?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
msxml3/tests: Add test saving XML with non-english characters.
[wine.git] / include / winternl.h
blob5be28856920231126b0e3eba01039c9d836453ca
1 /*
2 * Internal NT APIs and data structures
3 *
4 * Copyright (C) the Wine project
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19 */
20
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
23
24 #include <ntdef.h>
25 #include <windef.h>
26
27 #ifdef __cplusplus
28 extern "C" {
29 #endif /* defined(__cplusplus) */
30
31
32 /**********************************************************************
33 * Fundamental types and data structures
34 */
35
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS;
39 #endif
40
41 typedef const char *PCSZ;
42
43 typedef short CSHORT;
44 typedef CSHORT *PCSHORT;
45
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING {
49 USHORT Length;
50 USHORT MaximumLength;
51 PCHAR Buffer;
52 } STRING, *PSTRING;
53 #endif
54
55 typedef STRING ANSI_STRING;
56 typedef PSTRING PANSI_STRING;
57 typedef const STRING *PCANSI_STRING;
58
59 typedef STRING OEM_STRING;
60 typedef PSTRING POEM_STRING;
61 typedef const STRING *PCOEM_STRING;
62
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING {
66 USHORT Length; /* bytes */
67 USHORT MaximumLength; /* bytes */
68 PWSTR Buffer;
69 } UNICODE_STRING, *PUNICODE_STRING;
70 #endif
71
72 typedef const UNICODE_STRING *PCUNICODE_STRING;
73
74 #ifndef _FILETIME_
75 #define _FILETIME_
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
78 {
79 #ifdef WORDS_BIGENDIAN
80 DWORD dwHighDateTime;
81 DWORD dwLowDateTime;
82 #else
83 DWORD dwLowDateTime;
84 DWORD dwHighDateTime;
85 #endif
86 } FILETIME, *PFILETIME, *LPFILETIME;
87 #endif /* _FILETIME_ */
88
89 /*
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
96 */
97 typedef struct _RTL_SYSTEM_TIME {
98 WORD wYear;
99 WORD wMonth;
100 WORD wDayOfWeek;
101 WORD wDay;
102 WORD wHour;
103 WORD wMinute;
104 WORD wSecond;
105 WORD wMilliseconds;
106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
107
108 typedef struct _RTL_TIME_ZONE_INFORMATION {
109 LONG Bias;
110 WCHAR StandardName[32];
111 RTL_SYSTEM_TIME StandardDate;
112 LONG StandardBias;
113 WCHAR DaylightName[32];
114 RTL_SYSTEM_TIME DaylightDate;
115 LONG DaylightBias;
116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
117
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
119 {
120 LONG Bias;
121 WCHAR StandardName[32];
122 RTL_SYSTEM_TIME StandardDate;
123 LONG StandardBias;
124 WCHAR DaylightName[32];
125 RTL_SYSTEM_TIME DaylightDate;
126 LONG DaylightBias;
127 WCHAR TimeZoneKeyName[128];
128 BOOLEAN DynamicDaylightTimeDisabled;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
130
131 typedef struct _CLIENT_ID
132 {
133 HANDLE UniqueProcess;
134 HANDLE UniqueThread;
135 } CLIENT_ID, *PCLIENT_ID;
136
137 typedef struct _CURDIR
138 {
139 UNICODE_STRING DosPath;
140 PVOID Handle;
141 } CURDIR, *PCURDIR;
142
143 typedef struct RTL_DRIVE_LETTER_CURDIR
144 {
145 USHORT Flags;
146 USHORT Length;
147 ULONG TimeStamp;
148 UNICODE_STRING DosPath;
149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
150
151 typedef struct _RTL_RELATIVE_NAME
152 {
153 UNICODE_STRING RelativeName;
154 HANDLE ContainerDirectory;
155 void *CurDirRef;
156 } RTL_RELATIVE_NAME, *PRTL_RELATIVE_NAME;
157
158 typedef struct tagRTL_BITMAP {
159 ULONG SizeOfBitMap; /* Number of bits in the bitmap */
160 PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP, *PRTL_BITMAP;
162
163 typedef const RTL_BITMAP *PCRTL_BITMAP;
164
165 typedef struct tagRTL_BITMAP_RUN {
166 ULONG StartingIndex; /* Bit position at which run starts */
167 ULONG NumberOfBits; /* Size of the run in bits */
168 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
169
170 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
171
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
173 {
174 ULONG AllocationSize;
175 ULONG Size;
176 ULONG Flags;
177 ULONG DebugFlags;
178 HANDLE ConsoleHandle;
179 ULONG ConsoleFlags;
180 HANDLE hStdInput;
181 HANDLE hStdOutput;
182 HANDLE hStdError;
183 CURDIR CurrentDirectory;
184 UNICODE_STRING DllPath;
185 UNICODE_STRING ImagePathName;
186 UNICODE_STRING CommandLine;
187 PWSTR Environment;
188 ULONG dwX;
189 ULONG dwY;
190 ULONG dwXSize;
191 ULONG dwYSize;
192 ULONG dwXCountChars;
193 ULONG dwYCountChars;
194 ULONG dwFillAttribute;
195 ULONG dwFlags;
196 ULONG wShowWindow;
197 UNICODE_STRING WindowTitle;
198 UNICODE_STRING Desktop;
199 UNICODE_STRING ShellInfo;
200 UNICODE_STRING RuntimeInfo;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
202 ULONG_PTR EnvironmentSize;
203 ULONG_PTR EnvironmentVersion;
204 PVOID PackageDependencyData;
205 ULONG ProcessGroupId;
206 ULONG LoaderThreads;
207 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
208
209 /* value for Flags field (FIXME: not the correct name) */
210 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
211
212 typedef struct _PEB_LDR_DATA
213 {
214 ULONG Length;
215 BOOLEAN Initialized;
216 PVOID SsHandle;
217 LIST_ENTRY InLoadOrderModuleList;
218 LIST_ENTRY InMemoryOrderModuleList;
219 LIST_ENTRY InInitializationOrderModuleList;
220 PVOID EntryInProgress;
221 BOOLEAN ShutdownInProgress;
222 HANDLE ShutdownThreadId;
223 } PEB_LDR_DATA, *PPEB_LDR_DATA;
224
225 typedef struct _GDI_TEB_BATCH
226 {
227 ULONG Offset;
228 HANDLE HDC;
229 ULONG Buffer[0x136];
230 } GDI_TEB_BATCH;
231
232 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
233 {
234 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
235 struct _ACTIVATION_CONTEXT *ActivationContext;
236 ULONG Flags;
237 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
238
239 typedef struct _ACTIVATION_CONTEXT_STACK
240 {
241 RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
242 LIST_ENTRY FrameListCache;
243 ULONG Flags;
244 ULONG NextCookieSequenceNumber;
245 ULONG_PTR StackId;
246 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
247
248 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
249 {
250 ULONG Flags;
251 const char *FrameName;
252 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
253
254 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
255 {
256 TEB_ACTIVE_FRAME_CONTEXT BasicContext;
257 const char *SourceLocation;
258 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
259
260 typedef struct _TEB_ACTIVE_FRAME
261 {
262 ULONG Flags;
263 struct _TEB_ACTIVE_FRAME *Previous;
264 TEB_ACTIVE_FRAME_CONTEXT *Context;
265 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
266
267 typedef struct _TEB_ACTIVE_FRAME_EX
268 {
269 TEB_ACTIVE_FRAME BasicFrame;
270 void *ExtensionIdentifier;
271 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
272
273 typedef struct _FLS_CALLBACK
274 {
275 void *unknown;
276 PFLS_CALLBACK_FUNCTION callback; /* ~0 if NULL callback is set, NULL if FLS index is free. */
277 } FLS_CALLBACK, *PFLS_CALLBACK;
278
279 typedef struct _FLS_INFO_CHUNK
280 {
281 ULONG count; /* number of allocated FLS indexes in the chunk. */
282 FLS_CALLBACK callbacks[1]; /* the size is 0x10 for chunk 0 and is twice as
283 * the previous chunk size for the rest. */
284 } FLS_INFO_CHUNK, *PFLS_INFO_CHUNK;
285
286 typedef struct _GLOBAL_FLS_DATA
287 {
288 FLS_INFO_CHUNK *fls_callback_chunks[8];
289 LIST_ENTRY fls_list_head;
290 ULONG fls_high_index;
291 } GLOBAL_FLS_DATA, *PGLOBAL_FLS_DATA;
292
293 typedef struct _TEB_FLS_DATA
294 {
295 LIST_ENTRY fls_list_entry;
296 void **fls_data_chunks[8];
297 } TEB_FLS_DATA, *PTEB_FLS_DATA;
298
299 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
300 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
301
302 /***********************************************************************
303 * PEB data structure
304 */
305 typedef struct _PEB
306 { /* win32/win64 */
307 BOOLEAN InheritedAddressSpace; /* 000/000 */
308 BOOLEAN ReadImageFileExecOptions; /* 001/001 */
309 BOOLEAN BeingDebugged; /* 002/002 */
310 BOOLEAN SpareBool; /* 003/003 */
311 HANDLE Mutant; /* 004/008 */
312 HMODULE ImageBaseAddress; /* 008/010 */
313 PPEB_LDR_DATA LdrData; /* 00c/018 */
314 RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 010/020 */
315 PVOID SubSystemData; /* 014/028 */
316 HANDLE ProcessHeap; /* 018/030 */
317 PRTL_CRITICAL_SECTION FastPebLock; /* 01c/038 */
318 PVOID /*PPEBLOCKROUTINE*/ FastPebLockRoutine; /* 020/040 */
319 PVOID /*PPEBLOCKROUTINE*/ FastPebUnlockRoutine; /* 024/048 */
320 ULONG EnvironmentUpdateCount; /* 028/050 */
321 PVOID KernelCallbackTable; /* 02c/058 */
322 ULONG Reserved; /* 030/060 */
323 ULONG AtlThunkSListPtr32; /* 034/064 */
324 PVOID /*PPEB_FREE_BLOCK*/ FreeList; /* 038/068 */
325 ULONG TlsExpansionCounter; /* 03c/070 */
326 PRTL_BITMAP TlsBitmap; /* 040/078 */
327 ULONG TlsBitmapBits[2]; /* 044/080 */
328 PVOID ReadOnlySharedMemoryBase; /* 04c/088 */
329 PVOID ReadOnlySharedMemoryHeap; /* 050/090 */
330 PVOID *ReadOnlyStaticServerData; /* 054/098 */
331 PVOID AnsiCodePageData; /* 058/0a0 */
332 PVOID OemCodePageData; /* 05c/0a8 */
333 PVOID UnicodeCaseTableData; /* 060/0b0 */
334 ULONG NumberOfProcessors; /* 064/0b8 */
335 ULONG NtGlobalFlag; /* 068/0bc */
336 LARGE_INTEGER CriticalSectionTimeout; /* 070/0c0 */
337 SIZE_T HeapSegmentReserve; /* 078/0c8 */
338 SIZE_T HeapSegmentCommit; /* 07c/0d0 */
339 SIZE_T HeapDeCommitTotalFreeThreshold; /* 080/0d8 */
340 SIZE_T HeapDeCommitFreeBlockThreshold; /* 084/0e0 */
341 ULONG NumberOfHeaps; /* 088/0e8 */
342 ULONG MaximumNumberOfHeaps; /* 08c/0ec */
343 PVOID *ProcessHeaps; /* 090/0f0 */
344 PVOID GdiSharedHandleTable; /* 094/0f8 */
345 PVOID ProcessStarterHelper; /* 098/100 */
346 PVOID GdiDCAttributeList; /* 09c/108 */
347 PVOID LoaderLock; /* 0a0/110 */
348 ULONG OSMajorVersion; /* 0a4/118 */
349 ULONG OSMinorVersion; /* 0a8/11c */
350 ULONG OSBuildNumber; /* 0ac/120 */
351 ULONG OSPlatformId; /* 0b0/124 */
352 ULONG ImageSubSystem; /* 0b4/128 */
353 ULONG ImageSubSystemMajorVersion; /* 0b8/12c */
354 ULONG ImageSubSystemMinorVersion; /* 0bc/130 */
355 ULONG ImageProcessAffinityMask; /* 0c0/134 */
356 HANDLE GdiHandleBuffer[28]; /* 0c4/138 */
357 ULONG unknown[6]; /* 134/218 */
358 PVOID PostProcessInitRoutine; /* 14c/230 */
359 PRTL_BITMAP TlsExpansionBitmap; /* 150/238 */
360 ULONG TlsExpansionBitmapBits[32]; /* 154/240 */
361 ULONG SessionId; /* 1d4/2c0 */
362 ULARGE_INTEGER AppCompatFlags; /* 1d8/2c8 */
363 ULARGE_INTEGER AppCompatFlagsUser; /* 1e0/2d0 */
364 PVOID ShimData; /* 1e8/2d8 */
365 PVOID AppCompatInfo; /* 1ec/2e0 */
366 UNICODE_STRING CSDVersion; /* 1f0/2e8 */
367 PVOID ActivationContextData; /* 1f8/2f8 */
368 PVOID ProcessAssemblyStorageMap; /* 1fc/300 */
369 PVOID SystemDefaultActivationData; /* 200/308 */
370 PVOID SystemAssemblyStorageMap; /* 204/310 */
371 SIZE_T MinimumStackCommit; /* 208/318 */
372 PVOID *FlsCallback; /* 20c/320 */
373 LIST_ENTRY FlsListHead; /* 210/328 */
374 PRTL_BITMAP FlsBitmap; /* 218/338 */
375 ULONG FlsBitmapBits[4]; /* 21c/340 */
376 ULONG FlsHighIndex; /* 22c/350 */
377 PVOID WerRegistrationData; /* 230/358 */
378 PVOID WerShipAssertPtr; /* 234/360 */
379 PVOID pUnused; /* 238/368 */
380 PVOID pImageHeaderHash; /* 23c/370 */
381 ULONG TracingFlags; /* 240/378 */
382 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 248/380 */
383 ULONG TppWorkerpListLock; /* 250/388 */
384 LIST_ENTRY TppWorkerpList; /* 254/390 */
385 PVOID WaitOnAddressHashTable [0x80]; /* 25c/3a0 */
386 PVOID TelemetryCoverageHeader; /* 45c/7a0 */
387 ULONG CloudFileFlags; /* 460/7a8 */
388 ULONG CloudFileDiagFlags; /* 464/7ac */
389 CHAR PlaceholderCompatibilityMode; /* 468/7b0 */
390 CHAR PlaceholderCompatibilityModeReserved[7]; /* 469/7b1 */
391 PVOID LeapSecondData; /* 470/7b8 */
392 ULONG LeapSecondFlags; /* 474/7c0 */
393 ULONG NtGlobalFlag2; /* 478/7c4 */
394 } PEB, *PPEB;
395
396
397 /***********************************************************************
398 * TEB data structure
399 */
400 typedef struct _TEB
401 { /* win32/win64 */
402 NT_TIB Tib; /* 000/0000 */
403 PVOID EnvironmentPointer; /* 01c/0038 */
404 CLIENT_ID ClientId; /* 020/0040 */
405 PVOID ActiveRpcHandle; /* 028/0050 */
406 PVOID ThreadLocalStoragePointer; /* 02c/0058 */
407 PPEB Peb; /* 030/0060 */
408 ULONG LastErrorValue; /* 034/0068 */
409 ULONG CountOfOwnedCriticalSections; /* 038/006c */
410 PVOID CsrClientThread; /* 03c/0070 */
411 PVOID Win32ThreadInfo; /* 040/0078 */
412 ULONG User32Reserved[26]; /* 044/0080 */
413 ULONG UserReserved[5]; /* 0ac/00e8 */
414 PVOID WOW32Reserved; /* 0c0/0100 */
415 ULONG CurrentLocale; /* 0c4/0108 */
416 ULONG FpSoftwareStatusRegister; /* 0c8/010c */
417 PVOID ReservedForDebuggerInstrumentation[16]; /* 0cc/0110 */
418 #ifdef _WIN64
419 PVOID SystemReserved1[30]; /* /0190 */
420 #else
421 PVOID SystemReserved1[26]; /* 10c/ used for krnl386 private data in Wine */
422 #endif
423 char PlaceholderCompatibilityMode; /* 174/0280 */
424 char PlaceholderReserved[11]; /* 175/0281 */
425 DWORD ProxiedProcessId; /* 180/028c */
426 ACTIVATION_CONTEXT_STACK ActivationContextStack; /* 184/0290 */
427 UCHAR WorkingOnBehalfOfTicket[8]; /* 19c/02b8 */
428 LONG ExceptionCode; /* 1a4/02c0 */
429 ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; /* 1a8/02c8 */
430 ULONG_PTR InstrumentationCallbackSp; /* 1ac/02d0 */
431 ULONG_PTR InstrumentationCallbackPreviousPc; /* 1b0/02d8 */
432 ULONG_PTR InstrumentationCallbackPreviousSp; /* 1b4/02e0 */
433 #ifdef _WIN64
434 ULONG TxFsContext; /* /02e8 */
435 BOOLEAN InstrumentationCallbackDisabled; /* /02ec */
436 #else
437 BOOLEAN InstrumentationCallbackDisabled; /* 1b8/ */
438 BYTE SpareBytes1[23]; /* 1b9/ */
439 ULONG TxFsContext; /* 1d0/ */
440 #endif
441 GDI_TEB_BATCH GdiTebBatch; /* 1d4/02f0 used for ntdll private data in Wine */
442 CLIENT_ID RealClientId; /* 6b4/07d8 */
443 HANDLE GdiCachedProcessHandle; /* 6bc/07e8 */
444 ULONG GdiClientPID; /* 6c0/07f0 */
445 ULONG GdiClientTID; /* 6c4/07f4 */
446 PVOID GdiThreadLocaleInfo; /* 6c8/07f8 */
447 ULONG_PTR Win32ClientInfo[62]; /* 6cc/0800 used for user32 private data in Wine */
448 PVOID glDispatchTable[233]; /* 7c4/09f0 */
449 PVOID glReserved1[29]; /* b68/1138 */
450 PVOID glReserved2; /* bdc/1220 */
451 PVOID glSectionInfo; /* be0/1228 */
452 PVOID glSection; /* be4/1230 */
453 PVOID glTable; /* be8/1238 */
454 PVOID glCurrentRC; /* bec/1240 */
455 PVOID glContext; /* bf0/1248 */
456 ULONG LastStatusValue; /* bf4/1250 */
457 UNICODE_STRING StaticUnicodeString; /* bf8/1258 */
458 WCHAR StaticUnicodeBuffer[261]; /* c00/1268 */
459 PVOID DeallocationStack; /* e0c/1478 */
460 PVOID TlsSlots[64]; /* e10/1480 */
461 LIST_ENTRY TlsLinks; /* f10/1680 */
462 PVOID Vdm; /* f18/1690 */
463 PVOID ReservedForNtRpc; /* f1c/1698 */
464 PVOID DbgSsReserved[2]; /* f20/16a0 */
465 ULONG HardErrorDisabled; /* f28/16b0 */
466 PVOID Instrumentation[16]; /* f2c/16b8 */
467 PVOID WinSockData; /* f6c/1738 */
468 ULONG GdiBatchCount; /* f70/1740 */
469 ULONG Spare2; /* f74/1744 */
470 ULONG GuaranteedStackBytes; /* f78/1748 */
471 PVOID ReservedForPerf; /* f7c/1750 */
472 PVOID ReservedForOle; /* f80/1758 */
473 ULONG WaitingOnLoaderLock; /* f84/1760 */
474 PVOID Reserved5[3]; /* f88/1768 */
475 PVOID *TlsExpansionSlots; /* f94/1780 */
476 #ifdef _WIN64
477 PVOID DeallocationBStore; /* /1788 */
478 PVOID BStoreLimit; /* /1790 */
479 #endif
480 ULONG ImpersonationLocale; /* f98/1798 */
481 ULONG IsImpersonating; /* f9c/179c */
482 PVOID NlsCache; /* fa0/17a0 */
483 PVOID ShimData; /* fa4/17a8 */
484 ULONG HeapVirtualAffinity; /* fa8/17b0 */
485 PVOID CurrentTransactionHandle; /* fac/17b8 */
486 TEB_ACTIVE_FRAME *ActiveFrame; /* fb0/17c0 */
487 TEB_FLS_DATA *FlsSlots; /* fb4/17c8 */
488 PVOID PreferredLanguages; /* fb8/17d0 */
489 PVOID UserPrefLanguages; /* fbc/17d8 */
490 PVOID MergedPrefLanguages; /* fc0/17e0 */
491 ULONG MuiImpersonation; /* fc4/17e8 */
492 USHORT CrossTebFlags; /* fc8/17ec */
493 USHORT SameTebFlags; /* fca/17ee */
494 PVOID TxnScopeEnterCallback; /* fcc/17f0 */
495 PVOID TxnScopeExitCallback; /* fd0/17f8 */
496 PVOID TxnScopeContext; /* fd4/1800 */
497 ULONG LockCount; /* fd8/1808 */
498 LONG WowTebOffset; /* fdc/180c */
499 PVOID ResourceRetValue; /* fe0/1810 */
500 PVOID ReservedForWdf; /* fe4/1818 */
501 ULONGLONG ReservedForCrt; /* fe8/1820 */
502 GUID EffectiveContainerId; /* ff0/1828 */
503 } TEB, *PTEB;
504
505
506 /***********************************************************************
507 * The 32-bit/64-bit version of the PEB and TEB for WoW64
508 */
509 typedef struct _NT_TIB32
510 {
511 ULONG ExceptionList; /* 0000 */
512 ULONG StackBase; /* 0004 */
513 ULONG StackLimit; /* 0008 */
514 ULONG SubSystemTib; /* 000c */
515 ULONG FiberData; /* 0010 */
516 ULONG ArbitraryUserPointer; /* 0014 */
517 ULONG Self; /* 0018 */
518 } NT_TIB32;
519
520 typedef struct _NT_TIB64
521 {
522 ULONG64 ExceptionList; /* 0000 */
523 ULONG64 StackBase; /* 0008 */
524 ULONG64 StackLimit; /* 0010 */
525 ULONG64 SubSystemTib; /* 0018 */
526 ULONG64 FiberData; /* 0020 */
527 ULONG64 ArbitraryUserPointer; /* 0028 */
528 ULONG64 Self; /* 0030 */
529 } NT_TIB64;
530
531 typedef struct _CLIENT_ID32
532 {
533 ULONG UniqueProcess;
534 ULONG UniqueThread;
535 } CLIENT_ID32;
536
537 typedef struct _CLIENT_ID64
538 {
539 ULONG64 UniqueProcess;
540 ULONG64 UniqueThread;
541 } CLIENT_ID64;
542
543 typedef struct _LIST_ENTRY32
544 {
545 ULONG Flink;
546 ULONG Blink;
547 } LIST_ENTRY32;
548
549 typedef struct _LIST_ENTRY64
550 {
551 ULONG64 Flink;
552 ULONG64 Blink;
553 } LIST_ENTRY64;
554
555 typedef struct _UNICODE_STRING32
556 {
557 USHORT Length;
558 USHORT MaximumLength;
559 ULONG Buffer;
560 } UNICODE_STRING32;
561
562 typedef struct _UNICODE_STRING64
563 {
564 USHORT Length;
565 USHORT MaximumLength;
566 ULONG64 Buffer;
567 } UNICODE_STRING64;
568
569 typedef struct _ACTIVATION_CONTEXT_STACK32
570 {
571 ULONG ActiveFrame;
572 LIST_ENTRY32 FrameListCache;
573 ULONG Flags;
574 ULONG NextCookieSequenceNumber;
575 ULONG32 StackId;
576 } ACTIVATION_CONTEXT_STACK32;
577
578 typedef struct _ACTIVATION_CONTEXT_STACK64
579 {
580 ULONG64 ActiveFrame;
581 LIST_ENTRY64 FrameListCache;
582 ULONG Flags;
583 ULONG NextCookieSequenceNumber;
584 ULONG64 StackId;
585 } ACTIVATION_CONTEXT_STACK64;
586
587 typedef struct _CURDIR32
588 {
589 UNICODE_STRING32 DosPath;
590 ULONG Handle;
591 } CURDIR32;
592
593 typedef struct _CURDIR64
594 {
595 UNICODE_STRING64 DosPath;
596 ULONG64 Handle;
597 } CURDIR64;
598
599 typedef struct RTL_DRIVE_LETTER_CURDIR32
600 {
601 USHORT Flags;
602 USHORT Length;
603 ULONG TimeStamp;
604 UNICODE_STRING32 DosPath;
605 } RTL_DRIVE_LETTER_CURDIR32;
606
607 typedef struct RTL_DRIVE_LETTER_CURDIR64
608 {
609 USHORT Flags;
610 USHORT Length;
611 ULONG TimeStamp;
612 UNICODE_STRING64 DosPath;
613 } RTL_DRIVE_LETTER_CURDIR64;
614
615 typedef struct _RTL_USER_PROCESS_PARAMETERS32
616 {
617 ULONG AllocationSize;
618 ULONG Size;
619 ULONG Flags;
620 ULONG DebugFlags;
621 ULONG ConsoleHandle;
622 ULONG ConsoleFlags;
623 ULONG hStdInput;
624 ULONG hStdOutput;
625 ULONG hStdError;
626 CURDIR32 CurrentDirectory;
627 UNICODE_STRING32 DllPath;
628 UNICODE_STRING32 ImagePathName;
629 UNICODE_STRING32 CommandLine;
630 ULONG Environment;
631 ULONG dwX;
632 ULONG dwY;
633 ULONG dwXSize;
634 ULONG dwYSize;
635 ULONG dwXCountChars;
636 ULONG dwYCountChars;
637 ULONG dwFillAttribute;
638 ULONG dwFlags;
639 ULONG wShowWindow;
640 UNICODE_STRING32 WindowTitle;
641 UNICODE_STRING32 Desktop;
642 UNICODE_STRING32 ShellInfo;
643 UNICODE_STRING32 RuntimeInfo;
644 RTL_DRIVE_LETTER_CURDIR32 DLCurrentDirectory[0x20];
645 ULONG EnvironmentSize;
646 ULONG EnvironmentVersion;
647 ULONG PackageDependencyData;
648 ULONG ProcessGroupId;
649 ULONG LoaderThreads;
650 } RTL_USER_PROCESS_PARAMETERS32;
651
652 typedef struct _RTL_USER_PROCESS_PARAMETERS64
653 {
654 ULONG AllocationSize;
655 ULONG Size;
656 ULONG Flags;
657 ULONG DebugFlags;
658 ULONG64 ConsoleHandle;
659 ULONG ConsoleFlags;
660 ULONG64 hStdInput;
661 ULONG64 hStdOutput;
662 ULONG64 hStdError;
663 CURDIR64 CurrentDirectory;
664 UNICODE_STRING64 DllPath;
665 UNICODE_STRING64 ImagePathName;
666 UNICODE_STRING64 CommandLine;
667 ULONG64 Environment;
668 ULONG dwX;
669 ULONG dwY;
670 ULONG dwXSize;
671 ULONG dwYSize;
672 ULONG dwXCountChars;
673 ULONG dwYCountChars;
674 ULONG dwFillAttribute;
675 ULONG dwFlags;
676 ULONG wShowWindow;
677 UNICODE_STRING64 WindowTitle;
678 UNICODE_STRING64 Desktop;
679 UNICODE_STRING64 ShellInfo;
680 UNICODE_STRING64 RuntimeInfo;
681 RTL_DRIVE_LETTER_CURDIR64 DLCurrentDirectory[0x20];
682 ULONG64 EnvironmentSize;
683 ULONG64 EnvironmentVersion;
684 ULONG64 PackageDependencyData;
685 ULONG ProcessGroupId;
686 ULONG LoaderThreads;
687 } RTL_USER_PROCESS_PARAMETERS64;
688
689 typedef struct _PEB_LDR_DATA32
690 {
691 ULONG Length;
692 BOOLEAN Initialized;
693 ULONG SsHandle;
694 LIST_ENTRY32 InLoadOrderModuleList;
695 LIST_ENTRY32 InMemoryOrderModuleList;
696 LIST_ENTRY32 InInitializationOrderModuleList;
697 ULONG EntryInProgress;
698 BOOLEAN ShutdownInProgress;
699 ULONG ShutdownThreadId;
700 } PEB_LDR_DATA32, *PPEB_LDR_DATA32;
701
702 typedef struct _PEB_LDR_DATA64
703 {
704 ULONG Length;
705 BOOLEAN Initialized;
706 ULONG64 SsHandle;
707 LIST_ENTRY64 InLoadOrderModuleList;
708 LIST_ENTRY64 InMemoryOrderModuleList;
709 LIST_ENTRY64 InInitializationOrderModuleList;
710 ULONG64 EntryInProgress;
711 BOOLEAN ShutdownInProgress;
712 ULONG64 ShutdownThreadId;
713 } PEB_LDR_DATA64, *PPEB_LDR_DATA64;
714
715 typedef struct _PEB32
716 {
717 BOOLEAN InheritedAddressSpace; /* 0000 */
718 BOOLEAN ReadImageFileExecOptions; /* 0001 */
719 BOOLEAN BeingDebugged; /* 0002 */
720 BOOLEAN SpareBool; /* 0003 */
721 ULONG Mutant; /* 0004 */
722 ULONG ImageBaseAddress; /* 0008 */
723 ULONG LdrData; /* 000c */
724 ULONG ProcessParameters; /* 0010 */
725 ULONG SubSystemData; /* 0014 */
726 ULONG ProcessHeap; /* 0018 */
727 ULONG FastPebLock; /* 001c */
728 ULONG FastPebLockRoutine; /* 0020 */
729 ULONG FastPebUnlockRoutine; /* 0024 */
730 ULONG EnvironmentUpdateCount; /* 0028 */
731 ULONG KernelCallbackTable; /* 002c */
732 ULONG Reserved; /* 0030 */
733 ULONG AtlThunkSListPtr32; /* 0034 */
734 ULONG FreeList; /* 0038 */
735 ULONG TlsExpansionCounter; /* 003c */
736 ULONG TlsBitmap; /* 0040 */
737 ULONG TlsBitmapBits[2]; /* 0044 */
738 ULONG ReadOnlySharedMemoryBase; /* 004c */
739 ULONG ReadOnlySharedMemoryHeap; /* 0050 */
740 ULONG ReadOnlyStaticServerData; /* 0054 */
741 ULONG AnsiCodePageData; /* 0058 */
