ntdll

package module
v0.0.0-...-6934577 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Apr 18, 2024 License: BSD-2-Clause Imports: 5 Imported by: 8

README

Go interface to NTDLL functions

GoDoc Go Report Card

This package makes selected NTDLL functions directly available in Go programs. At the moment, types and functions for accessing kernel objects and the Registry are included. The goal is to, eventually, cover all available functions.

Note

Please do not consider this code, particularly the autogenerated code, as stable. Identifiers names may still be subject to change.

Basic functions, types

NTDLL functions usually return an NTSTATUS, this is mapped into an NtStatus type (underlying kind: uint32). Strings are usually passed around as UNICODE_STRING, there is a type UnicodeStringType for that.

Variable-Sized Arrays

Structs that contain fields that are arrays with one (or ANYSIZE_ARRAY) elements. For those fields, getters that return a slice and setters that fill the array from a slice are generated.

Example:

typedef struct _FILE_NAME_INFORMATION {
  ULONG FileNameLength;
  WCHAR FileName[1];
} FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;

is turned into

type FileNameInformationT struct {
	FileNameLength uint32
	FileName       [1]uint16
}

and associated methods

func (t *FileNameInformationT) FileNameSlice(size int) []uint16
func (t *FileNameInformationT) SetFileNameSlice(s []uint16)

Extending

Function signatures and structure definitions are generated from header file snippets as found in the MSDN. The transformation code can be found in mkcode.go, it probably has bugs and does not cover all cases.

To add more structures or function stubs or enumeration types, just find the appropriate definition on MSDN and copy them into block comments, prefixed by type:, func:, or enum:, respectively. go generate can then be used to regenerate the *_generated.go files containing structure definitions and the glue code around golang.org/x/sys/windows.

License

Copyright (C) 2016-2022 Hilko Bengen bengen@hilluzination.de

All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  • Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

  • Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Documentation

Index

Constants

View Source 
const (
	FILE_SUPERSEDE           FileAttributes = 0x00000000
	FILE_OPEN                               = 0x00000001
	FILE_CREATE                             = 0x00000002
	FILE_OPEN_IF                            = 0x00000003
	FILE_OVERWRITE                          = 0x00000004
	FILE_OVERWRITE_IF                       = 0x00000005
	FILE_MAXIMUM_DISPOSITION                = 0x00000005

	FILE_DIRECTORY_FILE            = 0x00000001
	FILE_WRITE_THROUGH             = 0x00000002
	FILE_SEQUENTIAL_ONLY           = 0x00000004
	FILE_NO_INTERMEDIATE_BUFFERING = 0x00000008

	FILE_SYNCHRONOUS_IO_ALERT    = 0x00000010
	FILE_SYNCHRONOUS_IO_NONALERT = 0x00000020
	FILE_NON_DIRECTORY_FILE      = 0x00000040
	FILE_CREATE_TREE_CONNECTION  = 0x00000080

	FILE_COMPLETE_IF_OPLOCKED = 0x00000100
	FILE_NO_EA_KNOWLEDGE      = 0x00000200
	FILE_OPEN_FOR_RECOVERY    = 0x00000400
	FILE_RANDOM_ACCESS        = 0x00000800

	FILE_DELETE_ON_CLOSE        = 0x00001000
	FILE_OPEN_BY_FILE_ID        = 0x00002000
	FILE_OPEN_FOR_BACKUP_INTENT = 0x00004000
	FILE_NO_COMPRESSION         = 0x00008000
	// #if (PHNT_VERSION >= PHNT_WIN7)
	FILE_OPEN_REQUIRING_OPLOCK = 0x00010000
	FILE_DISALLOW_EXCLUSIVE    = 0x00020000
	// #endif
	// #if (PHNT_VERSION >= PHNT_WIN8)
	FILE_SESSION_AWARE = 0x00040000

	FILE_RESERVE_OPFILTER          = 0x00100000
	FILE_OPEN_REPARSE_POINT        = 0x00200000
	FILE_OPEN_NO_RECALL            = 0x00400000
	FILE_OPEN_FOR_FREE_SPACE_QUERY = 0x00800000

	FILE_COPY_STRUCTURED_STORAGE = 0x00000041
	FILE_STRUCTURED_STORAGE      = 0x00000441

	FILE_SUPERSEDED     = 0x00000000
	FILE_OPENED         = 0x00000001
	FILE_CREATED        = 0x00000002
	FILE_OVERWRITTEN    = 0x00000003
	FILE_EXISTS         = 0x00000004
	FILE_DOES_NOT_EXIST = 0x00000005

	FILE_WRITE_TO_END_OF_FILE      = 0xffffffff
	FILE_USE_FILE_POINTER_POSITION = 0xfffffffe

	FILE_BYTE_ALIGNMENT     = 0x00000000
	FILE_WORD_ALIGNMENT     = 0x00000001
	FILE_LONG_ALIGNMENT     = 0x00000003
	FILE_QUAD_ALIGNMENT     = 0x00000007
	FILE_OCTA_ALIGNMENT     = 0x0000000f
	FILE_32_BYTE_ALIGNMENT  = 0x0000001f
	FILE_64_BYTE_ALIGNMENT  = 0x0000003f
	FILE_128_BYTE_ALIGNMENT = 0x0000007f
	FILE_256_BYTE_ALIGNMENT = 0x000000ff
	FILE_512_BYTE_ALIGNMENT = 0x000001ff

	MAXIMUM_FILENAME_LENGTH = 256

	FILE_NEED_EA = 0x00000080

	FILE_EA_TYPE_BINARY     = 0xfffe
	FILE_EA_TYPE_ASCII      = 0xfffd
	FILE_EA_TYPE_BITMAP     = 0xfffb
	FILE_EA_TYPE_METAFILE   = 0xfffa
	FILE_EA_TYPE_ICON       = 0xfff9
	FILE_EA_TYPE_EA         = 0xffee
	FILE_EA_TYPE_MVMT       = 0xffdf
	FILE_EA_TYPE_MVST       = 0xffde
	FILE_EA_TYPE_ASN1       = 0xffdd
	FILE_EA_TYPE_FAMILY_IDS = 0xff01

	FILE_REMOVABLE_MEDIA                     = 0x00000001
	FILE_READ_ONLY_DEVICE                    = 0x00000002
	FILE_FLOPPY_DISKETTE                     = 0x00000004
	FILE_WRITE_ONCE_MEDIA                    = 0x00000008
	FILE_REMOTE_DEVICE                       = 0x00000010
	FILE_DEVICE_IS_MOUNTED                   = 0x00000020
	FILE_VIRTUAL_VOLUME                      = 0x00000040
	FILE_AUTOGENERATED_DEVICE_NAME           = 0x00000080
	FILE_DEVICE_SECURE_OPEN                  = 0x00000100
	FILE_CHARACTERISTIC_PNP_DEVICE           = 0x00000800
	FILE_CHARACTERISTIC_TS_DEVICE            = 0x00001000
	FILE_CHARACTERISTIC_WEBDAV_DEVICE        = 0x00002000
	FILE_CHARACTERISTIC_CSV                  = 0x00010000
	FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL = 0x00020000
	FILE_PORTABLE_DEVICE                     = 0x00040000

	// NamedPipeType for NtCreateNamedPipeFile
	FILE_PIPE_BYTE_STREAM_TYPE      = 0x00000000
	FILE_PIPE_MESSAGE_TYPE          = 0x00000001
	FILE_PIPE_ACCEPT_REMOTE_CLIENTS = 0x00000000
	FILE_PIPE_REJECT_REMOTE_CLIENTS = 0x00000002
	FILE_PIPE_TYPE_VALID_MASK       = 0x00000003

	// CompletionMode for NtCreateNamedPipeFile
	FILE_PIPE_QUEUE_OPERATION    = 0x00000000
	FILE_PIPE_COMPLETE_OPERATION = 0x00000001

	// ReadMode for NtCreateNamedPipeFile
	FILE_PIPE_BYTE_STREAM_MODE = 0x00000000
	FILE_PIPE_MESSAGE_MODE     = 0x00000001

	// NamedPipeConfiguration for NtQueryInformationFile
	FILE_PIPE_INBOUND     = 0x00000000
	FILE_PIPE_OUTBOUND    = 0x00000001
	FILE_PIPE_FULL_DUPLEX = 0x00000002

	// NamedPipeState for NtQueryInformationFile
	FILE_PIPE_DISCONNECTED_STATE = 0x00000001
	FILE_PIPE_LISTENING_STATE    = 0x00000002
	FILE_PIPE_CONNECTED_STATE    = 0x00000003
	FILE_PIPE_CLOSING_STATE      = 0x00000004

	// NamedPipeEnd for NtQueryInformationFile
	FILE_PIPE_CLIENT_END = 0x00000000
	FILE_PIPE_SERVER_END = 0x00000001

	FILE_LIST_DIRECTORY       = 0x00000001
	FILE_READ_DATA            = 0x00000001
	FILE_ADD_FILE             = 0x00000002
	FILE_WRITE_DATA           = 0x00000002
	FILE_ADD_SUBDIRECTORY     = 0x00000004
	FILE_APPEND_DATA          = 0x00000004
	FILE_CREATE_PIPE_INSTANCE = 0x00000004
	FILE_READ_EA              = 0x00000008
	FILE_READ_PROPERTIES      = 0x00000008
	FILE_WRITE_EA             = 0x00000010
	FILE_WRITE_PROPERTIES     = 0x00000010
	FILE_EXECUTE              = 0x00000020
	FILE_TRAVERSE             = 0x00000020
	FILE_DELETE_CHILD         = 0x00000040
	FILE_READ_ATTRIBUTES      = 0x00000080
	FILE_WRITE_ATTRIBUTES     = 0x00000100

	FILE_ALL_ACCESS      = STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x01FF
	FILE_GENERIC_EXECUTE = STANDARD_RIGHTS_EXECUTE | FILE_READ_ATTRIBUTES | FILE_EXECUTE | SYNCHRONIZE
	FILE_GENERIC_READ    = STANDARD_RIGHTS_READ | FILE_READ_DATA | FILE_READ_ATTRIBUTES | FILE_READ_EA | SYNCHRONIZE
	FILE_GENERIC_WRITE   = STANDARD_RIGHTS_WRITE | FILE_WRITE_DATA | FILE_WRITE_ATTRIBUTES | FILE_WRITE_EA | FILE_APPEND_DATA | SYNCHRONIZE

