3 Copyright (c) Alex Ionescu. All rights reserved.
11 Type definitions for the Run-Time Library
15 Alex Ionescu (alexi@tinykrnl.org) - Updated - 27-Feb-2006
29 // Maximum Atom Length
31 #define RTL_MAXIMUM_ATOM_LENGTH 255
34 // Process Parameters Flags
36 #define RTL_USER_PROCESS_PARAMETERS_NORMALIZED 0x01
37 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_USER 0x02
38 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_SERVER 0x04
39 #define RTL_USER_PROCESS_PARAMETERS_PROFILE_KERNEL 0x08
40 #define RTL_USER_PROCESS_PARAMETERS_UNKNOWN 0x10
41 #define RTL_USER_PROCESS_PARAMETERS_RESERVE_1MB 0x20
42 #define RTL_USER_PROCESS_PARAMETERS_DISABLE_HEAP_CHECKS 0x100
43 #define RTL_USER_PROCESS_PARAMETERS_PROCESS_OR_1 0x200
44 #define RTL_USER_PROCESS_PARAMETERS_PROCESS_OR_2 0x400
45 #define RTL_USER_PROCESS_PARAMETERS_PRIVATE_DLL_PATH 0x1000
46 #define RTL_USER_PROCESS_PARAMETERS_LOCAL_DLL_PATH 0x2000
47 #define RTL_USER_PROCESS_PARAMETERS_NX 0x20000
52 #define EXCEPTION_CHAIN_END ((PEXCEPTION_REGISTRATION_RECORD)-1)
53 #define EXCEPTION_UNWINDING 0x02
54 #define EXCEPTION_EXIT_UNWIND 0x04
55 #define EXCEPTION_STACK_INVALID 0x08
56 #define EXCEPTION_UNWIND (EXCEPTION_UNWINDING + EXCEPTION_EXIT_UNWIND)
57 #define EXCEPTION_NESTED_CALL 0x10
58 #define EXCEPTION_TARGET_UNWIND 0x20
59 #define EXCEPTION_COLLIDED_UNWIND 0x20
62 // Range and Range List Flags
64 #define RTL_RANGE_LIST_ADD_IF_CONFLICT 0x00000001
65 #define RTL_RANGE_LIST_ADD_SHARED 0x00000002
67 #define RTL_RANGE_SHARED 0x01
68 #define RTL_RANGE_CONFLICT 0x02
71 // Activation Context Frame Flags
73 #define RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_FORMAT_WHISTLER \
79 #if !defined(NTOS_MODE_USER) && !defined(_NTIFS_)
80 #define HEAP_NO_SERIALIZE 0x00000001
81 #define HEAP_GROWABLE 0x00000002
82 #define HEAP_GENERATE_EXCEPTIONS 0x00000004
83 #define HEAP_ZERO_MEMORY 0x00000008
84 #define HEAP_REALLOC_IN_PLACE_ONLY 0x00000010
85 #define HEAP_TAIL_CHECKING_ENABLED 0x00000020
86 #define HEAP_FREE_CHECKING_ENABLED 0x00000040
87 #define HEAP_DISABLE_COALESCE_ON_FREE 0x00000080
88 #define HEAP_CREATE_ALIGN_16 0x00010000
89 #define HEAP_CREATE_ENABLE_TRACING 0x00020000
90 #define HEAP_CREATE_ENABLE_EXECUTE 0x00040000
94 // User-Defined Heap Flags and Classes
96 #define HEAP_SETTABLE_USER_VALUE 0x00000100
97 #define HEAP_SETTABLE_USER_FLAG1 0x00000200
98 #define HEAP_SETTABLE_USER_FLAG2 0x00000400
99 #define HEAP_SETTABLE_USER_FLAG3 0x00000800
100 #define HEAP_SETTABLE_USER_FLAGS 0x00000E00
101 #define HEAP_CLASS_0 0x00000000
102 #define HEAP_CLASS_1 0x00001000
103 #define HEAP_CLASS_2 0x00002000
104 #define HEAP_CLASS_3 0x00003000
105 #define HEAP_CLASS_4 0x00004000
106 #define HEAP_CLASS_5 0x00005000
107 #define HEAP_CLASS_6 0x00006000
108 #define HEAP_CLASS_7 0x00007000
109 #define HEAP_CLASS_8 0x00008000
110 #define HEAP_CLASS_MASK 0x0000F000
113 // Internal HEAP Structure Flags
115 #define HEAP_FLAG_PAGE_ALLOCS 0x01000000
116 #define HEAP_PROTECTION_ENABLED 0x02000000
117 #define HEAP_BREAK_WHEN_OUT_OF_VM 0x04000000
118 #define HEAP_NO_ALIGNMENT 0x08000000
119 #define HEAP_CAPTURE_STACK_BACKTRACES 0x08000000
120 #define HEAP_SKIP_VALIDATION_CHECKS 0x10000000
121 #define HEAP_VALIDATE_ALL_ENABLED 0x20000000
122 #define HEAP_VALIDATE_PARAMETERS_ENABLED 0x40000000
123 #define HEAP_LOCK_USER_ALLOCATED 0x80000000
126 // Heap Validation Flags
128 #define HEAP_CREATE_VALID_MASK \
129 (HEAP_NO_SERIALIZE | \
131 HEAP_GENERATE_EXCEPTIONS | \
133 HEAP_REALLOC_IN_PLACE_ONLY | \
134 HEAP_TAIL_CHECKING_ENABLED | \
135 HEAP_FREE_CHECKING_ENABLED | \
136 HEAP_DISABLE_COALESCE_ON_FREE | \
138 HEAP_CREATE_ALIGN_16 | \
139 HEAP_CREATE_ENABLE_TRACING | \
140 HEAP_CREATE_ENABLE_EXECUTE)
142 C_ASSERT(HEAP_CREATE_VALID_MASK
== 0x0007F0FF);
148 #define RTL_REGISTRY_ABSOLUTE 0
149 #define RTL_REGISTRY_SERVICES 1
150 #define RTL_REGISTRY_CONTROL 2
151 #define RTL_REGISTRY_WINDOWS_NT 3
152 #define RTL_REGISTRY_DEVICEMAP 4
153 #define RTL_REGISTRY_USER 5
154 #define RTL_REGISTRY_MAXIMUM 6
155 #define RTL_REGISTRY_HANDLE 0x40000000
156 #define RTL_REGISTRY_OPTIONAL 0x80000000
157 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
158 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
159 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
160 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
161 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
162 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
163 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
168 #define VER_MINORVERSION 0x0000001
169 #define VER_MAJORVERSION 0x0000002
170 #define VER_BUILDNUMBER 0x0000004
171 #define VER_PLATFORMID 0x0000008
172 #define VER_SERVICEPACKMINOR 0x0000010
173 #define VER_SERVICEPACKMAJOR 0x0000020
174 #define VER_SUITENAME 0x0000040
175 #define VER_PRODUCT_TYPE 0x0000080
176 #define VER_PLATFORM_WIN32s 0
177 #define VER_PLATFORM_WIN32_WINDOWS 1
178 #define VER_PLATFORM_WIN32_NT 2
180 #define VER_GREATER 2
181 #define VER_GREATER_EQUAL 3
183 #define VER_LESS_EQUAL 5
186 #define VER_CONDITION_MASK 7
187 #define VER_NUM_BITS_PER_CONDITION_MASK 3
192 #define TIME_ZONE_ID_UNKNOWN 0
193 #define TIME_ZONE_ID_STANDARD 1
194 #define TIME_ZONE_ID_DAYLIGHT 2
197 // Maximum Path Length
202 // RTL Lock Type (Critical Section or Resource)
204 #define RTL_CRITSECT_TYPE 0
205 #define RTL_RESOURCE_TYPE 1
208 // RtlAcquirePrivileges Flags
210 #define RTL_ACQUIRE_PRIVILEGE_IMPERSONATE 1
211 #define RTL_ACQUIRE_PRIVILEGE_PROCESS 2
213 #ifdef NTOS_MODE_USER
216 // String Hash Algorithms
218 #define HASH_STRING_ALGORITHM_DEFAULT 0
219 #define HASH_STRING_ALGORITHM_X65599 1
220 #define HASH_STRING_ALGORITHM_INVALID 0xffffffff
223 // RtlDuplicateString Flags
225 #define RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE 1
226 #define RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING 2
229 // RtlFindCharInUnicodeString Flags
231 #define RTL_FIND_CHAR_IN_UNICODE_STRING_CASE_INSENSITIVE 4
236 #define NLS_MB_CODE_PAGE_TAG NlsMbCodePageTag
237 #define NLS_MB_OEM_CODE_PAGE_TAG NlsMbOemCodePageTag
238 #define NLS_OEM_LEAD_BYTE_INFO NlsOemLeadByteInfo
243 #if defined(__cplusplus)
244 #define RTL_CONST_CAST(type) const_cast<type>
246 #define RTL_CONST_CAST(type) (type)
250 // Constant String Macro
252 #define RTL_CONSTANT_STRING(__SOURCE_STRING__) \
254 sizeof(__SOURCE_STRING__) - sizeof((__SOURCE_STRING__)[0]), \
255 sizeof(__SOURCE_STRING__), \
256 (__SOURCE_STRING__) \
260 // Constant Object Attributes Macro
262 #define RTL_CONSTANT_OBJECT_ATTRIBUTES(n, a) \
264 sizeof(OBJECT_ATTRIBUTES), \
266 RTL_CONST_CAST(PUNICODE_STRING)(n), \
272 #define RTL_INIT_OBJECT_ATTRIBUTES(n, a) \
273 RTL_CONSTANT_OBJECT_ATTRIBUTES(n, a)
277 // Message Resource Flag
279 #define MESSAGE_RESOURCE_UNICODE 0x0001
282 #define MAXIMUM_LEADBYTES 12
287 #define RTL_DEBUG_QUERY_MODULES 0x01
288 #define RTL_DEBUG_QUERY_BACKTRACES 0x02
289 #define RTL_DEBUG_QUERY_HEAPS 0x04
290 #define RTL_DEBUG_QUERY_HEAP_TAGS 0x08
291 #define RTL_DEBUG_QUERY_HEAP_BLOCKS 0x10
292 #define RTL_DEBUG_QUERY_LOCKS 0x20
297 #define RTL_HANDLE_VALID 0x1
302 #define RTL_ATOM_IS_PINNED 0x1
305 // Critical section lock bits
307 #define CS_LOCK_BIT 0x1
308 #define CS_LOCK_BIT_V 0x0
309 #define CS_LOCK_WAITER_WOKEN 0x2
310 #define CS_LOCK_WAITER_INC 0x4
315 #ifdef NTOS_MODE_USER
316 extern BOOLEAN NTSYSAPI NLS_MB_CODE_PAGE_TAG
;
317 extern BOOLEAN NTSYSAPI NLS_MB_OEM_CODE_PAGE_TAG
;
320 // Constant String Macro
322 #define RTL_CONSTANT_STRING(__SOURCE_STRING__) \
324 sizeof(__SOURCE_STRING__) - sizeof((__SOURCE_STRING__)[0]), \
325 sizeof(__SOURCE_STRING__), \
326 (__SOURCE_STRING__) \
331 #ifdef NTOS_MODE_USER
334 // Table and Compare result types
336 typedef enum _TABLE_SEARCH_RESULT
342 } TABLE_SEARCH_RESULT
;
344 typedef enum _RTL_GENERIC_COMPARE_RESULTS
349 } RTL_GENERIC_COMPARE_RESULTS
;
354 // ACL Query Information Classes
356 typedef enum _ACL_INFORMATION_CLASS
358 AclRevisionInformation
= 1,
360 } ACL_INFORMATION_CLASS
;
367 typedef enum _RTL_PATH_TYPE
370 RtlPathTypeUncAbsolute
,
371 RtlPathTypeDriveAbsolute
,
372 RtlPathTypeDriveRelative
,
375 RtlPathTypeLocalDevice
,
376 RtlPathTypeRootLocalDevice
,
379 #ifndef NTOS_MODE_USER
382 // Callback function for RTL Timers or Registered Waits
385 (NTAPI
*WAITORTIMERCALLBACKFUNC
)(
387 BOOLEAN fTimerOrWaitFired
391 // Handler during Vectored RTL Exceptions
394 (NTAPI
*PVECTORED_EXCEPTION_HANDLER
)(
395 PEXCEPTION_POINTERS ExceptionPointers
399 // Worker Thread Callback for Rtl
402 (NTAPI
*WORKERCALLBACKFUNC
)(
409 // Handler during regular RTL Exceptions
411 typedef EXCEPTION_DISPOSITION
412 (NTAPI
*PEXCEPTION_ROUTINE
)(
413 IN
struct _EXCEPTION_RECORD
*ExceptionRecord
,
414 IN PVOID EstablisherFrame
,
415 IN OUT
struct _CONTEXT
*ContextRecord
,
416 IN OUT PVOID DispatcherContext
420 // RTL Library Allocation/Free Routines
423 (NTAPI
*PRTL_ALLOCATE_STRING_ROUTINE
)(
428 (NTAPI
*PRTL_REALLOCATE_STRING_ROUTINE
)(
429 SIZE_T NumberOfBytes
,
435 (NTAPI
*PRTL_FREE_STRING_ROUTINE
)(
439 extern const PRTL_ALLOCATE_STRING_ROUTINE RtlAllocateStringRoutine
;
440 extern const PRTL_FREE_STRING_ROUTINE RtlFreeStringRoutine
;
441 extern const PRTL_REALLOCATE_STRING_ROUTINE RtlReallocateStringRoutine
;
446 // Callback for RTL Heap Enumeration
449 (*PHEAP_ENUMERATION_ROUTINE
)(
455 // Thread and Process Start Routines for RtlCreateUserThread/Process
457 typedef ULONG (NTAPI
*PTHREAD_START_ROUTINE
)(
462 (NTAPI
*PRTL_BASE_PROCESS_START_ROUTINE
)(
463 PTHREAD_START_ROUTINE StartAddress
,
468 // Declare empty structure definitions so that they may be referenced by
469 // routines before they are defined
471 struct _RTL_AVL_TABLE
;
472 struct _RTL_GENERIC_TABLE
;
474 typedef struct _COMPRESSED_DATA_INFO COMPRESSED_DATA_INFO
, *PCOMPRESSED_DATA_INFO
;
477 // Routines and callbacks for the RTL AVL/Generic Table package
479 #if defined(NTOS_MODE_USER) || (!defined(NTOS_MODE_USER) && !defined(_NTIFS_))
481 (NTAPI
*PRTL_AVL_MATCH_FUNCTION
)(
482 struct _RTL_AVL_TABLE
*Table
,
487 typedef RTL_GENERIC_COMPARE_RESULTS
488 (NTAPI
*PRTL_AVL_COMPARE_ROUTINE
) (
489 struct _RTL_AVL_TABLE
*Table
,
494 typedef RTL_GENERIC_COMPARE_RESULTS
495 (NTAPI
*PRTL_GENERIC_COMPARE_ROUTINE
) (
496 struct _RTL_GENERIC_TABLE
*Table
,
502 (NTAPI
*PRTL_GENERIC_ALLOCATE_ROUTINE
) (
503 struct _RTL_GENERIC_TABLE
*Table
,
508 (NTAPI
*PRTL_GENERIC_FREE_ROUTINE
) (
509 struct _RTL_GENERIC_TABLE
*Table
,
514 (NTAPI
*PRTL_AVL_ALLOCATE_ROUTINE
) (
515 struct _RTL_AVL_TABLE
*Table
,
520 (NTAPI
*PRTL_AVL_FREE_ROUTINE
) (
521 struct _RTL_AVL_TABLE
*Table
,
527 // RTL Query Registry callback
530 (NTAPI
*PRTL_QUERY_REGISTRY_ROUTINE
)(
534 IN ULONG ValueLength
,
536 IN PVOID EntryContext
540 // RTL Secure Memory callbacks
542 #ifdef NTOS_MODE_USER
544 (NTAPI
*PRTL_SECURE_MEMORY_CACHE_CALLBACK
)(
551 // RTL Range List callbacks
553 #ifdef NTOS_MODE_USER
555 (NTAPI
*PRTL_CONFLICT_RANGE_CALLBACK
)(
557 struct _RTL_RANGE
*Range
561 // Custom Heap Commit Routine for RtlCreateHeap
564 (NTAPI
* PRTL_HEAP_COMMIT_ROUTINE
)(
566 IN OUT PVOID
*CommitAddress
,
567 IN OUT PSIZE_T CommitSize
571 // Version Info redefinitions
573 typedef OSVERSIONINFOW RTL_OSVERSIONINFOW
;
574 typedef LPOSVERSIONINFOW PRTL_OSVERSIONINFOW
;
575 typedef OSVERSIONINFOEXW RTL_OSVERSIONINFOEXW
;
576 typedef LPOSVERSIONINFOEXW PRTL_OSVERSIONINFOEXW
;
579 // Simple pointer definitions
581 typedef ACL_REVISION_INFORMATION
*PACL_REVISION_INFORMATION
;
582 typedef ACL_SIZE_INFORMATION
*PACL_SIZE_INFORMATION
;
585 // Parameters for RtlCreateHeap
586 // FIXME: Determine whether Length is SIZE_T or ULONG
588 typedef struct _RTL_HEAP_PARAMETERS
591 SIZE_T SegmentReserve
;
592 SIZE_T SegmentCommit
;
593 SIZE_T DeCommitFreeBlockThreshold
;
594 SIZE_T DeCommitTotalFreeThreshold
;
595 SIZE_T MaximumAllocationSize
;
596 SIZE_T VirtualMemoryThreshold
;
597 SIZE_T InitialCommit
;
598 SIZE_T InitialReserve
;
599 PRTL_HEAP_COMMIT_ROUTINE CommitRoutine
;
601 } RTL_HEAP_PARAMETERS
, *PRTL_HEAP_PARAMETERS
;
604 // RTL Bitmap structures
606 typedef struct _RTL_BITMAP
610 } RTL_BITMAP
, *PRTL_BITMAP
;
612 typedef struct _RTL_BITMAP_RUN
616 } RTL_BITMAP_RUN
, *PRTL_BITMAP_RUN
;
619 // RtlGenerateXxxName context
621 typedef struct _GENERATE_NAME_CONTEXT
624 BOOLEAN CheckSumInserted
;
627 ULONG ExtensionLength
;
628 WCHAR ExtensionBuffer
[4];
629 ULONG LastIndexValue
;
630 } GENERATE_NAME_CONTEXT
, *PGENERATE_NAME_CONTEXT
;
633 // RTL Splay and Balanced Links structures
635 typedef struct _RTL_SPLAY_LINKS
637 struct _RTL_SPLAY_LINKS
*Parent
;
638 struct _RTL_SPLAY_LINKS
*LeftChild
;
639 struct _RTL_SPLAY_LINKS
*RightChild
;
640 } RTL_SPLAY_LINKS
, *PRTL_SPLAY_LINKS
;
642 typedef struct _RTL_BALANCED_LINKS
644 struct _RTL_BALANCED_LINKS
*Parent
;
645 struct _RTL_BALANCED_LINKS
*LeftChild
;
646 struct _RTL_BALANCED_LINKS
*RightChild
;
649 } RTL_BALANCED_LINKS
, *PRTL_BALANCED_LINKS
;
652 // RTL Avl/Generic Tables
654 typedef struct _RTL_GENERIC_TABLE
656 PRTL_SPLAY_LINKS TableRoot
;
657 LIST_ENTRY InsertOrderList
;
658 PLIST_ENTRY OrderedPointer
;
659 ULONG WhichOrderedElement
;
660 ULONG NumberGenericTableElements
;
661 PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine
;
662 PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine
;
663 PRTL_GENERIC_FREE_ROUTINE FreeRoutine
;
665 } RTL_GENERIC_TABLE
, *PRTL_GENERIC_TABLE
;
667 typedef struct _RTL_AVL_TABLE
669 RTL_BALANCED_LINKS BalancedRoot
;
670 PVOID OrderedPointer
;
671 ULONG WhichOrderedElement
;
672 ULONG NumberGenericTableElements
;
674 PRTL_BALANCED_LINKS RestartKey
;
676 PRTL_AVL_COMPARE_ROUTINE CompareRoutine
;
677 PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine
;
678 PRTL_AVL_FREE_ROUTINE FreeRoutine
;
680 } RTL_AVL_TABLE
, *PRTL_AVL_TABLE
;
683 // RtlQueryRegistry Data
685 typedef struct _RTL_QUERY_REGISTRY_TABLE
687 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine
;
694 } RTL_QUERY_REGISTRY_TABLE
, *PRTL_QUERY_REGISTRY_TABLE
;
697 // RTL Unicode Table Structures
699 typedef struct _UNICODE_PREFIX_TABLE_ENTRY
703 struct _UNICODE_PREFIX_TABLE_ENTRY
*NextPrefixTree
;
704 struct _UNICODE_PREFIX_TABLE_ENTRY
*CaseMatch
;
705 RTL_SPLAY_LINKS Links
;
706 PUNICODE_STRING Prefix
;
707 } UNICODE_PREFIX_TABLE_ENTRY
, *PUNICODE_PREFIX_TABLE_ENTRY
;
709 typedef struct _UNICODE_PREFIX_TABLE
713 PUNICODE_PREFIX_TABLE_ENTRY NextPrefixTree
;
714 PUNICODE_PREFIX_TABLE_ENTRY LastNextEntry
;
715 } UNICODE_PREFIX_TABLE
, *PUNICODE_PREFIX_TABLE
;
718 // Time Structure for RTL Time calls
720 typedef struct _TIME_FIELDS
730 } TIME_FIELDS
, *PTIME_FIELDS
;
733 // Activation Context
735 typedef PVOID PACTIVATION_CONTEXT
;
738 // Activation Context Frame
740 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
742 struct __RTL_ACTIVATION_CONTEXT_STACK_FRAME
*Previous
;
743 PACTIVATION_CONTEXT ActivationContext
;
745 } RTL_ACTIVATION_CONTEXT_STACK_FRAME
,
746 *PRTL_ACTIVATION_CONTEXT_STACK_FRAME
;
748 typedef struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
752 RTL_ACTIVATION_CONTEXT_STACK_FRAME Frame
;
757 } RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
,
758 *PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED
;
768 ACCESS_MASK AccessMask
;
772 // Information Structures for RTL Debug Functions
774 typedef struct _RTL_PROCESS_MODULE_INFORMATION
781 USHORT LoadOrderIndex
;
782 USHORT InitOrderIndex
;
784 USHORT OffsetToFileName
;
785 CHAR FullPathName
[256];
786 } RTL_PROCESS_MODULE_INFORMATION
, *PRTL_PROCESS_MODULE_INFORMATION
;
788 typedef struct _RTL_PROCESS_MODULES
790 ULONG NumberOfModules
;
791 RTL_PROCESS_MODULE_INFORMATION Modules
[1];
792 } RTL_PROCESS_MODULES
, *PRTL_PROCESS_MODULES
;
794 typedef struct _RTL_PROCESS_MODULE_INFORMATION_EX
797 RTL_PROCESS_MODULE_INFORMATION BaseInfo
;
801 } RTL_PROCESS_MODULE_INFORMATION_EX
, *PRTL_PROCESS_MODULE_INFORMATION_EX
;
803 typedef struct _RTL_HEAP_TAG_INFO
805 ULONG NumberOfAllocations
;
807 ULONG BytesAllocated
;
808 } RTL_HEAP_TAG_INFO
, *PRTL_HEAP_TAG_INFO
;
810 typedef struct _RTL_HEAP_USAGE_ENTRY
812 struct _RTL_HEAP_USAGE_ENTRY
*Next
;
813 } RTL_HEAP_USAGE_ENTRY
, *PRTL_HEAP_USAGE_ENTRY
;
815 typedef struct _RTL_HEAP_USAGE
818 ULONG BytesAllocated
;
819 ULONG BytesCommitted
;
821 ULONG BytesReservedMaximum
;
822 PRTL_HEAP_USAGE_ENTRY Entries
;
823 PRTL_HEAP_USAGE_ENTRY AddedEntries
;
824 PRTL_HEAP_USAGE_ENTRY RemovedEntries
;
826 } RTL_HEAP_USAGE
, *PRTL_HEAP_USAGE
;
828 typedef struct _RTL_HEAP_INFORMATION
832 USHORT EntryOverhead
;
833 USHORT CreatorBackTraceIndex
;
834 ULONG BytesAllocated
;
835 ULONG BytesCommitted
;
837 ULONG NumberOfEntries
;
838 ULONG NumberOfPseudoTags
;
839 ULONG PseudoTagGranularity
;
843 } RTL_HEAP_INFORMATION
, *PRTL_HEAP_INFORMATION
;
845 typedef struct _RTL_PROCESS_HEAPS
848 RTL_HEAP_INFORMATION Heaps
[1];
849 } RTL_PROCESS_HEAPS
, *PRTL_PROCESS_HEAPS
;
851 typedef struct _RTL_PROCESS_LOCK_INFORMATION
855 USHORT CreatorBackTraceIndex
;
858 ULONG ContentionCount
;
860 ULONG RecursionCount
;
861 ULONG NumberOfSharedWaiters
;
862 ULONG NumberOfExclusiveWaiters
;
863 } RTL_PROCESS_LOCK_INFORMATION
, *PRTL_PROCESS_LOCK_INFORMATION
;
865 typedef struct _RTL_PROCESS_LOCKS
868 RTL_PROCESS_LOCK_INFORMATION Locks
[1];
869 } RTL_PROCESS_LOCKS
, *PRTL_PROCESS_LOCKS
;
871 typedef struct _RTL_PROCESS_BACKTRACE_INFORMATION
873 PVOID SymbolicBackTrace
;
878 } RTL_PROCESS_BACKTRACE_INFORMATION
, *PRTL_PROCESS_BACKTRACE_INFORMATION
;
880 typedef struct _RTL_PROCESS_BACKTRACES
882 ULONG CommittedMemory
;
883 ULONG ReservedMemory
;
884 ULONG NumberOfBackTraceLookups
;
885 ULONG NumberOfBackTraces
;
886 RTL_PROCESS_BACKTRACE_INFORMATION BackTraces
[1];
887 } RTL_PROCESS_BACKTRACES
, *PRTL_PROCESS_BACKTRACES
;
889 typedef struct _RTL_PROCESS_VERIFIER_OPTIONS
895 // Option array continues below
897 } RTL_PROCESS_VERIFIER_OPTIONS
, *PRTL_PROCESS_VERIFIER_OPTIONS
;
899 typedef struct _RTL_DEBUG_INFORMATION
901 HANDLE SectionHandleClient
;
902 PVOID ViewBaseClient
;
903 PVOID ViewBaseTarget
;
905 HANDLE EventPairClient
;
906 PVOID EventPairTarget
;
907 HANDLE TargetProcessId
;
908 HANDLE TargetThreadHandle
;
915 PRTL_PROCESS_MODULES Modules
;
916 PRTL_PROCESS_MODULE_INFORMATION_EX ModulesEx
;
918 PRTL_PROCESS_BACKTRACES BackTraces
;
919 PRTL_PROCESS_HEAPS Heaps
;
920 PRTL_PROCESS_LOCKS Locks
;
922 HANDLE TargetProcessHandle
;
923 RTL_PROCESS_VERIFIER_OPTIONS VerifierOptions
;
925 HANDLE CriticalSectionHandle
;
926 HANDLE CriticalSectionOwnerThread
;
928 } RTL_DEBUG_INFORMATION
, *PRTL_DEBUG_INFORMATION
;
931 // Unload Event Trace Structure for RtlGetUnloadEventTrace
933 typedef struct _RTL_UNLOAD_EVENT_TRACE
941 } RTL_UNLOAD_EVENT_TRACE
, *PRTL_UNLOAD_EVENT_TRACE
;
944 // RTL Handle Structures
946 typedef struct _RTL_HANDLE_TABLE_ENTRY
949 struct _RTL_HANDLE_TABLE_ENTRY
*NextFree
;
950 } RTL_HANDLE_TABLE_ENTRY
, *PRTL_HANDLE_TABLE_ENTRY
;
952 typedef struct _RTL_HANDLE_TABLE
954 ULONG MaximumNumberOfHandles
;
955 ULONG SizeOfHandleTableEntry
;