742 ULONG OemCodePageData; /* 005c */
743 ULONG UnicodeCaseTableData; /* 0060 */
744 ULONG NumberOfProcessors; /* 0064 */
745 ULONG NtGlobalFlag; /* 0068 */
746 LARGE_INTEGER CriticalSectionTimeout; /* 0070 */
747 ULONG HeapSegmentReserve; /* 0078 */
748 ULONG HeapSegmentCommit; /* 007c */
749 ULONG HeapDeCommitTotalFreeThreshold; /* 0080 */
750 ULONG HeapDeCommitFreeBlockThreshold; /* 0084 */
751 ULONG NumberOfHeaps; /* 0088 */
752 ULONG MaximumNumberOfHeaps; /* 008c */
753 ULONG ProcessHeaps; /* 0090 */
754 ULONG GdiSharedHandleTable; /* 0094 */
755 ULONG ProcessStarterHelper; /* 0098 */
756 ULONG GdiDCAttributeList; /* 009c */
757 ULONG LoaderLock; /* 00a0 */
758 ULONG OSMajorVersion; /* 00a4 */
759 ULONG OSMinorVersion; /* 00a8 */
760 ULONG OSBuildNumber; /* 00ac */
761 ULONG OSPlatformId; /* 00b0 */
762 ULONG ImageSubSystem; /* 00b4 */
763 ULONG ImageSubSystemMajorVersion; /* 00b8 */
764 ULONG ImageSubSystemMinorVersion; /* 00bc */
765 ULONG ImageProcessAffinityMask; /* 00c0 */
766 ULONG GdiHandleBuffer[28]; /* 00c4 */
767 ULONG unknown[6]; /* 0134 */
768 ULONG PostProcessInitRoutine; /* 014c */
769 ULONG TlsExpansionBitmap; /* 0150 */
770 ULONG TlsExpansionBitmapBits[32]; /* 0154 */
771 ULONG SessionId; /* 01d4 */
772 ULARGE_INTEGER AppCompatFlags; /* 01d8 */
773 ULARGE_INTEGER AppCompatFlagsUser; /* 01e0 */
774 ULONG ShimData; /* 01e8 */
775 ULONG AppCompatInfo; /* 01ec */
776 UNICODE_STRING CSDVersion; /* 01f0 */
777 ULONG ActivationContextData; /* 01f8 */
778 ULONG ProcessAssemblyStorageMap; /* 01fc */
779 ULONG SystemDefaultActivationData; /* 0200 */
780 ULONG SystemAssemblyStorageMap; /* 0204 */
781 ULONG MinimumStackCommit; /* 0208 */
782 ULONG FlsCallback; /* 020c */
783 LIST_ENTRY FlsListHead; /* 0210 */
784 ULONG FlsBitmap; /* 0218 */
785 ULONG FlsBitmapBits[4]; /* 021c */
786 ULONG FlsHighIndex; /* 022c */
787 ULONG WerRegistrationData; /* 0230 */
788 ULONG WerShipAssertPtr; /* 0234 */
789 ULONG pUnused; /* 0238 */
790 ULONG pImageHeaderHash; /* 023c */
791 ULONG TracingFlags; /* 0240 */
792 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0248 */
793 ULONG TppWorkerpListLock; /* 0250 */
794 LIST_ENTRY TppWorkerpList; /* 0254 */
795 ULONG WaitOnAddressHashTable [0x80]; /* 025c */
796 ULONG TelemetryCoverageHeader; /* 045c */
797 ULONG CloudFileFlags; /* 0460 */
798 ULONG CloudFileDiagFlags; /* 0464 */
799 CHAR PlaceholderCompatibilityMode; /* 0468 */
800 CHAR PlaceholderCompatibilityModeReserved[7]; /* 0469 */
801 ULONG LeapSecondData; /* 0470 */
802 ULONG LeapSecondFlags; /* 0474 */
803 ULONG NtGlobalFlag2; /* 0478 */
804 } PEB32;
805
806 typedef struct _PEB64
807 {
808 BOOLEAN InheritedAddressSpace; /* 0000 */
809 BOOLEAN ReadImageFileExecOptions; /* 0001 */
810 BOOLEAN BeingDebugged; /* 0002 */
811 BOOLEAN SpareBool; /* 0003 */
812 ULONG64 Mutant; /* 0008 */
813 ULONG64 ImageBaseAddress; /* 0010 */
814 ULONG64 LdrData; /* 0018 */
815 ULONG64 ProcessParameters; /* 0020 */
816 ULONG64 SubSystemData; /* 0028 */
817 ULONG64 ProcessHeap; /* 0030 */
818 ULONG64 FastPebLock; /* 0038 */
819 ULONG64 FastPebLockRoutine; /* 0040 */
820 ULONG64 FastPebUnlockRoutine; /* 0048 */
821 ULONG EnvironmentUpdateCount; /* 0050 */
822 ULONG64 KernelCallbackTable; /* 0058 */
823 ULONG Reserved; /* 0060 */
824 ULONG AtlThunkSListPtr32; /* 0064 */
825 ULONG64 FreeList; /* 0068 */
826 ULONG TlsExpansionCounter; /* 0070 */
827 ULONG64 TlsBitmap; /* 0078 */
828 ULONG TlsBitmapBits[2]; /* 0080 */
829 ULONG64 ReadOnlySharedMemoryBase; /* 0088 */
830 ULONG64 ReadOnlySharedMemoryHeap; /* 0090 */
831 ULONG64 ReadOnlyStaticServerData; /* 0098 */
832 ULONG64 AnsiCodePageData; /* 00a0 */
833 ULONG64 OemCodePageData; /* 00a8 */
834 ULONG64 UnicodeCaseTableData; /* 00b0 */
835 ULONG NumberOfProcessors; /* 00b8 */
836 ULONG NtGlobalFlag; /* 00bc */
837 LARGE_INTEGER CriticalSectionTimeout; /* 00c0 */
838 ULONG64 HeapSegmentReserve; /* 00c8 */
839 ULONG64 HeapSegmentCommit; /* 00d0 */
840 ULONG64 HeapDeCommitTotalFreeThreshold; /* 00d8 */
841 ULONG64 HeapDeCommitFreeBlockThreshold; /* 00e0 */
842 ULONG NumberOfHeaps; /* 00e8 */
843 ULONG MaximumNumberOfHeaps; /* 00ec */
844 ULONG64 ProcessHeaps; /* 00f0 */
845 ULONG64 GdiSharedHandleTable; /* 00f8 */
846 ULONG64 ProcessStarterHelper; /* 0100 */
847 ULONG64 GdiDCAttributeList; /* 0108 */
848 ULONG64 LoaderLock; /* 0110 */
849 ULONG OSMajorVersion; /* 0118 */
850 ULONG OSMinorVersion; /* 011c */
851 ULONG OSBuildNumber; /* 0120 */
852 ULONG OSPlatformId; /* 0124 */
853 ULONG ImageSubSystem; /* 0128 */
854 ULONG ImageSubSystemMajorVersion; /* 012c */
855 ULONG ImageSubSystemMinorVersion; /* 0130 */
856 ULONG ImageProcessAffinityMask; /* 0134 */
857 ULONG64 GdiHandleBuffer[28]; /* 0138 */
858 ULONG unknown[6]; /* 0218 */
859 ULONG64 PostProcessInitRoutine; /* 0230 */
860 ULONG64 TlsExpansionBitmap; /* 0238 */
861 ULONG TlsExpansionBitmapBits[32]; /* 0240 */
862 ULONG SessionId; /* 02c0 */
863 ULARGE_INTEGER AppCompatFlags; /* 02c8 */
864 ULARGE_INTEGER AppCompatFlagsUser; /* 02d0 */
865 ULONG64 ShimData; /* 02d8 */
866 ULONG64 AppCompatInfo; /* 02e0 */
867 UNICODE_STRING64 CSDVersion; /* 02e8 */
868 ULONG64 ActivationContextData; /* 02f8 */
869 ULONG64 ProcessAssemblyStorageMap; /* 0300 */
870 ULONG64 SystemDefaultActivationData; /* 0308 */
871 ULONG64 SystemAssemblyStorageMap; /* 0310 */
872 ULONG64 MinimumStackCommit; /* 0318 */
873 ULONG64 FlsCallback; /* 0320 */
874 LIST_ENTRY64 FlsListHead; /* 0328 */
875 ULONG64 FlsBitmap; /* 0338 */
876 ULONG FlsBitmapBits[4]; /* 0340 */
877 ULONG FlsHighIndex; /* 0350 */
878 ULONG64 WerRegistrationData; /* 0358 */
879 ULONG64 WerShipAssertPtr; /* 0360 */
880 ULONG64 pUnused; /* 0368 */
881 ULONG64 pImageHeaderHash; /* 0370 */
882 ULONG TracingFlags; /* 0378 */
883 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0380 */
884 ULONG TppWorkerpListLock; /* 0388 */
885 LIST_ENTRY64 TppWorkerpList; /* 0390 */
886 ULONG64 WaitOnAddressHashTable [0x80]; /* 03a0 */
887 ULONG64 TelemetryCoverageHeader; /* 07a0 */
888 ULONG CloudFileFlags; /* 07a8 */
889 ULONG CloudFileDiagFlags; /* 07ac */
890 CHAR PlaceholderCompatibilityMode; /* 07b0 */
891 CHAR PlaceholderCompatibilityModeReserved[7]; /* 07b1 */
892 ULONG64 LeapSecondData; /* 07b8 */
893 ULONG LeapSecondFlags; /* 07c0 */
894 ULONG NtGlobalFlag2; /* 07c4 */
895 } PEB64;
896
897 typedef struct _TEB32
898 {
899 NT_TIB32 Tib; /* 0000 */
900 ULONG EnvironmentPointer; /* 001c */
901 CLIENT_ID32 ClientId; /* 0020 */
902 ULONG ActiveRpcHandle; /* 0028 */
903 ULONG ThreadLocalStoragePointer; /* 002c */
904 ULONG Peb; /* 0030 */
905 ULONG LastErrorValue; /* 0034 */
906 ULONG CountOfOwnedCriticalSections; /* 0038 */
907 ULONG CsrClientThread; /* 003c */
908 ULONG Win32ThreadInfo; /* 0040 */
909 ULONG User32Reserved[26]; /* 0044 */
910 ULONG UserReserved[5]; /* 00ac */
911 ULONG WOW32Reserved; /* 00c0 */
912 ULONG CurrentLocale; /* 00c4 */
913 ULONG FpSoftwareStatusRegister; /* 00c8 */
914 ULONG ReservedForDebuggerInstrumentation[16]; /* 00cc */
915 ULONG SystemReserved1[26]; /* 010c */
916 char PlaceholderCompatibilityMode; /* 0174 */
917 char PlaceholderReserved[11]; /* 0175 */
918 DWORD ProxiedProcessId; /* 0180 */
919 ACTIVATION_CONTEXT_STACK32 ActivationContextStack; /* 0184 */
920 UCHAR WorkingOnBehalfOfTicket[8]; /* 019c */
921 LONG ExceptionCode; /* 01a4 */
922 ULONG ActivationContextStackPointer; /* 01a8 */
923 ULONG InstrumentationCallbackSp; /* 01ac */
924 ULONG InstrumentationCallbackPreviousPc; /* 01b0 */
925 ULONG InstrumentationCallbackPreviousSp; /* 01b4 */
926 BOOLEAN InstrumentationCallbackDisabled; /* 01b8 */
927 BYTE SpareBytes1[23]; /* 01b9 */
928 ULONG TxFsContext; /* 01d0 */
929 ULONG GdiTebBatch[0x138]; /* 01d4 */
930 CLIENT_ID32 RealClientId; /* 06b4 */
931 ULONG GdiCachedProcessHandle; /* 06bc */
932 ULONG GdiClientPID; /* 06c0 */
933 ULONG GdiClientTID; /* 06c4 */
934 ULONG GdiThreadLocaleInfo; /* 06c8 */
935 ULONG Win32ClientInfo[62]; /* 06cc */
936 ULONG glDispatchTable[233]; /* 07c4 */
937 ULONG glReserved1[29]; /* 0b68 */
938 ULONG glReserved2; /* 0bdc */
939 ULONG glSectionInfo; /* 0be0 */
940 ULONG glSection; /* 0be4 */
941 ULONG glTable; /* 0be8 */
942 ULONG glCurrentRC; /* 0bec */
943 ULONG glContext; /* 0bf0 */
944 ULONG LastStatusValue; /* 0bf4 */
945 UNICODE_STRING32 StaticUnicodeString; /* 0bf8 */
946 WCHAR StaticUnicodeBuffer[261]; /* 0c00 */
947 ULONG DeallocationStack; /* 0e0c */
948 ULONG TlsSlots[64]; /* 0e10 */
949 LIST_ENTRY32 TlsLinks; /* 0f10 */
950 ULONG Vdm; /* 0f18 */
951 ULONG ReservedForNtRpc; /* 0f1c */
952 ULONG DbgSsReserved[2]; /* 0f20 */
953 ULONG HardErrorDisabled; /* 0f28 */
954 ULONG Instrumentation[16]; /* 0f2c */
955 ULONG WinSockData; /* 0f6c */
956 ULONG GdiBatchCount; /* 0f70 */
957 ULONG Spare2; /* 0f74 */
958 ULONG GuaranteedStackBytes; /* 0f78 */
959 ULONG ReservedForPerf; /* 0f7c */
960 ULONG ReservedForOle; /* 0f80 */
961 ULONG WaitingOnLoaderLock; /* 0f84 */
962 ULONG Reserved5[3]; /* 0f88 */
963 ULONG TlsExpansionSlots; /* 0f94 */
964 ULONG ImpersonationLocale; /* 0f98 */
965 ULONG IsImpersonating; /* 0f9c */
966 ULONG NlsCache; /* 0fa0 */
967 ULONG ShimData; /* 0fa4 */
968 ULONG HeapVirtualAffinity; /* 0fa8 */
969 ULONG CurrentTransactionHandle; /* 0fac */
970 ULONG ActiveFrame; /* 0fb0 */
971 ULONG FlsSlots; /* 0fb4 */
972 ULONG PreferredLanguages; /* 0fb8 */
973 ULONG UserPrefLanguages; /* 0fbc */
974 ULONG MergedPrefLanguages; /* 0fc0 */
975 ULONG MuiImpersonation; /* 0fc4 */
976 USHORT CrossTebFlags; /* 0fc8 */
977 USHORT SameTebFlags; /* 0fca */
978 ULONG TxnScopeEnterCallback; /* 0fcc */
979 ULONG TxnScopeExitCallback; /* 0fd0 */
980 ULONG TxnScopeContext; /* 0fd4 */
981 ULONG LockCount; /* 0fd8 */
982 LONG WowTebOffset; /* 0fdc */
983 ULONG ResourceRetValue; /* 0fe0 */
984 ULONG ReservedForWdf; /* 0fe4 */
985 ULONGLONG ReservedForCrt; /* 0fe8 */
986 GUID EffectiveContainerId; /* 0ff0 */
987 } TEB32;
988
989 typedef struct _TEB64
990 {
991 NT_TIB64 Tib; /* 0000 */
992 ULONG64 EnvironmentPointer; /* 0038 */
993 CLIENT_ID64 ClientId; /* 0040 */
994 ULONG64 ActiveRpcHandle; /* 0050 */
995 ULONG64 ThreadLocalStoragePointer; /* 0058 */
996 ULONG64 Peb; /* 0060 */
997 ULONG LastErrorValue; /* 0068 */
998 ULONG CountOfOwnedCriticalSections; /* 006c */
999 ULONG64 CsrClientThread; /* 0070 */
1000 ULONG64 Win32ThreadInfo; /* 0078 */
1001 ULONG User32Reserved[26]; /* 0080 */
1002 ULONG UserReserved[5]; /* 00e8 */
1003 ULONG64 WOW32Reserved; /* 0100 */
1004 ULONG CurrentLocale; /* 0108 */
1005 ULONG FpSoftwareStatusRegister; /* 010c */
1006 ULONG64 ReservedForDebuggerInstrumentation[16]; /* 0110 */
1007 ULONG64 SystemReserved1[30]; /* 0190 */
1008 char PlaceholderCompatibilityMode; /* 0280 */
1009 char PlaceholderReserved[11]; /* 0281 */
1010 DWORD ProxiedProcessId; /* 028c */
1011 ACTIVATION_CONTEXT_STACK64 ActivationContextStack; /* 0290 */
1012 UCHAR WorkingOnBehalfOfTicket[8]; /* 02b8 */
1013 LONG ExceptionCode; /* 02c0 */
1014 ULONG64 ActivationContextStackPointer; /* 02c8 */
1015 ULONG64 InstrumentationCallbackSp; /* 02d0 */
1016 ULONG64 InstrumentationCallbackPreviousPc; /* 02d8 */
1017 ULONG64 InstrumentationCallbackPreviousSp; /* 02e0 */
1018 ULONG TxFsContext; /* 02e8 */
1019 BOOLEAN InstrumentationCallbackDisabled; /* 02ec */
1020 ULONG64 GdiTebBatch[0x9d]; /* 02f0 */
1021 CLIENT_ID64 RealClientId; /* 07d8 */
1022 ULONG64 GdiCachedProcessHandle; /* 07e8 */
1023 ULONG GdiClientPID; /* 07f0 */
1024 ULONG GdiClientTID; /* 07f4 */
1025 ULONG64 GdiThreadLocaleInfo; /* 07f8 */
1026 ULONG64 Win32ClientInfo[62]; /* 0800 */
1027 ULONG64 glDispatchTable[233]; /* 09f0 */
1028 ULONG64 glReserved1[29]; /* 1138 */
1029 ULONG64 glReserved2; /* 1220 */
1030 ULONG64 glSectionInfo; /* 1228 */
1031 ULONG64 glSection; /* 1230 */
1032 ULONG64 glTable; /* 1238 */
1033 ULONG64 glCurrentRC; /* 1240 */
1034 ULONG64 glContext; /* 1248 */
1035 ULONG LastStatusValue; /* 1250 */
1036 UNICODE_STRING64 StaticUnicodeString; /* 1258 */
1037 WCHAR StaticUnicodeBuffer[261]; /* 1268 */
1038 ULONG64 DeallocationStack; /* 1478 */
1039 ULONG64 TlsSlots[64]; /* 1480 */
1040 LIST_ENTRY64 TlsLinks; /* 1680 */
1041 ULONG64 Vdm; /* 1690 */
1042 ULONG64 ReservedForNtRpc; /* 1698 */
1043 ULONG64 DbgSsReserved[2]; /* 16a0 */
1044 ULONG HardErrorDisabled; /* 16b0 */
1045 ULONG64 Instrumentation[16]; /* 16b8 */
1046 ULONG64 WinSockData; /* 1738 */
1047 ULONG GdiBatchCount; /* 1740 */
1048 ULONG Spare2; /* 1744 */
1049 ULONG GuaranteedStackBytes; /* 1748 */
1050 ULONG64 ReservedForPerf; /* 1750 */
1051 ULONG64 ReservedForOle; /* 1758 */
1052 ULONG WaitingOnLoaderLock; /* 1760 */
1053 ULONG64 Reserved5[3]; /* 1768 */
1054 ULONG64 TlsExpansionSlots; /* 1780 */
1055 ULONG64 DeallocationBStore; /* 1788 */
1056 ULONG64 BStoreLimit; /* 1790 */
1057 ULONG ImpersonationLocale; /* 1798 */
1058 ULONG IsImpersonating; /* 179c */
1059 ULONG64 NlsCache; /* 17a0 */
1060 ULONG64 ShimData; /* 17a8 */
1061 ULONG HeapVirtualAffinity; /* 17b0 */
1062 ULONG64 CurrentTransactionHandle; /* 17b8 */
1063 ULONG64 ActiveFrame; /* 17c0 */
1064 ULONG64 FlsSlots; /* 17c8 */
1065 ULONG64 PreferredLanguages; /* 17d0 */
1066 ULONG64 UserPrefLanguages; /* 17d8 */
1067 ULONG64 MergedPrefLanguages; /* 17e0 */
1068 ULONG MuiImpersonation; /* 17e8 */
1069 USHORT CrossTebFlags; /* 17ec */
1070 USHORT SameTebFlags; /* 17ee */
1071 ULONG64 TxnScopeEnterCallback; /* 17f0 */
1072 ULONG64 TxnScopeExitCallback; /* 17f8 */
1073 ULONG64 TxnScopeContext; /* 1800 */
1074 ULONG LockCount; /* 1808 */
1075 LONG WowTebOffset; /* 180c */
1076 ULONG64 ResourceRetValue; /* 1810 */
1077 ULONG64 ReservedForWdf; /* 1818 */
1078 ULONGLONG ReservedForCrt; /* 1820 */
1079 GUID EffectiveContainerId; /* 1828 */
1080 } TEB64;
1081
1082 /* reserved TEB64 TLS slots for Wow64 */
1083 #define WOW64_TLS_CPURESERVED 1
1084 #define WOW64_TLS_TEMPLIST 3
1085 #define WOW64_TLS_USERCALLBACKDATA 5
1086 #define WOW64_TLS_FILESYSREDIR 8
1087
1088
1089 /***********************************************************************
1090 * Enums
1091 */
1092
1093 typedef enum _FILE_INFORMATION_CLASS {
1094 FileDirectoryInformation = 1,
1095 FileFullDirectoryInformation,
1096 FileBothDirectoryInformation,
1097 FileBasicInformation,
1098 FileStandardInformation,
1099 FileInternalInformation,
1100 FileEaInformation,
1101 FileAccessInformation,
1102 FileNameInformation,
1103 FileRenameInformation,
1104 FileLinkInformation,
1105 FileNamesInformation,
1106 FileDispositionInformation,
1107 FilePositionInformation,
1108 FileFullEaInformation,
1109 FileModeInformation,
1110 FileAlignmentInformation,
1111 FileAllInformation,
1112 FileAllocationInformation,
1113 FileEndOfFileInformation,
1114 FileAlternateNameInformation,
1115 FileStreamInformation,
1116 FilePipeInformation,
1117 FilePipeLocalInformation,
1118 FilePipeRemoteInformation,
1119 FileMailslotQueryInformation,
1120 FileMailslotSetInformation,
1121 FileCompressionInformation,
1122 FileObjectIdInformation,
1123 FileCompletionInformation,
1124 FileMoveClusterInformation,
1125 FileQuotaInformation,
1126 FileReparsePointInformation,
1127 FileNetworkOpenInformation,
1128 FileAttributeTagInformation,
1129 FileTrackingInformation,
1130 FileIdBothDirectoryInformation,
1131 FileIdFullDirectoryInformation,
1132 FileValidDataLengthInformation,
1133 FileShortNameInformation,
1134 FileIoCompletionNotificationInformation,
1135 FileIoStatusBlockRangeInformation,
1136 FileIoPriorityHintInformation,
1137 FileSfioReserveInformation,
1138 FileSfioVolumeInformation,
1139 FileHardLinkInformation,
1140 FileProcessIdsUsingFileInformation,
1141 FileNormalizedNameInformation,
1142 FileNetworkPhysicalNameInformation,
1143 FileIdGlobalTxDirectoryInformation,
1144 FileIsRemoteDeviceInformation,
1145 FileAttributeCacheInformation,
1146 FileNumaNodeInformation,
1147 FileStandardLinkInformation,
1148 FileRemoteProtocolInformation,
1149 FileRenameInformationBypassAccessCheck,
1150 FileLinkInformationBypassAccessCheck,
1151 FileVolumeNameInformation,
1152 FileIdInformation,
1153 FileIdExtdDirectoryInformation,
1154 FileReplaceCompletionInformation,
1155 FileHardLinkFullIdInformation,
1156 FileIdExtdBothDirectoryInformation,
1157 FileMaximumInformation
1158 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
1159
1160 typedef struct _FILE_DIRECTORY_INFORMATION {
1161 ULONG NextEntryOffset;
1162 ULONG FileIndex;
1163 LARGE_INTEGER CreationTime;
1164 LARGE_INTEGER LastAccessTime;
1165 LARGE_INTEGER LastWriteTime;
1166 LARGE_INTEGER ChangeTime;
1167 LARGE_INTEGER EndOfFile;
1168 LARGE_INTEGER AllocationSize;
1169 ULONG FileAttributes;
1170 ULONG FileNameLength;
1171 WCHAR FileName[ANYSIZE_ARRAY];
1172 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
1173
1174 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
1175 ULONG NextEntryOffset;
1176 ULONG FileIndex;
1177 LARGE_INTEGER CreationTime;
1178 LARGE_INTEGER LastAccessTime;
1179 LARGE_INTEGER LastWriteTime;
1180 LARGE_INTEGER ChangeTime;
1181 LARGE_INTEGER EndOfFile;
1182 LARGE_INTEGER AllocationSize;
1183 ULONG FileAttributes;
1184 ULONG FileNameLength;
1185 ULONG EaSize;
1186 WCHAR FileName[ANYSIZE_ARRAY];
1187 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
1188 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
1189
1190 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
1191 ULONG NextEntryOffset;
1192 ULONG FileIndex;
1193 LARGE_INTEGER CreationTime;
1194 LARGE_INTEGER LastAccessTime;
1195 LARGE_INTEGER LastWriteTime;
1196 LARGE_INTEGER ChangeTime;
1197 LARGE_INTEGER EndOfFile;
1198 LARGE_INTEGER AllocationSize;
1199 ULONG FileAttributes;
1200 ULONG FileNameLength;
1201 ULONG EaSize;
1202 LARGE_INTEGER FileId;
1203 WCHAR FileName[ANYSIZE_ARRAY];
1204 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
1205
1206 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
1207 ULONG NextEntryOffset;
1208 ULONG FileIndex;
1209 LARGE_INTEGER CreationTime;
1210 LARGE_INTEGER LastAccessTime;
1211 LARGE_INTEGER LastWriteTime;
1212 LARGE_INTEGER ChangeTime;
1213 LARGE_INTEGER EndOfFile;
1214 LARGE_INTEGER AllocationSize;
1215 ULONG FileAttributes;
1216 ULONG FileNameLength;
1217 ULONG EaSize;
1218 CHAR ShortNameLength;
1219 WCHAR ShortName[12];
1220 WCHAR FileName[ANYSIZE_ARRAY];
1221 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
1222 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
1223
1224 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
1225 ULONG NextEntryOffset;
1226 ULONG FileIndex;
1227 LARGE_INTEGER CreationTime;
1228 LARGE_INTEGER LastAccessTime;
1229 LARGE_INTEGER LastWriteTime;
1230 LARGE_INTEGER ChangeTime;
1231 LARGE_INTEGER EndOfFile;
1232 LARGE_INTEGER AllocationSize;
1233 ULONG FileAttributes;
1234 ULONG FileNameLength;
1235 ULONG EaSize;
1236 CHAR ShortNameLength;
1237 WCHAR ShortName[12];
1238 LARGE_INTEGER FileId;
1239 WCHAR FileName[ANYSIZE_ARRAY];
1240 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
1241
1242 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
1243 ULONG NextEntryOffset;
1244 ULONG FileIndex;
1245 LARGE_INTEGER CreationTime;
1246 LARGE_INTEGER LastAccessTime;
1247 LARGE_INTEGER LastWriteTime;
1248 LARGE_INTEGER ChangeTime;
1249 LARGE_INTEGER EndOfFile;
1250 LARGE_INTEGER AllocationSize;
1251 ULONG FileAttributes;
1252 ULONG FileNameLength;
1253 LARGE_INTEGER FileId;
1254 GUID LockingTransactionId;
1255 ULONG TxInfoFlags;
1256 WCHAR FileName[ANYSIZE_ARRAY];
1257 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
1258
1259 typedef struct _FILE_BASIC_INFORMATION {
1260 LARGE_INTEGER CreationTime;
1261 LARGE_INTEGER LastAccessTime;
1262 LARGE_INTEGER LastWriteTime;
1263 LARGE_INTEGER ChangeTime;
1264 ULONG FileAttributes;
1265 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
1266
1267 typedef struct _FILE_STANDARD_INFORMATION {
1268 LARGE_INTEGER AllocationSize;
1269 LARGE_INTEGER EndOfFile;
1270 ULONG NumberOfLinks;
1271 BOOLEAN DeletePending;
1272 BOOLEAN Directory;
1273 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
1274
1275 typedef struct _FILE_INTERNAL_INFORMATION {
1276 LARGE_INTEGER IndexNumber;
1277 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
1278
1279 typedef struct _FILE_ID_128 {
1280 UCHAR Identifier[16];
1281 } FILE_ID_128, *PFILE_ID_128;
1282
1283 typedef struct _FILE_ID_INFORMATION {
1284 ULONGLONG VolumeSerialNumber;
1285 FILE_ID_128 FileId;
1286 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
1287
1288 typedef struct _FILE_EA_INFORMATION {
1289 ULONG EaSize;
1290 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
1291
1292 typedef struct _FILE_ACCESS_INFORMATION {
1293 ACCESS_MASK AccessFlags;
1294 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
1295
1296 typedef struct _FILE_NAME_INFORMATION {
1297 ULONG FileNameLength;
1298 WCHAR FileName[1];
1299 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
1300
1301 typedef struct _FILE_RENAME_INFORMATION {
1302 BOOLEAN ReplaceIfExists;
1303 HANDLE RootDirectory;
1304 ULONG FileNameLength;
1305 WCHAR FileName[1];
1306 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
1307
1308 typedef struct _FILE_LINK_INFORMATION {
1309 BOOLEAN ReplaceIfExists;
1310 HANDLE RootDirectory;
1311 ULONG FileNameLength;
1312 WCHAR FileName[1];
1313 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
1314
1315 typedef struct _FILE_NAMES_INFORMATION {
1316 ULONG NextEntryOffset;
1317 ULONG FileIndex;
1318 ULONG FileNameLength;
1319 WCHAR FileName[1];
1320 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
1321
1322 typedef struct _FILE_DISPOSITION_INFORMATION {
1323 BOOLEAN DoDeleteFile;
1324 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
1325
1326 typedef struct _FILE_POSITION_INFORMATION {
1327 LARGE_INTEGER CurrentByteOffset;
1328 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
1329
1330 typedef struct _FILE_ALIGNMENT_INFORMATION {
1331 ULONG AlignmentRequirement;
1332 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
1333
1334 typedef struct _FILE_ALLOCATION_INFORMATION {
1335 LARGE_INTEGER AllocationSize;
1336 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
1337
1338 typedef struct _FILE_END_OF_FILE_INFORMATION {
1339 LARGE_INTEGER EndOfFile;
1340 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
1341
1342 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
1343 LARGE_INTEGER CreationTime;
1344 LARGE_INTEGER LastAccessTime;
1345 LARGE_INTEGER LastWriteTime;
1346 LARGE_INTEGER ChangeTime;
1347 LARGE_INTEGER AllocationSize;
1348 LARGE_INTEGER EndOfFile;
