3 Copyright (c) Alex Ionescu. All rights reserved.
11 Type definitions for the Run-Time Library
15 Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
29 // Maximum Atom Length
31 #define RTL_MAXIMUM_ATOM_LENGTH 255
34 // Process Parameters Flags
36 #define RTL_USER_PROCESS_PARAMETERS_NORMALIZED 0x01
37 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_USER 0x02
38 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_SERVER 0x04
39 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_KERNEL 0x08
40 #define RTL_USER_PROCESS_PARAMETERS_UNKNOWN 0x10
41 #define RTL_USER_PROCESS_PARAMETERS_RESERVE_1MB 0x20
42 #define RTL_USER_PROCESS_PARAMETERS_DISABLE_HEAP_CHECKS 0x100
43 #define RTL_USER_PROCESS_PARAMETERS_PROCESS_OR_1 0x200
44 #define RTL_USER_PROCESS_PARAMETERS_PROCESS_OR_2 0x400
45 #define RTL_USER_PROCESS_PARAMETERS_PRIVATE_DLL_PATH 0x1000
46 #define RTL_USER_PROCESS_PARAMETERS_LOCAL_DLL_PATH 0x2000
47 #define RTL_USER_PROCESS_PARAMETERS_NX 0x20000
52 #define EXCEPTION_CHAIN_END ((PEXCEPTION_REGISTRATION_RECORD)-1)
53 #define EXCEPTION_UNWINDING 0x02
54 #define EXCEPTION_EXIT_UNWIND 0x04
55 #define EXCEPTION_STACK_INVALID 0x08
56 #define EXCEPTION_UNWIND (EXCEPTION_UNWINDING + EXCEPTION_EXIT_UNWIND)
57 #define EXCEPTION_NESTED_CALL 0x10
58 #define EXCEPTION_TARGET_UNWIND 0x20
59 #define EXCEPTION_COLLIDED_UNWIND 0x20
62 // Range and Range List Flags
64 #define RTL_RANGE_LIST_ADD_IF_CONFLICT 0x00000001
65 #define RTL_RANGE_LIST_ADD_SHARED 0x00000002
67 #define RTL_RANGE_SHARED 0x01
68 #define RTL_RANGE_CONFLICT 0x02
71 // Activation Context Frame Flags
73 #define RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_FORMAT_WHISTLER \
79 #if !defined(NTOS_MODE_USER) && !defined(_NTIFS_)
80 #define HEAP_NO_SERIALIZE 0x00000001
81 #define HEAP_GROWABLE 0x00000002
82 #define HEAP_GENERATE_EXCEPTIONS 0x00000004
83 #define HEAP_ZERO_MEMORY 0x00000008
84 #define HEAP_REALLOC_IN_PLACE_ONLY 0x00000010
85 #define HEAP_TAIL_CHECKING_ENABLED 0x00000020
86 #define HEAP_FREE_CHECKING_ENABLED 0x00000040
87 #define HEAP_DISABLE_COALESCE_ON_FREE 0x00000080
88 #define HEAP_CREATE_ALIGN_16 0x00010000
89 #define HEAP_CREATE_ENABLE_TRACING 0x00020000
90 #define HEAP_CREATE_ENABLE_EXECUTE 0x00040000
94 // User-Defined Heap Flags and Classes
96 #define HEAP_SETTABLE_USER_VALUE 0x00000100
97 #define HEAP_SETTABLE_USER_FLAG1 0x00000200
98 #define HEAP_SETTABLE_USER_FLAG2 0x00000400
99 #define HEAP_SETTABLE_USER_FLAG3 0x00000800
100 #define HEAP_SETTABLE_USER_FLAGS 0x00000E00
101 #define HEAP_CLASS_0 0x00000000
102 #define HEAP_CLASS_1 0x00001000
103 #define HEAP_CLASS_2 0x00002000
104 #define HEAP_CLASS_3 0x00003000
105 #define HEAP_CLASS_4 0x00004000
106 #define HEAP_CLASS_5 0x00005000
107 #define HEAP_CLASS_6 0x00006000
108 #define HEAP_CLASS_7 0x00007000
109 #define HEAP_CLASS_8 0x00008000
110 #define HEAP_CLASS_MASK 0x0000F000
113 // Internal HEAP Structure Flags
115 #define HEAP_FLAG_PAGE_ALLOCS 0x01000000
116 #define HEAP_PROTECTION_ENABLED 0x02000000
117 #define HEAP_BREAK_WHEN_OUT_OF_VM 0x04000000
118 #define HEAP_NO_ALIGNMENT 0x08000000
119 #define HEAP_CAPTURE_STACK_BACKTRACES 0x08000000
