mirror of
https://github.com/reactos/reactos.git
synced 2024-11-01 12:26:32 +00:00
352b7f6785
The definitions in the NDK inline_ntcurrentteb.h and psfuncs.h files are synced togther with those of winnt.h (in the winnt_old.h generator file). See commitsc1929445d(r49627) and925c587c8(r56318). IMPORTANT NOTE: The ARM64 definition does not exist yet in our headers!
4532 lines
132 KiB
C
4532 lines
132 KiB
C
|
|
#if defined(__ROS_LONG64__)
|
|
#undef InterlockedExchange
|
|
#define InterlockedExchange(a,b) _InterlockedExchange((long*)a,b)
|
|
#undef InterlockedExchangeAdd
|
|
#define InterlockedExchangeAdd(a,b) _InterlockedExchangeAdd((long*)a,b)
|
|
#undef InterlockedCompareExchange
|
|
#define InterlockedCompareExchange(a,b,c) _InterlockedCompareExchange((long*)a,b,c)
|
|
#undef InterlockedIncrement
|
|
#define InterlockedIncrement(a) _InterlockedIncrement((long*)a)
|
|
#undef InterlockedDecrement
|
|
#define InterlockedDecrement(a) _InterlockedDecrement((long*)a)
|
|
#endif
|
|
|
|
#undef __C89_NAMELESS
|
|
#undef __C89_NAMELESSSTRUCTNAME
|
|
#undef __C89_NAMELESSSTRUCTNAME1
|
|
#undef __C89_NAMELESSSTRUCTNAME2
|
|
#undef __C89_NAMELESSSTRUCTNAME3
|
|
#undef __C89_NAMELESSSTRUCTNAME4
|
|
#undef __C89_NAMELESSSTRUCTNAME5
|
|
#undef __C89_NAMELESSUNIONNAME
|
|
#undef __C89_NAMELESSUNIONNAME1
|
|
#undef __C89_NAMELESSUNIONNAME2
|
|
#undef __C89_NAMELESSUNIONNAME3
|
|
#undef __C89_NAMELESSUNIONNAME4
|
|
#undef __C89_NAMELESSUNIONNAME5
|
|
#undef __C89_NAMELESSUNIONNAME6
|
|
#undef __C89_NAMELESSUNIONNAME7
|
|
#undef __C89_NAMELESSUNIONNAME8
|
|
|
|
#if !defined(__WINESRC__) && !defined(WINE_NO_NAMELESS_EXTENSION)
|
|
# ifdef __GNUC__
|
|
/* Anonymous structs support starts with gcc 2.96/g++ 2.95 */
|
|
# if (__GNUC__ > 2) || ((__GNUC__ == 2) && ((__GNUC_MINOR__ > 95) || ((__GNUC_MINOR__ == 95) && defined(__cplusplus))))
|
|
# define __C89_NAMELESS __extension__
|
|
# endif
|
|
# elif defined(_MSC_VER)
|
|
# define __C89_NAMELESS
|
|
# endif
|
|
#endif
|
|
|
|
#ifdef __C89_NAMELESS
|
|
# define __C89_NAMELESSSTRUCTNAME
|
|
# define __C89_NAMELESSSTRUCTNAME1
|
|
# define __C89_NAMELESSSTRUCTNAME2
|
|
# define __C89_NAMELESSSTRUCTNAME3
|
|
# define __C89_NAMELESSSTRUCTNAME4
|
|
# define __C89_NAMELESSSTRUCTNAME5
|
|
# define __C89_NAMELESSUNIONNAME
|
|
# define __C89_NAMELESSUNIONNAME1
|
|
# define __C89_NAMELESSUNIONNAME2
|
|
# define __C89_NAMELESSUNIONNAME3
|
|
# define __C89_NAMELESSUNIONNAME4
|
|
# define __C89_NAMELESSUNIONNAME5
|
|
# define __C89_NAMELESSUNIONNAME6
|
|
# define __C89_NAMELESSUNIONNAME7
|
|
# define __C89_NAMELESSUNIONNAME8
|
|
#else
|
|
# define __C89_NAMELESS
|
|
# define __C89_NAMELESSSTRUCTNAME DUMMYSTRUCTNAME
|
|
# define __C89_NAMELESSSTRUCTNAME1 DUMMYSTRUCTNAME1
|
|
# define __C89_NAMELESSSTRUCTNAME2 DUMMYSTRUCTNAME2
|
|
# define __C89_NAMELESSSTRUCTNAME3 DUMMYSTRUCTNAME3
|
|
# define __C89_NAMELESSSTRUCTNAME4 DUMMYSTRUCTNAME4
|
|
# define __C89_NAMELESSSTRUCTNAME5 DUMMYSTRUCTNAME5
|
|
# define __C89_NAMELESSUNIONNAME DUMMYUNIONNAME
|
|
# define __C89_NAMELESSUNIONNAME1 DUMMYUNIONNAME1
|
|
# define __C89_NAMELESSUNIONNAME2 DUMMYUNIONNAME2
|
|
# define __C89_NAMELESSUNIONNAME3 DUMMYUNIONNAME3
|
|
# define __C89_NAMELESSUNIONNAME4 DUMMYUNIONNAME4
|
|
# define __C89_NAMELESSUNIONNAME5 DUMMYUNIONNAME5
|
|
# define __C89_NAMELESSUNIONNAME6 DUMMYUNIONNAME6
|
|
# define __C89_NAMELESSUNIONNAME7 DUMMYUNIONNAME7
|
|
# define __C89_NAMELESSUNIONNAME8 DUMMYUNIONNAME8
|
|
#endif
|
|
|
|
#define DECLSPEC_HIDDEN
|
|
|
|
/*#ifdef _WINE*/
|
|
#if defined(__GNUC__) && ((__GNUC__ > 4) || ((__GNUC__ == 4) && (__GNUC_MINOR__ >= 3)))
|
|
# define __WINE_ALLOC_SIZE(x) __attribute__((__alloc_size__(x)))
|
|
#else
|
|
# define __WINE_ALLOC_SIZE(x)
|
|
#endif
|
|
/*#endif*/
|
|
|
|
#ifdef __GNUC__
|
|
# define _HAVE_INT64
|
|
# ifndef _INTEGRAL_MAX_BITS
|
|
# define _INTEGRAL_MAX_BITS 64
|
|
# endif
|
|
# undef __int64
|
|
# define __int64 long long
|
|
#elif (defined(__WATCOMC__) || defined(_MSC_VER)) && (defined(_INTEGRAL_MAX_BITS) && _INTEGRAL_MAX_BITS >= 64 )
|
|
# define _HAVE_INT64
|
|
#endif /* __GNUC__/__WATCOMC */
|
|
|
|
#ifdef _MSC_VER
|
|
# pragma warning(push)
|
|
# pragma warning(disable:4201)
|
|
# pragma warning(disable:4214)
|
|
# pragma warning(disable:4820)
|
|
#endif
|
|
|
|
#define ACE_OBJECT_TYPE_PRESENT 0x00000001
|
|
#define ACE_INHERITED_OBJECT_TYPE_PRESENT 0x00000002
|
|
|
|
/* also in ddk/ntifs.h */
|
|
#define COMPRESSION_FORMAT_NONE (0x0000)
|
|
#define COMPRESSION_FORMAT_DEFAULT (0x0001)
|
|
#define COMPRESSION_FORMAT_LZNT1 (0x0002)
|
|
#define COMPRESSION_ENGINE_STANDARD (0x0000)
|
|
#define COMPRESSION_ENGINE_MAXIMUM (0x0100)
|
|
#define COMPRESSION_ENGINE_HIBER (0x0200)
|
|
#define ACCESS_ALLOWED_ACE_TYPE (0x0)
|
|
#define ACCESS_DENIED_ACE_TYPE (0x1)
|
|
#define SYSTEM_AUDIT_ACE_TYPE (0x2)
|
|
#define SYSTEM_ALARM_ACE_TYPE (0x3)
|
|
/*end ntifs.h */
|
|
|
|
#define REG_STANDARD_FORMAT 1
|
|
#define REG_LATEST_FORMAT 2
|
|
#define REG_NO_COMPRESSION 4
|
|
|
|
#ifndef WIN32_NO_STATUS
|
|
|
|
#define STATUS_WAIT_0 ((DWORD)0x00000000)
|
|
#define STATUS_ABANDONED_WAIT_0 ((DWORD)0x00000080)
|
|
#define STATUS_USER_APC ((DWORD)0x000000C0)
|
|
#define STATUS_TIMEOUT ((DWORD)0x00000102)
|
|
#define STATUS_PENDING ((DWORD)0x00000103)
|
|
#define STATUS_SEGMENT_NOTIFICATION ((DWORD)0x40000005)
|
|
#define STATUS_GUARD_PAGE_VIOLATION ((DWORD)0x80000001)
|
|
#define STATUS_DATATYPE_MISALIGNMENT ((DWORD)0x80000002)
|
|
#define STATUS_BREAKPOINT ((DWORD)0x80000003)
|
|
#define STATUS_SINGLE_STEP ((DWORD)0x80000004)
|
|
#define STATUS_ACCESS_VIOLATION ((DWORD)0xC0000005)
|
|
#define STATUS_IN_PAGE_ERROR ((DWORD)0xC0000006)
|
|
#define STATUS_INVALID_HANDLE ((DWORD)0xC0000008)
|
|
#define STATUS_NO_MEMORY ((DWORD)0xC0000017)
|
|
#define STATUS_ILLEGAL_INSTRUCTION ((DWORD)0xC000001D)
|
|
#define STATUS_NONCONTINUABLE_EXCEPTION ((DWORD)0xC0000025)
|
|
#define STATUS_INVALID_DISPOSITION ((DWORD)0xC0000026)
|
|
#define STATUS_ARRAY_BOUNDS_EXCEEDED ((DWORD)0xC000008C)
|
|
#define STATUS_FLOAT_DENORMAL_OPERAND ((DWORD)0xC000008D)
|
|
#define STATUS_FLOAT_DIVIDE_BY_ZERO ((DWORD)0xC000008E)
|
|
#define STATUS_FLOAT_INEXACT_RESULT ((DWORD)0xC000008F)
|
|
#define STATUS_FLOAT_INVALID_OPERATION ((DWORD)0xC0000090)
|
|
#define STATUS_FLOAT_OVERFLOW ((DWORD)0xC0000091)
|
|
#define STATUS_FLOAT_STACK_CHECK ((DWORD)0xC0000092)
|
|
#define STATUS_FLOAT_UNDERFLOW ((DWORD)0xC0000093)
|
|
#define STATUS_INTEGER_DIVIDE_BY_ZERO ((DWORD)0xC0000094)
|
|
#define STATUS_INTEGER_OVERFLOW ((DWORD)0xC0000095)
|
|
#define STATUS_PRIVILEGED_INSTRUCTION ((DWORD)0xC0000096)
|
|
#define STATUS_STACK_OVERFLOW ((DWORD)0xC00000FD)
|
|
#define STATUS_CONTROL_C_EXIT ((DWORD)0xC000013A)
|
|
#define STATUS_FLOAT_MULTIPLE_FAULTS ((DWORD)0xC00002B4)
|
|
#define STATUS_FLOAT_MULTIPLE_TRAPS ((DWORD)0xC00002B5)
|
|
#define STATUS_REG_NAT_CONSUMPTION ((DWORD)0xC00002C9)
|
|
#define STATUS_SXS_EARLY_DEACTIVATION ((DWORD)0xC015000F)
|
|
#define STATUS_SXS_INVALID_DEACTIVATION ((DWORD)0xC0150010)
|
|
|
|
#define DBG_EXCEPTION_HANDLED ((DWORD)0x00010001)
|
|
#define DBG_CONTINUE ((DWORD)0x00010002)
|
|
#define DBG_TERMINATE_THREAD ((DWORD)0x40010003)
|
|
#define DBG_TERMINATE_PROCESS ((DWORD)0x40010004)
|
|
#define DBG_CONTROL_C ((DWORD)0x40010005)
|
|
#define DBG_CONTROL_BREAK ((DWORD)0x40010008)
|
|
#define DBG_COMMAND_EXCEPTION ((DWORD)0x40010009)
|
|
#define DBG_EXCEPTION_NOT_HANDLED ((DWORD)0x80010001)
|
|
|
|
#endif /* WIN32_NO_STATUS */
|
|
|
|
#define INVALID_FILE_ATTRIBUTES ((DWORD)-1)
|
|
|
|
/* Also in ddk/winddk.h */
|
|
#define FILE_LIST_DIRECTORY 0x00000001
|
|
#define FILE_READ_DATA 0x00000001
|
|
#define FILE_ADD_FILE 0x00000002
|
|
#define FILE_WRITE_DATA 0x00000002
|
|
#define FILE_ADD_SUBDIRECTORY 0x00000004
|
|
#define FILE_APPEND_DATA 0x00000004
|
|
#define FILE_CREATE_PIPE_INSTANCE 0x00000004
|
|
#define FILE_READ_EA 0x00000008
|
|
#define FILE_READ_PROPERTIES 0x00000008
|
|
#define FILE_WRITE_EA 0x00000010
|
|
#define FILE_WRITE_PROPERTIES 0x00000010
|
|
#define FILE_EXECUTE 0x00000020
|
|
#define FILE_TRAVERSE 0x00000020
|
|
#define FILE_DELETE_CHILD 0x00000040
|
|
#define FILE_READ_ATTRIBUTES 0x00000080
|
|
#define FILE_WRITE_ATTRIBUTES 0x00000100
|
|
|
|
#define FILE_SHARE_READ 0x00000001
|
|
#define FILE_SHARE_WRITE 0x00000002
|
|
#define FILE_SHARE_DELETE 0x00000004
|
|
#define FILE_SHARE_VALID_FLAGS 0x00000007
|
|
|
|
#define FILE_ATTRIBUTE_READONLY 0x00000001
|
|
#define FILE_ATTRIBUTE_HIDDEN 0x00000002
|
|
#define FILE_ATTRIBUTE_SYSTEM 0x00000004
|
|
#define FILE_ATTRIBUTE_DIRECTORY 0x00000010
|
|
#define FILE_ATTRIBUTE_ARCHIVE 0x00000020
|
|
#define FILE_ATTRIBUTE_DEVICE 0x00000040
|
|
#define FILE_ATTRIBUTE_NORMAL 0x00000080
|
|
#define FILE_ATTRIBUTE_TEMPORARY 0x00000100
|
|
#define FILE_ATTRIBUTE_SPARSE_FILE 0x00000200
|
|
#define FILE_ATTRIBUTE_REPARSE_POINT 0x00000400
|
|
#define FILE_ATTRIBUTE_COMPRESSED 0x00000800
|
|
#define FILE_ATTRIBUTE_OFFLINE 0x00001000
|
|
#define FILE_ATTRIBUTE_NOT_CONTENT_INDEXED 0x00002000
|
|
#define FILE_ATTRIBUTE_ENCRYPTED 0x00004000
|
|
#define FILE_ATTRIBUTE_INTEGRITY_STREAM 0x00008000
|
|
#define FILE_ATTRIBUTE_VIRTUAL 0x00010000
|
|
#define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
|
|
#define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
|
|
|
|
#define FILE_COPY_STRUCTURED_STORAGE 0x00000041
|
|
#define FILE_STRUCTURED_STORAGE 0x00000441
|
|
|
|
#define FILE_VALID_OPTION_FLAGS 0x00ffffff
|
|
#define FILE_VALID_PIPE_OPTION_FLAGS 0x00000032
|
|
#define FILE_VALID_MAILSLOT_OPTION_FLAGS 0x00000032
|
|
#define FILE_VALID_SET_FLAGS 0x00000036
|
|
|
|
#define FILE_DIRECTORY_FILE 0x00000001
|
|
#define FILE_WRITE_THROUGH 0x00000002
|
|
#define FILE_SEQUENTIAL_ONLY 0x00000004
|
|
#define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
|
|
#define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
|
|
#define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
|
|
#define FILE_NON_DIRECTORY_FILE 0x00000040
|
|
#define FILE_CREATE_TREE_CONNECTION 0x00000080
|
|
#define FILE_COMPLETE_IF_OPLOCKED 0x00000100
|
|
#define FILE_NO_EA_KNOWLEDGE 0x00000200
|
|
#define FILE_OPEN_REMOTE_INSTANCE 0x00000400
|
|
#define FILE_RANDOM_ACCESS 0x00000800
|
|
#define FILE_DELETE_ON_CLOSE 0x00001000
|
|
#define FILE_OPEN_BY_FILE_ID 0x00002000
|
|
#define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
|
|
#define FILE_NO_COMPRESSION 0x00008000
|
|
#define FILE_RESERVE_OPFILTER 0x00100000
|
|
#define FILE_OPEN_REPARSE_POINT 0x00200000
|
|
#define FILE_OPEN_NO_RECALL 0x00400000
|
|
#define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
|
|
|
|
#define FILE_ALL_ACCESS \
|
|
(STANDARD_RIGHTS_REQUIRED | \
|
|
SYNCHRONIZE | \
|
|
0x1FF)
|
|
|
|
#define FILE_GENERIC_EXECUTE \
|
|
(STANDARD_RIGHTS_EXECUTE | \
|
|
FILE_READ_ATTRIBUTES | \
|
|
FILE_EXECUTE | \
|
|
SYNCHRONIZE)
|
|
|
|
#define FILE_GENERIC_READ \
|
|
(STANDARD_RIGHTS_READ | \
|
|
FILE_READ_DATA | \
|
|
FILE_READ_ATTRIBUTES | \
|
|
FILE_READ_EA | \
|
|
SYNCHRONIZE)
|
|
|
|
#define FILE_GENERIC_WRITE \
|
|
(STANDARD_RIGHTS_WRITE | \
|
|
FILE_WRITE_DATA | \
|
|
FILE_WRITE_ATTRIBUTES | \
|
|
FILE_WRITE_EA | \
|
|
FILE_APPEND_DATA | \
|
|
SYNCHRONIZE)
|
|
/* end winddk.h */
|
|
/* also in ddk/ntifs.h */
|
|
#define FILE_NOTIFY_CHANGE_FILE_NAME 0x00000001
|
|
#define FILE_NOTIFY_CHANGE_DIR_NAME 0x00000002
|
|
#define FILE_NOTIFY_CHANGE_NAME 0x00000003
|
|
#define FILE_NOTIFY_CHANGE_ATTRIBUTES 0x00000004
|
|
#define FILE_NOTIFY_CHANGE_SIZE 0x00000008
|
|
#define FILE_NOTIFY_CHANGE_LAST_WRITE 0x00000010
|
|
#define FILE_NOTIFY_CHANGE_LAST_ACCESS 0x00000020
|
|
#define FILE_NOTIFY_CHANGE_CREATION 0x00000040
|
|
#define FILE_NOTIFY_CHANGE_EA 0x00000080
|
|
#define FILE_NOTIFY_CHANGE_SECURITY 0x00000100
|
|
#define FILE_NOTIFY_CHANGE_STREAM_NAME 0x00000200
|
|
#define FILE_NOTIFY_CHANGE_STREAM_SIZE 0x00000400
|
|
#define FILE_NOTIFY_CHANGE_STREAM_WRITE 0x00000800
|
|
#define FILE_NOTIFY_VALID_MASK 0x00000fff
|
|
|
|
#define FILE_CASE_SENSITIVE_SEARCH 0x00000001
|
|
#define FILE_CASE_PRESERVED_NAMES 0x00000002
|
|
#define FILE_UNICODE_ON_DISK 0x00000004
|
|
#define FILE_PERSISTENT_ACLS 0x00000008
|
|
#define FILE_FILE_COMPRESSION 0x00000010
|
|
#define FILE_VOLUME_QUOTAS 0x00000020
|
|
#define FILE_SUPPORTS_SPARSE_FILES 0x00000040
|
|
#define FILE_SUPPORTS_REPARSE_POINTS 0x00000080
|
|
#define FILE_SUPPORTS_REMOTE_STORAGE 0x00000100
|
|
#define FS_LFN_APIS 0x00004000
|
|
#define FILE_VOLUME_IS_COMPRESSED 0x00008000
|
|
#define FILE_SUPPORTS_OBJECT_IDS 0x00010000
|
|
#define FILE_SUPPORTS_ENCRYPTION 0x00020000
|
|
#define FILE_NAMED_STREAMS 0x00040000
|
|
#define FILE_READ_ONLY_VOLUME 0x00080000
|
|
#define FILE_SEQUENTIAL_WRITE_ONCE 0x00100000
|
|
#define FILE_SUPPORTS_TRANSACTIONS 0x00200000
|
|
#define FILE_SUPPORTS_HARD_LINKS 0x00400000
|
|
#define FILE_SUPPORTS_EXTENDED_ATTRIBUTES 0x00800000
|
|
#define FILE_SUPPORTS_OPEN_BY_FILE_ID 0x01000000
|
|
#define FILE_SUPPORTS_USN_JOURNAL 0x02000000
|
|
#define FILE_SUPPORTS_INTEGRITY_STREAMS 0x04000000
|
|
#define FILE_SUPPORTS_BLOCK_REFCOUNTING 0x08000000
|
|
#define FILE_SUPPORTS_SPARSE_VDL 0x10000000
|
|
#define FILE_DAX_VOLUME 0x20000000
|
|
|
|
#define IO_COMPLETION_QUERY_STATE 0x0001
|
|
#define IO_COMPLETION_MODIFY_STATE 0x0002
|
|
#define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
|
|
/* end ntifs.h */
|
|
|
|
/* also in ddk/winddk.h */
|
|
#define DUPLICATE_CLOSE_SOURCE 0x00000001
|
|
#define DUPLICATE_SAME_ACCESS 0x00000002
|
|
/* end winddk.k */
|
|
|
|
#define MAILSLOT_NO_MESSAGE ((DWORD)-1)
|
|
#define MAILSLOT_WAIT_FOREVER ((DWORD)-1)
|
|
#define PROCESS_TERMINATE 1
|
|
#define PROCESS_CREATE_THREAD 2
|
|
#define PROCESS_SET_SESSIONID 4
|
|
#define PROCESS_VM_OPERATION 8
|
|
#define PROCESS_VM_READ 16
|
|
#define PROCESS_VM_WRITE 32
|
|
#define PROCESS_CREATE_PROCESS 128
|
|
#define PROCESS_SET_QUOTA 256
|
|
#define PROCESS_SET_INFORMATION 512
|
|
#define PROCESS_QUERY_INFORMATION 1024
|
|
#define PROCESS_SUSPEND_RESUME 2048
|
|
#define PROCESS_QUERY_LIMITED_INFORMATION 0x1000
|
|
#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0xFFF)
|
|
#define PROCESS_DUP_HANDLE 64
|
|
#define THREAD_TERMINATE 1
|
|
#define THREAD_SUSPEND_RESUME 2
|
|
#define THREAD_GET_CONTEXT 8
|
|
#define THREAD_SET_CONTEXT 16
|
|
#define THREAD_SET_INFORMATION 32
|
|
#define THREAD_QUERY_INFORMATION 64
|
|
#define THREAD_SET_THREAD_TOKEN 128
|
|
#define THREAD_IMPERSONATE 256
|
|
#define THREAD_DIRECT_IMPERSONATION 0x200
|
|
#define THREAD_QUERY_LIMITED_INFORMATION 0x0800
|
|
#define THREAD_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3FF)
|
|
#define MUTANT_QUERY_STATE 0x0001
|
|
#define MUTANT_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|MUTANT_QUERY_STATE)
|
|
#define TIMER_QUERY_STATE 0x0001
|
|
#define TIMER_MODIFY_STATE 0x0002
|
|
#define TIMER_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|TIMER_QUERY_STATE|TIMER_MODIFY_STATE)
|
|
#define THREAD_BASE_PRIORITY_LOWRT 15
|
|
#define THREAD_BASE_PRIORITY_MAX 2
|
|
#define THREAD_BASE_PRIORITY_MIN (-2)
|
|
#define THREAD_BASE_PRIORITY_IDLE (-15)
|
|
|
|
#define PROCESS_SET_LIMITED_INFORMATION 0x2000
|
|
#define THREAD_RESUME 0x1000
|
|
|
|
#define SE_CREATE_TOKEN_NAME TEXT("SeCreateTokenPrivilege")
|
|
#define SE_ASSIGNPRIMARYTOKEN_NAME TEXT("SeAssignPrimaryTokenPrivilege")
|
|
#define SE_LOCK_MEMORY_NAME TEXT("SeLockMemoryPrivilege")
|
|
#define SE_INCREASE_QUOTA_NAME TEXT("SeIncreaseQuotaPrivilege")
|
|
#define SE_UNSOLICITED_INPUT_NAME TEXT("SeUnsolicitedInputPrivilege")
|
|
#define SE_MACHINE_ACCOUNT_NAME TEXT("SeMachineAccountPrivilege")
|
|
#define SE_TCB_NAME TEXT("SeTcbPrivilege")
|
|
#define SE_SECURITY_NAME TEXT("SeSecurityPrivilege")
|
|
#define SE_TAKE_OWNERSHIP_NAME TEXT("SeTakeOwnershipPrivilege")
|
|
#define SE_LOAD_DRIVER_NAME TEXT("SeLoadDriverPrivilege")
|
|
#define SE_SYSTEM_PROFILE_NAME TEXT("SeSystemProfilePrivilege")
|
|
#define SE_SYSTEMTIME_NAME TEXT("SeSystemtimePrivilege")
|
|
#define SE_PROF_SINGLE_PROCESS_NAME TEXT("SeProfileSingleProcessPrivilege")
|
|
#define SE_INC_BASE_PRIORITY_NAME TEXT("SeIncreaseBasePriorityPrivilege")
|
|
#define SE_CREATE_PAGEFILE_NAME TEXT("SeCreatePagefilePrivilege")
|
|
#define SE_CREATE_PERMANENT_NAME TEXT("SeCreatePermanentPrivilege")
|
|
#define SE_BACKUP_NAME TEXT("SeBackupPrivilege")
|
|
#define SE_RESTORE_NAME TEXT("SeRestorePrivilege")
|
|
#define SE_SHUTDOWN_NAME TEXT("SeShutdownPrivilege")
|
|
#define SE_DEBUG_NAME TEXT("SeDebugPrivilege")
|
|
#define SE_AUDIT_NAME TEXT("SeAuditPrivilege")
|
|
#define SE_SYSTEM_ENVIRONMENT_NAME TEXT("SeSystemEnvironmentPrivilege")
|
|
#define SE_CHANGE_NOTIFY_NAME TEXT("SeChangeNotifyPrivilege")
|
|
#define SE_REMOTE_SHUTDOWN_NAME TEXT("SeRemoteShutdownPrivilege")
|
|
#define SE_UNDOCK_NAME TEXT("SeUndockPrivilege")
|
|
#define SE_SYNC_AGENT_NAME TEXT("SeSyncAgentPrivilege")
|
|
#define SE_ENABLE_DELEGATION_NAME TEXT("SeEnableDelegationPrivilege")
|
|
#define SE_MANAGE_VOLUME_NAME TEXT("SeManageVolumePrivilege")
|
|
#define SE_IMPERSONATE_NAME TEXT("SeImpersonatePrivilege")
|
|
#define SE_CREATE_GLOBAL_NAME TEXT("SeCreateGlobalPrivilege")
|
|
|
|
#define SE_GROUP_MANDATORY 0x00000001
|
|
#define SE_GROUP_ENABLED_BY_DEFAULT 0x00000002
|
|
#define SE_GROUP_ENABLED 0x00000004
|
|
#define SE_GROUP_OWNER 0x00000008
|
|
#define SE_GROUP_USE_FOR_DENY_ONLY 0x00000010
|
|
#define SE_GROUP_INTEGRITY 0x00000020
|
|
#define SE_GROUP_INTEGRITY_ENABLED 0x00000040
|
|
#define SE_GROUP_LOGON_ID 0xC0000000
|
|
