; | |
int Value2; | |
}; | |
/* 864 */ | |
struct $AEAC89CCD4A218B8F52366BC38303136 | |
{ | |
unsigned __int32 RefCount : 30; | |
unsigned __int32 Idling : 1; | |
unsigned __int32 Active : 1; | |
unsigned __int32 CriticalIdleOverride : 1; | |
unsigned __int32 ResidentOverride : 1; | |
unsigned __int32 Reserved : 30; | |
}; | |
/* 865 */ | |
volatile union _POP_FX_COMPONENT_FLAGS | |
{ | |
$BE89F16392544B30D814E7277EA7E79E __s0; | |
$AEAC89CCD4A218B8F52366BC38303136 __s1; | |
}; | |
/* 869 */ | |
struct _POP_FX_COMPONENT | |
{ | |
_GUID Id; | |
unsigned int Index; | |
_POP_FX_WORK_ORDER WorkOrder; | |
_POP_FX_DEVICE *Device; | |
volatile _POP_FX_COMPONENT_FLAGS Flags; | |
volatile int Resident; | |
_KEVENT ActiveEvent; | |
unsigned __int64 IdleLock; | |
volatile int IdleConditionComplete; | |
volatile int IdleStateComplete; | |
unsigned __int64 IdleStamp; | |
volatile unsigned int CurrentIdleState; | |
unsigned int IdleStateCount; | |
_POP_FX_IDLE_STATE *IdleStates; | |
unsigned int DeepestWakeableIdleState; | |
unsigned int ProviderCount; | |
_POP_FX_PROVIDER *Providers; | |
unsigned int IdleProviderCount; | |
unsigned int DependentCount; | |
_POP_FX_DEPENDENT *Dependents; | |
_POP_FX_ACCOUNTING Accounting; | |
_POP_FX_PERF_INFO *Performance; | |
_POP_COMPONENT_POWER_PROFILE *PowerProfile; | |
}; | |
/* 883 */ | |
struct _POP_FX_LOG_ENTRY | |
{ | |
unsigned __int64 Timestamp; | |
unsigned __int8 Operation; | |
unsigned __int8 Component; | |
unsigned __int16 Processor; | |
unsigned __int16 Process; | |
unsigned __int16 Thread; | |
unsigned __int64 Information; | |
}; | |
/* 477 */ | |
struct _DRIVER_OBJECT | |
{ | |
__int16 Type; | |
__int16 Size; | |
_DEVICE_OBJECT *DeviceObject; | |
unsigned int Flags; | |
void *DriverStart; | |
unsigned int DriverSize; | |
void *DriverSection; | |
_DRIVER_EXTENSION *DriverExtension; | |
_UNICODE_STRING DriverName; | |
_UNICODE_STRING *HardwareDatabase; | |
_FAST_IO_DISPATCH *FastIoDispatch; | |
int (__fastcall *DriverInit)(_DRIVER_OBJECT *, _UNICODE_STRING *); | |
void (__fastcall *DriverStartIo)(_DEVICE_OBJECT *, _IRP *); | |
void (__fastcall *DriverUnload)(_DRIVER_OBJECT *); | |
int (__fastcall *MajorFunction[28])(_DEVICE_OBJECT *, _IRP *); | |
}; | |
/* 846 */ | |
struct __declspec(align(8)) _PEP_WORK_ACTIVE_COMPLETE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int Component; | |
}; | |
/* 847 */ | |
struct _PEP_WORK_IDLE_STATE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int Component; | |
unsigned int State; | |
}; | |
/* 848 */ | |
struct __declspec(align(8)) _PEP_WORK_DEVICE_POWER | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned __int8 PowerRequired; | |
}; | |
/* 849 */ | |
struct _PEP_WORK_POWER_CONTROL | |
{ | |
POHANDLE__ *DeviceHandle; | |
const _GUID *PowerControlCode; | |
void *RequestContext; | |
void *InBuffer; | |
unsigned __int64 InBufferSize; | |
void *OutBuffer; | |
unsigned __int64 OutBufferSize; | |
}; | |
/* 850 */ | |
struct __declspec(align(8)) _PEP_WORK_DEVICE_IDLE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned __int8 IgnoreIdleTimeout; | |
}; | |
/* 851 */ | |
struct __declspec(align(8)) _PEP_WORK_COMPLETE_IDLE_STATE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int Component; | |
}; | |
/* 852 */ | |
struct __declspec(align(4)) _PEP_WORK_COMPLETE_PERF_STATE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int Component; | |
unsigned __int8 Succeeded; | |
}; | |
/* 853 */ | |
struct __declspec(align(8)) _PEP_WORK_ACPI_NOTIFY | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int NotifyCode; | |
}; | |
/* 856 */ | |
struct _PEP_WORK_ACPI_EVALUATE_CONTROL_METHOD_COMPLETE | |
{ | |
POHANDLE__ *DeviceHandle; | |
unsigned int CompletionFlags; | |
int MethodStatus; | |
void *CompletionContext; | |
unsigned __int64 OutputArgumentSize; | |
_ACPI_METHOD_ARGUMENT_V1 *OutputArguments; | |
}; | |
/* 857 */ | |
union $7B6BD87BA6C4C1DCB63BB79323C96996 | |
{ | |
_PEP_WORK_ACTIVE_COMPLETE ActiveComplete; | |
_PEP_WORK_IDLE_STATE IdleState; | |
_PEP_WORK_DEVICE_POWER DevicePower; | |
_PEP_WORK_POWER_CONTROL PowerControl; | |
_PEP_WORK_DEVICE_IDLE DeviceIdle; | |
_PEP_WORK_COMPLETE_IDLE_STATE CompleteIdleState; | |
_PEP_WORK_COMPLETE_PERF_STATE CompletePerfState; | |
_PEP_WORK_ACPI_NOTIFY AcpiNotify; | |
_PEP_WORK_ACPI_EVALUATE_CONTROL_METHOD_COMPLETE ControlMethodComplete; | |
}; | |
/* 858 */ | |
struct _PEP_WORK_INFORMATION | |
{ | |
_PEP_WORK_TYPE WorkType; | |
$7B6BD87BA6C4C1DCB63BB79323C96996 ___u1; | |
}; | |
/* 881 */ | |
struct _PO_POWER_PLANE_PROFILE | |
{ | |
unsigned int ExclusivePowerMw; | |
unsigned int PeakPowerMw; | |
}; | |
/* 879 */ | |
struct _POP_DEVICE_POWER_PROFILE | |
{ | |
_UNICODE_STRING DeviceId; | |
_POP_POWER_PLANE *PowerPlane; | |
_POP_FX_DEVICE *FxDevice; | |
int PowerDrawMw; | |
_PO_POWER_PLANE_PROFILE DxPower[4]; | |
unsigned __int64 ComponentCount; | |
_POP_COMPONENT_POWER_PROFILE **Components; | |
}; | |
/* 430 */ | |
struct _PPM_SELECTION_DEPENDENCY | |
{ | |
unsigned int Processor; | |
_PPM_SELECTION_MENU Menu; | |
}; | |
/* 461 */ | |
struct _MDL | |
{ | |
_MDL *Next; | |
__int16 Size; | |
__int16 MdlFlags; | |
unsigned __int16 AllocationProcessorNumber; | |
unsigned __int16 Reserved; | |
_EPROCESS *Process; | |
void *MappedSystemVa; | |
void *StartVa; | |
unsigned int ByteCount; | |
unsigned int ByteOffset; | |
}; | |
/* 671 */ | |
union $03AD802BBB2911B6FCFC43BAC7BAB117 | |
{ | |
_LARGE_INTEGER ExitTime; | |
_LIST_ENTRY KeyedWaitChain; | |
}; | |
/* 672 */ | |
struct $03D8BF64EDBF31DF6271812E8E91AA90 | |
{ | |
void *ForwardLinkShadow; | |
void *StartAddress; | |
}; | |
/* 673 */ | |
union $1898F4E71FF9860A8E5866ACE35933FB | |
{ | |
_LIST_ENTRY PostBlockList; | |
$03D8BF64EDBF31DF6271812E8E91AA90 __s1; | |
}; | |
/* 674 */ | |
union $9B125B529FAA8333409A5127B3596D53 | |
{ | |
_TERMINATION_PORT *TerminationPort; | |
_ETHREAD *ReaperLink; | |
void *KeyedWaitValue; | |
}; | |
/* 472 */ | |
struct _CLIENT_ID | |
{ | |
void *UniqueProcess; | |
void *UniqueThread; | |
}; | |
/* 675 */ | |
union $512CD7865266E78E96979F87BFD0DF0A | |
{ | |
_KSEMAPHORE KeyedWaitSemaphore; | |
_KSEMAPHORE AlpcWaitSemaphore; | |
}; | |
/* 474 */ | |
struct $8311FD7E80609E8180C960E59071DEBE | |
{ | |
unsigned __int64 ImpersonationLevel : 2; | |
unsigned __int64 EffectiveOnly : 1; | |
}; | |
/* 475 */ | |
union _PS_CLIENT_SECURITY_CONTEXT | |
{ | |
unsigned __int64 ImpersonationData; | |
void *ImpersonationToken; | |
$8311FD7E80609E8180C960E59071DEBE __s2; | |
}; | |
/* 465 */ | |
union $888B7D2A033403A4DF437269584615CD | |
{ | |
unsigned __int64 Count; | |
void *Ptr; | |
}; | |
/* 466 */ | |
struct _EX_RUNDOWN_REF | |
{ | |
$888B7D2A033403A4DF437269584615CD ___u0; | |
}; | |
/* 462 */ | |
struct $2F38BEDF952D5DA5F266621B11247D04 | |
{ | |
unsigned __int64 Locked : 1; | |
unsigned __int64 Waiting : 1; | |
unsigned __int64 Waking : 1; | |
unsigned __int64 MultipleShared : 1; | |
unsigned __int64 Shared : 60; | |
}; | |
/* 463 */ | |
union $577AFED263692DC6722C5509FC158A97 | |
{ | |
$2F38BEDF952D5DA5F266621B11247D04 __s0; | |
unsigned __int64 Value; | |
void *Ptr; | |
}; | |
/* 464 */ | |
struct _EX_PUSH_LOCK | |
{ | |
$577AFED263692DC6722C5509FC158A97 ___u0; | |
}; | |
/* 676 */ | |
struct $485F5E3313845498A12F0D26750C00B6 | |
{ | |
unsigned __int32 Terminated : 1; | |
unsigned __int32 ThreadInserted : 1; | |
unsigned __int32 HideFromDebugger : 1; | |
unsigned __int32 ActiveImpersonationInfo : 1; | |
unsigned __int32 HardErrorsAreDisabled : 1; | |
unsigned __int32 BreakOnTermination : 1; | |
unsigned __int32 SkipCreationMsg : 1; | |
unsigned __int32 SkipTerminationMsg : 1; | |
unsigned __int32 CopyTokenOnOpen : 1; | |
unsigned __int32 ThreadIoPriority : 3; | |
unsigned __int32 ThreadPagePriority : 3; | |
unsigned __int32 RundownFail : 1; | |
unsigned __int32 UmsForceQueueTermination : 1; | |
unsigned __int32 IndirectCpuSets : 1; | |
unsigned __int32 DisableDynamicCodeOptOut : 1; | |
unsigned __int32 ExplicitCaseSensitivity : 1; | |
unsigned __int32 PicoNotifyExit : 1; | |
unsigned __int32 DbgWerUserReportActive : 1; | |
unsigned __int32 ForcedSelfTrimActive : 1; | |
unsigned __int32 SamplingCoverage : 1; | |
unsigned __int32 ReservedCrossThreadFlags : 8; | |
}; | |
/* 677 */ | |
union $67BA79963B4726ED94CCCBFE4B9BC90D | |
{ | |
unsigned int CrossThreadFlags; | |
$485F5E3313845498A12F0D26750C00B6 __s1; | |
}; | |
/* 678 */ | |
struct $FF80C4A6C862A386C6A1719D599D7204 | |
{ | |
unsigned __int32 ActiveExWorker : 1; | |
unsigned __int32 MemoryMaker : 1; | |
unsigned __int32 StoreLockThread : 2; | |
unsigned __int32 ClonedThread : 1; | |
unsigned __int32 KeyedEventInUse : 1; | |
unsigned __int32 SelfTerminate : 1; | |
unsigned __int32 RespectIoPriority : 1; | |
unsigned __int32 ActivePageLists : 1; | |
unsigned __int32 SecureContext : 1; | |
unsigned __int32 ZeroPageThread : 1; | |
unsigned __int32 WorkloadClass : 1; | |
unsigned __int32 ReservedSameThreadPassiveFlags : 20; | |
}; | |
/* 679 */ | |
union $E8FEEDF8F670C780CEB139976D4A55EE | |
{ | |
unsigned int SameThreadPassiveFlags; | |
$FF80C4A6C862A386C6A1719D599D7204 __s1; | |
}; | |
/* 680 */ | |
struct $5410E070226BCD0DD5B85D9B02068595 | |
{ | |
unsigned __int8 OwnsProcessAddressSpaceExclusive : 1; | |
unsigned __int8 OwnsProcessAddressSpaceShared : 1; | |
unsigned __int8 HardFaultBehavior : 1; | |
unsigned __int8 StartAddressInvalid : 1; | |
unsigned __int8 EtwCalloutActive : 1; | |
unsigned __int8 SuppressSymbolLoad : 1; | |
unsigned __int8 Prefetching : 1; | |
unsigned __int8 OwnsVadExclusive : 1; | |
unsigned __int8 SystemPagePriorityActive : 1; | |
unsigned __int8 SystemPagePriority : 3; | |
unsigned __int8 AllowUserWritesToExecutableMemory : 1; | |
unsigned __int8 AllowKernelWritesToExecutableMemory : 1; | |
unsigned __int8 OwnsVadShared : 1; | |
}; | |
/* 681 */ | |
union $A6E5B437B21376954F71CEC929B6F148 | |
{ | |
unsigned int SameThreadApcFlags; | |
$5410E070226BCD0DD5B85D9B02068595 __s1; | |
}; | |
/* 682 */ | |
union $BCDEC18C25A84109137EA1753A3327D2 | |
{ | |
void *AlpcMessage; | |
unsigned int AlpcReceiveAttributeSet; | |
}; | |
/* 518 */ | |
struct _PS_PROPERTY_SET | |
{ | |
_LIST_ENTRY ListHead; | |
unsigned __int64 Lock; | |
}; | |
/* 683 */ | |
union $2F5B20675905D9187E7A5970F6F306B8 | |
{ | |
unsigned __int64 SelectedCpuSets; | |
unsigned __int64 *SelectedCpuSetsIndirect; | |
}; | |
/* 471 */ | |
struct _ETHREAD | |
{ | |
_KTHREAD Tcb; | |
_LARGE_INTEGER CreateTime; | |
$03AD802BBB2911B6FCFC43BAC7BAB117 ___u2; | |
$1898F4E71FF9860A8E5866ACE35933FB ___u3; | |
$9B125B529FAA8333409A5127B3596D53 ___u4; | |
unsigned __int64 ActiveTimerListLock; | |
_LIST_ENTRY ActiveTimerListHead; | |
_CLIENT_ID Cid; | |
$512CD7865266E78E96979F87BFD0DF0A ___u8; | |
_PS_CLIENT_SECURITY_CONTEXT ClientSecurity; | |
_LIST_ENTRY IrpList; | |
unsigned __int64 TopLevelIrp; | |
_DEVICE_OBJECT *DeviceToVerify; | |
void *Win32StartAddress; | |
void *ChargeOnlySession; | |
void *LegacyPowerObject; | |
_LIST_ENTRY ThreadListEntry; | |
_EX_RUNDOWN_REF RundownProtect; | |
_EX_PUSH_LOCK ThreadLock; | |
unsigned int ReadClusterSize; | |
volatile int MmLockOrdering; | |
$67BA79963B4726ED94CCCBFE4B9BC90D ___u21; | |
$E8FEEDF8F670C780CEB139976D4A55EE ___u22; | |
$A6E5B437B21376954F71CEC929B6F148 ___u23; | |
unsigned __int8 CacheManagerActive; | |
unsigned __int8 DisablePageFaultClustering; | |
unsigned __int8 ActiveFaultCount; | |
unsigned __int8 LockOrderState; | |
unsigned int PerformanceCountLowReserved; | |
int PerformanceCountHighReserved; | |
unsigned __int64 AlpcMessageId; | |
$BCDEC18C25A84109137EA1753A3327D2 ___u31; | |
_LIST_ENTRY AlpcWaitListEntry; | |
int ExitStatus; | |
unsigned int CacheManagerCount; | |
unsigned int IoBoostCount; | |
unsigned int IoQoSBoostCount; | |
unsigned int IoQoSThrottleCount; | |
unsigned int KernelStackReference; | |
_LIST_ENTRY BoostList; | |
_LIST_ENTRY DeboostList; | |
unsigned __int64 BoostListLock; | |
unsigned __int64 IrpListLock; | |
void *ReservedForSynchTracking; | |
_SINGLE_LIST_ENTRY CmCallbackListHead; | |
const _GUID *ActivityId; | |
_SINGLE_LIST_ENTRY SeLearningModeListHead; | |
void *VerifierContext; | |
void *AdjustedClientToken; | |
void *WorkOnBehalfThread; | |
_PS_PROPERTY_SET PropertySet; | |
void *PicoContext; | |
unsigned __int64 UserFsBase; | |
unsigned __int64 UserGsBase; | |
_THREAD_ENERGY_VALUES *EnergyValues; | |
$2F5B20675905D9187E7A5970F6F306B8 ___u55; | |
_EJOB *Silo; | |
_UNICODE_STRING *ThreadName; | |
_CONTEXT *SetContextState; | |
unsigned int LastExpectedRunTime; | |
unsigned int HeapData; | |
_LIST_ENTRY OwnerEntryListHead; | |
unsigned __int64 DisownedOwnerEntryListLock; | |
_LIST_ENTRY DisownedOwnerEntryListHead; | |
_KLOCK_ENTRY LockEntries[6]; | |
void *CmDbgInfo; | |
}; | |
/* 791 */ | |
struct $BBD6C80A82148A7CAD5B218A5A41C1D9 | |
{ | |
unsigned __int8 ReplaceIfExists; | |
unsigned __int8 AdvanceOnly; | |
}; | |
/* 792 */ | |
union $CB3CC68544A4E62ED2714A7C9C5C345F | |
{ | |
$BBD6C80A82148A7CAD5B218A5A41C1D9 __s0; | |
unsigned int ClusterCount; | |
void *DeleteHandle; | |
}; | |
/* 802 */ | |
struct $D446BF98445B25F2A957A6F10A39C71E | |
{ | |
unsigned __int32 Reserved1 : 8; | |
unsigned __int32 TargetSystemState : 4; | |
unsigned __int32 EffectiveSystemState : 4; | |
unsigned __int32 CurrentSystemState : 4; | |
unsigned __int32 IgnoreHibernationPath : 1; | |
unsigned __int32 PseudoTransition : 1; | |
unsigned __int32 KernelSoftReboot : 1; | |
unsigned __int32 DirectedDripsTransition : 1; | |
unsigned __int32 Reserved2 : 8; | |
}; | |
/* 803 */ | |
union $CAB57F5F6A24DB39CF9674960395C814 | |
{ | |
$D446BF98445B25F2A957A6F10A39C71E __s0; | |
unsigned int ContextAsUlong; | |
}; | |
/* 804 */ | |
struct _SYSTEM_POWER_STATE_CONTEXT | |
{ | |
$CAB57F5F6A24DB39CF9674960395C814 ___u0; | |
}; | |
/* 806 */ | |
union $8CB9FFAB8943B0C57A32C17073208C9F | |
{ | |
unsigned int SystemContext; | |
_SYSTEM_POWER_STATE_CONTEXT SystemPowerStateContext; | |
}; | |
/* 812 */ | |
struct _IO_STACK_LOCATION | |
{ | |
unsigned __int8 MajorFunction; | |
unsigned __int8 MinorFunction; | |
unsigned __int8 Flags; | |
unsigned __int8 Control; | |
union | |
{ | |
struct | |
{ | |
_IO_SECURITY_CONTEXT *SecurityContext; | |
unsigned int Options; | |
__declspec(align(8)) unsigned __int16 FileAttributes; | |
unsigned __int16 ShareAccess; | |
__declspec(align(8)) unsigned int EaLength; | |
} Create; | |
struct | |
{ | |
_IO_SECURITY_CONTEXT *SecurityContext; | |
unsigned int Options; | |
__declspec(align(8)) unsigned __int16 Reserved; | |
unsigned __int16 ShareAccess; | |
_NAMED_PIPE_CREATE_PARAMETERS *Parameters; | |
} CreatePipe; | |
struct | |
{ | |
_IO_SECURITY_CONTEXT *SecurityContext; | |
unsigned int Options; | |
__declspec(align(8)) unsigned __int16 Reserved; | |
unsigned __int16 ShareAccess; | |
_MAILSLOT_CREATE_PARAMETERS *Parameters; | |
} CreateMailslot; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) unsigned int Key; | |
unsigned int Flags; | |
_LARGE_INTEGER ByteOffset; | |
} Read; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) unsigned int Key; | |
unsigned int Flags; | |
_LARGE_INTEGER ByteOffset; | |
} Write; | |
struct | |
{ | |
unsigned int Length; | |
_UNICODE_STRING *FileName; | |
_FILE_INFORMATION_CLASS FileInformationClass; | |
__declspec(align(8)) unsigned int FileIndex; | |
} QueryDirectory; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) unsigned int CompletionFilter; | |
} NotifyDirectory; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) unsigned int CompletionFilter; | |
__declspec(align(8)) _DIRECTORY_NOTIFY_INFORMATION_CLASS DirectoryNotifyInformationClass; | |
} NotifyDirectoryEx; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) _FILE_INFORMATION_CLASS FileInformationClass; | |
} QueryFile; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) _FILE_INFORMATION_CLASS FileInformationClass; | |
_FILE_OBJECT *FileObject; | |
$CB3CC68544A4E62ED2714A7C9C5C345F ___u3; | |
} SetFile; | |
struct | |
{ | |
unsigned int Length; | |
void *EaList; | |
unsigned int EaListLength; | |
__declspec(align(8)) unsigned int EaIndex; | |
} QueryEa; | |
struct | |
{ | |
unsigned int Length; | |
} SetEa; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) _FSINFOCLASS FsInformationClass; | |
} QueryVolume; | |
struct | |
{ | |
unsigned int Length; | |
__declspec(align(8)) _FSINFOCLASS FsInformationClass; | |
} SetVolume; | |
struct | |
{ | |
unsigned int OutputBufferLength; | |
__declspec(align(8)) unsigned int InputBufferLength; | |
__declspec(align(8)) unsigned int FsControlCode; | |
void *Type3InputBuffer; | |
} FileSystemControl; | |
struct | |
{ | |
_LARGE_INTEGER *Length; | |
unsigned int Key; | |
_LARGE_INTEGER ByteOffset; | |
} LockControl; | |
struct | |
{ | |
unsigned int OutputBufferLength; | |
__declspec(align(8)) unsigned int InputBufferLength; | |
__declspec(align(8)) unsigned int IoControlCode; | |
void *Type3InputBuffer; | |
} DeviceIoControl; | |
struct | |
{ | |
unsigned int SecurityInformation; | |
__declspec(align(8)) unsigned int Length; | |
} QuerySecurity; | |
struct | |
{ | |
unsigned int SecurityInformation; | |
void *SecurityDescriptor; | |
} SetSecurity; | |
struct | |
{ | |
_VPB *Vpb; | |
_DEVICE_OBJECT *DeviceObject; | |
} MountVolume; | |
struct | |
{ | |
_VPB *Vpb; | |
_DEVICE_OBJECT *DeviceObject; | |
} VerifyVolume; | |
struct | |
{ | |
struct _SCSI_REQUEST_BLOCK *Srb; | |
} Scsi; | |
struct __declspec(align(8)) | |
{ | |
unsigned int Length; | |
void *StartSid; | |
_FILE_GET_QUOTA_INFORMATION *SidList; | |
unsigned int SidListLength; | |
} QueryQuota; | |
struct | |
{ | |
unsigned int Length; | |
} SetQuota; | |
struct | |
{ | |
_DEVICE_RELATION_TYPE Type; | |
} QueryDeviceRelations; | |
struct | |
{ | |
const _GUID *InterfaceType; | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
_INTERFACE *Interface; | |
void *InterfaceSpecificData; | |
} QueryInterface; | |
struct | |
{ | |
_DEVICE_CAPABILITIES *Capabilities; | |
} DeviceCapabilities; | |
struct | |
{ | |
_IO_RESOURCE_REQUIREMENTS_LIST *IoResourceRequirementList; | |
} FilterResourceRequirements; | |
struct | |
{ | |
unsigned int WhichSpace; | |
void *Buffer; | |
unsigned int Offset; | |
__declspec(align(8)) unsigned int Length; | |
} ReadWriteConfig; | |
struct | |
{ | |
unsigned __int8 Lock; | |
} SetLock; | |
struct | |
{ | |
BUS_QUERY_ID_TYPE IdType; | |
} QueryId; | |
struct | |
{ | |
DEVICE_TEXT_TYPE DeviceTextType; | |
__declspec(align(8)) unsigned int LocaleId; | |
} QueryDeviceText; | |
struct | |
{ | |
unsigned __int8 InPath; | |
unsigned __int8 Reserved[3]; | |
__declspec(align(8)) _DEVICE_USAGE_NOTIFICATION_TYPE Type; | |
} UsageNotification; | |
struct | |
{ | |
_SYSTEM_POWER_STATE PowerState; | |
} WaitWake; | |
struct | |
{ | |
_POWER_SEQUENCE *PowerSequence; | |
} PowerSequence; | |
struct | |
{ | |
$8CB9FFAB8943B0C57A32C17073208C9F ___u0; | |
__declspec(align(8)) _POWER_STATE_TYPE Type; | |
__declspec(align(8)) _POWER_STATE State; | |
__declspec(align(8)) POWER_ACTION ShutdownType; | |
} Power; | |
struct | |
{ | |
_CM_RESOURCE_LIST *AllocatedResources; | |
_CM_RESOURCE_LIST *AllocatedResourcesTranslated; | |
} StartDevice; | |
struct | |
{ | |
unsigned __int64 ProviderId; | |
void *DataPath; | |
unsigned int BufferSize; | |
void *Buffer; | |
} WMI; | |
struct | |
{ | |
void *Argument1; | |
void *Argument2; | |
void *Argument3; | |
void *Argument4; | |
} Others; | |
} Parameters; | |
_DEVICE_OBJECT *DeviceObject; | |
_FILE_OBJECT *FileObject; | |
int (__fastcall *CompletionRoutine)(_DEVICE_OBJECT *, _IRP *, void *); | |
void *Context; | |
}; | |
/* 481 */ | |
struct _FILE_OBJECT | |
{ | |
__int16 Type; | |
__int16 Size; | |
_DEVICE_OBJECT *DeviceObject; | |
_VPB *Vpb; | |
void *FsContext; | |
void *FsContext2; | |
_SECTION_OBJECT_POINTERS *SectionObjectPointer; | |
void *PrivateCacheMap; | |
int FinalStatus; | |
_FILE_OBJECT *RelatedFileObject; | |
unsigned __int8 LockOperation; | |
unsigned __int8 DeletePending; | |
unsigned __int8 ReadAccess; | |
unsigned __int8 WriteAccess; | |
unsigned __int8 DeleteAccess; | |
unsigned __int8 SharedRead; | |
unsigned __int8 SharedWrite; | |
unsigned __int8 SharedDelete; | |
unsigned int Flags; | |
_UNICODE_STRING FileName; | |
_LARGE_INTEGER CurrentByteOffset; | |
unsigned int Waiters; | |
unsigned int Busy; | |
void *LastLock; | |
_KEVENT Lock; | |
_KEVENT Event; | |
_IO_COMPLETION_CONTEXT *CompletionContext; | |
unsigned __int64 IrpListLock; | |
_LIST_ENTRY IrpList; | |
void *FileObjectExtension; | |
}; | |
/* 807 */ | |
union $0F11D120215A904468D7C13BA04E3E03 | |
{ | |
struct | |
{ | |
unsigned __int16 Group; | |
unsigned __int16 MessageCount; | |
unsigned int Vector; | |
unsigned __int64 Affinity; | |
} Raw; | |
struct | |
{ | |
unsigned __int16 Level; | |
unsigned __int16 Group; | |
unsigned int Vector; | |
unsigned __int64 Affinity; | |
} Translated; | |
}; | |
/* 808 */ | |
struct __unaligned __declspec(align(4)) _CM_PARTIAL_RESOURCE_DESCRIPTOR | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 ShareDisposition; | |
unsigned __int16 Flags; | |
union | |
{ | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length; | |
} Generic; | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length; | |
} Port; | |
struct | |
{ | |
unsigned __int16 Level; | |
unsigned __int16 Group; | |
unsigned int Vector; | |
unsigned __int64 Affinity; | |
} Interrupt; | |
struct | |
{ | |
$0F11D120215A904468D7C13BA04E3E03 ___u0; | |
} MessageInterrupt; | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length; | |
} Memory; | |
struct | |
{ | |
unsigned int Channel; | |
unsigned int Port; | |
unsigned int Reserved1; | |
} Dma; | |
struct | |
{ | |
unsigned int Channel; | |
unsigned int RequestLine; | |
unsigned __int8 TransferWidth; | |
unsigned __int8 Reserved1; | |
unsigned __int8 Reserved2; | |
unsigned __int8 Reserved3; | |
} DmaV3; | |
struct | |
{ | |
unsigned int Data[3]; | |
} DevicePrivate; | |
struct | |
{ | |
unsigned int Start; | |
unsigned int Length; | |
unsigned int Reserved; | |
} BusNumber; | |
struct | |
{ | |
unsigned int DataSize; | |
unsigned int Reserved1; | |
unsigned int Reserved2; | |
} DeviceSpecificData; | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length40; | |
} Memory40; | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length48; | |
} Memory48; | |
struct __unaligned __declspec(align(4)) | |
{ | |
_LARGE_INTEGER Start; | |
unsigned int Length64; | |
} Memory64; | |
struct | |
{ | |
unsigned __int8 Class; | |
unsigned __int8 Type; | |
unsigned __int8 Reserved1; | |
unsigned __int8 Reserved2; | |
unsigned int IdLowPart; | |
unsigned int IdHighPart; | |
} Connection; | |
} u; | |
}; | |
/* 809 */ | |
struct _CM_PARTIAL_RESOURCE_LIST | |
{ | |
unsigned __int16 Version; | |
unsigned __int16 Revision; | |
unsigned int Count; | |
_CM_PARTIAL_RESOURCE_DESCRIPTOR PartialDescriptors[1]; | |
}; | |
/* 810 */ | |
struct _CM_FULL_RESOURCE_DESCRIPTOR | |
{ | |
_INTERFACE_TYPE InterfaceType; | |
unsigned int BusNumber; | |
_CM_PARTIAL_RESOURCE_LIST PartialResourceList; | |
}; | |
/* 811 */ | |
struct _CM_RESOURCE_LIST | |
{ | |
unsigned int Count; | |
_CM_FULL_RESOURCE_DESCRIPTOR List[1]; | |
}; | |
/* 798 */ | |
struct _IO_RESOURCE_DESCRIPTOR | |
{ | |
unsigned __int8 Option; | |
unsigned __int8 Type; | |
unsigned __int8 ShareDisposition; | |
unsigned __int8 Spare1; | |
unsigned __int16 Flags; | |
unsigned __int16 Spare2; | |
union | |
{ | |
struct | |
{ | |
unsigned int Length; | |
unsigned int Alignment; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Port; | |
struct | |
{ | |
unsigned int Length; | |
unsigned int Alignment; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Memory; | |
struct | |
{ | |
unsigned int MinimumVector; | |
unsigned int MaximumVector; | |
unsigned __int16 AffinityPolicy; | |
unsigned __int16 Group; | |
_IRQ_PRIORITY PriorityPolicy; | |
unsigned __int64 TargetedProcessors; | |
} Interrupt; | |
struct | |
{ | |
unsigned int MinimumChannel; | |
unsigned int MaximumChannel; | |
} Dma; | |
struct | |
{ | |
unsigned int RequestLine; | |
unsigned int Reserved; | |
unsigned int Channel; | |
unsigned int TransferWidth; | |
} DmaV3; | |
struct | |
{ | |
unsigned int Length; | |
unsigned int Alignment; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Generic; | |
struct | |
{ | |
unsigned int Data[3]; | |
} DevicePrivate; | |
struct | |
{ | |
unsigned int Length; | |
unsigned int MinBusNumber; | |
unsigned int MaxBusNumber; | |
unsigned int Reserved; | |
} BusNumber; | |
struct | |
{ | |
unsigned int Priority; | |
unsigned int Reserved1; | |
unsigned int Reserved2; | |
} ConfigData; | |
struct | |
{ | |
unsigned int Length40; | |
unsigned int Alignment40; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Memory40; | |
struct | |
{ | |
unsigned int Length48; | |
unsigned int Alignment48; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Memory48; | |
struct | |
{ | |
unsigned int Length64; | |
unsigned int Alignment64; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
} Memory64; | |
struct | |
{ | |
unsigned __int8 Class; | |
unsigned __int8 Type; | |
unsigned __int8 Reserved1; | |
unsigned __int8 Reserved2; | |
unsigned int IdLowPart; | |
unsigned int IdHighPart; | |
} Connection; | |
} u; | |
}; | |
/* 799 */ | |
struct _IO_RESOURCE_LIST | |
{ | |
unsigned __int16 Version; | |
unsigned __int16 Revision; | |
unsigned int Count; | |
_IO_RESOURCE_DESCRIPTOR Descriptors[1]; | |
}; | |
/* 800 */ | |
struct _IO_RESOURCE_REQUIREMENTS_LIST | |
{ | |
unsigned int ListSize; | |
_INTERFACE_TYPE InterfaceType; | |
unsigned int BusNumber; | |
unsigned int SlotNumber; | |
unsigned int Reserved[3]; | |
unsigned int AlternativeLists; | |
_IO_RESOURCE_LIST List[1]; | |
}; | |
/* 828 */ | |
struct _DEVICE_RELATIONS | |
{ | |
unsigned int Count; | |
_DEVICE_OBJECT *Objects[1]; | |
}; | |
/* 837 */ | |
struct _PENDING_RELATIONS_LIST_ENTRY | |
{ | |
_LIST_ENTRY Link; | |
_WORK_QUEUE_ITEM WorkItem; | |
_PNP_DEVICE_EVENT_ENTRY *DeviceEvent; | |
_DEVICE_OBJECT *DeviceObject; | |
_RELATION_LIST *RelationsList; | |
_IRP *EjectIrp; | |
IRPLOCK Lock; | |
unsigned int Problem; | |
unsigned __int8 ProfileChangingEject; | |
unsigned __int8 DisplaySafeRemovalDialog; | |
_SYSTEM_POWER_STATE LightestSleepState; | |
DOCK_INTERFACE *DockInterface; | |
unsigned __int8 DequeuePending; | |
_PNP_DEVICE_DELETE_TYPE DeleteType; | |
}; | |
/* 838 */ | |
struct _PNP_RESOURCE_CONFLICT_TRACE_CONTEXT | |
{ | |
unsigned __int8 ResourceType; | |
unsigned int AlternativeCount; | |
_IO_RESOURCE_DESCRIPTOR *ResourceRequests; | |
void *ArbiterInstance; | |
}; | |
/* 839 */ | |
struct _PNP_REBALANCE_TRACE_CONTEXT | |
{ | |
unsigned int DeviceCount; | |
unsigned int RebalancePhase; | |
_PNP_REBALANCE_REASON Reason[2]; | |
_PNP_REBALANCE_FAILURE Failure[2]; | |
_DEVICE_NODE *SubtreeRoot; | |
unsigned __int8 SubtreeIncludesRoot; | |
_DEVICE_NODE *TriggerRoot; | |
unsigned __int8 RebalanceDueToDynamicPartitioning; | |
unsigned __int64 BeginTime; | |
_DEVICE_NODE *VetoNode[2]; | |
_PNP_DEVNODE_QUERY_REBALANCE_VETO_REASON VetoQueryRebalanceReason[2]; | |
_PNP_RESOURCE_CONFLICT_TRACE_CONTEXT ConflictContext; | |
}; | |
/* 504 */ | |
struct _IO_TIMER | |
{ | |
__int16 Type; | |
__int16 TimerFlag; | |
_LIST_ENTRY TimerList; | |
void (__fastcall *TimerRoutine)(_DEVICE_OBJECT *, void *); | |
void *Context; | |
_DEVICE_OBJECT *DeviceObject; | |
}; | |
/* 479 */ | |
struct _VPB | |
{ | |
__int16 Type; | |
__int16 Size; | |
unsigned __int16 Flags; | |
unsigned __int16 VolumeLabelLength; | |
_DEVICE_OBJECT *DeviceObject; | |
_DEVICE_OBJECT *RealDevice; | |
unsigned int SerialNumber; | |
unsigned int ReferenceCount; | |
wchar_t VolumeLabel[32]; | |
}; | |
/* 516 */ | |
struct _DEVOBJ_EXTENSION | |
{ | |
__int16 Type; | |
unsigned __int16 Size; | |
_DEVICE_OBJECT *DeviceObject; | |
unsigned int PowerFlags; | |
_DEVICE_OBJECT_POWER_EXTENSION *Dope; | |
unsigned int ExtensionFlags; | |
void *DeviceNode; | |
_DEVICE_OBJECT *AttachedTo; | |
int StartIoCount; | |
int StartIoKey; | |
unsigned int StartIoFlags; | |
_VPB *Vpb; | |
void *DependencyNode; | |
void *InterruptContext; | |
int InterruptCount; | |
void *VerifierContext; | |
}; | |
/* 866 */ | |
struct __declspec(align(8)) _POP_FX_IDLE_STATE | |
{ | |
unsigned __int64 TransitionLatency; | |
unsigned __int64 ResidencyRequirement; | |
unsigned int NominalPower; | |
}; | |
/* 867 */ | |
struct __declspec(align(4)) _POP_FX_PROVIDER | |
{ | |
unsigned int Index; | |
unsigned __int8 Activating; | |
}; | |
/* 868 */ | |
struct _POP_FX_DEPENDENT | |
{ | |
unsigned int Index; | |
unsigned int ProviderIndex; | |
}; | |
/* 870 */ | |
struct $E4CC3B1434A21E6FDFDE75249B5ACF9A | |
{ | |
unsigned __int32 Progress : 3; | |
unsigned __int32 Reserved : 24; | |
unsigned __int32 Synchronicity : 2; | |
unsigned __int32 RequestPepCompleted : 1; | |
unsigned __int32 RequestSucceeded : 1; | |
unsigned __int32 NestedCallback : 1; | |
}; | |
/* 871 */ | |
volatile union _POP_FX_PERF_FLAGS | |
{ | |
int Value; | |
$E4CC3B1434A21E6FDFDE75249B5ACF9A __s1; | |
}; | |
/* 878 */ | |
struct _POP_FX_PERF_INFO | |
{ | |
_POP_FX_COMPONENT *Component; | |
_KEVENT CompletedEvent; | |
void (__fastcall *ComponentPerfState)(void *, unsigned int, unsigned __int8, void *); | |
volatile _POP_FX_PERF_FLAGS Flags; | |
_PO_FX_PERF_STATE_CHANGE *LastChange; | |
unsigned int LastChangeCount; | |
unsigned __int64 LastChangeStamp; | |
unsigned __int8 LastChangeNominal; | |
unsigned __int8 PepRegistered; | |
unsigned __int8 QueryOnIdleStates; | |
void *volatile RequestDriverContext; | |
_POP_FX_WORK_ORDER WorkOrder; | |
unsigned int SetsCount; | |
_POP_FX_PERF_SET *Sets; | |
}; | |
/* 882 */ | |
struct _POP_COMPONENT_POWER_PROFILE | |
{ | |
_GUID ComponentGuid; | |
_POP_DEVICE_POWER_PROFILE *Device; | |
unsigned __int64 FxCount; | |
_PO_POWER_PLANE_PROFILE FxPower[1]; | |
}; | |
/* 495 */ | |
struct _DRIVER_EXTENSION | |
{ | |
_DRIVER_OBJECT *DriverObject; | |
int (__fastcall *AddDevice)(_DRIVER_OBJECT *, _DEVICE_OBJECT *); | |
unsigned int Count; | |
_UNICODE_STRING ServiceKeyName; | |
_IO_CLIENT_EXTENSION *ClientDriverExtension; | |
_FS_FILTER_CALLBACKS *FsFilterCallbacks; | |
void *KseCallbacks; | |
void *DvCallbacks; | |
void *VerifierContext; | |
}; | |
/* 503 */ | |
struct _FAST_IO_DISPATCH | |
{ | |
unsigned int SizeOfFastIoDispatch; | |
unsigned __int8 (__fastcall *FastIoCheckIfPossible)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned __int8, unsigned int, unsigned __int8, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoRead)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned __int8, unsigned int, void *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoWrite)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned __int8, unsigned int, void *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoQueryBasicInfo)(_FILE_OBJECT *, unsigned __int8, _FILE_BASIC_INFORMATION *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoQueryStandardInfo)(_FILE_OBJECT *, unsigned __int8, _FILE_STANDARD_INFORMATION *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoLock)(_FILE_OBJECT *, _LARGE_INTEGER *, _LARGE_INTEGER *, _EPROCESS *, unsigned int, unsigned __int8, unsigned __int8, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoUnlockSingle)(_FILE_OBJECT *, _LARGE_INTEGER *, _LARGE_INTEGER *, _EPROCESS *, unsigned int, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoUnlockAll)(_FILE_OBJECT *, _EPROCESS *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoUnlockAllByKey)(_FILE_OBJECT *, void *, unsigned int, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoDeviceControl)(_FILE_OBJECT *, unsigned __int8, void *, unsigned int, void *, unsigned int, unsigned int, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
void (__fastcall *AcquireFileForNtCreateSection)(_FILE_OBJECT *); | |
void (__fastcall *ReleaseFileForNtCreateSection)(_FILE_OBJECT *); | |
void (__fastcall *FastIoDetachDevice)(_DEVICE_OBJECT *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoQueryNetworkOpenInfo)(_FILE_OBJECT *, unsigned __int8, _FILE_NETWORK_OPEN_INFORMATION *, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
int (__fastcall *AcquireForModWrite)(_FILE_OBJECT *, _LARGE_INTEGER *, _ERESOURCE **, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *MdlRead)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned int, _MDL **, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *MdlReadComplete)(_FILE_OBJECT *, _MDL *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *PrepareMdlWrite)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned int, _MDL **, _IO_STATUS_BLOCK *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *MdlWriteComplete)(_FILE_OBJECT *, _LARGE_INTEGER *, _MDL *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoReadCompressed)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned int, void *, _MDL **, _IO_STATUS_BLOCK *, _COMPRESSED_DATA_INFO *, unsigned int, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoWriteCompressed)(_FILE_OBJECT *, _LARGE_INTEGER *, unsigned int, unsigned int, void *, _MDL **, _IO_STATUS_BLOCK *, _COMPRESSED_DATA_INFO *, unsigned int, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *MdlReadCompleteCompressed)(_FILE_OBJECT *, _MDL *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *MdlWriteCompleteCompressed)(_FILE_OBJECT *, _LARGE_INTEGER *, _MDL *, _DEVICE_OBJECT *); | |
unsigned __int8 (__fastcall *FastIoQueryOpen)(_IRP *, _FILE_NETWORK_OPEN_INFORMATION *, _DEVICE_OBJECT *); | |
int (__fastcall *ReleaseForModWrite)(_FILE_OBJECT *, _ERESOURCE *, _DEVICE_OBJECT *); | |
int (__fastcall *AcquireForCcFlush)(_FILE_OBJECT *, _DEVICE_OBJECT *); | |
int (__fastcall *ReleaseForCcFlush)(_FILE_OBJECT *, _DEVICE_OBJECT *); | |
}; | |
/* 845 */ | |
struct POHANDLE__ | |
{ | |
int unused; | |
}; | |
/* 854 */ | |
union $F0134D34D6C1E016DBA516859925C0AD | |
{ | |
unsigned int Argument; | |
unsigned __int8 Data[1]; | |
}; | |
/* 855 */ | |
struct _ACPI_METHOD_ARGUMENT_V1 | |
{ | |
unsigned __int16 Type; | |
unsigned __int16 DataLength; | |
$F0134D34D6C1E016DBA516859925C0AD ___u2; | |
}; | |
/* 880 */ | |
struct _POP_POWER_PLANE | |
{ | |
_UNICODE_STRING PowerPlaneId; | |
unsigned __int64 Lock; | |
unsigned __int8 OldIrql; | |
volatile int DevicePowerMw; | |
void *PmaxHandle; | |
void (__fastcall *NotifyDevicePowerDraw)(void *, unsigned int); | |
unsigned __int64 DeviceCount; | |
_POP_DEVICE_POWER_PROFILE **Devices; | |
}; | |
/* 770 */ | |
struct $7B1C7633D0AA2678FDCC8BAA1F719E6E | |
{ | |
unsigned __int32 JobNotReallyActive : 1; | |
unsigned __int32 AccountingFolded : 1; | |
unsigned __int32 NewProcessReported : 1; | |
unsigned __int32 ExitProcessReported : 1; | |
unsigned __int32 ReportCommitChanges : 1; | |
unsigned __int32 LastReportMemory : 1; | |
unsigned __int32 ForceWakeCharge : 1; | |
unsigned __int32 CrossSessionCreate : 1; | |
unsigned __int32 NeedsHandleRundown : 1; | |
unsigned __int32 RefTraceEnabled : 1; | |
unsigned __int32 PicoCreated : 1; | |
unsigned __int32 EmptyJobEvaluated : 1; | |
unsigned __int32 DefaultPagePriority : 3; | |
unsigned __int32 PrimaryTokenFrozen : 1; | |
unsigned __int32 ProcessVerifierTarget : 1; | |
unsigned __int32 RestrictSetThreadContext : 1; | |
unsigned __int32 AffinityPermanent : 1; | |
unsigned __int32 AffinityUpdateEnable : 1; | |
unsigned __int32 PropagateNode : 1; | |
unsigned __int32 ExplicitAffinity : 1; | |
unsigned __int32 ProcessExecutionState : 2; | |
unsigned __int32 EnableReadVmLogging : 1; | |
unsigned __int32 EnableWriteVmLogging : 1; | |
unsigned __int32 FatalAccessTerminationRequested : 1; | |
unsigned __int32 DisableSystemAllowedCpuSet : 1; | |
unsigned __int32 ProcessStateChangeRequest : 2; | |
unsigned __int32 ProcessStateChangeInProgress : 1; | |
unsigned __int32 InPrivate : 1; | |
}; | |
/* 771 */ | |
union $4996B4FE2820644A378E1861BBE25B33 | |
{ | |
unsigned int Flags2; | |
$7B1C7633D0AA2678FDCC8BAA1F719E6E __s1; | |
}; | |
/* 772 */ | |
struct $08F27CF7CCE24551C9037C5E7EA427C5 | |
{ | |
unsigned __int32 CreateReported : 1; | |
unsigned __int32 NoDebugInherit : 1; | |
unsigned __int32 ProcessExiting : 1; | |
unsigned __int32 ProcessDelete : 1; | |
unsigned __int32 ManageExecutableMemoryWrites : 1; | |
unsigned __int32 VmDeleted : 1; | |
unsigned __int32 OutswapEnabled : 1; | |
unsigned __int32 Outswapped : 1; | |
unsigned __int32 FailFastOnCommitFail : 1; | |
unsigned __int32 Wow64VaSpace4Gb : 1; | |
unsigned __int32 AddressSpaceInitialized : 2; | |
unsigned __int32 SetTimerResolution : 1; | |
unsigned __int32 BreakOnTermination : 1; | |
unsigned __int32 DeprioritizeViews : 1; | |
unsigned __int32 WriteWatch : 1; | |
unsigned __int32 ProcessInSession : 1; | |
unsigned __int32 OverrideAddressSpace : 1; | |
unsigned __int32 HasAddressSpace : 1; | |
unsigned __int32 LaunchPrefetched : 1; | |
unsigned __int32 Background : 1; | |
unsigned __int32 VmTopDown : 1; | |
unsigned __int32 ImageNotifyDone : 1; | |
unsigned __int32 PdeUpdateNeeded : 1; | |
unsigned __int32 VdmAllowed : 1; | |
unsigned __int32 ProcessRundown : 1; | |
unsigned __int32 ProcessInserted : 1; | |
unsigned __int32 DefaultIoPriority : 3; | |
unsigned __int32 ProcessSelfDelete : 1; | |
unsigned __int32 SetTimerResolutionLink : 1; | |
}; | |
/* 773 */ | |
union $7C662302056FFD1FB4E1773A0A034050 | |
{ | |
unsigned int Flags; | |
$08F27CF7CCE24551C9037C5E7EA427C5 __s1; | |
}; | |
/* 774 */ | |
struct $2C107811C1475D6DEE5B06B393CB8A4E | |
{ | |
unsigned __int64 ExceptionPortState : 3; | |
}; | |
/* 775 */ | |
union $2CF60692BD9E5E36C930915537D2294F | |
{ | |
void *ExceptionPortData; | |
unsigned __int64 ExceptionPortValue; | |
$2C107811C1475D6DEE5B06B393CB8A4E __s2; | |
}; | |
/* 467 */ | |
struct $4DC8F54BDA4F40BD4A652537C8D44473 | |
{ | |
unsigned __int64 RefCnt : 4; | |
}; | |
/* 468 */ | |
union $0D3E102110E4F6811E233C5A111B80C3 | |
{ | |
void *Object; | |
$4DC8F54BDA4F40BD4A652537C8D44473 __s1; | |
unsigned __int64 Value; | |
}; | |
/* 469 */ | |
struct _EX_FAST_REF | |
{ | |
$0D3E102110E4F6811E233C5A111B80C3 ___u0; | |
}; | |
/* 622 */ | |
struct _RTL_AVL_TREE | |
{ | |
_RTL_BALANCED_NODE *Root; | |
}; | |
/* 754 */ | |
struct _SE_AUDIT_PROCESS_CREATION_INFO | |
{ | |
_OBJECT_NAME_INFORMATION *ImageFileName; | |
}; | |
/* 714 */ | |
struct $3F85127412E45D453B47E0230FB8DC78 | |
{ | |
unsigned __int8 WorkingSetType : 3; | |
unsigned __int8 Reserved0 : 3; | |
unsigned __int8 MaximumWorkingSetHard : 1; | |
unsigned __int8 MinimumWorkingSetHard : 1; | |
unsigned __int8 SessionMaster : 1; | |
unsigned __int8 TrimmerState : 2; | |
unsigned __int8 Reserved : 1; | |
unsigned __int8 PageStealers : 4; | |
}; | |
/* 715 */ | |
union $546AA0484011E1DBFAE2CFB46D02C5DE | |
{ | |
$3F85127412E45D453B47E0230FB8DC78 __s0; | |
unsigned __int16 u1; | |
}; | |
/* 716 */ | |
struct $56A022E0416FA8F0D143F219D5D8FA21 | |
{ | |
unsigned __int8 WsleDeleted : 1; | |
unsigned __int8 SvmEnabled : 1; | |
unsigned __int8 ForceAge : 1; | |
unsigned __int8 ForceTrim : 1; | |
unsigned __int8 NewMaximum : 1; | |
unsigned __int8 CommitReleaseState : 2; | |
}; | |
/* 717 */ | |
union $454DF8186EE49D35E837F6C04CF422F2 | |
{ | |
$56A022E0416FA8F0D143F219D5D8FA21 __s0; | |
unsigned __int8 u2; | |
}; | |
/* 718 */ | |
struct _MMSUPPORT_FLAGS | |
{ | |
$546AA0484011E1DBFAE2CFB46D02C5DE ___u0; | |
unsigned __int8 MemoryPriority; | |
$454DF8186EE49D35E837F6C04CF422F2 ___u2; | |
}; | |
/* 719 */ | |
struct __declspec(align(8)) _MMSUPPORT_INSTANCE | |
{ | |
unsigned int NextPageColor; | |
unsigned int PageFaultCount; | |
unsigned __int64 TrimmedPageCount; | |
_MMWSL_INSTANCE *VmWorkingSetList; | |
_LIST_ENTRY WorkingSetExpansionLinks; | |
unsigned __int64 AgeDistribution[8]; | |
_KGATE *ExitOutswapGate; | |
unsigned __int64 MinimumWorkingSetSize; | |
unsigned __int64 WorkingSetLeafSize; | |
unsigned __int64 WorkingSetLeafPrivateSize; | |
unsigned __int64 WorkingSetSize; | |
unsigned __int64 WorkingSetPrivateSize; | |
unsigned __int64 MaximumWorkingSetSize; | |
unsigned __int64 PeakWorkingSetSize; | |
unsigned int HardFaultCount; | |
unsigned __int16 LastTrimStamp; | |
unsigned __int16 PartitionId; | |
unsigned __int64 SelfmapLock; | |
_MMSUPPORT_FLAGS Flags; | |
}; | |
/* 720 */ | |
struct __declspec(align(64)) _MMSUPPORT_SHARED | |
{ | |
volatile int WorkingSetLock; | |
int GoodCitizenWaiting; | |
unsigned __int64 ReleasedCommitDebt; | |
unsigned __int64 ResetPagesRepurposedCount; | |
void *WsSwapSupport; | |
void *CommitReleaseContext; | |
void *AccessLog; | |
volatile unsigned __int64 ChargedWslePages; | |
unsigned __int64 ActualWslePages; | |
unsigned __int64 WorkingSetCoreLock; | |
void *ShadowMapping; | |
}; | |
/* 721 */ | |
struct _MMSUPPORT_FULL | |
{ | |
_MMSUPPORT_INSTANCE Instance; | |
_MMSUPPORT_SHARED Shared; | |
}; | |
/* 755 */ | |
struct _ALPC_PROCESS_CONTEXT | |
{ | |
_EX_PUSH_LOCK Lock; | |
_LIST_ENTRY ViewListHead; | |
volatile unsigned __int64 PagedPoolQuotaCache; | |
}; | |
/* 763 */ | |
struct $86F7F41651E05A1B839282BAFC23F161 | |
{ | |
unsigned __int8 Type : 3; | |
unsigned __int8 Audit : 1; | |
unsigned __int8 Signer : 4; | |
}; | |
/* 764 */ | |
union $163B9FCD877A4E1E54EC83B96A4831B0 | |
{ | |
unsigned __int8 Level; | |
$86F7F41651E05A1B839282BAFC23F161 __s1; | |
}; | |
/* 765 */ | |
struct _PS_PROTECTION | |
{ | |
$163B9FCD877A4E1E54EC83B96A4831B0 ___u0; | |
}; | |
/* 776 */ | |
struct $8B1CE780B74600C3E83BA456EFE03C76 | |
{ | |
unsigned __int32 Minimal : 1; | |
unsigned __int32 ReplacingPageRoot : 1; | |
unsigned __int32 Crashed : 1; | |
unsigned __int32 JobVadsAreTracked : 1; | |
unsigned __int32 VadTrackingDisabled : 1; | |
unsigned __int32 AuxiliaryProcess : 1; | |
unsigned __int32 SubsystemProcess : 1; | |
unsigned __int32 IndirectCpuSets : 1; | |
unsigned __int32 RelinquishedCommit : 1; | |
unsigned __int32 HighGraphicsPriority : 1; | |
unsigned __int32 CommitFailLogged : 1; | |
unsigned __int32 ReserveFailLogged : 1; | |
unsigned __int32 SystemProcess : 1; | |
unsigned __int32 HideImageBaseAddresses : 1; | |
unsigned __int32 AddressPolicyFrozen : 1; | |
unsigned __int32 ProcessFirstResume : 1; | |
unsigned __int32 ForegroundExternal : 1; | |
unsigned __int32 ForegroundSystem : 1; | |
unsigned __int32 HighMemoryPriority : 1; | |
unsigned __int32 EnableProcessSuspendResumeLogging : 1; | |
unsigned __int32 EnableThreadSuspendResumeLogging : 1; | |
unsigned __int32 SecurityDomainChanged : 1; | |
unsigned __int32 SecurityFreezeComplete : 1; | |
unsigned __int32 VmProcessorHost : 1; | |
unsigned __int32 VmProcessorHostTransition : 1; | |
unsigned __int32 AltSyscall : 1; | |
unsigned __int32 TimerResolutionIgnore : 1; | |
unsigned __int32 DisallowUserTerminate : 1; | |
}; | |
/* 777 */ | |
union $CA0F18E74A9969E442556CA20BA8141A | |
{ | |
unsigned int Flags3; | |
$8B1CE780B74600C3E83BA456EFE03C76 __s1; | |
}; | |
/* 778 */ | |
union $991E1CBB7797929499350D8948279CF6 | |
{ | |
unsigned __int64 AllowedCpuSets; | |
unsigned __int64 *AllowedCpuSetsIndirect; | |
}; | |
/* 779 */ | |
union $7D7CAE6D41B81FF54781561F08F4E01A | |
{ | |
unsigned __int64 DefaultCpuSets; | |
unsigned __int64 *DefaultCpuSetsIndirect; | |
}; | |
/* 766 */ | |
struct $85D0B69AF5B42F702B391336437C1040 | |
{ | |
unsigned __int64 DelayMs : 30; | |
unsigned __int64 CoalescingWindowMs : 30; | |
unsigned __int64 Reserved : 1; | |
unsigned __int64 NewTimerWheel : 1; | |
unsigned __int64 Retry : 1; | |
unsigned __int64 Locked : 1; | |
}; | |
/* 767 */ | |
volatile union _PS_INTERLOCKED_TIMER_DELAY_VALUES | |
{ | |
$85D0B69AF5B42F702B391336437C1040 __s0; | |
unsigned __int64 All; | |
}; | |
/* 524 */ | |
struct _WNF_STATE_NAME | |
{ | |
unsigned int Data[2]; | |
}; | |
/* 526 */ | |
struct _JOBOBJECT_WAKE_FILTER | |
{ | |
unsigned int HighEdgeFilter; | |
unsigned int LowEdgeFilter; | |
}; | |
/* 768 */ | |
struct _PS_PROCESS_WAKE_INFORMATION | |
{ | |
unsigned __int64 NotificationChannel; | |
unsigned int WakeCounters[7]; | |
_JOBOBJECT_WAKE_FILTER WakeFilter; | |
unsigned int NoWakeCounter; | |
}; | |
/* 780 */ | |
union $E134A8FADB8F65034F4B68CDB0D5D9D3 | |
{ | |
_WNF_STATE_NAME WakeChannel; | |
_PS_PROCESS_WAKE_INFORMATION WakeInfo; | |
}; | |
/* 781 */ | |
union $9E6F4DE8D8EBF60EF1749FF3BC13ADD5 | |
{ | |
unsigned int MitigationFlags; | |
struct | |
{ | |
unsigned __int32 ControlFlowGuardEnabled : 1; | |
unsigned __int32 ControlFlowGuardExportSuppressionEnabled : 1; | |
unsigned __int32 ControlFlowGuardStrict : 1; | |
unsigned __int32 DisallowStrippedImages : 1; | |
unsigned __int32 ForceRelocateImages : 1; | |
unsigned __int32 HighEntropyASLREnabled : 1; | |
unsigned __int32 StackRandomizationDisabled : 1; | |
unsigned __int32 ExtensionPointDisable : 1; | |
unsigned __int32 DisableDynamicCode : 1; | |
unsigned __int32 DisableDynamicCodeAllowOptOut : 1; | |
unsigned __int32 DisableDynamicCodeAllowRemoteDowngrade : 1; | |
unsigned __int32 AuditDisableDynamicCode : 1; | |
unsigned __int32 DisallowWin32kSystemCalls : 1; | |
unsigned __int32 AuditDisallowWin32kSystemCalls : 1; | |
unsigned __int32 EnableFilteredWin32kAPIs : 1; | |
unsigned __int32 AuditFilteredWin32kAPIs : 1; | |
unsigned __int32 DisableNonSystemFonts : 1; | |
unsigned __int32 AuditNonSystemFontLoading : 1; | |
unsigned __int32 PreferSystem32Images : 1; | |
unsigned __int32 ProhibitRemoteImageMap : 1; | |
unsigned __int32 AuditProhibitRemoteImageMap : 1; | |
unsigned __int32 ProhibitLowILImageMap : 1; | |
unsigned __int32 AuditProhibitLowILImageMap : 1; | |
unsigned __int32 SignatureMitigationOptIn : 1; | |
unsigned __int32 AuditBlockNonMicrosoftBinaries : 1; | |
unsigned __int32 AuditBlockNonMicrosoftBinariesAllowStore : 1; | |
unsigned __int32 LoaderIntegrityContinuityEnabled : 1; | |
unsigned __int32 AuditLoaderIntegrityContinuity : 1; | |
unsigned __int32 EnableModuleTamperingProtection : 1; | |
unsigned __int32 EnableModuleTamperingProtectionNoInherit : 1; | |
unsigned __int32 RestrictIndirectBranchPrediction : 1; | |
unsigned __int32 IsolateSecurityDomain : 1; | |
} MitigationFlagsValues; | |
}; | |
/* 782 */ | |
union $93355E6245E9B890F41B0ABE48395969 | |
{ | |
unsigned int MitigationFlags2; | |
struct | |
{ | |
unsigned __int32 EnableExportAddressFilter : 1; | |
unsigned __int32 AuditExportAddressFilter : 1; | |
unsigned __int32 EnableExportAddressFilterPlus : 1; | |
unsigned __int32 AuditExportAddressFilterPlus : 1; | |
unsigned __int32 EnableRopStackPivot : 1; | |
unsigned __int32 AuditRopStackPivot : 1; | |
unsigned __int32 EnableRopCallerCheck : 1; | |
unsigned __int32 AuditRopCallerCheck : 1; | |
unsigned __int32 EnableRopSimExec : 1; | |
unsigned __int32 AuditRopSimExec : 1; | |
unsigned __int32 EnableImportAddressFilter : 1; | |
unsigned __int32 AuditImportAddressFilter : 1; | |
unsigned __int32 DisablePageCombine : 1; | |
unsigned __int32 SpeculativeStoreBypassDisable : 1; | |
unsigned __int32 CetUserShadowStacks : 1; | |
unsigned __int32 AuditCetUserShadowStacks : 1; | |
unsigned __int32 AuditCetUserShadowStacksLogged : 1; | |
unsigned __int32 UserCetSetContextIpValidation : 1; | |
unsigned __int32 AuditUserCetSetContextIpValidation : 1; | |
unsigned __int32 AuditUserCetSetContextIpValidationLogged : 1; | |
unsigned __int32 CetUserShadowStacksStrictMode : 1; | |
unsigned __int32 BlockNonCetBinaries : 1; | |
unsigned __int32 BlockNonCetBinariesNonEhcont : 1; | |
unsigned __int32 AuditBlockNonCetBinaries : 1; | |
unsigned __int32 AuditBlockNonCetBinariesLogged : 1; | |
unsigned __int32 Reserved1 : 1; | |
unsigned __int32 Reserved2 : 1; | |
unsigned __int32 Reserved3 : 1; | |
unsigned __int32 Reserved4 : 1; | |
unsigned __int32 Reserved5 : 1; | |
unsigned __int32 CetDynamicApisOutOfProcOnly : 1; | |
unsigned __int32 UserCetSetContextIpValidationRelaxedMode : 1; | |
} MitigationFlags2Values; | |
}; | |
/* 769 */ | |
struct _PS_DYNAMIC_ENFORCED_ADDRESS_RANGES | |
{ | |
_RTL_AVL_TREE Tree; | |
_EX_PUSH_LOCK Lock; | |
}; | |
/* 500 */ | |
struct __declspec(align(64)) _EPROCESS | |
{ | |
_KPROCESS Pcb; | |
_EX_PUSH_LOCK ProcessLock; | |
void *UniqueProcessId; | |
_LIST_ENTRY ActiveProcessLinks; | |
_EX_RUNDOWN_REF RundownProtect; | |
$4996B4FE2820644A378E1861BBE25B33 ___u5; | |
$7C662302056FFD1FB4E1773A0A034050 ___u6; | |
_LARGE_INTEGER CreateTime; | |
unsigned __int64 ProcessQuotaUsage[2]; | |
unsigned __int64 ProcessQuotaPeak[2]; | |
unsigned __int64 PeakVirtualSize; | |
unsigned __int64 VirtualSize; | |
_LIST_ENTRY SessionProcessLinks; | |
$2CF60692BD9E5E36C930915537D2294F ___u13; | |
_EX_FAST_REF Token; | |
unsigned __int64 MmReserved; | |
_EX_PUSH_LOCK AddressCreationLock; | |
_EX_PUSH_LOCK PageTableCommitmentLock; | |
_ETHREAD *RotateInProgress; | |
_ETHREAD *ForkInProgress; | |
_EJOB *volatile CommitChargeJob; | |
_RTL_AVL_TREE CloneRoot; | |
volatile unsigned __int64 NumberOfPrivatePages; | |
volatile unsigned __int64 NumberOfLockedPages; | |
void *Win32Process; | |
_EJOB *volatile Job; | |
void *SectionObject; | |
void *SectionBaseAddress; | |
unsigned int Cookie; | |
struct _PAGEFAULT_HISTORY *WorkingSetWatch; | |
void *Win32WindowStation; | |
void *InheritedFromUniqueProcessId; | |
volatile unsigned __int64 OwnerProcessId; | |
_PEB *Peb; | |
_MM_SESSION_SPACE *Session; | |
void *Spare1; | |
struct _EPROCESS_QUOTA_BLOCK *QuotaBlock; | |
_HANDLE_TABLE *ObjectTable; | |
void *DebugPort; | |
_EWOW64PROCESS *WoW64Process; | |
void *DeviceMap; | |
void *EtwDataSource; | |
unsigned __int64 PageDirectoryPte; | |
_FILE_OBJECT *ImageFilePointer; | |
unsigned __int8 ImageFileName[15]; | |
unsigned __int8 PriorityClass; | |
void *SecurityPort; | |
_SE_AUDIT_PROCESS_CREATION_INFO SeAuditProcessCreationInfo; | |
_LIST_ENTRY JobLinks; | |
void *HighestUserAddress; | |
_LIST_ENTRY ThreadListHead; | |
volatile unsigned int ActiveThreads; | |
unsigned int ImagePathHash; | |
unsigned int DefaultHardErrorProcessing; | |
int LastThreadExitStatus; | |
_EX_FAST_REF PrefetchTrace; | |
void *LockedPagesList; | |
_LARGE_INTEGER ReadOperationCount; | |
_LARGE_INTEGER WriteOperationCount; | |
_LARGE_INTEGER OtherOperationCount; | |
_LARGE_INTEGER ReadTransferCount; | |
_LARGE_INTEGER WriteTransferCount; | |
_LARGE_INTEGER OtherTransferCount; | |
unsigned __int64 CommitChargeLimit; | |
volatile unsigned __int64 CommitCharge; | |
volatile unsigned __int64 CommitChargePeak; | |
_MMSUPPORT_FULL Vm; | |
_LIST_ENTRY MmProcessLinks; | |
unsigned int ModifiedPageCount; | |
int ExitStatus; | |
_RTL_AVL_TREE VadRoot; | |
void *VadHint; | |
unsigned __int64 VadCount; | |
volatile unsigned __int64 VadPhysicalPages; | |
unsigned __int64 VadPhysicalPagesLimit; | |
_ALPC_PROCESS_CONTEXT AlpcContext; | |
_LIST_ENTRY TimerResolutionLink; | |
_PO_DIAG_STACK_RECORD *TimerResolutionStackRecord; | |
unsigned int RequestedTimerResolution; | |
unsigned int SmallestTimerResolution; | |
_LARGE_INTEGER ExitTime; | |
_INVERTED_FUNCTION_TABLE *InvertedFunctionTable; | |
_EX_PUSH_LOCK InvertedFunctionTableLock; | |
unsigned int ActiveThreadsHighWatermark; | |
unsigned int LargePrivateVadCount; | |
_EX_PUSH_LOCK ThreadListLock; | |
void *WnfContext; | |
_EJOB *ServerSilo; | |
unsigned __int8 SignatureLevel; | |
unsigned __int8 SectionSignatureLevel; | |
_PS_PROTECTION Protection; | |
unsigned __int8 HangCount : 3; | |
unsigned __int8 GhostCount : 3; | |
unsigned __int8 PrefilterException : 1; | |
$CA0F18E74A9969E442556CA20BA8141A ___u94; | |
int DeviceAsid; | |
void *SvmData; | |
_EX_PUSH_LOCK SvmProcessLock; | |
unsigned __int64 SvmLock; | |
_LIST_ENTRY SvmProcessDeviceListHead; | |
unsigned __int64 LastFreezeInterruptTime; | |
_PROCESS_DISK_COUNTERS *DiskCounters; | |
void *PicoContext; | |
void *EnclaveTable; | |
unsigned __int64 EnclaveNumber; | |
_EX_PUSH_LOCK EnclaveLock; | |
unsigned int HighPriorityFaultsAllowed; | |
struct _PO_PROCESS_ENERGY_CONTEXT *EnergyContext; | |
void *VmContext; | |
unsigned __int64 SequenceNumber; | |
unsigned __int64 CreateInterruptTime; | |
unsigned __int64 CreateUnbiasedInterruptTime; | |
unsigned __int64 TotalUnbiasedFrozenTime; | |
unsigned __int64 LastAppStateUpdateTime; | |
unsigned __int64 LastAppStateUptime : 61; | |
unsigned __int64 LastAppState : 3; | |
volatile unsigned __int64 SharedCommitCharge; | |
_EX_PUSH_LOCK SharedCommitLock; | |
_LIST_ENTRY SharedCommitLinks; | |
$991E1CBB7797929499350D8948279CF6 ___u119; | |
$7D7CAE6D41B81FF54781561F08F4E01A ___u120; | |
void *DiskIoAttribution; | |
void *DxgProcess; | |
unsigned int Win32KFilterSet; | |
volatile _PS_INTERLOCKED_TIMER_DELAY_VALUES ProcessTimerDelay; | |
volatile unsigned int KTimerSets; | |
volatile unsigned int KTimer2Sets; | |
volatile unsigned int ThreadTimerSets; | |
unsigned __int64 VirtualTimerListLock; | |
_LIST_ENTRY VirtualTimerListHead; | |
$E134A8FADB8F65034F4B68CDB0D5D9D3 ___u130; | |
$9E6F4DE8D8EBF60EF1749FF3BC13ADD5 ___u131; | |
$93355E6245E9B890F41B0ABE48395969 ___u132; | |
void *PartitionObject; | |
unsigned __int64 SecurityDomain; | |
unsigned __int64 ParentSecurityDomain; | |
void *CoverageSamplerContext; | |
void *MmHotPatchContext; | |
_RTL_AVL_TREE DynamicEHContinuationTargetsTree; | |
_EX_PUSH_LOCK DynamicEHContinuationTargetsLock; | |
_PS_DYNAMIC_ENFORCED_ADDRESS_RANGES DynamicEnforcedCetCompatibleRanges; | |
}; | |
/* 470 */ | |
struct _TERMINATION_PORT | |
{ | |
_TERMINATION_PORT *Next; | |
void *Port; | |
}; | |
/* 519 */ | |
struct $D771432583654A30C3F0CC1F45CBD584 | |
{ | |
unsigned int EndTime; | |
unsigned int Bitmap; | |
}; | |
/* 520 */ | |
union _TIMELINE_BITMAP | |
{ | |
unsigned __int64 Value; | |
$D771432583654A30C3F0CC1F45CBD584 __s1; | |
}; | |
/* 521 */ | |
struct _THREAD_ENERGY_VALUES | |
{ | |
unsigned __int64 Cycles[4][2]; | |
unsigned __int64 AttributedCycles[4][2]; | |
unsigned __int64 WorkOnBehalfCycles[4][2]; | |
_TIMELINE_BITMAP CpuTimeline; | |
}; | |
/* 486 */ | |
struct $9959C6898638794B7A02F04E7F980F81 | |
{ | |
unsigned __int8 ReservedLowFlags; | |
unsigned __int8 WaiterPriority; | |
}; | |
/* 487 */ | |
union $CF7BB8F6BCE46E0ACB31B2765E6762E9 | |
{ | |
unsigned __int16 Flag; | |
$9959C6898638794B7A02F04E7F980F81 __s1; | |
}; | |
/* 483 */ | |
struct $E71B718CD8428E7C8AA4A0868051E710 | |
{ | |
unsigned __int32 IoPriorityBoosted : 1; | |
unsigned __int32 OwnerReferenced : 1; | |
unsigned __int32 IoQoSPriorityBoosted : 1; | |
unsigned __int32 OwnerCount : 29; | |
}; | |
/* 484 */ | |
union $78420D8A0386470778F6C593B91418EA | |
{ | |
$E71B718CD8428E7C8AA4A0868051E710 __s0; | |
unsigned int TableSize; | |
}; | |
/* 485 */ | |
struct __declspec(align(8)) _OWNER_ENTRY | |
{ | |
unsigned __int64 OwnerThread; | |
$78420D8A0386470778F6C593B91418EA ___u1; | |
}; | |
/* 488 */ | |
union $FA8F2364BE4EE7049C389A9C36002332 | |
{ | |
void *Address; | |
unsigned __int64 CreatorBackTraceIndex; | |
}; | |
/* 489 */ | |
struct _ERESOURCE | |
{ | |
_LIST_ENTRY SystemResourcesList; | |
_OWNER_ENTRY *OwnerTable; | |
__int16 ActiveCount; | |
$CF7BB8F6BCE46E0ACB31B2765E6762E9 ___u3; | |
void *SharedWaiters; | |
void *ExclusiveWaiters; | |
_OWNER_ENTRY OwnerEntry; | |
unsigned int ActiveEntries; | |
unsigned int ContentionCount; | |
unsigned int NumberOfSharedWaiters; | |
unsigned int NumberOfExclusiveWaiters; | |
void *Reserved2; | |
$FA8F2364BE4EE7049C389A9C36002332 ___u12; | |
unsigned __int64 SpinLock; | |
}; | |
/* 522 */ | |
struct _PROCESS_DISK_COUNTERS | |
{ | |
unsigned __int64 BytesRead; | |
unsigned __int64 BytesWritten; | |
unsigned __int64 ReadOperationCount; | |
unsigned __int64 WriteOperationCount; | |
unsigned __int64 FlushOperationCount; | |
}; | |
/* 525 */ | |
struct _PS_JOB_WAKE_INFORMATION | |
{ | |
unsigned __int64 NotificationChannel; | |
unsigned __int64 WakeCounters[7]; | |
unsigned __int64 NoWakeCounter; | |
}; | |
/* 646 */ | |
union $D4EC67E83AD1F445DB8DDC83498F7F7A | |
{ | |
_WNF_STATE_NAME WakeChannel; | |
_PS_JOB_WAKE_INFORMATION WakeInfo; | |
}; | |
/* 647 */ | |
union $4A23899C1E06222AD02235BC2A2A749E | |
{ | |
_EJOB **Ancestors; | |
void *SessionObject; | |
}; | |
/* 528 */ | |
struct _EPROCESS_VALUES | |
{ | |
unsigned __int64 KernelTime; | |
unsigned __int64 UserTime; | |
unsigned __int64 ReadyTime; | |
unsigned __int64 CycleTime; | |
unsigned __int64 ContextSwitches; | |
__int64 ReadOperationCount; | |
__int64 WriteOperationCount; | |
__int64 OtherOperationCount; | |
__int64 ReadTransferCount; | |
__int64 WriteTransferCount; | |
__int64 OtherTransferCount; | |
unsigned __int64 KernelWaitTime; | |
unsigned __int64 UserWaitTime; | |
}; | |
/* 648 */ | |
struct $65D3EB519B1E7C760B05EEB88159A6EF | |
{ | |
unsigned __int32 CloseDone : 1; | |
unsigned __int32 MultiGroup : 1; | |
unsigned __int32 OutstandingNotification : 1; | |
unsigned __int32 NotificationInProgress : 1; | |
unsigned __int32 UILimits : 1; | |
unsigned __int32 CpuRateControlActive : 1; | |
unsigned __int32 OwnCpuRateControl : 1; | |
unsigned __int32 Terminating : 1; | |
unsigned __int32 WorkingSetLock : 1; | |
unsigned __int32 JobFrozen : 1; | |
unsigned __int32 Background : 1; | |
unsigned __int32 WakeNotificationAllocated : 1; | |
unsigned __int32 WakeNotificationEnabled : 1; | |
unsigned __int32 WakeNotificationPending : 1; | |
unsigned __int32 LimitNotificationRequired : 1; | |
unsigned __int32 ZeroCountNotificationRequired : 1; | |
unsigned __int32 CycleTimeNotificationRequired : 1; | |
unsigned __int32 CycleTimeNotificationPending : 1; | |
unsigned __int32 TimersVirtualized : 1; | |
unsigned __int32 JobSwapped : 1; | |
unsigned __int32 ViolationDetected : 1; | |
unsigned __int32 EmptyJobNotified : 1; | |
unsigned __int32 NoSystemCharge : 1; | |
unsigned __int32 DropNoWakeCharges : 1; | |
unsigned __int32 NoWakeChargePolicyDecided : 1; | |
unsigned __int32 NetRateControlActive : 1; | |
unsigned __int32 OwnNetRateControl : 1; | |
unsigned __int32 IoRateControlActive : 1; | |
unsigned __int32 OwnIoRateControl : 1; | |
unsigned __int32 DisallowNewProcesses : 1; | |
unsigned __int32 Silo : 1; | |
unsigned __int32 ContainerTelemetryIdSet : 1; | |
}; | |
/* 649 */ | |
union $C3B08C5FA8951161883CDA4B1B0475F4 | |
{ | |
unsigned int JobFlags; | |
$65D3EB519B1E7C760B05EEB88159A6EF __s1; | |
}; | |
/* 650 */ | |
struct $4FFEC2D8DFB6AAE379F5515F45589EFE | |
{ | |
unsigned __int32 ParentLocked : 1; | |
unsigned __int32 EnableUsermodeSiloThreadImpersonation : 1; | |
unsigned __int32 DisallowUsermodeSiloThreadImpersonation : 1; | |
}; | |
/* 651 */ | |
union $6D62781818C33DAE8447AE5050F5EFFA | |
{ | |
unsigned int JobFlags2; | |
$4FFEC2D8DFB6AAE379F5515F45589EFE __s1; | |
}; | |
/* 652 */ | |
union $B019160580AC7C473F8CD7707D30FBCA | |
{ | |
void *DiskIoAttributionContext; | |
_EJOB *DiskIoAttributionOwnerJob; | |
}; | |
/* 575 */ | |
struct _RTL_BITMAP | |
{ | |
unsigned int SizeOfBitMap; | |
unsigned int *Buffer; | |
}; | |
/* 640 */ | |
struct _JOB_RATE_CONTROL_HEADER | |
{ | |
void *RateControlQuotaReference; | |
_RTL_BITMAP OverQuotaHistory; | |
unsigned __int8 *BitMapBuffer; | |
unsigned __int64 BitMapBufferSize; | |
}; | |
/* 641 */ | |
struct $6692EE43CAA8CF2A74F40F50BC2198CE | |
{ | |
_LIST_ENTRY FreeListEntry; | |
unsigned __int64 ReservedForParentValue; | |
}; | |
/* 642 */ | |
union $A685BFDF6BEBE18FBFA9F060B73B246E | |
{ | |
_RTL_BALANCED_NODE VolumeTreeNode; | |
$6692EE43CAA8CF2A74F40F50BC2198CE __s1; | |
}; | |
/* 643 */ | |
struct _PS_IO_CONTROL_ENTRY | |
{ | |
$A685BFDF6BEBE18FBFA9F060B73B246E ___u0; | |
unsigned __int64 VolumeKey; | |
_EX_RUNDOWN_REF Rundown; | |
void *IoControl; | |
void *VolumeIoAttribution; | |
}; | |
/* 523 */ | |
struct _EJOB | |
{ | |
_KEVENT Event; | |
_LIST_ENTRY JobLinks; | |
_LIST_ENTRY ProcessListHead; | |
_ERESOURCE JobLock; | |
_LARGE_INTEGER TotalUserTime; | |
_LARGE_INTEGER TotalKernelTime; | |
_LARGE_INTEGER TotalCycleTime; | |
_LARGE_INTEGER ThisPeriodTotalUserTime; | |
_LARGE_INTEGER ThisPeriodTotalKernelTime; | |
unsigned __int64 TotalContextSwitches; | |
unsigned int TotalPageFaultCount; | |
unsigned int TotalProcesses; | |
unsigned int ActiveProcesses; | |
unsigned int TotalTerminatedProcesses; | |
_LARGE_INTEGER PerProcessUserTimeLimit; | |
_LARGE_INTEGER PerJobUserTimeLimit; | |
unsigned __int64 MinimumWorkingSetSize; | |
unsigned __int64 MaximumWorkingSetSize; | |
unsigned int LimitFlags; | |
unsigned int ActiveProcessLimit; | |
_KAFFINITY_EX Affinity; | |
struct _JOB_ACCESS_STATE *AccessState; | |
void *AccessStateQuotaReference; | |
unsigned int UIRestrictionsClass; | |
unsigned int EndOfJobTimeAction; | |
void *CompletionPort; | |
void *CompletionKey; | |
unsigned __int64 CompletionCount; | |
unsigned int SessionId; | |
unsigned int SchedulingClass; | |
unsigned __int64 ReadOperationCount; | |
unsigned __int64 WriteOperationCount; | |
unsigned __int64 OtherOperationCount; | |
unsigned __int64 ReadTransferCount; | |
unsigned __int64 WriteTransferCount; | |
unsigned __int64 OtherTransferCount; | |
_PROCESS_DISK_COUNTERS DiskIoInfo; | |
unsigned __int64 ProcessMemoryLimit; | |
unsigned __int64 JobMemoryLimit; | |
unsigned __int64 JobTotalMemoryLimit; | |
unsigned __int64 PeakProcessMemoryUsed; | |
unsigned __int64 PeakJobMemoryUsed; | |
_KAFFINITY_EX EffectiveAffinity; | |
_LARGE_INTEGER EffectivePerProcessUserTimeLimit; | |
unsigned __int64 EffectiveMinimumWorkingSetSize; | |
unsigned __int64 EffectiveMaximumWorkingSetSize; | |
unsigned __int64 EffectiveProcessMemoryLimit; | |
_EJOB *EffectiveProcessMemoryLimitJob; | |
_EJOB *EffectivePerProcessUserTimeLimitJob; | |
_EJOB *EffectiveNetIoRateLimitJob; | |
_EJOB *EffectiveHeapAttributionJob; | |
unsigned int EffectiveLimitFlags; | |
unsigned int EffectiveSchedulingClass; | |
unsigned int EffectiveFreezeCount; | |
unsigned int EffectiveBackgroundCount; | |
unsigned int EffectiveSwapCount; | |
unsigned int EffectiveNotificationLimitCount; | |
unsigned __int8 EffectivePriorityClass; | |
unsigned __int8 PriorityClass; | |
unsigned __int8 NestingDepth; | |
unsigned __int8 Reserved1[1]; | |
unsigned int CompletionFilter; | |
$D4EC67E83AD1F445DB8DDC83498F7F7A ___u62; | |
_JOBOBJECT_WAKE_FILTER WakeFilter; | |
unsigned int LowEdgeLatchFilter; | |
_EJOB *NotificationLink; | |
unsigned __int64 CurrentJobMemoryUsed; | |
struct _JOB_NOTIFICATION_INFORMATION *NotificationInfo; | |
void *NotificationInfoQuotaReference; | |
_IO_MINI_COMPLETION_PACKET_USER *NotificationPacket; | |
struct _JOB_CPU_RATE_CONTROL *CpuRateControl; | |
void *EffectiveSchedulingGroup; | |
unsigned __int64 ReadyTime; | |
_EX_PUSH_LOCK MemoryLimitsLock; | |
_LIST_ENTRY SiblingJobLinks; | |
_LIST_ENTRY ChildJobListHead; | |
_EJOB *ParentJob; | |
_EJOB *volatile RootJob; | |
_LIST_ENTRY IteratorListHead; | |
unsigned __int64 AncestorCount; | |
$4A23899C1E06222AD02235BC2A2A749E ___u80; | |
_EPROCESS_VALUES Accounting; | |
unsigned int ShadowActiveProcessCount; | |
unsigned int ActiveAuxiliaryProcessCount; | |
unsigned int SequenceNumber; | |
unsigned int JobId; | |
_GUID ContainerId; | |
_GUID ContainerTelemetryId; | |
_ESERVERSILO_GLOBALS *ServerSiloGlobals; | |
_PS_PROPERTY_SET PropertySet; | |
struct _PSP_STORAGE *Storage; | |
struct _JOB_NET_RATE_CONTROL *NetRateControl; | |
$C3B08C5FA8951161883CDA4B1B0475F4 ___u92; | |
$6D62781818C33DAE8447AE5050F5EFFA ___u93; | |
_PROCESS_EXTENDED_ENERGY_VALUES *EnergyValues; | |
volatile unsigned __int64 SharedCommitCharge; | |
unsigned int DiskIoAttributionUserRefCount; | |
unsigned int DiskIoAttributionRefCount; | |
$B019160580AC7C473F8CD7707D30FBCA ___u98; | |
_JOB_RATE_CONTROL_HEADER IoRateControlHeader; | |
_PS_IO_CONTROL_ENTRY GlobalIoControl; | |
volatile int IoControlStateLock; | |
_RTL_RB_TREE VolumeIoControlTree; | |
unsigned __int64 IoRateOverQuotaHistory; | |
unsigned int IoRateCurrentGeneration; | |
unsigned int IoRateLastQueryGeneration; | |
unsigned int IoRateGenerationLength; | |
unsigned int IoRateOverQuotaNotifySequenceId; | |
unsigned __int64 LastThrottledIoTime; | |
_EX_PUSH_LOCK IoControlLock; | |
__int64 SiloHardReferenceCount; | |
_WORK_QUEUE_ITEM RundownWorkItem; | |
void *PartitionObject; | |
_EJOB *PartitionOwnerJob; | |
_JOBOBJECT_ENERGY_TRACKING_STATE EnergyTrackingState; | |
unsigned __int64 KernelWaitTime; | |
unsigned __int64 UserWaitTime; | |
}; | |
/* 788 */ | |
struct _IO_SECURITY_CONTEXT | |
{ | |
_SECURITY_QUALITY_OF_SERVICE *SecurityQos; | |
_ACCESS_STATE *AccessState; | |
unsigned int DesiredAccess; | |
unsigned int FullCreateOptions; | |
}; | |
/* 789 */ | |
struct __declspec(align(8)) _NAMED_PIPE_CREATE_PARAMETERS | |
{ | |
unsigned int NamedPipeType; | |
unsigned int ReadMode; | |
unsigned int CompletionMode; | |
unsigned int MaximumInstances; | |
unsigned int InboundQuota; | |
unsigned int OutboundQuota; | |
_LARGE_INTEGER DefaultTimeout; | |
unsigned __int8 TimeoutSpecified; | |
}; | |
/* 790 */ | |
struct __declspec(align(8)) _MAILSLOT_CREATE_PARAMETERS | |
{ | |
unsigned int MailslotQuota; | |
unsigned int MaximumMessageSize; | |
_LARGE_INTEGER ReadTimeout; | |
unsigned __int8 TimeoutSpecified; | |
}; | |
/* 793 */ | |
struct _SID_IDENTIFIER_AUTHORITY | |
{ | |
unsigned __int8 Value[6]; | |
}; | |
/* 794 */ | |
struct _SID | |
{ | |
unsigned __int8 Revision; | |
unsigned __int8 SubAuthorityCount; | |
_SID_IDENTIFIER_AUTHORITY IdentifierAuthority; | |
unsigned int SubAuthority[1]; | |
}; | |
/* 795 */ | |
struct _FILE_GET_QUOTA_INFORMATION | |
{ | |
unsigned int NextEntryOffset; | |
unsigned int SidLength; | |
_SID Sid; | |
}; | |
/* 796 */ | |
struct _INTERFACE | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
void *Context; | |
void (__fastcall *InterfaceReference)(void *); | |
void (__fastcall *InterfaceDereference)(void *); | |
}; | |
/* 797 */ | |
struct _DEVICE_CAPABILITIES | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
unsigned __int32 DeviceD1 : 1; | |
unsigned __int32 DeviceD2 : 1; | |
unsigned __int32 LockSupported : 1; | |
unsigned __int32 EjectSupported : 1; | |
unsigned __int32 Removable : 1; | |
unsigned __int32 DockDevice : 1; | |
unsigned __int32 UniqueID : 1; | |
unsigned __int32 SilentInstall : 1; | |
unsigned __int32 RawDeviceOK : 1; | |
unsigned __int32 SurpriseRemovalOK : 1; | |
unsigned __int32 WakeFromD0 : 1; | |
unsigned __int32 WakeFromD1 : 1; | |
unsigned __int32 WakeFromD2 : 1; | |
unsigned __int32 WakeFromD3 : 1; | |
unsigned __int32 HardwareDisabled : 1; | |
unsigned __int32 NonDynamic : 1; | |
unsigned __int32 WarmEjectSupported : 1; | |
unsigned __int32 NoDisplayInUI : 1; | |
unsigned __int32 Reserved1 : 1; | |
unsigned __int32 WakeFromInterrupt : 1; | |
unsigned __int32 SecureDevice : 1; | |
unsigned __int32 ChildOfVgaEnabledBridge : 1; | |
unsigned __int32 DecodeIoOnBoot : 1; | |
unsigned __int32 Reserved : 9; | |
unsigned int Address; | |
unsigned int UINumber; | |
_DEVICE_POWER_STATE DeviceState[7]; | |
_SYSTEM_POWER_STATE SystemWake; | |
_DEVICE_POWER_STATE DeviceWake; | |
unsigned int D1Latency; | |
unsigned int D2Latency; | |
unsigned int D3Latency; | |
}; | |
/* 801 */ | |
struct _POWER_SEQUENCE | |
{ | |
unsigned int SequenceD1; | |
unsigned int SequenceD2; | |
unsigned int SequenceD3; | |
}; | |
/* 480 */ | |
struct _SECTION_OBJECT_POINTERS | |
{ | |
void *DataSectionObject; | |
void *SharedCacheMap; | |
void *ImageSectionObject; | |
}; | |
/* 482 */ | |
struct _IO_COMPLETION_CONTEXT | |
{ | |
void *Port; | |
void *Key; | |
}; | |
/* 832 */ | |
struct _PLUGPLAY_EVENT_BLOCK | |
{ | |
_GUID EventGuid; | |
_PLUGPLAY_EVENT_CATEGORY EventCategory; | |
unsigned int *Result; | |
unsigned int Flags; | |
unsigned int TotalSize; | |
void *DeviceObject; | |
union | |
{ | |
struct __declspec(align(4)) | |
{ | |
_GUID ClassGuid; | |
wchar_t SymbolicLinkName[1]; | |
} DeviceClass; | |
struct | |
{ | |
wchar_t DeviceId[1]; | |
} TargetDevice; | |
struct | |
{ | |
wchar_t DeviceId[1]; | |
} InstallDevice; | |
struct __declspec(align(8)) | |
{ | |
void *NotificationStructure; | |
wchar_t DeviceId[1]; | |
} CustomNotification; | |
struct | |
{ | |
void *Notification; | |
} ProfileNotification; | |
struct | |
{ | |
unsigned int NotificationCode; | |
unsigned int NotificationData; | |
} PowerNotification; | |
struct __declspec(align(4)) | |
{ | |
_PNP_VETO_TYPE VetoType; | |
wchar_t DeviceIdVetoNameBuffer[1]; | |
} VetoNotification; | |
struct | |
{ | |
_GUID BlockedDriverGuid; | |
} BlockedDriverNotification; | |
struct | |
{ | |
wchar_t ParentId[1]; | |
} InvalidIDNotification; | |
struct __declspec(align(4)) | |
{ | |
_GUID PowerSettingGuid; | |
unsigned int Flags; | |
unsigned int SessionId; | |
unsigned int DataLength; | |
unsigned __int8 Data[1]; | |
} PowerSettingNotification; | |
struct | |
{ | |
wchar_t DeviceId[1]; | |
} PropertyChangeNotification; | |
struct | |
{ | |
wchar_t DeviceId[1]; | |
} DeviceInstanceNotification; | |
} u; | |
}; | |
/* 829 */ | |
struct _PNP_DEVICE_EVENT_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int Argument; | |
int ArgumentStatus; | |
_KEVENT *CallerEvent; | |
void (__fastcall *Callback)(void *); | |
void *Context; | |
_PNP_VETO_TYPE *VetoType; | |
_UNICODE_STRING *VetoName; | |
unsigned int RefCount; | |
unsigned int Lock; | |
unsigned __int8 Cancel; | |
_PNP_DEVICE_EVENT_ENTRY *Parent; | |
_GUID ActivityId; | |
_PNP_WATCHDOG *Watchdog; | |
_PLUGPLAY_EVENT_BLOCK Data; | |
}; | |
/* 835 */ | |
struct __declspec(align(8)) _RELATION_LIST | |
{ | |
_DEVICE_OBJECT_LIST *DeviceObjectList; | |
unsigned __int8 Sorted; | |
}; | |
/* 836 */ | |
struct DOCK_INTERFACE | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
void *Context; | |
void (__fastcall *InterfaceReference)(void *); | |
void (__fastcall *InterfaceDereference)(void *); | |
unsigned int (__fastcall *ProfileDepartureSetMode)(void *, PROFILE_DEPARTURE_STYLE); | |
unsigned int (__fastcall *ProfileDepartureUpdate)(void *); | |
}; | |
/* 515 */ | |
struct _DEVICE_OBJECT_POWER_EXTENSION | |
{ | |
volatile unsigned int IdleCount; | |
volatile unsigned int BusyCount; | |
volatile unsigned int BusyReference; | |
unsigned int TotalBusyCount; | |
unsigned int ConservationIdleTime; | |
unsigned int PerformanceIdleTime; | |
_DEVICE_OBJECT *DeviceObject; | |
_LIST_ENTRY IdleList; | |
_POP_DEVICE_IDLE_TYPE IdleType; | |
_DEVICE_POWER_STATE IdleState; | |
_DEVICE_POWER_STATE CurrentState; | |
_POP_COOLING_EXTENSION *CoolingExtension; | |
_LIST_ENTRY Volume; | |
union | |
{ | |
struct | |
{ | |
unsigned int IdleTime; | |
unsigned int NonIdleTime; | |
} Disk; | |
} Specific; | |
}; | |
/* 872 */ | |
union $EAADDD9D0831108F923DCADC883D7ACD | |
{ | |
unsigned int StateIndex; | |
unsigned __int64 StateValue; | |
}; | |
/* 873 */ | |
struct _PO_FX_PERF_STATE_CHANGE | |
{ | |
unsigned int Set; | |
$EAADDD9D0831108F923DCADC883D7ACD ___u1; | |
}; | |
/* 877 */ | |
struct __declspec(align(8)) _POP_FX_PERF_SET | |
{ | |
_PO_FX_COMPONENT_PERF_SET *PerfSet; | |
unsigned __int64 CurrentPerf; | |
unsigned __int64 CurrentPerfStamp; | |
unsigned __int8 CurrentPerfNominal; | |
}; | |
/* 478 */ | |
struct _IO_CLIENT_EXTENSION | |
{ | |
_IO_CLIENT_EXTENSION *NextExtension; | |
void *ClientIdentificationAddress; | |
}; | |
/* 494 */ | |
struct _FS_FILTER_CALLBACKS | |
{ | |
unsigned int SizeOfFsFilterCallbacks; | |
unsigned int Reserved; | |
int (__fastcall *PreAcquireForSectionSynchronization)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostAcquireForSectionSynchronization)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreReleaseForSectionSynchronization)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostReleaseForSectionSynchronization)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreAcquireForCcFlush)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostAcquireForCcFlush)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreReleaseForCcFlush)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostReleaseForCcFlush)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreAcquireForModifiedPageWriter)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostAcquireForModifiedPageWriter)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreReleaseForModifiedPageWriter)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostReleaseForModifiedPageWriter)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
int (__fastcall *PreQueryOpen)(_FS_FILTER_CALLBACK_DATA *, void **); | |
void (__fastcall *PostQueryOpen)(_FS_FILTER_CALLBACK_DATA *, int, void *); | |
}; | |
/* 498 */ | |
struct __declspec(align(8)) _FILE_BASIC_INFORMATION | |
{ | |
_LARGE_INTEGER CreationTime; | |
_LARGE_INTEGER LastAccessTime; | |
_LARGE_INTEGER LastWriteTime; | |
_LARGE_INTEGER ChangeTime; | |
unsigned int FileAttributes; | |
}; | |
/* 499 */ | |
struct __declspec(align(4)) _FILE_STANDARD_INFORMATION | |
{ | |
_LARGE_INTEGER AllocationSize; | |
_LARGE_INTEGER EndOfFile; | |
unsigned int NumberOfLinks; | |
unsigned __int8 DeletePending; | |
unsigned __int8 Directory; | |
}; | |
/* 501 */ | |
struct __declspec(align(8)) _FILE_NETWORK_OPEN_INFORMATION | |
{ | |
_LARGE_INTEGER CreationTime; | |
_LARGE_INTEGER LastAccessTime; | |
_LARGE_INTEGER LastWriteTime; | |
_LARGE_INTEGER ChangeTime; | |
_LARGE_INTEGER AllocationSize; | |
_LARGE_INTEGER EndOfFile; | |
unsigned int FileAttributes; | |
}; | |
/* 502 */ | |
struct _COMPRESSED_DATA_INFO | |
{ | |
unsigned __int16 CompressionFormatAndEngine; | |
unsigned __int8 CompressionUnitShift; | |
unsigned __int8 ChunkShift; | |
unsigned __int8 ClusterShift; | |
unsigned __int8 Reserved; | |
unsigned __int16 NumberOfChunks; | |
unsigned int CompressedChunkSizes[1]; | |
}; | |
/* 692 */ | |
struct $26C534863E3B2F3363253F7AC0ACA204 | |
{ | |
unsigned __int8 ImageUsesLargePages : 1; | |
unsigned __int8 IsProtectedProcess : 1; | |
unsigned __int8 IsImageDynamicallyRelocated : 1; | |
unsigned __int8 SkipPatchingUser32Forwarders : 1; | |
unsigned __int8 IsPackagedProcess : 1; | |
unsigned __int8 IsAppContainer : 1; | |
unsigned __int8 IsProtectedProcessLight : 1; | |
unsigned __int8 IsLongPathAwareProcess : 1; | |
}; | |
/* 693 */ | |
union $1FC3CF19FE78E08DBCA0A468418A0394 | |
{ | |
unsigned __int8 BitField; | |
$26C534863E3B2F3363253F7AC0ACA204 __s1; | |
}; | |
/* 694 */ | |
struct $4FCFD4C7BDD47E55BF02313DBB2A825D | |
{ | |
unsigned __int32 ProcessInJob : 1; | |
unsigned __int32 ProcessInitializing : 1; | |
unsigned __int32 ProcessUsingVEH : 1; | |
unsigned __int32 ProcessUsingVCH : 1; | |
unsigned __int32 ProcessUsingFTH : 1; | |
unsigned __int32 ProcessPreviouslyThrottled : 1; | |
unsigned __int32 ProcessCurrentlyThrottled : 1; | |
unsigned __int32 ProcessImagesHotPatched : 1; | |
unsigned __int32 ReservedBits0 : 24; | |
}; | |
/* 695 */ | |
union $C56898A4BC7BD2644011280E50E313AE | |
{ | |
unsigned int CrossProcessFlags; | |
$4FCFD4C7BDD47E55BF02313DBB2A825D __s1; | |
}; | |
/* 696 */ | |
union $6F1CA9A36B21C857AE5467E073440320 | |
{ | |
void *KernelCallbackTable; | |
void *UserSharedInfoPtr; | |
}; | |
/* 697 */ | |
