typedef struct _KUSER_SHARED_DATA                                // 75 elements, 0x5F0 bytes (sizeof)
          {
/*0x000*/     ULONG32      TickCountLowDeprecated;
/*0x004*/     ULONG32      TickCountMultiplier;
/*0x008*/     struct _KSYSTEM_TIME InterruptTime;                          // 3 elements, 0xC bytes (sizeof)
/*0x014*/     struct _KSYSTEM_TIME SystemTime;                             // 3 elements, 0xC bytes (sizeof)
/*0x020*/     struct _KSYSTEM_TIME TimeZoneBias;                           // 3 elements, 0xC bytes (sizeof)
/*0x02C*/     UINT16       ImageNumberLow;
/*0x02E*/     UINT16       ImageNumberHigh;
/*0x030*/     WCHAR        NtSystemRoot[260];
/*0x238*/     ULONG32      MaxStackTraceDepth;
/*0x23C*/     ULONG32      CryptoExponent;
/*0x240*/     ULONG32      TimeZoneId;
/*0x244*/     ULONG32      LargePageMinimum;
/*0x248*/     ULONG32      Reserved2[7];
/*0x264*/     enum _NT_PRODUCT_TYPE NtProductType;
/*0x268*/     UINT8        ProductTypeIsValid;
/*0x269*/     UINT8        _PADDING0_[0x3];
/*0x26C*/     ULONG32      NtMajorVersion;
/*0x270*/     ULONG32      NtMinorVersion;
/*0x274*/     UINT8        ProcessorFeatures[64];
/*0x2B4*/     ULONG32      Reserved1;
/*0x2B8*/     ULONG32      Reserved3;
/*0x2BC*/     ULONG32      TimeSlip;
/*0x2C0*/     enum _ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture;
/*0x2C4*/     ULONG32      AltArchitecturePad[1];
/*0x2C8*/     union _LARGE_INTEGER SystemExpirationDate;                   // 4 elements, 0x8 bytes (sizeof)
/*0x2D0*/     ULONG32      SuiteMask;
/*0x2D4*/     UINT8        KdDebuggerEnabled;
/*0x2D5*/     UINT8        NXSupportPolicy;
/*0x2D6*/     UINT8        _PADDING1_[0x2];
/*0x2D8*/     ULONG32      ActiveConsoleId;
/*0x2DC*/     ULONG32      DismountCount;
/*0x2E0*/     ULONG32      ComPlusPackage;
/*0x2E4*/     ULONG32      LastSystemRITEventTickCount;
/*0x2E8*/     ULONG32      NumberOfPhysicalPages;
/*0x2EC*/     UINT8        SafeBootMode;
              union                                                        // 2 elements, 0x1 bytes (sizeof)
              {
/*0x2ED*/         UINT8        TscQpcData;
                  struct                                                   // 3 elements, 0x1 bytes (sizeof)
                  {
/*0x2ED*/             UINT8        TscQpcEnabled : 1;                      // 0 BitPosition
/*0x2ED*/             UINT8        TscQpcSpareFlag : 1;                    // 1 BitPosition
/*0x2ED*/             UINT8        TscQpcShift : 6;                        // 2 BitPosition
                  };
              };
/*0x2EE*/     UINT8        TscQpcPad[2];
              union                                                        // 2 elements, 0x4 bytes (sizeof)
              {
/*0x2F0*/         ULONG32      SharedDataFlags;
                  struct                                                   // 8 elements, 0x4 bytes (sizeof)
                  {
/*0x2F0*/             ULONG32      DbgErrorPortPresent : 1;                // 0 BitPosition
/*0x2F0*/             ULONG32      DbgElevationEnabled : 1;                // 1 BitPosition
/*0x2F0*/             ULONG32      DbgVirtEnabled : 1;                     // 2 BitPosition
/*0x2F0*/             ULONG32      DbgInstallerDetectEnabled : 1;          // 3 BitPosition
/*0x2F0*/             ULONG32      DbgSystemDllRelocated : 1;              // 4 BitPosition
/*0x2F0*/             ULONG32      DbgDynProcessorEnabled : 1;             // 5 BitPosition
/*0x2F0*/             ULONG32      DbgSEHValidationEnabled : 1;            // 6 BitPosition
/*0x2F0*/             ULONG32      SpareBits : 25;                         // 7 BitPosition
                  };
              };
/*0x2F4*/     ULONG32      DataFlagsPad[1];
/*0x2F8*/     UINT64       TestRetInstruction;
/*0x300*/     ULONG32      SystemCall;
/*0x304*/     ULONG32      SystemCallReturn;
/*0x308*/     UINT64       SystemCallPad[3];
              union                                                        // 3 elements, 0xC bytes (sizeof)
              {
/*0x320*/         struct _KSYSTEM_TIME TickCount;                          // 3 elements, 0xC bytes (sizeof)
/*0x320*/         UINT64       TickCountQuad;
/*0x320*/         ULONG32      ReservedTickCountOverlay[3];
              };
/*0x32C*/     ULONG32      TickCountPad[1];
/*0x330*/     ULONG32      Cookie;
/*0x334*/     ULONG32      CookiePad[1];
/*0x338*/     INT64        ConsoleSessionForegroundProcessId;
/*0x340*/     ULONG32      Wow64SharedInformation[16];
/*0x380*/     UINT16       UserModeGlobalLogger[16];
/*0x3A0*/     ULONG32      ImageFileExecutionOptions;
/*0x3A4*/     ULONG32      LangGenerationCount;
/*0x3A8*/     UINT64       Reserved5;
/*0x3B0*/     UINT64       InterruptTimeBias;
/*0x3B8*/     UINT64       TscQpcBias;
/*0x3C0*/     ULONG32      ActiveProcessorCount;
/*0x3C4*/     UINT16       ActiveGroupCount;
/*0x3C6*/     UINT16       Reserved4;
/*0x3C8*/     ULONG32      AitSamplingValue;
/*0x3CC*/     ULONG32      AppCompatFlag;
/*0x3D0*/     UINT64       SystemDllNativeRelocation;
/*0x3D8*/     ULONG32      SystemDllWowRelocation;
/*0x3DC*/     ULONG32      XStatePad[1];
/*0x3E0*/     struct _XSTATE_CONFIGURATION XState;                         // 4 elements, 0x210 bytes (sizeof)
          }KUSER_SHARED_DATA, *PKUSER_SHARED_DATA;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.