[_KUSER_SHARED_DATA] dump

计算机天才
·
0: kd> dt _KUSER_SHARED_DATA 0xFFFFF78000000000
nt!_KUSER_SHARED_DATA
   +0x000 TickCountLowDeprecated : 0
   +0x004 TickCountMultiplier : 0xfa00000
   +0x008 InterruptTime    : _KSYSTEM_TIME
   +0x014 SystemTime       : _KSYSTEM_TIME
   +0x020 TimeZoneBias     : _KSYSTEM_TIME
   +0x02c ImageNumberLow   : 0x8664
   +0x02e ImageNumberHigh  : 0x8664
   +0x030 NtSystemRoot     : [260]  "C:\Windows"
   +0x238 MaxStackTraceDepth : 0
   +0x23c CryptoExponent   : 0
   +0x240 TimeZoneId       : 0
   +0x244 LargePageMinimum : 0x200000
   +0x248 AitSamplingValue : 0
   +0x24c AppCompatFlag    : 0
   +0x250 RNGSeedVersion   : 0xa
   +0x258 GlobalValidationRunlevel : 0
   +0x25c TimeZoneBiasStamp : 0n6
   +0x260 NtBuildNumber    : 0x4563
   +0x264 NtProductType    : 1 ( NtProductWinNt )
   +0x268 ProductTypeIsValid : 0x1 ''
   +0x269 Reserved0        : [1]  ""
   +0x26a NativeProcessorArchitecture : 9
   +0x26c NtMajorVersion   : 0xa
   +0x270 NtMinorVersion   : 0
   +0x274 ProcessorFeatures : [64]  ""
   +0x2b4 Reserved1        : 0x7ffeffff
   +0x2b8 Reserved3        : 0x80000000
   +0x2bc TimeSlip         : 0
   +0x2c0 AlternativeArchitecture : 0 ( StandardDesign )
   +0x2c4 BootId           : 0x7e
   +0x2c8 SystemExpirationDate : _LARGE_INTEGER 0x0
   +0x2d0 SuiteMask        : 0x110
   +0x2d4 KdDebuggerEnabled : 0x3 ''
   +0x2d5 MitigationPolicies : 0xa ''
   +0x2d5 NXSupportPolicy  : 0y10
   +0x2d5 SEHValidationPolicy : 0y10
   +0x2d5 CurDirDevicesSkippedForDlls : 0y00
   +0x2d5 Reserved         : 0y00
   +0x2d6 Reserved6        : [2]  ""
   +0x2d8 ActiveConsoleId  : 1
   +0x2dc DismountCount    : 0
   +0x2e0 ComPlusPackage   : 0xffffffff
   +0x2e4 LastSystemRITEventTickCount : 0x14c85
   +0x2e8 NumberOfPhysicalPages : 0x7ff7d
   +0x2ec SafeBootMode     : 0 ''
   +0x2ed VirtualizationFlags : 0x3 ''
   +0x2ee Reserved12       : [2]  ""
   +0x2f0 SharedDataFlags  : 0x10e
   +0x2f0 DbgErrorPortPresent : 0y0
   +0x2f0 DbgElevationEnabled : 0y1
   +0x2f0 DbgVirtEnabled   : 0y1
   +0x2f0 DbgInstallerDetectEnabled : 0y1
   +0x2f0 DbgLkgEnabled    : 0y0
   +0x2f0 DbgDynProcessorEnabled : 0y0
   +0x2f0 DbgConsoleBrokerEnabled : 0y0
   +0x2f0 DbgSecureBootEnabled : 0y0
   +0x2f0 DbgMultiSessionSku : 0y1
   +0x2f0 DbgMultiUsersInSessionSku : 0y0
   +0x2f0 DbgStateSeparationEnabled : 0y0
   +0x2f0 SpareBits        : 0y000000000000000000000 (0)
   +0x2f4 DataFlagsPad     : [1] 0
   +0x2f8 TestRetInstruction : 0xc3
   +0x300 QpcFrequency     : 0n10000000
   +0x308 SystemCall       : 0
   +0x30c SystemCallPad0   : 0
   +0x310 SystemCallPad    : [2] 0
   +0x320 TickCount        : _KSYSTEM_TIME
   +0x320 TickCountQuad    : 0x1efb
   +0x320 ReservedTickCountOverlay : [3] 0x1efb
   +0x32c TickCountPad     : [1] 0
   +0x330 Cookie           : 0x1ea907ec
   +0x334 CookiePad        : [1] 0
   +0x338 ConsoleSessionForegroundProcessId : 0n3368
   +0x340 TimeUpdateLock   : 0x43fc
   +0x348 BaselineSystemTimeQpc : 0x507d92ef
   +0x350 BaselineInterruptTimeQpc : 0x507d92ef
   +0x358 QpcSystemTimeIncrement : 0x80000000`00000000
   +0x360 QpcInterruptTimeIncrement : 0x80000000`00000000
   +0x368 QpcSystemTimeIncrementShift : 0x1 ''
   +0x369 QpcInterruptTimeIncrementShift : 0x1 ''
   +0x36a UnparkedProcessorCount : 2
   +0x36c EnclaveFeatureMask : [4] 0
   +0x37c TelemetryCoverageRound : 1
   +0x380 UserModeGlobalLogger : [16] 0
   +0x3a0 ImageFileExecutionOptions : 0
   +0x3a4 LangGenerationCount : 1
   +0x3a8 Reserved4        : 0
   +0x3b0 InterruptTimeBias : 0
   +0x3b8 QpcBias          : 0xffffffff`fb8dd54f
   +0x3c0 ActiveProcessorCount : 2
   +0x3c4 ActiveGroupCount : 0x1 ''
   +0x3c5 Reserved9        : 0 ''
   +0x3c6 QpcData          : 0x83
   +0x3c6 QpcBypassEnabled : 0x83 ''
   +0x3c7 QpcShift         : 0 ''
   +0x3c8 TimeZoneBiasEffectiveStart : _LARGE_INTEGER 0x01d7d30a`eb5510d9
   +0x3d0 TimeZoneBiasEffectiveEnd : _LARGE_INTEGER 0x01d7fe5f`76d90000
   +0x3d8 XState           : _XSTATE_CONFIGURATION

社区准则 博客 联系 社区 状态
主题