bcrypt: Export ECDSA/ECDH blobs with the correct header magic.
[wine.git] / include / winternl.h
blob6c80919397723c61f5ead578da1c22a4334bd30a
1 /*
2 * Internal NT APIs and data structures
4 * Copyright (C) the Wine project
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
24 #include <ntdef.h>
25 #include <windef.h>
27 #ifdef __cplusplus
28 extern "C" {
29 #endif /* defined(__cplusplus) */
32 /**********************************************************************
33 * Fundamental types and data structures
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS;
39 #endif
41 typedef const char *PCSZ;
43 typedef short CSHORT;
44 typedef CSHORT *PCSHORT;
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING {
49 USHORT Length;
50 USHORT MaximumLength;
51 PCHAR Buffer;
52 } STRING, *PSTRING;
53 #endif
55 typedef STRING ANSI_STRING;
56 typedef PSTRING PANSI_STRING;
57 typedef const STRING *PCANSI_STRING;
59 typedef STRING OEM_STRING;
60 typedef PSTRING POEM_STRING;
61 typedef const STRING *PCOEM_STRING;
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING {
66 USHORT Length; /* bytes */
67 USHORT MaximumLength; /* bytes */
68 PWSTR Buffer;
69 } UNICODE_STRING, *PUNICODE_STRING;
70 #endif
72 typedef const UNICODE_STRING *PCUNICODE_STRING;
74 #ifndef _FILETIME_
75 #define _FILETIME_
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
79 #ifdef WORDS_BIGENDIAN
80 DWORD dwHighDateTime;
81 DWORD dwLowDateTime;
82 #else
83 DWORD dwLowDateTime;
84 DWORD dwHighDateTime;
85 #endif
86 } FILETIME, *PFILETIME, *LPFILETIME;
87 #endif /* _FILETIME_ */
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
97 typedef struct _RTL_SYSTEM_TIME {
98 WORD wYear;
99 WORD wMonth;
100 WORD wDayOfWeek;
101 WORD wDay;
102 WORD wHour;
103 WORD wMinute;
104 WORD wSecond;
105 WORD wMilliseconds;
106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
108 typedef struct _RTL_TIME_ZONE_INFORMATION {
109 LONG Bias;
110 WCHAR StandardName[32];
111 RTL_SYSTEM_TIME StandardDate;
112 LONG StandardBias;
113 WCHAR DaylightName[32];
114 RTL_SYSTEM_TIME DaylightDate;
115 LONG DaylightBias;
116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
120 LONG Bias;
121 WCHAR StandardName[32];
122 RTL_SYSTEM_TIME StandardDate;
123 LONG StandardBias;
124 WCHAR DaylightName[32];
125 RTL_SYSTEM_TIME DaylightDate;
126 LONG DaylightBias;
127 WCHAR TimeZoneKeyName[128];
128 BOOLEAN DynamicDaylightTimeDisabled;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
131 typedef struct _CLIENT_ID
133 HANDLE UniqueProcess;
134 HANDLE UniqueThread;
135 } CLIENT_ID, *PCLIENT_ID;
137 typedef struct _CURDIR
139 UNICODE_STRING DosPath;
140 PVOID Handle;
141 } CURDIR, *PCURDIR;
143 typedef struct RTL_DRIVE_LETTER_CURDIR
145 USHORT Flags;
146 USHORT Length;
147 ULONG TimeStamp;
148 UNICODE_STRING DosPath;
149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
151 typedef struct _RTL_RELATIVE_NAME
153 UNICODE_STRING RelativeName;
154 HANDLE ContainerDirectory;
155 void *CurDirRef;
156 } RTL_RELATIVE_NAME, *PRTL_RELATIVE_NAME;
158 typedef struct tagRTL_BITMAP {
159 ULONG SizeOfBitMap; /* Number of bits in the bitmap */
160 PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP, *PRTL_BITMAP;
163 typedef const RTL_BITMAP *PCRTL_BITMAP;
165 typedef struct tagRTL_BITMAP_RUN {
166 ULONG StartingIndex; /* Bit position at which run starts */
167 ULONG NumberOfBits; /* Size of the run in bits */
168 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
170 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
174 ULONG AllocationSize;
175 ULONG Size;
176 ULONG Flags;
177 ULONG DebugFlags;
178 HANDLE ConsoleHandle;
179 ULONG ConsoleFlags;
180 HANDLE hStdInput;
181 HANDLE hStdOutput;
182 HANDLE hStdError;
183 CURDIR CurrentDirectory;
184 UNICODE_STRING DllPath;
185 UNICODE_STRING ImagePathName;
186 UNICODE_STRING CommandLine;
187 PWSTR Environment;
188 ULONG dwX;
189 ULONG dwY;
190 ULONG dwXSize;
191 ULONG dwYSize;
192 ULONG dwXCountChars;
193 ULONG dwYCountChars;
194 ULONG dwFillAttribute;
195 ULONG dwFlags;
196 ULONG wShowWindow;
197 UNICODE_STRING WindowTitle;
198 UNICODE_STRING Desktop;
199 UNICODE_STRING ShellInfo;
200 UNICODE_STRING RuntimeInfo;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
202 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
204 /* value for Flags field (FIXME: not the correct name) */
205 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
207 typedef struct _PEB_LDR_DATA
209 ULONG Length;
210 BOOLEAN Initialized;
211 PVOID SsHandle;
212 LIST_ENTRY InLoadOrderModuleList;
213 LIST_ENTRY InMemoryOrderModuleList;
214 LIST_ENTRY InInitializationOrderModuleList;
215 PVOID EntryInProgress;
216 BOOLEAN ShutdownInProgress;
217 HANDLE ShutdownThreadId;
218 } PEB_LDR_DATA, *PPEB_LDR_DATA;
220 typedef struct _GDI_TEB_BATCH
222 ULONG Offset;
223 HANDLE HDC;
224 ULONG Buffer[0x136];
225 } GDI_TEB_BATCH;
227 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
229 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
230 struct _ACTIVATION_CONTEXT *ActivationContext;
231 ULONG Flags;
232 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
234 typedef struct _ACTIVATION_CONTEXT_STACK
236 RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
237 LIST_ENTRY FrameListCache;
238 ULONG Flags;
239 ULONG NextCookieSequenceNumber;
240 ULONG_PTR StackId;
241 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
243 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
245 ULONG Flags;
246 const char *FrameName;
247 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
249 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
251 TEB_ACTIVE_FRAME_CONTEXT BasicContext;
252 const char *SourceLocation;
253 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
255 typedef struct _TEB_ACTIVE_FRAME
257 ULONG Flags;
258 struct _TEB_ACTIVE_FRAME *Previous;
259 TEB_ACTIVE_FRAME_CONTEXT *Context;
260 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
262 typedef struct _TEB_ACTIVE_FRAME_EX
264 TEB_ACTIVE_FRAME BasicFrame;
265 void *ExtensionIdentifier;
266 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
268 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
269 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
271 /***********************************************************************
272 * PEB data structure
274 typedef struct _PEB
275 { /* win32/win64 */
276 BOOLEAN InheritedAddressSpace; /* 000/000 */
277 BOOLEAN ReadImageFileExecOptions; /* 001/001 */
278 BOOLEAN BeingDebugged; /* 002/002 */
279 BOOLEAN SpareBool; /* 003/003 */
280 HANDLE Mutant; /* 004/008 */
281 HMODULE ImageBaseAddress; /* 008/010 */
282 PPEB_LDR_DATA LdrData; /* 00c/018 */
283 RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 010/020 */
284 PVOID SubSystemData; /* 014/028 */
285 HANDLE ProcessHeap; /* 018/030 */
286 PRTL_CRITICAL_SECTION FastPebLock; /* 01c/038 */
287 PVOID /*PPEBLOCKROUTINE*/ FastPebLockRoutine; /* 020/040 */
288 PVOID /*PPEBLOCKROUTINE*/ FastPebUnlockRoutine; /* 024/048 */
289 ULONG EnvironmentUpdateCount; /* 028/050 */
290 PVOID KernelCallbackTable; /* 02c/058 */
291 ULONG Reserved[2]; /* 030/060 */
292 PVOID /*PPEB_FREE_BLOCK*/ FreeList; /* 038/068 */
293 ULONG TlsExpansionCounter; /* 03c/070 */
294 PRTL_BITMAP TlsBitmap; /* 040/078 */
295 ULONG TlsBitmapBits[2]; /* 044/080 */
296 PVOID ReadOnlySharedMemoryBase; /* 04c/088 */
297 PVOID ReadOnlySharedMemoryHeap; /* 050/090 */
298 PVOID *ReadOnlyStaticServerData; /* 054/098 */
299 PVOID AnsiCodePageData; /* 058/0a0 */
300 PVOID OemCodePageData; /* 05c/0a8 */
301 PVOID UnicodeCaseTableData; /* 060/0b0 */
302 ULONG NumberOfProcessors; /* 064/0b8 */
303 ULONG NtGlobalFlag; /* 068/0bc */
304 LARGE_INTEGER CriticalSectionTimeout; /* 070/0c0 */
305 SIZE_T HeapSegmentReserve; /* 078/0c8 */
306 SIZE_T HeapSegmentCommit; /* 07c/0d0 */
307 SIZE_T HeapDeCommitTotalFreeThreshold; /* 080/0d8 */
308 SIZE_T HeapDeCommitFreeBlockThreshold; /* 084/0e0 */
309 ULONG NumberOfHeaps; /* 088/0e8 */
310 ULONG MaximumNumberOfHeaps; /* 08c/0ec */
311 PVOID *ProcessHeaps; /* 090/0f0 */
312 PVOID GdiSharedHandleTable; /* 094/0f8 */
313 PVOID ProcessStarterHelper; /* 098/100 */
314 PVOID GdiDCAttributeList; /* 09c/108 */
315 PVOID LoaderLock; /* 0a0/110 */
316 ULONG OSMajorVersion; /* 0a4/118 */
317 ULONG OSMinorVersion; /* 0a8/11c */
318 ULONG OSBuildNumber; /* 0ac/120 */
319 ULONG OSPlatformId; /* 0b0/124 */
320 ULONG ImageSubSystem; /* 0b4/128 */
321 ULONG ImageSubSystemMajorVersion; /* 0b8/12c */
322 ULONG ImageSubSystemMinorVersion; /* 0bc/130 */
323 ULONG ImageProcessAffinityMask; /* 0c0/134 */
324 HANDLE GdiHandleBuffer[28]; /* 0c4/138 */
325 ULONG unknown[6]; /* 134/218 */
326 PVOID PostProcessInitRoutine; /* 14c/230 */
327 PRTL_BITMAP TlsExpansionBitmap; /* 150/238 */
328 ULONG TlsExpansionBitmapBits[32]; /* 154/240 */
329 ULONG SessionId; /* 1d4/2c0 */
330 ULARGE_INTEGER AppCompatFlags; /* 1d8/2c8 */
331 ULARGE_INTEGER AppCompatFlagsUser; /* 1e0/2d0 */
332 PVOID ShimData; /* 1e8/2d8 */
333 PVOID AppCompatInfo; /* 1ec/2e0 */
334 UNICODE_STRING CSDVersion; /* 1f0/2e8 */
335 PVOID ActivationContextData; /* 1f8/2f8 */
336 PVOID ProcessAssemblyStorageMap; /* 1fc/300 */
337 PVOID SystemDefaultActivationData; /* 200/308 */
338 PVOID SystemAssemblyStorageMap; /* 204/310 */
339 SIZE_T MinimumStackCommit; /* 208/318 */
340 PVOID *FlsCallback; /* 20c/320 */
341 LIST_ENTRY FlsListHead; /* 210/328 */
342 PRTL_BITMAP FlsBitmap; /* 218/338 */
343 ULONG FlsBitmapBits[4]; /* 21c/340 */
344 ULONG FlsHighIndex; /* 22c/350 */
345 PVOID WerRegistrationData; /* 230/358 */
346 PVOID WerShipAssertPtr; /* 234/360 */
347 PVOID pUnused; /* 238/368 */
348 PVOID pImageHeaderHash; /* 23c/370 */
349 ULONG TracingFlags; /* 240/378 */
350 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 248/380 */
351 ULONG TppWorkerpListLock; /* 250/388 */
352 LIST_ENTRY TppWorkerpList; /* 254/390 */
353 PVOID WaitOnAddressHashTable [0x80]; /* 25c/3a0 */
354 PVOID TelemetryCoverageHeader; /* 45c/7a0 */
355 ULONG CloudFileFlags; /* 460/7a8 */
356 } PEB, *PPEB;
359 /***********************************************************************
360 * TEB data structure
362 typedef struct _TEB
363 { /* win32/win64 */
364 NT_TIB Tib; /* 000/0000 */
365 PVOID EnvironmentPointer; /* 01c/0038 */
366 CLIENT_ID ClientId; /* 020/0040 */
367 PVOID ActiveRpcHandle; /* 028/0050 */
368 PVOID ThreadLocalStoragePointer; /* 02c/0058 */
369 PPEB Peb; /* 030/0060 */
370 ULONG LastErrorValue; /* 034/0068 */
371 ULONG CountOfOwnedCriticalSections; /* 038/006c */
372 PVOID CsrClientThread; /* 03c/0070 */
373 PVOID Win32ThreadInfo; /* 040/0078 */
374 ULONG User32Reserved[26]; /* 044/0080 */
375 ULONG UserReserved[5]; /* 0ac/00e8 */
376 PVOID WOW32Reserved; /* 0c0/0100 */
377 ULONG CurrentLocale; /* 0c4/0108 */
378 ULONG FpSoftwareStatusRegister; /* 0c8/010c */
379 PVOID ReservedForDebuggerInstrumentation[16]; /* 0cc/0110 */
380 #ifdef _WIN64
381 PVOID SystemReserved1[30]; /* /0190 */
382 #else
383 PVOID SystemReserved1[26]; /* 10c/ used for krnl386 private data in Wine */
384 #endif
385 char PlaceholderCompatibilityMode; /* 174/0280 */
386 char PlaceholderReserved[11]; /* 175/0281 */
387 DWORD ProxiedProcessId; /* 180/028c */
388 ACTIVATION_CONTEXT_STACK ActivationContextStack; /* 184/0290 */
389 UCHAR WorkingOnBehalfOfTicket[8]; /* 19c/02b8 */
390 LONG ExceptionCode; /* 1a4/02c0 */
391 ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; /* 1a8/02c8 */
392 ULONG_PTR InstrumentationCallbackSp; /* 1ac/02d0 */
393 ULONG_PTR InstrumentationCallbackPreviousPc; /* 1b0/02d8 */
394 ULONG_PTR InstrumentationCallbackPreviousSp; /* 1b4/02e0 */
395 #ifdef _WIN64
396 ULONG TxFsContext; /* /02e8 */
397 BOOLEAN InstrumentationCallbackDisabled; /* /02ec */
398 #else
399 BOOLEAN InstrumentationCallbackDisabled; /* 1b8/ */
400 BYTE SpareBytes1[23]; /* 1b9/ */
401 ULONG TxFsContext; /* 1d0/ */
402 #endif
403 GDI_TEB_BATCH GdiTebBatch; /* 1d4/02f0 used for ntdll private data in Wine */
404 CLIENT_ID RealClientId; /* 6b4/07d8 */
405 HANDLE GdiCachedProcessHandle; /* 6bc/07e8 */
406 ULONG GdiClientPID; /* 6c0/07f0 */
407 ULONG GdiClientTID; /* 6c4/07f4 */
408 PVOID GdiThreadLocaleInfo; /* 6c8/07f8 */
409 ULONG_PTR Win32ClientInfo[62]; /* 6cc/0800 used for user32 private data in Wine */
410 PVOID glDispatchTable[233]; /* 7c4/09f0 */
411 PVOID glReserved1[29]; /* b68/1138 */
412 PVOID glReserved2; /* bdc/1220 */
413 PVOID glSectionInfo; /* be0/1228 */
414 PVOID glSection; /* be4/1230 */
415 PVOID glTable; /* be8/1238 */
416 PVOID glCurrentRC; /* bec/1240 */
417 PVOID glContext; /* bf0/1248 */
418 ULONG LastStatusValue; /* bf4/1250 */
419 UNICODE_STRING StaticUnicodeString; /* bf8/1258 */
420 WCHAR StaticUnicodeBuffer[261]; /* c00/1268 */
421 PVOID DeallocationStack; /* e0c/1478 */
422 PVOID TlsSlots[64]; /* e10/1480 */
423 LIST_ENTRY TlsLinks; /* f10/1680 */
424 PVOID Vdm; /* f18/1690 */
425 PVOID ReservedForNtRpc; /* f1c/1698 */
426 PVOID DbgSsReserved[2]; /* f20/16a0 */
427 ULONG HardErrorDisabled; /* f28/16b0 */
428 PVOID Instrumentation[16]; /* f2c/16b8 */
429 PVOID WinSockData; /* f6c/1738 */
430 ULONG GdiBatchCount; /* f70/1740 */
431 ULONG Spare2; /* f74/1744 */
432 ULONG GuaranteedStackBytes; /* f78/1748 */
433 PVOID ReservedForPerf; /* f7c/1750 */
434 PVOID ReservedForOle; /* f80/1758 */
435 ULONG WaitingOnLoaderLock; /* f84/1760 */
436 PVOID Reserved5[3]; /* f88/1768 */
437 PVOID *TlsExpansionSlots; /* f94/1780 */
438 #ifdef _WIN64
439 PVOID DeallocationBStore; /* /1788 */
440 PVOID BStoreLimit; /* /1790 */
441 #endif
442 ULONG ImpersonationLocale; /* f98/1798 */
443 ULONG IsImpersonating; /* f9c/179c */
444 PVOID NlsCache; /* fa0/17a0 */
445 PVOID ShimData; /* fa4/17a8 */
446 ULONG HeapVirtualAffinity; /* fa8/17b0 */
447 PVOID CurrentTransactionHandle; /* fac/17b8 */
448 TEB_ACTIVE_FRAME *ActiveFrame; /* fb0/17c0 */
449 PVOID *FlsSlots; /* fb4/17c8 */
450 PVOID PreferredLanguages; /* fb8/17d0 */
451 PVOID UserPrefLanguages; /* fbc/17d8 */
452 PVOID MergedPrefLanguages; /* fc0/17e0 */
453 ULONG MuiImpersonation; /* fc4/17e8 */
454 USHORT CrossTebFlags; /* fc8/17ec */
455 USHORT SameTebFlags; /* fca/17ee */
456 PVOID TxnScopeEnterCallback; /* fcc/17f0 */
457 PVOID TxnScopeExitCallback; /* fd0/17f8 */
458 PVOID TxnScopeContext; /* fd4/1800 */
459 ULONG LockCount; /* fd8/1808 */
460 LONG WowTebOffset; /* fdc/180c */
461 PVOID ResourceRetValue; /* fe0/1810 */
462 PVOID ReservedForWdf; /* fe4/1818 */
463 ULONGLONG ReservedForCrt; /* fe8/1820 */
464 GUID EffectiveContainerId; /* ff0/1828 */
465 } TEB, *PTEB;
468 /***********************************************************************
469 * The 64-bit version of the PEB and TEB for WoW64
471 #ifndef _WIN64
473 typedef struct _NT_TIB64
475 ULONG64 ExceptionList; /* 0000 */
476 ULONG64 StackBase; /* 0008 */
477 ULONG64 StackLimit; /* 0010 */
478 ULONG64 SubSystemTib; /* 0018 */
479 ULONG64 FiberData; /* 0020 */
480 ULONG64 ArbitraryUserPointer; /* 0028 */
481 ULONG64 Self; /* 0030 */
482 } NT_TIB64;
484 typedef struct _CLIENT_ID64
486 ULONG64 UniqueProcess;
487 ULONG64 UniqueThread;
488 } CLIENT_ID64;
490 typedef struct _LIST_ENTRY64
492 ULONG64 Flink;
493 ULONG64 Blink;
494 } LIST_ENTRY64;
496 typedef struct _UNICODE_STRING64
498 USHORT Length;
499 USHORT MaximumLength;
500 ULONG64 Buffer;
501 } UNICODE_STRING64;
503 typedef struct _ACTIVATION_CONTEXT_STACK64
505 ULONG64 ActiveFrame;
506 LIST_ENTRY64 FrameListCache;
507 ULONG Flags;
508 ULONG NextCookieSequenceNumber;
509 ULONG64 StackId;
510 } ACTIVATION_CONTEXT_STACK64;
512 typedef struct _PEB64
514 BOOLEAN InheritedAddressSpace; /* 0000 */
515 BOOLEAN ReadImageFileExecOptions; /* 0001 */
516 BOOLEAN BeingDebugged; /* 0002 */
517 BOOLEAN SpareBool; /* 0003 */
518 ULONG64 Mutant; /* 0008 */
519 ULONG64 ImageBaseAddress; /* 0010 */
520 ULONG64 LdrData; /* 0018 */
521 ULONG64 ProcessParameters; /* 0020 */
522 ULONG64 SubSystemData; /* 0028 */
523 ULONG64 ProcessHeap; /* 0030 */
524 ULONG64 FastPebLock; /* 0038 */
525 ULONG64 FastPebLockRoutine; /* 0040 */
526 ULONG64 FastPebUnlockRoutine; /* 0048 */
527 ULONG EnvironmentUpdateCount; /* 0050 */
528 ULONG64 KernelCallbackTable; /* 0058 */
529 ULONG Reserved[2]; /* 0060 */
530 ULONG64 FreeList; /* 0068 */
531 ULONG TlsExpansionCounter; /* 0070 */
532 ULONG64 TlsBitmap; /* 0078 */
533 ULONG TlsBitmapBits[2]; /* 0080 */
534 ULONG64 ReadOnlySharedMemoryBase; /* 0088 */
535 ULONG64 ReadOnlySharedMemoryHeap; /* 0090 */
536 ULONG64 ReadOnlyStaticServerData; /* 0098 */
537 ULONG64 AnsiCodePageData; /* 00a0 */
538 ULONG64 OemCodePageData; /* 00a8 */
539 ULONG64 UnicodeCaseTableData; /* 00b0 */
540 ULONG NumberOfProcessors; /* 00b8 */
541 ULONG NtGlobalFlag; /* 00bc */
542 LARGE_INTEGER CriticalSectionTimeout; /* 00c0 */
543 ULONG64 HeapSegmentReserve; /* 00c8 */
544 ULONG64 HeapSegmentCommit; /* 00d0 */
545 ULONG64 HeapDeCommitTotalFreeThreshold; /* 00d8 */
546 ULONG64 HeapDeCommitFreeBlockThreshold; /* 00e0 */
547 ULONG NumberOfHeaps; /* 00e8 */
548 ULONG MaximumNumberOfHeaps; /* 00ec */
549 ULONG64 ProcessHeaps; /* 00f0 */
550 ULONG64 GdiSharedHandleTable; /* 00f8 */
551 ULONG64 ProcessStarterHelper; /* 0100 */
552 ULONG64 GdiDCAttributeList; /* 0108 */
553 ULONG64 LoaderLock; /* 0110 */
554 ULONG OSMajorVersion; /* 0118 */
555 ULONG OSMinorVersion; /* 011c */
556 ULONG OSBuildNumber; /* 0120 */
557 ULONG OSPlatformId; /* 0124 */
558 ULONG ImageSubSystem; /* 0128 */
559 ULONG ImageSubSystemMajorVersion; /* 012c */
560 ULONG ImageSubSystemMinorVersion; /* 0130 */
561 ULONG ImageProcessAffinityMask; /* 0134 */
562 ULONG64 GdiHandleBuffer[28]; /* 0138 */
563 ULONG unknown[6]; /* 0218 */
564 ULONG64 PostProcessInitRoutine; /* 0230 */
565 ULONG64 TlsExpansionBitmap; /* 0238 */
566 ULONG TlsExpansionBitmapBits[32]; /* 0240 */
567 ULONG SessionId; /* 02c0 */
568 ULARGE_INTEGER AppCompatFlags; /* 02c8 */
569 ULARGE_INTEGER AppCompatFlagsUser; /* 02d0 */
570 ULONG64 ShimData; /* 02d8 */
571 ULONG64 AppCompatInfo; /* 02e0 */
572 UNICODE_STRING64 CSDVersion; /* 02e8 */
573 ULONG64 ActivationContextData; /* 02f8 */
574 ULONG64 ProcessAssemblyStorageMap; /* 0300 */
575 ULONG64 SystemDefaultActivationData; /* 0308 */
576 ULONG64 SystemAssemblyStorageMap; /* 0310 */
577 ULONG64 MinimumStackCommit; /* 0318 */
578 ULONG64 FlsCallback; /* 0320 */
579 LIST_ENTRY64 FlsListHead; /* 0328 */
580 ULONG64 FlsBitmap; /* 0338 */
581 ULONG FlsBitmapBits[4]; /* 0340 */
582 ULONG FlsHighIndex; /* 0350 */
583 ULONG64 WerRegistrationData; /* 0358 */
584 ULONG64 WerShipAssertPtr; /* 0360 */
585 ULONG64 pUnused; /* 0368 */
586 ULONG64 pImageHeaderHash; /* 0370 */
587 ULONG TracingFlags; /* 0378 */
588 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0380 */
589 ULONG TppWorkerpListLock; /* 0388 */
590 LIST_ENTRY64 TppWorkerpList; /* 0390 */
591 ULONG64 WaitOnAddressHashTable [0x80]; /* 03a0 */
592 ULONG64 TelemetryCoverageHeader; /* 07a0 */
593 ULONG CloudFileFlags; /* 07a8 */
594 } PEB64;
596 typedef struct _TEB64
598 NT_TIB64 Tib; /* 0000 */
599 ULONG64 EnvironmentPointer; /* 0038 */
600 CLIENT_ID64 ClientId; /* 0040 */
601 ULONG64 ActiveRpcHandle; /* 0050 */
602 ULONG64 ThreadLocalStoragePointer; /* 0058 */
603 ULONG64 Peb; /* 0060 */
604 ULONG LastErrorValue; /* 0068 */
605 ULONG CountOfOwnedCriticalSections; /* 006c */
606 ULONG64 CsrClientThread; /* 0070 */
607 ULONG64 Win32ThreadInfo; /* 0078 */
608 ULONG User32Reserved[26]; /* 0080 */
609 ULONG UserReserved[5]; /* 00e8 */
610 ULONG64 WOW32Reserved; /* 0100 */
611 ULONG CurrentLocale; /* 0108 */
612 ULONG FpSoftwareStatusRegister; /* 010c */
613 ULONG64 ReservedForDebuggerInstrumentation[16]; /* 0110 */
614 ULONG64 SystemReserved1[30]; /* 0190 */
615 char PlaceholderCompatibilityMode; /* 0280 */
616 char PlaceholderReserved[11]; /* 0281 */
617 DWORD ProxiedProcessId; /* 028c */
618 ACTIVATION_CONTEXT_STACK64 ActivationContextStack; /* 0290 */
619 UCHAR WorkingOnBehalfOfTicket[8]; /* 02b8 */
620 LONG ExceptionCode; /* 02c0 */
621 ULONG64 ActivationContextStackPointer; /* 02c8 */
622 ULONG64 InstrumentationCallbackSp; /* 02d0 */
623 ULONG64 InstrumentationCallbackPreviousPc; /* 02d8 */
624 ULONG64 InstrumentationCallbackPreviousSp; /* 02e0 */
625 ULONG TxFsContext; /* 02e8 */
626 BOOLEAN InstrumentationCallbackDisabled; /* 02ec */
627 ULONG64 GdiTebBatch[0x9d]; /* 02f0 */
628 CLIENT_ID64 RealClientId; /* 07d8 */
629 ULONG64 GdiCachedProcessHandle; /* 07e8 */
630 ULONG GdiClientPID; /* 07f0 */
631 ULONG GdiClientTID; /* 07f4 */
632 ULONG64 GdiThreadLocaleInfo; /* 07f8 */
633 ULONG64 Win32ClientInfo[62]; /* 0800 */
634 ULONG64 glDispatchTable[233]; /* 09f0 */
635 ULONG64 glReserved1[29]; /* 1138 */
636 ULONG64 glReserved2; /* 1220 */
637 ULONG64 glSectionInfo; /* 1228 */
638 ULONG64 glSection; /* 1230 */
639 ULONG64 glTable; /* 1238 */
640 ULONG64 glCurrentRC; /* 1240 */
641 ULONG64 glContext; /* 1248 */
642 ULONG LastStatusValue; /* 1250 */
643 UNICODE_STRING64 StaticUnicodeString; /* 1258 */
644 WCHAR StaticUnicodeBuffer[261]; /* 1268 */
645 ULONG64 DeallocationStack; /* 1478 */
646 ULONG64 TlsSlots[64]; /* 1480 */
647 LIST_ENTRY64 TlsLinks; /* 1680 */
648 ULONG64 Vdm; /* 1690 */
649 ULONG64 ReservedForNtRpc; /* 1698 */
650 ULONG64 DbgSsReserved[2]; /* 16a0 */
651 ULONG HardErrorDisabled; /* 16b0 */
652 ULONG64 Instrumentation[16]; /* 16b8 */
653 ULONG64 WinSockData; /* 1738 */
654 ULONG GdiBatchCount; /* 1740 */
655 ULONG Spare2; /* 1744 */
656 ULONG GuaranteedStackBytes; /* 1748 */
657 ULONG64 ReservedForPerf; /* 1750 */
658 ULONG64 ReservedForOle; /* 1758 */
659 ULONG WaitingOnLoaderLock; /* 1760 */
660 ULONG64 Reserved5[3]; /* 1768 */
661 ULONG64 TlsExpansionSlots; /* 1780 */
662 ULONG64 DeallocationBStore; /* 1788 */
663 ULONG64 BStoreLimit; /* 1790 */
664 ULONG ImpersonationLocale; /* 1798 */
665 ULONG IsImpersonating; /* 179c */
666 ULONG64 NlsCache; /* 17a0 */
667 ULONG64 ShimData; /* 17a8 */
668 ULONG HeapVirtualAffinity; /* 17b0 */
669 ULONG64 CurrentTransactionHandle; /* 17b8 */
670 ULONG64 ActiveFrame; /* 17c0 */
671 ULONG64 FlsSlots; /* 17c8 */
672 ULONG64 PreferredLanguages; /* 17d0 */
673 ULONG64 UserPrefLanguages; /* 17d8 */
674 ULONG64 MergedPrefLanguages; /* 17e0 */
675 ULONG MuiImpersonation; /* 17e8 */
676 USHORT CrossTebFlags; /* 17ec */
677 USHORT SameTebFlags; /* 17ee */
678 ULONG64 TxnScopeEnterCallback; /* 17f0 */
679 ULONG64 TxnScopeExitCallback; /* 17f8 */
680 ULONG64 TxnScopeContext; /* 1800 */
681 ULONG LockCount; /* 1808 */
682 LONG WowTebOffset; /* 180c */
683 ULONG64 ResourceRetValue; /* 1810 */
684 ULONG64 ReservedForWdf; /* 1818 */
685 ULONGLONG ReservedForCrt; /* 1820 */
686 GUID EffectiveContainerId; /* 1828 */
687 } TEB64;
689 /* reserved TEB64 TLS slots for Wow64 */
690 #define WOW64_TLS_FILESYSREDIR 8
692 #endif /* _WIN64 */
694 /***********************************************************************
695 * Enums
698 typedef enum _FILE_INFORMATION_CLASS {
699 FileDirectoryInformation = 1,
700 FileFullDirectoryInformation,
701 FileBothDirectoryInformation,
702 FileBasicInformation,
703 FileStandardInformation,
704 FileInternalInformation,
705 FileEaInformation,
706 FileAccessInformation,
707 FileNameInformation,
708 FileRenameInformation,
709 FileLinkInformation,
710 FileNamesInformation,
711 FileDispositionInformation,
712 FilePositionInformation,
713 FileFullEaInformation,
714 FileModeInformation,
715 FileAlignmentInformation,
716 FileAllInformation,
717 FileAllocationInformation,
718 FileEndOfFileInformation,
719 FileAlternateNameInformation,
720 FileStreamInformation,
721 FilePipeInformation,
722 FilePipeLocalInformation,
723 FilePipeRemoteInformation,
724 FileMailslotQueryInformation,
725 FileMailslotSetInformation,
726 FileCompressionInformation,
727 FileObjectIdInformation,
728 FileCompletionInformation,
729 FileMoveClusterInformation,
730 FileQuotaInformation,
731 FileReparsePointInformation,
732 FileNetworkOpenInformation,
733 FileAttributeTagInformation,
734 FileTrackingInformation,
735 FileIdBothDirectoryInformation,
736 FileIdFullDirectoryInformation,
737 FileValidDataLengthInformation,
738 FileShortNameInformation,
739 FileIoCompletionNotificationInformation,
740 FileIoStatusBlockRangeInformation,
741 FileIoPriorityHintInformation,
742 FileSfioReserveInformation,
743 FileSfioVolumeInformation,
744 FileHardLinkInformation,
745 FileProcessIdsUsingFileInformation,
746 FileNormalizedNameInformation,
747 FileNetworkPhysicalNameInformation,
748 FileIdGlobalTxDirectoryInformation,
749 FileIsRemoteDeviceInformation,
750 FileAttributeCacheInformation,
751 FileNumaNodeInformation,
752 FileStandardLinkInformation,
753 FileRemoteProtocolInformation,
754 FileRenameInformationBypassAccessCheck,
755 FileLinkInformationBypassAccessCheck,
756 FileVolumeNameInformation,
757 FileIdInformation,
758 FileIdExtdDirectoryInformation,
759 FileReplaceCompletionInformation,
760 FileHardLinkFullIdInformation,
761 FileIdExtdBothDirectoryInformation,
762 FileMaximumInformation
763 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
765 typedef struct _FILE_DIRECTORY_INFORMATION {
766 ULONG NextEntryOffset;
767 ULONG FileIndex;
768 LARGE_INTEGER CreationTime;
769 LARGE_INTEGER LastAccessTime;
770 LARGE_INTEGER LastWriteTime;
771 LARGE_INTEGER ChangeTime;
772 LARGE_INTEGER EndOfFile;
773 LARGE_INTEGER AllocationSize;
774 ULONG FileAttributes;
775 ULONG FileNameLength;
776 WCHAR FileName[ANYSIZE_ARRAY];
777 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
779 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
780 ULONG NextEntryOffset;
781 ULONG FileIndex;
782 LARGE_INTEGER CreationTime;
783 LARGE_INTEGER LastAccessTime;
784 LARGE_INTEGER LastWriteTime;
785 LARGE_INTEGER ChangeTime;
786 LARGE_INTEGER EndOfFile;
787 LARGE_INTEGER AllocationSize;
788 ULONG FileAttributes;
789 ULONG FileNameLength;
790 ULONG EaSize;
791 WCHAR FileName[ANYSIZE_ARRAY];
792 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
793 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
795 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
796 ULONG NextEntryOffset;
797 ULONG FileIndex;
798 LARGE_INTEGER CreationTime;
799 LARGE_INTEGER LastAccessTime;
800 LARGE_INTEGER LastWriteTime;
801 LARGE_INTEGER ChangeTime;
802 LARGE_INTEGER EndOfFile;
803 LARGE_INTEGER AllocationSize;
804 ULONG FileAttributes;
805 ULONG FileNameLength;
806 ULONG EaSize;
807 LARGE_INTEGER FileId;
808 WCHAR FileName[ANYSIZE_ARRAY];
809 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
811 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
812 ULONG NextEntryOffset;
813 ULONG FileIndex;
814 LARGE_INTEGER CreationTime;
815 LARGE_INTEGER LastAccessTime;
816 LARGE_INTEGER LastWriteTime;
817 LARGE_INTEGER ChangeTime;
818 LARGE_INTEGER EndOfFile;
819 LARGE_INTEGER AllocationSize;
820 ULONG FileAttributes;
821 ULONG FileNameLength;
822 ULONG EaSize;
823 CHAR ShortNameLength;
824 WCHAR ShortName[12];
825 WCHAR FileName[ANYSIZE_ARRAY];
826 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
827 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
829 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
830 ULONG NextEntryOffset;
831 ULONG FileIndex;
832 LARGE_INTEGER CreationTime;
833 LARGE_INTEGER LastAccessTime;
834 LARGE_INTEGER LastWriteTime;
835 LARGE_INTEGER ChangeTime;
836 LARGE_INTEGER EndOfFile;
837 LARGE_INTEGER AllocationSize;
838 ULONG FileAttributes;
839 ULONG FileNameLength;
840 ULONG EaSize;
841 CHAR ShortNameLength;
842 WCHAR ShortName[12];
843 LARGE_INTEGER FileId;
844 WCHAR FileName[ANYSIZE_ARRAY];
845 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
847 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
848 ULONG NextEntryOffset;
849 ULONG FileIndex;
850 LARGE_INTEGER CreationTime;
851 LARGE_INTEGER LastAccessTime;
852 LARGE_INTEGER LastWriteTime;
853 LARGE_INTEGER ChangeTime;
854 LARGE_INTEGER EndOfFile;
855 LARGE_INTEGER AllocationSize;
856 ULONG FileAttributes;
857 ULONG FileNameLength;
858 LARGE_INTEGER FileId;
859 GUID LockingTransactionId;
860 ULONG TxInfoFlags;
861 WCHAR FileName[ANYSIZE_ARRAY];
862 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
864 typedef struct _FILE_BASIC_INFORMATION {
865 LARGE_INTEGER CreationTime;
866 LARGE_INTEGER LastAccessTime;
867 LARGE_INTEGER LastWriteTime;
868 LARGE_INTEGER ChangeTime;
869 ULONG FileAttributes;
870 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
872 typedef struct _FILE_STANDARD_INFORMATION {
873 LARGE_INTEGER AllocationSize;
874 LARGE_INTEGER EndOfFile;
875 ULONG NumberOfLinks;
876 BOOLEAN DeletePending;
877 BOOLEAN Directory;
878 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
880 typedef struct _FILE_INTERNAL_INFORMATION {
881 LARGE_INTEGER IndexNumber;
882 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
884 typedef struct _FILE_ID_128 {
885 UCHAR Identifier[16];
886 } FILE_ID_128, *PFILE_ID_128;
888 typedef struct _FILE_ID_INFORMATION {
889 ULONGLONG VolumeSerialNumber;
890 FILE_ID_128 FileId;
891 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
893 typedef struct _FILE_EA_INFORMATION {
894 ULONG EaSize;
895 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
897 typedef struct _FILE_ACCESS_INFORMATION {
898 ACCESS_MASK AccessFlags;
899 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
901 typedef struct _FILE_NAME_INFORMATION {
902 ULONG FileNameLength;
903 WCHAR FileName[1];
904 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
906 typedef struct _FILE_RENAME_INFORMATION {
907 BOOLEAN ReplaceIfExists;
908 HANDLE RootDirectory;
909 ULONG FileNameLength;
910 WCHAR FileName[1];
911 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
913 typedef struct _FILE_LINK_INFORMATION {
914 BOOLEAN ReplaceIfExists;
915 HANDLE RootDirectory;
916 ULONG FileNameLength;
917 WCHAR FileName[1];
918 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
920 typedef struct _FILE_NAMES_INFORMATION {
921 ULONG NextEntryOffset;
922 ULONG FileIndex;
923 ULONG FileNameLength;
924 WCHAR FileName[1];
925 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
927 typedef struct _FILE_DISPOSITION_INFORMATION {
928 BOOLEAN DoDeleteFile;
929 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
931 typedef struct _FILE_POSITION_INFORMATION {
932 LARGE_INTEGER CurrentByteOffset;
933 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
935 typedef struct _FILE_ALIGNMENT_INFORMATION {
936 ULONG AlignmentRequirement;
937 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
939 typedef struct _FILE_ALLOCATION_INFORMATION {
940 LARGE_INTEGER AllocationSize;
941 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
943 typedef struct _FILE_END_OF_FILE_INFORMATION {
944 LARGE_INTEGER EndOfFile;
945 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
947 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
948 LARGE_INTEGER CreationTime;
949 LARGE_INTEGER LastAccessTime;
950 LARGE_INTEGER LastWriteTime;
951 LARGE_INTEGER ChangeTime;
952 LARGE_INTEGER AllocationSize;
953 LARGE_INTEGER EndOfFile;
954 ULONG FileAttributes;
955 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
957 typedef struct _FILE_FULL_EA_INFORMATION {
958 ULONG NextEntryOffset;
959 UCHAR Flags;
960 UCHAR EaNameLength;
961 USHORT EaValueLength;
962 CHAR EaName[1];
963 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
965 typedef struct _FILE_MODE_INFORMATION {
966 ULONG Mode;
967 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
969 typedef struct _FILE_STREAM_INFORMATION
971 ULONG NextEntryOffset;
972 ULONG StreamNameLength;
973 LARGE_INTEGER StreamSize;
974 LARGE_INTEGER StreamAllocationSize;
975 WCHAR StreamName[1];
976 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
978 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
980 ULONG FileAttributes;
981 ULONG ReparseTag;
982 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
984 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
985 ULONG MaximumMessageSize;
986 ULONG MailslotQuota;
987 ULONG NextMessageSize;
988 ULONG MessagesAvailable;
989 LARGE_INTEGER ReadTimeout;
990 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
992 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
993 LARGE_INTEGER ReadTimeout;
994 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
996 typedef struct _FILE_PIPE_INFORMATION {
997 ULONG ReadMode;
998 ULONG CompletionMode;
999 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
1001 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
1002 ULONG NamedPipeType;
1003 ULONG NamedPipeConfiguration;
1004 ULONG MaximumInstances;
1005 ULONG CurrentInstances;
1006 ULONG InboundQuota;
1007 ULONG ReadDataAvailable;
1008 ULONG OutboundQuota;
1009 ULONG WriteQuotaAvailable;
1010 ULONG NamedPipeState;
1011 ULONG NamedPipeEnd;
1012 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
1014 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1015 #define FILE_PIPE_LISTENING_STATE 0x00000002
1016 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1017 #define FILE_PIPE_CLOSING_STATE 0x00000004
1019 typedef struct _FILE_OBJECTID_BUFFER
1021 BYTE ObjectId[16];
1022 union
1024 struct
1026 BYTE BirthVolumeId[16];
1027 BYTE BirthObjectId[16];
1028 BYTE DomainId[16];
1029 } DUMMYSTRUCTNAME;
1030 BYTE ExtendedInfo[48];
1031 } DUMMYUNIONNAME;
1032 } FILE_OBJECTID_BUFFER, *PFILE_OBJECTID_BUFFER;
1034 typedef struct _FILE_OBJECTID_INFORMATION {
1035 LONGLONG FileReference;
1036 UCHAR ObjectId[16];
1037 union {
1038 struct {
1039 UCHAR BirthVolumeId[16];
1040 UCHAR BirthObjectId[16];
1041 UCHAR DomainId[16];
1042 } DUMMYSTRUCTNAME;
1043 UCHAR ExtendedInfo[48];
1044 } DUMMYUNIONNAME;
1045 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
1047 typedef struct _FILE_QUOTA_INFORMATION {
1048 ULONG NextEntryOffset;
1049 ULONG SidLength;
1050 LARGE_INTEGER ChangeTime;
1051 LARGE_INTEGER QuotaUsed;
1052 LARGE_INTEGER QuotaThreshold;
1053 LARGE_INTEGER QuotaLimit;
1054 SID Sid;
1055 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
1057 typedef struct _FILE_REPARSE_POINT_INFORMATION {
1058 LONGLONG FileReference;
1059 ULONG Tag;
1060 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
1062 typedef struct _FILE_ALL_INFORMATION {
1063 FILE_BASIC_INFORMATION BasicInformation;
1064 FILE_STANDARD_INFORMATION StandardInformation;
1065 FILE_INTERNAL_INFORMATION InternalInformation;
1066 FILE_EA_INFORMATION EaInformation;
1067 FILE_ACCESS_INFORMATION AccessInformation;
1068 FILE_POSITION_INFORMATION PositionInformation;
1069 FILE_MODE_INFORMATION ModeInformation;
1070 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
1071 FILE_NAME_INFORMATION NameInformation;
1072 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
1074 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
1075 ULONG Flags;
1076 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
1078 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1079 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1080 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1082 typedef enum _FSINFOCLASS {
1083 FileFsVolumeInformation = 1,
1084 FileFsLabelInformation,
1085 FileFsSizeInformation,
1086 FileFsDeviceInformation,
1087 FileFsAttributeInformation,
1088 FileFsControlInformation,
1089 FileFsFullSizeInformation,
1090 FileFsObjectIdInformation,
1091 FileFsMaximumInformation
1092 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
1094 typedef enum _KEY_INFORMATION_CLASS {
1095 KeyBasicInformation,
1096 KeyNodeInformation,
1097 KeyFullInformation,
1098 KeyNameInformation,
1099 KeyCachedInformation,
1100 KeyFlagsInformation,
1101 KeyVirtualizationInformation,
1102 KeyHandleTagsInformation,
1103 MaxKeyInfoClass
1104 } KEY_INFORMATION_CLASS;
1106 typedef enum _KEY_VALUE_INFORMATION_CLASS {
1107 KeyValueBasicInformation,
1108 KeyValueFullInformation,
1109 KeyValuePartialInformation,
1110 KeyValueFullInformationAlign64,
1111 KeyValuePartialInformationAlign64
1112 } KEY_VALUE_INFORMATION_CLASS;
1114 typedef enum _OBJECT_INFORMATION_CLASS {
1115 ObjectBasicInformation,
1116 ObjectNameInformation,
1117 ObjectTypeInformation,
1118 ObjectAllInformation,
1119 ObjectDataInformation
1120 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
1122 typedef enum _PROCESSINFOCLASS {
1123 ProcessBasicInformation = 0,
1124 ProcessQuotaLimits = 1,
1125 ProcessIoCounters = 2,
1126 ProcessVmCounters = 3,
1127 ProcessTimes = 4,
1128 ProcessBasePriority = 5,
1129 ProcessRaisePriority = 6,
1130 ProcessDebugPort = 7,
1131 ProcessExceptionPort = 8,
1132 ProcessAccessToken = 9,
1133 ProcessLdtInformation = 10,
1134 ProcessLdtSize = 11,
1135 ProcessDefaultHardErrorMode = 12,
1136 ProcessIoPortHandlers = 13,
1137 ProcessPooledUsageAndLimits = 14,
1138 ProcessWorkingSetWatch = 15,
1139 ProcessUserModeIOPL = 16,
1140 ProcessEnableAlignmentFaultFixup = 17,
1141 ProcessPriorityClass = 18,
1142 ProcessWx86Information = 19,
1143 ProcessHandleCount = 20,
1144 ProcessAffinityMask = 21,
1145 ProcessPriorityBoost = 22,
1146 ProcessDeviceMap = 23,
1147 ProcessSessionInformation = 24,
1148 ProcessForegroundInformation = 25,
1149 ProcessWow64Information = 26,
1150 ProcessImageFileName = 27,
1151 ProcessLUIDDeviceMapsEnabled = 28,
1152 ProcessBreakOnTermination = 29,
1153 ProcessDebugObjectHandle = 30,
1154 ProcessDebugFlags = 31,
1155 ProcessHandleTracing = 32,
1156 ProcessExecuteFlags = 34,
1157 ProcessTlsInformation = 35,
1158 ProcessCookie = 36,
1159 ProcessImageInformation = 37,
1160 ProcessCycleTime = 38,
1161 ProcessPagePriority = 39,
1162 ProcessInstrumentationCallback = 40,
1163 ProcessThreadStackAllocation = 41,
1164 ProcessWorkingSetWatchEx = 42,
1165 ProcessImageFileNameWin32 = 43,
1166 MaxProcessInfoClass
1167 } PROCESSINFOCLASS, PROCESS_INFORMATION_CLASS;
1169 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1170 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1171 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1172 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1174 typedef enum _SECTION_INHERIT {
1175 ViewShare = 1,
1176 ViewUnmap = 2
1177 } SECTION_INHERIT;
1179 typedef enum _SYSTEM_INFORMATION_CLASS {
1180 SystemBasicInformation = 0,
1181 SystemCpuInformation = 1,
1182 SystemPerformanceInformation = 2,
1183 SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
1184 Unknown4,
1185 SystemProcessInformation = 5,
1186 Unknown6,
1187 Unknown7,
1188 SystemProcessorPerformanceInformation = 8,
1189 Unknown9,
1190 Unknown10,
1191 SystemModuleInformation = 11,
1192 Unknown12,
1193 Unknown13,
1194 Unknown14,
1195 Unknown15,
1196 SystemHandleInformation = 16,
1197 Unknown17,
1198 SystemPageFileInformation = 18,
1199 Unknown19,
1200 Unknown20,
1201 SystemCacheInformation = 21,
1202 Unknown22,
1203 SystemInterruptInformation = 23,
1204 SystemDpcBehaviourInformation = 24,
1205 SystemFullMemoryInformation = 25,
1206 SystemNotImplemented6 = 25,
1207 SystemLoadImage = 26,
1208 SystemUnloadImage = 27,
1209 SystemTimeAdjustmentInformation = 28,
1210 SystemTimeAdjustment = 28,
1211 SystemSummaryMemoryInformation = 29,
1212 SystemNotImplemented7 = 29,
1213 SystemNextEventIdInformation = 30,
1214 SystemNotImplemented8 = 30,
1215 SystemEventIdsInformation = 31,
1216 SystemCrashDumpInformation = 32,
1217 SystemExceptionInformation = 33,
1218 SystemCrashDumpStateInformation = 34,
1219 SystemKernelDebuggerInformation = 35,
1220 SystemContextSwitchInformation = 36,
1221 SystemRegistryQuotaInformation = 37,
1222 SystemCurrentTimeZoneInformation = 44,
1223 SystemTimeZoneInformation = 44,
1224 SystemLookasideInformation = 45,
1225 SystemSetTimeSlipEvent = 46,
1226 SystemCreateSession = 47,
1227 SystemDeleteSession = 48,
1228 SystemInvalidInfoClass4 = 49,
1229 SystemRangeStartInformation = 50,
1230 SystemVerifierInformation = 51,
1231 SystemAddVerifier = 52,
1232 SystemSessionProcessesInformation = 53,
1233 SystemLoadGdiDriverInSystemSpace = 54,
1234 SystemNumaProcessorMap = 55,
1235 SystemPrefetcherInformation = 56,
1236 SystemExtendedProcessInformation = 57,
1237 SystemRecommendedSharedDataAlignment = 58,
1238 SystemComPlusPackage = 59,
1239 SystemNumaAvailableMemory = 60,
1240 SystemProcessorPowerInformation = 61,
1241 SystemEmulationBasicInformation = 62,
1242 SystemEmulationProcessorInformation = 63,
1243 SystemExtendedHandleInformation = 64,
1244 SystemLostDelayedWriteInformation = 65,
1245 SystemBigPoolInformation = 66,
1246 SystemSessionPoolTagInformation = 67,
1247 SystemSessionMappedViewInformation = 68,
1248 SystemHotpatchInformation = 69,
1249 SystemObjectSecurityMode = 70,
1250 SystemWatchdogTimerHandler = 71,
1251 SystemWatchdogTimerInformation = 72,
1252 SystemLogicalProcessorInformation = 73,
1253 SystemWow64SharedInformation = 74,
1254 SystemRegisterFirmwareTableInformationHandler = 75,
1255 SystemFirmwareTableInformation = 76,
1256 SystemModuleInformationEx = 77,
1257 SystemVerifierTriageInformation = 78,
1258 SystemSuperfetchInformation = 79,
1259 SystemMemoryListInformation = 80,
1260 SystemFileCacheInformationEx = 81,
1261 SystemDynamicTimeZoneInformation = 102,
1262 SystemLogicalProcessorInformationEx = 107,
1263 SystemInformationClassMax
1264 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
1266 typedef enum _THREADINFOCLASS {
1267 ThreadBasicInformation = 0,
1268 ThreadTimes,
1269 ThreadPriority,
1270 ThreadBasePriority,
1271 ThreadAffinityMask,
1272 ThreadImpersonationToken,
1273 ThreadDescriptorTableEntry,
1274 ThreadEnableAlignmentFaultFixup,
1275 ThreadEventPair_Reusable,
1276 ThreadQuerySetWin32StartAddress,
1277 ThreadZeroTlsCell,
1278 ThreadPerformanceCount,
1279 ThreadAmILastThread,
1280 ThreadIdealProcessor,
1281 ThreadPriorityBoost,
1282 ThreadSetTlsArrayAddress,
1283 ThreadIsIoPending,
1284 ThreadHideFromDebugger,
1285 ThreadBreakOnTermination,
1286 ThreadSwitchLegacyState,
1287 ThreadIsTerminated,
1288 ThreadLastSystemCall,
1289 ThreadIoPriority,
1290 ThreadCycleTime,
1291 ThreadPagePriority,
1292 ThreadActualBasePriority,
1293 ThreadTebInformation,
1294 ThreadCSwitchMon,
1295 ThreadCSwitchPmu,
1296 ThreadWow64Context,
1297 ThreadGroupInformation,
1298 ThreadUmsInformation,
1299 ThreadCounterProfiling,
1300 ThreadIdealProcessorEx,
1301 ThreadSuspendCount = 35,
1302 ThreadDescription = 38,
1303 MaxThreadInfoClass
1304 } THREADINFOCLASS;
1306 typedef struct _THREAD_BASIC_INFORMATION
1308 NTSTATUS ExitStatus;
1309 PVOID TebBaseAddress;
1310 CLIENT_ID ClientId;
1311 ULONG_PTR AffinityMask;
1312 LONG Priority;
1313 LONG BasePriority;
1314 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1316 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1318 DWORD Selector;
1319 LDT_ENTRY Entry;
1320 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
1322 typedef struct _THREAD_DESCRIPTION_INFORMATION
1324 UNICODE_STRING Description;
1325 } THREAD_DESCRIPTION_INFORMATION, *PTHREAD_DESCRIPTION_INFORMATION;
1327 typedef struct _KERNEL_USER_TIMES {
1328 LARGE_INTEGER CreateTime;
1329 LARGE_INTEGER ExitTime;
1330 LARGE_INTEGER KernelTime;
1331 LARGE_INTEGER UserTime;
1332 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1334 typedef enum _WINSTATIONINFOCLASS {
1335 WinStationInformation = 8
1336 } WINSTATIONINFOCLASS;
1338 typedef enum _MEMORY_INFORMATION_CLASS {
1339 MemoryBasicInformation,
1340 MemoryWorkingSetList,
1341 MemorySectionName,
1342 MemoryBasicVlmInformation,
1343 MemoryWorkingSetExInformation
1344 } MEMORY_INFORMATION_CLASS;
1346 typedef struct _MEMORY_SECTION_NAME
1348 UNICODE_STRING SectionFileName;
1349 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1351 typedef union _MEMORY_WORKING_SET_EX_BLOCK {
1352 ULONG_PTR Flags;
1353 struct {
1354 ULONG_PTR Valid : 1;
1355 ULONG_PTR ShareCount : 3;
1356 ULONG_PTR Win32Protection : 11;
1357 ULONG_PTR Shared : 1;
1358 ULONG_PTR Node : 6;
1359 ULONG_PTR Locked : 1;
1360 ULONG_PTR LargePage : 1;
1361 } DUMMYSTRUCTNAME;
1362 } MEMORY_WORKING_SET_EX_BLOCK, *PMEMORY_WORKING_SET_EX_BLOCK;
1364 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION {
1365 PVOID VirtualAddress;
1366 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes;
1367 } MEMORY_WORKING_SET_EX_INFORMATION, *PMEMORY_WORKING_SET_EX_INFORMATION;
1369 typedef enum _MUTANT_INFORMATION_CLASS
1371 MutantBasicInformation
1372 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
1374 typedef struct _MUTANT_BASIC_INFORMATION {
1375 LONG CurrentCount;
1376 BOOLEAN OwnedByCaller;
1377 BOOLEAN AbandonedState;
1378 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
1380 typedef enum _TIMER_INFORMATION_CLASS
1382 TimerBasicInformation = 0
1383 } TIMER_INFORMATION_CLASS;
1385 typedef struct _TIMER_BASIC_INFORMATION
1387 LARGE_INTEGER RemainingTime;
1388 BOOLEAN TimerState;
1389 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
1392 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
1393 typedef enum
1395 INVALID_PATH = 0,
1396 UNC_PATH, /* "//foo" */
1397 ABSOLUTE_DRIVE_PATH, /* "c:/foo" */
1398 RELATIVE_DRIVE_PATH, /* "c:foo" */
1399 ABSOLUTE_PATH, /* "/foo" */
1400 RELATIVE_PATH, /* "foo" */
1401 DEVICE_PATH, /* "//./foo" */
1402 UNC_DOT_PATH /* "//." */
1403 } DOS_PATHNAME_TYPE;
1406 /***********************************************************************
1407 * Types and data structures
1410 /* This is used by NtQuerySystemInformation */
1411 typedef struct _SYSTEM_THREAD_INFORMATION
1412 { /* win32/win64 */
1413 LARGE_INTEGER KernelTime; /* 00/00 */
1414 LARGE_INTEGER UserTime; /* 08/08 */
1415 LARGE_INTEGER CreateTime; /* 10/10 */
1416 DWORD dwTickCount; /* 18/18 */
1417 LPVOID StartAddress; /* 1c/20 */
1418 CLIENT_ID ClientId; /* 20/28 */
1419 DWORD dwCurrentPriority; /* 28/38 */
1420 DWORD dwBasePriority; /* 2c/3c */
1421 DWORD dwContextSwitches; /* 30/40 */
1422 DWORD dwThreadState; /* 34/44 */
1423 DWORD dwWaitReason; /* 38/48 */
1424 DWORD dwUnknown; /* 3c/4c */
1425 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
1427 typedef struct _IO_STATUS_BLOCK {
1428 union {
1429 NTSTATUS Status;
1430 PVOID Pointer;
1431 } DUMMYUNIONNAME;
1433 ULONG_PTR Information;
1434 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
1436 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
1438 typedef struct _KEY_BASIC_INFORMATION {
1439 LARGE_INTEGER LastWriteTime;
1440 ULONG TitleIndex;
1441 ULONG NameLength;
1442 WCHAR Name[1];
1443 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
1445 typedef struct _KEY_NODE_INFORMATION
1447 LARGE_INTEGER LastWriteTime;
1448 ULONG TitleIndex;
1449 ULONG ClassOffset;
1450 ULONG ClassLength;
1451 ULONG NameLength;
1452 WCHAR Name[1];
1453 /* Class[1]; */
1454 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
1456 typedef struct _KEY_FULL_INFORMATION
1458 LARGE_INTEGER LastWriteTime;
1459 ULONG TitleIndex;
1460 ULONG ClassOffset;
1461 ULONG ClassLength;
1462 ULONG SubKeys;
1463 ULONG MaxNameLen;
1464 ULONG MaxClassLen;
1465 ULONG Values;
1466 ULONG MaxValueNameLen;
1467 ULONG MaxValueDataLen;
1468 WCHAR Class[1];
1469 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
1471 typedef struct _KEY_NAME_INFORMATION {
1472 ULONG NameLength;
1473 WCHAR Name[1];
1474 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
1476 typedef struct _KEY_CACHED_INFORMATION
1478 LARGE_INTEGER LastWriteTime;
1479 ULONG TitleIndex;
1480 ULONG SubKeys;
1481 ULONG MaxNameLen;
1482 ULONG Values;
1483 ULONG MaxValueNameLen;
1484 ULONG MaxValueDataLen;
1485 ULONG NameLength;
1486 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
1488 typedef struct _KEY_VALUE_ENTRY
1490 PUNICODE_STRING ValueName;
1491 ULONG DataLength;
1492 ULONG DataOffset;
1493 ULONG Type;
1494 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
1496 typedef struct _KEY_VALUE_BASIC_INFORMATION {
1497 ULONG TitleIndex;
1498 ULONG Type;
1499 ULONG NameLength;
1500 WCHAR Name[1];
1501 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
1503 typedef struct _KEY_VALUE_FULL_INFORMATION {
1504 ULONG TitleIndex;
1505 ULONG Type;
1506 ULONG DataOffset;
1507 ULONG DataLength;
1508 ULONG NameLength;
1509 WCHAR Name[1];
1510 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
1512 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
1513 ULONG TitleIndex;
1514 ULONG Type;
1515 ULONG DataLength;
1516 UCHAR Data[1];
1517 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
1519 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
1520 #define __OBJECT_ATTRIBUTES_DEFINED__
1521 typedef struct _OBJECT_ATTRIBUTES {
1522 ULONG Length;
1523 HANDLE RootDirectory;
1524 PUNICODE_STRING ObjectName;
1525 ULONG Attributes;
1526 PVOID SecurityDescriptor; /* type SECURITY_DESCRIPTOR */
1527 PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
1528 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
1529 #endif
1531 typedef struct _OBJECT_DATA_INFORMATION {
1532 BOOLEAN InheritHandle;
1533 BOOLEAN ProtectFromClose;
1534 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
1536 typedef struct _OBJECT_BASIC_INFORMATION {
1537 ULONG Attributes;
1538 ACCESS_MASK GrantedAccess;
1539 ULONG HandleCount;
1540 ULONG PointerCount;
1541 ULONG PagedPoolUsage;
1542 ULONG NonPagedPoolUsage;
1543 ULONG Reserved[3];
1544 ULONG NameInformationLength;
1545 ULONG TypeInformationLength;
1546 ULONG SecurityDescriptorLength;
1547 LARGE_INTEGER CreateTime;
1548 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
1550 typedef struct _OBJECT_NAME_INFORMATION {
1551 UNICODE_STRING Name;
1552 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
1554 typedef struct __OBJECT_TYPE_INFORMATION {
1555 UNICODE_STRING TypeName;
1556 ULONG Reserved [22];
1557 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
1559 typedef struct _PROCESS_BASIC_INFORMATION {
1560 #ifdef __WINESRC__
1561 DWORD_PTR ExitStatus;
1562 PPEB PebBaseAddress;
1563 DWORD_PTR AffinityMask;
1564 DWORD_PTR BasePriority;
1565 ULONG_PTR UniqueProcessId;
1566 ULONG_PTR InheritedFromUniqueProcessId;
1567 #else
1568 PVOID Reserved1;
1569 PPEB PebBaseAddress;
1570 PVOID Reserved2[2];
1571 ULONG_PTR UniqueProcessId;
1572 PVOID Reserved3;
1573 #endif
1574 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
1576 #define PROCESS_PRIOCLASS_IDLE 1
1577 #define PROCESS_PRIOCLASS_NORMAL 2
1578 #define PROCESS_PRIOCLASS_HIGH 3
1579 #define PROCESS_PRIOCLASS_REALTIME 4
1580 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
1581 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
1583 typedef struct _PROCESS_PRIORITY_CLASS {
1584 BOOLEAN Foreground;
1585 UCHAR PriorityClass;
1586 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
1588 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
1590 SIZE_T ReserveSize;
1591 SIZE_T ZeroBits;
1592 PVOID StackBase;
1593 } PROCESS_STACK_ALLOCATION_INFORMATION, *PPROCESS_STACK_ALLOCATION_INFORMATION;
1595 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
1597 ULONG PreferredNode;
1598 ULONG Reserved0;
1599 ULONG Reserved1;
1600 ULONG Reserved2;
1601 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo;
1602 } PROCESS_STACK_ALLOCATION_INFORMATION_EX, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX;
1604 typedef struct _RTL_HEAP_DEFINITION {
1605 ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
1607 ULONG Unknown[11];
1608 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
1610 typedef struct _RTL_RWLOCK {
1611 RTL_CRITICAL_SECTION rtlCS;
1613 HANDLE hSharedReleaseSemaphore;
1614 UINT uSharedWaiters;
1616 HANDLE hExclusiveReleaseSemaphore;
1617 UINT uExclusiveWaiters;
1619 INT iNumberActive;
1620 HANDLE hOwningThreadId;
1621 DWORD dwTimeoutBoost;
1622 PVOID pDebugInfo;
1623 } RTL_RWLOCK, *LPRTL_RWLOCK;
1625 /* System Information Class 0x00 */
1627 typedef struct _SYSTEM_BASIC_INFORMATION {
1628 #ifdef __WINESRC__
1629 DWORD unknown;
1630 ULONG KeMaximumIncrement;
1631 ULONG PageSize;
1632 ULONG MmNumberOfPhysicalPages;
1633 ULONG MmLowestPhysicalPage;
1634 ULONG MmHighestPhysicalPage;
1635 ULONG_PTR AllocationGranularity;
1636 PVOID LowestUserAddress;
1637 PVOID HighestUserAddress;
1638 ULONG_PTR ActiveProcessorsAffinityMask;
1639 BYTE NumberOfProcessors;
1640 #else
1641 BYTE Reserved1[24];
1642 PVOID Reserved2[4];
1643 CCHAR NumberOfProcessors;
1644 #endif
1645 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
1647 /* System Information Class 0x01 */
1649 typedef struct _SYSTEM_CPU_INFORMATION {
1650 WORD Architecture;
1651 WORD Level;
1652 WORD Revision; /* combination of CPU model and stepping */
1653 WORD Reserved; /* always zero */
1654 DWORD FeatureSet; /* see bit flags below */
1655 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
1657 /* definitions of bits in the Feature set for the x86 processors */
1658 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
1659 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
1660 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
1661 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
1662 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
1663 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
1664 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
1665 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
1666 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
1667 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
1668 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
1669 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
1670 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
1671 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
1672 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
1673 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
1674 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
1675 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
1676 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
1677 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
1678 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
1679 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
1680 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
1681 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
1683 /* FIXME: following values are made up, actual flags are unknown */
1684 #define CPU_FEATURE_SSSE3 0x00008000 /* SSSE3 instructions */
1685 #define CPU_FEATURE_SSE41 0x01000000 /* SSE41 instructions */
1686 #define CPU_FEATURE_SSE42 0x02000000 /* SSE42 instructions */
1687 #define CPU_FEATURE_AVX 0x40000000 /* AVX instructions */
1688 #define CPU_FEATURE_AVX2 0x80000000 /* AVX2 instructions */
1690 #define CPU_FEATURE_PAE 0x00200000
1691 #define CPU_FEATURE_DAZ 0x00400000
1692 #define CPU_FEATURE_ARM_VFP_32 0x00000001
1693 #define CPU_FEATURE_ARM_NEON 0x00000002
1694 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
1695 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
1697 /* System Information Class 0x02 */
1699 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
1700 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
1701 LARGE_INTEGER IdleTime;
1702 LARGE_INTEGER ReadTransferCount;
1703 LARGE_INTEGER WriteTransferCount;
1704 LARGE_INTEGER OtherTransferCount;
1705 ULONG ReadOperationCount;
1706 ULONG WriteOperationCount;
1707 ULONG OtherOperationCount;
1708 ULONG AvailablePages;
1709 ULONG TotalCommittedPages;
1710 ULONG TotalCommitLimit;
1711 ULONG PeakCommitment;
1712 ULONG PageFaults;
1713 ULONG WriteCopyFaults;
1714 ULONG TransitionFaults;
1715 ULONG Reserved1;
1716 ULONG DemandZeroFaults;
1717 ULONG PagesRead;
1718 ULONG PageReadIos;
1719 ULONG Reserved2[2];
1720 ULONG PagefilePagesWritten;
1721 ULONG PagefilePageWriteIos;
1722 ULONG MappedFilePagesWritten;
1723 ULONG MappedFilePageWriteIos;
1724 ULONG PagedPoolUsage;
1725 ULONG NonPagedPoolUsage;
1726 ULONG PagedPoolAllocs;
1727 ULONG PagedPoolFrees;
1728 ULONG NonPagedPoolAllocs;
1729 ULONG NonPagedPoolFrees;
1730 ULONG TotalFreeSystemPtes;
1731 ULONG SystemCodePage;
1732 ULONG TotalSystemDriverPages;
1733 ULONG TotalSystemCodePages;
1734 ULONG SmallNonPagedLookasideListAllocateHits;
1735 ULONG SmallPagedLookasideListAllocateHits;
1736 ULONG Reserved3;
1737 ULONG MmSystemCachePage;
1738 ULONG PagedPoolPage;
1739 ULONG SystemDriverPage;
1740 ULONG FastReadNoWait;
1741 ULONG FastReadWait;
1742 ULONG FastReadResourceMiss;
1743 ULONG FastReadNotPossible;
1744 ULONG FastMdlReadNoWait;
1745 ULONG FastMdlReadWait;
1746 ULONG FastMdlReadResourceMiss;
1747 ULONG FastMdlReadNotPossible;
1748 ULONG MapDataNoWait;
1749 ULONG MapDataWait;
1750 ULONG MapDataNoWaitMiss;
1751 ULONG MapDataWaitMiss;
1752 ULONG PinMappedDataCount;
1753 ULONG PinReadNoWait;
1754 ULONG PinReadWait;
1755 ULONG PinReadNoWaitMiss;
1756 ULONG PinReadWaitMiss;
1757 ULONG CopyReadNoWait;
1758 ULONG CopyReadWait;
1759 ULONG CopyReadNoWaitMiss;
1760 ULONG CopyReadWaitMiss;
1761 ULONG MdlReadNoWait;
1762 ULONG MdlReadWait;
1763 ULONG MdlReadNoWaitMiss;
1764 ULONG MdlReadWaitMiss;
1765 ULONG ReadAheadIos;
1766 ULONG LazyWriteIos;
1767 ULONG LazyWritePages;
1768 ULONG DataFlushes;
1769 ULONG DataPages;
1770 ULONG ContextSwitches;
1771 ULONG FirstLevelTbFills;
1772 ULONG SecondLevelTbFills;
1773 ULONG SystemCalls;
1774 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
1776 /* System Information Class 0x03 */
1778 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
1779 #ifdef __WINESRC__
1780 LARGE_INTEGER BootTime;
1781 LARGE_INTEGER SystemTime;
1782 LARGE_INTEGER TimeZoneBias;
1783 ULONG TimeZoneId;
1784 ULONG Reserved;
1785 ULONGLONG BootTimeBias;
1786 ULONGLONG SleepTimeBias;
1787 #else
1788 BYTE Reserved1[48];
1789 #endif
1790 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
1792 /* System Information Class 0x08 */
1794 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
1795 LARGE_INTEGER IdleTime;
1796 LARGE_INTEGER KernelTime;
1797 LARGE_INTEGER UserTime;
1798 LARGE_INTEGER Reserved1[2];
1799 ULONG Reserved2;
1800 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
1802 /* System Information Class 0x0b */
1804 typedef struct _SYSTEM_DRIVER_INFORMATION {
1805 PVOID pvAddress;
1806 DWORD dwUnknown1;
1807 DWORD dwUnknown2;
1808 DWORD dwEntryIndex;
1809 DWORD dwUnknown3;
1810 char szName[MAX_PATH + 1];
1811 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
1813 /* System Information Class 0x10 */
1815 typedef struct _SYSTEM_HANDLE_ENTRY {
1816 ULONG OwnerPid;
1817 BYTE ObjectType;
1818 BYTE HandleFlags;
1819 USHORT HandleValue;
1820 PVOID ObjectPointer;
1821 ULONG AccessMask;
1822 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
1824 typedef struct _SYSTEM_HANDLE_INFORMATION {
1825 ULONG Count;
1826 SYSTEM_HANDLE_ENTRY Handle[1];
1827 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
1829 /* System Information Class 0x15 */
1831 typedef struct _SYSTEM_CACHE_INFORMATION {
1832 ULONG CurrentSize;
1833 ULONG PeakSize;
1834 ULONG PageFaultCount;
1835 ULONG MinimumWorkingSet;
1836 ULONG MaximumWorkingSet;
1837 ULONG unused[4];
1838 #ifdef _WIN64
1839 ULONG unknown64[7];
1840 #endif
1841 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
1843 /* System Information Class 0x17 */
1845 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
1846 BYTE Reserved1[24];
1847 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
1849 typedef struct _SYSTEM_CONFIGURATION_INFO {
1850 union {
1851 ULONG OemId;
1852 struct {
1853 WORD ProcessorArchitecture;
1854 WORD Reserved;
1855 } tag1;
1856 } tag2;
1857 ULONG PageSize;
1858 PVOID MinimumApplicationAddress;
1859 PVOID MaximumApplicationAddress;
1860 ULONG ActiveProcessorMask;
1861 ULONG NumberOfProcessors;
1862 ULONG ProcessorType;
1863 ULONG AllocationGranularity;
1864 WORD ProcessorLevel;
1865 WORD ProcessorRevision;
1866 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
1868 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
1869 BYTE Reserved1[16];
1870 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
1872 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
1873 BYTE Reserved1[32];
1874 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
1876 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
1877 BOOLEAN DebuggerEnabled;
1878 BOOLEAN DebuggerNotPresent;
1879 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
1881 typedef struct _VM_COUNTERS
1883 SIZE_T PeakVirtualSize;
1884 SIZE_T VirtualSize;
1885 ULONG PageFaultCount;
1886 SIZE_T PeakWorkingSetSize;
1887 SIZE_T WorkingSetSize;
1888 SIZE_T QuotaPeakPagedPoolUsage;
1889 SIZE_T QuotaPagedPoolUsage;
1890 SIZE_T QuotaPeakNonPagedPoolUsage;
1891 SIZE_T QuotaNonPagedPoolUsage;
1892 SIZE_T PagefileUsage;
1893 SIZE_T PeakPagefileUsage;
1894 } VM_COUNTERS, *PVM_COUNTERS;
1896 typedef struct _VM_COUNTERS_EX
1898 SIZE_T PeakVirtualSize;
1899 SIZE_T VirtualSize;
1900 ULONG PageFaultCount;
1901 SIZE_T PeakWorkingSetSize;
1902 SIZE_T WorkingSetSize;
1903 SIZE_T QuotaPeakPagedPoolUsage;
1904 SIZE_T QuotaPagedPoolUsage;
1905 SIZE_T QuotaPeakNonPagedPoolUsage;
1906 SIZE_T QuotaNonPagedPoolUsage;
1907 SIZE_T PagefileUsage;
1908 SIZE_T PeakPagefileUsage;
1909 SIZE_T PrivateUsage;
1910 } VM_COUNTERS_EX, *PVM_COUNTERS_EX;
1912 typedef struct _SYSTEM_PROCESS_INFORMATION {
1913 #ifdef __WINESRC__ /* win32/win64 */
1914 ULONG NextEntryOffset; /* 00/00 */
1915 DWORD dwThreadCount; /* 04/04 */
1916 DWORD dwUnknown1[6]; /* 08/08 */
1917 LARGE_INTEGER CreationTime; /* 20/20 */
1918 LARGE_INTEGER UserTime; /* 28/28 */
1919 LARGE_INTEGER KernelTime; /* 30/30 */
1920 UNICODE_STRING ProcessName; /* 38/38 */
1921 DWORD dwBasePriority; /* 40/48 */
1922 HANDLE UniqueProcessId; /* 44/50 */
1923 HANDLE ParentProcessId; /* 48/58 */
1924 ULONG HandleCount; /* 4c/60 */
1925 ULONG SessionId; /* 50/64 */
1926 DWORD dwUnknown4; /* 54/68 */
1927 VM_COUNTERS_EX vmCounters; /* 58/70 */
1928 IO_COUNTERS ioCounters; /* 88/d0 */
1929 SYSTEM_THREAD_INFORMATION ti[1]; /* b8/100 */
1930 #else
1931 ULONG NextEntryOffset; /* 00/00 */
1932 BYTE Reserved1[52]; /* 04/04 */
1933 PVOID Reserved2[3]; /* 38/38 */
1934 HANDLE UniqueProcessId; /* 44/50 */
1935 PVOID Reserved3; /* 48/58 */
1936 ULONG HandleCount; /* 4c/60 */
1937 BYTE Reserved4[4]; /* 50/64 */
1938 PVOID Reserved5[11]; /* 54/68 */
1939 SIZE_T PeakPagefileUsage; /* 80/c0 */
1940 SIZE_T PrivatePageCount; /* 84/c8 */
1941 LARGE_INTEGER Reserved6[6]; /* 88/d0 */
1942 #endif
1943 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
1945 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
1946 ULONG RegistryQuotaAllowed;
1947 ULONG RegistryQuotaUsed;
1948 PVOID Reserved1;
1949 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
1951 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY {
1952 ULONG TimeAdjustment;
1953 ULONG TimeIncrement;
1954 BOOLEAN TimeAdjustmentDisabled;
1955 } SYSTEM_TIME_ADJUSTMENT_QUERY, *PSYSTEM_TIME_ADJUSTMENT_QUERY;
1957 typedef struct _SYSTEM_TIME_ADJUSTMENT {
1958 ULONG TimeAdjustment;
1959 BOOLEAN TimeAdjustmentDisabled;
1960 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
1962 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
1964 SystemFirmwareTable_Enumerate = 0,
1965 SystemFirmwareTable_Get = 1
1966 } SYSTEM_FIRMWARE_TABLE_ACTION, *PSYSTEM_FIRMWARE_TABLE_ACTION;
1968 /* System Information Class 0x4C */
1970 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
1972 ULONG ProviderSignature;
1973 SYSTEM_FIRMWARE_TABLE_ACTION Action;
1974 ULONG TableID;
1975 ULONG TableBufferLength;
1976 UCHAR TableBuffer[1];
1977 } SYSTEM_FIRMWARE_TABLE_INFORMATION, *PSYSTEM_FIRMWARE_TABLE_INFORMATION;
1979 typedef struct _TIME_FIELDS
1980 { CSHORT Year;
1981 CSHORT Month;
1982 CSHORT Day;
1983 CSHORT Hour;
1984 CSHORT Minute;
1985 CSHORT Second;
1986 CSHORT Milliseconds;
1987 CSHORT Weekday;
1988 } TIME_FIELDS, *PTIME_FIELDS;
1990 typedef struct _WINSTATIONINFORMATIONW {
1991 BYTE Reserved2[70];
1992 ULONG LogonId;
1993 BYTE Reserved3[1140];
1994 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
1996 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
1998 typedef struct _LDR_RESOURCE_INFO
2000 ULONG_PTR Type;
2001 ULONG_PTR Name;
2002 ULONG Language;
2003 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
2006 /* debug buffer definitions */
2008 typedef struct _DEBUG_BUFFER {
2009 HANDLE SectionHandle;
2010 PVOID SectionBase;
2011 PVOID RemoteSectionBase;
2012 ULONG SectionBaseDelta;
2013 HANDLE EventPairHandle;
2014 ULONG Unknown[2];
2015 HANDLE RemoteThreadHandle;
2016 ULONG InfoClassMask;
2017 ULONG SizeOfInfo;
2018 ULONG AllocatedSize;
2019 ULONG SectionSize;
2020 PVOID ModuleInformation;
2021 PVOID BackTraceInformation;
2022 PVOID HeapInformation;
2023 PVOID LockInformation;
2024 PVOID Reserved[8];
2025 } DEBUG_BUFFER, *PDEBUG_BUFFER;
2027 #define PDI_MODULES 0x01
2028 #define PDI_BACKTRACE 0x02
2029 #define PDI_HEAPS 0x04
2030 #define PDI_HEAP_TAGS 0x08
2031 #define PDI_HEAP_BLOCKS 0x10
2032 #define PDI_LOCKS 0x20
2034 typedef struct _DEBUG_MODULE_INFORMATION {
2035 ULONG Reserved[2];
2036 ULONG Base;
2037 ULONG Size;
2038 ULONG Flags;
2039 USHORT Index;
2040 USHORT Unknown;
2041 USHORT LoadCount;
2042 USHORT ModuleNameOffset;
2043 CHAR ImageName[256];
2044 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
2046 typedef struct _DEBUG_HEAP_INFORMATION {
2047 ULONG Base;
2048 ULONG Flags;
2049 USHORT Granularity;
2050 USHORT Unknown;
2051 ULONG Allocated;
2052 ULONG Committed;
2053 ULONG TagCount;
2054 ULONG BlockCount;
2055 ULONG Reserved[7];
2056 PVOID Tags;
2057 PVOID Blocks;
2058 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
2060 typedef struct _DEBUG_LOCK_INFORMATION {
2061 PVOID Address;
2062 USHORT Type;
2063 USHORT CreatorBackTraceIndex;
2064 ULONG OwnerThreadId;
2065 ULONG ActiveCount;
2066 ULONG ContentionCount;
2067 ULONG EntryCount;
2068 ULONG RecursionCount;
2069 ULONG NumberOfSharedWaiters;
2070 ULONG NumberOfExclusiveWaiters;
2071 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
2073 typedef struct _PORT_MESSAGE_HEADER {
2074 USHORT DataSize;
2075 USHORT MessageSize;
2076 USHORT MessageType;
2077 USHORT VirtualRangesOffset;
2078 CLIENT_ID ClientId;
2079 ULONG MessageId;
2080 ULONG SectionSize;
2081 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
2083 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
2085 /* Wine doesn't implement atom table as NT does:
2086 * - in NT, atom tables are user space tables, which ntdll directly accesses
2087 * - on Wine, (even local) atom tables are wineserver objects, hence a HANDLE
2089 typedef struct atom_table *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
2091 typedef enum _ATOM_INFORMATION_CLASS {
2092 AtomBasicInformation = 0,
2093 AtomTableInformation = 1,
2094 } ATOM_INFORMATION_CLASS;
2096 typedef struct _ATOM_BASIC_INFORMATION {
2097 USHORT ReferenceCount;
2098 USHORT Pinned;
2099 USHORT NameLength;
2100 WCHAR Name[1];
2101 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
2103 /* FIXME: names probably not correct */
2104 typedef struct _RTL_HANDLE
2106 struct _RTL_HANDLE * Next;
2107 } RTL_HANDLE;
2109 /* FIXME: names probably not correct */
2110 typedef struct _RTL_HANDLE_TABLE
2112 ULONG MaxHandleCount; /* 0x00 */
2113 ULONG HandleSize; /* 0x04 */
2114 ULONG Unused[2]; /* 0x08-0x0c */
2115 PVOID NextFree; /* 0x10 */
2116 PVOID FirstHandle; /* 0x14 */
2117 PVOID ReservedMemory; /* 0x18 */
2118 PVOID MaxHandle; /* 0x1c */
2119 } RTL_HANDLE_TABLE;
2121 /***********************************************************************
2122 * Defines
2125 /* flags for NtCreateFile and NtOpenFile */
2126 #define FILE_DIRECTORY_FILE 0x00000001
2127 #define FILE_WRITE_THROUGH 0x00000002
2128 #define FILE_SEQUENTIAL_ONLY 0x00000004
2129 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
2130 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
2131 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
2132 #define FILE_NON_DIRECTORY_FILE 0x00000040
2133 #define FILE_CREATE_TREE_CONNECTION 0x00000080
2134 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
2135 #define FILE_NO_EA_KNOWLEDGE 0x00000200
2136 #define FILE_OPEN_FOR_RECOVERY 0x00000400
2137 #define FILE_RANDOM_ACCESS 0x00000800
2138 #define FILE_DELETE_ON_CLOSE 0x00001000
2139 #define FILE_OPEN_BY_FILE_ID 0x00002000
2140 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
2141 #define FILE_NO_COMPRESSION 0x00008000
2142 #define FILE_RESERVE_OPFILTER 0x00100000
2143 #define FILE_OPEN_REPARSE_POINT 0x00200000
2144 #define FILE_OPEN_OFFLINE_FILE 0x00400000
2145 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
2147 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
2148 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
2150 /* status for NtCreateFile or NtOpenFile */
2151 #define FILE_SUPERSEDED 0
2152 #define FILE_OPENED 1
2153 #define FILE_CREATED 2
2154 #define FILE_OVERWRITTEN 3
2155 #define FILE_EXISTS 4
2156 #define FILE_DOES_NOT_EXIST 5
2158 /* disposition for NtCreateFile */
2159 #define FILE_SUPERSEDE 0
2160 #define FILE_OPEN 1
2161 #define FILE_CREATE 2
2162 #define FILE_OPEN_IF 3
2163 #define FILE_OVERWRITE 4
2164 #define FILE_OVERWRITE_IF 5
2165 #define FILE_MAXIMUM_DISPOSITION 5
2167 /* Characteristics of a File System */
2168 #define FILE_REMOVABLE_MEDIA 0x00000001
2169 #define FILE_READ_ONLY_DEVICE 0x00000002
2170 #define FILE_FLOPPY_DISKETTE 0x00000004
2171 #define FILE_WRITE_ONE_MEDIA 0x00000008
2172 #define FILE_REMOTE_DEVICE 0x00000010
2173 #define FILE_DEVICE_IS_MOUNTED 0x00000020
2174 #define FILE_VIRTUAL_VOLUME 0x00000040
2175 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
2176 #define FILE_DEVICE_SECURE_OPEN 0x00000100
2177 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
2178 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
2179 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
2180 #define FILE_CHARACTERISTIC_CSV 0x00010000
2181 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
2182 #define FILE_PORTABLE_DEVICE 0x00040000
2184 /* options for NtCreateNamedPipeFile */
2185 #define FILE_PIPE_INBOUND 0x00000000
2186 #define FILE_PIPE_OUTBOUND 0x00000001
2187 #define FILE_PIPE_FULL_DUPLEX 0x00000002
2189 /* options for pipe's type */
2190 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
2191 #define FILE_PIPE_TYPE_BYTE 0x00000000
2192 /* options for pipe's message mode */
2193 #define FILE_PIPE_MESSAGE_MODE 0x00000001
2194 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
2195 /* options for pipe's blocking mode */
2196 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
2197 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
2198 /* and client / server end */
2199 #define FILE_PIPE_SERVER_END 0x00000001
2200 #define FILE_PIPE_CLIENT_END 0x00000000
2202 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
2204 #define LOGONID_CURRENT ((ULONG)-1)
2206 #define OBJ_INHERIT 0x00000002
2207 #define OBJ_PERMANENT 0x00000010
2208 #define OBJ_EXCLUSIVE 0x00000020
2209 #define OBJ_CASE_INSENSITIVE 0x00000040
2210 #define OBJ_OPENIF 0x00000080
2211 #define OBJ_OPENLINK 0x00000100
2212 #define OBJ_KERNEL_HANDLE 0x00000200
2213 #define OBJ_VALID_ATTRIBUTES 0x000003F2
2215 #define SERVERNAME_CURRENT ((HANDLE)NULL)
2217 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
2218 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
2219 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
2220 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
2223 /* DbgPrintEx default levels */
2224 #define DPFLTR_ERROR_LEVEL 0
2225 #define DPFLTR_WARNING_LEVEL 1
2226 #define DPFLTR_TRACE_LEVEL 2
2227 #define DPFLTR_INFO_LEVEL 3
2228 #define DPFLTR_MASK 0x8000000
2230 /* Well-known LUID values */
2231 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
2232 #define SE_CREATE_TOKEN_PRIVILEGE 2
2233 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
2234 #define SE_LOCK_MEMORY_PRIVILEGE 4
2235 #define SE_INCREASE_QUOTA_PRIVILEGE 5
2236 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
2237 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
2238 #define SE_TCB_PRIVILEGE 7
2239 #define SE_SECURITY_PRIVILEGE 8
2240 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
2241 #define SE_LOAD_DRIVER_PRIVILEGE 10
2242 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
2243 #define SE_SYSTEMTIME_PRIVILEGE 12
2244 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
2245 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
2246 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
2247 #define SE_CREATE_PERMANENT_PRIVILEGE 16
2248 #define SE_BACKUP_PRIVILEGE 17
2249 #define SE_RESTORE_PRIVILEGE 18
2250 #define SE_SHUTDOWN_PRIVILEGE 19
2251 #define SE_DEBUG_PRIVILEGE 20
2252 #define SE_AUDIT_PRIVILEGE 21
2253 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
2254 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
2255 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
2256 #define SE_UNDOCK_PRIVILEGE 25
2257 #define SE_SYNC_AGENT_PRIVILEGE 26
2258 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
2259 #define SE_MANAGE_VOLUME_PRIVILEGE 28
2260 #define SE_IMPERSONATE_PRIVILEGE 29
2261 #define SE_CREATE_GLOBAL_PRIVILEGE 30
2262 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
2264 /* NtGlobalFlag bits */
2265 #define FLG_STOP_ON_EXCEPTION 0x00000001
2266 #define FLG_SHOW_LDR_SNAPS 0x00000002
2267 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
2268 #define FLG_STOP_ON_HUNG_GUI 0x00000008
2269 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
2270 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
2271 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
2272 #define FLG_HEAP_VALIDATE_ALL 0x00000080
2273 #define FLG_APPLICATION_VERIFIER 0x00000100
2274 #define FLG_POOL_ENABLE_TAGGING 0x00000400
2275 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
2276 #define FLG_USER_STACK_TRACE_DB 0x00001000
2277 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
2278 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
2279 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
2280 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
2281 #define FLG_ENABLE_CSRDEBUG 0x00020000
2282 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
2283 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
2284 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
2285 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
2286 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
2287 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
2288 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
2289 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
2290 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
2291 #define FLG_DISABLE_DBGPRINT 0x08000000
2292 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
2293 #define FLG_LDR_TOP_DOWN 0x20000000
2294 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
2295 #define FLG_DISABLE_PROTDLLS 0x80000000
2297 /* Rtl*Registry* functions structs and defines */
2298 #define RTL_REGISTRY_ABSOLUTE 0
2299 #define RTL_REGISTRY_SERVICES 1
2300 #define RTL_REGISTRY_CONTROL 2
2301 #define RTL_REGISTRY_WINDOWS_NT 3
2302 #define RTL_REGISTRY_DEVICEMAP 4
2303 #define RTL_REGISTRY_USER 5
2305 #define RTL_REGISTRY_HANDLE 0x40000000
2306 #define RTL_REGISTRY_OPTIONAL 0x80000000
2308 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
2309 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
2310 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
2311 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
2312 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
2313 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
2314 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
2315 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
2317 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
2319 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
2320 ULONG ValueType,
2321 PVOID ValueData,
2322 ULONG ValueLength,
2323 PVOID Context,
2324 PVOID EntryContext);
2326 typedef struct _RTL_QUERY_REGISTRY_TABLE
2328 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
2329 ULONG Flags;
2330 PWSTR Name;
2331 PVOID EntryContext;
2332 ULONG DefaultType;
2333 PVOID DefaultData;
2334 ULONG DefaultLength;
2335 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
2337 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
2339 PUNICODE_STRING ValueName;
2340 ULONG DataLength;
2341 ULONG DataOffset;
2342 ULONG Type;
2343 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
2345 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
2347 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
2349 typedef enum _EVENT_INFORMATION_CLASS {
2350 EventBasicInformation
2351 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
2353 typedef struct _EVENT_BASIC_INFORMATION {
2354 EVENT_TYPE EventType;
2355 LONG EventState;
2356 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
2358 typedef enum _SEMAPHORE_INFORMATION_CLASS {
2359 SemaphoreBasicInformation
2360 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
2362 typedef struct _SEMAPHORE_BASIC_INFORMATION {
2363 ULONG CurrentCount;
2364 ULONG MaximumCount;
2365 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
2367 typedef enum _SECTION_INFORMATION_CLASS
2369 SectionBasicInformation,
2370 SectionImageInformation,
2371 } SECTION_INFORMATION_CLASS;
2373 typedef struct _SECTION_BASIC_INFORMATION {
2374 PVOID BaseAddress;
2375 ULONG Attributes;
2376 LARGE_INTEGER Size;
2377 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
2379 typedef struct _SECTION_IMAGE_INFORMATION {
2380 PVOID TransferAddress;
2381 ULONG ZeroBits;
2382 SIZE_T MaximumStackSize;
2383 SIZE_T CommittedStackSize;
2384 ULONG SubSystemType;
2385 WORD SubsystemVersionLow;
2386 WORD SubsystemVersionHigh;
2387 ULONG GpValue;
2388 USHORT ImageCharacteristics;
2389 USHORT DllCharacteristics;
2390 USHORT Machine;
2391 BOOLEAN ImageContainsCode;
2392 union
2394 UCHAR ImageFlags;
2395 struct
2397 UCHAR ComPlusNativeReady : 1;
2398 UCHAR ComPlusILOnly : 1;
2399 UCHAR ImageDynamicallyRelocated : 1;
2400 UCHAR ImageMappedFlat : 1;
2401 UCHAR BaseBelow4gb : 1;
2402 UCHAR Reserved : 3;
2403 } DUMMYSTRUCTNAME;
2404 } DUMMYUNIONNAME;
2405 ULONG LoaderFlags;
2406 ULONG ImageFileSize;
2407 ULONG CheckSum;
2408 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
2410 typedef struct _LPC_SECTION_WRITE {
2411 ULONG Length;
2412 HANDLE SectionHandle;
2413 ULONG SectionOffset;
2414 ULONG ViewSize;
2415 PVOID ViewBase;
2416 PVOID TargetViewBase;
2417 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
2419 typedef struct _LPC_SECTION_READ {
2420 ULONG Length;
2421 ULONG ViewSize;
2422 PVOID ViewBase;
2423 } LPC_SECTION_READ, *PLPC_SECTION_READ;
2425 typedef struct _LPC_MESSAGE {
2426 USHORT DataSize;
2427 USHORT MessageSize;
2428 USHORT MessageType;
2429 USHORT VirtualRangesOffset;
2430 CLIENT_ID ClientId;
2431 ULONG_PTR MessageId;
2432 ULONG_PTR SectionSize;
2433 UCHAR Data[ANYSIZE_ARRAY];
2434 } LPC_MESSAGE, *PLPC_MESSAGE;
2436 typedef struct _RTL_USER_PROCESS_INFORMATION
2438 ULONG Length;
2439 HANDLE Process;
2440 HANDLE Thread;
2441 CLIENT_ID ClientId;
2442 SECTION_IMAGE_INFORMATION ImageInformation;
2443 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
2445 typedef enum _SHUTDOWN_ACTION {
2446 ShutdownNoReboot,
2447 ShutdownReboot,
2448 ShutdownPowerOff
2449 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
2451 typedef struct _COUNTED_REASON_CONTEXT
2453 ULONG Version;
2454 ULONG Flags;
2455 union
2457 struct
2459 UNICODE_STRING ResourceFileName;
2460 USHORT ResourceReasonId;
2461 ULONG StringCount;
2462 UNICODE_STRING *ReasonStrings;
2463 } DUMMYSTRUCTNAME;
2464 UNICODE_STRING SimpleString;
2465 } DUMMYUNIONNAME;
2466 } COUNTED_REASON_CONTEXT, *PCOUNTED_REASON_CONTEXT;
2468 typedef enum _KPROFILE_SOURCE {
2469 ProfileTime,
2470 ProfileAlignmentFixup,
2471 ProfileTotalIssues,
2472 ProfilePipelineDry,
2473 ProfileLoadInstructions,
2474 ProfilePipelineFrozen,
2475 ProfileBranchInstructions,
2476 ProfileTotalNonissues,
2477 ProfileDcacheMisses,
2478 ProfileIcacheMisses,
2479 ProfileCacheMisses,
2480 ProfileBranchMispredictions,
2481 ProfileStoreInstructions,
2482 ProfileFpInstructions,
2483 ProfileIntegerInstructions,
2484 Profile2Issue,
2485 Profile3Issue,
2486 Profile4Issue,
2487 ProfileSpecialInstructions,
2488 ProfileTotalCycles,
2489 ProfileIcacheIssues,
2490 ProfileDcacheAccesses,
2491 ProfileMemoryBarrierCycles,
2492 ProfileLoadLinkedIssues,
2493 ProfileMaximum
2494 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
2496 typedef struct _DIRECTORY_BASIC_INFORMATION {
2497 UNICODE_STRING ObjectName;
2498 UNICODE_STRING ObjectTypeName;
2499 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
2501 typedef struct _INITIAL_TEB {
2502 void *OldStackBase;
2503 void *OldStackLimit;
2504 void *StackBase;
2505 void *StackLimit;
2506 void *DeallocationStack;
2507 } INITIAL_TEB, *PINITIAL_TEB;
2509 typedef enum _PORT_INFORMATION_CLASS {
2510 PortNoInformation
2511 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
2513 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
2514 IoCompletionBasicInformation
2515 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
2517 typedef struct _FILE_COMPLETION_INFORMATION {
2518 HANDLE CompletionPort;
2519 ULONG_PTR CompletionKey;
2520 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
2522 #define IO_COMPLETION_QUERY_STATE 0x0001
2523 #define IO_COMPLETION_MODIFY_STATE 0x0002
2524 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
2526 typedef struct _FILE_IO_COMPLETION_INFORMATION {
2527 ULONG_PTR CompletionKey;
2528 ULONG_PTR CompletionValue;
2529 IO_STATUS_BLOCK IoStatusBlock;
2530 } FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
2532 typedef enum _HARDERROR_RESPONSE_OPTION {
2533 OptionAbortRetryIgnore,
2534 OptionOk,
2535 OptionOkCancel,
2536 OptionRetryCancel,
2537 OptionYesNo,
2538 OptionYesNoCancel,
2539 OptionShutdownSystem
2540 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
2542 typedef enum _HARDERROR_RESPONSE {
2543 ResponseReturnToCaller,
2544 ResponseNotHandled,
2545 ResponseAbort,
2546 ResponseCancel,
2547 ResponseIgnore,
2548 ResponseNo,
2549 ResponseOk,
2550 ResponseRetry,
2551 ResponseYes
2552 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
2554 typedef enum _SYSDBG_COMMAND {
2555 SysDbgQueryModuleInformation,
2556 SysDbgQueryTraceInformation,
2557 SysDbgSetTracepoint,
2558 SysDbgSetSpecialCall,
2559 SysDbgClearSpecialCalls,
2560 SysDbgQuerySpecialCalls,
2561 SysDbgBreakPoint,
2562 SysDbgQueryVersion,
2563 SysDbgReadVirtual,
2564 SysDbgWriteVirtual,
2565 SysDbgReadPhysical,
2566 SysDbgWritePhysical,
2567 SysDbgReadControlSpace,
2568 SysDbgWriteControlSpace,
2569 SysDbgReadIoSpace,
2570 SysDbgWriteIoSpace,
2571 SysDbgReadMsr,
2572 SysDbgWriteMsr,
2573 SysDbgReadBusData,
2574 SysDbgWriteBusData
2575 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
2577 typedef struct _CPTABLEINFO
2579 USHORT CodePage;
2580 USHORT MaximumCharacterSize;
2581 USHORT DefaultChar;
2582 USHORT UniDefaultChar;
2583 USHORT TransDefaultChar;
2584 USHORT TransUniDefaultChar;
2585 USHORT DBCSCodePage;
2586 UCHAR LeadByte[12];
2587 USHORT *MultiByteTable;
2588 void *WideCharTable;
2589 USHORT *DBCSRanges;
2590 USHORT *DBCSOffsets;
2591 } CPTABLEINFO, *PCPTABLEINFO;
2593 typedef struct _NLSTABLEINFO
2595 CPTABLEINFO OemTableInfo;
2596 CPTABLEINFO AnsiTableInfo;
2597 USHORT *UpperCaseTable;
2598 USHORT *LowerCaseTable;
2599 } NLSTABLEINFO, *PNLSTABLEINFO;
2601 /*************************************************************************
2602 * Loader structures
2604 * Those are not part of standard Winternl.h
2607 typedef struct _LDR_SERVICE_TAG_RECORD
2609 struct _LDR_SERVICE_TAG_RECORD *Next;
2610 ULONG ServiceTag;
2611 } LDR_SERVICE_TAG_RECORD, *PLDR_SERVICE_TAG_RECORD;
2613 typedef struct _LDRP_CSLIST
2615 SINGLE_LIST_ENTRY *Tail;
2616 } LDRP_CSLIST, *PLDRP_CSLIST;
2618 typedef enum _LDR_DDAG_STATE
2620 LdrModulesMerged = -5,
2621 LdrModulesInitError = -4,
2622 LdrModulesSnapError = -3,
2623 LdrModulesUnloaded = -2,
2624 LdrModulesUnloading = -1,
2625 LdrModulesPlaceHolder = 0,
2626 LdrModulesMapping = 1,
2627 LdrModulesMapped = 2,
2628 LdrModulesWaitingForDependencies = 3,
2629 LdrModulesSnapping = 4,
2630 LdrModulesSnapped = 5,
2631 LdrModulesCondensed = 6,
2632 LdrModulesReadyToInit = 7,
2633 LdrModulesInitializing = 8,
2634 LdrModulesReadyToRun = 9,
2635 } LDR_DDAG_STATE;
2637 typedef struct _LDR_DDAG_NODE
2639 LIST_ENTRY Modules;
2640 LDR_SERVICE_TAG_RECORD *ServiceTagList;
2641 ULONG LoadCount;
2642 ULONG ReferenceCount;
2643 ULONG DependencyCount;
2644 union
2646 LDRP_CSLIST Dependencies;
2647 SINGLE_LIST_ENTRY RemovalLink;
2649 LDRP_CSLIST IncomingDependencies;
2650 LDR_DDAG_STATE State;
2651 SINGLE_LIST_ENTRY CondenseLink;
2652 ULONG PreorderNumber;
2653 ULONG LowestLink;
2654 } LDR_DDAG_NODE, *PLDR_DDAG_NODE;
2656 typedef enum _LDR_DLL_LOAD_REASON
2658 LoadReasonStaticDependency,
2659 LoadReasonStaticForwarderDependency,
2660 LoadReasonDynamicForwarderDependency,
2661 LoadReasonDelayloadDependency,
2662 LoadReasonDynamicLoad,
2663 LoadReasonAsImageLoad,
2664 LoadReasonAsDataLoad,
2665 LoadReasonUnknown = -1
2666 } LDR_DLL_LOAD_REASON, *PLDR_DLL_LOAD_REASON;
2668 typedef struct _LDR_DATA_TABLE_ENTRY
2670 LIST_ENTRY InLoadOrderLinks;
2671 LIST_ENTRY InMemoryOrderLinks;
2672 LIST_ENTRY InInitializationOrderLinks;
2673 void* DllBase;
2674 void* EntryPoint;
2675 ULONG SizeOfImage;
2676 UNICODE_STRING FullDllName;
2677 UNICODE_STRING BaseDllName;
2678 ULONG Flags;
2679 SHORT LoadCount;
2680 SHORT TlsIndex;
2681 HANDLE SectionHandle;
2682 ULONG CheckSum;
2683 ULONG TimeDateStamp;
2684 HANDLE ActivationContext;
2685 void* Lock;
2686 LDR_DDAG_NODE* DdagNode;
2687 LIST_ENTRY NodeModuleLink;
2688 struct _LDRP_LOAD_CONTEXT *LoadContext;
2689 void* ParentDllBase;
2690 void* SwitchBackContext;
2691 RTL_BALANCED_NODE BaseAddressIndexNode;
2692 RTL_BALANCED_NODE MappingInfoIndexNode;
2693 ULONG_PTR OriginalBase;
2694 LARGE_INTEGER LoadTime;
2695 ULONG BaseNameHashValue;
2696 LDR_DLL_LOAD_REASON LoadReason;
2697 ULONG ImplicitPathOptions;
2698 ULONG ReferenceCount;
2699 } LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
2701 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
2703 ULONG Flags;
2704 const UNICODE_STRING *FullDllName;
2705 const UNICODE_STRING *BaseDllName;
2706 void *DllBase;
2707 ULONG SizeOfImage;
2708 } LDR_DLL_LOADED_NOTIFICATION_DATA, *PLDR_DLL_LOADED_NOTIFICATION_DATA;
2710 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
2712 ULONG Flags;
2713 const UNICODE_STRING *FullDllName;
2714 const UNICODE_STRING *BaseDllName;
2715 void *DllBase;
2716 ULONG SizeOfImage;
2717 } LDR_DLL_UNLOADED_NOTIFICATION_DATA, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
2719 typedef union _LDR_DLL_NOTIFICATION_DATA
2721 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
2722 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
2723 } LDR_DLL_NOTIFICATION_DATA, *PLDR_DLL_NOTIFICATION_DATA;
2725 typedef void (CALLBACK *PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA*, void*);
2727 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
2728 #define LDR_IMAGE_IS_DLL 0x00000004
2729 #define LDR_LOAD_IN_PROGRESS 0x00001000
2730 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
2731 #define LDR_NO_DLL_CALLS 0x00040000
2732 #define LDR_PROCESS_ATTACHED 0x00080000
2733 #define LDR_COR_IMAGE 0x00400000
2734 #define LDR_COR_ILONLY 0x01000000
2736 /* these ones is Wine specific */
2737 #define LDR_DONT_RESOLVE_REFS 0x40000000
2738 #define LDR_WINE_INTERNAL 0x80000000
2740 /* flag for LdrAddRefDll */
2741 #define LDR_ADDREF_DLL_PIN 0x00000001
2743 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
2744 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
2746 /* FIXME: to be checked */
2747 #define MAXIMUM_FILENAME_LENGTH 256
2749 typedef struct _SYSTEM_MODULE
2751 PVOID Section; /* 00/00 */
2752 PVOID MappedBaseAddress; /* 04/08 */
2753 PVOID ImageBaseAddress; /* 08/10 */
2754 ULONG ImageSize; /* 0c/18 */
2755 ULONG Flags; /* 10/1c */
2756 WORD LoadOrderIndex; /* 14/20 */
2757 WORD InitOrderIndex; /* 16/22 */
2758 WORD LoadCount; /* 18/24 */
2759 WORD NameOffset; /* 1a/26 */
2760 BYTE Name[MAXIMUM_FILENAME_LENGTH]; /* 1c/28 */
2761 } SYSTEM_MODULE, *PSYSTEM_MODULE;
2763 typedef struct _SYSTEM_MODULE_INFORMATION
2765 ULONG ModulesCount;
2766 SYSTEM_MODULE Modules[1]; /* FIXME: should be Modules[0] */
2767 } SYSTEM_MODULE_INFORMATION, *PSYSTEM_MODULE_INFORMATION;
2769 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
2770 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
2771 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
2772 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
2773 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
2774 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
2775 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
2776 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
2777 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
2778 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
2779 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
2781 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
2782 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
2783 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
2784 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
2785 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
2786 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
2788 typedef LONG (CALLBACK *PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS);
2790 typedef void (CALLBACK *PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE,void*,void*,IO_STATUS_BLOCK*,PTP_IO);
2792 #define PS_ATTRIBUTE_THREAD 0x00010000
2793 #define PS_ATTRIBUTE_INPUT 0x00020000
2794 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
2796 typedef enum _PS_ATTRIBUTE_NUM
2798 PsAttributeParentProcess,
2799 PsAttributeDebugPort,
2800 PsAttributeToken,
2801 PsAttributeClientId,
2802 PsAttributeTebAddress,
2803 PsAttributeImageName,
2804 PsAttributeImageInfo,
2805 PsAttributeMemoryReserve,
2806 PsAttributePriorityClass,
2807 PsAttributeErrorMode,
2808 PsAttributeStdHandleInfo,
2809 PsAttributeHandleList,
2810 PsAttributeGroupAffinity,
2811 PsAttributePreferredNode,
2812 PsAttributeIdealProcessor,
2813 PsAttributeUmsThread,
2814 PsAttributeMitigationOptions,
2815 PsAttributeProtectionLevel,
2816 PsAttributeSecureProcess,
2817 PsAttributeJobList,
2818 PsAttributeChildProcessPolicy,
2819 PsAttributeAllApplicationPackagesPolicy,
2820 PsAttributeWin32kFilter,
2821 PsAttributeSafeOpenPromptOriginClaim,
2822 PsAttributeBnoIsolation,
2823 PsAttributeDesktopAppPolicy,
2824 PsAttributeChpe,
2825 PsAttributeMax
2826 } PS_ATTRIBUTE_NUM;
2828 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2829 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2830 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2831 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
2832 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
2833 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
2834 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
2835 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
2836 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
2837 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
2838 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
2839 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
2840 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2841 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
2842 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2843 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2844 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2845 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
2846 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
2847 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
2848 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
2849 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
2850 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
2851 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
2852 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
2854 typedef struct _PS_ATTRIBUTE
2856 ULONG_PTR Attribute;
2857 SIZE_T Size;
2858 union
2860 ULONG_PTR Value;
2861 void *ValuePtr;
2863 SIZE_T *ReturnLength;
2864 } PS_ATTRIBUTE;
2866 typedef struct _PS_ATTRIBUTE_LIST
2868 SIZE_T TotalLength;
2869 PS_ATTRIBUTE Attributes[1];
2870 } PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
2872 typedef enum _PS_CREATE_STATE
2874 PsCreateInitialState,
2875 PsCreateFailOnFileOpen,
2876 PsCreateFailOnSectionCreate,
2877 PsCreateFailExeFormat,
2878 PsCreateFailMachineMismatch,
2879 PsCreateFailExeName,
2880 PsCreateSuccess,
2881 PsCreateMaximumStates
2882 } PS_CREATE_STATE;
2884 typedef struct _PS_CREATE_INFO
2886 SIZE_T Size;
2887 PS_CREATE_STATE State;
2888 union
2890 struct
2892 union
2894 ULONG InitFlags;
2895 struct
2897 UCHAR WriteOutputOnExit : 1;
2898 UCHAR DetectManifest : 1;
2899 UCHAR IFEOSkipDebugger : 1;
2900 UCHAR IFEODoNotPropagateKeyState : 1;
2901 UCHAR SpareBits1 : 4;
2902 UCHAR SpareBits2 : 8;
2903 USHORT ProhibitedImageCharacteristics : 16;
2906 ACCESS_MASK AdditionalFileAccess;
2907 } InitState;
2908 struct
2910 HANDLE FileHandle;
2911 } FailSection;
2912 struct
2914 USHORT DllCharacteristics;
2915 } ExeFormat;
2916 struct
2918 HANDLE IFEOKey;
2919 } ExeName;
2920 struct
2922 union
2924 ULONG OutputFlags;
2925 struct
2927 UCHAR ProtectedProcess : 1;
2928 UCHAR AddressSpaceOverride : 1;
2929 UCHAR DevOverrideEnabled : 1;
2930 UCHAR ManifestDetected : 1;
2931 UCHAR ProtectedProcessLight : 1;
2932 UCHAR SpareBits1 : 3;
2933 UCHAR SpareBits2 : 8;
2934 USHORT SpareBits3 : 16;
2937 HANDLE FileHandle;
2938 HANDLE SectionHandle;
2939 ULONGLONG UserProcessParametersNative;
2940 ULONG UserProcessParametersWow64;
2941 ULONG CurrentParameterFlags;
2942 ULONGLONG PebAddressNative;
2943 ULONG PebAddressWow64;
2944 ULONGLONG ManifestAddress;
2945 ULONG ManifestSize;
2946 } SuccessState;
2948 } PS_CREATE_INFO, *PPS_CREATE_INFO;
2950 /***********************************************************************
2951 * Function declarations
2954 NTSYSAPI void WINAPI DbgBreakPoint(void);
2955 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
2956 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
2957 NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE);
2958 NTSYSAPI void WINAPI DbgUiRemoteBreakin(void*);
2959 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
2960 NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
2961 NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING*,void**);
2962 NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG,HMODULE);
2963 NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
2964 NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY*);
2965 NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
2966 NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
2967 NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING*);
2968 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
2969 NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR,ULONG,PWSTR*,PWSTR*);
2970 NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
2971 NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
2972 NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
2973 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
2974 NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
2975 NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(SYSTEM_MODULE_INFORMATION*, ULONG, ULONG*);
2976 NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG,PLDR_DLL_NOTIFICATION_FUNCTION,void*,void**);
2977 NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void*);
2978 NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG);
2979 NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING*);
2980 NTSYSAPI void WINAPI LdrShutdownProcess(void);
2981 NTSYSAPI void WINAPI LdrShutdownThread(void);
2982 NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE);
2983 NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
2984 NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void*);
2985 NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
2986 NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
2987 NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
2988 NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
2989 NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
2990 NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
2991 NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE,PULONG);
2992 NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle);
2993 NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
2994 NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
2995 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG_PTR,SIZE_T*,ULONG,ULONG);
2996 NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
2997 NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
2998 NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
2999 NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
3000 NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
3001 NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
3002 NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE);
3003 NTSYSAPI NTSTATUS WINAPI NtClearPowerRequest(HANDLE,POWER_REQUEST_TYPE);
3004 NTSYSAPI NTSTATUS WINAPI NtClose(HANDLE);
3005 NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
3006 NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE);
3007 NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3008 NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT,BOOLEAN);
3009 NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3010 NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
3011 NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3012 NTSYSAPI NTSTATUS WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
3013 NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
3014 NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3015 NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3016 NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
3017 NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3018 NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3019 NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
3020 NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3021 NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
3022 NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
3023 NTSYSAPI NTSTATUS WINAPI NtCreatePowerRequest(HANDLE*,COUNTED_REASON_CONTEXT*);
3024 NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
3025 NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
3026 NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
3027 NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
3028 NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
3029 NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
3030 NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,HANDLE,PRTL_THREAD_START_ROUTINE,void*,ULONG,SIZE_T,SIZE_T,SIZE_T,PS_ATTRIBUTE_LIST*);
3031 NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
3032 NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
3033 NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE*,HANDLE*,ACCESS_MASK,ACCESS_MASK,OBJECT_ATTRIBUTES*,OBJECT_ATTRIBUTES*,ULONG,ULONG,RTL_USER_PROCESS_PARAMETERS*,PS_CREATE_INFO*,PS_ATTRIBUTE_LIST*);
3034 NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
3035 NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM);
3036 NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
3037 NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE);
3038 NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
3039 NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3040 NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING);
3041 NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
3042 NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
3043 NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
3044 NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3045 NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
3046 NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
3047 NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
3048 NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
3049 NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE);
3050 NTSYSAPI void WINAPI NtFlushProcessWriteBuffers(void);
3051 NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
3052 NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID);
3053 NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3054 NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3055 NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*);
3056 NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void);
3057 NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*);
3058 NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
3059 NTSYSAPI ULONG WINAPI NtGetTickCount(VOID);
3060 NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
3061 NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE);
3062 NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
3063 NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
3064 NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN);
3065 NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
3066 NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE,HANDLE);
3067 NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
3068 NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *);
3069 NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
3070 NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
3071 NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3072 NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE);
3073 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG_PTR,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
3074 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
3075 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3076 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3077 NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3078 NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3079 NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3080 NTSYSAPI NTSTATUS WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
3081 NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3082 NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3083 NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3084 NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3085 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
3086 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
3087 NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3088 NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3089 NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
3090 NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3091 NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
3092 NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
3093 NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3094 NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3095 NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3096 NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3097 NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
3098 NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
3099 NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
3100 NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
3101 NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
3102 NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
3103 NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
3104 NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
3105 NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE,LONG*);
3106 NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
3107 NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
3108 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
3109 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID*);
3110 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
3111 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
3112 NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
3113 NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3114 NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
3115 NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
3116 NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,LONG,FILE_INFORMATION_CLASS);
3117 NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
3118 NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3119 NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
3120 NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
3121 NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3122 NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID*);
3123 NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
3124 NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3125 NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
3126 NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
3127 NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3128 NTSYSAPI NTSTATUS WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
3129 NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
3130 NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
3131 NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
3132 NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
3133 NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3134 NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
3135 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
3136 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3137 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
3138 NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime(PLARGE_INTEGER);
3139 NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3140 NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
3141 NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
3142 NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
3143 NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
3144 NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
3145 NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
3146 NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
3147 NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
3148 NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
3149 NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
3150 NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
3151 NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE);
3152 NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
3153 NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE,PLONG);
3154 NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
3155 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
3156 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE,FILE_IO_COMPLETION_INFORMATION*,ULONG,ULONG*,LARGE_INTEGER*,BOOLEAN);
3157 NTSYSAPI NTSTATUS WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
3158 NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
3159 NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
3160 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
3161 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
3162 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
3163 NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
3164 NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
3165 NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE,LONG*);
3166 NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
3167 NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
3168 NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE);
3169 NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE,PULONG);
3170 NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE,HANDLE);
3171 NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3172 NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
3173 NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE);
3174 NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
3175 NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID);
3176 NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
3177 NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE,LONG*);
3178 NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE);
3179 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE);
3180 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID);
3181 NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
3182 NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
3183 NTSYSAPI NTSTATUS WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
3184 NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
3185 NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE,PROCESS_INFORMATION_CLASS,PVOID,ULONG);
3186 NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
3187 NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
3188 NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
3189 NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
3190 NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG,LDT_ENTRY,ULONG,LDT_ENTRY);
3191 NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE);
3192 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE);
3193 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID);
3194 NTSYSAPI NTSTATUS WINAPI NtSetPowerRequest(HANDLE,POWER_REQUEST_TYPE);
3195 NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
3196 NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
3197 NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
3198 NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
3199 NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
3200 NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE,EXECUTION_STATE*);
3201 NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
3202 NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
3203 NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
3204 NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
3205 NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
3206 NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
3207 NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE);
3208 NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE);
3209 NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE);
3210 NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE,PULONG);
3211 NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
3212 NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
3213 NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE,LONG);
3214 NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE,LONG);
3215 NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID);
3216 NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *);
3217 NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
3218 NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
3219 NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
3220 NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3221 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
3222 NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG,PVOID);
3223 NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
3224 NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
3225 NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
3226 NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE);
3227 NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE);
3228 NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
3229 NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
3230 NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
3231 NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
3232 NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void);
3234 NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PULONG);
3235 NTSYSAPI void WINAPI RtlAcquirePebLock(void);
3236 NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
3237 NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
3238 NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
3239 NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
3240 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
3241 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG,TEB*,HANDLE,ULONG_PTR*);
3242 NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
3243 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
3244 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
3245 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
3246 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
3247 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
3248 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
3249 NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
3250 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
3251 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
3252 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
3253 NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
3254 NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE);
3255 NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
3256 NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
3257 NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
3258 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
3259 NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3);
3260 NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
3261 NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
3262 NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
3263 NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
3264 NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *,const STRING *);
3265 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
3266 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
3267 NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
3268 NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
3269 NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
3270 NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
3271 NTSYSAPI NTSTATUS WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
3272 NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
3273 NTSYSAPI void WINAPI RtlClearAllBits(PRTL_BITMAP);
3274 NTSYSAPI void WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
3275 NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE*,const void*);
3276 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
3277 NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
3278 NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE,ULONG);
3279 NTSYSAPI LONG WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
3280 NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3281 NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
3282 NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
3283 NTSYSAPI DWORD WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
3284 NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
3285 NTSYSAPI void WINAPI RtlCopyLuid(PLUID,const LUID*);
3286 NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
3287 NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD,PSID,PSID);
3288 NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
3289 NTSYSAPI void WINAPI RtlCopyString(STRING*,const STRING*);
3290 NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
3291 NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
3292 NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
3293 NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
3294 NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
3295 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
3296 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,ULONG);
3297 NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
3298 NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE);
3299 NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
3300 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
3301 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
3302 NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
3303 NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE,SECURITY_DESCRIPTOR*,BOOLEAN,PVOID,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
3304 NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T,SIZE_T,ULONG,SIZE_T,SIZE_T,INITIAL_TEB*);
3305 NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO*,WCHAR*,DWORD,DWORD*,const char*,DWORD);
3306 NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
3307 NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID);
3308 NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
3309 NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
3310 NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL,DWORD);
3311 NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
3312 NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
3313 NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
3314 NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK);
3315 NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
3316 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
3317 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
3318 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
3319 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE);
3320 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
3321 NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
3322 NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR);
3323 NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
3324 NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE);
3325 NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
3326 NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
3327 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
3328 NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void);
3329 NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR);
3330 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
3331 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
3332 NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
3333 NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR);
3334 NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3335 NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK);
3336 NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
3337 NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
3338 NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID);
3339 NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
3340 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
3341 NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
3342 NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
3343 NTSYSAPI BOOLEAN WINAPI RtlEqualLuid(const LUID*,const LUID*);
3344 NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID,PSID);
3345 NTSYSAPI BOOL WINAPI RtlEqualSid(PSID,PSID);
3346 NTSYSAPI BOOLEAN WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
3347 NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3348 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
3349 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
3350 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR*,WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
3351 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
3352 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
3353 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
3354 NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
3355 NTSYSAPI ULONG WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
3356 NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
3357 NTSYSAPI ULONG WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
3358 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
3359 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
3360 NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG);
3361 NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
3362 NTSYSAPI ULONG WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
3363 NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
3364 NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG);
3365 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
3366 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
3367 NTSYSAPI ULONG WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
3368 NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
3369 NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
3370 NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
3371 NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
3372 NTSYSAPI NTSTATUS WINAPI RtlFormatMessage(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*);
3373 NTSYSAPI NTSTATUS WINAPI RtlFormatMessageEx(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*,ULONG);
3374 NTSYSAPI void WINAPI RtlFreeAnsiString(PANSI_STRING);
3375 NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
3376 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
3377 NTSYSAPI void WINAPI RtlFreeOemString(POEM_STRING);
3378 NTSYSAPI DWORD WINAPI RtlFreeSid(PSID);
3379 NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void);
3380 NTSYSAPI void WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
3381 NTSYSAPI void WINAPI RtlFreeUserStack(void*);
3382 NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
3383 NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE*);
3384 NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
3385 NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
3386 NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
3387 NTSYSAPI PEB * WINAPI RtlGetCurrentPeb(void);
3388 NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
3389 NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR,PWSTR*);
3390 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
3391 NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
3392 NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
3393 NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void);
3394 NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void);
3395 NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void);
3396 NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void);
3397 NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD);
3398 NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
3399 NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
3400 NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
3401 NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
3402 NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR*);
3403 NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
3404 NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void);
3405 NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void);
3406 NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
3407 NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
3408 NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
3409 NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
3410 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
3411 NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3412 NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3413 NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3414 NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
3415 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
3416 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
3417 NTSYSAPI PVOID WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
3418 NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
3419 NTSYSAPI void WINAPI RtlInitString(PSTRING,PCSZ);
3420 NTSYSAPI void WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
3421 NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
3422 NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT*,CPTABLEINFO*);
3423 NTSYSAPI void WINAPI RtlInitNlsTables(USHORT*,USHORT*,USHORT*,NLSTABLEINFO*);
3424 NTSYSAPI void WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
3425 NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
3426 NTSYSAPI void WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