struct $B9EB1F4F9D70F693049DD1A0DA8FBDA7 | |
{ | |
unsigned __int32 HeapTracingEnabled : 1; | |
unsigned __int32 CritSecTracingEnabled : 1; | |
unsigned __int32 LibLoaderTracingEnabled : 1; | |
unsigned __int32 SpareTracingBits : 29; | |
}; | |
/* 698 */ | |
union $19872DF55B967FE50480526B665E49FA | |
{ | |
unsigned int TracingFlags; | |
$B9EB1F4F9D70F693049DD1A0DA8FBDA7 __s1; | |
}; | |
/* 699 */ | |
struct $9AED812D9AFCFBDB9DE58272C10BD98C | |
{ | |
unsigned __int32 SixtySecondEnabled : 1; | |
unsigned __int32 Reserved : 31; | |
}; | |
/* 700 */ | |
union $DABBB401A2825D2BAEA1BC7E666346FE | |
{ | |
unsigned int LeapSecondFlags; | |
$9AED812D9AFCFBDB9DE58272C10BD98C __s1; | |
}; | |
/* 701 */ | |
struct _PEB | |
{ | |
unsigned __int8 InheritedAddressSpace; | |
unsigned __int8 ReadImageFileExecOptions; | |
unsigned __int8 BeingDebugged; | |
$1FC3CF19FE78E08DBCA0A468418A0394 ___u3; | |
unsigned __int8 Padding0[4]; | |
void *Mutant; | |
void *ImageBaseAddress; | |
_PEB_LDR_DATA *Ldr; | |
_RTL_USER_PROCESS_PARAMETERS *ProcessParameters; | |
void *SubSystemData; | |
void *ProcessHeap; | |
_RTL_CRITICAL_SECTION *FastPebLock; | |
_SLIST_HEADER *volatile AtlThunkSListPtr; | |
void *IFEOKey; | |
$C56898A4BC7BD2644011280E50E313AE ___u14; | |
unsigned __int8 Padding1[4]; | |
$6F1CA9A36B21C857AE5467E073440320 ___u16; | |
unsigned int SystemReserved; | |
unsigned int AtlThunkSListPtr32; | |
void *ApiSetMap; | |
unsigned int TlsExpansionCounter; | |
unsigned __int8 Padding2[4]; | |
void *TlsBitmap; | |
unsigned int TlsBitmapBits[2]; | |
void *ReadOnlySharedMemoryBase; | |
void *SharedData; | |
void **ReadOnlyStaticServerData; | |
void *AnsiCodePageData; | |
void *OemCodePageData; | |
void *UnicodeCaseTableData; | |
unsigned int NumberOfProcessors; | |
unsigned int NtGlobalFlag; | |
_LARGE_INTEGER CriticalSectionTimeout; | |
unsigned __int64 HeapSegmentReserve; | |
unsigned __int64 HeapSegmentCommit; | |
unsigned __int64 HeapDeCommitTotalFreeThreshold; | |
unsigned __int64 HeapDeCommitFreeBlockThreshold; | |
unsigned int NumberOfHeaps; | |
unsigned int MaximumNumberOfHeaps; | |
void **ProcessHeaps; | |
void *GdiSharedHandleTable; | |
void *ProcessStarterHelper; | |
unsigned int GdiDCAttributeList; | |
unsigned __int8 Padding3[4]; | |
_RTL_CRITICAL_SECTION *LoaderLock; | |
unsigned int OSMajorVersion; | |
unsigned int OSMinorVersion; | |
unsigned __int16 OSBuildNumber; | |
unsigned __int16 OSCSDVersion; | |
unsigned int OSPlatformId; | |
unsigned int ImageSubsystem; | |
unsigned int ImageSubsystemMajorVersion; | |
unsigned int ImageSubsystemMinorVersion; | |
unsigned __int8 Padding4[4]; | |
unsigned __int64 ActiveProcessAffinityMask; | |
unsigned int GdiHandleBuffer[60]; | |
void (__fastcall *PostProcessInitRoutine)(); | |
void *TlsExpansionBitmap; | |
unsigned int TlsExpansionBitmapBits[32]; | |
unsigned int SessionId; | |
unsigned __int8 Padding5[4]; | |
_ULARGE_INTEGER AppCompatFlags; | |
_ULARGE_INTEGER AppCompatFlagsUser; | |
void *pShimData; | |
void *AppCompatInfo; | |
_UNICODE_STRING CSDVersion; | |
const struct _ACTIVATION_CONTEXT_DATA *ActivationContextData; | |
struct _ASSEMBLY_STORAGE_MAP *ProcessAssemblyStorageMap; | |
const struct _ACTIVATION_CONTEXT_DATA *SystemDefaultActivationContextData; | |
struct _ASSEMBLY_STORAGE_MAP *SystemAssemblyStorageMap; | |
unsigned __int64 MinimumStackCommit; | |
void *SparePointers[4]; | |
unsigned int SpareUlongs[5]; | |
void *WerRegistrationData; | |
void *WerShipAssertPtr; | |
void *pUnused; | |
void *pImageHeaderHash; | |
$19872DF55B967FE50480526B665E49FA ___u77; | |
unsigned __int8 Padding6[4]; | |
unsigned __int64 CsrServerReadOnlySharedMemoryBase; | |
unsigned __int64 TppWorkerpListLock; | |
_LIST_ENTRY TppWorkerpList; | |
void *WaitOnAddressHashTable[128]; | |
void *TelemetryCoverageHeader; | |
unsigned int CloudFileFlags; | |
unsigned int CloudFileDiagFlags; | |
char PlaceholderCompatibilityMode; | |
char PlaceholderCompatibilityModeReserved[7]; | |
_LEAP_SECOND_DATA *LeapSecondData; | |
$DABBB401A2825D2BAEA1BC7E666346FE ___u89; | |
unsigned int NtGlobalFlag2; | |
}; | |
/* 702 */ | |
struct _MM_SESSION_SPACE_FLAGS | |
{ | |
unsigned __int32 Initialized : 1; | |
unsigned __int32 DeletePending : 1; | |
unsigned __int32 PoolInitialized : 1; | |
unsigned __int32 DynamicVaInitialized : 1; | |
unsigned __int32 WsInitialized : 1; | |
unsigned __int32 PoolDestroyed : 1; | |
unsigned __int32 ObjectInitialized : 1; | |
unsigned __int32 SessionHeapInitialized : 1; | |
unsigned __int32 SessionHeapDestroyed : 1; | |
unsigned __int32 LeakedPoolDeliberately : 1; | |
unsigned __int32 Filler : 22; | |
}; | |
/* 703 */ | |
struct _MM_PAGED_POOL_INFO | |
{ | |
_EX_PUSH_LOCK Lock; | |
unsigned __int64 MaximumSize; | |
unsigned __int64 AllocatedPagedPool; | |
}; | |
/* 704 */ | |
struct _MMSESSION | |
{ | |
_EX_PUSH_LOCK SystemSpaceViewLock; | |
_EX_PUSH_LOCK *SystemSpaceViewLockPointer; | |
_RTL_AVL_TREE ViewRoot; | |
unsigned int ViewCount; | |
unsigned int BitmapFailures; | |
}; | |
/* 713 */ | |
struct _MMWSL_INSTANCE | |
{ | |
_MMPTE *NextPteToTrim; | |
_MMPTE *NextPteToAge; | |
_MMPTE *NextPteToAccessClear; | |
unsigned int LastAccessClearingRemainder; | |
unsigned int LastAgingRemainder; | |
unsigned __int64 LockedEntries; | |
}; | |
/* 722 */ | |
struct _MMSUPPORT_AGGREGATION | |
{ | |
unsigned int PageFaultCount; | |
unsigned __int64 WorkingSetSize; | |
unsigned __int64 WorkingSetLeafSize; | |
unsigned __int64 PeakWorkingSetSize; | |
}; | |
/* 723 */ | |
union $6A9468E100B7B35D88DE2548A245DC47 | |
{ | |
void (__fastcall *Function)(_DRIVER_OBJECT *); | |
unsigned __int64 FunctionValue; | |
}; | |
/* 724 */ | |
struct _MI_SESSION_DRIVER_UNLOAD | |
{ | |
$6A9468E100B7B35D88DE2548A245DC47 ___u0; | |
}; | |
/* 705 */ | |
struct _MMPTE_HARDWARE | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 Dirty1 : 1; | |
unsigned __int64 Owner : 1; | |
unsigned __int64 WriteThrough : 1; | |
unsigned __int64 CacheDisable : 1; | |
unsigned __int64 Accessed : 1; | |
unsigned __int64 Dirty : 1; | |
unsigned __int64 LargePage : 1; | |
unsigned __int64 Global : 1; | |
unsigned __int64 CopyOnWrite : 1; | |
unsigned __int64 Unused : 1; | |
unsigned __int64 Write : 1; | |
unsigned __int64 PageFrameNumber : 36; | |
unsigned __int64 ReservedForHardware : 4; | |
unsigned __int64 ReservedForSoftware : 4; | |
unsigned __int64 WsleAge : 4; | |
unsigned __int64 WsleProtection : 3; | |
unsigned __int64 NoExecute : 1; | |
}; | |
/* 706 */ | |
struct _MMPTE_PROTOTYPE | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 DemandFillProto : 1; | |
unsigned __int64 HiberVerifyConverted : 1; | |
unsigned __int64 ReadOnly : 1; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 Combined : 1; | |
unsigned __int64 Unused1 : 4; | |
__int64 ProtoAddress : 48; | |
}; | |
/* 707 */ | |
struct _MMPTE_SOFTWARE | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 PageFileReserved : 1; | |
unsigned __int64 PageFileAllocated : 1; | |
unsigned __int64 ColdPage : 1; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 Transition : 1; | |
unsigned __int64 PageFileLow : 4; | |
unsigned __int64 UsedPageTableEntries : 10; | |
unsigned __int64 ShadowStack : 1; | |
unsigned __int64 Unused : 5; | |
unsigned __int64 PageFileHigh : 32; | |
}; | |
/* 708 */ | |
struct _MMPTE_TIMESTAMP | |
{ | |
unsigned __int64 MustBeZero : 1; | |
unsigned __int64 Unused : 3; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 Transition : 1; | |
unsigned __int64 PageFileLow : 4; | |
unsigned __int64 Reserved : 16; | |
unsigned __int64 GlobalTimeStamp : 32; | |
}; | |
/* 709 */ | |
struct _MMPTE_TRANSITION | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 Write : 1; | |
unsigned __int64 Spare : 1; | |
unsigned __int64 IoTracker : 1; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 Transition : 1; | |
unsigned __int64 PageFrameNumber : 36; | |
unsigned __int64 Unused : 16; | |
}; | |
/* 710 */ | |
struct _MMPTE_SUBSECTION | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 Unused0 : 3; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 ColdPage : 1; | |
unsigned __int64 Unused1 : 3; | |
unsigned __int64 ExecutePrivilege : 1; | |
__int64 SubsectionAddress : 48; | |
}; | |
/* 711 */ | |
struct _MMPTE_LIST | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 OneEntry : 1; | |
unsigned __int64 filler0 : 2; | |
unsigned __int64 SwizzleBit : 1; | |
unsigned __int64 Protection : 5; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 Transition : 1; | |
unsigned __int64 filler1 : 16; | |
unsigned __int64 NextEntry : 36; | |
}; | |
/* 712 */ | |
struct _MMPTE | |
{ | |
union | |
{ | |
unsigned __int64 Long; | |
volatile unsigned __int64 VolatileLong; | |
_MMPTE_HARDWARE Hard; | |
_MMPTE_PROTOTYPE Proto; | |
_MMPTE_SOFTWARE Soft; | |
_MMPTE_TIMESTAMP TimeStamp; | |
_MMPTE_TRANSITION Trans; | |
_MMPTE_SUBSECTION Subsect; | |
_MMPTE_LIST List; | |
} u; | |
}; | |
/* 725 */ | |
struct _RTL_BITMAP_EX | |
{ | |
unsigned __int64 SizeOfBitMap; | |
unsigned __int64 *Buffer; | |
}; | |
/* 730 */ | |
union $BEC391ECFBEBD0C532752051D52F625B | |
{ | |
unsigned __int64 SpinLock; | |
_EX_PUSH_LOCK *GlobalPushLock; | |
}; | |
/* 731 */ | |
struct _MI_SYSTEM_PTE_TYPE | |
{ | |
_RTL_BITMAP_EX Bitmap; | |
_MMPTE *BasePte; | |
unsigned int Flags; | |
_MI_SYSTEM_VA_TYPE VaType; | |
unsigned int *FailureCount; | |
unsigned int PteFailures; | |
$BEC391ECFBEBD0C532752051D52F625B ___u6; | |
volatile unsigned __int64 TotalSystemPtes; | |
unsigned __int64 Hint; | |
unsigned __int64 LowestBitEverAllocated; | |
volatile _MI_CACHED_PTES *CachedPtes; | |
volatile unsigned __int64 TotalFreeSystemPtes; | |
}; | |
/* 732 */ | |
struct _MM_SESSION_SPACE | |
{ | |
volatile int ReferenceCount; | |
union | |
{ | |
unsigned int LongFlags; | |
_MM_SESSION_SPACE_FLAGS Flags; | |
} u; | |
unsigned int SessionId; | |
volatile int ProcessReferenceToSession; | |
_LIST_ENTRY ProcessList; | |
unsigned __int64 SessionPageDirectoryIndex; | |
volatile unsigned __int64 NonPagablePages; | |
volatile unsigned __int64 CommittedPages; | |
void *PagedPoolStart; | |
void *PagedPoolEnd; | |
void *SessionObject; | |
void *SessionObjectHandle; | |
_RTL_AVL_TREE ImageTree; | |
unsigned int LocaleId; | |
unsigned int AttachCount; | |
_KGATE AttachGate; | |
_LIST_ENTRY WsListEntry; | |
_RTL_BALANCED_NODE WsTreeEntry; | |
_MM_PAGED_POOL_INFO PagedPoolInfo; | |
_MMSESSION Session; | |
unsigned __int64 CombineDomain; | |
_MMSUPPORT_FULL Vm; | |
_MMWSL_INSTANCE WorkingSetList; | |
__declspec(align(32)) _MMSUPPORT_AGGREGATION AggregateSessionWs; | |
void *HeapState; | |
_MI_SESSION_DRIVER_UNLOAD DriverUnload; | |
unsigned int TopLevelPteLockBits[32]; | |
_MMPTE PageDirectory; | |
_EX_PUSH_LOCK SessionVaLock; | |
_RTL_BITMAP_EX DynamicVaBitMap; | |
unsigned __int64 DynamicVaHint; | |
_EX_PUSH_LOCK SessionPteLock; | |
int PoolBigEntriesInUse; | |
volatile int PagedPoolPdeCount; | |
unsigned int DynamicSessionPdeCount; | |
_MI_SYSTEM_PTE_TYPE SystemPteInfo; | |
void *PoolTrackTableExpansion; | |
unsigned __int64 PoolTrackTableExpansionSize; | |
void *PoolTrackBigPages; | |
unsigned __int64 PoolTrackBigPagesSize; | |
_RTL_AVL_TREE PermittedFaultsTree; | |
_IO_SESSION_STATE IoState; | |
unsigned int IoStateSequence; | |
_KEVENT IoNotificationEvent; | |
_EJOB *ServerSilo; | |
unsigned __int64 CreateTime; | |
__declspec(align(4096)) unsigned __int8 PoolTags[16384]; | |
}; | |
/* 747 */ | |
struct $674F156C788F89EBCBFDC1492D6BA90B | |
{ | |
unsigned __int8 StrictFIFO : 1; | |
unsigned __int8 EnableHandleExceptions : 1; | |
unsigned __int8 Rundown : 1; | |
unsigned __int8 Duplicated : 1; | |
unsigned __int8 RaiseUMExceptionOnInvalidHandleClose : 1; | |
}; | |
/* 748 */ | |
union $429EB54B63E315EBACBE20A4AC16FFF7 | |
{ | |
unsigned int Flags; | |
$674F156C788F89EBCBFDC1492D6BA90B __s1; | |
}; | |
/* 743 */ | |
struct __declspec(align(64)) _HANDLE_TABLE_FREE_LIST | |
{ | |
_EX_PUSH_LOCK FreeListLock; | |
_HANDLE_TABLE_ENTRY *FirstFreeHandleEntry; | |
_HANDLE_TABLE_ENTRY *LastFreeHandleEntry; | |
int HandleCount; | |
unsigned int HighWaterMark; | |
}; | |
/* 749 */ | |
struct $D3F065FF29CD40ED77F4B28A1D04C021 | |
{ | |
unsigned __int8 ActualEntry[32]; | |
_HANDLE_TRACE_DEBUG_INFO *DebugInfo; | |
}; | |
/* 750 */ | |
union $C876C2290522561568746ABB8D313A15 | |
{ | |
_HANDLE_TABLE_FREE_LIST FreeLists[1]; | |
$D3F065FF29CD40ED77F4B28A1D04C021 __s1; | |
}; | |
/* 751 */ | |
struct _HANDLE_TABLE | |
{ | |
unsigned int NextHandleNeedingPool; | |
int ExtraInfoPages; | |
volatile unsigned __int64 TableCode; | |
_EPROCESS *QuotaProcess; | |
_LIST_ENTRY HandleTableList; | |
unsigned int UniqueProcessId; | |
$429EB54B63E315EBACBE20A4AC16FFF7 ___u6; | |
_EX_PUSH_LOCK HandleContentionEvent; | |
_EX_PUSH_LOCK HandleTableLock; | |
$C876C2290522561568746ABB8D313A15 ___u9; | |
}; | |
/* 752 */ | |
struct _EWOW64PROCESS | |
{ | |
void *Peb; | |
unsigned __int16 Machine; | |
_SYSTEM_DLL_TYPE NtdllType; | |
}; | |
/* 753 */ | |
struct _OBJECT_NAME_INFORMATION | |
{ | |
_UNICODE_STRING Name; | |
}; | |
/* 756 */ | |
struct _PO_DIAG_STACK_RECORD | |
{ | |
unsigned int StackDepth; | |
void *Stack[1]; | |
}; | |
/* 760 */ | |
union $3789F6E9A8D153E3BBD267C90C66DFC0 | |
{ | |
_IMAGE_RUNTIME_FUNCTION_ENTRY *FunctionTable; | |
_DYNAMIC_FUNCTION_TABLE *DynamicTable; | |
}; | |
/* 761 */ | |
struct _INVERTED_FUNCTION_TABLE_ENTRY | |
{ | |
$3789F6E9A8D153E3BBD267C90C66DFC0 ___u0; | |
void *ImageBase; | |
unsigned int SizeOfImage; | |
unsigned int SizeOfTable; | |
}; | |
/* 762 */ | |
struct _INVERTED_FUNCTION_TABLE | |
{ | |
unsigned int CurrentSize; | |
unsigned int MaximumSize; | |
volatile unsigned int Epoch; | |
unsigned __int8 Overflow; | |
_INVERTED_FUNCTION_TABLE_ENTRY TableEntry[256]; | |
}; | |
/* 527 */ | |
struct __declspec(align(8)) _IO_MINI_COMPLETION_PACKET_USER | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int PacketType; | |
void *KeyContext; | |
void *ApcContext; | |
int IoStatus; | |
unsigned __int64 IoStatusInformation; | |
void (__fastcall *MiniPacketCallback)(_IO_MINI_COMPLETION_PACKET_USER *, void *); | |
void *Context; | |
unsigned __int8 Allocated; | |
}; | |
/* 532 */ | |
struct _OBP_SYSTEM_DOS_DEVICE_STATE | |
{ | |
unsigned int GlobalDeviceMap; | |
unsigned int LocalDeviceCount[26]; | |
}; | |
/* 533 */ | |
struct __declspec(align(8)) _OBJECT_NAMESPACE_LOOKUPTABLE | |
{ | |
_LIST_ENTRY HashBuckets[37]; | |
_EX_PUSH_LOCK Lock; | |
unsigned int NumberOfPrivateSpaces; | |
}; | |
/* 534 */ | |
struct _OBP_SILODRIVERSTATE | |
{ | |
_DEVICE_MAP *SystemDeviceMap; | |
_OBP_SYSTEM_DOS_DEVICE_STATE SystemDosDeviceState; | |
_EX_PUSH_LOCK DeviceMapLock; | |
_OBJECT_NAMESPACE_LOOKUPTABLE PrivateNamespaceLookupTable; | |
}; | |
/* 545 */ | |
struct _SEP_SILOSTATE | |
{ | |
_SEP_LOGON_SESSION_REFERENCES *SystemLogonSession; | |
_SEP_LOGON_SESSION_REFERENCES *AnonymousLogonSession; | |
void *AnonymousLogonToken; | |
void *AnonymousLogonTokenNoEveryone; | |
_UNICODE_STRING *UncSystemPaths; | |
struct _CI_NGEN_PATHS *NgenPaths; | |
}; | |
/* 546 */ | |
struct __declspec(align(4)) _SEP_RM_LSA_CONNECTION_STATE | |
{ | |
void *LsaProcessHandle; | |
void *LsaCommandPortHandle; | |
void *SepRmThreadHandle; | |
void *RmCommandPortHandle; | |
void *RmCommandServerPortHandle; | |
void *LsaCommandPortSectionHandle; | |
_LARGE_INTEGER LsaCommandPortSectionSize; | |
void *LsaViewPortMemory; | |
void *RmViewPortMemory; | |
int LsaCommandPortMemoryDelta; | |
unsigned __int8 LsaCommandPortActive; | |
}; | |
/* 621 */ | |
struct _WNF_LOCK | |
{ | |
_EX_PUSH_LOCK PushLock; | |
}; | |
/* 626 */ | |
struct _WNF_SILODRIVERSTATE | |
{ | |
_WNF_SCOPE_MAP *ScopeMap; | |
void *volatile PermanentNameStoreRootKey; | |
void *volatile PersistentNameStoreRootKey; | |
volatile __int64 PermanentNameSequenceNumber; | |
_WNF_LOCK PermanentNameSequenceNumberLock; | |
volatile __int64 PermanentNameSequenceNumberPool; | |
volatile __int64 RuntimeNameSequenceNumber; | |
}; | |
/* 627 */ | |
struct _DBGK_SILOSTATE | |
{ | |
_EX_PUSH_LOCK ErrorPortLock; | |
struct _DBGKP_ERROR_PORT *ErrorPort; | |
_EPROCESS *ErrorProcess; | |
_KEVENT *ErrorPortRegisteredEvent; | |
}; | |
/* 547 */ | |
struct __declspec(align(8)) _ESERVERSILO_GLOBALS | |
{ | |
_OBP_SILODRIVERSTATE ObSiloState; | |
_SEP_SILOSTATE SeSiloState; | |
_SEP_RM_LSA_CONNECTION_STATE SeRmSiloState; | |
_ETW_SILODRIVERSTATE *EtwSiloState; | |
_EPROCESS *MiSessionLeaderProcess; | |
_EPROCESS *ExpDefaultErrorPortProcess; | |
void *ExpDefaultErrorPort; | |
unsigned int HardErrorState; | |
struct _EXP_LICENSE_STATE *ExpLicenseState; | |
_WNF_SILODRIVERSTATE WnfSiloState; | |
_DBGK_SILOSTATE DbgkSiloState; | |
_UNICODE_STRING PsProtectedCurrentDirectory; | |
_UNICODE_STRING PsProtectedEnvironment; | |
void *ApiSetSection; | |
void *ApiSetSchema; | |
unsigned __int8 OneCoreForwardersEnabled; | |
_UNICODE_STRING NtSystemRoot; | |
_UNICODE_STRING SiloRootDirectoryName; | |
struct _PSP_STORAGE *Storage; | |
_SERVERSILO_STATE State; | |
int ExitStatus; | |
_KEVENT *DeleteEvent; | |
_SILO_USER_SHARED_DATA *UserSharedData; | |
void *UserSharedSection; | |
_WORK_QUEUE_ITEM TerminateWorkItem; | |
unsigned __int8 IsDownlevelContainer; | |
}; | |
/* 629 */ | |
struct $408B3E5B3364B70B8AC22EB7EACE9DD4 | |
{ | |
unsigned int LastChangeTime; | |
unsigned __int32 Duration : 31; | |
unsigned __int32 IsInState : 1; | |
}; | |
/* 630 */ | |
union _ENERGY_STATE_DURATION | |
{ | |
unsigned __int64 Value; | |
$408B3E5B3364B70B8AC22EB7EACE9DD4 __s1; | |
}; | |
/* 631 */ | |
struct $A3FFB32B1124A84C5C7CBFE007B1C4E6 | |
{ | |
_ENERGY_STATE_DURATION ForegroundDuration; | |
_ENERGY_STATE_DURATION DesktopVisibleDuration; | |
_ENERGY_STATE_DURATION PSMForegroundDuration; | |
}; | |
/* 632 */ | |
union $74B992316E5F0F2E01C5AB578CDD077E | |
{ | |
_ENERGY_STATE_DURATION Durations[3]; | |
$A3FFB32B1124A84C5C7CBFE007B1C4E6 __s1; | |
}; | |
/* 633 */ | |
struct _PROCESS_ENERGY_VALUES | |
{ | |
unsigned __int64 Cycles[4][2]; | |
unsigned __int64 DiskEnergy; | |
unsigned __int64 NetworkTailEnergy; | |
unsigned __int64 MBBTailEnergy; | |
unsigned __int64 NetworkTxRxBytes; | |
unsigned __int64 MBBTxRxBytes; | |
$74B992316E5F0F2E01C5AB578CDD077E ___u6; | |
unsigned int CompositionRendered; | |
unsigned int CompositionDirtyGenerated; | |
unsigned int CompositionDirtyPropagated; | |
unsigned int Reserved1; | |
unsigned __int64 AttributedCycles[4][2]; | |
unsigned __int64 WorkOnBehalfCycles[4][2]; | |
}; | |
/* 634 */ | |
struct $1E61DCD5B7E4316E834BE78D17172ECB | |
{ | |
_TIMELINE_BITMAP CpuTimeline; | |
_TIMELINE_BITMAP DiskTimeline; | |
_TIMELINE_BITMAP NetworkTimeline; | |
_TIMELINE_BITMAP MBBTimeline; | |
_TIMELINE_BITMAP ForegroundTimeline; | |
_TIMELINE_BITMAP DesktopVisibleTimeline; | |
_TIMELINE_BITMAP CompositionRenderedTimeline; | |
_TIMELINE_BITMAP CompositionDirtyGeneratedTimeline; | |
_TIMELINE_BITMAP CompositionDirtyPropagatedTimeline; | |
_TIMELINE_BITMAP InputTimeline; | |
_TIMELINE_BITMAP AudioInTimeline; | |
_TIMELINE_BITMAP AudioOutTimeline; | |
_TIMELINE_BITMAP DisplayRequiredTimeline; | |
_TIMELINE_BITMAP KeyboardInputTimeline; | |
}; | |
/* 635 */ | |
union $1C818A1801B11EF936DCF573F18B887B | |
{ | |
_TIMELINE_BITMAP Timelines[14]; | |
$1E61DCD5B7E4316E834BE78D17172ECB __s1; | |
}; | |
/* 636 */ | |
struct $CC16DDB68903A2E6F51FC4FE2A3412B1 | |
{ | |
_ENERGY_STATE_DURATION InputDuration; | |
_ENERGY_STATE_DURATION AudioInDuration; | |
_ENERGY_STATE_DURATION AudioOutDuration; | |
_ENERGY_STATE_DURATION DisplayRequiredDuration; | |
_ENERGY_STATE_DURATION PSMBackgroundDuration; | |
}; | |
/* 637 */ | |
union $B5367458E76879FA4715E7CF0C40AE14 | |
{ | |
_ENERGY_STATE_DURATION Durations[5]; | |
$CC16DDB68903A2E6F51FC4FE2A3412B1 __s1; | |
}; | |
/* 638 */ | |
struct _PROCESS_ENERGY_VALUES_EXTENSION | |
{ | |
$1C818A1801B11EF936DCF573F18B887B ___u0; | |
$B5367458E76879FA4715E7CF0C40AE14 ___u1; | |
unsigned int KeyboardInput; | |
unsigned int MouseInput; | |
}; | |
/* 639 */ | |
struct _PROCESS_EXTENDED_ENERGY_VALUES | |
{ | |
_PROCESS_ENERGY_VALUES Base; | |
_PROCESS_ENERGY_VALUES_EXTENSION Extension; | |
}; | |
/* 644 */ | |
struct $68EC590CC89D3F83C2346CB373973C81 | |
{ | |
unsigned int UpdateMask; | |
unsigned int DesiredState; | |
}; | |
/* 645 */ | |
union _JOBOBJECT_ENERGY_TRACKING_STATE | |
{ | |
unsigned __int64 Value; | |
$68EC590CC89D3F83C2346CB373973C81 __s1; | |
}; | |
/* 583 */ | |
struct __declspec(align(4)) _SECURITY_QUALITY_OF_SERVICE | |
{ | |
unsigned int Length; | |
_SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
unsigned __int8 ContextTrackingMode; | |
unsigned __int8 EffectiveOnly; | |
}; | |
/* 536 */ | |
struct _LUID | |
{ | |
unsigned int LowPart; | |
int HighPart; | |
}; | |
/* 784 */ | |
struct _SECURITY_SUBJECT_CONTEXT | |
{ | |
void *ClientToken; | |
_SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
void *PrimaryToken; | |
void *ProcessAuditId; | |
}; | |
/* 587 */ | |
struct _LUID_AND_ATTRIBUTES | |
{ | |
_LUID Luid; | |
unsigned int Attributes; | |
}; | |
/* 785 */ | |
struct _INITIAL_PRIVILEGE_SET | |
{ | |
unsigned int PrivilegeCount; | |
unsigned int Control; | |
_LUID_AND_ATTRIBUTES Privilege[3]; | |
}; | |
/* 786 */ | |
struct _PRIVILEGE_SET | |
{ | |
unsigned int PrivilegeCount; | |
unsigned int Control; | |
_LUID_AND_ATTRIBUTES Privilege[1]; | |
}; | |
/* 787 */ | |
struct _ACCESS_STATE | |
{ | |
_LUID OperationID; | |
unsigned __int8 SecurityEvaluated; | |
unsigned __int8 GenerateAudit; | |
unsigned __int8 GenerateOnClose; | |
unsigned __int8 PrivilegesAllocated; | |
unsigned int Flags; | |
unsigned int RemainingDesiredAccess; | |
unsigned int PreviouslyGrantedAccess; | |
unsigned int OriginalDesiredAccess; | |
_SECURITY_SUBJECT_CONTEXT SubjectSecurityContext; | |
void *SecurityDescriptor; | |
void *AuxData; | |
union | |
{ | |
_INITIAL_PRIVILEGE_SET InitialPrivilegeSet; | |
_PRIVILEGE_SET PrivilegeSet; | |
} Privileges; | |
unsigned __int8 AuditPrivileges; | |
_UNICODE_STRING ObjectName; | |
_UNICODE_STRING ObjectTypeName; | |
}; | |
/* 831 */ | |
struct __declspec(align(8)) _PNP_WATCHDOG | |
{ | |
unsigned __int64 WatchdogStart; | |
_WDT_HANDLE *WatchdogTimer; | |
_PNP_WATCHDOG_TYPE WatchdogContextType; | |
void *WatchdogContext; | |
unsigned __int8 TriggerEventLogged; | |
}; | |
/* 833 */ | |
struct __declspec(align(8)) _DEVICE_OBJECT_LIST_ENTRY | |
{ | |
_DEVICE_OBJECT *DeviceObject; | |
_DEVICE_RELATION_LEVEL RelationLevel; | |
unsigned int Ordinal; | |
unsigned int Flags; | |
}; | |
/* 834 */ | |
struct _DEVICE_OBJECT_LIST | |
{ | |
unsigned int Count; | |
unsigned int MaxCount; | |
unsigned int TagCount; | |
_PNP_DEVICE_DELETE_TYPE OperationCode; | |
_DEVICE_OBJECT_LIST_ENTRY Devices[1]; | |
}; | |
/* 512 */ | |
struct _POP_RW_LOCK | |
{ | |
_EX_PUSH_LOCK Lock; | |
_KTHREAD *Thread; | |
}; | |
/* 513 */ | |
struct _THERMAL_COOLING_INTERFACE | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
void *Context; | |
void (__fastcall *InterfaceReference)(void *); | |
void (__fastcall *InterfaceDereference)(void *); | |
unsigned int Flags; | |
void (__fastcall *ActiveCooling)(void *, unsigned __int8); | |
void (__fastcall *PassiveCooling)(void *, unsigned int); | |
}; | |
/* 514 */ | |
struct _POP_COOLING_EXTENSION | |
{ | |
_LIST_ENTRY Link; | |
_LIST_ENTRY RequestListHead; | |
_POP_RW_LOCK Lock; | |
_DEVICE_OBJECT *DeviceObject; | |
void *NotificationEntry; | |
unsigned __int8 Enabled; | |
unsigned __int8 ActiveEngaged; | |
unsigned __int8 ThrottleLimit; | |
unsigned __int8 UpdatingToCurrent; | |
_KEVENT *RemovalFlushEvent; | |
_KEVENT *PnpFlushEvent; | |
_THERMAL_COOLING_INTERFACE Interface; | |
}; | |
/* 875 */ | |
union $F79F374FA4D1C88EC05BAFF94B4B4392 | |
{ | |
struct | |
{ | |
unsigned int Count; | |
_PO_FX_PERF_STATE *States; | |
} Discrete; | |
struct | |
{ | |
unsigned __int64 Minimum; | |
unsigned __int64 Maximum; | |
} Range; | |
}; | |
/* 876 */ | |
struct _PO_FX_COMPONENT_PERF_SET | |
{ | |
_UNICODE_STRING Name; | |
unsigned __int64 Flags; | |
_PO_FX_PERF_STATE_UNIT Unit; | |
_PO_FX_PERF_STATE_TYPE Type; | |
$F79F374FA4D1C88EC05BAFF94B4B4392 ___u4; | |
}; | |
/* 492 */ | |
union _FS_FILTER_PARAMETERS | |
{ | |
struct | |
{ | |
_LARGE_INTEGER *EndingOffset; | |
_ERESOURCE **ResourceToRelease; | |
} AcquireForModifiedPageWriter; | |
struct | |
{ | |
_ERESOURCE *ResourceToRelease; | |
} ReleaseForModifiedPageWriter; | |
struct __declspec(align(8)) | |
{ | |
_FS_FILTER_SECTION_SYNC_TYPE SyncType; | |
unsigned int PageProtection; | |
_FS_FILTER_SECTION_SYNC_OUTPUT *OutputInformation; | |
unsigned int Flags; | |
} AcquireForSectionSynchronization; | |
struct | |
{ | |
_IRP *Irp; | |
void *FileInformation; | |
unsigned int *Length; | |
_FILE_INFORMATION_CLASS FileInformationClass; | |
int CompletionStatus; | |
} QueryOpen; | |
struct | |
{ | |
void *Argument1; | |
void *Argument2; | |
void *Argument3; | |
void *Argument4; | |
void *Argument5; | |
} Others; | |
}; | |
/* 493 */ | |
struct _FS_FILTER_CALLBACK_DATA | |
{ | |
unsigned int SizeOfFsFilterCallbackData; | |
unsigned __int8 Operation; | |
unsigned __int8 Reserved; | |
_DEVICE_OBJECT *DeviceObject; | |
_FILE_OBJECT *FileObject; | |
_FS_FILTER_PARAMETERS Parameters; | |
}; | |
/* 684 */ | |
struct _PEB_LDR_DATA | |
{ | |
unsigned int Length; | |
unsigned __int8 Initialized; | |
void *SsHandle; | |
_LIST_ENTRY InLoadOrderModuleList; | |
_LIST_ENTRY InMemoryOrderModuleList; | |
_LIST_ENTRY InInitializationOrderModuleList; | |
void *EntryInProgress; | |
unsigned __int8 ShutdownInProgress; | |
void *ShutdownThreadId; | |
}; | |
/* 685 */ | |
struct _CURDIR | |
{ | |
_UNICODE_STRING DosPath; | |
void *Handle; | |
}; | |
/* 686 */ | |
struct _STRING | |
{ | |
unsigned __int16 Length; | |
unsigned __int16 MaximumLength; | |
char *Buffer; | |
}; | |
/* 687 */ | |
struct _RTL_DRIVE_LETTER_CURDIR | |
{ | |
unsigned __int16 Flags; | |
unsigned __int16 Length; | |
unsigned int TimeStamp; | |
_STRING DosPath; | |
}; | |
/* 688 */ | |
struct _RTL_USER_PROCESS_PARAMETERS | |
{ | |
unsigned int MaximumLength; | |
unsigned int Length; | |
unsigned int Flags; | |
unsigned int DebugFlags; | |
void *ConsoleHandle; | |
unsigned int ConsoleFlags; | |
void *StandardInput; | |
void *StandardOutput; | |
void *StandardError; | |
_CURDIR CurrentDirectory; | |
_UNICODE_STRING DllPath; | |
_UNICODE_STRING ImagePathName; | |
_UNICODE_STRING CommandLine; | |
void *Environment; | |
unsigned int StartingX; | |
unsigned int StartingY; | |
unsigned int CountX; | |
unsigned int CountY; | |
unsigned int CountCharsX; | |
unsigned int CountCharsY; | |
unsigned int FillAttribute; | |
unsigned int WindowFlags; | |
unsigned int ShowWindowFlags; | |
_UNICODE_STRING WindowTitle; | |
_UNICODE_STRING DesktopInfo; | |
_UNICODE_STRING ShellInfo; | |
_UNICODE_STRING RuntimeData; | |
_RTL_DRIVE_LETTER_CURDIR CurrentDirectores[32]; | |
unsigned __int64 EnvironmentSize; | |
unsigned __int64 EnvironmentVersion; | |
void *PackageDependencyData; | |
unsigned int ProcessGroupId; | |
unsigned int LoaderThreads; | |
_UNICODE_STRING RedirectionDllName; | |
_UNICODE_STRING HeapPartitionName; | |
unsigned __int64 *DefaultThreadpoolCpuSetMasks; | |
unsigned int DefaultThreadpoolCpuSetMaskCount; | |
unsigned int DefaultThreadpoolThreadMaximum; | |
}; | |
/* 689 */ | |
struct _RTL_CRITICAL_SECTION | |
{ | |
_RTL_CRITICAL_SECTION_DEBUG *DebugInfo; | |
int LockCount; | |
int RecursionCount; | |
void *OwningThread; | |
void *LockSemaphore; | |
unsigned __int64 SpinCount; | |
}; | |
/* 691 */ | |
struct _LEAP_SECOND_DATA | |
{ | |
unsigned __int8 Enabled; | |
unsigned int Count; | |
_LARGE_INTEGER Data[1]; | |
}; | |
/* 726 */ | |
struct $11EE8C088C5C7365D4A3C22E26D1DB4A | |
{ | |
unsigned int GlobalTimeStamp; | |
unsigned int PteIndex; | |
}; | |
/* 727 */ | |
union $32A2160B461D535F87C54D054859406D | |
{ | |
$11EE8C088C5C7365D4A3C22E26D1DB4A __s0; | |
__int64 Long; | |
}; | |
/* 728 */ | |
struct _MI_CACHED_PTE | |
{ | |
$32A2160B461D535F87C54D054859406D ___u0; | |
}; | |
/* 729 */ | |
volatile struct __declspec(align(8)) _MI_CACHED_PTES | |
{ | |
_MI_CACHED_PTE Bins[8]; | |
int CachedPteCount; | |
}; | |
/* 738 */ | |
struct $E5B3C52FE72490EE6A49ADBB8529F30E | |
{ | |
volatile __int64 VolatileLowValue; | |
__int64 HighValue; | |
}; | |
/* 739 */ | |
struct $C81155225CF3E1B6514972133EEF42C5 | |
{ | |
__int64 LowValue; | |
_HANDLE_TABLE_ENTRY *NextFreeHandleEntry; | |
}; | |
/* 735 */ | |
struct $97D278A0CD42BCAC54E6F6C01CA8A55F | |
{ | |
unsigned __int32 TagBits : 2; | |
unsigned __int32 Index : 30; | |
}; | |
/* 736 */ | |
union $BC4F899EDC6C0992478B583BAC2AC8C7 | |
{ | |
$97D278A0CD42BCAC54E6F6C01CA8A55F __s0; | |
void *GenericHandleOverlay; | |
unsigned __int64 Value; | |
}; | |
/* 737 */ | |
struct _EXHANDLE | |
{ | |
$BC4F899EDC6C0992478B583BAC2AC8C7 ___u0; | |
}; | |
/* 740 */ | |
struct $B44E123ADCB61F61791C203F8AB7FFB3 | |
{ | |
_HANDLE_TABLE_ENTRY_INFO *volatile InfoTable; | |
_EXHANDLE LeafHandleValue; | |
}; | |
/* 741 */ | |
struct $2C5CC9DC28D9F2B79C281990513743F8 | |
{ | |
__int64 RefCountField; | |
unsigned __int32 GrantedAccessBits : 25; | |
unsigned __int32 NoRightsUpgrade : 1; | |
unsigned __int32 Spare1 : 6; | |
unsigned int Spare2; | |
}; | |
/* 742 */ | |
struct $32CC4987E53F1E217602E82975918B96 | |
{ | |
unsigned __int64 Unlocked : 1; | |
unsigned __int64 RefCnt : 16; | |
unsigned __int64 Attributes : 3; | |
unsigned __int64 ObjectPointerBits : 44; | |
}; | |
/* 734 */ | |
union _HANDLE_TABLE_ENTRY | |
{ | |
$E5B3C52FE72490EE6A49ADBB8529F30E __s0; | |
$C81155225CF3E1B6514972133EEF42C5 __s1; | |
$B44E123ADCB61F61791C203F8AB7FFB3 __s2; | |
$2C5CC9DC28D9F2B79C281990513743F8 __s3; | |
$32CC4987E53F1E217602E82975918B96 __s4; | |
}; | |
/* 744 */ | |
struct __declspec(align(8)) _FAST_MUTEX | |
{ | |
int Count; | |
void *Owner; | |
unsigned int Contention; | |
_KEVENT Event; | |
unsigned int OldIrql; | |
}; | |
/* 745 */ | |
struct _HANDLE_TRACE_DB_ENTRY | |
{ | |
_CLIENT_ID ClientId; | |
void *Handle; | |
unsigned int Type; | |
void *StackTrace[16]; | |
}; | |
/* 746 */ | |
struct _HANDLE_TRACE_DEBUG_INFO | |
{ | |
int RefCount; | |
unsigned int TableSize; | |
unsigned int BitMaskFlags; | |
_FAST_MUTEX CloseCompactionLock; | |
unsigned int CurrentStackIndex; | |
_HANDLE_TRACE_DB_ENTRY TraceDb[1]; | |
}; | |
/* 757 */ | |
union $2C177DDEB22292785570970034678B30 | |
{ | |
unsigned int UnwindInfoAddress; | |
unsigned int UnwindData; | |
}; | |
/* 758 */ | |
struct _IMAGE_RUNTIME_FUNCTION_ENTRY | |
{ | |
unsigned int BeginAddress; | |
unsigned int EndAddress; | |
$2C177DDEB22292785570970034678B30 ___u2; | |
}; | |
/* 759 */ | |
struct _DYNAMIC_FUNCTION_TABLE | |
{ | |
_LIST_ENTRY ListEntry; | |
_IMAGE_RUNTIME_FUNCTION_ENTRY *FunctionTable; | |
_LARGE_INTEGER TimeStamp; | |
unsigned __int64 MinimumAddress; | |
unsigned __int64 MaximumAddress; | |
unsigned __int64 BaseAddress; | |
_IMAGE_RUNTIME_FUNCTION_ENTRY *(__fastcall *Callback)(unsigned __int64, void *); | |
void *Context; | |
wchar_t *OutOfProcessCallbackDll; | |
_FUNCTION_TABLE_TYPE Type; | |
unsigned int EntryCount; | |
_RTL_BALANCED_NODE TreeNodeMin; | |
_RTL_BALANCED_NODE TreeNodeMax; | |
}; | |
/* 530 */ | |
struct _DEVICE_MAP | |
{ | |
_OBJECT_DIRECTORY *DosDevicesDirectory; | |
_OBJECT_DIRECTORY *GlobalDosDevicesDirectory; | |
void *DosDevicesDirectoryHandle; | |
volatile int ReferenceCount; | |
unsigned int DriveMap; | |
unsigned __int8 DriveType[32]; | |
_EJOB *ServerSilo; | |
}; | |
/* 538 */ | |
struct _SEP_CACHED_HANDLES_TABLE | |
{ | |
_EX_PUSH_LOCK Lock; | |
_RTL_DYNAMIC_HASH_TABLE *HashTable; | |
}; | |
/* 544 */ | |
struct _OB_HANDLE_REVOCATION_BLOCK | |
{ | |
_LIST_ENTRY RevocationInfos; | |
_EX_PUSH_LOCK Lock; | |
_EX_RUNDOWN_REF Rundown; | |
}; | |
/* 535 */ | |
struct _SEP_LOGON_SESSION_REFERENCES | |
{ | |
_SEP_LOGON_SESSION_REFERENCES *Next; | |
_LUID LogonId; | |
_LUID BuddyLogonId; | |
__int64 ReferenceCount; | |
unsigned int Flags; | |
_DEVICE_MAP *pDeviceMap; | |
void *Token; | |
_UNICODE_STRING AccountName; | |
_UNICODE_STRING AuthorityName; | |
_SEP_CACHED_HANDLES_TABLE CachedHandlesTable; | |
_EX_PUSH_LOCK SharedDataLock; | |
_AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION *SharedClaimAttributes; | |
_SEP_SID_VALUES_BLOCK *SharedSidValues; | |
_OB_HANDLE_REVOCATION_BLOCK RevocationBlock; | |
_EJOB *ServerSilo; | |
_LUID SiblingAuthId; | |
_LIST_ENTRY TokenList; | |
}; | |
/* 548 */ | |
struct __declspec(align(8)) _ETW_LAST_ENABLE_INFO | |
{ | |
_LARGE_INTEGER EnableFlags; | |
unsigned __int16 LoggerId; | |
unsigned __int8 Level; | |
unsigned __int8 Enabled : 1; | |
unsigned __int8 InternalFlag : 7; | |
}; | |
/* 562 */ | |
union $BD127937D400A47ABDBE2A3BE3886F1E | |
{ | |
_ETW_LAST_ENABLE_INFO LastEnable; | |
unsigned __int64 MatchId; | |
}; | |
/* 549 */ | |
struct _TRACE_ENABLE_INFO | |
{ | |
unsigned int IsEnabled; | |
unsigned __int8 Level; | |
unsigned __int8 Reserved1; | |
unsigned __int16 LoggerId; | |
unsigned int EnableProperty; | |
unsigned int Reserved2; | |
unsigned __int64 MatchAnyKeyword; | |
unsigned __int64 MatchAllKeyword; | |
}; | |
/* 561 */ | |
struct _ETW_GUID_ENTRY | |
{ | |
_LIST_ENTRY GuidList; | |
_LIST_ENTRY SiloGuidList; | |
volatile __int64 RefCount; | |
_GUID Guid; | |
_LIST_ENTRY RegListHead; | |
void *SecurityDescriptor; | |
$BD127937D400A47ABDBE2A3BE3886F1E ___u6; | |
_TRACE_ENABLE_INFO ProviderEnableInfo; | |
_TRACE_ENABLE_INFO EnableInfo[8]; | |
_ETW_FILTER_HEADER *FilterData; | |
_ETW_SILODRIVERSTATE *SiloState; | |
_ETW_GUID_ENTRY *HostEntry; | |
_EX_PUSH_LOCK Lock; | |
_ETHREAD *LockOwner; | |
}; | |
/* 613 */ | |
struct _ETW_HASH_BUCKET | |
{ | |
_LIST_ENTRY ListHead[3]; | |
_EX_PUSH_LOCK BucketLock; | |
}; | |
/* 614 */ | |
struct __declspec(align(8)) _ETW_PRIV_HANDLE_DEMUX_TABLE | |
{ | |
_RTL_RB_TREE Tree; | |
_EX_PUSH_LOCK Lock; | |
unsigned __int16 SequenceNumber; | |
}; | |
/* 615 */ | |
struct _ETW_COUNTERS | |
{ | |
int GuidCount; | |
int PoolUsage[2]; | |
int SessionCount; | |
}; | |
/* 617 */ | |
struct _ETW_SYSTEM_LOGGER | |
{ | |
unsigned __int8 LoggerId; | |
unsigned __int8 ClockType; | |
}; | |
/* 618 */ | |
struct _PERFINFO_GROUPMASK | |
{ | |
unsigned int Masks[8]; | |
}; | |
/* 619 */ | |
struct _ETW_SYSTEM_LOGGER_SETTINGS | |
{ | |
_ETW_SYSTEM_LOGGER EtwpSystemLogger[8]; | |
volatile unsigned int EtwpActiveSystemLoggers; | |
_PERFINFO_GROUPMASK SiloGlobalGroupMask; | |
_PERFINFO_GROUPMASK EtwpGroupMasks[10]; | |
}; | |
/* 579 */ | |
struct $B780F9130B88204CA6AB9CFC9F5D80EC | |
{ | |
unsigned __int8 Abandoned : 1; | |
unsigned __int8 Spare1 : 7; | |
}; | |
/* 580 */ | |
struct $5DABE809A0A706D70FE5FA4BD49AD633 | |
{ | |
unsigned __int8 Abandoned2 : 1; | |
unsigned __int8 AbEnabled : 1; | |
unsigned __int8 Spare2 : 6; | |
}; | |
/* 581 */ | |
union $D8F9A8765A5BFC20F548BFFE7213124A | |
{ | |
unsigned __int8 MutantFlags; | |
$B780F9130B88204CA6AB9CFC9F5D80EC __s1; | |
$5DABE809A0A706D70FE5FA4BD49AD633 __s2; | |
}; | |
/* 582 */ | |
struct __declspec(align(8)) _KMUTANT | |
{ | |
_DISPATCHER_HEADER Header; | |
_LIST_ENTRY MutantListEntry; | |
_KTHREAD *OwnerThread; | |
$D8F9A8765A5BFC20F548BFFE7213124A ___u3; | |
unsigned __int8 ApcDisable; | |
}; | |
/* 560 */ | |
struct _ETW_SILODRIVERSTATE | |
{ | |
_EJOB *Silo; | |
_ESERVERSILO_GLOBALS *SiloGlobals; | |
unsigned int MaxLoggers; | |
_ETW_GUID_ENTRY EtwpSecurityProviderGuidEntry; | |
_EX_RUNDOWN_REF_CACHE_AWARE **EtwpLoggerRundown; | |
_WMI_LOGGER_CONTEXT **EtwpLoggerContext; | |
_ETW_HASH_BUCKET EtwpGuidHashTable[64]; | |
unsigned __int16 EtwpSecurityLoggers[8]; | |
unsigned __int8 EtwpSecurityProviderEnableMask; | |
int EtwpShutdownInProgress; | |
unsigned int EtwpSecurityProviderPID; | |
_ETW_PRIV_HANDLE_DEMUX_TABLE PrivHandleDemuxTable; | |
_ETW_COUNTERS EtwpCounters; | |
_LARGE_INTEGER LogfileBytesWritten; | |
_ETW_SILO_TRACING_BLOCK *ProcessorBlocks; | |
struct _EX_WNF_SUBSCRIPTION *ContainerRestoreWnfSubscription; | |
_GUID PartitionId; | |
_GUID ParentId; | |
_LARGE_INTEGER QpcOffsetFromRoot; | |
char *PartitionName; | |
unsigned __int16 PartitionNameSize; | |
unsigned __int16 UnusedPadding; | |
unsigned int PartitionType; | |
_ETW_SYSTEM_LOGGER_SETTINGS SystemLoggerSettings; | |
_KMUTANT EtwpStartTraceMutex; | |
}; | |
/* 620 */ | |
struct _WNF_NODE_HEADER | |
{ | |
unsigned __int16 NodeTypeCode; | |
unsigned __int16 NodeByteSize; | |
}; | |
/* 624 */ | |
struct _WNF_SCOPE_MAP_ENTRY | |
{ | |
_WNF_LOCK MapEntryLock; | |
_LIST_ENTRY MapEntryHead; | |
}; | |
/* 625 */ | |
struct _WNF_SCOPE_MAP | |
{ | |
_WNF_NODE_HEADER Header; | |
_WNF_SCOPE_INSTANCE *SystemScopeInstance; | |
_WNF_SCOPE_INSTANCE *MachineScopeInstance; | |
_WNF_SCOPE_INSTANCE *PhysicalMachineScopeInstance; | |
_WNF_SCOPE_MAP_ENTRY ByDataScope[6]; | |
}; | |
/* 628 */ | |
struct __declspec(align(4)) _SILO_USER_SHARED_DATA | |
{ | |
unsigned int ServiceSessionId; | |
unsigned int ActiveConsoleId; | |
__int64 ConsoleSessionForegroundProcessId; | |
_NT_PRODUCT_TYPE NtProductType; | |
unsigned int SuiteMask; | |
unsigned int SharedUserSessionId; | |
unsigned __int8 IsMultiSessionSku; | |
__unaligned __declspec(align(2)) wchar_t NtSystemRoot[260]; | |
unsigned __int16 UserModeGlobalLogger[16]; | |
}; | |
/* 830 */ | |
struct _WDT_HANDLE | |
{ | |
char Reserved; | |
}; | |
/* 874 */ | |
struct _PO_FX_PERF_STATE | |
{ | |
unsigned __int64 Value; | |
void *Context; | |
}; | |
/* 490 */ | |
struct _FS_FILTER_SECTION_SYNC_OUTPUT | |
{ | |
unsigned int StructureSize; | |
unsigned int SizeReturned; | |
unsigned int Flags; | |
unsigned int DesiredReadAlignment; | |
}; | |
/* 690 */ | |
struct _RTL_CRITICAL_SECTION_DEBUG | |
{ | |
unsigned __int16 Type; | |
unsigned __int16 CreatorBackTraceIndex; | |
_RTL_CRITICAL_SECTION *CriticalSection; | |
_LIST_ENTRY ProcessLocksList; | |
unsigned int EntryCount; | |
unsigned int ContentionCount; | |
unsigned int Flags; | |
unsigned __int16 CreatorBackTraceIndexHigh; | |
unsigned __int16 SpareUSHORT; | |
}; | |
/* 733 */ | |
struct _HANDLE_TABLE_ENTRY_INFO | |
{ | |
unsigned int AuditMask; | |
unsigned int MaxRelativeAccessMask; | |
}; | |
/* 531 */ | |
struct _OBJECT_DIRECTORY | |
{ | |
_OBJECT_DIRECTORY_ENTRY *HashBuckets[37]; | |
_EX_PUSH_LOCK Lock; | |
_DEVICE_MAP *DeviceMap; | |
_OBJECT_DIRECTORY *ShadowDirectory; | |
void *NamespaceEntry; | |
void *SessionObject; | |
unsigned int Flags; | |
unsigned int SessionId; | |
}; | |
/* 537 */ | |
struct _RTL_DYNAMIC_HASH_TABLE | |
{ | |
unsigned int Flags; | |
unsigned int Shift; | |
unsigned int TableSize; | |
unsigned int Pivot; | |
unsigned int DivisorMask; | |
unsigned int NumEntries; | |
unsigned int NonEmptyBuckets; | |
unsigned int NumEnumerators; | |
void *Directory; | |
}; | |
/* 540 */ | |
struct _SID_AND_ATTRIBUTES_HASH | |
{ | |
unsigned int SidCount; | |
_SID_AND_ATTRIBUTES *SidAttr; | |
unsigned __int64 Hash[32]; | |
}; | |
/* 542 */ | |
struct _AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION | |
{ | |
unsigned int DeviceGroupsCount; | |
_SID_AND_ATTRIBUTES *pDeviceGroups; | |
unsigned int RestrictedDeviceGroupsCount; | |
_SID_AND_ATTRIBUTES *pRestrictedDeviceGroups; | |
_SID_AND_ATTRIBUTES_HASH DeviceGroupsHash; | |
_SID_AND_ATTRIBUTES_HASH RestrictedDeviceGroupsHash; | |
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION *pUserSecurityAttributes; | |
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION *pDeviceSecurityAttributes; | |
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION *pRestrictedUserSecurityAttributes; | |
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION *pRestrictedDeviceSecurityAttributes; | |
}; | |
/* 543 */ | |
struct _SEP_SID_VALUES_BLOCK | |
{ | |
unsigned int BlockLength; | |
__int64 ReferenceCount; | |
unsigned int SidCount; | |
unsigned __int64 SidValuesStart; | |
}; | |
/* 559 */ | |
struct _ETW_FILTER_HEADER | |
{ | |
int FilterFlags; | |
_ETW_FILTER_PID *PidFilter; | |
_ETW_FILTER_STRING_TOKEN *ExeFilter; | |
_ETW_FILTER_STRING_TOKEN *PkgIdFilter; | |
_ETW_FILTER_STRING_TOKEN *PkgAppIdFilter; | |
_ETW_FILTER_STRING_TOKEN *ContainerFilter; | |
struct _ETW_PERFECT_HASH_FUNCTION *StackWalkIdFilter; | |
_ETW_FILTER_EVENT_NAME_DATA *StackWalkNameFilter; | |
_EVENT_FILTER_LEVEL_KW *StackWalkLevelKwFilter; | |
struct _ETW_PERFECT_HASH_FUNCTION *EventIdFilter; | |
_ETW_PAYLOAD_FILTER *PayloadFilter; | |
_EVENT_FILTER_HEADER *ProviderSideFilter; | |
_ETW_FILTER_EVENT_NAME_DATA *EventNameFilter; | |
}; | |
/* 563 */ | |
struct _EX_RUNDOWN_REF_CACHE_AWARE | |
{ | |
_EX_RUNDOWN_REF *RunRefs; | |
void *PoolToFree; | |
unsigned int RunRefSize; | |
unsigned int Number; | |
}; | |
/* 564 */ | |
struct _ETW_BUFFER_QUEUE | |
{ | |
_SINGLE_LIST_ENTRY *QueueTail; | |
_SINGLE_LIST_ENTRY QueueEntry; | |
}; | |
/* 606 */ | |
union $0B6BE4C52E9593E5A94F83ABD71BCCF3 | |
{ | |
_WMI_BUFFER_HEADER *BatchedBufferList; | |
_EX_FAST_REF CurrentBuffer; | |
}; | |
/* 570 */ | |
struct _ETW_REF_CLOCK | |
{ | |
_LARGE_INTEGER StartTime; | |
_LARGE_INTEGER StartPerfClock; | |
}; | |
/* 607 */ | |
union $BC3A9B59C610685B615379E25EFCFFB3 | |
{ | |
unsigned __int64 BufferListSpinLock; | |
_EX_PUSH_LOCK BufferListPushLock; | |
}; | |
/* 584 */ | |
struct _TOKEN_SOURCE | |
{ | |
char SourceName[8]; | |
_LUID SourceIdentifier; | |
}; | |
/* 585 */ | |
struct _TOKEN_CONTROL | |
{ | |
_LUID TokenId; | |
_LUID AuthenticationId; | |
_LUID ModifiedId; | |
_TOKEN_SOURCE TokenSource; | |
}; | |
/* 586 */ | |
struct __declspec(align(8)) _SECURITY_CLIENT_CONTEXT | |
{ | |
_SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
void *ClientToken; | |
unsigned __int8 DirectlyAccessClientToken; | |
unsigned __int8 DirectAccessEffectiveOnly; | |
unsigned __int8 ServerIsRemote; | |
_TOKEN_CONTROL ClientTokenControl; | |
}; | |
/* 608 */ | |
struct $970427C06415051E2EE994DA3EEF565E | |
{ | |
unsigned __int32 Persistent : 1; | |
unsigned __int32 AutoLogger : 1; | |
unsigned __int32 FsReady : 1; | |
unsigned __int32 RealTime : 1; | |
unsigned __int32 Wow : 1; | |
unsigned __int32 KernelTrace : 1; | |
unsigned __int32 NoMoreEnable : 1; | |
unsigned __int32 StackTracing : 1; | |
unsigned __int32 ErrorLogged : 1; | |
unsigned __int32 RealtimeLoggerContextFreed : 1; | |
unsigned __int32 PebsTracing : 1; | |
unsigned __int32 PmcCounters : 1; | |
unsigned __int32 PageAlignBuffers : 1; | |
unsigned __int32 StackLookasideListAllocated : 1; | |
unsigned __int32 SecurityTrace : 1; | |
unsigned __int32 LastBranchTracing : 1; | |
unsigned __int32 SystemLoggerIndex : 8; | |
unsigned __int32 StackCaching : 1; | |
unsigned __int32 ProviderTracking : 1; | |
unsigned __int32 ProcessorTrace : 1; | |
unsigned __int32 QpcDeltaTracking : 1; | |
unsigned __int32 MarkerBufferSaved : 1; | |
unsigned __int32 LargeMdlPages : 1; | |
unsigned __int32 ExcludeKernelStack : 1; | |
unsigned __int32 SpareFlags2 : 1; | |
}; | |
/* 609 */ | |
union $75914F243D0791090A8121F821B64210 | |
{ | |
unsigned int Flags; | |
$970427C06415051E2EE994DA3EEF565E __s1; | |
}; | |
/* 610 */ | |
struct $0FF59C51F1799B9B876DCB1926B61079 | |
{ | |
unsigned __int32 DbgRequestNewFile : 1; | |
unsigned __int32 DbgRequestUpdateFile : 1; | |
unsigned __int32 DbgRequestFlush : 1; | |
unsigned __int32 DbgRequestDisableRealtime : 1; | |
unsigned __int32 DbgRequestDisconnectConsumer : 1; | |
unsigned __int32 DbgRequestConnectConsumer : 1; | |
unsigned __int32 DbgRequestNotifyConsumer : 1; | |
unsigned __int32 DbgRequestUpdateHeader : 1; | |
unsigned __int32 DbgRequestDeferredFlush : 1; | |
unsigned __int32 DbgRequestDeferredFlushTimer : 1; | |
unsigned __int32 DbgRequestFlushTimer : 1; | |
unsigned __int32 DbgRequestUpdateDebugger : 1; | |
unsigned __int32 DbgSpareRequestFlags : 20; | |
}; | |
/* 611 */ | |
union $2BD5F01A453AFE9B56BB7E0A12BA937B | |
{ | |
volatile unsigned int RequestFlag; | |
$0FF59C51F1799B9B876DCB1926B61079 __s1; | |
}; | |
/* 594 */ | |
struct __declspec(align(16)) _ETW_STACK_TRACE_BLOCK | |
{ | |
_LARGE_INTEGER RelatedTimestamp; | |
_ETHREAD *Thread; | |
_KDPC StackWalkDpc; | |
_SLIST_HEADER ApcListHead; | |
_ETW_APC_ENTRY *ApcEntry; | |
unsigned int ApcEntryCount; | |
int Flags; | |
int ApcCount; | |
int MaxApcCount; | |
}; | |
/* 599 */ | |
struct _DISALLOWED_GUIDS | |
{ | |
unsigned __int16 Count; | |
_GUID *Guids; | |
}; | |
/* 600 */ | |
struct _PERIODIC_CAPTURE_STATE_GUIDS | |
{ | |
unsigned __int16 ProviderCount; | |
_GUID *Providers; | |
}; | |
/* 605 */ | |
struct _ETW_PARTITION_CONTEXT | |
{ | |
_EPARTITION *Partition; | |
}; | |
/* 612 */ | |
struct __declspec(align(16)) _WMI_LOGGER_CONTEXT | |
{ | |
unsigned int LoggerId; | |
unsigned int BufferSize; | |
unsigned int MaximumEventSize; | |
unsigned int LoggerMode; | |
int AcceptNewEvents; | |
unsigned int EventMarker[2]; | |
unsigned int ErrorMarker; | |
unsigned int SizeMask; | |
unsigned __int64 GetCpuClock; | |
_ETHREAD *LoggerThread; | |
int LoggerStatus; | |
unsigned int FailureReason; | |
_ETW_BUFFER_QUEUE BufferQueue; | |
_ETW_BUFFER_QUEUE OverflowQueue; | |
_LIST_ENTRY GlobalList; | |
_LIST_ENTRY DebugIdTrackingList; | |
_ETW_DECODE_CONTROL_ENTRY *DecodeControlList; | |
unsigned int DecodeControlCount; | |
$0B6BE4C52E9593E5A94F83ABD71BCCF3 ___u18; | |
_UNICODE_STRING LoggerName; | |
_UNICODE_STRING LogFileName; | |
_UNICODE_STRING LogFilePattern; | |
_UNICODE_STRING NewLogFileName; | |
unsigned int ClockType; | |
unsigned int LastFlushedBuffer; | |
unsigned int FlushTimer; | |
unsigned int FlushThreshold; | |
_LARGE_INTEGER ByteOffset; | |
unsigned int MinimumBuffers; | |
volatile int BuffersAvailable; | |
volatile int NumberOfBuffers; | |
unsigned int MaximumBuffers; | |
volatile unsigned int EventsLost; | |
volatile int PeakBuffersCount; | |
unsigned int BuffersWritten; | |
unsigned int LogBuffersLost; | |
unsigned int RealTimeBuffersDelivered; | |
unsigned int RealTimeBuffersLost; | |
int *SequencePtr; | |
unsigned int LocalSequence; | |
_GUID InstanceGuid; | |
unsigned int MaximumFileSize; | |
int FileCounter; | |
_POOL_TYPE PoolType; | |
_ETW_REF_CLOCK ReferenceTime; | |
int CollectionOn; | |
unsigned int ProviderInfoSize; | |
_LIST_ENTRY Consumers; | |
unsigned int NumConsumers; | |
_ETW_REALTIME_CONSUMER *TransitionConsumer; | |
void *RealtimeLogfileHandle; | |
_UNICODE_STRING RealtimeLogfileName; | |
_LARGE_INTEGER RealtimeWriteOffset; | |
_LARGE_INTEGER RealtimeReadOffset; | |
_LARGE_INTEGER RealtimeLogfileSize; | |
unsigned __int64 RealtimeLogfileUsage; | |
unsigned __int64 RealtimeMaximumFileSize; | |
unsigned int RealtimeBuffersSaved; | |
_ETW_REF_CLOCK RealtimeReferenceTime; | |
_ETW_RT_EVENT_LOSS NewRTEventsLost; | |
_KEVENT LoggerEvent; | |
_KEVENT FlushEvent; | |
_KTIMER FlushTimeOutTimer; | |
_KDPC LoggerDpc; | |
_KMUTANT LoggerMutex; | |
_EX_PUSH_LOCK LoggerLock; | |
$BC3A9B59C610685B615379E25EFCFFB3 ___u66; | |
_SECURITY_CLIENT_CONTEXT ClientSecurityContext; | |
_TOKEN_ACCESS_INFORMATION *TokenAccessInformation; | |
_EX_FAST_REF SecurityDescriptor; | |
_LARGE_INTEGER StartTime; | |
void *LogFileHandle; | |
__int64 BufferSequenceNumber; | |
$75914F243D0791090A8121F821B64210 ___u73; | |
$2BD5F01A453AFE9B56BB7E0A12BA937B ___u74; | |
_ETW_STACK_TRACE_BLOCK StackTraceBlock; | |
_RTL_BITMAP HookIdMap; | |
struct _ETW_STACK_CACHE *StackCache; | |
_ETW_PMC_SUPPORT *PmcData; | |
_ETW_LBR_SUPPORT *LbrData; | |
_ETW_IPT_SUPPORT *IptData; | |
_LIST_ENTRY BinaryTrackingList; | |
_WMI_BUFFER_HEADER **ScratchArray; | |
_DISALLOWED_GUIDS DisallowedGuids; | |
__int64 RelativeTimerDueTime; | |
_PERIODIC_CAPTURE_STATE_GUIDS PeriodicCaptureStateGuids; | |
struct _EX_TIMER *PeriodicCaptureStateTimer; | |
_ETW_PERIODIC_TIMER_STATE PeriodicCaptureStateTimerState; | |
struct _ETW_SOFT_RESTART_CONTEXT *SoftRestartContext; | |
_ETW_SILODRIVERSTATE *SiloState; | |
_WORK_QUEUE_ITEM CompressionWorkItem; | |
int CompressionWorkItemState; | |
_EX_PUSH_LOCK CompressionLock; | |
_WMI_BUFFER_HEADER *CompressionTarget; | |
void *CompressionWorkspace; | |
int CompressionOn; | |
unsigned int CompressionRatioGuess; | |
unsigned int PartialBufferCompressionLevel; | |
ETW_COMPRESSION_RESUMPTION_MODE CompressionResumptionMode; | |
_SINGLE_LIST_ENTRY PlaceholderList; | |
_KDPC CompressionDpc; | |
_LARGE_INTEGER LastBufferSwitchTime; | |
_LARGE_INTEGER BufferWriteDuration; | |
_LARGE_INTEGER BufferCompressDuration; | |
__int64 ReferenceQpcDelta; | |
struct _ETW_EVENT_CALLBACK_CONTEXT *CallbackContext; | |
_LARGE_INTEGER *LastDroppedTime; | |
_LARGE_INTEGER *FlushingLastDroppedTime; | |
__int64 FlushingSequenceNumber; | |
_ETW_PARTITION_CONTEXT PartitionContext; | |
_MDL *BufferMdl; | |
}; | |
/* 616 */ | |
struct __declspec(align(64)) _ETW_SILO_TRACING_BLOCK | |
{ | |
_EX_FAST_REF *ProcessorBuffers; | |
unsigned __int64 *EventsLoggedCount; | |
__int64 *QpcDelta; | |
}; | |
/* 623 */ | |
struct _WNF_SCOPE_INSTANCE | |
{ | |
_WNF_NODE_HEADER Header; | |
_EX_RUNDOWN_REF RunRef; | |
_WNF_DATA_SCOPE DataScope; | |
unsigned int InstanceIdSize; | |
void *InstanceIdData; | |
_LIST_ENTRY ResolverListEntry; | |
_WNF_LOCK NameSetLock; | |
_RTL_AVL_TREE NameSet; | |
void *PermanentDataStore; | |
void *VolatilePermanentDataStore; | |
}; | |
/* 529 */ | |
struct __declspec(align(8)) _OBJECT_DIRECTORY_ENTRY | |
{ | |
_OBJECT_DIRECTORY_ENTRY *ChainLink; | |
void *Object; | |
unsigned int HashValue; | |
}; | |
/* 539 */ | |
struct __declspec(align(8)) _SID_AND_ATTRIBUTES | |
{ | |
void *Sid; | |
unsigned int Attributes; | |
}; | |
/* 541 */ | |
struct _AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION | |
{ | |
unsigned int SecurityAttributeCount; | |
_LIST_ENTRY SecurityAttributesList; | |
unsigned int WorkingSecurityAttributeCount; | |
_LIST_ENTRY WorkingSecurityAttributesList; | |
}; | |
/* 550 */ | |
struct _ETW_FILTER_PID | |
{ | |
unsigned int Count; | |
unsigned int Pids[8]; | |
}; | |
/* 551 */ | |
struct _ETW_FILTER_STRING_TOKEN_ELEMENT | |
{ | |
unsigned __int16 Length; | |
wchar_t *String; | |
}; | |
/* 552 */ | |
struct _ETW_FILTER_STRING_TOKEN | |
{ | |
unsigned __int16 Count; | |
_ETW_FILTER_STRING_TOKEN_ELEMENT Tokens[1]; | |
}; | |
/* 553 */ | |
struct _ETW_FILTER_EVENT_NAME_DATA | |
{ | |
unsigned __int8 FilterIn; | |
unsigned __int8 Level; | |
unsigned __int64 MatchAnyKeyword; | |
unsigned __int64 MatchAllKeyword; | |
_RTL_HASH_TABLE NameTable; | |
}; | |
/* 554 */ | |
struct __declspec(align(8)) _EVENT_FILTER_LEVEL_KW | |
{ | |
unsigned __int64 MatchAnyKeyword; | |
unsigned __int64 MatchAllKeyword; | |
unsigned __int8 Level; | |
unsigned __int8 FilterIn; | |
}; | |
/* 555 */ | |
struct _EVENT_PAYLOAD_PREDICATE | |
{ | |
unsigned __int16 FieldIndex; | |
unsigned __int16 CompareOp; | |
unsigned __int64 Value[2]; | |
}; | |
/* 556 */ | |
struct _AGGREGATED_PAYLOAD_FILTER | |
{ | |
unsigned __int16 MagicValue : 12; | |
unsigned __int16 DescriptorVersion : 4; | |
unsigned __int16 Size; | |
unsigned __int16 PredicateCount; | |
unsigned __int16 Reserved; | |
unsigned __int64 HashedEventIdBitmap; | |
_GUID ProviderGuid; | |
unsigned __int16 EachEventTableOffset; | |
unsigned __int16 EachEventTableLength; | |
unsigned __int16 PayloadDecoderTableOffset; | |
unsigned __int16 PayloadDecoderTableLength; | |
unsigned __int16 EventFilterTableOffset; | |
unsigned __int16 EventFilterTableLength; | |
unsigned __int16 UNICODEStringTableOffset; | |
unsigned __int16 UNICODEStringTableLength; | |
unsigned __int16 ANSIStringTableOffset; | |
unsigned __int16 ANSIStringTableLength; | |
_EVENT_PAYLOAD_PREDICATE PredicateTable[1]; | |
}; | |
/* 557 */ | |
struct _ETW_PAYLOAD_FILTER | |
{ | |
int RefCount; | |
_AGGREGATED_PAYLOAD_FILTER PayloadFilter; | |
}; | |
/* 558 */ | |
struct _EVENT_FILTER_HEADER | |
{ | |
unsigned __int16 Id; | |
unsigned __int8 Version; | |
unsigned __int8 Reserved[5]; | |
unsigned __int64 InstanceId; | |
unsigned int Size; | |
unsigned int NextOffset; | |
}; | |
/* 565 */ | |
struct __declspec(align(8)) _ETW_DECODE_CONTROL_ENTRY | |
{ | |
_ETW_DECODE_CONTROL_ENTRY *Next; | |
_GUID Decode; | |
_GUID Control; | |
unsigned __int8 ConsumersNotified; | |
}; | |
/* 571 */ | |
struct $CE5421AAA17F992240E21CD59A4E8E5E | |
{ | |
unsigned __int64 ClockType : 3; | |
unsigned __int64 Frequency : 61; | |
}; | |
/* 572 */ | |
union $A756FDBE88F1F5F1EB5BE923FB86C152 | |
{ | |
$CE5421AAA17F992240E21CD59A4E8E5E __s0; | |
_SINGLE_LIST_ENTRY SlistEntry; | |
_WMI_BUFFER_HEADER *NextBuffer; | |
}; | |
/* 567 */ | |
struct $F7432ABE0171147119B3CC6D5D7B4734 | |
{ | |
unsigned __int8 ProcessorNumber; | |
unsigned __int8 Alignment; | |
}; | |
/* 568 */ | |
union $D4179FD3B7478C2E8B10D0650819C197 | |
{ | |
$F7432ABE0171147119B3CC6D5D7B4734 __s0; | |
unsigned __int16 ProcessorIndex; | |
}; | |
/* 569 */ | |
struct _ETW_BUFFER_CONTEXT | |
{ | |
$D4179FD3B7478C2E8B10D0650819C197 ___u0; | |
unsigned __int16 LoggerId; | |
}; | |
/* 573 */ | |
struct $A66567E97BAAFCB9B6D33D4D0E9F3DF3 | |
{ | |
void *Pointer0; | |
void *Pointer1; | |
}; | |
/* 574 */ | |
union $8612097FA42B5A687CFA440E92E8E75D | |
{ | |
unsigned int Padding1[4]; | |
_ETW_REF_CLOCK ReferenceTime; | |
_LIST_ENTRY GlobalEntry; | |
$A66567E97BAAFCB9B6D33D4D0E9F3DF3 __s3; | |
}; | |
/* 566 */ | |
struct _WMI_BUFFER_HEADER | |
{ | |
unsigned int BufferSize; | |
unsigned int SavedOffset; | |
volatile unsigned int CurrentOffset; | |
volatile int ReferenceCount; | |
_LARGE_INTEGER TimeStamp; | |
__int64 SequenceNumber; | |
$A756FDBE88F1F5F1EB5BE923FB86C152 ___u6; | |
_ETW_BUFFER_CONTEXT ClientContext; | |
_ETW_BUFFER_STATE State; | |
unsigned int Offset; | |
unsigned __int16 BufferFlag; | |
unsigned __int16 BufferType; | |
$8612097FA42B5A687CFA440E92E8E75D ___u12; | |
}; | |
/* 576 */ | |
struct $A95C3B3348F7C49EBFDF117AD9C555B1 | |
{ | |
unsigned __int8 ShutDownRequested : 1; | |
unsigned __int8 NewBuffersLost : 1; | |
unsigned __int8 Disconnected : 1; | |
unsigned __int8 Notified : 1; | |
unsigned __int8 Wow : 1; | |
}; | |
/* 577 */ | |
union $31A095F127774172232E74C5DC06BE15 | |
{ | |
unsigned __int8 Flags; | |
$A95C3B3348F7C49EBFDF117AD9C555B1 __s1; | |
}; | |
/* 578 */ | |
struct _ETW_REALTIME_CONSUMER | |
{ | |
_LIST_ENTRY Links; | |
void *ProcessHandle; | |
_EPROCESS *ProcessObject; | |
void *NextNotDelivered; | |
void *RealtimeConnectContext; | |
_KEVENT *DisconnectEvent; | |
_KEVENT *DataAvailableEvent; | |
unsigned int *UserBufferCount; | |
_SINGLE_LIST_ENTRY *UserBufferListHead; | |
unsigned int BuffersLost; | |
unsigned int EmptyBuffersCount; | |
unsigned __int16 LoggerId; | |
$31A095F127774172232E74C5DC06BE15 ___u12; | |
_RTL_BITMAP ReservedBufferSpaceBitMap; | |
unsigned __int8 *ReservedBufferSpace; | |
unsigned int ReservedBufferSpaceSize; | |
unsigned int UserPagesAllocated; | |
unsigned int UserPagesReused; | |
unsigned int *EventsLostCount; | |
unsigned int *BuffersLostCount; | |
_ETW_SILODRIVERSTATE *SiloState; | |
}; | |
/* 589 */ | |
struct _TOKEN_MANDATORY_POLICY | |
{ | |
unsigned int Policy; | |
}; | |
/* 590 */ | |
struct _TOKEN_ACCESS_INFORMATION | |
{ | |
_SID_AND_ATTRIBUTES_HASH *SidHash; | |
_SID_AND_ATTRIBUTES_HASH *RestrictedSidHash; | |
_TOKEN_PRIVILEGES *Privileges; | |
_LUID AuthenticationId; | |
_TOKEN_TYPE TokenType; | |
_SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
_TOKEN_MANDATORY_POLICY MandatoryPolicy; | |
unsigned int Flags; | |
unsigned int AppContainerNumber; | |
void *PackageSid; | |
_SID_AND_ATTRIBUTES_HASH *CapabilitiesHash; | |
void *TrustLevelSid; | |
void *SecurityAttributes; | |
}; | |
/* 591 */ | |
struct __declspec(align(16)) _SLIST_ENTRY | |
{ | |
_SLIST_ENTRY *Next; | |
}; | |
/* 592 */ | |
union __unaligned __declspec(align(8)) $14FB4FB3A4A25E7E419F81AE31EE0B90 | |
{ | |
_SLIST_ENTRY SListEntry; | |
_KAPC Apc; | |
}; | |
/* 593 */ | |
struct __declspec(align(16)) _ETW_APC_ENTRY | |
{ | |
$14FB4FB3A4A25E7E419F81AE31EE0B90 ___u0; | |
}; | |
/* 595 */ | |
struct _ETW_PMC_SUPPORT | |
{ | |
_KPROFILE_SOURCE *Source; | |
volatile unsigned int HookIdCount; | |
unsigned __int16 HookId[4]; | |
volatile unsigned int CountersCount; | |
struct _HAL_PMC_COUNTERS *ProcessorCtrs[1]; | |
}; | |
/* 596 */ | |
struct _ETW_LBR_SUPPORT | |
{ | |
unsigned int LbrHandle; | |
unsigned int LbrOptions; | |
volatile unsigned int HookIdCount; | |
unsigned __int16 HookId[4]; | |
}; | |
/* 598 */ | |
struct __declspec(align(8)) _ETW_IPT_SUPPORT | |
{ | |
void *IptHandle; | |
unsigned __int64 IptOption; | |
_ETW_HW_TRACE_EXT_INTERFACE *EtwHwTraceExtInterface; | |
volatile unsigned int HookIdCount; | |
unsigned __int16 HookId[4]; | |
}; | |
/* 603 */ | |
struct $3D16460E1D273AC5F5946B819FC416C9 | |
{ | |
unsigned __int32 PairedWithJob : 1; | |
}; | |
/* 604 */ | |
union $BB9C67A3048216BA60019174849881BF | |
{ | |
unsigned int PartitionFlags; | |
$3D16460E1D273AC5F5946B819FC416C9 __s1; | |
}; | |
/* 602 */ | |
struct __declspec(align(8)) _EPARTITION | |
{ | |
void *MmPartition; | |
void *CcPartition; | |
void *ExPartition; | |
__int64 HardReferenceCount; | |
__int64 OpenHandleCount; | |
_LIST_ENTRY ActivePartitionLinks; | |
_EPARTITION *ParentPartition; | |
_WORK_QUEUE_ITEM TeardownWorkItem; | |
_EX_PUSH_LOCK TeardownLock; | |
_EPROCESS *SystemProcess; | |
void *SystemProcessHandle; | |
$BB9C67A3048216BA60019174849881BF ___u11; | |
}; | |
/* 588 */ | |
struct _TOKEN_PRIVILEGES | |
{ | |
unsigned int PrivilegeCount; | |
_LUID_AND_ATTRIBUTES Privileges[1]; | |
}; | |
/* 597 */ | |
struct _ETW_HW_TRACE_EXT_INTERFACE | |
{ | |
int (__fastcall *StartProcessorTraceOnEachCore)(unsigned __int64, void **); | |
int (__fastcall *StopProcessorTraceOnEachCore)(void *); | |
int (__fastcall *LogProcessorTraceOnCurrentCore)(void *, void *); | |
}; | |
/* 927 */ | |
struct $19262564D2725DC099756F7A9DB13139 | |
{ | |
unsigned __int32 : 2; | |
unsigned __int32 AutoAlignment : 1; | |
unsigned __int32 DisableBoost : 1; | |
unsigned __int32 AlertedByThreadId : 1; | |
unsigned __int32 QuantumDonation : 1; | |
unsigned __int32 EnableStackSwap : 1; | |
unsigned __int32 GuiThread : 1; | |
unsigned __int32 DisableQuantum : 1; | |
unsigned __int32 ChargeOnlySchedulingGroup : 1; | |
unsigned __int32 DeferPreemption : 1; | |
unsigned __int32 QueueDeferPreemption : 1; | |
unsigned __int32 ForceDeferSchedule : 1; | |
unsigned __int32 SharedReadyQueueAffinity : 1; | |
unsigned __int32 FreezeCount : 1; | |
unsigned __int32 TerminationApcRequest : 1; | |
unsigned __int32 AutoBoostEntriesExhausted : 1; | |
unsigned __int32 KernelStackResident : 1; | |
unsigned __int32 TerminateRequestReason : 2; | |
unsigned __int32 ProcessStackCountDecremented : 1; | |
unsigned __int32 RestrictedGuiThread : 1; | |
unsigned __int32 VpBackingThread : 1; | |
unsigned __int32 ThreadFlagsSpare2 : 1; | |
unsigned __int32 EtwStackTraceApcInserted : 8; | |
}; | |
/* 928 */ | |
union $806FA454A63131F6571D2D055965D0DE | |
{ | |
volatile int ThreadFlags; | |
$19262564D2725DC099756F7A9DB13139 __s1; | |
}; | |
/* 966 */ | |
struct __declspec(align(8)) _RTL_QUERY_REGISTRY_TABLE | |
{ | |
int (__fastcall *QueryRoutine)(wchar_t *, unsigned int, void *, unsigned int, void *, void *); | |
unsigned int Flags; | |
wchar_t *Name; | |
void *EntryContext; | |
unsigned int DefaultType; | |
void *DefaultData; | |
unsigned int DefaultLength; | |
}; | |
/* 967 */ | |
struct _KFLOATING_SAVE | |
{ | |
unsigned int Dummy; | |
}; | |
/* 968 */ | |
struct _EXT_SET_PARAMETERS_V0 | |
{ | |
unsigned int Version; | |
unsigned int Reserved; | |
__int64 NoWakeTolerance; | |
}; | |
/* 969 */ | |
struct _NPAGED_LOOKASIDE_LIST | |
{ | |
_GENERAL_LOOKASIDE L; | |
}; | |
/* 970 */ | |
struct _PAGED_LOOKASIDE_LIST | |
{ | |
_GENERAL_LOOKASIDE L; | |
}; | |
/* 971 */ | |
struct _EXT_DELETE_PARAMETERS | |
{ | |
unsigned int Version; | |
unsigned int Reserved; | |
void (__fastcall *DeleteCallback)(void *); | |
void *DeleteContext; | |
}; | |
/* 972 */ | |
struct $0C5828C8BB62FF2F1199CF985F8D6E45 | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Reserved1; | |
unsigned __int16 Reserved2; | |
}; | |
/* 973 */ | |
union $AC492906E908F75CD234F2140A5AAD56 | |
{ | |
unsigned int Reserved; | |
$0C5828C8BB62FF2F1199CF985F8D6E45 __s1; | |
}; | |
/* 974 */ | |
struct _EVENT_DATA_DESCRIPTOR | |
{ | |
unsigned __int64 Ptr; | |
unsigned int Size; | |
$AC492906E908F75CD234F2140A5AAD56 ___u2; | |
}; | |
/* 975 */ | |
struct _EVENT_DESCRIPTOR | |
{ | |
unsigned __int16 Id; | |
unsigned __int8 Version; | |
unsigned __int8 Channel; | |
unsigned __int8 Level; | |
unsigned __int8 Opcode; | |
unsigned __int16 Task; | |
unsigned __int64 Keyword; | |
}; | |
/* 976 */ | |
struct _RTL_SPLAY_LINKS | |
{ | |
_RTL_SPLAY_LINKS *Parent; | |
_RTL_SPLAY_LINKS *LeftChild; | |
_RTL_SPLAY_LINKS *RightChild; | |
}; | |
/* 977 */ | |
struct _RTL_DYNAMIC_HASH_TABLE_CONTEXT | |
{ | |
_LIST_ENTRY *ChainHead; | |
_LIST_ENTRY *PrevLinkage; | |
unsigned __int64 Signature; | |
}; | |
/* 978 */ | |
struct _RTL_DYNAMIC_HASH_TABLE_ENTRY | |
{ | |
_LIST_ENTRY Linkage; | |
unsigned __int64 Signature; | |
}; | |
/* 979 */ | |
union $4E6D73B9EB98142DEBDF447A024657D2 | |
{ | |
_RTL_DYNAMIC_HASH_TABLE_ENTRY HashEntry; | |
_LIST_ENTRY *CurEntry; | |
}; | |
/* 980 */ | |
struct __declspec(align(8)) _RTL_DYNAMIC_HASH_TABLE_ENUMERATOR | |
{ | |
$4E6D73B9EB98142DEBDF447A024657D2 ___u0; | |
_LIST_ENTRY *ChainHead; | |
unsigned int BucketIndex; | |
}; | |
/* 981 */ | |
struct _CUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG | |
{ | |
unsigned int Size; | |
const wchar_t *TriggerId; | |
}; | |
/* 982 */ | |
struct _EXCEPTION_REGISTRATION_RECORD | |
{ | |
_EXCEPTION_REGISTRATION_RECORD *Next; | |
_EXCEPTION_DISPOSITION (__fastcall *Handler)(_EXCEPTION_RECORD *, void *, _CONTEXT *, void *); | |
}; | |
/* 983 */ | |
struct _EXCEPTION_RECORD | |
{ | |
int ExceptionCode; | |
unsigned int ExceptionFlags; | |
_EXCEPTION_RECORD *ExceptionRecord; | |
void *ExceptionAddress; | |
unsigned int NumberParameters; | |
unsigned __int64 ExceptionInformation[15]; | |
}; | |
/* 985 */ | |
union $7A727655067EA29DD1B3C3F7D79CBFD1 | |
{ | |
void *FiberData; | |
unsigned int Version; | |
}; | |
/* 984 */ | |
struct _NT_TIB | |
{ | |
_EXCEPTION_REGISTRATION_RECORD *ExceptionList; | |
void *StackBase; | |
void *StackLimit; | |
void *SubSystemTib; | |
$7A727655067EA29DD1B3C3F7D79CBFD1 ___u4; | |
void *ArbitraryUserPointer; | |
_NT_TIB *Self; | |
}; | |
/* 986 */ | |
struct $3AF973CD41D86FE815C4B32B4036FCC9 | |
{ | |
unsigned __int16 LimitLow; | |
unsigned __int16 BaseLow; | |
struct | |
{ | |
unsigned __int8 BaseMiddle; | |
unsigned __int8 Flags1; | |
unsigned __int8 Flags2; | |
unsigned __int8 BaseHigh; | |
} Bytes; | |
unsigned int BaseUpper; | |
unsigned int MustBeZero; | |
}; | |
/* 987 */ | |
struct $DE019BF23F645DE18A8E2A817E597FE0 | |
{ | |
__int64 DataLow; | |
__int64 DataHigh; | |
}; | |
/* 988 */ | |
struct $8A182C705C89D3D09A23B1A6C6D950E6 | |
{ | |
_BYTE gap0[4]; | |
struct | |
{ | |
unsigned __int32 BaseMiddle : 8; | |
unsigned __int32 Type : 5; | |
unsigned __int32 Dpl : 2; | |
unsigned __int32 Present : 1; | |
unsigned __int32 LimitHigh : 4; | |
unsigned __int32 System : 1; | |
unsigned __int32 LongMode : 1; | |
unsigned __int32 DefaultBig : 1; | |
unsigned __int32 Granularity : 1; | |
unsigned __int32 BaseHigh : 8; | |
} Bits; | |
}; | |
/* 989 */ | |
union _KGDTENTRY64 | |
{ | |
$3AF973CD41D86FE815C4B32B4036FCC9 __s0; | |
$DE019BF23F645DE18A8E2A817E597FE0 __s1; | |
$8A182C705C89D3D09A23B1A6C6D950E6 __s2; | |
}; | |
/* 990 */ | |
struct _KTSS64 | |
{ | |
unsigned int Reserved0; | |
__unaligned __declspec(align(1)) unsigned __int64 Rsp0; | |
__unaligned __declspec(align(1)) unsigned __int64 Rsp1; | |
__unaligned __declspec(align(1)) unsigned __int64 Rsp2; | |
__unaligned __declspec(align(1)) unsigned __int64 Ist[8]; | |
__unaligned __declspec(align(1)) unsigned __int64 Reserved1; | |
unsigned __int16 Reserved2; | |
unsigned __int16 IoMapBase; | |
}; | |
/* 994 */ | |
struct $F97CC0B1E6BC7F97C978F6FEBEF9E51D | |
{ | |
_KGDTENTRY64 *GdtBase; | |
_KTSS64 *TssBase; | |
unsigned __int64 UserRsp; | |
_KPCR *Self; | |
_KPRCB *CurrentPrcb; | |
_KSPIN_LOCK_QUEUE *LockArray; | |
void *Used_Self; | |
}; | |
/* 995 */ | |
union $339E5E3C0EA7946F33E4B0446BE14752 | |
{ | |
_NT_TIB NtTib; | |
$F97CC0B1E6BC7F97C978F6FEBEF9E51D __s1; | |
}; | |
/* 991 */ | |
struct _KPCR | |
{ | |
$339E5E3C0EA7946F33E4B0446BE14752 ___u0; | |
_KIDTENTRY64 *IdtBase; | |
unsigned __int64 Unused[2]; | |
unsigned __int8 Irql; | |
unsigned __int8 SecondLevelCacheAssociativity; | |
unsigned __int8 ObsoleteNumber; | |
unsigned __int8 Fill0; | |
unsigned int Unused0[3]; | |
unsigned __int16 MajorVersion; | |
unsigned __int16 MinorVersion; | |
unsigned int StallScaleFactor; | |
void *Unused1[3]; | |
unsigned int KernelReserved[15]; | |
unsigned int SecondLevelCacheSize; | |
unsigned int HalReserved[16]; | |
unsigned int Unused2; | |
void *KdVersionBlock; | |
void *Unused3; | |
unsigned int PcrAlign1[24]; | |
__declspec(align(16)) _KPRCB Prcb; | |
}; | |
/* 992 */ | |
struct $3CCEB4C367AD314E5B0AA0D7724EC670 | |
{ | |
unsigned __int16 OffsetLow; | |
unsigned __int16 Selector; | |
unsigned __int16 IstIndex : 3; | |
unsigned __int16 Reserved0 : 5; | |
unsigned __int16 Type : 5; | |
unsigned __int16 Dpl : 2; | |
unsigned __int16 Present : 1; | |
unsigned __int16 OffsetMiddle; | |
unsigned int OffsetHigh; | |
unsigned int Reserved1; | |
}; | |
/* 993 */ | |
union _KIDTENTRY64 | |
{ | |
$3CCEB4C367AD314E5B0AA0D7724EC670 __s0; | |
unsigned __int64 Alignment; | |
}; | |
/* 996 */ | |
struct _ECP_LIST | |
{ | |
unsigned int Signature; | |
unsigned int Flags; | |
_LIST_ENTRY EcpList; | |
}; | |
/* 997 */ | |
struct _TXN_PARAMETER_BLOCK | |
{ | |
unsigned __int16 Length; | |
unsigned __int16 TxFsContext; | |
void *TransactionObject; | |
}; | |
/* 998 */ | |
struct _IO_DRIVER_CREATE_CONTEXT | |
{ | |
__int16 Size; | |
_ECP_LIST *ExtraCreateParameter; | |
void *DeviceObjectHint; | |
_TXN_PARAMETER_BLOCK *TxnParameters; | |
_EJOB *SiloContext; | |
}; | |
/* 999 */ | |
struct $BEDAFFCF8B2FE2B464F6E114319CEB5E | |
{ | |
unsigned __int32 MCG_CapabilityRW : 1; | |
unsigned __int32 MCG_GlobalControlRW : 1; | |
unsigned __int32 Reserved : 30; | |
}; | |
/* 1000 */ | |
union _XPF_MCE_FLAGS | |
{ | |
$BEDAFFCF8B2FE2B464F6E114319CEB5E __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1001 */ | |
struct $DD3EFD26B55353E648024B9E0E8957B6 | |
{ | |
unsigned __int8 ClearOnInitializationRW : 1; | |
unsigned __int8 ControlDataRW : 1; | |
unsigned __int8 Reserved : 6; | |
}; | |
/* 1002 */ | |
union _XPF_MC_BANK_FLAGS | |
{ | |
$DD3EFD26B55353E648024B9E0E8957B6 __s0; | |
unsigned __int8 AsUCHAR; | |
}; | |
/* 1003 */ | |
struct __unaligned __declspec(align(4)) _WHEA_XPF_MC_BANK_DESCRIPTOR | |
{ | |
unsigned __int8 BankNumber; | |
unsigned __int8 ClearOnInitialization; | |
unsigned __int8 StatusDataFormat; | |
_XPF_MC_BANK_FLAGS Flags; | |
unsigned int ControlMsr; | |
unsigned int StatusMsr; | |
unsigned int AddressMsr; | |
unsigned int MiscMsr; | |
unsigned __int64 ControlData; | |
}; | |
/* 1004 */ | |
struct _WHEA_XPF_MCE_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 NumberOfBanks; | |
_XPF_MCE_FLAGS Flags; | |
unsigned __int64 MCG_Capability; | |
unsigned __int64 MCG_GlobalControl; | |
_WHEA_XPF_MC_BANK_DESCRIPTOR Banks[32]; | |
}; | |
/* 1005 */ | |
struct $D9F8BA727F02FA7D5CD681B2EFB762AC | |
{ | |
unsigned __int16 PollIntervalRW : 1; | |
unsigned __int16 SwitchToPollingThresholdRW : 1; | |
unsigned __int16 SwitchToPollingWindowRW : 1; | |
unsigned __int16 ErrorThresholdRW : 1; | |
unsigned __int16 ErrorThresholdWindowRW : 1; | |
unsigned __int16 Reserved : 11; | |
}; | |
/* 1006 */ | |
union _WHEA_NOTIFICATION_FLAGS | |
{ | |
$D9F8BA727F02FA7D5CD681B2EFB762AC __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 1007 */ | |
struct _WHEA_NOTIFICATION_DESCRIPTOR | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
_WHEA_NOTIFICATION_FLAGS Flags; | |
union | |
{ | |
struct | |
{ | |
unsigned int PollInterval; | |
} Polled; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Interrupt; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} LocalInterrupt; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Sci; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Nmi; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Sea; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Sei; | |
struct | |
{ | |
unsigned int PollInterval; | |
unsigned int Vector; | |
unsigned int SwitchToPollingThreshold; | |
unsigned int SwitchToPollingWindow; | |
unsigned int ErrorThreshold; | |
unsigned int ErrorThresholdWindow; | |
} Gsiv; | |
} u; | |
}; | |
/* 1008 */ | |
struct _WHEA_XPF_CMC_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 NumberOfBanks; | |
unsigned int Reserved; | |
_WHEA_NOTIFICATION_DESCRIPTOR Notify; | |
_WHEA_XPF_MC_BANK_DESCRIPTOR Banks[32]; | |
}; | |
/* 1009 */ | |
struct __unaligned __declspec(align(1)) _WHEA_XPF_NMI_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
}; | |
/* 1010 */ | |
struct _WHEA_IPF_MCA_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
}; | |
/* 1011 */ | |
struct _WHEA_IPF_CMC_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
}; | |
/* 1012 */ | |
struct _WHEA_IPF_CPE_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
}; | |
/* 1013 */ | |
struct _WHEA_PCI_SLOT_NUMBER | |
{ | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 DeviceNumber : 5; | |
unsigned __int32 FunctionNumber : 3; | |
unsigned __int32 Reserved : 24; | |
} bits; | |
unsigned int AsULONG; | |
} u; | |
}; | |
/* 1014 */ | |
struct $EFF43A9EAE4B7B62E532E338439EC9F9 | |
{ | |
unsigned __int16 UncorrectableErrorMaskRW : 1; | |
unsigned __int16 UncorrectableErrorSeverityRW : 1; | |
unsigned __int16 CorrectableErrorMaskRW : 1; | |
unsigned __int16 AdvancedCapsAndControlRW : 1; | |
unsigned __int16 RootErrorCommandRW : 1; | |
unsigned __int16 Reserved : 11; | |
}; | |
/* 1015 */ | |
union _AER_ROOTPORT_DESCRIPTOR_FLAGS | |
{ | |
$EFF43A9EAE4B7B62E532E338439EC9F9 __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 1016 */ | |
struct _WHEA_AER_ROOTPORT_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
unsigned int BusNumber; | |
_WHEA_PCI_SLOT_NUMBER Slot; | |
unsigned __int16 DeviceControl; | |
_AER_ROOTPORT_DESCRIPTOR_FLAGS Flags; | |
unsigned int UncorrectableErrorMask; | |
unsigned int UncorrectableErrorSeverity; | |
unsigned int CorrectableErrorMask; | |
unsigned int AdvancedCapsAndControl; | |
unsigned int RootErrorCommand; | |
}; | |
/* 1017 */ | |
struct $644EF056A6BCD34BEB130C59ECDD245F | |
{ | |
unsigned __int16 UncorrectableErrorMaskRW : 1; | |
unsigned __int16 UncorrectableErrorSeverityRW : 1; | |
unsigned __int16 CorrectableErrorMaskRW : 1; | |
unsigned __int16 AdvancedCapsAndControlRW : 1; | |
unsigned __int16 Reserved : 12; | |
}; | |
/* 1018 */ | |
union _AER_ENDPOINT_DESCRIPTOR_FLAGS | |
{ | |
$644EF056A6BCD34BEB130C59ECDD245F __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 1019 */ | |
struct _WHEA_AER_ENDPOINT_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
unsigned int BusNumber; | |
_WHEA_PCI_SLOT_NUMBER Slot; | |
unsigned __int16 DeviceControl; | |
_AER_ENDPOINT_DESCRIPTOR_FLAGS Flags; | |
unsigned int UncorrectableErrorMask; | |
unsigned int UncorrectableErrorSeverity; | |
unsigned int CorrectableErrorMask; | |
unsigned int AdvancedCapsAndControl; | |
}; | |
/* 1020 */ | |
struct $DA323376D87A17572D4BAAC59ACA696A | |
{ | |
unsigned __int16 UncorrectableErrorMaskRW : 1; | |
unsigned __int16 UncorrectableErrorSeverityRW : 1; | |
unsigned __int16 CorrectableErrorMaskRW : 1; | |
unsigned __int16 AdvancedCapsAndControlRW : 1; | |
unsigned __int16 SecondaryUncorrectableErrorMaskRW : 1; | |
unsigned __int16 SecondaryUncorrectableErrorSevRW : 1; | |
unsigned __int16 SecondaryCapsAndControlRW : 1; | |
unsigned __int16 Reserved : 9; | |
}; | |
/* 1021 */ | |
union _AER_BRIDGE_DESCRIPTOR_FLAGS | |
{ | |
$DA323376D87A17572D4BAAC59ACA696A __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 1022 */ | |
struct _WHEA_AER_BRIDGE_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
unsigned int BusNumber; | |
_WHEA_PCI_SLOT_NUMBER Slot; | |
unsigned __int16 DeviceControl; | |
_AER_BRIDGE_DESCRIPTOR_FLAGS Flags; | |
unsigned int UncorrectableErrorMask; | |
unsigned int UncorrectableErrorSeverity; | |
unsigned int CorrectableErrorMask; | |
unsigned int AdvancedCapsAndControl; | |
unsigned int SecondaryUncorrectableErrorMask; | |
unsigned int SecondaryUncorrectableErrorSev; | |
unsigned int SecondaryCapsAndControl; | |
}; | |
/* 1023 */ | |
struct __unaligned __declspec(align(4)) _WHEA_GENERIC_ERROR_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Reserved; | |
unsigned __int8 Enabled; | |
unsigned int ErrStatusBlockLength; | |
unsigned int RelatedErrorSourceId; | |
unsigned __int8 ErrStatusAddressSpaceID; | |
unsigned __int8 ErrStatusAddressBitWidth; | |
unsigned __int8 ErrStatusAddressBitOffset; | |
unsigned __int8 ErrStatusAddressAccessSize; | |
_LARGE_INTEGER ErrStatusAddress; | |
_WHEA_NOTIFICATION_DESCRIPTOR Notify; | |
}; | |
/* 1024 */ | |
struct _WHEA_GENERIC_ERROR_DESCRIPTOR_V2 | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Reserved; | |
unsigned __int8 Enabled; | |
unsigned int ErrStatusBlockLength; | |
unsigned int RelatedErrorSourceId; | |
unsigned __int8 ErrStatusAddressSpaceID; | |
unsigned __int8 ErrStatusAddressBitWidth; | |
unsigned __int8 ErrStatusAddressBitOffset; | |
unsigned __int8 ErrStatusAddressAccessSize; | |
_LARGE_INTEGER ErrStatusAddress; | |
_WHEA_NOTIFICATION_DESCRIPTOR Notify; | |
unsigned __int8 ReadAckAddressSpaceID; | |
unsigned __int8 ReadAckAddressBitWidth; | |
unsigned __int8 ReadAckAddressBitOffset; | |
unsigned __int8 ReadAckAddressAccessSize; | |
_LARGE_INTEGER ReadAckAddress; | |
unsigned __int64 ReadAckPreserveMask; | |
unsigned __int64 ReadAckWriteMask; | |
}; | |
/* 1025 */ | |
struct _WHEA_ERROR_SOURCE_CONFIGURATION_DD | |
{ | |
int (__fastcall *Initialize)(void *, unsigned int); | |
void (__fastcall *Uninitialize)(void *); | |
int (__fastcall *Correct)(void *, unsigned int *); | |
}; | |
/* 1026 */ | |
struct __unaligned __declspec(align(4)) _WHEA_DEVICE_DRIVER_DESCRIPTOR | |
{ | |
unsigned __int16 Type; | |
unsigned __int8 Enabled; | |
unsigned __int8 Reserved; | |
_GUID SourceGuid; | |
unsigned __int16 LogTag; | |
unsigned __int16 Reserved2; | |
unsigned int PacketLength; | |
unsigned int PacketCount; | |
unsigned __int8 *PacketBuffer; | |
_WHEA_ERROR_SOURCE_CONFIGURATION_DD Config; | |
_GUID CreatorId; | |
_GUID PartitionId; | |
unsigned int MaxSectionDataLength; | |
unsigned int MaxSectionsPerRecord; | |
unsigned __int8 *PacketStateBuffer; | |
int OpenHandles; | |
}; | |
/* 1027 */ | |
struct _WHEA_ERROR_SOURCE_DESCRIPTOR | |
{ | |
unsigned int Length; | |
unsigned int Version; | |
_WHEA_ERROR_SOURCE_TYPE Type; | |
_WHEA_ERROR_SOURCE_STATE State; | |
unsigned int MaxRawDataLength; | |
