acpi.sys.h

一个 windows 内核级别的调试器

    struct _LARGE_INTEGER WriteTransferCount;
    struct _LARGE_INTEGER OtherTransferCount;
    DWORD CommitChargeLimit;
    DWORD CommitChargePeak;
    struct _RTL_BITMAP* VadPhysicalPagesBitMap;
    DWORD VadPhysicalPages;
    DWORD AweLock;
    struct _SE_AUDIT_PROCESS_CREATION_INFO SeAuditProcessCreationInfo;
    struct _MMSUPPORT Vm;
    DWORD LastFaultCount;
    DWORD ModifiedPageCount;
    DWORD NumberOfVads;
    DWORD Spare2;
    DWORD JobStatus;
    DWORD Flags;
    DWORD CreateReported;
    DWORD NoDebugInherit;
    DWORD ProcessExiting;
    DWORD ProcessDelete;
    DWORD Wow64SplitPages;
    DWORD VmDeleted;
    DWORD OutswapEnabled;
    DWORD Outswapped;
    DWORD ForkFailed;
    DWORD HasPhysicalVad;
    DWORD AddressSpaceInitialized;
    DWORD SetTimerResolution;
    DWORD BreakOnTermination;
    DWORD SessionCreationUnderway;
    DWORD WriteWatch;
    DWORD ProcessInSession;
    DWORD OverrideAddressSpace;
    DWORD Unused;
    long ExitStatus;
    WORD NextPageColor;
    BYTE SubSystemMinorVersion;
    BYTE SubSystemMajorVersion;
    WORD SubSystemVersion;
    BYTE PriorityClass;
};

struct _EPROCESS*;

struct _EX_RUNDOWN_REF
{
    DWORD Count;
    void* Ptr;
};

struct UnnamedBitfield_31B340
{
     (null);
};

struct UnnamedBitfield_31B388
{
     (null);
};

struct UnnamedBitfield_31B3D0
{
     (null);
};

struct UnnamedStruct_31B418
{
    struct _KTHREAD Tcb;
    struct _LARGE_INTEGER CreateTime;
    unsigned NestedFaultCount;
    unsigned ApcNeeded;
    struct _LARGE_INTEGER ExitTime;
    struct _LIST_ENTRY LpcReplyChain;
    long ExitStatus;
    void* OfsChain;
    struct _LIST_ENTRY PostBlockList;
    struct _TERMINATION_PORT* TerminationPort;
    struct _ETHREAD* ReaperLink;
    DWORD ActiveTimerListLock;
    struct _LIST_ENTRY ActiveTimerListHead;
    struct _CLIENT_ID Cid;
    struct _KSEMAPHORE LpcReplySemaphore;
    void* LpcReplyMessage;
    void* LpcWaitingOnPort;
    struct _PS_IMPERSONATION_INFORMATION* ImpersonationInfo;
    struct _LIST_ENTRY IrpList;
    DWORD TopLevelIrp;
    struct _DEVICE_OBJECT* DeviceToVerify;
    struct _EPROCESS* ThreadsProcess;
    void* StartAddress;
    void* Win32StartAddress;
    DWORD LpcReceivedMessageId;
    struct _LIST_ENTRY ThreadListEntry;
    struct _EX_RUNDOWN_REF RundownProtect;
    DWORD LpcReplyMessageId;
    DWORD ReadClusterSize;
    DWORD GrantedAccess;
    DWORD CrossThreadFlags;
    DWORD Terminated;
    DWORD DeadThread;
    DWORD HideFromDebugger;
    DWORD ActiveImpersonationInfo;
    DWORD SystemThread;
    DWORD HardErrorsAreDisabled;
    DWORD BreakOnTermination;
    DWORD SameThreadPassiveFlags;
    DWORD ActiveExWorker;
    DWORD ExWorkerCanWaitUser;
    DWORD MemoryMaker;
    DWORD SameThreadApcFlags;
    BYTE LpcReceivedMsgIdValid;
    BYTE LpcExitThreadCalled;
    BYTE AddressSpaceOwner;
    BYTE ForwardClusterOnly;
    BYTE DisablePageFaultClustering;
};