#define SE_GROUP_RESOURCE 0x20000000
|
|
#define SE_GROUP_VALID_ATTRIBUTES 0xE000007F
|
|
|
|
/* FIXME: non-standard */
|
|
#define LANG_ESPERANTO 0x8f
|
|
#define LANG_WALON 0x90
|
|
#define LANG_CORNISH 0x92
|
|
|
|
/* FIXME: not present in the official headers */
|
|
#define LANG_MALAGASY 0x8d
|
|
#define LANG_GAELIC 0x94
|
|
#define LANG_SAAMI 0x3b
|
|
#define LANG_SUTU 0x30
|
|
#define LANG_TSONGA 0x31
|
|
#define LANG_VENDA 0x33
|
|
#define LANG_MANX_GAELIC 0x94
|
|
#define SUBLANG_PORTUGUESE_PORTUGAL 0x02
|
|
|
|
#define PROCESSOR_INTEL_386 386
|
|
#define PROCESSOR_INTEL_486 486
|
|
#define PROCESSOR_INTEL_PENTIUM 586
|
|
#define PROCESSOR_MIPS_R4000 4000
|
|
#define PROCESSOR_ALPHA_21064 21064
|
|
#define PROCESSOR_INTEL_IA64 2200
|
|
#define PROCESSOR_PPC_601 601
|
|
#define PROCESSOR_PPC_603 603
|
|
#define PROCESSOR_PPC_604 604
|
|
#define PROCESSOR_PPC_620 620
|
|
#define PROCESSOR_INTEL_860 860
|
|
#define PROCESSOR_AMD_X8664 8664
|
|
#define PROCESSOR_MIPS_R2000 2000
|
|
#define PROCESSOR_MIPS_R3000 3000
|
|
#define PROCESSOR_HITACHI_SH3 10003
|
|
#define PROCESSOR_HITACHI_SH3E 10004
|
|
#define PROCESSOR_HITACHI_SH4 10005
|
|
#define PROCESSOR_MOTOROLA_821 821
|
|
#define PROCESSOR_SHx_SH3 103
|
|
#define PROCESSOR_SHx_SH4 104
|
|
#define PROCESSOR_STRONGARM 2577
|
|
#define PROCESSOR_ARM720 1824
|
|
#define PROCESSOR_ARM820 2080
|
|
#define PROCESSOR_ARM920 2336
|
|
#define PROCESSOR_ARM_7TDMI 70001
|
|
#define PROCESSOR_ARCHITECTURE_INTEL 0
|
|
#define PROCESSOR_ARCHITECTURE_MIPS 1
|
|
#define PROCESSOR_ARCHITECTURE_ALPHA 2
|
|
#define PROCESSOR_ARCHITECTURE_PPC 3
|
|
#define PROCESSOR_ARCHITECTURE_SHX 4
|
|
#define PROCESSOR_ARCHITECTURE_ARM 5
|
|
#define PROCESSOR_ARCHITECTURE_IA64 6
|
|
#define PROCESSOR_ARCHITECTURE_ALPHA64 7
|
|
#define PROCESSOR_ARCHITECTURE_MSIL 8
|
|
#define PROCESSOR_ARCHITECTURE_AMD64 9
|
|
#define PROCESSOR_ARCHITECTURE_UNKNOWN 0xFFFF
|
|
|
|
/* also in ddk/ntifs.h */
|
|
#define FILE_ACTION_ADDED 0x00000001
|
|
#define FILE_ACTION_REMOVED 0x00000002
|
|
#define FILE_ACTION_MODIFIED 0x00000003
|
|
#define FILE_ACTION_RENAMED_OLD_NAME 0x00000004
|
|
#define FILE_ACTION_RENAMED_NEW_NAME 0x00000005
|
|
#define FILE_ACTION_ADDED_STREAM 0x00000006
|
|
#define FILE_ACTION_REMOVED_STREAM 0x00000007
|
|
#define FILE_ACTION_MODIFIED_STREAM 0x00000008
|
|
#define FILE_ACTION_REMOVED_BY_DELETE 0x00000009
|
|
#define FILE_ACTION_ID_NOT_TUNNELLED 0x0000000A
|
|
#define FILE_ACTION_TUNNELLED_ID_COLLISION 0x0000000B
|
|
/* end ntifs.h */
|
|
#define HEAP_NO_SERIALIZE 1
|
|
#define HEAP_GROWABLE 2
|
|
#define HEAP_GENERATE_EXCEPTIONS 4
|
|
#define HEAP_ZERO_MEMORY 8
|
|
#define HEAP_REALLOC_IN_PLACE_ONLY 16
|
|
#define HEAP_TAIL_CHECKING_ENABLED 32
|
|
#define HEAP_FREE_CHECKING_ENABLED 64
|
|
#define HEAP_DISABLE_COALESCE_ON_FREE 128
|
|
#define HEAP_CREATE_ALIGN_16 0x10000
|
|
#define HEAP_CREATE_ENABLE_TRACING 0x20000
|
|
#define HEAP_CREATE_ENABLE_EXECUTE 0x00040000
|
|
#define HEAP_MAXIMUM_TAG 0xFFF
|
|
#define HEAP_PSEUDO_TAG_FLAG 0x8000
|
|
#define HEAP_TAG_SHIFT 16
|
|
#define HEAP_MAKE_TAG_FLAGS(b,o) ((DWORD)((b)+(o)<<16)))
|
|
|
|
#define KEY_QUERY_VALUE 1
|
|
#define KEY_SET_VALUE 2
|
|
#define KEY_CREATE_SUB_KEY 4
|
|
#define KEY_ENUMERATE_SUB_KEYS 8
|
|
#define KEY_NOTIFY 16
|
|
#define KEY_CREATE_LINK 32
|
|
#define KEY_WOW64_64KEY 0x00000100
|
|
#define KEY_WOW64_32KEY 0x00000200
|
|
#define KEY_WOW64_RES 0x00000300
|
|
|
|
#define KEY_WRITE 0x20006
|
|
#define KEY_EXECUTE 0x20019
|
|
#define KEY_READ 0x20019
|
|
#define KEY_ALL_ACCESS 0xf003f
|
|
#define REG_WHOLE_HIVE_VOLATILE 1
|
|
#define REG_REFRESH_HIVE 2
|
|
#define REG_NO_LAZY_FLUSH 4
|
|
#define REG_FORCE_RESTORE 8
|
|
#define REG_OPTION_RESERVED 0
|
|
#define REG_OPTION_NON_VOLATILE 0
|
|
#define REG_OPTION_VOLATILE 1
|
|
#define REG_OPTION_CREATE_LINK 2
|
|
#define REG_OPTION_BACKUP_RESTORE 4
|
|
#define REG_OPTION_OPEN_LINK 8
|
|
#define REG_LEGAL_OPTION 15
|
|
#define MAXIMUM_PROCESSORS 32
|
|
#define PAGE_NOACCESS 0x0001
|
|
#define PAGE_READONLY 0x0002
|
|
#define PAGE_READWRITE 0x0004
|
|
#define PAGE_WRITECOPY 0x0008
|
|
#define PAGE_EXECUTE 0x0010
|
|
#define PAGE_EXECUTE_READ 0x0020
|
|
#define PAGE_EXECUTE_READWRITE 0x0040
|
|
#define PAGE_EXECUTE_WRITECOPY 0x0080
|
|
#define PAGE_GUARD 0x0100
|
|
#define PAGE_NOCACHE 0x0200
|
|
#define PAGE_WRITECOMBINE 0x0400
|
|
#define MEM_COMMIT 0x1000
|
|
#define MEM_RESERVE 0x2000
|
|
#define MEM_DECOMMIT 0x4000
|
|
#define MEM_RELEASE 0x8000
|
|
#define MEM_FREE 0x10000
|
|
#define MEM_PRIVATE 0x20000
|
|
#define MEM_MAPPED 0x40000
|
|
#define MEM_RESET 0x80000
|
|
#define MEM_TOP_DOWN 0x100000
|
|
#define MEM_WRITE_WATCH 0x200000 /* 98/Me */
|
|
#define MEM_PHYSICAL 0x400000
|
|
#define MEM_4MB_PAGES 0x80000000
|
|
#define MEM_IMAGE SEC_IMAGE
|
|
#define SEC_NO_CHANGE 0x00400000
|
|
#define SEC_FILE 0x00800000
|
|
#define SEC_IMAGE 0x01000000
|
|
#define SEC_VLM 0x02000000
|
|
#define SEC_RESERVE 0x04000000
|
|
#define SEC_COMMIT 0x08000000
|
|
#define SEC_NOCACHE 0x10000000
|
|
#define SEC_WRITECOMBINE 0x40000000
|
|
#define SEC_LARGE_PAGES 0x80000000
|
|
#define SEC_IMAGE_NO_EXECUTE (SEC_IMAGE | SEC_NOCACHE)
|
|
#define SECTION_MAP_EXECUTE_EXPLICIT 0x0020
|
|
#define SECTION_EXTEND_SIZE 16
|
|
#define SECTION_MAP_READ 4
|
|
#define SECTION_MAP_WRITE 2
|
|
#define SECTION_QUERY 1
|
|
#define SECTION_MAP_EXECUTE 8
|
|
#define SECTION_ALL_ACCESS 0xf001f
|
|
#define WRITE_WATCH_FLAG_RESET 0x01
|
|
#define MESSAGE_RESOURCE_UNICODE 1
|
|
#define RTL_CRITSECT_TYPE 0
|
|
#define RTL_RESOURCE_TYPE 1
|
|
|
|
#define AT_ROUND_TO_PAGE 0x40000000
|
|
|
|
#define IMAGE_SIZEOF_FILE_HEADER 20
|
|
#define IMAGE_FILE_RELOCS_STRIPPED 1
|
|
#define IMAGE_FILE_EXECUTABLE_IMAGE 2
|
|
#define IMAGE_FILE_LINE_NUMS_STRIPPED 4
|
|
#define IMAGE_FILE_LOCAL_SYMS_STRIPPED 8
|
|
#define IMAGE_FILE_AGGRESIVE_WS_TRIM 16
|
|
#define IMAGE_FILE_LARGE_ADDRESS_AWARE 32
|
|
#define IMAGE_FILE_BYTES_REVERSED_LO 128
|
|
#define IMAGE_FILE_32BIT_MACHINE 256
|
|
#define IMAGE_FILE_DEBUG_STRIPPED 512
|
|
#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP 1024
|
|
#define IMAGE_FILE_NET_RUN_FROM_SWAP 2048
|
|
#define IMAGE_FILE_SYSTEM 4096
|
|
#define IMAGE_FILE_DLL 8192
|
|
#define IMAGE_FILE_UP_SYSTEM_ONLY 16384
|
|
#define IMAGE_FILE_BYTES_REVERSED_HI 32768
|
|
#define IMAGE_FILE_MACHINE_UNKNOWN 0
|
|
|
|
#define IMAGE_FILE_MACHINE_AM33 0x1d3
|
|
#define IMAGE_FILE_MACHINE_AMD64 0x8664
|
|
#define IMAGE_FILE_MACHINE_ARM 0x1c0
|
|
#define IMAGE_FILE_MACHINE_ARMNT 0x1c4
|
|
#define IMAGE_FILE_MACHINE_EBC 0xebc
|
|
#define IMAGE_FILE_MACHINE_I386 0x14c
|
|
#define IMAGE_FILE_MACHINE_IA64 0x200
|
|
#define IMAGE_FILE_MACHINE_M32R 0x9041
|
|
#define IMAGE_FILE_MACHINE_MIPS16 0x266
|
|
#define IMAGE_FILE_MACHINE_MIPSFPU 0x366
|
|
#define IMAGE_FILE_MACHINE_MIPSFPU16 0x466
|
|
#define IMAGE_FILE_MACHINE_POWERPC 0x1f0
|
|
#define IMAGE_FILE_MACHINE_POWERPCFP 0x1f1
|
|
#define IMAGE_FILE_MACHINE_R4000 0x166
|
|
#define IMAGE_FILE_MACHINE_SH3 0x1a2
|
|
#define IMAGE_FILE_MACHINE_SH3E 0x01a4
|
|
#define IMAGE_FILE_MACHINE_SH3DSP 0x1a3
|
|
#define IMAGE_FILE_MACHINE_SH4 0x1a6
|
|
#define IMAGE_FILE_MACHINE_SH5 0x1a8
|
|
#define IMAGE_FILE_MACHINE_THUMB 0x1c2
|
|
#define IMAGE_FILE_MACHINE_WCEMIPSV2 0x169
|
|
#define IMAGE_FILE_MACHINE_R3000 0x162
|
|
#define IMAGE_FILE_MACHINE_R10000 0x168
|
|
#define IMAGE_FILE_MACHINE_ALPHA 0x184
|
|
#define IMAGE_FILE_MACHINE_ALPHA64 0x0284
|
|
#define IMAGE_FILE_MACHINE_AXP64 IMAGE_FILE_MACHINE_ALPHA64
|
|
#define IMAGE_FILE_MACHINE_CEE 0xC0EE
|
|
#define IMAGE_FILE_MACHINE_TRICORE 0x0520
|
|
#define IMAGE_FILE_MACHINE_CEF 0x0CEF
|
|
#define IMAGE_FILE_MACHINE_ARM64 0xAA64
|
|
|
|
#define IMAGE_FILE_EXPORT_DIRECTORY 0
|
|
#define IMAGE_FILE_IMPORT_DIRECTORY 1
|
|
#define IMAGE_FILE_RESOURCE_DIRECTORY 2
|
|
#define IMAGE_FILE_EXCEPTION_DIRECTORY 3
|
|
#define IMAGE_FILE_SECURITY_DIRECTORY 4
|
|
#define IMAGE_FILE_BASE_RELOCATION_TABLE 5
|
|
#define IMAGE_FILE_DEBUG_DIRECTORY 6
|
|
#define IMAGE_FILE_DESCRIPTION_STRING 7
|
|
#define IMAGE_FILE_MACHINE_VALUE 8 /* Mips */
|
|
#define IMAGE_FILE_THREAD_LOCAL_STORAGE 9
|
|
#define IMAGE_FILE_CALLBACK_DIRECTORY 10
|
|
|
|
#define IMAGE_DOS_SIGNATURE 0x5A4D
|
|
#define IMAGE_OS2_SIGNATURE 0x454E
|
|
#define IMAGE_OS2_SIGNATURE_LE 0x454C
|
|
#define IMAGE_VXD_SIGNATURE 0x454C
|
|
#define IMAGE_NT_SIGNATURE 0x00004550
|
|
#define IMAGE_NT_OPTIONAL_HDR32_MAGIC 0x10b
|
|
#define IMAGE_NT_OPTIONAL_HDR64_MAGIC 0x20b
|
|
#ifdef _WIN64
|
|
#define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR64_MAGIC
|
|
#else
|
|
#define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR32_MAGIC
|
|
#endif
|
|
#define IMAGE_ROM_OPTIONAL_HDR_MAGIC 0x107
|
|
#define IMAGE_SEPARATE_DEBUG_SIGNATURE 0x4944
|
|
#define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 16
|
|
#define IMAGE_SIZEOF_ROM_OPTIONAL_HEADER 56
|
|
#define IMAGE_SIZEOF_STD_OPTIONAL_HEADER 28
|
|
#define IMAGE_SIZEOF_NT_OPTIONAL_HEADER 224
|
|
#define IMAGE_SIZEOF_SHORT_NAME 8
|
|
#define IMAGE_SIZEOF_SECTION_HEADER 40
|
|
#define IMAGE_SIZEOF_SYMBOL 18
|
|
#define IMAGE_SIZEOF_AUX_SYMBOL 18
|
|
#define IMAGE_SIZEOF_RELOCATION 10
|
|
#define IMAGE_SIZEOF_BASE_RELOCATION 8
|
|
#define IMAGE_SIZEOF_LINENUMBER 6
|
|
#define IMAGE_SIZEOF_ARCHIVE_MEMBER_HDR 60
|
|
#define SIZEOF_RFPO_DATA 16
|
|
|
|
#define IMAGE_SUBSYSTEM_UNKNOWN 0
|
|
#define IMAGE_SUBSYSTEM_NATIVE 1
|
|
#define IMAGE_SUBSYSTEM_WINDOWS_GUI 2
|
|
#define IMAGE_SUBSYSTEM_WINDOWS_CUI 3
|
|
#define IMAGE_SUBSYSTEM_OS2_CUI 5
|
|
#define IMAGE_SUBSYSTEM_POSIX_CUI 7
|
|
#define IMAGE_SUBSYSTEM_NATIVE_WINDOWS 8
|
|
#define IMAGE_SUBSYSTEM_WINDOWS_CE_GUI 9
|
|
#define IMAGE_SUBSYSTEM_EFI_APPLICATION 10
|
|
#define IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER 11
|
|
#define IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER 12
|
|
#define IMAGE_SUBSYSTEM_EFI_ROM 13
|
|
#define IMAGE_SUBSYSTEM_XBOX 14
|
|
|
|
#define IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE 0x0040
|
|
#define IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY 0x0080
|
|
#define IMAGE_DLLCHARACTERISTICS_NX_COMPAT 0x0100
|
|
#define IMAGE_DLLCHARACTERISTICS_NO_ISOLATION 0x0200
|
|
#define IMAGE_DLLCHARACTERISTICS_NO_SEH 0x0400
|
|
#define IMAGE_DLLCHARACTERISTICS_NO_BIND 0x0800
|
|
#define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER 0x2000
|
|
#define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE 0x8000
|
|
#define IMAGE_FIRST_SECTION(h) ((PIMAGE_SECTION_HEADER) ((ULONG_PTR)h+FIELD_OFFSET(IMAGE_NT_HEADERS,OptionalHeader)+((PIMAGE_NT_HEADERS)(h))->FileHeader.SizeOfOptionalHeader))
|
|
#define IMAGE_DIRECTORY_ENTRY_EXPORT 0
|
|
#define IMAGE_DIRECTORY_ENTRY_IMPORT 1
|
|
#define IMAGE_DIRECTORY_ENTRY_RESOURCE 2
|
|
#define IMAGE_DIRECTORY_ENTRY_EXCEPTION 3
|
|
#define IMAGE_DIRECTORY_ENTRY_SECURITY 4
|
|
#define IMAGE_DIRECTORY_ENTRY_BASERELOC 5
|
|
#define IMAGE_DIRECTORY_ENTRY_DEBUG 6
|
|
#define IMAGE_DIRECTORY_ENTRY_COPYRIGHT 7
|
|
#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR 8
|
|
#define IMAGE_DIRECTORY_ENTRY_TLS 9
|
|
#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG 10
|
|
#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT 11
|
|
#define IMAGE_DIRECTORY_ENTRY_IAT 12
|
|
#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT 13
|
|
#define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 14
|
|
#define IMAGE_SCN_TYPE_REG 0
|
|
#define IMAGE_SCN_TYPE_DSECT 1
|
|
//#define IMAGE_SCN_TYPE_NOLOAD 2
|
|
#define IMAGE_SCN_TYPE_GROUP 4
|
|
#define IMAGE_SCN_TYPE_NO_PAD 8
|
|
#define IMAGE_SCN_CNT_CODE 32
|
|
#define IMAGE_SCN_CNT_INITIALIZED_DATA 64
|
|
#define IMAGE_SCN_CNT_UNINITIALIZED_DATA 128
|
|
#define IMAGE_SCN_LNK_OTHER 256
|
|
#define IMAGE_SCN_LNK_INFO 512
|
|
#define IMAGE_SCN_LNK_REMOVE 2048
|
|
#define IMAGE_SCN_LNK_COMDAT 4096
|
|
#define IMAGE_SCN_MEM_FARDATA 0x8000
|
|
#define IMAGE_SCN_MEM_PURGEABLE 0x20000
|
|
#define IMAGE_SCN_MEM_16BIT 0x20000
|
|
#define IMAGE_SCN_MEM_LOCKED 0x40000
|
|
#define IMAGE_SCN_MEM_PRELOAD 0x80000
|
|
#define IMAGE_SCN_ALIGN_1BYTES 0x100000
|
|
#define IMAGE_SCN_ALIGN_2BYTES 0x200000
|
|
#define IMAGE_SCN_ALIGN_4BYTES 0x300000
|
|
#define IMAGE_SCN_ALIGN_8BYTES 0x400000
|
|
#define IMAGE_SCN_ALIGN_16BYTES 0x500000
|
|
#define IMAGE_SCN_ALIGN_32BYTES 0x600000
|
|
#define IMAGE_SCN_ALIGN_64BYTES 0x700000
|
|
#define IMAGE_SCN_LNK_NRELOC_OVFL 0x1000000
|
|
#define IMAGE_SCN_MEM_DISCARDABLE 0x2000000
|
|
#define IMAGE_SCN_MEM_NOT_CACHED 0x4000000
|
|
#define IMAGE_SCN_MEM_NOT_PAGED 0x8000000
|
|
#define IMAGE_SCN_MEM_SHARED 0x10000000
|
|
#define IMAGE_SCN_MEM_EXECUTE 0x20000000
|
|
#define IMAGE_SCN_MEM_READ 0x40000000
|
|
#define IMAGE_SCN_MEM_WRITE 0x80000000
|
|
#define IMAGE_SYM_UNDEFINED 0
|
|
#define IMAGE_SYM_ABSOLUTE (-1)
|
|
#define IMAGE_SYM_DEBUG (-2)
|
|
#define IMAGE_SYM_TYPE_NULL 0
|
|
#define IMAGE_SYM_TYPE_VOID 1
|
|
#define IMAGE_SYM_TYPE_CHAR 2
|
|
#define IMAGE_SYM_TYPE_SHORT 3
|
|
#define IMAGE_SYM_TYPE_INT 4
|
|
#define IMAGE_SYM_TYPE_LONG 5
|
|
#define IMAGE_SYM_TYPE_FLOAT 6
|
|
#define IMAGE_SYM_TYPE_DOUBLE 7
|
|
#define IMAGE_SYM_TYPE_STRUCT 8
|
|
#define IMAGE_SYM_TYPE_UNION 9
|
|
#define IMAGE_SYM_TYPE_ENUM 10
|
|
#define IMAGE_SYM_TYPE_MOE 11
|
|
#define IMAGE_SYM_TYPE_BYTE 12
|
|
#define IMAGE_SYM_TYPE_WORD 13
|
|
#define IMAGE_SYM_TYPE_UINT 14
|
|
#define IMAGE_SYM_TYPE_DWORD 15
|
|
#define IMAGE_SYM_TYPE_PCODE 32768
|
|
#define IMAGE_SYM_DTYPE_NULL 0
|
|
#define IMAGE_SYM_DTYPE_POINTER 1
|
|
#define IMAGE_SYM_DTYPE_FUNCTION 2
|
|
#define IMAGE_SYM_DTYPE_ARRAY 3
|
|
#define IMAGE_SYM_CLASS_END_OF_FUNCTION (-1)
|
|
#define IMAGE_SYM_CLASS_NULL 0
|
|
#define IMAGE_SYM_CLASS_AUTOMATIC 1
|
|
#define IMAGE_SYM_CLASS_EXTERNAL 2
|
|
#define IMAGE_SYM_CLASS_STATIC 3
|
|
#define IMAGE_SYM_CLASS_REGISTER 4
|
|
#define IMAGE_SYM_CLASS_EXTERNAL_DEF 5
|
|
#define IMAGE_SYM_CLASS_LABEL 6
|
|
#define IMAGE_SYM_CLASS_UNDEFINED_LABEL 7
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_STRUCT 8
|
|
#define IMAGE_SYM_CLASS_ARGUMENT 9
|
|
#define IMAGE_SYM_CLASS_STRUCT_TAG 10
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_UNION 11
|
|
#define IMAGE_SYM_CLASS_UNION_TAG 12
|
|
#define IMAGE_SYM_CLASS_TYPE_DEFINITION 13
|
|
#define IMAGE_SYM_CLASS_UNDEFINED_STATIC 14
|
|
#define IMAGE_SYM_CLASS_ENUM_TAG 15
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_ENUM 16
|
|
#define IMAGE_SYM_CLASS_REGISTER_PARAM 17
|
|
#define IMAGE_SYM_CLASS_BIT_FIELD 18
|
|
#define IMAGE_SYM_CLASS_FAR_EXTERNAL 68
|
|
#define IMAGE_SYM_CLASS_BLOCK 100
|
|
#define IMAGE_SYM_CLASS_FUNCTION 101
|
|
#define IMAGE_SYM_CLASS_END_OF_STRUCT 102
|
|
#define IMAGE_SYM_CLASS_FILE 103
|
|
#define IMAGE_SYM_CLASS_SECTION 104
|
|
#define IMAGE_SYM_CLASS_WEAK_EXTERNAL 105
|
|
#define IMAGE_COMDAT_SELECT_NODUPLICATES 1
|
|
#define IMAGE_COMDAT_SELECT_ANY 2
|
|
#define IMAGE_COMDAT_SELECT_SAME_SIZE 3
|
|
#define IMAGE_COMDAT_SELECT_EXACT_MATCH 4
|
|
#define IMAGE_COMDAT_SELECT_ASSOCIATIVE 5
|
|
#define IMAGE_COMDAT_SELECT_LARGEST 6
|
|
#define IMAGE_COMDAT_SELECT_NEWEST 7
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY 1
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_LIBRARY 2
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_ALIAS 3
|
|
#define IMAGE_REL_I386_ABSOLUTE 0
|
|
#define IMAGE_REL_I386_DIR16 1
|
|
#define IMAGE_REL_I386_REL16 2
|
|
#define IMAGE_REL_I386_DIR32 6
|
|
#define IMAGE_REL_I386_DIR32NB 7
|
|
#define IMAGE_REL_I386_SEG12 9
|
|
#define IMAGE_REL_I386_SECTION 10
|
|
#define IMAGE_REL_I386_SECREL 11
|
|
#define IMAGE_REL_I386_REL32 20
|
|
#define IMAGE_REL_MIPS_ABSOLUTE 0
|
|
#define IMAGE_REL_MIPS_REFHALF 1
|
|
#define IMAGE_REL_MIPS_REFWORD 2
|
|
#define IMAGE_REL_MIPS_JMPADDR 3
|
|
#define IMAGE_REL_MIPS_REFHI 4
|
|
#define IMAGE_REL_MIPS_REFLO 5
|
|
#define IMAGE_REL_MIPS_GPREL 6
|
|
#define IMAGE_REL_MIPS_LITERAL 7
|
|
#define IMAGE_REL_MIPS_SECTION 10
|
|
#define IMAGE_REL_MIPS_SECREL 11
|
|
#define IMAGE_REL_MIPS_SECRELLO 12
|
|
#define IMAGE_REL_MIPS_SECRELHI 13
|
|
#define IMAGE_REL_MIPS_REFWORDNB 34
|
|
#define IMAGE_REL_MIPS_PAIR 35
|
|
#define IMAGE_REL_ALPHA_ABSOLUTE 0
|
|
#define IMAGE_REL_ALPHA_REFLONG 1
|
|
#define IMAGE_REL_ALPHA_REFQUAD 2
|
|
#define IMAGE_REL_ALPHA_GPREL32 3
|
|
#define IMAGE_REL_ALPHA_LITERAL 4
|
|
#define IMAGE_REL_ALPHA_LITUSE 5
|
|
#define IMAGE_REL_ALPHA_GPDISP 6
|
|
#define IMAGE_REL_ALPHA_BRADDR 7
|
|
#define IMAGE_REL_ALPHA_HINT 8
|
|
#define IMAGE_REL_ALPHA_INLINE_REFLONG 9
|
|
#define IMAGE_REL_ALPHA_REFHI 10
|
|
#define IMAGE_REL_ALPHA_REFLO 11
|
|
#define IMAGE_REL_ALPHA_PAIR 12
|
|
#define IMAGE_REL_ALPHA_MATCH 13
|
|
#define IMAGE_REL_ALPHA_SECTION 14
|
|
#define IMAGE_REL_ALPHA_SECREL 15
|
|
#define IMAGE_REL_ALPHA_REFLONGNB 16
|
|
#define IMAGE_REL_ALPHA_SECRELLO 17
|
|
#define IMAGE_REL_ALPHA_SECRELHI 18
|
|
#define IMAGE_REL_PPC_ABSOLUTE 0
|
|
#define IMAGE_REL_PPC_ADDR64 1
|
|
#define IMAGE_REL_PPC_ADDR32 2
|
|
#define IMAGE_REL_PPC_ADDR24 3
|
|
#define IMAGE_REL_PPC_ADDR16 4
|
|
#define IMAGE_REL_PPC_ADDR14 5
|
|
#define IMAGE_REL_PPC_REL24 6
|
|
#define IMAGE_REL_PPC_REL14 7
|
|
#define IMAGE_REL_PPC_TOCREL16 8
|
|
#define IMAGE_REL_PPC_TOCREL14 9
|
|
#define IMAGE_REL_PPC_ADDR32NB 10
|
|
#define IMAGE_REL_PPC_SECREL 11
|
|
#define IMAGE_REL_PPC_SECTION 12
|
|
#define IMAGE_REL_PPC_IFGLUE 13
|
|
#define IMAGE_REL_PPC_IMGLUE 14
|
|
#define IMAGE_REL_PPC_SECREL16 15
|
|
#define IMAGE_REL_PPC_REFHI 16
|
|
#define IMAGE_REL_PPC_REFLO 17
|
|
#define IMAGE_REL_PPC_PAIR 18
|
|
