include/asm/ksx.template.h

   1
   2
   3 HEADER("Pointer size"),
   4 SIZE(SizeofPointer, PVOID),
   5
   6 HEADER("Breakpoints"),
   7 CONSTANT(BREAKPOINT_BREAK),
   8 CONSTANT(BREAKPOINT_PRINT),
   9 CONSTANT(BREAKPOINT_PROMPT),
  10 CONSTANT(BREAKPOINT_LOAD_SYMBOLS),
  11 CONSTANT(BREAKPOINT_UNLOAD_SYMBOLS),
  12 CONSTANT(BREAKPOINT_COMMAND_STRING),
  13
  14 HEADER("Context Frame Flags"),
  15 CONSTANT(CONTEXT_FULL),
  16 CONSTANT(CONTEXT_CONTROL),
  17 CONSTANT(CONTEXT_INTEGER),
  18 CONSTANT(CONTEXT_SEGMENTS),
  19 CONSTANT(CONTEXT_FLOATING_POINT),
  20 CONSTANT(CONTEXT_DEBUG_REGISTERS),
  21
  22 HEADER("Exception flags"),
  23 CONSTANT(EXCEPTION_NONCONTINUABLE),
  24 CONSTANT(EXCEPTION_UNWINDING),
  25 CONSTANT(EXCEPTION_EXIT_UNWIND),
  26 CONSTANT(EXCEPTION_STACK_INVALID),
  27 CONSTANT(EXCEPTION_NESTED_CALL),
  28 CONSTANT(EXCEPTION_TARGET_UNWIND),
  29 CONSTANT(EXCEPTION_COLLIDED_UNWIND),
  30 CONSTANT(EXCEPTION_UNWIND),
  31 CONSTANT(EXCEPTION_EXECUTE_HANDLER),
  32 CONSTANT(EXCEPTION_CONTINUE_SEARCH),
  33 CONSTANT(EXCEPTION_CONTINUE_EXECUTION),
  34 #ifdef _X86_
  35 CONSTANT(EXCEPTION_CHAIN_END),
  36 //CONSTANT(FIXED_NTVDMSTATE_LINEAR),
  37 #endif
  38
  39 HEADER("Exception types"),
  40 CONSTANT(ExceptionContinueExecution),
  41 CONSTANT(ExceptionContinueSearch),
  42 CONSTANT(ExceptionNestedException),
  43 CONSTANT(ExceptionCollidedUnwind),
  44
  45 HEADER("Lock Queue"),
  46 CONSTANT(LOCK_QUEUE_WAIT),
  47 CONSTANT(LOCK_QUEUE_OWNER),
  48 CONSTANT(LockQueueDispatcherLock),
  49
  50 //HEADER("Performance Definitions"),
  51 //CONSTANT(PERF_CONTEXTSWAP_OFFSET),
  52 //CONSTANT(PERF_CONTEXTSWAP_FLAG),
  53 //CONSTANT(PERF_INTERRUPT_OFFSET),
  54 //CONSTANT(PERF_INTERRUPT_FLAG),
  55 //CONSTANT(PERF_PROFILE_OFFSET),
  56 //CONSTANT(PERF_PROFILE_FLAG),
  57 //CONSTANT(PERF_SYSCALL_OFFSET),
  58 //CONSTANT(PERF_SYSCALL_FLAG),
  59 //CONSTANT(PERF_SPINLOCK_OFFSET),
  60 //CONSTANT(PERF_SPINLOCK_FLAG),
  61 //CONSTANT(NTOS_YIELD_MACRO),
  62
  63 HEADER("Process states"),
  64 CONSTANT(ProcessInMemory),
  65 CONSTANT(ProcessOutOfMemory),
  66 CONSTANT(ProcessInTransition),
  67
  68 HEADER("Processor mode"),
  69 CONSTANT(KernelMode),
  70 CONSTANT(UserMode),
  71
  72 HEADER("Status codes"),
  73 CONSTANT(STATUS_ACCESS_VIOLATION),
  74 CONSTANT(STATUS_ASSERTION_FAILURE),
  75 CONSTANT(STATUS_ARRAY_BOUNDS_EXCEEDED),
  76 CONSTANT(STATUS_BAD_COMPRESSION_BUFFER),
  77 CONSTANT(STATUS_BREAKPOINT),
  78 CONSTANT(STATUS_CALLBACK_POP_STACK),
  79 CONSTANT(STATUS_DATATYPE_MISALIGNMENT),
  80 CONSTANT(STATUS_FLOAT_DENORMAL_OPERAND),
  81 CONSTANT(STATUS_FLOAT_DIVIDE_BY_ZERO),
  82 CONSTANT(STATUS_FLOAT_INEXACT_RESULT),
  83 CONSTANT(STATUS_FLOAT_INVALID_OPERATION),
  84 CONSTANT(STATUS_FLOAT_OVERFLOW),
  85 CONSTANT(STATUS_FLOAT_STACK_CHECK),
  86 CONSTANT(STATUS_FLOAT_UNDERFLOW),
  87 CONSTANT(STATUS_FLOAT_MULTIPLE_FAULTS),
  88 CONSTANT(STATUS_FLOAT_MULTIPLE_TRAPS),
  89 CONSTANT(STATUS_GUARD_PAGE_VIOLATION),
  90 CONSTANT(STATUS_ILLEGAL_FLOAT_CONTEXT),
  91 CONSTANT(STATUS_ILLEGAL_INSTRUCTION),
  92 CONSTANT(STATUS_INSTRUCTION_MISALIGNMENT),
  93 CONSTANT(STATUS_INVALID_HANDLE),
  94 CONSTANT(STATUS_INVALID_LOCK_SEQUENCE),
  95 CONSTANT(STATUS_INVALID_OWNER),
  96 CONSTANT(STATUS_INVALID_PARAMETER),
  97 CONSTANT(STATUS_INVALID_PARAMETER_1),
  98 CONSTANT(STATUS_INVALID_SYSTEM_SERVICE),
  99 //CONSTANT(STATUS_INVALID_THREAD),
 100 CONSTANT(STATUS_INTEGER_DIVIDE_BY_ZERO),
 101 CONSTANT(STATUS_INTEGER_OVERFLOW),
 102 CONSTANT(STATUS_IN_PAGE_ERROR),
 103 CONSTANT(STATUS_KERNEL_APC),
 104 CONSTANT(STATUS_LONGJUMP),
 105 CONSTANT(STATUS_NO_CALLBACK_ACTIVE),
 106 CONSTANT(STATUS_NO_EVENT_PAIR),
 107 CONSTANT(STATUS_PRIVILEGED_INSTRUCTION),
 108 CONSTANT(STATUS_SINGLE_STEP),
 109 CONSTANT(STATUS_STACK_BUFFER_OVERRUN),
 110 CONSTANT(STATUS_STACK_OVERFLOW),
 111 CONSTANT(STATUS_SUCCESS),
 112 CONSTANT(STATUS_THREAD_IS_TERMINATING),
 113 CONSTANT(STATUS_TIMEOUT),
 114 CONSTANT(STATUS_UNWIND),
 115 CONSTANT(STATUS_UNWIND_CONSOLIDATE),
 116 CONSTANT(STATUS_USER_APC),
 117 CONSTANT(STATUS_WAKE_SYSTEM_DEBUGGER),
 118
 119 HEADER("TLS defines"),
 120 CONSTANT(TLS_MINIMUM_AVAILABLE),
