2537 lines
73 KiB
C
2537 lines
73 KiB
C
#ifndef _WINNT_H
|
|
#define _WINNT_H
|
|
/* translate GCC target defines to MS equivalents. Keep this synchronized
|
|
with windows.h. */
|
|
#if defined(__i686__) && !defined(_M_IX86)
|
|
#define _M_IX86 600
|
|
#elif defined(__i586__) && !defined(_M_IX86)
|
|
#define _M_IX86 500
|
|
#elif defined(__i486__) && !defined(_M_IX86)
|
|
#define _M_IX86 400
|
|
#elif defined(__i386__) && !defined(_M_IX86)
|
|
#define _M_IX86 300
|
|
#endif
|
|
#if defined(_M_IX86) && !defined(_X86_)
|
|
#define _X86_
|
|
#elif defined(_M_ALPHA) && !defined(_ALPHA_)
|
|
#define _ALPHA_
|
|
#elif defined(_M_PPC) && !defined(_PPC_)
|
|
#define _PPC_
|
|
#elif defined(_M_MRX000) && !defined(_MIPS_)
|
|
#define _MIPS_
|
|
#elif defined(_M_M68K) && !defined(_68K_)
|
|
#define _68K_
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
#include <winerror.h>
|
|
|
|
#ifndef RC_INVOKED
|
|
#include <string.h>
|
|
|
|
/* FIXME: add more architectures. Is there a way to specify this in GCC? */
|
|
#ifdef _X86_
|
|
#define UNALIGNED
|
|
#else
|
|
#define UNALIGNED
|
|
#endif
|
|
|
|
#ifndef VOID
|
|
#define VOID void
|
|
typedef char CHAR;
|
|
typedef short SHORT;
|
|
typedef long LONG;
|
|
#endif
|
|
typedef CHAR CCHAR;
|
|
typedef unsigned char UCHAR,*PUCHAR;
|
|
typedef unsigned short USHORT,*PUSHORT;
|
|
typedef unsigned long ULONG,*PULONG;
|
|
typedef char *PSZ;
|
|
|
|
#ifndef _WCHAR_T_DEFINED
|
|
#define _WCHAR_T_DEFINED
|
|
#ifndef _WCHAR_T_
|
|
#define _WCHAR_T_
|
|
#undef __need_wchar_t
|
|
#ifndef __cplusplus
|
|
typedef unsigned short wchar_t;
|
|
#endif
|
|
#endif
|
|
#endif
|
|
|
|
typedef wchar_t WCHAR;
|
|
typedef WCHAR *PWCHAR,*LPWCH,*PWCH,*NWPSTR,*LPWSTR,*PWSTR;
|
|
typedef CONST WCHAR *LPCWCH,*PCWCH,*LPCWSTR,*PCWSTR;
|
|
typedef CHAR *PCHAR,*LPCH,*PCH,*NPSTR,*LPSTR,*PSTR;
|
|
typedef CONST CHAR *LPCCH,*PCSTR,*LPCSTR;
|
|
#ifndef _TCHAR_DEFINED
|
|
#define _TCHAR_DEFINED
|
|
#ifdef UNICODE
|
|
/*
|
|
* NOTE: This tests UNICODE, which is different from the _UNICODE define
|
|
* used to differentiate standard C runtime calls.
|
|
*/
|
|
typedef WCHAR TCHAR;
|
|
#else
|
|
typedef CHAR TCHAR;
|
|
#endif
|
|
#endif
|
|
typedef TCHAR TBYTE,*PTCH,*PTBYTE;
|
|
typedef TCHAR *LPTCH,*PTSTR,*LPTSTR,*LP,*PTCHAR;
|
|
typedef const TCHAR *LPCTSTR;
|
|
#ifdef UNICODE
|
|
/*
|
|
* __TEXT is a private macro whose specific use is to force the expansion of a
|
|
* macro passed as an argument to the macro TEXT. DO NOT use this
|
|
* macro within your programs. It's name and function could change without
|
|
* notice.
|
|
*/
|
|
#define __TEXT(q) L##q
|
|
#else
|
|
#define __TEXT(q) q
|
|
#endif
|
|
/*
|
|
* UNICODE a constant string when UNICODE is defined, else returns the string
|
|
* unmodified.
|
|
* The corresponding macros _TEXT() and _T() for mapping _UNICODE strings
|
|
* passed to C runtime functions are defined in mingw/tchar.h
|
|
*/
|
|
#define TEXT(q) __TEXT(q)
|
|
typedef SHORT *PSHORT;
|
|
typedef LONG *PLONG;
|
|
typedef void *HANDLE;
|
|
typedef HANDLE *PHANDLE,*LPHANDLE;
|
|
#ifdef STRICT
|
|
#define DECLARE_HANDLE(n) typedef struct n##__{int i;}*n
|
|
#else
|
|
#define DECLARE_HANDLE(n) typedef HANDLE n
|
|
#endif
|
|
typedef DWORD LCID;
|
|
typedef PDWORD PLCID;
|
|
typedef WORD LANGID;
|
|
#ifdef __GNUC__
|
|
#define _HAVE_INT64
|
|
#define _INTEGRAL_MAX_BITS 64
|
|
#undef __int64
|
|
#define __int64 long long
|
|
#endif
|
|
#if defined(_HAVE_INT64) || (defined(_INTEGRAL_MAX_BITS) && _INTEGRAL_MAX_BITS >= 64)
|
|
typedef __int64 LONGLONG;
|
|
typedef unsigned __int64 DWORDLONG;
|
|
#else
|
|
typedef double LONGLONG,DWORDLONG;
|
|
#endif
|
|
typedef LONGLONG *PLONGLONG;
|
|
typedef DWORDLONG *PDWORDLONG;
|
|
typedef DWORDLONG ULONGLONG,*PULONGLONG;
|
|
typedef LONGLONG USN;
|
|
#ifdef _HAVE_INT64
|
|
#define Int32x32To64(a,b) ((LONGLONG)(a)*(LONGLONG)(b))
|
|
#define UInt32x32To64(a,b) ((DWORDLONG)(a)*(DWORDLONG)(b))
|
|
#define Int64ShllMod32(a,b) ((DWORDLONG)(a)<<(b))
|
|
#define Int64ShraMod32(a,b) ((LONGLONG)(a)>>(b))
|
|
#define Int64ShrlMod32(a,b) ((DWORDLONG)(a)>>(b))
|
|
#endif
|
|
#define ANSI_NULL '\0'
|
|
#define UNICODE_NULL L'\0'
|
|
typedef BYTE BOOLEAN,*PBOOLEAN;
|
|
#endif
|
|
|
|
#define NTAPI __stdcall
|
|
#include <basetsd.h>
|
|
#define APPLICATION_ERROR_MASK 0x20000000
|
|
#define ERROR_SEVERITY_SUCCESS 0x00000000
|
|
#define ERROR_SEVERITY_INFORMATIONAL 0x40000000
|
|
#define ERROR_SEVERITY_WARNING 0x80000000
|
|
#define ERROR_SEVERITY_ERROR 0xC0000000
|
|
#define COMPRESSION_FORMAT_NONE 0
|
|
#define COMPRESSION_FORMAT_DEFAULT 1
|
|
#define COMPRESSION_FORMAT_LZNT1 2
|
|
#define COMPRESSION_ENGINE_STANDARD 0
|
|
#define COMPRESSION_ENGINE_MAXIMUM 256
|
|
#define ACCESS_ALLOWED_ACE_TYPE 0
|
|
#define ACCESS_DENIED_ACE_TYPE 1
|
|
#define ANYSIZE_ARRAY 1
|
|
#define SYSTEM_AUDIT_ACE_TYPE 2
|
|
#define SYSTEM_ALARM_ACE_TYPE 3
|
|
#define OBJECT_INHERIT_ACE 1
|
|
#define CONTAINER_INHERIT_ACE 2
|
|
#define NO_PROPAGATE_INHERIT_ACE 4
|
|
#define INHERIT_ONLY_ACE 8
|
|
#define VALID_INHERIT_FLAGS 16
|
|
#define SUCCESSFUL_ACCESS_ACE_FLAG 64
|
|
#define FAILED_ACCESS_ACE_FLAG 128
|
|
#define DELETE 0x00010000L
|
|
#define READ_CONTROL 0x20000L
|
|
#define WRITE_DAC 0x40000L
|
|
#define WRITE_OWNER 0x80000L
|
|
#define SYNCHRONIZE 0x100000L
|
|
#define STANDARD_RIGHTS_REQUIRED 0xF0000
|
|
#define STANDARD_RIGHTS_READ 0x20000
|
|
#define STANDARD_RIGHTS_WRITE 0x20000
|
|
#define STANDARD_RIGHTS_EXECUTE 0x20000
|
|
#define STANDARD_RIGHTS_ALL 0x1F0000
|
|
#define SPECIFIC_RIGHTS_ALL 0xFFFF
|
|
#define ACCESS_SYSTEM_SECURITY 0x1000000
|
|
#define MAXIMUM_ALLOWED 0x2000000
|
|
#define GENERIC_READ 0x80000000
|
|
#define GENERIC_WRITE 0x40000000
|
|
#define GENERIC_EXECUTE 0x20000000
|
|
#define GENERIC_ALL 0x10000000
|
|
#define FILE_READ_DATA 1
|
|
#define FILE_LIST_DIRECTORY 1
|
|
#define FILE_WRITE_DATA 2
|
|
#define FILE_ADD_FILE 2
|
|
#define FILE_APPEND_DATA 4
|
|
#define FILE_ADD_SUBDIRECTORY 4
|
|
#define FILE_CREATE_PIPE_INSTANCE 4
|
|
#define FILE_READ_EA 8
|
|
#define FILE_READ_PROPERTIES 8
|
|
#define FILE_WRITE_EA 16
|
|
#define FILE_WRITE_PROPERTIES 16
|
|
#define FILE_EXECUTE 32
|
|
#define FILE_TRAVERSE 32
|
|
#define FILE_DELETE_CHILD 64
|
|
#define FILE_READ_ATTRIBUTES 128
|
|
#define FILE_WRITE_ATTRIBUTES 256
|
|
#define FILE_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x1FF)
|
|
#define FILE_GENERIC_READ (STANDARD_RIGHTS_READ|FILE_READ_DATA|FILE_READ_ATTRIBUTES|FILE_READ_EA|SYNCHRONIZE)
|
|
#define FILE_GENERIC_WRITE (STANDARD_RIGHTS_WRITE|FILE_WRITE_DATA|FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA|FILE_APPEND_DATA|SYNCHRONIZE)
|
|
#define FILE_GENERIC_EXECUTE (STANDARD_RIGHTS_EXECUTE|FILE_READ_ATTRIBUTES|FILE_EXECUTE|SYNCHRONIZE)
|
|
#define FILE_SHARE_READ 1
|
|
#define FILE_SHARE_WRITE 2
|
|
#define FILE_SHARE_DELETE 4
|
|
#define FILE_ATTRIBUTE_READONLY 1
|
|
#define FILE_ATTRIBUTE_HIDDEN 2
|
|
#define FILE_ATTRIBUTE_SYSTEM 4
|
|
#define FILE_ATTRIBUTE_DIRECTORY 16
|
|
#define FILE_ATTRIBUTE_ARCHIVE 32
|
|
#define FILE_ATTRIBUTE_ENCRYPTED 64
|
|
#define FILE_ATTRIBUTE_NORMAL 128
|
|
#define FILE_ATTRIBUTE_TEMPORARY 256
|
|
#define FILE_ATTRIBUTE_SPARSE_FILE 512
|
|
#define FILE_ATTRIBUTE_REPARSE_POINT 1024
|
|
#define FILE_ATTRIBUTE_COMPRESSED 2048
|
|
#define FILE_ATTRIBUTE_OFFLINE 0x1000
|
|
#define FILE_ATTRIBUTE_NOT_CONTENT_INDEXED 0x2000
|
|
#define FILE_NOTIFY_CHANGE_FILE_NAME 1
|
|
#define FILE_NOTIFY_CHANGE_DIR_NAME 2
|
|
#define FILE_NOTIFY_CHANGE_ATTRIBUTES 4
|
|
#define FILE_NOTIFY_CHANGE_SIZE 8
|
|
#define FILE_NOTIFY_CHANGE_LAST_WRITE 16
|
|
#define FILE_NOTIFY_CHANGE_LAST_ACCESS 32
|
|
#define FILE_NOTIFY_CHANGE_CREATION 64
|
|
#define FILE_NOTIFY_CHANGE_SECURITY 256
|
|
#define MAILSLOT_NO_MESSAGE ((DWORD)-1)
|
|
#define MAILSLOT_WAIT_FOREVER ((DWORD)-1)
|
|
#define FILE_CASE_SENSITIVE_SEARCH 1
|
|
#define FILE_CASE_PRESERVED_NAMES 2
|
|
#define FILE_UNICODE_ON_DISK 4
|
|
#define FILE_PERSISTENT_ACLS 8
|
|
#define FILE_FILE_COMPRESSION 16
|
|
#define FILE_VOLUME_QUOTAS 32
|
|
#define FILE_SUPPORTS_SPARSE_FILES 64
|
|
#define FILE_SUPPORTS_REPARSE_POINTS 128
|
|
#define FILE_SUPPORTS_REMOTE_STORAGE 256
|
|
#define FILE_VOLUME_IS_COMPRESSED 0x8000
|
|
#define FILE_SUPPORTS_OBJECT_IDS 0x10000
|
|
#define FILE_SUPPORTS_ENCRYPTION 0x20000
|
|
#define FILE_NAMED_STREAMS 0x40000
|
|
#define IO_COMPLETION_MODIFY_STATE 2
|
|
#define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|3)
|
|
#define DUPLICATE_CLOSE_SOURCE 1
|
|
#define DUPLICATE_SAME_ACCESS 2
|
|
#define PROCESS_TERMINATE 1
|
|
#define PROCESS_CREATE_THREAD 2
|
|
#define PROCESS_VM_OPERATION 8
|
|
#define PROCESS_VM_READ 16
|
|
#define PROCESS_VM_WRITE 32
|
|
#define PROCESS_DUP_HANDLE 64
|
|
#define PROCESS_CREATE_PROCESS 128
|
|
#define PROCESS_SET_QUOTA 256
|
|
#define PROCESS_SET_INFORMATION 512
|
|
#define PROCESS_QUERY_INFORMATION 1024
|
|
#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0xFFF)
|
|
#define THREAD_TERMINATE 1
|
|
#define THREAD_SUSPEND_RESUME 2
|
|
#define THREAD_GET_CONTEXT 8
|
|
#define THREAD_SET_CONTEXT 16
|
|
#define THREAD_SET_INFORMATION 32
|
|
#define THREAD_QUERY_INFORMATION 64
|
|
#define THREAD_SET_THREAD_TOKEN 128
|
|
#define THREAD_IMPERSONATE 256
|
|
#define THREAD_DIRECT_IMPERSONATION 0x200
|
|
#define THREAD_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3FF)
|
|
#define EXCEPTION_NONCONTINUABLE 1
|
|
#define EXCEPTION_MAXIMUM_PARAMETERS 15
|
|
#define SECURITY_NULL_SID_AUTHORITY {0,0,0,0,0,0}
|
|
#define SECURITY_WORLD_SID_AUTHORITY {0,0,0,0,0,1}
|
|
#define SECURITY_LOCAL_SID_AUTHORITY {0,0,0,0,0,2}
|
|
#define SECURITY_CREATOR_SID_AUTHORITY {0,0,0,0,0,3}
|
|
#define SECURITY_NON_UNIQUE_AUTHORITY {0,0,0,0,0,4}
|
|
#define SECURITY_NT_AUTHORITY {0,0,0,0,0,5}
|
|
#define SECURITY_NULL_RID 0
|
|
#define SECURITY_WORLD_RID 0
|
|
#define SECURITY_LOCAL_RID 0
|
|
#define SECURITY_CREATOR_OWNER_RID 0
|
|
#define SECURITY_CREATOR_GROUP_RID 1
|
|
#define SECURITY_DIALUP_RID 1
|
|
#define SECURITY_NETWORK_RID 2
|
|
#define SECURITY_BATCH_RID 3
|
|
#define SECURITY_INTERACTIVE_RID 4
|
|
#define SECURITY_LOGON_IDS_RID 5
|
|
#define SECURITY_SERVICE_RID 6
|
|
#define SECURITY_LOCAL_SYSTEM_RID 18
|
|
#define SECURITY_BUILTIN_DOMAIN_RID 32
|
|
#define SECURITY_PRINCIPAL_SELF_RID 10
|
|
#define SID_REVISION 1
|
|
#define DOMAIN_USER_RID_ADMIN 0x1F4L
|
|
