_KUSER_SHARED_DATA

Metadatacopy
struct _KUSER_SHARED_DATA {
    unsigned long TickCountLowDeprecated;/* 0x0  4 */
    unsigned long TickCountMultiplier;/* 0x4  4 */
    volatile struct _KSYSTEM_TIME InterruptTime;/* 0x8  12 */
    volatile struct _KSYSTEM_TIME SystemTime;/* 0x14  12 */
    volatile struct _KSYSTEM_TIME TimeZoneBias;/* 0x20  12 */
    unsigned short ImageNumberLow;/* 0x2c  2 */
    unsigned short ImageNumberHigh;/* 0x2e  2 */
    wchar_t NtSystemRoot[260];/* 0x30  520 */
    /* ── cacheline 8 boundary (512 bytes) ── */
    unsigned long MaxStackTraceDepth;/* 0x238  4 */
    unsigned long CryptoExponent;/* 0x23c  4 */
    /* ── cacheline 9 boundary (576 bytes) ── */
    unsigned long TimeZoneId;/* 0x240  4 */
    unsigned long LargePageMinimum;/* 0x244  4 */
    unsigned long AitSamplingValue;/* 0x248  4 */
    unsigned long AppCompatFlag;/* 0x24c  4 */
    unsigned __int64 RNGSeedVersion;/* 0x250  8 */
    unsigned long GlobalValidationRunlevel;/* 0x258  4 */
    volatile long TimeZoneBiasStamp;/* 0x25c  4 */
    unsigned long NtBuildNumber;/* 0x260  4 */
    enum _NT_PRODUCT_TYPE NtProductType;/* 0x264  4 */
    unsigned char ProductTypeIsValid;/* 0x268  1 */
    unsigned char Reserved0[1];/* 0x269  1 */
    unsigned short NativeProcessorArchitecture;/* 0x26a  2 */
    unsigned long NtMajorVersion;/* 0x26c  4 */
    unsigned long NtMinorVersion;/* 0x270  4 */
    unsigned char ProcessorFeatures[64];/* 0x274  64 */
    /* ── cacheline 10 boundary (640 bytes) ── */
    unsigned long Reserved1;/* 0x2b4  4 */
    unsigned long Reserved3;/* 0x2b8  4 */
    volatile unsigned long TimeSlip;/* 0x2bc  4 */
    /* ── cacheline 11 boundary (704 bytes) ── */
    enum _ALTERNATIVE_ARCHITECTURE_TYPE AlternativeArchitecture;/* 0x2c0  4 */
    unsigned long BootId;/* 0x2c4  4 */
    union _LARGE_INTEGER SystemExpirationDate;/* 0x2c8  8 */
    unsigned long SuiteMask;/* 0x2d0  4 */
    unsigned char KdDebuggerEnabled;/* 0x2d4  1 */
    union {
        unsigned char MitigationPolicies;/* 0x2d5  1 */
        struct {
            unsigned char NXSupportPolicy : 2;/* 0x2d5:0  1 */
            unsigned char SEHValidationPolicy : 2;/* 0x2d5:2  1 */
            unsigned char CurDirDevicesSkippedForDlls : 2;/* 0x2d5:4  1 */
            unsigned char Reserved : 2;/* 0x2d5:6  1 */
        };/* 0x2d5  1 */
    };/* 0x2d5  1 */
    unsigned short CyclesPerYield;/* 0x2d6  2 */
    volatile unsigned long ActiveConsoleId;/* 0x2d8  4 */
    volatile unsigned long DismountCount;/* 0x2dc  4 */
    unsigned long ComPlusPackage;/* 0x2e0  4 */
    unsigned long LastSystemRITEventTickCount;/* 0x2e4  4 */
    unsigned long NumberOfPhysicalPages;/* 0x2e8  4 */
    unsigned char SafeBootMode;/* 0x2ec  1 */
    unsigned char VirtualizationFlags;/* 0x2ed  1 */
    unsigned char Reserved12[2];/* 0x2ee  2 */
    union {
        unsigned long SharedDataFlags;/* 0x2f0  4 */
        struct {
            unsigned long DbgErrorPortPresent : 1;/* 0x2f0:0  4 */
            unsigned long DbgElevationEnabled : 1;/* 0x2f0:1  4 */
            unsigned long DbgVirtEnabled : 1;/* 0x2f0:2  4 */
            unsigned long DbgInstallerDetectEnabled : 1;/* 0x2f0:3  4 */
            unsigned long DbgLkgEnabled : 1;/* 0x2f0:4  4 */
            unsigned long DbgDynProcessorEnabled : 1;/* 0x2f0:5  4 */
