Add sandbox support for Windows process mitigations

sandbox/win/src/nt_internals.h

Index: sandbox/win/src/nt_internals.h
===================================================================
--- sandbox/win/src/nt_internals.h	(revision 156579)
+++ sandbox/win/src/nt_internals.h	(working copy)
@@ -4,8 +4,8 @@
 
 // This file holds definitions related to the ntdll API.
 
-#ifndef SANDBOX_SRC_NT_INTERNALS_H__
-#define SANDBOX_SRC_NT_INTERNALS_H__
+#ifndef SANDBOX_WIN_SRC_NT_INTERNALS_H__
+#define SANDBOX_WIN_SRC_NT_INTERNALS_H__
 
 #include <windows.h>
 
@@ -292,7 +292,8 @@
 
 // Partial definition only:
 typedef enum _PROCESSINFOCLASS {
-  ProcessBasicInformation = 0
+  ProcessBasicInformation = 0,
+  ProcessExecuteFlags = 0x22
 } PROCESSINFOCLASS;
 
 typedef PVOID PPEB;
@@ -314,6 +315,12 @@
   IN ULONG ProcessInformationLength,
   OUT PULONG ReturnLength OPTIONAL);
 
+typedef NTSTATUS (WINAPI *NtSetInformationProcessFunction)(
+  HANDLE ProcessHandle,
+  IN PROCESSINFOCLASS ProcessInformationClass,
+  IN PVOID ProcessInformation,
+  IN ULONG ProcessInformationLength);
+
 typedef NTSTATUS (WINAPI *NtOpenThreadTokenFunction) (
   IN HANDLE ThreadHandle,
   IN ACCESS_MASK DesiredAccess,
@@ -608,4 +615,5 @@
   IN OUT PUNICODE_STRING DestinationString,
   IN PCWSTR SourceString);
 
-#endif  // SANDBOX_SRC_NT_INTERNALS_H__
+#endif  // SANDBOX_WIN_SRC_NT_INTERNALS_H__
+