SharedUserData

幻影梦魇

1. typedef struct _KUSER_SHARED_DATA {
   
2.     ULONG TickCountLowDeprecated;
   
3.     ULONG TickCountMultiplier;
   
4.     volatile KSYSTEM_TIME InterruptTime;
   
5.     volatile KSYSTEM_TIME SystemTime;
   
6.     volatile KSYSTEM_TIME TimeZoneBias;
   
7.     USHORT ImageNumberLow;
   
8.     USHORT ImageNumberHigh;
   
9.     WCHAR NtSystemRoot[260];
   
10.     ULONG MaxStackTraceDepth;
    
11.     ULONG CryptoExponent;
    
12.     ULONG TimeZoneId;
    
13.     ULONG LargePageMinimum;
    
14.     ULONG Reserved2[7];
    
15.     NT_PRODUCT_TYPE NtProductType;
    
16.     BOOLEAN ProductTypeIsValid;
    
17.     ULONG NtMajorVersion;
    
18.     ULONG NtMinorVersion;
    
19.     BOOLEAN ProcessorFeatures[PROCESSOR_FEATURE_MAX];
    
20.     ULONG Reserved1;
    
21.     ULONG Reserved3;
    
22.     volatile ULONG TimeSlip;
    
23.     ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture;
    
24.     LARGE_INTEGER SystemExpirationDate;
    
25.     ULONG SuiteMask;
    
26.     BOOLEAN KdDebuggerEnabled;
    
27.     volatile ULONG ActiveConsoleId;
    
28.     volatile ULONG DismountCount;
    
29.     ULONG ComPlusPackage;
    
30.     ULONG LastSystemRITEventTickCount;
    
31.     ULONG NumberOfPhysicalPages;
    
32.     BOOLEAN SafeBootMode;
    
33.     ULONG TraceLogging;
    
34.     ULONGLONG Fill0;
    
35.     UCHAR SystemCall[16];
    
36.     union {
    
37.         volatile KSYSTEM_TIME TickCount;
    
38.         volatile ULONG64 TickCountQuad;
    
39.     };
    
40. } KUSER_SHARED_DATA, *PKUSER_SHARED_DATA;

复制代码