?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
windows.media.speech: Put the calling convention inside the function pointer parentheses.
[wine.git] / include / winternl.h
blob5a99827fe65879ab94a4998f62e40fb9fe8bd163
1 /*
2 * Internal NT APIs and data structures
3 *
4 * Copyright (C) the Wine project
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19 */
20
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
23
24 #include <ntdef.h>
25 #include <windef.h>
26
27 #ifdef __cplusplus
28 extern "C" {
29 #endif /* defined(__cplusplus) */
30
31
32 /**********************************************************************
33 * Fundamental types and data structures
34 */
35
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS;
39 #endif
40
41 typedef const char *PCSZ;
42
43 typedef short CSHORT;
44 typedef CSHORT *PCSHORT;
45
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING {
49 USHORT Length;
50 USHORT MaximumLength;
51 PCHAR Buffer;
52 } STRING, *PSTRING;
53 #endif
54
55 typedef STRING ANSI_STRING;
56 typedef PSTRING PANSI_STRING;
57 typedef const STRING *PCANSI_STRING;
58
59 typedef STRING OEM_STRING;
60 typedef PSTRING POEM_STRING;
61 typedef const STRING *PCOEM_STRING;
62
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING {
66 USHORT Length; /* bytes */
67 USHORT MaximumLength; /* bytes */
68 PWSTR Buffer;
69 } UNICODE_STRING, *PUNICODE_STRING;
70 #endif
71
72 typedef const UNICODE_STRING *PCUNICODE_STRING;
73
74 #ifndef _FILETIME_
75 #define _FILETIME_
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
78 {
79 #ifdef WORDS_BIGENDIAN
80 DWORD dwHighDateTime;
81 DWORD dwLowDateTime;
82 #else
83 DWORD dwLowDateTime;
84 DWORD dwHighDateTime;
85 #endif
86 } FILETIME, *PFILETIME, *LPFILETIME;
87 #endif /* _FILETIME_ */
88
89 /*
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
96 */
97 typedef struct _RTL_SYSTEM_TIME {
98 WORD wYear;
99 WORD wMonth;
100 WORD wDayOfWeek;
101 WORD wDay;
102 WORD wHour;
103 WORD wMinute;
104 WORD wSecond;
105 WORD wMilliseconds;
106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
107
108 typedef struct _RTL_TIME_ZONE_INFORMATION {
109 LONG Bias;
110 WCHAR StandardName[32];
111 RTL_SYSTEM_TIME StandardDate;
112 LONG StandardBias;
113 WCHAR DaylightName[32];
114 RTL_SYSTEM_TIME DaylightDate;
115 LONG DaylightBias;
116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
117
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
119 {
120 LONG Bias;
121 WCHAR StandardName[32];
122 RTL_SYSTEM_TIME StandardDate;
123 LONG StandardBias;
124 WCHAR DaylightName[32];
125 RTL_SYSTEM_TIME DaylightDate;
126 LONG DaylightBias;
127 WCHAR TimeZoneKeyName[128];
128 BOOLEAN DynamicDaylightTimeDisabled;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
130
131 typedef struct _CLIENT_ID
132 {
133 HANDLE UniqueProcess;
134 HANDLE UniqueThread;
135 } CLIENT_ID, *PCLIENT_ID;
136
137 typedef struct _CURDIR
138 {
139 UNICODE_STRING DosPath;
140 PVOID Handle;
141 } CURDIR, *PCURDIR;
142
143 typedef struct RTL_DRIVE_LETTER_CURDIR
144 {
145 USHORT Flags;
146 USHORT Length;
147 ULONG TimeStamp;
148 UNICODE_STRING DosPath;
149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
150
151 typedef struct _RTL_RELATIVE_NAME
152 {
153 UNICODE_STRING RelativeName;
154 HANDLE ContainerDirectory;
155 void *CurDirRef;
156 } RTL_RELATIVE_NAME, *PRTL_RELATIVE_NAME;
157
158 typedef struct tagRTL_BITMAP {
159 ULONG SizeOfBitMap; /* Number of bits in the bitmap */
160 PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP, *PRTL_BITMAP;
162
163 typedef const RTL_BITMAP *PCRTL_BITMAP;
164
165 typedef struct tagRTL_BITMAP_RUN {
166 ULONG StartingIndex; /* Bit position at which run starts */
167 ULONG NumberOfBits; /* Size of the run in bits */
168 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
169
170 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
171
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
173 {
174 ULONG AllocationSize;
175 ULONG Size;
176 ULONG Flags;
177 ULONG DebugFlags;
178 HANDLE ConsoleHandle;
179 ULONG ConsoleFlags;
180 HANDLE hStdInput;
181 HANDLE hStdOutput;
182 HANDLE hStdError;
183 CURDIR CurrentDirectory;
184 UNICODE_STRING DllPath;
185 UNICODE_STRING ImagePathName;
186 UNICODE_STRING CommandLine;
187 PWSTR Environment;
188 ULONG dwX;
189 ULONG dwY;
190 ULONG dwXSize;
191 ULONG dwYSize;
192 ULONG dwXCountChars;
193 ULONG dwYCountChars;
194 ULONG dwFillAttribute;
195 ULONG dwFlags;
196 ULONG wShowWindow;
197 UNICODE_STRING WindowTitle;
198 UNICODE_STRING Desktop;
199 UNICODE_STRING ShellInfo;
200 UNICODE_STRING RuntimeInfo;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
202 ULONG_PTR EnvironmentSize;
203 ULONG_PTR EnvironmentVersion;
204 PVOID PackageDependencyData;
205 ULONG ProcessGroupId;
206 ULONG LoaderThreads;
207 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
208
209 /* value for Flags field (FIXME: not the correct name) */
210 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
211
212 typedef struct _PEB_LDR_DATA
213 {
214 ULONG Length;
215 BOOLEAN Initialized;
216 PVOID SsHandle;
217 LIST_ENTRY InLoadOrderModuleList;
218 LIST_ENTRY InMemoryOrderModuleList;
219 LIST_ENTRY InInitializationOrderModuleList;
220 PVOID EntryInProgress;
221 BOOLEAN ShutdownInProgress;
222 HANDLE ShutdownThreadId;
223 } PEB_LDR_DATA, *PPEB_LDR_DATA;
224
225 typedef struct _GDI_TEB_BATCH
226 {
227 ULONG Offset;
228 HANDLE HDC;
229 ULONG Buffer[0x136];
230 } GDI_TEB_BATCH;
231
232 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
233 {
234 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
235 struct _ACTIVATION_CONTEXT *ActivationContext;
236 ULONG Flags;
237 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
238
239 typedef struct _ACTIVATION_CONTEXT_STACK
240 {
241 RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
242 LIST_ENTRY FrameListCache;
243 ULONG Flags;
244 ULONG NextCookieSequenceNumber;
245 ULONG_PTR StackId;
246 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
247
248 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
249 {
250 ULONG Flags;
251 const char *FrameName;
252 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
253
254 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
255 {
256 TEB_ACTIVE_FRAME_CONTEXT BasicContext;
257 const char *SourceLocation;
258 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
259
260 typedef struct _TEB_ACTIVE_FRAME
261 {
262 ULONG Flags;
263 struct _TEB_ACTIVE_FRAME *Previous;
264 TEB_ACTIVE_FRAME_CONTEXT *Context;
265 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
266
267 typedef struct _TEB_ACTIVE_FRAME_EX
268 {
269 TEB_ACTIVE_FRAME BasicFrame;
270 void *ExtensionIdentifier;
271 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
272
273 typedef struct _FLS_CALLBACK
274 {
275 void *unknown;
276 PFLS_CALLBACK_FUNCTION callback; /* ~0 if NULL callback is set, NULL if FLS index is free. */
277 } FLS_CALLBACK, *PFLS_CALLBACK;
278
279 typedef struct _FLS_INFO_CHUNK
280 {
281 ULONG count; /* number of allocated FLS indexes in the chunk. */
282 FLS_CALLBACK callbacks[1]; /* the size is 0x10 for chunk 0 and is twice as
283 * the previous chunk size for the rest. */
284 } FLS_INFO_CHUNK, *PFLS_INFO_CHUNK;
285
286 typedef struct _GLOBAL_FLS_DATA
287 {
288 FLS_INFO_CHUNK *fls_callback_chunks[8];
289 LIST_ENTRY fls_list_head;
290 ULONG fls_high_index;
291 } GLOBAL_FLS_DATA, *PGLOBAL_FLS_DATA;
292
293 typedef struct _TEB_FLS_DATA
294 {
295 LIST_ENTRY fls_list_entry;
296 void **fls_data_chunks[8];
297 } TEB_FLS_DATA, *PTEB_FLS_DATA;
298
299 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
300 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
301
302 /***********************************************************************
303 * PEB data structure
304 */
305 typedef struct _PEB
306 { /* win32/win64 */
307 BOOLEAN InheritedAddressSpace; /* 000/000 */
308 BOOLEAN ReadImageFileExecOptions; /* 001/001 */
309 BOOLEAN BeingDebugged; /* 002/002 */
310 BOOLEAN SpareBool; /* 003/003 */
311 HANDLE Mutant; /* 004/008 */
312 HMODULE ImageBaseAddress; /* 008/010 */
313 PPEB_LDR_DATA LdrData; /* 00c/018 */
314 RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 010/020 */
315 PVOID SubSystemData; /* 014/028 */
316 HANDLE ProcessHeap; /* 018/030 */
317 PRTL_CRITICAL_SECTION FastPebLock; /* 01c/038 */
318 PVOID /*PPEBLOCKROUTINE*/ FastPebLockRoutine; /* 020/040 */
319 PVOID /*PPEBLOCKROUTINE*/ FastPebUnlockRoutine; /* 024/048 */
320 ULONG EnvironmentUpdateCount; /* 028/050 */
321 PVOID KernelCallbackTable; /* 02c/058 */
322 ULONG Reserved; /* 030/060 */
323 ULONG AtlThunkSListPtr32; /* 034/064 */
324 PVOID ApiSetMap; /* 038/068 */
325 ULONG TlsExpansionCounter; /* 03c/070 */
326 PRTL_BITMAP TlsBitmap; /* 040/078 */
327 ULONG TlsBitmapBits[2]; /* 044/080 */
328 PVOID ReadOnlySharedMemoryBase; /* 04c/088 */
329 PVOID ReadOnlySharedMemoryHeap; /* 050/090 */
330 PVOID *ReadOnlyStaticServerData; /* 054/098 */
331 PVOID AnsiCodePageData; /* 058/0a0 */
332 PVOID OemCodePageData; /* 05c/0a8 */
333 PVOID UnicodeCaseTableData; /* 060/0b0 */
334 ULONG NumberOfProcessors; /* 064/0b8 */
335 ULONG NtGlobalFlag; /* 068/0bc */
336 LARGE_INTEGER CriticalSectionTimeout; /* 070/0c0 */
337 SIZE_T HeapSegmentReserve; /* 078/0c8 */
338 SIZE_T HeapSegmentCommit; /* 07c/0d0 */
339 SIZE_T HeapDeCommitTotalFreeThreshold; /* 080/0d8 */
340 SIZE_T HeapDeCommitFreeBlockThreshold; /* 084/0e0 */
341 ULONG NumberOfHeaps; /* 088/0e8 */
342 ULONG MaximumNumberOfHeaps; /* 08c/0ec */
343 PVOID *ProcessHeaps; /* 090/0f0 */
344 PVOID GdiSharedHandleTable; /* 094/0f8 */
345 PVOID ProcessStarterHelper; /* 098/100 */
346 PVOID GdiDCAttributeList; /* 09c/108 */
347 PVOID LoaderLock; /* 0a0/110 */
348 ULONG OSMajorVersion; /* 0a4/118 */
349 ULONG OSMinorVersion; /* 0a8/11c */
350 ULONG OSBuildNumber; /* 0ac/120 */
351 ULONG OSPlatformId; /* 0b0/124 */
352 ULONG ImageSubSystem; /* 0b4/128 */
353 ULONG ImageSubSystemMajorVersion; /* 0b8/12c */
354 ULONG ImageSubSystemMinorVersion; /* 0bc/130 */
355 ULONG ImageProcessAffinityMask; /* 0c0/134 */
356 HANDLE GdiHandleBuffer[28]; /* 0c4/138 */
357 ULONG unknown[6]; /* 134/218 */
358 PVOID PostProcessInitRoutine; /* 14c/230 */
359 PRTL_BITMAP TlsExpansionBitmap; /* 150/238 */
360 ULONG TlsExpansionBitmapBits[32]; /* 154/240 */
361 ULONG SessionId; /* 1d4/2c0 */
362 ULARGE_INTEGER AppCompatFlags; /* 1d8/2c8 */
363 ULARGE_INTEGER AppCompatFlagsUser; /* 1e0/2d0 */
364 PVOID ShimData; /* 1e8/2d8 */
365 PVOID AppCompatInfo; /* 1ec/2e0 */
366 UNICODE_STRING CSDVersion; /* 1f0/2e8 */
367 PVOID ActivationContextData; /* 1f8/2f8 */
368 PVOID ProcessAssemblyStorageMap; /* 1fc/300 */
369 PVOID SystemDefaultActivationData; /* 200/308 */
370 PVOID SystemAssemblyStorageMap; /* 204/310 */
371 SIZE_T MinimumStackCommit; /* 208/318 */
372 PVOID *FlsCallback; /* 20c/320 */
373 LIST_ENTRY FlsListHead; /* 210/328 */
374 PRTL_BITMAP FlsBitmap; /* 218/338 */
375 ULONG FlsBitmapBits[4]; /* 21c/340 */
376 ULONG FlsHighIndex; /* 22c/350 */
377 PVOID WerRegistrationData; /* 230/358 */
378 PVOID WerShipAssertPtr; /* 234/360 */
379 PVOID pUnused; /* 238/368 */
380 PVOID pImageHeaderHash; /* 23c/370 */
381 ULONG TracingFlags; /* 240/378 */
382 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 248/380 */
383 ULONG TppWorkerpListLock; /* 250/388 */
384 LIST_ENTRY TppWorkerpList; /* 254/390 */
385 PVOID WaitOnAddressHashTable [0x80]; /* 25c/3a0 */
386 PVOID TelemetryCoverageHeader; /* 45c/7a0 */
387 ULONG CloudFileFlags; /* 460/7a8 */
388 ULONG CloudFileDiagFlags; /* 464/7ac */
389 CHAR PlaceholderCompatibilityMode; /* 468/7b0 */
390 CHAR PlaceholderCompatibilityModeReserved[7]; /* 469/7b1 */
391 PVOID LeapSecondData; /* 470/7b8 */
392 ULONG LeapSecondFlags; /* 474/7c0 */
393 ULONG NtGlobalFlag2; /* 478/7c4 */
394 } PEB, *PPEB;
395
396
397 /***********************************************************************
398 * TEB data structure
399 */
400 typedef struct _TEB
401 { /* win32/win64 */
402 NT_TIB Tib; /* 000/0000 */
403 PVOID EnvironmentPointer; /* 01c/0038 */
404 CLIENT_ID ClientId; /* 020/0040 */
405 PVOID ActiveRpcHandle; /* 028/0050 */
406 PVOID ThreadLocalStoragePointer; /* 02c/0058 */
407 PPEB Peb; /* 030/0060 */
408 ULONG LastErrorValue; /* 034/0068 */
409 ULONG CountOfOwnedCriticalSections; /* 038/006c */
410 PVOID CsrClientThread; /* 03c/0070 */
411 PVOID Win32ThreadInfo; /* 040/0078 */
412 ULONG User32Reserved[26]; /* 044/0080 */
413 ULONG UserReserved[5]; /* 0ac/00e8 */
414 PVOID WOW32Reserved; /* 0c0/0100 */
415 ULONG CurrentLocale; /* 0c4/0108 */
416 ULONG FpSoftwareStatusRegister; /* 0c8/010c */
417 PVOID ReservedForDebuggerInstrumentation[16]; /* 0cc/0110 */
418 #ifdef _WIN64
419 PVOID SystemReserved1[30]; /* /0190 */
420 #else
421 PVOID SystemReserved1[26]; /* 10c/ used for krnl386 private data in Wine */
422 #endif
423 char PlaceholderCompatibilityMode; /* 174/0280 */
424 char PlaceholderReserved[11]; /* 175/0281 */
425 DWORD ProxiedProcessId; /* 180/028c */
426 ACTIVATION_CONTEXT_STACK ActivationContextStack; /* 184/0290 */
427 UCHAR WorkingOnBehalfOfTicket[8]; /* 19c/02b8 */
428 LONG ExceptionCode; /* 1a4/02c0 */
429 ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; /* 1a8/02c8 */
430 ULONG_PTR InstrumentationCallbackSp; /* 1ac/02d0 */
431 ULONG_PTR InstrumentationCallbackPreviousPc; /* 1b0/02d8 */
432 ULONG_PTR InstrumentationCallbackPreviousSp; /* 1b4/02e0 */
433 #ifdef _WIN64
434 ULONG TxFsContext; /* /02e8 */
435 BOOLEAN InstrumentationCallbackDisabled; /* /02ec */
436 #else
437 BOOLEAN InstrumentationCallbackDisabled; /* 1b8/ */
438 BYTE SpareBytes1[23]; /* 1b9/ */
439 ULONG TxFsContext; /* 1d0/ */
440 #endif
441 GDI_TEB_BATCH GdiTebBatch; /* 1d4/02f0 used for ntdll private data in Wine */
442 CLIENT_ID RealClientId; /* 6b4/07d8 */
443 HANDLE GdiCachedProcessHandle; /* 6bc/07e8 */
444 ULONG GdiClientPID; /* 6c0/07f0 */
445 ULONG GdiClientTID; /* 6c4/07f4 */
446 PVOID GdiThreadLocaleInfo; /* 6c8/07f8 */
447 ULONG_PTR Win32ClientInfo[62]; /* 6cc/0800 used for user32 private data in Wine */
448 PVOID glDispatchTable[233]; /* 7c4/09f0 */
449 PVOID glReserved1[29]; /* b68/1138 */
450 PVOID glReserved2; /* bdc/1220 */
451 PVOID glSectionInfo; /* be0/1228 */
452 PVOID glSection; /* be4/1230 */
453 PVOID glTable; /* be8/1238 */
454 PVOID glCurrentRC; /* bec/1240 */
455 PVOID glContext; /* bf0/1248 */
456 ULONG LastStatusValue; /* bf4/1250 */
457 UNICODE_STRING StaticUnicodeString; /* bf8/1258 */
458 WCHAR StaticUnicodeBuffer[261]; /* c00/1268 */
459 PVOID DeallocationStack; /* e0c/1478 */
460 PVOID TlsSlots[64]; /* e10/1480 */
461 LIST_ENTRY TlsLinks; /* f10/1680 */
462 PVOID Vdm; /* f18/1690 */
463 PVOID ReservedForNtRpc; /* f1c/1698 */
464 PVOID DbgSsReserved[2]; /* f20/16a0 */
465 ULONG HardErrorDisabled; /* f28/16b0 */
466 PVOID Instrumentation[16]; /* f2c/16b8 */
467 PVOID WinSockData; /* f6c/1738 */
468 ULONG GdiBatchCount; /* f70/1740 */
469 ULONG Spare2; /* f74/1744 */
470 ULONG GuaranteedStackBytes; /* f78/1748 */
471 PVOID ReservedForPerf; /* f7c/1750 */
472 PVOID ReservedForOle; /* f80/1758 */
473 ULONG WaitingOnLoaderLock; /* f84/1760 */
474 PVOID Reserved5[3]; /* f88/1768 */
475 PVOID *TlsExpansionSlots; /* f94/1780 */
476 #ifdef _WIN64
477 PVOID DeallocationBStore; /* /1788 */
478 PVOID BStoreLimit; /* /1790 */
479 #endif
480 ULONG ImpersonationLocale; /* f98/1798 */
481 ULONG IsImpersonating; /* f9c/179c */
482 PVOID NlsCache; /* fa0/17a0 */
483 PVOID ShimData; /* fa4/17a8 */
484 ULONG HeapVirtualAffinity; /* fa8/17b0 */
485 PVOID CurrentTransactionHandle; /* fac/17b8 */
486 TEB_ACTIVE_FRAME *ActiveFrame; /* fb0/17c0 */
487 TEB_FLS_DATA *FlsSlots; /* fb4/17c8 */
488 PVOID PreferredLanguages; /* fb8/17d0 */
489 PVOID UserPrefLanguages; /* fbc/17d8 */
490 PVOID MergedPrefLanguages; /* fc0/17e0 */
491 ULONG MuiImpersonation; /* fc4/17e8 */
492 USHORT CrossTebFlags; /* fc8/17ec */
493 USHORT SameTebFlags; /* fca/17ee */
494 PVOID TxnScopeEnterCallback; /* fcc/17f0 */
495 PVOID TxnScopeExitCallback; /* fd0/17f8 */
496 PVOID TxnScopeContext; /* fd4/1800 */
497 ULONG LockCount; /* fd8/1808 */
498 LONG WowTebOffset; /* fdc/180c */
499 PVOID ResourceRetValue; /* fe0/1810 */
500 PVOID ReservedForWdf; /* fe4/1818 */
501 ULONGLONG ReservedForCrt; /* fe8/1820 */
502 GUID EffectiveContainerId; /* ff0/1828 */
503 } TEB, *PTEB;
504
505
506 /***********************************************************************
507 * The 32-bit/64-bit version of the PEB and TEB for WoW64
508 */
509 typedef struct _NT_TIB32
510 {
511 ULONG ExceptionList; /* 0000 */
512 ULONG StackBase; /* 0004 */
513 ULONG StackLimit; /* 0008 */
514 ULONG SubSystemTib; /* 000c */
515 ULONG FiberData; /* 0010 */
516 ULONG ArbitraryUserPointer; /* 0014 */
517 ULONG Self; /* 0018 */
518 } NT_TIB32;
519
520 typedef struct _NT_TIB64
521 {
522 ULONG64 ExceptionList; /* 0000 */
523 ULONG64 StackBase; /* 0008 */
524 ULONG64 StackLimit; /* 0010 */
525 ULONG64 SubSystemTib; /* 0018 */
526 ULONG64 FiberData; /* 0020 */
527 ULONG64 ArbitraryUserPointer; /* 0028 */
528 ULONG64 Self; /* 0030 */
529 } NT_TIB64;
530
531 typedef struct _CLIENT_ID32
532 {
533 ULONG UniqueProcess;
534 ULONG UniqueThread;
535 } CLIENT_ID32;
536
537 typedef struct _CLIENT_ID64
538 {
539 ULONG64 UniqueProcess;
540 ULONG64 UniqueThread;
541 } CLIENT_ID64;
542
543 typedef struct _LIST_ENTRY32
544 {
545 ULONG Flink;
546 ULONG Blink;
547 } LIST_ENTRY32;
548
549 typedef struct _LIST_ENTRY64
550 {
551 ULONG64 Flink;
552 ULONG64 Blink;
553 } LIST_ENTRY64;
554
555 typedef struct _UNICODE_STRING32
556 {
557 USHORT Length;
558 USHORT MaximumLength;
559 ULONG Buffer;
560 } UNICODE_STRING32;
561
562 typedef struct _UNICODE_STRING64
563 {
564 USHORT Length;
565 USHORT MaximumLength;
566 ULONG64 Buffer;
567 } UNICODE_STRING64;
568
569 typedef struct _ACTIVATION_CONTEXT_STACK32
570 {
571 ULONG ActiveFrame;
572 LIST_ENTRY32 FrameListCache;
573 ULONG Flags;
574 ULONG NextCookieSequenceNumber;
575 ULONG32 StackId;
576 } ACTIVATION_CONTEXT_STACK32;
577
578 typedef struct _ACTIVATION_CONTEXT_STACK64
579 {
580 ULONG64 ActiveFrame;
581 LIST_ENTRY64 FrameListCache;
582 ULONG Flags;
583 ULONG NextCookieSequenceNumber;
584 ULONG64 StackId;
585 } ACTIVATION_CONTEXT_STACK64;
586
587 typedef struct _CURDIR32
588 {
589 UNICODE_STRING32 DosPath;
590 ULONG Handle;
591 } CURDIR32;
592
593 typedef struct _CURDIR64
594 {
595 UNICODE_STRING64 DosPath;
596 ULONG64 Handle;
597 } CURDIR64;
598
599 typedef struct RTL_DRIVE_LETTER_CURDIR32
600 {
601 USHORT Flags;
602 USHORT Length;
603 ULONG TimeStamp;
604 UNICODE_STRING32 DosPath;
605 } RTL_DRIVE_LETTER_CURDIR32;
606
607 typedef struct RTL_DRIVE_LETTER_CURDIR64
608 {
609 USHORT Flags;
610 USHORT Length;
611 ULONG TimeStamp;
612 UNICODE_STRING64 DosPath;
613 } RTL_DRIVE_LETTER_CURDIR64;
614
615 typedef struct _RTL_USER_PROCESS_PARAMETERS32
616 {
617 ULONG AllocationSize;
618 ULONG Size;
619 ULONG Flags;
620 ULONG DebugFlags;
621 ULONG ConsoleHandle;
622 ULONG ConsoleFlags;
623 ULONG hStdInput;
624 ULONG hStdOutput;
625 ULONG hStdError;
626 CURDIR32 CurrentDirectory;
627 UNICODE_STRING32 DllPath;
628 UNICODE_STRING32 ImagePathName;
629 UNICODE_STRING32 CommandLine;
630 ULONG Environment;
631 ULONG dwX;
632 ULONG dwY;
633 ULONG dwXSize;
634 ULONG dwYSize;
635 ULONG dwXCountChars;
636 ULONG dwYCountChars;
637 ULONG dwFillAttribute;
638 ULONG dwFlags;
639 ULONG wShowWindow;
640 UNICODE_STRING32 WindowTitle;
641 UNICODE_STRING32 Desktop;
642 UNICODE_STRING32 ShellInfo;
643 UNICODE_STRING32 RuntimeInfo;
644 RTL_DRIVE_LETTER_CURDIR32 DLCurrentDirectory[0x20];
645 ULONG EnvironmentSize;
646 ULONG EnvironmentVersion;
647 ULONG PackageDependencyData;
648 ULONG ProcessGroupId;
649 ULONG LoaderThreads;
650 } RTL_USER_PROCESS_PARAMETERS32;
651
652 typedef struct _RTL_USER_PROCESS_PARAMETERS64
653 {
654 ULONG AllocationSize;
655 ULONG Size;
656 ULONG Flags;
657 ULONG DebugFlags;
658 ULONG64 ConsoleHandle;
659 ULONG ConsoleFlags;
660 ULONG64 hStdInput;
661 ULONG64 hStdOutput;
662 ULONG64 hStdError;
663 CURDIR64 CurrentDirectory;
664 UNICODE_STRING64 DllPath;
665 UNICODE_STRING64 ImagePathName;
666 UNICODE_STRING64 CommandLine;
667 ULONG64 Environment;
668 ULONG dwX;
669 ULONG dwY;
670 ULONG dwXSize;
671 ULONG dwYSize;
672 ULONG dwXCountChars;
673 ULONG dwYCountChars;
674 ULONG dwFillAttribute;
675 ULONG dwFlags;
676 ULONG wShowWindow;
677 UNICODE_STRING64 WindowTitle;
678 UNICODE_STRING64 Desktop;
679 UNICODE_STRING64 ShellInfo;
680 UNICODE_STRING64 RuntimeInfo;
681 RTL_DRIVE_LETTER_CURDIR64 DLCurrentDirectory[0x20];
682 ULONG64 EnvironmentSize;
683 ULONG64 EnvironmentVersion;
684 ULONG64 PackageDependencyData;
685 ULONG ProcessGroupId;
686 ULONG LoaderThreads;
687 } RTL_USER_PROCESS_PARAMETERS64;
688
689 typedef struct _PEB_LDR_DATA32
690 {
691 ULONG Length;
692 BOOLEAN Initialized;
693 ULONG SsHandle;
694 LIST_ENTRY32 InLoadOrderModuleList;
695 LIST_ENTRY32 InMemoryOrderModuleList;
696 LIST_ENTRY32 InInitializationOrderModuleList;
697 ULONG EntryInProgress;
698 BOOLEAN ShutdownInProgress;
699 ULONG ShutdownThreadId;
700 } PEB_LDR_DATA32, *PPEB_LDR_DATA32;
701
702 typedef struct _PEB_LDR_DATA64
703 {
704 ULONG Length;
705 BOOLEAN Initialized;
706 ULONG64 SsHandle;
707 LIST_ENTRY64 InLoadOrderModuleList;
708 LIST_ENTRY64 InMemoryOrderModuleList;
709 LIST_ENTRY64 InInitializationOrderModuleList;
710 ULONG64 EntryInProgress;
711 BOOLEAN ShutdownInProgress;
712 ULONG64 ShutdownThreadId;
713 } PEB_LDR_DATA64, *PPEB_LDR_DATA64;
714
715 typedef struct _PEB32
716 {
717 BOOLEAN InheritedAddressSpace; /* 0000 */
718 BOOLEAN ReadImageFileExecOptions; /* 0001 */
719 BOOLEAN BeingDebugged; /* 0002 */
720 BOOLEAN SpareBool; /* 0003 */
721 ULONG Mutant; /* 0004 */
722 ULONG ImageBaseAddress; /* 0008 */
723 ULONG LdrData; /* 000c */
724 ULONG ProcessParameters; /* 0010 */
725 ULONG SubSystemData; /* 0014 */
726 ULONG ProcessHeap; /* 0018 */
727 ULONG FastPebLock; /* 001c */
728 ULONG FastPebLockRoutine; /* 0020 */
729 ULONG FastPebUnlockRoutine; /* 0024 */
730 ULONG EnvironmentUpdateCount; /* 0028 */
731 ULONG KernelCallbackTable; /* 002c */
732 ULONG Reserved; /* 0030 */
733 ULONG AtlThunkSListPtr32; /* 0034 */
734 ULONG ApiSetMap; /* 0038 */
735 ULONG TlsExpansionCounter; /* 003c */
736 ULONG TlsBitmap; /* 0040 */
737 ULONG TlsBitmapBits[2]; /* 0044 */
738 ULONG ReadOnlySharedMemoryBase; /* 004c */
739 ULONG ReadOnlySharedMemoryHeap; /* 0050 */
740 ULONG ReadOnlyStaticServerData; /* 0054 */
741 ULONG AnsiCodePageData; /* 0058 */
742 ULONG OemCodePageData; /* 005c */
743 ULONG UnicodeCaseTableData; /* 0060 */
744 ULONG NumberOfProcessors; /* 0064 */
745 ULONG NtGlobalFlag; /* 0068 */
746 LARGE_INTEGER CriticalSectionTimeout; /* 0070 */
747 ULONG HeapSegmentReserve; /* 0078 */
748 ULONG HeapSegmentCommit; /* 007c */
749 ULONG HeapDeCommitTotalFreeThreshold; /* 0080 */
750 ULONG HeapDeCommitFreeBlockThreshold; /* 0084 */
751 ULONG NumberOfHeaps; /* 0088 */
752 ULONG MaximumNumberOfHeaps; /* 008c */
753 ULONG ProcessHeaps; /* 0090 */
754 ULONG GdiSharedHandleTable; /* 0094 */
755 ULONG ProcessStarterHelper; /* 0098 */
756 ULONG GdiDCAttributeList; /* 009c */
757 ULONG LoaderLock; /* 00a0 */
758 ULONG OSMajorVersion; /* 00a4 */
759 ULONG OSMinorVersion; /* 00a8 */
760 ULONG OSBuildNumber; /* 00ac */
761 ULONG OSPlatformId; /* 00b0 */
762 ULONG ImageSubSystem; /* 00b4 */
763 ULONG ImageSubSystemMajorVersion; /* 00b8 */
764 ULONG ImageSubSystemMinorVersion; /* 00bc */
765 ULONG ImageProcessAffinityMask; /* 00c0 */
766 ULONG GdiHandleBuffer[28]; /* 00c4 */
767 ULONG unknown[6]; /* 0134 */
768 ULONG PostProcessInitRoutine; /* 014c */
769 ULONG TlsExpansionBitmap; /* 0150 */
770 ULONG TlsExpansionBitmapBits[32]; /* 0154 */
771 ULONG SessionId; /* 01d4 */
772 ULARGE_INTEGER AppCompatFlags; /* 01d8 */
773 ULARGE_INTEGER AppCompatFlagsUser; /* 01e0 */
774 ULONG ShimData; /* 01e8 */
775 ULONG AppCompatInfo; /* 01ec */
