_KALPC_MESSAGE

//0x100 bytes (sizeof) struct _KALPC_MESSAGE { struct _LIST_ENTRY Entry; //0x0 VOID* ExtensionBuffer; //0x10 ULONGLONG ExtensionBufferSize; //0x18 union { struct _EPROCESS* QuotaProcess; //0x20 VOID* QuotaBlock; //0x20 }; LONG SequenceNo; //0x28 union { struct { ULONG QueueType:2; //0x2c ULONG QueuePortType:4; //0x2c ULONG Canceled:1; //0x2c ULONG Ready:1; //0x2c ULONG ReleaseMessage:1; //0x2c ULONG SharedQuota:1; //0x2c ULONG ReplyWaitReply:1; //0x2c ULONG OwnerPortReference:1; //0x2c ULONG ReserveReference:1; //0x2c ULONG ReceiverReference:1; //0x2c ULONG ViewAttributeRetrieved:1; //0x2c ULONG InDispatch:1; //0x2c } s1; //0x2c ULONG State; //0x2c } u1; //0x2c struct _ALPC_PORT* CancelSequencePort; //0x30 struct _ALPC_PORT* CancelQueuePort; //0x38 LONG CancelSequenceNo; //0x40 struct _LIST_ENTRY CancelListEntry; //0x48 struct _ETHREAD* WaitingThread; //0x58 struct _KALPC_RESERVE* Reserve; //0x60 struct _ALPC_PORT* volatile PortQueue; //0x68 struct _ALPC_PORT* OwnerPort; //0x70 struct _KALPC_MESSAGE_ATTRIBUTES MessageAttributes; //0x78 VOID* DataUserVa; //0xb0 VOID* DataSystemVa; //0xb8 struct _ALPC_COMMUNICATION_INFO* CommunicationInfo; //0xc0 struct _ALPC_PORT* ConnectionPort; //0xc8 struct _ETHREAD* ServerThread; //0xd0 struct _PORT_MESSAGE PortMessage; //0xd8 };