steve
/
factor
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

windows.ntdll: Use the real field names for all the BYTE and reserved 

dummy fields.
db4
Doug Coleman 2013-05-01 18:11:34 -07:00
parent 23cb4c2f48
commit a326b73470
1 changed files with 111 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

130
basis/windows/ntdll/ntdll.factor
View File

@ -7,6 +7,7 @@ LIBRARY: ntdll
TYPEDEF: uint NTSTATUS TYPEDEF: uint NTSTATUS
! Buffer is a PWSTR
STRUCT: LSA_UNICODE_STRING STRUCT: LSA_UNICODE_STRING
{ Length USHORT } { Length USHORT }
{ MaximumLength USHORT } { MaximumLength USHORT }
@ -15,11 +16,43 @@ TYPEDEF: LSA_UNICODE_STRING* PLSA_UNICODE_STRING
TYPEDEF: LSA_UNICODE_STRING UNICODE_STRING TYPEDEF: LSA_UNICODE_STRING UNICODE_STRING
TYPEDEF: LSA_UNICODE_STRING* PUNICODE_STRING TYPEDEF: LSA_UNICODE_STRING* PUNICODE_STRING
STRUCT: RTL_DRIVE_LETTER_CURDIR
{ Flags USHORT }
{ Length USHORT }
{ Timestamp ULONG }
{ DosPath UNICODE_STRING } ;
TYPEDEF: RTL_DRIVE_LETTER_CURDIR* PRTL_DRIVE_LETTER_CURDIR
STRUCT: RTL_USER_PROCESS_PARAMETERS STRUCT: RTL_USER_PROCESS_PARAMETERS
{ Reserved1 BYTE[16] } { MaximumLength ULONG }
{ Reserved2 PVOID[10] } { Length ULONG }
{ Flags ULONG }
{ DebugFlags ULONG }
{ ConsoleHandle PVOID }
{ ConsoleFlags ULONG }
{ StdInputHandle HANDLE }
{ StdOutputHandle HANDLE }
{ StdErrorHandle HANDLE }
{ CurrentDirectoryPath UNICODE_STRING }
{ CurrentDirectoryHandle HANDLE }
{ DllPath UNICODE_STRING }
{ ImagePathName UNICODE_STRING } { ImagePathName UNICODE_STRING }
{ CommandLine UNICODE_STRING } ; { CommandLine UNICODE_STRING }
{ Environment PVOID }
{ StartingPositionLeft ULONG }
{ StartingPositionTop ULONG }
{ Width ULONG }
{ Height ULONG }
{ CharWidth ULONG }
{ CharHeight ULONG }
{ ConsoleTextAttributes ULONG }
{ WindowFlags ULONG }
{ ShowWindowFlags ULONG }
{ WindowTitle UNICODE_STRING }
{ DesktopName UNICODE_STRING }
{ ShellInfo UNICODE_STRING }
{ RuntimeData UNICODE_STRING }
{ DLCurrentDirectory RTL_DRIVE_LETTER_CURDIR[0x20] } ;
TYPEDEF: RTL_USER_PROCESS_PARAMETERS* PRTL_USER_PROCESS_PARAMETERS TYPEDEF: RTL_USER_PROCESS_PARAMETERS* PRTL_USER_PROCESS_PARAMETERS
STRUCT: LIST_ENTRY STRUCT: LIST_ENTRY
@ -28,35 +61,92 @@ STRUCT: LIST_ENTRY
TYPEDEF: LIST_ENTRY* PLIST_ENTRY TYPEDEF: LIST_ENTRY* PLIST_ENTRY
STRUCT: PEB_LDR_DATA STRUCT: PEB_LDR_DATA
{ Reserved1 BYTE[8] } { Length ULONG }
{ Reserved2 PVOID[3] } { Initialized BOOLEAN }
{ InMemoryOrderModuleList LIST_ENTRY } ; { SsHandle PVOID }
{ InLoadOrderModuleList LIST_ENTRY }
{ InMemoryOrderModuleList LIST_ENTRY }
{ InInitializationOrderModuleList LIST_ENTRY } ;
TYPEDEF: PEB_LDR_DATA* PPEB_LDR_DATA TYPEDEF: PEB_LDR_DATA* PPEB_LDR_DATA
TYPEDEF: void* PPS_POST_PROCESS_INIT_ROUTINE TYPEDEF: void* PPS_POST_PROCESS_INIT_ROUTINE