3427 NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
3428 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
3429 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
3430 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
3431 NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
3432 NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK);
3433 NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
3434 NTSYSAPI BOOL WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
3435 NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
3436 NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
3437 NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
3438 NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE);
3439 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
3440 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
3441 NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR);
3442 NTSYSAPI BOOLEAN WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
3443 NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG,const WCHAR*,INT,BOOLEAN*);
3444 NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT);
3445 NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
3446 NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
3447 NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
3448 NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
3449 NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD);
3450 NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
3451 NTSYSAPI DWORD WINAPI RtlLengthSid(PSID);
3452 NTSYSAPI NTSTATUS WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
3453 NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR*,LCID*,ULONG);
3454 NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE);
3455 NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
3456 NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
3457 NTSYSAPI void WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
3458 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
3459 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,UINT);
3460 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
3461 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
3462 NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG,const WCHAR*,INT,WCHAR*,INT*);
3463 NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS);
3464 NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
3465 NTSYSAPI ULONG WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
3466 NTSYSAPI ULONG WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
3467 NTSYSAPI UINT WINAPI RtlOemStringToUnicodeSize(const STRING*);
3468 NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
3469 NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
3470 NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
3471 NTSYSAPI PVOID WINAPI RtlPcToFileHeader(PVOID,PVOID*);
3472 NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
3473 NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
3474 NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
3475 NTSYSAPI BOOLEAN WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3476 NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
3477 NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
3478 NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
3479 NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
3480 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR*,const WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
3481 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
3482 NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
3483 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
3484 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
3485 NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER*);
3486 NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER*);
3487 NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
3488 NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
3489 NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
3490 NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
3491 NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
3492 NTSYSAPI void WINAPI RtlRaiseException(PEXCEPTION_RECORD);
3493 NTSYSAPI void WINAPI RtlRaiseStatus(NTSTATUS);
3494 NTSYSAPI ULONG WINAPI RtlRandom(PULONG);
3495 NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T);
3496 NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
3497 NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE);
3498 NTSYSAPI void WINAPI RtlReleasePath(PWSTR);
3499 NTSYSAPI void WINAPI RtlReleasePebLock(void);
3500 NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK);
3501 NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
3502 NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
3503 NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
3504 NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO*);
3505 NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD);
3506 NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
3507 NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
3508 NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
3509 NTSYSAPI void WINAPI RtlSetAllBits(PRTL_BITMAP);
3510 NTSYSAPI void WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
3511 NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
3512 NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
3513 NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
3514 NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
3515 NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
3516 NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
3517 NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
3518 NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
3519 NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
3520 NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
3521 NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD);
3522 NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
3523 NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
3524 NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
3525 NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG);
3526 NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
3527 NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
3528 NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
3529 NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER);
3530 NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
3531 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
3532 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
3533 NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
3534 NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID,DWORD);
3535 NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID);
3536 NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
3537 NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
3538 NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
3539 NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
3540 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
3541 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
3542 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
3543 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
3544 NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
3545 NTSYSAPI NTSTATUS WINAPI RtlUTF8ToUnicodeN(WCHAR*,DWORD,DWORD*,const char*,DWORD);
3546 NTSYSAPI ULONGLONG __cdecl RtlUlonglongByteSwap(ULONGLONG);
3547 NTSYSAPI DWORD WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
3548 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
3549 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
3550 NTSYSAPI DWORD WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
3551 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
3552 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
3553 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3554 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
3555 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3556 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3557 NTSYSAPI ULONG WINAPI RtlUniform(PULONG);
3558 NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE);
3559 NTSYSAPI void WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
3560 #ifdef __x86_64__
3561 NTSYSAPI void WINAPI RtlUnwindEx(PVOID,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
3562 #elif defined(__ia64__)
3563 NTSYSAPI void WINAPI RtlUnwind2(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT);
3564 NTSYSAPI void WINAPI RtlUnwindEx(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
3565 #endif
3566 NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR);
3567 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
3568 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
3569 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
3570 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
3571 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
3572 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3573 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3574 NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
3575 NTSYSAPI CHAR WINAPI RtlUpperChar(CHAR);
3576 NTSYSAPI void WINAPI RtlUpperString(STRING *,const STRING *);
3577 NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE,void*);
3578 NTSYSAPI NTSTATUS WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
3579 NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
3580 NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL);
3581 NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID);
3582 NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
3583 NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
3584 NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *,const void *,SIZE_T,const LARGE_INTEGER *);
3585 NTSYSAPI void WINAPI RtlWakeAddressAll(const void *);
3586 NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *);
3587 NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
3588 NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
3589 NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE,PVOID);
3590 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
3591 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
3592 #ifdef __x86_64__
3593 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadContext(HANDLE, WOW64_CONTEXT *);
3594 NTSYSAPI NTSTATUS WINAPI RtlWow64SetThreadContext(HANDLE, const WOW64_CONTEXT *);
3595 #endif
3596 NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
3597 NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE);
3598 NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3599 NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
3600 NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
3601 NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
3602 NTSYSAPI NTSTATUS WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
3603 NTSYSAPI NTSTATUS WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
3605 NTSYSAPI int __cdecl _strnicmp(LPCSTR,LPCSTR,size_t);
3607 /* 32-bit only functions */
3609 #ifndef _WIN64
3610 NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG);
3611 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
3612 NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT,INT);
3613 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
3614 NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
3615 NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
3616 NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
3617 NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
3618 NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG*,LONGLONG,LONGLONG);
3619 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
3620 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
3621 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
3622 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG);
3623 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
3624 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
3625 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
3626 NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
3627 #endif
3629 /* Threadpool functions */
3631 NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
3632 NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **,HANDLE,PTP_IO_CALLBACK,void *,TP_CALLBACK_ENVIRON *);
3633 NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **,PVOID);
3634 NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3635 NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3636 NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3637 NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
3638 NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
3639 NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
3640 NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
3641 NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
3642 NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
3643 NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *);
3644 NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
3645 NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *);
3646 NTSYSAPI void WINAPI TpPostWork(TP_WORK *);
3647 NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
3648 NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
3649 NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
3650 NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *);
3651 NTSYSAPI void WINAPI TpReleasePool(TP_POOL *);
3652 NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *);
3653 NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *);
3654 NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *);
3655 NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
3656 NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
3657 NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
3658 NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
3659 NTSYSAPI void WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
3660 NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3661 NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *);
3662 NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *,BOOL);
3663 NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
3664 NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *,BOOL);
3665 NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *,BOOL);
3667 /* Wine internal functions */
3669 NTSYSAPI NTSTATUS CDECL wine_nt_to_unix_file_name( const UNICODE_STRING *nameW, char *nameA, SIZE_T *size,
3670 UINT disposition );
3671 NTSYSAPI NTSTATUS CDECL wine_unix_to_nt_file_name( const char *name, WCHAR *buffer, SIZE_T *size );
3674 /***********************************************************************
3675 * Inline functions
3678 #define InitializeObjectAttributes(p,n,a,r,s) \
3679 do { \
3680 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
3681 (p)->RootDirectory = r; \
3682 (p)->Attributes = a; \
3683 (p)->ObjectName = n; \
3684 (p)->SecurityDescriptor = s; \
3685 (p)->SecurityQualityOfService = NULL; \
3686 } while (0)
3688 #define NtCurrentProcess() ((HANDLE)-1)
3690 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
3691 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
3692 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3693 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3694 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
3695 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
3696 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
3698 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
3700 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
3701 lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
3702 return TRUE;
3703 return FALSE;
3706 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
3707 static inline USHORT RtlUshortByteSwap(USHORT s)
3709 return (s >> 8) | (s << 8);
3711 static inline ULONG RtlUlongByteSwap(ULONG i)
3713 #if defined(__i386__) && defined(__GNUC__)
3714 ULONG ret;
3715 __asm__("bswap %0" : "=r" (ret) : "0" (i) );
3716 return ret;
3717 #else
3718 return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
3719 #endif
3722 /* list manipulation macros */
3723 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
3724 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
3725 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
3726 #define IsListEmpty(le) ((le)->Flink == (le))
3727 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
3728 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
3730 PLIST_ENTRY f, b, e;
3732 e = le->Flink;
3733 f = le->Flink->Flink;
3734 b = le->Flink->Blink;
3735 f->Blink = b;
3736 b->Flink = f;
3738 if (e != le) e->Flink = e->Blink = NULL;
3739 return e;
3741 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
3743 PLIST_ENTRY f, b, e;
3745 e = le->Blink;
3746 f = le->Blink->Flink;
3747 b = le->Blink->Blink;
3748 f->Blink = b;
3749 b->Flink = f;
3751 if (e != le) e->Flink = e->Blink = NULL;
3752 return e;
3756 #ifdef __WINESRC__
3758 /* The thread information for 16-bit threads */
3759 /* NtCurrentTeb()->SubSystemTib points to this */
3760 typedef struct
3762 void *unknown; /* 00 unknown */
3763 UNICODE_STRING *exe_name; /* 04 exe module name */
3765 /* the following fields do not exist under Windows */
3766 UNICODE_STRING exe_str; /* exe name string pointed to by exe_name */
3767 CURDIR curdir; /* current directory */
3768 WCHAR curdir_buffer[MAX_PATH];
3769 } WIN16_SUBSYSTEM_TIB;
3771 #endif /* __WINESRC__ */
3773 #ifdef __cplusplus
3774 } /* extern "C" */
3775 #endif /* defined(__cplusplus) */
3777 #endif /* __WINE_WINTERNL_H */