Geoff Chappell - Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the WOW64T.H header at
and draws from it the following type definitions:
The header WOW64T.H is published in the “minwin” directory of the Windows Driver Kit (WDK) for Windows 10 in the original and Version 1511 editions. This publication was almost certainly an oversight. Most headers in this directory do not compile without error, some for having a #include of a header that is not supplied with the kit (or is known ever to have been published), others for referring to types that are not defined in any other header that is supplied with the kit. Still, published it is. For the original release of Windows 10 in particular, the published WOW64T.H is thus kown to define more types than are revealed in any of the symbol files in the downloadable packages of public symbols for the same release:
|Line Number||Type||Unconventional Type Definition|
|239||anonymous struct in
|279||anonymous struct in
No reason is yet known that of all these types that are defined in WOW64T.H, only the same four show in public symbol files for the kernel and NTDLL and even the private symbols for OLE32.