1349 ULONG FileAttributes;
1350 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
1351
1352 typedef struct _FILE_FULL_EA_INFORMATION {
1353 ULONG NextEntryOffset;
1354 UCHAR Flags;
1355 UCHAR EaNameLength;
1356 USHORT EaValueLength;
1357 CHAR EaName[1];
1358 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
1359
1360 typedef struct _FILE_MODE_INFORMATION {
1361 ULONG Mode;
1362 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
1363
1364 typedef struct _FILE_STREAM_INFORMATION
1365 {
1366 ULONG NextEntryOffset;
1367 ULONG StreamNameLength;
1368 LARGE_INTEGER StreamSize;
1369 LARGE_INTEGER StreamAllocationSize;
1370 WCHAR StreamName[1];
1371 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
1372
1373 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
1374 {
1375 ULONG FileAttributes;
1376 ULONG ReparseTag;
1377 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
1378
1379 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
1380 ULONG MaximumMessageSize;
1381 ULONG MailslotQuota;
1382 ULONG NextMessageSize;
1383 ULONG MessagesAvailable;
1384 LARGE_INTEGER ReadTimeout;
1385 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
1386
1387 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
1388 LARGE_INTEGER ReadTimeout;
1389 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
1390
1391 typedef struct _FILE_PIPE_INFORMATION {
1392 ULONG ReadMode;
1393 ULONG CompletionMode;
1394 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
1395
1396 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
1397 ULONG NamedPipeType;
1398 ULONG NamedPipeConfiguration;
1399 ULONG MaximumInstances;
1400 ULONG CurrentInstances;
1401 ULONG InboundQuota;
1402 ULONG ReadDataAvailable;
1403 ULONG OutboundQuota;
1404 ULONG WriteQuotaAvailable;
1405 ULONG NamedPipeState;
1406 ULONG NamedPipeEnd;
1407 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
1408
1409 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1410 #define FILE_PIPE_LISTENING_STATE 0x00000002
1411 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1412 #define FILE_PIPE_CLOSING_STATE 0x00000004
1413
1414 typedef struct _FILE_OBJECTID_BUFFER
1415 {
1416 BYTE ObjectId[16];
1417 union
1418 {
1419 struct
1420 {
1421 BYTE BirthVolumeId[16];
1422 BYTE BirthObjectId[16];
1423 BYTE DomainId[16];
1424 } DUMMYSTRUCTNAME;
1425 BYTE ExtendedInfo[48];
1426 } DUMMYUNIONNAME;
1427 } FILE_OBJECTID_BUFFER, *PFILE_OBJECTID_BUFFER;
1428
1429 typedef struct _FILE_OBJECTID_INFORMATION {
1430 LONGLONG FileReference;
1431 UCHAR ObjectId[16];
1432 union {
1433 struct {
1434 UCHAR BirthVolumeId[16];
1435 UCHAR BirthObjectId[16];
1436 UCHAR DomainId[16];
1437 } DUMMYSTRUCTNAME;
1438 UCHAR ExtendedInfo[48];
1439 } DUMMYUNIONNAME;
1440 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
1441
1442 typedef struct _FILE_QUOTA_INFORMATION {
1443 ULONG NextEntryOffset;
1444 ULONG SidLength;
1445 LARGE_INTEGER ChangeTime;
1446 LARGE_INTEGER QuotaUsed;
1447 LARGE_INTEGER QuotaThreshold;
1448 LARGE_INTEGER QuotaLimit;
1449 SID Sid;
1450 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
1451
1452 typedef struct _FILE_REPARSE_POINT_INFORMATION {
1453 LONGLONG FileReference;
1454 ULONG Tag;
1455 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
1456
1457 typedef struct _FILE_ALL_INFORMATION {
1458 FILE_BASIC_INFORMATION BasicInformation;
1459 FILE_STANDARD_INFORMATION StandardInformation;
1460 FILE_INTERNAL_INFORMATION InternalInformation;
1461 FILE_EA_INFORMATION EaInformation;
1462 FILE_ACCESS_INFORMATION AccessInformation;
1463 FILE_POSITION_INFORMATION PositionInformation;
1464 FILE_MODE_INFORMATION ModeInformation;
1465 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
1466 FILE_NAME_INFORMATION NameInformation;
1467 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
1468
1469 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
1470 ULONG Flags;
1471 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
1472
1473 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1474 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1475 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1476
1477 typedef struct _PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
1478 {
1479 ULONG Version;
1480 ULONG Reserved;
1481 VOID *Callback;
1482 } PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION, *PPROCESS_INSTRUMENTATION_CALLBACK_INFORMATION;
1483
1484 typedef enum _FSINFOCLASS {
1485 FileFsVolumeInformation = 1,
1486 FileFsLabelInformation,
1487 FileFsSizeInformation,
1488 FileFsDeviceInformation,
1489 FileFsAttributeInformation,
1490 FileFsControlInformation,
1491 FileFsFullSizeInformation,
1492 FileFsObjectIdInformation,
1493 FileFsMaximumInformation
1494 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
1495
1496 typedef enum _KEY_INFORMATION_CLASS {
1497 KeyBasicInformation,
1498 KeyNodeInformation,
1499 KeyFullInformation,
1500 KeyNameInformation,
1501 KeyCachedInformation,
1502 KeyFlagsInformation,
1503 KeyVirtualizationInformation,
1504 KeyHandleTagsInformation,
1505 MaxKeyInfoClass
1506 } KEY_INFORMATION_CLASS;
1507
1508 typedef enum _KEY_VALUE_INFORMATION_CLASS {
1509 KeyValueBasicInformation,
1510 KeyValueFullInformation,
1511 KeyValuePartialInformation,
1512 KeyValueFullInformationAlign64,
1513 KeyValuePartialInformationAlign64
1514 } KEY_VALUE_INFORMATION_CLASS;
1515
1516 typedef enum _OBJECT_INFORMATION_CLASS {
1517 ObjectBasicInformation,
1518 ObjectNameInformation,
1519 ObjectTypeInformation,
1520 ObjectTypesInformation,
1521 ObjectDataInformation
1522 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
1523
1524 typedef enum _PROCESSINFOCLASS {
1525 ProcessBasicInformation = 0,
1526 ProcessQuotaLimits = 1,
1527 ProcessIoCounters = 2,
1528 ProcessVmCounters = 3,
1529 ProcessTimes = 4,
1530 ProcessBasePriority = 5,
1531 ProcessRaisePriority = 6,
1532 ProcessDebugPort = 7,
1533 ProcessExceptionPort = 8,
1534 ProcessAccessToken = 9,
1535 ProcessLdtInformation = 10,
1536 ProcessLdtSize = 11,
1537 ProcessDefaultHardErrorMode = 12,
1538 ProcessIoPortHandlers = 13,
1539 ProcessPooledUsageAndLimits = 14,
1540 ProcessWorkingSetWatch = 15,
1541 ProcessUserModeIOPL = 16,
1542 ProcessEnableAlignmentFaultFixup = 17,
1543 ProcessPriorityClass = 18,
1544 ProcessWx86Information = 19,
1545 ProcessHandleCount = 20,
1546 ProcessAffinityMask = 21,
1547 ProcessPriorityBoost = 22,
1548 ProcessDeviceMap = 23,
1549 ProcessSessionInformation = 24,
1550 ProcessForegroundInformation = 25,
1551 ProcessWow64Information = 26,
1552 ProcessImageFileName = 27,
1553 ProcessLUIDDeviceMapsEnabled = 28,
1554 ProcessBreakOnTermination = 29,
1555 ProcessDebugObjectHandle = 30,
1556 ProcessDebugFlags = 31,
1557 ProcessHandleTracing = 32,
1558 ProcessIoPriority = 33,
1559 ProcessExecuteFlags = 34,
1560 ProcessTlsInformation = 35,
1561 ProcessCookie = 36,
1562 ProcessImageInformation = 37,
1563 ProcessCycleTime = 38,
1564 ProcessPagePriority = 39,
1565 ProcessInstrumentationCallback = 40,
1566 ProcessThreadStackAllocation = 41,
1567 ProcessWorkingSetWatchEx = 42,
1568 ProcessImageFileNameWin32 = 43,
1569 MaxProcessInfoClass,
1570 #ifdef __WINESRC__
1571 ProcessWineMakeProcessSystem = 1000,
1572 #endif
1573 } PROCESSINFOCLASS, PROCESS_INFORMATION_CLASS;
1574
1575 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1576 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1577 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1578 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1579
1580 typedef enum _SECTION_INHERIT {
1581 ViewShare = 1,
1582 ViewUnmap = 2
1583 } SECTION_INHERIT;
1584
1585 typedef enum _SYSTEM_INFORMATION_CLASS {
1586 SystemBasicInformation = 0,
1587 SystemCpuInformation = 1,
1588 SystemPerformanceInformation = 2,
1589 SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
1590 SystemPathInformation = 4,
1591 SystemProcessInformation = 5,
1592 SystemCallCountInformation = 6,
1593 SystemDeviceInformation = 7,
1594 SystemProcessorPerformanceInformation = 8,
1595 SystemFlagsInformation = 9,
1596 SystemCallTimeInformation = 10,
1597 SystemModuleInformation = 11,
1598 SystemLocksInformation = 12,
1599 SystemStackTraceInformation = 13,
1600 SystemPagedPoolInformation = 14,
1601 SystemNonPagedPoolInformation = 15,
1602 SystemHandleInformation = 16,
1603 SystemObjectInformation = 17,
1604 SystemPageFileInformation = 18,
1605 SystemVdmInstemulInformation = 19,
1606 SystemVdmBopInformation = 20,
1607 SystemFileCacheInformation = 21,
1608 SystemPoolTagInformation = 22,
1609 SystemInterruptInformation = 23,
1610 SystemDpcBehaviorInformation = 24,
1611 SystemFullMemoryInformation = 25,
1612 SystemNotImplemented6 = 25,
1613 SystemLoadGdiDriverInformation = 26,
1614 SystemUnloadGdiDriverInformation = 27,
1615 SystemTimeAdjustmentInformation = 28,
1616 SystemTimeAdjustment = 28,
1617 SystemSummaryMemoryInformation = 29,
1618 SystemMirrorMemoryInformation = 30,
1619 SystemPerformanceTraceInformation = 31,
1620 SystemObsolete0 = 32,
1621 SystemExceptionInformation = 33,
1622 SystemCrashDumpStateInformation = 34,
1623 SystemKernelDebuggerInformation = 35,
1624 SystemContextSwitchInformation = 36,
1625 SystemRegistryQuotaInformation = 37,
1626 SystemExtendServiceTableInformation = 38,
1627 SystemPrioritySeperation = 39,
1628 SystemVerifierAddDriverInformation = 40,
1629 SystemVerifierRemoveDriverInformation = 41,
1630 SystemProcessorIdleInformation = 42,
1631 SystemLegacyDriverInformation = 43,
1632 SystemCurrentTimeZoneInformation = 44,
1633 SystemLookasideInformation = 45,
1634 SystemTimeSlipNotification = 46,
1635 SystemSessionCreate = 47,
1636 SystemSessionDetach = 48,
1637 SystemSessionInformation = 49,
1638 SystemRangeStartInformation = 50,
1639 SystemVerifierInformation = 51,
1640 SystemVerifierThunkExtend = 52,
1641 SystemSessionProcessesInformation = 53,
1642 SystemLoadGdiDriverInSystemSpace = 54,
1643 SystemNumaProcessorMap = 55,
1644 SystemPrefetcherInformation = 56,
1645 SystemExtendedProcessInformation = 57,
1646 SystemRecommendedSharedDataAlignment = 58,
1647 SystemComPlusPackage = 59,
1648 SystemNumaAvailableMemory = 60,
1649 SystemProcessorPowerInformation = 61,
1650 SystemEmulationBasicInformation = 62,
1651 SystemEmulationProcessorInformation = 63,
1652 SystemExtendedHandleInformation = 64,
1653 SystemLostDelayedWriteInformation = 65,
1654 SystemBigPoolInformation = 66,
1655 SystemSessionPoolTagInformation = 67,
1656 SystemSessionMappedViewInformation = 68,
1657 SystemHotpatchInformation = 69,
1658 SystemObjectSecurityMode = 70,
1659 SystemWatchdogTimerHandler = 71,
1660 SystemWatchdogTimerInformation = 72,
1661 SystemLogicalProcessorInformation = 73,
1662 SystemWow64SharedInformationObsolete = 74,
1663 SystemRegisterFirmwareTableInformationHandler = 75,
1664 SystemFirmwareTableInformation = 76,
1665 SystemModuleInformationEx = 77,
1666 SystemVerifierTriageInformation = 78,
1667 SystemSuperfetchInformation = 79,
1668 SystemMemoryListInformation = 80,
1669 SystemFileCacheInformationEx = 81,
1670 SystemThreadPriorityClientIdInformation = 82,
1671 SystemProcessorIdleCycleTimeInformation = 83,
1672 SystemVerifierCancellationInformation = 84,
1673 SystemProcessorPowerInformationEx = 85,
1674 SystemRefTraceInformation = 86,
1675 SystemSpecialPoolInformation = 87,
1676 SystemProcessIdInformation = 88,
1677 SystemErrorPortInformation = 89,
1678 SystemBootEnvironmentInformation = 90,
1679 SystemHypervisorInformation = 91,
1680 SystemVerifierInformationEx = 92,
1681 SystemTimeZoneInformation = 93,
1682 SystemImageFileExecutionOptionsInformation = 94,
1683 SystemCoverageInformation = 95,
1684 SystemPrefetchPatchInformation = 96,
1685 SystemVerifierFaultsInformation = 97,
1686 SystemSystemPartitionInformation = 98,
1687 SystemSystemDiskInformation = 99,
1688 SystemProcessorPerformanceDistribution = 100,
1689 SystemNumaProximityNodeInformation = 101,
1690 SystemDynamicTimeZoneInformation = 102,
1691 SystemCodeIntegrityInformation = 103,
1692 SystemProcessorMicrocodeUpdateInformation = 104,
1693 SystemProcessorBrandString = 105,
1694 SystemVirtualAddressInformation = 106,
1695 SystemLogicalProcessorInformationEx = 107,
1696 SystemProcessorCycleTimeInformation = 108,
1697 SystemStoreInformation = 109,
1698 SystemRegistryAppendString = 110,
1699 SystemAitSamplingValue = 111,
1700 SystemVhdBootInformation = 112,
1701 SystemCpuQuotaInformation = 113,
1702 SystemNativeBasicInformation = 114,
1703 SystemErrorPortTimeouts = 115,
1704 SystemLowPriorityIoInformation = 116,
1705 SystemTpmBootEntropyInformation = 117,
1706 SystemVerifierCountersInformation = 118,
1707 SystemPagedPoolInformationEx = 119,
1708 SystemSystemPtesInformationEx = 120,
1709 SystemNodeDistanceInformation = 121,
1710 SystemAcpiAuditInformation = 122,
1711 SystemBasicPerformanceInformation = 123,
1712 SystemQueryPerformanceCounterInformation = 124,
1713 SystemSessionBigPoolInformation = 125,
1714 SystemBootGraphicsInformation = 126,
1715 SystemScrubPhysicalMemoryInformation = 127,
1716 SystemBadPageInformation = 128,
1717 SystemProcessorProfileControlArea = 129,
1718 SystemCombinePhysicalMemoryInformation = 130,
1719 SystemEntropyInterruptTimingInformation = 131,
1720 SystemConsoleInformation = 132,
1721 SystemPlatformBinaryInformation = 133,
1722 SystemPolicyInformation = 134,
1723 SystemHypervisorProcessorCountInformation = 135,
1724 SystemDeviceDataInformation = 136,
1725 SystemDeviceDataEnumerationInformation = 137,
1726 SystemMemoryTopologyInformation = 138,
1727 SystemMemoryChannelInformation = 139,
1728 SystemBootLogoInformation = 140,
1729 SystemProcessorPerformanceInformationEx = 141,
1730 SystemCriticalProcessErrorLogInformation = 142,
1731 SystemSecureBootPolicyInformation = 143,
1732 SystemPageFileInformationEx = 144,
1733 SystemSecureBootInformation = 145,
1734 SystemEntropyInterruptTimingRawInformation = 146,
1735 SystemPortableWorkspaceEfiLauncherInformation = 147,
1736 SystemFullProcessInformation = 148,
1737 SystemKernelDebuggerInformationEx = 149,
1738 SystemBootMetadataInformation = 150,
1739 SystemSoftRebootInformation = 151,
1740 SystemElamCertificateInformation = 152,
1741 SystemOfflineDumpConfigInformation = 153,
1742 SystemProcessorFeaturesInformation = 154,
1743 SystemRegistryReconciliationInformation = 155,
1744 SystemEdidInformation = 156,
1745 SystemManufacturingInformation = 157,
1746 SystemEnergyEstimationConfigInformation = 158,
1747 SystemHypervisorDetailInformation = 159,
1748 SystemProcessorCycleStatsInformation = 160,
1749 SystemVmGenerationCountInformation = 161,
1750 SystemTrustedPlatformModuleInformation = 162,
1751 SystemKernelDebuggerFlags = 163,
1752 SystemCodeIntegrityPolicyInformation = 164,
1753 SystemIsolatedUserModeInformation = 165,
1754 SystemHardwareSecurityTestInterfaceResultsInformation = 166,
1755 SystemSingleModuleInformation = 167,
1756 SystemAllowedCpuSetsInformation = 168,
1757 SystemVsmProtectionInformation = 169,
1758 SystemInterruptCpuSetsInformation = 170,
1759 SystemSecureBootPolicyFullInformation = 171,
1760 SystemCodeIntegrityPolicyFullInformation = 172,
1761 SystemAffinitizedInterruptProcessorInformation = 173,
1762 SystemRootSiloInformation = 174,
1763 SystemCpuSetInformation = 175,
1764 SystemCpuSetTagInformation = 176,
1765 SystemWin32WerStartCallout = 177,
1766 SystemSecureKernelProfileInformation = 178,
1767 SystemCodeIntegrityPlatformManifestInformation = 179,
1768 SystemInterruptSteeringInformation = 180,
1769 SystemSupportedProcessorArchitectures = 181,
1770 SystemMemoryUsageInformation = 182,
1771 SystemCodeIntegrityCertificateInformation = 183,
1772 SystemPhysicalMemoryInformation = 184,
1773 SystemControlFlowTransition = 185,
1774 SystemKernelDebuggingAllowed = 186,
1775 SystemActivityModerationExeState = 187,
1776 SystemActivityModerationUserSettings = 188,
1777 SystemCodeIntegrityPoliciesFullInformation = 189,
1778 SystemCodeIntegrityUnlockInformation = 190,
1779 SystemIntegrityQuotaInformation = 191,
1780 SystemFlushInformation = 192,
1781 SystemProcessorIdleMaskInformation = 193,
1782 SystemSecureDumpEncryptionInformation = 194,
1783 SystemWriteConstraintInformation = 195,
1784 SystemKernelVaShadowInformation = 196,
1785 SystemHypervisorSharedPageInformation = 197,
1786 SystemFirmwareBootPerformanceInformation = 198,
1787 SystemCodeIntegrityVerificationInformation = 199,
1788 SystemFirmwarePartitionInformation = 200,
1789 SystemSpeculationControlInformation = 201,
1790 SystemDmaGuardPolicyInformation = 202,
1791 SystemEnclaveLaunchControlInformation = 203,
1792 SystemWorkloadAllowedCpuSetsInformation = 204,
1793 SystemCodeIntegrityUnlockModeInformation = 205,
1794 SystemLeapSecondInformation = 206,
1795 SystemFlags2Information = 207,
1796 SystemSecurityModelInformation = 208,
1797 SystemCodeIntegritySyntheticCacheInformation = 209,
1798 SystemFeatureConfigurationInformation = 210,
1799 SystemFeatureConfigurationSectionInformation = 211,
1800 SystemFeatureUsageSubscriptionInformation = 212,
1801 SystemSecureSpeculationControlInformation = 213,
1802 SystemSpacesBootInformation = 214,
1803 SystemFwRamdiskInformation = 215,
1804 SystemWheaIpmiHardwareInformation = 216,
1805 SystemDifSetRuleClassInformation = 217,
1806 SystemDifClearRuleClassInformation = 218,
1807 SystemDifApplyPluginVerificationOnDriver = 219,
1808 SystemDifRemovePluginVerificationOnDriver = 220,
1809 SystemShadowStackInformation = 221,
1810 SystemBuildVersionInformation = 222,
1811 #ifdef __WINESRC__
1812 SystemWineVersionInformation = 1000,
1813 #endif
1814 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
1815
1816 typedef struct _SYSTEM_CODEINTEGRITY_INFORMATION
1817 {
1818 ULONG Length;
1819 ULONG CodeIntegrityOptions;
1820 } SYSTEM_CODEINTEGRITY_INFORMATION, *PSYSTEM_CODEINTEGRITY_INFORMATION;
1821
1822 #define CODEINTEGRITY_OPTION_ENABLED 0x0001
1823 #define CODEINTEGRITY_OPTION_TESTSIGN 0x0002
1824 #define CODEINTEGRITY_OPTION_UMCI_ENABLED 0x0004
1825 #define CODEINTEGRITY_OPTION_UMCI_AUDITMODE_ENABLED 0x0008
1826 #define CODEINTEGRITY_OPTION_UMCI_EXCLUSIONPATHS_ENABLED 0x0010
1827 #define CODEINTEGRITY_OPTION_TEST_BUILD 0x0020
1828 #define CODEINTEGRITY_OPTION_PREPRODUCTION_BUILD 0x0040
1829 #define CODEINTEGRITY_OPTION_DEBUGMODE_ENABLED 0x0080
1830 #define CODEINTEGRITY_OPTION_FLIGHT_BUILD 0x0100
1831 #define CODEINTEGRITY_OPTION_FLIGHTING_ENABLED 0x0200
1832 #define CODEINTEGRITY_OPTION_HVCI_KMCI_ENABLED 0x0400
1833 #define CODEINTEGRITY_OPTION_HVCI_KMCI_AUDITMODE_ENABLED 0x0800
1834 #define CODEINTEGRITY_OPTION_HVCI_KMCI_STRICTMODE_ENABLED 0x1000
1835 #define CODEINTEGRITY_OPTION_HVCI_IUM_ENABLED 0x2000
1836
1837 typedef enum _THREADINFOCLASS {
1838 ThreadBasicInformation = 0,
1839 ThreadTimes,
1840 ThreadPriority,
1841 ThreadBasePriority,
1842 ThreadAffinityMask,
1843 ThreadImpersonationToken,
1844 ThreadDescriptorTableEntry,
1845 ThreadEnableAlignmentFaultFixup,
1846 ThreadEventPair_Reusable,
1847 ThreadQuerySetWin32StartAddress,
1848 ThreadZeroTlsCell,
1849 ThreadPerformanceCount,
1850 ThreadAmILastThread,
1851 ThreadIdealProcessor,
1852 ThreadPriorityBoost,
1853 ThreadSetTlsArrayAddress,
1854 ThreadIsIoPending,
1855 ThreadHideFromDebugger,
1856 ThreadBreakOnTermination,
1857 ThreadSwitchLegacyState,
1858 ThreadIsTerminated,
1859 ThreadLastSystemCall,
1860 ThreadIoPriority,
1861 ThreadCycleTime,
1862 ThreadPagePriority,
1863 ThreadActualBasePriority,
1864 ThreadTebInformation,
1865 ThreadCSwitchMon,
1866 ThreadCSwitchPmu,
1867 ThreadWow64Context,
1868 ThreadGroupInformation,
1869 ThreadUmsInformation,
1870 ThreadCounterProfiling,
1871 ThreadIdealProcessorEx,
1872 ThreadCpuAccountingInformation,
1873 ThreadSuspendCount,
1874 ThreadHeterogeneousCpuPolicy,
1875 ThreadContainerId,
1876 ThreadNameInformation,
1877 ThreadSelectedCpuSets,
1878 ThreadSystemThreadInformation,
1879 ThreadActualGroupAffinity,
1880 ThreadDynamicCodePolicyInfo,
1881 ThreadExplicitCaseSensitivity,
1882 ThreadWorkOnBehalfTicket,
1883 ThreadSubsystemInformation,
1884 ThreadDbgkWerReportActive,
1885 ThreadAttachContainer,
1886 ThreadManageWritesToExecutableMemory,
1887 ThreadPowerThrottlingState,
1888 ThreadWorkloadClass,
1889 MaxThreadInfoClass
1890 } THREADINFOCLASS;
1891
1892 typedef struct _THREAD_BASIC_INFORMATION
1893 {
1894 NTSTATUS ExitStatus;
1895 PVOID TebBaseAddress;
1896 CLIENT_ID ClientId;
1897 ULONG_PTR AffinityMask;
1898 LONG Priority;
1899 LONG BasePriority;
1900 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1901
1902 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1903 {
1904 DWORD Selector;
1905 LDT_ENTRY Entry;
1906 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
1907
1908 typedef struct _THREAD_NAME_INFORMATION
1909 {
1910 UNICODE_STRING ThreadName;
1911 } THREAD_NAME_INFORMATION, *PTHREAD_NAME_INFORMATION;
1912
1913 typedef struct _KERNEL_USER_TIMES {
1914 LARGE_INTEGER CreateTime;
1915 LARGE_INTEGER ExitTime;
1916 LARGE_INTEGER KernelTime;
1917 LARGE_INTEGER UserTime;
1918 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1919
1920 typedef enum _WINSTATIONINFOCLASS {
1921 WinStationInformation = 8
1922 } WINSTATIONINFOCLASS;
1923
1924 typedef enum _MEMORY_INFORMATION_CLASS {
1925 MemoryBasicInformation,
1926 MemoryWorkingSetInformation,
1927 MemoryMappedFilenameInformation,
1928 MemoryRegionInformation,
1929 MemoryWorkingSetExInformation,
1930 MemorySharedCommitInformation,
1931 MemoryImageInformation,
1932 MemoryRegionInformationEx,
1933 MemoryPrivilegedBasicInformation,
1934 MemoryEnclaveImageInformation,
1935 MemoryBasicInformationCapped,
1936 MemoryPhysicalContiguityInformation,
1937 #ifdef __WINESRC__
1938 MemoryWineUnixFuncs = 1000,
1939 MemoryWineUnixWow64Funcs,
1940 #endif
1941 } MEMORY_INFORMATION_CLASS;
1942
1943 typedef struct _MEMORY_SECTION_NAME
1944 {
1945 UNICODE_STRING SectionFileName;
1946 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1947
1948 typedef union _MEMORY_WORKING_SET_EX_BLOCK {
1949 ULONG_PTR Flags;
1950 struct {
1951 ULONG_PTR Valid : 1;
1952 ULONG_PTR ShareCount : 3;
1953 ULONG_PTR Win32Protection : 11;
1954 ULONG_PTR Shared : 1;
1955 ULONG_PTR Node : 6;
1956 ULONG_PTR Locked : 1;
1957 ULONG_PTR LargePage : 1;
1958 } DUMMYSTRUCTNAME;
1959 } MEMORY_WORKING_SET_EX_BLOCK, *PMEMORY_WORKING_SET_EX_BLOCK;
1960
1961 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION {
1962 PVOID VirtualAddress;
1963 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes;
1964 } MEMORY_WORKING_SET_EX_INFORMATION, *PMEMORY_WORKING_SET_EX_INFORMATION;
1965
1966 typedef enum _MUTANT_INFORMATION_CLASS