#define DOMAIN_USER_RID_GUEST 0x1F5L
|
|
#define DOMAIN_GROUP_RID_ADMINS 0x200L
|
|
#define DOMAIN_GROUP_RID_USERS 0x201L
|
|
#define DOMAIN_ALIAS_RID_ADMINS 0x220L
|
|
#define DOMAIN_ALIAS_RID_USERS 0x221L
|
|
#define DOMAIN_ALIAS_RID_GUESTS 0x222L
|
|
#define DOMAIN_ALIAS_RID_POWER_USERS 0x223L
|
|
#define DOMAIN_ALIAS_RID_ACCOUNT_OPS 0x224L
|
|
#define DOMAIN_ALIAS_RID_SYSTEM_OPS 0x225L
|
|
#define DOMAIN_ALIAS_RID_PRINT_OPS 0x226L
|
|
#define DOMAIN_ALIAS_RID_BACKUP_OPS 0x227L
|
|
#define DOMAIN_ALIAS_RID_REPLICATOR 0x228L
|
|
#define SE_CREATE_TOKEN_NAME TEXT("SeCreateTokenPrivilege")
|
|
#define SE_ASSIGNPRIMARYTOKEN_NAME TEXT("SeAssignPrimaryTokenPrivilege")
|
|
#define SE_LOCK_MEMORY_NAME TEXT("SeLockMemoryPrivilege")
|
|
#define SE_INCREASE_QUOTA_NAME TEXT("SeIncreaseQuotaPrivilege")
|
|
#define SE_UNSOLICITED_INPUT_NAME TEXT("SeUnsolicitedInputPrivilege")
|
|
#define SE_MACHINE_ACCOUNT_NAME TEXT("SeMachineAccountPrivilege")
|
|
#define SE_TCB_NAME TEXT("SeTcbPrivilege")
|
|
#define SE_SECURITY_NAME TEXT("SeSecurityPrivilege")
|
|
#define SE_TAKE_OWNERSHIP_NAME TEXT("SeTakeOwnershipPrivilege")
|
|
#define SE_LOAD_DRIVER_NAME TEXT("SeLoadDriverPrivilege")
|
|
#define SE_SYSTEM_PROFILE_NAME TEXT("SeSystemProfilePrivilege")
|
|
#define SE_SYSTEMTIME_NAME TEXT("SeSystemtimePrivilege")
|
|
#define SE_PROF_SINGLE_PROCESS_NAME TEXT("SeProfileSingleProcessPrivilege")
|
|
#define SE_INC_BASE_PRIORITY_NAME TEXT("SeIncreaseBasePriorityPrivilege")
|
|
#define SE_CREATE_PAGEFILE_NAME TEXT("SeCreatePagefilePrivilege")
|
|
#define SE_CREATE_PERMANENT_NAME TEXT("SeCreatePermanentPrivilege")
|
|
#define SE_BACKUP_NAME TEXT("SeBackupPrivilege")
|
|
#define SE_RESTORE_NAME TEXT("SeRestorePrivilege")
|
|
#define SE_SHUTDOWN_NAME TEXT("SeShutdownPrivilege")
|
|
#define SE_DEBUG_NAME TEXT("SeDebugPrivilege")
|
|
#define SE_AUDIT_NAME TEXT("SeAuditPrivilege")
|
|
#define SE_SYSTEM_ENVIRONMENT_NAME TEXT("SeSystemEnvironmentPrivilege")
|
|
#define SE_CHANGE_NOTIFY_NAME TEXT("SeChangeNotifyPrivilege")
|
|
#define SE_REMOTE_SHUTDOWN_NAME TEXT("SeRemoteShutdownPrivilege")
|
|
#define SE_GROUP_MANDATORY 1
|
|
#define SE_GROUP_ENABLED_BY_DEFAULT 2
|
|
#define SE_GROUP_ENABLED 4
|
|
#define SE_GROUP_OWNER 8
|
|
#define SE_GROUP_USE_FOR_DENY_ONLY 16
|
|
#define SE_GROUP_LOGON_ID 3221225472U
|
|
#define SE_GROUP_RESOURCE 536870912
|
|
#define LANG_NEUTRAL 0x00
|
|
#define LANG_ARABIC 0x01
|
|
#define LANG_BULGARIAN 0x02
|
|
#define LANG_CATALAN 0x03
|
|
#define LANG_CHINESE 0x04
|
|
#define LANG_CZECH 0x05
|
|
#define LANG_DANISH 0x06
|
|
#define LANG_GERMAN 0x07
|
|
#define LANG_GREEK 0x08
|
|
#define LANG_ENGLISH 0x09
|
|
#define LANG_SPANISH 0x0a
|
|
#define LANG_FINNISH 0x0b
|
|
#define LANG_FRENCH 0x0c
|
|
#define LANG_HEBREW 0x0d
|
|
#define LANG_HUNGARIAN 0x0e
|
|
#define LANG_ICELANDIC 0x0f
|
|
#define LANG_ITALIAN 0x10
|
|
#define LANG_JAPANESE 0x11
|
|
#define LANG_KOREAN 0x12
|
|
#define LANG_DUTCH 0x13
|
|
#define LANG_NORWEGIAN 0x14
|
|
#define LANG_POLISH 0x15
|
|
#define LANG_PORTUGUESE 0x16
|
|
#define LANG_ROMANIAN 0x18
|
|
#define LANG_RUSSIAN 0x19
|
|
#define LANG_CROATIAN 0x1a
|
|
#define LANG_SERBIAN 0x1a
|
|
#define LANG_SLOVAK 0x1b
|
|
#define LANG_ALBANIAN 0x1c
|
|
#define LANG_SWEDISH 0x1d
|
|
#define LANG_THAI 0x1e
|
|
#define LANG_TURKISH 0x1f
|
|
#define LANG_URDU 0x20
|
|
#define LANG_INDONESIAN 0x21
|
|
#define LANG_UKRAINIAN 0x22
|
|
#define LANG_BELARUSIAN 0x23
|
|
#define LANG_SLOVENIAN 0x24
|
|
#define LANG_ESTONIAN 0x25
|
|
#define LANG_LATVIAN 0x26
|
|
#define LANG_LITHUANIAN 0x27
|
|
#define LANG_FARSI 0x29
|
|
#define LANG_VIETNAMESE 0x2a
|
|
#define LANG_ARMENIAN 0x2b
|
|
#define LANG_AZERI 0x2c
|
|
#define LANG_BASQUE 0x2d
|
|
#define LANG_MACEDONIAN 0x2f
|
|
#define LANG_AFRIKAANS 0x36
|
|
#define LANG_GEORGIAN 0x37
|
|
#define LANG_FAEROESE 0x38
|
|
#define LANG_HINDI 0x39
|
|
#define LANG_MALAY 0x3e
|
|
#define LANG_KAZAK 0x3f
|
|
#define LANG_SWAHILI 0x41
|
|
#define LANG_UZBEK 0x43
|
|
#define LANG_TATAR 0x44
|
|
#define LANG_BENGALI 0x45
|
|
#define LANG_PUNJABI 0x46
|
|
#define LANG_GUJARATI 0x47
|
|
#define LANG_ORIYA 0x48
|
|
#define LANG_TAMIL 0x49
|
|
#define LANG_TELUGU 0x4a
|
|
#define LANG_KANNADA 0x4b
|
|
#define LANG_MALAYALAM 0x4c
|
|
#define LANG_ASSAMESE 0x4d
|
|
#define LANG_MARATHI 0x4e
|
|
#define LANG_SANSKRIT 0x4f
|
|
#define LANG_KONKANI 0x57
|
|
#define LANG_MANIPURI 0x58
|
|
#define LANG_SINDHI 0x59
|
|
#define LANG_KASHMIRI 0x60
|
|
#define LANG_NEPALI 0x61
|
|
#define SUBLANG_NEUTRAL 0x00
|
|
#define SUBLANG_DEFAULT 0x01
|
|
#define SUBLANG_SYS_DEFAULT 0x02
|
|
#define SUBLANG_ARABIC_SAUDI_ARABIA 0x01
|
|
#define SUBLANG_ARABIC_IRAQ 0x02
|
|
#define SUBLANG_ARABIC_EGYPT 0x03
|
|
#define SUBLANG_ARABIC_LIBYA 0x04
|
|
#define SUBLANG_ARABIC_ALGERIA 0x05
|
|
#define SUBLANG_ARABIC_MOROCCO 0x06
|
|
#define SUBLANG_ARABIC_TUNISIA 0x07
|
|
#define SUBLANG_ARABIC_OMAN 0x08
|
|
#define SUBLANG_ARABIC_YEMEN 0x09
|
|
#define SUBLANG_ARABIC_SYRIA 0x0a
|
|
#define SUBLANG_ARABIC_JORDAN 0x0b
|
|
#define SUBLANG_ARABIC_LEBANON 0x0c
|
|
#define SUBLANG_ARABIC_KUWAIT 0x0d
|
|
#define SUBLANG_ARABIC_UAE 0x0e
|
|
#define SUBLANG_ARABIC_BAHRAIN 0x0f
|
|
#define SUBLANG_ARABIC_QATAR 0x10
|
|
#define SUBLANG_AZERI_CYRILLIC 0x01
|
|
#define SUBLANG_AZERI_LATIN 0x02
|
|
#define SUBLANG_CHINESE_TRADITIONAL 0x01
|
|
#define SUBLANG_CHINESE_SIMPLIFIED 0x02
|
|
#define SUBLANG_CHINESE_HONGKONG 0x03
|
|
#define SUBLANG_CHINESE_SINGAPORE 0x04
|
|
#define SUBLANG_CHINESE_MACAU 0x05
|
|
#define SUBLANG_DUTCH 0x01
|
|
#define SUBLANG_DUTCH_BELGIAN 0x02
|
|
#define SUBLANG_ENGLISH_US 0x01
|
|
#define SUBLANG_ENGLISH_UK 0x02
|
|
#define SUBLANG_ENGLISH_AUS 0x03
|
|
#define SUBLANG_ENGLISH_CAN 0x04
|
|
#define SUBLANG_ENGLISH_NZ 0x05
|
|
#define SUBLANG_ENGLISH_EIRE 0x06
|
|
#define SUBLANG_ENGLISH_SOUTH_AFRICA 0x07
|
|
#define SUBLANG_ENGLISH_JAMAICA 0x08
|
|
#define SUBLANG_ENGLISH_CARIBBEAN 0x09
|
|
#define SUBLANG_ENGLISH_BELIZE 0x0a
|
|
#define SUBLANG_ENGLISH_TRINIDAD 0x0b
|
|
#define SUBLANG_ENGLISH_PHILIPPINES 0x0c
|
|
#define SUBLANG_ENGLISH_ZIMBABWE 0x0d
|
|
#define SUBLANG_FRENCH 0x01
|
|
#define SUBLANG_FRENCH_BELGIAN 0x02
|
|
#define SUBLANG_FRENCH_CANADIAN 0x03
|
|
#define SUBLANG_FRENCH_SWISS 0x04
|
|
#define SUBLANG_FRENCH_LUXEMBOURG 0x05
|
|
#define SUBLANG_FRENCH_MONACO 0x06
|
|
#define SUBLANG_GERMAN 0x01
|
|
#define SUBLANG_GERMAN_SWISS 0x02
|
|
#define SUBLANG_GERMAN_AUSTRIAN 0x03
|
|
#define SUBLANG_GERMAN_LUXEMBOURG 0x04
|
|
#define SUBLANG_GERMAN_LIECHTENSTEIN 0x05
|
|
#define SUBLANG_ITALIAN 0x01
|
|
#define SUBLANG_ITALIAN_SWISS 0x02
|
|
#define SUBLANG_KASHMIRI_INDIA 0x02
|
|
#define SUBLANG_KOREAN 0x01
|
|
#define SUBLANG_LITHUANIAN 0x01
|
|
#define SUBLANG_MALAY_MALAYSIA 0x01
|
|
#define SUBLANG_MALAY_BRUNEI_DARUSSALAM 0x02
|
|
#define SUBLANG_NEPALI_INDIA 0x02
|
|
#define SUBLANG_NORWEGIAN_BOKMAL 0x01
|
|
#define SUBLANG_NORWEGIAN_NYNORSK 0x02
|
|
#define SUBLANG_PORTUGUESE 0x01
|
|
#define SUBLANG_PORTUGUESE_BRAZILIAN 0x02
|
|
#define SUBLANG_SERBIAN_LATIN 0x02
|
|
#define SUBLANG_SERBIAN_CYRILLIC 0x03
|
|
#define SUBLANG_SPANISH 0x01
|
|
#define SUBLANG_SPANISH_MEXICAN 0x02
|
|
#define SUBLANG_SPANISH_MODERN 0x03
|
|
#define SUBLANG_SPANISH_GUATEMALA 0x04
|
|
#define SUBLANG_SPANISH_COSTA_RICA 0x05
|
|
#define SUBLANG_SPANISH_PANAMA 0x06
|
|
#define SUBLANG_SPANISH_DOMINICAN_REPUBLIC 0x07
|
|
#define SUBLANG_SPANISH_VENEZUELA 0x08
|
|
#define SUBLANG_SPANISH_COLOMBIA 0x09
|
|
#define SUBLANG_SPANISH_PERU 0x0a
|
|
#define SUBLANG_SPANISH_ARGENTINA 0x0b
|
|
#define SUBLANG_SPANISH_ECUADOR 0x0c
|
|
#define SUBLANG_SPANISH_CHILE 0x0d
|
|
#define SUBLANG_SPANISH_URUGUAY 0x0e
|
|
#define SUBLANG_SPANISH_PARAGUAY 0x0f
|
|
#define SUBLANG_SPANISH_BOLIVIA 0x10
|
|
#define SUBLANG_SPANISH_EL_SALVADOR 0x11
|
|
#define SUBLANG_SPANISH_HONDURAS 0x12
|
|
#define SUBLANG_SPANISH_NICARAGUA 0x13
|
|
#define SUBLANG_SPANISH_PUERTO_RICO 0x14
|
|
#define SUBLANG_SWEDISH 0x01
|
|
#define SUBLANG_SWEDISH_FINLAND 0x02
|
|
#define SUBLANG_URDU_PAKISTAN 0x01
|
|
#define SUBLANG_URDU_INDIA 0x02
|
|
#define SUBLANG_UZBEK_LATIN 0x01
|
|
#define SUBLANG_UZBEK_CYRILLIC 0x02
|
|
#define NLS_VALID_LOCALE_MASK 1048575
|
|
#define SORT_DEFAULT 0
|
|
#define SORT_JAPANESE_XJIS 0
|
|
#define SORT_JAPANESE_UNICODE 1
|
|
#define SORT_CHINESE_BIG5 0
|
|
#define SORT_CHINESE_PRCP 0
|
|
#define SORT_CHINESE_UNICODE 1
|
|
#define SORT_CHINESE_PRC 2
|
|
#define SORT_CHINESE_BOPOMOFO 3
|
|
#define SORT_KOREAN_KSC 0
|
|
#define SORT_KOREAN_UNICODE 1
|
|
#define SORT_GERMAN_PHONE_BOOK 1
|
|
#define SORT_HUNGARIAN_DEFAULT 0
|
|
#define SORT_HUNGARIAN_TECHNICAL 1
|
|
#define SORT_GEORGIAN_TRADITIONAL 0
|
|
#define SORT_GEORGIAN_MODERN 1
|
|
#define MAKELANGID(p,s) ((((WORD)(s))<<10)|(WORD)(p))
|
|
#define MAKELCID(l,s) ((DWORD)((((DWORD)((WORD)(s)))<<16)|((DWORD)((WORD)(l)))))
|
|
#define PRIMARYLANGID(l) ((WORD)(l)&0x3ff)
|
|
#define SORTIDFROMLCID(l) ((WORD)((((DWORD)(l))&NLS_VALID_LOCALE_MASK)>>16))
|
|
#define SORTVERSIONFROMLCID(l) ((WORD)((((DWORD)(l))>>20)&0xf))
|
|
#define SUBLANGID(l) ((WORD)(l)>>10)
|
|
#define LANGIDFROMLCID(l) ((WORD)(l))
|
|
#define LANG_SYSTEM_DEFAULT MAKELANGID(LANG_NEUTRAL,SUBLANG_SYS_DEFAULT)
|
|
#define LANG_USER_DEFAULT MAKELANGID(LANG_NEUTRAL,SUBLANG_DEFAULT)
|
|
#define LOCALE_NEUTRAL MAKELCID(MAKELANGID(LANG_NEUTRAL,SUBLANG_NEUTRAL),SORT_DEFAULT)
|
|
#define ACL_REVISION 2
|
|
#define ACL_REVISION_DS 4
|
|
#define ACL_REVISION1 1
|
|
#define ACL_REVISION2 2
|
|
#define ACL_REVISION3 3
|
|
#define ACL_REVISION4 4
|
|
#define MIN_ACL_REVISION 2
|
|
#define MAX_ACL_REVISION 4
|
|
#define MINCHAR 0x80
|
|
#define MAXCHAR 0x7f
|
|
#define MINSHORT 0x8000
|
|
#define MAXSHORT 0x7fff
|
|
#define MINLONG 0x80000000
|
|
#define MAXLONG 0x7fffffff
|
|
#define MAXBYTE 0xff
|
|
#define MAXWORD 0xffff
|
|
#define MAXDWORD 0xffffffff
|
|
#define PROCESSOR_INTEL_386 386
|
|
#define PROCESSOR_INTEL_486 486
|
|
#define PROCESSOR_INTEL_PENTIUM 586
|
|
#define PROCESSOR_MIPS_R4000 4000
|
|
#define PROCESSOR_ALPHA_21064 21064
|
|
#define PROCESSOR_ARCHITECTURE_INTEL 0
|
|
#define PROCESSOR_ARCHITECTURE_MIPS 1
|
|
#define PROCESSOR_ARCHITECTURE_ALPHA 2
|
|
#define PROCESSOR_ARCHITECTURE_PPC 3
|
|
#define PROCESSOR_ARCHITECTURE_UNKNOWN 0xFFFF
|
|
#define PAGE_READONLY 2
|
|
#define PAGE_READWRITE 4
|
|
#define PAGE_WRITECOPY 8
