2 * Internal NT APIs and data structures
4 * Copyright (C) the Wine project
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
29 #endif /* defined(__cplusplus) */
32 /**********************************************************************
33 * Fundamental types and data structures
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS
;
41 typedef const char *PCSZ
;
44 typedef CSHORT
*PCSHORT
;
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING
{
55 typedef STRING ANSI_STRING
;
56 typedef PSTRING PANSI_STRING
;
57 typedef const STRING
*PCANSI_STRING
;
59 typedef STRING OEM_STRING
;
60 typedef PSTRING POEM_STRING
;
61 typedef const STRING
*PCOEM_STRING
;
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING
{
66 USHORT Length
; /* bytes */
67 USHORT MaximumLength
; /* bytes */
69 } UNICODE_STRING
, *PUNICODE_STRING
;
72 typedef const UNICODE_STRING
*PCUNICODE_STRING
;
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
79 #ifdef WORDS_BIGENDIAN
86 } FILETIME
, *PFILETIME
, *LPFILETIME
;
87 #endif /* _FILETIME_ */
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
97 typedef struct _RTL_SYSTEM_TIME
{
106 } RTL_SYSTEM_TIME
, *PRTL_SYSTEM_TIME
;
108 typedef struct _RTL_TIME_ZONE_INFORMATION
{
110 WCHAR StandardName
[32];
111 RTL_SYSTEM_TIME StandardDate
;
113 WCHAR DaylightName
[32];
114 RTL_SYSTEM_TIME DaylightDate
;
116 } RTL_TIME_ZONE_INFORMATION
, *PRTL_TIME_ZONE_INFORMATION
;
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
121 WCHAR StandardName
[32];
122 RTL_SYSTEM_TIME StandardDate
;
124 WCHAR DaylightName
[32];
125 RTL_SYSTEM_TIME DaylightDate
;
127 WCHAR TimeZoneKeyName
[128];
128 BOOLEAN DynamicDaylightTimeDisabled
;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION
, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION
;
131 typedef struct _CLIENT_ID
133 HANDLE UniqueProcess
;
135 } CLIENT_ID
, *PCLIENT_ID
;
137 typedef struct _CURDIR
139 UNICODE_STRING DosPath
;
143 typedef struct RTL_DRIVE_LETTER_CURDIR
148 UNICODE_STRING DosPath
;
149 } RTL_DRIVE_LETTER_CURDIR
, *PRTL_DRIVE_LETTER_CURDIR
;
151 typedef struct _RTL_RELATIVE_NAME
153 UNICODE_STRING RelativeName
;
154 HANDLE ContainerDirectory
;
156 } RTL_RELATIVE_NAME
, *PRTL_RELATIVE_NAME
;
158 typedef struct tagRTL_BITMAP
{
159 ULONG SizeOfBitMap
; /* Number of bits in the bitmap */
160 PULONG Buffer
; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP
, *PRTL_BITMAP
;
163 typedef const RTL_BITMAP
*PCRTL_BITMAP
;
165 typedef struct tagRTL_BITMAP_RUN
{
166 ULONG StartingIndex
; /* Bit position at which run starts */
167 ULONG NumberOfBits
; /* Size of the run in bits */
168 } RTL_BITMAP_RUN
, *PRTL_BITMAP_RUN
;
170 typedef const RTL_BITMAP_RUN
*PCRTL_BITMAP_RUN
;
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
174 ULONG AllocationSize
;
178 HANDLE ConsoleHandle
;
183 CURDIR CurrentDirectory
;
184 UNICODE_STRING DllPath
;
185 UNICODE_STRING ImagePathName
;
186 UNICODE_STRING CommandLine
;
194 ULONG dwFillAttribute
;
197 UNICODE_STRING WindowTitle
;
198 UNICODE_STRING Desktop
;
199 UNICODE_STRING ShellInfo
;
200 UNICODE_STRING RuntimeInfo
;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory
[0x20];
202 } RTL_USER_PROCESS_PARAMETERS
, *PRTL_USER_PROCESS_PARAMETERS
;
204 /* value for Flags field (FIXME: not the correct name) */
205 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
207 typedef struct _PEB_LDR_DATA
212 LIST_ENTRY InLoadOrderModuleList
;
213 LIST_ENTRY InMemoryOrderModuleList
;
214 LIST_ENTRY InInitializationOrderModuleList
;
215 PVOID EntryInProgress
;
216 BOOLEAN ShutdownInProgress
;
217 HANDLE ShutdownThreadId
;
218 } PEB_LDR_DATA
, *PPEB_LDR_DATA
;
220 typedef struct _GDI_TEB_BATCH
227 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
229 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
*Previous
;
230 struct _ACTIVATION_CONTEXT
*ActivationContext
;
232 } RTL_ACTIVATION_CONTEXT_STACK_FRAME
, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME
;
234 typedef struct _ACTIVATION_CONTEXT_STACK
236 RTL_ACTIVATION_CONTEXT_STACK_FRAME
*ActiveFrame
;
237 LIST_ENTRY FrameListCache
;
239 ULONG NextCookieSequenceNumber
;
241 } ACTIVATION_CONTEXT_STACK
, *PACTIVATION_CONTEXT_STACK
;
243 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
246 const char *FrameName
;
247 } TEB_ACTIVE_FRAME_CONTEXT
, *PTEB_ACTIVE_FRAME_CONTEXT
;
249 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
251 TEB_ACTIVE_FRAME_CONTEXT BasicContext
;
252 const char *SourceLocation
;
253 } TEB_ACTIVE_FRAME_CONTEXT_EX
, *PTEB_ACTIVE_FRAME_CONTEXT_EX
;
255 typedef struct _TEB_ACTIVE_FRAME
258 struct _TEB_ACTIVE_FRAME
*Previous
;
259 TEB_ACTIVE_FRAME_CONTEXT
*Context
;
260 } TEB_ACTIVE_FRAME
, *PTEB_ACTIVE_FRAME
;
262 typedef struct _TEB_ACTIVE_FRAME_EX
264 TEB_ACTIVE_FRAME BasicFrame
;
265 void *ExtensionIdentifier
;
266 } TEB_ACTIVE_FRAME_EX
, *PTEB_ACTIVE_FRAME_EX
;
268 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
269 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
271 /***********************************************************************
276 BOOLEAN InheritedAddressSpace
; /* 000/000 */
277 BOOLEAN ReadImageFileExecOptions
; /* 001/001 */
278 BOOLEAN BeingDebugged
; /* 002/002 */
279 BOOLEAN SpareBool
; /* 003/003 */
280 HANDLE Mutant
; /* 004/008 */
281 HMODULE ImageBaseAddress
; /* 008/010 */
282 PPEB_LDR_DATA LdrData
; /* 00c/018 */
283 RTL_USER_PROCESS_PARAMETERS
*ProcessParameters
; /* 010/020 */
284 PVOID SubSystemData
; /* 014/028 */
285 HANDLE ProcessHeap
; /* 018/030 */
286 PRTL_CRITICAL_SECTION FastPebLock
; /* 01c/038 */
287 PVOID
/*PPEBLOCKROUTINE*/ FastPebLockRoutine
; /* 020/040 */
288 PVOID
/*PPEBLOCKROUTINE*/ FastPebUnlockRoutine
; /* 024/048 */
289 ULONG EnvironmentUpdateCount
; /* 028/050 */
290 PVOID KernelCallbackTable
; /* 02c/058 */
291 ULONG Reserved
[2]; /* 030/060 */
292 PVOID
/*PPEB_FREE_BLOCK*/ FreeList
; /* 038/068 */
293 ULONG TlsExpansionCounter
; /* 03c/070 */
294 PRTL_BITMAP TlsBitmap
; /* 040/078 */
295 ULONG TlsBitmapBits
[2]; /* 044/080 */
296 PVOID ReadOnlySharedMemoryBase
; /* 04c/088 */
297 PVOID ReadOnlySharedMemoryHeap
; /* 050/090 */
298 PVOID
*ReadOnlyStaticServerData
; /* 054/098 */
299 PVOID AnsiCodePageData
; /* 058/0a0 */
300 PVOID OemCodePageData
; /* 05c/0a8 */
301 PVOID UnicodeCaseTableData
; /* 060/0b0 */
302 ULONG NumberOfProcessors
; /* 064/0b8 */
303 ULONG NtGlobalFlag
; /* 068/0bc */
304 LARGE_INTEGER CriticalSectionTimeout
; /* 070/0c0 */
305 SIZE_T HeapSegmentReserve
; /* 078/0c8 */
306 SIZE_T HeapSegmentCommit
; /* 07c/0d0 */
307 SIZE_T HeapDeCommitTotalFreeThreshold
; /* 080/0d8 */
308 SIZE_T HeapDeCommitFreeBlockThreshold
; /* 084/0e0 */
309 ULONG NumberOfHeaps
; /* 088/0e8 */
310 ULONG MaximumNumberOfHeaps
; /* 08c/0ec */
311 PVOID
*ProcessHeaps
; /* 090/0f0 */
312 PVOID GdiSharedHandleTable
; /* 094/0f8 */
313 PVOID ProcessStarterHelper
; /* 098/100 */
314 PVOID GdiDCAttributeList
; /* 09c/108 */
315 PVOID LoaderLock
; /* 0a0/110 */
316 ULONG OSMajorVersion
; /* 0a4/118 */
317 ULONG OSMinorVersion
; /* 0a8/11c */
318 ULONG OSBuildNumber
; /* 0ac/120 */
319 ULONG OSPlatformId
; /* 0b0/124 */
320 ULONG ImageSubSystem
; /* 0b4/128 */
321 ULONG ImageSubSystemMajorVersion
; /* 0b8/12c */
322 ULONG ImageSubSystemMinorVersion
; /* 0bc/130 */
323 ULONG ImageProcessAffinityMask
; /* 0c0/134 */
324 HANDLE GdiHandleBuffer
[28]; /* 0c4/138 */
325 ULONG unknown
[6]; /* 134/218 */
326 PVOID PostProcessInitRoutine
; /* 14c/230 */
327 PRTL_BITMAP TlsExpansionBitmap
; /* 150/238 */
328 ULONG TlsExpansionBitmapBits
[32]; /* 154/240 */
329 ULONG SessionId
; /* 1d4/2c0 */
330 ULARGE_INTEGER AppCompatFlags
; /* 1d8/2c8 */
331 ULARGE_INTEGER AppCompatFlagsUser
; /* 1e0/2d0 */
332 PVOID ShimData
; /* 1e8/2d8 */
333 PVOID AppCompatInfo
; /* 1ec/2e0 */
334 UNICODE_STRING CSDVersion
; /* 1f0/2e8 */
335 PVOID ActivationContextData
; /* 1f8/2f8 */
336 PVOID ProcessAssemblyStorageMap
; /* 1fc/300 */
337 PVOID SystemDefaultActivationData
; /* 200/308 */
338 PVOID SystemAssemblyStorageMap
; /* 204/310 */
339 SIZE_T MinimumStackCommit
; /* 208/318 */
340 PVOID
*FlsCallback
; /* 20c/320 */
341 LIST_ENTRY FlsListHead
; /* 210/328 */
342 PRTL_BITMAP FlsBitmap
; /* 218/338 */
343 ULONG FlsBitmapBits
[4]; /* 21c/340 */
344 ULONG FlsHighIndex
; /* 22c/350 */
345 PVOID WerRegistrationData
; /* 230/358 */
346 PVOID WerShipAssertPtr
; /* 234/360 */
347 PVOID pUnused
; /* 238/368 */
348 PVOID pImageHeaderHash
; /* 23c/370 */
349 ULONG TracingFlags
; /* 240/378 */
350 ULONGLONG CsrServerReadOnlySharedMemoryBase
; /* 248/380 */
351 ULONG TppWorkerpListLock
; /* 250/388 */
352 LIST_ENTRY TppWorkerpList
; /* 254/390 */
353 PVOID WaitOnAddressHashTable
[0x80]; /* 25c/3a0 */
354 PVOID TelemetryCoverageHeader
; /* 45c/7a0 */
355 ULONG CloudFileFlags
; /* 460/7a8 */
359 /***********************************************************************
364 NT_TIB Tib
; /* 000/0000 */
365 PVOID EnvironmentPointer
; /* 01c/0038 */
366 CLIENT_ID ClientId
; /* 020/0040 */
367 PVOID ActiveRpcHandle
; /* 028/0050 */
368 PVOID ThreadLocalStoragePointer
; /* 02c/0058 */
369 PPEB Peb
; /* 030/0060 */
370 ULONG LastErrorValue
; /* 034/0068 */
371 ULONG CountOfOwnedCriticalSections
; /* 038/006c */
372 PVOID CsrClientThread
; /* 03c/0070 */
373 PVOID Win32ThreadInfo
; /* 040/0078 */
374 ULONG User32Reserved
[26]; /* 044/0080 */
375 ULONG UserReserved
[5]; /* 0ac/00e8 */
376 PVOID WOW32Reserved
; /* 0c0/0100 */
377 ULONG CurrentLocale
; /* 0c4/0108 */
378 ULONG FpSoftwareStatusRegister
; /* 0c8/010c */
379 PVOID ReservedForDebuggerInstrumentation
[16]; /* 0cc/0110 */
381 PVOID SystemReserved1
[30]; /* /0190 */
383 PVOID SystemReserved1
[26]; /* 10c/ used for krnl386 private data in Wine */
385 char PlaceholderCompatibilityMode
; /* 174/0280 */
386 char PlaceholderReserved
[11]; /* 175/0281 */
387 DWORD ProxiedProcessId
; /* 180/028c */
388 ACTIVATION_CONTEXT_STACK ActivationContextStack
; /* 184/0290 */
389 UCHAR WorkingOnBehalfOfTicket
[8]; /* 19c/02b8 */
390 LONG ExceptionCode
; /* 1a4/02c0 */
391 ACTIVATION_CONTEXT_STACK
*ActivationContextStackPointer
; /* 1a8/02c8 */
392 ULONG_PTR InstrumentationCallbackSp
; /* 1ac/02d0 */
393 ULONG_PTR InstrumentationCallbackPreviousPc
; /* 1b0/02d8 */
394 ULONG_PTR InstrumentationCallbackPreviousSp
; /* 1b4/02e0 */
396 ULONG TxFsContext
; /* /02e8 */
397 BOOLEAN InstrumentationCallbackDisabled
; /* /02ec */
399 BOOLEAN InstrumentationCallbackDisabled
; /* 1b8/ */
400 BYTE SpareBytes1
[23]; /* 1b9/ */
401 ULONG TxFsContext
; /* 1d0/ */
403 GDI_TEB_BATCH GdiTebBatch
; /* 1d4/02f0 used for ntdll private data in Wine */
404 CLIENT_ID RealClientId
; /* 6b4/07d8 */
405 HANDLE GdiCachedProcessHandle
; /* 6bc/07e8 */
406 ULONG GdiClientPID
; /* 6c0/07f0 */
407 ULONG GdiClientTID
; /* 6c4/07f4 */
408 PVOID GdiThreadLocaleInfo
; /* 6c8/07f8 */
409 ULONG_PTR Win32ClientInfo
[62]; /* 6cc/0800 used for user32 private data in Wine */
410 PVOID glDispatchTable
[233]; /* 7c4/09f0 */
411 PVOID glReserved1
[29]; /* b68/1138 */
412 PVOID glReserved2
; /* bdc/1220 */
413 PVOID glSectionInfo
; /* be0/1228 */
414 PVOID glSection
; /* be4/1230 */
415 PVOID glTable
; /* be8/1238 */
416 PVOID glCurrentRC
; /* bec/1240 */
417 PVOID glContext
; /* bf0/1248 */
418 ULONG LastStatusValue
; /* bf4/1250 */
419 UNICODE_STRING StaticUnicodeString
; /* bf8/1258 */
420 WCHAR StaticUnicodeBuffer
[261]; /* c00/1268 */
421 PVOID DeallocationStack
; /* e0c/1478 */
422 PVOID TlsSlots
[64]; /* e10/1480 */
423 LIST_ENTRY TlsLinks
; /* f10/1680 */
424 PVOID Vdm
; /* f18/1690 */
425 PVOID ReservedForNtRpc
; /* f1c/1698 */
426 PVOID DbgSsReserved
[2]; /* f20/16a0 */
427 ULONG HardErrorDisabled
; /* f28/16b0 */
428 PVOID Instrumentation
[16]; /* f2c/16b8 */
429 PVOID WinSockData
; /* f6c/1738 */
430 ULONG GdiBatchCount
; /* f70/1740 */
431 ULONG Spare2
; /* f74/1744 */
432 ULONG GuaranteedStackBytes
; /* f78/1748 */
433 PVOID ReservedForPerf
; /* f7c/1750 */
434 PVOID ReservedForOle
; /* f80/1758 */
435 ULONG WaitingOnLoaderLock
; /* f84/1760 */
436 PVOID Reserved5
[3]; /* f88/1768 */
437 PVOID
*TlsExpansionSlots
; /* f94/1780 */
439 PVOID DeallocationBStore
; /* /1788 */
440 PVOID BStoreLimit
; /* /1790 */
442 ULONG ImpersonationLocale
; /* f98/1798 */
443 ULONG IsImpersonating
; /* f9c/179c */
444 PVOID NlsCache
; /* fa0/17a0 */
445 PVOID ShimData
; /* fa4/17a8 */
446 ULONG HeapVirtualAffinity
; /* fa8/17b0 */
447 PVOID CurrentTransactionHandle
; /* fac/17b8 */
448 TEB_ACTIVE_FRAME
*ActiveFrame
; /* fb0/17c0 */
449 PVOID
*FlsSlots
; /* fb4/17c8 */
450 PVOID PreferredLanguages
; /* fb8/17d0 */
451 PVOID UserPrefLanguages
; /* fbc/17d8 */
452 PVOID MergedPrefLanguages
; /* fc0/17e0 */
453 ULONG MuiImpersonation
; /* fc4/17e8 */
454 USHORT CrossTebFlags
; /* fc8/17ec */
455 USHORT SameTebFlags
; /* fca/17ee */
456 PVOID TxnScopeEnterCallback
; /* fcc/17f0 */
457 PVOID TxnScopeExitCallback
; /* fd0/17f8 */
458 PVOID TxnScopeContext
; /* fd4/1800 */
459 ULONG LockCount
; /* fd8/1808 */
460 LONG WowTebOffset
; /* fdc/180c */
461 PVOID ResourceRetValue
; /* fe0/1810 */
462 PVOID ReservedForWdf
; /* fe4/1818 */
463 ULONGLONG ReservedForCrt
; /* fe8/1820 */
464 GUID EffectiveContainerId
; /* ff0/1828 */
468 /***********************************************************************
469 * The 64-bit version of the PEB and TEB for WoW64
473 typedef struct _NT_TIB64
475 ULONG64 ExceptionList
; /* 0000 */
476 ULONG64 StackBase
; /* 0008 */
477 ULONG64 StackLimit
; /* 0010 */
478 ULONG64 SubSystemTib
; /* 0018 */
479 ULONG64 FiberData
; /* 0020 */
480 ULONG64 ArbitraryUserPointer
; /* 0028 */
481 ULONG64 Self
; /* 0030 */
484 typedef struct _CLIENT_ID64
486 ULONG64 UniqueProcess
;
487 ULONG64 UniqueThread
;
490 typedef struct _LIST_ENTRY64
496 typedef struct _UNICODE_STRING64
499 USHORT MaximumLength
;
503 typedef struct _ACTIVATION_CONTEXT_STACK64
506 LIST_ENTRY64 FrameListCache
;
508 ULONG NextCookieSequenceNumber
;
510 } ACTIVATION_CONTEXT_STACK64
;
512 typedef struct _PEB64
514 BOOLEAN InheritedAddressSpace
; /* 0000 */
515 BOOLEAN ReadImageFileExecOptions
; /* 0001 */
516 BOOLEAN BeingDebugged
; /* 0002 */
517 BOOLEAN SpareBool
; /* 0003 */
518 ULONG64 Mutant
; /* 0008 */
519 ULONG64 ImageBaseAddress
; /* 0010 */
520 ULONG64 LdrData
; /* 0018 */
521 ULONG64 ProcessParameters
; /* 0020 */
522 ULONG64 SubSystemData
; /* 0028 */
523 ULONG64 ProcessHeap
; /* 0030 */
524 ULONG64 FastPebLock
; /* 0038 */
525 ULONG64 FastPebLockRoutine
; /* 0040 */
526 ULONG64 FastPebUnlockRoutine
; /* 0048 */
527 ULONG EnvironmentUpdateCount
; /* 0050 */
528 ULONG64 KernelCallbackTable
; /* 0058 */
529 ULONG Reserved
[2]; /* 0060 */
530 ULONG64 FreeList
; /* 0068 */
531 ULONG TlsExpansionCounter
; /* 0070 */
532 ULONG64 TlsBitmap
; /* 0078 */
533 ULONG TlsBitmapBits
[2]; /* 0080 */
534 ULONG64 ReadOnlySharedMemoryBase
; /* 0088 */
535 ULONG64 ReadOnlySharedMemoryHeap
; /* 0090 */
536 ULONG64 ReadOnlyStaticServerData
; /* 0098 */
537 ULONG64 AnsiCodePageData
; /* 00a0 */
538 ULONG64 OemCodePageData
; /* 00a8 */
539 ULONG64 UnicodeCaseTableData
; /* 00b0 */
540 ULONG NumberOfProcessors
; /* 00b8 */
541 ULONG NtGlobalFlag
; /* 00bc */
542 LARGE_INTEGER CriticalSectionTimeout
; /* 00c0 */
543 ULONG64 HeapSegmentReserve
; /* 00c8 */
544 ULONG64 HeapSegmentCommit
; /* 00d0 */
545 ULONG64 HeapDeCommitTotalFreeThreshold
; /* 00d8 */
546 ULONG64 HeapDeCommitFreeBlockThreshold
; /* 00e0 */
547 ULONG NumberOfHeaps
; /* 00e8 */
548 ULONG MaximumNumberOfHeaps
; /* 00ec */
549 ULONG64 ProcessHeaps
; /* 00f0 */
550 ULONG64 GdiSharedHandleTable
; /* 00f8 */
551 ULONG64 ProcessStarterHelper
; /* 0100 */
552 ULONG64 GdiDCAttributeList
; /* 0108 */
553 ULONG64 LoaderLock
; /* 0110 */
554 ULONG OSMajorVersion
; /* 0118 */
555 ULONG OSMinorVersion
; /* 011c */
556 ULONG OSBuildNumber
; /* 0120 */
557 ULONG OSPlatformId
; /* 0124 */
558 ULONG ImageSubSystem
; /* 0128 */
559 ULONG ImageSubSystemMajorVersion
; /* 012c */
560 ULONG ImageSubSystemMinorVersion
; /* 0130 */
561 ULONG ImageProcessAffinityMask
; /* 0134 */
562 ULONG64 GdiHandleBuffer
[28]; /* 0138 */
563 ULONG unknown
[6]; /* 0218 */
564 ULONG64 PostProcessInitRoutine
; /* 0230 */
565 ULONG64 TlsExpansionBitmap
; /* 0238 */
566 ULONG TlsExpansionBitmapBits
[32]; /* 0240 */
567 ULONG SessionId
; /* 02c0 */
568 ULARGE_INTEGER AppCompatFlags
; /* 02c8 */
569 ULARGE_INTEGER AppCompatFlagsUser
; /* 02d0 */
570 ULONG64 ShimData
; /* 02d8 */
571 ULONG64 AppCompatInfo
; /* 02e0 */
572 UNICODE_STRING64 CSDVersion
; /* 02e8 */
573 ULONG64 ActivationContextData
; /* 02f8 */
574 ULONG64 ProcessAssemblyStorageMap
; /* 0300 */
575 ULONG64 SystemDefaultActivationData
; /* 0308 */
576 ULONG64 SystemAssemblyStorageMap
; /* 0310 */
577 ULONG64 MinimumStackCommit
; /* 0318 */
578 ULONG64 FlsCallback
; /* 0320 */
579 LIST_ENTRY64 FlsListHead
; /* 0328 */
580 ULONG64 FlsBitmap
; /* 0338 */
581 ULONG FlsBitmapBits
[4]; /* 0340 */
582 ULONG FlsHighIndex
; /* 0350 */
583 ULONG64 WerRegistrationData
; /* 0358 */
584 ULONG64 WerShipAssertPtr
; /* 0360 */
585 ULONG64 pUnused
; /* 0368 */
586 ULONG64 pImageHeaderHash
; /* 0370 */
587 ULONG TracingFlags
; /* 0378 */
588 ULONGLONG CsrServerReadOnlySharedMemoryBase
; /* 0380 */
589 ULONG TppWorkerpListLock
; /* 0388 */
590 LIST_ENTRY64 TppWorkerpList
; /* 0390 */
591 ULONG64 WaitOnAddressHashTable
[0x80]; /* 03a0 */
592 ULONG64 TelemetryCoverageHeader
; /* 07a0 */
593 ULONG CloudFileFlags
; /* 07a8 */
596 typedef struct _TEB64
598 NT_TIB64 Tib
; /* 0000 */
599 ULONG64 EnvironmentPointer
; /* 0038 */
600 CLIENT_ID64 ClientId
; /* 0040 */
601 ULONG64 ActiveRpcHandle
; /* 0050 */
602 ULONG64 ThreadLocalStoragePointer
; /* 0058 */
603 ULONG64 Peb
; /* 0060 */
604 ULONG LastErrorValue
; /* 0068 */
605 ULONG CountOfOwnedCriticalSections
; /* 006c */
606 ULONG64 CsrClientThread
; /* 0070 */
607 ULONG64 Win32ThreadInfo
; /* 0078 */
608 ULONG User32Reserved
[26]; /* 0080 */
609 ULONG UserReserved
[5]; /* 00e8 */
610 ULONG64 WOW32Reserved
; /* 0100 */
611 ULONG CurrentLocale
; /* 0108 */
612 ULONG FpSoftwareStatusRegister
; /* 010c */
613 ULONG64 ReservedForDebuggerInstrumentation
[16]; /* 0110 */
614 ULONG64 SystemReserved1
[30]; /* 0190 */
615 char PlaceholderCompatibilityMode
; /* 0280 */
616 char PlaceholderReserved
[11]; /* 0281 */
617 DWORD ProxiedProcessId
; /* 028c */
618 ACTIVATION_CONTEXT_STACK64 ActivationContextStack
; /* 0290 */
619 UCHAR WorkingOnBehalfOfTicket
[8]; /* 02b8 */
620 LONG ExceptionCode
; /* 02c0 */
621 ULONG64 ActivationContextStackPointer
; /* 02c8 */
622 ULONG64 InstrumentationCallbackSp
; /* 02d0 */
623 ULONG64 InstrumentationCallbackPreviousPc
; /* 02d8 */
624 ULONG64 InstrumentationCallbackPreviousSp
; /* 02e0 */
625 ULONG TxFsContext
; /* 02e8 */
626 BOOLEAN InstrumentationCallbackDisabled
; /* 02ec */
627 ULONG64 GdiTebBatch
