ntkrpampsym.h

一个 windows 内核级别的调试器

    struct _LIST_ENTRY BestResourceList;
    struct _LIST_ENTRY BestConfig;
    struct _LIST_ENTRY ActiveArbiterList;
    BYTE State;
    BYTE ResourcesChanged;
};

INVALID_TYPE*;

struct _PLUGPLAY_EVENT_BLOCK
{
    struct _GUID EventGuid;
    int EventCategory;
    DWORD* Result;
    DWORD Flags;
    DWORD TotalSize;
    void* DeviceObject;
    struct UnnamedStruct_4A7D78 u;
};

struct UnnamedStruct_476838
{
    struct _LIST_ENTRY ListEntry;
    DWORD Argument;
    struct _KEVENT* CallerEvent;
    INVALID_TYPE* Callback;
    void* Context;
    int* VetoType;
    struct _UNICODE_STRING* VetoName;
    struct _PLUGPLAY_EVENT_BLOCK Data;
};

struct _PNP_DEVICE_EVENT_ENTRY
{
    struct _LIST_ENTRY ListEntry;
    DWORD Argument;
    struct _KEVENT* CallerEvent;
    INVALID_TYPE* Callback;
    void* Context;
    int* VetoType;
    struct _UNICODE_STRING* VetoName;
    struct _PLUGPLAY_EVENT_BLOCK Data;
};

struct UnnamedStruct_476D10
{
    long Status;
    struct _KMUTANT EventQueueMutex;
    struct _FAST_MUTEX Lock;
    struct _LIST_ENTRY List;
};

struct _PNP_DEVICE_EVENT_LIST
{
    long Status;
    struct _KMUTANT EventQueueMutex;
    struct _FAST_MUTEX Lock;
    struct _LIST_ENTRY List;
};

struct _POOL_HEADER
{
    BYTE PreviousSize;
    BYTE PoolIndex;
    BYTE PoolType;
    BYTE BlockSize;
    DWORD Ulong1;
    struct _EPROCESS* ProcessBilled;
    DWORD PoolTag;
    WORD AllocatorBackTraceIndex;
    WORD PoolTagHash;
};

struct UnnamedStruct_477088
{
    struct _POOL_HEADER Header;
    struct _LIST_ENTRY List;
};

struct _POOL_BLOCK_HEAD
{
    struct _POOL_HEADER Header;
    struct _LIST_ENTRY List;
};

struct UnnamedStruct_477260
{
    struct _POOL_HEADER Header;
    DWORD Contents[8];
};

struct _POOL_HACKER
{
    struct _POOL_HEADER Header;
    DWORD Contents[8];
};

struct UnnamedStruct_477438
{
    DWORD Key;
    DWORD NonPagedAllocs;
    DWORD NonPagedFrees;
    DWORD NonPagedBytes;
    DWORD PagedAllocs;
    DWORD PagedFrees;
    DWORD PagedBytes;
};

struct _POOL_TRACKER_TABLE
{
    DWORD Key;
    DWORD NonPagedAllocs;
    DWORD NonPagedFrees;
    DWORD NonPagedBytes;
    DWORD PagedAllocs;
    DWORD PagedFrees;
    DWORD PagedBytes;
};

struct UnnamedStruct_4778C0
{
    void* UserData;
    void* Owner;
};

struct UnnamedStruct_477A08
{
    void* UserData;
    void* Owner;
};

struct UnnamedStruct_477A50
{
    struct _LIST_ENTRY ListHead;
};

struct UnnamedStruct_477B18
{
    struct _LIST_ENTRY ListHead;
};

struct UnnamedStruct_477B60
{
    ULONGLONG Start;
    ULONGLONG End;
    struct UnnamedStruct_477A08 Allocated;
    struct UnnamedStruct_477B18 Merged;
    BYTE Attributes;
    BYTE PublicFlags;
    WORD PrivateFlags;
    struct _LIST_ENTRY ListEntry;
};

struct _RTLP_RANGE_LIST_ENTRY
{
    ULONGLONG Start;
    ULONGLONG End;
    struct UnnamedStruct_477A08 Allocated;
    struct UnnamedStruct_477B18 Merged;
    BYTE Attributes;
    BYTE PublicFlags;
    WORD PrivateFlags;
    struct _LIST_ENTRY ListEntry;
};

struct _ACL*;

struct UnnamedStruct_478090
{
    BYTE Revision;
    BYTE Sbz1;
    WORD Control;
    void* Owner;
    void* Group;
    struct _ACL* Sacl;
    struct _ACL* Dacl;
};

struct _SECURITY_DESCRIPTOR
{
    BYTE Revision;
    BYTE Sbz1;
    WORD Control;
    void* Owner;
    void* Group;
    struct _ACL* Sacl;
    struct _ACL* Dacl;
};