1967 {
1968 MutantBasicInformation
1969 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
1970
1971 typedef struct _MUTANT_BASIC_INFORMATION {
1972 LONG CurrentCount;
1973 BOOLEAN OwnedByCaller;
1974 BOOLEAN AbandonedState;
1975 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
1976
1977 typedef enum _TIMER_INFORMATION_CLASS
1978 {
1979 TimerBasicInformation = 0
1980 } TIMER_INFORMATION_CLASS;
1981
1982 typedef struct _TIMER_BASIC_INFORMATION
1983 {
1984 LARGE_INTEGER RemainingTime;
1985 BOOLEAN TimerState;
1986 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
1987
1988
1989 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
1990 typedef enum
1991 {
1992 INVALID_PATH = 0,
1993 UNC_PATH, /* "//foo" */
1994 ABSOLUTE_DRIVE_PATH, /* "c:/foo" */
1995 RELATIVE_DRIVE_PATH, /* "c:foo" */
1996 ABSOLUTE_PATH, /* "/foo" */
1997 RELATIVE_PATH, /* "foo" */
1998 DEVICE_PATH, /* "//./foo" */
1999 UNC_DOT_PATH /* "//." */
2000 } DOS_PATHNAME_TYPE;
2001
2002
2003 /***********************************************************************
2004 * Types and data structures
2005 */
2006
2007 /* This is used by NtQuerySystemInformation */
2008 typedef struct _SYSTEM_THREAD_INFORMATION
2009 { /* win32/win64 */
2010 LARGE_INTEGER KernelTime; /* 00/00 */
2011 LARGE_INTEGER UserTime; /* 08/08 */
2012 LARGE_INTEGER CreateTime; /* 10/10 */
2013 DWORD dwTickCount; /* 18/18 */
2014 LPVOID StartAddress; /* 1c/20 */
2015 CLIENT_ID ClientId; /* 20/28 */
2016 DWORD dwCurrentPriority; /* 28/38 */
2017 DWORD dwBasePriority; /* 2c/3c */
2018 DWORD dwContextSwitches; /* 30/40 */
2019 DWORD dwThreadState; /* 34/44 */
2020 DWORD dwWaitReason; /* 38/48 */
2021 DWORD dwUnknown; /* 3c/4c */
2022 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
2023
2024 typedef struct _SYSTEM_EXTENDED_THREAD_INFORMATION
2025 {
2026 SYSTEM_THREAD_INFORMATION ThreadInfo; /* 00/00 */
2027 void *StackBase; /* 40/50 */
2028 void *StackLimit; /* 44/58 */
2029 void *Win32StartAddress; /* 48/60 */
2030 void *TebBase; /* 4c/68 */
2031 ULONG_PTR Reserved2; /* 50/70 */
2032 ULONG_PTR Reserved3; /* 54/78 */
2033 ULONG_PTR Reserved4; /* 58/80 */
2034 } SYSTEM_EXTENDED_THREAD_INFORMATION, *PSYSTEM_EXTENDED_THREAD_INFORMATION;
2035
2036 typedef struct _IO_STATUS_BLOCK {
2037 union {
2038 NTSTATUS Status;
2039 PVOID Pointer;
2040 } DUMMYUNIONNAME;
2041
2042 ULONG_PTR Information;
2043 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
2044
2045 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
2046
2047 typedef struct _KEY_BASIC_INFORMATION {
2048 LARGE_INTEGER LastWriteTime;
2049 ULONG TitleIndex;
2050 ULONG NameLength;
2051 WCHAR Name[1];
2052 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
2053
2054 typedef struct _KEY_NODE_INFORMATION
2055 {
2056 LARGE_INTEGER LastWriteTime;
2057 ULONG TitleIndex;
2058 ULONG ClassOffset;
2059 ULONG ClassLength;
2060 ULONG NameLength;
2061 WCHAR Name[1];
2062 /* Class[1]; */
2063 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
2064
2065 typedef struct _KEY_FULL_INFORMATION
2066 {
2067 LARGE_INTEGER LastWriteTime;
2068 ULONG TitleIndex;
2069 ULONG ClassOffset;
2070 ULONG ClassLength;
2071 ULONG SubKeys;
2072 ULONG MaxNameLen;
2073 ULONG MaxClassLen;
2074 ULONG Values;
2075 ULONG MaxValueNameLen;
2076 ULONG MaxValueDataLen;
2077 WCHAR Class[1];
2078 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
2079
2080 typedef struct _KEY_NAME_INFORMATION {
2081 ULONG NameLength;
2082 WCHAR Name[1];
2083 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
2084
2085 typedef struct _KEY_CACHED_INFORMATION
2086 {
2087 LARGE_INTEGER LastWriteTime;
2088 ULONG TitleIndex;
2089 ULONG SubKeys;
2090 ULONG MaxNameLen;
2091 ULONG Values;
2092 ULONG MaxValueNameLen;
2093 ULONG MaxValueDataLen;
2094 ULONG NameLength;
2095 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
2096
2097 typedef struct _KEY_VALUE_ENTRY
2098 {
2099 PUNICODE_STRING ValueName;
2100 ULONG DataLength;
2101 ULONG DataOffset;
2102 ULONG Type;
2103 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
2104
2105 typedef struct _KEY_VALUE_BASIC_INFORMATION {
2106 ULONG TitleIndex;
2107 ULONG Type;
2108 ULONG NameLength;
2109 WCHAR Name[1];
2110 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
2111
2112 typedef struct _KEY_VALUE_FULL_INFORMATION {
2113 ULONG TitleIndex;
2114 ULONG Type;
2115 ULONG DataOffset;
2116 ULONG DataLength;
2117 ULONG NameLength;
2118 WCHAR Name[1];
2119 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
2120
2121 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
2122 ULONG TitleIndex;
2123 ULONG Type;
2124 ULONG DataLength;
2125 UCHAR Data[1];
2126 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
2127
2128 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
2129 #define __OBJECT_ATTRIBUTES_DEFINED__
2130 typedef struct _OBJECT_ATTRIBUTES {
2131 ULONG Length;
2132 HANDLE RootDirectory;
2133 PUNICODE_STRING ObjectName;
2134 ULONG Attributes;
2135 PVOID SecurityDescriptor; /* type SECURITY_DESCRIPTOR */
2136 PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
2137 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
2138 #endif
2139
2140 typedef struct _OBJECT_DATA_INFORMATION {
2141 BOOLEAN InheritHandle;
2142 BOOLEAN ProtectFromClose;
2143 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
2144
2145 typedef struct _OBJECT_BASIC_INFORMATION {
2146 ULONG Attributes;
2147 ACCESS_MASK GrantedAccess;
2148 ULONG HandleCount;
2149 ULONG PointerCount;
2150 ULONG PagedPoolUsage;
2151 ULONG NonPagedPoolUsage;
2152 ULONG Reserved[3];
2153 ULONG NameInformationLength;
2154 ULONG TypeInformationLength;
2155 ULONG SecurityDescriptorLength;
2156 LARGE_INTEGER CreateTime;
2157 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
2158
2159 typedef struct _OBJECT_NAME_INFORMATION {
2160 UNICODE_STRING Name;
2161 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
2162
2163 typedef struct __OBJECT_TYPE_INFORMATION {
2164 UNICODE_STRING TypeName;
2165 ULONG TotalNumberOfObjects;
2166 ULONG TotalNumberOfHandles;
2167 ULONG TotalPagedPoolUsage;
2168 ULONG TotalNonPagedPoolUsage;
2169 ULONG TotalNamePoolUsage;
2170 ULONG TotalHandleTableUsage;
2171 ULONG HighWaterNumberOfObjects;
2172 ULONG HighWaterNumberOfHandles;
2173 ULONG HighWaterPagedPoolUsage;
2174 ULONG HighWaterNonPagedPoolUsage;
2175 ULONG HighWaterNamePoolUsage;
2176 ULONG HighWaterHandleTableUsage;
2177 ULONG InvalidAttributes;
2178 GENERIC_MAPPING GenericMapping;
2179 ULONG ValidAccessMask;
2180 BOOLEAN SecurityRequired;
2181 BOOLEAN MaintainHandleCount;
2182 UCHAR TypeIndex;
2183 CHAR ReservedByte;
2184 ULONG PoolType;
2185 ULONG DefaultPagedPoolCharge;
2186 ULONG DefaultNonPagedPoolCharge;
2187 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
2188
2189 typedef struct _OBJECT_TYPES_INFORMATION
2190 {
2191 ULONG NumberOfTypes;
2192 } OBJECT_TYPES_INFORMATION, *POBJECT_TYPES_INFORMATION;
2193
2194 typedef struct _PROCESS_BASIC_INFORMATION {
2195 #ifdef __WINESRC__
2196 NTSTATUS ExitStatus;
2197 PEB *PebBaseAddress;
2198 ULONG_PTR AffinityMask;
2199 LONG BasePriority;
2200 ULONG_PTR UniqueProcessId;
2201 ULONG_PTR InheritedFromUniqueProcessId;
2202 #else
2203 PVOID Reserved1;
2204 PPEB PebBaseAddress;
2205 PVOID Reserved2[2];
2206 ULONG_PTR UniqueProcessId;
2207 PVOID Reserved3;
2208 #endif
2209 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
2210
2211 #define PROCESS_PRIOCLASS_IDLE 1
2212 #define PROCESS_PRIOCLASS_NORMAL 2
2213 #define PROCESS_PRIOCLASS_HIGH 3
2214 #define PROCESS_PRIOCLASS_REALTIME 4
2215 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
2216 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
2217
2218 typedef struct _PROCESS_PRIORITY_CLASS {
2219 BOOLEAN Foreground;
2220 UCHAR PriorityClass;
2221 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
2222
2223 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
2224 {
2225 SIZE_T ReserveSize;
2226 SIZE_T ZeroBits;
2227 PVOID StackBase;
2228 } PROCESS_STACK_ALLOCATION_INFORMATION, *PPROCESS_STACK_ALLOCATION_INFORMATION;
2229
2230 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
2231 {
2232 ULONG PreferredNode;
2233 ULONG Reserved0;
2234 ULONG Reserved1;
2235 ULONG Reserved2;
2236 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo;
2237 } PROCESS_STACK_ALLOCATION_INFORMATION_EX, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX;
2238
2239 typedef struct _RTL_HEAP_DEFINITION {
2240 ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
2241
2242 ULONG Unknown[11];
2243 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
2244
2245 typedef struct _RTL_RWLOCK {
2246 RTL_CRITICAL_SECTION rtlCS;
2247
2248 HANDLE hSharedReleaseSemaphore;
2249 UINT uSharedWaiters;
2250
2251 HANDLE hExclusiveReleaseSemaphore;
2252 UINT uExclusiveWaiters;
2253
2254 INT iNumberActive;
2255 HANDLE hOwningThreadId;
2256 DWORD dwTimeoutBoost;
2257 PVOID pDebugInfo;
2258 } RTL_RWLOCK, *LPRTL_RWLOCK;
2259
2260 /* System Information Class 0x00 */
2261
2262 typedef struct _SYSTEM_BASIC_INFORMATION {
2263 #ifdef __WINESRC__
2264 DWORD unknown;
2265 ULONG KeMaximumIncrement;
2266 ULONG PageSize;
2267 ULONG MmNumberOfPhysicalPages;
2268 ULONG MmLowestPhysicalPage;
2269 ULONG MmHighestPhysicalPage;
2270 ULONG_PTR AllocationGranularity;
2271 PVOID LowestUserAddress;
2272 PVOID HighestUserAddress;
2273 ULONG_PTR ActiveProcessorsAffinityMask;
2274 BYTE NumberOfProcessors;
2275 #else
2276 BYTE Reserved1[24];
2277 PVOID Reserved2[4];
2278 CCHAR NumberOfProcessors;
2279 #endif
2280 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
2281
2282 /* System Information Class 0x01 */
2283
2284 typedef struct _SYSTEM_CPU_INFORMATION {
2285 USHORT ProcessorArchitecture;
2286 USHORT ProcessorLevel;
2287 USHORT ProcessorRevision;
2288 USHORT MaximumProcessors;
2289 ULONG ProcessorFeatureBits;
2290 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
2291
2292 /* definitions of bits in the Feature set for the x86 processors */
2293 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
2294 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
2295 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
2296 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
2297 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
2298 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
2299 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
2300 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
2301 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
2302 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
2303 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
2304 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
2305 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
2306 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
2307 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
2308 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
2309 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
2310 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
2311 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
2312 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
2313 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
2314 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
2315 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
2316 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
2317
2318 /* FIXME: following values are made up, actual flags are unknown */
2319 #define CPU_FEATURE_SSSE3 0x00008000 /* SSSE3 instructions */
2320 #define CPU_FEATURE_SSE41 0x01000000 /* SSE41 instructions */
2321 #define CPU_FEATURE_SSE42 0x02000000 /* SSE42 instructions */
2322 #define CPU_FEATURE_AVX 0x40000000 /* AVX instructions */
2323 #define CPU_FEATURE_AVX2 0x80000000 /* AVX2 instructions */
2324 #define CPU_FEATURE_PAE 0x00200000
2325 #define CPU_FEATURE_DAZ 0x00400000
2326
2327 #define CPU_FEATURE_ARM_VFP_32 0x00000001
2328 #define CPU_FEATURE_ARM_NEON 0x00000002
2329 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
2330 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
2331
2332 /* System Information Class 0x02 */
2333
2334 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
2335 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
2336 LARGE_INTEGER IdleTime;
2337 LARGE_INTEGER ReadTransferCount;
2338 LARGE_INTEGER WriteTransferCount;
2339 LARGE_INTEGER OtherTransferCount;
2340 ULONG ReadOperationCount;
2341 ULONG WriteOperationCount;
2342 ULONG OtherOperationCount;
2343 ULONG AvailablePages;
2344 ULONG TotalCommittedPages;
2345 ULONG TotalCommitLimit;
2346 ULONG PeakCommitment;
2347 ULONG PageFaults;
2348 ULONG WriteCopyFaults;
2349 ULONG TransitionFaults;
2350 ULONG Reserved1;
2351 ULONG DemandZeroFaults;
2352 ULONG PagesRead;
2353 ULONG PageReadIos;
2354 ULONG Reserved2[2];
2355 ULONG PagefilePagesWritten;
2356 ULONG PagefilePageWriteIos;
2357 ULONG MappedFilePagesWritten;
2358 ULONG MappedFilePageWriteIos;
2359 ULONG PagedPoolUsage;
2360 ULONG NonPagedPoolUsage;
2361 ULONG PagedPoolAllocs;
2362 ULONG PagedPoolFrees;
2363 ULONG NonPagedPoolAllocs;
2364 ULONG NonPagedPoolFrees;
2365 ULONG TotalFreeSystemPtes;
2366 ULONG SystemCodePage;
2367 ULONG TotalSystemDriverPages;
2368 ULONG TotalSystemCodePages;
2369 ULONG SmallNonPagedLookasideListAllocateHits;
2370 ULONG SmallPagedLookasideListAllocateHits;
2371 ULONG Reserved3;
2372 ULONG MmSystemCachePage;
2373 ULONG PagedPoolPage;
2374 ULONG SystemDriverPage;
2375 ULONG FastReadNoWait;
2376 ULONG FastReadWait;
2377 ULONG FastReadResourceMiss;
2378 ULONG FastReadNotPossible;
2379 ULONG FastMdlReadNoWait;
2380 ULONG FastMdlReadWait;
2381 ULONG FastMdlReadResourceMiss;
2382 ULONG FastMdlReadNotPossible;
2383 ULONG MapDataNoWait;
2384 ULONG MapDataWait;
2385 ULONG MapDataNoWaitMiss;
2386 ULONG MapDataWaitMiss;
2387 ULONG PinMappedDataCount;
2388 ULONG PinReadNoWait;
2389 ULONG PinReadWait;
2390 ULONG PinReadNoWaitMiss;
2391 ULONG PinReadWaitMiss;
2392 ULONG CopyReadNoWait;
2393 ULONG CopyReadWait;
2394 ULONG CopyReadNoWaitMiss;
2395 ULONG CopyReadWaitMiss;
2396 ULONG MdlReadNoWait;
2397 ULONG MdlReadWait;
2398 ULONG MdlReadNoWaitMiss;
2399 ULONG MdlReadWaitMiss;
2400 ULONG ReadAheadIos;
2401 ULONG LazyWriteIos;
2402 ULONG LazyWritePages;
2403 ULONG DataFlushes;
2404 ULONG DataPages;
2405 ULONG ContextSwitches;
2406 ULONG FirstLevelTbFills;
2407 ULONG SecondLevelTbFills;
2408 ULONG SystemCalls;
2409 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
2410
2411 /* System Information Class 0x03 */
2412
2413 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
2414 #ifdef __WINESRC__
2415 LARGE_INTEGER BootTime;
2416 LARGE_INTEGER SystemTime;
2417 LARGE_INTEGER TimeZoneBias;
2418 ULONG TimeZoneId;
2419 ULONG Reserved;
2420 ULONGLONG BootTimeBias;
2421 ULONGLONG SleepTimeBias;
2422 #else
2423 BYTE Reserved1[48];
2424 #endif
2425 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
2426
2427 /* System Information Class 0x08 */
2428
2429 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
2430 LARGE_INTEGER IdleTime;
2431 LARGE_INTEGER KernelTime;
2432 LARGE_INTEGER UserTime;
2433 LARGE_INTEGER Reserved1[2];
2434 ULONG Reserved2;
2435 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
2436
2437 /* System Information Class 0x0b */
2438
2439 typedef struct _SYSTEM_DRIVER_INFORMATION {
2440 PVOID pvAddress;
2441 DWORD dwUnknown1;
2442 DWORD dwUnknown2;
2443 DWORD dwEntryIndex;
2444 DWORD dwUnknown3;
2445 char szName[MAX_PATH + 1];
2446 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
2447
2448 /* System Information Class 0x10 */
2449
2450 typedef struct _SYSTEM_HANDLE_ENTRY {
2451 ULONG OwnerPid;
2452 BYTE ObjectType;
2453 BYTE HandleFlags;
2454 USHORT HandleValue;
2455 PVOID ObjectPointer;
2456 ULONG AccessMask;
2457 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
2458
2459 typedef struct _SYSTEM_HANDLE_INFORMATION {
2460 ULONG Count;
2461 SYSTEM_HANDLE_ENTRY Handle[1];
2462 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
2463
2464 typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
2465 {
2466 void *Object;
2467 ULONG_PTR UniqueProcessId;
2468 ULONG_PTR HandleValue;
2469 ULONG GrantedAccess;
2470 USHORT CreatorBackTraceIndex;
2471 USHORT ObjectTypeIndex;
2472 ULONG HandleAttributes;
2473 ULONG Reserved;
2474 } SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX;
2475
2476 typedef struct _SYSTEM_HANDLE_INFORMATION_EX
2477 {
2478 ULONG_PTR NumberOfHandles;
2479 ULONG_PTR Reserved;
2480 SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles[1];
2481 } SYSTEM_HANDLE_INFORMATION_EX;
2482
2483 /* System Information Class 0x15 */
2484
2485 typedef struct _SYSTEM_CACHE_INFORMATION {
2486 SIZE_T CurrentSize;
2487 SIZE_T PeakSize;
2488 ULONG PageFaultCount;
2489 SIZE_T MinimumWorkingSet;
2490 SIZE_T MaximumWorkingSet;
2491 SIZE_T CurrentSizeIncludingTransitionInPages;
2492 SIZE_T PeakSizeIncludingTransitionInPages;
2493 ULONG TransitionRePurposeCount;
2494 ULONG Flags;
2495 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
2496
2497 /* System Information Class 0x17 */
2498
2499 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
2500 ULONG ContextSwitches;
2501 ULONG DpcCount;
2502 ULONG DpcRate;
2503 ULONG TimeIncrement;
2504 ULONG DpcBypassCount;
2505 ULONG ApcBypassCount;
2506 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
2507
2508 typedef struct _SYSTEM_CONFIGURATION_INFO {
2509 union {
2510 ULONG OemId;
2511 struct {
2512 WORD ProcessorArchitecture;
2513 WORD Reserved;
2514 } tag1;
2515 } tag2;
2516 ULONG PageSize;
2517 PVOID MinimumApplicationAddress;
2518 PVOID MaximumApplicationAddress;
2519 ULONG ActiveProcessorMask;
2520 ULONG NumberOfProcessors;
2521 ULONG ProcessorType;
2522 ULONG AllocationGranularity;
2523 WORD ProcessorLevel;
2524 WORD ProcessorRevision;
2525 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
2526
2527 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
2528 BYTE Reserved1[16];
2529 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
2530
2531 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
2532 BYTE Reserved1[32];
2533 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
2534
2535 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
2536 BOOLEAN DebuggerEnabled;
2537 BOOLEAN DebuggerNotPresent;
2538 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
2539
2540 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX {
2541 BOOLEAN DebuggerAllowed;
2542 BOOLEAN DebuggerEnabled;
2543 BOOLEAN DebuggerPresent;
2544 } SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION_EX;
2545
2546 typedef struct _VM_COUNTERS
2547 {
2548 SIZE_T PeakVirtualSize;
2549 SIZE_T VirtualSize;
2550 ULONG PageFaultCount;
2551 SIZE_T PeakWorkingSetSize;
2552 SIZE_T WorkingSetSize;
2553 SIZE_T QuotaPeakPagedPoolUsage;
2554 SIZE_T QuotaPagedPoolUsage;
2555 SIZE_T QuotaPeakNonPagedPoolUsage;
2556 SIZE_T QuotaNonPagedPoolUsage;
2557 SIZE_T PagefileUsage;
2558 SIZE_T PeakPagefileUsage;
2559 } VM_COUNTERS, *PVM_COUNTERS;
2560
2561 typedef struct _VM_COUNTERS_EX
2562 {
2563 SIZE_T PeakVirtualSize;
2564 SIZE_T VirtualSize;
2565 ULONG PageFaultCount;
2566 SIZE_T PeakWorkingSetSize;
2567 SIZE_T WorkingSetSize;
2568 SIZE_T QuotaPeakPagedPoolUsage;
2569 SIZE_T QuotaPagedPoolUsage;
2570 SIZE_T QuotaPeakNonPagedPoolUsage;
2571 SIZE_T QuotaNonPagedPoolUsage;
2572 SIZE_T PagefileUsage;
2573 SIZE_T PeakPagefileUsage;
2574 SIZE_T PrivateUsage;
2575 } VM_COUNTERS_EX, *PVM_COUNTERS_EX;
2576
2577 typedef struct _SYSTEM_PROCESS_INFORMATION {
2578 #ifdef __WINESRC__ /* win32/win64 */
2579 ULONG NextEntryOffset; /* 00/00 */
2580 DWORD dwThreadCount; /* 04/04 */
2581 LARGE_INTEGER WorkingSetPrivateSize; /* 08/08 */
2582 ULONG HardFaultCount; /* 10/10 */
2583 ULONG NumberOfThreadsHighWatermark;/* 14/14 */
2584 ULONGLONG CycleTime; /* 18/18 */
2585 LARGE_INTEGER CreationTime; /* 20/20 */
2586 LARGE_INTEGER UserTime; /* 28/28 */
2587 LARGE_INTEGER KernelTime; /* 30/30 */
2588 UNICODE_STRING ProcessName; /* 38/38 */
2589 DWORD dwBasePriority; /* 40/48 */
2590 HANDLE UniqueProcessId; /* 44/50 */
2591 HANDLE ParentProcessId; /* 48/58 */
2592 ULONG HandleCount; /* 4c/60 */
2593 ULONG SessionId; /* 50/64 */
2594 ULONG_PTR UniqueProcessKey; /* 54/68 */
2595 VM_COUNTERS_EX vmCounters; /* 58/70 */
2596 IO_COUNTERS ioCounters; /* 88/d0 */
2597 SYSTEM_THREAD_INFORMATION ti[1]; /* b8/100 */
2598 #else
2599 ULONG NextEntryOffset; /* 00/00 */
2600 BYTE Reserved1[52]; /* 04/04 */
2601 PVOID Reserved2[3]; /* 38/38 */
2602 HANDLE UniqueProcessId; /* 44/50 */
2603 PVOID Reserved3; /* 48/58 */
2604 ULONG HandleCount; /* 4c/60 */
2605 BYTE Reserved4[4]; /* 50/64 */
2606 PVOID Reserved5[11]; /* 54/68 */
2607 SIZE_T PeakPagefileUsage; /* 80/c0 */
2608 SIZE_T PrivatePageCount; /* 84/c8 */
2609 LARGE_INTEGER Reserved6[6]; /* 88/d0 */
2610 #endif
2611 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
2612
2613 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
2614 ULONG RegistryQuotaAllowed;
2615 ULONG RegistryQuotaUsed;
2616 PVOID Reserved1;
2617 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
2618
2619 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY {
2620 ULONG TimeAdjustment;
2621 ULONG TimeIncrement;
2622 BOOLEAN TimeAdjustmentDisabled;
2623 } SYSTEM_TIME_ADJUSTMENT_QUERY, *PSYSTEM_TIME_ADJUSTMENT_QUERY;
2624
2625 typedef struct _SYSTEM_TIME_ADJUSTMENT {
2626 ULONG TimeAdjustment;
2627 BOOLEAN TimeAdjustmentDisabled;
2628 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
2629
2630 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
2631 {
2632 SystemFirmwareTable_Enumerate = 0,
2633 SystemFirmwareTable_Get = 1
2634 } SYSTEM_FIRMWARE_TABLE_ACTION, *PSYSTEM_FIRMWARE_TABLE_ACTION;
2635
2636 /* System Information Class 0x4C */
2637
2638 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
2639 {
2640 ULONG ProviderSignature;
2641 SYSTEM_FIRMWARE_TABLE_ACTION Action;
2642 ULONG TableID;
2643 ULONG TableBufferLength;
2644 UCHAR TableBuffer[1];
2645 } SYSTEM_FIRMWARE_TABLE_INFORMATION, *PSYSTEM_FIRMWARE_TABLE_INFORMATION;
2646
2647 typedef struct _TIME_FIELDS
2648 { CSHORT Year;
2649 CSHORT Month;
2650 CSHORT Day;
2651 CSHORT Hour;
2652 CSHORT Minute;
2653 CSHORT Second;
2654 CSHORT Milliseconds;
2655 CSHORT Weekday;
2656 } TIME_FIELDS, *PTIME_FIELDS;
2657
2658 typedef struct _WINSTATIONINFORMATIONW {
2659 BYTE Reserved2[70];
2660 ULONG LogonId;
2661 BYTE Reserved3[1140];
2662 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
2663