|
|
#define FILE_ACTION_ADDED 1
|
|
#define FILE_ACTION_REMOVED 2
|
|
#define FILE_ACTION_MODIFIED 3
|
|
#define FILE_ACTION_RENAMED_OLD_NAME 4
|
|
#define FILE_ACTION_RENAMED_NEW_NAME 5
|
|
#define HEAP_NO_SERIALIZE 1
|
|
#define HEAP_GROWABLE 2
|
|
#define HEAP_GENERATE_EXCEPTIONS 4
|
|
#define HEAP_ZERO_MEMORY 8
|
|
#define HEAP_REALLOC_IN_PLACE_ONLY 16
|
|
#define HEAP_TAIL_CHECKING_ENABLED 32
|
|
#define HEAP_FREE_CHECKING_ENABLED 64
|
|
#define HEAP_DISABLE_COALESCE_ON_FREE 128
|
|
#define HEAP_CREATE_ALIGN_16 0x0000
|
|
#define HEAP_CREATE_ENABLE_TRACING 0x20000
|
|
#define HEAP_MAXIMUM_TAG 0xFFF
|
|
#define HEAP_PSEUDO_TAG_FLAG 0x8000
|
|
#define HEAP_TAG_SHIFT 16
|
|
#define HEAP_MAKE_TAG_FLAGS(b,o) ((DWORD)((b)+(o)<<16)))
|
|
#define KEY_QUERY_VALUE 1
|
|
#define KEY_SET_VALUE 2
|
|
#define KEY_CREATE_SUB_KEY 4
|
|
#define KEY_ENUMERATE_SUB_KEYS 8
|
|
#define KEY_NOTIFY 16
|
|
#define KEY_CREATE_LINK 32
|
|
#define KEY_WRITE 0x20006
|
|
#define KEY_EXECUTE 0x20019
|
|
#define KEY_READ 0x20019
|
|
#define KEY_ALL_ACCESS 0xf003f
|
|
#define REG_WHOLE_HIVE_VOLATILE 1
|
|
#define REG_REFRESH_HIVE 2
|
|
#define REG_NO_LAZY_FLUSH 4
|
|
#define REG_OPTION_RESERVED 0
|
|
#define REG_OPTION_NON_VOLATILE 0
|
|
#define REG_OPTION_VOLATILE 1
|
|
#define REG_OPTION_CREATE_LINK 2
|
|
#define REG_OPTION_BACKUP_RESTORE 4
|
|
#define REG_OPTION_OPEN_LINK 8
|
|
#define REG_LEGAL_OPTION 15
|
|
#define OWNER_SECURITY_INFORMATION 1
|
|
#define GROUP_SECURITY_INFORMATION 2
|
|
#define DACL_SECURITY_INFORMATION 4
|
|
#define SACL_SECURITY_INFORMATION 8
|
|
#define MAXIMUM_PROCESSORS 32
|
|
#define PAGE_EXECUTE 16
|
|
#define PAGE_EXECUTE_READ 32
|
|
#define PAGE_EXECUTE_READWRITE 64
|
|
#define PAGE_GUARD 256
|
|
#define PAGE_NOACCESS 1
|
|
#define PAGE_NOCACHE 512
|
|
#define MEM_COMMIT 4096
|
|
#define MEM_FREE 65536
|
|
#define MEM_RESERVE 8192
|
|
#define MEM_IMAGE 16777216
|
|
#define MEM_MAPPED 262144
|
|
#define MEM_PRIVATE 131072
|
|
#define MEM_DECOMMIT 16384
|
|
#define MEM_RELEASE 32768
|
|
#define SEC_FILE 0x800000
|
|
#define SEC_IMAGE 0x1000000
|
|
#define SEC_VLM 0x2000000
|
|
#define SEC_RESERVE 0x4000000
|
|
#define SEC_COMMIT 0x8000000
|
|
#define SEC_NOCACHE 0x10000000
|
|
#define PAGE_EXECUTE_WRITECOPY 128
|
|
#define SECTION_EXTEND_SIZE 16
|
|
#define SECTION_MAP_READ 4
|
|
#define SECTION_MAP_WRITE 2
|
|
#define SECTION_QUERY 1
|
|
#define SECTION_ALL_ACCESS 0xf001f
|
|
#define MESSAGE_RESOURCE_UNICODE 1
|
|
#define RTL_CRITSECT_TYPE 0
|
|
#define RTL_RESOURCE_TYPE 1
|
|
#define FIELD_OFFSET(t,f) ((LONG)&(((t*)0)->f))
|
|
#define IMAGE_SIZEOF_FILE_HEADER 20
|
|
#define IMAGE_FILE_RELOCS_STRIPPED 1
|
|
#define IMAGE_FILE_EXECUTABLE_IMAGE 2
|
|
#define IMAGE_FILE_LINE_NUMS_STRIPPED 4
|
|
#define IMAGE_FILE_LOCAL_SYMS_STRIPPED 8
|
|
#define IMAGE_FILE_BYTES_REVERSED_LO 128
|
|
#define IMAGE_FILE_32BIT_MACHINE 256
|
|
#define IMAGE_FILE_DEBUG_STRIPPED 512
|
|
#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP 1024
|
|
#define IMAGE_FILE_NET_RUN_FROM_SWAP 2048
|
|
#define IMAGE_FILE_SYSTEM 4096
|
|
#define IMAGE_FILE_DLL 8192
|
|
#define IMAGE_FILE_UP_SYSTEM_ONLY 16384
|
|
#define IMAGE_FILE_BYTES_REVERSED_HI 32768
|
|
#define IMAGE_FILE_MACHINE_UNKNOWN 0
|
|
#define IMAGE_FILE_MACHINE_I386 332
|
|
#define IMAGE_FILE_MACHINE_R3000 354
|
|
#define IMAGE_FILE_MACHINE_R4000 358
|
|
#define IMAGE_FILE_MACHINE_R10000 360
|
|
#define IMAGE_FILE_MACHINE_ALPHA 388
|
|
#define IMAGE_FILE_MACHINE_POWERPC 496
|
|
#define IMAGE_DOS_SIGNATURE 0x5A4D
|
|
#define IMAGE_OS2_SIGNATURE 0x454E
|
|
#define IMAGE_OS2_SIGNATURE_LE 0x454C
|
|
#define IMAGE_VXD_SIGNATURE 0x454C
|
|
#define IMAGE_NT_SIGNATURE 0x00004550
|
|
#define IMAGE_NT_OPTIONAL_HDR_MAGIC 0x10b
|
|
#define IMAGE_ROM_OPTIONAL_HDR_MAGIC 0x107
|
|
#define IMAGE_SEPARATE_DEBUG_SIGNATURE 0x4944
|
|
#define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 16
|
|
#define IMAGE_SIZEOF_ROM_OPTIONAL_HEADER 56
|
|
#define IMAGE_SIZEOF_STD_OPTIONAL_HEADER 28
|
|
#define IMAGE_SIZEOF_NT_OPTIONAL_HEADER 224
|
|
#define IMAGE_SIZEOF_SHORT_NAME 8
|
|
#define IMAGE_SIZEOF_SECTION_HEADER 40
|
|
#define IMAGE_SIZEOF_SYMBOL 18
|
|
#define IMAGE_SIZEOF_AUX_SYMBOL 18
|
|
#define IMAGE_SIZEOF_RELOCATION 10
|
|
#define IMAGE_SIZEOF_BASE_RELOCATION 8
|
|
#define IMAGE_SIZEOF_LINENUMBER 6
|
|
#define IMAGE_SIZEOF_ARCHIVE_MEMBER_HDR 60
|
|
#define SIZEOF_RFPO_DATA 16
|
|
#define IMAGE_SUBSYSTEM_UNKNOWN 0
|
|
#define IMAGE_SUBSYSTEM_NATIVE 1
|
|
#define IMAGE_SUBSYSTEM_WINDOWS_GUI 2
|
|
#define IMAGE_SUBSYSTEM_WINDOWS_CUI 3
|
|
#define IMAGE_SUBSYSTEM_OS2_CUI 5
|
|
#define IMAGE_SUBSYSTEM_POSIX_CUI 7
|
|
#define IMAGE_FIRST_SECTION(h) ((PIMAGE_SECTION_HEADER) ((DWORD)h+FIELD_OFFSET(IMAGE_NT_HEADERS,OptionalHeader)+((PIMAGE_NT_HEADERS)(h))->FileHeader.SizeOfOptionalHeader))
|
|
#define IMAGE_DIRECTORY_ENTRY_EXPORT 0
|
|
#define IMAGE_DIRECTORY_ENTRY_IMPORT 1
|
|
#define IMAGE_DIRECTORY_ENTRY_RESOURCE 2
|
|
#define IMAGE_DIRECTORY_ENTRY_EXCEPTION 3
|
|
#define IMAGE_DIRECTORY_ENTRY_SECURITY 4
|
|
#define IMAGE_DIRECTORY_ENTRY_BASERELOC 5
|
|
#define IMAGE_DIRECTORY_ENTRY_DEBUG 6
|
|
#define IMAGE_DIRECTORY_ENTRY_COPYRIGHT 7
|
|
#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR 8
|
|
#define IMAGE_DIRECTORY_ENTRY_TLS 9
|
|
#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG 10
|
|
#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT 11
|
|
#define IMAGE_DIRECTORY_ENTRY_IAT 12
|
|
#define IMAGE_SCN_TYPE_NO_PAD 8
|
|
#define IMAGE_SCN_CNT_CODE 32
|
|
#define IMAGE_SCN_CNT_INITIALIZED_DATA 64
|
|
#define IMAGE_SCN_CNT_UNINITIALIZED_DATA 128
|
|
#define IMAGE_SCN_LNK_OTHER 256
|
|
#define IMAGE_SCN_LNK_INFO 512
|
|
#define IMAGE_SCN_LNK_REMOVE 2048
|
|
#define IMAGE_SCN_LNK_COMDAT 4096
|
|
#define IMAGE_SCN_MEM_FARDATA 0x8000
|
|
#define IMAGE_SCN_MEM_PURGEABLE 0x20000
|
|
#define IMAGE_SCN_MEM_16BIT 0x20000
|
|
#define IMAGE_SCN_MEM_LOCKED 0x40000
|
|
#define IMAGE_SCN_MEM_PRELOAD 0x80000
|
|
#define IMAGE_SCN_ALIGN_1BYTES 0x100000
|
|
#define IMAGE_SCN_ALIGN_2BYTES 0x200000
|
|
#define IMAGE_SCN_ALIGN_4BYTES 0x300000
|
|
#define IMAGE_SCN_ALIGN_8BYTES 0x400000
|
|
#define IMAGE_SCN_ALIGN_16BYTES 0x500000
|
|
#define IMAGE_SCN_ALIGN_32BYTES 0x600000
|
|
#define IMAGE_SCN_ALIGN_64BYTES 0x700000
|
|
#define IMAGE_SCN_LNK_NRELOC_OVFL 0x1000000
|
|
#define IMAGE_SCN_MEM_DISCARDABLE 0x2000000
|
|
#define IMAGE_SCN_MEM_NOT_CACHED 0x4000000
|
|
#define IMAGE_SCN_MEM_NOT_PAGED 0x8000000
|
|
#define IMAGE_SCN_MEM_SHARED 0x10000000
|
|
#define IMAGE_SCN_MEM_EXECUTE 0x20000000
|
|
#define IMAGE_SCN_MEM_READ 0x40000000
|
|
#define IMAGE_SCN_MEM_WRITE 0x80000000
|
|
#define IMAGE_SYM_UNDEFINED 0
|
|
#define IMAGE_SYM_ABSOLUTE (-1)
|
|
#define IMAGE_SYM_DEBUG (-2)
|
|
#define IMAGE_SYM_TYPE_NULL 0
|
|
#define IMAGE_SYM_TYPE_VOID 1
|
|
#define IMAGE_SYM_TYPE_CHAR 2
|
|
#define IMAGE_SYM_TYPE_SHORT 3
|
|
#define IMAGE_SYM_TYPE_INT 4
|
|
#define IMAGE_SYM_TYPE_LONG 5
|
|
#define IMAGE_SYM_TYPE_FLOAT 6
|
|
#define IMAGE_SYM_TYPE_DOUBLE 7
|
|
#define IMAGE_SYM_TYPE_STRUCT 8
|
|
#define IMAGE_SYM_TYPE_UNION 9
|
|
#define IMAGE_SYM_TYPE_ENUM 10
|
|
#define IMAGE_SYM_TYPE_MOE 11
|
|
#define IMAGE_SYM_TYPE_BYTE 12
|
|
#define IMAGE_SYM_TYPE_WORD 13
|
|
#define IMAGE_SYM_TYPE_UINT 14
|
|
#define IMAGE_SYM_TYPE_DWORD 15
|
|
#define IMAGE_SYM_TYPE_PCODE 32768
|
|
#define IMAGE_SYM_DTYPE_NULL 0
|
|
#define IMAGE_SYM_DTYPE_POINTER 1
|
|
#define IMAGE_SYM_DTYPE_FUNCTION 2
|
|
#define IMAGE_SYM_DTYPE_ARRAY 3
|
|
#define IMAGE_SYM_CLASS_END_OF_FUNCTION (-1)
|
|
#define IMAGE_SYM_CLASS_NULL 0
|
|
#define IMAGE_SYM_CLASS_AUTOMATIC 1
|
|
#define IMAGE_SYM_CLASS_EXTERNAL 2
|
|
#define IMAGE_SYM_CLASS_STATIC 3
|
|
#define IMAGE_SYM_CLASS_REGISTER 4
|
|
#define IMAGE_SYM_CLASS_EXTERNAL_DEF 5
|
|
#define IMAGE_SYM_CLASS_LABEL 6
|
|
#define IMAGE_SYM_CLASS_UNDEFINED_LABEL 7
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_STRUCT 8
|
|
#define IMAGE_SYM_CLASS_ARGUMENT 9
|
|
#define IMAGE_SYM_CLASS_STRUCT_TAG 10
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_UNION 11
|
|
#define IMAGE_SYM_CLASS_UNION_TAG 12
|
|
#define IMAGE_SYM_CLASS_TYPE_DEFINITION 13
|
|
#define IMAGE_SYM_CLASS_UNDEFINED_STATIC 14
|
|
#define IMAGE_SYM_CLASS_ENUM_TAG 15
|
|
#define IMAGE_SYM_CLASS_MEMBER_OF_ENUM 16
|
|
#define IMAGE_SYM_CLASS_REGISTER_PARAM 17
|
|
#define IMAGE_SYM_CLASS_BIT_FIELD 18
|
|
#define IMAGE_SYM_CLASS_FAR_EXTERNAL 68
|
|
#define IMAGE_SYM_CLASS_BLOCK 100
|
|
#define IMAGE_SYM_CLASS_FUNCTION 101
|
|
#define IMAGE_SYM_CLASS_END_OF_STRUCT 102
|
|
#define IMAGE_SYM_CLASS_FILE 103
|
|
#define IMAGE_SYM_CLASS_SECTION 104
|
|
#define IMAGE_SYM_CLASS_WEAK_EXTERNAL 105
|
|
#define IMAGE_COMDAT_SELECT_NODUPLICATES 1
|
|
#define IMAGE_COMDAT_SELECT_ANY 2
|
|
#define IMAGE_COMDAT_SELECT_SAME_SIZE 3
|
|
#define IMAGE_COMDAT_SELECT_EXACT_MATCH 4
|
|
#define IMAGE_COMDAT_SELECT_ASSOCIATIVE 5
|
|
#define IMAGE_COMDAT_SELECT_LARGEST 6
|
|
#define IMAGE_COMDAT_SELECT_NEWEST 7
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY 1
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_LIBRARY 2
|
|
#define IMAGE_WEAK_EXTERN_SEARCH_ALIAS 3
|
|
#define IMAGE_REL_I386_ABSOLUTE 0
|
|
#define IMAGE_REL_I386_DIR16 1
|
|
#define IMAGE_REL_I386_REL16 2
|
|
#define IMAGE_REL_I386_DIR32 6
|
|
#define IMAGE_REL_I386_DIR32NB 7
|
|
#define IMAGE_REL_I386_SEG12 9
|
|
#define IMAGE_REL_I386_SECTION 10
|
|
#define IMAGE_REL_I386_SECREL 11
|
|
#define IMAGE_REL_I386_REL32 20
|
|
#define IMAGE_REL_MIPS_ABSOLUTE 0
|
|
#define IMAGE_REL_MIPS_REFHALF 1
|
|
#define IMAGE_REL_MIPS_REFWORD 2
|
|
#define IMAGE_REL_MIPS_JMPADDR 3
|
|
#define IMAGE_REL_MIPS_REFHI 4
|
|
#define IMAGE_REL_MIPS_REFLO 5
|
|
#define IMAGE_REL_MIPS_GPREL 6
|
|
#define IMAGE_REL_MIPS_LITERAL 7
|
|
#define IMAGE_REL_MIPS_SECTION 10
|
|
#define IMAGE_REL_MIPS_SECREL 11
|
|
#define IMAGE_REL_MIPS_SECRELLO 12
|
|
#define IMAGE_REL_MIPS_SECRELHI 13
|
|
#define IMAGE_REL_MIPS_REFWORDNB 34
|
|
#define IMAGE_REL_MIPS_PAIR 35
|
|
#define IMAGE_REL_ALPHA_ABSOLUTE 0
|
|
#define IMAGE_REL_ALPHA_REFLONG 1
|
|
#define IMAGE_REL_ALPHA_REFQUAD 2
|
|
#define IMAGE_REL_ALPHA_GPREL32 3
|
|
#define IMAGE_REL_ALPHA_LITERAL 4
|
|
#define IMAGE_REL_ALPHA_LITUSE 5
|
|
#define IMAGE_REL_ALPHA_GPDISP 6
|
|
#define IMAGE_REL_ALPHA_BRADDR 7
|
|
#define IMAGE_REL_ALPHA_HINT 8
|
|
#define IMAGE_REL_ALPHA_INLINE_REFLONG 9
|
|
