?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
msscript.ocx: Uncache the module objects when adding new code.
[wine.git] / include / winternl.h
blob8efdaf311932a8474affe7469807b69b9bd37eed
1 /*
2 * Internal NT APIs and data structures
3 *
4 * Copyright (C) the Wine project
5 *
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
10 *
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
15 *
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
19 */
20
21 #ifndef __WINE_WINTERNL_H
22 #define __WINE_WINTERNL_H
23
24 #include <ntdef.h>
25 #include <windef.h>
26
27 #ifdef __cplusplus
28 extern "C" {
29 #endif /* defined(__cplusplus) */
30
31
32 /**********************************************************************
33 * Fundamental types and data structures
34 */
35
36 #ifndef WINE_NTSTATUS_DECLARED
37 #define WINE_NTSTATUS_DECLARED
38 typedef LONG NTSTATUS;
39 #endif
40
41 typedef const char *PCSZ;
42
43 typedef short CSHORT;
44 typedef CSHORT *PCSHORT;
45
46 #ifndef __STRING_DEFINED__
47 #define __STRING_DEFINED__
48 typedef struct _STRING {
49 USHORT Length;
50 USHORT MaximumLength;
51 PCHAR Buffer;
52 } STRING, *PSTRING;
53 #endif
54
55 typedef STRING ANSI_STRING;
56 typedef PSTRING PANSI_STRING;
57 typedef const STRING *PCANSI_STRING;
58
59 typedef STRING OEM_STRING;
60 typedef PSTRING POEM_STRING;
61 typedef const STRING *PCOEM_STRING;
62
63 #ifndef __UNICODE_STRING_DEFINED__
64 #define __UNICODE_STRING_DEFINED__
65 typedef struct _UNICODE_STRING {
66 USHORT Length; /* bytes */
67 USHORT MaximumLength; /* bytes */
68 PWSTR Buffer;
69 } UNICODE_STRING, *PUNICODE_STRING;
70 #endif
71
72 typedef const UNICODE_STRING *PCUNICODE_STRING;
73
74 #ifndef _FILETIME_
75 #define _FILETIME_
76 /* 64 bit number of 100 nanoseconds intervals since January 1, 1601 */
77 typedef struct _FILETIME
78 {
79 #ifdef WORDS_BIGENDIAN
80 DWORD dwHighDateTime;
81 DWORD dwLowDateTime;
82 #else
83 DWORD dwLowDateTime;
84 DWORD dwHighDateTime;
85 #endif
86 } FILETIME, *PFILETIME, *LPFILETIME;
87 #endif /* _FILETIME_ */
88
89 /*
90 * RTL_SYSTEM_TIME and RTL_TIME_ZONE_INFORMATION are the same as
91 * the SYSTEMTIME and TIME_ZONE_INFORMATION structures defined
92 * in winbase.h, however we need to define them separately so
93 * winternl.h doesn't depend on winbase.h. They are used by
94 * RtlQueryTimeZoneInformation and RtlSetTimeZoneInformation.
95 * The names are guessed; if anybody knows the real names, let me know.
96 */
97 typedef struct _RTL_SYSTEM_TIME {
98 WORD wYear;
99 WORD wMonth;
100 WORD wDayOfWeek;
101 WORD wDay;
102 WORD wHour;
103 WORD wMinute;
104 WORD wSecond;
105 WORD wMilliseconds;
106 } RTL_SYSTEM_TIME, *PRTL_SYSTEM_TIME;
107
108 typedef struct _RTL_TIME_ZONE_INFORMATION {
109 LONG Bias;
110 WCHAR StandardName[32];
111 RTL_SYSTEM_TIME StandardDate;
112 LONG StandardBias;
113 WCHAR DaylightName[32];
114 RTL_SYSTEM_TIME DaylightDate;
115 LONG DaylightBias;
116 } RTL_TIME_ZONE_INFORMATION, *PRTL_TIME_ZONE_INFORMATION;
117
118 typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION
119 {
120 LONG Bias;
121 WCHAR StandardName[32];
122 RTL_SYSTEM_TIME StandardDate;
123 LONG StandardBias;
124 WCHAR DaylightName[32];
125 RTL_SYSTEM_TIME DaylightDate;
126 LONG DaylightBias;
127 WCHAR TimeZoneKeyName[128];
128 BOOLEAN DynamicDaylightTimeDisabled;
129 } RTL_DYNAMIC_TIME_ZONE_INFORMATION, *PRTL_DYNAMIC_TIME_ZONE_INFORMATION;
130
131 typedef struct _CLIENT_ID
132 {
133 HANDLE UniqueProcess;
134 HANDLE UniqueThread;
135 } CLIENT_ID, *PCLIENT_ID;
136
137 typedef struct _CURDIR
138 {
139 UNICODE_STRING DosPath;
140 PVOID Handle;
141 } CURDIR, *PCURDIR;
142
143 typedef struct RTL_DRIVE_LETTER_CURDIR
144 {
145 USHORT Flags;
146 USHORT Length;
147 ULONG TimeStamp;
148 UNICODE_STRING DosPath;
149 } RTL_DRIVE_LETTER_CURDIR, *PRTL_DRIVE_LETTER_CURDIR;
150
151 typedef struct _RTL_RELATIVE_NAME
152 {
153 UNICODE_STRING RelativeName;
154 HANDLE ContainerDirectory;
155 void *CurDirRef;
156 } RTL_RELATIVE_NAME, *PRTL_RELATIVE_NAME;
157
158 typedef struct tagRTL_BITMAP {
159 ULONG SizeOfBitMap; /* Number of bits in the bitmap */
160 PULONG Buffer; /* Bitmap data, assumed sized to a DWORD boundary */
161 } RTL_BITMAP, *PRTL_BITMAP;
162
163 typedef const RTL_BITMAP *PCRTL_BITMAP;
164
165 typedef struct tagRTL_BITMAP_RUN {
166 ULONG StartingIndex; /* Bit position at which run starts */
167 ULONG NumberOfBits; /* Size of the run in bits */
168 } RTL_BITMAP_RUN, *PRTL_BITMAP_RUN;
169
170 typedef const RTL_BITMAP_RUN *PCRTL_BITMAP_RUN;
171
172 typedef struct _RTL_USER_PROCESS_PARAMETERS
173 {
174 ULONG AllocationSize;
175 ULONG Size;
176 ULONG Flags;
177 ULONG DebugFlags;
178 HANDLE ConsoleHandle;
179 ULONG ConsoleFlags;
180 HANDLE hStdInput;
181 HANDLE hStdOutput;
182 HANDLE hStdError;
183 CURDIR CurrentDirectory;
184 UNICODE_STRING DllPath;
185 UNICODE_STRING ImagePathName;
186 UNICODE_STRING CommandLine;
187 PWSTR Environment;
188 ULONG dwX;
189 ULONG dwY;
190 ULONG dwXSize;
191 ULONG dwYSize;
192 ULONG dwXCountChars;
193 ULONG dwYCountChars;
194 ULONG dwFillAttribute;
195 ULONG dwFlags;
196 ULONG wShowWindow;
197 UNICODE_STRING WindowTitle;
198 UNICODE_STRING Desktop;
199 UNICODE_STRING ShellInfo;
200 UNICODE_STRING RuntimeInfo;
201 RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20];
202 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
203
204 /* value for Flags field (FIXME: not the correct name) */
205 #define PROCESS_PARAMS_FLAG_NORMALIZED 1
206
207 typedef struct _PEB_LDR_DATA
208 {
209 ULONG Length;
210 BOOLEAN Initialized;
211 PVOID SsHandle;
212 LIST_ENTRY InLoadOrderModuleList;
213 LIST_ENTRY InMemoryOrderModuleList;
214 LIST_ENTRY InInitializationOrderModuleList;
215 PVOID EntryInProgress;
216 BOOLEAN ShutdownInProgress;
217 HANDLE ShutdownThreadId;
218 } PEB_LDR_DATA, *PPEB_LDR_DATA;
219
220 typedef struct _GDI_TEB_BATCH
221 {
222 ULONG Offset;
223 HANDLE HDC;
224 ULONG Buffer[0x136];
225 } GDI_TEB_BATCH;
226
227 typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
228 {
229 struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME *Previous;
230 struct _ACTIVATION_CONTEXT *ActivationContext;
231 ULONG Flags;
232 } RTL_ACTIVATION_CONTEXT_STACK_FRAME, *PRTL_ACTIVATION_CONTEXT_STACK_FRAME;
233
234 typedef struct _ACTIVATION_CONTEXT_STACK
235 {
236 RTL_ACTIVATION_CONTEXT_STACK_FRAME *ActiveFrame;
237 LIST_ENTRY FrameListCache;
238 ULONG Flags;
239 ULONG NextCookieSequenceNumber;
240 ULONG_PTR StackId;
241 } ACTIVATION_CONTEXT_STACK, *PACTIVATION_CONTEXT_STACK;
242
243 typedef struct _TEB_ACTIVE_FRAME_CONTEXT
244 {
245 ULONG Flags;
246 const char *FrameName;
247 } TEB_ACTIVE_FRAME_CONTEXT, *PTEB_ACTIVE_FRAME_CONTEXT;
248
249 typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX
250 {
251 TEB_ACTIVE_FRAME_CONTEXT BasicContext;
252 const char *SourceLocation;
253 } TEB_ACTIVE_FRAME_CONTEXT_EX, *PTEB_ACTIVE_FRAME_CONTEXT_EX;
254
255 typedef struct _TEB_ACTIVE_FRAME
256 {
257 ULONG Flags;
258 struct _TEB_ACTIVE_FRAME *Previous;
259 TEB_ACTIVE_FRAME_CONTEXT *Context;
260 } TEB_ACTIVE_FRAME, *PTEB_ACTIVE_FRAME;
261
262 typedef struct _TEB_ACTIVE_FRAME_EX
263 {
264 TEB_ACTIVE_FRAME BasicFrame;
265 void *ExtensionIdentifier;
266 } TEB_ACTIVE_FRAME_EX, *PTEB_ACTIVE_FRAME_EX;
267
268 #define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
269 #define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
270
271 /***********************************************************************
272 * PEB data structure
273 */
274 typedef struct _PEB
275 { /* win32/win64 */
276 BOOLEAN InheritedAddressSpace; /* 000/000 */
277 BOOLEAN ReadImageFileExecOptions; /* 001/001 */
278 BOOLEAN BeingDebugged; /* 002/002 */
279 BOOLEAN SpareBool; /* 003/003 */
280 HANDLE Mutant; /* 004/008 */
281 HMODULE ImageBaseAddress; /* 008/010 */
282 PPEB_LDR_DATA LdrData; /* 00c/018 */
283 RTL_USER_PROCESS_PARAMETERS *ProcessParameters; /* 010/020 */
284 PVOID SubSystemData; /* 014/028 */
285 HANDLE ProcessHeap; /* 018/030 */
286 PRTL_CRITICAL_SECTION FastPebLock; /* 01c/038 */
287 PVOID /*PPEBLOCKROUTINE*/ FastPebLockRoutine; /* 020/040 */
288 PVOID /*PPEBLOCKROUTINE*/ FastPebUnlockRoutine; /* 024/048 */
289 ULONG EnvironmentUpdateCount; /* 028/050 */
290 PVOID KernelCallbackTable; /* 02c/058 */
291 ULONG Reserved[2]; /* 030/060 */
292 PVOID /*PPEB_FREE_BLOCK*/ FreeList; /* 038/068 */
293 ULONG TlsExpansionCounter; /* 03c/070 */
294 PRTL_BITMAP TlsBitmap; /* 040/078 */
295 ULONG TlsBitmapBits[2]; /* 044/080 */
296 PVOID ReadOnlySharedMemoryBase; /* 04c/088 */
297 PVOID ReadOnlySharedMemoryHeap; /* 050/090 */
298 PVOID *ReadOnlyStaticServerData; /* 054/098 */
299 PVOID AnsiCodePageData; /* 058/0a0 */
300 PVOID OemCodePageData; /* 05c/0a8 */
301 PVOID UnicodeCaseTableData; /* 060/0b0 */
