10.0.19042.985内核结构

kd> dt ndis!_NDIS_FILTER_BLOCK
   +0x000 Header           : _NDIS_OBJECT_HEADER
   +0x008 NextFilter       : Ptr64 _NDIS_FILTER_BLOCK
   +0x010 FilterDriver     : Ptr64 _NDIS_FILTER_DRIVER_BLOCK
   +0x018 FilterModuleContext : Ptr64 Void
   +0x020 Miniport         : Ptr64 _NDIS_MINIPORT_BLOCK
   +0x028 FilterInstanceName : wistd::unique_ptr<Rtl::KString,wistd::default_delete<Rtl::KString> >
   +0x030 FilterFriendlyName : Ptr64 _UNICODE_STRING
   +0x038 Flags            : Uint4B
   +0x03c StackFlags       : Uint4B
   +0x040 State            : _NDIS_FILTER_STATE
   +0x048 Ref              : _REFERENCE_EX
   +0x060 FakeStatus       : Int4B
   +0x068 NextGlobalFilter : Ptr64 _NDIS_FILTER_BLOCK
   +0x070 LowerFilter      : Ptr64 _NDIS_FILTER_BLOCK
   +0x078 HigherFilter     : Ptr64 _NDIS_FILTER_BLOCK
   +0x080 AsyncOpContext   : Ptr64 _FILTER_PAUSE_RESTART_CONTEXT
   +0x088 NumOfPauseRestartRequests : Int4B
   +0x090 Lock             : Uint8B
   +0x098 LockThread       : Ptr64 Void
   +0x0a0 OidRequestList   : _LIST_ENTRY
   +0x0b0 PendingOidRequest : Ptr64 _NDIS_OID_REQUEST
   +0x0b8 PendingOidWatchdog : wil::unique_any_t<wil::details::unique_storage<wil::details::resource_policy<NDISWATCHDOG__ *,void (__cdecl*)(NDISWATCHDOG__ *),&ndisFreeWatchdog,wistd::integral_constant<unsigned __int64,1>,NDISWATCHDOG__ *,__int64,-1,std::nullptr_t> > >
   +0x0c0 StackExpansionFallback : _NDIS_FILTER_BLOCK::<unnamed-type-StackExpansionFallback>
   +0x120 StatusIndicationsQueued : UChar
   +0x124 DroppedReceiveNbls : Int4B
   +0x128 DroppedSendNbls  : Int4B
   +0x12c DroppedStatusIndications : Uint4B
   +0x130 DroppedUncloneableStatusIndications : Uint4B
   +0x138 PnPRef           : _REFERENCE_EX
   +0x150 MediaType        : _NDIS_MEDIUM
   +0x154 PhysicalMediaType : _NDIS_PHYSICAL_MEDIUM
   +0x158 MediaConnectState : _NET_IF_MEDIA_CONNECT_STATE
   +0x15c MediaDuplexState : _NET_IF_MEDIA_DUPLEX_STATE
   +0x160 XmitLinkSpeed    : Uint8B
   +0x168 RcvLinkSpeed     : Uint8B
   +0x170 PauseFunctions   : _NDIS_SUPPORTED_PAUSE_FUNCTIONS
   +0x174 AutoNegotiationFlags : Uint4B
   +0x178 XState           : UChar
   +0x179 Reserved1        : UChar
   +0x17a Reserved2        : UChar
   +0x17b Reserved3        : UChar
   +0x17c MediaConnectStateIndicateUp : _NET_IF_MEDIA_CONNECT_STATE
   +0x180 MediaDuplexStateIndicateUp : _NET_IF_MEDIA_DUPLEX_STATE
   +0x188 XmitLinkSpeedIndicateUp : Uint8B
   +0x190 RcvLinkSpeedIndicateUp : Uint8B
   +0x198 PauseFunctionsIndicateUp : _NDIS_SUPPORTED_PAUSE_FUNCTIONS
   +0x19c AutoNegotiationFlagsIndicateUp : Uint4B
   +0x1a0 NextRequestHandle : Ptr64 Void
