📄 kpage.h
字号:
// Copyright (c) 1999-2000 Microsoft Corporation. All rights reserved.// Layout of last page of storage .struct KPAGE_BASEKData: .space 2016 // 2K kernel stackKStack: .space 8*4 // 0x7e0: arg space + tempslpvTls: .space 4 // 0x800: current TLS pointerSystemHandles: .space 4*32 // 0x804ReschedFlag: .space 1 // 0x884: != 0 if NextThread must be calledKNest: .space 1 // == 1 iff not in kernel .space 1 // alignment paddingBPowerOff: .space 1 // 0x887: power off flagSaveT0: .space 4 // 0x888:SaveK1: .space 4 // 0x88c:BasePSR: .space 4 // 0x890: base value for PSR .space 4 // 0x894 (CurMSec) # of milliseconds since boot .space 4 // 0x898: (DiffMSec) # of milliseconds since TimerCallBackCurAKey: .space 4 // 0x89c: current thread's access keyDbgEntry: .space 4 // 0x8a0: kernel debugger entry pointFalseInt: .space 4 // 0x8a4: false interrupt entryISRTable: .space 4*6 // 0x8a8: first level intr service routinesSectionTable: .space 4*64 // 0x8c0: virtual memory section arrayIntrEvents: .space SYSINTR_MAX_DEVICES*4 // 0x9c0: interrupt event pointersIntrData: .space SYSINTR_MAX_DEVICES*4 // 0xA40: interrupt handler data pointersCurThdPtr: .space 4 // 0xAc0: ptr to current THREAD structureCurPrcPtr: .space 4 // 0xAc4: ptr to current PROCESS structureHandleBase: .space 4 // 0xAc8: base address of HDATA array.PtrAPIRet: .space 4 // 0xacc: api call return for kernel modedwKCRes: .space 4 // 0xad0bPadding: .space 36 // 0xad4g_CurFPUOwner: .space 4 // 0xaf8 .space 0xb00-0xafc // paddingKInfoTable: .space 4*16 // 0xB00: misc. kernel infoPendEvents: .space 4 // 0xB40: bitmask of pending events .space 4*27 // 0xB44: more misc. kernel infoSaveK0: .space 4 // 0xBB0KData_size:; // 0xBB4 end of kernel data page#define KPAGE_USER 0x00005000 // KPage address in user spacehWin32 = SystemHandleshCurThread = SystemHandles+4hCurProc = SystemHandles+8⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -