include/asm/ksx.template.h

   1
   2
   3 HEADER("Pointer size"),
   4 SIZE(SizeofPointer, PVOID),
   5
   6 HEADER("Breakpoints"),
   7 CONSTANT(BREAKPOINT_BREAK),
   8 CONSTANT(BREAKPOINT_PRINT),
   9 CONSTANT(BREAKPOINT_PROMPT),
  10 CONSTANT(BREAKPOINT_LOAD_SYMBOLS),
  11 CONSTANT(BREAKPOINT_UNLOAD_SYMBOLS),
  12 CONSTANT(BREAKPOINT_COMMAND_STRING),
  13
  14 HEADER("Context Frame Flags"),
  15 CONSTANT(CONTEXT_FULL),
  16 CONSTANT(CONTEXT_CONTROL),
  17 CONSTANT(CONTEXT_INTEGER),
  18 #ifndef _M_ARM
  19 CONSTANT(CONTEXT_SEGMENTS),
  20 CONSTANT(CONTEXT_FLOATING_POINT),
  21 CONSTANT(CONTEXT_DEBUG_REGISTERS),
  22 #endif
  23
  24 HEADER("Exception flags"),
  25 CONSTANT(EXCEPTION_NONCONTINUABLE),
  26 CONSTANT(EXCEPTION_UNWINDING),
  27 CONSTANT(EXCEPTION_EXIT_UNWIND),
  28 CONSTANT(EXCEPTION_STACK_INVALID),
  29 CONSTANT(EXCEPTION_NESTED_CALL),
  30 CONSTANT(EXCEPTION_TARGET_UNWIND),
  31 CONSTANT(EXCEPTION_COLLIDED_UNWIND),
  32 CONSTANT(EXCEPTION_UNWIND),
  33 CONSTANT(EXCEPTION_EXECUTE_HANDLER),
  34 CONSTANT(EXCEPTION_CONTINUE_SEARCH),
  35 CONSTANT(EXCEPTION_CONTINUE_EXECUTION),
  36 #ifdef _X86_
  37 CONSTANT(EXCEPTION_CHAIN_END),
  38 //CONSTANT(FIXED_NTVDMSTATE_LINEAR),
  39 #endif
  40
  41 HEADER("Exception types"),
  42 CONSTANT(ExceptionContinueExecution),
  43 CONSTANT(ExceptionContinueSearch),
  44 CONSTANT(ExceptionNestedException),
  45 CONSTANT(ExceptionCollidedUnwind),
  46
  47 HEADER("Lock Queue"),
  48 CONSTANT(LOCK_QUEUE_WAIT),
  49 CONSTANT(LOCK_QUEUE_OWNER),
  50 CONSTANT(LockQueueDispatcherLock),
  51
  52 //HEADER("Performance Definitions"),
  53 //CONSTANT(PERF_CONTEXTSWAP_OFFSET),
  54 //CONSTANT(PERF_CONTEXTSWAP_FLAG),
  55 //CONSTANT(PERF_INTERRUPT_OFFSET),
  56 //CONSTANT(PERF_INTERRUPT_FLAG),
  57 //CONSTANT(PERF_PROFILE_OFFSET),
  58 //CONSTANT(PERF_PROFILE_FLAG),
  59 //CONSTANT(PERF_SYSCALL_OFFSET),
  60 //CONSTANT(PERF_SYSCALL_FLAG),
  61 //CONSTANT(PERF_SPINLOCK_OFFSET),
  62 //CONSTANT(PERF_SPINLOCK_FLAG),
  63 //CONSTANT(NTOS_YIELD_MACRO),
  64
  65 HEADER("Process states"),
  66 CONSTANT(ProcessInMemory),
  67 CONSTANT(ProcessOutOfMemory),
  68 CONSTANT(ProcessInTransition),
  69
  70 HEADER("Processor mode"),
  71 CONSTANT(KernelMode),
  72 CONSTANT(UserMode),
  73
  74 HEADER("Status codes"),
  75 CONSTANT(STATUS_ACCESS_VIOLATION),
  76 CONSTANT(STATUS_ASSERTION_FAILURE),
  77 CONSTANT(STATUS_ARRAY_BOUNDS_EXCEEDED),
  78 CONSTANT(STATUS_BAD_COMPRESSION_BUFFER),
  79 CONSTANT(STATUS_BREAKPOINT),
  80 CONSTANT(STATUS_CALLBACK_POP_STACK),
  81 CONSTANT(STATUS_DATATYPE_MISALIGNMENT),
  82 CONSTANT(STATUS_FLOAT_DENORMAL_OPERAND),
  83 CONSTANT(STATUS_FLOAT_DIVIDE_BY_ZERO),
  84 CONSTANT(STATUS_FLOAT_INEXACT_RESULT),
  85 CONSTANT(STATUS_FLOAT_INVALID_OPERATION),
  86 CONSTANT(STATUS_FLOAT_OVERFLOW),
  87 CONSTANT(STATUS_FLOAT_STACK_CHECK),
  88 CONSTANT(STATUS_FLOAT_UNDERFLOW),
  89 CONSTANT(STATUS_FLOAT_MULTIPLE_FAULTS),
  90 CONSTANT(STATUS_FLOAT_MULTIPLE_TRAPS),
  91 CONSTANT(STATUS_GUARD_PAGE_VIOLATION),
  92 CONSTANT(STATUS_ILLEGAL_FLOAT_CONTEXT),
  93 CONSTANT(STATUS_ILLEGAL_INSTRUCTION),
  94 CONSTANT(STATUS_INSTRUCTION_MISALIGNMENT),
  95 CONSTANT(STATUS_INVALID_HANDLE),
  96 CONSTANT(STATUS_INVALID_LOCK_SEQUENCE),
  97 CONSTANT(STATUS_INVALID_OWNER),
  98 CONSTANT(STATUS_INVALID_PARAMETER),
  99 CONSTANT(STATUS_INVALID_PARAMETER_1),
 100 CONSTANT(STATUS_INVALID_SYSTEM_SERVICE),
 101 //CONSTANT(STATUS_INVALID_THREAD),
 102 CONSTANT(STATUS_INTEGER_DIVIDE_BY_ZERO),
 103 CONSTANT(STATUS_INTEGER_OVERFLOW),
 104 CONSTANT(STATUS_IN_PAGE_ERROR),
 105 CONSTANT(STATUS_KERNEL_APC),
 106 CONSTANT(STATUS_LONGJUMP),
 107 CONSTANT(STATUS_NO_CALLBACK_ACTIVE),
 108 CONSTANT(STATUS_NO_EVENT_PAIR),
 109 CONSTANT(STATUS_PRIVILEGED_INSTRUCTION),
 110 CONSTANT(STATUS_SINGLE_STEP),
 111 CONSTANT(STATUS_STACK_BUFFER_OVERRUN),
 112 CONSTANT(STATUS_STACK_OVERFLOW),
 113 CONSTANT(STATUS_SUCCESS),
 114 CONSTANT(STATUS_THREAD_IS_TERMINATING),
 115 CONSTANT(STATUS_TIMEOUT),
 116 CONSTANT(STATUS_UNWIND),
 117 CONSTANT(STATUS_UNWIND_CONSOLIDATE),
 118 CONSTANT(STATUS_USER_APC),
 119 CONSTANT(STATUS_WAKE_SYSTEM_DEBUGGER),
 120
 121 HEADER("TLS defines"),
 122 CONSTANT(TLS_MINIMUM_AVAILABLE),
 123 CONSTANT(TLS_EXPANSION_SLOTS),
 124
 125 HEADER("Thread states"),
