include/winternl.h

   1 /*
   2  * Internal NT APIs and data structures
   3  *
   4  * Copyright (C) the Wine project
   5  *
   6  * This library is free software; you can redistribute it and/or
   7  * modify it under the terms of the GNU Lesser General Public
   8  * License as published by the Free Software Foundation; either
   9  * version 2.1 of the License, or (at your option) any later version.
  10  *
  11  * This library is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14  * Lesser General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU Lesser General Public
  17  * License along with this library; if not, write to the Free Software
  18  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  19  */
  20
  21 #ifndef __WINE_WINTERNL_H
  22 #define __WINE_WINTERNL_H
  23
  24 #include <ntdef.h>
  25 #include <windef.h>
  26
  27 #ifdef __cplusplus
  28 extern "C" {
  29 #endif /* defined(__cplusplus) */
  30
  31
  32 /**********************************************************************
  33  * Fundamental types and data structures
  34  */
  35
  36 #ifndef WINE_NTSTATUS_DECLARED
  37 #define WINE_NTSTATUS_DECLARED
  38 typedef LONG NTSTATUS;
  39 #endif
  40
  41 typedef const char *PCSZ;
  42
  43 typedef short CSHORT;
  44 typedef CSHORT *PCSHORT;
  45
  46 #ifndef __STRING_DEFINED__
  47 #define __STRING_DEFINED__
  48 typedef struct _STRING {
  49   USHORT Length;
  50   USHORT MaximumLength;
  51   PCHAR Buffer;
  52 } STRING, *PSTRING;
  53 #endif
  54
  55 typedef STRING ANSI_STRING;
  56 typedef PSTRING PANSI_STRING;
  57 typedef const STRING *PCANSI_STRING;
  58
  59 typedef STRING OEM_STRING;
  60 typedef PSTRING POEM_STRING;
  61 typedef const STRING *PCOEM_STRING;
  62
  63 #ifndef __UNICODE_STRING_DEFINED__
  64 #define __UNICODE_STRING_DEFINED__
  65 typedef struct _UNICODE_STRING {
  66   USHORT Length;        /* bytes */
  67   USHORT MaximumLength; /* bytes */
  68   PWSTR  Buffer;
  69 } UNICODE_STRING, *PUNICODE_STRING;
  70 #endif
  71
  72 typedef const UNICODE_STRING *PCUNICODE_STRING;
  73
  74 #ifndef _FILETIME_
  75 #define _FILETIME_
  76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
  77 typedef struct _FILETIME
  78 {
  79 #ifdef WORDS_BIGENDIAN
  80   DWORD  dwHighDateTime;
  81   DWORD  dwLowDateTime;
  82 #else
  83   DWORD  dwLowDateTime;
  84   DWORD  dwHighDateTime;
  85 #endif
  86 } FILETIME, *PFILETIME, *LPFILETIME;
  87 #endif /* _FILETIME_ */
  88
  89 /*
  90  * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
  91  * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
  92  * in winbase.h, however we need to define them separately so
  93  * winternl.h doesn't depend on winbase.h.  They are used by
  94  * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
  95  * The names are guessed; if anybody knows the real names, let me know.
  96  */
  97 typedef struct _RTL_SYSTEM_TIME {
  98     WORD wYear;
  99     WORD wMonth;
 100     WORD wDayOfWeek;
 101     WORD wDay;
 102     WORD wHour;
 103     WORD wMinute;
 104     WORD wSecond;
 105     WORD wMilliseconds;
 106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
 107
 108 typedef struct _RTL_TIME_ZONE_INFORMATION {
 109     LONG Bias;
 110     WCHAR StandardName[32];
 111     RTL_SYSTEM_TIME StandardDate;
 112     LONG StandardBias;
 113     WCHAR DaylightName[32];
 114     RTL_SYSTEM_TIME DaylightDate;
 115     LONG DaylightBias;
 116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
 117
 118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
 119 {
 120     LONG Bias;
 121     WCHAR StandardName[32];
 122     RTL_SYSTEM_TIME StandardDate;
 123     LONG StandardBias;
 124     WCHAR DaylightName[32];
 125     RTL_SYSTEM_TIME DaylightDate;
 126     LONG DaylightBias;
 127     WCHAR TimeZoneKeyName[128];
 128     BOOLEAN DynamicDaylightTimeDisabled;
 129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
 130
 131 typedef struct _CLIENT_ID
 132 {
 133    HANDLE UniqueProcess;
 134    HANDLE UniqueThread;
 135 } CLIENT_ID, *PCLIENT_ID;
 136
 137 typedef struct _CURDIR
 138 {
 139     UNICODE_STRING DosPath;
 140     PVOID Handle;
 141 } CURDIR, *PCURDIR;
 142
 143 typedef struct RTL_DRIVE_LETTER_CURDIR
 144 {
 145     USHORT              Flags;
 146     USHORT              Length;
 147     ULONG               TimeStamp;
 148     UNICODE_STRING      DosPath;
 149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
 150
 151 typedef struct tagRTL_BITMAP {
 152     ULONG  SizeOfBitMap; /* Number of bits in the bitmap */
 153     PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
 154 } RTL_BITMAP, *PRTL_BITMAP;
 155
 156 typedef const RTL_BITMAP *PCRTL_BITMAP;
 157
 158 typedef struct tagRTL_BITMAP_RUN {
 159     ULONG StartingIndex; /* Bit position at which run starts */
 160     ULONG NumberOfBits;  /* Size of the run in bits */
 161 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
 162
 163 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
 164
 165 typedef struct _RTL_USER_PROCESS_PARAMETERS
 166 {
 167     ULONG               AllocationSize;
 168     ULONG               Size;
 169     ULONG               Flags;
 170     ULONG               DebugFlags;
 171     HANDLE              ConsoleHandle;
 172     ULONG               ConsoleFlags;
 173     HANDLE              hStdInput;
 174     HANDLE              hStdOutput;
 175     HANDLE              hStdError;
 176     CURDIR              CurrentDirectory;
 177     UNICODE_STRING      DllPath;
 178     UNICODE_STRING      ImagePathName;
 179     UNICODE_STRING      CommandLine;
 180     PWSTR               Environment;
 181     ULONG               dwX;
 182     ULONG               dwY;
 183     ULONG               dwXSize;
 184     ULONG               dwYSize;
 185     ULONG               dwXCountChars;
 186     ULONG               dwYCountChars;
 187     ULONG               dwFillAttribute;
 188     ULONG               dwFlags;
 189     ULONG               wShowWindow;
 190     UNICODE_STRING      WindowTitle;
 191     UNICODE_STRING      Desktop;
 192     UNICODE_STRING      ShellInfo;
 193     UNICODE_STRING      RuntimeInfo;
 194     RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
 195 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
 196
 197 /* value for Flags field (FIXME: not the correct name) */
 198 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
 199
 200 typedef struct _PEB_LDR_DATA
 201 {
 202     ULONG               Length;
 203     BOOLEAN             Initialized;
 204     PVOID               SsHandle;
 205     LIST_ENTRY          InLoadOrderModuleList;
 206     LIST_ENTRY          InMemoryOrderModuleList;
 207     LIST_ENTRY          InInitializationOrderModuleList;
 208     PVOID               EntryInProgress;
 209 } PEB_LDR_DATA, *PPEB_LDR_DATA;
 210
 211 typedef struct _GDI_TEB_BATCH
 212 {
 213     ULONG  Offset;
 214     HANDLE HDC;
 215     ULONG  Buffer[0x136];
 216 } GDI_TEB_BATCH;
 217
 218 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
 219 {
 220     struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
 221     struct _ACTIVATION_CONTEXT                 *ActivationContext;
 222     ULONG                                       Flags;
 223 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
 224
 225 typedef struct _ACTIVATION_CONTEXT_STACK
 226 {
 227     ULONG                               Flags;
 228     ULONG                               NextCookieSequenceNumber;
 229     RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
 230     LIST_ENTRY                          FrameListCache;
 231 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
 232
 233 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
 234 {
 235     ULONG       Flags;
 236     const char *FrameName;
 237 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
 238
 239 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
 240 {
 241     TEB_ACTIVE_FRAME_CONTEXT BasicContext;
 242     const char              *SourceLocation;
 243 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
 244
 245 typedef struct _TEB_ACTIVE_FRAME
 246 {
 247     ULONG                     Flags;
 248     struct _TEB_ACTIVE_FRAME *Previous;
 249     TEB_ACTIVE_FRAME_CONTEXT *Context;
 250 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
 251
 252 typedef struct _TEB_ACTIVE_FRAME_EX
 253 {
 254     TEB_ACTIVE_FRAME BasicFrame;
 255     void            *ExtensionIdentifier;
 256 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
 257
 258 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
 259 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED         0x00000001
 260
 261 /***********************************************************************
 262  * PEB data structure
 263  */
 264 typedef struct _PEB
 265 {                                                                 /* win32/win64 */
 266     BOOLEAN                      InheritedAddressSpace;             /* 000/000 */
 267     BOOLEAN                      ReadImageFileExecOptions;          /* 001/001 */
 268     BOOLEAN                      BeingDebugged;                     /* 002/002 */
 269     BOOLEAN                      SpareBool;                         /* 003/003 */
 270     HANDLE                       Mutant;                            /* 004/008 */
 271     HMODULE                      ImageBaseAddress;                  /* 008/010 */
 272     PPEB_LDR_DATA                LdrData;                           /* 00c/018 */
 273     RTL_USER_PROCESS_PARAMETERS *ProcessParameters;                 /* 010/020 */
 274     PVOID                        SubSystemData;                     /* 014/028 */
 275     HANDLE                       ProcessHeap;                       /* 018/030 */
 276     PRTL_CRITICAL_SECTION        FastPebLock;                       /* 01c/038 */
 277     PVOID /*PPEBLOCKROUTINE*/    FastPebLockRoutine;                /* 020/040 */
 278     PVOID /*PPEBLOCKROUTINE*/    FastPebUnlockRoutine;              /* 024/048 */
 279     ULONG                        EnvironmentUpdateCount;            /* 028/050 */
 280     PVOID                        KernelCallbackTable;               /* 02c/058 */
 281     ULONG                        Reserved[2];                       /* 030/060 */
 282     PVOID /*PPEB_FREE_BLOCK*/    FreeList;                          /* 038/068 */
 283     ULONG                        TlsExpansionCounter;               /* 03c/070 */
 284     PRTL_BITMAP                  TlsBitmap;                         /* 040/078 */
 285     ULONG                        TlsBitmapBits[2];                  /* 044/080 */
 286     PVOID                        ReadOnlySharedMemoryBase;          /* 04c/088 */
 287     PVOID                        ReadOnlySharedMemoryHeap;          /* 050/090 */
 288     PVOID                       *ReadOnlyStaticServerData;          /* 054/098 */
 289     PVOID                        AnsiCodePageData;                  /* 058/0a0 */
 290     PVOID                        OemCodePageData;                   /* 05c/0a8 */
 291     PVOID                        UnicodeCaseTableData;              /* 060/0b0 */
 292     ULONG                        NumberOfProcessors;                /* 064/0b8 */
 293     ULONG                        NtGlobalFlag;                      /* 068/0bc */
 294     LARGE_INTEGER                CriticalSectionTimeout;            /* 070/0c0 */
 295     SIZE_T                       HeapSegmentReserve;                /* 078/0c8 */
 296     SIZE_T                       HeapSegmentCommit;                 /* 07c/0d0 */
 297     SIZE_T                       HeapDeCommitTotalFreeThreshold;    /* 080/0d8 */
 298     SIZE_T                       HeapDeCommitFreeBlockThreshold;    /* 084/0e0 */
 299     ULONG                        NumberOfHeaps;                     /* 088/0e8 */
 300     ULONG                        MaximumNumberOfHeaps;              /* 08c/0ec */
 301     PVOID                       *ProcessHeaps;                      /* 090/0f0 */
 302     PVOID                        GdiSharedHandleTable;              /* 094/0f8 */
 303     PVOID                        ProcessStarterHelper;              /* 098/100 */
 304     PVOID                        GdiDCAttributeList;                /* 09c/108 */
 305     PVOID                        LoaderLock;                        /* 0a0/110 */
 306     ULONG                        OSMajorVersion;                    /* 0a4/118 */
 307     ULONG                        OSMinorVersion;                    /* 0a8/11c */
 308     ULONG                        OSBuildNumber;                     /* 0ac/120 */
 309     ULONG                        OSPlatformId;                      /* 0b0/124 */
 310     ULONG                        ImageSubSystem;                    /* 0b4/128 */
 311     ULONG                        ImageSubSystemMajorVersion;        /* 0b8/12c */
 312     ULONG                        ImageSubSystemMinorVersion;        /* 0bc/130 */
 313     ULONG                        ImageProcessAffinityMask;          /* 0c0/134 */
 314     HANDLE                       GdiHandleBuffer[28];               /* 0c4/138 */
 315     ULONG                        unknown[6];                        /* 134/218 */
 316     PVOID                        PostProcessInitRoutine;            /* 14c/230 */
 317     PRTL_BITMAP                  TlsExpansionBitmap;                /* 150/238 */
 318     ULONG                        TlsExpansionBitmapBits[32];        /* 154/240 */
 319     ULONG                        SessionId;                         /* 1d4/2c0 */
 320     ULARGE_INTEGER               AppCompatFlags;                    /* 1d8/2c8 */
 321     ULARGE_INTEGER               AppCompatFlagsUser;                /* 1e0/2d0 */
 322     PVOID                        ShimData;                          /* 1e8/2d8 */
 323     PVOID                        AppCompatInfo;                     /* 1ec/2e0 */
 324     UNICODE_STRING               CSDVersion;                        /* 1f0/2e8 */
 325     PVOID                        ActivationContextData;             /* 1f8/2f8 */
 326     PVOID                        ProcessAssemblyStorageMap;         /* 1fc/300 */
 327     PVOID                        SystemDefaultActivationData;       /* 200/308 */
 328     PVOID                        SystemAssemblyStorageMap;          /* 204/310 */
 329     SIZE_T                       MinimumStackCommit;                /* 208/318 */
 330     PVOID                       *FlsCallback;                       /* 20c/320 */
 331     LIST_ENTRY                   FlsListHead;                       /* 210/328 */
 332     PRTL_BITMAP                  FlsBitmap;                         /* 218/338 */
 333     ULONG                        FlsBitmapBits[4];                  /* 21c/340 */
 334 } PEB, *PPEB;
 335
 336
 337 /***********************************************************************
 338  * TEB data structure
 339  */
 340 typedef struct _TEB
 341 {                                                                 /* win32/win64 */
 342     NT_TIB                       Tib;                               /* 000/0000 */
 343     PVOID                        EnvironmentPointer;                /* 01c/0038 */
 344     CLIENT_ID                    ClientId;                          /* 020/0040 */
 345     PVOID                        ActiveRpcHandle;                   /* 028/0050 */
 346     PVOID                        ThreadLocalStoragePointer;         /* 02c/0058 */
 347     PPEB                         Peb;                               /* 030/0060 */
 348     ULONG                        LastErrorValue;                    /* 034/0068 */
 349     ULONG                        CountOfOwnedCriticalSections;      /* 038/006c */
 350     PVOID                        CsrClientThread;                   /* 03c/0070 */
 351     PVOID                        Win32ThreadInfo;                   /* 040/0078 */
 352     ULONG                        Win32ClientInfo[31];               /* 044/0080 used for user32 private data in Wine */
 353     PVOID                        WOW32Reserved;                     /* 0c0/0100 */
 354     ULONG                        CurrentLocale;                     /* 0c4/0108 */
 355     ULONG                        FpSoftwareStatusRegister;          /* 0c8/010c */
 356     PVOID                        SystemReserved1[54];               /* 0cc/0110 used for kernel32 private data in Wine */
 357     LONG                         ExceptionCode;                     /* 1a4/02c0 */
 358     ACTIVATION_CONTEXT_STACK     ActivationContextStack;            /* 1a8/02c8 */
 359     BYTE                         SpareBytes1[24];                   /* 1bc/02e8 */
 360     PVOID                        SystemReserved2[10];               /* 1d4/0300 used for ntdll platform-specific private data in Wine */
 361     GDI_TEB_BATCH                GdiTebBatch;                       /* 1fc/0350 used for ntdll private data in Wine */
 362     HANDLE                       gdiRgn;                            /* 6dc/0838 */
 363     HANDLE                       gdiPen;                            /* 6e0/0840 */
 364     HANDLE                       gdiBrush;                          /* 6e4/0848 */