 121 CONSTANT(TLS_EXPANSION_SLOTS),
 122
 123 HEADER("Thread states"),
 124 CONSTANT(Initialized),
 125 CONSTANT(Ready),
 126 CONSTANT(Running),
 127 CONSTANT(Standby),
 128 CONSTANT(Terminated),
 129 CONSTANT(Waiting),
 130
 131 HEADER("Wait type / reason"),
 132 CONSTANT(WrExecutive),
 133 CONSTANT(WrMutex),
 134 CONSTANT(WrDispatchInt),
 135 CONSTANT(WrQuantumEnd),
 136 CONSTANT(WrEventPair),
 137 CONSTANT(WaitAny),
 138 CONSTANT(WaitAll),
 139
 140 HEADER("Interrupt object types"),
 141 CONSTANTX(InLevelSensitive, LevelSensitive),
 142 CONSTANTX(InLatched, Latched),
 143
 144 HEADER("Bug Check Codes"),
 145 CONSTANT(APC_INDEX_MISMATCH),
 146 CONSTANT(INVALID_AFFINITY_SET),
 147 CONSTANT(INVALID_DATA_ACCESS_TRAP),
 148 CONSTANT(IRQL_NOT_GREATER_OR_EQUAL),
 149 CONSTANT(IRQL_NOT_LESS_OR_EQUAL),
 150 CONSTANT(NO_USER_MODE_CONTEXT),
 151 CONSTANT(SPIN_LOCK_ALREADY_OWNED),
 152 CONSTANT(SPIN_LOCK_NOT_OWNED),
 153 CONSTANT(THREAD_NOT_MUTEX_OWNER),
 154 CONSTANT(TRAP_CAUSE_UNKNOWN),
 155 CONSTANT(KMODE_EXCEPTION_NOT_HANDLED),
 156 CONSTANT(KERNEL_APC_PENDING_DURING_EXIT),
 157 CONSTANT(PANIC_STACK_SWITCH),
 158 CONSTANT(DATA_BUS_ERROR),
 159 CONSTANT(INSTRUCTION_BUS_ERROR),
 160 CONSTANT(SYSTEM_EXIT_OWNED_MUTEX),
 161 //CONSTANT(SYSTEM_UNWIND_PREVIOUS_USER),
 162 //CONSTANT(SYSTEM_SERVICE_EXCEPTION),
 163 //CONSTANT(INTERRUPT_UNWIND_ATTEMPTED),
 164 //CONSTANT(INTERRUPT_EXCEPTION_NOT_HANDLED),
 165 CONSTANT(PAGE_FAULT_WITH_INTERRUPTS_OFF),
 166 CONSTANT(IRQL_GT_ZERO_AT_SYSTEM_SERVICE),
 167 CONSTANT(DATA_COHERENCY_EXCEPTION),
 168 CONSTANT(INSTRUCTION_COHERENCY_EXCEPTION),
 169 CONSTANT(HAL1_INITIALIZATION_FAILED),
 170 CONSTANT(UNEXPECTED_KERNEL_MODE_TRAP),
 171 CONSTANT(NMI_HARDWARE_FAILURE),
 172 CONSTANT(SPIN_LOCK_INIT_FAILURE),
 173 CONSTANT(ATTEMPTED_SWITCH_FROM_DPC),
 174 //CONSTANT(MUTEX_ALREADY_OWNED),
 175 //CONSTANT(HARDWARE_INTERRUPT_STORM),
 176 //CONSTANT(RECURSIVE_MACHINE_CHECK),
 177 //CONSTANT(RECURSIVE_NMI),
 178
 179 HEADER("IRQL"),
 180 CONSTANT(PASSIVE_LEVEL),
 181 CONSTANT(APC_LEVEL),
 182 CONSTANT(DISPATCH_LEVEL),
 183 #ifdef _M_AMD64
 184 CONSTANT(CLOCK_LEVEL),
 185 #else
 186 CONSTANT(CLOCK1_LEVEL),
 187 CONSTANT(CLOCK2_LEVEL),
 188 #endif
 189 CONSTANT(IPI_LEVEL),
 190 CONSTANT(POWER_LEVEL),
 191 CONSTANT(PROFILE_LEVEL),
 192 CONSTANT(HIGH_LEVEL),
 193 RAW("#ifdef NT_UP"),
 194 {TYPE_CONSTANT, "SYNCH_LEVEL", DISPATCH_LEVEL},
 195 RAW("#else"),
 196 {TYPE_CONSTANT, "SYNCH_LEVEL", (IPI_LEVEL - 2)},
 197 RAW("#endif"),
 198
 199 HEADER("Stack sizes"),
 200 CONSTANT(KERNEL_STACK_SIZE),
 201 CONSTANT(KERNEL_LARGE_STACK_SIZE),
 202 CONSTANT(KERNEL_LARGE_STACK_COMMIT),
 203 //CONSTANT(DOUBLE_FAULT_STACK_SIZE),
 204 #ifdef _M_AMD64
 205 CONSTANT(KERNEL_MCA_EXCEPTION_STACK_SIZE),
 206 CONSTANT(NMI_STACK_SIZE),
 207 #endif
 208
 209 //HEADER("Thread flags"),
 210 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING),
 211 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING_LOCK_BIT),
 212 //CONSTANT(THREAD_FLAGS_CYCLE_PROFILING_LOCK),
 213 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING),
 214 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING_LOCK_BIT),
 215 //CONSTANT(THREAD_FLAGS_COUNTER_PROFILING_LOCK),
 216 //CONSTANT(THREAD_FLAGS_CPU_THROTTLED),
 217 //CONSTANT(THREAD_FLAGS_CPU_THROTTLED_BIT),
 218 //CONSTANT(THREAD_FLAGS_ACCOUNTING_ANY),
 219
 220 HEADER("Miscellaneous Definitions"),
 221 //CONSTANT(BASE_PRIORITY_THRESHOLD),
 222 //CONSTANT(EVENT_PAIR_INCREMENT),
 223 CONSTANT(LOW_REALTIME_PRIORITY),
 224 CONSTANT(CLOCK_QUANTUM_DECREMENT),
 225 //CONSTANT(READY_SKIP_QUANTUM),
 226 //CONSTANT(THREAD_QUANTUM),
 227 CONSTANT(WAIT_QUANTUM_DECREMENT),
 228 //CONSTANT(ROUND_TRIP_DECREMENT_COUNT),
 229 CONSTANT(MAXIMUM_PROCESSORS),
 230 CONSTANT(INITIAL_STALL_COUNT),
 231 //CONSTANT(EXCEPTION_EXECUTE_FAULT),
 232 //CONSTANT(KCACHE_ERRATA_MONITOR_FLAGS),
 233 //CONSTANT(KI_EXCEPTION_GP_FAULT),
 234 //CONSTANT(KI_EXCEPTION_INVALID_OP),
 235 //CONSTANT(KI_EXCEPTION_INTEGER_DIVIDE_BY_ZERO),
 236 CONSTANT(KI_EXCEPTION_ACCESS_VIOLATION),
 237 //CONSTANT(TARGET_FREEZE),
 238 //CONSTANT(BlackHole),
 239 CONSTANT(Executive),
 240 CONSTANT(FALSE),
 241 CONSTANT(TRUE),