	FILE_SHARE_READ        = 0x00000001
	FILE_SHARE_WRITE       = 0x00000002
	FILE_SHARE_DELETE      = 0x00000004
	FILE_SHARE_VALID_FLAGS = 0x00000007
)
View Source 
const (
	FileDirectoryInformation                FileInformationClass = 1
	FileFullDirectoryInformation                                 = 2
	FileBothDirectoryInformation                                 = 3
	FileBasicInformation                                         = 4
	FileStandardInformation                                      = 5
	FileInternalInformation                                      = 6
	FileEaInformation                                            = 7
	FileAccessInformation                                        = 8
	FileNameInformation                                          = 9
	FileRenameInformation                                        = 10
	FileLinkInformation                                          = 11
	FileNamesInformation                                         = 12
	FileDispositionInformation                                   = 13
	FilePositionInformation                                      = 14
	FileFullEaInformation                                        = 15
	FileModeInformation                                          = 16
	FileAlignmentInformation                                     = 17
	FileAllInformation                                           = 18
	FileAllocationInformation                                    = 19
	FileEndOfFileInformation                                     = 20
	FileAlternateNameInformation                                 = 21
	FileStreamInformation                                        = 22
	FilePipeInformation                                          = 23
	FilePipeLocalInformation                                     = 24
	FilePipeRemoteInformation                                    = 25
	FileMailslotQueryInformation                                 = 26
	FileMailslotSetInformation                                   = 27
	FileCompressionInformation                                   = 28
	FileObjectIdInformation                                      = 29
	FileCompletionInformation                                    = 30
	FileMoveClusterInformation                                   = 31
	FileQuotaInformation                                         = 32
	FileReparsePointInformation                                  = 33
	FileNetworkOpenInformation                                   = 34
	FileAttributeTagInformation                                  = 35
	FileTrackingInformation                                      = 36
	FileIdBothDirectoryInformation                               = 37
	FileIdFullDirectoryInformation                               = 38
	FileValidDataLengthInformation                               = 39
	FileShortNameInformation                                     = 40
	FileIoCompletionNotificationInformation                      = 41
	FileIoStatusBlockRangeInformation                            = 42
	FileIoPriorityHintInformation                                = 43
	FileSfioReserveInformation                                   = 44
	FileSfioVolumeInformation                                    = 45
	FileHardLinkInformation                                      = 46
	FileProcessIdsUsingFileInformation                           = 47
	FileNormalizedNameInformation                                = 48
	FileNetworkPhysicalNameInformation                           = 49
	FileIdGlobalTxDirectoryInformation                           = 50
	FileIsRemoteDeviceInformation                                = 51
	FileUnusedInformation                                        = 52
	FileNumaNodeInformation                                      = 53
	FileStandardLinkInformation                                  = 54
	FileRemoteProtocolInformation                                = 55
	FileRenameInformationBypassAccessCheck                       = 56
	FileLinkInformationBypassAccessCheck                         = 57
	FileVolumeNameInformation                                    = 58
	FileIdInformation                                            = 59
	FileIdExtdDirectoryInformation                               = 60
	FileReplaceCompletionInformation                             = 61
	FileHardLinkFullIdInformation                                = 62
	FileIdExtdBothDirectoryInformation                           = 63
	FileMaximumInformation                                       = 64
)
View Source 
const (
	FileFsVolumeInformation       FsInformationClass = 1
	FileFsLabelInformation                           = 2
	FileFsSizeInformation                            = 3
	FileFsDeviceInformation                          = 4
	FileFsAttributeInformation                       = 5
	FileFsControlInformation                         = 6
	FileFsFullSizeInformation                        = 7
	FileFsObjectIdInformation                        = 8
	FileFsDriverPathInformation                      = 9
	FileFsVolumeFlagsInformation                     = 10
	FileFsSectorSizeInformation                      = 11
	FileFsDataCopyInformation                        = 12
	FileFsMetadataSizeInformation                    = 13
	FileFsFullSizeInformationEx                      = 14
	FileFsMaximumInformation                         = 15
)
View Source 
const (
	IoPriorityVeryLow  IoPriorityHint = 0
	IoPriorityLow                     = 1
	IoPriorityNormal                  = 2
	IoPriorityHigh                    = 3
	IoPriorityCritical                = 4
	MaxIoPriorityTypes                = 5
)
View Source 
const (
	MemoryBasicInformation              MemoryInformationClass = 0
	MemoryWorkingSetInformation                                = 1
	MemoryMappedFilenameInformation                            = 2
	MemoryRegionInformation                                    = 3
	MemoryWorkingSetExInformation                              = 4
	MemorySharedCommitInformation                              = 5
	MemoryImageInformation                                     = 6
	MemoryRegionInformationEx                                  = 7
	MemoryPrivilegedBasicInformation                           = 8
	MemoryEnclaveImageInformation                              = 9
	MemoryBasicInformationCapped                               = 10
	MemoryPhysicalContiguityInformation                        = 11
)
View Source 
const (
	// The operation completed successfully.
	STATUS_SUCCESS NtStatus = 0x00000000
	// The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state.
	STATUS_WAIT_0 = 0x00000000
	// The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state.
	STATUS_WAIT_1 = 0x00000001
	// The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state.
	STATUS_WAIT_2 = 0x00000002
	// The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state.
	STATUS_WAIT_3 = 0x00000003
	// The caller specified WaitAny for WaitType and one of the dispatcher objects in the Object array has been set to the signaled state.
	STATUS_WAIT_63 = 0x0000003F
	// The caller attempted to wait for a mutex that has been abandoned.
	STATUS_ABANDONED = 0x00000080
	// The caller attempted to wait for a mutex that has been abandoned.
	STATUS_ABANDONED_WAIT_0 = 0x00000080
	// The caller attempted to wait for a mutex that has been abandoned.
	STATUS_ABANDONED_WAIT_63 = 0x000000BF
	// A user-mode APC was delivered before the given Interval expired.
	STATUS_USER_APC = 0x000000C0
	// The delay completed because the thread was alerted.
	STATUS_ALERTED = 0x00000101
	// The given Timeout interval expired.
	STATUS_TIMEOUT = 0x00000102
	// The operation that was requested is pending completion.
	STATUS_PENDING = 0x00000103
	// A reparse should be performed by the Object Manager because the name of the file resulted in a symbolic link.
	STATUS_REPARSE = 0x00000104
	// Returned by enumeration APIs to indicate more information is available to successive calls.
	STATUS_MORE_ENTRIES = 0x00000105
	// Indicates not all privileges or groups that are referenced are assigned to the caller. This allows, for example, all privileges to be disabled without having to know exactly which privileges are assigned.
	STATUS_NOT_ALL_ASSIGNED = 0x00000106
	// Some of the information to be translated has not been translated.
	STATUS_SOME_NOT_MAPPED = 0x00000107
	// An open/create operation completed while an opportunistic lock (oplock) break is underway.
	STATUS_OPLOCK_BREAK_IN_PROGRESS = 0x00000108
	// A new volume has been mounted by a file system.
	STATUS_VOLUME_MOUNTED = 0x00000109
	// This success level status indicates that the transaction state already exists for the registry subtree but that a transaction commit was previously aborted. The commit has now been completed.
	STATUS_RXACT_COMMITTED = 0x0000010A
	// Indicates that a notify change request has been completed due to closing the handle that made the notify change request.
	STATUS_NOTIFY_CLEANUP = 0x0000010B
	// Indicates that a notify change request is being completed and that the information is not being returned in the caller's buffer. The caller now needs to enumerate the files to find the changes.
	STATUS_NOTIFY_ENUM_DIR = 0x0000010C
	// {No Quotas} No system quota limits are specifically set for this account.
	STATUS_NO_QUOTAS_FOR_ACCOUNT = 0x0000010D
	// {Connect Failure on Primary Transport} An attempt was made to connect to the remote server %hs on the primary transport, but the connection failed. The computer WAS able to connect on a secondary transport.
	STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED = 0x0000010E
	// The page fault was a transition fault.
	STATUS_PAGE_FAULT_TRANSITION = 0x00000110
	// The page fault was a demand zero fault.
	STATUS_PAGE_FAULT_DEMAND_ZERO = 0x00000111
	// The page fault was a demand zero fault.
	STATUS_PAGE_FAULT_COPY_ON_WRITE = 0x00000112
	// The page fault was a demand zero fault.
	STATUS_PAGE_FAULT_GUARD_PAGE = 0x00000113
	// The page fault was satisfied by reading from a secondary storage device.
	STATUS_PAGE_FAULT_PAGING_FILE = 0x00000114
	// The cached page was locked during operation.
	STATUS_CACHE_PAGE_LOCKED = 0x00000115
	// The crash dump exists in a paging file.
	STATUS_CRASH_DUMP = 0x00000116
	// The specified buffer contains all zeros.
	STATUS_BUFFER_ALL_ZEROS = 0x00000117
	// A reparse should be performed by the Object Manager because the name of the file resulted in a symbolic link.
	STATUS_REPARSE_OBJECT = 0x00000118
	// The device has succeeded a query-stop and its resource requirements have changed.
	STATUS_RESOURCE_REQUIREMENTS_CHANGED = 0x00000119
	// The translator has translated these resources into the global space and no additional translations should be performed.
	STATUS_TRANSLATION_COMPLETE = 0x00000120
	// The directory service evaluated group memberships locally, because it was unable to contact a global catalog server.
	STATUS_DS_MEMBERSHIP_EVALUATED_LOCALLY = 0x00000121
	// A process being terminated has no threads to terminate.
	STATUS_NOTHING_TO_TERMINATE = 0x00000122
	// The specified process is not part of a job.
	STATUS_PROCESS_NOT_IN_JOB = 0x00000123
	// The specified process is part of a job.
	STATUS_PROCESS_IN_JOB = 0x00000124
	// {Volume Shadow Copy Service} The system is now ready for hibernation.
	STATUS_VOLSNAP_HIBERNATE_READY = 0x00000125
	// A file system or file system filter driver has successfully completed an FsFilter operation.
	STATUS_FSFILTER_OP_COMPLETED_SUCCESSFULLY = 0x00000126
	// The specified interrupt vector was already connected.
	STATUS_INTERRUPT_VECTOR_ALREADY_CONNECTED = 0x00000127
	// The specified interrupt vector is still connected.
	STATUS_INTERRUPT_STILL_CONNECTED = 0x00000128
	// The current process is a cloned process.
	STATUS_PROCESS_CLONED = 0x00000129
	// The file was locked and all users of the file can only read.
	STATUS_FILE_LOCKED_WITH_ONLY_READERS = 0x0000012A
	// The file was locked and at least one user of the file can write.
	STATUS_FILE_LOCKED_WITH_WRITERS = 0x0000012B
	// The specified ResourceManager made no changes or updates to the resource under this transaction.
	STATUS_RESOURCEMANAGER_READ_ONLY = 0x00000202
	// An operation is blocked and waiting for an oplock.
	STATUS_WAIT_FOR_OPLOCK = 0x00000367
	// Debugger handled the exception.
	DBG_EXCEPTION_HANDLED = 0x00010001
	// The debugger continued.
	DBG_CONTINUE = 0x00010002
	// The IO was completed by a filter.
	STATUS_FLT_IO_COMPLETE = 0x001C0001
	// {Object Exists} An attempt was made to create an object but the object name already exists.
	STATUS_OBJECT_NAME_EXISTS = 0x40000000
	// {Thread Suspended} A thread termination occurred while the thread was suspended. The thread resumed, and termination proceeded.
	STATUS_THREAD_WAS_SUSPENDED = 0x40000001
	// {Working Set Range Error} An attempt was made to set the working set minimum or maximum to values that are outside the allowable range.
	STATUS_WORKING_SET_LIMIT_RANGE = 0x40000002
	// {Image Relocated} An image file could not be mapped at the address that is specified in the image file. Local fixes must be performed on this image.
	STATUS_IMAGE_NOT_AT_BASE = 0x40000003
	// This informational level status indicates that a specified registry subtree transaction state did not yet exist and had to be created.
	STATUS_RXACT_STATE_CREATED = 0x40000004
	// {Segment Load} A virtual DOS machine (VDM) is loading, unloading, or moving an MS-DOS or Win16 program segment image. An exception is raised so that a debugger can load, unload, or track symbols and breakpoints within these 16-bit segments.
	STATUS_SEGMENT_NOTIFICATION = 0x40000005
	// {Local Session Key} A user session key was requested for a local remote procedure call (RPC) connection. The session key that is returned is a constant value and not unique to this connection.
	STATUS_LOCAL_USER_SESSION_KEY = 0x40000006
	// {Invalid Current Directory} The process cannot switch to the startup current directory %hs. Select OK to set the current directory to %hs, or select CANCEL to exit.
	STATUS_BAD_CURRENT_DIRECTORY = 0x40000007
	// {Serial IOCTL Complete} A serial I/O operation was completed by another write to a serial port. (The IOCTL_SERIAL_XOFF_COUNTER reached zero.)
	STATUS_SERIAL_MORE_WRITES = 0x40000008
	// {Registry Recovery} One of the files that contains the system registry data had to be recovered by using a log or alternate copy. The recovery was successful.
	STATUS_REGISTRY_RECOVERED = 0x40000009
	// {Redundant Read} To satisfy a read request, the Windows NT operating system fault-tolerant file system successfully read the requested data from a redundant copy. This was done because the file system encountered a failure on a member of the fault-tolerant volume but was unable to reassign the failing area of the device.
	STATUS_FT_READ_RECOVERY_FROM_BACKUP = 0x4000000A
	// {Redundant Write} To satisfy a write request, the Windows NT fault-tolerant file system successfully wrote a redundant copy of the information. This was done because the file system encountered a failure on a member of the fault-tolerant volume but was unable to reassign the failing area of the device.
	STATUS_FT_WRITE_RECOVERY = 0x4000000B
	// {Serial IOCTL Timeout} A serial I/O operation completed because the time-out period expired. (The IOCTL_SERIAL_XOFF_COUNTER had not reached zero.)
	STATUS_SERIAL_COUNTER_TIMEOUT = 0x4000000C
	// {Password Too Complex} The Windows password is too complex to be converted to a LAN Manager password. The LAN Manager password that returned is a NULL string.
	STATUS_NULL_LM_PASSWORD = 0x4000000D
	// {Machine Type Mismatch} The image file %hs is valid but is for a machine type other than the current machine. Select OK to continue, or CANCEL to fail the DLL load.
	STATUS_IMAGE_MACHINE_TYPE_MISMATCH = 0x4000000E
	// {Partial Data Received} The network transport returned partial data to its client. The remaining data will be sent later.
	STATUS_RECEIVE_PARTIAL = 0x4000000F
	// {Expedited Data Received} The network transport returned data to its client that was marked as expedited by the remote system.
	STATUS_RECEIVE_EXPEDITED = 0x40000010
	// {Partial Expedited Data Received} The network transport returned partial data to its client and this data was marked as expedited by the remote system. The remaining data will be sent later.
	STATUS_RECEIVE_PARTIAL_EXPEDITED = 0x40000011
	// {TDI Event Done} The TDI indication has completed successfully.
	STATUS_EVENT_DONE = 0x40000012
	// {TDI Event Pending} The TDI indication has entered the pending state.
	STATUS_EVENT_PENDING = 0x40000013
	// Checking file system on %wZ.
	STATUS_CHECKING_FILE_SYSTEM = 0x40000014
	// {Fatal Application Exit} %hs
	STATUS_FATAL_APP_EXIT = 0x40000015
	// The specified registry key is referenced by a predefined handle.
	STATUS_PREDEFINED_HANDLE = 0x40000016
	// {Page Unlocked} The page protection of a locked page was changed to 'No Access' and the page was unlocked from memory and from the process.
	STATUS_WAS_UNLOCKED = 0x40000017
	// %hs
	STATUS_SERVICE_NOTIFICATION = 0x40000018
	// {Page Locked} One of the pages to lock was already locked.
	STATUS_WAS_LOCKED = 0x40000019
	// Application popup: %1 : %2
	STATUS_LOG_HARD_ERROR = 0x4000001A
	// A Win32 process already exists.
	STATUS_ALREADY_WIN32 = 0x4000001B
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_UNSIMULATE = 0x4000001C
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_CONTINUE = 0x4000001D
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_SINGLE_STEP = 0x4000001E
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_BREAKPOINT = 0x4000001F
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_EXCEPTION_CONTINUE = 0x40000020
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_EXCEPTION_LASTCHANCE = 0x40000021
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_EXCEPTION_CHAIN = 0x40000022
	// {Machine Type Mismatch} The image file %hs is valid but is for a machine type other than the current machine.
	STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE = 0x40000023
	// A yield execution was performed and no thread was available to run.
	STATUS_NO_YIELD_PERFORMED = 0x40000024
	// The resume flag to a timer API was ignored.
	STATUS_TIMER_RESUME_IGNORED = 0x40000025
	// The arbiter has deferred arbitration of these resources to its parent.
	STATUS_ARBITRATION_UNHANDLED = 0x40000026
	// The device has detected a CardBus card in its slot.
	STATUS_CARDBUS_NOT_SUPPORTED = 0x40000027
	// An exception status code that is used by the Win32 x86 emulation subsystem.
	STATUS_WX86_CREATEWX86TIB = 0x40000028
	// The CPUs in this multiprocessor system are not all the same revision level. To use all processors, the operating system restricts itself to the features of the least capable processor in the system. If problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported.
	STATUS_MP_PROCESSOR_MISMATCH = 0x40000029
	// The system was put into hibernation.
	STATUS_HIBERNATED = 0x4000002A
	// The system was resumed from hibernation.
	STATUS_RESUME_HIBERNATION = 0x4000002B
	// Windows has detected that the system firmware (BIOS) was updated [previous firmware date = %2, current firmware date %3].
	STATUS_FIRMWARE_UPDATED = 0x4000002C
	// A device driver is leaking locked I/O pages and is causing system degradation. The system has automatically enabled the tracking code to try and catch the culprit.
	STATUS_DRIVERS_LEAKING_LOCKED_PAGES = 0x4000002D
	// The ALPC message being canceled has already been retrieved from the queue on the other side.
	STATUS_MESSAGE_RETRIEVED = 0x4000002E
	// The system power state is transitioning from %2 to %3.
	STATUS_SYSTEM_POWERSTATE_TRANSITION = 0x4000002F
	// The receive operation was successful. Check the ALPC completion list for the received message.
	STATUS_ALPC_CHECK_COMPLETION_LIST = 0x40000030
	// The system power state is transitioning from %2 to %3 but could enter %4.
	STATUS_SYSTEM_POWERSTATE_COMPLEX_TRANSITION = 0x40000031
	// Access to %1 is monitored by policy rule %2.
	STATUS_ACCESS_AUDIT_BY_POLICY = 0x40000032
	// A valid hibernation file has been invalidated and should be abandoned.
	STATUS_ABANDON_HIBERFILE = 0x40000033
	// Business rule scripts are disabled for the calling application.
	STATUS_BIZRULES_NOT_ENABLED = 0x40000034
	// The system has awoken.
	STATUS_WAKE_SYSTEM = 0x40000294
	// The directory service is shutting down.
	STATUS_DS_SHUTTING_DOWN = 0x40000370
	// Debugger will reply later.
	DBG_REPLY_LATER = 0x40010001
	// Debugger cannot provide a handle.
	DBG_UNABLE_TO_PROVIDE_HANDLE = 0x40010002
	// Debugger terminated the thread.
	DBG_TERMINATE_THREAD = 0x40010003
	// Debugger terminated the process.
	DBG_TERMINATE_PROCESS = 0x40010004
	// Debugger obtained control of C.
	DBG_CONTROL_C = 0x40010005
	// Debugger printed an exception on control C.
	DBG_PRINTEXCEPTION_C = 0x40010006
	// Debugger received a RIP exception.
	DBG_RIPEXCEPTION = 0x40010007
	// Debugger received a control break.
	DBG_CONTROL_BREAK = 0x40010008
	// Debugger command communication exception.
	DBG_COMMAND_EXCEPTION = 0x40010009
	// A UUID that is valid only on this computer has been allocated.
	RPC_NT_UUID_LOCAL_ONLY = 0x40020056
	// Some data remains to be sent in the request buffer.
	RPC_NT_SEND_INCOMPLETE = 0x400200AF
	// The Client Drive Mapping Service has connected on Terminal Connection.
	STATUS_CTX_CDM_CONNECT = 0x400A0004
	// The Client Drive Mapping Service has disconnected on Terminal Connection.
	STATUS_CTX_CDM_DISCONNECT = 0x400A0005
	// A kernel mode component is releasing a reference on an activation context.
	STATUS_SXS_RELEASE_ACTIVATION_CONTEXT = 0x4015000D
	// The transactional resource manager is already consistent. Recovery is not needed.
	STATUS_RECOVERY_NOT_NEEDED = 0x40190034
	// The transactional resource manager has already been started.
	STATUS_RM_ALREADY_STARTED = 0x40190035
	// The log service encountered a log stream with no restart area.
	STATUS_LOG_NO_RESTART = 0x401A000C
	// {Display Driver Recovered From Failure} The %hs display driver has detected a failure and recovered from it. Some graphical operations might have failed. The next time you restart the machine, a dialog box appears, giving you an opportunity to upload data about this failure to Microsoft.
	STATUS_VIDEO_DRIVER_DEBUG_REPORT_REQUEST = 0x401B00EC
	// The specified buffer is not big enough to contain the entire requested dataset. Partial data is populated up to the size of the buffer.The caller needs to provide a buffer of the size as specified in the partially populated buffer's content (interface specific).
	STATUS_GRAPHICS_PARTIAL_DATA_POPULATED = 0x401E000A
	// The kernel driver detected a version mismatch between it and the user mode driver.
	STATUS_GRAPHICS_DRIVER_MISMATCH = 0x401E0117
	// No mode is pinned on the specified VidPN source/target.
	STATUS_GRAPHICS_MODE_NOT_PINNED = 0x401E0307
	// The specified mode set does not specify a preference for one of its modes.
	STATUS_GRAPHICS_NO_PREFERRED_MODE = 0x401E031E
	// The specified dataset (for example, mode set, frequency range set, descriptor set, or topology) is empty.
	STATUS_GRAPHICS_DATASET_IS_EMPTY = 0x401E034B
	// The specified dataset (for example, mode set, frequency range set, descriptor set, or topology) does not contain any more elements.
	STATUS_GRAPHICS_NO_MORE_ELEMENTS_IN_DATASET = 0x401E034C
	// The specified content transformation is not pinned on the specified VidPN present path.
	STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_PINNED = 0x401E0351
	// The child device presence was not reliably detected.
	STATUS_GRAPHICS_UNKNOWN_CHILD_STATUS = 0x401E042F
	// Starting the lead adapter in a linked configuration has been temporarily deferred.
	STATUS_GRAPHICS_LEADLINK_START_DEFERRED = 0x401E0437
	// The display adapter is being polled for children too frequently at the same polling level.
	STATUS_GRAPHICS_POLLING_TOO_FREQUENTLY = 0x401E0439
	// Starting the adapter has been temporarily deferred.
	STATUS_GRAPHICS_START_DEFERRED = 0x401E043A
	// The request will be completed later by an NDIS status indication.
	STATUS_NDIS_INDICATION_REQUIRED = 0x40230001
	// {EXCEPTION} Guard Page Exception A page of memory that marks the end of a data structure, such as a stack or an array, has been accessed.
	STATUS_GUARD_PAGE_VIOLATION = 0x80000001
	// {EXCEPTION} Alignment Fault A data type misalignment was detected in a load or store instruction.
	STATUS_DATATYPE_MISALIGNMENT = 0x80000002
	// {EXCEPTION} Breakpoint A breakpoint has been reached.
	STATUS_BREAKPOINT = 0x80000003
	// {EXCEPTION} Single Step A single step or trace operation has just been completed.
	STATUS_SINGLE_STEP = 0x80000004
	// {Buffer Overflow} The data was too large to fit into the specified buffer.
	STATUS_BUFFER_OVERFLOW = 0x80000005
	// {No More Files} No more files were found which match the file specification.
	STATUS_NO_MORE_FILES = 0x80000006
	// {Kernel Debugger Awakened} The system debugger was awakened by an interrupt.
	STATUS_WAKE_SYSTEM_DEBUGGER = 0x80000007
	// {Handles Closed} Handles to objects have been automatically closed because of the requested operation.
	STATUS_HANDLES_CLOSED = 0x8000000A
	// {Non-Inheritable ACL} An access control list (ACL) contains no components that can be inherited.
	STATUS_NO_INHERITANCE = 0x8000000B
	// {GUID Substitution} During the translation of a globally unique identifier (GUID) to a Windows security ID (SID), no administratively defined GUID prefix was found. A substitute prefix was used, which will not compromise system security. However, this might provide a more restrictive access than intended.
	STATUS_GUID_SUBSTITUTION_MADE = 0x8000000C
	// Because of protection conflicts, not all the requested bytes could be copied.
	STATUS_PARTIAL_COPY = 0x8000000D
	// {Out of Paper} The printer is out of paper.
	STATUS_DEVICE_PAPER_EMPTY = 0x8000000E
	// {Device Power Is Off} The printer power has been turned off.
	STATUS_DEVICE_POWERED_OFF = 0x8000000F
	// {Device Offline} The printer has been taken offline.
	STATUS_DEVICE_OFF_LINE = 0x80000010
	// {Device Busy} The device is currently busy.
	STATUS_DEVICE_BUSY = 0x80000011
	// {No More EAs} No more extended attributes (EAs) were found for the file.
	STATUS_NO_MORE_EAS = 0x80000012
	// {Illegal EA} The specified extended attribute (EA) name contains at least one illegal character.
	STATUS_INVALID_EA_NAME = 0x80000013
	// {Inconsistent EA List} The extended attribute (EA) list is inconsistent.
	STATUS_EA_LIST_INCONSISTENT = 0x80000014
	// {Invalid EA Flag} An invalid extended attribute (EA) flag was set.
	STATUS_INVALID_EA_FLAG = 0x80000015
	// {Verifying Disk} The media has changed and a verify operation is in progress; therefore, no reads or writes can be performed to the device, except those that are used in the verify operation.
	STATUS_VERIFY_REQUIRED = 0x80000016
	// {Too Much Information} The specified access control list (ACL) contained more information than was expected.
	STATUS_EXTRANEOUS_INFORMATION = 0x80000017
	// This warning level status indicates that the transaction state already exists for the registry subtree, but that a transaction commit was previously aborted. The commit has NOT been completed but has not been rolled back either; therefore, it can still be committed, if needed.
	STATUS_RXACT_COMMIT_NECESSARY = 0x80000018
	// {No More Entries} No more entries are available from an enumeration operation.
	STATUS_NO_MORE_ENTRIES = 0x8000001A
	// {Filemark Found} A filemark was detected.
	STATUS_FILEMARK_DETECTED = 0x8000001B
	// {Media Changed} The media has changed.
	STATUS_MEDIA_CHANGED = 0x8000001C
	// {I/O Bus Reset} An I/O bus reset was detected.
	STATUS_BUS_RESET = 0x8000001D
	// {End of Media} The end of the media was encountered.
	STATUS_END_OF_MEDIA = 0x8000001E
	// The beginning of a tape or partition has been detected.
	STATUS_BEGINNING_OF_MEDIA = 0x8000001F
	// {Media Changed} The media might have changed.
	STATUS_MEDIA_CHECK = 0x80000020
	// A tape access reached a set mark.
	STATUS_SETMARK_DETECTED = 0x80000021
	// During a tape access, the end of the data written is reached.
	STATUS_NO_DATA_DETECTED = 0x80000022
	// The redirector is in use and cannot be unloaded.
	STATUS_REDIRECTOR_HAS_OPEN_HANDLES = 0x80000023
	// The server is in use and cannot be unloaded.
	STATUS_SERVER_HAS_OPEN_HANDLES = 0x80000024
	// The specified connection has already been disconnected.
	STATUS_ALREADY_DISCONNECTED = 0x80000025
	// A long jump has been executed.
	STATUS_LONGJUMP = 0x80000026
	// A cleaner cartridge is present in the tape library.
	STATUS_CLEANER_CARTRIDGE_INSTALLED = 0x80000027
	// The Plug and Play query operation was not successful.
	STATUS_PLUGPLAY_QUERY_VETOED = 0x80000028
	// A frame consolidation has been executed.
	STATUS_UNWIND_CONSOLIDATE = 0x80000029
	// {Registry Hive Recovered} The registry hive (file): %hs was corrupted and it has been recovered. Some data might have been lost.
	STATUS_REGISTRY_HIVE_RECOVERED = 0x8000002A
	// The application is attempting to run executable code from the module %hs. This might be insecure. An alternative, %hs, is available. Should the application use the secure module %hs?
	STATUS_DLL_MIGHT_BE_INSECURE = 0x8000002B
	// The application is loading executable code from the module %hs. This is secure but might be incompatible with previous releases of the operating system. An alternative, %hs, is available. Should the application use the secure module %hs?
	STATUS_DLL_MIGHT_BE_INCOMPATIBLE = 0x8000002C
	// The create operation stopped after reaching a symbolic link.
	STATUS_STOPPED_ON_SYMLINK = 0x8000002D
	// The device has indicated that cleaning is necessary.
	STATUS_DEVICE_REQUIRES_CLEANING = 0x80000288
	// The device has indicated that its door is open. Further operations require it closed and secured.
	STATUS_DEVICE_DOOR_OPEN = 0x80000289
	// Windows discovered a corruption in the file %hs. This file has now been repaired. Check if any data in the file was lost because of the corruption.
	STATUS_DATA_LOST_REPAIR = 0x80000803
	// Debugger did not handle the exception.
	DBG_EXCEPTION_NOT_HANDLED = 0x80010001
	// The cluster node is already up.
	STATUS_CLUSTER_NODE_ALREADY_UP = 0x80130001
	// The cluster node is already down.
	STATUS_CLUSTER_NODE_ALREADY_DOWN = 0x80130002
	// The cluster network is already online.
	STATUS_CLUSTER_NETWORK_ALREADY_ONLINE = 0x80130003
	// The cluster network is already offline.
	STATUS_CLUSTER_NETWORK_ALREADY_OFFLINE = 0x80130004
	// The cluster node is already a member of the cluster.
	STATUS_CLUSTER_NODE_ALREADY_MEMBER = 0x80130005
	// The log could not be set to the requested size.
	STATUS_COULD_NOT_RESIZE_LOG = 0x80190009
	// There is no transaction metadata on the file.
	STATUS_NO_TXF_METADATA = 0x80190029
	// The file cannot be recovered because there is a handle still open on it.
	STATUS_CANT_RECOVER_WITH_HANDLE_OPEN = 0x80190031
	// Transaction metadata is already present on this file and cannot be superseded.
	STATUS_TXF_METADATA_ALREADY_PRESENT = 0x80190041
	// A transaction scope could not be entered because the scope handler has not been initialized.
	STATUS_TRANSACTION_SCOPE_CALLBACKS_NOT_SET = 0x80190042
	// {Display Driver Stopped Responding and recovered} The %hs display driver has stopped working normally. The recovery had been performed.
	STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD_RECOVERED = 0x801B00EB
	// {Buffer too small} The buffer is too small to contain the entry. No information has been written to the buffer.
	STATUS_FLT_BUFFER_TOO_SMALL = 0x801C0001
	// Volume metadata read or write is incomplete.
	STATUS_FVE_PARTIAL_METADATA = 0x80210001
	// BitLocker encryption keys were ignored because the volume was in a transient state.
	STATUS_FVE_TRANSIENT_STATE = 0x80210002
	// {Operation Failed} The requested operation was unsuccessful.
	STATUS_UNSUCCESSFUL = 0xC0000001
	// {Not Implemented} The requested operation is not implemented.
	STATUS_NOT_IMPLEMENTED = 0xC0000002
	// {Invalid Parameter} The specified information class is not a valid information class for the specified object.
	STATUS_INVALID_INFO_CLASS = 0xC0000003
	// The specified information record length does not match the length that is required for the specified information class.
	STATUS_INFO_LENGTH_MISMATCH = 0xC0000004
	// The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
	STATUS_ACCESS_VIOLATION = 0xC0000005
	// The instruction at 0x%08lx referenced memory at 0x%08lx. The required data was not placed into memory because of an I/O error status of 0x%08lx.
	STATUS_IN_PAGE_ERROR = 0xC0000006
	// The page file quota for the process has been exhausted.
	STATUS_PAGEFILE_QUOTA = 0xC0000007
	// An invalid HANDLE was specified.
	STATUS_INVALID_HANDLE = 0xC0000008
	// An invalid initial stack was specified in a call to NtCreateThread.
	STATUS_BAD_INITIAL_STACK = 0xC0000009
	// An invalid initial start address was specified in a call to NtCreateThread.
	STATUS_BAD_INITIAL_PC = 0xC000000A
	// An invalid client ID was specified.
	STATUS_INVALID_CID = 0xC000000B
	// An attempt was made to cancel or set a timer that has an associated APC and the specified thread is not the thread that originally set the timer with an associated APC routine.
	STATUS_TIMER_NOT_CANCELED = 0xC000000C
	// An invalid parameter was passed to a service or function.
	STATUS_INVALID_PARAMETER = 0xC000000D
	// A device that does not exist was specified.
	STATUS_NO_SUCH_DEVICE = 0xC000000E
	// {File Not Found} The file %hs does not exist.
	STATUS_NO_SUCH_FILE = 0xC000000F
	// The specified request is not a valid operation for the target device.
	STATUS_INVALID_DEVICE_REQUEST = 0xC0000010
	// The end-of-file marker has been reached. There is no valid data in the file beyond this marker.
	STATUS_END_OF_FILE = 0xC0000011
	// {Wrong Volume} The wrong volume is in the drive. Insert volume %hs into drive %hs.
	STATUS_WRONG_VOLUME = 0xC0000012
	// {No Disk} There is no disk in the drive. Insert a disk into drive %hs.
	STATUS_NO_MEDIA_IN_DEVICE = 0xC0000013
	// {Unknown Disk Format} The disk in drive %hs is not formatted properly. Check the disk, and reformat it, if needed.
	STATUS_UNRECOGNIZED_MEDIA = 0xC0000014
	// {Sector Not Found} The specified sector does not exist.
	STATUS_NONEXISTENT_SECTOR = 0xC0000015
	// {Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.
	STATUS_MORE_PROCESSING_REQUIRED = 0xC0000016
	// {Not Enough Quota} Not enough virtual memory or paging file quota is available to complete the specified operation.
	STATUS_NO_MEMORY = 0xC0000017
	// {Conflicting Address Range} The specified address range conflicts with the address space.
	STATUS_CONFLICTING_ADDRESSES = 0xC0000018
	// The address range to unmap is not a mapped view.
	STATUS_NOT_MAPPED_VIEW = 0xC0000019
	// The virtual memory cannot be freed.
	STATUS_UNABLE_TO_FREE_VM = 0xC000001A
	// The specified section cannot be deleted.
	STATUS_UNABLE_TO_DELETE_SECTION = 0xC000001B
	// An invalid system service was specified in a system service call.
	STATUS_INVALID_SYSTEM_SERVICE = 0xC000001C
	// {EXCEPTION} Illegal Instruction An attempt was made to execute an illegal instruction.
	STATUS_ILLEGAL_INSTRUCTION = 0xC000001D
	// {Invalid Lock Sequence} An attempt was made to execute an invalid lock sequence.
	STATUS_INVALID_LOCK_SEQUENCE = 0xC000001E
	// {Invalid Mapping} An attempt was made to create a view for a section that is bigger than the section.
	STATUS_INVALID_VIEW_SIZE = 0xC000001F
	// {Bad File} The attributes of the specified mapping file for a section of memory cannot be read.
	STATUS_INVALID_FILE_FOR_SECTION = 0xC0000020
	// {Already Committed} The specified address range is already committed.
	STATUS_ALREADY_COMMITTED = 0xC0000021
	// {Access Denied} A process has requested access to an object but has not been granted those access rights.
	STATUS_ACCESS_DENIED = 0xC0000022
	// {Buffer Too Small} The buffer is too small to contain the entry. No information has been written to the buffer.
	STATUS_BUFFER_TOO_SMALL = 0xC0000023
	// {Wrong Type} There is a mismatch between the type of object that is required by the requested operation and the type of object that is specified in the request.
	STATUS_OBJECT_TYPE_MISMATCH = 0xC0000024
	// {EXCEPTION} Cannot Continue Windows cannot continue from this exception.
	STATUS_NONCONTINUABLE_EXCEPTION = 0xC0000025
	// An invalid exception disposition was returned by an exception handler.
	STATUS_INVALID_DISPOSITION = 0xC0000026
	// Unwind exception code.
	STATUS_UNWIND = 0xC0000027
	// An invalid or unaligned stack was encountered during an unwind operation.
	STATUS_BAD_STACK = 0xC0000028
	// An invalid unwind target was encountered during an unwind operation.
	STATUS_INVALID_UNWIND_TARGET = 0xC0000029
	// An attempt was made to unlock a page of memory that was not locked.
	STATUS_NOT_LOCKED = 0xC000002A
	// A device parity error on an I/O operation.
	STATUS_PARITY_ERROR = 0xC000002B
	// An attempt was made to decommit uncommitted virtual memory.
	STATUS_UNABLE_TO_DECOMMIT_VM = 0xC000002C
	// An attempt was made to change the attributes on memory that has not been committed.
	STATUS_NOT_COMMITTED = 0xC000002D
	// Invalid object attributes specified to NtCreatePort or invalid port attributes specified to NtConnectPort.
	STATUS_INVALID_PORT_ATTRIBUTES = 0xC000002E
	// The length of the message that was passed to NtRequestPort or NtRequestWaitReplyPort is longer than the maximum message that is allowed by the port.
	STATUS_PORT_MESSAGE_TOO_LONG = 0xC000002F
	// An invalid combination of parameters was specified.
	STATUS_INVALID_PARAMETER_MIX = 0xC0000030
	// An attempt was made to lower a quota limit below the current usage.
	STATUS_INVALID_QUOTA_LOWER = 0xC0000031
	// {Corrupt Disk} The file system structure on the disk is corrupt and unusable. Run the Chkdsk utility on the volume %hs.
	STATUS_DISK_CORRUPT_ERROR = 0xC0000032
	// The object name is invalid.
	STATUS_OBJECT_NAME_INVALID = 0xC0000033
	// The object name is not found.
	STATUS_OBJECT_NAME_NOT_FOUND = 0xC0000034
	// The object name already exists.
	STATUS_OBJECT_NAME_COLLISION = 0xC0000035
	// An attempt was made to send a message to a disconnected communication port.
	STATUS_PORT_DISCONNECTED = 0xC0000037
	// An attempt was made to attach to a device that was already attached to another device.
	STATUS_DEVICE_ALREADY_ATTACHED = 0xC0000038
	// The object path component was not a directory object.
	STATUS_OBJECT_PATH_INVALID = 0xC0000039
	// {Path Not Found} The path %hs does not exist.
	STATUS_OBJECT_PATH_NOT_FOUND = 0xC000003A
	// The object path component was not a directory object.
	STATUS_OBJECT_PATH_SYNTAX_BAD = 0xC000003B
	// {Data Overrun} A data overrun error occurred.
	STATUS_DATA_OVERRUN = 0xC000003C
	// {Data Late} A data late error occurred.
	STATUS_DATA_LATE_ERROR = 0xC000003D
	// {Data Error} An error occurred in reading or writing data.
	STATUS_DATA_ERROR = 0xC000003E
	// {Bad CRC} A cyclic redundancy check (CRC) checksum error occurred.
	STATUS_CRC_ERROR = 0xC000003F
	// {Section Too Large} The specified section is too big to map the file.
	STATUS_SECTION_TOO_BIG = 0xC0000040
	// The NtConnectPort request is refused.
	STATUS_PORT_CONNECTION_REFUSED = 0xC0000041
	// The type of port handle is invalid for the operation that is requested.
	STATUS_INVALID_PORT_HANDLE = 0xC0000042
	// A file cannot be opened because the share access flags are incompatible.
	STATUS_SHARING_VIOLATION = 0xC0000043
	// Insufficient quota exists to complete the operation.
	STATUS_QUOTA_EXCEEDED = 0xC0000044
	// The specified page protection was not valid.
	STATUS_INVALID_PAGE_PROTECTION = 0xC0000045
	// An attempt to release a mutant object was made by a thread that was not the owner of the mutant object.
	STATUS_MUTANT_NOT_OWNED = 0xC0000046
	// An attempt was made to release a semaphore such that its maximum count would have been exceeded.
	STATUS_SEMAPHORE_LIMIT_EXCEEDED = 0xC0000047
	// An attempt was made to set the DebugPort or ExceptionPort of a process, but a port already exists in the process, or an attempt was made to set the CompletionPort of a file but a port was already set in the file, or an attempt was made to set the associated completion port of an ALPC port but it is already set.
	STATUS_PORT_ALREADY_SET = 0xC0000048
	// An attempt was made to query image information on a section that does not map an image.
	STATUS_SECTION_NOT_IMAGE = 0xC0000049
	// An attempt was made to suspend a thread whose suspend count was at its maximum.
	STATUS_SUSPEND_COUNT_EXCEEDED = 0xC000004A
	// An attempt was made to suspend a thread that has begun termination.
	STATUS_THREAD_IS_TERMINATING = 0xC000004B
	// An attempt was made to set the working set limit to an invalid value (for example, the minimum greater than maximum).
	STATUS_BAD_WORKING_SET_LIMIT = 0xC000004C
	// A section was created to map a file that is not compatible with an already existing section that maps the same file.
	STATUS_INCOMPATIBLE_FILE_MAP = 0xC000004D
	// A view to a section specifies a protection that is incompatible with the protection of the initial view.
	STATUS_SECTION_PROTECTION = 0xC000004E
	// An operation involving EAs failed because the file system does not support EAs.
	STATUS_EAS_NOT_SUPPORTED = 0xC000004F
	// An EA operation failed because the EA set is too large.
	STATUS_EA_TOO_LARGE = 0xC0000050
	// An EA operation failed because the name or EA index is invalid.
	STATUS_NONEXISTENT_EA_ENTRY = 0xC0000051
	// The file for which EAs were requested has no EAs.
	STATUS_NO_EAS_ON_FILE = 0xC0000052
	// The EA is corrupt and cannot be read.
	STATUS_EA_CORRUPT_ERROR = 0xC0000053
	// A requested read/write cannot be granted due to a conflicting file lock.
	STATUS_FILE_LOCK_CONFLICT = 0xC0000054
	// A requested file lock cannot be granted due to other existing locks.
	STATUS_LOCK_NOT_GRANTED = 0xC0000055
	// A non-close operation has been requested of a file object that has a delete pending.
	STATUS_DELETE_PENDING = 0xC0000056
	// An attempt was made to set the control attribute on a file. This attribute is not supported in the destination file system.
	STATUS_CTL_FILE_NOT_SUPPORTED = 0xC0000057
	// Indicates a revision number that was encountered or specified is not one that is known by the service. It might be a more recent revision than the service is aware of.
	STATUS_UNKNOWN_REVISION = 0xC0000058
	// Indicates that two revision levels are incompatible.
	STATUS_REVISION_MISMATCH = 0xC0000059
	// Indicates a particular security ID cannot be assigned as the owner of an object.
	STATUS_INVALID_OWNER = 0xC000005A
	// Indicates a particular security ID cannot be assigned as the primary group of an object.
	STATUS_INVALID_PRIMARY_GROUP = 0xC000005B
	// An attempt has been made to operate on an impersonation token by a thread that is not currently impersonating a client.
	STATUS_NO_IMPERSONATION_TOKEN = 0xC000005C
	// A mandatory group cannot be disabled.
	STATUS_CANT_DISABLE_MANDATORY = 0xC000005D
	// No logon servers are currently available to service the logon request.
	STATUS_NO_LOGON_SERVERS = 0xC000005E
	// A specified logon session does not exist. It might already have been terminated.
	STATUS_NO_SUCH_LOGON_SESSION = 0xC000005F
	// A specified privilege does not exist.
	STATUS_NO_SUCH_PRIVILEGE = 0xC0000060
	// A required privilege is not held by the client.
	STATUS_PRIVILEGE_NOT_HELD = 0xC0000061
	// The name provided is not a properly formed account name.
	STATUS_INVALID_ACCOUNT_NAME = 0xC0000062
	// The specified account already exists.
	STATUS_USER_EXISTS = 0xC0000063
	// The specified account does not exist.
	STATUS_NO_SUCH_USER = 0xC0000064
	// The specified group already exists.
	STATUS_GROUP_EXISTS = 0xC0000065
	// The specified group does not exist.
	STATUS_NO_SUCH_GROUP = 0xC0000066
	// The specified user account is already in the specified group account. Also used to indicate a group cannot be deleted because it contains a member.
	STATUS_MEMBER_IN_GROUP = 0xC0000067
	// The specified user account is not a member of the specified group account.
	STATUS_MEMBER_NOT_IN_GROUP = 0xC0000068
	// Indicates the requested operation would disable or delete the last remaining administration account. This is not allowed to prevent creating a situation in which the system cannot be administrated.
	STATUS_LAST_ADMIN = 0xC0000069
	// When trying to update a password, this return status indicates that the value provided as the current password is not correct.
	STATUS_WRONG_PASSWORD = 0xC000006A
	// When trying to update a password, this return status indicates that the value provided for the new password contains values that are not allowed in passwords.
	STATUS_ILL_FORMED_PASSWORD = 0xC000006B
	// When trying to update a password, this status indicates that some password update rule has been violated. For example, the password might not meet length criteria.
	STATUS_PASSWORD_RESTRICTION = 0xC000006C
	// The attempted logon is invalid. This is either due to a bad username or authentication information.
	STATUS_LOGON_FAILURE = 0xC000006D
	// Indicates a referenced user name and authentication information are valid, but some user account restriction has prevented successful authentication (such as time-of-day restrictions).
	STATUS_ACCOUNT_RESTRICTION = 0xC000006E
	// The user account has time restrictions and cannot be logged onto at this time.
	STATUS_INVALID_LOGON_HOURS = 0xC000006F
	// The user account is restricted so that it cannot be used to log on from the source workstation.
	STATUS_INVALID_WORKSTATION = 0xC0000070
	// The user account password has expired.
	STATUS_PASSWORD_EXPIRED = 0xC0000071
	// The referenced account is currently disabled and cannot be logged on to.
	STATUS_ACCOUNT_DISABLED = 0xC0000072
	// None of the information to be translated has been translated.
	STATUS_NONE_MAPPED = 0xC0000073
	// The number of LUIDs requested cannot be allocated with a single allocation.
	STATUS_TOO_MANY_LUIDS_REQUESTED = 0xC0000074
	// Indicates there are no more LUIDs to allocate.
	STATUS_LUIDS_EXHAUSTED = 0xC0000075
	// Indicates the sub-authority value is invalid for the particular use.
	STATUS_INVALID_SUB_AUTHORITY = 0xC0000076
	// Indicates the ACL structure is not valid.
	STATUS_INVALID_ACL = 0xC0000077
	// Indicates the SID structure is not valid.
	STATUS_INVALID_SID = 0xC0000078
	// Indicates the SECURITY_DESCRIPTOR structure is not valid.
	STATUS_INVALID_SECURITY_DESCR = 0xC0000079
	// Indicates the specified procedure address cannot be found in the DLL.
	STATUS_PROCEDURE_NOT_FOUND = 0xC000007A
	// {Bad Image} %hs is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.
	STATUS_INVALID_IMAGE_FORMAT = 0xC000007B
	// An attempt was made to reference a token that does not exist. This is typically done by referencing the token that is associated with a thread when the thread is not impersonating a client.
	STATUS_NO_TOKEN = 0xC000007C
	// Indicates that an attempt to build either an inherited ACL or ACE was not successful. This can be caused by a number of things. One of the more probable causes is the replacement of a CreatorId with a SID that did not fit into the ACE or ACL.
	STATUS_BAD_INHERITANCE_ACL = 0xC000007D
	// The range specified in NtUnlockFile was not locked.
	STATUS_RANGE_NOT_LOCKED = 0xC000007E
	// An operation failed because the disk was full.
	STATUS_DISK_FULL = 0xC000007F
	// The GUID allocation server is disabled at the moment.
	STATUS_SERVER_DISABLED = 0xC0000080
	// The GUID allocation server is enabled at the moment.
	STATUS_SERVER_NOT_DISABLED = 0xC0000081
	// Too many GUIDs were requested from the allocation server at once.
	STATUS_TOO_MANY_GUIDS_REQUESTED = 0xC0000082
	// The GUIDs could not be allocated because the Authority Agent was exhausted.
	STATUS_GUIDS_EXHAUSTED = 0xC0000083
	// The value provided was an invalid value for an identifier authority.
	STATUS_INVALID_ID_AUTHORITY = 0xC0000084
	// No more authority agent values are available for the particular identifier authority value.
	STATUS_AGENTS_EXHAUSTED = 0xC0000085
	// An invalid volume label has been specified.
	STATUS_INVALID_VOLUME_LABEL = 0xC0000086
	// A mapped section could not be extended.
	STATUS_SECTION_NOT_EXTENDED = 0xC0000087
	// Specified section to flush does not map a data file.
	STATUS_NOT_MAPPED_DATA = 0xC0000088
	// Indicates the specified image file did not contain a resource section.
	STATUS_RESOURCE_DATA_NOT_FOUND = 0xC0000089
	// Indicates the specified resource type cannot be found in the image file.
	STATUS_RESOURCE_TYPE_NOT_FOUND = 0xC000008A
	// Indicates the specified resource name cannot be found in the image file.
	STATUS_RESOURCE_NAME_NOT_FOUND = 0xC000008B
	// {EXCEPTION} Array bounds exceeded.
	STATUS_ARRAY_BOUNDS_EXCEEDED = 0xC000008C
	// {EXCEPTION} Floating-point denormal operand.
	STATUS_FLOAT_DENORMAL_OPERAND = 0xC000008D
	// {EXCEPTION} Floating-point division by zero.
	STATUS_FLOAT_DIVIDE_BY_ZERO = 0xC000008E
	// {EXCEPTION} Floating-point inexact result.
	STATUS_FLOAT_INEXACT_RESULT = 0xC000008F
	// {EXCEPTION} Floating-point invalid operation.
	STATUS_FLOAT_INVALID_OPERATION = 0xC0000090
	// {EXCEPTION} Floating-point overflow.
	STATUS_FLOAT_OVERFLOW = 0xC0000091
	// {EXCEPTION} Floating-point stack check.
	STATUS_FLOAT_STACK_CHECK = 0xC0000092
	// {EXCEPTION} Floating-point underflow.
	STATUS_FLOAT_UNDERFLOW = 0xC0000093
	// {EXCEPTION} Integer division by zero.
	STATUS_INTEGER_DIVIDE_BY_ZERO = 0xC0000094
	// {EXCEPTION} Integer overflow.
	STATUS_INTEGER_OVERFLOW = 0xC0000095
	// {EXCEPTION} Privileged instruction.
	STATUS_PRIVILEGED_INSTRUCTION = 0xC0000096
	// An attempt was made to install more paging files than the system supports.
	STATUS_TOO_MANY_PAGING_FILES = 0xC0000097
	// The volume for a file has been externally altered such that the opened file is no longer valid.
	STATUS_FILE_INVALID = 0xC0000098
	// When a block of memory is allotted for future updates, such as the memory allocated to hold discretionary access control and primary group information, successive updates might exceed the amount of memory originally allotted. Because a quota might already have been charged to several processes that have handles to the object, it is not reasonable to alter the size of the allocated memory. Instead, a request that requires more memory than has been allotted must fail and the STATUS_ALLOTTED_SPACE_EXCEEDED error returned.
	STATUS_ALLOTTED_SPACE_EXCEEDED = 0xC0000099
	// Insufficient system resources exist to complete the API.
	STATUS_INSUFFICIENT_RESOURCES = 0xC000009A
	// An attempt has been made to open a DFS exit path control file.
	STATUS_DFS_EXIT_PATH_FOUND = 0xC000009B
	// There are bad blocks (sectors) on the hard disk.
	STATUS_DEVICE_DATA_ERROR = 0xC000009C
	// There is bad cabling, non-termination, or the controller is not able to obtain access to the hard disk.
	STATUS_DEVICE_NOT_CONNECTED = 0xC000009D
	// Virtual memory cannot be freed because the base address is not the base of the region and a region size of zero was specified.
	STATUS_FREE_VM_NOT_AT_BASE = 0xC000009F
	// An attempt was made to free virtual memory that is not allocated.
	STATUS_MEMORY_NOT_ALLOCATED = 0xC00000A0
	// The working set is not big enough to allow the requested pages to be locked.
	STATUS_WORKING_SET_QUOTA = 0xC00000A1
	// {Write Protect Error} The disk cannot be written to because it is write-protected. Remove the write protection from the volume %hs in drive %hs.
	STATUS_MEDIA_WRITE_PROTECTED = 0xC00000A2
	// {Drive Not Ready} The drive is not ready for use; its door might be open. Check drive %hs and make sure that a disk is inserted and that the drive door is closed.
	STATUS_DEVICE_NOT_READY = 0xC00000A3
	// The specified attributes are invalid or are incompatible with the attributes for the group as a whole.
	STATUS_INVALID_GROUP_ATTRIBUTES = 0xC00000A4
	// A specified impersonation level is invalid. Also used to indicate that a required impersonation level was not provided.
	STATUS_BAD_IMPERSONATION_LEVEL = 0xC00000A5
	// An attempt was made to open an anonymous-level token. Anonymous tokens cannot be opened.
	STATUS_CANT_OPEN_ANONYMOUS = 0xC00000A6
	// The validation information class requested was invalid.
	STATUS_BAD_VALIDATION_CLASS = 0xC00000A7
	// The type of a token object is inappropriate for its attempted use.
	STATUS_BAD_TOKEN_TYPE = 0xC00000A8
	// The type of a token object is inappropriate for its attempted use.
	STATUS_BAD_MASTER_BOOT_RECORD = 0xC00000A9
	// An attempt was made to execute an instruction at an unaligned address and the host system does not support unaligned instruction references.
	STATUS_INSTRUCTION_MISALIGNMENT = 0xC00000AA
	// The maximum named pipe instance count has been reached.
	STATUS_INSTANCE_NOT_AVAILABLE = 0xC00000AB
	// An instance of a named pipe cannot be found in the listening state.
	STATUS_PIPE_NOT_AVAILABLE = 0xC00000AC
	// The named pipe is not in the connected or closing state.
	STATUS_INVALID_PIPE_STATE = 0xC00000AD
	// The specified pipe is set to complete operations and there are current I/O operations queued so that it cannot be changed to queue operations.
	STATUS_PIPE_BUSY = 0xC00000AE
	// The specified handle is not open to the server end of the named pipe.
	STATUS_ILLEGAL_FUNCTION = 0xC00000AF
	// The specified named pipe is in the disconnected state.
	STATUS_PIPE_DISCONNECTED = 0xC00000B0
	// The specified named pipe is in the closing state.
	STATUS_PIPE_CLOSING = 0xC00000B1
	// The specified named pipe is in the connected state.
	STATUS_PIPE_CONNECTED = 0xC00000B2
	// The specified named pipe is in the listening state.
	STATUS_PIPE_LISTENING = 0xC00000B3
	// The specified named pipe is not in message mode.
	STATUS_INVALID_READ_MODE = 0xC00000B4
	// {Device Timeout} The specified I/O operation on %hs was not completed before the time-out period expired.
	STATUS_IO_TIMEOUT = 0xC00000B5
	// The specified file has been closed by another process.
	STATUS_FILE_FORCED_CLOSED = 0xC00000B6
	// Profiling is not started.
	STATUS_PROFILING_NOT_STARTED = 0xC00000B7
	// Profiling is not stopped.
	STATUS_PROFILING_NOT_STOPPED = 0xC00000B8
	// The passed ACL did not contain the minimum required information.
	STATUS_COULD_NOT_INTERPRET = 0xC00000B9
	// The file that was specified as a target is a directory, and the caller specified that it could be anything but a directory.
	STATUS_FILE_IS_A_DIRECTORY = 0xC00000BA
	// The request is not supported.
	STATUS_NOT_SUPPORTED = 0xC00000BB
	// This remote computer is not listening.
	STATUS_REMOTE_NOT_LISTENING = 0xC00000BC
	// A duplicate name exists on the network.
	STATUS_DUPLICATE_NAME = 0xC00000BD
	// The network path cannot be located.
	STATUS_BAD_NETWORK_PATH = 0xC00000BE
	// The network is busy.
	STATUS_NETWORK_BUSY = 0xC00000BF
	// This device does not exist.
	STATUS_DEVICE_DOES_NOT_EXIST = 0xC00000C0
	// The network BIOS command limit has been reached.
	STATUS_TOO_MANY_COMMANDS = 0xC00000C1
	// An I/O adapter hardware error has occurred.
	STATUS_ADAPTER_HARDWARE_ERROR = 0xC00000C2
	// The network responded incorrectly.
	STATUS_INVALID_NETWORK_RESPONSE = 0xC00000C3
	// An unexpected network error occurred.
	STATUS_UNEXPECTED_NETWORK_ERROR = 0xC00000C4
	// The remote adapter is not compatible.
	STATUS_BAD_REMOTE_ADAPTER = 0xC00000C5
	// The print queue is full.
	STATUS_PRINT_QUEUE_FULL = 0xC00000C6
	// Space to store the file that is waiting to be printed is not available on the server.
	STATUS_NO_SPOOL_SPACE = 0xC00000C7
	// The requested print file has been canceled.
	STATUS_PRINT_CANCELLED = 0xC00000C8
	// The network name was deleted.
	STATUS_NETWORK_NAME_DELETED = 0xC00000C9
	// Network access is denied.
	STATUS_NETWORK_ACCESS_DENIED = 0xC00000CA
	// {Incorrect Network Resource Type} The specified device type (LPT, for example) conflicts with the actual device type on the remote resource.
	STATUS_BAD_DEVICE_TYPE = 0xC00000CB
	// {Network Name Not Found} The specified share name cannot be found on the remote server.
	STATUS_BAD_NETWORK_NAME = 0xC00000CC
	// The name limit for the network adapter card of the local computer was exceeded.
	STATUS_TOO_MANY_NAMES = 0xC00000CD
	// The network BIOS session limit was exceeded.
	STATUS_TOO_MANY_SESSIONS = 0xC00000CE
	// File sharing has been temporarily paused.
	STATUS_SHARING_PAUSED = 0xC00000CF
	// No more connections can be made to this remote computer at this time because the computer has already accepted the maximum number of connections.
	STATUS_REQUEST_NOT_ACCEPTED = 0xC00000D0
	// Print or disk redirection is temporarily paused.
	STATUS_REDIRECTOR_PAUSED = 0xC00000D1
	// A network data fault occurred.
	STATUS_NET_WRITE_FAULT = 0xC00000D2
	// The number of active profiling objects is at the maximum and no more can be started.
	STATUS_PROFILING_AT_LIMIT = 0xC00000D3
	// {Incorrect Volume} The destination file of a rename request is located on a different device than the source of the rename request.
	STATUS_NOT_SAME_DEVICE = 0xC00000D4
	// The specified file has been renamed and thus cannot be modified.
	STATUS_FILE_RENAMED = 0xC00000D5
	// {Network Request Timeout} The session with a remote server has been disconnected because the time-out interval for a request has expired.
	STATUS_VIRTUAL_CIRCUIT_CLOSED = 0xC00000D6
	// Indicates an attempt was made to operate on the security of an object that does not have security associated with it.
	STATUS_NO_SECURITY_ON_OBJECT = 0xC00000D7
	// Used to indicate that an operation cannot continue without blocking for I/O.
	STATUS_CANT_WAIT = 0xC00000D8
	// Used to indicate that a read operation was done on an empty pipe.
	STATUS_PIPE_EMPTY = 0xC00000D9
	// Configuration information could not be read from the domain controller, either because the machine is unavailable or access has been denied.
	STATUS_CANT_ACCESS_DOMAIN_INFO = 0xC00000DA
	// Indicates that a thread attempted to terminate itself by default (called NtTerminateThread with NULL) and it was the last thread in the current process.
	STATUS_CANT_TERMINATE_SELF = 0xC00000DB
	// Indicates the Sam Server was in the wrong state to perform the desired operation.
	STATUS_INVALID_SERVER_STATE = 0xC00000DC
	// Indicates the domain was in the wrong state to perform the desired operation.
	STATUS_INVALID_DOMAIN_STATE = 0xC00000DD
	// This operation is only allowed for the primary domain controller of the domain.
	STATUS_INVALID_DOMAIN_ROLE = 0xC00000DE
	// The specified domain did not exist.
	STATUS_NO_SUCH_DOMAIN = 0xC00000DF
	// The specified domain already exists.
	STATUS_DOMAIN_EXISTS = 0xC00000E0
	// An attempt was made to exceed the limit on the number of domains per server for this release.
	STATUS_DOMAIN_LIMIT_EXCEEDED = 0xC00000E1
	// An error status returned when the opportunistic lock (oplock) request is denied.
	STATUS_OPLOCK_NOT_GRANTED = 0xC00000E2
	// An error status returned when an invalid opportunistic lock (oplock) acknowledgment is received by a file system.
	STATUS_INVALID_OPLOCK_PROTOCOL = 0xC00000E3
	// This error indicates that the requested operation cannot be completed due to a catastrophic media failure or an on-disk data structure corruption.
	STATUS_INTERNAL_DB_CORRUPTION = 0xC00000E4
	// An internal error occurred.
	STATUS_INTERNAL_ERROR = 0xC00000E5
	// Indicates generic access types were contained in an access mask which should already be mapped to non-generic access types.
	STATUS_GENERIC_NOT_MAPPED = 0xC00000E6
	// Indicates a security descriptor is not in the necessary format (absolute or self-relative).
	STATUS_BAD_DESCRIPTOR_FORMAT = 0xC00000E7