#define IMAGE_REL_PPC_TYPEMASK 255
|
|
#define IMAGE_REL_PPC_NEG 256
|
|
#define IMAGE_REL_PPC_BRTAKEN 512
|
|
#define IMAGE_REL_PPC_BRNTAKEN 1024
|
|
#define IMAGE_REL_PPC_TOCDEFN 2048
|
|
#define IMAGE_REL_BASED_ABSOLUTE 0
|
|
#define IMAGE_REL_BASED_HIGH 1
|
|
#define IMAGE_REL_BASED_LOW 2
|
|
#define IMAGE_REL_BASED_HIGHLOW 3
|
|
#define IMAGE_REL_BASED_HIGHADJ 4
|
|
#define IMAGE_REL_BASED_MIPS_JMPADDR 5
|
|
#define IMAGE_REL_BASED_MIPS_JMPADDR16 9
|
|
#define IMAGE_REL_BASED_IA64_IMM64 9
|
|
#define IMAGE_REL_BASED_DIR64 10
|
|
#define IMAGE_ARCHIVE_START_SIZE 8
|
|
#define IMAGE_ARCHIVE_START "!<arch>\n"
|
|
#define IMAGE_ARCHIVE_END "`\n"
|
|
#define IMAGE_ARCHIVE_PAD "\n"
|
|
#define IMAGE_ARCHIVE_LINKER_MEMBER "/ "
|
|
#define IMAGE_ARCHIVE_LONGNAMES_MEMBER "// "
|
|
#define IMAGE_RESOURCE_NAME_IS_STRING 0x80000000
|
|
#define IMAGE_RESOURCE_DATA_IS_DIRECTORY 0x80000000
|
|
#define IMAGE_DEBUG_TYPE_UNKNOWN 0
|
|
#define IMAGE_DEBUG_TYPE_COFF 1
|
|
#define IMAGE_DEBUG_TYPE_CODEVIEW 2
|
|
#define IMAGE_DEBUG_TYPE_FPO 3
|
|
#define IMAGE_DEBUG_TYPE_MISC 4
|
|
#define IMAGE_DEBUG_TYPE_EXCEPTION 5
|
|
#define IMAGE_DEBUG_TYPE_FIXUP 6
|
|
#define IMAGE_DEBUG_TYPE_OMAP_TO_SRC 7
|
|
#define IMAGE_DEBUG_TYPE_OMAP_FROM_SRC 8
|
|
#define FRAME_FPO 0
|
|
#define FRAME_TRAP 1
|
|
#define FRAME_TSS 2
|
|
#define FRAME_NONFPO 3
|
|
#define IMAGE_DEBUG_MISC_EXENAME 1
|
|
#define N_BTMASK 0x000F
|
|
#define N_TMASK 0x0030
|
|
#define N_TMASK1 0x00C0
|
|
#define N_TMASK2 0x00F0
|
|
#define N_BTSHFT 4
|
|
#define N_TSHIFT 2
|
|
#define IS_TEXT_UNICODE_ASCII16 1
|
|
#define IS_TEXT_UNICODE_REVERSE_ASCII16 16
|
|
#define IS_TEXT_UNICODE_STATISTICS 2
|
|
#define IS_TEXT_UNICODE_REVERSE_STATISTICS 32
|
|
#define IS_TEXT_UNICODE_CONTROLS 4
|
|
#define IS_TEXT_UNICODE_REVERSE_CONTROLS 64
|
|
#define IS_TEXT_UNICODE_SIGNATURE 8
|
|
#define IS_TEXT_UNICODE_REVERSE_SIGNATURE 128
|
|
#define IS_TEXT_UNICODE_ILLEGAL_CHARS 256
|
|
#define IS_TEXT_UNICODE_ODD_LENGTH 512
|
|
#define IS_TEXT_UNICODE_DBCS_LEADBYTE 1024
|
|
#define IS_TEXT_UNICODE_NULL_BYTES 4096
|
|
#define IS_TEXT_UNICODE_UNICODE_MASK 15
|
|
#define IS_TEXT_UNICODE_REVERSE_MASK 240
|
|
#define IS_TEXT_UNICODE_NOT_UNICODE_MASK 3840
|
|
#define IS_TEXT_UNICODE_NOT_ASCII_MASK 61440
|
|
#define SERVICE_KERNEL_DRIVER 1
|
|
#define SERVICE_FILE_SYSTEM_DRIVER 2
|
|
#define SERVICE_ADAPTER 4
|
|
#define SERVICE_RECOGNIZER_DRIVER 8
|
|
#define SERVICE_DRIVER (SERVICE_KERNEL_DRIVER|SERVICE_FILE_SYSTEM_DRIVER|SERVICE_RECOGNIZER_DRIVER)
|
|
#define SERVICE_WIN32_OWN_PROCESS 16
|
|
#define SERVICE_WIN32_SHARE_PROCESS 32
|
|
#define SERVICE_WIN32 (SERVICE_WIN32_OWN_PROCESS|SERVICE_WIN32_SHARE_PROCESS)
|
|
#define SERVICE_INTERACTIVE_PROCESS 256
|
|
#define SERVICE_TYPE_ALL (SERVICE_WIN32|SERVICE_ADAPTER|SERVICE_DRIVER|SERVICE_INTERACTIVE_PROCESS)
|
|
#define SERVICE_BOOT_START 0
|
|
#define SERVICE_SYSTEM_START 1
|
|
#define SERVICE_AUTO_START 2
|
|
#define SERVICE_DEMAND_START 3
|
|
#define SERVICE_DISABLED 4
|
|
#define SERVICE_ERROR_IGNORE 0
|
|
#define SERVICE_ERROR_NORMAL 1
|
|
#define SERVICE_ERROR_SEVERE 2
|
|
#define SERVICE_ERROR_CRITICAL 3
|
|
|
|
#define DLL_PROCESS_DETACH 0
|
|
#define DLL_PROCESS_ATTACH 1
|
|
#define DLL_THREAD_ATTACH 2
|
|
#define DLL_THREAD_DETACH 3
|
|
#ifdef __WINESRC__
|
|
#define DLL_WINE_PREATTACH 8 /* Never called, but defined for compatibility with Wine source */
|
|
#endif
|
|
#define TAPE_ABSOLUTE_POSITION 0
|
|
#define TAPE_LOGICAL_POSITION 1
|
|
#define TAPE_PSEUDO_LOGICAL_POSITION 2
|
|
#define TAPE_REWIND 0
|
|
#define TAPE_ABSOLUTE_BLOCK 1
|
|
#define TAPE_LOGICAL_BLOCK 2
|
|
#define TAPE_PSEUDO_LOGICAL_BLOCK 3
|
|
#define TAPE_SPACE_END_OF_DATA 4
|
|
#define TAPE_SPACE_RELATIVE_BLOCKS 5
|
|
#define TAPE_SPACE_FILEMARKS 6
|
|
#define TAPE_SPACE_SEQUENTIAL_FMKS 7
|
|
#define TAPE_SPACE_SETMARKS 8
|
|
#define TAPE_SPACE_SEQUENTIAL_SMKS 9
|
|
#define TAPE_DRIVE_FIXED 1
|
|
#define TAPE_DRIVE_SELECT 2
|
|
#define TAPE_DRIVE_INITIATOR 4
|
|
#define TAPE_DRIVE_ERASE_SHORT 16
|
|
#define TAPE_DRIVE_ERASE_LONG 32
|
|
#define TAPE_DRIVE_ERASE_BOP_ONLY 64
|
|
#define TAPE_DRIVE_ERASE_IMMEDIATE 128
|
|
#define TAPE_DRIVE_TAPE_CAPACITY 256
|
|
#define TAPE_DRIVE_TAPE_REMAINING 512
|
|
#define TAPE_DRIVE_FIXED_BLOCK 1024
|
|
#define TAPE_DRIVE_VARIABLE_BLOCK 2048
|
|
#define TAPE_DRIVE_WRITE_PROTECT 4096
|
|
#define TAPE_DRIVE_EOT_WZ_SIZE 8192
|
|
#define TAPE_DRIVE_ECC 0x10000
|
|
#define TAPE_DRIVE_COMPRESSION 0x20000
|
|
#define TAPE_DRIVE_PADDING 0x40000
|
|
#define TAPE_DRIVE_REPORT_SMKS 0x80000
|
|
#define TAPE_DRIVE_GET_ABSOLUTE_BLK 0x100000
|
|
#define TAPE_DRIVE_GET_LOGICAL_BLK 0x200000
|
|
#define TAPE_DRIVE_SET_EOT_WZ_SIZE 0x400000
|
|
#define TAPE_DRIVE_EJECT_MEDIA 0x1000000
|
|
#define TAPE_DRIVE_CLEAN_REQUESTS 0x2000000
|
|
#define TAPE_DRIVE_SET_CMP_BOP_ONLY 0x4000000
|
|
#define TAPE_DRIVE_RESERVED_BIT 0x80000000
|
|
#define TAPE_DRIVE_LOAD_UNLOAD 0x80000001
|
|
#define TAPE_DRIVE_TENSION 0x80000002
|
|
#define TAPE_DRIVE_LOCK_UNLOCK 0x80000004
|
|
#define TAPE_DRIVE_REWIND_IMMEDIATE 0x80000008
|
|
#define TAPE_DRIVE_SET_BLOCK_SIZE 0x80000010
|
|
#define TAPE_DRIVE_LOAD_UNLD_IMMED 0x80000020
|
|
#define TAPE_DRIVE_TENSION_IMMED 0x80000040
|
|
#define TAPE_DRIVE_LOCK_UNLK_IMMED 0x80000080
|
|
#define TAPE_DRIVE_SET_ECC 0x80000100
|
|
#define TAPE_DRIVE_SET_COMPRESSION 0x80000200
|
|
#define TAPE_DRIVE_SET_PADDING 0x80000400
|
|
#define TAPE_DRIVE_SET_REPORT_SMKS 0x80000800
|
|
#define TAPE_DRIVE_ABSOLUTE_BLK 0x80001000
|
|
#define TAPE_DRIVE_ABS_BLK_IMMED 0x80002000
|
|
#define TAPE_DRIVE_LOGICAL_BLK 0x80004000
|
|
#define TAPE_DRIVE_LOG_BLK_IMMED 0x80008000
|
|
#define TAPE_DRIVE_END_OF_DATA 0x80010000
|
|
#define TAPE_DRIVE_RELATIVE_BLKS 0x80020000
|
|
#define TAPE_DRIVE_FILEMARKS 0x80040000
|
|
#define TAPE_DRIVE_SEQUENTIAL_FMKS 0x80080000
|
|
#define TAPE_DRIVE_SETMARKS 0x80100000
|
|
#define TAPE_DRIVE_SEQUENTIAL_SMKS 0x80200000
|
|
#define TAPE_DRIVE_REVERSE_POSITION 0x80400000
|
|
#define TAPE_DRIVE_SPACE_IMMEDIATE 0x80800000
|
|
#define TAPE_DRIVE_WRITE_SETMARKS 0x81000000
|
|
#define TAPE_DRIVE_WRITE_FILEMARKS 0x82000000
|
|
#define TAPE_DRIVE_WRITE_SHORT_FMKS 0x84000000
|
|
#define TAPE_DRIVE_WRITE_LONG_FMKS 0x88000000
|
|
#define TAPE_DRIVE_WRITE_MARK_IMMED 0x90000000
|
|
#define TAPE_DRIVE_FORMAT 0xA0000000
|
|
#define TAPE_DRIVE_FORMAT_IMMEDIATE 0xC0000000
|
|
#define TAPE_DRIVE_HIGH_FEATURES 0x80000000
|
|
#define TAPE_FIXED_PARTITIONS 0
|
|
#define TAPE_INITIATOR_PARTITIONS 2
|
|
#define TAPE_SELECT_PARTITIONS 1
|
|
#define TAPE_FILEMARKS 1
|
|
#define TAPE_LONG_FILEMARKS 3
|
|
#define TAPE_SETMARKS 0
|
|
#define TAPE_SHORT_FILEMARKS 2
|
|
#define TAPE_ERASE_LONG 1
|
|
#define TAPE_ERASE_SHORT 0
|
|
#define TAPE_LOAD 0
|
|
#define TAPE_UNLOAD 1
|
|
#define TAPE_TENSION 2
|
|
#define TAPE_LOCK 3
|
|
#define TAPE_UNLOCK 4
|
|
#define TAPE_FORMAT 5
|
|
#if (_WIN32_WINNT >= 0x0500)
|
|
#define VER_MINORVERSION 0x0000001
|
|
#define VER_MAJORVERSION 0x0000002
|
|
#define VER_BUILDNUMBER 0x0000004
|
|
#define VER_PLATFORMID 0x0000008
|
|
#define VER_SERVICEPACKMINOR 0x0000010
|
|
#define VER_SERVICEPACKMAJOR 0x0000020
|
|
#define VER_SUITENAME 0x0000040
|
|
#define VER_PRODUCT_TYPE 0x0000080
|
|
#define VER_EQUAL 1
|
|
#define VER_GREATER 2
|
|
#define VER_GREATER_EQUAL 3
|
|
#define VER_LESS 4
|
|
#define VER_LESS_EQUAL 5
|
|
#define VER_AND 6
|
|
#define VER_OR 7
|
|
#endif
|
|
|
|
#define VER_PLATFORM_WIN32s 0
|
|
#define VER_PLATFORM_WIN32_WINDOWS 1
|
|
#define VER_PLATFORM_WIN32_NT 2
|
|
#define VER_NT_WORKSTATION 1
|
|
#define VER_NT_DOMAIN_CONTROLLER 2
|
|
#define VER_NT_SERVER 3
|
|
|
|
#define WT_EXECUTEDEFAULT 0x00000000
|
|
#define WT_EXECUTEINIOTHREAD 0x00000001
|
|
#define WT_EXECUTEINUITHREAD 0x00000002
|
|
#define WT_EXECUTEINWAITTHREAD 0x00000004
|
|
#define WT_EXECUTEONLYONCE 0x00000008
|
|
#define WT_EXECUTELONGFUNCTION 0x00000010
|
|
#define WT_EXECUTEINTIMERTHREAD 0x00000020
|
|
#define WT_EXECUTEINPERSISTENTIOTHREAD 0x00000040
|
|
#define WT_EXECUTEINPERSISTENTTHREAD 0x00000080
|
|
#define WT_TRANSFER_IMPERSONATION 0x00000100
|
|
#define WT_SET_MAX_THREADPOOL_THREADS(flags,limit) ((flags)|=(limit)<<16)
|
|
typedef VOID (NTAPI *WORKERCALLBACKFUNC)(PVOID);
|
|
#if (_WIN32_WINNT >= 0x0501)
|
|
#define ACTIVATION_CONTEXT_SECTION_ASSEMBLY_INFORMATION 1
|
|
#define ACTIVATION_CONTEXT_SECTION_DLL_REDIRECTION 2
|
|
#define ACTIVATION_CONTEXT_SECTION_WINDOW_CLASS_REDIRECTION 3
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_SERVER_REDIRECTION 4
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_INTERFACE_REDIRECTION 5
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_TYPE_LIBRARY_REDIRECTION 6
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_PROGID_REDIRECTION 7
|
|
#define ACTIVATION_CONTEXT_SECTION_CLR_SURROGATES 9
|
|
#define ACTIVATION_CONTEXT_SECTION_APPLICATION_SETTINGS 10
|
|
#define ACTIVATION_CONTEXT_SECTION_COMPATIBILITY_INFO 11
|
|
#endif /* (_WIN32_WINNT >= 0x0501) */
|
|
#define BTYPE(x) ((x)&N_BTMASK)
|
|
#define ISPTR(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT))
|
|
#define ISFCN(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_FUNCTION<<N_BTSHFT))
|
|
#define ISARY(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_ARRAY<<N_BTSHFT))
|
|
#define ISTAG(x) ((x)==IMAGE_SYM_CLASS_STRUCT_TAG||(x)==IMAGE_SYM_CLASS_UNION_TAG||(x)==IMAGE_SYM_CLASS_ENUM_TAG)
|
|
#define INCREF(x) ((((x)&~N_BTMASK)<<N_TSHIFT)|(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT)|((x)&N_BTMASK))
|
|
#define DECREF(x) ((((x)>>N_TSHIFT)&~N_BTMASK)|((x)&N_BTMASK))
|
|
#define TLS_MINIMUM_AVAILABLE 64
|
|
#define FLS_MAXIMUM_AVAILABLE 128
|
|
#define REPARSE_GUID_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(REPARSE_GUID_DATA_BUFFER, GenericReparseBuffer)
|
|
#define MAXIMUM_REPARSE_DATA_BUFFER_SIZE 16384
|
|
#define IO_REPARSE_TAG_RESERVED_ZERO 0
|
|
#define IO_REPARSE_TAG_RESERVED_ONE 1
|
|
#define IO_REPARSE_TAG_RESERVED_RANGE IO_REPARSE_TAG_RESERVED_ONE
|
|
#define IsReparseTagMicrosoft(x) ((x)&0x80000000)
|
|
#define IsReparseTagHighLatency(x) ((x)&0x40000000)
|
|
#define IsReparseTagNameSurrogate(x) ((x)&0x20000000)
|
|
#define IO_REPARSE_TAG_VALID_VALUES 0xE000FFFF
|
|
#define IsReparseTagValid(x) (!((x)&~IO_REPARSE_TAG_VALID_VALUES)&&((x)>IO_REPARSE_TAG_RESERVED_RANGE))
|
|
#define IO_REPARSE_TAG_SYMBOLIC_LINK IO_REPARSE_TAG_RESERVED_ZERO
|
|
#define IO_REPARSE_TAG_MOUNT_POINT 0xA0000003
|
|
#define IO_REPARSE_TAG_SYMLINK 0xA000000CL
|
|
|
|
#define RTL_CRITICAL_SECTION_FLAG_NO_DEBUG_INFO 0x01000000
|
|
#define RTL_CRITICAL_SECTION_FLAG_DYNAMIC_SPIN 0x02000000
|
|
#define RTL_CRITICAL_SECTION_FLAG_STATIC_INIT 0x04000000
|
|
#define RTL_CRITICAL_SECTION_FLAG_RESOURCE_TYPE 0x08000000
|
|
#define RTL_CRITICAL_SECTION_FLAG_FORCE_DEBUG_INFO 0x10000000
|
|
#define RTL_CRITICAL_SECTION_ALL_FLAG_BITS 0xFF000000
|
|
#define RTL_CRITICAL_SECTION_FLAG_RESERVED \
|
|
(RTL_CRITICAL_SECTION_ALL_FLAG_BITS & \
|
|
(~(RTL_CRITICAL_SECTION_FLAG_NO_DEBUG_INFO | \
|
|
RTL_CRITICAL_SECTION_FLAG_DYNAMIC_SPIN | \
|
|
RTL_CRITICAL_SECTION_FLAG_STATIC_INIT | \
|
|
RTL_CRITICAL_SECTION_FLAG_RESOURCE_TYPE | \
|
|
RTL_CRITICAL_SECTION_FLAG_FORCE_DEBUG_INFO)))
|
|
|
|
#ifndef RC_INVOKED
|
|
|
|
#ifdef _GUID_DEFINED
|
|
# warning _GUID_DEFINED is deprecated, use GUID_DEFINED instead
|
|
#endif
|
|
|
|
#if ! (defined _GUID_DEFINED || defined GUID_DEFINED) /* also defined in basetyps.h */
|
|
#define GUID_DEFINED
|
|
typedef struct _GUID {
|
|
unsigned long Data1;
|
|
unsigned short Data2;
|
|
unsigned short Data3;
|
|
unsigned char Data4[8];
|
|
} GUID, *REFGUID, *LPGUID;
|
|
#endif /* GUID_DEFINED */
|
|
|
|
typedef enum _ACL_INFORMATION_CLASS {
|
|
AclRevisionInformation = 1,
|
|
AclSizeInformation
|
|
} ACL_INFORMATION_CLASS;
|
|
|
|
typedef struct _ACL_REVISION_INFORMATION {
|
|
DWORD AclRevision;
|
|
} ACL_REVISION_INFORMATION, *PACL_REVISION_INFORMATION;
|
|
|
|
typedef struct _ACL_SIZE_INFORMATION {
|
|
DWORD AceCount;
|
|
DWORD AclBytesInUse;
|
|
DWORD AclBytesFree;
|
|
} ACL_SIZE_INFORMATION, *PACL_SIZE_INFORMATION;
|
|
|
|
#ifndef _LDT_ENTRY_DEFINED
|
|
#define _LDT_ENTRY_DEFINED
|
|
|
|
typedef struct _LDT_ENTRY {
|
|
WORD LimitLow;
|
|
WORD BaseLow;
|
|
union {
|
|
struct {
|
|
BYTE BaseMid;
|
|
BYTE Flags1;
|
|
BYTE Flags2;
|
|
BYTE BaseHi;
|
|
} Bytes;
|
|
struct {
|
|
DWORD BaseMid:8;
|
|
DWORD Type:5;
|
|
DWORD Dpl:2;
|
|
DWORD Pres:1;
|
|
DWORD LimitHi:4;
|
|
DWORD Sys:1;
|
|
DWORD Reserved_0:1;
|
|
DWORD Default_Big:1;
|
|
DWORD Granularity:1;
|
|
DWORD BaseHi:8;
|
|
} Bits;
|
|
} HighWord;
|
|
} LDT_ENTRY, *PLDT_ENTRY, *LPLDT_ENTRY;
|
|
|
|
#endif /* _LDT_ENTRY_DEFINED */
|
|
|
|
/* FIXME: add more machines */
|
|
#if defined(_X86_)
|
|
#define SIZE_OF_80387_REGISTERS 80
|
|
#define CONTEXT_i386 0x10000
|
|
#define CONTEXT_i486 0x10000
|
|
#define CONTEXT_CONTROL (CONTEXT_i386|0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_i386|0x00000002L)
|
|
#define CONTEXT_SEGMENTS (CONTEXT_i386|0x00000004L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_i386|0x00000008L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_i386|0x00000010L)
|
|
#define CONTEXT_EXTENDED_REGISTERS (CONTEXT_i386|0x00000020L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_INTEGER|CONTEXT_SEGMENTS)
|
|
#define CONTEXT_ALL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS | \
|
|
CONTEXT_FLOATING_POINT | CONTEXT_DEBUG_REGISTERS | \
|
|
CONTEXT_EXTENDED_REGISTERS)
|
|
#define MAXIMUM_SUPPORTED_EXTENSION 512
|
|
|
|
#define EXCEPTION_READ_FAULT 0
|
|
#define EXCEPTION_WRITE_FAULT 1
|
|
#define EXCEPTION_EXECUTE_FAULT 8
|
|
|
|
typedef struct _FLOATING_SAVE_AREA {
|
|
DWORD ControlWord;
|
|
DWORD StatusWord;
|
|
DWORD TagWord;
|
|
DWORD ErrorOffset;
|
|
DWORD ErrorSelector;
|
|
DWORD DataOffset;
|
|
DWORD DataSelector;
|
|
BYTE RegisterArea[SIZE_OF_80387_REGISTERS];
|
|
DWORD Cr0NpxState;
|
|
} FLOATING_SAVE_AREA, *PFLOATING_SAVE_AREA;
|
|
|
|
typedef struct _CONTEXT {
|
|
DWORD ContextFlags;
|
|
DWORD Dr0;
|
|
DWORD Dr1;
|
|
DWORD Dr2;
|
|
DWORD Dr3;
|
|
DWORD Dr6;
|
|
DWORD Dr7;
|
|
FLOATING_SAVE_AREA FloatSave;
|
|
DWORD SegGs;
|
|
DWORD SegFs;
|
|
DWORD SegEs;
|
|
DWORD SegDs;
|
|
DWORD Edi;
|
|
DWORD Esi;
|
|
DWORD Ebx;
|
|
DWORD Edx;
|
|
DWORD Ecx;
|
|
DWORD Eax;
|
|
DWORD Ebp;
|
|
DWORD Eip;
|
|
DWORD SegCs;
|
|
DWORD EFlags;
|
|
DWORD Esp;
|
|
DWORD SegSs;
|
|
BYTE ExtendedRegisters[MAXIMUM_SUPPORTED_EXTENSION];
|
|
} CONTEXT;
|
|
#elif defined(_AMD64_)
|
|
|
|
#define CONTEXT_AMD64 0x100000
|
|
|
|
#if !defined(RC_INVOKED)
|
|
#define CONTEXT_CONTROL (CONTEXT_AMD64 | 0x1L)
|
|
#define CONTEXT_INTEGER (CONTEXT_AMD64 | 0x2L)
|
|
#define CONTEXT_SEGMENTS (CONTEXT_AMD64 | 0x4L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_AMD64 | 0x8L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_AMD64 | 0x10L)
|
|
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)
|
|
#define CONTEXT_ALL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS | CONTEXT_FLOATING_POINT | CONTEXT_DEBUG_REGISTERS)
|
|
|
|
#define CONTEXT_EXCEPTION_ACTIVE 0x8000000
|
|
#define CONTEXT_SERVICE_ACTIVE 0x10000000
|
|
#define CONTEXT_EXCEPTION_REQUEST 0x40000000
|
|
#define CONTEXT_EXCEPTION_REPORTING 0x80000000
|
|
#endif
|
|
|
|
#define INITIAL_MXCSR 0x1f80
|
|
#define INITIAL_FPCSR 0x027f
|
|
#define EXCEPTION_READ_FAULT 0
|
|
#define EXCEPTION_WRITE_FAULT 1
|
|
#define EXCEPTION_EXECUTE_FAULT 8
|
|
|
|
typedef struct DECLSPEC_ALIGN(16) _M128A {
|
|
ULONGLONG Low;
|
|
LONGLONG High;
|
|
} M128A, *PM128A;
|
|
|
|
typedef struct _XMM_SAVE_AREA32 {
|
|
WORD ControlWord;
|
|
WORD StatusWord;
|
|
BYTE TagWord;
|
|
BYTE Reserved1;
|
|
WORD ErrorOpcode;
|
|
DWORD ErrorOffset;
|
|
WORD ErrorSelector;
|
|
WORD Reserved2;
|
|
DWORD DataOffset;
|
|
WORD DataSelector;
|
|
WORD Reserved3;
|
|
DWORD MxCsr;
|
|
DWORD MxCsr_Mask;
|
|
M128A FloatRegisters[8];
|
|
M128A XmmRegisters[16];
|
|
BYTE Reserved4[96];
|
|
} XMM_SAVE_AREA32, *PXMM_SAVE_AREA32;
|
|
|
|
typedef struct DECLSPEC_ALIGN(16) _CONTEXT {
|
|
DWORD64 P1Home;
|
|
DWORD64 P2Home;
|
|
DWORD64 P3Home;
|
|
DWORD64 P4Home;
|
|
DWORD64 P5Home;
|
|
DWORD64 P6Home;
|
|
|
|
/* Control flags */
|
|
DWORD ContextFlags;
|
|
DWORD MxCsr;
|
|
|
|
/* Segment */
|
|
WORD SegCs;
|
|
WORD SegDs;
|
|
WORD SegEs;
|
|
WORD SegFs;
|
|
WORD SegGs;
|
|
WORD SegSs;
|
|
DWORD EFlags;
|
|
|
|
/* Debug */
|
|
DWORD64 Dr0;
|
|
DWORD64 Dr1;
|
|
DWORD64 Dr2;
|
|
DWORD64 Dr3;
|
|
DWORD64 Dr6;
|
|
DWORD64 Dr7;
|
|
|
|
/* Integer */
|
|
DWORD64 Rax;
|
|
DWORD64 Rcx;
|
|
DWORD64 Rdx;
|
|
DWORD64 Rbx;
|
|
DWORD64 Rsp;
|
|
DWORD64 Rbp;
|
|
DWORD64 Rsi;
|
|
DWORD64 Rdi;
|
|
DWORD64 R8;
|
|
DWORD64 R9;
|
|
DWORD64 R10;
|
|
DWORD64 R11;
|
|
DWORD64 R12;
|
|
DWORD64 R13;
|
|
DWORD64 R14;
|
|
DWORD64 R15;
|
|
|
|
/* Counter */
|
|
DWORD64 Rip;
|
|
|
|
/* Floating point */
|
|
union {
|
|
XMM_SAVE_AREA32 FltSave;
|
|
struct {
|
|
M128A Header[2];
|
|
M128A Legacy[8];
|
|
M128A Xmm0;
|
|
M128A Xmm1;
|
|
M128A Xmm2;
|
|
M128A Xmm3;
|
|
M128A Xmm4;
|
|
M128A Xmm5;
|
|
M128A Xmm6;
|
|
M128A Xmm7;
|
|
M128A Xmm8;
|
|
M128A Xmm9;
|
|
M128A Xmm10;
|
|
M128A Xmm11;
|
|
M128A Xmm12;
|
|
M128A Xmm13;
|
|
M128A Xmm14;
|
|
M128A Xmm15;
|
|
} DUMMYSTRUCTNAME;
|
|
} DUMMYUNIONNAME;
|
|
|
|
/* Vector */
|
|
M128A VectorRegister[26];
|
|
DWORD64 VectorControl;
|
|
|
|
/* Debug control */
|
|
DWORD64 DebugControl;
|
|
DWORD64 LastBranchToRip;
|
|
DWORD64 LastBranchFromRip;
|
|
DWORD64 LastExceptionToRip;
|
|
DWORD64 LastExceptionFromRip;
|
|
