acpi.h

一个 windows 内核级别的调试器

	_LIST_ENTRY HandleTableList;
	_EX_PUSH_LOCK HandleContentionEvent;
	_HANDLE_TRACE_DEBUG_INFO* DebugInfo;
	int ExtraInfoPages;
	DWORD FirstFree;
	DWORD LastFree;
	DWORD NextHandleNeedingPool;
	int HandleCount;
	DWORD Flags;
	DWORD StrictFIFO:1; 	// bit offset: 40, len=1
};

struct _RSDT_32 {
	_DESCRIPTION_HEADER Header;
	DWORD Tables[1];
};

struct _RSDT_32 {
	_DESCRIPTION_HEADER Header;
	DWORD Tables[1];
};

struct _MMSUPPORT_FLAGS {
	DWORD SessionSpace:1; 	// bit offset: 00, len=1
	DWORD BeingTrimmed:1; 	// bit offset: 01, len=1
	DWORD SessionLeader:1; 	// bit offset: 02, len=1
	DWORD TrimHard:1; 	// bit offset: 03, len=1
	DWORD WorkingSetHard:1; 	// bit offset: 04, len=1
	DWORD AddressSpaceBeingDeleted:1; 	// bit offset: 05, len=1
	DWORD Available:10; 	// bit offset: 06, len=10
	DWORD AllowWorkingSetAdjustment:8; 	// bit offset: 10, len=8
	DWORD MemoryPriority:8; 	// bit offset: 18, len=8
};

struct _MMWSL {
};

struct _MMSUPPORT {
	_LARGE_INTEGER LastTrimTime;
	_MMSUPPORT_FLAGS Flags;
	DWORD PageFaultCount;
	DWORD PeakWorkingSetSize;
	DWORD WorkingSetSize;
	DWORD MinimumWorkingSetSize;
	DWORD MaximumWorkingSetSize;
	_MMWSL* VmWorkingSetList;
	_LIST_ENTRY WorkingSetExpansionLinks;
	DWORD Claim;
	DWORD NextEstimationSlot;
	DWORD NextAgingSlot;
	DWORD EstimatedAvailable;
	DWORD GrowthSinceLastEstimate;
};

struct _EPROCESS_QUOTA_ENTRY {
	DWORD Usage;
	DWORD Limit;
	DWORD Peak;
	DWORD Return;
};

struct _EPROCESS_QUOTA_BLOCK {
	_EPROCESS_QUOTA_ENTRY QuotaEntry[3];
	_LIST_ENTRY QuotaList;
	DWORD ReferenceCount;
	DWORD ProcessCount;
};

struct _UNICODE_STRING {
	DWORD Length;
	DWORD MaximumLength;
	DWORD* Buffer;
};

struct _UNICODE_STRING {
	DWORD Length;
	DWORD MaximumLength;
	DWORD* Buffer;
};

struct _PS_JOB_TOKEN_FILTER {
	DWORD CapturedSidCount;
	_SID_AND_ATTRIBUTES* CapturedSids;
	DWORD CapturedSidsLength;
	DWORD CapturedGroupCount;
	_SID_AND_ATTRIBUTES* CapturedGroups;
	DWORD CapturedGroupsLength;
	DWORD CapturedPrivilegeCount;
	_LUID_AND_ATTRIBUTES* CapturedPrivileges;
	DWORD CapturedPrivilegesLength;
};

struct _IO_COUNTERS {
	DWORD ReadOperationCount;
	DWORD WriteOperationCount;
	DWORD OtherOperationCount;
	DWORD ReadTransferCount;
	DWORD WriteTransferCount;
	DWORD OtherTransferCount;
};