struct _KPROCESS
{
    struct _DISPATCHER_HEADER Header;
    struct _LIST_ENTRY ProfileListHead;
    DWORD DirectoryTableBase[2];
    struct _KGDTENTRY LdtDescriptor;
    struct _KIDTENTRY Int21Descriptor;
    WORD IopmOffset;
    BYTE Iopl;
    BYTE VdmFlag;
    DWORD ActiveProcessors;
    DWORD KernelTime;
    DWORD UserTime;
    struct _LIST_ENTRY ReadyListHead;
    struct _SINGLE_LIST_ENTRY SwapListEntry;
    void* Reserved1;
    struct _LIST_ENTRY ThreadListHead;
    DWORD ProcessLock;
    DWORD Affinity;
    WORD StackCount;
    char BasePriority;
    char ThreadQuantum;
    BYTE AutoAlignment;
    BYTE State;
    BYTE ThreadSeed;
    BYTE DisableBoost;
    BYTE PowerState;
    BYTE DisableQuantum;
    BYTE IdealNode;
    BYTE Spare;
};

struct _HANDLE_TABLE
{
    struct _HANDLE_TABLE_SEQ FirstFreeSeq;
    long NextIndexNeedingPool;
    long HandleCount;
    DWORD TableCode;
    struct _EPROCESS* QuotaProcess;
    void* UniqueProcessId;
    struct _EX_PUSH_LOCK HandleTableLock;
    struct _LIST_ENTRY HandleTableList;
    struct _EX_PUSH_LOCK HandleContentionEvent;
    struct _HANDLE_TRACE_DEBUG_INFO* DebugInfo;
    long ExtraInfoPages;
};

struct _HANDLE_TABLE*;

struct _EJOB
{
    struct _KEVENT Event;
    struct _LIST_ENTRY JobLinks;
    struct _LIST_ENTRY ProcessListHead;
    struct _ERESOURCE JobLock;
    struct _LARGE_INTEGER TotalUserTime;
    struct _LARGE_INTEGER TotalKernelTime;
    struct _LARGE_INTEGER ThisPeriodTotalUserTime;
    struct _LARGE_INTEGER ThisPeriodTotalKernelTime;
    DWORD TotalPageFaultCount;
    DWORD TotalProcesses;
    DWORD ActiveProcesses;
    DWORD TotalTerminatedProcesses;
    struct _LARGE_INTEGER PerProcessUserTimeLimit;
    struct _LARGE_INTEGER PerJobUserTimeLimit;
    DWORD LimitFlags;
    DWORD MinimumWorkingSetSize;
    DWORD MaximumWorkingSetSize;
    DWORD ActiveProcessLimit;
    DWORD Affinity;
    BYTE PriorityClass;
    DWORD UIRestrictionsClass;
    DWORD SecurityLimitFlags;
    void* Token;
    struct _PS_JOB_TOKEN_FILTER* Filter;
    DWORD EndOfJobTimeAction;
    void* CompletionPort;
    void* CompletionKey;
    DWORD SessionId;
    DWORD SchedulingClass;
    ULONGLONG ReadOperationCount;
    ULONGLONG WriteOperationCount;
    ULONGLONG OtherOperationCount;
    ULONGLONG ReadTransferCount;
    ULONGLONG WriteTransferCount;
    ULONGLONG OtherTransferCount;
    struct _IO_COUNTERS IoInfo;
    DWORD ProcessMemoryLimit;
    DWORD JobMemoryLimit;
    DWORD PeakProcessMemoryUsed;
    DWORD PeakJobMemoryUsed;
    DWORD CurrentJobMemoryUsed;
    struct _FAST_MUTEX MemoryLimitsLock;
    struct _LIST_ENTRY JobSetLinks;
    DWORD MemberLevel;
    DWORD JobFlags;
};

struct _EJOB*;