   +0x1a8 IterativeDataPathTracker : Ptr64 [4] _NDIS_ITERATIVE_DATA_PATH_TRACKER_ENTRY
   +0x1b0 NextSendNetBufferListsHandler : Ptr64     void 
   +0x1b8 NextSendNetBufferListsContext : Ptr64 Void
   +0x1c0 NextSendNetBufferListsTracker : Ptr64 NDIS_NBL_TRACKER_HANDLE__
   +0x1c8 NextSendNetBufferListsObject : Ptr64 _NDIS_OBJECT_HEADER
   +0x1d0 NextSendNetBufferListsCompleteHandler : Ptr64     void 
   +0x1d8 NextSendNetBufferListsCompleteContext : Ptr64 Void
   +0x1e0 NextSendNetBufferListsCompleteTracker : Ptr64 NDIS_NBL_TRACKER_HANDLE__
   +0x1e8 NextSendNetBufferListsCompleteObject : Ptr64 _NDIS_OBJECT_HEADER
   +0x1f0 NextIndicateReceiveNetBufferListsHandler : Ptr64     void 
   +0x1f8 NextIndicateReceiveNetBufferListsContext : Ptr64 Void
   +0x200 NextIndicateReceiveNetBufferListsTracker : Ptr64 NDIS_NBL_TRACKER_HANDLE__
   +0x208 NextIndicateReceiveNetBufferListsObject : Ptr64 _NDIS_OBJECT_HEADER
   +0x210 NextReturnNetBufferListsHandler : Ptr64     void 
   +0x218 NextReturnNetBufferListsContext : Ptr64 Void
   +0x220 NextReturnNetBufferListsTracker : Ptr64 NDIS_NBL_TRACKER_HANDLE__
   +0x228 NextReturnNetBufferListsObject : Ptr64 _NDIS_OBJECT_HEADER
   +0x230 NextCancelSendNetBufferListsHandler : Ptr64     void 
   +0x238 NextCancelSendNetBufferListsContext : Ptr64 Void
   +0x240 Characteristics  : _NDIS_FILTER_PARTIAL_CHARACTERISTICS
   +0x270 FilterSendNetBufferListsHandler : Ptr64     void 
   +0x278 FilterIndicateReceiveNetBufferListsHandler : Ptr64     void 
   +0x280 FilterCancelSendNetBufferListsHandler : Ptr64     void 
   +0x288 TcpOffloadReceiveReturnHandler : Ptr64     int 
   +0x290 NblTracker       : Ptr64 NDIS_NBL_TRACKER_HANDLE__
   +0x298 Offload          : Ptr64 _NDIS_FILTER_TASK_OFFLOAD
   +0x2a0 InterfaceGuid    : _GUID
   +0x2b0 IfIndex          : Uint4B
   +0x2b8 IfBlock          : Ptr64 _NDIS_IF_BLOCK
   +0x2c0 NextDirectRequestHandle : Ptr64 Void
   +0x2c8 DirectOidRequestCount : Uint4B
   +0x2d0 WOLPatternList   : _SINGLE_LIST_ENTRY
   +0x2d8 PMProtocolOffloadList : _SINGLE_LIST_ENTRY
   +0x2e0 PMCurrentParameters : _NDIS_PM_PARAMETERS
   +0x2f8 Bind             : Ptr64 NDIS_BIND_FILTER_LINK
   +0x300 HwTimestampCapabilities : Ptr64 _NDIS_TIMESTAMP_CAPABILITIES
   +0x308 HwTimestampCurrentConfig : Ptr64 _NDIS_TIMESTAMP_CAPABILITIES
   +0x310 VerifierContext  : Ptr64 Void
   +0x318 PktMonComp       : _PKTMON_COMPONENT_CONTEXT
   +0x328 PktMonEdgeLower  : _PKTMON_EDGE_CONTEXT
   +0x340 PktMonEdgeUpper  : _PKTMON_EDGE_CONTEXT
kd> dt ndis!_NDIS_IF_BLOCK
   +0x000 Type             : UChar
   +0x001 Revision         : UChar
   +0x002 Size             : Uint2B
   +0x004 ifIndex          : Uint4B