120 #define HEAP_SKIP_VALIDATION_CHECKS 0x10000000
121 #define HEAP_VALIDATE_ALL_ENABLED 0x20000000
122 #define HEAP_VALIDATE_PARAMETERS_ENABLED 0x40000000
123 #define HEAP_LOCK_USER_ALLOCATED 0x80000000
126 // Heap Validation Flags
128 #define HEAP_CREATE_VALID_MASK \
129 (HEAP_NO_SERIALIZE | \
131 HEAP_GENERATE_EXCEPTIONS | \
133 HEAP_REALLOC_IN_PLACE_ONLY | \
134 HEAP_TAIL_CHECKING_ENABLED | \
135 HEAP_FREE_CHECKING_ENABLED | \
136 HEAP_DISABLE_COALESCE_ON_FREE | \
138 HEAP_CREATE_ALIGN_16 | \
139 HEAP_CREATE_ENABLE_TRACING | \
140 HEAP_CREATE_ENABLE_EXECUTE)
142 C_ASSERT(HEAP_CREATE_VALID_MASK
== 0x0007F0FF);
148 #define RTL_REGISTRY_ABSOLUTE 0
149 #define RTL_REGISTRY_SERVICES 1
150 #define RTL_REGISTRY_CONTROL 2
151 #define RTL_REGISTRY_WINDOWS_NT 3
152 #define RTL_REGISTRY_DEVICEMAP 4
153 #define RTL_REGISTRY_USER 5
154 #define RTL_REGISTRY_MAXIMUM 6
155 #define RTL_REGISTRY_HANDLE 0x40000000
156 #define RTL_REGISTRY_OPTIONAL 0x80000000
157 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
158 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
159 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
160 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
161 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
162 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
163 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
168 #define VER_MINORVERSION 0x0000001
169 #define VER_MAJORVERSION 0x0000002
170 #define VER_BUILDNUMBER 0x0000004
171 #define VER_PLATFORMID 0x0000008
172 #define VER_SERVICEPACKMINOR 0x0000010
173 #define VER_SERVICEPACKMAJOR 0x0000020
174 #define VER_SUITENAME 0x0000040
175 #define VER_PRODUCT_TYPE 0x0000080
176 #define VER_PLATFORM_WIN32s 0
177 #define VER_PLATFORM_WIN32_WINDOWS 1
178 #define VER_PLATFORM_WIN32_NT 2
180 #define VER_GREATER 2
181 #define VER_GREATER_EQUAL 3
183 #define VER_LESS_EQUAL 5
186 #define VER_CONDITION_MASK 7
187 #define VER_NUM_BITS_PER_CONDITION_MASK 3
192 #define TIME_ZONE_ID_UNKNOWN 0
193 #define TIME_ZONE_ID_STANDARD 1
194 #define TIME_ZONE_ID_DAYLIGHT 2
197 // Maximum Path Length
202 // RTL Lock Type (Critical Section or Resource)
204 #define RTL_CRITSECT_TYPE 0
205 #define RTL_RESOURCE_TYPE 1
208 // RtlAcquirePrivileges Flags
210 #define RTL_ACQUIRE_PRIVILEGE_IMPERSONATE 1
211 #define RTL_ACQUIRE_PRIVILEGE_PROCESS 2
213 #ifdef NTOS_MODE_USER
216 // String Hash Algorithms
218 #define HASH_STRING_ALGORITHM_DEFAULT 0
219 #define HASH_STRING_ALGORITHM_X65599 1
220 #define HASH_STRING_ALGORITHM_INVALID 0xffffffff
223 // RtlDuplicateString Flags
225 #define RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE 1
226 #define RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING 2
229 // RtlFindCharInUnicodeString Flags
231 #define RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE 4
236 #define NLS_MB_CODE_PAGE_TAG NlsMbCodePageTag
237 #define NLS_MB_OEM_CODE_PAGE_TAG NlsMbOemCodePageTag
238 #define NLS_OEM_LEAD_BYTE_INFO NlsOemLeadByteInfo
243 #if defined(__cplusplus)
244 #define RTL_CONST_CAST(type) const_cast<type>
246 #define RTL_CONST_CAST(type) (type)
250 // Constant String Macro
