Geoff Chappell, Software Analyst
The SYSTEM_VERIFIER_COUNTERS_INFORMATION structure is what a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemVerifierCountersInformation (0x76).
The SYSTEM_VERIFIER_COUNTERS_INFORMATION structure is not documented.
The SYSTEM_VERIFIER_COUNTERS_INFORMATION is 0xBC or 0x0100 bytes in 32-bit and 64-bit Windows, respectively.
| Offset (x86) | Offset (x64) | Definition |
|---|---|---|
| 0x00 | 0x00 |
SYSTEM_VERIFIER_INFORMATION Legacy; |
| 0x68 | 0x80 |
ULONG RaiseIrqls; |
| 0x6C | 0x84 |
ULONG AcquireSpinLocks; |
| 0x70 | 0x88 |
ULONG SynchronizeExecutions; |
| 0x74 | 0x8C |
ULONG AllocationsWithNoTag; |
| 0x78 | 0x90 |
ULONG AllocationsFailed; |
| 0x7C | 0x94 |
ULONG AllocationsFailedDeliberately; |
| 0x80 | 0x98 |
ULONG_PTR LockedBytes; |
| 0x84 | 0xA0 |
ULONG_PTR PeakLockedBytes; |
| 0x88 | 0xA8 |
ULONG_PTR MappedLockedBytes; |
| 0x8C | 0xB0 |
ULONG_PTR PeakMappedLockedBytes; |
| 0x90 | 0xB8 |
ULONG_PTR MappedIoSpaceBytes; |
| 0x94 | 0xC0 |
ULONG_PTR PeakMappedIoSpaceBytes; |
| 0x98 | 0xC8 |
ULONG_PTR PagesForMdlBytes; |
| 0x9C | 0xD0 |
ULONG_PTR PeakPagesForMdlBytes; |
| 0xA0 | 0xD8 |
ULONG_PTR ContiguousMemoryBytes; |
| 0xA4 | 0xE0 |
ULONG_PTR PeakContiguousMemoryBytes; |
| 0xA8 | 0xE8 |
ULONG ExecutePoolTypes; |
| 0xAC | 0xEC |
ULONG ExecutePageProtections; |
| 0xB0 | 0xF0 |
ULONG ExecutePageMappings; |
| 0xB4 | 0xF4 |
ULONG ExecuteWriteSections; |
| 0xB8 | 0xF8 |
ULONG SectionAlignmentFailures; |