   +0x008 ifDescr          : _IF_COUNTED_STRING_LH
   +0x20c ifType           : Uint2B
   +0x210 AccessType       : _NET_IF_ACCESS_TYPE
   +0x214 DirectionType    : _NET_IF_DIRECTION_TYPE
   +0x218 ConnectionType   : _NET_IF_CONNECTION_TYPE
   +0x21c InterfaceGuid    : _GUID
   +0x22c ifConnectorPresent : UChar
   +0x230 ifFlags          : Uint4B
   +0x234 MediaType        : _NDIS_MEDIUM
   +0x238 PhysicalMediumType : _NDIS_PHYSICAL_MEDIUM
   +0x240 CompartmentId    : Uint4B
   +0x244 NetworkGuid      : _GUID
   +0x254 ifAlias          : _IF_COUNTED_STRING_LH
   +0x458 ifOperStatus     : _NET_IF_OPER_STATUS
   +0x45c ifOperStatusFlags : Uint4B
   +0x460 ifMtu            : Uint4B
   +0x464 ifPhysAddress    : _IF_PHYSICAL_ADDRESS_LH
   +0x486 PermanentPhysAddress : _IF_PHYSICAL_ADDRESS_LH
   +0x4a8 ifAdminStatus    : _NET_IF_ADMIN_STATUS
   +0x4b0 XmitLinkSpeed    : Uint8B
   +0x4b8 RcvLinkSpeed     : Uint8B
   +0x4c0 ifPromiscuousMode : UChar
   +0x4c1 ifDeviceWakeUpEnable : UChar
   +0x4c2 ifHideInterfaceInUi : UChar
   +0x4c4 MediaConnectState : _NET_IF_MEDIA_CONNECT_STATE
   +0x4c8 MediaDuplexState : _NET_IF_MEDIA_DUPLEX_STATE
   +0x4d0 Link             : _LIST_ENTRY
   +0x4e0 ProviderLink     : _LIST_ENTRY
   +0x4f0 NetworkLink      : _LIST_ENTRY
   +0x500 ifRcvAddressTable : Ptr64 _NDIS_IF_RCV_ADDRESS
   +0x508 ifRcvAddressCount : Uint4B
   +0x50c ifMaxRcvAddressCount : Uint4B
   +0x510 LowerLayerIfCount : Uint4B
   +0x514 HigherLayerIfCount : Uint4B
   +0x518 Ref              : Int4B
   +0x520 NetLuid          : _NET_LUID_LH
   +0x528 ProviderIfContext : Ptr64 Void
   +0x530 ProviderHandle   : Ptr64 _NDIS_IF_PROVIDER_BLOCK
   +0x538 Flags            : Uint4B
   +0x53c WanTunnelType    : Uint4B
   +0x540 PortNumber       : Uint4B
   +0x548 ifLastChange     : Uint8B
   +0x550 ifCounterDiscontinuityTime : Uint8B
   +0x558 Network          : Ptr64 _NDIS_IF_NETWORK_BLOCK
   +0x560 Compartment      : Ptr64 _NDIS_IF_COMPARTMENT_BLOCK
   +0x568 AsyncEvent       : Ptr64 _KEVENT
   +0x570 AlreadyDeregistered : UChar
   +0x571 bNdisIsProvider  : UChar
   +0x572 IsNdisFilter     : UChar
   +0x573 MiniportAvailable : UChar
   +0x574 MiniportLinkReference : Uint4B
   +0x578 Source           : NdisIfBlockSource
   +0x580 Miniport         : Ptr64 _NDIS_MINIPORT_BLOCK
   +0x580 Filter           : Ptr64 _NDIS_FILTER_BLOCK
   +0x588 SupportedStatistics : Uint4B
   +0x590 ifL2NetworkInfo  : Ptr64 _IF_COUNTED_STRING_LH
   +0x598 RefCountTracker  : Ptr64 NDIS_REFCOUNT_HANDLE__
   +0x5a0 MpRefCountTracker : Ptr64 NDIS_REFCOUNT_HANDLE__
   +0x5a8 InterlockedFlags : Uint4B
   +0x5ac LastMiniportFatalErrorReason : _NDIS_MINIPORT_EVENT
