📄 ntdll.dll.h

📁 一个 windows 内核级别的调试器
💻 H
📖 第 1 页 / 共 5 页
字号:
上一页 1 2 3 45
    BYTE NpxState;
    char Saturation;
    char Priority;
    struct _KAPC_STATE ApcState;
    DWORD ContextSwitches;
    BYTE IdleSwapBlock;
    BYTE Spare0[3];
    long WaitStatus;
    BYTE WaitIrql;
    char WaitMode;
    BYTE WaitNext;
    BYTE WaitReason;
    struct _KWAIT_BLOCK* WaitBlockList;
    struct _LIST_ENTRY WaitListEntry;
    struct _SINGLE_LIST_ENTRY SwapListEntry;
    DWORD WaitTime;
    char BasePriority;
    BYTE DecrementCount;
    char PriorityDecrement;
    char Quantum;
    struct _KWAIT_BLOCK WaitBlock[4];
    void* LegoData;
    DWORD KernelApcDisable;
    DWORD UserAffinity;
    BYTE SystemAffinityActive;
    BYTE PowerState;
    BYTE NpxIrql;
    BYTE InitialNode;
    void* ServiceTable;
    struct _KQUEUE* Queue;
    DWORD ApcQueueLock;
    struct _KTIMER Timer;
    struct _LIST_ENTRY QueueListEntry;
    DWORD SoftAffinity;
    DWORD Affinity;
    BYTE Preempted;
    BYTE ProcessReadyQueue;
    BYTE KernelStackResident;
    BYTE NextProcessor;
    void* CallbackStack;
    void* Win32Thread;
    struct _KTRAP_FRAME* TrapFrame;
    struct _KAPC_STATE* ApcStatePointer[2];
    char PreviousMode;
    BYTE EnableStackSwap;
    BYTE LargeStack;
    BYTE ResourceIndex;
    DWORD KernelTime;
    DWORD UserTime;
    struct _KAPC_STATE SavedApcState;
    BYTE Alertable;
    BYTE ApcStateIndex;
    BYTE ApcQueueable;
    BYTE AutoAlignment;
    void* StackBase;
    struct _KAPC SuspendApc;
    struct _KSEMAPHORE SuspendSemaphore;
    struct _LIST_ENTRY ThreadListEntry;
    char FreezeCount;
    char SuspendCount;
    BYTE IdealProcessor;
    BYTE DisableBoost;
};

struct UnnamedBitfield_484FC8
{
    struct _DISPATCHER_HEADER Header;
    struct _LIST_ENTRY MutantListHead;
    void* InitialStack;
    void* StackLimit;
    void* Teb;
    void* TlsArray;
    void* KernelStack;
    BYTE DebugActive;
    BYTE State;
    BYTE Alerted;
    BYTE Iopl;
    BYTE NpxState;
    char Saturation;
    char Priority;
    struct _KAPC_STATE ApcState;
    DWORD ContextSwitches;
    BYTE IdleSwapBlock;
    BYTE Spare0;
    long WaitStatus;
    BYTE WaitIrql;
    char WaitMode;
    BYTE WaitNext;
    BYTE WaitReason;
    struct _KWAIT_BLOCK* WaitBlockList;
    struct _LIST_ENTRY WaitListEntry;
    struct _SINGLE_LIST_ENTRY SwapListEntry;
    DWORD WaitTime;
    char BasePriority;
    BYTE DecrementCount;
    char PriorityDecrement;
    char Quantum;
    struct _KWAIT_BLOCK WaitBlock;
    void* LegoData;
    DWORD KernelApcDisable;
    DWORD UserAffinity;
    BYTE SystemAffinityActive;
    BYTE PowerState;
    BYTE NpxIrql;
    BYTE InitialNode;
    void* ServiceTable;
    struct _KQUEUE* Queue;
    DWORD ApcQueueLock;
    struct _KTIMER Timer;
    struct _LIST_ENTRY QueueListEntry;
    DWORD SoftAffinity;
    DWORD Affinity;
    BYTE Preempted;
    BYTE ProcessReadyQueue;
    BYTE KernelStackResident;
    BYTE NextProcessor;
    void* CallbackStack;
    void* Win32Thread;
    struct _KTRAP_FRAME* TrapFrame;
    struct _KAPC_STATE* ApcStatePointer;
    char PreviousMode;
    BYTE EnableStackSwap;
    BYTE LargeStack;
    BYTE ResourceIndex;
    DWORD KernelTime;
    DWORD UserTime;
    struct _KAPC_STATE SavedApcState;
    BYTE Alertable;
    BYTE ApcStateIndex;
    BYTE ApcQueueable;
    BYTE AutoAlignment;
    void* StackBase;
    struct _KAPC SuspendApc;
    struct _KSEMAPHORE SuspendSemaphore;
    struct _LIST_ENTRY ThreadListEntry;
    char FreezeCount;
    char SuspendCount;
    BYTE IdealProcessor;
    BYTE DisableBoost;
};