302 ULONG NumberOfProcessors; /* 064/0b8 */
303 ULONG NtGlobalFlag; /* 068/0bc */
304 LARGE_INTEGER CriticalSectionTimeout; /* 070/0c0 */
305 SIZE_T HeapSegmentReserve; /* 078/0c8 */
306 SIZE_T HeapSegmentCommit; /* 07c/0d0 */
307 SIZE_T HeapDeCommitTotalFreeThreshold; /* 080/0d8 */
308 SIZE_T HeapDeCommitFreeBlockThreshold; /* 084/0e0 */
309 ULONG NumberOfHeaps; /* 088/0e8 */
310 ULONG MaximumNumberOfHeaps; /* 08c/0ec */
311 PVOID *ProcessHeaps; /* 090/0f0 */
312 PVOID GdiSharedHandleTable; /* 094/0f8 */
313 PVOID ProcessStarterHelper; /* 098/100 */
314 PVOID GdiDCAttributeList; /* 09c/108 */
315 PVOID LoaderLock; /* 0a0/110 */
316 ULONG OSMajorVersion; /* 0a4/118 */
317 ULONG OSMinorVersion; /* 0a8/11c */
318 ULONG OSBuildNumber; /* 0ac/120 */
319 ULONG OSPlatformId; /* 0b0/124 */
320 ULONG ImageSubSystem; /* 0b4/128 */
321 ULONG ImageSubSystemMajorVersion; /* 0b8/12c */
322 ULONG ImageSubSystemMinorVersion; /* 0bc/130 */
323 ULONG ImageProcessAffinityMask; /* 0c0/134 */
324 HANDLE GdiHandleBuffer[28]; /* 0c4/138 */
325 ULONG unknown[6]; /* 134/218 */
326 PVOID PostProcessInitRoutine; /* 14c/230 */
327 PRTL_BITMAP TlsExpansionBitmap; /* 150/238 */
328 ULONG TlsExpansionBitmapBits[32]; /* 154/240 */
329 ULONG SessionId; /* 1d4/2c0 */
330 ULARGE_INTEGER AppCompatFlags; /* 1d8/2c8 */
331 ULARGE_INTEGER AppCompatFlagsUser; /* 1e0/2d0 */
332 PVOID ShimData; /* 1e8/2d8 */
333 PVOID AppCompatInfo; /* 1ec/2e0 */
334 UNICODE_STRING CSDVersion; /* 1f0/2e8 */
335 PVOID ActivationContextData; /* 1f8/2f8 */
336 PVOID ProcessAssemblyStorageMap; /* 1fc/300 */
337 PVOID SystemDefaultActivationData; /* 200/308 */
338 PVOID SystemAssemblyStorageMap; /* 204/310 */
339 SIZE_T MinimumStackCommit; /* 208/318 */
340 PVOID *FlsCallback; /* 20c/320 */
341 LIST_ENTRY FlsListHead; /* 210/328 */
342 PRTL_BITMAP FlsBitmap; /* 218/338 */
343 ULONG FlsBitmapBits[4]; /* 21c/340 */
344 ULONG FlsHighIndex; /* 22c/350 */
345 PVOID WerRegistrationData; /* 230/358 */
346 PVOID WerShipAssertPtr; /* 234/360 */
347 PVOID pUnused; /* 238/368 */
348 PVOID pImageHeaderHash; /* 23c/370 */
349 ULONG TracingFlags; /* 240/378 */
350 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 248/380 */
351 ULONG TppWorkerpListLock; /* 250/388 */
352 LIST_ENTRY TppWorkerpList; /* 254/390 */
353 PVOID WaitOnAddressHashTable [0x80]; /* 25c/3a0 */
354 PVOID TelemetryCoverageHeader; /* 45c/7a0 */
355 ULONG CloudFileFlags; /* 460/7a8 */
356 } PEB, *PPEB;
357
358
359 /***********************************************************************
360 * TEB data structure
361 */
362 typedef struct _TEB
363 { /* win32/win64 */
364 NT_TIB Tib; /* 000/0000 */
365 PVOID EnvironmentPointer; /* 01c/0038 */
366 CLIENT_ID ClientId; /* 020/0040 */
367 PVOID ActiveRpcHandle; /* 028/0050 */
368 PVOID ThreadLocalStoragePointer; /* 02c/0058 */
369 PPEB Peb; /* 030/0060 */
370 ULONG LastErrorValue; /* 034/0068 */
371 ULONG CountOfOwnedCriticalSections; /* 038/006c */
372 PVOID CsrClientThread; /* 03c/0070 */
373 PVOID Win32ThreadInfo; /* 040/0078 */
374 ULONG User32Reserved[26]; /* 044/0080 */
375 ULONG UserReserved[5]; /* 0ac/00e8 */
376 PVOID WOW32Reserved; /* 0c0/0100 */
377 ULONG CurrentLocale; /* 0c4/0108 */
378 ULONG FpSoftwareStatusRegister; /* 0c8/010c */
379 PVOID ReservedForDebuggerInstrumentation[16]; /* 0cc/0110 */
380 #ifdef _WIN64
381 PVOID SystemReserved1[30]; /* /0190 */
382 #else
383 PVOID SystemReserved1[26]; /* 10c/ used for krnl386 private data in Wine */
384 #endif
385 char PlaceholderCompatibilityMode; /* 174/0280 */
386 char PlaceholderReserved[11]; /* 175/0281 */
387 DWORD ProxiedProcessId; /* 180/028c */
388 ACTIVATION_CONTEXT_STACK ActivationContextStack; /* 184/0290 */
389 UCHAR WorkingOnBehalfOfTicket[8]; /* 19c/02b8 */
390 LONG ExceptionCode; /* 1a4/02c0 */
391 ACTIVATION_CONTEXT_STACK *ActivationContextStackPointer; /* 1a8/02c8 */
392 ULONG_PTR InstrumentationCallbackSp; /* 1ac/02d0 */
393 ULONG_PTR InstrumentationCallbackPreviousPc; /* 1b0/02d8 */
394 ULONG_PTR InstrumentationCallbackPreviousSp; /* 1b4/02e0 */
395 #ifdef _WIN64
396 ULONG TxFsContext; /* /02e8 */
397 BOOLEAN InstrumentationCallbackDisabled; /* /02ec */
398 #else
399 BOOLEAN InstrumentationCallbackDisabled; /* 1b8/ */
400 BYTE SpareBytes1[23]; /* 1b9/ */
401 ULONG TxFsContext; /* 1d0/ */
402 #endif
403 GDI_TEB_BATCH GdiTebBatch; /* 1d4/02f0 used for ntdll private data in Wine */