 365     CLIENT_ID                    RealClientId;                      /* 6e8/0850 */
 366     HANDLE                       GdiCachedProcessHandle;            /* 6f0/0860 */
 367     ULONG                        GdiClientPID;                      /* 6f4/0868 */
 368     ULONG                        GdiClientTID;                      /* 6f8/086c */
 369     PVOID                        GdiThreadLocaleInfo;               /* 6fc/0870 */
 370     ULONG                        UserReserved[5];                   /* 700/0878 */
 371     PVOID                        glDispatchTable[280];              /* 714/0890 */
 372     PVOID                        glReserved1[26];                   /* b74/1150 */
 373     PVOID                        glReserved2;                       /* bdc/1220 */
 374     PVOID                        glSectionInfo;                     /* be0/1228 */
 375     PVOID                        glSection;                         /* be4/1230 */
 376     PVOID                        glTable;                           /* be8/1238 */
 377     PVOID                        glCurrentRC;                       /* bec/1240 */
 378     PVOID                        glContext;                         /* bf0/1248 */
 379     ULONG                        LastStatusValue;                   /* bf4/1250 */
 380     UNICODE_STRING               StaticUnicodeString;               /* bf8/1258 used by advapi32 */
 381     WCHAR                        StaticUnicodeBuffer[261];          /* c00/1268 used by advapi32 */
 382     PVOID                        DeallocationStack;                 /* e0c/1478 */
 383     PVOID                        TlsSlots[64];                      /* e10/1480 */
 384     LIST_ENTRY                   TlsLinks;                          /* f10/1680 */
 385     PVOID                        Vdm;                               /* f18/1690 */
 386     PVOID                        ReservedForNtRpc;                  /* f1c/1698 */
 387     PVOID                        DbgSsReserved[2];                  /* f20/16a0 */
 388     ULONG                        HardErrorDisabled;                 /* f28/16b0 */
 389     PVOID                        Instrumentation[16];               /* f2c/16b8 */
 390     PVOID                        WinSockData;                       /* f6c/1738 */
 391     ULONG                        GdiBatchCount;                     /* f70/1740 */
 392     ULONG                        Spare2;                            /* f74/1744 */
 393     PVOID                        Spare3;                            /* f78/1748 */
 394     PVOID                        Spare4;                            /* f7c/1750 */
 395     PVOID                        ReservedForOle;                    /* f80/1758 */
 396     ULONG                        WaitingOnLoaderLock;               /* f84/1760 */
 397     PVOID                        Reserved5[3];                      /* f88/1768 */
 398     PVOID                       *TlsExpansionSlots;                 /* f94/1780 */
 399 #ifdef _WIN64
 400     PVOID                        DeallocationBStore;                /*    /1788 */
 401     PVOID                        BStoreLimit;                       /*    /1790 */
 402 #endif
 403     ULONG                        ImpersonationLocale;               /* f98/1798 */
 404     ULONG                        IsImpersonating;                   /* f9c/179c */
 405     PVOID                        NlsCache;                          /* fa0/17a0 */
 406     PVOID                        ShimData;                          /* fa4/17a8 */
 407     ULONG                        HeapVirtualAffinity;               /* fa8/17b0 */
 408     PVOID                        CurrentTransactionHandle;          /* fac/17b8 */
 409     TEB_ACTIVE_FRAME            *ActiveFrame;                       /* fb0/17c0 */
 410     PVOID                       *FlsSlots;                          /* fb4/17c8 */
 411 } TEB, *PTEB;
 412
 413 /***********************************************************************
 414  * Enums
 415  */
 416
 417 typedef enum _FILE_INFORMATION_CLASS {
 418     FileDirectoryInformation = 1,
 419     FileFullDirectoryInformation,
 420     FileBothDirectoryInformation,
 421     FileBasicInformation,
 422     FileStandardInformation,
 423     FileInternalInformation,
 424     FileEaInformation,
 425     FileAccessInformation,
 426     FileNameInformation,
 427     FileRenameInformation,
 428     FileLinkInformation,
 429     FileNamesInformation,
 430     FileDispositionInformation,
 431     FilePositionInformation,
 432     FileFullEaInformation,
 433     FileModeInformation,
 434     FileAlignmentInformation,
 435     FileAllInformation,
 436     FileAllocationInformation,
 437     FileEndOfFileInformation,
 438     FileAlternateNameInformation,
 439     FileStreamInformation,
 440     FilePipeInformation,
 441     FilePipeLocalInformation,
 442     FilePipeRemoteInformation,
 443     FileMailslotQueryInformation,
 444     FileMailslotSetInformation,
 445     FileCompressionInformation,
 446     FileObjectIdInformation,
 447     FileCompletionInformation,
 448     FileMoveClusterInformation,
 449     FileQuotaInformation,
 450     FileReparsePointInformation,
 451     FileNetworkOpenInformation,
 452     FileAttributeTagInformation,
 453     FileTrackingInformation,
 454     FileIdBothDirectoryInformation,
 455     FileIdFullDirectoryInformation,
 456     FileValidDataLengthInformation,
 457     FileShortNameInformation,
 458     FileIoCompletionNotificationInformation,
 459     FileIoStatusBlockRangeInformation,
 460     FileIoPriorityHintInformation,
 461     FileSfioReserveInformation,
 462     FileSfioVolumeInformation,
 463     FileHardLinkInformation,
 464     FileProcessIdsUsingFileInformation,
 465     FileNormalizedNameInformation,
 466     FileNetworkPhysicalNameInformation,
 467     FileIdGlobalTxDirectoryInformation,
 468     FileIsRemoteDeviceInformation,
 469     FileAttributeCacheInformation,
 470     FileNumaNodeInformation,
 471     FileStandardLinkInformation,
 472     FileRemoteProtocolInformation,
 473     FileRenameInformationBypassAccessCheck,
 474     FileLinkInformationBypassAccessCheck,
 475     FileVolumeNameInformation,
 476     FileIdInformation,
 477     FileIdExtdDirectoryInformation,
 478     FileReplaceCompletionInformation,
 479     FileHardLinkFullIdInformation,
 480     FileIdExtdBothDirectoryInformation,
 481     FileMaximumInformation
 482 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
 483
 484 typedef struct _FILE_DIRECTORY_INFORMATION {
 485     ULONG               NextEntryOffset;
 486     ULONG               FileIndex;
 487     LARGE_INTEGER       CreationTime;
 488     LARGE_INTEGER       LastAccessTime;
 489     LARGE_INTEGER       LastWriteTime;
 490     LARGE_INTEGER       ChangeTime;
 491     LARGE_INTEGER       EndOfFile;
 492     LARGE_INTEGER       AllocationSize;
 493     ULONG               FileAttributes;
 494     ULONG               FileNameLength;
 495     WCHAR               FileName[ANYSIZE_ARRAY];
 496 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
 497
 498 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
 499     ULONG               NextEntryOffset;
 500     ULONG               FileIndex;
 501     LARGE_INTEGER       CreationTime;
 502     LARGE_INTEGER       LastAccessTime;
 503     LARGE_INTEGER       LastWriteTime;
 504     LARGE_INTEGER       ChangeTime;
 505     LARGE_INTEGER       EndOfFile;
 506     LARGE_INTEGER       AllocationSize;
 507     ULONG               FileAttributes;
 508     ULONG               FileNameLength;
 509     ULONG               EaSize;
 510     WCHAR               FileName[ANYSIZE_ARRAY];
 511 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
 512   FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
 513
 514 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
 515     ULONG               NextEntryOffset;
 516     ULONG               FileIndex;
 517     LARGE_INTEGER       CreationTime;
 518     LARGE_INTEGER       LastAccessTime;
 519     LARGE_INTEGER       LastWriteTime;
 520     LARGE_INTEGER       ChangeTime;
 521     LARGE_INTEGER       EndOfFile;
 522     LARGE_INTEGER       AllocationSize;
 523     ULONG               FileAttributes;
 524     ULONG               FileNameLength;
 525     ULONG               EaSize;
 526     LARGE_INTEGER       FileId;
 527     WCHAR               FileName[ANYSIZE_ARRAY];
 528 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
 529
 530 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
 531     ULONG               NextEntryOffset;
 532     ULONG               FileIndex;
 533     LARGE_INTEGER       CreationTime;
 534     LARGE_INTEGER       LastAccessTime;
 535     LARGE_INTEGER       LastWriteTime;
 536     LARGE_INTEGER       ChangeTime;
 537     LARGE_INTEGER       EndOfFile;
 538     LARGE_INTEGER       AllocationSize;
 539     ULONG               FileAttributes;
 540     ULONG               FileNameLength;
 541     ULONG               EaSize;
 542     CHAR                ShortNameLength;
 543     WCHAR               ShortName[12];
 544     WCHAR               FileName[ANYSIZE_ARRAY];
 545 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
 546   FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
 547
 548 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
 549     ULONG               NextEntryOffset;
 550     ULONG               FileIndex;
 551     LARGE_INTEGER       CreationTime;
 552     LARGE_INTEGER       LastAccessTime;
 553     LARGE_INTEGER       LastWriteTime;
 554     LARGE_INTEGER       ChangeTime;
 555     LARGE_INTEGER       EndOfFile;
 556     LARGE_INTEGER       AllocationSize;
 557     ULONG               FileAttributes;
 558     ULONG               FileNameLength;
 559     ULONG               EaSize;
 560     CHAR                ShortNameLength;
 561     WCHAR               ShortName[12];
 562     LARGE_INTEGER       FileId;
 563     WCHAR               FileName[ANYSIZE_ARRAY];
 564 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
 565
 566 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
 567     ULONG               NextEntryOffset;
 568     ULONG               FileIndex;
 569     LARGE_INTEGER       CreationTime;
 570     LARGE_INTEGER       LastAccessTime;
 571     LARGE_INTEGER       LastWriteTime;
 572     LARGE_INTEGER       ChangeTime;
 573     LARGE_INTEGER       EndOfFile;
 574     LARGE_INTEGER       AllocationSize;
 575     ULONG               FileAttributes;
 576     ULONG               FileNameLength;
 577     LARGE_INTEGER       FileId;
 578     GUID                LockingTransactionId;
 579     ULONG               TxInfoFlags;
 580     WCHAR               FileName[ANYSIZE_ARRAY];
 581 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
 582
 583 typedef struct _FILE_BASIC_INFORMATION {
 584     LARGE_INTEGER CreationTime;
 585     LARGE_INTEGER LastAccessTime;
 586     LARGE_INTEGER LastWriteTime;
 587     LARGE_INTEGER ChangeTime;
 588     ULONG FileAttributes;
 589 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
 590
 591 typedef struct _FILE_STANDARD_INFORMATION {
 592     LARGE_INTEGER AllocationSize;
 593     LARGE_INTEGER EndOfFile;
 594     ULONG NumberOfLinks;
 595     BOOLEAN DeletePending;
 596     BOOLEAN Directory;
 597 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
 598
 599 typedef struct _FILE_INTERNAL_INFORMATION {
 600     LARGE_INTEGER IndexNumber;
 601 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
 602
 603 typedef struct _FILE_ID_128 {
 604     UCHAR Identifier[16];
 605 } FILE_ID_128, *PFILE_ID_128;
 606
 607 typedef struct _FILE_ID_INFORMATION {
 608     ULONGLONG VolumeSerialNumber;
 609     FILE_ID_128 FileId;
 610 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
 611
 612 typedef struct _FILE_EA_INFORMATION {
 613     ULONG EaSize;
 614 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
 615
 616 typedef struct _FILE_ACCESS_INFORMATION {
 617     ACCESS_MASK AccessFlags;
 618 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
 619
 620 typedef struct _FILE_NAME_INFORMATION {
 621     ULONG FileNameLength;
 622     WCHAR FileName[1];
 623 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
 624
 625 typedef struct _FILE_RENAME_INFORMATION {
 626     BOOLEAN Replace;
 627     HANDLE RootDir;
 628     ULONG FileNameLength;
 629     WCHAR FileName[1];
 630 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
 631
 632 typedef struct _FILE_LINK_INFORMATION {
 633     BOOLEAN ReplaceIfExists;
 634     HANDLE RootDirectory;
 635     ULONG FileNameLength;
 636     WCHAR FileName[1];
 637 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
 638
 639 typedef struct _FILE_NAMES_INFORMATION {
 640     ULONG NextEntryOffset;
 641     ULONG FileIndex;
 642     ULONG FileNameLength;
 643     WCHAR FileName[1];
 644 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
 645
 646 typedef struct _FILE_DISPOSITION_INFORMATION {
 647     BOOLEAN DoDeleteFile;
 648 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
 649
 650 typedef struct _FILE_POSITION_INFORMATION {
 651     LARGE_INTEGER CurrentByteOffset;
 652 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
 653
 654 typedef struct _FILE_ALIGNMENT_INFORMATION {
 655     ULONG AlignmentRequirement;
 656 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
 657
 658 typedef struct _FILE_ALLOCATION_INFORMATION {
 659     LARGE_INTEGER AllocationSize;
 660 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
 661
 662 typedef struct _FILE_END_OF_FILE_INFORMATION {
 663     LARGE_INTEGER EndOfFile;
 664 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
 665
 666 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
 667     LARGE_INTEGER CreationTime;
 668     LARGE_INTEGER LastAccessTime;
 669     LARGE_INTEGER LastWriteTime;
 670     LARGE_INTEGER ChangeTime;
 671     LARGE_INTEGER AllocationSize;
 672     LARGE_INTEGER EndOfFile;
 673     ULONG FileAttributes;
 674 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
 675
 676 typedef struct _FILE_FULL_EA_INFORMATION {
 677     ULONG NextEntryOffset;
 678     UCHAR Flags;
 679     UCHAR EaNameLength;
 680     USHORT EaValueLength;
 681     CHAR EaName[1];
 682 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
 683
 684 typedef struct _FILE_MODE_INFORMATION {
 685     ULONG Mode;
 686 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
 687
 688 typedef struct _FILE_STREAM_INFORMATION
 689 {
 690     ULONG NextEntryOffset;
 691     ULONG StreamNameLength;
 692     LARGE_INTEGER StreamSize;
 693     LARGE_INTEGER StreamAllocationSize;
 694     WCHAR StreamName[1];
 695 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
 696
 697 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
 698 {
 699     ULONG FileAttributes;
 700     ULONG ReparseTag;
 701 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
 702
 703 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
 704     ULONG MaximumMessageSize;
 705     ULONG MailslotQuota;
 706     ULONG NextMessageSize;
 707     ULONG MessagesAvailable;
 708     LARGE_INTEGER ReadTimeout;
 709 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
 710
 711 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
 712     LARGE_INTEGER ReadTimeout;
 713 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
 714
 715 typedef struct _FILE_PIPE_INFORMATION {
 716     ULONG ReadMode;
 717     ULONG CompletionMode;
 718 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
 719
 720 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
 721     ULONG NamedPipeType;
 722     ULONG NamedPipeConfiguration;
 723     ULONG MaximumInstances;
 724     ULONG CurrentInstances;
 725     ULONG InboundQuota;
 726     ULONG ReadDataAvailable;
 727     ULONG OutboundQuota;
 728     ULONG WriteQuotaAvailable;
 729     ULONG NamedPipeState;
 730     ULONG NamedPipeEnd;
 731 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
 732
 733 typedef struct _FILE_OBJECTID_INFORMATION {
 734     LONGLONG FileReference;
 735     UCHAR ObjectId[16];
 736     union {
 737         struct {
 738             UCHAR BirthVolumeId[16];
 739             UCHAR BirthObjectId[16];
 740             UCHAR DomainId[16];
 741         } DUMMYSTRUCTNAME;
 742         UCHAR ExtendedInfo[48];
 743     } DUMMYUNIONNAME;
 744 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
 745
 746 typedef struct _FILE_QUOTA_INFORMATION {
 747     ULONG NextEntryOffset;
 748     ULONG SidLength;
 749     LARGE_INTEGER ChangeTime;
 750     LARGE_INTEGER QuotaUsed;
 751     LARGE_INTEGER QuotaThreshold;
 752     LARGE_INTEGER QuotaLimit;
 753     SID Sid;
 754 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
 755
 756 typedef struct _FILE_REPARSE_POINT_INFORMATION {
 757     LONGLONG FileReference;
 758     ULONG Tag;
 759 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
 760
 761 typedef struct _FILE_ALL_INFORMATION {
 762     FILE_BASIC_INFORMATION     BasicInformation;
 763     FILE_STANDARD_INFORMATION  StandardInformation;
 764     FILE_INTERNAL_INFORMATION  InternalInformation;
 765     FILE_EA_INFORMATION        EaInformation;
 766     FILE_ACCESS_INFORMATION    AccessInformation;