 242 CONSTANT(DBG_STATUS_CONTROL_C),
 243 CONSTANTPTR(USER_SHARED_DATA),
 244 //CONSTANT(MM_SHARED_USER_DATA_VA),
 245 CONSTANT(PAGE_SIZE),
 246 //CONSTANT(KERNEL_STACK_CONTROL_LARGE_STACK),
 247 //CONSTANT(KI_DPC_ALL_FLAGS),
 248 //CONSTANT(DISPATCH_LENGTH),
 249 CONSTANT(MAXIMUM_IDTVECTOR),
 250 //CONSTANT(MAXIMUM_PRIMARY_VECTOR),
 251 CONSTANT(PRIMARY_VECTOR_BASE),
 252 CONSTANT(RPL_MASK),
 253 CONSTANT(MODE_MASK),
 254 //CONSTANT(KTHREAD_AUTO_ALIGNMENT_BIT),
 255 //CONSTANT(KTHREAD_GUI_THREAD_MASK),
 256 //CONSTANT(KI_SLIST_FAULT_COUNT_MAXIMUM),
 257 CONSTANT(NUMBER_SERVICE_TABLES),
 258 CONSTANT(SERVICE_NUMBER_MASK),
 259 CONSTANT(SERVICE_TABLE_SHIFT),
 260 CONSTANT(SERVICE_TABLE_MASK),
 261 CONSTANT(SERVICE_TABLE_TEST),
 262
 263
 264
 265 /* STRUCTURE OFFSETS *********************************************************/
 266
 267 //HEADER("KAFFINITY_EX"),
 268 //OFFSET(AfBitmap, KAFFINITY_EX, Bitmap),
 269
 270 //HEADER("Aligned Affinity"),
 271 //OFFSET(AfsCpuSet, ???, CpuSet),
 272
 273 HEADER("KAPC"),
 274 OFFSET(ApType, KAPC, Type),
 275 OFFSET(ApSize, KAPC, Size),
 276 OFFSET(ApThread, KAPC, Thread),
 277 OFFSET(ApApcListEntry, KAPC, ApcListEntry),
 278 OFFSET(ApKernelRoutine, KAPC, KernelRoutine),
 279 OFFSET(ApRundownRoutine, KAPC, RundownRoutine),
 280 OFFSET(ApNormalRoutine, KAPC, NormalRoutine),
 281 OFFSET(ApNormalContext, KAPC, NormalContext),
 282 OFFSET(ApSystemArgument1, KAPC, SystemArgument1),
 283 OFFSET(ApSystemArgument2, KAPC, SystemArgument2),
 284 OFFSET(ApApcStateIndex, KAPC, ApcStateIndex),
 285 OFFSET(ApApcMode, KAPC, ApcMode),
 286 OFFSET(ApInserted, KAPC, Inserted),
 287 SIZE(ApcObjectLength, KAPC),
 288
 289 HEADER("KAPC_STATE"),
 290 OFFSET(AsApcListHead, KAPC_STATE, ApcListHead),
 291 OFFSET(AsProcess, KAPC_STATE, Process),
 292 OFFSET(AsKernelApcInProgress, KAPC_STATE, KernelApcInProgress),
 293 OFFSET(AsKernelApcPending, KAPC_STATE, KernelApcPending),
 294 OFFSET(AsUserApcPending, KAPC_STATE, UserApcPending),
 295
 296 HEADER("CLIENT_ID"),
 297 OFFSET(CidUniqueProcess, CLIENT_ID, UniqueProcess),
 298 OFFSET(CidUniqueThread, CLIENT_ID, UniqueThread),
 299
 300 HEADER("RTL_CRITICAL_SECTION"),
 301 OFFSET(CsDebugInfo, RTL_CRITICAL_SECTION, DebugInfo),
 302 OFFSET(CsLockCount, RTL_CRITICAL_SECTION, LockCount),
 303 OFFSET(CsRecursionCount, RTL_CRITICAL_SECTION, RecursionCount),
 304 OFFSET(CsOwningThread, RTL_CRITICAL_SECTION, OwningThread),
 305 OFFSET(CsLockSemaphore, RTL_CRITICAL_SECTION, LockSemaphore),
 306 OFFSET(CsSpinCount, RTL_CRITICAL_SECTION, SpinCount),
 307
 308 HEADER("RTL_CRITICAL_SECTION_DEBUG"),
 309 OFFSET(CsType, RTL_CRITICAL_SECTION_DEBUG, Type),
 310 OFFSET(CsCreatorBackTraceIndex, RTL_CRITICAL_SECTION_DEBUG, CreatorBackTraceIndex),
 311 OFFSET(CsCriticalSection, RTL_CRITICAL_SECTION_DEBUG, CriticalSection),
 312 OFFSET(CsProcessLocksList, RTL_CRITICAL_SECTION_DEBUG, ProcessLocksList),
 313 OFFSET(CsEntryCount, RTL_CRITICAL_SECTION_DEBUG, EntryCount),
 314 OFFSET(CsContentionCount, RTL_CRITICAL_SECTION_DEBUG, ContentionCount),
 315
 316 HEADER("KDEVICE_QUEUE_ENTRY"),
 317 OFFSET(DeDeviceListEntry, KDEVICE_QUEUE_ENTRY, DeviceListEntry),
 318 OFFSET(DeSortKey, KDEVICE_QUEUE_ENTRY, SortKey),
 319 OFFSET(DeInserted, KDEVICE_QUEUE_ENTRY, Inserted),
 320 SIZE(DeviceQueueEntryLength, KDEVICE_QUEUE_ENTRY),
 321
 322 HEADER("KDPC"),
 323 OFFSET(DpType, KDPC, Type),
 324 OFFSET(DpImportance, KDPC, Importance),
 325 OFFSET(DpNumber, KDPC, Number),
 326 OFFSET(DpDpcListEntry, KDPC, DpcListEntry),
 327 OFFSET(DpDeferredRoutine, KDPC, DeferredRoutine),
 328 OFFSET(DpDeferredContext, KDPC, DeferredContext),
 329 OFFSET(DpSystemArgument1, KDPC, SystemArgument1),
 330 OFFSET(DpSystemArgument2, KDPC, SystemArgument2),
 331 OFFSET(DpDpcData, KDPC, DpcData),
 332 SIZE(DpcObjectLength, KDPC),
 333
 334 HEADER("KDEVICE_QUEUE"),
 335 OFFSET(DvType, KDEVICE_QUEUE, Type),
 336 OFFSET(DvSize, KDEVICE_QUEUE, Size),
 337 OFFSET(DvDeviceListHead, KDEVICE_QUEUE, DeviceListHead),
 338 OFFSET(DvSpinLock, KDEVICE_QUEUE, Lock),
 339 OFFSET(DvBusy, KDEVICE_QUEUE, Busy),
 340 SIZE(DeviceQueueObjectLength, KDEVICE_QUEUE),
 341
 342 HEADER("EXCEPTION_RECORD"),