404 CLIENT_ID RealClientId; /* 6b4/07d8 */
405 HANDLE GdiCachedProcessHandle; /* 6bc/07e8 */
406 ULONG GdiClientPID; /* 6c0/07f0 */
407 ULONG GdiClientTID; /* 6c4/07f4 */
408 PVOID GdiThreadLocaleInfo; /* 6c8/07f8 */
409 ULONG_PTR Win32ClientInfo[62]; /* 6cc/0800 used for user32 private data in Wine */
410 PVOID glDispatchTable[233]; /* 7c4/09f0 */
411 PVOID glReserved1[29]; /* b68/1138 */
412 PVOID glReserved2; /* bdc/1220 */
413 PVOID glSectionInfo; /* be0/1228 */
414 PVOID glSection; /* be4/1230 */
415 PVOID glTable; /* be8/1238 */
416 PVOID glCurrentRC; /* bec/1240 */
417 PVOID glContext; /* bf0/1248 */
418 ULONG LastStatusValue; /* bf4/1250 */
419 UNICODE_STRING StaticUnicodeString; /* bf8/1258 */
420 WCHAR StaticUnicodeBuffer[261]; /* c00/1268 */
421 PVOID DeallocationStack; /* e0c/1478 */
422 PVOID TlsSlots[64]; /* e10/1480 */
423 LIST_ENTRY TlsLinks; /* f10/1680 */
424 PVOID Vdm; /* f18/1690 */
425 PVOID ReservedForNtRpc; /* f1c/1698 */
426 PVOID DbgSsReserved[2]; /* f20/16a0 */
427 ULONG HardErrorDisabled; /* f28/16b0 */
428 PVOID Instrumentation[16]; /* f2c/16b8 */
429 PVOID WinSockData; /* f6c/1738 */
430 ULONG GdiBatchCount; /* f70/1740 */
431 ULONG Spare2; /* f74/1744 */
432 ULONG GuaranteedStackBytes; /* f78/1748 */
433 PVOID ReservedForPerf; /* f7c/1750 */
434 PVOID ReservedForOle; /* f80/1758 */
435 ULONG WaitingOnLoaderLock; /* f84/1760 */
436 PVOID Reserved5[3]; /* f88/1768 */
437 PVOID *TlsExpansionSlots; /* f94/1780 */
438 #ifdef _WIN64
439 PVOID DeallocationBStore; /* /1788 */
440 PVOID BStoreLimit; /* /1790 */
441 #endif
442 ULONG ImpersonationLocale; /* f98/1798 */
443 ULONG IsImpersonating; /* f9c/179c */
444 PVOID NlsCache; /* fa0/17a0 */
445 PVOID ShimData; /* fa4/17a8 */
446 ULONG HeapVirtualAffinity; /* fa8/17b0 */
447 PVOID CurrentTransactionHandle; /* fac/17b8 */
448 TEB_ACTIVE_FRAME *ActiveFrame; /* fb0/17c0 */
449 PVOID *FlsSlots; /* fb4/17c8 */
450 PVOID PreferredLanguages; /* fb8/17d0 */
451 PVOID UserPrefLanguages; /* fbc/17d8 */
452 PVOID MergedPrefLanguages; /* fc0/17e0 */
453 ULONG MuiImpersonation; /* fc4/17e8 */
454 USHORT CrossTebFlags; /* fc8/17ec */
455 USHORT SameTebFlags; /* fca/17ee */
456 PVOID TxnScopeEnterCallback; /* fcc/17f0 */
457 PVOID TxnScopeExitCallback; /* fd0/17f8 */
458 PVOID TxnScopeContext; /* fd4/1800 */
459 ULONG LockCount; /* fd8/1808 */
460 LONG WowTebOffset; /* fdc/180c */
461 PVOID ResourceRetValue; /* fe0/1810 */
462 PVOID ReservedForWdf; /* fe4/1818 */
463 ULONGLONG ReservedForCrt; /* fe8/1820 */
464 GUID EffectiveContainerId; /* ff0/1828 */
465 } TEB, *PTEB;
466
467
468 /***********************************************************************
469 * The 64-bit version of the PEB and TEB for WoW64
470 */
471 #ifndef _WIN64
472
473 typedef struct _NT_TIB64
474 {
475 ULONG64 ExceptionList; /* 0000 */
476 ULONG64 StackBase; /* 0008 */
477 ULONG64 StackLimit; /* 0010 */
478 ULONG64 SubSystemTib; /* 0018 */
479 ULONG64 FiberData; /* 0020 */
480 ULONG64 ArbitraryUserPointer; /* 0028 */
481 ULONG64 Self; /* 0030 */
482 } NT_TIB64;
483
484 typedef struct _CLIENT_ID64
485 {
486 ULONG64 UniqueProcess;
487 ULONG64 UniqueThread;
488 } CLIENT_ID64;
489
490 typedef struct _LIST_ENTRY64
491 {
492 ULONG64 Flink;
493 ULONG64 Blink;
494 } LIST_ENTRY64;
495
496 typedef struct _UNICODE_STRING64
497 {
498 USHORT Length;
499 USHORT MaximumLength;
500 ULONG64 Buffer;
501 } UNICODE_STRING64;
502
503 typedef struct _ACTIVATION_CONTEXT_STACK64
504 {
505 ULONG64 ActiveFrame;
506 LIST_ENTRY64 FrameListCache;
507 ULONG Flags;
508 ULONG NextCookieSequenceNumber;
509 ULONG64 StackId;
510 } ACTIVATION_CONTEXT_STACK64;
511
512 typedef struct _PEB64
513 {
514 BOOLEAN InheritedAddressSpace; /* 0000 */
515 BOOLEAN ReadImageFileExecOptions; /* 0001 */
516 BOOLEAN BeingDebugged; /* 0002 */
517 BOOLEAN SpareBool; /* 0003 */
518 ULONG64 Mutant; /* 0008 */
519 ULONG64 ImageBaseAddress; /* 0010 */
520 ULONG64 LdrData; /* 0018 */
521 ULONG64 ProcessParameters; /* 0020 */
522 ULONG64 SubSystemData; /* 0028 */
523 ULONG64 ProcessHeap; /* 0030 */
524 ULONG64 FastPebLock; /* 0038 */
525 ULONG64 FastPebLockRoutine; /* 0040 */
526 ULONG64 FastPebUnlockRoutine; /* 0048 */
527 ULONG EnvironmentUpdateCount; /* 0050 */
528 ULONG64 KernelCallbackTable; /* 0058 */
529 ULONG Reserved[2]; /* 0060 */
530 ULONG64 FreeList; /* 0068 */
531 ULONG TlsExpansionCounter; /* 0070 */