struct _VACB
{
    void* BaseAddress;
    struct _SHARED_CACHE_MAP* SharedCacheMap;
    struct UnnamedStruct_4DCE78 Overlay;
    struct _LIST_ENTRY LruList;
};

struct _VACB*;

struct _VACB*;

struct _VACB**;

struct _MBCB
{
    unsigned short NodeTypeCode;
    unsigned short NodeIsInZone;
    DWORD PagesToWrite;
    DWORD DirtyPages;
    DWORD Reserved;
    struct _LIST_ENTRY BitmapRanges;
    __int64 ResumeWritePage;
    struct _BITMAP_RANGE BitmapRange1;
    struct _BITMAP_RANGE BitmapRange2;
    struct _BITMAP_RANGE BitmapRange3;
};

struct _MBCB*;

struct _CACHE_MANAGER_CALLBACKS
{
    INVALID_TYPE* AcquireForLazyWrite;
    INVALID_TYPE* ReleaseFromLazyWrite;
    INVALID_TYPE* AcquireForReadAhead;
    INVALID_TYPE* ReleaseFromReadAhead;
};

struct _CACHE_MANAGER_CALLBACKS*;

INVALID_TYPE*;

struct _CACHE_UNINITIALIZE_EVENT
{
    struct _CACHE_UNINITIALIZE_EVENT* Next;
    struct _KEVENT Event;
};

struct _CACHE_UNINITIALIZE_EVENT*;

struct _PRIVATE_CACHE_MAP
{
    unsigned short NodeTypeCode;
    unsigned short NodeByteSize;
    struct _FILE_OBJECT* FileObject;
    struct _LARGE_INTEGER FileOffset1;
    struct _LARGE_INTEGER BeyondLastByte1;
    struct _LARGE_INTEGER FileOffset2;
    struct _LARGE_INTEGER BeyondLastByte2;
    struct _LARGE_INTEGER ReadAheadOffset[2];
    DWORD ReadAheadLength[2];
    DWORD ReadAheadSpinLock;
    DWORD ReadAheadMask;
    struct _LIST_ENTRY PrivateLinks;
    BYTE ReadAheadActive;
    BYTE ReadAheadEnabled;
};

struct UnnamedStruct_478990
{
    unsigned short NodeTypeCode;
    unsigned short NodeByteSize;
    DWORD OpenCount;
    struct _LARGE_INTEGER FileSize;
    struct _LIST_ENTRY BcbList;
    struct _LARGE_INTEGER SectionSize;
    struct _LARGE_INTEGER ValidDataLength;
    struct _LARGE_INTEGER ValidDataGoal;
    struct _VACB* InitialVacbs[4];
    struct _VACB** Vacbs;
    struct _FILE_OBJECT* FileObject;
    struct _VACB* ActiveVacb;
    DWORD ActivePage;
    void* NeedToZero;
    DWORD NeedToZeroPage;
    DWORD ActiveVacbSpinLock;
    DWORD VacbActiveCount;
    struct _LIST_ENTRY SharedCacheMapLinks;
    DWORD Flags;
    struct _MBCB* Mbcb;
    DWORD DirtyPages;
    void* Section;
    long Status;
    struct _KEVENT* CreateEvent;
    struct _KEVENT* WaitOnActiveCount;
    DWORD PagesToWrite;
    __int64 BeyondLastFlush;
    struct _CACHE_MANAGER_CALLBACKS* Callbacks;
    void* LazyWriteContext;
    struct _LIST_ENTRY PrivateList;
    void* LogHandle;
    INVALID_TYPE* FlushToLsnRoutine;
    DWORD DirtyPageThreshold;
    DWORD LazyWritePassCount;
    struct _CACHE_UNINITIALIZE_EVENT* UninitializeEvent;
    struct _VACB* NeedToZeroVacb;
    DWORD BcbSpinLock;
    struct _KEVENT* LocalEvent;
    struct _KEVENT Event;
    struct _PRIVATE_CACHE_MAP PrivateCacheMap;
};