	// An access to a user buffer failed at an expected point in time. This code is defined because the caller does not want to accept STATUS_ACCESS_VIOLATION in its filter.
	STATUS_INVALID_USER_BUFFER = 0xC00000E8
	// If an I/O error that is not defined in the standard FsRtl filter is returned, it is converted to the following error, which is guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception.
	STATUS_UNEXPECTED_IO_ERROR = 0xC00000E9
	// If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception.
	STATUS_UNEXPECTED_MM_CREATE_ERR = 0xC00000EA
	// If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception.
	STATUS_UNEXPECTED_MM_MAP_ERROR = 0xC00000EB
	// If an MM error that is not defined in the standard FsRtl filter is returned, it is converted to one of the following errors, which are guaranteed to be in the filter. In this case, information is lost; however, the filter correctly handles the exception.
	STATUS_UNEXPECTED_MM_EXTEND_ERR = 0xC00000EC
	// The requested action is restricted for use by logon processes only. The calling process has not registered as a logon process.
	STATUS_NOT_LOGON_PROCESS = 0xC00000ED
	// An attempt has been made to start a new session manager or LSA logon session by using an ID that is already in use.
	STATUS_LOGON_SESSION_EXISTS = 0xC00000EE
	// An invalid parameter was passed to a service or function as the first argument.
	STATUS_INVALID_PARAMETER_1 = 0xC00000EF
	// An invalid parameter was passed to a service or function as the second argument.
	STATUS_INVALID_PARAMETER_2 = 0xC00000F0
	// An invalid parameter was passed to a service or function as the third argument.
	STATUS_INVALID_PARAMETER_3 = 0xC00000F1
	// An invalid parameter was passed to a service or function as the fourth argument.
	STATUS_INVALID_PARAMETER_4 = 0xC00000F2
	// An invalid parameter was passed to a service or function as the fifth argument.
	STATUS_INVALID_PARAMETER_5 = 0xC00000F3
	// An invalid parameter was passed to a service or function as the sixth argument.
	STATUS_INVALID_PARAMETER_6 = 0xC00000F4
	// An invalid parameter was passed to a service or function as the seventh argument.
	STATUS_INVALID_PARAMETER_7 = 0xC00000F5
	// An invalid parameter was passed to a service or function as the eighth argument.
	STATUS_INVALID_PARAMETER_8 = 0xC00000F6
	// An invalid parameter was passed to a service or function as the ninth argument.
	STATUS_INVALID_PARAMETER_9 = 0xC00000F7
	// An invalid parameter was passed to a service or function as the tenth argument.
	STATUS_INVALID_PARAMETER_10 = 0xC00000F8
	// An invalid parameter was passed to a service or function as the eleventh argument.
	STATUS_INVALID_PARAMETER_11 = 0xC00000F9
	// An invalid parameter was passed to a service or function as the twelfth argument.
	STATUS_INVALID_PARAMETER_12 = 0xC00000FA
	// An attempt was made to access a network file, but the network software was not yet started.
	STATUS_REDIRECTOR_NOT_STARTED = 0xC00000FB
	// An attempt was made to start the redirector, but the redirector has already been started.
	STATUS_REDIRECTOR_STARTED = 0xC00000FC
	// A new guard page for the stack cannot be created.
	STATUS_STACK_OVERFLOW = 0xC00000FD
	// A specified authentication package is unknown.
	STATUS_NO_SUCH_PACKAGE = 0xC00000FE
	// A malformed function table was encountered during an unwind operation.
	STATUS_BAD_FUNCTION_TABLE = 0xC00000FF
	// Indicates the specified environment variable name was not found in the specified environment block.
	STATUS_VARIABLE_NOT_FOUND = 0xC0000100
	// Indicates that the directory trying to be deleted is not empty.
	STATUS_DIRECTORY_NOT_EMPTY = 0xC0000101
	// {Corrupt File} The file or directory %hs is corrupt and unreadable. Run the Chkdsk utility.
	STATUS_FILE_CORRUPT_ERROR = 0xC0000102
	// A requested opened file is not a directory.
	STATUS_NOT_A_DIRECTORY = 0xC0000103
	// The logon session is not in a state that is consistent with the requested operation.
	STATUS_BAD_LOGON_SESSION_STATE = 0xC0000104
	// An internal LSA error has occurred. An authentication package has requested the creation of a logon session but the ID of an already existing logon session has been specified.
	STATUS_LOGON_SESSION_COLLISION = 0xC0000105
	// A specified name string is too long for its intended use.
	STATUS_NAME_TOO_LONG = 0xC0000106
	// The user attempted to force close the files on a redirected drive, but there were opened files on the drive, and the user did not specify a sufficient level of force.
	STATUS_FILES_OPEN = 0xC0000107
	// The user attempted to force close the files on a redirected drive, but there were opened directories on the drive, and the user did not specify a sufficient level of force.
	STATUS_CONNECTION_IN_USE = 0xC0000108
	// RtlFindMessage could not locate the requested message ID in the message table resource.
	STATUS_MESSAGE_NOT_FOUND = 0xC0000109
	// An attempt was made to duplicate an object handle into or out of an exiting process.
	STATUS_PROCESS_IS_TERMINATING = 0xC000010A
	// Indicates an invalid value has been provided for the LogonType requested.
	STATUS_INVALID_LOGON_TYPE = 0xC000010B
	// Indicates that an attempt was made to assign protection to a file system file or directory and one of the SIDs in the security descriptor could not be translated into a GUID that could be stored by the file system. This causes the protection attempt to fail, which might cause a file creation attempt to fail.
	STATUS_NO_GUID_TRANSLATION = 0xC000010C
	// Indicates that an attempt has been made to impersonate via a named pipe that has not yet been read from.
	STATUS_CANNOT_IMPERSONATE = 0xC000010D
	// Indicates that the specified image is already loaded.
	STATUS_IMAGE_ALREADY_LOADED = 0xC000010E
	// Indicates that an attempt was made to change the size of the LDT for a process that has no LDT.
	STATUS_NO_LDT = 0xC0000117
	// Indicates that an attempt was made to grow an LDT by setting its size, or that the size was not an even number of selectors.
	STATUS_INVALID_LDT_SIZE = 0xC0000118
	// Indicates that the starting value for the LDT information was not an integral multiple of the selector size.
	STATUS_INVALID_LDT_OFFSET = 0xC0000119
	// Indicates that the user supplied an invalid descriptor when trying to set up LDT descriptors.
	STATUS_INVALID_LDT_DESCRIPTOR = 0xC000011A
	// The specified image file did not have the correct format. It appears to be NE format.
	STATUS_INVALID_IMAGE_NE_FORMAT = 0xC000011B
	// Indicates that the transaction state of a registry subtree is incompatible with the requested operation. For example, a request has been made to start a new transaction with one already in progress, or a request has been made to apply a transaction when one is not currently in progress.
	STATUS_RXACT_INVALID_STATE = 0xC000011C
	// Indicates an error has occurred during a registry transaction commit. The database has been left in an unknown, but probably inconsistent, state. The state of the registry transaction is left as COMMITTING.
	STATUS_RXACT_COMMIT_FAILURE = 0xC000011D
	// An attempt was made to map a file of size zero with the maximum size specified as zero.
	STATUS_MAPPED_FILE_SIZE_ZERO = 0xC000011E
	// Too many files are opened on a remote server. This error should only be returned by the Windows redirector on a remote drive.
	STATUS_TOO_MANY_OPENED_FILES = 0xC000011F
	// The I/O request was canceled.
	STATUS_CANCELLED = 0xC0000120
	// An attempt has been made to remove a file or directory that cannot be deleted.
	STATUS_CANNOT_DELETE = 0xC0000121
	// Indicates a name that was specified as a remote computer name is syntactically invalid.
	STATUS_INVALID_COMPUTER_NAME = 0xC0000122
	// An I/O request other than close was performed on a file after it was deleted, which can only happen to a request that did not complete before the last handle was closed via NtClose.
	STATUS_FILE_DELETED = 0xC0000123
	// Indicates an operation that is incompatible with built-in accounts has been attempted on a built-in (special) SAM account. For example, built-in accounts cannot be deleted.
	STATUS_SPECIAL_ACCOUNT = 0xC0000124
	// The operation requested cannot be performed on the specified group because it is a built-in special group.
	STATUS_SPECIAL_GROUP = 0xC0000125
	// The operation requested cannot be performed on the specified user because it is a built-in special user.
	STATUS_SPECIAL_USER = 0xC0000126
	// Indicates a member cannot be removed from a group because the group is currently the member's primary group.
	STATUS_MEMBERS_PRIMARY_GROUP = 0xC0000127
	// An I/O request other than close and several other special case operations was attempted using a file object that had already been closed.
	STATUS_FILE_CLOSED = 0xC0000128
	// Indicates a process has too many threads to perform the requested action. For example, assignment of a primary token can be performed only when a process has zero or one threads.
	STATUS_TOO_MANY_THREADS = 0xC0000129
	// An attempt was made to operate on a thread within a specific process, but the specified thread is not in the specified process.
	STATUS_THREAD_NOT_IN_PROCESS = 0xC000012A
	// An attempt was made to establish a token for use as a primary token but the token is already in use. A token can only be the primary token of one process at a time.
	STATUS_TOKEN_ALREADY_IN_USE = 0xC000012B
	// The page file quota was exceeded.
	STATUS_PAGEFILE_QUOTA_EXCEEDED = 0xC000012C
	// {Out of Virtual Memory} Your system is low on virtual memory. To ensure that Windows runs correctly, increase the size of your virtual memory paging file. For more information, see Help.
	STATUS_COMMITMENT_LIMIT = 0xC000012D
	// The specified image file did not have the correct format: it appears to be LE format.
	STATUS_INVALID_IMAGE_LE_FORMAT = 0xC000012E
	// The specified image file did not have the correct format: it did not have an initial MZ.
	STATUS_INVALID_IMAGE_NOT_MZ = 0xC000012F
	// The specified image file did not have the correct format: it did not have a proper e_lfarlc in the MZ header.
	STATUS_INVALID_IMAGE_PROTECT = 0xC0000130
	// The specified image file did not have the correct format: it appears to be a 16-bit Windows image.
	STATUS_INVALID_IMAGE_WIN_16 = 0xC0000131
	// The Netlogon service cannot start because another Netlogon service running in the domain conflicts with the specified role.
	STATUS_LOGON_SERVER_CONFLICT = 0xC0000132
	// The time at the primary domain controller is different from the time at the backup domain controller or member server by too large an amount.
	STATUS_TIME_DIFFERENCE_AT_DC = 0xC0000133
	// On applicable Windows Server releases, the SAM database is significantly out of synchronization with the copy on the domain controller. A complete synchronization is required.
	STATUS_SYNCHRONIZATION_REQUIRED = 0xC0000134
	// {Unable To Locate Component} This application has failed to start because %hs was not found. Reinstalling the application might fix this problem.
	STATUS_DLL_NOT_FOUND = 0xC0000135
	// The NtCreateFile API failed. This error should never be returned to an application; it is a place holder for the Windows LAN Manager Redirector to use in its internal error-mapping routines.
	STATUS_OPEN_FAILED = 0xC0000136
	// {Privilege Failed} The I/O permissions for the process could not be changed.
	STATUS_IO_PRIVILEGE_FAILED = 0xC0000137
	// {Ordinal Not Found} The ordinal %ld could not be located in the dynamic link library %hs.
	STATUS_ORDINAL_NOT_FOUND = 0xC0000138
	// {Entry Point Not Found} The procedure entry point %hs could not be located in the dynamic link library %hs.
	STATUS_ENTRYPOINT_NOT_FOUND = 0xC0000139
	// {Application Exit by CTRL+C} The application terminated as a result of a CTRL+C.
	STATUS_CONTROL_C_EXIT = 0xC000013A
	// {Virtual Circuit Closed} The network transport on your computer has closed a network connection. There might or might not be I/O requests outstanding.
	STATUS_LOCAL_DISCONNECT = 0xC000013B
	// {Virtual Circuit Closed} The network transport on a remote computer has closed a network connection. There might or might not be I/O requests outstanding.
	STATUS_REMOTE_DISCONNECT = 0xC000013C
	// {Insufficient Resources on Remote Computer} The remote computer has insufficient resources to complete the network request. For example, the remote computer might not have enough available memory to carry out the request at this time.
	STATUS_REMOTE_RESOURCES = 0xC000013D
	// {Virtual Circuit Closed} An existing connection (virtual circuit) has been broken at the remote computer. There is probably something wrong with the network software protocol or the network hardware on the remote computer.
	STATUS_LINK_FAILED = 0xC000013E
	// {Virtual Circuit Closed} The network transport on your computer has closed a network connection because it had to wait too long for a response from the remote computer.
	STATUS_LINK_TIMEOUT = 0xC000013F
	// The connection handle that was given to the transport was invalid.
	STATUS_INVALID_CONNECTION = 0xC0000140
	// The address handle that was given to the transport was invalid.
	STATUS_INVALID_ADDRESS = 0xC0000141
	// {DLL Initialization Failed} Initialization of the dynamic link library %hs failed. The process is terminating abnormally.
	STATUS_DLL_INIT_FAILED = 0xC0000142
	// {Missing System File} The required system file %hs is bad or missing.
	STATUS_MISSING_SYSTEMFILE = 0xC0000143
	// {Application Error} The exception %s (0x%08lx) occurred in the application at location 0x%08lx.
	STATUS_UNHANDLED_EXCEPTION = 0xC0000144
	// {Application Error} The application failed to initialize properly (0x%lx). Click OK to terminate the application.
	STATUS_APP_INIT_FAILURE = 0xC0000145
	// {Unable to Create Paging File} The creation of the paging file %hs failed (%lx). The requested size was %ld.
	STATUS_PAGEFILE_CREATE_FAILED = 0xC0000146
	// {No Paging File Specified} No paging file was specified in the system configuration.
	STATUS_NO_PAGEFILE = 0xC0000147
	// {Incorrect System Call Level} An invalid level was passed into the specified system call.
	STATUS_INVALID_LEVEL = 0xC0000148
	// {Incorrect Password to LAN Manager Server} You specified an incorrect password to a LAN Manager 2.x or MS-NET server.
	STATUS_WRONG_PASSWORD_CORE = 0xC0000149
	// {EXCEPTION} A real-mode application issued a floating-point instruction and floating-point hardware is not present.
	STATUS_ILLEGAL_FLOAT_CONTEXT = 0xC000014A
	// The pipe operation has failed because the other end of the pipe has been closed.
	STATUS_PIPE_BROKEN = 0xC000014B
	// {The Registry Is Corrupt} The structure of one of the files that contains registry data is corrupt; the image of the file in memory is corrupt; or the file could not be recovered because the alternate copy or log was absent or corrupt.
	STATUS_REGISTRY_CORRUPT = 0xC000014C
	// An I/O operation initiated by the Registry failed and cannot be recovered. The registry could not read in, write out, or flush one of the files that contain the system's image of the registry.
	STATUS_REGISTRY_IO_FAILED = 0xC000014D
	// An event pair synchronization operation was performed using the thread-specific client/server event pair object, but no event pair object was associated with the thread.
	STATUS_NO_EVENT_PAIR = 0xC000014E
	// The volume does not contain a recognized file system. Be sure that all required file system drivers are loaded and that the volume is not corrupt.
	STATUS_UNRECOGNIZED_VOLUME = 0xC000014F
	// No serial device was successfully initialized. The serial driver will unload.
	STATUS_SERIAL_NO_DEVICE_INITED = 0xC0000150
	// The specified local group does not exist.
	STATUS_NO_SUCH_ALIAS = 0xC0000151
	// The specified account name is not a member of the group.
	STATUS_MEMBER_NOT_IN_ALIAS = 0xC0000152
	// The specified account name is already a member of the group.
	STATUS_MEMBER_IN_ALIAS = 0xC0000153
	// The specified local group already exists.
	STATUS_ALIAS_EXISTS = 0xC0000154
	// A requested type of logon (for example, interactive, network, and service) is not granted by the local security policy of the target system. Ask the system administrator to grant the necessary form of logon.
	STATUS_LOGON_NOT_GRANTED = 0xC0000155
	// The maximum number of secrets that can be stored in a single system was exceeded. The length and number of secrets is limited to satisfy U.S. State Department export restrictions.
	STATUS_TOO_MANY_SECRETS = 0xC0000156
	// The length of a secret exceeds the maximum allowable length. The length and number of secrets is limited to satisfy U.S. State Department export restrictions.
	STATUS_SECRET_TOO_LONG = 0xC0000157
	// The local security authority (LSA) database contains an internal inconsistency.
	STATUS_INTERNAL_DB_ERROR = 0xC0000158
	// The requested operation cannot be performed in full-screen mode.
	STATUS_FULLSCREEN_MODE = 0xC0000159
	// During a logon attempt, the user's security context accumulated too many security IDs. This is a very unusual situation. Remove the user from some global or local groups to reduce the number of security IDs to incorporate into the security context.
	STATUS_TOO_MANY_CONTEXT_IDS = 0xC000015A
	// A user has requested a type of logon (for example, interactive or network) that has not been granted. An administrator has control over who can logon interactively and through the network.
	STATUS_LOGON_TYPE_NOT_GRANTED = 0xC000015B
	// The system has attempted to load or restore a file into the registry, and the specified file is not in the format of a registry file.
	STATUS_NOT_REGISTRY_FILE = 0xC000015C
	// An attempt was made to change a user password in the security account manager without providing the necessary Windows cross-encrypted password.
	STATUS_NT_CROSS_ENCRYPTION_REQUIRED = 0xC000015D
	// A domain server has an incorrect configuration.
	STATUS_DOMAIN_CTRLR_CONFIG_ERROR = 0xC000015E
	// An attempt was made to explicitly access the secondary copy of information via a device control to the fault tolerance driver and the secondary copy is not present in the system.
	STATUS_FT_MISSING_MEMBER = 0xC000015F
	// A configuration registry node that represents a driver service entry was ill-formed and did not contain the required value entries.
	STATUS_ILL_FORMED_SERVICE_ENTRY = 0xC0000160
	// An illegal character was encountered. For a multibyte character set, this includes a lead byte without a succeeding trail byte. For the Unicode character set this includes the characters 0xFFFF and 0xFFFE.
	STATUS_ILLEGAL_CHARACTER = 0xC0000161
	// No mapping for the Unicode character exists in the target multibyte code page.
	STATUS_UNMAPPABLE_CHARACTER = 0xC0000162
	// The Unicode character is not defined in the Unicode character set that is installed on the system.
	STATUS_UNDEFINED_CHARACTER = 0xC0000163
	// The paging file cannot be created on a floppy disk.
	STATUS_FLOPPY_VOLUME = 0xC0000164
	// {Floppy Disk Error} While accessing a floppy disk, an ID address mark was not found.
	STATUS_FLOPPY_ID_MARK_NOT_FOUND = 0xC0000165
	// {Floppy Disk Error} While accessing a floppy disk, the track address from the sector ID field was found to be different from the track address that is maintained by the controller.
	STATUS_FLOPPY_WRONG_CYLINDER = 0xC0000166
	// {Floppy Disk Error} The floppy disk controller reported an error that is not recognized by the floppy disk driver.
	STATUS_FLOPPY_UNKNOWN_ERROR = 0xC0000167
	// {Floppy Disk Error} While accessing a floppy-disk, the controller returned inconsistent results via its registers.
	STATUS_FLOPPY_BAD_REGISTERS = 0xC0000168
	// {Hard Disk Error} While accessing the hard disk, a recalibrate operation failed, even after retries.
	STATUS_DISK_RECALIBRATE_FAILED = 0xC0000169
	// {Hard Disk Error} While accessing the hard disk, a disk operation failed even after retries.
	STATUS_DISK_OPERATION_FAILED = 0xC000016A
	// {Hard Disk Error} While accessing the hard disk, a disk controller reset was needed, but even that failed.
	STATUS_DISK_RESET_FAILED = 0xC000016B
	// An attempt was made to open a device that was sharing an interrupt request (IRQ) with other devices. At least one other device that uses that IRQ was already opened. Two concurrent opens of devices that share an IRQ and only work via interrupts is not supported for the particular bus type that the devices use.
	STATUS_SHARED_IRQ_BUSY = 0xC000016C
	// {FT Orphaning} A disk that is part of a fault-tolerant volume can no longer be accessed.
	STATUS_FT_ORPHANING = 0xC000016D
	// The basic input/output system (BIOS) failed to connect a system interrupt to the device or bus for which the device is connected.
	STATUS_BIOS_FAILED_TO_CONNECT_INTERRUPT = 0xC000016E
	// The tape could not be partitioned.
	STATUS_PARTITION_FAILURE = 0xC0000172
	// When accessing a new tape of a multi-volume partition, the current blocksize is incorrect.
	STATUS_INVALID_BLOCK_LENGTH = 0xC0000173
	// The tape partition information could not be found when loading a tape.
	STATUS_DEVICE_NOT_PARTITIONED = 0xC0000174
	// An attempt to lock the eject media mechanism failed.
	STATUS_UNABLE_TO_LOCK_MEDIA = 0xC0000175
	// An attempt to unload media failed.
	STATUS_UNABLE_TO_UNLOAD_MEDIA = 0xC0000176
	// The physical end of tape was detected.
	STATUS_EOM_OVERFLOW = 0xC0000177
	// {No Media} There is no media in the drive. Insert media into drive %hs.
	STATUS_NO_MEDIA = 0xC0000178
	// A member could not be added to or removed from the local group because the member does not exist.
	STATUS_NO_SUCH_MEMBER = 0xC000017A
	// A new member could not be added to a local group because the member has the wrong account type.
	STATUS_INVALID_MEMBER = 0xC000017B
	// An illegal operation was attempted on a registry key that has been marked for deletion.
	STATUS_KEY_DELETED = 0xC000017C
	// The system could not allocate the required space in a registry log.
	STATUS_NO_LOG_SPACE = 0xC000017D
	// Too many SIDs have been specified.
	STATUS_TOO_MANY_SIDS = 0xC000017E
	// An attempt was made to change a user password in the security account manager without providing the necessary LM cross-encrypted password.
	STATUS_LM_CROSS_ENCRYPTION_REQUIRED = 0xC000017F
	// An attempt was made to create a symbolic link in a registry key that already has subkeys or values.
	STATUS_KEY_HAS_CHILDREN = 0xC0000180
	// An attempt was made to create a stable subkey under a volatile parent key.
	STATUS_CHILD_MUST_BE_VOLATILE = 0xC0000181
	// The I/O device is configured incorrectly or the configuration parameters to the driver are incorrect.
	STATUS_DEVICE_CONFIGURATION_ERROR = 0xC0000182
	// An error was detected between two drivers or within an I/O driver.
	STATUS_DRIVER_INTERNAL_ERROR = 0xC0000183
	// The device is not in a valid state to perform this request.
	STATUS_INVALID_DEVICE_STATE = 0xC0000184
	// The I/O device reported an I/O error.
	STATUS_IO_DEVICE_ERROR = 0xC0000185
	// A protocol error was detected between the driver and the device.
	STATUS_DEVICE_PROTOCOL_ERROR = 0xC0000186
	// This operation is only allowed for the primary domain controller of the domain.
	STATUS_BACKUP_CONTROLLER = 0xC0000187
	// The log file space is insufficient to support this operation.
	STATUS_LOG_FILE_FULL = 0xC0000188
	// A write operation was attempted to a volume after it was dismounted.
	STATUS_TOO_LATE = 0xC0000189
	// The workstation does not have a trust secret for the primary domain in the local LSA database.
	STATUS_NO_TRUST_LSA_SECRET = 0xC000018A
	// On applicable Windows Server releases, the SAM database does not have a computer account for this workstation trust relationship.
	STATUS_NO_TRUST_SAM_ACCOUNT = 0xC000018B
	// The logon request failed because the trust relationship between the primary domain and the trusted domain failed.
	STATUS_TRUSTED_DOMAIN_FAILURE = 0xC000018C
	// The logon request failed because the trust relationship between this workstation and the primary domain failed.
	STATUS_TRUSTED_RELATIONSHIP_FAILURE = 0xC000018D
	// The Eventlog log file is corrupt.
	STATUS_EVENTLOG_FILE_CORRUPT = 0xC000018E
	// No Eventlog log file could be opened. The Eventlog service did not start.
	STATUS_EVENTLOG_CANT_START = 0xC000018F
	// The network logon failed. This might be because the validation authority cannot be reached.
	STATUS_TRUST_FAILURE = 0xC0000190
	// An attempt was made to acquire a mutant such that its maximum count would have been exceeded.
	STATUS_MUTANT_LIMIT_EXCEEDED = 0xC0000191
	// An attempt was made to logon, but the NetLogon service was not started.
	STATUS_NETLOGON_NOT_STARTED = 0xC0000192
	// The user account has expired.
	STATUS_ACCOUNT_EXPIRED = 0xC0000193
	// {EXCEPTION} Possible deadlock condition.
	STATUS_POSSIBLE_DEADLOCK = 0xC0000194
	// Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again.
	STATUS_NETWORK_CREDENTIAL_CONFLICT = 0xC0000195
	// An attempt was made to establish a session to a network server, but there are already too many sessions established to that server.
	STATUS_REMOTE_SESSION_LIMIT = 0xC0000196
	// The log file has changed between reads.
	STATUS_EVENTLOG_FILE_CHANGED = 0xC0000197
	// The account used is an interdomain trust account. Use your global user account or local user account to access this server.
	STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT = 0xC0000198
	// The account used is a computer account. Use your global user account or local user account to access this server.
	STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT = 0xC0000199
	// The account used is a server trust account. Use your global user account or local user account to access this server.
	STATUS_NOLOGON_SERVER_TRUST_ACCOUNT = 0xC000019A
	// The name or SID of the specified domain is inconsistent with the trust information for that domain.
	STATUS_DOMAIN_TRUST_INCONSISTENT = 0xC000019B
	// A volume has been accessed for which a file system driver is required that has not yet been loaded.
	STATUS_FS_DRIVER_REQUIRED = 0xC000019C
	// Indicates that the specified image is already loaded as a DLL.
	STATUS_IMAGE_ALREADY_LOADED_AS_DLL = 0xC000019D
	// Short name settings cannot be changed on this volume due to the global registry setting.
	STATUS_INCOMPATIBLE_WITH_GLOBAL_SHORT_NAME_REGISTRY_SETTING = 0xC000019E
	// Short names are not enabled on this volume.
	STATUS_SHORT_NAMES_NOT_ENABLED_ON_VOLUME = 0xC000019F
	// The security stream for the given volume is in an inconsistent state. Please run CHKDSK on the volume.
	STATUS_SECURITY_STREAM_IS_INCONSISTENT = 0xC00001A0
	// A requested file lock operation cannot be processed due to an invalid byte range.
	STATUS_INVALID_LOCK_RANGE = 0xC00001A1
	// The specified access control entry (ACE) contains an invalid condition.
	STATUS_INVALID_ACE_CONDITION = 0xC00001A2
	// The subsystem needed to support the image type is not present.
	STATUS_IMAGE_SUBSYSTEM_NOT_PRESENT = 0xC00001A3
	// The specified file already has a notification GUID associated with it.
	STATUS_NOTIFICATION_GUID_ALREADY_DEFINED = 0xC00001A4
	// A remote open failed because the network open restrictions were not satisfied.
	STATUS_NETWORK_OPEN_RESTRICTION = 0xC0000201
	// There is no user session key for the specified logon session.
	STATUS_NO_USER_SESSION_KEY = 0xC0000202
	// The remote user session has been deleted.
	STATUS_USER_SESSION_DELETED = 0xC0000203
	// Indicates the specified resource language ID cannot be found in the image file.
	STATUS_RESOURCE_LANG_NOT_FOUND = 0xC0000204
	// Insufficient server resources exist to complete the request.
	STATUS_INSUFF_SERVER_RESOURCES = 0xC0000205
	// The size of the buffer is invalid for the specified operation.
	STATUS_INVALID_BUFFER_SIZE = 0xC0000206
	// The transport rejected the specified network address as invalid.
	STATUS_INVALID_ADDRESS_COMPONENT = 0xC0000207
	// The transport rejected the specified network address due to invalid use of a wildcard.
	STATUS_INVALID_ADDRESS_WILDCARD = 0xC0000208
	// The transport address could not be opened because all the available addresses are in use.
	STATUS_TOO_MANY_ADDRESSES = 0xC0000209
	// The transport address could not be opened because it already exists.
	STATUS_ADDRESS_ALREADY_EXISTS = 0xC000020A
	// The transport address is now closed.
	STATUS_ADDRESS_CLOSED = 0xC000020B
	// The transport connection is now disconnected.
	STATUS_CONNECTION_DISCONNECTED = 0xC000020C
	// The transport connection has been reset.
	STATUS_CONNECTION_RESET = 0xC000020D
	// The transport cannot dynamically acquire any more nodes.
	STATUS_TOO_MANY_NODES = 0xC000020E
	// The transport aborted a pending transaction.
	STATUS_TRANSACTION_ABORTED = 0xC000020F
	// The transport timed out a request that is waiting for a response.
	STATUS_TRANSACTION_TIMED_OUT = 0xC0000210
	// The transport did not receive a release for a pending response.
	STATUS_TRANSACTION_NO_RELEASE = 0xC0000211
	// The transport did not find a transaction that matches the specific token.
	STATUS_TRANSACTION_NO_MATCH = 0xC0000212
	// The transport had previously responded to a transaction request.
	STATUS_TRANSACTION_RESPONDED = 0xC0000213
	// The transport does not recognize the specified transaction request ID.
	STATUS_TRANSACTION_INVALID_ID = 0xC0000214
	// The transport does not recognize the specified transaction request type.
	STATUS_TRANSACTION_INVALID_TYPE = 0xC0000215
	// The transport can only process the specified request on the server side of a session.
	STATUS_NOT_SERVER_SESSION = 0xC0000216
	// The transport can only process the specified request on the client side of a session.
	STATUS_NOT_CLIENT_SESSION = 0xC0000217
	// {Registry File Failure} The registry cannot load the hive (file): %hs or its log or alternate. It is corrupt, absent, or not writable.
	STATUS_CANNOT_LOAD_REGISTRY_FILE = 0xC0000218
	// {Unexpected Failure in DebugActiveProcess} An unexpected failure occurred while processing a DebugActiveProcess API request. Choosing OK will terminate the process, and choosing Cancel will ignore the error.
	STATUS_DEBUG_ATTACH_FAILED = 0xC0000219
	// {Fatal System Error} The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x). The system has been shut down.
	STATUS_SYSTEM_PROCESS_TERMINATED = 0xC000021A
	// {Data Not Accepted} The TDI client could not handle the data received during an indication.
	STATUS_DATA_NOT_ACCEPTED = 0xC000021B
	// {Unable to Retrieve Browser Server List} The list of servers for this workgroup is not currently available.
	STATUS_NO_BROWSER_SERVERS_FOUND = 0xC000021C
	// NTVDM encountered a hard error.
	STATUS_VDM_HARD_ERROR = 0xC000021D
	// {Cancel Timeout} The driver %hs failed to complete a canceled I/O request in the allotted time.
	STATUS_DRIVER_CANCEL_TIMEOUT = 0xC000021E
	// {Reply Message Mismatch} An attempt was made to reply to an LPC message, but the thread specified by the client ID in the message was not waiting on that message.
	STATUS_REPLY_MESSAGE_MISMATCH = 0xC000021F
	// {Mapped View Alignment Incorrect} An attempt was made to map a view of a file, but either the specified base address or the offset into the file were not aligned on the proper allocation granularity.
	STATUS_MAPPED_ALIGNMENT = 0xC0000220
	// {Bad Image Checksum} The image %hs is possibly corrupt. The header checksum does not match the computed checksum.
	STATUS_IMAGE_CHECKSUM_MISMATCH = 0xC0000221
	// {Delayed Write Failed} Windows was unable to save all the data for the file %hs. The data has been lost. This error might be caused by a failure of your computer hardware or network connection. Try to save this file elsewhere.
	STATUS_LOST_WRITEBEHIND_DATA = 0xC0000222
	// The parameters passed to the server in the client/server shared memory window were invalid. Too much data might have been put in the shared memory window.
	STATUS_CLIENT_SERVER_PARAMETERS_INVALID = 0xC0000223
	// The user password must be changed before logging on the first time.
	STATUS_PASSWORD_MUST_CHANGE = 0xC0000224
	// The object was not found.
	STATUS_NOT_FOUND = 0xC0000225
	// The stream is not a tiny stream.
	STATUS_NOT_TINY_STREAM = 0xC0000226
	// A transaction recovery failed.
	STATUS_RECOVERY_FAILURE = 0xC0000227
	// The request must be handled by the stack overflow code.
	STATUS_STACK_OVERFLOW_READ = 0xC0000228
	// A consistency check failed.
	STATUS_FAIL_CHECK = 0xC0000229
	// The attempt to insert the ID in the index failed because the ID is already in the index.
	STATUS_DUPLICATE_OBJECTID = 0xC000022A
	// The attempt to set the object ID failed because the object already has an ID.
	STATUS_OBJECTID_EXISTS = 0xC000022B
	// Internal OFS status codes indicating how an allocation operation is handled. Either it is retried after the containing oNode is moved or the extent stream is converted to a large stream.
	STATUS_CONVERT_TO_LARGE = 0xC000022C
	// The request needs to be retried.
	STATUS_RETRY = 0xC000022D
	// The attempt to find the object found an object on the volume that matches by ID; however, it is out of the scope of the handle that is used for the operation.
	STATUS_FOUND_OUT_OF_SCOPE = 0xC000022E
	// The bucket array must be grown. Retry the transaction after doing so.
	STATUS_ALLOCATE_BUCKET = 0xC000022F
	// The specified property set does not exist on the object.
	STATUS_PROPSET_NOT_FOUND = 0xC0000230
	// The user/kernel marshaling buffer has overflowed.
	STATUS_MARSHALL_OVERFLOW = 0xC0000231
	// The supplied variant structure contains invalid data.
	STATUS_INVALID_VARIANT = 0xC0000232
	// A domain controller for this domain was not found.
	STATUS_DOMAIN_CONTROLLER_NOT_FOUND = 0xC0000233
	// The user account has been automatically locked because too many invalid logon attempts or password change attempts have been requested.
	STATUS_ACCOUNT_LOCKED_OUT = 0xC0000234
	// NtClose was called on a handle that was protected from close via NtSetInformationObject.
	STATUS_HANDLE_NOT_CLOSABLE = 0xC0000235
	// The transport-connection attempt was refused by the remote system.
	STATUS_CONNECTION_REFUSED = 0xC0000236
	// The transport connection was gracefully closed.
	STATUS_GRACEFUL_DISCONNECT = 0xC0000237
	// The transport endpoint already has an address associated with it.
	STATUS_ADDRESS_ALREADY_ASSOCIATED = 0xC0000238
	// An address has not yet been associated with the transport endpoint.
	STATUS_ADDRESS_NOT_ASSOCIATED = 0xC0000239
	// An operation was attempted on a nonexistent transport connection.
	STATUS_CONNECTION_INVALID = 0xC000023A
	// An invalid operation was attempted on an active transport connection.
	STATUS_CONNECTION_ACTIVE = 0xC000023B
	// The remote network is not reachable by the transport.
	STATUS_NETWORK_UNREACHABLE = 0xC000023C
	// The remote system is not reachable by the transport.
	STATUS_HOST_UNREACHABLE = 0xC000023D
	// The remote system does not support the transport protocol.
	STATUS_PROTOCOL_UNREACHABLE = 0xC000023E
	// No service is operating at the destination port of the transport on the remote system.
	STATUS_PORT_UNREACHABLE = 0xC000023F
	// The request was aborted.
	STATUS_REQUEST_ABORTED = 0xC0000240
	// The transport connection was aborted by the local system.
	STATUS_CONNECTION_ABORTED = 0xC0000241
	// The specified buffer contains ill-formed data.
	STATUS_BAD_COMPRESSION_BUFFER = 0xC0000242
	// The requested operation cannot be performed on a file with a user mapped section open.
	STATUS_USER_MAPPED_FILE = 0xC0000243
	// {Audit Failed} An attempt to generate a security audit failed.
	STATUS_AUDIT_FAILED = 0xC0000244
	// The timer resolution was not previously set by the current process.
	STATUS_TIMER_RESOLUTION_NOT_SET = 0xC0000245
	// A connection to the server could not be made because the limit on the number of concurrent connections for this account has been reached.
	STATUS_CONNECTION_COUNT_LIMIT = 0xC0000246
	// Attempting to log on during an unauthorized time of day for this account.
	STATUS_LOGIN_TIME_RESTRICTION = 0xC0000247
	// The account is not authorized to log on from this station.
	STATUS_LOGIN_WKSTA_RESTRICTION = 0xC0000248
	// {UP/MP Image Mismatch} The image %hs has been modified for use on a uniprocessor system, but you are running it on a multiprocessor machine. Reinstall the image file.
	STATUS_IMAGE_MP_UP_MISMATCH = 0xC0000249
	// There is insufficient account information to log you on.
	STATUS_INSUFFICIENT_LOGON_INFO = 0xC0000250
	// {Invalid DLL Entrypoint} The dynamic link library %hs is not written correctly. The stack pointer has been left in an inconsistent state. The entry point should be declared as WINAPI or STDCALL. Select YES to fail the DLL load. Select NO to continue execution. Selecting NO might cause the application to operate incorrectly.
	STATUS_BAD_DLL_ENTRYPOINT = 0xC0000251
	// {Invalid Service Callback Entrypoint} The %hs service is not written correctly. The stack pointer has been left in an inconsistent state. The callback entry point should be declared as WINAPI or STDCALL. Selecting OK will cause the service to continue operation. However, the service process might operate incorrectly.
	STATUS_BAD_SERVICE_ENTRYPOINT = 0xC0000252
	// The server received the messages but did not send a reply.
	STATUS_LPC_REPLY_LOST = 0xC0000253
	// There is an IP address conflict with another system on the network.
	STATUS_IP_ADDRESS_CONFLICT1 = 0xC0000254
	// There is an IP address conflict with another system on the network.
	STATUS_IP_ADDRESS_CONFLICT2 = 0xC0000255
	// {Low On Registry Space} The system has reached the maximum size that is allowed for the system part of the registry. Additional storage requests will be ignored.
	STATUS_REGISTRY_QUOTA_LIMIT = 0xC0000256
	// The contacted server does not support the indicated part of the DFS namespace.
	STATUS_PATH_NOT_COVERED = 0xC0000257
	// A callback return system service cannot be executed when no callback is active.
	STATUS_NO_CALLBACK_ACTIVE = 0xC0000258
	// The service being accessed is licensed for a particular number of connections. No more connections can be made to the service at this time because the service has already accepted the maximum number of connections.
	STATUS_LICENSE_QUOTA_EXCEEDED = 0xC0000259
	// The password provided is too short to meet the policy of your user account. Choose a longer password.
	STATUS_PWD_TOO_SHORT = 0xC000025A
	// The policy of your user account does not allow you to change passwords too frequently. This is done to prevent users from changing back to a familiar, but potentially discovered, password. If you feel your password has been compromised, contact your administrator immediately to have a new one assigned.
	STATUS_PWD_TOO_RECENT = 0xC000025B
	// You have attempted to change your password to one that you have used in the past. The policy of your user account does not allow this. Select a password that you have not previously used.
	STATUS_PWD_HISTORY_CONFLICT = 0xC000025C
	// You have attempted to load a legacy device driver while its device instance had been disabled.
	STATUS_PLUGPLAY_NO_DEVICE = 0xC000025E
	// The specified compression format is unsupported.
	STATUS_UNSUPPORTED_COMPRESSION = 0xC000025F
	// The specified hardware profile configuration is invalid.
	STATUS_INVALID_HW_PROFILE = 0xC0000260
	// The specified Plug and Play registry device path is invalid.
	STATUS_INVALID_PLUGPLAY_DEVICE_PATH = 0xC0000261
	// {Driver Entry Point Not Found} The %hs device driver could not locate the ordinal %ld in driver %hs.
	STATUS_DRIVER_ORDINAL_NOT_FOUND = 0xC0000262
	// {Driver Entry Point Not Found} The %hs device driver could not locate the entry point %hs in driver %hs.
	STATUS_DRIVER_ENTRYPOINT_NOT_FOUND = 0xC0000263
	// {Application Error} The application attempted to release a resource it did not own. Click OK to terminate the application.
	STATUS_RESOURCE_NOT_OWNED = 0xC0000264
	// An attempt was made to create more links on a file than the file system supports.
	STATUS_TOO_MANY_LINKS = 0xC0000265
	// The specified quota list is internally inconsistent with its descriptor.
	STATUS_QUOTA_LIST_INCONSISTENT = 0xC0000266
	// The specified file has been relocated to offline storage.
	STATUS_FILE_IS_OFFLINE = 0xC0000267
	// {Windows Evaluation Notification} The evaluation period for this installation of Windows has expired. This system will shutdown in 1 hour. To restore access to this installation of Windows, upgrade this installation by using a licensed distribution of this product.
	STATUS_EVALUATION_EXPIRATION = 0xC0000268
	// {Illegal System DLL Relocation} The system DLL %hs was relocated in memory. The application will not run properly. The relocation occurred because the DLL %hs occupied an address range that is reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.
	STATUS_ILLEGAL_DLL_RELOCATION = 0xC0000269
	// {License Violation} The system has detected tampering with your registered product type. This is a violation of your software license. Tampering with the product type is not permitted.
	STATUS_LICENSE_VIOLATION = 0xC000026A
	// {DLL Initialization Failed} The application failed to initialize because the window station is shutting down.
	STATUS_DLL_INIT_FAILED_LOGOFF = 0xC000026B
	// {Unable to Load Device Driver} %hs device driver could not be loaded. Error Status was 0x%x.
	STATUS_DRIVER_UNABLE_TO_LOAD = 0xC000026C
	// DFS is unavailable on the contacted server.
	STATUS_DFS_UNAVAILABLE = 0xC000026D
	// An operation was attempted to a volume after it was dismounted.
	STATUS_VOLUME_DISMOUNTED = 0xC000026E
	// An internal error occurred in the Win32 x86 emulation subsystem.
	STATUS_WX86_INTERNAL_ERROR = 0xC000026F
	// Win32 x86 emulation subsystem floating-point stack check.
	STATUS_WX86_FLOAT_STACK_CHECK = 0xC0000270
	// The validation process needs to continue on to the next step.
	STATUS_VALIDATE_CONTINUE = 0xC0000271
	// There was no match for the specified key in the index.
	STATUS_NO_MATCH = 0xC0000272
	// There are no more matches for the current index enumeration.
	STATUS_NO_MORE_MATCHES = 0xC0000273
	// The NTFS file or directory is not a reparse point.
	STATUS_NOT_A_REPARSE_POINT = 0xC0000275
	// The Windows I/O reparse tag passed for the NTFS reparse point is invalid.
	STATUS_IO_REPARSE_TAG_INVALID = 0xC0000276
	// The Windows I/O reparse tag does not match the one that is in the NTFS reparse point.
	STATUS_IO_REPARSE_TAG_MISMATCH = 0xC0000277
	// The user data passed for the NTFS reparse point is invalid.
	STATUS_IO_REPARSE_DATA_INVALID = 0xC0000278
	// The layered file system driver for this I/O tag did not handle it when needed.
	STATUS_IO_REPARSE_TAG_NOT_HANDLED = 0xC0000279
	// The NTFS symbolic link could not be resolved even though the initial file name is valid.
	STATUS_REPARSE_POINT_NOT_RESOLVED = 0xC0000280
	// The NTFS directory is a reparse point.
	STATUS_DIRECTORY_IS_A_REPARSE_POINT = 0xC0000281
	// The range could not be added to the range list because of a conflict.
	STATUS_RANGE_LIST_CONFLICT = 0xC0000282
	// The specified medium changer source element contains no media.
	STATUS_SOURCE_ELEMENT_EMPTY = 0xC0000283
	// The specified medium changer destination element already contains media.
	STATUS_DESTINATION_ELEMENT_FULL = 0xC0000284
	// The specified medium changer element does not exist.
	STATUS_ILLEGAL_ELEMENT_ADDRESS = 0xC0000285
	// The specified element is contained in a magazine that is no longer present.
	STATUS_MAGAZINE_NOT_PRESENT = 0xC0000286
	// The device requires re-initialization due to hardware errors.
	STATUS_REINITIALIZATION_NEEDED = 0xC0000287
	// The file encryption attempt failed.
	STATUS_ENCRYPTION_FAILED = 0xC000028A
	// The file decryption attempt failed.
	STATUS_DECRYPTION_FAILED = 0xC000028B
	// The specified range could not be found in the range list.
	STATUS_RANGE_NOT_FOUND = 0xC000028C
	// There is no encryption recovery policy configured for this system.
	STATUS_NO_RECOVERY_POLICY = 0xC000028D
	// The required encryption driver is not loaded for this system.
	STATUS_NO_EFS = 0xC000028E
	// The file was encrypted with a different encryption driver than is currently loaded.
	STATUS_WRONG_EFS = 0xC000028F
	// There are no EFS keys defined for the user.
	STATUS_NO_USER_KEYS = 0xC0000290
	// The specified file is not encrypted.
	STATUS_FILE_NOT_ENCRYPTED = 0xC0000291
	// The specified file is not in the defined EFS export format.
	STATUS_NOT_EXPORT_FORMAT = 0xC0000292
	// The specified file is encrypted and the user does not have the ability to decrypt it.
	STATUS_FILE_ENCRYPTED = 0xC0000293
	// The GUID passed was not recognized as valid by a WMI data provider.
	STATUS_WMI_GUID_NOT_FOUND = 0xC0000295
	// The instance name passed was not recognized as valid by a WMI data provider.
	STATUS_WMI_INSTANCE_NOT_FOUND = 0xC0000296
	// The data item ID passed was not recognized as valid by a WMI data provider.
	STATUS_WMI_ITEMID_NOT_FOUND = 0xC0000297
	// The WMI request could not be completed and should be retried.
	STATUS_WMI_TRY_AGAIN = 0xC0000298
	// The policy object is shared and can only be modified at the root.
	STATUS_SHARED_POLICY = 0xC0000299
	// The policy object does not exist when it should.
	STATUS_POLICY_OBJECT_NOT_FOUND = 0xC000029A
	// The requested policy information only lives in the Ds.
	STATUS_POLICY_ONLY_IN_DS = 0xC000029B
	// The volume must be upgraded to enable this feature.
	STATUS_VOLUME_NOT_UPGRADED = 0xC000029C
	// The remote storage service is not operational at this time.
	STATUS_REMOTE_STORAGE_NOT_ACTIVE = 0xC000029D
	// The remote storage service encountered a media error.
	STATUS_REMOTE_STORAGE_MEDIA_ERROR = 0xC000029E
	// The tracking (workstation) service is not running.
	STATUS_NO_TRACKING_SERVICE = 0xC000029F
	// The server process is running under a SID that is different from the SID that is required by client.
	STATUS_SERVER_SID_MISMATCH = 0xC00002A0
	// The specified directory service attribute or value does not exist.
	STATUS_DS_NO_ATTRIBUTE_OR_VALUE = 0xC00002A1
	// The attribute syntax specified to the directory service is invalid.
	STATUS_DS_INVALID_ATTRIBUTE_SYNTAX = 0xC00002A2
	// The attribute type specified to the directory service is not defined.
	STATUS_DS_ATTRIBUTE_TYPE_UNDEFINED = 0xC00002A3
	// The specified directory service attribute or value already exists.
	STATUS_DS_ATTRIBUTE_OR_VALUE_EXISTS = 0xC00002A4
	// The directory service is busy.
	STATUS_DS_BUSY = 0xC00002A5
	// The directory service is unavailable.
	STATUS_DS_UNAVAILABLE = 0xC00002A6
	// The directory service was unable to allocate a relative identifier.
	STATUS_DS_NO_RIDS_ALLOCATED = 0xC00002A7
	// The directory service has exhausted the pool of relative identifiers.
	STATUS_DS_NO_MORE_RIDS = 0xC00002A8
	// The requested operation could not be performed because the directory service is not the master for that type of operation.
	STATUS_DS_INCORRECT_ROLE_OWNER = 0xC00002A9
	// The directory service was unable to initialize the subsystem that allocates relative identifiers.
	STATUS_DS_RIDMGR_INIT_ERROR = 0xC00002AA
	// The requested operation did not satisfy one or more constraints that are associated with the class of the object.
	STATUS_DS_OBJ_CLASS_VIOLATION = 0xC00002AB
	// The directory service can perform the requested operation only on a leaf object.
	STATUS_DS_CANT_ON_NON_LEAF = 0xC00002AC
	// The directory service cannot perform the requested operation on the Relatively Defined Name (RDN) attribute of an object.
	STATUS_DS_CANT_ON_RDN = 0xC00002AD
	// The directory service detected an attempt to modify the object class of an object.
	STATUS_DS_CANT_MOD_OBJ_CLASS = 0xC00002AE
	// An error occurred while performing a cross domain move operation.
	STATUS_DS_CROSS_DOM_MOVE_FAILED = 0xC00002AF
	// Unable to contact the global catalog server.
	STATUS_DS_GC_NOT_AVAILABLE = 0xC00002B0
	// The requested operation requires a directory service, and none was available.
	STATUS_DIRECTORY_SERVICE_REQUIRED = 0xC00002B1
	// The reparse attribute cannot be set because it is incompatible with an existing attribute.
	STATUS_REPARSE_ATTRIBUTE_CONFLICT = 0xC00002B2
	// A group marked "use for deny only" cannot be enabled.
	STATUS_CANT_ENABLE_DENY_ONLY = 0xC00002B3
	// {EXCEPTION} Multiple floating-point faults.
	STATUS_FLOAT_MULTIPLE_FAULTS = 0xC00002B4
	// {EXCEPTION} Multiple floating-point traps.
	STATUS_FLOAT_MULTIPLE_TRAPS = 0xC00002B5
	// The device has been removed.
	STATUS_DEVICE_REMOVED = 0xC00002B6
	// The volume change journal is being deleted.
	STATUS_JOURNAL_DELETE_IN_PROGRESS = 0xC00002B7
	// The volume change journal is not active.
	STATUS_JOURNAL_NOT_ACTIVE = 0xC00002B8
	// The requested interface is not supported.
	STATUS_NOINTERFACE = 0xC00002B9
	// A directory service resource limit has been exceeded.
	STATUS_DS_ADMIN_LIMIT_EXCEEDED = 0xC00002C1
	// {System Standby Failed} The driver %hs does not support standby mode. Updating this driver allows the system to go to standby mode.
	STATUS_DRIVER_FAILED_SLEEP = 0xC00002C2
	// Mutual Authentication failed. The server password is out of date at the domain controller.
	STATUS_MUTUAL_AUTHENTICATION_FAILED = 0xC00002C3
	// The system file %1 has become corrupt and has been replaced.
	STATUS_CORRUPT_SYSTEM_FILE = 0xC00002C4
	// {EXCEPTION} Alignment Error A data type misalignment error was detected in a load or store instruction.
	STATUS_DATATYPE_MISALIGNMENT_ERROR = 0xC00002C5
	// The WMI data item or data block is read-only.
	STATUS_WMI_READ_ONLY = 0xC00002C6
	// The WMI data item or data block could not be changed.
	STATUS_WMI_SET_FAILURE = 0xC00002C7
	// {Virtual Memory Minimum Too Low} Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications might be denied. For more information, see Help.
	STATUS_COMMITMENT_MINIMUM = 0xC00002C8
	// {EXCEPTION} Register NaT consumption faults. A NaT value is consumed on a non-speculative instruction.
	STATUS_REG_NAT_CONSUMPTION = 0xC00002C9
	// The transport element of the medium changer contains media, which is causing the operation to fail.
	STATUS_TRANSPORT_FULL = 0xC00002CA
	// Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Directory Services Restore Mode. Check the event log for more detailed information.
	STATUS_DS_SAM_INIT_FAILURE = 0xC00002CB
	// This operation is supported only when you are connected to the server.
	STATUS_ONLY_IF_CONNECTED = 0xC00002CC
	// Only an administrator can modify the membership list of an administrative group.
	STATUS_DS_SENSITIVE_GROUP_VIOLATION = 0xC00002CD
	// A device was removed so enumeration must be restarted.
	STATUS_PNP_RESTART_ENUMERATION = 0xC00002CE
	// The journal entry has been deleted from the journal.
	STATUS_JOURNAL_ENTRY_DELETED = 0xC00002CF
	// Cannot change the primary group ID of a domain controller account.
	STATUS_DS_CANT_MOD_PRIMARYGROUPID = 0xC00002D0
	// {Fatal System Error} The system image %s is not properly signed. The file has been replaced with the signed file. The system has been shut down.
	STATUS_SYSTEM_IMAGE_BAD_SIGNATURE = 0xC00002D1
	// The device will not start without a reboot.
	STATUS_PNP_REBOOT_REQUIRED = 0xC00002D2
	// The power state of the current device cannot support this request.
	STATUS_POWER_STATE_INVALID = 0xC00002D3
	// The specified group type is invalid.
	STATUS_DS_INVALID_GROUP_TYPE = 0xC00002D4
	// In a mixed domain, no nesting of a global group if the group is security enabled.
	STATUS_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN = 0xC00002D5
	// In a mixed domain, cannot nest local groups with other local groups, if the group is security enabled.
	STATUS_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN = 0xC00002D6
	// A global group cannot have a local group as a member.
	STATUS_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER = 0xC00002D7
	// A global group cannot have a universal group as a member.
	STATUS_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER = 0xC00002D8
	// A universal group cannot have a local group as a member.
	STATUS_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER = 0xC00002D9
	// A global group cannot have a cross-domain member.
	STATUS_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER = 0xC00002DA
	// A local group cannot have another cross-domain local group as a member.
	STATUS_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER = 0xC00002DB
	// Cannot change to a security-disabled group because primary members are in this group.
	STATUS_DS_HAVE_PRIMARY_MEMBERS = 0xC00002DC
	// The WMI operation is not supported by the data block or method.
	STATUS_WMI_NOT_SUPPORTED = 0xC00002DD
	// There is not enough power to complete the requested operation.
	STATUS_INSUFFICIENT_POWER = 0xC00002DE
	// The Security Accounts Manager needs to get the boot password.
	STATUS_SAM_NEED_BOOTKEY_PASSWORD = 0xC00002DF
	// The Security Accounts Manager needs to get the boot key from the floppy disk.
	STATUS_SAM_NEED_BOOTKEY_FLOPPY = 0xC00002E0
	// The directory service cannot start.
	STATUS_DS_CANT_START = 0xC00002E1
	// The directory service could not start because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Directory Services Restore Mode. Check the event log for more detailed information.
	STATUS_DS_INIT_FAILURE = 0xC00002E2
	// The Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down this system and restart in Safe Mode. Check the event log for more detailed information.
	STATUS_SAM_INIT_FAILURE = 0xC00002E3
	// The requested operation can be performed only on a global catalog server.
	STATUS_DS_GC_REQUIRED = 0xC00002E4
	// A local group can only be a member of other local groups in the same domain.
	STATUS_DS_LOCAL_MEMBER_OF_LOCAL_ONLY = 0xC00002E5
	// Foreign security principals cannot be members of universal groups.
	STATUS_DS_NO_FPO_IN_UNIVERSAL_GROUPS = 0xC00002E6
	// Your computer could not be joined to the domain. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. Contact your system administrator to have this limit reset or increased.
	STATUS_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED = 0xC00002E7
	// This operation cannot be performed on the current domain.
	STATUS_CURRENT_DOMAIN_NOT_ALLOWED = 0xC00002E9
	// The directory or file cannot be created.
	STATUS_CANNOT_MAKE = 0xC00002EA
	// The system is in the process of shutting down.
	STATUS_SYSTEM_SHUTDOWN = 0xC00002EB
	// Directory Services could not start because of the following error: %hs Error Status: 0x%x. Click OK to shut down the system. You can use the recovery console to diagnose the system further.
	STATUS_DS_INIT_FAILURE_CONSOLE = 0xC00002EC
	// Security Accounts Manager initialization failed because of the following error: %hs Error Status: 0x%x. Click OK to shut down the system. You can use the recovery console to diagnose the system further.
	STATUS_DS_SAM_INIT_FAILURE_CONSOLE = 0xC00002ED
	// A security context was deleted before the context was completed. This is considered a logon failure.
	STATUS_UNFINISHED_CONTEXT_DELETED = 0xC00002EE
	// The client is trying to negotiate a context and the server requires user-to-user but did not send a TGT reply.
	STATUS_NO_TGT_REPLY = 0xC00002EF
	// An object ID was not found in the file.
	STATUS_OBJECTID_NOT_FOUND = 0xC00002F0
	// Unable to accomplish the requested task because the local machine does not have any IP addresses.
	STATUS_NO_IP_ADDRESSES = 0xC00002F1
	// The supplied credential handle does not match the credential that is associated with the security context.
	STATUS_WRONG_CREDENTIAL_HANDLE = 0xC00002F2
	// The crypto system or checksum function is invalid because a required function is unavailable.
	STATUS_CRYPTO_SYSTEM_INVALID = 0xC00002F3
	// The number of maximum ticket referrals has been exceeded.
	STATUS_MAX_REFERRALS_EXCEEDED = 0xC00002F4
	// The local machine must be a Kerberos KDC (domain controller) and it is not.
	STATUS_MUST_BE_KDC = 0xC00002F5
	// The other end of the security negotiation requires strong crypto but it is not supported on the local machine.
	STATUS_STRONG_CRYPTO_NOT_SUPPORTED = 0xC00002F6
	// The KDC reply contained more than one principal name.
	STATUS_TOO_MANY_PRINCIPALS = 0xC00002F7
	// Expected to find PA data for a hint of what etype to use, but it was not found.
	STATUS_NO_PA_DATA = 0xC00002F8
	// The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Contact your administrator.
	STATUS_PKINIT_NAME_MISMATCH = 0xC00002F9
	// Smart card logon is required and was not used.
	STATUS_SMARTCARD_LOGON_REQUIRED = 0xC00002FA
	// An invalid request was sent to the KDC.
	STATUS_KDC_INVALID_REQUEST = 0xC00002FB
	// The KDC was unable to generate a referral for the service requested.
	STATUS_KDC_UNABLE_TO_REFER = 0xC00002FC
	// The encryption type requested is not supported by the KDC.
	STATUS_KDC_UNKNOWN_ETYPE = 0xC00002FD
	// A system shutdown is in progress.
	STATUS_SHUTDOWN_IN_PROGRESS = 0xC00002FE
	// The server machine is shutting down.
	STATUS_SERVER_SHUTDOWN_IN_PROGRESS = 0xC00002FF
	// This operation is not supported on a computer running Windows Server 2003 operating system for Small Business Server.
	STATUS_NOT_SUPPORTED_ON_SBS = 0xC0000300
	// The WMI GUID is no longer available.
	STATUS_WMI_GUID_DISCONNECTED = 0xC0000301
	// Collection or events for the WMI GUID is already disabled.
	STATUS_WMI_ALREADY_DISABLED = 0xC0000302
	// Collection or events for the WMI GUID is already enabled.
	STATUS_WMI_ALREADY_ENABLED = 0xC0000303
	// The master file table on the volume is too fragmented to complete this operation.
	STATUS_MFT_TOO_FRAGMENTED = 0xC0000304
	// Copy protection failure.
	STATUS_COPY_PROTECTION_FAILURE = 0xC0000305
	// Copy protection error—DVD CSS Authentication failed.
	STATUS_CSS_AUTHENTICATION_FAILURE = 0xC0000306
	// Copy protection error—The specified sector does not contain a valid key.
	STATUS_CSS_KEY_NOT_PRESENT = 0xC0000307
	// Copy protection error—DVD session key not established.
	STATUS_CSS_KEY_NOT_ESTABLISHED = 0xC0000308
	// Copy protection error—The read failed because the sector is encrypted.
	STATUS_CSS_SCRAMBLED_SECTOR = 0xC0000309
	// Copy protection error—The region of the specified DVD does not correspond to the region setting of the drive.
	STATUS_CSS_REGION_MISMATCH = 0xC000030A
	// Copy protection error—The region setting of the drive might be permanent.
	STATUS_CSS_RESETS_EXHAUSTED = 0xC000030B
	// The Kerberos protocol encountered an error while validating the KDC certificate during smart card logon. There is more information in the system event log.
	STATUS_PKINIT_FAILURE = 0xC0000320
	// The Kerberos protocol encountered an error while attempting to use the smart card subsystem.
	STATUS_SMARTCARD_SUBSYSTEM_FAILURE = 0xC0000321
	// The target server does not have acceptable Kerberos credentials.
	STATUS_NO_KERB_KEY = 0xC0000322
	// The transport determined that the remote system is down.
	STATUS_HOST_DOWN = 0xC0000350
	// An unsupported pre-authentication mechanism was presented to the Kerberos package.
	STATUS_UNSUPPORTED_PREAUTH = 0xC0000351
	// The encryption algorithm that is used on the source file needs a bigger key buffer than the one that is used on the destination file.
	STATUS_EFS_ALG_BLOB_TOO_BIG = 0xC0000352
	// An attempt to remove a processes DebugPort was made, but a port was not already associated with the process.
	STATUS_PORT_NOT_SET = 0xC0000353
	// An attempt to do an operation on a debug port failed because the port is in the process of being deleted.
	STATUS_DEBUGGER_INACTIVE = 0xC0000354
	// This version of Windows is not compatible with the behavior version of the directory forest, domain, or domain controller.
	STATUS_DS_VERSION_CHECK_FAILURE = 0xC0000355
	// The specified event is currently not being audited.
	STATUS_AUDITING_DISABLED = 0xC0000356
	// The machine account was created prior to Windows NT 4.0 operating system. The account needs to be recreated.
