1 #ifndef __INCLUDE_DDK_ZWTYPES_H
2 #define __INCLUDE_DDK_ZWTYPES_H
6 typedef enum _DEBUG_CONTROL_CODE
8 DebugGetTraceInformation = 1,
9 DebugSetInternalBreakpoint,
11 DebugClearSpecialCalls,
12 DebugQuerySpecialCalls,
17 typedef enum _KPROFILE_SOURCE
22 // file disposition values
24 #define FILE_SUPERSEDE 0x0000
25 #define FILE_OPEN 0x0001
26 #define FILE_CREATE 0x0002
27 #define FILE_OPEN_IF 0x0003
28 #define FILE_OVERWRITE 0x0004
29 #define FILE_OVERWRITE_IF 0x0005
30 #define FILE_MAXIMUM_DISPOSITION 0x0005
32 // job query / set information class
34 typedef enum _JOBOBJECTINFOCLASS { // Q S
35 JobObjectBasicAccountingInformation = 1, // Y N
36 JobObjectBasicLimitInformation, // Y Y
37 JobObjectBasicProcessIdList, // Y N
38 JobObjectBasicUIRestrictions, // Y Y
39 JobObjectSecurityLimitInformation, // Y Y
40 JobObjectEndOfJobTimeInformation, // N Y
41 JobObjectAssociateCompletionPortInformation, // N Y
42 JobObjectBasicAndIoAccountingInformation, // Y N
43 JobObjectExtendedLimitInformation, // Y Y
47 // {Nt|Zw}{Query|Set}SystemInformation
48 // (GN means Gary Nebbet in "NT/W2K Native API Reference")
51 enum _SYSTEM_INFORMATION_CLASS
53 SystemInformationClassMin = 0,
54 SystemBasicInformation = 0, /* Q */
56 SystemProcessorInformation = 1, /* Q */
58 SystemPerformanceInformation = 2, /* Q */
60 SystemTimeOfDayInformation = 3, /* Q */
62 SystemPathInformation = 4, /* Q (checked build only) */
63 SystemNotImplemented1 = 4, /* Q (GN) */
65 SystemProcessInformation = 5, /* Q */
66 SystemProcessesAndThreadsInformation = 5, /* Q (GN) */
68 SystemCallCountInfoInformation = 6, /* Q */
69 SystemCallCounts = 6, /* Q (GN) */
71 SystemDeviceInformation = 7, /* Q */
72 // It conflicts with symbol in ntoskrnl/io/resource.c
73 // SystemConfigurationInformation = 7, /* Q (GN) */
75 SystemProcessorPerformanceInformation = 8, /* Q */
76 SystemProcessorTimes = 8, /* Q (GN) */
78 SystemFlagsInformation = 9, /* QS */
79 SystemGlobalFlag = 9, /* QS (GN) */
81 SystemCallTimeInformation = 10,
82 SystemNotImplemented2 = 10, /* (GN) */
84 SystemModuleInformation = 11, /* Q */
86 SystemLocksInformation = 12, /* Q */
87 SystemLockInformation = 12, /* Q (GN) */
89 SystemStackTraceInformation = 13,
90 SystemNotImplemented3 = 13, /* Q (GN) */
92 SystemPagedPoolInformation = 14,
93 SystemNotImplemented4 = 14, /* Q (GN) */
95 SystemNonPagedPoolInformation = 15,
96 SystemNotImplemented5 = 15, /* Q (GN) */
98 SystemHandleInformation = 16, /* Q */
100 SystemObjectInformation = 17, /* Q */
102 SystemPageFileInformation = 18, /* Q */
103 SystemPagefileInformation = 18, /* Q (GN) */
105 SystemVdmInstemulInformation = 19, /* Q */
106 SystemInstructionEmulationCounts = 19, /* Q (GN) */
108 SystemVdmBopInformation = 20,
109 SystemInvalidInfoClass1 = 20, /* (GN) */
111 SystemFileCacheInformation = 21, /* QS */
112 SystemCacheInformation = 21, /* QS (GN) */
114 SystemPoolTagInformation = 22, /* Q (checked build only) */
116 SystemInterruptInformation = 23, /* Q */
117 SystemProcessorStatistics = 23, /* Q (GN) */
119 SystemDpcBehaviourInformation = 24, /* QS */
120 SystemDpcInformation = 24, /* QS (GN) */
122 SystemFullMemoryInformation = 25,
123 SystemNotImplemented6 = 25, /* (GN) */
125 SystemLoadImage = 26, /* S (callable) (GN) */
127 SystemUnloadImage = 27, /* S (callable) (GN) */
129 SystemTimeAdjustmentInformation = 28, /* QS */
130 SystemTimeAdjustment = 28, /* QS (GN) */
132 SystemSummaryMemoryInformation = 29,
133 SystemNotImplemented7 = 29, /* (GN) */
135 SystemNextEventIdInformation = 30,
136 SystemNotImplemented8 = 30, /* (GN) */
138 SystemEventIdsInformation = 31,
139 SystemNotImplemented9 = 31, /* (GN) */
141 SystemCrashDumpInformation = 32, /* Q */
143 SystemExceptionInformation = 33, /* Q */
145 SystemCrashDumpStateInformation = 34, /* Q */
147 SystemKernelDebuggerInformation = 35, /* Q */
149 SystemContextSwitchInformation = 36, /* Q */
151 SystemRegistryQuotaInformation = 37, /* QS */
153 SystemLoadAndCallImage = 38, /* S (GN) */
155 SystemPrioritySeparation = 39, /* S */
157 SystemPlugPlayBusInformation = 40,