776 UNICODE_STRING CSDVersion; /* 01f0 */
777 ULONG ActivationContextData; /* 01f8 */
778 ULONG ProcessAssemblyStorageMap; /* 01fc */
779 ULONG SystemDefaultActivationData; /* 0200 */
780 ULONG SystemAssemblyStorageMap; /* 0204 */
781 ULONG MinimumStackCommit; /* 0208 */
782 ULONG FlsCallback; /* 020c */
783 LIST_ENTRY FlsListHead; /* 0210 */
784 ULONG FlsBitmap; /* 0218 */
785 ULONG FlsBitmapBits[4]; /* 021c */
786 ULONG FlsHighIndex; /* 022c */
787 ULONG WerRegistrationData; /* 0230 */
788 ULONG WerShipAssertPtr; /* 0234 */
789 ULONG pUnused; /* 0238 */
790 ULONG pImageHeaderHash; /* 023c */
791 ULONG TracingFlags; /* 0240 */
792 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0248 */
793 ULONG TppWorkerpListLock; /* 0250 */
794 LIST_ENTRY TppWorkerpList; /* 0254 */
795 ULONG WaitOnAddressHashTable [0x80]; /* 025c */
796 ULONG TelemetryCoverageHeader; /* 045c */
797 ULONG CloudFileFlags; /* 0460 */
798 ULONG CloudFileDiagFlags; /* 0464 */
799 CHAR PlaceholderCompatibilityMode; /* 0468 */
800 CHAR PlaceholderCompatibilityModeReserved[7]; /* 0469 */
801 ULONG LeapSecondData; /* 0470 */
802 ULONG LeapSecondFlags; /* 0474 */
803 ULONG NtGlobalFlag2; /* 0478 */
804 } PEB32;
805
806 typedef struct _PEB64
807 {
808 BOOLEAN InheritedAddressSpace; /* 0000 */
809 BOOLEAN ReadImageFileExecOptions; /* 0001 */
810 BOOLEAN BeingDebugged; /* 0002 */
811 BOOLEAN SpareBool; /* 0003 */
812 ULONG64 Mutant; /* 0008 */
813 ULONG64 ImageBaseAddress; /* 0010 */
814 ULONG64 LdrData; /* 0018 */
815 ULONG64 ProcessParameters; /* 0020 */
816 ULONG64 SubSystemData; /* 0028 */
817 ULONG64 ProcessHeap; /* 0030 */
818 ULONG64 FastPebLock; /* 0038 */
819 ULONG64 FastPebLockRoutine; /* 0040 */
820 ULONG64 FastPebUnlockRoutine; /* 0048 */
821 ULONG EnvironmentUpdateCount; /* 0050 */
822 ULONG64 KernelCallbackTable; /* 0058 */
823 ULONG Reserved; /* 0060 */
824 ULONG AtlThunkSListPtr32; /* 0064 */
825 ULONG64 ApiSetMap; /* 0068 */
826 ULONG TlsExpansionCounter; /* 0070 */
827 ULONG64 TlsBitmap; /* 0078 */
828 ULONG TlsBitmapBits[2]; /* 0080 */
829 ULONG64 ReadOnlySharedMemoryBase; /* 0088 */
830 ULONG64 ReadOnlySharedMemoryHeap; /* 0090 */
831 ULONG64 ReadOnlyStaticServerData; /* 0098 */
832 ULONG64 AnsiCodePageData; /* 00a0 */
833 ULONG64 OemCodePageData; /* 00a8 */
834 ULONG64 UnicodeCaseTableData; /* 00b0 */
835 ULONG NumberOfProcessors; /* 00b8 */
836 ULONG NtGlobalFlag; /* 00bc */
837 LARGE_INTEGER CriticalSectionTimeout; /* 00c0 */
838 ULONG64 HeapSegmentReserve; /* 00c8 */
839 ULONG64 HeapSegmentCommit; /* 00d0 */
840 ULONG64 HeapDeCommitTotalFreeThreshold; /* 00d8 */
841 ULONG64 HeapDeCommitFreeBlockThreshold; /* 00e0 */
842 ULONG NumberOfHeaps; /* 00e8 */
843 ULONG MaximumNumberOfHeaps; /* 00ec */
844 ULONG64 ProcessHeaps; /* 00f0 */
845 ULONG64 GdiSharedHandleTable; /* 00f8 */
846 ULONG64 ProcessStarterHelper; /* 0100 */
847 ULONG64 GdiDCAttributeList; /* 0108 */
848 ULONG64 LoaderLock; /* 0110 */
849 ULONG OSMajorVersion; /* 0118 */
850 ULONG OSMinorVersion; /* 011c */
851 ULONG OSBuildNumber; /* 0120 */
852 ULONG OSPlatformId; /* 0124 */
853 ULONG ImageSubSystem; /* 0128 */
854 ULONG ImageSubSystemMajorVersion; /* 012c */
855 ULONG ImageSubSystemMinorVersion; /* 0130 */
856 ULONG ImageProcessAffinityMask; /* 0134 */
857 ULONG64 GdiHandleBuffer[28]; /* 0138 */
858 ULONG unknown[6]; /* 0218 */
859 ULONG64 PostProcessInitRoutine; /* 0230 */
860 ULONG64 TlsExpansionBitmap; /* 0238 */
861 ULONG TlsExpansionBitmapBits[32]; /* 0240 */
862 ULONG SessionId; /* 02c0 */
863 ULARGE_INTEGER AppCompatFlags; /* 02c8 */
864 ULARGE_INTEGER AppCompatFlagsUser; /* 02d0 */
865 ULONG64 ShimData; /* 02d8 */
866 ULONG64 AppCompatInfo; /* 02e0 */
867 UNICODE_STRING64 CSDVersion; /* 02e8 */
868 ULONG64 ActivationContextData; /* 02f8 */
869 ULONG64 ProcessAssemblyStorageMap; /* 0300 */
870 ULONG64 SystemDefaultActivationData; /* 0308 */
871 ULONG64 SystemAssemblyStorageMap; /* 0310 */
872 ULONG64 MinimumStackCommit; /* 0318 */
873 ULONG64 FlsCallback; /* 0320 */
874 LIST_ENTRY64 FlsListHead; /* 0328 */
875 ULONG64 FlsBitmap; /* 0338 */
876 ULONG FlsBitmapBits[4]; /* 0340 */
877 ULONG FlsHighIndex; /* 0350 */
878 ULONG64 WerRegistrationData; /* 0358 */
879 ULONG64 WerShipAssertPtr; /* 0360 */
880 ULONG64 pUnused; /* 0368 */
881 ULONG64 pImageHeaderHash; /* 0370 */
882 ULONG TracingFlags; /* 0378 */
883 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0380 */
884 ULONG TppWorkerpListLock; /* 0388 */
885 LIST_ENTRY64 TppWorkerpList; /* 0390 */
886 ULONG64 WaitOnAddressHashTable [0x80]; /* 03a0 */
887 ULONG64 TelemetryCoverageHeader; /* 07a0 */
888 ULONG CloudFileFlags; /* 07a8 */
889 ULONG CloudFileDiagFlags; /* 07ac */
890 CHAR PlaceholderCompatibilityMode; /* 07b0 */
891 CHAR PlaceholderCompatibilityModeReserved[7]; /* 07b1 */
892 ULONG64 LeapSecondData; /* 07b8 */
893 ULONG LeapSecondFlags; /* 07c0 */
894 ULONG NtGlobalFlag2; /* 07c4 */
895 } PEB64;
896
897 typedef struct _TEB32
898 {
899 NT_TIB32 Tib; /* 0000 */
900 ULONG EnvironmentPointer; /* 001c */
901 CLIENT_ID32 ClientId; /* 0020 */
902 ULONG ActiveRpcHandle; /* 0028 */
903 ULONG ThreadLocalStoragePointer; /* 002c */
904 ULONG Peb; /* 0030 */
905 ULONG LastErrorValue; /* 0034 */
906 ULONG CountOfOwnedCriticalSections; /* 0038 */
907 ULONG CsrClientThread; /* 003c */
908 ULONG Win32ThreadInfo; /* 0040 */
909 ULONG User32Reserved[26]; /* 0044 */
910 ULONG UserReserved[5]; /* 00ac */
911 ULONG WOW32Reserved; /* 00c0 */
912 ULONG CurrentLocale; /* 00c4 */
913 ULONG FpSoftwareStatusRegister; /* 00c8 */
914 ULONG ReservedForDebuggerInstrumentation[16]; /* 00cc */
915 ULONG SystemReserved1[26]; /* 010c */
916 char PlaceholderCompatibilityMode; /* 0174 */
917 char PlaceholderReserved[11]; /* 0175 */
918 DWORD ProxiedProcessId; /* 0180 */
919 ACTIVATION_CONTEXT_STACK32 ActivationContextStack; /* 0184 */
920 UCHAR WorkingOnBehalfOfTicket[8]; /* 019c */
921 LONG ExceptionCode; /* 01a4 */
922 ULONG ActivationContextStackPointer; /* 01a8 */
923 ULONG InstrumentationCallbackSp; /* 01ac */
924 ULONG InstrumentationCallbackPreviousPc; /* 01b0 */
925 ULONG InstrumentationCallbackPreviousSp; /* 01b4 */
926 BOOLEAN InstrumentationCallbackDisabled; /* 01b8 */
927 BYTE SpareBytes1[23]; /* 01b9 */
928 ULONG TxFsContext; /* 01d0 */
929 ULONG GdiTebBatch[0x138]; /* 01d4 */
930 CLIENT_ID32 RealClientId; /* 06b4 */
931 ULONG GdiCachedProcessHandle; /* 06bc */
932 ULONG GdiClientPID; /* 06c0 */
933 ULONG GdiClientTID; /* 06c4 */
934 ULONG GdiThreadLocaleInfo; /* 06c8 */
935 ULONG Win32ClientInfo[62]; /* 06cc */
936 ULONG glDispatchTable[233]; /* 07c4 */
937 ULONG glReserved1[29]; /* 0b68 */
938 ULONG glReserved2; /* 0bdc */
939 ULONG glSectionInfo; /* 0be0 */
940 ULONG glSection; /* 0be4 */
941 ULONG glTable; /* 0be8 */
942 ULONG glCurrentRC; /* 0bec */
943 ULONG glContext; /* 0bf0 */
944 ULONG LastStatusValue; /* 0bf4 */
945 UNICODE_STRING32 StaticUnicodeString; /* 0bf8 */
946 WCHAR StaticUnicodeBuffer[261]; /* 0c00 */
947 ULONG DeallocationStack; /* 0e0c */
948 ULONG TlsSlots[64]; /* 0e10 */
949 LIST_ENTRY32 TlsLinks; /* 0f10 */
950 ULONG Vdm; /* 0f18 */
951 ULONG ReservedForNtRpc; /* 0f1c */
952 ULONG DbgSsReserved[2]; /* 0f20 */
953 ULONG HardErrorDisabled; /* 0f28 */
954 ULONG Instrumentation[16]; /* 0f2c */
955 ULONG WinSockData; /* 0f6c */
956 ULONG GdiBatchCount; /* 0f70 */
957 ULONG Spare2; /* 0f74 */
958 ULONG GuaranteedStackBytes; /* 0f78 */
959 ULONG ReservedForPerf; /* 0f7c */
960 ULONG ReservedForOle; /* 0f80 */
961 ULONG WaitingOnLoaderLock; /* 0f84 */
962 ULONG Reserved5[3]; /* 0f88 */
963 ULONG TlsExpansionSlots; /* 0f94 */
964 ULONG ImpersonationLocale; /* 0f98 */
965 ULONG IsImpersonating; /* 0f9c */
966 ULONG NlsCache; /* 0fa0 */
967 ULONG ShimData; /* 0fa4 */
968 ULONG HeapVirtualAffinity; /* 0fa8 */
969 ULONG CurrentTransactionHandle; /* 0fac */
970 ULONG ActiveFrame; /* 0fb0 */
971 ULONG FlsSlots; /* 0fb4 */
972 ULONG PreferredLanguages; /* 0fb8 */
973 ULONG UserPrefLanguages; /* 0fbc */
974 ULONG MergedPrefLanguages; /* 0fc0 */
975 ULONG MuiImpersonation; /* 0fc4 */
976 USHORT CrossTebFlags; /* 0fc8 */
977 USHORT SameTebFlags; /* 0fca */
978 ULONG TxnScopeEnterCallback; /* 0fcc */
979 ULONG TxnScopeExitCallback; /* 0fd0 */
980 ULONG TxnScopeContext; /* 0fd4 */
981 ULONG LockCount; /* 0fd8 */
982 LONG WowTebOffset; /* 0fdc */
983 ULONG ResourceRetValue; /* 0fe0 */
984 ULONG ReservedForWdf; /* 0fe4 */
985 ULONGLONG ReservedForCrt; /* 0fe8 */
986 GUID EffectiveContainerId; /* 0ff0 */
987 } TEB32;
988
989 typedef struct _TEB64
990 {
991 NT_TIB64 Tib; /* 0000 */
992 ULONG64 EnvironmentPointer; /* 0038 */
993 CLIENT_ID64 ClientId; /* 0040 */
994 ULONG64 ActiveRpcHandle; /* 0050 */
995 ULONG64 ThreadLocalStoragePointer; /* 0058 */
996 ULONG64 Peb; /* 0060 */
997 ULONG LastErrorValue; /* 0068 */
998 ULONG CountOfOwnedCriticalSections; /* 006c */
999 ULONG64 CsrClientThread; /* 0070 */
1000 ULONG64 Win32ThreadInfo; /* 0078 */
1001 ULONG User32Reserved[26]; /* 0080 */
1002 ULONG UserReserved[5]; /* 00e8 */
1003 ULONG64 WOW32Reserved; /* 0100 */
1004 ULONG CurrentLocale; /* 0108 */
1005 ULONG FpSoftwareStatusRegister; /* 010c */
1006 ULONG64 ReservedForDebuggerInstrumentation[16]; /* 0110 */
1007 ULONG64 SystemReserved1[30]; /* 0190 */
1008 char PlaceholderCompatibilityMode; /* 0280 */
1009 char PlaceholderReserved[11]; /* 0281 */
1010 DWORD ProxiedProcessId; /* 028c */
1011 ACTIVATION_CONTEXT_STACK64 ActivationContextStack; /* 0290 */
1012 UCHAR WorkingOnBehalfOfTicket[8]; /* 02b8 */
1013 LONG ExceptionCode; /* 02c0 */
1014 ULONG64 ActivationContextStackPointer; /* 02c8 */
1015 ULONG64 InstrumentationCallbackSp; /* 02d0 */
1016 ULONG64 InstrumentationCallbackPreviousPc; /* 02d8 */
1017 ULONG64 InstrumentationCallbackPreviousSp; /* 02e0 */
1018 ULONG TxFsContext; /* 02e8 */
1019 BOOLEAN InstrumentationCallbackDisabled; /* 02ec */
1020 ULONG64 GdiTebBatch[0x9d]; /* 02f0 */
1021 CLIENT_ID64 RealClientId; /* 07d8 */
1022 ULONG64 GdiCachedProcessHandle; /* 07e8 */
1023 ULONG GdiClientPID; /* 07f0 */
1024 ULONG GdiClientTID; /* 07f4 */
1025 ULONG64 GdiThreadLocaleInfo; /* 07f8 */
1026 ULONG64 Win32ClientInfo[62]; /* 0800 */
1027 ULONG64 glDispatchTable[233]; /* 09f0 */
1028 ULONG64 glReserved1[29]; /* 1138 */
1029 ULONG64 glReserved2; /* 1220 */
1030 ULONG64 glSectionInfo; /* 1228 */
1031 ULONG64 glSection; /* 1230 */
1032 ULONG64 glTable; /* 1238 */
1033 ULONG64 glCurrentRC; /* 1240 */
1034 ULONG64 glContext; /* 1248 */
1035 ULONG LastStatusValue; /* 1250 */
1036 UNICODE_STRING64 StaticUnicodeString; /* 1258 */
1037 WCHAR StaticUnicodeBuffer[261]; /* 1268 */
1038 ULONG64 DeallocationStack; /* 1478 */
1039 ULONG64 TlsSlots[64]; /* 1480 */
1040 LIST_ENTRY64 TlsLinks; /* 1680 */
1041 ULONG64 Vdm; /* 1690 */
1042 ULONG64 ReservedForNtRpc; /* 1698 */
1043 ULONG64 DbgSsReserved[2]; /* 16a0 */
1044 ULONG HardErrorDisabled; /* 16b0 */
1045 ULONG64 Instrumentation[16]; /* 16b8 */
1046 ULONG64 WinSockData; /* 1738 */
1047 ULONG GdiBatchCount; /* 1740 */
1048 ULONG Spare2; /* 1744 */
1049 ULONG GuaranteedStackBytes; /* 1748 */
1050 ULONG64 ReservedForPerf; /* 1750 */
1051 ULONG64 ReservedForOle; /* 1758 */
1052 ULONG WaitingOnLoaderLock; /* 1760 */
1053 ULONG64 Reserved5[3]; /* 1768 */
1054 ULONG64 TlsExpansionSlots; /* 1780 */
1055 ULONG64 DeallocationBStore; /* 1788 */
1056 ULONG64 BStoreLimit; /* 1790 */
1057 ULONG ImpersonationLocale; /* 1798 */
1058 ULONG IsImpersonating; /* 179c */
1059 ULONG64 NlsCache; /* 17a0 */
1060 ULONG64 ShimData; /* 17a8 */
1061 ULONG HeapVirtualAffinity; /* 17b0 */
1062 ULONG64 CurrentTransactionHandle; /* 17b8 */
1063 ULONG64 ActiveFrame; /* 17c0 */
1064 ULONG64 FlsSlots; /* 17c8 */
1065 ULONG64 PreferredLanguages; /* 17d0 */
1066 ULONG64 UserPrefLanguages; /* 17d8 */
1067 ULONG64 MergedPrefLanguages; /* 17e0 */
1068 ULONG MuiImpersonation; /* 17e8 */
1069 USHORT CrossTebFlags; /* 17ec */
1070 USHORT SameTebFlags; /* 17ee */
1071 ULONG64 TxnScopeEnterCallback; /* 17f0 */
1072 ULONG64 TxnScopeExitCallback; /* 17f8 */
1073 ULONG64 TxnScopeContext; /* 1800 */
1074 ULONG LockCount; /* 1808 */
1075 LONG WowTebOffset; /* 180c */
1076 ULONG64 ResourceRetValue; /* 1810 */
1077 ULONG64 ReservedForWdf; /* 1818 */
1078 ULONGLONG ReservedForCrt; /* 1820 */
1079 GUID EffectiveContainerId; /* 1828 */
1080 } TEB64;
1081
1082 /* reserved TEB64 TLS slots for Wow64 */
1083 #define WOW64_TLS_CPURESERVED 1
1084 #define WOW64_TLS_TEMPLIST 3
1085 #define WOW64_TLS_USERCALLBACKDATA 5
1086 #define WOW64_TLS_FILESYSREDIR 8
1087
1088
1089 /***********************************************************************
1090 * Enums
1091 */
1092
1093 typedef enum _FILE_INFORMATION_CLASS {
1094 FileDirectoryInformation = 1,
1095 FileFullDirectoryInformation,
1096 FileBothDirectoryInformation,
1097 FileBasicInformation,
1098 FileStandardInformation,
1099 FileInternalInformation,
1100 FileEaInformation,
1101 FileAccessInformation,
1102 FileNameInformation,
1103 FileRenameInformation,
1104 FileLinkInformation,
1105 FileNamesInformation,
1106 FileDispositionInformation,
1107 FilePositionInformation,
1108 FileFullEaInformation,
1109 FileModeInformation,
1110 FileAlignmentInformation,
1111 FileAllInformation,
1112 FileAllocationInformation,
1113 FileEndOfFileInformation,
1114 FileAlternateNameInformation,
1115 FileStreamInformation,
1116 FilePipeInformation,
1117 FilePipeLocalInformation,
1118 FilePipeRemoteInformation,
1119 FileMailslotQueryInformation,
1120 FileMailslotSetInformation,
1121 FileCompressionInformation,
1122 FileObjectIdInformation,
1123 FileCompletionInformation,
1124 FileMoveClusterInformation,
1125 FileQuotaInformation,
1126 FileReparsePointInformation,
1127 FileNetworkOpenInformation,
1128 FileAttributeTagInformation,
1129 FileTrackingInformation,
1130 FileIdBothDirectoryInformation,
1131 FileIdFullDirectoryInformation,
1132 FileValidDataLengthInformation,
1133 FileShortNameInformation,
1134 FileIoCompletionNotificationInformation,
1135 FileIoStatusBlockRangeInformation,
1136 FileIoPriorityHintInformation,
1137 FileSfioReserveInformation,
1138 FileSfioVolumeInformation,
1139 FileHardLinkInformation,
1140 FileProcessIdsUsingFileInformation,
1141 FileNormalizedNameInformation,
1142 FileNetworkPhysicalNameInformation,
1143 FileIdGlobalTxDirectoryInformation,
1144 FileIsRemoteDeviceInformation,
1145 FileAttributeCacheInformation,
1146 FileNumaNodeInformation,
1147 FileStandardLinkInformation,
1148 FileRemoteProtocolInformation,
1149 FileRenameInformationBypassAccessCheck,
1150 FileLinkInformationBypassAccessCheck,
1151 FileVolumeNameInformation,
1152 FileIdInformation,
1153 FileIdExtdDirectoryInformation,
1154 FileReplaceCompletionInformation,
1155 FileHardLinkFullIdInformation,
1156 FileIdExtdBothDirectoryInformation,
1157 FileMaximumInformation
1158 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
1159
1160 typedef struct _FILE_DIRECTORY_INFORMATION {
1161 ULONG NextEntryOffset;
1162 ULONG FileIndex;
1163 LARGE_INTEGER CreationTime;
1164 LARGE_INTEGER LastAccessTime;
1165 LARGE_INTEGER LastWriteTime;
1166 LARGE_INTEGER ChangeTime;
1167 LARGE_INTEGER EndOfFile;
1168 LARGE_INTEGER AllocationSize;
1169 ULONG FileAttributes;
1170 ULONG FileNameLength;
1171 WCHAR FileName[ANYSIZE_ARRAY];
1172 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
1173
1174 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
1175 ULONG NextEntryOffset;
1176 ULONG FileIndex;
1177 LARGE_INTEGER CreationTime;
1178 LARGE_INTEGER LastAccessTime;
1179 LARGE_INTEGER LastWriteTime;
1180 LARGE_INTEGER ChangeTime;
1181 LARGE_INTEGER EndOfFile;
1182 LARGE_INTEGER AllocationSize;
1183 ULONG FileAttributes;
1184 ULONG FileNameLength;
1185 ULONG EaSize;
1186 WCHAR FileName[ANYSIZE_ARRAY];
1187 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
1188 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
1189
1190 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
1191 ULONG NextEntryOffset;
1192 ULONG FileIndex;
1193 LARGE_INTEGER CreationTime;
1194 LARGE_INTEGER LastAccessTime;
1195 LARGE_INTEGER LastWriteTime;
1196 LARGE_INTEGER ChangeTime;
1197 LARGE_INTEGER EndOfFile;
1198 LARGE_INTEGER AllocationSize;
1199 ULONG FileAttributes;
1200 ULONG FileNameLength;
1201 ULONG EaSize;
1202 LARGE_INTEGER FileId;
1203 WCHAR FileName[ANYSIZE_ARRAY];
1204 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
1205
1206 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
1207 ULONG NextEntryOffset;
1208 ULONG FileIndex;
1209 LARGE_INTEGER CreationTime;
1210 LARGE_INTEGER LastAccessTime;
1211 LARGE_INTEGER LastWriteTime;
1212 LARGE_INTEGER ChangeTime;
1213 LARGE_INTEGER EndOfFile;
1214 LARGE_INTEGER AllocationSize;
1215 ULONG FileAttributes;
1216 ULONG FileNameLength;
1217 ULONG EaSize;
1218 CHAR ShortNameLength;
1219 WCHAR ShortName[12];
1220 WCHAR FileName[ANYSIZE_ARRAY];
1221 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
1222 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
1223
1224 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
1225 ULONG NextEntryOffset;
1226 ULONG FileIndex;
1227 LARGE_INTEGER CreationTime;
1228 LARGE_INTEGER LastAccessTime;
1229 LARGE_INTEGER LastWriteTime;
1230 LARGE_INTEGER ChangeTime;
1231 LARGE_INTEGER EndOfFile;
1232 LARGE_INTEGER AllocationSize;
1233 ULONG FileAttributes;
1234 ULONG FileNameLength;
1235 ULONG EaSize;
1236 CHAR ShortNameLength;
1237 WCHAR ShortName[12];
1238 LARGE_INTEGER FileId;
1239 WCHAR FileName[ANYSIZE_ARRAY];
1240 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
1241
1242 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
1243 ULONG NextEntryOffset;
1244 ULONG FileIndex;
1245 LARGE_INTEGER CreationTime;
1246 LARGE_INTEGER LastAccessTime;
1247 LARGE_INTEGER LastWriteTime;
1248 LARGE_INTEGER ChangeTime;
1249 LARGE_INTEGER EndOfFile;
1250 LARGE_INTEGER AllocationSize;
1251 ULONG FileAttributes;
1252 ULONG FileNameLength;
1253 LARGE_INTEGER FileId;
1254 GUID LockingTransactionId;
1255 ULONG TxInfoFlags;
1256 WCHAR FileName[ANYSIZE_ARRAY];
1257 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
1258
1259 typedef struct _FILE_BASIC_INFORMATION {
1260 LARGE_INTEGER CreationTime;
1261 LARGE_INTEGER LastAccessTime;
1262 LARGE_INTEGER LastWriteTime;
1263 LARGE_INTEGER ChangeTime;
1264 ULONG FileAttributes;
1265 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
1266
1267 typedef struct _FILE_STANDARD_INFORMATION {
1268 LARGE_INTEGER AllocationSize;
1269 LARGE_INTEGER EndOfFile;
1270 ULONG NumberOfLinks;
1271 BOOLEAN DeletePending;
1272 BOOLEAN Directory;
1273 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
1274
1275 typedef struct _FILE_INTERNAL_INFORMATION {
1276 LARGE_INTEGER IndexNumber;
1277 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
1278
1279 typedef struct _FILE_ID_128 {
1280 UCHAR Identifier[16];
1281 } FILE_ID_128, *PFILE_ID_128;
1282
1283 typedef struct _FILE_ID_INFORMATION {
1284 ULONGLONG VolumeSerialNumber;
1285 FILE_ID_128 FileId;
1286 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
1287
1288 typedef struct _FILE_EA_INFORMATION {
1289 ULONG EaSize;
1290 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
1291
1292 typedef struct _FILE_ACCESS_INFORMATION {
1293 ACCESS_MASK AccessFlags;
1294 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
1295
1296 typedef struct _FILE_NAME_INFORMATION {
1297 ULONG FileNameLength;
1298 WCHAR FileName[1];
1299 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
1300
1301 typedef struct _FILE_RENAME_INFORMATION {
1302 BOOLEAN ReplaceIfExists;
1303 HANDLE RootDirectory;
1304 ULONG FileNameLength;
1305 WCHAR FileName[1];
1306 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
1307
1308 typedef struct _FILE_LINK_INFORMATION {
1309 BOOLEAN ReplaceIfExists;
1310 HANDLE RootDirectory;
1311 ULONG FileNameLength;
1312 WCHAR FileName[1];
1313 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
1314
1315 typedef struct _FILE_NAMES_INFORMATION {
1316 ULONG NextEntryOffset;
1317 ULONG FileIndex;
1318 ULONG FileNameLength;
1319 WCHAR FileName[1];
1320 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
1321
1322 typedef struct _FILE_DISPOSITION_INFORMATION {
1323 BOOLEAN DoDeleteFile;
1324 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
1325
1326 typedef struct _FILE_POSITION_INFORMATION {
1327 LARGE_INTEGER CurrentByteOffset;
1328 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
1329
1330 typedef struct _FILE_ALIGNMENT_INFORMATION {
1331 ULONG AlignmentRequirement;
1332 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
1333
1334 typedef struct _FILE_ALLOCATION_INFORMATION {
1335 LARGE_INTEGER AllocationSize;
1336 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
1337
1338 typedef struct _FILE_END_OF_FILE_INFORMATION {
1339 LARGE_INTEGER EndOfFile;
1340 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
1341
1342 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
1343 LARGE_INTEGER CreationTime;
1344 LARGE_INTEGER LastAccessTime;
1345 LARGE_INTEGER LastWriteTime;
1346 LARGE_INTEGER ChangeTime;
1347 LARGE_INTEGER AllocationSize;
1348 LARGE_INTEGER EndOfFile;
1349 ULONG FileAttributes;
1350 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
1351
1352 typedef struct _FILE_FULL_EA_INFORMATION {
1353 ULONG NextEntryOffset;
1354 UCHAR Flags;
1355 UCHAR EaNameLength;
1356 USHORT EaValueLength;
1357 CHAR EaName[1];
1358 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
1359
1360 typedef struct _FILE_MODE_INFORMATION {
1361 ULONG Mode;
1362 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
1363
1364 typedef struct _FILE_STREAM_INFORMATION
1365 {
1366 ULONG NextEntryOffset;
1367 ULONG StreamNameLength;
1368 LARGE_INTEGER StreamSize;
1369 LARGE_INTEGER StreamAllocationSize;
1370 WCHAR StreamName[1];
1371 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
1372
1373 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
1374 {
1375 ULONG FileAttributes;
1376 ULONG ReparseTag;
1377 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
1378
1379 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
1380 ULONG MaximumMessageSize;
1381 ULONG MailslotQuota;
1382 ULONG NextMessageSize;
1383 ULONG MessagesAvailable;
1384 LARGE_INTEGER ReadTimeout;
1385 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
1386
1387 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
1388 LARGE_INTEGER ReadTimeout;
1389 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
1390
1391 typedef struct _FILE_PIPE_INFORMATION {
1392 ULONG ReadMode;
1393 ULONG CompletionMode;
1394 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
1395
1396 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
1397 ULONG NamedPipeType;
1398 ULONG NamedPipeConfiguration;
1399 ULONG MaximumInstances;
1400 ULONG CurrentInstances;
1401 ULONG InboundQuota;
1402 ULONG ReadDataAvailable;
1403 ULONG OutboundQuota;
1404 ULONG WriteQuotaAvailable;
1405 ULONG NamedPipeState;
1406 ULONG NamedPipeEnd;
1407 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
1408
1409 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1410 #define FILE_PIPE_LISTENING_STATE 0x00000002
1411 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1412 #define FILE_PIPE_CLOSING_STATE 0x00000004
1413
1414 typedef struct _FILE_OBJECTID_BUFFER
1415 {
1416 BYTE ObjectId[16];
1417 union
1418 {
1419 struct
1420 {
1421 BYTE BirthVolumeId[16];
1422 BYTE BirthObjectId[16];
1423 BYTE DomainId[16];
1424 } DUMMYSTRUCTNAME;
1425 BYTE ExtendedInfo[48];
1426 } DUMMYUNIONNAME;
1427 } FILE_OBJECTID_BUFFER, *PFILE_OBJECTID_BUFFER;
1428
1429 typedef struct _FILE_OBJECTID_INFORMATION {
1430 LONGLONG FileReference;
1431 UCHAR ObjectId[16];
1432 union {
1433 struct {
1434 UCHAR BirthVolumeId[16];
1435 UCHAR BirthObjectId[16];
1436 UCHAR DomainId[16];
1437 } DUMMYSTRUCTNAME;
1438 UCHAR ExtendedInfo[48];
1439 } DUMMYUNIONNAME;
1440 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
1441
