de/d8d/winnt__old_8h_source.html

#if defined(__ROS_LONG64__)

#undef InterlockedExchange

#define InterlockedExchange(a,b) _InterlockedExchange((long*)a,b)

#undef InterlockedExchangeAdd

#define InterlockedExchangeAdd(a,b) _InterlockedExchangeAdd((long*)a,b)

#undef InterlockedCompareExchange

#define InterlockedCompareExchange(a,b,c) _InterlockedCompareExchange((long*)a,b,c)

#undef InterlockedIncrement

#define InterlockedIncrement(a) _InterlockedIncrement((long*)a)

#undef InterlockedDecrement

#define InterlockedDecrement(a) _InterlockedDecrement((long*)a)

#endif


#undef __C89_NAMELESS

#undef __C89_NAMELESSSTRUCTNAME

#undef __C89_NAMELESSSTRUCTNAME1

#undef __C89_NAMELESSSTRUCTNAME2

#undef __C89_NAMELESSSTRUCTNAME3

#undef __C89_NAMELESSSTRUCTNAME4

#undef __C89_NAMELESSSTRUCTNAME5

#undef __C89_NAMELESSUNIONNAME

#undef __C89_NAMELESSUNIONNAME1

#undef __C89_NAMELESSUNIONNAME2

#undef __C89_NAMELESSUNIONNAME3

#undef __C89_NAMELESSUNIONNAME4

#undef __C89_NAMELESSUNIONNAME5

#undef __C89_NAMELESSUNIONNAME6

#undef __C89_NAMELESSUNIONNAME7

#undef __C89_NAMELESSUNIONNAME8


#if !defined(__WINESRC__) && !defined(WINE_NO_NAMELESS_EXTENSION)

# ifdef __GNUC__

   /* Anonymous structs support starts with gcc 2.96/g++ 2.95 */

#  if (__GNUC__ > 2) || ((__GNUC__ == 2) && ((__GNUC_MINOR__ > 95) || ((__GNUC_MINOR__ == 95) && defined(__cplusplus))))

#   define __C89_NAMELESS __extension__

#  endif

# elif defined(_MSC_VER)

#  define __C89_NAMELESS

# endif

#endif


#ifdef __C89_NAMELESS

# define __C89_NAMELESSSTRUCTNAME

# define __C89_NAMELESSSTRUCTNAME1

# define __C89_NAMELESSSTRUCTNAME2

# define __C89_NAMELESSSTRUCTNAME3

# define __C89_NAMELESSSTRUCTNAME4

# define __C89_NAMELESSSTRUCTNAME5

# define __C89_NAMELESSUNIONNAME

# define __C89_NAMELESSUNIONNAME1

# define __C89_NAMELESSUNIONNAME2

# define __C89_NAMELESSUNIONNAME3

# define __C89_NAMELESSUNIONNAME4

# define __C89_NAMELESSUNIONNAME5

# define __C89_NAMELESSUNIONNAME6

# define __C89_NAMELESSUNIONNAME7

# define __C89_NAMELESSUNIONNAME8

#else

# define __C89_NAMELESS

# define __C89_NAMELESSSTRUCTNAME DUMMYSTRUCTNAME

# define __C89_NAMELESSSTRUCTNAME1 DUMMYSTRUCTNAME1

# define __C89_NAMELESSSTRUCTNAME2 DUMMYSTRUCTNAME2

# define __C89_NAMELESSSTRUCTNAME3 DUMMYSTRUCTNAME3

# define __C89_NAMELESSSTRUCTNAME4 DUMMYSTRUCTNAME4

# define __C89_NAMELESSSTRUCTNAME5 DUMMYSTRUCTNAME5

# define __C89_NAMELESSUNIONNAME DUMMYUNIONNAME

# define __C89_NAMELESSUNIONNAME1 DUMMYUNIONNAME1

# define __C89_NAMELESSUNIONNAME2 DUMMYUNIONNAME2

# define __C89_NAMELESSUNIONNAME3 DUMMYUNIONNAME3

# define __C89_NAMELESSUNIONNAME4 DUMMYUNIONNAME4

# define __C89_NAMELESSUNIONNAME5 DUMMYUNIONNAME5

# define __C89_NAMELESSUNIONNAME6 DUMMYUNIONNAME6

# define __C89_NAMELESSUNIONNAME7 DUMMYUNIONNAME7

# define __C89_NAMELESSUNIONNAME8 DUMMYUNIONNAME8

#endif


#define DECLSPEC_HIDDEN


/*#ifdef _WINE*/

#if defined(__GNUC__) && ((__GNUC__ > 4) || ((__GNUC__ == 4) && (__GNUC_MINOR__ >= 3)))

# define __WINE_ALLOC_SIZE(x) __attribute__((__alloc_size__(x)))

#else

# define __WINE_ALLOC_SIZE(x)

#endif

/*#endif*/


#ifdef __GNUC__

# define _HAVE_INT64

# ifndef _INTEGRAL_MAX_BITS

#  define _INTEGRAL_MAX_BITS 64

# endif

# undef __int64

# define __int64 long long

#elif (defined(__WATCOMC__) || defined(_MSC_VER)) && (defined(_INTEGRAL_MAX_BITS) && _INTEGRAL_MAX_BITS >= 64 )

# define _HAVE_INT64

#endif /* __GNUC__/__WATCOMC */


#ifdef _MSC_VER

# pragma warning(push)

# pragma warning(disable:4201)

# pragma warning(disable:4214)

# pragma warning(disable:4820)

#endif


#define ACE_OBJECT_TYPE_PRESENT           0x00000001

#define ACE_INHERITED_OBJECT_TYPE_PRESENT 0x00000002


/* also in ddk/ntifs.h */

#define COMPRESSION_FORMAT_NONE         (0x0000)

#define COMPRESSION_FORMAT_DEFAULT      (0x0001)

#define COMPRESSION_FORMAT_LZNT1        (0x0002)

#define COMPRESSION_ENGINE_STANDARD     (0x0000)

#define COMPRESSION_ENGINE_MAXIMUM      (0x0100)

#define COMPRESSION_ENGINE_HIBER        (0x0200)

#define ACCESS_ALLOWED_ACE_TYPE         (0x0)

#define ACCESS_DENIED_ACE_TYPE          (0x1)

#define SYSTEM_AUDIT_ACE_TYPE           (0x2)

#define SYSTEM_ALARM_ACE_TYPE           (0x3)

/*end ntifs.h */


#define REG_STANDARD_FORMAT 1

#define REG_LATEST_FORMAT   2

#define REG_NO_COMPRESSION  4


#ifndef WIN32_NO_STATUS


#define STATUS_WAIT_0                    ((DWORD)0x00000000)

#define STATUS_ABANDONED_WAIT_0          ((DWORD)0x00000080)

#define STATUS_USER_APC                  ((DWORD)0x000000C0)

#define STATUS_TIMEOUT                   ((DWORD)0x00000102)

#define STATUS_PENDING                   ((DWORD)0x00000103)

#define STATUS_SEGMENT_NOTIFICATION      ((DWORD)0x40000005)

#define STATUS_GUARD_PAGE_VIOLATION      ((DWORD)0x80000001)

#define STATUS_DATATYPE_MISALIGNMENT     ((DWORD)0x80000002)

#define STATUS_BREAKPOINT                ((DWORD)0x80000003)

#define STATUS_SINGLE_STEP               ((DWORD)0x80000004)

#define STATUS_ACCESS_VIOLATION          ((DWORD)0xC0000005)

#define STATUS_IN_PAGE_ERROR             ((DWORD)0xC0000006)

#define STATUS_INVALID_HANDLE            ((DWORD)0xC0000008)

#define STATUS_NO_MEMORY                 ((DWORD)0xC0000017)

#define STATUS_ILLEGAL_INSTRUCTION       ((DWORD)0xC000001D)

#define STATUS_NONCONTINUABLE_EXCEPTION  ((DWORD)0xC0000025)

#define STATUS_INVALID_DISPOSITION       ((DWORD)0xC0000026)

#define STATUS_ARRAY_BOUNDS_EXCEEDED     ((DWORD)0xC000008C)

#define STATUS_FLOAT_DENORMAL_OPERAND    ((DWORD)0xC000008D)

#define STATUS_FLOAT_DIVIDE_BY_ZERO      ((DWORD)0xC000008E)

#define STATUS_FLOAT_INEXACT_RESULT      ((DWORD)0xC000008F)

#define STATUS_FLOAT_INVALID_OPERATION   ((DWORD)0xC0000090)

#define STATUS_FLOAT_OVERFLOW            ((DWORD)0xC0000091)

#define STATUS_FLOAT_STACK_CHECK         ((DWORD)0xC0000092)

#define STATUS_FLOAT_UNDERFLOW           ((DWORD)0xC0000093)

#define STATUS_INTEGER_DIVIDE_BY_ZERO    ((DWORD)0xC0000094)

#define STATUS_INTEGER_OVERFLOW          ((DWORD)0xC0000095)

#define STATUS_PRIVILEGED_INSTRUCTION    ((DWORD)0xC0000096)

#define STATUS_STACK_OVERFLOW            ((DWORD)0xC00000FD)

#define STATUS_CONTROL_C_EXIT            ((DWORD)0xC000013A)

#define STATUS_FLOAT_MULTIPLE_FAULTS     ((DWORD)0xC00002B4)

#define STATUS_FLOAT_MULTIPLE_TRAPS      ((DWORD)0xC00002B5)

#define STATUS_REG_NAT_CONSUMPTION       ((DWORD)0xC00002C9)

#define STATUS_SXS_EARLY_DEACTIVATION    ((DWORD)0xC015000F)

#define STATUS_SXS_INVALID_DEACTIVATION  ((DWORD)0xC0150010)


#define DBG_EXCEPTION_HANDLED       ((DWORD)0x00010001)

#define DBG_CONTINUE                ((DWORD)0x00010002)

#define DBG_TERMINATE_THREAD        ((DWORD)0x40010003)

#define DBG_TERMINATE_PROCESS       ((DWORD)0x40010004)

#define DBG_CONTROL_C               ((DWORD)0x40010005)

#define DBG_CONTROL_BREAK           ((DWORD)0x40010008)

#define DBG_COMMAND_EXCEPTION       ((DWORD)0x40010009)

#define DBG_EXCEPTION_NOT_HANDLED   ((DWORD)0x80010001)


#endif /* WIN32_NO_STATUS */


#define INVALID_FILE_ATTRIBUTES    ((DWORD)-1)


/* Also in ddk/winddk.h */

#define FILE_LIST_DIRECTORY        0x00000001

#define FILE_READ_DATA            0x00000001

#define FILE_ADD_FILE            0x00000002

#define FILE_WRITE_DATA            0x00000002

#define FILE_ADD_SUBDIRECTORY        0x00000004

#define FILE_APPEND_DATA        0x00000004

#define FILE_CREATE_PIPE_INSTANCE    0x00000004

#define FILE_READ_EA            0x00000008

#define FILE_READ_PROPERTIES        0x00000008

#define FILE_WRITE_EA            0x00000010

#define FILE_WRITE_PROPERTIES        0x00000010

#define FILE_EXECUTE            0x00000020

#define FILE_TRAVERSE            0x00000020

#define FILE_DELETE_CHILD        0x00000040

#define FILE_READ_ATTRIBUTES        0x00000080

#define FILE_WRITE_ATTRIBUTES        0x00000100


#define FILE_SHARE_READ            0x00000001

#define FILE_SHARE_WRITE        0x00000002

#define FILE_SHARE_DELETE        0x00000004

#define FILE_SHARE_VALID_FLAGS        0x00000007


#define FILE_ATTRIBUTE_READONLY            0x00000001

#define FILE_ATTRIBUTE_HIDDEN            0x00000002

#define FILE_ATTRIBUTE_SYSTEM            0x00000004

#define FILE_ATTRIBUTE_DIRECTORY        0x00000010

#define FILE_ATTRIBUTE_ARCHIVE            0x00000020

#define FILE_ATTRIBUTE_DEVICE            0x00000040

#define FILE_ATTRIBUTE_NORMAL            0x00000080

#define FILE_ATTRIBUTE_TEMPORARY        0x00000100

#define FILE_ATTRIBUTE_SPARSE_FILE        0x00000200

#define FILE_ATTRIBUTE_REPARSE_POINT        0x00000400

#define FILE_ATTRIBUTE_COMPRESSED        0x00000800

#define FILE_ATTRIBUTE_OFFLINE            0x00001000

#define FILE_ATTRIBUTE_NOT_CONTENT_INDEXED    0x00002000

#define FILE_ATTRIBUTE_ENCRYPTED        0x00004000

#define FILE_ATTRIBUTE_INTEGRITY_STREAM   0x00008000

#define FILE_ATTRIBUTE_VIRTUAL 0x00010000

#define FILE_ATTRIBUTE_VALID_FLAGS        0x00007fb7

#define FILE_ATTRIBUTE_VALID_SET_FLAGS        0x000031a7


#define FILE_COPY_STRUCTURED_STORAGE        0x00000041

#define FILE_STRUCTURED_STORAGE            0x00000441


#define FILE_VALID_OPTION_FLAGS            0x00ffffff

#define FILE_VALID_PIPE_OPTION_FLAGS        0x00000032

#define FILE_VALID_MAILSLOT_OPTION_FLAGS    0x00000032

#define FILE_VALID_SET_FLAGS            0x00000036


#define FILE_DIRECTORY_FILE        0x00000001

#define FILE_WRITE_THROUGH        0x00000002

#define FILE_SEQUENTIAL_ONLY        0x00000004

#define FILE_NO_INTERMEDIATE_BUFFERING    0x00000008

#define FILE_SYNCHRONOUS_IO_ALERT    0x00000010

#define FILE_SYNCHRONOUS_IO_NONALERT    0x00000020

#define FILE_NON_DIRECTORY_FILE        0x00000040

#define FILE_CREATE_TREE_CONNECTION    0x00000080

#define FILE_COMPLETE_IF_OPLOCKED    0x00000100

#define FILE_NO_EA_KNOWLEDGE        0x00000200

#define FILE_OPEN_REMOTE_INSTANCE    0x00000400

#define FILE_RANDOM_ACCESS        0x00000800

#define FILE_DELETE_ON_CLOSE        0x00001000

#define FILE_OPEN_BY_FILE_ID        0x00002000

#define FILE_OPEN_FOR_BACKUP_INTENT    0x00004000

#define FILE_NO_COMPRESSION        0x00008000

#define FILE_RESERVE_OPFILTER        0x00100000

#define FILE_OPEN_REPARSE_POINT        0x00200000

#define FILE_OPEN_NO_RECALL        0x00400000

#define FILE_OPEN_FOR_FREE_SPACE_QUERY    0x00800000


#define FILE_ALL_ACCESS \

  (STANDARD_RIGHTS_REQUIRED | \

   SYNCHRONIZE | \

   0x1FF)


#define FILE_GENERIC_EXECUTE \

  (STANDARD_RIGHTS_EXECUTE | \

   FILE_READ_ATTRIBUTES | \

   FILE_EXECUTE | \

   SYNCHRONIZE)


#define FILE_GENERIC_READ \

  (STANDARD_RIGHTS_READ | \

   FILE_READ_DATA | \

   FILE_READ_ATTRIBUTES | \

   FILE_READ_EA | \

   SYNCHRONIZE)


#define FILE_GENERIC_WRITE \

  (STANDARD_RIGHTS_WRITE | \

   FILE_WRITE_DATA | \

   FILE_WRITE_ATTRIBUTES | \

   FILE_WRITE_EA | \

   FILE_APPEND_DATA | \

   SYNCHRONIZE)

/* end winddk.h */

/* also in ddk/ntifs.h */

#define FILE_NOTIFY_CHANGE_FILE_NAME    0x00000001

#define FILE_NOTIFY_CHANGE_DIR_NAME    0x00000002

#define FILE_NOTIFY_CHANGE_NAME        0x00000003

#define FILE_NOTIFY_CHANGE_ATTRIBUTES    0x00000004

#define FILE_NOTIFY_CHANGE_SIZE        0x00000008

#define FILE_NOTIFY_CHANGE_LAST_WRITE    0x00000010

#define FILE_NOTIFY_CHANGE_LAST_ACCESS    0x00000020

#define FILE_NOTIFY_CHANGE_CREATION    0x00000040

#define FILE_NOTIFY_CHANGE_EA        0x00000080

#define FILE_NOTIFY_CHANGE_SECURITY    0x00000100

#define FILE_NOTIFY_CHANGE_STREAM_NAME    0x00000200

#define FILE_NOTIFY_CHANGE_STREAM_SIZE    0x00000400

#define FILE_NOTIFY_CHANGE_STREAM_WRITE    0x00000800

#define FILE_NOTIFY_VALID_MASK        0x00000fff


#define FILE_CASE_SENSITIVE_SEARCH        0x00000001

#define FILE_CASE_PRESERVED_NAMES         0x00000002

#define FILE_UNICODE_ON_DISK              0x00000004

#define FILE_PERSISTENT_ACLS              0x00000008

#define FILE_FILE_COMPRESSION             0x00000010

#define FILE_VOLUME_QUOTAS                0x00000020

#define FILE_SUPPORTS_SPARSE_FILES        0x00000040

#define FILE_SUPPORTS_REPARSE_POINTS      0x00000080

#define FILE_SUPPORTS_REMOTE_STORAGE      0x00000100

#define FS_LFN_APIS                       0x00004000

#define FILE_VOLUME_IS_COMPRESSED         0x00008000

#define FILE_SUPPORTS_OBJECT_IDS          0x00010000

#define FILE_SUPPORTS_ENCRYPTION          0x00020000

#define FILE_NAMED_STREAMS                0x00040000

#define FILE_READ_ONLY_VOLUME             0x00080000

#define FILE_SEQUENTIAL_WRITE_ONCE        0x00100000

#define FILE_SUPPORTS_TRANSACTIONS        0x00200000

#define FILE_SUPPORTS_HARD_LINKS          0x00400000

#define FILE_SUPPORTS_EXTENDED_ATTRIBUTES 0x00800000

#define FILE_SUPPORTS_OPEN_BY_FILE_ID     0x01000000

#define FILE_SUPPORTS_USN_JOURNAL         0x02000000

#define FILE_SUPPORTS_INTEGRITY_STREAMS   0x04000000

#define FILE_SUPPORTS_BLOCK_REFCOUNTING   0x08000000

#define FILE_SUPPORTS_SPARSE_VDL          0x10000000

#define FILE_DAX_VOLUME                   0x20000000


#define IO_COMPLETION_QUERY_STATE       0x0001

#define IO_COMPLETION_MODIFY_STATE      0x0002

#define IO_COMPLETION_ALL_ACCESS        (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)

/* end ntifs.h */


/* also in ddk/winddk.h */

#define DUPLICATE_CLOSE_SOURCE        0x00000001

#define DUPLICATE_SAME_ACCESS        0x00000002

/* end winddk.k */


#define MAILSLOT_NO_MESSAGE    ((DWORD)-1)

#define MAILSLOT_WAIT_FOREVER    ((DWORD)-1)

#define PROCESS_TERMINATE    1

#define PROCESS_CREATE_THREAD    2

#define PROCESS_SET_SESSIONID    4

#define PROCESS_VM_OPERATION    8

#define PROCESS_VM_READ    16

#define PROCESS_VM_WRITE    32

#define PROCESS_CREATE_PROCESS    128

#define PROCESS_SET_QUOTA    256

#define PROCESS_SET_INFORMATION    512

#define PROCESS_QUERY_INFORMATION    1024

#define PROCESS_SUSPEND_RESUME    2048

#define PROCESS_QUERY_LIMITED_INFORMATION 0x1000

#define PROCESS_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0xFFF)

#define PROCESS_DUP_HANDLE    64

#define THREAD_TERMINATE    1

#define THREAD_SUSPEND_RESUME    2

#define THREAD_GET_CONTEXT    8

#define THREAD_SET_CONTEXT    16

#define THREAD_SET_INFORMATION    32

#define THREAD_QUERY_INFORMATION    64

#define THREAD_SET_THREAD_TOKEN    128

#define THREAD_IMPERSONATE    256

#define THREAD_DIRECT_IMPERSONATION    0x200

#define THREAD_QUERY_LIMITED_INFORMATION 0x0800

#define THREAD_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3FF)

#define MUTANT_QUERY_STATE    0x0001

#define MUTANT_ALL_ACCESS    (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|MUTANT_QUERY_STATE)

#define TIMER_QUERY_STATE    0x0001

#define TIMER_MODIFY_STATE    0x0002

#define TIMER_ALL_ACCESS    (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|TIMER_QUERY_STATE|TIMER_MODIFY_STATE)

#define THREAD_BASE_PRIORITY_LOWRT    15

#define THREAD_BASE_PRIORITY_MAX    2

#define THREAD_BASE_PRIORITY_MIN    (-2)

#define THREAD_BASE_PRIORITY_IDLE    (-15)


#define PROCESS_SET_LIMITED_INFORMATION 0x2000

#define THREAD_RESUME 0x1000


#define SE_CREATE_TOKEN_NAME    TEXT("SeCreateTokenPrivilege")

#define SE_ASSIGNPRIMARYTOKEN_NAME    TEXT("SeAssignPrimaryTokenPrivilege")

#define SE_LOCK_MEMORY_NAME    TEXT("SeLockMemoryPrivilege")

#define SE_INCREASE_QUOTA_NAME    TEXT("SeIncreaseQuotaPrivilege")

#define SE_UNSOLICITED_INPUT_NAME    TEXT("SeUnsolicitedInputPrivilege")

#define SE_MACHINE_ACCOUNT_NAME TEXT("SeMachineAccountPrivilege")

#define SE_TCB_NAME    TEXT("SeTcbPrivilege")

#define SE_SECURITY_NAME    TEXT("SeSecurityPrivilege")

#define SE_TAKE_OWNERSHIP_NAME    TEXT("SeTakeOwnershipPrivilege")

#define SE_LOAD_DRIVER_NAME    TEXT("SeLoadDriverPrivilege")

#define SE_SYSTEM_PROFILE_NAME    TEXT("SeSystemProfilePrivilege")

#define SE_SYSTEMTIME_NAME    TEXT("SeSystemtimePrivilege")

#define SE_PROF_SINGLE_PROCESS_NAME    TEXT("SeProfileSingleProcessPrivilege")

#define SE_INC_BASE_PRIORITY_NAME    TEXT("SeIncreaseBasePriorityPrivilege")

#define SE_CREATE_PAGEFILE_NAME TEXT("SeCreatePagefilePrivilege")

#define SE_CREATE_PERMANENT_NAME    TEXT("SeCreatePermanentPrivilege")

#define SE_BACKUP_NAME TEXT("SeBackupPrivilege")

#define SE_RESTORE_NAME    TEXT("SeRestorePrivilege")

#define SE_SHUTDOWN_NAME    TEXT("SeShutdownPrivilege")

#define SE_DEBUG_NAME    TEXT("SeDebugPrivilege")

#define SE_AUDIT_NAME    TEXT("SeAuditPrivilege")

#define SE_SYSTEM_ENVIRONMENT_NAME    TEXT("SeSystemEnvironmentPrivilege")

#define SE_CHANGE_NOTIFY_NAME    TEXT("SeChangeNotifyPrivilege")

#define SE_REMOTE_SHUTDOWN_NAME    TEXT("SeRemoteShutdownPrivilege")

#define SE_UNDOCK_NAME    TEXT("SeUndockPrivilege")

#define SE_SYNC_AGENT_NAME    TEXT("SeSyncAgentPrivilege")

#define SE_ENABLE_DELEGATION_NAME    TEXT("SeEnableDelegationPrivilege")

#define SE_MANAGE_VOLUME_NAME    TEXT("SeManageVolumePrivilege")

#define SE_IMPERSONATE_NAME    TEXT("SeImpersonatePrivilege")

#define SE_CREATE_GLOBAL_NAME    TEXT("SeCreateGlobalPrivilege")


#define SE_GROUP_MANDATORY          0x00000001

#define SE_GROUP_ENABLED_BY_DEFAULT 0x00000002

#define SE_GROUP_ENABLED            0x00000004

#define SE_GROUP_OWNER              0x00000008

#define SE_GROUP_USE_FOR_DENY_ONLY  0x00000010

#define SE_GROUP_INTEGRITY          0x00000020

#define SE_GROUP_INTEGRITY_ENABLED  0x00000040

#define SE_GROUP_LOGON_ID           0xC0000000

#define SE_GROUP_RESOURCE           0x20000000

#define SE_GROUP_VALID_ATTRIBUTES   0xE000007F


/* FIXME: non-standard */

#define LANG_ESPERANTO      0x8f

#define LANG_WALON          0x90

#define LANG_CORNISH        0x92


/* FIXME: not present in the official headers */

#define LANG_MALAGASY       0x8d

#define LANG_GAELIC         0x94

#define LANG_SAAMI          0x3b

#define LANG_SUTU           0x30

#define LANG_TSONGA         0x31

#define LANG_VENDA          0x33

#define LANG_MANX_GAELIC    0x94

#define SUBLANG_PORTUGUESE_PORTUGAL   0x02


#define PROCESSOR_INTEL_386 386

#define PROCESSOR_INTEL_486 486

#define PROCESSOR_INTEL_PENTIUM 586

#define PROCESSOR_MIPS_R4000 4000

#define PROCESSOR_ALPHA_21064 21064

#define PROCESSOR_INTEL_IA64 2200

#define PROCESSOR_PPC_601 601

#define PROCESSOR_PPC_603 603

#define PROCESSOR_PPC_604 604

#define PROCESSOR_PPC_620 620

#define PROCESSOR_INTEL_860 860

#define PROCESSOR_AMD_X8664 8664

#define PROCESSOR_MIPS_R2000 2000

#define PROCESSOR_MIPS_R3000 3000

#define PROCESSOR_HITACHI_SH3 10003

#define PROCESSOR_HITACHI_SH3E 10004

#define PROCESSOR_HITACHI_SH4 10005

#define PROCESSOR_MOTOROLA_821 821

#define PROCESSOR_SHx_SH3 103

#define PROCESSOR_SHx_SH4 104

#define PROCESSOR_STRONGARM 2577

#define PROCESSOR_ARM720 1824

#define PROCESSOR_ARM820 2080

#define PROCESSOR_ARM920 2336

#define PROCESSOR_ARM_7TDMI 70001

#define PROCESSOR_ARCHITECTURE_INTEL 0

#define PROCESSOR_ARCHITECTURE_MIPS 1

#define PROCESSOR_ARCHITECTURE_ALPHA 2

#define PROCESSOR_ARCHITECTURE_PPC 3

#define PROCESSOR_ARCHITECTURE_SHX 4

#define PROCESSOR_ARCHITECTURE_ARM 5

#define PROCESSOR_ARCHITECTURE_IA64 6

#define PROCESSOR_ARCHITECTURE_ALPHA64 7

#define PROCESSOR_ARCHITECTURE_MSIL 8

#define PROCESSOR_ARCHITECTURE_AMD64 9

#define PROCESSOR_ARCHITECTURE_UNKNOWN 0xFFFF


/* also in ddk/ntifs.h */

#define FILE_ACTION_ADDED                   0x00000001

#define FILE_ACTION_REMOVED                 0x00000002

#define FILE_ACTION_MODIFIED                0x00000003

#define FILE_ACTION_RENAMED_OLD_NAME        0x00000004

#define FILE_ACTION_RENAMED_NEW_NAME        0x00000005

#define FILE_ACTION_ADDED_STREAM            0x00000006

#define FILE_ACTION_REMOVED_STREAM          0x00000007

#define FILE_ACTION_MODIFIED_STREAM         0x00000008

#define FILE_ACTION_REMOVED_BY_DELETE       0x00000009

#define FILE_ACTION_ID_NOT_TUNNELLED        0x0000000A

#define FILE_ACTION_TUNNELLED_ID_COLLISION  0x0000000B

/* end ntifs.h */

#define HEAP_NO_SERIALIZE 1

#define HEAP_GROWABLE 2

#define HEAP_GENERATE_EXCEPTIONS 4

#define HEAP_ZERO_MEMORY 8

#define HEAP_REALLOC_IN_PLACE_ONLY 16

#define HEAP_TAIL_CHECKING_ENABLED 32

#define HEAP_FREE_CHECKING_ENABLED 64

#define HEAP_DISABLE_COALESCE_ON_FREE 128

#define HEAP_CREATE_ALIGN_16 0x10000

#define HEAP_CREATE_ENABLE_TRACING 0x20000

#define HEAP_CREATE_ENABLE_EXECUTE 0x00040000

#define HEAP_MAXIMUM_TAG 0xFFF

#define HEAP_PSEUDO_TAG_FLAG 0x8000

#define HEAP_TAG_SHIFT 16

#define HEAP_MAKE_TAG_FLAGS(b,o) ((DWORD)((b)+(o)<<16)))


#define KEY_QUERY_VALUE 1

#define KEY_SET_VALUE 2

#define KEY_CREATE_SUB_KEY 4

#define KEY_ENUMERATE_SUB_KEYS 8

#define KEY_NOTIFY 16

#define KEY_CREATE_LINK 32

#define KEY_WOW64_64KEY         0x00000100

#define KEY_WOW64_32KEY         0x00000200

#define KEY_WOW64_RES           0x00000300


#define KEY_WRITE 0x20006

#define KEY_EXECUTE 0x20019

#define KEY_READ 0x20019

#define KEY_ALL_ACCESS 0xf003f

#define REG_WHOLE_HIVE_VOLATILE    1

#define REG_REFRESH_HIVE    2

#define REG_NO_LAZY_FLUSH    4

#define REG_FORCE_RESTORE    8

#define REG_OPTION_RESERVED    0

#define REG_OPTION_NON_VOLATILE    0

#define REG_OPTION_VOLATILE    1

#define REG_OPTION_CREATE_LINK    2

#define REG_OPTION_BACKUP_RESTORE    4

#define REG_OPTION_OPEN_LINK    8

#define REG_LEGAL_OPTION    15

#define MAXIMUM_PROCESSORS 32

#define PAGE_NOACCESS    0x0001

#define PAGE_READONLY    0x0002

#define PAGE_READWRITE    0x0004

#define PAGE_WRITECOPY    0x0008

#define PAGE_EXECUTE    0x0010

#define PAGE_EXECUTE_READ    0x0020

#define PAGE_EXECUTE_READWRITE    0x0040

#define PAGE_EXECUTE_WRITECOPY    0x0080

#define PAGE_GUARD        0x0100

#define PAGE_NOCACHE        0x0200

#define PAGE_WRITECOMBINE    0x0400

#define MEM_COMMIT           0x1000

#define MEM_RESERVE          0x2000

#define MEM_DECOMMIT         0x4000

#define MEM_RELEASE          0x8000

#define MEM_FREE            0x10000

#define MEM_PRIVATE         0x20000

#define MEM_MAPPED          0x40000

#define MEM_RESET           0x80000

#define MEM_TOP_DOWN       0x100000

#define MEM_WRITE_WATCH       0x200000 /* 98/Me */

#define MEM_PHYSICAL       0x400000

#define MEM_4MB_PAGES    0x80000000

#define MEM_IMAGE        SEC_IMAGE

#define SEC_NO_CHANGE    0x00400000

#define SEC_FILE    0x00800000

#define SEC_IMAGE    0x01000000

#define SEC_VLM        0x02000000

#define SEC_RESERVE    0x04000000

#define SEC_COMMIT    0x08000000

#define SEC_NOCACHE    0x10000000

#define SEC_WRITECOMBINE 0x40000000

#define SEC_LARGE_PAGES  0x80000000

#define SEC_IMAGE_NO_EXECUTE (SEC_IMAGE | SEC_NOCACHE)

#define SECTION_MAP_EXECUTE_EXPLICIT 0x0020

#define SECTION_EXTEND_SIZE 16

#define SECTION_MAP_READ 4

#define SECTION_MAP_WRITE 2

#define SECTION_QUERY 1

#define SECTION_MAP_EXECUTE 8

#define SECTION_ALL_ACCESS 0xf001f

#define WRITE_WATCH_FLAG_RESET 0x01

#define MESSAGE_RESOURCE_UNICODE 1

#define RTL_CRITSECT_TYPE 0

#define RTL_RESOURCE_TYPE 1


#define AT_ROUND_TO_PAGE 0x40000000


#define IMAGE_SIZEOF_FILE_HEADER    20

#define IMAGE_FILE_RELOCS_STRIPPED    1

#define IMAGE_FILE_EXECUTABLE_IMAGE    2

#define IMAGE_FILE_LINE_NUMS_STRIPPED    4

#define IMAGE_FILE_LOCAL_SYMS_STRIPPED    8

#define IMAGE_FILE_AGGRESIVE_WS_TRIM     16

#define IMAGE_FILE_LARGE_ADDRESS_AWARE    32

#define IMAGE_FILE_BYTES_REVERSED_LO    128

#define IMAGE_FILE_32BIT_MACHINE    256

#define IMAGE_FILE_DEBUG_STRIPPED    512

#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP    1024

#define IMAGE_FILE_NET_RUN_FROM_SWAP    2048

#define IMAGE_FILE_SYSTEM    4096

#define IMAGE_FILE_DLL    8192

#define IMAGE_FILE_UP_SYSTEM_ONLY    16384

#define IMAGE_FILE_BYTES_REVERSED_HI    32768

#define IMAGE_FILE_MACHINE_UNKNOWN    0


#define IMAGE_FILE_MACHINE_AM33       0x1d3

#define IMAGE_FILE_MACHINE_AMD64      0x8664

#define IMAGE_FILE_MACHINE_ARM        0x1c0

#define IMAGE_FILE_MACHINE_ARMNT      0x1c4

#define IMAGE_FILE_MACHINE_EBC        0xebc

#define IMAGE_FILE_MACHINE_I386       0x14c

#define IMAGE_FILE_MACHINE_IA64       0x200

#define IMAGE_FILE_MACHINE_M32R       0x9041

#define IMAGE_FILE_MACHINE_MIPS16     0x266

#define IMAGE_FILE_MACHINE_MIPSFPU    0x366

#define IMAGE_FILE_MACHINE_MIPSFPU16  0x466

#define IMAGE_FILE_MACHINE_POWERPC    0x1f0

#define IMAGE_FILE_MACHINE_POWERPCFP  0x1f1

#define IMAGE_FILE_MACHINE_R4000      0x166

#define IMAGE_FILE_MACHINE_SH3        0x1a2

#define IMAGE_FILE_MACHINE_SH3E       0x01a4

#define IMAGE_FILE_MACHINE_SH3DSP     0x1a3

#define IMAGE_FILE_MACHINE_SH4        0x1a6

#define IMAGE_FILE_MACHINE_SH5        0x1a8

#define IMAGE_FILE_MACHINE_THUMB      0x1c2

#define IMAGE_FILE_MACHINE_WCEMIPSV2  0x169

#define IMAGE_FILE_MACHINE_R3000      0x162

#define IMAGE_FILE_MACHINE_R10000     0x168

#define IMAGE_FILE_MACHINE_ALPHA      0x184

#define IMAGE_FILE_MACHINE_ALPHA64    0x0284

#define IMAGE_FILE_MACHINE_AXP64      IMAGE_FILE_MACHINE_ALPHA64

#define IMAGE_FILE_MACHINE_CEE        0xC0EE

#define IMAGE_FILE_MACHINE_TRICORE    0x0520

#define IMAGE_FILE_MACHINE_CEF        0x0CEF

#define IMAGE_FILE_MACHINE_ARM64      0xAA64


#define IMAGE_FILE_EXPORT_DIRECTORY        0

#define IMAGE_FILE_IMPORT_DIRECTORY        1

#define IMAGE_FILE_RESOURCE_DIRECTORY        2

#define IMAGE_FILE_EXCEPTION_DIRECTORY        3

#define IMAGE_FILE_SECURITY_DIRECTORY        4

#define IMAGE_FILE_BASE_RELOCATION_TABLE    5

#define IMAGE_FILE_DEBUG_DIRECTORY        6

#define IMAGE_FILE_DESCRIPTION_STRING        7

#define IMAGE_FILE_MACHINE_VALUE        8  /* Mips */

#define IMAGE_FILE_THREAD_LOCAL_STORAGE        9

#define IMAGE_FILE_CALLBACK_DIRECTORY        10


#define IMAGE_DOS_SIGNATURE 0x5A4D

#define IMAGE_OS2_SIGNATURE 0x454E

#define IMAGE_OS2_SIGNATURE_LE 0x454C

#define IMAGE_VXD_SIGNATURE 0x454C

#define IMAGE_NT_SIGNATURE 0x00004550

#define IMAGE_NT_OPTIONAL_HDR32_MAGIC 0x10b

#define IMAGE_NT_OPTIONAL_HDR64_MAGIC 0x20b

#ifdef _WIN64

#define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR64_MAGIC

#else

#define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR32_MAGIC

#endif

#define IMAGE_ROM_OPTIONAL_HDR_MAGIC 0x107

#define IMAGE_SEPARATE_DEBUG_SIGNATURE 0x4944

#define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 16

#define IMAGE_SIZEOF_ROM_OPTIONAL_HEADER 56

#define IMAGE_SIZEOF_STD_OPTIONAL_HEADER 28

#define IMAGE_SIZEOF_NT_OPTIONAL_HEADER 224

#define IMAGE_SIZEOF_SHORT_NAME 8

#define IMAGE_SIZEOF_SECTION_HEADER 40

#define IMAGE_SIZEOF_SYMBOL 18

#define IMAGE_SIZEOF_AUX_SYMBOL 18

#define IMAGE_SIZEOF_RELOCATION 10

#define IMAGE_SIZEOF_BASE_RELOCATION 8

#define IMAGE_SIZEOF_LINENUMBER 6

#define IMAGE_SIZEOF_ARCHIVE_MEMBER_HDR 60

#define SIZEOF_RFPO_DATA 16


#define IMAGE_SUBSYSTEM_UNKNOWN                      0

#define IMAGE_SUBSYSTEM_NATIVE                       1

#define IMAGE_SUBSYSTEM_WINDOWS_GUI                  2

#define IMAGE_SUBSYSTEM_WINDOWS_CUI                  3

#define IMAGE_SUBSYSTEM_OS2_CUI                      5

#define IMAGE_SUBSYSTEM_POSIX_CUI                    7

#define IMAGE_SUBSYSTEM_NATIVE_WINDOWS               8

#define IMAGE_SUBSYSTEM_WINDOWS_CE_GUI               9

#define IMAGE_SUBSYSTEM_EFI_APPLICATION             10

#define IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER     11

#define IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER          12

#define IMAGE_SUBSYSTEM_EFI_ROM                     13

#define IMAGE_SUBSYSTEM_XBOX                        14


#define IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE 0x0040

#define IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY 0x0080

#define IMAGE_DLLCHARACTERISTICS_NX_COMPAT 0x0100

#define IMAGE_DLLCHARACTERISTICS_NO_ISOLATION 0x0200

#define IMAGE_DLLCHARACTERISTICS_NO_SEH 0x0400

#define IMAGE_DLLCHARACTERISTICS_NO_BIND 0x0800

#define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER 0x2000

#define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE 0x8000

#define IMAGE_FIRST_SECTION(h) ((PIMAGE_SECTION_HEADER) ((ULONG_PTR)h+FIELD_OFFSET(IMAGE_NT_HEADERS,OptionalHeader)+((PIMAGE_NT_HEADERS)(h))->FileHeader.SizeOfOptionalHeader))

#define IMAGE_DIRECTORY_ENTRY_EXPORT    0

#define IMAGE_DIRECTORY_ENTRY_IMPORT    1

#define IMAGE_DIRECTORY_ENTRY_RESOURCE    2

#define IMAGE_DIRECTORY_ENTRY_EXCEPTION    3

#define IMAGE_DIRECTORY_ENTRY_SECURITY    4

#define IMAGE_DIRECTORY_ENTRY_BASERELOC    5

#define IMAGE_DIRECTORY_ENTRY_DEBUG    6

#define IMAGE_DIRECTORY_ENTRY_COPYRIGHT    7

#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR    8

#define IMAGE_DIRECTORY_ENTRY_TLS    9

#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG    10

#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT    11

#define IMAGE_DIRECTORY_ENTRY_IAT    12

#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT    13

#define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR    14

#define IMAGE_SCN_TYPE_REG 0

#define IMAGE_SCN_TYPE_DSECT 1

//#define IMAGE_SCN_TYPE_NOLOAD 2

#define IMAGE_SCN_TYPE_GROUP 4

#define IMAGE_SCN_TYPE_NO_PAD 8

#define IMAGE_SCN_CNT_CODE 32

#define IMAGE_SCN_CNT_INITIALIZED_DATA 64

#define IMAGE_SCN_CNT_UNINITIALIZED_DATA 128

#define IMAGE_SCN_LNK_OTHER 256

#define IMAGE_SCN_LNK_INFO 512

#define IMAGE_SCN_LNK_REMOVE 2048

#define IMAGE_SCN_LNK_COMDAT 4096

#define IMAGE_SCN_MEM_FARDATA 0x8000

#define IMAGE_SCN_MEM_PURGEABLE 0x20000

#define IMAGE_SCN_MEM_16BIT 0x20000

#define IMAGE_SCN_MEM_LOCKED  0x40000

#define IMAGE_SCN_MEM_PRELOAD 0x80000

#define IMAGE_SCN_ALIGN_1BYTES 0x100000

#define IMAGE_SCN_ALIGN_2BYTES 0x200000

#define IMAGE_SCN_ALIGN_4BYTES 0x300000

#define IMAGE_SCN_ALIGN_8BYTES 0x400000

#define IMAGE_SCN_ALIGN_16BYTES 0x500000

#define IMAGE_SCN_ALIGN_32BYTES 0x600000

#define IMAGE_SCN_ALIGN_64BYTES 0x700000

#define IMAGE_SCN_LNK_NRELOC_OVFL 0x1000000

#define IMAGE_SCN_MEM_DISCARDABLE 0x2000000

#define IMAGE_SCN_MEM_NOT_CACHED 0x4000000

#define IMAGE_SCN_MEM_NOT_PAGED 0x8000000

#define IMAGE_SCN_MEM_SHARED 0x10000000

#define IMAGE_SCN_MEM_EXECUTE 0x20000000

#define IMAGE_SCN_MEM_READ 0x40000000

#define IMAGE_SCN_MEM_WRITE 0x80000000

#define IMAGE_SYM_UNDEFINED    0

#define IMAGE_SYM_ABSOLUTE (-1)

#define IMAGE_SYM_DEBUG    (-2)

#define IMAGE_SYM_TYPE_NULL 0

#define IMAGE_SYM_TYPE_VOID 1

#define IMAGE_SYM_TYPE_CHAR 2

#define IMAGE_SYM_TYPE_SHORT 3

#define IMAGE_SYM_TYPE_INT 4

#define IMAGE_SYM_TYPE_LONG 5

#define IMAGE_SYM_TYPE_FLOAT 6

#define IMAGE_SYM_TYPE_DOUBLE 7

#define IMAGE_SYM_TYPE_STRUCT 8

#define IMAGE_SYM_TYPE_UNION 9

#define IMAGE_SYM_TYPE_ENUM 10

#define IMAGE_SYM_TYPE_MOE 11

#define IMAGE_SYM_TYPE_BYTE 12

#define IMAGE_SYM_TYPE_WORD 13

#define IMAGE_SYM_TYPE_UINT 14

#define IMAGE_SYM_TYPE_DWORD 15

#define IMAGE_SYM_TYPE_PCODE 32768

#define IMAGE_SYM_DTYPE_NULL 0

#define IMAGE_SYM_DTYPE_POINTER 1

#define IMAGE_SYM_DTYPE_FUNCTION 2

#define IMAGE_SYM_DTYPE_ARRAY 3

#define IMAGE_SYM_CLASS_END_OF_FUNCTION    (-1)

#define IMAGE_SYM_CLASS_NULL 0

#define IMAGE_SYM_CLASS_AUTOMATIC 1

#define IMAGE_SYM_CLASS_EXTERNAL 2

#define IMAGE_SYM_CLASS_STATIC 3

#define IMAGE_SYM_CLASS_REGISTER 4

#define IMAGE_SYM_CLASS_EXTERNAL_DEF 5

#define IMAGE_SYM_CLASS_LABEL 6

#define IMAGE_SYM_CLASS_UNDEFINED_LABEL 7

#define IMAGE_SYM_CLASS_MEMBER_OF_STRUCT 8

#define IMAGE_SYM_CLASS_ARGUMENT 9

#define IMAGE_SYM_CLASS_STRUCT_TAG 10

#define IMAGE_SYM_CLASS_MEMBER_OF_UNION 11

#define IMAGE_SYM_CLASS_UNION_TAG 12

#define IMAGE_SYM_CLASS_TYPE_DEFINITION 13

#define IMAGE_SYM_CLASS_UNDEFINED_STATIC 14

#define IMAGE_SYM_CLASS_ENUM_TAG 15

#define IMAGE_SYM_CLASS_MEMBER_OF_ENUM 16

#define IMAGE_SYM_CLASS_REGISTER_PARAM 17

#define IMAGE_SYM_CLASS_BIT_FIELD 18

#define IMAGE_SYM_CLASS_FAR_EXTERNAL 68

#define IMAGE_SYM_CLASS_BLOCK 100

#define IMAGE_SYM_CLASS_FUNCTION 101

#define IMAGE_SYM_CLASS_END_OF_STRUCT 102

#define IMAGE_SYM_CLASS_FILE 103

#define IMAGE_SYM_CLASS_SECTION 104

#define IMAGE_SYM_CLASS_WEAK_EXTERNAL 105

#define IMAGE_COMDAT_SELECT_NODUPLICATES 1

#define IMAGE_COMDAT_SELECT_ANY 2

#define IMAGE_COMDAT_SELECT_SAME_SIZE 3

#define IMAGE_COMDAT_SELECT_EXACT_MATCH 4

#define IMAGE_COMDAT_SELECT_ASSOCIATIVE 5

#define IMAGE_COMDAT_SELECT_LARGEST 6

#define IMAGE_COMDAT_SELECT_NEWEST 7

#define IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY 1

#define IMAGE_WEAK_EXTERN_SEARCH_LIBRARY 2

#define IMAGE_WEAK_EXTERN_SEARCH_ALIAS 3

#define IMAGE_REL_I386_ABSOLUTE 0

#define IMAGE_REL_I386_DIR16 1

#define IMAGE_REL_I386_REL16 2

#define IMAGE_REL_I386_DIR32 6

#define IMAGE_REL_I386_DIR32NB 7

#define IMAGE_REL_I386_SEG12 9

#define IMAGE_REL_I386_SECTION 10

#define IMAGE_REL_I386_SECREL 11

#define IMAGE_REL_I386_REL32 20

#define IMAGE_REL_MIPS_ABSOLUTE 0

#define IMAGE_REL_MIPS_REFHALF 1

#define IMAGE_REL_MIPS_REFWORD 2

#define IMAGE_REL_MIPS_JMPADDR 3

#define IMAGE_REL_MIPS_REFHI 4

#define IMAGE_REL_MIPS_REFLO 5

#define IMAGE_REL_MIPS_GPREL 6

#define IMAGE_REL_MIPS_LITERAL 7

#define IMAGE_REL_MIPS_SECTION 10

#define IMAGE_REL_MIPS_SECREL 11

#define IMAGE_REL_MIPS_SECRELLO 12

#define IMAGE_REL_MIPS_SECRELHI 13

#define IMAGE_REL_MIPS_REFWORDNB 34

#define IMAGE_REL_MIPS_PAIR 35

#define IMAGE_REL_ALPHA_ABSOLUTE 0

#define IMAGE_REL_ALPHA_REFLONG 1

#define IMAGE_REL_ALPHA_REFQUAD 2

#define IMAGE_REL_ALPHA_GPREL32 3

#define IMAGE_REL_ALPHA_LITERAL 4

#define IMAGE_REL_ALPHA_LITUSE 5

#define IMAGE_REL_ALPHA_GPDISP 6

#define IMAGE_REL_ALPHA_BRADDR 7

#define IMAGE_REL_ALPHA_HINT 8

#define IMAGE_REL_ALPHA_INLINE_REFLONG 9

#define IMAGE_REL_ALPHA_REFHI 10

#define IMAGE_REL_ALPHA_REFLO 11

#define IMAGE_REL_ALPHA_PAIR 12

#define IMAGE_REL_ALPHA_MATCH 13

#define IMAGE_REL_ALPHA_SECTION 14

#define IMAGE_REL_ALPHA_SECREL 15

#define IMAGE_REL_ALPHA_REFLONGNB 16

#define IMAGE_REL_ALPHA_SECRELLO 17

#define IMAGE_REL_ALPHA_SECRELHI 18

#define IMAGE_REL_PPC_ABSOLUTE 0

#define IMAGE_REL_PPC_ADDR64 1

#define IMAGE_REL_PPC_ADDR32 2

#define IMAGE_REL_PPC_ADDR24 3

#define IMAGE_REL_PPC_ADDR16 4

#define IMAGE_REL_PPC_ADDR14 5

#define IMAGE_REL_PPC_REL24 6

#define IMAGE_REL_PPC_REL14 7

#define IMAGE_REL_PPC_TOCREL16 8

#define IMAGE_REL_PPC_TOCREL14 9

#define IMAGE_REL_PPC_ADDR32NB 10

#define IMAGE_REL_PPC_SECREL 11

#define IMAGE_REL_PPC_SECTION 12

#define IMAGE_REL_PPC_IFGLUE 13

#define IMAGE_REL_PPC_IMGLUE 14

#define IMAGE_REL_PPC_SECREL16 15

#define IMAGE_REL_PPC_REFHI 16

#define IMAGE_REL_PPC_REFLO 17

#define IMAGE_REL_PPC_PAIR 18

#define IMAGE_REL_PPC_TYPEMASK 255

#define IMAGE_REL_PPC_NEG 256

#define IMAGE_REL_PPC_BRTAKEN 512

#define IMAGE_REL_PPC_BRNTAKEN 1024

#define IMAGE_REL_PPC_TOCDEFN 2048

#define IMAGE_REL_BASED_ABSOLUTE 0

#define IMAGE_REL_BASED_HIGH 1

#define IMAGE_REL_BASED_LOW 2

#define IMAGE_REL_BASED_HIGHLOW 3

#define IMAGE_REL_BASED_HIGHADJ 4

#define IMAGE_REL_BASED_MIPS_JMPADDR 5

#define IMAGE_REL_BASED_MIPS_JMPADDR16 9

#define IMAGE_REL_BASED_IA64_IMM64 9

#define IMAGE_REL_BASED_DIR64 10

#define IMAGE_ARCHIVE_START_SIZE 8

#define IMAGE_ARCHIVE_START "!<arch>\n"

#define IMAGE_ARCHIVE_END "`\n"

#define IMAGE_ARCHIVE_PAD "\n"

#define IMAGE_ARCHIVE_LINKER_MEMBER "/               "

#define IMAGE_ARCHIVE_LONGNAMES_MEMBER "//              "

#define IMAGE_RESOURCE_NAME_IS_STRING 0x80000000

#define IMAGE_RESOURCE_DATA_IS_DIRECTORY 0x80000000

#define IMAGE_DEBUG_TYPE_UNKNOWN 0

#define IMAGE_DEBUG_TYPE_COFF 1

#define IMAGE_DEBUG_TYPE_CODEVIEW 2

#define IMAGE_DEBUG_TYPE_FPO 3

#define IMAGE_DEBUG_TYPE_MISC 4

#define IMAGE_DEBUG_TYPE_EXCEPTION 5

#define IMAGE_DEBUG_TYPE_FIXUP 6

#define IMAGE_DEBUG_TYPE_OMAP_TO_SRC 7

#define IMAGE_DEBUG_TYPE_OMAP_FROM_SRC 8

#define FRAME_FPO 0

#define FRAME_TRAP 1

#define FRAME_TSS 2

#define FRAME_NONFPO 3

#define IMAGE_DEBUG_MISC_EXENAME 1

#define N_BTMASK 0x000F

#define N_TMASK 0x0030

#define N_TMASK1 0x00C0

#define N_TMASK2 0x00F0

#define N_BTSHFT 4

#define N_TSHIFT 2

#define IS_TEXT_UNICODE_ASCII16 1

#define IS_TEXT_UNICODE_REVERSE_ASCII16 16

#define IS_TEXT_UNICODE_STATISTICS 2

#define IS_TEXT_UNICODE_REVERSE_STATISTICS 32

#define IS_TEXT_UNICODE_CONTROLS 4

#define IS_TEXT_UNICODE_REVERSE_CONTROLS 64

#define IS_TEXT_UNICODE_SIGNATURE 8

#define IS_TEXT_UNICODE_REVERSE_SIGNATURE 128

#define IS_TEXT_UNICODE_ILLEGAL_CHARS 256

#define IS_TEXT_UNICODE_ODD_LENGTH 512

#define IS_TEXT_UNICODE_DBCS_LEADBYTE 1024

#define IS_TEXT_UNICODE_NULL_BYTES 4096

#define IS_TEXT_UNICODE_UNICODE_MASK 15

#define IS_TEXT_UNICODE_REVERSE_MASK 240

#define IS_TEXT_UNICODE_NOT_UNICODE_MASK 3840

#define IS_TEXT_UNICODE_NOT_ASCII_MASK 61440

#define SERVICE_KERNEL_DRIVER 1

#define SERVICE_FILE_SYSTEM_DRIVER 2

#define SERVICE_ADAPTER 4

#define SERVICE_RECOGNIZER_DRIVER 8

#define SERVICE_DRIVER (SERVICE_KERNEL_DRIVER|SERVICE_FILE_SYSTEM_DRIVER|SERVICE_RECOGNIZER_DRIVER)

#define SERVICE_WIN32_OWN_PROCESS 16

#define SERVICE_WIN32_SHARE_PROCESS 32

#define SERVICE_WIN32 (SERVICE_WIN32_OWN_PROCESS|SERVICE_WIN32_SHARE_PROCESS)

#define SERVICE_INTERACTIVE_PROCESS 256

#define SERVICE_TYPE_ALL (SERVICE_WIN32|SERVICE_ADAPTER|SERVICE_DRIVER|SERVICE_INTERACTIVE_PROCESS)

#define SERVICE_BOOT_START 0

#define SERVICE_SYSTEM_START 1

#define SERVICE_AUTO_START 2

#define SERVICE_DEMAND_START 3

#define SERVICE_DISABLED 4

#define SERVICE_ERROR_IGNORE 0

#define SERVICE_ERROR_NORMAL 1

#define SERVICE_ERROR_SEVERE 2

#define SERVICE_ERROR_CRITICAL 3


#define DLL_PROCESS_DETACH    0

#define DLL_PROCESS_ATTACH    1

#define DLL_THREAD_ATTACH    2

#define DLL_THREAD_DETACH    3

#ifdef __WINESRC__

#define DLL_WINE_PREATTACH    8 /* Never called, but defined for compatibility with Wine source */

#endif

#define TAPE_ABSOLUTE_POSITION 0

#define TAPE_LOGICAL_POSITION 1

#define TAPE_PSEUDO_LOGICAL_POSITION 2

#define TAPE_REWIND 0

#define TAPE_ABSOLUTE_BLOCK 1

#define TAPE_LOGICAL_BLOCK 2

#define TAPE_PSEUDO_LOGICAL_BLOCK 3

#define TAPE_SPACE_END_OF_DATA 4

#define TAPE_SPACE_RELATIVE_BLOCKS 5

#define TAPE_SPACE_FILEMARKS 6

#define TAPE_SPACE_SEQUENTIAL_FMKS 7

#define TAPE_SPACE_SETMARKS 8

#define TAPE_SPACE_SEQUENTIAL_SMKS 9

#define TAPE_DRIVE_FIXED 1

#define TAPE_DRIVE_SELECT 2

#define TAPE_DRIVE_INITIATOR 4

#define TAPE_DRIVE_ERASE_SHORT 16

#define TAPE_DRIVE_ERASE_LONG 32

#define TAPE_DRIVE_ERASE_BOP_ONLY 64

#define TAPE_DRIVE_ERASE_IMMEDIATE 128

#define TAPE_DRIVE_TAPE_CAPACITY 256

#define TAPE_DRIVE_TAPE_REMAINING 512

#define TAPE_DRIVE_FIXED_BLOCK 1024

#define TAPE_DRIVE_VARIABLE_BLOCK 2048

#define TAPE_DRIVE_WRITE_PROTECT 4096

#define TAPE_DRIVE_EOT_WZ_SIZE 8192

#define TAPE_DRIVE_ECC 0x10000

#define TAPE_DRIVE_COMPRESSION 0x20000

#define TAPE_DRIVE_PADDING 0x40000

#define TAPE_DRIVE_REPORT_SMKS 0x80000

#define TAPE_DRIVE_GET_ABSOLUTE_BLK 0x100000

#define TAPE_DRIVE_GET_LOGICAL_BLK 0x200000

#define TAPE_DRIVE_SET_EOT_WZ_SIZE 0x400000

#define TAPE_DRIVE_EJECT_MEDIA 0x1000000

#define TAPE_DRIVE_CLEAN_REQUESTS 0x2000000

#define TAPE_DRIVE_SET_CMP_BOP_ONLY 0x4000000

#define TAPE_DRIVE_RESERVED_BIT 0x80000000

#define TAPE_DRIVE_LOAD_UNLOAD 0x80000001

#define TAPE_DRIVE_TENSION 0x80000002

#define TAPE_DRIVE_LOCK_UNLOCK 0x80000004

#define TAPE_DRIVE_REWIND_IMMEDIATE 0x80000008

#define TAPE_DRIVE_SET_BLOCK_SIZE 0x80000010

#define TAPE_DRIVE_LOAD_UNLD_IMMED 0x80000020

#define TAPE_DRIVE_TENSION_IMMED 0x80000040

#define TAPE_DRIVE_LOCK_UNLK_IMMED 0x80000080

#define TAPE_DRIVE_SET_ECC 0x80000100

#define TAPE_DRIVE_SET_COMPRESSION 0x80000200

#define TAPE_DRIVE_SET_PADDING 0x80000400

#define TAPE_DRIVE_SET_REPORT_SMKS 0x80000800

#define TAPE_DRIVE_ABSOLUTE_BLK 0x80001000

#define TAPE_DRIVE_ABS_BLK_IMMED 0x80002000

#define TAPE_DRIVE_LOGICAL_BLK 0x80004000

#define TAPE_DRIVE_LOG_BLK_IMMED 0x80008000

#define TAPE_DRIVE_END_OF_DATA 0x80010000

#define TAPE_DRIVE_RELATIVE_BLKS 0x80020000

#define TAPE_DRIVE_FILEMARKS 0x80040000

#define TAPE_DRIVE_SEQUENTIAL_FMKS 0x80080000

#define TAPE_DRIVE_SETMARKS 0x80100000

#define TAPE_DRIVE_SEQUENTIAL_SMKS 0x80200000

#define TAPE_DRIVE_REVERSE_POSITION 0x80400000

#define TAPE_DRIVE_SPACE_IMMEDIATE 0x80800000

#define TAPE_DRIVE_WRITE_SETMARKS 0x81000000

#define TAPE_DRIVE_WRITE_FILEMARKS 0x82000000

#define TAPE_DRIVE_WRITE_SHORT_FMKS 0x84000000

#define TAPE_DRIVE_WRITE_LONG_FMKS 0x88000000

#define TAPE_DRIVE_WRITE_MARK_IMMED 0x90000000

#define TAPE_DRIVE_FORMAT 0xA0000000

#define TAPE_DRIVE_FORMAT_IMMEDIATE 0xC0000000

#define TAPE_DRIVE_HIGH_FEATURES 0x80000000

#define TAPE_FIXED_PARTITIONS    0

#define TAPE_INITIATOR_PARTITIONS    2

#define TAPE_SELECT_PARTITIONS    1

#define TAPE_FILEMARKS    1

#define TAPE_LONG_FILEMARKS    3

#define TAPE_SETMARKS    0

#define TAPE_SHORT_FILEMARKS    2

#define TAPE_ERASE_LONG 1

#define TAPE_ERASE_SHORT 0

#define TAPE_LOAD 0

#define TAPE_UNLOAD 1

#define TAPE_TENSION 2

#define TAPE_LOCK 3

#define TAPE_UNLOCK 4

#define TAPE_FORMAT 5

#if (_WIN32_WINNT >= 0x0500)

#define VER_MINORVERSION 0x0000001

#define VER_MAJORVERSION 0x0000002

#define VER_BUILDNUMBER 0x0000004

#define VER_PLATFORMID 0x0000008

#define VER_SERVICEPACKMINOR 0x0000010

#define VER_SERVICEPACKMAJOR 0x0000020

#define VER_SUITENAME 0x0000040

#define VER_PRODUCT_TYPE 0x0000080

#define VER_EQUAL 1

#define VER_GREATER 2

#define VER_GREATER_EQUAL 3

#define VER_LESS 4

#define VER_LESS_EQUAL 5

#define VER_AND 6

#define VER_OR 7

#endif


#define VER_PLATFORM_WIN32s 0

#define VER_PLATFORM_WIN32_WINDOWS 1

#define VER_PLATFORM_WIN32_NT 2

#define VER_NT_WORKSTATION 1

#define VER_NT_DOMAIN_CONTROLLER 2

#define VER_NT_SERVER 3


#define WT_EXECUTEDEFAULT 0x00000000

#define WT_EXECUTEINIOTHREAD 0x00000001

#define WT_EXECUTEINUITHREAD 0x00000002

#define WT_EXECUTEINWAITTHREAD 0x00000004

#define WT_EXECUTEONLYONCE 0x00000008

#define WT_EXECUTELONGFUNCTION 0x00000010

#define WT_EXECUTEINTIMERTHREAD 0x00000020

#define WT_EXECUTEINPERSISTENTIOTHREAD 0x00000040

#define WT_EXECUTEINPERSISTENTTHREAD 0x00000080

#define WT_TRANSFER_IMPERSONATION 0x00000100

#define WT_SET_MAX_THREADPOOL_THREADS(flags,limit) ((flags)|=(limit)<<16)

typedef VOID (NTAPI *WORKERCALLBACKFUNC)(PVOID);

#if (_WIN32_WINNT >= 0x0501)

#define ACTIVATION_CONTEXT_SECTION_ASSEMBLY_INFORMATION 1

#define ACTIVATION_CONTEXT_SECTION_DLL_REDIRECTION 2

#define ACTIVATION_CONTEXT_SECTION_WINDOW_CLASS_REDIRECTION 3

#define ACTIVATION_CONTEXT_SECTION_COM_SERVER_REDIRECTION 4

#define ACTIVATION_CONTEXT_SECTION_COM_INTERFACE_REDIRECTION 5

#define ACTIVATION_CONTEXT_SECTION_COM_TYPE_LIBRARY_REDIRECTION 6

#define ACTIVATION_CONTEXT_SECTION_COM_PROGID_REDIRECTION 7

#define ACTIVATION_CONTEXT_SECTION_CLR_SURROGATES 9

#define ACTIVATION_CONTEXT_SECTION_APPLICATION_SETTINGS 10

#define ACTIVATION_CONTEXT_SECTION_COMPATIBILITY_INFO 11

#endif /* (_WIN32_WINNT >= 0x0501) */

#define BTYPE(x) ((x)&N_BTMASK)

#define ISPTR(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT))

#define ISFCN(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_FUNCTION<<N_BTSHFT))

#define ISARY(x) (((x)&N_TMASK)==(IMAGE_SYM_DTYPE_ARRAY<<N_BTSHFT))

#define ISTAG(x) ((x)==IMAGE_SYM_CLASS_STRUCT_TAG||(x)==IMAGE_SYM_CLASS_UNION_TAG||(x)==IMAGE_SYM_CLASS_ENUM_TAG)

#define INCREF(x) ((((x)&~N_BTMASK)<<N_TSHIFT)|(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT)|((x)&N_BTMASK))

#define DECREF(x) ((((x)>>N_TSHIFT)&~N_BTMASK)|((x)&N_BTMASK))

#define TLS_MINIMUM_AVAILABLE 64

#define FLS_MAXIMUM_AVAILABLE 128

#define REPARSE_GUID_DATA_BUFFER_HEADER_SIZE   FIELD_OFFSET(REPARSE_GUID_DATA_BUFFER, GenericReparseBuffer)

#define MAXIMUM_REPARSE_DATA_BUFFER_SIZE 16384

#define IO_REPARSE_TAG_RESERVED_ZERO 0

#define IO_REPARSE_TAG_RESERVED_ONE 1

#define IO_REPARSE_TAG_RESERVED_RANGE IO_REPARSE_TAG_RESERVED_ONE

#define IsReparseTagMicrosoft(x) ((x)&0x80000000)

#define IsReparseTagHighLatency(x) ((x)&0x40000000)

#define IsReparseTagNameSurrogate(x) ((x)&0x20000000)

#define IO_REPARSE_TAG_VALID_VALUES 0xE000FFFF

#define IsReparseTagValid(x) (!((x)&~IO_REPARSE_TAG_VALID_VALUES)&&((x)>IO_REPARSE_TAG_RESERVED_RANGE))

#define IO_REPARSE_TAG_SYMBOLIC_LINK IO_REPARSE_TAG_RESERVED_ZERO

#define IO_REPARSE_TAG_MOUNT_POINT 0xA0000003

#define IO_REPARSE_TAG_SYMLINK 0xA000000CL


#define RTL_CRITICAL_SECTION_FLAG_NO_DEBUG_INFO    0x01000000

#define RTL_CRITICAL_SECTION_FLAG_DYNAMIC_SPIN     0x02000000

#define RTL_CRITICAL_SECTION_FLAG_STATIC_INIT      0x04000000

#define RTL_CRITICAL_SECTION_FLAG_RESOURCE_TYPE    0x08000000

#define RTL_CRITICAL_SECTION_FLAG_FORCE_DEBUG_INFO 0x10000000

#define RTL_CRITICAL_SECTION_ALL_FLAG_BITS         0xFF000000

#define RTL_CRITICAL_SECTION_FLAG_RESERVED \

    (RTL_CRITICAL_SECTION_ALL_FLAG_BITS & \

    (~(RTL_CRITICAL_SECTION_FLAG_NO_DEBUG_INFO | \

       RTL_CRITICAL_SECTION_FLAG_DYNAMIC_SPIN | \

       RTL_CRITICAL_SECTION_FLAG_STATIC_INIT | \

       RTL_CRITICAL_SECTION_FLAG_RESOURCE_TYPE | \

       RTL_CRITICAL_SECTION_FLAG_FORCE_DEBUG_INFO)))


#ifndef RC_INVOKED


#ifdef _GUID_DEFINED

# warning _GUID_DEFINED is deprecated, use GUID_DEFINED instead

#endif


#if ! (defined _GUID_DEFINED || defined GUID_DEFINED) /* also defined in basetyps.h */

#define GUID_DEFINED

typedef struct _GUID {

    unsigned long  Data1;

    unsigned short Data2;

    unsigned short Data3;

    unsigned char  Data4[8];

} GUID, *REFGUID, *LPGUID;

#endif /* GUID_DEFINED */


typedef enum _ACL_INFORMATION_CLASS {

  AclRevisionInformation = 1,

  AclSizeInformation

} ACL_INFORMATION_CLASS;


typedef struct _ACL_REVISION_INFORMATION {

  DWORD AclRevision;

} ACL_REVISION_INFORMATION, *PACL_REVISION_INFORMATION;


typedef struct _ACL_SIZE_INFORMATION {

  DWORD AceCount;

  DWORD AclBytesInUse;

  DWORD AclBytesFree;

} ACL_SIZE_INFORMATION, *PACL_SIZE_INFORMATION;


#ifndef _LDT_ENTRY_DEFINED

#define _LDT_ENTRY_DEFINED


typedef struct _LDT_ENTRY {

  WORD LimitLow;

  WORD BaseLow;

  union {

    struct {

      BYTE BaseMid;

      BYTE Flags1;

      BYTE Flags2;

      BYTE BaseHi;

    } Bytes;

    struct {

      DWORD BaseMid:8;

      DWORD Type:5;

      DWORD Dpl:2;

      DWORD Pres:1;

      DWORD LimitHi:4;

      DWORD Sys:1;

      DWORD Reserved_0:1;

      DWORD Default_Big:1;

      DWORD Granularity:1;

      DWORD BaseHi:8;

    } Bits;

  } HighWord;

} LDT_ENTRY, *PLDT_ENTRY, *LPLDT_ENTRY;


#endif /* _LDT_ENTRY_DEFINED */


/* FIXME: add more machines */

#if defined(_X86_)

#define SIZE_OF_80387_REGISTERS    80

#define CONTEXT_i386    0x10000

#define CONTEXT_i486    0x10000

#define CONTEXT_CONTROL    (CONTEXT_i386|0x00000001L)

#define CONTEXT_INTEGER    (CONTEXT_i386|0x00000002L)

#define CONTEXT_SEGMENTS    (CONTEXT_i386|0x00000004L)

#define CONTEXT_FLOATING_POINT    (CONTEXT_i386|0x00000008L)

#define CONTEXT_DEBUG_REGISTERS    (CONTEXT_i386|0x00000010L)

#define CONTEXT_EXTENDED_REGISTERS (CONTEXT_i386|0x00000020L)

#define CONTEXT_FULL    (CONTEXT_CONTROL|CONTEXT_INTEGER|CONTEXT_SEGMENTS)

#define CONTEXT_ALL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS | \

                     CONTEXT_FLOATING_POINT | CONTEXT_DEBUG_REGISTERS | \

                     CONTEXT_EXTENDED_REGISTERS)

#define MAXIMUM_SUPPORTED_EXTENSION  512


#define EXCEPTION_READ_FAULT    0

#define EXCEPTION_WRITE_FAULT   1

#define EXCEPTION_EXECUTE_FAULT 8


typedef struct _FLOATING_SAVE_AREA {

  DWORD ControlWord;

  DWORD StatusWord;

  DWORD TagWord;

  DWORD ErrorOffset;

  DWORD ErrorSelector;

  DWORD DataOffset;

  DWORD DataSelector;

  BYTE RegisterArea[SIZE_OF_80387_REGISTERS];

  DWORD Cr0NpxState;

} FLOATING_SAVE_AREA, *PFLOATING_SAVE_AREA;


typedef struct _CONTEXT {

  DWORD ContextFlags;

  DWORD Dr0;

  DWORD Dr1;

  DWORD Dr2;

  DWORD Dr3;

  DWORD Dr6;

  DWORD Dr7;

  FLOATING_SAVE_AREA FloatSave;

  DWORD SegGs;

  DWORD SegFs;

  DWORD SegEs;

  DWORD SegDs;

  DWORD Edi;

  DWORD Esi;

  DWORD Ebx;

  DWORD Edx;

  DWORD Ecx;

  DWORD Eax;

  DWORD Ebp;

  DWORD Eip;

  DWORD SegCs;

  DWORD EFlags;

  DWORD Esp;

  DWORD SegSs;

  BYTE ExtendedRegisters[MAXIMUM_SUPPORTED_EXTENSION];

} CONTEXT;

#elif defined(_AMD64_)


#define CONTEXT_AMD64 0x100000


#if !defined(RC_INVOKED)

#define CONTEXT_CONTROL (CONTEXT_AMD64 | 0x1L)

#define CONTEXT_INTEGER (CONTEXT_AMD64 | 0x2L)

#define CONTEXT_SEGMENTS (CONTEXT_AMD64 | 0x4L)

#define CONTEXT_FLOATING_POINT (CONTEXT_AMD64 | 0x8L)

#define CONTEXT_DEBUG_REGISTERS (CONTEXT_AMD64 | 0x10L)


#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)

#define CONTEXT_ALL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_SEGMENTS | CONTEXT_FLOATING_POINT | CONTEXT_DEBUG_REGISTERS)


#define CONTEXT_EXCEPTION_ACTIVE 0x8000000

#define CONTEXT_SERVICE_ACTIVE 0x10000000

#define CONTEXT_EXCEPTION_REQUEST 0x40000000

#define CONTEXT_EXCEPTION_REPORTING 0x80000000

#endif


#define INITIAL_MXCSR 0x1f80

#define INITIAL_FPCSR 0x027f

#define EXCEPTION_READ_FAULT    0

#define EXCEPTION_WRITE_FAULT   1

#define EXCEPTION_EXECUTE_FAULT 8


typedef struct DECLSPEC_ALIGN(16) _M128A {

    ULONGLONG Low;

    LONGLONG High;

} M128A, *PM128A;


typedef struct _XMM_SAVE_AREA32 {

    WORD ControlWord;

    WORD StatusWord;

    BYTE TagWord;

    BYTE Reserved1;

    WORD ErrorOpcode;

    DWORD ErrorOffset;

    WORD ErrorSelector;

    WORD Reserved2;

    DWORD DataOffset;

    WORD DataSelector;

    WORD Reserved3;

    DWORD MxCsr;

    DWORD MxCsr_Mask;

    M128A FloatRegisters[8];

    M128A XmmRegisters[16];

    BYTE Reserved4[96];

} XMM_SAVE_AREA32, *PXMM_SAVE_AREA32;


typedef struct DECLSPEC_ALIGN(16) _CONTEXT {

    DWORD64 P1Home;

    DWORD64 P2Home;

    DWORD64 P3Home;

    DWORD64 P4Home;

    DWORD64 P5Home;

    DWORD64 P6Home;


    /* Control flags */

    DWORD ContextFlags;

    DWORD MxCsr;


    /* Segment */

    WORD SegCs;

    WORD SegDs;

    WORD SegEs;

    WORD SegFs;

    WORD SegGs;

    WORD SegSs;

    DWORD EFlags;


    /* Debug */

    DWORD64 Dr0;

    DWORD64 Dr1;

    DWORD64 Dr2;

    DWORD64 Dr3;

    DWORD64 Dr6;

    DWORD64 Dr7;


    /* Integer */

    DWORD64 Rax;

    DWORD64 Rcx;

    DWORD64 Rdx;

    DWORD64 Rbx;

    DWORD64 Rsp;

    DWORD64 Rbp;

    DWORD64 Rsi;

    DWORD64 Rdi;

    DWORD64 R8;

    DWORD64 R9;

    DWORD64 R10;

    DWORD64 R11;

    DWORD64 R12;

    DWORD64 R13;

    DWORD64 R14;

    DWORD64 R15;


    /* Counter */

    DWORD64 Rip;


   /* Floating point */

   union {

       XMM_SAVE_AREA32 FltSave;

       struct {

           M128A Header[2];

           M128A Legacy[8];

           M128A Xmm0;

           M128A Xmm1;

           M128A Xmm2;

           M128A Xmm3;

           M128A Xmm4;

           M128A Xmm5;

           M128A Xmm6;

           M128A Xmm7;

           M128A Xmm8;

           M128A Xmm9;

           M128A Xmm10;

           M128A Xmm11;

           M128A Xmm12;

           M128A Xmm13;

           M128A Xmm14;

           M128A Xmm15;

      } DUMMYSTRUCTNAME;

    } DUMMYUNIONNAME;


     /* Vector */

    M128A VectorRegister[26];

    DWORD64 VectorControl;


    /* Debug control */

    DWORD64 DebugControl;

    DWORD64 LastBranchToRip;

    DWORD64 LastBranchFromRip;

    DWORD64 LastExceptionToRip;

    DWORD64 LastExceptionFromRip;

} CONTEXT;


typedef struct _KNONVOLATILE_CONTEXT_POINTERS {

    union {

        PM128A FloatingContext[16];

        struct {

            PM128A Xmm0;

            PM128A Xmm1;

            PM128A Xmm2;

            PM128A Xmm3;

            PM128A Xmm4;

            PM128A Xmm5;

            PM128A Xmm6;

            PM128A Xmm7;

            PM128A Xmm8;

            PM128A Xmm9;

            PM128A Xmm10;

            PM128A Xmm11;

            PM128A Xmm12;

            PM128A Xmm13;

            PM128A Xmm14;

            PM128A Xmm15;

        } DUMMYSTRUCTNAME;

    } DUMMYUNIONNAME;


    union {

        PULONG64 IntegerContext[16];

        struct {

            PULONG64 Rax;

            PULONG64 Rcx;

            PULONG64 Rdx;

            PULONG64 Rbx;

            PULONG64 Rsp;

            PULONG64 Rbp;

            PULONG64 Rsi;

            PULONG64 Rdi;

            PULONG64 R8;

            PULONG64 R9;

            PULONG64 R10;

            PULONG64 R11;

            PULONG64 R12;

            PULONG64 R13;

            PULONG64 R14;

            PULONG64 R15;

        } DUMMYSTRUCTNAME;

    } DUMMYUNIONNAME2;

} KNONVOLATILE_CONTEXT_POINTERS, *PKNONVOLATILE_CONTEXT_POINTERS;


#define UNW_FLAG_NHANDLER 0x0

#define UNW_FLAG_EHANDLER 0x1

#define UNW_FLAG_UHANDLER 0x2

#define UNW_FLAG_CHAININFO 0x4

#define UNW_FLAG_NO_EPILOGUE  0x80000000UL


#define RUNTIME_FUNCTION_INDIRECT 0x1


typedef struct _RUNTIME_FUNCTION {

    DWORD BeginAddress;

    DWORD EndAddress;

    DWORD UnwindData;

} RUNTIME_FUNCTION,*PRUNTIME_FUNCTION;


#define UNWIND_HISTORY_TABLE_SIZE 12


typedef struct _UNWIND_HISTORY_TABLE_ENTRY

{

    DWORD64 ImageBase;

    PRUNTIME_FUNCTION FunctionEntry;

} UNWIND_HISTORY_TABLE_ENTRY, *PUNWIND_HISTORY_TABLE_ENTRY;


typedef struct _UNWIND_HISTORY_TABLE

{

    DWORD Count;

    BYTE  LocalHint;

    BYTE  GlobalHint;

    BYTE  Search;

    BYTE  Once;

    ULONG64 LowAddress;

    ULONG64 HighAddress;

    UNWIND_HISTORY_TABLE_ENTRY Entry[UNWIND_HISTORY_TABLE_SIZE];

} UNWIND_HISTORY_TABLE, *PUNWIND_HISTORY_TABLE;


typedef

_Function_class_(GET_RUNTIME_FUNCTION_CALLBACK)

PRUNTIME_FUNCTION

GET_RUNTIME_FUNCTION_CALLBACK(

    _In_ DWORD64 ControlPc,

    _In_opt_ PVOID Context);

typedef GET_RUNTIME_FUNCTION_CALLBACK *PGET_RUNTIME_FUNCTION_CALLBACK;


typedef

_Function_class_(OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK)

DWORD

OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK(

    _In_ HANDLE Process,

    _In_ PVOID TableAddress,

    _Out_ PDWORD Entries,

    _Out_ PRUNTIME_FUNCTION* Functions);

typedef OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK *POUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK;


struct _EXCEPTION_POINTERS;

typedef

LONG

(*PEXCEPTION_FILTER) (

    struct _EXCEPTION_POINTERS *ExceptionPointers,

    PVOID EstablisherFrame);


typedef

VOID

(*PTERMINATION_HANDLER) (

    BOOLEAN AbnormalTermination,

    PVOID EstablisherFrame);


typedef struct _DISPATCHER_CONTEXT

{

    ULONG64 ControlPc;

    ULONG64 ImageBase;

    PRUNTIME_FUNCTION FunctionEntry;

    ULONG64 EstablisherFrame;

    ULONG64 TargetIp;

    struct _CONTEXT *ContextRecord;

    PEXCEPTION_ROUTINE LanguageHandler;

    PVOID HandlerData;

    PUNWIND_HISTORY_TABLE HistoryTable;

    ULONG ScopeIndex;

    ULONG Fill0;

} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;


typedef struct _SCOPE_TABLE_AMD64

{

    DWORD Count;

    struct

    {

        DWORD BeginAddress;

        DWORD EndAddress;

        DWORD HandlerAddress;

        DWORD JumpTarget;

    } ScopeRecord[1];

} SCOPE_TABLE_AMD64, *PSCOPE_TABLE_AMD64;

typedef SCOPE_TABLE_AMD64 SCOPE_TABLE, *PSCOPE_TABLE;


#define OUT_OF_PROCESS_FUNCTION_TABLE_CALLBACK_EXPORT_NAME "OutOfProcessFunctionTableCallback"


NTSYSAPI

VOID

__cdecl

RtlRestoreContext(struct _CONTEXT *ContextRecord,

                  struct _EXCEPTION_RECORD *ExceptionRecord);


NTSYSAPI

BOOLEAN

__cdecl

RtlAddFunctionTable(PRUNTIME_FUNCTION FunctionTable,

                    DWORD EntryCount,

                    DWORD64 BaseAddress);


NTSYSAPI

BOOLEAN

__cdecl

RtlInstallFunctionTableCallback(DWORD64 TableIdentifier,

                                DWORD64 BaseAddress,

                                DWORD Length,

                                PGET_RUNTIME_FUNCTION_CALLBACK Callback,

                                PVOID Context,

                                PCWSTR OutOfProcessCallbackDll);


NTSYSAPI

BOOLEAN

__cdecl

RtlDeleteFunctionTable(PRUNTIME_FUNCTION FunctionTable);


NTSYSAPI

PRUNTIME_FUNCTION

NTAPI

RtlLookupFunctionEntry(

    _In_ DWORD64 ControlPc,

    _Out_ PDWORD64 ImageBase,

    _Inout_opt_ PUNWIND_HISTORY_TABLE HistoryTable);


NTSYSAPI

PEXCEPTION_ROUTINE

NTAPI

RtlVirtualUnwind(

    _In_ DWORD HandlerType,

    _In_ DWORD64 ImageBase,

    _In_ DWORD64 ControlPc,

    _In_ PRUNTIME_FUNCTION FunctionEntry,

    _Inout_ struct _CONTEXT *ContextRecord,

    _Out_ PVOID *HandlerData,

    _Out_ PDWORD64 EstablisherFrame,

    _Inout_opt_ PKNONVOLATILE_CONTEXT_POINTERS ContextPointers);


NTSYSAPI

VOID

NTAPI

RtlUnwindEx(

    _In_opt_ PVOID TargetFrame,

    _In_opt_ PVOID TargetIp,

    _In_opt_ struct _EXCEPTION_RECORD *ExceptionRecord,

    _In_ PVOID ReturnValue,

    _In_ struct _CONTEXT *ContextRecord,

    _In_opt_ PUNWIND_HISTORY_TABLE HistoryTable);


#elif defined(_PPC_)

#define CONTEXT_CONTROL    1L

#define CONTEXT_FLOATING_POINT    2L

#define CONTEXT_INTEGER    4L

#define CONTEXT_DEBUG_REGISTERS    8L

#define CONTEXT_FULL (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)

typedef struct _FLOATING_SAVE_AREA

{

    double Fpr0;

    double Fpr1;

    double Fpr2;

    double Fpr3;

    double Fpr4;

    double Fpr5;

    double Fpr6;

    double Fpr7;

    double Fpr8;

    double Fpr9;

    double Fpr10;

    double Fpr11;

    double Fpr12;

    double Fpr13;

    double Fpr14;

    double Fpr15;

    double Fpr16;

    double Fpr17;

    double Fpr18;

    double Fpr19;

    double Fpr20;

    double Fpr21;

    double Fpr22;

    double Fpr23;

    double Fpr24;

    double Fpr25;

    double Fpr26;

    double Fpr27;

    double Fpr28;

    double Fpr29;

    double Fpr30;

    double Fpr31;

    double Fpscr;

} FLOATING_SAVE_AREA;


typedef struct _CONTEXT {

        FLOATING_SAVE_AREA FloatSave;

    DWORD Gpr0;

    DWORD Gpr1;

    DWORD Gpr2;

    DWORD Gpr3;

    DWORD Gpr4;

    DWORD Gpr5;

    DWORD Gpr6;

    DWORD Gpr7;

    DWORD Gpr8;

    DWORD Gpr9;

    DWORD Gpr10;

    DWORD Gpr11;

    DWORD Gpr12;

    DWORD Gpr13;

    DWORD Gpr14;

    DWORD Gpr15;

    DWORD Gpr16;

    DWORD Gpr17;

    DWORD Gpr18;

    DWORD Gpr19;

    DWORD Gpr20;

    DWORD Gpr21;

    DWORD Gpr22;

    DWORD Gpr23;

    DWORD Gpr24;

    DWORD Gpr25;

    DWORD Gpr26;

    DWORD Gpr27;

    DWORD Gpr28;

    DWORD Gpr29;

    DWORD Gpr30;

    DWORD Gpr31;

    DWORD Cr;

    DWORD Xer;

    DWORD Msr;

    DWORD Iar;

    DWORD Lr;

    DWORD Ctr;

    DWORD ContextFlags;

    DWORD Fill[3];

    DWORD Dr0;

    DWORD Dr1;

    DWORD Dr2;

    DWORD Dr3;

    DWORD Dr4;

    DWORD Dr5;

    DWORD Dr6;

    DWORD Dr7;

} CONTEXT;

#elif defined(_ALPHA_)

#define CONTEXT_ALPHA    0x20000

#define CONTEXT_CONTROL    (CONTEXT_ALPHA|1L)

#define CONTEXT_FLOATING_POINT    (CONTEXT_ALPHA|2L)

#define CONTEXT_INTEGER    (CONTEXT_ALPHA|4L)

#define CONTEXT_FULL    (CONTEXT_CONTROL|CONTEXT_FLOATING_POINT|CONTEXT_INTEGER)

typedef struct _CONTEXT {

    ULONGLONG FltF0;

    ULONGLONG FltF1;

    ULONGLONG FltF2;

    ULONGLONG FltF3;

    ULONGLONG FltF4;

    ULONGLONG FltF5;

    ULONGLONG FltF6;

    ULONGLONG FltF7;

    ULONGLONG FltF8;

    ULONGLONG FltF9;

    ULONGLONG FltF10;

    ULONGLONG FltF11;

    ULONGLONG FltF12;

    ULONGLONG FltF13;

    ULONGLONG FltF14;

    ULONGLONG FltF15;

    ULONGLONG FltF16;

    ULONGLONG FltF17;

    ULONGLONG FltF18;

    ULONGLONG FltF19;

    ULONGLONG FltF20;

    ULONGLONG FltF21;

    ULONGLONG FltF22;

    ULONGLONG FltF23;

    ULONGLONG FltF24;

    ULONGLONG FltF25;

    ULONGLONG FltF26;

    ULONGLONG FltF27;

    ULONGLONG FltF28;

    ULONGLONG FltF29;

    ULONGLONG FltF30;

    ULONGLONG FltF31;

    ULONGLONG IntV0;

    ULONGLONG IntT0;

    ULONGLONG IntT1;

    ULONGLONG IntT2;

    ULONGLONG IntT3;

    ULONGLONG IntT4;

    ULONGLONG IntT5;

    ULONGLONG IntT6;

    ULONGLONG IntT7;

    ULONGLONG IntS0;

    ULONGLONG IntS1;

    ULONGLONG IntS2;

    ULONGLONG IntS3;

    ULONGLONG IntS4;

    ULONGLONG IntS5;

    ULONGLONG IntFp;

    ULONGLONG IntA0;

    ULONGLONG IntA1;

    ULONGLONG IntA2;

    ULONGLONG IntA3;

    ULONGLONG IntA4;

    ULONGLONG IntA5;

    ULONGLONG IntT8;

    ULONGLONG IntT9;

    ULONGLONG IntT10;

    ULONGLONG IntT11;

    ULONGLONG IntRa;

    ULONGLONG IntT12;

    ULONGLONG IntAt;

    ULONGLONG IntGp;

    ULONGLONG IntSp;

    ULONGLONG IntZero;

    ULONGLONG Fpcr;

    ULONGLONG SoftFpcr;

    ULONGLONG Fir;

    DWORD Psr;

    DWORD ContextFlags;

    DWORD Fill[4];

} CONTEXT;

#elif defined(_SH_)


/* These are the debug or break registers on the SH3 */

typedef struct _DEBUG_REGISTERS {

    DWORD  BarA;

    UCHAR  BasrA;

    UCHAR  BamrA;

    USHORT BbrA;

    DWORD  BarB;

    UCHAR  BasrB;

    UCHAR  BamrB;

    USHORT BbrB;

    DWORD  BdrB;

    DWORD  BdmrB;

    USHORT Brcr;

    USHORT Align;

} DEBUG_REGISTERS, *PDEBUG_REGISTERS;


/* The following flags control the contents of the CONTEXT structure. */


#define CONTEXT_SH3        0x00000040

#define CONTEXT_SH4        0x000000c0    /* CONTEXT_SH3 | 0x80 - must contain the SH3 bits */


#ifdef SH3

#define CONTEXT_CONTROL         (CONTEXT_SH3 | 0x00000001L)

#define CONTEXT_INTEGER         (CONTEXT_SH3 | 0x00000002L)

#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH3 | 0x00000008L)

#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS)

#else    /* SH4 */

#define CONTEXT_CONTROL         (CONTEXT_SH4 | 0x00000001L)

#define CONTEXT_INTEGER         (CONTEXT_SH4 | 0x00000002L)

#define CONTEXT_DEBUG_REGISTERS (CONTEXT_SH4 | 0x00000008L)

#define CONTEXT_FLOATING_POINT  (CONTEXT_SH4 | 0x00000004L)

#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_DEBUG_REGISTERS | CONTEXT_FLOATING_POINT)

#endif


/* Context Frame */


/*  This frame is used to store a limited processor context into the */

/* Thread structure for CPUs which have no floating point support. */


typedef struct _CONTEXT {

    /* The flags values within this flag control the contents of */

    /* a CONTEXT record. */


    /* If the context record is used as an input parameter, then */

    /* for each portion of the context record controlled by a flag */

    /* whose value is set, it is assumed that that portion of the */

    /* context record contains valid context. If the context record */

    /* is being used to modify a thread's context, then only that */

    /* portion of the threads context will be modified. */


    /* If the context record is used as an IN OUT parameter to capture */

    /* the context of a thread, then only those portions of the thread's */

    /* context corresponding to set flags will be returned. */


    /* The context record is never used as an OUT only parameter. */


    DWORD ContextFlags;


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_INTEGER. */


    /* N.B. The registers RA and R15 are defined in this section, but are */

    /*  considered part of the control context rather than part of the integer */

    /*  context. */


    DWORD PR;

    DWORD MACH;

    DWORD MACL;

    DWORD GBR;

    DWORD R0;

    DWORD R1;

    DWORD R2;

    DWORD R3;

    DWORD R4;

    DWORD R5;

    DWORD R6;

    DWORD R7;

    DWORD R8;

    DWORD R9;

    DWORD R10;

    DWORD R11;

    DWORD R12;

    DWORD R13;

    DWORD R14;

    DWORD R15;


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_CONTROL. */


    /* N.B. The registers r15 and ra are defined in the integer section, */

    /*   but are considered part of the control context rather than part of */

    /*   the integer context. */


    DWORD Fir;

    DWORD Psr;


#if !defined(SH3e) && !defined(SH4)

    DWORD    OldStuff[2];

    DEBUG_REGISTERS DebugRegisters;

#else

    DWORD    Fpscr;

    DWORD    Fpul;

    DWORD    FRegs[16];

#if defined(SH4)

    DWORD    xFRegs[16];

#endif

#endif

} CONTEXT;


#elif defined(_MIPS_)


/* The following flags control the contents of the CONTEXT structure. */


#define CONTEXT_R4000   0x00010000    /* r4000 context */


#define CONTEXT_CONTROL         (CONTEXT_R4000 | 0x00000001L)

#define CONTEXT_FLOATING_POINT  (CONTEXT_R4000 | 0x00000002L)

#define CONTEXT_INTEGER         (CONTEXT_R4000 | 0x00000004L)


#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_FLOATING_POINT | CONTEXT_INTEGER)


/* Context Frame */


/*  N.B. This frame must be exactly a multiple of 16 bytes in length. */


/*  This frame has a several purposes: 1) it is used as an argument to */

/*  NtContinue, 2) it is used to constuct a call frame for APC delivery, */

/*  3) it is used to construct a call frame for exception dispatching */

/*  in user mode, and 4) it is used in the user level thread creation */

/*  routines. */


/*  The layout of the record conforms to a standard call frame. */


typedef struct _CONTEXT {


    /* This section is always present and is used as an argument build */

    /* area. */


    DWORD Argument[4];


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_FLOATING_POINT. */


    DWORD FltF0;

    DWORD FltF1;

    DWORD FltF2;

    DWORD FltF3;

    DWORD FltF4;

    DWORD FltF5;

    DWORD FltF6;

    DWORD FltF7;

    DWORD FltF8;

    DWORD FltF9;

    DWORD FltF10;

    DWORD FltF11;

    DWORD FltF12;

    DWORD FltF13;

    DWORD FltF14;

    DWORD FltF15;

    DWORD FltF16;

    DWORD FltF17;

    DWORD FltF18;

    DWORD FltF19;

    DWORD FltF20;

    DWORD FltF21;

    DWORD FltF22;

    DWORD FltF23;

    DWORD FltF24;

    DWORD FltF25;

    DWORD FltF26;

    DWORD FltF27;

    DWORD FltF28;

    DWORD FltF29;

    DWORD FltF30;

    DWORD FltF31;


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_INTEGER. */


    /* N.B. The registers gp, sp, and ra are defined in this section, but are */

    /*  considered part of the control context rather than part of the integer */

    /*  context. */


    /* N.B. Register zero is not stored in the frame. */


    DWORD IntZero;

    DWORD IntAt;

    DWORD IntV0;

    DWORD IntV1;

    DWORD IntA0;

    DWORD IntA1;

    DWORD IntA2;

    DWORD IntA3;

    DWORD IntT0;

    DWORD IntT1;

    DWORD IntT2;

    DWORD IntT3;

    DWORD IntT4;

    DWORD IntT5;

    DWORD IntT6;

    DWORD IntT7;

    DWORD IntS0;

    DWORD IntS1;

    DWORD IntS2;

    DWORD IntS3;

    DWORD IntS4;

    DWORD IntS5;

    DWORD IntS6;

    DWORD IntS7;

    DWORD IntT8;

    DWORD IntT9;

    DWORD IntK0;

    DWORD IntK1;

    DWORD IntGp;

    DWORD IntSp;

    DWORD IntS8;

    DWORD IntRa;

    DWORD IntLo;

    DWORD IntHi;


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_FLOATING_POINT. */


    DWORD Fsr;


    /* This section is specified/returned if the ContextFlags word contains */

    /* the flag CONTEXT_CONTROL. */


    /* N.B. The registers gp, sp, and ra are defined in the integer section, */

    /*   but are considered part of the control context rather than part of */

    /*   the integer context. */


    DWORD Fir;

    DWORD Psr;


    /* The flags values within this flag control the contents of */

    /* a CONTEXT record. */


    /* If the context record is used as an input parameter, then */

    /* for each portion of the context record controlled by a flag */

    /* whose value is set, it is assumed that that portion of the */

    /* context record contains valid context. If the context record */

    /* is being used to modify a thread's context, then only that */

    /* portion of the threads context will be modified. */


    /* If the context record is used as an IN OUT parameter to capture */

    /* the context of a thread, then only those portions of the thread's */

    /* context corresponding to set flags will be returned. */


    /* The context record is never used as an OUT only parameter. */


    DWORD ContextFlags;


    DWORD Fill[2];


} CONTEXT;

#elif defined(_ARM_)


#ifndef PAGE_SIZE

#define PAGE_SIZE                         0x1000 // FIXME: This should probably go elsewhere

#endif


/* The following flags control the contents of the CONTEXT structure. */


#define CONTEXT_ARM             0x200000L

#define CONTEXT_CONTROL         (CONTEXT_ARM | 0x00000001L)

#define CONTEXT_INTEGER         (CONTEXT_ARM | 0x00000002L)

#define CONTEXT_FLOATING_POINT  (CONTEXT_ARM | 0x00000004L)

#define CONTEXT_DEBUG_REGISTERS (CONTEXT_ARM | 0x00000008L)

#define CONTEXT_FULL            (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)


#define EXCEPTION_READ_FAULT    0

#define EXCEPTION_WRITE_FAULT   1

#define EXCEPTION_EXECUTE_FAULT 8


typedef struct _NEON128

{

    ULONGLONG Low;

    LONGLONG High;

} NEON128, *PNEON128;


#define ARM_MAX_BREAKPOINTS 8

#define ARM_MAX_WATCHPOINTS 1


typedef struct _CONTEXT

{

    /* The flags values within this flag control the contents of

       a CONTEXT record.


       If the context record is used as an input parameter, then

       for each portion of the context record controlled by a flag

       whose value is set, it is assumed that that portion of the

       context record contains valid context. If the context record

       is being used to modify a thread's context, then only that

       portion of the threads context will be modified.


       If the context record is used as an IN OUT parameter to capture

       the context of a thread, then only those portions of the thread's

       context corresponding to set flags will be returned.


       The context record is never used as an OUT only parameter. */

    DWORD ContextFlags;


    /* This section is specified/returned if the ContextFlags word contains

       the flag CONTEXT_INTEGER. */

    DWORD R0;

    DWORD R1;

    DWORD R2;

    DWORD R3;

    DWORD R4;

    DWORD R5;

    DWORD R6;

    DWORD R7;

    DWORD R8;

    DWORD R9;

    DWORD R10;

    DWORD R11;

    DWORD R12;


    DWORD Sp;

    DWORD Lr;

    DWORD Pc;

    DWORD Cpsr;


    /* Floating Point/NEON Registers */

    DWORD Fpscr;

    DWORD Padding;

    union

    {

        NEON128 Q[16];

        ULONGLONG D[32];

        DWORD S[32];

    } DUMMYUNIONNAME;


    /* Debug registers */

    DWORD Bvr[ARM_MAX_BREAKPOINTS];

    DWORD Bcr[ARM_MAX_BREAKPOINTS];

    DWORD Wvr[ARM_MAX_WATCHPOINTS];

    DWORD Wcr[ARM_MAX_WATCHPOINTS];


    DWORD Padding2[2];

} CONTEXT, *PCONTEXT;


typedef struct _IMAGE_ARM_RUNTIME_FUNCTION_ENTRY

{

    DWORD BeginAddress;

    union

    {

        DWORD UnwindData;

        struct

        {

            DWORD Flag : 2;

            DWORD FunctionLength : 11;

            DWORD Ret : 2;

            DWORD H : 1;

            DWORD Reg : 3;

            DWORD R : 1;

            DWORD L : 1;

            DWORD C : 1;

            DWORD StackAdjust : 10;

        } DUMMYSTRUCTNAME;

    } DUMMYUNIONNAME;

} IMAGE_ARM_RUNTIME_FUNCTION_ENTRY, *PIMAGE_ARM_RUNTIME_FUNCTION_ENTRY;

typedef IMAGE_ARM_RUNTIME_FUNCTION_ENTRY RUNTIME_FUNCTION, *PRUNTIME_FUNCTION;


typedef struct _SCOPE_TABLE_ARM

{

    DWORD Count;

    struct

    {

        DWORD BeginAddress;

        DWORD EndAddress;

        DWORD HandlerAddress;

        DWORD JumpTarget;

    } ScopeRecord[1];

} SCOPE_TABLE_ARM, *PSCOPE_TABLE_ARM;

typedef SCOPE_TABLE_ARM SCOPE_TABLE, *PSCOPE_TABLE;


typedef struct _DISPATCHER_CONTEXT

{

    DWORD ControlPc;

    DWORD ImageBase;

    PRUNTIME_FUNCTION FunctionEntry;

    DWORD EstablisherFrame;

    DWORD TargetPc;

    PCONTEXT ContextRecord;

    PEXCEPTION_ROUTINE LanguageHandler;

    PVOID HandlerData;

    struct _UNWIND_HISTORY_TABLE *HistoryTable;

    DWORD ScopeIndex;

    BOOLEAN ControlPcIsUnwound;

    PBYTE  NonVolatileRegisters;

    DWORD Reserved;

} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;


#elif defined(_ARM64_)


#define CONTEXT_ARM64   0x00400000L

#define CONTEXT_CONTROL (CONTEXT_ARM64 | 0x1L)

#define CONTEXT_INTEGER (CONTEXT_ARM64 | 0x2L)

#define CONTEXT_FLOATING_POINT  (CONTEXT_ARM64 | 0x4L)

#define CONTEXT_DEBUG_REGISTERS (CONTEXT_ARM64 | 0x8L)

#define CONTEXT_X18 (CONTEXT_ARM64 | 0x10L)

#define CONTEXT_FULL (CONTEXT_CONTROL | CONTEXT_INTEGER | CONTEXT_FLOATING_POINT)


#define EXCEPTION_READ_FAULT    0

#define EXCEPTION_WRITE_FAULT   1

#define EXCEPTION_EXECUTE_FAULT 8


typedef union NEON128 {

    struct {

        ULONGLONG Low;

        LONGLONG High;

    } DUMMYSTRUCTNAME;

    double D[2];

    float S[4];

    WORD   H[8];

    BYTE  B[16];

} NEON128, *PNEON128;


#define ARM64_MAX_BREAKPOINTS 8

#define ARM64_MAX_WATCHPOINTS 2


typedef struct _CONTEXT {


    //

    // Control flags.

    //


    DWORD ContextFlags;


    //

    // Integer registers

    //


    DWORD Cpsr;

    union {

        struct {

            DWORD64 X0;

            DWORD64 X1;

            DWORD64 X2;

            DWORD64 X3;

            DWORD64 X4;

            DWORD64 X5;

            DWORD64 X6;

            DWORD64 X7;

            DWORD64 X8;

            DWORD64 X9;

            DWORD64 X10;

            DWORD64 X11;

            DWORD64 X12;

            DWORD64 X13;

            DWORD64 X14;

            DWORD64 X15;

            DWORD64 X16;

            DWORD64 X17;

            DWORD64 X18;

            DWORD64 X19;

            DWORD64 X20;

            DWORD64 X21;

            DWORD64 X22;

            DWORD64 X23;

            DWORD64 X24;

            DWORD64 X25;

            DWORD64 X26;

            DWORD64 X27;

            DWORD64 X28;

            DWORD64 Fp;

            DWORD64 Lr;

        } DUMMYSTRUCTNAME;

        DWORD64 X[31];

    } DUMMYUNIONNAME;


    DWORD64 Sp;

    DWORD64 Pc;


    //

    // Floating Point/NEON Registers

    //


    NEON128 V[32];

    DWORD Fpcr;

    DWORD Fpsr;


    //

    // Debug registers

    //


    DWORD Bcr[ARM64_MAX_BREAKPOINTS];

    DWORD64 Bvr[ARM64_MAX_BREAKPOINTS];

    DWORD Wcr[ARM64_MAX_WATCHPOINTS];

    DWORD64 Wvr[ARM64_MAX_WATCHPOINTS];


} _CONTEXT, *P_CONTEXT;

typedef _CONTEXT CONTEXT, *PCONTEXT;


typedef struct _IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY {

    DWORD BeginAddress;

    union {

        DWORD UnwindData;

        struct {

            DWORD Flag : 2;

            DWORD FunctionLength : 11;

            DWORD RegF : 3;

            DWORD RegI : 4;

            DWORD H : 1;

            DWORD CR : 2;

            DWORD FrameSize : 9;

        } DUMMYSTRUCTNAME;

    } DUMMYUNIONNAME;

} IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY, * PIMAGE_ARM64_RUNTIME_FUNCTION_ENTRY;

typedef struct _IMAGE_ARM64_RUNTIME_FUNCTION_ENTRY RUNTIME_FUNCTION, *PRUNTIME_FUNCTION;


typedef struct _SCOPE_TABLE_ARM64 {

    DWORD Count;

    struct

    {

        DWORD BeginAddress;

        DWORD EndAddress;

        DWORD HandlerAddress;

        DWORD JumpTarget;

    } ScopeRecord[1];

} SCOPE_TABLE_ARM64, *PSCOPE_TABLE_ARM64;

typedef SCOPE_TABLE_ARM64 SCOPE_TABLE, *PSCOPE_TABLE;


typedef struct _DISPATCHER_CONTEXT {

    ULONG_PTR ControlPc;

    ULONG_PTR ImageBase;

    PRUNTIME_FUNCTION FunctionEntry;

    ULONG_PTR EstablisherFrame;

    ULONG_PTR TargetPc;

    PCONTEXT ContextRecord;

    PEXCEPTION_ROUTINE LanguageHandler;

    PVOID HandlerData;

    struct _UNWIND_HISTORY_TABLE *HistoryTable;

    DWORD ScopeIndex;

    BOOLEAN ControlPcIsUnwound;

    PBYTE  NonVolatileRegisters;

} DISPATCHER_CONTEXT, *PDISPATCHER_CONTEXT;

#else

#error "undefined processor type"

#endif

typedef CONTEXT *PCONTEXT;


/* The WoW64 context */

#define WOW64_CONTEXT_i386 0x00010000

#define WOW64_CONTEXT_i486 0x00010000

#define WOW64_CONTEXT_CONTROL (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000001))

#define WOW64_CONTEXT_INTEGER (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000002))

#define WOW64_CONTEXT_SEGMENTS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000004))

#define WOW64_CONTEXT_FLOATING_POINT (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000008))

#define WOW64_CONTEXT_DEBUG_REGISTERS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000010))

#define WOW64_CONTEXT_EXTENDED_REGISTERS (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000020))

#define WOW64_CONTEXT_FULL (WOW64_CONTEXT_CONTROL | WOW64_CONTEXT_INTEGER | WOW64_CONTEXT_SEGMENTS)

#define WOW64_CONTEXT_ALL (WOW64_CONTEXT_CONTROL | WOW64_CONTEXT_INTEGER | \

                           WOW64_CONTEXT_SEGMENTS | WOW64_CONTEXT_FLOATING_POINT | \

                           WOW64_CONTEXT_DEBUG_REGISTERS | WOW64_CONTEXT_EXTENDED_REGISTERS)


#define WOW64_CONTEXT_XSTATE (WOW64_CONTEXT_i386 | __MSABI_LONG(0x00000040))


#define WOW64_CONTEXT_EXCEPTION_ACTIVE      0x08000000

#define WOW64_CONTEXT_SERVICE_ACTIVE        0x10000000

#define WOW64_CONTEXT_EXCEPTION_REQUEST     0x40000000

#define WOW64_CONTEXT_EXCEPTION_REPORTING   0x80000000


#define WOW64_SIZE_OF_80387_REGISTERS 80

#define WOW64_MAXIMUM_SUPPORTED_EXTENSION 512


typedef struct _WOW64_FLOATING_SAVE_AREA

{

    DWORD   ControlWord;

    DWORD   StatusWord;

    DWORD   TagWord;

    DWORD   ErrorOffset;

    DWORD   ErrorSelector;

    DWORD   DataOffset;

    DWORD   DataSelector;

    BYTE    RegisterArea[WOW64_SIZE_OF_80387_REGISTERS];

    DWORD   Cr0NpxState;

} WOW64_FLOATING_SAVE_AREA, *PWOW64_FLOATING_SAVE_AREA;


#include "pshpack4.h"

typedef struct _WOW64_CONTEXT

{

    DWORD ContextFlags;

    DWORD Dr0;

    DWORD Dr1;

    DWORD Dr2;

    DWORD Dr3;

    DWORD Dr6;

    DWORD Dr7;

    WOW64_FLOATING_SAVE_AREA FloatSave;

    DWORD SegGs;

    DWORD SegFs;

    DWORD SegEs;

    DWORD SegDs;

    DWORD Edi;

    DWORD Esi;

    DWORD Ebx;

    DWORD Edx;

    DWORD Ecx;

    DWORD Eax;

    DWORD Ebp;

    DWORD Eip;

    DWORD SegCs;

    DWORD EFlags;

    DWORD Esp;

    DWORD SegSs;

    BYTE ExtendedRegisters[WOW64_MAXIMUM_SUPPORTED_EXTENSION];

} WOW64_CONTEXT, *PWOW64_CONTEXT;

#include "poppack.h"


#define EXCEPTION_MAXIMUM_PARAMETERS 15

#define EXCEPTION_NONCONTINUABLE  0x01

#define EXCEPTION_UNWINDING       0x02

#define EXCEPTION_EXIT_UNWIND     0x04

#define EXCEPTION_STACK_INVALID   0x08

#define EXCEPTION_NESTED_CALL     0x10

#define EXCEPTION_TARGET_UNWIND   0x20

#define EXCEPTION_COLLIDED_UNWIND 0x40

#define EXCEPTION_UNWIND (EXCEPTION_UNWINDING | EXCEPTION_EXIT_UNWIND | \

                          EXCEPTION_TARGET_UNWIND | EXCEPTION_COLLIDED_UNWIND)


#define IS_UNWINDING(Flag) ((Flag & EXCEPTION_UNWIND) != 0)

#define IS_DISPATCHING(Flag) ((Flag & EXCEPTION_UNWIND) == 0)

#define IS_TARGET_UNWIND(Flag) (Flag & EXCEPTION_TARGET_UNWIND)


typedef struct _EXCEPTION_RECORD {

  DWORD ExceptionCode;

  DWORD ExceptionFlags;

  struct _EXCEPTION_RECORD *ExceptionRecord;

  PVOID ExceptionAddress;

  DWORD NumberParameters;

  ULONG_PTR ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];

} EXCEPTION_RECORD, *PEXCEPTION_RECORD;


typedef struct _EXCEPTION_RECORD32 {

  DWORD ExceptionCode;

  DWORD ExceptionFlags;

  DWORD ExceptionRecord;

  DWORD ExceptionAddress;

  DWORD NumberParameters;

  DWORD ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];

} EXCEPTION_RECORD32,*PEXCEPTION_RECORD32;


typedef struct _EXCEPTION_RECORD64 {

  DWORD ExceptionCode;

  DWORD ExceptionFlags;

  DWORD64 ExceptionRecord;

  DWORD64 ExceptionAddress;

  DWORD NumberParameters;

  DWORD __unusedAlignment;

  DWORD64 ExceptionInformation[EXCEPTION_MAXIMUM_PARAMETERS];

} EXCEPTION_RECORD64,*PEXCEPTION_RECORD64;


typedef struct _EXCEPTION_POINTERS {

  PEXCEPTION_RECORD ExceptionRecord;

  PCONTEXT ContextRecord;

} EXCEPTION_POINTERS, *PEXCEPTION_POINTERS;


typedef struct _SECURITY_ATTRIBUTES {

    DWORD nLength;

    LPVOID lpSecurityDescriptor;

    BOOL bInheritHandle;

} SECURITY_ATTRIBUTES, *PSECURITY_ATTRIBUTES, *LPSECURITY_ATTRIBUTES;


#define SECURITY_MIN_SID_SIZE (sizeof(SID))


$include(setypes.h)


typedef struct _SYSTEM_AUDIT_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} SYSTEM_AUDIT_OBJECT_ACE,*PSYSTEM_AUDIT_OBJECT_ACE;


typedef struct _SYSTEM_ALARM_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} SYSTEM_ALARM_OBJECT_ACE,*PSYSTEM_ALARM_OBJECT_ACE;


typedef struct _ACCESS_ALLOWED_CALLBACK_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD SidStart;

} ACCESS_ALLOWED_CALLBACK_ACE, *PACCESS_ALLOWED_CALLBACK_ACE;


typedef struct _ACCESS_DENIED_CALLBACK_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD SidStart;

} ACCESS_DENIED_CALLBACK_ACE, *PACCESS_DENIED_CALLBACK_ACE;


typedef struct _SYSTEM_AUDIT_CALLBACK_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD SidStart;

} SYSTEM_AUDIT_CALLBACK_ACE, *PSYSTEM_AUDIT_CALLBACK_ACE;


typedef struct _SYSTEM_ALARM_CALLBACK_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD SidStart;

} SYSTEM_ALARM_CALLBACK_ACE, *PSYSTEM_ALARM_CALLBACK_ACE;


typedef struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} ACCESS_ALLOWED_CALLBACK_OBJECT_ACE, *PACCESS_ALLOWED_CALLBACK_OBJECT_ACE;


typedef struct _ACCESS_DENIED_CALLBACK_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} ACCESS_DENIED_CALLBACK_OBJECT_ACE, *PACCESS_DENIED_CALLBACK_OBJECT_ACE;


typedef struct _SYSTEM_AUDIT_CALLBACK_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} SYSTEM_AUDIT_CALLBACK_OBJECT_ACE, *PSYSTEM_AUDIT_CALLBACK_OBJECT_ACE;


typedef struct _SYSTEM_ALARM_CALLBACK_OBJECT_ACE {

  ACE_HEADER Header;

  ACCESS_MASK Mask;

  DWORD Flags;

  GUID ObjectType;

  GUID InheritedObjectType;

  DWORD SidStart;

} SYSTEM_ALARM_CALLBACK_OBJECT_ACE, *PSYSTEM_ALARM_CALLBACK_OBJECT_ACE;


typedef enum _TOKEN_ELEVATION_TYPE {

    TokenElevationTypeDefault = 1,

    TokenElevationTypeFull,

    TokenElevationTypeLimited,

} TOKEN_ELEVATION_TYPE, *PTOKEN_ELEVATION_TYPE;


typedef struct _QUOTA_LIMITS {

  SIZE_T PagedPoolLimit;

  SIZE_T NonPagedPoolLimit;

  SIZE_T MinimumWorkingSetSize;

  SIZE_T MaximumWorkingSetSize;

  SIZE_T PagefileLimit;

  LARGE_INTEGER TimeLimit;

} QUOTA_LIMITS,*PQUOTA_LIMITS;


typedef union _RATE_QUOTA_LIMIT {

  DWORD RateData;

  struct {

    DWORD RatePercent : 7;

    DWORD Reserved0 : 25;

  } DUMMYSTRUCTNAME;

} RATE_QUOTA_LIMIT, *PRATE_QUOTA_LIMIT;


typedef struct _QUOTA_LIMITS_EX {

  SIZE_T PagedPoolLimit;

  SIZE_T NonPagedPoolLimit;

  SIZE_T MinimumWorkingSetSize;

  SIZE_T MaximumWorkingSetSize;

  SIZE_T PagefileLimit;

  LARGE_INTEGER TimeLimit;

  SIZE_T Reserved1;

  SIZE_T Reserved2;

  SIZE_T Reserved3;

  SIZE_T Reserved4;

  DWORD Flags;

  RATE_QUOTA_LIMIT CpuRateLimit;

} QUOTA_LIMITS_EX, *PQUOTA_LIMITS_EX;


typedef struct _IO_COUNTERS {

  ULONGLONG ReadOperationCount;

  ULONGLONG WriteOperationCount;

  ULONGLONG OtherOperationCount;

  ULONGLONG ReadTransferCount;

  ULONGLONG WriteTransferCount;

  ULONGLONG OtherTransferCount;

} IO_COUNTERS, *PIO_COUNTERS;


typedef struct _FILE_NOTIFY_INFORMATION {

  DWORD NextEntryOffset;

  DWORD Action;

  DWORD FileNameLength;

  WCHAR FileName[1];

} FILE_NOTIFY_INFORMATION,*PFILE_NOTIFY_INFORMATION;


typedef struct _TAPE_ERASE {

  DWORD Type;

  BOOLEAN Immediate;

} TAPE_ERASE, *PTAPE_ERASE;


typedef struct _TAPE_GET_DRIVE_PARAMETERS {

  BOOLEAN ECC;

  BOOLEAN Compression;

  BOOLEAN DataPadding;

  BOOLEAN ReportSetmarks;

  DWORD DefaultBlockSize;

  DWORD MaximumBlockSize;

  DWORD MinimumBlockSize;

  DWORD MaximumPartitionCount;

  DWORD FeaturesLow;

  DWORD FeaturesHigh;

  DWORD EOTWarningZoneSize;

} TAPE_GET_DRIVE_PARAMETERS, *PTAPE_GET_DRIVE_PARAMETERS;


typedef struct _TAPE_GET_MEDIA_PARAMETERS {

  LARGE_INTEGER Capacity;

  LARGE_INTEGER Remaining;

  DWORD BlockSize;

  DWORD PartitionCount;

  BOOLEAN WriteProtected;

} TAPE_GET_MEDIA_PARAMETERS, *PTAPE_GET_MEDIA_PARAMETERS;


typedef struct _TAPE_GET_POSITION {

  DWORD Type;

  DWORD Partition;

  LARGE_INTEGER Offset;

} TAPE_GET_POSITION, *PTAPE_GET_POSITION;


typedef struct _TAPE_PREPARE {

  DWORD Operation;

  BOOLEAN Immediate;

} TAPE_PREPARE, *PTAPE_PREPARE;


typedef struct _TAPE_SET_DRIVE_PARAMETERS {

  BOOLEAN ECC;

  BOOLEAN Compression;

  BOOLEAN DataPadding;

  BOOLEAN ReportSetmarks;

  DWORD EOTWarningZoneSize;

} TAPE_SET_DRIVE_PARAMETERS, *PTAPE_SET_DRIVE_PARAMETERS;


typedef struct _TAPE_SET_MEDIA_PARAMETERS {

  DWORD BlockSize;

} TAPE_SET_MEDIA_PARAMETERS,*PTAPE_SET_MEDIA_PARAMETERS;


typedef struct _TAPE_SET_POSITION {

  DWORD Method;

  DWORD Partition;

  LARGE_INTEGER Offset;

  BOOLEAN Immediate;

} TAPE_SET_POSITION, *PTAPE_SET_POSITION;


typedef struct _TAPE_WRITE_MARKS {

  DWORD Type;

  DWORD Count;

  BOOLEAN Immediate;

} TAPE_WRITE_MARKS, *PTAPE_WRITE_MARKS;


typedef struct _TAPE_CREATE_PARTITION {

  DWORD Method;

  DWORD Count;

  DWORD Size;

} TAPE_CREATE_PARTITION, *PTAPE_CREATE_PARTITION;


typedef struct _MEMORY_BASIC_INFORMATION {

  PVOID BaseAddress;

  PVOID AllocationBase;

  DWORD AllocationProtect;

  SIZE_T RegionSize;

  DWORD State;

  DWORD Protect;

  DWORD Type;

} MEMORY_BASIC_INFORMATION, *PMEMORY_BASIC_INFORMATION;


typedef struct _MESSAGE_RESOURCE_ENTRY {

  WORD Length;

  WORD Flags;

  BYTE Text[1];

} MESSAGE_RESOURCE_ENTRY, *PMESSAGE_RESOURCE_ENTRY;


typedef struct _MESSAGE_RESOURCE_BLOCK {

  DWORD LowId;

  DWORD HighId;

  DWORD OffsetToEntries;

} MESSAGE_RESOURCE_BLOCK, *PMESSAGE_RESOURCE_BLOCK;


typedef struct _MESSAGE_RESOURCE_DATA {

  DWORD NumberOfBlocks;

  MESSAGE_RESOURCE_BLOCK Blocks[1];

} MESSAGE_RESOURCE_DATA,*PMESSAGE_RESOURCE_DATA;


//

// Slist Header

//

#ifndef _SLIST_HEADER_

#define _SLIST_HEADER_


#if defined(_WIN64)


typedef struct DECLSPEC_ALIGN(16) _SLIST_ENTRY {

  struct _SLIST_ENTRY *Next;

} SLIST_ENTRY, *PSLIST_ENTRY;


typedef struct _SLIST_ENTRY32 {

  DWORD Next;

} SLIST_ENTRY32, *PSLIST_ENTRY32;


typedef union DECLSPEC_ALIGN(16) _SLIST_HEADER {

  _ANONYMOUS_STRUCT struct {

    ULONGLONG Alignment;

    ULONGLONG Region;

  } DUMMYSTRUCTNAME;

  struct {

    ULONGLONG Depth:16;

    ULONGLONG Sequence:9;

    ULONGLONG NextEntry:39;

    ULONGLONG HeaderType:1;

    ULONGLONG Init:1;

    ULONGLONG Reserved:59;

    ULONGLONG Region:3;

  } Header8;

  struct {

    ULONGLONG Depth:16;

    ULONGLONG Sequence:48;

    ULONGLONG HeaderType:1;

    ULONGLONG Init:1;

    ULONGLONG Reserved:2;

    ULONGLONG NextEntry:60;

  } Header16;

  struct {

    ULONGLONG Depth:16;

    ULONGLONG Sequence:48;

    ULONGLONG HeaderType:1;

    ULONGLONG Reserved:3;

    ULONGLONG NextEntry:60;

  } HeaderX64;

} SLIST_HEADER, *PSLIST_HEADER;


typedef union _SLIST_HEADER32{

  ULONGLONG Alignment;

  _ANONYMOUS_STRUCT struct {

    SLIST_ENTRY32 Next;

    WORD Depth;

    WORD Sequence;

  } DUMMYSTRUCTNAME;

} SLIST_HEADER32, *PSLIST_HEADER32;


#else


#define SLIST_ENTRY SINGLE_LIST_ENTRY

#define _SLIST_ENTRY _SINGLE_LIST_ENTRY

#define PSLIST_ENTRY PSINGLE_LIST_ENTRY


typedef SLIST_ENTRY SLIST_ENTRY32, *PSLIST_ENTRY32;


typedef union _SLIST_HEADER {

  ULONGLONG Alignment;

  _ANONYMOUS_STRUCT struct {

    SLIST_ENTRY Next;

    WORD Depth;

    WORD Sequence;

  } DUMMYSTRUCTNAME;

} SLIST_HEADER, *PSLIST_HEADER;


typedef SLIST_HEADER SLIST_HEADER32, *PSLIST_HEADER32;


#endif /* defined(_WIN64) */


#endif /* _SLIST_HEADER_ */


NTSYSAPI

VOID

NTAPI

RtlInitializeSListHead(

  _Out_ PSLIST_HEADER ListHead);


_Must_inspect_result_

NTSYSAPI

PSLIST_ENTRY

NTAPI

RtlFirstEntrySList(

  _In_ const SLIST_HEADER *ListHead);


NTSYSAPI

PSLIST_ENTRY

NTAPI

RtlInterlockedPopEntrySList(

  _Inout_ PSLIST_HEADER ListHead);


NTSYSAPI

PSLIST_ENTRY

NTAPI

RtlInterlockedPushEntrySList(

  _Inout_ PSLIST_HEADER ListHead,

  _Inout_ __drv_aliasesMem PSLIST_ENTRY ListEntry);


NTSYSAPI

PSLIST_ENTRY

NTAPI

RtlInterlockedFlushSList(

  _Inout_ PSLIST_HEADER ListHead);


NTSYSAPI

WORD

NTAPI

RtlQueryDepthSList(

  _In_ PSLIST_HEADER ListHead);


#ifndef _RTL_RUN_ONCE_DEF

#define _RTL_RUN_ONCE_DEF


#define RTL_RUN_ONCE_CHECK_ONLY 0x00000001UL

#define RTL_RUN_ONCE_ASYNC 0x00000002UL

#define RTL_RUN_ONCE_INIT_FAILED 0x00000004UL


#define RTL_RUN_ONCE_CTX_RESERVED_BITS 2


#define RTL_RUN_ONCE_INIT {0}


typedef union _RTL_RUN_ONCE {

  PVOID Ptr;

} RTL_RUN_ONCE, *PRTL_RUN_ONCE;


typedef DWORD WINAPI RTL_RUN_ONCE_INIT_FN(PRTL_RUN_ONCE, PVOID, PVOID*);

typedef RTL_RUN_ONCE_INIT_FN *PRTL_RUN_ONCE_INIT_FN;


#endif


#define RTL_CONDITION_VARIABLE_INIT {0}

#define RTL_CONDITION_VARIABLE_LOCKMODE_SHARED 0x1


typedef struct _RTL_CONDITION_VARIABLE {

  PVOID Ptr;

} RTL_CONDITION_VARIABLE, *PRTL_CONDITION_VARIABLE;


typedef struct _RTL_CRITICAL_SECTION_DEBUG {

  WORD Type;

  WORD CreatorBackTraceIndex;

  struct _RTL_CRITICAL_SECTION *CriticalSection;

  LIST_ENTRY ProcessLocksList;

  DWORD EntryCount;

  DWORD ContentionCount;

  DWORD Flags;

  WORD CreatorBackTraceIndexHigh;

  WORD SpareWORD;

} RTL_CRITICAL_SECTION_DEBUG, *PRTL_CRITICAL_SECTION_DEBUG, RTL_RESOURCE_DEBUG, *PRTL_RESOURCE_DEBUG;


#include "pshpack8.h"

typedef struct _RTL_CRITICAL_SECTION {

  PRTL_CRITICAL_SECTION_DEBUG DebugInfo;

  LONG LockCount;

  LONG RecursionCount;

  HANDLE OwningThread;

  HANDLE LockSemaphore;

  ULONG_PTR SpinCount;

} RTL_CRITICAL_SECTION, *PRTL_CRITICAL_SECTION;

#include "poppack.h"


NTSYSAPI

WORD

NTAPI

RtlCaptureStackBackTrace(

    IN DWORD FramesToSkip,

    IN DWORD FramesToCapture,

    OUT PVOID *BackTrace,

    OUT PDWORD BackTraceHash OPTIONAL

);


NTSYSAPI

VOID

NTAPI

RtlCaptureContext(

    _Out_ PCONTEXT ContextRecord

);


NTSYSAPI

PVOID

NTAPI

RtlPcToFileHeader(

  _In_ PVOID PcValue,

  _Out_ PVOID* BaseOfImage);


NTSYSAPI

VOID

NTAPI

RtlUnwind(

    _In_opt_ PVOID TargetFrame,

    _In_opt_ PVOID TargetIp,

    _In_opt_ PEXCEPTION_RECORD ExceptionRecord,

    _In_ PVOID ReturnValue);


#define RTL_SRWLOCK_INIT {0}


typedef struct _RTL_SRWLOCK {

  PVOID Ptr;

} RTL_SRWLOCK, *PRTL_SRWLOCK;


typedef LONG

(NTAPI *PVECTORED_EXCEPTION_HANDLER)(

    struct _EXCEPTION_POINTERS *ExceptionInfo

);


#define EVENTLOG_SEQUENTIAL_READ    1

#define EVENTLOG_SEEK_READ          2

#define EVENTLOG_FORWARDS_READ      4

#define EVENTLOG_BACKWARDS_READ     8


#define EVENTLOG_SUCCESS            0

#define EVENTLOG_ERROR_TYPE         1

#define EVENTLOG_WARNING_TYPE       2

#define EVENTLOG_INFORMATION_TYPE   4

#define EVENTLOG_AUDIT_SUCCESS      8

#define EVENTLOG_AUDIT_FAILURE      16


typedef struct _EVENTLOGRECORD {

  DWORD Length;             /* Length of full record, including the data portion */

  DWORD Reserved;

  DWORD RecordNumber;

  DWORD TimeGenerated;

  DWORD TimeWritten;

  DWORD EventID;

  WORD EventType;

  WORD NumStrings;          /* Number of strings in the 'Strings' array */

  WORD EventCategory;

  WORD ReservedFlags;

  DWORD ClosingRecordNumber;

  DWORD StringOffset;

  DWORD UserSidLength;

  DWORD UserSidOffset;

  DWORD DataLength;         /* Length of the data portion */

  DWORD DataOffset;         /* Offset from beginning of record */

/*

 * Length-varying data:

 *

 * WCHAR SourceName[];

 * WCHAR ComputerName[];

 * SID   UserSid;           // Must be aligned on a DWORD boundary

 * WCHAR Strings[];

 * BYTE  Data[];

 * CHAR  Pad[];             // Padding for DWORD boundary

 * DWORD Length;            // Same as the first 'Length' member at the beginning

 */

} EVENTLOGRECORD, *PEVENTLOGRECORD;


typedef struct _OSVERSIONINFOA {

  DWORD dwOSVersionInfoSize;

  DWORD dwMajorVersion;

  DWORD dwMinorVersion;

  DWORD dwBuildNumber;

  DWORD dwPlatformId;

  CHAR szCSDVersion[128];

} OSVERSIONINFOA, *POSVERSIONINFOA, *LPOSVERSIONINFOA;


typedef struct _OSVERSIONINFOW {

  DWORD dwOSVersionInfoSize;

  DWORD dwMajorVersion;

  DWORD dwMinorVersion;

  DWORD dwBuildNumber;

  DWORD dwPlatformId;

  WCHAR szCSDVersion[128];

} OSVERSIONINFOW, *POSVERSIONINFOW, *LPOSVERSIONINFOW, RTL_OSVERSIONINFOW, *PRTL_OSVERSIONINFOW;


typedef struct _OSVERSIONINFOEXA {

  DWORD dwOSVersionInfoSize;

  DWORD dwMajorVersion;

  DWORD dwMinorVersion;

  DWORD dwBuildNumber;

  DWORD dwPlatformId;

  CHAR szCSDVersion[128];

  WORD wServicePackMajor;

  WORD wServicePackMinor;

  WORD wSuiteMask;

  BYTE wProductType;

  BYTE wReserved;

} OSVERSIONINFOEXA, *POSVERSIONINFOEXA, *LPOSVERSIONINFOEXA;


typedef struct _OSVERSIONINFOEXW {

  DWORD dwOSVersionInfoSize;

  DWORD dwMajorVersion;

  DWORD dwMinorVersion;

  DWORD dwBuildNumber;

  DWORD dwPlatformId;

  WCHAR szCSDVersion[128];

  WORD wServicePackMajor;

  WORD wServicePackMinor;

  WORD wSuiteMask;

  BYTE wProductType;

  BYTE wReserved;

} OSVERSIONINFOEXW, *POSVERSIONINFOEXW, *LPOSVERSIONINFOEXW, RTL_OSVERSIONINFOEXW, *PRTL_OSVERSIONINFOEXW;


#include <pshpack2.h>


typedef struct _IMAGE_VXD_HEADER {

  WORD e32_magic;

  BYTE e32_border;

  BYTE e32_worder;

  DWORD e32_level;

  WORD e32_cpu;

  WORD e32_os;

  DWORD e32_ver;

  DWORD e32_mflags;

  DWORD e32_mpages;

  DWORD e32_startobj;

  DWORD e32_eip;

  DWORD e32_stackobj;

  DWORD e32_esp;

  DWORD e32_pagesize;

  DWORD e32_lastpagesize;

  DWORD e32_fixupsize;

  DWORD e32_fixupsum;

  DWORD e32_ldrsize;

  DWORD e32_ldrsum;

  DWORD e32_objtab;

  DWORD e32_objcnt;

  DWORD e32_objmap;

  DWORD e32_itermap;

  DWORD e32_rsrctab;

  DWORD e32_rsrccnt;

  DWORD e32_restab;

  DWORD e32_enttab;

  DWORD e32_dirtab;

  DWORD e32_dircnt;

  DWORD e32_fpagetab;

  DWORD e32_frectab;

  DWORD e32_impmod;

  DWORD e32_impmodcnt;

  DWORD e32_impproc;

  DWORD e32_pagesum;

  DWORD e32_datapage;

  DWORD e32_preload;

  DWORD e32_nrestab;

  DWORD e32_cbnrestab;

  DWORD e32_nressum;

  DWORD e32_autodata;

  DWORD e32_debuginfo;

  DWORD e32_debuglen;

  DWORD e32_instpreload;

  DWORD e32_instdemand;

  DWORD e32_heapsize;

  BYTE e32_res3[12];

  DWORD e32_winresoff;

  DWORD e32_winreslen;

  WORD e32_devid;

  WORD e32_ddkver;

} IMAGE_VXD_HEADER, *PIMAGE_VXD_HEADER;


typedef struct _IMAGE_DOS_HEADER {

  WORD e_magic;

  WORD e_cblp;

  WORD e_cp;

  WORD e_crlc;

  WORD e_cparhdr;

  WORD e_minalloc;

  WORD e_maxalloc;

  WORD e_ss;

  WORD e_sp;

  WORD e_csum;

  WORD e_ip;

  WORD e_cs;

  WORD e_lfarlc;

  WORD e_ovno;

  WORD e_res[4];

  WORD e_oemid;

  WORD e_oeminfo;

  WORD e_res2[10];

  LONG e_lfanew;

} IMAGE_DOS_HEADER, *PIMAGE_DOS_HEADER;


typedef struct _IMAGE_OS2_HEADER {

  WORD ne_magic;

  CHAR ne_ver;

  CHAR ne_rev;

  WORD ne_enttab;

  WORD ne_cbenttab;

  LONG ne_crc;

  WORD ne_flags;

  WORD ne_autodata;

  WORD ne_heap;

  WORD ne_stack;

  LONG ne_csip;

  LONG ne_sssp;

  WORD ne_cseg;

  WORD ne_cmod;

  WORD ne_cbnrestab;

  WORD ne_segtab;

  WORD ne_rsrctab;

  WORD ne_restab;

  WORD ne_modtab;

  WORD ne_imptab;

  LONG ne_nrestab;

  WORD ne_cmovent;

  WORD ne_align;

  WORD ne_cres;

  BYTE ne_exetyp;

  BYTE ne_flagsothers;

  WORD ne_pretthunks;

  WORD ne_psegrefbytes;

  WORD ne_swaparea;

  WORD ne_expver;

} IMAGE_OS2_HEADER, *PIMAGE_OS2_HEADER;


#include <poppack.h>


typedef struct _IMAGE_FILE_HEADER {

  WORD Machine;

  WORD NumberOfSections;

  DWORD TimeDateStamp;

  DWORD PointerToSymbolTable;

  DWORD NumberOfSymbols;

  WORD SizeOfOptionalHeader;

  WORD Characteristics;

} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;


typedef struct _IMAGE_DATA_DIRECTORY {

  DWORD VirtualAddress;

  DWORD Size;

} IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;


typedef struct _IMAGE_OPTIONAL_HEADER32 {

  WORD Magic;

  BYTE MajorLinkerVersion;

  BYTE MinorLinkerVersion;

  DWORD SizeOfCode;

  DWORD SizeOfInitializedData;

  DWORD SizeOfUninitializedData;

  DWORD AddressOfEntryPoint;

  DWORD BaseOfCode;

  DWORD BaseOfData;

  DWORD ImageBase;

  DWORD SectionAlignment;

  DWORD FileAlignment;

  WORD MajorOperatingSystemVersion;

  WORD MinorOperatingSystemVersion;

  WORD MajorImageVersion;

  WORD MinorImageVersion;

  WORD MajorSubsystemVersion;

  WORD MinorSubsystemVersion;

  DWORD Win32VersionValue;

  DWORD SizeOfImage;

  DWORD SizeOfHeaders;

  DWORD CheckSum;

  WORD Subsystem;

  WORD DllCharacteristics;

  DWORD SizeOfStackReserve;

  DWORD SizeOfStackCommit;

  DWORD SizeOfHeapReserve;

  DWORD SizeOfHeapCommit;

  DWORD LoaderFlags;

  DWORD NumberOfRvaAndSizes;

  IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];

} IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32;


typedef struct _IMAGE_OPTIONAL_HEADER64 {

  WORD Magic;

  BYTE MajorLinkerVersion;

  BYTE MinorLinkerVersion;

  DWORD SizeOfCode;

  DWORD SizeOfInitializedData;

  DWORD SizeOfUninitializedData;

  DWORD AddressOfEntryPoint;

  DWORD BaseOfCode;

  ULONGLONG ImageBase;

  DWORD SectionAlignment;

  DWORD FileAlignment;

  WORD MajorOperatingSystemVersion;

  WORD MinorOperatingSystemVersion;

  WORD MajorImageVersion;

  WORD MinorImageVersion;

  WORD MajorSubsystemVersion;

  WORD MinorSubsystemVersion;

  DWORD Win32VersionValue;

  DWORD SizeOfImage;

  DWORD SizeOfHeaders;

  DWORD CheckSum;

  WORD Subsystem;

  WORD DllCharacteristics;

  ULONGLONG SizeOfStackReserve;

  ULONGLONG SizeOfStackCommit;

  ULONGLONG SizeOfHeapReserve;

  ULONGLONG SizeOfHeapCommit;

  DWORD LoaderFlags;

  DWORD NumberOfRvaAndSizes;

  IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];

} IMAGE_OPTIONAL_HEADER64, *PIMAGE_OPTIONAL_HEADER64;


typedef struct _IMAGE_ROM_OPTIONAL_HEADER {

  WORD Magic;

  BYTE MajorLinkerVersion;

  BYTE MinorLinkerVersion;

  DWORD SizeOfCode;

  DWORD SizeOfInitializedData;

  DWORD SizeOfUninitializedData;

  DWORD AddressOfEntryPoint;

  DWORD BaseOfCode;

  DWORD BaseOfData;

  DWORD BaseOfBss;

  DWORD GprMask;

  DWORD CprMask[4];

  DWORD GpValue;

} IMAGE_ROM_OPTIONAL_HEADER, *PIMAGE_ROM_OPTIONAL_HEADER;


typedef struct _IMAGE_NT_HEADERS32 {

  DWORD Signature;

  IMAGE_FILE_HEADER FileHeader;

  IMAGE_OPTIONAL_HEADER32 OptionalHeader;

} IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32;


typedef struct _IMAGE_NT_HEADERS64 {

  DWORD Signature;

  IMAGE_FILE_HEADER FileHeader;

  IMAGE_OPTIONAL_HEADER64 OptionalHeader;

} IMAGE_NT_HEADERS64, *PIMAGE_NT_HEADERS64;


#ifdef _WIN64

typedef IMAGE_OPTIONAL_HEADER64 IMAGE_OPTIONAL_HEADER;

typedef PIMAGE_OPTIONAL_HEADER64 PIMAGE_OPTIONAL_HEADER;

typedef IMAGE_NT_HEADERS64 IMAGE_NT_HEADERS;

typedef PIMAGE_NT_HEADERS64 PIMAGE_NT_HEADERS;

#else

typedef IMAGE_OPTIONAL_HEADER32 IMAGE_OPTIONAL_HEADER;

typedef PIMAGE_OPTIONAL_HEADER32 PIMAGE_OPTIONAL_HEADER;

typedef IMAGE_NT_HEADERS32 IMAGE_NT_HEADERS;

typedef PIMAGE_NT_HEADERS32 PIMAGE_NT_HEADERS;

#endif


typedef struct _IMAGE_ROM_HEADERS {

  IMAGE_FILE_HEADER FileHeader;

  IMAGE_ROM_OPTIONAL_HEADER OptionalHeader;

} IMAGE_ROM_HEADERS, *PIMAGE_ROM_HEADERS;


typedef struct _IMAGE_SECTION_HEADER {

  BYTE Name[IMAGE_SIZEOF_SHORT_NAME];

  union {

    DWORD PhysicalAddress;

    DWORD VirtualSize;

  } Misc;

  DWORD VirtualAddress;

  DWORD SizeOfRawData;

  DWORD PointerToRawData;

  DWORD PointerToRelocations;

  DWORD PointerToLinenumbers;

  WORD NumberOfRelocations;

  WORD NumberOfLinenumbers;

  DWORD Characteristics;

} IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;


#include <pshpack2.h>


typedef struct _IMAGE_SYMBOL {

  union {

    BYTE ShortName[8];

    struct {

      DWORD Short;

      DWORD Long;

    } Name;

    PBYTE LongName[2];

  } N;

  DWORD Value;

  SHORT SectionNumber;

  WORD Type;

  BYTE StorageClass;

  BYTE NumberOfAuxSymbols;

} IMAGE_SYMBOL, *PIMAGE_SYMBOL;


typedef struct _IMAGE_LINENUMBER {

  union {

    DWORD SymbolTableIndex;

    DWORD VirtualAddress;

  } Type;

  WORD Linenumber;

} IMAGE_LINENUMBER, UNALIGNED *PIMAGE_LINENUMBER;


typedef struct IMAGE_AUX_SYMBOL_TOKEN_DEF {

  BYTE bAuxType;

  BYTE bReserved;

  DWORD SymbolTableIndex;

  BYTE rgbReserved[12];

} IMAGE_AUX_SYMBOL_TOKEN_DEF, UNALIGNED *PIMAGE_AUX_SYMBOL_TOKEN_DEF;


typedef union _IMAGE_AUX_SYMBOL {

  struct {

    DWORD TagIndex;

    union {

      struct {

        WORD Linenumber;

        WORD Size;

      } LnSz;

      DWORD TotalSize;

    } Misc;

    union {

      struct {

        DWORD PointerToLinenumber;

        DWORD PointerToNextFunction;

      } Function;

      struct {

        WORD Dimension[4];

      } Array;

    } FcnAry;

    WORD TvIndex;

  } Sym;

  struct {

    BYTE Name[IMAGE_SIZEOF_SYMBOL];

  } File;

  struct {

    DWORD Length;

    WORD NumberOfRelocations;

    WORD NumberOfLinenumbers;

    DWORD CheckSum;

    SHORT Number;

    BYTE Selection;

    BYTE bReserved;

    SHORT HighNumber;

  } Section;

  IMAGE_AUX_SYMBOL_TOKEN_DEF TokenDef;

  struct {

    DWORD crc;

    BYTE rgbReserved[14];

  } CRC;

} IMAGE_AUX_SYMBOL, *PIMAGE_AUX_SYMBOL;


typedef struct _IMAGE_RELOCATION {

  _ANONYMOUS_UNION union {

    DWORD VirtualAddress;

    DWORD RelocCount;

  } DUMMYUNIONNAME;

  DWORD SymbolTableIndex;

  WORD Type;

} IMAGE_RELOCATION, UNALIGNED *PIMAGE_RELOCATION;


#include <poppack.h>


#ifndef __IMAGE_COR20_HEADER_DEFINED__

#define __IMAGE_COR20_HEADER_DEFINED__


typedef enum ReplacesCorHdrNumericDefines {

  COMIMAGE_FLAGS_ILONLY = 0x00000001,

  COMIMAGE_FLAGS_32BITREQUIRED = 0x00000002,

  COMIMAGE_FLAGS_IL_LIBRARY = 0x00000004,

  COMIMAGE_FLAGS_STRONGNAMESIGNED = 0x00000008,

  COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 0x00000010,

  COMIMAGE_FLAGS_TRACKDEBUGDATA = 0x00010000,

  COMIMAGE_FLAGS_32BITPREFERRED = 0x00020000,

  COR_VERSION_MAJOR_V2 = 2,

  COR_VERSION_MAJOR = COR_VERSION_MAJOR_V2,

  COR_VERSION_MINOR = 0,

  COR_DELETED_NAME_LENGTH = 8,

  COR_VTABLEGAP_NAME_LENGTH = 8,

  NATIVE_TYPE_MAX_CB = 1,

  COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE = 0xFF,

  IMAGE_COR_MIH_METHODRVA = 0x01,

  IMAGE_COR_MIH_EHRVA = 0x02,

  IMAGE_COR_MIH_BASICBLOCK = 0x08,

  COR_VTABLE_32BIT = 0x01,

  COR_VTABLE_64BIT = 0x02,

  COR_VTABLE_FROM_UNMANAGED = 0x04,

  COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN = 0x08,

  COR_VTABLE_CALL_MOST_DERIVED = 0x10,

  IMAGE_COR_EATJ_THUNK_SIZE = 32,

  MAX_CLASS_NAME = 1024,

  MAX_PACKAGE_NAME = 1024

} ReplacesCorHdrNumericDefines;


typedef struct IMAGE_COR20_HEADER {

  DWORD cb;

  WORD MajorRuntimeVersion;

  WORD MinorRuntimeVersion;

  IMAGE_DATA_DIRECTORY MetaData;

  DWORD Flags;

  _ANONYMOUS_UNION union {

    DWORD EntryPointToken;

    DWORD EntryPointRVA;

  } DUMMYUNIONNAME;

  IMAGE_DATA_DIRECTORY Resources;

  IMAGE_DATA_DIRECTORY StrongNameSignature;

  IMAGE_DATA_DIRECTORY CodeManagerTable;

  IMAGE_DATA_DIRECTORY VTableFixups;

  IMAGE_DATA_DIRECTORY ExportAddressTableJumps;

  IMAGE_DATA_DIRECTORY ManagedNativeHeader;

} IMAGE_COR20_HEADER, *PIMAGE_COR20_HEADER;


#endif /* __IMAGE_COR20_HEADER_DEFINED__ */


typedef struct _IMAGE_COFF_SYMBOLS_HEADER {

  DWORD NumberOfSymbols;

  DWORD LvaToFirstSymbol;

  DWORD NumberOfLinenumbers;

  DWORD LvaToFirstLinenumber;

  DWORD RvaToFirstByteOfCode;

  DWORD RvaToLastByteOfCode;

  DWORD RvaToFirstByteOfData;

  DWORD RvaToLastByteOfData;

} IMAGE_COFF_SYMBOLS_HEADER, *PIMAGE_COFF_SYMBOLS_HEADER;


typedef struct _IMAGE_BASE_RELOCATION {

  DWORD VirtualAddress;

  DWORD SizeOfBlock;

} IMAGE_BASE_RELOCATION, UNALIGNED *PIMAGE_BASE_RELOCATION;


typedef struct _IMAGE_ARCHIVE_MEMBER_HEADER {

  BYTE Name[16];

  BYTE Date[12];

  BYTE UserID[6];

  BYTE GroupID[6];

  BYTE Mode[8];

  BYTE Size[10];

  BYTE EndHeader[2];