252 #define RTL_CONSTANT_STRING(__SOURCE_STRING__) \
254 sizeof(__SOURCE_STRING__) - sizeof((__SOURCE_STRING__)[0]), \
255 sizeof(__SOURCE_STRING__), \
256 (__SOURCE_STRING__) \
260 // Constant Object Attributes Macro
262 #define RTL_CONSTANT_OBJECT_ATTRIBUTES(n, a) \
264 sizeof(OBJECT_ATTRIBUTES), \
266 RTL_CONST_CAST(PUNICODE_STRING)(n), \
272 #define RTL_INIT_OBJECT_ATTRIBUTES(n, a) \
273 RTL_CONSTANT_OBJECT_ATTRIBUTES(n, a)
277 // Message Resource Flag
279 #define MESSAGE_RESOURCE_UNICODE 0x0001
282 #define MAXIMUM_LEADBYTES 12
287 #define RTL_DEBUG_QUERY_MODULES 0x01
288 #define RTL_DEBUG_QUERY_BACKTRACES 0x02
289 #define RTL_DEBUG_QUERY_HEAPS 0x04
290 #define RTL_DEBUG_QUERY_HEAP_TAGS 0x08
291 #define RTL_DEBUG_QUERY_HEAP_BLOCKS 0x10
292 #define RTL_DEBUG_QUERY_LOCKS 0x20
297 #define RTL_HANDLE_VALID 0x1
302 #define RTL_ATOM_IS_PINNED 0x1
305 // Critical section lock bits
307 #define CS_LOCK_BIT 0x1
308 #define CS_LOCK_BIT_V 0x0
309 #define CS_LOCK_WAITER_WOKEN 0x2
310 #define CS_LOCK_WAITER_INC 0x4
315 #ifdef NTOS_MODE_USER
316 extern BOOLEAN NTSYSAPI NLS_MB_CODE_PAGE_TAG
;
317 extern BOOLEAN NTSYSAPI NLS_MB_OEM_CODE_PAGE_TAG
;
320 // Constant String Macro
322 #define RTL_CONSTANT_STRING(__SOURCE_STRING__) \
324 sizeof(__SOURCE_STRING__) - sizeof((__SOURCE_STRING__)[0]), \
325 sizeof(__SOURCE_STRING__), \
326 (__SOURCE_STRING__) \
331 #ifdef NTOS_MODE_USER
334 // Table and Compare result types
336 typedef enum _TABLE_SEARCH_RESULT
342 } TABLE_SEARCH_RESULT
;
344 typedef enum _RTL_GENERIC_COMPARE_RESULTS
349 } RTL_GENERIC_COMPARE_RESULTS
;
356 typedef enum _RTL_PATH_TYPE
359 RtlPathTypeUncAbsolute
,
360 RtlPathTypeDriveAbsolute
,
361 RtlPathTypeDriveRelative
,
364 RtlPathTypeLocalDevice
,
365 RtlPathTypeRootLocalDevice
,
368 #ifndef NTOS_MODE_USER
371 // Callback function for RTL Timers or Registered Waits
374 (NTAPI
*WAITORTIMERCALLBACKFUNC
)(
376 BOOLEAN fTimerOrWaitFired
380 // Handler during Vectored RTL Exceptions
383 (NTAPI
*PVECTORED_EXCEPTION_HANDLER
)(
384 PEXCEPTION_POINTERS ExceptionPointers
388 // Worker Thread Callback for Rtl
391 (NTAPI
*WORKERCALLBACKFUNC
)(
398 // Handler during regular RTL Exceptions
400 typedef EXCEPTION_DISPOSITION
401 (NTAPI
*PEXCEPTION_ROUTINE
)(
402 IN
struct _EXCEPTION_RECORD
*ExceptionRecord
,
403 IN PVOID EstablisherFrame
,
404 IN OUT
struct _CONTEXT
*ContextRecord
,
405 IN OUT PVOID DispatcherContext
409 // RTL Library Allocation/Free Routines
412 (NTAPI
*PRTL_ALLOCATE_STRING_ROUTINE
)(
417 (NTAPI
*PRTL_REALLOCATE_STRING_ROUTINE
)(
418 SIZE_T NumberOfBytes
,
424 (NTAPI
*PRTL_FREE_STRING_ROUTINE
)(
428 extern const PRTL_ALLOCATE_STRING_ROUTINE RtlAllocateStringRoutine
;
429 extern const PRTL_FREE_STRING_ROUTINE RtlFreeStringRoutine
;
430 extern const PRTL_REALLOCATE_STRING_ROUTINE RtlReallocateStringRoutine
;
435 // Callback for RTL Heap Enumeration
438 (*PHEAP_ENUMERATION_ROUTINE
)(
444 // Thread and Process Start Routines for RtlCreateUserThread/Process
446 typedef ULONG (NTAPI
*PTHREAD_START_ROUTINE
)(
451 (NTAPI
*PRTL_BASE_PROCESS_START_ROUTINE
)(
452 PTHREAD_START_ROUTINE StartAddress
,