532 ULONG64 TlsBitmap; /* 0078 */
533 ULONG TlsBitmapBits[2]; /* 0080 */
534 ULONG64 ReadOnlySharedMemoryBase; /* 0088 */
535 ULONG64 ReadOnlySharedMemoryHeap; /* 0090 */
536 ULONG64 ReadOnlyStaticServerData; /* 0098 */
537 ULONG64 AnsiCodePageData; /* 00a0 */
538 ULONG64 OemCodePageData; /* 00a8 */
539 ULONG64 UnicodeCaseTableData; /* 00b0 */
540 ULONG NumberOfProcessors; /* 00b8 */
541 ULONG NtGlobalFlag; /* 00bc */
542 LARGE_INTEGER CriticalSectionTimeout; /* 00c0 */
543 ULONG64 HeapSegmentReserve; /* 00c8 */
544 ULONG64 HeapSegmentCommit; /* 00d0 */
545 ULONG64 HeapDeCommitTotalFreeThreshold; /* 00d8 */
546 ULONG64 HeapDeCommitFreeBlockThreshold; /* 00e0 */
547 ULONG NumberOfHeaps; /* 00e8 */
548 ULONG MaximumNumberOfHeaps; /* 00ec */
549 ULONG64 ProcessHeaps; /* 00f0 */
550 ULONG64 GdiSharedHandleTable; /* 00f8 */
551 ULONG64 ProcessStarterHelper; /* 0100 */
552 ULONG64 GdiDCAttributeList; /* 0108 */
553 ULONG64 LoaderLock; /* 0110 */
554 ULONG OSMajorVersion; /* 0118 */
555 ULONG OSMinorVersion; /* 011c */
556 ULONG OSBuildNumber; /* 0120 */
557 ULONG OSPlatformId; /* 0124 */
558 ULONG ImageSubSystem; /* 0128 */
559 ULONG ImageSubSystemMajorVersion; /* 012c */
560 ULONG ImageSubSystemMinorVersion; /* 0130 */
561 ULONG ImageProcessAffinityMask; /* 0134 */
562 ULONG64 GdiHandleBuffer[28]; /* 0138 */
563 ULONG unknown[6]; /* 0218 */
564 ULONG64 PostProcessInitRoutine; /* 0230 */
565 ULONG64 TlsExpansionBitmap; /* 0238 */
566 ULONG TlsExpansionBitmapBits[32]; /* 0240 */
567 ULONG SessionId; /* 02c0 */
568 ULARGE_INTEGER AppCompatFlags; /* 02c8 */
569 ULARGE_INTEGER AppCompatFlagsUser; /* 02d0 */
570 ULONG64 ShimData; /* 02d8 */
571 ULONG64 AppCompatInfo; /* 02e0 */
572 UNICODE_STRING64 CSDVersion; /* 02e8 */
573 ULONG64 ActivationContextData; /* 02f8 */
574 ULONG64 ProcessAssemblyStorageMap; /* 0300 */
575 ULONG64 SystemDefaultActivationData; /* 0308 */
576 ULONG64 SystemAssemblyStorageMap; /* 0310 */
577 ULONG64 MinimumStackCommit; /* 0318 */
578 ULONG64 FlsCallback; /* 0320 */
579 LIST_ENTRY64 FlsListHead; /* 0328 */
580 ULONG64 FlsBitmap; /* 0338 */
581 ULONG FlsBitmapBits[4]; /* 0340 */
582 ULONG FlsHighIndex; /* 0350 */
583 ULONG64 WerRegistrationData; /* 0358 */
584 ULONG64 WerShipAssertPtr; /* 0360 */
585 ULONG64 pUnused; /* 0368 */
586 ULONG64 pImageHeaderHash; /* 0370 */
587 ULONG TracingFlags; /* 0378 */
588 ULONGLONG CsrServerReadOnlySharedMemoryBase; /* 0380 */
589 ULONG TppWorkerpListLock; /* 0388 */
590 LIST_ENTRY64 TppWorkerpList; /* 0390 */
591 ULONG64 WaitOnAddressHashTable [0x80]; /* 03a0 */
592 ULONG64 TelemetryCoverageHeader; /* 07a0 */
593 ULONG CloudFileFlags; /* 07a8 */
594 } PEB64;
595
596 typedef struct _TEB64
597 {
598 NT_TIB64 Tib; /* 0000 */
599 ULONG64 EnvironmentPointer; /* 0038 */
600 CLIENT_ID64 ClientId; /* 0040 */
601 ULONG64 ActiveRpcHandle; /* 0050 */
602 ULONG64 ThreadLocalStoragePointer; /* 0058 */
603 ULONG64 Peb; /* 0060 */
604 ULONG LastErrorValue; /* 0068 */
605 ULONG CountOfOwnedCriticalSections; /* 006c */
606 ULONG64 CsrClientThread; /* 0070 */
607 ULONG64 Win32ThreadInfo; /* 0078 */
608 ULONG User32Reserved[26]; /* 0080 */
609 ULONG UserReserved[5]; /* 00e8 */
610 ULONG64 WOW32Reserved; /* 0100 */
611 ULONG CurrentLocale; /* 0108 */
612 ULONG FpSoftwareStatusRegister; /* 010c */
613 ULONG64 ReservedForDebuggerInstrumentation[16]; /* 0110 */
614 ULONG64 SystemReserved1[30]; /* 0190 */
615 char PlaceholderCompatibilityMode; /* 0280 */
616 char PlaceholderReserved[11]; /* 0281 */
617 DWORD ProxiedProcessId; /* 028c */
618 ACTIVATION_CONTEXT_STACK64 ActivationContextStack; /* 0290 */
619 UCHAR WorkingOnBehalfOfTicket[8]; /* 02b8 */
620 LONG ExceptionCode; /* 02c0 */
621 ULONG64 ActivationContextStackPointer; /* 02c8 */
622 ULONG64 InstrumentationCallbackSp; /* 02d0 */
623 ULONG64 InstrumentationCallbackPreviousPc; /* 02d8 */
624 ULONG64 InstrumentationCallbackPreviousSp; /* 02e0 */
625 ULONG TxFsContext; /* 02e8 */
626 BOOLEAN InstrumentationCallbackDisabled; /* 02ec */
627 ULONG64 GdiTebBatch[0x9d]; /* 02f0 */
628 CLIENT_ID64 RealClientId; /* 07d8 */
629 ULONG64 GdiCachedProcessHandle; /* 07e8 */
630 ULONG GdiClientPID; /* 07f0 */
631 ULONG GdiClientTID; /* 07f4 */
632 ULONG64 GdiThreadLocaleInfo; /* 07f8 */
633 ULONG64 Win32ClientInfo[62]; /* 0800 */
634 ULONG64 glDispatchTable[233]; /* 09f0 */
635 ULONG64 glReserved1[29]; /* 1138 */