 767     FILE_POSITION_INFORMATION  PositionInformation;
 768     FILE_MODE_INFORMATION      ModeInformation;
 769     FILE_ALIGNMENT_INFORMATION AlignmentInformation;
 770     FILE_NAME_INFORMATION      NameInformation;
 771 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
 772
 773 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
 774     ULONG Flags;
 775 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
 776
 777 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
 778 #define FILE_SKIP_SET_EVENT_ON_HANDLE        0x2
 779 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO  0x4
 780
 781 typedef enum _FSINFOCLASS {
 782     FileFsVolumeInformation = 1,
 783     FileFsLabelInformation,
 784     FileFsSizeInformation,
 785     FileFsDeviceInformation,
 786     FileFsAttributeInformation,
 787     FileFsControlInformation,
 788     FileFsFullSizeInformation,
 789     FileFsObjectIdInformation,
 790     FileFsMaximumInformation
 791 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
 792
 793 typedef enum _KEY_INFORMATION_CLASS {
 794     KeyBasicInformation,
 795     KeyNodeInformation,
 796     KeyFullInformation,
 797     KeyNameInformation,
 798     KeyCachedInformation,
 799     KeyFlagsInformation,
 800     KeyVirtualizationInformation,
 801     KeyHandleTagsInformation,
 802     MaxKeyInfoClass
 803 } KEY_INFORMATION_CLASS;
 804
 805 typedef enum _KEY_VALUE_INFORMATION_CLASS {
 806     KeyValueBasicInformation,
 807     KeyValueFullInformation,
 808     KeyValuePartialInformation,
 809     KeyValueFullInformationAlign64,
 810     KeyValuePartialInformationAlign64
 811 } KEY_VALUE_INFORMATION_CLASS;
 812
 813 typedef enum _OBJECT_INFORMATION_CLASS {
 814     ObjectBasicInformation,
 815     ObjectNameInformation,
 816     ObjectTypeInformation,
 817     ObjectAllInformation,
 818     ObjectDataInformation
 819 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
 820
 821 typedef enum _PROCESSINFOCLASS {
 822     ProcessBasicInformation = 0,
 823     ProcessQuotaLimits = 1,
 824     ProcessIoCounters = 2,
 825     ProcessVmCounters = 3,
 826     ProcessTimes = 4,
 827     ProcessBasePriority = 5,
 828     ProcessRaisePriority = 6,
 829     ProcessDebugPort = 7,
 830     ProcessExceptionPort = 8,
 831     ProcessAccessToken = 9,
 832     ProcessLdtInformation = 10,
 833     ProcessLdtSize = 11,
 834     ProcessDefaultHardErrorMode = 12,
 835     ProcessIoPortHandlers = 13,
 836     ProcessPooledUsageAndLimits = 14,
 837     ProcessWorkingSetWatch = 15,
 838     ProcessUserModeIOPL = 16,
 839     ProcessEnableAlignmentFaultFixup = 17,
 840     ProcessPriorityClass = 18,
 841     ProcessWx86Information = 19,
 842     ProcessHandleCount = 20,
 843     ProcessAffinityMask = 21,
 844     ProcessPriorityBoost = 22,
 845     ProcessDeviceMap = 23,
 846     ProcessSessionInformation = 24,
 847     ProcessForegroundInformation = 25,
 848     ProcessWow64Information = 26,
 849     ProcessImageFileName = 27,
 850     ProcessLUIDDeviceMapsEnabled = 28,
 851     ProcessBreakOnTermination = 29,
 852     ProcessDebugObjectHandle = 30,
 853     ProcessDebugFlags = 31,
 854     ProcessHandleTracing = 32,
 855     ProcessExecuteFlags = 34,
 856     ProcessTlsInformation = 35,
 857     ProcessCookie = 36,
 858     ProcessImageInformation = 37,
 859     ProcessCycleTime = 38,
 860     ProcessPagePriority = 39,
 861     ProcessInstrumentationCallback = 40,
 862     ProcessThreadStackAllocation = 41,
 863     ProcessWorkingSetWatchEx = 42,
 864     ProcessImageFileNameWin32 = 43,
 865     MaxProcessInfoClass
 866 } PROCESSINFOCLASS, PROCESS_INFORMATION_CLASS;
 867
 868 #define MEM_EXECUTE_OPTION_DISABLE   0x01
 869 #define MEM_EXECUTE_OPTION_ENABLE    0x02
 870 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
 871 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
 872
 873 typedef enum _SECTION_INHERIT {
 874     ViewShare = 1,
 875     ViewUnmap = 2
 876 } SECTION_INHERIT;
 877
 878 typedef enum _SYSTEM_INFORMATION_CLASS {
 879     SystemBasicInformation = 0,
 880     SystemCpuInformation = 1,
 881     SystemPerformanceInformation = 2,
 882     SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
 883     Unknown4,
 884     SystemProcessInformation = 5,
 885     Unknown6,
 886     Unknown7,
 887     SystemProcessorPerformanceInformation = 8,
 888     Unknown9,
 889     Unknown10,
 890     SystemModuleInformation = 11,
 891     Unknown12,
 892     Unknown13,
 893     Unknown14,
 894     Unknown15,
 895     SystemHandleInformation = 16,
 896     Unknown17,
 897     SystemPageFileInformation = 18,
 898     Unknown19,
 899     Unknown20,
 900     SystemCacheInformation = 21,
 901     Unknown22,
 902     SystemInterruptInformation = 23,
 903     SystemDpcBehaviourInformation = 24,
 904     SystemFullMemoryInformation = 25,
 905     SystemNotImplemented6 = 25,
 906     SystemLoadImage = 26,
 907     SystemUnloadImage = 27,
 908     SystemTimeAdjustmentInformation = 28,
 909     SystemTimeAdjustment = 28,
 910     SystemSummaryMemoryInformation = 29,
 911     SystemNotImplemented7 = 29,
 912     SystemNextEventIdInformation = 30,
 913     SystemNotImplemented8 = 30,
 914     SystemEventIdsInformation = 31,
 915     SystemCrashDumpInformation = 32,
 916     SystemExceptionInformation = 33,
 917     SystemCrashDumpStateInformation = 34,
 918     SystemKernelDebuggerInformation = 35,
 919     SystemContextSwitchInformation = 36,
 920     SystemRegistryQuotaInformation = 37,
 921     SystemCurrentTimeZoneInformation = 44,
 922     SystemTimeZoneInformation = 44,
 923     SystemLookasideInformation = 45,
 924     SystemSetTimeSlipEvent = 46,
 925     SystemCreateSession = 47,
 926     SystemDeleteSession = 48,
 927     SystemInvalidInfoClass4 = 49,
 928     SystemRangeStartInformation = 50,
 929     SystemVerifierInformation = 51,
 930     SystemAddVerifier = 52,
 931     SystemSessionProcessesInformation   = 53,
 932     Unknown54,
 933     Unknown55,
 934     Unknown56,
 935     Unknown57,
 936     SystemRecommendedSharedDataAlignment = 58,
 937     Unknown59,
 938     Unknown60,
 939     Unknown61,
 940     Unknown62,
 941     Unknown63,
 942     Unknown64,
 943     Unknown65,
 944     Unknown66,
 945     Unknown67,
 946     Unknown68,
 947     Unknown69,
 948     Unknown70,
 949     Unknown71,
 950     Unknown72,
 951     SystemLogicalProcessorInformation = 73,
 952     SystemLogicalProcessorInformationEx = 107,
 953     SystemInformationClassMax
 954 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
 955
 956 typedef enum _THREADINFOCLASS {
 957     ThreadBasicInformation,
 958     ThreadTimes,
 959     ThreadPriority,
 960     ThreadBasePriority,
 961     ThreadAffinityMask,
 962     ThreadImpersonationToken,
 963     ThreadDescriptorTableEntry,
 964     ThreadEnableAlignmentFaultFixup,
 965     ThreadEventPair_Reusable,
 966     ThreadQuerySetWin32StartAddress,
 967     ThreadZeroTlsCell,
 968     ThreadPerformanceCount,
 969     ThreadAmILastThread,
 970     ThreadIdealProcessor,
 971     ThreadPriorityBoost,
 972     ThreadSetTlsArrayAddress,
 973     ThreadIsIoPending,
 974     ThreadHideFromDebugger,
 975     ThreadBreakOnTermination,
 976     ThreadSwitchLegacyState,
 977     ThreadIsTerminated,
 978     ThreadLastSystemCall,
 979     ThreadIoPriority,
 980     ThreadCycleTime,
 981     ThreadPagePriority,
 982     ThreadActualBasePriority,
 983     ThreadTebInformation,
 984     ThreadCSwitchMon,
 985     ThreadCSwitchPmu,
 986     ThreadWow64Context,
 987     ThreadGroupInformation,
 988     ThreadUmsInformation,
 989     ThreadCounterProfiling,
 990     ThreadIdealProcessorEx,
 991     MaxThreadInfoClass
 992 } THREADINFOCLASS;
 993
 994 typedef struct _THREAD_BASIC_INFORMATION
 995 {
 996     NTSTATUS  ExitStatus;
 997     PVOID     TebBaseAddress;
 998     CLIENT_ID ClientId;
 999     ULONG_PTR AffinityMask;
1000     LONG      Priority;
1001     LONG      BasePriority;
1002 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1003
1004 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1005 {
1006     DWORD       Selector;
1007     LDT_ENTRY   Entry;
1008 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
1009
1010 typedef struct _KERNEL_USER_TIMES {
1011     LARGE_INTEGER  CreateTime;
1012     LARGE_INTEGER  ExitTime;
1013     LARGE_INTEGER  KernelTime;
1014     LARGE_INTEGER  UserTime;
1015 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1016
1017 typedef enum _WINSTATIONINFOCLASS {
1018     WinStationInformation = 8
1019 } WINSTATIONINFOCLASS;
1020
1021 typedef enum _MEMORY_INFORMATION_CLASS {
1022     MemoryBasicInformation,
1023     MemoryWorkingSetList,
1024     MemorySectionName,
1025     MemoryBasicVlmInformation
1026 } MEMORY_INFORMATION_CLASS;
1027
1028 typedef struct _MEMORY_SECTION_NAME
1029 {
1030     UNICODE_STRING SectionFileName;
1031 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1032
1033 typedef enum _MUTANT_INFORMATION_CLASS
1034 {
1035     MutantBasicInformation
1036 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
1037
1038 typedef struct _MUTANT_BASIC_INFORMATION {
1039     LONG        CurrentCount;
1040     BOOLEAN     OwnedByCaller;
1041     BOOLEAN     AbandonedState;
1042 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
1043
1044 typedef enum _TIMER_INFORMATION_CLASS
1045 {
1046     TimerBasicInformation = 0
1047 } TIMER_INFORMATION_CLASS;
1048
1049 typedef struct _TIMER_BASIC_INFORMATION
1050 {
1051     LARGE_INTEGER RemainingTime;
1052     BOOLEAN       TimerState;
1053 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
1054
1055
1056 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
1057 typedef enum
1058 {
1059     INVALID_PATH = 0,
1060     UNC_PATH,              /* "//foo" */
1061     ABSOLUTE_DRIVE_PATH,   /* "c:/foo" */
1062     RELATIVE_DRIVE_PATH,   /* "c:foo" */
1063     ABSOLUTE_PATH,         /* "/foo" */
1064     RELATIVE_PATH,         /* "foo" */
1065     DEVICE_PATH,           /* "//./foo" */
1066     UNC_DOT_PATH           /* "//." */
1067 } DOS_PATHNAME_TYPE;
1068
1069
1070 /***********************************************************************
1071  * Types and data structures
1072  */
1073
1074 /* This is used by NtQuerySystemInformation */
1075 typedef struct _SYSTEM_THREAD_INFORMATION
1076 {                                    /* win32/win64 */
1077     LARGE_INTEGER KernelTime;          /* 00/00 */
1078     LARGE_INTEGER UserTime;            /* 08/08 */
1079     LARGE_INTEGER CreateTime;          /* 10/10 */
1080     DWORD         dwTickCount;         /* 18/18 */
1081     LPVOID        StartAddress;        /* 1c/20 */
1082     CLIENT_ID     ClientId;            /* 20/28 */
1083     DWORD         dwCurrentPriority;   /* 28/38 */
1084     DWORD         dwBasePriority;      /* 2c/3c */
1085     DWORD         dwContextSwitches;   /* 30/40 */
1086     DWORD         dwThreadState;       /* 34/44 */
1087     DWORD         dwWaitReason;        /* 38/48 */
1088     DWORD         dwUnknown;           /* 3c/4c */
1089 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
1090
1091 typedef struct _IO_STATUS_BLOCK {
1092   union {
1093     NTSTATUS Status;
1094     PVOID Pointer;
1095   } DUMMYUNIONNAME;
1096
1097   ULONG_PTR Information;
1098 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
1099
1100 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
1101
1102 typedef struct _KEY_BASIC_INFORMATION {
1103     LARGE_INTEGER LastWriteTime;
1104     ULONG         TitleIndex;
1105     ULONG         NameLength;
1106     WCHAR         Name[1];
1107 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
1108
1109 typedef struct _KEY_NODE_INFORMATION
1110 {
1111     LARGE_INTEGER LastWriteTime;
1112     ULONG         TitleIndex;
1113     ULONG         ClassOffset;
1114     ULONG         ClassLength;
1115     ULONG         NameLength;
1116     WCHAR         Name[1];
1117    /* Class[1]; */
1118 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
1119
1120 typedef struct _KEY_FULL_INFORMATION
1121 {
1122     LARGE_INTEGER LastWriteTime;
1123     ULONG         TitleIndex;
1124     ULONG         ClassOffset;
1125     ULONG         ClassLength;
1126     ULONG         SubKeys;
1127     ULONG         MaxNameLen;
1128     ULONG         MaxClassLen;
1129     ULONG         Values;
1130     ULONG         MaxValueNameLen;
1131     ULONG         MaxValueDataLen;
1132     WCHAR         Class[1];
1133 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
1134
1135 typedef struct _KEY_NAME_INFORMATION {
1136     ULONG         NameLength;
1137     WCHAR         Name[1];
1138 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
1139
1140 typedef struct _KEY_CACHED_INFORMATION
1141 {
1142     LARGE_INTEGER LastWriteTime;
1143     ULONG         TitleIndex;
1144     ULONG         SubKeys;
1145     ULONG         MaxNameLen;
1146     ULONG         Values;
1147     ULONG         MaxValueNameLen;
1148     ULONG         MaxValueDataLen;
1149     ULONG         NameLength;
1150 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
1151
1152 typedef struct _KEY_VALUE_ENTRY
1153 {
1154     PUNICODE_STRING ValueName;
1155     ULONG           DataLength;
1156     ULONG           DataOffset;
1157     ULONG           Type;
1158 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
1159
1160 typedef struct _KEY_VALUE_BASIC_INFORMATION {
1161     ULONG TitleIndex;
1162     ULONG Type;
1163     ULONG NameLength;
1164     WCHAR Name[1];
1165 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
1166
1167 typedef struct _KEY_VALUE_FULL_INFORMATION {
1168     ULONG TitleIndex;
1169     ULONG Type;
1170     ULONG DataOffset;
1171     ULONG DataLength;
1172     ULONG NameLength;
1173     WCHAR Name[1];
1174 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
1175
1176 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
1177     ULONG TitleIndex;
1178     ULONG Type;
1179     ULONG DataLength;
1180     UCHAR Data[1];
1181 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
1182
1183 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
1184 #define __OBJECT_ATTRIBUTES_DEFINED__
1185 typedef struct _OBJECT_ATTRIBUTES {
1186   ULONG Length;
1187   HANDLE RootDirectory;
1188   PUNICODE_STRING ObjectName;
1189   ULONG Attributes;
1190   PVOID SecurityDescriptor;       /* type SECURITY_DESCRIPTOR */
1191   PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
1192 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
1193 #endif
1194
1195 typedef struct _OBJECT_DATA_INFORMATION {
1196     BOOLEAN InheritHandle;
1197     BOOLEAN ProtectFromClose;
1198 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
1199
1200 typedef struct _OBJECT_BASIC_INFORMATION {
1201     ULONG  Attributes;
1202     ACCESS_MASK  GrantedAccess;
1203     ULONG  HandleCount;
1204     ULONG  PointerCount;
1205     ULONG  PagedPoolUsage;
1206     ULONG  NonPagedPoolUsage;
1207     ULONG  Reserved[3];
1208     ULONG  NameInformationLength;
1209     ULONG  TypeInformationLength;
1210     ULONG  SecurityDescriptorLength;
1211     LARGE_INTEGER  CreateTime;
1212 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
1213
1214 typedef struct _OBJECT_NAME_INFORMATION {
1215     UNICODE_STRING Name;
1216 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
1217
1218 typedef struct __OBJECT_TYPE_INFORMATION {
1219     UNICODE_STRING TypeName;
1220     ULONG Reserved [22];
1221 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
1222
1223 typedef struct _PROCESS_BASIC_INFORMATION {
1224 #ifdef __WINESRC__
1225     DWORD_PTR ExitStatus;
1226     PPEB PebBaseAddress;
1227     DWORD_PTR AffinityMask;
1228     DWORD_PTR BasePriority;
1229     ULONG_PTR UniqueProcessId;
1230     ULONG_PTR InheritedFromUniqueProcessId;
1231 #else
1232     PVOID Reserved1;
1233     PPEB PebBaseAddress;
1234     PVOID Reserved2[2];
1235     ULONG_PTR UniqueProcessId;
1236     PVOID Reserved3;
1237 #endif
1238 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
1239
1240 #define PROCESS_PRIOCLASS_IDLE          1
1241 #define PROCESS_PRIOCLASS_NORMAL        2
1242 #define PROCESS_PRIOCLASS_HIGH          3
1243 #define PROCESS_PRIOCLASS_REALTIME      4
1244 #define PROCESS_PRIOCLASS_BELOW_NORMAL  5
1245 #define PROCESS_PRIOCLASS_ABOVE_NORMAL  6
1246
1247 typedef struct _PROCESS_PRIORITY_CLASS {
1248     BOOLEAN     Foreground;
1249     UCHAR       PriorityClass;
1250 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
1251
1252 typedef struct _RTL_HEAP_DEFINITION {
1253     ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
1254
1255     ULONG Unknown[11];
1256 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
1257
1258 typedef struct _RTL_RWLOCK {
1259     RTL_CRITICAL_SECTION rtlCS;
1260
1261     HANDLE hSharedReleaseSemaphore;
1262     UINT   uSharedWaiters;
1263
1264     HANDLE hExclusiveReleaseSemaphore;
1265     UINT   uExclusiveWaiters;
1266
1267     INT    iNumberActive;
1268     HANDLE hOwningThreadId;
1269     DWORD  dwTimeoutBoost;
1270     PVOID  pDebugInfo;
1271 } RTL_RWLOCK, *LPRTL_RWLOCK;
1272
1273 /* System Information Class 0x00 */
1274
1275 typedef struct _SYSTEM_BASIC_INFORMATION {
1276 #ifdef __WINESRC__
1277     DWORD     unknown;
1278     ULONG     KeMaximumIncrement;
1279     ULONG     PageSize;
1280     ULONG     MmNumberOfPhysicalPages;
1281     ULONG     MmLowestPhysicalPage;
1282     ULONG     MmHighestPhysicalPage;
1283     ULONG_PTR AllocationGranularity;
1284     PVOID     LowestUserAddress;
1285     PVOID     HighestUserAddress;
1286     ULONG_PTR ActiveProcessorsAffinityMask;
1287     BYTE      NumberOfProcessors;
1288 #else
1289     BYTE Reserved1[24];
1290     PVOID Reserved2[4];
1291     CCHAR NumberOfProcessors;
1292 #endif
1293 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
1294
1295 /* System Information Class 0x01 */
1296
1297 typedef struct _SYSTEM_CPU_INFORMATION {
1298     WORD Architecture;
1299     WORD Level;
1300     WORD Revision;       /* combination of CPU model and stepping */
1301     WORD Reserved;       /* always zero */
1302     DWORD FeatureSet;    /* see bit flags below */
1303 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
1304
1305 /* definitions of bits in the Feature set for the x86 processors */
1306 #define CPU_FEATURE_VME    0x00000005   /* Virtual 86 Mode Extensions */
1307 #define CPU_FEATURE_TSC    0x00000002   /* Time Stamp Counter available */
1308 #define CPU_FEATURE_CMOV   0x00000008   /* Conditional Move instruction*/
1309 #define CPU_FEATURE_PGE    0x00000014   /* Page table Entry Global bit */
1310 #define CPU_FEATURE_PSE    0x00000024   /* Page Size Extension */
1311 #define CPU_FEATURE_MTRR   0x00000040   /* Memory Type Range Registers */
1312 #define CPU_FEATURE_CX8    0x00000080   /* Compare and eXchange 8 byte instr. */
1313 #define CPU_FEATURE_MMX    0x00000100   /* Multi Media eXtensions */
1314 #define CPU_FEATURE_X86    0x00000200   /* seems to be always ON, on the '86 */
1315 #define CPU_FEATURE_PAT    0x00000400   /* Page Attribute Table */
1316 #define CPU_FEATURE_FXSR   0x00000800   /* FXSAVE and FXSTORE instructions */
1317 #define CPU_FEATURE_SEP    0x00001000   /* SYSENTER and SYSEXIT instructions */
1318 #define CPU_FEATURE_SSE    0x00002000   /* SSE extensions (ext. MMX) */
1319 #define CPU_FEATURE_3DNOW  0x00004000   /* 3DNOW instructions available */
1320 #define CPU_FEATURE_SSE2   0x00010000   /* SSE2 extensions (XMMI64) */
1321 #define CPU_FEATURE_DS     0x00020000   /* Debug Store */
1322 #define CPU_FEATURE_HTT    0x00040000   /* Hyper Threading Technology */
1323
1324 /* System Information Class 0x02 */
1325
1326 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
1327 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
1328     LARGE_INTEGER IdleTime;
1329     LARGE_INTEGER ReadTransferCount;
1330     LARGE_INTEGER WriteTransferCount;
1331     LARGE_INTEGER OtherTransferCount;
1332     ULONG ReadOperationCount;
1333     ULONG WriteOperationCount;
1334     ULONG OtherOperationCount;
1335     ULONG AvailablePages;
1336     ULONG TotalCommittedPages;
1337     ULONG TotalCommitLimit;
1338     ULONG PeakCommitment;
1339     ULONG PageFaults;
1340     ULONG WriteCopyFaults;
1341     ULONG TransitionFaults;
1342     ULONG Reserved1;
1343     ULONG DemandZeroFaults;
1344     ULONG PagesRead;
1345     ULONG PageReadIos;
1346     ULONG Reserved2[2];
1347     ULONG PagefilePagesWritten;
1348     ULONG PagefilePageWriteIos;
1349     ULONG MappedFilePagesWritten;
1350     ULONG MappedFilePageWriteIos;
1351     ULONG PagedPoolUsage;
1352     ULONG NonPagedPoolUsage;
1353     ULONG PagedPoolAllocs;
1354     ULONG PagedPoolFrees;
1355     ULONG NonPagedPoolAllocs;
1356     ULONG NonPagedPoolFrees;
1357     ULONG TotalFreeSystemPtes;
1358     ULONG SystemCodePage;
1359     ULONG TotalSystemDriverPages;
1360     ULONG TotalSystemCodePages;
1361     ULONG SmallNonPagedLookasideListAllocateHits;
1362     ULONG SmallPagedLookasideListAllocateHits;
1363     ULONG Reserved3;
1364     ULONG MmSystemCachePage;
1365     ULONG PagedPoolPage;
1366     ULONG SystemDriverPage;
1367     ULONG FastReadNoWait;
1368     ULONG FastReadWait;
1369     ULONG FastReadResourceMiss;
1370     ULONG FastReadNotPossible;
1371     ULONG FastMdlReadNoWait;
1372     ULONG FastMdlReadWait;
1373     ULONG FastMdlReadResourceMiss;
1374     ULONG FastMdlReadNotPossible;
1375     ULONG MapDataNoWait;
1376     ULONG MapDataWait;
1377     ULONG MapDataNoWaitMiss;
1378     ULONG MapDataWaitMiss;
1379     ULONG PinMappedDataCount;
1380     ULONG PinReadNoWait;
1381     ULONG PinReadWait;
1382     ULONG PinReadNoWaitMiss;
1383     ULONG PinReadWaitMiss;
1384     ULONG CopyReadNoWait;
1385     ULONG CopyReadWait;
1386     ULONG CopyReadNoWaitMiss;
1387     ULONG CopyReadWaitMiss;
1388     ULONG MdlReadNoWait;
1389     ULONG MdlReadWait;
1390     ULONG MdlReadNoWaitMiss;
1391     ULONG MdlReadWaitMiss;
1392     ULONG ReadAheadIos;
1393     ULONG LazyWriteIos;
1394     ULONG LazyWritePages;
1395     ULONG DataFlushes;
1396     ULONG DataPages;
1397     ULONG ContextSwitches;
1398     ULONG FirstLevelTbFills;
1399     ULONG SecondLevelTbFills;
1400     ULONG SystemCalls;
1401 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
1402
1403 /* System Information Class 0x03 */
1404
1405 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
1406 #ifdef __WINESRC__
1407     LARGE_INTEGER liKeBootTime;
1408     LARGE_INTEGER liKeSystemTime;
1409     LARGE_INTEGER liExpTimeZoneBias;
1410     ULONG uCurrentTimeZoneId;
1411     DWORD dwUnknown1[5];
1412 #else
1413     BYTE Reserved1[48];
1414 #endif
1415 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
1416
1417 /* System Information Class 0x08 */
1418
1419 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
1420     LARGE_INTEGER IdleTime;
1421     LARGE_INTEGER KernelTime;
1422     LARGE_INTEGER UserTime;
1423     LARGE_INTEGER Reserved1[2];
1424     ULONG Reserved2;
1425 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
1426
1427 /* System Information Class 0x0b */
1428
1429 typedef struct _SYSTEM_DRIVER_INFORMATION {
1430     PVOID pvAddress;
1431     DWORD dwUnknown1;
1432     DWORD dwUnknown2;
1433     DWORD dwEntryIndex;
1434     DWORD dwUnknown3;
1435     char szName[MAX_PATH + 1];
1436 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
1437
1438 /* System Information Class 0x10 */
1439
1440 typedef struct _SYSTEM_HANDLE_ENTRY {
1441     ULONG  OwnerPid;
1442     BYTE   ObjectType;
1443     BYTE   HandleFlags;
1444     USHORT HandleValue;
1445     PVOID  ObjectPointer;
1446     ULONG  AccessMask;
1447 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
1448
1449 typedef struct _SYSTEM_HANDLE_INFORMATION {
1450     ULONG               Count;
1451     SYSTEM_HANDLE_ENTRY Handle[1];
1452 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
1453
1454 /* System Information Class 0x15 */
1455
1456 typedef struct _SYSTEM_CACHE_INFORMATION {
1457     ULONG CurrentSize;
1458     ULONG PeakSize;
1459     ULONG PageFaultCount;
1460     ULONG MinimumWorkingSet;
1461     ULONG MaximumWorkingSet;
1462     ULONG unused[4];
1463 #ifdef _WIN64
1464     ULONG unknown64[7];
1465 #endif
1466 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
1467
1468 /* System Information Class 0x17 */
1469
1470 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
1471     BYTE Reserved1[24];
1472 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
1473
1474 typedef struct _SYSTEM_CONFIGURATION_INFO {
1475     union {
1476         ULONG   OemId;
1477         struct {
1478             WORD ProcessorArchitecture;
1479             WORD Reserved;
1480         } tag1;
1481     } tag2;
1482     ULONG PageSize;
1483     PVOID MinimumApplicationAddress;
1484     PVOID MaximumApplicationAddress;
1485     ULONG ActiveProcessorMask;
1486     ULONG NumberOfProcessors;
1487     ULONG ProcessorType;
1488     ULONG AllocationGranularity;
1489     WORD  ProcessorLevel;
1490     WORD  ProcessorRevision;
1491 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
1492
1493 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
1494     BYTE Reserved1[16];
1495 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
1496
1497 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
1498     BYTE Reserved1[32];
1499 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
1500
1501 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
1502         BOOLEAN  DebuggerEnabled;
1503         BOOLEAN  DebuggerNotPresent;
1504 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
1505
1506 /* System Information Class 0x05 */
1507
1508 typedef struct _VM_COUNTERS_ {
1509     SIZE_T PeakVirtualSize;
1510     SIZE_T VirtualSize;
1511     ULONG  PageFaultCount;
1512     SIZE_T PeakWorkingSetSize;
1513     SIZE_T WorkingSetSize;
1514     SIZE_T QuotaPeakPagedPoolUsage;
1515     SIZE_T QuotaPagedPoolUsage;
1516     SIZE_T QuotaPeakNonPagedPoolUsage;
1517     SIZE_T QuotaNonPagedPoolUsage;
1518     SIZE_T PagefileUsage;
1519     SIZE_T PeakPagefileUsage;
1520     SIZE_T PrivatePageCount;
1521 } VM_COUNTERS, *PVM_COUNTERS;
1522
1523 typedef struct _SYSTEM_PROCESS_INFORMATION {
1524 #ifdef __WINESRC__                  /* win32/win64 */
1525     ULONG NextEntryOffset;             /* 00/00 */
1526     DWORD dwThreadCount;               /* 04/04 */
1527     DWORD dwUnknown1[6];               /* 08/08 */
1528     LARGE_INTEGER CreationTime;        /* 20/20 */
1529     LARGE_INTEGER UserTime;            /* 28/28 */
1530     LARGE_INTEGER KernelTime;          /* 30/30 */
1531     UNICODE_STRING ProcessName;        /* 38/38 */
1532     DWORD dwBasePriority;              /* 40/48 */
1533     HANDLE UniqueProcessId;            /* 44/50 */
1534     HANDLE ParentProcessId;            /* 48/58 */
1535     ULONG HandleCount;                 /* 4c/60 */
1536     ULONG SessionId;                   /* 50/64 */
1537     DWORD dwUnknown4;                  /* 54/68 */
1538     VM_COUNTERS vmCounters;            /* 58/70 */
1539     IO_COUNTERS ioCounters;            /* 88/d0 */
1540     SYSTEM_THREAD_INFORMATION ti[1];   /* b8/100 */
1541 #else
1542     ULONG NextEntryOffset;             /* 00/00 */
1543     BYTE Reserved1[52];                /* 04/04 */
1544     PVOID Reserved2[3];                /* 38/38 */
1545     HANDLE UniqueProcessId;            /* 44/50 */
1546     PVOID Reserved3;                   /* 48/58 */
1547     ULONG HandleCount;                 /* 4c/60 */
1548     BYTE Reserved4[4];                 /* 50/64 */
1549     PVOID Reserved5[11];               /* 54/68 */
1550     SIZE_T PeakPagefileUsage;          /* 80/c0 */
1551     SIZE_T PrivatePageCount;           /* 84/c8 */
1552     LARGE_INTEGER Reserved6[6];        /* 88/d0 */
1553 #endif
1554 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
1555
1556 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
1557     ULONG RegistryQuotaAllowed;
1558     ULONG RegistryQuotaUsed;
1559     PVOID Reserved1;
1560 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
1561
1562 typedef struct _SYSTEM_TIME_ADJUSTMENT {
1563     ULONG   TimeAdjustment;
1564     BOOLEAN TimeAdjustmentDisabled;
1565 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
1566
1567 typedef struct _TIME_FIELDS
1568 {   CSHORT Year;
1569     CSHORT Month;
1570     CSHORT Day;
1571     CSHORT Hour;
1572     CSHORT Minute;
1573     CSHORT Second;
1574     CSHORT Milliseconds;
1575     CSHORT Weekday;
1576 } TIME_FIELDS, *PTIME_FIELDS;
1577
1578 typedef struct _WINSTATIONINFORMATIONW {
1579   BYTE Reserved2[70];
1580   ULONG LogonId;
1581   BYTE Reserved3[1140];
1582 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
1583
1584 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
1585
1586 typedef struct _LDR_RESOURCE_INFO
1587 {
1588     ULONG_PTR Type;
1589     ULONG_PTR Name;
1590     ULONG Language;
1591 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
1592
1593
1594 /* debug buffer definitions */
1595
1596 typedef struct _DEBUG_BUFFER {
1597   HANDLE SectionHandle;
1598   PVOID  SectionBase;
1599   PVOID  RemoteSectionBase;
1600   ULONG  SectionBaseDelta;
1601   HANDLE EventPairHandle;
1602   ULONG  Unknown[2];
1603   HANDLE RemoteThreadHandle;
1604   ULONG  InfoClassMask;
1605   ULONG  SizeOfInfo;
1606   ULONG  AllocatedSize;
1607   ULONG  SectionSize;
1608   PVOID  ModuleInformation;
1609   PVOID  BackTraceInformation;
1610   PVOID  HeapInformation;
1611   PVOID  LockInformation;
1612   PVOID  Reserved[8];
1613 } DEBUG_BUFFER, *PDEBUG_BUFFER;
1614
1615 #define PDI_MODULES                       0x01
1616 #define PDI_BACKTRACE                     0x02
1617 #define PDI_HEAPS                         0x04
1618 #define PDI_HEAP_TAGS                     0x08
1619 #define PDI_HEAP_BLOCKS                   0x10
1620 #define PDI_LOCKS                         0x20
1621
1622 typedef struct _DEBUG_MODULE_INFORMATION {
1623   ULONG  Reserved[2];
1624   ULONG  Base;
1625   ULONG  Size;
1626   ULONG  Flags;
1627   USHORT Index;
1628   USHORT Unknown;
1629   USHORT LoadCount;
1630   USHORT ModuleNameOffset;
1631   CHAR   ImageName[256];
1632 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
1633
1634 typedef struct _DEBUG_HEAP_INFORMATION {
1635   ULONG  Base;
1636   ULONG  Flags;
1637   USHORT Granularity;
1638   USHORT Unknown;
1639   ULONG  Allocated;
1640   ULONG  Committed;
1641   ULONG  TagCount;
1642   ULONG  BlockCount;
1643   ULONG  Reserved[7];
1644   PVOID  Tags;
1645   PVOID  Blocks;
1646 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
1647
1648 typedef struct _DEBUG_LOCK_INFORMATION {
1649   PVOID  Address;
1650   USHORT Type;
1651   USHORT CreatorBackTraceIndex;
1652   ULONG  OwnerThreadId;
1653   ULONG  ActiveCount;
1654   ULONG  ContentionCount;
1655   ULONG  EntryCount;
1656   ULONG  RecursionCount;
1657   ULONG  NumberOfSharedWaiters;
1658   ULONG  NumberOfExclusiveWaiters;
1659 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
1660
1661 typedef struct _PORT_MESSAGE_HEADER {
1662   USHORT DataSize;
1663   USHORT MessageSize;
1664   USHORT MessageType;
1665   USHORT VirtualRangesOffset;
1666   CLIENT_ID ClientId;
1667   ULONG MessageId;
1668   ULONG SectionSize;
1669 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
1670
1671 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
1672
1673 /* Wine doesn't implement atom table as NT does:
1674  * - in NT, atom tables are user space tables, which ntdll directly accesses
1675  * - on Wine, (even local) atom tables are wineserver objects, hence a HANDLE
1676  */
1677 typedef struct atom_table *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
1678
1679 typedef enum _ATOM_INFORMATION_CLASS {
1680    AtomBasicInformation         = 0,
1681    AtomTableInformation         = 1,
1682 } ATOM_INFORMATION_CLASS;
1683
1684 typedef struct _ATOM_BASIC_INFORMATION {
1685    USHORT       ReferenceCount;
1686    USHORT       Pinned;
1687    USHORT       NameLength;
1688    WCHAR        Name[1];
1689 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
1690
1691 /* FIXME: names probably not correct */
1692 typedef struct _RTL_HANDLE
1693 {
1694     struct _RTL_HANDLE * Next;
1695 } RTL_HANDLE;
1696
1697 /* FIXME: names probably not correct */
1698 typedef struct _RTL_HANDLE_TABLE
1699 {
1700     ULONG MaxHandleCount;  /* 0x00 */
1701     ULONG HandleSize;      /* 0x04 */
1702     ULONG Unused[2];       /* 0x08-0x0c */
1703     PVOID NextFree;        /* 0x10 */
1704     PVOID FirstHandle;     /* 0x14 */
1705     PVOID ReservedMemory;  /* 0x18 */
1706     PVOID MaxHandle;       /* 0x1c */
1707 } RTL_HANDLE_TABLE;
1708
1709 /***********************************************************************
1710  * Defines
1711  */
1712
1713 /* flags for NtCreateFile and NtOpenFile */
1714 #define FILE_DIRECTORY_FILE             0x00000001
1715 #define FILE_WRITE_THROUGH              0x00000002
1716 #define FILE_SEQUENTIAL_ONLY            0x00000004
1717 #define FILE_NO_INTERMEDIATE_BUFFERING  0x00000008
1718 #define FILE_SYNCHRONOUS_IO_ALERT       0x00000010
1719 #define FILE_SYNCHRONOUS_IO_NONALERT    0x00000020
1720 #define FILE_NON_DIRECTORY_FILE         0x00000040
1721 #define FILE_CREATE_TREE_CONNECTION     0x00000080
1722 #define FILE_COMPLETE_IF_OPLOCKED       0x00000100
1723 #define FILE_NO_EA_KNOWLEDGE            0x00000200
1724 #define FILE_OPEN_FOR_RECOVERY          0x00000400
1725 #define FILE_RANDOM_ACCESS              0x00000800
1726 #define FILE_DELETE_ON_CLOSE            0x00001000
1727 #define FILE_OPEN_BY_FILE_ID            0x00002000
1728 #define FILE_OPEN_FOR_BACKUP_INTENT     0x00004000
1729 #define FILE_NO_COMPRESSION             0x00008000
1730 #define FILE_RESERVE_OPFILTER           0x00100000
1731 #define FILE_TRANSACTED_MODE            0x00200000
1732 #define FILE_OPEN_OFFLINE_FILE          0x00400000
1733 #define FILE_OPEN_FOR_FREE_SPACE_QUERY  0x00800000
1734
1735 #define FILE_ATTRIBUTE_VALID_FLAGS      0x00007fb7
1736 #define FILE_ATTRIBUTE_VALID_SET_FLAGS  0x000031a7
1737
1738 /* status for NtCreateFile or NtOpenFile */
1739 #define FILE_SUPERSEDED                 0
1740 #define FILE_OPENED                     1
1741 #define FILE_CREATED                    2
1742 #define FILE_OVERWRITTEN                3
1743 #define FILE_EXISTS                     4
1744 #define FILE_DOES_NOT_EXIST             5
1745
1746 /* disposition for NtCreateFile */
1747 #define FILE_SUPERSEDE                  0
1748 #define FILE_OPEN                       1
1749 #define FILE_CREATE                     2
1750 #define FILE_OPEN_IF                    3
1751 #define FILE_OVERWRITE                  4
1752 #define FILE_OVERWRITE_IF               5
1753 #define FILE_MAXIMUM_DISPOSITION        5
1754
1755 /* Characteristics of a File System */
1756 #define FILE_REMOVABLE_MEDIA                      0x00000001
1757 #define FILE_READ_ONLY_DEVICE                     0x00000002
1758 #define FILE_FLOPPY_DISKETTE                      0x00000004
1759 #define FILE_WRITE_ONE_MEDIA                      0x00000008
1760 #define FILE_REMOTE_DEVICE                        0x00000010
1761 #define FILE_DEVICE_IS_MOUNTED                    0x00000020
1762 #define FILE_VIRTUAL_VOLUME                       0x00000040
1763 #define FILE_AUTOGENERATED_DEVICE_NAME            0x00000080
1764 #define FILE_DEVICE_SECURE_OPEN                   0x00000100
1765 #define FILE_CHARACTERISTIC_PNP_DEVICE            0x00000800
1766 #define FILE_CHARACTERISTIC_TS_DEVICE             0x00001000
1767 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE         0x00002000
1768 #define FILE_CHARACTERISTIC_CSV                   0x00010000
1769 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL  0x00020000
1770 #define FILE_PORTABLE_DEVICE                      0x00040000
1771
1772 /* options for NtCreateNamedPipeFile */
1773 #define FILE_PIPE_INBOUND               0x00000000
1774 #define FILE_PIPE_OUTBOUND              0x00000001
1775 #define FILE_PIPE_FULL_DUPLEX           0x00000002
1776
1777 /* options for pipe's type */
1778 #define FILE_PIPE_TYPE_MESSAGE          0x00000001
1779 #define FILE_PIPE_TYPE_BYTE             0x00000000
1780 /* options for pipe's message mode */
1781 #define FILE_PIPE_MESSAGE_MODE          0x00000001
1782 #define FILE_PIPE_BYTE_STREAM_MODE      0x00000000
1783 /* options for pipe's blocking mode */
1784 #define FILE_PIPE_COMPLETE_OPERATION    0x00000001
1785 #define FILE_PIPE_QUEUE_OPERATION       0x00000000
1786 /* and client / server end */
1787 #define FILE_PIPE_SERVER_END            0x00000001
1788 #define FILE_PIPE_CLIENT_END            0x00000000
1789
1790 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
1791
1792 #define LOGONID_CURRENT    ((ULONG)-1)
1793
1794 #define OBJ_INHERIT          0x00000002
1795 #define OBJ_PERMANENT        0x00000010
1796 #define OBJ_EXCLUSIVE        0x00000020
1797 #define OBJ_CASE_INSENSITIVE 0x00000040
1798 #define OBJ_OPENIF           0x00000080
1799 #define OBJ_OPENLINK         0x00000100
1800 #define OBJ_KERNEL_HANDLE    0x00000200
1801 #define OBJ_VALID_ATTRIBUTES 0x000003F2
1802
1803 #define SERVERNAME_CURRENT ((HANDLE)NULL)
1804
1805 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
1806 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
1807 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
1808 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
1809
1810
1811 /* DbgPrintEx default levels */
1812 #define DPFLTR_ERROR_LEVEL     0
1813 #define DPFLTR_WARNING_LEVEL   1
1814 #define DPFLTR_TRACE_LEVEL     2
1815 #define DPFLTR_INFO_LEVEL      3
1816 #define DPFLTR_MASK    0x8000000
1817
1818 /* Well-known LUID values */
1819 #define SE_MIN_WELL_KNOWN_PRIVILEGE       2
1820 #define SE_CREATE_TOKEN_PRIVILEGE         2
1821 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE   3
1822 #define SE_LOCK_MEMORY_PRIVILEGE          4
1823 #define SE_INCREASE_QUOTA_PRIVILEGE       5
1824 #define SE_UNSOLICITED_INPUT_PRIVILEGE    6 /* obsolete */
1825 #define SE_MACHINE_ACCOUNT_PRIVILEGE      6
1826 #define SE_TCB_PRIVILEGE                  7
1827 #define SE_SECURITY_PRIVILEGE             8
1828 #define SE_TAKE_OWNERSHIP_PRIVILEGE       9
1829 #define SE_LOAD_DRIVER_PRIVILEGE         10
1830 #define SE_SYSTEM_PROFILE_PRIVILEGE      11
1831 #define SE_SYSTEMTIME_PRIVILEGE          12
1832 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
1833 #define SE_INC_BASE_PRIORITY_PRIVILEGE   14
1834 #define SE_CREATE_PAGEFILE_PRIVILEGE     15
1835 #define SE_CREATE_PERMANENT_PRIVILEGE    16
1836 #define SE_BACKUP_PRIVILEGE              17
1837 #define SE_RESTORE_PRIVILEGE             18
1838 #define SE_SHUTDOWN_PRIVILEGE            19
1839 #define SE_DEBUG_PRIVILEGE               20
1840 #define SE_AUDIT_PRIVILEGE               21
1841 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE  22
1842 #define SE_CHANGE_NOTIFY_PRIVILEGE       23
1843 #define SE_REMOTE_SHUTDOWN_PRIVILEGE     24
1844 #define SE_UNDOCK_PRIVILEGE              25
1845 #define SE_SYNC_AGENT_PRIVILEGE          26
1846 #define SE_ENABLE_DELEGATION_PRIVILEGE   27
1847 #define SE_MANAGE_VOLUME_PRIVILEGE       28
1848 #define SE_IMPERSONATE_PRIVILEGE         29
1849 #define SE_CREATE_GLOBAL_PRIVILEGE       30
1850 #define SE_MAX_WELL_KNOWN_PRIVILEGE      SE_CREATE_GLOBAL_PRIVILEGE
1851
1852 /* NtGlobalFlag bits */
1853 #define FLG_STOP_ON_EXCEPTION            0x00000001
1854 #define FLG_SHOW_LDR_SNAPS               0x00000002
1855 #define FLG_DEBUG_INITIAL_COMMAND        0x00000004
1856 #define FLG_STOP_ON_HUNG_GUI             0x00000008
1857 #define FLG_HEAP_ENABLE_TAIL_CHECK       0x00000010
1858 #define FLG_HEAP_ENABLE_FREE_CHECK       0x00000020
1859 #define FLG_HEAP_VALIDATE_PARAMETERS     0x00000040
1860 #define FLG_HEAP_VALIDATE_ALL            0x00000080
1861 #define FLG_APPLICATION_VERIFIER         0x00000100
1862 #define FLG_POOL_ENABLE_TAGGING          0x00000400
1863 #define FLG_HEAP_ENABLE_TAGGING          0x00000800
1864 #define FLG_USER_STACK_TRACE_DB          0x00001000
1865 #define FLG_KERNEL_STACK_TRACE_DB        0x00002000
1866 #define FLG_MAINTAIN_OBJECT_TYPELIST     0x00004000
1867 #define FLG_HEAP_ENABLE_TAG_BY_DLL       0x00008000
1868 #define FLG_DISABLE_STACK_EXTENSION      0x00010000
1869 #define FLG_ENABLE_CSRDEBUG              0x00020000
1870 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD    0x00040000
1871 #define FLG_DISABLE_PAGE_KERNEL_STACKS   0x00080000
1872 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS    0x00100000
1873 #define FLG_HEAP_DISABLE_COALESCING      0x00200000
1874 #define FLG_ENABLE_CLOSE_EXCEPTIONS      0x00400000
1875 #define FLG_ENABLE_EXCEPTION_LOGGING     0x00800000
1876 #define FLG_ENABLE_HANDLE_TYPE_TAGGING   0x01000000
1877 #define FLG_HEAP_PAGE_ALLOCS             0x02000000
1878 #define FLG_DEBUG_INITIAL_COMMAND_EX     0x04000000
1879 #define FLG_DISABLE_DBGPRINT             0x08000000
1880 #define FLG_CRITSEC_EVENT_CREATION       0x10000000
1881 #define FLG_LDR_TOP_DOWN                 0x20000000
1882 #define FLG_ENABLE_HANDLE_EXCEPTIONS     0x40000000
1883 #define FLG_DISABLE_PROTDLLS             0x80000000
1884
1885 /* Rtl*Registry* functions structs and defines */
1886 #define RTL_REGISTRY_ABSOLUTE             0
1887 #define RTL_REGISTRY_SERVICES             1
1888 #define RTL_REGISTRY_CONTROL              2
1889 #define RTL_REGISTRY_WINDOWS_NT           3
1890 #define RTL_REGISTRY_DEVICEMAP            4
1891 #define RTL_REGISTRY_USER                 5
1892
1893 #define RTL_REGISTRY_HANDLE       0x40000000
1894 #define RTL_REGISTRY_OPTIONAL     0x80000000
1895
1896 #define RTL_QUERY_REGISTRY_SUBKEY         0x00000001
1897 #define RTL_QUERY_REGISTRY_TOPKEY         0x00000002
1898 #define RTL_QUERY_REGISTRY_REQUIRED       0x00000004
1899 #define RTL_QUERY_REGISTRY_NOVALUE        0x00000008
1900 #define RTL_QUERY_REGISTRY_NOEXPAND       0x00000010
1901 #define RTL_QUERY_REGISTRY_DIRECT         0x00000020
1902 #define RTL_QUERY_REGISTRY_DELETE         0x00000040
1903
1904 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
1905                                                         ULONG  ValueType,
1906                                                         PVOID  ValueData,
1907                                                         ULONG  ValueLength,
1908                                                         PVOID  Context,
1909                                                         PVOID  EntryContext);
1910
1911 typedef struct _RTL_QUERY_REGISTRY_TABLE
1912 {
1913   PRTL_QUERY_REGISTRY_ROUTINE  QueryRoutine;
1914   ULONG  Flags;
1915   PWSTR  Name;
1916   PVOID  EntryContext;
1917   ULONG  DefaultType;
1918   PVOID  DefaultData;
1919   ULONG  DefaultLength;
1920 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
1921
1922 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
1923 {
1924   PUNICODE_STRING ValueName;
1925   ULONG DataLength;
1926   ULONG DataOffset;
1927   ULONG Type;
1928 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
1929
1930 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
1931
1932 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
1933
1934 typedef enum _EVENT_INFORMATION_CLASS {
1935   EventBasicInformation
1936 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
1937
1938 typedef struct _EVENT_BASIC_INFORMATION {
1939   EVENT_TYPE EventType;
1940   LONG EventState;
1941 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
1942
1943 typedef enum _SEMAPHORE_INFORMATION_CLASS {
1944   SemaphoreBasicInformation
1945 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
1946
1947 typedef struct _SEMAPHORE_BASIC_INFORMATION {
1948   ULONG CurrentCount;
1949   ULONG MaximumCount;
1950 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
1951
1952 typedef enum _SECTION_INFORMATION_CLASS
1953 {
1954   SectionBasicInformation,
1955   SectionImageInformation,
1956 } SECTION_INFORMATION_CLASS;
1957
1958 typedef struct _SECTION_BASIC_INFORMATION {
1959   PVOID BaseAddress;
1960   ULONG Attributes;
1961   LARGE_INTEGER Size;
1962 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
1963
1964 typedef struct _SECTION_IMAGE_INFORMATION {
1965   PVOID TransferAddress;
1966   ULONG ZeroBits;
1967   SIZE_T MaximumStackSize;
1968   SIZE_T CommittedStackSize;
1969   ULONG SubSystemType;
1970   WORD SubsystemVersionLow;
1971   WORD SubsystemVersionHigh;
1972   ULONG GpValue;
1973   USHORT ImageCharacteristics;
1974   USHORT DllCharacteristics;
1975   USHORT Machine;
1976   BOOLEAN ImageContainsCode;
1977   union
1978   {
1979       UCHAR ImageFlags;
1980       struct
1981       {
1982           UCHAR ComPlusNativeReady        : 1;
1983           UCHAR ComPlusILOnly             : 1;
1984           UCHAR ImageDynamicallyRelocated : 1;
1985           UCHAR ImageMappedFlat           : 1;
1986           UCHAR BaseBelow4gb              : 1;
1987           UCHAR Reserved                  : 3;
1988       } DUMMYSTRUCTNAME;
1989   } DUMMYUNIONNAME;
1990   ULONG LoaderFlags;
1991   ULONG ImageFileSize;
1992   ULONG CheckSum;
1993 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
1994
1995 typedef struct _LPC_SECTION_WRITE {
1996   ULONG Length;
1997   HANDLE SectionHandle;
1998   ULONG SectionOffset;
1999   ULONG ViewSize;
2000   PVOID ViewBase;
2001   PVOID TargetViewBase;
2002 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
2003
2004 typedef struct _LPC_SECTION_READ {
2005   ULONG Length;
2006   ULONG ViewSize;
2007   PVOID ViewBase;
2008 } LPC_SECTION_READ, *PLPC_SECTION_READ;
2009
2010 typedef struct _LPC_MESSAGE {
2011   USHORT DataSize;
2012   USHORT MessageSize;
2013   USHORT MessageType;
2014   USHORT VirtualRangesOffset;
2015   CLIENT_ID ClientId;
2016   ULONG_PTR MessageId;
2017   ULONG_PTR SectionSize;
2018   UCHAR Data[ANYSIZE_ARRAY];
2019 } LPC_MESSAGE, *PLPC_MESSAGE;
2020
2021 typedef struct _RTL_USER_PROCESS_INFORMATION
2022 {
2023   ULONG Length;
2024   HANDLE Process;
2025   HANDLE Thread;
2026   CLIENT_ID ClientId;
2027   SECTION_IMAGE_INFORMATION ImageInformation;
2028 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
2029
2030 typedef enum _SHUTDOWN_ACTION {
2031   ShutdownNoReboot,
2032   ShutdownReboot,
2033   ShutdownPowerOff
2034 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
2035
2036 typedef enum _KPROFILE_SOURCE {
2037   ProfileTime,
2038   ProfileAlignmentFixup,
2039   ProfileTotalIssues,
2040   ProfilePipelineDry,
2041   ProfileLoadInstructions,
2042   ProfilePipelineFrozen,
2043   ProfileBranchInstructions,
2044   ProfileTotalNonissues,
2045   ProfileDcacheMisses,
2046   ProfileIcacheMisses,
2047   ProfileCacheMisses,
2048   ProfileBranchMispredictions,
2049   ProfileStoreInstructions,
2050   ProfileFpInstructions,
2051   ProfileIntegerInstructions,
2052   Profile2Issue,
2053   Profile3Issue,
2054   Profile4Issue,
2055   ProfileSpecialInstructions,
2056   ProfileTotalCycles,
2057   ProfileIcacheIssues,
2058   ProfileDcacheAccesses,
2059   ProfileMemoryBarrierCycles,
2060   ProfileLoadLinkedIssues,
2061   ProfileMaximum
2062 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
2063
2064 typedef struct _DIRECTORY_BASIC_INFORMATION {
2065   UNICODE_STRING ObjectName;
2066   UNICODE_STRING ObjectTypeName;
2067 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
2068
2069 typedef struct _INITIAL_TEB {
2070   PVOID StackBase;
2071   PVOID StackLimit;
2072   PVOID StackCommit;
2073   PVOID StackCommitMax;
2074   PVOID StackReserved;
2075 } INITIAL_TEB, *PINITIAL_TEB;
2076
2077 typedef enum _PORT_INFORMATION_CLASS {
2078   PortNoInformation
2079 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
2080
2081 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
2082   IoCompletionBasicInformation
2083 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
2084
2085 typedef struct _FILE_COMPLETION_INFORMATION {
2086     HANDLE CompletionPort;
2087     ULONG_PTR CompletionKey;
2088 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
2089
2090 #define IO_COMPLETION_QUERY_STATE  0x0001
2091 #define IO_COMPLETION_MODIFY_STATE 0x0002
2092 #define IO_COMPLETION_ALL_ACCESS   (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
2093
2094 typedef enum _HARDERROR_RESPONSE_OPTION {
2095   OptionAbortRetryIgnore,
2096   OptionOk,
2097   OptionOkCancel,
2098   OptionRetryCancel,
2099   OptionYesNo,
2100   OptionYesNoCancel,
2101   OptionShutdownSystem
2102 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
2103
2104 typedef enum _HARDERROR_RESPONSE {
2105   ResponseReturnToCaller,
2106   ResponseNotHandled,
2107   ResponseAbort,
2108   ResponseCancel,
2109   ResponseIgnore,
2110   ResponseNo,
2111   ResponseOk,
2112   ResponseRetry,
2113   ResponseYes
2114 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
2115
2116 typedef enum _SYSDBG_COMMAND {
2117   SysDbgQueryModuleInformation,
2118   SysDbgQueryTraceInformation,
2119   SysDbgSetTracepoint,
2120   SysDbgSetSpecialCall,
2121   SysDbgClearSpecialCalls,
2122   SysDbgQuerySpecialCalls,
2123   SysDbgBreakPoint,
2124   SysDbgQueryVersion,
2125   SysDbgReadVirtual,
2126   SysDbgWriteVirtual,
2127   SysDbgReadPhysical,
2128   SysDbgWritePhysical,
2129   SysDbgReadControlSpace,
2130   SysDbgWriteControlSpace,
2131   SysDbgReadIoSpace,
2132   SysDbgWriteIoSpace,
2133   SysDbgReadMsr,
2134   SysDbgWriteMsr,
2135   SysDbgReadBusData,
2136   SysDbgWriteBusData
2137 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
2138
2139
2140 /*************************************************************************
2141  * Loader structures
2142  *
2143  * Those are not part of standard Winternl.h
2144  */
2145 typedef struct _LDR_MODULE
2146 {
2147     LIST_ENTRY          InLoadOrderModuleList;
2148     LIST_ENTRY          InMemoryOrderModuleList;
2149     LIST_ENTRY          InInitializationOrderModuleList;
2150     void*               BaseAddress;
2151     void*               EntryPoint;
2152     ULONG               SizeOfImage;
2153     UNICODE_STRING      FullDllName;
2154     UNICODE_STRING      BaseDllName;
2155     ULONG               Flags;
2156     SHORT               LoadCount;
2157     SHORT               TlsIndex;
2158     HANDLE              SectionHandle;
2159     ULONG               CheckSum;
2160     ULONG               TimeDateStamp;
2161     HANDLE              ActivationContext;
2162 } LDR_MODULE, *PLDR_MODULE;
2163
2164 /* those defines are (some of the) regular LDR_MODULE.Flags values */
2165 #define LDR_IMAGE_IS_DLL                0x00000004
2166 #define LDR_LOAD_IN_PROGRESS            0x00001000
2167 #define LDR_UNLOAD_IN_PROGRESS          0x00002000
2168 #define LDR_NO_DLL_CALLS                0x00040000
2169 #define LDR_PROCESS_ATTACHED            0x00080000
2170 #define LDR_COR_IMAGE                   0x00400000
2171 #define LDR_COR_ILONLY                  0x01000000
2172
2173 /* these ones is Wine specific */
2174 #define LDR_DONT_RESOLVE_REFS           0x40000000
2175 #define LDR_WINE_INTERNAL               0x80000000
2176
2177 /* flag for LdrAddRefDll */
2178 #define LDR_ADDREF_DLL_PIN              0x00000001
2179
2180 /* FIXME: to be checked */
2181 #define MAXIMUM_FILENAME_LENGTH 256
2182
2183 typedef struct _SYSTEM_MODULE
2184 {
2185     PVOID               Reserved1;                      /* 00/00 */
2186     PVOID               Reserved2;                      /* 04/08 */
2187     PVOID               ImageBaseAddress;               /* 08/10 */
2188     ULONG               ImageSize;                      /* 0c/18 */
2189     ULONG               Flags;                          /* 10/1c */
2190     WORD                Id;                             /* 14/20 */
2191     WORD                Rank;                           /* 16/22 */
2192     WORD                Unknown;                        /* 18/24 */
2193     WORD                NameOffset;                     /* 1a/26 */
2194     BYTE                Name[MAXIMUM_FILENAME_LENGTH];  /* 1c/28 */
2195 } SYSTEM_MODULE, *PSYSTEM_MODULE;
2196
2197 typedef struct _SYSTEM_MODULE_INFORMATION
2198 {
2199     ULONG               ModulesCount;
2200     SYSTEM_MODULE       Modules[1]; /* FIXME: should be Modules[0] */
2201 } SYSTEM_MODULE_INFORMATION, *PSYSTEM_MODULE_INFORMATION;
2202
2203 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED        0x00000001
2204 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH      0x00000002
2205 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER      0x00000004
2206 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
2207 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET  0x00000020
2208 #define THREAD_CREATE_FLAGS_INITIAL_THREAD          0x00000080
2209
2210 /***********************************************************************
2211  * Function declarations
2212  */
2213
2214 #if defined(__i386__) && defined(__GNUC__)
2215 static inline void WINAPI DbgBreakPoint(void) { __asm__ __volatile__("int3"); }
2216 static inline void WINAPI DbgUserBreakPoint(void) { __asm__ __volatile__("int3"); }
2217 #else  /* __i386__ && __GNUC__ */
2218 NTSYSAPI void WINAPI DbgBreakPoint(void);
2219 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
2220 #endif  /* __i386__ && __GNUC__ */
2221 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
2222 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
2223 NTSYSAPI NTSTATUS  WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
2224 NTSYSAPI NTSTATUS  WINAPI LdrAddRefDll(ULONG,HMODULE);
2225 NTSYSAPI NTSTATUS  WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
2226 NTSYSAPI NTSTATUS  WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
2227 NTSYSAPI NTSTATUS  WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
2228 NTSYSAPI NTSTATUS  WINAPI LdrFindEntryForAddress(const void*, PLDR_MODULE*);
2229 NTSYSAPI NTSTATUS  WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
2230 NTSYSAPI NTSTATUS  WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
2231 NTSYSAPI void      WINAPI LdrInitializeThunk(void*,ULONG_PTR,ULONG_PTR,ULONG_PTR);
2232 NTSYSAPI NTSTATUS  WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
2233 NTSYSAPI NTSTATUS  WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
2234 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
2235 NTSYSAPI NTSTATUS  WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
2236 NTSYSAPI NTSTATUS  WINAPI LdrQueryProcessModuleInformation(SYSTEM_MODULE_INFORMATION*, ULONG, ULONG*);
2237 NTSYSAPI void      WINAPI LdrShutdownProcess(void);
2238 NTSYSAPI void      WINAPI LdrShutdownThread(void);
2239 NTSYSAPI NTSTATUS  WINAPI LdrUnloadDll(HMODULE);
2240 NTSYSAPI NTSTATUS  WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
2241 NTSYSAPI NTSTATUS  WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
2242 NTSYSAPI NTSTATUS  WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
2243 NTSYSAPI NTSTATUS  WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
2244 NTSYSAPI NTSTATUS  WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
2245 NTSYSAPI NTSTATUS  WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
2246 NTSYSAPI NTSTATUS  WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
2247 NTSYSAPI NTSTATUS  WINAPI NtAlertResumeThread(HANDLE,PULONG);
2248 NTSYSAPI NTSTATUS  WINAPI NtAlertThread(HANDLE ThreadHandle);
2249 NTSYSAPI NTSTATUS  WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
2250 NTSYSAPI NTSTATUS  WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
2251 NTSYSAPI NTSTATUS  WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG,SIZE_T*,ULONG,ULONG);
2252 NTSYSAPI NTSTATUS  WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
2253 NTSYSAPI NTSTATUS  WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
2254 NTSYSAPI NTSTATUS  WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
2255 NTSYSAPI NTSTATUS  WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
2256 NTSYSAPI NTSTATUS  WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
2257 NTSYSAPI NTSTATUS  WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
2258 NTSYSAPI NTSTATUS  WINAPI NtClearEvent(HANDLE);
2259 NTSYSAPI NTSTATUS  WINAPI NtClose(HANDLE);
2260 NTSYSAPI NTSTATUS  WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
2261 NTSYSAPI NTSTATUS  WINAPI NtCompleteConnectPort(HANDLE);
2262 NTSYSAPI NTSTATUS  WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
2263 NTSYSAPI NTSTATUS  WINAPI NtContinue(PCONTEXT,BOOLEAN);
2264 NTSYSAPI NTSTATUS  WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
2265 NTSYSAPI NTSTATUS  WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
2266 NTSYSAPI NTSTATUS  WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
2267 NTSYSAPI NTSTATUS  WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
2268 NTSYSAPI NTSTATUS  WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
2269 NTSYSAPI NTSTATUS  WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2270 NTSYSAPI NTSTATUS  WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
2271 NTSYSAPI NTSTATUS  WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
2272 NTSYSAPI NTSTATUS  WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
2273 NTSYSAPI NTSTATUS  WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
2274 NTSYSAPI NTSTATUS  WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
2275 NTSYSAPI NTSTATUS  WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
2276 NTSYSAPI NTSTATUS  WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
2277 NTSYSAPI NTSTATUS  WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
2278 NTSYSAPI NTSTATUS  WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
2279 NTSYSAPI NTSTATUS  WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
2280 NTSYSAPI NTSTATUS  WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
2281 NTSYSAPI NTSTATUS  WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
2282 NTSYSAPI NTSTATUS  WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
2283 NTSYSAPI NTSTATUS  WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
2284 NTSYSAPI NTSTATUS  WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
2285 NTSYSAPI NTSTATUS  WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
2286 NTSYSAPI NTSTATUS  WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
2287 NTSYSAPI NTSTATUS  WINAPI NtDeleteAtom(RTL_ATOM);
2288 NTSYSAPI NTSTATUS  WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
2289 NTSYSAPI NTSTATUS  WINAPI NtDeleteKey(HANDLE);
2290 NTSYSAPI NTSTATUS  WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
2291 NTSYSAPI NTSTATUS  WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
2292 NTSYSAPI NTSTATUS  WINAPI NtDisplayString(PUNICODE_STRING);
2293 NTSYSAPI NTSTATUS  WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
2294 NTSYSAPI NTSTATUS  WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
2295 NTSYSAPI NTSTATUS  WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
2296 NTSYSAPI NTSTATUS  WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2297 NTSYSAPI NTSTATUS  WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
2298 NTSYSAPI NTSTATUS  WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
2299 NTSYSAPI NTSTATUS  WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
2300 NTSYSAPI NTSTATUS  WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
2301 NTSYSAPI NTSTATUS  WINAPI NtFlushKey(HANDLE);
2302 NTSYSAPI NTSTATUS  WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
2303 NTSYSAPI NTSTATUS  WINAPI NtFlushWriteBuffer(VOID);
2304 NTSYSAPI NTSTATUS  WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
2305 NTSYSAPI NTSTATUS  WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
2306 NTSYSAPI NTSTATUS  WINAPI NtGetContextThread(HANDLE,CONTEXT*);
2307 NTSYSAPI ULONG     WINAPI NtGetCurrentProcessorNumber(void);
2308 NTSYSAPI NTSTATUS  WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
2309 NTSYSAPI ULONG     WINAPI NtGetTickCount(VOID);
2310 NTSYSAPI NTSTATUS  WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
2311 NTSYSAPI NTSTATUS  WINAPI NtImpersonateAnonymousToken(HANDLE);
2312 NTSYSAPI NTSTATUS  WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
2313 NTSYSAPI NTSTATUS  WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
2314 NTSYSAPI NTSTATUS  WINAPI NtInitializeRegistry(BOOLEAN);
2315 NTSYSAPI NTSTATUS  WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
2316 NTSYSAPI NTSTATUS  WINAPI NtIsProcessInJob(HANDLE,HANDLE);
2317 NTSYSAPI NTSTATUS  WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
2318 NTSYSAPI NTSTATUS  WINAPI NtLoadDriver(const UNICODE_STRING *);
2319 NTSYSAPI NTSTATUS  WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
2320 NTSYSAPI NTSTATUS  WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
2321 NTSYSAPI NTSTATUS  WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
2322 NTSYSAPI NTSTATUS  WINAPI NtMakeTemporaryObject(HANDLE);
2323 NTSYSAPI NTSTATUS  WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
2324 NTSYSAPI NTSTATUS  WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
2325 NTSYSAPI NTSTATUS  WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
2326 NTSYSAPI NTSTATUS  WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
2327 NTSYSAPI NTSTATUS  WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2328 NTSYSAPI NTSTATUS  WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
2329 NTSYSAPI NTSTATUS  WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2330 NTSYSAPI NTSTATUS  WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
2331 NTSYSAPI NTSTATUS  WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2332 NTSYSAPI NTSTATUS  WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2333 NTSYSAPI NTSTATUS  WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
2334 NTSYSAPI NTSTATUS  WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
2335 NTSYSAPI NTSTATUS  WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
2336 NTSYSAPI NTSTATUS  WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
2337 NTSYSAPI NTSTATUS  WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2338 NTSYSAPI NTSTATUS  WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2339 NTSYSAPI NTSTATUS  WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
2340 NTSYSAPI NTSTATUS  WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
2341 NTSYSAPI NTSTATUS  WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
2342 NTSYSAPI NTSTATUS  WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
2343 NTSYSAPI NTSTATUS  WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2344 NTSYSAPI NTSTATUS  WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2345 NTSYSAPI NTSTATUS  WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
2346 NTSYSAPI NTSTATUS  WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
2347 NTSYSAPI NTSTATUS  WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
2348 NTSYSAPI NTSTATUS  WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
2349 NTSYSAPI NTSTATUS  WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
2350 NTSYSAPI NTSTATUS  WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
2351 NTSYSAPI NTSTATUS  WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
2352 NTSYSAPI NTSTATUS  WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
2353 NTSYSAPI NTSTATUS  WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
2354 NTSYSAPI NTSTATUS  WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
2355 NTSYSAPI NTSTATUS  WINAPI NtPulseEvent(HANDLE,PULONG);
2356 NTSYSAPI NTSTATUS  WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
2357 NTSYSAPI NTSTATUS  WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
2358 NTSYSAPI NTSTATUS  WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
2359 NTSYSAPI NTSTATUS  WINAPI NtQueryDefaultUILanguage(LANGID*);
2360 NTSYSAPI NTSTATUS  WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
2361 NTSYSAPI NTSTATUS  WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
2362 NTSYSAPI NTSTATUS  WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
2363 NTSYSAPI NTSTATUS  WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2364 NTSYSAPI NTSTATUS  WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
2365 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
2366 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,LONG,FILE_INFORMATION_CLASS);
2367 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
2368 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2369 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
2370 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
2371 NTSYSAPI NTSTATUS  WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2372 NTSYSAPI NTSTATUS  WINAPI NtQueryInstallUILanguage(LANGID*);
2373 NTSYSAPI NTSTATUS  WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
2374 NTSYSAPI NTSTATUS  WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2375 NTSYSAPI NTSTATUS  WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
2376 NTSYSAPI NTSTATUS  WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
2377 NTSYSAPI NTSTATUS  WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2378 NTSYSAPI NTSTATUS  WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
2379 NTSYSAPI NTSTATUS  WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
2380 NTSYSAPI NTSTATUS  WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
2381 NTSYSAPI NTSTATUS  WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
2382 NTSYSAPI NTSTATUS  WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
2383 NTSYSAPI NTSTATUS  WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2384 NTSYSAPI NTSTATUS  WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
2385 NTSYSAPI NTSTATUS  WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
2386 NTSYSAPI NTSTATUS  WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2387 NTSYSAPI NTSTATUS  WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
2388 NTSYSAPI NTSTATUS  WINAPI NtQuerySystemTime(PLARGE_INTEGER);
2389 NTSYSAPI NTSTATUS  WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
2390 NTSYSAPI NTSTATUS  WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
2391 NTSYSAPI NTSTATUS  WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
2392 NTSYSAPI NTSTATUS  WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
2393 NTSYSAPI NTSTATUS  WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
2394 NTSYSAPI NTSTATUS  WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
2395 NTSYSAPI NTSTATUS  WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
2396 NTSYSAPI NTSTATUS  WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
2397 NTSYSAPI NTSTATUS  WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
2398 NTSYSAPI NTSTATUS  WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
2399 NTSYSAPI NTSTATUS  WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
2400 NTSYSAPI NTSTATUS  WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
2401 NTSYSAPI NTSTATUS  WINAPI NtRegisterThreadTerminatePort(HANDLE);
2402 NTSYSAPI NTSTATUS  WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
2403 NTSYSAPI NTSTATUS  WINAPI NtReleaseMutant(HANDLE,PLONG);
2404 NTSYSAPI NTSTATUS  WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
2405 NTSYSAPI NTSTATUS  WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
2406 NTSYSAPI NTSTATUS  WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
2407 NTSYSAPI NTSTATUS  WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
2408 NTSYSAPI NTSTATUS  WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
2409 NTSYSAPI NTSTATUS  WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
2410 NTSYSAPI NTSTATUS  WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
2411 NTSYSAPI NTSTATUS  WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
2412 NTSYSAPI NTSTATUS  WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
2413 NTSYSAPI NTSTATUS  WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
2414 NTSYSAPI NTSTATUS  WINAPI NtResetEvent(HANDLE,PULONG);
2415 NTSYSAPI NTSTATUS  WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
2416 NTSYSAPI NTSTATUS  WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
2417 NTSYSAPI NTSTATUS  WINAPI NtResumeThread(HANDLE,PULONG);
2418 NTSYSAPI NTSTATUS  WINAPI NtSaveKey(HANDLE,HANDLE);
2419 NTSYSAPI NTSTATUS  WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
2420 NTSYSAPI NTSTATUS  WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
2421 NTSYSAPI NTSTATUS  WINAPI NtSetDefaultHardErrorPort(HANDLE);
2422 NTSYSAPI NTSTATUS  WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
2423 NTSYSAPI NTSTATUS  WINAPI NtSetDefaultUILanguage(LANGID);
2424 NTSYSAPI NTSTATUS  WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
2425 NTSYSAPI NTSTATUS  WINAPI NtSetEvent(HANDLE,PULONG);
2426 NTSYSAPI NTSTATUS  WINAPI NtSetHighEventPair(HANDLE);
2427 NTSYSAPI NTSTATUS  WINAPI NtSetHighWaitLowEventPair(HANDLE);
2428 NTSYSAPI NTSTATUS  WINAPI NtSetHighWaitLowThread(VOID);
2429 NTSYSAPI NTSTATUS  WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
2430 NTSYSAPI NTSTATUS  WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
2431 NTSYSAPI NTSTATUS  WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
2432 NTSYSAPI NTSTATUS  WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
2433 NTSYSAPI NTSTATUS  WINAPI NtSetInformationProcess(HANDLE,PROCESS_INFORMATION_CLASS,PVOID,ULONG);
2434 NTSYSAPI NTSTATUS  WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
2435 NTSYSAPI NTSTATUS  WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
2436 NTSYSAPI NTSTATUS  WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
2437 NTSYSAPI NTSTATUS  WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
2438 NTSYSAPI NTSTATUS  WINAPI NtSetLdtEntries(ULONG,ULONG,ULONG,ULONG,ULONG,ULONG);
2439 NTSYSAPI NTSTATUS  WINAPI NtSetLowEventPair(HANDLE);
2440 NTSYSAPI NTSTATUS  WINAPI NtSetLowWaitHighEventPair(HANDLE);
2441 NTSYSAPI NTSTATUS  WINAPI NtSetLowWaitHighThread(VOID);
2442 NTSYSAPI NTSTATUS  WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
2443 NTSYSAPI NTSTATUS  WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
2444 NTSYSAPI NTSTATUS  WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
2445 NTSYSAPI NTSTATUS  WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
2446 NTSYSAPI NTSTATUS  WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
2447 NTSYSAPI NTSTATUS  WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
2448 NTSYSAPI NTSTATUS  WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
2449 NTSYSAPI NTSTATUS  WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
2450 NTSYSAPI NTSTATUS  WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
2451 NTSYSAPI NTSTATUS  WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
2452 NTSYSAPI NTSTATUS  WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
2453 NTSYSAPI NTSTATUS  WINAPI NtStartProfile(HANDLE);
2454 NTSYSAPI NTSTATUS  WINAPI NtStopProfile(HANDLE);
2455 NTSYSAPI NTSTATUS  WINAPI NtSuspendThread(HANDLE,PULONG);
2456 NTSYSAPI NTSTATUS  WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
2457 NTSYSAPI NTSTATUS  WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
2458 NTSYSAPI NTSTATUS  WINAPI NtTerminateProcess(HANDLE,LONG);
2459 NTSYSAPI NTSTATUS  WINAPI NtTerminateThread(HANDLE,LONG);
2460 NTSYSAPI NTSTATUS  WINAPI NtTestAlert(VOID);
2461 NTSYSAPI NTSTATUS  WINAPI NtUnloadDriver(const UNICODE_STRING *);
2462 NTSYSAPI NTSTATUS  WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
2463 NTSYSAPI NTSTATUS  WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
2464 NTSYSAPI NTSTATUS  WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
2465 NTSYSAPI NTSTATUS  WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
2466 NTSYSAPI NTSTATUS  WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
2467 NTSYSAPI NTSTATUS  WINAPI NtVdmControl(ULONG,PVOID);
2468 NTSYSAPI NTSTATUS  WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
2469 NTSYSAPI NTSTATUS  WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
2470 NTSYSAPI NTSTATUS  WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
2471 NTSYSAPI NTSTATUS  WINAPI NtWaitHighEventPair(HANDLE);
2472 NTSYSAPI NTSTATUS  WINAPI NtWaitLowEventPair(HANDLE);
2473 NTSYSAPI NTSTATUS  WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
2474 NTSYSAPI NTSTATUS  WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
2475 NTSYSAPI NTSTATUS  WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
2476 NTSYSAPI NTSTATUS  WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
2477 NTSYSAPI NTSTATUS  WINAPI NtYieldExecution(void);
2478
2479 NTSYSAPI void      WINAPI RtlAcquirePebLock(void);
2480 NTSYSAPI BYTE      WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
2481 NTSYSAPI BYTE      WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
2482 NTSYSAPI void      WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
2483 NTSYSAPI void      WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
2484 NTSYSAPI NTSTATUS  WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
2485 NTSYSAPI NTSTATUS  WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
2486 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
2487 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
2488 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
2489 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
2490 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
2491 NTSYSAPI NTSTATUS  WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
2492 NTSYSAPI NTSTATUS  WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
2493 NTSYSAPI NTSTATUS  WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
2494 NTSYSAPI NTSTATUS  WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
2495 NTSYSAPI NTSTATUS  WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
2496 NTSYSAPI NTSTATUS  WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
2497 NTSYSAPI void      WINAPI RtlAddRefActivationContext(HANDLE);
2498 NTSYSAPI PVOID     WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
2499 NTSYSAPI NTSTATUS  WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
2500 NTSYSAPI NTSTATUS  WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
2501 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
2502 NTSYSAPI PVOID     WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3);
2503 NTSYSAPI WCHAR     WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
2504 NTSYSAPI DWORD     WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
2505 NTSYSAPI NTSTATUS  WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
2506 NTSYSAPI NTSTATUS  WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
2507 NTSYSAPI NTSTATUS  WINAPI RtlAppendStringToString(STRING *,const STRING *);
2508 NTSYSAPI NTSTATUS  WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
2509 NTSYSAPI NTSTATUS  WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
2510 NTSYSAPI BOOLEAN   WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
2511 NTSYSAPI BOOLEAN   WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
2512 NTSYSAPI BOOLEAN   WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
2513 NTSYSAPI BOOLEAN   WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
2514 NTSYSAPI NTSTATUS  WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
2515 NTSYSAPI NTSTATUS  WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
2516 NTSYSAPI void      WINAPI RtlClearAllBits(PRTL_BITMAP);
2517 NTSYSAPI void      WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
2518 NTSYSAPI NTSTATUS  WINAPI RtlCreateActivationContext(HANDLE*,const void*);
2519 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
2520 NTSYSAPI NTSTATUS  WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
2521 NTSYSAPI ULONG     WINAPI RtlCompactHeap(HANDLE,ULONG);
2522 NTSYSAPI LONG      WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
2523 NTSYSAPI LONG      WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
2524 NTSYSAPI LONG      WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
2525 NTSYSAPI NTSTATUS  WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
2526 NTSYSAPI DWORD     WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
2527 NTSYSAPI NTSTATUS  WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
2528 NTSYSAPI void      WINAPI RtlCopyLuid(PLUID,const LUID*);
2529 NTSYSAPI void      WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
2530 NTSYSAPI BOOLEAN   WINAPI RtlCopySid(DWORD,PSID,PSID);
2531 NTSYSAPI NTSTATUS  WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
2532 NTSYSAPI void      WINAPI RtlCopyString(STRING*,const STRING*);
2533 NTSYSAPI void      WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
2534 NTSYSAPI NTSTATUS  WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
2535 NTSYSAPI NTSTATUS  WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
2536 NTSYSAPI NTSTATUS  WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
2537 NTSYSAPI HANDLE    WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
2538 NTSYSAPI NTSTATUS  WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
2539 NTSYSAPI NTSTATUS  WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
2540 NTSYSAPI NTSTATUS  WINAPI RtlCreateTimerQueue(PHANDLE);
2541 NTSYSAPI NTSTATUS  WINAPI RtlCreateTimer(PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
2542 NTSYSAPI BOOLEAN   WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
2543 NTSYSAPI BOOLEAN   WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
2544 NTSYSAPI NTSTATUS  WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
2545 NTSYSAPI NTSTATUS  WINAPI RtlCreateUserThread(HANDLE,const SECURITY_DESCRIPTOR*,BOOLEAN,PVOID,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
2546 NTSYSAPI void      WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
2547 NTSYSAPI PVOID     WINAPI RtlDecodePointer(PVOID);
2548 NTSYSAPI NTSTATUS  WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
2549 NTSYSAPI NTSTATUS  WINAPI RtlDeleteAce(PACL,DWORD);
2550 NTSYSAPI NTSTATUS  WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
2551 NTSYSAPI NTSTATUS  WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
2552 NTSYSAPI NTSTATUS  WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
2553 NTSYSAPI void      WINAPI RtlDeleteResource(LPRTL_RWLOCK);
2554 NTSYSAPI NTSTATUS  WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
2555 NTSYSAPI NTSTATUS  WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
2556 NTSYSAPI NTSTATUS  WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
2557 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
2558 NTSYSAPI NTSTATUS  WINAPI RtlDeregisterWait(HANDLE);
2559 NTSYSAPI NTSTATUS  WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
2560 NTSYSAPI NTSTATUS  WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
2561 NTSYSAPI NTSTATUS  WINAPI RtlDestroyEnvironment(PWSTR);
2562 NTSYSAPI NTSTATUS  WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
2563 NTSYSAPI HANDLE    WINAPI RtlDestroyHeap(HANDLE);
2564 NTSYSAPI void      WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
2565 NTSYSAPI NTSTATUS  WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
2566 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
2567 NTSYSAPI BOOLEAN   WINAPI RtlDllShutdownInProgress(void);
2568 NTSYSAPI BOOLEAN   WINAPI RtlDoesFileExists_U(LPCWSTR);
2569 NTSYSAPI BOOLEAN   WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
2570 NTSYSAPI NTSTATUS  WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
2571 NTSYSAPI ULONG     WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
2572 NTSYSAPI WCHAR     WINAPI RtlDowncaseUnicodeChar(WCHAR);
2573 NTSYSAPI NTSTATUS  WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
2574 NTSYSAPI void      WINAPI RtlDumpResource(LPRTL_RWLOCK);
2575 NTSYSAPI NTSTATUS  WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
2576 NTSYSAPI NTSTATUS  WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
2577 NTSYSAPI PVOID     WINAPI RtlEncodePointer(PVOID);
2578 NTSYSAPI NTSTATUS  WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
2579 NTSYSAPI void      WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
2580 NTSYSAPI NTSTATUS  WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
2581 NTSYSAPI NTSTATUS  WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
2582 NTSYSAPI BOOLEAN   WINAPI RtlEqualLuid(const LUID*,const LUID*);
2583 NTSYSAPI BOOL      WINAPI RtlEqualPrefixSid(PSID,PSID);
2584 NTSYSAPI BOOL      WINAPI RtlEqualSid(PSID,PSID);
2585 NTSYSAPI BOOLEAN   WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
2586 NTSYSAPI BOOLEAN   WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
2587 NTSYSAPI void      DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
2588 NTSYSAPI void      DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
2589 NTSYSAPI NTSTATUS  WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
2590 NTSYSAPI NTSTATUS  WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
2591 NTSYSAPI NTSTATUS  WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
2592 NTSYSAPI NTSTATUS  WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
2593 NTSYSAPI ULONG     WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
2594 NTSYSAPI ULONG     WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
2595 NTSYSAPI ULONG     WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
2596 NTSYSAPI ULONG     WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
2597 NTSYSAPI ULONG     WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
2598 NTSYSAPI CCHAR     WINAPI RtlFindLeastSignificantBit(ULONGLONG);
2599 NTSYSAPI ULONG     WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
2600 NTSYSAPI ULONG     WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
2601 NTSYSAPI NTSTATUS  WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
2602 NTSYSAPI CCHAR     WINAPI RtlFindMostSignificantBit(ULONGLONG);
2603 NTSYSAPI ULONG     WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
2604 NTSYSAPI ULONG     WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
2605 NTSYSAPI ULONG     WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
2606 NTSYSAPI ULONG     WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
2607 NTSYSAPI ULONG     WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
2608 NTSYSAPI BOOLEAN   WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
2609 NTSYSAPI NTSTATUS  WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
2610 NTSYSAPI NTSTATUS  WINAPI RtlFormatMessage(LPWSTR,UCHAR,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG);
2611 NTSYSAPI void      WINAPI RtlFreeAnsiString(PANSI_STRING);
2612 NTSYSAPI BOOLEAN   WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
2613 NTSYSAPI BOOLEAN   WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
2614 NTSYSAPI void      WINAPI RtlFreeOemString(POEM_STRING);
2615 NTSYSAPI DWORD     WINAPI RtlFreeSid(PSID);
2616 NTSYSAPI void      WINAPI RtlFreeThreadActivationContextStack(void);
2617 NTSYSAPI void      WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
2618 NTSYSAPI NTSTATUS  WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
2619 NTSYSAPI NTSTATUS  WINAPI RtlGetActiveActivationContext(HANDLE*);
2620 NTSYSAPI NTSTATUS  WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
2621 NTSYSAPI NTSTATUS  WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
2622 NTSYSAPI ULONG     WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
2623 NTSYSAPI PEB *     WINAPI RtlGetCurrentPeb(void);
2624 NTSYSAPI NTSTATUS  WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
2625 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
2626 NTSYSAPI ULONG     WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
2627 NTSYSAPI NTSTATUS  WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
2628 NTSYSAPI NTSTATUS  WINAPI RtlGetLastNtStatus(void);
2629 NTSYSAPI DWORD     WINAPI RtlGetLastWin32Error(void);
2630 NTSYSAPI DWORD     WINAPI RtlGetLongestNtPathLength(void);
2631 NTSYSAPI ULONG     WINAPI RtlGetNtGlobalFlags(void);
2632 NTSYSAPI BOOLEAN   WINAPI RtlGetNtProductType(LPDWORD);
2633 NTSYSAPI NTSTATUS  WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
2634 NTSYSAPI ULONG     WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
2635 NTSYSAPI DWORD     WINAPI RtlGetThreadErrorMode(void);
2636 NTSYSAPI NTSTATUS  WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
2637 NTSYSAPI NTSTATUS  WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
2638 NTSYSAPI NTSTATUS  WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
2639 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
2640 NTSYSAPI PVOID     WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
2641 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
2642 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
2643 NTSYSAPI PVOID     WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
2644 NTSYSAPI NTSTATUS  WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
2645 NTSYSAPI void      WINAPI RtlInitString(PSTRING,PCSZ);
2646 NTSYSAPI void      WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
2647 NTSYSAPI NTSTATUS  WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
2648 NTSYSAPI void      WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
2649 NTSYSAPI NTSTATUS  WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
2650 NTSYSAPI void      WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
2651 NTSYSAPI void      WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
2652 NTSYSAPI NTSTATUS  WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
2653 NTSYSAPI NTSTATUS  WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
2654 NTSYSAPI NTSTATUS  WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
2655 NTSYSAPI void      WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
2656 NTSYSAPI void      WINAPI RtlInitializeResource(LPRTL_RWLOCK);
2657 NTSYSAPI void      WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
2658 NTSYSAPI BOOL      WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
2659 NTSYSAPI NTSTATUS  WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
2660 NTSYSAPI NTSTATUS  WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
2661 NTSYSAPI NTSTATUS  WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
2662 NTSYSAPI BOOLEAN   WINAPI RtlIsActivationContextActive(HANDLE);
2663 NTSYSAPI BOOL      WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