 126 CONSTANT(Initialized),
 127 CONSTANT(Ready),
 128 CONSTANT(Running),
 129 CONSTANT(Standby),
 130 CONSTANT(Terminated),
 131 CONSTANT(Waiting),
 132
 133 HEADER("Wait type / reason"),
 134 CONSTANT(WrExecutive),
 135 CONSTANT(WrMutex),
 136 CONSTANT(WrDispatchInt),
 137 CONSTANT(WrQuantumEnd),
 138 CONSTANT(WrEventPair),
 139 CONSTANT(WaitAny),
 140 CONSTANT(WaitAll),
 141
 142 HEADER("Interrupt object types"),
 143 CONSTANTX(InLevelSensitive, LevelSensitive),
 144 CONSTANTX(InLatched, Latched),
 145
 146 HEADER("Bug Check Codes"),
 147 CONSTANT(APC_INDEX_MISMATCH),
 148 CONSTANT(INVALID_AFFINITY_SET),
 149 CONSTANT(INVALID_DATA_ACCESS_TRAP),
 150 CONSTANT(IRQL_NOT_GREATER_OR_EQUAL),
 151 CONSTANT(IRQL_NOT_LESS_OR_EQUAL),
 152 CONSTANT(NO_USER_MODE_CONTEXT),
 153 CONSTANT(SPIN_LOCK_ALREADY_OWNED),
 154 CONSTANT(SPIN_LOCK_NOT_OWNED),
 155 CONSTANT(THREAD_NOT_MUTEX_OWNER),
 156 CONSTANT(TRAP_CAUSE_UNKNOWN),
 157 CONSTANT(KMODE_EXCEPTION_NOT_HANDLED),
 158 CONSTANT(KERNEL_APC_PENDING_DURING_EXIT),
 159 CONSTANT(PANIC_STACK_SWITCH),
 160 CONSTANT(DATA_BUS_ERROR),
 161 CONSTANT(INSTRUCTION_BUS_ERROR),
 162 CONSTANT(SYSTEM_EXIT_OWNED_MUTEX),
 163 //CONSTANT(SYSTEM_UNWIND_PREVIOUS_USER),
 164 //CONSTANT(SYSTEM_SERVICE_EXCEPTION),
 165 //CONSTANT(INTERRUPT_UNWIND_ATTEMPTED),
 166 //CONSTANT(INTERRUPT_EXCEPTION_NOT_HANDLED),
 167 CONSTANT(PAGE_FAULT_WITH_INTERRUPTS_OFF),
 168 CONSTANT(IRQL_GT_ZERO_AT_SYSTEM_SERVICE),
 169 CONSTANT(DATA_COHERENCY_EXCEPTION),
 170 CONSTANT(INSTRUCTION_COHERENCY_EXCEPTION),
 171 CONSTANT(HAL1_INITIALIZATION_FAILED),
 172 CONSTANT(UNEXPECTED_KERNEL_MODE_TRAP),
 173 CONSTANT(NMI_HARDWARE_FAILURE),
 174 CONSTANT(SPIN_LOCK_INIT_FAILURE),
 175 CONSTANT(ATTEMPTED_SWITCH_FROM_DPC),
 176 //CONSTANT(MUTEX_ALREADY_OWNED),
 177 //CONSTANT(HARDWARE_INTERRUPT_STORM),
 178 //CONSTANT(RECURSIVE_MACHINE_CHECK),
 179 //CONSTANT(RECURSIVE_NMI),
 180
 181 HEADER("IRQL"),
 182 CONSTANT(PASSIVE_LEVEL),
 183 CONSTANT(APC_LEVEL),
 184 CONSTANT(DISPATCH_LEVEL),
 185 #ifdef _M_AMD64
 186 CONSTANT(CLOCK_LEVEL),
 187 #else
 188 CONSTANT(CLOCK1_LEVEL),
 189 CONSTANT(CLOCK2_LEVEL),
 190 #endif
 191 CONSTANT(IPI_LEVEL),
 192 CONSTANT(POWER_LEVEL),
 193 CONSTANT(PROFILE_LEVEL),
 194 CONSTANT(HIGH_LEVEL),
 195 RAW("#ifdef NT_UP"),
 196 {TYPE_CONSTANT, "SYNCH_LEVEL", DISPATCH_LEVEL},
 197 RAW("#else"),
 198 {TYPE_CONSTANT, "SYNCH_LEVEL", (IPI_LEVEL - 2)},
 199 RAW("#endif"),
 200
 201 HEADER("Stack sizes"),
 202 CONSTANT(KERNEL_STACK_SIZE),
 203 CONSTANT(KERNEL_LARGE_STACK_SIZE),
 204 CONSTANT(KERNEL_LARGE_STACK_COMMIT),
 205 //CONSTANT(DOUBLE_FAULT_STACK_SIZE),
 206 #ifdef _M_AMD64
 207 CONSTANT(KERNEL_MCA_EXCEPTION_STACK_SIZE),
 208 CONSTANT(NMI_STACK_SIZE),
 209 #endif
 210
 211 //HEADER("Thread flags"),
 212 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING),
 213 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING_LOCK_BIT),
 214 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING_LOCK),
 215 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING),
 216 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING_LOCK_BIT),
 217 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING_LOCK),
 218 //CONSTANT(THREAD_FLAGS_CPU_THROTTLED),
 219 //CONSTANT(THREAD_FLAGS_CPU_THROTTLED_BIT),
 220 //CONSTANT(THREAD_FLAGS_ACCOUNTING_ANY),
 221
 222 HEADER("Miscellaneous Definitions"),
 223 //CONSTANT(BASE_PRIORITY_THRESHOLD),
 224 //CONSTANT(EVENT_PAIR_INCREMENT),
 225 CONSTANT(LOW_REALTIME_PRIORITY),
 226 CONSTANT(CLOCK_QUANTUM_DECREMENT),
 227 //CONSTANT(READY_SKIP_QUANTUM),
 228 //CONSTANT(THREAD_QUANTUM),
 229 CONSTANT(WAIT_QUANTUM_DECREMENT),
 230 //CONSTANT(ROUND_TRIP_DECREMENT_COUNT),
 231 CONSTANT(MAXIMUM_PROCESSORS),
 232 CONSTANT(INITIAL_STALL_COUNT),
 233 //CONSTANT(EXCEPTION_EXECUTE_FAULT),
 234 //CONSTANT(KCACHE_ERRATA_MONITOR_FLAGS),
 235 //CONSTANT(KI_EXCEPTION_GP_FAULT),
 236 //CONSTANT(KI_EXCEPTION_INVALID_OP),
 237 //CONSTANT(KI_EXCEPTION_INTEGER_DIVIDE_BY_ZERO),
 238 CONSTANT(KI_EXCEPTION_ACCESS_VIOLATION),
 239 //CONSTANT(TARGET_FREEZE),
 240 //CONSTANT(BlackHole),
 241 CONSTANT(Executive),
 242 CONSTANT(FALSE),
 243 CONSTANT(TRUE),
 244 CONSTANT(DBG_STATUS_CONTROL_C),
 245 //CONSTANTPTR(USER_SHARED_DATA), // FIXME: we need the kernel mode address here!