} CONTEXT;
|
|
|
|
|
|
typedef struct _KNONVOLATILE_CONTEXT_POINTERS {
|
|
union {
|
|
PM128A FloatingContext[16];
|
|
struct {
|
|
PM128A Xmm0;
|
|
PM128A Xmm1;
|
|
PM128A Xmm2;
|
|
PM128A Xmm3;
|
|
PM128A Xmm4;
|
|
PM128A Xmm5;
|
|
PM128A Xmm6;
|
|
PM128A Xmm7;
|
|
PM128A Xmm8;
|
|
PM128A Xmm9;
|
|
PM128A Xmm10;
|
|
PM128A Xmm11;
|
|
PM128A Xmm12;
|
|
PM128A Xmm13;
|
|
PM128A Xmm14;
|
|
PM128A Xmm15;
|
|
} DUMMYSTRUCTNAME;
|
|
} DUMMYUNIONNAME;
|
|
|
|
union {
|
|
PULONG64 IntegerContext[16];
|
|
struct {
|
|
PULONG64 Rax;
|
|
PULONG64 Rcx;
|
|
PULONG64 Rdx;
|
|
PULONG64 Rbx;
|
|
PULONG64 Rsp;
|
|
PULONG64 Rbp;
|
|
PULONG64 Rsi;
|
|
PULONG64 Rdi;
|
|
PULONG64 R8;
|
|
PULONG64 R9;
|
|
PULONG64 R10;
|
|
PULONG64 R11;
|
|
PULONG64 R12;
|
|
PULONG64 R13;
|
|
PULONG64 R14;
|
|
PULONG64 R15;
|
|
} DUMMYSTRUCTNAME;
|
|
} DUMMYUNIONNAME2;
|
|
} KNONVOLATILE_CONTEXT_POINTERS, *PKNONVOLATILE_CONTEXT_POINTERS;
|
|
|
|
#define UNW_FLAG_NHANDLER 0x0
|
|
#define UNW_FLAG_EHANDLER 0x1
|
|
#define UNW_FLAG_UHANDLER 0x2
|
|
#define UNW_FLAG_CHAININFO 0x4
|
|
#define UNW_FLAG_NO_EPILOGUE 0x80000000UL
|
|
|
|
#define RUNTIME_FUNCTION_INDIRECT 0x1
|
|
|
|
typedef struct _RUNTIME_FUNCTION {
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
DWORD UnwindData;
|
|
} RUNTIME_FUNCTION,*PRUNTIME_FUNCTION;
|
|
|
|
#define UNWIND_HISTORY_TABLE_SIZE 12
|
|
|
|
typedef struct _UNWIND_HISTORY_TABLE_ENTRY
|
|
{
|
|
DWORD64 ImageBase;
|
|
PRUNTIME_FUNCTION FunctionEntry;
|
|
} UNWIND_HISTORY_TABLE_ENTRY, *PUNWIND_HISTORY_TABLE_ENTRY;
|
|
|
|
typedef struct _UNWIND_HISTORY_TABLE
|
|
{
|
|
DWORD Count;
|
|
BYTE LocalHint;
|
|
BYTE GlobalHint;
|
|
BYTE Search;
|
|
BYTE Once;
|
|
ULONG64 LowAddress;
|
|
ULONG64 HighAddress;
|
|
UNWIND_HISTORY_TABLE_ENTRY Entry[UNWIND_HISTORY_TABLE_SIZE];
|
|
} UNWIND_HISTORY_TABLE, *PUNWIND_HISTORY_TABLE;
|
|
|
|
typedef
|
|
_Function_class_(GET_RUNTIME_FUNCTION_CALLBACK)
|
|
PRUNTIME_FUNCTION
|
|
GET_RUNTIME_FUNCTION_CALLBACK(
|
|
_In_ DWORD64 ControlPc,
|
|
_In_opt_ PVOID Context);
|
|
typedef GET_RUNTIME_FUNCTION_CALLBACK *PGET_RUNTIME_FUNCTION_CALLBACK;
|
|
|
|
typedef
|
|
_Function_class_(OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK)
|
|
DWORD
|
|
OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK(
|
|
_In_ HANDLE Process,
|
|
_In_ PVOID TableAddress,
|
|
_Out_ PDWORD Entries,
|
|
_Out_ PRUNTIME_FUNCTION* Functions);
|
|
typedef OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK *POUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK;
|
|
|
|
struct _EXCEPTION_POINTERS;
|
|
typedef
|
|
LONG
|
|
(*PEXCEPTION_FILTER) (
|
|
struct _EXCEPTION_POINTERS *ExceptionPointers,
|
|
PVOID EstablisherFrame);
|
|
|
|
typedef
|
|
VOID
|
|
(*PTERMINATION_HANDLER) (
|
|
BOOLEAN AbnormalTermination,
|
|
PVOID EstablisherFrame);
|
|
|
|
typedef struct _DISPATCHER_CONTEXT
|
|
{
|
|
ULONG64 ControlPc;
|
|
ULONG64 ImageBase;
|
|
PRUNTIME_FUNCTION FunctionEntry;
|
|
ULONG64 EstablisherFrame;
|
|
ULONG64 TargetIp;
|
|
struct _CONTEXT *ContextRecord;
|
|
PEXCEPTION_ROUTINE LanguageHandler;
|
|
PVOID HandlerData;
|
|
PUNWIND_HISTORY_TABLE HistoryTable;
|
|
ULONG ScopeIndex;
|
|
ULONG Fill0;
|
|
} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;
|
|
|
|
typedef struct _SCOPE_TABLE_AMD64
|
|
{
|
|
DWORD Count;
|
|
struct
|
|
{
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
DWORD HandlerAddress;
|
|
DWORD JumpTarget;
|
|
} ScopeRecord[1];
|
|
} SCOPE_TABLE_AMD64, *PSCOPE_TABLE_AMD64;
|
|
typedef SCOPE_TABLE_AMD64 SCOPE_TABLE, *PSCOPE_TABLE;
|
|
|
|
#define OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK_EXPORT_NAME "OutOfProcessFunctionTableCallback"
|
|
|
|
NTSYSAPI
|
|
VOID
|
|
__cdecl
|
|
RtlRestoreContext(struct _CONTEXT *ContextRecord,
|
|
struct _EXCEPTION_RECORD *ExceptionRecord);
|
|
|
|
NTSYSAPI
|
|
BOOLEAN
|
|
__cdecl
|
|
RtlAddFunctionTable(PRUNTIME_FUNCTION FunctionTable,
|
|
DWORD EntryCount,
|
|
DWORD64 BaseAddress);
|
|
|
|
NTSYSAPI
|
|
BOOLEAN
|
|
__cdecl
|
|
RtlInstallFunctionTableCallback(DWORD64 TableIdentifier,
|
|
DWORD64 BaseAddress,
|
|
DWORD Length,
|
|
PGET_RUNTIME_FUNCTION_CALLBACK Callback,
|
|
PVOID Context,
|
|
PCWSTR OutOfProcessCallbackDll);
|
|
|
|
NTSYSAPI
|
|
BOOLEAN
|
|
__cdecl
|
|
RtlDeleteFunctionTable(PRUNTIME_FUNCTION FunctionTable);
|
|
|
|
NTSYSAPI
|
|
PRUNTIME_FUNCTION
|
|
NTAPI
|
|
RtlLookupFunctionEntry(
|
|
_In_ DWORD64 ControlPc,
|
|
_Out_ PDWORD64 ImageBase,
|
|
_Inout_opt_ PUNWIND_HISTORY_TABLE HistoryTable);
|
|
|
|
NTSYSAPI
|
|
PEXCEPTION_ROUTINE
|
|
NTAPI
|
|
RtlVirtualUnwind(
|
|
_In_ DWORD HandlerType,
|
|
_In_ DWORD64 ImageBase,
|
|
_In_ DWORD64 ControlPc,
|
|
_In_ PRUNTIME_FUNCTION FunctionEntry,
|
|
_Inout_ struct _CONTEXT *ContextRecord,
|
|
_Out_ PVOID *HandlerData,
|
|
_Out_ PDWORD64 EstablisherFrame,
|
|
_Inout_opt_ PKNONVOLATILE_CONTEXT_POINTERS ContextPointers);
|
|
|
|
NTSYSAPI
|
|
VOID
|
|
NTAPI
|
|
RtlUnwindEx(
|
|
_In_opt_ PVOID TargetFrame,
|
|
_In_opt_ PVOID TargetIp,
|
|
_In_opt_ struct _EXCEPTION_RECORD *ExceptionRecord,
|
|
_In_ PVOID ReturnValue,
|
|
_In_ struct _CONTEXT *ContextRecord,
|
|
_In_opt_ PUNWIND_HISTORY_TABLE HistoryTable);
|
|
|
|
#elif defined(_PPC_)
|
|
#define CONTEXT_CONTROL 1L
|
|
#define CONTEXT_FLOATING_POINT 2L
|
|
#define CONTEXT_INTEGER 4L
|
|
#define CONTEXT_DEBUG_REGISTERS 8L
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)
|
|
typedef struct _FLOATING_SAVE_AREA
|
|
{
|
|
double Fpr0;
|
|
double Fpr1;
|
|
double Fpr2;
|
|
double Fpr3;
|
|
double Fpr4;
|
|
double Fpr5;
|
|
double Fpr6;
|
|
double Fpr7;
|
|
double Fpr8;
|
|
double Fpr9;
|
|
double Fpr10;
|
|
double Fpr11;
|
|
double Fpr12;
|
|
double Fpr13;
|
|
double Fpr14;
|
|
double Fpr15;
|
|
double Fpr16;
|
|
double Fpr17;
|
|
double Fpr18;
|
|
double Fpr19;
|
|
double Fpr20;
|
|
double Fpr21;
|
|
double Fpr22;
|
|
double Fpr23;
|
|
double Fpr24;
|
|
double Fpr25;
|
|
double Fpr26;
|
|
double Fpr27;
|
|
double Fpr28;
|
|
double Fpr29;
|
|
double Fpr30;
|
|
double Fpr31;
|
|
double Fpscr;
|
|
} FLOATING_SAVE_AREA;
|
|
|
|
typedef struct _CONTEXT {
|
|
FLOATING_SAVE_AREA FloatSave;
|
|
DWORD Gpr0;
|
|
DWORD Gpr1;
|
|
DWORD Gpr2;
|
|
DWORD Gpr3;
|
|
DWORD Gpr4;
|
|
DWORD Gpr5;
|
|
DWORD Gpr6;
|
|
DWORD Gpr7;
|
|
DWORD Gpr8;
|
|
DWORD Gpr9;
|
|
DWORD Gpr10;
|
|
DWORD Gpr11;
|
|
DWORD Gpr12;
|
|
DWORD Gpr13;
|
|
DWORD Gpr14;
|
|
DWORD Gpr15;
|
|
DWORD Gpr16;
|
|
DWORD Gpr17;
|
|
DWORD Gpr18;
|
|
DWORD Gpr19;
|
|
DWORD Gpr20;
|
|
DWORD Gpr21;
|
|
DWORD Gpr22;
|
|
DWORD Gpr23;
|
|
DWORD Gpr24;
|
|
DWORD Gpr25;
|
|
DWORD Gpr26;
|
|
DWORD Gpr27;
|
|
DWORD Gpr28;
|
|
DWORD Gpr29;
|
|
DWORD Gpr30;
|
|
DWORD Gpr31;
|
|
DWORD Cr;
|
|
DWORD Xer;
|
|
DWORD Msr;
|
|
DWORD Iar;
|
|
DWORD Lr;
|
|
DWORD Ctr;
|
|
DWORD ContextFlags;
|
|
DWORD Fill[3];
|
|
DWORD Dr0;
|
|
DWORD Dr1;
|
|
DWORD Dr2;
|
|
DWORD Dr3;
|
|
DWORD Dr4;
|
|
DWORD Dr5;
|
|
DWORD Dr6;
|
|
DWORD Dr7;
|
|
} CONTEXT;
|
|
#elif defined(_ALPHA_)
|
|
#define CONTEXT_ALPHA 0x20000
|
|
#define CONTEXT_CONTROL (CONTEXT_ALPHA|1L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_ALPHA|2L)
|
|
#define CONTEXT_INTEGER (CONTEXT_ALPHA|4L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)
|
|
typedef struct _CONTEXT {
|
|
ULONGLONG FltF0;
|
|
ULONGLONG FltF1;
|
|
ULONGLONG FltF2;
|
|
ULONGLONG FltF3;
|
|
ULONGLONG FltF4;
|
|
ULONGLONG FltF5;
|
|
ULONGLONG FltF6;
|
|
ULONGLONG FltF7;
|
|
ULONGLONG FltF8;
|
|
ULONGLONG FltF9;
|
|
ULONGLONG FltF10;
|
|
ULONGLONG FltF11;
|
|
ULONGLONG FltF12;
|
|
ULONGLONG FltF13;
|
|
ULONGLONG FltF14;
|
|
ULONGLONG FltF15;
|
|
ULONGLONG FltF16;
|
|
ULONGLONG FltF17;
|
|
ULONGLONG FltF18;
|
|
ULONGLONG FltF19;
|
|
ULONGLONG FltF20;
|
|
ULONGLONG FltF21;
|
|
ULONGLONG FltF22;
|
|
ULONGLONG FltF23;
|
|
ULONGLONG FltF24;
|
|
ULONGLONG FltF25;
|
|
ULONGLONG FltF26;
|
|
ULONGLONG FltF27;
|
|
ULONGLONG FltF28;
|
|
ULONGLONG FltF29;
|
|
ULONGLONG FltF30;
|
|
ULONGLONG FltF31;
|
|
ULONGLONG IntV0;
|
|
ULONGLONG IntT0;
|
|
ULONGLONG IntT1;
|
|
ULONGLONG IntT2;
|
|
ULONGLONG IntT3;
|
|
ULONGLONG IntT4;
|
|
ULONGLONG IntT5;
|
|
ULONGLONG IntT6;
|
|
ULONGLONG IntT7;
|
|
ULONGLONG IntS0;
|
|
ULONGLONG IntS1;
|
|
ULONGLONG IntS2;
|
|
ULONGLONG IntS3;
|
|
ULONGLONG IntS4;
|
|
ULONGLONG IntS5;
|
|
ULONGLONG IntFp;
|
|
ULONGLONG IntA0;
|
|
ULONGLONG IntA1;
|
|
ULONGLONG IntA2;
|
|
ULONGLONG IntA3;
|
|
ULONGLONG IntA4;
|
|
ULONGLONG IntA5;
|
|
ULONGLONG IntT8;
|
|
ULONGLONG IntT9;
|
|
ULONGLONG IntT10;
|
|
ULONGLONG IntT11;
|
|
ULONGLONG IntRa;
|
|
ULONGLONG IntT12;
|
|
ULONGLONG IntAt;
|
|
ULONGLONG IntGp;
|
|
ULONGLONG IntSp;
|
|
ULONGLONG IntZero;
|
|
ULONGLONG Fpcr;
|
|
ULONGLONG SoftFpcr;
|
|
ULONGLONG Fir;
|
|
DWORD Psr;
|
|
DWORD ContextFlags;
|
|
DWORD Fill[4];
|
|
} CONTEXT;
|
|
#elif defined(_SH_)
|
|
|
|
/* These are the debug or break registers on the SH3 */
|
|
typedef struct _DEBUG_REGISTERS {
|
|
DWORD BarA;
|
|
UCHAR BasrA;
|
|
UCHAR BamrA;
|
|
USHORT BbrA;
|
|
DWORD BarB;
|
|
UCHAR BasrB;
|
|
UCHAR BamrB;
|
|
USHORT BbrB;
|
|
DWORD BdrB;
|
|
DWORD BdmrB;
|
|
USHORT Brcr;
|
|
USHORT Align;
|
|
} DEBUG_REGISTERS, *PDEBUG_REGISTERS;
|
|
|
|
/* The following flags control the contents of the CONTEXT structure. */
|
|
|
|
#define CONTEXT_SH3 0x00000040
|
|
#define CONTEXT_SH4 0x000000c0 /* CONTEXT_SH3 | 0x80 - must contain the SH3 bits */
|
|
|
|
#ifdef SH3
|
|
#define CONTEXT_CONTROL (CONTEXT_SH3 | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_SH3 | 0x00000002L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH3 | 0x00000008L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS)
|
|
#else /* SH4 */
|
|
#define CONTEXT_CONTROL (CONTEXT_SH4 | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_SH4 | 0x00000002L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH4 | 0x00000008L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_SH4 | 0x00000004L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS | CONTEXT_FLOATING_POINT)
|
|
#endif
|
|
|
|
/* Context Frame */
|
|
|
|
/* This frame is used to store a limited processor context into the */
|
|
/* Thread structure for CPUs which have no floating point support. */
|
|
|
|
typedef struct _CONTEXT {
|
|
/* The flags values within this flag control the contents of */
|
|
/* a CONTEXT record. */
|
|
|
|
/* If the context record is used as an input parameter, then */
|
|
/* for each portion of the context record controlled by a flag */
|
|
/* whose value is set, it is assumed that that portion of the */
|
|
/* context record contains valid context. If the context record */
|
|
/* is being used to modify a thread's context, then only that */
|
|
/* portion of the threads context will be modified. */
|
|
|
|
/* If the context record is used as an IN OUT parameter to capture */
|
|
/* the context of a thread, then only those portions of the thread's */
|
|
/* context corresponding to set flags will be returned. */
|
|
|
|
/* The context record is never used as an OUT only parameter. */
|
|
|
|
|
|
DWORD ContextFlags;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_INTEGER. */
|
|
|
|
/* N.B. The registers RA and R15 are defined in this section, but are */
|
|
/* considered part of the control context rather than part of the integer */
|
|
/* context. */
|
|
|
|
DWORD PR;
|
|
DWORD MACH;
|
|
DWORD MACL;
|
|
DWORD GBR;
|
|
DWORD R0;
|
|
DWORD R1;
|
|
DWORD R2;
|
|
DWORD R3;
|
|
DWORD R4;
|
|
DWORD R5;
|
|
DWORD R6;
|
|
DWORD R7;
|
|
DWORD R8;
|
|
DWORD R9;
|
|
DWORD R10;
|
|
DWORD R11;
|
|
DWORD R12;
|
|
DWORD R13;
|
|
DWORD R14;
|
|
DWORD R15;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_CONTROL. */
|
|
|
|
/* N.B. The registers r15 and ra are defined in the integer section, */
|
|
/* but are considered part of the control context rather than part of */
|
|
/* the integer context. */
|
|
|
|
DWORD Fir;
|
|
DWORD Psr;
|
|
|
|
#if !defined(SH3e) && !defined(SH4)
|
|
DWORD OldStuff[2];
|
|
DEBUG_REGISTERS DebugRegisters;
|
|
#else
|
|
DWORD Fpscr;
|
|
DWORD Fpul;
|
|
DWORD FRegs[16];
|
|
#if defined(SH4)
|
|
DWORD xFRegs[16];
|
|
#endif
|
|
#endif
|
|
} CONTEXT;
|
|
|
|
#elif defined(_MIPS_)
|
|
|
|
/* The following flags control the contents of the CONTEXT structure. */
|
|
|
|
#define CONTEXT_R4000 0x00010000 /* r4000 context */
|
|
|
|
#define CONTEXT_CONTROL (CONTEXT_R4000 | 0x00000001L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_R4000 | 0x00000002L)
|
|
#define CONTEXT_INTEGER (CONTEXT_R4000 | 0x00000004L)
|
|
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_FLOATING_POINT | CONTEXT_INTEGER)
|
|
|
|
/* Context Frame */
|
|
|
|
/* N.B. This frame must be exactly a multiple of 16 bytes in length. */
|
|
|
|
/* This frame has a several purposes: 1) it is used as an argument to */
|
|
/* NtContinue, 2) it is used to constuct a call frame for APC delivery, */
|
|
/* 3) it is used to construct a call frame for exception dispatching */
|
|
/* in user mode, and 4) it is used in the user level thread creation */
|
|
/* routines. */
|
|
|
|
/* The layout of the record conforms to a standard call frame. */
|
|
|
|
|
|
typedef struct _CONTEXT {
|
|
|
|
/* This section is always present and is used as an argument build */
|
|
/* area. */
|
|
|
|
DWORD Argument[4];
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_FLOATING_POINT. */
|
|
|
|
DWORD FltF0;
|
|
DWORD FltF1;
|
|
DWORD FltF2;
|
|
DWORD FltF3;
|
|
DWORD FltF4;
|
|
DWORD FltF5;
|
|
DWORD FltF6;
|
|
DWORD FltF7;
|
|
DWORD FltF8;
|
|
DWORD FltF9;
|
|
DWORD FltF10;
|
|
DWORD FltF11;
|
|
DWORD FltF12;
|
|
DWORD FltF13;
|
|
DWORD FltF14;
|
|
DWORD FltF15;
|
|
DWORD FltF16;
|
|
DWORD FltF17;
|
|
DWORD FltF18;
|
|
DWORD FltF19;
|
|
DWORD FltF20;
|
|
DWORD FltF21;
|
|
DWORD FltF22;
|
|
DWORD FltF23;
|
|
DWORD FltF24;
|
|
DWORD FltF25;
|
|
DWORD FltF26;
|
|
DWORD FltF27;
|
|
DWORD FltF28;
|
|
DWORD FltF29;
|
|
DWORD FltF30;
|
|
DWORD FltF31;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_INTEGER. */
|
|
|
|
/* N.B. The registers gp, sp, and ra are defined in this section, but are */
|
|
/* considered part of the control context rather than part of the integer */
|
|
/* context. */
|
|
|
|
/* N.B. Register zero is not stored in the frame. */
|
|
|
|
DWORD IntZero;
|
|
DWORD IntAt;
|
|
DWORD IntV0;
|
|
DWORD IntV1;
|
|
DWORD IntA0;
|
|
DWORD IntA1;
|
|
DWORD IntA2;
|
|
DWORD IntA3;
|
|
DWORD IntT0;
|
|
DWORD IntT1;
|
|
DWORD IntT2;
|
|
DWORD IntT3;
|
|
DWORD IntT4;
|
|
DWORD IntT5;
|
|
DWORD IntT6;
|
|
DWORD IntT7;
|
|
DWORD IntS0;
|
|
DWORD IntS1;
|
|
DWORD IntS2;
|
|
DWORD IntS3;
|
|
DWORD IntS4;
|
|
DWORD IntS5;
|
|
DWORD IntS6;
|
|
DWORD IntS7;
|
|
DWORD IntT8;
|
|
DWORD IntT9;
|
|
DWORD IntK0;
|
|
DWORD IntK1;
|
|
DWORD IntGp;
|
|
DWORD IntSp;
|
|
DWORD IntS8;
|
|
DWORD IntRa;
|
|
DWORD IntLo;
|
|
DWORD IntHi;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_FLOATING_POINT. */
|
|
|
|
DWORD Fsr;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_CONTROL. */
|
|
|
|
/* N.B. The registers gp, sp, and ra are defined in the integer section, */
|
|
/* but are considered part of the control context rather than part of */
|
|
/* the integer context. */
|
|
|
|
DWORD Fir;
|
|
DWORD Psr;
|
|
|
|
/* The flags values within this flag control the contents of */
|
|
/* a CONTEXT record. */
|
|
|
|
/* If the context record is used as an input parameter, then */
|
|
/* for each portion of the context record controlled by a flag */
|
|
/* whose value is set, it is assumed that that portion of the */
|
|
/* context record contains valid context. If the context record */
|
|
/* is being used to modify a thread's context, then only that */
|
|
/* portion of the threads context will be modified. */
|
|
|
|
/* If the context record is used as an IN OUT parameter to capture */
|
|
/* the context of a thread, then only those portions of the thread's */
|
|
/* context corresponding to set flags will be returned. */
|
|
|
|
/* The context record is never used as an OUT only parameter. */
|
|
|
|
DWORD ContextFlags;
|
|
|
|
DWORD Fill[2];
|
|
|
|
} CONTEXT;
|
|
#elif defined(_ARM_)
|
|
|
|
#ifndef PAGE_SIZE
|
|
#define PAGE_SIZE 0x1000 // FIXME: This should probably go elsewhere
|
|
#endif
|
|
|
|
/* The following flags control the contents of the CONTEXT structure. */
|
|
|
|
#define CONTEXT_ARM 0x200000L
|
|
#define CONTEXT_CONTROL (CONTEXT_ARM | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_ARM | 0x00000002L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_ARM | 0x00000004L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_ARM | 0x00000008L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)
|
|
|
|
#define EXCEPTION_READ_FAULT 0
|
|
#define EXCEPTION_WRITE_FAULT 1
|
|
#define EXCEPTION_EXECUTE_FAULT 8
|
|
|
|
typedef struct _NEON128
|
|
{
|
|
ULONGLONG Low;
|
|
LONGLONG High;
|
|
} NEON128, *PNEON128;
|
|
|
|
#define ARM_MAX_BREAKPOINTS 8
|
|
#define ARM_MAX_WATCHPOINTS 1
|
|
|
|
typedef struct _CONTEXT
|
|
{
|
|
/* The flags values within this flag control the contents of
|
|
a CONTEXT record.
|
|
|
|
If the context record is used as an input parameter, then
|
|
for each portion of the context record controlled by a flag
|
|
whose value is set, it is assumed that that portion of the
|
|
context record contains valid context. If the context record
|
|
is being used to modify a thread's context, then only that
|
|
portion of the threads context will be modified.
|
|
|
|
If the context record is used as an IN OUT parameter to capture
|
|
the context of a thread, then only those portions of the thread's
|
|
context corresponding to set flags will be returned.