 343 OFFSET(ErExceptionCode, EXCEPTION_RECORD, ExceptionCode),
 344 OFFSET(ErExceptionFlags, EXCEPTION_RECORD, ExceptionFlags),
 345 OFFSET(ErExceptionRecord, EXCEPTION_RECORD, ExceptionRecord),
 346 OFFSET(ErExceptionAddress, EXCEPTION_RECORD, ExceptionAddress),
 347 OFFSET(ErNumberParameters, EXCEPTION_RECORD, NumberParameters),
 348 OFFSET(ErExceptionInformation, EXCEPTION_RECORD, ExceptionInformation),
 349 SIZE(ExceptionRecordLength, EXCEPTION_RECORD),
 350 SIZE(EXCEPTION_RECORD_LENGTH, EXCEPTION_RECORD),
 351
 352 HEADER("EPROCESS"),
 353 OFFSET(EpDebugPort, EPROCESS, DebugPort),
 354 OFFSET(EpVdmObjects, EPROCESS, VdmObjects),
 355 SIZE(ExecutiveProcessObjectLength, EPROCESS),
 356
 357 HEADER("KEVENT"),
 358 OFFSET(EvType, KEVENT, Header.Type),
 359 OFFSET(EvSize, KEVENT, Header.Size),
 360 OFFSET(EvSignalState, KEVENT, Header.SignalState),
 361 OFFSET(EvWaitListHead, KEVENT, Header.WaitListHead),
 362 SIZE(EventObjectLength, KEVENT),
 363
 364 HEADER("FAST_MUTEX"),
 365 OFFSET(FmCount, FAST_MUTEX, Count),
 366 OFFSET(FmOwner, FAST_MUTEX, Owner),
 367 OFFSET(FmContention, FAST_MUTEX, Contention),
 368 //OFFSET(FmGate, FAST_MUTEX, Gate),
 369 OFFSET(FmOldIrql, FAST_MUTEX, OldIrql),
 370
 371 HEADER("KINTERRUPT"),
 372 OFFSET(InType, KINTERRUPT, Type),
 373 OFFSET(InSize, KINTERRUPT, Size),
 374 OFFSET(InInterruptListEntry, KINTERRUPT, InterruptListEntry),
 375 OFFSET(InServiceRoutine, KINTERRUPT, ServiceRoutine),
 376 OFFSET(InServiceContext, KINTERRUPT, ServiceContext),
 377 OFFSET(InSpinLock, KINTERRUPT, SpinLock),
 378 OFFSET(InTickCount, KINTERRUPT, TickCount),
 379 OFFSET(InActualLock, KINTERRUPT, ActualLock),
 380 OFFSET(InDispatchAddress, KINTERRUPT, DispatchAddress),
 381 OFFSET(InVector, KINTERRUPT, Vector),
 382 OFFSET(InIrql, KINTERRUPT, Irql),
 383 OFFSET(InSynchronizeIrql, KINTERRUPT, SynchronizeIrql),
 384 OFFSET(InFloatingSave, KINTERRUPT, FloatingSave),
 385 OFFSET(InConnected, KINTERRUPT, Connected),
 386 OFFSET(InNumber, KINTERRUPT, Number),
 387 OFFSET(InShareVector, KINTERRUPT, ShareVector),
 388 OFFSET(InMode, KINTERRUPT, Mode),
 389 OFFSET(InServiceCount, KINTERRUPT, ServiceCount),
 390 OFFSET(InDispatchCount, KINTERRUPT, DispatchCount),
 391 //OFFSET(InTrapFrame, KINTERRUPT, TrapFrame),
 392 OFFSET(InDispatchCode, KINTERRUPT, DispatchCode),
 393 SIZE(InterruptObjectLength, KINTERRUPT),
 394
 395 HEADER("IO_STATUS_BLOCK"),
 396 OFFSET(IoStatus, IO_STATUS_BLOCK, Status),
 397 OFFSET(IoPointer, IO_STATUS_BLOCK, Pointer),
 398 OFFSET(IoInformation, IO_STATUS_BLOCK, Information),
 399
 400 //HEADER("KERNEL_STACK_CONTROL"),
 401 #ifdef _M_IX86
 402 //  Kernel Stack Control Structure Offset (relative to initial stack pointer) Definitions
 403 //RELOFFSET(KcPreviousBase, KERNEL_STACK_CONTROL, PreviousBase, ???), -40
 404 //RELOFFSET(KcPreviousLimit, KERNEL_STACK_CONTROL, PreviousBase, ???), -36
 405 //RELOFFSET(KcPreviousKernel, KERNEL_STACK_CONTROL, PreviousBase, ???), -32
 406 //RELOFFSET(KcPreviousInitial, KERNEL_STACK_CONTROL, PreviousBase, ???), -28
 407 #else
 408 //OFFSET(KcPreviousBase, KERNEL_STACK_CONTROL, PreviousBase),
 409 //OFFSET(KcPreviousLimit, KERNEL_STACK_CONTROL, PreviousLimit),
 410 //OFFSET(KcPreviousKernel, KERNEL_STACK_CONTROL, PreviousKernel),
 411 //OFFSET(KcPreviousInitial, KERNEL_STACK_CONTROL, PreviousInitial),
 412 //SIZE(KERNEL_STACK_CONTROL_LENGTH, KERNEL_STACK_CONTROL),
 413 #endif
 414
 415 HEADER("KNODE"),
 416 //OFFSET(KnRight, KNODE, Right),
 417 //OFFSET(KnLeft, KNODE, Left),
 418 OFFSET(KnPfnDereferenceSListHead, KNODE, PfnDereferenceSListHead),
 419 OFFSET(KnProcessorMask, KNODE, ProcessorMask),
 420 OFFSET(KnColor, KNODE, Color),
 421 OFFSET(KnSeed, KNODE, Seed),
 422 OFFSET(KnNodeNumber, KNODE, NodeNumber),
 423 OFFSET(KnFlags, KNODE, Flags),
 424 OFFSET(knMmShiftedColor, KNODE, MmShiftedColor),
 425 OFFSET(KnFreeCount, KNODE, FreeCount),
 426 OFFSET(KnPfnDeferredList, KNODE, PfnDeferredList),
 427 SIZE(KNODE_SIZE, KNODE),
 428
 429 HEADER("KSPIN_LOCK_QUEUE"),
 430 OFFSET(LqNext, KSPIN_LOCK_QUEUE, Next),
 431 OFFSET(LqLock, KSPIN_LOCK_QUEUE, Lock),
 432
 433 HEADER("KLOCK_QUEUE_HANDLE"),
 434 OFFSET(LqhNext, KLOCK_QUEUE_HANDLE, LockQueue.Next),