457 // Declare empty structure definitions so that they may be referenced by
458 // routines before they are defined
460 struct _RTL_AVL_TABLE
;
461 struct _RTL_GENERIC_TABLE
;
463 typedef struct _COMPRESSED_DATA_INFO COMPRESSED_DATA_INFO
, *PCOMPRESSED_DATA_INFO
;
466 // Routines and callbacks for the RTL AVL/Generic Table package
468 #if defined(NTOS_MODE_USER) || (!defined(NTOS_MODE_USER) && !defined(_NTIFS_))
470 (NTAPI
*PRTL_AVL_MATCH_FUNCTION
)(
471 struct _RTL_AVL_TABLE
*Table
,
476 typedef RTL_GENERIC_COMPARE_RESULTS
477 (NTAPI
*PRTL_AVL_COMPARE_ROUTINE
) (
478 struct _RTL_AVL_TABLE
*Table
,
483 typedef RTL_GENERIC_COMPARE_RESULTS
484 (NTAPI
*PRTL_GENERIC_COMPARE_ROUTINE
) (
485 struct _RTL_GENERIC_TABLE
*Table
,
491 (NTAPI
*PRTL_GENERIC_ALLOCATE_ROUTINE
) (
492 struct _RTL_GENERIC_TABLE
*Table
,
497 (NTAPI
*PRTL_GENERIC_FREE_ROUTINE
) (
498 struct _RTL_GENERIC_TABLE
*Table
,
503 (NTAPI
*PRTL_AVL_ALLOCATE_ROUTINE
) (
504 struct _RTL_AVL_TABLE
*Table
,
509 (NTAPI
*PRTL_AVL_FREE_ROUTINE
) (
510 struct _RTL_AVL_TABLE
*Table
,
516 // RTL Query Registry callback
519 (NTAPI
*PRTL_QUERY_REGISTRY_ROUTINE
)(
523 IN ULONG ValueLength
,
525 IN PVOID EntryContext
529 // RTL Secure Memory callbacks
531 #ifdef NTOS_MODE_USER
533 (NTAPI
*PRTL_SECURE_MEMORY_CACHE_CALLBACK
)(
540 // RTL Range List callbacks
542 #ifdef NTOS_MODE_USER
544 (NTAPI
*PRTL_CONFLICT_RANGE_CALLBACK
)(
546 struct _RTL_RANGE
*Range
550 // Custom Heap Commit Routine for RtlCreateHeap
553 (NTAPI
* PRTL_HEAP_COMMIT_ROUTINE
)(
555 IN OUT PVOID
*CommitAddress
,
556 IN OUT PSIZE_T CommitSize
560 // Version Info redefinitions
562 typedef OSVERSIONINFOW RTL_OSVERSIONINFOW
;
563 typedef LPOSVERSIONINFOW PRTL_OSVERSIONINFOW
;
564 typedef OSVERSIONINFOEXW RTL_OSVERSIONINFOEXW
;
565 typedef LPOSVERSIONINFOEXW PRTL_OSVERSIONINFOEXW
;
568 // Simple pointer definitions
570 typedef ACL_REVISION_INFORMATION
*PACL_REVISION_INFORMATION
;
571 typedef ACL_SIZE_INFORMATION
*PACL_SIZE_INFORMATION
;
574 // Parameters for RtlCreateHeap
575 // FIXME: Determine whether Length is SIZE_T or ULONG
577 typedef struct _RTL_HEAP_PARAMETERS
580 SIZE_T SegmentReserve
;
581 SIZE_T SegmentCommit
;
582 SIZE_T DeCommitFreeBlockThreshold
;
583 SIZE_T DeCommitTotalFreeThreshold
;
584 SIZE_T MaximumAllocationSize
;
585 SIZE_T VirtualMemoryThreshold
;
586 SIZE_T InitialCommit
;
587 SIZE_T InitialReserve
;
588 PRTL_HEAP_COMMIT_ROUTINE CommitRoutine
;
590 } RTL_HEAP_PARAMETERS
, *PRTL_HEAP_PARAMETERS
;
593 // RTL Bitmap structures
595 typedef struct _RTL_BITMAP
599 } RTL_BITMAP
, *PRTL_BITMAP
;
601 typedef struct _RTL_BITMAP_RUN
605 } RTL_BITMAP_RUN
, *PRTL_BITMAP_RUN
;
608 // RtlGenerateXxxName context
610 typedef struct _GENERATE_NAME_CONTEXT
613 BOOLEAN CheckSumInserted
;
616 ULONG ExtensionLength
;
617 WCHAR ExtensionBuffer
[4];
618 ULONG LastIndexValue
;
619 } GENERATE_NAME_CONTEXT
, *PGENERATE_NAME_CONTEXT
;
622 // RTL Splay and Balanced Links structures
624 typedef struct _RTL_SPLAY_LINKS
626 struct _RTL_SPLAY_LINKS
*Parent
;
627 struct _RTL_SPLAY_LINKS
*LeftChild
;
628 struct _RTL_SPLAY_LINKS
*RightChild
;
629 } RTL_SPLAY_LINKS
, *PRTL_SPLAY_LINKS
;