struct _EJOB {
	_KEVENT Event;
	_LIST_ENTRY JobLinks;
	_LIST_ENTRY ProcessListHead;
	_ERESOURCE JobLock;
	_LARGE_INTEGER TotalUserTime;
	_LARGE_INTEGER TotalKernelTime;
	_LARGE_INTEGER ThisPeriodTotalUserTime;
	_LARGE_INTEGER ThisPeriodTotalKernelTime;
	DWORD TotalPageFaultCount;
	DWORD TotalProcesses;
	DWORD ActiveProcesses;
	DWORD TotalTerminatedProcesses;
	_LARGE_INTEGER PerProcessUserTimeLimit;
	_LARGE_INTEGER PerJobUserTimeLimit;
	DWORD LimitFlags;
	DWORD MinimumWorkingSetSize;
	DWORD MaximumWorkingSetSize;
	DWORD ActiveProcessLimit;
	DWORD Affinity;
	DWORD PriorityClass;
	DWORD UIRestrictionsClass;
	DWORD SecurityLimitFlags;
	void* Token;
	_PS_JOB_TOKEN_FILTER* Filter;
	DWORD EndOfJobTimeAction;
	void* CompletionPort;
	void* CompletionKey;
	DWORD SessionId;
	DWORD SchedulingClass;
	DWORD ReadOperationCount;
	DWORD WriteOperationCount;
	DWORD OtherOperationCount;
	DWORD ReadTransferCount;
	DWORD WriteTransferCount;
	DWORD OtherTransferCount;
	_IO_COUNTERS IoInfo;
	DWORD ProcessMemoryLimit;
	DWORD JobMemoryLimit;
	DWORD PeakProcessMemoryUsed;
	DWORD PeakJobMemoryUsed;
	DWORD CurrentJobMemoryUsed;
	_FAST_MUTEX MemoryLimitsLock;
	_LIST_ENTRY JobSetLinks;
	DWORD MemberLevel;
	DWORD JobFlags;
};

struct _FAST_MUTEX {
	int Count;
	_KTHREAD* Owner;
	DWORD Contention;
	_KEVENT Event;
	DWORD OldIrql;
};

struct _IMAGE_FILE_HEADER {
	DWORD Machine;
	DWORD NumberOfSections;
	DWORD TimeDateStamp;
	DWORD PointerToSymbolTable;
	DWORD NumberOfSymbols;
	DWORD SizeOfOptionalHeader;
	DWORD Characteristics;
};

struct _RSDTINFORMATION {
	DWORD NumElements;
	RSDTELEMENT Tables[1];
};

struct RSDTELEMENT {
	DWORD Flags;
	void* Handle;
	void* Address;
};

struct _RSDTINFORMATION {
	DWORD NumElements;
	RSDTELEMENT Tables[1];
};

struct _List {
	_List* plistPrev;
	_List* plistNext;
};

struct _NSObj {
	_List list;
	_NSObj* pnsParent;
	_NSObj* pnsFirstChild;
	DWORD dwNameSeg;
	void* hOwner;
	_NSObj* pnsOwnedNext;
	_ObjData ObjData;
	void* Context;
	DWORD dwRefCount;
};

struct _KSPIN_LOCK_QUEUE {
	_KSPIN_LOCK_QUEUE* Next;
	DWORD* Lock;
};

struct _PP_LOOKASIDE_LIST {
	_GENERAL_LOOKASIDE* P;
	_GENERAL_LOOKASIDE* L;
};

struct _PEB_LDR_DATA {
	DWORD Length;
	DWORD Initialized;
	void* SsHandle;
	_LIST_ENTRY InLoadOrderModuleList;
	_LIST_ENTRY InMemoryOrderModuleList;
	_LIST_ENTRY InInitializationOrderModuleList;
	void* EntryInProgress;
};

struct _RTL_USER_PROCESS_PARAMETERS {
	DWORD MaximumLength;
	DWORD Length;
	DWORD Flags;
	DWORD DebugFlags;
	void* ConsoleHandle;
	DWORD ConsoleFlags;
	void* StandardInput;
	void* StandardOutput;
	void* StandardError;
	_CURDIR CurrentDirectory;
	_UNICODE_STRING DllPath;
	_UNICODE_STRING ImagePathName;
	_UNICODE_STRING CommandLine;
	void* Environment;
	DWORD StartingX;
	DWORD StartingY;
	DWORD CountX;
	DWORD CountY;
	DWORD CountCharsX;
	DWORD CountCharsY;
	DWORD FillAttribute;
	DWORD WindowFlags;
	DWORD ShowWindowFlags;
	_UNICODE_STRING WindowTitle;
	_UNICODE_STRING DesktopInfo;
	_UNICODE_STRING ShellInfo;
	_UNICODE_STRING RuntimeData;
	_RTL_DRIVE_LETTER_CURDIR CurrentDirectores[32];
};

struct _RTL_CRITICAL_SECTION {
};

struct _PEB_FREE_BLOCK {
	_PEB_FREE_BLOCK* Next;
	DWORD Size;
};