#define IMAGE_REL_ALPHA_REFHI 10
|
|
#define IMAGE_REL_ALPHA_REFLO 11
|
|
#define IMAGE_REL_ALPHA_PAIR 12
|
|
#define IMAGE_REL_ALPHA_MATCH 13
|
|
#define IMAGE_REL_ALPHA_SECTION 14
|
|
#define IMAGE_REL_ALPHA_SECREL 15
|
|
#define IMAGE_REL_ALPHA_REFLONGNB 16
|
|
#define IMAGE_REL_ALPHA_SECRELLO 17
|
|
#define IMAGE_REL_ALPHA_SECRELHI 18
|
|
#define IMAGE_REL_PPC_ABSOLUTE 0
|
|
#define IMAGE_REL_PPC_ADDR64 1
|
|
#define IMAGE_REL_PPC_ADDR32 2
|
|
#define IMAGE_REL_PPC_ADDR24 3
|
|
#define IMAGE_REL_PPC_ADDR16 4
|
|
#define IMAGE_REL_PPC_ADDR14 5
|
|
#define IMAGE_REL_PPC_REL24 6
|
|
#define IMAGE_REL_PPC_REL14 7
|
|
#define IMAGE_REL_PPC_TOCREL16 8
|
|
#define IMAGE_REL_PPC_TOCREL14 9
|
|
#define IMAGE_REL_PPC_ADDR32NB 10
|
|
#define IMAGE_REL_PPC_SECREL 11
|
|
#define IMAGE_REL_PPC_SECTION 12
|
|
#define IMAGE_REL_PPC_IFGLUE 13
|
|
#define IMAGE_REL_PPC_IMGLUE 14
|
|
#define IMAGE_REL_PPC_SECREL16 15
|
|
#define IMAGE_REL_PPC_REFHI 16
|
|
#define IMAGE_REL_PPC_REFLO 17
|
|
#define IMAGE_REL_PPC_PAIR 18
|
|
#define IMAGE_REL_PPC_TYPEMASK 255
|
|
#define IMAGE_REL_PPC_NEG 256
|
|
#define IMAGE_REL_PPC_BRTAKEN 512
|
|
#define IMAGE_REL_PPC_BRNTAKEN 1024
|
|
#define IMAGE_REL_PPC_TOCDEFN 2048
|
|
#define IMAGE_REL_BASED_ABSOLUTE 0
|
|
#define IMAGE_REL_BASED_HIGH 1
|
|
#define IMAGE_REL_BASED_LOW 2
|
|
#define IMAGE_REL_BASED_HIGHLOW 3
|
|
#define IMAGE_REL_BASED_HIGHADJ 4
|
|
#define IMAGE_REL_BASED_MIPS_JMPADDR 5
|
|
#define IMAGE_ARCHIVE_START_SIZE 8
|
|
#define IMAGE_ARCHIVE_START "!<arch>\n"
|
|
#define IMAGE_ARCHIVE_END "`\n"
|
|
#define IMAGE_ARCHIVE_PAD "\n"
|
|
#define IMAGE_ARCHIVE_LINKER_MEMBER "/ "
|
|
#define IMAGE_ARCHIVE_LONGNAMES_MEMBER "// "
|
|
#define IMAGE_ORDINAL_FLAG 0x80000000
|
|
#define IMAGE_SNAP_BY_ORDINAL(o) ((o&IMAGE_ORDINAL_FLAG)!=0)
|
|
#define IMAGE_ORDINAL(o) (o&0xffff)
|
|
#define IMAGE_RESOURCE_NAME_IS_STRING 0x80000000
|
|
#define IMAGE_RESOURCE_DATA_IS_DIRECTORY 0x80000000
|
|
#define IMAGE_DEBUG_TYPE_UNKNOWN 0
|
|
#define IMAGE_DEBUG_TYPE_COFF 1
|
|
#define IMAGE_DEBUG_TYPE_CODEVIEW 2
|
|
#define IMAGE_DEBUG_TYPE_FPO 3
|
|
#define IMAGE_DEBUG_TYPE_MISC 4
|
|
#define IMAGE_DEBUG_TYPE_EXCEPTION 5
|
|
#define IMAGE_DEBUG_TYPE_FIXUP 6
|
|
#define IMAGE_DEBUG_TYPE_OMAP_TO_SRC 7
|
|
#define IMAGE_DEBUG_TYPE_OMAP_FROM_SRC 8
|
|
#define FRAME_FPO 0
|
|
#define FRAME_TRAP 1
|
|
#define FRAME_TSS 2
|
|
#define FRAME_NONFPO 3
|
|
#define IMAGE_DEBUG_MISC_EXENAME 1
|
|
#define N_BTMASK 0x000F
|
|
#define N_TMASK 0x0030
|
|
#define N_TMASK1 0x00C0
|
|
#define N_TMASK2 0x00F0
|
|
#define N_BTSHFT 4
|
|
#define N_TSHIFT 2
|
|
#define IS_TEXT_UNICODE_ASCII16 1
|
|
#define IS_TEXT_UNICODE_REVERSE_ASCII16 16
|
|
#define IS_TEXT_UNICODE_STATISTICS 2
|
|
#define IS_TEXT_UNICODE_REVERSE_STATISTICS 32
|
|
#define IS_TEXT_UNICODE_CONTROLS 4
|
|
#define IS_TEXT_UNICODE_REVERSE_CONTROLS 64
|
|
#define IS_TEXT_UNICODE_SIGNATURE 8
|
|
#define IS_TEXT_UNICODE_REVERSE_SIGNATURE 128
|
|
#define IS_TEXT_UNICODE_ILLEGAL_CHARS 256
|
|
#define IS_TEXT_UNICODE_ODD_LENGTH 512
|
|
#define IS_TEXT_UNICODE_NULL_BYTES 4096
|
|
#define IS_TEXT_UNICODE_UNICODE_MASK 15
|
|
#define IS_TEXT_UNICODE_REVERSE_MASK 240
|
|
#define IS_TEXT_UNICODE_NOT_UNICODE_MASK 3840
|
|
#define IS_TEXT_UNICODE_NOT_ASCII_MASK 61440
|
|
#define SERVICE_KERNEL_DRIVER 1
|
|
#define SERVICE_FILE_SYSTEM_DRIVER 2
|
|
#define SERVICE_ADAPTER 4
|
|
#define SERVICE_RECOGNIZER_DRIVER 8
|
|
#define SERVICE_DRIVER (SERVICE_KERNEL_DRIVER|SERVICE_FILE_SYSTEM_DRIVER|SERVICE_RECOGNIZER_DRIVER)
|
|
#define SERVICE_WIN32_OWN_PROCESS 16
|
|
#define SERVICE_WIN32_SHARE_PROCESS 32
|
|
#define SERVICE_WIN32 (SERVICE_WIN32_OWN_PROCESS|SERVICE_WIN32_SHARE_PROCESS)
|
|
#define SERVICE_INTERACTIVE_PROCESS 256
|
|
#define SERVICE_TYPE_ALL (SERVICE_WIN32|SERVICE_ADAPTER|SERVICE_DRIVER|SERVICE_INTERACTIVE_PROCESS)
|
|
#define SERVICE_BOOT_START 0
|
|
#define SERVICE_SYSTEM_START 1
|
|
#define SERVICE_AUTO_START 2
|
|
#define SERVICE_DEMAND_START 3
|
|
#define SERVICE_DISABLED 4
|
|
#define SERVICE_ERROR_IGNORE 0
|
|
#define SERVICE_ERROR_NORMAL 1
|
|
#define SERVICE_ERROR_SEVERE 2
|
|
#define SERVICE_ERROR_CRITICAL 3
|
|
#define SE_OWNER_DEFAULTED 1
|
|
#define SE_GROUP_DEFAULTED 2
|
|
#define SE_DACL_PRESENT 4
|
|
#define SE_DACL_DEFAULTED 8
|
|
#define SE_SACL_PRESENT 16
|
|
#define SE_SACL_DEFAULTED 32
|
|
#define SE_DACL_AUTO_INHERIT_REQ 256
|
|
#define SE_SACL_AUTO_INHERIT_REQ 512
|
|
#define SE_DACL_AUTO_INHERITED 1024
|
|
#define SE_SACL_AUTO_INHERITED 2048
|
|
#define SE_DACL_PROTECTED 4096
|
|
#define SE_SACL_PROTECTED 8192
|
|
#define SE_SELF_RELATIVE 0x8000
|
|
#define SECURITY_DESCRIPTOR_MIN_LENGTH 20
|
|
#define SECURITY_DESCRIPTOR_REVISION 1
|
|
#define SECURITY_DESCRIPTOR_REVISION1 1
|
|
#define SE_PRIVILEGE_ENABLED_BY_DEFAULT 1
|
|
#define SE_PRIVILEGE_ENABLED 2
|
|
#define SE_PRIVILEGE_USED_FOR_ACCESS 0x80000000
|
|
#define PRIVILEGE_SET_ALL_NECESSARY 1
|
|
#define SECURITY_MAX_IMPERSONATION_LEVEL SecurityDelegation
|
|
#define DEFAULT_IMPERSONATION_LEVEL SecurityImpersonation
|
|
#define SECURITY_DYNAMIC_TRACKING TRUE
|
|
#define SECURITY_STATIC_TRACKING FALSE
|
|
#define TOKEN_SOURCE_LENGTH 8
|
|
#define TOKEN_ADJUST_DEFAULT 128
|
|
#define TOKEN_ADJUST_GROUPS 64
|
|
#define TOKEN_ADJUST_PRIVILEGES 32
|
|
#define TOKEN_ALL_ACCESS 0xf00ff
|
|
#define TOKEN_ASSIGN_PRIMARY 1
|
|
#define TOKEN_DUPLICATE 2
|
|
#define TOKEN_EXECUTE 0x20000
|
|
#define TOKEN_IMPERSONATE 4
|
|
#define TOKEN_QUERY 8
|
|
#define TOKEN_QUERY_SOURCE 16
|
|
#define TOKEN_READ 0x20008
|
|
#define TOKEN_WRITE 0x200e0
|
|
#define DLL_PROCESS_DETACH 0
|
|
#define DLL_PROCESS_ATTACH 1
|
|
#define DLL_THREAD_ATTACH 2
|
|
#define DLL_THREAD_DETACH 3
|
|
#define DBG_CONTINUE 0x10002
|
|
#define DBG_TERMINATE_THREAD 0x40010003
|
|
#define DBG_TERMINATE_PROCESS 0x40010004
|
|
#define DBG_CONTROL_C 0x40010005
|
|
#define DBG_CONTROL_BREAK 0x40010008
|
|
#define DBG_EXCEPTION_NOT_HANDLED 0x80010001
|
|
#define TAPE_ABSOLUTE_POSITION 0
|
|
#define TAPE_LOGICAL_POSITION 1
|
|
#define TAPE_PSEUDO_LOGICAL_POSITION 2
|
|
#define TAPE_REWIND 0
|
|
#define TAPE_ABSOLUTE_BLOCK 1
|
|
#define TAPE_LOGICAL_BLOCK 2
|
|
#define TAPE_PSEUDO_LOGICAL_BLOCK 3
|
|
#define TAPE_SPACE_END_OF_DATA 4
|
|
#define TAPE_SPACE_RELATIVE_BLOCKS 5
|
|
#define TAPE_SPACE_FILEMARKS 6
|
|
#define TAPE_SPACE_SEQUENTIAL_FMKS 7
|
|
#define TAPE_SPACE_SETMARKS 8
|
|
#define TAPE_SPACE_SEQUENTIAL_SMKS 9
|
|
#define TAPE_DRIVE_FIXED 1
|
|
#define TAPE_DRIVE_SELECT 2
|
|
#define TAPE_DRIVE_INITIATOR 4
|
|
#define TAPE_DRIVE_ERASE_SHORT 16
|
|
#define TAPE_DRIVE_ERASE_LONG 32
|
|
#define TAPE_DRIVE_ERASE_BOP_ONLY 64
|
|
#define TAPE_DRIVE_ERASE_IMMEDIATE 128
|
|
#define TAPE_DRIVE_TAPE_CAPACITY 256
|
|
#define TAPE_DRIVE_TAPE_REMAINING 512
|
|
#define TAPE_DRIVE_FIXED_BLOCK 1024
|
|
#define TAPE_DRIVE_VARIABLE_BLOCK 2048
|
|
#define TAPE_DRIVE_WRITE_PROTECT 4096
|
|
#define TAPE_DRIVE_EOT_WZ_SIZE 8192
|
|
#define TAPE_DRIVE_ECC 0x10000
|
|
#define TAPE_DRIVE_COMPRESSION 0x20000
|
|
#define TAPE_DRIVE_PADDING 0x40000
|
|
#define TAPE_DRIVE_REPORT_SMKS 0x80000
|
|
#define TAPE_DRIVE_GET_ABSOLUTE_BLK 0x100000
|
|
#define TAPE_DRIVE_GET_LOGICAL_BLK 0x200000
|
|
#define TAPE_DRIVE_SET_EOT_WZ_SIZE 0x400000
|
|
#define TAPE_DRIVE_EJECT_MEDIA 0x1000000
|
|
#define TAPE_DRIVE_CLEAN_REQUESTS 0x2000000
|
|
#define TAPE_DRIVE_SET_CMP_BOP_ONLY 0x4000000
|
|
#define TAPE_DRIVE_RESERVED_BIT 0x80000000
|
|
#define TAPE_DRIVE_LOAD_UNLOAD 0x80000001
|
|
#define TAPE_DRIVE_TENSION 0x80000002
|
|
#define TAPE_DRIVE_LOCK_UNLOCK 0x80000004
|
|
#define TAPE_DRIVE_REWIND_IMMEDIATE 0x80000008
|
|
#define TAPE_DRIVE_SET_BLOCK_SIZE 0x80000010
|
|
#define TAPE_DRIVE_LOAD_UNLD_IMMED 0x80000020
|
|
#define TAPE_DRIVE_TENSION_IMMED 0x80000040
|
|
#define TAPE_DRIVE_LOCK_UNLK_IMMED 0x80000080
|
|
#define TAPE_DRIVE_SET_ECC 0x80000100
|
|
#define TAPE_DRIVE_SET_COMPRESSION 0x80000200
|
|
#define TAPE_DRIVE_SET_PADDING 0x80000400
|
|
#define TAPE_DRIVE_SET_REPORT_SMKS 0x80000800
|
|
#define TAPE_DRIVE_ABSOLUTE_BLK 0x80001000
|
|
#define TAPE_DRIVE_ABS_BLK_IMMED 0x80002000
|
|
#define TAPE_DRIVE_LOGICAL_BLK 0x80004000
|
|
#define TAPE_DRIVE_LOG_BLK_IMMED 0x80008000
|
|
#define TAPE_DRIVE_END_OF_DATA 0x80010000
|
|
#define TAPE_DRIVE_RELATIVE_BLKS 0x80020000
|
|
#define TAPE_DRIVE_FILEMARKS 0x80040000
|
|
#define TAPE_DRIVE_SEQUENTIAL_FMKS 0x80080000
|
|
#define TAPE_DRIVE_SETMARKS 0x80100000
|
|
#define TAPE_DRIVE_SEQUENTIAL_SMKS 0x80200000
|
|
#define TAPE_DRIVE_REVERSE_POSITION 0x80400000
|
|
#define TAPE_DRIVE_SPACE_IMMEDIATE 0x80800000
|
|
#define TAPE_DRIVE_WRITE_SETMARKS 0x81000000
|
|
#define TAPE_DRIVE_WRITE_FILEMARKS 0x82000000
|
|
#define TAPE_DRIVE_WRITE_SHORT_FMKS 0x84000000
|
|
#define TAPE_DRIVE_WRITE_LONG_FMKS 0x88000000
|
|
#define TAPE_DRIVE_WRITE_MARK_IMMED 0x90000000
|
|
#define TAPE_DRIVE_FORMAT 0xA0000000
|
|
#define TAPE_DRIVE_FORMAT_IMMEDIATE 0xC0000000
|
|
#define TAPE_DRIVE_HIGH_FEATURES 0x80000000
|
|
#define TAPE_FIXED_PARTITIONS 0
|
|
#define TAPE_INITIATOR_PARTITIONS 2
|
|
#define TAPE_SELECT_PARTITIONS 1
|
|
#define TAPE_FILEMARKS 1
|
|
#define TAPE_LONG_FILEMARKS 3
|
|
#define TAPE_SETMARKS 0
|
|
#define TAPE_SHORT_FILEMARKS 2
|
|
#define TAPE_ERASE_LONG 1
|
|
#define TAPE_ERASE_SHORT 0
|
|
#define TAPE_LOAD 0
|
|
#define TAPE_UNLOAD 1
|
|
#define TAPE_TENSION 2
|
|
#define TAPE_LOCK 3
|
|
#define TAPE_UNLOCK 4
|
|
#define TAPE_FORMAT 5
|
|
#define BTYPE(x) ((x)&N_BTMASK)
|
|
#define ISPTR(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT))
|
|
#define ISFCN(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_FUNCTION<<N_BTSHFT))
|
|
#define ISARY(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_ARRAY<<N_BTSHFT))
|
|
#define ISTAG(x) ((x)==IMAGE_SYM_CLASS_STRUCT_TAG||(x)==IMAGE_SYM_CLASS_UNION_TAG||(x)==IMAGE_SYM_CLASS_ENUM_TAG)
|
|
#define INCREF(x) ((((x)&~N_BTMASK)<<N_TSHIFT)|(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT)|((x)&N_BTMASK))
|
|
#define DECREF(x) ((((x)>>N_TSHIFT)&~N_BTMASK)|((x)&N_BTMASK))
|
|
#define TLS_MINIMUM_AVAILABLE 64
|
|
#define REPARSE_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(REPARSE_DATA_BUFFER, GenericReparseBuffer)
|
|
#define REPARSE_GUID_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(REPARSE_GUID_DATA_BUFFER, GenericReparseBuffer)
|
|
#define MAXIMUM_REPARSE_DATA_BUFFER_SIZE 16384
|
|