STRUCT: PEB_FREE_BLOCK
{ Next PEB_FREE_BLOCK* }
{ Size ULONG } ;
TYPEDEF: PEB_FREE_BLOCK* PPEB_FREE_BLOCK
STRUCT: PEBLOCKROUTINE
{ PebLock PVOID } ;
TYPEDEF: PEBLOCKROUTINE* PPEBLOCKROUTINE
TYPEDEF: PVOID* PPVOID
STRUCT: PEB STRUCT: PEB
{ Reserved1 BYTE[2] } { InheritedAddressSpace BOOLEAN }
{ BeingDebugged BYTE } { ReadImageFileExecOptions BOOLEAN }
{ Reserved2 BYTE[1] } { BeingDebugged BOOLEAN }
{ Reserved3 BYTE[2] } { Spare BOOLEAN }
{ Ldr PPEB_LDR_DATA } { Mutant HANDLE }
{ ImageBaseAddress HMODULE }
{ LoaderData PPEB_LDR_DATA }
{ ProcessParameters PRTL_USER_PROCESS_PARAMETERS } { ProcessParameters PRTL_USER_PROCESS_PARAMETERS }
{ Reserved4 BYTE[104] } { SubSystemData PVOID }
{ Reserved5 PVOID[52] } { ProcessHeap HANDLE }
{ PostProcessInitRoutine PPS_POST_PROCESS_INIT_ROUTINE } { FastPebLock PVOID }
{ Reserved6 BYTE[128] } { FastPebLockRoutine PPEBLOCKROUTINE }
{ Reserved7 PVOID[1] } { FastPebUnlockRoutine PPEBLOCKROUTINE }
{ EnvironmentUpdateCount ULONG }
{ KernelCallbackTable PPVOID }
{ EventLogSection PVOID }
{ EventLog PVOID }
{ FreeList PPEB_FREE_BLOCK }
{ TlsExpansionCounter ULONG }
{ TlsBitmap PVOID }
{ TlsBitmapBits ULONG[2] }
{ ReadOnlySharedMemoryBase PVOID }
{ ReadOnlySharedMemoryHeap PVOID }
{ ReadOnlyStaticServerData PPVOID }
{ AnsiCodePageData PVOID }
{ OemCodePageData PVOID }
{ UnicodeCaseTableData PVOID }
{ NumberOfProcessors ULONG }
{ NtGlobalFlag ULONG }
{ Spare2 BYTE[4] }
{ CriticalSectionTimeout LARGE_INTEGER }
{ HeapSegmentReserve ULONG }
{ HeapSegmentCommit ULONG }
{ HeapDeCommitTotalFreeThreshold ULONG }
{ HeapDeCommitFreeBlockThreshold ULONG }
{ NumberOfHeaps ULONG }
{ MaximumNumberOfHeaps ULONG }
{ ProcessHeaps PPVOID* }
{ GdiSharedHandleTable PVOID }
{ ProcessStarterHelper PVOID }
{ GdiDCAttributeList PVOID }
{ LoaderLock PVOID }
{ OSMajorVersion ULONG }
{ OSMinorVersion ULONG }
{ OSBuildNumber ULONG }
{ OSPlatformId ULONG }
{ ImageSubSystem ULONG }
{ ImageSubSystemMajorVersion ULONG }
{ ImageSubSystemMinorVersion ULONG }
{ GdiHandleBuffer ULONG[0x22] }
{ PostProcessInitRoutine ULONG }
{ TlsExpansionBitmap ULONG }
{ TlsExpansionBitmapBits BYTE[0x80] }
{ SessionId ULONG } ; { SessionId ULONG } ;
TYPEDEF: PEB* PPEB TYPEDEF: PEB* PPEB
! PebBaseAddress is PPEB ! PebBaseAddress is PPEB
STRUCT: PROCESS_BASIC_INFORMATION STRUCT: PROCESS_BASIC_INFORMATION
{ Reserved1 PVOID } { ExitStatus PVOID }
{ PebBaseAddress void* } { PebBaseAddress PVOID }
{ Reserved2 PVOID[2] } { AffinityMask PVOID }
{ BasePriority PVOID }
{ UniqueProcessId ULONG_PTR } { UniqueProcessId ULONG_PTR }
{ Reserved3 PVOID } ; { InheritedFromUniqueProcessId PVOID } ;
ENUM: PROCESSINFOCLASS ENUM: PROCESSINFOCLASS
{ ProcessBasicInformation 0 } { ProcessBasicInformation 0 }