unsigned int NumRecordsToPreallocate; | |
unsigned int MaxSectionsPerRecord; | |
unsigned int ErrorSourceId; | |
unsigned int PlatformErrorSourceId; | |
unsigned int Flags; | |
union __unaligned __declspec(align(4)) | |
{ | |
_WHEA_XPF_MCE_DESCRIPTOR XpfMceDescriptor; | |
_WHEA_XPF_CMC_DESCRIPTOR XpfCmcDescriptor; | |
_WHEA_XPF_NMI_DESCRIPTOR XpfNmiDescriptor; | |
_WHEA_IPF_MCA_DESCRIPTOR IpfMcaDescriptor; | |
_WHEA_IPF_CMC_DESCRIPTOR IpfCmcDescriptor; | |
_WHEA_IPF_CPE_DESCRIPTOR IpfCpeDescriptor; | |
_WHEA_AER_ROOTPORT_DESCRIPTOR AerRootportDescriptor; | |
_WHEA_AER_ENDPOINT_DESCRIPTOR AerEndpointDescriptor; | |
_WHEA_AER_BRIDGE_DESCRIPTOR AerBridgeDescriptor; | |
_WHEA_GENERIC_ERROR_DESCRIPTOR GenErrDescriptor; | |
_WHEA_GENERIC_ERROR_DESCRIPTOR_V2 GenErrDescriptorV2; | |
_WHEA_DEVICE_DRIVER_DESCRIPTOR DeviceDriverDescriptor; | |
} Info; | |
}; | |
/* 1028 */ | |
struct $26E95845B33B84F42665E352BF23E268 | |
{ | |
unsigned __int32 Reserved1 : 1; | |
unsigned __int32 LogInternalEtw : 1; | |
unsigned __int32 LogBlackbox : 1; | |
unsigned __int32 LogSel : 1; | |
unsigned __int32 RawSel : 1; | |
unsigned __int32 NoFormat : 1; | |
unsigned __int32 Driver : 1; | |
unsigned __int32 Reserved2 : 25; | |
}; | |
/* 1029 */ | |
union _WHEA_EVENT_LOG_ENTRY_FLAGS | |
{ | |
$26E95845B33B84F42665E352BF23E268 __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1030 */ | |
struct _WHEA_EVENT_LOG_ENTRY_HEADER | |
{ | |
unsigned int Signature; | |
unsigned int Version; | |
unsigned int Length; | |
_WHEA_EVENT_LOG_ENTRY_TYPE Type; | |
unsigned int OwnerTag; | |
_WHEA_EVENT_LOG_ENTRY_ID Id; | |
_WHEA_EVENT_LOG_ENTRY_FLAGS Flags; | |
unsigned int PayloadLength; | |
}; | |
/* 1031 */ | |
struct _WHEA_EVENT_LOG_ENTRY | |
{ | |
_WHEA_EVENT_LOG_ENTRY_HEADER Header; | |
}; | |
/* 1032 */ | |
struct $6925146DDFB4E1181EC8A69EB67289F4 | |
{ | |
unsigned __int32 PreviousError : 1; | |
unsigned __int32 CriticalEvent : 1; | |
unsigned __int32 HypervisorError : 1; | |
unsigned __int32 Simulated : 1; | |
unsigned __int32 PlatformPfaControl : 1; | |
unsigned __int32 PlatformDirectedOffline : 1; | |
unsigned __int32 AddressTranslationRequired : 1; | |
unsigned __int32 AddressTranslationCompleted : 1; | |
unsigned __int32 Reserved2 : 24; | |
}; | |
/* 1033 */ | |
union _WHEA_ERROR_PACKET_FLAGS | |
{ | |
$6925146DDFB4E1181EC8A69EB67289F4 __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1034 */ | |
struct _WHEA_ERROR_PACKET_V2 | |
{ | |
unsigned int Signature; | |
unsigned int Version; | |
unsigned int Length; | |
_WHEA_ERROR_PACKET_FLAGS Flags; | |
_WHEA_ERROR_TYPE ErrorType; | |
_WHEA_ERROR_SEVERITY ErrorSeverity; | |
unsigned int ErrorSourceId; | |
_WHEA_ERROR_SOURCE_TYPE ErrorSourceType; | |
_GUID NotifyType; | |
unsigned __int64 Context; | |
_WHEA_ERROR_PACKET_DATA_FORMAT DataFormat; | |
unsigned int Reserved1; | |
unsigned int DataOffset; | |
unsigned int DataLength; | |
unsigned int PshedDataOffset; | |
unsigned int PshedDataLength; | |
}; | |
/* 1035 */ | |
struct $093851A5671CCE5957B5EAEAC4F608A2 | |
{ | |
unsigned __int8 MinorRevision; | |
unsigned __int8 MajorRevision; | |
}; | |
/* 1036 */ | |
union _WHEA_REVISION | |
{ | |
$093851A5671CCE5957B5EAEAC4F608A2 __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 1037 */ | |
struct $303239889594314C554CBA593C88201B | |
{ | |
unsigned __int32 PlatformId : 1; | |
unsigned __int32 Timestamp : 1; | |
unsigned __int32 PartitionId : 1; | |
unsigned __int32 Reserved : 29; | |
}; | |
/* 1038 */ | |
union _WHEA_ERROR_RECORD_HEADER_VALIDBITS | |
{ | |
$303239889594314C554CBA593C88201B __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1039 */ | |
struct $0E69AD184FCFEB7998E3B897182A8ACD | |
{ | |
unsigned __int64 Seconds : 8; | |
unsigned __int64 Minutes : 8; | |
unsigned __int64 Hours : 8; | |
unsigned __int64 Precise : 1; | |
unsigned __int64 Reserved : 7; | |
unsigned __int64 Day : 8; | |
unsigned __int64 Month : 8; | |
unsigned __int64 Year : 8; | |
unsigned __int64 Century : 8; | |
}; | |
/* 1040 */ | |
union _WHEA_TIMESTAMP | |
{ | |
$0E69AD184FCFEB7998E3B897182A8ACD __s0; | |
_LARGE_INTEGER AsLARGE_INTEGER; | |
}; | |
/* 1041 */ | |
struct $9E46E3073B5FFFFC8430EEE7126B55BF | |
{ | |
unsigned __int32 Recovered : 1; | |
unsigned __int32 PreviousError : 1; | |
unsigned __int32 Simulated : 1; | |
unsigned __int32 DeviceDriver : 1; | |
unsigned __int32 CriticalEvent : 1; | |
unsigned __int32 PersistPfn : 1; | |
unsigned __int32 Reserved : 26; | |
}; | |
/* 1042 */ | |
union _WHEA_ERROR_RECORD_HEADER_FLAGS | |
{ | |
$9E46E3073B5FFFFC8430EEE7126B55BF __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1043 */ | |
struct $7AB0461A727F28B9D4873A511C9F9EFB | |
{ | |
unsigned __int64 Signature : 16; | |
unsigned __int64 Length : 24; | |
unsigned __int64 Identifier : 16; | |
unsigned __int64 Attributes : 2; | |
unsigned __int64 DoNotLog : 1; | |
unsigned __int64 Reserved : 5; | |
}; | |
/* 1044 */ | |
union _WHEA_PERSISTENCE_INFO | |
{ | |
$7AB0461A727F28B9D4873A511C9F9EFB __s0; | |
unsigned __int64 AsULONGLONG; | |
}; | |
/* 1045 */ | |
struct _WHEA_ERROR_RECORD_HEADER | |
{ | |
unsigned int Signature; | |
_WHEA_REVISION Revision; | |
__unaligned __declspec(align(1)) unsigned int SignatureEnd; | |
unsigned __int16 SectionCount; | |
_WHEA_ERROR_SEVERITY Severity; | |
_WHEA_ERROR_RECORD_HEADER_VALIDBITS ValidBits; | |
unsigned int Length; | |
_WHEA_TIMESTAMP Timestamp; | |
_GUID PlatformId; | |
_GUID PartitionId; | |
_GUID CreatorId; | |
_GUID NotifyType; | |
unsigned __int64 RecordId; | |
_WHEA_ERROR_RECORD_HEADER_FLAGS Flags; | |
__unaligned __declspec(align(1)) _WHEA_PERSISTENCE_INFO PersistenceInfo; | |
unsigned __int8 Reserved[12]; | |
}; | |
/* 1046 */ | |
struct $6811685E9C9CDE140128703EAAAFCDFF | |
{ | |
unsigned __int8 FRUId : 1; | |
unsigned __int8 FRUText : 1; | |
unsigned __int8 Reserved : 6; | |
}; | |
/* 1047 */ | |
union _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS | |
{ | |
$6811685E9C9CDE140128703EAAAFCDFF __s0; | |
unsigned __int8 AsUCHAR; | |
}; | |
/* 1048 */ | |
struct $04FC3C63FA6AFA10A09BBCBE2A6159E4 | |
{ | |
unsigned __int32 Primary : 1; | |
unsigned __int32 ContainmentWarning : 1; | |
unsigned __int32 Reset : 1; | |
unsigned __int32 ThresholdExceeded : 1; | |
unsigned __int32 ResourceNotAvailable : 1; | |
unsigned __int32 LatentError : 1; | |
unsigned __int32 Propagated : 1; | |
unsigned __int32 Reserved : 25; | |
}; | |
/* 1049 */ | |
union _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS | |
{ | |
$04FC3C63FA6AFA10A09BBCBE2A6159E4 __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1050 */ | |
struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR | |
{ | |
unsigned int SectionOffset; | |
unsigned int SectionLength; | |
_WHEA_REVISION Revision; | |
_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS ValidBits; | |
unsigned __int8 Reserved; | |
_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS Flags; | |
_GUID SectionType; | |
_GUID FRUId; | |
_WHEA_ERROR_SEVERITY SectionSeverity; | |
char FRUText[20]; | |
}; | |
/* 1051 */ | |
struct _WHEA_ERROR_RECORD | |
{ | |
_WHEA_ERROR_RECORD_HEADER Header; | |
_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR SectionDescriptor[1]; | |
}; | |
/* 1052 */ | |
struct _HALP_ALLOC_CONTEXT | |
{ | |
_LIST_ENTRY BufferList; | |
unsigned __int64 Lock; | |
}; | |
/* 1053 */ | |
struct _MCUPDATE_INFO | |
{ | |
_LIST_ENTRY List; | |
unsigned int Status; | |
unsigned __int64 Id; | |
unsigned __int64 VendorScratch[2]; | |
}; | |
/* 1054 */ | |
struct _HARDWARE_PTE | |
{ | |
unsigned __int64 Valid : 1; | |
unsigned __int64 Write : 1; | |
unsigned __int64 Owner : 1; | |
unsigned __int64 WriteThrough : 1; | |
unsigned __int64 CacheDisable : 1; | |
unsigned __int64 Accessed : 1; | |
unsigned __int64 Dirty : 1; | |
unsigned __int64 LargePage : 1; | |
unsigned __int64 Global : 1; | |
unsigned __int64 CopyOnWrite : 1; | |
unsigned __int64 Prototype : 1; | |
unsigned __int64 reserved0 : 1; | |
unsigned __int64 PageFrameNumber : 36; | |
unsigned __int64 reserved1 : 4; | |
unsigned __int64 SoftwareWsIndex : 11; | |
unsigned __int64 NoExecute : 1; | |
}; | |
/* 1055 */ | |
struct _DEVPROPKEY | |
{ | |
_GUID fmtid; | |
unsigned int pid; | |
}; | |
/* 1056 */ | |
struct $73DDC73F6A9FBC135E9914E62BF32308 | |
{ | |
unsigned __int64 LocalAPICId : 1; | |
unsigned __int64 CpuId : 1; | |
unsigned __int64 ProcInfoCount : 6; | |
unsigned __int64 ContextInfoCount : 6; | |
unsigned __int64 Reserved : 50; | |
}; | |
/* 1057 */ | |
union _WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS | |
{ | |
$73DDC73F6A9FBC135E9914E62BF32308 __s0; | |
unsigned __int64 ValidBits; | |
}; | |
/* 1058 */ | |
struct __unaligned __declspec(align(1)) _WHEA_XPF_PROCESSOR_ERROR_SECTION | |
{ | |
_WHEA_XPF_PROCESSOR_ERROR_SECTION_VALIDBITS ValidBits; | |
unsigned __int64 LocalAPICId; | |
unsigned __int8 CpuId[48]; | |
unsigned __int8 VariableInfo[1]; | |
}; | |
/* 1059 */ | |
struct __declspec(align(4)) _SECONDARY_INTERRUPT_LINE_STATE | |
{ | |
_KINTERRUPT_POLARITY Polarity; | |
_KINTERRUPT_MODE Mode; | |
unsigned int Vector; | |
unsigned __int8 Unmasked; | |
}; | |
/* 1060 */ | |
struct _IO_APIC_REGISTERS | |
{ | |
volatile unsigned int RegisterIndex; | |
volatile unsigned int Reserved1[3]; | |
volatile unsigned int RegisterValue; | |
volatile unsigned int Reserved2[11]; | |
volatile unsigned int EndOfInterrupt; | |
}; | |
/* 1061 */ | |
struct __declspec(align(8)) _IO_APIC_DATA | |
{ | |
unsigned __int64 PhysicalAddress; | |
unsigned int Identifier; | |
_IO_APIC_REGISTERS *BaseAddress; | |
unsigned __int8 Version; | |
unsigned __int8 PinCount; | |
unsigned __int8 Initialized; | |
unsigned __int8 InitializedFirstLocalUnit; | |
unsigned int GsiBase; | |
unsigned int CmciRegister; | |
unsigned int DeferredErrorRegister; | |
unsigned __int8 IoUnitMissing; | |
}; | |
/* 1062 */ | |
struct $CA956BED62394EDCB5C8ACE196F63354 | |
{ | |
unsigned int PhysicalTarget; | |
unsigned int ClusterMask; | |
}; | |
/* 1063 */ | |
union $6888D2351E91D93821A7AE792A954730 | |
{ | |
$CA956BED62394EDCB5C8ACE196F63354 __s0; | |
unsigned int LogicalFlatTarget; | |
unsigned int RemapIndex; | |
unsigned int ClusterId; | |
struct | |
{ | |
unsigned int Low32; | |
unsigned int High32; | |
unsigned __int64 InterruptData; | |
} HypervisorTarget; | |
}; | |
/* 1064 */ | |
struct _INTERRUPT_TARGET | |
{ | |
_INTERRUPT_TARGET_TYPE Target; | |
$6888D2351E91D93821A7AE792A954730 ___u1; | |
}; | |
/* 1065 */ | |
struct _INTERRUPT_LINE | |
{ | |
unsigned int UnitId; | |
int Line; | |
}; | |
/* 1066 */ | |
struct _INTERRUPT_LINE_STATE | |
{ | |
_KINTERRUPT_POLARITY Polarity; | |
unsigned __int8 EmulateActiveBoth; | |
_KINTERRUPT_MODE TriggerMode; | |
unsigned int Flags; | |
_INTERRUPT_LINE Routing; | |
_INTERRUPT_TARGET ProcessorTarget; | |
unsigned int Vector; | |
unsigned int Priority; | |
}; | |
/* 1067 */ | |
struct _INTERRUPT_FUNCTION_TABLE | |
{ | |
int (__fastcall *InitializeLocalUnit)(void *, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int *); | |
int (__fastcall *InitializeIoUnit)(void *); | |
void (__fastcall *SetPriority)(void *, unsigned int); | |
unsigned int (__fastcall *GetLocalUnitError)(void *); | |
void (__fastcall *ClearLocalUnitError)(void *); | |
int (__fastcall *GetLogicalId)(void *, _INTERRUPT_TARGET *); | |
int (__fastcall *SetLogicalId)(void *, _INTERRUPT_TARGET *); | |
_INTERRUPT_RESULT (__fastcall *AcceptAndGetSource)(void *, int *, unsigned int *); | |
void (__fastcall *EndOfInterrupt)(void *); | |
void (__fastcall *FastEndOfInterrupt)(); | |
int (__fastcall *SetLineState)(void *, _INTERRUPT_LINE *, _INTERRUPT_LINE_STATE *); | |
int (__fastcall *RequestInterrupt)(void *, _INTERRUPT_LINE *, _INTERRUPT_TARGET *, unsigned int, _INTERRUPT_LINE *); | |
int (__fastcall *StartProcessor)(void *, unsigned int, void *, unsigned int); | |
int (__fastcall *GenerateMessage)(void *, _INTERRUPT_LINE_STATE *, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *ConvertId)(void *, unsigned int *, _INTERRUPT_TARGET *, unsigned __int8); | |
int (__fastcall *SaveLocalInterrupts)(void *, void *); | |
int (__fastcall *ReplayLocalInterrupts)(void *, void *); | |
int (__fastcall *DeinitializeLocalUnit)(void *); | |
int (__fastcall *DeinitializeIoUnit)(void *); | |
_INTERRUPT_RESULT (__fastcall *QueryAndGetSource)(void *, int *, unsigned int *, unsigned __int8 *); | |
void (__fastcall *DeactivateInterrupt)(void *, unsigned int); | |
void (__fastcall *DirectedEndOfInterrupt)(void *, unsigned int, unsigned int); | |
int (__fastcall *QueryLocalUnitInfo)(void *, unsigned int, unsigned int *, unsigned int *, _KINTERRUPT_MODE *, _KINTERRUPT_MODE *); | |
}; | |
/* 1068 */ | |
struct _REGISTERED_INTERRUPT_CONTROLLER | |
{ | |
_LIST_ENTRY ListEntry; | |
void *InternalData; | |
unsigned int InternalDataSize; | |
_INTERRUPT_FUNCTION_TABLE FunctionTable; | |
_KNOWN_CONTROLLER_TYPE KnownType; | |
unsigned int Capabilities; | |
unsigned int Flags; | |
unsigned int MaxPriority; | |
unsigned int UnitId; | |
_LIST_ENTRY LinesHead; | |
_LIST_ENTRY OutputLinesHead; | |
int MinLine; | |
int MaxLine; | |
unsigned int MaxClusterSize; | |
unsigned int MaxClusters; | |
unsigned int InterruptReplayDataSize; | |
_INTERRUPT_PROBLEM Problem; | |
int ProblemStatus; | |
const char *ProblemSourceFile; | |
unsigned int ProblemSourceLine; | |
unsigned int CustomProblem; | |
int CustomProblemStatus; | |
_UNICODE_STRING ResourceId; | |
POHANDLE__ *PowerHandle; | |
}; | |
/* 1069 */ | |
struct __unaligned __declspec(align(1)) _PROCLOCALSAPIC | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 ACPIProcessorID; | |
unsigned __int8 APICID; | |
unsigned __int8 APICEID; | |
unsigned __int8 Reserved[3]; | |
unsigned int Flags; | |
unsigned int ACPIProcessorUIDInteger; | |
char ACPIProcessorUIDString[1]; | |
}; | |
/* 1070 */ | |
struct __unaligned __declspec(align(4)) _GEN_ADDR | |
{ | |
unsigned __int8 AddressSpaceID; | |
unsigned __int8 BitWidth; | |
unsigned __int8 BitOffset; | |
unsigned __int8 AccessSize; | |
_LARGE_INTEGER Address; | |
}; | |
/* 1071 */ | |
struct $639BB82474D4A93EB0A24EB106796DDC | |
{ | |
unsigned __int32 RestartIpValid : 1; | |
unsigned __int32 ErrorIpValid : 1; | |
unsigned __int32 MachineCheckInProgress : 1; | |
unsigned __int32 LocalMceValid : 1; | |
unsigned __int32 Reserved1 : 28; | |
unsigned int Reserved2; | |
}; | |
/* 1072 */ | |
union _MCG_STATUS | |
{ | |
$639BB82474D4A93EB0A24EB106796DDC __s0; | |
unsigned __int64 QuadPart; | |
}; | |
/* 1073 */ | |
struct _MCI_STATUS_BITS_COMMON | |
{ | |
unsigned __int64 McaErrorCode : 16; | |
unsigned __int64 ModelErrorCode : 16; | |
unsigned __int64 Reserved : 25; | |
unsigned __int64 ContextCorrupt : 1; | |
unsigned __int64 AddressValid : 1; | |
unsigned __int64 MiscValid : 1; | |
unsigned __int64 ErrorEnabled : 1; | |
unsigned __int64 UncorrectedError : 1; | |
unsigned __int64 StatusOverFlow : 1; | |
unsigned __int64 Valid : 1; | |
}; | |
/* 1074 */ | |
struct _MCI_STATUS_AMD_BITS | |
{ | |
unsigned __int64 McaErrorCode : 16; | |
unsigned __int64 ModelErrorCode : 16; | |
unsigned __int64 ImplementationSpecific2 : 11; | |
unsigned __int64 Poison : 1; | |
unsigned __int64 Deferred : 1; | |
unsigned __int64 ImplementationSpecific1 : 12; | |
unsigned __int64 ContextCorrupt : 1; | |
unsigned __int64 AddressValid : 1; | |
unsigned __int64 MiscValid : 1; | |
unsigned __int64 ErrorEnabled : 1; | |
unsigned __int64 UncorrectedError : 1; | |
unsigned __int64 StatusOverFlow : 1; | |
unsigned __int64 Valid : 1; | |
}; | |
/* 1075 */ | |
struct _MCI_STATUS_INTEL_BITS | |
{ | |
unsigned __int64 McaErrorCode : 16; | |
unsigned __int64 ModelErrorCode : 16; | |
unsigned __int64 OtherInfo : 5; | |
unsigned __int64 FirmwareUpdateError : 1; | |
unsigned __int64 CorrectedErrorCount : 15; | |
unsigned __int64 ThresholdErrorStatus : 2; | |
unsigned __int64 ActionRequired : 1; | |
unsigned __int64 Signalling : 1; | |
unsigned __int64 ContextCorrupt : 1; | |
unsigned __int64 AddressValid : 1; | |
unsigned __int64 MiscValid : 1; | |
unsigned __int64 ErrorEnabled : 1; | |
unsigned __int64 UncorrectedError : 1; | |
unsigned __int64 StatusOverFlow : 1; | |
unsigned __int64 Valid : 1; | |
}; | |
/* 1076 */ | |
union _MCI_STATUS | |
{ | |
_MCI_STATUS_BITS_COMMON CommonBits; | |
_MCI_STATUS_AMD_BITS AmdBits; | |
_MCI_STATUS_INTEL_BITS IntelBits; | |
unsigned __int64 QuadPart; | |
}; | |
/* 1077 */ | |
struct _WHEA_AMD_EXTENDED_REGISTERS | |
{ | |
unsigned __int64 IPID; | |
unsigned __int64 SYND; | |
unsigned __int64 CONFIG; | |
unsigned __int64 DESTAT; | |
unsigned __int64 DEADDR; | |
unsigned __int64 MISC1; | |
unsigned __int64 MISC2; | |
unsigned __int64 MISC3; | |
unsigned __int64 MISC4; | |
unsigned __int64 RasCap; | |
unsigned __int64 Reserved[14]; | |
}; | |
/* 1078 */ | |
struct $671CED0C003D371D3A1A2F7D76E11E16 | |
{ | |
unsigned __int64 CountField : 8; | |
unsigned __int64 ControlMsrPresent : 1; | |
unsigned __int64 ExtendedMsrsPresent : 1; | |
unsigned __int64 SignalingExtensionPresent : 1; | |
unsigned __int64 ThresholdErrorStatusPresent : 1; | |
unsigned __int64 Reserved : 4; | |
unsigned __int64 ExtendedRegisterCount : 8; | |
unsigned __int64 SoftwareErrorRecoverySupported : 1; | |
unsigned __int64 EnhancedMachineCheckCapability : 1; | |
unsigned __int64 ExtendedErrorLogging : 1; | |
unsigned __int64 LocalMachineCheckException : 1; | |
}; | |
/* 1079 */ | |
union _MCG_CAP | |
{ | |
$671CED0C003D371D3A1A2F7D76E11E16 __s0; | |
unsigned __int64 QuadPart; | |
}; | |
/* 1080 */ | |
union $EC7D1BB73ED59ACC476A2EA76DE60486 | |
{ | |
unsigned __int64 ExtendedRegisters[24]; | |
_WHEA_AMD_EXTENDED_REGISTERS AMDExtendedRegisters; | |
}; | |
/* 1081 */ | |
struct _WHEA_XPF_MCA_SECTION | |
{ | |
unsigned int VersionNumber; | |
_WHEA_CPU_VENDOR CpuVendor; | |
_LARGE_INTEGER Timestamp; | |
unsigned int ProcessorNumber; | |
__unaligned __declspec(align(1)) _MCG_STATUS GlobalStatus; | |
__unaligned __declspec(align(1)) unsigned __int64 InstructionPointer; | |
unsigned int BankNumber; | |
_MCI_STATUS Status; | |
unsigned __int64 Address; | |
unsigned __int64 Misc; | |
unsigned int ExtendedRegisterCount; | |
unsigned int ApicId; | |
$EC7D1BB73ED59ACC476A2EA76DE60486 ___u12; | |
_MCG_CAP GlobalCapability; | |
}; | |
/* 1082 */ | |
struct _IOSAPIC | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 IOSAPICID; | |
unsigned __int8 Reserved; | |
unsigned int SystemVectorBase; | |
unsigned __int64 IOSAPICAddress; | |
}; | |
/* 1083 */ | |
struct _DESCRIPTION_HEADER | |
{ | |
unsigned int Signature; | |
unsigned int Length; | |
unsigned __int8 Revision; | |
unsigned __int8 Checksum; | |
char OEMID[6]; | |
char OEMTableID[8]; | |
unsigned int OEMRevision; | |
char CreatorID[4]; | |
unsigned int CreatorRev; | |
}; | |
/* 1084 */ | |
struct __declspec(align(8)) _ACPI_CACHED_TABLE | |
{ | |
_LIST_ENTRY Links; | |
_LARGE_INTEGER PhysicalAddress; | |
_DESCRIPTION_HEADER Header; | |
}; | |
/* 1085 */ | |
struct __unaligned __declspec(align(4)) _FADT | |
{ | |
_DESCRIPTION_HEADER Header; | |
unsigned int facs; | |
unsigned int dsdt; | |
unsigned __int8 int_model; | |
unsigned __int8 pm_profile; | |
unsigned __int16 sci_int_vector; | |
unsigned int smi_cmd_io_port; | |
unsigned __int8 acpi_on_value; | |
unsigned __int8 acpi_off_value; | |
unsigned __int8 s4bios_req; | |
unsigned __int8 pstate_control; | |
unsigned int pm1a_evt_blk_io_port; | |
unsigned int pm1b_evt_blk_io_port; | |
unsigned int pm1a_ctrl_blk_io_port; | |
unsigned int pm1b_ctrl_blk_io_port; | |
unsigned int pm2_ctrl_blk_io_port; | |
unsigned int pm_tmr_blk_io_port; | |
unsigned int gp0_blk_io_port; | |
unsigned int gp1_blk_io_port; | |
unsigned __int8 pm1_evt_len; | |
unsigned __int8 pm1_ctrl_len; | |
unsigned __int8 pm2_ctrl_len; | |
unsigned __int8 pm_tmr_len; | |
unsigned __int8 gp0_blk_len; | |
unsigned __int8 gp1_blk_len; | |
unsigned __int8 gp1_base; | |
unsigned __int8 cstate_control; | |
unsigned __int16 lvl2_latency; | |
unsigned __int16 lvl3_latency; | |
unsigned __int16 flush_size; | |
unsigned __int16 flush_stride; | |
unsigned __int8 duty_offset; | |
unsigned __int8 duty_width; | |
unsigned __int8 day_alarm_index; | |
unsigned __int8 month_alarm_index; | |
unsigned __int8 century_alarm_index; | |
unsigned __int16 boot_arch; | |
unsigned __int8 reserved3[1]; | |
unsigned int flags; | |
_GEN_ADDR reset_reg; | |
unsigned __int8 reset_val; | |
unsigned __int16 arm_boot_arch; | |
unsigned __int8 minor_version_number; | |
_LARGE_INTEGER x_firmware_ctrl; | |
_LARGE_INTEGER x_dsdt; | |
_GEN_ADDR x_pm1a_evt_blk; | |
_GEN_ADDR x_pm1b_evt_blk; | |
_GEN_ADDR x_pm1a_ctrl_blk; | |
_GEN_ADDR x_pm1b_ctrl_blk; | |
_GEN_ADDR x_pm2_ctrl_blk; | |
_GEN_ADDR x_pm_tmr_blk; | |
_GEN_ADDR x_gp0_blk; | |
_GEN_ADDR x_gp1_blk; | |
_GEN_ADDR sleep_control_reg; | |
_GEN_ADDR sleep_status_reg; | |
}; | |
/* 1086 */ | |
struct _PROCLOCALAPIC | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 ACPIProcessorID; | |
unsigned __int8 APICID; | |
unsigned int Flags; | |
}; | |
/* 1087 */ | |
struct _RSDT_32 | |
{ | |
_DESCRIPTION_HEADER Header; | |
unsigned int Tables[1]; | |
}; | |
/* 1088 */ | |
struct _LOCAL_NMISOURCE | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 ProcessorID; | |
__unaligned __declspec(align(1)) unsigned __int16 Flags; | |
unsigned __int8 LINTIN; | |
}; | |
/* 1089 */ | |
struct _PLATFORM_INTERRUPT | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int16 Flags; | |
unsigned __int8 InterruptType; | |
unsigned __int8 APICID; | |
unsigned __int8 ACPIEID; | |
unsigned __int8 IOSAPICVector; | |
unsigned int GlobalVector; | |
unsigned int Reserved; | |
}; | |
/* 1090 */ | |
struct _DMA_ADAPTER | |
{ | |
unsigned __int16 Version; | |
unsigned __int16 Size; | |
_DMA_OPERATIONS *DmaOperations; | |
}; | |
/* 1103 */ | |
struct _DMA_OPERATIONS | |
{ | |
unsigned int Size; | |
void (__fastcall *PutDmaAdapter)(_DMA_ADAPTER *); | |
void *(__fastcall *AllocateCommonBuffer)(_DMA_ADAPTER *, unsigned int, _LARGE_INTEGER *, unsigned __int8); | |
void (__fastcall *FreeCommonBuffer)(_DMA_ADAPTER *, unsigned int, _LARGE_INTEGER, void *, unsigned __int8); | |
int (__fastcall *AllocateAdapterChannel)(_DMA_ADAPTER *, _DEVICE_OBJECT *, unsigned int, _IO_ALLOCATION_ACTION (__fastcall *)(_DEVICE_OBJECT *, _IRP *, void *, void *), void *); | |
unsigned __int8 (__fastcall *FlushAdapterBuffers)(_DMA_ADAPTER *, _MDL *, void *, void *, unsigned int, unsigned __int8); | |
void (__fastcall *FreeAdapterChannel)(_DMA_ADAPTER *); | |
void (__fastcall *FreeMapRegisters)(_DMA_ADAPTER *, void *, unsigned int); | |
_LARGE_INTEGER (__fastcall *MapTransfer)(_DMA_ADAPTER *, _MDL *, void *, void *, unsigned int *, unsigned __int8); | |
unsigned int (__fastcall *GetDmaAlignment)(_DMA_ADAPTER *); | |
unsigned int (__fastcall *ReadDmaCounter)(_DMA_ADAPTER *); | |
int (__fastcall *GetScatterGatherList)(_DMA_ADAPTER *, _DEVICE_OBJECT *, _MDL *, void *, unsigned int, void (__fastcall *)(_DEVICE_OBJECT *, _IRP *, _SCATTER_GATHER_LIST *, void *), void *, unsigned __int8); | |
void (__fastcall *PutScatterGatherList)(_DMA_ADAPTER *, _SCATTER_GATHER_LIST *, unsigned __int8); | |
int (__fastcall *CalculateScatterGatherList)(_DMA_ADAPTER *, _MDL *, void *, unsigned int, unsigned int *, unsigned int *); | |
int (__fastcall *BuildScatterGatherList)(_DMA_ADAPTER *, _DEVICE_OBJECT *, _MDL *, void *, unsigned int, void (__fastcall *)(_DEVICE_OBJECT *, _IRP *, _SCATTER_GATHER_LIST *, void *), void *, unsigned __int8, void *, unsigned int); | |
int (__fastcall *BuildMdlFromScatterGatherList)(_DMA_ADAPTER *, _SCATTER_GATHER_LIST *, _MDL *, _MDL **); | |
int (__fastcall *GetDmaAdapterInfo)(_DMA_ADAPTER *, _DMA_ADAPTER_INFO *); | |
int (__fastcall *GetDmaTransferInfo)(_DMA_ADAPTER *, _MDL *, unsigned __int64, unsigned int, unsigned __int8, _DMA_TRANSFER_INFO *); | |
int (__fastcall *InitializeDmaTransferContext)(_DMA_ADAPTER *, void *); | |
void *(__fastcall *AllocateCommonBufferEx)(_DMA_ADAPTER *, _LARGE_INTEGER *, unsigned int, _LARGE_INTEGER *, unsigned __int8, unsigned int); | |
int (__fastcall *AllocateAdapterChannelEx)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, unsigned int, unsigned int, _IO_ALLOCATION_ACTION (__fastcall *)(_DEVICE_OBJECT *, _IRP *, void *, void *), void *, void **); | |
int (__fastcall *ConfigureAdapterChannel)(_DMA_ADAPTER *, unsigned int, void *); | |
unsigned __int8 (__fastcall *CancelAdapterChannel)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *); | |
int (__fastcall *MapTransferEx)(_DMA_ADAPTER *, _MDL *, void *, unsigned __int64, unsigned int, unsigned int *, unsigned __int8, _SCATTER_GATHER_LIST *, unsigned int, void (__fastcall *)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, DMA_COMPLETION_STATUS), void *); | |
int (__fastcall *GetScatterGatherListEx)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, _MDL *, unsigned __int64, unsigned int, unsigned int, void (__fastcall *)(_DEVICE_OBJECT *, _IRP *, _SCATTER_GATHER_LIST *, void *), void *, unsigned __int8, void (__fastcall *)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, DMA_COMPLETION_STATUS), void *, _SCATTER_GATHER_LIST **); | |
int (__fastcall *BuildScatterGatherListEx)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, _MDL *, unsigned __int64, unsigned int, unsigned int, void (__fastcall *)(_DEVICE_OBJECT *, _IRP *, _SCATTER_GATHER_LIST *, void *), void *, unsigned __int8, void *, unsigned int, void (__fastcall *)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, DMA_COMPLETION_STATUS), void *, void *); | |
int (__fastcall *FlushAdapterBuffersEx)(_DMA_ADAPTER *, _MDL *, void *, unsigned __int64, unsigned int, unsigned __int8); | |
void (__fastcall *FreeAdapterObject)(_DMA_ADAPTER *, _IO_ALLOCATION_ACTION); | |
int (__fastcall *CancelMappedTransfer)(_DMA_ADAPTER *, void *); | |
int (__fastcall *AllocateDomainCommonBuffer)(_DMA_ADAPTER *, void *, _LARGE_INTEGER *, unsigned int, unsigned int, _MEMORY_CACHING_TYPE *, unsigned int, _LARGE_INTEGER *, void **); | |
int (__fastcall *FlushDmaBuffer)(_DMA_ADAPTER *, _MDL *, unsigned __int8); | |
int (__fastcall *JoinDmaDomain)(_DMA_ADAPTER *, void *); | |
int (__fastcall *LeaveDmaDomain)(_DMA_ADAPTER *); | |
void *(__fastcall *GetDmaDomain)(_DMA_ADAPTER *); | |
void *(__fastcall *AllocateCommonBufferWithBounds)(_DMA_ADAPTER *, _LARGE_INTEGER *, _LARGE_INTEGER *, unsigned int, unsigned int, _MEMORY_CACHING_TYPE *, unsigned int, _LARGE_INTEGER *); | |
int (__fastcall *AllocateCommonBufferVector)(_DMA_ADAPTER *, _LARGE_INTEGER, _LARGE_INTEGER, _MEMORY_CACHING_TYPE, unsigned int, unsigned int, unsigned int, unsigned __int64, _DMA_COMMON_BUFFER_VECTOR **); | |
void (__fastcall *GetCommonBufferFromVectorByIndex)(_DMA_ADAPTER *, _DMA_COMMON_BUFFER_VECTOR *, unsigned int, void **, _LARGE_INTEGER *); | |
void (__fastcall *FreeCommonBufferFromVector)(_DMA_ADAPTER *, _DMA_COMMON_BUFFER_VECTOR *, unsigned int); | |
void (__fastcall *FreeCommonBufferVector)(_DMA_ADAPTER *, _DMA_COMMON_BUFFER_VECTOR *); | |
}; | |
/* 1091 */ | |
struct _SCATTER_GATHER_ELEMENT | |
{ | |
_LARGE_INTEGER Address; | |
unsigned int Length; | |
unsigned __int64 Reserved; | |
}; | |
/* 1092 */ | |
struct _SCATTER_GATHER_LIST | |
{ | |
unsigned int NumberOfElements; | |
unsigned __int64 Reserved; | |
_SCATTER_GATHER_ELEMENT Elements[]; | |
}; | |
/* 1093 */ | |
struct _DMA_ADAPTER_INFO_V1 | |
{ | |
unsigned int ReadDmaCounterAvailable; | |
unsigned int ScatterGatherLimit; | |
unsigned int DmaAddressWidth; | |
unsigned int Flags; | |
unsigned int MinimumTransferUnit; | |
}; | |
/* 1094 */ | |
struct _DMA_ADAPTER_INFO | |
{ | |
unsigned int Version; | |
_DMA_ADAPTER_INFO_V1 V1; | |
}; | |
/* 1095 */ | |
struct _DMA_TRANSFER_INFO_V1 | |
{ | |
unsigned int MapRegisterCount; | |
unsigned int ScatterGatherElementCount; | |
unsigned int ScatterGatherListSize; | |
}; | |
/* 1096 */ | |
struct _DMA_TRANSFER_INFO_V2 | |
{ | |
unsigned int MapRegisterCount; | |
unsigned int ScatterGatherElementCount; | |
unsigned int ScatterGatherListSize; | |
unsigned int LogicalPageCount; | |
}; | |
/* 1097 */ | |
union $072BB528A37A7BE554B081BEEB47E713 | |
{ | |
_DMA_TRANSFER_INFO_V1 V1; | |
_DMA_TRANSFER_INFO_V2 V2; | |
}; | |
/* 1098 */ | |
struct _DMA_TRANSFER_INFO | |
{ | |
unsigned int Version; | |
$072BB528A37A7BE554B081BEEB47E713 ___u1; | |
}; | |
/* 1102 */ | |
struct _DMA_COMMON_BUFFER_VECTOR | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned __int64 SizeOfEntries; | |
unsigned int NumberOfEntries; | |
_HALP_DMA_DOMAIN_OBJECT *Domain; | |
_MDL *Mdl; | |
void *BaseAddress; | |
unsigned __int64 BaseLogicalAddress; | |
_DMA_COMMON_BUFFER_ENTRY *Entries; | |
}; | |
/* 1100 */ | |
struct __declspec(align(8)) _HALP_DMA_DOMAIN_OBJECT | |
{ | |
_LIST_ENTRY ListEntry; | |
_LARGE_INTEGER MaximumPhysicalAddress; | |
_LARGE_INTEGER BoundaryAddressMultiple; | |
unsigned __int8 CacheCoherent; | |
unsigned __int8 FirmwareReserved; | |
void *IommuDomainPointer; | |
void *LaState; | |
unsigned __int64 LaStateLock; | |
_EXT_IOMMU_TRANSLATION_TYPE TranslationType; | |
_ADAPTER_OBJECT *OwningAdapter; | |
_RTL_RB_TREE CommonBufferRoot; | |
unsigned __int64 CommonBufferTreeLock; | |
_LIST_ENTRY VectorCommonBufferListHead; | |
unsigned __int64 VectorCommonBufferLock; | |
unsigned int DomainRefCount; | |
}; | |
/* 1101 */ | |
struct _DMA_COMMON_BUFFER_ENTRY | |
{ | |
void *VirtualAddress; | |
_LARGE_INTEGER LogicalAddress; | |
}; | |
/* 1106 */ | |
struct __declspec(align(8)) _HALP_DMA_TRANSLATION_BUFFER_POSITION | |
{ | |
_HALP_DMA_TRANSLATION_BUFFER *Buffer; | |
unsigned int Offset; | |
}; | |
/* 1107 */ | |
struct _HALP_DMA_ADAPTER_OBJECT | |
{ | |
_DMA_ADAPTER DmaHeader; | |
_RTL_BITMAP *ContiguousMapRegisters; | |
_HALP_DMA_TRANSLATION_ENTRY *ScatterBufferListHead; | |
unsigned int NumberOfFreeScatterBuffers; | |
_HALP_DMA_TRANSLATION_BUFFER *ContiguousTranslations; | |
_HALP_DMA_TRANSLATION_BUFFER *ScatterTranslations; | |
_HALP_DMA_TRANSLATION_BUFFER_POSITION ContiguousTranslationEnd; | |
_HALP_DMA_TRANSLATION_BUFFER_POSITION ScatterTranslationEnd; | |
struct | |
{ | |
_HALP_DMA_TRANSLATION_BUFFER_POSITION ContiguousHint; | |
_HALP_DMA_TRANSLATION_BUFFER_POSITION ScatterHint; | |
} CrashDump; | |
unsigned __int64 SpinLock; | |
unsigned __int64 GrowLock; | |
_LARGE_INTEGER MaximumPhysicalAddress; | |
unsigned __int8 IsMasterAdapter; | |
unsigned __int8 DmaCanCross64K; | |
unsigned int LibraryVersion; | |
}; | |
/* 1126 */ | |
struct $BCA063EA9D4A1F28601656FA4A4DA511 | |
{ | |
unsigned __int64 ResourceWaitLock; | |
_LIST_ENTRY ResourceWaitQueue; | |
_LIST_ENTRY ChannelResourceWaitQueue; | |
}; | |
/* 1127 */ | |
union $8CFA729D2760FAF7124DD0A1C6886FA7 | |
{ | |
_KDEVICE_QUEUE ChannelWaitQueue; | |
$BCA063EA9D4A1F28601656FA4A4DA511 __s1; | |
}; | |
/* 1128 */ | |
struct $78D1344AB1B57913227620E40CB62AE5 | |
{ | |
unsigned __int8 Dma32BitAddresses; | |
unsigned __int8 Dma64BitAddresses; | |
}; | |
/* 1129 */ | |
union $B1A432C1C4031C9B4664D45D838B26B6 | |
{ | |
$78D1344AB1B57913227620E40CB62AE5 __s0; | |
unsigned int DmaAddressWidth; | |
}; | |
/* 1125 */ | |
struct __declspec(align(8)) _HALP_EMERGENCY_LA_QUEUE_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
_HALP_EMERGENCY_LA_QUEUE_TYPE EntryType; | |
}; | |
/* 1099 */ | |
struct _ADAPTER_OBJECT | |
{ | |
_HALP_DMA_ADAPTER_OBJECT AdapterObject; | |
_HALP_DMA_MASTER_ADAPTER_OBJECT *MasterAdapter; | |
_LIST_ENTRY WaitQueueEntry; | |
$8CFA729D2760FAF7124DD0A1C6886FA7 ___u3; | |
unsigned __int8 ResourceQueueBusy; | |
__declspec(align(8)) unsigned int MapRegistersPerChannel; | |
void *MapRegisterBase; | |
unsigned int NumberOfMapRegisters; | |
unsigned int MaxTransferLength; | |
void *CrashDumpRegisterBase[2]; | |
unsigned int NumberOfCrashDumpRegisters[2]; | |
unsigned int CrashDumpRegisterRefCount[2]; | |
_LIST_ENTRY AdapterCrashDumpList; | |
_MDL *MapRegisterMdl; | |
unsigned __int64 MapRegisterMdlLock; | |
_EX_PUSH_LOCK ExpiredLock; | |
void *AllocationHandle; | |
void *VirtualAddress; | |
unsigned __int8 IsAllocationMdlBased; | |
unsigned __int8 NoLocalPool; | |
unsigned __int8 ExpiredFlag; | |
_WAIT_CONTEXT_BLOCK *CurrentWcb; | |
_DMA_TRANSFER_CONTEXT *CurrentTransferContext; | |
_HALP_DMA_CONTROLLER *DmaController; | |
unsigned int Controller; | |
unsigned int ChannelNumber; | |
unsigned int RequestLine; | |
unsigned int RequestedChannelCount; | |
unsigned int AllocatedChannelCount; | |
unsigned int AllocatedChannels[8]; | |
void *ChannelAdapter; | |
unsigned __int8 NeedsMapRegisters; | |
unsigned __int8 MasterDevice; | |
unsigned __int8 ScatterGather; | |
unsigned __int8 AutoInitialize; | |
unsigned __int8 IgnoreCount; | |
unsigned __int8 CacheCoherent; | |
$B1A432C1C4031C9B4664D45D838B26B6 ___u37; | |
_DMA_WIDTH DmaPortWidth; | |
_LARGE_INTEGER DeviceAddress; | |
_LIST_ENTRY AdapterList; | |
_WORK_QUEUE_ITEM WorkItem; | |
_HALP_DMA_DOMAIN_OBJECT *DomainPointer; | |
_EXT_IOMMU_TRANSLATION_TYPE TranslationType; | |
unsigned __int8 AdapterInUse; | |
_DEVICE_OBJECT *DeviceObject; | |
_EXT_IOMMU_DEVICE_ID *DeviceId; | |
void *IommuDevice; | |
_MDL *ScatterGatherMdl; | |
unsigned __int64 LowMemoryLogicalAddressBase; | |
unsigned __int64 LowMemoryLogicalAddressQueueLock; | |
_LIST_ENTRY LowMemoryLogicalAddressQueue; | |
unsigned __int8 LowMemoryLogicalAddressQueueInUse; | |
_HALP_EMERGENCY_LA_QUEUE_ENTRY LowMemoryLogicalAddressQueueEntry; | |
_HALP_DMA_ADAPTER_ALLOCATION_STATE AllocationState; | |
unsigned int ScatterGatherBufferLength; | |
_SCATTER_GATHER_LIST ScatterGatherBuffer; | |
}; | |
/* 1104 */ | |
struct __declspec(align(8)) _HALP_DMA_TRANSLATION_ENTRY | |
{ | |
unsigned __int64 PhysicalAddress; | |
_HALP_DMA_TRANSLATION_ENTRY *Next; | |
unsigned int MappedLength; | |
unsigned __int64 LogicalAddress; | |
unsigned __int64 LogicalMappedLength; | |
unsigned __int64 NextLogicalAddress; | |
union | |
{ | |
void *VirtualAddress; | |
struct | |
{ | |
unsigned __int64 BoundToMaster : 1; | |
unsigned __int64 BoundToScatterPool : 1; | |
unsigned __int64 OwnedByMaster : 1; | |
unsigned __int64 OwnedByScatterPool : 1; | |
unsigned __int64 TemporaryMapping : 1; | |
unsigned __int64 ZeroBuffer : 1; | |
unsigned __int64 Address : 58; | |
} Flags; | |
} u; | |
_HALP_DMA_TRANSLATION_ENTRY *NextMapping; | |
unsigned __int8 LogicalBounceBufferPremapped; | |
}; | |
/* 1105 */ | |
struct _HALP_DMA_TRANSLATION_BUFFER | |
{ | |
_HALP_DMA_TRANSLATION_BUFFER *Next; | |
unsigned int EntryCount; | |
_HALP_DMA_TRANSLATION_ENTRY *Entries; | |
}; | |
/* 1108 */ | |
struct _HALP_DMA_MASTER_ADAPTER_OBJECT | |
{ | |
_HALP_DMA_ADAPTER_OBJECT AdapterObject; | |
_LIST_ENTRY ContiguousAdapterQueue; | |
_LIST_ENTRY ScatterAdapterQueue; | |
unsigned int MapBufferSize; | |
_LARGE_INTEGER MapBufferPhysicalAddress; | |
unsigned int ContiguousPageCount; | |
unsigned int ContiguousPageLimit; | |
unsigned int ScatterPageCount; | |
unsigned int ScatterPageLimit; | |
}; | |
/* 1109 */ | |
struct _DMA_TRANSFER_CONTEXT_V1 | |
{ | |
int DmaState; | |
unsigned int TransferState; | |
_WAIT_CONTEXT_BLOCK Wcb; | |
void *HalWcb; | |
}; | |
/* 1110 */ | |
struct _DMA_TRANSFER_CONTEXT | |
{ | |
unsigned int Version; | |
_DMA_TRANSFER_CONTEXT_V1 V1; | |
}; | |
/* 1114 */ | |
struct _DMA_FUNCTION_TABLE | |
{ | |
void (__fastcall *InitializeController)(void *); | |
unsigned __int8 (__fastcall *ValidateRequestLineBinding)(void *, _DMA_REQUEST_LINE_BINDING_DESCRIPTION *); | |
unsigned int (__fastcall *QueryMaxFragments)(void *, unsigned int, unsigned int); | |
void (__fastcall *ProgramChannel)(void *, unsigned int, unsigned int, _DMA_SCATTER_GATHER_LIST *, _LARGE_INTEGER, unsigned __int8, unsigned __int8); | |
int (__fastcall *ConfigureChannel)(void *, unsigned int, unsigned int, void *); | |
void (__fastcall *FlushChannel)(void *, unsigned int); | |
unsigned __int8 (__fastcall *HandleInterrupt)(void *, unsigned int *, _DMA_INTERRUPT_TYPE *); | |
unsigned int (__fastcall *ReadDmaCounter)(void *, unsigned int); | |
void (__fastcall *ReportCommonBuffer)(void *, unsigned int, void *, _LARGE_INTEGER); | |
unsigned __int8 (__fastcall *CancelTransfer)(void *, unsigned int); | |
}; | |
/* 1115 */ | |
struct __declspec(align(8)) _HALP_DMA_CONTROLLER | |
{ | |
_LIST_ENTRY Controllers; | |
_LIST_ENTRY AdapterList; | |
unsigned int ControllerId; | |
unsigned int MinimumRequestLine; | |
unsigned int MaximumRequestLine; | |
unsigned int ChannelCount; | |
unsigned int ScatterGatherLimit; | |
_HALP_DMA_CHANNEL *Channels; | |
void *ExtensionData; | |
unsigned __int8 CacheCoherent; | |
unsigned int DmaAddressWidth; | |
_DMA_FUNCTION_TABLE Operations; | |
unsigned int SupportedPortWidths; | |
unsigned int MinimumTransferUnit; | |
unsigned __int64 Lock; | |
unsigned __int8 Irql; | |
unsigned __int8 GeneratesInterrupt; | |
int Gsi; | |
_KINTERRUPT_POLARITY InterruptPolarity; | |
_KINTERRUPT_MODE InterruptMode; | |
_UNICODE_STRING ResourceId; | |
POHANDLE__ *PowerHandle; | |
unsigned __int8 PowerActive; | |
}; | |
/* 1116 */ | |
struct $2A6D339208598E0F97414D6BC3E820FD | |
{ | |
unsigned __int16 PciSegmentNumber; | |
unsigned __int16 PhantomFunctionBits : 2; | |
unsigned __int16 BusRange : 1; | |
unsigned __int16 Reserved : 5; | |
unsigned __int16 StartBusNumber : 8; | |
unsigned __int16 Bdf; | |
unsigned __int16 DevicePathLength; | |
}; | |
/* 1117 */ | |
struct $820BD5CDF206D52B7BD0FECFFC4DDC11 | |
{ | |
_BYTE gap0[4]; | |
unsigned __int8 SubordinateBus; | |
unsigned __int8 SecondaryBus; | |
}; | |
/* 1118 */ | |
union $C9AA14051B6DBF92C08E46925D729118 | |
{ | |
unsigned __int64 AsUINT64; | |
$2A6D339208598E0F97414D6BC3E820FD __s1; | |
$820BD5CDF206D52B7BD0FECFFC4DDC11 __s2; | |
}; | |
/* 1119 */ | |
struct _EXT_IOMMU_DEVICE_ID_PCI | |
{ | |
$C9AA14051B6DBF92C08E46925D729118 ___u0; | |
wchar_t *DevicePath; | |
}; | |
/* 1120 */ | |
struct _EXT_IOMMU_DEVICE_ID_ACPI | |
{ | |
const char *ObjectName; | |
}; | |
/* 1121 */ | |
struct _EXT_IOMMU_DEVICE_ID_TEST | |
{ | |
unsigned __int64 UniqueId; | |
}; | |
/* 1122 */ | |
struct _EXT_IOMMU_DEVICE_ID_GIC | |
{ | |
unsigned int LineNumber; | |
}; | |
/* 1123 */ | |
union $A8E20D79F038F96BF058BF4702C772A6 | |
{ | |
_EXT_IOMMU_DEVICE_ID_PCI Pci; | |
_EXT_IOMMU_DEVICE_ID_ACPI Acpi; | |
unsigned __int8 IoApicId; | |
unsigned __int64 LogicalId; | |
_EXT_IOMMU_DEVICE_ID_TEST Test; | |
_EXT_IOMMU_DEVICE_ID_GIC Gic; | |
}; | |
/* 1124 */ | |
struct _EXT_IOMMU_DEVICE_ID | |
{ | |
_EXT_IOMMU_DEVICE_TYPE DeviceType; | |
$A8E20D79F038F96BF058BF4702C772A6 ___u1; | |
}; | |
/* 1111 */ | |
struct _HALP_DMA_CHANNEL | |
{ | |
unsigned int ChannelNumber; | |
unsigned __int8 Initialized; | |
unsigned __int8 Busy; | |
unsigned __int8 Complete; | |
void (__fastcall *CurrentCompletionRoutine)(_DMA_ADAPTER *, _DEVICE_OBJECT *, void *, DMA_COMPLETION_STATUS); | |
void *CurrentCompletionContext; | |
_ADAPTER_OBJECT *CurrentChildAdapter; | |
_DMA_INTERRUPT_TYPE CurrentInterruptType; | |
_KDPC Dpc; | |
unsigned __int8 GeneratesInterrupt; | |
int Gsi; | |
_KINTERRUPT_POLARITY InterruptPolarity; | |
_KINTERRUPT_MODE InterruptMode; | |
unsigned int CommonBufferLength; | |
void *CommonBufferVirtualAddress; | |
_LARGE_INTEGER CommonBufferLogicalAddress; | |
_LIST_ENTRY AdapterQueue; | |
}; | |
/* 1112 */ | |
struct _DMA_REQUEST_LINE_BINDING_DESCRIPTION | |
{ | |
unsigned int RequestLine; | |
unsigned int ChannelNumber; | |
}; | |
/* 1113 */ | |
struct _DMA_SCATTER_GATHER_LIST | |
{ | |
unsigned int NumberOfElements; | |
unsigned __int64 Reserved; | |
_SCATTER_GATHER_ELEMENT Elements[]; | |
}; | |
/* 1130 */ | |
struct __unaligned __declspec(align(4)) _RSDP | |
{ | |
unsigned __int64 Signature; | |
unsigned __int8 Checksum; | |
unsigned __int8 OEMID[6]; | |
unsigned __int8 Revision; | |
unsigned int RsdtAddress; | |
unsigned int Length; | |
_LARGE_INTEGER XsdtAddress; | |
unsigned __int8 XChecksum; | |
unsigned __int8 Reserved[3]; | |
}; | |
/* 1131 */ | |
struct __unaligned __declspec(align(4)) _XSDT | |
{ | |
_DESCRIPTION_HEADER Header; | |
_LARGE_INTEGER Tables[1]; | |
}; | |
/* 1132 */ | |
struct _IOAPIC | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 IOAPICID; | |
unsigned __int8 Reserved; | |
unsigned int IOAPICAddress; | |
unsigned int SystemVectorBase; | |
}; | |
/* 1133 */ | |
union $3792941B86FD62B399CB245EE0244834 | |
{ | |
struct __declspec(align(2)) | |
{ | |
unsigned __int64 Address; | |
unsigned __int8 Consumed; | |
unsigned __int16 ErrorCode; | |
unsigned __int8 ErrorIpValid; | |
unsigned __int8 RestartIpValid; | |
unsigned __int8 ClearPoison; | |
} MemoryError; | |
struct | |
{ | |
unsigned __int64 PmemErrInfo; | |
} PmemError; | |
}; | |
/* 1134 */ | |
struct _WHEA_RECOVERY_CONTEXT | |
{ | |
$3792941B86FD62B399CB245EE0244834 ___u0; | |
unsigned __int64 PartitionId; | |
unsigned int VpIndex; | |
_WHEA_RECOVERY_CONTEXT_ERROR_TYPE ErrorType; | |
}; | |
/* 1135 */ | |
struct _HAL_HV_SVM_SYSTEM_CAPABILITIES | |
{ | |
unsigned __int32 SvmSupported : 1; | |
unsigned __int32 GpaAlwaysValid : 1; | |
unsigned int MaxPasidSpaceCount; | |
unsigned int MaxPasidSpacePasidCount; | |
unsigned int MaxPrqSize; | |
unsigned int IommuCount; | |
unsigned int MinIommuPasidCount; | |
}; | |
/* 1136 */ | |
struct _HAL_HV_SVM_DEVICE_CAPABILITIES | |
{ | |
unsigned __int32 SvmSupported : 1; | |
unsigned __int32 PciExecute : 1; | |
unsigned __int32 NoExecute : 1; | |
unsigned __int32 Reserved : 28; | |
unsigned __int32 OverflowPossible : 1; | |
unsigned int PasidCount; | |
unsigned int IommuIndex; | |
}; | |
/* 1137 */ | |
struct $35D744587036AE522A5F9ADC4D2A64A6 | |
{ | |
unsigned __int64 NumberOfEntries : 10; | |
unsigned __int64 PageSize : 2; | |
}; | |
/* 1138 */ | |
struct _KTB_FLUSH_VA | |
{ | |
union | |
{ | |
$35D744587036AE522A5F9ADC4D2A64A6 __s0; | |
void *Va; | |
unsigned __int64 VaLong; | |
} u1; | |
}; | |
/* 1139 */ | |
struct __declspec(align(4)) _HAL_HV_DMA_DOMAIN_INFO | |
{ | |
unsigned int DomainId; | |
unsigned __int8 IsStage1; | |
}; | |
/* 1140 */ | |
struct _HAL_INTEL_ENLIGHTENMENT_INFORMATION | |
{ | |
unsigned int Enlightenments; | |
unsigned int HypervisorConnected; | |
void (__fastcall *EndOfInterrupt)(); | |
void (__fastcall *ApicWriteIcr)(unsigned int, unsigned int); | |
unsigned int Reserved0; | |
unsigned int SpinCountMask; | |
void (__fastcall *LongSpinWait)(unsigned int); | |
unsigned __int64 (__fastcall *GetReferenceTime)(); | |
int (__fastcall *SetSystemSleepProperty)(unsigned int, unsigned __int8, unsigned __int8); | |
int (__fastcall *EnterSleepState)(unsigned int); | |
int (__fastcall *NotifyDebugDeviceAvailable)(); | |
int (__fastcall *MapDeviceInterrupt)(unsigned __int64, void *, _GROUP_AFFINITY *, void *); | |
int (__fastcall *UnmapDeviceInterrupt)(unsigned __int64, void *); | |
int (__fastcall *RetargetDeviceInterrupt)(unsigned __int64, void *, void *, _GROUP_AFFINITY *, void *); | |
int (__fastcall *SetHpetConfig)(_LARGE_INTEGER, unsigned int, unsigned __int64, unsigned __int8, void *); | |
int (__fastcall *NotifyHpetEnabled)(); | |
int (__fastcall *QueryAssociatedProcessors)(unsigned int, unsigned int *, unsigned int *); | |
int (__fastcall *ReadMultipleMsr)(unsigned int, unsigned int, unsigned int *, unsigned __int64 *); | |
int (__fastcall *WriteMultipleMsr)(unsigned int, unsigned int, unsigned int *, unsigned __int64 *); | |
int (__fastcall *ReadCpuid)(unsigned int, unsigned int, unsigned int *, unsigned int *, unsigned int *, unsigned int *); | |
int (__fastcall *LpWritebackInvalidate)(unsigned int); | |
int (__fastcall *GetMachineCheckContext)(unsigned int, unsigned int *, unsigned __int64 *, unsigned int *); | |
int (__fastcall *SuspendPartition)(unsigned __int64); | |
int (__fastcall *ResumePartition)(unsigned __int64); | |
int (__fastcall *SetSystemMachineCheckProperty)(void *); | |
int (__fastcall *WheaErrorNotification)(_WHEA_RECOVERY_CONTEXT *, unsigned __int8, unsigned __int8); | |
unsigned int (__fastcall *GetProcessorIndexFromVpIndex)(unsigned int); | |
int (__fastcall *SyntheticClusterIpi)(_KAFFINITY_EX *, unsigned int); | |
unsigned __int8 (__fastcall *VpStartEnabled)(); | |
int (__fastcall *StartVirtualProcessor)(unsigned int, void *); | |
int (__fastcall *GetVpIndexFromApicId)(unsigned int, unsigned int *); | |
int (__fastcall *IumAccessPciDevice)(unsigned __int8, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, void *); | |
unsigned __int64 (__fastcall *IumEfiRuntimeService)(unsigned int, void *, unsigned __int64, unsigned __int64 *); | |
void (__fastcall *SvmGetSystemCapabilities)(_HAL_HV_SVM_SYSTEM_CAPABILITIES *); | |
int (__fastcall *SvmGetDeviceCapabilities)(unsigned int, _HAL_HV_SVM_DEVICE_CAPABILITIES *); | |
int (__fastcall *SvmCreatePasidSpace)(unsigned int, unsigned int); | |
int (__fastcall *SvmSetPasidAddressSpace)(unsigned int, unsigned int, unsigned __int64); | |
void (__fastcall *SvmFlushPasid)(unsigned int, unsigned int, unsigned int, _KTB_FLUSH_VA *); | |
int (__fastcall *SvmAttachPasidSpace)(unsigned int, unsigned int, unsigned int, unsigned int); | |
int (__fastcall *SvmDetachPasidSpace)(unsigned int); | |
int (__fastcall *SvmEnablePasid)(unsigned int, unsigned int); | |
int (__fastcall *SvmDisablePasid)(unsigned int, unsigned int); | |
int (__fastcall *SvmAcknowledgePageRequest)(unsigned int, void *, unsigned int *); | |
int (__fastcall *SvmCreatePrQueue)(unsigned int, unsigned int, _LARGE_INTEGER, unsigned int, unsigned int); | |
int (__fastcall *SvmDeletePrQueue)(unsigned int); | |
int (__fastcall *SvmClearPrqStalled)(unsigned int); | |
int (__fastcall *SvmSetDeviceEnabled)(unsigned int, unsigned __int8); | |
int (__fastcall *HvDebuggerPowerHandler)(unsigned __int8); | |
int (__fastcall *SetQpcBias)(unsigned __int64); | |
unsigned __int64 (__fastcall *GetQpcBias)(); | |
int (__fastcall *RegisterDeviceId)(_EXT_IOMMU_DEVICE_ID *, unsigned __int64); | |
int (__fastcall *UnregisterDeviceId)(unsigned __int64); | |
int (__fastcall *AllocateDeviceDomain)(_HAL_HV_DMA_DOMAIN_INFO *); | |
int (__fastcall *AttachDeviceDomain)(_EXT_IOMMU_DEVICE_ID *, _HAL_HV_DMA_DOMAIN_INFO *); | |
int (__fastcall *DetachDeviceDomain)(unsigned __int64); | |
int (__fastcall *DeleteDeviceDomain)(_HAL_HV_DMA_DOMAIN_INFO *); | |
int (__fastcall *MapDeviceLogicalRange)(_HAL_HV_DMA_DOMAIN_INFO *, unsigned int, unsigned __int64, unsigned __int64 *, unsigned __int64 *, unsigned __int8); | |
int (__fastcall *UnmapDeviceLogicalRange)(_HAL_HV_DMA_DOMAIN_INFO *, unsigned __int64, unsigned __int64 *); | |
int (__fastcall *MapDeviceSparsePages)(_HAL_HV_DMA_DOMAIN_INFO *, unsigned int, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *UnmapDeviceSparsePages)(_HAL_HV_DMA_DOMAIN_INFO *, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *GetDmaGuardEnabled)(unsigned __int8 *); | |
int (__fastcall *UpdateMicrocode)(void *, unsigned int); | |
int (__fastcall *GetSintMessage)(unsigned __int8, void **); | |
int (__fastcall *SetRootFaultReportingReady)(); | |
}; | |
/* 1141 */ | |
struct _CONTROLLER_OBJECT | |
{ | |
__int16 Type; | |
__int16 Size; | |
void *ControllerExtension; | |
_KDEVICE_QUEUE DeviceWaitQueue; | |
unsigned int Spare1; | |
_LARGE_INTEGER Spare2; | |
}; | |
/* 1142 */ | |
struct _FACS | |
{ | |
unsigned int Signature; | |
unsigned int Length; | |
unsigned int HardwareSignature; | |
unsigned int pFirmwareWakingVector; | |
unsigned int GlobalLock; | |
unsigned int Flags; | |
_LARGE_INTEGER x_FirmwareWakingVector; | |
unsigned __int8 version; | |
unsigned __int8 Reserved[31]; | |
}; | |
/* 1143 */ | |
struct _SECONDARY_INTERRUPT_PROVIDER_INTERFACE | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
void *Context; | |
unsigned int GsivBase; | |
unsigned __int16 GsivSize; | |
_DRIVER_OBJECT *DriverObject; | |
void *Reserved1; | |
void *Reserved2; | |
void *Reserved3; | |
void *Reserved4; | |
void *Reserved5; | |
void *Reserved6; | |
void *Reserved7; | |
}; | |
/* 1144 */ | |
struct _SECONDARY_IC_LIST_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int GsivBase; | |
unsigned int GsivSize; | |
_SECONDARY_INTERRUPT_PROVIDER_INTERFACE Interface; | |
volatile int BusyCount; | |
volatile int ExclusiveWaiterCount; | |
_KEVENT NotificationEvent; | |
_LIST_ENTRY SignalListEntry; | |
_SECONDARY_INTERRUPT_LINE_STATE State[1]; | |
}; | |
/* 1145 */ | |
struct _IO_NMISOURCE | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int16 Flags; | |
unsigned int GlobalSystemInterruptVector; | |
}; | |
/* 1146 */ | |
struct __unaligned __declspec(align(2)) _ISA_VECTOR | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Length; | |
unsigned __int8 Bus; | |
unsigned __int8 Source; | |
unsigned int GlobalSystemInterruptVector; | |
unsigned __int16 Flags; | |
}; | |
/* 1147 */ | |
struct $488C0DA93B204848A74B494FE302347F | |
{ | |
unsigned __int64 ProcessorType : 1; | |
unsigned __int64 InstructionSet : 1; | |
unsigned __int64 ErrorType : 1; | |
unsigned __int64 Operation : 1; | |
unsigned __int64 Flags : 1; | |
unsigned __int64 Level : 1; | |
unsigned __int64 CPUVersion : 1; | |
unsigned __int64 CPUBrandString : 1; | |
unsigned __int64 ProcessorId : 1; | |
unsigned __int64 TargetAddress : 1; | |
unsigned __int64 RequesterId : 1; | |
unsigned __int64 ResponderId : 1; | |
unsigned __int64 InstructionPointer : 1; | |
unsigned __int64 Reserved : 51; | |
}; | |
/* 1148 */ | |
union _WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS | |
{ | |
$488C0DA93B204848A74B494FE302347F __s0; | |
unsigned __int64 ValidBits; | |
}; | |
/* 1149 */ | |
struct _WHEA_PROCESSOR_GENERIC_ERROR_SECTION | |
{ | |
_WHEA_PROCESSOR_GENERIC_ERROR_SECTION_VALIDBITS ValidBits; | |
unsigned __int8 ProcessorType; | |
unsigned __int8 InstructionSet; | |
unsigned __int8 ErrorType; | |
unsigned __int8 Operation; | |
unsigned __int8 Flags; | |
unsigned __int8 Level; | |
unsigned __int16 Reserved; | |
unsigned __int64 CPUVersion; | |
unsigned __int8 CPUBrandString[128]; | |
unsigned __int64 ProcessorId; | |
unsigned __int64 TargetAddress; | |
unsigned __int64 RequesterId; | |
unsigned __int64 ResponderId; | |
unsigned __int64 InstructionPointer; | |
}; | |
/* 1150 */ | |
struct _MAPIC | |
{ | |
_DESCRIPTION_HEADER Header; | |
unsigned int LocalAPICAddress; | |
unsigned int Flags; | |
unsigned int APICTables[1]; | |
}; | |
/* 1151 */ | |
struct _PS_MITIGATION_OPTIONS_MAP | |
{ | |
unsigned __int64 Map[3]; | |
}; | |
/* 1152 */ | |
struct _PS_MITIGATION_AUDIT_OPTIONS_MAP | |
{ | |
unsigned __int64 Map[3]; | |
}; | |
/* 1153 */ | |
volatile struct _KSYSTEM_TIME | |
{ | |
unsigned int LowPart; | |
int High1Time; | |
int High2Time; | |
}; | |
/* 1154 */ | |
struct _XSTATE_FEATURE | |
{ | |
unsigned int Offset; | |
unsigned int Size; | |
}; | |
/* 1155 */ | |
struct $62654262369868C0312B20411168132E | |
{ | |
unsigned __int32 OptimizedSave : 1; | |
unsigned __int32 CompactionEnabled : 1; | |
}; | |
/* 1156 */ | |
union $89E8501CA91B44F061C4782786E321C4 | |
{ | |
unsigned int ControlFlags; | |
$62654262369868C0312B20411168132E __s1; | |
}; | |
/* 1157 */ | |
struct _XSTATE_CONFIGURATION | |
{ | |
unsigned __int64 EnabledFeatures; | |
unsigned __int64 EnabledVolatileFeatures; | |
unsigned int Size; | |
$89E8501CA91B44F061C4782786E321C4 ___u3; | |
_XSTATE_FEATURE Features[64]; | |
unsigned __int64 EnabledSupervisorFeatures; | |
unsigned __int64 AlignedFeatures; | |
unsigned int AllFeatureSize; | |
unsigned int AllFeatures[64]; | |
unsigned __int64 EnabledUserVisibleSupervisorFeatures; | |
}; | |
/* 1158 */ | |
struct $3D940D5D03EF7F98CEE6737EDE752E57 | |
{ | |
unsigned __int8 NXSupportPolicy : 2; | |
unsigned __int8 SEHValidationPolicy : 2; | |
unsigned __int8 CurDirDevicesSkippedForDlls : 2; | |
unsigned __int8 Reserved : 2; | |
}; | |
/* 1159 */ | |
union $B6ADBC8E27B8EABD73BC311C573F54F9 | |
{ | |
unsigned __int8 MitigationPolicies; | |
$3D940D5D03EF7F98CEE6737EDE752E57 __s1; | |
}; | |
/* 1160 */ | |
struct $4BF4056B39611650D41923F164DAFA52 | |
{ | |
unsigned __int32 DbgErrorPortPresent : 1; | |
unsigned __int32 DbgElevationEnabled : 1; | |
unsigned __int32 DbgVirtEnabled : 1; | |
unsigned __int32 DbgInstallerDetectEnabled : 1; | |
unsigned __int32 DbgLkgEnabled : 1; | |
unsigned __int32 DbgDynProcessorEnabled : 1; | |
unsigned __int32 DbgConsoleBrokerEnabled : 1; | |
unsigned __int32 DbgSecureBootEnabled : 1; | |
unsigned __int32 DbgMultiSessionSku : 1; | |
unsigned __int32 DbgMultiUsersInSessionSku : 1; | |
unsigned __int32 DbgStateSeparationEnabled : 1; | |
unsigned __int32 SpareBits : 21; | |
}; | |
/* 1161 */ | |
union $CF020F9FAEE5B1B8F63C62C29CC2C8DF | |
{ | |
unsigned int SharedDataFlags; | |
$4BF4056B39611650D41923F164DAFA52 __s1; | |
}; | |
/* 1162 */ | |
union __unaligned __declspec(align(4)) $17D1431A2343A97BBCD1FFAD47B35660 | |
{ | |
volatile _KSYSTEM_TIME TickCount; | |
volatile unsigned __int64 TickCountQuad; | |
unsigned int ReservedTickCountOverlay[3]; | |
}; | |
/* 1163 */ | |
struct $F91ACE6F13277DFC9425B9B8BBCB30F7 | |
{ | |
volatile unsigned __int8 QpcBypassEnabled; | |
unsigned __int8 QpcShift; | |
}; | |
/* 1164 */ | |
union $9814BDBDE78A25E6BFF1D4A2F0210FDC | |
{ | |
unsigned __int16 QpcData; | |
$F91ACE6F13277DFC9425B9B8BBCB30F7 __s1; | |
}; | |
/* 1165 */ | |
struct _KUSER_SHARED_DATA | |
{ | |
unsigned int TickCountLowDeprecated; | |
unsigned int TickCountMultiplier; | |
volatile _KSYSTEM_TIME InterruptTime; | |
volatile _KSYSTEM_TIME SystemTime; | |
volatile _KSYSTEM_TIME TimeZoneBias; | |
unsigned __int16 ImageNumberLow; | |
unsigned __int16 ImageNumberHigh; | |
wchar_t NtSystemRoot[260]; | |
unsigned int MaxStackTraceDepth; | |
unsigned int CryptoExponent; | |
unsigned int TimeZoneId; | |
unsigned int LargePageMinimum; | |
unsigned int AitSamplingValue; | |
unsigned int AppCompatFlag; | |
unsigned __int64 RNGSeedVersion; | |
unsigned int GlobalValidationRunlevel; | |
volatile int TimeZoneBiasStamp; | |
unsigned int NtBuildNumber; | |
_NT_PRODUCT_TYPE NtProductType; | |
unsigned __int8 ProductTypeIsValid; | |
unsigned __int8 Reserved0[1]; | |
unsigned __int16 NativeProcessorArchitecture; | |
unsigned int NtMajorVersion; | |
unsigned int NtMinorVersion; | |
unsigned __int8 ProcessorFeatures[64]; | |
unsigned int Reserved1; | |
unsigned int Reserved3; | |
volatile unsigned int TimeSlip; | |
_ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture; | |
unsigned int BootId; | |
_LARGE_INTEGER SystemExpirationDate; | |
unsigned int SuiteMask; | |
unsigned __int8 KdDebuggerEnabled; | |
$B6ADBC8E27B8EABD73BC311C573F54F9 ___u33; | |
unsigned __int16 CyclesPerYield; | |
volatile unsigned int ActiveConsoleId; | |
volatile unsigned int DismountCount; | |
unsigned int ComPlusPackage; | |
unsigned int LastSystemRITEventTickCount; | |
unsigned int NumberOfPhysicalPages; | |
unsigned __int8 SafeBootMode; | |
unsigned __int8 VirtualizationFlags; | |
unsigned __int8 Reserved12[2]; | |
$CF020F9FAEE5B1B8F63C62C29CC2C8DF ___u43; | |
unsigned int DataFlagsPad[1]; | |
unsigned __int64 TestRetInstruction; | |
__int64 QpcFrequency; | |
unsigned int SystemCall; | |
unsigned int Reserved2; | |
unsigned __int64 SystemCallPad[2]; | |
$17D1431A2343A97BBCD1FFAD47B35660 ___u50; | |
unsigned int TickCountPad[1]; | |
unsigned int Cookie; | |
unsigned int CookiePad[1]; | |
__int64 ConsoleSessionForegroundProcessId; | |
unsigned __int64 TimeUpdateLock; | |
unsigned __int64 BaselineSystemTimeQpc; | |
unsigned __int64 BaselineInterruptTimeQpc; | |
unsigned __int64 QpcSystemTimeIncrement; | |
unsigned __int64 QpcInterruptTimeIncrement; | |
unsigned __int8 QpcSystemTimeIncrementShift; | |
unsigned __int8 QpcInterruptTimeIncrementShift; | |
unsigned __int16 UnparkedProcessorCount; | |
unsigned int EnclaveFeatureMask[4]; | |
unsigned int TelemetryCoverageRound; | |
unsigned __int16 UserModeGlobalLogger[16]; | |
unsigned int ImageFileExecutionOptions; | |
unsigned int LangGenerationCount; | |
unsigned __int64 Reserved4; | |
volatile unsigned __int64 InterruptTimeBias; | |
volatile unsigned __int64 QpcBias; | |
unsigned int ActiveProcessorCount; | |
volatile unsigned __int8 ActiveGroupCount; | |
unsigned __int8 Reserved9; | |
$9814BDBDE78A25E6BFF1D4A2F0210FDC ___u74; | |
_LARGE_INTEGER TimeZoneBiasEffectiveStart; | |
_LARGE_INTEGER TimeZoneBiasEffectiveEnd; | |
_XSTATE_CONFIGURATION XState; | |
_KSYSTEM_TIME FeatureConfigurationChangeStamp; | |
unsigned int Spare; | |
}; | |
/* 1166 */ | |
struct __declspec(align(8)) _TP_CALLBACK_ENVIRON_V3 | |
{ | |
unsigned int Version; | |
struct _TP_POOL *Pool; | |
struct _TP_CLEANUP_GROUP *CleanupGroup; | |
void (__fastcall *CleanupGroupCancelCallback)(void *, void *); | |
void *RaceDll; | |
struct _ACTIVATION_CONTEXT *ActivationContext; | |
void (__fastcall *FinalizationCallback)(struct _TP_CALLBACK_INSTANCE *, void *); | |
union | |
{ | |
unsigned int Flags; | |
struct | |
{ | |
unsigned __int32 LongFunction : 1; | |
unsigned __int32 Persistent : 1; | |
unsigned __int32 Private : 30; | |
} s; | |
} u; | |
_TP_CALLBACK_PRIORITY CallbackPriority; | |
unsigned int Size; | |
}; | |
/* 1167 */ | |
struct __declspec(align(8)) _RTL_ACTIVATION_CONTEXT_STACK_FRAME | |
{ | |
_RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous; | |
struct _ACTIVATION_CONTEXT *ActivationContext; | |
unsigned int Flags; | |
}; | |
/* 1168 */ | |
struct __declspec(align(8)) _ACTIVATION_CONTEXT_STACK | |
{ | |
_RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame; | |
_LIST_ENTRY FrameListCache; | |
unsigned int Flags; | |
unsigned int NextCookieSequenceNumber; | |
unsigned int StackId; | |
}; | |
/* 1169 */ | |
struct _GDI_TEB_BATCH | |
{ | |
unsigned __int32 Offset : 31; | |
unsigned __int32 HasRenderingCommand : 1; | |
unsigned __int64 HDC; | |
unsigned int Buffer[310]; | |
}; | |
/* 1170 */ | |
struct _TEB_ACTIVE_FRAME | |
{ | |
unsigned int Flags; | |
_TEB_ACTIVE_FRAME *Previous; | |
const _TEB_ACTIVE_FRAME_CONTEXT *Context; | |
}; | |
/* 1171 */ | |
const struct _TEB_ACTIVE_FRAME_CONTEXT | |
{ | |
unsigned int Flags; | |
const char *FrameName; | |
}; | |
/* 1172 */ | |
struct $6BCCBD9B7EADC6FB619C96ACD0967B24 | |
{ | |
unsigned __int8 ReservedPad0; | |
unsigned __int8 ReservedPad1; | |
unsigned __int8 ReservedPad2; | |
unsigned __int8 IdealProcessor; | |
}; | |
/* 1173 */ | |
union $724F2A2D041FFB2E94FF01FB63FF30C4 | |
{ | |
_PROCESSOR_NUMBER CurrentIdealProcessor; | |
unsigned int IdealProcessorValue; | |
$6BCCBD9B7EADC6FB619C96ACD0967B24 __s2; | |
}; | |
/* 1174 */ | |
struct $88D35C6E749BA8930BA8A8A22D5F60D0 | |
{ | |
unsigned __int16 SpareCrossTebBits : 16; | |
}; | |
/* 1175 */ | |
union $7AB5819D1A5DE0161186195FCBC4D698 | |
{ | |
volatile unsigned __int16 CrossTebFlags; | |
$88D35C6E749BA8930BA8A8A22D5F60D0 __s1; | |
}; | |
/* 1176 */ | |
struct $67FCF779A2D496C4674D201A175A29C8 | |
{ | |
unsigned __int16 SafeThunkCall : 1; | |
unsigned __int16 InDebugPrint : 1; | |
unsigned __int16 HasFiberData : 1; | |
unsigned __int16 SkipThreadAttach : 1; | |
unsigned __int16 WerInShipAssertCode : 1; | |
unsigned __int16 RanProcessInit : 1; | |
unsigned __int16 ClonedThread : 1; | |
unsigned __int16 SuppressDebugMsg : 1; | |
unsigned __int16 DisableUserStackWalk : 1; | |
unsigned __int16 RtlExceptionAttached : 1; | |
unsigned __int16 InitialThread : 1; | |
unsigned __int16 SessionAware : 1; | |
unsigned __int16 LoadOwner : 1; | |
unsigned __int16 LoaderWorker : 1; | |
unsigned __int16 SkipLoaderInit : 1; | |
unsigned __int16 SpareSameTebBits : 1; | |
}; | |
/* 1177 */ | |
union $54D96A8D96B6F3818A1C53720F347267 | |
{ | |
unsigned __int16 SameTebFlags; | |
$67FCF779A2D496C4674D201A175A29C8 __s1; | |
}; | |
/* 1178 */ | |
struct _TEB | |
{ | |
_NT_TIB NtTib; | |
void *EnvironmentPointer; | |
_CLIENT_ID ClientId; | |
void *ActiveRpcHandle; | |
void *ThreadLocalStoragePointer; | |
_PEB *ProcessEnvironmentBlock; | |
unsigned int LastErrorValue; | |
unsigned int CountOfOwnedCriticalSections; | |
void *CsrClientThread; | |
void *Win32ThreadInfo; | |
unsigned int User32Reserved[26]; | |
unsigned int UserReserved[5]; | |
void *WOW32Reserved; | |
unsigned int CurrentLocale; | |
unsigned int FpSoftwareStatusRegister; | |
void *ReservedForDebuggerInstrumentation[16]; | |
void *SystemReserved1[30]; | |
char PlaceholderCompatibilityMode; | |
unsigned __int8 PlaceholderHydrationAlwaysExplicit; | |
char PlaceholderReserved[10]; | |
unsigned int ProxiedProcessId; | |
_ACTIVATION_CONTEXT_STACK _ActivationStack; | |
unsigned __int8 WorkingOnBehalfTicket[8]; | |
int ExceptionCode; | |
unsigned __int8 Padding0[4]; | |
_ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; | |
unsigned __int64 InstrumentationCallbackSp; | |
unsigned __int64 InstrumentationCallbackPreviousPc; | |
unsigned __int64 InstrumentationCallbackPreviousSp; | |
unsigned int TxFsContext; | |
unsigned __int8 InstrumentationCallbackDisabled; | |
unsigned __int8 UnalignedLoadStoreExceptions; | |
unsigned __int8 Padding1[2]; | |
_GDI_TEB_BATCH GdiTebBatch; | |
_CLIENT_ID RealClientId; | |
void *GdiCachedProcessHandle; | |
unsigned int GdiClientPID; | |
unsigned int GdiClientTID; | |
void *GdiThreadLocalInfo; | |
unsigned __int64 Win32ClientInfo[62]; | |
void *glDispatchTable[233]; | |
unsigned __int64 glReserved1[29]; | |
void *glReserved2; | |
void *glSectionInfo; | |
void *glSection; | |
void *glTable; | |
void *glCurrentRC; | |
void *glContext; | |
unsigned int LastStatusValue; | |
unsigned __int8 Padding2[4]; | |
_UNICODE_STRING StaticUnicodeString; | |
wchar_t StaticUnicodeBuffer[261]; | |
unsigned __int8 Padding3[6]; | |
void *DeallocationStack; | |
void *TlsSlots[64]; | |
_LIST_ENTRY TlsLinks; | |
void *Vdm; | |
void *ReservedForNtRpc; | |
void *DbgSsReserved[2]; | |
unsigned int HardErrorMode; | |
unsigned __int8 Padding4[4]; | |
void *Instrumentation[11]; | |
_GUID ActivityId; | |
void *SubProcessTag; | |
void *PerflibData; | |
void *EtwTraceData; | |
void *WinSockData; | |
unsigned int GdiBatchCount; | |
$724F2A2D041FFB2E94FF01FB63FF30C4 ___u68; | |
unsigned int GuaranteedStackBytes; | |
unsigned __int8 Padding5[4]; | |
void *ReservedForPerf; | |
void *ReservedForOle; | |
unsigned int WaitingOnLoaderLock; | |
unsigned __int8 Padding6[4]; | |
void *SavedPriorityState; | |
unsigned __int64 ReservedForCodeCoverage; | |
void *ThreadPoolData; | |
void **TlsExpansionSlots; | |
void *DeallocationBStore; | |
void *BStoreLimit; | |
unsigned int MuiGeneration; | |
unsigned int IsImpersonating; | |
void *NlsCache; | |
void *pShimData; | |
unsigned int HeapData; | |
unsigned __int8 Padding7[4]; | |
void *CurrentTransactionHandle; | |
_TEB_ACTIVE_FRAME *ActiveFrame; | |
void *FlsData; | |
void *PreferredLanguages; | |
void *UserPrefLanguages; | |
void *MergedPrefLanguages; | |
unsigned int MuiImpersonation; | |
$7AB5819D1A5DE0161186195FCBC4D698 ___u94; | |
$54D96A8D96B6F3818A1C53720F347267 ___u95; | |
void *TxnScopeEnterCallback; | |
void *TxnScopeExitCallback; | |
void *TxnScopeContext; | |
unsigned int LockCount; | |
int WowTebOffset; | |
void *ResourceRetValue; | |
void *ReservedForWdf; | |
unsigned __int64 ReservedForCrt; | |
_GUID EffectiveContainerId; | |
}; | |
/* 1179 */ | |
struct _IMAGE_FILE_HEADER | |
{ | |
unsigned __int16 Machine; | |
unsigned __int16 NumberOfSections; | |
unsigned int TimeDateStamp; | |
unsigned int PointerToSymbolTable; | |
unsigned int NumberOfSymbols; | |
unsigned __int16 SizeOfOptionalHeader; | |
unsigned __int16 Characteristics; | |
}; | |
/* 1180 */ | |
struct _IMAGE_DATA_DIRECTORY | |
{ | |
unsigned int VirtualAddress; | |
unsigned int Size; | |
}; | |
/* 1181 */ | |
struct _IMAGE_OPTIONAL_HEADER64 | |
{ | |
unsigned __int16 Magic; | |
unsigned __int8 MajorLinkerVersion; | |
unsigned __int8 MinorLinkerVersion; | |
unsigned int SizeOfCode; | |
unsigned int SizeOfInitializedData; | |
unsigned int SizeOfUninitializedData; | |
unsigned int AddressOfEntryPoint; | |
unsigned int BaseOfCode; | |
unsigned __int64 ImageBase; | |
unsigned int SectionAlignment; | |
unsigned int FileAlignment; | |
unsigned __int16 MajorOperatingSystemVersion; | |
unsigned __int16 MinorOperatingSystemVersion; | |
unsigned __int16 MajorImageVersion; | |
unsigned __int16 MinorImageVersion; | |
unsigned __int16 MajorSubsystemVersion; | |
unsigned __int16 MinorSubsystemVersion; | |
unsigned int Win32VersionValue; | |
unsigned int SizeOfImage; | |
unsigned int SizeOfHeaders; | |
unsigned int CheckSum; | |
unsigned __int16 Subsystem; | |
unsigned __int16 DllCharacteristics; | |
unsigned __int64 SizeOfStackReserve; | |
unsigned __int64 SizeOfStackCommit; | |
unsigned __int64 SizeOfHeapReserve; | |
unsigned __int64 SizeOfHeapCommit; | |
unsigned int LoaderFlags; | |
unsigned int NumberOfRvaAndSizes; | |
_IMAGE_DATA_DIRECTORY DataDirectory[16]; | |
}; | |
/* 1182 */ | |
struct _IMAGE_NT_HEADERS64 | |
{ | |
unsigned int Signature; | |
_IMAGE_FILE_HEADER FileHeader; | |
_IMAGE_OPTIONAL_HEADER64 OptionalHeader; | |
}; | |
/* 1183 */ | |
struct _IMAGE_DOS_HEADER | |
{ | |
unsigned __int16 e_magic; | |
unsigned __int16 e_cblp; | |
unsigned __int16 e_cp; | |
unsigned __int16 e_crlc; | |
unsigned __int16 e_cparhdr; | |
unsigned __int16 e_minalloc; | |
unsigned __int16 e_maxalloc; | |
unsigned __int16 e_ss; | |
unsigned __int16 e_sp; | |
unsigned __int16 e_csum; | |
unsigned __int16 e_ip; | |
unsigned __int16 e_cs; | |
unsigned __int16 e_lfarlc; | |
unsigned __int16 e_ovno; | |
unsigned __int16 e_res[4]; | |
unsigned __int16 e_oemid; | |
unsigned __int16 e_oeminfo; | |
unsigned __int16 e_res2[10]; | |
int e_lfanew; | |
}; | |
/* 1184 */ | |
struct $1DDC6B752DFFEE23147D3F7F53435B3B | |
{ | |
unsigned __int64 Pcid : 12; | |
unsigned __int64 Reserved : 52; | |
}; | |
/* 1185 */ | |
union $71C1CE7E25EFF12424F3D3306FF3C6A9 | |
{ | |
$1DDC6B752DFFEE23147D3F7F53435B3B __s0; | |
unsigned __int64 EntirePcid; | |
}; | |
/* 1186 */ | |
union _INVPCID_DESCRIPTOR | |
{ | |
struct | |
{ | |
$71C1CE7E25EFF12424F3D3306FF3C6A9 ___u0; | |
unsigned __int64 Virtual; | |
} IndividualAddress; | |
struct | |
{ | |
$71C1CE7E25EFF12424F3D3306FF3C6A9 ___u0; | |
unsigned __int64 Reserved2; | |
} SingleContext; | |
struct | |
{ | |
unsigned __int64 Reserved[2]; | |
} AllContextAndGlobals; | |
struct | |
{ | |
unsigned __int64 Reserved[2]; | |
} AllContext; | |
}; | |
/* 1187 */ | |
struct _SINGLE_LIST_ENTRY32 | |
{ | |
unsigned int Next; | |
}; | |
/* 1188 */ | |
struct $7CD1C28D37C5EB08109D31C3EA4A814A | |
{ | |
unsigned __int8 Trustlet : 1; | |
unsigned __int8 Ntos : 1; | |
unsigned __int8 WriteHandle : 1; | |
unsigned __int8 ReadHandle : 1; | |
unsigned __int8 Reserved : 4; | |
}; | |
/* 1189 */ | |
union _PS_TRUSTLET_ATTRIBUTE_ACCESSRIGHTS | |
{ | |
$7CD1C28D37C5EB08109D31C3EA4A814A __s0; | |
unsigned __int8 AccessRights; | |
}; | |
/* 1190 */ | |
struct $FEBBC301C7D42A9F58CABBCCCD3F98C9 | |
{ | |
unsigned __int8 Version; | |
unsigned __int8 DataCount; | |
unsigned __int8 SemanticType; | |
_PS_TRUSTLET_ATTRIBUTE_ACCESSRIGHTS AccessRights; | |
}; | |
/* 1191 */ | |
union $4E274441F48059ECD3D51C07A4D3DADF | |
{ | |
$FEBBC301C7D42A9F58CABBCCCD3F98C9 __s0; | |
unsigned int AttributeType; | |
}; | |
/* 1192 */ | |
struct _PS_TRUSTLET_ATTRIBUTE_TYPE | |
{ | |
$4E274441F48059ECD3D51C07A4D3DADF ___u0; | |
}; | |
/* 1193 */ | |
struct _PS_TRUSTLET_ATTRIBUTE_HEADER | |
{ | |
_PS_TRUSTLET_ATTRIBUTE_TYPE AttributeType; | |
unsigned __int32 InstanceNumber : 8; | |
unsigned __int32 Reserved : 24; | |
}; | |
/* 1194 */ | |
struct _PS_TRUSTLET_ATTRIBUTE_DATA | |
{ | |
_PS_TRUSTLET_ATTRIBUTE_HEADER Header; | |
unsigned __int64 Data[1]; | |
}; | |
/* 1195 */ | |
struct _PS_TRUSTLET_CREATE_ATTRIBUTES | |
{ | |
unsigned __int64 TrustletIdentity; | |
_PS_TRUSTLET_ATTRIBUTE_DATA Attributes[1]; | |
}; | |
/* 1196 */ | |
struct _TRUSTLET_MAILBOX_KEY | |
{ | |
unsigned __int64 SecretValue[2]; | |
}; | |
/* 1197 */ | |
struct _TRUSTLET_COLLABORATION_ID | |
{ | |
unsigned __int64 Value[2]; | |
}; | |
/* 1198 */ | |
struct _KERNEL_STACK_SEGMENT | |
{ | |
unsigned __int64 StackBase; | |
unsigned __int64 StackLimit; | |
unsigned __int64 KernelStack; | |
unsigned __int64 InitialStack; | |
}; | |
/* 1199 */ | |
struct $340F835BEAD91BC7101C77A06ADEC28E | |
{ | |
unsigned __int64 StackExpansion : 1; | |
}; | |
/* 1200 */ | |
union $97B2C515FA0AD1188BDB8136C6FEFDB7 | |
{ | |
unsigned __int64 ActualLimit; | |
$340F835BEAD91BC7101C77A06ADEC28E __s1; | |
}; | |
/* 1201 */ | |
struct _KSTACK_CONTROL | |
{ | |
unsigned __int64 StackBase; | |
$97B2C515FA0AD1188BDB8136C6FEFDB7 ___u1; | |
_KERNEL_STACK_SEGMENT Previous; | |
}; | |
/* 1202 */ | |
union $A28C18850CF3D184BADE16FA41548AB0 | |
{ | |
__int64 UseThisFieldToCopy; | |
long double DoNotUseThisField; | |
}; | |
/* 1203 */ | |
struct _QUAD | |
{ | |
$A28C18850CF3D184BADE16FA41548AB0 ___u0; | |
}; | |
/* 1204 */ | |
struct __declspec(align(64)) _ENODE | |
{ | |
_KNODE Ncb; | |
_WORK_QUEUE_ITEM HotAddProcessorWorkItem; | |
}; | |
/* 1205 */ | |
struct _GENERIC_MAPPING | |
{ | |
unsigned int GenericRead; | |
unsigned int GenericWrite; | |
unsigned int GenericExecute; | |
unsigned int GenericAll; | |
}; | |
/* 1206 */ | |
struct _ACCESS_REASONS | |
{ | |
unsigned int Data[32]; | |
}; | |
/* 1207 */ | |
struct __declspec(align(8)) _AUX_ACCESS_DATA | |
{ | |
_PRIVILEGE_SET *PrivilegesUsed; | |
_GENERIC_MAPPING GenericMapping; | |
unsigned int AccessesToAudit; | |
unsigned int MaximumAuditMask; | |
_GUID TransactionId; | |
void *NewSecurityDescriptor; | |
void *ExistingSecurityDescriptor; | |
void *ParentSecurityDescriptor; | |
void (__fastcall *DeRefSecurityDescriptor)(void *, void *); | |
void *SDLock; | |
_ACCESS_REASONS AccessReasons; | |
unsigned __int8 GenerateStagingEvents; | |
}; | |
/* 1208 */ | |
struct __declspec(align(8)) _OBJECT_DUMP_CONTROL | |
{ | |
void *Stream; | |
unsigned int Detail; | |
}; | |
/* 1209 */ | |
struct _OB_EXTENDED_PARSE_PARAMETERS | |
{ | |
unsigned __int16 Length; | |
unsigned int RestrictedAccessMask; | |
_EJOB *Silo; | |
}; | |
/* 1210 */ | |
struct $6C0C97183427D3B13AB876397F49C231 | |
{ | |
unsigned __int8 CaseInsensitive : 1; | |
unsigned __int8 UnnamedObjectsOnly : 1; | |
unsigned __int8 UseDefaultObject : 1; | |
unsigned __int8 SecurityRequired : 1; | |
unsigned __int8 MaintainHandleCount : 1; | |
unsigned __int8 MaintainTypeList : 1; | |
unsigned __int8 SupportsObjectCallbacks : 1; | |
unsigned __int8 CacheAligned : 1; | |
unsigned __int8 UseExtendedParameters : 1; | |
unsigned __int8 Reserved : 7; | |
}; | |
/* 1211 */ | |
union $00AA76630D5FF4AE51CB0FAF48999E5B | |
{ | |
unsigned __int16 ObjectTypeFlags; | |
$6C0C97183427D3B13AB876397F49C231 __s1; | |
}; | |
/* 1212 */ | |
union $24853669413F0DF88FFFE7897A510D60 | |
{ | |
int (__fastcall *ParseProcedure)(void *, void *, _ACCESS_STATE *, char, unsigned int, _UNICODE_STRING *, _UNICODE_STRING *, void *, _SECURITY_QUALITY_OF_SERVICE *, void **); | |
int (__fastcall *ParseProcedureEx)(void *, void *, _ACCESS_STATE *, char, unsigned int, _UNICODE_STRING *, _UNICODE_STRING *, void *, _SECURITY_QUALITY_OF_SERVICE *, _OB_EXTENDED_PARSE_PARAMETERS *, void **); | |
}; | |
/* 1213 */ | |
struct _OBJECT_TYPE_INITIALIZER | |
{ | |
unsigned __int16 Length; | |
$00AA76630D5FF4AE51CB0FAF48999E5B ___u1; | |
unsigned int ObjectTypeCode; | |
unsigned int InvalidAttributes; | |
_GENERIC_MAPPING GenericMapping; | |
unsigned int ValidAccessMask; | |
unsigned int RetainAccess; | |
_POOL_TYPE PoolType; | |
unsigned int DefaultPagedPoolCharge; | |
unsigned int DefaultNonPagedPoolCharge; | |
void (__fastcall *DumpProcedure)(void *, _OBJECT_DUMP_CONTROL *); | |
int (__fastcall *OpenProcedure)(_OB_OPEN_REASON, char, _EPROCESS *, void *, unsigned int *, unsigned int); | |
void (__fastcall *CloseProcedure)(_EPROCESS *, void *, unsigned __int64, unsigned __int64); | |
void (__fastcall *DeleteProcedure)(void *); | |
$24853669413F0DF88FFFE7897A510D60 ___u14; | |
int (__fastcall *SecurityProcedure)(void *, _SECURITY_OPERATION_CODE, unsigned int *, void *, unsigned int *, void **, _POOL_TYPE, _GENERIC_MAPPING *, char); | |
int (__fastcall *QueryNameProcedure)(void *, unsigned __int8, _OBJECT_NAME_INFORMATION *, unsigned int, unsigned int *, char); | |
unsigned __int8 (__fastcall *OkayToCloseProcedure)(_EPROCESS *, void *, void *, char); | |
unsigned int WaitObjectFlagMask; | |
unsigned __int16 WaitObjectFlagOffset; | |
unsigned __int16 WaitObjectPointerOffset; | |
}; | |
/* 1214 */ | |
struct _OBJECT_TYPE | |
{ | |
_LIST_ENTRY TypeList; | |
_UNICODE_STRING Name; | |
void *DefaultObject; | |
unsigned __int8 Index; | |
unsigned int TotalNumberOfObjects; | |
unsigned int TotalNumberOfHandles; | |
unsigned int HighWaterNumberOfObjects; | |
unsigned int HighWaterNumberOfHandles; | |
_OBJECT_TYPE_INITIALIZER TypeInfo; | |
_EX_PUSH_LOCK TypeLock; | |
unsigned int Key; | |
_LIST_ENTRY CallbackList; | |
}; | |
/* 1215 */ | |
struct _OBJECT_HANDLE_INFORMATION | |
{ | |
unsigned int HandleAttributes; | |
unsigned int GrantedAccess; | |
}; | |
/* 1216 */ | |
struct _IO_PRIORITY_INFO | |
{ | |
unsigned int Size; | |
unsigned int ThreadPriority; | |
unsigned int PagePriority; | |
_IO_PRIORITY_HINT IoPriority; | |
}; | |
/* 1217 */ | |
struct $4DE972276DA75B0A8C3B01FB1799153A | |
{ | |
unsigned int KernelTime; | |
unsigned int UserTime; | |
}; | |
/* 1218 */ | |
union $AC0623C04A373D37EE6E3E5CFC1BB860 | |
{ | |
$4DE972276DA75B0A8C3B01FB1799153A __s0; | |
unsigned __int64 ProcessorTime; | |
}; | |
/* 1219 */ | |
struct _EVENT_HEADER | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 HeaderType; | |
unsigned __int16 Flags; | |
unsigned __int16 EventProperty; | |
unsigned int ThreadId; | |
unsigned int ProcessId; | |
_LARGE_INTEGER TimeStamp; | |
_GUID ProviderId; | |
_EVENT_DESCRIPTOR EventDescriptor; | |
$AC0623C04A373D37EE6E3E5CFC1BB860 ___u9; | |
_GUID ActivityId; | |
}; | |
/* 1220 */ | |
struct _EVENT_HEADER_EXTENDED_DATA_ITEM | |
{ | |
unsigned __int16 Reserved1; | |
unsigned __int16 ExtType; | |
unsigned __int16 Linkage : 1; | |
unsigned __int16 Reserved2 : 15; | |
unsigned __int16 DataSize; | |
unsigned __int64 DataPtr; | |
}; | |
/* 1221 */ | |
struct _EVENT_RECORD | |
{ | |
_EVENT_HEADER EventHeader; | |
_ETW_BUFFER_CONTEXT BufferContext; | |
unsigned __int16 ExtendedDataCount; | |
unsigned __int16 UserDataLength; | |
_EVENT_HEADER_EXTENDED_DATA_ITEM *ExtendedData; | |
void *UserData; | |
void *UserContext; | |
}; | |
/* 1222 */ | |
union _MM_PAGE_ACCESS_INFO_FLAGS | |
{ | |
struct | |
{ | |
unsigned __int32 FilePointerIndex : 9; | |
unsigned __int32 HardFault : 1; | |
unsigned __int32 Image : 1; | |
unsigned __int32 Spare0 : 1; | |
} File; | |
struct | |
{ | |
unsigned __int32 FilePointerIndex : 9; | |
unsigned __int32 HardFault : 1; | |
unsigned __int32 Spare1 : 2; | |
} Private; | |
}; | |
/* 1223 */ | |
union $855FDCEFF2621A86483E6C8185DE2A5B | |
{ | |
_MM_PAGE_ACCESS_INFO_FLAGS Flags; | |
unsigned __int64 FileOffset; | |
void *VirtualAddress; | |
void *PointerProtoPte; | |