#define IO_REPARSE_TAG_RESERVED_ZERO 0
|
|
#define IO_REPARSE_TAG_RESERVED_ONE 1
|
|
#define IO_REPARSE_TAG_RESERVED_RANGE IO_REPARSE_TAG_RESERVED_ONE
|
|
#define IsReparseTagMicrosoft(x) ((x)&0x80000000)
|
|
#define IsReparseTagHighLatency(x) ((x)&0x40000000)
|
|
#define IsReparseTagNameSurrogate(x) ((x)&0x20000000)
|
|
#define IO_REPARSE_TAG_VALID_VALUES 0xE000FFFF
|
|
#define IsReparseTagValid(x) (!((x)&~IO_REPARSE_TAG_VALID_VALUES)&&((x)>IO_REPARSE_TAG_RESERVED_RANGE))
|
|
#define IO_REPARSE_TAG_SYMBOLIC_LINK IO_REPARSE_TAG_RESERVED_ZERO
|
|
#define IO_REPARSE_TAG_MOUNT_POINT 0xA0000003
|
|
#ifndef RC_INVOKED
|
|
typedef DWORD ACCESS_MASK;
|
|
#ifndef _GUID_DEFINED /* also defined in basetyps.h */
|
|
#define _GUID_DEFINED
|
|
typedef struct _GUID {
|
|
unsigned long Data1;
|
|
unsigned short Data2;
|
|
unsigned short Data3;
|
|
unsigned char Data4[8];
|
|
} GUID, *REFGUID, *LPGUID;
|
|
#define SYSTEM_LUID { 999 }
|
|
#endif /* _GUID_DEFINED */
|
|
typedef struct _GENERIC_MAPPING {
|
|
ACCESS_MASK GenericRead;
|
|
ACCESS_MASK GenericWrite;
|
|
ACCESS_MASK GenericExecute;
|
|
ACCESS_MASK GenericAll;
|
|
} GENERIC_MAPPING, *PGENERIC_MAPPING;
|
|
typedef struct _ACE_HEADER {
|
|
BYTE AceType;
|
|
BYTE AceFlags;
|
|
WORD AceSize;
|
|
} ACE_HEADER;
|
|
typedef struct _ACCESS_ALLOWED_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} ACCESS_ALLOWED_ACE;
|
|
typedef struct _ACCESS_DENIED_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} ACCESS_DENIED_ACE;
|
|
typedef struct _SYSTEM_AUDIT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} SYSTEM_AUDIT_ACE;
|
|
typedef SYSTEM_AUDIT_ACE *PSYSTEM_AUDIT_ACE;
|
|
typedef struct _SYSTEM_ALARM_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD SidStart;
|
|
} SYSTEM_ALARM_ACE,*PSYSTEM_ALARM_ACE;
|
|
typedef struct _ACCESS_ALLOWED_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} ACCESS_ALLOWED_OBJECT_ACE,*PACCESS_ALLOWED_OBJECT_ACE;
|
|
typedef struct _ACCESS_DENIED_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} ACCESS_DENIED_OBJECT_ACE,*PACCESS_DENIED_OBJECT_ACE;
|
|
typedef struct _SYSTEM_AUDIT_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_AUDIT_OBJECT_ACE,*PSYSTEM_AUDIT_OBJECT_ACE;
|
|
typedef struct _SYSTEM_ALARM_OBJECT_ACE {
|
|
ACE_HEADER Header;
|
|
ACCESS_MASK Mask;
|
|
DWORD Flags;
|
|
GUID ObjectType;
|
|
GUID InheritedObjectType;
|
|
DWORD SidStart;
|
|
} SYSTEM_ALARM_OBJECT_ACE,*PSYSTEM_ALARM_OBJECT_ACE;
|
|
typedef struct _ACL {
|
|
BYTE AclRevision;
|
|
BYTE Sbz1;
|
|
WORD AclSize;
|
|
WORD AceCount;
|
|
WORD Sbz2;
|
|
} ACL,*PACL;
|
|
typedef struct _ACL_REVISION_INFORMATION {
|
|
DWORD AclRevision;
|
|
} ACL_REVISION_INFORMATION;
|
|
typedef struct _ACL_SIZE_INFORMATION {
|
|
DWORD AceCount;
|
|
DWORD AclBytesInUse;
|
|
DWORD AclBytesFree;
|
|
} ACL_SIZE_INFORMATION;
|
|
|
|
/* FIXME: add more machines */
|
|
#ifdef _X86_
|
|
#define SIZE_OF_80387_REGISTERS 80
|
|
#define CONTEXT_i386 0x10000
|
|
#define CONTEXT_i486 0x10000
|
|
#define CONTEXT_CONTROL (CONTEXT_i386|0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_i386|0x00000002L)
|
|
#define CONTEXT_SEGMENTS (CONTEXT_i386|0x00000004L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_i386|0x00000008L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_i386|0x00000010L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_INTEGER|CONTEXT_SEGMENTS)
|
|
typedef struct _FLOATING_SAVE_AREA {
|
|
DWORD ControlWord;
|
|
DWORD StatusWord;
|
|
DWORD TagWord;
|
|
DWORD ErrorOffset;
|
|
DWORD ErrorSelector;
|
|
DWORD DataOffset;
|
|
DWORD DataSelector;
|
|
BYTE RegisterArea[80];
|
|
DWORD Cr0NpxState;
|
|
} FLOATING_SAVE_AREA;
|
|
typedef struct _CONTEXT {
|
|
DWORD ContextFlags;
|
|
DWORD Dr0;
|
|
DWORD Dr1;
|
|
DWORD Dr2;
|
|
DWORD Dr3;
|
|
DWORD Dr6;
|
|
DWORD Dr7;
|
|
FLOATING_SAVE_AREA FloatSave;
|
|
DWORD SegGs;
|
|
DWORD SegFs;
|
|
DWORD SegEs;
|
|
DWORD SegDs;
|
|
DWORD Edi;
|
|
DWORD Esi;
|
|
DWORD Ebx;
|
|
DWORD Edx;
|
|
DWORD Ecx;
|
|
DWORD Eax;
|
|
DWORD Ebp;
|
|
DWORD Eip;
|
|
DWORD SegCs;
|
|
DWORD EFlags;
|
|
DWORD Esp;
|
|
DWORD SegSs;
|
|
} CONTEXT;
|
|
#elif defined(_PPC_)
|
|
#define CONTEXT_CONTROL 1L
|
|
#define CONTEXT_FLOATING_POINT 2L
|
|
#define CONTEXT_INTEGER 4L
|
|
#define CONTEXT_DEBUG_REGISTERS 8L
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)
|
|
typedef struct {
|
|
double Fpr0;
|
|
double Fpr1;
|
|
double Fpr2;
|
|
double Fpr3;
|
|
double Fpr4;
|
|
double Fpr5;
|
|
double Fpr6;
|
|
double Fpr7;
|
|
double Fpr8;
|
|
double Fpr9;
|
|
double Fpr10;
|
|
double Fpr11;
|
|
double Fpr12;
|
|
double Fpr13;
|
|
double Fpr14;
|
|
double Fpr15;
|
|
double Fpr16;
|
|
double Fpr17;
|
|
double Fpr18;
|
|
double Fpr19;
|
|
double Fpr20;
|
|
double Fpr21;
|
|
double Fpr22;
|
|
double Fpr23;
|
|
double Fpr24;
|
|
double Fpr25;
|
|
double Fpr26;
|
|
double Fpr27;
|
|
double Fpr28;
|
|
double Fpr29;
|
|
double Fpr30;
|
|
double Fpr31;
|
|
double Fpscr;
|
|
DWORD Gpr0;
|
|
DWORD Gpr1;
|
|
DWORD Gpr2;
|
|
DWORD Gpr3;
|
|
DWORD Gpr4;
|
|
DWORD Gpr5;
|
|
DWORD Gpr6;
|
|
DWORD Gpr7;
|
|
DWORD Gpr8;
|
|
DWORD Gpr9;
|
|
DWORD Gpr10;
|
|
DWORD Gpr11;
|
|
DWORD Gpr12;
|
|
DWORD Gpr13;
|
|
DWORD Gpr14;
|
|
DWORD Gpr15;
|
|
DWORD Gpr16;
|
|
DWORD Gpr17;
|
|
DWORD Gpr18;
|
|
DWORD Gpr19;
|
|
DWORD Gpr20;
|
|
DWORD Gpr21;
|
|
DWORD Gpr22;
|
|
DWORD Gpr23;
|
|
DWORD Gpr24;
|
|
DWORD Gpr25;
|
|
DWORD Gpr26;
|
|
DWORD Gpr27;
|
|
DWORD Gpr28;
|
|
DWORD Gpr29;
|
|
DWORD Gpr30;
|
|
DWORD Gpr31;
|
|
DWORD Cr;
|
|
DWORD Xer;
|
|
DWORD Msr;
|
|
DWORD Iar;
|
|
DWORD Lr;
|
|
DWORD Ctr;
|
|
DWORD ContextFlags;
|
|
DWORD Fill[3];
|
|
DWORD Dr0;
|
|
DWORD Dr1;
|
|
DWORD Dr2;
|
|
DWORD Dr3;
|
|
DWORD Dr4;
|
|
DWORD Dr5;
|
|
DWORD Dr6;
|
|
DWORD Dr7;
|
|
} CONTEXT;
|
|
#elif defined(_ALPHA_)
|
|
#define CONTEXT_ALPHA 0x20000
|
|
#define CONTEXT_CONTROL (CONTEXT_ALPHA|1L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_ALPHA|2L)
|
|
#define CONTEXT_INTEGER (CONTEXT_ALPHA|4L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)
|
|
typedef struct _CONTEXT {
|
|
ULONGLONG FltF0;
|
|
ULONGLONG FltF1;
|
|
ULONGLONG FltF2;
|
|
ULONGLONG FltF3;
|
|
ULONGLONG FltF4;
|
|
ULONGLONG FltF5;
|
|
ULONGLONG FltF6;
|
|
ULONGLONG FltF7;
|
|
ULONGLONG FltF8;
|
|
ULONGLONG FltF9;
|
|
ULONGLONG FltF10;
|
|
ULONGLONG FltF11;
|
|
ULONGLONG FltF12;
|
|
ULONGLONG FltF13;
|
|
ULONGLONG FltF14;
|
|
ULONGLONG FltF15;
|
|
ULONGLONG FltF16;
|
|
ULONGLONG FltF17;
|
|
ULONGLONG FltF18;
|
|
ULONGLONG FltF19;
|
|
ULONGLONG FltF20;
|
|
ULONGLONG FltF21;
|
|
ULONGLONG FltF22;
|
|
ULONGLONG FltF23;
|
|
ULONGLONG FltF24;
|
|
ULONGLONG FltF25;
|
|
ULONGLONG FltF26;
|
|
ULONGLONG FltF27;
|
|
ULONGLONG FltF28;
|
|
ULONGLONG FltF29;
|
|
ULONGLONG FltF30;
|
|
ULONGLONG FltF31;
|
|
ULONGLONG IntV0;
|
|
ULONGLONG IntT0;
|
|
ULONGLONG IntT1;
|
|
ULONGLONG IntT2;
|
|
ULONGLONG IntT3;
|
|
ULONGLONG IntT4;
|
|
ULONGLONG IntT5;
|
|
ULONGLONG IntT6;
|
|
ULONGLONG IntT7;
|
|
ULONGLONG IntS0;
|
|
ULONGLONG IntS1;
|
|
ULONGLONG IntS2;
|
|
ULONGLONG IntS3;
|
|
ULONGLONG IntS4;
|
|
ULONGLONG IntS5;
|
|
ULONGLONG IntFp;
|
|
ULONGLONG IntA0;
|
|
ULONGLONG IntA1;
|
|
ULONGLONG IntA2;
|
|
ULONGLONG IntA3;
|
|
ULONGLONG IntA4;
|
|
ULONGLONG IntA5;
|
|
ULONGLONG IntT8;
|
|
ULONGLONG IntT9;
|
|
ULONGLONG IntT10;
|
|
ULONGLONG IntT11;
|
|
ULONGLONG IntRa;
|
|
ULONGLONG IntT12;
|
|
ULONGLONG IntAt;
|
|
ULONGLONG IntGp;
|
|
ULONGLONG IntSp;
|
|
ULONGLONG IntZero;
|
|
ULONGLONG Fpcr;
|
|
ULONGLONG SoftFpcr;
|
|
ULONGLONG Fir;
|
|
DWORD Psr;
|
|
DWORD ContextFlags;
|
|
DWORD Fill[4];
|
|
} CONTEXT;
|
|
#elif defined(SHx)
|
|
|
|
/* These are the debug or break registers on the SH3 */
|
|
typedef struct _DEBUG_REGISTERS {
|
|
ULONG BarA;
|
|
UCHAR BasrA;
|
|
UCHAR BamrA;
|
|
USHORT BbrA;
|
|
ULONG BarB;
|
|
UCHAR BasrB;
|
|
UCHAR BamrB;
|
|
USHORT BbrB;
|
|
ULONG BdrB;
|
|
ULONG BdmrB;
|
|
USHORT Brcr;
|
|
USHORT Align;
|
|
} DEBUG_REGISTERS, *PDEBUG_REGISTERS;
|
|
|
|
/* The following flags control the contents of the CONTEXT structure. */
|
|
|
|
#define CONTEXT_SH3 0x00000040
|
|
#define CONTEXT_SH4 0x000000c0 /* CONTEXT_SH3 | 0x80 - must contain the SH3 bits */
|
|
|
|
#ifdef SH3
|
|
#define CONTEXT_CONTROL (CONTEXT_SH3 | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_SH3 | 0x00000002L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH3 | 0x00000008L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS)
|
|
#else /* SH4 */
|
|
#define CONTEXT_CONTROL (CONTEXT_SH4 | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_SH4 | 0x00000002L)
|
|
#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH4 | 0x00000008L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_SH4 | 0x00000004L)
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS | CONTEXT_FLOATING_POINT)
|
|
#endif
|
|
|
|
/* Context Frame */
|
|
|
|
/* This frame is used to store a limited processor context into the */
|
|
/* Thread structure for CPUs which have no floating point support. */
|
|
|
|
typedef struct _CONTEXT {
|
|
/* The flags values within this flag control the contents of */
|
|
/* a CONTEXT record. */
|
|
|
|
/* If the context record is used as an input parameter, then */
|
|
/* for each portion of the context record controlled by a flag */
|
|
/* whose value is set, it is assumed that that portion of the */
|
|
/* context record contains valid context. If the context record */
|
|
/* is being used to modify a thread's context, then only that */
|
|
/* portion of the threads context will be modified. */
|
|
|
|
/* If the context record is used as an IN OUT parameter to capture */
|
|
/* the context of a thread, then only those portions of the thread's */
|
|
/* context corresponding to set flags will be returned. */
|
|
|
|
/* The context record is never used as an OUT only parameter. */
|
|
|
|
|
|
ULONG ContextFlags;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_INTEGER. */
|
|
|
|
/* N.B. The registers RA and R15 are defined in this section, but are */
|
|
/* considered part of the control context rather than part of the integer */
|
|
/* context. */
|
|
|
|
ULONG PR;
|
|
ULONG MACH;
|
|
ULONG MACL;
|
|
ULONG GBR;
|
|
ULONG R0;
|
|
ULONG R1;
|
|
ULONG R2;
|
|
ULONG R3;
|
|
ULONG R4;
|
|
ULONG R5;
|
|
ULONG R6;
|
|
ULONG R7;
|
|
ULONG R8;
|
|
ULONG R9;
|
|
ULONG R10;
|
|
ULONG R11;
|
|
ULONG R12;
|
|
ULONG R13;
|
|
ULONG R14;
|
|
ULONG R15;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_CONTROL. */