struct _EPROCESS_QUOTA_BLOCK
{
    struct _EPROCESS_QUOTA_ENTRY QuotaEntry[3];
    struct _LIST_ENTRY QuotaList;
    DWORD ReferenceCount;
    DWORD ProcessCount;
};

struct _EPROCESS_QUOTA_BLOCK*;

struct _PAGEFAULT_HISTORY
{
    DWORD CurrentIndex;
    DWORD MaxIndex;
    DWORD SpinLock;
    void* Reserved;
    struct _PROCESS_WS_WATCH_INFORMATION WatchInfo[1];
};

struct _PAGEFAULT_HISTORY*;

BYTE;

struct _WOW64_PROCESS
{
    void* Wow64;
};

struct _WOW64_PROCESS*;

struct _PEB
{
    BYTE InheritedAddressSpace;
    BYTE ReadImageFileExecOptions;
    BYTE BeingDebugged;
    BYTE SpareBool;
    void* Mutant;
    void* ImageBaseAddress;
    struct _PEB_LDR_DATA* Ldr;
    struct _RTL_USER_PROCESS_PARAMETERS* ProcessParameters;
    void* SubSystemData;
    void* ProcessHeap;
    void* FastPebLock;
    void* FastPebLockRoutine;
    void* FastPebUnlockRoutine;
    DWORD EnvironmentUpdateCount;
    void* KernelCallbackTable;
    DWORD SystemReserved[2];
    struct _PEB_FREE_BLOCK* FreeList;
    DWORD TlsExpansionCounter;
    void* TlsBitmap;
    DWORD TlsBitmapBits[2];
    void* ReadOnlySharedMemoryBase;
    void* ReadOnlySharedMemoryHeap;
    void** ReadOnlyStaticServerData;
    void* AnsiCodePageData;
    void* OemCodePageData;
    void* UnicodeCaseTableData;
    DWORD NumberOfProcessors;
    DWORD NtGlobalFlag;
    struct _LARGE_INTEGER CriticalSectionTimeout;
    DWORD HeapSegmentReserve;
    DWORD HeapSegmentCommit;
    DWORD HeapDeCommitTotalFreeThreshold;
    DWORD HeapDeCommitFreeBlockThreshold;
    DWORD NumberOfHeaps;
    DWORD MaximumNumberOfHeaps;
    void** ProcessHeaps;
    void* GdiSharedHandleTable;
    void* ProcessStarterHelper;
    DWORD GdiDCAttributeList;
    void* LoaderLock;
    DWORD OSMajorVersion;
    DWORD OSMinorVersion;
    WORD OSBuildNumber;
    WORD OSCSDVersion;
    DWORD OSPlatformId;
    DWORD ImageSubsystem;
    DWORD ImageSubsystemMajorVersion;
    DWORD ImageSubsystemMinorVersion;
    DWORD ImageProcessAffinityMask;
    DWORD GdiHandleBuffer[34];
    INVALID_TYPE* PostProcessInitRoutine;
    void* TlsExpansionBitmap;
    DWORD TlsExpansionBitmapBits[32];
    DWORD SessionId;
    struct _ULARGE_INTEGER AppCompatFlags;
    void* pShimData;
    void* AppCompatInfo;
    struct _UNICODE_STRING CSDVersion;
    void* ActivationContextData;
    void* ProcessAssemblyStorageMap;
    void* SystemDefaultActivationContextData;
    void* SystemAssemblyStorageMap;
    DWORD MinimumStackCommit;
};

struct _PEB*;

struct _RTL_BITMAP
{
    DWORD SizeOfBitMap;
    DWORD* Buffer;
};

struct _RTL_BITMAP*;

struct _SE_AUDIT_PROCESS_CREATION_INFO
{
    struct _OBJECT_NAME_INFORMATION* ImageFileName;
};