}; | |
/* 1224 */ | |
struct _MM_PAGE_ACCESS_INFO | |
{ | |
$855FDCEFF2621A86483E6C8185DE2A5B ___u0; | |
}; | |
/* 1225 */ | |
union $B199E3D3D43313813CA7041F0E5F3B08 | |
{ | |
unsigned int EmptySequenceNumber; | |
unsigned int CurrentFileIndex; | |
}; | |
/* 1226 */ | |
union $DA748179E76D24865010E92CAF117899 | |
{ | |
unsigned __int64 EmptyTime; | |
_MM_PAGE_ACCESS_INFO *TempEntry; | |
}; | |
/* 1227 */ | |
union $C416C8FEA640ACA5675875412D7F3369 | |
{ | |
_MM_PAGE_ACCESS_INFO *PageEntry; | |
unsigned __int64 *PageFrameEntry; | |
}; | |
/* 1228 */ | |
union $758C0EA08C12BBEF220FC904BB5FE373 | |
{ | |
unsigned __int64 *FileEntry; | |
unsigned __int64 *LastPageFrameEntry; | |
}; | |
/* 1229 */ | |
struct __declspec(align(8)) _MM_PAGE_ACCESS_INFO_HEADER | |
{ | |
_SINGLE_LIST_ENTRY Link; | |
_MM_PAGE_ACCESS_TYPE Type; | |
$B199E3D3D43313813CA7041F0E5F3B08 ___u2; | |
unsigned __int64 CreateTime; | |
$DA748179E76D24865010E92CAF117899 ___u4; | |
$C416C8FEA640ACA5675875412D7F3369 ___u5; | |
$758C0EA08C12BBEF220FC904BB5FE373 ___u6; | |
unsigned __int64 *FirstFileEntry; | |
_EPROCESS *Process; | |
unsigned int SessionId; | |
}; | |
/* 1230 */ | |
union $EB85F99015691E86D035651458B34354 | |
{ | |
void *Oplock; | |
void *ReservedForRemote; | |
}; | |
/* 1231 */ | |
struct _FSRTL_ADVANCED_FCB_HEADER | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteSize; | |
unsigned __int8 Flags; | |
unsigned __int8 IsFastIoPossible; | |
unsigned __int8 Flags2; | |
unsigned __int8 Reserved : 4; | |
unsigned __int8 Version : 4; | |
_ERESOURCE *Resource; | |
_ERESOURCE *PagingIoResource; | |
_LARGE_INTEGER AllocationSize; | |
_LARGE_INTEGER FileSize; | |
_LARGE_INTEGER ValidDataLength; | |
_FAST_MUTEX *FastMutex; | |
_LIST_ENTRY FilterContexts; | |
_EX_PUSH_LOCK PushLock; | |
void **FileContextSupportPointer; | |
$EB85F99015691E86D035651458B34354 ___u16; | |
void *ReservedContext; | |
}; | |
/* 1232 */ | |
struct _iobuf | |
{ | |
char *_ptr; | |
int _cnt; | |
char *_base; | |
int _flag; | |
int _file; | |
int _charbuf; | |
int _bufsiz; | |
char *_tmpfname; | |
}; | |
/* 1233 */ | |
struct _RTL_HASH_ENTRY | |
{ | |
_SINGLE_LIST_ENTRY BucketLink; | |
unsigned __int64 Key; | |
}; | |
/* 1234 */ | |
struct _RTL_HASH_TABLE_ITERATOR | |
{ | |
_RTL_HASH_TABLE *Hash; | |
_RTL_HASH_ENTRY *HashEntry; | |
_SINGLE_LIST_ENTRY *Bucket; | |
}; | |
/* 1235 */ | |
struct _RTL_CHASH_ENTRY | |
{ | |
unsigned __int64 Key; | |
}; | |
/* 1236 */ | |
struct __declspec(align(8)) _RTL_CHASH_TABLE | |
{ | |
_RTL_CHASH_ENTRY *Table; | |
unsigned int EntrySizeShift; | |
unsigned int EntryMax; | |
unsigned int EntryCount; | |
}; | |
/* 1237 */ | |
struct _EVENT_FILTER_DESCRIPTOR | |
{ | |
unsigned __int64 Ptr; | |
unsigned int Size; | |
unsigned int Type; | |
}; | |
/* 1238 */ | |
struct _tlgProvider_t | |
{ | |
unsigned int LevelPlus1; | |
const unsigned __int16 *ProviderMetadataPtr; | |
unsigned __int64 KeywordAny; | |
unsigned __int64 KeywordAll; | |
unsigned __int64 RegHandle; | |
void (__fastcall *EnableCallback)(const _GUID *, unsigned int, unsigned __int8, unsigned __int64, unsigned __int64, _EVENT_FILTER_DESCRIPTOR *, void *); | |
void *CallbackContext; | |
}; | |
/* 1239 */ | |
struct __unaligned __declspec(align(1)) _tlgProviderMetadata_t | |
{ | |
unsigned __int8 Type; | |
_GUID ProviderId; | |
unsigned __int16 RemainingSize; | |
}; | |
/* 1240 */ | |
union __m64 | |
{ | |
unsigned __int64 m64_u64; | |
float m64_f32[2]; | |
char m64_i8[8]; | |
__int16 m64_i16[4]; | |
int m64_i32[2]; | |
__int64 m64_i64; | |
unsigned __int8 m64_u8[8]; | |
unsigned __int16 m64_u16[4]; | |
unsigned int m64_u32[2]; | |
}; | |
/* 1241 */ | |
union __m128 | |
{ | |
float m128_f32[4]; | |
unsigned __int64 m128_u64[2]; | |
char m128_i8[16]; | |
__int16 m128_i16[8]; | |
int m128_i32[4]; | |
__int64 m128_i64[2]; | |
unsigned __int8 m128_u8[16]; | |
unsigned __int16 m128_u16[8]; | |
unsigned int m128_u32[4]; | |
}; | |
/* 1242 */ | |
struct $B0482F5E75C74C17B80CAD41CE985A52 | |
{ | |
unsigned int exchange; | |
unsigned int payloadId; | |
}; | |
/* 1243 */ | |
struct $D95C0CC6C73629190EA5EAA57A4B679C | |
{ | |
unsigned __int32 stateCached : 1; | |
unsigned __int32 hasNotificationCached : 1; | |
unsigned __int32 variantCached : 1; | |
unsigned __int32 effectiveState : 1; | |
unsigned __int32 desiredState : 1; | |
unsigned __int32 configuredState : 2; | |
unsigned __int32 needsRefresh : 1; | |
unsigned __int32 hasNotification : 1; | |
unsigned __int32 isVariant : 1; | |
unsigned __int32 variant : 6; | |
unsigned __int32 unused : 16; | |
}; | |
/* 1244 */ | |
union wil_details_FeatureStateCache | |
{ | |
$B0482F5E75C74C17B80CAD41CE985A52 __s0; | |
$D95C0CC6C73629190EA5EAA57A4B679C __s1; | |
unsigned __int64 exchange64; | |
}; | |
/* 1245 */ | |
struct wil_details_FeatureDescriptor | |
{ | |
wil_details_FeatureStateCache *featureStateCache; | |
unsigned int featureId; | |
unsigned __int8 changeTime; | |
unsigned __int8 isAlwaysDisabled; | |
unsigned __int8 isAlwaysEnabled; | |
unsigned __int8 isEnabledByDefault; | |
const wil_details_FeatureDescriptor *const *requiresFeatures; | |
}; | |
/* 1246 */ | |
struct $608696F293A9505E413CA19901990CEE | |
{ | |
unsigned __int32 queuedForReporting : 1; | |
unsigned __int32 reportedDeviceUsage : 1; | |
unsigned __int32 reportedDevicePotential : 1; | |
unsigned __int32 reportedDeviceOpportunity : 1; | |
unsigned __int32 reportedDevicePotentialOpportunity : 1; | |
unsigned __int32 usageCount : 9; | |
unsigned __int32 usageCountRepresentsPotential : 1; | |
unsigned __int32 opportunityCount : 7; | |
unsigned __int32 opportunityCountRepresentsPotential : 1; | |
unsigned __int32 unused : 9; | |
}; | |
/* 1247 */ | |
union wil_details_ReportedState | |
{ | |
unsigned int exchange; | |
$608696F293A9505E413CA19901990CEE __s1; | |
}; | |
/* 1248 */ | |
struct $A890484BB2AC077EA0A36B7AA25D84DE | |
{ | |
unsigned __int32 recordedDeviceUsage : 1; | |
unsigned __int32 recordedDevicePotential : 1; | |
unsigned __int32 recordedDeviceOpportunity : 1; | |
unsigned __int32 recordedDevicePotentialOpportunity : 1; | |
unsigned __int32 recordedVariantDeviceUsage : 1; | |
unsigned __int32 recordedVariant : 6; | |
unsigned __int32 unused : 21; | |
}; | |
/* 1249 */ | |
union wil_details_RecordedState | |
{ | |
unsigned int exchange; | |
$A890484BB2AC077EA0A36B7AA25D84DE __s1; | |
}; | |
/* 1250 */ | |
struct wil_details_FeatureReportingCache | |
{ | |
wil_details_ReportedState reported; | |
wil_details_RecordedState recorded; | |
}; | |
/* 1251 */ | |
struct wil_details_RecordUsageResult | |
{ | |
int queueBackground; | |
unsigned int countImmediate; | |
wil_details_ServiceReportingKind kindImmediate; | |
unsigned int payloadId; | |
int ignoredUse; | |
int isVariantConfiguration; | |
}; | |
/* 1252 */ | |
struct __declspec(align(2)) FEATURE_LOGGED_TRAITS | |
{ | |
unsigned __int16 version; | |
unsigned __int16 baseVersion; | |
unsigned __int8 stage; | |
}; | |
/* 1253 */ | |
struct FEATURE_ERROR | |
{ | |
HRESULT hr; | |
unsigned __int16 lineNumber; | |
const char *file; | |
const char *process; | |
const char *modulePath; | |
unsigned int callerReturnAddressOffset; | |
const char *callerModule; | |
const char *message; | |
unsigned __int16 originLineNumber; | |
const char *originFile; | |
const char *originModule; | |
unsigned int originCallerReturnAddressOffset; | |
const char *originCallerModule; | |
const char *originName; | |
}; | |
/* 1254 */ | |
struct wil_details_StagingConfigFeature | |
{ | |
unsigned int featureId; | |
unsigned __int32 changedInSession : 1; | |
unsigned __int32 isVariantConfig : 1; | |
unsigned __int32 unused1 : 6; | |
unsigned __int32 serviceState : 2; | |
unsigned __int32 userState : 2; | |
unsigned __int32 testState : 2; | |
unsigned __int32 unused2 : 2; | |
unsigned __int32 unused3 : 8; | |
unsigned __int32 variant : 6; | |
unsigned __int32 payloadKind : 2; | |
unsigned int payload; | |
}; | |
/* 1255 */ | |
struct wil_details_StagingConfigHeaderProperties | |
{ | |
unsigned __int32 ignoreServiceState : 1; | |
unsigned __int32 ignoreUserState : 1; | |
unsigned __int32 ignoreTestState : 1; | |
unsigned __int32 ignoreVariants : 1; | |
unsigned __int32 unused : 28; | |
}; | |
/* 1256 */ | |
struct wil_details_StagingConfigHeader | |
{ | |
unsigned __int8 version; | |
unsigned __int8 versionMinor; | |
unsigned __int16 headerSizeBytes; | |
unsigned __int16 featureCount; | |
unsigned __int16 featureUsageTriggerCount; | |
wil_details_StagingConfigHeaderProperties sessionProperties; | |
wil_details_StagingConfigHeaderProperties properties; | |
}; | |
/* 1257 */ | |
struct wil_details_StagingConfigWnfStateName | |
{ | |
unsigned int Data[2]; | |
}; | |
/* 1258 */ | |
struct wil_details_StagingConfigUsageTrigger | |
{ | |
unsigned int featureId; | |
wil_details_StagingConfigWnfStateName trigger; | |
unsigned __int32 serviceReportingKind : 16; | |
unsigned __int32 isVariantConfig : 1; | |
unsigned __int32 unused : 15; | |
}; | |
/* 1259 */ | |
struct __declspec(align(8)) wil_details_StagingConfig | |
{ | |
wil_FeatureStore store; | |
int forUpdate; | |
unsigned int readChangeStamp; | |
unsigned __int8 readVersion; | |
int modified; | |
wil_details_StagingConfigHeader *header; | |
wil_details_StagingConfigFeature *features; | |
wil_details_StagingConfigUsageTrigger *triggers; | |
int changedInSession; | |
void *buffer; | |
unsigned __int64 bufferSize; | |
unsigned __int64 bufferAlloc; | |
int bufferOwned; | |
}; | |
/* 1260 */ | |
struct wil_FeatureState | |
{ | |
wil_FeatureEnabledState enabledState; | |
unsigned __int8 variant; | |
wil_FeatureVariantPayloadKind payloadKind; | |
unsigned int payload; | |
int hasNotification; | |
int isVariantConfiguration; | |
}; | |
/* 1261 */ | |
struct _RTL_FEATURE_CONFIGURATION | |
{ | |
unsigned int FeatureId; | |
unsigned __int32 Priority : 4; | |
unsigned __int32 EnabledState : 2; | |
unsigned __int32 IsWexpConfiguration : 1; | |
unsigned __int32 HasSubscriptions : 1; | |
unsigned __int32 Variant : 6; | |
unsigned __int32 VariantPayloadKind : 2; | |
unsigned int VariantPayload; | |
}; | |
/* 1262 */ | |
struct __WIL__WNF_STATE_NAME | |
{ | |
unsigned int Data[2]; | |
}; | |
/* 1263 */ | |
struct _WNF_TYPE_ID | |
{ | |
_GUID TypeId; | |
}; | |
/* 1264 */ | |
struct __declspec(align(4)) _wil_details_UsageSubscriptionData | |
{ | |
unsigned int featureId; | |
unsigned __int16 serviceReportingKind; | |
}; | |
/* 1265 */ | |
struct _RTL_FEATURE_USAGE_REPORT | |
{ | |
unsigned int FeatureId; | |
unsigned __int16 ReportingKind; | |
unsigned __int16 ReportingOptions; | |
}; | |
/* 1266 */ | |
struct wil_details_FeatureTestState | |
{ | |
wil_details_FeatureTestStateKind kind; | |
unsigned int featureId; | |
wil_FeatureEnabledState state; | |
unsigned __int8 variant; | |
unsigned int payload; | |
wil_FeatureVariantPayloadKind payloadKind; | |
wil_details_FeatureTestState *next; | |
}; | |
/* 1267 */ | |
struct $B8BE16A3D12D2052ACAC7615E36C3DCE | |
{ | |
unsigned __int32 Expanded : 1; | |
unsigned __int32 Transitioning : 1; | |
unsigned __int32 Pageable : 1; | |
}; | |
/* 1268 */ | |
union $CDE7ACC3BA6ABBF1783A81BBB65ADF55 | |
{ | |
$B8BE16A3D12D2052ACAC7615E36C3DCE __s0; | |
unsigned int Value; | |
}; | |
/* 1269 */ | |
struct _EX_PUSH_LOCK_AUTO_EXPAND_STATE | |
{ | |
$CDE7ACC3BA6ABBF1783A81BBB65ADF55 ___u0; | |
}; | |
/* 1270 */ | |
struct _EX_PUSH_LOCK_AUTO_EXPAND | |
{ | |
_EX_PUSH_LOCK LocalLock; | |
_EX_PUSH_LOCK_AUTO_EXPAND_STATE State; | |
unsigned int Stats; | |
}; | |
/* 1271 */ | |
struct _MMPFNLIST | |
{ | |
unsigned __int64 Total; | |
_MMLISTS ListName; | |
unsigned __int64 Flink; | |
unsigned __int64 Blink; | |
unsigned __int64 Lock; | |
}; | |
/* 1368 */ | |
union $CBFF20FC0D51B1A2B40E70FEBD2E1BF6 | |
{ | |
_RTL_BALANCED_NODE CloneNode; | |
_MMCLONE_DESCRIPTOR *Next; | |
}; | |
/* 1272 */ | |
struct __declspec(align(16)) _MMCLONE_DESCRIPTOR | |
{ | |
$CBFF20FC0D51B1A2B40E70FEBD2E1BF6 ___u0; | |
_MMCLONE_BLOCK *StartingCloneBlock; | |
_MMCLONE_BLOCK *EndingCloneBlock; | |
unsigned __int64 NumberOfPtes; | |
volatile unsigned __int64 NumberOfReferences; | |
_MMCLONE_HEADER *CloneHeader; | |
unsigned __int64 NonPagedPoolQuotaCharge; | |
_SLIST_ENTRY DeleteList; | |
unsigned __int64 NestingLevel; | |
}; | |
/* 1273 */ | |
struct _MI_CLONE_BLOCK_FLAGS | |
{ | |
unsigned __int64 ActualCloneCommit : 59; | |
unsigned __int64 CloneProtection : 5; | |
}; | |
/* 1274 */ | |
union $790D8F036E4996E696A7714442126066 | |
{ | |
volatile unsigned __int64 CloneCommitCount; | |
_MI_CLONE_BLOCK_FLAGS u1; | |
}; | |
/* 1275 */ | |
struct _MMCLONE_BLOCK | |
{ | |
_MMPTE ProtoPte; | |
unsigned __int64 CrossPartitionReferences; | |
$790D8F036E4996E696A7714442126066 ___u2; | |
volatile unsigned __int64 CloneRefCount; | |
}; | |
/* 1367 */ | |
struct _MMCLONE_HEADER | |
{ | |
unsigned __int64 NumberOfPtes; | |
volatile unsigned __int64 NumberOfProcessReferences; | |
_MMCLONE_BLOCK *ClonePtes; | |
_MI_PARTITION *Partition; | |
}; | |
/* 1276 */ | |
struct _MI_PARTITION_FLAGS | |
{ | |
unsigned __int32 BeingDeleted : 1; | |
unsigned __int32 PageListsInitialized : 1; | |
unsigned __int32 StoreReservedPagesCharged : 1; | |
unsigned __int32 UseProtectedSlabAllocators : 1; | |
unsigned __int32 UseUnprotectedSlabAllocators : 1; | |
unsigned __int32 PureHoldingPartition : 1; | |
unsigned __int32 ZeroPagesOptional : 1; | |
unsigned __int32 BackgroundZeroingDisabled : 1; | |
}; | |
/* 1288 */ | |
struct _MI_PARTITION_CORE | |
{ | |
unsigned __int16 PartitionId; | |
union | |
{ | |
unsigned int LongFlags; | |
_MI_PARTITION_FLAGS Flags; | |
} u; | |
unsigned int Signature; | |
unsigned __int8 MemoryConfigurationChanged; | |
_MI_NODE_INFORMATION *NodeInformation; | |
_RTL_AVL_TREE PageRoot; | |
_PHYSICAL_MEMORY_DESCRIPTOR *MemoryNodeRuns; | |
unsigned __int64 MemoryBlockReferences; | |
_WORK_QUEUE_ITEM PfnUnmapWorkItem; | |
unsigned __int64 PfnUnmapCount; | |
void *PfnUnmapWaitList; | |
_PHYSICAL_MEMORY_DESCRIPTOR *MemoryRuns; | |
_KEVENT ExitEvent; | |
void *SystemThreadHandles[6]; | |
_EPARTITION *PartitionObject; | |
_EX_PUSH_LOCK PartitionSystemThreadsLock; | |
_EX_PUSH_LOCK DynamicMemoryPushLock; | |
volatile int DynamicMemoryLock; | |
unsigned __int8 PfnUnmapActive; | |
_KEVENT TemporaryMemoryEvent; | |
void *RootDirectory; | |
void *KernelObjectsDirectory; | |
_KEVENT *MemoryEvents[11]; | |
void *MemoryEventHandles[11]; | |
unsigned __int64 TotalHugeIoRanges; | |
unsigned __int64 NonChargedSecurePages; | |
}; | |
/* 1327 */ | |
struct _MMPAGE_FILE_EXPANSION_FLAGS | |
{ | |
unsigned __int8 PageFileNumber : 8; | |
unsigned __int8 Spare1 : 8; | |
unsigned __int8 Spare2 : 8; | |
unsigned __int8 IgnoreCurrentCommit : 1; | |
unsigned __int8 IncreaseMinimumSize : 1; | |
unsigned __int8 AttemptForCantExtend : 1; | |
unsigned __int8 UnusedSegmentDeletion : 1; | |
unsigned __int8 PageFileContract : 1; | |
unsigned __int8 NoWait : 1; | |
unsigned __int8 Spare3 : 2; | |
}; | |
/* 1328 */ | |
struct _MMPAGE_FILE_EXPANSION | |
{ | |
_SEGMENT *Segment; | |
_LIST_ENTRY DereferenceList; | |
_MI_PARTITION *Partition; | |
unsigned __int64 RequestedExpansionSize; | |
unsigned __int64 ActualExpansion; | |
_KEVENT Event; | |
volatile int InProgress; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMPAGE_FILE_EXPANSION_FLAGS Flags; | |
} u1; | |
void **volatile ActiveEntry; | |
}; | |
/* 1329 */ | |
union $12D3DC0B0526473B0A33E8498AEF2E6E | |
{ | |
_KGATE Gate; | |
_KEVENT Event; | |
}; | |
/* 1330 */ | |
struct _MMMOD_WRITER_LISTHEAD | |
{ | |
_LIST_ENTRY ListHead; | |
$12D3DC0B0526473B0A33E8498AEF2E6E ___u1; | |
}; | |
/* 1331 */ | |
struct $FBF4B76750E98D53218A828D8C12AA59 | |
{ | |
unsigned __int32 ClusterSize : 10; | |
unsigned __int32 SequenceNumber : 22; | |
}; | |
/* 1332 */ | |
volatile union _MI_RESERVATION_CLUSTER_INFO | |
{ | |
$FBF4B76750E98D53218A828D8C12AA59 __s0; | |
int EntireInfo; | |
}; | |
/* 1333 */ | |
struct _MI_MODWRITE_DATA | |
{ | |
__int64 PagesLoad; | |
unsigned __int64 PagesAverage; | |
unsigned __int64 AverageAvailablePages; | |
unsigned __int64 PagesWritten; | |
unsigned int WritesIssued; | |
unsigned int IgnoredReservationsCount; | |
unsigned int FreedReservationsCount; | |
unsigned int WriteBurstCount; | |
unsigned __int64 IgnoreReservationsStartTime; | |
volatile _MI_RESERVATION_CLUSTER_INFO ReservationClusterInfo; | |
unsigned __int16 IgnoreReservations : 1; | |
unsigned __int16 Spare : 15; | |
unsigned __int16 Spare1; | |
}; | |
/* 1334 */ | |
struct _MI_RESTRICTED_MODWRITES | |
{ | |
unsigned __int8 MaximumClusterPages; | |
unsigned __int8 ReducedClusterWrites; | |
unsigned __int8 ImposeDelay; | |
}; | |
/* 1335 */ | |
struct __declspec(align(8)) _MI_PARTITION_MODWRITES | |
{ | |
_MMPAGE_FILE_EXPANSION AttemptForCantExtend; | |
_MMPAGE_FILE_EXPANSION PageFileContract; | |
unsigned __int64 NumberOfMappedMdls; | |
volatile int NumberOfMappedMdlsInUse; | |
unsigned int NumberOfMappedMdlsInUsePeak; | |
_MMMOD_WRITER_LISTHEAD MappedFileHeader; | |
unsigned __int8 NeedMappedMdl; | |
unsigned __int8 NeedPageFileMdl; | |
unsigned __int8 ModwriterActive; | |
unsigned __int8 TransitionInserted; | |
int LastModifiedWriteError; | |
int LastMappedWriteError; | |
volatile unsigned int MappedFileWriteSucceeded; | |
unsigned int MappedWriteBurstCount; | |
unsigned int LowPriorityModWritesOutstanding; | |
_KEVENT BoostModWriteIoPriorityEvent; | |
int ModifiedWriterThreadPriority; | |
unsigned __int64 ModifiedPagesLowPriorityGoal; | |
_KEVENT ModifiedPageWriterEvent; | |
_KEVENT ModifiedWriterExitedEvent; | |
volatile int WriteAllPagefilePages; | |
volatile int WriteAllMappedPages; | |
_KEVENT MappedPageWriterEvent; | |
_MI_MODWRITE_DATA ModWriteData; | |
_KEVENT RescanPageFilesEvent; | |
_MMMOD_WRITER_LISTHEAD PagingFileHeader; | |
_ETHREAD *ModifiedPageWriterThread; | |
_EX_RUNDOWN_REF ModifiedPageWriterRundown; | |
_WORK_QUEUE_ITEM PagefileScanWorkItem; | |
unsigned int PagefileScanCount; | |
volatile int ClusterRestrictionLock; | |
_MI_RESTRICTED_MODWRITES ClusterRestrictions[2]; | |
_KEVENT NotifyStoreMemoryConditions; | |
volatile unsigned __int8 DelayMappedWrite; | |
volatile unsigned int PagefileReservationsEnabled; | |
_EX_PUSH_LOCK PageFileCreationLock; | |
_WORK_QUEUE_ITEM TrimPagefileWorkItem; | |
unsigned __int64 LastTrimPagefileTime; | |
_WORK_QUEUE_ITEM WsSwapPagefileContractWorkItem; | |
volatile int WsSwapPageFileContractionInProgress; | |
_EX_PUSH_LOCK WorkingSetSwapLock; | |
volatile int WorkingSetInswapLock; | |
}; | |
/* 1336 */ | |
struct $E6AB85F4C00D05B5CDD951583603F4EA | |
{ | |
__int32 FlushCompleting : 1; | |
__int32 FlushInProgress : 31; | |
}; | |
/* 1337 */ | |
struct _MI_PARTITION_STORES | |
{ | |
union | |
{ | |
$E6AB85F4C00D05B5CDD951583603F4EA __s0; | |
volatile int Long; | |
} WriteAllStoreHintedPages; | |
unsigned int VirtualPageFileNumber; | |
unsigned int Registered; | |
unsigned int ReadClusterSizeMax; | |
unsigned int EvictFlushRequestCount; | |
unsigned int ModifiedWriteDisableCount; | |
unsigned int WriteIssueFailures; | |
unsigned int WritesOutstanding; | |
volatile int EvictFlushLock; | |
_ETHREAD *EvictionThread; | |
_KEVENT EvictEvent; | |
__declspec(align(16)) _SLIST_HEADER WriteSupportSListHead; | |
_KEVENT EvictFlushCompleteEvent; | |
_RTL_BITMAP *ModifiedWriteFailedBitmap; | |
_EPROCESS *StoreProcess; | |
unsigned int DeleteStoredPages; | |
}; | |
/* 1338 */ | |
struct _MMDEREFERENCE_SEGMENT_HEADER | |
{ | |
_KSEMAPHORE Semaphore; | |
_LIST_ENTRY ControlAreaDeleteListHead; | |
_LIST_ENTRY UnusedSegmentDeleteListHead; | |
_LIST_ENTRY PagefileExtensionListHead; | |
}; | |
/* 1339 */ | |
struct _MI_PTE_CHAIN_HEAD | |
{ | |
_MMPTE Flink; | |
_MMPTE Blink; | |
_MMPTE *PteBase; | |
}; | |
/* 1340 */ | |
struct _MI_CROSS_PARTITION_CHARGES | |
{ | |
unsigned __int64 CurrentCharges; | |
unsigned __int64 ChargeFailures; | |
unsigned __int64 ChargePeak; | |
unsigned __int64 ChargeMinimum; | |
}; | |
/* 1341 */ | |
struct __declspec(align(32)) _MI_PARTITION_SEGMENTS | |
{ | |
volatile int SegmentListLock; | |
unsigned int DeleteOnCloseCount; | |
volatile __int64 FsControlAreaCount; | |
volatile __int64 PfControlAreaCount; | |
volatile __int64 CloneHeaderCount; | |
_KEVENT DeleteSubsectionCleanup; | |
_KEVENT UnusedSegmentCleanup; | |
unsigned __int64 SubsectionDeletePtes; | |
_MMPAGE_FILE_EXPANSION AttemptForCantExtend; | |
_MMDEREFERENCE_SEGMENT_HEADER DereferenceSegmentHeader; | |
_LIST_ENTRY DeleteOnCloseList; | |
_KTIMER DeleteOnCloseTimer; | |
unsigned __int8 DeleteOnCloseTimerActive; | |
unsigned __int8 SegmentDereferenceThreadExists; | |
void *SegmentDereferenceActiveControlArea; | |
unsigned __int64 UnusedSegmentPagedPool; | |
_LIST_ENTRY UnusedSegmentList; | |
_LIST_ENTRY UnusedSubsectionList; | |
_LIST_ENTRY DeleteSubsectionList; | |
_KEVENT ControlAreaDeleteEvent; | |
_SINGLE_LIST_ENTRY ControlAreaDeleteList; | |
_MI_PTE_CHAIN_HEAD FreeSystemCache; | |
_KEVENT CloneDereferenceEvent; | |
__declspec(align(16)) _SLIST_HEADER CloneProtosSListHead; | |
_EX_PUSH_LOCK SystemCacheInitLock; | |
unsigned int PagefileExtensionWaiters; | |
unsigned int PagefileExtensionRequests; | |
_KEVENT PagefileExtensionWaitEvent; | |
_MI_CROSS_PARTITION_CHARGES SharedCharges[7]; | |
_KEVENT *SharedChargesDrainEvent; | |
_KEVENT *ControlAreasDrainEvent; | |
_KEVENT *CloneHeaderDrainEvent; | |
_EX_RUNDOWN_REF_CACHE_AWARE *ProbeRundownReference; | |
}; | |
/* 1342 */ | |
struct _MI_DECAY_TIMER_LINKAGE | |
{ | |
unsigned __int64 Spare0 : 1; | |
unsigned __int64 PreviousDecayPfn : 31; | |
unsigned __int64 Spare1 : 1; | |
unsigned __int64 NextDecayPfn : 31; | |
}; | |
/* 1343 */ | |
struct _MI_DECAY_TIMER_LINK | |
{ | |
union | |
{ | |
unsigned __int64 Long; | |
_MI_DECAY_TIMER_LINKAGE e1; | |
} u1; | |
}; | |
/* 1344 */ | |
struct __declspec(align(8)) _MI_LDW_WORK_CONTEXT | |
{ | |
_WORK_QUEUE_ITEM WorkItem; | |
_FILE_OBJECT *FileObject; | |
int ErrorStatus; | |
volatile int Active; | |
unsigned __int8 FreeWhenDone; | |
}; | |
/* 1345 */ | |
struct __declspec(align(8)) _MI_AVAILABLE_PAGE_WAIT_STATES | |
{ | |
_KEVENT Event; | |
unsigned int EventSets; | |
}; | |
/* 1346 */ | |
struct $01011AE38380FE7933ED96966565D13C | |
{ | |
unsigned __int32 EntryBecameEmpty : 1; | |
unsigned __int32 Spare : 31; | |
}; | |
/* 1347 */ | |
struct _MI_SLAB_ALLOCATOR_CONTEXT | |
{ | |
_RTL_RB_TREE AllocationsTree; | |
volatile int Lock; | |
struct _MI_SLAB_ALLOCATOR_ENTRY *SlabEntryHint; | |
unsigned __int64 FreePageCount; | |
unsigned __int64 SlabEntryCount; | |
_MI_SLAB_ALLOCATOR_TYPE Type; | |
_MI_SLAB_ALLOCATOR_PROTECTION Protection; | |
union | |
{ | |
$01011AE38380FE7933ED96966565D13C __s0; | |
unsigned int AllFlags; | |
} Flags; | |
_MMPFNLIST StandbyList; | |
unsigned __int64 LastReplenishTime; | |
unsigned __int64 LastFailureTime; | |
}; | |
/* 1348 */ | |
struct _MI_PARTITION_PAGE_LISTS | |
{ | |
_MMPFNLIST *FreePagesByColor[2]; | |
__declspec(align(64)) _MMPFNLIST ZeroedPageListHead; | |
__declspec(align(32)) _MMPFNLIST FreePageListHead; | |
__declspec(align(32)) _MMPFNLIST StandbyPageListHead; | |
__declspec(align(32)) _MMPFNLIST StandbyPageListByPriority[8]; | |
_MMPFNLIST ModifiedPageListNoReservation; | |
__declspec(align(32)) _MMPFNLIST ModifiedPageListByReservation[16]; | |
_MMPFNLIST MappedPageListHead[16]; | |
_MMPFNLIST BadPageListHead; | |
__declspec(align(32)) _MMPFNLIST EnclavePageListHead; | |
_SLIST_HEADER *FreePageSlist[2]; | |
_MMPFNLIST *PageLocationList[8]; | |
volatile unsigned int StandbyRepurposedByPriority[8]; | |
__declspec(align(64)) volatile unsigned __int64 TransitionSharedPages; | |
unsigned __int64 TransitionSharedPagesPeak[6]; | |
_KEVENT MappedPageListHeadEvent[16]; | |
_MI_DECAY_TIMER_LINK DecayClusterTimerHeads[4]; | |
unsigned int DecayHand; | |
unsigned __int8 StandbyListDiscard; | |
unsigned __int8 FreeListDiscard; | |
unsigned __int8 PfnBitMapsReady; | |
unsigned __int64 LastDecayHandUpdateTime; | |
_MI_LDW_WORK_CONTEXT LastChanceLdwContext; | |
_RTL_AVL_TREE HugePfnBadPages; | |
__declspec(align(32)) unsigned __int64 AvailableEventsLock; | |
_MI_AVAILABLE_PAGE_WAIT_STATES AvailablePageWaitStates[3]; | |
void *MirrorListLocks; | |
__declspec(align(32)) volatile unsigned __int64 TransitionPrivatePages; | |
_RTL_BITMAP_EX LargePfnBitMap[2]; | |
_MI_FREE_LARGE_PAGE_LIST *LargePageListHeads; | |
unsigned __int8 *MediumPagesOnFreeZeroList; | |
_RTL_BITMAP_EX LargePageRebuildCandidates; | |
wchar_t *LargePagesOnFreeZeroList; | |
volatile int HugePageRebuildCandidatesExist; | |
_KEVENT LargePageCandidatesExistEvent; | |
unsigned __int64 LowMemoryThreshold; | |
unsigned __int64 HighMemoryThreshold; | |
_MI_SLAB_ALLOCATOR_CONTEXT SlabContexts[2][4]; | |
_RTL_BITMAP_EX SlabPfnBitMap; | |
void *HugePfnLists; | |
unsigned __int64 AvailableHugeIoRanges; | |
}; | |
/* 1349 */ | |
struct _MI_PARTITION_COMMIT | |
{ | |
unsigned __int64 PeakCommitment; | |
unsigned __int64 TotalCommitLimitMaximum; | |
volatile int Popups[2]; | |
unsigned __int64 LowCommitThreshold; | |
unsigned __int64 HighCommitThreshold; | |
unsigned __int64 EventLock; | |
unsigned __int64 SystemCommitReserve; | |
unsigned __int64 OverCommit; | |
}; | |
/* 1284 */ | |
struct _MI_WRITE_CALIBRATION | |
{ | |
unsigned int MaximumNumberProcessors; | |
_MI_WRITE_TYPES OptimalWriteType; | |
unsigned __int64 PerProcessorNumberOfBytes; | |
unsigned int OptimalWriteProcessors[2]; | |
_MI_WRITE_MODES *RawTimeStamps; | |
}; | |
/* 1350 */ | |
struct _MI_PARTITION_ZEROING | |
{ | |
_KEVENT PageEvent; | |
unsigned __int8 ThreadPriorityStatic; | |
unsigned __int8 AdaptiveZeroingEnabled; | |
int ZeroFreePageSlistMinimum; | |
_WORK_QUEUE_ITEM RebalanceZeroFreeWorkItem; | |
volatile int NodeCount; | |
volatile int BackgroundZeroingDisabled; | |
_KGATE LargeBootZeroingComplete; | |
_MI_WRITE_CALIBRATION WriteCalibration; | |
unsigned __int8 IpiCalibrationFailed; | |
volatile int ActiveProcessorsForIpiCalibration; | |
volatile int NodesReadyForIpiCalibration; | |
_KEVENT ReleaseNodeZeroingThreads; | |
struct _MI_ZERO_THREAD_CONTEXT *ThreadContext; | |
}; | |
/* 1351 */ | |
struct _MI_COMBINE_WORKITEM | |
{ | |
void *NextEntry; | |
_WORK_QUEUE_ITEM WorkItem; | |
}; | |
/* 1352 */ | |
struct __declspec(align(8)) _MI_COMBINE_PAGE_LISTHEAD | |
{ | |
_RTL_AVL_TREE Table; | |
volatile int Lock; | |
}; | |
/* 1353 */ | |
struct __declspec(align(8)) _MI_PAGE_COMBINE_STATISTICS | |
{ | |
unsigned __int64 PagesScannedActive; | |
unsigned __int64 PagesScannedStandby; | |
unsigned __int64 PagesCombined; | |
unsigned int CombineScanCount; | |
int CombinedBlocksInUse; | |
int SumCombinedBlocksReferenceCount; | |
}; | |
/* 1354 */ | |
struct _MI_PAGE_COMBINING_SUPPORT | |
{ | |
_MI_PARTITION *Partition; | |
_LIST_ENTRY ArbitraryPfnMapList; | |
_MI_COMBINE_WORKITEM FreeCombinePoolItem; | |
unsigned int CombiningThreadCount; | |
_LIST_ENTRY CombinePageFreeList; | |
unsigned __int64 CombineFreeListLock; | |
_MI_COMBINE_PAGE_LISTHEAD CombinePageListHeads[16]; | |
unsigned __int64 CommonPageCombineDomain; | |
_MI_PAGE_COMBINE_STATISTICS PageCombineStats; | |
}; | |
/* 1355 */ | |
struct _MMWORKING_SET_EXPANSION_HEAD | |
{ | |
_LIST_ENTRY ListHead; | |
}; | |
/* 1365 */ | |
struct _MI_PAGEFILE_TRACES | |
{ | |
int Status; | |
unsigned __int16 PartitionId; | |
unsigned __int8 Priority; | |
unsigned __int8 IrpPriority; | |
unsigned __int8 ReservationWrite; | |
_LARGE_INTEGER CurrentTime; | |
unsigned __int64 AvailablePages; | |
unsigned __int64 ModifiedPagesTotal; | |
unsigned __int64 ModifiedPagefilePages; | |
unsigned __int64 ModifiedNoWritePages; | |
unsigned __int64 ModifiedPagefileNoReservationPages; | |
struct | |
{ | |
_MDL Mdl; | |
unsigned __int64 Page[1]; | |
} MdlHack; | |
}; | |
/* 1366 */ | |
struct _MI_VISIBLE_PARTITION | |
{ | |
unsigned __int64 LowestPhysicalPage; | |
unsigned __int64 HighestPhysicalPage; | |
unsigned __int64 NumberOfPhysicalPages; | |
volatile unsigned int NumberOfPagingFiles; | |
unsigned __int8 SystemCacheInitialized; | |
_MMPAGING_FILE *PagingFile[16]; | |
__declspec(align(64)) volatile unsigned __int64 AvailablePages; | |
__declspec(align(64)) volatile unsigned __int64 ResidentAvailablePages; | |
__declspec(align(64)) _MMSUPPORT_INSTANCE PartitionWs[1]; | |
_MMWSL_INSTANCE PartitionWorkingSetLists[1]; | |
volatile unsigned __int64 TotalCommittedPages; | |
__declspec(align(32)) _MMPFNLIST ModifiedPageListHead; | |
__declspec(align(32)) _MMPFNLIST ModifiedNoWritePageListHead; | |
unsigned __int64 TotalCommitLimit; | |
unsigned __int64 TotalPagesForPagingFile; | |
unsigned __int64 VadPhysicalPages; | |
unsigned __int64 ProcessLockedFilePages; | |
volatile unsigned __int64 SharedCommit; | |
unsigned __int64 SlabAllocatorPages; | |
unsigned int ChargeCommitmentFailures[4]; | |
volatile int PageFileTraceIndex; | |
_MI_PAGEFILE_TRACES PageFileTraces[32]; | |
}; | |
/* 1326 */ | |
struct _MI_PARTITION | |
{ | |
_MI_PARTITION_CORE Core; | |
_MI_PARTITION_MODWRITES Modwriter; | |
_MI_PARTITION_STORES Store; | |
__declspec(align(64)) _MI_PARTITION_SEGMENTS Segments; | |
_MI_PARTITION_PAGE_LISTS PageLists; | |
_MI_PARTITION_COMMIT Commit; | |
_MI_PARTITION_ZEROING Zeroing; | |
_MI_PAGE_COMBINING_SUPPORT PageCombine; | |
void *WorkingSetControl; | |
_MMWORKING_SET_EXPANSION_HEAD WorkingSetExpansionHead; | |
unsigned int SessionDetachTimeStamp; | |
_MI_VISIBLE_PARTITION Vp; | |
}; | |
/* 1278 */ | |
struct _MI_FREE_LARGE_PAGES | |
{ | |
unsigned __int64 LargePageFreeCount[2]; | |
unsigned __int64 LargePageFreeCountHiLow[2][2]; | |
unsigned __int64 LargePagesCount[2][2][4][4]; | |
_MI_FREE_LARGE_PAGE_LIST *LargePageEntries[2][2][4][4]; | |
}; | |
/* 1279 */ | |
struct __declspec(align(8)) _MI_REBUILD_LARGE_PAGE_TIMER | |
{ | |
_WORK_QUEUE_ITEM WorkItem; | |
unsigned __int8 SecondsLeft; | |
unsigned __int8 RebuildActive; | |
unsigned __int8 NextPassDelta; | |
unsigned __int8 LargeSubPagesActive; | |
}; | |
/* 1280 */ | |
struct _MMPFNLIST_SHORT | |
{ | |
unsigned __int64 Total; | |
unsigned __int64 Flink; | |
unsigned __int64 Blink; | |
}; | |
/* 1282 */ | |
struct _MI_PAGE_COLORS | |
{ | |
unsigned int PageSize[4]; | |
}; | |
/* 1287 */ | |
struct __declspec(align(64)) _MI_NODE_INFORMATION | |
{ | |
_MI_FREE_LARGE_PAGES FreeLargePages[3]; | |
_MI_REBUILD_LARGE_PAGE_TIMER LargePageRebuildTimer; | |
_MMPFNLIST_SHORT StandbyPageList[4][8]; | |
__declspec(align(16)) _RTL_BITMAP FreePageListHeadsBitmap[2]; | |
unsigned int FreePageListHeadsBitmapBuffer[16]; | |
volatile unsigned __int64 FreeCount[2]; | |
unsigned __int64 TotalPages[4]; | |
unsigned __int64 TotalPagesEntireNode; | |
unsigned int CurrentHugeRangeColor; | |
unsigned __int64 HugeIoRangeFreeCount[2]; | |
unsigned int MmShiftedColor; | |
unsigned int Color; | |
volatile unsigned __int64 ChannelFreeCount[4][2]; | |
struct | |
{ | |
unsigned __int32 ChannelsHotCold : 1; | |
unsigned __int32 Spare : 31; | |
} Flags; | |
unsigned int LargeListMoveInProgress; | |
_MI_LARGE_PAGE_LISTS_CHANGING *LargeListWaiters; | |
_EX_PUSH_LOCK NodeLock; | |
unsigned __int64 ZeroThreadHugeMapLock; | |
unsigned __int8 ChannelStatus; | |
unsigned __int8 ChannelOrdering[4]; | |
unsigned __int8 LockedChannelOrdering[4]; | |
unsigned __int8 PowerAttribute[4]; | |
unsigned __int64 LargePageLock; | |
_MI_PAGE_COLORS PageColorTable; | |
unsigned __int64 NumberOfPagesGoingBad; | |
_MI_WRITE_CALIBRATION WriteCalibration; | |
void *BootZeroContext; | |
void *BootZeroPageTimesPerProcessor; | |
void *ZeroingVaBase; | |
unsigned __int64 TotalBytesToZero; | |
unsigned __int64 PerProcessorNumberOfBytesToZero; | |
void *ZeroingContext; | |
volatile unsigned int ZeroingProcessorCount; | |
volatile int ZeroHand; | |
volatile int FinishedProcessors; | |
unsigned __int64 CyclesToZeroOneLargePage; | |
unsigned __int64 *ScaledCyclesToZeroOneLargePage; | |
_GROUP_AFFINITY GroupAffinity; | |
unsigned __int16 ProcessorCount; | |
unsigned __int8 BackgroundZeroingActive; | |
_PHYSICAL_MEMORY_DESCRIPTOR *ZeroingPhysicalMemoryBlock; | |
}; | |
/* 1285 */ | |
struct _PHYSICAL_MEMORY_RUN | |
{ | |
unsigned __int64 BasePage; | |
unsigned __int64 PageCount; | |
}; | |
/* 1286 */ | |
struct _PHYSICAL_MEMORY_DESCRIPTOR | |
{ | |
unsigned int NumberOfRuns; | |
unsigned __int64 NumberOfPages; | |
_PHYSICAL_MEMORY_RUN Run[1]; | |
}; | |
/* 1307 */ | |
struct $F8D32A3D40D35A4C9C2259605482BCE6 | |
{ | |
unsigned __int16 TotalNumberOfPtes4132 : 10; | |
unsigned __int16 Spare0 : 1; | |
unsigned __int16 SessionDriverProtos : 1; | |
unsigned __int16 LargePages : 1; | |
unsigned __int16 DebugSymbolsLoaded : 1; | |
unsigned __int16 WriteCombined : 1; | |
unsigned __int16 NoCache : 1; | |
}; | |
/* 1308 */ | |
union $AF2B21B5DBE4EF6009D463EC2BF52AE0 | |
{ | |
$F8D32A3D40D35A4C9C2259605482BCE6 __s0; | |
unsigned __int16 Short0; | |
}; | |
/* 1309 */ | |
struct $18617FF5574FAFE6FF4239F3B53078A0 | |
{ | |
unsigned __int8 Spare : 1; | |
unsigned __int8 DefaultProtectionMask : 5; | |
unsigned __int8 Binary32 : 1; | |
unsigned __int8 ContainsDebug : 1; | |
unsigned __int8 ForceCollision : 1; | |
}; | |
/* 1310 */ | |
union $84D3874722703F51601C11B2FA98B269 | |
{ | |
$18617FF5574FAFE6FF4239F3B53078A0 __s0; | |
unsigned __int8 UChar1; | |
}; | |
/* 1311 */ | |
struct $CB0533A8E10952E8BDE2B10B40389D58 | |
{ | |
_BYTE gap0; | |
unsigned __int8 UChar2; | |
}; | |
/* 1312 */ | |
struct $3DD2C26DC01458CFE50856A5093455B3 | |
{ | |
_BYTE gap0; | |
unsigned __int8 : 1; | |
unsigned __int8 ImageSigningType : 3; | |
unsigned __int8 ImageSigningLevel : 4; | |
}; | |
/* 1313 */ | |
union $92AC35496D97B8342A99F868BB92E366 | |
{ | |
$84D3874722703F51601C11B2FA98B269 ___u1; | |
$CB0533A8E10952E8BDE2B10B40389D58 __s1; | |
$3DD2C26DC01458CFE50856A5093455B3 __s2; | |
}; | |
/* 1314 */ | |
struct _SEGMENT_FLAGS | |
{ | |
$AF2B21B5DBE4EF6009D463EC2BF52AE0 ___u0; | |
$92AC35496D97B8342A99F868BB92E366 ___u1; | |
}; | |
/* 1325 */ | |
union $1225480D13B1CE681B39AB5228AB4338 | |
{ | |
_MMEXTEND_INFO *ExtendInfo; | |
void *BasedAddress; | |
}; | |
/* 1289 */ | |
struct _SEGMENT | |
{ | |
_CONTROL_AREA *ControlArea; | |
unsigned int TotalNumberOfPtes; | |
_SEGMENT_FLAGS SegmentFlags; | |
unsigned __int64 NumberOfCommittedPages; | |
unsigned __int64 SizeOfSegment; | |
$1225480D13B1CE681B39AB5228AB4338 ___u5; | |
_EX_PUSH_LOCK SegmentLock; | |
union | |
{ | |
unsigned __int64 ImageCommitment; | |
unsigned int CreatingProcessId; | |
} u1; | |
union | |
{ | |
_MI_SECTION_IMAGE_INFORMATION *ImageInformation; | |
void *FirstMappedVa; | |
} u2; | |
_MMPTE *PrototypePte; | |
}; | |
/* 1277 */ | |
struct _MI_FREE_LARGE_PAGE_LIST | |
{ | |
_LIST_ENTRY ListHead; | |
unsigned __int64 EntryCount; | |
}; | |
/* 1283 */ | |
struct _MI_WRITE_MODES | |
{ | |
unsigned __int64 WriteType[2]; | |
}; | |
/* 1364 */ | |
union $80FE60C0912A4E060D4BD23722769CB1 | |
{ | |
unsigned int ToBeEvictedCount; | |
unsigned int HybridPriority; | |
}; | |
/* 1357 */ | |
struct __declspec(align(16)) _MMPAGING_FILE | |
{ | |
unsigned __int64 Size; | |
unsigned __int64 MaximumSize; | |
unsigned __int64 MinimumSize; | |
unsigned __int64 FreeSpace; | |
unsigned __int64 PeakUsage; | |
unsigned __int64 HighestPage; | |
unsigned __int64 FreeReservationSpace; | |
_FILE_OBJECT *File; | |
_MMMOD_WRITER_MDL_ENTRY **Entry; | |
unsigned int NumberOfModWriterEntries; | |
_SLIST_HEADER PfnsToFree; | |
_UNICODE_STRING PageFileName; | |
_MI_PAGING_FILE_SPACE_BITMAPS *Bitmaps; | |
unsigned int AllocationBitmapHint; | |
unsigned int LargestAllocationCluster; | |
unsigned int RefreshAllocationCluster; | |
unsigned int LastRefreshAllocationCluster; | |
unsigned int ReservedClusterSizeAggregate; | |
unsigned int MaximumRunLengthInBitmaps; | |
_RTL_RB_TREE BitmapsCacheLengthTree; | |
_RTL_RB_TREE BitmapsCacheLocationTree; | |
_LIST_ENTRY BitmapsCacheFreeList; | |
_MI_PAGEFILE_BITMAPS_CACHE_ENTRY *BitmapsCacheEntries; | |
$80FE60C0912A4E060D4BD23722769CB1 ___u23; | |
unsigned __int16 PageFileNumber : 4; | |
unsigned __int16 WsSwapPagefile : 1; | |
unsigned __int16 NoReservations : 1; | |
unsigned __int16 VirtualStorePagefile : 1; | |
unsigned __int16 SwapSupported : 1; | |
unsigned __int16 NodeInserted : 1; | |
unsigned __int16 StackNotified : 1; | |
unsigned __int16 BackedBySCM : 1; | |
unsigned __int16 SpecialPurposeMemory : 1; | |
unsigned __int16 Spare0 : 3; | |
unsigned __int8 AdriftMdls : 1; | |
unsigned __int8 Spare1 : 7; | |
unsigned __int8 IgnoreReservations : 1; | |
unsigned __int8 Spare2 : 7; | |
unsigned int PageHashPages; | |
unsigned int PageHashPagesPeak; | |
unsigned int *PageHash; | |
void *FileHandle; | |
volatile int SpinLock; | |
_RTL_AVL_TREE FlowThroughReadRoot; | |
_MI_PARTITION *Partition; | |
_RTL_BALANCED_NODE FileObjectNode; | |
}; | |
/* 1281 */ | |
struct _MI_LARGE_PAGE_LISTS_CHANGING | |
{ | |
_MI_LARGE_PAGE_LISTS_CHANGING *Next; | |
_KGATE Gate; | |
}; | |
/* 1305 */ | |
union $2D13D1F237075DAEEDCB2F25F5E778A5 | |
{ | |
_LIST_ENTRY ListHead; | |
void *AweContext; | |
}; | |
/* 1290 */ | |
struct _MMSECTION_FLAGS | |
{ | |
unsigned __int32 BeingDeleted : 1; | |
unsigned __int32 BeingCreated : 1; | |
unsigned __int32 BeingPurged : 1; | |
unsigned __int32 NoModifiedWriting : 1; | |
unsigned __int32 FailAllIo : 1; | |
unsigned __int32 Image : 1; | |
unsigned __int32 Based : 1; | |
unsigned __int32 File : 1; | |
unsigned __int32 AttemptingDelete : 1; | |
unsigned __int32 PrefetchCreated : 1; | |
unsigned __int32 PhysicalMemory : 1; | |
unsigned __int32 ImageControlAreaOnRemovableMedia : 1; | |
unsigned __int32 Reserve : 1; | |
unsigned __int32 Commit : 1; | |
unsigned __int32 NoChange : 1; | |
unsigned __int32 WasPurged : 1; | |
unsigned __int32 UserReference : 1; | |
unsigned __int32 GlobalMemory : 1; | |
unsigned __int32 DeleteOnClose : 1; | |
unsigned __int32 FilePointerNull : 1; | |
unsigned __int32 PreferredNode : 6; | |
unsigned __int32 GlobalOnlyPerSession : 1; | |
unsigned __int32 UserWritable : 1; | |
unsigned __int32 SystemVaAllocated : 1; | |
unsigned __int32 PreferredFsCompressionBoundary : 1; | |
unsigned __int32 UsingFileExtents : 1; | |
unsigned __int32 PageSize64K : 1; | |
}; | |
/* 1291 */ | |
struct _MMSECTION_FLAGS2 | |
{ | |
unsigned __int16 PartitionId : 10; | |
unsigned __int8 NoCrossPartitionAccess : 1; | |
unsigned __int8 SubsectionCrossPartitionReferenceOverflow : 1; | |
}; | |
/* 1299 */ | |
union $6497B3B332FBE6AA944876FB43D8DF8C | |
{ | |
unsigned int NumberOfSystemCacheViews; | |
unsigned int ImageRelocationStartBit; | |
}; | |
/* 1300 */ | |
struct $2539D322F3AD524C99AECADF227BA701 | |
{ | |
unsigned __int32 ImageRelocationSizeIn64k : 16; | |
unsigned __int32 SystemImage : 1; | |
unsigned __int32 CantMove : 1; | |
unsigned __int32 StrongCode : 2; | |
unsigned __int32 BitMap : 2; | |
unsigned __int32 ImageActive : 1; | |
unsigned __int32 ImageBaseOkToReuse : 1; | |
}; | |
/* 1301 */ | |
union $FBC4DE46B923DE6B108561521BA17737 | |
{ | |
volatile int WritableUserReferences; | |
$2539D322F3AD524C99AECADF227BA701 __s1; | |
}; | |
/* 1302 */ | |
union $FE23979C44C45D906B2DBFFBF655C8A9 | |
{ | |
unsigned int FlushInProgressCount; | |
unsigned int NumberOfSubsections; | |
_MI_IMAGE_SECURITY_REFERENCE *SeImageStub; | |
}; | |
/* 1303 */ | |
struct $B88BC2B29871B13C437D5C45894610D9 | |
{ | |
unsigned __int64 IoAttributionContext : 61; | |
unsigned __int64 Spare : 3; | |
}; | |
/* 1304 */ | |
struct $96C08E6C596AA13C6800C599D0FAF4BE | |
{ | |
unsigned __int64 CommittedPageCount : 36; | |
}; | |
/* 1306 */ | |
struct _CONTROL_AREA | |
{ | |
_SEGMENT *Segment; | |
$2D13D1F237075DAEEDCB2F25F5E778A5 ___u1; | |
unsigned __int64 NumberOfSectionReferences; | |
unsigned __int64 NumberOfPfnReferences; | |
unsigned __int64 NumberOfMappedViews; | |
unsigned __int64 NumberOfUserReferences; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMSECTION_FLAGS Flags; | |
} u; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMSECTION_FLAGS2 Flags; | |
} u1; | |
_EX_FAST_REF FilePointer; | |
volatile int ControlAreaLock; | |
unsigned int ModifiedWriteCount; | |
_MI_CONTROL_AREA_WAIT_BLOCK *WaitList; | |
union | |
{ | |
struct | |
{ | |
$6497B3B332FBE6AA944876FB43D8DF8C ___u0; | |
$FBC4DE46B923DE6B108561521BA17737 ___u1; | |
$FE23979C44C45D906B2DBFFBF655C8A9 ___u2; | |
} e2; | |
} u2; | |
_EX_PUSH_LOCK FileObjectLock; | |
volatile unsigned __int64 LockedPages; | |
union | |
{ | |
$B88BC2B29871B13C437D5C45894610D9 __s0; | |
unsigned __int64 ImageCrossPartitionCharge; | |
$96C08E6C596AA13C6800C599D0FAF4BE __s2; | |
} u3; | |
}; | |
/* 1315 */ | |
struct __declspec(align(8)) _MMEXTEND_INFO | |
{ | |
unsigned __int64 CommittedSize; | |
unsigned int ReferenceCount; | |
}; | |
/* 1316 */ | |
struct $66DC0EC290AA6DCA6B62C030901B9071 | |
{ | |
unsigned __int16 SubSystemMinorVersion; | |
unsigned __int16 SubSystemMajorVersion; | |
}; | |
/* 1317 */ | |
union $0BA1E6208C9021195E24912A4815754D | |
{ | |
$66DC0EC290AA6DCA6B62C030901B9071 __s0; | |
unsigned int SubSystemVersion; | |
}; | |
/* 1318 */ | |
struct $3F04A6BA6C494E4FD8CB880D3817940D | |
{ | |
unsigned __int16 MajorOperatingSystemVersion; | |
unsigned __int16 MinorOperatingSystemVersion; | |
}; | |
/* 1319 */ | |
union $C946EC7EB9AE17DA3C62DE2DFE72B1E5 | |
{ | |
$3F04A6BA6C494E4FD8CB880D3817940D __s0; | |
unsigned int OperatingSystemVersion; | |
}; | |
/* 1320 */ | |
struct $F070E9AC67FA8BC49B011A7219020341 | |
{ | |
unsigned __int8 ComPlusNativeReady : 1; | |
unsigned __int8 ComPlusILOnly : 1; | |
unsigned __int8 ImageDynamicallyRelocated : 1; | |
unsigned __int8 ImageMappedFlat : 1; | |
unsigned __int8 BaseBelow4gb : 1; | |
unsigned __int8 ComPlusPrefer32bit : 1; | |
unsigned __int8 Reserved : 2; | |
}; | |
/* 1321 */ | |
union $324AFC9E32E1E147C52FB07640BE0A94 | |
{ | |
unsigned __int8 ImageFlags; | |
$F070E9AC67FA8BC49B011A7219020341 __s1; | |
}; | |
/* 1322 */ | |
struct _SECTION_IMAGE_INFORMATION | |
{ | |
void *TransferAddress; | |
unsigned int ZeroBits; | |
unsigned __int64 MaximumStackSize; | |
unsigned __int64 CommittedStackSize; | |
unsigned int SubSystemType; | |
$0BA1E6208C9021195E24912A4815754D ___u5; | |
$C946EC7EB9AE17DA3C62DE2DFE72B1E5 ___u6; | |
unsigned __int16 ImageCharacteristics; | |
unsigned __int16 DllCharacteristics; | |
unsigned __int16 Machine; | |
unsigned __int8 ImageContainsCode; | |
$324AFC9E32E1E147C52FB07640BE0A94 ___u11; | |
unsigned int LoaderFlags; | |
unsigned int ImageFileSize; | |
unsigned int CheckSum; | |
}; | |
/* 1323 */ | |
struct _MI_EXTRA_IMAGE_INFORMATION | |
{ | |
unsigned int SizeOfHeaders; | |
unsigned int SizeOfImage; | |
unsigned int TimeDateStamp; | |
unsigned __int32 ImageCetShadowStacksReady : 1; | |
unsigned __int32 ImageCetShadowStacksStrictMode : 1; | |
unsigned __int32 ImageCetSetContextIpValidationRelaxedMode : 1; | |
unsigned __int32 ImageCetDynamicApisAllowInProc : 1; | |
unsigned __int32 ImageCetDowngradeReserved1 : 1; | |
unsigned __int32 ImageCetDowngradeReserved2 : 1; | |
unsigned __int32 Spare : 26; | |
}; | |
/* 1324 */ | |
struct _MI_SECTION_IMAGE_INFORMATION | |
{ | |
_SECTION_IMAGE_INFORMATION ExportedImageInformation; | |
_MI_EXTRA_IMAGE_INFORMATION InternalImageInformation; | |
}; | |
/* 1356 */ | |
struct _MODWRITER_FLAGS | |
{ | |
unsigned __int32 KeepForever : 1; | |
unsigned __int32 Networked : 1; | |
unsigned __int32 IoPriority : 3; | |
unsigned __int32 ModifiedStoreWrite : 1; | |
}; | |
/* 1358 */ | |
struct _MMMOD_WRITER_MDL_ENTRY | |
{ | |
_LIST_ENTRY Links; | |
union | |
{ | |
_IO_STATUS_BLOCK IoStatus; | |
} u; | |
_IRP *Irp; | |
_MODWRITER_FLAGS u1; | |
unsigned int StoreWriteRefCount; | |
_KAPC StoreWriteCompletionApc; | |
unsigned int ByteCount; | |
unsigned int ChargedPages; | |
_MMPAGING_FILE *PagingFile; | |
_FILE_OBJECT *File; | |
_CONTROL_AREA *ControlArea; | |
_ERESOURCE *FileResource; | |
_LARGE_INTEGER WriteOffset; | |
_LARGE_INTEGER IssueTime; | |
_MI_PARTITION *Partition; | |
_MDL *PointerMdl; | |
_MDL Mdl; | |
unsigned __int64 Page[1]; | |
}; | |
/* 1360 */ | |
union $AC808C7CF16AC3D18D234598DE0C58D4 | |
{ | |
unsigned int RefCount; | |
_MI_PAGING_FILE_SPACE_BITMAPS *Anchor; | |
}; | |
/* 1361 */ | |
union $AF7B4844EDC6311A9372CB8C59DC6960 | |
{ | |
_RTL_BITMAP ReservationBitmap; | |
_RTL_BITMAP EvictedBitmap; | |
}; | |
/* 1359 */ | |
struct _MI_PAGING_FILE_SPACE_BITMAPS | |
{ | |
$AC808C7CF16AC3D18D234598DE0C58D4 ___u0; | |
_RTL_BITMAP AllocationBitmap; | |
$AF7B4844EDC6311A9372CB8C59DC6960 ___u2; | |
}; | |
/* 1362 */ | |
union $F16AFFE20C67564FC04CAB516CBD00F8 | |
{ | |
_RTL_BALANCED_NODE LengthTreeNode; | |
_LIST_ENTRY FreeListEntry; | |
}; | |
/* 1363 */ | |
struct _MI_PAGEFILE_BITMAPS_CACHE_ENTRY | |
{ | |
$F16AFFE20C67564FC04CAB516CBD00F8 ___u0; | |
_RTL_BALANCED_NODE LocationTreeNode; | |
unsigned int StartingIndex; | |
unsigned int Length; | |
}; | |
/* 1292 */ | |
struct _MI_CONTROL_AREA_WAIT_BLOCK | |
{ | |
_MI_CONTROL_AREA_WAIT_BLOCK *Next; | |
unsigned int WaitReason; | |
unsigned int WaitResponse; | |
_KGATE Gate; | |
}; | |
/* 1293 */ | |
struct _MI_PROTOTYPE_PTES_NODE | |
{ | |
_RTL_BALANCED_NODE Node; | |
union | |
{ | |
struct | |
{ | |
unsigned __int64 AllocationType : 3; | |
unsigned __int64 Inserted : 1; | |
} e1; | |
struct | |
{ | |
unsigned __int64 PrototypePtesFlags; | |
} e2; | |
} u1; | |
}; | |
/* 1294 */ | |
struct $67662CBFC5AA38F53CF99531001397E6 | |
{ | |
unsigned __int64 SecurityBeingCreated : 2; | |
unsigned __int64 SecurityMandatory : 1; | |
unsigned __int64 PageHashPointer : 61; | |
}; | |
/* 1295 */ | |
union $AD3EDC8BD2DFE62FA16C5EDC78BE8356 | |
{ | |
void *PageHashes; | |
unsigned __int64 Value; | |
$67662CBFC5AA38F53CF99531001397E6 __s2; | |
}; | |
/* 1296 */ | |
struct _IMAGE_SECURITY_CONTEXT | |
{ | |
$AD3EDC8BD2DFE62FA16C5EDC78BE8356 ___u0; | |
}; | |
/* 1297 */ | |
struct $7EE0130C63682289211C38B4235815C7 | |
{ | |
unsigned __int64 FilesystemWantsRva : 1; | |
unsigned __int64 Spare : 3; | |
}; | |
/* 1298 */ | |
struct _MI_IMAGE_SECURITY_REFERENCE | |
{ | |
_MI_PROTOTYPE_PTES_NODE ProtosNode; | |
void *DynamicRelocations; | |
_IMAGE_SECURITY_CONTEXT SecurityContext; | |
union | |
{ | |
void *ImageFileExtents; | |
unsigned __int64 ImageFileExtentsUlongPtr; | |
$7EE0130C63682289211C38B4235815C7 __s2; | |
} u1; | |
unsigned __int64 StrongImageReference; | |
}; | |
/* 1369 */ | |
union $222411C604A05BA7C5E46BD1ABCFCEF1 | |
{ | |
struct | |
{ | |
unsigned __int64 Tradable : 1; | |
unsigned __int64 NonPagedBuddy : 43; | |
} Leaf; | |
struct | |
{ | |
unsigned __int64 Tradable : 1; | |
unsigned __int64 WsleAge : 3; | |
unsigned __int64 OldestWsleLeafEntries : 10; | |
unsigned __int64 OldestWsleLeafAge : 3; | |
unsigned __int64 NonPagedBuddy : 43; | |
} PageTable; | |
unsigned __int64 EntireActiveField; | |
}; | |
/* 1370 */ | |
struct _MI_ACTIVE_PFN | |
{ | |
$222411C604A05BA7C5E46BD1ABCFCEF1 ___u0; | |
}; | |
/* 1371 */ | |
struct $559D8309DABD45803AD694472C7FC28A | |
{ | |
unsigned __int64 Flink : 36; | |
unsigned __int64 NodeFlinkHigh : 28; | |
}; | |
/* 1372 */ | |
struct $5B7DEAD9D4065C8266C49A2FC7A4EAAA | |
{ | |
unsigned __int64 Blink : 36; | |
unsigned __int64 NodeBlinkHigh : 20; | |
unsigned __int64 TbFlushStamp : 4; | |
unsigned __int64 Unused : 2; | |
unsigned __int64 PageBlinkDeleteBit : 1; | |
unsigned __int64 PageBlinkLockBit : 1; | |
}; | |
/* 1373 */ | |
struct $1DCB6AB192F9F1AD8A0C0395A244A774 | |
{ | |
unsigned __int64 ShareCount : 62; | |
unsigned __int64 PageShareCountDeleteBit : 1; | |
unsigned __int64 PageShareCountLockBit : 1; | |
}; | |
/* 1374 */ | |
struct $CF058556D65B75BE07F38BCE4AD218BA | |
{ | |
unsigned __int64 LockNotUsed : 62; | |
unsigned __int64 DeleteBit : 1; | |
unsigned __int64 LockBit : 1; | |
}; | |
/* 1375 */ | |
union $4F8B75F7759D8E6FB14849376EA08370 | |
{ | |
$5B7DEAD9D4065C8266C49A2FC7A4EAAA __s0; | |
$1DCB6AB192F9F1AD8A0C0395A244A774 __s1; | |
unsigned __int64 EntireField; | |
volatile __int64 Lock; | |
$CF058556D65B75BE07F38BCE4AD218BA __s4; | |
}; | |
/* 1376 */ | |
struct _MIPFNBLINK | |
{ | |
$4F8B75F7759D8E6FB14849376EA08370 ___u0; | |
}; | |
/* 1377 */ | |
struct _MMPFNENTRY1 | |
{ | |
unsigned __int8 PageLocation : 3; | |
unsigned __int8 WriteInProgress : 1; | |
unsigned __int8 Modified : 1; | |
unsigned __int8 ReadInProgress : 1; | |
unsigned __int8 CacheAttribute : 2; | |
}; | |
/* 1378 */ | |
struct _MMPFNENTRY3 | |
{ | |
unsigned __int8 Priority : 3; | |
unsigned __int8 OnProtectedStandby : 1; | |
unsigned __int8 InPageError : 1; | |
unsigned __int8 SystemChargedPage : 1; | |
unsigned __int8 RemovalRequested : 1; | |
unsigned __int8 ParityError : 1; | |
}; | |
/* 1379 */ | |
struct $B20E0EC650522E50CBDC01B554548569 | |
{ | |
unsigned __int16 ReferenceCount; | |
_MMPFNENTRY1 e1; | |
_MMPFNENTRY3 e3; | |
}; | |
/* 1380 */ | |
struct $8D9ED47C9F2F2CD645B633E301950288 | |
{ | |
unsigned __int64 PteFrame : 36; | |
unsigned __int64 ResidentPage : 1; | |
unsigned __int64 Unused1 : 1; | |
unsigned __int64 Unused2 : 1; | |
unsigned __int64 Partition : 10; | |
unsigned __int64 FileOnly : 1; | |
unsigned __int64 PfnExists : 1; | |
unsigned __int64 Spare : 9; | |
unsigned __int64 PageIdentity : 3; | |
unsigned __int64 PrototypePte : 1; | |
}; | |
/* 1381 */ | |
struct $3EB35EA32DBEAA155F8A98DFD63E8FEF | |
{ | |
_LIST_ENTRY ListEntry; | |
_MMPTE OriginalPte; | |
}; | |
/* 1382 */ | |
struct $03F31543BA869ECA9B046198F1FF9964 | |
{ | |
union | |
{ | |
_SINGLE_LIST_ENTRY NextSlistPfn; | |
void *Next; | |
$559D8309DABD45803AD694472C7FC28A __s2; | |
_MI_ACTIVE_PFN Active; | |
} u1; | |
_MMPTE *PteAddress; | |
}; | |
/* 1383 */ | |
struct $D21C15146D4EB79F89A1577A87EB971B | |
{ | |
_BYTE gap0[8]; | |
unsigned __int64 PteLong; | |
}; | |
/* 1384 */ | |
union $EA3A1A62AE580FC98623708650C44B42 | |
{ | |
$3EB35EA32DBEAA155F8A98DFD63E8FEF __s0; | |
_RTL_BALANCED_NODE TreeNode; | |
$03F31543BA869ECA9B046198F1FF9964 __s2; | |
$D21C15146D4EB79F89A1577A87EB971B __s3; | |
}; | |
/* 1385 */ | |
struct $091B9505113E957C66E66A7109F35DF5 | |
{ | |
unsigned __int8 Unused : 4; | |
unsigned __int8 Unused2 : 4; | |
unsigned __int8 ViewCount; | |
}; | |
/* 1386 */ | |
struct $1CD8408E3F15F5436D32E8692539D0A4 | |
{ | |
_BYTE gap0; | |
unsigned __int8 NodeFlinkLow; | |
}; | |
/* 1387 */ | |
struct $DB34FF57426EE11B3D5D6B42F8219D0E | |
{ | |
_BYTE gap0; | |
unsigned __int8 ModifiedListBucketIndex : 4; | |
}; | |
/* 1388 */ | |
struct $D4F786131025CCDDFC6B0CF4347CD645 | |
{ | |
_BYTE gap0; | |
unsigned __int8 AnchorLargePageSize : 2; | |
}; | |
/* 1389 */ | |
union $401E70FF81CFD3A212CA4ED097BE02E5 | |
{ | |
$091B9505113E957C66E66A7109F35DF5 __s0; | |
$1CD8408E3F15F5436D32E8692539D0A4 __s1; | |
$DB34FF57426EE11B3D5D6B42F8219D0E __s2; | |
$D4F786131025CCDDFC6B0CF4347CD645 __s3; | |
}; | |
/* 1390 */ | |
struct _MMPFN | |
{ | |
$EA3A1A62AE580FC98623708650C44B42 ___u0; | |
_MIPFNBLINK u2; | |
union | |
{ | |
$B20E0EC650522E50CBDC01B554548569 __s0; | |
struct | |
{ | |
unsigned __int16 ReferenceCount; | |
} e2; | |
struct | |
{ | |
unsigned int EntireField; | |
} e4; | |
} u3; | |
unsigned __int16 NodeBlinkLow; | |
$401E70FF81CFD3A212CA4ED097BE02E5 ___u4; | |
union | |
{ | |
$8D9ED47C9F2F2CD645B633E301950288 __s0; | |
unsigned __int64 EntireField; | |
} u4; | |
}; | |
/* 1423 */ | |
struct $8252704583D14E8FFB12FD078EC5DF98 | |
{ | |
_MMVAD_SHORT *NextVad; | |
void *ExtraCreateInfo; | |
}; | |
/* 1424 */ | |
union $585606DF97E3B4B6BE7A453C6913EC08 | |
{ | |
$8252704583D14E8FFB12FD078EC5DF98 __s0; | |
_RTL_BALANCED_NODE VadNode; | |
}; | |
/* 1392 */ | |
struct _MMVAD_FLAGS | |
{ | |
unsigned __int32 Lock : 1; | |
unsigned __int32 LockContended : 1; | |
unsigned __int32 DeleteInProgress : 1; | |
unsigned __int32 NoChange : 1; | |
unsigned __int32 VadType : 3; | |
unsigned __int32 Protection : 5; | |
unsigned __int32 PreferredNode : 6; | |
unsigned __int32 PageSize : 2; | |
unsigned __int32 PrivateMemory : 1; | |
}; | |
/* 1393 */ | |
struct _MM_PRIVATE_VAD_FLAGS | |
{ | |
unsigned __int32 Lock : 1; | |
unsigned __int32 LockContended : 1; | |
unsigned __int32 DeleteInProgress : 1; | |
unsigned __int32 NoChange : 1; | |
unsigned __int32 VadType : 3; | |
unsigned __int32 Protection : 5; | |
unsigned __int32 PreferredNode : 6; | |
unsigned __int32 PageSize : 2; | |
unsigned __int32 PrivateMemoryAlwaysSet : 1; | |
unsigned __int32 WriteWatch : 1; | |
unsigned __int32 FixedLargePageSize : 1; | |
unsigned __int32 ZeroFillPagesOptional : 1; | |
unsigned __int32 Graphics : 1; | |
unsigned __int32 Enclave : 1; | |
unsigned __int32 ShadowStack : 1; | |
unsigned __int32 PhysicalMemoryPfnsReferenced : 1; | |
}; | |
/* 1394 */ | |
struct _MM_GRAPHICS_VAD_FLAGS | |
{ | |
unsigned __int32 Lock : 1; | |
unsigned __int32 LockContended : 1; | |
unsigned __int32 DeleteInProgress : 1; | |
unsigned __int32 NoChange : 1; | |
unsigned __int32 VadType : 3; | |
unsigned __int32 Protection : 5; | |
unsigned __int32 PreferredNode : 6; | |
unsigned __int32 PageSize : 2; | |
unsigned __int32 PrivateMemoryAlwaysSet : 1; | |
unsigned __int32 WriteWatch : 1; | |
unsigned __int32 FixedLargePageSize : 1; | |
unsigned __int32 ZeroFillPagesOptional : 1; | |
unsigned __int32 GraphicsAlwaysSet : 1; | |
unsigned __int32 GraphicsUseCoherentBus : 1; | |
unsigned __int32 GraphicsNoCache : 1; | |
unsigned __int32 GraphicsPageProtection : 3; | |
}; | |
/* 1395 */ | |
struct _MM_SHARED_VAD_FLAGS | |
{ | |
unsigned __int32 Lock : 1; | |
unsigned __int32 LockContended : 1; | |
unsigned __int32 DeleteInProgress : 1; | |
unsigned __int32 NoChange : 1; | |
unsigned __int32 VadType : 3; | |
unsigned __int32 Protection : 5; | |
unsigned __int32 PreferredNode : 6; | |
unsigned __int32 PageSize : 2; | |
unsigned __int32 PrivateMemoryAlwaysClear : 1; | |
unsigned __int32 PrivateFixup : 1; | |
unsigned __int32 HotPatchAllowed : 1; | |
}; | |
/* 1396 */ | |
struct _MMVAD_FLAGS1 | |
{ | |
unsigned __int32 CommitCharge : 31; | |
unsigned __int32 MemCommit : 1; | |
}; | |
/* 1391 */ | |
struct _MMVAD_SHORT | |
{ | |
$585606DF97E3B4B6BE7A453C6913EC08 ___u0; | |
unsigned int StartingVpn; | |
unsigned int EndingVpn; | |
unsigned __int8 StartingVpnHigh; | |
unsigned __int8 EndingVpnHigh; | |
unsigned __int8 CommitChargeHigh; | |
unsigned __int8 SpareNT64VadUChar; | |
int ReferenceCount; | |
_EX_PUSH_LOCK PushLock; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMVAD_FLAGS VadFlags; | |
_MM_PRIVATE_VAD_FLAGS PrivateVadFlags; | |
_MM_GRAPHICS_VAD_FLAGS GraphicsVadFlags; | |
_MM_SHARED_VAD_FLAGS SharedVadFlags; | |
volatile unsigned int VolatileVadLong; | |
} u; | |
union | |
{ | |
unsigned int LongFlags1; | |
_MMVAD_FLAGS1 VadFlags1; | |
} u1; | |
_MI_VAD_EVENT_BLOCK *EventList; | |
}; | |
/* 1397 */ | |
struct __declspec(align(8)) _MI_VAD_EVENT_BLOCK | |
{ | |
_MI_VAD_EVENT_BLOCK *Next; | |
$E2393686A935BA9A0F5BEB93494C4E0B ___u1; | |
unsigned int WaitReason; | |
}; | |
/* 1398 */ | |
struct _MMSECURE_FLAGS | |
{ | |
unsigned __int32 ReadOnly : 1; | |
unsigned __int32 ReadWrite : 1; | |
unsigned __int32 SecNoChange : 1; | |
unsigned __int32 NoDelete : 1; | |
unsigned __int32 RequiresPteReversal : 1; | |
unsigned __int32 ExclusiveSecure : 1; | |
unsigned __int32 UserModeOnly : 1; | |
unsigned __int32 NoInherit : 1; | |
unsigned __int32 CheckVad : 1; | |
unsigned __int32 Spare : 3; | |
}; | |
/* 1399 */ | |
struct _MMADDRESS_LIST | |
{ | |
union | |
{ | |
_MMSECURE_FLAGS Flags; | |
unsigned int FlagsLong; | |
void *StartVa; | |
} u1; | |
void *EndVa; | |
}; | |
/* 1418 */ | |
struct _MI_LARGEPAGE_VAD_INFO | |
{ | |
unsigned __int8 LargeImageBias; | |
unsigned __int8 Spare[3]; | |
unsigned __int64 ActualImageViewSize; | |
_EPARTITION *ReferencedPartition; | |
}; | |
/* 1419 */ | |
struct $2B8095CDED35582F47E90D952335E2C8 | |
{ | |
unsigned __int32 ViewPageSize : 2; | |
}; | |
/* 1420 */ | |
struct _MI_PHYSICAL_VIEW | |
{ | |
_RTL_BALANCED_NODE PhysicalNode; | |
_MMVAD_SHORT *Vad; | |
struct _AWEINFO *AweInfo; | |
union | |
{ | |
$2B8095CDED35582F47E90D952335E2C8 __s0; | |
_CONTROL_AREA *ControlArea; | |
} u1; | |
}; | |
/* 1421 */ | |
struct __declspec(align(8)) _MI_SUB64K_FREE_RANGES | |
{ | |
_RTL_BITMAP_EX BitMap; | |
_LIST_ENTRY ListEntry; | |
_MMVAD_SHORT *Vad; | |
unsigned int SetBits; | |
unsigned int FullSetBits; | |
unsigned __int32 SubListIndex : 2; | |
unsigned __int32 Hint : 30; | |
}; | |
/* 1422 */ | |
union $E2393686A935BA9A0F5BEB93494C4E0B | |
{ | |
_KGATE Gate; | |
_MMADDRESS_LIST SecureInfo; | |
_RTL_BITMAP_EX BitMap; | |
_MMINPAGE_SUPPORT *InPageSupport; | |
_MI_LARGEPAGE_VAD_INFO LargePage; | |
_MI_PHYSICAL_VIEW AweView; | |
_ETHREAD *CreatingThread; | |
_MI_SUB64K_FREE_RANGES PebTeb; | |
_MMVAD_SHORT *PlaceholderVad; | |
}; | |
/* 1414 */ | |
union $CD8E9E90EC8FC2B59F805C83F61B5C8D | |
{ | |
_LIST_ENTRY ListEntry; | |
_SLIST_ENTRY SListEntry; | |
}; | |
/* 1400 */ | |
struct $DAFCD1835D68343107420BEE993B2F12 | |
{ | |
unsigned __int32 StoreFault : 1; | |
unsigned __int32 LowResourceFailure : 1; | |
unsigned __int32 Spare : 14; | |
unsigned __int32 RemainingPageCount : 16; | |
}; | |
/* 1401 */ | |
union $B4EF17EEBE65587C3867C479F58F7C28 | |
{ | |
unsigned int EntireFlags; | |
$DAFCD1835D68343107420BEE993B2F12 __s1; | |
}; | |
/* 1402 */ | |
struct _MI_STORE_INPAGE_COMPLETE_FLAGS | |
{ | |
$B4EF17EEBE65587C3867C479F58F7C28 ___u0; | |
}; | |
/* 1403 */ | |
struct __declspec(align(8)) _MI_HARD_FAULT_STATE | |
{ | |
_MMPFN *SwapPfn; | |
_MI_STORE_INPAGE_COMPLETE_FLAGS StoreFlags; | |
}; | |
/* 1404 */ | |
struct _MMINPAGE_FLAGS | |
{ | |
unsigned __int32 GetExtents : 1; | |
unsigned __int32 PrefetchSystemVmType : 2; | |
unsigned __int32 VaPrefetchReadBlock : 1; | |
unsigned __int32 CollidedFlowThrough : 1; | |
unsigned __int32 ForceCollisions : 1; | |
unsigned __int32 InPageExpanded : 1; | |
unsigned __int32 IssuedAtLowPriority : 1; | |
unsigned __int32 FaultFromStore : 1; | |
unsigned __int32 PagePriority : 3; | |
unsigned __int32 ClusteredPagePriority : 3; | |
unsigned __int32 MakeClusterValid : 1; | |
unsigned __int32 PerformRelocations : 1; | |
unsigned __int32 ZeroLastPage : 1; | |
unsigned __int32 UserFault : 1; | |
unsigned __int32 StandbyProtectionNeeded : 1; | |
unsigned __int32 PteChanged : 1; | |
unsigned __int32 PageFileFault : 1; | |
unsigned __int32 PageFilePageHashActive : 1; | |
unsigned __int32 CoalescedIo : 1; | |
unsigned __int32 VmLockNotNeeded : 1; | |
unsigned __int32 Spare0 : 1; | |
unsigned __int32 Spare1 : 6; | |
}; | |
/* 1415 */ | |
union $1950D31D2385CA2564D2ABF3C838249B | |
{ | |
_FILE_OBJECT *FilePointer; | |
_MMPAGING_FILE *PagingFile; | |
}; | |
/* 1416 */ | |
union $8DEC68C80F9510E38F261A7B36D13358 | |
{ | |
_CONTROL_AREA *ControlArea; | |
_SUBSECTION *Subsection; | |
}; | |
/* 1413 */ | |
struct _MMINPAGE_SUPPORT_FLOW_THROUGH | |
{ | |
unsigned __int64 Page[1]; | |
_MMINPAGE_SUPPORT *InitialInPageSupport; | |
_MMPAGING_FILE *PagingFile; | |
unsigned __int64 PageFileOffset; | |
_RTL_BALANCED_NODE Node; | |
}; | |
/* 1417 */ | |
union $D7100FCA0E6E0E14A290C4BC7149B122 | |
{ | |
unsigned __int64 Page[16]; | |
_MMINPAGE_SUPPORT_FLOW_THROUGH FlowThrough; | |
}; | |
/* 1412 */ | |
struct _MMINPAGE_SUPPORT | |
{ | |
$CD8E9E90EC8FC2B59F805C83F61B5C8D ___u0; | |
_LIST_ENTRY ListHead; | |
_KEVENT Event; | |
_KEVENT CollidedEvent; | |
_IO_STATUS_BLOCK IoStatus; | |
_LARGE_INTEGER ReadOffset; | |
union | |
{ | |
_KAPC_STATE ApcState; | |
_MI_HARD_FAULT_STATE HardFaultState; | |
} u2; | |
_ETHREAD *Thread; | |
_MMPFN *LockedProtoPfn; | |
_MMPTE PteContents; | |
volatile int WaitCount; | |
volatile int InjectRetry; | |
unsigned int ByteCount; | |
union | |
{ | |
unsigned int ImagePteOffset; | |
unsigned int TossPage; | |
} u3; | |
union | |
{ | |
_MMINPAGE_FLAGS e1; | |
unsigned int LongFlags; | |
} u1; | |
$1950D31D2385CA2564D2ABF3C838249B ___u15; | |
$8DEC68C80F9510E38F261A7B36D13358 ___u16; | |
void *Autoboost; | |
void *FaultingAddress; | |
_MMPTE *PointerPte; | |
_MMPTE *BasePte; | |
_MMPFN *Pfn; | |
_MDL *PrefetchMdl; | |
volatile __int64 ProbeCount; | |
_MDL Mdl; | |
$D7100FCA0E6E0E14A290C4BC7149B122 ___u25; | |
}; | |
/* 1409 */ | |
struct _MMSUBSECTION_FLAGS | |
{ | |
unsigned __int16 SubsectionAccessed : 1; | |
unsigned __int16 Protection : 5; | |
unsigned __int16 StartingSector4132 : 10; | |
unsigned __int16 SubsectionStatic : 1; | |
unsigned __int16 GlobalMemory : 1; | |
unsigned __int16 Spare : 1; | |
unsigned __int16 OnDereferenceList : 1; | |
unsigned __int16 SectorEndOffset : 12; | |
}; | |
/* 1410 */ | |
struct _MI_SUBSECTION_ENTRY1 | |
{ | |
unsigned __int32 CrossPartitionReferences : 30; | |
unsigned __int32 SubsectionMappedLarge : 2; | |
}; | |
/* 1405 */ | |
struct _SUBSECTION | |
{ | |
_CONTROL_AREA *ControlArea; | |
_MMPTE *SubsectionBase; | |
_SUBSECTION *NextSubsection; | |
$64BF8D68F4C6DABEA529B0ACD8B9FDD3 ___u3; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMSUBSECTION_FLAGS SubsectionFlags; | |
} u; | |
unsigned int StartingSector; | |
unsigned int NumberOfFullSectors; | |
unsigned int PtesInSubsection; | |
union | |
{ | |
_MI_SUBSECTION_ENTRY1 e1; | |
unsigned int EntireField; | |
} u1; | |
unsigned __int32 UnusedPtes : 30; | |
unsigned __int32 ExtentQueryNeeded : 1; | |
unsigned __int32 DirtyPages : 1; | |
}; | |
/* 1411 */ | |
union $64BF8D68F4C6DABEA529B0ACD8B9FDD3 | |
{ | |
_RTL_AVL_TREE GlobalPerSessionHead; | |
_MI_CONTROL_AREA_WAIT_BLOCK *CreationWaitList; | |
_MI_PER_SESSION_PROTOS *SessionDriverProtos; | |
}; | |
/* 1406 */ | |
union $85DEF618479280DBE119F8282849878A | |
{ | |
_RTL_BALANCED_NODE SessionProtoNode; | |
_SINGLE_LIST_ENTRY FreeList; | |
void *DriverAddress; | |
}; | |
/* 1407 */ | |
union $6A82DCBDE17D4778CB62291EDAA979F6 | |
{ | |
unsigned int SessionId; | |
_SUBSECTION *Subsection; | |
}; | |
/* 1408 */ | |
struct __declspec(align(8)) _MI_PER_SESSION_PROTOS | |
{ | |
$85DEF618479280DBE119F8282849878A ___u0; | |
_MI_PROTOTYPE_PTES_NODE ProtosNode; | |
unsigned __int64 NumberOfPtes; | |
$6A82DCBDE17D4778CB62291EDAA979F6 ___u3; | |
_MMPTE *SubsectionBase; | |
union | |
{ | |
unsigned int ReferenceCount; | |
unsigned int NumberOfPtesToFree; | |
} u2; | |
}; | |
/* 1425 */ | |
struct $53CE3244FE3C33F765C2E9729EA486BE | |
{ | |
unsigned __int64 KeyLow : 60; | |
unsigned __int64 KeyHigh : 4; | |
}; | |
/* 1426 */ | |
union _MM_STORE_KEY | |
{ | |
$53CE3244FE3C33F765C2E9729EA486BE __s0; | |
unsigned __int64 EntireKey; | |
}; | |
/* 1427 */ | |
struct _CHILD_LIST | |
{ | |
unsigned int Count; | |
unsigned int List; | |
}; | |
/* 1444 */ | |
struct _CMSI_RW_LOCK | |
{ | |
void *Reserved; | |
}; | |
/* 1452 */ | |
struct $AD43055CC8109C2B717ABA96D82BD064 | |
{ | |
unsigned __int16 FirstLogFile : 3; | |
unsigned __int16 SecondLogFile : 3; | |
unsigned __int16 HeaderRecovered : 1; | |
unsigned __int16 LegacyRecoveryIndicated : 1; | |
unsigned __int16 RecoveryInformationReserved : 8; | |
}; | |
/* 1453 */ | |
union $97B5A06A6152E131544CC2BE9BDF11CA | |
{ | |
$AD43055CC8109C2B717ABA96D82BD064 __s0; | |
unsigned __int16 RecoveryInformation; | |
}; | |
/* 1446 */ | |
struct _HVP_VIEW_MAP | |
{ | |
void *SectionReference; | |
__int64 StorageEndFileOffset; | |
__int64 SectionEndFileOffset; | |
_CMSI_PROCESS_TUPLE *ProcessTuple; | |
unsigned int Flags; | |
_RTL_RB_TREE ViewTree; | |
}; | |
/* 1450 */ | |
struct _FREE_DISPLAY | |
{ | |
unsigned int RealVectorSize; | |
unsigned int Hint; | |
_RTL_BITMAP Display; | |
}; | |
/* 1451 */ | |
struct __declspec(align(8)) _DUAL | |
{ | |
unsigned int Length; | |
_HMAP_DIRECTORY *Map; | |
_HMAP_TABLE *SmallDir; | |
unsigned int Guard; | |
_FREE_DISPLAY FreeDisplay[24]; | |
_LIST_ENTRY FreeBins; | |
unsigned int FreeSummary; | |
}; | |
/* 1428 */ | |
struct _HHIVE | |
{ | |
unsigned int Signature; | |
_CELL_DATA *(__fastcall *GetCellRoutine)(_HHIVE *, unsigned int, _HV_GET_CELL_CONTEXT *); | |
void (__fastcall *ReleaseCellRoutine)(_HHIVE *, _HV_GET_CELL_CONTEXT *); | |
void *(__fastcall *Allocate)(unsigned int, unsigned __int8, unsigned int); | |
void (__fastcall *Free)(void *, unsigned int); | |
int (__fastcall *FileWrite)(_HHIVE *, unsigned int, CMP_OFFSET_ARRAY *, unsigned int, unsigned int); | |
int (__fastcall *FileRead)(_HHIVE *, unsigned int, unsigned int, void *, unsigned int); | |
void *HiveLoadFailure; | |
_HBASE_BLOCK *BaseBlock; | |
_CMSI_RW_LOCK FlusherLock; | |
_CMSI_RW_LOCK WriterLock; | |
_RTL_BITMAP DirtyVector; | |
unsigned int DirtyCount; | |
unsigned int DirtyAlloc; | |
_RTL_BITMAP UnreconciledVector; | |
unsigned int UnreconciledCount; | |
unsigned int BaseBlockAlloc; | |
unsigned int Cluster; | |
unsigned __int8 Flat : 1; | |
unsigned __int8 ReadOnly : 1; | |
unsigned __int8 Reserved : 6; | |
unsigned __int8 DirtyFlag; | |
unsigned int HvBinHeadersUse; | |
unsigned int HvFreeCellsUse; | |
unsigned int HvUsedCellsUse; | |
unsigned int CmUsedCellsUse; | |
unsigned int HiveFlags; | |
unsigned int CurrentLog; | |
unsigned int CurrentLogSequence; | |
unsigned int CurrentLogMinimumSequence; | |
unsigned int CurrentLogOffset; | |
unsigned int MinimumLogSequence; | |
unsigned int LogFileSizeCap; | |
unsigned __int8 LogDataPresent[2]; | |
unsigned __int8 PrimaryFileValid; | |
unsigned __int8 BaseBlockDirty; | |
_LARGE_INTEGER LastLogSwapTime; | |
$97B5A06A6152E131544CC2BE9BDF11CA ___u37; | |
unsigned __int8 LogEntriesRecovered[2]; | |
unsigned int RefreshCount; | |
unsigned int StorageTypeCount; | |
unsigned int Version; | |
_HVP_VIEW_MAP ViewMap; | |
_DUAL Storage[2]; | |
}; | |
/* 1430 */ | |
struct $7610146D1E215DB3E3D728A1F9F2A500 | |
{ | |
unsigned int SubKeyLists[2]; | |
_CHILD_LIST ValueList; | |
}; | |
/* 1429 */ | |
struct _CM_KEY_REFERENCE | |
{ | |
unsigned int KeyCell; | |
_HHIVE *KeyHive; | |
}; | |
/* 1431 */ | |
union $23AEB68573C0B8140ACA9C44506078AE | |
{ | |
$7610146D1E215DB3E3D728A1F9F2A500 __s0; | |
_CM_KEY_REFERENCE ChildHiveReference; | |
}; | |
/* 1432 */ | |
struct _CM_KEY_NODE | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Flags; | |
__unaligned __declspec(align(1)) _LARGE_INTEGER LastWriteTime; | |
unsigned __int8 AccessBits; | |
unsigned __int8 LayerSemantics : 2; | |
unsigned __int8 Spare1 : 5; | |
unsigned __int8 InheritClass : 1; | |
unsigned __int16 Spare2; | |
unsigned int Parent; | |
unsigned int SubKeyCounts[2]; | |
__unaligned __declspec(align(1)) $23AEB68573C0B8140ACA9C44506078AE ___u10; | |
unsigned int Security; | |
unsigned int Class; | |
unsigned __int32 MaxNameLen : 16; | |
unsigned __int32 UserFlags : 4; | |
unsigned __int32 VirtControlFlags : 4; | |
unsigned __int32 Debug : 8; | |
unsigned int MaxClassLen; | |
unsigned int MaxValueNameLen; | |
unsigned int MaxValueDataLen; | |
unsigned int WorkVar; | |
unsigned __int16 NameLength; | |
unsigned __int16 ClassLength; | |
wchar_t Name[1]; | |
}; | |
/* 1433 */ | |
struct __declspec(align(4)) _CM_KEY_VALUE | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 NameLength; | |
unsigned int DataLength; | |
unsigned int Data; | |
unsigned int Type; | |
unsigned __int16 Flags; | |
unsigned __int16 Spare; | |
wchar_t Name[1]; | |
}; | |
/* 1434 */ | |
struct _SECURITY_DESCRIPTOR_RELATIVE | |
{ | |
unsigned __int8 Revision; | |
unsigned __int8 Sbz1; | |
unsigned __int16 Control; | |
unsigned int Owner; | |
unsigned int Group; | |
unsigned int Sacl; | |
unsigned int Dacl; | |
}; | |
/* 1435 */ | |
struct _CM_KEY_SECURITY | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Reserved; | |
unsigned int Flink; | |
unsigned int Blink; | |
unsigned int ReferenceCount; | |
unsigned int DescriptorLength; | |
_SECURITY_DESCRIPTOR_RELATIVE Descriptor; | |
}; | |
/* 1436 */ | |
struct _CM_KEY_INDEX | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Count; | |
unsigned int List[1]; | |
}; | |
/* 1437 */ | |
struct _CM_BIG_DATA | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Count; | |
unsigned int List; | |
}; | |
/* 1438 */ | |
union _u | |
{ | |
_CM_KEY_NODE KeyNode; | |
_CM_KEY_VALUE KeyValue; | |
_CM_KEY_SECURITY KeySecurity; | |
_CM_KEY_INDEX KeyIndex; | |
_CM_BIG_DATA ValueData; | |
unsigned int KeyList[1]; | |
wchar_t KeyString[1]; | |
}; | |
/* 1439 */ | |
struct _CELL_DATA | |
{ | |
_u u; | |
}; | |
/* 1440 */ | |
struct _HV_GET_BIN_CONTEXT | |
{ | |
unsigned __int16 OutstandingReference : 1; | |
}; | |
/* 1441 */ | |
struct __declspec(align(4)) _HV_GET_CELL_CONTEXT | |
{ | |
unsigned int Cell; | |
_HV_GET_BIN_CONTEXT BinContext; | |
}; | |
/* 1442 */ | |
struct __declspec(align(8)) CMP_OFFSET_ARRAY | |
{ | |
unsigned int FileOffset; | |
void *DataBuffer; | |
unsigned int DataLength; | |
}; | |
/* 1443 */ | |
struct _HBASE_BLOCK | |
{ | |
unsigned int Signature; | |
unsigned int Sequence1; | |
unsigned int Sequence2; | |
__unaligned __declspec(align(1)) _LARGE_INTEGER TimeStamp; | |
unsigned int Major; | |
unsigned int Minor; | |
unsigned int Type; | |
unsigned int Format; | |
unsigned int RootCell; | |
unsigned int Length; | |
unsigned int Cluster; | |
unsigned __int8 FileName[64]; | |
_GUID RmId; | |
_GUID LogId; | |
unsigned int Flags; | |
_GUID TmId; | |
unsigned int GuidSignature; | |
unsigned __int64 LastReorganizeTime; | |
unsigned int Reserved1[83]; | |
unsigned int CheckSum; | |
unsigned int Reserved2[882]; | |
_GUID ThawTmId; | |
_GUID ThawRmId; | |
_GUID ThawLogId; | |
unsigned int BootType; | |
unsigned int BootRecover; | |
}; | |
/* 1445 */ | |
struct _CMSI_PROCESS_TUPLE | |
{ | |
void *ProcessHandle; | |
void *ProcessReference; | |
}; | |
/* 1449 */ | |
struct _HMAP_DIRECTORY | |
{ | |
_HMAP_TABLE *Directory[1024]; | |
}; | |
/* 1447 */ | |
struct __declspec(align(8)) _HMAP_ENTRY | |
{ | |
unsigned __int64 BlockOffset; | |
unsigned __int64 PermanentBinAddress; | |
unsigned int MemAlloc; | |
}; | |
/* 1448 */ | |
struct _HMAP_TABLE | |
{ | |
_HMAP_ENTRY Table[512]; | |
}; | |
/* 1454 */ | |
struct _CM_PATH_HASH | |
{ | |
unsigned int Hash; | |
}; | |
/* 1455 */ | |
struct __declspec(align(8)) _CM_KEY_HASH | |
{ | |
_CM_PATH_HASH ConvKey; | |
_CM_KEY_HASH *NextHash; | |
_HHIVE *KeyHive; | |
unsigned int KeyCell; | |
}; | |
/* 1509 */ | |
struct __unaligned __declspec(align(4)) $C40520765AC8C017095524C80C79DEAB | |
{ | |
_CM_PATH_HASH ConvKey; | |
_BYTE gap4[4]; | |
_CM_KEY_HASH *NextHash; | |
_HHIVE *KeyHive; | |
unsigned int KeyCell; | |
}; | |
/* 1510 */ | |
union $F1C2CA99895E4E705552B0221A33834C | |
{ | |
_CM_KEY_HASH KeyHash; | |
$C40520765AC8C017095524C80C79DEAB __s1; | |
}; | |
/* 1511 */ | |
union $8A628D5414DDCF9D035515E0AEA6F527 | |
{ | |
_KTHREAD *Owner; | |
int SharedCount; | |
}; | |
/* 1513 */ | |
union $87AB9BBE505BB2C0BB25745C00C3624C | |
{ | |
_LIST_ENTRY KeyBodyListHead; | |
_LIST_ENTRY ClonedListEntry; | |
}; | |
/* 1514 */ | |
union $BFA7E562F9D8577F7637DABFC6CE5650 | |
{ | |
_LIST_ENTRY DelayQueueEntry; | |
volatile unsigned __int8 *Stolen; | |
}; | |
/* 1497 */ | |
struct _CM_INTENT_LOCK | |
{ | |
unsigned int OwnerCount; | |
_CM_KCB_UOW **OwnerTable; | |
}; | |
/* 1515 */ | |
struct $E2B92447AD25F7944AF7244B312AB703 | |
{ | |
unsigned __int64 FullKCBNameStale : 1; | |
unsigned __int64 Reserved : 63; | |
}; | |
/* 1516 */ | |
union $CED2919549BC02F006133EC21C79BEA9 | |
{ | |
_UNICODE_STRING *FullKCBName; | |
$E2B92447AD25F7944AF7244B312AB703 __s1; | |
}; | |
/* 1456 */ | |
struct _CM_KEY_CONTROL_BLOCK | |
{ | |
unsigned __int64 RefCount; | |
unsigned __int32 ExtFlags : 16; | |
unsigned __int32 Freed : 1; | |
unsigned __int32 Discarded : 1; | |
unsigned __int32 HiveUnloaded : 1; | |
unsigned __int32 Decommissioned : 1; | |
unsigned __int32 SpareExtFlag : 1; | |
unsigned __int32 TotalLevels : 10; | |
$F1C2CA99895E4E705552B0221A33834C ___u8; | |
_EX_PUSH_LOCK KcbPushlock; | |
$8A628D5414DDCF9D035515E0AEA6F527 ___u10; | |
unsigned __int8 DelayedDeref : 1; | |
unsigned __int8 DelayedClose : 1; | |
unsigned __int8 Parking : 1; | |
unsigned __int8 LayerSemantics; | |
__int16 LayerHeight; | |
unsigned int Spare1; | |
_CM_KEY_CONTROL_BLOCK *ParentKcb; | |
_CM_NAME_CONTROL_BLOCK *NameBlock; | |
_CM_KEY_SECURITY_CACHE *CachedSecurity; | |
_CHILD_LIST ValueList; | |
_CM_KEY_CONTROL_BLOCK *LinkTarget; | |
$C35D87A14AF336782CA0E1698B155F25 ___u22; | |
$87AB9BBE505BB2C0BB25745C00C3624C ___u23; | |
_CM_KEY_BODY *KeyBodyArray[4]; | |
_LARGE_INTEGER KcbLastWriteTime; | |
unsigned __int16 KcbMaxNameLen; | |
unsigned __int16 KcbMaxValueNameLen; | |
unsigned int KcbMaxValueDataLen; | |
unsigned __int32 KcbUserFlags : 4; | |
unsigned __int32 KcbVirtControlFlags : 4; | |
unsigned __int32 KcbDebug : 8; | |
unsigned __int32 Flags : 16; | |
unsigned int Spare3; | |
_CM_KCB_LAYER_INFO *LayerInfo; | |
char *RealKeyName; | |
_LIST_ENTRY KCBUoWListHead; | |
$BFA7E562F9D8577F7637DABFC6CE5650 ___u37; | |
_CM_TRANS *TransKCBOwner; | |
_CM_INTENT_LOCK KCBLock; | |
_CM_INTENT_LOCK KeyLock; | |
_CHILD_LIST TransValueCache; | |
_CM_TRANS *TransValueListOwner; | |
$CED2919549BC02F006133EC21C79BEA9 ___u43; | |
unsigned __int64 SequenceNumber; | |
}; | |
/* 1457 */ | |
struct _CM_COMPONENT_HASH | |
{ | |
unsigned int Hash; | |
}; | |
/* 1458 */ | |
struct __declspec(align(8)) _CM_NAME_HASH | |
{ | |
_CM_COMPONENT_HASH ConvKey; | |
_CM_NAME_HASH *NextHash; | |
unsigned __int16 NameLength; | |
wchar_t Name[1]; | |
}; | |
/* 1459 */ | |
struct __unaligned __declspec(align(4)) $32339D99C2D75305DF2E8D01E3755CAE | |
{ | |
_CM_COMPONENT_HASH ConvKey; | |
_BYTE gap4[4]; | |
_CM_KEY_HASH *NextHash; | |
unsigned __int16 NameLength; | |
wchar_t Name[1]; | |
}; | |
/* 1460 */ | |
union $08F6F5A448953EC3B4B89C8D0A55A634 | |
{ | |
_CM_NAME_HASH NameHash; | |
$32339D99C2D75305DF2E8D01E3755CAE __s1; | |
}; | |
/* 1461 */ | |
struct _CM_NAME_CONTROL_BLOCK | |
{ | |
unsigned __int32 Compressed : 1; | |
unsigned __int32 RefCount : 31; | |
$08F6F5A448953EC3B4B89C8D0A55A634 ___u2; | |
}; | |
/* 1462 */ | |
struct __declspec(align(8)) _CM_KEY_SECURITY_CACHE | |
{ | |
unsigned int Cell; | |
unsigned int ConvKey; | |
_LIST_ENTRY List; | |
unsigned int DescriptorLength; | |
unsigned int RealRefCount; | |
_SECURITY_DESCRIPTOR_RELATIVE Descriptor; | |
}; | |
/* 1512 */ | |
union $C35D87A14AF336782CA0E1698B155F25 | |
{ | |
_CM_INDEX_HINT_BLOCK *IndexHint; | |
unsigned int HashKey; | |
unsigned int SubKeyCount; | |
}; | |
/* 1466 */ | |
struct $F21FB2B31E9B30A96ADF077329256E82 | |
{ | |
unsigned __int64 LightWeight : 1; | |
}; | |
/* 1467 */ | |
union _CM_TRANS_PTR | |
{ | |
$F21FB2B31E9B30A96ADF077329256E82 __s0; | |
void *TransPtr; | |
}; | |
/* 1464 */ | |
struct __declspec(align(8)) _CM_KEY_BODY | |
{ | |
unsigned int Type; | |
_CM_KEY_CONTROL_BLOCK *KeyControlBlock; | |
_CM_NOTIFY_BLOCK *NotifyBlock; | |
void *ProcessID; | |
_LIST_ENTRY KeyBodyList; | |
unsigned __int32 Flags : 16; | |
unsigned __int32 HandleTags : 16; | |
_CM_TRANS_PTR Trans; | |
_GUID *KtmUow; | |
_LIST_ENTRY ContextListHead; | |
void *EnumerationResumeContext; | |
unsigned int RestrictedAccessMask; | |
}; | |
/* 1468 */ | |
struct _CM_KCB_LAYER_INFO | |