	STATUS_PRENT4_MACHINE_ACCOUNT = 0xC0000357
	// An account group cannot have a universal group as a member.
	STATUS_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER = 0xC0000358
	// The specified image file did not have the correct format; it appears to be a 32-bit Windows image.
	STATUS_INVALID_IMAGE_WIN_32 = 0xC0000359
	// The specified image file did not have the correct format; it appears to be a 64-bit Windows image.
	STATUS_INVALID_IMAGE_WIN_64 = 0xC000035A
	// The client's supplied SSPI channel bindings were incorrect.
	STATUS_BAD_BINDINGS = 0xC000035B
	// The client session has expired; so the client must re-authenticate to continue accessing the remote resources.
	STATUS_NETWORK_SESSION_EXPIRED = 0xC000035C
	// The AppHelp dialog box canceled; thus preventing the application from starting.
	STATUS_APPHELP_BLOCK = 0xC000035D
	// The SID filtering operation removed all SIDs.
	STATUS_ALL_SIDS_FILTERED = 0xC000035E
	// The driver was not loaded because the system is starting in safe mode.
	STATUS_NOT_SAFE_MODE_DRIVER = 0xC000035F
	// Access to %1 has been restricted by your Administrator by the default software restriction policy level.
	STATUS_ACCESS_DISABLED_BY_POLICY_DEFAULT = 0xC0000361
	// Access to %1 has been restricted by your Administrator by location with policy rule %2 placed on path %3.
	STATUS_ACCESS_DISABLED_BY_POLICY_PATH = 0xC0000362
	// Access to %1 has been restricted by your Administrator by software publisher policy.
	STATUS_ACCESS_DISABLED_BY_POLICY_PUBLISHER = 0xC0000363
	// Access to %1 has been restricted by your Administrator by policy rule %2.
	STATUS_ACCESS_DISABLED_BY_POLICY_OTHER = 0xC0000364
	// The driver was not loaded because it failed its initialization call.
	STATUS_FAILED_DRIVER_ENTRY = 0xC0000365
	// The device encountered an error while applying power or reading the device configuration. This might be caused by a failure of your hardware or by a poor connection.
	STATUS_DEVICE_ENUMERATION_ERROR = 0xC0000366
	// The create operation failed because the name contained at least one mount point that resolves to a volume to which the specified device object is not attached.
	STATUS_MOUNT_POINT_NOT_RESOLVED = 0xC0000368
	// The device object parameter is either not a valid device object or is not attached to the volume that is specified by the file name.
	STATUS_INVALID_DEVICE_OBJECT_PARAMETER = 0xC0000369
	// A machine check error has occurred. Check the system event log for additional information.
	STATUS_MCA_OCCURED = 0xC000036A
	// Driver %2 has been blocked from loading.
	STATUS_DRIVER_BLOCKED_CRITICAL = 0xC000036B
	// Driver %2 has been blocked from loading.
	STATUS_DRIVER_BLOCKED = 0xC000036C
	// There was error [%2] processing the driver database.
	STATUS_DRIVER_DATABASE_ERROR = 0xC000036D
	// System hive size has exceeded its limit.
	STATUS_SYSTEM_HIVE_TOO_LARGE = 0xC000036E
	// A dynamic link library (DLL) referenced a module that was neither a DLL nor the process's executable image.
	STATUS_INVALID_IMPORT_OF_NON_DLL = 0xC000036F
	// The local account store does not contain secret material for the specified account.
	STATUS_NO_SECRETS = 0xC0000371
	// Access to %1 has been restricted by your Administrator by policy rule %2.
	STATUS_ACCESS_DISABLED_NO_SAFER_UI_BY_POLICY = 0xC0000372
	// The system was not able to allocate enough memory to perform a stack switch.
	STATUS_FAILED_STACK_SWITCH = 0xC0000373
	// A heap has been corrupted.
	STATUS_HEAP_CORRUPTION = 0xC0000374
	// An incorrect PIN was presented to the smart card.
	STATUS_SMARTCARD_WRONG_PIN = 0xC0000380
	// The smart card is blocked.
	STATUS_SMARTCARD_CARD_BLOCKED = 0xC0000381
	// No PIN was presented to the smart card.
	STATUS_SMARTCARD_CARD_NOT_AUTHENTICATED = 0xC0000382
	// No smart card is available.
	STATUS_SMARTCARD_NO_CARD = 0xC0000383
	// The requested key container does not exist on the smart card.
	STATUS_SMARTCARD_NO_KEY_CONTAINER = 0xC0000384
	// The requested certificate does not exist on the smart card.
	STATUS_SMARTCARD_NO_CERTIFICATE = 0xC0000385
	// The requested keyset does not exist.
	STATUS_SMARTCARD_NO_KEYSET = 0xC0000386
	// A communication error with the smart card has been detected.
	STATUS_SMARTCARD_IO_ERROR = 0xC0000387
	// The system detected a possible attempt to compromise security. Ensure that you can contact the server that authenticated you.
	STATUS_DOWNGRADE_DETECTED = 0xC0000388
	// The smart card certificate used for authentication has been revoked. Contact your system administrator. There might be additional information in the event log.
	STATUS_SMARTCARD_CERT_REVOKED = 0xC0000389
	// An untrusted certificate authority was detected while processing the smart card certificate that is used for authentication. Contact your system administrator.
	STATUS_ISSUING_CA_UNTRUSTED = 0xC000038A
	// The revocation status of the smart card certificate that is used for authentication could not be determined. Contact your system administrator.
	STATUS_REVOCATION_OFFLINE_C = 0xC000038B
	// The smart card certificate used for authentication was not trusted. Contact your system administrator.
	STATUS_PKINIT_CLIENT_FAILURE = 0xC000038C
	// The smart card certificate used for authentication has expired. Contact your system administrator.
	STATUS_SMARTCARD_CERT_EXPIRED = 0xC000038D
	// The driver could not be loaded because a previous version of the driver is still in memory.
	STATUS_DRIVER_FAILED_PRIOR_UNLOAD = 0xC000038E
	// The smart card provider could not perform the action because the context was acquired as silent.
	STATUS_SMARTCARD_SILENT_CONTEXT = 0xC000038F
	// The delegated trust creation quota of the current user has been exceeded.
	STATUS_PER_USER_TRUST_QUOTA_EXCEEDED = 0xC0000401
	// The total delegated trust creation quota has been exceeded.
	STATUS_ALL_USER_TRUST_QUOTA_EXCEEDED = 0xC0000402
	// The delegated trust deletion quota of the current user has been exceeded.
	STATUS_USER_DELETE_TRUST_QUOTA_EXCEEDED = 0xC0000403
	// The requested name already exists as a unique identifier.
	STATUS_DS_NAME_NOT_UNIQUE = 0xC0000404
	// The requested object has a non-unique identifier and cannot be retrieved.
	STATUS_DS_DUPLICATE_ID_FOUND = 0xC0000405
	// The group cannot be converted due to attribute restrictions on the requested group type.
	STATUS_DS_GROUP_CONVERSION_ERROR = 0xC0000406
	// {Volume Shadow Copy Service} Wait while the Volume Shadow Copy Service prepares volume %hs for hibernation.
	STATUS_VOLSNAP_PREPARE_HIBERNATE = 0xC0000407
	// Kerberos sub-protocol User2User is required.
	STATUS_USER2USER_REQUIRED = 0xC0000408
	// The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.
	STATUS_STACK_BUFFER_OVERRUN = 0xC0000409
	// The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
	STATUS_NO_S4U_PROT_SUPPORT = 0xC000040A
	// An attempt was made by this server to make a Kerberos constrained delegation request for a target that is outside the server realm. This action is not supported and the resulting error indicates a misconfiguration on the allowed-to-delegate-to list for this server. Contact your administrator.
	STATUS_CROSSREALM_DELEGATION_FAILURE = 0xC000040B
	// The revocation status of the domain controller certificate used for smart card authentication could not be determined. There is additional information in the system event log. Contact your system administrator.
	STATUS_REVOCATION_OFFLINE_KDC = 0xC000040C
	// An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Contact your system administrator.
	STATUS_ISSUING_CA_UNTRUSTED_KDC = 0xC000040D
	// The domain controller certificate used for smart card logon has expired. Contact your system administrator with the contents of your system event log.
	STATUS_KDC_CERT_EXPIRED = 0xC000040E
	// The domain controller certificate used for smart card logon has been revoked. Contact your system administrator with the contents of your system event log.
	STATUS_KDC_CERT_REVOKED = 0xC000040F
	// Data present in one of the parameters is more than the function can operate on.
	STATUS_PARAMETER_QUOTA_EXCEEDED = 0xC0000410
	// The system has failed to hibernate (The error code is %hs). Hibernation will be disabled until the system is restarted.
	STATUS_HIBERNATION_FAILURE = 0xC0000411
	// An attempt to delay-load a .dll or get a function address in a delay-loaded .dll failed.
	STATUS_DELAY_LOAD_FAILED = 0xC0000412
	// Logon Failure: The machine you are logging onto is protected by an authentication firewall. The specified account is not allowed to authenticate to the machine.
	STATUS_AUTHENTICATION_FIREWALL_FAILED = 0xC0000413
	// %hs is a 16-bit application. You do not have permissions to execute 16-bit applications. Check your permissions with your system administrator.
	STATUS_VDM_DISALLOWED = 0xC0000414
	// {Display Driver Stopped Responding} The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the machine a dialog will be displayed giving you a chance to report this failure to Microsoft.
	STATUS_HUNG_DISPLAY_DRIVER_THREAD = 0xC0000415
	// The Desktop heap encountered an error while allocating session memory. There is more information in the system event log.
	STATUS_INSUFFICIENT_RESOURCE_FOR_SPECIFIED_SHARED_SECTION_SIZE = 0xC0000416
	// An invalid parameter was passed to a C runtime function.
	STATUS_INVALID_CRUNTIME_PARAMETER = 0xC0000417
	// The authentication failed because NTLM was blocked.
	STATUS_NTLM_BLOCKED = 0xC0000418
	// The source object's SID already exists in destination forest.
	STATUS_DS_SRC_SID_EXISTS_IN_FOREST = 0xC0000419
	// The domain name of the trusted domain already exists in the forest.
	STATUS_DS_DOMAIN_NAME_EXISTS_IN_FOREST = 0xC000041A
	// The flat name of the trusted domain already exists in the forest.
	STATUS_DS_FLAT_NAME_EXISTS_IN_FOREST = 0xC000041B
	// The User Principal Name (UPN) is invalid.
	STATUS_INVALID_USER_PRINCIPAL_NAME = 0xC000041C
	// There has been an assertion failure.
	STATUS_ASSERTION_FAILURE = 0xC0000420
	// Application verifier has found an error in the current process.
	STATUS_VERIFIER_STOP = 0xC0000421
	// A user mode unwind is in progress.
	STATUS_CALLBACK_POP_STACK = 0xC0000423
	// %2 has been blocked from loading due to incompatibility with this system. Contact your software vendor for a compatible version of the driver.
	STATUS_INCOMPATIBLE_DRIVER_BLOCKED = 0xC0000424
	// Illegal operation attempted on a registry key which has already been unloaded.
	STATUS_HIVE_UNLOADED = 0xC0000425
	// Compression is disabled for this volume.
	STATUS_COMPRESSION_DISABLED = 0xC0000426
	// The requested operation could not be completed due to a file system limitation.
	STATUS_FILE_SYSTEM_LIMITATION = 0xC0000427
	// The hash for image %hs cannot be found in the system catalogs. The image is likely corrupt or the victim of tampering.
	STATUS_INVALID_IMAGE_HASH = 0xC0000428
	// The implementation is not capable of performing the request.
	STATUS_NOT_CAPABLE = 0xC0000429
	// The requested operation is out of order with respect to other operations.
	STATUS_REQUEST_OUT_OF_SEQUENCE = 0xC000042A
	// An operation attempted to exceed an implementation-defined limit.
	STATUS_IMPLEMENTATION_LIMIT = 0xC000042B
	// The requested operation requires elevation.
	STATUS_ELEVATION_REQUIRED = 0xC000042C
	// The required security context does not exist.
	STATUS_NO_SECURITY_CONTEXT = 0xC000042D
	// The PKU2U protocol encountered an error while attempting to utilize the associated certificates.
	STATUS_PKU2U_CERT_FAILURE = 0xC000042E
	// The operation was attempted beyond the valid data length of the file.
	STATUS_BEYOND_VDL = 0xC0000432
	// The attempted write operation encountered a write already in progress for some portion of the range.
	STATUS_ENCOUNTERED_WRITE_IN_PROGRESS = 0xC0000433
	// The page fault mappings changed in the middle of processing a fault so the operation must be retried.
	STATUS_PTE_CHANGED = 0xC0000434
	// The attempt to purge this file from memory failed to purge some or all the data from memory.
	STATUS_PURGE_FAILED = 0xC0000435
	// The requested credential requires confirmation.
	STATUS_CRED_REQUIRES_CONFIRMATION = 0xC0000440
	// The remote server sent an invalid response for a file being opened with Client Side Encryption.
	STATUS_CS_ENCRYPTION_INVALID_SERVER_RESPONSE = 0xC0000441
	// Client Side Encryption is not supported by the remote server even though it claims to support it.
	STATUS_CS_ENCRYPTION_UNSUPPORTED_SERVER = 0xC0000442
	// File is encrypted and should be opened in Client Side Encryption mode.
	STATUS_CS_ENCRYPTION_EXISTING_ENCRYPTED_FILE = 0xC0000443
	// A new encrypted file is being created and a $EFS needs to be provided.
	STATUS_CS_ENCRYPTION_NEW_ENCRYPTED_FILE = 0xC0000444
	// The SMB client requested a CSE FSCTL on a non-CSE file.
	STATUS_CS_ENCRYPTION_FILE_NOT_CSE = 0xC0000445
	// Indicates a particular Security ID cannot be assigned as the label of an object.
	STATUS_INVALID_LABEL = 0xC0000446
	// The process hosting the driver for this device has terminated.
	STATUS_DRIVER_PROCESS_TERMINATED = 0xC0000450
	// The requested system device cannot be identified due to multiple indistinguishable devices potentially matching the identification criteria.
	STATUS_AMBIGUOUS_SYSTEM_DEVICE = 0xC0000451
	// The requested system device cannot be found.
	STATUS_SYSTEM_DEVICE_NOT_FOUND = 0xC0000452
	// This boot application must be restarted.
	STATUS_RESTART_BOOT_APPLICATION = 0xC0000453
	// Insufficient NVRAM resources exist to complete the API.  A reboot might be required.
	STATUS_INSUFFICIENT_NVRAM_RESOURCES = 0xC0000454
	// No ranges for the specified operation were able to be processed.
	STATUS_NO_RANGES_PROCESSED = 0xC0000460
	// The storage device does not support Offload Write.
	STATUS_DEVICE_FEATURE_NOT_SUPPORTED = 0xC0000463
	// Data cannot be moved because the source device cannot communicate with the destination device.
	STATUS_DEVICE_UNREACHABLE = 0xC0000464
	// The token representing the data is invalid or expired.
	STATUS_INVALID_TOKEN = 0xC0000465
	// The file server is temporarily unavailable.
	STATUS_SERVER_UNAVAILABLE = 0xC0000466
	// The file is temporarily unavailable.
	STATUS_FILE_NOT_AVAILABLE = 0xC0000467
	// The share is temporarily unavailable.
	STATUS_SHARE_UNAVAILABLE = 0xC0000480
	// The specified task name is invalid.
	STATUS_INVALID_TASK_NAME = 0xC0000500
	// The specified task index is invalid.
	STATUS_INVALID_TASK_INDEX = 0xC0000501
	// The specified thread is already joining a task.
	STATUS_THREAD_ALREADY_IN_TASK = 0xC0000502
	// A callback has requested to bypass native code.
	STATUS_CALLBACK_BYPASS = 0xC0000503
	// A fail fast exception occurred. Exception handlers will not be invoked and the process will be terminated immediately.
	STATUS_FAIL_FAST_EXCEPTION = 0xC0000602
	// Windows cannot verify the digital signature for this file. The signing certificate for this file has been revoked.
	STATUS_IMAGE_CERT_REVOKED = 0xC0000603
	// The ALPC port is closed.
	STATUS_PORT_CLOSED = 0xC0000700
	// The ALPC message requested is no longer available.
	STATUS_MESSAGE_LOST = 0xC0000701
	// The ALPC message supplied is invalid.
	STATUS_INVALID_MESSAGE = 0xC0000702
	// The ALPC message has been canceled.
	STATUS_REQUEST_CANCELED = 0xC0000703
	// Invalid recursive dispatch attempt.
	STATUS_RECURSIVE_DISPATCH = 0xC0000704
	// No receive buffer has been supplied in a synchronous request.
	STATUS_LPC_RECEIVE_BUFFER_EXPECTED = 0xC0000705
	// The connection port is used in an invalid context.
	STATUS_LPC_INVALID_CONNECTION_USAGE = 0xC0000706
	// The ALPC port does not accept new request messages.
	STATUS_LPC_REQUESTS_NOT_ALLOWED = 0xC0000707
	// The resource requested is already in use.
	STATUS_RESOURCE_IN_USE = 0xC0000708
	// The hardware has reported an uncorrectable memory error.
	STATUS_HARDWARE_MEMORY_ERROR = 0xC0000709
	// Status 0x%08x was returned, waiting on handle 0x%x for wait 0x%p, in waiter 0x%p.
	STATUS_THREADPOOL_HANDLE_EXCEPTION = 0xC000070A
	// After a callback to 0x%p(0x%p), a completion call to Set event(0x%p) failed with status 0x%08x.
	STATUS_THREADPOOL_SET_EVENT_ON_COMPLETION_FAILED = 0xC000070B
	// After a callback to 0x%p(0x%p), a completion call to ReleaseSemaphore(0x%p, %d) failed with status 0x%08x.
	STATUS_THREADPOOL_RELEASE_SEMAPHORE_ON_COMPLETION_FAILED = 0xC000070C
	// After a callback to 0x%p(0x%p), a completion call to ReleaseMutex(%p) failed with status 0x%08x.
	STATUS_THREADPOOL_RELEASE_MUTEX_ON_COMPLETION_FAILED = 0xC000070D
	// After a callback to 0x%p(0x%p), a completion call to FreeLibrary(%p) failed with status 0x%08x.
	STATUS_THREADPOOL_FREE_LIBRARY_ON_COMPLETION_FAILED = 0xC000070E
	// The thread pool 0x%p was released while a thread was posting a callback to 0x%p(0x%p) to it.
	STATUS_THREADPOOL_RELEASED_DURING_OPERATION = 0xC000070F
	// A thread pool worker thread is impersonating a client, after a callback to 0x%p(0x%p). This is unexpected, indicating that the callback is missing a call to revert the impersonation.
	STATUS_CALLBACK_RETURNED_WHILE_IMPERSONATING = 0xC0000710
	// A thread pool worker thread is impersonating a client, after executing an APC. This is unexpected, indicating that the APC is missing a call to revert the impersonation.
	STATUS_APC_RETURNED_WHILE_IMPERSONATING = 0xC0000711
	// Either the target process, or the target thread's containing process, is a protected process.
	STATUS_PROCESS_IS_PROTECTED = 0xC0000712
	// A thread is getting dispatched with MCA EXCEPTION because of MCA.
	STATUS_MCA_EXCEPTION = 0xC0000713
	// The client certificate account mapping is not unique.
	STATUS_CERTIFICATE_MAPPING_NOT_UNIQUE = 0xC0000714
	// The symbolic link cannot be followed because its type is disabled.
	STATUS_SYMLINK_CLASS_DISABLED = 0xC0000715
	// Indicates that the specified string is not valid for IDN normalization.
	STATUS_INVALID_IDN_NORMALIZATION = 0xC0000716
	// No mapping for the Unicode character exists in the target multi-byte code page.
	STATUS_NO_UNICODE_TRANSLATION = 0xC0000717
	// The provided callback is already registered.
	STATUS_ALREADY_REGISTERED = 0xC0000718
	// The provided context did not match the target.
	STATUS_CONTEXT_MISMATCH = 0xC0000719
	// The specified port already has a completion list.
	STATUS_PORT_ALREADY_HAS_COMPLETION_LIST = 0xC000071A
	// A threadpool worker thread entered a callback at thread base priority 0x%x and exited at priority 0x%x.This is unexpected, indicating that the callback missed restoring the priority.
	STATUS_CALLBACK_RETURNED_THREAD_PRIORITY = 0xC000071B
	// An invalid thread, handle %p, is specified for this operation. Possibly, a threadpool worker thread was specified.
	STATUS_INVALID_THREAD = 0xC000071C
	// A threadpool worker thread entered a callback, which left transaction state.This is unexpected, indicating that the callback missed clearing the transaction.
	STATUS_CALLBACK_RETURNED_TRANSACTION = 0xC000071D
	// A threadpool worker thread entered a callback, which left the loader lock held.This is unexpected, indicating that the callback missed releasing the lock.
	STATUS_CALLBACK_RETURNED_LDR_LOCK = 0xC000071E
	// A threadpool worker thread entered a callback, which left with preferred languages set.This is unexpected, indicating that the callback missed clearing them.
	STATUS_CALLBACK_RETURNED_LANG = 0xC000071F
	// A threadpool worker thread entered a callback, which left with background priorities set.This is unexpected, indicating that the callback missed restoring the original priorities.
	STATUS_CALLBACK_RETURNED_PRI_BACK = 0xC0000720
	// A threadpool worker thread entered a callback at thread affinity %p and exited at affinity %p.This is unexpected, indicating that the callback missed restoring the priority.
	STATUS_CALLBACK_RETURNED_THREAD_AFFINITY = 0xC0000721
	// The attempted operation required self healing to be enabled.
	STATUS_DISK_REPAIR_DISABLED = 0xC0000800
	// The directory service cannot perform the requested operation because a domain rename operation is in progress.
	STATUS_DS_DOMAIN_RENAME_IN_PROGRESS = 0xC0000801
	// An operation failed because the storage quota was exceeded.
	STATUS_DISK_QUOTA_EXCEEDED = 0xC0000802
	// An operation failed because the content was blocked.
	STATUS_CONTENT_BLOCKED = 0xC0000804
	// The operation could not be completed due to bad clusters on disk.
	STATUS_BAD_CLUSTERS = 0xC0000805
	// The operation could not be completed because the volume is dirty. Please run the Chkdsk utility and try again.
	STATUS_VOLUME_DIRTY = 0xC0000806
	// This file is checked out or locked for editing by another user.
	STATUS_FILE_CHECKED_OUT = 0xC0000901
	// The file must be checked out before saving changes.
	STATUS_CHECKOUT_REQUIRED = 0xC0000902
	// The file type being saved or retrieved has been blocked.
	STATUS_BAD_FILE_TYPE = 0xC0000903
	// The file size exceeds the limit allowed and cannot be saved.
	STATUS_FILE_TOO_LARGE = 0xC0000904
	// Access Denied. Before opening files in this location, you must first browse to the e.g. site and select the option to log on automatically.
	STATUS_FORMS_AUTH_REQUIRED = 0xC0000905
	// The operation did not complete successfully because the file contains a virus.
	STATUS_VIRUS_INFECTED = 0xC0000906
	// This file contains a virus and cannot be opened. Due to the nature of this virus, the file has been removed from this location.
	STATUS_VIRUS_DELETED = 0xC0000907
	// The resources required for this device conflict with the MCFG table.
	STATUS_BAD_MCFG_TABLE = 0xC0000908
	// The operation did not complete successfully because it would cause an oplock to be broken. The caller has requested that existing oplocks not be broken.
	STATUS_CANNOT_BREAK_OPLOCK = 0xC0000909
	// WOW Assertion Error.
	STATUS_WOW_ASSERTION = 0xC0009898
	// The cryptographic signature is invalid.
	STATUS_INVALID_SIGNATURE = 0xC000A000
	// The cryptographic provider does not support HMAC.
	STATUS_HMAC_NOT_SUPPORTED = 0xC000A001
	// The IPsec queue overflowed.
	STATUS_IPSEC_QUEUE_OVERFLOW = 0xC000A010
	// The neighbor discovery queue overflowed.
	STATUS_ND_QUEUE_OVERFLOW = 0xC000A011
	// An Internet Control Message Protocol (ICMP) hop limit exceeded error was received.
	STATUS_HOPLIMIT_EXCEEDED = 0xC000A012
	// The protocol is not installed on the local machine.
	STATUS_PROTOCOL_NOT_SUPPORTED = 0xC000A013
	// {Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error might be caused by network connectivity issues. Try to save this file elsewhere.
	STATUS_LOST_WRITEBEHIND_DATA_NETWORK_DISCONNECTED = 0xC000A080
	// {Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error was returned by the server on which the file exists. Try to save this file elsewhere.
	STATUS_LOST_WRITEBEHIND_DATA_NETWORK_SERVER_ERROR = 0xC000A081
	// {Delayed Write Failed} Windows was unable to save all the data for the file %hs; the data has been lost. This error might be caused if the device has been removed or the media is write-protected.
	STATUS_LOST_WRITEBEHIND_DATA_LOCAL_DISK_ERROR = 0xC000A082
	// Windows was unable to parse the requested XML data.
	STATUS_XML_PARSE_ERROR = 0xC000A083
	// An error was encountered while processing an XML digital signature.
	STATUS_XMLDSIG_ERROR = 0xC000A084
	// This indicates that the caller made the connection request in the wrong routing compartment.
	STATUS_WRONG_COMPARTMENT = 0xC000A085
	// This indicates that there was an AuthIP failure when attempting to connect to the remote host.
	STATUS_AUTHIP_FAILURE = 0xC000A086
	// OID mapped groups cannot have members.
	STATUS_DS_OID_MAPPED_GROUP_CANT_HAVE_MEMBERS = 0xC000A087
	// The specified OID cannot be found.
	STATUS_DS_OID_NOT_FOUND = 0xC000A088
	// Hash generation for the specified version and hash type is not enabled on server.
	STATUS_HASH_NOT_SUPPORTED = 0xC000A100
	// The hash requests is not present or not up to date with the current file contents.
	STATUS_HASH_NOT_PRESENT = 0xC000A101
	// A file system filter on the server has not opted in for Offload Read support.
	STATUS_OFFLOAD_READ_FLT_NOT_SUPPORTED = 0xC000A2A1
	// A file system filter on the server has not opted in for Offload Write support.
	STATUS_OFFLOAD_WRITE_FLT_NOT_SUPPORTED = 0xC000A2A2
	// Offload read operations cannot be performed on: Compressed files Sparse files Encrypted files File system metadata files
	STATUS_OFFLOAD_READ_FILE_NOT_SUPPORTED = 0xC000A2A3
	// Offload write operations cannot be performed on: Compressed files Sparse files Encrypted files File system metadata files
	STATUS_OFFLOAD_WRITE_FILE_NOT_SUPPORTED = 0xC000A2A4
	// The debugger did not perform a state change.
	DBG_NO_STATE_CHANGE = 0xC0010001
	// The debugger found that the application is not idle.
	DBG_APP_NOT_IDLE = 0xC0010002
	// The string binding is invalid.
	RPC_NT_INVALID_STRING_BINDING = 0xC0020001
	// The binding handle is not the correct type.
	RPC_NT_WRONG_KIND_OF_BINDING = 0xC0020002
	// The binding handle is invalid.
	RPC_NT_INVALID_BINDING = 0xC0020003
	// The RPC protocol sequence is not supported.
	RPC_NT_PROTSEQ_NOT_SUPPORTED = 0xC0020004
	// The RPC protocol sequence is invalid.
	RPC_NT_INVALID_RPC_PROTSEQ = 0xC0020005
	// The string UUID is invalid.
	RPC_NT_INVALID_STRING_UUID = 0xC0020006
	// The endpoint format is invalid.
	RPC_NT_INVALID_ENDPOINT_FORMAT = 0xC0020007
	// The network address is invalid.
	RPC_NT_INVALID_NET_ADDR = 0xC0020008
	// No endpoint was found.
	RPC_NT_NO_ENDPOINT_FOUND = 0xC0020009
	// The time-out value is invalid.
	RPC_NT_INVALID_TIMEOUT = 0xC002000A
	// The object UUID was not found.
	RPC_NT_OBJECT_NOT_FOUND = 0xC002000B
	// The object UUID has already been registered.
	RPC_NT_ALREADY_REGISTERED = 0xC002000C
	// The type UUID has already been registered.
	RPC_NT_TYPE_ALREADY_REGISTERED = 0xC002000D
	// The RPC server is already listening.
	RPC_NT_ALREADY_LISTENING = 0xC002000E
	// No protocol sequences have been registered.
	RPC_NT_NO_PROTSEQS_REGISTERED = 0xC002000F
	// The RPC server is not listening.
	RPC_NT_NOT_LISTENING = 0xC0020010
	// The manager type is unknown.
	RPC_NT_UNKNOWN_MGR_TYPE = 0xC0020011
	// The interface is unknown.
	RPC_NT_UNKNOWN_IF = 0xC0020012
	// There are no bindings.
	RPC_NT_NO_BINDINGS = 0xC0020013
	// There are no protocol sequences.
	RPC_NT_NO_PROTSEQS = 0xC0020014
	// The endpoint cannot be created.
	RPC_NT_CANT_CREATE_ENDPOINT = 0xC0020015
	// Insufficient resources are available to complete this operation.
	RPC_NT_OUT_OF_RESOURCES = 0xC0020016
	// The RPC server is unavailable.
	RPC_NT_SERVER_UNAVAILABLE = 0xC0020017
	// The RPC server is too busy to complete this operation.
	RPC_NT_SERVER_TOO_BUSY = 0xC0020018
	// The network options are invalid.
	RPC_NT_INVALID_NETWORK_OPTIONS = 0xC0020019
	// No RPCs are active on this thread.
	RPC_NT_NO_CALL_ACTIVE = 0xC002001A
	// The RPC failed.
	RPC_NT_CALL_FAILED = 0xC002001B
	// The RPC failed and did not execute.
	RPC_NT_CALL_FAILED_DNE = 0xC002001C
	// An RPC protocol error occurred.
	RPC_NT_PROTOCOL_ERROR = 0xC002001D
	// The RPC server does not support the transfer syntax.
	RPC_NT_UNSUPPORTED_TRANS_SYN = 0xC002001F
	// The type UUID is not supported.
	RPC_NT_UNSUPPORTED_TYPE = 0xC0020021
	// The tag is invalid.
	RPC_NT_INVALID_TAG = 0xC0020022
	// The array bounds are invalid.
	RPC_NT_INVALID_BOUND = 0xC0020023
	// The binding does not contain an entry name.
	RPC_NT_NO_ENTRY_NAME = 0xC0020024
	// The name syntax is invalid.
	RPC_NT_INVALID_NAME_SYNTAX = 0xC0020025
	// The name syntax is not supported.
	RPC_NT_UNSUPPORTED_NAME_SYNTAX = 0xC0020026
	// No network address is available to construct a UUID.
	RPC_NT_UUID_NO_ADDRESS = 0xC0020028
	// The endpoint is a duplicate.
	RPC_NT_DUPLICATE_ENDPOINT = 0xC0020029
	// The authentication type is unknown.
	RPC_NT_UNKNOWN_AUTHN_TYPE = 0xC002002A
	// The maximum number of calls is too small.
	RPC_NT_MAX_CALLS_TOO_SMALL = 0xC002002B
	// The string is too long.
	RPC_NT_STRING_TOO_LONG = 0xC002002C
	// The RPC protocol sequence was not found.
	RPC_NT_PROTSEQ_NOT_FOUND = 0xC002002D
	// The procedure number is out of range.
	RPC_NT_PROCNUM_OUT_OF_RANGE = 0xC002002E
	// The binding does not contain any authentication information.
	RPC_NT_BINDING_HAS_NO_AUTH = 0xC002002F
	// The authentication service is unknown.
	RPC_NT_UNKNOWN_AUTHN_SERVICE = 0xC0020030
	// The authentication level is unknown.
	RPC_NT_UNKNOWN_AUTHN_LEVEL = 0xC0020031
	// The security context is invalid.
	RPC_NT_INVALID_AUTH_IDENTITY = 0xC0020032
	// The authorization service is unknown.
	RPC_NT_UNKNOWN_AUTHZ_SERVICE = 0xC0020033
	// The entry is invalid.
	EPT_NT_INVALID_ENTRY = 0xC0020034
	// The operation cannot be performed.
	EPT_NT_CANT_PERFORM_OP = 0xC0020035
	// No more endpoints are available from the endpoint mapper.
	EPT_NT_NOT_REGISTERED = 0xC0020036
	// No interfaces have been exported.
	RPC_NT_NOTHING_TO_EXPORT = 0xC0020037
	// The entry name is incomplete.
	RPC_NT_INCOMPLETE_NAME = 0xC0020038
	// The version option is invalid.
	RPC_NT_INVALID_VERS_OPTION = 0xC0020039
	// There are no more members.
	RPC_NT_NO_MORE_MEMBERS = 0xC002003A
	// There is nothing to unexport.
	RPC_NT_NOT_ALL_OBJS_UNEXPORTED = 0xC002003B
	// The interface was not found.
	RPC_NT_INTERFACE_NOT_FOUND = 0xC002003C
	// The entry already exists.
	RPC_NT_ENTRY_ALREADY_EXISTS = 0xC002003D
	// The entry was not found.
	RPC_NT_ENTRY_NOT_FOUND = 0xC002003E
	// The name service is unavailable.
	RPC_NT_NAME_SERVICE_UNAVAILABLE = 0xC002003F
	// The network address family is invalid.
	RPC_NT_INVALID_NAF_ID = 0xC0020040
	// The requested operation is not supported.
	RPC_NT_CANNOT_SUPPORT = 0xC0020041
	// No security context is available to allow impersonation.
	RPC_NT_NO_CONTEXT_AVAILABLE = 0xC0020042
	// An internal error occurred in the RPC.
	RPC_NT_INTERNAL_ERROR = 0xC0020043
	// The RPC server attempted to divide an integer by zero.
	RPC_NT_ZERO_DIVIDE = 0xC0020044
	// An addressing error occurred in the RPC server.
	RPC_NT_ADDRESS_ERROR = 0xC0020045
	// A floating point operation at the RPC server caused a divide by zero.
	RPC_NT_FP_DIV_ZERO = 0xC0020046
	// A floating point underflow occurred at the RPC server.
	RPC_NT_FP_UNDERFLOW = 0xC0020047
	// A floating point overflow occurred at the RPC server.
	RPC_NT_FP_OVERFLOW = 0xC0020048
	// An RPC is already in progress for this thread.
	RPC_NT_CALL_IN_PROGRESS = 0xC0020049
	// There are no more bindings.
	RPC_NT_NO_MORE_BINDINGS = 0xC002004A
	// The group member was not found.
	RPC_NT_GROUP_MEMBER_NOT_FOUND = 0xC002004B
	// The endpoint mapper database entry could not be created.
	EPT_NT_CANT_CREATE = 0xC002004C
	// The object UUID is the nil UUID.
	RPC_NT_INVALID_OBJECT = 0xC002004D
	// No interfaces have been registered.
	RPC_NT_NO_INTERFACES = 0xC002004F
	// The RPC was canceled.
	RPC_NT_CALL_CANCELLED = 0xC0020050
	// The binding handle does not contain all the required information.
	RPC_NT_BINDING_INCOMPLETE = 0xC0020051
	// A communications failure occurred during an RPC.
	RPC_NT_COMM_FAILURE = 0xC0020052
	// The requested authentication level is not supported.
	RPC_NT_UNSUPPORTED_AUTHN_LEVEL = 0xC0020053
	// No principal name was registered.
	RPC_NT_NO_PRINC_NAME = 0xC0020054
	// The error specified is not a valid Windows RPC error code.
	RPC_NT_NOT_RPC_ERROR = 0xC0020055
	// A security package-specific error occurred.
	RPC_NT_SEC_PKG_ERROR = 0xC0020057
	// The thread was not canceled.
	RPC_NT_NOT_CANCELLED = 0xC0020058
	// Invalid asynchronous RPC handle.
	RPC_NT_INVALID_ASYNC_HANDLE = 0xC0020062
	// Invalid asynchronous RPC call handle for this operation.
	RPC_NT_INVALID_ASYNC_CALL = 0xC0020063
	// Access to the HTTP proxy is denied.
	RPC_NT_PROXY_ACCESS_DENIED = 0xC0020064
	// The list of RPC servers available for auto-handle binding has been exhausted.
	RPC_NT_NO_MORE_ENTRIES = 0xC0030001
	// The file designated by DCERPCCHARTRANS cannot be opened.
	RPC_NT_SS_CHAR_TRANS_OPEN_FAIL = 0xC0030002
	// The file containing the character translation table has fewer than 512 bytes.
	RPC_NT_SS_CHAR_TRANS_SHORT_FILE = 0xC0030003
	// A null context handle is passed as an [in] parameter.
	RPC_NT_SS_IN_NULL_CONTEXT = 0xC0030004
	// The context handle does not match any known context handles.
	RPC_NT_SS_CONTEXT_MISMATCH = 0xC0030005
	// The context handle changed during a call.
	RPC_NT_SS_CONTEXT_DAMAGED = 0xC0030006
	// The binding handles passed to an RPC do not match.
	RPC_NT_SS_HANDLES_MISMATCH = 0xC0030007
	// The stub is unable to get the call handle.
	RPC_NT_SS_CANNOT_GET_CALL_HANDLE = 0xC0030008
	// A null reference pointer was passed to the stub.
	RPC_NT_NULL_REF_POINTER = 0xC0030009
	// The enumeration value is out of range.
	RPC_NT_ENUM_VALUE_OUT_OF_RANGE = 0xC003000A
	// The byte count is too small.
	RPC_NT_BYTE_COUNT_TOO_SMALL = 0xC003000B
	// The stub received bad data.
	RPC_NT_BAD_STUB_DATA = 0xC003000C
	// Invalid operation on the encoding/decoding handle.
	RPC_NT_INVALID_ES_ACTION = 0xC0030059
	// Incompatible version of the serializing package.
	RPC_NT_WRONG_ES_VERSION = 0xC003005A
	// Incompatible version of the RPC stub.
	RPC_NT_WRONG_STUB_VERSION = 0xC003005B
	// The RPC pipe object is invalid or corrupt.
	RPC_NT_INVALID_PIPE_OBJECT = 0xC003005C
	// An invalid operation was attempted on an RPC pipe object.
	RPC_NT_INVALID_PIPE_OPERATION = 0xC003005D
	// Unsupported RPC pipe version.
	RPC_NT_WRONG_PIPE_VERSION = 0xC003005E
	// The RPC pipe object has already been closed.
	RPC_NT_PIPE_CLOSED = 0xC003005F
	// The RPC call completed before all pipes were processed.
	RPC_NT_PIPE_DISCIPLINE_ERROR = 0xC0030060
	// No more data is available from the RPC pipe.
	RPC_NT_PIPE_EMPTY = 0xC0030061
	// A device is missing in the system BIOS MPS table. This device will not be used. Contact your system vendor for a system BIOS update.
	STATUS_PNP_BAD_MPS_TABLE = 0xC0040035
	// A translator failed to translate resources.
	STATUS_PNP_TRANSLATION_FAILED = 0xC0040036
	// An IRQ translator failed to translate resources.
	STATUS_PNP_IRQ_TRANSLATION_FAILED = 0xC0040037
	// Driver %2 returned an invalid ID for a child device (%3).
	STATUS_PNP_INVALID_ID = 0xC0040038
	// Reissue the given operation as a cached I/O operation
	STATUS_IO_REISSUE_AS_CACHED = 0xC0040039
	// Session name %1 is invalid.
	STATUS_CTX_WINSTATION_NAME_INVALID = 0xC00A0001
	// The protocol driver %1 is invalid.
	STATUS_CTX_INVALID_PD = 0xC00A0002
	// The protocol driver %1 was not found in the system path.
	STATUS_CTX_PD_NOT_FOUND = 0xC00A0003
	// A close operation is pending on the terminal connection.
	STATUS_CTX_CLOSE_PENDING = 0xC00A0006
	// No free output buffers are available.
	STATUS_CTX_NO_OUTBUF = 0xC00A0007
	// The MODEM.INF file was not found.
	STATUS_CTX_MODEM_INF_NOT_FOUND = 0xC00A0008
	// The modem (%1) was not found in the MODEM.INF file.
	STATUS_CTX_INVALID_MODEMNAME = 0xC00A0009
	// The modem did not accept the command sent to it. Verify that the configured modem name matches the attached modem.
	STATUS_CTX_RESPONSE_ERROR = 0xC00A000A
	// The modem did not respond to the command sent to it. Verify that the modem cable is properly attached and the modem is turned on.
	STATUS_CTX_MODEM_RESPONSE_TIMEOUT = 0xC00A000B
	// Carrier detection has failed or the carrier has been dropped due to disconnection.
	STATUS_CTX_MODEM_RESPONSE_NO_CARRIER = 0xC00A000C
	// A dial tone was not detected within the required time. Verify that the phone cable is properly attached and functional.
	STATUS_CTX_MODEM_RESPONSE_NO_DIALTONE = 0xC00A000D
	// A busy signal was detected at a remote site on callback.
	STATUS_CTX_MODEM_RESPONSE_BUSY = 0xC00A000E
	// A voice was detected at a remote site on callback.
	STATUS_CTX_MODEM_RESPONSE_VOICE = 0xC00A000F
	// Transport driver error.
	STATUS_CTX_TD_ERROR = 0xC00A0010
	// The client you are using is not licensed to use this system. Your logon request is denied.
	STATUS_CTX_LICENSE_CLIENT_INVALID = 0xC00A0012
	// The system has reached its licensed logon limit. Try again later.
	STATUS_CTX_LICENSE_NOT_AVAILABLE = 0xC00A0013
	// The system license has expired. Your logon request is denied.
	STATUS_CTX_LICENSE_EXPIRED = 0xC00A0014
	// The specified session cannot be found.
	STATUS_CTX_WINSTATION_NOT_FOUND = 0xC00A0015
	// The specified session name is already in use.
	STATUS_CTX_WINSTATION_NAME_COLLISION = 0xC00A0016
	// The requested operation cannot be completed because the terminal connection is currently processing a connect, disconnect, reset, or delete operation.
	STATUS_CTX_WINSTATION_BUSY = 0xC00A0017
	// An attempt has been made to connect to a session whose video mode is not supported by the current client.
	STATUS_CTX_BAD_VIDEO_MODE = 0xC00A0018
	// The application attempted to enable DOS graphics mode. DOS graphics mode is not supported.
	STATUS_CTX_GRAPHICS_INVALID = 0xC00A0022
	// The requested operation can be performed only on the system console. This is most often the result of a driver or system DLL requiring direct console access.
	STATUS_CTX_NOT_CONSOLE = 0xC00A0024
	// The client failed to respond to the server connect message.
	STATUS_CTX_CLIENT_QUERY_TIMEOUT = 0xC00A0026
	// Disconnecting the console session is not supported.
	STATUS_CTX_CONSOLE_DISCONNECT = 0xC00A0027
	// Reconnecting a disconnected session to the console is not supported.
	STATUS_CTX_CONSOLE_CONNECT = 0xC00A0028
	// The request to control another session remotely was denied.
	STATUS_CTX_SHADOW_DENIED = 0xC00A002A
	// A process has requested access to a session, but has not been granted those access rights.
	STATUS_CTX_WINSTATION_ACCESS_DENIED = 0xC00A002B
	// The terminal connection driver %1 is invalid.
	STATUS_CTX_INVALID_WD = 0xC00A002E
	// The terminal connection driver %1 was not found in the system path.
	STATUS_CTX_WD_NOT_FOUND = 0xC00A002F
	// The requested session cannot be controlled remotely. You cannot control your own session, a session that is trying to control your session, a session that has no user logged on, or other sessions from the console.
	STATUS_CTX_SHADOW_INVALID = 0xC00A0030
	// The requested session is not configured to allow remote control.
	STATUS_CTX_SHADOW_DISABLED = 0xC00A0031
	// The RDP protocol component %2 detected an error in the protocol stream and has disconnected the client.
	STATUS_RDP_PROTOCOL_ERROR = 0xC00A0032
	// Your request to connect to this terminal server has been rejected. Your terminal server client license number has not been entered for this copy of the terminal client. Contact your system administrator for help in entering a valid, unique license number for this terminal server client. Click OK to continue.
	STATUS_CTX_CLIENT_LICENSE_NOT_SET = 0xC00A0033
	// Your request to connect to this terminal server has been rejected. Your terminal server client license number is currently being used by another user. Contact your system administrator to obtain a new copy of the terminal server client with a valid, unique license number. Click OK to continue.
	STATUS_CTX_CLIENT_LICENSE_IN_USE = 0xC00A0034
	// The remote control of the console was terminated because the display mode was changed. Changing the display mode in a remote control session is not supported.
	STATUS_CTX_SHADOW_ENDED_BY_MODE_CHANGE = 0xC00A0035
	// Remote control could not be terminated because the specified session is not currently being remotely controlled.
	STATUS_CTX_SHADOW_NOT_RUNNING = 0xC00A0036
	// Your interactive logon privilege has been disabled. Contact your system administrator.
	STATUS_CTX_LOGON_DISABLED = 0xC00A0037
	// The terminal server security layer detected an error in the protocol stream and has disconnected the client.
	STATUS_CTX_SECURITY_LAYER_ERROR = 0xC00A0038
	// The target session is incompatible with the current session.
	STATUS_TS_INCOMPATIBLE_SESSIONS = 0xC00A0039
	// The resource loader failed to find an MUI file.
	STATUS_MUI_FILE_NOT_FOUND = 0xC00B0001
	// The resource loader failed to load an MUI file because the file failed to pass validation.
	STATUS_MUI_INVALID_FILE = 0xC00B0002
	// The RC manifest is corrupted with garbage data, is an unsupported version, or is missing a required item.
	STATUS_MUI_INVALID_RC_CONFIG = 0xC00B0003
	// The RC manifest has an invalid culture name.
	STATUS_MUI_INVALID_LOCALE_NAME = 0xC00B0004
	// The RC manifest has and invalid ultimate fallback name.
	STATUS_MUI_INVALID_ULTIMATEFALLBACK_NAME = 0xC00B0005
	// The resource loader cache does not have a loaded MUI entry.
	STATUS_MUI_FILE_NOT_LOADED = 0xC00B0006
	// The user stopped resource enumeration.
	STATUS_RESOURCE_ENUM_USER_STOP = 0xC00B0007
	// The cluster node is not valid.
	STATUS_CLUSTER_INVALID_NODE = 0xC0130001
	// The cluster node already exists.
	STATUS_CLUSTER_NODE_EXISTS = 0xC0130002
	// A node is in the process of joining the cluster.
	STATUS_CLUSTER_JOIN_IN_PROGRESS = 0xC0130003
	// The cluster node was not found.
	STATUS_CLUSTER_NODE_NOT_FOUND = 0xC0130004
	// The cluster local node information was not found.
	STATUS_CLUSTER_LOCAL_NODE_NOT_FOUND = 0xC0130005
	// The cluster network already exists.
	STATUS_CLUSTER_NETWORK_EXISTS = 0xC0130006
	// The cluster network was not found.
	STATUS_CLUSTER_NETWORK_NOT_FOUND = 0xC0130007
	// The cluster network interface already exists.
	STATUS_CLUSTER_NETINTERFACE_EXISTS = 0xC0130008
	// The cluster network interface was not found.
	STATUS_CLUSTER_NETINTERFACE_NOT_FOUND = 0xC0130009
	// The cluster request is not valid for this object.
	STATUS_CLUSTER_INVALID_REQUEST = 0xC013000A
	// The cluster network provider is not valid.
	STATUS_CLUSTER_INVALID_NETWORK_PROVIDER = 0xC013000B
	// The cluster node is down.
	STATUS_CLUSTER_NODE_DOWN = 0xC013000C
	// The cluster node is not reachable.
	STATUS_CLUSTER_NODE_UNREACHABLE = 0xC013000D
	// The cluster node is not a member of the cluster.
	STATUS_CLUSTER_NODE_NOT_MEMBER = 0xC013000E
	// A cluster join operation is not in progress.
	STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS = 0xC013000F
	// The cluster network is not valid.
	STATUS_CLUSTER_INVALID_NETWORK = 0xC0130010
	// No network adapters are available.
	STATUS_CLUSTER_NO_NET_ADAPTERS = 0xC0130011
	// The cluster node is up.
	STATUS_CLUSTER_NODE_UP = 0xC0130012
	// The cluster node is paused.
	STATUS_CLUSTER_NODE_PAUSED = 0xC0130013
	// The cluster node is not paused.
	STATUS_CLUSTER_NODE_NOT_PAUSED = 0xC0130014
	// No cluster security context is available.
	STATUS_CLUSTER_NO_SECURITY_CONTEXT = 0xC0130015
	// The cluster network is not configured for internal cluster communication.
	STATUS_CLUSTER_NETWORK_NOT_INTERNAL = 0xC0130016
	// The cluster node has been poisoned.
	STATUS_CLUSTER_POISONED = 0xC0130017
	// An attempt was made to run an invalid AML opcode.
	STATUS_ACPI_INVALID_OPCODE = 0xC0140001
	// The AML interpreter stack has overflowed.
	STATUS_ACPI_STACK_OVERFLOW = 0xC0140002
	// An inconsistent state has occurred.
	STATUS_ACPI_ASSERT_FAILED = 0xC0140003
	// An attempt was made to access an array outside its bounds.
	STATUS_ACPI_INVALID_INDEX = 0xC0140004
	// A required argument was not specified.
	STATUS_ACPI_INVALID_ARGUMENT = 0xC0140005
	// A fatal error has occurred.
	STATUS_ACPI_FATAL = 0xC0140006
	// An invalid SuperName was specified.
	STATUS_ACPI_INVALID_SUPERNAME = 0xC0140007
	// An argument with an incorrect type was specified.
	STATUS_ACPI_INVALID_ARGTYPE = 0xC0140008
	// An object with an incorrect type was specified.
	STATUS_ACPI_INVALID_OBJTYPE = 0xC0140009
	// A target with an incorrect type was specified.
	STATUS_ACPI_INVALID_TARGETTYPE = 0xC014000A
	// An incorrect number of arguments was specified.
	STATUS_ACPI_INCORRECT_ARGUMENT_COUNT = 0xC014000B
	// An address failed to translate.
	STATUS_ACPI_ADDRESS_NOT_MAPPED = 0xC014000C
	// An incorrect event type was specified.
	STATUS_ACPI_INVALID_EVENTTYPE = 0xC014000D
	// A handler for the target already exists.
	STATUS_ACPI_HANDLER_COLLISION = 0xC014000E
	// Invalid data for the target was specified.
	STATUS_ACPI_INVALID_DATA = 0xC014000F
	// An invalid region for the target was specified.
	STATUS_ACPI_INVALID_REGION = 0xC0140010
	// An attempt was made to access a field outside the defined range.
	STATUS_ACPI_INVALID_ACCESS_SIZE = 0xC0140011
	// The global system lock could not be acquired.
	STATUS_ACPI_ACQUIRE_GLOBAL_LOCK = 0xC0140012
	// An attempt was made to reinitialize the ACPI subsystem.
	STATUS_ACPI_ALREADY_INITIALIZED = 0xC0140013
	// The ACPI subsystem has not been initialized.
	STATUS_ACPI_NOT_INITIALIZED = 0xC0140014
	// An incorrect mutex was specified.
	STATUS_ACPI_INVALID_MUTEX_LEVEL = 0xC0140015
	// The mutex is not currently owned.
	STATUS_ACPI_MUTEX_NOT_OWNED = 0xC0140016
	// An attempt was made to access the mutex by a process that was not the owner.
	STATUS_ACPI_MUTEX_NOT_OWNER = 0xC0140017
	// An error occurred during an access to region space.
	STATUS_ACPI_RS_ACCESS = 0xC0140018
	// An attempt was made to use an incorrect table.
	STATUS_ACPI_INVALID_TABLE = 0xC0140019
	// The registration of an ACPI event failed.
	STATUS_ACPI_REG_HANDLER_FAILED = 0xC0140020
	// An ACPI power object failed to transition state.
	STATUS_ACPI_POWER_REQUEST_FAILED = 0xC0140021
	// The requested section is not present in the activation context.
	STATUS_SXS_SECTION_NOT_FOUND = 0xC0150001
	// Windows was unble to process the application binding information. Refer to the system event log for further information.
	STATUS_SXS_CANT_GEN_ACTCTX = 0xC0150002
	// The application binding data format is invalid.
	STATUS_SXS_INVALID_ACTCTXDATA_FORMAT = 0xC0150003
	// The referenced assembly is not installed on the system.
	STATUS_SXS_ASSEMBLY_NOT_FOUND = 0xC0150004
	// The manifest file does not begin with the required tag and format information.
	STATUS_SXS_MANIFEST_FORMAT_ERROR = 0xC0150005
	// The manifest file contains one or more syntax errors.
	STATUS_SXS_MANIFEST_PARSE_ERROR = 0xC0150006
	// The application attempted to activate a disabled activation context.
	STATUS_SXS_ACTIVATION_CONTEXT_DISABLED = 0xC0150007
	// The requested lookup key was not found in any active activation context.
	STATUS_SXS_KEY_NOT_FOUND = 0xC0150008
	// A component version required by the application conflicts with another component version that is already active.
	STATUS_SXS_VERSION_CONFLICT = 0xC0150009
	// The type requested activation context section does not match the query API used.
	STATUS_SXS_WRONG_SECTION_TYPE = 0xC015000A
	// Lack of system resources has required isolated activation to be disabled for the current thread of execution.
	STATUS_SXS_THREAD_QUERIES_DISABLED = 0xC015000B
	// The referenced assembly could not be found.
	STATUS_SXS_ASSEMBLY_MISSING = 0xC015000C
	// An attempt to set the process default activation context failed because the process default activation context was already set.
	STATUS_SXS_PROCESS_DEFAULT_ALREADY_SET = 0xC015000E
	// The activation context being deactivated is not the most recently activated one.
	STATUS_SXS_EARLY_DEACTIVATION = 0xC015000F
	// The activation context being deactivated is not active for the current thread of execution.
	STATUS_SXS_INVALID_DEACTIVATION = 0xC0150010
	// The activation context being deactivated has already been deactivated.
	STATUS_SXS_MULTIPLE_DEACTIVATION = 0xC0150011
	// The activation context of the system default assembly could not be generated.
	STATUS_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY = 0xC0150012
	// A component used by the isolation facility has requested that the process be terminated.
	STATUS_SXS_PROCESS_TERMINATION_REQUESTED = 0xC0150013
	// The activation context activation stack for the running thread of execution is corrupt.
	STATUS_SXS_CORRUPT_ACTIVATION_STACK = 0xC0150014
	// The application isolation metadata for this process or thread has become corrupt.
	STATUS_SXS_CORRUPTION = 0xC0150015
	// The value of an attribute in an identity is not within the legal range.
	STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE = 0xC0150016
	// The name of an attribute in an identity is not within the legal range.
	STATUS_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME = 0xC0150017
	// An identity contains two definitions for the same attribute.
	STATUS_SXS_IDENTITY_DUPLICATE_ATTRIBUTE = 0xC0150018
	// The identity string is malformed. This might be due to a trailing comma, more than two unnamed attributes, a missing attribute name, or a missing attribute value.
	STATUS_SXS_IDENTITY_PARSE_ERROR = 0xC0150019
	// The component store has become corrupted.
	STATUS_SXS_COMPONENT_STORE_CORRUPT = 0xC015001A
	// A component's file does not match the verification information present in the component manifest.
	STATUS_SXS_FILE_HASH_MISMATCH = 0xC015001B
	// The identities of the manifests are identical, but their contents are different.
	STATUS_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT = 0xC015001C
	// The component identities are different.
	STATUS_SXS_IDENTITIES_DIFFERENT = 0xC015001D
	// The assembly is not a deployment.
	STATUS_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT = 0xC015001E
	// The file is not a part of the assembly.
	STATUS_SXS_FILE_NOT_PART_OF_ASSEMBLY = 0xC015001F
	// An advanced installer failed during setup or servicing.
	STATUS_ADVANCED_INSTALLER_FAILED = 0xC0150020
	// The character encoding in the XML declaration did not match the encoding used in the document.
	STATUS_XML_ENCODING_MISMATCH = 0xC0150021
	// The size of the manifest exceeds the maximum allowed.
	STATUS_SXS_MANIFEST_TOO_BIG = 0xC0150022
	// The setting is not registered.
	STATUS_SXS_SETTING_NOT_REGISTERED = 0xC0150023
	// One or more required transaction members are not present.
	STATUS_SXS_TRANSACTION_CLOSURE_INCOMPLETE = 0xC0150024
	// The SMI primitive installer failed during setup or servicing.
	STATUS_SMI_PRIMITIVE_INSTALLER_FAILED = 0xC0150025
	// A generic command executable returned a result that indicates failure.
	STATUS_GENERIC_COMMAND_FAILED = 0xC0150026
	// A component is missing file verification information in its manifest.
	STATUS_SXS_FILE_HASH_MISSING = 0xC0150027
	// The function attempted to use a name that is reserved for use by another transaction.
	STATUS_TRANSACTIONAL_CONFLICT = 0xC0190001
	// The transaction handle associated with this operation is invalid.
	STATUS_INVALID_TRANSACTION = 0xC0190002
	// The requested operation was made in the context of a transaction that is no longer active.
	STATUS_TRANSACTION_NOT_ACTIVE = 0xC0190003
	// The transaction manager was unable to be successfully initialized. Transacted operations are not supported.
	STATUS_TM_INITIALIZATION_FAILED = 0xC0190004
	// Transaction support within the specified file system resource manager was not started or was shut down due to an error.
	STATUS_RM_NOT_ACTIVE = 0xC0190005
	// The metadata of the resource manager has been corrupted. The resource manager will not function.
	STATUS_RM_METADATA_CORRUPT = 0xC0190006
	// The resource manager attempted to prepare a transaction that it has not successfully joined.
	STATUS_TRANSACTION_NOT_JOINED = 0xC0190007
	// The specified directory does not contain a file system resource manager.
	STATUS_DIRECTORY_NOT_RM = 0xC0190008
	// The remote server or share does not support transacted file operations.
	STATUS_TRANSACTIONS_UNSUPPORTED_REMOTE = 0xC019000A
	// The requested log size for the file system resource manager is invalid.
	STATUS_LOG_RESIZE_INVALID_SIZE = 0xC019000B
	// The remote server sent mismatching version number or Fid for a file opened with transactions.
	STATUS_REMOTE_FILE_VERSION_MISMATCH = 0xC019000C
	// The resource manager tried to register a protocol that already exists.
	STATUS_CRM_PROTOCOL_ALREADY_EXISTS = 0xC019000F
	// The attempt to propagate the transaction failed.
	STATUS_TRANSACTION_PROPAGATION_FAILED = 0xC0190010
	// The requested propagation protocol was not registered as a CRM.
	STATUS_CRM_PROTOCOL_NOT_FOUND = 0xC0190011
	// The transaction object already has a superior enlistment, and the caller attempted an operation that would have created a new superior. Only a single superior enlistment is allowed.
	STATUS_TRANSACTION_SUPERIOR_EXISTS = 0xC0190012
	// The requested operation is not valid on the transaction object in its current state.
	STATUS_TRANSACTION_REQUEST_NOT_VALID = 0xC0190013
	// The caller has called a response API, but the response is not expected because the transaction manager did not issue the corresponding request to the caller.
	STATUS_TRANSACTION_NOT_REQUESTED = 0xC0190014
	// It is too late to perform the requested operation, because the transaction has already been aborted.
	STATUS_TRANSACTION_ALREADY_ABORTED = 0xC0190015
	// It is too late to perform the requested operation, because the transaction has already been committed.
	STATUS_TRANSACTION_ALREADY_COMMITTED = 0xC0190016
	// The buffer passed in to NtPushTransaction or NtPullTransaction is not in a valid format.
	STATUS_TRANSACTION_INVALID_MARSHALL_BUFFER = 0xC0190017
	// The current transaction context associated with the thread is not a valid handle to a transaction object.
	STATUS_CURRENT_TRANSACTION_NOT_VALID = 0xC0190018
	// An attempt to create space in the transactional resource manager's log failed. The failure status has been recorded in the event log.
	STATUS_LOG_GROWTH_FAILED = 0xC0190019
	// The object (file, stream, or link) that corresponds to the handle has been deleted by a transaction savepoint rollback.
	STATUS_OBJECT_NO_LONGER_EXISTS = 0xC0190021
	// The specified file miniversion was not found for this transacted file open.
	STATUS_STREAM_MINIVERSION_NOT_FOUND = 0xC0190022
	// The specified file miniversion was found but has been invalidated. The most likely cause is a transaction savepoint rollback.
	STATUS_STREAM_MINIVERSION_NOT_VALID = 0xC0190023
	// A miniversion can be opened only in the context of the transaction that created it.
	STATUS_MINIVERSION_INACCESSIBLE_FROM_SPECIFIED_TRANSACTION = 0xC0190024
	// It is not possible to open a miniversion with modify access.
	STATUS_CANT_OPEN_MINIVERSION_WITH_MODIFY_INTENT = 0xC0190025
	// It is not possible to create any more miniversions for this stream.
	STATUS_CANT_CREATE_MORE_STREAM_MINIVERSIONS = 0xC0190026
	// The handle has been invalidated by a transaction. The most likely cause is the presence of memory mapping on a file or an open handle when the transaction ended or rolled back to savepoint.
	STATUS_HANDLE_NO_LONGER_VALID = 0xC0190028
	// The log data is corrupt.
	STATUS_LOG_CORRUPTION_DETECTED = 0xC0190030
	// The transaction outcome is unavailable because the resource manager responsible for it is disconnected.
	STATUS_RM_DISCONNECTED = 0xC0190032
	// The request was rejected because the enlistment in question is not a superior enlistment.
	STATUS_ENLISTMENT_NOT_SUPERIOR = 0xC0190033
	// The file cannot be opened in a transaction because its identity depends on the outcome of an unresolved transaction.
	STATUS_FILE_IDENTITY_NOT_PERSISTENT = 0xC0190036
	// The operation cannot be performed because another transaction is depending on this property not changing.
	STATUS_CANT_BREAK_TRANSACTIONAL_DEPENDENCY = 0xC0190037
	// The operation would involve a single file with two transactional resource managers and is, therefore, not allowed.
	STATUS_CANT_CROSS_RM_BOUNDARY = 0xC0190038
	// The $Txf directory must be empty for this operation to succeed.
	STATUS_TXF_DIR_NOT_EMPTY = 0xC0190039
	// The operation would leave a transactional resource manager in an inconsistent state and is therefore not allowed.
	STATUS_INDOUBT_TRANSACTIONS_EXIST = 0xC019003A
	// The operation could not be completed because the transaction manager does not have a log.
	STATUS_TM_VOLATILE = 0xC019003B
	// A rollback could not be scheduled because a previously scheduled rollback has already executed or been queued for execution.
	STATUS_ROLLBACK_TIMER_EXPIRED = 0xC019003C
	// The transactional metadata attribute on the file or directory %hs is corrupt and unreadable.
	STATUS_TXF_ATTRIBUTE_CORRUPT = 0xC019003D
	// The encryption operation could not be completed because a transaction is active.
	STATUS_EFS_NOT_ALLOWED_IN_TRANSACTION = 0xC019003E
	// This object is not allowed to be opened in a transaction.
	STATUS_TRANSACTIONAL_OPEN_NOT_ALLOWED = 0xC019003F
	// Memory mapping (creating a mapped section) a remote file under a transaction is not supported.
	STATUS_TRANSACTED_MAPPING_UNSUPPORTED_REMOTE = 0xC0190040
	// Promotion was required to allow the resource manager to enlist, but the transaction was set to disallow it.
	STATUS_TRANSACTION_REQUIRED_PROMOTION = 0xC0190043
	// This file is open for modification in an unresolved transaction and can be opened for execute only by a transacted reader.
	STATUS_CANNOT_EXECUTE_FILE_IN_TRANSACTION = 0xC0190044
	// The request to thaw frozen transactions was ignored because transactions were not previously frozen.
	STATUS_TRANSACTIONS_NOT_FROZEN = 0xC0190045
	// Transactions cannot be frozen because a freeze is already in progress.
	STATUS_TRANSACTION_FREEZE_IN_PROGRESS = 0xC0190046
	// The target volume is not a snapshot volume. This operation is valid only on a volume mounted as a snapshot.
	STATUS_NOT_SNAPSHOT_VOLUME = 0xC0190047
	// The savepoint operation failed because files are open on the transaction, which is not permitted.
	STATUS_NO_SAVEPOINT_WITH_OPEN_FILES = 0xC0190048
	// The sparse operation could not be completed because a transaction is active on the file.
	STATUS_SPARSE_NOT_ALLOWED_IN_TRANSACTION = 0xC0190049
	// The call to create a transaction manager object failed because the Tm Identity that is stored in the log file does not match the Tm Identity that was passed in as an argument.
	STATUS_TM_IDENTITY_MISMATCH = 0xC019004A
	// I/O was attempted on a section object that has been floated as a result of a transaction ending. There is no valid data.
	STATUS_FLOATED_SECTION = 0xC019004B
	// The transactional resource manager cannot currently accept transacted work due to a transient condition, such as low resources.
	STATUS_CANNOT_ACCEPT_TRANSACTED_WORK = 0xC019004C
	// The transactional resource manager had too many transactions outstanding that could not be aborted. The transactional resource manager has been shut down.
	STATUS_CANNOT_ABORT_TRANSACTIONS = 0xC019004D
	// The specified transaction was unable to be opened because it was not found.
	STATUS_TRANSACTION_NOT_FOUND = 0xC019004E
	// The specified resource manager was unable to be opened because it was not found.
	STATUS_RESOURCEMANAGER_NOT_FOUND = 0xC019004F
	// The specified enlistment was unable to be opened because it was not found.
	STATUS_ENLISTMENT_NOT_FOUND = 0xC0190050
	// The specified transaction manager was unable to be opened because it was not found.
	STATUS_TRANSACTIONMANAGER_NOT_FOUND = 0xC0190051
	// The specified resource manager was unable to create an enlistment because its associated transaction manager is not online.
	STATUS_TRANSACTIONMANAGER_NOT_ONLINE = 0xC0190052
	// The specified transaction manager was unable to create the objects contained in its log file in the Ob namespace. Therefore, the transaction manager was unable to recover.
	STATUS_TRANSACTIONMANAGER_RECOVERY_NAME_COLLISION = 0xC0190053
	// The call to create a superior enlistment on this transaction object could not be completed because the transaction object specified for the enlistment is a subordinate branch of the transaction. Only the root of the transaction can be enlisted as a superior.
	STATUS_TRANSACTION_NOT_ROOT = 0xC0190054
	// Because the associated transaction manager or resource manager has been closed, the handle is no longer valid.
	STATUS_TRANSACTION_OBJECT_EXPIRED = 0xC0190055