631 typedef struct _RTL_BALANCED_LINKS
633 struct _RTL_BALANCED_LINKS
*Parent
;
634 struct _RTL_BALANCED_LINKS
*LeftChild
;
635 struct _RTL_BALANCED_LINKS
*RightChild
;
638 } RTL_BALANCED_LINKS
, *PRTL_BALANCED_LINKS
;
641 // RTL Avl/Generic Tables
643 typedef struct _RTL_GENERIC_TABLE
645 PRTL_SPLAY_LINKS TableRoot
;
646 LIST_ENTRY InsertOrderList
;
647 PLIST_ENTRY OrderedPointer
;
648 ULONG WhichOrderedElement
;
649 ULONG NumberGenericTableElements
;
650 PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine
;
651 PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine
;
652 PRTL_GENERIC_FREE_ROUTINE FreeRoutine
;
654 } RTL_GENERIC_TABLE
, *PRTL_GENERIC_TABLE
;
656 typedef struct _RTL_AVL_TABLE
658 RTL_BALANCED_LINKS BalancedRoot
;
659 PVOID OrderedPointer
;
660 ULONG WhichOrderedElement
;
661 ULONG NumberGenericTableElements
;
663 PRTL_BALANCED_LINKS RestartKey
;
665 PRTL_AVL_COMPARE_ROUTINE CompareRoutine
;
666 PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine
;
667 PRTL_AVL_FREE_ROUTINE FreeRoutine
;
669 } RTL_AVL_TABLE
, *PRTL_AVL_TABLE
;
672 // RtlQueryRegistry Data
674 typedef struct _RTL_QUERY_REGISTRY_TABLE
676 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine
;
683 } RTL_QUERY_REGISTRY_TABLE
, *PRTL_QUERY_REGISTRY_TABLE
;
686 // RTL Unicode Table Structures
688 typedef struct _UNICODE_PREFIX_TABLE_ENTRY
692 struct _UNICODE_PREFIX_TABLE_ENTRY
*NextPrefixTree
;
693 struct _UNICODE_PREFIX_TABLE_ENTRY
*CaseMatch
;
694 RTL_SPLAY_LINKS Links
;
695 PUNICODE_STRING Prefix
;
696 } UNICODE_PREFIX_TABLE_ENTRY
, *PUNICODE_PREFIX_TABLE_ENTRY
;
698 typedef struct _UNICODE_PREFIX_TABLE
702 PUNICODE_PREFIX_TABLE_ENTRY NextPrefixTree
;
703 PUNICODE_PREFIX_TABLE_ENTRY LastNextEntry
;
704 } UNICODE_PREFIX_TABLE
, *PUNICODE_PREFIX_TABLE
;
707 // Time Structure for RTL Time calls
709 typedef struct _TIME_FIELDS
719 } TIME_FIELDS
, *PTIME_FIELDS
;
722 // Activation Context
724 typedef PVOID PACTIVATION_CONTEXT
;
727 // Activation Context Frame
729 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
731 struct __RTL_ACTIVATION_CONTEXT_STACK_FRAME
*Previous
;
732 PACTIVATION_CONTEXT ActivationContext
;
734 } RTL_ACTIVATION_CONTEXT_STACK_FRAME
,
735 *PRTL_ACTIVATION_CONTEXT_STACK_FRAME
;
737 typedef struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
741 RTL_ACTIVATION_CONTEXT_STACK_FRAME Frame
;
746 } RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
,
747 *PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
;
757 ACCESS_MASK AccessMask
;
761 // Information Structures for RTL Debug Functions
763 typedef struct _RTL_PROCESS_MODULE_INFORMATION
770 USHORT LoadOrderIndex
;
771 USHORT InitOrderIndex
;
773 USHORT OffsetToFileName
;
774 CHAR FullPathName
[256];
775 } RTL_PROCESS_MODULE_INFORMATION
, *PRTL_PROCESS_MODULE_INFORMATION
;
777 typedef struct _RTL_PROCESS_MODULES
779 ULONG NumberOfModules
;
780 RTL_PROCESS_MODULE_INFORMATION Modules
[1];
781 } RTL_PROCESS_MODULES
, *PRTL_PROCESS_MODULES
;
783 typedef struct _RTL_PROCESS_MODULE_INFORMATION_EX
786 RTL_PROCESS_MODULE_INFORMATION BaseInfo
;
790 } RTL_PROCESS_MODULE_INFORMATION_EX
, *PRTL_PROCESS_MODULE_INFORMATION_EX