158 SystemNotImplemented10 = 40, /* Q (GN) */
160 SystemDockInformation = 41,
161 SystemNotImplemented11 = 41, /* Q (GN) */
163 SystemPowerInformation = 42,
164 SystemInvalidInfoClass2 = 42, /* (GN) */
166 SystemProcessorSpeedInformation = 43,
167 SystemInvalidInfoClass3 = 43, /* (GN) */
169 SystemCurrentTimeZoneInformation = 44, /* QS */
170 SystemTimeZoneInformation = 44, /* QS (GN) */
172 SystemLookasideInformation = 45, /* Q */
174 SystemSetTimeSlipEvent = 46, /* S (GN) */
176 SystemCreateSession = 47, /* S (GN) */
178 SystemDeleteSession = 48, /* S (GN) */
180 SystemInvalidInfoClass4 = 49, /* (GN) */
182 SystemRangeStartInformation = 50, /* Q (GN) */
184 SystemVerifierInformation = 51, /* QS (GN) */
186 SystemAddVerifier = 52, /* S (GN) */
188 SystemSessionProcessesInformation = 53, /* Q (GN) */
189 SystemInformationClassMax
191 } SYSTEM_INFORMATION_CLASS;
193 // SystemBasicInformation (0)
195 struct _SYSTEM_BASIC_INFORMATION
198 ULONG TimerResolution;
200 ULONG NumberOfPhysicalPages;
201 ULONG LowestPhysicalPageNumber;
202 ULONG HighestPhysicalPageNumber;
203 ULONG AllocationGranularity;
204 ULONG MinimumUserModeAddress;
205 ULONG MaximumUserModeAddress;
206 KAFFINITY ActiveProcessorsAffinityMask;
207 CCHAR NumberOfProcessors;
208 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
210 // SystemProcessorInformation (1)
212 struct _SYSTEM_PROCESSOR_INFORMATION
214 USHORT ProcessorArchitecture;
215 USHORT ProcessorLevel;
216 USHORT ProcessorRevision;
218 ULONG ProcessorFeatureBits;
219 } SYSTEM_PROCESSOR_INFORMATION, *PSYSTEM_PROCESSOR_INFORMATION;
221 // SystemPerformanceInfo (2)
223 struct _SYSTEM_PERFORMANCE_INFORMATION
225 LARGE_INTEGER IdleProcessorTime;
226 LARGE_INTEGER IoReadTransferCount;
227 LARGE_INTEGER IoWriteTransferCount;
228 LARGE_INTEGER IoOtherTransferCount;
229 ULONG IoReadOperationCount;
230 ULONG IoWriteOperationCount;
231 ULONG IoOtherOperationCount;
232 ULONG AvailablePages;
235 ULONG PeakCommitment;
236 ULONG PageFaultCount;
237 ULONG CopyOnWriteCount;
238 ULONG TransitionCount;
239 ULONG CacheTransitionCount;
240 ULONG DemandZeroCount;
242 ULONG PageReadIoCount;
243 ULONG CacheReadCount;
245 ULONG DirtyPagesWriteCount;
246 ULONG DirtyWriteIoCount;
247 ULONG MappedPagesWriteCount;
248 ULONG MappedWriteIoCount;
249 ULONG PagedPoolPages;
250 ULONG NonPagedPoolPages;
255 ULONG MmTotalSystemFreePtes;
256 ULONG MmSystemCodepage;
257 ULONG MmTotalSystemDriverPages;
258 ULONG MmTotalSystemCodePages;
262 ULONG MmSystemCachePage;
263 ULONG MmPagedPoolPage;
264 ULONG MmSystemDriverPage;
265 ULONG CcFastReadNoWait;
266 ULONG CcFastReadWait;
267 ULONG CcFastReadResourceMiss;
268 ULONG CcFastReadNotPossible;
269 ULONG CcFastMdlReadNoWait;
270 ULONG CcFastMdlReadWait;
271 ULONG CcFastMdlReadResourceMiss;
272 ULONG CcFastMdlReadNotPossible;
273 ULONG CcMapDataNoWait;
275 ULONG CcMapDataNoWaitMiss;
276 ULONG CcMapDataWaitMiss;
277 ULONG CcPinMappedDataCount;
278 ULONG CcPinReadNoWait;
280 ULONG CcPinReadNoWaitMiss;
281 ULONG CcPinReadWaitMiss;
282 ULONG CcCopyReadNoWait;
283 ULONG CcCopyReadWait;
284 ULONG CcCopyReadNoWaitMiss;
285 ULONG CcCopyReadWaitMiss;
286 ULONG CcMdlReadNoWait;
288 ULONG CcMdlReadNoWaitMiss;
289 ULONG CcMdlReadWaitMiss;
290 ULONG CcReadaheadIos;
291 ULONG CcLazyWriteIos;
292 ULONG CcLazyWritePages;
295 ULONG ContextSwitches;
300 } SYSTEM_PERFORMANCE_INFO, *PSYSTEM_PERFORMANCE_INFO;
302 // SystemModuleInformation (11)
304 struct _SYSTEM_MODULE_ENTRY
312 USHORT NameLength; /* Length of module name not including the path, this field contains valid value only for NTOSKRNL module*/
313 USHORT PathLength; /* Length of 'directory path' part of modulename*/
315 } SYSTEM_MODULE_ENTRY, * PSYSTEM_MODULE_ENTRY;
318 struct _SYSTEM_MODULE_INFORMATION
321 SYSTEM_MODULE_ENTRY Module [1];
322 } SYSTEM_MODULE_INFORMATION, *PSYSTEM_MODULE_INFORMATION;
324 // SystemHandleInformation (16)
327 struct _SYSTEM_HANDLE_ENTRY
336 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
339 struct _SYSTEM_HANDLE_INFORMATION
342 SYSTEM_HANDLE_ENTRY Handle [1];