1442 typedef struct _FILE_QUOTA_INFORMATION {
1443 ULONG NextEntryOffset;
1444 ULONG SidLength;
1445 LARGE_INTEGER ChangeTime;
1446 LARGE_INTEGER QuotaUsed;
1447 LARGE_INTEGER QuotaThreshold;
1448 LARGE_INTEGER QuotaLimit;
1449 SID Sid;
1450 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
1451
1452 typedef struct _FILE_REPARSE_POINT_INFORMATION {
1453 LONGLONG FileReference;
1454 ULONG Tag;
1455 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
1456
1457 typedef struct _FILE_ALL_INFORMATION {
1458 FILE_BASIC_INFORMATION BasicInformation;
1459 FILE_STANDARD_INFORMATION StandardInformation;
1460 FILE_INTERNAL_INFORMATION InternalInformation;
1461 FILE_EA_INFORMATION EaInformation;
1462 FILE_ACCESS_INFORMATION AccessInformation;
1463 FILE_POSITION_INFORMATION PositionInformation;
1464 FILE_MODE_INFORMATION ModeInformation;
1465 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
1466 FILE_NAME_INFORMATION NameInformation;
1467 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
1468
1469 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
1470 ULONG Flags;
1471 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
1472
1473 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1474 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1475 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1476
1477 typedef struct _PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
1478 {
1479 ULONG Version;
1480 ULONG Reserved;
1481 VOID *Callback;
1482 } PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION, *PPROCESS_INSTRUMENTATION_CALLBACK_INFORMATION;
1483
1484 typedef enum _FSINFOCLASS {
1485 FileFsVolumeInformation = 1,
1486 FileFsLabelInformation,
1487 FileFsSizeInformation,
1488 FileFsDeviceInformation,
1489 FileFsAttributeInformation,
1490 FileFsControlInformation,
1491 FileFsFullSizeInformation,
1492 FileFsObjectIdInformation,
1493 FileFsMaximumInformation
1494 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
1495
1496 typedef enum _KEY_INFORMATION_CLASS {
1497 KeyBasicInformation,
1498 KeyNodeInformation,
1499 KeyFullInformation,
1500 KeyNameInformation,
1501 KeyCachedInformation,
1502 KeyFlagsInformation,
1503 KeyVirtualizationInformation,
1504 KeyHandleTagsInformation,
1505 MaxKeyInfoClass
1506 } KEY_INFORMATION_CLASS;
1507
1508 typedef enum _KEY_VALUE_INFORMATION_CLASS {
1509 KeyValueBasicInformation,
1510 KeyValueFullInformation,
1511 KeyValuePartialInformation,
1512 KeyValueFullInformationAlign64,
1513 KeyValuePartialInformationAlign64
1514 } KEY_VALUE_INFORMATION_CLASS;
1515
1516 typedef enum _OBJECT_INFORMATION_CLASS {
1517 ObjectBasicInformation,
1518 ObjectNameInformation,
1519 ObjectTypeInformation,
1520 ObjectTypesInformation,
1521 ObjectDataInformation
1522 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
1523
1524 typedef enum _PROCESSINFOCLASS {
1525 ProcessBasicInformation = 0,
1526 ProcessQuotaLimits = 1,
1527 ProcessIoCounters = 2,
1528 ProcessVmCounters = 3,
1529 ProcessTimes = 4,
1530 ProcessBasePriority = 5,
1531 ProcessRaisePriority = 6,
1532 ProcessDebugPort = 7,
1533 ProcessExceptionPort = 8,
1534 ProcessAccessToken = 9,
1535 ProcessLdtInformation = 10,
1536 ProcessLdtSize = 11,
1537 ProcessDefaultHardErrorMode = 12,
1538 ProcessIoPortHandlers = 13,
1539 ProcessPooledUsageAndLimits = 14,
1540 ProcessWorkingSetWatch = 15,
1541 ProcessUserModeIOPL = 16,
1542 ProcessEnableAlignmentFaultFixup = 17,
1543 ProcessPriorityClass = 18,
1544 ProcessWx86Information = 19,
1545 ProcessHandleCount = 20,
1546 ProcessAffinityMask = 21,
1547 ProcessPriorityBoost = 22,
1548 ProcessDeviceMap = 23,
1549 ProcessSessionInformation = 24,
1550 ProcessForegroundInformation = 25,
1551 ProcessWow64Information = 26,
1552 ProcessImageFileName = 27,
1553 ProcessLUIDDeviceMapsEnabled = 28,
1554 ProcessBreakOnTermination = 29,
1555 ProcessDebugObjectHandle = 30,
1556 ProcessDebugFlags = 31,
1557 ProcessHandleTracing = 32,
1558 ProcessIoPriority = 33,
1559 ProcessExecuteFlags = 34,
1560 ProcessTlsInformation = 35,
1561 ProcessCookie = 36,
1562 ProcessImageInformation = 37,
1563 ProcessCycleTime = 38,
1564 ProcessPagePriority = 39,
1565 ProcessInstrumentationCallback = 40,
1566 ProcessThreadStackAllocation = 41,
1567 ProcessWorkingSetWatchEx = 42,
1568 ProcessImageFileNameWin32 = 43,
1569 ProcessImageFileMapping = 44,
1570 ProcessAffinityUpdateMode = 45,
1571 ProcessMemoryAllocationMode = 46,
1572 ProcessGroupInformation = 47,
1573 ProcessTokenVirtualizationEnabled = 48,
1574 ProcessConsoleHostProcess = 49,
1575 ProcessWindowInformation = 50,
1576 ProcessHandleInformation = 51,
1577 ProcessPowerThrottlingState = 77,
1578 ProcessLeapSecondInformation = 97,
1579 MaxProcessInfoClass,
1580 #ifdef __WINESRC__
1581 ProcessWineMakeProcessSystem = 1000,
1582 ProcessWineLdtCopy,
1583 #endif
1584 } PROCESSINFOCLASS;
1585
1586 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1587 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1588 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1589 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1590
1591 typedef enum _SECTION_INHERIT {
1592 ViewShare = 1,
1593 ViewUnmap = 2
1594 } SECTION_INHERIT;
1595
1596 typedef enum _SYSTEM_INFORMATION_CLASS {
1597 SystemBasicInformation = 0,
1598 SystemCpuInformation = 1,
1599 SystemPerformanceInformation = 2,
1600 SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
1601 SystemPathInformation = 4,
1602 SystemProcessInformation = 5,
1603 SystemCallCountInformation = 6,
1604 SystemDeviceInformation = 7,
1605 SystemProcessorPerformanceInformation = 8,
1606 SystemFlagsInformation = 9,
1607 SystemCallTimeInformation = 10,
1608 SystemModuleInformation = 11,
1609 SystemLocksInformation = 12,
1610 SystemStackTraceInformation = 13,
1611 SystemPagedPoolInformation = 14,
1612 SystemNonPagedPoolInformation = 15,
1613 SystemHandleInformation = 16,
1614 SystemObjectInformation = 17,
1615 SystemPageFileInformation = 18,
1616 SystemVdmInstemulInformation = 19,
1617 SystemVdmBopInformation = 20,
1618 SystemFileCacheInformation = 21,
1619 SystemPoolTagInformation = 22,
1620 SystemInterruptInformation = 23,
1621 SystemDpcBehaviorInformation = 24,
1622 SystemFullMemoryInformation = 25,
1623 SystemNotImplemented6 = 25,
1624 SystemLoadGdiDriverInformation = 26,
1625 SystemUnloadGdiDriverInformation = 27,
1626 SystemTimeAdjustmentInformation = 28,
1627 SystemTimeAdjustment = 28,
1628 SystemSummaryMemoryInformation = 29,
1629 SystemMirrorMemoryInformation = 30,
1630 SystemPerformanceTraceInformation = 31,
1631 SystemObsolete0 = 32,
1632 SystemExceptionInformation = 33,
1633 SystemCrashDumpStateInformation = 34,
1634 SystemKernelDebuggerInformation = 35,
1635 SystemContextSwitchInformation = 36,
1636 SystemRegistryQuotaInformation = 37,
1637 SystemExtendServiceTableInformation = 38,
1638 SystemPrioritySeparation = 39,
1639 SystemVerifierAddDriverInformation = 40,
1640 SystemVerifierRemoveDriverInformation = 41,
1641 SystemProcessorIdleInformation = 42,
1642 SystemLegacyDriverInformation = 43,
1643 SystemCurrentTimeZoneInformation = 44,
1644 SystemLookasideInformation = 45,
1645 SystemTimeSlipNotification = 46,
1646 SystemSessionCreate = 47,
1647 SystemSessionDetach = 48,
1648 SystemSessionInformation = 49,
1649 SystemRangeStartInformation = 50,
1650 SystemVerifierInformation = 51,
1651 SystemVerifierThunkExtend = 52,
1652 SystemSessionProcessesInformation = 53,
1653 SystemLoadGdiDriverInSystemSpace = 54,
1654 SystemNumaProcessorMap = 55,
1655 SystemPrefetcherInformation = 56,
1656 SystemExtendedProcessInformation = 57,
1657 SystemRecommendedSharedDataAlignment = 58,
1658 SystemComPlusPackage = 59,
1659 SystemNumaAvailableMemory = 60,
1660 SystemProcessorPowerInformation = 61,
1661 SystemEmulationBasicInformation = 62,
1662 SystemEmulationProcessorInformation = 63,
1663 SystemExtendedHandleInformation = 64,
1664 SystemLostDelayedWriteInformation = 65,
1665 SystemBigPoolInformation = 66,
1666 SystemSessionPoolTagInformation = 67,
1667 SystemSessionMappedViewInformation = 68,
1668 SystemHotpatchInformation = 69,
1669 SystemObjectSecurityMode = 70,
1670 SystemWatchdogTimerHandler = 71,
1671 SystemWatchdogTimerInformation = 72,
1672 SystemLogicalProcessorInformation = 73,
1673 SystemWow64SharedInformationObsolete = 74,
1674 SystemRegisterFirmwareTableInformationHandler = 75,
1675 SystemFirmwareTableInformation = 76,
1676 SystemModuleInformationEx = 77,
1677 SystemVerifierTriageInformation = 78,
1678 SystemSuperfetchInformation = 79,
1679 SystemMemoryListInformation = 80,
1680 SystemFileCacheInformationEx = 81,
1681 SystemThreadPriorityClientIdInformation = 82,
1682 SystemProcessorIdleCycleTimeInformation = 83,
1683 SystemVerifierCancellationInformation = 84,
1684 SystemProcessorPowerInformationEx = 85,
1685 SystemRefTraceInformation = 86,
1686 SystemSpecialPoolInformation = 87,
1687 SystemProcessIdInformation = 88,
1688 SystemErrorPortInformation = 89,
1689 SystemBootEnvironmentInformation = 90,
1690 SystemHypervisorInformation = 91,
1691 SystemVerifierInformationEx = 92,
1692 SystemTimeZoneInformation = 93,
1693 SystemImageFileExecutionOptionsInformation = 94,
1694 SystemCoverageInformation = 95,
1695 SystemPrefetchPatchInformation = 96,
1696 SystemVerifierFaultsInformation = 97,
1697 SystemSystemPartitionInformation = 98,
1698 SystemSystemDiskInformation = 99,
1699 SystemProcessorPerformanceDistribution = 100,
1700 SystemNumaProximityNodeInformation = 101,
1701 SystemDynamicTimeZoneInformation = 102,
1702 SystemCodeIntegrityInformation = 103,
1703 SystemProcessorMicrocodeUpdateInformation = 104,
1704 SystemProcessorBrandString = 105,
1705 SystemVirtualAddressInformation = 106,
1706 SystemLogicalProcessorInformationEx = 107,
1707 SystemProcessorCycleTimeInformation = 108,
1708 SystemStoreInformation = 109,
1709 SystemRegistryAppendString = 110,
1710 SystemAitSamplingValue = 111,
1711 SystemVhdBootInformation = 112,
1712 SystemCpuQuotaInformation = 113,
1713 SystemNativeBasicInformation = 114,
1714 SystemErrorPortTimeouts = 115,
1715 SystemLowPriorityIoInformation = 116,
1716 SystemTpmBootEntropyInformation = 117,
1717 SystemVerifierCountersInformation = 118,
1718 SystemPagedPoolInformationEx = 119,
1719 SystemSystemPtesInformationEx = 120,
1720 SystemNodeDistanceInformation = 121,
1721 SystemAcpiAuditInformation = 122,
1722 SystemBasicPerformanceInformation = 123,
1723 SystemQueryPerformanceCounterInformation = 124,
1724 SystemSessionBigPoolInformation = 125,
1725 SystemBootGraphicsInformation = 126,
1726 SystemScrubPhysicalMemoryInformation = 127,
1727 SystemBadPageInformation = 128,
1728 SystemProcessorProfileControlArea = 129,
1729 SystemCombinePhysicalMemoryInformation = 130,
1730 SystemEntropyInterruptTimingInformation = 131,
1731 SystemConsoleInformation = 132,
1732 SystemPlatformBinaryInformation = 133,
1733 SystemPolicyInformation = 134,
1734 SystemHypervisorProcessorCountInformation = 135,
1735 SystemDeviceDataInformation = 136,
1736 SystemDeviceDataEnumerationInformation = 137,
1737 SystemMemoryTopologyInformation = 138,
1738 SystemMemoryChannelInformation = 139,
1739 SystemBootLogoInformation = 140,
1740 SystemProcessorPerformanceInformationEx = 141,
1741 SystemCriticalProcessErrorLogInformation = 142,
1742 SystemSecureBootPolicyInformation = 143,
1743 SystemPageFileInformationEx = 144,
1744 SystemSecureBootInformation = 145,
1745 SystemEntropyInterruptTimingRawInformation = 146,
1746 SystemPortableWorkspaceEfiLauncherInformation = 147,
1747 SystemFullProcessInformation = 148,
1748 SystemKernelDebuggerInformationEx = 149,
1749 SystemBootMetadataInformation = 150,
1750 SystemSoftRebootInformation = 151,
1751 SystemElamCertificateInformation = 152,
1752 SystemOfflineDumpConfigInformation = 153,
1753 SystemProcessorFeaturesInformation = 154,
1754 SystemRegistryReconciliationInformation = 155,
1755 SystemEdidInformation = 156,
1756 SystemManufacturingInformation = 157,
1757 SystemEnergyEstimationConfigInformation = 158,
1758 SystemHypervisorDetailInformation = 159,
1759 SystemProcessorCycleStatsInformation = 160,
1760 SystemVmGenerationCountInformation = 161,
1761 SystemTrustedPlatformModuleInformation = 162,
1762 SystemKernelDebuggerFlags = 163,
1763 SystemCodeIntegrityPolicyInformation = 164,
1764 SystemIsolatedUserModeInformation = 165,
1765 SystemHardwareSecurityTestInterfaceResultsInformation = 166,
1766 SystemSingleModuleInformation = 167,
1767 SystemAllowedCpuSetsInformation = 168,
1768 SystemVsmProtectionInformation = 169,
1769 SystemInterruptCpuSetsInformation = 170,
1770 SystemSecureBootPolicyFullInformation = 171,
1771 SystemCodeIntegrityPolicyFullInformation = 172,
1772 SystemAffinitizedInterruptProcessorInformation = 173,
1773 SystemRootSiloInformation = 174,
1774 SystemCpuSetInformation = 175,
1775 SystemCpuSetTagInformation = 176,
1776 SystemWin32WerStartCallout = 177,
1777 SystemSecureKernelProfileInformation = 178,
1778 SystemCodeIntegrityPlatformManifestInformation = 179,
1779 SystemInterruptSteeringInformation = 180,
1780 SystemSupportedProcessorArchitectures = 181,
1781 SystemMemoryUsageInformation = 182,
1782 SystemCodeIntegrityCertificateInformation = 183,
1783 SystemPhysicalMemoryInformation = 184,
1784 SystemControlFlowTransition = 185,
1785 SystemKernelDebuggingAllowed = 186,
1786 SystemActivityModerationExeState = 187,
1787 SystemActivityModerationUserSettings = 188,
1788 SystemCodeIntegrityPoliciesFullInformation = 189,
1789 SystemCodeIntegrityUnlockInformation = 190,
1790 SystemIntegrityQuotaInformation = 191,
1791 SystemFlushInformation = 192,
1792 SystemProcessorIdleMaskInformation = 193,
1793 SystemSecureDumpEncryptionInformation = 194,
1794 SystemWriteConstraintInformation = 195,
1795 SystemKernelVaShadowInformation = 196,
1796 SystemHypervisorSharedPageInformation = 197,
1797 SystemFirmwareBootPerformanceInformation = 198,
1798 SystemCodeIntegrityVerificationInformation = 199,
1799 SystemFirmwarePartitionInformation = 200,
1800 SystemSpeculationControlInformation = 201,
1801 SystemDmaGuardPolicyInformation = 202,
1802 SystemEnclaveLaunchControlInformation = 203,
1803 SystemWorkloadAllowedCpuSetsInformation = 204,
1804 SystemCodeIntegrityUnlockModeInformation = 205,
1805 SystemLeapSecondInformation = 206,
1806 SystemFlags2Information = 207,
1807 SystemSecurityModelInformation = 208,
1808 SystemCodeIntegritySyntheticCacheInformation = 209,
1809 SystemFeatureConfigurationInformation = 210,
1810 SystemFeatureConfigurationSectionInformation = 211,
1811 SystemFeatureUsageSubscriptionInformation = 212,
1812 SystemSecureSpeculationControlInformation = 213,
1813 SystemSpacesBootInformation = 214,
1814 SystemFwRamdiskInformation = 215,
1815 SystemWheaIpmiHardwareInformation = 216,
1816 SystemDifSetRuleClassInformation = 217,
1817 SystemDifClearRuleClassInformation = 218,
1818 SystemDifApplyPluginVerificationOnDriver = 219,
1819 SystemDifRemovePluginVerificationOnDriver = 220,
1820 SystemShadowStackInformation = 221,
1821 SystemBuildVersionInformation = 222,
1822 #ifdef __WINESRC__
1823 SystemWineVersionInformation = 1000,
1824 #endif
1825 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
1826
1827 typedef struct _SYSTEM_CODEINTEGRITY_INFORMATION
1828 {
1829 ULONG Length;
1830 ULONG CodeIntegrityOptions;
1831 } SYSTEM_CODEINTEGRITY_INFORMATION, *PSYSTEM_CODEINTEGRITY_INFORMATION;
1832
1833 #define CODEINTEGRITY_OPTION_ENABLED 0x0001
1834 #define CODEINTEGRITY_OPTION_TESTSIGN 0x0002
1835 #define CODEINTEGRITY_OPTION_UMCI_ENABLED 0x0004
1836 #define CODEINTEGRITY_OPTION_UMCI_AUDITMODE_ENABLED 0x0008
1837 #define CODEINTEGRITY_OPTION_UMCI_EXCLUSIONPATHS_ENABLED 0x0010
1838 #define CODEINTEGRITY_OPTION_TEST_BUILD 0x0020
1839 #define CODEINTEGRITY_OPTION_PREPRODUCTION_BUILD 0x0040
1840 #define CODEINTEGRITY_OPTION_DEBUGMODE_ENABLED 0x0080
1841 #define CODEINTEGRITY_OPTION_FLIGHT_BUILD 0x0100
1842 #define CODEINTEGRITY_OPTION_FLIGHTING_ENABLED 0x0200
1843 #define CODEINTEGRITY_OPTION_HVCI_KMCI_ENABLED 0x0400
1844 #define CODEINTEGRITY_OPTION_HVCI_KMCI_AUDITMODE_ENABLED 0x0800
1845 #define CODEINTEGRITY_OPTION_HVCI_KMCI_STRICTMODE_ENABLED 0x1000
1846 #define CODEINTEGRITY_OPTION_HVCI_IUM_ENABLED 0x2000
1847
1848 typedef enum _THREADINFOCLASS {
1849 ThreadBasicInformation = 0,
1850 ThreadTimes,
1851 ThreadPriority,
1852 ThreadBasePriority,
1853 ThreadAffinityMask,
1854 ThreadImpersonationToken,
1855 ThreadDescriptorTableEntry,
1856 ThreadEnableAlignmentFaultFixup,
1857 ThreadEventPair_Reusable,
1858 ThreadQuerySetWin32StartAddress,
1859 ThreadZeroTlsCell,
1860 ThreadPerformanceCount,
1861 ThreadAmILastThread,
1862 ThreadIdealProcessor,
1863 ThreadPriorityBoost,
1864 ThreadSetTlsArrayAddress,
1865 ThreadIsIoPending,
1866 ThreadHideFromDebugger,
1867 ThreadBreakOnTermination,
1868 ThreadSwitchLegacyState,
1869 ThreadIsTerminated,
1870 ThreadLastSystemCall,
1871 ThreadIoPriority,
1872 ThreadCycleTime,
1873 ThreadPagePriority,
1874 ThreadActualBasePriority,
1875 ThreadTebInformation,
1876 ThreadCSwitchMon,
1877 ThreadCSwitchPmu,
1878 ThreadWow64Context,
1879 ThreadGroupInformation,
1880 ThreadUmsInformation,
1881 ThreadCounterProfiling,
1882 ThreadIdealProcessorEx,
1883 ThreadCpuAccountingInformation,
1884 ThreadSuspendCount,
1885 ThreadHeterogeneousCpuPolicy,
1886 ThreadContainerId,
1887 ThreadNameInformation,
1888 ThreadSelectedCpuSets,
1889 ThreadSystemThreadInformation,
1890 ThreadActualGroupAffinity,
1891 ThreadDynamicCodePolicyInfo,
1892 ThreadExplicitCaseSensitivity,
1893 ThreadWorkOnBehalfTicket,
1894 ThreadSubsystemInformation,
1895 ThreadDbgkWerReportActive,
1896 ThreadAttachContainer,
1897 ThreadManageWritesToExecutableMemory,
1898 ThreadPowerThrottlingState,
1899 ThreadWorkloadClass,
1900 MaxThreadInfoClass,
1901 #ifdef __WINESRC__
1902 ThreadWineNativeThreadName = 1000,
1903 #endif
1904 } THREADINFOCLASS;
1905
1906 typedef struct _THREAD_BASIC_INFORMATION
1907 {
1908 NTSTATUS ExitStatus;
1909 PVOID TebBaseAddress;
1910 CLIENT_ID ClientId;
1911 ULONG_PTR AffinityMask;
1912 LONG Priority;
1913 LONG BasePriority;
1914 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1915
1916 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1917 {
1918 DWORD Selector;
1919 LDT_ENTRY Entry;
1920 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
1921
1922 typedef struct _THREAD_NAME_INFORMATION
1923 {
1924 UNICODE_STRING ThreadName;
1925 } THREAD_NAME_INFORMATION, *PTHREAD_NAME_INFORMATION;
1926
1927 typedef struct _KERNEL_USER_TIMES {
1928 LARGE_INTEGER CreateTime;
1929 LARGE_INTEGER ExitTime;
1930 LARGE_INTEGER KernelTime;
1931 LARGE_INTEGER UserTime;
1932 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1933
1934 typedef enum _WINSTATIONINFOCLASS {
1935 WinStationInformation = 8
1936 } WINSTATIONINFOCLASS;
1937
1938 typedef enum _MEMORY_INFORMATION_CLASS {
1939 MemoryBasicInformation,
1940 MemoryWorkingSetInformation,
1941 MemoryMappedFilenameInformation,
1942 MemoryRegionInformation,
1943 MemoryWorkingSetExInformation,
1944 MemorySharedCommitInformation,
1945 MemoryImageInformation,
1946 MemoryRegionInformationEx,
1947 MemoryPrivilegedBasicInformation,
1948 MemoryEnclaveImageInformation,
1949 MemoryBasicInformationCapped,
1950 MemoryPhysicalContiguityInformation,
1951 #ifdef __WINESRC__
1952 MemoryWineUnixFuncs = 1000,
1953 MemoryWineUnixWow64Funcs,
1954 #endif
1955 } MEMORY_INFORMATION_CLASS;
1956
1957 typedef struct _MEMORY_SECTION_NAME
1958 {
1959 UNICODE_STRING SectionFileName;
1960 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1961
1962 typedef union _MEMORY_WORKING_SET_EX_BLOCK {
1963 ULONG_PTR Flags;
1964 struct {
1965 ULONG_PTR Valid : 1;
1966 ULONG_PTR ShareCount : 3;
1967 ULONG_PTR Win32Protection : 11;
1968 ULONG_PTR Shared : 1;
1969 ULONG_PTR Node : 6;
1970 ULONG_PTR Locked : 1;
1971 ULONG_PTR LargePage : 1;
1972 } DUMMYSTRUCTNAME;
1973 } MEMORY_WORKING_SET_EX_BLOCK, *PMEMORY_WORKING_SET_EX_BLOCK;
1974
1975 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION {
1976 PVOID VirtualAddress;
1977 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes;
1978 } MEMORY_WORKING_SET_EX_INFORMATION, *PMEMORY_WORKING_SET_EX_INFORMATION;
1979
1980 typedef struct _MEMORY_REGION_INFORMATION
1981 {
1982 PVOID AllocationBase;
1983 ULONG AllocationProtect;
1984 union
1985 {
1986 ULONG RegionType;
1987 struct
1988 {
1989 ULONG Private : 1;
1990 ULONG MappedDataFile : 1;
1991 ULONG MappedImage : 1;
1992 ULONG MappedPageFile : 1;
1993 ULONG MappedPhysical : 1;
1994 ULONG DirectMapped : 1;
1995 ULONG Reserved : 26;
1996 } DUMMYSTRUCTNAME;
1997 } DUMMYUNIONNAME;
1998 SIZE_T RegionSize;
1999 SIZE_T CommitSize;
2000 ULONG_PTR PartitionId;
2001 ULONG_PTR NodePreference;
2002 } MEMORY_REGION_INFORMATION, *PMEMORY_REGION_INFORMATION;
2003
2004 typedef enum _MUTANT_INFORMATION_CLASS
2005 {
2006 MutantBasicInformation
2007 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
2008
2009 typedef struct _MUTANT_BASIC_INFORMATION {
2010 LONG CurrentCount;
2011 BOOLEAN OwnedByCaller;
2012 BOOLEAN AbandonedState;
2013 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
2014
2015 typedef enum _TIMER_INFORMATION_CLASS
2016 {
2017 TimerBasicInformation = 0
2018 } TIMER_INFORMATION_CLASS;
2019
2020 typedef struct _TIMER_BASIC_INFORMATION
2021 {
2022 LARGE_INTEGER RemainingTime;
2023 BOOLEAN TimerState;
2024 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
2025
2026 typedef enum
2027 {
2028 VmPrefetchInformation,
2029 VmPagePriorityInformation,
2030 VmCfgCallTargetInformation
2031 } VIRTUAL_MEMORY_INFORMATION_CLASS, *PVIRTUAL_MEMORY_INFORMATION_CLASS;
2032
2033 typedef struct _MEMORY_RANGE_ENTRY
2034 {
2035 PVOID VirtualAddress;
2036 SIZE_T NumberOfBytes;
2037 } MEMORY_RANGE_ENTRY, *PMEMORY_RANGE_ENTRY;
2038
2039
2040 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
2041 typedef enum
2042 {
2043 INVALID_PATH = 0,
2044 UNC_PATH, /* "//foo" */
2045 ABSOLUTE_DRIVE_PATH, /* "c:/foo" */
2046 RELATIVE_DRIVE_PATH, /* "c:foo" */
2047 ABSOLUTE_PATH, /* "/foo" */
2048 RELATIVE_PATH, /* "foo" */
2049 DEVICE_PATH, /* "//./foo" */
2050 UNC_DOT_PATH /* "//." */
2051 } DOS_PATHNAME_TYPE;
2052
2053
2054 /***********************************************************************
2055 * Types and data structures
2056 */
2057
2058 /* This is used by NtQuerySystemInformation */
2059 typedef struct _SYSTEM_THREAD_INFORMATION
2060 { /* win32/win64 */
2061 LARGE_INTEGER KernelTime; /* 00/00 */
2062 LARGE_INTEGER UserTime; /* 08/08 */
2063 LARGE_INTEGER CreateTime; /* 10/10 */
2064 DWORD dwTickCount; /* 18/18 */
2065 LPVOID StartAddress; /* 1c/20 */
2066 CLIENT_ID ClientId; /* 20/28 */
2067 DWORD dwCurrentPriority; /* 28/38 */
2068 DWORD dwBasePriority; /* 2c/3c */
2069 DWORD dwContextSwitches; /* 30/40 */
2070 DWORD dwThreadState; /* 34/44 */
2071 DWORD dwWaitReason; /* 38/48 */
2072 DWORD dwUnknown; /* 3c/4c */
2073 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
2074
2075 typedef struct _SYSTEM_EXTENDED_THREAD_INFORMATION
2076 {
2077 SYSTEM_THREAD_INFORMATION ThreadInfo; /* 00/00 */
2078 void *StackBase; /* 40/50 */
2079 void *StackLimit; /* 44/58 */
2080 void *Win32StartAddress; /* 48/60 */
2081 void *TebBase; /* 4c/68 */
2082 ULONG_PTR Reserved2; /* 50/70 */
2083 ULONG_PTR Reserved3; /* 54/78 */
2084 ULONG_PTR Reserved4; /* 58/80 */
2085 } SYSTEM_EXTENDED_THREAD_INFORMATION, *PSYSTEM_EXTENDED_THREAD_INFORMATION;
2086
2087 typedef struct _IO_STATUS_BLOCK {
2088 union {
2089 NTSTATUS Status;
2090 PVOID Pointer;
2091 } DUMMYUNIONNAME;
2092
2093 ULONG_PTR Information;
2094 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
2095
2096 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
2097
2098 typedef struct _KEY_BASIC_INFORMATION {
2099 LARGE_INTEGER LastWriteTime;
2100 ULONG TitleIndex;
2101 ULONG NameLength;
2102 WCHAR Name[1];
2103 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
2104
2105 typedef struct _KEY_NODE_INFORMATION
2106 {