|
|
|
|
The context record is never used as an OUT only parameter. */
|
|
DWORD ContextFlags;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains
|
|
the flag CONTEXT_INTEGER. */
|
|
DWORD R0;
|
|
DWORD R1;
|
|
DWORD R2;
|
|
DWORD R3;
|
|
DWORD R4;
|
|
DWORD R5;
|
|
DWORD R6;
|
|
DWORD R7;
|
|
DWORD R8;
|
|
DWORD R9;
|
|
DWORD R10;
|
|
DWORD R11;
|
|
DWORD R12;
|
|
|
|
DWORD Sp;
|
|
DWORD Lr;
|
|
DWORD Pc;
|
|
DWORD Cpsr;
|
|
|
|
/* Floating Point/NEON Registers */
|
|
DWORD Fpscr;
|
|
DWORD Padding;
|
|
union
|
|
{
|
|
NEON128 Q[16];
|
|
ULONGLONG D[32];
|
|
DWORD S[32];
|
|
} DUMMYUNIONNAME;
|
|
|
|
/* Debug registers */
|
|
DWORD Bvr[ARM_MAX_BREAKPOINTS];
|
|
DWORD Bcr[ARM_MAX_BREAKPOINTS];
|
|
DWORD Wvr[ARM_MAX_WATCHPOINTS];
|
|
DWORD Wcr[ARM_MAX_WATCHPOINTS];
|
|
|
|
DWORD Padding2[2];
|
|
} CONTEXT, *PCONTEXT;
|
|
|
|
typedef struct _IMAGE_ARM_RUNTIME_FUNCTION_ENTRY
|
|
{
|
|
DWORD BeginAddress;
|
|
union
|
|
{
|
|
DWORD UnwindData;
|
|
struct
|
|
{
|
|
DWORD Flag : 2;
|
|
DWORD FunctionLength : 11;
|
|
DWORD Ret : 2;
|
|
DWORD H : 1;
|
|
DWORD Reg : 3;
|
|
DWORD R : 1;
|
|
DWORD L : 1;
|
|
DWORD C : 1;
|
|
DWORD StackAdjust : 10;
|
|
} DUMMYSTRUCTNAME;
|
|
} DUMMYUNIONNAME;
|
|
} IMAGE_ARM_RUNTIME_FUNCTION_ENTRY, *PIMAGE_ARM_RUNTIME_FUNCTION_ENTRY;
|
|
typedef IMAGE_ARM_RUNTIME_FUNCTION_ENTRY RUNTIME_FUNCTION, *PRUNTIME_FUNCTION;
|
|
|
|
typedef struct _SCOPE_TABLE_ARM
|
|
{
|
|
DWORD Count;
|
|
struct
|
|
{
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
DWORD HandlerAddress;
|
|
DWORD JumpTarget;
|
|
} ScopeRecord[1];
|
|
} SCOPE_TABLE_ARM, *PSCOPE_TABLE_ARM;
|
|
typedef SCOPE_TABLE_ARM SCOPE_TABLE, *PSCOPE_TABLE;
|
|
|
|
typedef struct _DISPATCHER_CONTEXT
|
|
{
|
|
DWORD ControlPc;
|
|
DWORD ImageBase;
|
|
PRUNTIME_FUNCTION FunctionEntry;
|
|
DWORD EstablisherFrame;
|
|
DWORD TargetPc;
|
|
PCONTEXT ContextRecord;
|
|
PEXCEPTION_ROUTINE LanguageHandler;
|
|
PVOID HandlerData;
|
|
struct _UNWIND_HISTORY_TABLE *HistoryTable;
|
|
DWORD ScopeIndex;
|
|
BOOLEAN ControlPcIsUnwound;
|
|
PBYTE NonVolatileRegisters;
|
|
DWORD Reserved;
|
|
} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;
|
|
|
|
#elif defined(_ARM64_)
|
|
|
|
#define CONTEXT_ARM64 0x00400000L
|
|
#define CONTEXT_CONTROL (CONTEXT_ARM64 | 0x1L)
|
|
#define CONTEXT_INTEGER (CONTEXT_ARM64 | 0x2L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_ARM64 | 0x4L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_ARM64 | 0x8L)
|
|
#define CONTEXT_X18 (CONTEXT_ARM64 | 0x10L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)
|
|
|
|
|
|
#define EXCEPTION_READ_FAULT 0
|
|
#define EXCEPTION_WRITE_FAULT 1
|
|
#define EXCEPTION_EXECUTE_FAULT 8
|
|
|
|
typedef union NEON128 {
|
|
struct {
|
|
ULONGLONG Low;
|
|
LONGLONG High;
|
|
} DUMMYSTRUCTNAME;
|
|
double D[2];
|
|
float S[4];
|
|
WORD H[8];
|
|
BYTE B[16];
|
|
} NEON128, *PNEON128;
|
|
|
|
#define ARM64_MAX_BREAKPOINTS 8
|
|
#define ARM64_MAX_WATCHPOINTS 2
|
|
|
|
typedef struct _CONTEXT {
|
|
|
|
//
|
|
// Control flags.
|
|
//
|
|
|
|
DWORD ContextFlags;
|
|
|
|
//
|
|
// Integer registers
|
|
//
|
|
|
|
DWORD Cpsr;
|
|
union {
|
|
struct {
|
|
DWORD64 X0;
|
|
DWORD64 X1;
|
|
DWORD64 X2;
|
|
DWORD64 X3;
|
|
DWORD64 X4;
|
|
DWORD64 X5;
|
|
DWORD64 X6;
|
|
DWORD64 X7;
|
|
DWORD64 X8;
|
|
DWORD64 X9;
|
|
DWORD64 X10;
|
|
DWORD64 X11;
|
|
DWORD64 X12;
|
|
DWORD64 X13;
|
|
DWORD64 X14;
|
|
DWORD64 X15;
|
|
DWORD64 X16;
|
|
DWORD64 X17;
|
|
DWORD64 X18;
|
|
DWORD64 X19;
|
|
DWORD64 X20;
|
|
DWORD64 X21;
|
|
DWORD64 X22;
|
|
DWORD64 X23;
|
|
DWORD64 X24;
|
|
DWORD64 X25;
|
|
DWORD64 X26;
|
|
DWORD64 X27;
|
|
DWORD64 X28;
|
|
DWORD64 Fp;
|
|
DWORD64 Lr;
|
|
} DUMMYSTRUCTNAME;
|
|
DWORD64 X[31];
|
|
} DUMMYUNIONNAME;
|
|
|
|
DWORD64 Sp;
|
|
DWORD64 Pc;
|
|
|
|
//
|
|
// Floating Point/NEON Registers
|
|
//
|
|
|
|
NEON128 V[32];
|
|
DWORD Fpcr;
|
|
DWORD Fpsr;
|
|
|
|
//
|
|
// Debug registers
|
|
//
|
|
|
|
DWORD Bcr[ARM64_MAX_BREAKPOINTS];
|
|
DWORD64 Bvr[ARM64_MAX_BREAKPOINTS];
|
|
DWORD Wcr[ARM64_MAX_WATCHPOINTS];
|
|
DWORD64 Wvr[ARM64_MAX_WATCHPOINTS];
|
|
|
|
} _CONTEXT, *P_CONTEXT;
|
|
typedef _CONTEXT CONTEXT, *PCONTEXT;
|
|
|
|
typedef struct _IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY {
|
|
DWORD BeginAddress;
|
|
union {
|
|
DWORD UnwindData;
|
|
struct {
|
|
DWORD Flag : 2;
|
|
DWORD FunctionLength : 11;
|
|
DWORD RegF : 3;
|
|
DWORD RegI : 4;
|
|
DWORD H : 1;
|
|
DWORD CR : 2;
|
|
DWORD FrameSize : 9;
|
|
} DUMMYSTRUCTNAME;
|
|
} DUMMYUNIONNAME;
|
|
} IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY, * PIMAGE_ARM64_RUNTIME_FUNCTION_ENTRY;
|
|
typedef struct _IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY RUNTIME_FUNCTION, *PRUNTIME_FUNCTION;
|
|
|
|
typedef struct _SCOPE_TABLE_ARM64 {
|
|
DWORD Count;
|
|
struct
|
|
{
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
DWORD HandlerAddress;
|
|
DWORD JumpTarget;
|
|
} ScopeRecord[1];
|
|
} SCOPE_TABLE_ARM64, *PSCOPE_TABLE_ARM64;
|
|
typedef SCOPE_TABLE_ARM64 SCOPE_TABLE, *PSCOPE_TABLE;
|
|
|
|
typedef struct _DISPATCHER_CONTEXT {
|
|
ULONG_PTR ControlPc;
|
|
ULONG_PTR ImageBase;
|
|
PRUNTIME_FUNCTION FunctionEntry;
|
|
ULONG_PTR EstablisherFrame;
|
|
ULONG_PTR TargetPc;
|
|
PCONTEXT ContextRecord;
|
|
PEXCEPTION_ROUTINE LanguageHandler;
|
|
PVOID HandlerData;
|
|
struct _UNWIND_HISTORY_TABLE *HistoryTable;
|
|
DWORD ScopeIndex;
|
|
BOOLEAN ControlPcIsUnwound;
|
|
PBYTE NonVolatileRegisters;
|
|
} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;
|
|
#else
|
|
#error "undefined processor type"
|
|
#endif
|
|
typedef CONTEXT *PCONTEXT;
|
|
|
|
/* The WoW64 context */
|
|
#define WOW64_CONTEXT_i386 0x00010000
|
|
#define WOW64_CONTEXT_i486 0x00010000
|
|
#define WOW64_CONTEXT_CONTROL (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000001))
|
|
#define WOW64_CONTEXT_INTEGER (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000002))
|
|
#define WOW64_CONTEXT_SEGMENTS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000004))
|
|
#define WOW64_CONTEXT_FLOATING_POINT (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000008))
|
|
#define WOW64_CONTEXT_DEBUG_REGISTERS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000010))
|
|
#define WOW64_CONTEXT_EXTENDED_REGISTERS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000020))
|
|
#define WOW64_CONTEXT_FULL (WOW64_CONTEXT_CONTROL | WOW64_CONTEXT_INTEGER | WOW64_CONTEXT_SEGMENTS)
|
|
#define WOW64_CONTEXT_ALL (WOW64_CONTEXT_CONTROL | WOW64_CONTEXT_INTEGER | \
|
|
WOW64_CONTEXT_SEGMENTS | WOW64_CONTEXT_FLOATING_POINT | \
|
|
WOW64_CONTEXT_DEBUG_REGISTERS | WOW64_CONTEXT_EXTENDED_REGISTERS)
|
|
|
|
#define WOW64_CONTEXT_XSTATE (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000040))
|
|
|
|
#define WOW64_CONTEXT_EXCEPTION_ACTIVE 0x08000000
|
|
#define WOW64_CONTEXT_SERVICE_ACTIVE 0x10000000
|
|
#define WOW64_CONTEXT_EXCEPTION_REQUEST 0x40000000
|
|
#define WOW64_CONTEXT_EXCEPTION_REPORTING 0x80000000
|
|
|
|
#define WOW64_SIZE_OF_80387_REGISTERS 80
|
|
#define WOW64_MAXIMUM_SUPPORTED_EXTENSION 512
|
|
|
|
typedef struct _WOW64_FLOATING_SAVE_AREA
|
|
{
|
|
DWORD ControlWord;
|
|
DWORD StatusWord;
|
|
DWORD TagWord;
|
|
DWORD ErrorOffset;
|
|
DWORD ErrorSelector;
|
|
DWORD DataOffset;
|
|
DWORD DataSelector;
|
|
BYTE RegisterArea[WOW64_SIZE_OF_80387_REGISTERS];
|
|
DWORD Cr0NpxState;
|
|
} WOW64_FLOATING_SAVE_AREA, *PWOW64_FLOATING_SAVE_AREA;
|
|
|
|
#include "pshpack4.h"
|
|
typedef struct _WOW64_CONTEXT
|
|
{
|
|
DWORD ContextFlags;
|
|
DWORD Dr0;
|
|
DWORD Dr1;
|
|
DWORD Dr2;
|
|
DWORD Dr3;
|
|
DWORD Dr6;
|
|
DWORD Dr7;
|
|
WOW64_FLOATING_SAVE_AREA FloatSave;
|
|
DWORD SegGs;
|
|
DWORD SegFs;
|
|
DWORD SegEs;
|
|
DWORD SegDs;
|
|
DWORD Edi;
|
|
DWORD Esi;
|
|
DWORD Ebx;
|
|
DWORD Edx;
|
|
DWORD Ecx;
|
|
DWORD Eax;
|
|
DWORD Ebp;
|
|
DWORD Eip;
|
|
DWORD SegCs;
|
|
DWORD EFlags;
|
|
DWORD Esp;
|
|
DWORD SegSs;
|
|
BYTE ExtendedRegisters[WOW64_MAXIMUM_SUPPORTED_EXTENSION];
|
|
} WOW64_CONTEXT, *PWOW64_CONTEXT;
|
|
#include "poppack.h"
|
|
|
|
|
|
#define EXCEPTION_MAXIMUM_PARAMETERS 15
|
|
#define EXCEPTION_NONCONTINUABLE 0x01
|
|
#define EXCEPTION_UNWINDING 0x02
|
|
#define EXCEPTION_EXIT_UNWIND 0x04
|
|
#define EXCEPTION_STACK_INVALID 0x08
|
|
#define EXCEPTION_NESTED_CALL 0x10
|
|
#define EXCEPTION_TARGET_UNWIND 0x20
|
|
#define EXCEPTION_COLLIDED_UNWIND 0x40
|
|
#define EXCEPTION_UNWIND (EXCEPTION_UNWINDING | EXCEPTION_EXIT_UNWIND | \
|
|
EXCEPTION_TARGET_UNWIND | EXCEPTION_COLLIDED_UNWIND)
|
|
|
|
#define IS_UNWINDING(Flag) ((Flag & EXCEPTION_UNWIND) != 0)
|
|
#define IS_DISPATCHING(Flag) ((Flag & EXCEPTION_UNWIND) == 0)
|
|
#define IS_TARGET_UNWIND(Flag) (Flag & EXCEPTION_TARGET_UNWIND)
|
|
|
|
typedef struct _EXCEPTION_RECORD {
|
|
DWORD ExceptionCode;
|
|
DWORD ExceptionFlags;
|
|
struct _EXCEPTION_RECORD *ExceptionRecord;
|
|
PVOID ExceptionAddress;
|
|
DWORD NumberParameters;
|
|
ULONG_PTR ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];
|
|
} EXCEPTION_RECORD, *PEXCEPTION_RECORD;
|
|
|
|
typedef struct _EXCEPTION_RECORD32 {
|
|
DWORD ExceptionCode;
|
|
DWORD ExceptionFlags;
|
|
DWORD ExceptionRecord;
|
|
DWORD ExceptionAddress;
|
|
DWORD NumberParameters;
|
|
DWORD ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];
|
|
} EXCEPTION_RECORD32,*PEXCEPTION_RECORD32;
|
|
|
|
typedef struct _EXCEPTION_RECORD64 {
|
|
DWORD ExceptionCode;
|
|
DWORD ExceptionFlags;
|
|
DWORD64 ExceptionRecord;
|
|
DWORD64 ExceptionAddress;
|
|
DWORD NumberParameters;
|
|
DWORD __unusedAlignment;
|
|
DWORD64 ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];
|
|
} EXCEPTION_RECORD64,*PEXCEPTION_RECORD64;
|
|
|
|
typedef struct _EXCEPTION_POINTERS {
|
|
PEXCEPTION_RECORD ExceptionRecord;
|
|
PCONTEXT ContextRecord;
|
|
} EXCEPTION_POINTERS, *PEXCEPTION_POINTERS;
|
|
|
|
typedef struct _SECURITY_ATTRIBUTES {
|
|
DWORD nLength;
|
|
LPVOID lpSecurityDescriptor;
|
|
BOOL bInheritHandle;
|
|
} SECURITY_ATTRIBUTES, *PSECURITY_ATTRIBUTES, *LPSECURITY_ATTRIBUTES;
|
|
|
|
#define SECURITY_MIN_SID_SIZE (sizeof(SID))
|
|
|
|
$include(setypes.h)
|
|
|
|
typedef struct _SYSTEM_AUDIT_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_AUDIT_OBJECT_ACE,*PSYSTEM_AUDIT_OBJECT_ACE;
|
|
|
|
typedef struct _SYSTEM_ALARM_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_ALARM_OBJECT_ACE,*PSYSTEM_ALARM_OBJECT_ACE;
|
|
|
|
typedef struct _ACCESS_ALLOWED_CALLBACK_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} ACCESS_ALLOWED_CALLBACK_ACE, *PACCESS_ALLOWED_CALLBACK_ACE;
|
|
|
|
typedef struct _ACCESS_DENIED_CALLBACK_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} ACCESS_DENIED_CALLBACK_ACE, *PACCESS_DENIED_CALLBACK_ACE;
|
|
|
|
typedef struct _SYSTEM_AUDIT_CALLBACK_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} SYSTEM_AUDIT_CALLBACK_ACE, *PSYSTEM_AUDIT_CALLBACK_ACE;
|
|
|
|
typedef struct _SYSTEM_ALARM_CALLBACK_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} SYSTEM_ALARM_CALLBACK_ACE, *PSYSTEM_ALARM_CALLBACK_ACE;
|
|
|
|
typedef struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} ACCESS_ALLOWED_CALLBACK_OBJECT_ACE, *PACCESS_ALLOWED_CALLBACK_OBJECT_ACE;
|
|
|
|
typedef struct _ACCESS_DENIED_CALLBACK_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} ACCESS_DENIED_CALLBACK_OBJECT_ACE, *PACCESS_DENIED_CALLBACK_OBJECT_ACE;
|
|
|
|
typedef struct _SYSTEM_AUDIT_CALLBACK_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_AUDIT_CALLBACK_OBJECT_ACE, *PSYSTEM_AUDIT_CALLBACK_OBJECT_ACE;
|
|
|
|
typedef struct _SYSTEM_ALARM_CALLBACK_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_ALARM_CALLBACK_OBJECT_ACE, *PSYSTEM_ALARM_CALLBACK_OBJECT_ACE;
|
|
|
|
typedef enum _TOKEN_ELEVATION_TYPE {
|
|
TokenElevationTypeDefault = 1,
|
|
TokenElevationTypeFull,
|
|
TokenElevationTypeLimited,
|
|
} TOKEN_ELEVATION_TYPE, *PTOKEN_ELEVATION_TYPE;
|
|
|
|
typedef struct _QUOTA_LIMITS {
|
|
SIZE_T PagedPoolLimit;
|
|
SIZE_T NonPagedPoolLimit;
|
|
SIZE_T MinimumWorkingSetSize;
|
|
SIZE_T MaximumWorkingSetSize;
|
|
SIZE_T PagefileLimit;
|
|
LARGE_INTEGER TimeLimit;
|
|
} QUOTA_LIMITS,*PQUOTA_LIMITS;
|
|
|
|
typedef union _RATE_QUOTA_LIMIT {
|
|
DWORD RateData;
|
|
struct {
|
|
DWORD RatePercent : 7;
|
|
DWORD Reserved0 : 25;
|
|
} DUMMYSTRUCTNAME;
|
|
} RATE_QUOTA_LIMIT, *PRATE_QUOTA_LIMIT;
|
|
|
|
typedef struct _QUOTA_LIMITS_EX {
|
|
SIZE_T PagedPoolLimit;
|
|
SIZE_T NonPagedPoolLimit;
|
|
SIZE_T MinimumWorkingSetSize;
|
|
SIZE_T MaximumWorkingSetSize;
|
|
SIZE_T PagefileLimit;
|
|
LARGE_INTEGER TimeLimit;
|
|
SIZE_T Reserved1;
|
|
SIZE_T Reserved2;
|
|
SIZE_T Reserved3;
|
|
SIZE_T Reserved4;
|
|
DWORD Flags;
|
|
RATE_QUOTA_LIMIT CpuRateLimit;
|
|
} QUOTA_LIMITS_EX, *PQUOTA_LIMITS_EX;
|
|
|
|
typedef struct _IO_COUNTERS {
|
|
ULONGLONG ReadOperationCount;
|
|
ULONGLONG WriteOperationCount;
|
|
ULONGLONG OtherOperationCount;
|
|
ULONGLONG ReadTransferCount;
|
|
ULONGLONG WriteTransferCount;
|
|
ULONGLONG OtherTransferCount;
|
|
} IO_COUNTERS, *PIO_COUNTERS;
|
|
|
|
typedef struct _FILE_NOTIFY_INFORMATION {
|
|
DWORD NextEntryOffset;
|
|
DWORD Action;
|
|
DWORD FileNameLength;
|
|
WCHAR FileName[1];
|
|
} FILE_NOTIFY_INFORMATION,*PFILE_NOTIFY_INFORMATION;
|
|
|
|
typedef struct _TAPE_ERASE {
|
|
DWORD Type;
|
|
BOOLEAN Immediate;
|
|
} TAPE_ERASE, *PTAPE_ERASE;
|
|
|
|
typedef struct _TAPE_GET_DRIVE_PARAMETERS {
|
|
BOOLEAN ECC;
|
|
BOOLEAN Compression;
|
|
BOOLEAN DataPadding;
|
|
BOOLEAN ReportSetmarks;
|
|
DWORD DefaultBlockSize;
|
|
DWORD MaximumBlockSize;
|
|
DWORD MinimumBlockSize;
|
|
DWORD MaximumPartitionCount;
|
|
DWORD FeaturesLow;
|
|
DWORD FeaturesHigh;
|
|
DWORD EOTWarningZoneSize;
|
|
} TAPE_GET_DRIVE_PARAMETERS, *PTAPE_GET_DRIVE_PARAMETERS;
|
|
|
|
typedef struct _TAPE_GET_MEDIA_PARAMETERS {
|
|
LARGE_INTEGER Capacity;
|
|
LARGE_INTEGER Remaining;
|
|
DWORD BlockSize;
|
|
DWORD PartitionCount;
|
|
BOOLEAN WriteProtected;
|
|
} TAPE_GET_MEDIA_PARAMETERS, *PTAPE_GET_MEDIA_PARAMETERS;
|
|
|
|
typedef struct _TAPE_GET_POSITION {
|
|
DWORD Type;
|
|
DWORD Partition;
|
|
LARGE_INTEGER Offset;
|
|
} TAPE_GET_POSITION, *PTAPE_GET_POSITION;
|
|
|
|
typedef struct _TAPE_PREPARE {
|
|
DWORD Operation;
|
|
BOOLEAN Immediate;
|
|
} TAPE_PREPARE, *PTAPE_PREPARE;
|
|
|
|
typedef struct _TAPE_SET_DRIVE_PARAMETERS {
|
|
BOOLEAN ECC;
|
|
BOOLEAN Compression;
|
|
BOOLEAN DataPadding;
|
|
BOOLEAN ReportSetmarks;
|
|
DWORD EOTWarningZoneSize;
|
|
} TAPE_SET_DRIVE_PARAMETERS, *PTAPE_SET_DRIVE_PARAMETERS;
|
|
|
|
typedef struct _TAPE_SET_MEDIA_PARAMETERS {
|
|
DWORD BlockSize;
|
|
} TAPE_SET_MEDIA_PARAMETERS,*PTAPE_SET_MEDIA_PARAMETERS;
|
|
|
|
typedef struct _TAPE_SET_POSITION {
|
|
DWORD Method;
|
|
DWORD Partition;
|
|
LARGE_INTEGER Offset;
|
|
BOOLEAN Immediate;
|
|
} TAPE_SET_POSITION, *PTAPE_SET_POSITION;
|
|
|
|
typedef struct _TAPE_WRITE_MARKS {
|
|
DWORD Type;
|
|
DWORD Count;
|
|
BOOLEAN Immediate;
|
|
} TAPE_WRITE_MARKS, *PTAPE_WRITE_MARKS;
|
|
|
|
typedef struct _TAPE_CREATE_PARTITION {
|
|
DWORD Method;
|
|
DWORD Count;
|
|
DWORD Size;
|
|
} TAPE_CREATE_PARTITION, *PTAPE_CREATE_PARTITION;
|
|
|
|
typedef struct _MEMORY_BASIC_INFORMATION {
|
|
PVOID BaseAddress;
|
|
PVOID AllocationBase;
|
|
DWORD AllocationProtect;
|
|
SIZE_T RegionSize;
|
|
DWORD State;
|
|
DWORD Protect;
|
|
DWORD Type;
|
|
} MEMORY_BASIC_INFORMATION, *PMEMORY_BASIC_INFORMATION;
|
|
|
|
typedef struct _MESSAGE_RESOURCE_ENTRY {
|
|
WORD Length;
|
|
WORD Flags;
|
|
BYTE Text[1];
|
|
} MESSAGE_RESOURCE_ENTRY, *PMESSAGE_RESOURCE_ENTRY;
|
|
|
|
typedef struct _MESSAGE_RESOURCE_BLOCK {
|
|
DWORD LowId;
|
|
DWORD HighId;
|
|
DWORD OffsetToEntries;
|
|
} MESSAGE_RESOURCE_BLOCK, *PMESSAGE_RESOURCE_BLOCK;
|
|
|
|
typedef struct _MESSAGE_RESOURCE_DATA {
|
|
DWORD NumberOfBlocks;
|
|
MESSAGE_RESOURCE_BLOCK Blocks[1];
|
|
} MESSAGE_RESOURCE_DATA,*PMESSAGE_RESOURCE_DATA;
|
|
|
|
//
|
|
// Slist Header
|
|
//
|
|
#ifndef _SLIST_HEADER_
|
|
#define _SLIST_HEADER_
|
|
|
|
#if defined(_WIN64)
|
|
|
|
typedef struct DECLSPEC_ALIGN(16) _SLIST_ENTRY {
|
|
struct _SLIST_ENTRY *Next;
|
|
} SLIST_ENTRY, *PSLIST_ENTRY;
|
|
|
|
typedef struct _SLIST_ENTRY32 {
|
|
DWORD Next;
|
|
} SLIST_ENTRY32, *PSLIST_ENTRY32;
|
|
|
|
typedef union DECLSPEC_ALIGN(16) _SLIST_HEADER {
|
|
_ANONYMOUS_STRUCT struct {
|
|
ULONGLONG Alignment;
|
|
ULONGLONG Region;
|
|
} DUMMYSTRUCTNAME;
|
|
struct {
|
|
ULONGLONG Depth:16;
|
|
ULONGLONG Sequence:9;
|
|
ULONGLONG NextEntry:39;
|
|
ULONGLONG HeaderType:1;
|
|
ULONGLONG Init:1;
|
|
ULONGLONG Reserved:59;
|
|
ULONGLONG Region:3;
|
|
} Header8;
|
|
struct {
|
|
ULONGLONG Depth:16;
|
|
ULONGLONG Sequence:48;
|
|
ULONGLONG HeaderType:1;
|
|
ULONGLONG Init:1;
|
|
ULONGLONG Reserved:2;
|
|
ULONGLONG NextEntry:60;
|
|
} Header16;
|
|
struct {
|
|
ULONGLONG Depth:16;
|
|
ULONGLONG Sequence:48;
|
|
ULONGLONG HeaderType:1;
|
|
ULONGLONG Reserved:3;
|
|
ULONGLONG NextEntry:60;
|
|
} HeaderX64;
|
|
} SLIST_HEADER, *PSLIST_HEADER;
|
|
|
|
typedef union _SLIST_HEADER32{
|
|
ULONGLONG Alignment;
|
|
_ANONYMOUS_STRUCT struct {
|
|
SLIST_ENTRY32 Next;
|
|
WORD Depth;
|
|
WORD Sequence;
|
|
} DUMMYSTRUCTNAME;
|
|
} SLIST_HEADER32, *PSLIST_HEADER32;
|
|
|
|
#else
|
|
|
|
#define SLIST_ENTRY SINGLE_LIST_ENTRY
|
|
#define _SLIST_ENTRY _SINGLE_LIST_ENTRY
|
|
#define PSLIST_ENTRY PSINGLE_LIST_ENTRY
|
|
|
|
typedef SLIST_ENTRY SLIST_ENTRY32, *PSLIST_ENTRY32;
|
|
|
|
typedef union _SLIST_HEADER {
|
|
ULONGLONG Alignment;
|
|
_ANONYMOUS_STRUCT struct {
|
|
SLIST_ENTRY Next;
|
|
WORD Depth;
|
|
WORD Sequence;
|
|
} DUMMYSTRUCTNAME;
|
|
} SLIST_HEADER, *PSLIST_HEADER;
|
|
|
|
typedef SLIST_HEADER SLIST_HEADER32, *PSLIST_HEADER32;
|
|
|
|
#endif /* defined(_WIN64) */
|
|
|
|
#endif /* _SLIST_HEADER_ */
|
|
|
|
NTSYSAPI
|
|
VOID
|
|
NTAPI
|
|
RtlInitializeSListHead(
|
|
_Out_ PSLIST_HEADER ListHead);
|
|
|
|
_Must_inspect_result_
|
|
NTSYSAPI
|
|
PSLIST_ENTRY
|
|
NTAPI
|
|
RtlFirstEntrySList(
|
|
_In_ const SLIST_HEADER *ListHead);
|
|
|
|
NTSYSAPI
|
|
PSLIST_ENTRY
|
|
NTAPI
|
|
RtlInterlockedPopEntrySList(
|
|
_Inout_ PSLIST_HEADER ListHead);
|
|
|
|
NTSYSAPI
|
|
PSLIST_ENTRY
|
|
NTAPI
|
|
RtlInterlockedPushEntrySList(
|
|
_Inout_ PSLIST_HEADER ListHead,
|
|
_Inout_ __drv_aliasesMem PSLIST_ENTRY ListEntry);
|
|
|
|
NTSYSAPI
|
|
PSLIST_ENTRY
|
|
NTAPI
|
|
RtlInterlockedFlushSList(
|
|
_Inout_ PSLIST_HEADER ListHead);
|
|
|
|
NTSYSAPI
|
|
WORD
|
|
NTAPI
|
|
RtlQueryDepthSList(
|
|
_In_ PSLIST_HEADER ListHead);
|
|
|
|
|
|
#define RTL_CONDITION_VARIABLE_INIT {0}
|
|
#define RTL_CONDITION_VARIABLE_LOCKMODE_SHARED 0x1
|
|
|
|
typedef struct _RTL_CONDITION_VARIABLE {
|
|
PVOID Ptr;
|
|
} RTL_CONDITION_VARIABLE, *PRTL_CONDITION_VARIABLE;
|
|
|
|
typedef struct _RTL_CRITICAL_SECTION_DEBUG {
|
|
WORD Type;
|
|
WORD CreatorBackTraceIndex;
|
|
struct _RTL_CRITICAL_SECTION *CriticalSection;
|
|
LIST_ENTRY ProcessLocksList;
|
|
DWORD EntryCount;
|
|
