初步增加32位支持(没加全)

ai_anti_malware/native_struct.h

@@ -120,6 +120,12 @@ typedef struct _UNICODE_STRING {
     USHORT MaximumLength;
     PWSTR Buffer;
 } UNICODE_STRING;
+typedef struct _UNICODE_STRING32 {
+    USHORT Length;
+    USHORT MaximumLength;
+    DWORD Buffer;
+} UNICODE_STRING32;
+
 typedef UNICODE_STRING* PUNICODE_STRING;
 typedef const UNICODE_STRING* PCUNICODE_STRING;
 typedef PVOID(NTAPI* RtlImageDirectoryEntryToDataFn)(PVOID, BOOLEAN, USHORT,
@@ -905,6 +911,54 @@ union SegmentSelector {
 };
 static_assert(sizeof(SegmentSelector) == 2, "Size check");
 #include <poppack.h>
+typedef struct _STARTUPINFOW32 {
+    DWORD   cb;
+    DWORD   lpReserved;
+    DWORD   lpDesktop;
+    DWORD   lpTitle;
+    DWORD   dwX;
+    DWORD   dwY;
+    DWORD   dwXSize;
+    DWORD   dwYSize;
+    DWORD   dwXCountChars;
+    DWORD   dwYCountChars;
+    DWORD   dwFillAttribute;
+    DWORD   dwFlags;
+    WORD    wShowWindow;
+    WORD    cbReserved2;
+    DWORD  lpReserved2;
+    DWORD  hStdInput;
+    DWORD  hStdOutput;
+    DWORD  hStdError;
+} STARTUPINFOW32, * LPSTARTUPINFOW32;
+static_assert(sizeof(STARTUPINFOW32) == 68, "Size check");
+typedef struct tagPROCESSENTRY32W_32
+{
+    DWORD   dwSize;
+    DWORD   cntUsage;
+    DWORD   th32ProcessID;          // this process
+    DWORD th32DefaultHeapID;
+    DWORD   th32ModuleID;           // associated exe
+    DWORD   cntThreads;
+    DWORD   th32ParentProcessID;    // this process's parent process
+    LONG    pcPriClassBase;         // Base priority of process's threads
+    DWORD   dwFlags;
+    WCHAR   szExeFile[MAX_PATH];    // Path
+} PROCESSENTRY32W_32;
+static_assert(sizeof(PROCESSENTRY32W_32) == 556, "Size check");
+#pragma pack(push, 8)
+
+typedef struct _RTL_CRITICAL_SECTION32 {
+    DWORD DebugInfo;
+    LONG LockCount;
+    LONG RecursionCount;
+    DWORD OwningThread;        // from the thread's ClientId->UniqueThread
+    DWORD LockSemaphore;
+    DWORD SpinCount;        // force size on 64-bit systems when packed
+} RTL_CRITICAL_SECTION32, * PRTL_CRITICAL_SECTION32;
+
+#pragma pack(pop)
+static_assert(sizeof(RTL_CRITICAL_SECTION32) == 24, "Size check");
 
 union FlagRegister {
     ULONG_PTR all;