2107 LARGE_INTEGER LastWriteTime;
2108 ULONG TitleIndex;
2109 ULONG ClassOffset;
2110 ULONG ClassLength;
2111 ULONG NameLength;
2112 WCHAR Name[1];
2113 /* Class[1]; */
2114 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
2115
2116 typedef struct _KEY_FULL_INFORMATION
2117 {
2118 LARGE_INTEGER LastWriteTime;
2119 ULONG TitleIndex;
2120 ULONG ClassOffset;
2121 ULONG ClassLength;
2122 ULONG SubKeys;
2123 ULONG MaxNameLen;
2124 ULONG MaxClassLen;
2125 ULONG Values;
2126 ULONG MaxValueNameLen;
2127 ULONG MaxValueDataLen;
2128 WCHAR Class[1];
2129 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
2130
2131 typedef struct _KEY_NAME_INFORMATION {
2132 ULONG NameLength;
2133 WCHAR Name[1];
2134 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
2135
2136 typedef struct _KEY_CACHED_INFORMATION
2137 {
2138 LARGE_INTEGER LastWriteTime;
2139 ULONG TitleIndex;
2140 ULONG SubKeys;
2141 ULONG MaxNameLen;
2142 ULONG Values;
2143 ULONG MaxValueNameLen;
2144 ULONG MaxValueDataLen;
2145 ULONG NameLength;
2146 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
2147
2148 typedef struct _KEY_VALUE_ENTRY
2149 {
2150 PUNICODE_STRING ValueName;
2151 ULONG DataLength;
2152 ULONG DataOffset;
2153 ULONG Type;
2154 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
2155
2156 typedef struct _KEY_VALUE_BASIC_INFORMATION {
2157 ULONG TitleIndex;
2158 ULONG Type;
2159 ULONG NameLength;
2160 WCHAR Name[1];
2161 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
2162
2163 typedef struct _KEY_VALUE_FULL_INFORMATION {
2164 ULONG TitleIndex;
2165 ULONG Type;
2166 ULONG DataOffset;
2167 ULONG DataLength;
2168 ULONG NameLength;
2169 WCHAR Name[1];
2170 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
2171
2172 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
2173 ULONG TitleIndex;
2174 ULONG Type;
2175 ULONG DataLength;
2176 UCHAR Data[1];
2177 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
2178
2179 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
2180 #define __OBJECT_ATTRIBUTES_DEFINED__
2181 typedef struct _OBJECT_ATTRIBUTES {
2182 ULONG Length;
2183 HANDLE RootDirectory;
2184 PUNICODE_STRING ObjectName;
2185 ULONG Attributes;
2186 PVOID SecurityDescriptor; /* type SECURITY_DESCRIPTOR */
2187 PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
2188 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
2189 #endif
2190
2191 typedef struct _OBJECT_DATA_INFORMATION {
2192 BOOLEAN InheritHandle;
2193 BOOLEAN ProtectFromClose;
2194 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
2195
2196 typedef struct _OBJECT_BASIC_INFORMATION {
2197 ULONG Attributes;
2198 ACCESS_MASK GrantedAccess;
2199 ULONG HandleCount;
2200 ULONG PointerCount;
2201 ULONG PagedPoolUsage;
2202 ULONG NonPagedPoolUsage;
2203 ULONG Reserved[3];
2204 ULONG NameInformationLength;
2205 ULONG TypeInformationLength;
2206 ULONG SecurityDescriptorLength;
2207 LARGE_INTEGER CreateTime;
2208 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
2209
2210 typedef struct _OBJECT_NAME_INFORMATION {
2211 UNICODE_STRING Name;
2212 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
2213
2214 typedef struct __OBJECT_TYPE_INFORMATION {
2215 UNICODE_STRING TypeName;
2216 ULONG TotalNumberOfObjects;
2217 ULONG TotalNumberOfHandles;
2218 ULONG TotalPagedPoolUsage;
2219 ULONG TotalNonPagedPoolUsage;
2220 ULONG TotalNamePoolUsage;
2221 ULONG TotalHandleTableUsage;
2222 ULONG HighWaterNumberOfObjects;
2223 ULONG HighWaterNumberOfHandles;
2224 ULONG HighWaterPagedPoolUsage;
2225 ULONG HighWaterNonPagedPoolUsage;
2226 ULONG HighWaterNamePoolUsage;
2227 ULONG HighWaterHandleTableUsage;
2228 ULONG InvalidAttributes;
2229 GENERIC_MAPPING GenericMapping;
2230 ULONG ValidAccessMask;
2231 BOOLEAN SecurityRequired;
2232 BOOLEAN MaintainHandleCount;
2233 UCHAR TypeIndex;
2234 CHAR ReservedByte;
2235 ULONG PoolType;
2236 ULONG DefaultPagedPoolCharge;
2237 ULONG DefaultNonPagedPoolCharge;
2238 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
2239
2240 typedef struct _OBJECT_TYPES_INFORMATION
2241 {
2242 ULONG NumberOfTypes;
2243 } OBJECT_TYPES_INFORMATION, *POBJECT_TYPES_INFORMATION;
2244
2245 typedef struct _PROCESS_BASIC_INFORMATION {
2246 #ifdef __WINESRC__
2247 NTSTATUS ExitStatus;
2248 PEB *PebBaseAddress;
2249 ULONG_PTR AffinityMask;
2250 LONG BasePriority;
2251 ULONG_PTR UniqueProcessId;
2252 ULONG_PTR InheritedFromUniqueProcessId;
2253 #else
2254 PVOID Reserved1;
2255 PPEB PebBaseAddress;
2256 PVOID Reserved2[2];
2257 ULONG_PTR UniqueProcessId;
2258 PVOID Reserved3;
2259 #endif
2260 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
2261
2262 #define PROCESS_PRIOCLASS_IDLE 1
2263 #define PROCESS_PRIOCLASS_NORMAL 2
2264 #define PROCESS_PRIOCLASS_HIGH 3
2265 #define PROCESS_PRIOCLASS_REALTIME 4
2266 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
2267 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
2268
2269 typedef struct _PROCESS_PRIORITY_CLASS {
2270 BOOLEAN Foreground;
2271 UCHAR PriorityClass;
2272 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
2273
2274 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
2275 {
2276 SIZE_T ReserveSize;
2277 SIZE_T ZeroBits;
2278 PVOID StackBase;
2279 } PROCESS_STACK_ALLOCATION_INFORMATION, *PPROCESS_STACK_ALLOCATION_INFORMATION;
2280
2281 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
2282 {
2283 ULONG PreferredNode;
2284 ULONG Reserved0;
2285 ULONG Reserved1;
2286 ULONG Reserved2;
2287 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo;
2288 } PROCESS_STACK_ALLOCATION_INFORMATION_EX, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX;
2289
2290 typedef struct _RTL_HEAP_DEFINITION {
2291 ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
2292
2293 ULONG Unknown[11];
2294 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
2295
2296 typedef struct _RTL_RWLOCK {
2297 RTL_CRITICAL_SECTION rtlCS;
2298
2299 HANDLE hSharedReleaseSemaphore;
2300 UINT uSharedWaiters;
2301
2302 HANDLE hExclusiveReleaseSemaphore;
2303 UINT uExclusiveWaiters;
2304
2305 INT iNumberActive;
2306 HANDLE hOwningThreadId;
2307 DWORD dwTimeoutBoost;
2308 PVOID pDebugInfo;
2309 } RTL_RWLOCK, *LPRTL_RWLOCK;
2310
2311 /* System Information Class 0x00 */
2312
2313 typedef struct _SYSTEM_BASIC_INFORMATION {
2314 #ifdef __WINESRC__
2315 DWORD unknown;
2316 ULONG KeMaximumIncrement;
2317 ULONG PageSize;
2318 ULONG MmNumberOfPhysicalPages;
2319 ULONG MmLowestPhysicalPage;
2320 ULONG MmHighestPhysicalPage;
2321 ULONG_PTR AllocationGranularity;
2322 PVOID LowestUserAddress;
2323 PVOID HighestUserAddress;
2324 ULONG_PTR ActiveProcessorsAffinityMask;
2325 BYTE NumberOfProcessors;
2326 #else
2327 BYTE Reserved1[24];
2328 PVOID Reserved2[4];
2329 CCHAR NumberOfProcessors;
2330 #endif
2331 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
2332
2333 /* System Information Class 0x01 */
2334
2335 typedef struct _SYSTEM_CPU_INFORMATION {
2336 USHORT ProcessorArchitecture;
2337 USHORT ProcessorLevel;
2338 USHORT ProcessorRevision;
2339 USHORT MaximumProcessors;
2340 ULONG ProcessorFeatureBits;
2341 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
2342
2343 /* definitions of bits in the Feature set for the x86 processors */
2344 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
2345 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
2346 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
2347 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
2348 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
2349 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
2350 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
2351 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
2352 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
2353 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
2354 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
2355 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
2356 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
2357 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
2358 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
2359 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
2360 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
2361 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
2362 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
2363 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
2364 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
2365 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
2366 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
2367 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
2368
2369 /* FIXME: following values are made up, actual flags are unknown */
2370 #define CPU_FEATURE_SSSE3 0x00008000 /* SSSE3 instructions */
2371 #define CPU_FEATURE_SSE41 0x01000000 /* SSE41 instructions */
2372 #define CPU_FEATURE_SSE42 0x02000000 /* SSE42 instructions */
2373 #define CPU_FEATURE_AVX 0x40000000 /* AVX instructions */
2374 #define CPU_FEATURE_AVX2 0x80000000 /* AVX2 instructions */
2375 #define CPU_FEATURE_PAE 0x00200000
2376 #define CPU_FEATURE_DAZ 0x00400000
2377
2378 #define CPU_FEATURE_ARM_VFP_32 0x00000001
2379 #define CPU_FEATURE_ARM_NEON 0x00000002
2380 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
2381 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
2382
2383 /* System Information Class 0x02 */
2384
2385 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
2386 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
2387 LARGE_INTEGER IdleTime;
2388 LARGE_INTEGER ReadTransferCount;
2389 LARGE_INTEGER WriteTransferCount;
2390 LARGE_INTEGER OtherTransferCount;
2391 ULONG ReadOperationCount;
2392 ULONG WriteOperationCount;
2393 ULONG OtherOperationCount;
2394 ULONG AvailablePages;
2395 ULONG TotalCommittedPages;
2396 ULONG TotalCommitLimit;
2397 ULONG PeakCommitment;
2398 ULONG PageFaults;
2399 ULONG WriteCopyFaults;
2400 ULONG TransitionFaults;
2401 ULONG Reserved1;
2402 ULONG DemandZeroFaults;
2403 ULONG PagesRead;
2404 ULONG PageReadIos;
2405 ULONG Reserved2[2];
2406 ULONG PagefilePagesWritten;
2407 ULONG PagefilePageWriteIos;
2408 ULONG MappedFilePagesWritten;
2409 ULONG MappedFilePageWriteIos;
2410 ULONG PagedPoolUsage;
2411 ULONG NonPagedPoolUsage;
2412 ULONG PagedPoolAllocs;
2413 ULONG PagedPoolFrees;
2414 ULONG NonPagedPoolAllocs;
2415 ULONG NonPagedPoolFrees;
2416 ULONG TotalFreeSystemPtes;
2417 ULONG SystemCodePage;
2418 ULONG TotalSystemDriverPages;
2419 ULONG TotalSystemCodePages;
2420 ULONG SmallNonPagedLookasideListAllocateHits;
2421 ULONG SmallPagedLookasideListAllocateHits;
2422 ULONG Reserved3;
2423 ULONG MmSystemCachePage;
2424 ULONG PagedPoolPage;
2425 ULONG SystemDriverPage;
2426 ULONG FastReadNoWait;
2427 ULONG FastReadWait;
2428 ULONG FastReadResourceMiss;
2429 ULONG FastReadNotPossible;
2430 ULONG FastMdlReadNoWait;
2431 ULONG FastMdlReadWait;
2432 ULONG FastMdlReadResourceMiss;
2433 ULONG FastMdlReadNotPossible;
2434 ULONG MapDataNoWait;
2435 ULONG MapDataWait;
2436 ULONG MapDataNoWaitMiss;
2437 ULONG MapDataWaitMiss;
2438 ULONG PinMappedDataCount;
2439 ULONG PinReadNoWait;
2440 ULONG PinReadWait;
2441 ULONG PinReadNoWaitMiss;
2442 ULONG PinReadWaitMiss;
2443 ULONG CopyReadNoWait;
2444 ULONG CopyReadWait;
2445 ULONG CopyReadNoWaitMiss;
2446 ULONG CopyReadWaitMiss;
2447 ULONG MdlReadNoWait;
2448 ULONG MdlReadWait;
2449 ULONG MdlReadNoWaitMiss;
2450 ULONG MdlReadWaitMiss;
2451 ULONG ReadAheadIos;
2452 ULONG LazyWriteIos;
2453 ULONG LazyWritePages;
2454 ULONG DataFlushes;
2455 ULONG DataPages;
2456 ULONG ContextSwitches;
2457 ULONG FirstLevelTbFills;
2458 ULONG SecondLevelTbFills;
2459 ULONG SystemCalls;
2460 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
2461
2462 /* System Information Class 0x03 */
2463
2464 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
2465 #ifdef __WINESRC__
2466 LARGE_INTEGER BootTime;
2467 LARGE_INTEGER SystemTime;
2468 LARGE_INTEGER TimeZoneBias;
2469 ULONG TimeZoneId;
2470 ULONG Reserved;
2471 ULONGLONG BootTimeBias;
2472 ULONGLONG SleepTimeBias;
2473 #else
2474 BYTE Reserved1[48];
2475 #endif
2476 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
2477
2478 /* System Information Class 0x08 */
2479
2480 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
2481 LARGE_INTEGER IdleTime;
2482 LARGE_INTEGER KernelTime;
2483 LARGE_INTEGER UserTime;
2484 LARGE_INTEGER Reserved1[2];
2485 ULONG Reserved2;
2486 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
2487
2488 /* System Information Class 0x0b */
2489
2490 typedef struct _SYSTEM_DRIVER_INFORMATION {
2491 PVOID pvAddress;
2492 DWORD dwUnknown1;
2493 DWORD dwUnknown2;
2494 DWORD dwEntryIndex;
2495 DWORD dwUnknown3;
2496 char szName[MAX_PATH + 1];
2497 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
2498
2499 /* System Information Class 0x10 */
2500
2501 typedef struct _SYSTEM_HANDLE_ENTRY {
2502 ULONG OwnerPid;
2503 BYTE ObjectType;
2504 BYTE HandleFlags;
2505 USHORT HandleValue;
2506 PVOID ObjectPointer;
2507 ULONG AccessMask;
2508 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
2509
2510 typedef struct _SYSTEM_HANDLE_INFORMATION {
2511 ULONG Count;
2512 SYSTEM_HANDLE_ENTRY Handle[1];
2513 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
2514
2515 typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
2516 {
2517 void *Object;
2518 ULONG_PTR UniqueProcessId;
2519 ULONG_PTR HandleValue;
2520 ULONG GrantedAccess;
2521 USHORT CreatorBackTraceIndex;
2522 USHORT ObjectTypeIndex;
2523 ULONG HandleAttributes;
2524 ULONG Reserved;
2525 } SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX;
2526
2527 typedef struct _SYSTEM_HANDLE_INFORMATION_EX
2528 {
2529 ULONG_PTR NumberOfHandles;
2530 ULONG_PTR Reserved;
2531 SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles[1];
2532 } SYSTEM_HANDLE_INFORMATION_EX;
2533
2534 /* System Information Class 0x15 */
2535
2536 typedef struct _SYSTEM_CACHE_INFORMATION {
2537 SIZE_T CurrentSize;
2538 SIZE_T PeakSize;
2539 ULONG PageFaultCount;
2540 SIZE_T MinimumWorkingSet;
2541 SIZE_T MaximumWorkingSet;
2542 SIZE_T CurrentSizeIncludingTransitionInPages;
2543 SIZE_T PeakSizeIncludingTransitionInPages;
2544 ULONG TransitionRePurposeCount;
2545 ULONG Flags;
2546 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
2547
2548 /* System Information Class 0x17 */
2549
2550 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
2551 ULONG ContextSwitches;
2552 ULONG DpcCount;
2553 ULONG DpcRate;
2554 ULONG TimeIncrement;
2555 ULONG DpcBypassCount;
2556 ULONG ApcBypassCount;
2557 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
2558
2559 typedef struct _SYSTEM_CONFIGURATION_INFO {
2560 union {
2561 ULONG OemId;
2562 struct {
2563 WORD ProcessorArchitecture;
2564 WORD Reserved;
2565 } tag1;
2566 } tag2;
2567 ULONG PageSize;
2568 PVOID MinimumApplicationAddress;
2569 PVOID MaximumApplicationAddress;
2570 ULONG ActiveProcessorMask;
2571 ULONG NumberOfProcessors;
2572 ULONG ProcessorType;
2573 ULONG AllocationGranularity;
2574 WORD ProcessorLevel;
2575 WORD ProcessorRevision;
2576 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
2577
2578 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
2579 BYTE Reserved1[16];
2580 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
2581
2582 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
2583 BYTE Reserved1[32];
2584 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
2585
2586 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
2587 BOOLEAN DebuggerEnabled;
2588 BOOLEAN DebuggerNotPresent;
2589 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
2590
2591 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX {
2592 BOOLEAN DebuggerAllowed;
2593 BOOLEAN DebuggerEnabled;
2594 BOOLEAN DebuggerPresent;
2595 } SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION_EX;
2596
2597 typedef struct _VM_COUNTERS
2598 {
2599 SIZE_T PeakVirtualSize;
2600 SIZE_T VirtualSize;
2601 ULONG PageFaultCount;
2602 SIZE_T PeakWorkingSetSize;
2603 SIZE_T WorkingSetSize;
2604 SIZE_T QuotaPeakPagedPoolUsage;
2605 SIZE_T QuotaPagedPoolUsage;
2606 SIZE_T QuotaPeakNonPagedPoolUsage;
2607 SIZE_T QuotaNonPagedPoolUsage;
2608 SIZE_T PagefileUsage;
2609 SIZE_T PeakPagefileUsage;
2610 } VM_COUNTERS, *PVM_COUNTERS;
2611
2612 typedef struct _VM_COUNTERS_EX
2613 {
2614 SIZE_T PeakVirtualSize;
2615 SIZE_T VirtualSize;
2616 ULONG PageFaultCount;
2617 SIZE_T PeakWorkingSetSize;
2618 SIZE_T WorkingSetSize;
2619 SIZE_T QuotaPeakPagedPoolUsage;
2620 SIZE_T QuotaPagedPoolUsage;
2621 SIZE_T QuotaPeakNonPagedPoolUsage;
2622 SIZE_T QuotaNonPagedPoolUsage;
2623 SIZE_T PagefileUsage;
2624 SIZE_T PeakPagefileUsage;
2625 SIZE_T PrivateUsage;
2626 } VM_COUNTERS_EX, *PVM_COUNTERS_EX;
2627
2628 typedef struct _SYSTEM_PROCESS_INFORMATION {
2629 #ifdef __WINESRC__ /* win32/win64 */
2630 ULONG NextEntryOffset; /* 00/00 */
2631 DWORD dwThreadCount; /* 04/04 */
2632 LARGE_INTEGER WorkingSetPrivateSize; /* 08/08 */
2633 ULONG HardFaultCount; /* 10/10 */
2634 ULONG NumberOfThreadsHighWatermark;/* 14/14 */
2635 ULONGLONG CycleTime; /* 18/18 */
2636 LARGE_INTEGER CreationTime; /* 20/20 */
2637 LARGE_INTEGER UserTime; /* 28/28 */
2638 LARGE_INTEGER KernelTime; /* 30/30 */
2639 UNICODE_STRING ProcessName; /* 38/38 */
2640 DWORD dwBasePriority; /* 40/48 */
2641 HANDLE UniqueProcessId; /* 44/50 */
2642 HANDLE ParentProcessId; /* 48/58 */
2643 ULONG HandleCount; /* 4c/60 */
2644 ULONG SessionId; /* 50/64 */
2645 ULONG_PTR UniqueProcessKey; /* 54/68 */
2646 VM_COUNTERS_EX vmCounters; /* 58/70 */
2647 IO_COUNTERS ioCounters; /* 88/d0 */
2648 SYSTEM_THREAD_INFORMATION ti[1]; /* b8/100 */
2649 #else
2650 ULONG NextEntryOffset; /* 00/00 */
2651 BYTE Reserved1[52]; /* 04/04 */
2652 PVOID Reserved2[3]; /* 38/38 */
2653 HANDLE UniqueProcessId; /* 44/50 */
2654 PVOID Reserved3; /* 48/58 */
2655 ULONG HandleCount; /* 4c/60 */
2656 BYTE Reserved4[4]; /* 50/64 */
2657 PVOID Reserved5[11]; /* 54/68 */
2658 SIZE_T PeakPagefileUsage; /* 80/c0 */
2659 SIZE_T PrivatePageCount; /* 84/c8 */
2660 LARGE_INTEGER Reserved6[6]; /* 88/d0 */
2661 #endif
2662 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
2663
2664 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
2665 ULONG RegistryQuotaAllowed;
2666 ULONG RegistryQuotaUsed;
2667 PVOID Reserved1;
2668 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
2669
2670 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY {
2671 ULONG TimeAdjustment;
2672 ULONG TimeIncrement;
2673 BOOLEAN TimeAdjustmentDisabled;
2674 } SYSTEM_TIME_ADJUSTMENT_QUERY, *PSYSTEM_TIME_ADJUSTMENT_QUERY;
2675
2676 typedef struct _SYSTEM_TIME_ADJUSTMENT {
2677 ULONG TimeAdjustment;
2678 BOOLEAN TimeAdjustmentDisabled;
2679 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
2680
2681 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
2682 {
2683 SystemFirmwareTable_Enumerate = 0,
2684 SystemFirmwareTable_Get = 1
2685 } SYSTEM_FIRMWARE_TABLE_ACTION, *PSYSTEM_FIRMWARE_TABLE_ACTION;
2686
2687 /* System Information Class 0x4C */
2688
2689 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
2690 {
2691 ULONG ProviderSignature;
2692 SYSTEM_FIRMWARE_TABLE_ACTION Action;
2693 ULONG TableID;
2694 ULONG TableBufferLength;
2695 UCHAR TableBuffer[1];
2696 } SYSTEM_FIRMWARE_TABLE_INFORMATION, *PSYSTEM_FIRMWARE_TABLE_INFORMATION;
2697
2698 typedef struct _TIME_FIELDS
2699 { CSHORT Year;
2700 CSHORT Month;
2701 CSHORT Day;
2702 CSHORT Hour;
2703 CSHORT Minute;
2704 CSHORT Second;
2705 CSHORT Milliseconds;
2706 CSHORT Weekday;
2707 } TIME_FIELDS, *PTIME_FIELDS;
2708
2709 typedef struct _WINSTATIONINFORMATIONW {
2710 BYTE Reserved2[70];
2711 ULONG LogonId;
2712 BYTE Reserved3[1140];
2713 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
2714
2715 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
2716
2717 typedef struct _LDR_RESOURCE_INFO
2718 {
2719 ULONG_PTR Type;
2720 ULONG_PTR Name;
2721 ULONG Language;
2722 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
2723
2724
2725 /* debug buffer definitions */
2726
2727 typedef struct _DEBUG_BUFFER {
2728 HANDLE SectionHandle;
2729 PVOID SectionBase;
2730 PVOID RemoteSectionBase;
2731 ULONG SectionBaseDelta;
2732 HANDLE EventPairHandle;
2733 ULONG Unknown[2];
2734 HANDLE RemoteThreadHandle;
2735 ULONG InfoClassMask;
2736 ULONG SizeOfInfo;
2737 ULONG AllocatedSize;
2738 ULONG SectionSize;
2739 PVOID ModuleInformation;
2740 PVOID BackTraceInformation;
2741 PVOID HeapInformation;
2742 PVOID LockInformation;
2743 PVOID Reserved[8];
2744 } DEBUG_BUFFER, *PDEBUG_BUFFER;
2745
2746 #define PDI_MODULES 0x01
2747 #define PDI_BACKTRACE 0x02
2748 #define PDI_HEAPS 0x04
2749 #define PDI_HEAP_TAGS 0x08
2750 #define PDI_HEAP_BLOCKS 0x10
2751 #define PDI_LOCKS 0x20
2752
2753 typedef struct _DEBUG_MODULE_INFORMATION {
2754 ULONG Reserved[2];
2755 ULONG Base;
2756 ULONG Size;
2757 ULONG Flags;
2758 USHORT Index;
2759 USHORT Unknown;
2760 USHORT LoadCount;
2761 USHORT ModuleNameOffset;
2762 CHAR ImageName[256];
2763 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
2764
2765 typedef struct _DEBUG_HEAP_INFORMATION {
2766 ULONG Base;
2767 ULONG Flags;
2768 USHORT Granularity;
2769 USHORT Unknown;
2770 ULONG Allocated;
2771 ULONG Committed;
2772 ULONG TagCount;
2773 ULONG BlockCount;
2774 ULONG Reserved[7];
2775 PVOID Tags;
2776 PVOID Blocks;
2777 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
2778
2779 typedef struct _DEBUG_LOCK_INFORMATION {
2780 PVOID Address;
2781 USHORT Type;
2782 USHORT CreatorBackTraceIndex;
2783 ULONG OwnerThreadId;
2784 ULONG ActiveCount;
2785 ULONG ContentionCount;
2786 ULONG EntryCount;
2787 ULONG RecursionCount;
2788 ULONG NumberOfSharedWaiters;
2789 ULONG NumberOfExclusiveWaiters;
2790 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
2791
2792 typedef struct _PORT_MESSAGE_HEADER {
2793 USHORT DataSize;
2794 USHORT MessageSize;
2795 USHORT MessageType;
2796 USHORT VirtualRangesOffset;
2797 CLIENT_ID ClientId;
2798 ULONG MessageId;
2799 ULONG SectionSize;
2800 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
2801
2802 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
2803
2804 typedef enum _ATOM_INFORMATION_CLASS {
2805 AtomBasicInformation = 0,
2806 AtomTableInformation = 1,
2807 } ATOM_INFORMATION_CLASS;
2808
2809 typedef struct _ATOM_BASIC_INFORMATION {
2810 USHORT ReferenceCount;
2811 USHORT Pinned;
2812 USHORT NameLength;
2813 WCHAR Name[1];
2814 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
2815
2816 /* FIXME: names probably not correct */
2817 typedef struct _RTL_HANDLE
2818 {
2819 struct _RTL_HANDLE * Next;
2820 } RTL_HANDLE;
2821
2822 /* FIXME: names probably not correct */
2823 typedef struct _RTL_HANDLE_TABLE
2824 {
2825 ULONG MaxHandleCount; /* 0x00 */
2826 ULONG HandleSize; /* 0x04 */
2827 ULONG Unused[2]; /* 0x08-0x0c */
2828 PVOID NextFree; /* 0x10 */
2829 PVOID FirstHandle; /* 0x14 */
2830 PVOID ReservedMemory; /* 0x18 */
2831 PVOID MaxHandle; /* 0x1c */
2832 } RTL_HANDLE_TABLE;
2833
2834 typedef struct _RTL_ATOM_TABLE_ENTRY
2835 {
2836 struct _RTL_ATOM_TABLE_ENTRY *HashLink;
2837 WORD HandleIndex;
2838 WORD Atom;
2839 WORD ReferenceCount;
2840 UCHAR Flags;
2841 UCHAR NameLength;
2842 WCHAR Name[1];
2843 } RTL_ATOM_TABLE_ENTRY, *PRTL_ATOM_TABLE_ENTRY;
2844
2845 typedef struct _RTL_ATOM_TABLE
2846 {
2847 ULONG Signature;
2848 RTL_CRITICAL_SECTION CriticalSection;
2849 RTL_HANDLE_TABLE HandleTable;
2850 ULONG NumberOfBuckets;
2851 RTL_ATOM_TABLE_ENTRY *Buckets[1];
2852 } *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
2853
2854 /***********************************************************************
2855 * Defines
2856 */
2857
2858 /* flags for NtCreateFile and NtOpenFile */
2859 #define FILE_DIRECTORY_FILE 0x00000001
2860 #define FILE_WRITE_THROUGH 0x00000002
2861 #define FILE_SEQUENTIAL_ONLY 0x00000004
2862 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
2863 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