{ | |
_LIST_ENTRY LayerListEntry; | |
_CM_KEY_CONTROL_BLOCK *Kcb; | |
_CM_KCB_LAYER_INFO *LowerLayer; | |
_LIST_ENTRY UpperLayerListHead; | |
}; | |
/* 1494 */ | |
struct $7E966E8CF7BE68C24DDB1A9279787278 | |
{ | |
unsigned __int32 Prepared : 1; | |
unsigned __int32 Aborted : 1; | |
unsigned __int32 Committed : 1; | |
unsigned __int32 Initializing : 1; | |
unsigned __int32 Invalid : 1; | |
unsigned __int32 UseReservation : 1; | |
unsigned __int32 TmCallbacksActive : 1; | |
unsigned __int32 LightWeight : 1; | |
unsigned __int32 Freed1 : 1; | |
unsigned __int32 Freed2 : 1; | |
unsigned __int32 Spare1 : 2; | |
unsigned __int32 Freed : 1; | |
unsigned __int32 Spare : 19; | |
}; | |
/* 1495 */ | |
union $582F0416A4F4A1FEC0FE97C95A8700D7 | |
{ | |
$7E966E8CF7BE68C24DDB1A9279787278 __s0; | |
unsigned int TransState; | |
}; | |
/* 1496 */ | |
struct _CM_TRANS | |
{ | |
_LIST_ENTRY TransactionListEntry; | |
_LIST_ENTRY KCBUoWListHead; | |
_LIST_ENTRY LazyCommitListEntry; | |
$582F0416A4F4A1FEC0FE97C95A8700D7 ___u3; | |
_CM_TRANS_PTR Trans; | |
_CM_RM *CmRm; | |
_KENLISTMENT *KtmEnlistmentObject; | |
void *KtmEnlistmentHandle; | |
_GUID KtmUow; | |
unsigned __int64 StartLsn; | |
unsigned int HiveCount; | |
_CMHIVE *HiveArray[8]; | |
}; | |
/* 1506 */ | |
union $A73567AF968E917B2AAC301463464EBD | |
{ | |
unsigned int TxSecurityCell; | |
_CM_KEY_CONTROL_BLOCK *NewChildKCB; | |
unsigned int ThisVolatileKeyCell; | |
}; | |
/* 1507 */ | |
union $98D55F7D19079A96E269F14FF697A43C | |
{ | |
void *PrepareDataPointer; | |
_CM_UOW_SET_SD_DATA *SecurityData; | |
_CM_UOW_KEY_STATE_MODIFICATION *ModifyKeysData; | |
_CM_UOW_SET_VALUE_LIST_DATA *SetValueData; | |
}; | |
/* 1508 */ | |
union $FC22043014203C09400ECE01EC8B3D73 | |
{ | |
_CM_UOW_SET_VALUE_KEY_DATA *ValueData; | |
_CMP_DISCARD_AND_REPLACE_KCB_CONTEXT *DiscardReplaceContext; | |
}; | |
/* 1498 */ | |
struct _CM_KCB_UOW | |
{ | |
_LIST_ENTRY TransactionListEntry; | |
_CM_INTENT_LOCK *KCBLock; | |
_CM_INTENT_LOCK *KeyLock; | |
_LIST_ENTRY KCBListEntry; | |
_CM_KEY_CONTROL_BLOCK *KeyControlBlock; | |
_CM_TRANS *Transaction; | |
unsigned int UoWState; | |
UoWActionType ActionType; | |
HSTORAGE_TYPE StorageType; | |
_CM_KCB_UOW *ParentUoW; | |
$F49F80DE594A7B45213B2AFAA22C2965 ___u10; | |
$A73567AF968E917B2AAC301463464EBD ___u11; | |
$98D55F7D19079A96E269F14FF697A43C ___u12; | |
$FC22043014203C09400ECE01EC8B3D73 ___u13; | |
}; | |
/* 1463 */ | |
struct _CM_INDEX_HINT_BLOCK | |
{ | |
unsigned int Count; | |
unsigned int HashKey[1]; | |
}; | |
/* 1465 */ | |
struct _CM_NOTIFY_BLOCK | |
{ | |
_LIST_ENTRY HiveList; | |
_LIST_ENTRY PostList; | |
_CM_KEY_CONTROL_BLOCK *KeyControlBlock; | |
_CM_KEY_BODY *KeyBody; | |
unsigned __int32 Filter : 30; | |
unsigned __int32 WatchTree : 1; | |
unsigned __int32 NotifyPending : 1; | |
_SECURITY_SUBJECT_CONTEXT SubjectContext; | |
}; | |
/* 1474 */ | |
struct _CM_RM | |
{ | |
_LIST_ENTRY RmListEntry; | |
_LIST_ENTRY TransactionListHead; | |
void *TmHandle; | |
void *Tm; | |
void *RmHandle; | |
void *KtmRm; | |
unsigned int RefCount; | |
unsigned int ContainerNum; | |
unsigned __int64 ContainerSize; | |
_CMHIVE *CmHive; | |
void *LogFileObject; | |
void *MarshallingContext; | |
unsigned int RmFlags; | |
int LogStartStatus1; | |
int LogStartStatus2; | |
unsigned __int64 BaseLsn; | |
_ERESOURCE *RmLock; | |
}; | |
/* 1482 */ | |
struct __declspec(align(8)) _RTL_BALANCED_LINKS | |
{ | |
_RTL_BALANCED_LINKS *Parent; | |
_RTL_BALANCED_LINKS *LeftChild; | |
_RTL_BALANCED_LINKS *RightChild; | |
char Balance; | |
unsigned __int8 Reserved[3]; | |
}; | |
/* 1483 */ | |
struct __declspec(align(8)) _KTMOBJECT_NAMESPACE_LINK | |
{ | |
_RTL_BALANCED_LINKS Links; | |
unsigned __int8 Expired; | |
}; | |
/* 1493 */ | |
struct _KENLISTMENT_HISTORY | |
{ | |
unsigned int Notification; | |
_KENLISTMENT_STATE NewState; | |
}; | |
/* 1484 */ | |
struct __declspec(align(8)) _KENLISTMENT | |
{ | |
unsigned int cookie; | |
_KTMOBJECT_NAMESPACE_LINK NamespaceLink; | |
_GUID EnlistmentId; | |
_KMUTANT Mutex; | |
_LIST_ENTRY NextSameTx; | |
_LIST_ENTRY NextSameRm; | |
_KRESOURCEMANAGER *ResourceManager; | |
_KTRANSACTION *Transaction; | |
_KENLISTMENT_STATE State; | |
unsigned int Flags; | |
unsigned int NotificationMask; | |
void *Key; | |
unsigned int KeyRefCount; | |
void *RecoveryInformation; | |
unsigned int RecoveryInformationLength; | |
void *DynamicNameInformation; | |
unsigned int DynamicNameInformationLength; | |
struct _KTMNOTIFICATION_PACKET *FinalNotification; | |
_KENLISTMENT *SupSubEnlistment; | |
void *SupSubEnlHandle; | |
void *SubordinateTxHandle; | |
_GUID CrmEnlistmentEnId; | |
_GUID CrmEnlistmentTmId; | |
_GUID CrmEnlistmentRmId; | |
unsigned int NextHistory; | |
_KENLISTMENT_HISTORY History[20]; | |
}; | |
/* 1471 */ | |
struct _CM_WORKITEM | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int Private; | |
void (__fastcall *WorkerRoutine)(void *); | |
void *Parameter; | |
}; | |
/* 1472 */ | |
struct _CM_DIRTY_VECTOR_LOG_ENTRY | |
{ | |
_ETHREAD *Thread; | |
_CM_DIRTY_VECTOR_OPERATION Operation; | |
union | |
{ | |
struct | |
{ | |
unsigned int Start; | |
unsigned int Length; | |
} DirtyVectorModifiedContext; | |
struct | |
{ | |
unsigned int RangeCount; | |
unsigned int SetBitCount; | |
} DirtyDataCaptureContext; | |
struct | |
{ | |
unsigned int Context1; | |
unsigned int Context2; | |
} Raw; | |
} Data; | |
void *Stack[6]; | |
}; | |
/* 1473 */ | |
struct _CM_DIRTY_VECTOR_LOG | |
{ | |
volatile unsigned int Next; | |
unsigned int Size; | |
_CM_DIRTY_VECTOR_LOG_ENTRY Log[16]; | |
}; | |
/* 1476 */ | |
struct _HIVE_WRITE_WAIT_QUEUE | |
{ | |
_ETHREAD *ActiveThread; | |
_HIVE_WAIT_PACKET *WaitList; | |
}; | |
/* 1479 */ | |
struct $C3DDE33631ADF780CF5068535518E4BE | |
{ | |
unsigned __int32 PrimaryFilePurged : 1; | |
unsigned __int32 DiskFileBad : 1; | |
}; | |
/* 1480 */ | |
union $EB1F9627D870E6FB9250C48D4D2E674D | |
{ | |
unsigned int FlushFlags; | |
$C3DDE33631ADF780CF5068535518E4BE __s1; | |
}; | |
/* 1481 */ | |
struct _CMHIVE | |
{ | |
_HHIVE Hive; | |
void *FileHandles[6]; | |
_LIST_ENTRY NotifyList; | |
_LIST_ENTRY HiveList; | |
_LIST_ENTRY PreloadedHiveList; | |
_EX_RUNDOWN_REF HiveRundown; | |
_CM_KEY_HASH_TABLE_ENTRY *KcbCacheTable; | |
unsigned int KcbCacheTableSize; | |
_CM_KEY_HASH_TABLE_ENTRY *DeletedKcbTable; | |
unsigned int DeletedKcbTableSize; | |
unsigned int Identity; | |
_CMSI_RW_LOCK HiveLock; | |
_RTL_BITMAP FlushDirtyVector; | |
unsigned int FlushDirtyVectorSize; | |
CMP_OFFSET_ARRAY *FlushLogEntryOffsetArray; | |
unsigned int FlushLogEntryOffsetArrayCount; | |
unsigned int FlushLogEntrySize; | |
unsigned int FlushHiveTruncated; | |
unsigned __int8 FlushBaseBlockDirty; | |
_RTL_BITMAP CapturedUnreconciledVector; | |
unsigned int CapturedUnreconciledVectorSize; | |
CMP_OFFSET_ARRAY *UnreconciledOffsetArray; | |
unsigned int UnreconciledOffsetArrayCount; | |
_HBASE_BLOCK *UnreconciledBaseBlock; | |
_EX_PUSH_LOCK SecurityLock; | |
unsigned int LastShrinkHiveSize; | |
_LARGE_INTEGER ActualFileSize; | |
_LARGE_INTEGER LogFileSizes[2]; | |
_UNICODE_STRING FileFullPath; | |
_UNICODE_STRING FileUserName; | |
_UNICODE_STRING HiveRootPath; | |
unsigned int SecurityCount; | |
unsigned int SecurityCacheSize; | |
int SecurityHitHint; | |
_CM_KEY_SECURITY_CACHE_ENTRY *SecurityCache; | |
_LIST_ENTRY SecurityHash[64]; | |
unsigned int UnloadEventCount; | |
_KEVENT **UnloadEventArray; | |
_CM_KEY_CONTROL_BLOCK *RootKcb; | |
unsigned __int8 Frozen; | |
_CM_WORKITEM *UnloadWorkItem; | |
_CM_WORKITEM UnloadWorkItemHolder; | |
_CM_DIRTY_VECTOR_LOG DirtyVectorLog; | |
unsigned int Flags; | |
_LIST_ENTRY TrustClassEntry; | |
unsigned __int64 DirtyTime; | |
unsigned __int64 UnreconciledTime; | |
_CM_RM *CmRm; | |
unsigned int CmRmInitFailPoint; | |
int CmRmInitFailStatus; | |
_KTHREAD *CreatorOwner; | |
_KTHREAD *RundownThread; | |
_LARGE_INTEGER LastWriteTime; | |
_HIVE_WRITE_WAIT_QUEUE FlushQueue; | |
_HIVE_WRITE_WAIT_QUEUE ReconcileQueue; | |
$EB1F9627D870E6FB9250C48D4D2E674D ___u55; | |
unsigned int PrimaryFileSizeBeforeLastFlush; | |
volatile int ReferenceCount; | |
int UnloadHistoryIndex; | |
unsigned int UnloadHistory[128]; | |
unsigned int BootStart; | |
unsigned int UnaccessedStart; | |
unsigned int UnaccessedEnd; | |
unsigned int LoadedKeyCount; | |
volatile unsigned int HandleClosePending; | |
_EX_PUSH_LOCK HandleClosePendingEvent; | |
unsigned __int8 FinalFlushSucceeded; | |
_CMP_VOLUME_CONTEXT *VolumeContext; | |
}; | |
/* 1504 */ | |
struct $91698CCA9400218073A6CCEE8A69C898 | |
{ | |
unsigned int VolatileKeyCell; | |
unsigned int NewValueCell; | |
}; | |
/* 1505 */ | |
union $F49F80DE594A7B45213B2AFAA22C2965 | |
{ | |
_CM_KEY_CONTROL_BLOCK *ChildKCB; | |
$91698CCA9400218073A6CCEE8A69C898 __s1; | |
unsigned int OldValueCell; | |
unsigned int UserFlags; | |
_LARGE_INTEGER LastWriteTime; | |
_CM_KEY_SECURITY_CACHE *TxCachedSecurity; | |
_CM_KEY_CONTROL_BLOCK *OldChildKCB; | |
_CM_KEY_CONTROL_BLOCK *OtherChildKCB; | |
}; | |
/* 1499 */ | |
struct _CM_UOW_SET_SD_DATA | |
{ | |
unsigned int SecurityCell; | |
}; | |
/* 1500 */ | |
struct _CM_UOW_KEY_STATE_MODIFICATION | |
{ | |
unsigned int RefCount; | |
unsigned int SubKeyListCount[2]; | |
unsigned int NewSubKeyList[2]; | |
}; | |
/* 1501 */ | |
struct _CM_UOW_SET_VALUE_LIST_DATA | |
{ | |
unsigned int RefCount; | |
_CHILD_LIST ValueList; | |
}; | |
/* 1502 */ | |
struct _CM_UOW_SET_VALUE_KEY_DATA | |
{ | |
unsigned int PreparedCell; | |
unsigned int OldValueCell; | |
unsigned __int16 NameLength; | |
unsigned int DataSize; | |
}; | |
/* 1503 */ | |
struct _CMP_DISCARD_AND_REPLACE_KCB_CONTEXT | |
{ | |
_CM_KEY_CONTROL_BLOCK *BaseKcb; | |
int PrepareStatus; | |
_LIST_ENTRY ClonedKcbListHead; | |
}; | |
/* 1485 */ | |
struct _RTL_AVL_TABLE | |
{ | |
_RTL_BALANCED_LINKS BalancedRoot; | |
void *OrderedPointer; | |
unsigned int WhichOrderedElement; | |
unsigned int NumberGenericTableElements; | |
unsigned int DepthOfTree; | |
_RTL_BALANCED_LINKS *RestartKey; | |
unsigned int DeleteCount; | |
_RTL_GENERIC_COMPARE_RESULTS (__fastcall *CompareRoutine)(_RTL_AVL_TABLE *, void *, void *); | |
void *(__fastcall *AllocateRoutine)(_RTL_AVL_TABLE *, unsigned int); | |
void (__fastcall *FreeRoutine)(_RTL_AVL_TABLE *, void *); | |
void *TableContext; | |
}; | |
/* 1486 */ | |
struct __declspec(align(4)) _KTMOBJECT_NAMESPACE | |
{ | |
_RTL_AVL_TABLE Table; | |
_KMUTANT Mutex; | |
unsigned __int16 LinksOffset; | |
unsigned __int16 GuidOffset; | |
unsigned __int8 Expired; | |
}; | |
/* 1490 */ | |
struct _KRESOURCEMANAGER_COMPLETION_BINDING | |
{ | |
_LIST_ENTRY NotificationListHead; | |
void *Port; | |
unsigned __int64 Key; | |
_EPROCESS *BindingProcess; | |
}; | |
/* 1488 */ | |
struct _KRESOURCEMANAGER | |
{ | |
_KEVENT NotificationAvailable; | |
unsigned int cookie; | |
_KRESOURCEMANAGER_STATE State; | |
unsigned int Flags; | |
_KMUTANT Mutex; | |
_KTMOBJECT_NAMESPACE_LINK NamespaceLink; | |
_GUID RmId; | |
_KQUEUE NotificationQueue; | |
_KMUTANT NotificationMutex; | |
_LIST_ENTRY EnlistmentHead; | |
unsigned int EnlistmentCount; | |
int (__fastcall *NotificationRoutine)(_KENLISTMENT *, void *, void *, unsigned int, _LARGE_INTEGER *, unsigned int, void *); | |
void *Key; | |
_LIST_ENTRY ProtocolListHead; | |
_LIST_ENTRY PendingPropReqListHead; | |
_LIST_ENTRY CRMListEntry; | |
_KTM *Tm; | |
_UNICODE_STRING Description; | |
_KTMOBJECT_NAMESPACE Enlistments; | |
_KRESOURCEMANAGER_COMPLETION_BINDING CompletionBinding; | |
}; | |
/* 1487 */ | |
union _CLS_LSN | |
{ | |
struct | |
{ | |
unsigned int idxRecord; | |
unsigned int cidContainer; | |
} offset; | |
unsigned __int64 ullOffset; | |
}; | |
/* 1492 */ | |
struct _KTRANSACTION_HISTORY | |
{ | |
$E629E57EB416A4DD55ADB1883CE94280 RecordType; | |
unsigned int Payload; | |
}; | |
/* 1491 */ | |
struct _KTRANSACTION | |
{ | |
_KEVENT OutcomeEvent; | |
unsigned int cookie; | |
_KMUTANT Mutex; | |
_KTRANSACTION *TreeTx; | |
_KTMOBJECT_NAMESPACE_LINK GlobalNamespaceLink; | |
_KTMOBJECT_NAMESPACE_LINK TmNamespaceLink; | |
_GUID UOW; | |
_KTRANSACTION_STATE State; | |
unsigned int Flags; | |
_LIST_ENTRY EnlistmentHead; | |
unsigned int EnlistmentCount; | |
unsigned int RecoverableEnlistmentCount; | |
unsigned int PrePrepareRequiredEnlistmentCount; | |
unsigned int PrepareRequiredEnlistmentCount; | |
unsigned int OutcomeRequiredEnlistmentCount; | |
unsigned int PendingResponses; | |
_KENLISTMENT *SuperiorEnlistment; | |
_CLS_LSN LastLsn; | |
_LIST_ENTRY PromotedEntry; | |
_KTRANSACTION *PromoterTransaction; | |
void *PromotePropagation; | |
unsigned int IsolationLevel; | |
unsigned int IsolationFlags; | |
_LARGE_INTEGER Timeout; | |
_UNICODE_STRING Description; | |
_KTHREAD *RollbackThread; | |
_WORK_QUEUE_ITEM RollbackWorkItem; | |
_KDPC RollbackDpc; | |
_KTIMER RollbackTimer; | |
_LIST_ENTRY LsnOrderedEntry; | |
_KTRANSACTION_OUTCOME Outcome; | |
_KTM *Tm; | |
__int64 CommitReservation; | |
_KTRANSACTION_HISTORY TransactionHistory[10]; | |
unsigned int TransactionHistoryCount; | |
void *DTCPrivateInformation; | |
unsigned int DTCPrivateInformationLength; | |
_KMUTANT DTCPrivateInformationMutex; | |
void *PromotedTxSelfHandle; | |
unsigned int PendingPromotionCount; | |
_KEVENT PromotionCompletedEvent; | |
}; | |
/* 1469 */ | |
struct _CM_KEY_HASH_TABLE_ENTRY | |
{ | |
_EX_PUSH_LOCK Lock; | |
_KTHREAD *Owner; | |
_CM_KEY_HASH *Entry; | |
}; | |
/* 1470 */ | |
struct _CM_KEY_SECURITY_CACHE_ENTRY | |
{ | |
unsigned int Cell; | |
_CM_KEY_SECURITY_CACHE *CachedSecurity; | |
}; | |
/* 1475 */ | |
struct _HIVE_WAIT_PACKET | |
{ | |
_KEVENT WakeEvent; | |
int Status; | |
_HIVE_WAIT_PACKET *Next; | |
}; | |
/* 1478 */ | |
struct __declspec(align(8)) _CMP_VOLUME_CONTEXT | |
{ | |
_LIST_ENTRY VolumeContextListEntry; | |
_CMP_VOLUME_MANAGER *VolumeManager; | |
__int64 RefCount; | |
_GUID VolumeGuid; | |
void *VolumeFileObject; | |
_CMSI_RW_LOCK VolumeContextLock; | |
unsigned __int8 DeviceUsageNotificationSent; | |
}; | |
/* 1489 */ | |
struct _KTM | |
{ | |
unsigned int cookie; | |
_KMUTANT Mutex; | |
KTM_STATE State; | |
_KTMOBJECT_NAMESPACE_LINK NamespaceLink; | |
_GUID TmIdentity; | |
unsigned int Flags; | |
unsigned int VolatileFlags; | |
_UNICODE_STRING LogFileName; | |
_FILE_OBJECT *LogFileObject; | |
void *MarshallingContext; | |
void *LogManagementContext; | |
_KTMOBJECT_NAMESPACE Transactions; | |
_KTMOBJECT_NAMESPACE ResourceManagers; | |
_KMUTANT LsnOrderedMutex; | |
_LIST_ENTRY LsnOrderedList; | |
_LARGE_INTEGER CommitVirtualClock; | |
_FAST_MUTEX CommitVirtualClockMutex; | |
_CLS_LSN BaseLsn; | |
_CLS_LSN CurrentReadLsn; | |
_CLS_LSN LastRecoveredLsn; | |
void *TmRmHandle; | |
_KRESOURCEMANAGER *TmRm; | |
_KEVENT LogFullNotifyEvent; | |
_WORK_QUEUE_ITEM CheckpointWorkItem; | |
_CLS_LSN CheckpointTargetLsn; | |
_WORK_QUEUE_ITEM LogFullCompletedWorkItem; | |
_ERESOURCE LogWriteResource; | |
unsigned int LogFlags; | |
int LogFullStatus; | |
int RecoveryStatus; | |
_CLS_LSN LastCheckBaseLsn; | |
_LIST_ENTRY RestartOrderedList; | |
_WORK_QUEUE_ITEM OfflineWorkItem; | |
}; | |
/* 1477 */ | |
struct _CMP_VOLUME_MANAGER | |
{ | |
_CMSI_RW_LOCK VolumeContextListLock; | |
_LIST_ENTRY VolumeContextListHead; | |
}; | |
/* 1517 */ | |
struct tagSWITCH_CONTEXT_ATTRIBUTE | |
{ | |
unsigned __int64 ulContextUpdateCounter; | |
int fAllowContextUpdate; | |
int fEnableTrace; | |
unsigned __int64 EtwHandle; | |
}; | |
/* 1518 */ | |
struct tagSWITCH_CONTEXT_DATA | |
{ | |
unsigned __int64 ullOsMaxVersionTested; | |
unsigned int ulTargetPlatform; | |
unsigned __int64 ullContextMinimum; | |
_GUID guPlatform; | |
_GUID guMinPlatform; | |
unsigned int ulContextSource; | |
unsigned int ulElementCount; | |
_GUID guElements[48]; | |
}; | |
/* 1519 */ | |
struct tagSWITCH_CONTEXT | |
{ | |
tagSWITCH_CONTEXT_ATTRIBUTE Attribute; | |
tagSWITCH_CONTEXT_DATA Data; | |
}; | |
/* 1520 */ | |
struct _HBIN | |
{ | |
unsigned int Signature; | |
unsigned int FileOffset; | |
unsigned int Size; | |
unsigned int Reserved1[2]; | |
__unaligned __declspec(align(1)) _LARGE_INTEGER TimeStamp; | |
unsigned int Spare; | |
}; | |
/* 1521 */ | |
struct _HCELL | |
{ | |
int Size; | |
union | |
{ | |
struct | |
{ | |
union | |
{ | |
unsigned int UserData; | |
unsigned int Next; | |
} u; | |
} NewCell; | |
} u; | |
}; | |
/* 1522 */ | |
struct __declspec(align(8)) _CM_PARSE_DEBUG_INFO | |
{ | |
_CM_KEY_CONTROL_BLOCK *SymlinkCachedKcb; | |
_CM_KEY_CONTROL_BLOCK *StartingKcb; | |
_CM_KEY_CONTROL_BLOCK *KcbCacheResult; | |
_CM_KEY_CONTROL_BLOCK *WalkResult; | |
_CM_KEY_CONTROL_BLOCK *DeepestKcbFound; | |
unsigned __int8 KcbCacheLevels; | |
unsigned __int8 WalkLevels; | |
unsigned __int8 FailureCount; | |
struct {int Status;unsigned int Point;}; FailurePoints[4]; | |
}; | |
/* 1523 */ | |
struct _HIVE_LOAD_FAILURE | |
{ | |
_HHIVE *Hive; | |
unsigned __int16 Index; | |
unsigned __int16 RecoverableIndex; | |
struct {_CM_LOAD_FAILURE_TYPE Failure;int Status;unsigned int Point;}; Locations[8]; | |
struct {_CM_LOAD_FAILURE_TYPE Failure;int Status;unsigned int Point;}; RecoverableLocations[8]; | |
struct __declspec(align(8)) | |
{ | |
unsigned int Action; | |
void *Handle; | |
int Status; | |
} RegistryIO; | |
struct | |
{ | |
void *CheckStack; | |
} CheckRegistry2; | |
struct __declspec(align(8)) | |
{ | |
unsigned int Cell; | |
_CELL_DATA *CellPoint; | |
void *RootPoint; | |
unsigned int Index; | |
} CheckKey; | |
struct | |
{ | |
_CELL_DATA *List; | |
unsigned int Index; | |
unsigned int Cell; | |
_CELL_DATA *CellPoint; | |
} CheckValueList; | |
struct | |
{ | |
unsigned int Space; | |
unsigned int MapPoint; | |
_HBIN *BinPoint; | |
} CheckHive; | |
struct | |
{ | |
unsigned int Space; | |
unsigned int MapPoint; | |
_HBIN *BinPoint; | |
} CheckHive1; | |
struct | |
{ | |
_HBIN *Bin; | |
_HCELL *CellPoint; | |
} CheckBin; | |
struct | |
{ | |
unsigned int FileOffset; | |
} RecoverData; | |
_CM_PARSE_DEBUG_INFO LinkDebug; | |
}; | |
/* 1524 */ | |
struct _PCW_COUNTER_DESCRIPTOR | |
{ | |
unsigned __int16 Id; | |
unsigned __int16 StructIndex; | |
unsigned __int16 Offset; | |
unsigned __int16 Size; | |
}; | |
/* 1525 */ | |
struct _PCW_COUNTER_INFORMATION | |
{ | |
unsigned __int64 CounterMask; | |
const _UNICODE_STRING *InstanceMask; | |
}; | |
/* 1526 */ | |
struct _PCW_MASK_INFORMATION | |
{ | |
unsigned __int64 CounterMask; | |
const _UNICODE_STRING *InstanceMask; | |
unsigned int InstanceId; | |
unsigned __int8 CollectMultiple; | |
struct _PCW_BUFFER *Buffer; | |
_KEVENT *CancelEvent; | |
}; | |
/* 1527 */ | |
union _PCW_CALLBACK_INFORMATION | |
{ | |
_PCW_COUNTER_INFORMATION AddCounter; | |
_PCW_COUNTER_INFORMATION RemoveCounter; | |
_PCW_MASK_INFORMATION EnumerateInstances; | |
_PCW_MASK_INFORMATION CollectData; | |
}; | |
/* 1528 */ | |
struct _PCW_REGISTRATION_INFORMATION | |
{ | |
unsigned int Version; | |
const _UNICODE_STRING *Name; | |
unsigned int CounterCount; | |
_PCW_COUNTER_DESCRIPTOR *Counters; | |
int (__fastcall *Callback)(_PCW_CALLBACK_TYPE, _PCW_CALLBACK_INFORMATION *, void *); | |
void *CallbackContext; | |
}; | |
/* 1529 */ | |
struct _PCW_PROCESSOR_INFO | |
{ | |
unsigned __int64 IdleTime; | |
unsigned __int64 AvailableTime; | |
unsigned __int64 UserTime; | |
unsigned __int64 KernelTime; | |
unsigned int Interrupts; | |
unsigned __int64 DpcTime; | |
unsigned __int64 InterruptTime; | |
unsigned int ClockInterrupts; | |
unsigned int DpcCount; | |
unsigned int DpcRate; | |
unsigned __int64 C1Time; | |
unsigned __int64 C2Time; | |
unsigned __int64 C3Time; | |
unsigned __int64 C1Transitions; | |
unsigned __int64 C2Transitions; | |
unsigned __int64 C3Transitions; | |
unsigned __int64 StallTime; | |
unsigned int ParkingStatus; | |
unsigned int CurrentFrequency; | |
unsigned int PercentMaxFrequency; | |
unsigned int StateFlags; | |
unsigned int NominalThroughput; | |
unsigned int ActiveThroughput; | |
unsigned __int64 ScaledThroughput; | |
unsigned __int64 ScaledKernelThroughput; | |
unsigned __int64 AverageIdleTime; | |
unsigned __int64 IdleBreakEvents; | |
unsigned int PerformanceLimit; | |
unsigned int PerformanceLimitFlags; | |
unsigned __int64 ScaledFrequency; | |
}; | |
/* 1530 */ | |
struct __declspec(align(8)) _PCW_DATA | |
{ | |
const void *Data; | |
unsigned int Size; | |
}; | |
/* 1531 */ | |
struct _ETW_PERF_COUNTERS | |
{ | |
int TotalActiveSessions; | |
int TotalBufferMemoryNonPagedPool; | |
int TotalBufferMemoryPagedPool; | |
int TotalGuidsEnabled; | |
int TotalGuidsNotEnabled; | |
int TotalGuidsPreEnabled; | |
}; | |
/* 1532 */ | |
struct _ETW_SESSION_PERF_COUNTERS | |
{ | |
int BufferMemoryPagedPool; | |
int BufferMemoryNonPagedPool; | |
unsigned __int64 EventsLoggedCount; | |
int EventsLost; | |
int NumConsumers; | |
}; | |
/* 1533 */ | |
struct _THERMAL_ZONE_COUNTERS | |
{ | |
unsigned int Temperature; | |
unsigned int ThrottleLimit; | |
unsigned int ThrottleReasons; | |
unsigned int TemperatureHighPrecision; | |
}; | |
/* 1534 */ | |
union $E38888FFFF2E8047BDBD55C921E86469 | |
{ | |
unsigned int FiberData; | |
unsigned int Version; | |
}; | |
/* 1535 */ | |
struct _NT_TIB32 | |
{ | |
unsigned int ExceptionList; | |
unsigned int StackBase; | |
unsigned int StackLimit; | |
unsigned int SubSystemTib; | |
$E38888FFFF2E8047BDBD55C921E86469 ___u4; | |
unsigned int ArbitraryUserPointer; | |
unsigned int Self; | |
}; | |
/* 1536 */ | |
struct _CLIENT_ID32 | |
{ | |
unsigned int UniqueProcess; | |
unsigned int UniqueThread; | |
}; | |
/* 1537 */ | |
struct _ACTIVATION_CONTEXT_STACK32 | |
{ | |
unsigned int ActiveFrame; | |
LIST_ENTRY32 FrameListCache; | |
unsigned int Flags; | |
unsigned int NextCookieSequenceNumber; | |
unsigned int StackId; | |
}; | |
/* 1538 */ | |
struct _GDI_TEB_BATCH32 | |
{ | |
unsigned __int32 Offset : 31; | |
unsigned __int32 HasRenderingCommand : 1; | |
unsigned int HDC; | |
unsigned int Buffer[310]; | |
}; | |
/* 1539 */ | |
struct _STRING32 | |
{ | |
unsigned __int16 Length; | |
unsigned __int16 MaximumLength; | |
unsigned int Buffer; | |
}; | |
/* 1540 */ | |
struct _TEB32 | |
{ | |
_NT_TIB32 NtTib; | |
unsigned int EnvironmentPointer; | |
_CLIENT_ID32 ClientId; | |
unsigned int ActiveRpcHandle; | |
unsigned int ThreadLocalStoragePointer; | |
unsigned int ProcessEnvironmentBlock; | |
unsigned int LastErrorValue; | |
unsigned int CountOfOwnedCriticalSections; | |
unsigned int CsrClientThread; | |
unsigned int Win32ThreadInfo; | |
unsigned int User32Reserved[26]; | |
unsigned int UserReserved[5]; | |
unsigned int WOW32Reserved; | |
unsigned int CurrentLocale; | |
unsigned int FpSoftwareStatusRegister; | |
unsigned int ReservedForDebuggerInstrumentation[16]; | |
unsigned int SystemReserved1[26]; | |
char PlaceholderCompatibilityMode; | |
unsigned __int8 PlaceholderHydrationAlwaysExplicit; | |
char PlaceholderReserved[10]; | |
unsigned int ProxiedProcessId; | |
_ACTIVATION_CONTEXT_STACK32 _ActivationStack; | |
unsigned __int8 WorkingOnBehalfTicket[8]; | |
int ExceptionCode; | |
unsigned int ActivationContextStackPointer; | |
unsigned int InstrumentationCallbackSp; | |
unsigned int InstrumentationCallbackPreviousPc; | |
unsigned int InstrumentationCallbackPreviousSp; | |
unsigned __int8 InstrumentationCallbackDisabled; | |
unsigned __int8 SpareBytes[23]; | |
unsigned int TxFsContext; | |
_GDI_TEB_BATCH32 GdiTebBatch; | |
_CLIENT_ID32 RealClientId; | |
unsigned int GdiCachedProcessHandle; | |
unsigned int GdiClientPID; | |
unsigned int GdiClientTID; | |
unsigned int GdiThreadLocalInfo; | |
unsigned int Win32ClientInfo[62]; | |
unsigned int glDispatchTable[233]; | |
unsigned int glReserved1[29]; | |
unsigned int glReserved2; | |
unsigned int glSectionInfo; | |
unsigned int glSection; | |
unsigned int glTable; | |
unsigned int glCurrentRC; | |
unsigned int glContext; | |
unsigned int LastStatusValue; | |
_STRING32 StaticUnicodeString; | |
wchar_t StaticUnicodeBuffer[261]; | |
unsigned int DeallocationStack; | |
unsigned int TlsSlots[64]; | |
LIST_ENTRY32 TlsLinks; | |
unsigned int Vdm; | |
unsigned int ReservedForNtRpc; | |
unsigned int DbgSsReserved[2]; | |
unsigned int HardErrorMode; | |
unsigned int Instrumentation[9]; | |
_GUID ActivityId; | |
unsigned int SubProcessTag; | |
unsigned int PerflibData; | |
unsigned int EtwTraceData; | |
unsigned int WinSockData; | |
unsigned int GdiBatchCount; | |
$724F2A2D041FFB2E94FF01FB63FF30C4 ___u63; | |
unsigned int GuaranteedStackBytes; | |
unsigned int ReservedForPerf; | |
unsigned int ReservedForOle; | |
unsigned int WaitingOnLoaderLock; | |
unsigned int SavedPriorityState; | |
unsigned int ReservedForCodeCoverage; | |
unsigned int ThreadPoolData; | |
unsigned int TlsExpansionSlots; | |
unsigned int MuiGeneration; | |
unsigned int IsImpersonating; | |
unsigned int NlsCache; | |
unsigned int pShimData; | |
unsigned int HeapData; | |
unsigned int CurrentTransactionHandle; | |
unsigned int ActiveFrame; | |
unsigned int FlsData; | |
unsigned int PreferredLanguages; | |
unsigned int UserPrefLanguages; | |
unsigned int MergedPrefLanguages; | |
unsigned int MuiImpersonation; | |
$7AB5819D1A5DE0161186195FCBC4D698 ___u84; | |
$54D96A8D96B6F3818A1C53720F347267 ___u85; | |
unsigned int TxnScopeEnterCallback; | |
unsigned int TxnScopeExitCallback; | |
unsigned int TxnScopeContext; | |
unsigned int LockCount; | |
int WowTebOffset; | |
unsigned int ResourceRetValue; | |
unsigned int ReservedForWdf; | |
unsigned __int64 ReservedForCrt; | |
_GUID EffectiveContainerId; | |
}; | |
/* 1541 */ | |
union $8662F439D215AAEDBB1F787C8B649648 | |
{ | |
unsigned __int64 FiberData; | |
unsigned int Version; | |
}; | |
/* 1542 */ | |
struct _NT_TIB64 | |
{ | |
unsigned __int64 ExceptionList; | |
unsigned __int64 StackBase; | |
unsigned __int64 StackLimit; | |
unsigned __int64 SubSystemTib; | |
$8662F439D215AAEDBB1F787C8B649648 ___u4; | |
unsigned __int64 ArbitraryUserPointer; | |
unsigned __int64 Self; | |
}; | |
/* 1543 */ | |
struct _CLIENT_ID64 | |
{ | |
unsigned __int64 UniqueProcess; | |
unsigned __int64 UniqueThread; | |
}; | |
/* 1544 */ | |
struct __declspec(align(8)) _ACTIVATION_CONTEXT_STACK64 | |
{ | |
unsigned __int64 ActiveFrame; | |
LIST_ENTRY64 FrameListCache; | |
unsigned int Flags; | |
unsigned int NextCookieSequenceNumber; | |
unsigned int StackId; | |
}; | |
/* 1545 */ | |
struct _GDI_TEB_BATCH64 | |
{ | |
unsigned __int32 Offset : 31; | |
unsigned __int32 HasRenderingCommand : 1; | |
unsigned __int64 HDC; | |
unsigned int Buffer[310]; | |
}; | |
/* 1546 */ | |
struct _STRING64 | |
{ | |
unsigned __int16 Length; | |
unsigned __int16 MaximumLength; | |
unsigned __int64 Buffer; | |
}; | |
/* 1547 */ | |
struct _TEB64 | |
{ | |
_NT_TIB64 NtTib; | |
unsigned __int64 EnvironmentPointer; | |
_CLIENT_ID64 ClientId; | |
unsigned __int64 ActiveRpcHandle; | |
unsigned __int64 ThreadLocalStoragePointer; | |
unsigned __int64 ProcessEnvironmentBlock; | |
unsigned int LastErrorValue; | |
unsigned int CountOfOwnedCriticalSections; | |
unsigned __int64 CsrClientThread; | |
unsigned __int64 Win32ThreadInfo; | |
unsigned int User32Reserved[26]; | |
unsigned int UserReserved[5]; | |
unsigned __int64 WOW32Reserved; | |
unsigned int CurrentLocale; | |
unsigned int FpSoftwareStatusRegister; | |
unsigned __int64 ReservedForDebuggerInstrumentation[16]; | |
unsigned __int64 SystemReserved1[30]; | |
char PlaceholderCompatibilityMode; | |
unsigned __int8 PlaceholderHydrationAlwaysExplicit; | |
char PlaceholderReserved[10]; | |
unsigned int ProxiedProcessId; | |
_ACTIVATION_CONTEXT_STACK64 _ActivationStack; | |
unsigned __int8 WorkingOnBehalfTicket[8]; | |
int ExceptionCode; | |
unsigned __int8 Padding0[4]; | |
unsigned __int64 ActivationContextStackPointer; | |
unsigned __int64 InstrumentationCallbackSp; | |
unsigned __int64 InstrumentationCallbackPreviousPc; | |
unsigned __int64 InstrumentationCallbackPreviousSp; | |
unsigned int TxFsContext; | |
unsigned __int8 InstrumentationCallbackDisabled; | |
unsigned __int8 UnalignedLoadStoreExceptions; | |
unsigned __int8 Padding1[2]; | |
_GDI_TEB_BATCH64 GdiTebBatch; | |
_CLIENT_ID64 RealClientId; | |
unsigned __int64 GdiCachedProcessHandle; | |
unsigned int GdiClientPID; | |
unsigned int GdiClientTID; | |
unsigned __int64 GdiThreadLocalInfo; | |
unsigned __int64 Win32ClientInfo[62]; | |
unsigned __int64 glDispatchTable[233]; | |
unsigned __int64 glReserved1[29]; | |
unsigned __int64 glReserved2; | |
unsigned __int64 glSectionInfo; | |
unsigned __int64 glSection; | |
unsigned __int64 glTable; | |
unsigned __int64 glCurrentRC; | |
unsigned __int64 glContext; | |
unsigned int LastStatusValue; | |
unsigned __int8 Padding2[4]; | |
_STRING64 StaticUnicodeString; | |
wchar_t StaticUnicodeBuffer[261]; | |
unsigned __int8 Padding3[6]; | |
unsigned __int64 DeallocationStack; | |
unsigned __int64 TlsSlots[64]; | |
LIST_ENTRY64 TlsLinks; | |
unsigned __int64 Vdm; | |
unsigned __int64 ReservedForNtRpc; | |
unsigned __int64 DbgSsReserved[2]; | |
unsigned int HardErrorMode; | |
unsigned __int8 Padding4[4]; | |
unsigned __int64 Instrumentation[11]; | |
_GUID ActivityId; | |
unsigned __int64 SubProcessTag; | |
unsigned __int64 PerflibData; | |
unsigned __int64 EtwTraceData; | |
unsigned __int64 WinSockData; | |
unsigned int GdiBatchCount; | |
$724F2A2D041FFB2E94FF01FB63FF30C4 ___u68; | |
unsigned int GuaranteedStackBytes; | |
unsigned __int8 Padding5[4]; | |
unsigned __int64 ReservedForPerf; | |
unsigned __int64 ReservedForOle; | |
unsigned int WaitingOnLoaderLock; | |
unsigned __int8 Padding6[4]; | |
unsigned __int64 SavedPriorityState; | |
unsigned __int64 ReservedForCodeCoverage; | |
unsigned __int64 ThreadPoolData; | |
unsigned __int64 TlsExpansionSlots; | |
unsigned __int64 DeallocationBStore; | |
unsigned __int64 BStoreLimit; | |
unsigned int MuiGeneration; | |
unsigned int IsImpersonating; | |
unsigned __int64 NlsCache; | |
unsigned __int64 pShimData; | |
unsigned int HeapData; | |
unsigned __int8 Padding7[4]; | |
unsigned __int64 CurrentTransactionHandle; | |
unsigned __int64 ActiveFrame; | |
unsigned __int64 FlsData; | |
unsigned __int64 PreferredLanguages; | |
unsigned __int64 UserPrefLanguages; | |
unsigned __int64 MergedPrefLanguages; | |
unsigned int MuiImpersonation; | |
$7AB5819D1A5DE0161186195FCBC4D698 ___u94; | |
$54D96A8D96B6F3818A1C53720F347267 ___u95; | |
unsigned __int64 TxnScopeEnterCallback; | |
unsigned __int64 TxnScopeExitCallback; | |
unsigned __int64 TxnScopeContext; | |
unsigned int LockCount; | |
int WowTebOffset; | |
unsigned __int64 ResourceRetValue; | |
unsigned __int64 ReservedForWdf; | |
unsigned __int64 ReservedForCrt; | |
_GUID EffectiveContainerId; | |
}; | |
/* 1548 */ | |
struct $A354E3067E50EC174E9C654CAF9507B6 | |
{ | |
unsigned __int64 AccessVpRunTimeReg : 1; | |
unsigned __int64 AccessPartitionReferenceCounter : 1; | |
unsigned __int64 AccessSynicRegs : 1; | |
unsigned __int64 AccessSyntheticTimerRegs : 1; | |
unsigned __int64 AccessIntrCtrlRegs : 1; | |
unsigned __int64 AccessHypercallMsrs : 1; | |
unsigned __int64 AccessVpIndex : 1; | |
unsigned __int64 AccessResetReg : 1; | |
unsigned __int64 AccessStatsReg : 1; | |
unsigned __int64 AccessPartitionReferenceTsc : 1; | |
unsigned __int64 AccessGuestIdleReg : 1; | |
unsigned __int64 AccessFrequencyRegs : 1; | |
unsigned __int64 AccessDebugRegs : 1; | |
unsigned __int64 AccessReenlightenmentControls : 1; | |
unsigned __int64 AccessRootSchedulerReg : 1; | |
unsigned __int64 AccessTscInvariantControls : 1; | |
unsigned __int64 Reserved1 : 16; | |
unsigned __int64 CreatePartitions : 1; | |
unsigned __int64 AccessPartitionId : 1; | |
unsigned __int64 AccessMemoryPool : 1; | |
unsigned __int64 AdjustMessageBuffers : 1; | |
unsigned __int64 PostMessages : 1; | |
unsigned __int64 SignalEvents : 1; | |
unsigned __int64 CreatePort : 1; | |
unsigned __int64 ConnectPort : 1; | |
unsigned __int64 AccessStats : 1; | |
unsigned __int64 Reserved2 : 2; | |
unsigned __int64 Debugging : 1; | |
unsigned __int64 CpuManagement : 1; | |
unsigned __int64 ConfigureProfiler : 1; | |
unsigned __int64 AccessVpExitTracing : 1; | |
unsigned __int64 EnableExtendedGvaRangesForFlushVirtualAddressList : 1; | |
unsigned __int64 AccessVsm : 1; | |
unsigned __int64 AccessVpRegisters : 1; | |
unsigned __int64 UnusedBit : 1; | |
unsigned __int64 FastHypercallOutput : 1; | |
unsigned __int64 EnableExtendedHypercalls : 1; | |
unsigned __int64 StartVirtualProcessor : 1; | |
unsigned __int64 Isolation : 1; | |
unsigned __int64 Reserved3 : 9; | |
}; | |
/* 1549 */ | |
union _HV_PARTITION_PRIVILEGE_MASK | |
{ | |
unsigned __int64 AsUINT64; | |
$A354E3067E50EC174E9C654CAF9507B6 __s1; | |
}; | |
/* 1550 */ | |
struct _HV_X64_HYPERVISOR_FEATURES | |
{ | |
_HV_PARTITION_PRIVILEGE_MASK PartitionPrivileges; | |
unsigned __int32 MaxSupportedCState : 4; | |
unsigned __int32 HpetNeededForC3PowerState_Deprecated : 1; | |
unsigned __int32 Reserved : 27; | |
unsigned __int32 MwaitAvailable_Deprecated : 1; | |
unsigned __int32 GuestDebuggingAvailable : 1; | |
unsigned __int32 PerformanceMonitorsAvailable : 1; | |
unsigned __int32 CpuDynamicPartitioningAvailable : 1; | |
unsigned __int32 XmmRegistersForFastHypercallAvailable : 1; | |
unsigned __int32 GuestIdleAvailable : 1; | |
unsigned __int32 HypervisorSleepStateSupportAvailable : 1; | |
unsigned __int32 NumaDistanceQueryAvailable : 1; | |
unsigned __int32 FrequencyRegsAvailable : 1; | |
unsigned __int32 SyntheticMachineCheckAvailable : 1; | |
unsigned __int32 GuestCrashRegsAvailable : 1; | |
unsigned __int32 DebugRegsAvailable : 1; | |
unsigned __int32 Npiep1Available : 1; | |
unsigned __int32 DisableHypervisorAvailable : 1; | |
unsigned __int32 ExtendedGvaRangesForFlushVirtualAddressListAvailable : 1; | |
unsigned __int32 FastHypercallOutputAvailable : 1; | |
unsigned __int32 SvmFeaturesAvailable : 1; | |
unsigned __int32 SintPollingModeAvailable : 1; | |
unsigned __int32 HypercallMsrLockAvailable : 1; | |
unsigned __int32 DirectSyntheticTimers : 1; | |
unsigned __int32 RegisterPatAvailable : 1; | |
unsigned __int32 RegisterBndcfgsAvailable : 1; | |
unsigned __int32 WatchdogTimerAvailable : 1; | |
unsigned __int32 SyntheticTimeUnhaltedTimerAvailable : 1; | |
unsigned __int32 DeviceDomainsAvailable : 1; | |
unsigned __int32 S1DeviceDomainsAvailable : 1; | |
unsigned __int32 LbrAvailable : 1; | |
unsigned __int32 IptAvailable : 1; | |
unsigned __int32 CrossVtlFlushAvailable : 1; | |
unsigned __int32 IdleSpecCtrlAvailable : 1; | |
unsigned __int32 Reserved1 : 2; | |
}; | |
/* 1551 */ | |
struct _KIST_BASE_FRAME | |
{ | |
_KPCR *KernelGsBase; | |
_KIST_LINK_FRAME *IstStack; | |
unsigned __int64 PreviousGsBase; | |
unsigned __int64 PreviousCr3; | |
unsigned __int64 IstPad; | |
unsigned __int64 Reserved; | |
}; | |
/* 1552 */ | |
struct _KIST_LINK_FRAME | |
{ | |
_KIST_BASE_FRAME *IstBaseFrame; | |
unsigned int Signature; | |
unsigned int Reserved0; | |
unsigned __int64 Reserved[2]; | |
}; | |
/* 1553 */ | |
struct _MCGEN_TRACE_CONTEXT | |
{ | |
unsigned __int64 RegistrationHandle; | |
unsigned __int64 Logger; | |
unsigned __int64 MatchAnyKeyword; | |
unsigned __int64 MatchAllKeyword; | |
unsigned int Flags; | |
unsigned int IsEnabled; | |
unsigned __int8 Level; | |
unsigned __int8 Reserve; | |
unsigned __int16 EnableBitsCount; | |
unsigned int *EnableBitMask; | |
const unsigned __int64 *EnableKeyWords; | |
const unsigned __int8 *EnableLevel; | |
}; | |
/* 1554 */ | |
struct _PNP_DEVICE_COMPLETION_QUEUE | |
{ | |
_LIST_ENTRY DispatchedList; | |
unsigned int DispatchedCount; | |
_LIST_ENTRY CompletedList; | |
_KSEMAPHORE CompletedSemaphore; | |
unsigned __int64 SpinLock; | |
}; | |
/* 1555 */ | |
struct _PNP_ASSIGN_RESOURCES_CONTEXT | |
{ | |
unsigned int IncludeFailedDevices; | |
unsigned int DeviceCount; | |
_DEVICE_OBJECT *DeviceList[1]; | |
}; | |
/* 1556 */ | |
struct __declspec(align(8)) _PNP_RESOURCE_REQUEST | |
{ | |
_DEVICE_OBJECT *PhysicalDevice; | |
unsigned int Flags; | |
_ARBITER_REQUEST_SOURCE AllocationType; | |
unsigned int Priority; | |
unsigned int Position; | |
_IO_RESOURCE_REQUIREMENTS_LIST *ResourceRequirements; | |
void *ReqList; | |
_CM_RESOURCE_LIST *ResourceAssignment; | |
_CM_RESOURCE_LIST *TranslatedResourceAssignment; | |
int Status; | |
}; | |
/* 1557 */ | |
struct _EXCEPTION_RECORD64 | |
{ | |
int ExceptionCode; | |
unsigned int ExceptionFlags; | |
unsigned __int64 ExceptionRecord; | |
unsigned __int64 ExceptionAddress; | |
unsigned int NumberParameters; | |
unsigned int __unusedAlignment; | |
unsigned __int64 ExceptionInformation[15]; | |
}; | |
/* 1558 */ | |
struct _EXCEPTION_RECORD32 | |
{ | |
int ExceptionCode; | |
unsigned int ExceptionFlags; | |
unsigned int ExceptionRecord; | |
unsigned int ExceptionAddress; | |
unsigned int NumberParameters; | |
unsigned int ExceptionInformation[15]; | |
}; | |
/* 1559 */ | |
struct __declspec(align(8)) _DBGKM_EXCEPTION64 | |
{ | |
_EXCEPTION_RECORD64 ExceptionRecord; | |
unsigned int FirstChance; | |
}; | |
/* 1560 */ | |
struct _DBGKM_EXCEPTION32 | |
{ | |
_EXCEPTION_RECORD32 ExceptionRecord; | |
unsigned int FirstChance; | |
}; | |
/* 1561 */ | |
struct _X86_KTRAP_FRAME | |
{ | |
unsigned int DbgEbp; | |
unsigned int DbgEip; | |
unsigned int DbgArgMark; | |
unsigned int DbgArgPointer; | |
unsigned int TempSegCs; | |
unsigned int TempEsp; | |
unsigned int Dr0; | |
unsigned int Dr1; | |
unsigned int Dr2; | |
unsigned int Dr3; | |
unsigned int Dr6; | |
unsigned int Dr7; | |
unsigned int SegGs; | |
unsigned int SegEs; | |
unsigned int SegDs; | |
unsigned int Edx; | |
unsigned int Ecx; | |
unsigned int Eax; | |
unsigned __int8 PreviousPreviousMode; | |
unsigned __int8 EntropyQueueDpc; | |
unsigned __int8 Reserved[2]; | |
unsigned int ExceptionList; | |
unsigned int SegFs; | |
unsigned int Edi; | |
unsigned int Esi; | |
unsigned int Ebx; | |
unsigned int Ebp; | |
unsigned int ErrCode; | |
unsigned int Eip; | |
unsigned int SegCs; | |
unsigned int EFlags; | |
unsigned int HardwareEsp; | |
unsigned int HardwareSegSs; | |
unsigned int V86Es; | |
unsigned int V86Ds; | |
unsigned int V86Fs; | |
unsigned int V86Gs; | |
}; | |
/* 1562 */ | |
struct _X86_KTRAP_FRAME_BLUE | |
{ | |
unsigned int DbgEbp; | |
unsigned int DbgEip; | |
unsigned int DbgArgMark; | |
unsigned __int16 TempSegCs; | |
unsigned __int8 Logging; | |
unsigned __int8 FrameType; | |
unsigned int TempEsp; | |
unsigned int Dr0; | |
unsigned int Dr1; | |
unsigned int Dr2; | |
unsigned int Dr3; | |
unsigned int Dr6; | |
unsigned int Dr7; | |
unsigned int SegGs; | |
unsigned int SegEs; | |
unsigned int SegDs; | |
unsigned int Edx; | |
unsigned int Ecx; | |
unsigned int Eax; | |
unsigned __int8 PreviousPreviousMode; | |
unsigned __int8 EntropyQueueDpc; | |
unsigned __int8 Reserved[2]; | |
unsigned int MxCsr; | |
unsigned int ExceptionList; | |
unsigned int SegFs; | |
unsigned int Edi; | |
unsigned int Esi; | |
unsigned int Ebx; | |
unsigned int Ebp; | |
unsigned int ErrCode; | |
unsigned int Eip; | |
unsigned int SegCs; | |
unsigned int EFlags; | |
unsigned int HardwareEsp; | |
unsigned int HardwareSegSs; | |
unsigned int V86Es; | |
unsigned int V86Ds; | |
unsigned int V86Fs; | |
unsigned int V86Gs; | |
}; | |
/* 1563 */ | |
struct __declspec(align(8)) _DBGKD_LOAD_SYMBOLS64 | |
{ | |
unsigned int PathNameLength; | |
unsigned __int64 BaseOfDll; | |
unsigned __int64 ProcessId; | |
unsigned int CheckSum; | |
unsigned int SizeOfImage; | |
unsigned __int8 UnloadSymbols; | |
}; | |
/* 1564 */ | |
struct __declspec(align(4)) _DBGKD_LOAD_SYMBOLS32 | |
{ | |
unsigned int PathNameLength; | |
unsigned int BaseOfDll; | |
unsigned int ProcessId; | |
unsigned int CheckSum; | |
unsigned int SizeOfImage; | |
unsigned __int8 UnloadSymbols; | |
}; | |
/* 1565 */ | |
struct _DBGKD_READ_MEMORY64 | |
{ | |
unsigned __int64 TargetBaseAddress; | |
unsigned int TransferCount; | |
unsigned int ActualBytesRead; | |
}; | |
/* 1566 */ | |
struct _DBGKD_READ_MEMORY32 | |
{ | |
unsigned int TargetBaseAddress; | |
unsigned int TransferCount; | |
unsigned int ActualBytesRead; | |
}; | |
/* 1567 */ | |
struct _DBGKD_WRITE_MEMORY64 | |
{ | |
unsigned __int64 TargetBaseAddress; | |
unsigned int TransferCount; | |
unsigned int ActualBytesWritten; | |
}; | |
/* 1568 */ | |
struct _DBGKD_WRITE_MEMORY32 | |
{ | |
unsigned int TargetBaseAddress; | |
unsigned int TransferCount; | |
unsigned int ActualBytesWritten; | |
}; | |
/* 1569 */ | |
struct __declspec(align(8)) _DBGKD_WRITE_BREAKPOINT64 | |
{ | |
unsigned __int64 BreakPointAddress; | |
unsigned int BreakPointHandle; | |
}; | |
/* 1570 */ | |
struct _DBGKD_WRITE_BREAKPOINT32 | |
{ | |
unsigned int BreakPointAddress; | |
unsigned int BreakPointHandle; | |
}; | |
/* 1571 */ | |
struct _DBGKD_READ_WRITE_IO64 | |
{ | |
unsigned __int64 IoAddress; | |
unsigned int DataSize; | |
unsigned int DataValue; | |
}; | |
/* 1572 */ | |
struct _DBGKD_READ_WRITE_IO32 | |
{ | |
unsigned int DataSize; | |
unsigned int IoAddress; | |
unsigned int DataValue; | |
}; | |
/* 1573 */ | |
struct __declspec(align(8)) _DBGKD_READ_WRITE_IO_EXTENDED64 | |
{ | |
unsigned int DataSize; | |
unsigned int InterfaceType; | |
unsigned int BusNumber; | |
unsigned int AddressSpace; | |
unsigned __int64 IoAddress; | |
unsigned int DataValue; | |
}; | |
/* 1574 */ | |
struct _DBGKD_READ_WRITE_IO_EXTENDED32 | |
{ | |
unsigned int DataSize; | |
unsigned int InterfaceType; | |
unsigned int BusNumber; | |
unsigned int AddressSpace; | |
unsigned int IoAddress; | |
unsigned int DataValue; | |
}; | |
/* 1575 */ | |
struct _DBGKD_SET_SPECIAL_CALL32 | |
{ | |
unsigned int SpecialCall; | |
}; | |
/* 1576 */ | |
struct _DBGKD_SET_SPECIAL_CALL64 | |
{ | |
unsigned __int64 SpecialCall; | |
}; | |
/* 1577 */ | |
struct _DBGKD_SET_INTERNAL_BREAKPOINT32 | |
{ | |
unsigned int BreakpointAddress; | |
unsigned int Flags; | |
}; | |
/* 1578 */ | |
struct __declspec(align(8)) _DBGKD_SET_INTERNAL_BREAKPOINT64 | |
{ | |
unsigned __int64 BreakpointAddress; | |
unsigned int Flags; | |
}; | |
/* 1579 */ | |
struct _DBGKD_GET_INTERNAL_BREAKPOINT64 | |
{ | |
unsigned __int64 BreakpointAddress; | |
unsigned int Flags; | |
unsigned int Calls; | |
unsigned int MaxCallsPerPeriod; | |
unsigned int MinInstructions; | |
unsigned int MaxInstructions; | |
unsigned int TotalInstructions; | |
}; | |
/* 1580 */ | |
struct _DBGKD_GET_INTERNAL_BREAKPOINT32 | |
{ | |
unsigned int BreakpointAddress; | |
unsigned int Flags; | |
unsigned int Calls; | |
unsigned int MaxCallsPerPeriod; | |
unsigned int MinInstructions; | |
unsigned int MaxInstructions; | |
unsigned int TotalInstructions; | |
}; | |
/* 1581 */ | |
struct _DBGKD_GET_CONTEXT | |
{ | |
unsigned int Unused; | |
}; | |
/* 1582 */ | |
struct _DBGKD_SET_CONTEXT | |
{ | |
unsigned int ContextFlags; | |
}; | |
/* 1583 */ | |
struct _DBGKD_RESTORE_BREAKPOINT | |
{ | |
unsigned int BreakPointHandle; | |
}; | |
/* 1584 */ | |
struct _DBGKD_CONTINUE | |
{ | |
int ContinueStatus; | |
}; | |
/* 1585 */ | |
struct __unaligned __declspec(align(4)) _AMD64_DBGKD_CONTROL_SET | |
{ | |
unsigned int TraceFlag; | |
unsigned __int64 Dr7; | |
unsigned __int64 CurrentSymbolStart; | |
unsigned __int64 CurrentSymbolEnd; | |
}; | |
/* 1586 */ | |
struct _X86_DBGKD_CONTROL_SET | |
{ | |
unsigned int TraceFlag; | |
unsigned int Dr7; | |
unsigned int CurrentSymbolStart; | |
unsigned int CurrentSymbolEnd; | |
}; | |
/* 1587 */ | |
struct __unaligned __declspec(align(4)) _IA64_DBGKD_CONTROL_SET | |
{ | |
unsigned int Continue; | |
unsigned __int64 CurrentSymbolStart; | |
unsigned __int64 CurrentSymbolEnd; | |
}; | |
/* 1588 */ | |
struct _ARM_DBGKD_CONTROL_SET | |
{ | |
unsigned int Continue; | |
unsigned int CurrentSymbolStart; | |
unsigned int CurrentSymbolEnd; | |
}; | |
/* 1589 */ | |
struct _ARM64_DBGKD_CONTROL_SET | |
{ | |
unsigned int Continue; | |
unsigned int TraceFlag; | |
unsigned __int64 CurrentSymbolStart; | |
unsigned __int64 CurrentSymbolEnd; | |
}; | |
/* 1590 */ | |
struct _ARMCE_DBGKD_CONTROL_SET | |
{ | |
unsigned int Continue; | |
unsigned int CurrentSymbolStart; | |
unsigned int CurrentSymbolEnd; | |
}; | |
/* 1591 */ | |
struct _PPC_DBGKD_CONTROL_SET | |
{ | |
unsigned int Continue; | |
unsigned int CurrentSymbolStart; | |
unsigned int CurrentSymbolEnd; | |
}; | |
/* 1592 */ | |
union __unaligned __declspec(align(4)) $7DA6EDECF54FC434332E4073DE9DB00C | |
{ | |
_X86_DBGKD_CONTROL_SET X86ControlSet; | |
unsigned int AlphaControlSet; | |
_IA64_DBGKD_CONTROL_SET IA64ControlSet; | |
_AMD64_DBGKD_CONTROL_SET Amd64ControlSet; | |
_ARM_DBGKD_CONTROL_SET ArmControlSet; | |
_ARM64_DBGKD_CONTROL_SET Arm64ControlSet; | |
_ARMCE_DBGKD_CONTROL_SET ArmCeControlSet; | |
_PPC_DBGKD_CONTROL_SET PpcControlSet; | |
}; | |
/* 1593 */ | |
struct _DBGKD_ANY_CONTROL_SET | |
{ | |
$7DA6EDECF54FC434332E4073DE9DB00C ___u0; | |
}; | |
/* 1594 */ | |
union $BC6E29712BF52FC1AA904991EECF4165 | |
{ | |
_AMD64_DBGKD_CONTROL_SET ControlSet; | |
_DBGKD_ANY_CONTROL_SET AnyControlSet; | |
}; | |
/* 1595 */ | |
struct _DBGKD_CONTINUE2 | |
{ | |
int ContinueStatus; | |
$BC6E29712BF52FC1AA904991EECF4165 ___u1; | |
}; | |
/* 1596 */ | |
struct _DBGKD_QUERY_SPECIAL_CALLS | |
{ | |
unsigned int NumberOfSpecialCalls; | |
}; | |
/* 1597 */ | |
struct _DBGKD_GET_VERSION64 | |
{ | |
unsigned __int16 MajorVersion; | |
unsigned __int16 MinorVersion; | |
unsigned __int8 ProtocolVersion; | |
unsigned __int8 KdSecondaryVersion; | |
unsigned __int16 Flags; | |
unsigned __int16 MachineType; | |
unsigned __int8 MaxPacketType; | |
unsigned __int8 MaxStateChange; | |
unsigned __int8 MaxManipulate; | |
unsigned __int8 Simulation; | |
unsigned __int16 Unused[1]; | |
unsigned __int64 KernBase; | |
unsigned __int64 PsLoadedModuleList; | |
unsigned __int64 DebuggerDataList; | |
}; | |
/* 1598 */ | |
struct _DBGKD_BREAKPOINTEX | |
{ | |
unsigned int BreakPointCount; | |
int ContinueStatus; | |
}; | |
/* 1599 */ | |
struct _DBGKD_READ_WRITE_MSR | |
{ | |
unsigned int Msr; | |
unsigned int DataValueLow; | |
unsigned int DataValueHigh; | |
}; | |
/* 1600 */ | |
union $B888D73C355F38144AA7B636A80398B1 | |
{ | |
unsigned __int64 SearchAddress; | |
unsigned __int64 FoundAddress; | |
}; | |
/* 1601 */ | |
struct __declspec(align(8)) _DBGKD_SEARCH_MEMORY | |
{ | |
$B888D73C355F38144AA7B636A80398B1 ___u0; | |
unsigned __int64 SearchLength; | |
unsigned int PatternLength; | |
}; | |
/* 1602 */ | |
struct _DBGKD_GET_SET_BUS_DATA | |
{ | |
unsigned int BusDataType; | |
unsigned int BusNumber; | |
unsigned int SlotNumber; | |
unsigned int Offset; | |
unsigned int Length; | |
}; | |
/* 1603 */ | |
struct _DBGKD_FILL_MEMORY | |
{ | |
unsigned __int64 Address; | |
unsigned int Length; | |
unsigned __int16 Flags; | |
unsigned __int16 PatternLength; | |
}; | |
/* 1604 */ | |
struct _DBGKD_QUERY_MEMORY | |
{ | |
unsigned __int64 Address; | |
unsigned __int64 Reserved; | |
unsigned int AddressSpace; | |
unsigned int Flags; | |
}; | |
/* 1605 */ | |
struct _DBGKD_SWITCH_PARTITION | |
{ | |
unsigned int Partition; | |
}; | |
/* 1606 */ | |
struct _DBGKD_CONTEXT_EX | |
{ | |
unsigned int Offset; | |
unsigned int ByteCount; | |
unsigned int BytesCopied; | |
}; | |
/* 1607 */ | |
struct __declspec(align(4)) _DBGKD_WRITE_CUSTOM_BREAKPOINT | |
{ | |
unsigned __int64 BreakPointAddress; | |
unsigned __int64 BreakPointInstruction; | |
unsigned int BreakPointHandle; | |
unsigned __int8 BreakPointInstructionSize; | |
unsigned __int8 BreakPointInstructionAlignment; | |
}; | |
/* 1608 */ | |
struct _DBGKD_MANIPULATE_STATE64 | |
{ | |
unsigned int ApiNumber; | |
unsigned __int16 ProcessorLevel; | |
unsigned __int16 Processor; | |
int ReturnStatus; | |
union | |
{ | |
_DBGKD_READ_MEMORY64 ReadMemory; | |
_DBGKD_WRITE_MEMORY64 WriteMemory; | |
_DBGKD_GET_CONTEXT GetContext; | |
_DBGKD_SET_CONTEXT SetContext; | |
_DBGKD_WRITE_BREAKPOINT64 WriteBreakPoint; | |
_DBGKD_RESTORE_BREAKPOINT RestoreBreakPoint; | |
_DBGKD_CONTINUE Continue; | |
_DBGKD_CONTINUE2 Continue2; | |
_DBGKD_READ_WRITE_IO64 ReadWriteIo; | |
_DBGKD_READ_WRITE_IO_EXTENDED64 ReadWriteIoExtended; | |
_DBGKD_QUERY_SPECIAL_CALLS QuerySpecialCalls; | |
_DBGKD_SET_SPECIAL_CALL64 SetSpecialCall; | |
_DBGKD_SET_INTERNAL_BREAKPOINT64 SetInternalBreakpoint; | |
_DBGKD_GET_INTERNAL_BREAKPOINT64 GetInternalBreakpoint; | |
_DBGKD_GET_VERSION64 GetVersion64; | |
_DBGKD_BREAKPOINTEX BreakPointEx; | |
_DBGKD_READ_WRITE_MSR ReadWriteMsr; | |
_DBGKD_SEARCH_MEMORY SearchMemory; | |
_DBGKD_GET_SET_BUS_DATA GetSetBusData; | |
_DBGKD_FILL_MEMORY FillMemory; | |
_DBGKD_QUERY_MEMORY QueryMemory; | |
_DBGKD_SWITCH_PARTITION SwitchPartition; | |
_DBGKD_CONTEXT_EX GetContextEx; | |
_DBGKD_CONTEXT_EX SetContextEx; | |
_DBGKD_WRITE_CUSTOM_BREAKPOINT WriteCustomBreakPoint; | |
} u; | |
}; | |
/* 1609 */ | |
struct _DBGKD_GET_VERSION32 | |
{ | |
unsigned __int16 MajorVersion; | |
unsigned __int16 MinorVersion; | |
unsigned __int16 ProtocolVersion; | |
unsigned __int16 Flags; | |
unsigned int KernBase; | |
unsigned int PsLoadedModuleList; | |
unsigned __int16 MachineType; | |
unsigned __int16 ThCallbackStack; | |
unsigned __int16 NextCallback; | |
unsigned __int16 FramePointer; | |
unsigned int KiCallUserMode; | |
unsigned int KeUserCallbackDispatcher; | |
unsigned int BreakpointWithStatus; | |
unsigned int DebuggerDataList; | |
}; | |
/* 1610 */ | |
struct __unaligned __declspec(align(4)) _DBGKD_MANIPULATE_STATE32 | |
{ | |
unsigned int ApiNumber; | |
unsigned __int16 ProcessorLevel; | |
unsigned __int16 Processor; | |
int ReturnStatus; | |
union | |
{ | |
_DBGKD_READ_MEMORY32 ReadMemory; | |
_DBGKD_WRITE_MEMORY32 WriteMemory; | |
_DBGKD_READ_MEMORY64 ReadMemory64; | |
_DBGKD_WRITE_MEMORY64 WriteMemory64; | |
_DBGKD_GET_CONTEXT GetContext; | |
_DBGKD_SET_CONTEXT SetContext; | |
_DBGKD_WRITE_BREAKPOINT32 WriteBreakPoint; | |
_DBGKD_RESTORE_BREAKPOINT RestoreBreakPoint; | |
_DBGKD_CONTINUE Continue; | |
_DBGKD_CONTINUE2 Continue2; | |
_DBGKD_READ_WRITE_IO32 ReadWriteIo; | |
_DBGKD_READ_WRITE_IO_EXTENDED32 ReadWriteIoExtended; | |
_DBGKD_QUERY_SPECIAL_CALLS QuerySpecialCalls; | |
_DBGKD_SET_SPECIAL_CALL32 SetSpecialCall; | |
_DBGKD_SET_INTERNAL_BREAKPOINT32 SetInternalBreakpoint; | |
_DBGKD_GET_INTERNAL_BREAKPOINT32 GetInternalBreakpoint; | |
_DBGKD_GET_VERSION32 GetVersion32; | |
_DBGKD_BREAKPOINTEX BreakPointEx; | |
_DBGKD_READ_WRITE_MSR ReadWriteMsr; | |
_DBGKD_SEARCH_MEMORY SearchMemory; | |
_DBGKD_CONTEXT_EX GetContextEx; | |
_DBGKD_CONTEXT_EX SetContextEx; | |
} u; | |
}; | |
/* 1611 */ | |
struct _DEVICE_MANAGE_DATA_SET_ATTRIBUTES | |
{ | |
unsigned int Size; | |
unsigned int Action; | |
unsigned int Flags; | |
unsigned int ParameterBlockOffset; | |
unsigned int ParameterBlockLength; | |
unsigned int DataSetRangesOffset; | |
unsigned int DataSetRangesLength; | |
}; | |
/* 1612 */ | |
struct _DEVICE_DATA_SET_RANGE | |
{ | |
__int64 StartingOffset; | |
unsigned __int64 LengthInBytes; | |
}; | |
/* 1613 */ | |
struct _DEVICE_DSM_DEFINITION | |
{ | |
unsigned int Action; | |
unsigned __int8 SingleRange; | |
unsigned int ParameterBlockAlignment; | |
unsigned int ParameterBlockLength; | |
unsigned __int8 HasOutput; | |
unsigned int OutputBlockAlignment; | |
unsigned int OutputBlockLength; | |
}; | |
/* 1614 */ | |
struct _DEVICE_MANAGE_DATA_SET_ATTRIBUTES_OUTPUT | |
{ | |
unsigned int Size; | |
unsigned int Action; | |
unsigned int Flags; | |
unsigned int OperationStatus; | |
unsigned int ExtendedError; | |
unsigned int TargetDetailedError; | |
unsigned int ReservedStatus; | |
unsigned int OutputBlockOffset; | |
unsigned int OutputBlockLength; | |
}; | |
/* 1615 */ | |
struct _PEP_ACPI_IO_MEMORY_RESOURCE | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
unsigned __int8 Information; | |
_LARGE_INTEGER MinimumAddress; | |
_LARGE_INTEGER MaximumAddress; | |
unsigned int Alignment; | |
unsigned int Length; | |
}; | |
/* 1616 */ | |
struct $6D4F6A779CB91EC017A0C8BC9C01A4CF | |
{ | |
unsigned __int32 Shared : 1; | |
unsigned __int32 Wake : 1; | |
unsigned __int32 ResourceUsage : 1; | |
unsigned __int32 SlaveMode : 1; | |
unsigned __int32 AddressingMode : 1; | |
unsigned __int32 SharedMode : 1; | |
unsigned __int32 Reserved : 26; | |
}; | |
/* 1617 */ | |
union _PEP_ACPI_RESOURCE_FLAGS | |
{ | |
unsigned int AsULong; | |
$6D4F6A779CB91EC017A0C8BC9C01A4CF __s1; | |
}; | |
/* 1618 */ | |
struct _PEP_ACPI_INTERRUPT_RESOURCE | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
_KINTERRUPT_MODE InterruptType; | |
_KINTERRUPT_POLARITY InterruptPolarity; | |
_PEP_ACPI_RESOURCE_FLAGS Flags; | |
unsigned __int8 Count; | |
unsigned int *Pins; | |
}; | |
/* 1619 */ | |
struct __declspec(align(8)) _PEP_ACPI_GPIO_RESOURCE | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
_PEP_ACPI_RESOURCE_FLAGS Flags; | |
_KINTERRUPT_MODE InterruptType; | |
_KINTERRUPT_POLARITY InterruptPolarity; | |
_GPIO_PIN_CONFIG_TYPE PinConfig; | |
_GPIO_PIN_IORESTRICTION_TYPE IoRestrictionType; | |
unsigned __int16 DriveStrength; | |
unsigned __int16 DebounceTimeout; | |
wchar_t *PinTable; | |
unsigned __int16 PinCount; | |
unsigned __int8 ResourceSourceIndex; | |
_UNICODE_STRING *ResourceSourceName; | |
unsigned __int8 *VendorData; | |
unsigned __int16 VendorDataLength; | |
}; | |
/* 1620 */ | |
struct __declspec(align(8)) _PEP_ACPI_SPB_RESOURCE | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
_PEP_ACPI_RESOURCE_FLAGS Flags; | |
unsigned __int16 TypeSpecificFlags; | |
unsigned __int8 ResourceSourceIndex; | |
_UNICODE_STRING *ResourceSourceName; | |
char *VendorData; | |
unsigned __int16 VendorDataLength; | |
}; | |
/* 1621 */ | |
struct __declspec(align(4)) _PEP_ACPI_SPB_I2C_RESOURCE | |
{ | |
_PEP_ACPI_SPB_RESOURCE SpbCommon; | |
unsigned int ConnectionSpeed; | |
unsigned __int16 SlaveAddress; | |
}; | |
/* 1622 */ | |
struct __declspec(align(8)) _PEP_ACPI_SPB_SPI_RESOURCE | |
{ | |
_PEP_ACPI_SPB_RESOURCE SpbCommon; | |
unsigned int ConnectionSpeed; | |
unsigned __int8 DataBitLength; | |
unsigned __int8 Phase; | |
unsigned __int8 Polarity; | |
unsigned __int16 DeviceSelection; | |
}; | |
/* 1623 */ | |
struct __declspec(align(8)) _PEP_ACPI_SPB_UART_RESOURCE | |
{ | |
_PEP_ACPI_SPB_RESOURCE SpbCommon; | |
unsigned int BaudRate; | |
unsigned __int16 RxBufferSize; | |
unsigned __int16 TxBufferSize; | |
unsigned __int8 Parity; | |
unsigned __int8 LinesInUse; | |
}; | |
/* 1624 */ | |
struct _PEP_ACPI_EXTENDED_ADDRESS | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
_PEP_ACPI_RESOURCE_FLAGS Flags; | |
unsigned __int8 ResourceFlags; | |
unsigned __int8 GeneralFlags; | |
unsigned __int8 TypeSpecificFlags; | |
unsigned __int8 RevisionId; | |
unsigned __int8 Reserved; | |
unsigned __int64 Granularity; | |
unsigned __int64 MinimumAddress; | |
unsigned __int64 MaximumAddress; | |
unsigned __int64 TranslationAddress; | |
unsigned __int64 AddressLength; | |
unsigned __int64 TypeAttribute; | |
_UNICODE_STRING *DescriptorName; | |
}; | |
/* 1625 */ | |
union _PEP_ACPI_RESOURCE | |
{ | |
_PEP_ACPI_RESOURCE_TYPE Type; | |
_PEP_ACPI_IO_MEMORY_RESOURCE IoMemory; | |
_PEP_ACPI_INTERRUPT_RESOURCE Interrupt; | |
_PEP_ACPI_GPIO_RESOURCE Gpio; | |
_PEP_ACPI_SPB_I2C_RESOURCE SpbI2c; | |
_PEP_ACPI_SPB_SPI_RESOURCE SpbSpi; | |
_PEP_ACPI_SPB_UART_RESOURCE SpbUart; | |
_PEP_ACPI_EXTENDED_ADDRESS ExtendedAddress; | |
}; | |
/* 1626 */ | |
struct _PROCESSOR_PLATFORM_STATE_RESIDENCY | |
{ | |
unsigned __int64 Residency; | |
unsigned __int64 TransitionCount; | |
}; | |
/* 1627 */ | |
struct _PROCESSOR_PLATFORM_STATE_RESIDENCIES | |
{ | |
unsigned int Count; | |
_PROCESSOR_PLATFORM_STATE_RESIDENCY States[1]; | |
}; | |
/* 1628 */ | |
struct _PLATFORM_IDLE_STATE_ACCOUNTING | |
{ | |
unsigned int CancelCount; | |
unsigned int FailureCount; | |
unsigned int SuccessCount; | |
unsigned __int64 MaxTime; | |
unsigned __int64 MinTime; | |
unsigned __int64 TotalTime; | |
unsigned int InvalidBucketIndex; | |
_PPM_SELECTION_STATISTICS SelectionStatistics; | |
_PROC_IDLE_STATE_BUCKET IdleTimeBuckets[26]; | |
}; | |
/* 1629 */ | |
struct _PLATFORM_IDLE_ACCOUNTING | |
{ | |
unsigned int ResetCount; | |
unsigned int StateCount; | |
unsigned int DeepSleepCount; | |
PPM_IDLE_BUCKET_TIME_TYPE TimeUnit; | |
unsigned __int64 StartTime; | |
_PLATFORM_IDLE_STATE_ACCOUNTING State[1]; | |
}; | |
/* 1630 */ | |
struct $64E25C1ED3F32E7698FAE7BEE50D8FB9 | |
{ | |
unsigned __int32 EnterProcessor : 12; | |
unsigned __int32 ExitProcessor : 12; | |
unsigned __int32 Transition : 2; | |
unsigned __int32 Entered : 1; | |
unsigned __int32 EntryPriority : 5; | |
}; | |
/* 1631 */ | |
volatile union _PPM_COORDINATED_SYNCHRONIZATION | |
{ | |
int AsLong; | |
$64E25C1ED3F32E7698FAE7BEE50D8FB9 __s1; | |
}; | |
/* 1632 */ | |
union $6272681136AD42CC889277DBDAEF2772 | |
{ | |
volatile int RefCount; | |
unsigned __int8 CacheAlign0[64]; | |
}; | |
/* 1633 */ | |
struct _PPM_PLATFORM_STATE | |
{ | |
unsigned __int64 LevelId; | |
unsigned int Latency; | |
unsigned int BreakEvenDuration; | |
_PPM_VETO_ACCOUNTING VetoAccounting; | |
unsigned __int8 TransitionDebugger; | |
unsigned __int8 Platform; | |
unsigned int DependencyListCount; | |
_KAFFINITY_EX Processors; | |
_UNICODE_STRING Name; | |
_PPM_SELECTION_DEPENDENCY *DependencyLists; | |
volatile _PPM_COORDINATED_SYNCHRONIZATION Synchronization; | |
volatile unsigned __int64 EnterTime; | |
__declspec(align(64)) $6272681136AD42CC889277DBDAEF2772 ___u12; | |
}; | |
/* 1634 */ | |
struct _PPM_PLATFORM_STATES | |
{ | |
unsigned int StateCount; | |
unsigned int InterfaceVersion; | |
unsigned int ProcessorCount; | |
unsigned __int8 CoordinatedInterface; | |
unsigned int (__fastcall *IdleTest)(void *, unsigned int, unsigned int); | |
int (__fastcall *IdlePreExecute)(void *, unsigned int, unsigned int, unsigned int, unsigned int *); | |
void (__fastcall *IdleComplete)(void *, unsigned int, unsigned int, unsigned int, unsigned int *); | |
int (__fastcall *QueryPlatformStateResidency)(void *, _PROCESSOR_PLATFORM_STATE_RESIDENCIES *); | |
_PLATFORM_IDLE_ACCOUNTING *Accounting; | |
unsigned __int8 DeepSleepEnabled; | |
_PPM_PLATFORM_STATE State[1]; | |
}; | |
/* 1635 */ | |
struct $16E1E01FEC2AEE0364559B17133A53F6 | |
{ | |
unsigned int Eax; | |
unsigned int Ebx; | |
unsigned int Ecx; | |
unsigned int Edx; | |
}; | |
/* 1636 */ | |
union _CPU_INFO | |
{ | |
unsigned int AsUINT32[4]; | |
$16E1E01FEC2AEE0364559B17133A53F6 __s1; | |
}; | |
/* 1637 */ | |
struct $C64A4FA5127893D0F0CCDC758F7A8F56 | |
{ | |
unsigned __int32 PerfDecreaseTime : 1; | |
unsigned __int32 PerfIncreaseTime : 1; | |
unsigned __int32 PerfDecreasePolicy : 1; | |
unsigned __int32 PerfIncreasePolicy : 1; | |
unsigned __int32 PerfDecreaseThreshold : 1; | |
unsigned __int32 PerfIncreaseThreshold : 1; | |
unsigned __int32 PerfMinPolicy : 1; | |
unsigned __int32 PerfMaxPolicy : 1; | |
unsigned __int32 PerfTimeCheck : 1; | |
unsigned __int32 PerfBoostPolicy : 1; | |
unsigned __int32 PerfBoostMode : 1; | |
unsigned __int32 AllowThrottling : 1; | |
unsigned __int32 PerfHistoryCount : 1; | |
unsigned __int32 ParkingPerfState : 1; | |
unsigned __int32 LatencyHintPerf : 1; | |
unsigned __int32 LatencyHintUnpark : 1; | |
unsigned __int32 CoreParkingMinCores : 1; | |
unsigned __int32 CoreParkingMaxCores : 1; | |
unsigned __int32 CoreParkingDecreasePolicy : 1; | |
unsigned __int32 CoreParkingIncreasePolicy : 1; | |
unsigned __int32 CoreParkingDecreaseTime : 1; | |
unsigned __int32 CoreParkingIncreaseTime : 1; | |
unsigned __int32 CoreParkingOverUtilizationThreshold : 1; | |
unsigned __int32 CoreParkingDistributeUtility : 1; | |
unsigned __int32 CoreParkingConcurrencyThreshold : 1; | |
unsigned __int32 CoreParkingHeadroomThreshold : 1; | |
unsigned __int32 CoreParkingDistributionThreshold : 1; | |
unsigned __int32 IdleAllowScaling : 1; | |
unsigned __int32 IdleDisable : 1; | |
unsigned __int32 IdleTimeCheck : 1; | |
unsigned __int32 IdleDemoteThreshold : 1; | |
unsigned __int32 IdlePromoteThreshold : 1; | |
unsigned __int32 HeteroDecreaseTime : 1; | |
unsigned __int32 HeteroIncreaseTime : 1; | |
unsigned __int32 HeteroDecreaseThreshold : 1; | |
unsigned __int32 HeteroIncreaseThreshold : 1; | |
unsigned __int32 Class0FloorPerformance : 1; | |
unsigned __int32 Class1InitialPerformance : 1; | |
unsigned __int32 EnergyPerfPreference : 1; | |
unsigned __int32 AutonomousActivityWindow : 1; | |
unsigned __int32 AutonomousMode : 1; | |
unsigned __int32 DutyCycling : 1; | |
unsigned __int32 FrequencyCap : 1; | |
unsigned __int32 ThreadPolicy : 1; | |
unsigned __int32 ShortThreadPolicy : 1; | |
unsigned __int32 IdleStateMax : 1; | |
unsigned __int32 ResponsivenessDisableThreshold : 1; | |
unsigned __int32 ResponsivenessEnableThreshold : 1; | |
unsigned __int32 ResponsivenessDisableTime : 1; | |
unsigned __int32 ResponsivenessEnableTime : 1; | |
unsigned __int32 ResponsivenessEppCeiling : 1; | |
unsigned __int32 ResponsivenessPerfFloor : 1; | |
unsigned __int32 SoftParkLatency : 1; | |
unsigned __int32 Spare : 11; | |
}; | |
/* 1638 */ | |
union _PPM_POLICY_SETTINGS_MASK | |
{ | |
unsigned __int64 Value; | |
$C64A4FA5127893D0F0CCDC758F7A8F56 __s1; | |
}; | |
/* 1639 */ | |
struct __declspec(align(8)) _PPM_ENGINE_SETTINGS | |
{ | |
_PPM_POLICY_SETTINGS_MASK ExplicitSetting[2]; | |
unsigned __int8 ThrottlingPolicy; | |
unsigned int PerfTimeCheck; | |
unsigned __int8 PerfHistoryCount[2]; | |
unsigned __int8 PerfMinPolicy[2]; | |
unsigned __int8 PerfMaxPolicy[2]; | |
unsigned __int8 PerfDecreaseTime[2]; | |
unsigned __int8 PerfIncreaseTime[2]; | |
unsigned __int8 PerfDecreasePolicy[2]; | |
unsigned __int8 PerfIncreasePolicy[2]; | |
unsigned __int8 PerfDecreaseThreshold[2]; | |
unsigned __int8 PerfIncreaseThreshold[2]; | |
unsigned int PerfFrequencyCap[2]; | |
unsigned int PerfBoostPolicy; | |
unsigned int PerfBoostMode; | |
unsigned int PerfReductionTolerance; | |
unsigned int EnergyPerfPreference[2]; | |
unsigned int AutonomousActivityWindow; | |
unsigned __int8 AutonomousPreference; | |
unsigned __int8 LatencyHintPerf[2]; | |
unsigned __int8 LatencyHintUnpark[2]; | |
unsigned int ResponsivenessDisableThreshold[2]; | |
unsigned int ResponsivenessEnableThreshold[2]; | |
unsigned __int8 ResponsivenessDisableTime[2]; | |
unsigned __int8 ResponsivenessEnableTime[2]; | |
unsigned int ResponsivenessEppCeiling[2]; | |
unsigned int ResponsivenessPerfFloor[2]; | |
unsigned __int8 DutyCycling; | |
unsigned __int8 ParkingPerfState[2]; | |
unsigned __int8 DistributeUtility; | |
unsigned __int8 CoreParkingOverUtilizationThreshold; | |
unsigned __int8 CoreParkingConcurrencyThreshold; | |
unsigned __int8 CoreParkingHeadroomThreshold; | |
unsigned __int8 CoreParkingDistributionThreshold; | |
unsigned __int8 CoreParkingDecreasePolicy; | |
unsigned __int8 CoreParkingIncreasePolicy; | |
unsigned int CoreParkingDecreaseTime; | |
unsigned int CoreParkingIncreaseTime; | |
unsigned __int8 CoreParkingMinCores[2]; | |
unsigned __int8 CoreParkingMaxCores[2]; | |
unsigned int SoftParkLatency; | |
unsigned __int8 AllowScaling; | |
unsigned __int8 IdleDisabled; | |
unsigned int IdleTimeCheck; | |
unsigned __int8 IdleDemotePercent; | |
unsigned __int8 IdlePromotePercent; | |
unsigned __int8 IdleStateMax; | |
unsigned __int8 HeteroDecreaseTime; | |
unsigned __int8 HeteroIncreaseTime; | |
unsigned __int8 HeteroDecreaseThreshold[1280]; | |
unsigned __int8 HeteroIncreaseThreshold[1280]; | |
unsigned __int8 Class0FloorPerformance; | |
unsigned __int8 Class1InitialPerformance; | |
_KHETERO_CPU_POLICY ThreadPolicies[2]; | |
}; | |
/* 1640 */ | |
struct _POP_PPM_PROFILE | |
{ | |
wchar_t *Name; | |
unsigned __int8 Id; | |
_GUID Guid; | |
unsigned int Flags; | |
unsigned __int8 Priority; | |
_PPM_ENGINE_SETTINGS Settings[2]; | |
unsigned __int64 StartTime; | |
unsigned __int64 Count; | |
unsigned __int64 MaxDuration; | |
unsigned __int64 MinDuration; | |
unsigned __int64 TotalDuration; | |
}; | |
/* 1641 */ | |
struct __declspec(align(8)) _DIRTY_PAGE_STATISTICS | |
{ | |
unsigned __int64 DirtyPages; | |
unsigned __int64 DirtyPagesLastScan; | |
unsigned int DirtyPagesScheduledLastScan; | |
}; | |
/* 1642 */ | |
struct __declspec(align(8)) _DIRTY_PAGE_THRESHOLDS | |
{ | |
unsigned __int64 DirtyPageThreshold; | |
unsigned __int64 DirtyPageThresholdTop; | |
unsigned __int64 DirtyPageThresholdBottom; | |
unsigned int DirtyPageTarget; | |
unsigned __int64 AggregateAvailablePages; | |
unsigned __int64 AggregateDirtyPages; | |
unsigned int AvailableHistory; | |
}; | |
/* 1643 */ | |
struct __declspec(align(8)) _LOG_HANDLE_CONTEXT | |
{ | |
void *LogHandle; | |
void (__fastcall *FlushToLsnRoutine)(void *, _LARGE_INTEGER); | |
void (__fastcall *QueryLogHandleInfoRoutine)(void *, wchar_t *); | |
_DIRTY_PAGE_STATISTICS DirtyPageStatistics; | |
_DIRTY_PAGE_THRESHOLDS DirtyPageThresholds; | |
unsigned int AdditionalPagesToWrite; | |
unsigned int CcLWScanDPThreshold; | |
_LARGE_INTEGER LargestLsnForCurrentLWScan; | |
_FILE_OBJECT *RelatedFileObject; | |
unsigned __int64 LargestLsnFileObjectKey; | |
_LARGE_INTEGER LastLWTimeStamp; | |
unsigned int Flags; | |
}; | |
/* 1644 */ | |
struct __declspec(align(8)) _VOLUME_CACHE_MAP | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteCode; | |
unsigned int UseCount; | |
_DEVICE_OBJECT *DeviceObject; | |
_LIST_ENTRY VolumeCacheMapLinks; | |
unsigned __int64 DirtyPages; | |
_LOG_HANDLE_CONTEXT LogHandleContext; | |
unsigned int Flags; | |
unsigned int PagesQueuedToDisk; | |
unsigned int LoggedPagesQueuedToDisk; | |
}; | |
/* 1651 */ | |
struct _LOGGED_STREAM_CALLBACK_V1 | |
{ | |
void *LogHandle; | |
void (__fastcall *FlushToLsnRoutine)(void *, _LARGE_INTEGER); | |
}; | |
/* 1652 */ | |
struct _LOGGED_STREAM_CALLBACK_V2 | |
{ | |
_LOG_HANDLE_CONTEXT *LogHandleContext; | |
}; | |
/* 1662 */ | |
union $CA195310EA259158CB42044E8D2AEB08 | |
{ | |
_LOGGED_STREAM_CALLBACK_V1 V1; | |
_LOGGED_STREAM_CALLBACK_V2 V2; | |
}; | |
/* 1654 */ | |
struct _PRIVATE_CACHE_MAP_FLAGS | |
{ | |
unsigned __int32 DontUse : 16; | |
unsigned __int32 ReadAheadActive : 1; | |
unsigned __int32 ReadAheadEnabled : 1; | |
unsigned __int32 PagePriority : 3; | |
unsigned __int32 PipelineReadAheads : 1; | |
unsigned __int32 Available : 10; | |
}; | |
/* 1655 */ | |
union $A5FC4F18AC105E95EFF337D7C1E01B60 | |
{ | |
__int16 NodeTypeCode; | |
_PRIVATE_CACHE_MAP_FLAGS Flags; | |
}; | |
/* 1656 */ | |
struct _PRIVATE_CACHE_MAP | |
{ | |
$A5FC4F18AC105E95EFF337D7C1E01B60 ___u0; | |
unsigned int ReadAheadMask; | |
_FILE_OBJECT *FileObject; | |
_LARGE_INTEGER FileOffset1; | |
_LARGE_INTEGER BeyondLastByte1; | |
_LARGE_INTEGER FileOffset2; | |
_LARGE_INTEGER BeyondLastByte2; | |
unsigned int SequentialReadCount; | |
unsigned int ReadAheadLength; | |
_LARGE_INTEGER ReadAheadOffset; | |
_LARGE_INTEGER ReadAheadBeyondLastByte; | |
unsigned __int64 PrevReadAheadBeyondLastByte; | |
unsigned __int64 ReadAheadSpinLock; | |
unsigned int PipelinedReadAheadRequestSize; | |
unsigned int ReadAheadGrowth; | |
_LIST_ENTRY PrivateLinks; | |
void *ReadAheadWorkItem; | |
}; | |
/* 1645 */ | |
struct __declspec(align(8)) _SHARED_CACHE_MAP | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteSize; | |
unsigned int OpenCount; | |
_LARGE_INTEGER FileSize; | |
_LIST_ENTRY BcbList; | |
_LARGE_INTEGER SectionSize; | |
_LARGE_INTEGER ValidDataLength; | |
_LARGE_INTEGER ValidDataGoal; | |
_VACB *InitialVacbs[4]; | |
_VACB **Vacbs; | |
_EX_FAST_REF FileObjectFastRef; | |
_EX_PUSH_LOCK VacbLock; | |
unsigned int DirtyPages; | |
_LIST_ENTRY LoggedStreamLinks; | |
_LIST_ENTRY SharedCacheMapLinks; | |
unsigned int Flags; | |
int Status; | |
_MBCB *Mbcb; | |
void *Section; | |
_KEVENT *CreateEvent; | |
_KEVENT *WaitOnActiveCount; | |
unsigned int PagesToWrite; | |
__int64 BeyondLastFlush; | |
_CACHE_MANAGER_CALLBACKS *Callbacks; | |
void *LazyWriteContext; | |
_LIST_ENTRY PrivateList; | |
$CA195310EA259158CB42044E8D2AEB08 ___u26; | |
_LARGE_INTEGER LargestLSN; | |
unsigned int DirtyPageThreshold; | |
unsigned int LazyWritePassCount; | |
_CACHE_UNINITIALIZE_EVENT *UninitializeEvent; | |
_FAST_MUTEX BcbLock; | |
_LARGE_INTEGER LastUnmapBehindOffset; | |
_KEVENT Event; | |
_LARGE_INTEGER HighWaterMappingOffset; | |
_PRIVATE_CACHE_MAP PrivateCacheMap; | |
void *WriteBehindWorkQueueEntry; | |
_VOLUME_CACHE_MAP *VolumeCacheMap; | |
unsigned int ProcImagePathHash; | |
unsigned int WritesInProgress; | |
unsigned int AsyncReadRequestCount; | |
_CC_PARTITION *Partition; | |
unsigned int InternalRefCount; | |
unsigned int NumMappedVacb; | |
unsigned int NumActiveVacb; | |
}; | |
/* 1647 */ | |
struct _VACB | |
{ | |
void *BaseAddress; | |
_SHARED_CACHE_MAP *SharedCacheMap; | |
union | |
{ | |
_LARGE_INTEGER FileOffset; | |
unsigned __int16 ActiveCount; | |
_LIST_ENTRY Links; | |
} Overlay; | |
_VACB_ARRAY_HEADER *ArrayHead; | |
}; | |
/* 1648 */ | |
struct _BITMAP_RANGE | |
{ | |
_LIST_ENTRY Links; | |
__int64 BasePage; | |
unsigned int FirstDirtyPage; | |
unsigned int LastDirtyPage; | |
unsigned int DirtyPages; | |
unsigned int *Bitmap; | |
}; | |
/* 1649 */ | |
struct _MBCB | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeIsInZone; | |
unsigned int PagesToWrite; | |
unsigned int DirtyPages; | |
unsigned int Reserved; | |
_LIST_ENTRY BitmapRanges; | |
__int64 ResumeWritePage; | |
__int64 MostRecentlyDirtiedPage; | |
_BITMAP_RANGE BitmapRange1; | |
_BITMAP_RANGE BitmapRange2; | |
_BITMAP_RANGE BitmapRange3; | |
}; | |
/* 1650 */ | |
struct _CACHE_MANAGER_CALLBACKS | |
{ | |
unsigned __int8 (__fastcall *AcquireForLazyWrite)(void *, unsigned __int8); | |
void (__fastcall *ReleaseFromLazyWrite)(void *); | |
unsigned __int8 (__fastcall *AcquireForReadAhead)(void *, unsigned __int8); | |
void (__fastcall *ReleaseFromReadAhead)(void *); | |
}; | |
/* 1653 */ | |
struct _CACHE_UNINITIALIZE_EVENT | |
{ | |
_CACHE_UNINITIALIZE_EVENT *Next; | |
_KEVENT Event; | |
}; | |
/* 1657 */ | |
struct __declspec(align(8)) _SHARED_CACHE_MAP_LIST_CURSOR | |
{ | |
_LIST_ENTRY SharedCacheMapLinks; | |
unsigned int Flags; | |
}; | |
/* 1658 */ | |
struct __declspec(align(2)) _LAZY_WRITER | |
{ | |
_KDPC ScanDpc; | |
_KTIMER ScanTimer; | |
unsigned __int8 ScanActive; | |
unsigned __int8 OtherWork; | |
unsigned __int8 PendingTeardownScan; | |
unsigned __int8 PendingPeriodicScan; | |
unsigned __int8 PendingLowMemoryScan; | |
unsigned __int8 PendingPowerScan; | |
unsigned __int8 PendingCoalescingFlushScan; | |
}; | |
/* 1661 */ | |
struct _CC_PARTITION | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteSize; | |
_EPARTITION *PartitionObject; | |
_LIST_ENTRY CleanSharedCacheMapList; | |
_LIST_ENTRY CleanSharedCacheMapWithLogHandleList; | |
_SHARED_CACHE_MAP_LIST_CURSOR DirtySharedCacheMapList; | |
_SHARED_CACHE_MAP_LIST_CURSOR LazyWriteCursor; | |
_LIST_ENTRY DirtySharedCacheMapWithLogHandleList; | |
__declspec(align(32)) unsigned __int64 PrivateLock; | |
unsigned int ConsecutiveWorklessLazyScanCount; | |
unsigned __int8 ForcedDisableLazywriteScan; | |
__declspec(align(64)) unsigned __int64 WorkQueueLock; | |
unsigned int NumberWorkerThreads; | |
unsigned int NumberActiveWorkerThreads; | |
_LIST_ENTRY IdleWorkerThreadList; | |
_LIST_ENTRY FastTeardownWorkQueue; | |
_LIST_ENTRY ExpressWorkQueue; | |
_LIST_ENTRY RegularWorkQueue; | |
_LIST_ENTRY PostTickWorkQueue; | |
_LIST_ENTRY CleanCachemapUninitWorkQueue; | |
_LIST_ENTRY IdleExtraWriteBehindThreadList; | |
unsigned int ActiveExtraWriteBehindThreads; | |
unsigned int MaxExtraWriteBehindThreads; | |
_LIST_ENTRY IdleCacheMapUninitThreadList; | |
unsigned int ActiveCacheMapUninitThreads; | |
unsigned int MaxCacheMapUninitThreads; | |
unsigned __int8 QueueThrottle; | |
unsigned int PostTickWorkItemCount; | |
unsigned int ThreadsActiveBeforeThrottle; | |
unsigned int ExtraWBThreadsActiveBeforeThrottle; | |
unsigned int ExecutingWriteBehindWorkItems; | |
unsigned int ExecutingHighPriorityWorkItem; | |
_KEVENT LowMemoryEvent; | |
_KEVENT PowerEvent; | |
_KEVENT PeriodicEvent; | |
_KEVENT WaitingForTeardownEvent; | |
_KEVENT CoalescingFlushEvent; | |
unsigned int PagesYetToWrite; | |
__declspec(align(8)) _LAZY_WRITER LazyWriter; | |
_DIRTY_PAGE_STATISTICS DirtyPageStatistics; | |
_DIRTY_PAGE_THRESHOLDS DirtyPageThresholds; | |
_WRITE_BEHIND_THROUGHPUT *ThroughputStats; | |
int ThroughputTrend; | |
unsigned __int64 AverageAvailablePages; | |
unsigned __int64 AverageDirtyPages; | |
unsigned __int64 PagesSkippedDueToHotSpot; | |
_LARGE_INTEGER PrevRegularQueueItemRunTime; | |
_LARGE_INTEGER PrevExtraWBThreadCheckTime; | |
unsigned __int8 AddExtraWriteBehindThreads; | |
unsigned __int8 RemoveExtraThreadPending; | |
_LIST_ENTRY DeferredWrites; | |
__declspec(align(64)) unsigned __int64 DeferredWriteSpinLock; | |
_LIST_ENTRY *IdleAsyncReadWorkerThreadList; | |
unsigned int *NumberActiveAsyncReadWorkerThreads; | |
unsigned int *NumberActiveCompleteAsyncReadWorkItems; | |
_LIST_ENTRY *AsyncReadWorkQueue; | |
_LIST_ENTRY *AsyncReadCompletionWorkQueue; | |
_KEVENT *NewAsyncReadRequestEvent; | |
_ASYNC_READ_THREAD_STATS *ReaderThreadsStats; | |
_EX_PUSH_LOCK AsyncReadWorkQueueLock; | |
_LIST_ENTRY VacbFreeHighPriorityList; | |
unsigned int NumberOfFreeHighPriorityVacbs; | |
_ETHREAD *LowPriWorkerThread; | |
_SHARED_CACHE_MAP *LowPriSharedCacheMap; | |
int LowPriOldCpuPriority; | |
_IO_PRIORITY_HINT LowPriOldIoPriority; | |
_EX_PUSH_LOCK LowPriorityWorkerThreadLock; | |
unsigned int MaxNumberOfWriteBehindThreads; | |
unsigned __int8 CoalescingState; | |
unsigned __int8 ActivePartition; | |
unsigned __int8 RundownPhase; | |
__int64 RefCount; | |
_KEVENT ExitEvent; | |
_KEVENT FinalDereferenceEvent; | |
void *LazyWriteScanThreadHandle; | |
}; | |
/* 1646 */ | |
struct _VACB_ARRAY_HEADER | |
{ | |
unsigned int VacbArrayIndex; | |
unsigned int MappingCount; | |
unsigned int HighestMappedIndex; | |
unsigned int Reserved; | |
}; | |
/* 1659 */ | |
struct _WRITE_BEHIND_THROUGHPUT | |
{ | |
unsigned int PagesYetToWrite; | |
unsigned int Throughput; | |
}; | |
/* 1660 */ | |
struct _ASYNC_READ_THREAD_STATS | |
{ | |
unsigned int CurrentLoad[101]; | |
}; | |
/* 1663 */ | |
struct _CC_ASYNC_READ_CONTEXT | |
{ | |
unsigned __int8 (__fastcall *CompletionRoutine)(void *); | |
void *Context; | |
_MDL *Mdl; | |
char RequestorMode; | |
unsigned int NestingLevel; | |
}; | |
/* 1664 */ | |
struct _WORK_QUEUE_ENTRY | |
{ | |
_LIST_ENTRY WorkQueueLinks; | |
union | |
{ | |
struct | |
{ | |
_FILE_OBJECT *FileObject; | |
void *DiskIoAttribution; | |
} Read; | |
struct | |
{ | |
_SHARED_CACHE_MAP *SharedCacheMap; | |
} Write; | |
struct | |
{ | |
_KEVENT *Event; | |
} Event; | |
struct | |
{ | |
unsigned int Reason; | |
} Notification; | |
struct __declspec(align(8)) | |
{ | |
_SHARED_CACHE_MAP *SharedCacheMap; | |
_IO_STATUS_BLOCK *IoStatus; | |
_KEVENT CallerWaitEvent; | |
unsigned __int8 IsLowPriWriteBehind; | |
} LowPriWrite; | |
struct | |
{ | |
_SHARED_CACHE_MAP *SharedCacheMap; | |
_LARGE_INTEGER FileOffset; | |
_FILE_OBJECT *FileObject; | |
unsigned int Length; | |
_SINGLE_LIST_ENTRY *PrefetchList; | |
unsigned int PrefetchPagePriority; | |