344 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
346 // SystemObjectInformation (17)
348 struct _SYSTEM_OBJECT_TYPE_INFORMATION
350 ULONG NextEntryOffset;
354 ULONG InvalidAttributes;
355 GENERIC_MAPPING GenericMapping;
356 ACCESS_MASK ValidAccessMask;
361 } SYSTEM_OBJECT_TYPE_INFORMATION, *PSYSTEM_OBJECT_TYPE_INFORMATION;
364 struct _SYSTEM_OBJECT_INFORMATION
366 ULONG NextEntryOffset;
368 ULONG CreatorProcessId;
373 ULONG PagedPoolUsage;
374 ULONG NonPagedPoolUsage;
375 ULONG ExclusiveProcessId;
376 PSECURITY_DESCRIPTOR SecurityDescriptor;
379 } SYSTEM_OBJECT_INFORMATION, *PSYSTEM_OBJECT_INFORMATION;
381 // SystemPageFileInformation (18)
383 struct _SYSTEM_PAGEFILE_INFORMATION
385 ULONG RelativeOffset;
386 ULONG CurrentSizePages;
387 ULONG TotalUsedPages;
389 UNICODE_STRING PagefileFileName;
391 } SYSTEM_PAGEFILE_INFORMATION, *PSYSTEM_PAGEFILE_INFORMATION;
393 // SystemCacheInformation (21)
395 struct _SYSTEM_CACHE_INFORMATION
399 ULONG PageFaultCount;
400 ULONG MinimumWorkingSet;
401 ULONG MaximumWorkingSet;
404 } SYSTEM_CACHE_INFORMATION;
406 // SystemDpcInformation (24)
408 struct _SYSTEM_DPC_INFORMATION
411 ULONG KiMaximumDpcQueueDepth;
412 ULONG KiMinimumDpcRate;
413 ULONG KiAdjustDpcThreshold;
414 ULONG KiIdealDpcRate;
416 } SYSTEM_DPC_INFORMATION, *PSYSTEM_DPC_INFORMATION;
418 // SystemLoadImage (26)
419 typedef struct _SYSTEM_LOAD_IMAGE
421 UNICODE_STRING ModuleName;
423 PVOID SectionPointer;
425 PVOID ExportDirectory;
426 } SYSTEM_LOAD_IMAGE, *PSYSTEM_LOAD_IMAGE;
428 // SystemUnloadImage (27)
429 typedef struct _SYSTEM_UNLOAD_IMAGE
432 } SYSTEM_UNLOAD_IMAGE, *PSYSTEM_UNLOAD_IMAGE;
434 // SystemTimeAdjustmentInformation (28)
436 struct _SYSTEM_QUERY_TIME_ADJUSTMENT
438 ULONG TimeAdjustment;
439 ULONG MaximumIncrement;
440 BOOLEAN TimeSynchronization;
442 } SYSTEM_QUERY_TIME_ADJUSTMENT, *PSYSTEM_QUERY_TIME_ADJUSTMENT;
445 struct _SYSTEM_SET_TIME_ADJUSTMENT
447 ULONG TimeAdjustment;
448 BOOLEAN TimeSynchronization;
450 } SYSTEM_TIME_ADJUSTMENT_INFO, *PSYSTEM_TIME_ADJUSTMENT_INFO;
454 typedef enum _ATOM_INFORMATION_CLASS
456 AtomBasicInformation = 0,
457 AtomTableInformation = 1,
458 } ATOM_INFORMATION_CLASS;
460 typedef struct _ATOM_BASIC_INFORMATION
466 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
468 // SystemLoadAndCallImage(38)
469 typedef struct _SYSTEM_LOAD_AND_CALL_IMAGE
471 UNICODE_STRING ModuleName;
472 } SYSTEM_LOAD_AND_CALL_IMAGE, *PSYSTEM_LOAD_AND_CALL_IMAGE;
474 // SystemTimeZoneInformation (44)
476 struct _SYSTEM_TIME_ZONE_INFORMATION
479 WCHAR StandardName [32];
482 WCHAR DaylightName [32];
486 } SYSTEM_TIME_ZONE_INFORMATION, * PSYSTEM_TIME_ZONE_INFORMATION;
488 // SystemLookasideInformation (45)
490 struct _SYSTEM_LOOKASIDE_INFORMATION
494 ULONG TotalAllocates;
495 ULONG AllocatesMisses;
502 } SYSTEM_LOOKASIDE_INFORMATION, * PSYSTEM_LOOKASIDE_INFORMATION;
504 // SystemSetTimeSlipEvent (46)
506 struct _SYSTEM_SET_TIME_SLIP_EVENT
508 HANDLE TimeSlipEvent; /* IN */
510 } SYSTEM_SET_TIME_SLIP_EVENT, * PSYSTEM_SET_TIME_SLIP_EVENT;
512 // SystemCreateSession (47)
513 // (available only on TSE/NT5+)
515 struct _SYSTEM_CREATE_SESSION
517 ULONG SessionId; /* OUT */
519 } SYSTEM_CREATE_SESSION, * PSYSTEM_CREATE_SESSION;
521 // SystemDeleteSession (48)
522 // (available only on TSE/NT5+)
524 struct _SYSTEM_DELETE_SESSION
526 ULONG SessionId; /* IN */
528 } SYSTEM_DELETE_SESSION, * PSYSTEM_DELETE_SESSION;
530 // SystemRangeStartInformation (50)
532 struct _SYSTEM_RANGE_START_INFORMATION
534 PVOID SystemRangeStart;
536 } SYSTEM_RANGE_START_INFORMATION, * PSYSTEM_RANGE_START_INFORMATION;
538 // SystemSessionProcessesInformation (53)
539 // (available only on TSE/NT5+)
541 struct _SYSTEM_SESSION_PROCESSES_INFORMATION
545 PVOID Buffer; /* same format as in SystemProcessInformation */
547 } SYSTEM_SESSION_PROCESSES_INFORMATION, * PSYSTEM_SESSION_PROCESSES_INFORMATION;
549 // memory information
551 typedef enum _MEMORY_INFORMATION_CLASS {
552 MemoryBasicInformation,
553 MemoryWorkingSetList,
554 MemorySectionName //,
555 //MemoryBasicVlmInformation //???