957 PRTL_HANDLE_TABLE_ENTRY FreeHandles
;
958 PRTL_HANDLE_TABLE_ENTRY CommittedHandles
;
959 PRTL_HANDLE_TABLE_ENTRY UnCommittedHandles
;
960 PRTL_HANDLE_TABLE_ENTRY MaxReservedHandles
;
961 } RTL_HANDLE_TABLE
, *PRTL_HANDLE_TABLE
;
966 typedef struct _EXCEPTION_REGISTRATION_RECORD
968 struct _EXCEPTION_REGISTRATION_RECORD
*Next
;
969 PEXCEPTION_ROUTINE Handler
;
970 } EXCEPTION_REGISTRATION_RECORD
, *PEXCEPTION_REGISTRATION_RECORD
;
973 // Current Directory Structures
975 typedef struct _CURDIR
977 UNICODE_STRING DosPath
;
981 typedef struct RTL_DRIVE_LETTER_CURDIR
986 UNICODE_STRING DosPath
;
987 } RTL_DRIVE_LETTER_CURDIR
, *PRTL_DRIVE_LETTER_CURDIR
;
990 // Private State structure for RtlAcquirePrivilege/RtlReleasePrivilege
992 typedef struct _RTL_ACQUIRE_STATE
995 HANDLE OldImpersonationToken
;
996 PTOKEN_PRIVILEGES OldPrivileges
;
997 PTOKEN_PRIVILEGES NewPrivileges
;
999 UCHAR OldPrivBuffer
[1024];
1000 } RTL_ACQUIRE_STATE
, *PRTL_ACQUIRE_STATE
;
1002 #ifndef NTOS_MODE_USER
1005 // RTL Critical Section Structures
1007 typedef struct _RTL_CRITICAL_SECTION_DEBUG
1010 USHORT CreatorBackTraceIndex
;
1011 struct _RTL_CRITICAL_SECTION
*CriticalSection
;
1012 LIST_ENTRY ProcessLocksList
;
1014 ULONG ContentionCount
;
1016 } RTL_CRITICAL_SECTION_DEBUG
, *PRTL_CRITICAL_SECTION_DEBUG
, RTL_RESOURCE_DEBUG
, *PRTL_RESOURCE_DEBUG
;
1018 typedef struct _RTL_CRITICAL_SECTION
1020 PRTL_CRITICAL_SECTION_DEBUG DebugInfo
;
1022 LONG RecursionCount
;
1023 HANDLE OwningThread
;
1024 HANDLE LockSemaphore
;
1025 ULONG_PTR SpinCount
;
1026 } RTL_CRITICAL_SECTION
, *PRTL_CRITICAL_SECTION
;
1031 // RTL Range List Structures
1033 typedef struct _RTL_RANGE_LIST
1035 LIST_ENTRY ListHead
;
1039 } RTL_RANGE_LIST
, *PRTL_RANGE_LIST
;
1041 typedef struct _RTL_RANGE
1049 } RTL_RANGE
, *PRTL_RANGE
;
1051 typedef struct _RANGE_LIST_ITERATOR
1053 PLIST_ENTRY RangeListHead
;
1054 PLIST_ENTRY MergedHead
;
1057 } RTL_RANGE_LIST_ITERATOR
, *PRTL_RANGE_LIST_ITERATOR
;
1062 typedef struct _RTL_RESOURCE
1064 RTL_CRITICAL_SECTION Lock
;
1065 HANDLE SharedSemaphore
;
1066 ULONG SharedWaiters
;
1067 HANDLE ExclusiveSemaphore
;
1068 ULONG ExclusiveWaiters
;
1070 HANDLE OwningThread
;
1073 } RTL_RESOURCE
, *PRTL_RESOURCE
;
1076 // RTL Message Structures for PE Resources
1078 typedef struct _RTL_MESSAGE_RESOURCE_ENTRY
1083 } RTL_MESSAGE_RESOURCE_ENTRY
, *PRTL_MESSAGE_RESOURCE_ENTRY
;
1085 typedef struct _RTL_MESSAGE_RESOURCE_BLOCK
1089 ULONG OffsetToEntries
;
1090 } RTL_MESSAGE_RESOURCE_BLOCK
, *PRTL_MESSAGE_RESOURCE_BLOCK
;
1092 typedef struct _RTL_MESSAGE_RESOURCE_DATA
1094 ULONG NumberOfBlocks
;
1095 RTL_MESSAGE_RESOURCE_BLOCK Blocks
[1];
1096 } RTL_MESSAGE_RESOURCE_DATA
, *PRTL_MESSAGE_RESOURCE_DATA
;
1099 // Structures for RtlCreateUserProcess
1101 typedef struct _RTL_USER_PROCESS_PARAMETERS
1103 ULONG MaximumLength
;
1107 HANDLE ConsoleHandle
;
1109 HANDLE StandardInput
;
1110 HANDLE StandardOutput
;
1111 HANDLE StandardError
;
1112 CURDIR CurrentDirectory
;
1113 UNICODE_STRING DllPath
;
1114 UNICODE_STRING ImagePathName
;
1115 UNICODE_STRING CommandLine
;
1123 ULONG FillAttribute
;
1125 ULONG ShowWindowFlags
;