	// The compression operation could not be completed because a transaction is active on the file.
	STATUS_COMPRESSION_NOT_ALLOWED_IN_TRANSACTION = 0xC0190056
	// The specified operation could not be performed on this superior enlistment because the enlistment was not created with the corresponding completion response in the NotificationMask.
	STATUS_TRANSACTION_RESPONSE_NOT_ENLISTED = 0xC0190057
	// The specified operation could not be performed because the record to be logged was too long. This can occur because either there are too many enlistments on this transaction or the combined RecoveryInformation being logged on behalf of those enlistments is too long.
	STATUS_TRANSACTION_RECORD_TOO_LONG = 0xC0190058
	// The link-tracking operation could not be completed because a transaction is active.
	STATUS_NO_LINK_TRACKING_IN_TRANSACTION = 0xC0190059
	// This operation cannot be performed in a transaction.
	STATUS_OPERATION_NOT_SUPPORTED_IN_TRANSACTION = 0xC019005A
	// The kernel transaction manager had to abort or forget the transaction because it blocked forward progress.
	STATUS_TRANSACTION_INTEGRITY_VIOLATED = 0xC019005B
	// The handle is no longer properly associated with its transaction.  It might have been opened in a transactional resource manager that was subsequently forced to restart.  Please close the handle and open a new one.
	STATUS_EXPIRED_HANDLE = 0xC0190060
	// The specified operation could not be performed because the resource manager is not enlisted in the transaction.
	STATUS_TRANSACTION_NOT_ENLISTED = 0xC0190061
	// The log service found an invalid log sector.
	STATUS_LOG_SECTOR_INVALID = 0xC01A0001
	// The log service encountered a log sector with invalid block parity.
	STATUS_LOG_SECTOR_PARITY_INVALID = 0xC01A0002
	// The log service encountered a remapped log sector.
	STATUS_LOG_SECTOR_REMAPPED = 0xC01A0003
	// The log service encountered a partial or incomplete log block.
	STATUS_LOG_BLOCK_INCOMPLETE = 0xC01A0004
	// The log service encountered an attempt to access data outside the active log range.
	STATUS_LOG_INVALID_RANGE = 0xC01A0005
	// The log service user-log marshaling buffers are exhausted.
	STATUS_LOG_BLOCKS_EXHAUSTED = 0xC01A0006
	// The log service encountered an attempt to read from a marshaling area with an invalid read context.
	STATUS_LOG_READ_CONTEXT_INVALID = 0xC01A0007
	// The log service encountered an invalid log restart area.
	STATUS_LOG_RESTART_INVALID = 0xC01A0008
	// The log service encountered an invalid log block version.
	STATUS_LOG_BLOCK_VERSION = 0xC01A0009
	// The log service encountered an invalid log block.
	STATUS_LOG_BLOCK_INVALID = 0xC01A000A
	// The log service encountered an attempt to read the log with an invalid read mode.
	STATUS_LOG_READ_MODE_INVALID = 0xC01A000B
	// The log service encountered a corrupted metadata file.
	STATUS_LOG_METADATA_CORRUPT = 0xC01A000D
	// The log service encountered a metadata file that could not be created by the log file system.
	STATUS_LOG_METADATA_INVALID = 0xC01A000E
	// The log service encountered a metadata file with inconsistent data.
	STATUS_LOG_METADATA_INCONSISTENT = 0xC01A000F
	// The log service encountered an attempt to erroneously allocate or dispose reservation space.
	STATUS_LOG_RESERVATION_INVALID = 0xC01A0010
	// The log service cannot delete the log file or the file system container.
	STATUS_LOG_CANT_DELETE = 0xC01A0011
	// The log service has reached the maximum allowable containers allocated to a log file.
	STATUS_LOG_CONTAINER_LIMIT_EXCEEDED = 0xC01A0012
	// The log service has attempted to read or write backward past the start of the log.
	STATUS_LOG_START_OF_LOG = 0xC01A0013
	// The log policy could not be installed because a policy of the same type is already present.
	STATUS_LOG_POLICY_ALREADY_INSTALLED = 0xC01A0014
	// The log policy in question was not installed at the time of the request.
	STATUS_LOG_POLICY_NOT_INSTALLED = 0xC01A0015
	// The installed set of policies on the log is invalid.
	STATUS_LOG_POLICY_INVALID = 0xC01A0016
	// A policy on the log in question prevented the operation from completing.
	STATUS_LOG_POLICY_CONFLICT = 0xC01A0017
	// The log space cannot be reclaimed because the log is pinned by the archive tail.
	STATUS_LOG_PINNED_ARCHIVE_TAIL = 0xC01A0018
	// The log record is not a record in the log file.
	STATUS_LOG_RECORD_NONEXISTENT = 0xC01A0019
	// The number of reserved log records or the adjustment of the number of reserved log records is invalid.
	STATUS_LOG_RECORDS_RESERVED_INVALID = 0xC01A001A
	// The reserved log space or the adjustment of the log space is invalid.
	STATUS_LOG_SPACE_RESERVED_INVALID = 0xC01A001B
	// A new or existing archive tail or the base of the active log is invalid.
	STATUS_LOG_TAIL_INVALID = 0xC01A001C
	// The log space is exhausted.
	STATUS_LOG_FULL = 0xC01A001D
	// The log is multiplexed; no direct writes to the physical log are allowed.
	STATUS_LOG_MULTIPLEXED = 0xC01A001E
	// The operation failed because the log is dedicated.
	STATUS_LOG_DEDICATED = 0xC01A001F
	// The operation requires an archive context.
	STATUS_LOG_ARCHIVE_NOT_IN_PROGRESS = 0xC01A0020
	// Log archival is in progress.
	STATUS_LOG_ARCHIVE_IN_PROGRESS = 0xC01A0021
	// The operation requires a nonephemeral log, but the log is ephemeral.
	STATUS_LOG_EPHEMERAL = 0xC01A0022
	// The log must have at least two containers before it can be read from or written to.
	STATUS_LOG_NOT_ENOUGH_CONTAINERS = 0xC01A0023
	// A log client has already registered on the stream.
	STATUS_LOG_CLIENT_ALREADY_REGISTERED = 0xC01A0024
	// A log client has not been registered on the stream.
	STATUS_LOG_CLIENT_NOT_REGISTERED = 0xC01A0025
	// A request has already been made to handle the log full condition.
	STATUS_LOG_FULL_HANDLER_IN_PROGRESS = 0xC01A0026
	// The log service encountered an error when attempting to read from a log container.
	STATUS_LOG_CONTAINER_READ_FAILED = 0xC01A0027
	// The log service encountered an error when attempting to write to a log container.
	STATUS_LOG_CONTAINER_WRITE_FAILED = 0xC01A0028
	// The log service encountered an error when attempting to open a log container.
	STATUS_LOG_CONTAINER_OPEN_FAILED = 0xC01A0029
	// The log service encountered an invalid container state when attempting a requested action.
	STATUS_LOG_CONTAINER_STATE_INVALID = 0xC01A002A
	// The log service is not in the correct state to perform a requested action.
	STATUS_LOG_STATE_INVALID = 0xC01A002B
	// The log space cannot be reclaimed because the log is pinned.
	STATUS_LOG_PINNED = 0xC01A002C
	// The log metadata flush failed.
	STATUS_LOG_METADATA_FLUSH_FAILED = 0xC01A002D
	// Security on the log and its containers is inconsistent.
	STATUS_LOG_INCONSISTENT_SECURITY = 0xC01A002E
	// Records were appended to the log or reservation changes were made, but the log could not be flushed.
	STATUS_LOG_APPENDED_FLUSH_FAILED = 0xC01A002F
	// The log is pinned due to reservation consuming most of the log space. Free some reserved records to make space available.
	STATUS_LOG_PINNED_RESERVATION = 0xC01A0030
	// {Display Driver Stopped Responding} The %hs display driver has stopped working normally. Save your work and reboot the system to restore full display functionality. The next time you reboot the computer, a dialog box will allow you to upload data about this failure to Microsoft.
	STATUS_VIDEO_HUNG_DISPLAY_DRIVER_THREAD = 0xC01B00EA
	// A handler was not defined by the filter for this operation.
	STATUS_FLT_NO_HANDLER_DEFINED = 0xC01C0001
	// A context is already defined for this object.
	STATUS_FLT_CONTEXT_ALREADY_DEFINED = 0xC01C0002
	// Asynchronous requests are not valid for this operation.
	STATUS_FLT_INVALID_ASYNCHRONOUS_REQUEST = 0xC01C0003
	// This is an internal error code used by the filter manager to determine if a fast I/O operation should be forced down the input/output request packet (IRP) path. Minifilters should never return this value.
	STATUS_FLT_DISALLOW_FAST_IO = 0xC01C0004
	// An invalid name request was made. The name requested cannot be retrieved at this time.
	STATUS_FLT_INVALID_NAME_REQUEST = 0xC01C0005
	// Posting this operation to a worker thread for further processing is not safe at this time because it could lead to a system deadlock.
	STATUS_FLT_NOT_SAFE_TO_POST_OPERATION = 0xC01C0006
	// The Filter Manager was not initialized when a filter tried to register. Make sure that the Filter Manager is loaded as a driver.
	STATUS_FLT_NOT_INITIALIZED = 0xC01C0007
	// The filter is not ready for attachment to volumes because it has not finished initializing (FltStartFiltering has not been called).
	STATUS_FLT_FILTER_NOT_READY = 0xC01C0008
	// The filter must clean up any operation-specific context at this time because it is being removed from the system before the operation is completed by the lower drivers.
	STATUS_FLT_POST_OPERATION_CLEANUP = 0xC01C0009
	// The Filter Manager had an internal error from which it cannot recover; therefore, the operation has failed. This is usually the result of a filter returning an invalid value from a pre-operation callback.
	STATUS_FLT_INTERNAL_ERROR = 0xC01C000A
	// The object specified for this action is in the process of being deleted; therefore, the action requested cannot be completed at this time.
	STATUS_FLT_DELETING_OBJECT = 0xC01C000B
	// A nonpaged pool must be used for this type of context.
	STATUS_FLT_MUST_BE_NONPAGED_POOL = 0xC01C000C
	// A duplicate handler definition has been provided for an operation.
	STATUS_FLT_DUPLICATE_ENTRY = 0xC01C000D
	// The callback data queue has been disabled.
	STATUS_FLT_CBDQ_DISABLED = 0xC01C000E
	// Do not attach the filter to the volume at this time.
	STATUS_FLT_DO_NOT_ATTACH = 0xC01C000F
	// Do not detach the filter from the volume at this time.
	STATUS_FLT_DO_NOT_DETACH = 0xC01C0010
	// An instance already exists at this altitude on the volume specified.
	STATUS_FLT_INSTANCE_ALTITUDE_COLLISION = 0xC01C0011
	// An instance already exists with this name on the volume specified.
	STATUS_FLT_INSTANCE_NAME_COLLISION = 0xC01C0012
	// The system could not find the filter specified.
	STATUS_FLT_FILTER_NOT_FOUND = 0xC01C0013
	// The system could not find the volume specified.
	STATUS_FLT_VOLUME_NOT_FOUND = 0xC01C0014
	// The system could not find the instance specified.
	STATUS_FLT_INSTANCE_NOT_FOUND = 0xC01C0015
	// No registered context allocation definition was found for the given request.
	STATUS_FLT_CONTEXT_ALLOCATION_NOT_FOUND = 0xC01C0016
	// An invalid parameter was specified during context registration.
	STATUS_FLT_INVALID_CONTEXT_REGISTRATION = 0xC01C0017
	// The name requested was not found in the Filter Manager name cache and could not be retrieved from the file system.
	STATUS_FLT_NAME_CACHE_MISS = 0xC01C0018
	// The requested device object does not exist for the given volume.
	STATUS_FLT_NO_DEVICE_OBJECT = 0xC01C0019
	// The specified volume is already mounted.
	STATUS_FLT_VOLUME_ALREADY_MOUNTED = 0xC01C001A
	// The specified transaction context is already enlisted in a transaction.
	STATUS_FLT_ALREADY_ENLISTED = 0xC01C001B
	// The specified context is already attached to another object.
	STATUS_FLT_CONTEXT_ALREADY_LINKED = 0xC01C001C
	// No waiter is present for the filter's reply to this message.
	STATUS_FLT_NO_WAITER_FOR_REPLY = 0xC01C0020
	// A monitor descriptor could not be obtained.
	STATUS_MONITOR_NO_DESCRIPTOR = 0xC01D0001
	// This release does not support the format of the obtained monitor descriptor.
	STATUS_MONITOR_UNKNOWN_DESCRIPTOR_FORMAT = 0xC01D0002
	// The checksum of the obtained monitor descriptor is invalid.
	STATUS_MONITOR_INVALID_DESCRIPTOR_CHECKSUM = 0xC01D0003
	// The monitor descriptor contains an invalid standard timing block.
	STATUS_MONITOR_INVALID_STANDARD_TIMING_BLOCK = 0xC01D0004
	// WMI data-block registration failed for one of the MSMonitorClass WMI subclasses.
	STATUS_MONITOR_WMI_DATABLOCK_REGISTRATION_FAILED = 0xC01D0005
	// The provided monitor descriptor block is either corrupted or does not contain the monitor's detailed serial number.
	STATUS_MONITOR_INVALID_SERIAL_NUMBER_MONDSC_BLOCK = 0xC01D0006
	// The provided monitor descriptor block is either corrupted or does not contain the monitor's user-friendly name.
	STATUS_MONITOR_INVALID_USER_FRIENDLY_MONDSC_BLOCK = 0xC01D0007
	// There is no monitor descriptor data at the specified (offset or size) region.
	STATUS_MONITOR_NO_MORE_DESCRIPTOR_DATA = 0xC01D0008
	// The monitor descriptor contains an invalid detailed timing block.
	STATUS_MONITOR_INVALID_DETAILED_TIMING_BLOCK = 0xC01D0009
	// Monitor descriptor contains invalid manufacture date.
	STATUS_MONITOR_INVALID_MANUFACTURE_DATE = 0xC01D000A
	// Exclusive mode ownership is needed to create an unmanaged primary allocation.
	STATUS_GRAPHICS_NOT_EXCLUSIVE_MODE_OWNER = 0xC01E0000
	// The driver needs more DMA buffer space to complete the requested operation.
	STATUS_GRAPHICS_INSUFFICIENT_DMA_BUFFER = 0xC01E0001
	// The specified display adapter handle is invalid.
	STATUS_GRAPHICS_INVALID_DISPLAY_ADAPTER = 0xC01E0002
	// The specified display adapter and all of its state have been reset.
	STATUS_GRAPHICS_ADAPTER_WAS_RESET = 0xC01E0003
	// The driver stack does not match the expected driver model.
	STATUS_GRAPHICS_INVALID_DRIVER_MODEL = 0xC01E0004
	// Present happened but ended up into the changed desktop mode.
	STATUS_GRAPHICS_PRESENT_MODE_CHANGED = 0xC01E0005
	// Nothing to present due to desktop occlusion.
	STATUS_GRAPHICS_PRESENT_OCCLUDED = 0xC01E0006
	// Not able to present due to denial of desktop access.
	STATUS_GRAPHICS_PRESENT_DENIED = 0xC01E0007
	// Not able to present with color conversion.
	STATUS_GRAPHICS_CANNOTCOLORCONVERT = 0xC01E0008
	// Present redirection is disabled (desktop windowing management subsystem is off).
	STATUS_GRAPHICS_PRESENT_REDIRECTION_DISABLED = 0xC01E000B
	// Previous exclusive VidPn source owner has released its ownership
	STATUS_GRAPHICS_PRESENT_UNOCCLUDED = 0xC01E000C
	// Not enough video memory is available to complete the operation.
	STATUS_GRAPHICS_NO_VIDEO_MEMORY = 0xC01E0100
	// Could not probe and lock the underlying memory of an allocation.
	STATUS_GRAPHICS_CANT_LOCK_MEMORY = 0xC01E0101
	// The allocation is currently busy.
	STATUS_GRAPHICS_ALLOCATION_BUSY = 0xC01E0102
	// An object being referenced has already reached the maximum reference count and cannot be referenced further.
	STATUS_GRAPHICS_TOO_MANY_REFERENCES = 0xC01E0103
	// A problem could not be solved due to an existing condition. Try again later.
	STATUS_GRAPHICS_TRY_AGAIN_LATER = 0xC01E0104
	// A problem could not be solved due to an existing condition. Try again now.
	STATUS_GRAPHICS_TRY_AGAIN_NOW = 0xC01E0105
	// The allocation is invalid.
	STATUS_GRAPHICS_ALLOCATION_INVALID = 0xC01E0106
	// No more unswizzling apertures are currently available.
	STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNAVAILABLE = 0xC01E0107
	// The current allocation cannot be unswizzled by an aperture.
	STATUS_GRAPHICS_UNSWIZZLING_APERTURE_UNSUPPORTED = 0xC01E0108
	// The request failed because a pinned allocation cannot be evicted.
	STATUS_GRAPHICS_CANT_EVICT_PINNED_ALLOCATION = 0xC01E0109
	// The allocation cannot be used from its current segment location for the specified operation.
	STATUS_GRAPHICS_INVALID_ALLOCATION_USAGE = 0xC01E0110
	// A locked allocation cannot be used in the current command buffer.
	STATUS_GRAPHICS_CANT_RENDER_LOCKED_ALLOCATION = 0xC01E0111
	// The allocation being referenced has been closed permanently.
	STATUS_GRAPHICS_ALLOCATION_CLOSED = 0xC01E0112
	// An invalid allocation instance is being referenced.
	STATUS_GRAPHICS_INVALID_ALLOCATION_INSTANCE = 0xC01E0113
	// An invalid allocation handle is being referenced.
	STATUS_GRAPHICS_INVALID_ALLOCATION_HANDLE = 0xC01E0114
	// The allocation being referenced does not belong to the current device.
	STATUS_GRAPHICS_WRONG_ALLOCATION_DEVICE = 0xC01E0115
	// The specified allocation lost its content.
	STATUS_GRAPHICS_ALLOCATION_CONTENT_LOST = 0xC01E0116
	// A GPU exception was detected on the given device. The device cannot be scheduled.
	STATUS_GRAPHICS_GPU_EXCEPTION_ON_DEVICE = 0xC01E0200
	// The specified VidPN topology is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY = 0xC01E0300
	// The specified VidPN topology is valid but is not supported by this model of the display adapter.
	STATUS_GRAPHICS_VIDPN_TOPOLOGY_NOT_SUPPORTED = 0xC01E0301
	// The specified VidPN topology is valid but is not currently supported by the display adapter due to allocation of its resources.
	STATUS_GRAPHICS_VIDPN_TOPOLOGY_CURRENTLY_NOT_SUPPORTED = 0xC01E0302
	// The specified VidPN handle is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN = 0xC01E0303
	// The specified video present source is invalid.
	STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE = 0xC01E0304
	// The specified video present target is invalid.
	STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET = 0xC01E0305
	// The specified VidPN modality is not supported (for example, at least two of the pinned modes are not co-functional).
	STATUS_GRAPHICS_VIDPN_MODALITY_NOT_SUPPORTED = 0xC01E0306
	// The specified VidPN source mode set is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_SOURCEMODESET = 0xC01E0308
	// The specified VidPN target mode set is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_TARGETMODESET = 0xC01E0309
	// The specified video signal frequency is invalid.
	STATUS_GRAPHICS_INVALID_FREQUENCY = 0xC01E030A
	// The specified video signal active region is invalid.
	STATUS_GRAPHICS_INVALID_ACTIVE_REGION = 0xC01E030B
	// The specified video signal total region is invalid.
	STATUS_GRAPHICS_INVALID_TOTAL_REGION = 0xC01E030C
	// The specified video present source mode is invalid.
	STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_SOURCE_MODE = 0xC01E0310
	// The specified video present target mode is invalid.
	STATUS_GRAPHICS_INVALID_VIDEO_PRESENT_TARGET_MODE = 0xC01E0311
	// The pinned mode must remain in the set on the VidPN's co-functional modality enumeration.
	STATUS_GRAPHICS_PINNED_MODE_MUST_REMAIN_IN_SET = 0xC01E0312
	// The specified video present path is already in the VidPN's topology.
	STATUS_GRAPHICS_PATH_ALREADY_IN_TOPOLOGY = 0xC01E0313
	// The specified mode is already in the mode set.
	STATUS_GRAPHICS_MODE_ALREADY_IN_MODESET = 0xC01E0314
	// The specified video present source set is invalid.
	STATUS_GRAPHICS_INVALID_VIDEOPRESENTSOURCESET = 0xC01E0315
	// The specified video present target set is invalid.
	STATUS_GRAPHICS_INVALID_VIDEOPRESENTTARGETSET = 0xC01E0316
	// The specified video present source is already in the video present source set.
	STATUS_GRAPHICS_SOURCE_ALREADY_IN_SET = 0xC01E0317
	// The specified video present target is already in the video present target set.
	STATUS_GRAPHICS_TARGET_ALREADY_IN_SET = 0xC01E0318
	// The specified VidPN present path is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_PRESENT_PATH = 0xC01E0319
	// The miniport has no recommendation for augmenting the specified VidPN's topology.
	STATUS_GRAPHICS_NO_RECOMMENDED_VIDPN_TOPOLOGY = 0xC01E031A
	// The specified monitor frequency range set is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGESET = 0xC01E031B
	// The specified monitor frequency range is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE = 0xC01E031C
	// The specified frequency range is not in the specified monitor frequency range set.
	STATUS_GRAPHICS_FREQUENCYRANGE_NOT_IN_SET = 0xC01E031D
	// The specified frequency range is already in the specified monitor frequency range set.
	STATUS_GRAPHICS_FREQUENCYRANGE_ALREADY_IN_SET = 0xC01E031F
	// The specified mode set is stale. Reacquire the new mode set.
	STATUS_GRAPHICS_STALE_MODESET = 0xC01E0320
	// The specified monitor source mode set is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_SOURCEMODESET = 0xC01E0321
	// The specified monitor source mode is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_SOURCE_MODE = 0xC01E0322
	// The miniport does not have a recommendation regarding the request to provide a functional VidPN given the current display adapter configuration.
	STATUS_GRAPHICS_NO_RECOMMENDED_FUNCTIONAL_VIDPN = 0xC01E0323
	// The ID of the specified mode is being used by another mode in the set.
	STATUS_GRAPHICS_MODE_ID_MUST_BE_UNIQUE = 0xC01E0324
	// The system failed to determine a mode that is supported by both the display adapter and the monitor connected to it.
	STATUS_GRAPHICS_EMPTY_ADAPTER_MONITOR_MODE_SUPPORT_INTERSECTION = 0xC01E0325
	// The number of video present targets must be greater than or equal to the number of video present sources.
	STATUS_GRAPHICS_VIDEO_PRESENT_TARGETS_LESS_THAN_SOURCES = 0xC01E0326
	// The specified present path is not in the VidPN's topology.
	STATUS_GRAPHICS_PATH_NOT_IN_TOPOLOGY = 0xC01E0327
	// The display adapter must have at least one video present source.
	STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_SOURCE = 0xC01E0328
	// The display adapter must have at least one video present target.
	STATUS_GRAPHICS_ADAPTER_MUST_HAVE_AT_LEAST_ONE_TARGET = 0xC01E0329
	// The specified monitor descriptor set is invalid.
	STATUS_GRAPHICS_INVALID_MONITORDESCRIPTORSET = 0xC01E032A
	// The specified monitor descriptor is invalid.
	STATUS_GRAPHICS_INVALID_MONITORDESCRIPTOR = 0xC01E032B
	// The specified descriptor is not in the specified monitor descriptor set.
	STATUS_GRAPHICS_MONITORDESCRIPTOR_NOT_IN_SET = 0xC01E032C
	// The specified descriptor is already in the specified monitor descriptor set.
	STATUS_GRAPHICS_MONITORDESCRIPTOR_ALREADY_IN_SET = 0xC01E032D
	// The ID of the specified monitor descriptor is being used by another descriptor in the set.
	STATUS_GRAPHICS_MONITORDESCRIPTOR_ID_MUST_BE_UNIQUE = 0xC01E032E
	// The specified video present target subset type is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_TARGET_SUBSET_TYPE = 0xC01E032F
	// Two or more of the specified resources are not related to each other, as defined by the interface semantics.
	STATUS_GRAPHICS_RESOURCES_NOT_RELATED = 0xC01E0330
	// The ID of the specified video present source is being used by another source in the set.
	STATUS_GRAPHICS_SOURCE_ID_MUST_BE_UNIQUE = 0xC01E0331
	// The ID of the specified video present target is being used by another target in the set.
	STATUS_GRAPHICS_TARGET_ID_MUST_BE_UNIQUE = 0xC01E0332
	// The specified VidPN source cannot be used because there is no available VidPN target to connect it to.
	STATUS_GRAPHICS_NO_AVAILABLE_VIDPN_TARGET = 0xC01E0333
	// The newly arrived monitor could not be associated with a display adapter.
	STATUS_GRAPHICS_MONITOR_COULD_NOT_BE_ASSOCIATED_WITH_ADAPTER = 0xC01E0334
	// The particular display adapter does not have an associated VidPN manager.
	STATUS_GRAPHICS_NO_VIDPNMGR = 0xC01E0335
	// The VidPN manager of the particular display adapter does not have an active VidPN.
	STATUS_GRAPHICS_NO_ACTIVE_VIDPN = 0xC01E0336
	// The specified VidPN topology is stale; obtain the new topology.
	STATUS_GRAPHICS_STALE_VIDPN_TOPOLOGY = 0xC01E0337
	// No monitor is connected on the specified video present target.
	STATUS_GRAPHICS_MONITOR_NOT_CONNECTED = 0xC01E0338
	// The specified source is not part of the specified VidPN's topology.
	STATUS_GRAPHICS_SOURCE_NOT_IN_TOPOLOGY = 0xC01E0339
	// The specified primary surface size is invalid.
	STATUS_GRAPHICS_INVALID_PRIMARYSURFACE_SIZE = 0xC01E033A
	// The specified visible region size is invalid.
	STATUS_GRAPHICS_INVALID_VISIBLEREGION_SIZE = 0xC01E033B
	// The specified stride is invalid.
	STATUS_GRAPHICS_INVALID_STRIDE = 0xC01E033C
	// The specified pixel format is invalid.
	STATUS_GRAPHICS_INVALID_PIXELFORMAT = 0xC01E033D
	// The specified color basis is invalid.
	STATUS_GRAPHICS_INVALID_COLORBASIS = 0xC01E033E
	// The specified pixel value access mode is invalid.
	STATUS_GRAPHICS_INVALID_PIXELVALUEACCESSMODE = 0xC01E033F
	// The specified target is not part of the specified VidPN's topology.
	STATUS_GRAPHICS_TARGET_NOT_IN_TOPOLOGY = 0xC01E0340
	// Failed to acquire the display mode management interface.
	STATUS_GRAPHICS_NO_DISPLAY_MODE_MANAGEMENT_SUPPORT = 0xC01E0341
	// The specified VidPN source is already owned by a DMM client and cannot be used until that client releases it.
	STATUS_GRAPHICS_VIDPN_SOURCE_IN_USE = 0xC01E0342
	// The specified VidPN is active and cannot be accessed.
	STATUS_GRAPHICS_CANT_ACCESS_ACTIVE_VIDPN = 0xC01E0343
	// The specified VidPN's present path importance ordinal is invalid.
	STATUS_GRAPHICS_INVALID_PATH_IMPORTANCE_ORDINAL = 0xC01E0344
	// The specified VidPN's present path content geometry transformation is invalid.
	STATUS_GRAPHICS_INVALID_PATH_CONTENT_GEOMETRY_TRANSFORMATION = 0xC01E0345
	// The specified content geometry transformation is not supported on the respective VidPN present path.
	STATUS_GRAPHICS_PATH_CONTENT_GEOMETRY_TRANSFORMATION_NOT_SUPPORTED = 0xC01E0346
	// The specified gamma ramp is invalid.
	STATUS_GRAPHICS_INVALID_GAMMA_RAMP = 0xC01E0347
	// The specified gamma ramp is not supported on the respective VidPN present path.
	STATUS_GRAPHICS_GAMMA_RAMP_NOT_SUPPORTED = 0xC01E0348
	// Multisampling is not supported on the respective VidPN present path.
	STATUS_GRAPHICS_MULTISAMPLING_NOT_SUPPORTED = 0xC01E0349
	// The specified mode is not in the specified mode set.
	STATUS_GRAPHICS_MODE_NOT_IN_MODESET = 0xC01E034A
	// The specified VidPN topology recommendation reason is invalid.
	STATUS_GRAPHICS_INVALID_VIDPN_TOPOLOGY_RECOMMENDATION_REASON = 0xC01E034D
	// The specified VidPN present path content type is invalid.
	STATUS_GRAPHICS_INVALID_PATH_CONTENT_TYPE = 0xC01E034E
	// The specified VidPN present path copy protection type is invalid.
	STATUS_GRAPHICS_INVALID_COPYPROTECTION_TYPE = 0xC01E034F
	// Only one unassigned mode set can exist at any one time for a particular VidPN source or target.
	STATUS_GRAPHICS_UNASSIGNED_MODESET_ALREADY_EXISTS = 0xC01E0350
	// The specified scan line ordering type is invalid.
	STATUS_GRAPHICS_INVALID_SCANLINE_ORDERING = 0xC01E0352
	// The topology changes are not allowed for the specified VidPN.
	STATUS_GRAPHICS_TOPOLOGY_CHANGES_NOT_ALLOWED = 0xC01E0353
	// All available importance ordinals are being used in the specified topology.
	STATUS_GRAPHICS_NO_AVAILABLE_IMPORTANCE_ORDINALS = 0xC01E0354
	// The specified primary surface has a different private-format attribute than the current primary surface.
	STATUS_GRAPHICS_INCOMPATIBLE_PRIVATE_FORMAT = 0xC01E0355
	// The specified mode-pruning algorithm is invalid.
	STATUS_GRAPHICS_INVALID_MODE_PRUNING_ALGORITHM = 0xC01E0356
	// The specified monitor-capability origin is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_CAPABILITY_ORIGIN = 0xC01E0357
	// The specified monitor-frequency range constraint is invalid.
	STATUS_GRAPHICS_INVALID_MONITOR_FREQUENCYRANGE_CONSTRAINT = 0xC01E0358
	// The maximum supported number of present paths has been reached.
	STATUS_GRAPHICS_MAX_NUM_PATHS_REACHED = 0xC01E0359
	// The miniport requested that augmentation be canceled for the specified source of the specified VidPN's topology.
	STATUS_GRAPHICS_CANCEL_VIDPN_TOPOLOGY_AUGMENTATION = 0xC01E035A
	// The specified client type was not recognized.
	STATUS_GRAPHICS_INVALID_CLIENT_TYPE = 0xC01E035B
	// The client VidPN is not set on this adapter (for example, no user mode-initiated mode changes have taken place on this adapter).
	STATUS_GRAPHICS_CLIENTVIDPN_NOT_SET = 0xC01E035C
	// The specified display adapter child device already has an external device connected to it.
	STATUS_GRAPHICS_SPECIFIED_CHILD_ALREADY_CONNECTED = 0xC01E0400
	// The display adapter child device does not support reporting a descriptor.
	STATUS_GRAPHICS_CHILD_DESCRIPTOR_NOT_SUPPORTED = 0xC01E0401
	// The display adapter is not linked to any other adapters.
	STATUS_GRAPHICS_NOT_A_LINKED_ADAPTER = 0xC01E0430
	// The lead adapter in a linked configuration was not enumerated yet.
	STATUS_GRAPHICS_LEADLINK_NOT_ENUMERATED = 0xC01E0431
	// Some chain adapters in a linked configuration have not yet been enumerated.
	STATUS_GRAPHICS_CHAINLINKS_NOT_ENUMERATED = 0xC01E0432
	// The chain of linked adapters is not ready to start because of an unknown failure.
	STATUS_GRAPHICS_ADAPTER_CHAIN_NOT_READY = 0xC01E0433
	// An attempt was made to start a lead link display adapter when the chain links had not yet started.
	STATUS_GRAPHICS_CHAINLINKS_NOT_STARTED = 0xC01E0434
	// An attempt was made to turn on a lead link display adapter when the chain links were turned off.
	STATUS_GRAPHICS_CHAINLINKS_NOT_POWERED_ON = 0xC01E0435
	// The adapter link was found in an inconsistent state. Not all adapters are in an expected PNP/power state.
	STATUS_GRAPHICS_INCONSISTENT_DEVICE_LINK_STATE = 0xC01E0436
	// The driver trying to start is not the same as the driver for the posted display adapter.
	STATUS_GRAPHICS_NOT_POST_DEVICE_DRIVER = 0xC01E0438
	// An operation is being attempted that requires the display adapter to be in a quiescent state.
	STATUS_GRAPHICS_ADAPTER_ACCESS_NOT_EXCLUDED = 0xC01E043B
	// The driver does not support OPM.
	STATUS_GRAPHICS_OPM_NOT_SUPPORTED = 0xC01E0500
	// The driver does not support COPP.
	STATUS_GRAPHICS_COPP_NOT_SUPPORTED = 0xC01E0501
	// The driver does not support UAB.
	STATUS_GRAPHICS_UAB_NOT_SUPPORTED = 0xC01E0502
	// The specified encrypted parameters are invalid.
	STATUS_GRAPHICS_OPM_INVALID_ENCRYPTED_PARAMETERS = 0xC01E0503
	// An array passed to a function cannot hold all of the data that the function wants to put in it.
	STATUS_GRAPHICS_OPM_PARAMETER_ARRAY_TOO_SMALL = 0xC01E0504
	// The GDI display device passed to this function does not have any active protected outputs.
	STATUS_GRAPHICS_OPM_NO_PROTECTED_OUTPUTS_EXIST = 0xC01E0505
	// The PVP cannot find an actual GDI display device that corresponds to the passed-in GDI display device name.
	STATUS_GRAPHICS_PVP_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME = 0xC01E0506
	// This function failed because the GDI display device passed to it was not attached to the Windows desktop.
	STATUS_GRAPHICS_PVP_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP = 0xC01E0507
	// The PVP does not support mirroring display devices because they do not have any protected outputs.
	STATUS_GRAPHICS_PVP_MIRRORING_DEVICES_NOT_SUPPORTED = 0xC01E0508
	// The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is null, is not correctly aligned, or it points to an invalid address or a kernel mode address.
	STATUS_GRAPHICS_OPM_INVALID_POINTER = 0xC01E050A
	// An internal error caused an operation to fail.
	STATUS_GRAPHICS_OPM_INTERNAL_ERROR = 0xC01E050B
	// The function failed because the caller passed in an invalid OPM user-mode handle.
	STATUS_GRAPHICS_OPM_INVALID_HANDLE = 0xC01E050C
	// This function failed because the GDI device passed to it did not have any monitors associated with it.
	STATUS_GRAPHICS_PVP_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE = 0xC01E050D
	// A certificate could not be returned because the certificate buffer passed to the function was too small.
	STATUS_GRAPHICS_PVP_INVALID_CERTIFICATE_LENGTH = 0xC01E050E
	// DxgkDdiOpmCreateProtectedOutput() could not create a protected output because the video present yarget is in spanning mode.
	STATUS_GRAPHICS_OPM_SPANNING_MODE_ENABLED = 0xC01E050F
	// DxgkDdiOpmCreateProtectedOutput() could not create a protected output because the video present target is in theater mode.
	STATUS_GRAPHICS_OPM_THEATER_MODE_ENABLED = 0xC01E0510
	// The function call failed because the display adapter's hardware functionality scan (HFS) failed to validate the graphics hardware.
	STATUS_GRAPHICS_PVP_HFS_FAILED = 0xC01E0511
	// The HDCP SRM passed to this function did not comply with section 5 of the HDCP 1.1 specification.
	STATUS_GRAPHICS_OPM_INVALID_SRM = 0xC01E0512
	// The protected output cannot enable the HDCP system because it does not support it.
	STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_HDCP = 0xC01E0513
	// The protected output cannot enable analog copy protection because it does not support it.
	STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_ACP = 0xC01E0514
	// The protected output cannot enable the CGMS-A protection technology because it does not support it.
	STATUS_GRAPHICS_OPM_OUTPUT_DOES_NOT_SUPPORT_CGMSA = 0xC01E0515
	// DxgkDdiOPMGetInformation() cannot return the version of the SRM being used because the application never successfully passed an SRM to the protected output.
	STATUS_GRAPHICS_OPM_HDCP_SRM_NEVER_SET = 0xC01E0516
	// DxgkDdiOPMConfigureProtectedOutput() cannot enable the specified output protection technology because the output's screen resolution is too high.
	STATUS_GRAPHICS_OPM_RESOLUTION_TOO_HIGH = 0xC01E0517
	// DxgkDdiOPMConfigureProtectedOutput() cannot enable HDCP because other physical outputs are using the display adapter's HDCP hardware.
	STATUS_GRAPHICS_OPM_ALL_HDCP_HARDWARE_ALREADY_IN_USE = 0xC01E0518
	// The operating system asynchronously destroyed this OPM-protected output because the operating system state changed. This error typically occurs because the monitor PDO associated with this protected output was removed or stopped, the protected output's session became a nonconsole session, or the protected output's desktop became inactive.
	STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_NO_LONGER_EXISTS = 0xC01E051A
	// OPM functions cannot be called when a session is changing its type. Three types of sessions currently exist: console, disconnected, and remote (RDP or ICA).
	STATUS_GRAPHICS_OPM_SESSION_TYPE_CHANGE_IN_PROGRESS = 0xC01E051B
	// The DxgkDdiOPMGetCOPPCompatibleInformation, DxgkDdiOPMGetInformation, or DxgkDdiOPMConfigureProtectedOutput function failed. This error is returned only if a protected output has OPM semantics. DxgkDdiOPMGetCOPPCompatibleInformation always returns this error if a protected output has OPM semantics.DxgkDdiOPMGetInformation returns this error code if the caller requested COPP-specific information.DxgkDdiOPMConfigureProtectedOutput returns this error when the caller tries to use a COPP-specific command.
	STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_COPP_SEMANTICS = 0xC01E051C
	// The DxgkDdiOPMGetInformation and DxgkDdiOPMGetCOPPCompatibleInformation functions return this error code if the passed-in sequence number is not the expected sequence number or the passed-in OMAC value is invalid.
	STATUS_GRAPHICS_OPM_INVALID_INFORMATION_REQUEST = 0xC01E051D
	// The function failed because an unexpected error occurred inside a display driver.
	STATUS_GRAPHICS_OPM_DRIVER_INTERNAL_ERROR = 0xC01E051E
	// The DxgkDdiOPMGetCOPPCompatibleInformation, DxgkDdiOPMGetInformation, or DxgkDdiOPMConfigureProtectedOutput function failed. This error is returned only if a protected output has COPP semantics. DxgkDdiOPMGetCOPPCompatibleInformation returns this error code if the caller requested OPM-specific information.DxgkDdiOPMGetInformation always returns this error if a protected output has COPP semantics.DxgkDdiOPMConfigureProtectedOutput returns this error when the caller tries to use an OPM-specific command.
	STATUS_GRAPHICS_OPM_PROTECTED_OUTPUT_DOES_NOT_HAVE_OPM_SEMANTICS = 0xC01E051F
	// The DxgkDdiOPMGetCOPPCompatibleInformation and DxgkDdiOPMConfigureProtectedOutput functions return this error if the display driver does not support the DXGKMDT_OPM_GET_ACP_AND_CGMSA_SIGNALING and DXGKMDT_OPM_SET_ACP_AND_CGMSA_SIGNALING GUIDs.
	STATUS_GRAPHICS_OPM_SIGNALING_NOT_SUPPORTED = 0xC01E0520
	// The DxgkDdiOPMConfigureProtectedOutput function returns this error code if the passed-in sequence number is not the expected sequence number or the passed-in OMAC value is invalid.
	STATUS_GRAPHICS_OPM_INVALID_CONFIGURATION_REQUEST = 0xC01E0521
	// The monitor connected to the specified video output does not have an I2C bus.
	STATUS_GRAPHICS_I2C_NOT_SUPPORTED = 0xC01E0580
	// No device on the I2C bus has the specified address.
	STATUS_GRAPHICS_I2C_DEVICE_DOES_NOT_EXIST = 0xC01E0581
	// An error occurred while transmitting data to the device on the I2C bus.
	STATUS_GRAPHICS_I2C_ERROR_TRANSMITTING_DATA = 0xC01E0582
	// An error occurred while receiving data from the device on the I2C bus.
	STATUS_GRAPHICS_I2C_ERROR_RECEIVING_DATA = 0xC01E0583
	// The monitor does not support the specified VCP code.
	STATUS_GRAPHICS_DDCCI_VCP_NOT_SUPPORTED = 0xC01E0584
	// The data received from the monitor is invalid.
	STATUS_GRAPHICS_DDCCI_INVALID_DATA = 0xC01E0585
	// A function call failed because a monitor returned an invalid timing status byte when the operating system used the DDC/CI get timing report and timing message command to get a timing report from a monitor.
	STATUS_GRAPHICS_DDCCI_MONITOR_RETURNED_INVALID_TIMING_STATUS_BYTE = 0xC01E0586
	// A monitor returned a DDC/CI capabilities string that did not comply with the ACCESS.bus 3.0, DDC/CI 1.1, or MCCS 2 Revision 1 specification.
	STATUS_GRAPHICS_DDCCI_INVALID_CAPABILITIES_STRING = 0xC01E0587
	// An internal error caused an operation to fail.
	STATUS_GRAPHICS_MCA_INTERNAL_ERROR = 0xC01E0588
	// An operation failed because a DDC/CI message had an invalid value in its command field.
	STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_COMMAND = 0xC01E0589
	// This error occurred because a DDC/CI message had an invalid value in its length field.
	STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_LENGTH = 0xC01E058A
	// This error occurred because the value in a DDC/CI message's checksum field did not match the message's computed checksum value. This error implies that the data was corrupted while it was being transmitted from a monitor to a computer.
	STATUS_GRAPHICS_DDCCI_INVALID_MESSAGE_CHECKSUM = 0xC01E058B
	// This function failed because an invalid monitor handle was passed to it.
	STATUS_GRAPHICS_INVALID_PHYSICAL_MONITOR_HANDLE = 0xC01E058C
	// The operating system asynchronously destroyed the monitor that corresponds to this handle because the operating system's state changed. This error typically occurs because the monitor PDO associated with this handle was removed or stopped, or a display mode change occurred. A display mode change occurs when Windows sends a WM_DISPLAYCHANGE message to applications.
	STATUS_GRAPHICS_MONITOR_NO_LONGER_EXISTS = 0xC01E058D
	// This function can be used only if a program is running in the local console session. It cannot be used if a program is running on a remote desktop session or on a terminal server session.
	STATUS_GRAPHICS_ONLY_CONSOLE_SESSION_SUPPORTED = 0xC01E05E0
	// This function cannot find an actual GDI display device that corresponds to the specified GDI display device name.
	STATUS_GRAPHICS_NO_DISPLAY_DEVICE_CORRESPONDS_TO_NAME = 0xC01E05E1
	// The function failed because the specified GDI display device was not attached to the Windows desktop.
	STATUS_GRAPHICS_DISPLAY_DEVICE_NOT_ATTACHED_TO_DESKTOP = 0xC01E05E2
	// This function does not support GDI mirroring display devices because GDI mirroring display devices do not have any physical monitors associated with them.
	STATUS_GRAPHICS_MIRRORING_DEVICES_NOT_SUPPORTED = 0xC01E05E3
	// The function failed because an invalid pointer parameter was passed to it. A pointer parameter is invalid if it is null, is not correctly aligned, or points to an invalid address or to a kernel mode address.
	STATUS_GRAPHICS_INVALID_POINTER = 0xC01E05E4
	// This function failed because the GDI device passed to it did not have a monitor associated with it.
	STATUS_GRAPHICS_NO_MONITORS_CORRESPOND_TO_DISPLAY_DEVICE = 0xC01E05E5
	// An array passed to the function cannot hold all of the data that the function must copy into the array.
	STATUS_GRAPHICS_PARAMETER_ARRAY_TOO_SMALL = 0xC01E05E6
	// An internal error caused an operation to fail.
	STATUS_GRAPHICS_INTERNAL_ERROR = 0xC01E05E7
	// The function failed because the current session is changing its type. This function cannot be called when the current session is changing its type. Three types of sessions currently exist: console, disconnected, and remote (RDP or ICA).
	STATUS_GRAPHICS_SESSION_TYPE_CHANGE_IN_PROGRESS = 0xC01E05E8
	// The volume must be unlocked before it can be used.
	STATUS_FVE_LOCKED_VOLUME = 0xC0210000
	// The volume is fully decrypted and no key is available.
	STATUS_FVE_NOT_ENCRYPTED = 0xC0210001
	// The control block for the encrypted volume is not valid.
	STATUS_FVE_BAD_INFORMATION = 0xC0210002
	// Not enough free space remains on the volume to allow encryption.
	STATUS_FVE_TOO_SMALL = 0xC0210003
	// The partition cannot be encrypted because the file system is not supported.
	STATUS_FVE_FAILED_WRONG_FS = 0xC0210004
	// The file system is inconsistent. Run the Check Disk utility.
	STATUS_FVE_FAILED_BAD_FS = 0xC0210005
	// The file system does not extend to the end of the volume.
	STATUS_FVE_FS_NOT_EXTENDED = 0xC0210006
	// This operation cannot be performed while a file system is mounted on the volume.
	STATUS_FVE_FS_MOUNTED = 0xC0210007
	// BitLocker Drive Encryption is not included with this version of Windows.
	STATUS_FVE_NO_LICENSE = 0xC0210008
	// The requested action was denied by the FVE control engine.
	STATUS_FVE_ACTION_NOT_ALLOWED = 0xC0210009
	// The data supplied is malformed.
	STATUS_FVE_BAD_DATA = 0xC021000A
	// The volume is not bound to the system.
	STATUS_FVE_VOLUME_NOT_BOUND = 0xC021000B
	// The volume specified is not a data volume.
	STATUS_FVE_NOT_DATA_VOLUME = 0xC021000C
	// A read operation failed while converting the volume.
	STATUS_FVE_CONV_READ_ERROR = 0xC021000D
	// A write operation failed while converting the volume.
	STATUS_FVE_CONV_WRITE_ERROR = 0xC021000E
	// The control block for the encrypted volume was updated by another thread. Try again.
	STATUS_FVE_OVERLAPPED_UPDATE = 0xC021000F
	// The volume encryption algorithm cannot be used on this sector size.
	STATUS_FVE_FAILED_SECTOR_SIZE = 0xC0210010
	// BitLocker recovery authentication failed.
	STATUS_FVE_FAILED_AUTHENTICATION = 0xC0210011
	// The volume specified is not the boot operating system volume.
	STATUS_FVE_NOT_OS_VOLUME = 0xC0210012
	// The BitLocker startup key or recovery password could not be read from external media.
	STATUS_FVE_KEYFILE_NOT_FOUND = 0xC0210013
	// The BitLocker startup key or recovery password file is corrupt or invalid.
	STATUS_FVE_KEYFILE_INVALID = 0xC0210014
	// The BitLocker encryption key could not be obtained from the startup key or the recovery password.
	STATUS_FVE_KEYFILE_NO_VMK = 0xC0210015
	// The TPM is disabled.
	STATUS_FVE_TPM_DISABLED = 0xC0210016
	// The authorization data for the SRK of the TPM is not zero.
	STATUS_FVE_TPM_SRK_AUTH_NOT_ZERO = 0xC0210017
	// The system boot information changed or the TPM locked out access to BitLocker encryption keys until the computer is restarted.
	STATUS_FVE_TPM_INVALID_PCR = 0xC0210018
	// The BitLocker encryption key could not be obtained from the TPM.
	STATUS_FVE_TPM_NO_VMK = 0xC0210019
	// The BitLocker encryption key could not be obtained from the TPM and PIN.
	STATUS_FVE_PIN_INVALID = 0xC021001A
	// A boot application hash does not match the hash computed when BitLocker was turned on.
	STATUS_FVE_AUTH_INVALID_APPLICATION = 0xC021001B
	// The Boot Configuration Data (BCD) settings are not supported or have changed because BitLocker was enabled.
	STATUS_FVE_AUTH_INVALID_CONFIG = 0xC021001C
	// Boot debugging is enabled. Run Windows Boot Configuration Data Store Editor (bcdedit.exe) to turn it off.
	STATUS_FVE_DEBUGGER_ENABLED = 0xC021001D
	// The BitLocker encryption key could not be obtained.
	STATUS_FVE_DRY_RUN_FAILED = 0xC021001E
	// The metadata disk region pointer is incorrect.
	STATUS_FVE_BAD_METADATA_POINTER = 0xC021001F
	// The backup copy of the metadata is out of date.
	STATUS_FVE_OLD_METADATA_COPY = 0xC0210020
	// No action was taken because a system restart is required.
	STATUS_FVE_REBOOT_REQUIRED = 0xC0210021
	// No action was taken because BitLocker Drive Encryption is in RAW access mode.
	STATUS_FVE_RAW_ACCESS = 0xC0210022
	// BitLocker Drive Encryption cannot enter RAW access mode for this volume.
	STATUS_FVE_RAW_BLOCKED = 0xC0210023
	// This feature of BitLocker Drive Encryption is not included with this version of Windows.
	STATUS_FVE_NO_FEATURE_LICENSE = 0xC0210026
	// Group policy does not permit turning off BitLocker Drive Encryption on roaming data volumes.
	STATUS_FVE_POLICY_USER_DISABLE_RDV_NOT_ALLOWED = 0xC0210027
	// Bitlocker Drive Encryption failed to recover from aborted conversion. This could be due to either all conversion logs being corrupted or the media being write-protected.
	STATUS_FVE_CONV_RECOVERY_FAILED = 0xC0210028
	// The requested virtualization size is too big.
	STATUS_FVE_VIRTUALIZED_SPACE_TOO_BIG = 0xC0210029
	// The drive is too small to be protected using BitLocker Drive Encryption.
	STATUS_FVE_VOLUME_TOO_SMALL = 0xC0210030
	// The callout does not exist.
	STATUS_FWP_CALLOUT_NOT_FOUND = 0xC0220001
	// The filter condition does not exist.
	STATUS_FWP_CONDITION_NOT_FOUND = 0xC0220002
	// The filter does not exist.
	STATUS_FWP_FILTER_NOT_FOUND = 0xC0220003
	// The layer does not exist.
	STATUS_FWP_LAYER_NOT_FOUND = 0xC0220004
	// The provider does not exist.
	STATUS_FWP_PROVIDER_NOT_FOUND = 0xC0220005
	// The provider context does not exist.
	STATUS_FWP_PROVIDER_CONTEXT_NOT_FOUND = 0xC0220006
	// The sublayer does not exist.
	STATUS_FWP_SUBLAYER_NOT_FOUND = 0xC0220007
	// The object does not exist.
	STATUS_FWP_NOT_FOUND = 0xC0220008
	// An object with that GUID or LUID already exists.
	STATUS_FWP_ALREADY_EXISTS = 0xC0220009
	// The object is referenced by other objects and cannot be deleted.
	STATUS_FWP_IN_USE = 0xC022000A
	// The call is not allowed from within a dynamic session.
	STATUS_FWP_DYNAMIC_SESSION_IN_PROGRESS = 0xC022000B
	// The call was made from the wrong session and cannot be completed.
	STATUS_FWP_WRONG_SESSION = 0xC022000C
	// The call must be made from within an explicit transaction.
	STATUS_FWP_NO_TXN_IN_PROGRESS = 0xC022000D
	// The call is not allowed from within an explicit transaction.
	STATUS_FWP_TXN_IN_PROGRESS = 0xC022000E
	// The explicit transaction has been forcibly canceled.
	STATUS_FWP_TXN_ABORTED = 0xC022000F
	// The session has been canceled.
	STATUS_FWP_SESSION_ABORTED = 0xC0220010
	// The call is not allowed from within a read-only transaction.
	STATUS_FWP_INCOMPATIBLE_TXN = 0xC0220011
	// The call timed out while waiting to acquire the transaction lock.
	STATUS_FWP_TIMEOUT = 0xC0220012
	// The collection of network diagnostic events is disabled.
	STATUS_FWP_NET_EVENTS_DISABLED = 0xC0220013
	// The operation is not supported by the specified layer.
	STATUS_FWP_INCOMPATIBLE_LAYER = 0xC0220014
	// The call is allowed for kernel-mode callers only.
	STATUS_FWP_KM_CLIENTS_ONLY = 0xC0220015
	// The call tried to associate two objects with incompatible lifetimes.
	STATUS_FWP_LIFETIME_MISMATCH = 0xC0220016
	// The object is built-in and cannot be deleted.
	STATUS_FWP_BUILTIN_OBJECT = 0xC0220017
	// The maximum number of boot-time filters has been reached.
	STATUS_FWP_TOO_MANY_BOOTTIME_FILTERS = 0xC0220018
	// The maximum number of callouts has been reached.
	STATUS_FWP_TOO_MANY_CALLOUTS = 0xC0220018
	// A notification could not be delivered because a message queue has reached maximum capacity.
	STATUS_FWP_NOTIFICATION_DROPPED = 0xC0220019
	// The traffic parameters do not match those for the security association context.
	STATUS_FWP_TRAFFIC_MISMATCH = 0xC022001A
	// The call is not allowed for the current security association state.
	STATUS_FWP_INCOMPATIBLE_SA_STATE = 0xC022001B
	// A required pointer is null.
	STATUS_FWP_NULL_POINTER = 0xC022001C
	// An enumerator is not valid.
	STATUS_FWP_INVALID_ENUMERATOR = 0xC022001D
	// The flags field contains an invalid value.
	STATUS_FWP_INVALID_FLAGS = 0xC022001E
	// A network mask is not valid.
	STATUS_FWP_INVALID_NET_MASK = 0xC022001F
	// An FWP_RANGE is not valid.
	STATUS_FWP_INVALID_RANGE = 0xC0220020
	// The time interval is not valid.
	STATUS_FWP_INVALID_INTERVAL = 0xC0220021
	// An array that must contain at least one element has a zero length.
	STATUS_FWP_ZERO_LENGTH_ARRAY = 0xC0220022
	// The displayData.name field cannot be null.
	STATUS_FWP_NULL_DISPLAY_NAME = 0xC0220023
	// The action type is not one of the allowed action types for a filter.
	STATUS_FWP_INVALID_ACTION_TYPE = 0xC0220024
	// The filter weight is not valid.
	STATUS_FWP_INVALID_WEIGHT = 0xC0220025
	// A filter condition contains a match type that is not compatible with the operands.
	STATUS_FWP_MATCH_TYPE_MISMATCH = 0xC0220026
	// An FWP_VALUE or FWPM_CONDITION_VALUE is of the wrong type.
	STATUS_FWP_TYPE_MISMATCH = 0xC0220027
	// An integer value is outside the allowed range.
	STATUS_FWP_OUT_OF_BOUNDS = 0xC0220028
	// A reserved field is nonzero.
	STATUS_FWP_RESERVED = 0xC0220029
	// A filter cannot contain multiple conditions operating on a single field.
	STATUS_FWP_DUPLICATE_CONDITION = 0xC022002A
	// A policy cannot contain the same keying module more than once.
	STATUS_FWP_DUPLICATE_KEYMOD = 0xC022002B
	// The action type is not compatible with the layer.
	STATUS_FWP_ACTION_INCOMPATIBLE_WITH_LAYER = 0xC022002C
	// The action type is not compatible with the sublayer.
	STATUS_FWP_ACTION_INCOMPATIBLE_WITH_SUBLAYER = 0xC022002D
	// The raw context or the provider context is not compatible with the layer.
	STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_LAYER = 0xC022002E
	// The raw context or the provider context is not compatible with the callout.
	STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_CALLOUT = 0xC022002F
	// The authentication method is not compatible with the policy type.
	STATUS_FWP_INCOMPATIBLE_AUTH_METHOD = 0xC0220030
	// The Diffie-Hellman group is not compatible with the policy type.
	STATUS_FWP_INCOMPATIBLE_DH_GROUP = 0xC0220031
	// An IKE policy cannot contain an Extended Mode policy.
	STATUS_FWP_EM_NOT_SUPPORTED = 0xC0220032
	// The enumeration template or subscription will never match any objects.
	STATUS_FWP_NEVER_MATCH = 0xC0220033
	// The provider context is of the wrong type.
	STATUS_FWP_PROVIDER_CONTEXT_MISMATCH = 0xC0220034
	// The parameter is incorrect.
	STATUS_FWP_INVALID_PARAMETER = 0xC0220035
	// The maximum number of sublayers has been reached.
	STATUS_FWP_TOO_MANY_SUBLAYERS = 0xC0220036
	// The notification function for a callout returned an error.
	STATUS_FWP_CALLOUT_NOTIFICATION_FAILED = 0xC0220037
	// The IPsec authentication configuration is not compatible with the authentication type.
	STATUS_FWP_INCOMPATIBLE_AUTH_CONFIG = 0xC0220038
	// The IPsec cipher configuration is not compatible with the cipher type.
	STATUS_FWP_INCOMPATIBLE_CIPHER_CONFIG = 0xC0220039
	// A policy cannot contain the same auth method more than once.
	STATUS_FWP_DUPLICATE_AUTH_METHOD = 0xC022003C
	// The TCP/IP stack is not ready.
	STATUS_FWP_TCPIP_NOT_READY = 0xC0220100
	// The injection handle is being closed by another thread.
	STATUS_FWP_INJECT_HANDLE_CLOSING = 0xC0220101
	// The injection handle is stale.
	STATUS_FWP_INJECT_HANDLE_STALE = 0xC0220102
	// The classify cannot be pended.
	STATUS_FWP_CANNOT_PEND = 0xC0220103
	// The binding to the network interface is being closed.
	STATUS_NDIS_CLOSING = 0xC0230002
	// An invalid version was specified.
	STATUS_NDIS_BAD_VERSION = 0xC0230004
	// An invalid characteristics table was used.
	STATUS_NDIS_BAD_CHARACTERISTICS = 0xC0230005
	// Failed to find the network interface or the network interface is not ready.
	STATUS_NDIS_ADAPTER_NOT_FOUND = 0xC0230006
	// Failed to open the network interface.
	STATUS_NDIS_OPEN_FAILED = 0xC0230007
	// The network interface has encountered an internal unrecoverable failure.
	STATUS_NDIS_DEVICE_FAILED = 0xC0230008
	// The multicast list on the network interface is full.
	STATUS_NDIS_MULTICAST_FULL = 0xC0230009
	// An attempt was made to add a duplicate multicast address to the list.
	STATUS_NDIS_MULTICAST_EXISTS = 0xC023000A
	// At attempt was made to remove a multicast address that was never added.
	STATUS_NDIS_MULTICAST_NOT_FOUND = 0xC023000B
	// The network interface aborted the request.
	STATUS_NDIS_REQUEST_ABORTED = 0xC023000C
	// The network interface cannot process the request because it is being reset.
	STATUS_NDIS_RESET_IN_PROGRESS = 0xC023000D
	// An attempt was made to send an invalid packet on a network interface.
	STATUS_NDIS_INVALID_PACKET = 0xC023000F
	// The specified request is not a valid operation for the target device.
	STATUS_NDIS_INVALID_DEVICE_REQUEST = 0xC0230010
	// The network interface is not ready to complete this operation.
	STATUS_NDIS_ADAPTER_NOT_READY = 0xC0230011
	// The length of the buffer submitted for this operation is not valid.
	STATUS_NDIS_INVALID_LENGTH = 0xC0230014
	// The data used for this operation is not valid.
	STATUS_NDIS_INVALID_DATA = 0xC0230015
	// The length of the submitted buffer for this operation is too small.
	STATUS_NDIS_BUFFER_TOO_SHORT = 0xC0230016
	// The network interface does not support this object identifier.
	STATUS_NDIS_INVALID_OID = 0xC0230017
	// The network interface has been removed.
	STATUS_NDIS_ADAPTER_REMOVED = 0xC0230018
	// The network interface does not support this media type.
	STATUS_NDIS_UNSUPPORTED_MEDIA = 0xC0230019
	// An attempt was made to remove a token ring group address that is in use by other components.
	STATUS_NDIS_GROUP_ADDRESS_IN_USE = 0xC023001A
	// An attempt was made to map a file that cannot be found.
	STATUS_NDIS_FILE_NOT_FOUND = 0xC023001B
	// An error occurred while NDIS tried to map the file.
	STATUS_NDIS_ERROR_READING_FILE = 0xC023001C
	// An attempt was made to map a file that is already mapped.
	STATUS_NDIS_ALREADY_MAPPED = 0xC023001D
	// An attempt to allocate a hardware resource failed because the resource is used by another component.
	STATUS_NDIS_RESOURCE_CONFLICT = 0xC023001E
	// The I/O operation failed because the network media is disconnected or the wireless access point is out of range.
	STATUS_NDIS_MEDIA_DISCONNECTED = 0xC023001F
	// The network address used in the request is invalid.
	STATUS_NDIS_INVALID_ADDRESS = 0xC0230022
	// The offload operation on the network interface has been paused.
	STATUS_NDIS_PAUSED = 0xC023002A
	// The network interface was not found.
	STATUS_NDIS_INTERFACE_NOT_FOUND = 0xC023002B
	// The revision number specified in the structure is not supported.
	STATUS_NDIS_UNSUPPORTED_REVISION = 0xC023002C
	// The specified port does not exist on this network interface.
	STATUS_NDIS_INVALID_PORT = 0xC023002D
	// The current state of the specified port on this network interface does not support the requested operation.
	STATUS_NDIS_INVALID_PORT_STATE = 0xC023002E
	// The miniport adapter is in a lower power state.
	STATUS_NDIS_LOW_POWER_STATE = 0xC023002F
	// The network interface does not support this request.
	STATUS_NDIS_NOT_SUPPORTED = 0xC02300BB
	// The TCP connection is not offloadable because of a local policy setting.
	STATUS_NDIS_OFFLOAD_POLICY = 0xC023100F
	// The TCP connection is not offloadable by the Chimney offload target.
	STATUS_NDIS_OFFLOAD_CONNECTION_REJECTED = 0xC0231012
	// The IP Path object is not in an offloadable state.
	STATUS_NDIS_OFFLOAD_PATH_REJECTED = 0xC0231013
	// The wireless LAN interface is in auto-configuration mode and does not support the requested parameter change operation.
	STATUS_NDIS_DOT11_AUTO_CONFIG_ENABLED = 0xC0232000
	// The wireless LAN interface is busy and cannot perform the requested operation.
	STATUS_NDIS_DOT11_MEDIA_IN_USE = 0xC0232001
	// The wireless LAN interface is power down and does not support the requested operation.
	STATUS_NDIS_DOT11_POWER_STATE_INVALID = 0xC0232002
	// The list of wake on LAN patterns is full.
	STATUS_NDIS_PM_WOL_PATTERN_LIST_FULL = 0xC0232003
	// The list of low power protocol offloads is full.
	STATUS_NDIS_PM_PROTOCOL_OFFLOAD_LIST_FULL = 0xC0232004
	// The SPI in the packet does not match a valid IPsec SA.
	STATUS_IPSEC_BAD_SPI = 0xC0360001
	// The packet was received on an IPsec SA whose lifetime has expired.
	STATUS_IPSEC_SA_LIFETIME_EXPIRED = 0xC0360002
	// The packet was received on an IPsec SA that does not match the packet characteristics.
	STATUS_IPSEC_WRONG_SA = 0xC0360003
	// The packet sequence number replay check failed.
	STATUS_IPSEC_REPLAY_CHECK_FAILED = 0xC0360004
	// The IPsec header and/or trailer in the packet is invalid.
	STATUS_IPSEC_INVALID_PACKET = 0xC0360005
	// The IPsec integrity check failed.
	STATUS_IPSEC_INTEGRITY_CHECK_FAILED = 0xC0360006
	// IPsec dropped a clear text packet.
	STATUS_IPSEC_CLEAR_TEXT_DROP = 0xC0360007
	// IPsec dropped an incoming ESP packet in authenticated firewall mode.  This drop is benign.
	STATUS_IPSEC_AUTH_FIREWALL_DROP = 0xC0360008
	// IPsec dropped a packet due to DOS throttle.
	STATUS_IPSEC_THROTTLE_DROP = 0xC0360009
	// IPsec Dos Protection matched an explicit block rule.
	STATUS_IPSEC_DOSP_BLOCK = 0xC0368000
	// IPsec Dos Protection received an IPsec specific multicast packet which is not allowed.
	STATUS_IPSEC_DOSP_RECEIVED_MULTICAST = 0xC0368001
	// IPsec Dos Protection received an incorrectly formatted packet.
	STATUS_IPSEC_DOSP_INVALID_PACKET = 0xC0368002
	// IPsec Dos Protection failed to lookup state.
	STATUS_IPSEC_DOSP_STATE_LOOKUP_FAILED = 0xC0368003
	// IPsec Dos Protection failed to create state because there are already maximum number of entries allowed by policy.
	STATUS_IPSEC_DOSP_MAX_ENTRIES = 0xC0368004
	// IPsec Dos Protection received an IPsec negotiation packet for a keying module which is not allowed by policy.
	STATUS_IPSEC_DOSP_KEYMOD_NOT_ALLOWED = 0xC0368005
	// IPsec Dos Protection failed to create per internal IP ratelimit queue because there is already maximum number of queues allowed by policy.
	STATUS_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES = 0xC0368006
	// The system does not support mirrored volumes.
	STATUS_VOLMGR_MIRROR_NOT_SUPPORTED = 0xC038005B
	// The system does not support RAID-5 volumes.
	STATUS_VOLMGR_RAID5_NOT_SUPPORTED = 0xC038005C
	// A virtual disk support provider for the specified file was not found.
	STATUS_VIRTDISK_PROVIDER_NOT_FOUND = 0xC03A0014
	// The specified disk is not a virtual disk.
	STATUS_VIRTDISK_NOT_VIRTUAL_DISK = 0xC03A0015
	// The chain of virtual hard disks is inaccessible. The process has not been granted access rights to the parent virtual hard disk for the differencing disk.
	STATUS_VHD_PARENT_VHD_ACCESS_DENIED = 0xC03A0016
	// The chain of virtual hard disks is corrupted. There is a mismatch in the virtual sizes of the parent virtual hard disk and differencing disk.
	STATUS_VHD_CHILD_PARENT_SIZE_MISMATCH = 0xC03A0017
	// The chain of virtual hard disks is corrupted. A differencing disk is indicated in its own parent chain.
	STATUS_VHD_DIFFERENCING_CHAIN_CYCLE_DETECTED = 0xC03A0018
	// The chain of virtual hard disks is inaccessible. There was an error opening a virtual hard disk further up the chain.
	STATUS_VHD_DIFFERENCING_CHAIN_ERROR_IN_PARENT = 0xC03A0019
)
View Source 
const (
	OBJ_INHERIT            = 0x00000002
	OBJ_PERMANENT          = 0x00000010
	OBJ_EXCLUSIVE          = 0x00000020
	OBJ_CASE_INSENSITIVE   = 0x00000040
	OBJ_OPENIF             = 0x00000080
	OBJ_OPENLINK           = 0x00000100
	OBJ_KERNEL_HANDLE      = 0x00000200
	OBJ_FORCE_ACCESS_CHECK = 0x00000400
	OBJ_VALID_ATTRIBUTES   = 0x000007F2
)
View Source 
const (
	DELETE          AccessMask = 0x00010000
	READ_CONTROL               = 0x00020000
	WRITE_DAC                  = 0x00040000
	WRITE_OWNER                = 0x00080000
	SYNCHRONIZE                = 0x00100000
	MAXIMUM_ALLOWED            = 0x02000000