636 ULONG64 glReserved2; /* 1220 */
637 ULONG64 glSectionInfo; /* 1228 */
638 ULONG64 glSection; /* 1230 */
639 ULONG64 glTable; /* 1238 */
640 ULONG64 glCurrentRC; /* 1240 */
641 ULONG64 glContext; /* 1248 */
642 ULONG LastStatusValue; /* 1250 */
643 UNICODE_STRING64 StaticUnicodeString; /* 1258 */
644 WCHAR StaticUnicodeBuffer[261]; /* 1268 */
645 ULONG64 DeallocationStack; /* 1478 */
646 ULONG64 TlsSlots[64]; /* 1480 */
647 LIST_ENTRY64 TlsLinks; /* 1680 */
648 ULONG64 Vdm; /* 1690 */
649 ULONG64 ReservedForNtRpc; /* 1698 */
650 ULONG64 DbgSsReserved[2]; /* 16a0 */
651 ULONG HardErrorDisabled; /* 16b0 */
652 ULONG64 Instrumentation[16]; /* 16b8 */
653 ULONG64 WinSockData; /* 1738 */
654 ULONG GdiBatchCount; /* 1740 */
655 ULONG Spare2; /* 1744 */
656 ULONG GuaranteedStackBytes; /* 1748 */
657 ULONG64 ReservedForPerf; /* 1750 */
658 ULONG64 ReservedForOle; /* 1758 */
659 ULONG WaitingOnLoaderLock; /* 1760 */
660 ULONG64 Reserved5[3]; /* 1768 */
661 ULONG64 TlsExpansionSlots; /* 1780 */
662 ULONG64 DeallocationBStore; /* 1788 */
663 ULONG64 BStoreLimit; /* 1790 */
664 ULONG ImpersonationLocale; /* 1798 */
665 ULONG IsImpersonating; /* 179c */
666 ULONG64 NlsCache; /* 17a0 */
667 ULONG64 ShimData; /* 17a8 */
668 ULONG HeapVirtualAffinity; /* 17b0 */
669 ULONG64 CurrentTransactionHandle; /* 17b8 */
670 ULONG64 ActiveFrame; /* 17c0 */
671 ULONG64 FlsSlots; /* 17c8 */
672 ULONG64 PreferredLanguages; /* 17d0 */
673 ULONG64 UserPrefLanguages; /* 17d8 */
674 ULONG64 MergedPrefLanguages; /* 17e0 */
675 ULONG MuiImpersonation; /* 17e8 */
676 USHORT CrossTebFlags; /* 17ec */
677 USHORT SameTebFlags; /* 17ee */
678 ULONG64 TxnScopeEnterCallback; /* 17f0 */
679 ULONG64 TxnScopeExitCallback; /* 17f8 */
680 ULONG64 TxnScopeContext; /* 1800 */
681 ULONG LockCount; /* 1808 */
682 LONG WowTebOffset; /* 180c */
683 ULONG64 ResourceRetValue; /* 1810 */
684 ULONG64 ReservedForWdf; /* 1818 */
685 ULONGLONG ReservedForCrt; /* 1820 */
686 GUID EffectiveContainerId; /* 1828 */
687 } TEB64;
688
689 /* reserved TEB64 TLS slots for Wow64 */
690 #define WOW64_TLS_FILESYSREDIR 8
691
692 #endif /* _WIN64 */
693
694 /***********************************************************************
695 * Enums
696 */
697
698 typedef enum _FILE_INFORMATION_CLASS {
699 FileDirectoryInformation = 1,
700 FileFullDirectoryInformation,
701 FileBothDirectoryInformation,
702 FileBasicInformation,
703 FileStandardInformation,
704 FileInternalInformation,
705 FileEaInformation,
706 FileAccessInformation,
707 FileNameInformation,
708 FileRenameInformation,
709 FileLinkInformation,
710 FileNamesInformation,
711 FileDispositionInformation,
712 FilePositionInformation,
713 FileFullEaInformation,
714 FileModeInformation,
715 FileAlignmentInformation,
716 FileAllInformation,
717 FileAllocationInformation,
718 FileEndOfFileInformation,
719 FileAlternateNameInformation,
720 FileStreamInformation,
721 FilePipeInformation,
722 FilePipeLocalInformation,
723 FilePipeRemoteInformation,
724 FileMailslotQueryInformation,
725 FileMailslotSetInformation,
726 FileCompressionInformation,
727 FileObjectIdInformation,
728 FileCompletionInformation,
729 FileMoveClusterInformation,
730 FileQuotaInformation,
731 FileReparsePointInformation,
732 FileNetworkOpenInformation,
733 FileAttributeTagInformation,
734 FileTrackingInformation,
735 FileIdBothDirectoryInformation,
736 FileIdFullDirectoryInformation,
737 FileValidDataLengthInformation,
738 FileShortNameInformation,
739 FileIoCompletionNotificationInformation,
740 FileIoStatusBlockRangeInformation,
741 FileIoPriorityHintInformation,
742 FileSfioReserveInformation,
743 FileSfioVolumeInformation,
744 FileHardLinkInformation,
745 FileProcessIdsUsingFileInformation,
746 FileNormalizedNameInformation,
747 FileNetworkPhysicalNameInformation,
748 FileIdGlobalTxDirectoryInformation,
749 FileIsRemoteDeviceInformation,
750 FileAttributeCacheInformation,
751 FileNumaNodeInformation,
752 FileStandardLinkInformation,
753 FileRemoteProtocolInformation,
754 FileRenameInformationBypassAccessCheck,
755 FileLinkInformationBypassAccessCheck,
756 FileVolumeNameInformation,
757 FileIdInformation,
758 FileIdExtdDirectoryInformation,
759 FileReplaceCompletionInformation,
760 FileHardLinkFullIdInformation,
761 FileIdExtdBothDirectoryInformation,
762 FileMaximumInformation
763 } FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
764
765 typedef struct _FILE_DIRECTORY_INFORMATION {
766 ULONG NextEntryOffset;
767 ULONG FileIndex;
768 LARGE_INTEGER CreationTime;
769 LARGE_INTEGER LastAccessTime;
770 LARGE_INTEGER LastWriteTime;
771 LARGE_INTEGER ChangeTime;
772 LARGE_INTEGER EndOfFile;
773 LARGE_INTEGER AllocationSize;
774 ULONG FileAttributes;
775 ULONG FileNameLength;
776 WCHAR FileName[ANYSIZE_ARRAY];
777 } FILE_DIRECTORY_INFORMATION, *PFILE_DIRECTORY_INFORMATION;
778
779 typedef struct _FILE_FULL_DIRECTORY_INFORMATION {
780 ULONG NextEntryOffset;
781 ULONG FileIndex;
782 LARGE_INTEGER CreationTime;
783 LARGE_INTEGER LastAccessTime;
784 LARGE_INTEGER LastWriteTime;
785 LARGE_INTEGER ChangeTime;
786 LARGE_INTEGER EndOfFile;
787 LARGE_INTEGER AllocationSize;
788 ULONG FileAttributes;
789 ULONG FileNameLength;
790 ULONG EaSize;
791 WCHAR FileName[ANYSIZE_ARRAY];
792 } FILE_FULL_DIRECTORY_INFORMATION, *PFILE_FULL_DIRECTORY_INFORMATION,
793 FILE_FULL_DIR_INFORMATION, *PFILE_FULL_DIR_INFORMATION;
794
795 typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION {
796 ULONG NextEntryOffset;
797 ULONG FileIndex;
798 LARGE_INTEGER CreationTime;
799 LARGE_INTEGER LastAccessTime;
800 LARGE_INTEGER LastWriteTime;
801 LARGE_INTEGER ChangeTime;
802 LARGE_INTEGER EndOfFile;
803 LARGE_INTEGER AllocationSize;
804 ULONG FileAttributes;
805 ULONG FileNameLength;
806 ULONG EaSize;
807 LARGE_INTEGER FileId;
808 WCHAR FileName[ANYSIZE_ARRAY];
809 } FILE_ID_FULL_DIRECTORY_INFORMATION, *PFILE_ID_FULL_DIRECTORY_INFORMATION;
810
811 typedef struct _FILE_BOTH_DIRECTORY_INFORMATION {
812 ULONG NextEntryOffset;
813 ULONG FileIndex;
814 LARGE_INTEGER CreationTime;
815 LARGE_INTEGER LastAccessTime;
816 LARGE_INTEGER LastWriteTime;
817 LARGE_INTEGER ChangeTime;
818 LARGE_INTEGER EndOfFile;
819 LARGE_INTEGER AllocationSize;
820 ULONG FileAttributes;
821 ULONG FileNameLength;
822 ULONG EaSize;
823 CHAR ShortNameLength;
824 WCHAR ShortName[12];
825 WCHAR FileName[ANYSIZE_ARRAY];
826 } FILE_BOTH_DIRECTORY_INFORMATION, *PFILE_BOTH_DIRECTORY_INFORMATION,
827 FILE_BOTH_DIR_INFORMATION, *PFILE_BOTH_DIR_INFORMATION;
828
829 typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION {
830 ULONG NextEntryOffset;
831 ULONG FileIndex;
832 LARGE_INTEGER CreationTime;
833 LARGE_INTEGER LastAccessTime;
834 LARGE_INTEGER LastWriteTime;
835 LARGE_INTEGER ChangeTime;
836 LARGE_INTEGER EndOfFile;
837 LARGE_INTEGER AllocationSize;
838 ULONG FileAttributes;
839 ULONG FileNameLength;
840 ULONG EaSize;
841 CHAR ShortNameLength;
842 WCHAR ShortName[12];
843 LARGE_INTEGER FileId;
844 WCHAR FileName[ANYSIZE_ARRAY];
845 } FILE_ID_BOTH_DIRECTORY_INFORMATION, *PFILE_ID_BOTH_DIRECTORY_INFORMATION;
846
847 typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION {
848 ULONG NextEntryOffset;
849 ULONG FileIndex;
850 LARGE_INTEGER CreationTime;
851 LARGE_INTEGER LastAccessTime;
852 LARGE_INTEGER LastWriteTime;
853 LARGE_INTEGER ChangeTime;
854 LARGE_INTEGER EndOfFile;
855 LARGE_INTEGER AllocationSize;
856 ULONG FileAttributes;
857 ULONG FileNameLength;
858 LARGE_INTEGER FileId;
859 GUID LockingTransactionId;
860 ULONG TxInfoFlags;
861 WCHAR FileName[ANYSIZE_ARRAY];
862 } FILE_ID_GLOBAL_TX_DIR_INFORMATION, *PFILE_ID_GLOBAL_TX_DIR_INFORMATION;
863
864 typedef struct _FILE_BASIC_INFORMATION {
865 LARGE_INTEGER CreationTime;
866 LARGE_INTEGER LastAccessTime;
867 LARGE_INTEGER LastWriteTime;
868 LARGE_INTEGER ChangeTime;
869 ULONG FileAttributes;
870 } FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
871
872 typedef struct _FILE_STANDARD_INFORMATION {
873 LARGE_INTEGER AllocationSize;
874 LARGE_INTEGER EndOfFile;
875 ULONG NumberOfLinks;
876 BOOLEAN DeletePending;
877 BOOLEAN Directory;
878 } FILE_STANDARD_INFORMATION, *PFILE_STANDARD_INFORMATION;
879
880 typedef struct _FILE_INTERNAL_INFORMATION {
881 LARGE_INTEGER IndexNumber;
882 } FILE_INTERNAL_INFORMATION, *PFILE_INTERNAL_INFORMATION;
883
884 typedef struct _FILE_ID_128 {
885 UCHAR Identifier[16];
886 } FILE_ID_128, *PFILE_ID_128;
887
888 typedef struct _FILE_ID_INFORMATION {
889 ULONGLONG VolumeSerialNumber;
890 FILE_ID_128 FileId;
891 } FILE_ID_INFORMATION, *PFILE_ID_INFORMATION;
892
893 typedef struct _FILE_EA_INFORMATION {
894 ULONG EaSize;
895 } FILE_EA_INFORMATION, *PFILE_EA_INFORMATION;
896
897 typedef struct _FILE_ACCESS_INFORMATION {
898 ACCESS_MASK AccessFlags;
899 } FILE_ACCESS_INFORMATION, *PFILE_ACCESS_INFORMATION;