 246 //CONSTANT(MM_SHARED_USER_DATA_VA),
 247 CONSTANT(PAGE_SIZE),
 248 //CONSTANT(KERNEL_STACK_CONTROL_LARGE_STACK),
 249 //CONSTANT(KI_DPC_ALL_FLAGS),
 250 //CONSTANT(DISPATCH_LENGTH),
 251 //CONSTANT(MAXIMUM_PRIMARY_VECTOR),
 252 //CONSTANT(KTHREAD_AUTO_ALIGNMENT_BIT),
 253 //CONSTANT(KTHREAD_GUI_THREAD_MASK),
 254 //CONSTANT(KI_SLIST_FAULT_COUNT_MAXIMUM),
 255 #ifndef _M_ARM
 256 CONSTANT(MAXIMUM_IDTVECTOR),
 257 CONSTANT(PRIMARY_VECTOR_BASE),
 258 CONSTANT(RPL_MASK),
 259 CONSTANT(MODE_MASK),
 260 CONSTANT(NUMBER_SERVICE_TABLES),
 261 CONSTANT(SERVICE_NUMBER_MASK),
 262 CONSTANT(SERVICE_TABLE_SHIFT),
 263 CONSTANT(SERVICE_TABLE_MASK),
 264 CONSTANT(SERVICE_TABLE_TEST),
 265 #endif
 266
 267
 268
 269 /* STRUCTURE OFFSETS *********************************************************/
 270
 271 //HEADER("KAFFINITY_EX"),
 272 //OFFSET(AfBitmap, KAFFINITY_EX, Bitmap),
 273
 274 //HEADER("Aligned Affinity"),
 275 //OFFSET(AfsCpuSet, ???, CpuSet),
 276
 277 HEADER("KAPC"),
 278 OFFSET(ApType, KAPC, Type),
 279 OFFSET(ApSize, KAPC, Size),
 280 OFFSET(ApThread, KAPC, Thread),
 281 OFFSET(ApApcListEntry, KAPC, ApcListEntry),
 282 OFFSET(ApKernelRoutine, KAPC, KernelRoutine),
 283 OFFSET(ApRundownRoutine, KAPC, RundownRoutine),
 284 OFFSET(ApNormalRoutine, KAPC, NormalRoutine),
 285 OFFSET(ApNormalContext, KAPC, NormalContext),
 286 OFFSET(ApSystemArgument1, KAPC, SystemArgument1),
 287 OFFSET(ApSystemArgument2, KAPC, SystemArgument2),
 288 OFFSET(ApApcStateIndex, KAPC, ApcStateIndex),
 289 OFFSET(ApApcMode, KAPC, ApcMode),
 290 OFFSET(ApInserted, KAPC, Inserted),
 291 SIZE(ApcObjectLength, KAPC),
 292
 293 HEADER("KAPC_STATE"),
 294 OFFSET(AsApcListHead, KAPC_STATE, ApcListHead),
 295 OFFSET(AsProcess, KAPC_STATE, Process),
 296 OFFSET(AsKernelApcInProgress, KAPC_STATE, KernelApcInProgress),
 297 OFFSET(AsKernelApcPending, KAPC_STATE, KernelApcPending),
 298 OFFSET(AsUserApcPending, KAPC_STATE, UserApcPending),
 299
 300 HEADER("CLIENT_ID"),
 301 OFFSET(CidUniqueProcess, CLIENT_ID, UniqueProcess),
 302 OFFSET(CidUniqueThread, CLIENT_ID, UniqueThread),
 303
 304 HEADER("RTL_CRITICAL_SECTION"),
 305 OFFSET(CsDebugInfo, RTL_CRITICAL_SECTION, DebugInfo),
 306 OFFSET(CsLockCount, RTL_CRITICAL_SECTION, LockCount),
 307 OFFSET(CsRecursionCount, RTL_CRITICAL_SECTION, RecursionCount),
 308 OFFSET(CsOwningThread, RTL_CRITICAL_SECTION, OwningThread),
 309 OFFSET(CsLockSemaphore, RTL_CRITICAL_SECTION, LockSemaphore),
 310 OFFSET(CsSpinCount, RTL_CRITICAL_SECTION, SpinCount),
 311
 312 HEADER("RTL_CRITICAL_SECTION_DEBUG"),
 313 OFFSET(CsType, RTL_CRITICAL_SECTION_DEBUG, Type),
 314 OFFSET(CsCreatorBackTraceIndex, RTL_CRITICAL_SECTION_DEBUG, CreatorBackTraceIndex),
 315 OFFSET(CsCriticalSection, RTL_CRITICAL_SECTION_DEBUG, CriticalSection),
 316 OFFSET(CsProcessLocksList, RTL_CRITICAL_SECTION_DEBUG, ProcessLocksList),
 317 OFFSET(CsEntryCount, RTL_CRITICAL_SECTION_DEBUG, EntryCount),
 318 OFFSET(CsContentionCount, RTL_CRITICAL_SECTION_DEBUG, ContentionCount),
 319
 320 HEADER("KDEVICE_QUEUE_ENTRY"),
 321 OFFSET(DeDeviceListEntry, KDEVICE_QUEUE_ENTRY, DeviceListEntry),
 322 OFFSET(DeSortKey, KDEVICE_QUEUE_ENTRY, SortKey),
 323 OFFSET(DeInserted, KDEVICE_QUEUE_ENTRY, Inserted),
 324 SIZE(DeviceQueueEntryLength, KDEVICE_QUEUE_ENTRY),
 325
 326 HEADER("KDPC"),
 327 OFFSET(DpType, KDPC, Type),
 328 OFFSET(DpImportance, KDPC, Importance),
 329 OFFSET(DpNumber, KDPC, Number),
 330 OFFSET(DpDpcListEntry, KDPC, DpcListEntry),
 331 OFFSET(DpDeferredRoutine, KDPC, DeferredRoutine),
 332 OFFSET(DpDeferredContext, KDPC, DeferredContext),
 333 OFFSET(DpSystemArgument1, KDPC, SystemArgument1),
 334 OFFSET(DpSystemArgument2, KDPC, SystemArgument2),
 335 OFFSET(DpDpcData, KDPC, DpcData),
 336 SIZE(DpcObjectLength, KDPC),
 337
 338 HEADER("KDEVICE_QUEUE"),
 339 OFFSET(DvType, KDEVICE_QUEUE, Type),
 340 OFFSET(DvSize, KDEVICE_QUEUE, Size),
 341 OFFSET(DvDeviceListHead, KDEVICE_QUEUE, DeviceListHead),
 342 OFFSET(DvSpinLock, KDEVICE_QUEUE, Lock),
 343 OFFSET(DvBusy, KDEVICE_QUEUE, Busy),
 344 SIZE(DeviceQueueObjectLength, KDEVICE_QUEUE),
 345
 346 HEADER("EXCEPTION_RECORD"),