2664 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
2665
2666 typedef struct _LDR_RESOURCE_INFO
2667 {
2668 ULONG_PTR Type;
2669 ULONG_PTR Name;
2670 ULONG Language;
2671 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
2672
2673
2674 /* debug buffer definitions */
2675
2676 typedef struct _DEBUG_BUFFER {
2677 HANDLE SectionHandle;
2678 PVOID SectionBase;
2679 PVOID RemoteSectionBase;
2680 ULONG SectionBaseDelta;
2681 HANDLE EventPairHandle;
2682 ULONG Unknown[2];
2683 HANDLE RemoteThreadHandle;
2684 ULONG InfoClassMask;
2685 ULONG SizeOfInfo;
2686 ULONG AllocatedSize;
2687 ULONG SectionSize;
2688 PVOID ModuleInformation;
2689 PVOID BackTraceInformation;
2690 PVOID HeapInformation;
2691 PVOID LockInformation;
2692 PVOID Reserved[8];
2693 } DEBUG_BUFFER, *PDEBUG_BUFFER;
2694
2695 #define PDI_MODULES 0x01
2696 #define PDI_BACKTRACE 0x02
2697 #define PDI_HEAPS 0x04
2698 #define PDI_HEAP_TAGS 0x08
2699 #define PDI_HEAP_BLOCKS 0x10
2700 #define PDI_LOCKS 0x20
2701
2702 typedef struct _DEBUG_MODULE_INFORMATION {
2703 ULONG Reserved[2];
2704 ULONG Base;
2705 ULONG Size;
2706 ULONG Flags;
2707 USHORT Index;
2708 USHORT Unknown;
2709 USHORT LoadCount;
2710 USHORT ModuleNameOffset;
2711 CHAR ImageName[256];
2712 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
2713
2714 typedef struct _DEBUG_HEAP_INFORMATION {
2715 ULONG Base;
2716 ULONG Flags;
2717 USHORT Granularity;
2718 USHORT Unknown;
2719 ULONG Allocated;
2720 ULONG Committed;
2721 ULONG TagCount;
2722 ULONG BlockCount;
2723 ULONG Reserved[7];
2724 PVOID Tags;
2725 PVOID Blocks;
2726 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
2727
2728 typedef struct _DEBUG_LOCK_INFORMATION {
2729 PVOID Address;
2730 USHORT Type;
2731 USHORT CreatorBackTraceIndex;
2732 ULONG OwnerThreadId;
2733 ULONG ActiveCount;
2734 ULONG ContentionCount;
2735 ULONG EntryCount;
2736 ULONG RecursionCount;
2737 ULONG NumberOfSharedWaiters;
2738 ULONG NumberOfExclusiveWaiters;
2739 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
2740
2741 typedef struct _PORT_MESSAGE_HEADER {
2742 USHORT DataSize;
2743 USHORT MessageSize;
2744 USHORT MessageType;
2745 USHORT VirtualRangesOffset;
2746 CLIENT_ID ClientId;
2747 ULONG MessageId;
2748 ULONG SectionSize;
2749 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
2750
2751 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
2752
2753 typedef enum _ATOM_INFORMATION_CLASS {
2754 AtomBasicInformation = 0,
2755 AtomTableInformation = 1,
2756 } ATOM_INFORMATION_CLASS;
2757
2758 typedef struct _ATOM_BASIC_INFORMATION {
2759 USHORT ReferenceCount;
2760 USHORT Pinned;
2761 USHORT NameLength;
2762 WCHAR Name[1];
2763 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
2764
2765 /* FIXME: names probably not correct */
2766 typedef struct _RTL_HANDLE
2767 {
2768 struct _RTL_HANDLE * Next;
2769 } RTL_HANDLE;
2770
2771 /* FIXME: names probably not correct */
2772 typedef struct _RTL_HANDLE_TABLE
2773 {
2774 ULONG MaxHandleCount; /* 0x00 */
2775 ULONG HandleSize; /* 0x04 */
2776 ULONG Unused[2]; /* 0x08-0x0c */
2777 PVOID NextFree; /* 0x10 */
2778 PVOID FirstHandle; /* 0x14 */
2779 PVOID ReservedMemory; /* 0x18 */
2780 PVOID MaxHandle; /* 0x1c */
2781 } RTL_HANDLE_TABLE;
2782
2783 typedef struct _RTL_ATOM_TABLE_ENTRY
2784 {
2785 struct _RTL_ATOM_TABLE_ENTRY *HashLink;
2786 WORD HandleIndex;
2787 WORD Atom;
2788 WORD ReferenceCount;
2789 UCHAR Flags;
2790 UCHAR NameLength;
2791 WCHAR Name[1];
2792 } RTL_ATOM_TABLE_ENTRY, *PRTL_ATOM_TABLE_ENTRY;
2793
2794 typedef struct _RTL_ATOM_TABLE
2795 {
2796 ULONG Signature;
2797 RTL_CRITICAL_SECTION CriticalSection;
2798 RTL_HANDLE_TABLE HandleTable;
2799 ULONG NumberOfBuckets;
2800 RTL_ATOM_TABLE_ENTRY *Buckets[1];
2801 } *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
2802
2803 /***********************************************************************
2804 * Defines
2805 */
2806
2807 /* flags for NtCreateFile and NtOpenFile */
2808 #define FILE_DIRECTORY_FILE 0x00000001
2809 #define FILE_WRITE_THROUGH 0x00000002
2810 #define FILE_SEQUENTIAL_ONLY 0x00000004
2811 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
2812 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
2813 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
2814 #define FILE_NON_DIRECTORY_FILE 0x00000040
2815 #define FILE_CREATE_TREE_CONNECTION 0x00000080
2816 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
2817 #define FILE_NO_EA_KNOWLEDGE 0x00000200
2818 #define FILE_OPEN_FOR_RECOVERY 0x00000400
2819 #define FILE_RANDOM_ACCESS 0x00000800
2820 #define FILE_DELETE_ON_CLOSE 0x00001000
2821 #define FILE_OPEN_BY_FILE_ID 0x00002000
2822 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
2823 #define FILE_NO_COMPRESSION 0x00008000
2824 #define FILE_RESERVE_OPFILTER 0x00100000
2825 #define FILE_OPEN_REPARSE_POINT 0x00200000
2826 #define FILE_OPEN_OFFLINE_FILE 0x00400000
2827 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
2828
2829 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
2830 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
2831
2832 /* status for NtCreateFile or NtOpenFile */
2833 #define FILE_SUPERSEDED 0
2834 #define FILE_OPENED 1
2835 #define FILE_CREATED 2
2836 #define FILE_OVERWRITTEN 3
2837 #define FILE_EXISTS 4
2838 #define FILE_DOES_NOT_EXIST 5
2839
2840 /* disposition for NtCreateFile */
2841 #define FILE_SUPERSEDE 0
2842 #define FILE_OPEN 1
2843 #define FILE_CREATE 2
2844 #define FILE_OPEN_IF 3
2845 #define FILE_OVERWRITE 4
2846 #define FILE_OVERWRITE_IF 5
2847 #define FILE_MAXIMUM_DISPOSITION 5
2848
2849 /* Characteristics of a File System */
2850 #define FILE_REMOVABLE_MEDIA 0x00000001
2851 #define FILE_READ_ONLY_DEVICE 0x00000002
2852 #define FILE_FLOPPY_DISKETTE 0x00000004
2853 #define FILE_WRITE_ONE_MEDIA 0x00000008
2854 #define FILE_REMOTE_DEVICE 0x00000010
2855 #define FILE_DEVICE_IS_MOUNTED 0x00000020
2856 #define FILE_VIRTUAL_VOLUME 0x00000040
2857 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
2858 #define FILE_DEVICE_SECURE_OPEN 0x00000100
2859 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
2860 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
2861 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
2862 #define FILE_CHARACTERISTIC_CSV 0x00010000
2863 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
2864 #define FILE_PORTABLE_DEVICE 0x00040000
2865
2866 /* options for NtCreateNamedPipeFile */
2867 #define FILE_PIPE_INBOUND 0x00000000
2868 #define FILE_PIPE_OUTBOUND 0x00000001
2869 #define FILE_PIPE_FULL_DUPLEX 0x00000002
2870
2871 /* options for pipe's type */
2872 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
2873 #define FILE_PIPE_TYPE_BYTE 0x00000000
2874 /* options for pipe's message mode */
2875 #define FILE_PIPE_MESSAGE_MODE 0x00000001
2876 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
2877 /* options for pipe's blocking mode */
2878 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
2879 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
2880 /* and client / server end */
2881 #define FILE_PIPE_SERVER_END 0x00000001
2882 #define FILE_PIPE_CLIENT_END 0x00000000
2883
2884 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
2885
2886 #define LOGONID_CURRENT ((ULONG)-1)
2887
2888 #define OBJ_PROTECT_CLOSE 0x00000001
2889 #define OBJ_INHERIT 0x00000002
2890 #define OBJ_PERMANENT 0x00000010
2891 #define OBJ_EXCLUSIVE 0x00000020
2892 #define OBJ_CASE_INSENSITIVE 0x00000040
2893 #define OBJ_OPENIF 0x00000080
2894 #define OBJ_OPENLINK 0x00000100
2895 #define OBJ_KERNEL_HANDLE 0x00000200
2896 #define OBJ_VALID_ATTRIBUTES 0x000003F2
2897
2898 #define SERVERNAME_CURRENT ((HANDLE)NULL)
2899
2900 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
2901 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
2902 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
2903 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
2904
2905
2906 /* DbgPrintEx default levels */
2907 #define DPFLTR_ERROR_LEVEL 0
2908 #define DPFLTR_WARNING_LEVEL 1
2909 #define DPFLTR_TRACE_LEVEL 2
2910 #define DPFLTR_INFO_LEVEL 3
2911 #define DPFLTR_MASK 0x8000000
2912
2913 /* Well-known LUID values */
2914 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
2915 #define SE_CREATE_TOKEN_PRIVILEGE 2
2916 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
2917 #define SE_LOCK_MEMORY_PRIVILEGE 4
2918 #define SE_INCREASE_QUOTA_PRIVILEGE 5
2919 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
2920 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
2921 #define SE_TCB_PRIVILEGE 7
2922 #define SE_SECURITY_PRIVILEGE 8
2923 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
2924 #define SE_LOAD_DRIVER_PRIVILEGE 10
2925 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
2926 #define SE_SYSTEMTIME_PRIVILEGE 12
2927 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
2928 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
2929 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
2930 #define SE_CREATE_PERMANENT_PRIVILEGE 16
2931 #define SE_BACKUP_PRIVILEGE 17
2932 #define SE_RESTORE_PRIVILEGE 18
2933 #define SE_SHUTDOWN_PRIVILEGE 19
2934 #define SE_DEBUG_PRIVILEGE 20
2935 #define SE_AUDIT_PRIVILEGE 21
2936 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
2937 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
2938 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
2939 #define SE_UNDOCK_PRIVILEGE 25
2940 #define SE_SYNC_AGENT_PRIVILEGE 26
2941 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
2942 #define SE_MANAGE_VOLUME_PRIVILEGE 28
2943 #define SE_IMPERSONATE_PRIVILEGE 29
2944 #define SE_CREATE_GLOBAL_PRIVILEGE 30
2945 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
2946
2947 /* NtGlobalFlag bits */
2948 #define FLG_STOP_ON_EXCEPTION 0x00000001
2949 #define FLG_SHOW_LDR_SNAPS 0x00000002
2950 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
2951 #define FLG_STOP_ON_HUNG_GUI 0x00000008
2952 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
2953 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
2954 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
2955 #define FLG_HEAP_VALIDATE_ALL 0x00000080
2956 #define FLG_APPLICATION_VERIFIER 0x00000100
2957 #define FLG_POOL_ENABLE_TAGGING 0x00000400
2958 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
2959 #define FLG_USER_STACK_TRACE_DB 0x00001000
2960 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
2961 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
2962 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
2963 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
2964 #define FLG_ENABLE_CSRDEBUG 0x00020000
2965 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
2966 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
2967 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
2968 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
2969 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
2970 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
2971 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
2972 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
2973 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
2974 #define FLG_DISABLE_DBGPRINT 0x08000000
2975 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
2976 #define FLG_LDR_TOP_DOWN 0x20000000
2977 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
2978 #define FLG_DISABLE_PROTDLLS 0x80000000
2979
2980 /* Rtl*Registry* functions structs and defines */
2981 #define RTL_REGISTRY_ABSOLUTE 0
2982 #define RTL_REGISTRY_SERVICES 1
2983 #define RTL_REGISTRY_CONTROL 2
2984 #define RTL_REGISTRY_WINDOWS_NT 3
2985 #define RTL_REGISTRY_DEVICEMAP 4
2986 #define RTL_REGISTRY_USER 5
2987
2988 #define RTL_REGISTRY_HANDLE 0x40000000
2989 #define RTL_REGISTRY_OPTIONAL 0x80000000
2990
2991 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
2992 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
2993 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
2994 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
2995 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
2996 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
2997 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
2998 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
2999
3000 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
3001
3002 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
3003 ULONG ValueType,
3004 PVOID ValueData,
3005 ULONG ValueLength,
3006 PVOID Context,
3007 PVOID EntryContext);
3008
3009 typedef struct _RTL_QUERY_REGISTRY_TABLE
3010 {
3011 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
3012 ULONG Flags;
3013 PWSTR Name;
3014 PVOID EntryContext;
3015 ULONG DefaultType;
3016 PVOID DefaultData;
3017 ULONG DefaultLength;
3018 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
3019
3020 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
3021 {
3022 PUNICODE_STRING ValueName;
3023 ULONG DataLength;
3024 ULONG DataOffset;
3025 ULONG Type;
3026 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
3027
3028 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
3029
3030 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
3031
3032 typedef enum _EVENT_INFORMATION_CLASS {
3033 EventBasicInformation
3034 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
3035
3036 typedef struct _EVENT_BASIC_INFORMATION {
3037 EVENT_TYPE EventType;
3038 LONG EventState;
3039 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
3040
3041 typedef enum _SEMAPHORE_INFORMATION_CLASS {
3042 SemaphoreBasicInformation
3043 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
3044
3045 typedef struct _SEMAPHORE_BASIC_INFORMATION {
3046 ULONG CurrentCount;
3047 ULONG MaximumCount;
3048 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
3049
3050 typedef enum _SECTION_INFORMATION_CLASS
3051 {
3052 SectionBasicInformation,
3053 SectionImageInformation,
3054 SectionRelocationInformation,
3055 SectionOriginalBaseInformation,
3056 SectionInternalImageInformation
3057 } SECTION_INFORMATION_CLASS;
3058
3059 typedef struct _SECTION_BASIC_INFORMATION {
3060 PVOID BaseAddress;
3061 ULONG Attributes;
3062 LARGE_INTEGER Size;
3063 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
3064
3065 typedef struct _SECTION_IMAGE_INFORMATION {
3066 PVOID TransferAddress;
3067 ULONG ZeroBits;
3068 SIZE_T MaximumStackSize;
3069 SIZE_T CommittedStackSize;
3070 ULONG SubSystemType;
3071 USHORT MinorSubsystemVersion;
3072 USHORT MajorSubsystemVersion;
3073 USHORT MajorOperatingSystemVersion;
3074 USHORT MinorOperatingSystemVersion;
3075 USHORT ImageCharacteristics;
3076 USHORT DllCharacteristics;
3077 USHORT Machine;
3078 BOOLEAN ImageContainsCode;
3079 union
3080 {
3081 UCHAR ImageFlags;
3082 struct
3083 {
3084 UCHAR ComPlusNativeReady : 1;
3085 UCHAR ComPlusILOnly : 1;
3086 UCHAR ImageDynamicallyRelocated : 1;
3087 UCHAR ImageMappedFlat : 1;
3088 UCHAR BaseBelow4gb : 1;
3089 UCHAR ComPlusPrefer32bit : 1;
3090 #ifdef __WINESRC__ /* Wine extensions */
3091 UCHAR WineBuiltin : 1;
3092 UCHAR WineFakeDll : 1;
3093 #else
3094 UCHAR Reserved : 2;
3095 #endif
3096 } DUMMYSTRUCTNAME;
3097 } DUMMYUNIONNAME;
3098 ULONG LoaderFlags;
3099 ULONG ImageFileSize;
3100 ULONG CheckSum;
3101 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
3102
3103 typedef struct _LPC_SECTION_WRITE {
3104 ULONG Length;
3105 HANDLE SectionHandle;
3106 ULONG SectionOffset;
3107 ULONG ViewSize;
3108 PVOID ViewBase;
3109 PVOID TargetViewBase;
3110 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
3111
3112 typedef struct _LPC_SECTION_READ {
3113 ULONG Length;
3114 ULONG ViewSize;
3115 PVOID ViewBase;
3116 } LPC_SECTION_READ, *PLPC_SECTION_READ;
3117
3118 typedef struct _LPC_MESSAGE {
3119 USHORT DataSize;
3120 USHORT MessageSize;
3121 USHORT MessageType;
3122 USHORT VirtualRangesOffset;
3123 CLIENT_ID ClientId;
3124 ULONG_PTR MessageId;
3125 ULONG_PTR SectionSize;
3126 UCHAR Data[ANYSIZE_ARRAY];
3127 } LPC_MESSAGE, *PLPC_MESSAGE;
3128
3129 typedef struct _RTL_USER_PROCESS_INFORMATION
3130 {
3131 ULONG Length;
3132 HANDLE Process;
3133 HANDLE Thread;
3134 CLIENT_ID ClientId;
3135 SECTION_IMAGE_INFORMATION ImageInformation;
3136 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
3137
3138 typedef enum _SHUTDOWN_ACTION {
3139 ShutdownNoReboot,
3140 ShutdownReboot,
3141 ShutdownPowerOff
3142 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
3143
3144 typedef enum _KPROFILE_SOURCE {
3145 ProfileTime,
3146 ProfileAlignmentFixup,
3147 ProfileTotalIssues,
3148 ProfilePipelineDry,
3149 ProfileLoadInstructions,
3150 ProfilePipelineFrozen,
3151 ProfileBranchInstructions,
3152 ProfileTotalNonissues,
3153 ProfileDcacheMisses,
3154 ProfileIcacheMisses,
3155 ProfileCacheMisses,
3156 ProfileBranchMispredictions,
3157 ProfileStoreInstructions,
3158 ProfileFpInstructions,
3159 ProfileIntegerInstructions,
3160 Profile2Issue,
3161 Profile3Issue,
3162 Profile4Issue,
3163 ProfileSpecialInstructions,
3164 ProfileTotalCycles,
3165 ProfileIcacheIssues,
3166 ProfileDcacheAccesses,
3167 ProfileMemoryBarrierCycles,
3168 ProfileLoadLinkedIssues,
3169 ProfileMaximum
3170 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
3171
3172 typedef struct _DIRECTORY_BASIC_INFORMATION {
3173 UNICODE_STRING ObjectName;
3174 UNICODE_STRING ObjectTypeName;
3175 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
3176
3177 typedef struct _INITIAL_TEB {
3178 void *OldStackBase;
3179 void *OldStackLimit;
3180 void *StackBase;
3181 void *StackLimit;
3182 void *DeallocationStack;
3183 } INITIAL_TEB, *PINITIAL_TEB;
3184
3185 typedef enum _PORT_INFORMATION_CLASS {
3186 PortNoInformation
3187 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
3188
3189 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
3190 IoCompletionBasicInformation
3191 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
3192
3193 typedef struct _FILE_COMPLETION_INFORMATION {
3194 HANDLE CompletionPort;
3195 ULONG_PTR CompletionKey;
3196 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
3197
3198 #define IO_COMPLETION_QUERY_STATE 0x0001
3199 #define IO_COMPLETION_MODIFY_STATE 0x0002
3200 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
3201
3202 typedef struct _FILE_IO_COMPLETION_INFORMATION {
3203 ULONG_PTR CompletionKey;
3204 ULONG_PTR CompletionValue;
3205 IO_STATUS_BLOCK IoStatusBlock;
3206 } FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
3207
3208 typedef enum _HARDERROR_RESPONSE_OPTION {
3209 OptionAbortRetryIgnore,
3210 OptionOk,
3211 OptionOkCancel,
3212 OptionRetryCancel,
3213 OptionYesNo,
3214 OptionYesNoCancel,
3215 OptionShutdownSystem
3216 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
3217
3218 typedef enum _HARDERROR_RESPONSE {
3219 ResponseReturnToCaller,
3220 ResponseNotHandled,
3221 ResponseAbort,
3222 ResponseCancel,
3223 ResponseIgnore,
3224 ResponseNo,
3225 ResponseOk,
3226 ResponseRetry,
3227 ResponseYes
3228 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
3229
3230 typedef enum _SYSDBG_COMMAND {
3231 SysDbgQueryModuleInformation,
3232 SysDbgQueryTraceInformation,
3233 SysDbgSetTracepoint,
3234 SysDbgSetSpecialCall,
3235 SysDbgClearSpecialCalls,
3236 SysDbgQuerySpecialCalls,
3237 SysDbgBreakPoint,
3238 SysDbgQueryVersion,
3239 SysDbgReadVirtual,
3240 SysDbgWriteVirtual,
3241 SysDbgReadPhysical,
3242 SysDbgWritePhysical,
3243 SysDbgReadControlSpace,
3244 SysDbgWriteControlSpace,
3245 SysDbgReadIoSpace,
3246 SysDbgWriteIoSpace,
3247 SysDbgReadMsr,
3248 SysDbgWriteMsr,
3249 SysDbgReadBusData,
3250 SysDbgWriteBusData
3251 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
3252
3253 typedef struct _CPTABLEINFO
3254 {
3255 USHORT CodePage;
3256 USHORT MaximumCharacterSize;
3257 USHORT DefaultChar;
3258 USHORT UniDefaultChar;
3259 USHORT TransDefaultChar;
3260 USHORT TransUniDefaultChar;
3261 USHORT DBCSCodePage;
3262 UCHAR LeadByte[12];
3263 USHORT *MultiByteTable;
3264 void *WideCharTable;
3265 USHORT *DBCSRanges;
3266 USHORT *DBCSOffsets;
3267 } CPTABLEINFO, *PCPTABLEINFO;
3268
3269 typedef struct _NLSTABLEINFO
3270 {
3271 CPTABLEINFO OemTableInfo;
3272 CPTABLEINFO AnsiTableInfo;
3273 USHORT *UpperCaseTable;
3274 USHORT *LowerCaseTable;
3275 } NLSTABLEINFO, *PNLSTABLEINFO;
3276
3277 /*************************************************************************
3278 * Loader structures
3279 *
3280 * Those are not part of standard Winternl.h
3281 */
3282
3283 typedef struct _LDR_SERVICE_TAG_RECORD
3284 {
3285 struct _LDR_SERVICE_TAG_RECORD *Next;
3286 ULONG ServiceTag;
3287 } LDR_SERVICE_TAG_RECORD, *PLDR_SERVICE_TAG_RECORD;
3288
3289 typedef struct _LDRP_CSLIST
3290 {
3291 SINGLE_LIST_ENTRY *Tail;
3292 } LDRP_CSLIST, *PLDRP_CSLIST;
3293
3294 typedef struct _LDR_DEPENDENCY
3295 {
3296 SINGLE_LIST_ENTRY dependency_to_entry;
3297 struct _LDR_DDAG_NODE *dependency_to;
3298 SINGLE_LIST_ENTRY dependency_from_entry;
3299 struct _LDR_DDAG_NODE *dependency_from;
3300 } LDR_DEPENDENCY, *PLDR_DEPENDENCY;
3301
3302 typedef enum _LDR_DDAG_STATE
3303 {
3304 LdrModulesMerged = -5,
3305 LdrModulesInitError = -4,
3306 LdrModulesSnapError = -3,
3307 LdrModulesUnloaded = -2,
3308 LdrModulesUnloading = -1,
3309 LdrModulesPlaceHolder = 0,
3310 LdrModulesMapping = 1,
3311 LdrModulesMapped = 2,
3312 LdrModulesWaitingForDependencies = 3,
3313 LdrModulesSnapping = 4,
3314 LdrModulesSnapped = 5,
3315 LdrModulesCondensed = 6,
3316 LdrModulesReadyToInit = 7,
3317 LdrModulesInitializing = 8,
3318 LdrModulesReadyToRun = 9,
3319 } LDR_DDAG_STATE;
3320
3321 typedef struct _LDR_DDAG_NODE
3322 {
3323 LIST_ENTRY Modules;
3324 LDR_SERVICE_TAG_RECORD *ServiceTagList;
3325 LONG LoadCount;
3326 ULONG LoadWhileUnloadingCount;
3327 ULONG LowestLink;
3328 LDRP_CSLIST Dependencies;
3329 LDRP_CSLIST IncomingDependencies;
3330 LDR_DDAG_STATE State;
3331 SINGLE_LIST_ENTRY CondenseLink;
3332 ULONG PreorderNumber;
3333 } LDR_DDAG_NODE, *PLDR_DDAG_NODE;
3334
3335 typedef enum _LDR_DLL_LOAD_REASON
3336 {
3337 LoadReasonStaticDependency,
3338 LoadReasonStaticForwarderDependency,
3339 LoadReasonDynamicForwarderDependency,
3340 LoadReasonDelayloadDependency,
3341 LoadReasonDynamicLoad,
3342 LoadReasonAsImageLoad,
3343 LoadReasonAsDataLoad,
3344 LoadReasonUnknown = -1
3345 } LDR_DLL_LOAD_REASON, *PLDR_DLL_LOAD_REASON;
3346
3347 typedef struct _LDR_DATA_TABLE_ENTRY
3348 {
3349 LIST_ENTRY InLoadOrderLinks;
3350 LIST_ENTRY InMemoryOrderLinks;
3351 LIST_ENTRY InInitializationOrderLinks;
3352 void* DllBase;
3353 void* EntryPoint;
3354 ULONG SizeOfImage;
3355 UNICODE_STRING FullDllName;