 435 OFFSET(LqhLock, KLOCK_QUEUE_HANDLE, LockQueue.Lock),
 436 OFFSET(LqhOldIrql, KLOCK_QUEUE_HANDLE, OldIrql),
 437 SIZE(LOCK_QUEUE_HEADER_SIZE, KLOCK_QUEUE_HANDLE),
 438
 439 HEADER("LARGE_INTEGER"),
 440 OFFSET(LiLowPart, LARGE_INTEGER, LowPart),
 441 OFFSET(LiHighPart, LARGE_INTEGER, HighPart),
 442 #if 0
 443 HEADER("LOADER_PARAMETER_BLOCK (rel. to LoadOrderListHead)"),
 444 RELOFFSET(LpbLoadOrderListHead, LOADER_PARAMETER_BLOCK, LoadOrderListHead, LoadOrderListHead),
 445 RELOFFSET(LpbMemoryDescriptorListHead, LOADER_PARAMETER_BLOCK, MemoryDescriptorListHead, LoadOrderListHead),
 446 RELOFFSET(LpbKernelStack, LOADER_PARAMETER_BLOCK, KernelStack, LoadOrderListHead),
 447 RELOFFSET(LpbPrcb, LOADER_PARAMETER_BLOCK, Prcb, LoadOrderListHead),
 448 RELOFFSET(LpbProcess, LOADER_PARAMETER_BLOCK, Process, LoadOrderListHead),
 449 RELOFFSET(LpbThread, LOADER_PARAMETER_BLOCK, Thread, LoadOrderListHead),
 450 RELOFFSET(LpbI386, LOADER_PARAMETER_BLOCK, u.I386, LoadOrderListHead),
 451 RELOFFSET(LpbRegistryLength, LOADER_PARAMETER_BLOCK, RegistryLength, LoadOrderListHead),
 452 RELOFFSET(LpbRegistryBase, LOADER_PARAMETER_BLOCK, RegistryBase, LoadOrderListHead),
 453 RELOFFSET(LpbConfigurationRoot, LOADER_PARAMETER_BLOCK, ConfigurationRoot, LoadOrderListHead),
 454 RELOFFSET(LpbArcBootDeviceName, LOADER_PARAMETER_BLOCK, ArcBootDeviceName, LoadOrderListHead),
 455 RELOFFSET(LpbArcHalDeviceName, LOADER_PARAMETER_BLOCK, ArcHalDeviceName, LoadOrderListHead),
 456 RELOFFSET(LpbLoadOptions, LOADER_PARAMETER_BLOCK, LoadOptions, LoadOrderListHead),
 457 RELOFFSET(LpbExtension, LOADER_PARAMETER_BLOCK, Extension, LoadOrderListHead),
 458 #endif
 459
 460 HEADER("LIST_ENTRY"),
 461 OFFSET(LsFlink, LIST_ENTRY, Flink),
 462 OFFSET(LsBlink, LIST_ENTRY, Blink),
 463
 464 HEADER("PEB"),
 465 OFFSET(PeKernelCallbackTable, PEB, KernelCallbackTable),
 466 SIZE(ProcessEnvironmentBlockLength, PEB),
 467
 468 HEADER("KPROFILE"),
 469 OFFSET(PfType, KPROFILE, Type),
 470 OFFSET(PfSize, KPROFILE, Size),
 471 OFFSET(PfProfileListEntry, KPROFILE, ProfileListEntry),
 472 OFFSET(PfProcess, KPROFILE, Process),
 473 OFFSET(PfRangeBase, KPROFILE, RangeBase),
 474 OFFSET(PfRangeLimit, KPROFILE, RangeLimit),
 475 OFFSET(PfBucketShift, KPROFILE, BucketShift),
 476 OFFSET(PfBuffer, KPROFILE, Buffer),
 477 OFFSET(PfSegment, KPROFILE, Segment),
 478 OFFSET(PfAffinity, KPROFILE, Affinity),
 479 OFFSET(PfSource, KPROFILE, Source),
 480 OFFSET(PfStarted, KPROFILE, Started),
 481 SIZE(ProfileObjectLength, KPROFILE),
 482
 483 HEADER("PORT_MESSAGE"),
 484 OFFSET(PmLength, PORT_MESSAGE, u1.Length),
 485 OFFSET(PmZeroInit, PORT_MESSAGE, u2.ZeroInit),
 486 OFFSET(PmClientId, PORT_MESSAGE, ClientId),
 487 OFFSET(PmProcess, PORT_MESSAGE, ClientId.UniqueProcess),
 488 OFFSET(PmThread, PORT_MESSAGE, ClientId.UniqueThread),
 489 OFFSET(PmMessageId, PORT_MESSAGE, MessageId),
 490 OFFSET(PmClientViewSize, PORT_MESSAGE, ClientViewSize),
 491 SIZE(PortMessageLength, PORT_MESSAGE),
 492
 493 HEADER("KPROCESS"),
 494 OFFSET(PrType, KPROCESS, Header.Type),
 495 OFFSET(PrSize, KPROCESS, Header.Size),
 496 OFFSET(PrSignalState, KPROCESS, Header.SignalState),
 497 OFFSET(PrProfileListHead, KPROCESS, ProfileListHead),
 498 OFFSET(PrDirectoryTableBase, KPROCESS, DirectoryTableBase),
 499 #ifdef _M_IX86
 500 OFFSET(PrLdtDescriptor, KPROCESS, LdtDescriptor),
 501 #endif
 502 OFFSET(PrIopmOffset, KPROCESS, IopmOffset),
 503 #ifdef _M_IX86
 504 OFFSET(PrInt21Descriptor, KPROCESS, Int21Descriptor),
 505 OFFSET(PrVdmTrapcHandler, KPROCESS, VdmTrapcHandler),
 506 //OFFSET(PrVdmObjects, KPROCESS, VdmObjects),
 507 OFFSET(PrFlags, KPROCESS, Flags),
 508 #endif
 509 //OFFSET(PrInstrumentationCallback, KPROCESS, InstrumentationCallback),
 510 OFFSET(PrActiveProcessors, KPROCESS, ActiveProcessors),
 511 OFFSET(PrKernelTime, KPROCESS, KernelTime),
 512 OFFSET(PrUserTime, KPROCESS, UserTime),
 513 OFFSET(PrReadyListHead, KPROCESS, ReadyListHead),
 514 OFFSET(PrSwapListEntry, KPROCESS, SwapListEntry),
 515 OFFSET(PrThreadListHead, KPROCESS, ThreadListHead),
 516 OFFSET(PrProcessLock, KPROCESS, ProcessLock),
 517 OFFSET(PrAffinity, KPROCESS, Affinity),
 518 OFFSET(PrProcessFlags, KPROCESS, ProcessFlags),
 519 OFFSET(PrBasePriority, KPROCESS, BasePriority),
 520 OFFSET(PrQuantumReset, KPROCESS, QuantumReset),
 521 OFFSET(PrState, KPROCESS, State),
 522 OFFSET(PrStackCount, KPROCESS, StackCount),
 523 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 524 OFFSET(PrCycleTime, KPROCESS, CycleTime),
 525 #endif
 526 SIZE(KernelProcessObjectLength, KPROCESS),
 527
 528 HEADER("KQUEUE"),
 529 OFFSET(QuType, KQUEUE, Header.Type),
 530 OFFSET(QuSize, KQUEUE, Header.Size),
 531 OFFSET(QuSignalState, KQUEUE, Header.SignalState),
 532 OFFSET(QuEntryListHead, KQUEUE, EntryListHead),
 533 OFFSET(QuCurrentCount, KQUEUE, CurrentCount),
 534 OFFSET(QuMaximumCount, KQUEUE, MaximumCount),
 535 OFFSET(QuThreadListHead, KQUEUE, ThreadListHead),
 536 SIZE(QueueObjectLength, KQUEUE),
 537
 538 HEADER("STRING"),
 539 OFFSET(StrLength, STRING, Length),
 540 OFFSET(StrMaximumLength, STRING, MaximumLength),
 541 OFFSET(StrBuffer, STRING, Buffer),
 542
 543 HEADER("TEB"),
 544 OFFSET(TeCmTeb, TEB, NtTib),
 545 #ifdef _M_IX86
 546 OFFSET(TeExceptionList, TEB, NtTib.ExceptionList),
 547 #endif
 548 OFFSET(TeStackBase, TEB, NtTib.StackBase),
 549 OFFSET(TeStackLimit, TEB, NtTib.StackLimit),
 550 OFFSET(TeFiberData, TEB, NtTib.FiberData),
 551 OFFSET(TeSelf, TEB, NtTib.Self),
 552 OFFSET(TeEnvironmentPointer, TEB, EnvironmentPointer),
 553 OFFSET(TeClientId, TEB, ClientId),
 554 OFFSET(TeActiveRpcHandle, TEB, ActiveRpcHandle),
 555 OFFSET(TeThreadLocalStoragePointer, TEB, ThreadLocalStoragePointer),
 556 OFFSET(TeCountOfOwnedCriticalSections, TEB, CountOfOwnedCriticalSections),
 557 OFFSET(TePeb, TEB, ProcessEnvironmentBlock),
 558 OFFSET(TeCsrClientThread, TEB, CsrClientThread),
 559 OFFSET(TeWOW32Reserved, TEB, WOW32Reserved),
 560 //OFFSET(TeSoftFpcr, TEB, SoftFpcr),
 561 OFFSET(TeExceptionCode, TEB, ExceptionCode),
 562 OFFSET(TeActivationContextStackPointer, TEB, ActivationContextStackPointer),
 563 OFFSET(TeGdiClientPID, TEB, GdiClientPID),
 564 OFFSET(TeGdiClientTID, TEB, GdiClientTID),
 565 OFFSET(TeGdiThreadLocalInfo, TEB, GdiThreadLocalInfo),
 566 OFFSET(TeglDispatchTable, TEB, glDispatchTable),
 567 OFFSET(TeglReserved1, TEB, glReserved1),
 568 OFFSET(TeglReserved2, TEB, glReserved2),
 569 OFFSET(TeglSectionInfo, TEB, glSectionInfo),
 570 OFFSET(TeglSection, TEB, glSection),
 571 OFFSET(TeglTable, TEB, glTable),
 572 OFFSET(TeglCurrentRC, TEB, glCurrentRC),
 573 OFFSET(TeglContext, TEB, glContext),
 574 OFFSET(TeDeallocationStack, TEB, DeallocationStack),
 575 OFFSET(TeTlsSlots, TEB, TlsSlots),
 576 OFFSET(TeTlsExpansionSlots, TEB, TlsExpansionSlots),
 577 OFFSET(TeLastErrorValue, TEB, LastErrorValue),
 578 OFFSET(TeVdm, TEB, Vdm),
 579 OFFSET(TeInstrumentation, TEB, Instrumentation),
 580 OFFSET(TeGdiBatchCount, TEB, GdiBatchCount),
 581 OFFSET(TeGuaranteedStackBytes, TEB, GuaranteedStackBytes),
 582 OFFSET(TeFlsData, TEB, FlsData),
 583 //OFFSET(TeProcessRundown, TEB, ProcessRundown),
 584 SIZE(ThreadEnvironmentBlockLength, TEB),
 585
 586 HEADER("TIME_FIELDS"),
 587 OFFSET(TfSecond, TIME_FIELDS, Second),
 588 OFFSET(TfMinute, TIME_FIELDS, Minute),
 589 OFFSET(TfHour, TIME_FIELDS, Hour),
 590 OFFSET(TfWeekday, TIME_FIELDS, Weekday),
 591 OFFSET(TfDay, TIME_FIELDS, Day),
 592 OFFSET(TfMonth, TIME_FIELDS, Month),
 593 OFFSET(TfYear, TIME_FIELDS, Year),
 594 OFFSET(TfMilliseconds, TIME_FIELDS, Milliseconds),
 595
 596 HEADER("KTHREAD"),
 597 OFFSET(ThType, KTHREAD, DispatcherHeader.Type),
 598 //OFFSET(ThNpxIrql, KTHREAD, NpxIrql),
 599 OFFSET(ThSize, KTHREAD, DispatcherHeader.Size),
 600 OFFSET(ThLock, KTHREAD, DispatcherHeader.Lock),
 601 OFFSET(ThDebugActive, KTHREAD, DispatcherHeader.DebugActive),
 602 //OFFSET(ThThreadControlFlags, KTHREAD, DispatcherHeader.ThreadControlFlags),
 603 OFFSET(ThSignalState, KTHREAD, DispatcherHeader.SignalState),
 604 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 605 OFFSET(ThCycleTime, KTHREAD, CycleTime),
 606 OFFSET(ThHighCycleTime, KTHREAD, HighCycleTime),
 607 #endif
 608 OFFSET(ThInitialStack, KTHREAD, InitialStack),
 609 OFFSET(ThStackLimit, KTHREAD, StackLimit),
 610 OFFSET(ThKernelStack, KTHREAD, KernelStack),