struct UnnamedBitfield_485010
{
     (null);
};

struct UnnamedBitfield_485058
{
     (null);
};

struct UnnamedBitfield_4850A0
{
     (null);
};

struct UnnamedBitfield_4850E8
{
     (null);
};

struct UnnamedBitfield_485130
{
     (null);
};

struct UnnamedBitfield_485178
{
     (null);
};

struct UnnamedBitfield_4851C0
{
     (null);
};

struct UnnamedStruct_485208
{
    unsigned SessionSpace;
    unsigned BeingTrimmed;
    unsigned SessionLeader;
    unsigned TrimHard;
    unsigned WorkingSetHard;
    unsigned AddressSpaceBeingDeleted;
    unsigned Available;
    unsigned AllowWorkingSetAdjustment;
    unsigned MemoryPriority;
};

struct UnnamedStruct_485740
{
    struct _TERMINATION_PORT* Next;
    void* Port;
};

struct _LIST_ENTRY*;

struct UnnamedStruct_4858D0
{
    struct _LIST_ENTRY* Flink;
    struct _LIST_ENTRY* Blink;
};

struct _HEAP
{
    struct _HEAP_ENTRY Entry;
    DWORD Signature;
    DWORD Flags;
    DWORD ForceFlags;
    DWORD VirtualMemoryThreshold;
    DWORD SegmentReserve;
    DWORD SegmentCommit;
    DWORD DeCommitFreeBlockThreshold;
    DWORD DeCommitTotalFreeThreshold;
    DWORD TotalFreeSize;
    DWORD MaximumAllocationSize;
    WORD ProcessHeapsListIndex;
    WORD HeaderValidateLength;
    void* HeaderValidateCopy;
    WORD NextAvailableTagIndex;
    WORD MaximumTagIndex;
    struct _HEAP_TAG_ENTRY* TagEntries;
    struct _HEAP_UCR_SEGMENT* UCRSegments;
    struct _HEAP_UNCOMMMTTED_RANGE* UnusedUnCommittedRanges;
    DWORD AlignRound;
    DWORD AlignMask;
    struct _LIST_ENTRY VirtualAllocdBlocks;
    struct _HEAP_SEGMENT* Segments[64];
    struct UnnamedStruct_486028 u;
    struct UnnamedStruct_4861D8 u2;
    WORD AllocatorBackTraceIndex;
    DWORD NonDedicatedListLength;
    void* LargeBlocksIndex;
    struct _HEAP_PSEUDO_TAG_ENTRY* PseudoTagEntries;
    struct _LIST_ENTRY FreeLists[128];
    struct _HEAP_LOCK* LockVariable;
    INVALID_TYPE* CommitRoutine;
    void* FrontEndHeap;
    WORD FrontHeapLockCount;
    BYTE FrontEndHeapType;
    BYTE LastSegmentIndex;
};

struct _HEAP_ENTRY
{
    WORD Size;
    WORD PreviousSize;
    BYTE SegmentIndex;
    BYTE Flags;
    BYTE UnusedBytes;
    BYTE SmallTagIndex;
};

struct _HEAP_TAG_ENTRY
{
    DWORD Allocs;
    DWORD Frees;
    DWORD Size;
    WORD TagIndex;
    WORD CreatorBackTraceIndex;
    WORD TagName[24];
};

struct _HEAP_TAG_ENTRY*;

struct _HEAP_UCR_SEGMENT
{
    struct _HEAP_UCR_SEGMENT* Next;
    DWORD ReservedSize;
    DWORD CommittedSize;
    DWORD filler;
};