   +0x5b0 MiniportFatalErrorTimestamp : [3] Uint8B
   +0x5c8 MiniportFatalErrorTimestampIndex : UChar
   +0x5c9 NetworkIdOverridden : UChar
   +0x5ca IsWDFMiniportInterface : UChar
   +0x5cc ifPurpose        : _NDIS_NSI_INTERFACE_PURPOSE
   +0x5d0 PcwDataBlock     : Ptr64 _NDIS_PCW_DATA_BLOCK
kd> dt nt!_EPROCESS
   +0x000 Pcb              : _KPROCESS
   +0x438 ProcessLock      : _EX_PUSH_LOCK
   +0x440 UniqueProcessId  : Ptr64 Void
   +0x448 ActiveProcessLinks : _LIST_ENTRY
   +0x458 RundownProtect   : _EX_RUNDOWN_REF
   +0x460 Flags2           : Uint4B
   +0x460 JobNotReallyActive : Pos 0, 1 Bit
   +0x460 AccountingFolded : Pos 1, 1 Bit
   +0x460 NewProcessReported : Pos 2, 1 Bit
   +0x460 ExitProcessReported : Pos 3, 1 Bit
   +0x460 ReportCommitChanges : Pos 4, 1 Bit
   +0x460 LastReportMemory : Pos 5, 1 Bit
   +0x460 ForceWakeCharge  : Pos 6, 1 Bit
   +0x460 CrossSessionCreate : Pos 7, 1 Bit
   +0x460 NeedsHandleRundown : Pos 8, 1 Bit
   +0x460 RefTraceEnabled  : Pos 9, 1 Bit
   +0x460 PicoCreated      : Pos 10, 1 Bit
   +0x460 EmptyJobEvaluated : Pos 11, 1 Bit
   +0x460 DefaultPagePriority : Pos 12, 3 Bits
   +0x460 PrimaryTokenFrozen : Pos 15, 1 Bit
   +0x460 ProcessVerifierTarget : Pos 16, 1 Bit
   +0x460 RestrictSetThreadContext : Pos 17, 1 Bit
   +0x460 AffinityPermanent : Pos 18, 1 Bit
   +0x460 AffinityUpdateEnable : Pos 19, 1 Bit
   +0x460 PropagateNode    : Pos 20, 1 Bit
   +0x460 ExplicitAffinity : Pos 21, 1 Bit
   +0x460 ProcessExecutionState : Pos 22, 2 Bits
   +0x460 EnableReadVmLogging : Pos 24, 1 Bit
   +0x460 EnableWriteVmLogging : Pos 25, 1 Bit
   +0x460 FatalAccessTerminationRequested : Pos 26, 1 Bit
   +0x460 DisableSystemAllowedCpuSet : Pos 27, 1 Bit
   +0x460 ProcessStateChangeRequest : Pos 28, 2 Bits
   +0x460 ProcessStateChangeInProgress : Pos 30, 1 Bit
   +0x460 InPrivate        : Pos 31, 1 Bit
   +0x464 Flags            : Uint4B
   +0x464 CreateReported   : Pos 0, 1 Bit
   +0x464 NoDebugInherit   : Pos 1, 1 Bit
   +0x464 ProcessExiting   : Pos 2, 1 Bit
   +0x464 ProcessDelete    : Pos 3, 1 Bit
   +0x464 ManageExecutableMemoryWrites : Pos 4, 1 Bit
   +0x464 VmDeleted        : Pos 5, 1 Bit
   +0x464 OutswapEnabled   : Pos 6, 1 Bit
   +0x464 Outswapped       : Pos 7, 1 Bit
   +0x464 FailFastOnCommitFail : Pos 8, 1 Bit
   +0x464 Wow64VaSpace4Gb  : Pos 9, 1 Bit
   +0x464 AddressSpaceInitialized : Pos 10, 2 Bits
   +0x464 SetTimerResolution : Pos 12, 1 Bit
   +0x464 BreakOnTermination : Pos 13, 1 Bit
   +0x464 DeprioritizeViews : Pos 14, 1 Bit
   +0x464 WriteWatch       : Pos 15, 1 Bit
   +0x464 ProcessInSession : Pos 16, 1 Bit
   +0x464 OverrideAddressSpace : Pos 17, 1 Bit
