#ifndef _NTEXAPI_H

/**
 * \brief Warbird control-flow transition request header.
 *
 * Used with \c SystemControlFlowTransition to dispatch an operation-tagged
 * request into the kernel's Warbird control-flow transition handlers.
 *
 * Warbird is Windows' internal code/data protection and controlled execution
 * mechanism used by protected components to transition memory between encrypted,
 * decrypted, and executable states under policy.
 *
 * \a Parameters points to an operation-specific payload determined by
 * \a Operation.
 */
// private
typedef struct _SYSTEM_CONTROL_FLOW_TRANSITION
{
    ULONG Operation;
    ULONG Reserved;
    PVOID Parameters; // User pointer to an operation-specific payload.
} SYSTEM_CONTROL_FLOW_TRANSITION, *PSYSTEM_CONTROL_FLOW_TRANSITION;

#endif
View code on GitHub