struct _HEAP_UCR_SEGMENT*;

struct _HEAP_UNCOMMMTTED_RANGE
{
    struct _HEAP_UNCOMMMTTED_RANGE* Next;
    DWORD Address;
    DWORD Size;
    DWORD filler;
};

struct _HEAP_UNCOMMMTTED_RANGE*;

struct _HEAP_SEGMENT
{
    struct _HEAP_ENTRY Entry;
    DWORD Signature;
    DWORD Flags;
    struct _HEAP* Heap;
    DWORD LargestUnCommittedRange;
    void* BaseAddress;
    DWORD NumberOfPages;
    struct _HEAP_ENTRY* FirstEntry;
    struct _HEAP_ENTRY* LastValidEntry;
    DWORD NumberOfUnCommittedPages;
    DWORD NumberOfUnCommittedRanges;
    struct _HEAP_UNCOMMMTTED_RANGE* UnCommittedRanges;
    WORD AllocatorBackTraceIndex;
    WORD Reserved;
    struct _HEAP_ENTRY* LastEntryInSegment;
};

struct _HEAP_SEGMENT*;

struct _HEAP_SEGMENT*;

struct UnnamedStruct_485EC0
{
    DWORD FreeListsInUseUlong[4];
    BYTE FreeListsInUseBytes[16];
};

struct UnnamedStruct_486028
{
    DWORD FreeListsInUseUlong[4];
    BYTE FreeListsInUseBytes[16];
};

struct UnnamedStruct_486070
{
    WORD FreeListsInUseTerminate;
    WORD DecommitCount;
};

struct UnnamedStruct_4861D8
{
    WORD FreeListsInUseTerminate;
    WORD DecommitCount;
};

struct _HEAP_PSEUDO_TAG_ENTRY
{
    DWORD Allocs;
    DWORD Frees;
    DWORD Size;
};

struct _HEAP_PSEUDO_TAG_ENTRY*;

struct _LIST_ENTRY;

struct _HEAP_LOCK
{
    struct UnnamedStruct_497460 Lock;
};

struct _HEAP_LOCK*;

INVALID_TYPE*;

struct UnnamedStruct_486450
{
    struct _HEAP_ENTRY Entry;
    DWORD Signature;
    DWORD Flags;
    DWORD ForceFlags;
    DWORD VirtualMemoryThreshold;
    DWORD SegmentReserve;
    DWORD SegmentCommit;
    DWORD DeCommitFreeBlockThreshold;
    DWORD DeCommitTotalFreeThreshold;
    DWORD TotalFreeSize;
    DWORD MaximumAllocationSize;
    WORD ProcessHeapsListIndex;
    WORD HeaderValidateLength;
    void* HeaderValidateCopy;
    WORD NextAvailableTagIndex;
    WORD MaximumTagIndex;
    struct _HEAP_TAG_ENTRY* TagEntries;
    struct _HEAP_UCR_SEGMENT* UCRSegments;
    struct _HEAP_UNCOMMMTTED_RANGE* UnusedUnCommittedRanges;
    DWORD AlignRound;
    DWORD AlignMask;
    struct _LIST_ENTRY VirtualAllocdBlocks;
    struct _HEAP_SEGMENT* Segments[64];
    struct UnnamedStruct_486028 u;
    struct UnnamedStruct_4861D8 u2;
    WORD AllocatorBackTraceIndex;
    DWORD NonDedicatedListLength;
    void* LargeBlocksIndex;
    struct _HEAP_PSEUDO_TAG_ENTRY* PseudoTagEntries;
    struct _LIST_ENTRY FreeLists[128];
    struct _HEAP_LOCK* LockVariable;
    INVALID_TYPE* CommitRoutine;
    void* FrontEndHeap;
    WORD FrontHeapLockCount;
    BYTE FrontEndHeapType;
    BYTE LastSegmentIndex;
};

