1 2include kxamd64.inc 3 4; 5; Pointer size in bytes 6; 7 8SizeofPointer equ 00008H 9 10; 11; Process State Enumerated Type Values 12; 13 14ProcessInMemory equ 00000H 15ProcessOutOfMemory equ 00001H 16ProcessInTransition equ 00002H 17 18; 19; Thread State Enumerated Type Values 20; 21 22Initialized equ 00000H 23Ready equ 00001H 24Running equ 00002H 25Standby equ 00003H 26Terminated equ 00004H 27Waiting equ 00005H 28 29; 30; Processor Mode Definitions 31; 32 33KernelMode equ 00000H 34UserMode equ 00001H 35 36; 37; Wait Reason and Wait Type Enumerated Type Values 38; 39 40WrExecutive equ 00000H 41WrDispatchInt equ 0001FH 42WaitAny equ 00001H 43WaitAll equ 00000H 44 45; 46; Apc State Structure Offset Definitions 47; 48 49AsApcListHead equ 00000H 50AsProcess equ 00020H 51AsKernelApcPending equ 00029H 52AsUserApcPendingAll equ 0002AH 53KAPC_STATE_ANY_USER_APC_PENDING_MASK equ 00003H 54 55 56; 57; Apc Record Structure Offset Definitions 58; 59 60ArNormalRoutine equ 00000H 61ArNormalContext equ 00008H 62ArSystemArgument1 equ 00010H 63ArSystemArgument2 equ 00018H 64ArFlags equ 00020H 65KAPC_RECORD_LENGTH equ 00030H 66KAPC_RECORD_FLAGS_CHECK_ALERT equ 00001H 67 68 69; 70; Apc Callback Data Structure Offset Definitions 71; 72 73AcdContextRecord equ 00008H 74KAPC_CALLBACK_DATA_LENGTH equ 00020H 75 76; 77; Bug Check Code Definitions 78; 79 80APC_INDEX_MISMATCH equ 00001H 81KERNEL_APC_PENDING_DURING_EXIT equ 00020H 82ATTEMPTED_SWITCH_FROM_DPC equ 000B8H 83DATA_BUS_ERROR equ 0002EH 84DATA_COHERENCY_EXCEPTION equ 00055H 85HAL1_INITIALIZATION_FAILED equ 00061H 86INSTRUCTION_BUS_ERROR equ 0002FH 87INSTRUCTION_COHERENCY_EXCEPTION equ 00056H 88INTERRUPT_EXCEPTION_NOT_HANDLED equ 0003DH 89INTERRUPT_UNWIND_ATTEMPTED equ 0003CH 90INVALID_AFFINITY_SET equ 00003H 91INVALID_DATA_ACCESS_TRAP equ 00004H 92IRQL_GT_ZERO_AT_SYSTEM_SERVICE equ 0004AH 93IRQL_NOT_LESS_OR_EQUAL equ 0000AH 94KMODE_EXCEPTION_NOT_HANDLED equ 0001EH 95NMI_HARDWARE_FAILURE equ 00080H 96NO_USER_MODE_CONTEXT equ 0000EH 97PAGE_FAULT_WITH_INTERRUPTS_OFF equ 00049H 98PANIC_STACK_SWITCH equ 0002BH 99SPIN_LOCK_INIT_FAILURE equ 00081H 100SYSTEM_EXIT_OWNED_MUTEX equ 00039H 101SYSTEM_SERVICE_EXCEPTION equ 0003BH 102SYSTEM_UNWIND_PREVIOUS_USER equ 0003AH 103TRAP_CAUSE_UNKNOWN equ 00012H 104UNEXPECTED_KERNEL_MODE_TRAP equ 0007FH 105HARDWARE_INTERRUPT_STORM equ 000F2H 106RECURSIVE_MACHINE_CHECK equ 000FBH 107RECURSIVE_NMI equ 00111H 108KERNEL_SECURITY_CHECK_FAILURE equ 00139H 109UNSUPPORTED_INSTRUCTION_MODE equ 00151H 110BUGCHECK_CONTEXT_MODIFIER equ 080000000H 111INVALID_CALLBACK_STACK_ADDRESS equ 001CDH 112INVALID_KERNEL_STACK_ADDRESS equ 001CEH 113 114; 115; Breakpoint type definitions 116; 117 118DBG_STATUS_CONTROL_C equ 00001H 119STATUS_ASSERTION_FAILURE equ 0C0000420H 120 121; 122; Client Id Structure Offset Definitions 123; 124 125CidUniqueProcess equ 00000H 126CidUniqueThread equ 00008H 127 128; 129; Exception Record Offset, Flag, and Enumerated Type Definitions 130; 131 132EXCEPTION_NONCONTINUABLE equ 00001H 133EXCEPTION_UNWINDING equ 00002H 134EXCEPTION_EXIT_UNWIND equ 00004H 135EXCEPTION_STACK_INVALID equ 00008H 136EXCEPTION_NESTED_CALL equ 00010H 137EXCEPTION_TARGET_UNWIND equ 00020H 138EXCEPTION_COLLIDED_UNWIND equ 00040H 139EXCEPTION_UNWIND equ 00066H 140EXCEPTION_EXECUTE_HANDLER equ 00001H 141EXCEPTION_CONTINUE_SEARCH equ 00000H 142EXCEPTION_CONTINUE_EXECUTION equ 0FFFFFFFFH 143 144ExceptionContinueExecution equ 00000H 145ExceptionContinueSearch equ 00001H 146ExceptionNestedException equ 00002H 147ExceptionCollidedUnwind equ 00003H 148 149ErExceptionCode equ 00000H 150ErExceptionFlags equ 00004H 151ErExceptionRecord equ 00008H 152ErExceptionAddress equ 00010H 153ErNumberParameters equ 00018H 154ErExceptionInformation equ 00020H 155ExceptionRecordLength equ 000A0H 156 157; 158; Fast Mutex Structure Offset Definitions 159; 160 161FmCount equ 00000H 162FmOwner equ 00008H 163FmContention equ 00010H 164FmOldIrql equ 00030H 165 166; 167; Interrupt Priority Request Level Definitions 168; 169 170PASSIVE_LEVEL equ 00000H 171APC_LEVEL equ 00001H 172DISPATCH_LEVEL equ 00002H 173CLOCK_LEVEL equ 0000DH 174IPI_LEVEL equ 0000EH 175POWER_LEVEL equ 0000EH 176PROFILE_LEVEL equ 0000FH 177HIGH_LEVEL equ 0000FH 178ifdef NT_UP 179SYNCH_LEVEL equ 00002H 180else 181SYNCH_LEVEL equ 0000CH 182endif 183 184; 185; Large Integer Structure Offset Definitions 186; 187 188LiLowPart equ 00000H 189LiHighPart equ 00004H 190 191; 192; List Entry Structure Offset Definitions 193; 194 195LsFlink equ 00000H 196LsBlink equ 00008H 197 198; 199; String Structure Offset Definitions 200; 201 202StrLength equ 00000H 203StrMaximumLength equ 00002H 204StrBuffer equ 00008H 205 206; 207; System DLL Init Block Structure Offset Definitions 208; 209 210IbCfgBitMap equ 000B8H 211IbWow64CfgBitMap equ 000C8H 212IbMitigationOptionsMap equ 000A0H 213PS_MITIGATION_OPTION_BITS_PER_OPTION equ 00004H 214PS_MITIGATION_OPTION_ALWAYS_ON equ 00001H 215PS_MITIGATION_OPTION_ALWAYS_OFF equ 00002H 216PS_MITIGATION_OPTION_MASK equ 00003H 217PS_MITIGATION_OPTION_RETURN_FLOW_GUARD equ 00010H 218PS_MITIGATION_OPTION_RESTRICT_SET_THREAD_CONTEXT equ 00013H 219PS_MITIGATION_OPTION_CET_USER_SHADOW_STACKS equ 0001FH 220PsneKiUserCallbackDispatcher equ 00030H 221 222; 223; User Shared Data Structure Offset Definitions 224; 225 226UsTickCountMultiplier equ 00004H 227UsInterruptTime equ 00008H 228UsSystemTime equ 00014H 229UsTimeZoneBias equ 00020H 230UsImageNumberLow equ 0002CH 231UsImageNumberHigh equ 0002EH 232UsNtSystemRoot equ 00030H 233UsMaxStackTraceDepth equ 00238H 234UsCryptoExponent equ 0023CH 235UsTimeZoneId equ 00240H 236UsLargePageMinimum equ 00244H 237UsNtBuildNumber equ 00260H 238UsNtProductType equ 00264H 239UsProductTypeIsValid equ 00268H 240UsNtMajorVersion equ 0026CH 241UsNtMinorVersion equ 00270H 242UsProcessorFeatures equ 00274H 243UsReserved1 equ 002B4H 244UsReserved3 equ 002B8H 245UsTimeSlip equ 002BCH 246UsAlternativeArchitecture equ 002C0H 247UsSystemExpirationDate equ 002C8H 248UsSuiteMask equ 002D0H 249UsKdDebuggerEnabled equ 002D4H 250UsActiveConsoleId equ 002D8H 251UsDismountCount equ 002DCH 252UsComPlusPackage equ 002E0H 253UsLastSystemRITEventTickCount equ 002E4H 254UsNumberOfPhysicalPages equ 002E8H 255UsSafeBootMode equ 002ECH 256UsTestRetInstruction equ 002F8H 257UsSystemCallPad equ 00310H 258UsTickCount equ 00320H 259UsTickCountQuad equ 00320H 260UsXState equ 003D8H 261 262; 263; Time Structure