	STANDARD_RIGHTS_READ     = 0x00020000
	STANDARD_RIGHTS_WRITE    = READ_CONTROL
	STANDARD_RIGHTS_EXECUTE  = READ_CONTROL
	STANDARD_RIGHTS_REQUIRED = 0x000F0000

	STANDARD_RIGHTS_ALL = 0x001F0000

	SPECIFIC_RIGHTS_ALL    = 0x0000FFFF
	ACCESS_SYSTEM_SECURITY = 0x01000000

	DIRECTORY_QUERY               = 0x00000001
	DIRECTORY_TRAVERSE            = 0x00000002
	DIRECTORY_CREATE_OBJECT       = 0x00000004
	DIRECTORY_CREATE_SUBDIRECTORY = 0x00000008
	DIRECTORY_ALL_ACCESS          = 0x0000000f

	KEY_QUERY_VALUE        = 0x00000001
	KEY_SET_VALUE          = 0x00000002
	KEY_CREATE_SUB_KEY     = 0x00000004
	KEY_ENUMERATE_SUB_KEYS = 0x00000008
	KEY_NOTIFY             = 0x00000010
	KEY_CREATE_LINK        = 0x00000020
	KEY_WOW64_64KEY        = 0x00000100
	KEY_WOW64_32KEY        = 0x00000200
	KEY_WOW64_RES          = 0x00000300

	KEY_READ       = ((STANDARD_RIGHTS_READ | KEY_QUERY_VALUE | KEY_ENUMERATE_SUB_KEYS | KEY_NOTIFY) &^ SYNCHRONIZE)
	KEY_WRITE      = ((STANDARD_RIGHTS_WRITE | KEY_SET_VALUE | KEY_CREATE_SUB_KEY) &^ SYNCHRONIZE)
	KEY_EXECUTE    = ((KEY_READ) &^ SYNCHRONIZE)
	KEY_ALL_ACCESS = ((STANDARD_RIGHTS_ALL | KEY_QUERY_VALUE | KEY_SET_VALUE | KEY_CREATE_SUB_KEY | KEY_ENUMERATE_SUB_KEYS | KEY_NOTIFY | KEY_CREATE_LINK) &^ SYNCHRONIZE)

	SECTION_QUERY       = 0x000001
	SECTION_MAP_WRITE   = 0x000002
	SECTION_MAP_READ    = 0x000004
	SECTION_MAP_EXECUTE = 0x000008
	SECTION_EXTEND_SIZE = 0x000010
	SECTION_ALL_ACCESS  = 0x0F001F

	PAGE_NOACCESS          = 0x0001
	PAGE_READONLY          = 0x0002
	PAGE_READWRITE         = 0x0004
	PAGE_WRITECOPY         = 0x0008
	PAGE_EXECUTE           = 0x0010
	PAGE_EXECUTE_READ      = 0x0020
	PAGE_EXECUTE_READWRITE = 0x0040
	PAGE_EXECUTE_WRITECOPY = 0x0080
	PAGE_GUARD             = 0x0100
	PAGE_NOCACHE           = 0x0200

	SEC_BASED     = 0x00200000
	SEC_NO_CHANGE = 0x00400000
	SEC_FILE      = 0x00800000
	SEC_IMAGE     = 0x01000000
	SEC_VLM       = 0x02000000
	SEC_RESERVE   = 0x04000000
	SEC_COMMIT    = 0x08000000
	SEC_NOCACHE   = 0x10000000

	MEM_IMAGE                   = SEC_IMAGE
	MEM_COMMIT                  = 0x00001000
	MEM_RESERVE                 = 0x00002000
	MEM_DECOMMIT                = 0x00004000
	MEM_RELEASE                 = 0x00008000
	MEM_FREE                    = 0x00010000
	MEM_PRIVATE                 = 0x00020000
	MEM_MAPPED                  = 0x00040000
	MEM_RESET                   = 0x00080000
	MEM_TOP_DOWN                = 0x00100000
	MEM_WRITE_WATCH             = 0x00200000
	MEM_PHYSICAL                = 0x00400000
	MEM_ROTATE                  = 0x00800000
	MEM_DIFFERENT_IMAGE_BASE_OK = 0x00800000
	MEM_RESET_UNDO              = 0x01000000
	MEM_LARGE_PAGES             = 0x20000000
	MEM_4MB_PAGES               = 0x80000000
	MEM_64K_PAGES               = (MEM_LARGE_PAGES | MEM_PHYSICAL)
)

see winnt.h

View Source 
const (
	ObjectBasicInformation ObjectInformationClass = 0
	ObjectNameInformation                         = 1
	ObjectTypeInformation                         = 2
	ObjectAllInformation                          = 3
	ObjectDataInformation                         = 4
)
View Source 
const (
	PROCESS_TERMINATE                 = 0x0001
	PROCESS_CREATE_THREAD             = 0x0002
	PROCESS_SET_SESSIONID             = 0x0004
	PROCESS_VM_OPERATION              = 0x0008
	PROCESS_VM_READ                   = 0x0010
	PROCESS_VM_WRITE                  = 0x0020
	PROCESS_DUP_HANDLE                = 0x0040
	PROCESS_CREATE_PROCESS            = 0x0080
	PROCESS_SET_QUOTA                 = 0x0100
	PROCESS_SET_INFORMATION           = 0x0200
	PROCESS_QUERY_INFORMATION         = 0x0400
	PROCESS_SUSPEND_RESUME            = 0x0800
	PROCESS_QUERY_LIMITED_INFORMATION = 0x1000
	PROCESS_ALL_ACCESS                = (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0xffff)
)
View Source 
const (
	THREAD_TERMINATE                 = 0x0001
	THREAD_SUSPEND_RESUME            = 0x0002
	THREAD_GET_CONTEXT               = 0x0008
	THREAD_SET_CONTEXT               = 0x0010
	THREAD_SET_INFORMATION           = 0x0020
	THREAD_QUERY_INFORMATION         = 0x0040
	THREAD_SET_THREAD_TOKEN          = 0x0080
	THREAD_IMPERSONATE               = 0x0100
	THREAD_DIRECT_IMPERSONATION      = 0x0200
	THREAD_SET_LIMITED_INFORMATION   = 0x0400
	THREAD_QUERY_LIMITED_INFORMATION = 0x0800
)
View Source 
const (
	NtCurrentProcess = Handle(^uintptr(0))
	NtCurrentThread  = Handle(^uintptr(0) - 1)
)
View Source 
const (
	ProcessBasicInformation                     ProcessInformationClass = 0
	ProcessQuotaLimits                                                  = 1
	ProcessIoCounters                                                   = 2
	ProcessVmCounters                                                   = 3
	ProcessTimes                                                        = 4
	ProcessBasePriority                                                 = 5
	ProcessRaisePriority                                                = 6
	ProcessDebugPort                                                    = 7
	ProcessExceptionPort                                                = 8
	ProcessAccessToken                                                  = 9
	ProcessLdtInformation                                               = 10
	ProcessLdtSize                                                      = 11
	ProcessDefaultHardErrorMode                                         = 12
	ProcessIoPortHandlers                                               = 13
	ProcessPooledUsageAndLimits                                         = 14
	ProcessWorkingSetWatch                                              = 15
	ProcessUserModeIOPL                                                 = 16
	ProcessEnableAlignmentFaultFixup                                    = 17
	ProcessPriorityClass                                                = 18
	ProcessWx86Information                                              = 19
	ProcessHandleCount                                                  = 20
	ProcessAffinityMask                                                 = 21
	ProcessPriorityBoost                                                = 22
	ProcessDeviceMap                                                    = 23
	ProcessSessionInformation                                           = 24
	ProcessForegroundInformation                                        = 25
	ProcessWow64Information                                             = 26
	ProcessImageFileName                                                = 27
	ProcessLUIDDeviceMapsEnabled                                        = 28
	ProcessBreakOnTermination                                           = 29
	ProcessDebugObjectHandle                                            = 30
	ProcessDebugFlags                                                   = 31
	ProcessHandleTracing                                                = 32
	ProcessIoPriority                                                   = 33
	ProcessExecuteFlags                                                 = 34
	ProcessTlsInformation                                               = 35
	ProcessCookie                                                       = 36
	ProcessImageInformation                                             = 37
	ProcessCycleTime                                                    = 38
	ProcessPagePriority                                                 = 39
	ProcessInstrumentationCallback                                      = 40
	ProcessThreadStackAllocation                                        = 41
	ProcessWorkingSetWatchEx                                            = 42
	ProcessImageFileNameWin32                                           = 43
	ProcessImageFileMapping                                             = 44
	ProcessAffinityUpdateMode                                           = 45
	ProcessMemoryAllocationMode                                         = 46
	ProcessGroupInformation                                             = 47
	ProcessTokenVirtualizationEnabled                                   = 48
	ProcessConsoleHostProcess                                           = 49
	ProcessWindowInformation                                            = 50
	ProcessHandleInformation                                            = 51
	ProcessMitigationPolicy                                             = 52
	ProcessDynamicFunctionTableInformation                              = 53
	ProcessHandleCheckingMode                                           = 54
	ProcessKeepAliveCount                                               = 55
	ProcessRevokeFileHandles                                            = 56
	ProcessWorkingSetControl                                            = 57
	ProcessHandleTable                                                  = 58
	ProcessCheckStackExtentsMode                                        = 59
	ProcessCommandLineInformation                                       = 60
	ProcessProtectionInformation                                        = 61
	ProcessMemoryExhaustion                                             = 62
	ProcessFaultInformation                                             = 63
	ProcessTelemetryIdInformation                                       = 64
	ProcessCommitReleaseInformation                                     = 65
	ProcessDefaultCpuSetsInformation                                    = 66
	ProcessAllowedCpuSetsInformation                                    = 67
	ProcessSubsystemProcess                                             = 68
	ProcessJobMemoryInformation                                         = 69
	ProcessInPrivate                                                    = 70
	ProcessRaiseUMExceptionOnInvalidHandleClose                         = 71
	ProcessIumChallengeResponse                                         = 72
	ProcessChildProcessInformation                                      = 73
	ProcessHighGraphicsPriorityInformation                              = 74
	ProcessSubsystemInformation                                         = 75
	ProcessEnergyValues                                                 = 76
	ProcessPowerThrottlingState                                         = 77
	ProcessReserved3Information                                         = 78
	ProcessWin32kSyscallFilterInformation                               = 79
	ProcessDisableSystemAllowedCpuSets                                  = 80
	ProcessWakeInformation                                              = 81
	ProcessEnergyTrackingState                                          = 82
	ProcessManageWritesToExecutableMemory                               = 83
	ProcessCaptureTrustletLiveDump                                      = 84
	ProcessTelemetryCoverage                                            = 85
	ProcessEnclaveInformation                                           = 86
	ProcessEnableReadWriteVmLogging                                     = 87
	ProcessUptimeInformation                                            = 88
	ProcessImageSection                                                 = 89
	ProcessDebugAuthInformation                                         = 90
	ProcessSystemResourceManagement                                     = 91
	ProcessSequenceNumber                                               = 92
	ProcessLoaderDetour                                                 = 93
	ProcessSecurityDomainInformation                                    = 94
	ProcessCombineSecurityDomainsInformation                            = 95
	ProcessEnableLogging                                                = 96
	ProcessLeapSecondInformation                                        = 97
	ProcessFiberShadowStackAllocation                                   = 98
	ProcessFreeFiberShadowStackAllocation                               = 99
	ProcessAltSystemCallInformation                                     = 100
	ProcessDynamicEHContinuationTargets                                 = 101
	ProcessDynamicEnforcedCetCompatibleRanges                           = 102
	ProcessCreateStateChange                                            = 103
	ProcessApplyStateChange                                             = 104
	ProcessEnableOptionalXStateFeatures                                 = 105
	ProcessAltPrefetchParam                                             = 106
	ProcessAssignCpuPartitions                                          = 107
	ProcessPriorityClassEx                                              = 108
	ProcessMembershipInformation                                        = 109
	ProcessEffectiveIoPriority                                          = 110
	ProcessEffectivePagePriority                                        = 111
)
View Source 
const (
	ThreadBasicInformation          ThreadInformationClass = 0
	ThreadTimes                                            = 1
	ThreadPriority                                         = 2
	ThreadBasePriority                                     = 3
	ThreadAffinityMask                                     = 4
	ThreadImpersonationToken                               = 5
	ThreadDescriptorTableEntry                             = 6
	ThreadEnableAlignmentFaultFixup                        = 7
	ThreadEventPair_Reusable                               = 8
	ThreadQuerySetWin32StartAddress                        = 9
	ThreadZeroTlsCell                                      = 10
	ThreadPerformanceCount                                 = 11
	ThreadAmILastThread                                    = 12
	ThreadIdealProcessor                                   = 13
	ThreadPriorityBoost                                    = 14
	ThreadSetTlsArrayAddress                               = 15
	ThreadIsIoPending                                      = 16
	ThreadHideFromDebugger                                 = 17
	ThreadBreakOnTermination                               = 18
	ThreadSwitchLegacyState                                = 19
	ThreadIsTerminated                                     = 20
	ThreadLastSystemCall                                   = 21
	ThreadIoPriority                                       = 22
	ThreadCycleTime                                        = 23
	ThreadPagePriority                                     = 24
	ThreadActualBasePriority                               = 25
	ThreadTebInformation                                   = 26
	ThreadCSwitchMon                                       = 27
	ThreadCSwitchPmu                                       = 28
	ThreadWow64Context                                     = 29
	ThreadGroupInformation                                 = 30
	ThreadUmsInformation                                   = 31
	ThreadCounterProfiling                                 = 32
	ThreadIdealProcessorEx                                 = 33
	MaxThreadInfoClass                                     = 34
)
View Source 
const (
	KeyBasicInformation          KeyInformationClass = 0
	KeyNodeInformation                               = 1
	KeyFullInformation                               = 2
	KeyNameInformation                               = 3
	KeyCachedInformation                             = 4
	KeyFlagsInformation                              = 5
	KeyVirtualizationInformation                     = 6
	KeyHandleTagsInformation                         = 7
	MaxKeyInfoClass                                  = 8
)
View Source 
const (
	KeyValueBasicInformation          KeyValueInformationClass = 0
	KeyValueFullInformation                                    = 1
	KeyValuePartialInformation                                 = 2
	KeyValueFullInformationAlign64                             = 3
	KeyValuePartialInformationAlign64                          = 4
	MaxKeyValueInfoClass                                       = 5
)
View Source 
const (
	KeyWriteTimeInformation         KeySetInformationClass = 0
	KeyWow64FlagsInformation                               = 1
	KeyControlFlagsInformation                             = 2
	KeySetVirtualizationInformation                        = 3
	KeySetDebugInformation                                 = 4
	KeySetHandleTagsInformation                            = 5
	MaxKeySetInfoClass                                     = 6
)
View Source 
const (
	SectionBasicInformation         SectionInformationClass = 0
	SectionImageInformation                                 = 1
	SectionRelocationInformation                            = 2
	SectionOriginalBaseInformation                          = 3
	SectionInternalImageInformation                         = 4
)
View Source 
const (
	SystemBasicInformation                SystemInformationClass = 0
	SystemProcessorInformation                                   = 1
	SystemPerformanceInformation                                 = 2
	SystemTimeOfDayInformation                                   = 3
	SystemPathInformation                                        = 4
	SystemProcessInformation                                     = 5
	SystemCallCountInformation                                   = 6
	SystemDeviceInformation                                      = 7
	SystemProcessorPerformanceInformation                        = 8
	SystemFlagsInformation                                       = 9
	SystemCallTimeInformation                                    = 10
	SystemModuleInformation                                      = 11
	SystemLocksInformation                                       = 12
	SystemStackTraceInformation                                  = 13
	SystemPagedPoolInformation                                   = 14
	SystemNonPagedPoolInformation                                = 15
	SystemHandleInformation                                      = 16
	SystemObjectInformation                                      = 17
	SystemPageFileInformation                                    = 18
	SystemVdmInstemulInformation                                 = 19
	SystemVdmBopInformation                                      = 20
	SystemFileCacheInformation                                   = 21
	SystemPoolTagInformation                                     = 22
	SystemInterruptInformation                                   = 23
	SystemDpcBehaviorInformation                                 = 24
	SystemFullMemoryInformation                                  = 25
	SystemLoadGdiDriverInformation                               = 26
	SystemUnloadGdiDriverInformation                             = 27
	SystemTimeAdjustmentInformation                              = 28
	SystemSummaryMemoryInformation                               = 29
	SystemNextEventIdInformation                                 = 30
	SystemEventIdsInformation                                    = 31
	SystemCrashDumpInformation                                   = 32
	SystemExceptionInformation                                   = 33
	SystemCrashDumpStateInformation                              = 34
	SystemKernelDebuggerInformation                              = 35
	SystemContextSwitchInformation                               = 36
	SystemRegistryQuotaInformation                               = 37
	SystemExtendServiceTableInformation                          = 38
	SystemPrioritySeperation                                     = 39
	SystemPlugPlayBusInformation                                 = 40
	SystemDockInformation                                        = 41
	SystemPowerInformation                                       = 42
	SystemProcessorSpeedInformation                              = 43
	SystemCurrentTimeZoneInformation                             = 44
	SystemLookasideInformation                                   = 45
)
View Source 
const (
	TOKEN_ASSIGN_PRIMARY    = 0x0001
	TOKEN_DUPLICATE         = 0x0002
	TOKEN_IMPERSONATE       = 0x0004
	TOKEN_QUERY             = 0x0008
	TOKEN_QUERY_SOURCE      = 0x0010
	TOKEN_ADJUST_PRIVILEGES = 0x0020
	TOKEN_ADJUST_GROUPS     = 0x0040
	TOKEN_ADJUST_DEFAULT    = 0x0080
	TOKEN_ADJUST_SESSIONID  = 0x0100
)
View Source 
const (
	SE_PRIVILEGE_ENABLED_BY_DEFAULT = 0x00000001
	SE_PRIVILEGE_ENABLED            = 0x00000002
	SE_PRIVILEGE_REMOVED            = 0x00000004
	SE_PRIVILEGE_USED_FOR_ACCESS    = 0x80000000
)
View Source 
const (
	TokenUser                            TokenInformationClassT = 1
	TokenGroups                                                 = 2
	TokenPrivileges                                             = 3
	TokenOwner                                                  = 4
	TokenPrimaryGroup                                           = 5
	TokenDefaultDacl                                            = 6
	TokenSource                                                 = 7
	TokenType                                                   = 8
	TokenImpersonationLevel                                     = 9
	TokenStatistics                                             = 10
	TokenRestrictedSids                                         = 11
	TokenSessionId                                              = 12
	TokenGroupsAndPrivileges                                    = 13
	TokenSessionReference                                       = 14
	TokenSandBoxInert                                           = 15
	TokenAuditPolicy                                            = 16
	TokenOrigin                                                 = 17
	TokenElevationType                                          = 18
	TokenLinkedToken                                            = 19
	TokenElevation                                              = 20
	TokenHasRestrictions                                        = 21
	TokenAccessInformation                                      = 22
	TokenVirtualizationAllowed                                  = 23
	TokenVirtualizationEnabled                                  = 24
	TokenIntegrityLevel                                         = 25
	TokenUIAccess                                               = 26
	TokenMandatoryPolicy                                        = 27
	TokenLogonSid                                               = 28
	TokenIsAppContainer                                         = 29
	TokenCapabilities                                           = 30
	TokenAppContainerSid                                        = 31
	TokenAppContainerNumber                                     = 32
	TokenUserClaimAttributes                                    = 33
	TokenDeviceClaimAttributes                                  = 34
	TokenRestrictedUserClaimAttributes                          = 35
	TokenRestrictedDeviceClaimAttributes                        = 36
	TokenDeviceGroups                                           = 37
	TokenRestrictedDeviceGroups                                 = 38
	TokenSecurityAttributes                                     = 39
	TokenIsRestricted                                           = 40
	TokenProcessTrustLevel                                      = 41
	TokenPrivateNameSpace                                       = 42
	TokenSingletonAttributes                                    = 43
	MaxTokenInfoClass                                           = 44
)
View Source 
const (
	SecurityAnonymous      SecurityImpersonationLevel = 0
	SecurityIdentification                            = 1
	SecurityImpersonation                             = 2
	SecurityDelegation                                = 3
)

Variables

This section is empty.