556 } MEMORY_INFORMATION_CLASS;
558 typedef struct _MEMORY_BASIC_INFORMATION { // Information Class 0
560 PVOID AllocationBase;
561 ULONG AllocationProtect;
566 } MEMORY_BASIC_INFORMATION, *PMEMORY_BASIC_INFORMATION;
568 typedef struct _MEMORY_WORKING_SET_LIST { // Information Class 1
570 ULONG WorkingSetList[1];
571 } MEMORY_WORKING_SET_LIST, *PMEMORY_WORKING_SET_LIST;
573 // Information Class 2
574 #define _MEMORY_SECTION_NAME_STATIC(__bufsize__) \
576 UNICODE_STRING SectionFileName; \
577 WCHAR NameBuffer[(__bufsize__)]; \
580 #define MEMORY_SECTION_NAME_STATIC(__bufsize__) \
581 struct _MEMORY_SECTION_NAME_STATIC((__bufsize__)
583 typedef struct _MEMORY_SECTION_NAME_STATIC(ANYSIZE_ARRAY)
584 MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
586 // Information class 0
587 typedef struct _PROCESS_BASIC_INFORMATION
591 KAFFINITY AffinityMask;
592 KPRIORITY BasePriority;
593 ULONG UniqueProcessId;
594 ULONG InheritedFromUniqueProcessId;
595 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
597 // Information class 1
598 typedef struct _QUOTA_LIMITS
600 ULONG PagedPoolLimit;
601 ULONG NonPagedPoolLimit;
602 ULONG MinimumWorkingSetSize;
603 ULONG MaximumWorkingSetSize;
606 } QUOTA_LIMITS, *PQUOTA_LIMITS;
608 // Information class 2
609 typedef struct _IO_COUNTERS
611 ULONG ReadOperationCount;
612 ULONG WriteOperationCount;
613 ULONG OtherOperationCount;
614 LARGE_INTEGER ReadTransferCount;
615 LARGE_INTEGER WriteTransferCount;
616 LARGE_INTEGER OtherTransferCount;
617 } IO_COUNTERS, *PIO_COUNTERS;
619 // Information class 3
620 typedef struct _VM_COUNTERS_
622 ULONG PeakVirtualSize;
624 ULONG PageFaultCount;
625 ULONG PeakWorkingSetSize;
626 ULONG WorkingSetSize;
627 ULONG QuotaPeakPagedPoolUsage;
628 ULONG QuotaPagedPoolUsage;
629 ULONG QuotaPeakNonPagedPoolUsage;
630 ULONG QuotaNonPagedPoolUsage;
632 ULONG PeakPagefileUsage;
633 } VM_COUNTERS, *PVM_COUNTERS;
635 // Information class 4
636 typedef struct _KERNEL_USER_TIMES
642 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
644 // Information class 9
645 typedef struct _PROCESS_ACCESS_TOKEN
649 } PROCESS_ACCESS_TOKEN, *PPROCESS_ACCESS_TOKEN;
651 // Information class 14
652 typedef struct _POOLED_USAGE_AND_LIMITS_
654 ULONG PeakPagedPoolUsage;
655 ULONG PagedPoolUsage;
656 ULONG PagedPoolLimit;
657 ULONG PeakNonPagedPoolUsage;
658 ULONG NonPagedPoolUsage;
659 ULONG NonPagedPoolLimit;
660 ULONG PeakPagefileUsage;
663 } POOLED_USAGE_AND_LIMITS, *PPOOLED_USAGE_AND_LIMITS;
665 // Information class 15
666 typedef struct _PROCESS_WS_WATCH_INFORMATION
670 } PROCESS_WS_WATCH_INFORMATION, *PPROCESS_WS_WATCH_INFORMATION;
672 // Information class 18
673 typedef struct _PROCESS_PRIORITY_CLASS
677 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
679 // Information class 23
680 typedef struct _PROCESS_DEVICEMAP_INFORMATION
684 HANDLE DirectoryHandle;
691 } PROCESS_DEVICEMAP_INFORMATION, *pPROCESS_DEVICEMAP_INFORMATION;
693 // Information class 24
694 typedef struct _PROCESS_SESSION_INFORMATION
697 } PROCESS_SESSION_INFORMATION, *PPROCESS_SESSION_INFORMATION;
699 // thread information
701 // incompatible with MS NT
703 typedef struct _THREAD_BASIC_INFORMATION
706 PVOID TebBaseAddress; // PNT_TIB (GN)
708 KAFFINITY AffinityMask;
710 KPRIORITY BasePriority;
711 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
713 // object information
715 typedef struct _OBJECT_NAME_INFORMATION
718 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
722 typedef struct _FILE_BASIC_INFORMATION
728 ULONG FileAttributes;
729 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
731 typedef struct _FILE_STANDARD_INFORMATION
733 LARGE_INTEGER AllocationSize;
734 LARGE_INTEGER EndOfFile;
736 BOOLEAN DeletePending;
738 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
740 typedef struct _FILE_POSITION_INFORMATION
742 LARGE_INTEGER CurrentByteOffset;
743 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
745 typedef struct _FILE_ALIGNMENT_INFORMATION
747 ULONG AlignmentRequirement;
748 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
750 typedef struct _FILE_DISPOSITION_INFORMATION
752 BOOLEAN DoDeleteFile;
753 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
755 typedef struct _FILE_END_OF_FILE_INFORMATION
757 LARGE_INTEGER EndOfFile;
758 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
760 typedef struct _FILE_NETWORK_OPEN_INFORMATION
766 LARGE_INTEGER AllocationSize;
767 LARGE_INTEGER EndOfFile;
768 ULONG FileAttributes;
769 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
771 typedef struct _FILE_FULL_EA_INFORMATION
773 ULONG NextEntryOffset;
776 USHORT EaValueLength;
778 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
781 typedef struct _FILE_EA_INFORMATION {
783 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
786 typedef struct _FILE_GET_EA_INFORMATION {
787 ULONG NextEntryOffset;
790 } FILE_GET_EA_INFORMATION, *PFILE_GET_EA_INFORMATION;