struct _PEB {
	DWORD InheritedAddressSpace;
	DWORD ReadImageFileExecOptions;
	DWORD BeingDebugged;
	DWORD SpareBool;
	void* Mutant;
	void* ImageBaseAddress;
	_PEB_LDR_DATA* Ldr;
	_RTL_USER_PROCESS_PARAMETERS* ProcessParameters;
	void* SubSystemData;
	void* ProcessHeap;
	_RTL_CRITICAL_SECTION* FastPebLock;
	void* FastPebLockRoutine;
	void* FastPebUnlockRoutine;
	DWORD EnvironmentUpdateCount;
	void* KernelCallbackTable;
	DWORD SystemReserved[1];
	DWORD ExecuteOptions:2; 	// bit offset: 34, len=2
	DWORD SpareBits:30; 	// bit offset: 34, len=30
	_PEB_FREE_BLOCK* FreeList;
	DWORD TlsExpansionCounter;
	void* TlsBitmap;
	DWORD TlsBitmapBits[2];
	void* ReadOnlySharedMemoryBase;
	void* ReadOnlySharedMemoryHeap;
	void** ReadOnlyStaticServerData;
	void* AnsiCodePageData;
	void* OemCodePageData;
	void* UnicodeCaseTableData;
	DWORD NumberOfProcessors;
	DWORD NtGlobalFlag;
	_LARGE_INTEGER CriticalSectionTimeout;
	DWORD HeapSegmentReserve;
	DWORD HeapSegmentCommit;
	DWORD HeapDeCommitTotalFreeThreshold;
	DWORD HeapDeCommitFreeBlockThreshold;
	DWORD NumberOfHeaps;
	DWORD MaximumNumberOfHeaps;
	void** ProcessHeaps;
	void* GdiSharedHandleTable;
	void* ProcessStarterHelper;
	DWORD GdiDCAttributeList;
	void* LoaderLock;
	DWORD OSMajorVersion;
	DWORD OSMinorVersion;
	DWORD OSBuildNumber;
	DWORD OSCSDVersion;
	DWORD OSPlatformId;
	DWORD ImageSubsystem;
	DWORD ImageSubsystemMajorVersion;
	DWORD ImageSubsystemMinorVersion;
	DWORD ImageProcessAffinityMask;
	DWORD GdiHandleBuffer[34];
	void (*PostProcessInitRoutine)();
	void* TlsExpansionBitmap;
	DWORD TlsExpansionBitmapBits[32];
	DWORD SessionId;
	_ULARGE_INTEGER AppCompatFlags;
	_ULARGE_INTEGER AppCompatFlagsUser;
	void* pShimData;
	void* AppCompatInfo;
	_UNICODE_STRING CSDVersion;
	void* ActivationContextData;
	void* ProcessAssemblyStorageMap;
	void* SystemDefaultActivationContextData;
	void* SystemAssemblyStorageMap;
	DWORD MinimumStackCommit;
};

struct _BuffFieldObj {
	_FieldDesc FieldDesc;
	DWORD* pbDataBuff;
	DWORD dwBuffLen;
};

struct _FieldDesc {
	DWORD dwByteOffset;
	DWORD dwStartBitPos;
	DWORD dwNumBits;
	DWORD dwFieldFlags;
};

struct _BuffFieldObj {
	_FieldDesc FieldDesc;
	DWORD* pbDataBuff;
	DWORD dwBuffLen;
};

struct _FieldDesc {
	DWORD dwByteOffset;
	DWORD dwStartBitPos;
	DWORD dwNumBits;
	DWORD dwFieldFlags;
};

struct _MethodObj {
	_MutexObj Mutex;
	DWORD bMethodFlags;
	DWORD abCodeBuff[1];
};

struct _MutexObj {
	DWORD dwSyncLevel;
	DWORD dwcOwned;
	void* hOwner;
	_List* plistWaiters;
};

struct _MethodObj {
	_MutexObj Mutex;
	DWORD bMethodFlags;
	DWORD abCodeBuff[1];
};

enum _SECURITY_IMPERSONATION_LEVEL {
	SecurityAnonymous,
	SecurityIdentification,
	SecurityImpersonation,
	SecurityDelegation,
};

struct _PS_IMPERSONATION_INFORMATION {
	void* Token;
	DWORD CopyOnOpen;
	DWORD EffectiveOnly;
	enum _SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
};

struct _EPROCESS_QUOTA_ENTRY {
	DWORD Usage;
	DWORD Limit;
	DWORD Peak;
	DWORD Return;
};

struct _FNSAVE_FORMAT {
	DWORD ControlWord;
	DWORD StatusWord;
	DWORD TagWord;
	DWORD ErrorOffset;
	DWORD ErrorSelector;
	DWORD DataOffset;
	DWORD DataSelector;
	DWORD RegisterArea[80];
};

struct _FXSAVE_FORMAT {
	DWORD ControlWord;
	DWORD StatusWord;
	DWORD TagWord;
	DWORD ErrorOpcode;
	DWORD ErrorOffset;
	DWORD ErrorSelector;
	DWORD DataOffset;
	DWORD DataSelector;
	DWORD MXCsr;
	DWORD MXCsrMask;
	DWORD RegisterArea[128];
	DWORD Reserved3[128];
	DWORD Reserved4[224];
	DWORD Align16Byte[8];
};