DWORD ContentionCount;
|
|
DWORD Flags;
|
|
WORD CreatorBackTraceIndexHigh;
|
|
WORD SpareWORD;
|
|
} RTL_CRITICAL_SECTION_DEBUG, *PRTL_CRITICAL_SECTION_DEBUG, RTL_RESOURCE_DEBUG, *PRTL_RESOURCE_DEBUG;
|
|
|
|
#include "pshpack8.h"
|
|
typedef struct _RTL_CRITICAL_SECTION {
|
|
PRTL_CRITICAL_SECTION_DEBUG DebugInfo;
|
|
LONG LockCount;
|
|
LONG RecursionCount;
|
|
HANDLE OwningThread;
|
|
HANDLE LockSemaphore;
|
|
ULONG_PTR SpinCount;
|
|
} RTL_CRITICAL_SECTION, *PRTL_CRITICAL_SECTION;
|
|
#include "poppack.h"
|
|
|
|
NTSYSAPI
|
|
WORD
|
|
NTAPI
|
|
RtlCaptureStackBackTrace(
|
|
IN DWORD FramesToSkip,
|
|
IN DWORD FramesToCapture,
|
|
OUT PVOID *BackTrace,
|
|
OUT PDWORD BackTraceHash OPTIONAL
|
|
);
|
|
|
|
NTSYSAPI
|
|
VOID
|
|
NTAPI
|
|
RtlCaptureContext(
|
|
_Out_ PCONTEXT ContextRecord
|
|
);
|
|
|
|
NTSYSAPI
|
|
PVOID
|
|
NTAPI
|
|
RtlPcToFileHeader(
|
|
_In_ PVOID PcValue,
|
|
_Out_ PVOID* BaseOfImage);
|
|
|
|
NTSYSAPI
|
|
VOID
|
|
NTAPI
|
|
RtlUnwind(
|
|
_In_opt_ PVOID TargetFrame,
|
|
_In_opt_ PVOID TargetIp,
|
|
_In_opt_ PEXCEPTION_RECORD ExceptionRecord,
|
|
_In_ PVOID ReturnValue);
|
|
|
|
#define RTL_SRWLOCK_INIT {0}
|
|
|
|
typedef struct _RTL_SRWLOCK {
|
|
PVOID Ptr;
|
|
} RTL_SRWLOCK, *PRTL_SRWLOCK;
|
|
|
|
typedef LONG
|
|
(NTAPI *PVECTORED_EXCEPTION_HANDLER)(
|
|
struct _EXCEPTION_POINTERS *ExceptionInfo
|
|
);
|
|
|
|
|
|
#define EVENTLOG_SEQUENTIAL_READ 1
|
|
#define EVENTLOG_SEEK_READ 2
|
|
#define EVENTLOG_FORWARDS_READ 4
|
|
#define EVENTLOG_BACKWARDS_READ 8
|
|
|
|
#define EVENTLOG_SUCCESS 0
|
|
#define EVENTLOG_ERROR_TYPE 1
|
|
#define EVENTLOG_WARNING_TYPE 2
|
|
#define EVENTLOG_INFORMATION_TYPE 4
|
|
#define EVENTLOG_AUDIT_SUCCESS 8
|
|
#define EVENTLOG_AUDIT_FAILURE 16
|
|
|
|
typedef struct _EVENTLOGRECORD {
|
|
DWORD Length; /* Length of full record, including the data portion */
|
|
DWORD Reserved;
|
|
DWORD RecordNumber;
|
|
DWORD TimeGenerated;
|
|
DWORD TimeWritten;
|
|
DWORD EventID;
|
|
WORD EventType;
|
|
WORD NumStrings; /* Number of strings in the 'Strings' array */
|
|
WORD EventCategory;
|
|
WORD ReservedFlags;
|
|
DWORD ClosingRecordNumber;
|
|
DWORD StringOffset;
|
|
DWORD UserSidLength;
|
|
DWORD UserSidOffset;
|
|
DWORD DataLength; /* Length of the data portion */
|
|
DWORD DataOffset; /* Offset from beginning of record */
|
|
/*
|
|
* Length-varying data:
|
|
*
|
|
* WCHAR SourceName[];
|
|
* WCHAR ComputerName[];
|
|
* SID UserSid; // Must be aligned on a DWORD boundary
|
|
* WCHAR Strings[];
|
|
* BYTE Data[];
|
|
* CHAR Pad[]; // Padding for DWORD boundary
|
|
* DWORD Length; // Same as the first 'Length' member at the beginning
|
|
*/
|
|
} EVENTLOGRECORD, *PEVENTLOGRECORD;
|
|
|
|
|
|
typedef struct _OSVERSIONINFOA {
|
|
DWORD dwOSVersionInfoSize;
|
|
DWORD dwMajorVersion;
|
|
DWORD dwMinorVersion;
|
|
DWORD dwBuildNumber;
|
|
DWORD dwPlatformId;
|
|
CHAR szCSDVersion[128];
|
|
} OSVERSIONINFOA, *POSVERSIONINFOA, *LPOSVERSIONINFOA;
|
|
|
|
typedef struct _OSVERSIONINFOW {
|
|
DWORD dwOSVersionInfoSize;
|
|
DWORD dwMajorVersion;
|
|
DWORD dwMinorVersion;
|
|
DWORD dwBuildNumber;
|
|
DWORD dwPlatformId;
|
|
WCHAR szCSDVersion[128];
|
|
} OSVERSIONINFOW, *POSVERSIONINFOW, *LPOSVERSIONINFOW, RTL_OSVERSIONINFOW, *PRTL_OSVERSIONINFOW;
|
|
|
|
typedef struct _OSVERSIONINFOEXA {
|
|
DWORD dwOSVersionInfoSize;
|
|
DWORD dwMajorVersion;
|
|
DWORD dwMinorVersion;
|
|
DWORD dwBuildNumber;
|
|
DWORD dwPlatformId;
|
|
CHAR szCSDVersion[128];
|
|
WORD wServicePackMajor;
|
|
WORD wServicePackMinor;
|
|
WORD wSuiteMask;
|
|
BYTE wProductType;
|
|
BYTE wReserved;
|
|
} OSVERSIONINFOEXA, *POSVERSIONINFOEXA, *LPOSVERSIONINFOEXA;
|
|
|
|
typedef struct _OSVERSIONINFOEXW {
|
|
DWORD dwOSVersionInfoSize;
|
|
DWORD dwMajorVersion;
|
|
DWORD dwMinorVersion;
|
|
DWORD dwBuildNumber;
|
|
DWORD dwPlatformId;
|
|
WCHAR szCSDVersion[128];
|
|
WORD wServicePackMajor;
|
|
WORD wServicePackMinor;
|
|
WORD wSuiteMask;
|
|
BYTE wProductType;
|
|
BYTE wReserved;
|
|
} OSVERSIONINFOEXW, *POSVERSIONINFOEXW, *LPOSVERSIONINFOEXW, RTL_OSVERSIONINFOEXW, *PRTL_OSVERSIONINFOEXW;
|
|
|
|
#include <pshpack2.h>
|
|
|
|
typedef struct _IMAGE_VXD_HEADER {
|
|
WORD e32_magic;
|
|
BYTE e32_border;
|
|
BYTE e32_worder;
|
|
DWORD e32_level;
|
|
WORD e32_cpu;
|
|
WORD e32_os;
|
|
DWORD e32_ver;
|
|
DWORD e32_mflags;
|
|
DWORD e32_mpages;
|
|
DWORD e32_startobj;
|
|
DWORD e32_eip;
|
|
DWORD e32_stackobj;
|
|
DWORD e32_esp;
|
|
DWORD e32_pagesize;
|
|
DWORD e32_lastpagesize;
|
|
DWORD e32_fixupsize;
|
|
DWORD e32_fixupsum;
|
|
DWORD e32_ldrsize;
|
|
DWORD e32_ldrsum;
|
|
DWORD e32_objtab;
|
|
DWORD e32_objcnt;
|
|
DWORD e32_objmap;
|
|
DWORD e32_itermap;
|
|
DWORD e32_rsrctab;
|
|
DWORD e32_rsrccnt;
|
|
DWORD e32_restab;
|
|
DWORD e32_enttab;
|
|
DWORD e32_dirtab;
|
|
DWORD e32_dircnt;
|
|
DWORD e32_fpagetab;
|
|
DWORD e32_frectab;
|
|
DWORD e32_impmod;
|
|
DWORD e32_impmodcnt;
|
|
DWORD e32_impproc;
|
|
DWORD e32_pagesum;
|
|
DWORD e32_datapage;
|
|
DWORD e32_preload;
|
|
DWORD e32_nrestab;
|
|
DWORD e32_cbnrestab;
|
|
DWORD e32_nressum;
|
|
DWORD e32_autodata;
|
|
DWORD e32_debuginfo;
|
|
DWORD e32_debuglen;
|
|
DWORD e32_instpreload;
|
|
DWORD e32_instdemand;
|
|
DWORD e32_heapsize;
|
|
BYTE e32_res3[12];
|
|
DWORD e32_winresoff;
|
|
DWORD e32_winreslen;
|
|
WORD e32_devid;
|
|
WORD e32_ddkver;
|
|
} IMAGE_VXD_HEADER, *PIMAGE_VXD_HEADER;
|
|
|
|
typedef struct _IMAGE_DOS_HEADER {
|
|
WORD e_magic;
|
|
WORD e_cblp;
|
|
WORD e_cp;
|
|
WORD e_crlc;
|
|
WORD e_cparhdr;
|
|
WORD e_minalloc;
|
|
WORD e_maxalloc;
|
|
WORD e_ss;
|
|
WORD e_sp;
|
|
WORD e_csum;
|
|
WORD e_ip;
|
|
WORD e_cs;
|
|
WORD e_lfarlc;
|
|
WORD e_ovno;
|
|
WORD e_res[4];
|
|
WORD e_oemid;
|
|
WORD e_oeminfo;
|
|
WORD e_res2[10];
|
|
LONG e_lfanew;
|
|
} IMAGE_DOS_HEADER, *PIMAGE_DOS_HEADER;
|
|
|
|
typedef struct _IMAGE_OS2_HEADER {
|
|
WORD ne_magic;
|
|
CHAR ne_ver;
|
|
CHAR ne_rev;
|
|
WORD ne_enttab;
|
|
WORD ne_cbenttab;
|
|
LONG ne_crc;
|
|
WORD ne_flags;
|
|
WORD ne_autodata;
|
|
WORD ne_heap;
|
|
WORD ne_stack;
|
|
LONG ne_csip;
|
|
LONG ne_sssp;
|
|
WORD ne_cseg;
|
|
WORD ne_cmod;
|
|
WORD ne_cbnrestab;
|
|
WORD ne_segtab;
|
|
WORD ne_rsrctab;
|
|
WORD ne_restab;
|
|
WORD ne_modtab;
|
|
WORD ne_imptab;
|
|
LONG ne_nrestab;
|
|
WORD ne_cmovent;
|
|
WORD ne_align;
|
|
WORD ne_cres;
|
|
BYTE ne_exetyp;
|
|
BYTE ne_flagsothers;
|
|
WORD ne_pretthunks;
|
|
WORD ne_psegrefbytes;
|
|
WORD ne_swaparea;
|
|
WORD ne_expver;
|
|
} IMAGE_OS2_HEADER, *PIMAGE_OS2_HEADER;
|
|
|
|
#include <poppack.h>
|
|
|
|
typedef struct _IMAGE_FILE_HEADER {
|
|
WORD Machine;
|
|
WORD NumberOfSections;
|
|
DWORD TimeDateStamp;
|
|
DWORD PointerToSymbolTable;
|
|
DWORD NumberOfSymbols;
|
|
WORD SizeOfOptionalHeader;
|
|
WORD Characteristics;
|
|
} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;
|
|
|
|
typedef struct _IMAGE_DATA_DIRECTORY {
|
|
DWORD VirtualAddress;
|
|
DWORD Size;
|
|
} IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;
|
|
|
|
typedef struct _IMAGE_OPTIONAL_HEADER32 {
|
|
WORD Magic;
|
|
BYTE MajorLinkerVersion;
|
|
BYTE MinorLinkerVersion;
|
|
DWORD SizeOfCode;
|
|
DWORD SizeOfInitializedData;
|
|
DWORD SizeOfUninitializedData;
|
|
DWORD AddressOfEntryPoint;
|
|
DWORD BaseOfCode;
|
|
DWORD BaseOfData;
|
|
DWORD ImageBase;
|
|
DWORD SectionAlignment;
|
|
DWORD FileAlignment;
|
|
WORD MajorOperatingSystemVersion;
|
|
WORD MinorOperatingSystemVersion;
|
|
WORD MajorImageVersion;
|
|
WORD MinorImageVersion;
|
|
WORD MajorSubsystemVersion;
|
|
WORD MinorSubsystemVersion;
|
|
DWORD Win32VersionValue;
|
|
DWORD SizeOfImage;
|
|
DWORD SizeOfHeaders;
|
|
DWORD CheckSum;
|
|
WORD Subsystem;
|
|
WORD DllCharacteristics;
|
|
DWORD SizeOfStackReserve;
|
|
DWORD SizeOfStackCommit;
|
|
DWORD SizeOfHeapReserve;
|
|
DWORD SizeOfHeapCommit;
|
|
DWORD LoaderFlags;
|
|
DWORD NumberOfRvaAndSizes;
|
|
IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
|
|
} IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32;
|
|
|
|
typedef struct _IMAGE_OPTIONAL_HEADER64 {
|
|
WORD Magic;
|
|
BYTE MajorLinkerVersion;
|
|
BYTE MinorLinkerVersion;
|
|
DWORD SizeOfCode;
|
|
DWORD SizeOfInitializedData;
|
|
DWORD SizeOfUninitializedData;
|
|
DWORD AddressOfEntryPoint;
|
|
DWORD BaseOfCode;
|
|
ULONGLONG ImageBase;
|
|
DWORD SectionAlignment;
|
|
DWORD FileAlignment;
|
|
WORD MajorOperatingSystemVersion;
|
|
WORD MinorOperatingSystemVersion;
|
|
WORD MajorImageVersion;
|
|
WORD MinorImageVersion;
|
|
WORD MajorSubsystemVersion;
|
|
WORD MinorSubsystemVersion;
|
|
DWORD Win32VersionValue;
|
|
DWORD SizeOfImage;
|
|
DWORD SizeOfHeaders;
|
|
DWORD CheckSum;
|
|
WORD Subsystem;
|
|
WORD DllCharacteristics;
|
|
ULONGLONG SizeOfStackReserve;
|
|
ULONGLONG SizeOfStackCommit;
|
|
ULONGLONG SizeOfHeapReserve;
|
|
ULONGLONG SizeOfHeapCommit;
|
|
DWORD LoaderFlags;
|
|
DWORD NumberOfRvaAndSizes;
|
|
IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
|
|
} IMAGE_OPTIONAL_HEADER64, *PIMAGE_OPTIONAL_HEADER64;
|
|
|
|
typedef struct _IMAGE_ROM_OPTIONAL_HEADER {
|
|
WORD Magic;
|
|
BYTE MajorLinkerVersion;
|
|
BYTE MinorLinkerVersion;
|
|
DWORD SizeOfCode;
|
|
DWORD SizeOfInitializedData;
|
|
DWORD SizeOfUninitializedData;
|
|
DWORD AddressOfEntryPoint;
|
|
DWORD BaseOfCode;
|
|
DWORD BaseOfData;
|
|
DWORD BaseOfBss;
|
|
DWORD GprMask;
|
|
DWORD CprMask[4];
|
|
DWORD GpValue;
|
|
} IMAGE_ROM_OPTIONAL_HEADER, *PIMAGE_ROM_OPTIONAL_HEADER;
|
|
|
|
typedef struct _IMAGE_NT_HEADERS32 {
|
|
DWORD Signature;
|
|
IMAGE_FILE_HEADER FileHeader;
|
|
IMAGE_OPTIONAL_HEADER32 OptionalHeader;
|
|
} IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32;
|
|
|
|
typedef struct _IMAGE_NT_HEADERS64 {
|
|
DWORD Signature;
|
|
IMAGE_FILE_HEADER FileHeader;
|
|
IMAGE_OPTIONAL_HEADER64 OptionalHeader;
|
|
} IMAGE_NT_HEADERS64, *PIMAGE_NT_HEADERS64;
|
|
|
|
#ifdef _WIN64
|
|
typedef IMAGE_OPTIONAL_HEADER64 IMAGE_OPTIONAL_HEADER;
|
|
typedef PIMAGE_OPTIONAL_HEADER64 PIMAGE_OPTIONAL_HEADER;
|
|
typedef IMAGE_NT_HEADERS64 IMAGE_NT_HEADERS;
|
|
typedef PIMAGE_NT_HEADERS64 PIMAGE_NT_HEADERS;
|
|
#else
|
|
typedef IMAGE_OPTIONAL_HEADER32 IMAGE_OPTIONAL_HEADER;
|
|
typedef PIMAGE_OPTIONAL_HEADER32 PIMAGE_OPTIONAL_HEADER;
|
|
typedef IMAGE_NT_HEADERS32 IMAGE_NT_HEADERS;
|
|
typedef PIMAGE_NT_HEADERS32 PIMAGE_NT_HEADERS;
|
|
#endif
|
|
|
|
typedef struct _IMAGE_ROM_HEADERS {
|
|
IMAGE_FILE_HEADER FileHeader;
|
|
IMAGE_ROM_OPTIONAL_HEADER OptionalHeader;
|
|
} IMAGE_ROM_HEADERS, *PIMAGE_ROM_HEADERS;
|
|
|
|
typedef struct _IMAGE_SECTION_HEADER {
|
|
BYTE Name[IMAGE_SIZEOF_SHORT_NAME];
|
|
union {
|
|
DWORD PhysicalAddress;
|
|
DWORD VirtualSize;
|
|
} Misc;
|
|
DWORD VirtualAddress;
|
|
DWORD SizeOfRawData;
|
|
DWORD PointerToRawData;
|
|
DWORD PointerToRelocations;
|
|
DWORD PointerToLinenumbers;
|
|
WORD NumberOfRelocations;
|
|
WORD NumberOfLinenumbers;
|
|
DWORD Characteristics;
|
|
} IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
|
|
|
|
#include <pshpack2.h>
|
|
|
|
typedef struct _IMAGE_SYMBOL {
|
|
union {
|
|
BYTE ShortName[8];
|
|
struct {
|
|
DWORD Short;
|
|
DWORD Long;
|
|
} Name;
|
|
PBYTE LongName[2];
|
|
} N;
|
|
DWORD Value;
|
|
SHORT SectionNumber;
|
|
WORD Type;
|
|
BYTE StorageClass;
|
|
BYTE NumberOfAuxSymbols;
|
|
} IMAGE_SYMBOL, *PIMAGE_SYMBOL;
|
|
|
|
typedef struct _IMAGE_LINENUMBER {
|
|
union {
|
|
DWORD SymbolTableIndex;
|
|
DWORD VirtualAddress;
|
|
} Type;
|
|
WORD Linenumber;
|
|
} IMAGE_LINENUMBER, UNALIGNED *PIMAGE_LINENUMBER;
|
|
|
|
typedef struct IMAGE_AUX_SYMBOL_TOKEN_DEF {
|
|
BYTE bAuxType;
|
|
BYTE bReserved;
|
|
DWORD SymbolTableIndex;
|
|
BYTE rgbReserved[12];
|
|
} IMAGE_AUX_SYMBOL_TOKEN_DEF, UNALIGNED *PIMAGE_AUX_SYMBOL_TOKEN_DEF;
|
|
|
|
typedef union _IMAGE_AUX_SYMBOL {
|
|
struct {
|
|
DWORD TagIndex;
|
|
union {
|
|
struct {
|
|
WORD Linenumber;
|
|
WORD Size;
|
|
} LnSz;
|
|
DWORD TotalSize;
|
|
} Misc;
|
|
union {
|
|
struct {
|
|
DWORD PointerToLinenumber;
|
|
DWORD PointerToNextFunction;
|
|
} Function;
|
|
struct {
|
|
WORD Dimension[4];
|
|
} Array;
|
|
} FcnAry;
|
|
WORD TvIndex;
|
|
} Sym;
|
|
struct {
|
|
BYTE Name[IMAGE_SIZEOF_SYMBOL];
|
|
} File;
|
|
struct {
|
|
DWORD Length;
|
|
WORD NumberOfRelocations;
|
|
WORD NumberOfLinenumbers;
|
|
DWORD CheckSum;
|
|
SHORT Number;
|
|
BYTE Selection;
|
|
BYTE bReserved;
|
|
SHORT HighNumber;
|
|
} Section;
|
|
IMAGE_AUX_SYMBOL_TOKEN_DEF TokenDef;
|
|
struct {
|
|
DWORD crc;
|
|
BYTE rgbReserved[14];
|
|
} CRC;
|
|
} IMAGE_AUX_SYMBOL, *PIMAGE_AUX_SYMBOL;
|
|
|
|
typedef struct _IMAGE_RELOCATION {
|
|
_ANONYMOUS_UNION union {
|
|
DWORD VirtualAddress;
|
|
DWORD RelocCount;
|
|
} DUMMYUNIONNAME;
|
|
DWORD SymbolTableIndex;
|
|
WORD Type;
|
|
} IMAGE_RELOCATION, UNALIGNED *PIMAGE_RELOCATION;
|
|
|
|
#include <poppack.h>
|
|
|
|
#ifndef __IMAGE_COR20_HEADER_DEFINED__
|
|
#define __IMAGE_COR20_HEADER_DEFINED__
|
|
|
|
typedef enum ReplacesCorHdrNumericDefines {
|
|
COMIMAGE_FLAGS_ILONLY = 0x00000001,
|
|
COMIMAGE_FLAGS_32BITREQUIRED = 0x00000002,
|
|
COMIMAGE_FLAGS_IL_LIBRARY = 0x00000004,
|
|
COMIMAGE_FLAGS_STRONGNAMESIGNED = 0x00000008,
|
|
COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 0x00000010,
|
|
COMIMAGE_FLAGS_TRACKDEBUGDATA = 0x00010000,
|
|
COMIMAGE_FLAGS_32BITPREFERRED = 0x00020000,
|
|
COR_VERSION_MAJOR_V2 = 2,
|
|
COR_VERSION_MAJOR = COR_VERSION_MAJOR_V2,
|
|
COR_VERSION_MINOR = 0,
|
|
COR_DELETED_NAME_LENGTH = 8,
|
|
COR_VTABLEGAP_NAME_LENGTH = 8,
|
|
NATIVE_TYPE_MAX_CB = 1,
|
|
COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE = 0xFF,
|
|
IMAGE_COR_MIH_METHODRVA = 0x01,
|
|
IMAGE_COR_MIH_EHRVA = 0x02,
|
|
IMAGE_COR_MIH_BASICBLOCK = 0x08,
|
|
COR_VTABLE_32BIT = 0x01,
|
|
COR_VTABLE_64BIT = 0x02,
|
|
COR_VTABLE_FROM_UNMANAGED = 0x04,
|
|
COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN = 0x08,
|
|
COR_VTABLE_CALL_MOST_DERIVED = 0x10,
|
|
IMAGE_COR_EATJ_THUNK_SIZE = 32,
|
|
MAX_CLASS_NAME = 1024,
|
|
MAX_PACKAGE_NAME = 1024
|
|
} ReplacesCorHdrNumericDefines;
|
|
|
|
typedef struct IMAGE_COR20_HEADER {
|
|
DWORD cb;
|
|
WORD MajorRuntimeVersion;
|
|
WORD MinorRuntimeVersion;
|
|
IMAGE_DATA_DIRECTORY MetaData;
|
|
DWORD Flags;
|
|
_ANONYMOUS_UNION union {
|
|
DWORD EntryPointToken;
|
|
DWORD EntryPointRVA;
|
|
} DUMMYUNIONNAME;
|
|
IMAGE_DATA_DIRECTORY Resources;
|
|
IMAGE_DATA_DIRECTORY StrongNameSignature;
|
|
IMAGE_DATA_DIRECTORY CodeManagerTable;
|
|
IMAGE_DATA_DIRECTORY VTableFixups;
|
|
IMAGE_DATA_DIRECTORY ExportAddressTableJumps;
|
|
IMAGE_DATA_DIRECTORY ManagedNativeHeader;
|
|
} IMAGE_COR20_HEADER, *PIMAGE_COR20_HEADER;
|
|
|
|
#endif /* __IMAGE_COR20_HEADER_DEFINED__ */
|
|
|
|
typedef struct _IMAGE_COFF_SYMBOLS_HEADER {
|
|
DWORD NumberOfSymbols;
|
|
DWORD LvaToFirstSymbol;
|
|
DWORD NumberOfLinenumbers;
|
|
DWORD LvaToFirstLinenumber;
|
|
DWORD RvaToFirstByteOfCode;
|
|
DWORD RvaToLastByteOfCode;
|
|
DWORD RvaToFirstByteOfData;
|
|
DWORD RvaToLastByteOfData;
|
|
} IMAGE_COFF_SYMBOLS_HEADER, *PIMAGE_COFF_SYMBOLS_HEADER;
|
|
|
|
typedef struct _IMAGE_BASE_RELOCATION {
|
|
DWORD VirtualAddress;
|
|
DWORD SizeOfBlock;
|
|
} IMAGE_BASE_RELOCATION, UNALIGNED *PIMAGE_BASE_RELOCATION;
|
|
|
|
typedef struct _IMAGE_ARCHIVE_MEMBER_HEADER {
|
|
BYTE Name[16];
|
|
BYTE Date[12];
|
|
BYTE UserID[6];
|
|
BYTE GroupID[6];
|
|
BYTE Mode[8];
|
|
BYTE Size[10];
|
|
BYTE EndHeader[2];
|
|
} IMAGE_ARCHIVE_MEMBER_HEADER, *PIMAGE_ARCHIVE_MEMBER_HEADER;
|
|
|
|
typedef struct _IMAGE_EXPORT_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD Name;
|
|
DWORD Base;
|
|
DWORD NumberOfFunctions;
|
|
DWORD NumberOfNames;
|
|
DWORD AddressOfFunctions;
|
|
DWORD AddressOfNames;
|
|
DWORD AddressOfNameOrdinals;
|
|
} IMAGE_EXPORT_DIRECTORY, *PIMAGE_EXPORT_DIRECTORY;
|
|
|
|
typedef struct _IMAGE_IMPORT_BY_NAME {
|
|
WORD Hint;
|
|
BYTE Name[1];
|
|
} IMAGE_IMPORT_BY_NAME, *PIMAGE_IMPORT_BY_NAME;
|
|
|
|
#include <pshpack8.h>
|
|
typedef struct _IMAGE_THUNK_DATA64 {
|
|
union {
|
|
ULONGLONG ForwarderString;
|
|
ULONGLONG Function;
|
|
ULONGLONG Ordinal;
|
|
ULONGLONG AddressOfData;
|
|
} u1;
|
|
} IMAGE_THUNK_DATA64, *PIMAGE_THUNK_DATA64;
|
|
#include <poppack.h>
|
|
|
|
typedef struct _IMAGE_THUNK_DATA32 {
|
|
union {
|
|
DWORD ForwarderString;
|
|
DWORD Function;
|
|
DWORD Ordinal;
|
|
DWORD AddressOfData;
|
|
} u1;
|
|
} IMAGE_THUNK_DATA32, *PIMAGE_THUNK_DATA32;
|
|
|
|
#define IMAGE_ORDINAL_FLAG64 0x8000000000000000ULL
|
|
#define IMAGE_ORDINAL_FLAG32 0x80000000
|
|
#define IMAGE_ORDINAL64(Ordinal) (Ordinal & 0xffff)
|
|
#define IMAGE_ORDINAL32(Ordinal) (Ordinal & 0xffff)
|
|
#define IMAGE_SNAP_BY_ORDINAL64(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG64)!=0)
|
|
#define IMAGE_SNAP_BY_ORDINAL32(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG32)!=0)
|
|
|
|
typedef VOID
|
|
(NTAPI *PIMAGE_TLS_CALLBACK)(PVOID DllHandle,DWORD Reason,PVOID Reserved);
|
|
|
|
typedef struct _IMAGE_TLS_DIRECTORY64 {
|
|
ULONGLONG StartAddressOfRawData;
|
|
ULONGLONG EndAddressOfRawData;
|
|
ULONGLONG AddressOfIndex;
|
|
ULONGLONG AddressOfCallBacks;
|
|
DWORD SizeOfZeroFill;
|
|
DWORD Characteristics;
|
|
} IMAGE_TLS_DIRECTORY64, *PIMAGE_TLS_DIRECTORY64;
|
|
|
|
typedef struct _IMAGE_TLS_DIRECTORY32 {
|
|
DWORD StartAddressOfRawData;
|
|
DWORD EndAddressOfRawData;
|
|
DWORD AddressOfIndex;
|
|
DWORD AddressOfCallBacks;
|
|
DWORD SizeOfZeroFill;
|
|
DWORD Characteristics;
|
|
} IMAGE_TLS_DIRECTORY32, *PIMAGE_TLS_DIRECTORY32;
|
|
|
|
#ifdef _WIN64
|
|
#define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG64
|
|
#define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL64(Ordinal)
|
|
typedef IMAGE_THUNK_DATA64 IMAGE_THUNK_DATA;
|
|
typedef PIMAGE_THUNK_DATA64 PIMAGE_THUNK_DATA;
|
|
#define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL64(Ordinal)
|
|
typedef IMAGE_TLS_DIRECTORY64 IMAGE_TLS_DIRECTORY;
|
|
typedef PIMAGE_TLS_DIRECTORY64 PIMAGE_TLS_DIRECTORY;
|
|
#else
|
|
#define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG32
|
|
#define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL32(Ordinal)
|
|
typedef IMAGE_THUNK_DATA32 IMAGE_THUNK_DATA;
|
|
typedef PIMAGE_THUNK_DATA32 PIMAGE_THUNK_DATA;
|
|
#define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL32(Ordinal)
|
|
typedef IMAGE_TLS_DIRECTORY32 IMAGE_TLS_DIRECTORY;
|
|
typedef PIMAGE_TLS_DIRECTORY32 PIMAGE_TLS_DIRECTORY;
|
|
#endif
|
|
|
|
typedef struct _IMAGE_IMPORT_DESCRIPTOR {
|
|
_ANONYMOUS_UNION union {
|
|
DWORD Characteristics;
|
|
DWORD OriginalFirstThunk;
|
|
} DUMMYUNIONNAME;
|
|
DWORD TimeDateStamp;
|
|
DWORD ForwarderChain;
|
|
DWORD Name;
|
|
DWORD FirstThunk;
|
|
} IMAGE_IMPORT_DESCRIPTOR, UNALIGNED *PIMAGE_IMPORT_DESCRIPTOR;
|
|
|
|
typedef struct _IMAGE_BOUND_IMPORT_DESCRIPTOR {
|
|
DWORD TimeDateStamp;
|
|
WORD OffsetModuleName;
|
|
WORD NumberOfModuleForwarderRefs;
|
|
} IMAGE_BOUND_IMPORT_DESCRIPTOR, *PIMAGE_BOUND_IMPORT_DESCRIPTOR;
|
|
|
|