3356 UNICODE_STRING BaseDllName;
3357 ULONG Flags;
3358 SHORT LoadCount;
3359 SHORT TlsIndex;
3360 LIST_ENTRY HashLinks;
3361 ULONG TimeDateStamp;
3362 HANDLE ActivationContext;
3363 void* Lock;
3364 LDR_DDAG_NODE* DdagNode;
3365 LIST_ENTRY NodeModuleLink;
3366 struct _LDRP_LOAD_CONTEXT *LoadContext;
3367 void* ParentDllBase;
3368 void* SwitchBackContext;
3369 RTL_BALANCED_NODE BaseAddressIndexNode;
3370 RTL_BALANCED_NODE MappingInfoIndexNode;
3371 ULONG_PTR OriginalBase;
3372 LARGE_INTEGER LoadTime;
3373 ULONG BaseNameHashValue;
3374 LDR_DLL_LOAD_REASON LoadReason;
3375 ULONG ImplicitPathOptions;
3376 ULONG ReferenceCount;
3377 } LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
3378
3379 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
3380 {
3381 ULONG Flags;
3382 const UNICODE_STRING *FullDllName;
3383 const UNICODE_STRING *BaseDllName;
3384 void *DllBase;
3385 ULONG SizeOfImage;
3386 } LDR_DLL_LOADED_NOTIFICATION_DATA, *PLDR_DLL_LOADED_NOTIFICATION_DATA;
3387
3388 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
3389 {
3390 ULONG Flags;
3391 const UNICODE_STRING *FullDllName;
3392 const UNICODE_STRING *BaseDllName;
3393 void *DllBase;
3394 ULONG SizeOfImage;
3395 } LDR_DLL_UNLOADED_NOTIFICATION_DATA, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
3396
3397 typedef union _LDR_DLL_NOTIFICATION_DATA
3398 {
3399 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
3400 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
3401 } LDR_DLL_NOTIFICATION_DATA, *PLDR_DLL_NOTIFICATION_DATA;
3402
3403 typedef void (CALLBACK *PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA*, void*);
3404
3405 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
3406 #define LDR_IMAGE_IS_DLL 0x00000004
3407 #define LDR_LOAD_IN_PROGRESS 0x00001000
3408 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
3409 #define LDR_NO_DLL_CALLS 0x00040000
3410 #define LDR_PROCESS_ATTACHED 0x00080000
3411 #define LDR_COR_IMAGE 0x00400000
3412 #define LDR_COR_ILONLY 0x01000000
3413
3414 /* these ones is Wine specific */
3415 #define LDR_DONT_RESOLVE_REFS 0x40000000
3416 #define LDR_WINE_INTERNAL 0x80000000
3417
3418 /* flag for LdrAddRefDll */
3419 #define LDR_ADDREF_DLL_PIN 0x00000001
3420
3421 /* flags for LdrGetDllHandleEx */
3422 #define LDR_GET_DLL_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT 0x00000001
3423 #define LDR_GET_DLL_HANDLE_EX_FLAG_PIN 0x00000002
3424
3425 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
3426 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
3427
3428 /* FIXME: to be checked */
3429 #define MAXIMUM_FILENAME_LENGTH 256
3430
3431 typedef struct _RTL_PROCESS_MODULE_INFORMATION
3432 {
3433 PVOID Section; /* 00/00 */
3434 PVOID MappedBaseAddress; /* 04/08 */
3435 PVOID ImageBaseAddress; /* 08/10 */
3436 ULONG ImageSize; /* 0c/18 */
3437 ULONG Flags; /* 10/1c */
3438 WORD LoadOrderIndex; /* 14/20 */
3439 WORD InitOrderIndex; /* 16/22 */
3440 WORD LoadCount; /* 18/24 */
3441 WORD NameOffset; /* 1a/26 */
3442 BYTE Name[MAXIMUM_FILENAME_LENGTH]; /* 1c/28 */
3443 } RTL_PROCESS_MODULE_INFORMATION, *PRTL_PROCESS_MODULE_INFORMATION;
3444
3445 typedef struct _RTL_PROCESS_MODULES
3446 {
3447 ULONG ModulesCount;
3448 RTL_PROCESS_MODULE_INFORMATION Modules[1]; /* FIXME: should be Modules[0] */
3449 } RTL_PROCESS_MODULES, *PRTL_PROCESS_MODULES;
3450
3451 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
3452 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
3453 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
3454 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
3455 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
3456 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
3457 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
3458 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
3459 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
3460 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
3461 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
3462
3463 typedef struct _RTL_PROCESS_MODULE_INFORMATION_EX
3464 {
3465 USHORT NextOffset;
3466 RTL_PROCESS_MODULE_INFORMATION BaseInfo;
3467 ULONG ImageCheckSum;
3468 ULONG TimeDateStamp;
3469 void *DefaultBase;
3470 } RTL_PROCESS_MODULE_INFORMATION_EX;
3471
3472 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
3473 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
3474 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
3475 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
3476 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
3477 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
3478
3479 #define EH_NONCONTINUABLE 0x01
3480 #define EH_UNWINDING 0x02
3481 #define EH_EXIT_UNWIND 0x04
3482 #define EH_STACK_INVALID 0x08
3483 #define EH_NESTED_CALL 0x10
3484 #define EH_TARGET_UNWIND 0x20
3485 #define EH_COLLIDED_UNWIND 0x40
3486
3487 #ifdef __WINESRC__
3488
3489 /* Wine-specific exceptions codes */
3490
3491 #define EXCEPTION_WINE_STUB 0x80000100 /* stub entry point called */
3492 #define EXCEPTION_WINE_ASSERTION 0x80000101 /* assertion failed */
3493
3494 /* Wine extension; Windows doesn't have a name for this code. This is an
3495 undocumented exception understood by MS VC debugger, allowing the program
3496 to name a particular thread. */
3497 #define EXCEPTION_WINE_NAME_THREAD 0x406D1388
3498
3499 /* used for C++ exceptions in msvcrt
3500 * parameters:
3501 * [0] CXX_FRAME_MAGIC
3502 * [1] pointer to exception object
3503 * [2] pointer to type
3504 */
3505 #define EXCEPTION_WINE_CXX_EXCEPTION 0xe06d7363
3506 #define EXCEPTION_WINE_CXX_FRAME_MAGIC 0x19930520
3507
3508 #endif
3509
3510 typedef LONG (CALLBACK *PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS);
3511
3512 typedef void (CALLBACK *PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE,void*,void*,IO_STATUS_BLOCK*,PTP_IO);
3513
3514 #define PS_ATTRIBUTE_THREAD 0x00010000
3515 #define PS_ATTRIBUTE_INPUT 0x00020000
3516 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
3517
3518 typedef enum _PS_ATTRIBUTE_NUM
3519 {
3520 PsAttributeParentProcess,
3521 PsAttributeDebugPort,
3522 PsAttributeToken,
3523 PsAttributeClientId,
3524 PsAttributeTebAddress,
3525 PsAttributeImageName,
3526 PsAttributeImageInfo,
3527 PsAttributeMemoryReserve,
3528 PsAttributePriorityClass,
3529 PsAttributeErrorMode,
3530 PsAttributeStdHandleInfo,
3531 PsAttributeHandleList,
3532 PsAttributeGroupAffinity,
3533 PsAttributePreferredNode,
3534 PsAttributeIdealProcessor,
3535 PsAttributeUmsThread,
3536 PsAttributeMitigationOptions,
3537 PsAttributeProtectionLevel,
3538 PsAttributeSecureProcess,
3539 PsAttributeJobList,
3540 PsAttributeChildProcessPolicy,
3541 PsAttributeAllApplicationPackagesPolicy,
3542 PsAttributeWin32kFilter,
3543 PsAttributeSafeOpenPromptOriginClaim,
3544 PsAttributeBnoIsolation,
3545 PsAttributeDesktopAppPolicy,
3546 PsAttributeChpe,
3547 PsAttributeMax
3548 } PS_ATTRIBUTE_NUM;
3549
3550 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3551 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3552 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3553 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
3554 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
3555 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
3556 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
3557 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
3558 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
3559 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
3560 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
3561 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
3562 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3563 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
3564 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3565 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
3566 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
3567 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
3568 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
3569 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
3570 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
3571 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
3572 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
3573 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
3574 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
3575
3576 typedef struct _PS_ATTRIBUTE
3577 {
3578 ULONG_PTR Attribute;
3579 SIZE_T Size;
3580 union
3581 {
3582 ULONG_PTR Value;
3583 void *ValuePtr;
3584 };
3585 SIZE_T *ReturnLength;
3586 } PS_ATTRIBUTE;
3587
3588 typedef struct _PS_ATTRIBUTE_LIST
3589 {
3590 SIZE_T TotalLength;
3591 PS_ATTRIBUTE Attributes[1];
3592 } PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
3593
3594 typedef enum _PS_CREATE_STATE
3595 {
3596 PsCreateInitialState,
3597 PsCreateFailOnFileOpen,
3598 PsCreateFailOnSectionCreate,
3599 PsCreateFailExeFormat,
3600 PsCreateFailMachineMismatch,
3601 PsCreateFailExeName,
3602 PsCreateSuccess,
3603 PsCreateMaximumStates
3604 } PS_CREATE_STATE;
3605
3606 typedef struct _PS_CREATE_INFO
3607 {
3608 SIZE_T Size;
3609 PS_CREATE_STATE State;
3610 union
3611 {
3612 struct
3613 {
3614 union
3615 {
3616 ULONG InitFlags;
3617 struct
3618 {
3619 UCHAR WriteOutputOnExit : 1;
3620 UCHAR DetectManifest : 1;
3621 UCHAR IFEOSkipDebugger : 1;
3622 UCHAR IFEODoNotPropagateKeyState : 1;
3623 UCHAR SpareBits1 : 4;
3624 UCHAR SpareBits2 : 8;
3625 USHORT ProhibitedImageCharacteristics : 16;
3626 };
3627 };
3628 ACCESS_MASK AdditionalFileAccess;
3629 } InitState;
3630 struct
3631 {
3632 HANDLE FileHandle;
3633 } FailSection;
3634 struct
3635 {
3636 USHORT DllCharacteristics;
3637 } ExeFormat;
3638 struct
3639 {
3640 HANDLE IFEOKey;
3641 } ExeName;
3642 struct
3643 {
3644 union
3645 {
3646 ULONG OutputFlags;
3647 struct
3648 {
3649 UCHAR ProtectedProcess : 1;
3650 UCHAR AddressSpaceOverride : 1;
3651 UCHAR DevOverrideEnabled : 1;
3652 UCHAR ManifestDetected : 1;
3653 UCHAR ProtectedProcessLight : 1;
3654 UCHAR SpareBits1 : 3;
3655 UCHAR SpareBits2 : 8;
3656 USHORT SpareBits3 : 16;
3657 };
3658 };
3659 HANDLE FileHandle;
3660 HANDLE SectionHandle;
3661 ULONGLONG UserProcessParametersNative;
3662 ULONG UserProcessParametersWow64;
3663 ULONG CurrentParameterFlags;
3664 ULONGLONG PebAddressNative;
3665 ULONG PebAddressWow64;
3666 ULONGLONG ManifestAddress;
3667 ULONG ManifestSize;
3668 } SuccessState;
3669 };
3670 } PS_CREATE_INFO, *PPS_CREATE_INFO;
3671
3672 typedef struct _DBGKM_EXCEPTION
3673 {
3674 EXCEPTION_RECORD ExceptionRecord;
3675 ULONG FirstChance;
3676 } DBGKM_EXCEPTION, *PDBGKM_EXCEPTION;
3677
3678 typedef struct _DBGKM_CREATE_THREAD
3679 {
3680 ULONG SubSystemKey;
3681 PVOID StartAddress;
3682 } DBGKM_CREATE_THREAD, *PDBGKM_CREATE_THREAD;
3683
3684 typedef struct _DBGKM_CREATE_PROCESS
3685 {
3686 ULONG SubSystemKey;
3687 HANDLE FileHandle;
3688 PVOID BaseOfImage;
3689 ULONG DebugInfoFileOffset;
3690 ULONG DebugInfoSize;
3691 DBGKM_CREATE_THREAD InitialThread;
3692 } DBGKM_CREATE_PROCESS, *PDBGKM_CREATE_PROCESS;
3693
3694 typedef struct _DBGKM_EXIT_THREAD
3695 {
3696 NTSTATUS ExitStatus;
3697 } DBGKM_EXIT_THREAD, *PDBGKM_EXIT_THREAD;
3698
3699 typedef struct _DBGKM_EXIT_PROCESS
3700 {
3701 NTSTATUS ExitStatus;
3702 } DBGKM_EXIT_PROCESS, *PDBGKM_EXIT_PROCESS;
3703
3704 typedef struct _DBGKM_LOAD_DLL
3705 {
3706 HANDLE FileHandle;
3707 PVOID BaseOfDll;
3708 ULONG DebugInfoFileOffset;
3709 ULONG DebugInfoSize;
3710 PVOID NamePointer;
3711 } DBGKM_LOAD_DLL, *PDBGKM_LOAD_DLL;
3712
3713 typedef struct _DBGKM_UNLOAD_DLL
3714 {
3715 PVOID BaseAddress;
3716 } DBGKM_UNLOAD_DLL, *PDBGKM_UNLOAD_DLL;
3717
3718 typedef enum _DBG_STATE
3719 {
3720 DbgIdle,
3721 DbgReplyPending,
3722 DbgCreateThreadStateChange,
3723 DbgCreateProcessStateChange,
3724 DbgExitThreadStateChange,
3725 DbgExitProcessStateChange,
3726 DbgExceptionStateChange,
3727 DbgBreakpointStateChange,
3728 DbgSingleStepStateChange,
3729 DbgLoadDllStateChange,
3730 DbgUnloadDllStateChange
3731 } DBG_STATE, *PDBG_STATE;
3732
3733 typedef struct _DBGUI_CREATE_THREAD
3734 {
3735 HANDLE HandleToThread;
3736 DBGKM_CREATE_THREAD NewThread;
3737 } DBGUI_CREATE_THREAD, *PDBGUI_CREATE_THREAD;
3738
3739 typedef struct _DBGUI_CREATE_PROCESS
3740 {
3741 HANDLE HandleToProcess;
3742 HANDLE HandleToThread;
3743 DBGKM_CREATE_PROCESS NewProcess;
3744 } DBGUI_CREATE_PROCESS, *PDBGUI_CREATE_PROCESS;
3745
3746 typedef struct _DBGUI_WAIT_STATE_CHANGE
3747 {
3748 DBG_STATE NewState;
3749 CLIENT_ID AppClientId;
3750 union
3751 {
3752 DBGKM_EXCEPTION Exception;
3753 DBGUI_CREATE_THREAD CreateThread;
3754 DBGUI_CREATE_PROCESS CreateProcessInfo;
3755 DBGKM_EXIT_THREAD ExitThread;
3756 DBGKM_EXIT_PROCESS ExitProcess;
3757 DBGKM_LOAD_DLL LoadDll;
3758 DBGKM_UNLOAD_DLL UnloadDll;
3759 } StateInfo;
3760 } DBGUI_WAIT_STATE_CHANGE, *PDBGUI_WAIT_STATE_CHANGE;
3761
3762 struct _DEBUG_EVENT;
3763
3764 #define DEBUG_READ_EVENT 0x0001
3765 #define DEBUG_PROCESS_ASSIGN 0x0002
3766 #define DEBUG_SET_INFORMATION 0x0004
3767 #define DEBUG_QUERY_INFORMATION 0x0008
3768 #define DEBUG_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x0f)
3769
3770 #define DEBUG_KILL_ON_CLOSE 0x1
3771
3772 typedef enum _DEBUGOBJECTINFOCLASS
3773 {
3774 DebugObjectKillProcessOnExitInformation = 1,
3775 MaxDebugObjectInfoClass
3776 } DEBUGOBJECTINFOCLASS, *PDEBUGOBJECTINFOCLASS;
3777
3778
3779 typedef struct _WOW64_CPURESERVED
3780 {
3781 USHORT Flags;
3782 USHORT Machine;
3783 /* CONTEXT context */
3784 /* CONTEXT_EX *context_ex */
3785 } WOW64_CPURESERVED, *PWOW64_CPURESERVED;
3786
3787 #define WOW64_CPURESERVED_FLAG_RESET_STATE 1
3788
3789 typedef struct _WOW64_CPU_AREA_INFO
3790 {
3791 void *Context;
3792 void *ContextEx;
3793 void *ContextFlagsLocation;
3794 WOW64_CPURESERVED *CpuReserved;
3795 ULONG ContextFlag;
3796 USHORT Machine;
3797 } WOW64_CPU_AREA_INFO, *PWOW64_CPU_AREA_INFO;
3798
3799 #ifdef __WINESRC__
3800 /* undocumented layout of LdrSystemDllInitBlock */
3801 /* this varies across Windows version; we are using the win10-2004 layout */
3802 typedef struct
3803 {
3804 ULONG version;
3805 ULONG unknown1[3];
3806 ULONG64 unknown2;
3807 ULONG64 pLdrInitializeThunk;
3808 ULONG64 pKiUserExceptionDispatcher;
3809 ULONG64 pKiUserApcDispatcher;
3810 ULONG64 pKiUserCallbackDispatcher;
3811 ULONG64 pRtlUserThreadStart;
3812 ULONG64 pRtlpQueryProcessDebugInformationRemote;
3813 ULONG64 ntdll_handle;
3814 ULONG64 pLdrSystemDllInitBlock;
3815 ULONG64 pRtlpFreezeTimeBias;
3816 } SYSTEM_DLL_INIT_BLOCK;
3817 #endif
3818
3819 typedef struct
3820 {
3821 ULONG_PTR *ServiceTable;
3822 ULONG_PTR *CounterTable;
3823 ULONG_PTR ServiceLimit;
3824 BYTE *ArgumentTable;
3825 } SYSTEM_SERVICE_TABLE;
3826
3827 /***********************************************************************
3828 * Function declarations
3829 */
3830
3831 NTSYSAPI void WINAPI DbgBreakPoint(void);
3832 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
3833 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
3834 NTSYSAPI NTSTATUS WINAPI DbgUiConnectToDbg(void);
3835 NTSYSAPI NTSTATUS WINAPI DbgUiContinue(CLIENT_ID*,NTSTATUS);
3836 NTSYSAPI NTSTATUS WINAPI DbgUiConvertStateChangeStructure(DBGUI_WAIT_STATE_CHANGE*,struct _DEBUG_EVENT*);
3837 NTSYSAPI NTSTATUS WINAPI DbgUiDebugActiveProcess(HANDLE);
3838 NTSYSAPI HANDLE WINAPI DbgUiGetThreadDebugObject(void);
3839 NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE);
3840 NTSYSAPI void WINAPI DbgUiRemoteBreakin(void*);
3841 NTSYSAPI void WINAPI DbgUiSetThreadDebugObject(HANDLE);
3842 NTSYSAPI NTSTATUS WINAPI DbgUiStopDebugging(HANDLE);
3843 NTSYSAPI NTSTATUS WINAPI DbgUiWaitStateChange(DBGUI_WAIT_STATE_CHANGE*,LARGE_INTEGER*);
3844 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
3845 NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
3846 NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING*,void**);
3847 NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG,HMODULE);
3848 NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
3849 NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY*);
3850 NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
3851 NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
3852 NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING*);
3853 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
3854 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandleEx(ULONG, LPCWSTR, ULONG *, const UNICODE_STRING*, HMODULE*);
3855 NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR,ULONG,PWSTR*,PWSTR*);
3856 NTSYSAPI NTSTATUS WINAPI LdrGetDllFullName(HMODULE, UNICODE_STRING*);
3857 NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
3858 NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
3859 NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
3860 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
3861 NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
3862 NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(RTL_PROCESS_MODULES*, ULONG, ULONG*);
3863 NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG,PLDR_DLL_NOTIFICATION_FUNCTION,void*,void**);
3864 NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void*);
3865 NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG);
3866 NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING*);
3867 NTSYSAPI void WINAPI LdrShutdownProcess(void);
3868 NTSYSAPI void WINAPI LdrShutdownThread(void);
3869 NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE);
3870 NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
3871 NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void*);
3872 NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
3873 NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
3874 NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
3875 NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
3876 NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
3877 NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
3878 NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE,PULONG);
3879 NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle);
3880 NTSYSAPI NTSTATUS WINAPI NtAlertThreadByThreadId(HANDLE);
3881 NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
3882 NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
3883 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG_PTR,SIZE_T*,ULONG,ULONG);
3884 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemoryEx(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG,MEM_EXTENDED_PARAMETER*,ULONG);
3885 NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
3886 NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
3887 NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
3888 NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
3889 NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
3890 NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
3891 NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE);
3892 NTSYSAPI NTSTATUS WINAPI NtClose(HANDLE);
3893 NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
3894 NTSYSAPI NTSTATUS WINAPI NtCompareObjects(HANDLE,HANDLE);
3895 NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE);
3896 NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3897 NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT,BOOLEAN);
3898 NTSYSAPI NTSTATUS WINAPI NtCreateDebugObject(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,ULONG);
3899 NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3900 NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
3901 NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3902 NTSYSAPI NTSTATUS WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
3903 NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
3904 NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3905 NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3906 NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
3907 NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3908 NTSYSAPI NTSTATUS WINAPI NtCreateLowBoxToken(HANDLE*,HANDLE,ACCESS_MASK,OBJECT_ATTRIBUTES*,SID*,ULONG,SID_AND_ATTRIBUTES*,ULONG,HANDLE*);
3909 NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3910 NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
3911 NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3912 NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
3913 NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
3914 NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
3915 NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
3916 NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
3917 NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
3918 NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
3919 NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
3920 NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,HANDLE,PRTL_THREAD_START_ROUTINE,void*,ULONG,ULONG_PTR,SIZE_T,SIZE_T,PS_ATTRIBUTE_LIST*);
3921 NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
3922 NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
3923 NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE*,HANDLE*,ACCESS_MASK,ACCESS_MASK,OBJECT_ATTRIBUTES*,OBJECT_ATTRIBUTES*,ULONG,ULONG,RTL_USER_PROCESS_PARAMETERS*,PS_CREATE_INFO*,PS_ATTRIBUTE_LIST*);
3924 NTSYSAPI NTSTATUS WINAPI NtDebugActiveProcess(HANDLE,HANDLE);
3925 NTSYSAPI NTSTATUS WINAPI NtDebugContinue(HANDLE,CLIENT_ID*,NTSTATUS);
3926 NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
3927 NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM);
3928 NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
3929 NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE);
3930 NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
3931 NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3932 NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING);
3933 NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
3934 NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
3935 NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
3936 NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3937 NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
3938 NTSYSAPI NTSTATUS WINAPI NtFilterToken(HANDLE,ULONG,TOKEN_GROUPS*,TOKEN_PRIVILEGES*,TOKEN_GROUPS*,HANDLE*);
3939 NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
3940 NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
3941 NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