2864 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
2865 #define FILE_NON_DIRECTORY_FILE 0x00000040
2866 #define FILE_CREATE_TREE_CONNECTION 0x00000080
2867 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
2868 #define FILE_NO_EA_KNOWLEDGE 0x00000200
2869 #define FILE_OPEN_FOR_RECOVERY 0x00000400
2870 #define FILE_RANDOM_ACCESS 0x00000800
2871 #define FILE_DELETE_ON_CLOSE 0x00001000
2872 #define FILE_OPEN_BY_FILE_ID 0x00002000
2873 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
2874 #define FILE_NO_COMPRESSION 0x00008000
2875 #define FILE_RESERVE_OPFILTER 0x00100000
2876 #define FILE_OPEN_REPARSE_POINT 0x00200000
2877 #define FILE_OPEN_OFFLINE_FILE 0x00400000
2878 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
2879
2880 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
2881 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
2882
2883 /* status for NtCreateFile or NtOpenFile */
2884 #define FILE_SUPERSEDED 0
2885 #define FILE_OPENED 1
2886 #define FILE_CREATED 2
2887 #define FILE_OVERWRITTEN 3
2888 #define FILE_EXISTS 4
2889 #define FILE_DOES_NOT_EXIST 5
2890
2891 /* disposition for NtCreateFile */
2892 #define FILE_SUPERSEDE 0
2893 #define FILE_OPEN 1
2894 #define FILE_CREATE 2
2895 #define FILE_OPEN_IF 3
2896 #define FILE_OVERWRITE 4
2897 #define FILE_OVERWRITE_IF 5
2898 #define FILE_MAXIMUM_DISPOSITION 5
2899
2900 /* Characteristics of a File System */
2901 #define FILE_REMOVABLE_MEDIA 0x00000001
2902 #define FILE_READ_ONLY_DEVICE 0x00000002
2903 #define FILE_FLOPPY_DISKETTE 0x00000004
2904 #define FILE_WRITE_ONE_MEDIA 0x00000008
2905 #define FILE_REMOTE_DEVICE 0x00000010
2906 #define FILE_DEVICE_IS_MOUNTED 0x00000020
2907 #define FILE_VIRTUAL_VOLUME 0x00000040
2908 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
2909 #define FILE_DEVICE_SECURE_OPEN 0x00000100
2910 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
2911 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
2912 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
2913 #define FILE_CHARACTERISTIC_CSV 0x00010000
2914 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
2915 #define FILE_PORTABLE_DEVICE 0x00040000
2916
2917 /* options for NtCreateNamedPipeFile */
2918 #define FILE_PIPE_INBOUND 0x00000000
2919 #define FILE_PIPE_OUTBOUND 0x00000001
2920 #define FILE_PIPE_FULL_DUPLEX 0x00000002
2921
2922 /* options for pipe's type */
2923 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
2924 #define FILE_PIPE_TYPE_BYTE 0x00000000
2925 /* options for pipe's message mode */
2926 #define FILE_PIPE_MESSAGE_MODE 0x00000001
2927 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
2928 /* options for pipe's blocking mode */
2929 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
2930 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
2931 /* and client / server end */
2932 #define FILE_PIPE_SERVER_END 0x00000001
2933 #define FILE_PIPE_CLIENT_END 0x00000000
2934
2935 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
2936
2937 #define LOGONID_CURRENT ((ULONG)-1)
2938
2939 #define OBJ_PROTECT_CLOSE 0x00000001
2940 #define OBJ_INHERIT 0x00000002
2941 #define OBJ_PERMANENT 0x00000010
2942 #define OBJ_EXCLUSIVE 0x00000020
2943 #define OBJ_CASE_INSENSITIVE 0x00000040
2944 #define OBJ_OPENIF 0x00000080
2945 #define OBJ_OPENLINK 0x00000100
2946 #define OBJ_KERNEL_HANDLE 0x00000200
2947 #define OBJ_VALID_ATTRIBUTES 0x000003F2
2948
2949 #define SERVERNAME_CURRENT ((HANDLE)NULL)
2950
2951 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
2952 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
2953 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
2954 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
2955
2956
2957 /* DbgPrintEx default levels */
2958 #define DPFLTR_ERROR_LEVEL 0
2959 #define DPFLTR_WARNING_LEVEL 1
2960 #define DPFLTR_TRACE_LEVEL 2
2961 #define DPFLTR_INFO_LEVEL 3
2962 #define DPFLTR_MASK 0x8000000
2963
2964 /* Well-known LUID values */
2965 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
2966 #define SE_CREATE_TOKEN_PRIVILEGE 2
2967 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
2968 #define SE_LOCK_MEMORY_PRIVILEGE 4
2969 #define SE_INCREASE_QUOTA_PRIVILEGE 5
2970 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
2971 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
2972 #define SE_TCB_PRIVILEGE 7
2973 #define SE_SECURITY_PRIVILEGE 8
2974 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
2975 #define SE_LOAD_DRIVER_PRIVILEGE 10
2976 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
2977 #define SE_SYSTEMTIME_PRIVILEGE 12
2978 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
2979 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
2980 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
2981 #define SE_CREATE_PERMANENT_PRIVILEGE 16
2982 #define SE_BACKUP_PRIVILEGE 17
2983 #define SE_RESTORE_PRIVILEGE 18
2984 #define SE_SHUTDOWN_PRIVILEGE 19
2985 #define SE_DEBUG_PRIVILEGE 20
2986 #define SE_AUDIT_PRIVILEGE 21
2987 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
2988 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
2989 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
2990 #define SE_UNDOCK_PRIVILEGE 25
2991 #define SE_SYNC_AGENT_PRIVILEGE 26
2992 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
2993 #define SE_MANAGE_VOLUME_PRIVILEGE 28
2994 #define SE_IMPERSONATE_PRIVILEGE 29
2995 #define SE_CREATE_GLOBAL_PRIVILEGE 30
2996 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
2997
2998 /* NtGlobalFlag bits */
2999 #define FLG_STOP_ON_EXCEPTION 0x00000001
3000 #define FLG_SHOW_LDR_SNAPS 0x00000002
3001 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
3002 #define FLG_STOP_ON_HUNG_GUI 0x00000008
3003 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
3004 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
3005 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
3006 #define FLG_HEAP_VALIDATE_ALL 0x00000080
3007 #define FLG_APPLICATION_VERIFIER 0x00000100
3008 #define FLG_POOL_ENABLE_TAGGING 0x00000400
3009 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
3010 #define FLG_USER_STACK_TRACE_DB 0x00001000
3011 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
3012 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
3013 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
3014 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
3015 #define FLG_ENABLE_CSRDEBUG 0x00020000
3016 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
3017 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
3018 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
3019 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
3020 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
3021 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
3022 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
3023 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
3024 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
3025 #define FLG_DISABLE_DBGPRINT 0x08000000
3026 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
3027 #define FLG_LDR_TOP_DOWN 0x20000000
3028 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
3029 #define FLG_DISABLE_PROTDLLS 0x80000000
3030
3031 /* Rtl*Registry* functions structs and defines */
3032 #define RTL_REGISTRY_ABSOLUTE 0
3033 #define RTL_REGISTRY_SERVICES 1
3034 #define RTL_REGISTRY_CONTROL 2
3035 #define RTL_REGISTRY_WINDOWS_NT 3
3036 #define RTL_REGISTRY_DEVICEMAP 4
3037 #define RTL_REGISTRY_USER 5
3038
3039 #define RTL_REGISTRY_HANDLE 0x40000000
3040 #define RTL_REGISTRY_OPTIONAL 0x80000000
3041
3042 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
3043 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
3044 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
3045 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
3046 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
3047 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
3048 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
3049 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
3050
3051 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
3052
3053 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
3054 ULONG ValueType,
3055 PVOID ValueData,
3056 ULONG ValueLength,
3057 PVOID Context,
3058 PVOID EntryContext);
3059
3060 typedef struct _RTL_QUERY_REGISTRY_TABLE
3061 {
3062 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
3063 ULONG Flags;
3064 PWSTR Name;
3065 PVOID EntryContext;
3066 ULONG DefaultType;
3067 PVOID DefaultData;
3068 ULONG DefaultLength;
3069 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
3070
3071 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
3072 {
3073 PUNICODE_STRING ValueName;
3074 ULONG DataLength;
3075 ULONG DataOffset;
3076 ULONG Type;
3077 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
3078
3079 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
3080
3081 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
3082
3083 typedef enum _EVENT_INFORMATION_CLASS {
3084 EventBasicInformation
3085 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
3086
3087 typedef struct _EVENT_BASIC_INFORMATION {
3088 EVENT_TYPE EventType;
3089 LONG EventState;
3090 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
3091
3092 typedef enum _SEMAPHORE_INFORMATION_CLASS {
3093 SemaphoreBasicInformation
3094 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
3095
3096 typedef struct _SEMAPHORE_BASIC_INFORMATION {
3097 ULONG CurrentCount;
3098 ULONG MaximumCount;
3099 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
3100
3101 typedef enum _SECTION_INFORMATION_CLASS
3102 {
3103 SectionBasicInformation,
3104 SectionImageInformation,
3105 SectionRelocationInformation,
3106 SectionOriginalBaseInformation,
3107 SectionInternalImageInformation
3108 } SECTION_INFORMATION_CLASS;
3109
3110 typedef struct _SECTION_BASIC_INFORMATION {
3111 PVOID BaseAddress;
3112 ULONG Attributes;
3113 LARGE_INTEGER Size;
3114 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
3115
3116 typedef struct _SECTION_IMAGE_INFORMATION {
3117 PVOID TransferAddress;
3118 ULONG ZeroBits;
3119 SIZE_T MaximumStackSize;
3120 SIZE_T CommittedStackSize;
3121 ULONG SubSystemType;
3122 USHORT MinorSubsystemVersion;
3123 USHORT MajorSubsystemVersion;
3124 USHORT MajorOperatingSystemVersion;
3125 USHORT MinorOperatingSystemVersion;
3126 USHORT ImageCharacteristics;
3127 USHORT DllCharacteristics;
3128 USHORT Machine;
3129 BOOLEAN ImageContainsCode;
3130 union
3131 {
3132 UCHAR ImageFlags;
3133 struct
3134 {
3135 UCHAR ComPlusNativeReady : 1;
3136 UCHAR ComPlusILOnly : 1;
3137 UCHAR ImageDynamicallyRelocated : 1;
3138 UCHAR ImageMappedFlat : 1;
3139 UCHAR BaseBelow4gb : 1;
3140 UCHAR ComPlusPrefer32bit : 1;
3141 #ifdef __WINESRC__ /* Wine extensions */
3142 UCHAR WineBuiltin : 1;
3143 UCHAR WineFakeDll : 1;
3144 #else
3145 UCHAR Reserved : 2;
3146 #endif
3147 } DUMMYSTRUCTNAME;
3148 } DUMMYUNIONNAME;
3149 ULONG LoaderFlags;
3150 ULONG ImageFileSize;
3151 ULONG CheckSum;
3152 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
3153
3154 typedef struct _LPC_SECTION_WRITE {
3155 ULONG Length;
3156 HANDLE SectionHandle;
3157 ULONG SectionOffset;
3158 ULONG ViewSize;
3159 PVOID ViewBase;
3160 PVOID TargetViewBase;
3161 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
3162
3163 typedef struct _LPC_SECTION_READ {
3164 ULONG Length;
3165 ULONG ViewSize;
3166 PVOID ViewBase;
3167 } LPC_SECTION_READ, *PLPC_SECTION_READ;
3168
3169 typedef struct _LPC_MESSAGE {
3170 USHORT DataSize;
3171 USHORT MessageSize;
3172 USHORT MessageType;
3173 USHORT VirtualRangesOffset;
3174 CLIENT_ID ClientId;
3175 ULONG_PTR MessageId;
3176 ULONG_PTR SectionSize;
3177 UCHAR Data[ANYSIZE_ARRAY];
3178 } LPC_MESSAGE, *PLPC_MESSAGE;
3179
3180 typedef struct _RTL_USER_PROCESS_INFORMATION
3181 {
3182 ULONG Length;
3183 HANDLE Process;
3184 HANDLE Thread;
3185 CLIENT_ID ClientId;
3186 SECTION_IMAGE_INFORMATION ImageInformation;
3187 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
3188
3189 typedef enum _SHUTDOWN_ACTION {
3190 ShutdownNoReboot,
3191 ShutdownReboot,
3192 ShutdownPowerOff
3193 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
3194
3195 typedef enum _KPROFILE_SOURCE {
3196 ProfileTime,
3197 ProfileAlignmentFixup,
3198 ProfileTotalIssues,
3199 ProfilePipelineDry,
3200 ProfileLoadInstructions,
3201 ProfilePipelineFrozen,
3202 ProfileBranchInstructions,
3203 ProfileTotalNonissues,
3204 ProfileDcacheMisses,
3205 ProfileIcacheMisses,
3206 ProfileCacheMisses,
3207 ProfileBranchMispredictions,
3208 ProfileStoreInstructions,
3209 ProfileFpInstructions,
3210 ProfileIntegerInstructions,
3211 Profile2Issue,
3212 Profile3Issue,
3213 Profile4Issue,
3214 ProfileSpecialInstructions,
3215 ProfileTotalCycles,
3216 ProfileIcacheIssues,
3217 ProfileDcacheAccesses,
3218 ProfileMemoryBarrierCycles,
3219 ProfileLoadLinkedIssues,
3220 ProfileMaximum
3221 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
3222
3223 typedef struct _DIRECTORY_BASIC_INFORMATION {
3224 UNICODE_STRING ObjectName;
3225 UNICODE_STRING ObjectTypeName;
3226 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
3227
3228 typedef struct _INITIAL_TEB {
3229 void *OldStackBase;
3230 void *OldStackLimit;
3231 void *StackBase;
3232 void *StackLimit;
3233 void *DeallocationStack;
3234 } INITIAL_TEB, *PINITIAL_TEB;
3235
3236 typedef enum _PORT_INFORMATION_CLASS {
3237 PortNoInformation
3238 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
3239
3240 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
3241 IoCompletionBasicInformation
3242 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
3243
3244 typedef struct _FILE_COMPLETION_INFORMATION {
3245 HANDLE CompletionPort;
3246 ULONG_PTR CompletionKey;
3247 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
3248
3249 #define IO_COMPLETION_QUERY_STATE 0x0001
3250 #define IO_COMPLETION_MODIFY_STATE 0x0002
3251 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
3252
3253 typedef struct _FILE_IO_COMPLETION_INFORMATION {
3254 ULONG_PTR CompletionKey;
3255 ULONG_PTR CompletionValue;
3256 IO_STATUS_BLOCK IoStatusBlock;
3257 } FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
3258
3259 typedef enum _HARDERROR_RESPONSE_OPTION {
3260 OptionAbortRetryIgnore,
3261 OptionOk,
3262 OptionOkCancel,
3263 OptionRetryCancel,
3264 OptionYesNo,
3265 OptionYesNoCancel,
3266 OptionShutdownSystem
3267 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
3268
3269 typedef enum _HARDERROR_RESPONSE {
3270 ResponseReturnToCaller,
3271 ResponseNotHandled,
3272 ResponseAbort,
3273 ResponseCancel,
3274 ResponseIgnore,
3275 ResponseNo,
3276 ResponseOk,
3277 ResponseRetry,
3278 ResponseYes
3279 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
3280
3281 typedef enum _SYSDBG_COMMAND {
3282 SysDbgQueryModuleInformation,
3283 SysDbgQueryTraceInformation,
3284 SysDbgSetTracepoint,
3285 SysDbgSetSpecialCall,
3286 SysDbgClearSpecialCalls,
3287 SysDbgQuerySpecialCalls,
3288 SysDbgBreakPoint,
3289 SysDbgQueryVersion,
3290 SysDbgReadVirtual,
3291 SysDbgWriteVirtual,
3292 SysDbgReadPhysical,
3293 SysDbgWritePhysical,
3294 SysDbgReadControlSpace,
3295 SysDbgWriteControlSpace,
3296 SysDbgReadIoSpace,
3297 SysDbgWriteIoSpace,
3298 SysDbgReadMsr,
3299 SysDbgWriteMsr,
3300 SysDbgReadBusData,
3301 SysDbgWriteBusData
3302 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
3303
3304 typedef struct _CPTABLEINFO
3305 {
3306 USHORT CodePage;
3307 USHORT MaximumCharacterSize;
3308 USHORT DefaultChar;
3309 USHORT UniDefaultChar;
3310 USHORT TransDefaultChar;
3311 USHORT TransUniDefaultChar;
3312 USHORT DBCSCodePage;
3313 UCHAR LeadByte[12];
3314 USHORT *MultiByteTable;
3315 void *WideCharTable;
3316 USHORT *DBCSRanges;
3317 USHORT *DBCSOffsets;
3318 } CPTABLEINFO, *PCPTABLEINFO;
3319
3320 typedef struct _NLSTABLEINFO
3321 {
3322 CPTABLEINFO OemTableInfo;
3323 CPTABLEINFO AnsiTableInfo;
3324 USHORT *UpperCaseTable;
3325 USHORT *LowerCaseTable;
3326 } NLSTABLEINFO, *PNLSTABLEINFO;
3327
3328 /*************************************************************************
3329 * Loader structures
3330 *
3331 * Those are not part of standard Winternl.h
3332 */
3333
3334 typedef struct _LDR_SERVICE_TAG_RECORD
3335 {
3336 struct _LDR_SERVICE_TAG_RECORD *Next;
3337 ULONG ServiceTag;
3338 } LDR_SERVICE_TAG_RECORD, *PLDR_SERVICE_TAG_RECORD;
3339
3340 typedef struct _LDRP_CSLIST
3341 {
3342 SINGLE_LIST_ENTRY *Tail;
3343 } LDRP_CSLIST, *PLDRP_CSLIST;
3344
3345 typedef struct _LDR_DEPENDENCY
3346 {
3347 SINGLE_LIST_ENTRY dependency_to_entry;
3348 struct _LDR_DDAG_NODE *dependency_to;
3349 SINGLE_LIST_ENTRY dependency_from_entry;
3350 struct _LDR_DDAG_NODE *dependency_from;
3351 } LDR_DEPENDENCY, *PLDR_DEPENDENCY;
3352
3353 typedef enum _LDR_DDAG_STATE
3354 {
3355 LdrModulesMerged = -5,
3356 LdrModulesInitError = -4,
3357 LdrModulesSnapError = -3,
3358 LdrModulesUnloaded = -2,
3359 LdrModulesUnloading = -1,
3360 LdrModulesPlaceHolder = 0,
3361 LdrModulesMapping = 1,
3362 LdrModulesMapped = 2,
3363 LdrModulesWaitingForDependencies = 3,
3364 LdrModulesSnapping = 4,
3365 LdrModulesSnapped = 5,
3366 LdrModulesCondensed = 6,
3367 LdrModulesReadyToInit = 7,
3368 LdrModulesInitializing = 8,
3369 LdrModulesReadyToRun = 9,
3370 } LDR_DDAG_STATE;
3371
3372 typedef struct _LDR_DDAG_NODE
3373 {
3374 LIST_ENTRY Modules;
3375 LDR_SERVICE_TAG_RECORD *ServiceTagList;
3376 LONG LoadCount;
3377 ULONG LoadWhileUnloadingCount;
3378 ULONG LowestLink;
3379 LDRP_CSLIST Dependencies;
3380 LDRP_CSLIST IncomingDependencies;
3381 LDR_DDAG_STATE State;
3382 SINGLE_LIST_ENTRY CondenseLink;
3383 ULONG PreorderNumber;
3384 } LDR_DDAG_NODE, *PLDR_DDAG_NODE;
3385
3386 typedef enum _LDR_DLL_LOAD_REASON
3387 {
3388 LoadReasonStaticDependency,
3389 LoadReasonStaticForwarderDependency,
3390 LoadReasonDynamicForwarderDependency,
3391 LoadReasonDelayloadDependency,
3392 LoadReasonDynamicLoad,
3393 LoadReasonAsImageLoad,
3394 LoadReasonAsDataLoad,
3395 LoadReasonUnknown = -1
3396 } LDR_DLL_LOAD_REASON, *PLDR_DLL_LOAD_REASON;
3397
3398 typedef struct _LDR_DATA_TABLE_ENTRY
3399 {
3400 LIST_ENTRY InLoadOrderLinks;
3401 LIST_ENTRY InMemoryOrderLinks;
3402 LIST_ENTRY InInitializationOrderLinks;
3403 void* DllBase;
3404 void* EntryPoint;
3405 ULONG SizeOfImage;
3406 UNICODE_STRING FullDllName;
3407 UNICODE_STRING BaseDllName;
3408 ULONG Flags;
3409 SHORT LoadCount;
3410 SHORT TlsIndex;
3411 LIST_ENTRY HashLinks;
3412 ULONG TimeDateStamp;
3413 HANDLE ActivationContext;
3414 void* Lock;
3415 LDR_DDAG_NODE* DdagNode;
3416 LIST_ENTRY NodeModuleLink;
3417 struct _LDRP_LOAD_CONTEXT *LoadContext;
3418 void* ParentDllBase;
3419 void* SwitchBackContext;
3420 RTL_BALANCED_NODE BaseAddressIndexNode;
3421 RTL_BALANCED_NODE MappingInfoIndexNode;
3422 ULONG_PTR OriginalBase;
3423 LARGE_INTEGER LoadTime;
3424 ULONG BaseNameHashValue;
3425 LDR_DLL_LOAD_REASON LoadReason;
3426 ULONG ImplicitPathOptions;
3427 ULONG ReferenceCount;
3428 } LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
3429
3430 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
3431 {
3432 ULONG Flags;
3433 const UNICODE_STRING *FullDllName;
3434 const UNICODE_STRING *BaseDllName;
3435 void *DllBase;
3436 ULONG SizeOfImage;
3437 } LDR_DLL_LOADED_NOTIFICATION_DATA, *PLDR_DLL_LOADED_NOTIFICATION_DATA;
3438
3439 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
3440 {
3441 ULONG Flags;
3442 const UNICODE_STRING *FullDllName;
3443 const UNICODE_STRING *BaseDllName;
3444 void *DllBase;
3445 ULONG SizeOfImage;
3446 } LDR_DLL_UNLOADED_NOTIFICATION_DATA, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
3447
3448 typedef union _LDR_DLL_NOTIFICATION_DATA
3449 {
3450 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
3451 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
3452 } LDR_DLL_NOTIFICATION_DATA, *PLDR_DLL_NOTIFICATION_DATA;
3453
3454 typedef void (CALLBACK *PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA*, void*);
3455
3456 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
3457 #define LDR_IMAGE_IS_DLL 0x00000004
3458 #define LDR_LOAD_IN_PROGRESS 0x00001000
3459 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
3460 #define LDR_NO_DLL_CALLS 0x00040000
3461 #define LDR_PROCESS_ATTACHED 0x00080000
3462 #define LDR_COR_IMAGE 0x00400000
3463 #define LDR_COR_ILONLY 0x01000000
3464
3465 /* these ones is Wine specific */
3466 #define LDR_DONT_RESOLVE_REFS 0x40000000
3467 #define LDR_WINE_INTERNAL 0x80000000
3468
3469 /* flag for LdrAddRefDll */
3470 #define LDR_ADDREF_DLL_PIN 0x00000001
3471
3472 /* flags for LdrGetDllHandleEx */
3473 #define LDR_GET_DLL_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT 0x00000001
3474 #define LDR_GET_DLL_HANDLE_EX_FLAG_PIN 0x00000002
3475
3476 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
3477 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
3478
3479 /* FIXME: to be checked */
3480 #define MAXIMUM_FILENAME_LENGTH 256
3481
3482 typedef struct _RTL_PROCESS_MODULE_INFORMATION
3483 {
3484 PVOID Section; /* 00/00 */
3485 PVOID MappedBaseAddress; /* 04/08 */
3486 PVOID ImageBaseAddress; /* 08/10 */
3487 ULONG ImageSize; /* 0c/18 */
3488 ULONG Flags; /* 10/1c */
3489 WORD LoadOrderIndex; /* 14/20 */
3490 WORD InitOrderIndex; /* 16/22 */
3491 WORD LoadCount; /* 18/24 */
3492 WORD NameOffset; /* 1a/26 */
3493 BYTE Name[MAXIMUM_FILENAME_LENGTH]; /* 1c/28 */
3494 } RTL_PROCESS_MODULE_INFORMATION, *PRTL_PROCESS_MODULE_INFORMATION;
3495
3496 typedef struct _RTL_PROCESS_MODULES
3497 {
3498 ULONG ModulesCount;
3499 RTL_PROCESS_MODULE_INFORMATION Modules[1]; /* FIXME: should be Modules[0] */
3500 } RTL_PROCESS_MODULES, *PRTL_PROCESS_MODULES;
3501
3502 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
3503 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
3504 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
3505 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
3506 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
3507 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
3508 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
3509 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
3510 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
3511 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
3512 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
3513
3514 typedef struct _RTL_PROCESS_MODULE_INFORMATION_EX
3515 {
3516 USHORT NextOffset;
3517 RTL_PROCESS_MODULE_INFORMATION BaseInfo;
3518 ULONG ImageCheckSum;
3519 ULONG TimeDateStamp;
3520 void *DefaultBase;
3521 } RTL_PROCESS_MODULE_INFORMATION_EX;
3522
3523 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
3524 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
3525 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
3526 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
3527 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
3528 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
3529
3530 #define EH_NONCONTINUABLE 0x01
3531 #define EH_UNWINDING 0x02
3532 #define EH_EXIT_UNWIND 0x04
3533 #define EH_STACK_INVALID 0x08
3534 #define EH_NESTED_CALL 0x10
3535 #define EH_TARGET_UNWIND 0x20
3536 #define EH_COLLIDED_UNWIND 0x40
3537
3538 #ifdef __WINESRC__
3539
3540 /* Wine-specific exceptions codes */
3541
3542 #define EXCEPTION_WINE_STUB 0x80000100 /* stub entry point called */
3543 #define EXCEPTION_WINE_ASSERTION 0x80000101 /* assertion failed */
3544
3545 /* Wine extension; Windows doesn't have a name for this code. This is an
3546 undocumented exception understood by MS VC debugger, allowing the program
3547 to name a particular thread. */
3548 #define EXCEPTION_WINE_NAME_THREAD 0x406D1388
3549
3550 /* used for C++ exceptions in msvcrt
3551 * parameters:
3552 * [0] CXX_FRAME_MAGIC
3553 * [1] pointer to exception object
3554 * [2] pointer to type
3555 */
3556 #define EXCEPTION_WINE_CXX_EXCEPTION 0xe06d7363