struct _MMSUPPORT
{
    struct _LARGE_INTEGER LastTrimTime;
    DWORD LastTrimFaultCount;
    DWORD PageFaultCount;
    DWORD PeakWorkingSetSize;
    DWORD WorkingSetSize;
    DWORD MinimumWorkingSetSize;
    DWORD MaximumWorkingSetSize;
    struct _MMWSL* VmWorkingSetList;
    struct _LIST_ENTRY WorkingSetExpansionLinks;
    struct _MMSUPPORT_FLAGS Flags;
    DWORD Claim;
    DWORD NextEstimationSlot;
    DWORD NextAgingSlot;
    DWORD EstimatedAvailable;
    DWORD GrowthSinceLastEstimate;
};

struct UnnamedBitfield_31D638
{
};

struct UnnamedBitfield_31D680
{
     (null);
};

struct UnnamedBitfield_31D6C8
{
     (null);
};

struct UnnamedBitfield_31D710
{
     (null);
};

struct UnnamedBitfield_31D758
{
     (null);
};

struct UnnamedBitfield_31D7A0
{
     (null);
};

struct UnnamedBitfield_31D7E8
{
     (null);
};

struct UnnamedBitfield_31D830
{
     (null);
};

struct UnnamedStruct_31D878
{
    struct _KPROCESS Pcb;
    struct _EX_PUSH_LOCK ProcessLock;
    struct _LARGE_INTEGER CreateTime;
    struct _LARGE_INTEGER ExitTime;
    struct _EX_RUNDOWN_REF RundownProtect;
    void* UniqueProcessId;
    struct _LIST_ENTRY ActiveProcessLinks;
    DWORD QuotaUsage[3];
    DWORD QuotaPeak[3];
    DWORD CommitCharge;
    DWORD PeakVirtualSize;
    DWORD VirtualSize;
    struct _LIST_ENTRY SessionProcessLinks;
    void* DebugPort;
    void* ExceptionPort;
    struct _HANDLE_TABLE* ObjectTable;
    struct _EX_FAST_REF Token;
    struct _FAST_MUTEX WorkingSetLock;
    DWORD WorkingSetPage;
    struct _FAST_MUTEX AddressCreationLock;
    DWORD HyperSpaceLock;
    struct _ETHREAD* ForkInProgress;
    void* Spare1;
    void* VadRoot;
    void* VadHint;
    void* CloneRoot;
    DWORD NumberOfPrivatePages;
    DWORD NumberOfLockedPages;
    void* Win32Process;
    struct _EJOB* Job;
    void* SectionObject;
    void* SectionBaseAddress;
    struct _EPROCESS_QUOTA_BLOCK* QuotaBlock;
    struct _PAGEFAULT_HISTORY* WorkingSetWatch;
    void* Win32WindowStation;
    void* InheritedFromUniqueProcessId;
    void* LdtInformation;
    void* VadFreeHint;
    void* VdmObjects;
    void* DeviceMap;
    struct _LIST_ENTRY PhysicalVadList;
    struct _HARDWARE_PTE_X86 PageDirectoryPte;
    ULONGLONG Filler;
    void* Session;
    BYTE ImageFileName[16];
    struct _LIST_ENTRY JobLinks;
    void* LockedPagesList;
    struct _LIST_ENTRY ThreadListHead;
    void* SecurityPort;
    struct _WOW64_PROCESS* Wow64Process;
    DWORD ActiveThreads;
    DWORD GrantedAccess;
    DWORD DefaultHardErrorProcessing;
    long LastThreadExitStatus;
    struct _PEB* Peb;
    struct _EX_FAST_REF PrefetchTrace;
    struct _LARGE_INTEGER ReadOperationCount;
    struct _LARGE_INTEGER WriteOperationCount;
    struct _LARGE_INTEGER OtherOperationCount;
    struct _LARGE_INTEGER ReadTransferCount;
    struct _LARGE_INTEGER WriteTransferCount;
    struct _LARGE_INTEGER OtherTransferCount;
    DWORD CommitChargeLimit;
    DWORD CommitChargePeak;
    struct _RTL_BITMAP* VadPhysicalPagesBitMap;
    DWORD VadPhysicalPages;
    DWORD AweLock;
    struct _SE_AUDIT_PROCESS_CREATION_INFO SeAuditProcessCreationInfo;
    struct _MMSUPPORT Vm;
    DWORD LastFaultCount;
    DWORD ModifiedPageCount;
    DWORD NumberOfVads;
    DWORD Spare2;
    DWORD JobStatus;
    DWORD Flags;
    DWORD CreateReported;
    DWORD NoDebugInherit;
    DWORD ProcessExiting;
    DWORD ProcessDelete;
    DWORD Wow64SplitPages;
    DWORD VmDeleted;
    DWORD OutswapEnabled;
    DWORD Outswapped;
    DWORD ForkFailed;
    DWORD HasPhysicalVad;
    DWORD AddressSpaceInitialized;
    DWORD SetTimerResolution;
    DWORD BreakOnTermination;
    DWORD SessionCreationUnderway;
    DWORD WriteWatch;
    DWORD ProcessInSession;
    DWORD OverrideAddressSpace;
    DWORD Unused;
    long ExitStatus;
    WORD NextPageColor;
    BYTE SubSystemMinorVersion;
    BYTE SubSystemMajorVersion;
    WORD SubSystemVersion;
    BYTE PriorityClass;
};