 347 OFFSET(ErExceptionCode, EXCEPTION_RECORD, ExceptionCode),
 348 OFFSET(ErExceptionFlags, EXCEPTION_RECORD, ExceptionFlags),
 349 OFFSET(ErExceptionRecord, EXCEPTION_RECORD, ExceptionRecord),
 350 OFFSET(ErExceptionAddress, EXCEPTION_RECORD, ExceptionAddress),
 351 OFFSET(ErNumberParameters, EXCEPTION_RECORD, NumberParameters),
 352 OFFSET(ErExceptionInformation, EXCEPTION_RECORD, ExceptionInformation),
 353 SIZE(ExceptionRecordLength, EXCEPTION_RECORD),
 354 SIZE(EXCEPTION_RECORD_LENGTH, EXCEPTION_RECORD),
 355
 356 HEADER("EPROCESS"),
 357 OFFSET(EpDebugPort, EPROCESS, DebugPort),
 358 OFFSET(EpVdmObjects, EPROCESS, VdmObjects),
 359 SIZE(ExecutiveProcessObjectLength, EPROCESS),
 360
 361 HEADER("KEVENT"),
 362 OFFSET(EvType, KEVENT, Header.Type),
 363 OFFSET(EvSize, KEVENT, Header.Size),
 364 OFFSET(EvSignalState, KEVENT, Header.SignalState),
 365 OFFSET(EvWaitListHead, KEVENT, Header.WaitListHead),
 366 SIZE(EventObjectLength, KEVENT),
 367
 368 HEADER("FAST_MUTEX"),
 369 OFFSET(FmCount, FAST_MUTEX, Count),
 370 OFFSET(FmOwner, FAST_MUTEX, Owner),
 371 OFFSET(FmContention, FAST_MUTEX, Contention),
 372 //OFFSET(FmGate, FAST_MUTEX, Gate),
 373 OFFSET(FmOldIrql, FAST_MUTEX, OldIrql),
 374
 375 HEADER("KINTERRUPT"),
 376 OFFSET(InType, KINTERRUPT, Type),
 377 OFFSET(InSize, KINTERRUPT, Size),
 378 OFFSET(InInterruptListEntry, KINTERRUPT, InterruptListEntry),
 379 OFFSET(InServiceRoutine, KINTERRUPT, ServiceRoutine),
 380 OFFSET(InServiceContext, KINTERRUPT, ServiceContext),
 381 OFFSET(InSpinLock, KINTERRUPT, SpinLock),
 382 OFFSET(InTickCount, KINTERRUPT, TickCount),
 383 OFFSET(InActualLock, KINTERRUPT, ActualLock),
 384 OFFSET(InDispatchAddress, KINTERRUPT, DispatchAddress),
 385 OFFSET(InVector, KINTERRUPT, Vector),
 386 OFFSET(InIrql, KINTERRUPT, Irql),
 387 OFFSET(InSynchronizeIrql, KINTERRUPT, SynchronizeIrql),
 388 OFFSET(InFloatingSave, KINTERRUPT, FloatingSave),
 389 OFFSET(InConnected, KINTERRUPT, Connected),
 390 OFFSET(InNumber, KINTERRUPT, Number),
 391 OFFSET(InShareVector, KINTERRUPT, ShareVector),
 392 OFFSET(InMode, KINTERRUPT, Mode),
 393 OFFSET(InServiceCount, KINTERRUPT, ServiceCount),
 394 OFFSET(InDispatchCount, KINTERRUPT, DispatchCount),
 395 //OFFSET(InTrapFrame, KINTERRUPT, TrapFrame),
 396 OFFSET(InDispatchCode, KINTERRUPT, DispatchCode),
 397 SIZE(InterruptObjectLength, KINTERRUPT),
 398
 399 HEADER("IO_STATUS_BLOCK"),
 400 OFFSET(IoStatus, IO_STATUS_BLOCK, Status),
 401 OFFSET(IoPointer, IO_STATUS_BLOCK, Pointer),
 402 OFFSET(IoInformation, IO_STATUS_BLOCK, Information),
 403
 404 //HEADER("KERNEL_STACK_CONTROL"),
 405 #ifdef _M_IX86
 406 //  Kernel Stack Control Structure Offset (relative to initial stack pointer) Definitions
 407 //RELOFFSET(KcPreviousBase, KERNEL_STACK_CONTROL, PreviousBase, ???), -40
 408 //RELOFFSET(KcPreviousLimit, KERNEL_STACK_CONTROL, PreviousBase, ???), -36
 409 //RELOFFSET(KcPreviousKernel, KERNEL_STACK_CONTROL, PreviousBase, ???), -32
 410 //RELOFFSET(KcPreviousInitial, KERNEL_STACK_CONTROL, PreviousBase, ???), -28
 411 #else
 412 //OFFSET(KcPreviousBase, KERNEL_STACK_CONTROL, PreviousBase),
 413 //OFFSET(KcPreviousLimit, KERNEL_STACK_CONTROL, PreviousLimit),
 414 //OFFSET(KcPreviousKernel, KERNEL_STACK_CONTROL, PreviousKernel),
 415 //OFFSET(KcPreviousInitial, KERNEL_STACK_CONTROL, PreviousInitial),
 416 //SIZE(KERNEL_STACK_CONTROL_LENGTH, KERNEL_STACK_CONTROL),
 417 #endif
 418
 419 HEADER("KNODE"),
 420 //OFFSET(KnRight, KNODE, Right),
 421 //OFFSET(KnLeft, KNODE, Left),
 422 OFFSET(KnPfnDereferenceSListHead, KNODE, PfnDereferenceSListHead),
 423 OFFSET(KnProcessorMask, KNODE, ProcessorMask),
 424 OFFSET(KnColor, KNODE, Color),
 425 OFFSET(KnSeed, KNODE, Seed),
 426 OFFSET(KnNodeNumber, KNODE, NodeNumber),
 427 OFFSET(KnFlags, KNODE, Flags),
 428 OFFSET(knMmShiftedColor, KNODE, MmShiftedColor),
 429 OFFSET(KnFreeCount, KNODE, FreeCount),
 430 OFFSET(KnPfnDeferredList, KNODE, PfnDeferredList),
 431 SIZE(KNODE_SIZE, KNODE),
 432
 433 HEADER("KSPIN_LOCK_QUEUE"),
 434 OFFSET(LqNext, KSPIN_LOCK_QUEUE, Next),
 435 OFFSET(LqLock, KSPIN_LOCK_QUEUE, Lock),
 436
 437 HEADER("KLOCK_QUEUE_HANDLE"),
 438 OFFSET(LqhNext, KLOCK_QUEUE_HANDLE, LockQueue.Next),