3557 #define EXCEPTION_WINE_CXX_FRAME_MAGIC 0x19930520
3558
3559 #endif
3560
3561 typedef LONG (CALLBACK *PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS);
3562
3563 typedef void (CALLBACK *PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE,void*,void*,IO_STATUS_BLOCK*,PTP_IO);
3564
3565 #define PS_ATTRIBUTE_THREAD 0x00010000
3566 #define PS_ATTRIBUTE_INPUT 0x00020000
3567 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
3568
3569 typedef enum _PS_ATTRIBUTE_NUM
3570 {
3571 PsAttributeParentProcess,
3572 PsAttributeDebugPort,
3573 PsAttributeToken,
3574 PsAttributeClientId,
3575 PsAttributeTebAddress,
3576 PsAttributeImageName,
3577 PsAttributeImageInfo,
3578 PsAttributeMemoryReserve,
3579 PsAttributePriorityClass,
3580 PsAttributeErrorMode,
3581 PsAttributeStdHandleInfo,
3582 PsAttributeHandleList,
3583 PsAttributeGroupAffinity,
3584 PsAttributePreferredNode,
3585 PsAttributeIdealProcessor,
3586 PsAttributeUmsThread,
3587 PsAttributeMitigationOptions,
3588 PsAttributeProtectionLevel,
3589 PsAttributeSecureProcess,
3590 PsAttributeJobList,
3591 PsAttributeChildProcessPolicy,
3592 PsAttributeAllApplicationPackagesPolicy,
3593 PsAttributeWin32kFilter,
3594 PsAttributeSafeOpenPromptOriginClaim,
3595 PsAttributeBnoIsolation,
3596 PsAttributeDesktopAppPolicy,
3597 PsAttributeChpe,
3598 PsAttributeMax
3599 } PS_ATTRIBUTE_NUM;
3600
3601 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3602 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3603 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3604 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
3605 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
3606 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
3607 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
3608 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
3609 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
3610 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
3611 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
3612 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
3613 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3614 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
3615 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3616 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
3617 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
3618 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
3619 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
3620 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
3621 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
3622 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
3623 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
3624 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
3625 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
3626
3627 typedef struct _PS_ATTRIBUTE
3628 {
3629 ULONG_PTR Attribute;
3630 SIZE_T Size;
3631 union
3632 {
3633 ULONG_PTR Value;
3634 void *ValuePtr;
3635 };
3636 SIZE_T *ReturnLength;
3637 } PS_ATTRIBUTE;
3638
3639 typedef struct _PS_ATTRIBUTE_LIST
3640 {
3641 SIZE_T TotalLength;
3642 PS_ATTRIBUTE Attributes[1];
3643 } PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
3644
3645 typedef enum _PS_CREATE_STATE
3646 {
3647 PsCreateInitialState,
3648 PsCreateFailOnFileOpen,
3649 PsCreateFailOnSectionCreate,
3650 PsCreateFailExeFormat,
3651 PsCreateFailMachineMismatch,
3652 PsCreateFailExeName,
3653 PsCreateSuccess,
3654 PsCreateMaximumStates
3655 } PS_CREATE_STATE;
3656
3657 typedef struct _PS_CREATE_INFO
3658 {
3659 SIZE_T Size;
3660 PS_CREATE_STATE State;
3661 union
3662 {
3663 struct
3664 {
3665 union
3666 {
3667 ULONG InitFlags;
3668 struct
3669 {
3670 UCHAR WriteOutputOnExit : 1;
3671 UCHAR DetectManifest : 1;
3672 UCHAR IFEOSkipDebugger : 1;
3673 UCHAR IFEODoNotPropagateKeyState : 1;
3674 UCHAR SpareBits1 : 4;
3675 UCHAR SpareBits2 : 8;
3676 USHORT ProhibitedImageCharacteristics : 16;
3677 };
3678 };
3679 ACCESS_MASK AdditionalFileAccess;
3680 } InitState;
3681 struct
3682 {
3683 HANDLE FileHandle;
3684 } FailSection;
3685 struct
3686 {
3687 USHORT DllCharacteristics;
3688 } ExeFormat;
3689 struct
3690 {
3691 HANDLE IFEOKey;
3692 } ExeName;
3693 struct
3694 {
3695 union
3696 {
3697 ULONG OutputFlags;
3698 struct
3699 {
3700 UCHAR ProtectedProcess : 1;
3701 UCHAR AddressSpaceOverride : 1;
3702 UCHAR DevOverrideEnabled : 1;
3703 UCHAR ManifestDetected : 1;
3704 UCHAR ProtectedProcessLight : 1;
3705 UCHAR SpareBits1 : 3;
3706 UCHAR SpareBits2 : 8;
3707 USHORT SpareBits3 : 16;
3708 };
3709 };
3710 HANDLE FileHandle;
3711 HANDLE SectionHandle;
3712 ULONGLONG UserProcessParametersNative;
3713 ULONG UserProcessParametersWow64;
3714 ULONG CurrentParameterFlags;
3715 ULONGLONG PebAddressNative;
3716 ULONG PebAddressWow64;
3717 ULONGLONG ManifestAddress;
3718 ULONG ManifestSize;
3719 } SuccessState;
3720 };
3721 } PS_CREATE_INFO, *PPS_CREATE_INFO;
3722
3723 typedef struct _DBGKM_EXCEPTION
3724 {
3725 EXCEPTION_RECORD ExceptionRecord;
3726 ULONG FirstChance;
3727 } DBGKM_EXCEPTION, *PDBGKM_EXCEPTION;
3728
3729 typedef struct _DBGKM_CREATE_THREAD
3730 {
3731 ULONG SubSystemKey;
3732 PVOID StartAddress;
3733 } DBGKM_CREATE_THREAD, *PDBGKM_CREATE_THREAD;
3734
3735 typedef struct _DBGKM_CREATE_PROCESS
3736 {
3737 ULONG SubSystemKey;
3738 HANDLE FileHandle;
3739 PVOID BaseOfImage;
3740 ULONG DebugInfoFileOffset;
3741 ULONG DebugInfoSize;
3742 DBGKM_CREATE_THREAD InitialThread;
3743 } DBGKM_CREATE_PROCESS, *PDBGKM_CREATE_PROCESS;
3744
3745 typedef struct _DBGKM_EXIT_THREAD
3746 {
3747 NTSTATUS ExitStatus;
3748 } DBGKM_EXIT_THREAD, *PDBGKM_EXIT_THREAD;
3749
3750 typedef struct _DBGKM_EXIT_PROCESS
3751 {
3752 NTSTATUS ExitStatus;
3753 } DBGKM_EXIT_PROCESS, *PDBGKM_EXIT_PROCESS;
3754
3755 typedef struct _DBGKM_LOAD_DLL
3756 {
3757 HANDLE FileHandle;
3758 PVOID BaseOfDll;
3759 ULONG DebugInfoFileOffset;
3760 ULONG DebugInfoSize;
3761 PVOID NamePointer;
3762 } DBGKM_LOAD_DLL, *PDBGKM_LOAD_DLL;
3763
3764 typedef struct _DBGKM_UNLOAD_DLL
3765 {
3766 PVOID BaseAddress;
3767 } DBGKM_UNLOAD_DLL, *PDBGKM_UNLOAD_DLL;
3768
3769 typedef enum _DBG_STATE
3770 {
3771 DbgIdle,
3772 DbgReplyPending,
3773 DbgCreateThreadStateChange,
3774 DbgCreateProcessStateChange,
3775 DbgExitThreadStateChange,
3776 DbgExitProcessStateChange,
3777 DbgExceptionStateChange,
3778 DbgBreakpointStateChange,
3779 DbgSingleStepStateChange,
3780 DbgLoadDllStateChange,
3781 DbgUnloadDllStateChange
3782 } DBG_STATE, *PDBG_STATE;
3783
3784 typedef struct _DBGUI_CREATE_THREAD
3785 {
3786 HANDLE HandleToThread;
3787 DBGKM_CREATE_THREAD NewThread;
3788 } DBGUI_CREATE_THREAD, *PDBGUI_CREATE_THREAD;
3789
3790 typedef struct _DBGUI_CREATE_PROCESS
3791 {
3792 HANDLE HandleToProcess;
3793 HANDLE HandleToThread;
3794 DBGKM_CREATE_PROCESS NewProcess;
3795 } DBGUI_CREATE_PROCESS, *PDBGUI_CREATE_PROCESS;
3796
3797 typedef struct _DBGUI_WAIT_STATE_CHANGE
3798 {
3799 DBG_STATE NewState;
3800 CLIENT_ID AppClientId;
3801 union
3802 {
3803 DBGKM_EXCEPTION Exception;
3804 DBGUI_CREATE_THREAD CreateThread;
3805 DBGUI_CREATE_PROCESS CreateProcessInfo;
3806 DBGKM_EXIT_THREAD ExitThread;
3807 DBGKM_EXIT_PROCESS ExitProcess;
3808 DBGKM_LOAD_DLL LoadDll;
3809 DBGKM_UNLOAD_DLL UnloadDll;
3810 } StateInfo;
3811 } DBGUI_WAIT_STATE_CHANGE, *PDBGUI_WAIT_STATE_CHANGE;
3812
3813 struct _DEBUG_EVENT;
3814
3815 #define DEBUG_READ_EVENT 0x0001
3816 #define DEBUG_PROCESS_ASSIGN 0x0002
3817 #define DEBUG_SET_INFORMATION 0x0004
3818 #define DEBUG_QUERY_INFORMATION 0x0008
3819 #define DEBUG_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x0f)
3820
3821 #define DEBUG_KILL_ON_CLOSE 0x1
3822
3823 typedef enum _DEBUGOBJECTINFOCLASS
3824 {
3825 DebugObjectKillProcessOnExitInformation = 1,
3826 MaxDebugObjectInfoClass
3827 } DEBUGOBJECTINFOCLASS, *PDEBUGOBJECTINFOCLASS;
3828
3829
3830 typedef struct _WOW64_CPURESERVED
3831 {
3832 USHORT Flags;
3833 USHORT Machine;
3834 /* CONTEXT context */
3835 /* CONTEXT_EX *context_ex */
3836 } WOW64_CPURESERVED, *PWOW64_CPURESERVED;
3837
3838 #define WOW64_CPURESERVED_FLAG_RESET_STATE 1
3839
3840 typedef struct _WOW64_CPU_AREA_INFO
3841 {
3842 void *Context;
3843 void *ContextEx;
3844 void *ContextFlagsLocation;
3845 WOW64_CPURESERVED *CpuReserved;
3846 ULONG ContextFlag;
3847 USHORT Machine;
3848 } WOW64_CPU_AREA_INFO, *PWOW64_CPU_AREA_INFO;
3849
3850 #ifdef __WINESRC__
3851 /* undocumented layout of LdrSystemDllInitBlock */
3852 /* this varies across Windows version; we are using the win10-2004 layout */
3853 typedef struct
3854 {
3855 ULONG version;
3856 ULONG unknown1[3];
3857 ULONG64 unknown2;
3858 ULONG64 pLdrInitializeThunk;
3859 ULONG64 pKiUserExceptionDispatcher;
3860 ULONG64 pKiUserApcDispatcher;
3861 ULONG64 pKiUserCallbackDispatcher;
3862 ULONG64 pRtlUserThreadStart;
3863 ULONG64 pRtlpQueryProcessDebugInformationRemote;
3864 ULONG64 ntdll_handle;
3865 ULONG64 pLdrSystemDllInitBlock;
3866 ULONG64 pRtlpFreezeTimeBias;
3867 } SYSTEM_DLL_INIT_BLOCK;
3868 #endif
3869
3870 typedef struct
3871 {
3872 ULONG_PTR *ServiceTable;
3873 ULONG_PTR *CounterTable;
3874 ULONG_PTR ServiceLimit;
3875 BYTE *ArgumentTable;
3876 } SYSTEM_SERVICE_TABLE;
3877
3878 /* ApiSet structures (format for version 6) */
3879
3880 typedef struct _API_SET_NAMESPACE
3881 {
3882 ULONG Version;
3883 ULONG Size;
3884 ULONG Flags;
3885 ULONG Count;
3886 ULONG EntryOffset;
3887 ULONG HashOffset;
3888 ULONG HashFactor;
3889 } API_SET_NAMESPACE;
3890
3891 typedef struct _API_SET_HASH_ENTRY
3892 {
3893 ULONG Hash;
3894 ULONG Index;
3895 } API_SET_HASH_ENTRY;
3896
3897 typedef struct _API_SET_NAMESPACE_ENTRY
3898 {
3899 ULONG Flags;
3900 ULONG NameOffset;
3901 ULONG NameLength;
3902 ULONG HashedLength;
3903 ULONG ValueOffset;
3904 ULONG ValueCount;
3905 } API_SET_NAMESPACE_ENTRY;
3906
3907 typedef struct _API_SET_VALUE_ENTRY
3908 {
3909 ULONG Flags;
3910 ULONG NameOffset;
3911 ULONG NameLength;
3912 ULONG ValueOffset;
3913 ULONG ValueLength;
3914 } API_SET_VALUE_ENTRY;
3915
3916 /***********************************************************************
3917 * Function declarations
3918 */
3919
3920 NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresence(const UNICODE_STRING*,BOOLEAN*);
3921 NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresenceEx(const UNICODE_STRING*,BOOLEAN*,BOOLEAN*);
3922 NTSYSAPI void WINAPI DbgBreakPoint(void);
3923 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
3924 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
3925 NTSYSAPI NTSTATUS WINAPI DbgUiConnectToDbg(void);
3926 NTSYSAPI NTSTATUS WINAPI DbgUiContinue(CLIENT_ID*,NTSTATUS);
3927 NTSYSAPI NTSTATUS WINAPI DbgUiConvertStateChangeStructure(DBGUI_WAIT_STATE_CHANGE*,struct _DEBUG_EVENT*);
3928 NTSYSAPI NTSTATUS WINAPI DbgUiDebugActiveProcess(HANDLE);
3929 NTSYSAPI HANDLE WINAPI DbgUiGetThreadDebugObject(void);
3930 NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE);
3931 NTSYSAPI void WINAPI DbgUiRemoteBreakin(void*);
3932 NTSYSAPI void WINAPI DbgUiSetThreadDebugObject(HANDLE);
3933 NTSYSAPI NTSTATUS WINAPI DbgUiStopDebugging(HANDLE);
3934 NTSYSAPI NTSTATUS WINAPI DbgUiWaitStateChange(DBGUI_WAIT_STATE_CHANGE*,LARGE_INTEGER*);
3935 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
3936 NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
3937 NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING*,void**);
3938 NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG,HMODULE);
3939 NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
3940 NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY*);
3941 NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
3942 NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
3943 NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING*);
3944 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
3945 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandleEx(ULONG, LPCWSTR, ULONG *, const UNICODE_STRING*, HMODULE*);
3946 NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR,ULONG,PWSTR*,PWSTR*);
3947 NTSYSAPI NTSTATUS WINAPI LdrGetDllFullName(HMODULE, UNICODE_STRING*);
3948 NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
3949 NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
3950 NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
3951 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
3952 NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
3953 NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(RTL_PROCESS_MODULES*, ULONG, ULONG*);
3954 NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG,PLDR_DLL_NOTIFICATION_FUNCTION,void*,void**);
3955 NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void*);
3956 NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG);
3957 NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING*);
3958 NTSYSAPI void WINAPI LdrShutdownProcess(void);
3959 NTSYSAPI void WINAPI LdrShutdownThread(void);
3960 NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE);
3961 NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
3962 NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void*);
3963 NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
3964 NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
3965 NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
3966 NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
3967 NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
3968 NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
3969 NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE,PULONG);
3970 NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle);
3971 NTSYSAPI NTSTATUS WINAPI NtAlertThreadByThreadId(HANDLE);
3972 NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
3973 NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
3974 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG_PTR,SIZE_T*,ULONG,ULONG);
3975 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemoryEx(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG,MEM_EXTENDED_PARAMETER*,ULONG);
3976 NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
3977 NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
3978 NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
3979 NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
3980 NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
3981 NTSYSAPI NTSTATUS WINAPI NtCancelSynchronousIoFile(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
3982 NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
3983 NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE);
3984 NTSYSAPI NTSTATUS WINAPI NtClose(HANDLE);
3985 NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
3986 NTSYSAPI NTSTATUS WINAPI NtCompareObjects(HANDLE,HANDLE);
3987 NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE);
3988 NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3989 NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT,BOOLEAN);
3990 NTSYSAPI NTSTATUS WINAPI NtCreateDebugObject(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,ULONG);
3991 NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3992 NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
3993 NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3994 NTSYSAPI NTSTATUS WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
3995 NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
3996 NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3997 NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3998 NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
3999 NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
4000 NTSYSAPI NTSTATUS WINAPI NtCreateLowBoxToken(HANDLE*,HANDLE,ACCESS_MASK,OBJECT_ATTRIBUTES*,SID*,ULONG,SID_AND_ATTRIBUTES*,ULONG,HANDLE*);
4001 NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
4002 NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
4003 NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
4004 NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
4005 NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
4006 NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
4007 NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
4008 NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
4009 NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
4010 NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
4011 NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
4012 NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,HANDLE,PRTL_THREAD_START_ROUTINE,void*,ULONG,ULONG_PTR,SIZE_T,SIZE_T,PS_ATTRIBUTE_LIST*);
4013 NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
4014 NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
4015 NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE*,HANDLE*,ACCESS_MASK,ACCESS_MASK,OBJECT_ATTRIBUTES*,OBJECT_ATTRIBUTES*,ULONG,ULONG,RTL_USER_PROCESS_PARAMETERS*,PS_CREATE_INFO*,PS_ATTRIBUTE_LIST*);
4016 NTSYSAPI NTSTATUS WINAPI NtDebugActiveProcess(HANDLE,HANDLE);
4017 NTSYSAPI NTSTATUS WINAPI NtDebugContinue(HANDLE,CLIENT_ID*,NTSTATUS);
4018 NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
4019 NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM);
4020 NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
4021 NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE);
4022 NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
4023 NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
4024 NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING);
4025 NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
4026 NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
4027 NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
4028 NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4029 NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
4030 NTSYSAPI NTSTATUS WINAPI NtFilterToken(HANDLE,ULONG,TOKEN_GROUPS*,TOKEN_PRIVILEGES*,TOKEN_GROUPS*,HANDLE*);
4031 NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
4032 NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
4033 NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
4034 NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE);
4035 NTSYSAPI void WINAPI NtFlushProcessWriteBuffers(void);
4036 NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
4037 NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID);
4038 NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4039 NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
4040 NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*);
4041 NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void);
4042 NTSYSAPI NTSTATUS WINAPI NtGetNextThread(HANDLE,HANDLE,ACCESS_MASK,ULONG,ULONG,HANDLE*);
4043 NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*);
4044 NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
4045 NTSYSAPI ULONG WINAPI NtGetTickCount(VOID);
4046 NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
4047 NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE);
4048 NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
4049 NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
4050 NTSYSAPI NTSTATUS WINAPI NtInitializeNlsFiles(void**,LCID*,LARGE_INTEGER*);
4051 NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN);
4052 NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
4053 NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE,HANDLE);
4054 NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
4055 NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *);
4056 NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
4057 NTSYSAPI NTSTATUS WINAPI NtLoadKey2(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *,ULONG);
4058 NTSYSAPI NTSTATUS WINAPI NtLoadKeyEx(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *,ULONG,HANDLE,HANDLE,ACCESS_MASK,HANDLE *,IO_STATUS_BLOCK *);
4059 NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
4060 NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4061 NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE);
4062 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG_PTR,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
4063 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSectionEx(HANDLE,HANDLE,PVOID*,const LARGE_INTEGER*,SIZE_T*,ULONG,ULONG,MEM_EXTENDED_PARAMETER*,ULONG);
4064 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
4065 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
4066 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
4067 NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4068 NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
4069 NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4070 NTSYSAPI NTSTATUS WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
4071 NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4072 NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4073 NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
4074 NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
4075 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
4076 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
4077 NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4078 NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4079 NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
4080 NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
4081 NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
4082 NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
4083 NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4084 NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4085 NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4086 NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
4087 NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
4088 NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
4089 NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
4090 NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
4091 NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
4092 NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
4093 NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
4094 NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
4095 NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE,LONG*);
4096 NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
4097 NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
4098 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
4099 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID*);
4100 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
4101 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
4102 NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
4103 NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4104 NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
4105 NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
4106 NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
4107 NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
4108 NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4109 NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
4110 NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
4111 NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4112 NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID*);
4113 NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
4114 NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4115 NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
4116 NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
4117 NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4118 NTSYSAPI NTSTATUS WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
4119 NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
4120 NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
4121 NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
4122 NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4123 NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4124 NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
4125 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
4126 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValueEx(PUNICODE_STRING,GUID*,void*,ULONG*,ULONG*);
4127 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4128 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
4129 NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime(PLARGE_INTEGER);
4130 NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4131 NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
4132 NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
4133 NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
4134 NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4135 NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4136 NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
4137 NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
4138 NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
4139 NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4140 NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4141 NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
4142 NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE);
4143 NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4144 NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE,PLONG);
4145 NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
4146 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
4147 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE,FILE_IO_COMPLETION_INFORMATION*,ULONG,ULONG*,LARGE_INTEGER*,BOOLEAN);
4148 NTSYSAPI NTSTATUS WINAPI NtRemoveProcessDebug(HANDLE,HANDLE);
4149 NTSYSAPI NTSTATUS WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
4150 NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
4151 NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
4152 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
4153 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
4154 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
4155 NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
4156 NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
4157 NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE,LONG*);
4158 NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
4159 NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
4160 NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE);
4161 NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE,PULONG);
4162 NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE,HANDLE);
4163 NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
4164 NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
4165 NTSYSAPI NTSTATUS WINAPI NtSetDebugFilterState(ULONG,ULONG,BOOLEAN);
4166 NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE);
4167 NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
4168 NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID);
4169 NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
4170 NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE,LONG*);
4171 NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE);
4172 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE);
4173 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID);
4174 NTSYSAPI NTSTATUS WINAPI NtSetInformationDebugObject(HANDLE,DEBUGOBJECTINFOCLASS,PVOID,ULONG,ULONG*);
4175 NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
4176 NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
4177 NTSYSAPI NTSTATUS WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
4178 NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
4179 NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG);
4180 NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
4181 NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
4182 NTSYSAPI NTSTATUS WINAPI NtSetInformationVirtualMemory(HANDLE,VIRTUAL_MEMORY_INFORMATION_CLASS,ULONG_PTR,PMEMORY_RANGE_ENTRY,PVOID,ULONG);
4183 NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
4184 NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
4185 NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG,LDT_ENTRY,ULONG,LDT_ENTRY);
4186 NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE);
4187 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE);
4188 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID);
4189 NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
4190 NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
4191 NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
4192 NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
4193 NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
4194 NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE,EXECUTION_STATE*);
4195 NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
4196 NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
4197 NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
4198 NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4199 NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
4200 NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
4201 NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE);
4202 NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE);
4203 NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE);
4204 NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE,PULONG);
4205 NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
4206 NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
4207 NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE,LONG);
4208 NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE,LONG);
4209 NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID);
4210 NTSYSAPI NTSTATUS WINAPI NtTraceControl(ULONG,void*,ULONG,void*,ULONG,ULONG*);
4211 NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *);
4212 NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
4213 NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
4214 NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
4215 NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4216 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
4217 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSectionEx(HANDLE,PVOID,ULONG);
4218 NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG,PVOID);
4219 NTSYSAPI NTSTATUS WINAPI NtWaitForAlertByThreadId(const void*,const LARGE_INTEGER*);
4220 NTSYSAPI NTSTATUS WINAPI NtWaitForDebugEvent(HANDLE,BOOLEAN,LARGE_INTEGER*,DBGUI_WAIT_STATE_CHANGE*);
4221 NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4222 NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
4223 NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
4224 NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE);
4225 NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE);
4226 NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
4227 NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4228 NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4229 NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
4230 NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void);
4231
4232 NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PULONG);
4233 NTSYSAPI void WINAPI RtlAcquirePebLock(void);
4234 NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
4235 NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
4236 NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
4237 NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
4238 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
4239 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG,TEB*,HANDLE,ULONG_PTR*);
4240 NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
4241 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
4242 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4243 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4244 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
4245 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4246 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4247 NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4248 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
4249 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
4250 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
4251 NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
4252 NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE);
4253 NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
4254 NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
4255 NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
4256 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
4257 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
4258 NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3) __WINE_DEALLOC(RtlFreeHeap,3) __WINE_MALLOC;
4259 NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
4260 NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
4261 NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
4262 NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
4263 NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *,const STRING *);
4264 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
4265 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
4266 NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4267 NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4268 NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
4269 NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
4270 NTSYSAPI NTSTATUS WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
4271 NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
4272 NTSYSAPI void WINAPI RtlClearAllBits(PRTL_BITMAP);
4273 NTSYSAPI void WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
4274 NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE*,const void*);
4275 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
4276 NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
4277 NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE,ULONG);
4278 NTSYSAPI LONG WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
4279 NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4280 NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
4281 NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4282 NTSYSAPI DWORD WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
4283 NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
4284 NTSYSAPI NTSTATUS WINAPI RtlConvertToAutoInheritSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,GUID*,BOOL,PGENERIC_MAPPING);
4285 NTSYSAPI NTSTATUS WINAPI RtlCopyContext(CONTEXT*,DWORD,CONTEXT*);
4286 NTSYSAPI NTSTATUS WINAPI RtlCopyExtendedContext(CONTEXT_EX*,ULONG,CONTEXT_EX*);
4287 NTSYSAPI void WINAPI RtlCopyLuid(PLUID,const LUID*);
4288 NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
4289 NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD,PSID,PSID);
4290 NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
4291 NTSYSAPI void WINAPI RtlCopyString(STRING*,const STRING*);
4292 NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
4293 NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
4294 NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
4295 NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
4296 NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
4297 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
4298 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,ULONG);
4299 NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
4300 NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE);
4301 NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(HANDLE,HANDLE*,RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
4302 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
4303 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
4304 NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
4305 NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE,SECURITY_DESCRIPTOR*,BOOLEAN,ULONG,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
4306 NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T,SIZE_T,ULONG,SIZE_T,SIZE_T,INITIAL_TEB*);
4307 NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO*,WCHAR*,DWORD,DWORD*,const char*,DWORD);
4308 NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
4309 NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID);
4310 NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
4311 NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4312 NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL,DWORD);
4313 NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4314 NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
4315 NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
4316 NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK);
4317 NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
4318 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
4319 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
4320 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4321 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE);
4322 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
4323 NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
4324 NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR);
4325 NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
4326 NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE);
4327 NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
4328 NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
4329 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
4330 NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void);
4331 NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR);
4332 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4333 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4334 NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
4335 NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR);
4336 NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4337 NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK);
4338 NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
4339 NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
4340 NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID);
4341 NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
4342 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
4343 NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
4344 NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
4345 NTSYSAPI BOOLEAN WINAPI RtlEqualLuid(const LUID*,const LUID*);
4346 NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID,PSID);
4347 NTSYSAPI BOOL WINAPI RtlEqualSid(PSID,PSID);
4348 NTSYSAPI BOOLEAN WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
4349 NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4350 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
4351 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
4352 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR*,WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4353 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
4354 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
4355 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
4356 NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
4357 NTSYSAPI ULONG WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
4358 NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
4359 NTSYSAPI ULONG WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4360 NTSYSAPI void * WINAPI RtlFindExportedRoutineByName(HMODULE,const char*);
4361 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4362 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4363 NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG);
4364 NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
4365 NTSYSAPI ULONG WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
4366 NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
4367 NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG);
4368 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4369 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4370 NTSYSAPI ULONG WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
4371 NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
4372 NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4373 NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
4374 NTSYSAPI NTSTATUS WINAPI RtlFlsAlloc(PFLS_CALLBACK_FUNCTION,ULONG *);
4375 NTSYSAPI NTSTATUS WINAPI RtlFlsFree(ULONG);
4376 NTSYSAPI NTSTATUS WINAPI RtlFlsGetValue(ULONG,void **);
4377 NTSYSAPI NTSTATUS WINAPI RtlFlsSetValue(ULONG,void *);
4378 NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
4379 NTSYSAPI NTSTATUS WINAPI RtlFormatMessage(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*);
4380 NTSYSAPI NTSTATUS WINAPI RtlFormatMessageEx(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*,ULONG);
4381 NTSYSAPI void WINAPI RtlFreeAnsiString(PANSI_STRING);
4382 NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
4383 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
4384 NTSYSAPI void WINAPI RtlFreeOemString(POEM_STRING);
4385 NTSYSAPI DWORD WINAPI RtlFreeSid(PSID);
4386 NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void);
4387 NTSYSAPI void WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
4388 NTSYSAPI void WINAPI RtlFreeUserStack(void*);
4389 NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
4390 NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE*);
4391 NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
4392 NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
4393 NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
4394 NTSYSAPI PEB * WINAPI RtlGetCurrentPeb(void);
4395 NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4396 NTSYSAPI ULONG64 WINAPI RtlGetEnabledExtendedFeatures(ULONG64);
4397 NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR,PWSTR*);
4398 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength(ULONG,ULONG*);
4399 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength2(ULONG,ULONG*,ULONG64);
4400 NTSYSAPI ULONG64 WINAPI RtlGetExtendedFeaturesMask(CONTEXT_EX*);
4401 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
4402 NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
4403 NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4404 NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void);
4405 NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void);
4406 NTSYSAPI NTSTATUS WINAPI RtlGetLocaleFileMappingAddress(void**,LCID*,LARGE_INTEGER*);
4407 NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void);
4408 NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void);
4409 NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD);
4410 NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4411 NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
4412 NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4413 NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4414 NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR*);
4415 NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4416 NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void);
4417 NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void);
4418 NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4419 NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4420 NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
4421 NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
4422 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
4423 NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4424 NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4425 NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4426 NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
4427 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
4428 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
4429 NTSYSAPI PVOID WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
4430 NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
4431 NTSYSAPI void WINAPI RtlInitString(PSTRING,PCSZ);
4432 NTSYSAPI void WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
4433 NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
4434 NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT*,CPTABLEINFO*);
4435 NTSYSAPI void WINAPI RtlInitNlsTables(USHORT*,USHORT*,USHORT*,NLSTABLEINFO*);
4436 NTSYSAPI void WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
4437 NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
4438 NTSYSAPI void WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
4439 NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
4440 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
4441 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
4442 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
4443 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext(void*,ULONG,CONTEXT_EX**);
4444 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext2(void*,ULONG,CONTEXT_EX**,ULONG64);
4445 NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
4446 NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK);
4447 NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
4448 NTSYSAPI BOOL WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
4449 NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
4450 NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
4451 NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
4452 NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE);
4453 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
4454 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
4455 NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR);
4456 NTSYSAPI BOOLEAN WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
4457 NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG,const WCHAR*,INT,BOOLEAN*);
4458 NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT);
4459 NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
4460 NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
4461 NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
4462 NTSYSAPI BOOLEAN WINAPI RtlIsValidLocaleName(const WCHAR*,ULONG);
4463 NTSYSAPI NTSTATUS WINAPI RtlLcidToLocaleName(LCID,UNICODE_STRING*,ULONG,BOOLEAN);
4464 NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
4465 NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD);
4466 NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
4467 NTSYSAPI DWORD WINAPI RtlLengthSid(PSID);
4468 NTSYSAPI NTSTATUS WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4469 NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR*,LCID*,ULONG);
4470 NTSYSAPI void * WINAPI RtlLocateExtendedFeature(CONTEXT_EX*,ULONG,ULONG*);
4471 NTSYSAPI void * WINAPI RtlLocateExtendedFeature2(CONTEXT_EX*,ULONG,XSTATE_CONFIGURATION*,ULONG*);
4472 NTSYSAPI void * WINAPI RtlLocateLegacyContext(CONTEXT_EX*,ULONG*);
4473 NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE);
4474 NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4475 NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
4476 NTSYSAPI void WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
4477 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4478 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,ULONG);
4479 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
4480 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectEx(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,GUID*,BOOLEAN,ULONG,HANDLE,PGENERIC_MAPPING);
4481 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectWithMultipleInheritance(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,
4482 GUID **,ULONG,BOOLEAN,ULONG,HANDLE,PGENERIC_MAPPING);
4483 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4484 NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG,const WCHAR*,INT,WCHAR*,INT*);
4485 NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS);