|
|
|
|
/* N.B. The registers r15 and ra are defined in the integer section, */
|
|
/* but are considered part of the control context rather than part of */
|
|
/* the integer context. */
|
|
|
|
ULONG Fir;
|
|
ULONG Psr;
|
|
|
|
#if !defined(SH3e) && !defined(SH4)
|
|
ULONG OldStuff[2];
|
|
DEBUG_REGISTERS DebugRegisters;
|
|
#else
|
|
ULONG Fpscr;
|
|
ULONG Fpul;
|
|
ULONG FRegs[16];
|
|
#if defined(SH4)
|
|
ULONG xFRegs[16];
|
|
#endif
|
|
#endif
|
|
} CONTEXT;
|
|
|
|
#elif defined(MIPS)
|
|
|
|
/* The following flags control the contents of the CONTEXT structure. */
|
|
|
|
#define CONTEXT_R4000 0x00010000 /* r4000 context */
|
|
|
|
#define CONTEXT_CONTROL (CONTEXT_R4000 | 0x00000001L)
|
|
#define CONTEXT_FLOATING_POINT (CONTEXT_R4000 | 0x00000002L)
|
|
#define CONTEXT_INTEGER (CONTEXT_R4000 | 0x00000004L)
|
|
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_FLOATING_POINT | CONTEXT_INTEGER)
|
|
|
|
/* Context Frame */
|
|
|
|
/* N.B. This frame must be exactly a multiple of 16 bytes in length. */
|
|
|
|
/* This frame has a several purposes: 1) it is used as an argument to */
|
|
/* NtContinue, 2) it is used to constuct a call frame for APC delivery, */
|
|
/* 3) it is used to construct a call frame for exception dispatching */
|
|
/* in user mode, and 4) it is used in the user level thread creation */
|
|
/* routines. */
|
|
|
|
/* The layout of the record conforms to a standard call frame. */
|
|
|
|
|
|
typedef struct _CONTEXT {
|
|
|
|
/* This section is always present and is used as an argument build */
|
|
/* area. */
|
|
|
|
DWORD Argument[4];
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_FLOATING_POINT. */
|
|
|
|
DWORD FltF0;
|
|
DWORD FltF1;
|
|
DWORD FltF2;
|
|
DWORD FltF3;
|
|
DWORD FltF4;
|
|
DWORD FltF5;
|
|
DWORD FltF6;
|
|
DWORD FltF7;
|
|
DWORD FltF8;
|
|
DWORD FltF9;
|
|
DWORD FltF10;
|
|
DWORD FltF11;
|
|
DWORD FltF12;
|
|
DWORD FltF13;
|
|
DWORD FltF14;
|
|
DWORD FltF15;
|
|
DWORD FltF16;
|
|
DWORD FltF17;
|
|
DWORD FltF18;
|
|
DWORD FltF19;
|
|
DWORD FltF20;
|
|
DWORD FltF21;
|
|
DWORD FltF22;
|
|
DWORD FltF23;
|
|
DWORD FltF24;
|
|
DWORD FltF25;
|
|
DWORD FltF26;
|
|
DWORD FltF27;
|
|
DWORD FltF28;
|
|
DWORD FltF29;
|
|
DWORD FltF30;
|
|
DWORD FltF31;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_INTEGER. */
|
|
|
|
/* N.B. The registers gp, sp, and ra are defined in this section, but are */
|
|
/* considered part of the control context rather than part of the integer */
|
|
/* context. */
|
|
|
|
/* N.B. Register zero is not stored in the frame. */
|
|
|
|
DWORD IntZero;
|
|
DWORD IntAt;
|
|
DWORD IntV0;
|
|
DWORD IntV1;
|
|
DWORD IntA0;
|
|
DWORD IntA1;
|
|
DWORD IntA2;
|
|
DWORD IntA3;
|
|
DWORD IntT0;
|
|
DWORD IntT1;
|
|
DWORD IntT2;
|
|
DWORD IntT3;
|
|
DWORD IntT4;
|
|
DWORD IntT5;
|
|
DWORD IntT6;
|
|
DWORD IntT7;
|
|
DWORD IntS0;
|
|
DWORD IntS1;
|
|
DWORD IntS2;
|
|
DWORD IntS3;
|
|
DWORD IntS4;
|
|
DWORD IntS5;
|
|
DWORD IntS6;
|
|
DWORD IntS7;
|
|
DWORD IntT8;
|
|
DWORD IntT9;
|
|
DWORD IntK0;
|
|
DWORD IntK1;
|
|
DWORD IntGp;
|
|
DWORD IntSp;
|
|
DWORD IntS8;
|
|
DWORD IntRa;
|
|
DWORD IntLo;
|
|
DWORD IntHi;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_FLOATING_POINT. */
|
|
|
|
DWORD Fsr;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains */
|
|
/* the flag CONTEXT_CONTROL. */
|
|
|
|
/* N.B. The registers gp, sp, and ra are defined in the integer section, */
|
|
/* but are considered part of the control context rather than part of */
|
|
/* the integer context. */
|
|
|
|
DWORD Fir;
|
|
DWORD Psr;
|
|
|
|
/* The flags values within this flag control the contents of */
|
|
/* a CONTEXT record. */
|
|
|
|
/* If the context record is used as an input parameter, then */
|
|
/* for each portion of the context record controlled by a flag */
|
|
/* whose value is set, it is assumed that that portion of the */
|
|
/* context record contains valid context. If the context record */
|
|
/* is being used to modify a thread's context, then only that */
|
|
/* portion of the threads context will be modified. */
|
|
|
|
/* If the context record is used as an IN OUT parameter to capture */
|
|
/* the context of a thread, then only those portions of the thread's */
|
|
/* context corresponding to set flags will be returned. */
|
|
|
|
/* The context record is never used as an OUT only parameter. */
|
|
|
|
DWORD ContextFlags;
|
|
|
|
DWORD Fill[2];
|
|
|
|
} CONTEXT;
|
|
#elif defined(ARM)
|
|
//
|
|
// The following flags control the contents of the CONTEXT structure.
|
|
//
|
|
|
|
#define CONTEXT_ARM 0x0000040
|
|
#define CONTEXT_CONTROL (CONTEXT_ARM | 0x00000001L)
|
|
#define CONTEXT_INTEGER (CONTEXT_ARM | 0x00000002L)
|
|
|
|
#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER)
|
|
|
|
typedef struct _CONTEXT {
|
|
/* The flags values within this flag control the contents of
|
|
a CONTEXT record.
|
|
|
|
If the context record is used as an input parameter, then
|
|
for each portion of the context record controlled by a flag
|
|
whose value is set, it is assumed that that portion of the
|
|
context record contains valid context. If the context record
|
|
is being used to modify a thread's context, then only that
|
|
portion of the threads context will be modified.
|
|
|
|
If the context record is used as an IN OUT parameter to capture
|
|
the context of a thread, then only those portions of the thread's
|
|
context corresponding to set flags will be returned.
|
|
|
|
The context record is never used as an OUT only parameter. */
|
|
|
|
ULONG ContextFlags;
|
|
|
|
/* This section is specified/returned if the ContextFlags word contains
|
|
the flag CONTEXT_INTEGER. */
|
|
ULONG R0;
|
|
ULONG R1;
|
|
ULONG R2;
|
|
ULONG R3;
|
|
ULONG R4;
|
|
ULONG R5;
|
|
ULONG R6;
|
|
ULONG R7;
|
|
ULONG R8;
|
|
ULONG R9;
|
|
ULONG R10;
|
|
ULONG R11;
|
|
ULONG R12;
|
|
|
|
ULONG Sp;
|
|
ULONG Lr;
|
|
ULONG Pc;
|
|
ULONG Psr;
|
|
} CONTEXT;
|
|
|
|
#else
|
|
#error "undefined processor type"
|
|
#endif
|
|
typedef CONTEXT *PCONTEXT,*LPCONTEXT;
|
|
typedef struct _EXCEPTION_RECORD {
|
|
DWORD ExceptionCode;
|
|
DWORD ExceptionFlags;
|
|
struct _EXCEPTION_RECORD *ExceptionRecord;
|
|
PVOID ExceptionAddress;
|
|
DWORD NumberParameters;
|
|
DWORD ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];
|
|
} EXCEPTION_RECORD,*PEXCEPTION_RECORD;
|
|
typedef struct _EXCEPTION_POINTERS {
|
|
PEXCEPTION_RECORD ExceptionRecord;
|
|
PCONTEXT ContextRecord;
|
|
} EXCEPTION_POINTERS,*PEXCEPTION_POINTERS,*LPEXCEPTION_POINTERS;
|
|
typedef union _LARGE_INTEGER {
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD LowPart;
|
|
LONG HighPart;
|
|
}_STRUCT_NAME(u);
|
|
LONGLONG QuadPart;
|
|
} LARGE_INTEGER;
|
|
typedef LARGE_INTEGER *PLARGE_INTEGER;
|
|
typedef union _ULARGE_INTEGER {
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD LowPart;
|
|
DWORD HighPart;
|
|
}_STRUCT_NAME(u);
|
|
DWORDLONG QuadPart;
|
|
} ULARGE_INTEGER;
|
|
typedef ULARGE_INTEGER *PULARGE_INTEGER;
|
|
typedef LARGE_INTEGER LUID,*PLUID;
|
|
#pragma pack(push,4)
|
|
typedef struct _LUID_AND_ATTRIBUTES {
|
|
LUID Luid;
|
|
DWORD Attributes;
|
|
} LUID_AND_ATTRIBUTES;
|
|
#pragma pack(pop)
|
|
typedef LUID_AND_ATTRIBUTES LUID_AND_ATTRIBUTES_ARRAY[ANYSIZE_ARRAY];
|
|
typedef LUID_AND_ATTRIBUTES_ARRAY *PLUID_AND_ATTRIBUTES_ARRAY;
|
|
typedef struct _PRIVILEGE_SET {
|
|
DWORD PrivilegeCount;
|
|
DWORD Control;
|
|
LUID_AND_ATTRIBUTES Privilege[ANYSIZE_ARRAY];
|
|
} PRIVILEGE_SET,*PPRIVILEGE_SET;
|
|
typedef struct _SECURITY_ATTRIBUTES {
|
|
DWORD nLength;
|
|
LPVOID lpSecurityDescriptor;
|
|
BOOL bInheritHandle;
|
|
} SECURITY_ATTRIBUTES,*PSECURITY_ATTRIBUTES,*LPSECURITY_ATTRIBUTES;
|
|
typedef enum _SECURITY_IMPERSONATION_LEVEL {
|
|
SecurityAnonymous,
|
|
SecurityIdentification,
|
|
SecurityImpersonation,
|
|
SecurityDelegation
|
|
} SECURITY_IMPERSONATION_LEVEL;
|
|
typedef BOOLEAN SECURITY_CONTEXT_TRACKING_MODE,*PSECURITY_CONTEXT_TRACKING_MODE;
|
|
typedef struct _SECURITY_QUALITY_OF_SERVICE {
|
|
DWORD Length;
|
|
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
|
|
SECURITY_CONTEXT_TRACKING_MODE ContextTrackingMode;
|
|
BOOLEAN EffectiveOnly;
|
|
} SECURITY_QUALITY_OF_SERVICE,*PSECURITY_QUALITY_OF_SERVICE;
|
|
typedef PVOID PACCESS_TOKEN;
|
|
typedef struct _SE_IMPERSONATION_STATE {
|
|
PACCESS_TOKEN Token;
|
|
BOOLEAN CopyOnOpen;
|
|
BOOLEAN EffectiveOnly;
|
|
SECURITY_IMPERSONATION_LEVEL Level;
|
|
} SE_IMPERSONATION_STATE,*PSE_IMPERSONATION_STATE;
|
|
|
|
typedef struct _SID_IDENTIFIER_AUTHORITY {
|
|
BYTE Value[6];
|
|
} SID_IDENTIFIER_AUTHORITY,*PSID_IDENTIFIER_AUTHORITY,*LPSID_IDENTIFIER_AUTHORITY;
|
|
typedef PVOID PSID;
|
|
typedef struct _SID {
|
|
BYTE Revision;
|
|
BYTE SubAuthorityCount;
|
|
SID_IDENTIFIER_AUTHORITY IdentifierAuthority;
|
|
DWORD SubAuthority[ANYSIZE_ARRAY];
|
|
} SID, *PISID;
|
|
typedef struct _SID_AND_ATTRIBUTES {
|
|
PSID Sid;
|
|
DWORD Attributes;
|
|
} SID_AND_ATTRIBUTES;
|
|
typedef SID_AND_ATTRIBUTES SID_AND_ATTRIBUTES_ARRAY[ANYSIZE_ARRAY];
|
|
typedef SID_AND_ATTRIBUTES_ARRAY *PSID_AND_ATTRIBUTES_ARRAY;
|
|
typedef struct _TOKEN_SOURCE {
|
|
CHAR SourceName[TOKEN_SOURCE_LENGTH];
|
|
LUID SourceIdentifier;
|
|
} TOKEN_SOURCE,*PTOKEN_SOURCE;
|
|
typedef struct _TOKEN_CONTROL {
|
|
LUID TokenId;
|
|
LUID AuthenticationId;
|
|
LUID ModifiedId;
|
|
TOKEN_SOURCE TokenSource;
|
|
} TOKEN_CONTROL,*PTOKEN_CONTROL;
|
|
typedef struct _TOKEN_DEFAULT_DACL {
|
|
PACL DefaultDacl;
|
|
} TOKEN_DEFAULT_DACL,*PTOKEN_DEFAULT_DACL;
|
|
typedef struct _TOKEN_GROUPS {
|
|
DWORD GroupCount;
|
|
SID_AND_ATTRIBUTES Groups[ANYSIZE_ARRAY];
|
|
} TOKEN_GROUPS,*PTOKEN_GROUPS,*LPTOKEN_GROUPS;
|
|
typedef struct _TOKEN_OWNER {
|
|
PSID Owner;
|
|
} TOKEN_OWNER,*PTOKEN_OWNER;
|
|
typedef struct _TOKEN_PRIMARY_GROUP {
|
|
PSID PrimaryGroup;
|
|
} TOKEN_PRIMARY_GROUP,*PTOKEN_PRIMARY_GROUP;
|
|
typedef struct _TOKEN_PRIVILEGES {
|
|
DWORD PrivilegeCount;
|
|
LUID_AND_ATTRIBUTES Privileges[ANYSIZE_ARRAY];
|
|
} TOKEN_PRIVILEGES,*PTOKEN_PRIVILEGES,*LPTOKEN_PRIVILEGES;
|
|
typedef enum tagTOKEN_TYPE { TokenPrimary=1,TokenImpersonation }TOKEN_TYPE;
|
|
typedef struct _TOKEN_STATISTICS {
|
|
LUID TokenId;
|
|
LUID AuthenticationId;
|
|
LARGE_INTEGER ExpirationTime;
|
|
TOKEN_TYPE TokenType;
|
|
SECURITY_IMPERSONATION_LEVEL ImpersonationLevel;
|
|
DWORD DynamicCharged;
|
|
DWORD DynamicAvailable;