1126 UNICODE_STRING WindowTitle
;
1127 UNICODE_STRING DesktopInfo
;
1128 UNICODE_STRING ShellInfo
;
1129 UNICODE_STRING RuntimeData
;
1130 RTL_DRIVE_LETTER_CURDIR CurrentDirectories
[32];
1131 } RTL_USER_PROCESS_PARAMETERS
, *PRTL_USER_PROCESS_PARAMETERS
;
1133 typedef struct _RTL_USER_PROCESS_INFORMATION
1136 HANDLE ProcessHandle
;
1137 HANDLE ThreadHandle
;
1139 SECTION_IMAGE_INFORMATION ImageInformation
;
1140 } RTL_USER_PROCESS_INFORMATION
, *PRTL_USER_PROCESS_INFORMATION
;
1143 // RTL Atom Table Structures
1145 typedef struct _RTL_ATOM_TABLE_ENTRY
1147 struct _RTL_ATOM_TABLE_ENTRY
*HashLink
;
1150 USHORT ReferenceCount
;
1154 } RTL_ATOM_TABLE_ENTRY
, *PRTL_ATOM_TABLE_ENTRY
;
1156 typedef struct _RTL_ATOM_TABLE
1161 #ifdef NTOS_MODE_USER
1162 RTL_CRITICAL_SECTION CriticalSection
;
1164 FAST_MUTEX FastMutex
;
1169 #ifdef NTOS_MODE_USER
1170 RTL_HANDLE_TABLE RtlHandleTable
;
1172 PHANDLE_TABLE ExHandleTable
;
1175 ULONG NumberOfBuckets
;
1176 PRTL_ATOM_TABLE_ENTRY Buckets
[1];
1177 } RTL_ATOM_TABLE
, *PRTL_ATOM_TABLE
;
1181 // System Time and Timezone Structures
1183 typedef struct _SYSTEMTIME
1192 USHORT wMilliseconds
;
1193 } SYSTEMTIME
, *PSYSTEMTIME
, *LPSYSTEMTIME
;
1195 typedef struct _TIME_ZONE_INFORMATION
1198 WCHAR StandardName
[32];
1199 SYSTEMTIME StandardDate
;
1201 WCHAR DaylightName
[32];
1202 SYSTEMTIME DaylightDate
;
1204 } TIME_ZONE_INFORMATION
, *PTIME_ZONE_INFORMATION
, *LPTIME_ZONE_INFORMATION
;
1208 // Native version of Timezone Structure
1210 typedef LPTIME_ZONE_INFORMATION PRTL_TIME_ZONE_INFORMATION
;
1215 typedef struct _RTL_PATCH_HEADER
1217 LIST_ENTRY PatchList
;
1218 PVOID PatchImageBase
;
1219 struct _RTL_PATCH_HEADER
*NextPath
;
1222 struct _HOTPATCH_HEADER
*HotpatchHeader
;
1223 UNICODE_STRING TargetDllName
;
1224 PVOID TargetDllBase
;
1225 PLDR_DATA_TABLE_ENTRY TargetLdrDataTableEntry
;
1226 PLDR_DATA_TABLE_ENTRY PatchLdrDataTableEntry
;
1227 struct _SYSTEM_HOTPATCH_CODE_INFORMATION
*CodeInfo
;
1228 } RTL_PATCH_HEADER
, *PRTL_PATCH_HEADER
;
1231 // Header for NLS Files
1233 typedef struct _NLS_FILE_HEADER
1237 USHORT MaximumCharacterSize
;
1239 USHORT UniDefaultChar
;
1240 USHORT TransDefaultChar
;
1241 USHORT TransUniDefaultChar
;
1242 USHORT DBCSCodePage
;
1243 UCHAR LeadByte
[MAXIMUM_LEADBYTES
];
1244 } NLS_FILE_HEADER
, *PNLS_FILE_HEADER
;
1249 typedef struct _RTL_STACK_TRACE_ENTRY
1251 struct _RTL_STACK_TRACE_ENTRY
*HashChain
;
1255 PVOID BackTrace
[32];
1256 } RTL_STACK_TRACE_ENTRY
, *PRTL_STACK_TRACE_ENTRY
;
1258 typedef struct _STACK_TRACE_DATABASE
1260 RTL_CRITICAL_SECTION CriticalSection
;
1261 } STACK_TRACE_DATABASE
, *PSTACK_TRACE_DATABASE
;
1263 #ifndef NTOS_MODE_USER
1266 // Message Resource Entry, Block and Data
1268 typedef struct _MESSAGE_RESOURCE_ENTRY
1272 UCHAR Text
[ANYSIZE_ARRAY
];
1273 } MESSAGE_RESOURCE_ENTRY
, *PMESSAGE_RESOURCE_ENTRY
;
1275 typedef struct _MESSAGE_RESOURCE_BLOCK
1279 ULONG OffsetToEntries
;
1280 } MESSAGE_RESOURCE_BLOCK
, *PMESSAGE_RESOURCE_BLOCK
;
1282 typedef struct _MESSAGE_RESOURCE_DATA
1284 ULONG NumberOfBlocks
;
1285 MESSAGE_RESOURCE_BLOCK Blocks
[ANYSIZE_ARRAY
];
1286 } MESSAGE_RESOURCE_DATA
, *PMESSAGE_RESOURCE_DATA
;