3942 NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE);
3943 NTSYSAPI void WINAPI NtFlushProcessWriteBuffers(void);
3944 NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
3945 NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID);
3946 NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3947 NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3948 NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*);
3949 NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void);
3950 NTSYSAPI NTSTATUS WINAPI NtGetNextThread(HANDLE,HANDLE,ACCESS_MASK,ULONG,ULONG,HANDLE*);
3951 NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*);
3952 NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
3953 NTSYSAPI ULONG WINAPI NtGetTickCount(VOID);
3954 NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
3955 NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE);
3956 NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
3957 NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
3958 NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN);
3959 NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
3960 NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE,HANDLE);
3961 NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
3962 NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *);
3963 NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
3964 NTSYSAPI NTSTATUS WINAPI NtLoadKey2(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *,ULONG);
3965 NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
3966 NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3967 NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE);
3968 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG_PTR,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
3969 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
3970 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3971 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3972 NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3973 NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3974 NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3975 NTSYSAPI NTSTATUS WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
3976 NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3977 NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3978 NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3979 NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3980 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
3981 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
3982 NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3983 NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3984 NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
3985 NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3986 NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
3987 NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
3988 NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3989 NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3990 NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3991 NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3992 NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
3993 NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
3994 NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
3995 NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
3996 NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
3997 NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
3998 NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
3999 NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
4000 NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE,LONG*);
4001 NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
4002 NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
4003 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
4004 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID*);
4005 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
4006 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
4007 NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
4008 NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4009 NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
4010 NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
4011 NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,LONG,FILE_INFORMATION_CLASS);
4012 NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
4013 NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4014 NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
4015 NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
4016 NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4017 NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID*);
4018 NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
4019 NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4020 NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
4021 NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
4022 NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4023 NTSYSAPI NTSTATUS WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
4024 NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
4025 NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
4026 NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
4027 NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4028 NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4029 NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
4030 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
4031 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValueEx(PUNICODE_STRING,GUID*,void*,ULONG*,ULONG*);
4032 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4033 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
4034 NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime(PLARGE_INTEGER);
4035 NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4036 NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
4037 NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
4038 NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
4039 NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4040 NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4041 NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
4042 NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
4043 NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
4044 NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4045 NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4046 NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
4047 NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE);
4048 NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4049 NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE,PLONG);
4050 NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
4051 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
4052 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE,FILE_IO_COMPLETION_INFORMATION*,ULONG,ULONG*,LARGE_INTEGER*,BOOLEAN);
4053 NTSYSAPI NTSTATUS WINAPI NtRemoveProcessDebug(HANDLE,HANDLE);
4054 NTSYSAPI NTSTATUS WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
4055 NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
4056 NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
4057 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
4058 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
4059 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
4060 NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
4061 NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
4062 NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE,LONG*);
4063 NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
4064 NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
4065 NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE);
4066 NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE,PULONG);
4067 NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE,HANDLE);
4068 NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
4069 NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
4070 NTSYSAPI NTSTATUS WINAPI NtSetDebugFilterState(ULONG,ULONG,BOOLEAN);
4071 NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE);
4072 NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
4073 NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID);
4074 NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
4075 NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE,LONG*);
4076 NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE);
4077 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE);
4078 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID);
4079 NTSYSAPI NTSTATUS WINAPI NtSetInformationDebugObject(HANDLE,DEBUGOBJECTINFOCLASS,PVOID,ULONG,ULONG*);
4080 NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
4081 NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
4082 NTSYSAPI NTSTATUS WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
4083 NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
4084 NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE,PROCESS_INFORMATION_CLASS,PVOID,ULONG);
4085 NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
4086 NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
4087 NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
4088 NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
4089 NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG,LDT_ENTRY,ULONG,LDT_ENTRY);
4090 NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE);
4091 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE);
4092 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID);
4093 NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
4094 NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
4095 NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
4096 NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
4097 NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
4098 NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE,EXECUTION_STATE*);
4099 NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
4100 NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
4101 NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
4102 NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4103 NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
4104 NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
4105 NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE);
4106 NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE);
4107 NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE);
4108 NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE,PULONG);
4109 NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
4110 NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
4111 NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE,LONG);
4112 NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE,LONG);
4113 NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID);
4114 NTSYSAPI NTSTATUS WINAPI NtTraceControl(ULONG,void*,ULONG,void*,ULONG,ULONG*);
4115 NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *);
4116 NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
4117 NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
4118 NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
4119 NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4120 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
4121 NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG,PVOID);
4122 NTSYSAPI NTSTATUS WINAPI NtWaitForAlertByThreadId(const void*,const LARGE_INTEGER*);
4123 NTSYSAPI NTSTATUS WINAPI NtWaitForDebugEvent(HANDLE,BOOLEAN,LARGE_INTEGER*,DBGUI_WAIT_STATE_CHANGE*);
4124 NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4125 NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
4126 NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
4127 NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE);
4128 NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE);
4129 NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
4130 NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4131 NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4132 NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
4133 NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void);
4134
4135 NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PULONG);
4136 NTSYSAPI void WINAPI RtlAcquirePebLock(void);
4137 NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
4138 NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
4139 NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
4140 NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
4141 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
4142 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG,TEB*,HANDLE,ULONG_PTR*);
4143 NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
4144 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
4145 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4146 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4147 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
4148 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4149 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4150 NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4151 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
4152 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
4153 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
4154 NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
4155 NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE);
4156 NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
4157 NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
4158 NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
4159 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
4160 NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3);
4161 NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
4162 NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
4163 NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
4164 NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
4165 NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *,const STRING *);
4166 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
4167 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
4168 NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4169 NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4170 NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
4171 NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
4172 NTSYSAPI NTSTATUS WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
4173 NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
4174 NTSYSAPI void WINAPI RtlClearAllBits(PRTL_BITMAP);
4175 NTSYSAPI void WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
4176 NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE*,const void*);
4177 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
4178 NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
4179 NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE,ULONG);
4180 NTSYSAPI LONG WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
4181 NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4182 NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
4183 NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4184 NTSYSAPI DWORD WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
4185 NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
4186 NTSYSAPI NTSTATUS WINAPI RtlConvertToAutoInheritSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,GUID*,BOOL,PGENERIC_MAPPING);
4187 NTSYSAPI NTSTATUS WINAPI RtlCopyContext(CONTEXT*,DWORD,CONTEXT*);
4188 NTSYSAPI NTSTATUS WINAPI RtlCopyExtendedContext(CONTEXT_EX*,ULONG,CONTEXT_EX*);
4189 NTSYSAPI void WINAPI RtlCopyLuid(PLUID,const LUID*);
4190 NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
4191 NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD,PSID,PSID);
4192 NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
4193 NTSYSAPI void WINAPI RtlCopyString(STRING*,const STRING*);
4194 NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
4195 NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
4196 NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
4197 NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
4198 NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
4199 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
4200 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,ULONG);
4201 NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
4202 NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE);
4203 NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(HANDLE,HANDLE*,RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
4204 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
4205 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
4206 NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
4207 NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE,SECURITY_DESCRIPTOR*,BOOLEAN,ULONG,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
4208 NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T,SIZE_T,ULONG,SIZE_T,SIZE_T,INITIAL_TEB*);
4209 NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO*,WCHAR*,DWORD,DWORD*,const char*,DWORD);
4210 NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
4211 NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID);
4212 NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
4213 NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4214 NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL,DWORD);
4215 NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4216 NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
4217 NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
4218 NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK);
4219 NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
4220 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
4221 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
4222 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4223 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE);
4224 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
4225 NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
4226 NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR);
4227 NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
4228 NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE);
4229 NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
4230 NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
4231 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
4232 NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void);
4233 NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR);
4234 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4235 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4236 NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
4237 NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR);
4238 NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4239 NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK);
4240 NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
4241 NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
4242 NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID);
4243 NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
4244 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
4245 NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
4246 NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
4247 NTSYSAPI BOOLEAN WINAPI RtlEqualLuid(const LUID*,const LUID*);
4248 NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID,PSID);
4249 NTSYSAPI BOOL WINAPI RtlEqualSid(PSID,PSID);
4250 NTSYSAPI BOOLEAN WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
4251 NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4252 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
4253 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
4254 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR*,WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4255 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
4256 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
4257 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
4258 NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
4259 NTSYSAPI ULONG WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
4260 NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
4261 NTSYSAPI ULONG WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4262 NTSYSAPI void * WINAPI RtlFindExportedRoutineByName(HMODULE,const char*);
4263 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4264 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4265 NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG);
4266 NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
4267 NTSYSAPI ULONG WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
4268 NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
4269 NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG);
4270 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4271 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4272 NTSYSAPI ULONG WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
4273 NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
4274 NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4275 NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
4276 NTSYSAPI NTSTATUS WINAPI RtlFlsAlloc(PFLS_CALLBACK_FUNCTION,ULONG *);
4277 NTSYSAPI NTSTATUS WINAPI RtlFlsFree(ULONG);
4278 NTSYSAPI NTSTATUS WINAPI RtlFlsGetValue(ULONG,void **);
4279 NTSYSAPI NTSTATUS WINAPI RtlFlsSetValue(ULONG,void *);
4280 NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
4281 NTSYSAPI NTSTATUS WINAPI RtlFormatMessage(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*);
4282 NTSYSAPI NTSTATUS WINAPI RtlFormatMessageEx(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*,ULONG);
4283 NTSYSAPI void WINAPI RtlFreeAnsiString(PANSI_STRING);
4284 NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
4285 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
4286 NTSYSAPI void WINAPI RtlFreeOemString(POEM_STRING);
4287 NTSYSAPI DWORD WINAPI RtlFreeSid(PSID);
4288 NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void);
4289 NTSYSAPI void WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
4290 NTSYSAPI void WINAPI RtlFreeUserStack(void*);