|
|
DWORD GroupCount;
|
|
DWORD PrivilegeCount;
|
|
LUID ModifiedId;
|
|
} TOKEN_STATISTICS;
|
|
typedef struct _TOKEN_USER {
|
|
SID_AND_ATTRIBUTES User;
|
|
} TOKEN_USER, *PTOKEN_USER;
|
|
typedef DWORD SECURITY_INFORMATION,*PSECURITY_INFORMATION;
|
|
typedef WORD SECURITY_DESCRIPTOR_CONTROL,*PSECURITY_DESCRIPTOR_CONTROL;
|
|
typedef struct _SECURITY_DESCRIPTOR {
|
|
BYTE Revision;
|
|
BYTE Sbz1;
|
|
SECURITY_DESCRIPTOR_CONTROL Control;
|
|
PSID Owner;
|
|
PSID Group;
|
|
PACL Sacl;
|
|
PACL Dacl;
|
|
} SECURITY_DESCRIPTOR, *PSECURITY_DESCRIPTOR, *PISECURITY_DESCRIPTOR;
|
|
typedef enum _TOKEN_INFORMATION_CLASS {
|
|
TokenUser=1,TokenGroups,TokenPrivileges,TokenOwner,
|
|
TokenPrimaryGroup,TokenDefaultDacl,TokenSource,TokenType,
|
|
TokenImpersonationLevel,TokenStatistics,TokenRestrictedSids,
|
|
TokenSessionId
|
|
} TOKEN_INFORMATION_CLASS;
|
|
typedef enum _SID_NAME_USE {
|
|
SidTypeUser=1,SidTypeGroup,SidTypeDomain,SidTypeAlias,SidTypeWellKnownGroup,
|
|
SidTypeDeletedAccount,SidTypeInvalid,SidTypeUnknown
|
|
} SID_NAME_USE,*PSID_NAME_USE;
|
|
typedef struct _QUOTA_LIMITS {
|
|
SIZE_T PagedPoolLimit;
|
|
SIZE_T NonPagedPoolLimit;
|
|
SIZE_T MinimumWorkingSetSize;
|
|
SIZE_T MaximumWorkingSetSize;
|
|
SIZE_T PagefileLimit;
|
|
LARGE_INTEGER TimeLimit;
|
|
} QUOTA_LIMITS,*PQUOTA_LIMITS;
|
|
typedef struct _IO_COUNTERS {
|
|
ULONGLONG ReadOperationCount;
|
|
ULONGLONG WriteOperationCount;
|
|
ULONGLONG OtherOperationCount;
|
|
ULONGLONG ReadTransferCount;
|
|
ULONGLONG WriteTransferCount;
|
|
ULONGLONG OtherTransferCount;
|
|
} IO_COUNTERS, *PIO_COUNTERS;
|
|
typedef struct _FILE_NOTIFY_INFORMATION {
|
|
DWORD NextEntryOffset;
|
|
DWORD Action;
|
|
DWORD FileNameLength;
|
|
WCHAR FileName[1];
|
|
} FILE_NOTIFY_INFORMATION,*PFILE_NOTIFY_INFORMATION;
|
|
typedef struct _TAPE_ERASE {
|
|
DWORD Type;
|
|
BOOLEAN Immediate;
|
|
} TAPE_ERASE,*PTAPE_ERASE;
|
|
typedef struct _TAPE_GET_DRIVE_PARAMETERS {
|
|
BOOLEAN ECC;
|
|
BOOLEAN Compression;
|
|
BOOLEAN DataPadding;
|
|
BOOLEAN ReportSetmarks;
|
|
DWORD DefaultBlockSize;
|
|
DWORD MaximumBlockSize;
|
|
DWORD MinimumBlockSize;
|
|
DWORD MaximumPartitionCount;
|
|
DWORD FeaturesLow;
|
|
DWORD FeaturesHigh;
|
|
DWORD EOTWarningZoneSize;
|
|
} TAPE_GET_DRIVE_PARAMETERS,*PTAPE_GET_DRIVE_PARAMETERS;
|
|
typedef struct _TAPE_GET_MEDIA_PARAMETERS {
|
|
LARGE_INTEGER Capacity;
|
|
LARGE_INTEGER Remaining;
|
|
DWORD BlockSize;
|
|
DWORD PartitionCount;
|
|
BOOLEAN WriteProtected;
|
|
} TAPE_GET_MEDIA_PARAMETERS,*PTAPE_GET_MEDIA_PARAMETERS;
|
|
typedef struct _TAPE_GET_POSITION {
|
|
ULONG Type;
|
|
ULONG Partition;
|
|
ULONG OffsetLow;
|
|
ULONG OffsetHigh;
|
|
} TAPE_GET_POSITION,*PTAPE_GET_POSITION;
|
|
typedef struct _TAPE_PREPARE {
|
|
DWORD Operation;
|
|
BOOLEAN Immediate;
|
|
} TAPE_PREPARE,*PTAPE_PREPARE;
|
|
typedef struct _TAPE_SET_DRIVE_PARAMETERS {
|
|
BOOLEAN ECC;
|
|
BOOLEAN Compression;
|
|
BOOLEAN DataPadding;
|
|
BOOLEAN ReportSetmarks;
|
|
ULONG EOTWarningZoneSize;
|
|
} TAPE_SET_DRIVE_PARAMETERS,*PTAPE_SET_DRIVE_PARAMETERS;
|
|
typedef struct _TAPE_SET_MEDIA_PARAMETERS {
|
|
ULONG BlockSize;
|
|
} TAPE_SET_MEDIA_PARAMETERS,*PTAPE_SET_MEDIA_PARAMETERS;
|
|
typedef struct _TAPE_SET_POSITION {
|
|
DWORD Method;
|
|
DWORD Partition;
|
|
LARGE_INTEGER Offset;
|
|
BOOLEAN Immediate;
|
|
} TAPE_SET_POSITION,*PTAPE_SET_POSITION;
|
|
typedef struct _TAPE_WRITE_MARKS {
|
|
DWORD Type;
|
|
DWORD Count;
|
|
BOOLEAN Immediate;
|
|
} TAPE_WRITE_MARKS,*PTAPE_WRITE_MARKS;
|
|
typedef struct _TAPE_CREATE_PARTITION {
|
|
DWORD Method;
|
|
DWORD Count;
|
|
DWORD Size;
|
|
} TAPE_CREATE_PARTITION,*PTAPE_CREATE_PARTITION;
|
|
typedef struct _MEMORY_BASIC_INFORMATION {
|
|
PVOID BaseAddress;
|
|
PVOID AllocationBase;
|
|
DWORD AllocationProtect;
|
|
DWORD RegionSize;
|
|
DWORD State;
|
|
DWORD Protect;
|
|
DWORD Type;
|
|
} MEMORY_BASIC_INFORMATION,*PMEMORY_BASIC_INFORMATION;
|
|
typedef struct _MESSAGE_RESOURCE_ENTRY {
|
|
WORD Length;
|
|
WORD Flags;
|
|
BYTE Text[1];
|
|
} MESSAGE_RESOURCE_ENTRY,*PMESSAGE_RESOURCE_ENTRY;
|
|
typedef struct _MESSAGE_RESOURCE_BLOCK {
|
|
DWORD LowId;
|
|
DWORD HighId;
|
|
DWORD OffsetToEntries;
|
|
} MESSAGE_RESOURCE_BLOCK,*PMESSAGE_RESOURCE_BLOCK;
|
|
typedef struct _MESSAGE_RESOURCE_DATA {
|
|
DWORD NumberOfBlocks;
|
|
MESSAGE_RESOURCE_BLOCK Blocks[1];
|
|
} MESSAGE_RESOURCE_DATA,*PMESSAGE_RESOURCE_DATA;
|
|
typedef struct _LIST_ENTRY {
|
|
struct _LIST_ENTRY *Flink;
|
|
struct _LIST_ENTRY *Blink;
|
|
} LIST_ENTRY,*PLIST_ENTRY;
|
|
typedef struct _RTL_CRITICAL_SECTION_DEBUG {
|
|
WORD Type;
|
|
WORD CreatorBackTraceIndex;
|
|
struct _RTL_CRITICAL_SECTION *CriticalSection;
|
|
LIST_ENTRY ProcessLocksList;
|
|
DWORD EntryCount;
|
|
DWORD ContentionCount;
|
|
DWORD Spare[2];
|
|
} RTL_CRITICAL_SECTION_DEBUG,*PRTL_CRITICAL_SECTION_DEBUG;
|
|
typedef struct _RTL_CRITICAL_SECTION {
|
|
PRTL_CRITICAL_SECTION_DEBUG DebugInfo;
|
|
LONG LockCount;
|
|
LONG RecursionCount;
|
|
HANDLE OwningThread;
|
|
HANDLE LockSemaphore;
|
|
DWORD Reserved;
|
|
} RTL_CRITICAL_SECTION,*PRTL_CRITICAL_SECTION;
|
|
typedef struct _EVENTLOGRECORD {
|
|
DWORD Length;
|
|
DWORD Reserved;
|
|
DWORD RecordNumber;
|
|
DWORD TimeGenerated;
|
|
DWORD TimeWritten;
|
|
DWORD EventID;
|
|
WORD EventType;
|
|
WORD NumStrings;
|
|
WORD EventCategory;
|
|
WORD ReservedFlags;
|
|
DWORD ClosingRecordNumber;
|
|
DWORD StringOffset;
|
|
DWORD UserSidLength;
|
|
DWORD UserSidOffset;
|
|
DWORD DataLength;
|
|
DWORD DataOffset;
|
|
} EVENTLOGRECORD,*PEVENTLOGRECORD;
|
|
#pragma pack(push,2)
|
|
typedef struct _IMAGE_VXD_HEADER {
|
|
WORD e32_magic;
|
|
BYTE e32_border;
|
|
BYTE e32_worder;
|
|
DWORD e32_level;
|
|
WORD e32_cpu;
|
|
WORD e32_os;
|
|
DWORD e32_ver;
|
|
DWORD e32_mflags;
|
|
DWORD e32_mpages;
|
|
DWORD e32_startobj;
|
|
DWORD e32_eip;
|
|
DWORD e32_stackobj;
|
|
DWORD e32_esp;
|
|
DWORD e32_pagesize;
|
|
DWORD e32_lastpagesize;
|
|
DWORD e32_fixupsize;
|
|
DWORD e32_fixupsum;
|
|
DWORD e32_ldrsize;
|
|
DWORD e32_ldrsum;
|
|
DWORD e32_objtab;
|
|
DWORD e32_objcnt;
|
|
DWORD e32_objmap;
|
|
DWORD e32_itermap;
|
|
DWORD e32_rsrctab;
|
|
DWORD e32_rsrccnt;
|
|
DWORD e32_restab;
|
|
DWORD e32_enttab;
|
|
DWORD e32_dirtab;
|
|
DWORD e32_dircnt;
|
|
DWORD e32_fpagetab;
|
|
DWORD e32_frectab;
|
|
DWORD e32_impmod;
|
|
DWORD e32_impmodcnt;
|
|
DWORD e32_impproc;
|
|
DWORD e32_pagesum;
|
|
DWORD e32_datapage;
|
|
DWORD e32_preload;
|
|
DWORD e32_nrestab;
|
|
DWORD e32_cbnrestab;
|
|
DWORD e32_nressum;
|
|
DWORD e32_autodata;
|
|
DWORD e32_debuginfo;
|
|
DWORD e32_debuglen;
|
|
DWORD e32_instpreload;
|
|
DWORD e32_instdemand;
|
|
DWORD e32_heapsize;
|
|
BYTE e32_res3[12];
|
|
DWORD e32_winresoff;
|
|
DWORD e32_winreslen;
|
|
WORD e32_devid;
|
|
WORD e32_ddkver;
|
|
} IMAGE_VXD_HEADER,*PIMAGE_VXD_HEADER;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,4)
|
|
typedef struct _IMAGE_FILE_HEADER {
|
|
WORD Machine;
|
|
WORD NumberOfSections;
|
|
DWORD TimeDateStamp;
|
|
DWORD PointerToSymbolTable;
|
|
DWORD NumberOfSymbols;
|
|
WORD SizeOfOptionalHeader;
|
|
WORD Characteristics;
|
|
} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;
|
|
typedef struct _IMAGE_DATA_DIRECTORY {
|
|
DWORD VirtualAddress;
|
|
DWORD Size;
|
|
} IMAGE_DATA_DIRECTORY,*PIMAGE_DATA_DIRECTORY;
|
|
typedef struct _IMAGE_OPTIONAL_HEADER {
|
|
WORD Magic;
|
|
BYTE MajorLinkerVersion;
|
|
BYTE MinorLinkerVersion;
|
|
DWORD SizeOfCode;
|
|
DWORD SizeOfInitializedData;
|
|
DWORD SizeOfUninitializedData;
|
|
DWORD AddressOfEntryPoint;
|
|
DWORD BaseOfCode;
|
|
DWORD BaseOfData;
|
|
DWORD ImageBase;
|
|
DWORD SectionAlignment;
|
|
DWORD FileAlignment;
|
|
WORD MajorOperatingSystemVersion;
|
|
WORD MinorOperatingSystemVersion;
|
|
WORD MajorImageVersion;
|
|
WORD MinorImageVersion;
|
|
WORD MajorSubsystemVersion;
|
|
WORD MinorSubsystemVersion;
|
|
DWORD Reserved1;
|
|
DWORD SizeOfImage;
|
|
DWORD SizeOfHeaders;
|
|
DWORD CheckSum;
|
|
WORD Subsystem;
|
|
WORD DllCharacteristics;
|
|
DWORD SizeOfStackReserve;
|
|
DWORD SizeOfStackCommit;
|
|
DWORD SizeOfHeapReserve;
|
|
DWORD SizeOfHeapCommit;
|
|
DWORD LoaderFlags;
|
|
DWORD NumberOfRvaAndSizes;
|
|
IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
|
|
} IMAGE_OPTIONAL_HEADER,*PIMAGE_OPTIONAL_HEADER;
|
|
typedef struct _IMAGE_ROM_OPTIONAL_HEADER {
|
|
WORD Magic;
|
|
BYTE MajorLinkerVersion;
|
|
BYTE MinorLinkerVersion;
|
|
DWORD SizeOfCode;
|
|
DWORD SizeOfInitializedData;
|
|
DWORD SizeOfUninitializedData;
|
|
DWORD AddressOfEntryPoint;
|
|
DWORD BaseOfCode;
|
|
DWORD BaseOfData;
|
|
DWORD BaseOfBss;
|
|
DWORD GprMask;
|
|
DWORD CprMask[4];
|
|
DWORD GpValue;
|
|
} IMAGE_ROM_OPTIONAL_HEADER,*PIMAGE_ROM_OPTIONAL_HEADER;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,2)
|
|
typedef struct _IMAGE_DOS_HEADER {
|
|
WORD e_magic;
|
|
WORD e_cblp;
|
|
WORD e_cp;
|
|
WORD e_crlc;
|
|
WORD e_cparhdr;
|
|
WORD e_minalloc;
|
|
WORD e_maxalloc;
|
|
WORD e_ss;
|
|
WORD e_sp;
|
|
WORD e_csum;
|
|
WORD e_ip;
|
|
WORD e_cs;
|
|
WORD e_lfarlc;
|
|
WORD e_ovno;
|
|
WORD e_res[4];
|
|
WORD e_oemid;
|
|
WORD e_oeminfo;
|
|
WORD e_res2[10];
|
|
LONG e_lfanew;
|
|
} IMAGE_DOS_HEADER,*PIMAGE_DOS_HEADER;
|
|
typedef struct _IMAGE_OS2_HEADER {
|
|
WORD ne_magic;
|
|
CHAR ne_ver;
|
|
CHAR ne_rev;
|
|
WORD ne_enttab;
|
|
WORD ne_cbenttab;
|
|
LONG ne_crc;
|
|
WORD ne_flags;
|
|
WORD ne_autodata;
|
|
WORD ne_heap;
|
|
WORD ne_stack;
|
|
LONG ne_csip;
|
|
LONG ne_sssp;
|
|
WORD ne_cseg;
|
|
WORD ne_cmod;
|
|
WORD ne_cbnrestab;
|
|
WORD ne_segtab;
|
|
WORD ne_rsrctab;
|
|
WORD ne_restab;
|
|
WORD ne_modtab;
|
|
WORD ne_imptab;
|
|
LONG ne_nrestab;
|
|
WORD ne_cmovent;
|
|
WORD ne_align;
|
|
WORD ne_cres;
|
|
BYTE ne_exetyp;
|
|
BYTE ne_flagsothers;
|
|
WORD ne_pretthunks;
|
|
WORD ne_psegrefbytes;
|
|
WORD ne_swaparea;
|
|
WORD ne_expver;
|
|
} IMAGE_OS2_HEADER,*PIMAGE_OS2_HEADER;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,4)
|
|
typedef struct _IMAGE_NT_HEADERS {
|
|
DWORD Signature;
|
|
IMAGE_FILE_HEADER FileHeader;
|
|
IMAGE_OPTIONAL_HEADER OptionalHeader;
|
|
} IMAGE_NT_HEADERS,*PIMAGE_NT_HEADERS;
|
|
typedef struct _IMAGE_ROM_HEADERS {
|
|
IMAGE_FILE_HEADER FileHeader;
|
|
IMAGE_ROM_OPTIONAL_HEADER OptionalHeader;
|
|
} IMAGE_ROM_HEADERS,*PIMAGE_ROM_HEADERS;
|
|
typedef struct _IMAGE_SECTION_HEADER {
|
|
BYTE Name[IMAGE_SIZEOF_SHORT_NAME];
|
|
union {
|
|
DWORD PhysicalAddress;
|
|