Functions

func RtlDosPathNameToNtPathName_U 

func RtlDosPathNameToNtPathName_U(
	DosFileName *uint16,
	NtFileName *UnicodeString,
	FilePart *uint16,
	RelativeName *RtlRelativeNameU,
) bool

OUT-parameter: NtFileName, FilePart, RelativeName. *OPT-parameter: FilePart, RelativeName.

Types

type AccessMask 

type AccessMask uint32

type Acl 

type Acl struct {
	AclRevision byte
	Sbz1        byte
	AclSize     uint16
	AceCount    uint16
	Sbz2        uint16
}

Acl has been derived from the ACL struct definition.

type AtomBasicInformationT 

type AtomBasicInformationT struct {
	UsageCount uint16
	Flags      uint16
	NameLength uint16
	Name       [1]uint16
}

AtomBasicInformationT has been derived from the ATOM_BASIC_INFORMATION struct definition.

func (*AtomBasicInformationT) NameSlice 

func (t *AtomBasicInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of AtomBasicInformationT.Name.

Beware: The data is not copied out of AtomBasicInformationT. The size can usually be taken from an other member of the struct (AtomBasicInformationT).

func (*AtomBasicInformationT) SetNameSlice 

func (t *AtomBasicInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at AtomBasicInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (AtomBasicInformationT) usually has to be set to the array size.

type AtomInformationClass 

type AtomInformationClass uint32

The AtomInformationClass constants have been derived from the ATOM_INFORMATION_CLASS enum definition. 

const (
	AtomBasicInformation AtomInformationClass = 0
	AtomTableInformation                      = 1
)

type AtomTableInformationT 

type AtomTableInformationT struct {
	NumberOfAtoms uint32
	Atoms         [1]RtlAtom
}

AtomTableInformationT has been derived from the ATOM_TABLE_INFORMATION struct definition.

func (*AtomTableInformationT) AtomsSlice 

func (t *AtomTableInformationT) AtomsSlice(size int) []RtlAtom

AtomsSlice returns a slice over the elements of AtomTableInformationT.Atoms.

Beware: The data is not copied out of AtomTableInformationT. The size can usually be taken from an other member of the struct (AtomTableInformationT).

func (*AtomTableInformationT) SetAtomsSlice 

func (t *AtomTableInformationT) SetAtomsSlice(s []RtlAtom)

SetAtomsSlice copies s into the memory at AtomTableInformationT.Atoms.

Beware: No bounds check is performed. Another member of the struct (AtomTableInformationT) usually has to be set to the array size.

type ClaimsBlob 

type ClaimsBlob [8]byte

type ClientId 

type ClientId struct {
	UniqueProcess Handle
	UniqueThread  Handle
}

ClientId has been derived from the CLIENT_ID struct definition.

type FileAccessInformationT 

type FileAccessInformationT struct {
	AccessFlags AccessMask
}

FileAccessInformationT has been derived from the FILE_ACCESS_INFORMATION struct definition.

type FileAlignmentInformationT 

type FileAlignmentInformationT struct {
	AlignmentRequirement uint32
}

FileAlignmentInformationT has been derived from the FILE_ALIGNMENT_INFORMATION struct definition.

type FileAllInformationT 

type FileAllInformationT struct {
	BasicInformation     FileBasicInformationT
	StandardInformation  FileStandardInformationT
	InternalInformation  FileInternalInformationT
	EaInformation        FileEaInformationT
	AccessInformation    FileAccessInformationT
	PositionInformation  FilePositionInformationT
	ModeInformation      FileModeInformationT
	AlignmentInformation FileAlignmentInformationT
	NameInformation      FileNameInformationT
}

FileAllInformationT has been derived from the FILE_ALL_INFORMATION struct definition.

type FileAllocationInformationT 

type FileAllocationInformationT struct {
	AllocationSize int64
}

FileAllocationInformationT has been derived from the FILE_ALLOCATION_INFORMATION struct definition.

type FileAttributeTagInformationT 

type FileAttributeTagInformationT struct {
	FileAttributes uint32
	ReparseTag     uint32
}

FileAttributeTagInformationT has been derived from the FILE_ATTRIBUTE_TAG_INFORMATION struct definition.

type FileAttributes 

type FileAttributes uint32

type FileBasicInformationT 

type FileBasicInformationT struct {
	CreationTime   int64
	LastAccessTime int64
	LastWriteTime  int64
	ChangeTime     int64
	FileAttributes uint32
}

FileBasicInformationT has been derived from the FILE_BASIC_INFORMATION struct definition.

type FileBothDirInformationT 

type FileBothDirInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	CreationTime    int64
	LastAccessTime  int64
	LastWriteTime   int64
	ChangeTime      int64
	EndOfFile       int64
	AllocationSize  int64
	FileAttributes  uint32
	FileNameLength  uint32
	EaSize          uint32
	ShortNameLength byte
	ShortName       [12]uint16
	FileName        [1]uint16
}

FileBothDirInformationT has been derived from the FILE_BOTH_DIR_INFORMATION struct definition.

func (*FileBothDirInformationT) FileNameSlice 

func (t *FileBothDirInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileBothDirInformationT.FileName.

Beware: The data is not copied out of FileBothDirInformationT. The size can usually be taken from an other member of the struct (FileBothDirInformationT).

func (*FileBothDirInformationT) SetFileNameSlice 

func (t *FileBothDirInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileBothDirInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileBothDirInformationT) usually has to be set to the array size.

type FileCompletionInformationT 

type FileCompletionInformationT struct {
	Port Handle
	Key  *byte
}

FileCompletionInformationT has been derived from the FILE_COMPLETION_INFORMATION struct definition.

type FileCompressionInformationT 

type FileCompressionInformationT struct {
	CompressedFileSize   int64
	CompressionFormat    uint16
	CompressionUnitShift byte
	ChunkShift           byte
	ClusterShift         byte
	Reserved             [3]byte
}

FileCompressionInformationT has been derived from the FILE_COMPRESSION_INFORMATION struct definition.

type FileDirectoryInformationT 

type FileDirectoryInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	CreationTime    int64
	LastAccessTime  int64
	LastWriteTime   int64
	ChangeTime      int64
	EndOfFile       int64
	AllocationSize  int64
	FileAttributes  uint32
	FileNameLength  uint32
	FileName        [1]uint16
}

FileDirectoryInformationT has been derived from the FILE_DIRECTORY_INFORMATION struct definition.

func (*FileDirectoryInformationT) FileNameSlice 

func (t *FileDirectoryInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileDirectoryInformationT.FileName.

Beware: The data is not copied out of FileDirectoryInformationT. The size can usually be taken from an other member of the struct (FileDirectoryInformationT).

func (*FileDirectoryInformationT) SetFileNameSlice 

func (t *FileDirectoryInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileDirectoryInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileDirectoryInformationT) usually has to be set to the array size.

type FileDispositionInformationT 

type FileDispositionInformationT struct {
	DeleteFile bool
}

FileDispositionInformationT has been derived from the FILE_DISPOSITION_INFORMATION struct definition.

type FileEaInformationT 

type FileEaInformationT struct {
	EaSize uint32
}

FileEaInformationT has been derived from the FILE_EA_INFORMATION struct definition.

type FileEndOfFileInformationT 

type FileEndOfFileInformationT struct {
	EndOfFile int64
}

FileEndOfFileInformationT has been derived from the FILE_END_OF_FILE_INFORMATION struct definition.

type FileFullDirInformationT 

type FileFullDirInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	CreationTime    int64
	LastAccessTime  int64
	LastWriteTime   int64
	ChangeTime      int64
	EndOfFile       int64
	AllocationSize  int64
	FileAttributes  uint32
	FileNameLength  uint32
	EaSize          uint32
	FileName        [1]uint16
}

FileFullDirInformationT has been derived from the FILE_FULL_DIR_INFORMATION struct definition.

func (*FileFullDirInformationT) FileNameSlice 

func (t *FileFullDirInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileFullDirInformationT.FileName.

Beware: The data is not copied out of FileFullDirInformationT. The size can usually be taken from an other member of the struct (FileFullDirInformationT).

func (*FileFullDirInformationT) SetFileNameSlice 

func (t *FileFullDirInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileFullDirInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileFullDirInformationT) usually has to be set to the array size.

type FileFullEaInformationT 

type FileFullEaInformationT struct {
	NextEntryOffset uint32
	Flags           byte
	EaNameLength    byte
	EaValueLength   uint16
	EaName          [1]byte
}

FileFullEaInformationT has been derived from the FILE_FULL_EA_INFORMATION struct definition.

func (*FileFullEaInformationT) EaNameSlice 

func (t *FileFullEaInformationT) EaNameSlice(size int) []byte

EaNameSlice returns a slice over the elements of FileFullEaInformationT.EaName.

Beware: The data is not copied out of FileFullEaInformationT. The size can usually be taken from an other member of the struct (FileFullEaInformationT).

func (*FileFullEaInformationT) SetEaNameSlice 

func (t *FileFullEaInformationT) SetEaNameSlice(s []byte)

SetEaNameSlice copies s into the memory at FileFullEaInformationT.EaName.

Beware: No bounds check is performed. Another member of the struct (FileFullEaInformationT) usually has to be set to the array size.

type FileIdBothDirInformationT 

type FileIdBothDirInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	CreationTime    int64
	LastAccessTime  int64
	LastWriteTime   int64
	ChangeTime      int64
	EndOfFile       int64
	AllocationSize  int64
	FileAttributes  uint32
	FileNameLength  uint32
	EaSize          uint32
	ShortNameLength byte
	ShortName       [12]uint16
	FileId          int64
	FileName        [1]uint16
}

FileIdBothDirInformationT has been derived from the FILE_ID_BOTH_DIR_INFORMATION struct definition.

func (*FileIdBothDirInformationT) FileNameSlice 

func (t *FileIdBothDirInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileIdBothDirInformationT.FileName.

Beware: The data is not copied out of FileIdBothDirInformationT. The size can usually be taken from an other member of the struct (FileIdBothDirInformationT).

func (*FileIdBothDirInformationT) SetFileNameSlice 

func (t *FileIdBothDirInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileIdBothDirInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileIdBothDirInformationT) usually has to be set to the array size.

type FileIdFullDirInformationT 

type FileIdFullDirInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	CreationTime    int64
	LastAccessTime  int64
	LastWriteTime   int64
	ChangeTime      int64
	EndOfFile       int64
	AllocationSize  int64
	FileAttributes  uint32
	FileNameLength  uint32
	EaSize          uint32
	FileId          int64
	FileName        [1]uint16
}

FileIdFullDirInformationT has been derived from the FILE_ID_FULL_DIR_INFORMATION struct definition.

func (*FileIdFullDirInformationT) FileNameSlice 

func (t *FileIdFullDirInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileIdFullDirInformationT.FileName.

Beware: The data is not copied out of FileIdFullDirInformationT. The size can usually be taken from an other member of the struct (FileIdFullDirInformationT).

func (*FileIdFullDirInformationT) SetFileNameSlice 

func (t *FileIdFullDirInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileIdFullDirInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileIdFullDirInformationT) usually has to be set to the array size.

type FileIdGlobalTxDirInformationT 

type FileIdGlobalTxDirInformationT struct {
	NextEntryOffset      uint32
	FileIndex            uint32
	CreationTime         int64
	LastAccessTime       int64
	LastWriteTime        int64
	ChangeTime           int64
	EndOfFile            int64
	AllocationSize       int64
	FileAttributes       uint32
	FileNameLength       uint32
	FileId               int64
	LockingTransactionId Guid
	TxInfoFlags          uint32
	FileName             [1]uint16
}

FileIdGlobalTxDirInformationT has been derived from the FILE_ID_GLOBAL_TX_DIR_INFORMATION struct definition.

func (*FileIdGlobalTxDirInformationT) FileNameSlice 

func (t *FileIdGlobalTxDirInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileIdGlobalTxDirInformationT.FileName.

Beware: The data is not copied out of FileIdGlobalTxDirInformationT. The size can usually be taken from an other member of the struct (FileIdGlobalTxDirInformationT).

func (*FileIdGlobalTxDirInformationT) SetFileNameSlice 

func (t *FileIdGlobalTxDirInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileIdGlobalTxDirInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileIdGlobalTxDirInformationT) usually has to be set to the array size.

type FileInformationClass 

type FileInformationClass uint32

The FileInformationClass constants have been derived from the FILE_INFORMATION_CLASS enum definition.

type FileInternalInformationT 

type FileInternalInformationT struct {
	IndexNumber int64
}

FileInternalInformationT has been derived from the FILE_INTERNAL_INFORMATION struct definition.

type FileIoPriorityHintInformationT 

type FileIoPriorityHintInformationT struct {
	PriorityHint IoPriorityHint
}

FileIoPriorityHintInformationT has been derived from the FILE_IO_PRIORITY_HINT_INFORMATION struct definition.

type FileLinkEntryInformationT 

type FileLinkEntryInformationT struct {
	NextEntryOffset uint32
	ParentFileId    int64
	FileNameLength  uint32
	FileName        uint16
}

FileLinkEntryInformationT has been derived from the FILE_LINK_ENTRY_INFORMATION struct definition.

type FileLinkInformationT 

type FileLinkInformationT struct {
	ReplaceIfExists bool
	RootDirectory   Handle
	FileNameLength  uint32
	FileName        [1]uint16
}

FileLinkInformationT has been derived from the FILE_LINK_INFORMATION struct definition.

func (*FileLinkInformationT) FileNameSlice 

func (t *FileLinkInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileLinkInformationT.FileName.

Beware: The data is not copied out of FileLinkInformationT. The size can usually be taken from an other member of the struct (FileLinkInformationT).

func (*FileLinkInformationT) SetFileNameSlice 

func (t *FileLinkInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileLinkInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileLinkInformationT) usually has to be set to the array size.

type FileLinksInformationT 

type FileLinksInformationT struct {
	BytesNeeded     uint32
	EntriesReturned uint32
	Entry           FileLinkEntryInformationT
}

FileLinksInformationT has been derived from the FILE_LINKS_INFORMATION struct definition.

type FileMailslotQueryInformationT 

type FileMailslotQueryInformationT struct {
	MaximumMessageSize uint32
	MailslotQuota      uint32
	NextMessageSize    uint32
	MessagesAvailable  uint32
	ReadTimeout        int64
}

FileMailslotQueryInformationT has been derived from the FILE_MAILSLOT_QUERY_INFORMATION struct definition.

type FileMailslotSetInformationT 

type FileMailslotSetInformationT struct {
	ReadTimeout *int64
}

FileMailslotSetInformationT has been derived from the FILE_MAILSLOT_SET_INFORMATION struct definition.

type FileModeInformationT 

type FileModeInformationT struct {
	Mode uint32
}

FileModeInformationT has been derived from the FILE_MODE_INFORMATION struct definition.

type FileNameInformationT 

type FileNameInformationT struct {
	FileNameLength uint32
	FileName       [1]uint16
}

FileNameInformationT has been derived from the FILE_NAME_INFORMATION struct definition.

func (*FileNameInformationT) FileNameSlice 

func (t *FileNameInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileNameInformationT.FileName.

Beware: The data is not copied out of FileNameInformationT. The size can usually be taken from an other member of the struct (FileNameInformationT).

func (*FileNameInformationT) SetFileNameSlice 

func (t *FileNameInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileNameInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileNameInformationT) usually has to be set to the array size.

type FileNamesInformationT 

type FileNamesInformationT struct {
	NextEntryOffset uint32
	FileIndex       uint32
	FileNameLength  uint32
	FileName        [1]uint16
}

FileNamesInformationT has been derived from the FILE_NAMES_INFORMATION struct definition.

func (*FileNamesInformationT) FileNameSlice 

func (t *FileNamesInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileNamesInformationT.FileName.

Beware: The data is not copied out of FileNamesInformationT. The size can usually be taken from an other member of the struct (FileNamesInformationT).

func (*FileNamesInformationT) SetFileNameSlice 

func (t *FileNamesInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileNamesInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileNamesInformationT) usually has to be set to the array size.

type FileNetworkOpenInformationT 

type FileNetworkOpenInformationT struct {
	CreationTime   int64
	LastAccessTime int64
	LastWriteTime  int64
	ChangeTime     int64
	AllocationSize int64
	EndOfFile      int64
	FileAttributes uint32
}

FileNetworkOpenInformationT has been derived from the FILE_NETWORK_OPEN_INFORMATION struct definition.

type FileNetworkPhysicalNameInformationT 

type FileNetworkPhysicalNameInformationT struct {
	FileNameLength uint32
	FileName       [1]uint16
}

FileNetworkPhysicalNameInformationT has been derived from the FILE_NETWORK_PHYSICAL_NAME_INFORMATION struct definition.

func (*FileNetworkPhysicalNameInformationT) FileNameSlice 

func (t *FileNetworkPhysicalNameInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileNetworkPhysicalNameInformationT.FileName.

Beware: The data is not copied out of FileNetworkPhysicalNameInformationT. The size can usually be taken from an other member of the struct (FileNetworkPhysicalNameInformationT).

func (*FileNetworkPhysicalNameInformationT) SetFileNameSlice 

func (t *FileNetworkPhysicalNameInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileNetworkPhysicalNameInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileNetworkPhysicalNameInformationT) usually has to be set to the array size.

type FilePipeInformationT 

type FilePipeInformationT struct {
	ReadMode       uint32
	CompletionMode uint32
}

FilePipeInformationT has been derived from the FILE_PIPE_INFORMATION struct definition.

type FilePipeLocalInformationT 

type FilePipeLocalInformationT struct {
	NamedPipeType          uint32
	NamedPipeConfiguration uint32
	MaximumInstances       uint32
	CurrentInstances       uint32
	InboundQuota           uint32
	ReadDataAvailable      uint32
	OutboundQuota          uint32
	WriteQuotaAvailable    uint32
	NamedPipeState         uint32
	NamedPipeEnd           uint32
}

FilePipeLocalInformationT has been derived from the FILE_PIPE_LOCAL_INFORMATION struct definition.

type FilePipeRemoteInformationT 

type FilePipeRemoteInformationT struct {
	CollectDataTime        int64
	MaximumCollectionCount uint32
}

FilePipeRemoteInformationT has been derived from the FILE_PIPE_REMOTE_INFORMATION struct definition.

type FilePositionInformationT 

type FilePositionInformationT struct {
	CurrentByteOffset int64
}

FilePositionInformationT has been derived from the FILE_POSITION_INFORMATION struct definition.

type FileQuotaInformationT 

type FileQuotaInformationT struct {
	NextEntryOffset uint32
	SidLength       uint32
	ChangeTime      int64
	QuotaUsed       int64
	QuotaThreshold  int64
	QuotaLimit      int64
	Sid             Sid
}

FileQuotaInformationT has been derived from the FILE_QUOTA_INFORMATION struct definition.

type FileRenameInformationT 

type FileRenameInformationT struct {
	ReplaceIfExists bool
	RootDirectory   Handle
	FileNameLength  uint32
	FileName        [1]uint16
}

FileRenameInformationT has been derived from the FILE_RENAME_INFORMATION struct definition.

func (*FileRenameInformationT) FileNameSlice 

func (t *FileRenameInformationT) FileNameSlice(size int) []uint16

FileNameSlice returns a slice over the elements of FileRenameInformationT.FileName.

Beware: The data is not copied out of FileRenameInformationT. The size can usually be taken from an other member of the struct (FileRenameInformationT).

func (*FileRenameInformationT) SetFileNameSlice 

func (t *FileRenameInformationT) SetFileNameSlice(s []uint16)

SetFileNameSlice copies s into the memory at FileRenameInformationT.FileName.

Beware: No bounds check is performed. Another member of the struct (FileRenameInformationT) usually has to be set to the array size.

type FileReparsePointInformationT 

type FileReparsePointInformationT struct {
	FileReference int64
	Tag           uint32
}

FileReparsePointInformationT has been derived from the FILE_REPARSE_POINT_INFORMATION struct definition.

type FileStandardInformationT 

type FileStandardInformationT struct {
	AllocationSize int64
	EndOfFile      int64
	NumberOfLinks  uint32
	DeletePending  bool
	Directory      bool
}

FileStandardInformationT has been derived from the FILE_STANDARD_INFORMATION struct definition.

type FileStreamInformationT 

type FileStreamInformationT struct {
	NextEntryOffset      uint32
	StreamNameLength     uint32
	StreamSize           int64
	StreamAllocationSize int64
	StreamName           [1]uint16
}

FileStreamInformationT has been derived from the FILE_STREAM_INFORMATION struct definition.

func (*FileStreamInformationT) SetStreamNameSlice 

func (t *FileStreamInformationT) SetStreamNameSlice(s []uint16)

SetStreamNameSlice copies s into the memory at FileStreamInformationT.StreamName.

Beware: No bounds check is performed. Another member of the struct (FileStreamInformationT) usually has to be set to the array size.

func (*FileStreamInformationT) StreamNameSlice 

func (t *FileStreamInformationT) StreamNameSlice(size int) []uint16

StreamNameSlice returns a slice over the elements of FileStreamInformationT.StreamName.

Beware: The data is not copied out of FileStreamInformationT. The size can usually be taken from an other member of the struct (FileStreamInformationT).

type FileValidDataLengthInformationT 

type FileValidDataLengthInformationT struct {
	ValidDataLength int64
}

FileValidDataLengthInformationT has been derived from the FILE_VALID_DATA_LENGTH_INFORMATION struct definition.

type FsInformationClass 

type FsInformationClass uint32

The FsInformationClass constants have been derived from the FS_INFORMATION_CLASS enum definition.

type GenericMapping 

type GenericMapping struct {
	GenericRead    AccessMask
	GenericWrite   AccessMask
	GenericExecute AccessMask
	GenericAll     AccessMask
}

GenericMapping has been derived from the GENERIC_MAPPING struct definition.

type Guid 

type Guid struct {
	Data1 uint32
	Data2 uint16
	Data3 uint16
	Data4 [8]byte
}

Guid has been derived from the GUID struct definition.

type Handle 

type Handle syscall.Handle

type IoApcRoutine 

type IoApcRoutine uintptr

type IoCounters 

type IoCounters struct {
	ReadOperationCount  uint64
	WriteOperationCount uint64
	OtherOperationCount uint64
	ReadTransferCount   uint64
	WriteTransferCount  uint64
	OtherTransferCount  uint64
}

IoCounters has been derived from the IO_COUNTERS struct definition.

type IoPriorityHint 

type IoPriorityHint uint32

The IoPriorityHint constants have been derived from the IO_PRIORITY_HINT enum definition.

type IoStatusBlock 

type IoStatusBlock struct {
	StatusPointer uintptr
	Information   uintptr
}

type KeyBasicInformationT 

type KeyBasicInformationT struct {
	LastWriteTime int64
	TitleIndex    uint32
	NameLength    uint32
	Name          [1]uint16
}

KeyBasicInformationT has been derived from the KEY_BASIC_INFORMATION struct definition.

func (*KeyBasicInformationT) NameSlice 

func (t *KeyBasicInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of KeyBasicInformationT.Name.

Beware: The data is not copied out of KeyBasicInformationT. The size can usually be taken from an other member of the struct (KeyBasicInformationT).

func (*KeyBasicInformationT) SetNameSlice 

func (t *KeyBasicInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at KeyBasicInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (KeyBasicInformationT) usually has to be set to the array size.

type KeyCachedInformationT 

type KeyCachedInformationT struct {
	LastWriteTime   int64
	TitleIndex      uint32
	SubKeys         uint32
	MaxNameLen      uint32
	Values          uint32
	MaxValueNameLen uint32
	MaxValueDataLen uint32
	NameLength      uint32
}

KeyCachedInformationT has been derived from the KEY_CACHED_INFORMATION struct definition.

type KeyFullInformationT 

type KeyFullInformationT struct {
	LastWriteTime   int64
	TitleIndex      uint32
	ClassOffset     uint32
	ClassLength     uint32
	SubKeys         uint32
	MaxNameLen      uint32
	MaxClassLen     uint32
	Values          uint32
	MaxValueNameLen uint32
	MaxValueDataLen uint32
	Class           [1]uint16
}

KeyFullInformationT has been derived from the KEY_FULL_INFORMATION struct definition.

func (*KeyFullInformationT) ClassSlice 

func (t *KeyFullInformationT) ClassSlice(size int) []uint16

ClassSlice returns a slice over the elements of KeyFullInformationT.Class.

Beware: The data is not copied out of KeyFullInformationT. The size can usually be taken from an other member of the struct (KeyFullInformationT).

func (*KeyFullInformationT) SetClassSlice 

func (t *KeyFullInformationT) SetClassSlice(s []uint16)

SetClassSlice copies s into the memory at KeyFullInformationT.Class.

Beware: No bounds check is performed. Another member of the struct (KeyFullInformationT) usually has to be set to the array size.

type KeyInformationClass 

type KeyInformationClass uint32

The KeyInformationClass constants have been derived from the KEY_INFORMATION_CLASS enum definition.

type KeyNameInformationT 

type KeyNameInformationT struct {
	NameLength uint32
	Name       [1]uint16
}

KeyNameInformationT has been derived from the KEY_NAME_INFORMATION struct definition.

func (*KeyNameInformationT) NameSlice 

func (t *KeyNameInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of KeyNameInformationT.Name.

Beware: The data is not copied out of KeyNameInformationT. The size can usually be taken from an other member of the struct (KeyNameInformationT).

func (*KeyNameInformationT) SetNameSlice 

func (t *KeyNameInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at KeyNameInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (KeyNameInformationT) usually has to be set to the array size.

type KeyNodeInformationT 

type KeyNodeInformationT struct {
	LastWriteTime int64
	TitleIndex    uint32
	ClassOffset   uint32
	ClassLength   uint32
	NameLength    uint32
	Name          [1]uint16
}

KeyNodeInformationT has been derived from the KEY_NODE_INFORMATION struct definition.

func (*KeyNodeInformationT) NameSlice 

func (t *KeyNodeInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of KeyNodeInformationT.Name.

Beware: The data is not copied out of KeyNodeInformationT. The size can usually be taken from an other member of the struct (KeyNodeInformationT).

func (*KeyNodeInformationT) SetNameSlice 

func (t *KeyNodeInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at KeyNodeInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (KeyNodeInformationT) usually has to be set to the array size.

type KeySetInformationClass 

type KeySetInformationClass uint32

The KeySetInformationClass constants have been derived from the KEY_SET_INFORMATION_CLASS enum definition.

type KeyValueBasicInformationT 

type KeyValueBasicInformationT struct {
	TitleIndex uint32
	Type       uint32
	NameLength uint32
	Name       [1]uint16
}

KeyValueBasicInformationT has been derived from the KEY_VALUE_BASIC_INFORMATION struct definition.

func (*KeyValueBasicInformationT) NameSlice 

func (t *KeyValueBasicInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of KeyValueBasicInformationT.Name.

Beware: The data is not copied out of KeyValueBasicInformationT. The size can usually be taken from an other member of the struct (KeyValueBasicInformationT).

func (*KeyValueBasicInformationT) SetNameSlice 

func (t *KeyValueBasicInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at KeyValueBasicInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (KeyValueBasicInformationT) usually has to be set to the array size.

type KeyValueEntry 

type KeyValueEntry struct {
	ValueName  *UnicodeString
	DataLength uint32
	DataOffset uint32
	Type       uint32
}

KeyValueEntry has been derived from the KEY_VALUE_ENTRY struct definition.

type KeyValueFullInformationT 

type KeyValueFullInformationT struct {
	TitleIndex uint32
	Type       uint32
	DataOffset uint32
	DataLength uint32
	NameLength uint32
	Name       [1]uint16
}

KeyValueFullInformationT has been derived from the KEY_VALUE_FULL_INFORMATION struct definition.

func (*KeyValueFullInformationT) NameSlice 

func (t *KeyValueFullInformationT) NameSlice(size int) []uint16

NameSlice returns a slice over the elements of KeyValueFullInformationT.Name.

Beware: The data is not copied out of KeyValueFullInformationT. The size can usually be taken from an other member of the struct (KeyValueFullInformationT).

func (*KeyValueFullInformationT) SetNameSlice 

func (t *KeyValueFullInformationT) SetNameSlice(s []uint16)

SetNameSlice copies s into the memory at KeyValueFullInformationT.Name.

Beware: No bounds check is performed. Another member of the struct (KeyValueFullInformationT) usually has to be set to the array size.

type KeyValueInformationClass 

type KeyValueInformationClass uint32

The KeyValueInformationClass constants have been derived from the KEY_VALUE_INFORMATION_CLASS enum definition.

type KeyValuePartialInformationT 

type KeyValuePartialInformationT struct {
	TitleIndex uint32
	Type       uint32
	DataLength uint32
	Data       [1]byte
}

KeyValuePartialInformationT has been derived from the KEY_VALUE_PARTIAL_INFORMATION struct definition.

func (*KeyValuePartialInformationT) DataSlice 

func (t *KeyValuePartialInformationT) DataSlice(size int) []byte

DataSlice returns a slice over the elements of KeyValuePartialInformationT.Data.

Beware: The data is not copied out of KeyValuePartialInformationT. The size can usually be taken from an other member of the struct (KeyValuePartialInformationT).

func (*KeyValuePartialInformationT) SetDataSlice 

func (t *KeyValuePartialInformationT) SetDataSlice(s []byte)

SetDataSlice copies s into the memory at KeyValuePartialInformationT.Data.

Beware: No bounds check is performed. Another member of the struct (KeyValuePartialInformationT) usually has to be set to the array size.

type Kpriority 

type Kpriority uint64

type ListEntry 

type ListEntry struct {
	Flink *ListEntry
	Blink *ListEntry
}

ListEntry has been derived from the LIST_ENTRY struct definition.

type LsaHandle 

type LsaHandle Handle

type LsaObjectAttributes 

type LsaObjectAttributes ObjectAttributes

type LsaUnicodeString 

type LsaUnicodeString UnicodeString

type Luid 

type Luid struct {
	LowPart  uint32
	HighPart int32
}

Luid has been derived from the LUID struct definition.

type LuidAndAttributes 

type LuidAndAttributes struct {
	Luid       Luid
	Attributes uint32
}

LuidAndAttributes has been derived from the LUID_AND_ATTRIBUTES struct definition.

type MemoryBasicInformation32 

type MemoryBasicInformation32 struct {
	BaseAddress       uint32
	AllocationBase    uint32
	AllocationProtect uint32
	RegionSize        uint32
	State             uint32
	Protect           uint32
	Type              uint32
}

MemoryBasicInformation32 has been derived from the MEMORY_BASIC_INFORMATION32 struct definition.

type MemoryBasicInformation64 

type MemoryBasicInformation64 struct {
	BaseAddress       uint64
	AllocationBase    uint64
	AllocationProtect uint32

	RegionSize uint64
	State      uint32
	Protect    uint32
	Type       uint32
	// contains filtered or unexported fields
}

MemoryBasicInformation64 has been derived from the MEMORY_BASIC_INFORMATION64 struct definition.

type MemoryBasicInformationT 

type MemoryBasicInformationT struct {
	BaseAddress       *byte
	AllocationBase    *byte
	AllocationProtect uint32
	PartitionId       uint16
	RegionSize        uintptr
	State             uint32
	Protect           uint32
	Type              uint32
}

MemoryBasicInformationT has been derived from the MEMORY_BASIC_INFORMATION struct definition.

type MemoryImageInformationT 

type MemoryImageInformationT struct {
	ImageBase   *byte
	SizeOfImage uintptr
	ImageFlags  uint32
}

MemoryImageInformationT has been derived from the MEMORY_IMAGE_INFORMATION struct definition.

func (MemoryImageInformationT) NotExecutable 

func (i MemoryImageInformationT) NotExecutable() bool

func (MemoryImageInformationT) PartialMap 

func (i MemoryImageInformationT) PartialMap() bool

func (MemoryImageInformationT) SigningLevel 

func (i MemoryImageInformationT) SigningLevel() uintptr

type MemoryInformationClass 

type MemoryInformationClass uint32

The MemoryInformationClass constants have been derived from the MEMORY_INFORMATION_CLASS enum definition.

type MemoryRegionInformationT 

type MemoryRegionInformationT struct {
	AllocationBase    *byte
	AllocationProtect uint32
	RegionType        uint32
	RegionSize        uintptr
	CommitSize        uintptr
	PartitionId       *uint32
	NodePreference    *uint32
}

MemoryRegionInformationT has been derived from the MEMORY_REGION_INFORMATION struct definition.

func (*MemoryRegionInformationT) DirectMapped 

func (i *MemoryRegionInformationT) DirectMapped() bool

func (*MemoryRegionInformationT) MappedAwe 

func (i *MemoryRegionInformationT) MappedAwe() bool

func (*MemoryRegionInformationT) MappedDataFile 

func (i *MemoryRegionInformationT) MappedDataFile() bool

func (*MemoryRegionInformationT) MappedImage 

func (i *MemoryRegionInformationT) MappedImage() bool

func (*MemoryRegionInformationT) MappedPageFile 

func (i *MemoryRegionInformationT) MappedPageFile() bool

func (*MemoryRegionInformationT) MappedPhysical 

func (i *MemoryRegionInformationT) MappedPhysical() bool

func (*MemoryRegionInformationT) MappedWriteWatch 

func (i *MemoryRegionInformationT) MappedWriteWatch() bool

func (*MemoryRegionInformationT) PageSize64K 

func (i *MemoryRegionInformationT) PageSize64K() bool

func (*MemoryRegionInformationT) PageSizeHuge 

func (i *MemoryRegionInformationT) PageSizeHuge() bool

func (*MemoryRegionInformationT) PageSizeLarge 

func (i *MemoryRegionInformationT) PageSizeLarge() bool

func (*MemoryRegionInformationT) PlaceholderReservation 

func (i *MemoryRegionInformationT) PlaceholderReservation() bool

func (*MemoryRegionInformationT) Private 

func (i *MemoryRegionInformationT) Private() bool

func (*MemoryRegionInformationT) SoftwareEnclave 

func (i *MemoryRegionInformationT) SoftwareEnclave() bool

type MemorySharedCommitInformationT 

type MemorySharedCommitInformationT struct {
	CommitSize uintptr
}

MemorySharedCommitInformationT has been derived from the MEMORY_SHARED_COMMIT_INFORMATION struct definition.

type MemoryWorkingSetBlock 

type MemoryWorkingSetBlock uintptr

func (MemoryWorkingSetBlock) Node 

func (b MemoryWorkingSetBlock) Node() uintptr

func (MemoryWorkingSetBlock) Protection 

func (b MemoryWorkingSetBlock) Protection() uintptr

func (MemoryWorkingSetBlock) ShareCount 

func (b MemoryWorkingSetBlock) ShareCount() uintptr

func (MemoryWorkingSetBlock) Shared 

func (b MemoryWorkingSetBlock) Shared() bool

func (MemoryWorkingSetBlock) VirtualPage 

func (b MemoryWorkingSetBlock) VirtualPage() uintptr

type MemoryWorkingSetExBlock 

type MemoryWorkingSetExBlock uintptr

func (MemoryWorkingSetExBlock) Bad 

func (b MemoryWorkingSetExBlock) Bad() bool

func (MemoryWorkingSetExBlock) LargePage 

func (b MemoryWorkingSetExBlock) LargePage() bool

func (MemoryWorkingSetExBlock) Locked 

func (b MemoryWorkingSetExBlock) Locked() bool

func (MemoryWorkingSetExBlock) Node 

func (b MemoryWorkingSetExBlock) Node() uintptr

func (MemoryWorkingSetExBlock) Priority 

func (b MemoryWorkingSetExBlock) Priority() uintptr

func (MemoryWorkingSetExBlock) ShareCount 

func (b MemoryWorkingSetExBlock) ShareCount() uintptr

func (MemoryWorkingSetExBlock) Shared 

func (b MemoryWorkingSetExBlock) Shared() bool

func (MemoryWorkingSetExBlock) SharedOriginal 

func (b MemoryWorkingSetExBlock) SharedOriginal() bool

func (MemoryWorkingSetExBlock) Valid 

func (b MemoryWorkingSetExBlock) Valid() bool

func (MemoryWorkingSetExBlock) Win32Protection 

func (b MemoryWorkingSetExBlock) Win32Protection() uintptr

type MemoryWorkingSetExInformationT 

type MemoryWorkingSetExInformationT struct {
	VirtualAddress    *byte
	VirtualAttributes MemoryWorkingSetExBlock
}

MemoryWorkingSetExInformationT has been derived from the MEMORY_WORKING_SET_EX_INFORMATION struct definition.

type MemoryWorkingSetInformationT 

type MemoryWorkingSetInformationT struct {
	NumberOfEntries *uint32
	WorkingSetInfo  [1]MemoryWorkingSetBlock
}

MemoryWorkingSetInformationT has been derived from the MEMORY_WORKING_SET_INFORMATION struct definition.

func (*MemoryWorkingSetInformationT) SetWorkingSetInfoSlice 

func (t *MemoryWorkingSetInformationT) SetWorkingSetInfoSlice(s []MemoryWorkingSetBlock)

SetWorkingSetInfoSlice copies s into the memory at MemoryWorkingSetInformationT.WorkingSetInfo.

Beware: No bounds check is performed. Another member of the struct (MemoryWorkingSetInformationT) usually has to be set to the array size.

func (*MemoryWorkingSetInformationT) WorkingSetInfoSlice 

func (t *MemoryWorkingSetInformationT) WorkingSetInfoSlice(size int) []MemoryWorkingSetBlock

WorkingSetInfoSlice returns a slice over the elements of MemoryWorkingSetInformationT.WorkingSetInfo.

Beware: The data is not copied out of MemoryWorkingSetInformationT. The size can usually be taken from an other member of the struct (MemoryWorkingSetInformationT).

type NtStatus 

type NtStatus uint32

NTSTATUS is the common return type of all NTDLL functions.

func CallWithExpandingBuffer 

func CallWithExpandingBuffer(fn func() NtStatus, buf *[]byte, resultLength *uint32) NtStatus

CallWithExpandingBuffer is intended to more seamlessly dealing with API calls that fill a caller-provided buffer with data. Usually, these functions expect the address and current size of the buffer and a reference to which the required buffer size will be written.

This function calls fn which encapsulates the actual API call using buf and resultLength. If fn returns an NtStatus value that indicates an insufficient buffer sizze, the buffer is resized and the call is retried. This happens until the call succeeds or fails for a non-buffer-related reason.

The size of buf is adjusted according to resultLength.

Example:

var keyName string var buf []byte var requiredLength uint32 

if st := CallWithExpandingBuffer(func() NtStatus {
	return NtQueryKey(h, KeyNameInformation, &buf[0], uint32(len(buf)), &requiredLength)
}, &buf, &requiredLength); st.IsError() {

	// handle non buffer-size-related error
} else {

	kbi := (*KeyNameInformationT)(unsafe.Pointer(&buf[0]))
	keyName = NewUnicodeStringFromBuffer(
		(*uint16)(unsafe.Pointer(&kbi.Name)),
		int(kbi.NameLength)).String()
}

func LsaAddAccountRights 

func LsaAddAccountRights(
	PolicyHandle LsaHandle,
	AccountSid *Sid,
	UserRights *LsaUnicodeString,
	CountOfRights uint32,
) NtStatus

func LsaClose 

func LsaClose(
	ObjectHandle LsaHandle,
) NtStatus

func LsaEnumerateAccountRights 

func LsaEnumerateAccountRights(
	PolicyHandle LsaHandle,
	AccountSid *Sid,
	UserRights *LsaUnicodeString,
	CountOfRights *uint32,
) NtStatus

OUT-parameter: UserRights, CountOfRights.

func LsaOpenPolicy 

func LsaOpenPolicy(
	SystemName *LsaUnicodeString,
	ObjectAttributes *LsaObjectAttributes,
	DesiredAccess AccessMask,
	PolicyHandle *LsaHandle,
) NtStatus

INOUT-parameter: PolicyHandle.

func LsaRemoveAccountRights 

func LsaRemoveAccountRights(
	PolicyHandle LsaHandle,
	AccountSid *Sid,
	AllRights bool,
	UserRights *LsaUnicodeString,
	CountOfRights uint32,
) NtStatus

func NtAddAtom 

func NtAddAtom(
	AtomName *uint16,
	Length uint32,
	Atom *RtlAtom,
) NtStatus

OUT-parameter: Atom.

func NtAdjustGroupsToken 

func NtAdjustGroupsToken(
	TokenHandle Handle,
	ResetToDefault bool,
	NewState *TokenGroupsT,
	BufferLength uint32,
	PreviousState *TokenGroupsT,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: PreviousState, ReturnLength. *OPT-parameter: NewState, BufferLength.

func NtAdjustPrivilegesToken 

func NtAdjustPrivilegesToken(
	TokenHandle Handle,
	DisableAllPrivileges bool,
	NewState *TokenPrivilegesT,
	BufferLength uint32,
	PreviousState *TokenPrivilegesT,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: PreviousState, ReturnLength. *OPT-parameter: NewState.

func NtAllocateVirtualMemory 

func NtAllocateVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	ZeroBits *uint32,
	RegionSize *uintptr,
	AllocationType uint32,
	Protect uint32,
) NtStatus

INOUT-parameter: BaseAddress, RegionSize.

func NtClose 

func NtClose(
	Handle Handle,
) NtStatus

func NtCreateDirectoryObject 

func NtCreateDirectoryObject(
	DirectoryHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
) NtStatus

OUT-parameter: DirectoryHandle.

func NtCreateDirectoryObjectEx 

func NtCreateDirectoryObjectEx(
	DirectoryHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ShadowDirectoryHandle Handle,
	Flags uint32,
) NtStatus

OUT-parameter: DirectoryHandle.

func NtCreateFile 

func NtCreateFile(
	FileHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	IoStatusBlock *IoStatusBlock,
	AllocationSize *int64,
	FileAttributes uint32,
	ShareAccess uint32,
	CreateDisposition uint32,
	CreateOptions uint32,
	EaBuffer *byte,
	EaLength uint32,
) NtStatus

OUT-parameter: FileHandle, IoStatusBlock. *OPT-parameter: AllocationSize.

func NtCreateKey 

func NtCreateKey(
	KeyHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	TitleIndex uint32,
	Class *UnicodeString,
	CreateOptions uint32,
	Disposition *uint32,
) NtStatus

OUT-parameter: KeyHandle, Disposition. RESERVED-parameter: TitleIndex. *OPT-parameter: Class, Disposition.

func NtCreateKeyTransacted 

func NtCreateKeyTransacted(
	KeyHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	TitleIndex uint32,
	Class *UnicodeString,
	CreateOptions uint32,
	TransactionHandle Handle,
	Disposition *uint32,
) NtStatus

OUT-parameter: KeyHandle, Disposition. RESERVED-parameter: TitleIndex. *OPT-parameter: Class, Disposition.

func NtCreateProcess 

func NtCreateProcess(
	ProcessHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ParentProcess Handle,
	InheritObjectTable bool,
	SectionHandle Handle,
	DebugPort Handle,
	TokenHandle Handle,
) NtStatus

OUT-parameter: ProcessHandle. *OPT-parameter: ObjectAttributes, SectionHandle, DebugPort, TokenHandle.

func NtCreateProcessEx 

func NtCreateProcessEx(
	ProcessHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ParentProcess Handle,
	Flags uint32,
	SectionHandle Handle,
	DebugPort Handle,
	ExceptionPort Handle,
	InJob bool,
) NtStatus

OUT-parameter: ProcessHandle. *OPT-parameter: ObjectAttributes, SectionHandle, DebugPort, ExceptionPort.

func NtCreateSection 

func NtCreateSection(
	SectionHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	MaximumSize *int64,
	SectionPageProtection uint32,
	AllocationAttributes uint32,
	FileHandle Handle,
) NtStatus

OUT-parameter: SectionHandle. *OPT-parameter: ObjectAttributes, MaximumSize, FileHandle.

func NtCreateSymbolicLinkObject 

func NtCreateSymbolicLinkObject(
	SymbolicLinkHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	TargetName *UnicodeString,
) NtStatus

OUT-parameter: SymbolicLinkHandle.

func NtCreateThreadEx 

func NtCreateThreadEx(
	hThread *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ProcessHandle Handle,
	lpStartAddress Handle,
	lpParameter *byte,
	CreateSuspended bool,
	StackZeroBits uint32,
	SizeOfStackCommit uint32,
	SizeOfStackReserve uint32,
	ThreadInfo Handle,
) NtStatus

OUT-parameter: hThread, ThreadInfo.

func NtDeleteAtom 

func NtDeleteAtom(
	Atom RtlAtom,
) NtStatus

func NtDeleteKey 

func NtDeleteKey(
	KeyHandle Handle,
) NtStatus

func NtDeleteValueKey 

func NtDeleteValueKey(
	KeyHandle Handle,
	ValueName *UnicodeString,
) NtStatus

func NtDeviceIoControlFile 

func NtDeviceIoControlFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	IoControlCode uint32,
	InputBuffer *byte,
	InputBufferLength uint32,
	OutputBuffer *byte,
	OutputBufferLength uint32,
) NtStatus

OUT-parameter: IoStatusBlock, OutputBuffer.

func NtDuplicateObject 

func NtDuplicateObject(
	SourceProcessHandle Handle,
	SourceHandle Handle,
	TargetProcessHandle Handle,
	TargetHandle *Handle,
	DesiredAccess AccessMask,
	HandleAttributes uint32,
	Options uint32,
) NtStatus

OUT-parameter: TargetHandle. *OPT-parameter: TargetProcessHandle, TargetHandle.

func NtDuplicateToken 

func NtDuplicateToken(
	ExistingTokenHandle Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	EffectiveOnly bool,
	TokenType TokenTypeT,
	NewTokenHandle *Handle,
) NtStatus

OUT-parameter: NewTokenHandle. *OPT-parameter: ObjectAttributes.

func NtEnumerateKey 

func NtEnumerateKey(
	KeyHandle Handle,
	Index uint32,
	KeyInformationClass KeyInformationClass,
	KeyInformation *byte,
	Length uint32,
	ResultLength *uint32,
) NtStatus

OUT-parameter: KeyInformation, ResultLength. *OPT-parameter: KeyInformation.

func NtEnumerateValueKey 

func NtEnumerateValueKey(
	KeyHandle Handle,
	Index uint32,
	KeyValueInformationClass KeyValueInformationClass,
	KeyValueInformation *byte,
	Length uint32,
	ResultLength *uint32,
) NtStatus

OUT-parameter: KeyValueInformation, ResultLength. *OPT-parameter: KeyValueInformation.

func NtExtendSection 

func NtExtendSection(
	SectionHandle Handle,
	NewSectionSize *int64,
) NtStatus

INOUT-parameter: NewSectionSize.

func NtFilterToken 

func NtFilterToken(
	ExistingTokenHandle Handle,
	Flags uint32,
	SidsToDisable *TokenGroupsT,
	PrivilegesToDelete *TokenPrivilegesT,
	RestrictedSids *TokenGroupsT,
	NewTokenHandle *Handle,
) NtStatus

OUT-parameter: NewTokenHandle. *OPT-parameter: SidsToDisable, PrivilegesToDelete, RestrictedSids.