Offset Definitions 264; 265 266TmLowTime equ 00000H 267TmHighTime equ 00004H 268 269; 270; Thread Switch Counter Offset Definitions 271; 272 273TwFindAny equ 00000H 274TwFindIdeal equ 00004H 275TwFindLast equ 00008H 276TwIdleAny equ 0000CH 277TwIdleCurrent equ 00010H 278TwIdleIdeal equ 00014H 279TwIdleLast equ 00018H 280TwPreemptAny equ 0001CH 281TwPreemptCurrent equ 00020H 282TwPreemptLast equ 00024H 283TwSwitchToIdle equ 00028H 284 285; 286; Status Code Definitions 287; 288 289STATUS_ACCESS_VIOLATION equ 0C0000005H 290STATUS_ARRAY_BOUNDS_EXCEEDED equ 0C000008CH 291STATUS_BAD_COMPRESSION_BUFFER equ 0C0000242H 292STATUS_BREAKPOINT equ 080000003H 293STATUS_CALLBACK_POP_STACK equ 0C0000423H 294STATUS_DATATYPE_MISALIGNMENT equ 080000002H 295STATUS_FLOAT_DENORMAL_OPERAND equ 0C000008DH 296STATUS_FLOAT_DIVIDE_BY_ZERO equ 0C000008EH 297STATUS_FLOAT_INEXACT_RESULT equ 0C000008FH 298STATUS_FLOAT_INVALID_OPERATION equ 0C0000090H 299STATUS_FLOAT_OVERFLOW equ 0C0000091H 300STATUS_FLOAT_STACK_CHECK equ 0C0000092H 301STATUS_FLOAT_UNDERFLOW equ 0C0000093H 302STATUS_FLOAT_MULTIPLE_FAULTS equ 0C00002B4H 303STATUS_FLOAT_MULTIPLE_TRAPS equ 0C00002B5H 304STATUS_GUARD_PAGE_VIOLATION equ 080000001H 305STATUS_ILLEGAL_FLOAT_CONTEXT equ 0C000014AH 306STATUS_ILLEGAL_INSTRUCTION equ 0C000001DH 307STATUS_INSTRUCTION_MISALIGNMENT equ 0C00000AAH 308STATUS_INVALID_HANDLE equ 0C0000008H 309STATUS_INVALID_LOCK_SEQUENCE equ 0C000001EH 310STATUS_INVALID_OWNER equ 0C000005AH 311STATUS_INVALID_PARAMETER equ 0C000000DH 312STATUS_INVALID_PARAMETER_1 equ 0C00000EFH 313STATUS_INVALID_SYSTEM_SERVICE equ 0C000001CH 314STATUS_INVALID_THREAD equ 0C000071CH 315STATUS_INTEGER_DIVIDE_BY_ZERO equ 0C0000094H 316STATUS_INTEGER_OVERFLOW equ 0C0000095H 317STATUS_IN_PAGE_ERROR equ 0C0000006H 318STATUS_KERNEL_APC equ 00100H 319STATUS_LONGJUMP equ 080000026H 320STATUS_NO_CALLBACK_ACTIVE equ 0C0000258H 321STATUS_PRIVILEGED_INSTRUCTION equ 0C0000096H 322STATUS_SINGLE_STEP equ 080000004H 323STATUS_STACK_BUFFER_OVERRUN equ 0C0000409H 324STATUS_STACK_OVERFLOW equ 0C00000FDH 325STATUS_SUCCESS equ 00000H 326STATUS_THREAD_IS_TERMINATING equ 0C000004BH 327STATUS_TIMEOUT equ 00102H 328STATUS_UNWIND equ 0C0000027H 329STATUS_UNWIND_CONSOLIDATE equ 080000029H 330STATUS_USER_APC equ 000C0H 331STATUS_WAKE_SYSTEM equ 040000294H 332STATUS_WAKE_SYSTEM_DEBUGGER equ 080000007H 333STATUS_SET_CONTEXT_DENIED equ 0C000060AH 334STATUS_RETURN_ADDRESS_HIJACK_ATTEMPT equ 080000033H 335 336; 337; Fast Fail Code Definitions 338; 339 340FAST_FAIL_INVALID_BUFFER_ACCESS equ 0001CH 341FAST_FAIL_INVALID_NEXT_THREAD equ 0001EH 342FAST_FAIL_INVALID_CONTROL_STACK equ 0002FH 343FAST_FAIL_SET_CONTEXT_DENIED equ 00030H 344FAST_FAIL_ENCLAVE_CALL_FAILURE equ 00035H 345FAST_FAIL_FLAGS_CORRUPTION equ 0003BH 346 347; 348; Bounds Callback Status Code Definitions 349; 350 351BoundExceptionContinueSearch equ 00000H 352BoundExceptionHandled equ 00001H 353BoundExceptionError equ 00002H 354 355; 356; APC Object Structure Offset Definitions 357; 358 359ApType equ 00000H 360ApSize equ 00002H 361ApThread equ 00008H 362ApApcListEntry equ 00010H 363ApKernelRoutine equ 00020H 364ApRundownRoutine equ 00028H 365ApNormalRoutine equ 00030H 366ApNormalContext equ 00038H 367ApSystemArgument1 equ 00040H 368ApSystemArgument2 equ 00048H 369ApApcStateIndex equ 00050H 370ApApcMode equ 00051H 371ApInserted equ 00052H 372ApcObjectLength equ 00058H 373 374; 375; DPC object Structure Offset Definitions 376; 377 378DpType equ 00000H 379DpNumber equ 00002H 380DpImportance equ 00001H 381DpDpcListEntry equ 00008H 382DpDeferredRoutine equ 00018H 383DpDeferredContext equ 00020H 384DpSystemArgument1 equ 00028H 385DpSystemArgument2 equ 00030H 386DpDpcData equ 00038H 387DpcObjectLength equ 00040H 388 389KI_DPC_ALL_FLAGS equ 000BFH 390KI_DPC_ANY_DPC_ACTIVE equ 010001H 391 392; 393; Device Queue Object Structure Offset Definitions 394; 395 396DvType equ 00000H 397DvSize equ 00002H 398DvDeviceListHead equ 00008H 399DvSpinLock equ 00018H 400DvBusy equ 00020H 401DeviceQueueObjectLength equ 00028H 402 403; 404; Device Queue Entry Structure Offset Definitions 405; 406 407DeDeviceListEntry equ 00000H 408DeSortKey equ 00010H 409DeInserted equ 00014H 410DeviceQueueEntryLength equ 00018H 411 412; 413; Event Object Structure Offset Definitions 414; 415 416EvType equ 00000H 417EvSize equ 00002H 418EvSignalState equ 00004H 419EvWaitListHead equ 00008H 420EventObjectLength equ 00018H 421 422; 423; Interrupt Object Structure Offset Definitions 424; 425 426KINTERRUPT_STATE_DISABLED_BIT equ 00000H 427KINTERRUPT_STATE_DISABLED equ 00001H 428InLevelSensitive equ 00000H 429InLatched equ 00001H 430 431InType equ 00000H 432InSize equ 00002H 433InInterruptListEntry equ 00008H 434InServiceRoutine equ 00018H 435InServiceContext equ 00030H 436InSpinLock equ 00038H 437InTickCount equ 00040H 438InActualLock equ 00048H 439InDispatchAddress equ 00050H 440InVector equ 00058H 441InIrql equ 0005CH 442InSynchronizeIrql equ 0005DH 443InFloatingSave equ 0005EH 444InConnected equ 0005FH 445InNumber equ 00060H 446InShareVector equ 00064H 447InInternalState equ 00068H 448InMode equ 0006CH 449InServiceCount equ 00074H 450InDispatchCount equ 00078H 451InTrapFrame equ 00088H 452InterruptObjectLength equ 00120H 453 454; 455; Process Object Structure Offset Definitions 456; 457 458PrType equ 00000H 459PrSize equ 00002H 460PrSignalState equ 00004H 461PrProfileListHead equ 00018H 462PrDirectoryTableBase equ 00028H 463PrThreadListHead equ 00030H 464PrAffinity equ 00050H 465PrReadyListHead equ 00158H 466PrSwapListEntry equ 00168H 467PrActiveProcessors equ 00170H 468PrProcessFlags equ 00278H 469PrBasePriority equ 00280H 470PrQuantumReset equ 00281H 471PrCycleTime equ 00360H 472PrKernelTime equ 0037CH 473PrUserTime equ 00380H 474PrInstrumentationCallback equ 003D8H 475PrMitigationFlags2 equ 009D4H 476KernelProcessObjectLength equ 00438H 477ExecutiveProcessObjectLength equ 00B80H 478Win32BatchFlushCallout equ 00007H 479 480; 481; Profile Object Structure Offset Definitions 482; 483 484PfType equ 00000H 485PfSize equ 00002H 486PfProfileListEntry equ 00008H 487PfProcess equ 00018H 488PfRangeBase equ 00020H 489PfRangeLimit equ 00028H 490PfBucketShift equ 00030H 491PfBuffer equ 00038H 492PfSegment equ 00040H 493PfAffinity equ 00048H 494PfSource equ 00260H 495PfStarted equ 00262H 496ProfileObjectLength equ 00268H 497 498; 499; Queue Object Structure Offset Definitions 500; 501 502QuSignalState