#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The MANAGE_HOT_PATCH_QUERY_PATCHES structure is used to query information about loaded hot patches.
 */
typedef struct _MANAGE_HOT_PATCH_QUERY_PATCHES
{
    ULONG Version;                           // Structure version. Must be MANAGE_HOT_PATCH_QUERY_PATCHES_VERSION.
    union
    {
        SID Sid;                             // The SID of the user whose patches are being queried.
        UCHAR Buffer[SECURITY_MAX_SID_SIZE]; // Buffer for the SID.
    } UserSid;
    ULONG PatchCount;                        // The number of patches found.
    PUNICODE_STRING PatchPathStrings;        // Pointer to an array of patch path strings.
    PHOT_PATCH_IMAGE_INFO BaseInfos;         // Pointer to an array of patch image info structures.
} MANAGE_HOT_PATCH_QUERY_PATCHES, *PMANAGE_HOT_PATCH_QUERY_PATCHES;

#endif
#endif
View code on GitHub