[0x9d]; /* 02f0 */
628 CLIENT_ID64 RealClientId
; /* 07d8 */
629 ULONG64 GdiCachedProcessHandle
; /* 07e8 */
630 ULONG GdiClientPID
; /* 07f0 */
631 ULONG GdiClientTID
; /* 07f4 */
632 ULONG64 GdiThreadLocaleInfo
; /* 07f8 */
633 ULONG64 Win32ClientInfo
[62]; /* 0800 */
634 ULONG64 glDispatchTable
[233]; /* 09f0 */
635 ULONG64 glReserved1
[29]; /* 1138 */
636 ULONG64 glReserved2
; /* 1220 */
637 ULONG64 glSectionInfo
; /* 1228 */
638 ULONG64 glSection
; /* 1230 */
639 ULONG64 glTable
; /* 1238 */
640 ULONG64 glCurrentRC
; /* 1240 */
641 ULONG64 glContext
; /* 1248 */
642 ULONG LastStatusValue
; /* 1250 */
643 UNICODE_STRING64 StaticUnicodeString
; /* 1258 */
644 WCHAR StaticUnicodeBuffer
[261]; /* 1268 */
645 ULONG64 DeallocationStack
; /* 1478 */
646 ULONG64 TlsSlots
[64]; /* 1480 */
647 LIST_ENTRY64 TlsLinks
; /* 1680 */
648 ULONG64 Vdm
; /* 1690 */
649 ULONG64 ReservedForNtRpc
; /* 1698 */
650 ULONG64 DbgSsReserved
[2]; /* 16a0 */
651 ULONG HardErrorDisabled
; /* 16b0 */
652 ULONG64 Instrumentation
[16]; /* 16b8 */
653 ULONG64 WinSockData
; /* 1738 */
654 ULONG GdiBatchCount
; /* 1740 */
655 ULONG Spare2
; /* 1744 */
656 ULONG GuaranteedStackBytes
; /* 1748 */
657 ULONG64 ReservedForPerf
; /* 1750 */
658 ULONG64 ReservedForOle
; /* 1758 */
659 ULONG WaitingOnLoaderLock
; /* 1760 */
660 ULONG64 Reserved5
[3]; /* 1768 */
661 ULONG64 TlsExpansionSlots
; /* 1780 */
662 ULONG64 DeallocationBStore
; /* 1788 */
663 ULONG64 BStoreLimit
; /* 1790 */
664 ULONG ImpersonationLocale
; /* 1798 */
665 ULONG IsImpersonating
; /* 179c */
666 ULONG64 NlsCache
; /* 17a0 */
667 ULONG64 ShimData
; /* 17a8 */
668 ULONG HeapVirtualAffinity
; /* 17b0 */
669 ULONG64 CurrentTransactionHandle
; /* 17b8 */
670 ULONG64 ActiveFrame
; /* 17c0 */
671 ULONG64 FlsSlots
; /* 17c8 */
672 ULONG64 PreferredLanguages
; /* 17d0 */
673 ULONG64 UserPrefLanguages
; /* 17d8 */
674 ULONG64 MergedPrefLanguages
; /* 17e0 */
675 ULONG MuiImpersonation
; /* 17e8 */
676 USHORT CrossTebFlags
; /* 17ec */
677 USHORT SameTebFlags
; /* 17ee */
678 ULONG64 TxnScopeEnterCallback
; /* 17f0 */
679 ULONG64 TxnScopeExitCallback
; /* 17f8 */
680 ULONG64 TxnScopeContext
; /* 1800 */
681 ULONG LockCount
; /* 1808 */
682 LONG WowTebOffset
; /* 180c */
683 ULONG64 ResourceRetValue
; /* 1810 */
684 ULONG64 ReservedForWdf
; /* 1818 */
685 ULONGLONG ReservedForCrt
; /* 1820 */
686 GUID EffectiveContainerId
; /* 1828 */
689 /* reserved TEB64 TLS slots for Wow64 */
690 #define WOW64_TLS_FILESYSREDIR 8
694 /***********************************************************************
698 typedef enum _FILE_INFORMATION_CLASS
{
699 FileDirectoryInformation
= 1,
700 FileFullDirectoryInformation
,
701 FileBothDirectoryInformation
,
702 FileBasicInformation
,
703 FileStandardInformation
,
704 FileInternalInformation
,
706 FileAccessInformation
,
708 FileRenameInformation
,
710 FileNamesInformation
,
711 FileDispositionInformation
,
712 FilePositionInformation
,
713 FileFullEaInformation
,
715 FileAlignmentInformation
,
717 FileAllocationInformation
,
718 FileEndOfFileInformation
,
719 FileAlternateNameInformation
,
720 FileStreamInformation
,
722 FilePipeLocalInformation
,
723 FilePipeRemoteInformation
,
724 FileMailslotQueryInformation
,
725 FileMailslotSetInformation
,
726 FileCompressionInformation
,
727 FileObjectIdInformation
,
728 FileCompletionInformation
,
729 FileMoveClusterInformation
,
730 FileQuotaInformation
,
731 FileReparsePointInformation
,
732 FileNetworkOpenInformation
,
733 FileAttributeTagInformation
,
734 FileTrackingInformation
,
735 FileIdBothDirectoryInformation
,
736 FileIdFullDirectoryInformation
,
737 FileValidDataLengthInformation
,
738 FileShortNameInformation
,
739 FileIoCompletionNotificationInformation
,
740 FileIoStatusBlockRangeInformation
,
741 FileIoPriorityHintInformation
,
742 FileSfioReserveInformation
,
743 FileSfioVolumeInformation
,
744 FileHardLinkInformation
,
745 FileProcessIdsUsingFileInformation
,
746 FileNormalizedNameInformation
,
747 FileNetworkPhysicalNameInformation
,
748 FileIdGlobalTxDirectoryInformation
,
749 FileIsRemoteDeviceInformation
,
750 FileAttributeCacheInformation
,
751 FileNumaNodeInformation
,
752 FileStandardLinkInformation
,
753 FileRemoteProtocolInformation
,
754 FileRenameInformationBypassAccessCheck
,
755 FileLinkInformationBypassAccessCheck
,
756 FileVolumeNameInformation
,
758 FileIdExtdDirectoryInformation
,
759 FileReplaceCompletionInformation
,
760 FileHardLinkFullIdInformation
,
761 FileIdExtdBothDirectoryInformation
,
762 FileMaximumInformation
763 } FILE_INFORMATION_CLASS
, *PFILE_INFORMATION_CLASS
;
765 typedef struct _FILE_DIRECTORY_INFORMATION
{
766 ULONG NextEntryOffset
;
768 LARGE_INTEGER CreationTime
;
769 LARGE_INTEGER LastAccessTime
;
770 LARGE_INTEGER LastWriteTime
;
771 LARGE_INTEGER ChangeTime
;
772 LARGE_INTEGER EndOfFile
;
773 LARGE_INTEGER AllocationSize
;
774 ULONG FileAttributes
;
775 ULONG FileNameLength
;
776 WCHAR FileName
[ANYSIZE_ARRAY
];
777 } FILE_DIRECTORY_INFORMATION
, *PFILE_DIRECTORY_INFORMATION
;
779 typedef struct _FILE_FULL_DIRECTORY_INFORMATION
{
780 ULONG NextEntryOffset
;
782 LARGE_INTEGER CreationTime
;
783 LARGE_INTEGER LastAccessTime
;
784 LARGE_INTEGER LastWriteTime
;
785 LARGE_INTEGER ChangeTime
;
786 LARGE_INTEGER EndOfFile
;
787 LARGE_INTEGER AllocationSize
;
788 ULONG FileAttributes
;
789 ULONG FileNameLength
;
791 WCHAR FileName
[ANYSIZE_ARRAY
];
792 } FILE_FULL_DIRECTORY_INFORMATION
, *PFILE_FULL_DIRECTORY_INFORMATION
,
793 FILE_FULL_DIR_INFORMATION
, *PFILE_FULL_DIR_INFORMATION
;
795 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION
{
796 ULONG NextEntryOffset
;
798 LARGE_INTEGER CreationTime
;
799 LARGE_INTEGER LastAccessTime
;
800 LARGE_INTEGER LastWriteTime
;
801 LARGE_INTEGER ChangeTime
;
802 LARGE_INTEGER EndOfFile
;
803 LARGE_INTEGER AllocationSize
;
804 ULONG FileAttributes
;
805 ULONG FileNameLength
;
807 LARGE_INTEGER FileId
;
808 WCHAR FileName
[ANYSIZE_ARRAY
];
809 } FILE_ID_FULL_DIRECTORY_INFORMATION
, *PFILE_ID_FULL_DIRECTORY_INFORMATION
;
811 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION
{
812 ULONG NextEntryOffset
;
814 LARGE_INTEGER CreationTime
;
815 LARGE_INTEGER LastAccessTime
;
816 LARGE_INTEGER LastWriteTime
;
817 LARGE_INTEGER ChangeTime
;
818 LARGE_INTEGER EndOfFile
;
819 LARGE_INTEGER AllocationSize
;
820 ULONG FileAttributes
;
821 ULONG FileNameLength
;
823 CHAR ShortNameLength
;
825 WCHAR FileName
[ANYSIZE_ARRAY
];
826 } FILE_BOTH_DIRECTORY_INFORMATION
, *PFILE_BOTH_DIRECTORY_INFORMATION
,
827 FILE_BOTH_DIR_INFORMATION
, *PFILE_BOTH_DIR_INFORMATION
;
829 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION
{
830 ULONG NextEntryOffset
;
832 LARGE_INTEGER CreationTime
;
833 LARGE_INTEGER LastAccessTime
;
834 LARGE_INTEGER LastWriteTime
;
835 LARGE_INTEGER ChangeTime
;
836 LARGE_INTEGER EndOfFile
;
837 LARGE_INTEGER AllocationSize
;
838 ULONG FileAttributes
;
839 ULONG FileNameLength
;
841 CHAR ShortNameLength
;
843 LARGE_INTEGER FileId
;
844 WCHAR FileName
[ANYSIZE_ARRAY
];
845 } FILE_ID_BOTH_DIRECTORY_INFORMATION
, *PFILE_ID_BOTH_DIRECTORY_INFORMATION
;
847 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION
{
848 ULONG NextEntryOffset
;
850 LARGE_INTEGER CreationTime
;
851 LARGE_INTEGER LastAccessTime
;
852 LARGE_INTEGER LastWriteTime
;
853 LARGE_INTEGER ChangeTime
;
854 LARGE_INTEGER EndOfFile
;
855 LARGE_INTEGER AllocationSize
;
856 ULONG FileAttributes
;
857 ULONG FileNameLength
;
858 LARGE_INTEGER FileId
;
859 GUID LockingTransactionId
;
861 WCHAR FileName
[ANYSIZE_ARRAY
];
862 } FILE_ID_GLOBAL_TX_DIR_INFORMATION
, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION
;
864 typedef struct _FILE_BASIC_INFORMATION
{
865 LARGE_INTEGER CreationTime
;
866 LARGE_INTEGER LastAccessTime
;
867 LARGE_INTEGER LastWriteTime
;
868 LARGE_INTEGER ChangeTime
;
869 ULONG FileAttributes
;
870 } FILE_BASIC_INFORMATION
, *PFILE_BASIC_INFORMATION
;
872 typedef struct _FILE_STANDARD_INFORMATION
{
873 LARGE_INTEGER AllocationSize
;
874 LARGE_INTEGER EndOfFile
;
876 BOOLEAN DeletePending
;
878 } FILE_STANDARD_INFORMATION
, *PFILE_STANDARD_INFORMATION
;
880 typedef struct _FILE_INTERNAL_INFORMATION
{
881 LARGE_INTEGER IndexNumber
;
882 } FILE_INTERNAL_INFORMATION
, *PFILE_INTERNAL_INFORMATION
;
884 typedef struct _FILE_ID_128
{
885 UCHAR Identifier
[16];
886 } FILE_ID_128
, *PFILE_ID_128
;
888 typedef struct _FILE_ID_INFORMATION
{
889 ULONGLONG VolumeSerialNumber
;
891 } FILE_ID_INFORMATION
, *PFILE_ID_INFORMATION
;
893 typedef struct _FILE_EA_INFORMATION
{
895 } FILE_EA_INFORMATION
, *PFILE_EA_INFORMATION
;
897 typedef struct _FILE_ACCESS_INFORMATION
{
898 ACCESS_MASK AccessFlags
;
899 } FILE_ACCESS_INFORMATION
, *PFILE_ACCESS_INFORMATION
;
901 typedef struct _FILE_NAME_INFORMATION
{
902 ULONG FileNameLength
;
904 } FILE_NAME_INFORMATION
, *PFILE_NAME_INFORMATION
;
906 typedef struct _FILE_RENAME_INFORMATION
{
907 BOOLEAN ReplaceIfExists
;
908 HANDLE RootDirectory
;
909 ULONG FileNameLength
;
911 } FILE_RENAME_INFORMATION
, *PFILE_RENAME_INFORMATION
;
913 typedef struct _FILE_LINK_INFORMATION
{
914 BOOLEAN ReplaceIfExists
;
915 HANDLE RootDirectory
;
916 ULONG FileNameLength
;
918 } FILE_LINK_INFORMATION
, *PFILE_LINK_INFORMATION
;
920 typedef struct _FILE_NAMES_INFORMATION
{
921 ULONG NextEntryOffset
;
923 ULONG FileNameLength
;
925 } FILE_NAMES_INFORMATION
, *PFILE_NAMES_INFORMATION
;
927 typedef struct _FILE_DISPOSITION_INFORMATION
{
928 BOOLEAN DoDeleteFile
;
929 } FILE_DISPOSITION_INFORMATION
, *PFILE_DISPOSITION_INFORMATION
;
931 typedef struct _FILE_POSITION_INFORMATION
{
932 LARGE_INTEGER CurrentByteOffset
;
933 } FILE_POSITION_INFORMATION
, *PFILE_POSITION_INFORMATION
;
935 typedef struct _FILE_ALIGNMENT_INFORMATION
{
936 ULONG AlignmentRequirement
;
937 } FILE_ALIGNMENT_INFORMATION
, *PFILE_ALIGNMENT_INFORMATION
;
939 typedef struct _FILE_ALLOCATION_INFORMATION
{
940 LARGE_INTEGER AllocationSize
;
941 } FILE_ALLOCATION_INFORMATION
, *PFILE_ALLOCATION_INFORMATION
;
943 typedef struct _FILE_END_OF_FILE_INFORMATION
{
944 LARGE_INTEGER EndOfFile
;
945 } FILE_END_OF_FILE_INFORMATION
, *PFILE_END_OF_FILE_INFORMATION
;
947 typedef struct _FILE_NETWORK_OPEN_INFORMATION
{
948 LARGE_INTEGER CreationTime
;
949 LARGE_INTEGER LastAccessTime
;
950 LARGE_INTEGER LastWriteTime
;
951 LARGE_INTEGER ChangeTime
;
952 LARGE_INTEGER AllocationSize
;
953 LARGE_INTEGER EndOfFile
;
954 ULONG FileAttributes
;
955 } FILE_NETWORK_OPEN_INFORMATION
, *PFILE_NETWORK_OPEN_INFORMATION
;
957 typedef struct _FILE_FULL_EA_INFORMATION
{
958 ULONG NextEntryOffset
;
961 USHORT EaValueLength
;
963 } FILE_FULL_EA_INFORMATION
, *PFILE_FULL_EA_INFORMATION
;
965 typedef struct _FILE_MODE_INFORMATION
{
967 } FILE_MODE_INFORMATION
, *PFILE_MODE_INFORMATION
;
969 typedef struct _FILE_STREAM_INFORMATION
971 ULONG NextEntryOffset
;
972 ULONG StreamNameLength
;
973 LARGE_INTEGER StreamSize
;
974 LARGE_INTEGER StreamAllocationSize
;
976 } FILE_STREAM_INFORMATION
, *PFILE_STREAM_INFORMATION
;
978 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
980 ULONG FileAttributes
;
982 } FILE_ATTRIBUTE_TAG_INFORMATION
, *PFILE_ATTRIBUTE_TAG_INFORMATION
;
984 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION
{
985 ULONG MaximumMessageSize
;
987 ULONG NextMessageSize
;
988 ULONG MessagesAvailable
;
989 LARGE_INTEGER ReadTimeout
;
990 } FILE_MAILSLOT_QUERY_INFORMATION
, *PFILE_MAILSLOT_QUERY_INFORMATION
;
992 typedef struct _FILE_MAILSLOT_SET_INFORMATION
{
993 LARGE_INTEGER ReadTimeout
;
994 } FILE_MAILSLOT_SET_INFORMATION
, *PFILE_MAILSLOT_SET_INFORMATION
;
996 typedef struct _FILE_PIPE_INFORMATION
{
998 ULONG CompletionMode
;
999 } FILE_PIPE_INFORMATION
, *PFILE_PIPE_INFORMATION
;
1001 typedef struct _FILE_PIPE_LOCAL_INFORMATION
{
1002 ULONG NamedPipeType
;
1003 ULONG NamedPipeConfiguration
;
1004 ULONG MaximumInstances
;
1005 ULONG CurrentInstances
;
1007 ULONG ReadDataAvailable
;
1008 ULONG OutboundQuota
;
1009 ULONG WriteQuotaAvailable
;
1010 ULONG NamedPipeState
;
1012 } FILE_PIPE_LOCAL_INFORMATION
, *PFILE_PIPE_LOCAL_INFORMATION
;
1014 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1015 #define FILE_PIPE_LISTENING_STATE 0x00000002
1016 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1017 #define FILE_PIPE_CLOSING_STATE 0x00000004
1019 typedef struct _FILE_OBJECTID_BUFFER
1026 BYTE BirthVolumeId
[16];
1027 BYTE BirthObjectId
[16];
1030 BYTE ExtendedInfo
[48];
1032 } FILE_OBJECTID_BUFFER
, *PFILE_OBJECTID_BUFFER
;
1034 typedef struct _FILE_OBJECTID_INFORMATION
{
1035 LONGLONG FileReference
;
1039 UCHAR BirthVolumeId
[16];
1040 UCHAR BirthObjectId
[16];
1043 UCHAR ExtendedInfo
[48];
1045 } FILE_OBJECTID_INFORMATION
, *PFILE_OBJECTID_INFORMATION
;
1047 typedef struct _FILE_QUOTA_INFORMATION
{
1048 ULONG NextEntryOffset
;
1050 LARGE_INTEGER ChangeTime
;
1051 LARGE_INTEGER QuotaUsed
;
1052 LARGE_INTEGER QuotaThreshold
;
1053 LARGE_INTEGER QuotaLimit
;
1055 } FILE_QUOTA_INFORMATION
, *PFILE_QUOTA_INFORMATION
;
1057 typedef struct _FILE_REPARSE_POINT_INFORMATION
{
1058 LONGLONG FileReference
;
1060 } FILE_REPARSE_POINT_INFORMATION
, *PFILE_REPARSE_POINT_INFORMATION
;
1062 typedef struct _FILE_ALL_INFORMATION
{
1063 FILE_BASIC_INFORMATION BasicInformation
;
1064 FILE_STANDARD_INFORMATION StandardInformation
;
1065 FILE_INTERNAL_INFORMATION InternalInformation
;
1066 FILE_EA_INFORMATION EaInformation
;
1067 FILE_ACCESS_INFORMATION AccessInformation
;
1068 FILE_POSITION_INFORMATION PositionInformation
;
1069 FILE_MODE_INFORMATION ModeInformation
;
1070 FILE_ALIGNMENT_INFORMATION AlignmentInformation
;
1071 FILE_NAME_INFORMATION NameInformation
;
1072 } FILE_ALL_INFORMATION
, *PFILE_ALL_INFORMATION
;
1074 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
{
1076 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION
;
1078 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1079 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1080 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1082 typedef enum _FSINFOCLASS
{
1083 FileFsVolumeInformation
= 1,
1084 FileFsLabelInformation
,
1085 FileFsSizeInformation
,
1086 FileFsDeviceInformation
,
1087 FileFsAttributeInformation
,
1088 FileFsControlInformation
,
1089 FileFsFullSizeInformation
,
1090 FileFsObjectIdInformation
,
1091 FileFsMaximumInformation
1092 } FS_INFORMATION_CLASS
, *PFS_INFORMATION_CLASS
;
1094 typedef enum _KEY_INFORMATION_CLASS
{
1095 KeyBasicInformation
,
1099 KeyCachedInformation
,
1100 KeyFlagsInformation
,
1101 KeyVirtualizationInformation
,
1102 KeyHandleTagsInformation
,
1104 } KEY_INFORMATION_CLASS
;
1106 typedef enum _KEY_VALUE_INFORMATION_CLASS
{
1107 KeyValueBasicInformation
,
1108 KeyValueFullInformation
,
1109 KeyValuePartialInformation
,
1110 KeyValueFullInformationAlign64
,
1111 KeyValuePartialInformationAlign64
1112 } KEY_VALUE_INFORMATION_CLASS
;
1114 typedef enum _OBJECT_INFORMATION_CLASS
{
1115 ObjectBasicInformation
,
1116 ObjectNameInformation
,
1117 ObjectTypeInformation
,
1118 ObjectAllInformation
,
1119 ObjectDataInformation
1120 } OBJECT_INFORMATION_CLASS
, *POBJECT_INFORMATION_CLASS
;
1122 typedef enum _PROCESSINFOCLASS
{
1123 ProcessBasicInformation
= 0,
1124 ProcessQuotaLimits
= 1,
1125 ProcessIoCounters
= 2,
1126 ProcessVmCounters
= 3,
1128 ProcessBasePriority
= 5,
1129 ProcessRaisePriority
= 6,
1130 ProcessDebugPort
= 7,
1131 ProcessExceptionPort
= 8,
1132 ProcessAccessToken
= 9,
1133 ProcessLdtInformation
= 10,
1134 ProcessLdtSize
= 11,
1135 ProcessDefaultHardErrorMode
= 12,
1136 ProcessIoPortHandlers
= 13,
1137 ProcessPooledUsageAndLimits
= 14,
1138 ProcessWorkingSetWatch
= 15,
1139 ProcessUserModeIOPL
= 16,
1140 ProcessEnableAlignmentFaultFixup
= 17,
1141 ProcessPriorityClass
= 18,
1142 ProcessWx86Information
= 19,
1143 ProcessHandleCount
= 20,
1144 ProcessAffinityMask
= 21,
1145 ProcessPriorityBoost
= 22,
1146 ProcessDeviceMap
= 23,
1147 ProcessSessionInformation
= 24,
1148 ProcessForegroundInformation
= 25,
1149 ProcessWow64Information
= 26,
1150 ProcessImageFileName
= 27,
1151 ProcessLUIDDeviceMapsEnabled
= 28,
1152 ProcessBreakOnTermination
= 29,
1153 ProcessDebugObjectHandle
= 30,
1154 ProcessDebugFlags
= 31,
1155 ProcessHandleTracing
= 32,
1156 ProcessExecuteFlags
= 34,
1157 ProcessTlsInformation
= 35,
1159 ProcessImageInformation
= 37,
1160 ProcessCycleTime
= 38,
1161 ProcessPagePriority
= 39,
1162 ProcessInstrumentationCallback
= 40,
1163 ProcessThreadStackAllocation
= 41,
1164 ProcessWorkingSetWatchEx
= 42,
1165 ProcessImageFileNameWin32
= 43,
1167 } PROCESSINFOCLASS
, PROCESS_INFORMATION_CLASS
;
1169 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1170 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1171 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1172 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1174 typedef enum _SECTION_INHERIT
{
1179 typedef enum _SYSTEM_INFORMATION_CLASS
{
1180 SystemBasicInformation
= 0,
1181 SystemCpuInformation
= 1,
1182 SystemPerformanceInformation
= 2,
1183 SystemTimeOfDayInformation
= 3, /* was SystemTimeInformation */
1185 SystemProcessInformation
= 5,
1188 SystemProcessorPerformanceInformation
= 8,
1191 SystemModuleInformation
= 11,
1196 SystemHandleInformation
= 16,
1198 SystemPageFileInformation
= 18,
1201 SystemCacheInformation
= 21,
1203 SystemInterruptInformation
= 23,
1204 SystemDpcBehaviourInformation
= 24,
1205 SystemFullMemoryInformation
= 25,
1206 SystemNotImplemented6
= 25,
1207 SystemLoadImage
= 26,
1208 SystemUnloadImage
= 27,
1209 SystemTimeAdjustmentInformation
= 28,
1210 SystemTimeAdjustment
= 28,
1211 SystemSummaryMemoryInformation
= 29,
1212 SystemNotImplemented7
= 29,
1213 SystemNextEventIdInformation
= 30,
1214 SystemNotImplemented8
= 30,
1215 SystemEventIdsInformation
= 31,
1216 SystemCrashDumpInformation
= 32,
1217 SystemExceptionInformation
= 33,
1218 SystemCrashDumpStateInformation
= 34,
1219 SystemKernelDebuggerInformation
= 35,
1220 SystemContextSwitchInformation
= 36,
1221 SystemRegistryQuotaInformation
= 37,
1222 SystemCurrentTimeZoneInformation
= 44,
1223 SystemTimeZoneInformation
= 44,
1224 SystemLookasideInformation
= 45,
1225 SystemSetTimeSlipEvent
= 46,
1226 SystemCreateSession
= 47,
1227 SystemDeleteSession
= 48,
1228 SystemInvalidInfoClass4
= 49,
1229 SystemRangeStartInformation
= 50,
1230 SystemVerifierInformation
= 51,
1231 SystemAddVerifier
= 52,
1232 SystemSessionProcessesInformation
= 53,
1233 SystemLoadGdiDriverInSystemSpace
= 54,
1234 SystemNumaProcessorMap
= 55,
1235 SystemPrefetcherInformation
= 56,
1236 SystemExtendedProcessInformation
= 57,
1237 SystemRecommendedSharedDataAlignment
= 58,
1238 SystemComPlusPackage
= 59,
1239 SystemNumaAvailableMemory
= 60,
1240 SystemProcessorPowerInformation
= 61,
1241 SystemEmulationBasicInformation
= 62,
1242 SystemEmulationProcessorInformation
= 63,
1243 SystemExtendedHandleInformation
= 64,
1244 SystemLostDelayedWriteInformation
= 65,
1245 SystemBigPoolInformation
= 66,
1246 SystemSessionPoolTagInformation
= 67,
1247 SystemSessionMappedViewInformation
= 68,
1248 SystemHotpatchInformation
= 69,
1249 SystemObjectSecurityMode
= 70,
1250 SystemWatchdogTimerHandler
= 71,
1251 SystemWatchdogTimerInformation
= 72,
1252 SystemLogicalProcessorInformation
= 73,
1253 SystemWow64SharedInformation
= 74,
1254 SystemRegisterFirmwareTableInformationHandler
= 75,
1255 SystemFirmwareTableInformation
= 76,
1256 SystemModuleInformationEx
= 77,
1257 SystemVerifierTriageInformation
= 78,
1258 SystemSuperfetchInformation
= 79,
1259 SystemMemoryListInformation
= 80,
1260 SystemFileCacheInformationEx
= 81,
1261 SystemDynamicTimeZoneInformation
= 102,
1262 SystemLogicalProcessorInformationEx
= 107,
1263 SystemInformationClassMax
1264 } SYSTEM_INFORMATION_CLASS
, *PSYSTEM_INFORMATION_CLASS
;
1266 typedef enum _THREADINFOCLASS
{
1267 ThreadBasicInformation
= 0,
1272 ThreadImpersonationToken
,
1273 ThreadDescriptorTableEntry
,
1274 ThreadEnableAlignmentFaultFixup
,
1275 ThreadEventPair_Reusable
,
1276 ThreadQuerySetWin32StartAddress
,
1278 ThreadPerformanceCount
,
1279 ThreadAmILastThread
,
1280 ThreadIdealProcessor
,
1281 ThreadPriorityBoost
,
1282 ThreadSetTlsArrayAddress
,
1284 ThreadHideFromDebugger
,
1285 ThreadBreakOnTermination
,
1286 ThreadSwitchLegacyState
,
1288 ThreadLastSystemCall
,
1292 ThreadActualBasePriority
,
1293 ThreadTebInformation
,
1297 ThreadGroupInformation
,
1298 ThreadUmsInformation
,
1299 ThreadCounterProfiling
,
1300 ThreadIdealProcessorEx
,
1301 ThreadSuspendCount
= 35,
1302 ThreadDescription
= 38,
1306 typedef struct _THREAD_BASIC_INFORMATION
1308 NTSTATUS ExitStatus
;
1309 PVOID TebBaseAddress
;
1311 ULONG_PTR AffinityMask
;
1314 } THREAD_BASIC_INFORMATION
, *PTHREAD_BASIC_INFORMATION
;
1316 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1320 } THREAD_DESCRIPTOR_INFORMATION
, *PTHREAD_DESCRIPTOR_INFORMATION
;
1322 typedef struct _THREAD_DESCRIPTION_INFORMATION
1324 UNICODE_STRING Description
;
1325 } THREAD_DESCRIPTION_INFORMATION
, *PTHREAD_DESCRIPTION_INFORMATION
;
1327 typedef struct _KERNEL_USER_TIMES
{
1328 LARGE_INTEGER CreateTime
;
1329 LARGE_INTEGER ExitTime
;
1330 LARGE_INTEGER KernelTime
;
1331 LARGE_INTEGER UserTime
;
1332 } KERNEL_USER_TIMES
, *PKERNEL_USER_TIMES
;
1334 typedef enum _WINSTATIONINFOCLASS
{
1335 WinStationInformation
= 8
1336 } WINSTATIONINFOCLASS
;
1338 typedef enum _MEMORY_INFORMATION_CLASS
{
1339 MemoryBasicInformation
,
1340 MemoryWorkingSetList
,
1342 MemoryBasicVlmInformation
,
1343 MemoryWorkingSetExInformation
1344 } MEMORY_INFORMATION_CLASS
;
1346 typedef struct _MEMORY_SECTION_NAME
1348 UNICODE_STRING SectionFileName
;
1349 } MEMORY_SECTION_NAME
, *PMEMORY_SECTION_NAME
;
1351 typedef union _MEMORY_WORKING_SET_EX_BLOCK
{
1354 ULONG_PTR Valid
: 1;
1355 ULONG_PTR ShareCount
: 3;
1356 ULONG_PTR Win32Protection
: 11;
1357 ULONG_PTR Shared
: 1;
1359 ULONG_PTR Locked
: 1;
1360 ULONG_PTR LargePage
: 1;
1362 } MEMORY_WORKING_SET_EX_BLOCK
, *PMEMORY_WORKING_SET_EX_BLOCK
;
1364 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION
{
1365 PVOID VirtualAddress
;
1366 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes
;
1367 } MEMORY_WORKING_SET_EX_INFORMATION
, *PMEMORY_WORKING_SET_EX_INFORMATION
;
1369 typedef enum _MUTANT_INFORMATION_CLASS
1371 MutantBasicInformation
1372 } MUTANT_INFORMATION_CLASS
, *PMUTANT_INFORMATION_CLASS
;
1374 typedef struct _MUTANT_BASIC_INFORMATION
{
1376 BOOLEAN OwnedByCaller
;
1377 BOOLEAN AbandonedState
;
1378 } MUTANT_BASIC_INFORMATION
, *PMUTANT_BASIC_INFORMATION
;
1380 typedef enum _TIMER_INFORMATION_CLASS
1382 TimerBasicInformation
= 0
1383 } TIMER_INFORMATION_CLASS
;
1385 typedef struct _TIMER_BASIC_INFORMATION
1387 LARGE_INTEGER RemainingTime
;
1389 } TIMER_BASIC_INFORMATION
, *PTIMER_BASIC_INFORMATION
;
1392 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
1396 UNC_PATH
, /* "//foo" */
1397 ABSOLUTE_DRIVE_PATH
, /* "c:/foo" */
1398 RELATIVE_DRIVE_PATH
, /* "c:foo" */
1399 ABSOLUTE_PATH
, /* "/foo" */
1400 RELATIVE_PATH
, /* "foo" */
1401 DEVICE_PATH
, /* "//./foo" */
1402 UNC_DOT_PATH
/* "//." */
1403 } DOS_PATHNAME_TYPE
;
1406 /***********************************************************************
1407 * Types and data structures
1410 /* This is used by NtQuerySystemInformation */
1411 typedef struct _SYSTEM_THREAD_INFORMATION
1413 LARGE_INTEGER KernelTime
; /* 00/00 */
1414 LARGE_INTEGER UserTime
; /* 08/08 */
1415 LARGE_INTEGER CreateTime
; /* 10/10 */
1416 DWORD dwTickCount
; /* 18/18 */
1417 LPVOID StartAddress
; /* 1c/20 */
1418 CLIENT_ID ClientId
; /* 20/28 */
1419 DWORD dwCurrentPriority
; /* 28/38 */
1420 DWORD dwBasePriority
; /* 2c/3c */
1421 DWORD dwContextSwitches
; /* 30/40 */
1422 DWORD dwThreadState
; /* 34/44 */
1423 DWORD dwWaitReason
; /* 38/48 */
1424 DWORD dwUnknown
; /* 3c/4c */
1425 } SYSTEM_THREAD_INFORMATION
, *PSYSTEM_THREAD_INFORMATION
;
1427 typedef struct _IO_STATUS_BLOCK
{
1433 ULONG_PTR Information
;
1434 } IO_STATUS_BLOCK
, *PIO_STATUS_BLOCK
;
1436 typedef void (WINAPI
* PIO_APC_ROUTINE
)(PVOID
,PIO_STATUS_BLOCK
,ULONG
);
1438 typedef struct _KEY_BASIC_INFORMATION
{
1439 LARGE_INTEGER LastWriteTime
;
1443 } KEY_BASIC_INFORMATION
, *PKEY_BASIC_INFORMATION
;
1445 typedef struct _KEY_NODE_INFORMATION
1447 LARGE_INTEGER LastWriteTime
;
1454 } KEY_NODE_INFORMATION
, *PKEY_NODE_INFORMATION
;
1456 typedef struct _KEY_FULL_INFORMATION
1458 LARGE_INTEGER LastWriteTime
;
1466 ULONG MaxValueNameLen
;
1467 ULONG MaxValueDataLen
;
1469 } KEY_FULL_INFORMATION
, *PKEY_FULL_INFORMATION
;
1471 typedef struct _KEY_NAME_INFORMATION
{
1474 } KEY_NAME_INFORMATION
, *PKEY_NAME_INFORMATION
;
1476 typedef struct _KEY_CACHED_INFORMATION
1478 LARGE_INTEGER LastWriteTime
;
1483 ULONG MaxValueNameLen
;
1484 ULONG MaxValueDataLen
;
1486 } KEY_CACHED_INFORMATION
, *PKEY_CACHED_INFORMATION
;
1488 typedef struct _KEY_VALUE_ENTRY
1490 PUNICODE_STRING ValueName
;
1494 } KEY_VALUE_ENTRY
, *PKEY_VALUE_ENTRY
;
1496 typedef struct _KEY_VALUE_BASIC_INFORMATION
{
1501 } KEY_VALUE_BASIC_INFORMATION
, *PKEY_VALUE_BASIC_INFORMATION
;
1503 typedef struct _KEY_VALUE_FULL_INFORMATION
{
1510 } KEY_VALUE_FULL_INFORMATION
, *PKEY_VALUE_FULL_INFORMATION
;
1512 typedef struct _KEY_VALUE_PARTIAL_INFORMATION
{
1517 } KEY_VALUE_PARTIAL_INFORMATION
, *PKEY_VALUE_PARTIAL_INFORMATION
;
1519 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
1520 #define __OBJECT_ATTRIBUTES_DEFINED__
1521 typedef struct _OBJECT_ATTRIBUTES
{
1523 HANDLE RootDirectory
;
1524 PUNICODE_STRING ObjectName
;
1526 PVOID SecurityDescriptor
; /* type SECURITY_DESCRIPTOR */
1527 PVOID SecurityQualityOfService
; /* type SECURITY_QUALITY_OF_SERVICE */
1528 } OBJECT_ATTRIBUTES
, *POBJECT_ATTRIBUTES
;
1531 typedef struct _OBJECT_DATA_INFORMATION
{
1532 BOOLEAN InheritHandle
;
1533 BOOLEAN ProtectFromClose
;
1534 } OBJECT_DATA_INFORMATION
, *POBJECT_DATA_INFORMATION
;
1536 typedef struct _OBJECT_BASIC_INFORMATION
{
1538 ACCESS_MASK GrantedAccess
;
1541 ULONG PagedPoolUsage
;
1542 ULONG NonPagedPoolUsage
;
1544 ULONG NameInformationLength
;
1545 ULONG TypeInformationLength
;
1546 ULONG SecurityDescriptorLength
;
1547 LARGE_INTEGER CreateTime
;
1548 } OBJECT_BASIC_INFORMATION
, *POBJECT_BASIC_INFORMATION
;
1550 typedef struct _OBJECT_NAME_INFORMATION
{
1551 UNICODE_STRING Name
;
1552 } OBJECT_NAME_INFORMATION
, *POBJECT_NAME_INFORMATION
;
1554 typedef struct __OBJECT_TYPE_INFORMATION
{
1555 UNICODE_STRING TypeName
;
1556 ULONG Reserved
[22];
1557 } OBJECT_TYPE_INFORMATION
, *POBJECT_TYPE_INFORMATION
;
1559 typedef struct _PROCESS_BASIC_INFORMATION
{
1561 DWORD_PTR ExitStatus
;
1562 PPEB PebBaseAddress
;
1563 DWORD_PTR AffinityMask
;
1564 DWORD_PTR BasePriority
;
1565 ULONG_PTR UniqueProcessId
;
1566 ULONG_PTR InheritedFromUniqueProcessId
;
1569 PPEB PebBaseAddress
;
1571 ULONG_PTR UniqueProcessId
;
1574 } PROCESS_BASIC_INFORMATION
, *PPROCESS_BASIC_INFORMATION
;
1576 #define PROCESS_PRIOCLASS_IDLE 1
1577 #define PROCESS_PRIOCLASS_NORMAL 2
1578 #define PROCESS_PRIOCLASS_HIGH 3
1579 #define PROCESS_PRIOCLASS_REALTIME 4
1580 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
1581 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
1583 typedef struct _PROCESS_PRIORITY_CLASS
{
1585 UCHAR PriorityClass
;
1586 } PROCESS_PRIORITY_CLASS
, *PPROCESS_PRIORITY_CLASS
;
1588 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
1593 } PROCESS_STACK_ALLOCATION_INFORMATION
, *PPROCESS_STACK_ALLOCATION_INFORMATION
;
1595 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
1597 ULONG PreferredNode
;
1601 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo
;
1602 } PROCESS_STACK_ALLOCATION_INFORMATION_EX
, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX
;
1604 typedef struct _RTL_HEAP_DEFINITION
{
1605 ULONG Length
; /* = sizeof(RTL_HEAP_DEFINITION) */
1608 } RTL_HEAP_DEFINITION
, *PRTL_HEAP_DEFINITION
;
1610 typedef struct _RTL_RWLOCK
{
1611 RTL_CRITICAL_SECTION rtlCS
;
1613 HANDLE hSharedReleaseSemaphore
;
1614 UINT uSharedWaiters
;
1616 HANDLE hExclusiveReleaseSemaphore
;
1617 UINT uExclusiveWaiters
;
1620 HANDLE hOwningThreadId
;
1621 DWORD dwTimeoutBoost
;
1623 } RTL_RWLOCK
, *LPRTL_RWLOCK
;
1625 /* System Information Class 0x00 */
1627 typedef struct _SYSTEM_BASIC_INFORMATION
{
1630 ULONG KeMaximumIncrement
;
1632 ULONG MmNumberOfPhysicalPages
;
1633 ULONG MmLowestPhysicalPage
;
1634 ULONG MmHighestPhysicalPage
;
1635 ULONG_PTR AllocationGranularity
;
1636 PVOID LowestUserAddress
;
1637 PVOID HighestUserAddress
;
1638 ULONG_PTR ActiveProcessorsAffinityMask
;
1639 BYTE NumberOfProcessors
;
1643 CCHAR NumberOfProcessors
;
1645 } SYSTEM_BASIC_INFORMATION
, *PSYSTEM_BASIC_INFORMATION
;
1647 /* System Information Class 0x01 */
1649 typedef struct _SYSTEM_CPU_INFORMATION
{
1652 WORD Revision
; /* combination of CPU model and stepping */
1653 WORD Reserved
; /* always zero */
1654 DWORD FeatureSet
; /* see bit flags below */
1655 } SYSTEM_CPU_INFORMATION
, *PSYSTEM_CPU_INFORMATION
;
1657 /* definitions of bits in the Feature set for the x86 processors */
1658 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
1659 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
1660 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
1661 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
1662 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
1663 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
1664 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
1665 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
1666 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
1667 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
1668 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
1669 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
1670 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
1671 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
1672 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
1673 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
1674 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
1675 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
1676 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
1677 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
1678 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
1679 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
1680 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
1681 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
1683 /* FIXME: following values are made up, actual flags are unknown */
1684 #define CPU_FEATURE_SSSE3 0x00008000 /* SSSE3 instructions */
1685 #define CPU_FEATURE_SSE41 0x01000000 /* SSE41 instructions */
1686 #define CPU_FEATURE_SSE42 0x02000000 /* SSE42 instructions */
1687 #define CPU_FEATURE_AVX 0x40000000 /* AVX instructions */
1688 #define CPU_FEATURE_AVX2 0x80000000 /* AVX2 instructions */
1690 #define CPU_FEATURE_PAE 0x00200000
1691 #define CPU_FEATURE_DAZ 0x00400000
1692 #define CPU_FEATURE_ARM_VFP_32 0x00000001
1693 #define CPU_FEATURE_ARM_NEON 0x00000002
1694 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
1695 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
1697 /* System Information Class 0x02 */
1699 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
1700 typedef struct _SYSTEM_PERFORMANCE_INFORMATION
{
1701 LARGE_INTEGER IdleTime
;
1702 LARGE_INTEGER ReadTransferCount
;
1703 LARGE_INTEGER WriteTransferCount
;
1704 LARGE_INTEGER OtherTransferCount
;
1705 ULONG ReadOperationCount
;
1706 ULONG WriteOperationCount
;
1707 ULONG OtherOperationCount
;
1708 ULONG AvailablePages
;
1709 ULONG TotalCommittedPages
;
1710 ULONG TotalCommitLimit
;
1711 ULONG PeakCommitment
;
1713 ULONG WriteCopyFaults
;
1714 ULONG TransitionFaults
;
1716 ULONG DemandZeroFaults
;
1720 ULONG PagefilePagesWritten
;
1721 ULONG PagefilePageWriteIos
;
1722 ULONG MappedFilePagesWritten
;
1723 ULONG MappedFilePageWriteIos
;
1724 ULONG PagedPoolUsage
;
1725 ULONG NonPagedPoolUsage
;
1726 ULONG PagedPoolAllocs
;
1727 ULONG PagedPoolFrees
;
1728 ULONG NonPagedPoolAllocs
;
1729 ULONG NonPagedPoolFrees
;
1730 ULONG TotalFreeSystemPtes
;
1731 ULONG SystemCodePage
;
1732 ULONG TotalSystemDriverPages
;
1733 ULONG TotalSystemCodePages
;
1734 ULONG SmallNonPagedLookasideListAllocateHits
;
1735 ULONG SmallPagedLookasideListAllocateHits
;
1737 ULONG MmSystemCachePage
;
1738 ULONG PagedPoolPage
;
1739 ULONG SystemDriverPage
;
1740 ULONG FastReadNoWait
;
1742 ULONG FastReadResourceMiss
;
1743 ULONG FastReadNotPossible
;
1744 ULONG FastMdlReadNoWait
;
1745 ULONG FastMdlReadWait
;
1746 ULONG FastMdlReadResourceMiss
;
1747 ULONG FastMdlReadNotPossible
;
1748 ULONG MapDataNoWait
;
1750 ULONG MapDataNoWaitMiss
;
1751 ULONG MapDataWaitMiss
;
1752 ULONG PinMappedDataCount
;
1753 ULONG PinReadNoWait
;
1755 ULONG PinReadNoWaitMiss
;
1756 ULONG PinReadWaitMiss
;
1757 ULONG CopyReadNoWait
;
1759 ULONG CopyReadNoWaitMiss
;
1760 ULONG CopyReadWaitMiss
;
1761 ULONG MdlReadNoWait
;
1763 ULONG MdlReadNoWaitMiss
;
1764 ULONG MdlReadWaitMiss
;
1767 ULONG LazyWritePages
;
1770 ULONG ContextSwitches
;
1771 ULONG FirstLevelTbFills
;
1772 ULONG SecondLevelTbFills
;
1774 } SYSTEM_PERFORMANCE_INFORMATION
, *PSYSTEM_PERFORMANCE_INFORMATION
;
1776 /* System Information Class 0x03 */
1778 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION
{
1780 LARGE_INTEGER BootTime
;
1781 LARGE_INTEGER SystemTime
;
1782 LARGE_INTEGER TimeZoneBias
;
1785 ULONGLONG BootTimeBias
;
1786 ULONGLONG SleepTimeBias
;
1790 } SYSTEM_TIMEOFDAY_INFORMATION
, *PSYSTEM_TIMEOFDAY_INFORMATION
; /* was SYSTEM_TIME_INFORMATION */
1792 /* System Information Class 0x08 */
1794 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
{
1795 LARGE_INTEGER IdleTime
;
1796 LARGE_INTEGER KernelTime
;
1797 LARGE_INTEGER UserTime
;
1798 LARGE_INTEGER Reserved1
[2];
1800 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
;
1802 /* System Information Class 0x0b */
1804 typedef struct _SYSTEM_DRIVER_INFORMATION
{
1810 char szName
[MAX_PATH
+ 1];
1811 } SYSTEM_DRIVER_INFORMATION
, *PSYSTEM_DRIVER_INFORMATION
;
1813 /* System Information Class 0x10 */
1815 typedef struct _SYSTEM_HANDLE_ENTRY
{
1820 PVOID ObjectPointer
;
1822 } SYSTEM_HANDLE_ENTRY
, *PSYSTEM_HANDLE_ENTRY
;
1824 typedef struct _SYSTEM_HANDLE_INFORMATION
{
1826 SYSTEM_HANDLE_ENTRY Handle
[1];
1827 } SYSTEM_HANDLE_INFORMATION
, *PSYSTEM_HANDLE_INFORMATION
;
1829 /* System Information Class 0x15 */
1831 typedef struct _SYSTEM_CACHE_INFORMATION
{
1834 ULONG PageFaultCount
;
1835 ULONG MinimumWorkingSet
;
1836 ULONG MaximumWorkingSet
;
1841 } SYSTEM_CACHE_INFORMATION
, *PSYSTEM_CACHE_INFORMATION
;
1843 /* System Information Class 0x17 */
1845 typedef struct _SYSTEM_INTERRUPT_INFORMATION
{
1847 } SYSTEM_INTERRUPT_INFORMATION
, *PSYSTEM_INTERRUPT_INFORMATION
;
1849 typedef struct _SYSTEM_CONFIGURATION_INFO
{
1853 WORD ProcessorArchitecture
;
1858 PVOID MinimumApplicationAddress
;
1859 PVOID MaximumApplicationAddress
;
1860 ULONG ActiveProcessorMask
;
1861 ULONG NumberOfProcessors
;
1862 ULONG ProcessorType
;
1863 ULONG AllocationGranularity
;
1864 WORD ProcessorLevel
;
1865 WORD ProcessorRevision
;
1866 } SYSTEM_CONFIGURATION_INFO
, *PSYSTEM_CONFIGURATION_INFO
;
1868 typedef struct _SYSTEM_EXCEPTION_INFORMATION
{
1870 } SYSTEM_EXCEPTION_INFORMATION
, *PSYSTEM_EXCEPTION_INFORMATION
;
1872 typedef struct _SYSTEM_LOOKASIDE_INFORMATION
{
1874 } SYSTEM_LOOKASIDE_INFORMATION
, *PSYSTEM_LOOKASIDE_INFORMATION
;
1876 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION
{
1877 BOOLEAN DebuggerEnabled
;
1878 BOOLEAN DebuggerNotPresent
;
1879 } SYSTEM_KERNEL_DEBUGGER_INFORMATION
, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION
;
1881 typedef struct _VM_COUNTERS
1883 SIZE_T PeakVirtualSize
;
1885 ULONG PageFaultCount
;
1886 SIZE_T PeakWorkingSetSize
;
1887 SIZE_T WorkingSetSize
;
1888 SIZE_T QuotaPeakPagedPoolUsage
;
1889 SIZE_T QuotaPagedPoolUsage
;
1890 SIZE_T QuotaPeakNonPagedPoolUsage
;
1891 SIZE_T QuotaNonPagedPoolUsage
;
1892 SIZE_T PagefileUsage
;
1893 SIZE_T PeakPagefileUsage
;
1894 } VM_COUNTERS
, *PVM_COUNTERS
;
1896 typedef struct _VM_COUNTERS_EX
1898 SIZE_T PeakVirtualSize
;
1900 ULONG PageFaultCount
;
1901 SIZE_T PeakWorkingSetSize
;
1902 SIZE_T WorkingSetSize
;
1903 SIZE_T QuotaPeakPagedPoolUsage
;
1904 SIZE_T QuotaPagedPoolUsage
;
1905 SIZE_T QuotaPeakNonPagedPoolUsage
;
1906 SIZE_T QuotaNonPagedPoolUsage
;
1907 SIZE_T PagefileUsage
;
1908 SIZE_T PeakPagefileUsage
;
1909 SIZE_T PrivateUsage
;
1910 } VM_COUNTERS_EX
, *PVM_COUNTERS_EX
;
1912 typedef struct _SYSTEM_PROCESS_INFORMATION
{
1913 #ifdef __WINESRC__ /* win32/win64 */
1914 ULONG NextEntryOffset
; /* 00/00 */
1915 DWORD dwThreadCount
; /* 04/04 */
1916 DWORD dwUnknown1
[6]; /* 08/08 */
1917 LARGE_INTEGER CreationTime
; /* 20/20 */
1918 LARGE_INTEGER UserTime
; /* 28/28 */
1919 LARGE_INTEGER KernelTime
; /* 30/30 */
1920 UNICODE_STRING ProcessName
; /* 38/38 */
1921 DWORD dwBasePriority
; /* 40/48 */
1922 HANDLE UniqueProcessId
; /* 44/50 */
1923 HANDLE ParentProcessId
; /* 48/58 */
1924 ULONG HandleCount
; /* 4c/60 */
1925 ULONG SessionId
; /* 50/64 */
1926 DWORD dwUnknown4
; /* 54/68 */
1927 VM_COUNTERS_EX vmCounters
; /* 58/70 */
1928 IO_COUNTERS ioCounters
; /* 88/d0 */
1929 SYSTEM_THREAD_INFORMATION ti
[1]; /* b8/100 */
1931 ULONG NextEntryOffset
; /* 00/00 */
1932 BYTE Reserved1
[52]; /* 04/04 */
1933 PVOID Reserved2
[3]; /* 38/38 */
1934 HANDLE UniqueProcessId
; /* 44/50 */
1935 PVOID Reserved3
; /* 48/58 */
1936 ULONG HandleCount
; /* 4c/60 */
1937 BYTE Reserved4
[4]; /* 50/64 */
1938 PVOID Reserved5
[11]; /* 54/68 */
1939 SIZE_T PeakPagefileUsage
; /* 80/c0 */
1940 SIZE_T PrivatePageCount
; /* 84/c8 */
1941 LARGE_INTEGER Reserved6
[6]; /* 88/d0 */
1943 } SYSTEM_PROCESS_INFORMATION
, *PSYSTEM_PROCESS_INFORMATION
;
1945 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION
{
1946 ULONG RegistryQuotaAllowed
;
1947 ULONG RegistryQuotaUsed
;
1949 } SYSTEM_REGISTRY_QUOTA_INFORMATION
, *PSYSTEM_REGISTRY_QUOTA_INFORMATION
;
1951 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY
{
1952 ULONG TimeAdjustment
;
1953 ULONG TimeIncrement
;
1954 BOOLEAN TimeAdjustmentDisabled
;
1955 } SYSTEM_TIME_ADJUSTMENT_QUERY
, *PSYSTEM_TIME_ADJUSTMENT_QUERY
;
1957 typedef struct _SYSTEM_TIME_ADJUSTMENT
{
1958 ULONG TimeAdjustment
;
1959 BOOLEAN TimeAdjustmentDisabled
;
1960 } SYSTEM_TIME_ADJUSTMENT
, *PSYSTEM_TIME_ADJUSTMENT
;
1962 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
1964 SystemFirmwareTable_Enumerate
= 0,
1965 SystemFirmwareTable_Get
= 1
1966 } SYSTEM_FIRMWARE_TABLE_ACTION
, *PSYSTEM_FIRMWARE_TABLE_ACTION
;
1968 /* System Information Class 0x4C */
1970 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
1972 ULONG ProviderSignature
;
1973 SYSTEM_FIRMWARE_TABLE_ACTION Action
;
1975 ULONG TableBufferLength
;
1976 UCHAR TableBuffer
[1];
1977 } SYSTEM_FIRMWARE_TABLE_INFORMATION
, *PSYSTEM_FIRMWARE_TABLE_INFORMATION
;
1979 typedef struct _TIME_FIELDS
1986 CSHORT Milliseconds
;
1988 } TIME_FIELDS
, *PTIME_FIELDS
;
1990 typedef struct _WINSTATIONINFORMATIONW
{
1993 BYTE Reserved3
[1140];
1994 } WINSTATIONINFORMATIONW
, *PWINSTATIONINFORMATIONW
;
1996 typedef BOOLEAN (WINAPI
* PWINSTATIONQUERYINFORMATIONW
)(HANDLE
,ULONG
,WINSTATIONINFOCLASS
,PVOID
,ULONG
,PULONG
);
1998 typedef struct _LDR_RESOURCE_INFO
2003 } LDR_RESOURCE_INFO
, *PLDR_RESOURCE_INFO
;
2006 /* debug buffer definitions */
2008 typedef struct _DEBUG_BUFFER
{
2009 HANDLE SectionHandle
;
2011 PVOID RemoteSectionBase
;
2012 ULONG SectionBaseDelta
;
2013 HANDLE EventPairHandle
;
2015 HANDLE RemoteThreadHandle
;
2016 ULONG InfoClassMask
;
2018 ULONG AllocatedSize
;
2020 PVOID ModuleInformation
;
2021 PVOID BackTraceInformation
;
2022 PVOID HeapInformation
;
2023 PVOID LockInformation
;
2025 } DEBUG_BUFFER
, *PDEBUG_BUFFER
;
2027 #define PDI_MODULES 0x01
2028 #define PDI_BACKTRACE 0x02
2029 #define PDI_HEAPS 0x04
2030 #define PDI_HEAP_TAGS 0x08
2031 #define PDI_HEAP_BLOCKS 0x10
2032 #define PDI_LOCKS 0x20
2034 typedef struct _DEBUG_MODULE_INFORMATION
{
2042 USHORT ModuleNameOffset
;
2043 CHAR ImageName
[256];
2044 } DEBUG_MODULE_INFORMATION
, *PDEBUG_MODULE_INFORMATION
;
2046 typedef struct _DEBUG_HEAP_INFORMATION
{
2058 } DEBUG_HEAP_INFORMATION
, *PDEBUG_HEAP_INFORMATION
;
2060 typedef struct _DEBUG_LOCK_INFORMATION
{
2063 USHORT CreatorBackTraceIndex
;
2064 ULONG OwnerThreadId
;
2066 ULONG ContentionCount
;
2068 ULONG RecursionCount
;
2069 ULONG NumberOfSharedWaiters
;
2070 ULONG NumberOfExclusiveWaiters
;
2071 } DEBUG_LOCK_INFORMATION
, *PDEBUG_LOCK_INFORMATION
;
2073 typedef struct _PORT_MESSAGE_HEADER
{
2077 USHORT VirtualRangesOffset
;
2081 } PORT_MESSAGE_HEADER
, *PPORT_MESSAGE_HEADER
, PORT_MESSAGE
, *PPORT_MESSAGE
;
2083 typedef unsigned short RTL_ATOM
, *PRTL_ATOM
;
2085 /* Wine doesn't implement atom table as NT does:
2086 * - in NT, atom tables are user space tables, which ntdll directly accesses
2087 * - on Wine, (even local) atom tables are wineserver objects, hence a HANDLE
2089 typedef struct atom_table
*RTL_ATOM_TABLE
, **PRTL_ATOM_TABLE
;
2091 typedef enum _ATOM_INFORMATION_CLASS
{
2092 AtomBasicInformation
= 0,
2093 AtomTableInformation
= 1,
2094 } ATOM_INFORMATION_CLASS
;
2096 typedef struct _ATOM_BASIC_INFORMATION
{
2097 USHORT ReferenceCount
;
2101 } ATOM_BASIC_INFORMATION
, *PATOM_BASIC_INFORMATION
;
2103 /* FIXME: names probably not correct */
2104 typedef struct _RTL_HANDLE
2106 struct _RTL_HANDLE
* Next
;
2109 /* FIXME: names probably not correct */
2110 typedef struct _RTL_HANDLE_TABLE
2112 ULONG MaxHandleCount
; /* 0x00 */
2113 ULONG HandleSize
; /* 0x04 */
2114 ULONG Unused
[2]; /* 0x08-0x0c */
2115 PVOID NextFree
; /* 0x10 */
2116 PVOID FirstHandle
; /* 0x14 */
2117 PVOID ReservedMemory
; /* 0x18 */
2118 PVOID MaxHandle
; /* 0x1c */
2121 /***********************************************************************
2125 /* flags for NtCreateFile and NtOpenFile */
2126 #define FILE_DIRECTORY_FILE 0x00000001
2127 #define FILE_WRITE_THROUGH 0x00000002
2128 #define FILE_SEQUENTIAL_ONLY 0x00000004
2129 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
2130 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
2131 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
2132 #define FILE_NON_DIRECTORY_FILE 0x00000040
2133 #define FILE_CREATE_TREE_CONNECTION 0x00000080
2134 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
2135 #define FILE_NO_EA_KNOWLEDGE 0x00000200
2136 #define FILE_OPEN_FOR_RECOVERY 0x00000400
2137 #define FILE_RANDOM_ACCESS 0x00000800
2138 #define FILE_DELETE_ON_CLOSE 0x00001000
2139 #define FILE_OPEN_BY_FILE_ID 0x00002000
2140 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
2141 #define FILE_NO_COMPRESSION 0x00008000
2142 #define FILE_RESERVE_OPFILTER 0x00100000
2143 #define FILE_OPEN_REPARSE_POINT 0x00200000
2144 #define FILE_OPEN_OFFLINE_FILE 0x00400000
2145 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
2147 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
2148 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
2150 /* status for NtCreateFile or NtOpenFile */
2151 #define FILE_SUPERSEDED 0
2152 #define FILE_OPENED 1
2153 #define FILE_CREATED 2
2154 #define FILE_OVERWRITTEN 3
2155 #define FILE_EXISTS 4
2156 #define FILE_DOES_NOT_EXIST 5
2158 /* disposition for NtCreateFile */
2159 #define FILE_SUPERSEDE 0
2161 #define FILE_CREATE 2
2162 #define FILE_OPEN_IF 3
2163 #define FILE_OVERWRITE 4
2164 #define FILE_OVERWRITE_IF 5
2165 #define FILE_MAXIMUM_DISPOSITION 5
2167 /* Characteristics of a File System */
2168 #define FILE_REMOVABLE_MEDIA 0x00000001
2169 #define FILE_READ_ONLY_DEVICE 0x00000002
2170 #define FILE_FLOPPY_DISKETTE 0x00000004
2171 #define FILE_WRITE_ONE_MEDIA 0x00000008
2172 #define FILE_REMOTE_DEVICE 0x00000010
2173 #define FILE_DEVICE_IS_MOUNTED 0x00000020
2174 #define FILE_VIRTUAL_VOLUME 0x00000040
2175 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
2176 #define FILE_DEVICE_SECURE_OPEN 0x00000100
2177 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
2178 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
2179 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
2180 #define FILE_CHARACTERISTIC_CSV 0x00010000
2181 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
2182 #define FILE_PORTABLE_DEVICE 0x00040000
2184 /* options for NtCreateNamedPipeFile */
2185 #define FILE_PIPE_INBOUND 0x00000000
2186 #define FILE_PIPE_OUTBOUND 0x00000001
2187 #define FILE_PIPE_FULL_DUPLEX 0x00000002
2189 /* options for pipe's type */
2190 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
2191 #define FILE_PIPE_TYPE_BYTE 0x00000000
2192 /* options for pipe's message mode */
2193 #define FILE_PIPE_MESSAGE_MODE 0x00000001
2194 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
2195 /* options for pipe's blocking mode */
2196 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
2197 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
2198 /* and client / server end */
2199 #define FILE_PIPE_SERVER_END 0x00000001
2200 #define FILE_PIPE_CLIENT_END 0x00000000
2202 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
2204 #define LOGONID_CURRENT ((ULONG)-1)
2206 #define OBJ_INHERIT 0x00000002
2207 #define OBJ_PERMANENT 0x00000010
2208 #define OBJ_EXCLUSIVE 0x00000020
2209 #define OBJ_CASE_INSENSITIVE 0x00000040
2210 #define OBJ_OPENIF 0x00000080
2211 #define OBJ_OPENLINK 0x00000100
2212 #define OBJ_KERNEL_HANDLE 0x00000200
2213 #define OBJ_VALID_ATTRIBUTES 0x000003F2
2215 #define SERVERNAME_CURRENT ((HANDLE)NULL)
2217 typedef void (CALLBACK
*PNTAPCFUNC
)(ULONG_PTR
,ULONG_PTR
,ULONG_PTR
); /* FIXME: not the right name */
2218 typedef void (CALLBACK
*PRTL_THREAD_START_ROUTINE
)(LPVOID
); /* FIXME: not the right name */
2219 typedef DWORD (CALLBACK
*PRTL_WORK_ITEM_ROUTINE
)(LPVOID
); /* FIXME: not the right name */
2220 typedef void (NTAPI
*RTL_WAITORTIMERCALLBACKFUNC
)(PVOID
,BOOLEAN
); /* FIXME: not the right name */
2223 /* DbgPrintEx default levels */
2224 #define DPFLTR_ERROR_LEVEL 0
2225 #define DPFLTR_WARNING_LEVEL 1
2226 #define DPFLTR_TRACE_LEVEL 2
2227 #define DPFLTR_INFO_LEVEL 3
2228 #define DPFLTR_MASK 0x8000000
2230 /* Well-known LUID values */
2231 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
2232 #define SE_CREATE_TOKEN_PRIVILEGE 2
2233 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
2234 #define SE_LOCK_MEMORY_PRIVILEGE 4
2235 #define SE_INCREASE_QUOTA_PRIVILEGE 5
2236 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
2237 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
2238 #define SE_TCB_PRIVILEGE 7
2239 #define SE_SECURITY_PRIVILEGE 8
2240 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
2241 #define SE_LOAD_DRIVER_PRIVILEGE 10
2242 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
2243 #define SE_SYSTEMTIME_PRIVILEGE 12
2244 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
2245 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
2246 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
2247 #define SE_CREATE_PERMANENT_PRIVILEGE 16
2248 #define SE_BACKUP_PRIVILEGE 17
2249 #define SE_RESTORE_PRIVILEGE 18
2250 #define SE_SHUTDOWN_PRIVILEGE 19
2251 #define SE_DEBUG_PRIVILEGE 20
2252 #define SE_AUDIT_PRIVILEGE 21
2253 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
2254 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
2255 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
2256 #define SE_UNDOCK_PRIVILEGE 25
2257 #define SE_SYNC_AGENT_PRIVILEGE 26
2258 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
2259 #define SE_MANAGE_VOLUME_PRIVILEGE 28
2260 #define SE_IMPERSONATE_PRIVILEGE 29
2261 #define SE_CREATE_GLOBAL_PRIVILEGE 30
2262 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
2264 /* NtGlobalFlag bits */
2265 #define FLG_STOP_ON_EXCEPTION 0x00000001
2266 #define FLG_SHOW_LDR_SNAPS 0x00000002
2267 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
2268 #define FLG_STOP_ON_HUNG_GUI 0x00000008
2269 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
2270 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
2271 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
2272 #define FLG_HEAP_VALIDATE_ALL 0x00000080
2273 #define FLG_APPLICATION_VERIFIER 0x00000100
2274 #define FLG_POOL_ENABLE_TAGGING 0x00000400
2275 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
2276 #define FLG_USER_STACK_TRACE_DB 0x00001000
2277 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
2278 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
2279 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
2280 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
2281 #define FLG_ENABLE_CSRDEBUG 0x00020000
2282 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
2283 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
2284 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
2285 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
2286 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
2287 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
2288 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
2289 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
2290 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
2291 #define FLG_DISABLE_DBGPRINT 0x08000000
2292 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
2293 #define FLG_LDR_TOP_DOWN 0x20000000
2294 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
2295 #define FLG_DISABLE_PROTDLLS 0x80000000
2297 /* Rtl*Registry* functions structs and defines */
2298 #define RTL_REGISTRY_ABSOLUTE 0
2299 #define RTL_REGISTRY_SERVICES 1
2300 #define RTL_REGISTRY_CONTROL 2
2301 #define RTL_REGISTRY_WINDOWS_NT 3
2302 #define RTL_REGISTRY_DEVICEMAP 4
2303 #define RTL_REGISTRY_USER 5
2305 #define RTL_REGISTRY_HANDLE 0x40000000
2306 #define RTL_REGISTRY_OPTIONAL 0x80000000
2308 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
2309 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
2310 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
2311 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
2312 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
2313 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
2314 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
2315 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
2317 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
2319 typedef NTSTATUS (WINAPI
*PRTL_QUERY_REGISTRY_ROUTINE
)( PCWSTR ValueName
,
2324 PVOID EntryContext
);
2326 typedef struct _RTL_QUERY_REGISTRY_TABLE
2328 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine
;
2334 ULONG DefaultLength
;
2335 } RTL_QUERY_REGISTRY_TABLE
, *PRTL_QUERY_REGISTRY_TABLE
;
2337 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
2339 PUNICODE_STRING ValueName
;
2343 } KEY_MULTIPLE_VALUE_INFORMATION
, *PKEY_MULTIPLE_VALUE_INFORMATION
;
2345 typedef VOID (CALLBACK
*PRTL_OVERLAPPED_COMPLETION_ROUTINE
)(DWORD
,DWORD
,LPVOID
);
2347 typedef VOID (CALLBACK
*PTIMER_APC_ROUTINE
) ( PVOID
, ULONG
, LONG
);
2349 typedef enum _EVENT_INFORMATION_CLASS
{
2350 EventBasicInformation
2351 } EVENT_INFORMATION_CLASS
, *PEVENT_INFORMATION_CLASS
;
2353 typedef struct _EVENT_BASIC_INFORMATION
{
2354 EVENT_TYPE EventType
;
2356 } EVENT_BASIC_INFORMATION
, *PEVENT_BASIC_INFORMATION
;
2358 typedef enum _SEMAPHORE_INFORMATION_CLASS
{
2359 SemaphoreBasicInformation
2360 } SEMAPHORE_INFORMATION_CLASS
, *PSEMAPHORE_INFORMATION_CLASS
;
2362 typedef struct _SEMAPHORE_BASIC_INFORMATION
{
2365 } SEMAPHORE_BASIC_INFORMATION
, *PSEMAPHORE_BASIC_INFORMATION
;
2367 typedef enum _SECTION_INFORMATION_CLASS
2369 SectionBasicInformation
,
2370 SectionImageInformation
,
2371 } SECTION_INFORMATION_CLASS
;
2373 typedef struct _SECTION_BASIC_INFORMATION
{
2377 } SECTION_BASIC_INFORMATION
, *PSECTION_BASIC_INFORMATION
;
2379 typedef struct _SECTION_IMAGE_INFORMATION
{
2380 PVOID TransferAddress
;
2382 SIZE_T MaximumStackSize
;
2383 SIZE_T CommittedStackSize
;
2384 ULONG SubSystemType
;
2385 WORD SubsystemVersionLow
;
2386 WORD SubsystemVersionHigh
;
2388 USHORT ImageCharacteristics
;
2389 USHORT DllCharacteristics
;
2391 BOOLEAN ImageContainsCode
;
2397 UCHAR ComPlusNativeReady
: 1;
2398 UCHAR ComPlusILOnly
: 1;
2399 UCHAR ImageDynamicallyRelocated
: 1;
2400 UCHAR ImageMappedFlat
: 1;
2401 UCHAR BaseBelow4gb
: 1;
2406 ULONG ImageFileSize
;
2408 } SECTION_IMAGE_INFORMATION
, *PSECTION_IMAGE_INFORMATION
;
2410 typedef struct _LPC_SECTION_WRITE
{
2412 HANDLE SectionHandle
;
2413 ULONG SectionOffset
;
2416 PVOID TargetViewBase
;
2417 } LPC_SECTION_WRITE
, *PLPC_SECTION_WRITE
;
2419 typedef struct _LPC_SECTION_READ
{
2423 } LPC_SECTION_READ
, *PLPC_SECTION_READ
;
2425 typedef struct _LPC_MESSAGE
{
2429 USHORT VirtualRangesOffset
;
2431 ULONG_PTR MessageId
;
2432 ULONG_PTR SectionSize
;
2433 UCHAR Data
[ANYSIZE_ARRAY
];
2434 } LPC_MESSAGE
, *PLPC_MESSAGE
;
2436 typedef struct _RTL_USER_PROCESS_INFORMATION
2442 SECTION_IMAGE_INFORMATION ImageInformation
;
2443 } RTL_USER_PROCESS_INFORMATION
, *PRTL_USER_PROCESS_INFORMATION
;
2445 typedef enum _SHUTDOWN_ACTION
{
2449 } SHUTDOWN_ACTION
, *PSHUTDOWN_ACTION
;
2451 typedef struct _COUNTED_REASON_CONTEXT
2459 UNICODE_STRING ResourceFileName
;
2460 USHORT ResourceReasonId
;
2462 UNICODE_STRING
*ReasonStrings
;
2464 UNICODE_STRING SimpleString
;
2466 } COUNTED_REASON_CONTEXT
, *PCOUNTED_REASON_CONTEXT
;
2468 typedef enum _KPROFILE_SOURCE
{
2470 ProfileAlignmentFixup
,
2473 ProfileLoadInstructions
,
2474 ProfilePipelineFrozen
,
2475 ProfileBranchInstructions
,
2476 ProfileTotalNonissues
,
2477 ProfileDcacheMisses
,
2478 ProfileIcacheMisses
,
2480 ProfileBranchMispredictions
,
2481 ProfileStoreInstructions
,
2482 ProfileFpInstructions
,
2483 ProfileIntegerInstructions
,
2487 ProfileSpecialInstructions
,
2489 ProfileIcacheIssues
,
2490 ProfileDcacheAccesses
,
2491 ProfileMemoryBarrierCycles
,
2492 ProfileLoadLinkedIssues
,
2494 } KPROFILE_SOURCE
, *PKPROFILE_SOURCE
;
2496 typedef struct _DIRECTORY_BASIC_INFORMATION
{
2497 UNICODE_STRING ObjectName
;
2498 UNICODE_STRING ObjectTypeName
;
2499 } DIRECTORY_BASIC_INFORMATION
, *PDIRECTORY_BASIC_INFORMATION
;
2501 typedef struct _INITIAL_TEB
{
2503 void *OldStackLimit
;
2506 void *DeallocationStack
;
2507 } INITIAL_TEB
, *PINITIAL_TEB
;
2509 typedef enum _PORT_INFORMATION_CLASS
{
2511 } PORT_INFORMATION_CLASS
, *PPORT_INFORMATION_CLASS
;
2513 typedef enum _IO_COMPLETION_INFORMATION_CLASS
{
2514 IoCompletionBasicInformation
2515 } IO_COMPLETION_INFORMATION_CLASS
, *PIO_COMPLETION_INFORMATION_CLASS
;
2517 typedef struct _FILE_COMPLETION_INFORMATION
{
2518 HANDLE CompletionPort
;
2519 ULONG_PTR CompletionKey
;
2520 } FILE_COMPLETION_INFORMATION
, *PFILE_COMPLETION_INFORMATION
;
2522 #define IO_COMPLETION_QUERY_STATE 0x0001
2523 #define IO_COMPLETION_MODIFY_STATE 0x0002
2524 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
2526 typedef struct _FILE_IO_COMPLETION_INFORMATION
{
2527 ULONG_PTR CompletionKey
;
2528 ULONG_PTR CompletionValue
;
2529 IO_STATUS_BLOCK IoStatusBlock
;
2530 } FILE_IO_COMPLETION_INFORMATION
, *PFILE_IO_COMPLETION_INFORMATION
;
2532 typedef enum _HARDERROR_RESPONSE_OPTION
{
2533 OptionAbortRetryIgnore
,
2539 OptionShutdownSystem
2540 } HARDERROR_RESPONSE_OPTION
, *PHARDERROR_RESPONSE_OPTION
;
2542 typedef enum _HARDERROR_RESPONSE
{
2543 ResponseReturnToCaller
,
2552 } HARDERROR_RESPONSE
, *PHARDERROR_RESPONSE
;
2554 typedef enum _SYSDBG_COMMAND
{
2555 SysDbgQueryModuleInformation
,
2556 SysDbgQueryTraceInformation
,
2557 SysDbgSetTracepoint
,
2558 SysDbgSetSpecialCall
,
2559 SysDbgClearSpecialCalls
,
2560 SysDbgQuerySpecialCalls
,
2566 SysDbgWritePhysical
,
2567 SysDbgReadControlSpace
,
2568 SysDbgWriteControlSpace
,
2575 } SYSDBG_COMMAND
, *PSYSDBG_COMMAND
;
2577 typedef struct _CPTABLEINFO
2580 USHORT MaximumCharacterSize
;
2582 USHORT UniDefaultChar
;
2583 USHORT TransDefaultChar
;
2584 USHORT TransUniDefaultChar
;
2585 USHORT DBCSCodePage
;
2587 USHORT
*MultiByteTable
;
2588 void *WideCharTable
;
2590 USHORT
*DBCSOffsets
;
2591 } CPTABLEINFO
, *PCPTABLEINFO
;
2593 typedef struct _NLSTABLEINFO
2595 CPTABLEINFO OemTableInfo
;
2596 CPTABLEINFO AnsiTableInfo
;
2597 USHORT
*UpperCaseTable
;
2598 USHORT
*LowerCaseTable
;
2599 } NLSTABLEINFO
, *PNLSTABLEINFO
;
2601 /*************************************************************************
2604 * Those are not part of standard Winternl.h
2607 typedef struct _LDR_SERVICE_TAG_RECORD
2609 struct _LDR_SERVICE_TAG_RECORD
*Next
;
2611 } LDR_SERVICE_TAG_RECORD
, *PLDR_SERVICE_TAG_RECORD
;
2613 typedef struct _LDRP_CSLIST
2615 SINGLE_LIST_ENTRY
*Tail
;
2616 } LDRP_CSLIST
, *PLDRP_CSLIST
;
2618 typedef enum _LDR_DDAG_STATE
2620 LdrModulesMerged
= -5,
2621 LdrModulesInitError
= -4,
2622 LdrModulesSnapError
= -3,
2623 LdrModulesUnloaded
= -2,
2624 LdrModulesUnloading
= -1,
2625 LdrModulesPlaceHolder
= 0,
2626 LdrModulesMapping
= 1,
2627 LdrModulesMapped
= 2,
2628 LdrModulesWaitingForDependencies
= 3,
2629 LdrModulesSnapping
= 4,
2630 LdrModulesSnapped
= 5,
2631 LdrModulesCondensed
= 6,
2632 LdrModulesReadyToInit
= 7,
2633 LdrModulesInitializing
= 8,
2634 LdrModulesReadyToRun
= 9,
2637 typedef struct _LDR_DDAG_NODE
2640 LDR_SERVICE_TAG_RECORD
*ServiceTagList
;
2642 ULONG ReferenceCount
;
2643 ULONG DependencyCount
;
2646 LDRP_CSLIST Dependencies
;
2647 SINGLE_LIST_ENTRY RemovalLink
;
2649 LDRP_CSLIST IncomingDependencies
;
2650 LDR_DDAG_STATE State
;
2651 SINGLE_LIST_ENTRY CondenseLink
;
2652 ULONG PreorderNumber
;
2654 } LDR_DDAG_NODE
, *PLDR_DDAG_NODE
;
2656 typedef enum _LDR_DLL_LOAD_REASON
2658 LoadReasonStaticDependency
,
2659 LoadReasonStaticForwarderDependency
,
2660 LoadReasonDynamicForwarderDependency
,
2661 LoadReasonDelayloadDependency
,
2662 LoadReasonDynamicLoad
,
2663 LoadReasonAsImageLoad
,
2664 LoadReasonAsDataLoad
,
2665 LoadReasonUnknown
= -1
2666 } LDR_DLL_LOAD_REASON
, *PLDR_DLL_LOAD_REASON
;
2668 typedef struct _LDR_DATA_TABLE_ENTRY
2670 LIST_ENTRY InLoadOrderLinks
;
2671 LIST_ENTRY InMemoryOrderLinks
;
2672 LIST_ENTRY InInitializationOrderLinks
;
2676 UNICODE_STRING FullDllName
;
2677 UNICODE_STRING BaseDllName
;
2681 HANDLE SectionHandle
;
2683 ULONG TimeDateStamp
;
2684 HANDLE ActivationContext
;
2686 LDR_DDAG_NODE
* DdagNode
;
2687 LIST_ENTRY NodeModuleLink
;
2688 struct _LDRP_LOAD_CONTEXT
*LoadContext
;
2689 void* ParentDllBase
;
2690 void* SwitchBackContext
;
2691 RTL_BALANCED_NODE BaseAddressIndexNode
;
2692 RTL_BALANCED_NODE MappingInfoIndexNode
;
2693 ULONG_PTR OriginalBase
;
2694 LARGE_INTEGER LoadTime
;
2695 ULONG BaseNameHashValue
;
2696 LDR_DLL_LOAD_REASON LoadReason
;
2697 ULONG ImplicitPathOptions
;
2698 ULONG ReferenceCount
;
2699 } LDR_DATA_TABLE_ENTRY
, *PLDR_DATA_TABLE_ENTRY
;
2701 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
2704 const UNICODE_STRING
*FullDllName
;
2705 const UNICODE_STRING
*BaseDllName
;
2708 } LDR_DLL_LOADED_NOTIFICATION_DATA
, *PLDR_DLL_LOADED_NOTIFICATION_DATA
;
2710 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
2713 const UNICODE_STRING
*FullDllName
;
2714 const UNICODE_STRING
*BaseDllName
;
2717 } LDR_DLL_UNLOADED_NOTIFICATION_DATA
, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA
;
2719 typedef union _LDR_DLL_NOTIFICATION_DATA
2721 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded
;
2722 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded
;
2723 } LDR_DLL_NOTIFICATION_DATA
, *PLDR_DLL_NOTIFICATION_DATA
;
2725 typedef void (CALLBACK
*PLDR_DLL_NOTIFICATION_FUNCTION
)(ULONG
, LDR_DLL_NOTIFICATION_DATA
*, void*);
2727 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
2728 #define LDR_IMAGE_IS_DLL 0x00000004
2729 #define LDR_LOAD_IN_PROGRESS 0x00001000
2730 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
2731 #define LDR_NO_DLL_CALLS 0x00040000
2732 #define LDR_PROCESS_ATTACHED 0x00080000
2733 #define LDR_COR_IMAGE 0x00400000
2734 #define LDR_COR_ILONLY 0x01000000
2736 /* these ones is Wine specific */
2737 #define LDR_DONT_RESOLVE_REFS 0x40000000
2738 #define LDR_WINE_INTERNAL 0x80000000
2740 /* flag for LdrAddRefDll */
2741 #define LDR_ADDREF_DLL_PIN 0x00000001
2743 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
2744 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
2746 /* FIXME: to be checked */
2747 #define MAXIMUM_FILENAME_LENGTH 256
2749 typedef struct _SYSTEM_MODULE
2751 PVOID Section
; /* 00/00 */
2752 PVOID MappedBaseAddress
; /* 04/08 */
2753 PVOID ImageBaseAddress
; /* 08/10 */
2754 ULONG ImageSize
; /* 0c/18 */
2755 ULONG Flags
; /* 10/1c */
2756 WORD LoadOrderIndex
; /* 14/20 */
2757 WORD InitOrderIndex
; /* 16/22 */
2758 WORD LoadCount
; /* 18/24 */
2759 WORD NameOffset
; /* 1a/26 */
2760 BYTE Name
[MAXIMUM_FILENAME_LENGTH
]; /* 1c/28 */
2761 } SYSTEM_MODULE
, *PSYSTEM_MODULE
;
2763 typedef struct _SYSTEM_MODULE_INFORMATION
2766 SYSTEM_MODULE Modules
[1]; /* FIXME: should be Modules[0] */
2767 } SYSTEM_MODULE_INFORMATION
, *PSYSTEM_MODULE_INFORMATION
;
2769 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
2770 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
2771 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
2772 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
2773 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
2774 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
2775 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
2776 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
2777 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
2778 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
2779 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
2781 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
2782 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
2783 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
2784 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
2785 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
2786 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
2788 typedef LONG (CALLBACK
*PRTL_EXCEPTION_FILTER
)(PEXCEPTION_POINTERS
);
2790 typedef void (CALLBACK
*PTP_IO_CALLBACK
)(PTP_CALLBACK_INSTANCE
,void*,void*,IO_STATUS_BLOCK
*,PTP_IO
);
2792 #define PS_ATTRIBUTE_THREAD 0x00010000
2793 #define PS_ATTRIBUTE_INPUT 0x00020000
2794 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
2796 typedef enum _PS_ATTRIBUTE_NUM
2798 PsAttributeParentProcess
,
2799 PsAttributeDebugPort
,
2801 PsAttributeClientId
,
2802 PsAttributeTebAddress
,
2803 PsAttributeImageName
,
2804 PsAttributeImageInfo
,
2805 PsAttributeMemoryReserve
,
2806 PsAttributePriorityClass
,
2807 PsAttributeErrorMode
,
2808 PsAttributeStdHandleInfo
,
2809 PsAttributeHandleList
,
2810 PsAttributeGroupAffinity
,
2811 PsAttributePreferredNode
,
2812 PsAttributeIdealProcessor
,
2813 PsAttributeUmsThread
,
2814 PsAttributeMitigationOptions
,
2815 PsAttributeProtectionLevel
,
2816 PsAttributeSecureProcess
,
2818 PsAttributeChildProcessPolicy
,
2819 PsAttributeAllApplicationPackagesPolicy
,
2820 PsAttributeWin32kFilter
,
2821 PsAttributeSafeOpenPromptOriginClaim
,
2822 PsAttributeBnoIsolation
,
2823 PsAttributeDesktopAppPolicy
,
2828 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2829 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2830 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2831 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
2832 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
2833 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
2834 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
2835 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
2836 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
2837 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
2838 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
2839 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
2840 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2841 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
2842 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2843 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2844 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2845 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
2846 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
2847 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
2848 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
2849 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
2850 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
2851 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
2852 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
2854 typedef struct _PS_ATTRIBUTE
2856 ULONG_PTR Attribute
;
2863 SIZE_T
*ReturnLength
;
2866 typedef struct _PS_ATTRIBUTE_LIST
2869 PS_ATTRIBUTE Attributes
[1];
2870 } PS_ATTRIBUTE_LIST
, *PPS_ATTRIBUTE_LIST
;
2872 typedef enum _PS_CREATE_STATE
2874 PsCreateInitialState
,
2875 PsCreateFailOnFileOpen
,
2876 PsCreateFailOnSectionCreate
,
2877 PsCreateFailExeFormat
,
2878 PsCreateFailMachineMismatch
,
2879 PsCreateFailExeName
,
2881 PsCreateMaximumStates
2884 typedef struct _PS_CREATE_INFO
2887 PS_CREATE_STATE State
;
2897 UCHAR WriteOutputOnExit
: 1;
2898 UCHAR DetectManifest
: 1;
2899 UCHAR IFEOSkipDebugger
: 1;
2900 UCHAR IFEODoNotPropagateKeyState
: 1;
2901 UCHAR SpareBits1
: 4;
2902 UCHAR SpareBits2
: 8;
2903 USHORT ProhibitedImageCharacteristics
: 16;
2906 ACCESS_MASK AdditionalFileAccess
;
2914 USHORT DllCharacteristics
;
2927 UCHAR ProtectedProcess
: 1;
2928 UCHAR AddressSpaceOverride
: 1;
2929 UCHAR DevOverrideEnabled
: 1;
2930 UCHAR ManifestDetected
: 1;
2931 UCHAR ProtectedProcessLight
: 1;
2932 UCHAR SpareBits1
: 3;
2933 UCHAR SpareBits2
: 8;
2934 USHORT SpareBits3
: 16;
2938 HANDLE SectionHandle
;
2939 ULONGLONG UserProcessParametersNative
;
2940 ULONG UserProcessParametersWow64
;
2941 ULONG CurrentParameterFlags
;
2942 ULONGLONG PebAddressNative
;
2943 ULONG PebAddressWow64
;
2944 ULONGLONG ManifestAddress
;
2948 } PS_CREATE_INFO
, *PPS_CREATE_INFO
;
2950 /***********************************************************************
2951 * Function declarations
2954 NTSYSAPI
void WINAPI
DbgBreakPoint(void);
2955 NTSYSAPI NTSTATUS WINAPIV
DbgPrint(LPCSTR fmt
, ...);
2956 NTSYSAPI NTSTATUS WINAPIV
DbgPrintEx(ULONG iComponentId
, ULONG Level
, LPCSTR fmt
, ...);
2957 NTSYSAPI NTSTATUS WINAPI
DbgUiIssueRemoteBreakin(HANDLE
);
2958 NTSYSAPI
void WINAPI
DbgUiRemoteBreakin(void*);
2959 NTSYSAPI
void WINAPI
DbgUserBreakPoint(void);
2960 NTSYSAPI NTSTATUS WINAPI
LdrAccessResource(HMODULE
,const IMAGE_RESOURCE_DATA_ENTRY
*,void**,PULONG
);
2961 NTSYSAPI NTSTATUS WINAPI
LdrAddDllDirectory(const UNICODE_STRING
*,void**);
2962 NTSYSAPI NTSTATUS WINAPI
LdrAddRefDll(ULONG
,HMODULE
);
2963 NTSYSAPI NTSTATUS WINAPI
LdrDisableThreadCalloutsForDll(HMODULE
);
2964 NTSYSAPI NTSTATUS WINAPI
LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY
*);
2965 NTSYSAPI NTSTATUS WINAPI
LdrFindResourceDirectory_U(HMODULE
,const LDR_RESOURCE_INFO
*,ULONG
,const IMAGE_RESOURCE_DIRECTORY
**);
2966 NTSYSAPI NTSTATUS WINAPI
LdrFindResource_U(HMODULE
,const LDR_RESOURCE_INFO
*,ULONG
,const IMAGE_RESOURCE_DATA_ENTRY
**);
2967 NTSYSAPI NTSTATUS WINAPI
LdrGetDllDirectory(UNICODE_STRING
*);
2968 NTSYSAPI NTSTATUS WINAPI
LdrGetDllHandle(LPCWSTR
, ULONG
, const UNICODE_STRING
*, HMODULE
*);
2969 NTSYSAPI NTSTATUS WINAPI
LdrGetDllPath(PCWSTR
,ULONG
,PWSTR
*,PWSTR
*);
2970 NTSYSAPI NTSTATUS WINAPI
LdrGetProcedureAddress(HMODULE
, const ANSI_STRING
*, ULONG
, void**);
2971 NTSYSAPI NTSTATUS WINAPI
LdrLoadDll(LPCWSTR
, DWORD
, const UNICODE_STRING
*, HMODULE
*);
2972 NTSYSAPI NTSTATUS WINAPI
LdrLockLoaderLock(ULONG
,ULONG
*,ULONG_PTR
*);
2973 IMAGE_BASE_RELOCATION
* WINAPI
LdrProcessRelocationBlock(void*,UINT
,USHORT
*,INT_PTR
);
2974 NTSYSAPI NTSTATUS WINAPI
LdrQueryImageFileExecutionOptions(const UNICODE_STRING
*,LPCWSTR
,ULONG
,void*,ULONG
,ULONG
*);
2975 NTSYSAPI NTSTATUS WINAPI
LdrQueryProcessModuleInformation(SYSTEM_MODULE_INFORMATION
*, ULONG
, ULONG
*);
2976 NTSYSAPI NTSTATUS WINAPI
LdrRegisterDllNotification(ULONG
,PLDR_DLL_NOTIFICATION_FUNCTION
,void*,void**);
2977 NTSYSAPI NTSTATUS WINAPI
LdrRemoveDllDirectory(void*);
2978 NTSYSAPI NTSTATUS WINAPI
LdrSetDefaultDllDirectories(ULONG
);
2979 NTSYSAPI NTSTATUS WINAPI
LdrSetDllDirectory(const UNICODE_STRING
*);
2980 NTSYSAPI
void WINAPI
LdrShutdownProcess(void);
2981 NTSYSAPI
void WINAPI
LdrShutdownThread(void);
2982 NTSYSAPI NTSTATUS WINAPI
LdrUnloadDll(HMODULE
);
2983 NTSYSAPI NTSTATUS WINAPI
LdrUnlockLoaderLock(ULONG
,ULONG_PTR
);
2984 NTSYSAPI NTSTATUS WINAPI
LdrUnregisterDllNotification(void*);
2985 NTSYSAPI NTSTATUS WINAPI
NtAcceptConnectPort(PHANDLE
,ULONG
,PLPC_MESSAGE
,BOOLEAN
,PLPC_SECTION_WRITE
,PLPC_SECTION_READ
);
2986 NTSYSAPI NTSTATUS WINAPI
NtAccessCheck(PSECURITY_DESCRIPTOR
,HANDLE
,ACCESS_MASK
,PGENERIC_MAPPING
,PPRIVILEGE_SET
,PULONG
,PULONG
,NTSTATUS
*);
2987 NTSYSAPI NTSTATUS WINAPI
NtAccessCheckAndAuditAlarm(PUNICODE_STRING
,HANDLE
,PUNICODE_STRING
,PUNICODE_STRING
,PSECURITY_DESCRIPTOR
,ACCESS_MASK
,PGENERIC_MAPPING
,BOOLEAN
,PACCESS_MASK
,PBOOLEAN
,PBOOLEAN
);
2988 NTSYSAPI NTSTATUS WINAPI
NtAddAtom(const WCHAR
*,ULONG
,RTL_ATOM
*);
2989 NTSYSAPI NTSTATUS WINAPI
NtAdjustGroupsToken(HANDLE
,BOOLEAN
,PTOKEN_GROUPS
,ULONG
,PTOKEN_GROUPS
,PULONG
);
2990 NTSYSAPI NTSTATUS WINAPI
NtAdjustPrivilegesToken(HANDLE
,BOOLEAN
,PTOKEN_PRIVILEGES
,DWORD
,PTOKEN_PRIVILEGES
,PDWORD
);
2991 NTSYSAPI NTSTATUS WINAPI
NtAlertResumeThread(HANDLE
,PULONG
);
2992 NTSYSAPI NTSTATUS WINAPI
NtAlertThread(HANDLE ThreadHandle
);
2993 NTSYSAPI NTSTATUS WINAPI
NtAllocateLocallyUniqueId(PLUID lpLuid
);
2994 NTSYSAPI NTSTATUS WINAPI
NtAllocateUuids(PULARGE_INTEGER
,PULONG
,PULONG
,PUCHAR
);
2995 NTSYSAPI NTSTATUS WINAPI
NtAllocateVirtualMemory(HANDLE
,PVOID
*,ULONG_PTR
,SIZE_T
*,ULONG
,ULONG
);
2996 NTSYSAPI NTSTATUS WINAPI
NtAreMappedFilesTheSame(PVOID
,PVOID
);
2997 NTSYSAPI NTSTATUS WINAPI
NtAssignProcessToJobObject(HANDLE
,HANDLE
);
2998 NTSYSAPI NTSTATUS WINAPI
NtCallbackReturn(PVOID
,ULONG
,NTSTATUS
);
2999 NTSYSAPI NTSTATUS WINAPI
NtCancelIoFile(HANDLE
,PIO_STATUS_BLOCK
);
3000 NTSYSAPI NTSTATUS WINAPI
NtCancelIoFileEx(HANDLE
,PIO_STATUS_BLOCK
,PIO_STATUS_BLOCK
);
3001 NTSYSAPI NTSTATUS WINAPI
NtCancelTimer(HANDLE
, BOOLEAN
*);
3002 NTSYSAPI NTSTATUS WINAPI
NtClearEvent(HANDLE
);
3003 NTSYSAPI NTSTATUS WINAPI
NtClearPowerRequest(HANDLE
,POWER_REQUEST_TYPE
);
3004 NTSYSAPI NTSTATUS WINAPI
NtClose(HANDLE
);
3005 NTSYSAPI NTSTATUS WINAPI
NtCloseObjectAuditAlarm(PUNICODE_STRING
,HANDLE
,BOOLEAN
);
3006 NTSYSAPI NTSTATUS WINAPI
NtCompleteConnectPort(HANDLE
);
3007 NTSYSAPI NTSTATUS WINAPI
NtConnectPort(PHANDLE
,PUNICODE_STRING
,PSECURITY_QUALITY_OF_SERVICE
,PLPC_SECTION_WRITE
,PLPC_SECTION_READ
,PULONG
,PVOID
,PULONG
);
3008 NTSYSAPI NTSTATUS WINAPI
NtContinue(PCONTEXT
,BOOLEAN
);
3009 NTSYSAPI NTSTATUS WINAPI
NtCreateDirectoryObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
);
3010 NTSYSAPI NTSTATUS WINAPI
NtCreateEvent(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,EVENT_TYPE
,BOOLEAN
);
3011 NTSYSAPI NTSTATUS WINAPI
NtCreateEventPair(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
);
3012 NTSYSAPI NTSTATUS WINAPI
NtCreateFile(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,PLARGE_INTEGER
,ULONG
,ULONG
,ULONG
,ULONG
,PVOID
,ULONG
);
3013 NTSYSAPI NTSTATUS WINAPI
NtCreateIoCompletion(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,ULONG
);
3014 NTSYSAPI NTSTATUS WINAPI
NtCreateJobObject(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3015 NTSYSAPI NTSTATUS WINAPI
NtCreateKey(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
,const UNICODE_STRING
*,ULONG
,PULONG
);
3016 NTSYSAPI NTSTATUS WINAPI
NtCreateKeyTransacted(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
,const UNICODE_STRING
*,ULONG
,HANDLE
,ULONG
*);
3017 NTSYSAPI NTSTATUS WINAPI
NtCreateKeyedEvent(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
);
3018 NTSYSAPI NTSTATUS WINAPI
NtCreateMailslotFile(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,ULONG
,ULONG
,ULONG
,PLARGE_INTEGER
);
3019 NTSYSAPI NTSTATUS WINAPI
NtCreateMutant(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,BOOLEAN
);
3020 NTSYSAPI NTSTATUS WINAPI
NtCreateNamedPipeFile(PHANDLE
,ULONG
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,ULONG
,PLARGE_INTEGER
);
3021 NTSYSAPI NTSTATUS WINAPI
NtCreatePagingFile(PUNICODE_STRING
,PLARGE_INTEGER
,PLARGE_INTEGER
,PLARGE_INTEGER
);
3022 NTSYSAPI NTSTATUS WINAPI
NtCreatePort(PHANDLE
,POBJECT_ATTRIBUTES
,ULONG
,ULONG
,PULONG
);
3023 NTSYSAPI NTSTATUS WINAPI
NtCreatePowerRequest(HANDLE
*,COUNTED_REASON_CONTEXT
*);
3024 NTSYSAPI NTSTATUS WINAPI
NtCreateProcess(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,HANDLE
,BOOLEAN
,HANDLE
,HANDLE
,HANDLE
);
3025 NTSYSAPI NTSTATUS WINAPI
NtCreateProfile(PHANDLE
,HANDLE
,PVOID
,ULONG
,ULONG
,PVOID
,ULONG
,KPROFILE_SOURCE
,KAFFINITY
);
3026 NTSYSAPI NTSTATUS WINAPI
NtCreateSection(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const LARGE_INTEGER
*,ULONG
,ULONG
,HANDLE
);
3027 NTSYSAPI NTSTATUS WINAPI
NtCreateSemaphore(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,LONG
,LONG
);
3028 NTSYSAPI NTSTATUS WINAPI
NtCreateSymbolicLinkObject(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PUNICODE_STRING
);
3029 NTSYSAPI NTSTATUS WINAPI
NtCreateThread(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,HANDLE
,PCLIENT_ID
,PCONTEXT
,PINITIAL_TEB
,BOOLEAN
);
3030 NTSYSAPI NTSTATUS WINAPI
NtCreateThreadEx(HANDLE
*,ACCESS_MASK
,OBJECT_ATTRIBUTES
*,HANDLE
,PRTL_THREAD_START_ROUTINE
,void*,ULONG
,SIZE_T
,SIZE_T
,SIZE_T
,PS_ATTRIBUTE_LIST
*);
3031 NTSYSAPI NTSTATUS WINAPI
NtCreateTimer(HANDLE
*, ACCESS_MASK
, const OBJECT_ATTRIBUTES
*, TIMER_TYPE
);
3032 NTSYSAPI NTSTATUS WINAPI
NtCreateToken(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,TOKEN_TYPE
,PLUID
,PLARGE_INTEGER
,PTOKEN_USER
,PTOKEN_GROUPS
,PTOKEN_PRIVILEGES
,PTOKEN_OWNER
,PTOKEN_PRIMARY_GROUP
,PTOKEN_DEFAULT_DACL
,PTOKEN_SOURCE
);
3033 NTSYSAPI NTSTATUS WINAPI
NtCreateUserProcess(HANDLE
*,HANDLE
*,ACCESS_MASK
,ACCESS_MASK
,OBJECT_ATTRIBUTES
*,OBJECT_ATTRIBUTES
*,ULONG
,ULONG
,RTL_USER_PROCESS_PARAMETERS
*,PS_CREATE_INFO
*,PS_ATTRIBUTE_LIST
*);
3034 NTSYSAPI NTSTATUS WINAPI
NtDelayExecution(BOOLEAN
,const LARGE_INTEGER
*);
3035 NTSYSAPI NTSTATUS WINAPI
NtDeleteAtom(RTL_ATOM
);
3036 NTSYSAPI NTSTATUS WINAPI
NtDeleteFile(POBJECT_ATTRIBUTES
);
3037 NTSYSAPI NTSTATUS WINAPI
NtDeleteKey(HANDLE
);
3038 NTSYSAPI NTSTATUS WINAPI
NtDeleteValueKey(HANDLE
,const UNICODE_STRING
*);
3039 NTSYSAPI NTSTATUS WINAPI
NtDeviceIoControlFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,PVOID
,ULONG
,PVOID
,ULONG
);
3040 NTSYSAPI NTSTATUS WINAPI
NtDisplayString(PUNICODE_STRING
);
3041 NTSYSAPI NTSTATUS WINAPI
NtDuplicateObject(HANDLE
,HANDLE
,HANDLE
,PHANDLE
,ACCESS_MASK
,ULONG
,ULONG
);
3042 NTSYSAPI NTSTATUS WINAPI
NtDuplicateToken(HANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,SECURITY_IMPERSONATION_LEVEL
,TOKEN_TYPE
,PHANDLE
);
3043 NTSYSAPI NTSTATUS WINAPI
NtEnumerateKey(HANDLE
,ULONG
,KEY_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
3044 NTSYSAPI NTSTATUS WINAPI
NtEnumerateValueKey(HANDLE
,ULONG
,KEY_VALUE_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3045 NTSYSAPI NTSTATUS WINAPI
NtExtendSection(HANDLE
,PLARGE_INTEGER
);
3046 NTSYSAPI NTSTATUS WINAPI
NtFindAtom(const WCHAR
*,ULONG
,RTL_ATOM
*);
3047 NTSYSAPI NTSTATUS WINAPI
NtFlushBuffersFile(HANDLE
,IO_STATUS_BLOCK
*);
3048 NTSYSAPI NTSTATUS WINAPI
NtFlushInstructionCache(HANDLE
,LPCVOID
,SIZE_T
);
3049 NTSYSAPI NTSTATUS WINAPI
NtFlushKey(HANDLE
);
3050 NTSYSAPI
void WINAPI
NtFlushProcessWriteBuffers(void);
3051 NTSYSAPI NTSTATUS WINAPI
NtFlushVirtualMemory(HANDLE
,LPCVOID
*,SIZE_T
*,ULONG
);
3052 NTSYSAPI NTSTATUS WINAPI
NtFlushWriteBuffer(VOID
);
3053 NTSYSAPI NTSTATUS WINAPI
NtFreeVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
);
3054 NTSYSAPI NTSTATUS WINAPI
NtFsControlFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,PVOID
,ULONG
,PVOID
,ULONG
);
3055 NTSYSAPI NTSTATUS WINAPI
NtGetContextThread(HANDLE
,CONTEXT
*);
3056 NTSYSAPI ULONG WINAPI
NtGetCurrentProcessorNumber(void);
3057 NTSYSAPI NTSTATUS WINAPI
NtGetNlsSectionPtr(ULONG
,ULONG
,void*,void**,SIZE_T
*);
3058 NTSYSAPI NTSTATUS WINAPI
NtGetPlugPlayEvent(ULONG
,ULONG
,PVOID
,ULONG
);
3059 NTSYSAPI ULONG WINAPI
NtGetTickCount(VOID
);
3060 NTSYSAPI NTSTATUS WINAPI
NtGetWriteWatch(HANDLE
,ULONG
,PVOID
,SIZE_T
,PVOID
*,ULONG_PTR
*,ULONG
*);
3061 NTSYSAPI NTSTATUS WINAPI
NtImpersonateAnonymousToken(HANDLE
);
3062 NTSYSAPI NTSTATUS WINAPI
NtImpersonateClientOfPort(HANDLE
,PPORT_MESSAGE
);
3063 NTSYSAPI NTSTATUS WINAPI
NtImpersonateThread(HANDLE
,HANDLE
,PSECURITY_QUALITY_OF_SERVICE
);
3064 NTSYSAPI NTSTATUS WINAPI
NtInitializeRegistry(BOOLEAN
);
3065 NTSYSAPI NTSTATUS WINAPI
NtInitiatePowerAction(POWER_ACTION
,SYSTEM_POWER_STATE
,ULONG
,BOOLEAN
);
3066 NTSYSAPI NTSTATUS WINAPI
NtIsProcessInJob(HANDLE
,HANDLE
);
3067 NTSYSAPI NTSTATUS WINAPI
NtListenPort(HANDLE
,PLPC_MESSAGE
);
3068 NTSYSAPI NTSTATUS WINAPI
NtLoadDriver(const UNICODE_STRING
*);
3069 NTSYSAPI NTSTATUS WINAPI
NtLoadKey(const OBJECT_ATTRIBUTES
*,OBJECT_ATTRIBUTES
*);
3070 NTSYSAPI NTSTATUS WINAPI
NtLockFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,void*,PIO_STATUS_BLOCK
,PLARGE_INTEGER
,PLARGE_INTEGER
,ULONG
*,BOOLEAN
,BOOLEAN
);
3071 NTSYSAPI NTSTATUS WINAPI
NtLockVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
);
3072 NTSYSAPI NTSTATUS WINAPI
NtMakeTemporaryObject(HANDLE
);
3073 NTSYSAPI NTSTATUS WINAPI
NtMapViewOfSection(HANDLE
,HANDLE
,PVOID
*,ULONG_PTR
,SIZE_T
,const LARGE_INTEGER
*,SIZE_T
*,SECTION_INHERIT
,ULONG
,ULONG
);
3074 NTSYSAPI NTSTATUS WINAPI
NtNotifyChangeDirectoryFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,ULONG
,BOOLEAN
);
3075 NTSYSAPI NTSTATUS WINAPI
NtNotifyChangeKey(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,BOOLEAN
,PVOID
,ULONG
,BOOLEAN
);
3076 NTSYSAPI NTSTATUS WINAPI
NtNotifyChangeMultipleKeys(HANDLE
,ULONG
,OBJECT_ATTRIBUTES
*,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,ULONG
,BOOLEAN
,PVOID
,ULONG
,BOOLEAN
);
3077 NTSYSAPI NTSTATUS WINAPI
NtOpenDirectoryObject(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3078 NTSYSAPI NTSTATUS WINAPI
NtOpenEvent(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3079 NTSYSAPI NTSTATUS WINAPI
NtOpenEventPair(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3080 NTSYSAPI NTSTATUS WINAPI
NtOpenFile(PHANDLE
,ACCESS_MASK
,POBJECT_ATTRIBUTES
,PIO_STATUS_BLOCK
,ULONG
,ULONG
);
3081 NTSYSAPI NTSTATUS WINAPI
NtOpenIoCompletion(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3082 NTSYSAPI NTSTATUS WINAPI
NtOpenJobObject(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3083 NTSYSAPI NTSTATUS WINAPI
NtOpenKey(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3084 NTSYSAPI NTSTATUS WINAPI
NtOpenKeyEx(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
);
3085 NTSYSAPI NTSTATUS WINAPI
NtOpenKeyTransacted(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,HANDLE
);
3086 NTSYSAPI NTSTATUS WINAPI
NtOpenKeyTransactedEx(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
,HANDLE
);
3087 NTSYSAPI NTSTATUS WINAPI
NtOpenKeyedEvent(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3088 NTSYSAPI NTSTATUS WINAPI
NtOpenMutant(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3089 NTSYSAPI NTSTATUS WINAPI
NtOpenObjectAuditAlarm(PUNICODE_STRING
,PHANDLE
,PUNICODE_STRING
,PUNICODE_STRING
,PSECURITY_DESCRIPTOR
,HANDLE
,ACCESS_MASK
,ACCESS_MASK
,PPRIVILEGE_SET
,BOOLEAN
,BOOLEAN
,PBOOLEAN
);
3090 NTSYSAPI NTSTATUS WINAPI
NtOpenProcess(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const CLIENT_ID
*);
3091 NTSYSAPI NTSTATUS WINAPI
NtOpenProcessToken(HANDLE
,DWORD
,HANDLE
*);
3092 NTSYSAPI NTSTATUS WINAPI
NtOpenProcessTokenEx(HANDLE
,DWORD
,DWORD
,HANDLE
*);
3093 NTSYSAPI NTSTATUS WINAPI
NtOpenSection(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3094 NTSYSAPI NTSTATUS WINAPI
NtOpenSemaphore(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3095 NTSYSAPI NTSTATUS WINAPI
NtOpenSymbolicLinkObject(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*);
3096 NTSYSAPI NTSTATUS WINAPI
NtOpenThread(HANDLE
*,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,const CLIENT_ID
*);
3097 NTSYSAPI NTSTATUS WINAPI
NtOpenThreadToken(HANDLE
,DWORD
,BOOLEAN
,HANDLE
*);
3098 NTSYSAPI NTSTATUS WINAPI
NtOpenThreadTokenEx(HANDLE
,DWORD
,BOOLEAN
,DWORD
,HANDLE
*);
3099 NTSYSAPI NTSTATUS WINAPI
NtOpenTimer(HANDLE
*, ACCESS_MASK
, const OBJECT_ATTRIBUTES
*);
3100 NTSYSAPI NTSTATUS WINAPI
NtPowerInformation(POWER_INFORMATION_LEVEL
,PVOID
,ULONG
,PVOID
,ULONG
);
3101 NTSYSAPI NTSTATUS WINAPI
NtPrivilegeCheck(HANDLE
,PPRIVILEGE_SET
,PBOOLEAN
);
3102 NTSYSAPI NTSTATUS WINAPI
NtPrivilegeObjectAuditAlarm(PUNICODE_STRING
,HANDLE
,HANDLE
,ULONG
,PPRIVILEGE_SET
,BOOLEAN
);
3103 NTSYSAPI NTSTATUS WINAPI
NtPrivilegedServiceAuditAlarm(PUNICODE_STRING
,PUNICODE_STRING
,HANDLE
,PPRIVILEGE_SET
,BOOLEAN
);
3104 NTSYSAPI NTSTATUS WINAPI
NtProtectVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
,ULONG
*);
3105 NTSYSAPI NTSTATUS WINAPI
NtPulseEvent(HANDLE
,LONG
*);
3106 NTSYSAPI NTSTATUS WINAPI
NtQueueApcThread(HANDLE
,PNTAPCFUNC
,ULONG_PTR
,ULONG_PTR
,ULONG_PTR
);
3107 NTSYSAPI NTSTATUS WINAPI
NtQueryAttributesFile(const OBJECT_ATTRIBUTES
*,FILE_BASIC_INFORMATION
*);
3108 NTSYSAPI NTSTATUS WINAPI
NtQueryDefaultLocale(BOOLEAN
,LCID
*);
3109 NTSYSAPI NTSTATUS WINAPI
NtQueryDefaultUILanguage(LANGID
*);
3110 NTSYSAPI NTSTATUS WINAPI
NtQueryDirectoryFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FILE_INFORMATION_CLASS
,BOOLEAN
,PUNICODE_STRING
,BOOLEAN
);
3111 NTSYSAPI NTSTATUS WINAPI
NtQueryDirectoryObject(HANDLE
,PDIRECTORY_BASIC_INFORMATION
,ULONG
,BOOLEAN
,BOOLEAN
,PULONG
,PULONG
);
3112 NTSYSAPI NTSTATUS WINAPI
NtQueryEaFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,BOOLEAN
,PVOID
,ULONG
,PULONG
,BOOLEAN
);
3113 NTSYSAPI NTSTATUS WINAPI
NtQueryEvent(HANDLE
,EVENT_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3114 NTSYSAPI NTSTATUS WINAPI
NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES
*,FILE_NETWORK_OPEN_INFORMATION
*);
3115 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationAtom(RTL_ATOM
,ATOM_INFORMATION_CLASS
,PVOID
,ULONG
,ULONG
*);
3116 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,LONG
,FILE_INFORMATION_CLASS
);
3117 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationJobObject(HANDLE
,JOBOBJECTINFOCLASS
,PVOID
,ULONG
,PULONG
);
3118 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationPort(HANDLE
,PORT_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3119 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationProcess(HANDLE
,PROCESSINFOCLASS
,PVOID
,ULONG
,PULONG
);
3120 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationThread(HANDLE
,THREADINFOCLASS
,PVOID
,ULONG
,PULONG
);
3121 NTSYSAPI NTSTATUS WINAPI
NtQueryInformationToken(HANDLE
,TOKEN_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3122 NTSYSAPI NTSTATUS WINAPI
NtQueryInstallUILanguage(LANGID
*);
3123 NTSYSAPI NTSTATUS WINAPI
NtQueryIntervalProfile(KPROFILE_SOURCE
,PULONG
);
3124 NTSYSAPI NTSTATUS WINAPI
NtQueryIoCompletion(HANDLE
,IO_COMPLETION_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3125 NTSYSAPI NTSTATUS WINAPI
NtQueryKey(HANDLE
,KEY_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
3126 NTSYSAPI NTSTATUS WINAPI
NtQueryMultipleValueKey(HANDLE
,PKEY_MULTIPLE_VALUE_INFORMATION
,ULONG
,PVOID
,ULONG
,PULONG
);
3127 NTSYSAPI NTSTATUS WINAPI
NtQueryMutant(HANDLE
,MUTANT_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3128 NTSYSAPI NTSTATUS WINAPI
NtQueryObject(HANDLE
, OBJECT_INFORMATION_CLASS
, PVOID
, ULONG
, PULONG
);
3129 NTSYSAPI NTSTATUS WINAPI
NtQueryOpenSubKeys(POBJECT_ATTRIBUTES
,PULONG
);
3130 NTSYSAPI NTSTATUS WINAPI
NtQueryPerformanceCounter(PLARGE_INTEGER
, PLARGE_INTEGER
);
3131 NTSYSAPI NTSTATUS WINAPI
NtQuerySecurityObject(HANDLE
,SECURITY_INFORMATION
,PSECURITY_DESCRIPTOR
,ULONG
,PULONG
);
3132 NTSYSAPI NTSTATUS WINAPI
NtQuerySection(HANDLE
,SECTION_INFORMATION_CLASS
,PVOID
,SIZE_T
,SIZE_T
*);
3133 NTSYSAPI NTSTATUS WINAPI
NtQuerySemaphore(HANDLE
,SEMAPHORE_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3134 NTSYSAPI NTSTATUS WINAPI
NtQuerySymbolicLinkObject(HANDLE
,PUNICODE_STRING
,PULONG
);
3135 NTSYSAPI NTSTATUS WINAPI
NtQuerySystemEnvironmentValue(PUNICODE_STRING
,PWCHAR
,ULONG
,PULONG
);
3136 NTSYSAPI NTSTATUS WINAPI
NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3137 NTSYSAPI NTSTATUS WINAPI
NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS
,void*,ULONG
,void*,ULONG
,ULONG
*);
3138 NTSYSAPI NTSTATUS WINAPI
NtQuerySystemTime(PLARGE_INTEGER
);
3139 NTSYSAPI NTSTATUS WINAPI
NtQueryTimer(HANDLE
,TIMER_INFORMATION_CLASS
,PVOID
,ULONG
,PULONG
);
3140 NTSYSAPI NTSTATUS WINAPI
NtQueryTimerResolution(PULONG
,PULONG
,PULONG
);
3141 NTSYSAPI NTSTATUS WINAPI
NtQueryValueKey(HANDLE
,const UNICODE_STRING
*,KEY_VALUE_INFORMATION_CLASS
,void *,DWORD
,DWORD
*);
3142 NTSYSAPI NTSTATUS WINAPI
NtQueryLicenseValue(const UNICODE_STRING
*,ULONG
*,PVOID
,ULONG
,ULONG
*);
3143 NTSYSAPI NTSTATUS WINAPI
NtQueryVirtualMemory(HANDLE
,LPCVOID
,MEMORY_INFORMATION_CLASS
,PVOID
,SIZE_T
,SIZE_T
*);
3144 NTSYSAPI NTSTATUS WINAPI
NtQueryVolumeInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FS_INFORMATION_CLASS
);
3145 NTSYSAPI NTSTATUS WINAPI
NtRaiseException(PEXCEPTION_RECORD
,PCONTEXT
,BOOL
);
3146 NTSYSAPI NTSTATUS WINAPI
NtRaiseHardError(NTSTATUS
,ULONG
,PUNICODE_STRING
,PVOID
*,HARDERROR_RESPONSE_OPTION
,PHARDERROR_RESPONSE
);
3147 NTSYSAPI NTSTATUS WINAPI
NtReadFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,PLARGE_INTEGER
,PULONG
);
3148 NTSYSAPI NTSTATUS WINAPI
NtReadFileScatter(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,FILE_SEGMENT_ELEMENT
*,ULONG
,PLARGE_INTEGER
,PULONG
);
3149 NTSYSAPI NTSTATUS WINAPI
NtReadRequestData(HANDLE
,PLPC_MESSAGE
,ULONG
,PVOID
,ULONG
,PULONG
);
3150 NTSYSAPI NTSTATUS WINAPI
NtReadVirtualMemory(HANDLE
,const void*,void*,SIZE_T
,SIZE_T
*);
3151 NTSYSAPI NTSTATUS WINAPI
NtRegisterThreadTerminatePort(HANDLE
);
3152 NTSYSAPI NTSTATUS WINAPI
NtReleaseKeyedEvent(HANDLE
,const void*,BOOLEAN
,const LARGE_INTEGER
*);
3153 NTSYSAPI NTSTATUS WINAPI
NtReleaseMutant(HANDLE
,PLONG
);
3154 NTSYSAPI NTSTATUS WINAPI
NtReleaseSemaphore(HANDLE
,ULONG
,PULONG
);
3155 NTSYSAPI NTSTATUS WINAPI
NtRemoveIoCompletion(HANDLE
,PULONG_PTR
,PULONG_PTR
,PIO_STATUS_BLOCK
,PLARGE_INTEGER
);
3156 NTSYSAPI NTSTATUS WINAPI
NtRemoveIoCompletionEx(HANDLE
,FILE_IO_COMPLETION_INFORMATION
*,ULONG
,ULONG
*,LARGE_INTEGER
*,BOOLEAN
);
3157 NTSYSAPI NTSTATUS WINAPI
NtRenameKey(HANDLE
,UNICODE_STRING
*);
3158 NTSYSAPI NTSTATUS WINAPI
NtReplaceKey(POBJECT_ATTRIBUTES
,HANDLE
,POBJECT_ATTRIBUTES
);
3159 NTSYSAPI NTSTATUS WINAPI
NtReplyPort(HANDLE
,PLPC_MESSAGE
);
3160 NTSYSAPI NTSTATUS WINAPI
NtReplyWaitReceivePort(HANDLE
,PULONG
,PLPC_MESSAGE
,PLPC_MESSAGE
);
3161 NTSYSAPI NTSTATUS WINAPI
NtReplyWaitReceivePortEx(HANDLE
,PVOID
*,PPORT_MESSAGE
,PPORT_MESSAGE
,PLARGE_INTEGER
);
3162 NTSYSAPI NTSTATUS WINAPI
NtReplyWaitReplyPort(HANDLE
,PLPC_MESSAGE
);
3163 NTSYSAPI NTSTATUS WINAPI
NtRequestPort(HANDLE
,PLPC_MESSAGE
);
3164 NTSYSAPI NTSTATUS WINAPI
NtRequestWaitReplyPort(HANDLE
,PLPC_MESSAGE
,PLPC_MESSAGE
);
3165 NTSYSAPI NTSTATUS WINAPI
NtResetEvent(HANDLE
,LONG
*);
3166 NTSYSAPI NTSTATUS WINAPI
NtResetWriteWatch(HANDLE
,PVOID
,SIZE_T
);
3167 NTSYSAPI NTSTATUS WINAPI
NtRestoreKey(HANDLE
,HANDLE
,ULONG
);
3168 NTSYSAPI NTSTATUS WINAPI
NtResumeProcess(HANDLE
);
3169 NTSYSAPI NTSTATUS WINAPI
NtResumeThread(HANDLE
,PULONG
);
3170 NTSYSAPI NTSTATUS WINAPI
NtSaveKey(HANDLE
,HANDLE
);
3171 NTSYSAPI NTSTATUS WINAPI
NtSecureConnectPort(PHANDLE
,PUNICODE_STRING
,PSECURITY_QUALITY_OF_SERVICE
,PLPC_SECTION_WRITE
,PSID
,PLPC_SECTION_READ
,PULONG
,PVOID
,PULONG
);
3172 NTSYSAPI NTSTATUS WINAPI
NtSetContextThread(HANDLE
,const CONTEXT
*);
3173 NTSYSAPI NTSTATUS WINAPI
NtSetDefaultHardErrorPort(HANDLE
);
3174 NTSYSAPI NTSTATUS WINAPI
NtSetDefaultLocale(BOOLEAN
,LCID
);
3175 NTSYSAPI NTSTATUS WINAPI
NtSetDefaultUILanguage(LANGID
);
3176 NTSYSAPI NTSTATUS WINAPI
NtSetEaFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
);
3177 NTSYSAPI NTSTATUS WINAPI
NtSetEvent(HANDLE
,LONG
*);
3178 NTSYSAPI NTSTATUS WINAPI
NtSetHighEventPair(HANDLE
);
3179 NTSYSAPI NTSTATUS WINAPI
NtSetHighWaitLowEventPair(HANDLE
);
3180 NTSYSAPI NTSTATUS WINAPI
NtSetHighWaitLowThread(VOID
);
3181 NTSYSAPI NTSTATUS WINAPI
NtSetInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FILE_INFORMATION_CLASS
);
3182 NTSYSAPI NTSTATUS WINAPI
NtSetInformationJobObject(HANDLE
,JOBOBJECTINFOCLASS
,PVOID
,ULONG
);
3183 NTSYSAPI NTSTATUS WINAPI
NtSetInformationKey(HANDLE
,const int,PVOID
,ULONG
);
3184 NTSYSAPI NTSTATUS WINAPI
NtSetInformationObject(HANDLE
, OBJECT_INFORMATION_CLASS
, PVOID
, ULONG
);
3185 NTSYSAPI NTSTATUS WINAPI
NtSetInformationProcess(HANDLE
,PROCESS_INFORMATION_CLASS
,PVOID
,ULONG
);
3186 NTSYSAPI NTSTATUS WINAPI
NtSetInformationThread(HANDLE
,THREADINFOCLASS
,LPCVOID
,ULONG
);
3187 NTSYSAPI NTSTATUS WINAPI
NtSetInformationToken(HANDLE
,TOKEN_INFORMATION_CLASS
,PVOID
,ULONG
);
3188 NTSYSAPI NTSTATUS WINAPI
NtSetIntervalProfile(ULONG
,KPROFILE_SOURCE
);
3189 NTSYSAPI NTSTATUS WINAPI
NtSetIoCompletion(HANDLE
,ULONG_PTR
,ULONG_PTR
,NTSTATUS
,SIZE_T
);
3190 NTSYSAPI NTSTATUS WINAPI
NtSetLdtEntries(ULONG
,LDT_ENTRY
,ULONG
,LDT_ENTRY
);
3191 NTSYSAPI NTSTATUS WINAPI
NtSetLowEventPair(HANDLE
);
3192 NTSYSAPI NTSTATUS WINAPI
NtSetLowWaitHighEventPair(HANDLE
);
3193 NTSYSAPI NTSTATUS WINAPI
NtSetLowWaitHighThread(VOID
);
3194 NTSYSAPI NTSTATUS WINAPI
NtSetPowerRequest(HANDLE
,POWER_REQUEST_TYPE
);
3195 NTSYSAPI NTSTATUS WINAPI
NtSetSecurityObject(HANDLE
,SECURITY_INFORMATION
,PSECURITY_DESCRIPTOR
);
3196 NTSYSAPI NTSTATUS WINAPI
NtSetSystemEnvironmentValue(PUNICODE_STRING
,PUNICODE_STRING
);
3197 NTSYSAPI NTSTATUS WINAPI
NtSetSystemInformation(SYSTEM_INFORMATION_CLASS
,PVOID
,ULONG
);
3198 NTSYSAPI NTSTATUS WINAPI
NtSetSystemPowerState(POWER_ACTION
,SYSTEM_POWER_STATE
,ULONG
);
3199 NTSYSAPI NTSTATUS WINAPI
NtSetSystemTime(const LARGE_INTEGER
*,LARGE_INTEGER
*);
3200 NTSYSAPI NTSTATUS WINAPI
NtSetThreadExecutionState(EXECUTION_STATE
,EXECUTION_STATE
*);
3201 NTSYSAPI NTSTATUS WINAPI
NtSetTimer(HANDLE
, const LARGE_INTEGER
*, PTIMER_APC_ROUTINE
, PVOID
, BOOLEAN
, ULONG
, BOOLEAN
*);
3202 NTSYSAPI NTSTATUS WINAPI
NtSetTimerResolution(ULONG
,BOOLEAN
,PULONG
);
3203 NTSYSAPI NTSTATUS WINAPI
NtSetValueKey(HANDLE
,const UNICODE_STRING
*,ULONG
,ULONG
,const void *,ULONG
);
3204 NTSYSAPI NTSTATUS WINAPI
NtSetVolumeInformationFile(HANDLE
,PIO_STATUS_BLOCK
,PVOID
,ULONG
,FS_INFORMATION_CLASS
);
3205 NTSYSAPI NTSTATUS WINAPI
NtSignalAndWaitForSingleObject(HANDLE
,HANDLE
,BOOLEAN
,const LARGE_INTEGER
*);
3206 NTSYSAPI NTSTATUS WINAPI
NtShutdownSystem(SHUTDOWN_ACTION
);
3207 NTSYSAPI NTSTATUS WINAPI
NtStartProfile(HANDLE
);
3208 NTSYSAPI NTSTATUS WINAPI
NtStopProfile(HANDLE
);
3209 NTSYSAPI NTSTATUS WINAPI
NtSuspendProcess(HANDLE
);
3210 NTSYSAPI NTSTATUS WINAPI
NtSuspendThread(HANDLE
,PULONG
);
3211 NTSYSAPI NTSTATUS WINAPI
NtSystemDebugControl(SYSDBG_COMMAND
,PVOID
,ULONG
,PVOID
,ULONG
,PULONG
);
3212 NTSYSAPI NTSTATUS WINAPI
NtTerminateJobObject(HANDLE
,NTSTATUS
);
3213 NTSYSAPI NTSTATUS WINAPI
NtTerminateProcess(HANDLE
,LONG
);
3214 NTSYSAPI NTSTATUS WINAPI
NtTerminateThread(HANDLE
,LONG
);
3215 NTSYSAPI NTSTATUS WINAPI
NtTestAlert(VOID
);
3216 NTSYSAPI NTSTATUS WINAPI
NtUnloadDriver(const UNICODE_STRING
*);
3217 NTSYSAPI NTSTATUS WINAPI
NtUnloadKey(POBJECT_ATTRIBUTES
);
3218 NTSYSAPI NTSTATUS WINAPI
NtUnloadKeyEx(POBJECT_ATTRIBUTES
,HANDLE
);
3219 NTSYSAPI NTSTATUS WINAPI
NtUnlockFile(HANDLE
,PIO_STATUS_BLOCK
,PLARGE_INTEGER
,PLARGE_INTEGER
,PULONG
);
3220 NTSYSAPI NTSTATUS WINAPI
NtUnlockVirtualMemory(HANDLE
,PVOID
*,SIZE_T
*,ULONG
);
3221 NTSYSAPI NTSTATUS WINAPI
NtUnmapViewOfSection(HANDLE
,PVOID
);
3222 NTSYSAPI NTSTATUS WINAPI
NtVdmControl(ULONG
,PVOID
);
3223 NTSYSAPI NTSTATUS WINAPI
NtWaitForKeyedEvent(HANDLE
,const void*,BOOLEAN
,const LARGE_INTEGER
*);
3224 NTSYSAPI NTSTATUS WINAPI
NtWaitForSingleObject(HANDLE
,BOOLEAN
,const LARGE_INTEGER
*);
3225 NTSYSAPI NTSTATUS WINAPI
NtWaitForMultipleObjects(ULONG
,const HANDLE
*,BOOLEAN
,BOOLEAN
,const LARGE_INTEGER
*);
3226 NTSYSAPI NTSTATUS WINAPI
NtWaitHighEventPair(HANDLE
);
3227 NTSYSAPI NTSTATUS WINAPI
NtWaitLowEventPair(HANDLE
);
3228 NTSYSAPI NTSTATUS WINAPI
NtWriteFile(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,const void*,ULONG
,PLARGE_INTEGER
,PULONG
);
3229 NTSYSAPI NTSTATUS WINAPI
NtWriteFileGather(HANDLE
,HANDLE
,PIO_APC_ROUTINE
,PVOID
,PIO_STATUS_BLOCK
,FILE_SEGMENT_ELEMENT
*,ULONG
,PLARGE_INTEGER
,PULONG
);
3230 NTSYSAPI NTSTATUS WINAPI
NtWriteRequestData(HANDLE
,PLPC_MESSAGE
,ULONG
,PVOID
,ULONG
,PULONG
);
3231 NTSYSAPI NTSTATUS WINAPI
NtWriteVirtualMemory(HANDLE
,void*,const void*,SIZE_T
,SIZE_T
*);
3232 NTSYSAPI NTSTATUS WINAPI
NtYieldExecution(void);
3234 NTSYSAPI NTSTATUS WINAPI
RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
,PULONG
);
3235 NTSYSAPI
void WINAPI
RtlAcquirePebLock(void);
3236 NTSYSAPI BYTE WINAPI
RtlAcquireResourceExclusive(LPRTL_RWLOCK
,BYTE
);
3237 NTSYSAPI BYTE WINAPI
RtlAcquireResourceShared(LPRTL_RWLOCK
,BYTE
);
3238 NTSYSAPI
void WINAPI
RtlAcquireSRWLockExclusive(RTL_SRWLOCK
*);
3239 NTSYSAPI
void WINAPI
RtlAcquireSRWLockShared(RTL_SRWLOCK
*);
3240 NTSYSAPI NTSTATUS WINAPI
RtlActivateActivationContext(DWORD
,HANDLE
,ULONG_PTR
*);
3241 NTSYSAPI NTSTATUS WINAPI
RtlActivateActivationContextEx(ULONG
,TEB
*,HANDLE
,ULONG_PTR
*);
3242 NTSYSAPI NTSTATUS WINAPI
RtlAddAce(PACL
,DWORD
,DWORD
,PACE_HEADER
,DWORD
);
3243 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessAllowedAce(PACL
,DWORD
,DWORD
,PSID
);
3244 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessAllowedAceEx(PACL
,DWORD
,DWORD
,DWORD
,PSID
);
3245 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessAllowedObjectAce(PACL
,DWORD
,DWORD
,DWORD
,GUID
*,GUID
*,PSID
);
3246 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessDeniedAce(PACL
,DWORD
,DWORD
,PSID
);
3247 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessDeniedAceEx(PACL
,DWORD
,DWORD
,DWORD
,PSID
);
3248 NTSYSAPI NTSTATUS WINAPI
RtlAddAccessDeniedObjectAce(PACL
,DWORD
,DWORD
,DWORD
,GUID
*,GUID
*,PSID
);
3249 NTSYSAPI NTSTATUS WINAPI
RtlAddAtomToAtomTable(RTL_ATOM_TABLE
,const WCHAR
*,RTL_ATOM
*);
3250 NTSYSAPI NTSTATUS WINAPI
RtlAddAuditAccessAce(PACL
,DWORD
,DWORD
,PSID
,BOOL
,BOOL
);
3251 NTSYSAPI NTSTATUS WINAPI
RtlAddAuditAccessAceEx(PACL
,DWORD
,DWORD
,DWORD
,PSID
,BOOL
,BOOL
);
3252 NTSYSAPI NTSTATUS WINAPI
RtlAddAuditAccessObjectAce(PACL
,DWORD
,DWORD
,DWORD
,GUID
*,GUID
*,PSID
,BOOL
,BOOL
);
3253 NTSYSAPI NTSTATUS WINAPI
RtlAddMandatoryAce(PACL
,DWORD
,DWORD
,DWORD
,DWORD
,PSID
);
3254 NTSYSAPI
void WINAPI
RtlAddRefActivationContext(HANDLE
);
3255 NTSYSAPI PVOID WINAPI
RtlAddVectoredExceptionHandler(ULONG
,PVECTORED_EXCEPTION_HANDLER
);
3256 NTSYSAPI NTSTATUS WINAPI
RtlAdjustPrivilege(ULONG
,BOOLEAN
,BOOLEAN
,PBOOLEAN
);
3257 NTSYSAPI NTSTATUS WINAPI
RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY
,BYTE
,DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,DWORD
,PSID
*);
3258 NTSYSAPI RTL_HANDLE
* WINAPI
RtlAllocateHandle(RTL_HANDLE_TABLE
*,ULONG
*);
3259 NTSYSAPI PVOID WINAPI
RtlAllocateHeap(HANDLE
,ULONG
,SIZE_T
) __WINE_ALLOC_SIZE(3);
3260 NTSYSAPI WCHAR WINAPI
RtlAnsiCharToUnicodeChar(LPSTR
*);
3261 NTSYSAPI DWORD WINAPI
RtlAnsiStringToUnicodeSize(const STRING
*);
3262 NTSYSAPI NTSTATUS WINAPI
RtlAnsiStringToUnicodeString(PUNICODE_STRING
,PCANSI_STRING
,BOOLEAN
);
3263 NTSYSAPI NTSTATUS WINAPI
RtlAppendAsciizToString(STRING
*,LPCSTR
);
3264 NTSYSAPI NTSTATUS WINAPI
RtlAppendStringToString(STRING
*,const STRING
*);
3265 NTSYSAPI NTSTATUS WINAPI
RtlAppendUnicodeStringToString(UNICODE_STRING
*,const UNICODE_STRING
*);
3266 NTSYSAPI NTSTATUS WINAPI
RtlAppendUnicodeToString(UNICODE_STRING
*,LPCWSTR
);
3267 NTSYSAPI BOOLEAN WINAPI
RtlAreAllAccessesGranted(ACCESS_MASK
,ACCESS_MASK
);
3268 NTSYSAPI BOOLEAN WINAPI
RtlAreAnyAccessesGranted(ACCESS_MASK
,ACCESS_MASK
);
3269 NTSYSAPI BOOLEAN WINAPI
RtlAreBitsSet(PCRTL_BITMAP
,ULONG
,ULONG
);
3270 NTSYSAPI BOOLEAN WINAPI
RtlAreBitsClear(PCRTL_BITMAP
,ULONG
,ULONG
);
3271 NTSYSAPI NTSTATUS WINAPI
RtlCharToInteger(PCSZ
,ULONG
,PULONG
);
3272 NTSYSAPI NTSTATUS WINAPI
RtlCheckRegistryKey(ULONG
, PWSTR
);
3273 NTSYSAPI
void WINAPI
RtlClearAllBits(PRTL_BITMAP
);
3274 NTSYSAPI
void WINAPI
RtlClearBits(PRTL_BITMAP
,ULONG
,ULONG
);
3275 NTSYSAPI NTSTATUS WINAPI
RtlCreateActivationContext(HANDLE
*,const void*);
3276 NTSYSAPI PDEBUG_BUFFER WINAPI
RtlCreateQueryDebugBuffer(ULONG
,BOOLEAN
);
3277 NTSYSAPI NTSTATUS WINAPI
RtlCreateRegistryKey(ULONG
,PWSTR
);
3278 NTSYSAPI ULONG WINAPI
RtlCompactHeap(HANDLE
,ULONG
);
3279 NTSYSAPI LONG WINAPI
RtlCompareString(const STRING
*,const STRING
*,BOOLEAN
);
3280 NTSYSAPI LONG WINAPI
RtlCompareUnicodeString(const UNICODE_STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3281 NTSYSAPI LONG WINAPI
RtlCompareUnicodeStrings(const WCHAR
*,SIZE_T
,const WCHAR
*,SIZE_T
,BOOLEAN
);
3282 NTSYSAPI NTSTATUS WINAPI
RtlCompressBuffer(USHORT
,PUCHAR
,ULONG
,PUCHAR
,ULONG
,ULONG
,PULONG
,PVOID
);
3283 NTSYSAPI DWORD WINAPI
RtlComputeCrc32(DWORD
,const BYTE
*,INT
);
3284 NTSYSAPI NTSTATUS WINAPI
RtlConvertSidToUnicodeString(PUNICODE_STRING
,PSID
,BOOLEAN
);
3285 NTSYSAPI
void WINAPI
RtlCopyLuid(PLUID
,const LUID
*);
3286 NTSYSAPI
void WINAPI
RtlCopyLuidAndAttributesArray(ULONG
,const LUID_AND_ATTRIBUTES
*,PLUID_AND_ATTRIBUTES
);
3287 NTSYSAPI BOOLEAN WINAPI
RtlCopySid(DWORD
,PSID
,PSID
);
3288 NTSYSAPI NTSTATUS WINAPI
RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
);
3289 NTSYSAPI
void WINAPI
RtlCopyString(STRING
*,const STRING
*);
3290 NTSYSAPI
void WINAPI
RtlCopyUnicodeString(UNICODE_STRING
*,const UNICODE_STRING
*);
3291 NTSYSAPI NTSTATUS WINAPI
RtlCreateAcl(PACL
,DWORD
,DWORD
);
3292 NTSYSAPI NTSTATUS WINAPI
RtlCreateAtomTable(ULONG
,RTL_ATOM_TABLE
*);
3293 NTSYSAPI NTSTATUS WINAPI
RtlCreateEnvironment(BOOLEAN
, PWSTR
*);
3294 NTSYSAPI HANDLE WINAPI
RtlCreateHeap(ULONG
,PVOID
,SIZE_T
,SIZE_T
,PVOID
,PRTL_HEAP_DEFINITION
);
3295 NTSYSAPI NTSTATUS WINAPI
RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS
**,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,PWSTR
,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*);
3296 NTSYSAPI NTSTATUS WINAPI
RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS
**,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,PWSTR
,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,const UNICODE_STRING
*,ULONG
);
3297 NTSYSAPI NTSTATUS WINAPI
RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR
,DWORD
);
3298 NTSYSAPI NTSTATUS WINAPI
RtlCreateTimerQueue(PHANDLE
);
3299 NTSYSAPI NTSTATUS WINAPI
RtlCreateTimer(PHANDLE
, HANDLE
, RTL_WAITORTIMERCALLBACKFUNC
, PVOID
, DWORD
, DWORD
, ULONG
);
3300 NTSYSAPI BOOLEAN WINAPI
RtlCreateUnicodeString(PUNICODE_STRING
,LPCWSTR
);
3301 NTSYSAPI BOOLEAN WINAPI
RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING
,LPCSTR
);
3302 NTSYSAPI NTSTATUS WINAPI
RtlCreateUserProcess(UNICODE_STRING
*,ULONG
,RTL_USER_PROCESS_PARAMETERS
*,SECURITY_DESCRIPTOR
*,SECURITY_DESCRIPTOR
*,HANDLE
,BOOLEAN
,HANDLE
,HANDLE
,RTL_USER_PROCESS_INFORMATION
*);
3303 NTSYSAPI NTSTATUS WINAPI
RtlCreateUserThread(HANDLE
,SECURITY_DESCRIPTOR
*,BOOLEAN
,PVOID
,SIZE_T
,SIZE_T
,PRTL_THREAD_START_ROUTINE
,void*,HANDLE
*,CLIENT_ID
*);
3304 NTSYSAPI NTSTATUS WINAPI
RtlCreateUserStack(SIZE_T
,SIZE_T
,ULONG
,SIZE_T
,SIZE_T
,INITIAL_TEB
*);
3305 NTSYSAPI NTSTATUS WINAPI
RtlCustomCPToUnicodeN(CPTABLEINFO
*,WCHAR
*,DWORD
,DWORD
*,const char*,DWORD
);
3306 NTSYSAPI
void WINAPI
RtlDeactivateActivationContext(DWORD
,ULONG_PTR
);
3307 NTSYSAPI PVOID WINAPI
RtlDecodePointer(PVOID
);
3308 NTSYSAPI NTSTATUS WINAPI
RtlDecompressBuffer(USHORT
,PUCHAR
,ULONG
,PUCHAR
,ULONG
,PULONG
);
3309 NTSYSAPI NTSTATUS WINAPI
RtlDecompressFragment(USHORT
,PUCHAR
,ULONG
,PUCHAR
,ULONG
,ULONG
,PULONG
,PVOID
);
3310 NTSYSAPI NTSTATUS WINAPI
RtlDeleteAce(PACL
,DWORD
);
3311 NTSYSAPI NTSTATUS WINAPI
RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE
,RTL_ATOM
);
3312 NTSYSAPI NTSTATUS WINAPI
RtlDeleteCriticalSection(RTL_CRITICAL_SECTION
*);
3313 NTSYSAPI NTSTATUS WINAPI
RtlDeleteRegistryValue(ULONG
, PCWSTR
, PCWSTR
);
3314 NTSYSAPI
void WINAPI
RtlDeleteResource(LPRTL_RWLOCK
);
3315 NTSYSAPI NTSTATUS WINAPI
RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR
*);
3316 NTSYSAPI NTSTATUS WINAPI
RtlDeleteTimer(HANDLE
, HANDLE
, HANDLE
);
3317 NTSYSAPI NTSTATUS WINAPI
RtlDeleteTimerQueueEx(HANDLE
, HANDLE
);
3318 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI
RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS
*);
3319 NTSYSAPI NTSTATUS WINAPI
RtlDeregisterWait(HANDLE
);
3320 NTSYSAPI NTSTATUS WINAPI
RtlDeregisterWaitEx(HANDLE
,HANDLE
);
3321 NTSYSAPI NTSTATUS WINAPI
RtlDestroyAtomTable(RTL_ATOM_TABLE
);
3322 NTSYSAPI NTSTATUS WINAPI
RtlDestroyEnvironment(PWSTR
);
3323 NTSYSAPI NTSTATUS WINAPI
RtlDestroyHandleTable(RTL_HANDLE_TABLE
*);
3324 NTSYSAPI HANDLE WINAPI
RtlDestroyHeap(HANDLE
);
3325 NTSYSAPI
void WINAPI
RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS
*);
3326 NTSYSAPI NTSTATUS WINAPI
RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER
);
3327 NTSYSAPI DOS_PATHNAME_TYPE WINAPI
RtlDetermineDosPathNameType_U(PCWSTR
);
3328 NTSYSAPI BOOLEAN WINAPI
RtlDllShutdownInProgress(void);
3329 NTSYSAPI BOOLEAN WINAPI
RtlDoesFileExists_U(LPCWSTR
);
3330 NTSYSAPI BOOLEAN WINAPI
RtlDosPathNameToNtPathName_U(PCWSTR
,PUNICODE_STRING
,PWSTR
*,CURDIR
*);
3331 NTSYSAPI NTSTATUS WINAPI
RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR
,PUNICODE_STRING
,PWSTR
*,CURDIR
*);
3332 NTSYSAPI ULONG WINAPI
RtlDosSearchPath_U(LPCWSTR
, LPCWSTR
, LPCWSTR
, ULONG
, LPWSTR
, LPWSTR
*);
3333 NTSYSAPI WCHAR WINAPI
RtlDowncaseUnicodeChar(WCHAR
);
3334 NTSYSAPI NTSTATUS WINAPI
RtlDowncaseUnicodeString(UNICODE_STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3335 NTSYSAPI
void WINAPI
RtlDumpResource(LPRTL_RWLOCK
);
3336 NTSYSAPI NTSTATUS WINAPI
RtlDuplicateUnicodeString(int,const UNICODE_STRING
*,UNICODE_STRING
*);
3337 NTSYSAPI NTSTATUS WINAPI
RtlEmptyAtomTable(RTL_ATOM_TABLE
,BOOLEAN
);
3338 NTSYSAPI PVOID WINAPI
RtlEncodePointer(PVOID
);
3339 NTSYSAPI NTSTATUS WINAPI
RtlEnterCriticalSection(RTL_CRITICAL_SECTION
*);
3340 NTSYSAPI
void WINAPI
RtlEraseUnicodeString(UNICODE_STRING
*);
3341 NTSYSAPI NTSTATUS WINAPI
RtlEqualComputerName(const UNICODE_STRING
*,const UNICODE_STRING
*);
3342 NTSYSAPI NTSTATUS WINAPI
RtlEqualDomainName(const UNICODE_STRING
*,const UNICODE_STRING
*);
3343 NTSYSAPI BOOLEAN WINAPI
RtlEqualLuid(const LUID
*,const LUID
*);
3344 NTSYSAPI BOOL WINAPI
RtlEqualPrefixSid(PSID
,PSID
);
3345 NTSYSAPI BOOL WINAPI
RtlEqualSid(PSID
,PSID
);
3346 NTSYSAPI BOOLEAN WINAPI
RtlEqualString(const STRING
*,const STRING
*,BOOLEAN
);
3347 NTSYSAPI BOOLEAN WINAPI
RtlEqualUnicodeString(const UNICODE_STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3348 NTSYSAPI
void DECLSPEC_NORETURN WINAPI
RtlExitUserProcess(ULONG
);
3349 NTSYSAPI
void DECLSPEC_NORETURN WINAPI
RtlExitUserThread(ULONG
);
3350 NTSYSAPI NTSTATUS WINAPI
RtlExpandEnvironmentStrings(const WCHAR
*,WCHAR
*,SIZE_T
,WCHAR
*,SIZE_T
,SIZE_T
*);
3351 NTSYSAPI NTSTATUS WINAPI
RtlExpandEnvironmentStrings_U(PCWSTR
, const UNICODE_STRING
*, UNICODE_STRING
*, ULONG
*);
3352 NTSYSAPI NTSTATUS WINAPI
RtlFindActivationContextSectionString(ULONG
,const GUID
*,ULONG
,const UNICODE_STRING
*,PVOID
);
3353 NTSYSAPI NTSTATUS WINAPI
RtlFindActivationContextSectionGuid(ULONG
,const GUID
*,ULONG
,const GUID
*,PVOID
);
3354 NTSYSAPI NTSTATUS WINAPI
RtlFindCharInUnicodeString(int,const UNICODE_STRING
*,const UNICODE_STRING
*,USHORT
*);
3355 NTSYSAPI ULONG WINAPI
RtlFindClearBits(PCRTL_BITMAP
,ULONG
,ULONG
);
3356 NTSYSAPI ULONG WINAPI
RtlFindClearBitsAndSet(PRTL_BITMAP
,ULONG
,ULONG
);
3357 NTSYSAPI ULONG WINAPI
RtlFindClearRuns(PCRTL_BITMAP
,PRTL_BITMAP_RUN
,ULONG
,BOOLEAN
);
3358 NTSYSAPI ULONG WINAPI
RtlFindLastBackwardRunSet(PCRTL_BITMAP
,ULONG
,PULONG
);
3359 NTSYSAPI ULONG WINAPI
RtlFindLastBackwardRunClear(PCRTL_BITMAP
,ULONG
,PULONG
);
3360 NTSYSAPI CCHAR WINAPI
RtlFindLeastSignificantBit(ULONGLONG
);
3361 NTSYSAPI ULONG WINAPI
RtlFindLongestRunSet(PCRTL_BITMAP
,PULONG
);
3362 NTSYSAPI ULONG WINAPI
RtlFindLongestRunClear(PCRTL_BITMAP
,PULONG
);
3363 NTSYSAPI NTSTATUS WINAPI
RtlFindMessage(HMODULE
,ULONG
,ULONG
,ULONG
,const MESSAGE_RESOURCE_ENTRY
**);
3364 NTSYSAPI CCHAR WINAPI
RtlFindMostSignificantBit(ULONGLONG
);
3365 NTSYSAPI ULONG WINAPI
RtlFindNextForwardRunSet(PCRTL_BITMAP
,ULONG
,PULONG
);
3366 NTSYSAPI ULONG WINAPI
RtlFindNextForwardRunClear(PCRTL_BITMAP
,ULONG
,PULONG
);
3367 NTSYSAPI ULONG WINAPI
RtlFindSetBits(PCRTL_BITMAP
,ULONG
,ULONG
);
3368 NTSYSAPI ULONG WINAPI
RtlFindSetBitsAndClear(PRTL_BITMAP
,ULONG
,ULONG
);
3369 NTSYSAPI ULONG WINAPI
RtlFindSetRuns(PCRTL_BITMAP
,PRTL_BITMAP_RUN
,ULONG
,BOOLEAN
);
3370 NTSYSAPI BOOLEAN WINAPI
RtlFirstFreeAce(PACL
,PACE_HEADER
*);
3371 NTSYSAPI NTSTATUS WINAPI
RtlFormatCurrentUserKeyPath(PUNICODE_STRING
);
3372 NTSYSAPI NTSTATUS WINAPI
RtlFormatMessage(LPCWSTR
,ULONG
,BOOLEAN
,BOOLEAN
,BOOLEAN
,__ms_va_list
*,LPWSTR
,ULONG
,ULONG
*);
3373 NTSYSAPI NTSTATUS WINAPI
RtlFormatMessageEx(LPCWSTR
,ULONG
,BOOLEAN
,BOOLEAN
,BOOLEAN
,__ms_va_list
*,LPWSTR
,ULONG
,ULONG
*,ULONG
);
3374 NTSYSAPI
void WINAPI
RtlFreeAnsiString(PANSI_STRING
);
3375 NTSYSAPI BOOLEAN WINAPI
RtlFreeHandle(RTL_HANDLE_TABLE
*,RTL_HANDLE
*);
3376 NTSYSAPI BOOLEAN WINAPI
RtlFreeHeap(HANDLE
,ULONG
,PVOID
);
3377 NTSYSAPI
void WINAPI
RtlFreeOemString(POEM_STRING
);
3378 NTSYSAPI DWORD WINAPI
RtlFreeSid(PSID
);
3379 NTSYSAPI
void WINAPI
RtlFreeThreadActivationContextStack(void);
3380 NTSYSAPI
void WINAPI
RtlFreeUnicodeString(PUNICODE_STRING
);
3381 NTSYSAPI
void WINAPI
RtlFreeUserStack(void*);
3382 NTSYSAPI NTSTATUS WINAPI
RtlGetAce(PACL
,DWORD
,LPVOID
*);
3383 NTSYSAPI NTSTATUS WINAPI
RtlGetActiveActivationContext(HANDLE
*);
3384 NTSYSAPI NTSTATUS WINAPI
RtlGetCompressionWorkSpaceSize(USHORT
,PULONG
,PULONG
);
3385 NTSYSAPI NTSTATUS WINAPI
RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR
, PSECURITY_DESCRIPTOR_CONTROL
,LPDWORD
);
3386 NTSYSAPI ULONG WINAPI
RtlGetCurrentDirectory_U(ULONG
, LPWSTR
);
3387 NTSYSAPI PEB
* WINAPI
RtlGetCurrentPeb(void);
3388 NTSYSAPI NTSTATUS WINAPI
RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR
,PBOOLEAN
,PACL
*,PBOOLEAN
);
3389 NTSYSAPI NTSTATUS WINAPI
RtlGetExePath(PCWSTR
,PWSTR
*);
3390 NTSYSAPI TEB_ACTIVE_FRAME
* WINAPI
RtlGetFrame(void);
3391 NTSYSAPI ULONG WINAPI
RtlGetFullPathName_U(PCWSTR
,ULONG
,PWSTR
,PWSTR
*);
3392 NTSYSAPI NTSTATUS WINAPI
RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR
,PSID
*,PBOOLEAN
);
3393 NTSYSAPI NTSTATUS WINAPI
RtlGetLastNtStatus(void);
3394 NTSYSAPI DWORD WINAPI
RtlGetLastWin32Error(void);
3395 NTSYSAPI DWORD WINAPI
RtlGetLongestNtPathLength(void);
3396 NTSYSAPI ULONG WINAPI
RtlGetNtGlobalFlags(void);
3397 NTSYSAPI BOOLEAN WINAPI
RtlGetNtProductType(LPDWORD
);
3398 NTSYSAPI NTSTATUS WINAPI
RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR
,PSID
*,PBOOLEAN
);
3399 NTSYSAPI ULONG WINAPI
RtlGetProcessHeaps(ULONG
,HANDLE
*);
3400 NTSYSAPI NTSTATUS WINAPI
RtlGetProcessPreferredUILanguages(DWORD
,ULONG
*,WCHAR
*,ULONG
*);
3401 NTSYSAPI NTSTATUS WINAPI
RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR
,PBOOLEAN
,PACL
*,PBOOLEAN
);
3402 NTSYSAPI NTSTATUS WINAPI
RtlGetSearchPath(PWSTR
*);
3403 NTSYSAPI NTSTATUS WINAPI
RtlGetSystemPreferredUILanguages(DWORD
,ULONG
,ULONG
*,WCHAR
*,ULONG
*);
3404 NTSYSAPI LONGLONG WINAPI
RtlGetSystemTimePrecise(void);
3405 NTSYSAPI DWORD WINAPI
RtlGetThreadErrorMode(void);
3406 NTSYSAPI NTSTATUS WINAPI
RtlGetThreadPreferredUILanguages(DWORD
,ULONG
*,WCHAR
*,ULONG
*);
3407 NTSYSAPI NTSTATUS WINAPI
RtlGetUserPreferredUILanguages(DWORD
,ULONG
,ULONG
*,WCHAR
*,ULONG
*);
3408 NTSYSAPI NTSTATUS WINAPI
RtlGetVersion(RTL_OSVERSIONINFOEXW
*);
3409 NTSYSAPI NTSTATUS WINAPI
RtlGUIDFromString(PUNICODE_STRING
,GUID
*);
3410 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI
RtlIdentifierAuthoritySid(PSID
);
3411 NTSYSAPI NTSTATUS WINAPI
RtlIdnToAscii(DWORD
,const WCHAR
*,INT
,WCHAR
*,INT
*);
3412 NTSYSAPI NTSTATUS WINAPI
RtlIdnToNameprepUnicode(DWORD
,const WCHAR
*,INT
,WCHAR
*,INT
*);
3413 NTSYSAPI NTSTATUS WINAPI
RtlIdnToUnicode(DWORD
,const WCHAR
*,INT
,WCHAR
*,INT
*);
3414 NTSYSAPI PVOID WINAPI
RtlImageDirectoryEntryToData(HMODULE
,BOOL
,WORD
,ULONG
*);
3415 NTSYSAPI PIMAGE_NT_HEADERS WINAPI
RtlImageNtHeader(HMODULE
);
3416 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI
RtlImageRvaToSection(const IMAGE_NT_HEADERS
*,HMODULE
,DWORD
);
3417 NTSYSAPI PVOID WINAPI
RtlImageRvaToVa(const IMAGE_NT_HEADERS
*,HMODULE
,DWORD
,IMAGE_SECTION_HEADER
**);
3418 NTSYSAPI NTSTATUS WINAPI
RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL
);
3419 NTSYSAPI
void WINAPI
RtlInitString(PSTRING
,PCSZ
);
3420 NTSYSAPI
void WINAPI
RtlInitAnsiString(PANSI_STRING
,PCSZ
);
3421 NTSYSAPI NTSTATUS WINAPI
RtlInitAnsiStringEx(PANSI_STRING
,PCSZ
);
3422 NTSYSAPI
void WINAPI
RtlInitCodePageTable(USHORT
*,CPTABLEINFO
*);
3423 NTSYSAPI
void WINAPI
RtlInitNlsTables(USHORT
*,USHORT
*,USHORT
*,NLSTABLEINFO
*);
3424 NTSYSAPI
void WINAPI
RtlInitUnicodeString(PUNICODE_STRING
,PCWSTR
);
3425 NTSYSAPI NTSTATUS WINAPI
RtlInitUnicodeStringEx(PUNICODE_STRING
,PCWSTR
);
3426 NTSYSAPI
void WINAPI
RtlInitializeBitMap(PRTL_BITMAP
,PULONG
,ULONG
);
3427 NTSYSAPI
void WINAPI
RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE
*);
3428 NTSYSAPI NTSTATUS WINAPI
RtlInitializeCriticalSection(RTL_CRITICAL_SECTION
*);
3429 NTSYSAPI NTSTATUS WINAPI
RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION
*,ULONG
);
3430 NTSYSAPI NTSTATUS WINAPI
RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION
*,ULONG
,ULONG
);
3431 NTSYSAPI
void WINAPI
RtlInitializeHandleTable(ULONG
,ULONG
,RTL_HANDLE_TABLE
*);
3432 NTSYSAPI
void WINAPI
RtlInitializeResource(LPRTL_RWLOCK
);
3433 NTSYSAPI
void WINAPI
RtlInitializeSRWLock(RTL_SRWLOCK
*);
3434 NTSYSAPI BOOL WINAPI
RtlInitializeSid(PSID
,PSID_IDENTIFIER_AUTHORITY
,BYTE
);
3435 NTSYSAPI NTSTATUS WINAPI
RtlInt64ToUnicodeString(ULONGLONG
,ULONG
,UNICODE_STRING
*);
3436 NTSYSAPI NTSTATUS WINAPI
RtlIntegerToChar(ULONG
,ULONG
,ULONG
,PCHAR
);
3437 NTSYSAPI NTSTATUS WINAPI
RtlIntegerToUnicodeString(ULONG
,ULONG
,UNICODE_STRING
*);
3438 NTSYSAPI BOOLEAN WINAPI
RtlIsActivationContextActive(HANDLE
);
3439 NTSYSAPI BOOL WINAPI
RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION
*);
3440 NTSYSAPI BOOL WINAPI
RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION
*);
3441 NTSYSAPI ULONG WINAPI
RtlIsDosDeviceName_U(PCWSTR
);
3442 NTSYSAPI BOOLEAN WINAPI
RtlIsNameLegalDOS8Dot3(const UNICODE_STRING
*,POEM_STRING
,PBOOLEAN
);
3443 NTSYSAPI NTSTATUS WINAPI
RtlIsNormalizedString(ULONG
,const WCHAR
*,INT
,BOOLEAN
*);
3444 NTSYSAPI BOOLEAN WINAPI
RtlIsProcessorFeaturePresent(UINT
);
3445 NTSYSAPI BOOLEAN WINAPI
RtlIsTextUnicode(LPCVOID
,INT
,INT
*);
3446 NTSYSAPI BOOLEAN WINAPI
RtlIsValidHandle(const RTL_HANDLE_TABLE
*, const RTL_HANDLE
*);
3447 NTSYSAPI BOOLEAN WINAPI
RtlIsValidIndexHandle(const RTL_HANDLE_TABLE
*, ULONG Index
, RTL_HANDLE
**);
3448 NTSYSAPI NTSTATUS WINAPI
RtlLeaveCriticalSection(RTL_CRITICAL_SECTION
*);
3449 NTSYSAPI DWORD WINAPI
RtlLengthRequiredSid(DWORD
);
3450 NTSYSAPI ULONG WINAPI
RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR
);
3451 NTSYSAPI DWORD WINAPI
RtlLengthSid(PSID
);
3452 NTSYSAPI NTSTATUS WINAPI
RtlLocalTimeToSystemTime(const LARGE_INTEGER
*,PLARGE_INTEGER
);
3453 NTSYSAPI NTSTATUS WINAPI
RtlLocaleNameToLcid(const WCHAR
*,LCID
*,ULONG
);
3454 NTSYSAPI BOOLEAN WINAPI
RtlLockHeap(HANDLE
);
3455 NTSYSAPI NTSTATUS WINAPI
RtlLookupAtomInAtomTable(RTL_ATOM_TABLE
,const WCHAR
*,RTL_ATOM
*);
3456 NTSYSAPI NTSTATUS WINAPI
RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
,LPDWORD
);
3457 NTSYSAPI
void WINAPI
RtlMapGenericMask(PACCESS_MASK
,const GENERIC_MAPPING
*);
3458 NTSYSAPI NTSTATUS WINAPI
RtlMultiByteToUnicodeN(LPWSTR
,DWORD
,LPDWORD
,LPCSTR
,DWORD
);
3459 NTSYSAPI NTSTATUS WINAPI
RtlMultiByteToUnicodeSize(DWORD
*,LPCSTR
,UINT
);
3460 NTSYSAPI NTSTATUS WINAPI
RtlNewSecurityObject(PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
*,BOOLEAN
,HANDLE
,PGENERIC_MAPPING
);
3461 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI
RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS
*);
3462 NTSYSAPI NTSTATUS WINAPI
RtlNormalizeString(ULONG
,const WCHAR
*,INT
,WCHAR
*,INT
*);
3463 NTSYSAPI ULONG WINAPI
RtlNtStatusToDosError(NTSTATUS
);
3464 NTSYSAPI ULONG WINAPI
RtlNtStatusToDosErrorNoTeb(NTSTATUS
);
3465 NTSYSAPI ULONG WINAPI
RtlNumberOfSetBits(PCRTL_BITMAP
);
3466 NTSYSAPI ULONG WINAPI
RtlNumberOfClearBits(PCRTL_BITMAP
);
3467 NTSYSAPI UINT WINAPI
RtlOemStringToUnicodeSize(const STRING
*);
3468 NTSYSAPI NTSTATUS WINAPI
RtlOemStringToUnicodeString(UNICODE_STRING
*,const STRING
*,BOOLEAN
);
3469 NTSYSAPI NTSTATUS WINAPI
RtlOemToUnicodeN(LPWSTR
,DWORD
,LPDWORD
,LPCSTR
,DWORD
);
3470 NTSYSAPI NTSTATUS WINAPI
RtlOpenCurrentUser(ACCESS_MASK
,PHANDLE
);
3471 NTSYSAPI PVOID WINAPI
RtlPcToFileHeader(PVOID
,PVOID
*);
3472 NTSYSAPI NTSTATUS WINAPI
RtlPinAtomInAtomTable(RTL_ATOM_TABLE
,RTL_ATOM
);
3473 NTSYSAPI
void WINAPI
RtlPopFrame(TEB_ACTIVE_FRAME
*);
3474 NTSYSAPI BOOLEAN WINAPI
RtlPrefixString(const STRING
*,const STRING
*,BOOLEAN
);
3475 NTSYSAPI BOOLEAN WINAPI
RtlPrefixUnicodeString(const UNICODE_STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3476 NTSYSAPI
void WINAPI
RtlPushFrame(TEB_ACTIVE_FRAME
*);
3477 NTSYSAPI NTSTATUS WINAPI
RtlQueryActivationContextApplicationSettings(DWORD
,HANDLE
,const WCHAR
*,const WCHAR
*,WCHAR
*,SIZE_T
,SIZE_T
*);
3478 NTSYSAPI NTSTATUS WINAPI
RtlQueryAtomInAtomTable(RTL_ATOM_TABLE
,RTL_ATOM
,ULONG
*,ULONG
*,WCHAR
*,ULONG
*);
3479 NTSYSAPI NTSTATUS WINAPI
RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION
*);
3480 NTSYSAPI NTSTATUS WINAPI
RtlQueryEnvironmentVariable(WCHAR
*,const WCHAR
*,SIZE_T
,WCHAR
*,SIZE_T
,SIZE_T
*);
3481 NTSYSAPI NTSTATUS WINAPI
RtlQueryEnvironmentVariable_U(PWSTR
,PUNICODE_STRING
,PUNICODE_STRING
);
3482 NTSYSAPI NTSTATUS WINAPI
RtlQueryHeapInformation(HANDLE
,HEAP_INFORMATION_CLASS
,PVOID
,SIZE_T
,PSIZE_T
);
3483 NTSYSAPI NTSTATUS WINAPI
RtlQueryInformationAcl(PACL
,LPVOID
,DWORD
,ACL_INFORMATION_CLASS
);
3484 NTSYSAPI NTSTATUS WINAPI
RtlQueryInformationActivationContext(ULONG
,HANDLE
,PVOID
,ULONG
,PVOID
,SIZE_T
,SIZE_T
*);
3485 NTSYSAPI BOOL WINAPI
RtlQueryPerformanceCounter(LARGE_INTEGER
*);
3486 NTSYSAPI BOOL WINAPI
RtlQueryPerformanceFrequency(LARGE_INTEGER
*);
3487 NTSYSAPI NTSTATUS WINAPI
RtlQueryProcessDebugInformation(ULONG
,ULONG
,PDEBUG_BUFFER
);
3488 NTSYSAPI NTSTATUS WINAPI
RtlQueryRegistryValues(ULONG
, PCWSTR
, PRTL_QUERY_REGISTRY_TABLE
, PVOID
, PVOID
);
3489 NTSYSAPI NTSTATUS WINAPI
RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION
*);
3490 NTSYSAPI BOOL WINAPI
RtlQueryUnbiasedInterruptTime(ULONGLONG
*);
3491 NTSYSAPI NTSTATUS WINAPI
RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE
,PVOID
,ULONG
);
3492 NTSYSAPI
void WINAPI
RtlRaiseException(PEXCEPTION_RECORD
);
3493 NTSYSAPI
void WINAPI
RtlRaiseStatus(NTSTATUS
);
3494 NTSYSAPI ULONG WINAPI
RtlRandom(PULONG
);
3495 NTSYSAPI PVOID WINAPI
RtlReAllocateHeap(HANDLE
,ULONG
,PVOID
,SIZE_T
);
3496 NTSYSAPI NTSTATUS WINAPI
RtlRegisterWait(PHANDLE
,HANDLE
,RTL_WAITORTIMERCALLBACKFUNC
,PVOID
,ULONG
,ULONG
);
3497 NTSYSAPI
void WINAPI
RtlReleaseActivationContext(HANDLE
);
3498 NTSYSAPI
void WINAPI
RtlReleasePath(PWSTR
);
3499 NTSYSAPI
void WINAPI
RtlReleasePebLock(void);
3500 NTSYSAPI
void WINAPI
RtlReleaseResource(LPRTL_RWLOCK
);
3501 NTSYSAPI
void WINAPI
RtlReleaseSRWLockExclusive(RTL_SRWLOCK
*);
3502 NTSYSAPI
void WINAPI
RtlReleaseSRWLockShared(RTL_SRWLOCK
*);
3503 NTSYSAPI ULONG WINAPI
RtlRemoveVectoredExceptionHandler(PVOID
);
3504 NTSYSAPI
void WINAPI
RtlResetRtlTranslations(const NLSTABLEINFO
*);
3505 NTSYSAPI
void WINAPI
RtlRestoreLastWin32Error(DWORD
);
3506 NTSYSAPI
void WINAPI
RtlSecondsSince1970ToTime(DWORD
,LARGE_INTEGER
*);
3507 NTSYSAPI
void WINAPI
RtlSecondsSince1980ToTime(DWORD
,LARGE_INTEGER
*);
3508 NTSYSAPI NTSTATUS WINAPI
RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR
,PSECURITY_DESCRIPTOR
,PDWORD
,PACL
,PDWORD
,PACL
,PDWORD
,PSID
,PDWORD
,PSID
,PDWORD
);
3509 NTSYSAPI
void WINAPI
RtlSetAllBits(PRTL_BITMAP
);
3510 NTSYSAPI
void WINAPI
RtlSetBits(PRTL_BITMAP
,ULONG
,ULONG
);
3511 NTSYSAPI ULONG WINAPI
RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION
*,ULONG
);
3512 NTSYSAPI NTSTATUS WINAPI
RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR
,SECURITY_DESCRIPTOR_CONTROL
,SECURITY_DESCRIPTOR_CONTROL
);
3513 NTSYSAPI NTSTATUS WINAPI
RtlSetCurrentDirectory_U(const UNICODE_STRING
*);
3514 NTSYSAPI
void WINAPI
RtlSetCurrentEnvironment(PWSTR
, PWSTR
*);
3515 NTSYSAPI NTSTATUS WINAPI
RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR
,BOOLEAN
,PACL
,BOOLEAN
);
3516 NTSYSAPI NTSTATUS WINAPI
RtlSetEnvironmentVariable(PWSTR
*,PUNICODE_STRING
,PUNICODE_STRING
);
3517 NTSYSAPI NTSTATUS WINAPI
RtlSetHeapInformation(HANDLE
,HEAP_INFORMATION_CLASS
,PVOID
,SIZE_T
);
3518 NTSYSAPI NTSTATUS WINAPI
RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR
,PSID
,BOOLEAN
);
3519 NTSYSAPI NTSTATUS WINAPI
RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR
,PSID
,BOOLEAN
);
3520 NTSYSAPI NTSTATUS WINAPI
RtlSetIoCompletionCallback(HANDLE
,PRTL_OVERLAPPED_COMPLETION_ROUTINE
,ULONG
);
3521 NTSYSAPI
void WINAPI
RtlSetLastWin32Error(DWORD
);
3522 NTSYSAPI
void WINAPI
RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS
);
3523 NTSYSAPI NTSTATUS WINAPI
RtlSetProcessPreferredUILanguages(DWORD
,PCZZWSTR
,ULONG
*);
3524 NTSYSAPI NTSTATUS WINAPI
RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR
,BOOLEAN
,PACL
,BOOLEAN
);
3525 NTSYSAPI NTSTATUS WINAPI
RtlSetSearchPathMode(ULONG
);
3526 NTSYSAPI NTSTATUS WINAPI
RtlSetThreadErrorMode(DWORD
,LPDWORD
);
3527 NTSYSAPI NTSTATUS WINAPI
RtlSetThreadPreferredUILanguages(DWORD
,PCZZWSTR
,ULONG
*);
3528 NTSYSAPI NTSTATUS WINAPI
RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION
*);
3529 NTSYSAPI
void WINAPI
RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER
);
3530 NTSYSAPI SIZE_T WINAPI
RtlSizeHeap(HANDLE
,ULONG
,const void*);
3531 NTSYSAPI NTSTATUS WINAPI
RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE
*,RTL_CRITICAL_SECTION
*,const LARGE_INTEGER
*);
3532 NTSYSAPI NTSTATUS WINAPI
RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE
*,RTL_SRWLOCK
*,const LARGE_INTEGER
*,ULONG
);
3533 NTSYSAPI NTSTATUS WINAPI
RtlStringFromGUID(REFGUID
,PUNICODE_STRING
);
3534 NTSYSAPI LPDWORD WINAPI
RtlSubAuthoritySid(PSID
,DWORD
);
3535 NTSYSAPI LPBYTE WINAPI
RtlSubAuthorityCountSid(PSID
);
3536 NTSYSAPI NTSTATUS WINAPI
RtlSystemTimeToLocalTime(const LARGE_INTEGER
*,PLARGE_INTEGER
);
3537 NTSYSAPI
void WINAPI
RtlTimeToTimeFields(const LARGE_INTEGER
*,PTIME_FIELDS
);
3538 NTSYSAPI BOOLEAN WINAPI
RtlTimeFieldsToTime(PTIME_FIELDS
,PLARGE_INTEGER
);
3539 NTSYSAPI
void WINAPI
RtlTimeToElapsedTimeFields(const LARGE_INTEGER
*,PTIME_FIELDS
);
3540 NTSYSAPI BOOLEAN WINAPI
RtlTimeToSecondsSince1970(const LARGE_INTEGER
*,LPDWORD
);
3541 NTSYSAPI BOOLEAN WINAPI
RtlTimeToSecondsSince1980(const LARGE_INTEGER
*,LPDWORD
);
3542 NTSYSAPI BOOLEAN WINAPI
RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK
*);
3543 NTSYSAPI BOOLEAN WINAPI
RtlTryAcquireSRWLockShared(RTL_SRWLOCK
*);
3544 NTSYSAPI BOOL WINAPI
RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION
*);
3545 NTSYSAPI NTSTATUS WINAPI
RtlUTF8ToUnicodeN(WCHAR
*,DWORD
,DWORD
*,const char*,DWORD
);
3546 NTSYSAPI ULONGLONG __cdecl
RtlUlonglongByteSwap(ULONGLONG
);
3547 NTSYSAPI DWORD WINAPI
RtlUnicodeStringToAnsiSize(const UNICODE_STRING
*);
3548 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeStringToAnsiString(PANSI_STRING
,PCUNICODE_STRING
,BOOLEAN
);
3549 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeStringToInteger(const UNICODE_STRING
*,ULONG
,ULONG
*);
3550 NTSYSAPI DWORD WINAPI
RtlUnicodeStringToOemSize(const UNICODE_STRING
*);
3551 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeStringToOemString(POEM_STRING
,PCUNICODE_STRING
,BOOLEAN
);
3552 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeToCustomCPN(CPTABLEINFO
*,char*,DWORD
,DWORD
*,const WCHAR
*,DWORD
);
3553 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeToMultiByteN(LPSTR
,DWORD
,LPDWORD
,LPCWSTR
,DWORD
);
3554 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeToMultiByteSize(PULONG
,PCWSTR
,ULONG
);
3555 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeToOemN(LPSTR
,DWORD
,LPDWORD
,LPCWSTR
,DWORD
);
3556 NTSYSAPI NTSTATUS WINAPI
RtlUnicodeToUTF8N(LPSTR
,DWORD
,LPDWORD
,LPCWSTR
,DWORD
);
3557 NTSYSAPI ULONG WINAPI
RtlUniform(PULONG
);
3558 NTSYSAPI BOOLEAN WINAPI
RtlUnlockHeap(HANDLE
);
3559 NTSYSAPI
void WINAPI
RtlUnwind(PVOID
,PVOID
,PEXCEPTION_RECORD
,PVOID
);
3561 NTSYSAPI
void WINAPI
RtlUnwindEx(PVOID
,PVOID
,PEXCEPTION_RECORD
,PVOID
,PCONTEXT
,PUNWIND_HISTORY_TABLE
);
3562 #elif defined(__ia64__)
3563 NTSYSAPI
void WINAPI
RtlUnwind2(FRAME_POINTERS
,PVOID
,PEXCEPTION_RECORD
,PVOID
,PCONTEXT
);
3564 NTSYSAPI
void WINAPI
RtlUnwindEx(FRAME_POINTERS
,PVOID
,PEXCEPTION_RECORD
,PVOID
,PCONTEXT
,PUNWIND_HISTORY_TABLE
);
3566 NTSYSAPI WCHAR WINAPI
RtlUpcaseUnicodeChar(WCHAR
);
3567 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeString(UNICODE_STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3568 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeStringToAnsiString(STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3569 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeStringToCountedOemString(STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3570 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeStringToOemString(STRING
*,const UNICODE_STRING
*,BOOLEAN
);
3571 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO
*,char*,DWORD
,DWORD
*,const WCHAR
*,DWORD
);
3572 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeToMultiByteN(LPSTR
,DWORD
,LPDWORD
,LPCWSTR
,DWORD
);
3573 NTSYSAPI NTSTATUS WINAPI
RtlUpcaseUnicodeToOemN(LPSTR
,DWORD
,LPDWORD
,LPCWSTR
,DWORD
);
3574 NTSYSAPI NTSTATUS WINAPI
RtlUpdateTimer(HANDLE
, HANDLE
, DWORD
, DWORD
);
3575 NTSYSAPI CHAR WINAPI
RtlUpperChar(CHAR
);
3576 NTSYSAPI
void WINAPI
RtlUpperString(STRING
*,const STRING
*);
3577 NTSYSAPI
void WINAPI
RtlUserThreadStart(PRTL_THREAD_START_ROUTINE
,void*);
3578 NTSYSAPI NTSTATUS WINAPI
RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR
);
3579 NTSYSAPI BOOLEAN WINAPI
RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR
,ULONG
,SECURITY_INFORMATION
);
3580 NTSYSAPI BOOLEAN WINAPI
RtlValidAcl(PACL
);
3581 NTSYSAPI BOOLEAN WINAPI
RtlValidSid(PSID
);
3582 NTSYSAPI BOOLEAN WINAPI
RtlValidateHeap(HANDLE
,ULONG
,LPCVOID
);
3583 NTSYSAPI NTSTATUS WINAPI
RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW
*,DWORD
,DWORDLONG
);
3584 NTSYSAPI NTSTATUS WINAPI
RtlWaitOnAddress(const void *,const void *,SIZE_T
,const LARGE_INTEGER
*);
3585 NTSYSAPI
void WINAPI
RtlWakeAddressAll(const void *);
3586 NTSYSAPI
void WINAPI
RtlWakeAddressSingle(const void *);
3587 NTSYSAPI
void WINAPI
RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE
*);
3588 NTSYSAPI
void WINAPI
RtlWakeConditionVariable(RTL_CONDITION_VARIABLE
*);
3589 NTSYSAPI NTSTATUS WINAPI
RtlWalkHeap(HANDLE
,PVOID
);
3590 NTSYSAPI NTSTATUS WINAPI
RtlWow64EnableFsRedirection(BOOLEAN
);
3591 NTSYSAPI NTSTATUS WINAPI
RtlWow64EnableFsRedirectionEx(ULONG
,ULONG
*);
3593 NTSYSAPI NTSTATUS WINAPI
RtlWow64GetThreadContext(HANDLE
, WOW64_CONTEXT
*);
3594 NTSYSAPI NTSTATUS WINAPI
RtlWow64SetThreadContext(HANDLE
, const WOW64_CONTEXT
*);
3596 NTSYSAPI NTSTATUS WINAPI
RtlWriteRegistryValue(ULONG
,PCWSTR
,PCWSTR
,ULONG
,PVOID
,ULONG
);
3597 NTSYSAPI NTSTATUS WINAPI
RtlZombifyActivationContext(HANDLE
);
3598 NTSYSAPI NTSTATUS WINAPI
RtlpNtCreateKey(PHANDLE
,ACCESS_MASK
,const OBJECT_ATTRIBUTES
*,ULONG
,const UNICODE_STRING
*,ULONG
,PULONG
);
3599 NTSYSAPI NTSTATUS WINAPI
RtlpNtEnumerateSubKey(HANDLE
,UNICODE_STRING
*, ULONG
);
3600 NTSYSAPI NTSTATUS WINAPI
RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION
*);
3601 NTSYSAPI NTSTATUS WINAPI
RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION
*);
3602 NTSYSAPI NTSTATUS WINAPI
vDbgPrintEx(ULONG
,ULONG
,LPCSTR
,__ms_va_list
);
3603 NTSYSAPI NTSTATUS WINAPI
vDbgPrintExWithPrefix(LPCSTR
,ULONG
,ULONG
,LPCSTR
,__ms_va_list
);
3605 NTSYSAPI
int __cdecl
_strnicmp(LPCSTR
,LPCSTR
,size_t);
3607 /* 32-bit only functions */
3610 NTSYSAPI LONGLONG WINAPI
RtlConvertLongToLargeInteger(LONG
);
3611 NTSYSAPI ULONGLONG WINAPI
RtlConvertUlongToLargeInteger(ULONG
);
3612 NTSYSAPI LONGLONG WINAPI
RtlEnlargedIntegerMultiply(INT
,INT
);
3613 NTSYSAPI ULONGLONG WINAPI
RtlEnlargedUnsignedMultiply(UINT
,UINT
);
3614 NTSYSAPI UINT WINAPI
RtlEnlargedUnsignedDivide(ULONGLONG
,UINT
,UINT
*);
3615 NTSYSAPI LONGLONG WINAPI
RtlExtendedMagicDivide(LONGLONG
,LONGLONG
,INT
);
3616 NTSYSAPI LONGLONG WINAPI
RtlExtendedIntegerMultiply(LONGLONG
,INT
);
3617 NTSYSAPI LONGLONG WINAPI
RtlExtendedLargeIntegerDivide(LONGLONG
,INT
,INT
*);
3618 NTSYSAPI LONGLONG WINAPI
RtlInterlockedCompareExchange64(LONGLONG
*,LONGLONG
,LONGLONG
);
3619 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerAdd(LONGLONG
,LONGLONG
);
3620 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerArithmeticShift(LONGLONG
,INT
);
3621 NTSYSAPI ULONGLONG WINAPI
RtlLargeIntegerDivide( ULONGLONG
,ULONGLONG
,ULONGLONG
*);
3622 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerNegate(LONGLONG
);
3623 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerShiftLeft(LONGLONG
,INT
);
3624 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerShiftRight(LONGLONG
,INT
);
3625 NTSYSAPI LONGLONG WINAPI
RtlLargeIntegerSubtract(LONGLONG
,LONGLONG
);
3626 NTSYSAPI NTSTATUS WINAPI
RtlLargeIntegerToChar(const ULONGLONG
*,ULONG
,ULONG
,PCHAR
);
3629 /* Threadpool functions */
3631 NTSYSAPI NTSTATUS WINAPI
TpAllocCleanupGroup(TP_CLEANUP_GROUP
**);
3632 NTSYSAPI NTSTATUS WINAPI
TpAllocIoCompletion(TP_IO
**,HANDLE
,PTP_IO_CALLBACK
,void *,TP_CALLBACK_ENVIRON
*);
3633 NTSYSAPI NTSTATUS WINAPI
TpAllocPool(TP_POOL
**,PVOID
);
3634 NTSYSAPI NTSTATUS WINAPI
TpAllocTimer(TP_TIMER
**,PTP_TIMER_CALLBACK
,PVOID
,TP_CALLBACK_ENVIRON
*);
3635 NTSYSAPI NTSTATUS WINAPI
TpAllocWait(TP_WAIT
**,PTP_WAIT_CALLBACK
,PVOID
,TP_CALLBACK_ENVIRON
*);
3636 NTSYSAPI NTSTATUS WINAPI
TpAllocWork(TP_WORK
**,PTP_WORK_CALLBACK
,PVOID
,TP_CALLBACK_ENVIRON
*);
3637 NTSYSAPI
void WINAPI
TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE
*,RTL_CRITICAL_SECTION
*);
3638 NTSYSAPI NTSTATUS WINAPI
TpCallbackMayRunLong(TP_CALLBACK_INSTANCE
*);
3639 NTSYSAPI
void WINAPI
TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE
*,HANDLE
);
3640 NTSYSAPI
void WINAPI
TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE
*,HANDLE
,DWORD
);
3641 NTSYSAPI
void WINAPI
TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE
*,HANDLE
);
3642 NTSYSAPI
void WINAPI
TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE
*,HMODULE
);
3643 NTSYSAPI
void WINAPI
TpCancelAsyncIoOperation(TP_IO
*);
3644 NTSYSAPI
void WINAPI
TpDisassociateCallback(TP_CALLBACK_INSTANCE
*);
3645 NTSYSAPI BOOL WINAPI
TpIsTimerSet(TP_TIMER
*);
3646 NTSYSAPI
void WINAPI
TpPostWork(TP_WORK
*);
3647 NTSYSAPI NTSTATUS WINAPI
TpQueryPoolStackInformation(TP_POOL
*, TP_POOL_STACK_INFORMATION
*stack_info
);
3648 NTSYSAPI
void WINAPI
TpReleaseCleanupGroup(TP_CLEANUP_GROUP
*);
3649 NTSYSAPI
void WINAPI
TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP
*,BOOL
,PVOID
);
3650 NTSYSAPI
void WINAPI
TpReleaseIoCompletion(TP_IO
*);
3651 NTSYSAPI
void WINAPI
TpReleasePool(TP_POOL
*);
3652 NTSYSAPI
void WINAPI
TpReleaseTimer(TP_TIMER
*);
3653 NTSYSAPI
void WINAPI
TpReleaseWait(TP_WAIT
*);
3654 NTSYSAPI
void WINAPI
TpReleaseWork(TP_WORK
*);
3655 NTSYSAPI
void WINAPI
TpSetPoolMaxThreads(TP_POOL
*,DWORD
);
3656 NTSYSAPI BOOL WINAPI
TpSetPoolMinThreads(TP_POOL
*,DWORD
);
3657 NTSYSAPI NTSTATUS WINAPI
TpSetPoolStackInformation(TP_POOL
*, TP_POOL_STACK_INFORMATION
*stack_info
);
3658 NTSYSAPI
void WINAPI
TpSetTimer(TP_TIMER
*, LARGE_INTEGER
*,LONG
,LONG
);
3659 NTSYSAPI
void WINAPI
TpSetWait(TP_WAIT
*,HANDLE
,LARGE_INTEGER
*);
3660 NTSYSAPI NTSTATUS WINAPI
TpSimpleTryPost(PTP_SIMPLE_CALLBACK
,PVOID
,TP_CALLBACK_ENVIRON
*);
3661 NTSYSAPI
void WINAPI
TpStartAsyncIoOperation(TP_IO
*);
3662 NTSYSAPI
void WINAPI
TpWaitForIoCompletion(TP_IO
*,BOOL
);
3663 NTSYSAPI
void WINAPI
TpWaitForTimer(TP_TIMER
*,BOOL
);
3664 NTSYSAPI
void WINAPI
TpWaitForWait(TP_WAIT
*,BOOL
);
3665 NTSYSAPI
void WINAPI
TpWaitForWork(TP_WORK
*,BOOL
);
3667 /* Wine internal functions */
3669 NTSYSAPI NTSTATUS CDECL
wine_nt_to_unix_file_name( const UNICODE_STRING
*nameW
, char *nameA
, SIZE_T
*size
,
3671 NTSYSAPI NTSTATUS CDECL
wine_unix_to_nt_file_name( const char *name
, WCHAR
*buffer
, SIZE_T
*size
);
3674 /***********************************************************************
3678 #define InitializeObjectAttributes(p,n,a,r,s) \
3680 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
3681 (p)->RootDirectory = r; \
3682 (p)->Attributes = a; \
3683 (p)->ObjectName = n; \
3684 (p)->SecurityDescriptor = s; \
3685 (p)->SecurityQualityOfService = NULL; \
3688 #define NtCurrentProcess() ((HANDLE)-1)
3690 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
3691 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
3692 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3693 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3694 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
3695 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
3696 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
3698 static inline BOOLEAN
RtlCheckBit(PCRTL_BITMAP lpBits
, ULONG ulBit
)
3700 if (lpBits
&& ulBit
< lpBits
->SizeOfBitMap
&&
3701 lpBits
->Buffer
[ulBit
>> 5] & (1 << (ulBit
& 31)))
3706 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
3707 static inline USHORT
RtlUshortByteSwap(USHORT s
)
3709 return (s
>> 8) | (s
<< 8);
3711 static inline ULONG
RtlUlongByteSwap(ULONG i
)
3713 #if defined(__i386__) && defined(__GNUC__)
3715 __asm__("bswap %0" : "=r" (ret
) : "0" (i
) );
3718 return ((ULONG
)RtlUshortByteSwap((USHORT
)i
) << 16) | RtlUshortByteSwap((USHORT
)(i
>> 16));
3722 /* list manipulation macros */
3723 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
3724 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
3725 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
3726 #define IsListEmpty(le) ((le)->Flink == (le))
3727 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
3728 static inline PLIST_ENTRY
RemoveHeadList(PLIST_ENTRY le
)
3730 PLIST_ENTRY f
, b
, e
;
3733 f
= le
->Flink
->Flink
;
3734 b
= le
->Flink
->Blink
;
3738 if (e
!= le
) e
->Flink
= e
->Blink
= NULL
;
3741 static inline PLIST_ENTRY
RemoveTailList(PLIST_ENTRY le
)
3743 PLIST_ENTRY f
, b
, e
;
3746 f
= le
->Blink
->Flink
;
3747 b
= le
->Blink
->Blink
;
3751 if (e
!= le
) e
->Flink
= e
->Blink
= NULL
;
3758 /* The thread information for 16-bit threads */
3759 /* NtCurrentTeb()->SubSystemTib points to this */
3762 void *unknown
; /* 00 unknown */
3763 UNICODE_STRING
*exe_name
; /* 04 exe module name */
3765 /* the following fields do not exist under Windows */
3766 UNICODE_STRING exe_str
; /* exe name string pointed to by exe_name */
3767 CURDIR curdir
; /* current directory */
3768 WCHAR curdir_buffer
[MAX_PATH
];
3769 } WIN16_SUBSYSTEM_TIB
;
3771 #endif /* __WINESRC__ */
3775 #endif /* defined(__cplusplus) */
3777 #endif /* __WINE_WINTERNL_H */