   +0x464 HasAddressSpace  : Pos 18, 1 Bit
   +0x464 LaunchPrefetched : Pos 19, 1 Bit
   +0x464 Background       : Pos 20, 1 Bit
   +0x464 VmTopDown        : Pos 21, 1 Bit
   +0x464 ImageNotifyDone  : Pos 22, 1 Bit
   +0x464 PdeUpdateNeeded  : Pos 23, 1 Bit
   +0x464 VdmAllowed       : Pos 24, 1 Bit
   +0x464 ProcessRundown   : Pos 25, 1 Bit
   +0x464 ProcessInserted  : Pos 26, 1 Bit
   +0x464 DefaultIoPriority : Pos 27, 3 Bits
   +0x464 ProcessSelfDelete : Pos 30, 1 Bit
   +0x464 SetTimerResolutionLink : Pos 31, 1 Bit
   +0x468 CreateTime       : _LARGE_INTEGER
   +0x470 ProcessQuotaUsage : [2] Uint8B
   +0x480 ProcessQuotaPeak : [2] Uint8B
   +0x490 PeakVirtualSize  : Uint8B
   +0x498 VirtualSize      : Uint8B
   +0x4a0 SessionProcessLinks : _LIST_ENTRY
   +0x4b0 ExceptionPortData : Ptr64 Void
   +0x4b0 ExceptionPortValue : Uint8B
   +0x4b0 ExceptionPortState : Pos 0, 3 Bits
   +0x4b8 Token            : _EX_FAST_REF
   +0x4c0 MmReserved       : Uint8B
   +0x4c8 AddressCreationLock : _EX_PUSH_LOCK
   +0x4d0 PageTableCommitmentLock : _EX_PUSH_LOCK
   +0x4d8 RotateInProgress : Ptr64 _ETHREAD
   +0x4e0 ForkInProgress   : Ptr64 _ETHREAD
   +0x4e8 CommitChargeJob  : Ptr64 _EJOB
   +0x4f0 CloneRoot        : _RTL_AVL_TREE
   +0x4f8 NumberOfPrivatePages : Uint8B
   +0x500 NumberOfLockedPages : Uint8B
   +0x508 Win32Process     : Ptr64 Void
   +0x510 Job              : Ptr64 _EJOB
   +0x518 SectionObject    : Ptr64 Void
   +0x520 SectionBaseAddress : Ptr64 Void
   +0x528 Cookie           : Uint4B
   +0x530 WorkingSetWatch  : Ptr64 _PAGEFAULT_HISTORY
   +0x538 Win32WindowStation : Ptr64 Void
   +0x540 InheritedFromUniqueProcessId : Ptr64 Void
   +0x548 OwnerProcessId   : Uint8B
   +0x550 Peb              : Ptr64 _PEB
   +0x558 Session          : Ptr64 _MM_SESSION_SPACE
   +0x560 Spare1           : Ptr64 Void
   +0x568 QuotaBlock       : Ptr64 _EPROCESS_QUOTA_BLOCK
   +0x570 ObjectTable      : Ptr64 _HANDLE_TABLE
   +0x578 DebugPort        : Ptr64 Void
   +0x580 WoW64Process     : Ptr64 _EWOW64PROCESS
   +0x588 DeviceMap        : Ptr64 Void
   +0x590 EtwDataSource    : Ptr64 Void
   +0x598 PageDirectoryPte : Uint8B
   +0x5a0 ImageFilePointer : Ptr64 _FILE_OBJECT
   +0x5a8 ImageFileName    : [15] UChar
   +0x5b7 PriorityClass    : UChar
   +0x5b8 SecurityPort     : Ptr64 Void
   +0x5c0 SeAuditProcessCreationInfo : _SE_AUDIT_PROCESS_CREATION_INFO
   +0x5c8 JobLinks         : _LIST_ENTRY
   +0x5d8 HighestUserAddress : Ptr64 Void
   +0x5e0 ThreadListHead   : _LIST_ENTRY
   +0x5f0 ActiveThreads    : Uint4B
   +0x5f4 ImagePathHash    : Uint4B
   +0x5f8 DefaultHardErrorProcessing : Uint4B
   +0x5fc LastThreadExitStatus : Int4B