equ 00004H 503QuEntryListHead equ 00018H 504QuCurrentCount equ 00028H 505QuMaximumCount equ 0002CH 506QuThreadListHead equ 00030H 507QueueObjectLength equ 00040H 508 509; 510; Thread Object Structure Offset Definitions 511; 512 513EtCid equ 004C8H 514EtPicoContext equ 00630H 515 516ThType equ 00000H 517ThSize equ 00002H 518ThLock equ 00000H 519THREAD_FLAGS_CYCLE_PROFILING equ 00001H 520THREAD_FLAGS_CYCLE_PROFILING_LOCK_BIT equ 00010H 521THREAD_FLAGS_CYCLE_PROFILING_LOCK equ 010000H 522THREAD_FLAGS_COUNTER_PROFILING equ 00002H 523THREAD_FLAGS_COUNTER_PROFILING_LOCK_BIT equ 00011H 524THREAD_FLAGS_COUNTER_PROFILING_LOCK equ 020000H 525THREAD_FLAGS_GROUP_SCHEDULING equ 00004H 526THREAD_FLAGS_AFFINITY_SET equ 00008H 527THREAD_FLAGS_ACCOUNTING_CSWITCH equ 000B6H 528THREAD_FLAGS_ACCOUNTING_INTERRUPT equ 00072H 529THREAD_FLAGS_ACCOUNTING_ANY equ 000BEH 530ThDebugActive equ 00003H 531ThThreadControlFlags equ 00002H 532ThSignalState equ 00004H 533ThCycleTime equ 00048H 534ThCurrentRunTime equ 00050H 535ThStateSaveArea equ 00060H 536ThInitialStack equ 00028H 537ThStackLimit equ 00030H 538ThKernelStack equ 00058H 539ThThreadLock equ 00040H 540ThApcState equ 00098H 541ThProcess equ 00220H 542ThNextProcessor equ 00218H 543ThAdjustReason equ 00236H 544ThAdjustIncrement equ 00237H 545ThWaitReason equ 00283H 546ThRunning equ 00071H 547ThAlerted equ 00072H 548ThWaitTime equ 001B4H 549ThCombinedApcDisable equ 001E4H 550ThKernelApcDisable equ 001E4H 551ThSpecialApcDisable equ 001E6H 552ThTeb equ 000F0H 553ThTimer equ 00100H 554thProcess equ 00220H 555 556KTHREAD_AUTO_ALIGNMENT_BIT equ 00002H 557KTHREAD_GUI_THREAD_MASK equ 00080H 558KTHREAD_RESTRICTED_GUI_THREAD_MASK equ 0200000H 559KTHREAD_SYSTEM_THREAD_BIT equ 0000AH 560KTHREAD_QUEUE_DEFER_PREEMPTION_BIT equ 0000BH 561KTHREAD_BAM_QOS_LEVEL_MASK equ 000FFH 562KTHREAD_CET_USER_SHADOW_STACK_BIT equ 00014H 563KTHREAD_CET_KERNEL_SHADOW_STACK_BIT equ 00016H 564 565DEBUG_ACTIVE_ALT_SYSCALL_HANDLER equ 00024H 566PsSystemCallMapToSystem equ 00001H 567 568ThMiscFlags equ 00074H 569ThThreadFlags equ 00078H 570ThPreviousMode equ 00232H 571ThContextSwitches equ 00154H 572ThState equ 00184H 573ThWaitIrql equ 00186H 574ThTrapFrame equ 00090H 575ThFirstArgument equ 00088H 576ThApcStateIndex equ 0024AH 577ThSystemCallNumber equ 00080H 578ThWin32Thread equ 001C8H 579ThStackBase equ 00038H 580ThLegoData equ 002D0H 581KernelThreadObjectLength equ 00480H 582ExecutiveThreadObjectLength equ 00910H 583 584 585; 586; Timer object Structure Offset Definitions 587; 588 589TiType equ 00000H 590TiSize equ 00002H 591TiSignalState equ 00004H 592TiDueTime equ 00018H 593TiTimerListEntry equ 00020H 594TiDpc equ 00030H 595TiPeriod equ 0003CH 596TimerObjectLength equ 00040H 597 598 599; 600; Wait Block Structure Offset Definitions 601; 602 603WbWaitListEntry equ 00000H 604WbThread equ 00018H 605WbObject equ 00020H 606WbWaitKey equ 00012H 607WbWaitType equ 00010H 608 609; 610; Fiber Structure Offset Definitions 611; 612 613FbFiberData equ 00000H 614FbExceptionList equ 00008H 615FbStackBase equ 00010H 616FbStackLimit equ 00018H 617FbDeallocationStack equ 00020H 618FbFiberContext equ 00030H 619FbWx86Tib equ 00500H 620FbActivationContextStackPointer equ 00508H 621FbFlsData equ 00510H 622FbGuaranteedStackBytes equ 00518H 623FbTebFlags equ 0051CH 624FbSsp equ 00528H 625 626; 627; Process Environment Block Structure Offset Definitions 628; 629 630PeBeingDebugged equ 00002H 631PeProcessParameters equ 00020H 632PeKernelCallbackTable equ 00058H 633ProcessEnvironmentBlockLength equ 007D0H 634 635; 636; Process Parameters Block Structure Offset Definitions 637; 638 639PpFlags equ 00008H 640USER_CALLBACK_FILTER equ 080000H 641 642; 643; System Service Descriptor Table Structure Definitions 644; 645 646NUMBER_SERVICE_TABLES equ 00002H 647SERVICE_NUMBER_MASK equ 00FFFH 648SERVICE_TABLE_SHIFT equ 00007H 649SERVICE_TABLE_MASK equ 00020H 650SERVICE_TABLE_TEST equ 00020H 651 652ThBase equ 00000H 653ThLimit equ 00008H 654SdBase equ 00000H 655SdLimit equ 00010H 656SdNumber equ 00018H 657SdLength equ 00020H 658 659; 660; Thread Environment Block Structure Offset Definitions 661; 662 663TeCmTeb equ 00000H 664TeStackBase equ 00008H 665TeStackLimit equ 00010H 666TeFiberData equ 00020H 667TeSelf equ 00030H 668TeEnvironmentPointer equ 00038H 669TeClientId equ 00040H 670TeActiveRpcHandle equ 00050H 671TeThreadLocalStoragePointer equ 00058H 672TeCountOfOwnedCriticalSections equ 0006CH 673TePeb equ 00060H 674TeCsrClientThread equ 00070H 675TeWOW32Reserved equ 00100H 676TeSoftFpcr equ 0010CH 677TeExceptionCode equ 002C0H 678TeActivationContextStackPointer equ 002C8H 679TeInstrumentationCallbackSp equ 002D0H 680TeInstrumentationCallbackPreviousPc equ 002D8H 681TeInstrumentationCallbackPreviousSp equ 002E0H 682TeGdiClientPID equ 007F0H 683TeGdiClientTID equ 007F4H 684TeGdiThreadLocalInfo equ 007F8H 685TeglDispatchTable equ 009F0H 686TeglReserved1 equ 01138H 687TeglReserved2 equ 01220H 688TeglSectionInfo equ 01228H 689TeglSection equ 01230H 690TeglTable equ 01238H 691TeglCurrentRC equ 01240H 692TeglContext equ 01248H 693TeDeallocationStack equ 01478H 694TeTlsSlots equ 01480H 695TeTlsExpansionSlots equ 01780H 696TeLastErrorValue equ 00068H 697TeVdm equ 01690H 698TeInstrumentation equ 016B8H 699TeGdiBatchCount equ 01740H 700TeGuaranteedStackBytes equ 01748H 701TeFlsData equ 017C8H 702ThreadEnvironmentBlockLength equ 01850H 703CmThreadEnvironmentBlockOffset equ 02000H 704TLS_MINIMUM_AVAILABLE equ 00040H 705TLS_EXPANSION_SLOTS equ 00400H 706 707; 708; Lock Queue Structure Offset Definitions 709; 710 711LOCK_QUEUE_WAIT equ 00001H 712LOCK_QUEUE_OWNER equ 00002H 713LOCK_QUEUE_HEADER_SIZE equ 00010H 714 715 716LqNext equ 00000H 717LqLock equ 00008H 718 719LqhLockQueue equ 00000H 720LqhOldIrql equ 00010H 721LqhNext equ 00000H 722LqhLock equ 00008H 723 724; 725; Kernel Stack Control Structure Offset (relative to initial stack pointer) Definitions 726; 727 728KSTACK_CONTROL_LENGTH equ 00050H 729KcPreviousBase equ 00010H 730KcPreviousLimit equ 00018H 731KcPreviousKernel equ 00020H 732KcPreviousInitial equ 00028H 733KcPreviousKernelShadowStack equ 00040H 734KcPreviousKernelShadowStackInitial equ 00048H 735KcPreviousKernelShadowStackBase equ 00030H 736KcPreviousKernelShadowStackLimit equ 00038H 737KcCurrentBase equ 00000H 738KcActualLimit equ 00008H 739KSTACK_ACTUAL_LIMIT_EXPANDED equ 00001H 740 741 742; 743; ETW Definitions 744; 745 