;
792 typedef struct _RTL_HEAP_TAG_INFO
794 ULONG NumberOfAllocations
;
796 ULONG BytesAllocated
;
797 } RTL_HEAP_TAG_INFO
, *PRTL_HEAP_TAG_INFO
;
799 typedef struct _RTL_HEAP_USAGE_ENTRY
801 struct _RTL_HEAP_USAGE_ENTRY
*Next
;
802 } RTL_HEAP_USAGE_ENTRY
, *PRTL_HEAP_USAGE_ENTRY
;
804 typedef struct _RTL_HEAP_USAGE
807 ULONG BytesAllocated
;
808 ULONG BytesCommitted
;
810 ULONG BytesReservedMaximum
;
811 PRTL_HEAP_USAGE_ENTRY Entries
;
812 PRTL_HEAP_USAGE_ENTRY AddedEntries
;
813 PRTL_HEAP_USAGE_ENTRY RemovedEntries
;
815 } RTL_HEAP_USAGE
, *PRTL_HEAP_USAGE
;
817 typedef struct _RTL_HEAP_INFORMATION
821 USHORT EntryOverhead
;
822 USHORT CreatorBackTraceIndex
;
823 ULONG BytesAllocated
;
824 ULONG BytesCommitted
;
826 ULONG NumberOfEntries
;
827 ULONG NumberOfPseudoTags
;
828 ULONG PseudoTagGranularity
;
832 } RTL_HEAP_INFORMATION
, *PRTL_HEAP_INFORMATION
;
834 typedef struct _RTL_PROCESS_HEAPS
837 RTL_HEAP_INFORMATION Heaps
[1];
838 } RTL_PROCESS_HEAPS
, *PRTL_PROCESS_HEAPS
;
840 typedef struct _RTL_PROCESS_LOCK_INFORMATION
844 USHORT CreatorBackTraceIndex
;
847 ULONG ContentionCount
;
849 ULONG RecursionCount
;
850 ULONG NumberOfSharedWaiters
;
851 ULONG NumberOfExclusiveWaiters
;
852 } RTL_PROCESS_LOCK_INFORMATION
, *PRTL_PROCESS_LOCK_INFORMATION
;
854 typedef struct _RTL_PROCESS_LOCKS
857 RTL_PROCESS_LOCK_INFORMATION Locks
[1];
858 } RTL_PROCESS_LOCKS
, *PRTL_PROCESS_LOCKS
;
860 typedef struct _RTL_PROCESS_BACKTRACE_INFORMATION
862 PVOID SymbolicBackTrace
;
867 } RTL_PROCESS_BACKTRACE_INFORMATION
, *PRTL_PROCESS_BACKTRACE_INFORMATION
;
869 typedef struct _RTL_PROCESS_BACKTRACES
871 ULONG CommittedMemory
;
872 ULONG ReservedMemory
;
873 ULONG NumberOfBackTraceLookups
;
874 ULONG NumberOfBackTraces
;
875 RTL_PROCESS_BACKTRACE_INFORMATION BackTraces
[1];
876 } RTL_PROCESS_BACKTRACES
, *PRTL_PROCESS_BACKTRACES
;
878 typedef struct _RTL_PROCESS_VERIFIER_OPTIONS
884 // Option array continues below
886 } RTL_PROCESS_VERIFIER_OPTIONS
, *PRTL_PROCESS_VERIFIER_OPTIONS
;
888 typedef struct _RTL_DEBUG_INFORMATION
890 HANDLE SectionHandleClient
;
891 PVOID ViewBaseClient
;
892 PVOID ViewBaseTarget
;
894 HANDLE EventPairClient
;
895 PVOID EventPairTarget
;
896 HANDLE TargetProcessId
;
897 HANDLE TargetThreadHandle
;
904 PRTL_PROCESS_MODULES Modules
;
905 PRTL_PROCESS_MODULE_INFORMATION_EX ModulesEx
;
907 PRTL_PROCESS_BACKTRACES BackTraces
;
908 PRTL_PROCESS_HEAPS Heaps
;
909 PRTL_PROCESS_LOCKS Locks
;
911 HANDLE TargetProcessHandle
;
912 RTL_PROCESS_VERIFIER_OPTIONS VerifierOptions
;
914 HANDLE CriticalSectionHandle
;
915 HANDLE CriticalSectionOwnerThread
;
917 } RTL_DEBUG_INFORMATION
, *PRTL_DEBUG_INFORMATION
;
920 // Unload Event Trace Structure for RtlGetUnloadEventTrace
922 typedef struct _RTL_UNLOAD_EVENT_TRACE
930 } RTL_UNLOAD_EVENT_TRACE
, *PRTL_UNLOAD_EVENT_TRACE
;
933 // RTL Handle Structures
935 typedef struct _RTL_HANDLE_TABLE_ENTRY
938 struct _RTL_HANDLE_TABLE_ENTRY
*NextFree
;
939 } RTL_HANDLE_TABLE_ENTRY
, *PRTL_HANDLE_TABLE_ENTRY
;
941 typedef struct _RTL_HANDLE_TABLE
943 ULONG MaximumNumberOfHandles
;
944 ULONG SizeOfHandleTableEntry
;
946 PRTL_HANDLE_TABLE_ENTRY FreeHandles