 611 OFFSET(ThThreadLock, KTHREAD, ThreadLock),
 612 //OFFSET(ThRunning, KTHREAD, Running),
 613 OFFSET(ThAlerted, KTHREAD, Alerted),
 614 //OFFSET(ThMiscFlags, KTHREAD, MiscFlags),
 615 OFFSET(ThApcState, KTHREAD, ApcState),
 616 OFFSET(ThPriority, KTHREAD, Priority),
 617 OFFSET(ThSwapBusy, KTHREAD, SwapBusy),
 618 OFFSET(ThNextProcessor, KTHREAD, NextProcessor),
 619 OFFSET(ThDeferredProcessor, KTHREAD, DeferredProcessor),
 620 OFFSET(ThApcQueueLock, KTHREAD, ApcQueueLock),
 621 OFFSET(ThContextSwitches, KTHREAD, ContextSwitches),
 622 OFFSET(ThState, KTHREAD, State),
 623 OFFSET(ThNpxState, KTHREAD, NpxState),
 624 OFFSET(ThWaitIrql, KTHREAD, WaitIrql),
 625 OFFSET(ThWaitMode, KTHREAD, WaitMode),
 626 OFFSET(ThWaitStatus, KTHREAD, WaitStatus),
 627 OFFSET(ThWaitBlockList, KTHREAD, WaitBlockList),
 628 OFFSET(ThGateObject, KTHREAD, GateObject),
 629 OFFSET(ThWaitListEntry, KTHREAD, WaitListEntry),
 630 OFFSET(ThSwapListEntry, KTHREAD, SwapListEntry),
 631 OFFSET(ThQueue, KTHREAD, Queue),
 632 OFFSET(ThWaitTime, KTHREAD, WaitTime),
 633 OFFSET(ThCombinedApcDisable, KTHREAD, CombinedApcDisable),
 634 OFFSET(ThKernelApcDisable, KTHREAD, KernelApcDisable),
 635 OFFSET(ThSpecialApcDisable, KTHREAD, SpecialApcDisable),
 636 OFFSET(ThTeb, KTHREAD, Teb),
 637 OFFSET(ThTimer, KTHREAD, Timer),
 638 OFFSET(ThThreadFlags, KTHREAD, ThreadFlags),
 639 OFFSET(ThServiceTable, KTHREAD, ServiceTable),
 640 OFFSET(ThWaitBlock, KTHREAD, WaitBlock),
 641 OFFSET(ThResourceIndex, KTHREAD, ResourceIndex),
 642 OFFSET(ThQueueListEntry, KTHREAD, QueueListEntry),
 643 OFFSET(ThTrapFrame, KTHREAD, TrapFrame),
 644 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 645 OFFSET(ThFirstArgument, KTHREAD, FirstArgument),
 646 #endif
 647 OFFSET(ThCallbackStack, KTHREAD, CallbackStack),
 648 //OFFSET(ThCallbackDepth, KTHREAD, CallbackDepth),
 649 OFFSET(ThApcStateIndex, KTHREAD, ApcStateIndex),
 650 OFFSET(ThIdealProcessor, KTHREAD, IdealProcessor),
 651 OFFSET(ThBasePriority, KTHREAD, BasePriority),
 652 OFFSET(ThPriorityDecrement, KTHREAD, PriorityDecrement),
 653 OFFSET(ThAdjustReason, KTHREAD, AdjustReason),
 654 OFFSET(ThAdjustIncrement, KTHREAD, AdjustIncrement),
 655 OFFSET(ThPreviousMode, KTHREAD, PreviousMode),
 656 OFFSET(ThSaturation, KTHREAD, Saturation),
 657 #if (NTDDI_VERSION >= NTDDI_LONGHORN)
 658 OFFSET(ThSystemCallNumber, KTHREAD, SystemCallNumber),
 659 #endif
 660 OFFSET(ThFreezeCount, KTHREAD, FreezeCount),
 661 OFFSET(ThUserAffinity, KTHREAD, UserAffinity),
 662 OFFSET(ThProcess, KTHREAD, Process),
 663 OFFSET(ThAffinity, KTHREAD, Affinity),
 664 OFFSET(ThUserIdealProcessor, KTHREAD, UserIdealProcessor),
 665 OFFSET(ThApcStatePointer, KTHREAD, ApcStatePointer),
 666 OFFSET(ThSavedApcState, KTHREAD, SavedApcState),
 667 OFFSET(ThWaitReason, KTHREAD, WaitReason),
 668 OFFSET(ThSuspendCount, KTHREAD, SuspendCount),
 669 //OFFSET(ThCodePatchInProgress, KTHREAD, CodePatchInProgress),
 670 OFFSET(ThWin32Thread, KTHREAD, Win32Thread),
 671 OFFSET(ThStackBase, KTHREAD, StackBase),
 672 OFFSET(ThSuspendApc, KTHREAD, SuspendApc),
 673 OFFSET(ThPowerState, KTHREAD, PowerState),
 674 OFFSET(ThKernelTime, KTHREAD, KernelTime),
 675 OFFSET(ThLegoData, KTHREAD, LegoData),
 676 OFFSET(ThLargeStack, KTHREAD, LargeStack),
 677 OFFSET(ThUserTime, KTHREAD, UserTime),
 678 OFFSET(ThSuspendSemaphore, KTHREAD, SuspendSemaphore),
 679 OFFSET(ThSListFaultCount, KTHREAD, SListFaultCount),
 680 OFFSET(ThThreadListEntry, KTHREAD, ThreadListEntry),
 681 OFFSET(ThMutantListHead, KTHREAD, MutantListHead),
 682 OFFSET(ThSListFaultAddress, KTHREAD, SListFaultAddress),
 683 SIZE(KernelThreadObjectLength, KTHREAD),
 684 SIZE(ExecutiveThreadObjectLength, ETHREAD),
 685
 686 HEADER("KTIMER"),
 687 OFFSET(TiType, KTIMER, Header.Type),
 688 OFFSET(TiSize, KTIMER, Header.Size),
 689 OFFSET(TiInserted, KTIMER, Header.Inserted),
 690 OFFSET(TiSignalState, KTIMER, Header.SignalState),
 691 OFFSET(TiDueTime, KTIMER, DueTime),
 692 OFFSET(TiTimerListEntry, KTIMER, TimerListEntry),
 693 OFFSET(TiDpc, KTIMER, Dpc),
 694 OFFSET(TiPeriod, KTIMER, Period),
 695 SIZE(TimerObjectLength, KTIMER),
 696
 697 HEADER("TIME"),