} IMAGE_ARCHIVE_MEMBER_HEADER, *PIMAGE_ARCHIVE_MEMBER_HEADER;


typedef struct _IMAGE_EXPORT_DIRECTORY {

  DWORD Characteristics;

  DWORD TimeDateStamp;

  WORD MajorVersion;

  WORD MinorVersion;

  DWORD Name;

  DWORD Base;

  DWORD NumberOfFunctions;

  DWORD NumberOfNames;

  DWORD AddressOfFunctions;

  DWORD AddressOfNames;

  DWORD AddressOfNameOrdinals;

} IMAGE_EXPORT_DIRECTORY, *PIMAGE_EXPORT_DIRECTORY;


typedef struct _IMAGE_IMPORT_BY_NAME {

  WORD Hint;

  BYTE Name[1];

} IMAGE_IMPORT_BY_NAME, *PIMAGE_IMPORT_BY_NAME;


#include <pshpack8.h>

typedef struct _IMAGE_THUNK_DATA64 {

  union {

    ULONGLONG ForwarderString;

    ULONGLONG Function;

    ULONGLONG Ordinal;

    ULONGLONG AddressOfData;

  } u1;

} IMAGE_THUNK_DATA64, *PIMAGE_THUNK_DATA64;

#include <poppack.h>


typedef struct _IMAGE_THUNK_DATA32 {

  union {

    DWORD ForwarderString;

    DWORD Function;

    DWORD Ordinal;

    DWORD AddressOfData;

  } u1;

} IMAGE_THUNK_DATA32, *PIMAGE_THUNK_DATA32;


#define IMAGE_ORDINAL_FLAG64 0x8000000000000000ULL

#define IMAGE_ORDINAL_FLAG32 0x80000000

#define IMAGE_ORDINAL64(Ordinal) (Ordinal & 0xffff)

#define IMAGE_ORDINAL32(Ordinal) (Ordinal & 0xffff)

#define IMAGE_SNAP_BY_ORDINAL64(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG64)!=0)

#define IMAGE_SNAP_BY_ORDINAL32(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG32)!=0)


typedef VOID

(NTAPI *PIMAGE_TLS_CALLBACK)(PVOID DllHandle,DWORD Reason,PVOID Reserved);


typedef struct _IMAGE_TLS_DIRECTORY64 {

  ULONGLONG StartAddressOfRawData;

  ULONGLONG EndAddressOfRawData;

  ULONGLONG AddressOfIndex;

  ULONGLONG AddressOfCallBacks;

  DWORD SizeOfZeroFill;

  DWORD Characteristics;

} IMAGE_TLS_DIRECTORY64, *PIMAGE_TLS_DIRECTORY64;


typedef struct _IMAGE_TLS_DIRECTORY32 {

  DWORD StartAddressOfRawData;

  DWORD EndAddressOfRawData;

  DWORD AddressOfIndex;

  DWORD AddressOfCallBacks;

  DWORD SizeOfZeroFill;

  DWORD Characteristics;

} IMAGE_TLS_DIRECTORY32, *PIMAGE_TLS_DIRECTORY32;


#ifdef _WIN64

#define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG64

#define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL64(Ordinal)

typedef IMAGE_THUNK_DATA64 IMAGE_THUNK_DATA;

typedef PIMAGE_THUNK_DATA64 PIMAGE_THUNK_DATA;

#define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL64(Ordinal)

typedef IMAGE_TLS_DIRECTORY64 IMAGE_TLS_DIRECTORY;

typedef PIMAGE_TLS_DIRECTORY64 PIMAGE_TLS_DIRECTORY;

#else

#define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG32

#define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL32(Ordinal)

typedef IMAGE_THUNK_DATA32 IMAGE_THUNK_DATA;

typedef PIMAGE_THUNK_DATA32 PIMAGE_THUNK_DATA;

#define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL32(Ordinal)

typedef IMAGE_TLS_DIRECTORY32 IMAGE_TLS_DIRECTORY;

typedef PIMAGE_TLS_DIRECTORY32 PIMAGE_TLS_DIRECTORY;

#endif


typedef struct _IMAGE_IMPORT_DESCRIPTOR {

  _ANONYMOUS_UNION union {

    DWORD Characteristics;

    DWORD OriginalFirstThunk;

  } DUMMYUNIONNAME;

  DWORD TimeDateStamp;

  DWORD ForwarderChain;

  DWORD Name;

  DWORD FirstThunk;

} IMAGE_IMPORT_DESCRIPTOR, UNALIGNED *PIMAGE_IMPORT_DESCRIPTOR;


typedef struct _IMAGE_BOUND_IMPORT_DESCRIPTOR {

  DWORD TimeDateStamp;

  WORD OffsetModuleName;

  WORD NumberOfModuleForwarderRefs;

} IMAGE_BOUND_IMPORT_DESCRIPTOR, *PIMAGE_BOUND_IMPORT_DESCRIPTOR;


typedef struct _IMAGE_BOUND_FORWARDER_REF {

  DWORD TimeDateStamp;

  WORD OffsetModuleName;

  WORD Reserved;

} IMAGE_BOUND_FORWARDER_REF, *PIMAGE_BOUND_FORWARDER_REF;


typedef struct _IMAGE_DELAYLOAD_DESCRIPTOR {

  union {

    DWORD AllAttributes;

    struct {

      DWORD RvaBased:1;

      DWORD ReservedAttributes:31;

    };

  } Attributes;

  DWORD DllNameRVA;

  DWORD ModuleHandleRVA;

  DWORD ImportAddressTableRVA;

  DWORD ImportNameTableRVA;

  DWORD BoundImportAddressTableRVA;

  DWORD UnloadInformationTableRVA;

  DWORD TimeDateStamp;

} IMAGE_DELAYLOAD_DESCRIPTOR, *PIMAGE_DELAYLOAD_DESCRIPTOR;


typedef const IMAGE_DELAYLOAD_DESCRIPTOR *PCIMAGE_DELAYLOAD_DESCRIPTOR;


typedef struct _IMAGE_RESOURCE_DIRECTORY {

  DWORD Characteristics;

  DWORD TimeDateStamp;

  WORD MajorVersion;

  WORD MinorVersion;

  WORD NumberOfNamedEntries;

  WORD NumberOfIdEntries;

} IMAGE_RESOURCE_DIRECTORY, *PIMAGE_RESOURCE_DIRECTORY;


typedef struct _IMAGE_RESOURCE_DIRECTORY_ENTRY {

  _ANONYMOUS_UNION union {

    _ANONYMOUS_STRUCT struct {

      DWORD NameOffset:31;

      DWORD NameIsString:1;

    } DUMMYSTRUCTNAME;

    DWORD Name;

    WORD Id;

  } DUMMYUNIONNAME;

  _ANONYMOUS_UNION union {

    DWORD OffsetToData;

    _ANONYMOUS_STRUCT struct {

      DWORD OffsetToDirectory:31;

      DWORD DataIsDirectory:1;

    } DUMMYSTRUCTNAME2;

  } DUMMYUNIONNAME2;

} IMAGE_RESOURCE_DIRECTORY_ENTRY, *PIMAGE_RESOURCE_DIRECTORY_ENTRY;


typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING {

  WORD Length;

  CHAR NameString[1];

} IMAGE_RESOURCE_DIRECTORY_STRING, *PIMAGE_RESOURCE_DIRECTORY_STRING;


typedef struct _IMAGE_RESOURCE_DIR_STRING_U {

  WORD Length;

  WCHAR NameString[1];

} IMAGE_RESOURCE_DIR_STRING_U, *PIMAGE_RESOURCE_DIR_STRING_U;


typedef struct _IMAGE_RESOURCE_DATA_ENTRY {

  DWORD OffsetToData;

  DWORD Size;

  DWORD CodePage;

  DWORD Reserved;

} IMAGE_RESOURCE_DATA_ENTRY, *PIMAGE_RESOURCE_DATA_ENTRY;


typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32 {

  DWORD Size;

  DWORD TimeDateStamp;

  WORD MajorVersion;

  WORD MinorVersion;

  DWORD GlobalFlagsClear;

  DWORD GlobalFlagsSet;

  DWORD CriticalSectionDefaultTimeout;

  DWORD DeCommitFreeBlockThreshold;

  DWORD DeCommitTotalFreeThreshold;

  DWORD LockPrefixTable;

  DWORD MaximumAllocationSize;

  DWORD VirtualMemoryThreshold;

  DWORD ProcessHeapFlags;

  DWORD ProcessAffinityMask;

  WORD CSDVersion;

  WORD Reserved1;

  DWORD EditList;

  DWORD SecurityCookie;

  DWORD SEHandlerTable;

  DWORD SEHandlerCount;

} IMAGE_LOAD_CONFIG_DIRECTORY32, *PIMAGE_LOAD_CONFIG_DIRECTORY32;


typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64 {

  DWORD Size;

  DWORD TimeDateStamp;

  WORD MajorVersion;

  WORD MinorVersion;

  DWORD GlobalFlagsClear;

  DWORD GlobalFlagsSet;

  DWORD CriticalSectionDefaultTimeout;

  ULONGLONG DeCommitFreeBlockThreshold;

  ULONGLONG DeCommitTotalFreeThreshold;

  ULONGLONG LockPrefixTable;

  ULONGLONG MaximumAllocationSize;

  ULONGLONG VirtualMemoryThreshold;

  ULONGLONG ProcessAffinityMask;

  DWORD ProcessHeapFlags;

  WORD CSDVersion;

  WORD Reserved1;

  ULONGLONG EditList;

  ULONGLONG SecurityCookie;

  ULONGLONG SEHandlerTable;

  ULONGLONG SEHandlerCount;

} IMAGE_LOAD_CONFIG_DIRECTORY64, *PIMAGE_LOAD_CONFIG_DIRECTORY64;


#ifdef _WIN64

typedef IMAGE_LOAD_CONFIG_DIRECTORY64 IMAGE_LOAD_CONFIG_DIRECTORY;

typedef PIMAGE_LOAD_CONFIG_DIRECTORY64 PIMAGE_LOAD_CONFIG_DIRECTORY;

#else

typedef IMAGE_LOAD_CONFIG_DIRECTORY32 IMAGE_LOAD_CONFIG_DIRECTORY;

typedef PIMAGE_LOAD_CONFIG_DIRECTORY32 PIMAGE_LOAD_CONFIG_DIRECTORY;

#endif


typedef struct _IMAGE_RUNTIME_FUNCTION_ENTRY {

  DWORD BeginAddress;

  DWORD EndAddress;

  DWORD UnwindInfoAddress;

} IMAGE_RUNTIME_FUNCTION_ENTRY, *PIMAGE_RUNTIME_FUNCTION_ENTRY;


typedef struct _IMAGE_DEBUG_DIRECTORY {

  DWORD Characteristics;

  DWORD TimeDateStamp;

  WORD MajorVersion;

  WORD MinorVersion;

  DWORD Type;

  DWORD SizeOfData;

  DWORD AddressOfRawData;

  DWORD PointerToRawData;

} IMAGE_DEBUG_DIRECTORY, *PIMAGE_DEBUG_DIRECTORY;


typedef struct _FPO_DATA {

  DWORD ulOffStart;

  DWORD cbProcSize;

  DWORD cdwLocals;

  WORD cdwParams;

  WORD cbProlog:8;

  WORD cbRegs:3;

  WORD fHasSEH:1;

  WORD fUseBP:1;

  WORD reserved:1;

  WORD cbFrame:2;

} FPO_DATA, *PFPO_DATA;


typedef struct _IMAGE_DEBUG_MISC {

  DWORD DataType;

  DWORD Length;

  BOOLEAN Unicode;

  BYTE Reserved[3];

  BYTE Data[1];

} IMAGE_DEBUG_MISC, *PIMAGE_DEBUG_MISC;


typedef struct _IMAGE_FUNCTION_ENTRY {

  DWORD StartingAddress;

  DWORD EndingAddress;

  DWORD EndOfPrologue;

} IMAGE_FUNCTION_ENTRY, *PIMAGE_FUNCTION_ENTRY;


typedef struct _IMAGE_SEPARATE_DEBUG_HEADER {

  WORD Signature;

  WORD Flags;

  WORD Machine;

  WORD Characteristics;

  DWORD TimeDateStamp;

  DWORD CheckSum;

  DWORD ImageBase;

  DWORD SizeOfImage;

  DWORD NumberOfSections;

  DWORD ExportedNamesSize;

  DWORD DebugDirectorySize;

  DWORD SectionAlignment;

  DWORD Reserved[2];

} IMAGE_SEPARATE_DEBUG_HEADER, *PIMAGE_SEPARATE_DEBUG_HEADER;


typedef enum _CM_SERVICE_NODE_TYPE {

  DriverType = SERVICE_KERNEL_DRIVER,

  FileSystemType = SERVICE_FILE_SYSTEM_DRIVER,

  Win32ServiceOwnProcess = SERVICE_WIN32_OWN_PROCESS,

  Win32ServiceShareProcess = SERVICE_WIN32_SHARE_PROCESS,

  AdapterType = SERVICE_ADAPTER,

  RecognizerType = SERVICE_RECOGNIZER_DRIVER

} SERVICE_NODE_TYPE;


typedef enum _CM_SERVICE_LOAD_TYPE {

  BootLoad = SERVICE_BOOT_START,

  SystemLoad = SERVICE_SYSTEM_START,

  AutoLoad = SERVICE_AUTO_START,

  DemandLoad = SERVICE_DEMAND_START,

  DisableLoad = SERVICE_DISABLED

} SERVICE_LOAD_TYPE;


typedef enum _CM_ERROR_CONTROL_TYPE {

  IgnoreError = SERVICE_ERROR_IGNORE,

  NormalError = SERVICE_ERROR_NORMAL,

  SevereError = SERVICE_ERROR_SEVERE,

  CriticalError = SERVICE_ERROR_CRITICAL

} SERVICE_ERROR_TYPE;


typedef struct _NT_TIB {

  struct _EXCEPTION_REGISTRATION_RECORD *ExceptionList;

  PVOID StackBase;

  PVOID StackLimit;

  PVOID SubSystemTib;

  _ANONYMOUS_UNION union {

    PVOID FiberData;

    DWORD Version;

  } DUMMYUNIONNAME;

  PVOID ArbitraryUserPointer;

  struct _NT_TIB *Self;

} NT_TIB,*PNT_TIB;


typedef struct _NT_TIB32 {

  DWORD ExceptionList;

  DWORD StackBase;

  DWORD StackLimit;

  DWORD SubSystemTib;

  _ANONYMOUS_UNION union {

    DWORD FiberData;

    DWORD Version;

  } DUMMYUNIONNAME;

  DWORD ArbitraryUserPointer;

  DWORD Self;

} NT_TIB32,*PNT_TIB32;


typedef struct _NT_TIB64 {

  DWORD64 ExceptionList;

  DWORD64 StackBase;

  DWORD64 StackLimit;

  DWORD64 SubSystemTib;

  _ANONYMOUS_UNION union {

    DWORD64 FiberData;

    DWORD Version;

  } DUMMYUNIONNAME;

  DWORD64 ArbitraryUserPointer;

  DWORD64 Self;

} NT_TIB64,*PNT_TIB64;


typedef struct _REPARSE_GUID_DATA_BUFFER {

  DWORD ReparseTag;

  WORD ReparseDataLength;

  WORD Reserved;

  GUID ReparseGuid;

  struct {

    BYTE DataBuffer[1];

  } GenericReparseBuffer;

} REPARSE_GUID_DATA_BUFFER, *PREPARSE_GUID_DATA_BUFFER;


typedef struct _REPARSE_POINT_INFORMATION {

    WORD   ReparseDataLength;

    WORD   UnparsedNameLength;

} REPARSE_POINT_INFORMATION, *PREPARSE_POINT_INFORMATION;


typedef union _FILE_SEGMENT_ELEMENT {

  PVOID64 Buffer;

  ULONGLONG Alignment;

} FILE_SEGMENT_ELEMENT, *PFILE_SEGMENT_ELEMENT;


/* JOBOBJECT_BASIC_LIMIT_INFORMATION.LimitFlags constants */

#define JOB_OBJECT_LIMIT_WORKINGSET                 0x0001

#define JOB_OBJECT_LIMIT_PROCESS_TIME               0x0002

#define JOB_OBJECT_LIMIT_JOB_TIME                   0x0004

#define JOB_OBJECT_LIMIT_ACTIVE_PROCESS             0x0008

#define JOB_OBJECT_LIMIT_AFFINITY                   0x0010

#define JOB_OBJECT_LIMIT_PRIORITY_CLASS             0x0020

#define JOB_OBJECT_LIMIT_PRESERVE_JOB_TIME          0x0040

#define JOB_OBJECT_LIMIT_SCHEDULING_CLASS           0x0080

#define JOB_OBJECT_LIMIT_PROCESS_MEMORY             0x0100

#define JOB_OBJECT_LIMIT_JOB_MEMORY                 0x0200

#define JOB_OBJECT_LIMIT_DIE_ON_UNHANDLED_EXCEPTION 0x0400

#define JOB_OBJECT_LIMIT_BREAKAWAY_OK               0x0800

#define JOB_OBJECT_LIMIT_SILENT_BREAKAWAY_OK        0x1000

#define JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE          0x2000


/* JOBOBJECT_BASIC_UI_RESTRICTIONS.UIRestrictionsClass constants */

#define JOB_OBJECT_UILIMIT_HANDLES          0x0001

#define JOB_OBJECT_UILIMIT_READCLIPBOARD    0x0002

#define JOB_OBJECT_UILIMIT_WRITECLIPBOARD   0x0004

#define JOB_OBJECT_UILIMIT_SYSTEMPARAMETERS 0x0008

#define JOB_OBJECT_UILIMIT_DISPLAYSETTINGS  0x0010

#define JOB_OBJECT_UILIMIT_GLOBALATOMS      0x0020

#define JOB_OBJECT_UILIMIT_DESKTOP          0x0040

#define JOB_OBJECT_UILIMIT_EXITWINDOWS      0x0080


/* JOBOBJECT_SECURITY_LIMIT_INFORMATION.SecurityLimitFlags constants */

#define JOB_OBJECT_SECURITY_NO_ADMIN          0x0001

#define JOB_OBJECT_SECURITY_RESTRICTED_TOKEN  0x0002

#define JOB_OBJECT_SECURITY_ONLY_TOKEN        0x0004

#define JOB_OBJECT_SECURITY_FILTER_TOKENS     0x0008


/* JOBOBJECT_END_OF_JOB_TIME_INFORMATION.EndOfJobTimeAction constants */

#define JOB_OBJECT_TERMINATE_AT_END_OF_JOB  0

#define JOB_OBJECT_POST_AT_END_OF_JOB       1


#define JOB_OBJECT_MSG_END_OF_JOB_TIME        1

#define JOB_OBJECT_MSG_END_OF_PROCESS_TIME    2

#define JOB_OBJECT_MSG_ACTIVE_PROCESS_LIMIT   3

#define JOB_OBJECT_MSG_ACTIVE_PROCESS_ZERO    4

#define JOB_OBJECT_MSG_NEW_PROCESS            6

#define JOB_OBJECT_MSG_EXIT_PROCESS           7

#define JOB_OBJECT_MSG_ABNORMAL_EXIT_PROCESS  8

#define JOB_OBJECT_MSG_PROCESS_MEMORY_LIMIT   9

#define JOB_OBJECT_MSG_JOB_MEMORY_LIMIT       10


#define JOB_OBJECT_ASSIGN_PROCESS           1

#define JOB_OBJECT_SET_ATTRIBUTES           2

#define JOB_OBJECT_QUERY                    4

#define JOB_OBJECT_TERMINATE                8

#define JOB_OBJECT_SET_SECURITY_ATTRIBUTES  16

#define JOB_OBJECT_ALL_ACCESS               (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|31)


typedef enum _JOBOBJECTINFOCLASS {

  JobObjectBasicAccountingInformation = 1,

  JobObjectBasicLimitInformation,

  JobObjectBasicProcessIdList,

  JobObjectBasicUIRestrictions,

  JobObjectSecurityLimitInformation,

  JobObjectEndOfJobTimeInformation,

  JobObjectAssociateCompletionPortInformation,

  JobObjectBasicAndIoAccountingInformation,

  JobObjectExtendedLimitInformation,

  JobObjectJobSetInformation,

  JobObjectGroupInformation,

  MaxJobObjectInfoClass

} JOBOBJECTINFOCLASS;


typedef struct _JOB_SET_ARRAY {

  HANDLE JobHandle;

  DWORD MemberLevel;

  DWORD Flags;

} JOB_SET_ARRAY, *PJOB_SET_ARRAY;


typedef struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION {

  LARGE_INTEGER TotalUserTime;

  LARGE_INTEGER TotalKernelTime;

  LARGE_INTEGER ThisPeriodTotalUserTime;

  LARGE_INTEGER ThisPeriodTotalKernelTime;

  DWORD TotalPageFaultCount;

  DWORD TotalProcesses;

  DWORD ActiveProcesses;

  DWORD