_MDL *Mdl; | |
_IO_STATUS_BLOCK *IoStatusBlock; | |
_CC_ASYNC_READ_CONTEXT *CallbackContext; | |
_EPROCESS *OriginatingProcess; | |
_ETHREAD *IoIssuerThread; | |
void *DiskIoAttribution; | |
char RequestorMode; | |
unsigned int NestingLevel; | |
} AsyncRead; | |
} Parameters; | |
unsigned __int8 Function; | |
_CC_PARTITION *Partition; | |
}; | |
/* 1665 */ | |
struct _DEFERRED_WRITE | |
{ | |
__int16 NodeTypeCode; | |
__int16 NodeByteSize; | |
_FILE_OBJECT *FileObject; | |
unsigned int BytesToWrite; | |
_LIST_ENTRY DeferredWriteLinks; | |
_KEVENT *Event; | |
void (__fastcall *PostRoutine)(void *, void *); | |
void *Context1; | |
void *Context2; | |
_CC_PARTITION *Partition; | |
unsigned __int8 SoftThrottle; | |
_LARGE_INTEGER TimeAdded; | |
}; | |
/* 1666 */ | |
struct _CC_EXTERNAL_CACHE_INFO | |
{ | |
void (__fastcall *Callback)(void *, unsigned __int64, unsigned int); | |
_DIRTY_PAGE_STATISTICS DirtyPageStatistics; | |
_LIST_ENTRY Links; | |
}; | |
/* 1667 */ | |
struct __declspec(align(8)) VACB_LEVEL_ALLOCATION_LIST | |
{ | |
_LIST_ENTRY VacbLevelList; | |
void *VacbLevelWithBcbListHeads; | |
unsigned int VacbLevelsAllocated; | |
}; | |
/* 1668 */ | |
struct _VACB_LEVEL_REFERENCE | |
{ | |
int Reference; | |
int SpecialReference; | |
}; | |
/* 1669 */ | |
struct _HEAP_SUBALLOCATOR_CALLBACKS | |
{ | |
unsigned __int64 Allocate; | |
unsigned __int64 Free; | |
unsigned __int64 Commit; | |
unsigned __int64 Decommit; | |
unsigned __int64 ExtendContext; | |
}; | |
/* 1670 */ | |
struct _SEGMENT_HEAP_EXTRA | |
{ | |
unsigned __int16 AllocationTag; | |
unsigned __int8 InterceptorIndex : 4; | |
unsigned __int8 UserFlags : 4; | |
unsigned __int8 ExtraSizeInUnits; | |
void *Settable; | |
}; | |
/* 1671 */ | |
struct _RTL_CSPARSE_BITMAP | |
{ | |
unsigned __int64 *CommitBitmap; | |
unsigned __int64 *UserBitmap; | |
unsigned __int64 BitCount; | |
unsigned __int64 BitmapLock; | |
unsigned __int64 DecommitPageIndex; | |
unsigned __int64 RtlpCSparseBitmapWakeLock; | |
unsigned __int8 LockType; | |
unsigned __int8 AddressSpace; | |
unsigned __int8 MemType; | |
unsigned __int8 AllocAlignment; | |
unsigned int CommitDirectoryMaxSize; | |
unsigned __int64 CommitDirectory[1]; | |
}; | |
/* 1672 */ | |
struct _RTL_SPARSE_ARRAY | |
{ | |
unsigned __int64 ElementCount; | |
unsigned int ElementSizeShift; | |
_RTL_CSPARSE_BITMAP Bitmap; | |
}; | |
/* 1673 */ | |
union $139B11FB593B66D9D5DBFA06D8006E7A | |
{ | |
_RTL_SPARSE_ARRAY VaRangeArray; | |
unsigned __int8 VaRangeArrayBuffer[2128]; | |
}; | |
/* 1674 */ | |
struct _HEAP_VAMGR_VASPACE | |
{ | |
_RTLP_HP_ADDRESS_SPACE_TYPE AddressSpaceType; | |
unsigned __int64 BaseAddress; | |
$139B11FB593B66D9D5DBFA06D8006E7A ___u2; | |
}; | |
/* 1675 */ | |
struct _HEAP_VAMGR_ALLOCATOR | |
{ | |
unsigned __int64 TreeLock; | |
_RTL_RB_TREE FreeRanges; | |
_HEAP_VAMGR_VASPACE *VaSpace; | |
void *PartitionHandle; | |
unsigned __int16 ChunksPerRegion; | |
unsigned __int16 RefCount; | |
unsigned __int8 AllocatorIndex; | |
unsigned __int8 NumaNode; | |
unsigned __int8 LockType : 1; | |
unsigned __int8 MemoryType : 2; | |
unsigned __int8 ConstrainedVA : 1; | |
unsigned __int8 AllowFreeHead : 1; | |
unsigned __int8 Spare0 : 3; | |
unsigned __int8 Spare1; | |
}; | |
/* 1676 */ | |
struct $9E74B324C910B3B8C9D3F818069EF4A3 | |
{ | |
_SINGLE_LIST_ENTRY Next; | |
unsigned __int64 OwnerCtx[2]; | |
}; | |
/* 1677 */ | |
struct $CF02C9340489EAFAAFAC5A8E5C818F63 | |
{ | |
unsigned __int8 Allocated : 1; | |
unsigned __int8 Internal : 1; | |
unsigned __int8 Standalone : 1; | |
unsigned __int8 Spare0 : 5; | |
unsigned __int8 AllocatorIndex; | |
}; | |
/* 1678 */ | |
union $01A142B525508DCE2000FE0A7C4516E7 | |
{ | |
_RTL_BALANCED_NODE RbNode; | |
$9E74B324C910B3B8C9D3F818069EF4A3 __s1; | |
$CF02C9340489EAFAAFAC5A8E5C818F63 __s2; | |
}; | |
/* 1679 */ | |
struct $D2CE516EE272FD42AF61263D5E806FB1 | |
{ | |
unsigned __int16 ChunkCount; | |
unsigned __int16 PrevChunkCount; | |
}; | |
/* 1680 */ | |
union $637AF6CDA1C1905E65E555517E601135 | |
{ | |
unsigned __int64 SizeInChunks; | |
$D2CE516EE272FD42AF61263D5E806FB1 __s1; | |
unsigned __int64 Signature; | |
}; | |
/* 1681 */ | |
struct _HEAP_VAMGR_RANGE | |
{ | |
$01A142B525508DCE2000FE0A7C4516E7 ___u0; | |
$637AF6CDA1C1905E65E555517E601135 ___u1; | |
}; | |
/* 1682 */ | |
union $6B60AF5718B88A9503375F16F0BED4CC | |
{ | |
_RTL_CSPARSE_BITMAP AllocTrackerBitmap; | |
unsigned __int8 AllocTrackerBitmapBuffer[72]; | |
}; | |
/* 1683 */ | |
struct _RTLP_HP_ALLOC_TRACKER | |
{ | |
unsigned __int64 BaseAddress; | |
$6B60AF5718B88A9503375F16F0BED4CC ___u1; | |
}; | |
/* 1684 */ | |
struct _FAKE_HEAP_ENTRY | |
{ | |
unsigned __int64 Size; | |
unsigned __int64 PreviousSize; | |
}; | |
/* 1685 */ | |
struct _HEAP_FAILURE_INFORMATION | |
{ | |
unsigned int Version; | |
unsigned int StructureSize; | |
_HEAP_FAILURE_TYPE FailureType; | |
void *HeapAddress; | |
void *Address; | |
void *Param1; | |
void *Param2; | |
void *Param3; | |
void *PreviousBlock; | |
void *NextBlock; | |
_FAKE_HEAP_ENTRY ExpectedDecodedEntry; | |
void *StackTrace[32]; | |
unsigned __int8 HeapMajorVersion; | |
unsigned __int8 HeapMinorVersion; | |
_EXCEPTION_RECORD ExceptionRecord; | |
__declspec(align(16)) _CONTEXT ContextRecord; | |
}; | |
/* 1686 */ | |
struct _RTL_HEAP_MEMORY_LIMIT_DATA | |
{ | |
unsigned __int64 CommitLimitBytes; | |
unsigned __int64 CommitLimitFailureCode; | |
unsigned __int64 MaxAllocationSizeBytes; | |
unsigned __int64 AllocationLimitFailureCode; | |
}; | |
/* 1687 */ | |
struct _RTLP_HP_HEAP_GLOBALS | |
{ | |
unsigned __int64 HeapKey; | |
unsigned __int64 LfhKey; | |
_HEAP_FAILURE_INFORMATION *FailureInfo; | |
_RTL_HEAP_MEMORY_LIMIT_DATA CommitLimitData; | |
}; | |
/* 1688 */ | |
struct _HEAP_VAMGR_CTX | |
{ | |
_HEAP_VAMGR_VASPACE VaSpace; | |
unsigned __int64 AllocatorLock; | |
unsigned int AllocatorCount; | |
_HEAP_VAMGR_ALLOCATOR Allocators[255]; | |
}; | |
/* 1689 */ | |
struct RTL_HP_ENV_HANDLE | |
{ | |
void *h[2]; | |
}; | |
/* 1690 */ | |
struct $8E288E94E66B1B910FE30A14EC5FDF27 | |
{ | |
unsigned __int64 State : 2; | |
}; | |
/* 1691 */ | |
union _RTL_RUN_ONCE | |
{ | |
void *Ptr; | |
unsigned __int64 Value; | |
$8E288E94E66B1B910FE30A14EC5FDF27 __s2; | |
}; | |
/* 1692 */ | |
struct _HEAP_OPPORTUNISTIC_LARGE_PAGE_STATS | |
{ | |
volatile unsigned __int64 SmallPagesInUseWithinLarge; | |
volatile unsigned __int64 OpportunisticLargePageCount; | |
}; | |
/* 1693 */ | |
struct __declspec(align(8)) _RTL_HP_SEG_ALLOC_POLICY | |
{ | |
unsigned __int64 MinLargePages; | |
unsigned __int64 MaxLargePages; | |
unsigned __int8 MinUtilization; | |
}; | |
/* 1694 */ | |
struct _HEAP_RUNTIME_MEMORY_STATS | |
{ | |
volatile unsigned __int64 TotalReservedPages; | |
volatile unsigned __int64 TotalCommittedPages; | |
unsigned __int64 FreeCommittedPages; | |
unsigned __int64 LfhFreeCommittedPages; | |
_HEAP_OPPORTUNISTIC_LARGE_PAGE_STATS LargePageStats[2]; | |
_RTL_HP_SEG_ALLOC_POLICY LargePageUtilizationPolicy; | |
}; | |
/* 1695 */ | |
struct $33876C956F3137A9916A7F28A2A81153 | |
{ | |
unsigned __int8 LargePagePolicy : 3; | |
unsigned __int8 FullDecommit : 1; | |
unsigned __int8 ReleaseEmptySegments : 1; | |
}; | |
/* 1696 */ | |
struct __declspec(align(64)) _HEAP_SEG_CONTEXT | |
{ | |
unsigned __int64 SegmentMask; | |
unsigned __int8 UnitShift; | |
unsigned __int8 PagesPerUnitShift; | |
unsigned __int8 FirstDescriptorIndex; | |
unsigned __int8 CachedCommitSoftShift; | |
unsigned __int8 CachedCommitHighShift; | |
union | |
{ | |
$33876C956F3137A9916A7F28A2A81153 __s0; | |
unsigned __int8 AllFlags; | |
} Flags; | |
unsigned int MaxAllocationSize; | |
__int16 OlpStatsOffset; | |
__int16 MemStatsOffset; | |
void *LfhContext; | |
void *VsContext; | |
RTL_HP_ENV_HANDLE EnvHandle; | |
void *Heap; | |
unsigned __int64 SegmentLock; | |
_LIST_ENTRY SegmentListHead; | |
unsigned __int64 SegmentCount; | |
_RTL_RB_TREE FreePageRanges; | |
unsigned __int64 FreeSegmentListLock; | |
_SINGLE_LIST_ENTRY FreeSegmentList[2]; | |
}; | |
/* 1697 */ | |
struct _HEAP_VS_DELAY_FREE_CONTEXT | |
{ | |
_SLIST_HEADER ListHead; | |
}; | |
/* 1698 */ | |
struct _RTL_HP_VS_CONFIG | |
{ | |
struct | |
{ | |
unsigned __int32 PageAlignLargeAllocs : 1; | |
unsigned __int32 FullDecommit : 1; | |
unsigned __int32 EnableDelayFree : 1; | |
} Flags; | |
}; | |
/* 1699 */ | |
struct _HEAP_VS_CONTEXT | |
{ | |
unsigned __int64 Lock; | |
_RTLP_HP_LOCK_TYPE LockType; | |
_RTL_RB_TREE FreeChunkTree; | |
_LIST_ENTRY SubsegmentList; | |
unsigned __int64 TotalCommittedUnits; | |
unsigned __int64 FreeCommittedUnits; | |
_HEAP_VS_DELAY_FREE_CONTEXT DelayFreeContext; | |
__declspec(align(64)) void *BackendCtx; | |
_HEAP_SUBALLOCATOR_CALLBACKS Callbacks; | |
_RTL_HP_VS_CONFIG Config; | |
unsigned int Flags; | |
}; | |
/* 1700 */ | |
struct _RTL_HP_LFH_CONFIG | |
{ | |
unsigned __int16 MaxBlockSize; | |
unsigned __int16 WitholdPageCrossingBlocks : 1; | |
unsigned __int16 DisableRandomization : 1; | |
}; | |
/* 1701 */ | |
struct _HEAP_LFH_SUBSEGMENT_STAT | |
{ | |
unsigned __int8 Index; | |
unsigned __int8 Count; | |
}; | |
/* 1702 */ | |
union _HEAP_LFH_SUBSEGMENT_STATS | |
{ | |
_HEAP_LFH_SUBSEGMENT_STAT Buckets[4]; | |
void *AllStats; | |
}; | |
/* 1703 */ | |
union $D283FD200F436B7746EF06B7621258B1 | |
{ | |
unsigned __int8 SlotCount; | |
unsigned __int8 SlotIndex; | |
}; | |
/* 1704 */ | |
struct _HEAP_LFH_SUBSEGMENT_OWNER | |
{ | |
unsigned __int8 IsBucket : 1; | |
unsigned __int8 Spare0 : 7; | |
unsigned __int8 BucketIndex; | |
$D283FD200F436B7746EF06B7621258B1 ___u3; | |
unsigned __int8 Spare1; | |
unsigned __int64 AvailableSubsegmentCount; | |
unsigned __int64 Lock; | |
_LIST_ENTRY AvailableSubsegmentList; | |
_LIST_ENTRY FullSubsegmentList; | |
}; | |
/* 1705 */ | |
struct $C7BAA91C6BAC0FE42BF4CC4987B8DD55 | |
{ | |
unsigned __int64 RefCount : 12; | |
}; | |
/* 1706 */ | |
union $AF700360F1E49D61529525350D3DAF33 | |
{ | |
void *Target; | |
unsigned __int64 Value; | |
$C7BAA91C6BAC0FE42BF4CC4987B8DD55 __s2; | |
}; | |
/* 1707 */ | |
struct _HEAP_LFH_FAST_REF | |
{ | |
$AF700360F1E49D61529525350D3DAF33 ___u0; | |
}; | |
/* 1708 */ | |
struct _HEAP_LFH_AFFINITY_SLOT | |
{ | |
_HEAP_LFH_SUBSEGMENT_OWNER State; | |
_HEAP_LFH_FAST_REF ActiveSubsegment; | |
}; | |
/* 1709 */ | |
struct _HEAP_LFH_BUCKET | |
{ | |
_HEAP_LFH_SUBSEGMENT_OWNER State; | |
unsigned __int64 TotalBlockCount; | |
unsigned __int64 TotalSubsegmentCount; | |
unsigned int ReciprocalBlockSize; | |
unsigned __int8 Shift; | |
unsigned __int8 ContentionCount; | |
unsigned __int64 AffinityMappingLock; | |
unsigned __int8 *ProcAffinityMapping; | |
_HEAP_LFH_AFFINITY_SLOT **AffinitySlots; | |
}; | |
/* 1710 */ | |
struct _HEAP_LFH_CONTEXT | |
{ | |
void *BackendCtx; | |
_HEAP_SUBALLOCATOR_CALLBACKS Callbacks; | |
const unsigned __int8 *AffinityModArray; | |
unsigned __int8 MaxAffinity; | |
unsigned __int8 LockType; | |
__int16 MemStatsOffset; | |
_RTL_HP_LFH_CONFIG Config; | |
_HEAP_LFH_SUBSEGMENT_STATS BucketStats; | |
unsigned __int64 SubsegmentCreationLock; | |
__declspec(align(64)) _HEAP_LFH_BUCKET *Buckets[129]; | |
}; | |
/* 1711 */ | |
struct $E5189DAA72EA6578606897BD71B7A0C0 | |
{ | |
unsigned __int64 ReservedMustBeZero1; | |
void *UserContext; | |
unsigned __int64 ReservedMustBeZero2; | |
void *Spare; | |
}; | |
/* 1712 */ | |
union $9C94452A41420D401561D02853A80A72 | |
{ | |
_RTL_HEAP_MEMORY_LIMIT_DATA CommitLimitData; | |
$E5189DAA72EA6578606897BD71B7A0C0 __s1; | |
}; | |
/* 1713 */ | |
struct _SEGMENT_HEAP | |
{ | |
RTL_HP_ENV_HANDLE EnvHandle; | |
unsigned int Signature; | |
unsigned int GlobalFlags; | |
unsigned int Interceptor; | |
unsigned __int16 ProcessHeapListIndex; | |
unsigned __int16 AllocatedFromMetadata : 1; | |
$9C94452A41420D401561D02853A80A72 ___u6; | |
unsigned __int64 LargeMetadataLock; | |
_RTL_RB_TREE LargeAllocMetadata; | |
volatile unsigned __int64 LargeReservedPages; | |
volatile unsigned __int64 LargeCommittedPages; | |
_RTL_RUN_ONCE StackTraceInitVar; | |
__declspec(align(32)) _HEAP_RUNTIME_MEMORY_STATS MemStats; | |
unsigned __int16 GlobalLockCount; | |
unsigned int GlobalLockOwner; | |
unsigned __int64 ContextExtendLock; | |
unsigned __int8 *AllocatedBase; | |
unsigned __int8 *UncommittedBase; | |
unsigned __int8 *ReservedLimit; | |
_HEAP_SEG_CONTEXT SegContexts[2]; | |
_HEAP_VS_CONTEXT VsContext; | |
_HEAP_LFH_CONTEXT LfhContext; | |
}; | |
/* 1714 */ | |
struct _RTLP_HP_METADATA_HEAP_CTX | |
{ | |
_SEGMENT_HEAP *Heap; | |
_RTL_RUN_ONCE InitOnce; | |
}; | |
/* 1715 */ | |
struct _RTL_HP_SUB_ALLOCATOR_CONFIGS | |
{ | |
_RTL_HP_LFH_CONFIG LfhConfigs; | |
_RTL_HP_VS_CONFIG VsConfigs; | |
}; | |
/* 1716 */ | |
struct _RTLP_HP_HEAP_MANAGER | |
{ | |
_RTLP_HP_HEAP_GLOBALS *Globals; | |
_RTLP_HP_ALLOC_TRACKER AllocTracker; | |
_HEAP_VAMGR_CTX VaMgr; | |
_RTLP_HP_METADATA_HEAP_CTX MetadataHeaps[3]; | |
_RTL_HP_SUB_ALLOCATOR_CONFIGS SubAllocConfigs; | |
}; | |
/* 1717 */ | |
struct _RTL_SRWLOCK | |
{ | |
$577AFED263692DC6722C5509FC158A97 ___u0; | |
}; | |
/* 1718 */ | |
struct _RTL_STACKDB_CONTEXT | |
{ | |
_RTL_HASH_TABLE StackSegmentTable; | |
_RTL_HASH_TABLE StackEntryTable; | |
_RTL_SRWLOCK StackEntryTableLock; | |
_RTL_SRWLOCK SegmentTableLock; | |
void *(__fastcall *Allocate)(unsigned __int64, void *); | |
void (__fastcall *Free)(void *, void *); | |
void *AllocatorContext; | |
}; | |
/* 1719 */ | |
struct $14BFD61B91AEA9B3DA01004FA84BA49D | |
{ | |
unsigned __int16 Invalid : 1; | |
unsigned __int16 AllocationInProgress : 1; | |
unsigned __int16 Spare0 : 14; | |
unsigned __int16 UsageData; | |
}; | |
/* 1720 */ | |
union _HEAP_LFH_ONDEMAND_POINTER | |
{ | |
$14BFD61B91AEA9B3DA01004FA84BA49D __s0; | |
void *AllBits; | |
}; | |
/* 1721 */ | |
struct $99ECDAF0AE5E531537C6BCF9484E9C61 | |
{ | |
unsigned __int16 BlockSize; | |
unsigned __int16 FirstBlockOffset; | |
}; | |
/* 1722 */ | |
union $501013E13B1103E236E35F3849EB998E | |
{ | |
$99ECDAF0AE5E531537C6BCF9484E9C61 __s0; | |
unsigned int EncodedData; | |
}; | |
/* 1723 */ | |
struct _HEAP_LFH_SUBSEGMENT_ENCODED_OFFSETS | |
{ | |
$501013E13B1103E236E35F3849EB998E ___u0; | |
}; | |
/* 1724 */ | |
struct $1669CDF5D3E40BA891F6CC2C98BD426A | |
{ | |
unsigned __int64 DelayFree : 1; | |
unsigned __int64 Count : 63; | |
}; | |
/* 1725 */ | |
union _HEAP_LFH_SUBSEGMENT_DELAY_FREE | |
{ | |
$1669CDF5D3E40BA891F6CC2C98BD426A __s0; | |
void *AllBits; | |
}; | |
/* 1726 */ | |
union $205752BC6FF529B76D1A299173372FFB | |
{ | |
_HEAP_LFH_SUBSEGMENT_OWNER *Owner; | |
_HEAP_LFH_SUBSEGMENT_DELAY_FREE DelayFree; | |
}; | |
/* 1727 */ | |
struct $9D16ED5BE0B4F3791B768C7824D4DD7A | |
{ | |
unsigned __int16 FreeCount; | |
unsigned __int16 BlockCount; | |
}; | |
/* 1728 */ | |
union $42909B1235746C1A3C23EEE7F8F83146 | |
{ | |
$9D16ED5BE0B4F3791B768C7824D4DD7A __s0; | |
volatile __int16 InterlockedShort; | |
volatile int InterlockedLong; | |
}; | |
/* 1729 */ | |
struct _HEAP_LFH_SUBSEGMENT | |
{ | |
_LIST_ENTRY ListEntry; | |
$205752BC6FF529B76D1A299173372FFB ___u1; | |
unsigned __int64 CommitLock; | |
$42909B1235746C1A3C23EEE7F8F83146 ___u3; | |
unsigned __int16 FreeHint; | |
unsigned __int8 Location; | |
unsigned __int8 WitheldBlockCount; | |
_HEAP_LFH_SUBSEGMENT_ENCODED_OFFSETS BlockOffsets; | |
unsigned __int8 CommitUnitShift; | |
unsigned __int8 CommitUnitCount; | |
unsigned __int16 CommitStateOffset; | |
unsigned __int64 BlockBitmap[1]; | |
}; | |
/* 1730 */ | |
struct $5AE0D95AF6E86ED4F94BB591CE303C37 | |
{ | |
unsigned __int16 UnusedBytes : 14; | |
unsigned __int16 ExtraPresent : 1; | |
unsigned __int16 OneByteUnused : 1; | |
}; | |
/* 1731 */ | |
union $672EBB8E3A758060723F82048E98BFC2 | |
{ | |
$5AE0D95AF6E86ED4F94BB591CE303C37 __s0; | |
unsigned __int8 Bytes[2]; | |
}; | |
/* 1732 */ | |
struct _HEAP_LFH_UNUSED_BYTES_INFO | |
{ | |
$672EBB8E3A758060723F82048E98BFC2 ___u0; | |
}; | |
/* 1733 */ | |
struct _RTLP_HP_QUEUE_LOCK_HANDLE | |
{ | |
unsigned __int64 Reserved1; | |
unsigned __int64 LockPtr; | |
unsigned __int64 HandleData; | |
}; | |
/* 1734 */ | |
struct $ABFFD62BDF225577D7022740E18A12B6 | |
{ | |
unsigned __int32 MemoryCost : 16; | |
unsigned __int32 UnsafeSize : 16; | |
unsigned __int32 UnsafePrevSize : 16; | |
unsigned __int32 Allocated : 8; | |
}; | |
/* 1735 */ | |
union _HEAP_VS_CHUNK_HEADER_SIZE | |
{ | |
$ABFFD62BDF225577D7022740E18A12B6 __s0; | |
unsigned __int16 KeyUShort; | |
unsigned int KeyULong; | |
unsigned __int64 HeaderBits; | |
}; | |
/* 1736 */ | |
struct $73F6626B528671F876887BEAAC485C97 | |
{ | |
unsigned __int32 EncodedSegmentPageOffset : 8; | |
unsigned __int32 UnusedBytes : 1; | |
unsigned __int32 SkipDuringWalk : 1; | |
unsigned __int32 Spare : 22; | |
}; | |
/* 1737 */ | |
union $F837A1028A973C711BCE6059A6E4EBA2 | |
{ | |
$73F6626B528671F876887BEAAC485C97 __s0; | |
unsigned int AllocatedChunkBits; | |
}; | |
/* 1738 */ | |
struct __declspec(align(8)) _HEAP_VS_CHUNK_HEADER | |
{ | |
_HEAP_VS_CHUNK_HEADER_SIZE Sizes; | |
$F837A1028A973C711BCE6059A6E4EBA2 ___u1; | |
}; | |
/* 1739 */ | |
struct $D04FCC7487A4A9DA40BA7ED0CAD0CD3F | |
{ | |
unsigned __int64 OverlapsHeader; | |
_RTL_BALANCED_NODE Node; | |
}; | |
/* 1740 */ | |
union $D58E0233CE3E6C9A65DD0BD9F92FB011 | |
{ | |
_HEAP_VS_CHUNK_HEADER Header; | |
$D04FCC7487A4A9DA40BA7ED0CAD0CD3F __s1; | |
}; | |
/* 1741 */ | |
struct _HEAP_VS_CHUNK_FREE_HEADER | |
{ | |
$D58E0233CE3E6C9A65DD0BD9F92FB011 ___u0; | |
}; | |
/* 1742 */ | |
struct __declspec(align(8)) _HEAP_VS_SUBSEGMENT | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned __int64 CommitBitmap; | |
unsigned __int64 CommitLock; | |
unsigned __int16 Size; | |
unsigned __int16 Signature : 15; | |
unsigned __int16 FullCommit : 1; | |
}; | |
/* 1743 */ | |
struct $005BB1F77B1CBD49DAF66888B6F6D0BF | |
{ | |
unsigned __int16 UnusedBytes : 13; | |
unsigned __int16 LfhSubsegment : 1; | |
unsigned __int16 ExtraPresent : 1; | |
unsigned __int16 OneByteUnused : 1; | |
}; | |
/* 1744 */ | |
union $B5F251C8ECA5D5677EDE33D9E30204C7 | |
{ | |
$005BB1F77B1CBD49DAF66888B6F6D0BF __s0; | |
unsigned __int8 Bytes[2]; | |
}; | |
/* 1745 */ | |
struct _HEAP_VS_UNUSED_BYTES_INFO | |
{ | |
$B5F251C8ECA5D5677EDE33D9E30204C7 ___u0; | |
}; | |
/* 1746 */ | |
struct $33098CF8CB20EC7D15C56394852F3E63 | |
{ | |
unsigned __int32 EncodedCommittedPageCount : 16; | |
unsigned __int32 LargePageCost : 8; | |
unsigned __int32 UnitCount : 8; | |
}; | |
/* 1747 */ | |
union $0917FF82680AF07FF6F980AE95C68F85 | |
{ | |
unsigned int Key; | |
$33098CF8CB20EC7D15C56394852F3E63 __s1; | |
}; | |
/* 1748 */ | |
struct _HEAP_DESCRIPTOR_KEY | |
{ | |
$0917FF82680AF07FF6F980AE95C68F85 ___u0; | |
}; | |
/* 1749 */ | |
struct __unaligned __declspec(align(2)) $9F42C86B823BDE74A8D87832C99461B6 | |
{ | |
unsigned int TreeSignature; | |
unsigned int UnusedBytes; | |
unsigned __int16 ExtraPresent : 1; | |
unsigned __int16 Spare0 : 15; | |
}; | |
/* 1750 */ | |
union $A34D210D1558A058032FBD60EC753764 | |
{ | |
_RTL_BALANCED_NODE TreeNode; | |
$9F42C86B823BDE74A8D87832C99461B6 __s1; | |
}; | |
/* 1751 */ | |
struct $E4E7481012A647B3751AFFEDCF7D651F | |
{ | |
unsigned __int8 Align[3]; | |
unsigned __int8 UnitOffset; | |
}; | |
/* 1752 */ | |
struct $017A41305D65932C46AB1CEAB6A6D55C | |
{ | |
_BYTE gap0[3]; | |
unsigned __int8 UnitSize; | |
}; | |
/* 1753 */ | |
union $AFC013B9AB493E0F79402EFF7EEBF3B5 | |
{ | |
_HEAP_DESCRIPTOR_KEY Key; | |
$E4E7481012A647B3751AFFEDCF7D651F __s1; | |
$017A41305D65932C46AB1CEAB6A6D55C __s2; | |
}; | |
/* 1754 */ | |
struct _HEAP_PAGE_RANGE_DESCRIPTOR | |
{ | |
$A34D210D1558A058032FBD60EC753764 ___u0; | |
volatile unsigned __int8 RangeFlags; | |
unsigned __int8 CommittedPageCount; | |
unsigned __int16 Spare; | |
$AFC013B9AB493E0F79402EFF7EEBF3B5 ___u4; | |
}; | |
/* 1755 */ | |
struct $81F3EF0645CADC9C120743C0E0198FB7 | |
{ | |
unsigned __int16 CommittedPageCount : 11; | |
unsigned __int16 Spare : 3; | |
unsigned __int16 LargePageOperationInProgress : 1; | |
unsigned __int16 LargePageCommit : 1; | |
}; | |
/* 1756 */ | |
union _HEAP_SEGMENT_MGR_COMMIT_STATE | |
{ | |
$81F3EF0645CADC9C120743C0E0198FB7 __s0; | |
volatile unsigned __int16 EntireUShortV; | |
unsigned __int16 EntireUShort; | |
}; | |
/* 1757 */ | |
struct __unaligned __declspec(align(1)) $6680B10EFAEDBCD3F3126F0EA7E37AB9 | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned __int64 Signature; | |
_HEAP_SEGMENT_MGR_COMMIT_STATE *SegmentCommitState; | |
unsigned __int8 UnusedWatermark; | |
}; | |
/* 1758 */ | |
union _HEAP_PAGE_SEGMENT | |
{ | |
$6680B10EFAEDBCD3F3126F0EA7E37AB9 __s0; | |
_HEAP_PAGE_RANGE_DESCRIPTOR DescArray[256]; | |
}; | |
/* 1759 */ | |
struct __declspec(align(32)) _RTL_LOOKASIDE | |
{ | |
_SLIST_HEADER ListHead; | |
unsigned __int16 Depth; | |
unsigned __int16 MaximumDepth; | |
unsigned int TotalAllocates; | |
unsigned int AllocateMisses; | |
unsigned int TotalFrees; | |
unsigned int FreeMisses; | |
unsigned int LastTotalAllocates; | |
unsigned int LastAllocateMisses; | |
unsigned int LastTotalFrees; | |
}; | |
/* 1760 */ | |
struct _RTL_DYNAMIC_LOOKASIDE | |
{ | |
unsigned __int64 EnabledBucketBitmap; | |
unsigned int BucketCount; | |
unsigned int ActiveBucketCount; | |
__declspec(align(64)) _RTL_LOOKASIDE Buckets[64]; | |
}; | |
/* 1761 */ | |
struct _HEAP_LIST_LOOKUP | |
{ | |
_HEAP_LIST_LOOKUP *ExtendedLookup; | |
unsigned int ArraySize; | |
unsigned int ExtraItem; | |
unsigned int ItemCount; | |
unsigned int OutOfRangeItems; | |
unsigned int BaseIndex; | |
_LIST_ENTRY *ListHead; | |
unsigned int *ListsInUseUlong; | |
_LIST_ENTRY **ListHints; | |
}; | |
/* 1762 */ | |
struct $C0BE8CF8EEC0746F3E432DC5811435AA | |
{ | |
unsigned __int16 Size; | |
unsigned __int8 Flags; | |
unsigned __int8 SmallTagIndex; | |
unsigned __int16 PreviousSize; | |
unsigned __int8 SegmentOffset; | |
unsigned __int8 UnusedBytes; | |
}; | |
/* 1763 */ | |
struct __unaligned __declspec(align(1)) $F58FFB32E3568F6A456F9C59428894F2 | |
{ | |
unsigned int SubSegmentCode; | |
_BYTE gap4[2]; | |
unsigned __int8 LFHFlags; | |
}; | |
/* 1764 */ | |
union $1834F10523F73FD3F27BCF825E115F02 | |
{ | |
$C0BE8CF8EEC0746F3E432DC5811435AA __s0; | |
$F58FFB32E3568F6A456F9C59428894F2 __s1; | |
unsigned __int64 CompactHeader; | |
}; | |
/* 1765 */ | |
struct _HEAP_UNPACKED_ENTRY | |
{ | |
void *PreviousBlockPrivateData; | |
$1834F10523F73FD3F27BCF825E115F02 ___u1; | |
}; | |
/* 1766 */ | |
struct $189410402A8C196D49CE26743A8A266F | |
{ | |
unsigned __int16 FunctionIndex; | |
unsigned __int16 ContextValue; | |
}; | |
/* 1767 */ | |
union $E584A75AA7154767FD493BA2C7FE65E1 | |
{ | |
$189410402A8C196D49CE26743A8A266F __s0; | |
unsigned int InterceptorValue; | |
}; | |
/* 1768 */ | |
struct _HEAP_EXTENDED_ENTRY | |
{ | |
void *Reserved; | |
$E584A75AA7154767FD493BA2C7FE65E1 ___u1; | |
unsigned __int16 UnusedBytesLength; | |
unsigned __int8 EntryOffset; | |
unsigned __int8 ExtendedBlockSignature; | |
}; | |
/* 1769 */ | |
struct $DC27582AECFCC0D570DBD37341C7E94D | |
{ | |
void *PreviousBlockPrivateData; | |
unsigned __int16 Size; | |
unsigned __int8 Flags; | |
unsigned __int8 SmallTagIndex; | |
unsigned __int16 PreviousSize; | |
unsigned __int8 SegmentOffset; | |
unsigned __int8 UnusedBytes; | |
}; | |
/* 1770 */ | |
struct $4F9D3E36EC8354BE47722F6F3D1A84C9 | |
{ | |
void *Reserved; | |
unsigned int SubSegmentCode; | |
unsigned __int16 UnusedBytesLength; | |
unsigned __int8 LFHFlags; | |
unsigned __int8 ExtendedBlockSignature; | |
}; | |
/* 1771 */ | |
struct $DC1F6F3298AF766ABCF39BC5A4A93084 | |
{ | |
void *ReservedForAlignment; | |
unsigned __int64 CompactHeader; | |
}; | |
/* 1772 */ | |
struct $E30640C72B44DA20B13C00185878B081 | |
{ | |
_BYTE gap0[8]; | |
unsigned __int16 FunctionIndex; | |
unsigned __int16 ContextValue; | |
unsigned __int16 Code2; | |
unsigned __int8 EntryOffset; | |
unsigned __int8 Code4; | |
}; | |
/* 1773 */ | |
struct $1D177A9F1FACDD222CBD9F335EDAF54F | |
{ | |
_BYTE gap0[8]; | |
unsigned int InterceptorValue; | |
unsigned int Code234; | |
}; | |
/* 1774 */ | |
struct __unaligned __declspec(align(1)) $D2653F2E0C27AF4A8203C1E62DB0290D | |
{ | |
_BYTE gap0[8]; | |
unsigned int Code1; | |
_BYTE gapC[2]; | |
unsigned __int8 Code3; | |
}; | |
/* 1775 */ | |
struct $AA97120B4DE04FF609FE72F9B7968ADE | |
{ | |
_BYTE gap0[8]; | |
unsigned __int64 AgregateCode; | |
}; | |
/* 1776 */ | |
union $2FBEC50DE521097B2AADAF5B65D488B5 | |
{ | |
_HEAP_UNPACKED_ENTRY UnpackedEntry; | |
$DC27582AECFCC0D570DBD37341C7E94D __s1; | |
_HEAP_EXTENDED_ENTRY ExtendedEntry; | |
$4F9D3E36EC8354BE47722F6F3D1A84C9 __s3; | |
$DC1F6F3298AF766ABCF39BC5A4A93084 __s4; | |
$E30640C72B44DA20B13C00185878B081 __s5; | |
$1D177A9F1FACDD222CBD9F335EDAF54F __s6; | |
$D2653F2E0C27AF4A8203C1E62DB0290D __s7; | |
$AA97120B4DE04FF609FE72F9B7968ADE __s8; | |
}; | |
/* 1777 */ | |
struct _HEAP_ENTRY | |
{ | |
$2FBEC50DE521097B2AADAF5B65D488B5 ___u0; | |
}; | |
/* 1779 */ | |
struct _HEAP_SEGMENT | |
{ | |
_HEAP_ENTRY Entry; | |
unsigned int SegmentSignature; | |
unsigned int SegmentFlags; | |
_LIST_ENTRY SegmentListEntry; | |
_HEAP *Heap; | |
void *BaseAddress; | |
unsigned int NumberOfPages; | |
_HEAP_ENTRY *FirstEntry; | |
_HEAP_ENTRY *LastValidEntry; | |
unsigned int NumberOfUnCommittedPages; | |
unsigned int NumberOfUnCommittedRanges; | |
unsigned __int16 SegmentAllocatorBackTraceIndex; | |
unsigned __int16 Reserved; | |
_LIST_ENTRY UCRSegmentList; | |
}; | |
/* 1785 */ | |
struct $15BB4468F8EC7639E40FF2F3E4ECE993 | |
{ | |
_HEAP_ENTRY Entry; | |
unsigned int SegmentSignature; | |
unsigned int SegmentFlags; | |
_LIST_ENTRY SegmentListEntry; | |
_HEAP *Heap; | |
void *BaseAddress; | |
unsigned int NumberOfPages; | |
_HEAP_ENTRY *FirstEntry; | |
_HEAP_ENTRY *LastValidEntry; | |
unsigned int NumberOfUnCommittedPages; | |
unsigned int NumberOfUnCommittedRanges; | |
unsigned __int16 SegmentAllocatorBackTraceIndex; | |
unsigned __int16 Reserved; | |
_LIST_ENTRY UCRSegmentList; | |
}; | |
/* 1786 */ | |
union $BD96BF83EE1CD782B13904B4B86D08FA | |
{ | |
_HEAP_SEGMENT Segment; | |
$15BB4468F8EC7639E40FF2F3E4ECE993 __s1; | |
}; | |
/* 1783 */ | |
struct _HEAP_COUNTERS | |
{ | |
unsigned __int64 TotalMemoryReserved; | |
unsigned __int64 TotalMemoryCommitted; | |
unsigned __int64 TotalMemoryLargeUCR; | |
unsigned __int64 TotalSizeInVirtualBlocks; | |
unsigned int TotalSegments; | |
unsigned int TotalUCRs; | |
unsigned int CommittOps; | |
unsigned int DeCommitOps; | |
unsigned int LockAcquires; | |
unsigned int LockCollisions; | |
unsigned int CommitRate; | |
unsigned int DecommittRate; | |
unsigned int CommitFailures; | |
unsigned int InBlockCommitFailures; | |
unsigned int PollIntervalCounter; | |
unsigned int DecommitsSinceLastCheck; | |
unsigned int HeapPollInterval; | |
unsigned int AllocAndFreeOps; | |
unsigned int AllocationIndicesActive; | |
unsigned int InBlockDeccommits; | |
unsigned __int64 InBlockDeccomitSize; | |
unsigned __int64 HighWatermarkSize; | |
unsigned __int64 LastPolledSize; | |
}; | |
/* 1784 */ | |
struct _HEAP_TUNING_PARAMETERS | |
{ | |
unsigned int CommittThresholdShift; | |
unsigned __int64 MaxPreCommittThreshold; | |
}; | |
/* 1778 */ | |
struct _HEAP | |
{ | |
$BD96BF83EE1CD782B13904B4B86D08FA ___u0; | |
unsigned int Flags; | |
unsigned int ForceFlags; | |
unsigned int CompatibilityFlags; | |
unsigned int EncodeFlagMask; | |
_HEAP_ENTRY Encoding; | |
unsigned int Interceptor; | |
unsigned int VirtualMemoryThreshold; | |
unsigned int Signature; | |
unsigned __int64 SegmentReserve; | |
unsigned __int64 SegmentCommit; | |
unsigned __int64 DeCommitFreeBlockThreshold; | |
unsigned __int64 DeCommitTotalFreeThreshold; | |
unsigned __int64 TotalFreeSize; | |
unsigned __int64 MaximumAllocationSize; | |
unsigned __int16 ProcessHeapsListIndex; | |
unsigned __int16 HeaderValidateLength; | |
void *HeaderValidateCopy; | |
unsigned __int16 NextAvailableTagIndex; | |
unsigned __int16 MaximumTagIndex; | |
_HEAP_TAG_ENTRY *TagEntries; | |
_LIST_ENTRY UCRList; | |
unsigned __int64 AlignRound; | |
unsigned __int64 AlignMask; | |
_LIST_ENTRY VirtualAllocdBlocks; | |
_LIST_ENTRY SegmentList; | |
unsigned __int16 AllocatorBackTraceIndex; | |
unsigned int NonDedicatedListLength; | |
void *BlocksIndex; | |
void *UCRIndex; | |
_HEAP_PSEUDO_TAG_ENTRY *PseudoTagEntries; | |
_LIST_ENTRY FreeLists; | |
_HEAP_LOCK *LockVariable; | |
int (__fastcall *CommitRoutine)(void *, void **, unsigned __int64 *); | |
_RTL_RUN_ONCE StackTraceInitVar; | |
_RTL_HEAP_MEMORY_LIMIT_DATA CommitLimitData; | |
void *FrontEndHeap; | |
unsigned __int16 FrontHeapLockCount; | |
unsigned __int8 FrontEndHeapType; | |
unsigned __int8 RequestedFrontEndHeapType; | |
wchar_t *FrontEndHeapUsageData; | |
unsigned __int16 FrontEndHeapMaximumIndex; | |
volatile unsigned __int8 FrontEndHeapStatusBitmap[129]; | |
_HEAP_COUNTERS Counters; | |
_HEAP_TUNING_PARAMETERS TuningParameters; | |
}; | |
/* 1780 */ | |
struct __declspec(align(8)) _HEAP_TAG_ENTRY | |
{ | |
unsigned int Allocs; | |
unsigned int Frees; | |
unsigned __int64 Size; | |
unsigned __int16 TagIndex; | |
unsigned __int16 CreatorBackTraceIndex; | |
__unaligned __declspec(align(1)) wchar_t TagName[24]; | |
}; | |
/* 1781 */ | |
struct _HEAP_PSEUDO_TAG_ENTRY | |
{ | |
unsigned int Allocs; | |
unsigned int Frees; | |
unsigned __int64 Size; | |
}; | |
/* 1782 */ | |
struct _HEAP_LOCK | |
{ | |
union | |
{ | |
_RTL_CRITICAL_SECTION CriticalSection; | |
_ERESOURCE Resource; | |
} Lock; | |
}; | |
/* 1787 */ | |
struct $26A5638A1693B25BBF4C11BCEB01F8A1 | |
{ | |
unsigned __int16 AllocatorBackTraceIndex; | |
unsigned __int16 TagIndex; | |
}; | |
/* 1788 */ | |
union $B1259BD9F86A59D07B8E1347A113476E | |
{ | |
$26A5638A1693B25BBF4C11BCEB01F8A1 __s0; | |
unsigned __int64 ZeroInit; | |
}; | |
/* 1789 */ | |
union $1E642C03C1BFD29D0589278A1E2E81B2 | |
{ | |
unsigned __int64 Settable; | |
unsigned __int64 ZeroInit1; | |
}; | |
/* 1790 */ | |
struct _HEAP_ENTRY_EXTRA | |
{ | |
$B1259BD9F86A59D07B8E1347A113476E ___u0; | |
$1E642C03C1BFD29D0589278A1E2E81B2 ___u1; | |
}; | |
/* 1791 */ | |
struct _HEAP_VIRTUAL_ALLOC_ENTRY | |
{ | |
_LIST_ENTRY Entry; | |
_HEAP_ENTRY_EXTRA ExtraStuff; | |
unsigned __int64 CommitSize; | |
unsigned __int64 ReserveSize; | |
_HEAP_ENTRY BusyBlock; | |
}; | |
/* 1792 */ | |
union $0A2C7430B3A09A6BFEE1DF42FEB741A8 | |
{ | |
_HEAP_ENTRY HeapEntry; | |
_HEAP_UNPACKED_ENTRY UnpackedEntry; | |
$DC27582AECFCC0D570DBD37341C7E94D __s2; | |
_HEAP_EXTENDED_ENTRY ExtendedEntry; | |
$4F9D3E36EC8354BE47722F6F3D1A84C9 __s4; | |
$DC1F6F3298AF766ABCF39BC5A4A93084 __s5; | |
$E30640C72B44DA20B13C00185878B081 __s6; | |
$1D177A9F1FACDD222CBD9F335EDAF54F __s7; | |
$D2653F2E0C27AF4A8203C1E62DB0290D __s8; | |
$AA97120B4DE04FF609FE72F9B7968ADE __s9; | |
}; | |
/* 1793 */ | |
struct _HEAP_FREE_ENTRY | |
{ | |
$0A2C7430B3A09A6BFEE1DF42FEB741A8 ___u0; | |
_LIST_ENTRY FreeList; | |
}; | |
/* 1794 */ | |
struct _RTLP_HP_PADDING_HEADER | |
{ | |
unsigned __int64 PaddingSize; | |
unsigned __int64 Spare; | |
}; | |
/* 1795 */ | |
struct $EC4079333DBBD0FBE055A85948E48C1E | |
{ | |
unsigned __int64 VirtualAddress; | |
unsigned __int64 ExtraPresent : 1; | |
unsigned __int64 GuardPageCount : 1; | |
unsigned __int64 GuardPageAlignment : 6; | |
unsigned __int64 Spare : 4; | |
unsigned __int64 AllocatedPages : 52; | |
}; | |
/* 1796 */ | |
struct $0A905A40753AD49327997F958CAD6577 | |
{ | |
unsigned __int64 UnusedBytes : 16; | |
}; | |
/* 1797 */ | |
union $04BB054D00AB056FE945C74D2AFEFE05 | |
{ | |
$EC4079333DBBD0FBE055A85948E48C1E __s0; | |
$0A905A40753AD49327997F958CAD6577 __s1; | |
}; | |
/* 1798 */ | |
struct _HEAP_LARGE_ALLOC_DATA | |
{ | |
_RTL_BALANCED_NODE TreeNode; | |
$04BB054D00AB056FE945C74D2AFEFE05 ___u1; | |
}; | |
/* 1799 */ | |
union $E8EA7E20582B397C41ECB5B1322396A4 | |
{ | |
_CLIENT_ID ClientId; | |
long double DoNotUseThisField; | |
}; | |
/* 1800 */ | |
union $3FAD5E4597DD3BBA11FE6BC512AA73EF | |
{ | |
unsigned __int64 ClientViewSize; | |
unsigned int CallbackId; | |
}; | |
/* 1801 */ | |
struct _PORT_MESSAGE | |
{ | |
union | |
{ | |
struct | |
{ | |
__int16 DataLength; | |
__int16 TotalLength; | |
} s1; | |
unsigned int Length; | |
} u1; | |
union | |
{ | |
struct | |
{ | |
__int16 Type; | |
__int16 DataInfoOffset; | |
} s2; | |
unsigned int ZeroInit; | |
} u2; | |
$E8EA7E20582B397C41ECB5B1322396A4 ___u2; | |
unsigned int MessageId; | |
$3FAD5E4597DD3BBA11FE6BC512AA73EF ___u4; | |
}; | |
/* 1802 */ | |
struct _ALPC_MESSAGE_ATTRIBUTES | |
{ | |
unsigned int AllocatedAttributes; | |
unsigned int ValidAttributes; | |
}; | |
/* 1803 */ | |
struct _ALPC_HANDLE_ENTRY | |
{ | |
void *Object; | |
}; | |
/* 1804 */ | |
struct _BLOB_COUNTERS | |
{ | |
unsigned int CreatedObjects; | |
unsigned int DeletedObjects; | |
}; | |
/* 1805 */ | |
struct _BLOB_TYPE | |
{ | |
_BLOB_ID ResourceId; | |
unsigned int PoolTag; | |
unsigned int LookasideIndex; | |
unsigned int Flags; | |
_BLOB_COUNTERS *Counters; | |
void (__fastcall *CleanupProcedure)(void *); | |
void (__fastcall *DeleteProcedure)(void *); | |
int (__fastcall *DestroyProcedure)(void *); | |
unsigned __int64 UsualSize; | |
}; | |
/* 1806 */ | |
union $9465222049AA8E75AB20FD3E4546A7F7 | |
{ | |
_LIST_ENTRY ResourceList; | |
_SLIST_ENTRY FreeListEntry; | |
}; | |
/* 1807 */ | |
struct __declspec(align(16)) _BLOB | |
{ | |
$9465222049AA8E75AB20FD3E4546A7F7 ___u0; | |
union | |
{ | |
struct | |
{ | |
unsigned __int8 ReferenceCache : 1; | |
unsigned __int8 Lookaside : 1; | |
unsigned __int8 Initializing : 1; | |
unsigned __int8 Deleted : 1; | |
} s1; | |
unsigned __int8 Flags; | |
} u1; | |
unsigned __int8 ResourceId; | |
__int16 CachedReferences; | |
__int64 ReferenceCount; | |
_EX_PUSH_LOCK Lock; | |
}; | |
/* 1808 */ | |
struct _ALPC_HANDLE_TABLE | |
{ | |
_ALPC_HANDLE_ENTRY *Handles; | |
unsigned int TotalHandles; | |
unsigned int Flags; | |
_EX_PUSH_LOCK Lock; | |
}; | |
/* 1832 */ | |
union $00AD34BA6BC18340497AED538E850488 | |
{ | |
_KSEMAPHORE *Semaphore; | |
_KEVENT *DummyEvent; | |
}; | |
/* 1827 */ | |
struct _ALPC_PORT_ATTRIBUTES | |
{ | |
unsigned int Flags; | |
_SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
unsigned __int64 MaxMessageLength; | |
unsigned __int64 MemoryBandwidth; | |
unsigned __int64 MaxPoolUsage; | |
unsigned __int64 MaxSectionSize; | |
unsigned __int64 MaxViewSize; | |
unsigned __int64 MaxTotalSectionSize; | |
unsigned int DupObjectTypes; | |
unsigned int Reserved; | |
}; | |
/* 1809 */ | |
struct _ALPC_PORT | |
{ | |
_LIST_ENTRY PortListEntry; | |
_ALPC_COMMUNICATION_INFO *CommunicationInfo; | |
_EPROCESS *OwnerProcess; | |
void *CompletionPort; | |
void *CompletionKey; | |
_ALPC_COMPLETION_PACKET_LOOKASIDE *CompletionPacketLookaside; | |
void *PortContext; | |
_SECURITY_CLIENT_CONTEXT StaticSecurity; | |
_EX_PUSH_LOCK IncomingQueueLock; | |
_LIST_ENTRY MainQueue; | |
_LIST_ENTRY LargeMessageQueue; | |
_EX_PUSH_LOCK PendingQueueLock; | |
_LIST_ENTRY PendingQueue; | |
_EX_PUSH_LOCK DirectQueueLock; | |
_LIST_ENTRY DirectQueue; | |
_EX_PUSH_LOCK WaitQueueLock; | |
_LIST_ENTRY WaitQueue; | |
$00AD34BA6BC18340497AED538E850488 ___u17; | |
_ALPC_PORT_ATTRIBUTES PortAttributes; | |
_EX_PUSH_LOCK ResourceListLock; | |
_LIST_ENTRY ResourceListHead; | |
_EX_PUSH_LOCK PortObjectLock; | |
_ALPC_COMPLETION_LIST *CompletionList; | |
struct _CALLBACK_OBJECT *CallbackObject; | |
void *CallbackContext; | |
_LIST_ENTRY CanceledQueue; | |
int SequenceNo; | |
int ReferenceNo; | |
_PALPC_PORT_REFERENCE_WAIT_BLOCK *ReferenceNoWait; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 Initialized : 1; | |
unsigned __int32 Type : 2; | |
unsigned __int32 ConnectionPending : 1; | |
unsigned __int32 ConnectionRefused : 1; | |
unsigned __int32 Disconnected : 1; | |
unsigned __int32 Closed : 1; | |
unsigned __int32 NoFlushOnClose : 1; | |
unsigned __int32 ReturnExtendedInfo : 1; | |
unsigned __int32 Waitable : 1; | |
unsigned __int32 DynamicSecurity : 1; | |
unsigned __int32 Wow64CompletionList : 1; | |
unsigned __int32 Lpc : 1; | |
unsigned __int32 LpcToLpc : 1; | |
unsigned __int32 HasCompletionList : 1; | |
unsigned __int32 HadCompletionList : 1; | |
unsigned __int32 EnableCompletionList : 1; | |
} s1; | |
unsigned int State; | |
} u1; | |
_ALPC_PORT *TargetQueuePort; | |
_ALPC_PORT *TargetSequencePort; | |
_KALPC_MESSAGE *CachedMessage; | |
unsigned int MainQueueLength; | |
unsigned int LargeMessageQueueLength; | |
unsigned int PendingQueueLength; | |
unsigned int DirectQueueLength; | |
unsigned int CanceledQueueLength; | |
unsigned int WaitQueueLength; | |
}; | |
/* 1823 */ | |
struct _ALPC_COMMUNICATION_INFO | |
{ | |
_ALPC_PORT *ConnectionPort; | |
_ALPC_PORT *ServerCommunicationPort; | |
_ALPC_PORT *ClientCommunicationPort; | |
_LIST_ENTRY CommunicationList; | |
_ALPC_HANDLE_TABLE HandleTable; | |
_KALPC_MESSAGE *CloseMessage; | |
}; | |
/* 1826 */ | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY | |
{ | |
_SINGLE_LIST_ENTRY ListEntry; | |
_IO_MINI_COMPLETION_PACKET_USER *Packet; | |
_ALPC_COMPLETION_PACKET_LOOKASIDE *Lookaside; | |
}; | |
/* 1825 */ | |
struct _ALPC_COMPLETION_PACKET_LOOKASIDE | |
{ | |
unsigned __int64 Lock; | |
unsigned int Size; | |
unsigned int ActiveCount; | |
unsigned int PendingNullCount; | |
unsigned int PendingCheckCompletionListCount; | |
unsigned int PendingDelete; | |
_SINGLE_LIST_ENTRY FreeListHead; | |
void *CompletionPort; | |
void *CompletionKey; | |
_ALPC_COMPLETION_PACKET_LOOKASIDE_ENTRY Entry[1]; | |
}; | |
/* 1830 */ | |
struct __declspec(align(8)) _ALPC_COMPLETION_LIST | |
{ | |
_LIST_ENTRY Entry; | |
_EPROCESS *OwnerProcess; | |
_EX_PUSH_LOCK CompletionListLock; | |
_MDL *Mdl; | |
void *UserVa; | |
void *UserLimit; | |
void *DataUserVa; | |
void *SystemVa; | |
unsigned __int64 TotalSize; | |
_ALPC_COMPLETION_LIST_HEADER *Header; | |
void *List; | |
unsigned __int64 ListSize; | |
void *Bitmap; | |
unsigned __int64 BitmapSize; | |
void *Data; | |
unsigned __int64 DataSize; | |
unsigned int BitmapLimit; | |
unsigned int BitmapNextHint; | |
unsigned int ConcurrencyCount; | |
unsigned int AttributeFlags; | |
unsigned int AttributeSize; | |
}; | |
/* 1831 */ | |
struct __declspec(align(8)) _PALPC_PORT_REFERENCE_WAIT_BLOCK | |
{ | |
_KEVENT DesiredReferenceNoEvent; | |
int DesiredReferenceNo; | |
}; | |
/* 1824 */ | |
union $91255C967D2938EE01469A1265EB47D6 | |
{ | |
_EPROCESS *QuotaProcess; | |
void *QuotaBlock; | |
}; | |
/* 1818 */ | |
struct $D3BBFA0EDDA96B87BB5170A4F288520F | |
{ | |
unsigned __int64 DirectType : 1; | |
unsigned __int64 EventReferenced : 1; | |
unsigned __int64 EventObjectBits : 62; | |
}; | |
/* 1819 */ | |
union _KALPC_DIRECT_EVENT | |
{ | |
unsigned __int64 Value; | |
$D3BBFA0EDDA96B87BB5170A4F288520F __s1; | |
}; | |
/* 1820 */ | |
struct _ALPC_WORK_ON_BEHALF_TICKET | |
{ | |
unsigned int ThreadId; | |
unsigned int ThreadCreationTimeLow; | |
}; | |
/* 1821 */ | |
struct _KALPC_WORK_ON_BEHALF_DATA | |
{ | |
_ALPC_WORK_ON_BEHALF_TICKET Ticket; | |
}; | |
/* 1822 */ | |
struct _KALPC_MESSAGE_ATTRIBUTES | |
{ | |
void *ClientContext; | |
void *ServerContext; | |
void *PortContext; | |
void *CancelPortContext; | |
_KALPC_SECURITY_DATA *SecurityData; | |
_KALPC_VIEW *View; | |
_KALPC_HANDLE_DATA *HandleData; | |
_KALPC_DIRECT_EVENT DirectEvent; | |
_KALPC_WORK_ON_BEHALF_DATA WorkOnBehalfData; | |
}; | |
/* 1810 */ | |
struct _KALPC_MESSAGE | |
{ | |
_LIST_ENTRY Entry; | |
_ALPC_PORT *PortQueue; | |
_ALPC_PORT *OwnerPort; | |
_ETHREAD *WaitingThread; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 QueueType : 3; | |
unsigned __int32 QueuePortType : 4; | |
unsigned __int32 Canceled : 1; | |
unsigned __int32 Ready : 1; | |
unsigned __int32 ReleaseMessage : 1; | |
unsigned __int32 SharedQuota : 1; | |
unsigned __int32 ReplyWaitReply : 1; | |
unsigned __int32 OwnerPortReference : 1; | |
unsigned __int32 ReceiverReference : 1; | |
unsigned __int32 ViewAttributeRetrieved : 1; | |
unsigned __int32 InDispatch : 1; | |
} s1; | |
unsigned int State; | |
} u1; | |
int SequenceNo; | |
$91255C967D2938EE01469A1265EB47D6 ___u6; | |
_ALPC_PORT *CancelSequencePort; | |
_ALPC_PORT *CancelQueuePort; | |
int CancelSequenceNo; | |
_LIST_ENTRY CancelListEntry; | |
_KALPC_RESERVE *Reserve; | |
_KALPC_MESSAGE_ATTRIBUTES MessageAttributes; | |
void *DataUserVa; | |
_ALPC_COMMUNICATION_INFO *CommunicationInfo; | |
_ALPC_PORT *ConnectionPort; | |
_ETHREAD *ServerThread; | |
void *WakeReference; | |
void *WakeReference2; | |
void *ExtensionBuffer; | |
unsigned __int64 ExtensionBufferSize; | |
_PORT_MESSAGE PortMessage; | |
}; | |
/* 1828 */ | |
volatile struct _ALPC_COMPLETION_LIST_STATE | |
{ | |
union | |
{ | |
struct | |
{ | |
unsigned __int64 Head : 24; | |
unsigned __int64 Tail : 24; | |
unsigned __int64 ActiveThreadCount : 16; | |
} s1; | |
__int64 Value; | |
} u1; | |
}; | |
/* 1829 */ | |
struct _ALPC_COMPLETION_LIST_HEADER | |
{ | |
unsigned __int64 StartMagic; | |
unsigned int TotalSize; | |
unsigned int ListOffset; | |
unsigned int ListSize; | |
unsigned int BitmapOffset; | |
unsigned int BitmapSize; | |
unsigned int DataOffset; | |
unsigned int DataSize; | |
unsigned int AttributeFlags; | |
unsigned int AttributeSize; | |
__declspec(align(32)) volatile _ALPC_COMPLETION_LIST_STATE State; | |
volatile unsigned int LastMessageId; | |
volatile unsigned int LastCallbackId; | |
__declspec(align(64)) volatile unsigned int PostCount; | |
__declspec(align(64)) volatile unsigned int ReturnCount; | |
__declspec(align(64)) volatile unsigned int LogSequenceNumber; | |
__declspec(align(64)) _RTL_SRWLOCK UserLock; | |
unsigned __int64 EndMagic; | |
}; | |
/* 1811 */ | |
struct __declspec(align(8)) _KALPC_RESERVE | |
{ | |
_ALPC_PORT *OwnerPort; | |
_ALPC_HANDLE_TABLE *HandleTable; | |
void *Handle; | |
_KALPC_MESSAGE *Message; | |
unsigned __int64 Size; | |
int Active; | |
}; | |
/* 1812 */ | |
struct __declspec(align(8)) _KALPC_SECURITY_DATA | |
{ | |
_ALPC_HANDLE_TABLE *HandleTable; | |
void *ContextHandle; | |
_EPROCESS *OwningProcess; | |
_ALPC_PORT *OwnerPort; | |
_SECURITY_CLIENT_CONTEXT DynamicSecurity; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 Revoked : 1; | |
unsigned __int32 Impersonated : 1; | |
} s1; | |
} u1; | |
}; | |
/* 1814 */ | |
struct _KALPC_VIEW | |
{ | |
_LIST_ENTRY ViewListEntry; | |
_KALPC_REGION *Region; | |
_ALPC_PORT *OwnerPort; | |
_EPROCESS *OwnerProcess; | |
void *Address; | |
unsigned __int64 Size; | |
void *SecureViewHandle; | |
void *WriteAccessHandle; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 WriteAccess : 1; | |
unsigned __int32 AutoRelease : 1; | |
unsigned __int32 ForceUnlink : 1; | |
unsigned __int32 SystemSpace : 1; | |
} s1; | |
} u1; | |
unsigned int NumberOfOwnerMessages; | |
_LIST_ENTRY ProcessViewListEntry; | |
}; | |
/* 1816 */ | |
struct _OB_DUPLICATE_OBJECT_STATE | |
{ | |
_EPROCESS *SourceProcess; | |
void *SourceHandle; | |
void *Object; | |
unsigned int TargetAccess; | |
_HANDLE_TABLE_ENTRY_INFO ObjectInfo; | |
unsigned int HandleAttributes; | |
}; | |
/* 1817 */ | |
struct _KALPC_HANDLE_DATA | |
{ | |
unsigned int ObjectType; | |
unsigned int Count; | |
_OB_DUPLICATE_OBJECT_STATE DuplicateContext; | |
}; | |
/* 1815 */ | |
struct _KALPC_REGION | |
{ | |
_LIST_ENTRY RegionListEntry; | |
_KALPC_SECTION *Section; | |
unsigned __int64 Offset; | |
unsigned __int64 Size; | |
unsigned __int64 ViewSize; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 Secure : 1; | |
} s1; | |
} u1; | |
unsigned int NumberOfViews; | |
_LIST_ENTRY ViewListHead; | |
_KALPC_VIEW *ReadOnlyView; | |
_KALPC_VIEW *ReadWriteView; | |
}; | |
/* 1813 */ | |
struct _KALPC_SECTION | |
{ | |
void *SectionObject; | |
unsigned __int64 Size; | |
_ALPC_HANDLE_TABLE *HandleTable; | |
void *SectionHandle; | |
_EPROCESS *OwnerProcess; | |
_ALPC_PORT *OwnerPort; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 Internal : 1; | |
unsigned __int32 Secure : 1; | |
} s1; | |
} u1; | |
unsigned int NumberOfRegions; | |
_LIST_ENTRY RegionListHead; | |
}; | |
/* 1833 */ | |
struct _OBJECT_ATTRIBUTES | |
{ | |
unsigned int Length; | |
void *RootDirectory; | |
_UNICODE_STRING *ObjectName; | |
unsigned int Attributes; | |
void *SecurityDescriptor; | |
void *SecurityQualityOfService; | |
}; | |
/* 1834 */ | |
union $80802124C299E344BDD7689BA1D0F8D6 | |
{ | |
_CLIENT_ID32 ClientId; | |
long double DoNotUseThisField; | |
}; | |
/* 1835 */ | |
union $DFDBDD63C2587FA282FAD6CEC707ED02 | |
{ | |
unsigned int ClientViewSize; | |
unsigned int CallbackId; | |
}; | |
/* 1836 */ | |
struct _PORT_MESSAGE32 | |
{ | |
union | |
{ | |
struct | |
{ | |
__int16 DataLength; | |
__int16 TotalLength; | |
} s1; | |
unsigned int Length; | |
} u1; | |
union | |
{ | |
struct | |
{ | |
__int16 Type; | |
__int16 DataInfoOffset; | |
} s2; | |
unsigned int ZeroInit; | |
} u2; | |
$80802124C299E344BDD7689BA1D0F8D6 ___u2; | |
unsigned int MessageId; | |
$DFDBDD63C2587FA282FAD6CEC707ED02 ___u4; | |
}; | |
/* 1837 */ | |
struct __declspec(align(8)) _ALPC_DISPATCH_CONTEXT | |
{ | |
_ALPC_PORT *PortObject; | |
_KALPC_MESSAGE *Message; | |
_ALPC_COMMUNICATION_INFO *CommunicationInfo; | |
_ETHREAD *TargetThread; | |
_ALPC_PORT *TargetPort; | |
_KALPC_DIRECT_EVENT DirectEvent; | |
unsigned int Flags; | |
unsigned __int16 TotalLength; | |
unsigned __int16 Type; | |
unsigned __int16 DataInfoOffset; | |
unsigned __int8 SignalCompletion; | |
unsigned __int8 PostedToCompletionList; | |
}; | |
/* 1838 */ | |
struct _REMOTE_PORT_VIEW | |
{ | |
unsigned int Length; | |
unsigned __int64 ViewSize; | |
void *ViewBase; | |
}; | |
/* 1839 */ | |
struct _IO_IRP_EXT_TRACK_OFFSET_HEADER | |
{ | |
unsigned __int16 Validation; | |
unsigned __int16 Flags; | |
void (__fastcall *TrackedOffsetCallback)(_IO_IRP_EXT_TRACK_OFFSET_HEADER *, _IO_IRP_EXT_TRACK_OFFSET_HEADER *, __int64); | |
}; | |
/* 1840 */ | |
struct _IO_ADAPTER_CRYPTO_KEY_DESCRIPTOR | |
{ | |
unsigned int Version; | |
unsigned int Size; | |
unsigned int CryptoIndex; | |
unsigned int AlgorithmId; | |
unsigned int DataUnitSize; | |
unsigned int KeySize; | |
unsigned __int8 KeyHash[32]; | |
void *KeyVirtualAddress; | |
_LARGE_INTEGER KeyPhysicalAddress; | |
}; | |
/* 1841 */ | |
struct _IO_ADAPTER_CRYPTO_PARAMETERS | |
{ | |
unsigned __int64 Tweak; | |
_IO_ADAPTER_CRYPTO_KEY_DESCRIPTOR *KeyDescriptor; | |
}; | |
/* 1842 */ | |
struct $097913BFFBA6D22F2665AF6E109E7714 | |
{ | |
unsigned __int64 UserFlags : 32; | |
unsigned __int64 SystemFlags : 16; | |
unsigned __int64 UserFlagsId : 16; | |
}; | |
/* 1843 */ | |
struct $5B4038C5EEBE24C34B7A412037402389 | |
{ | |
unsigned __int16 Allocated : 1; | |
unsigned __int16 PropagateId : 1; | |
unsigned __int16 SpareBits : 14; | |
}; | |
/* 1844 */ | |
union $0CC10D060A310DA90DC870C68DCF8DBA | |
{ | |
unsigned __int16 ExtensionFlags; | |
$5B4038C5EEBE24C34B7A412037402389 __s1; | |
}; | |
/* 1845 */ | |
struct $F8F1B6E8B1861C9D306CC4C5F7396F72 | |
{ | |
_LARGE_INTEGER Timestamp; | |
__int64 FsTrackedOffset; | |
}; | |
/* 1846 */ | |
union $DFC6241048DAC45B1B29344A8B1078D2 | |
{ | |
$F8F1B6E8B1861C9D306CC4C5F7396F72 __s0; | |
unsigned int ZeroingOffset; | |
_IO_IRP_EXT_TRACK_OFFSET_HEADER *FsTrackOffsetBlob; | |
_IO_ADAPTER_CRYPTO_PARAMETERS AdapterCryptoParameters; | |
}; | |
/* 1847 */ | |
struct _IOP_IRP_EXTENSION | |
{ | |
$0CC10D060A310DA90DC870C68DCF8DBA ___u0; | |
unsigned __int16 TypesAllocated; | |
unsigned __int8 GenericExtension[4]; | |
void *VerifierContext; | |
unsigned __int64 DiskIoAttributionHandle; | |
_GUID ActivityId; | |
$DFC6241048DAC45B1B29344A8B1078D2 ___u6; | |
union | |
{ | |
unsigned __int64 Value; | |
$097913BFFBA6D22F2665AF6E109E7714 __s1; | |
} DriverFlags; | |
}; | |
/* 1848 */ | |
union _FILE_SEGMENT_ELEMENT | |
{ | |
void *Buffer; | |
unsigned __int64 Alignment; | |
}; | |
/* 1849 */ | |
struct _RELATIVE_SYMLINK_INFO | |
{ | |
unsigned __int16 ExposedNamespaceLength; | |
unsigned __int16 Flags; | |
unsigned __int16 DeviceNameLength; | |
unsigned __int16 Reserved; | |
_RELATIVE_SYMLINK_INFO *InteriorMountPoint; | |
_UNICODE_STRING OpenedName; | |
}; | |
/* 1850 */ | |
struct __declspec(align(8)) _IOP_FILE_OBJECT_EXTENSION | |
{ | |
unsigned int FoExtFlags; | |
void *FoExtPerTypeExtension[9]; | |
_IOP_PRIORITY_HINT FoIoPriorityHint; | |
}; | |
/* 1851 */ | |
struct __declspec(align(8)) _OBJECT_CREATE_INFORMATION | |
{ | |
unsigned int Attributes; | |
void *RootDirectory; | |
char ProbeMode; | |
unsigned int PagedPoolCharge; | |
unsigned int NonPagedPoolCharge; | |
unsigned int SecurityDescriptorCharge; | |
void *SecurityDescriptor; | |
_SECURITY_QUALITY_OF_SERVICE *SecurityQos; | |
_SECURITY_QUALITY_OF_SERVICE SecurityQualityOfService; | |
}; | |
/* 1852 */ | |
union $1A17300742880B33121E89C3D953A22A | |
{ | |
__int64 HandleCount; | |
void *NextToFree; | |
}; | |
/* 1853 */ | |
struct $8AE9EB3BE2ECB76399DCF342697D4C4D | |
{ | |
unsigned __int8 DbgRefTrace : 1; | |
unsigned __int8 DbgTracePermanent : 1; | |
}; | |
/* 1854 */ | |
union $3C4678EE9CD27A2119C24A3E21B6651A | |
{ | |
unsigned __int8 TraceFlags; | |
$8AE9EB3BE2ECB76399DCF342697D4C4D __s1; | |
}; | |
/* 1855 */ | |
struct $5F79A16B150EF6C429E0F679E4EEC0A2 | |
{ | |
unsigned __int8 NewObject : 1; | |
unsigned __int8 KernelObject : 1; | |
unsigned __int8 KernelOnlyAccess : 1; | |
unsigned __int8 ExclusiveObject : 1; | |
unsigned __int8 PermanentObject : 1; | |
unsigned __int8 DefaultSecurityQuota : 1; | |
unsigned __int8 SingleHandleEntry : 1; | |
unsigned __int8 DeletedInline : 1; | |
}; | |
/* 1856 */ | |
union $9A2C64C21C911A9D96C3666D0ACC986A | |
{ | |
unsigned __int8 Flags; | |
$5F79A16B150EF6C429E0F679E4EEC0A2 __s1; | |
}; | |
/* 1857 */ | |
union $D2542A19DC665534EB86773913DBEAC3 | |
{ | |
_OBJECT_CREATE_INFORMATION *ObjectCreateInfo; | |
void *QuotaBlockCharged; | |
}; | |
/* 1858 */ | |
struct _OBJECT_HEADER | |
{ | |
__int64 PointerCount; | |
$1A17300742880B33121E89C3D953A22A ___u1; | |
_EX_PUSH_LOCK Lock; | |
unsigned __int8 TypeIndex; | |
$3C4678EE9CD27A2119C24A3E21B6651A ___u4; | |
unsigned __int8 InfoMask; | |
$9A2C64C21C911A9D96C3666D0ACC986A ___u6; | |
unsigned int Reserved; | |
$D2542A19DC665534EB86773913DBEAC3 ___u8; | |
void *SecurityDescriptor; | |
_QUAD Body; | |
}; | |
/* 1859 */ | |
struct _DUMMY_FILE_OBJECT | |
{ | |
_OBJECT_HEADER ObjectHeader; | |
char FileObjectBody[216]; | |
}; | |
/* 1860 */ | |
union $712FD7A0E3256AB8FA2B964F4779A51A | |
{ | |
_FILE_OBJECT *RelatedFileObject; | |
_DEVICE_OBJECT *ReferencedDeviceObject; | |
}; | |
/* 1861 */ | |
struct __declspec(align(8)) _OPEN_PACKET | |
{ | |
__int16 Type; | |
__int16 Size; | |
_FILE_OBJECT *FileObject; | |
int FinalStatus; | |
unsigned __int64 Information; | |
unsigned int ParseCheck; | |
$712FD7A0E3256AB8FA2B964F4779A51A ___u6; | |
_OBJECT_ATTRIBUTES *OriginalAttributes; | |
_LARGE_INTEGER AllocationSize; | |
unsigned int CreateOptions; | |
unsigned __int16 FileAttributes; | |
unsigned __int16 ShareAccess; | |
void *EaBuffer; | |
unsigned int EaLength; | |
unsigned int Options; | |
unsigned int Disposition; | |
_FILE_BASIC_INFORMATION *BasicInformation; | |
_FILE_NETWORK_OPEN_INFORMATION *NetworkInformation; | |
void *FileInformation; | |
_CREATE_FILE_TYPE CreateFileType; | |
void *MailslotOrPipeParameters; | |
unsigned __int8 Override; | |
unsigned __int8 QueryOnly; | |
unsigned __int8 DeleteOnly; | |
unsigned __int8 FullAttributes; | |
_DUMMY_FILE_OBJECT *LocalFileObject; | |
unsigned int InternalFlags; | |
char AccessMode; | |
_IO_DRIVER_CREATE_CONTEXT DriverCreateContext; | |
_FILE_INFORMATION_CLASS FileInformationClass; | |
unsigned int FileInformationLength; | |
unsigned __int8 FilterQuery; | |
}; | |
/* 1862 */ | |
struct _ETW_SYSTEMTIME | |
{ | |
unsigned __int16 Year; | |
unsigned __int16 Month; | |
unsigned __int16 DayOfWeek; | |
unsigned __int16 Day; | |
unsigned __int16 Hour; | |
unsigned __int16 Minute; | |
unsigned __int16 Second; | |
unsigned __int16 Milliseconds; | |
}; | |
/* 1863 */ | |
struct _TIME_FIELDS | |
{ | |
__int16 Year; | |
__int16 Month; | |
__int16 Day; | |
__int16 Hour; | |
__int16 Minute; | |
__int16 Second; | |
__int16 Milliseconds; | |
__int16 Weekday; | |
}; | |
/* 1864 */ | |
struct __unaligned __declspec(align(4)) _RTL_TIME_ZONE_INFORMATION | |
{ | |
int Bias; | |
wchar_t StandardName[32]; | |
_TIME_FIELDS StandardStart; | |
int StandardBias; | |
wchar_t DaylightName[32]; | |
_TIME_FIELDS DaylightStart; | |
int DaylightBias; | |
}; | |
/* 1865 */ | |
union $126DC94F1DD2943ECC2DEAD8B809629C | |
{ | |
unsigned int Version; | |
struct | |
{ | |
unsigned __int8 MajorVersion; | |
unsigned __int8 MinorVersion; | |
unsigned __int8 SubVersion; | |
unsigned __int8 SubMinorVersion; | |
} VersionDetail; | |
}; | |
/* 1866 */ | |
struct $620F6C590A4E7F1524E2A53A25173F98 | |
{ | |
unsigned int StartBuffers; | |
unsigned int PointerSize; | |
unsigned int EventsLost; | |
unsigned int CpuSpeedInMHz; | |
}; | |
/* 1867 */ | |
union $3334E73A80895D2094A1DA942912638F | |
{ | |
_GUID LogInstanceGuid; | |
$620F6C590A4E7F1524E2A53A25173F98 __s1; | |
}; | |
/* 1868 */ | |
struct _TRACE_LOGFILE_HEADER | |
{ | |
unsigned int BufferSize; | |
$126DC94F1DD2943ECC2DEAD8B809629C ___u1; | |
unsigned int ProviderVersion; | |
unsigned int NumberOfProcessors; | |
_LARGE_INTEGER EndTime; | |
unsigned int TimerResolution; | |
unsigned int MaximumFileSize; | |
unsigned int LogFileMode; | |
unsigned int BuffersWritten; | |
$3334E73A80895D2094A1DA942912638F ___u9; | |
wchar_t *LoggerName; | |
wchar_t *LogFileName; | |
_RTL_TIME_ZONE_INFORMATION TimeZone; | |
_LARGE_INTEGER BootTime; | |
_LARGE_INTEGER PerfFreq; | |
_LARGE_INTEGER StartTime; | |
unsigned int ReservedFlags; | |
unsigned int BuffersLost; | |
}; | |
/* 1869 */ | |
struct _ETW_LOGGER_HANDLE | |
{ | |
unsigned __int8 DereferenceAndLeave; | |
}; | |
/* 1870 */ | |
struct _SEP_TOKEN_PRIVILEGES | |
{ | |
unsigned __int64 Present; | |
unsigned __int64 Enabled; | |
unsigned __int64 EnabledByDefault; | |
}; | |
/* 1871 */ | |
struct _TOKEN_AUDIT_POLICY | |
{ | |
unsigned __int8 PerUserPolicy[30]; | |
}; | |
/* 1872 */ | |
struct _SEP_AUDIT_POLICY | |
{ | |
_TOKEN_AUDIT_POLICY AdtTokenPolicy; | |
unsigned __int8 PolicySetStatus; | |
}; | |
/* 1873 */ | |
struct _ACL | |
{ | |
unsigned __int8 AclRevision; | |
unsigned __int8 Sbz1; | |
unsigned __int16 AclSize; | |
unsigned __int16 AceCount; | |
unsigned __int16 Sbz2; | |
}; | |
/* 1874 */ | |
struct _SEP_LOWBOX_NUMBER_ENTRY | |
{ | |
_RTL_DYNAMIC_HASH_TABLE_ENTRY HashEntry; | |
__int64 ReferenceCount; | |
void *PackageSid; | |
unsigned int LowboxNumber; | |
void *AtomTable; | |
}; | |
/* 1875 */ | |
union $F83A7E5E74DCDAF3C264E321A2E0D3E6 | |
{ | |
void *PackageSid; | |
_UNICODE_STRING IsolationPrefix; | |
}; | |
/* 1876 */ | |
struct _SEP_CACHED_HANDLES_ENTRY_DESCRIPTOR | |
{ | |
_SEP_CACHED_HANDLES_ENTRY_TYPE DescriptorType; | |
$F83A7E5E74DCDAF3C264E321A2E0D3E6 ___u1; | |
}; | |
/* 1877 */ | |
struct _SEP_CACHED_HANDLES_ENTRY | |
{ | |
_RTL_DYNAMIC_HASH_TABLE_ENTRY HashEntry; | |
__int64 ReferenceCount; | |
_SEP_CACHED_HANDLES_ENTRY_DESCRIPTOR EntryDescriptor; | |
unsigned int HandleCount; | |
void **Handles; | |
}; | |
/* 1878 */ | |
struct _TOKEN | |
{ | |
_TOKEN_SOURCE TokenSource; | |
_LUID TokenId; | |
_LUID AuthenticationId; | |
_LUID ParentTokenId; | |
_LARGE_INTEGER ExpirationTime; | |
_ERESOURCE *TokenLock; | |
_LUID ModifiedId; | |
_SEP_TOKEN_PRIVILEGES Privileges; | |
_SEP_AUDIT_POLICY AuditPolicy; | |
unsigned int SessionId; | |
unsigned int UserAndGroupCount; | |
unsigned int RestrictedSidCount; | |
unsigned int VariableLength; | |
unsigned int DynamicCharged; | |
unsigned int DynamicAvailable; | |
unsigned int DefaultOwnerIndex; | |
_SID_AND_ATTRIBUTES *UserAndGroups; | |
_SID_AND_ATTRIBUTES *RestrictedSids; | |
void *PrimaryGroup; | |
unsigned int *DynamicPart; | |
_ACL *DefaultDacl; | |
_TOKEN_TYPE TokenType; | |
_SECURITY_IMPERSONATION_LEVEL ImpersonationLevel; | |
unsigned int TokenFlags; | |
unsigned __int8 TokenInUse; | |
unsigned int IntegrityLevelIndex; | |
unsigned int MandatoryPolicy; | |
_SEP_LOGON_SESSION_REFERENCES *LogonSession; | |
_LUID OriginatingLogonSession; | |
_SID_AND_ATTRIBUTES_HASH SidHash; | |
_SID_AND_ATTRIBUTES_HASH RestrictedSidHash; | |
_AUTHZBASEP_SECURITY_ATTRIBUTES_INFORMATION *pSecurityAttributes; | |
void *Package; | |
_SID_AND_ATTRIBUTES *Capabilities; | |
unsigned int CapabilityCount; | |
_SID_AND_ATTRIBUTES_HASH CapabilitiesHash; | |
_SEP_LOWBOX_NUMBER_ENTRY *LowboxNumberEntry; | |
_SEP_CACHED_HANDLES_ENTRY *LowboxHandlesEntry; | |
_AUTHZBASEP_CLAIM_ATTRIBUTES_COLLECTION *pClaimAttributes; | |
void *TrustLevelSid; | |
_TOKEN *TrustLinkedToken; | |
void *IntegrityLevelSidValue; | |
_SEP_SID_VALUES_BLOCK *TokenSidValues; | |
_SEP_LUID_TO_INDEX_MAP_ENTRY *IndexEntry; | |
_SEP_TOKEN_DIAG_TRACK_ENTRY *DiagnosticInfo; | |
_SEP_CACHED_HANDLES_ENTRY *BnoIsolationHandlesEntry; | |
void *SessionObject; | |
unsigned __int64 VariablePart; | |
}; | |
/* 1879 */ | |
struct __declspec(align(8)) _SEP_LUID_TO_INDEX_MAP_ENTRY | |
{ | |
_RTL_DYNAMIC_HASH_TABLE_ENTRY HashEntry; | |
__int64 ReferenceCount; | |
unsigned __int64 Luid; | |
unsigned __int64 IndexIntoGlobalSingletonTable; | |
unsigned __int8 MarkedForDeletion; | |
}; | |
/* 1880 */ | |
struct _SEP_TOKEN_DIAG_TRACK_ENTRY | |
{ | |
void *ProcessCid; | |
void *ThreadCid; | |
unsigned __int8 ImageFileName[16]; | |
unsigned int CreateMethod; | |
unsigned __int64 CreateTrace[30]; | |
int Count; | |
int CaptureCount; | |
}; | |
/* 1881 */ | |
struct _OBJECT_HEADER_QUOTA_INFO | |
{ | |
unsigned int PagedPoolCharge; | |
unsigned int NonPagedPoolCharge; | |
unsigned int SecurityDescriptorCharge; | |
unsigned int Reserved1; | |
void *SecurityDescriptorQuotaBlock; | |
unsigned __int64 Reserved2; | |
}; | |
/* 1882 */ | |
struct _OBJECT_HEADER_PROCESS_INFO | |
{ | |
_EPROCESS *ExclusiveProcess; | |
unsigned __int64 Reserved; | |
}; | |
/* 1883 */ | |
struct __declspec(align(8)) _OBJECT_HANDLE_COUNT_ENTRY | |
{ | |
_EPROCESS *Process; | |
unsigned __int32 HandleCount : 24; | |
unsigned __int32 LockCount : 8; | |
}; | |
/* 1884 */ | |
struct _OBJECT_HANDLE_COUNT_DATABASE | |
{ | |
unsigned int CountEntries; | |
_OBJECT_HANDLE_COUNT_ENTRY HandleCountEntries[1]; | |
}; | |
/* 1885 */ | |
union $CCE3B6C83E4E7C43D990E0B8FFD48882 | |
{ | |
_OBJECT_HANDLE_COUNT_DATABASE *HandleCountDataBase; | |
_OBJECT_HANDLE_COUNT_ENTRY SingleEntry; | |
}; | |
/* 1886 */ | |
struct _OBJECT_HEADER_HANDLE_INFO | |
{ | |
$CCE3B6C83E4E7C43D990E0B8FFD48882 ___u0; | |
}; | |
/* 1887 */ | |
struct _OBJECT_HEADER_NAME_INFO | |
{ | |
_OBJECT_DIRECTORY *Directory; | |
_UNICODE_STRING Name; | |
int ReferenceCount; | |
unsigned int Reserved; | |
}; | |
/* 1888 */ | |
struct _OBJECT_HEADER_CREATOR_INFO | |
{ | |
_LIST_ENTRY TypeList; | |
void *CreatorUniqueProcess; | |
unsigned __int16 CreatorBackTraceIndex; | |
unsigned __int16 Reserved1; | |
unsigned int Reserved2; | |
}; | |
/* 1889 */ | |
struct _OBJECT_HEADER_AUDIT_INFO | |
{ | |
void *SecurityDescriptor; | |
unsigned __int64 Reserved; | |
}; | |
/* 1890 */ | |
struct _HANDLE_REVOCATION_INFO | |
{ | |
_LIST_ENTRY ListEntry; | |
_OB_HANDLE_REVOCATION_BLOCK *RevocationBlock; | |
unsigned __int8 AllowHandleRevocation; | |
unsigned __int8 Padding1[3]; | |
unsigned __int8 Padding2[4]; | |
}; | |
/* 1891 */ | |
struct _OB_EXTENDED_USER_INFO | |
{ | |
void *Context1; | |
void *Context2; | |
}; | |
/* 1892 */ | |
struct _OBJECT_FOOTER | |
{ | |
_HANDLE_REVOCATION_INFO HandleRevocationInfo; | |
_OB_EXTENDED_USER_INFO ExtendedUserInfo; | |
}; | |
/* 1893 */ | |
struct _OBJECT_HEADER_EXTENDED_INFO | |
{ | |
_OBJECT_FOOTER *Footer; | |
unsigned __int64 Reserved; | |
}; | |
/* 1894 */ | |
struct __declspec(align(8)) _OBP_LOOKUP_CONTEXT | |
{ | |
_OBJECT_DIRECTORY *Directory; | |
void *Object; | |
_OBJECT_DIRECTORY_ENTRY **EntryLink; | |
unsigned int HashValue; | |
unsigned __int16 HashIndex; | |
unsigned __int8 DirectoryLocked; | |
unsigned __int8 LockedExclusive; | |
unsigned int LockStateSignature; | |
}; | |
/* 1895 */ | |
struct _WHEAP_ERROR_SOURCE_TABLE | |
{ | |
unsigned int Signature; | |
int Count; | |
unsigned int NextId; | |
_LIST_ENTRY Items; | |
_KEVENT InsertLock; | |
}; | |
/* 1896 */ | |
struct _WHEAP_WORK_QUEUE | |
{ | |
_LIST_ENTRY ListHead; | |
unsigned __int64 ListLock; | |
volatile int ItemCount; | |
_KDPC Dpc; | |
_WORK_QUEUE_ITEM WorkItem; | |
void (__fastcall *WorkRoutine)(_WHEAP_WORK_QUEUE *, _LIST_ENTRY *); | |
}; | |
/* 1897 */ | |
struct _WHEAP_INFO_BLOCK | |
{ | |
unsigned int ErrorSourceCount; | |
_WHEAP_ERROR_SOURCE_TABLE *ErrorSourceTable; | |
_WHEAP_WORK_QUEUE *WorkQueue; | |
}; | |
/* 1898 */ | |
struct $978CB274F65821CF87196E7A5560085B | |
{ | |
unsigned __int32 Preallocated : 1; | |
unsigned __int32 FromPersistentStore : 1; | |
unsigned __int32 PlatformPfaControl : 1; | |
unsigned __int32 PlatformDirectedOffline : 1; | |
unsigned __int32 Reserved : 28; | |
}; | |
/* 1899 */ | |
union _WHEAP_ERROR_RECORD_WRAPPER_FLAGS | |
{ | |
$978CB274F65821CF87196E7A5560085B __s0; | |
unsigned int AsULONG; | |
}; | |
/* 1900 */ | |
struct __declspec(align(8)) _WHEAP_ERROR_SOURCE | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int FailedAllocations; | |
unsigned int PlatformErrorSourceId; | |
int ErrorCount; | |
unsigned int RecordCount; | |
unsigned int RecordLength; | |
unsigned int PoolTag; | |
_WHEA_ERROR_SOURCE_TYPE Type; | |
_WHEAP_ERROR_RECORD_WRAPPER *Records; | |
void *Context; | |
unsigned int SectionCount; | |
unsigned int SectionLength; | |
_LARGE_INTEGER TickCountAtLastError; | |
unsigned int AccumulatedErrors; | |
unsigned int TotalErrors; | |
unsigned __int8 Deferred; | |
volatile int Busy; | |
_WHEA_ERROR_SOURCE_DESCRIPTOR Descriptor; | |
}; | |
/* 1901 */ | |
struct _WHEAP_ERROR_RECORD_WRAPPER | |
{ | |
_LIST_ENTRY WorkEntry; | |
unsigned int Length; | |
unsigned int ProcessorNumber; | |
_WHEAP_ERROR_RECORD_WRAPPER_FLAGS Flags; | |
volatile int InUse; | |
_WHEAP_ERROR_SOURCE *ErrorSource; | |
_WHEA_ERROR_RECORD ErrorRecord; | |
}; | |
/* 1902 */ | |
struct _WNF_STATE_NAME_STRUCT | |
{ | |
unsigned __int64 Version : 4; | |
unsigned __int64 NameLifetime : 2; | |
unsigned __int64 DataScope : 4; | |
unsigned __int64 PermanentData : 1; | |
unsigned __int64 Sequence : 53; | |
}; | |
/* 1903 */ | |
struct _SECURITY_DESCRIPTOR | |
{ | |
unsigned __int8 Revision; | |
unsigned __int8 Sbz1; | |
unsigned __int16 Control; | |
void *Owner; | |
void *Group; | |
_ACL *Sacl; | |
_ACL *Dacl; | |
}; | |
/* 1904 */ | |
struct _WNF_STATE_NAME_REGISTRATION | |
{ | |
unsigned int MaxStateSize; | |
const _WNF_TYPE_ID *TypeId; | |
_SECURITY_DESCRIPTOR *SecurityDescriptor; | |
}; | |
/* 1905 */ | |
struct _WNF_STATE_DATA | |
{ | |
_WNF_NODE_HEADER Header; | |
unsigned int AllocatedSize; | |
unsigned int DataSize; | |
unsigned int ChangeStamp; | |
}; | |
/* 1906 */ | |
struct _WNF_NAME_INSTANCE | |
{ | |
_WNF_NODE_HEADER Header; | |
_EX_RUNDOWN_REF RunRef; | |
_RTL_BALANCED_NODE TreeLinks; | |
_WNF_STATE_NAME_STRUCT StateName; | |
_WNF_SCOPE_INSTANCE *ScopeInstance; | |
_WNF_STATE_NAME_REGISTRATION StateNameInfo; | |
_WNF_LOCK StateDataLock; | |
_WNF_STATE_DATA *StateData; | |
unsigned int CurrentChangeStamp; | |
void *PermanentDataStore; | |
_WNF_LOCK StateSubscriptionListLock; | |
_LIST_ENTRY StateSubscriptionListHead; | |
_LIST_ENTRY TemporaryNameListEntry; | |
_EPROCESS *CreatorProcess; | |
int DataSubscribersCount; | |
int CurrentDeliveryCount; | |
}; | |
/* 1907 */ | |
struct __declspec(align(8)) _WNF_SUBSCRIPTION | |
{ | |
_WNF_NODE_HEADER Header; | |
_EX_RUNDOWN_REF RunRef; | |
unsigned __int64 SubscriptionId; | |
_LIST_ENTRY ProcessSubscriptionListEntry; | |
_EPROCESS *Process; | |
_WNF_NAME_INSTANCE *NameInstance; | |
_WNF_STATE_NAME_STRUCT StateName; | |
_LIST_ENTRY StateSubscriptionListEntry; | |
unsigned __int64 CallbackRoutine; | |
void *CallbackContext; | |
unsigned int CurrentChangeStamp; | |
unsigned int SubscribedEventSet; | |
_LIST_ENTRY PendingSubscriptionListEntry; | |
_WNF_SUBSCRIPTION_STATE SubscriptionState; | |
unsigned int SignaledEventSet; | |
unsigned int InDeliveryEventSet; | |
}; | |
/* 1908 */ | |
struct _WNF_PROCESS_CONTEXT | |
{ | |
_WNF_NODE_HEADER Header; | |
_EPROCESS *Process; | |
_LIST_ENTRY WnfProcessesListEntry; | |
void *ImplicitScopeInstances[3]; | |
_WNF_LOCK TemporaryNamesListLock; | |
_LIST_ENTRY TemporaryNamesListHead; | |
_WNF_LOCK ProcessSubscriptionListLock; | |
_LIST_ENTRY ProcessSubscriptionListHead; | |
_WNF_LOCK DeliveryPendingListLock; | |
_LIST_ENTRY DeliveryPendingListHead; | |
_KEVENT *NotificationEvent; | |
}; | |
/* 1909 */ | |
struct __declspec(align(8)) _WNF_DISPATCHER | |
{ | |
_WNF_NODE_HEADER Header; | |
_WORK_QUEUE_ITEM WorkItem; | |
int State; | |
}; | |
/* 1910 */ | |
struct _VF_KE_CRITICAL_REGION_TRACE | |
{ | |
_ETHREAD *Thread; | |
void *StackTrace[7]; | |
}; | |
/* 1911 */ | |
struct _IMAGE_ROM_OPTIONAL_HEADER | |
{ | |
unsigned __int16 Magic; | |
unsigned __int8 MajorLinkerVersion; | |
unsigned __int8 MinorLinkerVersion; | |
unsigned int SizeOfCode; | |
unsigned int SizeOfInitializedData; | |
unsigned int SizeOfUninitializedData; | |
unsigned int AddressOfEntryPoint; | |
unsigned int BaseOfCode; | |
unsigned int BaseOfData; | |
unsigned int BaseOfBss; | |
unsigned int GprMask; | |
unsigned int CprMask[4]; | |
unsigned int GpValue; | |
}; | |
/* 1912 */ | |
struct __declspec(align(8)) _POP_IRP_WORKER_ENTRY | |
{ | |
_LIST_ENTRY Link; | |
_ETHREAD *Thread; | |
_IRP *Irp; | |
_DEVICE_OBJECT *Device; | |
unsigned __int8 Static; | |
}; | |
/* 1913 */ | |
struct _POOL_TRACKER_TABLE | |
{ | |
volatile int Key; | |
unsigned __int64 NonPagedBytes; | |
unsigned __int64 NonPagedAllocs; | |
unsigned __int64 NonPagedFrees; | |
unsigned __int64 PagedBytes; | |
unsigned __int64 PagedAllocs; | |
unsigned __int64 PagedFrees; | |
}; | |
/* 1914 */ | |
struct _OBJECT_REF_TRACE | |
{ | |
void *StackTrace[16]; | |
}; | |
/* 1915 */ | |
struct __declspec(align(8)) _STACK_TABLE | |
{ | |
unsigned __int16 NumStackTraces; | |
unsigned __int16 TraceCapacity; | |
_OBJECT_REF_TRACE *StackTrace[16]; | |
unsigned __int16 StackTableHash[16381]; | |
}; | |
/* 1920 */ | |
union $60E8634F7FEA68A3EB3EBEB55E7B7BCA | |
{ | |
_LIST_ENTRY ResourceList; | |
_LIST_ENTRY FreeListEntry; | |
}; | |
/* 1919 */ | |
struct $ACDF71180F6620BE0295814E0676F670 | |
{ | |
unsigned __int32 Active : 1; | |
unsigned __int32 OnlyTryAcquireUsed : 1; | |
unsigned __int32 ReleasedOutOfOrder : 1; | |
unsigned __int32 SequenceNumber : 29; | |
}; | |
/* 1916 */ | |
struct _VI_DEADLOCK_NODE | |
{ | |
_VI_DEADLOCK_NODE *Parent; | |
_LIST_ENTRY ChildrenList; | |
_LIST_ENTRY SiblingsList; | |
$60E8634F7FEA68A3EB3EBEB55E7B7BCA ___u3; | |
_VI_DEADLOCK_RESOURCE *Root; | |
_VI_DEADLOCK_THREAD *ThreadEntry; | |
union | |
{ | |
$ACDF71180F6620BE0295814E0676F670 __s0; | |
unsigned int Whole; | |
} u1; | |
int ChildrenCount; | |
void *StackTrace[8]; | |
void *ParentStackTrace[8]; | |
}; | |
/* 1922 */ | |
union $72D9D7CCEC07509585529BF45A52D276 | |
{ | |
_LIST_ENTRY HashChainList; | |
_LIST_ENTRY FreeListEntry; | |
}; | |
/* 1917 */ | |
struct _VI_DEADLOCK_RESOURCE | |
{ | |
_VI_DEADLOCK_RESOURCE_TYPE Type; | |
unsigned __int32 NodeCount : 16; | |
unsigned __int32 RecursionCount : 16; | |
void *ResourceAddress; | |
_VI_DEADLOCK_THREAD *ThreadOwner; | |
_LIST_ENTRY ResourceList; | |
$72D9D7CCEC07509585529BF45A52D276 ___u6; | |
void *StackTrace[8]; | |
void *LastAcquireTrace[8]; | |
void *LastReleaseTrace[8]; | |
}; | |
/* 1921 */ | |
union $8F637A8A99C16400AEBCF5E2A023BFE1 | |
{ | |
_LIST_ENTRY ListEntry; | |
_LIST_ENTRY FreeListEntry; | |
}; | |
/* 1918 */ | |
struct __declspec(align(8)) _VI_DEADLOCK_THREAD | |
{ | |
_KTHREAD *Thread; | |
_VI_DEADLOCK_NODE *CurrentSpinNode; | |
_VI_DEADLOCK_NODE *CurrentOtherNode; | |
$8F637A8A99C16400AEBCF5E2A023BFE1 ___u3; | |
unsigned int NodeCount; | |
volatile unsigned int PagingCount; | |
unsigned __int8 ThreadUsesEresources; | |
}; | |
/* 1923 */ | |
struct __declspec(align(8)) _LOCK_HEADER | |
{ | |
_RTL_AVL_TREE LockTree; | |
_RTL_AVL_TREE LockMdlSwitchedTree; | |
unsigned __int64 Count; | |
unsigned __int64 Lock; | |
unsigned int Valid; | |
}; | |
/* 1924 */ | |
struct _SK_CRASH_MODULE | |
{ | |
wchar_t ImageName[32]; | |
unsigned int SizeOfImage; | |
unsigned int TimeDateStamp; | |
}; | |
/* 1925 */ | |
struct $F19A64BAFFCD7217F2A4C7F6D9B86DEA | |
{ | |
unsigned int ModuleId; | |
unsigned int Rva; | |
}; | |
/* 1926 */ | |
union $EF2910CAE65FFF088E3019ACEBA4BE85 | |
{ | |
$F19A64BAFFCD7217F2A4C7F6D9B86DEA __s0; | |
unsigned __int64 Pc; | |
}; | |
/* 1927 */ | |
struct _SK_CRASH_STACK_FRAME | |
{ | |
$EF2910CAE65FFF088E3019ACEBA4BE85 ___u0; | |
}; | |
/* 1928 */ | |
struct _SK_CRASH_MINIDUMP | |
{ | |
unsigned int Size; | |
unsigned int Version; | |
unsigned int ModuleCount; | |
unsigned int FrameCount; | |
_SK_CRASH_MODULE Modules[16]; | |
_SK_CRASH_STACK_FRAME StackFrames[366]; | |
}; | |
/* 1929 */ | |
struct _TRIAGE_PNP_DEVICE_COMPLETION_QUEUE | |
{ | |
_LIST_ENTRY DispatchedList; | |
}; | |
/* 1930 */ | |
struct _KPRIQUEUE | |
{ | |
_DISPATCHER_HEADER Header; | |
_LIST_ENTRY EntryListHead[32]; | |
volatile int CurrentCount[32]; | |
unsigned int MaximumCount; | |
_LIST_ENTRY ThreadListHead; | |
}; | |
/* 1931 */ | |
struct _TRIAGE_EX_WORK_QUEUE | |
{ | |
_KPRIQUEUE WorkPriQueue; | |
}; | |
/* 1932 */ | |
struct _TRIAGE_9F_PNP | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Revision; | |
_TRIAGE_PNP_DEVICE_COMPLETION_QUEUE *CompletionQueue; | |
_TRIAGE_EX_WORK_QUEUE *DelayedWorkQueue; | |
_TRIAGE_EX_WORK_QUEUE *DelayedIoWorkQueue; | |
}; | |
/* 1933 */ | |
struct _PO_NOTIFY_ORDER_LEVEL | |
{ | |
unsigned int DeviceCount; | |
unsigned int ActiveCount; | |
_LIST_ENTRY WaitSleep; | |
_LIST_ENTRY ReadySleep; | |
_LIST_ENTRY ReadyS0; | |
_LIST_ENTRY WaitS0; | |
}; | |
/* 1934 */ | |
struct __declspec(align(8)) _PO_DEVICE_NOTIFY_ORDER | |
{ | |
unsigned __int8 Locked; | |
_DEVICE_OBJECT **WarmEjectPdoPointer; | |
_PO_NOTIFY_ORDER_LEVEL OrderLevel[5]; | |
unsigned int Flags; | |
}; | |
/* 1935 */ | |
struct __declspec(align(4)) _POP_DEVICE_SYS_STATE | |
{ | |
unsigned __int8 IrpMinor; | |
_SYSTEM_POWER_STATE SystemState; | |
unsigned __int64 SpinLock; | |
_KTHREAD *Thread; | |
_KEVENT *AbortEvent; | |
_KSEMAPHORE *ReadySemaphore; | |
_KSEMAPHORE *FinishedSemaphore; | |
_PO_DEVICE_NOTIFY_ORDER Order; | |
_LIST_ENTRY Pending; | |
int Status; | |
_DEVICE_OBJECT *FailedDevice; | |
unsigned __int8 Waking; | |
unsigned __int8 Cancelled; | |
unsigned __int8 IgnoreErrors; | |
unsigned __int8 IgnoreNotImplemented; | |
unsigned __int8 TimeRefreshLockAcquired; | |
}; | |
/* 1936 */ | |
struct _POP_CURRENT_BROADCAST | |
{ | |
unsigned __int8 InProgress; | |
_SYSTEM_POWER_STATE_CONTEXT SystemContext; | |
POWER_ACTION PowerAction; | |
_POP_DEVICE_SYS_STATE *DeviceState; | |
}; | |
/* 1937 */ | |
struct __unaligned __declspec(align(4)) $04EBCBAB3E4CA807DAB1AC2B76D8B1E5 | |
{ | |
_SINGLE_LIST_ENTRY FreeEntry; | |
unsigned int Reserved0; | |
}; | |
/* 1938 */ | |
union $13EEE136495617B65DC1243B1596A4F3 | |
{ | |
_LIST_ENTRY Entry; | |
$04EBCBAB3E4CA807DAB1AC2B76D8B1E5 __s1; | |
}; | |
/* 1939 */ | |
struct _LPCP_MESSAGE | |
{ | |
$13EEE136495617B65DC1243B1596A4F3 ___u0; | |
void *SenderPort; | |
_ETHREAD *RepliedToThread; | |
void *PortContext; | |
_PORT_MESSAGE Request; | |
}; | |
/* 1940 */ | |
struct _OBJECT_REF_STACK_INFO | |
{ | |
unsigned int Sequence; | |
unsigned __int16 Index; | |
unsigned __int16 NumTraces; | |
unsigned int Tag; | |
}; | |
/* 1941 */ | |
struct __declspec(align(8)) _OBJECT_REF_INFO | |
{ | |
_OBJECT_HEADER *ObjectHeader; | |
void *NextRef; | |
unsigned __int8 ImageFileName[16]; | |
unsigned __int16 NextPos; | |
unsigned __int16 MaxStacks; | |
_OBJECT_REF_STACK_INFO StackInfo[]; | |
}; | |
/* 1942 */ | |
struct _PNP_DEVICE_EVENT_LIST | |
{ | |
int Status; | |
_KMUTANT EventQueueMutex; | |
_FAST_MUTEX Lock; | |
_LIST_ENTRY List; | |
}; | |
/* 1943 */ | |
struct _FAST_ERESOURCE | |
{ | |
void *Reserved1[3]; | |
unsigned int Reserved2; | |
void *Reserved3[4]; | |
unsigned int Reserved4[4]; | |
void *Reserved5; | |
void *Reserved6[2]; | |
}; | |
/* 1944 */ | |
struct $B0C7228810FFA281E36A0BBA481AA7B8 | |
{ | |
unsigned __int16 TagIndex; | |
unsigned __int16 HeapIndex; | |
}; | |
/* 1945 */ | |
union $628C3517C2A502C4065E9B279D49779B | |
{ | |
unsigned int HeapAndTagIndex; | |
$B0C7228810FFA281E36A0BBA481AA7B8 __s1; | |
}; | |
/* 1946 */ | |
struct _HEAP_STOP_ON_TAG | |
{ | |
$628C3517C2A502C4065E9B279D49779B ___u0; | |
}; | |
/* 1947 */ | |
struct __declspec(align(8)) _HEAP_STOP_ON_VALUES | |
{ | |
unsigned __int64 AllocAddress; | |
_HEAP_STOP_ON_TAG AllocTag; | |
unsigned __int64 ReAllocAddress; | |
_HEAP_STOP_ON_TAG ReAllocTag; | |
unsigned __int64 FreeAddress; | |
_HEAP_STOP_ON_TAG FreeTag; | |
}; | |
/* 1948 */ | |
struct _EX_HEAP_SESSION_STATE | |
{ | |
_RTLP_HP_HEAP_MANAGER HeapManager; | |
RTL_HP_ENV_HANDLE PagedEnv; | |
_SEGMENT_HEAP *PagedHeap; | |
_SEGMENT_HEAP *SpecialPoolHeap; | |
}; | |
/* 1949 */ | |
struct _VF_SUSPECT_DRIVER_ENTRY | |
{ | |
_LIST_ENTRY Links; | |
unsigned int Loads; | |
unsigned int Unloads; | |
_UNICODE_STRING BaseName; | |
}; | |
/* 1950 */ | |
struct _VF_TARGET_VERIFIED_DRIVER_DATA | |
{ | |
_VF_SUSPECT_DRIVER_ENTRY *SuspectDriverEntry; | |
void *WMICallback; | |
_LIST_ENTRY EtwHandlesListHead; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 MissedEtwRegistration : 1; | |
unsigned __int32 IsBootDriver : 1; | |
unsigned __int32 Spare : 30; | |
} Flags; | |
unsigned int Whole; | |
} u1; | |
unsigned __int64 Signature; | |
unsigned __int8 SeSigningLevel; | |
__declspec(align(16)) _SLIST_HEADER PoolPageHeaders; | |
_SLIST_HEADER PoolTrackers; | |
void **DifPluginData; | |
volatile unsigned int CurrentPagedPoolAllocations; | |
volatile unsigned int CurrentNonPagedPoolAllocations; | |
unsigned int PeakPagedPoolAllocations; | |
unsigned int PeakNonPagedPoolAllocations; | |
volatile unsigned __int64 PagedBytes; | |
volatile unsigned __int64 NonPagedBytes; | |
unsigned __int64 PeakPagedBytes; | |
unsigned __int64 PeakNonPagedBytes; | |
unsigned int RaiseIrqls; | |
unsigned int AcquireSpinLocks; | |
unsigned int SynchronizeExecutions; | |
unsigned int AllocationsWithNoTag; | |
unsigned int AllocationsFailed; | |
unsigned int AllocationsFailedDeliberately; | |
unsigned __int64 LockedBytes; | |
unsigned __int64 PeakLockedBytes; | |
unsigned __int64 MappedLockedBytes; | |
unsigned __int64 PeakMappedLockedBytes; | |
unsigned __int64 MappedIoSpaceBytes; | |
unsigned __int64 PeakMappedIoSpaceBytes; | |
unsigned __int64 PagesForMdlBytes; | |
unsigned __int64 PeakPagesForMdlBytes; | |
unsigned __int64 ContiguousMemoryBytes; | |
unsigned __int64 PeakContiguousMemoryBytes; | |
_LIST_ENTRY ContiguousMemoryListHead; | |
volatile unsigned int ExecutePoolTypes; | |
volatile unsigned int ExecutePageProtections; | |