 439 OFFSET(LqhLock, KLOCK_QUEUE_HANDLE, LockQueue.Lock),
 440 OFFSET(LqhOldIrql, KLOCK_QUEUE_HANDLE, OldIrql),
 441 SIZE(LOCK_QUEUE_HEADER_SIZE, KLOCK_QUEUE_HANDLE),
 442
 443 HEADER("LARGE_INTEGER"),
 444 OFFSET(LiLowPart, LARGE_INTEGER, LowPart),
 445 OFFSET(LiHighPart, LARGE_INTEGER, HighPart),
 446 #if 0
 447 HEADER("LOADER_PARAMETER_BLOCK (rel. to LoadOrderListHead)"),
 448 RELOFFSET(LpbLoadOrderListHead, LOADER_PARAMETER_BLOCK, LoadOrderListHead, LoadOrderListHead),
 449 RELOFFSET(LpbMemoryDescriptorListHead, LOADER_PARAMETER_BLOCK, MemoryDescriptorListHead, LoadOrderListHead),
 450 RELOFFSET(LpbKernelStack, LOADER_PARAMETER_BLOCK, KernelStack, LoadOrderListHead),
 451 RELOFFSET(LpbPrcb, LOADER_PARAMETER_BLOCK, Prcb, LoadOrderListHead),
 452 RELOFFSET(LpbProcess, LOADER_PARAMETER_BLOCK, Process, LoadOrderListHead),
 453 RELOFFSET(LpbThread, LOADER_PARAMETER_BLOCK, Thread, LoadOrderListHead),
 454 RELOFFSET(LpbI386, LOADER_PARAMETER_BLOCK, u.I386, LoadOrderListHead),
 455 RELOFFSET(LpbRegistryLength, LOADER_PARAMETER_BLOCK, RegistryLength, LoadOrderListHead),
 456 RELOFFSET(LpbRegistryBase, LOADER_PARAMETER_BLOCK, RegistryBase, LoadOrderListHead),
 457 RELOFFSET(LpbConfigurationRoot, LOADER_PARAMETER_BLOCK, ConfigurationRoot, LoadOrderListHead),
 458 RELOFFSET(LpbArcBootDeviceName, LOADER_PARAMETER_BLOCK, ArcBootDeviceName, LoadOrderListHead),
 459 RELOFFSET(LpbArcHalDeviceName, LOADER_PARAMETER_BLOCK, ArcHalDeviceName, LoadOrderListHead),
 460 RELOFFSET(LpbLoadOptions, LOADER_PARAMETER_BLOCK, LoadOptions, LoadOrderListHead),
 461 RELOFFSET(LpbExtension, LOADER_PARAMETER_BLOCK, Extension, LoadOrderListHead),
 462 #endif
 463
 464 HEADER("LIST_ENTRY"),
 465 OFFSET(LsFlink, LIST_ENTRY, Flink),
 466 OFFSET(LsBlink, LIST_ENTRY, Blink),
 467
 468 HEADER("PEB"),
 469 OFFSET(PeKernelCallbackTable, PEB, KernelCallbackTable),
 470 SIZE(ProcessEnvironmentBlockLength, PEB),
 471
 472 HEADER("KPROFILE"),
 473 OFFSET(PfType, KPROFILE, Type),
 474 OFFSET(PfSize, KPROFILE, Size),
 475 OFFSET(PfProfileListEntry, KPROFILE, ProfileListEntry),
 476 OFFSET(PfProcess, KPROFILE, Process),
 477 OFFSET(PfRangeBase, KPROFILE, RangeBase),
 478 OFFSET(PfRangeLimit, KPROFILE, RangeLimit),
 479 OFFSET(PfBucketShift, KPROFILE, BucketShift),
 480 OFFSET(PfBuffer, KPROFILE, Buffer),
 481 OFFSET(PfSegment, KPROFILE, Segment),
 482 OFFSET(PfAffinity, KPROFILE, Affinity),
 483 OFFSET(PfSource, KPROFILE, Source),
 484 OFFSET(PfStarted, KPROFILE, Started),
 485 SIZE(ProfileObjectLength, KPROFILE),
 486
 487 HEADER("PORT_MESSAGE"),
 488 OFFSET(PmLength, PORT_MESSAGE, u1.Length),
 489 OFFSET(PmZeroInit, PORT_MESSAGE, u2.ZeroInit),
 490 OFFSET(PmClientId, PORT_MESSAGE, ClientId),
 491 OFFSET(PmProcess, PORT_MESSAGE, ClientId.UniqueProcess),
 492 OFFSET(PmThread, PORT_MESSAGE, ClientId.UniqueThread),
 493 OFFSET(PmMessageId, PORT_MESSAGE, MessageId),
 494 OFFSET(PmClientViewSize, PORT_MESSAGE, ClientViewSize),
 495 SIZE(PortMessageLength, PORT_MESSAGE),
 496
 497 HEADER("KPROCESS"),
 498 OFFSET(PrType, KPROCESS, Header.Type),
 499 OFFSET(PrSize, KPROCESS, Header.Size),
 500 OFFSET(PrSignalState, KPROCESS, Header.SignalState),
 501 OFFSET(PrProfileListHead, KPROCESS, ProfileListHead),
 502 OFFSET(PrDirectoryTableBase, KPROCESS, DirectoryTableBase),
 503 #ifdef _M_IX86
 504 OFFSET(PrLdtDescriptor, KPROCESS, LdtDescriptor),
 505 OFFSET(PrIopmOffset, KPROCESS, IopmOffset),
 506 OFFSET(PrInt21Descriptor, KPROCESS, Int21Descriptor),
 507 OFFSET(PrVdmTrapcHandler, KPROCESS, VdmTrapcHandler),
 508 //OFFSET(PrVdmObjects, KPROCESS, VdmObjects),
 509 OFFSET(PrFlags, KPROCESS, Flags),
 510 #endif
 511 //OFFSET(PrInstrumentationCallback, KPROCESS, InstrumentationCallback),
 512 OFFSET(PrActiveProcessors, KPROCESS, ActiveProcessors),
 513 OFFSET(PrKernelTime, KPROCESS, KernelTime),
 514 OFFSET(PrUserTime, KPROCESS, UserTime),
 515 OFFSET(PrReadyListHead, KPROCESS, ReadyListHead),
 516 OFFSET(PrSwapListEntry, KPROCESS, SwapListEntry),
 517 OFFSET(PrThreadListHead, KPROCESS, ThreadListHead),
 518 OFFSET(PrProcessLock, KPROCESS, ProcessLock),
 519 OFFSET(PrAffinity, KPROCESS, Affinity),