746PERF_CONTEXTSWAP_OFFSET equ 00004H 747PERF_CONTEXTSWAP_FLAG equ 00004H 748PERF_INTERRUPT equ 020004000H 749PERF_INTERRUPT_OFFSET equ 00004H 750PERF_INTERRUPT_FLAG equ 04000H 751PERF_SYSCALL_OFFSET equ 00008H 752PERF_SYSCALL_FLAG equ 00040H 753PERF_SPEC_CONTROL_OFFSET equ 00014H 754PERF_SPEC_CONTROL_FLAG equ 00002H 755NTOS_YIELD_MACRO equ 00001H 756EtwTSLength equ 00020H 757CONTEXT_SWAP_TRACING equ 00001H 758LAST_BRANCH_RECORD_IN_USE equ 00002H 759PROCESSOR_TRACE_ON_EACH_CORE_ENABLED equ 00004H 760 761; 762; Enlightenment structure definitions 763; 764 765HeEnlightenments equ 00000H 766HeHypervisorConnected equ 00004H 767HeEndOfInterrupt equ 00008H 768HeApicWriteIcr equ 00010H 769HeSpinCountMask equ 0001CH 770HeLongSpinWait equ 00020H 771 772; 773; XState context structure offset definitions 774; 775 776XctxMask equ 00000H 777XctxLength equ 00008H 778XctxArea equ 00010H 779 780; 781; XState configuration structure offset definitions 782; 783 784XcfgEnabledFeatures equ 00000H 785XcfgEnabledVolatileFeatures equ 00008H 786XcfgEnabledSupervisorFeatures equ 00218H 787 788; 789; GETSETCONTEXT structure offset definitions 790; 791 792GetSetCtxContextPtr equ 00078H 793XSAVE_ALIGN equ 00040H 794 795; 796; XSAVE_AREA structure offset definitions 797; 798 799XsaHeader equ 00200H 800XsaHeaderLength equ 00040H 801XSTATE_MASK_LEGACY_FLOATING_POINT equ 00001H 802XSTATE_MASK_LEGACY_SSE equ 00002H 803XSTATE_MASK_LEGACY equ 00003H 804XSTATE_MASK_GSSE equ 00004H 805XSTATE_MASK_IPT equ 00100H 806XSTATE_MASK_LARGE_FEATURES equ 040000H 807 808; 809; KERNEL_CET_CONTEXT structure offset definitions 810; 811 812KccSsp equ 00000H 813KccRip equ 00008H 814KccSegCs equ 00010H 815 816; 817; Extended context structure offset definitions 818; 819 820CxxAllOffset equ 00000H 821CxxAllLength equ 00004H 822CxxLegacyOffset equ 00008H 823CxxLegacyLength equ 0000CH 824CxxXStateOffset equ 00010H 825CxxXStateLength equ 00014H 826CxxKernelCetOffset equ 00018H 827CxxKernelCetLength equ 0001CH 828 829; 830; KAFFINITY_EX offsets 831; 832 833AfCount equ 00000H 834AfBitmap equ 00008H 835CFlushSize equ 000E8H 836PbEntropyCount equ 089E0H 837PbEntropyBuffer equ 089E4H 838KENTROPY_TIMING_INTERRUPTS_PER_BUFFER equ 00400H 839KENTROPY_TIMING_BUFFER_MASK equ 007FFH 840KENTROPY_TIMING_ANALYSIS equ 00000H 841 842; 843; Priority state definitions 844; 845 846KPRIORITY_STATE_PRIORITY_BITMASK equ 0007FH 847 848; 849; Register Argument Home Address Offset Definitions 850; 851 852P1Home equ 00008H 853P2Home equ 00010H 854P3Home equ 00018H 855P4Home equ 00020H 856 857; 858; Special Register Structure Offset Definition 859; 860 861SrKernelDr0 equ 00020H 862SrKernelDr1 equ 00028H 863SrKernelDr2 equ 00030H 864SrKernelDr3 equ 00038H 865SrKernelDr6 equ 00040H 866SrKernelDr7 equ 00048H 867SrGdtr equ 00050H 868SrIdtr equ 00060H 869SrTr equ 00070H 870SrMxCsr equ 00074H 871SrMsrGsBase equ 000A8H 872SrMsrGsSwap equ 000B0H 873SrMsrStar equ 000B8H 874SrMsrLStar equ 000C0H 875SrMsrCStar equ 000C8H 876SrMsrSyscallMask equ 000D0H 877SrXcr0 equ 000D8H 878SrMsrFsBase equ 000E0H 879 880; 881; Processor Control Region Structure Offset Definitions 882; 883 884PcGdt equ 00000H 885PcTss equ 00008H 886PcUserRsp equ 00010H 887PcUserRspShadow equ 0A010H 888PcSelf equ 00018H 889PcCurrentPrcb equ 00020H 890PcLockArray equ 00028H 891PcTeb equ 00030H 892PcIdt equ 00038H 893PcDbgMceNestingLevel equ 0A02CH 894PcDbgMceFlags equ 0A030H 895PcProcessorDescriptorArea equ 00038H 896PcIrql equ 00050H 897PcStallScaleFactor equ 00064H 898PcHalReserved equ 000C0H 899PcPrcb equ 00180H 900PcMxCsr equ 00180H 901PcInterruptRequest equ 00186H 902PcIdleHalt equ 00187H 903PcCurrentThread equ 00188H 904PcNextThread equ 00190H 905PcIdleThread equ 00198H 906PcIpiFrozen equ 02F08H 907PcNestingLevel equ 001A0H 908PcNumber equ 001A4H 909PcRspBase equ 001A8H 910PcRspBaseShadow equ 0A008H 911PcShadowFlags equ 0A018H 912PcVerwSelector equ 0A02AH 913PcPrcbLock equ 001B0H 914PcCr0 equ 00280H 915PcCr2 equ 00288H 916PcCr3 equ 00290H 917PcCr4 equ 00298H 918PcKernelDr0 equ 002A0H 919PcKernelDr1 equ 002A8H 920PcKernelDr2 equ 002B0H 921PcKernelDr3 equ 002B8H 922PcKernelDr7 equ 002C8H 923PcGdtrLimit equ 002D6H 924PcGdtrBase equ 002D8H 925PcIdtrLimit equ 002E6H 926PcIdtrBase equ 002E8H 927PcTr equ 002F0H 928PcLdtr equ 002F2H 929PcDebugControl equ 002F8H 930PcLastBranchToRip equ 00300H 931PcLastBranchFromRip equ 00308H 932PcLastExceptionToRip equ 00310H 933PcLastExceptionFromRip equ 00318H 934PcCr8 equ 00320H 935PcCpuType equ 001C0H 936PcCpuID equ 001C1H 937PcCpuStep equ 001C2H 938PcCpuVendor equ 0020DH 939PcVirtualApicAssist equ 08888H 940PcFeatureBits equ 08B20H 941PcNmiActive equ 08026H 942PcMceActive equ 08027H 943PcCombinedNmiMceActive equ 08026H 944PcSfCode equ 08DE8H 945PcSfVa equ 08DF0H 946PcSfPa equ 08DF8H 947PcKernelDirectoryTableBase equ 0A000H 948PcExceptionStack equ 083E8H 949PcExceptionStackActive equ 083E6H 950PcDpcRequestSummary equ 0353CH 951PcTransitionShadowStack equ 095A0H 952PcKernelShadowStackInitial equ 095A8H 953; 954; 955CPU_AMD equ 00001H 956CPU_INTEL equ 00002H 957CPU_VIA equ 00003H 958PcCFlushSize equ 00268H 959PcDeepSleep equ 082DAH 960PcDeferredReadyListHead equ 02E88H 961PcSystemCalls equ 02EB8H 962PcDpcRoutineActive equ 0353AH 963PcInterruptCount equ 082C0H 964PcDebuggerSavedIRQL equ 082D8H 965PcStartCycles equ 08300H 966RTL_RETPOLINE_STUBS_UNWIND_INFO_MAX_SIZE equ 001F4H 967ProcessorControlRegisterLength equ 02C040H 968 969; 970; Defines kernel process structure 971; 972 973PrUserDirectoryTableBase equ 00388H 974PrAddressPolicy equ 00390H 975 976; 977; Defines for user shared data 978; 979 980ifdef RELOCATABLE_USER_SHARED_DATA 981MM_SHARED_USER_DATA_VA_NOT_RELOCATABLE equ 0000000007FFE0000H 982else 983USER_SHARED_DATA equ 0FFFFF78000000000H 984MM_SHARED_USER_DATA_VA equ 0000000007FFE0000H 985endif 986PF_COMPARE_EXCHANGE128 equ 0000000000000000EH 987PF_RDWRFSGSBASE_AVAILABLE equ 00000000000000016H 988PF_RDTSCP_INSTRUCTION_AVAILABLE equ 00000000000000020H 989PF_RDPID_INSTRUCTION_AVAILABLE equ 00000000000000021H 990SYSTEM_CALL_INT_2E equ 00001H 991UsTickCountMultiplier equ 00004H 992UsInterruptTime equ 00008H 993UsSystemTime equ 00014H 994UsTestRetInstruction equ 002F8H 995UsSystemCall equ 00308H 996UsProcessorFeatures equ 00274H 997 998; 999; Tss Structure Offset Definitions 1000; 1001 1002TssRsp0 equ 00004H 1003TssRsp1 equ 0000CH 1004TssRsp2 equ 00014H 1005TssPanicStack equ 00024H 1006TssMcaStack equ 