volatile unsigned int ExecutePageMappings; | |
volatile unsigned int ExecuteWriteSections; | |
volatile unsigned int SectionAlignmentFailures; | |
volatile unsigned int IATInExecutableSection; | |
}; | |
/* 1951 */ | |
struct _MEMORY_ALLOCATION_DESCRIPTOR | |
{ | |
_LIST_ENTRY ListEntry; | |
_TYPE_OF_MEMORY MemoryType; | |
unsigned __int64 BasePage; | |
unsigned __int64 PageCount; | |
}; | |
/* 1952 */ | |
struct POWER_ACTION_POLICY | |
{ | |
POWER_ACTION Action; | |
unsigned int Flags; | |
unsigned int EventCode; | |
}; | |
/* 1953 */ | |
struct SYSTEM_POWER_LEVEL | |
{ | |
unsigned __int8 Enable; | |
unsigned __int8 Spare[3]; | |
unsigned int BatteryLevel; | |
POWER_ACTION_POLICY PowerPolicy; | |
_SYSTEM_POWER_STATE MinSystemState; | |
}; | |
/* 1954 */ | |
struct _SYSTEM_POWER_POLICY | |
{ | |
unsigned int Revision; | |
POWER_ACTION_POLICY PowerButton; | |
POWER_ACTION_POLICY SleepButton; | |
POWER_ACTION_POLICY LidClose; | |
_SYSTEM_POWER_STATE LidOpenWake; | |
unsigned int Reserved; | |
POWER_ACTION_POLICY Idle; | |
unsigned int IdleTimeout; | |
unsigned __int8 IdleSensitivity; | |
unsigned __int8 DynamicThrottle; | |
unsigned __int8 Spare2[2]; | |
_SYSTEM_POWER_STATE MinSleep; | |
_SYSTEM_POWER_STATE MaxSleep; | |
_SYSTEM_POWER_STATE ReducedLatencySleep; | |
unsigned int WinLogonFlags; | |
unsigned int Spare3; | |
unsigned int DozeS4Timeout; | |
unsigned int BroadcastCapacityResolution; | |
SYSTEM_POWER_LEVEL DischargePolicy[4]; | |
unsigned int VideoTimeout; | |
unsigned __int8 VideoDimDisplay; | |
unsigned int VideoReserved[3]; | |
unsigned int SpindownTimeout; | |
unsigned __int8 OptimizeForPower; | |
unsigned __int8 FanThrottleTolerance; | |
unsigned __int8 ForcedThrottle; | |
unsigned __int8 MinThrottle; | |
POWER_ACTION_POLICY OverThrottled; | |
}; | |
/* 1955 */ | |
struct _DELAY_ACK_FO | |
{ | |
_LIST_ENTRY Links; | |
_FILE_OBJECT *OriginalFileObject; | |
}; | |
/* 1956 */ | |
struct _LOCK_TRACKER | |
{ | |
_RTL_BALANCED_NODE LockTrackerNode; | |
_MDL *Mdl; | |
void *StartVa; | |
unsigned __int64 Count; | |
unsigned int Offset; | |
unsigned int Length; | |
unsigned int Who; | |
unsigned int Hash; | |
unsigned __int64 Page; | |
void *StackTrace[8]; | |
_EPROCESS *Process; | |
}; | |
/* 1957 */ | |
struct _BUS_HANDLER | |
{ | |
unsigned int Version; | |
_INTERFACE_TYPE InterfaceType; | |
_BUS_DATA_TYPE ConfigurationType; | |
unsigned int BusNumber; | |
_DEVICE_OBJECT *DeviceObject; | |
_BUS_HANDLER *ParentHandler; | |
void *BusData; | |
unsigned int DeviceControlExtensionSize; | |
_SUPPORTED_RANGES *BusAddresses; | |
unsigned int Reserved[4]; | |
unsigned int (__fastcall *GetBusData)(_BUS_HANDLER *, _BUS_HANDLER *, unsigned int, void *, unsigned int, unsigned int); | |
unsigned int (__fastcall *SetBusData)(_BUS_HANDLER *, _BUS_HANDLER *, unsigned int, void *, unsigned int, unsigned int); | |
int (__fastcall *AdjustResourceList)(_BUS_HANDLER *, _BUS_HANDLER *, _IO_RESOURCE_REQUIREMENTS_LIST **); | |
int (__fastcall *AssignSlotResources)(_BUS_HANDLER *, _BUS_HANDLER *, _UNICODE_STRING *, _UNICODE_STRING *, _DRIVER_OBJECT *, _DEVICE_OBJECT *, unsigned int, _CM_RESOURCE_LIST **); | |
unsigned __int8 (__fastcall *TranslateBusAddress)(_BUS_HANDLER *, _BUS_HANDLER *, _LARGE_INTEGER, unsigned int *, _LARGE_INTEGER *); | |
void *Spare1; | |
void *Spare2; | |
void *Spare3; | |
void *Spare4; | |
void *Spare5; | |
void *Spare6; | |
void *Spare7; | |
void *Spare8; | |
}; | |
/* 1958 */ | |
struct _SUPPORTED_RANGE | |
{ | |
_SUPPORTED_RANGE *Next; | |
unsigned int SystemAddressSpace; | |
__int64 SystemBase; | |
__int64 Base; | |
__int64 Limit; | |
}; | |
/* 1959 */ | |
struct _SUPPORTED_RANGES | |
{ | |
unsigned __int16 Version; | |
unsigned __int8 Sorted; | |
unsigned __int8 Reserved; | |
unsigned int NoIO; | |
_SUPPORTED_RANGE IO; | |
unsigned int NoMemory; | |
_SUPPORTED_RANGE Memory; | |
unsigned int NoPrefetchMemory; | |
_SUPPORTED_RANGE PrefetchMemory; | |
unsigned int NoDma; | |
_SUPPORTED_RANGE Dma; | |
}; | |
/* 1960 */ | |
struct __declspec(align(8)) _MAP_REGISTER_ENTRY | |
{ | |
void *MapRegister; | |
unsigned __int8 WriteToDevice; | |
}; | |
/* 1961 */ | |
struct $C8EA9A7E6B8D16F77927F71C88FC15EF | |
{ | |
unsigned __int8 BitWidth; | |
unsigned __int8 AccessSize; | |
}; | |
/* 1962 */ | |
union $6BDAA6343A1077FB2F47C79853A890FF | |
{ | |
unsigned __int8 Reserved[2]; | |
$C8EA9A7E6B8D16F77927F71C88FC15EF __s1; | |
}; | |
/* 1963 */ | |
struct __declspec(align(8)) DEBUG_DEVICE_ADDRESS | |
{ | |
unsigned __int8 Type; | |
unsigned __int8 Valid; | |
$6BDAA6343A1077FB2F47C79853A890FF ___u2; | |
unsigned __int8 *TranslatedAddress; | |
unsigned int Length; | |
}; | |
/* 1964 */ | |
struct __declspec(align(4)) DEBUG_MEMORY_REQUIREMENTS | |
{ | |
_LARGE_INTEGER Start; | |
_LARGE_INTEGER MaxEnd; | |
void *VirtualAddress; | |
unsigned int Length; | |
unsigned __int8 Cached; | |
unsigned __int8 Aligned; | |
}; | |
/* 1965 */ | |
struct __declspec(align(2)) _DEBUG_TRANSPORT_DATA | |
{ | |
unsigned int HwContextSize; | |
unsigned __int8 UseSerialFraming; | |
unsigned __int8 ValidUSBCoreId; | |
unsigned __int8 USBCoreId; | |
}; | |
/* 1966 */ | |
struct $2D6BB96A4F8EB955D6C42C9865527B80 | |
{ | |
unsigned __int8 DbgHalScratchAllocated : 1; | |
unsigned __int8 DbgBarsMapped : 1; | |
unsigned __int8 DbgScratchAllocated : 1; | |
}; | |
/* 1967 */ | |
union $8530234DAA0EBB78ECBE7290F0BEADB0 | |
{ | |
unsigned __int8 Flags; | |
$2D6BB96A4F8EB955D6C42C9865527B80 __s1; | |
}; | |
/* 1968 */ | |
struct _DEBUG_DEVICE_DESCRIPTOR | |
{ | |
unsigned int Bus; | |
unsigned int Slot; | |
unsigned __int16 Segment; | |
unsigned __int16 VendorID; | |
unsigned __int16 DeviceID; | |
unsigned __int8 BaseClass; | |
unsigned __int8 SubClass; | |
unsigned __int8 ProgIf; | |
$8530234DAA0EBB78ECBE7290F0BEADB0 ___u8; | |
unsigned __int8 Initialized; | |
unsigned __int8 Configured; | |
DEBUG_DEVICE_ADDRESS BaseAddress[6]; | |
DEBUG_MEMORY_REQUIREMENTS Memory; | |
unsigned int Dbg2TableIndex; | |
unsigned __int16 PortType; | |
unsigned __int16 PortSubtype; | |
void *OemData; | |
unsigned int OemDataLength; | |
KD_NAMESPACE_ENUM NameSpace; | |
wchar_t *NameSpacePath; | |
unsigned int NameSpacePathLength; | |
unsigned int TransportType; | |
_DEBUG_TRANSPORT_DATA TransportData; | |
}; | |
/* 1969 */ | |
struct _CONFIGURATION_COMPONENT_DATA | |
{ | |
_CONFIGURATION_COMPONENT_DATA *Parent; | |
_CONFIGURATION_COMPONENT_DATA *Child; | |
_CONFIGURATION_COMPONENT_DATA *Sibling; | |
_CONFIGURATION_COMPONENT ComponentEntry; | |
void *ConfigurationData; | |
}; | |
/* 1970 */ | |
struct _DEVICE_FLAGS | |
{ | |
unsigned __int32 Failed : 1; | |
unsigned __int32 ReadOnly : 1; | |
unsigned __int32 Removable : 1; | |
unsigned __int32 ConsoleIn : 1; | |
unsigned __int32 ConsoleOut : 1; | |
unsigned __int32 Input : 1; | |
unsigned __int32 Output : 1; | |
}; | |
/* 1971 */ | |
struct $4970A2989658C82124185AB14622DB7F | |
{ | |
unsigned __int16 Group; | |
unsigned __int16 GroupIndex; | |
}; | |
/* 1972 */ | |
union $EEC51B03BAB44022FD9A8F057834ACF3 | |
{ | |
unsigned int AffinityMask; | |
$4970A2989658C82124185AB14622DB7F __s1; | |
}; | |
/* 1973 */ | |
struct _CONFIGURATION_COMPONENT | |
{ | |
_CONFIGURATION_CLASS Class; | |
_CONFIGURATION_TYPE Type; | |
_DEVICE_FLAGS Flags; | |
unsigned __int16 Version; | |
unsigned __int16 Revision; | |
unsigned int Key; | |
$EEC51B03BAB44022FD9A8F057834ACF3 ___u6; | |
unsigned int ConfigurationDataLength; | |
unsigned int IdentifierLength; | |
char *Identifier; | |
}; | |
/* 1974 */ | |
struct _NLS_DATA_BLOCK | |
{ | |
void *AnsiCodePageData; | |
void *OemCodePageData; | |
void *UnicodeCaseTableData; | |
}; | |
/* 1975 */ | |
struct _ARC_DISK_INFORMATION | |
{ | |
_LIST_ENTRY DiskSignatures; | |
}; | |
/* 1976 */ | |
struct _PROFILE_PARAMETER_BLOCK | |
{ | |
unsigned __int16 Status; | |
unsigned __int16 Reserved; | |
unsigned __int16 DockingState; | |
unsigned __int16 Capabilities; | |
unsigned int DockID; | |
unsigned int SerialNumber; | |
}; | |
/* 1977 */ | |
struct __declspec(align(4)) _HEADLESS_LOADER_BLOCK | |
{ | |
unsigned __int8 UsedBiosSettings; | |
unsigned __int8 DataBits; | |
unsigned __int8 StopBits; | |
unsigned __int8 Parity; | |
unsigned int BaudRate; | |
unsigned int PortNumber; | |
unsigned __int8 *PortAddress; | |
unsigned __int16 PciDeviceId; | |
unsigned __int16 PciVendorId; | |
unsigned __int8 PciBusNumber; | |
unsigned __int16 PciBusSegment; | |
unsigned __int8 PciSlotNumber; | |
unsigned __int8 PciFunctionNumber; | |
unsigned int PciFlags; | |
_GUID SystemGUID; | |
unsigned __int8 IsMMIODevice; | |
unsigned __int8 TerminalType; | |
unsigned __int8 InterfaceType; | |
unsigned __int8 RegisterBitWidth; | |
unsigned __int8 RegisterAccessSize; | |
}; | |
/* 1978 */ | |
struct _SMBIOS3_TABLE_HEADER | |
{ | |
unsigned __int8 Signature[5]; | |
unsigned __int8 Checksum; | |
unsigned __int8 Length; | |
unsigned __int8 MajorVersion; | |
unsigned __int8 MinorVersion; | |
unsigned __int8 Docrev; | |
unsigned __int8 EntryPointRevision; | |
unsigned __int8 Reserved; | |
unsigned int StructureTableMaximumSize; | |
unsigned __int64 StructureTableAddress; | |
}; | |
/* 1979 */ | |
struct __declspec(align(8)) _NETWORK_LOADER_BLOCK | |
{ | |
unsigned __int8 *DHCPServerACK; | |
unsigned int DHCPServerACKLength; | |
unsigned __int8 *BootServerReplyPacket; | |
unsigned int BootServerReplyPacketLength; | |
}; | |
/* 1980 */ | |
struct _LOADER_PERFORMANCE_DATA | |
{ | |
unsigned __int64 StartTime; | |
unsigned __int64 EndTime; | |
unsigned __int64 PreloadEndTime; | |
unsigned __int64 TcbLoaderStartTime; | |
unsigned __int64 LoadHypervisorTime; | |
unsigned __int64 LaunchHypervisorTime; | |
unsigned __int64 LoadVsmTime; | |
unsigned __int64 LaunchVsmTime; | |
unsigned __int64 ExecuteTransitionStartTime; | |
unsigned __int64 ExecuteTransitionEndTime; | |
unsigned __int64 LoadDriversTime; | |
unsigned __int64 CleanupVsmTime; | |
}; | |
/* 1981 */ | |
struct __declspec(align(8)) _BOOT_ENTROPY_SOURCE_LDR_RESULT | |
{ | |
_BOOT_ENTROPY_SOURCE_ID SourceId; | |
unsigned __int64 Policy; | |
_BOOT_ENTROPY_SOURCE_RESULT_CODE ResultCode; | |
int ResultStatus; | |
unsigned __int64 Time; | |
unsigned int EntropyLength; | |
unsigned __int8 EntropyData[64]; | |
}; | |
/* 1982 */ | |
struct _BOOT_ENTROPY_LDR_RESULT | |
{ | |
unsigned int maxEntropySources; | |
_BOOT_ENTROPY_SOURCE_LDR_RESULT EntropySourceResult[10]; | |
unsigned __int8 SeedBytesForCng[48]; | |
unsigned __int8 RngBytesForNtoskrnl[1024]; | |
unsigned __int8 KdEntropy[32]; | |
}; | |
/* 1983 */ | |
struct _LOADER_PARAMETER_HYPERVISOR_EXTENSION | |
{ | |
unsigned int InitialHypervisorCrashdumpAreaPageCount; | |
unsigned int HypervisorCrashdumpAreaPageCount; | |
unsigned __int64 InitialHypervisorCrashdumpAreaSpa; | |
unsigned __int64 HypervisorCrashdumpAreaSpa; | |
unsigned __int64 HypervisorLaunchStatus; | |
unsigned __int64 HypervisorLaunchStatusArg1; | |
unsigned __int64 HypervisorLaunchStatusArg2; | |
unsigned __int64 HypervisorLaunchStatusArg3; | |
unsigned __int64 HypervisorLaunchStatusArg4; | |
}; | |
/* 1984 */ | |
struct _LOADER_BUGCHECK_PARAMETERS | |
{ | |
unsigned int BugcheckCode; | |
unsigned __int64 BugcheckParameter1; | |
unsigned __int64 BugcheckParameter2; | |
unsigned __int64 BugcheckParameter3; | |
unsigned __int64 BugcheckParameter4; | |
}; | |
/* 1985 */ | |
struct __declspec(align(8)) _OFFLINE_CRASHDUMP_CONFIGURATION_TABLE_V2 | |
{ | |
unsigned int Version; | |
unsigned int AbnormalResetOccurred; | |
unsigned int OfflineMemoryDumpCapable; | |
_LARGE_INTEGER ResetDataAddress; | |
unsigned int ResetDataSize; | |
}; | |
/* 1986 */ | |
struct __declspec(align(8)) _LOADER_PARAMETER_CI_EXTENSION | |
{ | |
unsigned int CodeIntegrityOptions; | |
unsigned __int32 UpgradeInProgress : 1; | |
unsigned __int32 IsWinPE : 1; | |
unsigned __int32 CustomKernelSignersAllowed : 1; | |
unsigned __int32 StateSeparationEnabled : 1; | |
unsigned __int32 Reserved : 28; | |
_LARGE_INTEGER WhqlEnforcementDate; | |
unsigned int RevocationListOffset; | |
unsigned int RevocationListSize; | |
unsigned int CodeIntegrityPolicyOffset; | |
unsigned int CodeIntegrityPolicySize; | |
unsigned int CodeIntegrityPolicyHashOffset; | |
unsigned int CodeIntegrityPolicyHashSize; | |
unsigned int CodeIntegrityPolicyOriginalHashOffset; | |
unsigned int CodeIntegrityPolicyOriginalHashSize; | |
int WeakCryptoPolicyLoadStatus; | |
unsigned int WeakCryptoPolicyOffset; | |
unsigned int WeakCryptoPolicySize; | |
unsigned int SecureBootPolicyOffset; | |
unsigned int SecureBootPolicySize; | |
unsigned int Reserved2; | |
unsigned __int8 SerializedData[1]; | |
}; | |
/* 1987 */ | |
struct _LOADER_HIVE_RECOVERY_INFO | |
{ | |
unsigned __int32 Recovered : 1; | |
unsigned __int32 LegacyRecovery : 1; | |
unsigned __int32 SoftRebootConflict : 1; | |
unsigned __int32 MostRecentLog : 3; | |
unsigned __int32 Spare : 27; | |
unsigned int LogNextSequence; | |
unsigned int LogMinimumSequence; | |
unsigned int LogCurrentOffset; | |
}; | |
/* 1988 */ | |
struct _LOADER_RESET_REASON | |
{ | |
unsigned __int8 Supplied; | |
union | |
{ | |
struct | |
{ | |
unsigned __int8 Pch; | |
unsigned __int8 EmbeddedController; | |
unsigned __int8 Reserved[6]; | |
} Component; | |
unsigned __int64 AsULONG64; | |
unsigned __int8 AsBytes[8]; | |
} Basic; | |
unsigned int AdditionalInfo[8]; | |
}; | |
/* 1989 */ | |
struct _VSM_PERFORMANCE_DATA | |
{ | |
unsigned __int64 LaunchVsmMark[8]; | |
}; | |
/* 1990 */ | |
struct _NUMA_MEMORY_RANGE | |
{ | |
unsigned int ProximityId; | |
unsigned __int64 BasePage; | |
unsigned __int64 EndPage; | |
}; | |
/* 1991 */ | |
struct $8A27A29B754102E40EB909B696CD4B35 | |
{ | |
unsigned __int32 LkgSupported : 1; | |
unsigned __int32 FinalBootBeforeRecovery : 1; | |
unsigned __int32 ConfigurationComparisonAttempted : 1; | |
unsigned __int32 CurrentConfigurationLoadAttempted : 1; | |
unsigned __int32 LkgConfigurationLoadAttempted : 1; | |
unsigned __int32 UsageSubscriptionLoadAttempted : 1; | |
unsigned __int32 Spare : 26; | |
}; | |
/* 1992 */ | |
struct _LOADER_FEATURE_CONFIGURATION_DIAGNOSTIC_INFORMATION | |
{ | |
unsigned __int8 OriginalBootStatus; | |
unsigned __int8 NewBootStatus; | |
unsigned __int8 ConfigurationLoaded; | |
unsigned __int8 Spare; | |
union | |
{ | |
unsigned int AllFlags; | |
$8A27A29B754102E40EB909B696CD4B35 __s1; | |
} Flags; | |
int ConfigurationComparisonStatus; | |
int CurrentConfigurationLoadStatus; | |
int LkgConfigurationLoadStatus; | |
int UsageSubscriptionLoadStatus; | |
}; | |
/* 1993 */ | |
struct _LOADER_FEATURE_CONFIGURATION_INFORMATION | |
{ | |
void *FeatureConfigurationBuffer; | |
unsigned __int64 FeatureConfigurationBufferSize; | |
void *UsageSubscriptionBuffer; | |
unsigned __int64 UsageSubscriptionBufferSize; | |
void *DelayedUsageReportBuffer; | |
unsigned __int64 DelayedUsageReportBufferSize; | |
_LOADER_FEATURE_CONFIGURATION_DIAGNOSTIC_INFORMATION DiagnosticInformation; | |
}; | |
/* 1994 */ | |
struct $5C1B8AC18B3B7AEEFF657DFE5FCD94FE | |
{ | |
unsigned __int64 DbgMenuOsSelection : 1; | |
unsigned __int64 DbgHiberBoot : 1; | |
unsigned __int64 DbgSoftRestart : 1; | |
unsigned __int64 DbgMeasuredLaunch : 1; | |
}; | |
/* 1995 */ | |
union $3A3400EE7874993614D0E4FCD9DDC7D8 | |
{ | |
unsigned __int64 BootFlags; | |
$5C1B8AC18B3B7AEEFF657DFE5FCD94FE __s1; | |
}; | |
/* 1996 */ | |
struct $2E92F7B6F2D65B16D9BAE67C1C51076A | |
{ | |
unsigned __int64 DbgUtcBootTime : 1; | |
unsigned __int64 DbgRtcBootTime : 1; | |
unsigned __int64 DbgNoLegacyServices : 1; | |
}; | |
/* 1997 */ | |
union $6E8ACC775B852F022661DEA58CAA29AD | |
{ | |
unsigned __int64 InternalBootFlags; | |
$2E92F7B6F2D65B16D9BAE67C1C51076A __s1; | |
}; | |
/* 1998 */ | |
struct _LOADER_PARAMETER_EXTENSION | |
{ | |
unsigned int Size; | |
_PROFILE_PARAMETER_BLOCK Profile; | |
void *EmInfFileImage; | |
unsigned int EmInfFileSize; | |
void *TriageDumpBlock; | |
_HEADLESS_LOADER_BLOCK *HeadlessLoaderBlock; | |
_SMBIOS3_TABLE_HEADER *SMBiosEPSHeader; | |
void *DrvDBImage; | |
unsigned int DrvDBSize; | |
void *DrvDBPatchImage; | |
unsigned int DrvDBPatchSize; | |
_NETWORK_LOADER_BLOCK *NetworkLoaderBlock; | |
_LIST_ENTRY FirmwareDescriptorListHead; | |
void *AcpiTable; | |
unsigned int AcpiTableSize; | |
unsigned __int32 LastBootSucceeded : 1; | |
unsigned __int32 LastBootShutdown : 1; | |
unsigned __int32 IoPortAccessSupported : 1; | |
unsigned __int32 BootDebuggerActive : 1; | |
unsigned __int32 StrongCodeGuarantees : 1; | |
unsigned __int32 HardStrongCodeGuarantees : 1; | |
unsigned __int32 SidSharingDisabled : 1; | |
unsigned __int32 TpmInitialized : 1; | |
unsigned __int32 VsmConfigured : 1; | |
unsigned __int32 IumEnabled : 1; | |
unsigned __int32 IsSmbboot : 1; | |
unsigned __int32 BootLogEnabled : 1; | |
unsigned __int32 DriverVerifierEnabled : 1; | |
unsigned __int32 SuppressMonitorX : 1; | |
unsigned __int32 KernelCetEnabled : 1; | |
unsigned __int32 SuppressSmap : 1; | |
unsigned __int32 Unused : 5; | |
unsigned __int32 FeatureSimulations : 6; | |
unsigned __int32 MicrocodeSelfHosting : 1; | |
unsigned __int32 XhciLegacyHandoffSkip : 1; | |
unsigned __int32 DisableInsiderOptInHVCI : 1; | |
unsigned __int32 MicrocodeMinVerSupported : 1; | |
unsigned __int32 GpuIommuEnabled : 1; | |
_LOADER_PERFORMANCE_DATA LoaderPerformanceData; | |
_LIST_ENTRY BootApplicationPersistentData; | |
void *WmdTestResult; | |
_GUID BootIdentifier; | |
unsigned int ResumePages; | |
void *DumpHeader; | |
void *BgContext; | |
void *NumaLocalityInfo; | |
void *NumaGroupAssignment; | |
_LIST_ENTRY AttachedHives; | |
unsigned int MemoryCachingRequirementsCount; | |
void *MemoryCachingRequirements; | |
_BOOT_ENTROPY_LDR_RESULT BootEntropyResult; | |
unsigned __int64 ProcessorCounterFrequency; | |
_LOADER_PARAMETER_HYPERVISOR_EXTENSION HypervisorExtension; | |
_GUID HardwareConfigurationId; | |
_LIST_ENTRY HalExtensionModuleList; | |
_LARGE_INTEGER SystemTime; | |
unsigned __int64 TimeStampAtSystemTimeRead; | |
$3A3400EE7874993614D0E4FCD9DDC7D8 ___u57; | |
$6E8ACC775B852F022661DEA58CAA29AD ___u58; | |
void *WfsFPData; | |
unsigned int WfsFPDataSize; | |
_LOADER_BUGCHECK_PARAMETERS BugcheckParameters; | |
void *ApiSetSchema; | |
unsigned int ApiSetSchemaSize; | |
_LIST_ENTRY ApiSetSchemaExtensions; | |
_UNICODE_STRING AcpiBiosVersion; | |
_UNICODE_STRING SmbiosVersion; | |
_UNICODE_STRING EfiVersion; | |
_DEBUG_DEVICE_DESCRIPTOR *KdDebugDevice; | |
_OFFLINE_CRASHDUMP_CONFIGURATION_TABLE_V2 OfflineCrashdumpConfigurationTable; | |
_UNICODE_STRING ManufacturingProfile; | |
void *BbtBuffer; | |
unsigned __int64 XsaveAllowedFeatures; | |
unsigned int XsaveFlags; | |
void *BootOptions; | |
unsigned int IumEnablement; | |
unsigned int IumPolicy; | |
int IumStatus; | |
unsigned int BootId; | |
_LOADER_PARAMETER_CI_EXTENSION *CodeIntegrityData; | |
unsigned int CodeIntegrityDataSize; | |
_LOADER_HIVE_RECOVERY_INFO SystemHiveRecoveryInfo; | |
unsigned int SoftRestartCount; | |
__int64 SoftRestartTime; | |
void *HypercallCodeVa; | |
void *HalVirtualAddress; | |
unsigned __int64 HalNumberOfBytes; | |
_LEAP_SECOND_DATA *LeapSecondData; | |
unsigned int MajorRelease; | |
unsigned int Reserved1; | |
char NtBuildLab[224]; | |
char NtBuildLabEx[224]; | |
_LOADER_RESET_REASON ResetReason; | |
unsigned int MaxPciBusNumber; | |
unsigned int FeatureSettings; | |
unsigned int HotPatchReserveSize; | |
unsigned int RetpolineReserveSize; | |
struct | |
{ | |
void *CodeBase; | |
unsigned __int64 CodeSize; | |
} MiniExecutive; | |
_VSM_PERFORMANCE_DATA VsmPerformanceData; | |
_NUMA_MEMORY_RANGE *NumaMemoryRanges; | |
unsigned int NumaMemoryRangeCount; | |
unsigned int IommuFaultPolicy; | |
_LOADER_FEATURE_CONFIGURATION_INFORMATION FeatureConfigurationInformation; | |
}; | |
/* 1999 */ | |
struct _I386_LOADER_BLOCK | |
{ | |
void *CommonDataArea; | |
unsigned int MachineType; | |
unsigned int VirtualBias; | |
}; | |
/* 2000 */ | |
struct _ARM_LOADER_BLOCK | |
{ | |
unsigned int PlaceHolder; | |
}; | |
/* 2001 */ | |
struct _VIRTUAL_EFI_RUNTIME_SERVICES | |
{ | |
unsigned __int64 GetTime; | |
unsigned __int64 SetTime; | |
unsigned __int64 GetWakeupTime; | |
unsigned __int64 SetWakeupTime; | |
unsigned __int64 SetVirtualAddressMap; | |
unsigned __int64 ConvertPointer; | |
unsigned __int64 GetVariable; | |
unsigned __int64 GetNextVariableName; | |
unsigned __int64 SetVariable; | |
unsigned __int64 GetNextHighMonotonicCount; | |
unsigned __int64 ResetSystem; | |
unsigned __int64 UpdateCapsule; | |
unsigned __int64 QueryCapsuleCapabilities; | |
unsigned __int64 QueryVariableInfo; | |
}; | |
/* 2002 */ | |
struct _EFI_FIRMWARE_INFORMATION | |
{ | |
unsigned int FirmwareVersion; | |
_VIRTUAL_EFI_RUNTIME_SERVICES *VirtualEfiRuntimeServices; | |
int SetVirtualAddressMapStatus; | |
unsigned int MissedMappingsCount; | |
_LIST_ENTRY FirmwareResourceList; | |
void *EfiMemoryMap; | |
unsigned int EfiMemoryMapSize; | |
unsigned int EfiMemoryMapDescriptorSize; | |
}; | |
/* 2003 */ | |
struct _PCAT_FIRMWARE_INFORMATION | |
{ | |
unsigned int PlaceHolder; | |
}; | |
/* 2004 */ | |
struct _FIRMWARE_INFORMATION_LOADER_BLOCK | |
{ | |
unsigned __int32 FirmwareTypeUefi : 1; | |
unsigned __int32 EfiRuntimeUseIum : 1; | |
unsigned __int32 EfiRuntimePageProtectionSupported : 1; | |
unsigned __int32 Reserved : 29; | |
union | |
{ | |
_EFI_FIRMWARE_INFORMATION EfiInformation; | |
_PCAT_FIRMWARE_INFORMATION PcatInformation; | |
} u; | |
}; | |
/* 2005 */ | |
struct _LOADER_PARAMETER_BLOCK | |
{ | |
unsigned int OsMajorVersion; | |
unsigned int OsMinorVersion; | |
unsigned int Size; | |
unsigned int OsLoaderSecurityVersion; | |
_LIST_ENTRY LoadOrderListHead; | |
_LIST_ENTRY MemoryDescriptorListHead; | |
_LIST_ENTRY BootDriverListHead; | |
_LIST_ENTRY EarlyLaunchListHead; | |
_LIST_ENTRY CoreDriverListHead; | |
_LIST_ENTRY CoreExtensionsDriverListHead; | |
_LIST_ENTRY TpmCoreDriverListHead; | |
unsigned __int64 KernelStack; | |
unsigned __int64 Prcb; | |
unsigned __int64 Process; | |
unsigned __int64 Thread; | |
unsigned int KernelStackSize; | |
unsigned int RegistryLength; | |
void *RegistryBase; | |
_CONFIGURATION_COMPONENT_DATA *ConfigurationRoot; | |
char *ArcBootDeviceName; | |
char *ArcHalDeviceName; | |
char *NtBootPathName; | |
char *NtHalPathName; | |
char *LoadOptions; | |
_NLS_DATA_BLOCK *NlsData; | |
_ARC_DISK_INFORMATION *ArcDiskInformation; | |
_LOADER_PARAMETER_EXTENSION *Extension; | |
union | |
{ | |
_I386_LOADER_BLOCK I386; | |
_ARM_LOADER_BLOCK Arm; | |
} u; | |
_FIRMWARE_INFORMATION_LOADER_BLOCK FirmwareInformation; | |
char *OsBootstatPathName; | |
char *ArcOSDataDeviceName; | |
char *ArcWindowsSysPartName; | |
}; | |
/* 2006 */ | |
struct _INTERRUPT_REMAPPING_INFO | |
{ | |
unsigned __int32 IrtIndex : 30; | |
unsigned __int32 FlagHalInternal : 1; | |
unsigned __int32 FlagTranslated : 1; | |
union | |
{ | |
struct | |
{ | |
unsigned int MessageAddressHigh; | |
unsigned int MessageAddressLow; | |
unsigned __int16 MessageData; | |
unsigned __int16 Reserved; | |
} Msi; | |
} u; | |
}; | |
/* 2007 */ | |
struct _PNP_REPLACE_PROCESSOR_LIST | |
{ | |
unsigned __int64 *Affinity; | |
unsigned int GroupCount; | |
unsigned int AllocatedCount; | |
unsigned int Count; | |
unsigned int ApicIds[1]; | |
}; | |
/* 2008 */ | |
struct _HAL_DP_REPLACE_PARAMETERS | |
{ | |
unsigned int Flags; | |
_PNP_REPLACE_PROCESSOR_LIST *TargetProcessors; | |
_PNP_REPLACE_PROCESSOR_LIST *SpareProcessors; | |
}; | |
/* 2009 */ | |
struct __declspec(align(8)) _HAL_LOG_REGISTER_CONTEXT | |
{ | |
void (__fastcall *LogRoutine)(unsigned int, void *, unsigned int); | |
unsigned int Flag; | |
}; | |
/* 2010 */ | |
struct _INTERRUPT_HT_INTR_INFO | |
{ | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 Mask : 1; | |
unsigned __int32 Polarity : 1; | |
unsigned __int32 MessageType : 3; | |
unsigned __int32 RequestEOI : 1; | |
unsigned __int32 DestinationMode : 1; | |
unsigned __int32 MessageType3 : 1; | |
unsigned __int32 Destination : 8; | |
unsigned __int32 Vector : 8; | |
unsigned __int32 ExtendedAddress : 8; | |
} bits; | |
unsigned int AsULONG; | |
} LowPart; | |
union | |
{ | |
struct | |
{ | |
unsigned __int32 ExtendedDestination : 24; | |
unsigned __int32 Reserved : 6; | |
unsigned __int32 PassPW : 1; | |
unsigned __int32 WaitingForEOI : 1; | |
} bits; | |
unsigned int AsULONG; | |
} HighPart; | |
}; | |
/* 2011 */ | |
union $46A178D5596A4DB3C9D9B61B1BE3A9F6 | |
{ | |
struct __declspec(align(8)) | |
{ | |
_LARGE_INTEGER Address; | |
unsigned int DataPayload; | |
} XapicMessage; | |
struct | |
{ | |
_INTERRUPT_HT_INTR_INFO IntrInfo; | |
} Hypertransport; | |
struct __declspec(align(8)) | |
{ | |
_LARGE_INTEGER Address; | |
unsigned int DataPayload; | |
} GenericMessage; | |
struct | |
{ | |
HAL_APIC_DESTINATION_MODE DestinationMode; | |
} MessageRequest; | |
}; | |
/* 2012 */ | |
struct _INTERRUPT_VECTOR_DATA | |
{ | |
INTERRUPT_CONNECTION_TYPE Type; | |
unsigned int Vector; | |
unsigned __int8 Irql; | |
_KINTERRUPT_POLARITY Polarity; | |
_KINTERRUPT_MODE Mode; | |
_GROUP_AFFINITY TargetProcessors; | |
_INTERRUPT_REMAPPING_INFO IntRemapInfo; | |
struct | |
{ | |
unsigned int Gsiv; | |
unsigned __int32 WakeInterrupt : 1; | |
unsigned __int32 ReservedFlags : 31; | |
} ControllerInput; | |
unsigned __int64 HvDeviceId; | |
$46A178D5596A4DB3C9D9B61B1BE3A9F6 ___u9; | |
}; | |
/* 2013 */ | |
union $EC315ABD7E20D5AEB7A0A78C20A034E6 | |
{ | |
struct | |
{ | |
unsigned __int8 Bus; | |
unsigned __int8 Device; | |
unsigned __int8 Function; | |
unsigned __int8 Reserved; | |
} DeviceRid; | |
struct | |
{ | |
unsigned __int8 Bus; | |
unsigned __int8 Device; | |
unsigned __int8 Function; | |
unsigned __int8 Reserved; | |
} BridgeRid; | |
struct | |
{ | |
unsigned __int8 SecondaryBus; | |
unsigned __int8 SubordinateBus; | |
} MultipleBridges; | |
}; | |
/* 2014 */ | |
struct _PCI_BUSMASTER_DESCRIPTOR | |
{ | |
_PCI_BUSMASTER_RID_TYPE Type; | |
unsigned int Segment; | |
$EC315ABD7E20D5AEB7A0A78C20A034E6 ___u2; | |
}; | |
/* 2015 */ | |
struct $CD994C3FF3E5D4DE5EC82411FC2DA76F | |
{ | |
unsigned __int16 SecondaryInterrupt : 1; | |
unsigned __int16 Reserved : 15; | |
}; | |
/* 2016 */ | |
union _HAL_UNMASKED_INTERRUPT_FLAGS | |
{ | |
$CD994C3FF3E5D4DE5EC82411FC2DA76F __s0; | |
unsigned __int16 AsUSHORT; | |
}; | |
/* 2017 */ | |
struct _HAL_UNMASKED_INTERRUPT_INFORMATION | |
{ | |
unsigned __int16 Version; | |
unsigned __int16 Size; | |
_HAL_UNMASKED_INTERRUPT_FLAGS Flags; | |
_KINTERRUPT_MODE Mode; | |
_KINTERRUPT_POLARITY Polarity; | |
unsigned int Gsiv; | |
unsigned __int16 PinNumber; | |
void *DeviceHandle; | |
}; | |
/* 2018 */ | |
struct $9405DB8AEE5CB251F86252A36E83EF7E | |
{ | |
unsigned __int8 AlwaysOnTimer : 1; | |
unsigned __int8 HighLatency : 1; | |
unsigned __int8 PerCpuTimer : 1; | |
unsigned __int8 DynamicTickSupported : 1; | |
}; | |
/* 2019 */ | |
union $8A16D55AC7BAD3B0521A94F380E98D29 | |
{ | |
unsigned __int8 Flags; | |
$9405DB8AEE5CB251F86252A36E83EF7E __s1; | |
}; | |
/* 2020 */ | |
struct __declspec(align(8)) _HAL_CLOCK_TIMER_CONFIGURATION | |
{ | |
$8A16D55AC7BAD3B0521A94F380E98D29 ___u0; | |
unsigned int KnownType; | |
unsigned int Capabilities; | |
unsigned __int64 MaxIncrement; | |
unsigned int MinIncrement; | |
}; | |
/* 2021 */ | |
struct $49ADA9DBE6521F901902FE3B2C51D668 | |
{ | |
unsigned __int32 AtsCapability : 1; | |
unsigned __int32 PriCapability : 1; | |
unsigned __int32 PasidCapability : 1; | |
}; | |
/* 2022 */ | |
struct $6CD8A9C2D6B59BA4BDD93C151EC8C92A | |
{ | |
unsigned int AsULONG; | |
struct | |
{ | |
unsigned __int32 PasidMaxWidth : 5; | |
unsigned __int32 PasidExePerm : 1; | |
unsigned __int32 PasidPrivMode : 1; | |
unsigned __int32 AtsPageAlignedRequest : 1; | |
unsigned __int32 AtsGlobalInvalidate : 1; | |
unsigned __int32 AtsInvalidateQueueDepth : 5; | |
} CapReg; | |
unsigned __int32 Rsvd : 15; | |
}; | |
/* 2023 */ | |
union _IOMMU_SVM_CAPABILITIES | |
{ | |
$49ADA9DBE6521F901902FE3B2C51D668 __s0; | |
$6CD8A9C2D6B59BA4BDD93C151EC8C92A __s1; | |
}; | |
/* 2024 */ | |
struct _HAL_IOMMU_DISPATCH | |
{ | |
unsigned __int8 (__fastcall *HalIommuSupportEnabled)(); | |
int (__fastcall *HalIommuGetConfiguration)(unsigned int, unsigned int *, unsigned int *, void **); | |
int (__fastcall *HalIommuGetLibraryContext)(unsigned int, unsigned int, void **); | |
int (__fastcall *HalIommuMapDevice)(void *, _EXT_IOMMU_DEVICE_ID *, _IOMMU_SVM_CAPABILITIES *, void **); | |
int (__fastcall *HalIommuEnableDevicePasid)(void *, void *); | |
int (__fastcall *HalIommuSetAddressSpace)(void *, unsigned __int64); | |
int (__fastcall *HalIommuDisableDevicePasid)(void *, void *); | |
int (__fastcall *HalIommuUnmapDevice)(void *, void *); | |
int (__fastcall *HalIommuFreeLibraryContext)(void *); | |
void (__fastcall *HalIommuFlushTb)(void *, unsigned int, _KTB_FLUSH_VA *); | |
void (__fastcall *HalIommuFlushAllPasid)(void *, unsigned int, _KTB_FLUSH_VA *); | |
unsigned __int8 (__fastcall *HalIommuProcessPageRequestQueue)(unsigned int); | |
void (__fastcall *HalIommuFaultRoutine)(unsigned int); | |
void *(__fastcall *HalIommuReferenceAsid)(unsigned int); | |
void (__fastcall *HalIommuDereferenceAsid)(unsigned int); | |
int (__fastcall *HalIommuServicePageFault)(unsigned __int64, void *, unsigned int); | |
int (__fastcall *HalIommuDevicePowerChange)(void *, void *, unsigned __int8); | |
int (__fastcall *HalIommuBeginDeviceReset)(void *, unsigned int *); | |
int (__fastcall *HalIommuFinalizeDeviceReset)(void *); | |
}; | |
/* 2027 */ | |
struct _ISRDPCSTATS_SEQUENCE | |
{ | |
unsigned int SequenceNumber; | |
unsigned __int64 IsrTime; | |
unsigned __int64 IsrCount; | |
unsigned __int64 DpcTime; | |
unsigned __int64 DpcCount; | |
}; | |
/* 2028 */ | |
struct _ISRDPCSTATS | |
{ | |
unsigned __int64 IsrTime; | |
unsigned __int64 IsrTimeStart; | |
unsigned __int64 IsrCount; | |
unsigned __int64 DpcTime; | |
unsigned __int64 DpcTimeStart; | |
unsigned __int64 DpcCount; | |
unsigned __int8 IsrActive; | |
unsigned __int8 Reserved[7]; | |
_ISRDPCSTATS_SEQUENCE DpcWatchdog; | |
}; | |
/* 2025 */ | |
struct _KINTERRUPT | |
{ | |
__int16 Type; | |
__int16 Size; | |
_LIST_ENTRY InterruptListEntry; | |
unsigned __int8 (__fastcall *ServiceRoutine)(_KINTERRUPT *, void *); | |
unsigned __int8 (__fastcall *MessageServiceRoutine)(_KINTERRUPT *, void *, unsigned int); | |
unsigned int MessageIndex; | |
void *ServiceContext; | |
unsigned __int64 SpinLock; | |
unsigned int TickCount; | |
unsigned __int64 *ActualLock; | |
void (__fastcall *DispatchAddress)(); | |
unsigned int Vector; | |
unsigned __int8 Irql; | |
unsigned __int8 SynchronizeIrql; | |
unsigned __int8 FloatingSave; | |
unsigned __int8 Connected; | |
unsigned int Number; | |
unsigned __int8 ShareVector; | |
unsigned __int8 EmulateActiveBoth; | |
unsigned __int16 ActiveCount; | |
int InternalState; | |
_KINTERRUPT_MODE Mode; | |
_KINTERRUPT_POLARITY Polarity; | |
unsigned int ServiceCount; | |
unsigned int DispatchCount; | |
_KEVENT *PassiveEvent; | |
_KTRAP_FRAME *TrapFrame; | |
void *DisconnectData; | |
_KTHREAD *volatile ServiceThread; | |
_INTERRUPT_CONNECTION_DATA *ConnectionData; | |
void *IntTrackEntry; | |
_ISRDPCSTATS IsrDpcStats; | |
void *RedirectObject; | |
void *PhysicalDeviceObject; | |
}; | |
/* 2026 */ | |
struct _INTERRUPT_CONNECTION_DATA | |
{ | |
unsigned int Count; | |
_INTERRUPT_VECTOR_DATA Vectors[1]; | |
}; | |
/* 2029 */ | |
struct _HAL_LBR_ENTRY | |
{ | |
void *FromAddress; | |
void *ToAddress; | |
void *Reserved; | |
}; | |
/* 2030 */ | |
struct _INPUT_MAPPING_ELEMENT | |
{ | |
unsigned int InputMappingId; | |
}; | |
/* 2031 */ | |
struct _FAULT_INFORMATION_ARM64_FLAGS | |
{ | |
unsigned __int32 WriteNotRead : 1; | |
unsigned __int32 InstructionNotData : 1; | |
unsigned __int32 Privileged : 1; | |
unsigned __int32 FaultAddressValid : 1; | |
unsigned __int32 Reserved : 28; | |
}; | |
/* 2032 */ | |
struct _FAULT_INFORMATION_ARM64 | |
{ | |
void *DomainHandle; | |
void *FaultAddress; | |
_DEVICE_OBJECT *PhysicalDeviceObject; | |
unsigned int InputMappingId; | |
_FAULT_INFORMATION_ARM64_FLAGS Flags; | |
_FAULT_INFORMATION_ARM64_TYPE Type; | |
unsigned __int64 IommuBaseAddress; | |
}; | |
/* 2033 */ | |
struct _FAULT_INFORMATION_X64_FLAGS | |
{ | |
unsigned __int32 FaultAddressValid : 1; | |
unsigned __int32 Reserved : 31; | |
}; | |
/* 2034 */ | |
struct __declspec(align(8)) _FAULT_INFORMATION_X64 | |
{ | |
void *DomainHandle; | |
void *FaultAddress; | |
_FAULT_INFORMATION_X64_FLAGS Flags; | |
_FAULT_INFORMATION_ARM64_TYPE Type; | |
unsigned __int64 IommuBaseAddress; | |
unsigned int PciSegment; | |
}; | |
/* 2035 */ | |
union $621EDE3EA62729B6D15088689BDB97F0 | |
{ | |
_FAULT_INFORMATION_ARM64 Arm64; | |
_FAULT_INFORMATION_X64 X64; | |
}; | |
/* 2036 */ | |
struct _FAULT_INFORMATION | |
{ | |
_FAULT_INFORMATION_ARCH Type; | |
unsigned __int8 IsStage1; | |
$621EDE3EA62729B6D15088689BDB97F0 ___u2; | |
}; | |
/* 2037 */ | |
struct _DEVICE_FAULT_CONFIGURATION | |
{ | |
void (__fastcall *FaultHandler)(void *, _FAULT_INFORMATION *); | |
void *FaultContext; | |
}; | |
/* 2038 */ | |
struct __declspec(align(8)) _DOMAIN_CONFIGURATION_ARM64 | |
{ | |
_LARGE_INTEGER Ttbr0; | |
_LARGE_INTEGER Ttbr1; | |
unsigned int Mair0; | |
unsigned int Mair1; | |
unsigned __int8 InputSize0; | |
unsigned __int8 InputSize1; | |
unsigned __int8 CoherentTableWalks; | |
unsigned __int8 TranslationEnabled; | |
}; | |
/* 2039 */ | |
struct _DOMAIN_CONFIGURATION | |
{ | |
_DOMAIN_CONFIGURATION_ARCH Type; | |
_DOMAIN_CONFIGURATION_ARM64 Arm64; | |
}; | |
/* 2040 */ | |
struct _DMA_IOMMU_INTERFACE | |
{ | |
unsigned int Version; | |
int (__fastcall *CreateDomain)(unsigned __int8, struct _IOMMU_DMA_DOMAIN **); | |
int (__fastcall *DeleteDomain)(struct _IOMMU_DMA_DOMAIN *); | |
int (__fastcall *AttachDevice)(struct _IOMMU_DMA_DOMAIN *, _DEVICE_OBJECT *, unsigned int, unsigned int); | |
int (__fastcall *DetachDevice)(struct _IOMMU_DMA_DOMAIN *, _DEVICE_OBJECT *, unsigned int); | |
int (__fastcall *FlushDomain)(struct _IOMMU_DMA_DOMAIN *); | |
int (__fastcall *FlushDomainByVaList)(struct _IOMMU_DMA_DOMAIN *, unsigned __int8, unsigned int, void *); | |
int (__fastcall *QueryInputMappings)(_DEVICE_OBJECT *, _INPUT_MAPPING_ELEMENT *, unsigned int, unsigned int *); | |
int (__fastcall *MapLogicalRange)(struct _IOMMU_DMA_DOMAIN *, unsigned int, _MDL *, unsigned __int64); | |
int (__fastcall *UnmapLogicalRange)(struct _IOMMU_DMA_DOMAIN *, unsigned __int64, unsigned __int64); | |
int (__fastcall *MapIdentityRange)(struct _IOMMU_DMA_DOMAIN *, unsigned int, _MDL *); | |
int (__fastcall *UnmapIdentityRange)(struct _IOMMU_DMA_DOMAIN *, _MDL *); | |
int (__fastcall *SetDeviceFaultReporting)(_DEVICE_OBJECT *, unsigned int, unsigned __int8, _DEVICE_FAULT_CONFIGURATION *); | |
int (__fastcall *ConfigureDomain)(struct _IOMMU_DMA_DOMAIN *, _DOMAIN_CONFIGURATION *); | |
}; | |
/* 2041 */ | |
struct _HIDDEN_PROCESSOR_POWER_INTERFACE | |
{ | |
unsigned int Version; | |
int (__fastcall *ReadPerfMsr)(unsigned int, unsigned int, unsigned __int64 *); | |
int (__fastcall *WritePerfMsr)(unsigned int, unsigned int, unsigned __int64, unsigned __int64); | |
int (__fastcall *ReadPerfIoPort)(unsigned int, unsigned __int16, unsigned __int16, unsigned int *); | |
int (__fastcall *WritePerfIoPort)(unsigned int, unsigned __int16, unsigned __int16, unsigned int, unsigned int); | |
}; | |
/* 2042 */ | |
struct HAL_PRIVATE_DISPATCH | |
{ | |
unsigned int Version; | |
_BUS_HANDLER *(__fastcall *HalHandlerForBus)(_INTERFACE_TYPE, unsigned int); | |
_BUS_HANDLER *(__fastcall *HalHandlerForConfigSpace)(_BUS_DATA_TYPE, unsigned int); | |
void (__fastcall *HalLocateHiberRanges)(void *); | |
int (__fastcall *HalRegisterBusHandler)(_INTERFACE_TYPE, _BUS_DATA_TYPE, unsigned int, _INTERFACE_TYPE, unsigned int, unsigned int, int (__fastcall *)(_BUS_HANDLER *), _BUS_HANDLER **); | |
void (__fastcall *HalSetWakeEnable)(unsigned __int8); | |
int (__fastcall *HalSetWakeAlarm)(unsigned __int64, unsigned __int64); | |
unsigned __int8 (__fastcall *HalPciTranslateBusAddress)(_INTERFACE_TYPE, unsigned int, _LARGE_INTEGER, unsigned int *, _LARGE_INTEGER *); | |
int (__fastcall *HalPciAssignSlotResources)(_UNICODE_STRING *, _UNICODE_STRING *, _DRIVER_OBJECT *, _DEVICE_OBJECT *, _INTERFACE_TYPE, unsigned int, unsigned int, _CM_RESOURCE_LIST **); | |
void (__fastcall *HalHaltSystem)(); | |
unsigned __int8 (__fastcall *HalFindBusAddressTranslation)(_LARGE_INTEGER, unsigned int *, _LARGE_INTEGER *, unsigned __int64 *, unsigned __int8); | |
unsigned __int8 (__fastcall *HalResetDisplay)(); | |
int (__fastcall *HalAllocateMapRegisters)(_ADAPTER_OBJECT *, unsigned int, unsigned int, _MAP_REGISTER_ENTRY *); | |
int (__fastcall *KdSetupPciDeviceForDebugging)(void *, _DEBUG_DEVICE_DESCRIPTOR *); | |
int (__fastcall *KdReleasePciDeviceForDebugging)(_DEBUG_DEVICE_DESCRIPTOR *); | |
void *(__fastcall *KdGetAcpiTablePhase0)(_LOADER_PARAMETER_BLOCK *, unsigned int); | |
void (__fastcall *KdCheckPowerButton)(); | |
unsigned __int8 (__fastcall *HalVectorToIDTEntry)(unsigned int); | |
void *(__fastcall *KdMapPhysicalMemory64)(_LARGE_INTEGER, unsigned int, unsigned __int8); | |
void (__fastcall *KdUnmapVirtualAddress)(void *, unsigned int, unsigned __int8); | |
unsigned int (__fastcall *KdGetPciDataByOffset)(unsigned int, unsigned int, void *, unsigned int, unsigned int); | |
unsigned int (__fastcall *KdSetPciDataByOffset)(unsigned int, unsigned int, void *, unsigned int, unsigned int); | |
unsigned int (__fastcall *HalGetInterruptVectorOverride)(_INTERFACE_TYPE, unsigned int, unsigned int, unsigned int, unsigned __int8 *, unsigned __int64 *); | |
int (__fastcall *HalGetVectorInputOverride)(unsigned int, _GROUP_AFFINITY *, unsigned int *, _KINTERRUPT_POLARITY *, _INTERRUPT_REMAPPING_INFO *); | |
int (__fastcall *HalLoadMicrocode)(void *); | |
int (__fastcall *HalUnloadMicrocode)(); | |
int (__fastcall *HalPostMicrocodeUpdate)(); | |
int (__fastcall *HalAllocateMessageTargetOverride)(_DEVICE_OBJECT *, _GROUP_AFFINITY *, unsigned int, _KINTERRUPT_MODE, unsigned __int8, unsigned int *, unsigned __int8 *, unsigned int *); | |
void (__fastcall *HalFreeMessageTargetOverride)(_DEVICE_OBJECT *, unsigned int, _GROUP_AFFINITY *); | |
int (__fastcall *HalDpReplaceBegin)(_HAL_DP_REPLACE_PARAMETERS *, void **); | |
void (__fastcall *HalDpReplaceTarget)(void *); | |
int (__fastcall *HalDpReplaceControl)(unsigned int, void *); | |
void (__fastcall *HalDpReplaceEnd)(void *); | |
void (__fastcall *HalPrepareForBugcheck)(unsigned int); | |
unsigned __int8 (__fastcall *HalQueryWakeTime)(unsigned __int64 *, unsigned __int64 *); | |
void (__fastcall *HalReportIdleStateUsage)(unsigned __int8, _KAFFINITY_EX *); | |
void (__fastcall *HalTscSynchronization)(unsigned __int8, unsigned int *); | |
int (__fastcall *HalWheaInitProcessorGenericSection)(_WHEA_ERROR_RECORD_SECTION_DESCRIPTOR *, _WHEA_PROCESSOR_GENERIC_ERROR_SECTION *); | |
void (__fastcall *HalStopLegacyUsbInterrupts)(_SYSTEM_POWER_STATE); | |
int (__fastcall *HalReadWheaPhysicalMemory)(_LARGE_INTEGER, unsigned int, void *); | |
int (__fastcall *HalWriteWheaPhysicalMemory)(_LARGE_INTEGER, unsigned int, void *); | |
int (__fastcall *HalDpMaskLevelTriggeredInterrupts)(); | |
int (__fastcall *HalDpUnmaskLevelTriggeredInterrupts)(); | |
int (__fastcall *HalDpGetInterruptReplayState)(void *, void **); | |
int (__fastcall *HalDpReplayInterrupts)(void *); | |
unsigned __int8 (__fastcall *HalQueryIoPortAccessSupported)(); | |
int (__fastcall *KdSetupIntegratedDeviceForDebugging)(void *, _DEBUG_DEVICE_DESCRIPTOR *); | |
int (__fastcall *KdReleaseIntegratedDeviceForDebugging)(_DEBUG_DEVICE_DESCRIPTOR *); | |
void (__fastcall *HalGetEnlightenmentInformation)(_HAL_INTEL_ENLIGHTENMENT_INFORMATION *); | |
void *(__fastcall *HalAllocateEarlyPages)(_LOADER_PARAMETER_BLOCK *, unsigned int, unsigned __int64 *, unsigned int); | |
void *(__fastcall *HalMapEarlyPages)(unsigned __int64, unsigned int, unsigned int); | |
void *Dummy1; | |
void *Dummy2; | |
void (__fastcall *HalNotifyProcessorFreeze)(unsigned __int8, unsigned __int8); | |
int (__fastcall *HalPrepareProcessorForIdle)(unsigned int); | |
void (__fastcall *HalRegisterLogRoutine)(_HAL_LOG_REGISTER_CONTEXT *); | |
void (__fastcall *HalResumeProcessorFromIdle)(); | |
void *Dummy; | |
unsigned int (__fastcall *HalVectorToIDTEntryEx)(unsigned int); | |
int (__fastcall *HalSecondaryInterruptQueryPrimaryInformation)(_INTERRUPT_VECTOR_DATA *, unsigned int *); | |
int (__fastcall *HalMaskInterrupt)(unsigned int, unsigned int); | |
int (__fastcall *HalUnmaskInterrupt)(unsigned int, unsigned int); | |
unsigned __int8 (__fastcall *HalIsInterruptTypeSecondary)(unsigned int, unsigned int); | |
int (__fastcall *HalAllocateGsivForSecondaryInterrupt)(char *, unsigned __int16, unsigned int *); | |
int (__fastcall *HalAddInterruptRemapping)(unsigned int, unsigned int, _PCI_BUSMASTER_DESCRIPTOR *, unsigned __int8, _INTERRUPT_VECTOR_DATA *, unsigned int); | |
void (__fastcall *HalRemoveInterruptRemapping)(unsigned int, unsigned int, _PCI_BUSMASTER_DESCRIPTOR *, unsigned __int8, _INTERRUPT_VECTOR_DATA *, unsigned int); | |
void (__fastcall *HalSaveAndDisableHvEnlightenment)(); | |
void (__fastcall *HalRestoreHvEnlightenment)(); | |
void (__fastcall *HalFlushIoBuffersExternalCache)(_MDL *, unsigned __int8); | |
void (__fastcall *HalFlushExternalCache)(unsigned __int8); | |
int (__fastcall *HalPciEarlyRestore)(_SYSTEM_POWER_STATE); | |
int (__fastcall *HalGetProcessorId)(unsigned int, unsigned int *, unsigned int *); | |
int (__fastcall *HalAllocatePmcCounterSet)(unsigned int, _KPROFILE_SOURCE *, unsigned int, struct _HAL_PMC_COUNTERS **); | |
void (__fastcall *HalCollectPmcCounters)(struct _HAL_PMC_COUNTERS *, unsigned __int64 *); | |
void (__fastcall *HalFreePmcCounterSet)(struct _HAL_PMC_COUNTERS *); | |
int (__fastcall *HalProcessorHalt)(unsigned int, void *, int (__fastcall *)(void *)); | |
unsigned __int64 (__fastcall *HalTimerQueryCycleCounter)(unsigned __int64 *); | |
void *Dummy3; | |
void (__fastcall *HalPciMarkHiberPhase)(); | |
int (__fastcall *HalQueryProcessorRestartEntryPoint)(_LARGE_INTEGER *); | |
int (__fastcall *HalRequestInterrupt)(unsigned int); | |
int (__fastcall *HalEnumerateUnmaskedInterrupts)(unsigned __int8 (__fastcall *)(void *, _HAL_UNMASKED_INTERRUPT_INFORMATION *), void *, _HAL_UNMASKED_INTERRUPT_INFORMATION *); | |
void (__fastcall *HalFlushAndInvalidatePageExternalCache)(_LARGE_INTEGER); | |
int (__fastcall *KdEnumerateDebuggingDevices)(void *, _DEBUG_DEVICE_DESCRIPTOR *, KD_CALLBACK_ACTION (__fastcall *)(_DEBUG_DEVICE_DESCRIPTOR *)); | |
void (__fastcall *HalFlushIoRectangleExternalCache)(_MDL *, unsigned int, unsigned int, unsigned int, unsigned int, unsigned __int8); | |
void (__fastcall *HalPowerEarlyRestore)(unsigned int); | |
int (__fastcall *HalQueryCapsuleCapabilities)(void *, unsigned int, unsigned __int64 *, unsigned int *); | |
int (__fastcall *HalUpdateCapsule)(void *, unsigned int, _LARGE_INTEGER); | |
unsigned __int8 (__fastcall *HalPciMultiStageResumeCapable)(); | |
void (__fastcall *HalDmaFreeCrashDumpRegisters)(unsigned int); | |
unsigned __int8 (__fastcall *HalAcpiAoacCapable)(); | |
int (__fastcall *HalInterruptSetDestination)(_INTERRUPT_VECTOR_DATA *, _GROUP_AFFINITY *, unsigned int *); | |
void (__fastcall *HalGetClockConfiguration)(_HAL_CLOCK_TIMER_CONFIGURATION *); | |
void (__fastcall *HalClockTimerActivate)(unsigned __int8); | |
void (__fastcall *HalClockTimerInitialize)(); | |
void (__fastcall *HalClockTimerStop)(); | |
int (__fastcall *HalClockTimerArm)(_HAL_CLOCK_TIMER_MODE, unsigned __int64, unsigned __int64 *); | |
unsigned __int8 (__fastcall *HalTimerOnlyClockInterruptPending)(); | |
void *(__fastcall *HalAcpiGetMultiNode)(); | |
void (__fastcall *(__fastcall *HalPowerSetRebootHandler)(void (__fastcall *)(unsigned int, volatile int *)))(unsigned int, volatile int *); | |
void (__fastcall *HalIommuRegisterDispatchTable)(_HAL_IOMMU_DISPATCH *); | |
void (__fastcall *HalTimerWatchdogStart)(); | |
void (__fastcall *HalTimerWatchdogResetCountdown)(); | |
void (__fastcall *HalTimerWatchdogStop)(); | |
unsigned __int8 (__fastcall *HalTimerWatchdogGeneratedLastReset)(); | |
int (__fastcall *HalTimerWatchdogTriggerSystemReset)(unsigned __int8); | |
int (__fastcall *HalInterruptVectorDataToGsiv)(_INTERRUPT_VECTOR_DATA *, unsigned int *); | |
int (__fastcall *HalInterruptGetHighestPriorityInterrupt)(unsigned int *, unsigned __int8 *); | |
int (__fastcall *HalProcessorOn)(unsigned int); | |
int (__fastcall *HalProcessorOff)(); | |
int (__fastcall *HalProcessorFreeze)(); | |
int (__fastcall *HalDmaLinkDeviceObjectByToken)(unsigned __int64, _DEVICE_OBJECT *); | |
int (__fastcall *HalDmaCheckAdapterToken)(unsigned __int64); | |
void *Dummy4; | |
int (__fastcall *HalTimerConvertPerformanceCounterToAuxiliaryCounter)(unsigned __int64, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *HalTimerConvertAuxiliaryCounterToPerformanceCounter)(unsigned __int64, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *HalTimerQueryAuxiliaryCounterFrequency)(unsigned __int64 *); | |
int (__fastcall *HalConnectThermalInterrupt)(unsigned __int8 (__fastcall *)(_KINTERRUPT *, void *)); | |
unsigned __int8 (__fastcall *HalIsEFIRuntimeActive)(); | |
unsigned __int8 (__fastcall *HalTimerQueryAndResetRtcErrors)(unsigned __int8); | |
void (__fastcall *HalAcpiLateRestore)(); | |
int (__fastcall *KdWatchdogDelayExpiration)(unsigned __int64 *); | |
int (__fastcall *HalGetProcessorStats)(_HAL_PROCESSOR_STAT_TYPE, unsigned int, unsigned int, unsigned __int64 *); | |
unsigned __int64 (__fastcall *HalTimerWatchdogQueryDueTime)(unsigned __int8); | |
int (__fastcall *HalConnectSyntheticInterrupt)(unsigned __int8 (__fastcall *)(_KINTERRUPT *, void *)); | |
void (__fastcall *HalPreprocessNmi)(unsigned int); | |
int (__fastcall *HalEnumerateEnvironmentVariablesWithFilter)(unsigned int, unsigned __int8 (__fastcall *)(const _GUID *, const wchar_t *), void *, unsigned int *); | |
int (__fastcall *HalCaptureLastBranchRecordStack)(unsigned int, _HAL_LBR_ENTRY *, unsigned int *); | |
unsigned __int8 (__fastcall *HalClearLastBranchRecordStack)(); | |
int (__fastcall *HalConfigureLastBranchRecord)(unsigned int, unsigned int); | |
unsigned __int8 (__fastcall *HalGetLastBranchInformation)(unsigned int *, unsigned int *); | |
void (__fastcall *HalResumeLastBranchRecord)(unsigned __int8); | |
int (__fastcall *HalStartLastBranchRecord)(unsigned int, unsigned int *); | |
int (__fastcall *HalStopLastBranchRecord)(unsigned int); | |
int (__fastcall *HalIommuBlockDevice)(void *); | |
int (__fastcall *HalIommuUnblockDevice)(_EXT_IOMMU_DEVICE_ID *, void **); | |
int (__fastcall *HalGetIommuInterface)(unsigned int, _DMA_IOMMU_INTERFACE *); | |
int (__fastcall *HalRequestGenericErrorRecovery)(void *, unsigned int *); | |
int (__fastcall *HalTimerQueryHostPerformanceCounter)(unsigned __int64 *); | |
int (__fastcall *HalTopologyQueryProcessorRelationships)(unsigned int, unsigned int, unsigned __int8 *, unsigned __int8 *, unsigned __int8 *, unsigned int *, unsigned int *); | |
void (__fastcall *HalInitPlatformDebugTriggers)(); | |
void (__fastcall *HalRunPlatformDebugTriggers)(unsigned __int8); | |
void *(__fastcall *HalTimerGetReferencePage)(); | |
int (__fastcall *HalGetHiddenProcessorPowerInterface)(_HIDDEN_PROCESSOR_POWER_INTERFACE *); | |
unsigned int (__fastcall *HalGetHiddenProcessorPackageId)(unsigned int); | |
unsigned int (__fastcall *HalGetHiddenPackageProcessorCount)(unsigned int); | |
int (__fastcall *HalGetHiddenProcessorApicIdByIndex)(unsigned int, unsigned int *); | |
int (__fastcall *HalRegisterHiddenProcessorIdleState)(unsigned int, unsigned __int64); | |
void (__fastcall *HalIommuReportIommuFault)(unsigned __int64, _FAULT_INFORMATION *); | |
unsigned __int8 (__fastcall *HalIommuDmaRemappingCapable)(_EXT_IOMMU_DEVICE_ID *, unsigned int *); | |
}; | |
/* 2043 */ | |
struct _MI_ACCESS_VIOLATION_RANGE | |
{ | |
_RTL_BALANCED_NODE Node; | |
void *Va; | |
void *EndVaInclusive; | |
}; | |
/* 2044 */ | |
struct _MI_POOL_STATE | |
{ | |
unsigned __int64 MaximumNonPagedPoolThreshold; | |
volatile unsigned __int64 AllocatedNonPagedPool; | |
volatile unsigned __int64 AllocatedSecureNonPagedPool; | |
_SINGLE_LIST_ENTRY BadPoolHead; | |
unsigned int HighEventSets; | |
unsigned __int8 HighEventSetsValid; | |
unsigned __int64 LowPagedPoolThreshold; | |
unsigned __int64 HighPagedPoolThreshold; | |
volatile int PermittedFaultsLock; | |
_RTL_AVL_TREE PermittedFaultsTree; | |
_MI_ACCESS_VIOLATION_RANGE PermittedFaultsInitialNode[2]; | |
unsigned __int64 TotalPagedPoolQuota; | |
unsigned __int64 TotalNonPagedPoolQuota; | |
}; | |
/* 2045 */ | |
struct _MSUBSECTION | |
{ | |
_SUBSECTION Core; | |
_RTL_BALANCED_NODE SubsectionNode; | |
_LIST_ENTRY DereferenceList; | |
unsigned __int64 NumberOfMappedViews; | |
unsigned int NumberOfPfnReferences; | |
unsigned int LargeViews; | |
_MI_PROTOTYPE_PTES_NODE ProtosNode; | |
}; | |
/* 2046 */ | |
struct _MI_EXTENT_DELETION_WAIT_BLOCK | |
{ | |
_MI_EXTENT_DELETION_WAIT_BLOCK *Next; | |
_KGATE Gate; | |
}; | |
/* 2047 */ | |
struct _MI_DLL_OVERFLOW_AREA | |
{ | |
void *RangeStart; | |
void *NextVa; | |
void *RangeStartAbove2gb; | |
void *NextVaAbove2gb; | |
}; | |
/* 2048 */ | |
struct $00A1D302B2FF13A5D590EA2BB44B21E6 | |
{ | |
unsigned __int64 RemoteImageFileObject : 1; | |
unsigned __int64 RemoteDataFileObject : 1; | |
}; | |
/* 2049 */ | |
struct _SECTION | |
{ | |
_RTL_BALANCED_NODE SectionNode; | |
unsigned __int64 StartingVpn; | |
unsigned __int64 EndingVpn; | |
union | |
{ | |
_CONTROL_AREA *ControlArea; | |
_FILE_OBJECT *FileObject; | |
$00A1D302B2FF13A5D590EA2BB44B21E6 __s2; | |
} u1; | |
unsigned __int64 SizeOfSection; | |
union | |
{ | |
unsigned int LongFlags; | |
_MMSECTION_FLAGS Flags; | |
} u; | |
unsigned __int32 InitialPageProtection : 12; | |
unsigned __int32 SessionId : 19; | |
unsigned __int32 NoValidationNeeded : 1; | |
}; | |
/* 2050 */ | |
struct _MI_SECTION_WOW_STATE | |
{ | |
_RTL_BITMAP_EX ImageBitMap; | |
_MI_DLL_OVERFLOW_AREA OverflowArea; | |
_SECTION *CfgBitMapSection; | |
_CONTROL_AREA *CfgBitMapControlArea; | |
}; | |
/* 2051 */ | |
struct _RTL_RETPOLINE_ROUTINES | |
{ | |
unsigned int UnwindDataOffset; | |
unsigned int SwitchtableJump[16]; | |
unsigned int CfgIndirectRax; | |
unsigned int NonCfgIndirectRax; | |
unsigned int ImportR10; | |
}; | |
/* 2052 */ | |
struct __declspec(align(16)) _MI_SECTION_STATE | |
{ | |
volatile int SectionObjectPointersLock; | |
_RTL_AVL_TREE SectionBasedRoot; | |
_EX_PUSH_LOCK SectionBasedLock; | |
volatile unsigned __int64 UnusedSegmentPagedPool; | |
unsigned int DataSectionProtectionMask; | |
void *HighSectionBase; | |
_MSUBSECTION PhysicalSubsection; | |
_CONTROL_AREA PhysicalControlArea; | |
_MMPFNLIST PurgingExtentPages; | |
_MMPFN *DanglingExtentPages; | |
_WORK_QUEUE_ITEM DanglingExtentsWorkItem; | |
_MI_EXTENT_DELETION_WAIT_BLOCK DanglingExtentsDeletionWaitList; | |
unsigned __int8 FileOnlyMemoryPfnsCreated; | |
unsigned __int8 DanglingExtentsWorkerActive; | |
unsigned __int8 PurgingExtentsNeedWatchdog; | |
_RTL_AVL_TREE PrototypePtesTree; | |
volatile int PrototypePtesTreeSpinLock; | |
_EX_PUSH_LOCK RelocateBitmapsLock; | |
_RTL_BITMAP_EX ImageBitMapNative; | |
unsigned __int64 ImageBiasNative; | |
_MI_DLL_OVERFLOW_AREA OverflowArea; | |
_MI_SECTION_WOW_STATE Wow[1]; | |
unsigned __int64 ImageBiasWow; | |
_RTL_BITMAP_EX ImageBitMapWowScratch; | |
_RTL_BITMAP_EX ImageBitMap64Low; | |
unsigned __int64 ImageBias64Low; | |
void *ApiSetSection; | |
void *ApiSetSchema; | |
unsigned __int64 ApiSetSchemaSize; | |
unsigned int LostDataFiles; | |
unsigned int LostDataPages; | |
unsigned int ImageFailureReason; | |
_SECTION *CfgBitMapSection; | |
_CONTROL_AREA *CfgBitMapControlArea; | |
_RTL_BITMAP_EX KernelCfgBitMap; | |
_EX_PUSH_LOCK KernelCfgBitMapLock; | |
unsigned int ImageCfgFailure; | |
unsigned int RetpolineReservePages; | |
_MDL *RetpolineStubMdl; | |
_RTL_BITMAP_EX KernelRetpolineBitMap; | |
_RTL_RETPOLINE_ROUTINES *RetpolineRoutines; | |
_MMPTE *RetpolineRevertPte; | |
_LIST_ENTRY NonRetpolineImageLoadList; | |
unsigned int RetpolineStubPages; | |
int RetpolineBootStatus; | |
unsigned int ImageBreakpointEnabled; | |
unsigned int ImageBreakpointChecksum; | |
unsigned int ImageBreakpointSize; | |
volatile int ImageValidationFailed; | |
_RTL_AVL_TREE ImageExtentTree; | |
_EX_PUSH_LOCK ImageExtentTreeLock; | |
unsigned int HotPatchReserveSize; | |
}; | |
/* 2053 */ | |
struct _NON_PAGED_DEBUG_INFO | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Flags; | |
unsigned int Size; | |
unsigned __int16 Machine; | |
unsigned __int16 Characteristics; | |
unsigned int TimeDateStamp; | |
unsigned int CheckSum; | |
unsigned int SizeOfImage; | |
unsigned __int64 ImageBase; | |
}; | |
/* 2054 */ | |
struct $1E2A795FFD7D7084A69DFCF07622B245 | |
{ | |
unsigned __int16 SignatureLevel : 4; | |
unsigned __int16 SignatureType : 3; | |
unsigned __int16 Unused : 9; | |
}; | |
/* 2055 */ | |
struct _KLDR_DATA_TABLE_ENTRY | |
{ | |
_LIST_ENTRY InLoadOrderLinks; | |
void *ExceptionTable; | |
unsigned int ExceptionTableSize; | |
void *GpValue; | |
_NON_PAGED_DEBUG_INFO *NonPagedDebugInfo; | |
void *DllBase; | |
void *EntryPoint; | |
unsigned int SizeOfImage; | |
_UNICODE_STRING FullDllName; | |
_UNICODE_STRING BaseDllName; | |
unsigned int Flags; | |
unsigned __int16 LoadCount; | |
union | |
{ | |
$1E2A795FFD7D7084A69DFCF07622B245 __s0; | |
unsigned __int16 EntireField; | |
} u1; | |
void *SectionPointer; | |
unsigned int CheckSum; | |
unsigned int CoverageSectionSize; | |
void *CoverageSection; | |
void *LoadedImports; | |
void *Spare; | |
unsigned int SizeOfImageNotRounded; | |
unsigned int TimeDateStamp; | |
}; | |
/* 2056 */ | |
struct _MI_DRIVER_VA | |
{ | |
_MI_DRIVER_VA *Next; | |
_MMPTE *PointerPte; | |
_RTL_BITMAP BitMap; | |
unsigned int Hint; | |
unsigned int Flags; | |
}; | |
/* 2057 */ | |
struct _MM_SYSTEM_PAGE_COUNTS | |
{ | |
unsigned int SystemCodePage; | |
unsigned int SystemDriverPage; | |
int TotalSystemCodePages; | |
int TotalSystemDriverPages; | |
}; | |
/* 2058 */ | |
struct _MI_SYSTEM_IMAGE_STATE | |
{ | |
_LIST_ENTRY FixupList; | |
_EX_PUSH_LOCK LoadLock; | |
_ETHREAD *LoadLockOwner; | |
unsigned int LoadLockCount; | |
volatile int FixupLock; | |
unsigned __int8 FirstLoadEver; | |
unsigned __int8 LargePageAll; | |
unsigned __int64 LastPage; | |
_LIST_ENTRY LargePageList; | |
_LIST_ENTRY StrongCodeLoadFailureList; | |
_KLDR_DATA_TABLE_ENTRY *SystemBase[1]; | |
_KLDR_DATA_TABLE_ENTRY *BeingDeleted; | |
_EX_PUSH_LOCK MappingRangesPushLock; | |
_MI_DRIVER_VA *MappingRanges[2]; | |
unsigned __int64 PageCount; | |
_MM_SYSTEM_PAGE_COUNTS PageCounts; | |
_EX_PUSH_LOCK CollidedLock; | |
_RTL_AVL_TREE ImageTree; | |
}; | |
/* 2059 */ | |
struct _MI_HUGE_SYSTEM_VIEW_HEAD | |
{ | |
_RTL_AVL_TREE ViewRoot; | |
unsigned int ViewCount; | |
volatile int Lock; | |
}; | |
/* 2060 */ | |
struct __declspec(align(8)) _MI_SESSION_STATE | |
{ | |
_MMSESSION SystemSession; | |
unsigned __int8 CodePageEdited; | |
unsigned __int64 *DynamicVaBitBuffer; | |
unsigned __int64 DynamicVaBitBufferPages; | |
void *DynamicVaStart; | |
void *ImageVaStart; | |
_MI_HUGE_SYSTEM_VIEW_HEAD SystemViewBuckets[256]; | |
unsigned int *DynamicPtesBitBuffer; | |
_EX_PUSH_LOCK IdLock; | |
_EPROCESS *LeaderProcess; | |
_EX_PUSH_LOCK InitializeLock; | |
_MMWSL_INSTANCE *WorkingSetList; | |
void *SessionBase; | |
void *SessionCore; | |
_RTL_AVL_TREE SessionIdNodes; | |
_KEVENT DeleteInProgressEvent; | |
unsigned int DeleteInProgressCount; | |
}; | |
/* 2061 */ | |
struct _MI_PROCESS_STATE | |
{ | |
void *SystemDllBase; | |
unsigned int ColorSeed; | |
int RotatingUniprocessorNumber; | |
_LARGE_INTEGER CriticalSectionTimeout; | |
_LIST_ENTRY ProcessList; | |
_MMPTE *SharedUserDataPte[2]; | |
void *HypervisorSharedVa; | |
unsigned __int64 VadSecureCookie; | |
}; | |
/* 2062 */ | |
struct _MI_NODE_NUMBER_ZERO_BASED | |
{ | |
unsigned int ZeroBased; | |
}; | |
/* 2063 */ | |
struct _CACHED_KSTACK_LIST | |
{ | |
_SLIST_HEADER SListHead; | |
int MinimumFree; | |
unsigned int Misses; | |
unsigned int MissesLast; | |
unsigned int AllStacksInUse; | |
}; | |
/* 2064 */ | |
struct _MI_DYNAMIC_BITMAP | |
{ | |
_RTL_BITMAP_EX Bitmap; | |
unsigned __int64 MaximumSize; | |
unsigned __int64 Hint; | |
void *BaseVa; | |
unsigned __int64 SizeTopDown; | |
unsigned __int64 HintTopDown; | |
void *BaseVaTopDown; | |
unsigned __int64 SpinLock; | |
}; | |
/* 2065 */ | |
struct _MI_SYSTEM_NODE_INFORMATION | |
{ | |
_CACHED_KSTACK_LIST CachedKernelStacks[2]; | |
_MI_DYNAMIC_BITMAP DynamicBitMapNonPagedPool; | |
unsigned __int64 CachedNonPagedPoolCount; | |
unsigned __int64 NonPagedPoolSpinLock; | |
_MMPFN *CachedNonPagedPool; | |
void *NonPagedPoolFirstVa; | |
void *NonPagedPoolLastVa; | |
}; | |
/* 2066 */ | |
struct __declspec(align(8)) _HAL_NODE_RANGE | |
{ | |
unsigned __int64 PageFrameIndex; | |
unsigned int Node; | |
}; | |
/* 2067 */ | |
struct _HAL_CHANNEL_MEMORY_RANGES | |
{ | |
unsigned __int64 PageFrameIndex; | |
unsigned __int16 MpnId; | |
unsigned __int16 Node; | |
unsigned __int16 Channel; | |
unsigned __int8 IsPowerManageable; | |
unsigned __int8 DeepPowerState; | |
}; | |
/* 2068 */ | |
struct _MI_ZERO_COST_COUNTS | |
{ | |
unsigned __int64 NativeSum; | |
unsigned __int64 CachedSum; | |
}; | |
/* 2069 */ | |
struct _MI_HARDWARE_STATE | |
{ | |
unsigned int NodeMask; | |
unsigned int NumaHintIndex; | |
unsigned int NumaLastRangeIndexInclusive; | |
unsigned __int8 NodeShift; | |
unsigned __int8 ChannelShift; | |
unsigned int ChannelHintIndex; | |
unsigned int ChannelLastRangeIndexInclusive; | |
_MI_NODE_NUMBER_ZERO_BASED *NodeGraph; | |
_MI_SYSTEM_NODE_INFORMATION *SystemNodeInformation; | |
_HAL_NODE_RANGE TemporaryNumaRanges[2]; | |
_HAL_NODE_RANGE *NumaMemoryRanges; | |
_HAL_CHANNEL_MEMORY_RANGES *ChannelMemoryRanges; | |
unsigned int SecondLevelCacheSize; | |
unsigned int FirstLevelCacheSize; | |
unsigned int PhysicalAddressBits; | |
unsigned int LogicalProcessorsPerCore; | |
unsigned __int8 ProcessorCachesFlushedOnPowerLoss; | |
unsigned __int64 TotalPagesAllowed; | |
unsigned int SecondaryColorMask; | |
unsigned int SecondaryColors; | |
unsigned int FlushTbForAttributeChange; | |
unsigned int FlushCacheForAttributeChange; | |
unsigned int FlushCacheForPageAttributeChange; | |
unsigned int CacheFlushPromoteThreshold; | |
_LARGE_INTEGER PerformanceCounterFrequency; | |
__declspec(align(64)) unsigned __int64 InvalidPteMask; | |
__declspec(align(64)) unsigned int LargePageColors[3]; | |
unsigned __int64 FlushTbThreshold; | |
_MI_PFN_CACHE_ATTRIBUTE OptimalZeroingAttribute[4][4]; | |
unsigned __int8 AttributeChangeRequiresReZero; | |
_MI_ZERO_COST_COUNTS ZeroCostCounts[2]; | |
unsigned __int64 VsmKernelPageCount; | |
}; | |
/* 2070 */ | |
struct _MI_WSLE | |
{ | |
union | |
{ | |
struct | |
{ | |
unsigned __int8 Age : 4; | |
unsigned __int8 Protection : 3; | |
unsigned __int8 Reserved : 1; | |
} e1; | |
struct | |
{ | |
unsigned __int8 EntireWsle; | |
} e2; | |
} u1; | |
}; | |
/* 2071 */ | |
struct __declspec(align(32)) _MI_SYSTEM_VA_STATE | |
{ | |
unsigned __int64 SystemTablesLock; | |
unsigned __int64 AvailableSystemCacheVa; | |
_MI_DYNAMIC_BITMAP DynamicBitMapKernelStacks; | |
_MI_DYNAMIC_BITMAP DynamicBitMapSystemPtes; | |
_MI_DYNAMIC_BITMAP DynamicBitMapDriverImages[2]; | |
_MI_DYNAMIC_BITMAP DynamicBitMapPagedPool; | |
_MI_DYNAMIC_BITMAP DynamicBitMapSystemCache; | |
_MI_DYNAMIC_BITMAP DynamicBitMapSecureNonPagedPool; | |
void *HalPrivateVaStart; | |
unsigned __int64 HalPrivateVaSize; | |
unsigned int SystemVaAssignment[8]; | |
unsigned int SystemVaAssignmentHint; | |
unsigned int TopLevelPteLockBits[32]; | |
volatile int DeleteKvaLock; | |
_MI_WSLE *WsleArrays[8]; | |
void *PagableHyperSpace; | |
void *HyperSpaceEnd; | |
unsigned __int64 PagableHyperSpaceBytes; | |
unsigned __int64 PageTableCommitmentOffset[2]; | |
_KEVENT FreeSystemCacheVa; | |
unsigned __int64 SystemVaLock; | |
unsigned __int64 SystemCacheViewLock; | |
_MMWSL_INSTANCE SystemWorkingSetList[8]; | |
unsigned __int64 SelfmapLock[4]; | |
}; | |
/* 2072 */ | |
struct __declspec(align(8)) _MI_COMBINE_STATE | |
{ | |
volatile int ActiveSpinLock; | |
unsigned int CombiningThreadCount; | |
_RTL_AVL_TREE ActiveThreadTree; | |
unsigned __int64 CommonPageCombineDomain; | |
unsigned int CommonCombineDomainAssigned; | |
}; | |
/* 2073 */ | |
struct __declspec(align(8)) _MI_PAGELIST_STATE | |
{ | |
volatile int ActiveSpinLock; | |
_RTL_AVL_TREE ActiveThreadTree; | |
volatile int ActiveZeroSpinLock; | |
_RTL_AVL_TREE ActiveZeroThreadTree; | |
_MMPFN LargePfnTemplate; | |
_MMPFN LargePfnBasePageTemplate; | |
unsigned int NumberOfLargePageListHeads; | |
}; | |
/* 2074 */ | |
struct _MI_HUGE_PFN | |
{ | |
union | |
{ | |
struct | |
{ | |
unsigned __int64 EntireField; | |
} e1; | |
struct | |
{ | |
unsigned __int64 Flink : 18; | |
unsigned __int64 PageState : 3; | |
unsigned __int64 Blink : 18; | |
unsigned __int64 WriteInProgress : 1; | |
unsigned __int64 HasError : 1; | |
unsigned __int64 Partition : 11; | |
unsigned __int64 Reserved : 12; | |
} e2; | |
} u1; | |
}; | |
/* 2075 */ | |
struct __declspec(align(64)) _MI_PARTITION_STATE | |
{ | |
unsigned __int64 PartitionLock; | |
_EX_PUSH_LOCK PartitionIdLock; | |
unsigned __int64 InitialPartitionIdBits; | |
_LIST_ENTRY PartitionList; | |
_RTL_BITMAP *PartitionIdBitmap; | |
_RTL_BITMAP InitialPartitionIdBitmap; | |
_MI_PARTITION *TempPartitionPointers[1]; | |
_MI_PARTITION **Partition; | |
unsigned __int64 TotalPagesInChildPartitions; | |
unsigned int CrossPartitionDenials; | |
unsigned __int8 MultiplePartitionsExist; | |
_RTL_BITMAP_EX HugeIoPfnBitMap; | |
_MI_HUGE_PFN *HugePfnDatabase; | |
__declspec(align(16)) unsigned __int64 HugeRangesLock; | |
}; | |
/* 2076 */ | |
struct _MI_RESUME_WORKITEM | |
{ | |
_KEVENT ResumeCompleteEvent; | |
_WORK_QUEUE_ITEM WorkItem; | |
}; | |
/* 2077 */ | |
struct _MI_SHUTDOWN_STATE | |
{ | |
unsigned __int8 CrashDumpInitialized; | |
unsigned __int8 ConnectedStandbyActive; | |
unsigned __int8 ZeroPageFileAtShutdown; | |
unsigned int SystemShutdown; | |
int ShutdownFlushInProgress; | |
unsigned int MirroringActive; | |
_MI_RESUME_WORKITEM ResumeItem; | |
_ETHREAD *MirrorHoldsPfn; | |
_RTL_BITMAP_EX MirrorBitMaps[2]; | |
_MMPTE *CrashDumpPte; | |
}; | |
/* 2078 */ | |
struct _MI_BAD_MEMORY_EVENT_ENTRY | |
{ | |
unsigned int BugCheckCode; | |
int Active; | |
unsigned int Data; | |
_LARGE_INTEGER PhysicalAddress; | |
_WORK_QUEUE_ITEM WorkItem; | |
}; | |
/* 2079 */ | |
struct _MI_PROBE_RAISE_TRACKER | |
{ | |
unsigned int UserRangeInKernel; | |
unsigned int FaultFailed; | |
unsigned int WriteFaultFailed; | |
unsigned int LargePageFailed; | |
unsigned int UserAccessToKernelPte; | |
unsigned int BadPageLocation; | |
unsigned int InsufficientCharge; | |
unsigned int PageTableCharge; | |
unsigned int NoPhysicalMapping; | |
unsigned int NoIoReference; | |
unsigned int ProbeFailed; | |
unsigned int PteIsZero; | |
unsigned int StrongCodeWrite; | |
unsigned int ReducedCloneCommitChargeFailed; | |
unsigned int CopyOnWriteAtDispatchNoPages; | |
unsigned int NoPageTablesAllowed; | |
unsigned int EnclavePageFailed; | |
}; | |
/* 2080 */ | |
struct _MI_FORCED_COMMITS | |
{ | |
unsigned int Regular; | |
unsigned int Wrap; | |
}; | |
/* 2081 */ | |
struct _MI_RESAVAIL_FAILURES | |
{ | |
unsigned int Wrap; | |
unsigned int NoCharge; | |
}; | |
/* 2082 */ | |
struct __declspec(align(8)) _MI_ERROR_STATE | |
{ | |
_MI_BAD_MEMORY_EVENT_ENTRY BadMemoryEventEntry; | |
unsigned __int64 PageOfInterest; | |
_MI_PROBE_RAISE_TRACKER ProbeRaises; | |
_MI_FORCED_COMMITS ForcedCommits; | |
unsigned int WsleFailures[1]; | |
unsigned int PageHashErrors; | |
unsigned int CheckZeroCount; | |
volatile int ZeroedPageSingleBitErrorsDetected; | |
volatile int BadPagesDetected; | |
int ScrubPasses; | |
int ScrubBadPagesFound; | |
unsigned int UserViewFailures; | |
unsigned int UserViewCollisionFailures; | |
unsigned int UserAllocateFailures; | |
unsigned int UserAllocateCollisionFailures; | |
_MI_RESAVAIL_FAILURES ResavailFailures; | |
unsigned __int8 PendingBadPages; | |
unsigned __int8 FatalGraphicsFailures; | |
unsigned __int8 InitFailure; | |
unsigned __int8 StopBadMaps; | |
}; | |
/* 2083 */ | |
struct __declspec(align(64)) _MI_ACCESS_LOG_STATE | |
{ | |
_MM_PAGE_ACCESS_INFO_HEADER *volatile CcAccessLog; | |
_WORK_QUEUE_ITEM DisableAccessLogging; | |
unsigned int Enabled; | |
unsigned int MinLoggingPriority; | |
__declspec(align(32)) unsigned __int64 AccessLoggingLock; | |
}; | |
/* 2084 */ | |
struct _MI_DEBUGGER_STATE | |
{ | |
unsigned __int8 TransientWrite; | |
unsigned __int8 CodePageEdited; | |
_MMPTE *DebugPte; | |
unsigned int PoisonedTb; | |
volatile int InDebugger; | |
void *volatile Pfns[32]; | |
}; | |
/* 2085 */ | |
struct _MI_STANDBY_STATE | |
{ | |
unsigned __int64 FirstDecayPage; | |
__declspec(align(16)) _SLIST_HEADER PfnDecayFreeSList; | |
_MM_PAGE_ACCESS_INFO_HEADER *PfnRepurposeLog; | |
_KDPC AllocatePfnRepurposeDpc; | |
__declspec(align(16)) _SLIST_HEADER PageHeatListSlist; | |
volatile int PageHeatListDisableAllocation; | |
}; | |
/* 2086 */ | |
struct _MI_ULTRA_VA_CONTEXT | |
{ | |
unsigned __int64 Lock; | |
void *ZeroMapping; | |
unsigned __int64 AllocationHintBit; | |
_RTL_BITMAP_EX Bitmap[2]; | |
volatile int ConcurrencyMaximum; | |
volatile int ConcurrencyCount; | |
}; | |
/* 2087 */ | |
struct __declspec(align(64)) _MI_ALIGNED_SLIST | |
{ | |
_SLIST_HEADER SList; | |
}; | |
/* 2088 */ | |
struct _MI_ULTRA_MDL_NODE | |
{ | |
_MI_ALIGNED_SLIST UltraMdlMaps[8]; | |
}; | |
/* 2089 */ | |
struct _MI_SYSTEM_PTE_STATE | |
{ | |
_NPAGED_LOOKASIDE_LIST MdlTrackerLookaside; | |
_SLIST_HEADER DeadPteTrackerSListHead; | |
unsigned __int64 PteTrackerLock; | |
_RTL_BITMAP_EX PteTrackingBitmap; | |
volatile _MI_CACHED_PTES *CachedPteHeads; | |
volatile _MI_CACHED_PTES *CachedKernelStackPteHeads; | |
_MI_SYSTEM_PTE_TYPE SystemViewPteInfo; | |
_MI_SYSTEM_PTE_TYPE KernelStackPteInfo; | |
unsigned int StackGrowthFailures; | |
unsigned __int8 KernelStackPages; | |
unsigned __int8 TrackPtesAborted; | |
unsigned __int8 AdjustCounter; | |
volatile int ReservedMappingLock; | |
_RTL_AVL_TREE ReservedMappingTree; | |
_MMPFN *ReservedMappingPageTablePfns; | |
_RTL_AVL_TREE OutswappedKernelStackRoot; | |
volatile int OutswappedKernelStackLock; | |
_MMPTE *BreakMakePte; | |
_MI_ULTRA_VA_CONTEXT UltraSpaceContext; | |
unsigned int NumberOfUltraMdlMaps; | |
_MI_ULTRA_MDL_NODE *UltraMdlNodeMappings; | |
}; | |
/* 2090 */ | |
struct __declspec(align(8)) _MI_IO_CACHE_STATS | |
{ | |
unsigned __int64 UnusedBlocks; | |
unsigned int ActiveCacheMatch; | |
unsigned int ActiveCacheOverride; | |
unsigned int UnmappedCacheFlush; | |
unsigned int UnmappedCacheMatch; | |
unsigned int UnmappedCacheConflict; | |
unsigned int PermanentIoAttributeConflict; | |
unsigned int PermanentIoNodeConflict; | |
}; | |
/* 2091 */ | |
struct _MI_IO_PAGE_STATE | |
{ | |
volatile int IoPfnLock; | |
_RTL_AVL_TREE IoPfnRoot[3]; | |
_LIST_ENTRY UnusedCachedMaps; | |
unsigned int OldestCacheFlushTimeStamp; | |
_MI_IO_CACHE_STATS IoCacheStats; | |
_RTL_AVL_TREE InvariantIoSpace; | |
}; | |
/* 2092 */ | |
struct _MI_PAGING_IO_STATE | |
{ | |
_RTL_AVL_TREE PageFileHead; | |
volatile int PageFileHeadSpinLock; | |
int PrefetchSeekThreshold; | |
unsigned int InPageSinglePages; | |
__declspec(align(16)) _SLIST_HEADER InPageSupportSListHead[2]; | |
_SLIST_HEADER ReservedInPageSupportSListHead[2]; | |
unsigned __int8 InPageSupportSListMinimum[2]; | |
_MMINPAGE_SUPPORT *FirstReservedInPageBlock[2]; | |
_MMINPAGE_SUPPORT *LastReservedInPageBlock[2]; | |
_MMPTE *ReservedPtes; | |
unsigned __int64 ReservedPtesLock; | |
unsigned int ReservedPtesBitBuffer; | |
volatile int DelayPageFaults; | |
unsigned int FileCompressionBoundary; | |
unsigned __int8 MdlsAdjusted; | |
}; | |
/* 2093 */ | |
struct _MI_COMMON_PAGE_STATE | |
{ | |
_MMPFN *PageOfOnesPfn; | |
unsigned __int64 PageOfOnes; | |
_MMPFN *DummyPagePfn; | |
unsigned __int64 DummyPage; | |
unsigned __int64 PageOfZeroes; | |
void *ZeroMapping; | |
void *OnesMapping; | |
unsigned __int64 ZeroCrc; | |
unsigned __int64 OnesCrc; | |
unsigned __int64 BitmapGapFrames[4]; | |
unsigned __int64 PfnGapFrames[4]; | |
unsigned __int64 PageTableOfZeroes; | |
_MMPTE PdeOfZeroes; | |
unsigned __int64 PageTableOfOnes; | |
_MMPTE PdeOfOnes; | |
}; | |
/* 2094 */ | |
struct __declspec(align(16)) _MI_SYSTEM_TRIM_STATE | |
{ | |
unsigned __int64 ExpansionLock; | |
volatile int TrimInProgressCount; | |
_KEVENT PeriodicWorkingSetEvent; | |
unsigned int TrimAllPageFaultCount[3]; | |
}; | |
/* 2095 */ | |
struct _MI_ENCLAVE_STATE | |
{ | |
_RTL_AVL_TREE EnclaveRegions; | |
void *EnclaveMetadataPage; | |
_RTL_BITMAP *EnclaveMetadataBitMap; | |
_EX_PUSH_LOCK EnclaveMetadataEntryLock; | |
volatile int EnclaveMetadataPageLock; | |
_LIST_ENTRY EnclaveList; | |
_EX_PUSH_LOCK EnclaveListLock; | |
_EX_RUNDOWN_REF ShutdownRundown; | |
}; | |
/* 2096 */ | |
struct _SYSPTES_HEADER | |
{ | |
_LIST_ENTRY ListHead[16]; | |
unsigned __int64 Count; | |
unsigned __int64 NumberOfEntries; | |
unsigned __int64 NumberOfEntriesPeak; | |
}; | |
/* 2097 */ | |
struct _MI_SYSTEM_VA_ASSIGNMENT | |
{ | |
void *BaseAddress; | |
unsigned __int64 NumberOfBytes; | |
}; | |
/* 2098 */ | |
struct __declspec(align(64)) _MI_VISIBLE_STATE | |
{ | |
_LIST_ENTRY SessionWsList; | |
_RTL_BITMAP *SessionIdBitmap; | |
_MM_PAGED_POOL_INFO PagedPoolInfo; | |
unsigned __int64 MaximumNonPagedPoolInPages; | |
unsigned __int64 SizeOfPagedPoolInPages; | |
_MI_SYSTEM_PTE_TYPE SystemPteInfo; | |
volatile unsigned __int64 NonPagedPoolCommit; | |
volatile unsigned __int64 SmallNonPagedPtesCommit; | |
volatile unsigned __int64 BootCommit; | |
volatile unsigned __int64 MdlPagesAllocated; | |
volatile unsigned __int64 SystemPageTableCommit; | |
volatile unsigned __int64 ProcessCommit; | |
volatile int DriverCommit; | |
unsigned __int8 PagingLevels; | |
volatile unsigned __int64 PfnDatabaseCommit; | |
_MMSUPPORT_FULL SystemWs[6]; | |
_MMSUPPORT_SHARED SystemCacheShared; | |
_MMSUPPORT_AGGREGATION AggregateSystemWs[1]; | |
unsigned int MapCacheFailures; | |
unsigned __int64 PagefileHashPages; | |
_SYSPTES_HEADER PteHeader; | |
unsigned __int64 SystemVaTypeCount[16]; | |
unsigned __int8 SystemVaType[256]; | |
_MI_SYSTEM_VA_ASSIGNMENT SystemVaRegions[13]; | |
}; | |
/* 2099 */ | |
struct _MI_SYSTEM_INFORMATION | |
{ | |
_MI_POOL_STATE Pools; | |
__declspec(align(32)) _MI_SECTION_STATE Sections; | |
_MI_SYSTEM_IMAGE_STATE SystemImages; | |
_MI_SESSION_STATE Sessions; | |
_MI_PROCESS_STATE Processes; | |
_MI_HARDWARE_STATE Hardware; | |
_MI_SYSTEM_VA_STATE SystemVa; | |
_MI_COMBINE_STATE PageCombines; | |
_MI_PAGELIST_STATE PageLists; | |
_MI_PARTITION_STATE Partitions; | |
_MI_SHUTDOWN_STATE Shutdowns; | |
_MI_ERROR_STATE Errors; | |
_MI_ACCESS_LOG_STATE AccessLog; | |
_MI_DEBUGGER_STATE Debugger; | |
_MI_STANDBY_STATE Standby; | |
_MI_SYSTEM_PTE_STATE SystemPtes; | |
_MI_IO_PAGE_STATE IoPages; | |
_MI_PAGING_IO_STATE PagingIo; | |
_MI_COMMON_PAGE_STATE CommonPages; | |
__declspec(align(64)) _MI_SYSTEM_TRIM_STATE Trims; | |
_MI_ENCLAVE_STATE Enclaves; | |
unsigned __int64 Cookie; | |
void *volatile *BootRegistryRuns; | |
volatile int ZeroingDisabled; | |
unsigned __int8 FullyInitialized; | |
unsigned __int8 SafeBooted; | |
const _tlgProvider_t *TraceLogging; | |
_MI_VISIBLE_STATE Vs; | |
}; | |
/* 2100 */ | |
struct $12EDD93CAC4208332C3108DBB4839320 | |
{ | |
unsigned __int16 AllowScaling : 1; | |
unsigned __int16 Disabled : 1; | |
unsigned __int16 Reserved : 14; | |
}; | |
/* 2101 */ | |
struct PROCESSOR_IDLESTATE_INFO | |
{ | |
unsigned int TimeCheck; | |
unsigned __int8 DemotePercent; | |
unsigned __int8 PromotePercent; | |
unsigned __int8 Spare[2]; | |
}; | |
/* 2102 */ | |
struct PROCESSOR_IDLESTATE_POLICY | |
{ | |
unsigned __int16 Revision; | |
union | |
{ | |
unsigned __int16 AsUSHORT; | |
$12EDD93CAC4208332C3108DBB4839320 __s1; | |
} Flags; | |
unsigned int PolicyCount; | |
PROCESSOR_IDLESTATE_INFO Policy[3]; | |
}; | |
/* 2103 */ | |
struct _VF_AVL_TREE_NODE | |
{ | |
void *p; | |
unsigned __int64 RangeSize; | |
}; | |
/* 2104 */ | |
struct __declspec(align(64)) _VF_AVL_TABLE | |
{ | |
_RTL_AVL_TABLE RtlTable; | |
_VF_AVL_TREE_NODE *ReservedNode; | |
void *NodeToFree; | |
__declspec(align(16)) volatile int Lock; | |
}; | |
/* 2105 */ | |
struct __declspec(align(8)) _VF_AVL_TREE | |
{ | |
unsigned __int64 NodeRangeSize; | |
volatile unsigned __int64 NodeCount; | |
_VF_AVL_TABLE *Tables; | |
unsigned int TablesNo; | |
unsigned __int8 UseSessionId; | |
union | |
{ | |
unsigned int NodeSize; | |
unsigned int UseLookaside; | |
} u1; | |
}; | |
/* 2106 */ | |
struct _EXCEPTION_POINTERS | |
{ | |
_EXCEPTION_RECORD *ExceptionRecord; | |
_CONTEXT *ContextRecord; | |
}; | |
/* 2107 */ | |
struct __declspec(align(8)) _RTL_RANGE_LIST | |
{ | |
_LIST_ENTRY ListHead; | |
unsigned int Flags; | |
unsigned int Count; | |
unsigned int Stamp; | |
}; | |
/* 2108 */ | |
struct _ARBITER_ORDERING | |
{ | |
unsigned __int64 Start; | |
unsigned __int64 End; | |
}; | |
/* 2109 */ | |
struct _ARBITER_ORDERING_LIST | |
{ | |
unsigned __int16 Count; | |
unsigned __int16 Maximum; | |
_ARBITER_ORDERING *Orderings; | |
}; | |
/* 2110 */ | |
struct _ARBITER_TEST_ALLOCATION_PARAMETERS | |
{ | |
_LIST_ENTRY *ArbitrationList; | |
unsigned int AllocateFromCount; | |
_CM_PARTIAL_RESOURCE_DESCRIPTOR *AllocateFrom; | |
}; | |
/* 2111 */ | |
struct _ARBITER_RETEST_ALLOCATION_PARAMETERS | |
{ | |
_LIST_ENTRY *ArbitrationList; | |
unsigned int AllocateFromCount; | |
_CM_PARTIAL_RESOURCE_DESCRIPTOR *AllocateFrom; | |
}; | |
/* 2112 */ | |
struct _ARBITER_BOOT_ALLOCATION_PARAMETERS | |
{ | |
_LIST_ENTRY *ArbitrationList; | |
}; | |
/* 2113 */ | |
struct _ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS | |
{ | |
_CM_PARTIAL_RESOURCE_LIST **AllocatedResources; | |
}; | |
/* 2114 */ | |
struct _ARBITER_CONFLICT_INFO | |
{ | |
_DEVICE_OBJECT *OwningObject; | |
unsigned __int64 Start; | |
unsigned __int64 End; | |
}; | |
/* 2115 */ | |
struct _ARBITER_QUERY_CONFLICT_PARAMETERS | |
{ | |
_DEVICE_OBJECT *PhysicalDeviceObject; | |
_IO_RESOURCE_DESCRIPTOR *ConflictingResource; | |
unsigned int *ConflictCount; | |
_ARBITER_CONFLICT_INFO **Conflicts; | |
}; | |
/* 2116 */ | |
struct _ARBITER_QUERY_ARBITRATE_PARAMETERS | |
{ | |
_LIST_ENTRY *ArbitrationList; | |
}; | |
/* 2117 */ | |
struct _ARBITER_ADD_RESERVED_PARAMETERS | |
{ | |
_DEVICE_OBJECT *ReserveDevice; | |
}; | |
/* 2118 */ | |
struct _ARBITER_PARAMETERS | |
{ | |
union | |
{ | |
_ARBITER_TEST_ALLOCATION_PARAMETERS TestAllocation; | |
