typedef struct _KSPECIAL_REGISTERS
{
    unsigned __int64 Cr0;
    unsigned __int64 Cr2;
    unsigned __int64 Cr3;
    unsigned __int64 Cr4;
    unsigned __int64 KernelDr0;
    unsigned __int64 KernelDr1;
    unsigned __int64 KernelDr2;
    unsigned __int64 KernelDr3;
    unsigned __int64 KernelDr6;
    unsigned __int64 KernelDr7;
    KDESCRIPTOR Gdtr;
    KDESCRIPTOR Idtr;
    unsigned short Tr;
    unsigned short Ldtr;
    unsigned long MxCsr;
    unsigned __int64 DebugControl;
    unsigned __int64 LastBranchToRip;
    unsigned __int64 LastBranchFromRip;
    unsigned __int64 LastExceptionToRip;
    unsigned __int64 LastExceptionFromRip;
    unsigned __int64 Cr8;
    unsigned __int64 MsrGsBase;
    unsigned __int64 MsrGsSwap;
    unsigned __int64 MsrStar;
    unsigned __int64 MsrLStar;
    unsigned __int64 MsrCStar;
    unsigned __int64 MsrSyscallMask;
} KSPECIAL_REGISTERS, *PKSPECIAL_REGISTERS;