struct __unnamed {
	_FNSAVE_FORMAT FnArea;
	_FXSAVE_FORMAT FxArea;
};

struct _FX_SAVE_AREA {
	__unnamed U;
	DWORD NpxSavedCpu;
	DWORD Cr0NpxState;
};

struct PROCESSOR_IDLE_TIMES {
	DWORD StartTime;
	DWORD EndTime;
	DWORD IdleHandlerReserved[4];
};

struct _KTIMER {
	_DISPATCHER_HEADER Header;
	_ULARGE_INTEGER DueTime;
	_LIST_ENTRY TimerListEntry;
	_KDPC* Dpc;
	int Period;
};

struct _KDPC {
	int Type;
	DWORD Number;
	DWORD Importance;
	_LIST_ENTRY DpcListEntry;
	void (*DeferredRoutine)(_KDPC*, void*, void*, void*);
	void* DeferredContext;
	void* SystemArgument1;
	void* SystemArgument2;
	DWORD* Lock;
};

struct PROCESSOR_PERF_STATE {
	DWORD PercentFrequency;
	DWORD MinCapacity;
	DWORD Power;
	DWORD IncreaseLevel;
	DWORD DecreaseLevel;
	DWORD Flags;
	DWORD IncreaseTime;
	DWORD DecreaseTime;
	DWORD IncreaseCount;
	DWORD DecreaseCount;
	DWORD PerformanceTime;
};

struct _PROCESSOR_POWER_STATE {
	void (*IdleFunction)(_PROCESSOR_POWER_STATE*);
	DWORD Idle0KernelTimeLimit;
	DWORD Idle0LastTime;
	void* IdleHandlers;
	void* IdleState;
	DWORD IdleHandlersCount;
	DWORD LastCheck;
	PROCESSOR_IDLE_TIMES IdleTimes;
	DWORD IdleTime1;
	DWORD PromotionCheck;
	DWORD IdleTime2;
	DWORD CurrentThrottle;
	DWORD ThermalThrottleLimit;
	DWORD CurrentThrottleIndex;
	DWORD ThermalThrottleIndex;
	DWORD PerfSystemTime;
	DWORD PerfIdleTime;
	DWORD DebugDelta;
	DWORD DebugCount;
	DWORD LastSysTime;
	DWORD TotalIdleStateTime[3];
	DWORD TotalIdleTransitions[3];
	DWORD PreviousC3StateTime;
	DWORD KneeThrottleIndex;
	DWORD ThrottleLimitIndex;
	DWORD PerfStatesCount;
	DWORD ProcessorMinThrottle;
	DWORD ProcessorMaxThrottle;
	DWORD LastBusyPercentage;
	DWORD LastC3Percentage;
	DWORD LastAdjustedBusyPercentage;
	DWORD PromotionCount;
	DWORD DemotionCount;
	DWORD ErrorCount;
	DWORD RetryCount;
	DWORD Flags;
	_LARGE_INTEGER PerfCounterFrequency;
	DWORD PerfTickCount;
	_KTIMER PerfTimer;
	_KDPC PerfDpc;
	PROCESSOR_PERF_STATE* PerfStates;
	int (*PerfSetThrottle)(DWORD);
	DWORD Spare1[2];
};

struct _IO_COUNTERS {
	DWORD ReadOperationCount;
	DWORD WriteOperationCount;
	DWORD OtherOperationCount;
	DWORD ReadTransferCount;
	DWORD WriteTransferCount;
	DWORD OtherTransferCount;
};

struct _DISPATCHER_HEADER {
	DWORD Type;
	DWORD Absolute;
	DWORD Size;
	DWORD Inserted;
	int SignalState;
	_LIST_ENTRY WaitListHead;
};

struct _KAPC_STATE {
	_LIST_ENTRY ApcListHead[2];
	_KPROCESS* Process;
	DWORD KernelApcInProgress;
	DWORD KernelApcPending;
	DWORD UserApcPending;
};

struct _KWAIT_BLOCK {
	_LIST_ENTRY WaitListEntry;
	_KTHREAD* Thread;
	void* Object;
	_KWAIT_BLOCK* NextWaitBlock;
	DWORD WaitKey;
	DWORD WaitType;
};

struct _KQUEUE {
	_DISPATCHER_HEADER Header;
	_LIST_ENTRY EntryListHead;
	DWORD CurrentCount;
	DWORD MaximumCount;
	_LIST_ENTRY ThreadListHead;
};