KDHELP

typedef struct _KDHELP {

DWORD Thread;

DWORD ThCallbackStack;

DWORD NextCallback;

DWORD FramePointer;

DWORD KiCallUserMode;

DWORD KeUserCallbackDispatcher;

} KDHELP, *PKDHELP;

Members

Thread

The address of the kernel thread object, as provided in the WAIT_STATE_CHANGE packet.

ThCallbackStack

The offset in the thread object to the pointer to the current callback frame in the kernel stack.

NextCallback

The address of the next callback frame.

FramePointer

The address of the saved frame pointer, if applicable.

KiCallUserMode

The address of the kernel function that calls out to user mode.

KeUserCallbackDispatcher

The address of the user mode dispatcher function.