BYTE;

struct UnnamedStruct_487860
{
    DWORD ControlWord;
    DWORD StatusWord;
    DWORD TagWord;
    DWORD ErrorOffset;
    DWORD ErrorSelector;
    DWORD DataOffset;
    DWORD DataSelector;
    BYTE RegisterArea[80];
};

struct UnnamedStruct_487CD8
{
    BYTE PercentFrequency;
    BYTE MinCapacity;
    WORD Power;
    BYTE IncreaseLevel;
    BYTE DecreaseLevel;
    WORD Flags;
    DWORD IncreaseTime;
    DWORD DecreaseTime;
    DWORD IncreaseCount;
    DWORD DecreaseCount;
    ULONGLONG PerformanceTime;
};

struct UnnamedStruct_488320
{
    ULONGLONG StartTime;
    ULONGLONG EndTime;
    DWORD IdleHandlerReserved[4];
};

enum UnnamedEnum_4884F8
{
    MaximumWaitReason = 27,
    WrKernel = 26,
    Spare6 = 25,
    Spare5 = 24,
    Spare4 = 23,
    Spare3 = 22,
    Spare2 = 21,
    WrRendezvous = 20,
    WrPageOut = 19,
    WrVirtualMemory = 18,
    WrLpcReply = 17,
    WrLpcReceive = 16,
    WrQueue = 15,
    WrEventPair = 14,
    WrUserRequest = 13,
    WrSuspended = 12,
    WrDelayExecution = 11,
    WrPoolAllocation = 10,
    WrPageIn = 9,
    WrFreePage = 8,
    WrExecutive = 7,
    UserRequest = 6,
    Suspended = 5,
    DelayExecution = 4,
    PoolAllocation = 3,
    PageIn = 2,
    FreePage = 1,
    Executive = 0,
};

enum _KWAIT_REASON
{
    MaximumWaitReason = 27,
    WrKernel = 26,
    Spare6 = 25,
    Spare5 = 24,
    Spare4 = 23,
    Spare3 = 22,
    Spare2 = 21,
    WrRendezvous = 20,
    WrPageOut = 19,
    WrVirtualMemory = 18,
    WrLpcReply = 17,
    WrLpcReceive = 16,
    WrQueue = 15,
    WrEventPair = 14,
    WrUserRequest = 13,
    WrSuspended = 12,
    WrDelayExecution = 11,
    WrPoolAllocation = 10,
    WrPageIn = 9,
    WrFreePage = 8,
    WrExecutive = 7,
    UserRequest = 6,
    Suspended = 5,
    DelayExecution = 4,
    PoolAllocation = 3,
    PageIn = 2,
    FreePage = 1,
    Executive = 0,
};

struct _HANDLE_TRACE_DB_ENTRY
{
    void* Thread;
    void* Process;
    void* Handle;
    DWORD Type;
    void* StackTrace[8];
};

struct _HANDLE_TRACE_DB_ENTRY;

struct UnnamedStruct_489378
{
    struct _HANDLE_TABLE_SEQ LastFreeSeq;
    DWORD CurrentStackIndex;
    struct _HANDLE_TRACE_DB_ENTRY TraceDb[682];
};

struct _PROCESS_WS_WATCH_INFORMATION
{
    void* FaultingPc;
    void* FaultingVa;
};

struct _PROCESS_WS_WATCH_INFORMATION;

struct UnnamedStruct_489638
{
    DWORD CurrentIndex;
    DWORD MaxIndex;
    DWORD SpinLock;
    void* Reserved;
    struct _PROCESS_WS_WATCH_INFORMATION WatchInfo[1];
};

struct UnnamedStruct_489910
{
    DWORD SizeOfBitMap;
    DWORD* Buffer;
};

struct UnnamedBitfield_489A68
{
    DWORD SizeOfBitMap;
    DWORD* Buffer;
};

struct UnnamedBitfield_489AB0
{
     (null);
};

struct UnnamedBitfield_489AF8
{
     (null);
};

struct UnnamedStruct_489B40
{
    DWORD Valid;
    DWORD Write;
    DWORD Owner;
    DWORD WriteThrough;
    DWORD CacheDisable;
    DWORD Accessed;
    DWORD Dirty;
    DWORD LargePage;
    DWORD Global;
    DWORD CopyOnWrite;
    DWORD Prototype;
    DWORD reserved;
    DWORD PageFrameNumber;
};

struct UnnamedStruct_48A238
{
    WORD Size;
    WORD Pre
上一页 1 2 3 45
💿 文件大小 4381 K
👤 上传用户 susanxuwenjun
📂 所属分类驱动编程
🏷️ 相关标签

#windows #内核 #调试器
⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -