?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Release 8.16.
[wine.git] / include / winternl.h
blobd3537cc774dae5e5080b345edd1ef888c851fec5
1 /*
2 * Internal NT APIs and data structures
3 *
4 * Copyright (C) the Wine project
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19 */
20
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
23
24 #include <ntdef.h>
25 #include <windef.h>
26
27 #ifdef __cplusplus
28 extern "C" {
29 #endif /* defined(__cplusplus) */
30
31
32 /**********************************************************************
33 * Fundamental types and data structures
34 */
35
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS;
39 #endif
40
41 typedef const char *PCSZ;
42
43 typedef short CSHORT;
44 typedef CSHORT *PCSHORT;
45
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING {
49 USHORT Length;
50 USHORT MaximumLength;
51 PCHAR Buffer;
52 } STRING, *PSTRING;
53 #endif
54
55 typedef STRING ANSI_STRING;
56 typedef PSTRING PANSI_STRING;
57 typedef const STRING *PCANSI_STRING;
58
59 typedef STRING OEM_STRING;
60 typedef PSTRING POEM_STRING;
61 typedef const STRING *PCOEM_STRING;
62
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING {
66 USHORT Length; /* bytes */
67 USHORT MaximumLength; /* bytes */
68 PWSTR Buffer;
69 } UNICODE_STRING, *PUNICODE_STRING;
70 #endif
71
72 typedef const UNICODE_STRING *PCUNICODE_STRING;
73
74 #ifndef _FILETIME_
75 #define _FILETIME_
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
78 {
79 #ifdef WORDS_BIGENDIAN
80 DWORD dwHighDateTime;
81 DWORD dwLowDateTime;
82 #else
83 DWORD dwLowDateTime;
84 DWORD dwHighDateTime;
85 #endif
86 } FILETIME, *PFILETIME, *LPFILETIME;
87 #endif /* _FILETIME_ */
88
89 /*
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
96 */
97 typedef struct _RTL_SYSTEM_TIME {
98 WORD wYear;
99 WORD wMonth;
100 WORD wDayOfWeek;
101 WORD wDay;
102 WORD wHour;
103 WORD wMinute;
104 WORD wSecond;
105 WORD wMilliseconds;
106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
107
108 typedef struct _RTL_TIME_ZONE_INFORMATION {
109 LONG Bias;
110 WCHAR StandardName[32];
111 RTL_SYSTEM_TIME StandardDate;
112 LONG StandardBias;
113 WCHAR DaylightName[32];
114 RTL_SYSTEM_TIME DaylightDate;
115 LONG DaylightBias;
116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
117
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
119 {
120 LONG Bias;
121 WCHAR StandardName[32];
122 RTL_SYSTEM_TIME StandardDate;
123 LONG StandardBias;
124 WCHAR DaylightName[32];
125 RTL_SYSTEM_TIME DaylightDate;
126 LONG DaylightBias;
127 WCHAR TimeZoneKeyName[128];
128 BOOLEAN DynamicDaylightTimeDisabled;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
130
131 typedef struct _CLIENT_ID
132 {
133 HANDLE UniqueProcess;
134 HANDLE UniqueThread;
135 } CLIENT_ID, *PCLIENT_ID;
136
137 typedef struct _CURDIR
138 {
139 UNICODE_STRING DosPath;
140 PVOID Handle;
141 } CURDIR, *PCURDIR;
142
143 typedef struct RTL_DRIVE_LETTER_CURDIR
144 {
145 USHORT Flags;
146 USHORT Length;
147 ULONG TimeStamp;
148 UNICODE_STRING DosPath;
149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
150
151 typedef struct _RTL_RELATIVE_NAME
152 {
153 UNICODE_STRING RelativeName;
154 HANDLE ContainerDirectory;
155 void *CurDirRef;
156 } RTL_RELATIVE_NAME, *PRTL_RELATIVE_NAME;
157
158 typedef struct tagRTL_BITMAP {
159 ULONG SizeOfBitMap; /* Number of bits in the bitmap */
160 PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP, *PRTL_BITMAP;
162
163 typedef const RTL_BITMAP *PCRTL_BITMAP;
164
165 typedef struct tagRTL_BITMAP_RUN {
166 ULONG StartingIndex; /* Bit position at which run starts */
167 ULONG NumberOfBits; /* Size of the run in bits */
168 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
169
170 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
171
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
173 {
174 ULONG AllocationSize;
175 ULONG Size;
176 ULONG Flags;
177 ULONG DebugFlags;
178 HANDLE ConsoleHandle;
179 ULONG ConsoleFlags;
180 HANDLE hStdInput;
181 HANDLE hStdOutput;
182 HANDLE hStdError;
183 CURDIR CurrentDirectory;
184 UNICODE_STRING DllPath;
185 UNICODE_STRING ImagePathName;
186 UNICODE_STRING CommandLine;
187 PWSTR Environment;
188 ULONG dwX;
189 ULONG dwY;
190 ULONG dwXSize;
191 ULONG dwYSize;
192 ULONG dwXCountChars;
193 ULONG dwYCountChars;
194 ULONG dwFillAttribute;
195 ULONG dwFlags;
196 ULONG wShowWindow;
197 UNICODE_STRING WindowTitle;
198 UNICODE_STRING Desktop;
199 UNICODE_STRING ShellInfo;
200 UNICODE_STRING RuntimeInfo;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
202 ULONG_PTR EnvironmentSize;
203 ULONG_PTR EnvironmentVersion;
204 PVOID PackageDependencyData;
205 ULONG ProcessGroupId;
206 ULONG LoaderThreads;
207 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
208
209 /* value for Flags field (FIXME: not the correct name) */
210 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
211
212 typedef struct _PEB_LDR_DATA
213 {
214 ULONG Length;
215 BOOLEAN Initialized;
216 PVOID SsHandle;
217 LIST_ENTRY InLoadOrderModuleList;
218 LIST_ENTRY InMemoryOrderModuleList;
219 LIST_ENTRY InInitializationOrderModuleList;
220 PVOID EntryInProgress;
221 BOOLEAN ShutdownInProgress;
222 HANDLE ShutdownThreadId;
223 } PEB_LDR_DATA, *PPEB_LDR_DATA;
224
225 typedef struct _GDI_TEB_BATCH
226 {
227 ULONG Offset;
228 HANDLE HDC;
229 ULONG Buffer[0x136];
230 } GDI_TEB_BATCH;
231
232 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
233 {
234 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
235 struct _ACTIVATION_CONTEXT *ActivationContext;
236 ULONG Flags;
237 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
238
239 typedef struct _ACTIVATION_CONTEXT_STACK
240 {
241 RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
242 LIST_ENTRY FrameListCache;
243 ULONG Flags;
244 ULONG NextCookieSequenceNumber;
245 ULONG_PTR StackId;
246 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
247
248 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
249 {
250 ULONG Flags;
251 const char *FrameName;
252 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
253
254 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
255 {
256 TEB_ACTIVE_FRAME_CONTEXT BasicContext;
257 const char *SourceLocation;
258 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
259
260 typedef struct _TEB_ACTIVE_FRAME
261 {
262 ULONG Flags;
263 struct _TEB_ACTIVE_FRAME *Previous;
264 TEB_ACTIVE_FRAME_CONTEXT *Context;
265 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
266
267 typedef struct _TEB_ACTIVE_FRAME_EX
268 {
269 TEB_ACTIVE_FRAME BasicFrame;
270 void *ExtensionIdentifier;
271 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
272
273 typedef struct _FLS_CALLBACK
274 {
275 void *unknown;
276 PFLS_CALLBACK_FUNCTION callback; /* ~0 if NULL callback is set, NULL if FLS index is free. */
277 } FLS_CALLBACK, *PFLS_CALLBACK;
278
279 typedef struct _FLS_INFO_CHUNK
280 {
281 ULONG count; /* number of allocated FLS indexes in the chunk. */
282 FLS_CALLBACK callbacks[1]; /* the size is 0x10 for chunk 0 and is twice as
283 * the previous chunk size for the rest. */
284 } FLS_INFO_CHUNK, *PFLS_INFO_CHUNK;
285
286 typedef struct _GLOBAL_FLS_DATA
287 {
288 FLS_INFO_CHUNK *fls_callback_chunks[8];
289 LIST_ENTRY fls_list_head;
290 ULONG fls_high_index;
291 } GLOBAL_FLS_DATA, *PGLOBAL_FLS_DATA;
292
293 typedef struct _TEB_FLS_DATA
294 {
295 LIST_ENTRY fls_list_entry;
296 void **fls_data_chunks[8];
297 } TEB_FLS_DATA, *PTEB_FLS_DATA;
298
299 typedef struct _CHPE_V2_CPU_AREA_INFO
300 {
301 BOOLEAN InSimulation; /* 000 */
302 BOOLEAN InSyscallCallback; /* 001 */
303 ULONG64 EmulatorStackBase; /* 008 */
304 ULONG64 EmulatorStackLimit; /* 010 */
305 ARM64EC_NT_CONTEXT *ContextAmd64; /* 018 */
306 ULONG *SuspendDoorbell; /* 020 */
307 ULONG64 LoadingModuleModflag; /* 028 */
308 void *EmulatorData[4]; /* 030 */
309 ULONG64 EmulatorDataInline; /* 050 */
310 } CHPE_V2_CPU_AREA_INFO, *PCHPE_V2_CPU_AREA_INFO;
311
312 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
313 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
314
315 /***********************************************************************
316 * PEB data structure
317 */
318 typedef struct _PEB
319 { /* win32/win64 */
320 BOOLEAN InheritedAddressSpace; /* 000/000 */
321 BOOLEAN ReadImageFileExecOptions; /* 001/001 */
322 BOOLEAN BeingDebugged; /* 002/002 */
323 UCHAR ImageUsedLargePages : 1; /* 003/003 */
324 UCHAR IsProtectedProcess : 1;
325 UCHAR IsImageDynamicallyRelocated : 1;
326 UCHAR SkipPatchingUser32Forwarders : 1;
327 UCHAR IsPackagedProcess : 1;
328 UCHAR IsAppContainer: 1;
329 UCHAR IsProtectedProcessLight : 1;
330 UCHAR IsLongPathAwareProcess : 1;
331 HANDLE Mutant; /* 004/008 */
332 HMODULE ImageBaseAddress; /* 008/010 */
333 PPEB_LDR_DATA LdrData; /* 00c/018 */
334 RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 010/020 */
335 PVOID SubSystemData; /* 014/028 */
336 HANDLE ProcessHeap; /* 018/030 */
337 PRTL_CRITICAL_SECTION FastPebLock; /* 01c/038 */
338 PVOID AtlThunkSListPtr; /* 020/040 */
339 PVOID IFEOKey; /* 024/048 */
340 ULONG ProcessInJob : 1; /* 028/050 */
341 ULONG ProcessInitializing : 1;
342 ULONG ProcessUsingVEH : 1;
343 ULONG ProcessUsingVCH : 1;
344 ULONG ProcessUsingFTH : 1;
345 ULONG ProcessPreviouslyThrottled : 1;
346 ULONG ProcessCurrentlyThrottled : 1;
347 ULONG ProcessImagesHotPatched : 1;
348 ULONG ReservedBits0 : 24;
349 PVOID KernelCallbackTable; /* 02c/058 */
350 ULONG Reserved; /* 030/060 */
351 ULONG AtlThunkSListPtr32; /* 034/064 */
352 PVOID ApiSetMap; /* 038/068 */
353 ULONG TlsExpansionCounter; /* 03c/070 */
354 PRTL_BITMAP TlsBitmap; /* 040/078 */
355 ULONG TlsBitmapBits[2]; /* 044/080 */
356 PVOID ReadOnlySharedMemoryBase; /* 04c/088 */
357 PVOID SharedData; /* 050/090 */
358 PVOID *ReadOnlyStaticServerData; /* 054/098 */
359 PVOID AnsiCodePageData; /* 058/0a0 */
360 PVOID OemCodePageData; /* 05c/0a8 */
361 PVOID UnicodeCaseTableData; /* 060/0b0 */
362 ULONG NumberOfProcessors; /* 064/0b8 */
363 ULONG NtGlobalFlag; /* 068/0bc */
364 LARGE_INTEGER CriticalSectionTimeout; /* 070/0c0 */
365 SIZE_T HeapSegmentReserve; /* 078/0c8 */
366 SIZE_T HeapSegmentCommit; /* 07c/0d0 */
367 SIZE_T HeapDeCommitTotalFreeThreshold; /* 080/0d8 */
368 SIZE_T HeapDeCommitFreeBlockThreshold; /* 084/0e0 */
369 ULONG NumberOfHeaps; /* 088/0e8 */
370 ULONG MaximumNumberOfHeaps; /* 08c/0ec */
371 PVOID *ProcessHeaps; /* 090/0f0 */
372 PVOID GdiSharedHandleTable; /* 094/0f8 */
373 PVOID ProcessStarterHelper; /* 098/100 */
374 PVOID GdiDCAttributeList; /* 09c/108 */
375 PVOID LoaderLock; /* 0a0/110 */
376 ULONG OSMajorVersion; /* 0a4/118 */
377 ULONG OSMinorVersion; /* 0a8/11c */
378 ULONG OSBuildNumber; /* 0ac/120 */
379 ULONG OSPlatformId; /* 0b0/124 */
380 ULONG ImageSubSystem; /* 0b4/128 */
381 ULONG ImageSubSystemMajorVersion; /* 0b8/12c */
382 ULONG ImageSubSystemMinorVersion; /* 0bc/130 */
383 KAFFINITY ActiveProcessAffinityMask; /* 0c0/138 */
384 #ifdef _WIN64
385 ULONG GdiHandleBuffer[60]; /* /140 */
386 #else
387 ULONG GdiHandleBuffer[34]; /* 0c4/ */
388 #endif
389 PVOID PostProcessInitRoutine; /* 14c/230 */
390 PRTL_BITMAP TlsExpansionBitmap; /* 150/238 */
391 ULONG TlsExpansionBitmapBits[32]; /* 154/240 */
392 ULONG SessionId; /* 1d4/2c0 */
393 ULARGE_INTEGER AppCompatFlags; /* 1d8/2c8 */
394 ULARGE_INTEGER AppCompatFlagsUser; /* 1e0/2d0 */
395 PVOID ShimData; /* 1e8/2d8 */
396 PVOID AppCompatInfo; /* 1ec/2e0 */
397 UNICODE_STRING CSDVersion; /* 1f0/2e8 */
398 PVOID ActivationContextData; /* 1f8/2f8 */
399 PVOID ProcessAssemblyStorageMap; /* 1fc/300 */
400 PVOID SystemDefaultActivationData; /* 200/308 */
401 PVOID SystemAssemblyStorageMap; /* 204/310 */
402 SIZE_T MinimumStackCommit; /* 208/318 */
403 PVOID *FlsCallback; /* 20c/320 */
404 LIST_ENTRY FlsListHead; /* 210/328 */
405 PRTL_BITMAP FlsBitmap; /* 218/338 */
406 ULONG FlsBitmapBits[4]; /* 21c/340 */
407 ULONG FlsHighIndex; /* 22c/350 */
408 PVOID WerRegistrationData; /* 230/358 */
409 PVOID WerShipAssertPtr; /* 234/360 */
410 PVOID EcCodeBitMap; /* 238/368 */
411 PVOID pImageHeaderHash; /* 23c/370 */
412 ULONG HeapTracingEnabled : 1; /* 240/378 */
413 ULONG CritSecTracingEnabled : 1;
414 ULONG LibLoaderTracingEnabled : 1;
415 ULONG SpareTracingBits : 29;
416 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 248/380 */
417 ULONG TppWorkerpListLock; /* 250/388 */
418 LIST_ENTRY TppWorkerpList; /* 254/390 */
419 PVOID WaitOnAddressHashTable [0x80]; /* 25c/3a0 */
420 PVOID TelemetryCoverageHeader; /* 45c/7a0 */
421 ULONG CloudFileFlags; /* 460/7a8 */
422 ULONG CloudFileDiagFlags; /* 464/7ac */
423 CHAR PlaceholderCompatibilityMode; /* 468/7b0 */
424 CHAR PlaceholderCompatibilityModeReserved[7]; /* 469/7b1 */
425 PVOID LeapSecondData; /* 470/7b8 */
426 ULONG LeapSecondFlags; /* 474/7c0 */
427 ULONG NtGlobalFlag2; /* 478/7c4 */
428 } PEB, *PPEB;
429
430
431 /***********************************************************************
432 * TEB data structure
433 */
434 typedef struct _TEB
435 { /* win32/win64 */
436 NT_TIB Tib; /* 000/0000 */
437 PVOID EnvironmentPointer; /* 01c/0038 */
438 CLIENT_ID ClientId; /* 020/0040 */
439 PVOID ActiveRpcHandle; /* 028/0050 */
440 PVOID ThreadLocalStoragePointer; /* 02c/0058 */
441 PPEB Peb; /* 030/0060 */
442 ULONG LastErrorValue; /* 034/0068 */
443 ULONG CountOfOwnedCriticalSections; /* 038/006c */
444 PVOID CsrClientThread; /* 03c/0070 */
445 PVOID Win32ThreadInfo; /* 040/0078 */
446 ULONG User32Reserved[26]; /* 044/0080 */
447 ULONG UserReserved[5]; /* 0ac/00e8 */
448 PVOID WOW32Reserved; /* 0c0/0100 */
449 ULONG CurrentLocale; /* 0c4/0108 */
450 ULONG FpSoftwareStatusRegister; /* 0c8/010c */
451 PVOID ReservedForDebuggerInstrumentation[16]; /* 0cc/0110 */
452 #ifdef _WIN64
453 PVOID SystemReserved1[30]; /* /0190 */
454 #else
455 PVOID SystemReserved1[26]; /* 10c/ used for krnl386 private data in Wine */
456 #endif
457 char PlaceholderCompatibilityMode; /* 174/0280 */
458 BOOLEAN PlaceholderHydrationAlwaysExplicit;/* 175/0281 */
459 char PlaceholderReserved[10]; /* 176/0282 */
460 DWORD ProxiedProcessId; /* 180/028c */
461 ACTIVATION_CONTEXT_STACK ActivationContextStack; /* 184/0290 */
462 UCHAR WorkingOnBehalfOfTicket[8]; /* 19c/02b8 */
463 LONG ExceptionCode; /* 1a4/02c0 */
464 ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; /* 1a8/02c8 */
465 ULONG_PTR InstrumentationCallbackSp; /* 1ac/02d0 */
466 ULONG_PTR InstrumentationCallbackPreviousPc; /* 1b0/02d8 */
467 ULONG_PTR InstrumentationCallbackPreviousSp; /* 1b4/02e0 */
468 #ifdef _WIN64
469 ULONG TxFsContext; /* /02e8 */
470 BOOLEAN InstrumentationCallbackDisabled; /* /02ec */
471 BOOLEAN UnalignedLoadStoreExceptions; /* /02ed */
472 #else
473 BOOLEAN InstrumentationCallbackDisabled; /* 1b8/ */
474 BYTE SpareBytes1[23]; /* 1b9/ */
475 ULONG TxFsContext; /* 1d0/ */
476 #endif
477 GDI_TEB_BATCH GdiTebBatch; /* 1d4/02f0 used for ntdll private data in Wine */
478 CLIENT_ID RealClientId; /* 6b4/07d8 */
479 HANDLE GdiCachedProcessHandle; /* 6bc/07e8 */
480 ULONG GdiClientPID; /* 6c0/07f0 */
481 ULONG GdiClientTID; /* 6c4/07f4 */
482 PVOID GdiThreadLocaleInfo; /* 6c8/07f8 */
483 ULONG_PTR Win32ClientInfo[62]; /* 6cc/0800 used for user32 private data in Wine */
484 PVOID glDispatchTable[233]; /* 7c4/09f0 */
485 PVOID glReserved1[29]; /* b68/1138 */
486 PVOID glReserved2; /* bdc/1220 */
487 PVOID glSectionInfo; /* be0/1228 */
488 PVOID glSection; /* be4/1230 */
489 PVOID glTable; /* be8/1238 */
490 PVOID glCurrentRC; /* bec/1240 */
491 PVOID glContext; /* bf0/1248 */
492 ULONG LastStatusValue; /* bf4/1250 */
493 UNICODE_STRING StaticUnicodeString; /* bf8/1258 */
494 WCHAR StaticUnicodeBuffer[261]; /* c00/1268 */
495 PVOID DeallocationStack; /* e0c/1478 */
496 PVOID TlsSlots[64]; /* e10/1480 */
497 LIST_ENTRY TlsLinks; /* f10/1680 */
498 PVOID Vdm; /* f18/1690 */
499 PVOID ReservedForNtRpc; /* f1c/1698 */
500 PVOID DbgSsReserved[2]; /* f20/16a0 */
501 ULONG HardErrorMode; /* f28/16b0 */
502 #ifdef _WIN64
503 PVOID Instrumentation[11]; /* /16b8 */
504 #else
505 PVOID Instrumentation[9]; /* f2c/ */
506 #endif
507 GUID ActivityId; /* f50/1710 */
508 PVOID SubProcessTag; /* f60/1720 */
509 PVOID PerflibData; /* f64/1728 */
510 PVOID EtwTraceData; /* f68/1730 */
511 PVOID WinSockData; /* f6c/1738 */
512 ULONG GdiBatchCount; /* f70/1740 */
513 ULONG IdealProcessorValue; /* f74/1744 */
514 ULONG GuaranteedStackBytes; /* f78/1748 */
515 PVOID ReservedForPerf; /* f7c/1750 */
516 PVOID ReservedForOle; /* f80/1758 */
517 ULONG WaitingOnLoaderLock; /* f84/1760 */
518 PVOID SavedPriorityState; /* f88/1768 */
519 ULONG_PTR ReservedForCodeCoverage; /* f8c/1770 */
520 PVOID ThreadPoolData; /* f90/1778 */
521 PVOID *TlsExpansionSlots; /* f94/1780 */
522 #ifdef _WIN64
523 union {
524 PVOID DeallocationBStore; /* /1788 */
525 CHPE_V2_CPU_AREA_INFO *ChpeV2CpuAreaInfo; /* /1788 */
526 } DUMMYUNIONNAME;
527 PVOID BStoreLimit; /* /1790 */
528 #endif
529 ULONG MuiGeneration; /* f98/1798 */
530 ULONG IsImpersonating; /* f9c/179c */
531 PVOID NlsCache; /* fa0/17a0 */
532 PVOID ShimData; /* fa4/17a8 */
533 ULONG HeapVirtualAffinity; /* fa8/17b0 */
534 PVOID CurrentTransactionHandle; /* fac/17b8 */
535 TEB_ACTIVE_FRAME *ActiveFrame; /* fb0/17c0 */
536 TEB_FLS_DATA *FlsSlots; /* fb4/17c8 */
537 PVOID PreferredLanguages; /* fb8/17d0 */
538 PVOID UserPrefLanguages; /* fbc/17d8 */
539 PVOID MergedPrefLanguages; /* fc0/17e0 */
540 ULONG MuiImpersonation; /* fc4/17e8 */
541 USHORT CrossTebFlags; /* fc8/17ec */
542 USHORT SameTebFlags; /* fca/17ee */
543 PVOID TxnScopeEnterCallback; /* fcc/17f0 */
544 PVOID TxnScopeExitCallback; /* fd0/17f8 */
545 PVOID TxnScopeContext; /* fd4/1800 */
546 ULONG LockCount; /* fd8/1808 */
547 LONG WowTebOffset; /* fdc/180c */
548 PVOID ResourceRetValue; /* fe0/1810 */
549 PVOID ReservedForWdf; /* fe4/1818 */
550 ULONGLONG ReservedForCrt; /* fe8/1820 */
551 GUID EffectiveContainerId; /* ff0/1828 */
552 } TEB, *PTEB;
553
554
555 /***********************************************************************
556 * The 32-bit/64-bit version of the PEB and TEB for WoW64
557 */
558 typedef struct _NT_TIB32
559 {
560 ULONG ExceptionList; /* 0000 */
561 ULONG StackBase; /* 0004 */
562 ULONG StackLimit; /* 0008 */
563 ULONG SubSystemTib; /* 000c */
564 ULONG FiberData; /* 0010 */
565 ULONG ArbitraryUserPointer; /* 0014 */
566 ULONG Self; /* 0018 */
567 } NT_TIB32;
568
569 typedef struct _NT_TIB64
570 {
571 ULONG64 ExceptionList; /* 0000 */
572 ULONG64 StackBase; /* 0008 */
573 ULONG64 StackLimit; /* 0010 */
574 ULONG64 SubSystemTib; /* 0018 */
575 ULONG64 FiberData; /* 0020 */
576 ULONG64 ArbitraryUserPointer; /* 0028 */
577 ULONG64 Self; /* 0030 */
578 } NT_TIB64;
579
580 typedef struct _CLIENT_ID32
581 {
582 ULONG UniqueProcess;
583 ULONG UniqueThread;
584 } CLIENT_ID32;
585
586 typedef struct _CLIENT_ID64
587 {
588 ULONG64 UniqueProcess;
589 ULONG64 UniqueThread;
590 } CLIENT_ID64;
591
592 typedef struct _LIST_ENTRY32
593 {
594 ULONG Flink;
595 ULONG Blink;
596 } LIST_ENTRY32;
597
598 typedef struct _LIST_ENTRY64
599 {
600 ULONG64 Flink;
601 ULONG64 Blink;
602 } LIST_ENTRY64;
603
604 typedef struct _UNICODE_STRING32
605 {
606 USHORT Length;
607 USHORT MaximumLength;
608 ULONG Buffer;
609 } UNICODE_STRING32;
610
611 typedef struct _UNICODE_STRING64
612 {
613 USHORT Length;
614 USHORT MaximumLength;
615 ULONG64 Buffer;
616 } UNICODE_STRING64;
617
618 typedef struct _ACTIVATION_CONTEXT_STACK32
619 {
620 ULONG ActiveFrame;
621 LIST_ENTRY32 FrameListCache;
622 ULONG Flags;
623 ULONG NextCookieSequenceNumber;
624 ULONG32 StackId;
625 } ACTIVATION_CONTEXT_STACK32;
626
627 typedef struct _ACTIVATION_CONTEXT_STACK64
628 {
629 ULONG64 ActiveFrame;
630 LIST_ENTRY64 FrameListCache;
631 ULONG Flags;
632 ULONG NextCookieSequenceNumber;
633 ULONG64 StackId;
634 } ACTIVATION_CONTEXT_STACK64;
635
636 typedef struct _CURDIR32
637 {
638 UNICODE_STRING32 DosPath;
639 ULONG Handle;
640 } CURDIR32;
641
642 typedef struct _CURDIR64
643 {
644 UNICODE_STRING64 DosPath;
645 ULONG64 Handle;
646 } CURDIR64;
647
648 typedef struct RTL_DRIVE_LETTER_CURDIR32
649 {
650 USHORT Flags;
651 USHORT Length;
652 ULONG TimeStamp;
653 UNICODE_STRING32 DosPath;
654 } RTL_DRIVE_LETTER_CURDIR32;
655
656 typedef struct RTL_DRIVE_LETTER_CURDIR64
657 {
658 USHORT Flags;
659 USHORT Length;
660 ULONG TimeStamp;
661 UNICODE_STRING64 DosPath;
662 } RTL_DRIVE_LETTER_CURDIR64;
663
664 typedef struct _RTL_USER_PROCESS_PARAMETERS32
665 {
666 ULONG AllocationSize;
667 ULONG Size;
668 ULONG Flags;
669 ULONG DebugFlags;
670 ULONG ConsoleHandle;
671 ULONG ConsoleFlags;
672 ULONG hStdInput;
673 ULONG hStdOutput;
674 ULONG hStdError;
675 CURDIR32 CurrentDirectory;
676 UNICODE_STRING32 DllPath;
677 UNICODE_STRING32 ImagePathName;
678 UNICODE_STRING32 CommandLine;
679 ULONG Environment;
680 ULONG dwX;
681 ULONG dwY;
682 ULONG dwXSize;
683 ULONG dwYSize;
684 ULONG dwXCountChars;
685 ULONG dwYCountChars;
686 ULONG dwFillAttribute;
687 ULONG dwFlags;
688 ULONG wShowWindow;
689 UNICODE_STRING32 WindowTitle;
690 UNICODE_STRING32 Desktop;
691 UNICODE_STRING32 ShellInfo;
692 UNICODE_STRING32 RuntimeInfo;
693 RTL_DRIVE_LETTER_CURDIR32 DLCurrentDirectory[0x20];
694 ULONG EnvironmentSize;
695 ULONG EnvironmentVersion;
696 ULONG PackageDependencyData;
697 ULONG ProcessGroupId;
698 ULONG LoaderThreads;
699 } RTL_USER_PROCESS_PARAMETERS32;
700
701 typedef struct _RTL_USER_PROCESS_PARAMETERS64
702 {
703 ULONG AllocationSize;
704 ULONG Size;
705 ULONG Flags;
706 ULONG DebugFlags;
707 ULONG64 ConsoleHandle;
708 ULONG ConsoleFlags;
709 ULONG64 hStdInput;
710 ULONG64 hStdOutput;
711 ULONG64 hStdError;
712 CURDIR64 CurrentDirectory;
713 UNICODE_STRING64 DllPath;
714 UNICODE_STRING64 ImagePathName;
715 UNICODE_STRING64 CommandLine;
716 ULONG64 Environment;
717 ULONG dwX;
718 ULONG dwY;
719 ULONG dwXSize;
720 ULONG dwYSize;
721 ULONG dwXCountChars;
722 ULONG dwYCountChars;
723 ULONG dwFillAttribute;
724 ULONG dwFlags;
725 ULONG wShowWindow;
726 UNICODE_STRING64 WindowTitle;
727 UNICODE_STRING64 Desktop;
728 UNICODE_STRING64 ShellInfo;
729 UNICODE_STRING64 RuntimeInfo;
730 RTL_DRIVE_LETTER_CURDIR64 DLCurrentDirectory[0x20];
731 ULONG64 EnvironmentSize;
732 ULONG64 EnvironmentVersion;
733 ULONG64 PackageDependencyData;
734 ULONG ProcessGroupId;
735 ULONG LoaderThreads;
736 } RTL_USER_PROCESS_PARAMETERS64;
737
738 typedef struct _PEB_LDR_DATA32
739 {
740 ULONG Length;
741 BOOLEAN Initialized;
742 ULONG SsHandle;
743 LIST_ENTRY32 InLoadOrderModuleList;
744 LIST_ENTRY32 InMemoryOrderModuleList;
745 LIST_ENTRY32 InInitializationOrderModuleList;
746 ULONG EntryInProgress;
747 BOOLEAN ShutdownInProgress;
748 ULONG ShutdownThreadId;
749 } PEB_LDR_DATA32, *PPEB_LDR_DATA32;
750
751 typedef struct _PEB_LDR_DATA64
752 {
753 ULONG Length;
754 BOOLEAN Initialized;
755 ULONG64 SsHandle;
756 LIST_ENTRY64 InLoadOrderModuleList;
757 LIST_ENTRY64 InMemoryOrderModuleList;
758 LIST_ENTRY64 InInitializationOrderModuleList;
759 ULONG64 EntryInProgress;
760 BOOLEAN ShutdownInProgress;
761 ULONG64 ShutdownThreadId;
762 } PEB_LDR_DATA64, *PPEB_LDR_DATA64;
763
764 typedef struct _PEB32
765 {
766 BOOLEAN InheritedAddressSpace; /* 0000 */
767 BOOLEAN ReadImageFileExecOptions; /* 0001 */
768 BOOLEAN BeingDebugged; /* 0002 */
769 UCHAR ImageUsedLargePages : 1; /* 0003 */
770 UCHAR IsProtectedProcess : 1;
771 UCHAR IsImageDynamicallyRelocated : 1;
772 UCHAR SkipPatchingUser32Forwarders : 1;
773 UCHAR IsPackagedProcess : 1;
774 UCHAR IsAppContainer: 1;
775 UCHAR IsProtectedProcessLight : 1;
776 UCHAR IsLongPathAwareProcess : 1;
777 ULONG Mutant; /* 0004 */
778 ULONG ImageBaseAddress; /* 0008 */
779 ULONG LdrData; /* 000c */
780 ULONG ProcessParameters; /* 0010 */
781 ULONG SubSystemData; /* 0014 */
782 ULONG ProcessHeap; /* 0018 */
783 ULONG FastPebLock; /* 001c */
784 ULONG AtlThunkSListPtr; /* 0020 */
785 ULONG IFEOKey; /* 0024 */
786 ULONG ProcessInJob : 1; /* 0028 */
787 ULONG ProcessInitializing : 1;
788 ULONG ProcessUsingVEH : 1;
789 ULONG ProcessUsingVCH : 1;
790 ULONG ProcessUsingFTH : 1;
791 ULONG ProcessPreviouslyThrottled : 1;
792 ULONG ProcessCurrentlyThrottled : 1;
793 ULONG ProcessImagesHotPatched : 1;
794 ULONG ReservedBits0 : 24;
795 ULONG KernelCallbackTable; /* 002c */
796 ULONG Reserved; /* 0030 */
797 ULONG AtlThunkSListPtr32; /* 0034 */
798 ULONG ApiSetMap; /* 0038 */
799 ULONG TlsExpansionCounter; /* 003c */
800 ULONG TlsBitmap; /* 0040 */
801 ULONG TlsBitmapBits[2]; /* 0044 */
802 ULONG ReadOnlySharedMemoryBase; /* 004c */
803 ULONG SharedData; /* 0050 */
804 ULONG ReadOnlyStaticServerData; /* 0054 */
805 ULONG AnsiCodePageData; /* 0058 */
806 ULONG OemCodePageData; /* 005c */
807 ULONG UnicodeCaseTableData; /* 0060 */
808 ULONG NumberOfProcessors; /* 0064 */
809 ULONG NtGlobalFlag; /* 0068 */
810 LARGE_INTEGER CriticalSectionTimeout; /* 0070 */
811 ULONG HeapSegmentReserve; /* 0078 */
812 ULONG HeapSegmentCommit; /* 007c */
813 ULONG HeapDeCommitTotalFreeThreshold; /* 0080 */
814 ULONG HeapDeCommitFreeBlockThreshold; /* 0084 */
815 ULONG NumberOfHeaps; /* 0088 */
816 ULONG MaximumNumberOfHeaps; /* 008c */
817 ULONG ProcessHeaps; /* 0090 */
818 ULONG GdiSharedHandleTable; /* 0094 */
819 ULONG ProcessStarterHelper; /* 0098 */
820 ULONG GdiDCAttributeList; /* 009c */
821 ULONG LoaderLock; /* 00a0 */
822 ULONG OSMajorVersion; /* 00a4 */
823 ULONG OSMinorVersion; /* 00a8 */
824 ULONG OSBuildNumber; /* 00ac */
825 ULONG OSPlatformId; /* 00b0 */
826 ULONG ImageSubSystem; /* 00b4 */
827 ULONG ImageSubSystemMajorVersion; /* 00b8 */
828 ULONG ImageSubSystemMinorVersion; /* 00bc */
829 ULONG ActiveProcessAffinityMask; /* 00c0 */
830 ULONG GdiHandleBuffer[34]; /* 00c4 */
831 ULONG PostProcessInitRoutine; /* 014c */
832 ULONG TlsExpansionBitmap; /* 0150 */
833 ULONG TlsExpansionBitmapBits[32]; /* 0154 */
834 ULONG SessionId; /* 01d4 */
835 ULARGE_INTEGER AppCompatFlags; /* 01d8 */
836 ULARGE_INTEGER AppCompatFlagsUser; /* 01e0 */
837 ULONG ShimData; /* 01e8 */
838 ULONG AppCompatInfo; /* 01ec */
839 UNICODE_STRING32 CSDVersion; /* 01f0 */
840 ULONG ActivationContextData; /* 01f8 */
841 ULONG ProcessAssemblyStorageMap; /* 01fc */
842 ULONG SystemDefaultActivationData; /* 0200 */
843 ULONG SystemAssemblyStorageMap; /* 0204 */
844 ULONG MinimumStackCommit; /* 0208 */
845 ULONG FlsCallback; /* 020c */
846 LIST_ENTRY32 FlsListHead; /* 0210 */
847 ULONG FlsBitmap; /* 0218 */
848 ULONG FlsBitmapBits[4]; /* 021c */
849 ULONG FlsHighIndex; /* 022c */
850 ULONG WerRegistrationData; /* 0230 */
851 ULONG WerShipAssertPtr; /* 0234 */
852 ULONG pUnused; /* 0238 */
853 ULONG pImageHeaderHash; /* 023c */
854 ULONG HeapTracingEnabled : 1; /* 0240 */
855 ULONG CritSecTracingEnabled : 1;
856 ULONG LibLoaderTracingEnabled : 1;
857 ULONG SpareTracingBits : 29;
858 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0248 */
859 ULONG TppWorkerpListLock; /* 0250 */
860 LIST_ENTRY32 TppWorkerpList; /* 0254 */
861 ULONG WaitOnAddressHashTable [0x80]; /* 025c */
862 ULONG TelemetryCoverageHeader; /* 045c */
863 ULONG CloudFileFlags; /* 0460 */
864 ULONG CloudFileDiagFlags; /* 0464 */
865 CHAR PlaceholderCompatibilityMode; /* 0468 */
866 CHAR PlaceholderCompatibilityModeReserved[7]; /* 0469 */
867 ULONG LeapSecondData; /* 0470 */
868 ULONG LeapSecondFlags; /* 0474 */
869 ULONG NtGlobalFlag2; /* 0478 */
870 } PEB32;
871
872 C_ASSERT( sizeof(PEB32) == 0x480 );
873
874 typedef struct _PEB64
875 {
876 BOOLEAN InheritedAddressSpace; /* 0000 */
877 BOOLEAN ReadImageFileExecOptions; /* 0001 */
878 BOOLEAN BeingDebugged; /* 0002 */
879 UCHAR ImageUsedLargePages : 1; /* 0003 */
880 UCHAR IsProtectedProcess : 1;
881 UCHAR IsImageDynamicallyRelocated : 1;
882 UCHAR SkipPatchingUser32Forwarders : 1;
883 UCHAR IsPackagedProcess : 1;
884 UCHAR IsAppContainer: 1;
885 UCHAR IsProtectedProcessLight : 1;
886 UCHAR IsLongPathAwareProcess : 1;
887 ULONG64 Mutant; /* 0008 */
888 ULONG64 ImageBaseAddress; /* 0010 */
889 ULONG64 LdrData; /* 0018 */
890 ULONG64 ProcessParameters; /* 0020 */
891 ULONG64 SubSystemData; /* 0028 */
892 ULONG64 ProcessHeap; /* 0030 */
893 ULONG64 FastPebLock; /* 0038 */
894 ULONG64 AtlThunkSListPtr; /* 0040 */
895 ULONG64 IFEOKey; /* 0048 */
896 ULONG ProcessInJob : 1; /* 0050 */
897 ULONG ProcessInitializing : 1;
898 ULONG ProcessUsingVEH : 1;
899 ULONG ProcessUsingVCH : 1;
900 ULONG ProcessUsingFTH : 1;
901 ULONG ProcessPreviouslyThrottled : 1;
902 ULONG ProcessCurrentlyThrottled : 1;
903 ULONG ProcessImagesHotPatched : 1;
904 ULONG ReservedBits0 : 24;
905 ULONG64 KernelCallbackTable; /* 0058 */
906 ULONG Reserved; /* 0060 */
907 ULONG AtlThunkSListPtr32; /* 0064 */
908 ULONG64 ApiSetMap; /* 0068 */
909 ULONG TlsExpansionCounter; /* 0070 */
910 ULONG64 TlsBitmap; /* 0078 */
911 ULONG TlsBitmapBits[2]; /* 0080 */
912 ULONG64 ReadOnlySharedMemoryBase; /* 0088 */
913 ULONG64 SharedData; /* 0090 */
914 ULONG64 ReadOnlyStaticServerData; /* 0098 */
915 ULONG64 AnsiCodePageData; /* 00a0 */
916 ULONG64 OemCodePageData; /* 00a8 */
917 ULONG64 UnicodeCaseTableData; /* 00b0 */
918 ULONG NumberOfProcessors; /* 00b8 */
919 ULONG NtGlobalFlag; /* 00bc */
920 LARGE_INTEGER CriticalSectionTimeout; /* 00c0 */
921 ULONG64 HeapSegmentReserve; /* 00c8 */
922 ULONG64 HeapSegmentCommit; /* 00d0 */
923 ULONG64 HeapDeCommitTotalFreeThreshold; /* 00d8 */
924 ULONG64 HeapDeCommitFreeBlockThreshold; /* 00e0 */
925 ULONG NumberOfHeaps; /* 00e8 */
926 ULONG MaximumNumberOfHeaps; /* 00ec */
927 ULONG64 ProcessHeaps; /* 00f0 */
928 ULONG64 GdiSharedHandleTable; /* 00f8 */
929 ULONG64 ProcessStarterHelper; /* 0100 */
930 ULONG64 GdiDCAttributeList; /* 0108 */
931 ULONG64 LoaderLock; /* 0110 */
932 ULONG OSMajorVersion; /* 0118 */
933 ULONG OSMinorVersion; /* 011c */
934 ULONG OSBuildNumber; /* 0120 */
935 ULONG OSPlatformId; /* 0124 */
936 ULONG ImageSubSystem; /* 0128 */
937 ULONG ImageSubSystemMajorVersion; /* 012c */
938 ULONG ImageSubSystemMinorVersion; /* 0130 */
939 ULONG64 ActiveProcessAffinityMask; /* 0138 */
940 ULONG GdiHandleBuffer[60]; /* 0140 */
941 ULONG64 PostProcessInitRoutine; /* 0230 */
942 ULONG64 TlsExpansionBitmap; /* 0238 */
943 ULONG TlsExpansionBitmapBits[32]; /* 0240 */
944 ULONG SessionId; /* 02c0 */
945 ULARGE_INTEGER AppCompatFlags; /* 02c8 */
946 ULARGE_INTEGER AppCompatFlagsUser; /* 02d0 */
947 ULONG64 ShimData; /* 02d8 */
948 ULONG64 AppCompatInfo; /* 02e0 */
949 UNICODE_STRING64 CSDVersion; /* 02e8 */
950 ULONG64 ActivationContextData; /* 02f8 */
951 ULONG64 ProcessAssemblyStorageMap; /* 0300 */
952 ULONG64 SystemDefaultActivationData; /* 0308 */
953 ULONG64 SystemAssemblyStorageMap; /* 0310 */
954 ULONG64 MinimumStackCommit; /* 0318 */
955 ULONG64 FlsCallback; /* 0320 */
956 LIST_ENTRY64 FlsListHead; /* 0328 */
957 ULONG64 FlsBitmap; /* 0338 */
958 ULONG FlsBitmapBits[4]; /* 0340 */
959 ULONG FlsHighIndex; /* 0350 */
960 ULONG64 WerRegistrationData; /* 0358 */
961 ULONG64 WerShipAssertPtr; /* 0360 */
962 ULONG64 pUnused; /* 0368 */
963 ULONG64 pImageHeaderHash; /* 0370 */
964 ULONG HeapTracingEnabled : 1; /* 0378 */
965 ULONG CritSecTracingEnabled : 1;
966 ULONG LibLoaderTracingEnabled : 1;
967 ULONG SpareTracingBits : 29;
968 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0380 */
969 ULONG TppWorkerpListLock; /* 0388 */
970 LIST_ENTRY64 TppWorkerpList; /* 0390 */
971 ULONG64 WaitOnAddressHashTable [0x80]; /* 03a0 */
972 ULONG64 TelemetryCoverageHeader; /* 07a0 */
973 ULONG CloudFileFlags; /* 07a8 */
974 ULONG CloudFileDiagFlags; /* 07ac */
975 CHAR PlaceholderCompatibilityMode; /* 07b0 */
976 CHAR PlaceholderCompatibilityModeReserved[7]; /* 07b1 */
977 ULONG64 LeapSecondData; /* 07b8 */
978 ULONG LeapSecondFlags; /* 07c0 */
979 ULONG NtGlobalFlag2; /* 07c4 */
980 } PEB64;
981
982 C_ASSERT( sizeof(PEB64) == 0x7c8 );
983
984 typedef struct _TEB32
985 {
986 NT_TIB32 Tib; /* 0000 */
987 ULONG EnvironmentPointer; /* 001c */
988 CLIENT_ID32 ClientId; /* 0020 */
989 ULONG ActiveRpcHandle; /* 0028 */
990 ULONG ThreadLocalStoragePointer; /* 002c */
991 ULONG Peb; /* 0030 */
992 ULONG LastErrorValue; /* 0034 */
993 ULONG CountOfOwnedCriticalSections; /* 0038 */
994 ULONG CsrClientThread; /* 003c */
995 ULONG Win32ThreadInfo; /* 0040 */
996 ULONG User32Reserved[26]; /* 0044 */
997 ULONG UserReserved[5]; /* 00ac */
998 ULONG WOW32Reserved; /* 00c0 */
999 ULONG CurrentLocale; /* 00c4 */
1000 ULONG FpSoftwareStatusRegister; /* 00c8 */
1001 ULONG ReservedForDebuggerInstrumentation[16]; /* 00cc */
1002 ULONG SystemReserved1[26]; /* 010c */
1003 char PlaceholderCompatibilityMode; /* 0174 */
1004 BOOLEAN PlaceholderHydrationAlwaysExplicit;/* 0175 */
1005 char PlaceholderReserved[10]; /* 0176 */
1006 DWORD ProxiedProcessId; /* 0180 */
1007 ACTIVATION_CONTEXT_STACK32 ActivationContextStack; /* 0184 */
1008 UCHAR WorkingOnBehalfOfTicket[8]; /* 019c */
1009 LONG ExceptionCode; /* 01a4 */
1010 ULONG ActivationContextStackPointer; /* 01a8 */
1011 ULONG InstrumentationCallbackSp; /* 01ac */
1012 ULONG InstrumentationCallbackPreviousPc; /* 01b0 */
1013 ULONG InstrumentationCallbackPreviousSp; /* 01b4 */
1014 BOOLEAN InstrumentationCallbackDisabled; /* 01b8 */
1015 BYTE SpareBytes1[23]; /* 01b9 */
1016 ULONG TxFsContext; /* 01d0 */
1017 ULONG GdiTebBatch[0x138]; /* 01d4 */
1018 CLIENT_ID32 RealClientId; /* 06b4 */
1019 ULONG GdiCachedProcessHandle; /* 06bc */
1020 ULONG GdiClientPID; /* 06c0 */
1021 ULONG GdiClientTID; /* 06c4 */
1022 ULONG GdiThreadLocaleInfo; /* 06c8 */
1023 ULONG Win32ClientInfo[62]; /* 06cc */
1024 ULONG glDispatchTable[233]; /* 07c4 */
1025 ULONG glReserved1[29]; /* 0b68 */
1026 ULONG glReserved2; /* 0bdc */
1027 ULONG glSectionInfo; /* 0be0 */
1028 ULONG glSection; /* 0be4 */
1029 ULONG glTable; /* 0be8 */
1030 ULONG glCurrentRC; /* 0bec */
1031 ULONG glContext; /* 0bf0 */
1032 ULONG LastStatusValue; /* 0bf4 */
1033 UNICODE_STRING32 StaticUnicodeString; /* 0bf8 */
1034 WCHAR StaticUnicodeBuffer[261]; /* 0c00 */
1035 ULONG DeallocationStack; /* 0e0c */
1036 ULONG TlsSlots[64]; /* 0e10 */
1037 LIST_ENTRY32 TlsLinks; /* 0f10 */
1038 ULONG Vdm; /* 0f18 */
1039 ULONG ReservedForNtRpc; /* 0f1c */
1040 ULONG DbgSsReserved[2]; /* 0f20 */
1041 ULONG HardErrorMode; /* 0f28 */
1042 ULONG Instrumentation[9]; /* 0f2c */
1043 GUID ActivityId; /* 0f50 */
1044 ULONG SubProcessTag; /* 0f60 */
1045 ULONG PerflibData; /* 0f64 */
1046 ULONG EtwTraceData; /* 0f68 */
1047 ULONG WinSockData; /* 0f6c */
1048 ULONG GdiBatchCount; /* 0f70 */
1049 ULONG IdealProcessorValue; /* 0f74 */
1050 ULONG GuaranteedStackBytes; /* 0f78 */
1051 ULONG ReservedForPerf; /* 0f7c */
1052 ULONG ReservedForOle; /* 0f80 */
1053 ULONG WaitingOnLoaderLock; /* 0f84 */
1054 ULONG SavedPriorityState; /* 0f88 */
1055 ULONG ReservedForCodeCoverage; /* 0f8c */
1056 ULONG ThreadPoolData; /* 0f90 */
1057 ULONG TlsExpansionSlots; /* 0f94 */
1058 ULONG MuiGeneration; /* 0f98 */
1059 ULONG IsImpersonating; /* 0f9c */
1060 ULONG NlsCache; /* 0fa0 */
1061 ULONG ShimData; /* 0fa4 */
1062 ULONG HeapVirtualAffinity; /* 0fa8 */
1063 ULONG CurrentTransactionHandle; /* 0fac */
1064 ULONG ActiveFrame; /* 0fb0 */
1065 ULONG FlsSlots; /* 0fb4 */
1066 ULONG PreferredLanguages; /* 0fb8 */
1067 ULONG UserPrefLanguages; /* 0fbc */
1068 ULONG MergedPrefLanguages; /* 0fc0 */
1069 ULONG MuiImpersonation; /* 0fc4 */
1070 USHORT CrossTebFlags; /* 0fc8 */
1071 USHORT SameTebFlags; /* 0fca */
1072 ULONG TxnScopeEnterCallback; /* 0fcc */
1073 ULONG TxnScopeExitCallback; /* 0fd0 */
1074 ULONG TxnScopeContext; /* 0fd4 */
1075 ULONG LockCount; /* 0fd8 */
1076 LONG WowTebOffset; /* 0fdc */
1077 ULONG ResourceRetValue; /* 0fe0 */
1078 ULONG ReservedForWdf; /* 0fe4 */
1079 ULONGLONG ReservedForCrt; /* 0fe8 */
1080 GUID EffectiveContainerId; /* 0ff0 */
1081 } TEB32;
1082
1083 C_ASSERT( sizeof(TEB32) == 0x1000 );
1084
1085 typedef struct _TEB64
1086 {
1087 NT_TIB64 Tib; /* 0000 */
1088 ULONG64 EnvironmentPointer; /* 0038 */
1089 CLIENT_ID64 ClientId; /* 0040 */
1090 ULONG64 ActiveRpcHandle; /* 0050 */
1091 ULONG64 ThreadLocalStoragePointer; /* 0058 */
1092 ULONG64 Peb; /* 0060 */
1093 ULONG LastErrorValue; /* 0068 */
1094 ULONG CountOfOwnedCriticalSections; /* 006c */
1095 ULONG64 CsrClientThread; /* 0070 */
1096 ULONG64 Win32ThreadInfo; /* 0078 */
1097 ULONG User32Reserved[26]; /* 0080 */
1098 ULONG UserReserved[5]; /* 00e8 */
1099 ULONG64 WOW32Reserved; /* 0100 */
1100 ULONG CurrentLocale; /* 0108 */
1101 ULONG FpSoftwareStatusRegister; /* 010c */
1102 ULONG64 ReservedForDebuggerInstrumentation[16]; /* 0110 */
1103 ULONG64 SystemReserved1[30]; /* 0190 */
1104 char PlaceholderCompatibilityMode; /* 0280 */
1105 BOOLEAN PlaceholderHydrationAlwaysExplicit;/* 0281 */
1106 char PlaceholderReserved[10]; /* 0282 */
1107 DWORD ProxiedProcessId; /* 028c */
1108 ACTIVATION_CONTEXT_STACK64 ActivationContextStack; /* 0290 */
1109 UCHAR WorkingOnBehalfOfTicket[8]; /* 02b8 */
1110 LONG ExceptionCode; /* 02c0 */
1111 ULONG64 ActivationContextStackPointer; /* 02c8 */
1112 ULONG64 InstrumentationCallbackSp; /* 02d0 */
1113 ULONG64 InstrumentationCallbackPreviousPc; /* 02d8 */
1114 ULONG64 InstrumentationCallbackPreviousSp; /* 02e0 */
1115 ULONG TxFsContext; /* 02e8 */
1116 BOOLEAN InstrumentationCallbackDisabled; /* 02ec */
1117 BOOLEAN UnalignedLoadStoreExceptions; /* 02ed */
1118 ULONG64 GdiTebBatch[0x9d]; /* 02f0 */
1119 CLIENT_ID64 RealClientId; /* 07d8 */
1120 ULONG64 GdiCachedProcessHandle; /* 07e8 */
1121 ULONG GdiClientPID; /* 07f0 */
1122 ULONG GdiClientTID; /* 07f4 */
1123 ULONG64 GdiThreadLocaleInfo; /* 07f8 */
1124 ULONG64 Win32ClientInfo[62]; /* 0800 */
1125 ULONG64 glDispatchTable[233]; /* 09f0 */
1126 ULONG64 glReserved1[29]; /* 1138 */
1127 ULONG64 glReserved2; /* 1220 */
1128 ULONG64 glSectionInfo; /* 1228 */
1129 ULONG64 glSection; /* 1230 */
1130 ULONG64 glTable; /* 1238 */
1131 ULONG64 glCurrentRC; /* 1240 */
1132 ULONG64 glContext; /* 1248 */
1133 ULONG LastStatusValue; /* 1250 */
1134 UNICODE_STRING64 StaticUnicodeString; /* 1258 */
1135 WCHAR StaticUnicodeBuffer[261]; /* 1268 */
1136 ULONG64 DeallocationStack; /* 1478 */
1137 ULONG64 TlsSlots[64]; /* 1480 */
1138 LIST_ENTRY64 TlsLinks; /* 1680 */
1139 ULONG64 Vdm; /* 1690 */
1140 ULONG64 ReservedForNtRpc; /* 1698 */
1141 ULONG64 DbgSsReserved[2]; /* 16a0 */
1142 ULONG HardErrorMode; /* 16b0 */
1143 ULONG64 Instrumentation[11]; /* 16b8 */
1144 GUID ActivityId; /* 1710 */
1145 ULONG64 SubProcessTag; /* 1720 */
1146 ULONG64 PerflibData; /* 1728 */
1147 ULONG64 EtwTraceData; /* 1730 */
1148 ULONG64 WinSockData; /* 1738 */
1149 ULONG GdiBatchCount; /* 1740 */
1150 ULONG IdealProcessorValue; /* 1744 */
1151 ULONG GuaranteedStackBytes; /* 1748 */
1152 ULONG64 ReservedForPerf; /* 1750 */
1153 ULONG64 ReservedForOle; /* 1758 */
1154 ULONG WaitingOnLoaderLock; /* 1760 */
1155 ULONG64 SavedPriorityState; /* 1768 */
1156 ULONG64 ReservedForCodeCoverage; /* 1770 */
1157 ULONG64 ThreadPoolData; /* 1778 */
1158 ULONG64 TlsExpansionSlots; /* 1780 */
1159 union {
1160 ULONG64 DeallocationBStore; /* 1788 */
1161 ULONG64 ChpeV2CpuAreaInfo; /* 1788 */
1162 } DUMMYUNIONNAME;
1163 ULONG64 BStoreLimit; /* 1790 */
1164 ULONG MuiGeneration; /* 1798 */
1165 ULONG IsImpersonating; /* 179c */
1166 ULONG64 NlsCache; /* 17a0 */
1167 ULONG64 ShimData; /* 17a8 */
1168 ULONG HeapVirtualAffinity; /* 17b0 */
1169 ULONG64 CurrentTransactionHandle; /* 17b8 */
1170 ULONG64 ActiveFrame; /* 17c0 */
1171 ULONG64 FlsSlots; /* 17c8 */
1172 ULONG64 PreferredLanguages; /* 17d0 */
1173 ULONG64 UserPrefLanguages; /* 17d8 */
1174 ULONG64 MergedPrefLanguages; /* 17e0 */
1175 ULONG MuiImpersonation; /* 17e8 */
1176 USHORT CrossTebFlags; /* 17ec */
1177 USHORT SameTebFlags; /* 17ee */
1178 ULONG64 TxnScopeEnterCallback; /* 17f0 */
1179 ULONG64 TxnScopeExitCallback; /* 17f8 */
1180 ULONG64 TxnScopeContext; /* 1800 */
1181 ULONG LockCount; /* 1808 */
1182 LONG WowTebOffset; /* 180c */
1183 ULONG64 ResourceRetValue; /* 1810 */
1184 ULONG64 ReservedForWdf; /* 1818 */
1185 ULONGLONG ReservedForCrt; /* 1820 */
1186 GUID EffectiveContainerId; /* 1828 */
1187 } TEB64;
1188
1189 C_ASSERT( sizeof(TEB64) == 0x1838 );
1190
1191 #ifdef _WIN64
1192 C_ASSERT( sizeof(PEB) == sizeof(PEB64) );
1193 C_ASSERT( sizeof(TEB) == sizeof(TEB64) );
1194 #else
1195 C_ASSERT( sizeof(PEB) == sizeof(PEB32) );
1196 C_ASSERT( sizeof(TEB) == sizeof(TEB32) );
1197 #endif
1198
1199 /* reserved TEB64 TLS slots for Wow64 */
1200 #define WOW64_TLS_CPURESERVED 1
1201 #define WOW64_TLS_TEMPLIST 3
1202 #define WOW64_TLS_USERCALLBACKDATA 5
1203 #define WOW64_TLS_APCLIST 7
1204 #define WOW64_TLS_FILESYSREDIR 8
1205 #define WOW64_TLS_WOW64INFO 10
1206 #define WOW64_TLS_MAX_NUMBER 19
1207
1208
1209 /***********************************************************************
1210 * Enums
1211 */
1212
1213 typedef enum _FILE_INFORMATION_CLASS {
1214 FileDirectoryInformation = 1,
1215 FileFullDirectoryInformation,
1216 FileBothDirectoryInformation,
1217 FileBasicInformation,
1218 FileStandardInformation,
1219 FileInternalInformation,
1220 FileEaInformation,
1221 FileAccessInformation,
1222 FileNameInformation,
1223 FileRenameInformation,
1224 FileLinkInformation,
1225 FileNamesInformation,
1226 FileDispositionInformation,
1227 FilePositionInformation,
1228 FileFullEaInformation,
1229 FileModeInformation,
1230 FileAlignmentInformation,
1231 FileAllInformation,
1232 FileAllocationInformation,
1233 FileEndOfFileInformation,
1234 FileAlternateNameInformation,
1235 FileStreamInformation,
1236 FilePipeInformation,
1237 FilePipeLocalInformation,
1238 FilePipeRemoteInformation,
1239 FileMailslotQueryInformation,
1240 FileMailslotSetInformation,
1241 FileCompressionInformation,
1242 FileObjectIdInformation,
1243 FileCompletionInformation,
1244 FileMoveClusterInformation,
1245 FileQuotaInformation,
1246 FileReparsePointInformation,
1247 FileNetworkOpenInformation,
1248 FileAttributeTagInformation,
1249 FileTrackingInformation,
1250 FileIdBothDirectoryInformation,
1251 FileIdFullDirectoryInformation,
1252 FileValidDataLengthInformation,
1253 FileShortNameInformation,
1254 FileIoCompletionNotificationInformation,
1255 FileIoStatusBlockRangeInformation,
1256 FileIoPriorityHintInformation,
1257 FileSfioReserveInformation,
1258 FileSfioVolumeInformation,
1259 FileHardLinkInformation,
1260 FileProcessIdsUsingFileInformation,
1261 FileNormalizedNameInformation,
1262 FileNetworkPhysicalNameInformation,
1263 FileIdGlobalTxDirectoryInformation,
1264 FileIsRemoteDeviceInformation,
1265 FileAttributeCacheInformation,
1266 FileNumaNodeInformation,
1267 FileStandardLinkInformation,
1268 FileRemoteProtocolInformation,
1269 FileRenameInformationBypassAccessCheck,
1270 FileLinkInformationBypassAccessCheck,
1271 FileVolumeNameInformation,
1272 FileIdInformation,
1273 FileIdExtdDirectoryInformation,
1274 FileReplaceCompletionInformation,
1275 FileHardLinkFullIdInformation,
1276 FileIdExtdBothDirectoryInformation,
1277 FileDispositionInformationEx,
1278 FileRenameInformationEx,
1279 FileRenameInformationExBypassAccessCheck,
1280 FileDesiredStorageClassInformation,
1281 FileStatInformation,
1282 FileMemoryPartitionInformation,
1283 FileStatLxInformation,
1284 FileCaseSensitiveInformation,
1285 FileLinkInformationEx,
1286 FileLinkInformationExBypassAccessCheck,
1287 FileStorageReserveIdInformation,
1288 FileCaseSensitiveInformationForceAccessCheck,
1289 FileKnownFolderInformation,
1290 FileMaximumInformation
1291 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
1292
1293 typedef struct _FILE_DIRECTORY_INFORMATION {
1294 ULONG NextEntryOffset;
1295 ULONG FileIndex;
1296 LARGE_INTEGER CreationTime;
1297 LARGE_INTEGER LastAccessTime;
1298 LARGE_INTEGER LastWriteTime;
1299 LARGE_INTEGER ChangeTime;
1300 LARGE_INTEGER EndOfFile;
1301 LARGE_INTEGER AllocationSize;
1302 ULONG FileAttributes;
1303 ULONG FileNameLength;
1304 WCHAR FileName[ANYSIZE_ARRAY];
1305 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
1306
1307 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
1308 ULONG NextEntryOffset;
1309 ULONG FileIndex;
1310 LARGE_INTEGER CreationTime;
1311 LARGE_INTEGER LastAccessTime;
1312 LARGE_INTEGER LastWriteTime;
1313 LARGE_INTEGER ChangeTime;
1314 LARGE_INTEGER EndOfFile;
1315 LARGE_INTEGER AllocationSize;
1316 ULONG FileAttributes;
1317 ULONG FileNameLength;
1318 ULONG EaSize;
1319 WCHAR FileName[ANYSIZE_ARRAY];
1320 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
1321 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
1322
1323 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
1324 ULONG NextEntryOffset;
1325 ULONG FileIndex;
1326 LARGE_INTEGER CreationTime;
1327 LARGE_INTEGER LastAccessTime;
1328 LARGE_INTEGER LastWriteTime;
1329 LARGE_INTEGER ChangeTime;
1330 LARGE_INTEGER EndOfFile;
1331 LARGE_INTEGER AllocationSize;
1332 ULONG FileAttributes;
1333 ULONG FileNameLength;
1334 ULONG EaSize;
1335 LARGE_INTEGER FileId;
1336 WCHAR FileName[ANYSIZE_ARRAY];
1337 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
1338
1339 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
1340 ULONG NextEntryOffset;
1341 ULONG FileIndex;
1342 LARGE_INTEGER CreationTime;
1343 LARGE_INTEGER LastAccessTime;
1344 LARGE_INTEGER LastWriteTime;
1345 LARGE_INTEGER ChangeTime;
1346 LARGE_INTEGER EndOfFile;
1347 LARGE_INTEGER AllocationSize;
1348 ULONG FileAttributes;
1349 ULONG FileNameLength;
1350 ULONG EaSize;
1351 CHAR ShortNameLength;
1352 WCHAR ShortName[12];
1353 WCHAR FileName[ANYSIZE_ARRAY];
1354 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
1355 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
1356
1357 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
1358 ULONG NextEntryOffset;
1359 ULONG FileIndex;
1360 LARGE_INTEGER CreationTime;
1361 LARGE_INTEGER LastAccessTime;
1362 LARGE_INTEGER LastWriteTime;
1363 LARGE_INTEGER ChangeTime;
1364 LARGE_INTEGER EndOfFile;
1365 LARGE_INTEGER AllocationSize;
1366 ULONG FileAttributes;
1367 ULONG FileNameLength;
1368 ULONG EaSize;
1369 CHAR ShortNameLength;
1370 WCHAR ShortName[12];
1371 LARGE_INTEGER FileId;
1372 WCHAR FileName[ANYSIZE_ARRAY];
1373 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
1374
1375 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
1376 ULONG NextEntryOffset;
1377 ULONG FileIndex;
1378 LARGE_INTEGER CreationTime;
1379 LARGE_INTEGER LastAccessTime;
1380 LARGE_INTEGER LastWriteTime;
1381 LARGE_INTEGER ChangeTime;
1382 LARGE_INTEGER EndOfFile;
1383 LARGE_INTEGER AllocationSize;
1384 ULONG FileAttributes;
1385 ULONG FileNameLength;
1386 LARGE_INTEGER FileId;
1387 GUID LockingTransactionId;
1388 ULONG TxInfoFlags;
1389 WCHAR FileName[ANYSIZE_ARRAY];
1390 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
1391
1392 typedef struct _FILE_BASIC_INFORMATION {
1393 LARGE_INTEGER CreationTime;
1394 LARGE_INTEGER LastAccessTime;
1395 LARGE_INTEGER LastWriteTime;
1396 LARGE_INTEGER ChangeTime;
1397 ULONG FileAttributes;
1398 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
1399
1400 typedef struct _FILE_STANDARD_INFORMATION {
1401 LARGE_INTEGER AllocationSize;
1402 LARGE_INTEGER EndOfFile;
1403 ULONG NumberOfLinks;
1404 BOOLEAN DeletePending;
1405 BOOLEAN Directory;
1406 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
1407
1408 typedef struct _FILE_INTERNAL_INFORMATION {
1409 LARGE_INTEGER IndexNumber;
1410 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
1411
1412 typedef struct _FILE_ID_128 {
1413 UCHAR Identifier[16];
1414 } FILE_ID_128, *PFILE_ID_128;
1415
1416 typedef struct _FILE_ID_INFORMATION {
1417 ULONGLONG VolumeSerialNumber;
1418 FILE_ID_128 FileId;
1419 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
1420
1421 typedef struct _FILE_EA_INFORMATION {
1422 ULONG EaSize;
1423 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
1424
1425 typedef struct _FILE_ACCESS_INFORMATION {
1426 ACCESS_MASK AccessFlags;
1427 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
1428
1429 typedef struct _FILE_NAME_INFORMATION {
1430 ULONG FileNameLength;
1431 WCHAR FileName[1];
1432 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
1433
1434 typedef struct _FILE_RENAME_INFORMATION {
1435 BOOLEAN ReplaceIfExists;
1436 HANDLE RootDirectory;
1437 ULONG FileNameLength;
1438 WCHAR FileName[1];
1439 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
1440
1441 typedef struct _FILE_LINK_INFORMATION {
1442 BOOLEAN ReplaceIfExists;
1443 HANDLE RootDirectory;
1444 ULONG FileNameLength;
1445 WCHAR FileName[1];
1446 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
1447
1448 typedef struct _FILE_NAMES_INFORMATION {
1449 ULONG NextEntryOffset;
1450 ULONG FileIndex;
1451 ULONG FileNameLength;
1452 WCHAR FileName[1];
1453 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
1454
1455 typedef struct _FILE_DISPOSITION_INFORMATION {
1456 BOOLEAN DoDeleteFile;
1457 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
1458
1459 typedef struct _FILE_DISPOSITION_INFORMATION_EX {
1460 ULONG Flags;
1461 } FILE_DISPOSITION_INFORMATION_EX, *PFILE_DISPOSITION_INFORMATION_EX;
1462
1463 #define FILE_DISPOSITION_DO_NOT_DELETE 0x00000000
1464 #define FILE_DISPOSITION_DELETE 0x00000001
1465 #define FILE_DISPOSITION_POSIX_SEMANTICS 0x00000002
1466 #define FILE_DISPOSITION_FORCE_IMAGE_SECTION_CHECK 0x00000004
1467 #define FILE_DISPOSITION_ON_CLOSE 0x00000008
1468 #define FILE_DISPOSITION_IGNORE_READONLY_ATTRIBUTE 0x00000010
1469
1470 typedef struct _FILE_POSITION_INFORMATION {
1471 LARGE_INTEGER CurrentByteOffset;
1472 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
1473
1474 typedef struct _FILE_ALIGNMENT_INFORMATION {
1475 ULONG AlignmentRequirement;
1476 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
1477
1478 typedef struct _FILE_ALLOCATION_INFORMATION {
1479 LARGE_INTEGER AllocationSize;
1480 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
1481
1482 typedef struct _FILE_END_OF_FILE_INFORMATION {
1483 LARGE_INTEGER EndOfFile;
1484 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
1485
1486 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
1487 LARGE_INTEGER CreationTime;
1488 LARGE_INTEGER LastAccessTime;
1489 LARGE_INTEGER LastWriteTime;
1490 LARGE_INTEGER ChangeTime;
1491 LARGE_INTEGER AllocationSize;
1492 LARGE_INTEGER EndOfFile;
1493 ULONG FileAttributes;
1494 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
1495
1496 typedef struct _FILE_FULL_EA_INFORMATION {
1497 ULONG NextEntryOffset;
1498 UCHAR Flags;
1499 UCHAR EaNameLength;
1500 USHORT EaValueLength;
1501 CHAR EaName[1];
1502 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
1503
1504 typedef struct _FILE_MODE_INFORMATION {
1505 ULONG Mode;
1506 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
1507
1508 typedef struct _FILE_STREAM_INFORMATION
1509 {
1510 ULONG NextEntryOffset;
1511 ULONG StreamNameLength;
1512 LARGE_INTEGER StreamSize;
1513 LARGE_INTEGER StreamAllocationSize;
1514 WCHAR StreamName[1];
1515 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
1516
1517 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
1518 {
1519 ULONG FileAttributes;
1520 ULONG ReparseTag;
1521 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
1522
1523 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
1524 ULONG MaximumMessageSize;
1525 ULONG MailslotQuota;
1526 ULONG NextMessageSize;
1527 ULONG MessagesAvailable;
1528 LARGE_INTEGER ReadTimeout;
1529 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
1530
1531 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
1532 LARGE_INTEGER ReadTimeout;
1533 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
1534
1535 typedef struct _FILE_PIPE_INFORMATION {
1536 ULONG ReadMode;
1537 ULONG CompletionMode;
1538 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
1539
1540 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
1541 ULONG NamedPipeType;
1542 ULONG NamedPipeConfiguration;
1543 ULONG MaximumInstances;
1544 ULONG CurrentInstances;
1545 ULONG InboundQuota;
1546 ULONG ReadDataAvailable;
1547 ULONG OutboundQuota;
1548 ULONG WriteQuotaAvailable;
1549 ULONG NamedPipeState;
1550 ULONG NamedPipeEnd;
1551 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
1552
1553 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1554 #define FILE_PIPE_LISTENING_STATE 0x00000002
1555 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1556 #define FILE_PIPE_CLOSING_STATE 0x00000004
1557
1558 typedef struct _FILE_OBJECTID_BUFFER
1559 {
1560 BYTE ObjectId[16];
1561 union
1562 {
1563 struct
1564 {
1565 BYTE BirthVolumeId[16];
1566 BYTE BirthObjectId[16];
1567 BYTE DomainId[16];
1568 } DUMMYSTRUCTNAME;
1569 BYTE ExtendedInfo[48];
1570 } DUMMYUNIONNAME;
1571 } FILE_OBJECTID_BUFFER, *PFILE_OBJECTID_BUFFER;
1572
1573 typedef struct _FILE_OBJECTID_INFORMATION {
1574 LONGLONG FileReference;
1575 UCHAR ObjectId[16];
1576 union {
1577 struct {
1578 UCHAR BirthVolumeId[16];
1579 UCHAR BirthObjectId[16];
1580 UCHAR DomainId[16];
1581 } DUMMYSTRUCTNAME;
1582 UCHAR ExtendedInfo[48];
1583 } DUMMYUNIONNAME;
1584 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
1585
1586 typedef struct _FILE_QUOTA_INFORMATION {
1587 ULONG NextEntryOffset;
1588 ULONG SidLength;
1589 LARGE_INTEGER ChangeTime;
1590 LARGE_INTEGER QuotaUsed;
1591 LARGE_INTEGER QuotaThreshold;
1592 LARGE_INTEGER QuotaLimit;
1593 SID Sid;
1594 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
1595
1596 typedef struct _FILE_REPARSE_POINT_INFORMATION {
1597 LONGLONG FileReference;
1598 ULONG Tag;
1599 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
1600
1601 typedef struct _FILE_ALL_INFORMATION {
1602 FILE_BASIC_INFORMATION BasicInformation;
1603 FILE_STANDARD_INFORMATION StandardInformation;
1604 FILE_INTERNAL_INFORMATION InternalInformation;
1605 FILE_EA_INFORMATION EaInformation;
1606 FILE_ACCESS_INFORMATION AccessInformation;
1607 FILE_POSITION_INFORMATION PositionInformation;
1608 FILE_MODE_INFORMATION ModeInformation;
1609 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
1610 FILE_NAME_INFORMATION NameInformation;
1611 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
1612
1613 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
1614 ULONG Flags;
1615 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
1616
1617 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1618 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1619 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1620
1621 typedef struct _PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
1622 {
1623 ULONG Version;
1624 ULONG Reserved;
1625 VOID *Callback;
1626 } PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION, *PPROCESS_INSTRUMENTATION_CALLBACK_INFORMATION;
1627
1628 typedef enum _FSINFOCLASS {
1629 FileFsVolumeInformation = 1,
1630 FileFsLabelInformation,
1631 FileFsSizeInformation,
1632 FileFsDeviceInformation,
1633 FileFsAttributeInformation,
1634 FileFsControlInformation,
1635 FileFsFullSizeInformation,
1636 FileFsObjectIdInformation,
1637 FileFsDriverPathInformation,
1638 FileFsVolumeFlagsInformation,
1639 FileFsSectorSizeInformation,
1640 FileFsDataCopyInformation,
1641 FileFsMetadataSizeInformation,
1642 FileFsFullSizeInformationEx,
1643 FileFsMaximumInformation
1644 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
1645
1646 typedef enum _KEY_INFORMATION_CLASS {
1647 KeyBasicInformation,
1648 KeyNodeInformation,
1649 KeyFullInformation,
1650 KeyNameInformation,
1651 KeyCachedInformation,
1652 KeyFlagsInformation,
1653 KeyVirtualizationInformation,
1654 KeyHandleTagsInformation,
1655 KeyTrustInformation,
1656 KeyLayerInformation,
1657 MaxKeyInfoClass
1658 } KEY_INFORMATION_CLASS;
1659
1660 typedef enum _KEY_VALUE_INFORMATION_CLASS {
1661 KeyValueBasicInformation,
1662 KeyValueFullInformation,
1663 KeyValuePartialInformation,
1664 KeyValueFullInformationAlign64,
1665 KeyValuePartialInformationAlign64,
1666 KeyValueLayerInformation,
1667 } KEY_VALUE_INFORMATION_CLASS;
1668
1669 typedef enum _OBJECT_INFORMATION_CLASS {
1670 ObjectBasicInformation,
1671 ObjectNameInformation,
1672 ObjectTypeInformation,
1673 ObjectTypesInformation,
1674 ObjectHandleFlagInformation,
1675 ObjectSessionInformation,
1676 ObjectSessionObjectInformation,
1677 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
1678
1679 typedef enum _PROCESSINFOCLASS {
1680 ProcessBasicInformation = 0,
1681 ProcessQuotaLimits = 1,
1682 ProcessIoCounters = 2,
1683 ProcessVmCounters = 3,
1684 ProcessTimes = 4,
1685 ProcessBasePriority = 5,
1686 ProcessRaisePriority = 6,
1687 ProcessDebugPort = 7,
1688 ProcessExceptionPort = 8,
1689 ProcessAccessToken = 9,
1690 ProcessLdtInformation = 10,
1691 ProcessLdtSize = 11,
1692 ProcessDefaultHardErrorMode = 12,
1693 ProcessIoPortHandlers = 13,
1694 ProcessPooledUsageAndLimits = 14,
1695 ProcessWorkingSetWatch = 15,
1696 ProcessUserModeIOPL = 16,
1697 ProcessEnableAlignmentFaultFixup = 17,
1698 ProcessPriorityClass = 18,
1699 ProcessWx86Information = 19,
1700 ProcessHandleCount = 20,
1701 ProcessAffinityMask = 21,
1702 ProcessPriorityBoost = 22,
1703 ProcessDeviceMap = 23,
1704 ProcessSessionInformation = 24,
1705 ProcessForegroundInformation = 25,
1706 ProcessWow64Information = 26,
1707 ProcessImageFileName = 27,
1708 ProcessLUIDDeviceMapsEnabled = 28,
1709 ProcessBreakOnTermination = 29,
1710 ProcessDebugObjectHandle = 30,
1711 ProcessDebugFlags = 31,
1712 ProcessHandleTracing = 32,
1713 ProcessIoPriority = 33,
1714 ProcessExecuteFlags = 34,
1715 ProcessTlsInformation = 35,
1716 ProcessCookie = 36,
1717 ProcessImageInformation = 37,
1718 ProcessCycleTime = 38,
1719 ProcessPagePriority = 39,
1720 ProcessInstrumentationCallback = 40,
1721 ProcessThreadStackAllocation = 41,
1722 ProcessWorkingSetWatchEx = 42,
1723 ProcessImageFileNameWin32 = 43,
1724 ProcessImageFileMapping = 44,
1725 ProcessAffinityUpdateMode = 45,
1726 ProcessMemoryAllocationMode = 46,
1727 ProcessGroupInformation = 47,
1728 ProcessTokenVirtualizationEnabled = 48,
1729 ProcessConsoleHostProcess = 49,
1730 ProcessWindowInformation = 50,
1731 ProcessHandleInformation = 51,
1732 ProcessMitigationPolicy = 52,
1733 ProcessDynamicFunctionTableInformation = 53,
1734 ProcessHandleCheckingMode = 54,
1735 ProcessKeepAliveCount = 55,
1736 ProcessRevokeFileHandles = 56,
1737 ProcessWorkingSetControl = 57,
1738 ProcessHandleTable = 58,
1739 ProcessCheckStackExtentsMode = 59,
1740 ProcessCommandLineInformation = 60,
1741 ProcessProtectionInformation = 61,
1742 ProcessMemoryExhaustion = 62,
1743 ProcessFaultInformation = 63,
1744 ProcessTelemetryIdInformation = 64,
1745 ProcessCommitReleaseInformation = 65,
1746 ProcessDefaultCpuSetsInformation = 66,
1747 ProcessAllowedCpuSetsInformation = 67,
1748 ProcessSubsystemProcess = 68,
1749 ProcessJobMemoryInformation = 69,
1750 ProcessInPrivate = 70,
1751 ProcessRaiseUMExceptionOnInvalidHandleClose = 71,
1752 ProcessIumChallengeResponse = 72,
1753 ProcessChildProcessInformation = 73,
1754 ProcessHighGraphicsPriorityInformation = 74,
1755 ProcessSubsystemInformation = 75,
1756 ProcessEnergyValues = 76,
1757 ProcessPowerThrottlingState = 77,
1758 ProcessReserved3Information = 78,
1759 ProcessWin32kSyscallFilterInformation = 79,
1760 ProcessDisableSystemAllowedCpuSets = 80,
1761 ProcessWakeInformation = 81,
1762 ProcessEnergyTrackingState = 82,
1763 ProcessManageWritesToExecutableMemory = 83,
1764 ProcessCaptureTrustletLiveDump = 84,
1765 ProcessTelemetryCoverage = 85,
1766 ProcessEnclaveInformation = 86,
1767 ProcessEnableReadWriteVmLogging = 87,
1768 ProcessUptimeInformation = 88,
1769 ProcessImageSection = 89,
1770 ProcessDebugAuthInformation = 90,
1771 ProcessSystemResourceManagement = 91,
1772 ProcessSequenceNumber = 92,
1773 ProcessLoaderDetour = 93,
1774 ProcessSecurityDomainInformation = 94,
1775 ProcessCombineSecurityDomainsInformation = 95,
1776 ProcessEnableLogging = 96,
1777 ProcessLeapSecondInformation = 97,
1778 ProcessFiberShadowStackAllocation = 98,
1779 ProcessFreeFiberShadowStackAllocation = 99,
1780 ProcessAltSystemCallInformation = 100,
1781 ProcessDynamicEHContinuationTargets = 101,
1782 ProcessDynamicEnforcedCetCompatibleRanges = 102,
1783 ProcessCreateStateChange = 103,
1784 ProcessApplyStateChange = 104,
1785 ProcessEnableOptionalXStateFeatures = 105,
1786 ProcessAltPrefetchParam = 106,
1787 ProcessAssignCpuPartitions = 107,
1788 ProcessPriorityClassEx = 108,
1789 ProcessMembershipInformation = 109,
1790 ProcessEffectiveIoPriority = 110,
1791 ProcessEffectivePagePriority = 111,
1792 MaxProcessInfoClass,
1793 #ifdef __WINESRC__
1794 ProcessWineMakeProcessSystem = 1000,
1795 ProcessWineLdtCopy,
1796 #endif
1797 } PROCESSINFOCLASS;
1798
1799 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1800 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1801 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1802 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1803
1804 typedef enum _SECTION_INHERIT {
1805 ViewShare = 1,
1806 ViewUnmap = 2
1807 } SECTION_INHERIT;
1808
1809 typedef enum _SYSTEM_INFORMATION_CLASS {
1810 SystemBasicInformation = 0,
1811 SystemCpuInformation = 1,
1812 SystemPerformanceInformation = 2,
1813 SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
1814 SystemPathInformation = 4,
1815 SystemProcessInformation = 5,
1816 SystemCallCountInformation = 6,
1817 SystemDeviceInformation = 7,
1818 SystemProcessorPerformanceInformation = 8,
1819 SystemFlagsInformation = 9,
1820 SystemCallTimeInformation = 10,
1821 SystemModuleInformation = 11,
1822 SystemLocksInformation = 12,
1823 SystemStackTraceInformation = 13,
1824 SystemPagedPoolInformation = 14,
1825 SystemNonPagedPoolInformation = 15,
1826 SystemHandleInformation = 16,
1827 SystemObjectInformation = 17,
1828 SystemPageFileInformation = 18,
1829 SystemVdmInstemulInformation = 19,
1830 SystemVdmBopInformation = 20,
1831 SystemFileCacheInformation = 21,
1832 SystemPoolTagInformation = 22,
1833 SystemInterruptInformation = 23,
1834 SystemDpcBehaviorInformation = 24,
1835 SystemFullMemoryInformation = 25,
1836 SystemNotImplemented6 = 25,
1837 SystemLoadGdiDriverInformation = 26,
1838 SystemUnloadGdiDriverInformation = 27,
1839 SystemTimeAdjustmentInformation = 28,
1840 SystemTimeAdjustment = 28,
1841 SystemSummaryMemoryInformation = 29,
1842 SystemMirrorMemoryInformation = 30,
1843 SystemPerformanceTraceInformation = 31,
1844 SystemObsolete0 = 32,
1845 SystemExceptionInformation = 33,
1846 SystemCrashDumpStateInformation = 34,
1847 SystemKernelDebuggerInformation = 35,
1848 SystemContextSwitchInformation = 36,
1849 SystemRegistryQuotaInformation = 37,
1850 SystemExtendServiceTableInformation = 38,
1851 SystemPrioritySeparation = 39,
1852 SystemVerifierAddDriverInformation = 40,
1853 SystemVerifierRemoveDriverInformation = 41,
1854 SystemProcessorIdleInformation = 42,
1855 SystemLegacyDriverInformation = 43,
1856 SystemCurrentTimeZoneInformation = 44,
1857 SystemLookasideInformation = 45,
1858 SystemTimeSlipNotification = 46,
1859 SystemSessionCreate = 47,
1860 SystemSessionDetach = 48,
1861 SystemSessionInformation = 49,
1862 SystemRangeStartInformation = 50,
1863 SystemVerifierInformation = 51,
1864 SystemVerifierThunkExtend = 52,
1865 SystemSessionProcessesInformation = 53,
1866 SystemLoadGdiDriverInSystemSpace = 54,
1867 SystemNumaProcessorMap = 55,
1868 SystemPrefetcherInformation = 56,
1869 SystemExtendedProcessInformation = 57,
1870 SystemRecommendedSharedDataAlignment = 58,
1871 SystemComPlusPackage = 59,
1872 SystemNumaAvailableMemory = 60,
1873 SystemProcessorPowerInformation = 61,
1874 SystemEmulationBasicInformation = 62,
1875 SystemEmulationProcessorInformation = 63,
1876 SystemExtendedHandleInformation = 64,
1877 SystemLostDelayedWriteInformation = 65,
1878 SystemBigPoolInformation = 66,
1879 SystemSessionPoolTagInformation = 67,
1880 SystemSessionMappedViewInformation = 68,
1881 SystemHotpatchInformation = 69,
1882 SystemObjectSecurityMode = 70,
1883 SystemWatchdogTimerHandler = 71,
1884 SystemWatchdogTimerInformation = 72,
1885 SystemLogicalProcessorInformation = 73,
1886 SystemWow64SharedInformationObsolete = 74,
1887 SystemRegisterFirmwareTableInformationHandler = 75,
1888 SystemFirmwareTableInformation = 76,
1889 SystemModuleInformationEx = 77,
1890 SystemVerifierTriageInformation = 78,
1891 SystemSuperfetchInformation = 79,
1892 SystemMemoryListInformation = 80,
1893 SystemFileCacheInformationEx = 81,
1894 SystemThreadPriorityClientIdInformation = 82,
1895 SystemProcessorIdleCycleTimeInformation = 83,
1896 SystemVerifierCancellationInformation = 84,
1897 SystemProcessorPowerInformationEx = 85,
1898 SystemRefTraceInformation = 86,
1899 SystemSpecialPoolInformation = 87,
1900 SystemProcessIdInformation = 88,
1901 SystemErrorPortInformation = 89,
1902 SystemBootEnvironmentInformation = 90,
1903 SystemHypervisorInformation = 91,
1904 SystemVerifierInformationEx = 92,
1905 SystemTimeZoneInformation = 93,
1906 SystemImageFileExecutionOptionsInformation = 94,
1907 SystemCoverageInformation = 95,
1908 SystemPrefetchPatchInformation = 96,
1909 SystemVerifierFaultsInformation = 97,
1910 SystemSystemPartitionInformation = 98,
1911 SystemSystemDiskInformation = 99,
1912 SystemProcessorPerformanceDistribution = 100,
1913 SystemNumaProximityNodeInformation = 101,
1914 SystemDynamicTimeZoneInformation = 102,
1915 SystemCodeIntegrityInformation = 103,
1916 SystemProcessorMicrocodeUpdateInformation = 104,
1917 SystemProcessorBrandString = 105,
1918 SystemVirtualAddressInformation = 106,
1919 SystemLogicalProcessorInformationEx = 107,
1920 SystemProcessorCycleTimeInformation = 108,
1921 SystemStoreInformation = 109,
1922 SystemRegistryAppendString = 110,
1923 SystemAitSamplingValue = 111,
1924 SystemVhdBootInformation = 112,
1925 SystemCpuQuotaInformation = 113,
1926 SystemNativeBasicInformation = 114,
1927 SystemErrorPortTimeouts = 115,
1928 SystemLowPriorityIoInformation = 116,
1929 SystemTpmBootEntropyInformation = 117,
1930 SystemVerifierCountersInformation = 118,
1931 SystemPagedPoolInformationEx = 119,
1932 SystemSystemPtesInformationEx = 120,
1933 SystemNodeDistanceInformation = 121,
1934 SystemAcpiAuditInformation = 122,
1935 SystemBasicPerformanceInformation = 123,
1936 SystemQueryPerformanceCounterInformation = 124,
1937 SystemSessionBigPoolInformation = 125,
1938 SystemBootGraphicsInformation = 126,
1939 SystemScrubPhysicalMemoryInformation = 127,
1940 SystemBadPageInformation = 128,
1941 SystemProcessorProfileControlArea = 129,
1942 SystemCombinePhysicalMemoryInformation = 130,
1943 SystemEntropyInterruptTimingInformation = 131,
1944 SystemConsoleInformation = 132,
1945 SystemPlatformBinaryInformation = 133,
1946 SystemPolicyInformation = 134,
1947 SystemHypervisorProcessorCountInformation = 135,
1948 SystemDeviceDataInformation = 136,
1949 SystemDeviceDataEnumerationInformation = 137,
1950 SystemMemoryTopologyInformation = 138,
1951 SystemMemoryChannelInformation = 139,
1952 SystemBootLogoInformation = 140,
1953 SystemProcessorPerformanceInformationEx = 141,
1954 SystemCriticalProcessErrorLogInformation = 142,
1955 SystemSecureBootPolicyInformation = 143,
1956 SystemPageFileInformationEx = 144,
1957 SystemSecureBootInformation = 145,
1958 SystemEntropyInterruptTimingRawInformation = 146,
1959 SystemPortableWorkspaceEfiLauncherInformation = 147,
1960 SystemFullProcessInformation = 148,
1961 SystemKernelDebuggerInformationEx = 149,
1962 SystemBootMetadataInformation = 150,
1963 SystemSoftRebootInformation = 151,
1964 SystemElamCertificateInformation = 152,
1965 SystemOfflineDumpConfigInformation = 153,
1966 SystemProcessorFeaturesInformation = 154,
1967 SystemRegistryReconciliationInformation = 155,
1968 SystemEdidInformation = 156,
1969 SystemManufacturingInformation = 157,
1970 SystemEnergyEstimationConfigInformation = 158,
1971 SystemHypervisorDetailInformation = 159,
1972 SystemProcessorCycleStatsInformation = 160,
1973 SystemVmGenerationCountInformation = 161,
1974 SystemTrustedPlatformModuleInformation = 162,
1975 SystemKernelDebuggerFlags = 163,
1976 SystemCodeIntegrityPolicyInformation = 164,
1977 SystemIsolatedUserModeInformation = 165,
1978 SystemHardwareSecurityTestInterfaceResultsInformation = 166,
1979 SystemSingleModuleInformation = 167,
1980 SystemAllowedCpuSetsInformation = 168,
1981 SystemVsmProtectionInformation = 169,
1982 SystemInterruptCpuSetsInformation = 170,
1983 SystemSecureBootPolicyFullInformation = 171,
1984 SystemCodeIntegrityPolicyFullInformation = 172,
1985 SystemAffinitizedInterruptProcessorInformation = 173,
1986 SystemRootSiloInformation = 174,
1987 SystemCpuSetInformation = 175,
1988 SystemCpuSetTagInformation = 176,
1989 SystemWin32WerStartCallout = 177,
1990 SystemSecureKernelProfileInformation = 178,
1991 SystemCodeIntegrityPlatformManifestInformation = 179,
1992 SystemInterruptSteeringInformation = 180,
1993 SystemSupportedProcessorArchitectures = 181,
1994 SystemMemoryUsageInformation = 182,
1995 SystemCodeIntegrityCertificateInformation = 183,
1996 SystemPhysicalMemoryInformation = 184,
1997 SystemControlFlowTransition = 185,
1998 SystemKernelDebuggingAllowed = 186,
1999 SystemActivityModerationExeState = 187,
2000 SystemActivityModerationUserSettings = 188,
2001 SystemCodeIntegrityPoliciesFullInformation = 189,
2002 SystemCodeIntegrityUnlockInformation = 190,
2003 SystemIntegrityQuotaInformation = 191,
2004 SystemFlushInformation = 192,
2005 SystemProcessorIdleMaskInformation = 193,
2006 SystemSecureDumpEncryptionInformation = 194,
2007 SystemWriteConstraintInformation = 195,
2008 SystemKernelVaShadowInformation = 196,
2009 SystemHypervisorSharedPageInformation = 197,
2010 SystemFirmwareBootPerformanceInformation = 198,
2011 SystemCodeIntegrityVerificationInformation = 199,
2012 SystemFirmwarePartitionInformation = 200,
2013 SystemSpeculationControlInformation = 201,
2014 SystemDmaGuardPolicyInformation = 202,
2015 SystemEnclaveLaunchControlInformation = 203,
2016 SystemWorkloadAllowedCpuSetsInformation = 204,
2017 SystemCodeIntegrityUnlockModeInformation = 205,
2018 SystemLeapSecondInformation = 206,
2019 SystemFlags2Information = 207,
2020 SystemSecurityModelInformation = 208,
2021 SystemCodeIntegritySyntheticCacheInformation = 209,
2022 SystemFeatureConfigurationInformation = 210,
2023 SystemFeatureConfigurationSectionInformation = 211,
2024 SystemFeatureUsageSubscriptionInformation = 212,
2025 SystemSecureSpeculationControlInformation = 213,
2026 SystemSpacesBootInformation = 214,
2027 SystemFwRamdiskInformation = 215,
2028 SystemWheaIpmiHardwareInformation = 216,
2029 SystemDifSetRuleClassInformation = 217,
2030 SystemDifClearRuleClassInformation = 218,
2031 SystemDifApplyPluginVerificationOnDriver = 219,
2032 SystemDifRemovePluginVerificationOnDriver = 220,
2033 SystemShadowStackInformation = 221,
2034 SystemBuildVersionInformation = 222,
2035 SystemPoolLimitInformation = 223,
2036 SystemCodeIntegrityAddDynamicStore = 224,
2037 SystemCodeIntegrityClearDynamicStores = 225,
2038 SystemDifPoolTrackingInformation = 226,
2039 SystemPoolZeroingInformation = 227,
2040 SystemDpcWatchdogInformation = 228,
2041 SystemDpcWatchdogInformation2 = 229,
2042 SystemSupportedProcessorArchitectures2 = 230,
2043 SystemSingleProcessorRelationshipInformation = 231,
2044 SystemXfgCheckFailureInformation = 232,
2045 SystemIommuStateInformation = 233,
2046 SystemHypervisorMinrootInformation = 234,
2047 SystemHypervisorBootPagesInformation = 235,
2048 SystemPointerAuthInformation = 236,
2049 SystemSecureKernelDebuggerInformation = 237,
2050 SystemOriginalImageFeatureInformation = 238,
2051 #ifdef __WINESRC__
2052 SystemWineVersionInformation = 1000,
2053 #endif
2054 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
2055
2056 typedef struct _SYSTEM_CODEINTEGRITY_INFORMATION
2057 {
2058 ULONG Length;
2059 ULONG CodeIntegrityOptions;
2060 } SYSTEM_CODEINTEGRITY_INFORMATION, *PSYSTEM_CODEINTEGRITY_INFORMATION;
2061
2062 #define CODEINTEGRITY_OPTION_ENABLED 0x0001
2063 #define CODEINTEGRITY_OPTION_TESTSIGN 0x0002
2064 #define CODEINTEGRITY_OPTION_UMCI_ENABLED 0x0004
2065 #define CODEINTEGRITY_OPTION_UMCI_AUDITMODE_ENABLED 0x0008
2066 #define CODEINTEGRITY_OPTION_UMCI_EXCLUSIONPATHS_ENABLED 0x0010
2067 #define CODEINTEGRITY_OPTION_TEST_BUILD 0x0020
2068 #define CODEINTEGRITY_OPTION_PREPRODUCTION_BUILD 0x0040
2069 #define CODEINTEGRITY_OPTION_DEBUGMODE_ENABLED 0x0080
2070 #define CODEINTEGRITY_OPTION_FLIGHT_BUILD 0x0100
2071 #define CODEINTEGRITY_OPTION_FLIGHTING_ENABLED 0x0200
2072 #define CODEINTEGRITY_OPTION_HVCI_KMCI_ENABLED 0x0400
2073 #define CODEINTEGRITY_OPTION_HVCI_KMCI_AUDITMODE_ENABLED 0x0800
2074 #define CODEINTEGRITY_OPTION_HVCI_KMCI_STRICTMODE_ENABLED 0x1000
2075 #define CODEINTEGRITY_OPTION_HVCI_IUM_ENABLED 0x2000
2076
2077 typedef enum _THREADINFOCLASS {
2078 ThreadBasicInformation = 0,
2079 ThreadTimes,
2080 ThreadPriority,
2081 ThreadBasePriority,
2082 ThreadAffinityMask,
2083 ThreadImpersonationToken,
2084 ThreadDescriptorTableEntry,
2085 ThreadEnableAlignmentFaultFixup,
2086 ThreadEventPair_Reusable,
2087 ThreadQuerySetWin32StartAddress,
2088 ThreadZeroTlsCell,
2089 ThreadPerformanceCount,
2090 ThreadAmILastThread,
2091 ThreadIdealProcessor,
2092 ThreadPriorityBoost,
2093 ThreadSetTlsArrayAddress,
2094 ThreadIsIoPending,
2095 ThreadHideFromDebugger,
2096 ThreadBreakOnTermination,
2097 ThreadSwitchLegacyState,
2098 ThreadIsTerminated,
2099 ThreadLastSystemCall,
2100 ThreadIoPriority,
2101 ThreadCycleTime,
2102 ThreadPagePriority,
2103 ThreadActualBasePriority,
2104 ThreadTebInformation,
2105 ThreadCSwitchMon,
2106 ThreadCSwitchPmu,
2107 ThreadWow64Context,
2108 ThreadGroupInformation,
2109 ThreadUmsInformation,
2110 ThreadCounterProfiling,
2111 ThreadIdealProcessorEx,
2112 ThreadCpuAccountingInformation,
2113 ThreadSuspendCount,
2114 ThreadHeterogeneousCpuPolicy,
2115 ThreadContainerId,
2116 ThreadNameInformation,
2117 ThreadSelectedCpuSets,
2118 ThreadSystemThreadInformation,
2119 ThreadActualGroupAffinity,
2120 ThreadDynamicCodePolicyInfo,
2121 ThreadExplicitCaseSensitivity,
2122 ThreadWorkOnBehalfTicket,
2123 ThreadSubsystemInformation,
2124 ThreadDbgkWerReportActive,
2125 ThreadAttachContainer,
2126 ThreadManageWritesToExecutableMemory,
2127 ThreadPowerThrottlingState,
2128 ThreadWorkloadClass,
2129 ThreadCreateStateChange,
2130 ThreadApplyStateChange,
2131 ThreadStrongerBadHandleChecks,
2132 ThreadEffectiveIoPriority,
2133 ThreadEffectivePagePriority,
2134 MaxThreadInfoClass,
2135 #ifdef __WINESRC__
2136 ThreadWineNativeThreadName = 1000,
2137 #endif
2138 } THREADINFOCLASS;
2139
2140 typedef struct _THREAD_BASIC_INFORMATION
2141 {
2142 NTSTATUS ExitStatus;
2143 PVOID TebBaseAddress;
2144 CLIENT_ID ClientId;
2145 ULONG_PTR AffinityMask;
2146 LONG Priority;
2147 LONG BasePriority;
2148 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
2149
2150 typedef struct _THREAD_DESCRIPTOR_INFORMATION
2151 {
2152 DWORD Selector;
2153 LDT_ENTRY Entry;
2154 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
2155
2156 typedef struct _THREAD_NAME_INFORMATION
2157 {
2158 UNICODE_STRING ThreadName;
2159 } THREAD_NAME_INFORMATION, *PTHREAD_NAME_INFORMATION;
2160
2161 typedef struct _KERNEL_USER_TIMES {
2162 LARGE_INTEGER CreateTime;
2163 LARGE_INTEGER ExitTime;
2164 LARGE_INTEGER KernelTime;
2165 LARGE_INTEGER UserTime;
2166 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
2167
2168 typedef enum _WINSTATIONINFOCLASS {
2169 WinStationInformation = 8
2170 } WINSTATIONINFOCLASS;
2171
2172 typedef enum _MEMORY_INFORMATION_CLASS {
2173 MemoryBasicInformation,
2174 MemoryWorkingSetInformation,
2175 MemoryMappedFilenameInformation,
2176 MemoryRegionInformation,
2177 MemoryWorkingSetExInformation,
2178 MemorySharedCommitInformation,
2179 MemoryImageInformation,
2180 MemoryRegionInformationEx,
2181 MemoryPrivilegedBasicInformation,
2182 MemoryEnclaveImageInformation,
2183 MemoryBasicInformationCapped,
2184 MemoryPhysicalContiguityInformation,
2185 MemoryBadInformation,
2186 MemoryBadInformationAllProcesses,
2187 #ifdef __WINESRC__
2188 MemoryWineUnixFuncs = 1000,
2189 MemoryWineUnixWow64Funcs,
2190 #endif
2191 } MEMORY_INFORMATION_CLASS;
2192
2193 typedef struct _MEMORY_SECTION_NAME
2194 {
2195 UNICODE_STRING SectionFileName;
2196 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
2197
2198 typedef union _MEMORY_WORKING_SET_EX_BLOCK {
2199 ULONG_PTR Flags;
2200 struct {
2201 ULONG_PTR Valid : 1;
2202 ULONG_PTR ShareCount : 3;
2203 ULONG_PTR Win32Protection : 11;
2204 ULONG_PTR Shared : 1;
2205 ULONG_PTR Node : 6;
2206 ULONG_PTR Locked : 1;
2207 ULONG_PTR LargePage : 1;
2208 } DUMMYSTRUCTNAME;
2209 } MEMORY_WORKING_SET_EX_BLOCK, *PMEMORY_WORKING_SET_EX_BLOCK;
2210
2211 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION {
2212 PVOID VirtualAddress;
2213 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes;
2214 } MEMORY_WORKING_SET_EX_INFORMATION, *PMEMORY_WORKING_SET_EX_INFORMATION;
2215
2216 typedef struct _MEMORY_REGION_INFORMATION
2217 {
2218 PVOID AllocationBase;
2219 ULONG AllocationProtect;
2220 union
2221 {
2222 ULONG RegionType;
2223 struct
2224 {
2225 ULONG Private : 1;
2226 ULONG MappedDataFile : 1;
2227 ULONG MappedImage : 1;
2228 ULONG MappedPageFile : 1;
2229 ULONG MappedPhysical : 1;
2230 ULONG DirectMapped : 1;
2231 ULONG Reserved : 26;
2232 } DUMMYSTRUCTNAME;
2233 } DUMMYUNIONNAME;
2234 SIZE_T RegionSize;
2235 SIZE_T CommitSize;
2236 ULONG_PTR PartitionId;
2237 ULONG_PTR NodePreference;
2238 } MEMORY_REGION_INFORMATION, *PMEMORY_REGION_INFORMATION;
2239
2240 typedef struct _MEMORY_IMAGE_INFORMATION
2241 {
2242 PVOID ImageBase;
2243 SIZE_T SizeOfImage;
2244 union
2245 {
2246 ULONG ImageFlags;
2247 struct
2248 {
2249 ULONG ImagePartialMap : 1;
2250 ULONG ImageNotExecutable : 1;
2251 ULONG ImageSigningLevel : 4;
2252 ULONG Reserved : 26;
2253 };
2254 };
2255 } MEMORY_IMAGE_INFORMATION, *PMEMORY_IMAGE_INFORMATION;
2256
2257 typedef enum _MUTANT_INFORMATION_CLASS
2258 {
2259 MutantBasicInformation
2260 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
2261
2262 typedef struct _MUTANT_BASIC_INFORMATION {
2263 LONG CurrentCount;
2264 BOOLEAN OwnedByCaller;
2265 BOOLEAN AbandonedState;
2266 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
2267
2268 typedef enum _TIMER_INFORMATION_CLASS
2269 {
2270 TimerBasicInformation = 0
2271 } TIMER_INFORMATION_CLASS;
2272
2273 typedef struct _TIMER_BASIC_INFORMATION
2274 {
2275 LARGE_INTEGER RemainingTime;
2276 BOOLEAN TimerState;
2277 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
2278
2279 typedef enum
2280 {
2281 VmPrefetchInformation,
2282 VmPagePriorityInformation,
2283 VmCfgCallTargetInformation,
2284 VmPageDirtyStateInformation,
2285 VmImageHotPatchInformation,
2286 VmPhysicalContiguityInformation,
2287 VmVirtualMachinePrepopulateInformation,
2288 VmRemoveFromWorkingSetInformation,
2289 } VIRTUAL_MEMORY_INFORMATION_CLASS, *PVIRTUAL_MEMORY_INFORMATION_CLASS;
2290
2291 typedef struct _MEMORY_RANGE_ENTRY
2292 {
2293 PVOID VirtualAddress;
2294 SIZE_T NumberOfBytes;
2295 } MEMORY_RANGE_ENTRY, *PMEMORY_RANGE_ENTRY;
2296
2297
2298 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
2299 typedef enum
2300 {
2301 INVALID_PATH = 0,
2302 UNC_PATH, /* "//foo" */
2303 ABSOLUTE_DRIVE_PATH, /* "c:/foo" */
2304 RELATIVE_DRIVE_PATH, /* "c:foo" */
2305 ABSOLUTE_PATH, /* "/foo" */
2306 RELATIVE_PATH, /* "foo" */
2307 DEVICE_PATH, /* "//./foo" */
2308 UNC_DOT_PATH /* "//." */
2309 } DOS_PATHNAME_TYPE;
2310
2311
2312 /***********************************************************************
2313 * Types and data structures
2314 */
2315
2316 /* This is used by NtQuerySystemInformation */
2317 typedef struct _SYSTEM_THREAD_INFORMATION
2318 { /* win32/win64 */
2319 LARGE_INTEGER KernelTime; /* 00/00 */
2320 LARGE_INTEGER UserTime; /* 08/08 */
2321 LARGE_INTEGER CreateTime; /* 10/10 */
2322 DWORD dwTickCount; /* 18/18 */
2323 LPVOID StartAddress; /* 1c/20 */
2324 CLIENT_ID ClientId; /* 20/28 */
2325 DWORD dwCurrentPriority; /* 28/38 */
2326 DWORD dwBasePriority; /* 2c/3c */
2327 DWORD dwContextSwitches; /* 30/40 */
2328 DWORD dwThreadState; /* 34/44 */
2329 DWORD dwWaitReason; /* 38/48 */
2330 DWORD dwUnknown; /* 3c/4c */
2331 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
2332
2333 typedef struct _SYSTEM_EXTENDED_THREAD_INFORMATION
2334 {
2335 SYSTEM_THREAD_INFORMATION ThreadInfo; /* 00/00 */
2336 void *StackBase; /* 40/50 */
2337 void *StackLimit; /* 44/58 */
2338 void *Win32StartAddress; /* 48/60 */
2339 void *TebBase; /* 4c/68 */
2340 ULONG_PTR Reserved2; /* 50/70 */
2341 ULONG_PTR Reserved3; /* 54/78 */
2342 ULONG_PTR Reserved4; /* 58/80 */
2343 } SYSTEM_EXTENDED_THREAD_INFORMATION, *PSYSTEM_EXTENDED_THREAD_INFORMATION;
2344
2345 typedef struct _IO_STATUS_BLOCK {
2346 union {
2347 NTSTATUS Status;
2348 PVOID Pointer;
2349 } DUMMYUNIONNAME;
2350
2351 ULONG_PTR Information;
2352 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
2353
2354 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
2355
2356 typedef struct _KEY_BASIC_INFORMATION {
2357 LARGE_INTEGER LastWriteTime;
2358 ULONG TitleIndex;
2359 ULONG NameLength;
2360 WCHAR Name[1];
2361 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
2362
2363 typedef struct _KEY_NODE_INFORMATION
2364 {
2365 LARGE_INTEGER LastWriteTime;
2366 ULONG TitleIndex;
2367 ULONG ClassOffset;
2368 ULONG ClassLength;
2369 ULONG NameLength;
2370 WCHAR Name[1];
2371 /* Class[1]; */
2372 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
2373
2374 typedef struct _KEY_FULL_INFORMATION
2375 {
2376 LARGE_INTEGER LastWriteTime;
2377 ULONG TitleIndex;
2378 ULONG ClassOffset;
2379 ULONG ClassLength;
2380 ULONG SubKeys;
2381 ULONG MaxNameLen;
2382 ULONG MaxClassLen;
2383 ULONG Values;
2384 ULONG MaxValueNameLen;
2385 ULONG MaxValueDataLen;
2386 WCHAR Class[1];
2387 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
2388
2389 typedef struct _KEY_NAME_INFORMATION {
2390 ULONG NameLength;
2391 WCHAR Name[1];
2392 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
2393
2394 typedef struct _KEY_CACHED_INFORMATION
2395 {
2396 LARGE_INTEGER LastWriteTime;
2397 ULONG TitleIndex;
2398 ULONG SubKeys;
2399 ULONG MaxNameLen;
2400 ULONG Values;
2401 ULONG MaxValueNameLen;
2402 ULONG MaxValueDataLen;
2403 ULONG NameLength;
2404 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
2405
2406 typedef struct _KEY_VALUE_ENTRY
2407 {
2408 PUNICODE_STRING ValueName;
2409 ULONG DataLength;
2410 ULONG DataOffset;
2411 ULONG Type;
2412 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
2413
2414 typedef struct _KEY_VALUE_BASIC_INFORMATION {
2415 ULONG TitleIndex;
2416 ULONG Type;
2417 ULONG NameLength;
2418 WCHAR Name[1];
2419 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
2420
2421 typedef struct _KEY_VALUE_FULL_INFORMATION {
2422 ULONG TitleIndex;
2423 ULONG Type;
2424 ULONG DataOffset;
2425 ULONG DataLength;
2426 ULONG NameLength;
2427 WCHAR Name[1];
2428 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
2429
2430 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
2431 ULONG TitleIndex;
2432 ULONG Type;
2433 ULONG DataLength;
2434 UCHAR Data[1];
2435 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
2436
2437 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
2438 #define __OBJECT_ATTRIBUTES_DEFINED__
2439 typedef struct _OBJECT_ATTRIBUTES {
2440 ULONG Length;
2441 HANDLE RootDirectory;
2442 PUNICODE_STRING ObjectName;
2443 ULONG Attributes;
2444 PVOID SecurityDescriptor; /* type SECURITY_DESCRIPTOR */
2445 PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
2446 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
2447 #endif
2448
2449 typedef struct _OBJECT_HANDLE_FLAG_INFORMATION {
2450 BOOLEAN Inherit;
2451 BOOLEAN ProtectFromClose;
2452 } OBJECT_HANDLE_FLAG_INFORMATION, *POBJECT_HANDLE_FLAG_INFORMATION;
2453
2454 typedef struct _OBJECT_BASIC_INFORMATION {
2455 ULONG Attributes;
2456 ACCESS_MASK GrantedAccess;
2457 ULONG HandleCount;
2458 ULONG PointerCount;
2459 ULONG PagedPoolUsage;
2460 ULONG NonPagedPoolUsage;
2461 ULONG Reserved[3];
2462 ULONG NameInformationLength;
2463 ULONG TypeInformationLength;
2464 ULONG SecurityDescriptorLength;
2465 LARGE_INTEGER CreateTime;
2466 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
2467
2468 typedef struct _OBJECT_NAME_INFORMATION {
2469 UNICODE_STRING Name;
2470 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
2471
2472 typedef struct __OBJECT_TYPE_INFORMATION {
2473 UNICODE_STRING TypeName;
2474 ULONG TotalNumberOfObjects;
2475 ULONG TotalNumberOfHandles;
2476 ULONG TotalPagedPoolUsage;
2477 ULONG TotalNonPagedPoolUsage;
2478 ULONG TotalNamePoolUsage;
2479 ULONG TotalHandleTableUsage;
2480 ULONG HighWaterNumberOfObjects;
2481 ULONG HighWaterNumberOfHandles;
2482 ULONG HighWaterPagedPoolUsage;
2483 ULONG HighWaterNonPagedPoolUsage;
2484 ULONG HighWaterNamePoolUsage;
2485 ULONG HighWaterHandleTableUsage;
2486 ULONG InvalidAttributes;
2487 GENERIC_MAPPING GenericMapping;
2488 ULONG ValidAccessMask;
2489 BOOLEAN SecurityRequired;
2490 BOOLEAN MaintainHandleCount;
2491 UCHAR TypeIndex;
2492 CHAR ReservedByte;
2493 ULONG PoolType;
2494 ULONG DefaultPagedPoolCharge;
2495 ULONG DefaultNonPagedPoolCharge;
2496 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
2497
2498 typedef struct _OBJECT_TYPES_INFORMATION
2499 {
2500 ULONG NumberOfTypes;
2501 } OBJECT_TYPES_INFORMATION, *POBJECT_TYPES_INFORMATION;
2502
2503 typedef struct _PROCESS_BASIC_INFORMATION {
2504 #ifdef __WINESRC__
2505 NTSTATUS ExitStatus;
2506 PEB *PebBaseAddress;
2507 ULONG_PTR AffinityMask;
2508 LONG BasePriority;
2509 ULONG_PTR UniqueProcessId;
2510 ULONG_PTR InheritedFromUniqueProcessId;
2511 #else
2512 PVOID Reserved1;
2513 PPEB PebBaseAddress;
2514 PVOID Reserved2[2];
2515 ULONG_PTR UniqueProcessId;
2516 PVOID Reserved3;
2517 #endif
2518 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
2519
2520 #define PROCESS_PRIOCLASS_IDLE 1
2521 #define PROCESS_PRIOCLASS_NORMAL 2
2522 #define PROCESS_PRIOCLASS_HIGH 3
2523 #define PROCESS_PRIOCLASS_REALTIME 4
2524 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
2525 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
2526
2527 typedef struct _PROCESS_PRIORITY_CLASS {
2528 BOOLEAN Foreground;
2529 UCHAR PriorityClass;
2530 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
2531
2532 typedef struct _PROCESS_CYCLE_TIME_INFORMATION {
2533 ULONGLONG AccumulatedCycles;
2534 ULONGLONG CurrentCycleCount;
2535 } PROCESS_CYCLE_TIME_INFORMATION, *PPROCESS_CYCLE_TIME_INFORMATION;
2536
2537 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
2538 {
2539 SIZE_T ReserveSize;
2540 SIZE_T ZeroBits;
2541 PVOID StackBase;
2542 } PROCESS_STACK_ALLOCATION_INFORMATION, *PPROCESS_STACK_ALLOCATION_INFORMATION;
2543
2544 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
2545 {
2546 ULONG PreferredNode;
2547 ULONG Reserved0;
2548 ULONG Reserved1;
2549 ULONG Reserved2;
2550 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo;
2551 } PROCESS_STACK_ALLOCATION_INFORMATION_EX, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX;
2552
2553 typedef struct _RTL_HEAP_DEFINITION {
2554 ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
2555
2556 ULONG Unknown[11];
2557 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
2558
2559 typedef struct _RTL_RWLOCK {
2560 RTL_CRITICAL_SECTION rtlCS;
2561
2562 HANDLE hSharedReleaseSemaphore;
2563 UINT uSharedWaiters;
2564
2565 HANDLE hExclusiveReleaseSemaphore;
2566 UINT uExclusiveWaiters;
2567
2568 INT iNumberActive;
2569 HANDLE hOwningThreadId;
2570 DWORD dwTimeoutBoost;
2571 PVOID pDebugInfo;
2572 } RTL_RWLOCK, *LPRTL_RWLOCK;
2573
2574 /* System Information Class 0x00 */
2575
2576 typedef struct _SYSTEM_BASIC_INFORMATION {
2577 #ifdef __WINESRC__
2578 DWORD unknown;
2579 ULONG KeMaximumIncrement;
2580 ULONG PageSize;
2581 ULONG MmNumberOfPhysicalPages;
2582 ULONG MmLowestPhysicalPage;
2583 ULONG MmHighestPhysicalPage;
2584 ULONG_PTR AllocationGranularity;
2585 PVOID LowestUserAddress;
2586 PVOID HighestUserAddress;
2587 ULONG_PTR ActiveProcessorsAffinityMask;
2588 BYTE NumberOfProcessors;
2589 #else
2590 BYTE Reserved1[24];
2591 PVOID Reserved2[4];
2592 CCHAR NumberOfProcessors;
2593 #endif
2594 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
2595
2596 /* System Information Class 0x01 */
2597
2598 typedef struct _SYSTEM_CPU_INFORMATION {
2599 USHORT ProcessorArchitecture;
2600 USHORT ProcessorLevel;
2601 USHORT ProcessorRevision;
2602 USHORT MaximumProcessors;
2603 ULONG ProcessorFeatureBits;
2604 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
2605
2606 /* definitions of bits in the Feature set for the x86 processors */
2607 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
2608 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
2609 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
2610 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
2611 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
2612 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
2613 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
2614 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
2615 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
2616 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
2617 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
2618 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
2619 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
2620 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
2621 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
2622 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
2623 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
2624 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
2625 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
2626 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
2627 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
2628 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
2629 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
2630 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
2631
2632 /* FIXME: following values are made up, actual flags are unknown */
2633 #define CPU_FEATURE_SSSE3 0x00008000 /* SSSE3 instructions */
2634 #define CPU_FEATURE_SSE41 0x01000000 /* SSE41 instructions */
2635 #define CPU_FEATURE_SSE42 0x02000000 /* SSE42 instructions */
2636 #define CPU_FEATURE_AVX 0x40000000 /* AVX instructions */
2637 #define CPU_FEATURE_AVX2 0x80000000 /* AVX2 instructions */
2638 #define CPU_FEATURE_PAE 0x00200000
2639 #define CPU_FEATURE_DAZ 0x00400000
2640
2641 #define CPU_FEATURE_ARM_VFP_32 0x00000001
2642 #define CPU_FEATURE_ARM_NEON 0x00000002
2643 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
2644 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
2645
2646 typedef struct _SYSTEM_PROCESSOR_FEATURES_INFORMATION
2647 {
2648 ULONGLONG ProcessorFeatureBits;
2649 ULONGLONG Reserved[3];
2650 } SYSTEM_PROCESSOR_FEATURES_INFORMATION, *PSYSTEM_PROCESSOR_FEATURES_INFORMATION;
2651
2652 /* System Information Class 0x02 */
2653
2654 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
2655 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
2656 LARGE_INTEGER IdleTime;
2657 LARGE_INTEGER ReadTransferCount;
2658 LARGE_INTEGER WriteTransferCount;
2659 LARGE_INTEGER OtherTransferCount;
2660 ULONG ReadOperationCount;
2661 ULONG WriteOperationCount;
2662 ULONG OtherOperationCount;
2663 ULONG AvailablePages;
2664 ULONG TotalCommittedPages;
2665 ULONG TotalCommitLimit;
2666 ULONG PeakCommitment;
2667 ULONG PageFaults;
2668 ULONG WriteCopyFaults;
2669 ULONG TransitionFaults;
2670 ULONG Reserved1;
2671 ULONG DemandZeroFaults;
2672 ULONG PagesRead;
2673 ULONG PageReadIos;
2674 ULONG Reserved2[2];
2675 ULONG PagefilePagesWritten;
2676 ULONG PagefilePageWriteIos;
2677 ULONG MappedFilePagesWritten;
2678 ULONG MappedFilePageWriteIos;
2679 ULONG PagedPoolUsage;
2680 ULONG NonPagedPoolUsage;
2681 ULONG PagedPoolAllocs;
2682 ULONG PagedPoolFrees;
2683 ULONG NonPagedPoolAllocs;
2684 ULONG NonPagedPoolFrees;
2685 ULONG TotalFreeSystemPtes;
2686 ULONG SystemCodePage;
2687 ULONG TotalSystemDriverPages;
2688 ULONG TotalSystemCodePages;
2689 ULONG SmallNonPagedLookasideListAllocateHits;
2690 ULONG SmallPagedLookasideListAllocateHits;
2691 ULONG Reserved3;
2692 ULONG MmSystemCachePage;
2693 ULONG PagedPoolPage;
2694 ULONG SystemDriverPage;
2695 ULONG FastReadNoWait;
2696 ULONG FastReadWait;
2697 ULONG FastReadResourceMiss;
2698 ULONG FastReadNotPossible;
2699 ULONG FastMdlReadNoWait;
2700 ULONG FastMdlReadWait;
2701 ULONG FastMdlReadResourceMiss;
2702 ULONG FastMdlReadNotPossible;
2703 ULONG MapDataNoWait;
2704 ULONG MapDataWait;
2705 ULONG MapDataNoWaitMiss;
2706 ULONG MapDataWaitMiss;
2707 ULONG PinMappedDataCount;
2708 ULONG PinReadNoWait;
2709 ULONG PinReadWait;
2710 ULONG PinReadNoWaitMiss;
2711 ULONG PinReadWaitMiss;
2712 ULONG CopyReadNoWait;
2713 ULONG CopyReadWait;
2714 ULONG CopyReadNoWaitMiss;
2715 ULONG CopyReadWaitMiss;
2716 ULONG MdlReadNoWait;
2717 ULONG MdlReadWait;
2718 ULONG MdlReadNoWaitMiss;
2719 ULONG MdlReadWaitMiss;
2720 ULONG ReadAheadIos;
2721 ULONG LazyWriteIos;
2722 ULONG LazyWritePages;
2723 ULONG DataFlushes;
2724 ULONG DataPages;
2725 ULONG ContextSwitches;
2726 ULONG FirstLevelTbFills;
2727 ULONG SecondLevelTbFills;
2728 ULONG SystemCalls;
2729 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
2730
2731 /* System Information Class 0x03 */
2732
2733 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
2734 #ifdef __WINESRC__
2735 LARGE_INTEGER BootTime;
2736 LARGE_INTEGER SystemTime;
2737 LARGE_INTEGER TimeZoneBias;
2738 ULONG TimeZoneId;
2739 ULONG Reserved;
2740 ULONGLONG BootTimeBias;
2741 ULONGLONG SleepTimeBias;
2742 #else
2743 BYTE Reserved1[48];
2744 #endif
2745 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
2746
2747 /* System Information Class 0x08 */
2748
2749 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
2750 LARGE_INTEGER IdleTime;
2751 LARGE_INTEGER KernelTime;
2752 LARGE_INTEGER UserTime;
2753 LARGE_INTEGER Reserved1[2];
2754 ULONG Reserved2;
2755 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
2756
2757 /* System Information Class 0x0b */
2758
2759 typedef struct _SYSTEM_DRIVER_INFORMATION {
2760 PVOID pvAddress;
2761 DWORD dwUnknown1;
2762 DWORD dwUnknown2;
2763 DWORD dwEntryIndex;
2764 DWORD dwUnknown3;
2765 char szName[MAX_PATH + 1];
2766 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
2767
2768 /* System Information Class 0x10 */
2769
2770 typedef struct _SYSTEM_HANDLE_ENTRY {
2771 ULONG OwnerPid;
2772 BYTE ObjectType;
2773 BYTE HandleFlags;
2774 USHORT HandleValue;
2775 PVOID ObjectPointer;
2776 ULONG AccessMask;
2777 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
2778
2779 typedef struct _SYSTEM_HANDLE_INFORMATION {
2780 ULONG Count;
2781 SYSTEM_HANDLE_ENTRY Handle[1];
2782 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
2783
2784 typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
2785 {
2786 void *Object;
2787 ULONG_PTR UniqueProcessId;
2788 ULONG_PTR HandleValue;
2789 ULONG GrantedAccess;
2790 USHORT CreatorBackTraceIndex;
2791 USHORT ObjectTypeIndex;
2792 ULONG HandleAttributes;
2793 ULONG Reserved;
2794 } SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX;
2795
2796 typedef struct _SYSTEM_HANDLE_INFORMATION_EX
2797 {
2798 ULONG_PTR NumberOfHandles;
2799 ULONG_PTR Reserved;
2800 SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX Handles[1];
2801 } SYSTEM_HANDLE_INFORMATION_EX;
2802
2803 /* System Information Class 0x15 */
2804
2805 typedef struct _SYSTEM_CACHE_INFORMATION {
2806 SIZE_T CurrentSize;
2807 SIZE_T PeakSize;
2808 ULONG PageFaultCount;
2809 SIZE_T MinimumWorkingSet;
2810 SIZE_T MaximumWorkingSet;
2811 SIZE_T CurrentSizeIncludingTransitionInPages;
2812 SIZE_T PeakSizeIncludingTransitionInPages;
2813 ULONG TransitionRePurposeCount;
2814 ULONG Flags;
2815 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
2816
2817 /* System Information Class 0x17 */
2818
2819 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
2820 ULONG ContextSwitches;
2821 ULONG DpcCount;
2822 ULONG DpcRate;
2823 ULONG TimeIncrement;
2824 ULONG DpcBypassCount;
2825 ULONG ApcBypassCount;
2826 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
2827
2828 typedef struct _SYSTEM_CONFIGURATION_INFO {
2829 union {
2830 ULONG OemId;
2831 struct {
2832 WORD ProcessorArchitecture;
2833 WORD Reserved;
2834 } tag1;
2835 } tag2;
2836 ULONG PageSize;
2837 PVOID MinimumApplicationAddress;
2838 PVOID MaximumApplicationAddress;
2839 ULONG ActiveProcessorMask;
2840 ULONG NumberOfProcessors;
2841 ULONG ProcessorType;
2842 ULONG AllocationGranularity;
2843 WORD ProcessorLevel;
2844 WORD ProcessorRevision;
2845 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
2846
2847 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
2848 BYTE Reserved1[16];
2849 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
2850
2851 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
2852 BYTE Reserved1[32];
2853 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
2854
2855 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
2856 BOOLEAN DebuggerEnabled;
2857 BOOLEAN DebuggerNotPresent;
2858 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
2859
2860 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX {
2861 BOOLEAN DebuggerAllowed;
2862 BOOLEAN DebuggerEnabled;
2863 BOOLEAN DebuggerPresent;
2864 } SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION_EX;
2865
2866 typedef struct _VM_COUNTERS
2867 {
2868 SIZE_T PeakVirtualSize;
2869 SIZE_T VirtualSize;
2870 ULONG PageFaultCount;
2871 SIZE_T PeakWorkingSetSize;
2872 SIZE_T WorkingSetSize;
2873 SIZE_T QuotaPeakPagedPoolUsage;
2874 SIZE_T QuotaPagedPoolUsage;
2875 SIZE_T QuotaPeakNonPagedPoolUsage;
2876 SIZE_T QuotaNonPagedPoolUsage;
2877 SIZE_T PagefileUsage;
2878 SIZE_T PeakPagefileUsage;
2879 } VM_COUNTERS, *PVM_COUNTERS;
2880
2881 typedef struct _VM_COUNTERS_EX
2882 {
2883 SIZE_T PeakVirtualSize;
2884 SIZE_T VirtualSize;
2885 ULONG PageFaultCount;
2886 SIZE_T PeakWorkingSetSize;
2887 SIZE_T WorkingSetSize;
2888 SIZE_T QuotaPeakPagedPoolUsage;
2889 SIZE_T QuotaPagedPoolUsage;
2890 SIZE_T QuotaPeakNonPagedPoolUsage;
2891 SIZE_T QuotaNonPagedPoolUsage;
2892 SIZE_T PagefileUsage;
2893 SIZE_T PeakPagefileUsage;
2894 SIZE_T PrivateUsage;
2895 } VM_COUNTERS_EX, *PVM_COUNTERS_EX;
2896
2897 typedef struct _SYSTEM_PROCESS_INFORMATION {
2898 #ifdef __WINESRC__ /* win32/win64 */
2899 ULONG NextEntryOffset; /* 00/00 */
2900 DWORD dwThreadCount; /* 04/04 */
2901 LARGE_INTEGER WorkingSetPrivateSize; /* 08/08 */
2902 ULONG HardFaultCount; /* 10/10 */
2903 ULONG NumberOfThreadsHighWatermark;/* 14/14 */
2904 ULONGLONG CycleTime; /* 18/18 */
2905 LARGE_INTEGER CreationTime; /* 20/20 */
2906 LARGE_INTEGER UserTime; /* 28/28 */
2907 LARGE_INTEGER KernelTime; /* 30/30 */
2908 UNICODE_STRING ProcessName; /* 38/38 */
2909 DWORD dwBasePriority; /* 40/48 */
2910 HANDLE UniqueProcessId; /* 44/50 */
2911 HANDLE ParentProcessId; /* 48/58 */
2912 ULONG HandleCount; /* 4c/60 */
2913 ULONG SessionId; /* 50/64 */
2914 ULONG_PTR UniqueProcessKey; /* 54/68 */
2915 VM_COUNTERS_EX vmCounters; /* 58/70 */
2916 IO_COUNTERS ioCounters; /* 88/d0 */
2917 SYSTEM_THREAD_INFORMATION ti[1]; /* b8/100 */
2918 #else
2919 ULONG NextEntryOffset; /* 00/00 */
2920 BYTE Reserved1[52]; /* 04/04 */
2921 PVOID Reserved2[3]; /* 38/38 */
2922 HANDLE UniqueProcessId; /* 44/50 */
2923 PVOID Reserved3; /* 48/58 */
2924 ULONG HandleCount; /* 4c/60 */
2925 BYTE Reserved4[4]; /* 50/64 */
2926 PVOID Reserved5[11]; /* 54/68 */
2927 SIZE_T PeakPagefileUsage; /* 80/c0 */
2928 SIZE_T PrivatePageCount; /* 84/c8 */
2929 LARGE_INTEGER Reserved6[6]; /* 88/d0 */
2930 #endif
2931 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
2932
2933 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
2934 ULONG RegistryQuotaAllowed;
2935 ULONG RegistryQuotaUsed;
2936 PVOID Reserved1;
2937 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
2938
2939 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY {
2940 ULONG TimeAdjustment;
2941 ULONG TimeIncrement;
2942 BOOLEAN TimeAdjustmentDisabled;
2943 } SYSTEM_TIME_ADJUSTMENT_QUERY, *PSYSTEM_TIME_ADJUSTMENT_QUERY;
2944
2945 typedef struct _SYSTEM_TIME_ADJUSTMENT {
2946 ULONG TimeAdjustment;
2947 BOOLEAN TimeAdjustmentDisabled;
2948 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
2949
2950 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
2951 {
2952 SystemFirmwareTable_Enumerate = 0,
2953 SystemFirmwareTable_Get = 1
2954 } SYSTEM_FIRMWARE_TABLE_ACTION, *PSYSTEM_FIRMWARE_TABLE_ACTION;
2955
2956 /* System Information Class 0x4C */
2957
2958 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
2959 {
2960 ULONG ProviderSignature;
2961 SYSTEM_FIRMWARE_TABLE_ACTION Action;
2962 ULONG TableID;
2963 ULONG TableBufferLength;
2964 UCHAR TableBuffer[1];
2965 } SYSTEM_FIRMWARE_TABLE_INFORMATION, *PSYSTEM_FIRMWARE_TABLE_INFORMATION;
2966
2967 typedef struct _TIME_FIELDS
2968 { CSHORT Year;
2969 CSHORT Month;
2970 CSHORT Day;
2971 CSHORT Hour;
2972 CSHORT Minute;
2973 CSHORT Second;
2974 CSHORT Milliseconds;
2975 CSHORT Weekday;
2976 } TIME_FIELDS, *PTIME_FIELDS;
2977
2978 typedef struct _WINSTATIONINFORMATIONW {
2979 BYTE Reserved2[70];
2980 ULONG LogonId;
2981 BYTE Reserved3[1140];
2982 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
2983
2984 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
2985
2986 typedef struct _LDR_RESOURCE_INFO
2987 {
2988 ULONG_PTR Type;
2989 ULONG_PTR Name;
2990 ULONG Language;
2991 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
2992
2993
2994 /* debug buffer definitions */
2995
2996 typedef struct _DEBUG_BUFFER {
2997 HANDLE SectionHandle;
2998 PVOID SectionBase;
2999 PVOID RemoteSectionBase;
3000 ULONG SectionBaseDelta;
3001 HANDLE EventPairHandle;
3002 ULONG Unknown[2];
3003 HANDLE RemoteThreadHandle;
3004 ULONG InfoClassMask;
3005 ULONG SizeOfInfo;
3006 ULONG AllocatedSize;
3007 ULONG SectionSize;
3008 PVOID ModuleInformation;
3009 PVOID BackTraceInformation;
3010 PVOID HeapInformation;
3011 PVOID LockInformation;
3012 PVOID Reserved[8];
3013 } DEBUG_BUFFER, *PDEBUG_BUFFER;
3014
3015 #define PDI_MODULES 0x01
3016 #define PDI_BACKTRACE 0x02
3017 #define PDI_HEAPS 0x04
3018 #define PDI_HEAP_TAGS 0x08
3019 #define PDI_HEAP_BLOCKS 0x10
3020 #define PDI_LOCKS 0x20
3021
3022 typedef struct _DEBUG_MODULE_INFORMATION {
3023 ULONG Reserved[2];
3024 ULONG Base;
3025 ULONG Size;
3026 ULONG Flags;
3027 USHORT Index;
3028 USHORT Unknown;
3029 USHORT LoadCount;
3030 USHORT ModuleNameOffset;
3031 CHAR ImageName[256];
3032 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
3033
3034 typedef struct _DEBUG_HEAP_INFORMATION {
3035 ULONG Base;
3036 ULONG Flags;
3037 USHORT Granularity;
3038 USHORT Unknown;
3039 ULONG Allocated;
3040 ULONG Committed;
3041 ULONG TagCount;
3042 ULONG BlockCount;
3043 ULONG Reserved[7];
3044 PVOID Tags;
3045 PVOID Blocks;
3046 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
3047
3048 typedef struct _DEBUG_LOCK_INFORMATION {
3049 PVOID Address;
3050 USHORT Type;
3051 USHORT CreatorBackTraceIndex;
3052 ULONG OwnerThreadId;
3053 ULONG ActiveCount;
3054 ULONG ContentionCount;
3055 ULONG EntryCount;
3056 ULONG RecursionCount;
3057 ULONG NumberOfSharedWaiters;
3058 ULONG NumberOfExclusiveWaiters;
3059 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
3060
3061 typedef struct _PORT_MESSAGE_HEADER {
3062 USHORT DataSize;
3063 USHORT MessageSize;
3064 USHORT MessageType;
3065 USHORT VirtualRangesOffset;
3066 CLIENT_ID ClientId;
3067 ULONG MessageId;
3068 ULONG SectionSize;
3069 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
3070
3071 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
3072
3073 typedef enum _ATOM_INFORMATION_CLASS {
3074 AtomBasicInformation = 0,
3075 AtomTableInformation = 1,
3076 } ATOM_INFORMATION_CLASS;
3077
3078 typedef struct _ATOM_BASIC_INFORMATION {
3079 USHORT ReferenceCount;
3080 USHORT Pinned;
3081 USHORT NameLength;
3082 WCHAR Name[1];
3083 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
3084
3085 /* FIXME: names probably not correct */
3086 typedef struct _RTL_HANDLE
3087 {
3088 struct _RTL_HANDLE * Next;
3089 } RTL_HANDLE;
3090
3091 /* FIXME: names probably not correct */
3092 typedef struct _RTL_HANDLE_TABLE
3093 {
3094 ULONG MaxHandleCount; /* 0x00 */
3095 ULONG HandleSize; /* 0x04 */
3096 ULONG Unused[2]; /* 0x08-0x0c */
3097 PVOID NextFree; /* 0x10 */
3098 PVOID FirstHandle; /* 0x14 */
3099 PVOID ReservedMemory; /* 0x18 */
3100 PVOID MaxHandle; /* 0x1c */
3101 } RTL_HANDLE_TABLE;
3102
3103 typedef struct _RTL_ATOM_TABLE_ENTRY
3104 {
3105 struct _RTL_ATOM_TABLE_ENTRY *HashLink;
3106 WORD HandleIndex;
3107 WORD Atom;
3108 WORD ReferenceCount;
3109 UCHAR Flags;
3110 UCHAR NameLength;
3111 WCHAR Name[1];
3112 } RTL_ATOM_TABLE_ENTRY, *PRTL_ATOM_TABLE_ENTRY;
3113
3114 typedef struct _RTL_ATOM_TABLE
3115 {
3116 ULONG Signature;
3117 RTL_CRITICAL_SECTION CriticalSection;
3118 RTL_HANDLE_TABLE HandleTable;
3119 ULONG NumberOfBuckets;
3120 RTL_ATOM_TABLE_ENTRY *Buckets[1];
3121 } *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
3122
3123 /***********************************************************************
3124 * Defines
3125 */
3126
3127 /* flags for NtCreateFile and NtOpenFile */
3128 #define FILE_DIRECTORY_FILE 0x00000001
3129 #define FILE_WRITE_THROUGH 0x00000002
3130 #define FILE_SEQUENTIAL_ONLY 0x00000004
3131 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
3132 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
3133 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
3134 #define FILE_NON_DIRECTORY_FILE 0x00000040
3135 #define FILE_CREATE_TREE_CONNECTION 0x00000080
3136 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
3137 #define FILE_NO_EA_KNOWLEDGE 0x00000200
3138 #define FILE_OPEN_FOR_RECOVERY 0x00000400
3139 #define FILE_RANDOM_ACCESS 0x00000800
3140 #define FILE_DELETE_ON_CLOSE 0x00001000
3141 #define FILE_OPEN_BY_FILE_ID 0x00002000
3142 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
3143 #define FILE_NO_COMPRESSION 0x00008000
3144 #define FILE_RESERVE_OPFILTER 0x00100000
3145 #define FILE_OPEN_REPARSE_POINT 0x00200000
3146 #define FILE_OPEN_OFFLINE_FILE 0x00400000
3147 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
3148
3149 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
3150 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
3151
3152 /* status for NtCreateFile or NtOpenFile */
3153 #define FILE_SUPERSEDED 0
3154 #define FILE_OPENED 1
3155 #define FILE_CREATED 2
3156 #define FILE_OVERWRITTEN 3
3157 #define FILE_EXISTS 4
3158 #define FILE_DOES_NOT_EXIST 5
3159
3160 /* disposition for NtCreateFile */
3161 #define FILE_SUPERSEDE 0
3162 #define FILE_OPEN 1
3163 #define FILE_CREATE 2
3164 #define FILE_OPEN_IF 3
3165 #define FILE_OVERWRITE 4
3166 #define FILE_OVERWRITE_IF 5
3167 #define FILE_MAXIMUM_DISPOSITION 5
3168
3169 /* Characteristics of a File System */
3170 #define FILE_REMOVABLE_MEDIA 0x00000001
3171 #define FILE_READ_ONLY_DEVICE 0x00000002
3172 #define FILE_FLOPPY_DISKETTE 0x00000004
3173 #define FILE_WRITE_ONE_MEDIA 0x00000008
3174 #define FILE_REMOTE_DEVICE 0x00000010
3175 #define FILE_DEVICE_IS_MOUNTED 0x00000020
3176 #define FILE_VIRTUAL_VOLUME 0x00000040
3177 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
3178 #define FILE_DEVICE_SECURE_OPEN 0x00000100
3179 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
3180 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
3181 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
3182 #define FILE_CHARACTERISTIC_CSV 0x00010000
3183 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
3184 #define FILE_PORTABLE_DEVICE 0x00040000
3185
3186 /* options for NtCreateNamedPipeFile */
3187 #define FILE_PIPE_INBOUND 0x00000000
3188 #define FILE_PIPE_OUTBOUND 0x00000001
3189 #define FILE_PIPE_FULL_DUPLEX 0x00000002
3190
3191 /* options for pipe's type */
3192 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
3193 #define FILE_PIPE_TYPE_BYTE 0x00000000
3194 /* options for pipe's message mode */
3195 #define FILE_PIPE_MESSAGE_MODE 0x00000001
3196 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
3197 /* options for pipe's blocking mode */
3198 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
3199 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
3200 /* and client / server end */
3201 #define FILE_PIPE_SERVER_END 0x00000001
3202 #define FILE_PIPE_CLIENT_END 0x00000000
3203
3204 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
3205
3206 #define LOGONID_CURRENT ((ULONG)-1)
3207
3208 #define OBJ_PROTECT_CLOSE 0x00000001
3209 #define OBJ_INHERIT 0x00000002
3210 #define OBJ_PERMANENT 0x00000010
3211 #define OBJ_EXCLUSIVE 0x00000020
3212 #define OBJ_CASE_INSENSITIVE 0x00000040
3213 #define OBJ_OPENIF 0x00000080
3214 #define OBJ_OPENLINK 0x00000100
3215 #define OBJ_KERNEL_HANDLE 0x00000200
3216 #define OBJ_VALID_ATTRIBUTES 0x000003F2
3217
3218 #define SERVERNAME_CURRENT ((HANDLE)NULL)
3219
3220 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
3221 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
3222 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
3223 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
3224
3225
3226 /* DbgPrintEx default levels */
3227 #define DPFLTR_ERROR_LEVEL 0
3228 #define DPFLTR_WARNING_LEVEL 1
3229 #define DPFLTR_TRACE_LEVEL 2
3230 #define DPFLTR_INFO_LEVEL 3
3231 #define DPFLTR_MASK 0x8000000
3232
3233 /* Well-known LUID values */
3234 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
3235 #define SE_CREATE_TOKEN_PRIVILEGE 2
3236 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
3237 #define SE_LOCK_MEMORY_PRIVILEGE 4
3238 #define SE_INCREASE_QUOTA_PRIVILEGE 5
3239 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
3240 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
3241 #define SE_TCB_PRIVILEGE 7
3242 #define SE_SECURITY_PRIVILEGE 8
3243 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
3244 #define SE_LOAD_DRIVER_PRIVILEGE 10
3245 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
3246 #define SE_SYSTEMTIME_PRIVILEGE 12
3247 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
3248 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
3249 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
3250 #define SE_CREATE_PERMANENT_PRIVILEGE 16
3251 #define SE_BACKUP_PRIVILEGE 17
3252 #define SE_RESTORE_PRIVILEGE 18
3253 #define SE_SHUTDOWN_PRIVILEGE 19
3254 #define SE_DEBUG_PRIVILEGE 20
3255 #define SE_AUDIT_PRIVILEGE 21
3256 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
3257 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
3258 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
3259 #define SE_UNDOCK_PRIVILEGE 25
3260 #define SE_SYNC_AGENT_PRIVILEGE 26
3261 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
3262 #define SE_MANAGE_VOLUME_PRIVILEGE 28
3263 #define SE_IMPERSONATE_PRIVILEGE 29
3264 #define SE_CREATE_GLOBAL_PRIVILEGE 30
3265 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
3266
3267 /* NtGlobalFlag bits */
3268 #define FLG_STOP_ON_EXCEPTION 0x00000001
3269 #define FLG_SHOW_LDR_SNAPS 0x00000002
3270 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
3271 #define FLG_STOP_ON_HUNG_GUI 0x00000008
3272 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
3273 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
3274 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
3275 #define FLG_HEAP_VALIDATE_ALL 0x00000080
3276 #define FLG_APPLICATION_VERIFIER 0x00000100
3277 #define FLG_POOL_ENABLE_TAGGING 0x00000400
3278 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
3279 #define FLG_USER_STACK_TRACE_DB 0x00001000
3280 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
3281 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
3282 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
3283 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
3284 #define FLG_ENABLE_CSRDEBUG 0x00020000
3285 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
3286 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
3287 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
3288 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
3289 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
3290 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
3291 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
3292 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
3293 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
3294 #define FLG_DISABLE_DBGPRINT 0x08000000
3295 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
3296 #define FLG_LDR_TOP_DOWN 0x20000000
3297 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
3298 #define FLG_DISABLE_PROTDLLS 0x80000000
3299
3300 /* Rtl*Registry* functions structs and defines */
3301 #define RTL_REGISTRY_ABSOLUTE 0
3302 #define RTL_REGISTRY_SERVICES 1
3303 #define RTL_REGISTRY_CONTROL 2
3304 #define RTL_REGISTRY_WINDOWS_NT 3
3305 #define RTL_REGISTRY_DEVICEMAP 4
3306 #define RTL_REGISTRY_USER 5
3307
3308 #define RTL_REGISTRY_HANDLE 0x40000000
3309 #define RTL_REGISTRY_OPTIONAL 0x80000000
3310
3311 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
3312 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
3313 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
3314 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
3315 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
3316 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
3317 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
3318 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
3319
3320 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
3321
3322 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
3323 ULONG ValueType,
3324 PVOID ValueData,
3325 ULONG ValueLength,
3326 PVOID Context,
3327 PVOID EntryContext);
3328
3329 typedef struct _RTL_QUERY_REGISTRY_TABLE
3330 {
3331 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
3332 ULONG Flags;
3333 PWSTR Name;
3334 PVOID EntryContext;
3335 ULONG DefaultType;
3336 PVOID DefaultData;
3337 ULONG DefaultLength;
3338 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
3339
3340 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
3341 {
3342 PUNICODE_STRING ValueName;
3343 ULONG DataLength;
3344 ULONG DataOffset;
3345 ULONG Type;
3346 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
3347
3348 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
3349
3350 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
3351
3352 typedef enum _EVENT_INFORMATION_CLASS {
3353 EventBasicInformation
3354 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
3355
3356 typedef struct _EVENT_BASIC_INFORMATION {
3357 EVENT_TYPE EventType;
3358 LONG EventState;
3359 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
3360
3361 typedef enum _SEMAPHORE_INFORMATION_CLASS {
3362 SemaphoreBasicInformation
3363 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
3364
3365 typedef struct _SEMAPHORE_BASIC_INFORMATION {
3366 ULONG CurrentCount;
3367 ULONG MaximumCount;
3368 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
3369
3370 typedef enum _SECTION_INFORMATION_CLASS
3371 {
3372 SectionBasicInformation,
3373 SectionImageInformation,
3374 SectionRelocationInformation,
3375 SectionOriginalBaseInformation,
3376 SectionInternalImageInformation
3377 } SECTION_INFORMATION_CLASS;
3378
3379 typedef struct _SECTION_BASIC_INFORMATION {
3380 PVOID BaseAddress;
3381 ULONG Attributes;
3382 LARGE_INTEGER Size;
3383 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
3384
3385 typedef struct _SECTION_IMAGE_INFORMATION {
3386 PVOID TransferAddress;
3387 ULONG ZeroBits;
3388 SIZE_T MaximumStackSize;
3389 SIZE_T CommittedStackSize;
3390 ULONG SubSystemType;
3391 USHORT MinorSubsystemVersion;
3392 USHORT MajorSubsystemVersion;
3393 USHORT MajorOperatingSystemVersion;
3394 USHORT MinorOperatingSystemVersion;
3395 USHORT ImageCharacteristics;
3396 USHORT DllCharacteristics;
3397 USHORT Machine;
3398 BOOLEAN ImageContainsCode;
3399 union
3400 {
3401 UCHAR ImageFlags;
3402 struct
3403 {
3404 UCHAR ComPlusNativeReady : 1;
3405 UCHAR ComPlusILOnly : 1;
3406 UCHAR ImageDynamicallyRelocated : 1;
3407 UCHAR ImageMappedFlat : 1;
3408 UCHAR BaseBelow4gb : 1;
3409 UCHAR ComPlusPrefer32bit : 1;
3410 UCHAR Reserved : 2;
3411 } DUMMYSTRUCTNAME;
3412 } DUMMYUNIONNAME;
3413 ULONG LoaderFlags;
3414 ULONG ImageFileSize;
3415 ULONG CheckSum;
3416 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
3417
3418 typedef struct _LPC_SECTION_WRITE {
3419 ULONG Length;
3420 HANDLE SectionHandle;
3421 ULONG SectionOffset;
3422 ULONG ViewSize;
3423 PVOID ViewBase;
3424 PVOID TargetViewBase;
3425 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
3426
3427 typedef struct _LPC_SECTION_READ {
3428 ULONG Length;
3429 ULONG ViewSize;
3430 PVOID ViewBase;
3431 } LPC_SECTION_READ, *PLPC_SECTION_READ;
3432
3433 typedef struct _LPC_MESSAGE {
3434 USHORT DataSize;
3435 USHORT MessageSize;
3436 USHORT MessageType;
3437 USHORT VirtualRangesOffset;
3438 CLIENT_ID ClientId;
3439 ULONG_PTR MessageId;
3440 ULONG_PTR SectionSize;
3441 UCHAR Data[ANYSIZE_ARRAY];
3442 } LPC_MESSAGE, *PLPC_MESSAGE;
3443
3444 typedef struct _RTL_USER_PROCESS_INFORMATION
3445 {
3446 ULONG Length;
3447 HANDLE Process;
3448 HANDLE Thread;
3449 CLIENT_ID ClientId;
3450 SECTION_IMAGE_INFORMATION ImageInformation;
3451 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
3452
3453 typedef enum _SHUTDOWN_ACTION {
3454 ShutdownNoReboot,
3455 ShutdownReboot,
3456 ShutdownPowerOff
3457 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
3458
3459 typedef enum _KPROFILE_SOURCE {
3460 ProfileTime,
3461 ProfileAlignmentFixup,
3462 ProfileTotalIssues,
3463 ProfilePipelineDry,
3464 ProfileLoadInstructions,
3465 ProfilePipelineFrozen,
3466 ProfileBranchInstructions,
3467 ProfileTotalNonissues,
3468 ProfileDcacheMisses,
3469 ProfileIcacheMisses,
3470 ProfileCacheMisses,
3471 ProfileBranchMispredictions,
3472 ProfileStoreInstructions,
3473 ProfileFpInstructions,
3474 ProfileIntegerInstructions,
3475 Profile2Issue,
3476 Profile3Issue,
3477 Profile4Issue,
3478 ProfileSpecialInstructions,
3479 ProfileTotalCycles,
3480 ProfileIcacheIssues,
3481 ProfileDcacheAccesses,
3482 ProfileMemoryBarrierCycles,
3483 ProfileLoadLinkedIssues,
3484 ProfileMaximum
3485 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
3486
3487 typedef struct _DIRECTORY_BASIC_INFORMATION {
3488 UNICODE_STRING ObjectName;
3489 UNICODE_STRING ObjectTypeName;
3490 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
3491
3492 typedef struct _INITIAL_TEB {
3493 void *OldStackBase;
3494 void *OldStackLimit;
3495 void *StackBase;
3496 void *StackLimit;
3497 void *DeallocationStack;
3498 } INITIAL_TEB, *PINITIAL_TEB;
3499
3500 typedef enum _PORT_INFORMATION_CLASS {
3501 PortNoInformation
3502 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
3503
3504 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
3505 IoCompletionBasicInformation
3506 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
3507
3508 typedef struct _FILE_COMPLETION_INFORMATION {
3509 HANDLE CompletionPort;
3510 ULONG_PTR CompletionKey;
3511 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
3512
3513 #define IO_COMPLETION_QUERY_STATE 0x0001
3514 #define IO_COMPLETION_MODIFY_STATE 0x0002
3515 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
3516
3517 typedef struct _FILE_IO_COMPLETION_INFORMATION {
3518 ULONG_PTR CompletionKey;
3519 ULONG_PTR CompletionValue;
3520 IO_STATUS_BLOCK IoStatusBlock;
3521 } FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
3522
3523 typedef enum _HARDERROR_RESPONSE_OPTION {
3524 OptionAbortRetryIgnore,
3525 OptionOk,
3526 OptionOkCancel,
3527 OptionRetryCancel,
3528 OptionYesNo,
3529 OptionYesNoCancel,
3530 OptionShutdownSystem
3531 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
3532
3533 typedef enum _HARDERROR_RESPONSE {
3534 ResponseReturnToCaller,
3535 ResponseNotHandled,
3536 ResponseAbort,
3537 ResponseCancel,
3538 ResponseIgnore,
3539 ResponseNo,
3540 ResponseOk,
3541 ResponseRetry,
3542 ResponseYes
3543 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
3544
3545 typedef enum _SYSDBG_COMMAND {
3546 SysDbgQueryModuleInformation,
3547 SysDbgQueryTraceInformation,
3548 SysDbgSetTracepoint,
3549 SysDbgSetSpecialCall,
3550 SysDbgClearSpecialCalls,
3551 SysDbgQuerySpecialCalls,
3552 SysDbgBreakPoint,
3553 SysDbgQueryVersion,
3554 SysDbgReadVirtual,
3555 SysDbgWriteVirtual,
3556 SysDbgReadPhysical,
3557 SysDbgWritePhysical,
3558 SysDbgReadControlSpace,
3559 SysDbgWriteControlSpace,
3560 SysDbgReadIoSpace,
3561 SysDbgWriteIoSpace,
3562 SysDbgReadMsr,
3563 SysDbgWriteMsr,
3564 SysDbgReadBusData,
3565 SysDbgWriteBusData
3566 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
3567
3568 typedef struct _CPTABLEINFO
3569 {
3570 USHORT CodePage;
3571 USHORT MaximumCharacterSize;
3572 USHORT DefaultChar;
3573 USHORT UniDefaultChar;
3574 USHORT TransDefaultChar;
3575 USHORT TransUniDefaultChar;
3576 USHORT DBCSCodePage;
3577 UCHAR LeadByte[12];
3578 USHORT *MultiByteTable;
3579 void *WideCharTable;
3580 USHORT *DBCSRanges;
3581 USHORT *DBCSOffsets;
3582 } CPTABLEINFO, *PCPTABLEINFO;
3583
3584 typedef struct _NLSTABLEINFO
3585 {
3586 CPTABLEINFO OemTableInfo;
3587 CPTABLEINFO AnsiTableInfo;
3588 USHORT *UpperCaseTable;
3589 USHORT *LowerCaseTable;
3590 } NLSTABLEINFO, *PNLSTABLEINFO;
3591
3592 /*************************************************************************
3593 * Loader structures
3594 *
3595 * Those are not part of standard Winternl.h
3596 */
3597
3598 typedef struct _LDR_SERVICE_TAG_RECORD
3599 {
3600 struct _LDR_SERVICE_TAG_RECORD *Next;
3601 ULONG ServiceTag;
3602 } LDR_SERVICE_TAG_RECORD, *PLDR_SERVICE_TAG_RECORD;
3603
3604 typedef struct _LDRP_CSLIST
3605 {
3606 SINGLE_LIST_ENTRY *Tail;
3607 } LDRP_CSLIST, *PLDRP_CSLIST;
3608
3609 typedef struct _LDR_DEPENDENCY
3610 {
3611 SINGLE_LIST_ENTRY dependency_to_entry;
3612 struct _LDR_DDAG_NODE *dependency_to;
3613 SINGLE_LIST_ENTRY dependency_from_entry;
3614 struct _LDR_DDAG_NODE *dependency_from;
3615 } LDR_DEPENDENCY, *PLDR_DEPENDENCY;
3616
3617 typedef enum _LDR_DDAG_STATE
3618 {
3619 LdrModulesMerged = -5,
3620 LdrModulesInitError = -4,
3621 LdrModulesSnapError = -3,
3622 LdrModulesUnloaded = -2,
3623 LdrModulesUnloading = -1,
3624 LdrModulesPlaceHolder = 0,
3625 LdrModulesMapping = 1,
3626 LdrModulesMapped = 2,
3627 LdrModulesWaitingForDependencies = 3,
3628 LdrModulesSnapping = 4,
3629 LdrModulesSnapped = 5,
3630 LdrModulesCondensed = 6,
3631 LdrModulesReadyToInit = 7,
3632 LdrModulesInitializing = 8,
3633 LdrModulesReadyToRun = 9,
3634 } LDR_DDAG_STATE;
3635
3636 typedef struct _LDR_DDAG_NODE
3637 {
3638 LIST_ENTRY Modules;
3639 LDR_SERVICE_TAG_RECORD *ServiceTagList;
3640 LONG LoadCount;
3641 ULONG LoadWhileUnloadingCount;
3642 ULONG LowestLink;
3643 LDRP_CSLIST Dependencies;
3644 LDRP_CSLIST IncomingDependencies;
3645 LDR_DDAG_STATE State;
3646 SINGLE_LIST_ENTRY CondenseLink;
3647 ULONG PreorderNumber;
3648 } LDR_DDAG_NODE, *PLDR_DDAG_NODE;
3649
3650 typedef enum _LDR_DLL_LOAD_REASON
3651 {
3652 LoadReasonStaticDependency,
3653 LoadReasonStaticForwarderDependency,
3654 LoadReasonDynamicForwarderDependency,
3655 LoadReasonDelayloadDependency,
3656 LoadReasonDynamicLoad,
3657 LoadReasonAsImageLoad,
3658 LoadReasonAsDataLoad,
3659 LoadReasonUnknown = -1
3660 } LDR_DLL_LOAD_REASON, *PLDR_DLL_LOAD_REASON;
3661
3662 typedef struct _LDR_DATA_TABLE_ENTRY
3663 {
3664 LIST_ENTRY InLoadOrderLinks;
3665 LIST_ENTRY InMemoryOrderLinks;
3666 LIST_ENTRY InInitializationOrderLinks;
3667 void* DllBase;
3668 void* EntryPoint;
3669 ULONG SizeOfImage;
3670 UNICODE_STRING FullDllName;
3671 UNICODE_STRING BaseDllName;
3672 ULONG Flags;
3673 SHORT LoadCount;
3674 SHORT TlsIndex;
3675 LIST_ENTRY HashLinks;
3676 ULONG TimeDateStamp;
3677 HANDLE ActivationContext;
3678 void* Lock;
3679 LDR_DDAG_NODE* DdagNode;
3680 LIST_ENTRY NodeModuleLink;
3681 struct _LDRP_LOAD_CONTEXT *LoadContext;
3682 void* ParentDllBase;
3683 void* SwitchBackContext;
3684 RTL_BALANCED_NODE BaseAddressIndexNode;
3685 RTL_BALANCED_NODE MappingInfoIndexNode;
3686 ULONG_PTR OriginalBase;
3687 LARGE_INTEGER LoadTime;
3688 ULONG BaseNameHashValue;
3689 LDR_DLL_LOAD_REASON LoadReason;
3690 ULONG ImplicitPathOptions;
3691 ULONG ReferenceCount;
3692 } LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
3693
3694 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
3695 {
3696 ULONG Flags;
3697 const UNICODE_STRING *FullDllName;
3698 const UNICODE_STRING *BaseDllName;
3699 void *DllBase;
3700 ULONG SizeOfImage;
3701 } LDR_DLL_LOADED_NOTIFICATION_DATA, *PLDR_DLL_LOADED_NOTIFICATION_DATA;
3702
3703 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
3704 {
3705 ULONG Flags;
3706 const UNICODE_STRING *FullDllName;
3707 const UNICODE_STRING *BaseDllName;
3708 void *DllBase;
3709 ULONG SizeOfImage;
3710 } LDR_DLL_UNLOADED_NOTIFICATION_DATA, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
3711
3712 typedef union _LDR_DLL_NOTIFICATION_DATA
3713 {
3714 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
3715 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
3716 } LDR_DLL_NOTIFICATION_DATA, *PLDR_DLL_NOTIFICATION_DATA;
3717
3718 typedef void (CALLBACK *PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA*, void*);
3719
3720 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
3721 #define LDR_IMAGE_IS_DLL 0x00000004
3722 #define LDR_LOAD_IN_PROGRESS 0x00001000
3723 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
3724 #define LDR_NO_DLL_CALLS 0x00040000
3725 #define LDR_PROCESS_ATTACHED 0x00080000
3726 #define LDR_COR_IMAGE 0x00400000
3727 #define LDR_COR_ILONLY 0x01000000
3728
3729 /* these ones is Wine specific */
3730 #define LDR_DONT_RESOLVE_REFS 0x40000000
3731 #define LDR_WINE_INTERNAL 0x80000000
3732
3733 /* flag for LdrAddRefDll */
3734 #define LDR_ADDREF_DLL_PIN 0x00000001
3735
3736 /* flags for LdrGetDllHandleEx */
3737 #define LDR_GET_DLL_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT 0x00000001
3738 #define LDR_GET_DLL_HANDLE_EX_FLAG_PIN 0x00000002
3739
3740 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
3741 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
3742
3743 /* FIXME: to be checked */
3744 #define MAXIMUM_FILENAME_LENGTH 256
3745
3746 typedef struct _RTL_PROCESS_MODULE_INFORMATION
3747 {
3748 PVOID Section; /* 00/00 */
3749 PVOID MappedBaseAddress; /* 04/08 */
3750 PVOID ImageBaseAddress; /* 08/10 */
3751 ULONG ImageSize; /* 0c/18 */
3752 ULONG Flags; /* 10/1c */
3753 WORD LoadOrderIndex; /* 14/20 */
3754 WORD InitOrderIndex; /* 16/22 */
3755 WORD LoadCount; /* 18/24 */
3756 WORD NameOffset; /* 1a/26 */
3757 BYTE Name[MAXIMUM_FILENAME_LENGTH]; /* 1c/28 */
3758 } RTL_PROCESS_MODULE_INFORMATION, *PRTL_PROCESS_MODULE_INFORMATION;
3759
3760 typedef struct _RTL_PROCESS_MODULES
3761 {
3762 ULONG ModulesCount;
3763 RTL_PROCESS_MODULE_INFORMATION Modules[1]; /* FIXME: should be Modules[0] */
3764 } RTL_PROCESS_MODULES, *PRTL_PROCESS_MODULES;
3765
3766 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
3767 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
3768 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
3769 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
3770 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
3771 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
3772 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
3773 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
3774 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
3775 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
3776 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
3777
3778 typedef struct _RTL_PROCESS_MODULE_INFORMATION_EX
3779 {
3780 USHORT NextOffset;
3781 RTL_PROCESS_MODULE_INFORMATION BaseInfo;
3782 ULONG ImageCheckSum;
3783 ULONG TimeDateStamp;
3784 void *DefaultBase;
3785 } RTL_PROCESS_MODULE_INFORMATION_EX;
3786
3787 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
3788 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
3789 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
3790 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
3791 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
3792 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
3793
3794 #define EH_NONCONTINUABLE 0x01
3795 #define EH_UNWINDING 0x02
3796 #define EH_EXIT_UNWIND 0x04
3797 #define EH_STACK_INVALID 0x08
3798 #define EH_NESTED_CALL 0x10
3799 #define EH_TARGET_UNWIND 0x20
3800 #define EH_COLLIDED_UNWIND 0x40
3801
3802 #ifdef __WINESRC__
3803
3804 /* Wine-specific exceptions codes */
3805
3806 #define EXCEPTION_WINE_STUB 0x80000100 /* stub entry point called */
3807 #define EXCEPTION_WINE_ASSERTION 0x80000101 /* assertion failed */
3808
3809 /* Wine extension; Windows doesn't have a name for this code. This is an
3810 undocumented exception understood by MS VC debugger, allowing the program
3811 to name a particular thread. */
3812 #define EXCEPTION_WINE_NAME_THREAD 0x406D1388
3813
3814 /* used for C++ exceptions in msvcrt
3815 * parameters:
3816 * [0] CXX_FRAME_MAGIC
3817 * [1] pointer to exception object
3818 * [2] pointer to type
3819 */
3820 #define EXCEPTION_WINE_CXX_EXCEPTION 0xe06d7363
3821 #define EXCEPTION_WINE_CXX_FRAME_MAGIC 0x19930520
3822
3823 #endif
3824
3825 typedef LONG (CALLBACK *PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS);
3826
3827 typedef void (CALLBACK *PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE,void*,void*,IO_STATUS_BLOCK*,PTP_IO);
3828
3829 #define PS_ATTRIBUTE_THREAD 0x00010000
3830 #define PS_ATTRIBUTE_INPUT 0x00020000
3831 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
3832
3833 typedef enum _PS_ATTRIBUTE_NUM
3834 {
3835 PsAttributeParentProcess,
3836 PsAttributeDebugPort,
3837 PsAttributeToken,
3838 PsAttributeClientId,
3839 PsAttributeTebAddress,
3840 PsAttributeImageName,
3841 PsAttributeImageInfo,
3842 PsAttributeMemoryReserve,
3843 PsAttributePriorityClass,
3844 PsAttributeErrorMode,
3845 PsAttributeStdHandleInfo,
3846 PsAttributeHandleList,
3847 PsAttributeGroupAffinity,
3848 PsAttributePreferredNode,
3849 PsAttributeIdealProcessor,
3850 PsAttributeUmsThread,
3851 PsAttributeMitigationOptions,
3852 PsAttributeProtectionLevel,
3853 PsAttributeSecureProcess,
3854 PsAttributeJobList,
3855 PsAttributeChildProcessPolicy,
3856 PsAttributeAllApplicationPackagesPolicy,
3857 PsAttributeWin32kFilter,
3858 PsAttributeSafeOpenPromptOriginClaim,
3859 PsAttributeBnoIsolation,
3860 PsAttributeDesktopAppPolicy,
3861 PsAttributeChpe,
3862 PsAttributeMitigationAuditOptions,
3863 PsAttributeMachineType,
3864 PsAttributeComponentFilter,
3865 PsAttributeEnableOptionalXStateFeatures,
3866 PsAttributeMax
3867 } PS_ATTRIBUTE_NUM;
3868
3869 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3870 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3871 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3872 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
3873 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
3874 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
3875 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
3876 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
3877 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
3878 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
3879 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
3880 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
3881 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3882 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
3883 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3884 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT)
3885 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3886 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
3887 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
3888 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
3889 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
3890 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
3891 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
3892 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
3893 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
3894 #define PS_ATTRIBUTE_CHPE (PsAttributeChpe | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3895 #define PS_ATTRIBUTE_MITIGATION_AUDIT_OPTIONS (PsAttributeMitigationAuditOptions | PS_ATTRIBUTE_INPUT)
3896 #define PS_ATTRIBUTE_MACHINE_TYPE (PsAttributeMachineType | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
3897 #define PS_ATTRIBUTE_COMPONENT_FILTER (PsAttributeComponentFilter | PS_ATTRIBUTE_INPUT)
3898 #define PS_ATTRIBUTE_ENABLE_OPTIONAL_XSTATE_FEATURES (PsAttributeEnableOptionalXStateFeatures | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
3899
3900 typedef struct _PS_ATTRIBUTE
3901 {
3902 ULONG_PTR Attribute;
3903 SIZE_T Size;
3904 union
3905 {
3906 ULONG_PTR Value;
3907 void *ValuePtr;
3908 };
3909 SIZE_T *ReturnLength;
3910 } PS_ATTRIBUTE;
3911
3912 typedef struct _PS_ATTRIBUTE_LIST
3913 {
3914 SIZE_T TotalLength;
3915 PS_ATTRIBUTE Attributes[1];
3916 } PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
3917
3918 typedef enum _PS_CREATE_STATE
3919 {
3920 PsCreateInitialState,
3921 PsCreateFailOnFileOpen,
3922 PsCreateFailOnSectionCreate,
3923 PsCreateFailExeFormat,
3924 PsCreateFailMachineMismatch,
3925 PsCreateFailExeName,
3926 PsCreateSuccess,
3927 PsCreateMaximumStates
3928 } PS_CREATE_STATE;
3929
3930 typedef struct _PS_CREATE_INFO
3931 {
3932 SIZE_T Size;
3933 PS_CREATE_STATE State;
3934 union
3935 {
3936 struct
3937 {
3938 union
3939 {
3940 ULONG InitFlags;
3941 struct
3942 {
3943 UCHAR WriteOutputOnExit : 1;
3944 UCHAR DetectManifest : 1;
3945 UCHAR IFEOSkipDebugger : 1;
3946 UCHAR IFEODoNotPropagateKeyState : 1;
3947 UCHAR SpareBits1 : 4;
3948 UCHAR SpareBits2 : 8;
3949 USHORT ProhibitedImageCharacteristics : 16;
3950 };
3951 };
3952 ACCESS_MASK AdditionalFileAccess;
3953 } InitState;
3954 struct
3955 {
3956 HANDLE FileHandle;
3957 } FailSection;
3958 struct
3959 {
3960 USHORT DllCharacteristics;
3961 } ExeFormat;
3962 struct
3963 {
3964 HANDLE IFEOKey;
3965 } ExeName;
3966 struct
3967 {
3968 union
3969 {
3970 ULONG OutputFlags;
3971 struct
3972 {
3973 UCHAR ProtectedProcess : 1;
3974 UCHAR AddressSpaceOverride : 1;
3975 UCHAR DevOverrideEnabled : 1;
3976 UCHAR ManifestDetected : 1;
3977 UCHAR ProtectedProcessLight : 1;
3978 UCHAR SpareBits1 : 3;
3979 UCHAR SpareBits2 : 8;
3980 USHORT SpareBits3 : 16;
3981 };
3982 };
3983 HANDLE FileHandle;
3984 HANDLE SectionHandle;
3985 ULONGLONG UserProcessParametersNative;
3986 ULONG UserProcessParametersWow64;
3987 ULONG CurrentParameterFlags;
3988 ULONGLONG PebAddressNative;
3989 ULONG PebAddressWow64;
3990 ULONGLONG ManifestAddress;
3991 ULONG ManifestSize;
3992 } SuccessState;
3993 };
3994 } PS_CREATE_INFO, *PPS_CREATE_INFO;
3995
3996 typedef struct _DBGKM_EXCEPTION
3997 {
3998 EXCEPTION_RECORD ExceptionRecord;
3999 ULONG FirstChance;
4000 } DBGKM_EXCEPTION, *PDBGKM_EXCEPTION;
4001
4002 typedef struct _DBGKM_CREATE_THREAD
4003 {
4004 ULONG SubSystemKey;
4005 PVOID StartAddress;
4006 } DBGKM_CREATE_THREAD, *PDBGKM_CREATE_THREAD;
4007
4008 typedef struct _DBGKM_CREATE_PROCESS
4009 {
4010 ULONG SubSystemKey;
4011 HANDLE FileHandle;
4012 PVOID BaseOfImage;
4013 ULONG DebugInfoFileOffset;
4014 ULONG DebugInfoSize;
4015 DBGKM_CREATE_THREAD InitialThread;
4016 } DBGKM_CREATE_PROCESS, *PDBGKM_CREATE_PROCESS;
4017
4018 typedef struct _DBGKM_EXIT_THREAD
4019 {
4020 NTSTATUS ExitStatus;
4021 } DBGKM_EXIT_THREAD, *PDBGKM_EXIT_THREAD;
4022
4023 typedef struct _DBGKM_EXIT_PROCESS
4024 {
4025 NTSTATUS ExitStatus;
4026 } DBGKM_EXIT_PROCESS, *PDBGKM_EXIT_PROCESS;
4027
4028 typedef struct _DBGKM_LOAD_DLL
4029 {
4030 HANDLE FileHandle;
4031 PVOID BaseOfDll;
4032 ULONG DebugInfoFileOffset;
4033 ULONG DebugInfoSize;
4034 PVOID NamePointer;
4035 } DBGKM_LOAD_DLL, *PDBGKM_LOAD_DLL;
4036
4037 typedef struct _DBGKM_UNLOAD_DLL
4038 {
4039 PVOID BaseAddress;
4040 } DBGKM_UNLOAD_DLL, *PDBGKM_UNLOAD_DLL;
4041
4042 typedef enum _DBG_STATE
4043 {
4044 DbgIdle,
4045 DbgReplyPending,
4046 DbgCreateThreadStateChange,
4047 DbgCreateProcessStateChange,
4048 DbgExitThreadStateChange,
4049 DbgExitProcessStateChange,
4050 DbgExceptionStateChange,
4051 DbgBreakpointStateChange,
4052 DbgSingleStepStateChange,
4053 DbgLoadDllStateChange,
4054 DbgUnloadDllStateChange
4055 } DBG_STATE, *PDBG_STATE;
4056
4057 typedef struct _DBGUI_CREATE_THREAD
4058 {
4059 HANDLE HandleToThread;
4060 DBGKM_CREATE_THREAD NewThread;
4061 } DBGUI_CREATE_THREAD, *PDBGUI_CREATE_THREAD;
4062
4063 typedef struct _DBGUI_CREATE_PROCESS
4064 {
4065 HANDLE HandleToProcess;
4066 HANDLE HandleToThread;
4067 DBGKM_CREATE_PROCESS NewProcess;
4068 } DBGUI_CREATE_PROCESS, *PDBGUI_CREATE_PROCESS;
4069
4070 typedef struct _DBGUI_WAIT_STATE_CHANGE
4071 {
4072 DBG_STATE NewState;
4073 CLIENT_ID AppClientId;
4074 union
4075 {
4076 DBGKM_EXCEPTION Exception;
4077 DBGUI_CREATE_THREAD CreateThread;
4078 DBGUI_CREATE_PROCESS CreateProcessInfo;
4079 DBGKM_EXIT_THREAD ExitThread;
4080 DBGKM_EXIT_PROCESS ExitProcess;
4081 DBGKM_LOAD_DLL LoadDll;
4082 DBGKM_UNLOAD_DLL UnloadDll;
4083 } StateInfo;
4084 } DBGUI_WAIT_STATE_CHANGE, *PDBGUI_WAIT_STATE_CHANGE;
4085
4086 struct _DEBUG_EVENT;
4087
4088 #define DEBUG_READ_EVENT 0x0001
4089 #define DEBUG_PROCESS_ASSIGN 0x0002
4090 #define DEBUG_SET_INFORMATION 0x0004
4091 #define DEBUG_QUERY_INFORMATION 0x0008
4092 #define DEBUG_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x0f)
4093
4094 #define DEBUG_KILL_ON_CLOSE 0x1
4095
4096 typedef enum _DEBUGOBJECTINFOCLASS
4097 {
4098 DebugObjectKillProcessOnExitInformation = 1,
4099 MaxDebugObjectInfoClass
4100 } DEBUGOBJECTINFOCLASS, *PDEBUGOBJECTINFOCLASS;
4101
4102
4103 typedef struct _WOW64_CPURESERVED
4104 {
4105 USHORT Flags;
4106 USHORT Machine;
4107 /* CONTEXT context */
4108 /* CONTEXT_EX *context_ex */
4109 } WOW64_CPURESERVED, *PWOW64_CPURESERVED;
4110
4111 #define WOW64_CPURESERVED_FLAG_RESET_STATE 1
4112
4113 typedef struct _WOW64_CPU_AREA_INFO
4114 {
4115 void *Context;
4116 void *ContextEx;
4117 void *ContextFlagsLocation;
4118 WOW64_CPURESERVED *CpuReserved;
4119 ULONG ContextFlag;
4120 USHORT Machine;
4121 } WOW64_CPU_AREA_INFO, *PWOW64_CPU_AREA_INFO;
4122
4123 typedef struct _WOW64INFO
4124 {
4125 ULONG NativeSystemPageSize;
4126 ULONG CpuFlags;
4127 ULONG Wow64ExecuteFlags;
4128 ULONG unknown;
4129 ULONGLONG SectionHandle;
4130 ULONGLONG CrossProcessWorkList;
4131 USHORT NativeMachineType;
4132 USHORT EmulatedMachineType;
4133 } WOW64INFO;
4134 C_ASSERT( sizeof(WOW64INFO) == 40 );
4135
4136 #define WOW64_CPUFLAGS_MSFT64 0x01
4137 #define WOW64_CPUFLAGS_SOFTWARE 0x02
4138
4139 /* undocumented layout of WOW64INFO.CrossProcessWorkList */
4140
4141 typedef struct
4142 {
4143 UINT next;
4144 UINT id;
4145 ULONGLONG addr;
4146 ULONGLONG size;
4147 UINT args[4];
4148 } CROSS_PROCESS_WORK_ENTRY;
4149
4150 typedef union
4151 {
4152 struct
4153 {
4154 UINT first;
4155 UINT counter;
4156 };
4157 volatile LONGLONG hdr;
4158 } CROSS_PROCESS_WORK_HDR;
4159
4160 typedef struct
4161 {
4162 CROSS_PROCESS_WORK_HDR free_list;
4163 CROSS_PROCESS_WORK_HDR work_list;
4164 ULONGLONG unknown[4];
4165 CROSS_PROCESS_WORK_ENTRY entries[1];
4166 } CROSS_PROCESS_WORK_LIST;
4167
4168 typedef enum
4169 {
4170 CrossProcessPreVirtualAlloc = 0,
4171 CrossProcessPostVirtualAlloc = 1,
4172 CrossProcessPreVirtualFree = 2,
4173 CrossProcessPostVirtualFree = 3,
4174 CrossProcessPreVirtualProtect = 4,
4175 CrossProcessPostVirtualProtect = 5,
4176 CrossProcessFlushCache = 6,
4177 } CROSS_PROCESS_NOTIFICATION;
4178
4179 #define CROSS_PROCESS_LIST_FLUSH 0x80000000
4180 #define CROSS_PROCESS_LIST_ENTRY(list,pos) \
4181 ((CROSS_PROCESS_WORK_ENTRY *)((char *)(list) + ((pos) & ~CROSS_PROCESS_LIST_FLUSH)))
4182
4183 /* wow64.dll functions */
4184 void * WINAPI Wow64AllocateTemp(SIZE_T);
4185 void WINAPI Wow64ApcRoutine(ULONG_PTR,ULONG_PTR,ULONG_PTR,CONTEXT*);
4186 NTSTATUS WINAPI Wow64KiUserCallbackDispatcher(ULONG,void*,ULONG,void**,ULONG*);
4187 void WINAPI Wow64PassExceptionToGuest(EXCEPTION_POINTERS*);
4188 void WINAPI Wow64PrepareForException(EXCEPTION_RECORD*,CONTEXT*);
4189 void WINAPI Wow64ProcessPendingCrossProcessItems(void);
4190 NTSTATUS WINAPI Wow64RaiseException(int,EXCEPTION_RECORD*);
4191 NTSTATUS WINAPI Wow64SystemServiceEx(UINT,UINT*);
4192
4193 #ifdef __WINESRC__
4194 /* undocumented layout of LdrSystemDllInitBlock */
4195 /* this varies across Windows version; we are using the win10-2004 layout */
4196 typedef struct
4197 {
4198 ULONG version;
4199 ULONG unknown1[3];
4200 ULONG64 unknown2;
4201 ULONG64 pLdrInitializeThunk;
4202 ULONG64 pKiUserExceptionDispatcher;
4203 ULONG64 pKiUserApcDispatcher;
4204 ULONG64 pKiUserCallbackDispatcher;
4205 ULONG64 pRtlUserThreadStart;
4206 ULONG64 pRtlpQueryProcessDebugInformationRemote;
4207 ULONG64 ntdll_handle;
4208 ULONG64 pLdrSystemDllInitBlock;
4209 ULONG64 pRtlpFreezeTimeBias;
4210 } SYSTEM_DLL_INIT_BLOCK;
4211 #endif
4212
4213 typedef struct
4214 {
4215 ULONG_PTR *ServiceTable;
4216 ULONG_PTR *CounterTable;
4217 ULONG_PTR ServiceLimit;
4218 BYTE *ArgumentTable;
4219 } SYSTEM_SERVICE_TABLE;
4220
4221 /* ApiSet structures (format for version 6) */
4222
4223 typedef struct _API_SET_NAMESPACE
4224 {
4225 ULONG Version;
4226 ULONG Size;
4227 ULONG Flags;
4228 ULONG Count;
4229 ULONG EntryOffset;
4230 ULONG HashOffset;
4231 ULONG HashFactor;
4232 } API_SET_NAMESPACE;
4233
4234 typedef struct _API_SET_HASH_ENTRY
4235 {
4236 ULONG Hash;
4237 ULONG Index;
4238 } API_SET_HASH_ENTRY;
4239
4240 typedef struct _API_SET_NAMESPACE_ENTRY
4241 {
4242 ULONG Flags;
4243 ULONG NameOffset;
4244 ULONG NameLength;
4245 ULONG HashedLength;
4246 ULONG ValueOffset;
4247 ULONG ValueCount;
4248 } API_SET_NAMESPACE_ENTRY;
4249
4250 typedef struct _API_SET_VALUE_ENTRY
4251 {
4252 ULONG Flags;
4253 ULONG NameOffset;
4254 ULONG NameLength;
4255 ULONG ValueOffset;
4256 ULONG ValueLength;
4257 } API_SET_VALUE_ENTRY;
4258
4259 /***********************************************************************
4260 * Function declarations
4261 */
4262
4263 NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresence(const UNICODE_STRING*,BOOLEAN*);
4264 NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresenceEx(const UNICODE_STRING*,BOOLEAN*,BOOLEAN*);
4265 NTSYSAPI void WINAPI DbgBreakPoint(void);
4266 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
4267 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
4268 NTSYSAPI NTSTATUS WINAPI DbgUiConnectToDbg(void);
4269 NTSYSAPI NTSTATUS WINAPI DbgUiContinue(CLIENT_ID*,NTSTATUS);
4270 NTSYSAPI NTSTATUS WINAPI DbgUiConvertStateChangeStructure(DBGUI_WAIT_STATE_CHANGE*,struct _DEBUG_EVENT*);
4271 NTSYSAPI NTSTATUS WINAPI DbgUiDebugActiveProcess(HANDLE);
4272 NTSYSAPI HANDLE WINAPI DbgUiGetThreadDebugObject(void);
4273 NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE);
4274 NTSYSAPI void WINAPI DbgUiRemoteBreakin(void*);
4275 NTSYSAPI void WINAPI DbgUiSetThreadDebugObject(HANDLE);
4276 NTSYSAPI NTSTATUS WINAPI DbgUiStopDebugging(HANDLE);
4277 NTSYSAPI NTSTATUS WINAPI DbgUiWaitStateChange(DBGUI_WAIT_STATE_CHANGE*,LARGE_INTEGER*);
4278 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
4279 NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
4280 NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING*,void**);
4281 NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG,HMODULE);
4282 NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
4283 NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY*);
4284 NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
4285 NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
4286 NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING*);
4287 NTSYSAPI NTSTATUS WINAPI LdrGetDllFullName(HMODULE, UNICODE_STRING*);
4288 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
4289 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandleEx(ULONG, LPCWSTR, ULONG *, const UNICODE_STRING*, HMODULE*);
4290 NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR,ULONG,PWSTR*,PWSTR*);
4291 NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
4292 NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
4293 NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
4294 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
4295 NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
4296 NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(RTL_PROCESS_MODULES*, ULONG, ULONG*);
4297 NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG,PLDR_DLL_NOTIFICATION_FUNCTION,void*,void**);
4298 NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void*);
4299 NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG);
4300 NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING*);
4301 NTSYSAPI void WINAPI LdrShutdownProcess(void);
4302 NTSYSAPI void WINAPI LdrShutdownThread(void);
4303 NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE);
4304 NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
4305 NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void*);
4306 NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
4307 NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
4308 NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
4309 NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
4310 NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
4311 NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
4312 NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE,PULONG);
4313 NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle);
4314 NTSYSAPI NTSTATUS WINAPI NtAlertThreadByThreadId(HANDLE);
4315 NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
4316 NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
4317 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG_PTR,SIZE_T*,ULONG,ULONG);
4318 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemoryEx(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG,MEM_EXTENDED_PARAMETER*,ULONG);
4319 NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
4320 NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
4321 NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
4322 NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
4323 NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
4324 NTSYSAPI NTSTATUS WINAPI NtCancelSynchronousIoFile(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
4325 NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
4326 NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE);
4327 NTSYSAPI NTSTATUS WINAPI NtClose(HANDLE);
4328 NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
4329 NTSYSAPI NTSTATUS WINAPI NtCommitTransaction(HANDLE,BOOLEAN);
4330 NTSYSAPI NTSTATUS WINAPI NtCompareObjects(HANDLE,HANDLE);
4331 NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE);
4332 NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
4333 NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT,BOOLEAN);
4334 NTSYSAPI NTSTATUS WINAPI NtCreateDebugObject(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,ULONG);
4335 NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
4336 NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
4337 NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
4338 NTSYSAPI NTSTATUS WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
4339 NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
4340 NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4341 NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
4342 NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
4343 NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
4344 NTSYSAPI NTSTATUS WINAPI NtCreateLowBoxToken(HANDLE*,HANDLE,ACCESS_MASK,OBJECT_ATTRIBUTES*,SID*,ULONG,SID_AND_ATTRIBUTES*,ULONG,HANDLE*);
4345 NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
4346 NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
4347 NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
4348 NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
4349 NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
4350 NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
4351 NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
4352 NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
4353 NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
4354 NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
4355 NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
4356 NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,HANDLE,PRTL_THREAD_START_ROUTINE,void*,ULONG,ULONG_PTR,SIZE_T,SIZE_T,PS_ATTRIBUTE_LIST*);
4357 NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
4358 NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
4359 NTSYSAPI NTSTATUS WINAPI NtCreateTransaction(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,LPGUID,HANDLE,ULONG,ULONG,ULONG,PLARGE_INTEGER,PUNICODE_STRING);
4360 NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE*,HANDLE*,ACCESS_MASK,ACCESS_MASK,OBJECT_ATTRIBUTES*,OBJECT_ATTRIBUTES*,ULONG,ULONG,RTL_USER_PROCESS_PARAMETERS*,PS_CREATE_INFO*,PS_ATTRIBUTE_LIST*);
4361 NTSYSAPI NTSTATUS WINAPI NtDebugActiveProcess(HANDLE,HANDLE);
4362 NTSYSAPI NTSTATUS WINAPI NtDebugContinue(HANDLE,CLIENT_ID*,NTSTATUS);
4363 NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
4364 NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM);
4365 NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
4366 NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE);
4367 NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
4368 NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
4369 NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING);
4370 NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
4371 NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,BOOLEAN,TOKEN_TYPE,PHANDLE);
4372 NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
4373 NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4374 NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
4375 NTSYSAPI NTSTATUS WINAPI NtFilterToken(HANDLE,ULONG,TOKEN_GROUPS*,TOKEN_PRIVILEGES*,TOKEN_GROUPS*,HANDLE*);
4376 NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
4377 NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
4378 NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
4379 NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE);
4380 NTSYSAPI void WINAPI NtFlushProcessWriteBuffers(void);
4381 NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
4382 NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID);
4383 NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4384 NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
4385 NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*);
4386 NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void);
4387 NTSYSAPI NTSTATUS WINAPI NtGetNextThread(HANDLE,HANDLE,ACCESS_MASK,ULONG,ULONG,HANDLE*);
4388 NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*);
4389 NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
4390 NTSYSAPI ULONG WINAPI NtGetTickCount(VOID);
4391 NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
4392 NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE);
4393 NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
4394 NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
4395 NTSYSAPI NTSTATUS WINAPI NtInitializeNlsFiles(void**,LCID*,LARGE_INTEGER*);
4396 NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN);
4397 NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
4398 NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE,HANDLE);
4399 NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
4400 NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *);
4401 NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
4402 NTSYSAPI NTSTATUS WINAPI NtLoadKey2(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *,ULONG);
4403 NTSYSAPI NTSTATUS WINAPI NtLoadKeyEx(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *,ULONG,HANDLE,HANDLE,ACCESS_MASK,HANDLE *,IO_STATUS_BLOCK *);
4404 NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
4405 NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4406 NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE);
4407 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG_PTR,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
4408 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSectionEx(HANDLE,HANDLE,PVOID*,const LARGE_INTEGER*,SIZE_T*,ULONG,ULONG,MEM_EXTENDED_PARAMETER*,ULONG);
4409 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
4410 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
4411 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
4412 NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4413 NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
4414 NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4415 NTSYSAPI NTSTATUS WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
4416 NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4417 NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4418 NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
4419 NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
4420 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
4421 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
4422 NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4423 NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4424 NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
4425 NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
4426 NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
4427 NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
4428 NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4429 NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4430 NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
4431 NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
4432 NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
4433 NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
4434 NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
4435 NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
4436 NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
4437 NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
4438 NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
4439 NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
4440 NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE,LONG*);
4441 NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
4442 NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
4443 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
4444 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID*);
4445 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
4446 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
4447 NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
4448 NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4449 NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
4450 NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
4451 NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
4452 NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
4453 NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4454 NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
4455 NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
4456 NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4457 NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID*);
4458 NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
4459 NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4460 NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
4461 NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
4462 NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4463 NTSYSAPI NTSTATUS WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
4464 NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
4465 NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
4466 NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
4467 NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4468 NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4469 NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
4470 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
4471 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValueEx(PUNICODE_STRING,GUID*,void*,ULONG*,ULONG*);
4472 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4473 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
4474 NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime(PLARGE_INTEGER);
4475 NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
4476 NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
4477 NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
4478 NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
4479 NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
4480 NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4481 NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
4482 NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
4483 NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
4484 NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4485 NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4486 NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
4487 NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE);
4488 NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4489 NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE,PLONG);
4490 NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
4491 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
4492 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE,FILE_IO_COMPLETION_INFORMATION*,ULONG,ULONG*,LARGE_INTEGER*,BOOLEAN);
4493 NTSYSAPI NTSTATUS WINAPI NtRemoveProcessDebug(HANDLE,HANDLE);
4494 NTSYSAPI NTSTATUS WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
4495 NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
4496 NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
4497 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
4498 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
4499 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
4500 NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
4501 NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
4502 NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE,LONG*);
4503 NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
4504 NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
4505 NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE);
4506 NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE,PULONG);
4507 NTSYSAPI NTSTATUS WINAPI NtRollbackTransaction(HANDLE,BOOLEAN);
4508 NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE,HANDLE);
4509 NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
4510 NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
4511 NTSYSAPI NTSTATUS WINAPI NtSetDebugFilterState(ULONG,ULONG,BOOLEAN);
4512 NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE);
4513 NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
4514 NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID);
4515 NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
4516 NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE,LONG*);
4517 NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE);
4518 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE);
4519 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID);
4520 NTSYSAPI NTSTATUS WINAPI NtSetInformationDebugObject(HANDLE,DEBUGOBJECTINFOCLASS,PVOID,ULONG,ULONG*);
4521 NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
4522 NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
4523 NTSYSAPI NTSTATUS WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
4524 NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
4525 NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG);
4526 NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
4527 NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
4528 NTSYSAPI NTSTATUS WINAPI NtSetInformationVirtualMemory(HANDLE,VIRTUAL_MEMORY_INFORMATION_CLASS,ULONG_PTR,PMEMORY_RANGE_ENTRY,PVOID,ULONG);
4529 NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
4530 NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
4531 NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG,LDT_ENTRY,ULONG,LDT_ENTRY);
4532 NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE);
4533 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE);
4534 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID);
4535 NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
4536 NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
4537 NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
4538 NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
4539 NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
4540 NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE,EXECUTION_STATE*);
4541 NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
4542 NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
4543 NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
4544 NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
4545 NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
4546 NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
4547 NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE);
4548 NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE);
4549 NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE);
4550 NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE,PULONG);
4551 NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
4552 NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
4553 NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE,LONG);
4554 NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE,LONG);
4555 NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID);
4556 NTSYSAPI NTSTATUS WINAPI NtTraceControl(ULONG,void*,ULONG,void*,ULONG,ULONG*);
4557 NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *);
4558 NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
4559 NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
4560 NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
4561 NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
4562 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
4563 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSectionEx(HANDLE,PVOID,ULONG);
4564 NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG,PVOID);
4565 NTSYSAPI NTSTATUS WINAPI NtWaitForAlertByThreadId(const void*,const LARGE_INTEGER*);
4566 NTSYSAPI NTSTATUS WINAPI NtWaitForDebugEvent(HANDLE,BOOLEAN,LARGE_INTEGER*,DBGUI_WAIT_STATE_CHANGE*);
4567 NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
4568 NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
4569 NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
4570 NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE);
4571 NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE);
4572 NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
4573 NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
4574 NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
4575 NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
4576 NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void);
4577 NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PULONG);
4578 NTSYSAPI void WINAPI RtlAcquirePebLock(void);
4579 NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
4580 NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
4581 NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
4582 NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
4583 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
4584 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG,TEB*,HANDLE,ULONG_PTR*);
4585 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
4586 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4587 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4588 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
4589 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
4590 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
4591 NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
4592 NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4593 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
4594 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
4595 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
4596 NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
4597 NTSYSAPI NTSTATUS WINAPI RtlAddProcessTrustLabelAce(PACL,DWORD,DWORD,PSID,DWORD,DWORD);
4598 NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE);
4599 NTSYSAPI PVOID WINAPI RtlAddVectoredContinueHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
4600 NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
4601 NTSYSAPI PVOID WINAPI RtlAddressInSectionTable(const IMAGE_NT_HEADERS*,HMODULE,DWORD);
4602 NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
4603 NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
4604 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
4605 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
4606 NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3) __WINE_DEALLOC(RtlFreeHeap,3) __WINE_MALLOC;
4607 NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
4608 NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
4609 NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
4610 NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
4611 NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *,const STRING *);
4612 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
4613 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
4614 NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4615 NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
4616 NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
4617 NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
4618 NTSYSAPI USHORT WINAPI RtlCaptureStackBackTrace(ULONG,ULONG,PVOID*,ULONG*);
4619 NTSYSAPI NTSTATUS WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
4620 NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
4621 NTSYSAPI void WINAPI RtlClearAllBits(PRTL_BITMAP);
4622 NTSYSAPI void WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
4623 NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE,ULONG);
4624 NTSYSAPI LONG WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
4625 NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4626 NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
4627 NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4628 NTSYSAPI DWORD WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
4629 NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
4630 NTSYSAPI NTSTATUS WINAPI RtlConvertToAutoInheritSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,GUID*,BOOL,PGENERIC_MAPPING);
4631 NTSYSAPI NTSTATUS WINAPI RtlCopyContext(CONTEXT*,DWORD,CONTEXT*);
4632 NTSYSAPI NTSTATUS WINAPI RtlCopyExtendedContext(CONTEXT_EX*,ULONG,CONTEXT_EX*);
4633 NTSYSAPI void WINAPI RtlCopyLuid(PLUID,const LUID*);
4634 NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
4635 NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
4636 NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD,PSID,PSID);
4637 NTSYSAPI void WINAPI RtlCopyString(STRING*,const STRING*);
4638 NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
4639 NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
4640 NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE*,const void*);
4641 NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
4642 NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
4643 NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
4644 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
4645 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,ULONG);
4646 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
4647 NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
4648 NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
4649 NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(HANDLE,HANDLE*,RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
4650 NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE);
4651 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
4652 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
4653 NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
4654 NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T,SIZE_T,ULONG,SIZE_T,SIZE_T,INITIAL_TEB*);
4655 NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE,SECURITY_DESCRIPTOR*,BOOLEAN,ULONG,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
4656 NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO*,WCHAR*,DWORD,DWORD*,const char*,DWORD);
4657 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4658 NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
4659 NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID);
4660 NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
4661 NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
4662 NTSYSAPI NTSTATUS WINAPI RtlDefaultNpAcl(PACL*);
4663 NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL,DWORD);
4664 NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4665 NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
4666 NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
4667 NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK);
4668 NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
4669 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
4670 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
4671 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4672 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE);
4673 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
4674 NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
4675 NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR);
4676 NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
4677 NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE);
4678 NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
4679 NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
4680 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
4681 NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void);
4682 NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR);
4683 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4684 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
4685 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToRelativeNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,RTL_RELATIVE_NAME*);
4686 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToRelativeNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,RTL_RELATIVE_NAME*);
4687 NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
4688 NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR);
4689 NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4690 NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK);
4691 NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
4692 NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
4693 NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID);
4694 NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
4695 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
4696 NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
4697 NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
4698 NTSYSAPI BOOLEAN WINAPI RtlEqualLuid(const LUID*,const LUID*);
4699 NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID,PSID);
4700 NTSYSAPI BOOL WINAPI RtlEqualSid(PSID,PSID);
4701 NTSYSAPI BOOLEAN WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
4702 NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4703 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
4704 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
4705 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
4706 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR*,WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4707 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
4708 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
4709 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
4710 NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
4711 NTSYSAPI ULONG WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
4712 NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
4713 NTSYSAPI ULONG WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4714 NTSYSAPI void * WINAPI RtlFindExportedRoutineByName(HMODULE,const char*);
4715 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4716 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4717 NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG);
4718 NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
4719 NTSYSAPI ULONG WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
4720 NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
4721 NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG);
4722 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
4723 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
4724 NTSYSAPI ULONG WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
4725 NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
4726 NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
4727 NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
4728 NTSYSAPI NTSTATUS WINAPI RtlFlsAlloc(PFLS_CALLBACK_FUNCTION,ULONG *);
4729 NTSYSAPI NTSTATUS WINAPI RtlFlsFree(ULONG);
4730 NTSYSAPI NTSTATUS WINAPI RtlFlsGetValue(ULONG,void **);
4731 NTSYSAPI NTSTATUS WINAPI RtlFlsSetValue(ULONG,void *);
4732 NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
4733 #ifdef __ms_va_list
4734 NTSYSAPI NTSTATUS WINAPI RtlFormatMessage(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*);
4735 NTSYSAPI NTSTATUS WINAPI RtlFormatMessageEx(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*,ULONG);
4736 #endif
4737 NTSYSAPI void WINAPI RtlFreeActivationContextStack(ACTIVATION_CONTEXT_STACK *);
4738 NTSYSAPI void WINAPI RtlFreeAnsiString(PANSI_STRING);
4739 NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
4740 NTSYSAPI void WINAPI RtlFreeOemString(POEM_STRING);
4741 NTSYSAPI DWORD WINAPI RtlFreeSid(PSID);
4742 NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void);
4743 NTSYSAPI void WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
4744 NTSYSAPI void WINAPI RtlFreeUserStack(void*);
4745 NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
4746 NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
4747 NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE*);
4748 NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
4749 NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
4750 NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
4751 NTSYSAPI PEB * WINAPI RtlGetCurrentPeb(void);
4752 NTSYSAPI void WINAPI RtlGetCurrentProcessorNumberEx(PROCESSOR_NUMBER*);
4753 NTSYSAPI HANDLE WINAPI RtlGetCurrentTransaction(void);
4754 NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4755 NTSYSAPI ULONG64 WINAPI RtlGetEnabledExtendedFeatures(ULONG64);
4756 NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR,PWSTR*);
4757 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength(ULONG,ULONG*);
4758 NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength2(ULONG,ULONG*,ULONG64);
4759 NTSYSAPI ULONG64 WINAPI RtlGetExtendedFeaturesMask(CONTEXT_EX*);
4760 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
4761 NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
4762 NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4763 NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void);
4764 NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void);
4765 NTSYSAPI NTSTATUS WINAPI RtlGetLocaleFileMappingAddress(void**,LCID*,LARGE_INTEGER*);
4766 NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void);
4767 NTSYSAPI NTSTATUS WINAPI RtlGetNativeSystemInformation(SYSTEM_INFORMATION_CLASS,void*,ULONG,ULONG*);
4768 NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void);
4769 NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD);
4770 NTSYSAPI void WINAPI RtlGetNtVersionNumbers(LPDWORD,LPDWORD,LPDWORD);
4771 NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
4772 NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
4773 NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4774 NTSYSAPI BOOLEAN WINAPI RtlGetProductInfo(DWORD,DWORD,DWORD,DWORD,PDWORD);
4775 NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
4776 NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR*);
4777 NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4778 NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void);
4779 NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void);
4780 NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
4781 NTSYSAPI BOOLEAN WINAPI RtlGetUserInfoHeap(HANDLE,ULONG,void*,void**,ULONG*);
4782 NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
4783 NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
4784 NTSYSAPI NTSTATUS WINAPI RtlHashUnicodeString(const UNICODE_STRING*,BOOLEAN,ULONG,ULONG*);
4785 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
4786 NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4787 NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4788 NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
4789 NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
4790 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
4791 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
4792 NTSYSAPI PVOID WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
4793 NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
4794 NTSYSAPI void WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
4795 NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
4796 NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT*,CPTABLEINFO*);
4797 NTSYSAPI void WINAPI RtlInitNlsTables(USHORT*,USHORT*,USHORT*,NLSTABLEINFO*);
4798 NTSYSAPI void WINAPI RtlInitString(PSTRING,PCSZ);
4799 NTSYSAPI void WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
4800 NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
4801 NTSYSAPI void WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
4802 NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
4803 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
4804 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
4805 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
4806 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext(void*,ULONG,CONTEXT_EX**);
4807 NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext2(void*,ULONG,CONTEXT_EX**,ULONG64);
4808 NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
4809 NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK);
4810 NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
4811 NTSYSAPI NTSTATUS WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
4812 NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
4813 NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
4814 NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
4815 NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE);
4816 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
4817 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
4818 NTSYSAPI BOOLEAN WINAPI RtlIsCurrentProcess(HANDLE);
4819 NTSYSAPI BOOLEAN WINAPI RtlIsCurrentThread(HANDLE);
4820 NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR);
4821 #ifdef __x86_64__
4822 NTSYSAPI BOOLEAN WINAPI RtlIsEcCode(const void*);
4823 #endif
4824 NTSYSAPI BOOLEAN WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
4825 NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG,const WCHAR*,INT,BOOLEAN*);
4826 NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT);
4827 NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
4828 NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
4829 NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
4830 NTSYSAPI BOOLEAN WINAPI RtlIsValidLocaleName(const WCHAR*,ULONG);
4831 NTSYSAPI NTSTATUS WINAPI RtlLcidToLocaleName(LCID,UNICODE_STRING*,ULONG,BOOLEAN);
4832 NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
4833 NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD);
4834 NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
4835 NTSYSAPI DWORD WINAPI RtlLengthSid(PSID);
4836 NTSYSAPI NTSTATUS WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4837 NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR*,LCID*,ULONG);
4838 NTSYSAPI void * WINAPI RtlLocateExtendedFeature(CONTEXT_EX*,ULONG,ULONG*);
4839 NTSYSAPI void * WINAPI RtlLocateExtendedFeature2(CONTEXT_EX*,ULONG,XSTATE_CONFIGURATION*,ULONG*);
4840 NTSYSAPI void * WINAPI RtlLocateLegacyContext(CONTEXT_EX*,ULONG*);
4841 NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE);
4842 NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
4843 NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
4844 NTSYSAPI void WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
4845 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4846 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,ULONG);
4847 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
4848 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectEx(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,GUID*,BOOLEAN,ULONG,HANDLE,PGENERIC_MAPPING);
4849 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectWithMultipleInheritance(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,
4850 GUID **,ULONG,BOOLEAN,ULONG,HANDLE,PGENERIC_MAPPING);
4851 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
4852 NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG,const WCHAR*,INT,WCHAR*,INT*);
4853 NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS);
4854 NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
4855 NTSYSAPI ULONG WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
4856 NTSYSAPI ULONG WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
4857 NTSYSAPI ULONG WINAPI RtlOemStringToUnicodeSize(const STRING*);
4858 NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
4859 NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
4860 NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
4861 NTSYSAPI PVOID WINAPI RtlPcToFileHeader(PVOID,PVOID*);
4862 NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
4863 NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
4864 NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
4865 NTSYSAPI BOOLEAN WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
4866 NTSYSAPI void WINAPI RtlProcessFlsData(void*,ULONG);
4867 NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
4868 NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
4869 NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
4870 NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
4871 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR*,const WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
4872 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
4873 NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
4874 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
4875 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
4876 NTSYSAPI NTSTATUS WINAPI RtlQueryPackageIdentity(HANDLE,WCHAR*,SIZE_T*,WCHAR*,SIZE_T*,BOOLEAN*);
4877 NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER*);
4878 NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER*);
4879 NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
4880 NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
4881 NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
4882 NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
4883 NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
4884 NTSYSAPI void WINAPI RtlRaiseException(PEXCEPTION_RECORD);
4885 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlRaiseStatus(NTSTATUS);
4886 NTSYSAPI ULONG WINAPI RtlRandom(PULONG);
4887 NTSYSAPI ULONG WINAPI RtlRandomEx(PULONG);
4888 NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T) __WINE_ALLOC_SIZE(4) __WINE_DEALLOC(RtlFreeHeap,3);
4889 NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
4890 NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE);
4891 NTSYSAPI void WINAPI RtlReleasePath(PWSTR);
4892 NTSYSAPI void WINAPI RtlReleasePebLock(void);
4893 NTSYSAPI void WINAPI RtlReleaseRelativeName(RTL_RELATIVE_NAME*);
4894 NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK);
4895 NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
4896 NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
4897 NTSYSAPI ULONG WINAPI RtlRemoveVectoredContinueHandler(PVOID);
4898 NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
4899 NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO*);
4900 NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD);
4901 NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
4902 NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
4903 NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
4904 NTSYSAPI void WINAPI RtlSetAllBits(PRTL_BITMAP);
4905 NTSYSAPI void WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
4906 NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
4907 NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
4908 NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
4909 NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
4910 NTSYSAPI BOOL WINAPI RtlSetCurrentTransaction(HANDLE);
4911 NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4912 NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
4913 NTSYSAPI void WINAPI RtlSetExtendedFeaturesMask(CONTEXT_EX*,ULONG64);
4914 NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4915 NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
4916 NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
4917 NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD);
4918 NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
4919 NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
4920 NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4921 NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
4922 NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG);
4923 NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
4924 NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
4925 NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
4926 NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER);
4927 NTSYSAPI BOOLEAN WINAPI RtlSetUserFlagsHeap(HANDLE,ULONG,void*,ULONG,ULONG);
4928 NTSYSAPI BOOLEAN WINAPI RtlSetUserValueHeap(HANDLE,ULONG,void*,void*);
4929 NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
4930 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
4931 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
4932 NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
4933 NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID,DWORD);
4934 NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID);
4935 NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
4936 NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
4937 NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
4938 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
4939 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
4940 NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
4941 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
4942 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
4943 NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
4944 NTSYSAPI NTSTATUS WINAPI RtlUTF8ToUnicodeN(WCHAR*,DWORD,DWORD*,const char*,DWORD);
4945 NTSYSAPI DWORD WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
4946 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
4947 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
4948 NTSYSAPI DWORD WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
4949 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
4950 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4951 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4952 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
4953 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4954 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4955 NTSYSAPI ULONG WINAPI RtlUniform(PULONG);
4956 NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE);
4957 NTSYSAPI void WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
4958 NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR);
4959 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
4960 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
4961 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4962 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
4963 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
4964 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4965 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
4966 NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
4967 NTSYSAPI CHAR WINAPI RtlUpperChar(CHAR);
4968 NTSYSAPI void WINAPI RtlUpperString(STRING *,const STRING *);
4969 NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE,void*);
4970 NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL);
4971 NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
4972 NTSYSAPI BOOLEAN WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
4973 NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID);
4974 NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
4975 NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
4976 NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *,const void *,SIZE_T,const LARGE_INTEGER *);
4977 NTSYSAPI void WINAPI RtlWakeAddressAll(const void *);
4978 NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *);
4979 NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
4980 NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
4981 NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE,PVOID);
4982 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
4983 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
4984 NTSYSAPI USHORT WINAPI RtlWow64GetCurrentMachine(void);
4985 NTSYSAPI NTSTATUS WINAPI RtlWow64GetProcessMachines(HANDLE,USHORT*,USHORT*);
4986 NTSYSAPI NTSTATUS WINAPI RtlWow64GetSharedInfoProcess(HANDLE,BOOLEAN*,WOW64INFO*);
4987 NTSYSAPI NTSTATUS WINAPI RtlWow64IsWowGuestMachineSupported(USHORT,BOOLEAN*);
4988 NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
4989 NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE);
4990 NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
4991 NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
4992 NTSYSAPI NTSTATUS WINAPI RtlpNtMakeTemporaryKey(HANDLE);
4993 NTSYSAPI NTSTATUS WINAPI RtlpNtOpenKey(PHANDLE,ACCESS_MASK,OBJECT_ATTRIBUTES*);
4994 NTSYSAPI NTSTATUS WINAPI RtlpNtSetValueKey(HANDLE,ULONG,const void*,ULONG);
4995 NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
4996 NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
4997 NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
4998 NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **,HANDLE,PTP_IO_CALLBACK,void *,TP_CALLBACK_ENVIRON *);
4999 NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **,PVOID);
5000 NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
5001 NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
5002 NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
5003 NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
5004 NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
5005 NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
5006 NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
5007 NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
5008 NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
5009 NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *);
5010 NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
5011 NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *);
5012 NTSYSAPI void WINAPI TpPostWork(TP_WORK *);
5013 NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
5014 NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
5015 NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
5016 NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *);
5017 NTSYSAPI void WINAPI TpReleasePool(TP_POOL *);
5018 NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *);
5019 NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *);
5020 NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *);
5021 NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
5022 NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
5023 NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
5024 NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
5025 NTSYSAPI void WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
5026 NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
5027 NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *);
5028 NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *,BOOL);
5029 NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
5030 NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *,BOOL);
5031 NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *,BOOL);
5032 #ifdef __ms_va_list
5033 NTSYSAPI NTSTATUS WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
5034 NTSYSAPI NTSTATUS WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
5035 #endif
5036
5037 /* 32-bit or 64-bit only functions */
5038
5039 #ifdef _WIN64
5040 NTSYSAPI void WINAPI RtlOpenCrossProcessEmulatorWorkConnection(HANDLE,HANDLE*,void**);
5041 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCpuAreaInfo(WOW64_CPURESERVED*,ULONG,WOW64_CPU_AREA_INFO*);
5042 NTSYSAPI NTSTATUS WINAPI RtlWow64GetCurrentCpuArea(USHORT*,void**,void**);
5043 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadContext(HANDLE,WOW64_CONTEXT*);
5044 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadSelectorEntry(HANDLE,THREAD_DESCRIPTOR_INFORMATION*,ULONG,ULONG*);
5045 NTSYSAPI CROSS_PROCESS_WORK_ENTRY * WINAPI RtlWow64PopAllCrossProcessWorkFromWorkList(CROSS_PROCESS_WORK_HDR*,BOOLEAN*);
5046 NTSYSAPI CROSS_PROCESS_WORK_ENTRY * WINAPI RtlWow64PopCrossProcessWorkFromFreeList(CROSS_PROCESS_WORK_HDR*);
5047 NTSYSAPI BOOLEAN WINAPI RtlWow64PushCrossProcessWorkOntoFreeList(CROSS_PROCESS_WORK_HDR*,CROSS_PROCESS_WORK_ENTRY*);
5048 NTSYSAPI BOOLEAN WINAPI RtlWow64PushCrossProcessWorkOntoWorkList(CROSS_PROCESS_WORK_HDR*,CROSS_PROCESS_WORK_ENTRY*,void**);
5049 NTSYSAPI BOOLEAN WINAPI RtlWow64RequestCrossProcessHeavyFlush(CROSS_PROCESS_WORK_HDR*);
5050 NTSYSAPI NTSTATUS WINAPI RtlWow64SetThreadContext(HANDLE,const WOW64_CONTEXT*);
5051 #else
5052 NTSYSAPI NTSTATUS WINAPI NtWow64AllocateVirtualMemory64(HANDLE,ULONG64*,ULONG64,ULONG64*,ULONG,ULONG);
5053 NTSYSAPI NTSTATUS WINAPI NtWow64GetNativeSystemInformation(SYSTEM_INFORMATION_CLASS,void*,ULONG,ULONG*);
5054 NTSYSAPI NTSTATUS WINAPI NtWow64IsProcessorFeaturePresent(UINT);
5055 NTSYSAPI NTSTATUS WINAPI NtWow64ReadVirtualMemory64(HANDLE,ULONG64,void*,ULONG64,ULONG64*);
5056 NTSYSAPI NTSTATUS WINAPI NtWow64WriteVirtualMemory64(HANDLE,ULONG64,const void*,ULONG64,ULONG64*);
5057 NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG);
5058 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
5059 NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT,INT);
5060 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
5061 NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
5062 NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
5063 NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
5064 NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
5065 NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG*,LONGLONG,LONGLONG);
5066 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
5067 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
5068 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
5069 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG);
5070 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
5071 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
5072 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
5073 NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
5074 #endif
5075
5076 /* Wine internal functions */
5077
5078 NTSYSAPI NTSTATUS WINAPI wine_nt_to_unix_file_name( const OBJECT_ATTRIBUTES *attr, char *nameA, ULONG *size,
5079 UINT disposition );
5080 NTSYSAPI NTSTATUS WINAPI wine_unix_to_nt_file_name( const char *name, WCHAR *buffer, ULONG *size );
5081
5082
5083 /***********************************************************************
5084 * Inline functions
5085 */
5086
5087 #define InitializeObjectAttributes(p,n,a,r,s) \
5088 do { \
5089 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
5090 (p)->RootDirectory = r; \
5091 (p)->Attributes = a; \
5092 (p)->ObjectName = n; \
5093 (p)->SecurityDescriptor = s; \
5094 (p)->SecurityQualityOfService = NULL; \
5095 } while (0)
5096
5097 #define NtCurrentProcess() ((HANDLE)~(ULONG_PTR)0)
5098 #define NtCurrentThread() ((HANDLE)~(ULONG_PTR)1)
5099
5100 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
5101 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
5102 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
5103 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
5104 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
5105 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
5106 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
5107
5108 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
5109 {
5110 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
5111 lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
5112 return TRUE;
5113 return FALSE;
5114 }
5115
5116 /* These are implemented as __fastcall, so we can't let Winelib apps link with them.
5117 * Moreover, they're always inlined and not exported on 64bit systems.
5118 */
5119 static inline USHORT RtlUshortByteSwap(USHORT s)
5120 {
5121 return (s >> 8) | (s << 8);
5122 }
5123 static inline ULONG RtlUlongByteSwap(ULONG i)
5124 {
5125 return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
5126 }
5127 static inline ULONGLONG RtlUlonglongByteSwap(ULONGLONG i)
5128 {
5129 return ((ULONGLONG)RtlUlongByteSwap((ULONG)i) << 32) | RtlUlongByteSwap((ULONG)(i >> 32));
5130 }
5131
5132 /* list manipulation macros */
5133 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
5134 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
5135 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
5136 #define IsListEmpty(le) ((le)->Flink == (le))
5137 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
5138 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
5139 {
5140 PLIST_ENTRY f, b, e;
5141
5142 e = le->Flink;
5143 f = le->Flink->Flink;
5144 b = le->Flink->Blink;
5145 f->Blink = b;
5146 b->Flink = f;
5147
5148 if (e != le) e->Flink = e->Blink = NULL;
5149 return e;
5150 }
5151 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
5152 {
5153 PLIST_ENTRY f, b, e;
5154
5155 e = le->Blink;
5156 f = le->Blink->Flink;
5157 b = le->Blink->Blink;
5158 f->Blink = b;
5159 b->Flink = f;
5160
5161 if (e != le) e->Flink = e->Blink = NULL;
5162 return e;
5163 }
5164
5165
5166 #ifdef __WINESRC__
5167
5168 /* Wine internal functions */
5169
5170 extern NTSTATUS WINAPI __wine_unix_spawnvp( char * const argv[], int wait );
5171
5172 /* The thread information for 16-bit threads */
5173 /* NtCurrentTeb()->SubSystemTib points to this */
5174 typedef struct
5175 {
5176 void *unknown; /* 00 unknown */
5177 UNICODE_STRING *exe_name; /* 04 exe module name */
5178
5179 /* the following fields do not exist under Windows */
5180 UNICODE_STRING exe_str; /* exe name string pointed to by exe_name */
5181 CURDIR curdir; /* current directory */
5182 WCHAR curdir_buffer[MAX_PATH];
5183 } WIN16_SUBSYSTEM_TIB;
5184
5185 /* Undocumented: layout of the locale data in the locale.nls file */
5186
5187 typedef struct
5188 {
5189 UINT sname; /* 000 LOCALE_SNAME */
5190 UINT sopentypelanguagetag; /* 004 LOCALE_SOPENTYPELANGUAGETAG */
5191 USHORT ilanguage; /* 008 LOCALE_ILANGUAGE */
5192 USHORT unique_lcid; /* 00a unique id if lcid == 0x1000 */
5193 USHORT idigits; /* 00c LOCALE_IDIGITS */
5194 USHORT inegnumber; /* 00e LOCALE_INEGNUMBER */
5195 USHORT icurrdigits; /* 010 LOCALE_ICURRDIGITS*/
5196 USHORT icurrency; /* 012 LOCALE_ICURRENCY */
5197 USHORT inegcurr; /* 014 LOCALE_INEGCURR */
5198 USHORT ilzero; /* 016 LOCALE_ILZERO */
5199 USHORT inotneutral; /* 018 LOCALE_INEUTRAL (inverted) */
5200 USHORT ifirstdayofweek; /* 01a LOCALE_IFIRSTDAYOFWEEK (monday=0) */
5201 USHORT ifirstweekofyear; /* 01c LOCALE_IFIRSTWEEKOFYEAR */
5202 USHORT icountry; /* 01e LOCALE_ICOUNTRY */
5203 USHORT imeasure; /* 020 LOCALE_IMEASURE */
5204 USHORT idigitsubstitution; /* 022 LOCALE_IDIGITSUBSTITUTION */
5205 UINT sgrouping; /* 024 LOCALE_SGROUPING (as binary string) */
5206 UINT smongrouping; /* 028 LOCALE_SMONGROUPING (as binary string) */
5207 UINT slist; /* 02c LOCALE_SLIST */
5208 UINT sdecimal; /* 030 LOCALE_SDECIMAL */
5209 UINT sthousand; /* 034 LOCALE_STHOUSAND */
5210 UINT scurrency; /* 038 LOCALE_SCURRENCY */
5211 UINT smondecimalsep; /* 03c LOCALE_SMONDECIMALSEP */
5212 UINT smonthousandsep; /* 040 LOCALE_SMONTHOUSANDSEP */
5213 UINT spositivesign; /* 044 LOCALE_SPOSITIVESIGN */
5214 UINT snegativesign; /* 048 LOCALE_SNEGATIVESIGN */
5215 UINT s1159; /* 04c LOCALE_S1159 */
5216 UINT s2359; /* 050 LOCALE_S2359 */
5217 UINT snativedigits; /* 054 LOCALE_SNATIVEDIGITS (array of single digits) */
5218 UINT stimeformat; /* 058 LOCALE_STIMEFORMAT (array of formats) */
5219 UINT sshortdate; /* 05c LOCALE_SSHORTDATE (array of formats) */
5220 UINT slongdate; /* 060 LOCALE_SLONGDATE (array of formats) */
5221 UINT syearmonth; /* 064 LOCALE_SYEARMONTH (array of formats) */
5222 UINT sduration; /* 068 LOCALE_SDURATION (array of formats) */
5223 USHORT idefaultlanguage; /* 06c LOCALE_IDEFAULTLANGUAGE */
5224 USHORT idefaultansicodepage; /* 06e LOCALE_IDEFAULTANSICODEPAGE */
5225 USHORT idefaultcodepage; /* 070 LOCALE_IDEFAULTCODEPAGE */
5226 USHORT idefaultmaccodepage; /* 072 LOCALE_IDEFAULTMACCODEPAGE */
5227 USHORT idefaultebcdiccodepage; /* 074 LOCALE_IDEFAULTEBCDICCODEPAGE */
5228 USHORT old_geoid; /* 076 LOCALE_IGEOID (older version?) */
5229 USHORT ipapersize; /* 078 LOCALE_IPAPERSIZE */
5230 BYTE islamic_cal[2]; /* 07a calendar id for islamic calendars (?) */
5231 UINT scalendartype; /* 07c string, first char is LOCALE_ICALENDARTYPE, next chars are LOCALE_IOPTIONALCALENDAR */
5232 UINT sabbrevlangname; /* 080 LOCALE_SABBREVLANGNAME */
5233 UINT siso639langname; /* 084 LOCALE_SISO639LANGNAME */
5234 UINT senglanguage; /* 088 LOCALE_SENGLANGUAGE */
5235 UINT snativelangname; /* 08c LOCALE_SNATIVELANGNAME */
5236 UINT sengcountry; /* 090 LOCALE_SENGCOUNTRY */
5237 UINT snativectryname; /* 094 LOCALE_SNATIVECTRYNAME */
5238 UINT sabbrevctryname; /* 098 LOCALE_SABBREVCTRYNAME */
5239 UINT siso3166ctryname; /* 09c LOCALE_SISO3166CTRYNAME */
5240 UINT sintlsymbol; /* 0a0 LOCALE_SINTLSYMBOL */
5241 UINT sengcurrname; /* 0a4 LOCALE_SENGCURRNAME */
5242 UINT snativecurrname; /* 0a8 LOCALE_SNATIVECURRNAME */
5243 UINT fontsignature; /* 0ac LOCALE_FONTSIGNATURE (binary string) */
5244 UINT siso639langname2; /* 0b0 LOCALE_SISO639LANGNAME2 */
5245 UINT siso3166ctryname2; /* 0b4 LOCALE_SISO3166CTRYNAME2 */
5246 UINT sparent; /* 0b8 LOCALE_SPARENT */
5247 UINT sdayname; /* 0bc LOCALE_SDAYNAME1 (array of days 1..7) */
5248 UINT sabbrevdayname; /* 0c0 LOCALE_SABBREVDAYNAME1 (array of days 1..7) */
5249 UINT smonthname; /* 0c4 LOCALE_SMONTHNAME1 (array of months 1..13) */
5250 UINT sabbrevmonthname; /* 0c8 LOCALE_SABBREVMONTHNAME1 (array of months 1..13) */
5251 UINT sgenitivemonth; /* 0cc equivalent of LOCALE_SMONTHNAME1 for genitive months */
5252 UINT sabbrevgenitivemonth; /* 0d0 equivalent of LOCALE_SABBREVMONTHNAME1 for genitive months */
5253 UINT calnames; /* 0d4 array of calendar names */
5254 UINT customsorts; /* 0d8 array of custom sort names */
5255 USHORT inegativepercent; /* 0dc LOCALE_INEGATIVEPERCENT */
5256 USHORT ipositivepercent; /* 0de LOCALE_IPOSITIVEPERCENT */
5257 USHORT unknown1; /* 0e0 */
5258 USHORT ireadinglayout; /* 0e2 LOCALE_IREADINGLAYOUT */
5259 USHORT unknown2[2]; /* 0e4 */
5260 UINT unused1; /* 0e8 unused? */
5261 UINT sengdisplayname; /* 0ec LOCALE_SENGLISHDISPLAYNAME */
5262 UINT snativedisplayname; /* 0f0 LOCALE_SNATIVEDISPLAYNAME */
5263 UINT spercent; /* 0f4 LOCALE_SPERCENT */
5264 UINT snan; /* 0f8 LOCALE_SNAN */
5265 UINT sposinfinity; /* 0fc LOCALE_SPOSINFINITY */
5266 UINT sneginfinity; /* 100 LOCALE_SNEGINFINITY */
5267 UINT unused2; /* 104 unused? */
5268 UINT serastring; /* 108 CAL_SERASTRING */
5269 UINT sabbreverastring; /* 10c CAL_SABBREVERASTRING */
5270 UINT unused3; /* 110 unused? */
5271 UINT sconsolefallbackname; /* 114 LOCALE_SCONSOLEFALLBACKNAME */
5272 UINT sshorttime; /* 118 LOCALE_SSHORTTIME (array of formats) */
5273 UINT sshortestdayname; /* 11c LOCALE_SSHORTESTDAYNAME1 (array of days 1..7) */
5274 UINT unused4; /* 120 unused? */
5275 UINT ssortlocale; /* 124 LOCALE_SSORTLOCALE */
5276 UINT skeyboardstoinstall; /* 128 LOCALE_SKEYBOARDSTOINSTALL */
5277 UINT sscripts; /* 12c LOCALE_SSCRIPTS */
5278 UINT srelativelongdate; /* 130 LOCALE_SRELATIVELONGDATE */
5279 UINT igeoid; /* 134 LOCALE_IGEOID */
5280 UINT sshortestam; /* 138 LOCALE_SSHORTESTAM */
5281 UINT sshortestpm; /* 13c LOCALE_SSHORTESTPM */
5282 UINT smonthday; /* 140 LOCALE_SMONTHDAY (array of formats) */
5283 UINT keyboard_layout; /* 144 keyboard layouts */
5284 } NLS_LOCALE_DATA;
5285
5286 typedef struct
5287 {
5288 UINT id; /* 00 lcid */
5289 USHORT idx; /* 04 index in locales array */
5290 USHORT name; /* 06 locale name */
5291 } NLS_LOCALE_LCID_INDEX;
5292
5293 typedef struct
5294 {
5295 USHORT name; /* 00 locale name */
5296 USHORT idx; /* 02 index in locales array */
5297 UINT id; /* 04 lcid */
5298 } NLS_LOCALE_LCNAME_INDEX;
5299
5300 typedef struct
5301 {
5302 UINT offset; /* 00 offset to version, always 8? */
5303 UINT unknown1; /* 04 */
5304 UINT version; /* 08 file format version */
5305 UINT magic; /* 0c magic 'NSDS' */
5306 UINT unknown2[3]; /* 10 */
5307 USHORT header_size; /* 1c size of this header (?) */
5308 USHORT nb_lcids; /* 1e number of lcids in index */
5309 USHORT nb_locales; /* 20 number of locales in array */
5310 USHORT locale_size; /* 22 size of NLS_LOCALE_DATA structure */
5311 UINT locales_offset; /* 24 offset of locales array */
5312 USHORT nb_lcnames; /* 28 number of lcnames in index */
5313 USHORT pad; /* 2a */
5314 UINT lcids_offset; /* 2c offset of lcids index */
5315 UINT lcnames_offset; /* 30 offset of lcnames index */
5316 UINT unknown3; /* 34 */
5317 USHORT nb_calendars; /* 38 number of calendars in array */
5318 USHORT calendar_size; /* 3a size of calendar structure */
5319 UINT calendars_offset; /* 3c offset of calendars array */
5320 UINT strings_offset; /* 40 offset of strings data */
5321 USHORT unknown4[4]; /* 44 */
5322 } NLS_LOCALE_HEADER;
5323
5324 #endif /* __WINESRC__ */
5325
5326 #ifdef __cplusplus
5327 } /* extern "C" */
5328 #endif /* defined(__cplusplus) */
5329
5330 #endif /* __WINE_WINTERNL_H */
Windows API implementation