Geoff Chappell, Software Analyst
The public symbol file NTKRNLMP.PDB for the original release of Windows 10 tells that the kernel is built with the AMD64_X.H header at
and draws from it the type definitions that are tabulated below.
The header AMD64_X.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK), but all except one of the types that the kernel is known to pick up from AMD64_X.H are defined in the NTOSP.H which is in the “minwin” subdirectory of the Windows 10 WDK for the original release and for Version 1511. Some are defined in one or another of the standard headers WDM.H or NTDDK.H. The line numbers on the left are from the unseen AMD64_X.H but are known from the symbol file. Those on the right are from headers that are readily available in the WDK for Windows 10.
|1015||unnamed struct for Bytes in _KGDTENTRY64||4408|
|1022||unnamed struct for Bits in _KGDTENTRY64||4415|