_Out_opt_ PULONG SuspendCount
);
-typedef ULONG APPHELPCACHESERVICECLASS;
NTSYSCALLAPI
NTSTATUS
NTAPI
NtApphelpCacheControl(
_In_ APPHELPCACHESERVICECLASS Service,
- _In_ PVOID ServiceData
+ _In_opt_ PAPPHELP_CACHE_SERVICE_LOOKUP ServiceData
);
NTSYSCALLAPI
BOOLEAN Foreground;
} PROCESS_FOREGROUND_BACKGROUND, *PPROCESS_FOREGROUND_BACKGROUND;
+//
+// Apphelp SHIM Cache
+//
+typedef enum _APPHELPCACHESERVICECLASS
+{
+ ApphelpCacheServiceLookup = 0,
+ ApphelpCacheServiceRemove = 1,
+ ApphelpCacheServiceUpdate = 2,
+ ApphelpCacheServiceFlush = 3,
+ ApphelpCacheServiceDump = 4,
+
+ ApphelpDBGReadRegistry = 0x100,
+ ApphelpDBGWriteRegistry = 0x101,
+} APPHELPCACHESERVICECLASS;
+
+
+typedef struct _APPHELP_CACHE_SERVICE_LOOKUP
+{
+ UNICODE_STRING ImageName;
+ HANDLE ImageHandle;
+} APPHELP_CACHE_SERVICE_LOOKUP, *PAPPHELP_CACHE_SERVICE_LOOKUP;
+
+
//
// Thread Information Structures for NtQueryProcessInformation
//