   +0x600 PrefetchTrace    : _EX_FAST_REF
   +0x608 LockedPagesList  : Ptr64 Void
   +0x610 ReadOperationCount : _LARGE_INTEGER
   +0x618 WriteOperationCount : _LARGE_INTEGER
   +0x620 OtherOperationCount : _LARGE_INTEGER
   +0x628 ReadTransferCount : _LARGE_INTEGER
   +0x630 WriteTransferCount : _LARGE_INTEGER
   +0x638 OtherTransferCount : _LARGE_INTEGER
   +0x640 CommitChargeLimit : Uint8B
   +0x648 CommitCharge     : Uint8B
   +0x650 CommitChargePeak : Uint8B
   +0x680 Vm               : _MMSUPPORT_FULL
   +0x7c0 MmProcessLinks   : _LIST_ENTRY
   +0x7d0 ModifiedPageCount : Uint4B
   +0x7d4 ExitStatus       : Int4B
   +0x7d8 VadRoot          : _RTL_AVL_TREE
   +0x7e0 VadHint          : Ptr64 Void
   +0x7e8 VadCount         : Uint8B
   +0x7f0 VadPhysicalPages : Uint8B
   +0x7f8 VadPhysicalPagesLimit : Uint8B
   +0x800 AlpcContext      : _ALPC_PROCESS_CONTEXT
   +0x820 TimerResolutionLink : _LIST_ENTRY
   +0x830 TimerResolutionStackRecord : Ptr64 _PO_DIAG_STACK_RECORD
   +0x838 RequestedTimerResolution : Uint4B
   +0x83c SmallestTimerResolution : Uint4B
   +0x840 ExitTime         : _LARGE_INTEGER
   +0x848 InvertedFunctionTable : Ptr64 _INVERTED_FUNCTION_TABLE
   +0x850 InvertedFunctionTableLock : _EX_PUSH_LOCK
   +0x858 ActiveThreadsHighWatermark : Uint4B
   +0x85c LargePrivateVadCount : Uint4B
   +0x860 ThreadListLock   : _EX_PUSH_LOCK
   +0x868 WnfContext       : Ptr64 Void
   +0x870 ServerSilo       : Ptr64 _EJOB
   +0x878 SignatureLevel   : UChar
   +0x879 SectionSignatureLevel : UChar
   +0x87a Protection       : _PS_PROTECTION
   +0x87b HangCount        : Pos 0, 3 Bits
   +0x87b GhostCount       : Pos 3, 3 Bits
   +0x87b PrefilterException : Pos 6, 1 Bit
   +0x87c Flags3           : Uint4B
   +0x87c Minimal          : Pos 0, 1 Bit
   +0x87c ReplacingPageRoot : Pos 1, 1 Bit
   +0x87c Crashed          : Pos 2, 1 Bit
   +0x87c JobVadsAreTracked : Pos 3, 1 Bit
   +0x87c VadTrackingDisabled : Pos 4, 1 Bit
   +0x87c AuxiliaryProcess : Pos 5, 1 Bit
   +0x87c SubsystemProcess : Pos 6, 1 Bit
   +0x87c IndirectCpuSets  : Pos 7, 1 Bit
   +0x87c RelinquishedCommit : Pos 8, 1 Bit
   +0x87c HighGraphicsPriority : Pos 9, 1 Bit
   +0x87c CommitFailLogged : Pos 10, 1 Bit
   +0x87c ReserveFailLogged : Pos 11, 1 Bit
   +0x87c SystemProcess    : Pos 12, 1 Bit
   +0x87c HideImageBaseAddresses : Pos 13, 1 Bit
   +0x87c AddressPolicyFrozen : Pos 14, 1 Bit
   +0x87c ProcessFirstResume : Pos 15, 1 Bit
   +0x87c ForegroundExternal : Pos 16, 1 Bit
   +0x87c ForegroundSystem : Pos 17, 1 Bit
   +0x87c HighMemoryPriority : Pos 18, 1 Bit
   +0x87c EnableProcessSuspendResumeLogging : Pos 19, 1 Bit
   +0x87c EnableThreadSuspendResumeLogging : Pos 20, 1 Bit