0002CH 1007TssNmiStack equ 00034H 1008TssIoMapBase equ 00066H 1009TssLength equ 00068H 1010 1011; 1012; Gdt Descriptor Offset Definitions 1013; 1014 1015KGDT64_NULL equ 00000H 1016KGDT64_R0_CODE equ 00010H 1017KGDT64_R0_DATA equ 00018H 1018KGDT64_R3_CMCODE equ 00020H 1019KGDT64_R3_DATA equ 00028H 1020KGDT64_R3_CODE equ 00030H 1021KGDT64_SYS_TSS equ 00040H 1022KGDT64_R3_CMTEB equ 00050H 1023 1024; 1025; Constants for AMD64 compatibility mode switching 1026; 1027 1028X86AMD64_R3_LONG_MODE_CODE equ 00033H 1029 1030; 1031; GDT Entry Offset Definitions 1032; 1033 1034KgdtBaseLow equ 00002H 1035KgdtBaseMiddle equ 00004H 1036KgdtBaseHigh equ 00007H 1037KgdtBaseUpper equ 00008H 1038KgdtFlags1 equ 00005H 1039KgdtLimitHigh equ 00006H 1040KgdtLimitLow equ 00000H 1041KGDT_LIMIT_ENCODE_MASK equ 03C00H 1042KGDT_ENTRY_PRESENT equ 00080H 1043 1044 1045; 1046; Processor Block Structure Offset Definitions 1047; 1048 1049PbMxCsr equ 00000H 1050PbInterruptRequest equ 00006H 1051PbIdleHalt equ 00007H 1052PbCurrentThread equ 00008H 1053PbNextThread equ 00010H 1054PbIdleThread equ 00018H 1055PbSmtIsolationThread equ 08880H 1056PbNestingLevel equ 00020H 1057PbNumber equ 00024H 1058PbRspBase equ 00028H 1059PbRspBaseShadow equ 09E88H 1060PbPrcbLock equ 00030H 1061PbTscFrequency equ 00090H 1062PbKeSpinLockOrdering equ 07EB0H 1063KI_SPINLOCK_ORDER_PRCB_LOCK equ 00080H 1064PbGroup equ 000D0H 1065PbGroupIndex equ 000D1H 1066PbProcessorState equ 00100H 1067PbContext equ 089C0H 1068PbCpuType equ 00040H 1069PbCpuID equ 00041H 1070PbCpuStep equ 00042H 1071PbHalReserved equ 00048H 1072PbMinorVersion equ 00088H 1073PbMajorVersion equ 0008AH 1074PbBuildType equ 0008CH 1075PbCpuVendor equ 0008DH 1076PbCoresPerPhysicalProcessor equ 000A0H 1077PbLogicalProcessorsPerCore equ 000A4H 1078PbApicMask equ 000DCH 1079PbCFlushSize equ 000E8H 1080PbAcpiReserved equ 000E0H 1081PbInitialApicId equ 000D4H 1082PbPrcbFlags equ 000ECH 1083PbPriorityState equ 00038H 1084PbLockQueue equ 006F0H 1085PbPPLookasideList equ 00800H 1086PbPPNPagedLookasideList equ 01500H 1087PbPPPagedLookasideList equ 02100H 1088PbPacketBarrier equ 02D80H 1089PbDeferredReadyListHead equ 02D08H 1090PbLookasideIrpFloat equ 02D9CH 1091PbSystemCalls equ 02D38H 1092PbReadOperationCount equ 02D5CH 1093PbWriteOperationCount equ 02D60H 1094PbOtherOperationCount equ 02D64H 1095PbReadTransferCount equ 02D68H 1096PbWriteTransferCount equ 02D70H 1097PbOtherTransferCount equ 02D78H 1098PbContextSwitches equ 02D3CH 1099PbTargetCount equ 02D84H 1100PbIpiFrozen equ 02D88H 1101PbRequestMailbox equ 0BEC0H 1102PbMailbox equ 09340H 1103PbDpcList equ 03340H 1104PbDpcLock equ 03350H 1105PbDpcCount equ 0335CH 1106PbDpcStack equ 033A0H 1107PbIsrStack equ 089D8H 1108PbMaximumDpcQueueDepth equ 033A8H 1109PbDpcRequestRate equ 033ACH 1110PbMinimumDpcRate equ 033B0H 1111PbDpcRoutineActive equ 033BAH 1112PbDpcRequestSummary equ 033BCH 1113PbNormalDpcState equ 033BCH 1114PbDpcLastCount equ 033B4H 1115PbQuantumEnd equ 033B9H 1116PbIdleSchedule equ 033BBH 1117PbInterruptObject equ 03400H 1118PbReadySummary equ 07ED8H 1119PbDispatcherReadyListHead equ 07F40H 1120PbInterruptCount equ 08140H 1121PbKernelTime equ 08144H 1122PbUserTime equ 08148H 1123PbDpcTime equ 0814CH 1124PbInterruptTime equ 08150H 1125PbAdjustDpcThreshold equ 08154H 1126PbStartCycles equ 08180H 1127PbPageColor equ 08250H 1128PbNodeColor equ 08254H 1129PbNodeShiftedColor equ 08258H 1130PbSecondaryColorMask equ 0825CH 1131PbCycleTime equ 08278H 1132PbCpuCycleScalingFactor equ 081B8H 1133PPM_FRACTION_SHIFT equ 00010H 1134PbFastReadNoWait equ 02D44H 1135PbFastReadWait equ 02D48H 1136PbFastReadNotPossible equ 02D4CH 1137PbCopyReadNoWait equ 02D50H 1138PbCopyReadWait equ 02D54H 1139PbCopyReadNoWaitMiss equ 02D58H 1140PbAlignmentFixupCount equ 086B8H 1141PbExceptionDispatchCount equ 08170H 1142PbVendorString equ 08990H 1143ProcessorBlockLength equ 0BF00H 1144PbShadowFlags equ 09E98H 1145PbTrappedSecurityDomain equ 000F0H 1146PbKernelShadowStackInitial equ 09428H 1147 1148; 1149; Time Fields (TIME_FIELDS) Structure Offset Definitions 1150; 1151 1152TfSecond equ 0000AH 1153TfMinute equ 00008H 1154TfHour equ 00006H 1155TfWeekday equ 0000EH 1156TfDay equ 00004H 1157TfMonth equ 00002H 1158TfYear equ 00000H 1159TfMilliseconds equ 0000CH 1160 1161 1162; 1163; Define constants for system IRQL and IDT vector conversion 1164; 1165 1166MAXIMUM_IDTVECTOR equ 000FFH 1167MAXIMUM_PRIMARY_VECTOR equ 000FFH 1168PRIMARY_VECTOR_BASE equ 00030H 1169RPL_MASK equ 00003H 1170MODE_BIT equ 00000H 1171MODE_MASK equ 00001H 1172LDT_MASK equ 00004H 1173 1174; 1175; Flags in the CR0 register 1176; 1177 1178CR0_PG equ 080000000H 1179CR0_ET equ 00010H 1180CR0_TS equ 00008H 1181CR0_EM equ 00004H 1182CR0_MP equ 00002H 1183CR0_PE equ 00001H 1184CR0_CD equ 040000000H 1185CR0_NW equ 020000000H 1186CR0_AM equ 040000H 1187CR0_WP equ 010000H 1188CR0_NE equ 00020H 1189 1190; 1191; Flags in the CR4 register 1192; 1193 1194CR4_VME equ 00001H 1195CR4_PVI equ 00002H 1196CR4_TSD equ 00004H 1197CR4_DE equ 00008H 1198CR4_PSE equ 00010H 1199CR4_PAE equ 00020H 1200CR4_MCE equ 00040H 1201CR4_PGE equ 00080H 1202CR4_FXSR equ 00200H 1203CR4_XMMEXCPT equ 00400H 1204CR4_LA57 equ 01000H 1205CR4_XSAVE equ 040000H 1206CR4_PCIDE equ 020000H 1207CR4_CET equ 0800000H 1208 1209; 1210; Legacy Floating Status Bit Masks 1211; 1212 1213FSW_INVALID_OPERATION equ 00001H 1214FSW_DENORMAL equ 00002H 1215FSW_ZERO_DIVIDE equ 00004H 1216FSW_OVERFLOW equ 00008H 1217FSW_UNDERFLOW equ 00010H 1218FSW_PRECISION equ 00020H 1219FSW_STACK_FAULT equ 00040H 1220FSW_ERROR_SUMMARY equ 00080H 1221FSW_CONDITION_CODE_0 equ 00100H 1222FSW_CONDITION_CODE_1 equ 00200H 1223FSW_CONDITION_CODE_2 equ 00400H 1224FSW_CONDITION_CODE_3 equ 04000H 1225FSW_ERROR_MASK equ 0003FH 1226 1227; 1228; MXCSR Floating Control/Status Bit Masks 1229; 1230 1231XSW_INVALID_OPERATION equ 00001H 1232XSW_DENORMAL equ 00002H 1233XSW_ZERO_DIVIDE equ 00004H 1234XSW_OVERFLOW equ 00008H 1235XSW_UNDERFLOW equ 00010H 1236XSW_PRECISION equ 00020H 1237XSW_ERROR_MASK equ 0003FH 1238XSW_ERROR_SHIFT equ 00007H 1239XCW_INVALID_OPERATION equ 00080H 1240XCW_DENORMAL equ 00100H 1241XCW_ZERO_DIVIDE equ 00200H 1242XCW_OVERFLOW equ 00400H 1243XCW_UNDERFLOW equ 00800H 1244XCW_PRECISION equ 01000H 1245XCW_ROUND_CONTROL equ 06000H 1246XCW_FLUSH_ZERO equ 08000H 1247INITIAL_FPCSR equ 0027FH 1248INITIAL_MXCSR equ 01F80H 1249 1250; 1251; Machine Specific Register Numbers 1252; 1253 1254MSR_EFER