4291 NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
4292 NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE*);
4293 NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
4294 NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
4295 NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
4296 NTSYSAPI PEB * WINAPI RtlGetCurrentPeb(void);
4297 NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4298 NTSYSAPI ULONG64 WINAPI RtlGetEnabledExtendedFeatures(ULONG64);
4299 NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR,PWSTR*);
4300 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength(ULONG,ULONG*);
4301 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength2(ULONG,ULONG*,ULONG64);
4302 NTSYSAPI ULONG64 WINAPI RtlGetExtendedFeaturesMask(CONTEXT_EX*);
4303 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
4304 NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
4305 NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4306 NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void);
4307 NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void);
4308 NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void);
4309 NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void);
4310 NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD);
4311 NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4312 NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
4313 NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4314 NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4315 NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR*);
4316 NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4317 NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void);
4318 NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void);
4319 NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4320 NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4321 NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
4322 NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
4323 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
4324 NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4325 NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4326 NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4327 NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
4328 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
4329 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
4330 NTSYSAPI PVOID WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
4331 NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
4332 NTSYSAPI void WINAPI RtlInitString(PSTRING,PCSZ);
4333 NTSYSAPI void WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
4334 NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
4335 NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT*,CPTABLEINFO*);
4336 NTSYSAPI void WINAPI RtlInitNlsTables(USHORT*,USHORT*,USHORT*,NLSTABLEINFO*);
4337 NTSYSAPI void WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
4338 NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
4339 NTSYSAPI void WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
4340 NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
4341 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
4342 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
4343 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
4344 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext(void*,ULONG,CONTEXT_EX**);
4345 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext2(void*,ULONG,CONTEXT_EX**,ULONG64);
4346 NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
4347 NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK);
4348 NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
4349 NTSYSAPI BOOL WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
4350 NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
4351 NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
4352 NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
4353 NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE);
4354 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
4355 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
4356 NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR);
4357 NTSYSAPI BOOLEAN WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
4358 NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG,const WCHAR*,INT,BOOLEAN*);
4359 NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT);
4360 NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
4361 NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
4362 NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
4363 NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
4364 NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD);
4365 NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
4366 NTSYSAPI DWORD WINAPI RtlLengthSid(PSID);
4367 NTSYSAPI NTSTATUS WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4368 NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR*,LCID*,ULONG);
4369 NTSYSAPI void * WINAPI RtlLocateExtendedFeature(CONTEXT_EX*,ULONG,ULONG*);
4370 NTSYSAPI void * WINAPI RtlLocateExtendedFeature2(CONTEXT_EX*,ULONG,XSTATE_CONFIGURATION*,ULONG*);
4371 NTSYSAPI void * WINAPI RtlLocateLegacyContext(CONTEXT_EX*,ULONG*);
4372 NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE);
4373 NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4374 NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
4375 NTSYSAPI void WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
4376 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4377 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,ULONG);
4378 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
4379 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4380 NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG,const WCHAR*,INT,WCHAR*,INT*);
4381 NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS);
4382 NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
4383 NTSYSAPI ULONG WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
4384 NTSYSAPI ULONG WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
4385 NTSYSAPI ULONG WINAPI RtlOemStringToUnicodeSize(const STRING*);
4386 NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
4387 NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4388 NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
4389 NTSYSAPI PVOID WINAPI RtlPcToFileHeader(PVOID,PVOID*);
4390 NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4391 NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
4392 NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
4393 NTSYSAPI BOOLEAN WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4394 NTSYSAPI void WINAPI RtlProcessFlsData(void*,ULONG);
4395 NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
4396 NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
4397 NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
4398 NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
4399 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR*,const WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4400 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
4401 NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
4402 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
4403 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
4404 NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER*);
4405 NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER*);
4406 NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
4407 NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
4408 NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
4409 NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
4410 NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
4411 NTSYSAPI void WINAPI RtlRaiseException(PEXCEPTION_RECORD);
4412 NTSYSAPI void WINAPI RtlRaiseStatus(NTSTATUS);
4413 NTSYSAPI ULONG WINAPI RtlRandom(PULONG);
4414 NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T);
4415 NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
4416 NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE);
4417 NTSYSAPI void WINAPI RtlReleasePath(PWSTR);
4418 NTSYSAPI void WINAPI RtlReleasePebLock(void);
4419 NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK);
4420 NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
4421 NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
4422 NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
4423 NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO*);
4424 NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD);
4425 NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
4426 NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
4427 NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
4428 NTSYSAPI void WINAPI RtlSetAllBits(PRTL_BITMAP);
4429 NTSYSAPI void WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
4430 NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
4431 NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
4432 NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
4433 NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
4434 NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4435 NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
4436 NTSYSAPI void WINAPI RtlSetExtendedFeaturesMask(CONTEXT_EX*,ULONG64);
4437 NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
4438 NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4439 NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4440 NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
4441 NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD);
4442 NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
4443 NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4444 NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4445 NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG);
4446 NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
4447 NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4448 NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
4449 NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER);
4450 NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
4451 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
4452 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
4453 NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
4454 NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID,DWORD);
4455 NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID);
4456 NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4457 NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
4458 NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
4459 NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
4460 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
4461 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
4462 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
4463 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
4464 NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
4465 NTSYSAPI NTSTATUS WINAPI RtlUTF8ToUnicodeN(WCHAR*,DWORD,DWORD*,const char*,DWORD);
4466 NTSYSAPI ULONGLONG __cdecl RtlUlonglongByteSwap(ULONGLONG);
4467 NTSYSAPI DWORD WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
4468 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
4469 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
4470 NTSYSAPI DWORD WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
4471 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
4472 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4473 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4474 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
4475 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4476 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4477 NTSYSAPI ULONG WINAPI RtlUniform(PULONG);
4478 NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE);
4479 NTSYSAPI void WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
4480 NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR);
4481 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
4482 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
4483 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4484 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4485 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4486 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4487 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4488 NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
4489 NTSYSAPI CHAR WINAPI RtlUpperChar(CHAR);
4490 NTSYSAPI void WINAPI RtlUpperString(STRING *,const STRING *);
4491 NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE,void*);
4492 NTSYSAPI NTSTATUS WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
4493 NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
4494 NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL);
4495 NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID);
4496 NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
4497 NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
4498 NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *,const void *,SIZE_T,const LARGE_INTEGER *);
4499 NTSYSAPI void WINAPI RtlWakeAddressAll(const void *);
4500 NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *);
4501 NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
4502 NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
4503 NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE,PVOID);
4504 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
4505 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
4506 NTSYSAPI USHORT WINAPI RtlWow64GetCurrentMachine(void);
4507 NTSYSAPI NTSTATUS WINAPI RtlWow64GetProcessMachines(HANDLE,USHORT*,USHORT*);
4508 NTSYSAPI NTSTATUS WINAPI RtlWow64IsWowGuestMachineSupported(USHORT,BOOLEAN*);
4509 NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
4510 NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE);
4511 NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
4512 NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
4513 NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
4514 NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
4515 NTSYSAPI NTSTATUS WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
4516 NTSYSAPI NTSTATUS WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
4517
4518 #ifndef __WINE_USE_MSVCRT
4519 NTSYSAPI int __cdecl _strnicmp(LPCSTR,LPCSTR,size_t);
4520 #endif
4521
4522 /* 32-bit or 64-bit only functions */
4523
4524 #ifdef _WIN64
4525 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCpuAreaInfo(WOW64_CPURESERVED*,ULONG,WOW64_CPU_AREA_INFO*);
4526 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCurrentCpuArea(USHORT*,void**,void**);
4527 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadContext(HANDLE,WOW64_CONTEXT*);
4528 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadSelectorEntry(HANDLE,THREAD_DESCRIPTOR_INFORMATION*,ULONG,ULONG*);
4529 NTSYSAPI NTSTATUS WINAPI RtlWow64SetThreadContext(HANDLE,const WOW64_CONTEXT*);
4530 #else
4531 NTSYSAPI NTSTATUS WINAPI NtWow64AllocateVirtualMemory64(HANDLE,ULONG64*,ULONG64,ULONG64*,ULONG,ULONG);
4532 NTSYSAPI NTSTATUS WINAPI NtWow64GetNativeSystemInformation(SYSTEM_INFORMATION_CLASS,void*,ULONG,ULONG*);
4533 NTSYSAPI NTSTATUS WINAPI NtWow64ReadVirtualMemory64(HANDLE,ULONG64,void*,ULONG64,ULONG64*);
4534 NTSYSAPI NTSTATUS WINAPI NtWow64WriteVirtualMemory64(HANDLE,ULONG64,const void*,ULONG64,ULONG64*);
4535 NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG);
4536 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
4537 NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT,INT);
4538 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
4539 NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
4540 NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
4541 NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
4542 NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
4543 NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG*,LONGLONG,LONGLONG);
4544 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
4545 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
4546 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
4547 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG);
4548 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
4549 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
4550 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
4551 NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
4552 #endif
4553
4554 /* Threadpool functions */
4555
4556 NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
4557 NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **,HANDLE,PTP_IO_CALLBACK,void *,TP_CALLBACK_ENVIRON *);
4558 NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **,PVOID);
4559 NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4560 NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4561 NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4562 NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
4563 NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
4564 NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
4565 NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
4566 NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
4567 NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
4568 NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *);
4569 NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
4570 NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *);
4571 NTSYSAPI void WINAPI TpPostWork(TP_WORK *);
4572 NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
4573 NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
4574 NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
4575 NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *);
4576 NTSYSAPI void WINAPI TpReleasePool(TP_POOL *);
4577 NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *);
4578 NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *);
4579 NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *);
4580 NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
4581 NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
4582 NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
4583 NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
4584 NTSYSAPI void WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
4585 NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4586 NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *);
4587 NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *,BOOL);
4588 NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
4589 NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *,BOOL);
4590 NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *,BOOL);
4591
4592 /* Wine internal functions */
4593
4594 NTSYSAPI NTSTATUS WINAPI wine_nt_to_unix_file_name( const OBJECT_ATTRIBUTES *attr, char *nameA, ULONG *size,
4595 UINT disposition );
4596 NTSYSAPI NTSTATUS WINAPI wine_unix_to_nt_file_name( const char *name, WCHAR *buffer, ULONG *size );
4597
4598
4599 /***********************************************************************
4600 * Inline functions
4601 */
4602
4603 #define InitializeObjectAttributes(p,n,a,r,s) \
4604 do { \
4605 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
4606 (p)->RootDirectory = r; \
4607 (p)->Attributes = a; \
4608 (p)->ObjectName = n; \
4609 (p)->SecurityDescriptor = s; \
4610 (p)->SecurityQualityOfService = NULL; \
4611 } while (0)
4612
4613 #define NtCurrentProcess() ((HANDLE)-1)
4614
4615 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
4616 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
4617 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
4618 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
4619 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
4620 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
4621 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
4622
4623 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
4624 {
4625 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
4626 lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
4627 return TRUE;
4628 return FALSE;
4629 }
4630
4631 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
4632 static inline USHORT RtlUshortByteSwap(USHORT s)
4633 {
4634 return (s >> 8) | (s << 8);
4635 }
4636 static inline ULONG RtlUlongByteSwap(ULONG i)
4637 {
4638 #if defined(__i386__) && defined(__GNUC__)
4639 ULONG ret;
4640 __asm__("bswap %0" : "=r" (ret) : "0" (i) );
4641 return ret;
4642 #else
4643 return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
4644 #endif
4645 }
4646
4647 /* list manipulation macros */
4648 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
4649 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
4650 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
4651 #define IsListEmpty(le) ((le)->Flink == (le))
4652 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
4653 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
4654 {
4655 PLIST_ENTRY f, b, e;
4656
4657 e = le->Flink;
4658 f = le->Flink->Flink;
4659 b = le->Flink->Blink;
4660 f->Blink = b;
4661 b->Flink = f;
4662
4663 if (e != le) e->Flink = e->Blink = NULL;
4664 return e;
4665 }
4666 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
4667 {
4668 PLIST_ENTRY f, b, e;
4669
4670 e = le->Blink;
4671 f = le->Blink->Flink;
4672 b = le->Blink->Blink;
4673 f->Blink = b;
4674 b->Flink = f;
4675
4676 if (e != le) e->Flink = e->Blink = NULL;
4677 return e;
4678 }
4679
4680
4681 #ifdef __WINESRC__
4682
4683 /* Wine internal functions */
4684
4685 extern NTSTATUS WINAPI __wine_unix_spawnvp( char * const argv[], int wait );
4686
4687 /* The thread information for 16-bit threads */
4688 /* NtCurrentTeb()->SubSystemTib points to this */
4689 typedef struct
4690 {
4691 void *unknown; /* 00 unknown */
4692 UNICODE_STRING *exe_name; /* 04 exe module name */
4693
4694 /* the following fields do not exist under Windows */
4695 UNICODE_STRING exe_str; /* exe name string pointed to by exe_name */
4696 CURDIR curdir; /* current directory */
4697 WCHAR curdir_buffer[MAX_PATH];
4698 } WIN16_SUBSYSTEM_TIB;
4699
4700 #endif /* __WINESRC__ */
4701
4702 #ifdef __cplusplus
4703 } /* extern "C" */
4704 #endif /* defined(__cplusplus) */
4705
4706 #endif /* __WINE_WINTERNL_H */
Windows API implementation