DWORD VirtualSize;
|
|
} Misc;
|
|
DWORD VirtualAddress;
|
|
DWORD SizeOfRawData;
|
|
DWORD PointerToRawData;
|
|
DWORD PointerToRelocations;
|
|
DWORD PointerToLinenumbers;
|
|
WORD NumberOfRelocations;
|
|
WORD NumberOfLinenumbers;
|
|
DWORD Characteristics;
|
|
} IMAGE_SECTION_HEADER,*PIMAGE_SECTION_HEADER;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,2)
|
|
typedef struct _IMAGE_SYMBOL {
|
|
union {
|
|
BYTE ShortName[8];
|
|
struct {
|
|
DWORD Short;
|
|
DWORD Long;
|
|
} Name;
|
|
PBYTE LongName[2];
|
|
} N;
|
|
DWORD Value;
|
|
SHORT SectionNumber;
|
|
WORD Type;
|
|
BYTE StorageClass;
|
|
BYTE NumberOfAuxSymbols;
|
|
} IMAGE_SYMBOL,*PIMAGE_SYMBOL;
|
|
typedef union _IMAGE_AUX_SYMBOL {
|
|
struct {
|
|
DWORD TagIndex;
|
|
union {
|
|
struct {
|
|
WORD Linenumber;
|
|
WORD Size;
|
|
} LnSz;
|
|
DWORD TotalSize;
|
|
} Misc;
|
|
union {
|
|
struct {
|
|
DWORD PointerToLinenumber;
|
|
DWORD PointerToNextFunction;
|
|
} Function;
|
|
struct {
|
|
WORD Dimension[4];
|
|
} Array;
|
|
} FcnAry;
|
|
WORD TvIndex;
|
|
} Sym;
|
|
struct {
|
|
BYTE Name[IMAGE_SIZEOF_SYMBOL];
|
|
} File;
|
|
struct {
|
|
DWORD Length;
|
|
WORD NumberOfRelocations;
|
|
WORD NumberOfLinenumbers;
|
|
DWORD CheckSum;
|
|
SHORT Number;
|
|
BYTE Selection;
|
|
} Section;
|
|
} IMAGE_AUX_SYMBOL,*PIMAGE_AUX_SYMBOL;
|
|
typedef struct _IMAGE_COFF_SYMBOLS_HEADER {
|
|
DWORD NumberOfSymbols;
|
|
DWORD LvaToFirstSymbol;
|
|
DWORD NumberOfLinenumbers;
|
|
DWORD LvaToFirstLinenumber;
|
|
DWORD RvaToFirstByteOfCode;
|
|
DWORD RvaToLastByteOfCode;
|
|
DWORD RvaToFirstByteOfData;
|
|
DWORD RvaToLastByteOfData;
|
|
} IMAGE_COFF_SYMBOLS_HEADER,*PIMAGE_COFF_SYMBOLS_HEADER;
|
|
typedef struct _IMAGE_RELOCATION {
|
|
_ANONYMOUS_UNION union {
|
|
DWORD VirtualAddress;
|
|
DWORD RelocCount;
|
|
} DUMMYUNIONNAME;
|
|
DWORD SymbolTableIndex;
|
|
WORD Type;
|
|
} IMAGE_RELOCATION,*PIMAGE_RELOCATION;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,4)
|
|
typedef struct _IMAGE_BASE_RELOCATION {
|
|
DWORD VirtualAddress;
|
|
DWORD SizeOfBlock;
|
|
} IMAGE_BASE_RELOCATION,*PIMAGE_BASE_RELOCATION;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,2)
|
|
typedef struct _IMAGE_LINENUMBER {
|
|
union {
|
|
DWORD SymbolTableIndex;
|
|
DWORD VirtualAddress;
|
|
} Type;
|
|
WORD Linenumber;
|
|
} IMAGE_LINENUMBER,*PIMAGE_LINENUMBER;
|
|
#pragma pack(pop)
|
|
#pragma pack(push,4)
|
|
typedef struct _IMAGE_ARCHIVE_MEMBER_HEADER {
|
|
BYTE Name[16];
|
|
BYTE Date[12];
|
|
BYTE UserID[6];
|
|
BYTE GroupID[6];
|
|
BYTE Mode[8];
|
|
BYTE Size[10];
|
|
BYTE EndHeader[2];
|
|
} IMAGE_ARCHIVE_MEMBER_HEADER,*PIMAGE_ARCHIVE_MEMBER_HEADER;
|
|
typedef struct _IMAGE_EXPORT_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD Name;
|
|
DWORD Base;
|
|
DWORD NumberOfFunctions;
|
|
DWORD NumberOfNames;
|
|
PDWORD *AddressOfFunctions;
|
|
PDWORD *AddressOfNames;
|
|
PWORD *AddressOfNameOrdinals;
|
|
} IMAGE_EXPORT_DIRECTORY,*PIMAGE_EXPORT_DIRECTORY;
|
|
typedef struct _IMAGE_IMPORT_BY_NAME {
|
|
WORD Hint;
|
|
BYTE Name[1];
|
|
} IMAGE_IMPORT_BY_NAME,*PIMAGE_IMPORT_BY_NAME;
|
|
typedef struct _IMAGE_THUNK_DATA {
|
|
union {
|
|
PBYTE ForwarderString;
|
|
PDWORD Function;
|
|
DWORD Ordinal;
|
|
PIMAGE_IMPORT_BY_NAME AddressOfData;
|
|
} u1;
|
|
} IMAGE_THUNK_DATA,*PIMAGE_THUNK_DATA;
|
|
typedef struct _IMAGE_IMPORT_DESCRIPTOR {
|
|
_ANONYMOUS_UNION union {
|
|
DWORD Characteristics;
|
|
PIMAGE_THUNK_DATA OriginalFirstThunk;
|
|
} DUMMYUNIONNAME;
|
|
DWORD TimeDateStamp;
|
|
DWORD ForwarderChain;
|
|
DWORD Name;
|
|
PIMAGE_THUNK_DATA FirstThunk;
|
|
} IMAGE_IMPORT_DESCRIPTOR,*PIMAGE_IMPORT_DESCRIPTOR;
|
|
typedef struct _IMAGE_BOUND_IMPORT_DESCRIPTOR {
|
|
DWORD TimeDateStamp;
|
|
WORD OffsetModuleName;
|
|
WORD NumberOfModuleForwarderRefs;
|
|
} IMAGE_BOUND_IMPORT_DESCRIPTOR,*PIMAGE_BOUND_IMPORT_DESCRIPTOR;
|
|
typedef struct _IMAGE_BOUND_FORWARDER_REF {
|
|
DWORD TimeDateStamp;
|
|
WORD OffsetModuleName;
|
|
WORD Reserved;
|
|
} IMAGE_BOUND_FORWARDER_REF,*PIMAGE_BOUND_FORWARDER_REF;
|
|
typedef void(NTAPI *PIMAGE_TLS_CALLBACK)(PVOID,DWORD,PVOID);
|
|
typedef struct _IMAGE_TLS_DIRECTORY {
|
|
DWORD StartAddressOfRawData;
|
|
DWORD EndAddressOfRawData;
|
|
PDWORD AddressOfIndex;
|
|
PIMAGE_TLS_CALLBACK *AddressOfCallBacks;
|
|
DWORD SizeOfZeroFill;
|
|
DWORD Characteristics;
|
|
} IMAGE_TLS_DIRECTORY,*PIMAGE_TLS_DIRECTORY;
|
|
typedef struct _IMAGE_RESOURCE_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
WORD NumberOfNamedEntries;
|
|
WORD NumberOfIdEntries;
|
|
} IMAGE_RESOURCE_DIRECTORY,*PIMAGE_RESOURCE_DIRECTORY;
|
|
_ANONYMOUS_STRUCT typedef struct _IMAGE_RESOURCE_DIRECTORY_ENTRY {
|
|
_ANONYMOUS_UNION union {
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD NameOffset:31;
|
|
DWORD NameIsString:1;
|
|
}DUMMYSTRUCTNAME;
|
|
DWORD Name;
|
|
WORD Id;
|
|
} DUMMYUNIONNAME;
|
|
_ANONYMOUS_UNION union {
|
|
DWORD OffsetToData;
|
|
_ANONYMOUS_STRUCT struct {
|
|
DWORD OffsetToDirectory:31;
|
|
DWORD DataIsDirectory:1;
|
|
} DUMMYSTRUCTNAME2;
|
|
} DUMMYUNIONNAME2;
|
|
} IMAGE_RESOURCE_DIRECTORY_ENTRY,*PIMAGE_RESOURCE_DIRECTORY_ENTRY;
|
|
typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING {
|
|
WORD Length;
|
|
CHAR NameString[1];
|
|
} IMAGE_RESOURCE_DIRECTORY_STRING,*PIMAGE_RESOURCE_DIRECTORY_STRING;
|
|
typedef struct _IMAGE_RESOURCE_DIR_STRING_U {
|
|
WORD Length;
|
|
WCHAR NameString[1];
|
|
} IMAGE_RESOURCE_DIR_STRING_U,*PIMAGE_RESOURCE_DIR_STRING_U;
|
|
typedef struct _IMAGE_RESOURCE_DATA_ENTRY {
|
|
DWORD OffsetToData;
|
|
DWORD Size;
|
|
DWORD CodePage;
|
|
DWORD Reserved;
|
|
} IMAGE_RESOURCE_DATA_ENTRY,*PIMAGE_RESOURCE_DATA_ENTRY;
|
|
typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD GlobalFlagsClear;
|
|
DWORD GlobalFlagsSet;
|
|
DWORD CriticalSectionDefaultTimeout;
|
|
DWORD DeCommitFreeBlockThreshold;
|
|
DWORD DeCommitTotalFreeThreshold;
|
|
PVOID LockPrefixTable;
|
|
DWORD MaximumAllocationSize;
|
|
DWORD VirtualMemoryThreshold;
|
|
DWORD ProcessHeapFlags;
|
|
DWORD Reserved[4];
|
|
} IMAGE_LOAD_CONFIG_DIRECTORY,*PIMAGE_LOAD_CONFIG_DIRECTORY;
|
|
typedef struct _IMAGE_RUNTIME_FUNCTION_ENTRY {
|
|
DWORD BeginAddress;
|
|
DWORD EndAddress;
|
|
PVOID ExceptionHandler;
|
|
PVOID HandlerData;
|
|
DWORD PrologEndAddress;
|
|
} IMAGE_RUNTIME_FUNCTION_ENTRY,*PIMAGE_RUNTIME_FUNCTION_ENTRY;
|
|
typedef struct _IMAGE_DEBUG_DIRECTORY {
|
|
DWORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
WORD MajorVersion;
|
|
WORD MinorVersion;
|
|
DWORD Type;
|
|
DWORD SizeOfData;
|
|
DWORD AddressOfRawData;
|
|
DWORD PointerToRawData;
|
|
} IMAGE_DEBUG_DIRECTORY,*PIMAGE_DEBUG_DIRECTORY;
|
|
typedef struct _FPO_DATA {
|
|
DWORD ulOffStart;
|
|
DWORD cbProcSize;
|
|
DWORD cdwLocals;
|
|
WORD cdwParams;
|
|
WORD cbProlog:8;
|
|
WORD cbRegs:3;
|
|
WORD fHasSEH:1;
|
|
WORD fUseBP:1;
|
|
WORD reserved:1;
|
|
WORD cbFrame:2;
|
|
} FPO_DATA,*PFPO_DATA;
|
|
typedef struct _IMAGE_DEBUG_MISC {
|
|
DWORD DataType;
|
|
DWORD Length;
|
|
BOOLEAN Unicode;
|
|
BYTE Reserved[3];
|
|
BYTE Data[1];
|
|
} IMAGE_DEBUG_MISC,*PIMAGE_DEBUG_MISC;
|
|
typedef struct _IMAGE_FUNCTION_ENTRY {
|
|
DWORD StartingAddress;
|
|
DWORD EndingAddress;
|
|
DWORD EndOfPrologue;
|
|
} IMAGE_FUNCTION_ENTRY,*PIMAGE_FUNCTION_ENTRY;
|
|
typedef struct _IMAGE_SEPARATE_DEBUG_HEADER {
|
|
WORD Signature;
|
|
WORD Flags;
|
|
WORD Machine;
|
|
WORD Characteristics;
|
|
DWORD TimeDateStamp;
|
|
DWORD CheckSum;
|
|
DWORD ImageBase;
|
|
DWORD SizeOfImage;
|
|
DWORD NumberOfSections;
|
|
DWORD ExportedNamesSize;
|
|
DWORD DebugDirectorySize;
|
|
DWORD Reserved[3];
|
|
} IMAGE_SEPARATE_DEBUG_HEADER,*PIMAGE_SEPARATE_DEBUG_HEADER;
|
|
#pragma pack(pop)
|
|
typedef enum _CM_SERVICE_NODE_TYPE {
|
|
DriverType=SERVICE_KERNEL_DRIVER,
|
|
FileSystemType=SERVICE_FILE_SYSTEM_DRIVER,
|
|
Win32ServiceOwnProcess=SERVICE_WIN32_OWN_PROCESS,
|
|
Win32ServiceShareProcess=SERVICE_WIN32_SHARE_PROCESS,
|
|
AdapterType=SERVICE_ADAPTER,
|
|
RecognizerType=SERVICE_RECOGNIZER_DRIVER
|
|
} SERVICE_NODE_TYPE;
|
|
typedef enum _CM_SERVICE_LOAD_TYPE {
|
|
BootLoad=SERVICE_BOOT_START,
|
|
SystemLoad=SERVICE_SYSTEM_START,
|
|
AutoLoad=SERVICE_AUTO_START,
|
|
DemandLoad=SERVICE_DEMAND_START,
|
|
DisableLoad=SERVICE_DISABLED
|
|
} SERVICE_LOAD_TYPE;
|
|
typedef enum _CM_ERROR_CONTROL_TYPE {
|
|
IgnoreError=SERVICE_ERROR_IGNORE,
|
|
NormalError=SERVICE_ERROR_NORMAL,
|
|
SevereError=SERVICE_ERROR_SEVERE,
|
|
CriticalError=SERVICE_ERROR_CRITICAL
|
|
} SERVICE_ERROR_TYPE;
|
|
typedef struct _NT_TIB {
|
|
struct _EXCEPTION_REGISTRATION_RECORD *ExceptionList;
|
|
PVOID StackBase;
|
|
PVOID StackLimit;
|
|
PVOID SubSystemTib;
|
|
_ANONYMOUS_UNION union {
|
|
PVOID FiberData;
|
|
DWORD Version;
|
|
} DUMMYUNIONNAME;
|
|
PVOID ArbitraryUserPointer;
|
|
struct _NT_TIB *Self;
|
|
} NT_TIB,*PNT_TIB;
|
|
typedef struct _REPARSE_DATA_BUFFER {
|
|
DWORD ReparseTag;
|
|
WORD ReparseDataLength;
|
|
WORD Reserved;
|
|
_ANONYMOUS_UNION union {
|
|
struct {
|
|
WORD SubstituteNameOffset;
|
|
WORD SubstituteNameLength;
|
|
WORD PrintNameOffset;
|
|
WORD PrintNameLength;
|
|
WCHAR PathBuffer[1];
|
|
} SymbolicLinkReparseBuffer;
|
|
struct {
|
|
WORD SubstituteNameOffset;
|
|
WORD SubstituteNameLength;
|
|
WORD PrintNameOffset;
|
|
WORD PrintNameLength;
|
|
WCHAR PathBuffer[1];
|
|
} MountPointReparseBuffer;
|
|
struct {
|
|
BYTE DataBuffer[1];
|
|
} GenericReparseBuffer;
|
|
};
|
|
} REPARSE_DATA_BUFFER, *PREPARSE_DATA_BUFFER;
|
|
typedef struct _REPARSE_GUID_DATA_BUFFER {
|
|
DWORD ReparseTag;
|
|
WORD ReparseDataLength;
|
|
WORD Reserved;
|
|
GUID ReparseGuid;
|
|
struct {
|
|
BYTE DataBuffer[1];
|
|
} GenericReparseBuffer;
|
|
} REPARSE_GUID_DATA_BUFFER, *PREPARSE_GUID_DATA_BUFFER;
|
|
typedef struct _REPARSE_POINT_INFORMATION {
|
|
WORD ReparseDataLength;
|
|
WORD UnparsedNameLength;
|
|
} REPARSE_POINT_INFORMATION, *PREPARSE_POINT_INFORMATION;
|
|
extern __inline PVOID GetCurrentFiber(void)
|
|
{
|
|
void* ret;
|
|
__asm__ volatile ("\n\
|
|
movl %%fs:0x10,%0\n\
|
|
movl (%0),%0\n\
|
|
" : "=r" (ret) /* allow use of reg eax, ebx, ecx, edx, esi, edi */
|
|
:
|
|
);
|
|
return ret;
|
|
}
|
|
extern __inline PVOID GetFiberData(void)
|
|
{
|
|
void* ret;
|
|
__asm__ volatile ("\n\
|
|
movl %%fs:0x10,%0\n\
|
|
" : "=r" (ret) /* allow use of reg eax,ebx,ecx,edx,esi,edi */
|
|
:
|
|
);
|
|
return ret;
|
|
}
|
|
#endif
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
#endif
|
|
|