equ 0C0000080H 1255MSR_STAR equ 0C0000081H 1256MSR_LSTAR equ 0C0000082H 1257MSR_CSTAR equ 0C0000083H 1258MSR_SYSCALL_MASK equ 0C0000084H 1259MSR_FS_BASE equ 0C0000100H 1260MSR_GS_BASE equ 0C0000101H 1261MSR_GS_SWAP equ 0C0000102H 1262MSR_MCG_STATUS equ 0017AH 1263MSR_AMD_ACCESS equ 09C5A203AH 1264MSR_IA32_MISC_ENABLE equ 001A0H 1265MSR_IA32_U_CET equ 006A0H 1266MSR_IA32_S_CET equ 006A2H 1267MSR_IA32_PL0_SSP equ 006A4H 1268MSR_IA32_PL3_SSP equ 006A7H 1269MSR_IA32_XFD equ 001C4H 1270MSR_IA32_XFD_ERR equ 001C5H 1271 1272; 1273; Flags within MSR_EFER 1274; 1275 1276MSR_LMA equ 00400H 1277MSR_LME equ 00100H 1278MSR_SCE equ 00001H 1279MSR_NXE equ 00800H 1280MSR_PAT equ 00277H 1281MSR_DEBUG_CTL equ 001D9H 1282 1283; 1284; Flags within MSR_IA32_MISC_ENABLE 1285; 1286 1287MSR_XD_ENABLE_MASK equ 0FFFFFFFBH 1288 1289; 1290; Flags within MSR_IA32_U_CET 1291; 1292 1293IA32_CET_SH_STK_EN equ 00001H 1294IA32_CET_WR_SHSTK_EN equ 00002H 1295 1296; 1297; Flags within MSR_DEGUG_CTL 1298; 1299 1300MSR_DEBUG_CTL_LBR equ 00001H 1301MSR_DEBUG_CTL_BTF equ 00002H 1302 1303; 1304; Flags within MSR_IA32_MCG_STATUS 1305; 1306 1307MSR_IA32_MCG_STATUS_MCIP equ 00004H 1308 1309; 1310; Miscellaneous Definitions 1311; 1312 1313MAXIMUM_PROCESSORS equ 00040H 1314INITIAL_STALL_COUNT equ 00064H 1315IRQL_NOT_GREATER_OR_EQUAL equ 00009H 1316IRQL_NOT_LESS_OR_EQUAL equ 0000AH 1317MUTEX_ALREADY_OWNED equ 000BFH 1318THREAD_NOT_MUTEX_OWNER equ 00011H 1319SPIN_LOCK_ALREADY_OWNED equ 0000FH 1320SPIN_LOCK_NOT_OWNED equ 00010H 1321Executive equ 00000H 1322FALSE equ 00000H 1323TRUE equ 00001H 1324NMI_BLOCKING_MASK equ 00004H 1325KERNEL_MCA_EXCEPTION_STACK_SIZE equ 02000H 1326IST_STACK_SIZE equ 06000H 1327ISR_STACK_SIZE equ 06000H 1328EXCEPTION_STACK_SIZE equ 06000H 1329EXCEPTION_EXECUTE_FAULT equ 00008H 1330KCACHE_ERRATA_MONITOR_FLAGS equ 00003H 1331 1332; 1333; Machine check nesting simulation debug controls 1334; 1335 1336DBG_MCE_NMI_ON_MCE equ 00000H 1337DBG_MCE_MCE_ON_NMI equ 00001H 1338DBG_MCE_MCE_ON_NMI_MCE_TAIL equ 00002H 1339DBG_MCE_MCE_ON_MCE_MCE_TAIL equ 00003H 1340DBG_MCE_NMI_ON_MCE_MCE_TAIL equ 00004H 1341DBG_MCE_NMI_PENDING equ 0001FH 1342 1343; 1344; Flags returned from KiProcessControlProtection 1345; 1346 1347KI_CP_HANDLED equ 00001H 1348KI_CP_NOT_HANDLED equ 00002H 1349KI_CP_SUPPORTED_HIJACK equ 00003H 1350 1351; 1352; Fast Fail Definitions 1353; 1354 1355FAST_FAIL_GUARD_ICALL_CHECK_FAILURE equ 0000AH 1356FAST_FAIL_INVALID_JUMP_BUFFER equ 00012H 1357FAST_FAIL_INVALID_SET_OF_CONTEXT equ 0000DH 1358FAST_FAIL_GUARD_SS_FAILURE equ 0002CH 1359FAST_FAIL_CONTROL_INVALID_RETURN_ADDRESS equ 00039H 1360BASE_PRIORITY_THRESHOLD equ 00008H 1361EVENT_INCREMENT equ 00001H 1362LOW_REALTIME_PRIORITY equ 00010H 1363KERNEL_LARGE_STACK_COMMIT equ 06000H 1364KERNEL_LARGE_STACK_SIZE equ 012000H 1365DOUBLE_FAULT_STACK_SIZE equ 02000H 1366KI_KERNEL_SHADOW_STACK_SIZE_WITH_GUARD_PAGES equ 03000H 1367BREAKPOINT_BREAK equ 00000H 1368BREAKPOINT_COMMAND_STRING equ 00005H 1369BREAKPOINT_PRINT equ 00001H 1370BREAKPOINT_PROMPT equ 00002H 1371BREAKPOINT_LOAD_SYMBOLS equ 00003H 1372BREAKPOINT_UNLOAD_SYMBOLS equ 00004H 1373CLOCK_QUANTUM_DECREMENT equ 00003H 1374READY_SKIP_QUANTUM equ 00002H 1375THREAD_QUANTUM equ 00006H 1376WAIT_QUANTUM_DECREMENT equ 00001H 1377ROUND_TRIP_DECREMENT_COUNT equ 00010H 1378KI_EXCEPTION_GP_FAULT equ 010000001H 1379KI_EXCEPTION_INVALID_OP equ 010000002H 1380KI_EXCEPTION_INTEGER_DIVIDE_BY_ZERO equ 010000003H 1381KI_EXCEPTION_ACCESS_VIOLATION equ 010000004H 1382KI_EXCEPTION_SECURE_FAULT equ 010000006H 1383KI_EXCEPTION_SEGMENT_NOT_PRESENT equ 010000007H 1384KI_EXCEPTION_XFD_ERROR equ 010000010H 1385TARGET_FREEZE equ 00005H 1386KI_DPC_INTERRUPT_FLAGS equ 000AFH 1387KI_DPC_THREAD_ACTIVE equ 010000H 1388KernelShadowStackTypeRstorssp equ 00002H 1389 1390; 1391; Equates for exceptions which cause system fatal error 1392; 1393 1394EXCEPTION_DIVIDED_BY_ZERO equ 00000H 1395EXCEPTION_DEBUG equ 00001H 1396EXCEPTION_NMI equ 00002H 1397EXCEPTION_INT3 equ 00003H 1398EXCEPTION_BOUND_CHECK equ 00005H 1399EXCEPTION_INVALID_OPCODE equ 00006H 1400EXCEPTION_NPX_NOT_AVAILABLE equ 00007H 1401EXCEPTION_DOUBLE_FAULT equ 00008H 1402EXCEPTION_NPX_OVERRUN equ 00009H 1403EXCEPTION_INVALID_TSS equ 0000AH 1404EXCEPTION_SEGMENT_NOT_PRESENT equ 0000BH 1405EXCEPTION_STACK_FAULT equ 0000CH 1406EXCEPTION_GP_FAULT equ 0000DH 1407EXCEPTION_RESERVED_TRAP equ 0000FH 1408EXCEPTION_NPX_ERROR equ 00010H 1409EXCEPTION_ALIGNMENT_CHECK equ 00011H 1410EXCEPTION_CP_FAULT equ 00015H 1411EXCEPTION_SE_FAULT equ 00017H 1412EXCEPTION_VIRTUALIZATION_FAULT equ 00020H 1413 1414; 1415; Exception Frame Offset Definitions and Length 1416; 1417 1418ExP1Home equ 00000H 1419ExP2Home equ 00008H 1420ExP3Home equ 00010H 1421ExP4Home equ 00018H 1422ExP5 equ 00020H 1423ExXmm6 equ 00030H 1424ExXmm7 equ 00040H 1425ExXmm8 equ 00050H 1426ExXmm9 equ 00060H 1427ExXmm10 equ 00070H 1428ExXmm11 equ 00080H 1429ExXmm12 equ 00090H 1430ExXmm13 equ 000A0H 1431ExXmm14 equ 000B0H 1432ExXmm15 equ 000C0H 1433ExMxCsr equ 000F0H 1434ExRbp equ 000F8H 1435ExRbx equ 00100H 1436ExRdi equ 00108H 1437ExRsi equ 00110H 1438ExR12 equ 00118H 1439ExR13 equ 00120H 1440ExR14 equ 00128H 1441ExR15 equ 00130H 1442ExReturn equ 00138H 1443 1444KEXCEPTION_FRAME_LENGTH equ 00140H 1445EXCEPTION_RECORD_LENGTH equ 000A0H 1446 1447Enable_Feature_DTrace equ 00001H 1448 1449; 1450; Kernel Dynamic Tracing flags 1451; 1452 1453KI_DYNAMIC_TRACE_SYSCALL_FLAG equ 00001H 1454 1455 1456; 1457; Processor Descriptor Area definitions 1458; 1459 1460PdaGdt equ 02FB0H 1461PdaKernelGsBase equ 01070H 1462PdaIdleStack equ 01078H 1463PdaKernelTransitionStack equ 04200H 1464PdaMceTransitionStack equ 04600H 1465PdaNmiTransitionStack equ 04800H 1466KSHADOW_FLAG_DEFERRED_FLUSH equ 00001H 1467KSHADOW_FLAG_DEFERRED_FLUSH_BIT equ 00000H 1468KSHADOW_FLAG_KERNEL_DIRECTORY equ 00002H 1469KSHADOW_FLAG_KERNEL_DIRECTORY_BIT equ 00001H 1470 1471 1472; 1473; IST Base Frame definitions 1474; 1475 1476IbfKernelGsBase equ 00000H 1477IbfIstStack equ 00008H 1478IbfPreviousGsBase equ 00010H 1479IbfPreviousCr3 equ 00018H 1480IstBaseFrameLength equ 00030H 1481IstLinkFrameLength equ 00020H 1482IST_TRANSITION_STACK_SIZE equ 001D0H 1483 1484 1485; 1486; IST Link Frame definitions 1487; 1488 1489KIST_LINK_FRAME_SIGNATURE equ 0464C494BH 1490IlfIstBaseFrame equ 00000H 1491IlfSignature equ 00008H 1492IstLinkFrameLength equ 00020H 1493 1494 1495; 1496; PCID definitions 1497; 1498 1499PCID_MASK