2664 NTSYSAPI BOOL      WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
2665 NTSYSAPI ULONG     WINAPI RtlIsDosDeviceName_U(PCWSTR);
2666 NTSYSAPI BOOLEAN   WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
2667 NTSYSAPI BOOLEAN   WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
2668 NTSYSAPI BOOLEAN   WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
2669 NTSYSAPI BOOLEAN   WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
2670 NTSYSAPI NTSTATUS  WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
2671 NTSYSAPI DWORD     WINAPI RtlLengthRequiredSid(DWORD);
2672 NTSYSAPI ULONG     WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
2673 NTSYSAPI DWORD     WINAPI RtlLengthSid(PSID);
2674 NTSYSAPI NTSTATUS  WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
2675 NTSYSAPI BOOLEAN   WINAPI RtlLockHeap(HANDLE);
2676 NTSYSAPI NTSTATUS  WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
2677 NTSYSAPI NTSTATUS  WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
2678 NTSYSAPI void      WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
2679 NTSYSAPI NTSTATUS  WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
2680 NTSYSAPI NTSTATUS  WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,UINT);
2681 NTSYSAPI NTSTATUS  WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
2682 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
2683 NTSYSAPI ULONG     WINAPI RtlNtStatusToDosError(NTSTATUS);
2684 NTSYSAPI ULONG     WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
2685 NTSYSAPI ULONG     WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
2686 NTSYSAPI ULONG     WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
2687 NTSYSAPI UINT      WINAPI RtlOemStringToUnicodeSize(const STRING*);
2688 NTSYSAPI NTSTATUS  WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
2689 NTSYSAPI NTSTATUS  WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
2690 NTSYSAPI NTSTATUS  WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
2691 NTSYSAPI PVOID     WINAPI RtlPcToFileHeader(PVOID,PVOID*);
2692 NTSYSAPI NTSTATUS  WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
2693 NTSYSAPI void      WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
2694 NTSYSAPI BOOLEAN   WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
2695 NTSYSAPI BOOLEAN   WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
2696 NTSYSAPI void      WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
2697 NTSYSAPI NTSTATUS  WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
2698 NTSYSAPI NTSTATUS  WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
2699 NTSYSAPI NTSTATUS  WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
2700 NTSYSAPI NTSTATUS  WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
2701 NTSYSAPI NTSTATUS  WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
2702 NTSYSAPI NTSTATUS  WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
2703 NTSYSAPI NTSTATUS  WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
2704 NTSYSAPI NTSTATUS  WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
2705 NTSYSAPI NTSTATUS  WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
2706 NTSYSAPI NTSTATUS  WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
2707 NTSYSAPI NTSTATUS  WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
2708 NTSYSAPI NTSTATUS  WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
2709 NTSYSAPI void      WINAPI RtlRaiseException(PEXCEPTION_RECORD);
2710 NTSYSAPI void      WINAPI RtlRaiseStatus(NTSTATUS);
2711 NTSYSAPI ULONG     WINAPI RtlRandom(PULONG);
2712 NTSYSAPI PVOID     WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T);
2713 NTSYSAPI NTSTATUS  WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
2714 NTSYSAPI void      WINAPI RtlReleaseActivationContext(HANDLE);
2715 NTSYSAPI void      WINAPI RtlReleasePebLock(void);
2716 NTSYSAPI void      WINAPI RtlReleaseResource(LPRTL_RWLOCK);
2717 NTSYSAPI void      WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
2718 NTSYSAPI void      WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
2719 NTSYSAPI ULONG     WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
2720 NTSYSAPI void      WINAPI RtlRestoreLastWin32Error(DWORD);
2721 NTSYSAPI void      WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
2722 NTSYSAPI void      WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
2723 NTSYSAPI NTSTATUS  WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
2724 NTSYSAPI void      WINAPI RtlSetAllBits(PRTL_BITMAP);
2725 NTSYSAPI void      WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
2726 NTSYSAPI ULONG     WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
2727 NTSYSAPI NTSTATUS  WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
2728 NTSYSAPI NTSTATUS  WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
2729 NTSYSAPI void      WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
2730 NTSYSAPI NTSTATUS  WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
2731 NTSYSAPI NTSTATUS  WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
2732 NTSYSAPI NTSTATUS  WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
2733 NTSYSAPI NTSTATUS  WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
2734 NTSYSAPI NTSTATUS  WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
2735 NTSYSAPI NTSTATUS  WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
2736 NTSYSAPI void      WINAPI RtlSetLastWin32Error(DWORD);
2737 NTSYSAPI void      WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
2738 NTSYSAPI NTSTATUS  WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
2739 NTSYSAPI NTSTATUS  WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
2740 NTSYSAPI NTSTATUS  WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
2741 NTSYSAPI SIZE_T    WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
2742 NTSYSAPI NTSTATUS  WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
2743 NTSYSAPI NTSTATUS  WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
2744 NTSYSAPI NTSTATUS  WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
2745 NTSYSAPI LPDWORD   WINAPI RtlSubAuthoritySid(PSID,DWORD);
2746 NTSYSAPI LPBYTE    WINAPI RtlSubAuthorityCountSid(PSID);
2747 NTSYSAPI NTSTATUS  WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
2748 NTSYSAPI void      WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
2749 NTSYSAPI BOOLEAN   WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
2750 NTSYSAPI void      WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
2751 NTSYSAPI BOOLEAN   WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
2752 NTSYSAPI BOOLEAN   WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
2753 NTSYSAPI BOOLEAN   WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
2754 NTSYSAPI BOOLEAN   WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
2755 NTSYSAPI BOOL      WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
2756 NTSYSAPI ULONGLONG __cdecl RtlUlonglongByteSwap(ULONGLONG);
2757 NTSYSAPI DWORD     WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
2758 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
2759 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
2760 NTSYSAPI DWORD     WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
2761 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
2762 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
2763 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
2764 NTSYSAPI NTSTATUS  WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
2765 NTSYSAPI ULONG     WINAPI RtlUniform(PULONG);
2766 NTSYSAPI BOOLEAN   WINAPI RtlUnlockHeap(HANDLE);
2767 NTSYSAPI void      WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
2768 #ifdef __x86_64__
2769 NTSYSAPI void      WINAPI RtlUnwindEx(PVOID,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
2770 #elif defined(__ia64__)
2771 NTSYSAPI void      WINAPI RtlUnwind2(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT);
2772 NTSYSAPI void      WINAPI RtlUnwindEx(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
2773 #endif
2774 NTSYSAPI WCHAR     WINAPI RtlUpcaseUnicodeChar(WCHAR);
2775 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
2776 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
2777 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
2778 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
2779 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
2780 NTSYSAPI NTSTATUS  WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
2781 NTSYSAPI NTSTATUS  WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
2782 NTSYSAPI CHAR      WINAPI RtlUpperChar(CHAR);
2783 NTSYSAPI void      WINAPI RtlUpperString(STRING *,const STRING *);
2784 NTSYSAPI NTSTATUS  WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
2785 NTSYSAPI BOOLEAN   WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
2786 NTSYSAPI BOOLEAN   WINAPI RtlValidAcl(PACL);
2787 NTSYSAPI BOOLEAN   WINAPI RtlValidSid(PSID);
2788 NTSYSAPI BOOLEAN   WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
2789 NTSYSAPI NTSTATUS  WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
2790 NTSYSAPI void      WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
2791 NTSYSAPI void      WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
2792 NTSYSAPI NTSTATUS  WINAPI RtlWalkHeap(HANDLE,PVOID);
2793 NTSYSAPI NTSTATUS  WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
2794 NTSYSAPI NTSTATUS  WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
2795 NTSYSAPI NTSTATUS  WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
2796 NTSYSAPI NTSTATUS  WINAPI RtlZombifyActivationContext(HANDLE);
2797 NTSYSAPI NTSTATUS  WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
2798 NTSYSAPI NTSTATUS  WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
2799 NTSYSAPI NTSTATUS  WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
2800 NTSYSAPI NTSTATUS  WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
2801 NTSYSAPI NTSTATUS  WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
2802 NTSYSAPI NTSTATUS  WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
2803
2804 /* 32-bit only functions */
2805
2806 #ifndef _WIN64
2807 NTSYSAPI LONGLONG  WINAPI RtlConvertLongToLargeInteger(LONG);
2808 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
2809 NTSYSAPI LONGLONG  WINAPI RtlEnlargedIntegerMultiply(INT,INT);
2810 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
2811 NTSYSAPI UINT      WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
2812 NTSYSAPI LONGLONG  WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
2813 NTSYSAPI LONGLONG  WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
2814 NTSYSAPI LONGLONG  WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
2815 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
2816 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
2817 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
2818 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerNegate(LONGLONG);
2819 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
2820 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
2821 NTSYSAPI LONGLONG  WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
2822 NTSYSAPI NTSTATUS  WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
2823 #endif
2824
2825 /* Threadpool functions */
2826
2827 NTSYSAPI NTSTATUS  WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
2828 NTSYSAPI NTSTATUS  WINAPI TpAllocPool(TP_POOL **,PVOID);
2829 NTSYSAPI NTSTATUS  WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
2830 NTSYSAPI NTSTATUS  WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
2831 NTSYSAPI NTSTATUS  WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
2832 NTSYSAPI void      WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
2833 NTSYSAPI NTSTATUS  WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
2834 NTSYSAPI void      WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
2835 NTSYSAPI void      WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
2836 NTSYSAPI void      WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
2837 NTSYSAPI void      WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
2838 NTSYSAPI void      WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
2839 NTSYSAPI BOOL      WINAPI TpIsTimerSet(TP_TIMER *);
2840 NTSYSAPI void      WINAPI TpPostWork(TP_WORK *);
2841 NTSYSAPI void      WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
2842 NTSYSAPI void      WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
2843 NTSYSAPI void      WINAPI TpReleasePool(TP_POOL *);
2844 NTSYSAPI void      WINAPI TpReleaseTimer(TP_TIMER *);
2845 NTSYSAPI void      WINAPI TpReleaseWait(TP_WAIT *);
2846 NTSYSAPI void      WINAPI TpReleaseWork(TP_WORK *);
2847 NTSYSAPI void      WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
2848 NTSYSAPI BOOL      WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
2849 NTSYSAPI void      WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
2850 NTSYSAPI void      WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
2851 NTSYSAPI NTSTATUS  WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
2852 NTSYSAPI void      WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
2853 NTSYSAPI void      WINAPI TpWaitForWait(TP_WAIT *,BOOL);
2854 NTSYSAPI void      WINAPI TpWaitForWork(TP_WORK *,BOOL);
2855
2856 /* Wine internal functions */
2857
2858 NTSYSAPI NTSTATUS CDECL wine_nt_to_unix_file_name( const UNICODE_STRING *nameW, ANSI_STRING *unix_name_ret,
2859                                                    UINT disposition, BOOLEAN check_case );
2860 NTSYSAPI NTSTATUS CDECL wine_unix_to_nt_file_name( const ANSI_STRING *name, UNICODE_STRING *nt );
2861
2862
2863 /***********************************************************************
2864  * Inline functions
2865  */
2866
2867 #define InitializeObjectAttributes(p,n,a,r,s) \
2868     do { \
2869         (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
2870         (p)->RootDirectory = r; \
2871         (p)->Attributes = a; \
2872         (p)->ObjectName = n; \
2873         (p)->SecurityDescriptor = s; \
2874         (p)->SecurityQualityOfService = NULL; \
2875     } while (0)
2876
2877 #define NtCurrentProcess() ((HANDLE)-1)
2878
2879 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
2880 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
2881 #define RtlStoreUlong(p,v)  do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
2882 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
2883 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
2884 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
2885 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
2886
2887 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
2888 {
2889     if (lpBits && ulBit < lpBits->SizeOfBitMap &&
2890         lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
2891         return TRUE;
2892     return FALSE;
2893 }
2894
2895 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
2896 static inline USHORT RtlUshortByteSwap(USHORT s)
2897 {
2898     return (s >> 8) | (s << 8);
2899 }
2900 static inline ULONG RtlUlongByteSwap(ULONG i)
2901 {
2902 #if defined(__i386__) && defined(__GNUC__)
2903     ULONG ret;
2904     __asm__("bswap %0" : "=r" (ret) : "0" (i) );
2905     return ret;
2906 #else
2907     return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
2908 #endif
2909 }
2910
2911 /* list manipulation macros */
2912 #define InitializeListHead(le)  (void)((le)->Flink = (le)->Blink = (le))
2913 #define InsertHeadList(le,e)    do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
2914 #define InsertTailList(le,e)    do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
2915 #define IsListEmpty(le)         ((le)->Flink == (le))
2916 #define RemoveEntryList(e)      do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
2917 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
2918 {
2919     PLIST_ENTRY f, b, e;
2920
2921     e = le->Flink;
2922     f = le->Flink->Flink;
2923     b = le->Flink->Blink;
2924     f->Blink = b;
2925     b->Flink = f;
2926
2927     if (e != le) e->Flink = e->Blink = NULL;
2928     return e;
2929 }
2930 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
2931 {
2932     PLIST_ENTRY f, b, e;
2933
2934     e = le->Blink;
2935     f = le->Blink->Flink;
2936     b = le->Blink->Blink;
2937     f->Blink = b;
2938     b->Flink = f;
2939
2940     if (e != le) e->Flink = e->Blink = NULL;
2941     return e;
2942 }
2943
2944
2945 #ifdef __WINESRC__
2946
2947 /* The thread information for 16-bit threads */
2948 /* NtCurrentTeb()->SubSystemTib points to this */
2949 typedef struct
2950 {
2951     void           *unknown;    /* 00 unknown */
2952     UNICODE_STRING *exe_name;   /* 04 exe module name */
2953
2954     /* the following fields do not exist under Windows */
2955     UNICODE_STRING  exe_str;    /* exe name string pointed to by exe_name */
2956     CURDIR          curdir;     /* current directory */
2957     WCHAR           curdir_buffer[MAX_PATH];
2958 } WIN16_SUBSYSTEM_TIB;
2959
2960 #endif /* __WINESRC__ */
2961
2962 #ifdef __cplusplus
2963 } /* extern "C" */
2964 #endif /* defined(__cplusplus) */
2965
2966 #endif  /* __WINE_WINTERNL_H */