   +0x87c SecurityDomainChanged : Pos 21, 1 Bit
   +0x87c SecurityFreezeComplete : Pos 22, 1 Bit
   +0x87c VmProcessorHost  : Pos 23, 1 Bit
   +0x87c VmProcessorHostTransition : Pos 24, 1 Bit
   +0x87c AltSyscall       : Pos 25, 1 Bit
   +0x87c TimerResolutionIgnore : Pos 26, 1 Bit
   +0x87c DisallowUserTerminate : Pos 27, 1 Bit
   +0x880 DeviceAsid       : Int4B
   +0x888 SvmData          : Ptr64 Void
   +0x890 SvmProcessLock   : _EX_PUSH_LOCK
   +0x898 SvmLock          : Uint8B
   +0x8a0 SvmProcessDeviceListHead : _LIST_ENTRY
   +0x8b0 LastFreezeInterruptTime : Uint8B
   +0x8b8 DiskCounters     : Ptr64 _PROCESS_DISK_COUNTERS
   +0x8c0 PicoContext      : Ptr64 Void
   +0x8c8 EnclaveTable     : Ptr64 Void
   +0x8d0 EnclaveNumber    : Uint8B
   +0x8d8 EnclaveLock      : _EX_PUSH_LOCK
   +0x8e0 HighPriorityFaultsAllowed : Uint4B
   +0x8e8 EnergyContext    : Ptr64 _PO_PROCESS_ENERGY_CONTEXT
   +0x8f0 VmContext        : Ptr64 Void
   +0x8f8 SequenceNumber   : Uint8B
   +0x900 CreateInterruptTime : Uint8B
   +0x908 CreateUnbiasedInterruptTime : Uint8B
   +0x910 TotalUnbiasedFrozenTime : Uint8B
   +0x918 LastAppStateUpdateTime : Uint8B
   +0x920 LastAppStateUptime : Pos 0, 61 Bits
   +0x920 LastAppState     : Pos 61, 3 Bits
   +0x928 SharedCommitCharge : Uint8B
   +0x930 SharedCommitLock : _EX_PUSH_LOCK
   +0x938 SharedCommitLinks : _LIST_ENTRY
   +0x948 AllowedCpuSets   : Uint8B
   +0x950 DefaultCpuSets   : Uint8B
   +0x948 AllowedCpuSetsIndirect : Ptr64 Uint8B
   +0x950 DefaultCpuSetsIndirect : Ptr64 Uint8B
   +0x958 DiskIoAttribution : Ptr64 Void
   +0x960 DxgProcess       : Ptr64 Void
   +0x968 Win32KFilterSet  : Uint4B
   +0x970 ProcessTimerDelay : _PS_INTERLOCKED_TIMER_DELAY_VALUES
   +0x978 KTimerSets       : Uint4B
   +0x97c KTimer2Sets      : Uint4B
   +0x980 ThreadTimerSets  : Uint4B
   +0x988 VirtualTimerListLock : Uint8B
   +0x990 VirtualTimerListHead : _LIST_ENTRY
   +0x9a0 WakeChannel      : _WNF_STATE_NAME
   +0x9a0 WakeInfo         : _PS_PROCESS_WAKE_INFORMATION
   +0x9d0 MitigationFlags  : Uint4B
   +0x9d0 MitigationFlagsValues : <anonymous-tag>
   +0x9d4 MitigationFlags2 : Uint4B
   +0x9d4 MitigationFlags2Values : <anonymous-tag>
   +0x9d8 PartitionObject  : Ptr64 Void
   +0x9e0 SecurityDomain   : Uint8B
   +0x9e8 ParentSecurityDomain : Uint8B
   +0x9f0 CoverageSamplerContext : Ptr64 Void
   +0x9f8 MmHotPatchContext : Ptr64 Void
   +0xa00 DynamicEHContinuationTargetsTree : _RTL_AVL_TREE
   +0xa08 DynamicEHContinuationTargetsLock : _EX_PUSH_LOCK
   +0xa10 DynamicEnforcedCetCompatibleRanges : _PS_DYNAMIC_ENFORCED_ADDRESS_RANGES
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值