            unsigned long DbgConsoleBrokerEnabled : 1;/* 0x2f0:6  4 */
            unsigned long DbgSecureBootEnabled : 1;/* 0x2f0:7  4 */
            unsigned long DbgMultiSessionSku : 1;/* 0x2f0:8  4 */
            unsigned long DbgMultiUsersInSessionSku : 1;/* 0x2f0:9  4 */
            unsigned long DbgStateSeparationEnabled : 1;/* 0x2f0:10  4 */
            unsigned long SpareBits : 21;/* 0x2f0:11  4 */
        };/* 0x2f0  4 */
    };/* 0x2f0  4 */
    unsigned long DataFlagsPad[1];/* 0x2f4  4 */
    unsigned __int64 TestRetInstruction;/* 0x2f8  8 */
    /* ── cacheline 12 boundary (768 bytes) ── */
    __int64 QpcFrequency;/* 0x300  8 */
    unsigned long SystemCall;/* 0x308  4 */
    unsigned long Reserved2;/* 0x30c  4 */
    unsigned __int64 FullNumberOfPhysicalPages;/* 0x310  8 */
    unsigned __int64 SystemCallPad[1];/* 0x318  8 */
    union {
        volatile struct _KSYSTEM_TIME TickCount;/* 0x320  12 */
        volatile unsigned __int64 TickCountQuad;/* 0x320  8 */
        unsigned long ReservedTickCountOverlay[3];/* 0x320  12 */
    };/* 0x320  12 */
    unsigned long TickCountPad[1];/* 0x32c  4 */
    unsigned long Cookie;/* 0x330  4 */
    unsigned long CookiePad[1];/* 0x334  4 */
    __int64 ConsoleSessionForegroundProcessId;/* 0x338  8 */
    /* ── cacheline 13 boundary (832 bytes) ── */
    unsigned __int64 TimeUpdateLock;/* 0x340  8 */
    unsigned __int64 BaselineSystemTimeQpc;/* 0x348  8 */
    unsigned __int64 BaselineInterruptTimeQpc;/* 0x350  8 */
    unsigned __int64 QpcSystemTimeIncrement;/* 0x358  8 */
    unsigned __int64 QpcInterruptTimeIncrement;/* 0x360  8 */
    unsigned char QpcSystemTimeIncrementShift;/* 0x368  1 */
    unsigned char QpcInterruptTimeIncrementShift;/* 0x369  1 */
    unsigned short UnparkedProcessorCount;/* 0x36a  2 */
    unsigned long EnclaveFeatureMask[4];/* 0x36c  16 */
    unsigned long TelemetryCoverageRound;/* 0x37c  4 */
    /* ── cacheline 14 boundary (896 bytes) ── */
    unsigned short UserModeGlobalLogger[16];/* 0x380  32 */
    unsigned long ImageFileExecutionOptions;/* 0x3a0  4 */
    unsigned long LangGenerationCount;/* 0x3a4  4 */
    unsigned __int64 Reserved4;/* 0x3a8  8 */
    volatile unsigned __int64 InterruptTimeBias;/* 0x3b0  8 */
    volatile unsigned __int64 QpcBias;/* 0x3b8  8 */
    /* ── cacheline 15 boundary (960 bytes) ── */
    unsigned long ActiveProcessorCount;/* 0x3c0  4 */
    volatile unsigned char ActiveGroupCount;/* 0x3c4  1 */
    unsigned char Reserved9;/* 0x3c5  1 */
    union {
        unsigned short QpcData;/* 0x3c6  2 */
        struct {
            volatile unsigned char QpcBypassEnabled;/* 0x3c6  1 */
            unsigned char QpcReserved;/* 0x3c7  1 */
        };/* 0x3c6  2 */
    };/* 0x3c6  2 */
    union _LARGE_INTEGER TimeZoneBiasEffectiveStart;/* 0x3c8  8 */
    union _LARGE_INTEGER TimeZoneBiasEffectiveEnd;/* 0x3d0  8 */
    struct _XSTATE_CONFIGURATION XState;/* 0x3d8  856 */
    /* ── cacheline 28 boundary (1792 bytes) ── */
    unsigned __int64 UserPointerAuthMask;/* 0x730  8 */
    unsigned long Reserved10[214];/* 0x738  856 */
    /* ── cacheline 42 boundary (2688 bytes) ── */
    struct _KSYSTEM_TIME FeatureConfigurationChangeStamp;/* 0xa90  12 */
    unsigned long Spare;/* 0xa9c  4 */
};