equ 00003H 1500PCID_USER equ 00001H 1501PCID_USER_BIT equ 00000H 1502PCID_KERNEL equ 00002H 1503PCID_KERNEL_BIT equ 00001H 1504PCID_PRESERVE_TB_BIT equ 0003FH 1505 1506KI_FLUSH_PCID equ 00001H 1507KI_FLUSH_INVPCID equ 00002H 1508 1509KvaShadowEnabledUserGlobal equ 00002H 1510 1511; 1512; Jump Offset Definitions and Length 1513; 1514 1515JbFrame equ 00000H 1516JbRbx equ 00008H 1517JbRsp equ 00010H 1518JbRbp equ 00018H 1519JbRsi equ 00020H 1520JbRdi equ 00028H 1521JbR12 equ 00030H 1522JbR13 equ 00038H 1523JbR14 equ 00040H 1524JbR15 equ 00048H 1525JbRip equ 00050H 1526JbMxCsr equ 00058H 1527JbFpCsr equ 0005CH 1528JbSpare equ 0005EH 1529JbXmm6 equ 00060H 1530JbXmm7 equ 00070H 1531JbXmm8 equ 00080H 1532JbXmm9 equ 00090H 1533JbXmm10 equ 000A0H 1534JbXmm11 equ 000B0H 1535JbXmm12 equ 000C0H 1536JbXmm13 equ 000D0H 1537JbXmm14 equ 000E0H 1538JbXmm15 equ 000F0H 1539 1540; 1541; Switch Frame Offset Definitions and Length 1542; 1543 1544SwP5Home equ 00020H 1545SwApcBypass equ 00028H 1546SwRbp equ 00030H 1547SwReturn equ 00038H 1548 1549KSWITCH_FRAME_LENGTH equ 00040H 1550 1551; 1552; Start System Thread Frame Offset Definitions and Length 1553; 1554 1555SfP1Home equ 00000H 1556SfP2Home equ 00008H 1557SfP3Home equ 00010H 1558SfP4Home equ 00018H 1559SfReturn equ 00028H 1560 1561KSTART_FRAME_LENGTH equ 00030H 1562 1563; 1564; Trap Frame Offset and EFLAG Definitions and Length 1565; 1566 1567EFLAGS_TF_MASK equ 00100H 1568EFLAGS_TF_SHIFT equ 00008H 1569EFLAGS_ID_MASK equ 0200000H 1570EFLAGS_AC_MASK equ 040000H 1571EFLAGS_IF_MASK equ 00200H 1572EFLAGS_IF_SHIFT equ 00009H 1573EFLAGS_IF_BIT equ 00009H 1574KEXCEPTION_ACTIVE_INTERRUPT_FRAME equ 00000H 1575KEXCEPTION_ACTIVE_EXCEPTION_FRAME equ 00001H 1576KEXCEPTION_ACTIVE_SERVICE_FRAME equ 00002H 1577 1578TrP1Home equ 0FFFFFF80H 1579TrP2Home equ 0FFFFFF88H 1580TrP3Home equ 0FFFFFF90H 1581TrP4Home equ 0FFFFFF98H 1582TrP5 equ 0FFFFFFA0H 1583TrPreviousMode equ 0FFFFFFA8H 1584TrPreviousIrql equ 0FFFFFFA9H 1585TrFaultIndicator equ 0FFFFFFAAH 1586TrExceptionActive equ 0FFFFFFABH 1587TrMxCsr equ 0FFFFFFACH 1588TrRax equ 0FFFFFFB0H 1589TrRcx equ 0FFFFFFB8H 1590TrRdx equ 0FFFFFFC0H 1591TrR8 equ 0FFFFFFC8H 1592TrR9 equ 0FFFFFFD0H 1593TrR10 equ 0FFFFFFD8H 1594TrR11 equ 0FFFFFFE0H 1595TrGsBase equ 0FFFFFFE8H 1596TrGsSwap equ 0FFFFFFE8H 1597TrXmm0 equ 0FFFFFFF0H 1598TrXmm1 equ 00000H 1599TrXmm2 equ 00010H 1600TrXmm3 equ 00020H 1601TrXmm4 equ 00030H 1602TrXmm5 equ 00040H 1603TrFaultAddress equ 00050H 1604TrDr0 equ 00058H 1605TrDr1 equ 00060H 1606TrDr2 equ 00068H 1607TrDr3 equ 00070H 1608TrDr6 equ 00078H 1609TrDr7 equ 00080H 1610TrShadowStackFrame equ 00058H 1611TrDebugControl equ 00088H 1612TrLastBranchToRip equ 00090H 1613TrLastBranchFromRip equ 00098H 1614TrLastExceptionToRip equ 000A0H 1615TrLastExceptionFromRip equ 000A8H 1616TrSegDs equ 000B0H 1617TrSegEs equ 000B2H 1618TrSegFs equ 000B4H 1619TrSegGs equ 000B6H 1620TrTrapFrame equ 000B8H 1621TrRbx equ 000C0H 1622TrRdi equ 000C8H 1623TrRsi equ 000D0H 1624TrRbp equ 000D8H 1625TrErrorCode equ 000E0H 1626TrRip equ 000E8H 1627TrSegCs equ 000F0H 1628TrLogging equ 000F3H 1629TrEFlags equ 000F8H 1630TrRsp equ 00100H 1631TrSegSs equ 00108H 1632; 1633; 1634 1635KTRAP_FRAME_LENGTH equ 00190H 1636 1637; 1638; CPU information structure offset definitions 1639; 1640 1641CpuEax equ 00000H 1642CpuEbx equ 00004H 1643CpuEcx equ 00008H 1644CpuEdx equ 0000CH 1645 1646; 1647; Usermode Callout User Frame Definitions 1648; 1649 1650CkBuffer equ 00020H 1651CkLength equ 00028H 1652CkApiNumber equ 0002CH 1653CkRsp equ 00048H 1654CkRip equ 00030H 1655CalloutFrameLength equ 00058H 1656 1657; 1658; Machine Frame Offset Definitions 1659; 1660 1661MfRip equ 00000H 1662MfSegCs equ 00008H 1663MfEFlags equ 00010H 1664MfRsp equ 00018H 1665MfSegSs equ 00020H 1666MachineFrameLength equ 00028H 1667 1668; 1669; Shadow Stack Machine Frame Offset Definitions 1670; 1671 1672SmSsp equ 00000H 1673SmRip equ 00008H 1674SmSegCs equ 00010H 1675 1676; 1677; DPC Stack Frame Defintions 1678; 1679 1680DpRsp equ 00040H 1681DpRip equ 00028H 1682DpP5 equ 00020H 1683DpcStackFrameLength equ 00050H 1684 1685; 1686; Context Frame Offset and Flag Definitions 1687; 1688 1689CONTEXT_FULL equ 010000BH 1690CONTEXT_CONTROL equ 0100001H 1691CONTEXT_INTEGER equ 0100002H 1692CONTEXT_SEGMENTS equ 0100004H 1693CONTEXT_FLOATING_POINT equ 0100008H 1694CONTEXT_DEBUG_REGISTERS equ 0100010H 1695CONTEXT_XSTATE equ 0100040H 1696CONTEXT_KERNEL_CET equ 0100080H 1697 1698CxP1Home equ 00000H 1699CxP2Home equ 00008H 1700CxP3Home equ 00010H 1701CxP4Home equ 00018H 1702CxP5Home equ 00020H 1703CxP6Home equ 00028H 1704CxContextFlags equ 00030H 1705CxMxCsr equ 00034H 1706CxSegCs equ 00038H 1707CxSegDs equ 0003AH 1708CxSegEs equ 0003CH 1709CxSegFs equ 0003EH 1710CxSegGs equ 00040H 1711CxSegSs equ 00042H 1712CxEFlags equ 00044H 1713CxDr0 equ 00048H 1714CxDr1 equ 00050H 1715CxDr2 equ 00058H 1716CxDr3 equ 00060H 1717CxDr6 equ 00068H 1718CxDr7 equ 00070H 1719CxRax equ 00078H 1720CxRcx equ 00080H 1721CxRdx equ 00088H 1722CxRbx equ 00090H 1723CxRsp equ 00098H 1724CxRbp equ 000A0H 1725CxRsi equ 000A8H 1726CxRdi equ 000B0H 1727CxR8 equ 000B8H 1728CxR9 equ 000C0H 1729CxR10 equ 000C8H 1730CxR11 equ 000D0H 1731CxR12 equ 000D8H 1732CxR13 equ 000E0H 1733CxR14 equ 000E8H 1734CxR15 equ 000F0H 1735CxRip equ 000F8H 1736CxFltSave equ 00100H 1737CxXmm0 equ 001A0H 1738CxXmm1 equ 001B0H 1739CxXmm2 equ 001C0H 1740CxXmm3 equ 001D0H 1741CxXmm4 equ 001E0H 1742CxXmm5 equ 001F0H 1743CxXmm6 equ 00200H 1744CxXmm7 equ 00210H 1745CxXmm8 equ 00220H 1746CxXmm9 equ 00230H 1747CxXmm10 equ 00240H 1748CxXmm11 equ 00250H 1749CxXmm12 equ 00260H 1750CxXmm13 equ 00270H 1751CxXmm14 equ 00280H 1752CxXmm15 equ 00290H 1753CxDebugControl equ 004A8H 1754CxLastBranchToRip equ 004B0H 1755CxLastBranchFromRip equ 004B8H 1756CxLastExceptionToRip equ 004C0H 1757CxLastExceptionFromRip equ 004C8H 1758CxVectorControl equ 004A0H 1759CxVectorRegister equ 00300H 1760CONTEXT_FRAME_LENGTH equ 004D0H 1761CONTEXT_EX_LENGTH equ 00020H 1762 1763; 1764; Debug Control Register Masks 1765; 1766 1767DR7_LEGAL equ 0FFFF0355H 1768DR7_ACTIVE equ 00355H 1769DR7_TRACE_BRANCH equ 00200H 1770DR7_LAST_BRANCH equ 00100H 1771DEBUG_ACTIVE_DR7 equ 00001H 1772DEBUG_ACTIVE_INSTRUMENTED equ 00002H 1773DEBUG_ACTIVE_DBG_INSTRUMENTED equ 00003H 1774DEBUG_ACTIVE_MINIMAL_THREAD equ 00004H 1775DEBUG_ACTIVE_SET_CONTEXT_STATE_LOCK_BIT equ 0001BH 1776DEBUG_ACTIVE_SET_CONTEXT_STATE_LOCK equ 08000000H 1777 1778; 