792 typedef struct _FILE_STREAM_INFORMATION {
793 ULONG NextEntryOffset;
794 ULONG StreamNameLength;
795 LARGE_INTEGER StreamSize;
796 LARGE_INTEGER StreamAllocationSize;
798 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
800 typedef struct _FILE_ALLOCATION_INFORMATION {
801 LARGE_INTEGER AllocationSize;
802 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
804 typedef struct _FILE_NAME_INFORMATION {
805 ULONG FileNameLength;
807 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
809 typedef struct _FILE_NAMES_INFORMATION
811 ULONG NextEntryOffset;
813 ULONG FileNameLength;
815 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
818 typedef struct _FILE_RENAME_INFORMATION {
821 ULONG FileNameLength;
823 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
826 typedef struct _FILE_INTERNAL_INFORMATION {
827 LARGE_INTEGER IndexNumber;
828 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
830 typedef struct _FILE_ACCESS_INFORMATION {
831 ACCESS_MASK AccessFlags;
832 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
835 typedef struct _FILE_MODE_INFORMATION {
837 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
840 typedef struct _FILE_PIPE_INFORMATION {
842 ULONG CompletionMode;
843 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
845 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
847 ULONG NamedPipeConfiguration;
848 ULONG MaximumInstances;
849 ULONG CurrentInstances;
851 ULONG ReadDataAvailable;
853 ULONG WriteQuotaAvailable;
854 ULONG NamedPipeState;
856 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
858 typedef struct _FILE_PIPE_REMOTE_INFORMATION {
859 LARGE_INTEGER CollectDataTime;
860 ULONG MaximumCollectionCount;
861 } FILE_PIPE_REMOTE_INFORMATION, *PFILE_PIPE_REMOTE_INFORMATION;
863 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
864 ULONG MaxMessageSize;
865 ULONG Unknown; /* ?? */
868 LARGE_INTEGER Timeout;
869 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
871 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
872 LARGE_INTEGER Timeout;
873 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
875 typedef struct _FILE_COMPRESSION_INFORMATION {
876 LARGE_INTEGER CompressedFileSize;
877 USHORT CompressionFormat;
878 UCHAR CompressionUnitShift;
882 } FILE_COMPRESSION_INFORMATION, *PFILE_COMPRESSION_INFORMATION;
884 typedef struct _FILE_ALL_INFORMATION {
885 FILE_BASIC_INFORMATION BasicInformation;
886 FILE_STANDARD_INFORMATION StandardInformation;
887 FILE_INTERNAL_INFORMATION InternalInformation;
888 FILE_EA_INFORMATION EaInformation;
889 FILE_ACCESS_INFORMATION AccessInformation;
890 FILE_POSITION_INFORMATION PositionInformation;
891 FILE_MODE_INFORMATION ModeInformation;
892 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
893 FILE_NAME_INFORMATION NameInformation;
894 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
897 // file system information structures
899 typedef struct _FILE_FS_DEVICE_INFORMATION {
900 DEVICE_TYPE DeviceType;
901 ULONG Characteristics;
902 } FILE_FS_DEVICE_INFORMATION, *PFILE_FS_DEVICE_INFORMATION;
905 typedef struct _FILE_FS_VOLUME_INFORMATION {
906 TIME VolumeCreationTime;
907 ULONG VolumeSerialNumber;
908 ULONG VolumeLabelLength;
909 BOOLEAN SupportsObjects;
910 WCHAR VolumeLabel[0];
911 } FILE_FS_VOLUME_INFORMATION, *PFILE_FS_VOLUME_INFORMATION;
913 typedef struct _FILE_FS_SIZE_INFORMATION {
914 LARGE_INTEGER TotalAllocationUnits;
915 LARGE_INTEGER AvailableAllocationUnits;
916 ULONG SectorsPerAllocationUnit;
917 ULONG BytesPerSector;
918 } FILE_FS_SIZE_INFORMATION, *PFILE_FS_SIZE_INFORMATION;
920 typedef struct _FILE_FS_ATTRIBUTE_INFORMATION {
921 ULONG FileSystemAttributes;
922 LONG MaximumComponentNameLength;
923 ULONG FileSystemNameLength;
924 WCHAR FileSystemName[0];
925 } FILE_FS_ATTRIBUTE_INFORMATION, *PFILE_FS_ATTRIBUTE_INFORMATION;
928 FileSystemAttributes is one of the following values:
930 FILE_CASE_SENSITIVE_SEARCH 0x00000001
931 FILE_CASE_PRESERVED_NAMES 0x00000002
932 FILE_UNICODE_ON_DISK 0x00000004
933 FILE_PERSISTENT_ACLS 0x00000008
934 FILE_FILE_COMPRESSION 0x00000010
935 FILE_VOLUME_QUOTAS 0x00000020
936 FILE_VOLUME_IS_COMPRESSED 0x00008000
938 typedef struct _FILE_FS_LABEL_INFORMATION {
939 ULONG VolumeLabelLength;
940 WCHAR VolumeLabel[0];
941 } FILE_FS_LABEL_INFORMATION, *PFILE_FS_LABEL_INFORMATION;
943 // read file scatter / write file scatter
944 //FIXME I am a win32 struct aswell
946 typedef union _FILE_SEGMENT_ELEMENT {
949 }FILE_SEGMENT_ELEMENT, *PFILE_SEGMENT_ELEMENT;
951 typedef struct _FILE_DIRECTORY_INFORMATION {
952 ULONG NextEntryOffset;
958 LARGE_INTEGER EndOfFile;
959 LARGE_INTEGER AllocationSize;
960 ULONG FileAttributes;
961 ULONG FileNameLength;
963 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
965 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
966 ULONG NextEntryOffset;
972 LARGE_INTEGER EndOfFile;
973 LARGE_INTEGER AllocationSize;
974 ULONG FileAttributes;