;
947 PRTL_HANDLE_TABLE_ENTRY CommittedHandles
;
948 PRTL_HANDLE_TABLE_ENTRY UnCommittedHandles
;
949 PRTL_HANDLE_TABLE_ENTRY MaxReservedHandles
;
950 } RTL_HANDLE_TABLE
, *PRTL_HANDLE_TABLE
;
955 typedef struct _EXCEPTION_REGISTRATION_RECORD
957 struct _EXCEPTION_REGISTRATION_RECORD
*Next
;
958 PEXCEPTION_ROUTINE Handler
;
959 } EXCEPTION_REGISTRATION_RECORD
, *PEXCEPTION_REGISTRATION_RECORD
;
962 // Current Directory Structures
964 typedef struct _CURDIR
966 UNICODE_STRING DosPath
;
970 typedef struct RTL_DRIVE_LETTER_CURDIR
975 UNICODE_STRING DosPath
;
976 } RTL_DRIVE_LETTER_CURDIR
, *PRTL_DRIVE_LETTER_CURDIR
;
979 // Private State structure for RtlAcquirePrivilege/RtlReleasePrivilege
981 typedef struct _RTL_ACQUIRE_STATE
984 HANDLE OldImpersonationToken
;
985 PTOKEN_PRIVILEGES OldPrivileges
;
986 PTOKEN_PRIVILEGES NewPrivileges
;
988 UCHAR OldPrivBuffer
[1024];
989 } RTL_ACQUIRE_STATE
, *PRTL_ACQUIRE_STATE
;
991 #ifndef NTOS_MODE_USER
994 // RTL Critical Section Structures
996 typedef struct _RTL_CRITICAL_SECTION_DEBUG
999 USHORT CreatorBackTraceIndex
;
1000 struct _RTL_CRITICAL_SECTION
*CriticalSection
;
1001 LIST_ENTRY ProcessLocksList
;
1003 ULONG ContentionCount
;
1005 } RTL_CRITICAL_SECTION_DEBUG
, *PRTL_CRITICAL_SECTION_DEBUG
, RTL_RESOURCE_DEBUG
, *PRTL_RESOURCE_DEBUG
;
1007 typedef struct _RTL_CRITICAL_SECTION
1009 PRTL_CRITICAL_SECTION_DEBUG DebugInfo
;
1011 LONG RecursionCount
;
1012 HANDLE OwningThread
;
1013 HANDLE LockSemaphore
;
1014 ULONG_PTR SpinCount
;
1015 } RTL_CRITICAL_SECTION
, *PRTL_CRITICAL_SECTION
;
1020 // RTL Range List Structures
1022 typedef struct _RTL_RANGE_LIST
1024 LIST_ENTRY ListHead
;
1028 } RTL_RANGE_LIST
, *PRTL_RANGE_LIST
;
1030 typedef struct _RTL_RANGE
1038 } RTL_RANGE
, *PRTL_RANGE
;
1040 typedef struct _RANGE_LIST_ITERATOR
1042 PLIST_ENTRY RangeListHead
;
1043 PLIST_ENTRY MergedHead
;
1046 } RTL_RANGE_LIST_ITERATOR
, *PRTL_RANGE_LIST_ITERATOR
;
1051 typedef struct _RTL_RESOURCE
1053 RTL_CRITICAL_SECTION Lock
;
1054 HANDLE SharedSemaphore
;
1055 ULONG SharedWaiters
;
1056 HANDLE ExclusiveSemaphore
;
1057 ULONG ExclusiveWaiters
;
1059 HANDLE OwningThread
;
1062 } RTL_RESOURCE
, *PRTL_RESOURCE
;
1065 // RTL Message Structures for PE Resources
1067 typedef struct _RTL_MESSAGE_RESOURCE_ENTRY
1072 } RTL_MESSAGE_RESOURCE_ENTRY
, *PRTL_MESSAGE_RESOURCE_ENTRY
;
1074 typedef struct _RTL_MESSAGE_RESOURCE_BLOCK
1078 ULONG OffsetToEntries
;
1079 } RTL_MESSAGE_RESOURCE_BLOCK
, *PRTL_MESSAGE_RESOURCE_BLOCK
;
1081 typedef struct _RTL_MESSAGE_RESOURCE_DATA
1083 ULONG NumberOfBlocks
;
1084 RTL_MESSAGE_RESOURCE_BLOCK Blocks
[1];
1085 } RTL_MESSAGE_RESOURCE_DATA
, *PRTL_MESSAGE_RESOURCE_DATA
;
1088 // Structures for RtlCreateUserProcess
1090 typedef struct _RTL_USER_PROCESS_PARAMETERS
1092 ULONG MaximumLength
;
1096 HANDLE ConsoleHandle
;
1098 HANDLE StandardInput
;
1099 HANDLE StandardOutput
;
1100 HANDLE StandardError
;
1101 CURDIR CurrentDirectory
;
1102 UNICODE_STRING DllPath
;
1103 UNICODE_STRING ImagePathName
;
1104 UNICODE_STRING CommandLine
;
1112 ULONG FillAttribute
;
1114 ULONG ShowWindowFlags
;
1115 UNICODE_STRING WindowTitle