 520 OFFSET(PrProcessFlags, KPROCESS, ProcessFlags),
 521 OFFSET(PrBasePriority, KPROCESS, BasePriority),
 522 OFFSET(PrQuantumReset, KPROCESS, QuantumReset),
 523 OFFSET(PrState, KPROCESS, State),
 524 OFFSET(PrStackCount, KPROCESS, StackCount),
 525 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 526 OFFSET(PrCycleTime, KPROCESS, CycleTime),
 527 #endif
 528 SIZE(KernelProcessObjectLength, KPROCESS),
 529
 530 HEADER("KQUEUE"),
 531 OFFSET(QuType, KQUEUE, Header.Type),
 532 OFFSET(QuSize, KQUEUE, Header.Size),
 533 OFFSET(QuSignalState, KQUEUE, Header.SignalState),
 534 OFFSET(QuEntryListHead, KQUEUE, EntryListHead),
 535 OFFSET(QuCurrentCount, KQUEUE, CurrentCount),
 536 OFFSET(QuMaximumCount, KQUEUE, MaximumCount),
 537 OFFSET(QuThreadListHead, KQUEUE, ThreadListHead),
 538 SIZE(QueueObjectLength, KQUEUE),
 539
 540 HEADER("STRING"),
 541 OFFSET(StrLength, STRING, Length),
 542 OFFSET(StrMaximumLength, STRING, MaximumLength),
 543 OFFSET(StrBuffer, STRING, Buffer),
 544
 545 HEADER("TEB"),
 546 OFFSET(TeCmTeb, TEB, NtTib),
 547 #ifdef _M_IX86
 548 OFFSET(TeExceptionList, TEB, NtTib.ExceptionList),
 549 #endif
 550 OFFSET(TeStackBase, TEB, NtTib.StackBase),
 551 OFFSET(TeStackLimit, TEB, NtTib.StackLimit),
 552 OFFSET(TeFiberData, TEB, NtTib.FiberData),
 553 OFFSET(TeSelf, TEB, NtTib.Self),
 554 OFFSET(TeEnvironmentPointer, TEB, EnvironmentPointer),
 555 OFFSET(TeClientId, TEB, ClientId),
 556 OFFSET(TeActiveRpcHandle, TEB, ActiveRpcHandle),
 557 OFFSET(TeThreadLocalStoragePointer, TEB, ThreadLocalStoragePointer),
 558 OFFSET(TeCountOfOwnedCriticalSections, TEB, CountOfOwnedCriticalSections),
 559 OFFSET(TePeb, TEB, ProcessEnvironmentBlock),
 560 OFFSET(TeCsrClientThread, TEB, CsrClientThread),
 561 OFFSET(TeWOW32Reserved, TEB, WOW32Reserved),
 562 //OFFSET(TeSoftFpcr, TEB, SoftFpcr),
 563 OFFSET(TeExceptionCode, TEB, ExceptionCode),
 564 OFFSET(TeActivationContextStackPointer, TEB, ActivationContextStackPointer),
 565 OFFSET(TeGdiClientPID, TEB, GdiClientPID),
 566 OFFSET(TeGdiClientTID, TEB, GdiClientTID),
 567 OFFSET(TeGdiThreadLocalInfo, TEB, GdiThreadLocalInfo),
 568 OFFSET(TeglDispatchTable, TEB, glDispatchTable),
 569 OFFSET(TeglReserved1, TEB, glReserved1),
 570 OFFSET(TeglReserved2, TEB, glReserved2),
 571 OFFSET(TeglSectionInfo, TEB, glSectionInfo),
 572 OFFSET(TeglSection, TEB, glSection),
 573 OFFSET(TeglTable, TEB, glTable),
 574 OFFSET(TeglCurrentRC, TEB, glCurrentRC),
 575 OFFSET(TeglContext, TEB, glContext),
 576 OFFSET(TeDeallocationStack, TEB, DeallocationStack),
 577 OFFSET(TeTlsSlots, TEB, TlsSlots),
 578 OFFSET(TeTlsExpansionSlots, TEB, TlsExpansionSlots),
 579 OFFSET(TeLastErrorValue, TEB, LastErrorValue),
 580 OFFSET(TeVdm, TEB, Vdm),
 581 OFFSET(TeInstrumentation, TEB, Instrumentation),
 582 OFFSET(TeGdiBatchCount, TEB, GdiBatchCount),
 583 OFFSET(TeGuaranteedStackBytes, TEB, GuaranteedStackBytes),
 584 OFFSET(TeFlsData, TEB, FlsData),
 585 //OFFSET(TeProcessRundown, TEB, ProcessRundown),
 586 SIZE(ThreadEnvironmentBlockLength, TEB),
 587
 588 HEADER("TIME_FIELDS"),
 589 OFFSET(TfSecond, TIME_FIELDS, Second),
 590 OFFSET(TfMinute, TIME_FIELDS, Minute),
 591 OFFSET(TfHour, TIME_FIELDS, Hour),
 592 OFFSET(TfWeekday, TIME_FIELDS, Weekday),
 593 OFFSET(TfDay, TIME_FIELDS, Day),
 594 OFFSET(TfMonth, TIME_FIELDS, Month),
 595 OFFSET(TfYear, TIME_FIELDS, Year),
 596 OFFSET(TfMilliseconds, TIME_FIELDS, Milliseconds),
 597
 598 HEADER("KTHREAD"),
 599 OFFSET(ThType, KTHREAD, Header.Type),
 600 //OFFSET(ThNpxIrql, KTHREAD, NpxIrql),
 601 OFFSET(ThSize, KTHREAD, Header.Size),
 602 OFFSET(ThLock, KTHREAD, Header.Lock),
 603 OFFSET(ThDebugActive, KTHREAD, Header.DebugActive),
 604 //OFFSET(ThThreadControlFlags, KTHREAD, DispatcherHeader.ThreadControlFlags),
 605 OFFSET(ThSignalState, KTHREAD, Header.SignalState),
 606 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 607 OFFSET(ThCycleTime, KTHREAD, CycleTime),
 608 OFFSET(ThHighCycleTime, KTHREAD, HighCycleTime),
 609 #endif
 610 OFFSET(ThInitialStack, KTHREAD, InitialStack),
 611 OFFSET(ThStackLimit, KTHREAD, StackLimit),
 612 OFFSET(ThKernelStack, KTHREAD, KernelStack),
 613 OFFSET(ThThreadLock, KTHREAD, ThreadLock),