1779; Continue Argument Structure Definitions 1780; 1781 1782KCONTINUE_INVALID equ 00004H 1783KCONTINUE_ARGUMENT_LENGTH equ 00020H 1784 1785; 1786; SK Shadow Stack Assist Operation Definitions 1787; 1788 1789SkShadowStackAssistDebugTrapCopyFrame equ 00002H 1790 1791; 1792; Dispatcher Context Structure Offset Definitions 1793; 1794 1795DcControlPc equ 00000H 1796DcImageBase equ 00008H 1797DcFunctionEntry equ 00010H 1798DcEstablisherFrame equ 00018H 1799DcTargetIp equ 00020H 1800DcContextRecord equ 00028H 1801DcLanguageHandler equ 00030H 1802DcHandlerData equ 00038H 1803DcHistoryTable equ 00040H 1804DcScopeIndex equ 00048H 1805 1806; 1807; Legacy Floating Save Area Structure Offset definitions 1808; 1809 1810LfControlWord equ 00000H 1811LfStatusWord equ 00002H 1812LfTagWord equ 00004H 1813LfErrorOpcode equ 00006H 1814LfErrorOffset equ 00008H 1815LfErrorSelector equ 0000CH 1816LfDataOffset equ 00010H 1817LfDataSelector equ 00014H 1818LfMxCsr equ 00018H 1819LfMxCsr_Mask equ 0001CH 1820LfFloatRegisters equ 00020H 1821LfXmmRegisters equ 000A0H 1822LfFloatSaveLength equ 00200H 1823X87ErrorOffset equ 0000CH 1824X87FloatSaveLength equ 0006CH 1825 1826 1827; 1828; Processor State Frame Offset Definitions 1829; 1830 1831PsSpecialRegisters equ 00000H 1832PsCr0 equ 00000H 1833PsCr2 equ 00008H 1834PsCr3 equ 00010H 1835PsCr4 equ 00018H 1836PsKernelDr0 equ 00020H 1837PsKernelDr1 equ 00028H 1838PsKernelDr2 equ 00030H 1839PsKernelDr3 equ 00038H 1840PsKernelDr6 equ 00040H 1841PsKernelDr7 equ 00048H 1842PsGdtr equ 00056H 1843PsIdtr equ 00066H 1844PsTr equ 00070H 1845PsLdtr equ 00072H 1846PsMxCsr equ 00074H 1847PsMsrGsBase equ 000A8H 1848PsMsrGsSwap equ 000B0H 1849PsMsrStar equ 000B8H 1850PsMsrLStar equ 000C0H 1851PsMsrCStar equ 000C8H 1852PsMsrSyscallMask equ 000D0H 1853PsXcr0 equ 000D8H 1854PsMsrFsBase equ 000E0H 1855PsContextFrame equ 000F0H 1856PsDebugControl equ 00078H 1857PsLastBranchToRip equ 00080H 1858PsLastBranchFromRip equ 00088H 1859PsLastExceptionToRip equ 00090H 1860PsLastExceptionFromRip equ 00098H 1861PsCr8 equ 000A0H 1862ProcessorStateLength equ 005C0H 1863 1864; 1865; Processor Start Block Offset Definitions 1866; 1867 1868PsbCompletionFlag equ 00004H 1869PsbGdt32 equ 0000CH 1870PsbIdt32 equ 00012H 1871PsbGdt equ 00018H 1872PsbTiledMemoryMap equ 00058H 1873PsbPmTarget equ 00060H 1874PsbLmTarget equ 00070H 1875PsbLmIdentityTarget equ 00066H 1876PsbSelfMap equ 00078H 1877PsbMsrPat equ 00080H 1878PsbMsrEFER equ 00088H 1879PsbProcessorState equ 00090H 1880PsbFlags equ 00008H 1881PROCESSOR_START_FLAG_FORCE_ENABLE_NX equ 00001H 1882PROCESSOR_START_FLAG_LA57 equ 00002H 1883PROCESSOR_START_FLAG_HIDDEN equ 00004H 1884ProcessorStartBlockLength equ 00650H 1885XHF_NOEXECUTE equ 0100000H 1886 1887; 1888; MCE Recovery Context Offset Definitions 1889; 1890 1891MrcFlags equ 00000H 1892MrcPhysicalAddress equ 00008H 1893MrcRecord equ 00008H 1894MceRecoveryContextLength equ 00010H 1895 1896; 1897; MCE Recovery Context Flags Definitions 1898; 1899 1900KMRC_ALTERNATE_CONTEXT equ 00001H 1901KMRC_WORK_ITEM equ 00002H 1902KMRC_OFFLINE_PAGE equ 00004H 1903KMRC_TERMINATE_PROCESS equ 00008H 1904KMRC_KERNEL_CONSUMER equ 00010H 1905 1906; 1907; KTHREAD 1908; 1909 1910ThNpxState equ 00250H 1911ThThreadFlags2 equ 00200H 1912ThSpecCtrl equ 0007FH 1913KTHREAD_RUNNING_NON_RETPOLINE_CODE_BIT equ 00001H 1914KTHREAD_RUNNING_NON_RETPOLINE_CODE equ 00002H 1915ThKernelShadowStack equ 00408H 1916ThKernelShadowStackBase equ 00418H 1917ThKernelShadowStackInitial equ 00410H 1918ThKernelShadowStackLimit equ 00420H 1919ThExtendedFeatureDisableMask equ 00428H 1920 1921; 1922; ETHREAD 1923; 1924 1925ThSetContextState equ 00668H 1926ThUserFsBase equ 00638H 1927ThUserGsBase equ 00640H 1928PICO_SYSTEM_CALL equ 00008H 1929 1930; 1931; EPROCESS 1932; 1933 1934EpDebugPort equ 00578H 1935EpWoW64Process equ 00580H 1936EpFlags3 equ 0087CH 1937PS_PROCESS_FLAGS3_SECURITY_DOMAIN_CHANGED_V equ 00015H 1938PS_PROCESS_MITIGATION_FLAGS2_CET_RELATED equ 0C0F6C000H 1939; 1940; 1941 1942; 1943; Machine type definitions (Temporarily) 1944; 1945 1946MACHINE_TYPE_ISA equ 00000H 1947MACHINE_TYPE_EISA equ 00001H 1948MACHINE_TYPE_MCA equ 00002H 1949 1950; 1951; KeFeatureBits defines 1952; 1953 1954KF_RDTSC equ 00002H 1955KF_RDTSCP equ 00000000400000000H 1956KF_CR4 equ 00004H 1957KF_GLOBAL_PAGE equ 00010H 1958KF_LARGE_PAGE equ 00020H 1959KF_CMPXCHG8B equ 00080H 1960KF_FAST_SYSCALL equ 01000H 1961KF_BRANCH equ 020000H 1962KF_XSTATE equ 0800000H 1963KF_XSAVEOPT_BIT equ 0000FH 1964KF_XSTATE_BIT equ 00017H 1965KF_XSAVES_BIT equ 00026H 1966KF_RDWRFSGSBASE_BIT equ 0001CH 1967KF_CET_SS equ 00000400000000000H 1968KF_XFD equ 00080000000000000H 1969KF_FPU_LEAKAGE_BIT equ 00029H 1970KF_CAT_BIT equ 0002CH 1971KF_XFD_BIT equ 00037H 1972 1973; 1974; LoaderParameterBlock offsets relative to base 1975; 1976 1977LpbKernelStack equ 00080H 1978LpbPrcb equ 00088H 1979LpbProcess equ 00090H 1980LpbThread equ 00098H 1981PAGE_SIZE equ 01000H 1982 1983; 1984; Kernel Mode Callout Frame Definitions 1985; 1986 1987CuTrapFrame equ 000D0H 1988CuOutputBuffer equ 000D8H 1989CuOutputLength equ 000E0H 1990 1991; 1992; Enclave call dispatch frame 1993; 1994 1995EcEnclaveNumber equ 00020H 1996EcParameterAddress equ 00028H 1997EcParameterValue equ 00030H 1998EcOriginalReturn equ 00038H 1999EcFramePointer equ 00040H 2000EcReturnAddress equ 00048H 2001 2002; 2003; Hypervisor Enlightenment Definitions 2004; 2005 2006HV_MMU_USE_HYPERCALL_FOR_ADDRESS_SWITCH equ 00001H 2007HV_MMU_USE_HYPERCALL_FOR_LOCAL_FLUSH equ 00002H 2008HV_MMU_USE_HYPERCALL_FOR_REMOTE_FLUSH equ 00004H 2009HV_APIC_ENLIGHTENED equ 00010H 2010HV_KE_USE_HYPERCALL_FOR_LONG_SPIN_WAIT equ 00040H 2011HV_DEPRECATE_AUTO_EOI equ 01000H 2012HV_X64_MSR_EOI equ 040000070H 2013HV_X64_MSR_ICR equ 040000071H 2014HV_X64_MSR_TSC_FREQUENCY equ 040000022H 2015APIC_DELIVER_NMI equ 00400H 2016LAPIC_ICR_SELF equ 040000H 2017HV_VIRTUAL_APIC_NO_EOI_REQUIRED equ 00000H 2018HvApicFlags equ 00000H 2019HvVirtualFaultCode equ 00044H 2020HvVirtualFaultParam equ 00048H 2021HvExtVirtualizationFaultEpf equ 00001H 2022 2023; 2024; IO Status Block Offset Definitions 2025; 2026 2027IoStatus equ 00000H 2028IoPointer equ 00000H 2029IoInformation equ 00008H 2030 2031; 2032; KAFFINITY_EX size 2033; 2034 2035AffinityExLength equ 00108H 2036 2037; 2038; WoW Compatibility mode transition thunk 2039; 2040 2041ServiceCpupReturnFromSimulatedCode equ 0001FH 2042HV_VECTOR equ 00030H 2043; 2044