struct _FADT_2_0
{
    struct _DESCRIPTION_HEADER Header;
    DWORD facs;
    DWORD dsdt;
    BYTE int_model;
    BYTE pm_profile;
    WORD sci_int_vector;
    DWORD smi_cmd_io_port;
    BYTE acpi_on_value;
    BYTE acpi_off_value;
    BYTE s4bios_req;
    BYTE pstate_control;
    DWORD pm1a_evt_blk_io_port;
    DWORD pm1b_evt_blk_io_port;
    DWORD pm1a_ctrl_blk_io_port;
    DWORD pm1b_ctrl_blk_io_port;
    DWORD pm2_ctrl_blk_io_port;
    DWORD pm_tmr_blk_io_port;
    DWORD gp0_blk_io_port;
    DWORD gp1_blk_io_port;
    BYTE pm1_evt_len;
    BYTE pm1_ctrl_len;
    BYTE pm2_ctrl_len;
    BYTE pm_tmr_len;
    BYTE gp0_blk_len;
    BYTE gp1_blk_len;
    BYTE gp1_base;
    BYTE cstate_control;
    WORD lvl2_latency;
    WORD lvl3_latency;
    WORD flush_size;
    WORD flush_stride;
    BYTE duty_offset;
    BYTE duty_width;
    BYTE day_alarm_index;
    BYTE month_alarm_index;
    BYTE century_alarm_index;
    WORD boot_arch;
    BYTE reserved3[1];
    DWORD flags;
    struct _GEN_ADDR reset_reg;
    BYTE reset_val;
    BYTE reserved4[3];
    struct _LARGE_INTEGER x_firmware_ctrl;
    struct _LARGE_INTEGER x_dsdt;
    struct _GEN_ADDR x_pm1a_evt_blk;
    struct _GEN_ADDR x_pm1b_evt_blk;
    struct _GEN_ADDR x_pm1a_ctrl_blk;
    struct _GEN_ADDR x_pm1b_ctrl_blk;
    struct _GEN_ADDR x_pm2_ctrl_blk;
    struct _GEN_ADDR x_pm_tmr_blk;
    struct _GEN_ADDR x_gp0_blk;
    struct _GEN_ADDR x_gp1_blk;
};

struct _DESCRIPTION_HEADER
{
    DWORD Signature;
    DWORD Length;
    BYTE Revision;
    BYTE Checksum;
    BYTE OEMID[6];
    BYTE OEMTableID[8];
    DWORD OEMRevision;
    BYTE CreatorID[4];
    DWORD CreatorRev;
};

BYTE;

struct _GEN_ADDR
{
    BYTE AddressSpaceID;
    BYTE BitWidth;
    BYTE BitOffset;
    BYTE Reserved;
    struct _LARGE_INTEGER Address;
};