 614 //OFFSET(ThRunning, KTHREAD, Running),
 615 OFFSET(ThAlerted, KTHREAD, Alerted),
 616 //OFFSET(ThMiscFlags, KTHREAD, MiscFlags),
 617 OFFSET(ThApcState, KTHREAD, ApcState),
 618 OFFSET(ThPriority, KTHREAD, Priority),
 619 OFFSET(ThSwapBusy, KTHREAD, SwapBusy),
 620 OFFSET(ThNextProcessor, KTHREAD, NextProcessor),
 621 OFFSET(ThDeferredProcessor, KTHREAD, DeferredProcessor),
 622 OFFSET(ThApcQueueLock, KTHREAD, ApcQueueLock),
 623 OFFSET(ThContextSwitches, KTHREAD, ContextSwitches),
 624 OFFSET(ThState, KTHREAD, State),
 625 OFFSET(ThNpxState, KTHREAD, NpxState),
 626 OFFSET(ThWaitIrql, KTHREAD, WaitIrql),
 627 OFFSET(ThWaitMode, KTHREAD, WaitMode),
 628 OFFSET(ThWaitStatus, KTHREAD, WaitStatus),
 629 OFFSET(ThWaitBlockList, KTHREAD, WaitBlockList),
 630 OFFSET(ThGateObject, KTHREAD, GateObject),
 631 OFFSET(ThWaitListEntry, KTHREAD, WaitListEntry),
 632 OFFSET(ThSwapListEntry, KTHREAD, SwapListEntry),
 633 OFFSET(ThQueue, KTHREAD, Queue),
 634 OFFSET(ThWaitTime, KTHREAD, WaitTime),
 635 OFFSET(ThCombinedApcDisable, KTHREAD, CombinedApcDisable),
 636 OFFSET(ThKernelApcDisable, KTHREAD, KernelApcDisable),
 637 OFFSET(ThSpecialApcDisable, KTHREAD, SpecialApcDisable),
 638 OFFSET(ThTeb, KTHREAD, Teb),
 639 OFFSET(ThTimer, KTHREAD, Timer),
 640 OFFSET(ThThreadFlags, KTHREAD, ThreadFlags),
 641 OFFSET(ThServiceTable, KTHREAD, ServiceTable),
 642 OFFSET(ThWaitBlock, KTHREAD, WaitBlock),
 643 OFFSET(ThResourceIndex, KTHREAD, ResourceIndex),
 644 OFFSET(ThQueueListEntry, KTHREAD, QueueListEntry),
 645 OFFSET(ThTrapFrame, KTHREAD, TrapFrame),
 646 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 647 OFFSET(ThFirstArgument, KTHREAD, FirstArgument),
 648 #endif
 649 OFFSET(ThCallbackStack, KTHREAD, CallbackStack),
 650 //OFFSET(ThCallbackDepth, KTHREAD, CallbackDepth),
 651 OFFSET(ThApcStateIndex, KTHREAD, ApcStateIndex),
 652 OFFSET(ThIdealProcessor, KTHREAD, IdealProcessor),
 653 OFFSET(ThBasePriority, KTHREAD, BasePriority),
 654 OFFSET(ThPriorityDecrement, KTHREAD, PriorityDecrement),
 655 OFFSET(ThAdjustReason, KTHREAD, AdjustReason),
 656 OFFSET(ThAdjustIncrement, KTHREAD, AdjustIncrement),
 657 OFFSET(ThPreviousMode, KTHREAD, PreviousMode),
 658 OFFSET(ThSaturation, KTHREAD, Saturation),
 659 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 660 OFFSET(ThSystemCallNumber, KTHREAD, SystemCallNumber),
 661 #endif
 662 OFFSET(ThFreezeCount, KTHREAD, FreezeCount),
 663 OFFSET(ThUserAffinity, KTHREAD, UserAffinity),
 664 OFFSET(ThProcess, KTHREAD, Process),
 665 OFFSET(ThAffinity, KTHREAD, Affinity),
 666 OFFSET(ThUserIdealProcessor, KTHREAD, UserIdealProcessor),
 667 OFFSET(ThApcStatePointer, KTHREAD, ApcStatePointer),
 668 OFFSET(ThSavedApcState, KTHREAD, SavedApcState),
 669 OFFSET(ThWaitReason, KTHREAD, WaitReason),
 670 OFFSET(ThSuspendCount, KTHREAD, SuspendCount),
 671 //OFFSET(ThCodePatchInProgress, KTHREAD, CodePatchInProgress),
 672 OFFSET(ThWin32Thread, KTHREAD, Win32Thread),
 673 OFFSET(ThStackBase, KTHREAD, StackBase),
 674 OFFSET(ThSuspendApc, KTHREAD, SuspendApc),
 675 OFFSET(ThPowerState, KTHREAD, PowerState),
 676 OFFSET(ThKernelTime, KTHREAD, KernelTime),
 677 OFFSET(ThLegoData, KTHREAD, LegoData),
 678 OFFSET(ThLargeStack, KTHREAD, LargeStack),
 679 OFFSET(ThUserTime, KTHREAD, UserTime),
 680 OFFSET(ThSuspendSemaphore, KTHREAD, SuspendSemaphore),
 681 OFFSET(ThSListFaultCount, KTHREAD, SListFaultCount),
 682 OFFSET(ThThreadListEntry, KTHREAD, ThreadListEntry),
 683 OFFSET(ThMutantListHead, KTHREAD, MutantListHead),
 684 OFFSET(ThSListFaultAddress, KTHREAD, SListFaultAddress),
 685 SIZE(KernelThreadObjectLength, KTHREAD),
 686 SIZE(ExecutiveThreadObjectLength, ETHREAD),
 687
 688 HEADER("KTIMER"),
 689 OFFSET(TiType, KTIMER, Header.Type),
 690 OFFSET(TiSize, KTIMER, Header.Size),
 691 OFFSET(TiInserted, KTIMER, Header.Inserted),
 692 OFFSET(TiSignalState, KTIMER, Header.SignalState),
 693 OFFSET(TiDueTime, KTIMER, DueTime),
 694 OFFSET(TiTimerListEntry, KTIMER, TimerListEntry),
 695 OFFSET(TiDpc, KTIMER, Dpc),
 696 OFFSET(TiPeriod, KTIMER, Period),
 697 SIZE(TimerObjectLength, KTIMER),
 698
 699 HEADER("TIME"),