_ARBITER_RETEST_ALLOCATION_PARAMETERS RetestAllocation; | |
_ARBITER_BOOT_ALLOCATION_PARAMETERS BootAllocation; | |
_ARBITER_QUERY_ALLOCATED_RESOURCES_PARAMETERS QueryAllocatedResources; | |
_ARBITER_QUERY_CONFLICT_PARAMETERS QueryConflict; | |
_ARBITER_QUERY_ARBITRATE_PARAMETERS QueryArbitrate; | |
_ARBITER_ADD_RESERVED_PARAMETERS AddReserved; | |
} Parameters; | |
}; | |
/* 2119 */ | |
struct __declspec(align(8)) _ARBITER_INTERFACE | |
{ | |
unsigned __int16 Size; | |
unsigned __int16 Version; | |
void *Context; | |
void (__fastcall *InterfaceReference)(void *); | |
void (__fastcall *InterfaceDereference)(void *); | |
int (__fastcall *ArbiterHandler)(void *, _ARBITER_ACTION, _ARBITER_PARAMETERS *); | |
unsigned int Flags; | |
}; | |
/* 2120 */ | |
struct __declspec(align(8)) _ARBITER_LIST_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int AlternativeCount; | |
_IO_RESOURCE_DESCRIPTOR *Alternatives; | |
_DEVICE_OBJECT *PhysicalDeviceObject; | |
_ARBITER_REQUEST_SOURCE RequestSource; | |
unsigned int Flags; | |
__int64 WorkSpace; | |
_INTERFACE_TYPE InterfaceType; | |
unsigned int SlotNumber; | |
unsigned int BusNumber; | |
_CM_PARTIAL_RESOURCE_DESCRIPTOR *Assignment; | |
_IO_RESOURCE_DESCRIPTOR *SelectedAlternative; | |
_ARBITER_RESULT Result; | |
}; | |
/* 2121 */ | |
struct __declspec(align(8)) _ARBITER_ALTERNATIVE | |
{ | |
unsigned __int64 Minimum; | |
unsigned __int64 Maximum; | |
unsigned __int64 Length; | |
unsigned __int64 Alignment; | |
int Priority; | |
unsigned int Flags; | |
_IO_RESOURCE_DESCRIPTOR *Descriptor; | |
unsigned int Reserved[3]; | |
}; | |
/* 2122 */ | |
struct _ARBITER_ALLOCATION_STATE | |
{ | |
unsigned __int64 Start; | |
unsigned __int64 End; | |
unsigned __int64 CurrentMinimum; | |
unsigned __int64 CurrentMaximum; | |
_ARBITER_LIST_ENTRY *Entry; | |
_ARBITER_ALTERNATIVE *CurrentAlternative; | |
unsigned int AlternativeCount; | |
_ARBITER_ALTERNATIVE *Alternatives; | |
unsigned __int16 Flags; | |
unsigned __int8 RangeAttributes; | |
unsigned __int8 RangeAvailableAttributes; | |
unsigned __int64 WorkSpace; | |
}; | |
/* 2123 */ | |
struct _ARBITER_INSTANCE | |
{ | |
unsigned int Signature; | |
_KEVENT *MutexEvent; | |
wchar_t *Name; | |
wchar_t *OrderingName; | |
int ResourceType; | |
_RTL_RANGE_LIST *Allocation; | |
_RTL_RANGE_LIST *PossibleAllocation; | |
_ARBITER_ORDERING_LIST OrderingList; | |
_ARBITER_ORDERING_LIST ReservedList; | |
int ReferenceCount; | |
_ARBITER_INTERFACE *Interface; | |
unsigned int AllocationStackMaxSize; | |
_ARBITER_ALLOCATION_STATE *AllocationStack; | |
int (__fastcall *UnpackRequirement)(_IO_RESOURCE_DESCRIPTOR *, unsigned __int64 *, unsigned __int64 *, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *PackResource)(_IO_RESOURCE_DESCRIPTOR *, unsigned __int64, _CM_PARTIAL_RESOURCE_DESCRIPTOR *); | |
int (__fastcall *UnpackResource)(_CM_PARTIAL_RESOURCE_DESCRIPTOR *, unsigned __int64 *, unsigned __int64 *); | |
int (__fastcall *ScoreRequirement)(_IO_RESOURCE_DESCRIPTOR *); | |
int (__fastcall *TestAllocation)(_ARBITER_INSTANCE *, _ARBITER_TEST_ALLOCATION_PARAMETERS *); | |
int (__fastcall *RetestAllocation)(_ARBITER_INSTANCE *, _ARBITER_RETEST_ALLOCATION_PARAMETERS *); | |
int (__fastcall *CommitAllocation)(_ARBITER_INSTANCE *); | |
int (__fastcall *RollbackAllocation)(_ARBITER_INSTANCE *); | |
int (__fastcall *BootAllocation)(_ARBITER_INSTANCE *, _ARBITER_BOOT_ALLOCATION_PARAMETERS *); | |
int (__fastcall *QueryArbitrate)(_ARBITER_INSTANCE *, _ARBITER_QUERY_ARBITRATE_PARAMETERS *); | |
int (__fastcall *QueryConflict)(_ARBITER_INSTANCE *, _ARBITER_QUERY_CONFLICT_PARAMETERS *); | |
int (__fastcall *AddReserved)(_ARBITER_INSTANCE *, _ARBITER_ADD_RESERVED_PARAMETERS *); | |
int (__fastcall *StartArbiter)(_ARBITER_INSTANCE *, _CM_RESOURCE_LIST *); | |
int (__fastcall *PreprocessEntry)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
int (__fastcall *AllocateEntry)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
unsigned __int8 (__fastcall *GetNextAllocationRange)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
unsigned __int8 (__fastcall *FindSuitableRange)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
void (__fastcall *AddAllocation)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
void (__fastcall *BacktrackAllocation)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
unsigned __int8 (__fastcall *OverrideConflict)(_ARBITER_INSTANCE *, _ARBITER_ALLOCATION_STATE *); | |
int (__fastcall *InitializeRangeList)(_ARBITER_INSTANCE *, unsigned int, _CM_PARTIAL_RESOURCE_DESCRIPTOR *, _RTL_RANGE_LIST *); | |
int (__fastcall *DeleteOwnerRanges)(_ARBITER_INSTANCE *, void *); | |
unsigned __int8 TransactionInProgress; | |
_KEVENT *TransactionEvent; | |
void *Extension; | |
_DEVICE_OBJECT *BusDeviceObject; | |
void *ConflictCallbackContext; | |
unsigned __int8 (__fastcall *ConflictCallback)(void *, _RTL_RANGE *); | |
}; | |
/* 2124 */ | |
struct __declspec(align(8)) _RTL_RANGE | |
{ | |
unsigned __int64 Start; | |
unsigned __int64 End; | |
void *UserData; | |
void *Owner; | |
unsigned __int8 Attributes; | |
unsigned __int8 Flags; | |
}; | |
/* 2125 */ | |
struct _VF_POOL_TRACE | |
{ | |
void *Address; | |
unsigned __int64 Size; | |
_ETHREAD *Thread; | |
void *StackTrace[13]; | |
}; | |
/* 2126 */ | |
struct _VI_FAULT_TRACE | |
{ | |
_ETHREAD *Thread; | |
void *StackTrace[8]; | |
}; | |
/* 2127 */ | |
struct $080B3E8B2F32A9FAB9FEFF619D4F263E | |
{ | |
unsigned __int32 VerifierEnabled : 1; | |
unsigned __int32 KernelVerifierEnabled : 1; | |
unsigned __int32 LargePageKernel : 1; | |
unsigned __int32 StopOn4d : 1; | |
unsigned __int32 InitializationPhase : 2; | |
unsigned __int32 PageKernelStacks : 1; | |
unsigned __int32 CheckZeroPages : 1; | |
unsigned __int32 ProcessorPrewalks : 1; | |
unsigned __int32 ProcessorPostwalks : 1; | |
unsigned __int32 CoverageBuild : 1; | |
unsigned __int32 AccessBitReplacementDisabled : 1; | |
unsigned __int32 CheckExecute : 1; | |
unsigned __int32 ProtectedPagesEnabled : 1; | |
unsigned __int32 SecureRelocations : 1; | |
unsigned __int32 StrongPageIdentity : 1; | |
unsigned __int32 StrongCodeGuarantees : 1; | |
unsigned __int32 HardCodeGuarantees : 1; | |
unsigned __int32 ExecutePagePrivilegeRequired : 1; | |
unsigned __int32 SecureKernelCfgEnabled : 1; | |
unsigned __int32 FullHvci : 1; | |
unsigned __int32 BootDebuggerActive : 1; | |
unsigned __int32 ExceptionHandlingReady : 1; | |
unsigned __int32 ShadowStacksSupported : 1; | |
unsigned __int32 AccessBitFenceRequired : 1; | |
unsigned __int32 PfnDatabaseExists : 1; | |
unsigned __int32 DeferredHotAddsCompleted : 1; | |
unsigned __int32 SystemPtesReady : 1; | |
}; | |
/* 2128 */ | |
union _MI_FLAGS | |
{ | |
int EntireFlags; | |
$080B3E8B2F32A9FAB9FEFF619D4F263E __s1; | |
}; | |
/* 2129 */ | |
struct BATTERY_REPORTING_SCALE | |
{ | |
unsigned int Granularity; | |
unsigned int Capacity; | |
}; | |
/* 2130 */ | |
struct SYSTEM_POWER_CAPABILITIES | |
{ | |
unsigned __int8 PowerButtonPresent; | |
unsigned __int8 SleepButtonPresent; | |
unsigned __int8 LidPresent; | |
unsigned __int8 SystemS1; | |
unsigned __int8 SystemS2; | |
unsigned __int8 SystemS3; | |
unsigned __int8 SystemS4; | |
unsigned __int8 SystemS5; | |
unsigned __int8 HiberFilePresent; | |
unsigned __int8 FullWake; | |
unsigned __int8 VideoDimPresent; | |
unsigned __int8 ApmPresent; | |
unsigned __int8 UpsPresent; | |
unsigned __int8 ThermalControl; | |
unsigned __int8 ProcessorThrottle; | |
unsigned __int8 ProcessorMinThrottle; | |
unsigned __int8 ProcessorMaxThrottle; | |
unsigned __int8 FastSystemS4; | |
unsigned __int8 Hiberboot; | |
unsigned __int8 WakeAlarmPresent; | |
unsigned __int8 AoAc; | |
unsigned __int8 DiskSpinDown; | |
unsigned __int8 HiberFileType; | |
unsigned __int8 AoAcConnectivitySupported; | |
unsigned __int8 spare3[6]; | |
unsigned __int8 SystemBatteriesPresent; | |
unsigned __int8 BatteriesAreShortTerm; | |
BATTERY_REPORTING_SCALE BatteryScale[3]; | |
_SYSTEM_POWER_STATE AcOnLineWake; | |
_SYSTEM_POWER_STATE SoftLidWake; | |
_SYSTEM_POWER_STATE RtcWake; | |
_SYSTEM_POWER_STATE MinDeviceWakeState; | |
_SYSTEM_POWER_STATE DefaultLowLatencyWake; | |
}; | |
/* 2131 */ | |
struct _KWAIT_CHAIN | |
{ | |
void *Head; | |
}; | |
/* 2132 */ | |
struct _VF_DRIVER_IO_CALLBACKS | |
{ | |
int (__fastcall *DriverInit)(_DRIVER_OBJECT *, _UNICODE_STRING *); | |
void (__fastcall *DriverStartIo)(_DEVICE_OBJECT *, _IRP *); | |
void (__fastcall *DriverUnload)(_DRIVER_OBJECT *); | |
int (__fastcall *AddDevice)(_DRIVER_OBJECT *, _DEVICE_OBJECT *); | |
int (__fastcall *MajorFunction[28])(_DEVICE_OBJECT *, _IRP *); | |
}; | |
/* 2133 */ | |
struct _POP_POLICY_DEVICE | |
{ | |
_LIST_ENTRY Link; | |
POWER_POLICY_DEVICE_TYPE DeviceType; | |
void *Notification; | |
_UNICODE_STRING Name; | |
_DEVICE_OBJECT *Device; | |
_IRP *Irp; | |
}; | |
/* 2134 */ | |
struct _THERMAL_INFORMATION_EX | |
{ | |
unsigned int ThermalStamp; | |
unsigned int ThermalConstant1; | |
unsigned int ThermalConstant2; | |
unsigned int SamplingPeriod; | |
unsigned int CurrentTemperature; | |
unsigned int PassiveTripPoint; | |
unsigned int ThermalStandbyTripPoint; | |
unsigned int CriticalTripPoint; | |
unsigned __int8 ActiveTripPointCount; | |
unsigned __int8 PassiveCoolingDevicesPresent; | |
unsigned int ActiveTripPoint[10]; | |
unsigned int S4TransitionTripPoint; | |
unsigned int MinimumThrottle; | |
unsigned int OverThrottleThreshold; | |
unsigned int PollingPeriod; | |
}; | |
/* 2135 */ | |
struct __declspec(align(4)) _THERMAL_POLICY | |
{ | |
unsigned int Version; | |
unsigned __int8 WaitForUpdate; | |
unsigned __int8 Hibernate; | |
unsigned __int8 Critical; | |
unsigned __int8 ThermalStandby; | |
unsigned int ActivationReasons; | |
unsigned int PassiveLimit; | |
unsigned int ActiveLevel; | |
unsigned __int8 OverThrottled; | |
}; | |
/* 2137 */ | |
union $8169D7334BCEFFB51F69C06B77C604D6 | |
{ | |
_RTL_BALANCED_NODE RbNodes[2]; | |
_LIST_ENTRY ListEntry; | |
}; | |
/* 2138 */ | |
struct $6F161F6D759790CE33BF6F5F1338FF27 | |
{ | |
unsigned __int8 Unused : 1; | |
unsigned __int8 IdleResilient : 1; | |
unsigned __int8 HighResolution : 1; | |
unsigned __int8 NoWake : 1; | |
unsigned __int8 PseudoHighRes : 1; | |
unsigned __int8 Unused1 : 3; | |
}; | |
/* 2139 */ | |
union $6EED56CE6445098B5DFB6E7F21F12A53 | |
{ | |
unsigned __int8 TypeFlags; | |
$6F161F6D759790CE33BF6F5F1338FF27 __s1; | |
}; | |
/* 2136 */ | |
struct __declspec(align(8)) _KTIMER2 | |
{ | |
_DISPATCHER_HEADER Header; | |
$8169D7334BCEFFB51F69C06B77C604D6 ___u1; | |
unsigned __int64 DueTime[2]; | |
__int64 Period; | |
void (__fastcall *Callback)(_KTIMER2 *, void *); | |
void *CallbackContext; | |
void (__fastcall *DisableCallback)(void *); | |
void *DisableContext; | |
unsigned __int8 AbsoluteSystemTime; | |
$6EED56CE6445098B5DFB6E7F21F12A53 ___u9; | |
unsigned __int8 CollectionIndex[2]; | |
}; | |
/* 2140 */ | |
struct _POP_THERMAL_TELEMETRY_TRACKER | |
{ | |
unsigned __int8 AccountingDisabled; | |
unsigned __int8 ActiveLevels; | |
unsigned __int64 LastPassiveUpdateTime; | |
unsigned __int64 LastActiveUpdateTime; | |
unsigned __int64 TotalPassiveTime[21]; | |
unsigned __int64 PassiveTimeSnap[21]; | |
unsigned __int64 TotalActiveTime[10]; | |
unsigned __int64 ActiveTimeSnap[10]; | |
unsigned __int64 TotalTime; | |
unsigned __int64 TotalTimeSnap; | |
}; | |
/* 2141 */ | |
struct $5BEFD3C5B49F1A6EE468A287AA3CC2B5 | |
{ | |
_LIST_ENTRY Link; | |
POWER_POLICY_DEVICE_TYPE DeviceType; | |
void *Notification; | |
_UNICODE_STRING Name; | |
_DEVICE_OBJECT *Device; | |
_IRP *Irp; | |
}; | |
/* 2142 */ | |
union $10E881E2EA1EF0D61B47E2B5850EDC30 | |
{ | |
_POP_POLICY_DEVICE PolicyDevice; | |
$5BEFD3C5B49F1A6EE468A287AA3CC2B5 __s1; | |
}; | |
/* 2143 */ | |
struct _POP_THERMAL_ZONE | |
{ | |
$10E881E2EA1EF0D61B47E2B5850EDC30 ___u0; | |
unsigned __int8 State; | |
unsigned __int8 Flags; | |
unsigned __int8 Removing; | |
unsigned __int8 Mode; | |
unsigned __int8 PendingMode; | |
unsigned __int8 ActivePoint; | |
unsigned __int8 PendingActivePoint; | |
unsigned __int8 Critical; | |
unsigned __int8 ThermalStandby; | |
unsigned __int8 OverThrottled; | |
int HighPrecisionThrottle; | |
int Throttle; | |
int PendingThrottle; | |
unsigned int ThrottleReasons; | |
unsigned __int64 LastPassiveTime; | |
unsigned int SampleRate; | |
unsigned int LastTemp; | |
_THERMAL_INFORMATION_EX Info; | |
_THERMAL_POLICY Policy; | |
unsigned __int8 PolicyDriver; | |
unsigned int PollingRate; | |
unsigned __int64 LastTemperatureTime; | |
unsigned __int64 LastActiveStartTime; | |
unsigned __int64 LastPassiveStartTime; | |
_WORK_QUEUE_ITEM WorkItem; | |
_KTIMER2 ZoneUpdateTimer; | |
_POP_RW_LOCK Lock; | |
_KEVENT ZoneStopped; | |
_KEVENT TemperatureUpdated; | |
unsigned int InstanceId; | |
_POP_THERMAL_TELEMETRY_TRACKER TelemetryTracker; | |
_UNICODE_STRING Description; | |
}; | |
/* 2144 */ | |
struct _TRIAGE_DEVICE_NODE | |
{ | |
_TRIAGE_DEVICE_NODE *Sibling; | |
_TRIAGE_DEVICE_NODE *Child; | |
_TRIAGE_DEVICE_NODE *Parent; | |
_TRIAGE_DEVICE_NODE *LastChild; | |
_DEVICE_OBJECT *PhysicalDeviceObject; | |
_UNICODE_STRING InstancePath; | |
_UNICODE_STRING ServiceName; | |
_IRP *PendingIrp; | |
_TRIAGE_POP_FX_DEVICE *FxDevice; | |
}; | |
/* 2146 */ | |
struct _TRIAGE_POP_FX_DEVICE | |
{ | |
_LIST_ENTRY Link; | |
_IRP *Irp; | |
_TRIAGE_POP_IRP_DATA *IrpData; | |
int Status; | |
int PowerReqCall; | |
int PowerNotReqCall; | |
_TRIAGE_DEVICE_NODE *DeviceNode; | |
}; | |
/* 2145 */ | |
struct _TRIAGE_POP_IRP_DATA | |
{ | |
_LIST_ENTRY Link; | |
_IRP *Irp; | |
_DEVICE_OBJECT *Pdo; | |
}; | |
/* 2147 */ | |
struct _TRIAGE_PNP_DEVICE_COMPLETION_REQUEST | |
{ | |
_LIST_ENTRY ListEntry; | |
_TRIAGE_DEVICE_NODE *DeviceNode; | |
}; | |
/* 2148 */ | |
struct __declspec(align(8)) _PI_BUS_EXTENSION | |
{ | |
unsigned int Flags; | |
unsigned __int8 NumberCSNs; | |
unsigned __int8 *ReadDataPort; | |
unsigned __int8 DataPortMapped; | |
unsigned __int8 *AddressPort; | |
unsigned __int8 AddrPortMapped; | |
unsigned __int8 *CommandPort; | |
unsigned __int8 CmdPortMapped; | |
unsigned int NextSlotNumber; | |
_SINGLE_LIST_ENTRY DeviceList; | |
_SINGLE_LIST_ENTRY CardList; | |
_DEVICE_OBJECT *PhysicalBusDevice; | |
_DEVICE_OBJECT *FunctionalBusDevice; | |
_DEVICE_OBJECT *AttachedDevice; | |
unsigned int BusNumber; | |
_SYSTEM_POWER_STATE SystemPowerState; | |
_DEVICE_POWER_STATE DevicePowerState; | |
}; | |
/* 2149 */ | |
struct _BUS_EXTENSION_LIST | |
{ | |
void *Next; | |
_PI_BUS_EXTENSION *BusExtension; | |
}; | |
/* 2150 */ | |
struct __declspec(align(8)) _VF_TRACKER_STAMP | |
{ | |
void *Thread; | |
unsigned __int8 Flags : 8; | |
unsigned __int8 OldIrql : 8; | |
unsigned __int8 NewIrql : 8; | |
unsigned __int8 Processor : 8; | |
}; | |
/* 2153 */ | |
union $862B22263D2BCB1278E870B6A07DBE88 | |
{ | |
struct | |
{ | |
unsigned int PercentLevel; | |
} Battery; | |
struct | |
{ | |
unsigned int Type; | |
} Button; | |
}; | |
/* 2151 */ | |
struct __declspec(align(8)) _POP_ACTION_TRIGGER | |
{ | |
POWER_POLICY_DEVICE_TYPE Type; | |
unsigned int Flags; | |
_POP_TRIGGER_WAIT *Wait; | |
$862B22263D2BCB1278E870B6A07DBE88 ___u3; | |
}; | |
/* 2152 */ | |
struct _POP_TRIGGER_WAIT | |
{ | |
_KEVENT Event; | |
int Status; | |
_LIST_ENTRY Link; | |
_POP_ACTION_TRIGGER *Trigger; | |
}; | |
/* 2155 */ | |
struct _RTL_ATOM_TABLE_REFERENCE | |
{ | |
_LIST_ENTRY LowBoxList; | |
unsigned int LowBoxID; | |
unsigned __int16 ReferenceCount; | |
unsigned __int16 Flags; | |
}; | |
/* 2154 */ | |
struct __declspec(align(8)) _RTL_ATOM_TABLE_ENTRY | |
{ | |
_RTL_ATOM_TABLE_ENTRY *HashLink; | |
unsigned __int16 HandleIndex; | |
unsigned __int16 Atom; | |
_RTL_ATOM_TABLE_REFERENCE Reference; | |
unsigned __int8 NameLength; | |
wchar_t Name[1]; | |
}; | |
/* 2156 */ | |
struct _RTL_ATOM_TABLE | |
{ | |
unsigned int Signature; | |
volatile int ReferenceCount; | |
_EX_PUSH_LOCK PushLock; | |
_HANDLE_TABLE *ExHandleTable; | |
unsigned int Flags; | |
unsigned int NumberOfBuckets; | |
_RTL_ATOM_TABLE_ENTRY *Buckets[1]; | |
}; | |
/* 2157 */ | |
struct __WIL__WNF_TYPE_ID | |
{ | |
_GUID TypeId; | |
}; | |
/* 2159 */ | |
struct $43FC242B40D8AEB76DDF941E992C6590 | |
{ | |
int (__fastcall *Callback)(_OBJECT_SYMBOLIC_LINK *, void *, _UNICODE_STRING *, void **); | |
void *CallbackContext; | |
}; | |
/* 2160 */ | |
union $C12AA24F7876C01AE2A04C0EF0E52F83 | |
{ | |
_UNICODE_STRING LinkTarget; | |
$43FC242B40D8AEB76DDF941E992C6590 __s1; | |
}; | |
/* 2158 */ | |
struct __declspec(align(8)) _OBJECT_SYMBOLIC_LINK | |
{ | |
_LARGE_INTEGER CreationTime; | |
$C12AA24F7876C01AE2A04C0EF0E52F83 ___u1; | |
unsigned int DosDeviceDriveIndex; | |
unsigned int Flags; | |
unsigned int AccessMask; | |
}; | |
/* 2161 */ | |
struct __declspec(align(8)) _PI_RESOURCE_ARBITER_ENTRY | |
{ | |
_LIST_ENTRY DeviceArbiterList; | |
unsigned __int8 ResourceType; | |
_ARBITER_INTERFACE *ArbiterInterface; | |
_DEVICE_NODE *DeviceNode; | |
_LIST_ENTRY ResourceList; | |
_LIST_ENTRY BestResourceList; | |
_LIST_ENTRY BestConfig; | |
_LIST_ENTRY ActiveArbiterList; | |
unsigned __int8 State; | |
unsigned __int8 ResourcesChanged; | |
}; | |
/* 2162 */ | |
struct _MM_DRIVER_VERIFIER_DATA | |
{ | |
unsigned int Level; | |
volatile unsigned int RaiseIrqls; | |
volatile unsigned int AcquireSpinLocks; | |
volatile unsigned int SynchronizeExecutions; | |
volatile unsigned int AllocationsAttempted; | |
volatile unsigned int AllocationsSucceeded; | |
volatile unsigned int AllocationsSucceededSpecialPool; | |
unsigned int AllocationsWithNoTag; | |
unsigned int TrimRequests; | |
unsigned int Trims; | |
unsigned int AllocationsFailed; | |
volatile unsigned int AllocationsFailedDeliberately; | |
volatile unsigned int Loads; | |
volatile unsigned int Unloads; | |
unsigned int UnTrackedPool; | |
unsigned int UserTrims; | |
volatile unsigned int CurrentPagedPoolAllocations; | |
volatile unsigned int CurrentNonPagedPoolAllocations; | |
unsigned int PeakPagedPoolAllocations; | |
unsigned int PeakNonPagedPoolAllocations; | |
volatile unsigned __int64 PagedBytes; | |
volatile unsigned __int64 NonPagedBytes; | |
unsigned __int64 PeakPagedBytes; | |
unsigned __int64 PeakNonPagedBytes; | |
volatile unsigned int BurstAllocationsFailedDeliberately; | |
unsigned int SessionTrims; | |
volatile unsigned int OptionChanges; | |
volatile unsigned int VerifyMode; | |
_UNICODE_STRING PreviousBucketName; | |
volatile unsigned int ExecutePoolTypes; | |
volatile unsigned int ExecutePageProtections; | |
volatile unsigned int ExecutePageMappings; | |
volatile unsigned int ExecuteWriteSections; | |
volatile unsigned int SectionAlignmentFailures; | |
volatile unsigned int IATInExecutableSection; | |
}; | |
/* 2163 */ | |
struct _VI_VERIFIER_ISSUE | |
{ | |
unsigned __int64 IssueType; | |
void *Address; | |
unsigned __int64 Parameters[2]; | |
}; | |
/* 2164 */ | |
struct FEATURE_STATE_CHANGE_SUBSCRIPTION__ | |
{ | |
int unused; | |
}; | |
/* 2165 */ | |
struct __declspec(align(8)) _PNP_DEVICE_ACTION_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
_DEVICE_OBJECT *DeviceObject; | |
_PNP_DEVICE_ACTION_REQUEST RequestType; | |
unsigned __int8 ReorderingBarrier; | |
unsigned __int64 RequestArgument; | |
_KEVENT *CompletionEvent; | |
int *CompletionStatus; | |
_GUID ActivityId; | |
int RefCount; | |
unsigned __int8 Dequeued; | |
_EX_PUSH_LOCK CancelLock; | |
unsigned __int8 CancelRequested; | |
}; | |
/* 2166 */ | |
struct _WNF_DELIVERY_DESCRIPTOR | |
{ | |
unsigned __int64 SubscriptionId; | |
_WNF_STATE_NAME StateName; | |
unsigned int ChangeStamp; | |
unsigned int StateDataSize; | |
unsigned int EventMask; | |
_WNF_TYPE_ID TypeId; | |
unsigned int StateDataOffset; | |
}; | |
/* 2167 */ | |
struct _TraceLoggingMetadata_t | |
{ | |
unsigned int Signature; | |
unsigned __int16 Size; | |
unsigned __int8 Version; | |
unsigned __int8 Flags; | |
unsigned __int64 Magic; | |
}; | |
/* 2168 */ | |
struct __declspec(align(8)) _IO_WORKITEM | |
{ | |
_WORK_QUEUE_ITEM WorkItem; | |
void (__fastcall *Routine)(void *, void *, _IO_WORKITEM *); | |
void *IoObject; | |
void *Context; | |
_ETHREAD *WorkOnBehalfThread; | |
unsigned int Type; | |
_GUID ActivityId; | |
}; | |
/* 2169 */ | |
struct $C9F5A97C70584AE568CA830DA491103E | |
{ | |
unsigned __int64 ErrorStatus : 1; | |
unsigned __int64 PhysicalAddress : 1; | |
unsigned __int64 PhysicalAddressMask : 1; | |
unsigned __int64 Node : 1; | |
unsigned __int64 Card : 1; | |
unsigned __int64 Module : 1; | |
unsigned __int64 Bank : 1; | |
unsigned __int64 Device : 1; | |
unsigned __int64 Row : 1; | |
unsigned __int64 Column : 1; | |
unsigned __int64 BitPosition : 1; | |
unsigned __int64 RequesterId : 1; | |
unsigned __int64 ResponderId : 1; | |
unsigned __int64 TargetId : 1; | |
unsigned __int64 ErrorType : 1; | |
unsigned __int64 RankNumber : 1; | |
unsigned __int64 CardHandle : 1; | |
unsigned __int64 ModuleHandle : 1; | |
unsigned __int64 ExtendedRow : 1; | |
unsigned __int64 BankGroup : 1; | |
unsigned __int64 BankAddress : 1; | |
unsigned __int64 ChipIdentification : 1; | |
unsigned __int64 Reserved : 42; | |
}; | |
/* 2170 */ | |
union _WHEA_MEMORY_ERROR_SECTION_VALIDBITS | |
{ | |
$C9F5A97C70584AE568CA830DA491103E __s0; | |
unsigned __int64 ValidBits; | |
}; | |
/* 2171 */ | |
struct $390C86F153586C246F7E5B624A004BCC | |
{ | |
unsigned __int64 Reserved1 : 8; | |
unsigned __int64 ErrorType : 8; | |
unsigned __int64 Address : 1; | |
unsigned __int64 Control : 1; | |
unsigned __int64 Data : 1; | |
unsigned __int64 Responder : 1; | |
unsigned __int64 Requester : 1; | |
unsigned __int64 FirstError : 1; | |
unsigned __int64 Overflow : 1; | |
unsigned __int64 Reserved2 : 41; | |
}; | |
/* 2172 */ | |
union _WHEA_ERROR_STATUS | |
{ | |
unsigned __int64 ErrorStatus; | |
$390C86F153586C246F7E5B624A004BCC __s1; | |
}; | |
/* 2173 */ | |
struct _WHEA_MEMORY_ERROR_SECTION | |
{ | |
_WHEA_MEMORY_ERROR_SECTION_VALIDBITS ValidBits; | |
_WHEA_ERROR_STATUS ErrorStatus; | |
unsigned __int64 PhysicalAddress; | |
unsigned __int64 PhysicalAddressMask; | |
unsigned __int16 Node; | |
unsigned __int16 Card; | |
unsigned __int16 Module; | |
unsigned __int16 Bank; | |
unsigned __int16 Device; | |
unsigned __int16 Row; | |
unsigned __int16 Column; | |
unsigned __int16 BitPosition; | |
unsigned __int64 RequesterId; | |
unsigned __int64 ResponderId; | |
unsigned __int64 TargetId; | |
unsigned __int8 ErrorType; | |
unsigned __int8 Extended; | |
unsigned __int16 RankNumber; | |
unsigned __int16 CardHandle; | |
unsigned __int16 ModuleHandle; | |
}; | |
/* 2174 */ | |
struct _EX_HEAP_POOL_NODE | |
{ | |
_SEGMENT_HEAP *Heaps[4]; | |
_RTL_DYNAMIC_LOOKASIDE Lookasides[2]; | |
}; | |
/* 2175 */ | |
struct __declspec(align(64)) _EX_POOL_HEAP_MANAGER_STATE | |
{ | |
_RTLP_HP_HEAP_MANAGER HeapManager; | |
unsigned int NumberOfPools; | |
_EX_HEAP_POOL_NODE PoolNode[64]; | |
_SEGMENT_HEAP *SpecialHeaps[4]; | |
}; | |
/* 2176 */ | |
struct _IOP_IRP_EXTENSION_STATUS | |
{ | |
unsigned int Flags; | |
unsigned int ActivityId; | |
unsigned int IoTracking; | |
}; | |
/* 2177 */ | |
struct _EX_WORK_QUEUE | |
{ | |
_KPRIQUEUE WorkPriQueue; | |
_EX_PARTITION *Partition; | |
_ENODE *Node; | |
volatile unsigned int WorkItemsProcessed; | |
unsigned int WorkItemsProcessedLastPass; | |
volatile int ThreadCount; | |
__int32 MinThreads : 31; | |
unsigned __int32 TryFailed : 1; | |
int MaxThreads; | |
_EXQUEUEINDEX QueueIndex; | |
_KEVENT *AllThreadsExitedEvent; | |
}; | |
/* 2178 */ | |
struct __declspec(align(8)) _EX_PARTITION | |
{ | |
_EPARTITION *PartitionObject; | |
_EX_WORK_QUEUE **volatile *WorkQueues; | |
_EX_WORK_QUEUE_MANAGER **WorkQueueManagers; | |
volatile int QueueAllocationMask; | |
}; | |
/* 2179 */ | |
struct __declspec(align(4)) _EX_WORK_QUEUE_MANAGER | |
{ | |
_EX_PARTITION *Partition; | |
_ENODE *Node; | |
_KEVENT Event; | |
_KTIMER DeadlockTimer; | |
_KEVENT ReaperEvent; | |
_KTIMER2 ReaperTimer; | |
void *ThreadHandle; | |
volatile unsigned int ExitThread; | |
unsigned __int16 ThreadSeed; | |
}; | |
/* 2180 */ | |
struct _VF_TRACKER | |
{ | |
unsigned int TrackerFlags; | |
unsigned int TrackerSize; | |
unsigned int TrackerIndex; | |
unsigned int TraceDepth; | |
}; | |
/* 2181 */ | |
struct __declspec(align(8)) _VF_AVL_TREE_NODE_EX | |
{ | |
_VF_AVL_TREE_NODE Base; | |
unsigned int SessionId; | |
}; | |
/* 2182 */ | |
struct _VF_TARGET_ALL_SHARED_EXPORT_THUNKS | |
{ | |
struct _VERIFIER_SHARED_EXPORT_THUNK *SharedExportThunks; | |
struct _VERIFIER_SHARED_EXPORT_THUNK *PoolSharedExportThunks; | |
struct _VERIFIER_SHARED_EXPORT_THUNK *OrderDependentSharedExportThunks; | |
struct _VERIFIER_SHARED_EXPORT_THUNK *XdvSharedExportThunks; | |
}; | |
/* 2183 */ | |
struct _VF_TARGET_DRIVER | |
{ | |
_VF_AVL_TREE_NODE_EX TreeNode; | |
union | |
{ | |
_VF_TARGET_ALL_SHARED_EXPORT_THUNKS AllSharedExportThunks; | |
struct | |
{ | |
unsigned __int32 SnapSharedExportsFailed : 1; | |
unsigned __int32 Spare : 31; | |
} Flags; | |
} u1; | |
_VF_TARGET_VERIFIED_DRIVER_DATA *VerifiedData; | |
}; | |
/* 2184 */ | |
struct _VI_POOL_PAGE_HEADER | |
{ | |
_SLIST_ENTRY *NextPage; | |
void *VerifierEntry; | |
unsigned __int64 Signature; | |
}; | |
/* 2185 */ | |
struct _VI_POOL_ENTRY_INUSE | |
{ | |
void *VirtualAddress; | |
void *CallingAddress; | |
unsigned __int64 NumberOfBytes; | |
unsigned __int64 Tag; | |
}; | |
/* 2186 */ | |
union $265DDDB45F10CB9C8A8E8EC7EC5C4040 | |
{ | |
_VI_POOL_PAGE_HEADER PageHeader; | |
_VI_POOL_ENTRY_INUSE InUse; | |
_SLIST_ENTRY *NextFree; | |
}; | |
/* 2187 */ | |
struct _VI_POOL_ENTRY | |
{ | |
$265DDDB45F10CB9C8A8E8EC7EC5C4040 ___u0; | |
}; | |
/* 2188 */ | |
struct _VI_VERIFIER_POOL_HEADER | |
{ | |
_VI_POOL_ENTRY *VerifierPoolEntry; | |
}; | |
/* 2189 */ | |
struct _MI_SYSTEM_CACHE_VIEW_ATTRIBUTES | |
{ | |
unsigned __int64 NumberOfPtes : 6; | |
unsigned __int64 PartitionId : 10; | |
unsigned __int64 SectionOffset : 48; | |
}; | |
/* 2190 */ | |
struct $EF13FE80CF55899E65D0E411456D850C | |
{ | |
unsigned __int64 Type : 2; | |
}; | |
/* 2191 */ | |
union $24FD9226A2BA7610E1528D7465E57121 | |
{ | |
void *SystemCacheVa; | |
void *SessionViewVa; | |
_EPROCESS *VadsProcess; | |
$EF13FE80CF55899E65D0E411456D850C __s3; | |
}; | |
/* 2192 */ | |
struct $7A12E994E7C3D5620BD6C5291A16EAC3 | |
{ | |
unsigned __int64 SubsectionType : 1; | |
}; | |
/* 2193 */ | |
union $46E8D79EF70475DE6E1968384763CE19 | |
{ | |
_SUBSECTION *Subsection; | |
$7A12E994E7C3D5620BD6C5291A16EAC3 __s1; | |
}; | |
/* 2194 */ | |
union $CF3DA0327981C2D4BEEC4BC2DC3DC220 | |
{ | |
_MI_SYSTEM_CACHE_VIEW_ATTRIBUTES SystemCacheAttributes; | |
unsigned __int64 SectionOffset; | |
}; | |
/* 2195 */ | |
struct _MI_REVERSE_VIEW_MAP | |
{ | |
_LIST_ENTRY ViewLinks; | |
$24FD9226A2BA7610E1528D7465E57121 ___u1; | |
$46E8D79EF70475DE6E1968384763CE19 ___u2; | |
$CF3DA0327981C2D4BEEC4BC2DC3DC220 ___u3; | |
}; | |
/* 2196 */ | |
union _LFH_RANDOM_DATA | |
{ | |
unsigned __int8 Bytes[256]; | |
unsigned __int16 Words[128]; | |
unsigned __int64 Quadwords[32]; | |
}; | |
/* 2197 */ | |
struct __declspec(align(8)) _ETW_REPLY_QUEUE | |
{ | |
_KQUEUE Queue; | |
int EventsLost; | |
}; | |
/* 2198 */ | |
union $654E83E89CAB2C1EC2AB4F095B6C2AA0 | |
{ | |
unsigned int ReplyIndex; | |
unsigned int Timeout; | |
}; | |
/* 2199 */ | |
union $50CA8CBBA05A5E98ABD5165AD2FEFF3A | |
{ | |
unsigned int ReplyCount; | |
unsigned int NotifyeeCount; | |
}; | |
/* 2200 */ | |
union $A0D7831E9BD209436320E83CE4C08798 | |
{ | |
unsigned __int64 ReplyHandle; | |
void *ReplyObject; | |
unsigned int RegIndex; | |
}; | |
/* 2201 */ | |
struct _ETWP_NOTIFICATION_HEADER | |
{ | |
_ETW_NOTIFICATION_TYPE NotificationType; | |
unsigned int NotificationSize; | |
int RefCount; | |
unsigned __int8 ReplyRequested; | |
$654E83E89CAB2C1EC2AB4F095B6C2AA0 ___u4; | |
$50CA8CBBA05A5E98ABD5165AD2FEFF3A ___u5; | |
$A0D7831E9BD209436320E83CE4C08798 ___u6; | |
unsigned int TargetPID; | |
unsigned int SourcePID; | |
_GUID DestinationGuid; | |
_GUID SourceGuid; | |
}; | |
/* 2205 */ | |
struct __unaligned __declspec(align(4)) $302A4FD098F2A40DCB3B0BDBBAF91DD6 | |
{ | |
_ETW_REPLY_QUEUE *ReplyQueue; | |
unsigned int SessionId; | |
}; | |
/* 2206 */ | |
union $A03235EFCA385467F6B9443D85ACCA0C | |
{ | |
$302A4FD098F2A40DCB3B0BDBBAF91DD6 __s0; | |
_ETW_QUEUE_ENTRY *ReplySlot[4]; | |
void *Caller; | |
}; | |
/* 2207 */ | |
union $EFF229FC4C6C82A5D00D8EB0BFE2983C | |
{ | |
_EPROCESS *Process; | |
void *CallbackContext; | |
}; | |
/* 2208 */ | |
struct $400D6A201DF43D9CD87685D077566D35 | |
{ | |
unsigned __int16 DbgKernelRegistration : 1; | |
unsigned __int16 DbgUserRegistration : 1; | |
unsigned __int16 DbgReplyRegistration : 1; | |
unsigned __int16 DbgClassicRegistration : 1; | |
unsigned __int16 DbgSessionSpaceRegistration : 1; | |
unsigned __int16 DbgModernRegistration : 1; | |
unsigned __int16 DbgClosed : 1; | |
unsigned __int16 DbgInserted : 1; | |
unsigned __int16 DbgWow64 : 1; | |
unsigned __int16 DbgUseDescriptorType : 1; | |
unsigned __int16 DbgDropProviderTraits : 1; | |
}; | |
/* 2209 */ | |
union $6E0E388D054E9E80432F96AA0CF9F6B9 | |
{ | |
unsigned __int16 Flags; | |
$400D6A201DF43D9CD87685D077566D35 __s1; | |
}; | |
/* 2202 */ | |
struct _ETW_REG_ENTRY | |
{ | |
_LIST_ENTRY RegList; | |
_LIST_ENTRY GroupRegList; | |
_ETW_GUID_ENTRY *GuidEntry; | |
_ETW_GUID_ENTRY *GroupEntry; | |
$A03235EFCA385467F6B9443D85ACCA0C ___u4; | |
$EFF229FC4C6C82A5D00D8EB0BFE2983C ___u5; | |
void *Callback; | |
unsigned __int16 Index; | |
$6E0E388D054E9E80432F96AA0CF9F6B9 ___u8; | |
unsigned __int8 EnableMask; | |
unsigned __int8 GroupEnableMask; | |
unsigned __int8 HostEnableMask; | |
unsigned __int8 HostGroupEnableMask; | |
_ETW_PROVIDER_TRAITS *Traits; | |
}; | |
/* 2203 */ | |
struct _ETW_QUEUE_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
_ETWP_NOTIFICATION_HEADER *DataBlock; | |
_ETW_REG_ENTRY *RegEntry; | |
_ETW_REG_ENTRY *ReplyObject; | |
void *WakeReference; | |
unsigned __int16 RegIndex; | |
unsigned __int16 ReplyIndex; | |
unsigned int Flags; | |
}; | |
/* 2204 */ | |
struct __declspec(align(4)) _ETW_PROVIDER_TRAITS | |
{ | |
_RTL_BALANCED_NODE Node; | |
unsigned int ReferenceCount; | |
unsigned __int8 Traits[1]; | |
}; | |
/* 2210 */ | |
struct _PS_TRUSTLET_TKSESSION_ID | |
{ | |
unsigned __int64 SessionId[4]; | |
}; | |
/* 2211 */ | |
struct _FAST_OWNER_ENTRY | |
{ | |
void *Reserved[9]; | |
}; | |
/* 2212 */ | |
struct _HEAP_GLOBAL_APPCOMPAT_FLAGS | |
{ | |
unsigned __int32 SafeInputValidation : 1; | |
unsigned __int32 Padding : 1; | |
unsigned __int32 CommitLFHSubsegments : 1; | |
unsigned __int32 AllocateHeapFromEnv : 1; | |
}; | |
/* 2213 */ | |
union $8FD5512C6196EA7569B8DDDAD8CFD00C | |
{ | |
_EPROCESS *Process; | |
_DEVICE_OBJECT *DeviceObject; | |
}; | |
/* 2214 */ | |
struct _DIAGNOSTIC_CONTEXT | |
{ | |
_REQUESTER_TYPE CallerType; | |
$8FD5512C6196EA7569B8DDDAD8CFD00C ___u1; | |
unsigned int ServiceTag; | |
unsigned __int64 ReasonSize; | |
}; | |
/* 2215 */ | |
struct $1C0B831105FBF9FD7D7436CA9EBE94EB | |
{ | |
unsigned __int8 ApcAssociated : 1; | |
unsigned __int8 FlushDpcs : 1; | |
unsigned __int8 Paused : 1; | |
unsigned __int8 Spare1 : 5; | |
}; | |
/* 2216 */ | |
union $75C8CA91817720EFBD63510773860F4A | |
{ | |
char TimerFlags; | |
$1C0B831105FBF9FD7D7436CA9EBE94EB __s1; | |
}; | |
/* 2217 */ | |
struct __declspec(align(8)) _ETIMER | |
{ | |
_KTIMER KeTimer; | |
unsigned __int64 Lock; | |
_KAPC TimerApc; | |
_KDPC TimerDpc; | |
_LIST_ENTRY ActiveTimerListEntry; | |
unsigned int Period; | |
$75C8CA91817720EFBD63510773860F4A ___u6; | |
unsigned __int8 DueTimeType; | |
unsigned __int16 Spare2; | |
_DIAGNOSTIC_CONTEXT *volatile WakeReason; | |
_LIST_ENTRY WakeTimerListEntry; | |
void *VirtualizedTimerCookie; | |
_LIST_ENTRY VirtualizedTimerLinks; | |
unsigned __int64 DueTime; | |
unsigned int CoalescingWindow; | |
}; | |
/* 2218 */ | |
struct _VI_TRACK_IRQL | |
{ | |
void *Thread; | |
unsigned __int8 OldIrql; | |
unsigned __int8 NewIrql; | |
unsigned __int16 Processor; | |
unsigned int TickCount; | |
void *StackTrace[5]; | |
}; | |
/* 2219 */ | |
struct _HEAP_FREE_ENTRY_EXTRA | |
{ | |
unsigned __int16 TagIndex; | |
unsigned __int16 FreeBackTraceIndex; | |
}; | |
/* 2220 */ | |
struct $31210AAD4295EF40720414A785869845 | |
{ | |
__int16 KernelApcDisable; | |
__int16 SpecialApcDisable; | |
}; | |
/* 2221 */ | |
union $29FAB6718E98AE18280BB9DB819532CB | |
{ | |
$31210AAD4295EF40720414A785869845 __s0; | |
unsigned int CombinedApcDisable; | |
}; | |
/* 2222 */ | |
struct _IOV_IRP_TRACE | |
{ | |
_IRP *Irp; | |
_KTHREAD *Thread; | |
$29FAB6718E98AE18280BB9DB819532CB ___u2; | |
unsigned __int8 Irql; | |
void *StackTrace[13]; | |
}; | |
/* 2223 */ | |
struct _PNP_DEVICE_COMPLETION_REQUEST | |
{ | |
_LIST_ENTRY ListEntry; | |
_DEVICE_NODE *DeviceNode; | |
void *Context; | |
_PNP_DEVNODE_STATE CompletionState; | |
unsigned int IrpPended; | |
int Status; | |
void *Information; | |
int ReferenceCount; | |
_PNP_WATCHDOG *Watchdog; | |
}; | |
/* 2227 */ | |
union $E6D610BB97B242C09D59294F51BEF9E5 | |
{ | |
_EPROCESS *ServerProcess; | |
_EPROCESS *MappingProcess; | |
}; | |
/* 2224 */ | |
struct _LPCP_PORT_OBJECT | |
{ | |
_LPCP_PORT_OBJECT *ConnectionPort; | |
_LPCP_PORT_OBJECT *ConnectedPort; | |
_LPCP_PORT_QUEUE MsgQueue; | |
_CLIENT_ID Creator; | |
void *ClientSectionBase; | |
void *ServerSectionBase; | |
void *PortContext; | |
_ETHREAD *ClientThread; | |
_SECURITY_QUALITY_OF_SERVICE SecurityQos; | |
_SECURITY_CLIENT_CONTEXT StaticSecurity; | |
_LIST_ENTRY LpcReplyChainHead; | |
_LIST_ENTRY LpcDataInfoChainHead; | |
$E6D610BB97B242C09D59294F51BEF9E5 ___u12; | |
unsigned __int16 MaxMessageLength; | |
unsigned __int16 MaxConnectionInfoLength; | |
unsigned int Flags; | |
_KEVENT WaitEvent; | |
}; | |
/* 2226 */ | |
struct _LPCP_PORT_QUEUE | |
{ | |
_LPCP_NONPAGED_PORT_QUEUE *NonPagedPortQueue; | |
_KSEMAPHORE *Semaphore; | |
_LIST_ENTRY ReceiveHead; | |
}; | |
/* 2225 */ | |
struct _LPCP_NONPAGED_PORT_QUEUE | |
{ | |
_KSEMAPHORE Semaphore; | |
_LPCP_PORT_OBJECT *BackPointer; | |
}; | |
/* 2228 */ | |
struct _IOV_FORCED_PENDING_TRACE | |
{ | |
_IRP *Irp; | |
_ETHREAD *Thread; | |
void *StackTrace[62]; | |
}; | |
/* 2229 */ | |
struct $626BA0261C0CE970D353C60914498C98 | |
{ | |
unsigned __int32 HotspotDetection : 1; | |
unsigned __int32 HotspotFullCommit : 1; | |
unsigned __int32 ActiveSubsegment : 1; | |
unsigned __int32 SmallerSubsegment : 1; | |
unsigned __int32 SingleAffinitySlot : 1; | |
unsigned __int32 ApplyLfhDecommitPolicy : 1; | |
unsigned __int32 EnableGarbageCollection : 1; | |
unsigned __int32 LargePagePreCommit : 1; | |
unsigned __int32 OpportunisticLargePreCommit : 1; | |
unsigned __int32 LfhForcedAffinity : 1; | |
unsigned __int32 LfhCachelinePadding : 1; | |
}; | |
/* 2230 */ | |
union RTLP_HP_LFH_PERF_FLAGS | |
{ | |
$626BA0261C0CE970D353C60914498C98 __s0; | |
unsigned int AllFlags; | |
}; | |
/* 2231 */ | |
struct _POP_SHUTDOWN_BUG_CHECK | |
{ | |
_ETHREAD *InitiatingThread; | |
_EPROCESS *InitiatingProcess; | |
void *ThreadId; | |
void *ProcessId; | |
unsigned int Code; | |
unsigned __int64 Parameter1; | |
unsigned __int64 Parameter2; | |
unsigned __int64 Parameter3; | |
unsigned __int64 Parameter4; | |
}; | |
/* 2232 */ | |
struct _DUMP_INITIALIZATION_CONTEXT | |
{ | |
unsigned int Length; | |
unsigned int Reserved; | |
void *MemoryBlock; | |
void *CommonBuffer[2]; | |
_LARGE_INTEGER PhysicalAddress[2]; | |
void (__fastcall *StallRoutine)(unsigned int); | |
unsigned __int8 (__fastcall *OpenRoutine)(_LARGE_INTEGER); | |
int (__fastcall *WriteRoutine)(_LARGE_INTEGER *, _MDL *); | |
void (__fastcall *FinishRoutine)(); | |
_ADAPTER_OBJECT *AdapterObject; | |
void *MappedRegisterBase; | |
void *PortConfiguration; | |
unsigned __int8 CrashDump; | |
unsigned __int8 MarkMemoryOnly; | |
unsigned __int8 HiberResume; | |
unsigned __int8 Reserved1; | |
unsigned int MaximumTransferSize; | |
unsigned int CommonBufferSize; | |
void *TargetAddress; | |
int (__fastcall *WritePendingRoutine)(int, _LARGE_INTEGER *, _MDL *, void *); | |
unsigned int PartitionStyle; | |
union | |
{ | |
struct | |
{ | |
unsigned int Signature; | |
unsigned int CheckSum; | |
} Mbr; | |
struct | |
{ | |
_GUID DiskId; | |
} Gpt; | |
} DiskInfo; | |
int (__fastcall *ReadRoutine)(int, _LARGE_INTEGER *, _MDL *); | |
int (__fastcall *GetDriveTelemetryRoutine)(unsigned int, unsigned int, void *, unsigned int); | |
unsigned int LogSectionTruncateSize; | |
unsigned int Parameters[16]; | |
void (__fastcall *GetTransferSizesRoutine)(unsigned int *, unsigned int *); | |
void (__fastcall *DumpNotifyRoutine)(_DUMP_EVENTS, void *, unsigned int); | |
}; | |
/* 2233 */ | |
union $65B717EDC77C5FCA62A36BC0F2DC314E | |
{ | |
void *DumpPointers; | |
void *StorageInfo; | |
}; | |
/* 2234 */ | |
struct __declspec(align(8)) _DUMP_STACK_CONTEXT | |
{ | |
_DUMP_INITIALIZATION_CONTEXT Init; | |
_LARGE_INTEGER PartitionOffset; | |
$65B717EDC77C5FCA62A36BC0F2DC314E ___u2; | |
unsigned __int8 UseStorageInfo; | |
unsigned int PointersLength; | |
wchar_t *ModulePrefix; | |
_LIST_ENTRY DriverList; | |
_STRING InitMsg; | |
_STRING ProgMsg; | |
_STRING DoneMsg; | |
void *FileObject; | |
_DEVICE_USAGE_NOTIFICATION_TYPE UsageType; | |
}; | |
/* 2235 */ | |
struct _PO_HIBER_PERF | |
{ | |
unsigned __int64 HiberIoTicks; | |
unsigned __int64 HiberIoCpuTicks; | |
unsigned __int64 HiberInitTicks; | |
unsigned __int64 HiberHiberFileTicks; | |
unsigned __int64 HiberCompressTicks; | |
unsigned __int64 HiberSharedBufferTicks; | |
unsigned __int64 HiberChecksumTicks; | |
unsigned __int64 HiberChecksumIoTicks; | |
_LARGE_INTEGER TotalHibernateTime; | |
_LARGE_INTEGER HibernateCompleteTimestamp; | |
unsigned int POSTTime; | |
unsigned int ResumeBootMgrTime; | |
unsigned int BootmgrUserInputTime; | |
unsigned __int64 ResumeAppTicks; | |
unsigned __int64 ResumeAppStartTimestamp; | |
unsigned __int64 ResumeLibraryInitTicks; | |
unsigned __int64 ResumeInitTicks; | |
unsigned __int64 ResumeRestoreImageStartTimestamp; | |
unsigned __int64 ResumeHiberFileTicks; | |
unsigned __int64 ResumeIoTicks; | |
unsigned __int64 ResumeDecompressTicks; | |
unsigned __int64 ResumeAllocateTicks; | |
unsigned __int64 ResumeUserInOutTicks; | |
unsigned __int64 ResumeMapTicks; | |
unsigned __int64 ResumeUnmapTicks; | |
unsigned __int64 ResumeChecksumTicks; | |
unsigned __int64 ResumeChecksumIoTicks; | |
unsigned __int64 ResumeKernelSwitchTimestamp; | |
unsigned __int64 CyclesPerMs; | |
unsigned __int64 WriteLogDataTimestamp; | |
unsigned __int64 KernelReturnFromHandler; | |
unsigned __int64 TimeStampCounterAtSwitchTime; | |
unsigned __int64 HalTscOffset; | |
unsigned __int64 HvlTscOffset; | |
unsigned __int64 SleeperThreadEnd; | |
unsigned __int64 PostCmosUpdateTimestamp; | |
unsigned __int64 KernelReturnSystemPowerStateTimestamp; | |
unsigned __int64 IoBoundedness; | |
unsigned __int64 KernelDecompressTicks; | |
unsigned __int64 KernelIoTicks; | |
unsigned __int64 KernelCopyTicks; | |
unsigned __int64 ReadCheckCount; | |
unsigned __int64 KernelInitTicks; | |
unsigned __int64 KernelResumeHiberFileTicks; | |
unsigned __int64 KernelIoCpuTicks; | |
unsigned __int64 KernelSharedBufferTicks; | |
unsigned __int64 KernelAnimationTicks; | |
unsigned __int64 KernelChecksumTicks; | |
unsigned __int64 KernelChecksumIoTicks; | |
_LARGE_INTEGER AnimationStart; | |
_LARGE_INTEGER AnimationStop; | |
unsigned int DeviceResumeTime; | |
unsigned __int64 SecurePagesProcessed; | |
unsigned __int64 BootPagesProcessed; | |
unsigned __int64 KernelPagesProcessed; | |
unsigned __int64 BootBytesWritten; | |
unsigned __int64 KernelBytesWritten; | |
unsigned __int64 BootPagesWritten; | |
unsigned __int64 KernelPagesWritten; | |
unsigned __int64 BytesWritten; | |
unsigned int PagesWritten; | |
unsigned int FileRuns; | |
unsigned int NoMultiStageResumeReason; | |
unsigned int MaxHuffRatio; | |
unsigned __int64 AdjustedTotalResumeTime; | |
unsigned __int64 ResumeCompleteTimestamp; | |
}; | |
/* 2236 */ | |
struct __declspec(align(8)) PO_MEMORY_IMAGE | |
{ | |
unsigned int Signature; | |
unsigned int ImageType; | |
unsigned int CheckSum; | |
unsigned int LengthSelf; | |
unsigned __int64 PageSelf; | |
unsigned int PageSize; | |
_LARGE_INTEGER SystemTime; | |
unsigned __int64 InterruptTime; | |
unsigned __int64 FeatureFlags; | |
unsigned __int8 HiberFlags; | |
unsigned __int8 HiberSimulateFlags; | |
unsigned __int8 spare[2]; | |
unsigned int NoHiberPtes; | |
unsigned __int64 HiberVa; | |
unsigned int NoFreePages; | |
unsigned int FreeMapCheck; | |
unsigned int WakeCheck; | |
unsigned __int64 NumPagesForLoader; | |
unsigned __int64 FirstSecureRestorePage; | |
unsigned __int64 FirstBootRestorePage; | |
unsigned __int64 FirstKernelRestorePage; | |
unsigned __int64 FirstChecksumRestorePage; | |
unsigned __int64 NoChecksumEntries; | |
_PO_HIBER_PERF PerfInfo; | |
unsigned int FirmwareRuntimeInformationPages; | |
unsigned __int64 FirmwareRuntimeInformation[1]; | |
unsigned int SpareUlong; | |
unsigned int NoBootLoaderLogPages; | |
unsigned __int64 BootLoaderLogPages[24]; | |
unsigned int NotUsed; | |
unsigned int ResumeContextCheck; | |
unsigned int ResumeContextPages; | |
unsigned __int8 Hiberboot; | |
unsigned __int8 SecureLaunched; | |
unsigned __int8 SecureBoot; | |
unsigned __int64 HvPageTableRoot; | |
unsigned __int64 HvEntryPoint; | |
unsigned __int64 HvReservedTransitionAddress; | |
unsigned __int64 HvReservedTransitionAddressSize; | |
unsigned __int64 BootFlags; | |
unsigned __int64 RestoreProcessorStateRoutine; | |
unsigned __int64 HighestPhysicalPage; | |
unsigned __int64 BitlockerKeyPfns[4]; | |
unsigned int HardwareSignature; | |
_LARGE_INTEGER SMBiosTablePhysicalAddress; | |
unsigned int SMBiosTableLength; | |
unsigned __int8 SMBiosMajorVersion; | |
unsigned __int8 SMBiosMinorVersion; | |
unsigned __int8 HiberResumeXhciHandoffSkip; | |
unsigned __int8 InitializeUSBCore; | |
unsigned __int8 ValidUSBCoreId; | |
unsigned __int8 USBCoreId; | |
unsigned __int8 SkipMemoryMapValidation; | |
}; | |
/* 2237 */ | |
struct _POP_PER_PROCESSOR_CONTEXT | |
{ | |
unsigned __int8 *UncompressedData; | |
void *MappingVa; | |
void *XpressEncodeWorkspace; | |
unsigned __int8 *CompressedDataBuffer; | |
unsigned __int64 CopyTicks; | |
unsigned __int64 CompressTicks; | |
unsigned __int64 BytesCopied; | |
unsigned __int64 PagesProcessed; | |
unsigned __int64 DecompressTicks; | |
unsigned __int64 ResumeCopyTicks; | |
unsigned __int64 SharedBufferTicks; | |
unsigned __int64 DecompressTicksByMethod[2]; | |
unsigned __int64 DecompressSizeByMethod[2]; | |
unsigned int CompressCount; | |
unsigned int HuffCompressCount; | |
}; | |
/* 2238 */ | |
struct __declspec(align(8)) _POP_IO_INFO | |
{ | |
_MDL *DumpMdl; | |
_POP_IO_STATUS IoStatus; | |
unsigned __int64 IoStartCount; | |
unsigned __int64 IoBytesCompleted; | |
unsigned __int64 IoBytesInProgress; | |
unsigned __int64 RequestSize; | |
_LARGE_INTEGER IoLocation; | |
unsigned __int64 FileOffset; | |
void *Buffer; | |
unsigned __int8 AsyncCapable; | |
unsigned __int64 BytesToRead; | |
unsigned int Pages; | |
unsigned __int64 HighestChecksumIndex; | |
unsigned __int16 PreviousChecksum; | |
}; | |
/* 2239 */ | |
union $671580CAE5BA3833B6B8200B0D387757 | |
{ | |
_RTL_BITMAP DiscardMap; | |
_RTL_BITMAP KernelPhaseMap; | |
}; | |
/* 2240 */ | |
struct __declspec(align(4)) _POP_HIBER_CONTEXT | |
{ | |
unsigned __int8 Reset; | |
unsigned __int8 HiberFlags; | |
unsigned __int8 WroteHiberFile; | |
unsigned __int8 KernelPhaseVerificationActive; | |
volatile unsigned __int8 InitializationFinished; | |
volatile int NextTableLockHeld; | |
volatile int BootPhaseFinishedBarrier; | |
volatile int KernelResumeFinishedBarrier; | |
volatile int HvCaptureReadyBarrier; | |
volatile int HvCaptureCompletedBarrier; | |
unsigned __int8 MapFrozen; | |
$671580CAE5BA3833B6B8200B0D387757 ___u11; | |
_RTL_BITMAP BootPhaseMap; | |
_LIST_ENTRY ClonedRanges; | |
unsigned int ClonedRangeCount; | |
unsigned __int64 ClonedPageCount; | |
_RTL_BITMAP *CurrentMap; | |
_LIST_ENTRY *NextCloneRange; | |
unsigned __int64 NextPreserve; | |
_MDL *LoaderMdl; | |
_MDL *AllocatedMdl; | |
unsigned __int64 PagesOut; | |
void *IoPages; | |
unsigned int IoPagesCount; | |
void *CurrentMcb; | |
_DUMP_STACK_CONTEXT *DumpStack; | |
_KPROCESSOR_STATE *WakeState; | |
unsigned int IoProgress; | |
int Status; | |
unsigned int GraphicsProc; | |
PO_MEMORY_IMAGE *MemoryImage; | |
unsigned int *PerformanceStats; | |
_MDL *BootLoaderLogMdl; | |
_MDL *FirmwareRuntimeInformationMdl; | |
void *FirmwareRuntimeInformationVa; | |
void *ResumeContext; | |
unsigned int ResumeContextPages; | |
unsigned int SecurePages; | |
unsigned int ProcessorCount; | |
_POP_PER_PROCESSOR_CONTEXT *ProcessorContext; | |
char *ProdConsBuffer; | |
unsigned int ProdConsSize; | |
unsigned int MaxDataPages; | |
void *ExtraBuffer; | |
unsigned __int64 ExtraBufferSize; | |
void *ExtraMapVa; | |
unsigned __int64 BitlockerKeyPFN; | |
_POP_IO_INFO IoInfo; | |
wchar_t *IoChecksums; | |
unsigned __int64 IoChecksumsSize; | |
unsigned int HardwareConfigurationSignature; | |
unsigned __int8 IumEnabled; | |
unsigned __int8 SecureBoot; | |
}; | |
/* 2241 */ | |
union $9B54EDCA27E23E747539C271EE96DCB6 | |
{ | |
unsigned __int64 ProcessImageNameOffset; | |
unsigned __int64 DeviceDescriptionOffset; | |
}; | |
/* 2242 */ | |
struct $1E0057149CB9E38A8E5BD3660EC304C0 | |
{ | |
unsigned int ProcessId; | |
unsigned int ServiceTag; | |
}; | |
/* 2243 */ | |
union $21AF1C7562A77BBEB28F29E9B13471C4 | |
{ | |
$1E0057149CB9E38A8E5BD3660EC304C0 __s0; | |
unsigned __int64 DevicePathOffset; | |
}; | |
/* 2244 */ | |
struct _DIAGNOSTIC_BUFFER | |
{ | |
unsigned __int64 Size; | |
_REQUESTER_TYPE CallerType; | |
$9B54EDCA27E23E747539C271EE96DCB6 ___u2; | |
$21AF1C7562A77BBEB28F29E9B13471C4 ___u3; | |
unsigned __int64 ReasonOffset; | |
}; | |
/* 2245 */ | |
struct _POP_POWER_ACTION | |
{ | |
unsigned __int8 Updates; | |
unsigned __int8 State; | |
unsigned __int8 Shutdown; | |
POWER_ACTION Action; | |
_SYSTEM_POWER_STATE LightestState; | |
unsigned int Flags; | |
int Status; | |
POWER_POLICY_DEVICE_TYPE DeviceType; | |
unsigned int DeviceTypeFlags; | |
unsigned __int8 IrpMinor; | |
unsigned __int8 Waking; | |
_SYSTEM_POWER_STATE SystemState; | |
_SYSTEM_POWER_STATE NextSystemState; | |
_SYSTEM_POWER_STATE EffectiveSystemState; | |
_SYSTEM_POWER_STATE CurrentSystemState; | |
_POP_SHUTDOWN_BUG_CHECK *ShutdownBugCode; | |
_POP_DEVICE_SYS_STATE *DevState; | |
_POP_HIBER_CONTEXT *HiberContext; | |
unsigned __int64 WakeTime; | |
unsigned __int64 SleepTime; | |
unsigned __int64 WakeFirstUnattendedTime; | |
SYSTEM_POWER_CONDITION WakeAlarmSignaled; | |
struct {unsigned __int64 RequestedTime;unsigned __int64 ProgrammedTime;_DIAGNOSTIC_BUFFER *TimerInfo;}; WakeAlarm[3]; | |
unsigned __int8 WakeAlarmPaused; | |
unsigned __int64 WakeAlarmLastTime; | |
unsigned __int64 DozeDeferralStartTime; | |
SYSTEM_POWER_CAPABILITIES FilteredCapabilities; | |
unsigned __int64 WatchdogLock; | |
_KDPC WatchdogDpc; | |
_KTIMER WatchdogTimer; | |
unsigned __int8 WatchdogInitialized; | |
_POP_POWER_ACTION_WATCHDOG_STATE WatchdogState; | |
unsigned __int64 WatchdogStartTime; | |
_KTHREAD *ActionWorkerThread; | |
_KTHREAD *PromoteActionWorkerThread; | |
_KTHREAD *UnlockAfterSleepWorkerThread; | |
}; | |
/* 2246 */ | |
struct _ISR_THUNK | |
{ | |
unsigned __int8 PushImm; | |
unsigned __int8 Vector; | |
unsigned __int8 PushRbp; | |
unsigned __int8 JmpOp; | |
int JmpOffset; | |
}; | |
/* 2247 */ | |
struct _FAST_ERESOURCE_INTERNAL | |
{ | |
_LIST_ENTRY SystemResourcesList; | |
void *ReservedPointer; | |
__int16 ActiveCount; | |
unsigned __int16 Flag; | |
_KWAIT_CHAIN SharedWaiters; | |
_KWAIT_CHAIN ExclusiveWaiters; | |
_LIST_ENTRY OwnerEntryListHead; | |
unsigned int ActiveEntries; | |
unsigned int ContentionCount; | |
unsigned int NumberOfSharedWaiters; | |
unsigned int NumberOfExclusiveWaiters; | |
void *ReservedWin64OnlyPointer; | |
$FA8F2364BE4EE7049C389A9C36002332 ___u12; | |
unsigned __int64 SpinLock; | |
}; | |
/* 2248 */ | |
struct _WAITING_IRP | |
{ | |
_LIST_ENTRY Links; | |
_IRP *Irp; | |
void (__fastcall *CompletionRoutine)(void *, _IRP *); | |
void *Context; | |
_KEVENT *Event; | |
unsigned int Information; | |
unsigned __int8 BreakAllRH; | |
unsigned __int8 OplockBreakNotify; | |
_FILE_OBJECT *FileObject; | |
}; | |
/* 2249 */ | |
struct _UNEXPECTED_INTERRUPT | |
{ | |
unsigned __int8 PushImm; | |
unsigned __int8 Vector; | |
unsigned __int8 PushRbp; | |
unsigned __int8 JmpOp; | |
int JmpOffset; | |
}; | |
/* 2250 */ | |
struct __declspec(align(4)) _LEARNING_MODE_DATA | |
{ | |
unsigned int Settings; | |
unsigned __int8 Enabled; | |
unsigned __int8 PermissiveModeEnabled; | |
}; | |
/* 2251 */ | |
union $400FE8F293217145DA00178F69046B30 | |
{ | |
unsigned __int64 KernelCallbackTable; | |
unsigned __int64 UserSharedInfoPtr; | |
}; | |
/* 2252 */ | |
struct _PEB64 | |
{ | |
unsigned __int8 InheritedAddressSpace; | |
unsigned __int8 ReadImageFileExecOptions; | |
unsigned __int8 BeingDebugged; | |
$1FC3CF19FE78E08DBCA0A468418A0394 ___u3; | |
unsigned __int8 Padding0[4]; | |
unsigned __int64 Mutant; | |
unsigned __int64 ImageBaseAddress; | |
unsigned __int64 Ldr; | |
unsigned __int64 ProcessParameters; | |
unsigned __int64 SubSystemData; | |
unsigned __int64 ProcessHeap; | |
unsigned __int64 FastPebLock; | |
unsigned __int64 AtlThunkSListPtr; | |
unsigned __int64 IFEOKey; | |
$C56898A4BC7BD2644011280E50E313AE ___u14; | |
unsigned __int8 Padding1[4]; | |
$400FE8F293217145DA00178F69046B30 ___u16; | |
unsigned int SystemReserved; | |
unsigned int AtlThunkSListPtr32; | |
unsigned __int64 ApiSetMap; | |
unsigned int TlsExpansionCounter; | |
unsigned __int8 Padding2[4]; | |
unsigned __int64 TlsBitmap; | |
unsigned int TlsBitmapBits[2]; | |
unsigned __int64 ReadOnlySharedMemoryBase; | |
unsigned __int64 SharedData; | |
unsigned __int64 ReadOnlyStaticServerData; | |
unsigned __int64 AnsiCodePageData; | |
unsigned __int64 OemCodePageData; | |
unsigned __int64 UnicodeCaseTableData; | |
unsigned int NumberOfProcessors; | |
unsigned int NtGlobalFlag; | |
_LARGE_INTEGER CriticalSectionTimeout; | |
unsigned __int64 HeapSegmentReserve; | |
unsigned __int64 HeapSegmentCommit; | |
unsigned __int64 HeapDeCommitTotalFreeThreshold; | |
unsigned __int64 HeapDeCommitFreeBlockThreshold; | |
unsigned int NumberOfHeaps; | |
unsigned int MaximumNumberOfHeaps; | |
unsigned __int64 ProcessHeaps; | |
unsigned __int64 GdiSharedHandleTable; | |
unsigned __int64 ProcessStarterHelper; | |
unsigned int GdiDCAttributeList; | |
unsigned __int8 Padding3[4]; | |
unsigned __int64 LoaderLock; | |
unsigned int OSMajorVersion; | |
unsigned int OSMinorVersion; | |
unsigned __int16 OSBuildNumber; | |
unsigned __int16 OSCSDVersion; | |
unsigned int OSPlatformId; | |
unsigned int ImageSubsystem; | |
unsigned int ImageSubsystemMajorVersion; | |
unsigned int ImageSubsystemMinorVersion; | |
unsigned __int8 Padding4[4]; | |
unsigned __int64 ActiveProcessAffinityMask; | |
unsigned int GdiHandleBuffer[60]; | |
unsigned __int64 PostProcessInitRoutine; | |
unsigned __int64 TlsExpansionBitmap; | |
unsigned int TlsExpansionBitmapBits[32]; | |
unsigned int SessionId; | |
unsigned __int8 Padding5[4]; | |
_ULARGE_INTEGER AppCompatFlags; | |
_ULARGE_INTEGER AppCompatFlagsUser; | |
unsigned __int64 pShimData; | |
unsigned __int64 AppCompatInfo; | |
_STRING64 CSDVersion; | |
unsigned __int64 ActivationContextData; | |
unsigned __int64 ProcessAssemblyStorageMap; | |
unsigned __int64 SystemDefaultActivationContextData; | |
unsigned __int64 SystemAssemblyStorageMap; | |
unsigned __int64 MinimumStackCommit; | |
unsigned __int64 SparePointers[4]; | |
unsigned int SpareUlongs[5]; | |
unsigned __int64 WerRegistrationData; | |
unsigned __int64 WerShipAssertPtr; | |
unsigned __int64 pUnused; | |
unsigned __int64 pImageHeaderHash; | |
$19872DF55B967FE50480526B665E49FA ___u77; | |
unsigned __int8 Padding6[4]; | |
unsigned __int64 CsrServerReadOnlySharedMemoryBase; | |
unsigned __int64 TppWorkerpListLock; | |
LIST_ENTRY64 TppWorkerpList; | |
unsigned __int64 WaitOnAddressHashTable[128]; | |
unsigned __int64 TelemetryCoverageHeader; | |
unsigned int CloudFileFlags; | |
unsigned int CloudFileDiagFlags; | |
char PlaceholderCompatibilityMode; | |
char PlaceholderCompatibilityModeReserved[7]; | |
unsigned __int64 LeapSecondData; | |
$DABBB401A2825D2BAEA1BC7E666346FE ___u89; | |
unsigned int NtGlobalFlag2; | |
}; | |
/* 2253 */ | |
struct _VF_ADDRESS_RANGE | |
{ | |
unsigned __int8 *Start; | |
unsigned __int8 *End; | |
}; | |
/* 2254 */ | |
struct _VI_DEADLOCK_GLOBALS | |
{ | |
__int64 TimeAcquire; | |
__int64 TimeRelease; | |
_LIST_ENTRY *ResourceDatabase; | |
unsigned __int64 ResourceDatabaseCount; | |
_VF_ADDRESS_RANGE ResourceAddressRange[1023]; | |
_LIST_ENTRY *ThreadDatabase; | |
unsigned __int64 ThreadDatabaseCount; | |
_VF_ADDRESS_RANGE ThreadAddressRange[1023]; | |
volatile unsigned int AllocationFailures; | |
unsigned int NodesTrimmedBasedOnAge; | |
unsigned int NodesTrimmedBasedOnCount; | |
unsigned int NodesSearched; | |
unsigned int MaxNodesSearched; | |
unsigned int SequenceNumber; | |
unsigned int RecursionDepthLimit; | |
unsigned int SearchedNodesLimit; | |
unsigned int DepthLimitHits; | |
unsigned int SearchLimitHits; | |
unsigned int StackLimitHits; | |
unsigned int ABC_ACB_Skipped; | |
unsigned int OutOfOrderReleases; | |
unsigned int NodesReleasedOutOfOrder; | |
unsigned int TotalReleases; | |
unsigned int RootNodesDeleted; | |
unsigned int ForgetHistoryCounter; | |
void *Instigator; | |
unsigned int NumberOfParticipants; | |
_VI_DEADLOCK_NODE *Participant[32]; | |
int ChildrenCountWatermark; | |
_KERNEL_STACK_LIMITS StackType; | |
unsigned __int64 StackLowLimit; | |
unsigned __int64 StackHighLimit; | |
}; | |
/* 2255 */ | |
struct _TRIAGE_9F_POWER | |
{ | |
unsigned __int16 Signature; | |
unsigned __int16 Revision; | |
_LIST_ENTRY *IrpList; | |
_LIST_ENTRY *ThreadList; | |
_TRIAGE_EX_WORK_QUEUE *DelayedWorkQueue; | |
_TRIAGE_EX_WORK_QUEUE *DelayedIoWorkQueue; | |
}; | |
/* 2256 */ | |
struct _PTE_TRACKER | |
{ | |
_LIST_ENTRY ListEntry; | |
_MDL *Mdl; | |
unsigned __int64 Count; | |
void *SystemVa; | |
void *StartVa; | |
unsigned int Offset; | |
unsigned int Length; | |
unsigned __int64 Page; | |
unsigned __int32 IoMapping : 1; | |
unsigned __int32 Matched : 1; | |
unsigned __int32 CacheAttribute : 2; | |
unsigned __int32 GuardPte : 1; | |
unsigned __int32 Spare : 27; | |
void *StackTrace[7]; | |
}; | |
/* 2257 */ | |
union $F2C190BB72C14435A6FA8B4EF1850037 | |
{ | |
unsigned __int8 Characters[4]; | |
unsigned int FullHint; | |
}; | |
/* 2258 */ | |
struct _CM_FAST_LEAF_HINT | |
{ | |
$F2C190BB72C14435A6FA8B4EF1850037 ___u0; | |
}; | |
/* 2259 */ | |
union $3FDA90B6F3206509C2948A05172D412A | |
{ | |
_CM_FAST_LEAF_HINT NameHint; | |
_CM_COMPONENT_HASH HashKey; | |
}; | |
/* 2260 */ | |
struct _CM_INDEX | |
{ | |
unsigned int Cell; | |
$3FDA90B6F3206509C2948A05172D412A ___u1; | |
}; | |
/* 2261 */ | |
struct _CRITICAL_PROCESS_EXCEPTION_DATA | |
{ | |
_GUID ReportId; | |
_UNICODE_STRING ModuleName; | |
unsigned int ModuleTimestamp; | |
unsigned int ModuleSize; | |
unsigned __int64 Offset; | |
}; | |
/* 2262 */ | |
struct _CALL_PERFORMANCE_DATA | |
{ | |
unsigned __int64 SpinLock; | |
_LIST_ENTRY HashTable[64]; | |
}; | |
/* 2263 */ | |
struct __declspec(align(8)) _SEP_LOWBOX_NUMBER_MAPPING | |
{ | |
_EX_PUSH_LOCK Lock; | |
_RTL_BITMAP Bitmap; | |
_RTL_DYNAMIC_HASH_TABLE *HashTable; | |
unsigned __int8 Active; | |
}; | |
/* 2264 */ | |
struct _SESSION_LOWBOX_MAP | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned int SessionId; | |
_SEP_LOWBOX_NUMBER_MAPPING LowboxMap; | |
}; | |
/* 2265 */ | |
struct _POOL_TRACKER_BIG_PAGES | |
{ | |
volatile unsigned __int64 Va; | |
unsigned int Key; | |
unsigned __int32 Pattern : 8; | |
unsigned __int32 PoolType : 12; | |
unsigned __int32 SlushSize : 12; | |
unsigned __int64 NumberOfBytes; | |
}; | |
/* 2266 */ | |
struct $006192E8E41FD8F2EA1B27D51D7CA475 | |
{ | |
unsigned __int8 NoDomainAccounting : 1; | |
unsigned __int8 IncreasePolicy : 2; | |
unsigned __int8 DecreasePolicy : 2; | |
unsigned __int8 Reserved : 3; | |
}; | |
/* 2267 */ | |
union $8AF06FF8B35BDAAA71FE68213EFE469F | |
{ | |
unsigned __int8 Spare; | |
union | |
{ | |
unsigned __int8 AsUCHAR; | |
$006192E8E41FD8F2EA1B27D51D7CA475 __s1; | |
} Flags; | |
}; | |
/* 2268 */ | |
struct PROCESSOR_PERFSTATE_POLICY | |
{ | |
unsigned int Revision; | |
unsigned __int8 MaxThrottle; | |
unsigned __int8 MinThrottle; | |
unsigned __int8 BusyAdjThreshold; | |
$8AF06FF8B35BDAAA71FE68213EFE469F ___u4; | |
unsigned int TimeCheck; | |
unsigned int IncreaseTime; | |
unsigned int DecreaseTime; | |
unsigned int IncreasePercent; | |
unsigned int DecreasePercent; | |
}; | |
/* 2269 */ | |
volatile struct _MMVAD_FLAGS2 | |
{ | |
unsigned __int32 FileOffset : 24; | |
unsigned __int32 Large : 1; | |
unsigned __int32 TrimBehind : 1; | |
unsigned __int32 Inherit : 1; | |
unsigned __int32 NoValidationNeeded : 1; | |
unsigned __int32 PrivateDemandZero : 1; | |
unsigned __int32 Spare : 3; | |
}; | |
/* 2270 */ | |
struct _MI_VAD_SEQUENTIAL_INFO | |
{ | |
unsigned __int64 Length : 12; | |
unsigned __int64 Vpn : 52; | |
}; | |
/* 2271 */ | |
struct _MMVAD | |
{ | |
_MMVAD_SHORT Core; | |
union | |
{ | |
unsigned int LongFlags2; | |
volatile _MMVAD_FLAGS2 VadFlags2; | |
} u2; | |
_SUBSECTION *Subsection; | |
_MMPTE *FirstPrototypePte; | |
_MMPTE *LastContiguousPte; | |
_LIST_ENTRY ViewLinks; | |
_EPROCESS *VadsProcess; | |
union | |
{ | |
_MI_VAD_SEQUENTIAL_INFO SequentialVa; | |
_MMEXTEND_INFO *ExtendedInfo; | |
} u4; | |
_FILE_OBJECT *FileObject; | |
}; | |
/* 2272 */ | |
struct __declspec(align(8)) _LDR_SERVICE_TAG_RECORD | |
{ | |
_LDR_SERVICE_TAG_RECORD *Next; | |
unsigned int ServiceTag; | |
}; | |
/* 2273 */ | |
struct _LDRP_CSLIST | |
{ | |
_SINGLE_LIST_ENTRY *Tail; | |
}; | |
/* 2274 */ | |
struct __declspec(align(8)) _LDR_DDAG_NODE | |
{ | |
_LIST_ENTRY Modules; | |
_LDR_SERVICE_TAG_RECORD *ServiceTagList; | |
unsigned int LoadCount; | |
unsigned int LoadWhileUnloadingCount; | |
unsigned int LowestLink; | |
_LDRP_CSLIST Dependencies; | |
_LDRP_CSLIST IncomingDependencies; | |
_LDR_DDAG_STATE State; | |
_SINGLE_LIST_ENTRY CondenseLink; | |
unsigned int PreorderNumber; | |
}; | |
/* 2275 */ | |
struct $58E50F58879EA8525E4DE9709914EC13 | |
{ | |
unsigned __int32 PackagedBinary : 1; | |
unsigned __int32 MarkedForRemoval : 1; | |
unsigned __int32 ImageDll : 1; | |
unsigned __int32 LoadNotificationsSent : 1; | |
unsigned __int32 TelemetryEntryProcessed : 1; | |
unsigned __int32 ProcessStaticImport : 1; | |
unsigned __int32 InLegacyLists : 1; | |
unsigned __int32 InIndexes : 1; | |
unsigned __int32 ShimDll : 1; | |
unsigned __int32 InExceptionTable : 1; | |
unsigned __int32 ReservedFlags1 : 2; | |
unsigned __int32 LoadInProgress : 1; | |
unsigned __int32 LoadConfigProcessed : 1; | |
unsigned __int32 EntryProcessed : 1; | |
unsigned __int32 ProtectDelayLoad : 1; | |
unsigned __int32 ReservedFlags3 : 2; | |
unsigned __int32 DontCallForThreads : 1; | |
unsigned __int32 ProcessAttachCalled : 1; | |
unsigned __int32 ProcessAttachFailed : 1; | |
unsigned __int32 CorDeferredValidate : 1; | |
unsigned __int32 CorImage : 1; | |
unsigned __int32 DontRelocate : 1; | |
unsigned __int32 CorILOnly : 1; | |
unsigned __int32 ChpeImage : 1; | |
unsigned __int32 ReservedFlags5 : 2; | |
unsigned __int32 Redirected : 1; | |
unsigned __int32 ReservedFlags6 : 2; | |
unsigned __int32 CompatDatabaseProcessed : 1; | |
}; | |
/* 2276 */ | |
union $87F33FD91D6473984C0D81E2C5575874 | |
{ | |
unsigned __int8 FlagGroup[4]; | |
unsigned int Flags; | |
$58E50F58879EA8525E4DE9709914EC13 __s2; | |
}; | |
/* 2277 */ | |
struct __declspec(align(4)) _LDR_DATA_TABLE_ENTRY | |
{ | |
_LIST_ENTRY InLoadOrderLinks; | |
_LIST_ENTRY InMemoryOrderLinks; | |
_LIST_ENTRY InInitializationOrderLinks; | |
void *DllBase; | |
void *EntryPoint; | |
unsigned int SizeOfImage; | |
_UNICODE_STRING FullDllName; | |
_UNICODE_STRING BaseDllName; | |
$87F33FD91D6473984C0D81E2C5575874 ___u8; | |
unsigned __int16 ObsoleteLoadCount; | |
unsigned __int16 TlsIndex; | |
_LIST_ENTRY HashLinks; | |
unsigned int TimeDateStamp; | |
struct _ACTIVATION_CONTEXT *EntryPointActivationContext; | |
void *Lock; | |
_LDR_DDAG_NODE *DdagNode; | |
_LIST_ENTRY NodeModuleLink; | |
struct _LDRP_LOAD_CONTEXT *LoadContext; | |
void *ParentDllBase; | |
void *SwitchBackContext; | |
_RTL_BALANCED_NODE BaseAddressIndexNode; | |
_RTL_BALANCED_NODE MappingInfoIndexNode; | |
unsigned __int64 OriginalBase; | |
_LARGE_INTEGER LoadTime; | |
unsigned int BaseNameHashValue; | |
_LDR_DLL_LOAD_REASON LoadReason; | |
unsigned int ImplicitPathOptions; | |
unsigned int ReferenceCount; | |
unsigned int DependentLoadFlags; | |
unsigned __int8 SigningLevel; | |
}; | |
/* 2278 */ | |
struct _KTIMER2_COLLECTION | |
{ | |
_RTL_RB_TREE Tree; | |
unsigned __int64 NextDueTime; | |
}; | |
/* 2279 */ | |
struct _VF_WATCHDOG_IRP | |
{ | |
_LIST_ENTRY ListEntry; | |
_IRP *Irp; | |
unsigned int DueTickCount; | |
volatile unsigned __int8 Inserted; | |
char TrackedStackLocation; | |
unsigned __int16 CancelTimeoutTicks; | |
}; | |
/* 2280 */ | |
struct _DEVICE_DESCRIPTION | |
{ | |
unsigned int Version; | |
unsigned __int8 Master; | |
unsigned __int8 ScatterGather; | |
unsigned __int8 DemandMode; | |
unsigned __int8 AutoInitialize; | |
unsigned __int8 Dma32BitAddresses; | |
unsigned __int8 IgnoreCount; | |
unsigned __int8 Reserved1; | |
unsigned __int8 Dma64BitAddresses; | |
unsigned int BusNumber; | |
unsigned int DmaChannel; | |
_INTERFACE_TYPE InterfaceType; | |
_DMA_WIDTH DmaWidth; | |
_DMA_SPEED DmaSpeed; | |
unsigned int MaximumLength; | |
unsigned int DmaPort; | |
unsigned int DmaAddressWidth; | |
unsigned int DmaControllerInstance; | |
unsigned int DmaRequestLine; | |
_LARGE_INTEGER DeviceAddress; | |
}; | |
/* 2281 */ | |
struct _IMAGE_SECTION_HEADER | |
{ | |
unsigned __int8 Name[8]; | |
union | |
{ | |
unsigned int PhysicalAddress; | |
unsigned int VirtualSize; | |
} Misc; | |
unsigned int VirtualAddress; | |
unsigned int SizeOfRawData; | |
unsigned int PointerToRawData; | |
unsigned int PointerToRelocations; | |
unsigned int PointerToLinenumbers; | |
unsigned __int16 NumberOfRelocations; | |
unsigned __int16 NumberOfLinenumbers; | |
unsigned int Characteristics; | |
}; | |
/* 2282 */ | |
struct _FAST_OWNER_ENTRY_INTERNAL | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned __int8 AbLockHandle; | |
unsigned __int8 Disowned : 1; | |
unsigned __int8 DynamicallyAllocated : 1; | |
unsigned __int8 CallerExclusive : 1; | |
unsigned __int8 IsSublistHead; | |
unsigned __int8 IsWaiting; | |
void *LockAddress; | |
void *ThreadAddress; | |
_LIST_ENTRY SublistHead; | |
_LIST_ENTRY LockListEntry; | |
}; | |
/* 2283 */ | |
struct _KSECONDARY_IDT_ENTRY | |
{ | |
unsigned __int64 SpinLock; | |
_KEVENT ConnectLock; | |
unsigned __int8 LineMasked; | |
_KINTERRUPT *InterruptList; | |
}; | |
/* 2284 */ | |
struct __unaligned __declspec(align(1)) $9E56C6E2B16BE8284F2450F421711F7A | |
{ | |
unsigned __int64 MatchAny; | |
unsigned __int64 MatchAll; | |
unsigned int EnableProperty; | |
_GUID Guid; | |
unsigned __int8 Level; | |
}; | |
/* 2285 */ | |
union $56A5E1CD7B13F0F43A616837109059E3 | |
{ | |
char LoggerName[65]; | |
$9E56C6E2B16BE8284F2450F421711F7A __s1; | |
}; | |
/* 2286 */ | |
struct _ETW_WMITRACE_WORK | |
{ | |
unsigned int LoggerId; | |
unsigned int SiloSessionId; | |
$56A5E1CD7B13F0F43A616837109059E3 ___u2; | |
char FileName[129]; | |
unsigned int MaximumFileSize; | |
unsigned int MinBuffers; | |
unsigned int MaxBuffers; | |
unsigned int BufferSize; | |
unsigned int Mode; | |
unsigned int FlushTimer; | |
__declspec(align(8)) int Status; | |
}; | |
/* 2287 */ | |
struct _MAPPED_FILE_SEGMENT | |
{ | |
_CONTROL_AREA *ControlArea; | |
unsigned int TotalNumberOfPtes; | |
_SEGMENT_FLAGS SegmentFlags; | |
unsigned __int64 NumberOfCommittedPages; | |
unsigned __int64 SizeOfSegment; | |
$1225480D13B1CE681B39AB5228AB4338 ___u5; | |
_EX_PUSH_LOCK SegmentLock; | |
}; | |
/* 2288 */ | |
struct $C907A1E44CF2311FF25A3534117FBB9D | |
{ | |
unsigned __int16 PreviousSize : 8; | |
unsigned __int16 PoolIndex : 8; | |
unsigned __int16 BlockSize : 8; | |
unsigned __int16 PoolType : 8; | |
}; | |
/* 2289 */ | |
union $46EB5F16AB725D4E774B28EEB13B75CB | |
{ | |
$C907A1E44CF2311FF25A3534117FBB9D __s0; | |
unsigned int Ulong1; | |
}; | |
/* 2290 */ | |
struct $26E45A6339AB0FB2EF605EF2D18774DE | |
{ | |
unsigned __int16 AllocatorBackTraceIndex; | |
unsigned __int16 PoolTagHash; | |
}; | |
/* 2291 */ | |
union $3753658EC5962C40A6A20EB2BFAC4436 | |
{ | |
_EPROCESS *ProcessBilled; | |
$26E45A6339AB0FB2EF605EF2D18774DE __s1; | |
}; | |
/* 2292 */ | |
struct _POOL_HEADER | |
{ | |
$46EB5F16AB725D4E774B28EEB13B75CB ___u0; | |
unsigned int PoolTag; | |
$3753658EC5962C40A6A20EB2BFAC4436 ___u2; | |
}; | |
/* 2293 */ | |
struct __declspec(align(4)) _POP_POWER_SETTING_VALUES | |
{ | |
unsigned int StructureSize; | |
_SYSTEM_POWER_POLICY PopPolicy; | |
SYSTEM_POWER_CONDITION CurrentAcDcPowerState; | |
unsigned __int8 AwayModeEnabled; | |
unsigned __int8 AwayModeEngaged; | |
unsigned __int8 AwayModePolicyAllowed; | |
volatile int AwayModeIgnoreUserPresent; | |
volatile int AwayModeIgnoreAction; | |
unsigned __int8 DisableFastS4; | |
unsigned __int8 DisableStandbyStates; | |
unsigned int UnattendSleepTimeout; | |
volatile unsigned int DiskIgnoreTime; | |
volatile unsigned int DeviceIdlePolicy; | |
unsigned int VideoDimTimeout; | |
unsigned int VideoNormalBrightness; | |
unsigned int VideoDimBrightness; | |
unsigned int AlsOffset; | |
unsigned int AlsEnabled; | |
unsigned int EsBrightness; | |
unsigned __int8 SwitchShutdownForced; | |
unsigned int SystemCoolingPolicy; | |
unsigned __int8 MediaBufferingEngaged; | |
unsigned __int8 AudioActivity; | |
unsigned __int8 FullscreenVideoPlayback; | |
unsigned int EsBatteryThreshold; | |
unsigned __int8 EsAggressive; | |
unsigned __int8 EsUserAwaySetting; | |
unsigned int ConnectivityInStandby; | |
unsigned int DisconnectedStandbyMode; | |
unsigned int UserPresencePredictionEnabled; | |
unsigned __int8 AirplaneModeEnabled; | |
unsigned __int8 BluetoothDeviceCharging; | |
}; | |
/* 2294 */ | |
struct _HEAP_UCR_DESCRIPTOR | |
{ | |
_LIST_ENTRY ListEntry; | |
_LIST_ENTRY SegmentEntry; | |
void *Address; | |
unsigned __int64 Size; | |
}; | |
/* 2295 */ | |
struct _NONOPAQUE_OPLOCK | |
{ | |
_IRP *IrpExclusiveOplock; | |
_FILE_OBJECT *FileObject; | |
_EPROCESS *ExclusiveOplockOwner; | |
_ETHREAD *ExclusiveOplockOwnerThread; | |
unsigned __int8 WaiterPriority; | |
_LIST_ENTRY IrpOplocksR; | |
_LIST_ENTRY IrpOplocksRH; | |
_LIST_ENTRY RHBreakQueue; | |
_LIST_ENTRY WaitingIrps; | |
_LIST_ENTRY DelayAckFileObjectQueue; | |
_LIST_ENTRY AtomicQueue; | |
_GUID *DeleterParentKey; | |
unsigned int OplockState; | |
_FAST_MUTEX *FastMutex; | |
}; | |
/* 2296 */ | |
union $797EDCC4B83F4AF4B6D61F4DB867B7F6 | |
{ | |
struct | |
{ | |
void *UserData; | |
void *Owner; | |
} Allocated; | |
struct | |
{ | |
_LIST_ENTRY ListHead; | |
} Merged; | |
}; | |
/* 2297 */ | |
struct _RTLP_RANGE_LIST_ENTRY | |
{ | |
unsigned __int64 Start; | |
unsigned __int64 End; | |
$797EDCC4B83F4AF4B6D61F4DB867B7F6 ___u2; | |
unsigned __int8 Attributes; | |
unsigned __int8 PublicFlags; | |
unsigned __int16 PrivateFlags; | |
_LIST_ENTRY ListEntry; | |
}; | |
/* 2298 */ | |
struct _RH_OP_CONTEXT | |
{ | |
_LIST_ENTRY Links; | |
_IRP *OplockRequestIrp; | |
_FILE_OBJECT *OplockRequestFileObject; | |
_EPROCESS *OplockRequestProcess; | |
_ETHREAD *OplockOwnerThread; | |
unsigned int Flags; | |
_LIST_ENTRY AtomicLinks; | |
}; | |
/* 2299 */ | |
union $43D821CA8B0277AAE1B557C3A7CB22EA | |
{ | |
unsigned int KernelCallbackTable; | |
unsigned int UserSharedInfoPtr; | |
}; | |
/* 2300 */ | |
struct __declspec(align(8)) _PEB32 | |
{ | |
unsigned __int8 InheritedAddressSpace; | |
unsigned __int8 ReadImageFileExecOptions; | |
unsigned __int8 BeingDebugged; | |
$1FC3CF19FE78E08DBCA0A468418A0394 ___u3; | |
unsigned int Mutant; | |
unsigned int ImageBaseAddress; | |
unsigned int Ldr; | |
unsigned int ProcessParameters; | |
unsigned int SubSystemData; | |
unsigned int ProcessHeap; | |
unsigned int FastPebLock; | |
unsigned int AtlThunkSListPtr; | |
unsigned int IFEOKey; | |
$C56898A4BC7BD2644011280E50E313AE ___u13; | |
$43D821CA8B0277AAE1B557C3A7CB22EA ___u14; | |
unsigned int SystemReserved; | |
unsigned int AtlThunkSListPtr32; | |
unsigned int ApiSetMap; | |
unsigned int TlsExpansionCounter; | |
unsigned int TlsBitmap; | |
unsigned int TlsBitmapBits[2]; | |
unsigned int ReadOnlySharedMemoryBase; | |
unsigned int SharedData; | |
unsigned int ReadOnlyStaticServerData; | |
unsigned int AnsiCodePageData; | |
unsigned int OemCodePageData; | |
unsigned int UnicodeCaseTableData; | |
unsigned int NumberOfProcessors; | |
unsigned int NtGlobalFlag; | |
_LARGE_INTEGER CriticalSectionTimeout; | |
unsigned int HeapSegmentReserve; | |
unsigned int HeapSegmentCommit; | |
unsigned int HeapDeCommitTotalFreeThreshold; | |
unsigned int HeapDeCommitFreeBlockThreshold; | |
unsigned int NumberOfHeaps; | |
unsigned int MaximumNumberOfHeaps; | |
unsigned int ProcessHeaps; | |
unsigned int GdiSharedHandleTable; | |
unsigned int ProcessStarterHelper; | |
unsigned int GdiDCAttributeList; | |
unsigned int LoaderLock; | |
unsigned int OSMajorVersion; | |
unsigned int OSMinorVersion; | |
unsigned __int16 OSBuildNumber; | |
unsigned __int16 OSCSDVersion; | |
unsigned int OSPlatformId; | |
unsigned int ImageSubsystem; | |
unsigned int ImageSubsystemMajorVersion; | |
unsigned int ImageSubsystemMinorVersion; | |
unsigned int ActiveProcessAffinityMask; | |
unsigned int GdiHandleBuffer[34]; | |
unsigned int PostProcessInitRoutine; | |
unsigned int TlsExpansionBitmap; | |
unsigned int TlsExpansionBitmapBits[32]; | |
unsigned int SessionId; | |
_ULARGE_INTEGER AppCompatFlags; | |
_ULARGE_INTEGER AppCompatFlagsUser; | |
unsigned int pShimData; | |
unsigned int AppCompatInfo; | |
_STRING32 CSDVersion; | |
unsigned int ActivationContextData; | |
unsigned int ProcessAssemblyStorageMap; | |
unsigned int SystemDefaultActivationContextData; | |
unsigned int SystemAssemblyStorageMap; | |
unsigned int MinimumStackCommit; | |
unsigned int SparePointers[4]; | |
unsigned int SpareUlongs[5]; | |
unsigned int WerRegistrationData; | |
unsigned int WerShipAssertPtr; | |
unsigned int pUnused; | |
unsigned int pImageHeaderHash; | |
$19872DF55B967FE50480526B665E49FA ___u71; | |
unsigned __int64 CsrServerReadOnlySharedMemoryBase; | |
unsigned int TppWorkerpListLock; | |
LIST_ENTRY32 TppWorkerpList; | |
unsigned int WaitOnAddressHashTable[128]; | |
unsigned int TelemetryCoverageHeader; | |
unsigned int CloudFileFlags; | |
unsigned int CloudFileDiagFlags; | |
char PlaceholderCompatibilityMode; | |
char PlaceholderCompatibilityModeReserved[7]; | |
unsigned int LeapSecondData; | |
$DABBB401A2825D2BAEA1BC7E666346FE ___u82; | |
unsigned int NtGlobalFlag2; | |
}; | |
/* 2301 */ | |
struct __declspec(align(8)) _THERMAL_INFORMATION | |
{ | |
unsigned int ThermalStamp; | |
unsigned int ThermalConstant1; | |
unsigned int ThermalConstant2; | |
unsigned __int64 Processors; | |
unsigned int SamplingPeriod; | |
unsigned int CurrentTemperature; | |
unsigned int PassiveTripPoint; | |
unsigned int CriticalTripPoint; | |
unsigned __int8 ActiveTripPointCount; | |
unsigned int ActiveTripPoint[10]; | |
}; | |
/* 2302 */ | |
struct _HIVE_LIST_ENTRY | |
{ | |
wchar_t *FileName; | |
wchar_t *BaseName; | |
wchar_t *RegRootName; | |
_CMHIVE *CmHive; | |
unsigned int HHiveFlags; | |
unsigned int CmHiveFlags; | |
unsigned int CmKcbCacheSize; | |
_CMHIVE *CmHive2; | |
unsigned __int8 HiveMounted; | |
unsigned __int8 ThreadFinished; | |
unsigned __int8 ThreadStarted; | |
unsigned __int8 Allocate; | |
unsigned __int8 WinPERequired; | |
_KEVENT StartEvent; | |
_KEVENT FinishedEvent; | |
_KEVENT MountLock; | |
_EX_PUSH_LOCK MountCallbackLock; | |
_EX_PUSH_LOCK CallbackListLock; | |
_LIST_ENTRY CallbackListHead; | |
_WORK_QUEUE_ITEM *CallbackWorkItem; | |
volatile int CallbackWorkItemBusy; | |
_UNICODE_STRING FilePath; | |
}; | |
/* 2303 */ | |
struct __declspec(align(4)) _NB10 | |
{ | |
unsigned int Signature; | |
unsigned int Offset; | |
unsigned int TimeStamp; | |
unsigned int Age; | |
char PdbName[1]; | |
}; | |
/* 2304 */ | |
struct __declspec(align(4)) _RSDS | |
{ | |
unsigned int Signature; | |
_GUID Guid; | |
unsigned int Age; | |
char PdbName[1]; | |
}; | |
/* 2305 */ | |
union _CVDD | |
{ | |
unsigned int Signature; | |
_NB10 NB10; | |
_RSDS RsDs; | |
}; | |
/* 2306 */ | |
struct __declspec(align(8)) _ETW_DEBUGID_TRACKING_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
unsigned __int8 ConsumersNotified; | |
unsigned __int8 Spare[3]; | |
unsigned int DebugIdSize; | |
_CVDD DebugId; | |
}; | |
/* 2307 */ | |
struct _KWAIT_CHAIN_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
_KTHREAD *Thread; | |
_KEVENT Event; | |
}; | |
/* 2308 */ | |
struct _IMAGE_DEBUG_DIRECTORY | |
{ | |
unsigned int Characteristics; | |
unsigned int TimeDateStamp; | |
unsigned __int16 MajorVersion; | |
unsigned __int16 MinorVersion; | |
unsigned int Type; | |
unsigned int SizeOfData; | |
unsigned int AddressOfRawData; | |
unsigned int PointerToRawData; | |
}; | |
/* 2309 */ | |
struct _OBJECT_HEADER_PADDING_INFO | |
{ | |
unsigned int PaddingAmount; | |
}; | |
/* 2310 */ | |
struct _PF_KERNEL_GLOBALS | |
{ | |
unsigned __int64 AccessBufferAgeThreshold; | |
_EX_RUNDOWN_REF AccessBufferRef; | |
_KEVENT AccessBufferExistsEvent; | |
unsigned int AccessBufferMax; | |
__declspec(align(32)) _SLIST_HEADER AccessBufferList; | |
int StreamSequenceNumber; | |
unsigned int Flags; | |
int ScenarioPrefetchCount; | |
}; | |
/* 2311 */ | |
struct __declspec(align(8)) _CALL_HASH_ENTRY | |
{ | |
_LIST_ENTRY ListEntry; | |
void *CallersAddress; | |
void *CallersCaller; | |
unsigned int CallCount; | |
}; | |
/* 2312 */ | |
struct _MI_TRIAGE_DUMP_DATA | |
{ | |
unsigned __int64 BadPageCount; | |
int BadPagesDetected; | |
int ZeroedPageSingleBitErrorsDetected; | |
int ScrubPasses; | |
int ScrubBadPagesFound; | |
unsigned int PageHashErrors; | |
unsigned __int64 FeatureBits; | |
unsigned int TimeZoneId; | |
_MI_FLAGS Flags; | |
void *VsmConnection; | |
}; | |
/* 2313 */ | |
typedef struct _GUID GUID; | |
/* 2314 */ | |
struct SC_DISK; | |
/* 2315 */ | |
struct MBR_HEADER; | |
/* 2316 */ | |
struct MBR_ENTRY; | |
/* 2317 */ | |
struct SC_MBR; | |
/* 2318 */ | |
struct SC_DEVICE; | |
/* 2319 */ | |
struct SC_GPT; | |
/* 2320 */ | |
struct SC_RAW; | |
/* 2321 */ | |
struct NT_DISK; | |
/* 2322 */ | |
typedef void **va_list; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment