Hi!
On Dec 30, 2007 10:43 PM, Alex Ionescu <ionucu(a)videotron.ca> wrote:
Hi,
lkd> dt win32k!_BASEOBJECT -r
+0x000 hHmgr : Ptr32 Void
+0x004 ulShareCount : Uint4B
+0x008 cExclusiveLock : Uint2B
+0x00a BaseFlags : Uint2B
+0x00c Tid : Ptr32 _W32THREAD
+0x000 pEThread : Ptr32 _ETHREAD
+0x004 RefCount : Uint4B
+0x008 ptlW32 : Ptr32 _TL
+0x000 next : Ptr32 _TL
+0x004 pobj : Ptr32 Void
+0x008 pfnFree : Ptr32 void
+0x00c pgdiDcattr : Ptr32 Void
+0x010 pgdiBrushAttr : Ptr32 Void
+0x014 pUMPDObjs : Ptr32 Void
+0x018 pUMPDHeap : Ptr32 Void
+0x01c pUMPDObj : Ptr32 Void
+0x020 GdiTmpTgoList : _LIST_ENTRY
+0x000 Flink : Ptr32 _LIST_ENTRY
+0x004 Blink : Ptr32 _LIST_ENTRY
I like this one:
lkd> dt win32k!_W32THREAD -r
+0x000 pEThread : Ptr32 _ETHREAD
+0x004 RefCount : Uint4B
+0x008 ptlW32 : Ptr32 _TL
+0x000 next : Ptr32 _TL
+0x000 next : Ptr32 _TL
+0x004 pobj : Ptr32 Void
+0x008 pfnFree : Ptr32
+0x004 pobj : Ptr32 Void
+0x008 pfnFree : Ptr32
+0x00c pgdiDcattr : Ptr32 Void
+0x010 pgdiBrushAttr : Ptr32 Void
+0x014 pUMPDObjs : Ptr32 Void
+0x018 pUMPDHeap : Ptr32 Void
+0x01c dwEngAcquireCount : Uint4B
+0x020 pSemTable : Ptr32 Void
+0x024 pUMPDObj : Ptr32 Void
This sets on top of thread info above the "USER specific fields".
Thanks!
James
Ref:
http://forum.sysinternals.com/forum_posts.asp?TID=901