#ifndef _NTSXS_H
// begin_private

// rev
/**
 * Private runtime activation context, separate from the serialized ACTIVATION_CONTEXT_DATA blob.
 * This private layout occupies 0x208 bytes on x64 and 0x12c bytes on x86.
 * It is not a version-independent ABI. Links is used by the optional live/dead context lists;
 * StackTraces holds four release stack traces of four addresses each when tracking is enabled.
 */
typedef struct _ACTIVATION_CONTEXT
{
    LONG RefCount;
    ULONG Flags; // bit 0: zombified; bit 1: allocation is not freed by RtlpFreeActivationContext
    LIST_ENTRY Links;
    PACTIVATION_CONTEXT_DATA ActivationContextData;
    PACTIVATION_CONTEXT_NOTIFY_ROUTINE NotificationRoutine;
    PVOID NotificationContext;
    ULONG SentNotifications[8]; // notification-type bitmap
    ULONG DisabledNotifications[8]; // notification-type bitmap
    ASSEMBLY_STORAGE_MAP StorageMap;
    PASSEMBLY_STORAGE_MAP_ENTRY InlineStorageMapEntries[32];
    ULONG StackTraceIndex;
    PVOID StackTraces[4][4];
} ACTIVATION_CONTEXT, *PACTIVATION_CONTEXT;

// end_private
#endif
View code on GitHub