 698 //OFFSET(TmLowTime, TIME, LowTime),
 699 //OFFSET(TmHighTime, TIME, HighTime),
 700
 701 #if 0
 702 HEADER("SYSTEM_CONTEXT_SWITCH_INFORMATION (relative to FindAny)"),
 703 RELOFFSET(TwFindAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindAny, FindAny),
 704 RELOFFSET(TwFindIdeal, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindIdeal, FindAny),
 705 RELOFFSET(TwFindLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, FindLast, FindAny),
 706 RELOFFSET(TwIdleAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleAny, FindAny),
 707 RELOFFSET(TwIdleCurrent, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleCurrent, FindAny),
 708 RELOFFSET(TwIdleIdeal, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleIdeal, FindAny),
 709 RELOFFSET(TwIdleLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, IdleLast, FindAny),
 710 RELOFFSET(TwPreemptAny, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptAny, FindAny),
 711 RELOFFSET(TwPreemptCurrent, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptCurrent, FindAny),
 712 RELOFFSET(TwPreemptLast, SYSTEM_CONTEXT_SWITCH_INFORMATION, PreemptLast, FindAny),
 713 RELOFFSET(TwSwitchToIdle, SYSTEM_CONTEXT_SWITCH_INFORMATION, SwitchToIdle, FindAny),
 714 #endif
 715
 716 HEADER("KUSER_SHARED_DATA"),
 717 OFFSET(UsTickCountMultiplier, KUSER_SHARED_DATA, TickCountMultiplier),
 718 OFFSET(UsInterruptTime, KUSER_SHARED_DATA, InterruptTime),
 719 OFFSET(UsSystemTime, KUSER_SHARED_DATA, SystemTime),
 720 OFFSET(UsTimeZoneBias, KUSER_SHARED_DATA, TimeZoneBias),
 721 OFFSET(UsImageNumberLow, KUSER_SHARED_DATA, ImageNumberLow),
 722 OFFSET(UsImageNumberHigh, KUSER_SHARED_DATA, ImageNumberHigh),
 723 OFFSET(UsNtSystemRoot, KUSER_SHARED_DATA, NtSystemRoot),
 724 OFFSET(UsMaxStackTraceDepth, KUSER_SHARED_DATA, MaxStackTraceDepth),
 725 OFFSET(UsCryptoExponent, KUSER_SHARED_DATA, CryptoExponent),
 726 OFFSET(UsTimeZoneId, KUSER_SHARED_DATA, TimeZoneId),
 727 OFFSET(UsLargePageMinimum, KUSER_SHARED_DATA, LargePageMinimum),
 728 OFFSET(UsReserved2, KUSER_SHARED_DATA, Reserved2),
 729 OFFSET(UsNtProductType, KUSER_SHARED_DATA, NtProductType),
 730 OFFSET(UsProductTypeIsValid, KUSER_SHARED_DATA, ProductTypeIsValid),
 731 OFFSET(UsNtMajorVersion, KUSER_SHARED_DATA, NtMajorVersion),
 732 OFFSET(UsNtMinorVersion, KUSER_SHARED_DATA, NtMinorVersion),
 733 OFFSET(UsProcessorFeatures, KUSER_SHARED_DATA, ProcessorFeatures),
 734 OFFSET(UsReserved1, KUSER_SHARED_DATA, Reserved1),
 735 OFFSET(UsReserved3, KUSER_SHARED_DATA, Reserved3),
 736 OFFSET(UsTimeSlip, KUSER_SHARED_DATA, TimeSlip),
 737 OFFSET(UsAlternativeArchitecture, KUSER_SHARED_DATA, AlternativeArchitecture),
 738 OFFSET(UsSystemExpirationDate, KUSER_SHARED_DATA, SystemExpirationDate),
 739 OFFSET(UsSuiteMask, KUSER_SHARED_DATA, SuiteMask),
 740 OFFSET(UsKdDebuggerEnabled, KUSER_SHARED_DATA, KdDebuggerEnabled),
 741 OFFSET(UsActiveConsoleId, KUSER_SHARED_DATA, ActiveConsoleId),
 742 OFFSET(UsDismountCount, KUSER_SHARED_DATA, DismountCount),
 743 OFFSET(UsComPlusPackage, KUSER_SHARED_DATA, ComPlusPackage),
 744 OFFSET(UsLastSystemRITEventTickCount, KUSER_SHARED_DATA, LastSystemRITEventTickCount),
 745 OFFSET(UsNumberOfPhysicalPages, KUSER_SHARED_DATA, NumberOfPhysicalPages),
 746 OFFSET(UsSafeBootMode, KUSER_SHARED_DATA, SafeBootMode),
 747 //OFFSET(UsTscQpcData, KUSER_SHARED_DATA, TscQpcData),
 748 OFFSET(UsTestRetInstruction, KUSER_SHARED_DATA, TestRetInstruction),
 749 OFFSET(UsSystemCall, KUSER_SHARED_DATA, SystemCall),
 750 OFFSET(UsSystemCallReturn, KUSER_SHARED_DATA, SystemCallReturn),
 751 OFFSET(UsSystemCallPad, KUSER_SHARED_DATA, SystemCallPad),
 752 OFFSET(UsTickCount, KUSER_SHARED_DATA, TickCount),
 753 OFFSET(UsTickCountQuad, KUSER_SHARED_DATA, TickCountQuad),
 754 OFFSET(UsWow64SharedInformation, KUSER_SHARED_DATA, Wow64SharedInformation),
 755
 756 HEADER("KWAIT_BLOCK"),
 757 OFFSET(WbWaitListEntry, KWAIT_BLOCK, WaitListEntry),
 758 OFFSET(WbThread, KWAIT_BLOCK, Thread),
 759 OFFSET(WbObject, KWAIT_BLOCK, Object),
 760 OFFSET(WbNextWaitBlock, KWAIT_BLOCK, NextWaitBlock),
 761 OFFSET(WbWaitKey, KWAIT_BLOCK, WaitKey),
 762 OFFSET(WbWaitType, KWAIT_BLOCK, WaitType),
 763