;
1116 UNICODE_STRING DesktopInfo
;
1117 UNICODE_STRING ShellInfo
;
1118 UNICODE_STRING RuntimeData
;
1119 RTL_DRIVE_LETTER_CURDIR CurrentDirectories
[32];
1120 } RTL_USER_PROCESS_PARAMETERS
, *PRTL_USER_PROCESS_PARAMETERS
;
1122 typedef struct _RTL_USER_PROCESS_INFORMATION
1125 HANDLE ProcessHandle
;
1126 HANDLE ThreadHandle
;
1128 SECTION_IMAGE_INFORMATION ImageInformation
;
1129 } RTL_USER_PROCESS_INFORMATION
, *PRTL_USER_PROCESS_INFORMATION
;
1132 // RTL Atom Table Structures
1134 typedef struct _RTL_ATOM_TABLE_ENTRY
1136 struct _RTL_ATOM_TABLE_ENTRY
*HashLink
;
1139 USHORT ReferenceCount
;
1143 } RTL_ATOM_TABLE_ENTRY
, *PRTL_ATOM_TABLE_ENTRY
;
1145 typedef struct _RTL_ATOM_TABLE
1150 #ifdef NTOS_MODE_USER
1151 RTL_CRITICAL_SECTION CriticalSection
;
1153 FAST_MUTEX FastMutex
;
1158 #ifdef NTOS_MODE_USER
1159 RTL_HANDLE_TABLE RtlHandleTable
;
1161 PHANDLE_TABLE ExHandleTable
;
1164 ULONG NumberOfBuckets
;
1165 PRTL_ATOM_TABLE_ENTRY Buckets
[1];
1166 } RTL_ATOM_TABLE
, *PRTL_ATOM_TABLE
;
1170 // System Time and Timezone Structures
1172 typedef struct _SYSTEMTIME
1181 USHORT wMilliseconds
;
1182 } SYSTEMTIME
, *PSYSTEMTIME
, *LPSYSTEMTIME
;
1184 typedef struct _TIME_ZONE_INFORMATION
1187 WCHAR StandardName
[32];
1188 SYSTEMTIME StandardDate
;
1190 WCHAR DaylightName
[32];
1191 SYSTEMTIME DaylightDate
;
1193 } TIME_ZONE_INFORMATION
, *PTIME_ZONE_INFORMATION
, *LPTIME_ZONE_INFORMATION
;
1197 // Native version of Timezone Structure
1199 typedef LPTIME_ZONE_INFORMATION PRTL_TIME_ZONE_INFORMATION
;
1204 typedef struct _RTL_PATCH_HEADER
1206 LIST_ENTRY PatchList
;
1207 PVOID PatchImageBase
;
1208 struct _RTL_PATCH_HEADER
*NextPath
;
1211 struct _HOTPATCH_HEADER
*HotpatchHeader
;
1212 UNICODE_STRING TargetDllName
;
1213 PVOID TargetDllBase
;
1214 PLDR_DATA_TABLE_ENTRY TargetLdrDataTableEntry
;
1215 PLDR_DATA_TABLE_ENTRY PatchLdrDataTableEntry
;
1216 struct _SYSTEM_HOTPATCH_CODE_INFORMATION
*CodeInfo
;
1217 } RTL_PATCH_HEADER
, *PRTL_PATCH_HEADER
;
1220 // Header for NLS Files
1222 typedef struct _NLS_FILE_HEADER
1226 USHORT MaximumCharacterSize
;
1228 USHORT UniDefaultChar
;
1229 USHORT TransDefaultChar
;
1230 USHORT TransUniDefaultChar
;
1231 USHORT DBCSCodePage
;
1232 UCHAR LeadByte
[MAXIMUM_LEADBYTES
];
1233 } NLS_FILE_HEADER
, *PNLS_FILE_HEADER
;
1238 typedef struct _RTL_STACK_TRACE_ENTRY
1240 struct _RTL_STACK_TRACE_ENTRY
*HashChain
;
1244 PVOID BackTrace
[32];
1245 } RTL_STACK_TRACE_ENTRY
, *PRTL_STACK_TRACE_ENTRY
;
1247 typedef struct _STACK_TRACE_DATABASE
1249 RTL_CRITICAL_SECTION CriticalSection
;
1250 } STACK_TRACE_DATABASE
, *PSTACK_TRACE_DATABASE
;
1252 #ifndef NTOS_MODE_USER
1255 // Message Resource Entry, Block and Data
1257 typedef struct _MESSAGE_RESOURCE_ENTRY
1261 UCHAR Text
[ANYSIZE_ARRAY
];
1262 } MESSAGE_RESOURCE_ENTRY
, *PMESSAGE_RESOURCE_ENTRY
;
1264 typedef struct _MESSAGE_RESOURCE_BLOCK
1268 ULONG OffsetToEntries
;
1269 } MESSAGE_RESOURCE_BLOCK
, *PMESSAGE_RESOURCE_BLOCK
;
1271 typedef struct _MESSAGE_RESOURCE_DATA
1273 ULONG NumberOfBlocks
;
1274 MESSAGE_RESOURCE_BLOCK Blocks
[ANYSIZE_ARRAY
];
1275 } MESSAGE_RESOURCE_DATA
, *PMESSAGE_RESOURCE_DATA
;