typedef struct _IMAGE_BOUND_FORWARDER_REF {
|
|
DWORD TimeDateStamp;
|
|
WORD OffsetModuleName;
|
|
WORD Reserved;
|
|
} IMAGE_BOUND_FORWARDER_REF, *PIMAGE_BOUND_FORWARDER_REF;
|
|
|
|
typedef struct _IMAGE_DELAYLOAD_DESCRIPTOR {
|
|
union {
|
|
DWORD AllAttributes;
|
|
struct {
|
|
DWORD RvaBased:1;
|
|
DWORD ReservedAttributes:31;
|
|
};
|
|
} Attributes;
|
|
DWORD DllNameRVA;
|
|
DWORD ModuleHandleRVA;
|
|
DWORD ImportAddressTableRVA;
|
|
DWORD ImportNameTableRVA;
|
|
DWORD BoundImportAddressTableRVA;
|
|
DWORD UnloadInformationTableRVA;
|
|
DWORD TimeDateStamp;
|
|
} IMAGE_DELAYLOAD_DESCRIPTOR, *PIMAGE_DELAYLOAD_DESCRIPTOR;
|
|
|
|
typedef const IMAGE_DELAYLOAD_DESCRIPTOR *PCIMAGE_DELAYLOAD_DESCRIPTOR;
|
|
|
|
typedef struct _IMAGE_RESOURCE_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
WORD NumberOfNamedEntries;
|
|
WORD NumberOfIdEntries;
|
|
} IMAGE_RESOURCE_DIRECTORY, *PIMAGE_RESOURCE_DIRECTORY;
|
|
|
|
typedef struct _IMAGE_RESOURCE_DIRECTORY_ENTRY {
|
|
_ANONYMOUS_UNION union {
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD NameOffset:31;
|
|
DWORD NameIsString:1;
|
|
} DUMMYSTRUCTNAME;
|
|
DWORD Name;
|
|
WORD Id;
|
|
} DUMMYUNIONNAME;
|
|
_ANONYMOUS_UNION union {
|
|
DWORD OffsetToData;
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD OffsetToDirectory:31;
|
|
DWORD DataIsDirectory:1;
|
|
} DUMMYSTRUCTNAME2;
|
|
} DUMMYUNIONNAME2;
|
|
} IMAGE_RESOURCE_DIRECTORY_ENTRY, *PIMAGE_RESOURCE_DIRECTORY_ENTRY;
|
|
|
|
typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING {
|
|
WORD Length;
|
|
CHAR NameString[1];
|
|
} IMAGE_RESOURCE_DIRECTORY_STRING, *PIMAGE_RESOURCE_DIRECTORY_STRING;
|
|
|
|
typedef struct _IMAGE_RESOURCE_DIR_STRING_U {
|
|
WORD Length;
|
|
WCHAR NameString[1];
|
|
} IMAGE_RESOURCE_DIR_STRING_U, *PIMAGE_RESOURCE_DIR_STRING_U;
|
|
|
|
typedef struct _IMAGE_RESOURCE_DATA_ENTRY {
|
|
DWORD OffsetToData;
|
|
DWORD Size;
|
|
DWORD CodePage;
|
|
DWORD Reserved;
|
|
} IMAGE_RESOURCE_DATA_ENTRY, *PIMAGE_RESOURCE_DATA_ENTRY;
|
|
|
|
typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32 {
|
|
DWORD Size;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD GlobalFlagsClear;
|
|
DWORD GlobalFlagsSet;
|
|
DWORD CriticalSectionDefaultTimeout;
|
|
DWORD DeCommitFreeBlockThreshold;
|
|
DWORD DeCommitTotalFreeThreshold;
|
|
DWORD LockPrefixTable;
|
|
DWORD MaximumAllocationSize;
|
|
DWORD VirtualMemoryThreshold;
|
|
DWORD ProcessHeapFlags;
|
|
DWORD ProcessAffinityMask;
|
|
WORD CSDVersion;
|
|
WORD Reserved1;
|
|
DWORD EditList;
|
|
DWORD SecurityCookie;
|
|
DWORD SEHandlerTable;
|
|
DWORD SEHandlerCount;
|
|
} IMAGE_LOAD_CONFIG_DIRECTORY32, *PIMAGE_LOAD_CONFIG_DIRECTORY32;
|
|
|
|
typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64 {
|
|
DWORD Size;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD GlobalFlagsClear;
|
|
DWORD GlobalFlagsSet;
|
|
DWORD CriticalSectionDefaultTimeout;
|
|
ULONGLONG DeCommitFreeBlockThreshold;
|
|
ULONGLONG DeCommitTotalFreeThreshold;
|
|
ULONGLONG LockPrefixTable;
|
|
ULONGLONG MaximumAllocationSize;
|
|
ULONGLONG VirtualMemoryThreshold;
|
|
ULONGLONG ProcessAffinityMask;
|
|
DWORD ProcessHeapFlags;
|
|
WORD CSDVersion;
|
|
WORD Reserved1;
|
|
ULONGLONG EditList;
|
|
ULONGLONG SecurityCookie;
|
|
ULONGLONG SEHandlerTable;
|
|
ULONGLONG SEHandlerCount;
|
|
} IMAGE_LOAD_CONFIG_DIRECTORY64, *PIMAGE_LOAD_CONFIG_DIRECTORY64;
|
|
|
|
#ifdef _WIN64
|
|
typedef IMAGE_LOAD_CONFIG_DIRECTORY64 IMAGE_LOAD_CONFIG_DIRECTORY;
|
|
typedef PIMAGE_LOAD_CONFIG_DIRECTORY64 PIMAGE_LOAD_CONFIG_DIRECTORY;
|
|
#else
|
|
typedef IMAGE_LOAD_CONFIG_DIRECTORY32 IMAGE_LOAD_CONFIG_DIRECTORY;
|
|
typedef PIMAGE_LOAD_CONFIG_DIRECTORY32 PIMAGE_LOAD_CONFIG_DIRECTORY;
|
|
#endif
|
|
|
|
typedef struct _IMAGE_RUNTIME_FUNCTION_ENTRY {
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
DWORD UnwindInfoAddress;
|
|
} IMAGE_RUNTIME_FUNCTION_ENTRY, *PIMAGE_RUNTIME_FUNCTION_ENTRY;
|
|
|
|
typedef struct _IMAGE_DEBUG_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD Type;
|
|
DWORD SizeOfData;
|
|
DWORD AddressOfRawData;
|
|
DWORD PointerToRawData;
|
|
} IMAGE_DEBUG_DIRECTORY, *PIMAGE_DEBUG_DIRECTORY;
|
|
|
|
typedef struct _FPO_DATA {
|
|
DWORD ulOffStart;
|
|
DWORD cbProcSize;
|
|
DWORD cdwLocals;
|
|
WORD cdwParams;
|
|
WORD cbProlog:8;
|
|
WORD cbRegs:3;
|
|
WORD fHasSEH:1;
|
|
WORD fUseBP:1;
|
|
WORD reserved:1;
|
|
WORD cbFrame:2;
|
|
} FPO_DATA, *PFPO_DATA;
|
|
|
|
typedef struct _IMAGE_DEBUG_MISC {
|
|
DWORD DataType;
|
|
DWORD Length;
|
|
BOOLEAN Unicode;
|
|
BYTE Reserved[3];
|
|
BYTE Data[1];
|
|
} IMAGE_DEBUG_MISC, *PIMAGE_DEBUG_MISC;
|
|
|
|
typedef struct _IMAGE_FUNCTION_ENTRY {
|
|
DWORD StartingAddress;
|
|
DWORD EndingAddress;
|
|
DWORD EndOfPrologue;
|
|
} IMAGE_FUNCTION_ENTRY, *PIMAGE_FUNCTION_ENTRY;
|
|
|
|
typedef struct _IMAGE_SEPARATE_DEBUG_HEADER {
|
|
WORD Signature;
|
|
WORD Flags;
|
|
WORD Machine;
|
|
WORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
DWORD CheckSum;
|
|
DWORD ImageBase;
|
|
DWORD SizeOfImage;
|
|
DWORD NumberOfSections;
|
|
DWORD ExportedNamesSize;
|
|
DWORD DebugDirectorySize;
|
|
DWORD SectionAlignment;
|
|
DWORD Reserved[2];
|
|
} IMAGE_SEPARATE_DEBUG_HEADER, *PIMAGE_SEPARATE_DEBUG_HEADER;
|
|
|
|
typedef enum _CM_SERVICE_NODE_TYPE {
|
|
DriverType = SERVICE_KERNEL_DRIVER,
|
|
FileSystemType = SERVICE_FILE_SYSTEM_DRIVER,
|
|
Win32ServiceOwnProcess = SERVICE_WIN32_OWN_PROCESS,
|
|
Win32ServiceShareProcess = SERVICE_WIN32_SHARE_PROCESS,
|
|
AdapterType = SERVICE_ADAPTER,
|
|
RecognizerType = SERVICE_RECOGNIZER_DRIVER
|
|
} SERVICE_NODE_TYPE;
|
|
|
|
typedef enum _CM_SERVICE_LOAD_TYPE {
|
|
BootLoad = SERVICE_BOOT_START,
|
|
SystemLoad = SERVICE_SYSTEM_START,
|
|
AutoLoad = SERVICE_AUTO_START,
|
|
DemandLoad = SERVICE_DEMAND_START,
|
|
DisableLoad = SERVICE_DISABLED
|
|
} SERVICE_LOAD_TYPE;
|
|
|
|
typedef enum _CM_ERROR_CONTROL_TYPE {
|
|
IgnoreError = SERVICE_ERROR_IGNORE,
|
|
NormalError = SERVICE_ERROR_NORMAL,
|
|
SevereError = SERVICE_ERROR_SEVERE,
|
|
CriticalError = SERVICE_ERROR_CRITICAL
|
|
} SERVICE_ERROR_TYPE;
|
|
|
|
typedef struct _NT_TIB {
|
|
struct _EXCEPTION_REGISTRATION_RECORD *ExceptionList;
|
|
PVOID StackBase;
|
|
PVOID StackLimit;
|
|
PVOID SubSystemTib;
|
|
_ANONYMOUS_UNION union {
|
|
PVOID FiberData;
|
|
DWORD Version;
|
|
} DUMMYUNIONNAME;
|
|
PVOID ArbitraryUserPointer;
|
|
struct _NT_TIB *Self;
|
|
} NT_TIB,*PNT_TIB;
|
|
|
|
typedef struct _NT_TIB32 {
|
|
DWORD ExceptionList;
|
|
DWORD StackBase;
|
|
DWORD StackLimit;
|
|
DWORD SubSystemTib;
|
|
_ANONYMOUS_UNION union {
|
|
DWORD FiberData;
|
|
DWORD Version;
|
|
} DUMMYUNIONNAME;
|
|
DWORD ArbitraryUserPointer;
|
|
DWORD Self;
|
|
} NT_TIB32,*PNT_TIB32;
|
|
|
|
typedef struct _NT_TIB64 {
|
|
DWORD64 ExceptionList;
|
|
DWORD64 StackBase;
|
|
DWORD64 StackLimit;
|
|
DWORD64 SubSystemTib;
|
|
_ANONYMOUS_UNION union {
|
|
DWORD64 FiberData;
|
|
DWORD Version;
|
|
} DUMMYUNIONNAME;
|
|
DWORD64 ArbitraryUserPointer;
|
|
DWORD64 Self;
|
|
} NT_TIB64,*PNT_TIB64;
|
|
|
|
typedef struct _REPARSE_GUID_DATA_BUFFER {
|
|
DWORD ReparseTag;
|
|
WORD ReparseDataLength;
|
|
WORD Reserved;
|
|
GUID ReparseGuid;
|
|
struct {
|
|
BYTE DataBuffer[1];
|
|
} GenericReparseBuffer;
|
|
} REPARSE_GUID_DATA_BUFFER, *PREPARSE_GUID_DATA_BUFFER;
|
|
|
|
typedef struct _REPARSE_POINT_INFORMATION {
|
|
WORD ReparseDataLength;
|
|
WORD UnparsedNameLength;
|
|
} REPARSE_POINT_INFORMATION, *PREPARSE_POINT_INFORMATION;
|
|
|
|
typedef union _FILE_SEGMENT_ELEMENT {
|
|
PVOID64 Buffer;
|
|
ULONGLONG Alignment;
|
|
} FILE_SEGMENT_ELEMENT, *PFILE_SEGMENT_ELEMENT;
|
|
|
|
/* JOBOBJECT_BASIC_LIMIT_INFORMATION.LimitFlags constants */
|
|
#define JOB_OBJECT_LIMIT_WORKINGSET 0x0001
|
|
#define JOB_OBJECT_LIMIT_PROCESS_TIME 0x0002
|
|
#define JOB_OBJECT_LIMIT_JOB_TIME 0x0004
|
|
#define JOB_OBJECT_LIMIT_ACTIVE_PROCESS 0x0008
|
|
#define JOB_OBJECT_LIMIT_AFFINITY 0x0010
|
|
#define JOB_OBJECT_LIMIT_PRIORITY_CLASS 0x0020
|
|
#define JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME 0x0040
|
|
#define JOB_OBJECT_LIMIT_SCHEDULING_CLASS 0x0080
|
|
#define JOB_OBJECT_LIMIT_PROCESS_MEMORY 0x0100
|
|
#define JOB_OBJECT_LIMIT_JOB_MEMORY 0x0200
|
|
#define JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION 0x0400
|
|
#define JOB_OBJECT_LIMIT_BREAKAWAY_OK 0x0800
|
|
#define JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK 0x1000
|
|
#define JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE 0x2000
|
|
|
|
/* JOBOBJECT_BASIC_UI_RESTRICTIONS.UIRestrictionsClass constants */
|
|
#define JOB_OBJECT_UILIMIT_HANDLES 0x0001
|
|
#define JOB_OBJECT_UILIMIT_READCLIPBOARD 0x0002
|
|
#define JOB_OBJECT_UILIMIT_WRITECLIPBOARD 0x0004
|
|
#define JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS 0x0008
|
|
#define JOB_OBJECT_UILIMIT_DISPLAYSETTINGS 0x0010
|
|
#define JOB_OBJECT_UILIMIT_GLOBALATOMS 0x0020
|
|
#define JOB_OBJECT_UILIMIT_DESKTOP 0x0040
|
|
#define JOB_OBJECT_UILIMIT_EXITWINDOWS 0x0080
|
|
|
|
/* JOBOBJECT_SECURITY_LIMIT_INFORMATION.SecurityLimitFlags constants */
|
|
#define JOB_OBJECT_SECURITY_NO_ADMIN 0x0001
|
|
#define JOB_OBJECT_SECURITY_RESTRICTED_TOKEN 0x0002
|
|
#define JOB_OBJECT_SECURITY_ONLY_TOKEN 0x0004
|
|
#define JOB_OBJECT_SECURITY_FILTER_TOKENS 0x0008
|
|
|
|
/* JOBOBJECT_END_OF_JOB_TIME_INFORMATION.EndOfJobTimeAction constants */
|
|
#define JOB_OBJECT_TERMINATE_AT_END_OF_JOB 0
|
|
#define JOB_OBJECT_POST_AT_END_OF_JOB 1
|
|
|
|
#define JOB_OBJECT_MSG_END_OF_JOB_TIME 1
|
|
#define JOB_OBJECT_MSG_END_OF_PROCESS_TIME 2
|
|
#define JOB_OBJECT_MSG_ACTIVE_PROCESS_LIMIT 3
|
|
#define JOB_OBJECT_MSG_ACTIVE_PROCESS_ZERO 4
|
|
#define JOB_OBJECT_MSG_NEW_PROCESS 6
|
|
#define JOB_OBJECT_MSG_EXIT_PROCESS 7
|
|
#define JOB_OBJECT_MSG_ABNORMAL_EXIT_PROCESS 8
|
|
#define JOB_OBJECT_MSG_PROCESS_MEMORY_LIMIT 9
|
|
#define JOB_OBJECT_MSG_JOB_MEMORY_LIMIT 10
|
|
|
|
#define JOB_OBJECT_ASSIGN_PROCESS 1
|
|
#define JOB_OBJECT_SET_ATTRIBUTES 2
|
|
#define JOB_OBJECT_QUERY 4
|
|
#define JOB_OBJECT_TERMINATE 8
|
|
#define JOB_OBJECT_SET_SECURITY_ATTRIBUTES 16
|
|
#define JOB_OBJECT_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|31)
|
|
|
|
typedef enum _JOBOBJECTINFOCLASS {
|
|
JobObjectBasicAccountingInformation = 1,
|
|
JobObjectBasicLimitInformation,
|
|
JobObjectBasicProcessIdList,
|
|
JobObjectBasicUIRestrictions,
|
|
JobObjectSecurityLimitInformation,
|
|
JobObjectEndOfJobTimeInformation,
|
|
JobObjectAssociateCompletionPortInformation,
|
|
JobObjectBasicAndIoAccountingInformation,
|
|
JobObjectExtendedLimitInformation,
|
|
JobObjectJobSetInformation,
|
|
JobObjectGroupInformation,
|
|
MaxJobObjectInfoClass
|
|
} JOBOBJECTINFOCLASS;
|
|
|
|
typedef struct _JOB_SET_ARRAY {
|
|
HANDLE JobHandle;
|
|
DWORD MemberLevel;
|
|
DWORD Flags;
|
|
} JOB_SET_ARRAY, *PJOB_SET_ARRAY;
|
|
|
|
typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION {
|
|
LARGE_INTEGER TotalUserTime;
|
|
LARGE_INTEGER TotalKernelTime;
|
|
LARGE_INTEGER ThisPeriodTotalUserTime;
|
|
LARGE_INTEGER ThisPeriodTotalKernelTime;
|
|
DWORD TotalPageFaultCount;
|
|
DWORD TotalProcesses;
|
|
DWORD ActiveProcesses;
|
|
DWORD TotalTerminatedProcesses;
|
|
} JOBOBJECT_BASIC_ACCOUNTING_INFORMATION,*PJOBOBJECT_BASIC_ACCOUNTING_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_BASIC_LIMIT_INFORMATION {
|
|
LARGE_INTEGER PerProcessUserTimeLimit;
|
|
LARGE_INTEGER PerJobUserTimeLimit;
|
|
DWORD LimitFlags;
|
|
SIZE_T MinimumWorkingSetSize;
|
|
SIZE_T MaximumWorkingSetSize;
|
|
DWORD ActiveProcessLimit;
|
|
ULONG_PTR Affinity;
|
|
DWORD PriorityClass;
|
|
DWORD SchedulingClass;
|
|
} JOBOBJECT_BASIC_LIMIT_INFORMATION,*PJOBOBJECT_BASIC_LIMIT_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_BASIC_PROCESS_ID_LIST {
|
|
DWORD NumberOfAssignedProcesses;
|
|
DWORD NumberOfProcessIdsInList;
|
|
ULONG_PTR ProcessIdList[1];
|
|
} JOBOBJECT_BASIC_PROCESS_ID_LIST, *PJOBOBJECT_BASIC_PROCESS_ID_LIST;
|
|
|
|
typedef struct _JOBOBJECT_BASIC_UI_RESTRICTIONS {
|
|
DWORD UIRestrictionsClass;
|
|
} JOBOBJECT_BASIC_UI_RESTRICTIONS,*PJOBOBJECT_BASIC_UI_RESTRICTIONS;
|
|
|
|
typedef struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION {
|
|
DWORD SecurityLimitFlags;
|
|
HANDLE JobToken;
|
|
PTOKEN_GROUPS SidsToDisable;
|
|
PTOKEN_PRIVILEGES PrivilegesToDelete;
|
|
PTOKEN_GROUPS RestrictedSids;
|
|
} JOBOBJECT_SECURITY_LIMIT_INFORMATION,*PJOBOBJECT_SECURITY_LIMIT_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION {
|
|
DWORD EndOfJobTimeAction;
|
|
} JOBOBJECT_END_OF_JOB_TIME_INFORMATION,*PJOBOBJECT_END_OF_JOB_TIME_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_ASSOCIATE_COMPLETION_PORT {
|
|
PVOID CompletionKey;
|
|
HANDLE CompletionPort;
|
|
} JOBOBJECT_ASSOCIATE_COMPLETION_PORT,*PJOBOBJECT_ASSOCIATE_COMPLETION_PORT;
|
|
|
|
typedef struct _JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION {
|
|
JOBOBJECT_BASIC_ACCOUNTING_INFORMATION BasicInfo;
|
|
IO_COUNTERS IoInfo;
|
|
} JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION,*PJOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION {
|
|
JOBOBJECT_BASIC_LIMIT_INFORMATION BasicLimitInformation;
|
|
IO_COUNTERS IoInfo;
|
|
SIZE_T ProcessMemoryLimit;
|
|
SIZE_T JobMemoryLimit;
|
|
SIZE_T PeakProcessMemoryUsed;
|
|
SIZE_T PeakJobMemoryUsed;
|
|
} JOBOBJECT_EXTENDED_LIMIT_INFORMATION,*PJOBOBJECT_EXTENDED_LIMIT_INFORMATION;
|
|
|
|
typedef struct _JOBOBJECT_JOBSET_INFORMATION {
|
|
DWORD MemberLevel;
|
|
} JOBOBJECT_JOBSET_INFORMATION,*PJOBOBJECT_JOBSET_INFORMATION;
|
|
|
|
/* Fixme: Making these defines conditional on WINVER will break ddk includes */
|
|
#if 1 /* (WINVER >= 0x0500) */
|
|
|
|
#define ES_SYSTEM_REQUIRED 0x00000001
|
|
#define ES_DISPLAY_REQUIRED 0x00000002
|
|
#define ES_USER_PRESENT 0x00000004
|
|
#define ES_CONTINUOUS 0x80000000
|
|
|
|
typedef enum _LATENCY_TIME {
|
|
LT_DONT_CARE,
|
|
LT_LOWEST_LATENCY
|
|
} LATENCY_TIME, *PLATENCY_TIME;
|
|
|
|
typedef enum _SYSTEM_POWER_STATE {
|
|
PowerSystemUnspecified = 0,
|
|
PowerSystemWorking,
|
|
PowerSystemSleeping1,
|
|
PowerSystemSleeping2,
|
|
PowerSystemSleeping3,
|
|
PowerSystemHibernate,
|
|
PowerSystemShutdown,
|
|
PowerSystemMaximum
|
|
} SYSTEM_POWER_STATE, *PSYSTEM_POWER_STATE;
|
|
|
|
#define POWER_SYSTEM_MAXIMUM PowerSystemMaximum
|
|
|
|
typedef enum {
|
|
PowerActionNone = 0,
|
|
PowerActionReserved,
|
|
PowerActionSleep,
|
|
PowerActionHibernate,
|
|
PowerActionShutdown,
|
|
PowerActionShutdownReset,
|
|
PowerActionShutdownOff,
|
|
PowerActionWarmEject
|
|
} POWER_ACTION, *PPOWER_ACTION;
|
|
|
|
typedef enum _DEVICE_POWER_STATE {
|
|
PowerDeviceUnspecified = 0,
|
|
PowerDeviceD0,
|
|
PowerDeviceD1,
|
|
PowerDeviceD2,
|
|
PowerDeviceD3,
|
|
PowerDeviceMaximum
|
|
} DEVICE_POWER_STATE, *PDEVICE_POWER_STATE;
|
|
|
|
#if (NTDDI_VERSION >= NTDDI_WINXP) || !defined(_BATCLASS_)
|
|
typedef struct {
|
|
DWORD Granularity;
|
|
DWORD Capacity;
|
|
} BATTERY_REPORTING_SCALE, *PBATTERY_REPORTING_SCALE;
|
|
#endif
|
|
|
|
typedef struct _POWER_ACTION_POLICY {
|
|
POWER_ACTION Action;
|
|
DWORD Flags;
|
|
DWORD EventCode;
|
|
} POWER_ACTION_POLICY, *PPOWER_ACTION_POLICY;
|
|
|
|
/* POWER_ACTION_POLICY.Flags constants */
|
|
#define POWER_ACTION_QUERY_ALLOWED 0x00000001
|
|
#define POWER_ACTION_UI_ALLOWED 0x00000002
|
|
#define POWER_ACTION_OVERRIDE_APPS 0x00000004
|
|
#define POWER_ACTION_LIGHTEST_FIRST 0x10000000
|
|
#define POWER_ACTION_LOCK_CONSOLE 0x20000000
|
|
#define POWER_ACTION_DISABLE_WAKES 0x40000000
|
|
#define POWER_ACTION_CRITICAL 0x80000000
|
|
|
|
/* POWER_ACTION_POLICY.EventCode constants */
|
|
#define POWER_LEVEL_USER_NOTIFY_TEXT 0x00000001
|
|
#define POWER_LEVEL_USER_NOTIFY_SOUND 0x00000002
|
|
#define POWER_LEVEL_USER_NOTIFY_EXEC 0x00000004
|
|
#define POWER_USER_NOTIFY_BUTTON 0x00000008
|
|
#define POWER_USER_NOTIFY_SHUTDOWN 0x00000010
|
|
#define POWER_FORCE_TRIGGER_RESET 0x80000000
|
|
|
|
#define DISCHARGE_POLICY_CRITICAL 0
|
|
#define DISCHARGE_POLICY_LOW 1
|
|
#define NUM_DISCHARGE_POLICIES 4
|
|
|
|
#define PO_THROTTLE_NONE 0
|
|
#define PO_THROTTLE_CONSTANT 1
|
|
#define PO_THROTTLE_DEGRADE 2
|
|
#define PO_THROTTLE_ADAPTIVE 3
|
|
#define PO_THROTTLE_MAXIMUM 4
|
|
|
|
typedef struct _SYSTEM_POWER_LEVEL {
|
|
BOOLEAN Enable;
|
|
BYTE Spare[3];
|
|
DWORD BatteryLevel;
|
|
POWER_ACTION_POLICY PowerPolicy;
|
|
SYSTEM_POWER_STATE MinSystemState;
|
|
} SYSTEM_POWER_LEVEL, *PSYSTEM_POWER_LEVEL;
|
|
|
|
typedef struct _SYSTEM_POWER_POLICY {
|
|
DWORD Revision;
|
|
POWER_ACTION_POLICY PowerButton;
|
|
POWER_ACTION_POLICY SleepButton;
|
|
POWER_ACTION_POLICY LidClose;
|
|
SYSTEM_POWER_STATE LidOpenWake;
|
|
DWORD Reserved;
|
|
POWER_ACTION_POLICY Idle;
|
|
DWORD IdleTimeout;
|
|
BYTE IdleSensitivity;
|
|
BYTE DynamicThrottle;
|
|
BYTE Spare2[2];
|
|
SYSTEM_POWER_STATE MinSleep;
|
|
SYSTEM_POWER_STATE MaxSleep;
|
|
SYSTEM_POWER_STATE ReducedLatencySleep;
|
|
DWORD WinLogonFlags;
|
|
DWORD Spare3;
|
|
DWORD DozeS4Timeout;
|
|
DWORD BroadcastCapacityResolution;
|
|
SYSTEM_POWER_LEVEL DischargePolicy[NUM_DISCHARGE_POLICIES];
|
|
DWORD VideoTimeout;
|
|
BOOLEAN VideoDimDisplay;
|
|
DWORD VideoReserved[3];
|
|
DWORD SpindownTimeout;
|
|
BOOLEAN OptimizeForPower;
|
|
BYTE FanThrottleTolerance;
|
|
BYTE ForcedThrottle;
|
|
BYTE MinThrottle;
|
|
POWER_ACTION_POLICY OverThrottled;
|
|
} SYSTEM_POWER_POLICY, *PSYSTEM_POWER_POLICY;
|
|
|
|
typedef struct _SYSTEM_POWER_CAPABILITIES {
|
|
BOOLEAN PowerButtonPresent;
|
|
BOOLEAN SleepButtonPresent;
|
|
BOOLEAN LidPresent;
|
|
BOOLEAN SystemS1;
|
|
BOOLEAN SystemS2;
|
|
BOOLEAN SystemS3;
|
|
BOOLEAN SystemS4;
|
|
BOOLEAN SystemS5;
|
|
BOOLEAN HiberFilePresent;
|
|
BOOLEAN FullWake;
|
|
BOOLEAN VideoDimPresent;
|
|
BOOLEAN ApmPresent;
|
|
BOOLEAN UpsPresent;
|
|
BOOLEAN ThermalControl;
|
|
BOOLEAN ProcessorThrottle;
|
|
BYTE ProcessorMinThrottle;
|
|
#if (NTDDI_VERSION < NTDDI_WINXP)
|
|
BYTE ProcessorThrottleScale;
|
|
BYTE spare2[4];
|
|
#else
|
|
BYTE ProcessorMaxThrottle;
|
|
BOOLEAN FastSystemS4;
|
|
BYTE spare2[3];
|
|
#endif /* (NTDDI_VERSION < NTDDI_WINXP) */
|
|
BOOLEAN DiskSpinDown;
|
|
BYTE spare3[8];
|
|
BOOLEAN SystemBatteriesPresent;
|
|
BOOLEAN BatteriesAreShortTerm;
|
|
BATTERY_REPORTING_SCALE BatteryScale[3];
|
|
SYSTEM_POWER_STATE AcOnLineWake;
|
|
SYSTEM_POWER_STATE SoftLidWake;
|
|
SYSTEM_POWER_STATE RtcWake;
|
|
SYSTEM_POWER_STATE MinDeviceWakeState;
|
|
SYSTEM_POWER_STATE DefaultLowLatencyWake;
|
|
} SYSTEM_POWER_CAPABILITIES, *PSYSTEM_POWER_CAPABILITIES;
|
|
|
|
typedef struct _SYSTEM_BATTERY_STATE {
|
|
BOOLEAN AcOnLine;
|
|
BOOLEAN BatteryPresent;
|
|
BOOLEAN Charging;
|
|
BOOLEAN Discharging;
|
|
BOOLEAN Spare1[4];
|
|
DWORD MaxCapacity;
|
|
DWORD RemainingCapacity;
|
|
DWORD Rate;
|
|
DWORD EstimatedTime;
|
|
DWORD DefaultAlert1;
|
|
DWORD DefaultAlert2;
|
|
} SYSTEM_BATTERY_STATE, *PSYSTEM_BATTERY_STATE;
|
|
|
|
// FIXME: This should not be here!