 700 //OFFSET(TmLowTime, TIME, LowTime),
 701 //OFFSET(TmHighTime, TIME, HighTime),
 702
 703 #if 0
 704 HEADER("SYSTEM_CONTEXT_SWITCH_INFORMATION (relative to FindAny)"),
 705 RELOFFSET(TwFindAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindAny, FindAny),
 706 RELOFFSET(TwFindIdeal, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindIdeal, FindAny),
 707 RELOFFSET(TwFindLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindLast, FindAny),
 708 RELOFFSET(TwIdleAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleAny, FindAny),
 709 RELOFFSET(TwIdleCurrent, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleCurrent, FindAny),
 710 RELOFFSET(TwIdleIdeal, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleIdeal, FindAny),
 711 RELOFFSET(TwIdleLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleLast, FindAny),
 712 RELOFFSET(TwPreemptAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptAny, FindAny),
 713 RELOFFSET(TwPreemptCurrent, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptCurrent, FindAny),
 714 RELOFFSET(TwPreemptLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptLast, FindAny),
 715 RELOFFSET(TwSwitchToIdle, SYSTEM_CONTEXT_SWITCH_INFORMATION, SwitchToIdle, FindAny),
 716 #endif
 717
 718 HEADER("KUSER_SHARED_DATA"),
 719 OFFSET(UsTickCountMultiplier, KUSER_SHARED_DATA, TickCountMultiplier),
 720 OFFSET(UsInterruptTime, KUSER_SHARED_DATA, InterruptTime),
 721 OFFSET(UsSystemTime, KUSER_SHARED_DATA, SystemTime),
 722 OFFSET(UsTimeZoneBias, KUSER_SHARED_DATA, TimeZoneBias),
 723 OFFSET(UsImageNumberLow, KUSER_SHARED_DATA, ImageNumberLow),
 724 OFFSET(UsImageNumberHigh, KUSER_SHARED_DATA, ImageNumberHigh),
 725 OFFSET(UsNtSystemRoot, KUSER_SHARED_DATA, NtSystemRoot),
 726 OFFSET(UsMaxStackTraceDepth, KUSER_SHARED_DATA, MaxStackTraceDepth),
 727 OFFSET(UsCryptoExponent, KUSER_SHARED_DATA, CryptoExponent),
 728 OFFSET(UsTimeZoneId, KUSER_SHARED_DATA, TimeZoneId),
 729 OFFSET(UsLargePageMinimum, KUSER_SHARED_DATA, LargePageMinimum),
 730 OFFSET(UsReserved2, KUSER_SHARED_DATA, Reserved2),
 731 OFFSET(UsNtProductType, KUSER_SHARED_DATA, NtProductType),
 732 OFFSET(UsProductTypeIsValid, KUSER_SHARED_DATA, ProductTypeIsValid),
 733 OFFSET(UsNtMajorVersion, KUSER_SHARED_DATA, NtMajorVersion),
 734 OFFSET(UsNtMinorVersion, KUSER_SHARED_DATA, NtMinorVersion),
 735 OFFSET(UsProcessorFeatures, KUSER_SHARED_DATA, ProcessorFeatures),
 736 OFFSET(UsReserved1, KUSER_SHARED_DATA, Reserved1),
 737 OFFSET(UsReserved3, KUSER_SHARED_DATA, Reserved3),
 738 OFFSET(UsTimeSlip, KUSER_SHARED_DATA, TimeSlip),
 739 OFFSET(UsAlternativeArchitecture, KUSER_SHARED_DATA, AlternativeArchitecture),
 740 OFFSET(UsSystemExpirationDate, KUSER_SHARED_DATA, SystemExpirationDate),
 741 OFFSET(UsSuiteMask, KUSER_SHARED_DATA, SuiteMask),
 742 OFFSET(UsKdDebuggerEnabled, KUSER_SHARED_DATA, KdDebuggerEnabled),
 743 OFFSET(UsActiveConsoleId, KUSER_SHARED_DATA, ActiveConsoleId),
 744 OFFSET(UsDismountCount, KUSER_SHARED_DATA, DismountCount),
 745 OFFSET(UsComPlusPackage, KUSER_SHARED_DATA, ComPlusPackage),
 746 OFFSET(UsLastSystemRITEventTickCount, KUSER_SHARED_DATA, LastSystemRITEventTickCount),
 747 OFFSET(UsNumberOfPhysicalPages, KUSER_SHARED_DATA, NumberOfPhysicalPages),
 748 OFFSET(UsSafeBootMode, KUSER_SHARED_DATA, SafeBootMode),
 749 //OFFSET(UsTscQpcData, KUSER_SHARED_DATA, TscQpcData),
 750 OFFSET(UsTestRetInstruction, KUSER_SHARED_DATA, TestRetInstruction),
 751 OFFSET(UsSystemCall, KUSER_SHARED_DATA, SystemCall),
 752 OFFSET(UsSystemCallReturn, KUSER_SHARED_DATA, SystemCallReturn),
 753 OFFSET(UsSystemCallPad, KUSER_SHARED_DATA, SystemCallPad),
 754 OFFSET(UsTickCount, KUSER_SHARED_DATA, TickCount),
 755 OFFSET(UsTickCountQuad, KUSER_SHARED_DATA, TickCountQuad),
 756 OFFSET(UsWow64SharedInformation, KUSER_SHARED_DATA, Wow64SharedInformation),
 757
 758 HEADER("KWAIT_BLOCK"),
 759 OFFSET(WbWaitListEntry, KWAIT_BLOCK, WaitListEntry),
 760 OFFSET(WbThread, KWAIT_BLOCK, Thread),
 761 OFFSET(WbObject, KWAIT_BLOCK, Object),
 762 OFFSET(WbNextWaitBlock, KWAIT_BLOCK, NextWaitBlock),
 763 OFFSET(WbWaitKey, KWAIT_BLOCK, WaitKey),
 764 OFFSET(WbWaitType, KWAIT_BLOCK, WaitType),
 765