typedef struct _KUSER_SHARED_DATA                                // 55 elements, 0x3B8 bytes (sizeof)
          {
/*0x000*/     ULONG32      TickCountLowDeprecated;
/*0x004*/     ULONG32      TickCountMultiplier;
/*0x008*/     struct _KSYSTEM_TIME InterruptTime;                          // 3 elements, 0xC bytes (sizeof)
/*0x014*/     struct _KSYSTEM_TIME SystemTime;                             // 3 elements, 0xC bytes (sizeof)
/*0x020*/     struct _KSYSTEM_TIME TimeZoneBias;                           // 3 elements, 0xC bytes (sizeof)
/*0x02C*/     UINT16       ImageNumberLow;
/*0x02E*/     UINT16       ImageNumberHigh;
/*0x030*/     WCHAR        NtSystemRoot[260];
/*0x238*/     ULONG32      MaxStackTraceDepth;
/*0x23C*/     ULONG32      CryptoExponent;
/*0x240*/     ULONG32      TimeZoneId;
/*0x244*/     ULONG32      LargePageMinimum;
/*0x248*/     ULONG32      Reserved2[7];
/*0x264*/     enum _NT_PRODUCT_TYPE NtProductType;
/*0x268*/     UINT8        ProductTypeIsValid;
/*0x269*/     UINT8        _PADDING0_[0x3];
/*0x26C*/     ULONG32      NtMajorVersion;
/*0x270*/     ULONG32      NtMinorVersion;
/*0x274*/     UINT8        ProcessorFeatures[64];
/*0x2B4*/     ULONG32      Reserved1;
/*0x2B8*/     ULONG32      Reserved3;
/*0x2BC*/     ULONG32      TimeSlip;
/*0x2C0*/     enum _ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture;
/*0x2C4*/     UINT8        _PADDING1_[0x4];
/*0x2C8*/     union _LARGE_INTEGER SystemExpirationDate;                   // 4 elements, 0x8 bytes (sizeof)
/*0x2D0*/     ULONG32      SuiteMask;
/*0x2D4*/     UINT8        KdDebuggerEnabled;
/*0x2D5*/     UINT8        NXSupportPolicy;
/*0x2D6*/     UINT8        _PADDING2_[0x2];
/*0x2D8*/     ULONG32      ActiveConsoleId;
/*0x2DC*/     ULONG32      DismountCount;
/*0x2E0*/     ULONG32      ComPlusPackage;
/*0x2E4*/     ULONG32      LastSystemRITEventTickCount;
/*0x2E8*/     ULONG32      NumberOfPhysicalPages;
/*0x2EC*/     UINT8        SafeBootMode;
/*0x2ED*/     UINT8        _PADDING3_[0x3];
              union                                                        // 2 elements, 0x4 bytes (sizeof)
              {
/*0x2F0*/         ULONG32      SharedDataFlags;
                  struct                                                   // 6 elements, 0x4 bytes (sizeof)
                  {
/*0x2F0*/             ULONG32      DbgErrorPortPresent : 1;                // 0 BitPosition
/*0x2F0*/             ULONG32      DbgElevationEnabled : 1;                // 1 BitPosition
/*0x2F0*/             ULONG32      DbgVirtEnabled : 1;                     // 2 BitPosition
/*0x2F0*/             ULONG32      DbgInstallerDetectEnabled : 1;          // 3 BitPosition
/*0x2F0*/             ULONG32      SystemDllRelocated : 1;                 // 4 BitPosition
/*0x2F0*/             ULONG32      SpareBits : 27;                         // 5 BitPosition
                  };
              };
/*0x2F8*/     UINT64       TestRetInstruction;
/*0x300*/     ULONG32      SystemCall;
/*0x304*/     ULONG32      SystemCallReturn;
/*0x308*/     UINT64       SystemCallPad[3];
              union                                                        // 2 elements, 0x10 bytes (sizeof)
              {
/*0x320*/         struct _KSYSTEM_TIME TickCount;                          // 3 elements, 0xC bytes (sizeof)
/*0x320*/         UINT64       TickCountQuad;
              };
/*0x330*/     ULONG32      Cookie;
/*0x334*/     UINT8        _PADDING4_[0x4];
/*0x338*/     INT64        ConsoleSessionForegroundProcessId;
/*0x340*/     ULONG32      Wow64SharedInformation[16];
/*0x380*/     UINT16       UserModeGlobalLogger[8];
/*0x390*/     ULONG32      HeapTracingPid[2];
/*0x398*/     ULONG32      CritSecTracingPid[2];
/*0x3A0*/     ULONG32      ImageFileExecutionOptions;
/*0x3A4*/     UINT8        _PADDING5_[0x4];
              union                                                        // 2 elements, 0x8 bytes (sizeof)
              {
/*0x3A8*/         UINT64       AffinityPad;
/*0x3A8*/         UINT64       ActiveProcessorAffinity;
              };
/*0x3B0*/     UINT64       InterruptTimeBias;
          }KUSER_SHARED_DATA, *PKUSER_SHARED_DATA;
Return to structures/enums list.
Return to O.S. version list.

(c) MoonSols 2010.