|
|
typedef struct _PROCESSOR_POWER_INFORMATION {
|
|
ULONG Number;
|
|
ULONG MaxMhz;
|
|
ULONG CurrentMhz;
|
|
ULONG MhzLimit;
|
|
ULONG MaxIdleState;
|
|
ULONG CurrentIdleState;
|
|
} PROCESSOR_POWER_INFORMATION, *PPROCESSOR_POWER_INFORMATION;
|
|
|
|
typedef DWORD EXECUTION_STATE, *PEXECUTION_STATE;
|
|
|
|
typedef enum _POWER_INFORMATION_LEVEL {
|
|
SystemPowerPolicyAc,
|
|
SystemPowerPolicyDc,
|
|
VerifySystemPolicyAc,
|
|
VerifySystemPolicyDc,
|
|
SystemPowerCapabilities,
|
|
SystemBatteryState,
|
|
SystemPowerStateHandler,
|
|
ProcessorStateHandler,
|
|
SystemPowerPolicyCurrent,
|
|
AdministratorPowerPolicy,
|
|
SystemReserveHiberFile,
|
|
ProcessorInformation,
|
|
SystemPowerInformation,
|
|
ProcessorStateHandler2,
|
|
LastWakeTime,
|
|
LastSleepTime,
|
|
SystemExecutionState,
|
|
SystemPowerStateNotifyHandler,
|
|
ProcessorPowerPolicyAc,
|
|
ProcessorPowerPolicyDc,
|
|
VerifyProcessorPowerPolicyAc,
|
|
VerifyProcessorPowerPolicyDc,
|
|
ProcessorPowerPolicyCurrent,
|
|
SystemPowerStateLogging,
|
|
SystemPowerLoggingEntry,
|
|
SetPowerSettingValue,
|
|
NotifyUserPowerSetting,
|
|
PowerInformationLevelUnused0,
|
|
PowerInformationLevelUnused1,
|
|
SystemVideoState,
|
|
TraceApplicationPowerMessage,
|
|
TraceApplicationPowerMessageEnd,
|
|
ProcessorPerfStates,
|
|
ProcessorIdleStates,
|
|
ProcessorCap,
|
|
SystemWakeSource,
|
|
SystemHiberFileInformation,
|
|
TraceServicePowerMessage,
|
|
ProcessorLoad,
|
|
PowerShutdownNotification,
|
|
MonitorCapabilities,
|
|
SessionPowerInit,
|
|
SessionDisplayState,
|
|
PowerRequestCreate,
|
|
PowerRequestAction,
|
|
GetPowerRequestList,
|
|
ProcessorInformationEx,
|
|
NotifyUserModeLegacyPowerEvent,
|
|
GroupPark,
|
|
ProcessorIdleDomains,
|
|
WakeTimerList,
|
|
SystemHiberFileSize,
|
|
PowerInformationLevelMaximum
|
|
} POWER_INFORMATION_LEVEL;
|
|
|
|
#if (_WIN32_WINNT >= 0x0501)
|
|
|
|
typedef enum _ACTIVATION_CONTEXT_INFO_CLASS {
|
|
ActivationContextBasicInformation = 1,
|
|
ActivationContextDetailedInformation = 2,
|
|
AssemblyDetailedInformationInActivationContext = 3,
|
|
FileInformationInAssemblyOfAssemblyInActivationContext = 4,
|
|
RunlevelInformationInActivationContext = 5,
|
|
CompatibilityInformationInActivationContext = 6,
|
|
ActivationContextManifestResourceName = 7,
|
|
MaxActivationContextInfoClass,
|
|
/* For compatibility with the old names */
|
|
AssemblyDetailedInformationInActivationContxt = 3,
|
|
FileInformationInAssemblyOfAssemblyInActivationContxt = 4
|
|
} ACTIVATION_CONTEXT_INFO_CLASS;
|
|
|
|
typedef struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION {
|
|
DWORD ulFlags;
|
|
DWORD ulEncodedAssemblyIdentityLength;
|
|
DWORD ulManifestPathType;
|
|
DWORD ulManifestPathLength;
|
|
LARGE_INTEGER liManifestLastWriteTime;
|
|
DWORD ulPolicyPathType;
|
|
DWORD ulPolicyPathLength;
|
|
LARGE_INTEGER liPolicyLastWriteTime;
|
|
DWORD ulMetadataSatelliteRosterIndex;
|
|
DWORD ulManifestVersionMajor;
|
|
DWORD ulManifestVersionMinor;
|
|
DWORD ulPolicyVersionMajor;
|
|
DWORD ulPolicyVersionMinor;
|
|
DWORD ulAssemblyDirectoryNameLength;
|
|
PCWSTR lpAssemblyEncodedAssemblyIdentity;
|
|
PCWSTR lpAssemblyManifestPath;
|
|
PCWSTR lpAssemblyPolicyPath;
|
|
PCWSTR lpAssemblyDirectoryName;
|
|
DWORD ulFileCount;
|
|
} ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION, *PACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION;
|
|
typedef const ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION *PCACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION;
|
|
|
|
typedef struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION {
|
|
DWORD dwFlags;
|
|
DWORD ulFormatVersion;
|
|
DWORD ulAssemblyCount;
|
|
DWORD ulRootManifestPathType;
|
|
DWORD ulRootManifestPathChars;
|
|
DWORD ulRootConfigurationPathType;
|
|
DWORD ulRootConfigurationPathChars;
|
|
DWORD ulAppDirPathType;
|
|
DWORD ulAppDirPathChars;
|
|
PCWSTR lpRootManifestPath;
|
|
PCWSTR lpRootConfigurationPath;
|
|
PCWSTR lpAppDirPath;
|
|
} ACTIVATION_CONTEXT_DETAILED_INFORMATION, *PACTIVATION_CONTEXT_DETAILED_INFORMATION;
|
|
typedef const ACTIVATION_CONTEXT_DETAILED_INFORMATION *PCACTIVATION_CONTEXT_DETAILED_INFORMATION;
|
|
|
|
typedef struct _ACTIVATION_CONTEXT_QUERY_INDEX {
|
|
DWORD ulAssemblyIndex;
|
|
DWORD ulFileIndexInAssembly;
|
|
} ACTIVATION_CONTEXT_QUERY_INDEX,*PACTIVATION_CONTEXT_QUERY_INDEX;
|
|
typedef const ACTIVATION_CONTEXT_QUERY_INDEX *PCACTIVATION_CONTEXT_QUERY_INDEX;
|
|
|
|
typedef struct _ASSEMBLY_FILE_DETAILED_INFORMATION {
|
|
DWORD ulFlags;
|
|
DWORD ulFilenameLength;
|
|
DWORD ulPathLength;
|
|
PCWSTR lpFileName;
|
|
PCWSTR lpFilePath;
|
|
} ASSEMBLY_FILE_DETAILED_INFORMATION,*PASSEMBLY_FILE_DETAILED_INFORMATION;
|
|
typedef const ASSEMBLY_FILE_DETAILED_INFORMATION *PCASSEMBLY_FILE_DETAILED_INFORMATION;
|
|
|
|
typedef enum {
|
|
ACTCTX_RUN_LEVEL_UNSPECIFIED = 0,
|
|
ACTCTX_RUN_LEVEL_AS_INVOKER,
|
|
ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE,
|
|
ACTCTX_RUN_LEVEL_REQUIRE_ADMIN,
|
|
ACTCTX_RUN_LEVEL_NUMBERS
|
|
} ACTCTX_REQUESTED_RUN_LEVEL;
|
|
|
|
typedef struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION {
|
|
DWORD ulFlags;
|
|
ACTCTX_REQUESTED_RUN_LEVEL RunLevel;
|
|
DWORD UiAccess;
|
|
} ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION, *PACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION;
|
|
|
|
typedef enum {
|
|
ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWN = 0,
|
|
ACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS
|
|
} ACTCTX_COMPATIBILITY_ELEMENT_TYPE;
|
|
|
|
typedef struct _COMPATIBILITY_CONTEXT_ELEMENT {
|
|
GUID Id;
|
|
ACTCTX_COMPATIBILITY_ELEMENT_TYPE Type;
|
|
} COMPATIBILITY_CONTEXT_ELEMENT, *PCOMPATIBILITY_CONTEXT_ELEMENT;
|
|
|
|
typedef struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION {
|
|
DWORD ElementCount;
|
|
COMPATIBILITY_CONTEXT_ELEMENT Elements[];
|
|
} ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION, *PACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION;
|
|
|
|
|
|
#define ACTIVATION_CONTEXT_PATH_TYPE_NONE 1
|
|
#define ACTIVATION_CONTEXT_PATH_TYPE_WIN32_FILE 2
|
|
#define ACTIVATION_CONTEXT_PATH_TYPE_URL 3
|
|
#define ACTIVATION_CONTEXT_PATH_TYPE_ASSEMBLYREF 4
|
|
|
|
#define ACTIVATION_CONTEXT_SECTION_ASSEMBLY_INFORMATION 1
|
|
#define ACTIVATION_CONTEXT_SECTION_DLL_REDIRECTION 2
|
|
#define ACTIVATION_CONTEXT_SECTION_WINDOW_CLASS_REDIRECTION 3
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_SERVER_REDIRECTION 4
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_INTERFACE_REDIRECTION 5
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_TYPE_LIBRARY_REDIRECTION 6
|
|
#define ACTIVATION_CONTEXT_SECTION_COM_PROGID_REDIRECTION 7
|
|
#define ACTIVATION_CONTEXT_SECTION_GLOBAL_OBJECT_RENAME_TABLE 8
|
|
#define ACTIVATION_CONTEXT_SECTION_CLR_SURROGATES 9
|
|
|
|
#endif /* (_WIN32_WINNT >= 0x0501) */
|
|
|
|
typedef struct _PROCESSOR_POWER_POLICY_INFO {
|
|
DWORD TimeCheck;
|
|
DWORD DemoteLimit;
|
|
DWORD PromoteLimit;
|
|
BYTE DemotePercent;
|
|
BYTE PromotePercent;
|
|
BYTE Spare[2];
|
|
DWORD AllowDemotion:1;
|
|
DWORD AllowPromotion:1;
|
|
DWORD Reserved:30;
|
|
} PROCESSOR_POWER_POLICY_INFO, *PPROCESSOR_POWER_POLICY_INFO;
|
|
|
|
typedef struct _PROCESSOR_POWER_POLICY {
|
|
DWORD Revision;
|
|
BYTE DynamicThrottle;
|
|
BYTE Spare[3];
|
|
DWORD DisableCStates:1;
|
|
DWORD Reserved:31;
|
|
DWORD PolicyCount;
|
|
PROCESSOR_POWER_POLICY_INFO Policy[3];
|
|
} PROCESSOR_POWER_POLICY, *PPROCESSOR_POWER_POLICY;
|
|
|
|
typedef struct _ADMINISTRATOR_POWER_POLICY {
|
|
SYSTEM_POWER_STATE MinSleep;
|
|
SYSTEM_POWER_STATE MaxSleep;
|
|
DWORD MinVideoTimeout;
|
|
DWORD MaxVideoTimeout;
|
|
DWORD MinSpindownTimeout;
|
|
DWORD MaxSpindownTimeout;
|
|
} ADMINISTRATOR_POWER_POLICY, *PADMINISTRATOR_POWER_POLICY;
|
|
|
|
#endif /* WINVER >= 0x0500 */
|
|
|
|
typedef VOID (NTAPI *WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN);
|
|
|
|
#ifdef UNICODE
|
|
typedef OSVERSIONINFOW OSVERSIONINFO,*POSVERSIONINFO,*LPOSVERSIONINFO;
|
|
typedef OSVERSIONINFOEXW OSVERSIONINFOEX,*POSVERSIONINFOEX,*LPOSVERSIONINFOEX;
|
|
#else
|
|
typedef OSVERSIONINFOA OSVERSIONINFO,*POSVERSIONINFO,*LPOSVERSIONINFO;
|
|
typedef OSVERSIONINFOEXA OSVERSIONINFOEX,*POSVERSIONINFOEX,*LPOSVERSIONINFOEX;
|
|
#endif
|
|
|
|
#define VER_SET_CONDITION(lc,t,c) ((lc) = VerSetConditionMask((lc),(t),(c)))
|
|
|
|
#if (_WIN32_WINNT >= 0x0500)
|
|
ULONGLONG WINAPI VerSetConditionMask(_In_ ULONGLONG, _In_ DWORD, _In_ BYTE);
|
|
#endif
|
|
|
|
typedef enum _HEAP_INFORMATION_CLASS {
|
|
HeapCompatibilityInformation,
|
|
HeapEnableTerminationOnCorruption
|
|
} HEAP_INFORMATION_CLASS;
|
|
|
|
#define CACHE_FULLY_ASSOCIATIVE 0xFF
|
|
|
|
_Check_return_
|
|
NTSYSAPI
|
|
SIZE_T
|
|
NTAPI
|
|
RtlCompareMemory (
|
|
_In_ const VOID *Source1,
|
|
_In_ const VOID *Source2,
|
|
_In_ SIZE_T Length);
|
|
|
|
#define RtlMoveMemory(Dest,Source,Length) memmove((Dest),(Source),(Length))
|
|
#define RtlCopyMemory(Dest,Source,Length) memcpy((Dest),(Source),(Length))
|
|
#define RtlFillMemory(Dest,Length,Fill) memset((Dest),(Fill),(Length))
|
|
#define RtlZeroMemory(Dest,Length) RtlFillMemory((Dest),(Length),0)
|
|
#define RtlEqualMemory(Dest,Source,Length) (!memcmp((Dest),(Source),(Length)))
|
|
|
|
FORCEINLINE
|
|
PVOID
|
|
RtlSecureZeroMemory(_Out_writes_bytes_all_(Length) PVOID Buffer,
|
|
_In_ SIZE_T Length)
|
|
{
|
|
volatile char *VolatilePointer;
|
|
|
|
/* Get a volatile pointer to prevent any compiler optimizations */
|
|
VolatilePointer = (volatile char *)Buffer;
|
|
|
|
/* Loop the whole buffer */
|
|
while (Length)
|
|
{
|
|
/* Zero the current byte and move on */
|
|
*VolatilePointer++ = 0;
|
|
Length--;
|
|
}
|
|
|
|
/* Return the pointer to ensure the compiler won't optimize this away */
|
|
return Buffer;
|
|
}
|
|
|
|
#if defined(_M_IX86)
|
|
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
|
|
{
|
|
return (struct _TEB *)__readfsdword(0x18);
|
|
}
|
|
FORCEINLINE PVOID GetCurrentFiber(VOID)
|
|
{
|
|
return (PVOID)(ULONG_PTR)__readfsdword(0x10);
|
|
}
|
|
#elif defined (_M_AMD64)
|
|
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
|
|
{
|
|
return (struct _TEB *)__readgsqword(FIELD_OFFSET(NT_TIB, Self));
|
|
}
|
|
FORCEINLINE PVOID GetCurrentFiber(VOID)
|
|
{
|
|
#ifdef NONAMELESSUNION
|
|
return (PVOID)__readgsqword(FIELD_OFFSET(NT_TIB, DUMMYUNIONNAME.FiberData));
|
|
#else
|
|
return (PVOID)__readgsqword(FIELD_OFFSET(NT_TIB, FiberData));
|
|
#endif
|
|
}
|
|
#elif defined (_M_ARM)
|
|
#define CP15_PMSELR 15, 0, 9, 12, 5
|
|
#define CP15_PMXEVCNTR 15, 0, 9, 13, 2
|
|
#define CP15_TPIDRURW 15, 0, 13, 0, 2
|
|
#define CP15_TPIDRURO 15, 0, 13, 0, 3
|
|
#define CP15_TPIDRPRW 15, 0, 13, 0, 4
|
|
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
|
|
{
|
|
return (struct _TEB *)(ULONG_PTR)_MoveFromCoprocessor(CP15_TPIDRURW);
|
|
}
|
|
FORCEINLINE PVOID GetCurrentFiber(VOID)
|
|
{
|
|
#ifdef NONAMELESSUNION
|
|
return ((PNT_TIB)(ULONG_PTR)_MoveFromCoprocessor(CP15_TPIDRURW))->DUMMYUNIONNAME.FiberData;
|
|
#else
|
|
return ((PNT_TIB)(ULONG_PTR)_MoveFromCoprocessor(CP15_TPIDRURW))->FiberData;
|
|
#endif
|
|
}
|
|
#elif defined (_M_ARM64)
|
|
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
|
|
{
|
|
//UNIMPLEMENTED;
|
|
return 0;
|
|
}
|
|
FORCEINLINE PVOID GetCurrentFiber(VOID)
|
|
{
|
|
//UNIMPLEMENTED;
|
|
return 0;
|
|
}
|
|
#elif defined(_M_PPC)
|
|
FORCEINLINE unsigned long _read_teb_dword(const unsigned long Offset)
|
|
{
|
|
unsigned long result;
|
|
__asm__("\tadd 7,13,%1\n"
|
|
"\tlwz %0,0(7)\n"
|
|
: "=r" (result)
|
|
: "r" (Offset)
|
|
: "r7");
|
|
return result;
|
|
}
|
|
FORCEINLINE struct _TEB * NtCurrentTeb(VOID)
|
|
{
|
|
return (struct _TEB *)_read_teb_dword(0x18);
|
|
}
|
|
FORCEINLINE PVOID GetCurrentFiber(VOID)
|
|
{
|
|
return _read_teb_dword(0x10);
|
|
}
|
|
#else
|
|
#error Unknown architecture
|
|
#endif
|
|
|
|
FORCEINLINE PVOID GetFiberData(VOID)
|
|
{
|
|
return *((PVOID *)GetCurrentFiber());
|
|
}
|
|
|
|
/* TODO: Other architectures than X86 */
|
|
#if defined(_M_IX86)
|
|
#define PF_TEMPORAL_LEVEL_1
|
|
#define PF_NON_TEMPORAL_LEVEL_ALL
|
|
#define PreFetchCacheLine(l, a)
|
|
#elif defined (_M_AMD64)
|
|
#define PreFetchCacheLine(l, a)
|
|
#elif defined(_M_PPC)
|
|
#define PreFetchCacheLine(l, a)
|
|
#elif defined(_M_ARM)
|
|
#define PreFetchCacheLine(l, a)
|
|
#elif defined(_M_ARM64)
|
|
#define PreFetchCacheLine(l, a)
|
|
#else
|
|
#error Unknown architecture
|
|
#endif
|
|
|
|
/* TODO: Other architectures than X86 */
|
|
#if defined(_M_IX86)
|
|
#if defined(_MSC_VER)
|
|
FORCEINLINE
|
|
VOID
|
|
MemoryBarrier(VOID)
|
|
{
|
|
LONG Barrier;
|
|
__asm { xchg Barrier, eax }
|
|
}
|
|
#else
|
|
FORCEINLINE
|
|
VOID
|
|
MemoryBarrier(VOID)
|
|
{
|
|
LONG Barrier, *Dummy = &Barrier;
|
|
(VOID)Dummy;
|
|
__asm__ __volatile__("xchgl %%eax, %[Barrier]" : : [Barrier] "m" (Barrier) : "memory");
|
|
}
|
|
#endif
|
|
#elif defined (_M_AMD64)
|
|
#define MemoryBarrier __faststorefence
|
|
#elif defined(_M_PPC)
|
|
#define MemoryBarrier()
|
|
#elif defined(_M_ARM)
|
|
#define MemoryBarrier()
|
|
#elif defined(_M_ARM64)
|
|
#define MemoryBarrier()
|
|
#else
|
|
#error Unknown architecture
|
|
#endif
|
|
|
|
#if defined(_M_IX86) || defined(_M_AMD64)
|
|
|
|
#define YieldProcessor _mm_pause
|
|
|
|
__analysis_noreturn
|
|
FORCEINLINE
|
|
VOID
|
|
DbgRaiseAssertionFailure(VOID)
|
|
{
|
|
__int2c();
|
|
}
|
|
|
|
#elif defined(_M_PPC)
|
|
#define YieldProcessor() __asm__ __volatile__("nop");
|
|
#elif defined(_M_MIPS)
|
|
#define YieldProcessor() __asm__ __volatile__("nop");
|
|
#elif defined(_M_ARM)
|
|
#define YieldProcessor __yield
|
|
#elif defined(_M_ARM64)
|
|
#define YieldProcessor __yield
|
|
#else
|
|
#error Unknown architecture
|
|
#endif
|
|
|
|
typedef struct _TP_POOL TP_POOL, *PTP_POOL;
|
|
typedef struct _TP_WORK TP_WORK, *PTP_WORK;
|
|
typedef struct _TP_CALLBACK_INSTANCE TP_CALLBACK_INSTANCE, *PTP_CALLBACK_INSTANCE;
|
|
|
|
typedef DWORD TP_VERSION, *PTP_VERSION;
|
|
|
|
typedef enum _TP_CALLBACK_PRIORITY {
|
|
TP_CALLBACK_PRIORITY_HIGH,
|
|
TP_CALLBACK_PRIORITY_NORMAL,
|
|
TP_CALLBACK_PRIORITY_LOW,
|
|
TP_CALLBACK_PRIORITY_INVALID,
|
|
TP_CALLBACK_PRIORITY_COUNT = TP_CALLBACK_PRIORITY_INVALID
|
|
} TP_CALLBACK_PRIORITY;
|
|
|
|
typedef VOID
|
|
(NTAPI *PTP_WORK_CALLBACK)(
|
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
|
_Inout_opt_ PVOID Context,
|
|
_Inout_ PTP_WORK Work);
|
|
|
|
typedef struct _TP_CLEANUP_GROUP TP_CLEANUP_GROUP, *PTP_CLEANUP_GROUP;
|
|
|
|
typedef VOID
|
|
(NTAPI *PTP_SIMPLE_CALLBACK)(
|
|
_Inout_ PTP_CALLBACK_INSTANCE Instance,
|
|
_Inout_opt_ PVOID Context);
|
|
|
|
typedef VOID
|
|
(NTAPI *PTP_CLEANUP_GROUP_CANCEL_CALLBACK)(
|
|
_Inout_opt_ PVOID ObjectContext,
|
|
_Inout_opt_ PVOID CleanupContext);
|
|
|
|
#if (_WIN32_WINNT >= _WIN32_WINNT_WIN7)
|
|
typedef struct _TP_CALLBACK_ENVIRON_V3 {
|
|
TP_VERSION Version;
|
|
PTP_POOL Pool;
|
|
PTP_CLEANUP_GROUP CleanupGroup;
|
|
PTP_CLEANUP_GROUP_CANCEL_CALLBACK CleanupGroupCancelCallback;
|
|
PVOID RaceDll;
|
|
struct _ACTIVATION_CONTEXT *ActivationContext;
|
|
PTP_SIMPLE_CALLBACK FinalizationCallback;
|
|
union {
|
|
DWORD Flags;
|
|
struct {
|
|
DWORD LongFunction:1;
|
|
DWORD Persistent:1;
|
|
DWORD Private:30;
|
|
} s;
|
|
} u;
|
|
TP_CALLBACK_PRIORITY CallbackPriority;
|
|
DWORD Size;
|
|
} TP_CALLBACK_ENVIRON_V3, TP_CALLBACK_ENVIRON, *PTP_CALLBACK_ENVIRON;
|
|
#else
|
|
typedef struct _TP_CALLBACK_ENVIRON_V1 {
|
|
TP_VERSION Version;
|
|
PTP_POOL Pool;
|
|
PTP_CLEANUP_GROUP CleanupGroup;
|
|
PTP_CLEANUP_GROUP_CANCEL_CALLBACK CleanupGroupCancelCallback;
|
|
PVOID RaceDll;
|
|
struct _ACTIVATION_CONTEXT *ActivationContext;
|
|
PTP_SIMPLE_CALLBACK FinalizationCallback;
|
|
union {
|
|
DWORD Flags;
|
|
struct {
|
|
DWORD LongFunction:1;
|
|
DWORD Persistent:1;
|
|
DWORD Private:30;
|
|
} s;
|
|
} u;
|
|
} TP_CALLBACK_ENVIRON_V1, TP_CALLBACK_ENVIRON, *PTP_CALLBACK_ENVIRON;
|
|
#endif /* (_WIN32_WINNT >= _WIN32_WINNT_WIN7) */
|
|
|
|
#ifdef __WINESRC__
|
|
# define ARRAY_SIZE(x) (sizeof(x) / sizeof((x)[0]))
|
|
#endif
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma warning(pop)
|
|
#endif
|
|
|
|
#endif /* RC_INVOKED */
|