975 ULONG FileNameLength;
977 WCHAR FileName[0]; // variable size
978 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
979 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
982 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
983 ULONG NextEntryOffset;
989 LARGE_INTEGER EndOfFile;
990 LARGE_INTEGER AllocationSize;
991 ULONG FileAttributes;
992 ULONG FileNameLength;
994 CHAR ShortNameLength;
995 WCHAR ShortName[12]; // 8.3 name
997 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
998 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
1000 typedef struct _FILE_ID_BOTH_DIR_INFORMATION {
1001 ULONG NextEntryOffset;
1003 LARGE_INTEGER CreationTime;
1004 LARGE_INTEGER LastAccessTime;
1005 LARGE_INTEGER LastWriteTime;
1006 LARGE_INTEGER ChangeTime;
1007 LARGE_INTEGER EndOfFile;
1008 LARGE_INTEGER AllocationSize;
1009 ULONG FileAttributes;
1010 ULONG FileNameLength;
1012 CCHAR ShortNameLength;
1013 WCHAR ShortName[12];
1014 LARGE_INTEGER FileId;
1016 } FILE_ID_BOTH_DIR_INFORMATION, *PFILE_ID_BOTH_DIR_INFORMATION;
1019 NotifyFilter / CompletionFilter:
1021 FILE_NOTIFY_CHANGE_FILE_NAME 0x00000001
1022 FILE_NOTIFY_CHANGE_DIR_NAME 0x00000002
1023 FILE_NOTIFY_CHANGE_NAME 0x00000003
1024 FILE_NOTIFY_CHANGE_ATTRIBUTES 0x00000004
1025 FILE_NOTIFY_CHANGE_SIZE 0x00000008
1026 FILE_NOTIFY_CHANGE_LAST_WRITE 0x00000010
1027 FILE_NOTIFY_CHANGE_LAST_ACCESS 0x00000020
1028 FILE_NOTIFY_CHANGE_CREATION 0x00000040
1029 FILE_NOTIFY_CHANGE_EA 0x00000080
1030 FILE_NOTIFY_CHANGE_SECURITY 0x00000100
1031 FILE_NOTIFY_CHANGE_STREAM_NAME 0x00000200
1032 FILE_NOTIFY_CHANGE_STREAM_SIZE 0x00000400
1033 FILE_NOTIFY_CHANGE_STREAM_WRITE 0x00000800
1036 typedef struct _FILE_NOTIFY_INFORMATION {
1038 ULONG FileNameLength;
1040 } FILE_NOTIFY_INFORMATION;
1042 #define FSCTL_GET_VOLUME_BITMAP 0x9006F
1043 #define FSCTL_GET_RETRIEVAL_POINTERS 0x90073
1044 #define FSCTL_MOVE_FILE 0x90074
1046 typedef struct _MAPPING_PAIR
1050 } MAPPING_PAIR, *PMAPPING_PAIR;
1052 typedef struct _GET_RETRIEVAL_DESCRIPTOR
1054 ULONG NumberOfPairs;
1056 MAPPING_PAIR Pair[0]; // variable size
1057 } GET_RETRIEVAL_DESCRIPTOR, *PGET_RETRIEVAL_DESCRIPTOR;
1059 typedef struct _MOVEFILE_DESCRIPTOR
1063 LARGE_INTEGER StartVcn;
1064 LARGE_INTEGER TargetLcn;
1067 } MOVEFILE_DESCRIPTOR, *PMOVEFILE_DESCRIPTOR;
1069 typedef struct _SECTION_BASIC_INFORMATION
1074 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
1076 typedef enum _SECTION_INFORMATION_CLASS
1078 SectionBasicInformation,
1079 SectionImageInformation,
1080 } SECTION_INFORMATION_CLASS;
1084 typedef enum SHUTDOWN_ACTION_TAG {
1090 #else /* __USE_W32API */
1092 #define DebugDbgLoadSymbols ((DEBUG_CONTROL_CODE)0xffffffff)
1094 #endif /* __USE_W32API */
1096 #define NtCurrentProcess() ( (HANDLE) 0xFFFFFFFF )
1097 #define NtCurrentThread() ( (HANDLE) 0xFFFFFFFE )
1099 extern ULONG NtBuildNumber;
1102 extern ULONG NtBuildNumber;
1104 extern ULONG NtBuildNumber;
1108 // event access mask
1110 #define EVENT_READ_ACCESS 1
1111 #define EVENT_WRITE_ACCESS 2
1113 //process query / set information class
1115 #define ProcessBasicInformation 0
1116 #define ProcessQuotaLimits 1
1117 #define ProcessIoCounters 2
1118 #define ProcessVmCounters 3
1119 #define ProcessTimes 4
1120 #define ProcessBasePriority 5
1121 #define ProcessRaisePriority 6
1122 #define ProcessDebugPort 7
1123 #define ProcessExceptionPort 8
1124 #define ProcessAccessToken 9
1125 #define ProcessLdtInformation 10
1126 #define ProcessLdtSize 11
1127 #define ProcessDefaultHardErrorMode 12
1128 #define ProcessIoPortHandlers 13
1129 #define ProcessPooledUsageAndLimits 14
1130 #define ProcessWorkingSetWatch 15
1131 #define ProcessUserModeIOPL 16
1132 #define ProcessEnableAlignmentFaultFixup 17
1133 #define ProcessPriorityClass 18
1134 #define ProcessWx86Information 19
1135 #define ProcessHandleCount 20
1136 #define ProcessAffinityMask 21
1137 #define ProcessPriorityBoost 22
1138 #define ProcessDeviceMap 23
1139 #define ProcessSessionInformation 24
1140 #define ProcessForegroundInformation 25
1141 #define ProcessWow64Information 26
1142 /* ReactOS private. */
1143 #define ProcessImageFileName 27
1144 #define ProcessDesktop 28
1145 #define MaxProcessInfoClass 29
1148 * thread query / set information class
1150 #define ThreadBasicInformation 0
1151 #define ThreadTimes 1
1152 #define ThreadPriority 2
1153 #define ThreadBasePriority 3
1154 #define ThreadAffinityMask 4
1155 #define ThreadImpersonationToken 5
1156 #define ThreadDescriptorTableEntry 6
1157 #define ThreadEnableAlignmentFaultFixup 7
1158 #define ThreadEventPair 8
1159 #define ThreadQuerySetWin32StartAddress 9
1160 #define ThreadZeroTlsCell 10
1161 #define ThreadPerformanceCount 11
1162 #define ThreadAmILastThread 12
1163 #define ThreadIdealProcessor 13
1164 #define ThreadPriorityBoost 14
1165 #define ThreadSetTlsArrayAddress 15
1166 #define ThreadIsIoPending 16
1167 #define ThreadHideFromDebugger 17
1168 #define MaxThreadInfoClass 17
1170 // object handle information
1172 #define ObjectBasicInformation 0
1173 #define ObjectNameInformation 1
1174 #define ObjectTypeInformation 2
1175 #define ObjectAllInformation 3
1176 #define ObjectDataInformation 4
1178 typedef struct _ATOM_TABLE_INFORMATION
1180 ULONG NumberOfAtoms;
1182 } ATOM_TABLE_INFORMATION, *PATOM_TABLE_INFORMATION;
1185 // mutant information
1187 typedef enum _MUTANT_INFORMATION_CLASS
1189 MutantBasicInformation = 0
1190 } MUTANT_INFORMATION_CLASS;
1192 typedef struct _MUTANT_BASIC_INFORMATION
1197 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
1200 // SystemTimeOfDayInformation (3)
1202 struct _SYSTEM_TIMEOFDAY_INFORMATION
1204 LARGE_INTEGER BootTime;
1205 LARGE_INTEGER CurrentTime;
1206 LARGE_INTEGER TimeZoneBias;
1209 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION;
1211 // SystemPathInformation (4)
1214 struct _SYSTEM_PATH_INFORMATION
1218 } SYSTEM_PATH_INFORMATION, * PSYSTEM_PATH_INFORMATION;
1220 // SystemProcessInformation (5)
1222 struct _SYSTEM_THREAD_INFORMATION
1230 ULONG DynamicPriority;
1234 KWAIT_REASON WaitReason;
1236 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
1239 struct SYSTEM_PROCESS_INFORMATION
1241 ULONG RelativeOffset;
1247 UNICODE_STRING Name;
1250 ULONG ParentProcessId;
1253 ULONG PeakVirtualSizeBytes;
1254 ULONG TotalVirtualSizeBytes;
1255 ULONG PageFaultCount;
1256 ULONG PeakWorkingSetSizeBytes;
1257 ULONG TotalWorkingSetSizeBytes;
1258 ULONG PeakPagedPoolUsagePages;
1259 ULONG TotalPagedPoolUsagePages;
1260 ULONG PeakNonPagedPoolUsagePages;
1261 ULONG TotalNonPagedPoolUsagePages;
1262 ULONG TotalPageFileUsageBytes;
1263 ULONG PeakPageFileUsageBytes;
1264 ULONG TotalPrivateBytes;
1265 SYSTEM_THREAD_INFORMATION ThreadSysInfo [1];
1267 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
1269 // SystemCallCountInformation (6)
1271 struct _SYSTEM_SDT_INFORMATION
1274 ULONG NumberOfSystemServiceTables;
1275 ULONG NumberOfServices [1];
1276 ULONG ServiceCounters [1];
1278 } SYSTEM_SDT_INFORMATION, *PSYSTEM_SDT_INFORMATION;
1280 // SystemDeviceInformation (7)
1282 struct _SYSTEM_DEVICE_INFORMATION
1284 ULONG NumberOfDisks;
1285 ULONG NumberOfFloppies;
1286 ULONG NumberOfCdRoms;
1287 ULONG NumberOfTapes;
1288 ULONG NumberOfSerialPorts;
1289 ULONG NumberOfParallelPorts;
1290 } SYSTEM_DEVICE_INFORMATION, *PSYSTEM_DEVICE_INFORMATION;
1292 // SystemProcessorPerformanceInformation (8)
1293 // (one per processor in the system)
1295 struct _SYSTEM_PROCESSORTIME_INFO
1297 TIME TotalProcessorRunTime;
1298 TIME TotalProcessorTime;
1299 TIME TotalProcessorUserTime;
1301 TIME TotalInterruptTime;
1302 ULONG TotalInterrupts;
1305 } SYSTEM_PROCESSORTIME_INFO, *PSYSTEM_PROCESSORTIME_INFO;
1307 // SystemFlagsInformation (9)
1309 struct _SYSTEM_FLAGS_INFORMATION
1313 } SYSTEM_FLAGS_INFORMATION, * PSYSTEM_FLAGS_INFORMATION;
1315 #define FLG_STOP_ON_EXCEPTION 0x00000001
1316 #define FLG_SHOW_LDR_SNAPS 0x00000002
1317 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
1318 #define FLG_STOP_ON_HANG_GUI 0x00000008
1319 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
1320 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
1321 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
1322 #define FLG_HEAP_VALIDATE_ALL 0x00000080
1323 #define FLG_POOL_ENABLE_TAIL_CHECK 0x00000100
1324 #define FLG_POOL_ENABLE_FREE_CHECK 0x00000200
1325 #define FLG_POOL_ENABLE_TAGGING 0x00000400
1326 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
1327 #define FLG_USER_STACK_TRACE_DB 0x00001000
1328 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
1329 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
1330 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
1331 #define FLG_IGNORE_DEBUG_PRIV 0x00010000
1332 #define FLG_ENABLE_CSRDEBUG 0x00020000
1333 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
1334 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
1335 #define FLG_HEAP_ENABLE_CALL_TRACING 0x00100000
1336 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
1337 #define FLG_ENABLE_CLOSE_EXCEPTION 0x00400000
1338 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
1339 #define FLG_UNKNOWN_01000000 0x01000000
1340 #define FLG_UNKNOWN_02000000 0x02000000
1341 #define FLG_UNKNOWN_04000000 0x04000000
1342 #define FLG_ENABLE_DBGPRINT_BUFFERING 0x08000000
1343 #define FLG_UNKNOWN_10000000 0x10000000
1344 #define FLG_UNKNOWN_20000000 0x20000000
1345 #define FLG_UNKNOWN_40000000 0x40000000
1346 #define FLG_UNKNOWN_80000000 0x80000000
1348 // SystemCallTimeInformation (10)
1351 // SystemLocksInformation (12)
1353 struct _SYSTEM_RESOURCE_LOCK_ENTRY
1355 ULONG ResourceAddress;
1359 ULONG ContentionCount;
1361 ULONG NumberOfSharedWaiters;
1362 ULONG NumberOfExclusiveWaiters;
1364 } SYSTEM_RESOURCE_LOCK_ENTRY, *PSYSTEM_RESOURCE_LOCK_ENTRY;
1367 struct _SYSTEM_RESOURCE_LOCK_INFO
1370 SYSTEM_RESOURCE_LOCK_ENTRY Lock [1];
1372 } SYSTEM_RESOURCE_LOCK_INFO, *PSYSTEM_RESOURCE_LOCK_INFO;
1374 // SystemInformation13 (13)
1377 // SystemInformation14 (14)
1380 // SystemInformation15 (15)
1383 // SystemInstructionEmulationInfo (19)
1385 struct _SYSTEM_VDM_INFORMATION
1387 ULONG VdmSegmentNotPresentCount;
1389 ULONG VdmESPREFIXCount;
1390 ULONG VdmCSPREFIXCount;
1391 ULONG VdmSSPREFIXCount;
1392 ULONG VdmDSPREFIXCount;
1393 ULONG VdmFSPREFIXCount;
1394 ULONG VdmGSPREFIXCount;
1395 ULONG VdmOPER32PREFIXCount;
1396 ULONG VdmADDR32PREFIXCount;
1398 ULONG VdmINSWV86Count;
1399 ULONG VdmOUTSBCount;
1400 ULONG VdmOUTSWCount;
1401 ULONG VdmPUSHFCount;
1403 ULONG VdmINTNNCount;
1406 ULONG VdmINBIMMCount;
1407 ULONG VdmINWIMMCount;
1408 ULONG VdmOUTBIMMCount;
1409 ULONG VdmOUTWIMMCount;
1414 ULONG VdmLOCKPREFIXCount;
1415 ULONG VdmREPNEPREFIXCount;
1416 ULONG VdmREPPREFIXCount;
1422 } SYSTEM_VDM_INFORMATION, *PSYSTEM_VDM_INFORMATION;
1424 // SystemInformation20 (20)
1427 // SystemPoolTagInformation (22)
1428 // found by Klaus P. Gerlicher
1429 // (implemented only in checked builds)
1431 struct _POOL_TAG_STATS
1433 ULONG AllocationCount;
1440 struct _SYSTEM_POOL_TAG_ENTRY
1443 POOL_TAG_STATS Paged;
1444 POOL_TAG_STATS NonPaged;
1446 } SYSTEM_POOL_TAG_ENTRY, * PSYSTEM_POOL_TAG_ENTRY;
1449 struct _SYSTEM_POOL_TAG_INFO
1452 SYSTEM_POOL_TAG_ENTRY PoolEntry [1];
1454 } SYSTEM_POOL_TAG_INFO, *PSYSTEM_POOL_TAG_INFO;
1456 // SystemProcessorScheduleInfo (23)
1458 struct _SYSTEM_PROCESSOR_SCHEDULE_INFO
1460 ULONG nContextSwitches;
1463 ULONG TimerResolution;
1467 } SYSTEM_PROCESSOR_SCHEDULE_INFO, *PSYSTEM_PROCESSOR_SCHEDULE_INFO;
1469 // SystemInformation25 (25)
1472 // SystemProcessorFaultCountInfo (33)
1474 struct _SYSTEM_PROCESSOR_FAULT_INFO
1476 ULONG nAlignmentFixup;
1477 ULONG nExceptionDispatches;
1478 ULONG nFloatingEmulation;
1481 } SYSTEM_PROCESSOR_FAULT_INFO, *PSYSTEM_PROCESSOR_FAULT_INFO;
1483 // SystemCrashDumpStateInfo (34)
1486 // SystemDebuggerInformation (35)
1488 struct _SYSTEM_DEBUGGER_INFO
1490 BOOLEAN KdDebuggerEnabled;
1491 BOOLEAN KdDebuggerPresent;
1493 } SYSTEM_DEBUGGER_INFO, *PSYSTEM_DEBUGGER_INFO;
1495 // SystemInformation36 (36)
1498 // SystemQuotaInformation (37)
1500 struct _SYSTEM_QUOTA_INFORMATION
1502 ULONG CmpGlobalQuota;
1503 ULONG CmpGlobalQuotaUsed;
1504 ULONG MmSizeofPagedPoolInBytes;
1506 } SYSTEM_QUOTA_INFORMATION, *PSYSTEM_QUOTA_INFORMATION;
1511 // SystemVerifierInformation (51)
1514 // SystemAddVerifier (52)
1522 // number of wait objects
1524 #define THREAD_WAIT_OBJECTS 3
1525 //#define MAXIMUM_WAIT_OBJECTS 64
1527 // key restore flags
1529 #define REG_WHOLE_HIVE_VOLATILE 1
1530 #define REG_REFRESH_HIVE 2
1532 // object type access rights
1534 #define OBJECT_TYPE_CREATE 0x0001
1535 #define OBJECT_TYPE_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0x1)
1537 // directory access rights
1539 #define DIRECTORY_QUERY 0x0001
1540 #define DIRECTORY_TRAVERSE 0x0002
1541 #define DIRECTORY_CREATE_OBJECT 0x0004
1542 #define DIRECTORY_CREATE_SUBDIRECTORY 0x0008
1544 #define DIRECTORY_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0xF)
1546 // symbolic link access rights
1548 #define SYMBOLIC_LINK_QUERY 0x0001
1549 #define SYMBOLIC_LINK_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | 0x1)
1552 typedef struct _OBJECT_DATA_INFORMATION
1554 BOOLEAN bInheritHandle;
1555 BOOLEAN bProtectFromClose;
1556 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
1559 typedef struct _OBJECT_TYPE_INFORMATION
1561 UNICODE_STRING Name;
1562 UNICODE_STRING Type;
1564 ULONG ReferenceCount;
1565 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
1568 // directory information
1570 typedef struct _OBJDIR_INFORMATION {
1571 UNICODE_STRING ObjectName;
1572 UNICODE_STRING ObjectTypeName; // Directory, Device ...
1574 } OBJDIR_INFORMATION, *POBJDIR_INFORMATION;
1578 Action is one of the following values:
1580 FILE_ACTION_ADDED 0x00000001
1581 FILE_ACTION_REMOVED 0x00000002
1582 FILE_ACTION_MODIFIED 0x00000003
1583 FILE_ACTION_RENAMED_OLD_NAME 0x00000004
1584 FILE_ACTION_RENAMED_NEW_NAME 0x00000005
1585 FILE_ACTION_ADDED_STREAM 0x00000006
1586 FILE_ACTION_REMOVED_STREAM 0x00000007
1587 FILE_ACTION_MODIFIED_STREAM 0x00000008
1592 // File System Control commands ( related to defragging )
1594 #define FSCTL_READ_MFT_RECORD 0x90068 // NTFS only
1596 typedef struct _BITMAP_DESCRIPTOR
1599 ULONGLONG ClustersToEndOfVol;
1600 BYTE Map[0]; // variable size
1601 } BITMAP_DESCRIPTOR, *PBITMAP_DESCRIPTOR;
1604 //typedef enum _TIMER_TYPE
1606 // NotificationTimer,
1607 // SynchronizationTimer
1610 typedef struct _TIMER_BASIC_INFORMATION
1612 LARGE_INTEGER TimeRemaining;
1613 BOOLEAN SignalState;
1614 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
1616 typedef enum _TIMER_INFORMATION_CLASS
1618 TimerBasicInformation
1619 } TIMER_INFORMATION_CLASS;
1622 struct _LPC_PORT_BASIC_INFORMATION
1639 } LPC_PORT_BASIC_INFORMATION, * PLPC_PORT_BASIC_INFORMATION;