func NtFindAtom 

func NtFindAtom(
	AtomName *uint16,
	Length uint32,
	Atom *RtlAtom,
) NtStatus

OUT-parameter: Atom. *OPT-parameter: Atom.

func NtFlushKey 

func NtFlushKey(
	KeyHandle Handle,
) NtStatus

func NtFlushVirtualMemory 

func NtFlushVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	RegionSize *uintptr,
	IoStatus *IoStatusBlock,
) NtStatus

OUT-parameter: IoStatus. INOUT-parameter: BaseAddress, RegionSize.

func NtFreeVirtualMemory 

func NtFreeVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	RegionSize *uintptr,
	FreeType uint32,
) NtStatus

INOUT-parameter: BaseAddress, RegionSize.

func NtFsControlFile 

func NtFsControlFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	FsControlCode uint32,
	InputBuffer *byte,
	InputBufferLength uint32,
	OutputBuffer *byte,
	OutputBufferLength uint32,
) NtStatus

OUT-parameter: IoStatusBlock, OutputBuffer. *OPT-parameter: Event, ApcRoutine, ApcContext, InputBuffer, OutputBuffer.

func NtImpersonateAnonymousToken 

func NtImpersonateAnonymousToken(
	ThreadHandle Handle,
) NtStatus

func NtLockFile 

func NtLockFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	ByteOffset *int64,
	Length *int64,
	Key uint32,
	FailImmediately bool,
	ExclusiveLock bool,
) NtStatus

OUT-parameter: IoStatusBlock. *OPT-parameter: Event, ApcRoutine, ApcContext.

func NtMapViewOfSection 

func NtMapViewOfSection(
	SectionHandle Handle,
	ProcessHandle Handle,
	BaseAddress *byte,
	ZeroBits *uint32,
	CommitSize uintptr,
	SectionOffset *int64,
	ViewSize *uintptr,
	InheritDisposition SectionInherit,
	AllocationType uint32,
	Win32Protect uint32,
) NtStatus

INOUT-parameter: BaseAddress, SectionOffset, ViewSize. *OPT-parameter: SectionOffset.

func NtNotifyChangeKey 

func NtNotifyChangeKey(
	KeyHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	CompletionFilter uint32,
	WatchTree bool,
	Buffer *byte,
	BufferSize uint32,
	Asynchronous bool,
) NtStatus

OUT-parameter: IoStatusBlock, Buffer. *OPT-parameter: Event, ApcRoutine, ApcContext, Buffer.

func NtNotifyChangeMultipleKeys 

func NtNotifyChangeMultipleKeys(
	MasterKeyHandle Handle,
	Count uint32,
	SubordinateObjects *ObjectAttributes,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	CompletionFilter uint32,
	WatchTree bool,
	Buffer *byte,
	BufferSize uint32,
	Asynchronous bool,
) NtStatus

OUT-parameter: IoStatusBlock, Buffer. *OPT-parameter: Count, SubordinateObjects, Event, ApcRoutine, ApcContext, Buffer.

func NtOpenDirectoryObject 

func NtOpenDirectoryObject(
	DirectoryHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
) NtStatus

OUT-parameter: DirectoryHandle.

func NtOpenFile 

func NtOpenFile(
	FileHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	IoStatusBlock *IoStatusBlock,
	ShareAccess uint32,
	OpenOptions uint32,
) NtStatus

OUT-parameter: FileHandle, IoStatusBlock.

func NtOpenJobObjectToken 

func NtOpenJobObjectToken(
	JobHandle Handle,
	DesiredAccess AccessMask,
	TokenHandle *Handle,
) NtStatus

OUT-parameter: TokenHandle.

func NtOpenKey 

func NtOpenKey(
	KeyHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
) NtStatus

OUT-parameter: KeyHandle.

func NtOpenKeyTransacted 

func NtOpenKeyTransacted(
	KeyHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	TransactionHandle Handle,
) NtStatus

OUT-parameter: KeyHandle.

func NtOpenKeyTransactedEx 

func NtOpenKeyTransactedEx(
	KeyHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	OpenOptions uint32,
	TransactionHandle Handle,
) NtStatus

OUT-parameter: KeyHandle.

func NtOpenProcess 

func NtOpenProcess(
	ProcessHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ClientId *ClientId,
) NtStatus

OUT-parameter: ProcessHandle. *OPT-parameter: ClientId.

func NtOpenProcessToken 

func NtOpenProcessToken(
	ProcessHandle Handle,
	DesiredAccess AccessMask,
	TokenHandle *Handle,
) NtStatus

OUT-parameter: TokenHandle.

func NtOpenProcessTokenEx 

func NtOpenProcessTokenEx(
	ProcessHandle Handle,
	DesiredAccess AccessMask,
	HandleAttributes uint32,
	TokenHandle *Handle,
) NtStatus

OUT-parameter: TokenHandle.

func NtOpenSection 

func NtOpenSection(
	SectionHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
) NtStatus

OUT-parameter: SectionHandle.

func NtOpenSymbolicLinkObject 

func NtOpenSymbolicLinkObject(
	LinkHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
) NtStatus

OUT-parameter: LinkHandle.

func NtOpenThread 

func NtOpenThread(
	ThreadHandle *Handle,
	DesiredAccess AccessMask,
	ObjectAttributes *ObjectAttributes,
	ClientId *ClientId,
) NtStatus

OUT-parameter: ThreadHandle. *OPT-parameter: ClientId.

func NtOpenThreadToken 

func NtOpenThreadToken(
	ThreadHandle Handle,
	DesiredAccess AccessMask,
	OpenAsSelf bool,
	TokenHandle *Handle,
) NtStatus

OUT-parameter: TokenHandle.

func NtOpenThreadTokenEx 

func NtOpenThreadTokenEx(
	ThreadHandle Handle,
	DesiredAccess AccessMask,
	OpenAsSelf bool,
	HandleAttributes uint32,
	TokenHandle *Handle,
) NtStatus

OUT-parameter: TokenHandle.

func NtProtectVirtualMemory 

func NtProtectVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	RegionSize *uintptr,
	NewProtect uint32,
	OldProtect *uint32,
) NtStatus

OUT-parameter: OldProtect. INOUT-parameter: BaseAddress, RegionSize.

func NtQueryDirectoryFile 

func NtQueryDirectoryFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	FileInformation *byte,
	Length uint32,
	FileInformationClass FileInformationClass,
	ReturnSingleEntry bool,
	FileName *UnicodeString,
	RestartScan bool,
) NtStatus

OUT-parameter: IoStatusBlock, FileInformation. *OPT-parameter: Event, ApcRoutine, ApcContext, FileName.

func NtQueryDirectoryObject 

func NtQueryDirectoryObject(
	DirectoryHandle Handle,
	Buffer *byte,
	Length uint32,
	ReturnSingleEntry bool,
	RestartScan bool,
	Context *uint32,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: Buffer, ReturnLength. INOUT-parameter: Context. *OPT-parameter: Buffer, ReturnLength.

func NtQueryInformationAtom 

func NtQueryInformationAtom(
	Atom RtlAtom,
	AtomInformationClass AtomInformationClass,
	AtomInformation *byte,
	AtomInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: AtomInformation, ReturnLength.

func NtQueryInformationFile 

func NtQueryInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	FileInformation *byte,
	Length uint32,
	FileInformationClass FileInformationClass,
) NtStatus

OUT-parameter: IoStatusBlock, FileInformation.

func NtQueryInformationProcess 

func NtQueryInformationProcess(
	ProcessHandle Handle,
	ProcessInformationClass ProcessInformationClass,
	ProcessInformation *byte,
	ProcessInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

unknown-parameter: ProcessHandle, ProcessInformationClass, ProcessInformation, ProcessInformationLength, ReturnLength.

func NtQueryInformationThread 

func NtQueryInformationThread(
	ThreadHandle Handle,
	ThreadInformationClass ThreadInformationClass,
	ThreadInformation *byte,
	ThreadInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

unknown-parameter: ThreadHandle, ThreadInformationClass, ThreadInformation, ThreadInformationLength, ReturnLength.

func NtQueryInformationToken 

func NtQueryInformationToken(
	TokenHandle Handle,
	TokenInformationClass TokenInformationClassT,
	TokenInformation *byte,
	TokenInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: TokenInformation, ReturnLength.

func NtQueryKey 

func NtQueryKey(
	KeyHandle Handle,
	KeyInformationClass KeyInformationClass,
	KeyInformation *byte,
	Length uint32,
	ResultLength *uint32,
) NtStatus

OUT-parameter: KeyInformation, ResultLength. *OPT-parameter: KeyInformation.

func NtQueryMultipleValueKey 

func NtQueryMultipleValueKey(
	KeyHandle Handle,
	ValueEntries *KeyValueEntry,
	EntryCount uint32,
	ValueBuffer *byte,
	BufferLength *uint32,
	RequiredBufferLength *uint32,
) NtStatus

OUT-parameter: ValueBuffer, RequiredBufferLength. INOUT-parameter: ValueEntries, BufferLength. *OPT-parameter: RequiredBufferLength.

func NtQueryObject 

func NtQueryObject(
	Handle Handle,
	ObjectInformationClass ObjectInformationClass,
	ObjectInformation *byte,
	ObjectInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: ObjectInformation, ReturnLength. *OPT-parameter: Handle, ReturnLength.

func NtQueryQuotaInformationFile 

func NtQueryQuotaInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	Buffer *byte,
	Length uint32,
	ReturnSingleEntry bool,
	SidList *byte,
	SidListLength uint32,
	StartSid *Sid,
	RestartScan bool,
) NtStatus

OUT-parameter: IoStatusBlock, Buffer. *OPT-parameter: SidList, StartSid.

func NtQuerySection 

func NtQuerySection(
	SectionHandle Handle,
	SectionInformationClass SectionInformationClass,
	SectionInformation *byte,
	SectionInformationLength uintptr,
	ReturnLength *uintptr,
) NtStatus

OUT-parameter: SectionInformation, ReturnLength. *OPT-parameter: ReturnLength.

func NtQuerySecurityObject 

func NtQuerySecurityObject(
	Handle Handle,
	SecurityInformation SecurityInformationT,
	SecurityDescriptor *SecurityDescriptor,
	Length uint32,
	LengthNeeded *uint32,
) NtStatus

unknown-parameter: Handle, SecurityInformation, SecurityDescriptor, Length, LengthNeeded.

func NtQuerySymbolicLinkObject 

func NtQuerySymbolicLinkObject(
	LinkHandle Handle,
	LinkTarget *UnicodeString,
	ReturnedLength *uint32,
) NtStatus

OUT-parameter: ReturnedLength. INOUT-parameter: LinkTarget. *OPT-parameter: ReturnedLength.

func NtQuerySystemInformation 

func NtQuerySystemInformation(
	SystemInformationClass SystemInformationClass,
	SystemInformation *byte,
	SystemInformationLength uint32,
	ReturnLength *uint32,
) NtStatus

OUT-parameter: SystemInformation, ReturnLength.

func NtQueryValueKey 

func NtQueryValueKey(
	KeyHandle Handle,
	ValueName *UnicodeString,
	KeyValueInformationClass KeyValueInformationClass,
	KeyValueInformation *byte,
	Length uint32,
	ResultLength *uint32,
) NtStatus

OUT-parameter: KeyValueInformation, ResultLength. *OPT-parameter: KeyValueInformation.

func NtQueryVirtualMemory 

func NtQueryVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	MemoryInformationClass MemoryInformationClass,
	MemoryInformation *byte,
	MemoryInformationLength uintptr,
	ReturnLength *uintptr,
) NtStatus

OUT-parameter: MemoryInformation, ReturnLength. *OPT-parameter: BaseAddress, ReturnLength.

func NtQueryVolumeInformationFile 

func NtQueryVolumeInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	FsInformation *byte,
	Length uint32,
	FsInformationClass FsInformationClass,
) NtStatus

OUT-parameter: IoStatusBlock, FsInformation.

func NtReadFile 

func NtReadFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	Buffer *byte,
	Length uint32,
	ByteOffset *int64,
	Key *uint32,
) NtStatus

OUT-parameter: IoStatusBlock, Buffer. *OPT-parameter: Event, ApcRoutine, ApcContext, ByteOffset, Key.

func NtReadVirtualMemory 

func NtReadVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	Buffer *byte,
	BufferSize uintptr,
	NumberOfBytesRead *uintptr,
) NtStatus

OUT-parameter: Buffer, NumberOfBytesRead. *OPT-parameter: BaseAddress, NumberOfBytesRead.

func NtRenameKey 

func NtRenameKey(
	KeyHandle Handle,
	NewName *UnicodeString,
) NtStatus

func NtSetInformationFile 

func NtSetInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	FileInformation *byte,
	Length uint32,
	FileInformationClass FileInformationClass,
) NtStatus

OUT-parameter: IoStatusBlock.

func NtSetInformationKey 

func NtSetInformationKey(
	KeyHandle Handle,
	KeySetInformationClass KeySetInformationClass,
	KeySetInformation *byte,
	KeySetInformationLength uint32,
) NtStatus

func NtSetInformationProcess 

func NtSetInformationProcess(
	ProcessHandle Handle,
	ProcessInformationClass ProcessInformationClass,
	ProcessInformation *byte,
	ProcessInformationLength uint32,
) NtStatus

unknown-parameter: ProcessHandle, ProcessInformationClass, ProcessInformation, ProcessInformationLength.

func NtSetInformationThread 

func NtSetInformationThread(
	ThreadHandle Handle,
	ThreadInformationClass ThreadInformationClass,
	ThreadInformation *byte,
	ThreadInformationLength uint32,
) NtStatus

unknown-parameter: ThreadHandle, ThreadInformationClass, ThreadInformation, ThreadInformationLength.

func NtSetInformationToken 

func NtSetInformationToken(
	TokenHandle Handle,
	TokenInformationClass TokenInformationClassT,
	TokenInformation *byte,
	TokenInformationLength uint32,
) NtStatus

func NtSetQuotaInformationFile 

func NtSetQuotaInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	Buffer *byte,
	Length uint32,
) NtStatus

OUT-parameter: IoStatusBlock.

func NtSetSecurityObject 

func NtSetSecurityObject(
	Handle Handle,
	SecurityInformation SecurityInformationT,
	SecurityDescriptor *SecurityDescriptor,
) NtStatus

unknown-parameter: Handle, SecurityInformation, SecurityDescriptor.

func NtSetSystemInformation 

func NtSetSystemInformation(
	SystemInformationClass SystemInformationClass,
	SystemInformation *byte,
	SystemInformationLength uint32,
) NtStatus

func NtSetValueKey 

func NtSetValueKey(
	KeyHandle Handle,
	ValueName *UnicodeString,
	TitleIndex uint32,
	Type uint32,
	Data *byte,
	DataSize uint32,
) NtStatus

*OPT-parameter: TitleIndex, Data.

func NtSetVolumeInformationFile 

func NtSetVolumeInformationFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	FsInformation *byte,
	Length uint32,
	FsInformationClass FsInformationClass,
) NtStatus

OUT-parameter: IoStatusBlock.

func NtUnlockFile 

func NtUnlockFile(
	FileHandle Handle,
	IoStatusBlock *IoStatusBlock,
	ByteOffset *int64,
	Length *int64,
	Key uint32,
) NtStatus

OUT-parameter: IoStatusBlock.

func NtUnmapViewOfSection 

func NtUnmapViewOfSection(
	ProcessHandle Handle,
	BaseAddress *byte,
) NtStatus

*OPT-parameter: BaseAddress.

func NtUnmapViewOfSectionEx 

func NtUnmapViewOfSectionEx(
	ProcessHandle Handle,
	BaseAddress *byte,
	Flags uint32,
) NtStatus

*OPT-parameter: BaseAddress.

func NtWriteFile 

func NtWriteFile(
	FileHandle Handle,
	Event Handle,
	ApcRoutine *IoApcRoutine,
	ApcContext *byte,
	IoStatusBlock *IoStatusBlock,
	Buffer *byte,
	Length uint32,
	ByteOffset *int64,
	Key *uint32,
) NtStatus

OUT-parameter: IoStatusBlock. *OPT-parameter: Event, ApcRoutine, ApcContext, ByteOffset, Key.

func NtWriteVirtualMemory 

func NtWriteVirtualMemory(
	ProcessHandle Handle,
	BaseAddress *byte,
	Buffer *byte,
	BufferSize uintptr,
	NumberOfBytesWritten *uintptr,
) NtStatus

OUT-parameter: NumberOfBytesWritten. *OPT-parameter: BaseAddress, NumberOfBytesWritten.

func (NtStatus) Code 

func (s NtStatus) Code() uint32

IsInformational returns the error code encoded into the NTSTATUS value

func (NtStatus) Error 

func (s NtStatus) Error() error

Error() returns a Go error value

func (NtStatus) Facility 

func (s NtStatus) Facility() uint32

IsInformational returns the facility encoded into the NTSTATUS value

func (NtStatus) IsError 

func (s NtStatus) IsError() bool

IsErr returns true if the NTSTATUS value represents en error condition

func (NtStatus) IsInofmational 

func (s NtStatus) IsInofmational() bool

IsInformational returns true if the NTSTATUS value represents an informationel message

func (NtStatus) IsSuccess 

func (s NtStatus) IsSuccess() bool

IsSuccess returns true if the NTSTATUS value indicates that an operation was performed successfully

func (NtStatus) IsWarning 

func (s NtStatus) IsWarning() bool

IsWarning returns true if the NTSTATUS value represents a warning

func (NtStatus) String 

func (status NtStatus) String() string

type ObjectAllInformationT 

type ObjectAllInformationT struct {
	NumberOfObjects       uint32
	ObjectTypeInformation [1]ObjectTypeInformationT
}

ObjectAllInformationT has been derived from the OBJECT_ALL_INFORMATION struct definition.

func (*ObjectAllInformationT) GetObjectTypeInformation 

func (oi *ObjectAllInformationT) GetObjectTypeInformation() []*ObjectTypeInformationT

func (*ObjectAllInformationT) ObjectTypeInformationSlice 

func (t *ObjectAllInformationT) ObjectTypeInformationSlice(size int) []ObjectTypeInformationT

ObjectTypeInformationSlice returns a slice over the elements of ObjectAllInformationT.ObjectTypeInformation.

Beware: The data is not copied out of ObjectAllInformationT. The size can usually be taken from an other member of the struct (ObjectAllInformationT).

func (*ObjectAllInformationT) SetObjectTypeInformationSlice 

func (t *ObjectAllInformationT) SetObjectTypeInformationSlice(s []ObjectTypeInformationT)

SetObjectTypeInformationSlice copies s into the memory at ObjectAllInformationT.ObjectTypeInformation.

Beware: No bounds check is performed. Another member of the struct (ObjectAllInformationT) usually has to be set to the array size.

type ObjectAttributes 

type ObjectAttributes struct {
	Length                   uint32
	RootDirectory            Handle
	ObjectName               *UnicodeString
	Attributes               uint32
	SecurityDescriptor       *byte
	SecurityQualityOfService *byte
}

ObjectAttributes has been derived from the OBJECT_ATTRIBUTES struct definition.

func NewObjectAttributes 

func NewObjectAttributes(objectName string, attr uint32, rootdir Handle, sd *byte) (oa *ObjectAttributes)

type ObjectBasicInformationT 

type ObjectBasicInformationT struct {
	Attributes               uint32
	GrantedAccess            AccessMask
	HandleCount              uint32
	PointerCount             uint32
	PagedPoolUsage           uint32
	NonPagedPoolUsage        uint32
	Reserved                 [3]uint32
	NameInformationLength    uint32
	TypeInformationLength    uint32
	SecurityDescriptorLength uint32
	CreateTime               int64
}

ObjectBasicInformationT has been derived from the OBJECT_BASIC_INFORMATION struct definition.

type ObjectDataInformationT 

type ObjectDataInformationT struct {
	InheritHandle    bool
	ProtectFromClose bool
}

ObjectDataInformationT has been derived from the OBJECT_DATA_INFORMATION struct definition.

type ObjectDirectoryInformationT 

type ObjectDirectoryInformationT struct {
	Name     UnicodeString
	TypeName UnicodeString
}

ObjectDirectoryInformationT has been derived from the OBJECT_DIRECTORY_INFORMATION struct definition.

type ObjectInformationClass 

type ObjectInformationClass uint32

The ObjectInformationClass constants have been derived from the OBJECT_INFORMATION_CLASS enum definition.

type ObjectNameInformationT 

type ObjectNameInformationT struct {
	Name UnicodeString
}

ObjectNameInformationT has been derived from the OBJECT_NAME_INFORMATION struct definition.

type ObjectTypeInformationT 

type ObjectTypeInformationT struct {
	TypeName                   UnicodeString
	TotalNumberOfObjects       uint32
	TotalNumberOfHandles       uint32
	TotalPagedPoolUsage        uint32
	TotalNonPagedPoolUsage     uint32
	TotalNamePoolUsage         uint32
	TotalHandleTableUsage      uint32
	HighWaterNumberOfObjects   uint32
	HighWaterNumberOfHandles   uint32
	HighWaterPagedPoolUsage    uint32
	HighWaterNonPagedPoolUsage uint32
	HighWaterNamePoolUsage     uint32
	HighWaterHandleTableUsage  uint32
	InvalidAttributes          uint32
	GenericMapping             GenericMapping
	ValidAccessMask            uint32
	SecurityRequired           bool
	MaintainHandleCount        bool
	TypeIndex                  byte
	ReservedByte               byte
	PoolType                   uint32
	DefaultPagedPoolCharge     uint32
	DefaultNonPagedPoolCharge  uint32
}

ObjectTypeInformationT has been derived from the OBJECT_TYPE_INFORMATION struct definition.

type Peb 

type Peb struct {
	Reserved1              [2]byte
	BeingDebugged          byte
	Reserved2              [1]byte
	Reserved3              [2]*byte
	Ldr                    *PebLdrData
	ProcessParameters      *RtlUserProcessParameters
	Reserved4              [3]*byte
	AtlThunkSListPtr       *byte
	Reserved5              *byte
	Reserved6              uint32
	Reserved7              *byte
	Reserved8              uint32
	AtlThunkSListPtr32     uint32
	Reserved9              [45]*byte
	Reserved10             [96]byte
	PostProcessInitRoutine *PsPostProcessInitRoutine
	Reserved11             [128]byte
	Reserved12             [1]*byte
	SessionId              uint32
}

Peb has been derived from the PEB struct definition.

type PebLdrData 

type PebLdrData struct {
	Reserved1               [8]byte
	Reserved2               [3]*byte
	InMemoryOrderModuleList ListEntry
}

PebLdrData has been derived from the PEB_LDR_DATA struct definition.

type ProcessBasicInformationT 

type ProcessBasicInformationT struct {
	ExitStatus                   NtStatus
	PebBaseAddress               *Peb
	AffinityMask                 *uint32
	BasePriority                 Kpriority
	UniqueProcessId              Handle
	InheritedFromUniqueProcessId Handle
}

ProcessBasicInformationT has been derived from the PROCESS_BASIC_INFORMATION struct definition.

type ProcessInformationClass 

type ProcessInformationClass uint32

The ProcessInformationClass constants have been derived from the PROCESS_INFORMATION_CLASS enum definition.

type PsPostProcessInitRoutine 

type PsPostProcessInitRoutine struct{} // FIXME

type RtlAtom 

type RtlAtom uint16

type RtlRelativeNameU 

type RtlRelativeNameU struct {
	RelativeName        UnicodeString
	ContainingDirectory Handle
	CurDirRef           *RtlpCurdirRef
}

RtlRelativeNameU has been derived from the RTL_RELATIVE_NAME_U struct definition.

type RtlUserProcessParameters 

type RtlUserProcessParameters struct {
	Reserved1     [16]byte
	Reserved2     [10]*byte
	ImagePathName UnicodeString
	CommandLine   UnicodeString
}

RtlUserProcessParameters has been derived from the RTL_USER_PROCESS_PARAMETERS struct definition.

type RtlpCurdirRef 

type RtlpCurdirRef struct {
	RefCount int32
	Handle   Handle
}

RtlpCurdirRef has been derived from the RTLP_CURDIR_REF struct definition.

type SectionBasicInformationT 

type SectionBasicInformationT struct {
	BaseAddress          *byte
	AllocationAttributes uint32
	MaximumSize          int64
}

SectionBasicInformationT has been derived from the SECTION_BASIC_INFORMATION struct definition.

type SectionImageInformationT 

type SectionImageInformationT struct {
	TransferAddress        *byte
	ZeroBits               uint32
	MaximumStackSize       uintptr
	CommittedStackSize     uintptr
	SubSystemType          uint32
	SubSystemVersion       uint32
	OperatingSystemVersion uint32
	ImageCharacteristics   uint16
	DllCharacteristics     uint16
	Machine                uint16
	ImageContainsCode      bool
	ImageFlags             byte
	LoaderFlags            uint32
	ImageFileSize          uint32
	CheckSum               uint32
}

SectionImageInformationT has been derived from the SECTION_IMAGE_INFORMATION struct definition.

func (SectionImageInformationT) BaseBelow4gb 

func (i SectionImageInformationT) BaseBelow4gb() bool

func (SectionImageInformationT) ComPlusILOnly 

func (i SectionImageInformationT) ComPlusILOnly() bool

func (SectionImageInformationT) ComPlusNativeReady 

func (i SectionImageInformationT) ComPlusNativeReady() bool

func (SectionImageInformationT) ComPlusPrefer32bit 

func (i SectionImageInformationT) ComPlusPrefer32bit() bool

func (SectionImageInformationT) ImageDynamicallyRelocated 

func (i SectionImageInformationT) ImageDynamicallyRelocated() bool

func (SectionImageInformationT) ImageMappedFlat 

func (i SectionImageInformationT) ImageMappedFlat() bool

type SectionInformationClass 

type SectionInformationClass uint32

The SectionInformationClass constants have been derived from the SECTION_INFORMATION_CLASS enum definition.

type SectionInherit 

type SectionInherit uint32

The SectionInherit constants have been derived from the SECTION_INHERIT enum definition. 

const (
	ViewShare SectionInherit = 1
	ViewUnmap                = 2
)

type SecurityAttributesOpaque 

type SecurityAttributesOpaque unsafe.Pointer

type SecurityDescriptor 

type SecurityDescriptor struct {
	Revision byte
	Sbz1     byte
	Control  SecurityDescriptorControl
	Owner    *Sid
	Group    *Sid
	Sacl     *Acl
	Dacl     *Acl
}

SecurityDescriptor has been derived from the SECURITY_DESCRIPTOR struct definition.

type SecurityDescriptorControl 

type SecurityDescriptorControl uint16

type SecurityImpersonationLevel 

type SecurityImpersonationLevel uint32

The SecurityImpersonationLevel constants have been derived from the SECURITY_IMPERSONATION_LEVEL enum definition.

type SecurityInformationT 

type SecurityInformationT uint32

type Sid 

type Sid struct {
	Revision            byte
	SubAuthorityCount   byte
	IdentifierAuthority SidIdentifierAuthority
	SubAuthority        [1]uint32
}

Sid has been derived from the SID struct definition.

func (*Sid) SetSubAuthoritySlice 

func (t *Sid) SetSubAuthoritySlice(s []uint32)

SetSubAuthoritySlice copies s into the memory at Sid.SubAuthority.

Beware: No bounds check is performed. Another member of the struct (Sid) usually has to be set to the array size.

func (*Sid) SubAuthoritySlice 

func (t *Sid) SubAuthoritySlice(size int) []uint32

SubAuthoritySlice returns a slice over the elements of Sid.SubAuthority.

Beware: The data is not copied out of Sid. The size can usually be taken from an other member of the struct (Sid).

type SidAndAttributes 

type SidAndAttributes struct {
	Sid        *Sid
	Attributes uint32
}

SidAndAttributes has been derived from the SID_AND_ATTRIBUTES struct definition.

type SidAndAttributesHash 

type SidAndAttributesHash struct {
	SidCount uint32
	SidAttr  *SidAndAttributes
	Hash     [32]SidHashEntry
}

SidAndAttributesHash has been derived from the SID_AND_ATTRIBUTES_HASH struct definition.

type SidHashEntry 

type SidHashEntry *uint64

type SidIdentifierAuthority 

type SidIdentifierAuthority struct {
	Value [6]byte
}

SidIdentifierAuthority has been derived from the SID_IDENTIFIER_AUTHORITY struct definition.

type SystemBasicInformationT 

type SystemBasicInformationT struct {
	Reserved1             [4]byte
	MaximumIncrement      uint32
	PhysicalPageSize      uint32
	NumberOfPhysicalPages uint32
	LowestPhysicalPage    uint32
	HighestPhysicalPage   uint32
	AllocationGranularity uint32
	LowestUserAddress     *uint32
	HighestUserAddress    *uint32
	ActiveProcessors      *uint32
	NumberOfProcessors    byte
}

SystemBasicInformationT has been derived from the SYSTEM_BASIC_INFORMATION struct definition.

type SystemExceptionInformationT 

type SystemExceptionInformationT struct {
	Reserved1 [16]byte
}

SystemExceptionInformationT has been derived from the SYSTEM_EXCEPTION_INFORMATION struct definition.

type SystemHandleEntry 

type SystemHandleEntry struct {
	OwnerPid      uint32
	ObjectType    byte
	HandleFlags   byte
	HandleValue   uint16
	ObjectPointer *byte
	AccessMask    uint32
}

SystemHandleEntry has been derived from the SYSTEM_HANDLE_ENTRY struct definition.

type SystemHandleInformationT 

type SystemHandleInformationT struct {
	Count   uint32
	Handles [1]SystemHandleEntry
}

SystemHandleInformationT has been derived from the SYSTEM_HANDLE_INFORMATION struct definition.

func (*SystemHandleInformationT) GetHandles 

func (mi *SystemHandleInformationT) GetHandles() []SystemHandleEntry

func (*SystemHandleInformationT) HandlesSlice 

func (t *SystemHandleInformationT) HandlesSlice(size int) []SystemHandleEntry

HandlesSlice returns a slice over the elements of SystemHandleInformationT.Handles.

Beware: The data is not copied out of SystemHandleInformationT. The size can usually be taken from an other member of the struct (SystemHandleInformationT).

func (*SystemHandleInformationT) SetHandlesSlice 

func (t *SystemHandleInformationT) SetHandlesSlice(s []SystemHandleEntry)

SetHandlesSlice copies s into the memory at SystemHandleInformationT.Handles.

Beware: No bounds check is performed. Another member of the struct (SystemHandleInformationT) usually has to be set to the array size.

type SystemInformationClass 

type SystemInformationClass uint32

The SystemInformationClass constants have been derived from the SYSTEM_INFORMATION_CLASS enum definition.

type SystemInterruptInformationT 

type SystemInterruptInformationT struct {
	Reserved1 [24]byte
}

SystemInterruptInformationT has been derived from the SYSTEM_INTERRUPT_INFORMATION struct definition.

type SystemLookasideInformationT 

type SystemLookasideInformationT struct {
	Reserved1 [32]byte
}

SystemLookasideInformationT has been derived from the SYSTEM_LOOKASIDE_INFORMATION struct definition.

type SystemModule 

type SystemModule struct {
	Section        *byte
	MappedBase     *byte
	ImageBase      *byte
	ImageSize      uint32
	Flags          uint32
	LoadOrderIndex uint16
	InitOrderIndex uint16
	LoadCount      uint16
	NameOffset     uint16
	Name           [256]byte
}

SystemModule has been derived from the SYSTEM_MODULE struct definition.

type SystemModuleInformationT 

type SystemModuleInformationT struct {
	ModulesCount uint32
	Modules      [1]SystemModule
}

SystemModuleInformationT has been derived from the SYSTEM_MODULE_INFORMATION struct definition.

func (*SystemModuleInformationT) GetModules 

func (mi *SystemModuleInformationT) GetModules() []SystemModule

func (*SystemModuleInformationT) ModulesSlice 

func (t *SystemModuleInformationT) ModulesSlice(size int) []SystemModule

ModulesSlice returns a slice over the elements of SystemModuleInformationT.Modules.

Beware: The data is not copied out of SystemModuleInformationT. The size can usually be taken from an other member of the struct (SystemModuleInformationT).

func (*SystemModuleInformationT) SetModulesSlice 

func (t *SystemModuleInformationT) SetModulesSlice(s []SystemModule)

SetModulesSlice copies s into the memory at SystemModuleInformationT.Modules.

Beware: No bounds check is performed. Another member of the struct (SystemModuleInformationT) usually has to be set to the array size.

type SystemPagefileInformationT 

type SystemPagefileInformationT struct {
	NextEntryOffset uint32
	CurrentSize     uint32
	TotalUsed       uint32
	PeakUsed        uint32
	FileName        UnicodeString
}

SystemPagefileInformationT has been derived from the SYSTEM_PAGEFILE_INFORMATION struct definition.

type SystemPerformanceInformationT 

type SystemPerformanceInformationT struct {
	IdleTime                               int64
	ReadTransferCount                      int64
	WriteTransferCount                     int64
	OtherTransferCount                     int64
	ReadOperationCount                     uint32
	WriteOperationCount                    uint32
	OtherOperationCount                    uint32
	AvailablePages                         uint32
	TotalCommittedPages                    uint32
	TotalCommitLimit                       uint32
	PeakCommitment                         uint32
	PageFaults                             uint32
	WriteCopyFaults                        uint32
	TransitionFaults                       uint32
	CacheTransitionFaults                  uint32
	DemandZeroFaults                       uint32
	PagesRead                              uint32
	PageReadIos                            uint32
	CacheReads                             uint32
	CacheIos                               uint32
	PagefilePagesWritten                   uint32
	PagefilePageWriteIos                   uint32
	MappedFilePagesWritten                 uint32
	MappedFilePageWriteIos                 uint32
	PagedPoolUsage                         uint32
	NonPagedPoolUsage                      uint32
	PagedPoolAllocs                        uint32
	PagedPoolFrees                         uint32
	NonPagedPoolAllocs                     uint32
	NonPagedPoolFrees                      uint32
	TotalFreeSystemPtes                    uint32
	SystemCodePage                         uint32
	TotalSystemDriverPages                 uint32
	TotalSystemCodePages                   uint32
	SmallNonPagedLookasideListAllocateHits uint32
	SmallPagedLookasideListAllocateHits    uint32
	Reserved3                              uint32
	MmSystemCachePage                      uint32
	PagedPoolPage                          uint32
	SystemDriverPage                       uint32
	FastReadNoWait                         uint32
	FastReadWait                           uint32
	FastReadResourceMiss                   uint32
	FastReadNotPossible                    uint32
	FastMdlReadNoWait                      uint32
	FastMdlReadWait                        uint32
	FastMdlReadResourceMiss                uint32
	FastMdlReadNotPossible                 uint32
	MapDataNoWait                          uint32
	MapDataWait                            uint32
	MapDataNoWaitMiss                      uint32
	MapDataWaitMiss                        uint32
	PinMappedDataCount                     uint32
	PinReadNoWait                          uint32
	PinReadWait                            uint32
	PinReadNoWaitMiss                      uint32
	PinReadWaitMiss                        uint32
	CopyReadNoWait                         uint32
	CopyReadWait                           uint32
	CopyReadNoWaitMiss                     uint32
	CopyReadWaitMiss                       uint32
	MdlReadNoWait                          uint32
	MdlReadWait                            uint32
	MdlReadNoWaitMiss                      uint32
	MdlReadWaitMiss                        uint32
	ReadAheadIos                           uint32
	LazyWriteIos                           uint32
	LazyWritePages                         uint32
	DataFlushes                            uint32
	DataPages                              uint32
	ContextSwitches                        uint32
	FirstLevelTbFills                      uint32
	SecondLevelTbFills                     uint32
	SystemCalls                            uint32
}

SystemPerformanceInformationT has been derived from the SYSTEM_PERFORMANCE_INFORMATION struct definition.

type SystemPolicyInformationT 

type SystemPolicyInformationT struct {
	Reserved1 [2]*byte
	Reserved2 [3]uint32
}

SystemPolicyInformationT has been derived from the SYSTEM_POLICY_INFORMATION struct definition.

type SystemProcessInformationT 

type SystemProcessInformationT struct {
	NextEntryOffset              uint32
	NumberOfThreads              uint32
	Reserved                     [3]int64
	CreateTime                   int64
	UserTime                     int64
	KernelTime                   int64
	ImageName                    UnicodeString
	BasePriority                 Kpriority
	UniqueProcessId              Handle
	InheritedFromUniqueProcessId Handle
	HandleCount                  uint32
	SessionId                    uint32
	PageDirectoryBase            uint32
	VirtualMemoryCounters        VmCounters
	PrivatePageCount             uintptr
	IoCounters                   IoCounters
}

SystemProcessInformationT has been derived from the SYSTEM_PROCESS_INFORMATION struct definition.

type SystemProcessorInformationT 

type SystemProcessorInformationT struct {
	ProcessorArchitecture uint16
	ProcessorLevel        uint16
	ProcessorRevision     uint16
	Unknown               uint16
	FeatureBits           uint32
}

SystemProcessorInformationT has been derived from the SYSTEM_PROCESSOR_INFORMATION struct definition.

type SystemProcessorPerformanceInformationT 

type SystemProcessorPerformanceInformationT struct {
	IdleTime   int64
	KernelTime int64
	UserTime   int64
	Reserved1  [2]int64
	Reserved2  uint32
}

SystemProcessorPerformanceInformationT has been derived from the SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION struct definition.

type SystemRegistryQuotaInformationT 

type SystemRegistryQuotaInformationT struct {
	RegistryQuotaAllowed uint32
	RegistryQuotaUsed    uint32
	Reserved1            *byte
}

SystemRegistryQuotaInformationT has been derived from the SYSTEM_REGISTRY_QUOTA_INFORMATION struct definition.

type SystemThreadInformationT 

type SystemThreadInformationT struct {
	Reserved1    [3]int64
	Reserved2    uint32
	StartAddress *byte
	ClientId     ClientId
	Priority     Kpriority
	BasePriority int32
	Reserved3    uint32
	ThreadState  uint32
	WaitReason   uint32
}

SystemThreadInformationT has been derived from the SYSTEM_THREAD_INFORMATION struct definition.

type SystemTimeofdayInformationT 

type SystemTimeofdayInformationT struct {
	BootTime          int64
	CurrentTime       int64
	TimeZoneBias      int64
	CurrentTimeZoneId uint32
	Reserved1         [20]byte
}

SystemTimeofdayInformationT has been derived from the SYSTEM_TIMEOFDAY_INFORMATION struct definition.

type ThreadInformationClass 

type ThreadInformationClass uint32

The ThreadInformationClass constants have been derived from the THREAD_INFORMATION_CLASS enum definition.

type TokenAccessInformationT 

type TokenAccessInformationT struct {
	SidHash            *SidAndAttributesHash
	RestrictedSidHash  *SidAndAttributesHash
	Privileges         *TokenPrivilegesT
	AuthenticationId   Luid
	TokenType          TokenTypeT
	ImpersonationLevel SecurityImpersonationLevel
	MandatoryPolicy    TokenMandatoryPolicyT
	Flags              uint32
	AppContainerNumber uint32
	PackageSid         *Sid
	CapabilitiesHash   *SidAndAttributesHash
	TrustLevelSid      *Sid
	SecurityAttributes *SecurityAttributesOpaque
}

TokenAccessInformationT has been derived from the TOKEN_ACCESS_INFORMATION struct definition.

type TokenAppcontainerInformationT 

type TokenAppcontainerInformationT struct {
	TokenAppContainer *Sid
}

TokenAppcontainerInformationT has been derived from the TOKEN_APPCONTAINER_INFORMATION struct definition.

type TokenAuditPolicyT 

type TokenAuditPolicyT struct {
	PerUserPolicy [30]byte
}

TokenAuditPolicyT has been derived from the TOKEN_AUDIT_POLICY struct definition.

type TokenControlT 

type TokenControlT struct {
	TokenId          Luid
	AuthenticationId Luid
	ModifiedId       Luid
	TokenSource      TokenSourceT
}

TokenControlT has been derived from the TOKEN_CONTROL struct definition.

type TokenDefaultDaclT 

type TokenDefaultDaclT struct {
	DefaultDacl *Acl
}

TokenDefaultDaclT has been derived from the TOKEN_DEFAULT_DACL struct definition.

type TokenDeviceClaimsT 

type TokenDeviceClaimsT struct {
	DeviceClaims *ClaimsBlob
}

TokenDeviceClaimsT has been derived from the TOKEN_DEVICE_CLAIMS struct definition.

type TokenElevationT 

type TokenElevationT struct {
	TokenIsElevated uint32
}

TokenElevationT has been derived from the TOKEN_ELEVATION struct definition.

type TokenGroupsAndPrivilegesT 

type TokenGroupsAndPrivilegesT struct {
	SidCount            uint32
	SidLength           uint32
	Sids                *SidAndAttributes
	RestrictedSidCount  uint32
	RestrictedSidLength uint32
	RestrictedSids      *SidAndAttributes
	PrivilegeCount      uint32
	PrivilegeLength     uint32
	Privileges          *LuidAndAttributes
	AuthenticationId    Luid
}

TokenGroupsAndPrivilegesT has been derived from the TOKEN_GROUPS_AND_PRIVILEGES struct definition.

type TokenGroupsT 

type TokenGroupsT struct {
	GroupCount uint32
	Groups     [1]SidAndAttributes
}

TokenGroupsT has been derived from the TOKEN_GROUPS struct definition.

func (*TokenGroupsT) GetGroups 

func (tg *TokenGroupsT) GetGroups() []SidAndAttributes

func (*TokenGroupsT) GroupsSlice 

func (t *TokenGroupsT) GroupsSlice(size int) []SidAndAttributes

GroupsSlice returns a slice over the elements of TokenGroupsT.Groups.

Beware: The data is not copied out of TokenGroupsT. The size can usually be taken from an other member of the struct (TokenGroupsT).

func (*TokenGroupsT) SetGroupsSlice 

func (t *TokenGroupsT) SetGroupsSlice(s []SidAndAttributes)

SetGroupsSlice copies s into the memory at TokenGroupsT.Groups.

Beware: No bounds check is performed. Another member of the struct (TokenGroupsT) usually has to be set to the array size.

type TokenInformationClassT 

type TokenInformationClassT uint32

The TokenInformationClassT constants have been derived from the TOKEN_INFORMATION_CLASS enum definition.

type TokenLinkedTokenT 

type TokenLinkedTokenT struct {
	LinkedToken Handle
}

TokenLinkedTokenT has been derived from the TOKEN_LINKED_TOKEN struct definition.

type TokenMandatoryLabelT 

type TokenMandatoryLabelT struct {
	Label SidAndAttributes
}

TokenMandatoryLabelT has been derived from the TOKEN_MANDATORY_LABEL struct definition.

type TokenMandatoryPolicyT 

type TokenMandatoryPolicyT struct {
	Policy uint32
}

TokenMandatoryPolicyT has been derived from the TOKEN_MANDATORY_POLICY struct definition.

type TokenOriginT 

type TokenOriginT struct {
	OriginatingLogonSession Luid
}

TokenOriginT has been derived from the TOKEN_ORIGIN struct definition.

type TokenOwnerT 

type TokenOwnerT struct {
	Owner *Sid
}

TokenOwnerT has been derived from the TOKEN_OWNER struct definition.

type TokenPrimaryGroupT 

type TokenPrimaryGroupT struct {
	PrimaryGroup *Sid
}

TokenPrimaryGroupT has been derived from the TOKEN_PRIMARY_GROUP struct definition.

type TokenPrivilegesT 

type TokenPrivilegesT struct {
	PrivilegeCount uint32
	Privileges     [1]LuidAndAttributes
}

TokenPrivilegesT has been derived from the TOKEN_PRIVILEGES struct definition.

func (*TokenPrivilegesT) GetPrivileges 

func (tp *TokenPrivilegesT) GetPrivileges() []LuidAndAttributes

func (*TokenPrivilegesT) PrivilegesSlice 

func (t *TokenPrivilegesT) PrivilegesSlice(size int) []LuidAndAttributes

PrivilegesSlice returns a slice over the elements of TokenPrivilegesT.Privileges.

Beware: The data is not copied out of TokenPrivilegesT. The size can usually be taken from an other member of the struct (TokenPrivilegesT).

func (*TokenPrivilegesT) SetPrivileges 

func (tp *TokenPrivilegesT) SetPrivileges(ps []LuidAndAttributes)

func (*TokenPrivilegesT) SetPrivilegesSlice 

func (t *TokenPrivilegesT) SetPrivilegesSlice(s []LuidAndAttributes)

SetPrivilegesSlice copies s into the memory at TokenPrivilegesT.Privileges.

Beware: No bounds check is performed. Another member of the struct (TokenPrivilegesT) usually has to be set to the array size.

type TokenSidInformationT 

type TokenSidInformationT struct {
	Sid *Sid
}

TokenSidInformationT has been derived from the TOKEN_SID_INFORMATION struct definition.

type TokenSourceT 

type TokenSourceT struct {
	SourceName       [8]byte
	SourceIdentifier Luid
}

TokenSourceT has been derived from the TOKEN_SOURCE struct definition.

type TokenStatisticsT 

type TokenStatisticsT struct {
	TokenId            Luid
	AuthenticationId   Luid
	ExpirationTime     int64
	TokenType          TokenTypeT
	ImpersonationLevel SecurityImpersonationLevel
	DynamicCharged     uint32
	DynamicAvailable   uint32
	GroupCount         uint32
	PrivilegeCount     uint32
	ModifiedId         Luid
}

TokenStatisticsT has been derived from the TOKEN_STATISTICS struct definition.

type TokenTypeT 

type TokenTypeT uint32

The TokenTypeT constants have been derived from the TOKEN_TYPE enum definition. 

const (
	TokenPrimary       TokenTypeT = 1
	TokenImpersonation            = 2
)

type TokenUserClaimsT 

type TokenUserClaimsT struct {
	UserClaims *ClaimsBlob
}

TokenUserClaimsT has been derived from the TOKEN_USER_CLAIMS struct definition.

type TokenUserT 

type TokenUserT struct {
	User SidAndAttributes
}

TokenUserT has been derived from the TOKEN_USER struct definition.

type UnicodeString 

type UnicodeString struct {
	Length        uint16
	MaximumLength uint16
	Buffer        *uint16
}

UnicodeString has been derived from the UNICODE_STRING struct definition.

func NewEmptyUnicodeString 

func NewEmptyUnicodeString(length int) *UnicodeString

NewEmptyUnicodeString initializes a UnicodeString for length UTF-16 characters and returns it.

func NewUnicodeString 

func NewUnicodeString(s string) *UnicodeString

NewUnicodeString converts its argument to UTF-16 and returns a pointer to a UnicodeString that can be used with various Windows Native API functions.

func NewUnicodeStringFromBuffer 

func NewUnicodeStringFromBuffer(buffer *uint16, length int) *UnicodeString

NewUnicodeStringFromBuffer initializes a UnicodeString from a pointer and a length value as returned by many NTDLL API calls.

func (UnicodeString) String 

func (u UnicodeString) String() string

String converts the UTF-16-encoded string stored in a UnicodeString to UTF-8 and returns that as a Go string.

type VmCounters 

type VmCounters struct {
	PeakVirtualSize            uintptr
	VirtualSize                uintptr
	PageFaultCount             uint32
	PeakWorkingSetSize         uintptr
	WorkingSetSize             uintptr
	QuotaPeakPagedPoolUsage    uintptr
	QuotaPagedPoolUsage        uintptr
	QuotaPeakNonPagedPoolUsage uintptr
	QuotaNonPagedPoolUsage     uintptr
	PagefileUsage              uintptr
	PeakPagefileUsage          uintptr
}

VmCounters has been derived from the VM_COUNTERS struct definition.

Source Files

View all Source files

Directories

Path Synopsis
examples
ls-proc-vm
lsmod
lsobj
lsobj is a console-based WinObj-like tool See https://technet.microsoft.com/en-us/sysinternals/winobj
 lsobj is a console-based WinObj-like tool See https://technet.microsoft.com/en-us/sysinternals/winobj

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.