4486 NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
4487 NTSYSAPI ULONG WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
4488 NTSYSAPI ULONG WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
4489 NTSYSAPI ULONG WINAPI RtlOemStringToUnicodeSize(const STRING*);
4490 NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
4491 NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4492 NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
4493 NTSYSAPI PVOID WINAPI RtlPcToFileHeader(PVOID,PVOID*);
4494 NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4495 NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
4496 NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
4497 NTSYSAPI BOOLEAN WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4498 NTSYSAPI void WINAPI RtlProcessFlsData(void*,ULONG);
4499 NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
4500 NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
4501 NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
4502 NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
4503 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR*,const WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4504 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
4505 NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
4506 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
4507 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
4508 NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER*);
4509 NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER*);
4510 NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
4511 NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
4512 NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
4513 NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
4514 NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
4515 NTSYSAPI void WINAPI RtlRaiseException(PEXCEPTION_RECORD);
4516 NTSYSAPI void WINAPI RtlRaiseStatus(NTSTATUS);
4517 NTSYSAPI ULONG WINAPI RtlRandom(PULONG);
4518 NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T) __WINE_ALLOC_SIZE(4) __WINE_DEALLOC(RtlFreeHeap,3);
4519 NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
4520 NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE);
4521 NTSYSAPI void WINAPI RtlReleasePath(PWSTR);
4522 NTSYSAPI void WINAPI RtlReleasePebLock(void);
4523 NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK);
4524 NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
4525 NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
4526 NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
4527 NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO*);
4528 NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD);
4529 NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
4530 NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
4531 NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
4532 NTSYSAPI void WINAPI RtlSetAllBits(PRTL_BITMAP);
4533 NTSYSAPI void WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
4534 NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
4535 NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
4536 NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
4537 NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
4538 NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4539 NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
4540 NTSYSAPI void WINAPI RtlSetExtendedFeaturesMask(CONTEXT_EX*,ULONG64);
4541 NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
4542 NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4543 NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4544 NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
4545 NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD);
4546 NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
4547 NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4548 NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4549 NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG);
4550 NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
4551 NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4552 NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
4553 NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER);
4554 NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
4555 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
4556 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
4557 NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
4558 NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID,DWORD);
4559 NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID);
4560 NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4561 NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
4562 NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
4563 NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
4564 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
4565 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
4566 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
4567 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
4568 NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
4569 NTSYSAPI NTSTATUS WINAPI RtlUTF8ToUnicodeN(WCHAR*,DWORD,DWORD*,const char*,DWORD);
4570 NTSYSAPI ULONGLONG __cdecl RtlUlonglongByteSwap(ULONGLONG);
4571 NTSYSAPI DWORD WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
4572 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
4573 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
4574 NTSYSAPI DWORD WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
4575 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
4576 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4577 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4578 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
4579 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4580 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4581 NTSYSAPI ULONG WINAPI RtlUniform(PULONG);
4582 NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE);
4583 NTSYSAPI void WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
4584 NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR);
4585 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
4586 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
4587 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4588 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4589 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4590 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4591 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4592 NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
4593 NTSYSAPI CHAR WINAPI RtlUpperChar(CHAR);
4594 NTSYSAPI void WINAPI RtlUpperString(STRING *,const STRING *);
4595 NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE,void*);
4596 NTSYSAPI NTSTATUS WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
4597 NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
4598 NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL);
4599 NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID);
4600 NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
4601 NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
4602 NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *,const void *,SIZE_T,const LARGE_INTEGER *);
4603 NTSYSAPI void WINAPI RtlWakeAddressAll(const void *);
4604 NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *);
4605 NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
4606 NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
4607 NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE,PVOID);
4608 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
4609 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
4610 NTSYSAPI USHORT WINAPI RtlWow64GetCurrentMachine(void);
4611 NTSYSAPI NTSTATUS WINAPI RtlWow64GetProcessMachines(HANDLE,USHORT*,USHORT*);
4612 NTSYSAPI NTSTATUS WINAPI RtlWow64IsWowGuestMachineSupported(USHORT,BOOLEAN*);
4613 NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
4614 NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE);
4615 NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
4616 NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
4617 NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
4618 NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
4619 NTSYSAPI NTSTATUS WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
4620 NTSYSAPI NTSTATUS WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
4621
4622 #ifndef __WINE_USE_MSVCRT
4623 NTSYSAPI int __cdecl _strnicmp(LPCSTR,LPCSTR,size_t);
4624 #endif
4625
4626 /* 32-bit or 64-bit only functions */
4627
4628 #ifdef _WIN64
4629 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCpuAreaInfo(WOW64_CPURESERVED*,ULONG,WOW64_CPU_AREA_INFO*);
4630 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCurrentCpuArea(USHORT*,void**,void**);
4631 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadContext(HANDLE,WOW64_CONTEXT*);
4632 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadSelectorEntry(HANDLE,THREAD_DESCRIPTOR_INFORMATION*,ULONG,ULONG*);
4633 NTSYSAPI NTSTATUS WINAPI RtlWow64SetThreadContext(HANDLE,const WOW64_CONTEXT*);
4634 #else
4635 NTSYSAPI NTSTATUS WINAPI NtWow64AllocateVirtualMemory64(HANDLE,ULONG64*,ULONG64,ULONG64*,ULONG,ULONG);
4636 NTSYSAPI NTSTATUS WINAPI NtWow64GetNativeSystemInformation(SYSTEM_INFORMATION_CLASS,void*,ULONG,ULONG*);
4637 NTSYSAPI NTSTATUS WINAPI NtWow64ReadVirtualMemory64(HANDLE,ULONG64,void*,ULONG64,ULONG64*);
4638 NTSYSAPI NTSTATUS WINAPI NtWow64WriteVirtualMemory64(HANDLE,ULONG64,const void*,ULONG64,ULONG64*);
4639 NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG);
4640 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
4641 NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT,INT);
4642 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
4643 NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
4644 NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
4645 NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
4646 NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
4647 NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG*,LONGLONG,LONGLONG);
4648 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
4649 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
4650 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
4651 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG);
4652 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
4653 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
4654 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
4655 NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
4656 #endif
4657
4658 /* Threadpool functions */
4659
4660 NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
4661 NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **,HANDLE,PTP_IO_CALLBACK,void *,TP_CALLBACK_ENVIRON *);
4662 NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **,PVOID);
4663 NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4664 NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4665 NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4666 NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
4667 NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
4668 NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
4669 NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
4670 NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
4671 NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
4672 NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *);
4673 NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
4674 NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *);
4675 NTSYSAPI void WINAPI TpPostWork(TP_WORK *);
4676 NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
4677 NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
4678 NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
4679 NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *);
4680 NTSYSAPI void WINAPI TpReleasePool(TP_POOL *);
4681 NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *);
4682 NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *);
4683 NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *);
4684 NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
4685 NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
4686 NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
4687 NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
4688 NTSYSAPI void WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
4689 NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
4690 NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *);
4691 NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *,BOOL);
4692 NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
4693 NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *,BOOL);
4694 NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *,BOOL);
4695
4696 /* Wine internal functions */
4697
4698 NTSYSAPI NTSTATUS WINAPI wine_nt_to_unix_file_name( const OBJECT_ATTRIBUTES *attr, char *nameA, ULONG *size,
4699 UINT disposition );
4700 NTSYSAPI NTSTATUS WINAPI wine_unix_to_nt_file_name( const char *name, WCHAR *buffer, ULONG *size );
4701
4702
4703 /***********************************************************************
4704 * Inline functions
4705 */
4706
4707 #define InitializeObjectAttributes(p,n,a,r,s) \
4708 do { \
4709 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
4710 (p)->RootDirectory = r; \
4711 (p)->Attributes = a; \
4712 (p)->ObjectName = n; \
4713 (p)->SecurityDescriptor = s; \
4714 (p)->SecurityQualityOfService = NULL; \
4715 } while (0)
4716
4717 #define NtCurrentProcess() ((HANDLE)~(ULONG_PTR)0)
4718 #define NtCurrentThread() ((HANDLE)~(ULONG_PTR)1)
4719
4720 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
4721 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
4722 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
4723 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
4724 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
4725 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
4726 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
4727
4728 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
4729 {
4730 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
4731 lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
4732 return TRUE;
4733 return FALSE;
4734 }
4735
4736 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
4737 static inline USHORT RtlUshortByteSwap(USHORT s)
4738 {
4739 return (s >> 8) | (s << 8);
4740 }
4741 static inline ULONG RtlUlongByteSwap(ULONG i)
4742 {
4743 #if defined(__i386__) && defined(__GNUC__)
4744 ULONG ret;
4745 __asm__("bswap %0" : "=r" (ret) : "0" (i) );
4746 return ret;
4747 #else
4748 return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
4749 #endif
4750 }
4751
4752 /* list manipulation macros */
4753 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
4754 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
4755 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
4756 #define IsListEmpty(le) ((le)->Flink == (le))
4757 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
4758 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
4759 {
4760 PLIST_ENTRY f, b, e;
4761
4762 e = le->Flink;
4763 f = le->Flink->Flink;
4764 b = le->Flink->Blink;
4765 f->Blink = b;
4766 b->Flink = f;
4767
4768 if (e != le) e->Flink = e->Blink = NULL;
4769 return e;
4770 }
4771 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
4772 {
4773 PLIST_ENTRY f, b, e;
4774
4775 e = le->Blink;
4776 f = le->Blink->Flink;
4777 b = le->Blink->Blink;
4778 f->Blink = b;
4779 b->Flink = f;
4780
4781 if (e != le) e->Flink = e->Blink = NULL;
4782 return e;
4783 }
4784
4785
4786 #ifdef __WINESRC__
4787
4788 /* Wine internal functions */
4789
4790 extern NTSTATUS WINAPI __wine_unix_spawnvp( char * const argv[], int wait );
4791
4792 /* The thread information for 16-bit threads */
4793 /* NtCurrentTeb()->SubSystemTib points to this */
4794 typedef struct
4795 {
4796 void *unknown; /* 00 unknown */
4797 UNICODE_STRING *exe_name; /* 04 exe module name */
4798
4799 /* the following fields do not exist under Windows */
4800 UNICODE_STRING exe_str; /* exe name string pointed to by exe_name */
4801 CURDIR curdir; /* current directory */
4802 WCHAR curdir_buffer[MAX_PATH];
4803 } WIN16_SUBSYSTEM_TIB;
4804
4805 /* Undocumented: layout of the locale data in the locale.nls file */
4806
4807 typedef struct
4808 {
4809 UINT sname; /* 000 LOCALE_SNAME */
4810 UINT sopentypelanguagetag; /* 004 LOCALE_SOPENTYPELANGUAGETAG */
4811 USHORT ilanguage; /* 008 LOCALE_ILANGUAGE */
4812 USHORT unique_lcid; /* 00a unique id if lcid == 0x1000 */
4813 USHORT idigits; /* 00c LOCALE_IDIGITS */
4814 USHORT inegnumber; /* 00e LOCALE_INEGNUMBER */
4815 USHORT icurrdigits; /* 010 LOCALE_ICURRDIGITS*/
4816 USHORT icurrency; /* 012 LOCALE_ICURRENCY */
4817 USHORT inegcurr; /* 014 LOCALE_INEGCURR */
4818 USHORT ilzero; /* 016 LOCALE_ILZERO */
4819 USHORT inotneutral; /* 018 LOCALE_INEUTRAL (inverted) */
4820 USHORT ifirstdayofweek; /* 01a LOCALE_IFIRSTDAYOFWEEK (monday=0) */
4821 USHORT ifirstweekofyear; /* 01c LOCALE_IFIRSTWEEKOFYEAR */
4822 USHORT icountry; /* 01e LOCALE_ICOUNTRY */
4823 USHORT imeasure; /* 020 LOCALE_IMEASURE */
4824 USHORT idigitsubstitution; /* 022 LOCALE_IDIGITSUBSTITUTION */
4825 UINT sgrouping; /* 024 LOCALE_SGROUPING (as binary string) */
4826 UINT smongrouping; /* 028 LOCALE_SMONGROUPING (as binary string) */
4827 UINT slist; /* 02c LOCALE_SLIST */
4828 UINT sdecimal; /* 030 LOCALE_SDECIMAL */
4829 UINT sthousand; /* 034 LOCALE_STHOUSAND */
4830 UINT scurrency; /* 038 LOCALE_SCURRENCY */
4831 UINT smondecimalsep; /* 03c LOCALE_SMONDECIMALSEP */
4832 UINT smonthousandsep; /* 040 LOCALE_SMONTHOUSANDSEP */
4833 UINT spositivesign; /* 044 LOCALE_SPOSITIVESIGN */
4834 UINT snegativesign; /* 048 LOCALE_SNEGATIVESIGN */
4835 UINT s1159; /* 04c LOCALE_S1159 */
4836 UINT s2359; /* 050 LOCALE_S2359 */
4837 UINT snativedigits; /* 054 LOCALE_SNATIVEDIGITS (array of single digits) */
4838 UINT stimeformat; /* 058 LOCALE_STIMEFORMAT (array of formats) */
4839 UINT sshortdate; /* 05c LOCALE_SSHORTDATE (array of formats) */
4840 UINT slongdate; /* 060 LOCALE_SLONGDATE (array of formats) */
4841 UINT syearmonth; /* 064 LOCALE_SYEARMONTH (array of formats) */
4842 UINT sduration; /* 068 LOCALE_SDURATION (array of formats) */
4843 USHORT idefaultlanguage; /* 06c LOCALE_IDEFAULTLANGUAGE */
4844 USHORT idefaultansicodepage; /* 06e LOCALE_IDEFAULTANSICODEPAGE */
4845 USHORT idefaultcodepage; /* 070 LOCALE_IDEFAULTCODEPAGE */
4846 USHORT idefaultmaccodepage; /* 072 LOCALE_IDEFAULTMACCODEPAGE */
4847 USHORT idefaultebcdiccodepage; /* 074 LOCALE_IDEFAULTEBCDICCODEPAGE */
4848 USHORT old_geoid; /* 076 LOCALE_IGEOID (older version?) */
4849 USHORT ipapersize; /* 078 LOCALE_IPAPERSIZE */
4850 BYTE islamic_cal[2]; /* 07a calendar id for islamic calendars (?) */
4851 UINT scalendartype; /* 07c string, first char is LOCALE_ICALENDARTYPE, next chars are LOCALE_IOPTIONALCALENDAR */
4852 UINT sabbrevlangname; /* 080 LOCALE_SABBREVLANGNAME */
4853 UINT siso639langname; /* 084 LOCALE_SISO639LANGNAME */
4854 UINT senglanguage; /* 088 LOCALE_SENGLANGUAGE */
4855 UINT snativelangname; /* 08c LOCALE_SNATIVELANGNAME */
4856 UINT sengcountry; /* 090 LOCALE_SENGCOUNTRY */
4857 UINT snativectryname; /* 094 LOCALE_SNATIVECTRYNAME */
4858 UINT sabbrevctryname; /* 098 LOCALE_SABBREVCTRYNAME */
4859 UINT siso3166ctryname; /* 09c LOCALE_SISO3166CTRYNAME */
4860 UINT sintlsymbol; /* 0a0 LOCALE_SINTLSYMBOL */
4861 UINT sengcurrname; /* 0a4 LOCALE_SENGCURRNAME */
4862 UINT snativecurrname; /* 0a8 LOCALE_SNATIVECURRNAME */
4863 UINT fontsignature; /* 0ac LOCALE_FONTSIGNATURE (binary string) */
4864 UINT siso639langname2; /* 0b0 LOCALE_SISO639LANGNAME2 */
4865 UINT siso3166ctryname2; /* 0b4 LOCALE_SISO3166CTRYNAME2 */
4866 UINT sparent; /* 0b8 LOCALE_SPARENT */
4867 UINT sdayname; /* 0bc LOCALE_SDAYNAME1 (array of days 1..7) */
4868 UINT sabbrevdayname; /* 0c0 LOCALE_SABBREVDAYNAME1 (array of days 1..7) */
4869 UINT smonthname; /* 0c4 LOCALE_SMONTHNAME1 (array of months 1..13) */
4870 UINT sabbrevmonthname; /* 0c8 LOCALE_SABBREVMONTHNAME1 (array of months 1..13) */
4871 UINT sgenitivemonth; /* 0cc equivalent of LOCALE_SMONTHNAME1 for genitive months */
4872 UINT sabbrevgenitivemonth; /* 0d0 equivalent of LOCALE_SABBREVMONTHNAME1 for genitive months */
4873 UINT calnames; /* 0d4 array of calendar names */
4874 UINT customsorts; /* 0d8 array of custom sort names */
4875 USHORT inegativepercent; /* 0dc LOCALE_INEGATIVEPERCENT */
4876 USHORT ipositivepercent; /* 0de LOCALE_IPOSITIVEPERCENT */
4877 USHORT unknown1; /* 0e0 */
4878 USHORT ireadinglayout; /* 0e2 LOCALE_IREADINGLAYOUT */
4879 USHORT unknown2[2]; /* 0e4 */
4880 UINT unused1; /* 0e8 unused? */
4881 UINT sengdisplayname; /* 0ec LOCALE_SENGLISHDISPLAYNAME */
4882 UINT snativedisplayname; /* 0f0 LOCALE_SNATIVEDISPLAYNAME */
4883 UINT spercent; /* 0f4 LOCALE_SPERCENT */
4884 UINT snan; /* 0f8 LOCALE_SNAN */
4885 UINT sposinfinity; /* 0fc LOCALE_SPOSINFINITY */
4886 UINT sneginfinity; /* 100 LOCALE_SNEGINFINITY */
4887 UINT unused2; /* 104 unused? */
4888 UINT serastring; /* 108 CAL_SERASTRING */
4889 UINT sabbreverastring; /* 10c CAL_SABBREVERASTRING */
4890 UINT unused3; /* 110 unused? */
4891 UINT sconsolefallbackname; /* 114 LOCALE_SCONSOLEFALLBACKNAME */
4892 UINT sshorttime; /* 118 LOCALE_SSHORTTIME (array of formats) */
4893 UINT sshortestdayname; /* 11c LOCALE_SSHORTESTDAYNAME1 (array of days 1..7) */
4894 UINT unused4; /* 120 unused? */
4895 UINT ssortlocale; /* 124 LOCALE_SSORTLOCALE */
4896 UINT skeyboardstoinstall; /* 128 LOCALE_SKEYBOARDSTOINSTALL */
4897 UINT sscripts; /* 12c LOCALE_SSCRIPTS */
4898 UINT srelativelongdate; /* 130 LOCALE_SRELATIVELONGDATE */
4899 UINT igeoid; /* 134 LOCALE_IGEOID */
4900 UINT sshortestam; /* 138 LOCALE_SSHORTESTAM */
4901 UINT sshortestpm; /* 13c LOCALE_SSHORTESTPM */
4902 UINT smonthday; /* 140 LOCALE_SMONTHDAY (array of formats) */
4903 UINT keyboard_layout; /* 144 keyboard layouts */
4904 } NLS_LOCALE_DATA;
4905
4906 typedef struct
4907 {
4908 UINT id; /* 00 lcid */
4909 USHORT idx; /* 04 index in locales array */
4910 USHORT name; /* 06 locale name */
4911 } NLS_LOCALE_LCID_INDEX;
4912
4913 typedef struct
4914 {
4915 USHORT name; /* 00 locale name */
4916 USHORT idx; /* 02 index in locales array */
4917 UINT id; /* 04 lcid */
4918 } NLS_LOCALE_LCNAME_INDEX;
4919
4920 typedef struct
4921 {
4922 UINT offset; /* 00 offset to version, always 8? */
4923 UINT unknown1; /* 04 */
4924 UINT version; /* 08 file format version */
4925 UINT magic; /* 0c magic 'NSDS' */
4926 UINT unknown2[3]; /* 10 */
4927 USHORT header_size; /* 1c size of this header (?) */
4928 USHORT nb_lcids; /* 1e number of lcids in index */
4929 USHORT nb_locales; /* 20 number of locales in array */
4930 USHORT locale_size; /* 22 size of NLS_LOCALE_DATA structure */
4931 UINT locales_offset; /* 24 offset of locales array */
4932 USHORT nb_lcnames; /* 28 number of lcnames in index */
4933 USHORT pad; /* 2a */
4934 UINT lcids_offset; /* 2c offset of lcids index */
4935 UINT lcnames_offset; /* 30 offset of lcnames index */
4936 UINT unknown3; /* 34 */
4937 USHORT nb_calendars; /* 38 number of calendars in array */
4938 USHORT calendar_size; /* 3a size of calendar structure */
4939 UINT calendars_offset; /* 3c offset of calendars array */
4940 UINT strings_offset; /* 40 offset of strings data */
4941 USHORT unknown4[4]; /* 44 */
4942 } NLS_LOCALE_HEADER;
4943
4944 #endif /* __WINESRC__ */
4945
4946 #ifdef __cplusplus
4947 } /* extern "C" */
4948 #endif /* defined(__cplusplus) */
4949
4950 #endif /* __WINE_WINTERNL_H */
Windows API implementation