struct _SHARED_CACHE_MAP
{
    unsigned short NodeTypeCode;
    unsigned short NodeByteSize;
    DWORD OpenCount;
    struct _LARGE_INTEGER FileSize;
    struct _LIST_ENTRY BcbList;
    struct _LARGE_INTEGER SectionSize;
    struct _LARGE_INTEGER ValidDataLength;
    struct _LARGE_INTEGER ValidDataGoal;
    struct _VACB* InitialVacbs[4];
    struct _VACB** Vacbs;
    struct _FILE_OBJECT* FileObject;
    struct _VACB* ActiveVacb;
    DWORD ActivePage;
    void* NeedToZero;
    DWORD NeedToZeroPage;
    DWORD ActiveVacbSpinLock;
    DWORD VacbActiveCount;
    struct _LIST_ENTRY SharedCacheMapLinks;
    DWORD Flags;
    struct _MBCB* Mbcb;
    DWORD DirtyPages;
    void* Section;
    long Status;
    struct _KEVENT* CreateEvent;
    struct _KEVENT* WaitOnActiveCount;
    DWORD PagesToWrite;
    __int64 BeyondLastFlush;
    struct _CACHE_MANAGER_CALLBACKS* Callbacks;
    void* LazyWriteContext;
    struct _LIST_ENTRY PrivateList;
    void* LogHandle;
    INVALID_TYPE* FlushToLsnRoutine;
    DWORD DirtyPageThreshold;
    DWORD LazyWritePassCount;
    struct _CACHE_UNINITIALIZE_EVENT* UninitializeEvent;
    struct _VACB* NeedToZeroVacb;
    DWORD BcbSpinLock;
    struct _KEVENT* LocalEvent;
    struct _KEVENT Event;
    struct _PRIVATE_CACHE_MAP PrivateCacheMap;
};

DWORD;

struct UnnamedBitfield_479FE0
{
};

struct UnnamedBitfield_47A028
{
     (null);
};

struct UnnamedBitfield_47A070
{
     (null);
};

struct UnnamedBitfield_47A0B8
{
     (null);
};

struct UnnamedBitfield_47A100
{
     (null);
};

struct UnnamedBitfield_47A148
{
     (null);
};

struct UnnamedBitfield_47A190
{
     (null);
};

struct UnnamedBitfield_47A1D8
{
     (null);
};

struct UnnamedBitfield_47A220
{
     (null);
};

struct UnnamedBitfield_47A268
{
     (null);
};

struct UnnamedBitfield_47A2B0
{
     (null);
};

struct UnnamedBitfield_47A2F8
{
     (null);
};

struct UnnamedBitfield_47A340
{
     (null);
};

struct UnnamedBitfield_47A388
{
     (null);
};

struct UnnamedBitfield_47AC08
{
     (null);
};

struct UnnamedBitfield_47AC50
{
     (null);
};

struct UnnamedBitfield_47AC98
{
     (null);
};

struct UnnamedBitfield_47ACE0
{
     (null);
};

int;

struct UnnamedStruct_47AD70
{
    WORD Size;
    WORD Version;
    DWORD DeviceD1;
    DWORD DeviceD2;
    DWORD LockSupported;
    DWORD EjectSupported;
    DWORD Removable;
    DWORD DockDevice;
    DWORD UniqueID;
    DWORD SilentInstall;
    DWORD RawDeviceOK;
    DWORD SurpriseRemovalOK;
    DWORD WakeFromD0;
    DWORD WakeFromD1;
    DWORD WakeFromD2;
    DWORD WakeFromD3;
    DWORD HardwareDisabled;
    DWORD NonDynamic;
    DWORD WarmEjectSupported;
    DWORD Reserved;
    DWORD Address;
    DWORD UINumber;
    int DeviceState[7];
    int SystemWake;
    int DeviceWake;
    DWORD D1Latency;
    DWORD D2Latency;
    DWORD D3Latency;
};

struct _DEVICE_CAPABILITIES
{
    WORD Size;
    WORD Version;
    DWORD DeviceD1;
    DWORD DeviceD2;
    DWORD LockSupported;
    DWORD EjectSupported;
    DWORD Removable;
    DWORD DockDevice;
    DWORD UniqueID;
    DWORD SilentInstall;
    DWORD RawDeviceOK;
    DWORD SurpriseRemovalOK;
    DWORD WakeFromD0;
    DWORD WakeFromD1;
    DWORD WakeFromD2;
    DWORD WakeFromD3;
    DWORD HardwareDisabled;
    DWORD NonDynamic;
    DWORD WarmEjectSupported;
    DWORD Reserved;
    DWORD Address;
    DWORD UINumber;
    int DeviceState[7];
    int SystemWake;
    int DeviceWake;
    DWORD D1Latency;
    DWORD D2Latency;
    DWORD D3Latency;
};

struct UnnamedStruct_47B878
{
    WORD Pad;
    WORD Limit;
    DWORD Base;
};

struct _DESCRIPTOR
{
    WORD Pad;
    WORD Limit;
    DWORD Base;
};

struct UnnamedBitfield_47BAC0
{
    WORD Pad;
    WORD Limit;
    DWORD Base;
};

struct UnnamedBitfield_47BB08
{
     (null);
};

struct UnnamedBitfield_47BB50
{
     (null);
};

struct UnnamedBitfield_47BB98
{
     (null);
};

struct UnnamedBitfield_47BBE0
{
     (null);
};

struct UnnamedBitfield_47BC28
{
     (null);
};

struct UnnamedBitfield_47BC70
{
     (null);
};

struct UnnamedBitfield_47BCB8
{
     (null);
};

struct UnnamedStru