900
901 typedef struct _FILE_NAME_INFORMATION {
902 ULONG FileNameLength;
903 WCHAR FileName[1];
904 } FILE_NAME_INFORMATION, *PFILE_NAME_INFORMATION;
905
906 typedef struct _FILE_RENAME_INFORMATION {
907 BOOLEAN ReplaceIfExists;
908 HANDLE RootDirectory;
909 ULONG FileNameLength;
910 WCHAR FileName[1];
911 } FILE_RENAME_INFORMATION, *PFILE_RENAME_INFORMATION;
912
913 typedef struct _FILE_LINK_INFORMATION {
914 BOOLEAN ReplaceIfExists;
915 HANDLE RootDirectory;
916 ULONG FileNameLength;
917 WCHAR FileName[1];
918 } FILE_LINK_INFORMATION, *PFILE_LINK_INFORMATION;
919
920 typedef struct _FILE_NAMES_INFORMATION {
921 ULONG NextEntryOffset;
922 ULONG FileIndex;
923 ULONG FileNameLength;
924 WCHAR FileName[1];
925 } FILE_NAMES_INFORMATION, *PFILE_NAMES_INFORMATION;
926
927 typedef struct _FILE_DISPOSITION_INFORMATION {
928 BOOLEAN DoDeleteFile;
929 } FILE_DISPOSITION_INFORMATION, *PFILE_DISPOSITION_INFORMATION;
930
931 typedef struct _FILE_POSITION_INFORMATION {
932 LARGE_INTEGER CurrentByteOffset;
933 } FILE_POSITION_INFORMATION, *PFILE_POSITION_INFORMATION;
934
935 typedef struct _FILE_ALIGNMENT_INFORMATION {
936 ULONG AlignmentRequirement;
937 } FILE_ALIGNMENT_INFORMATION, *PFILE_ALIGNMENT_INFORMATION;
938
939 typedef struct _FILE_ALLOCATION_INFORMATION {
940 LARGE_INTEGER AllocationSize;
941 } FILE_ALLOCATION_INFORMATION, *PFILE_ALLOCATION_INFORMATION;
942
943 typedef struct _FILE_END_OF_FILE_INFORMATION {
944 LARGE_INTEGER EndOfFile;
945 } FILE_END_OF_FILE_INFORMATION, *PFILE_END_OF_FILE_INFORMATION;
946
947 typedef struct _FILE_NETWORK_OPEN_INFORMATION {
948 LARGE_INTEGER CreationTime;
949 LARGE_INTEGER LastAccessTime;
950 LARGE_INTEGER LastWriteTime;
951 LARGE_INTEGER ChangeTime;
952 LARGE_INTEGER AllocationSize;
953 LARGE_INTEGER EndOfFile;
954 ULONG FileAttributes;
955 } FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
956
957 typedef struct _FILE_FULL_EA_INFORMATION {
958 ULONG NextEntryOffset;
959 UCHAR Flags;
960 UCHAR EaNameLength;
961 USHORT EaValueLength;
962 CHAR EaName[1];
963 } FILE_FULL_EA_INFORMATION, *PFILE_FULL_EA_INFORMATION;
964
965 typedef struct _FILE_MODE_INFORMATION {
966 ULONG Mode;
967 } FILE_MODE_INFORMATION, *PFILE_MODE_INFORMATION;
968
969 typedef struct _FILE_STREAM_INFORMATION
970 {
971 ULONG NextEntryOffset;
972 ULONG StreamNameLength;
973 LARGE_INTEGER StreamSize;
974 LARGE_INTEGER StreamAllocationSize;
975 WCHAR StreamName[1];
976 } FILE_STREAM_INFORMATION, *PFILE_STREAM_INFORMATION;
977
978 typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION
979 {
980 ULONG FileAttributes;
981 ULONG ReparseTag;
982 } FILE_ATTRIBUTE_TAG_INFORMATION, *PFILE_ATTRIBUTE_TAG_INFORMATION;
983
984 typedef struct _FILE_MAILSLOT_QUERY_INFORMATION {
985 ULONG MaximumMessageSize;
986 ULONG MailslotQuota;
987 ULONG NextMessageSize;
988 ULONG MessagesAvailable;
989 LARGE_INTEGER ReadTimeout;
990 } FILE_MAILSLOT_QUERY_INFORMATION, *PFILE_MAILSLOT_QUERY_INFORMATION;
991
992 typedef struct _FILE_MAILSLOT_SET_INFORMATION {
993 LARGE_INTEGER ReadTimeout;
994 } FILE_MAILSLOT_SET_INFORMATION, *PFILE_MAILSLOT_SET_INFORMATION;
995
996 typedef struct _FILE_PIPE_INFORMATION {
997 ULONG ReadMode;
998 ULONG CompletionMode;
999 } FILE_PIPE_INFORMATION, *PFILE_PIPE_INFORMATION;
1000
1001 typedef struct _FILE_PIPE_LOCAL_INFORMATION {
1002 ULONG NamedPipeType;
1003 ULONG NamedPipeConfiguration;
1004 ULONG MaximumInstances;
1005 ULONG CurrentInstances;
1006 ULONG InboundQuota;
1007 ULONG ReadDataAvailable;
1008 ULONG OutboundQuota;
1009 ULONG WriteQuotaAvailable;
1010 ULONG NamedPipeState;
1011 ULONG NamedPipeEnd;
1012 } FILE_PIPE_LOCAL_INFORMATION, *PFILE_PIPE_LOCAL_INFORMATION;
1013
1014 #define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1015 #define FILE_PIPE_LISTENING_STATE 0x00000002
1016 #define FILE_PIPE_CONNECTED_STATE 0x00000003
1017 #define FILE_PIPE_CLOSING_STATE 0x00000004
1018
1019 typedef struct _FILE_OBJECTID_BUFFER
1020 {
1021 BYTE ObjectId[16];
1022 union
1023 {
1024 struct
1025 {
1026 BYTE BirthVolumeId[16];
1027 BYTE BirthObjectId[16];
1028 BYTE DomainId[16];
1029 } DUMMYSTRUCTNAME;
1030 BYTE ExtendedInfo[48];
1031 } DUMMYUNIONNAME;
1032 } FILE_OBJECTID_BUFFER, *PFILE_OBJECTID_BUFFER;
1033
1034 typedef struct _FILE_OBJECTID_INFORMATION {
1035 LONGLONG FileReference;
1036 UCHAR ObjectId[16];
1037 union {
1038 struct {
1039 UCHAR BirthVolumeId[16];
1040 UCHAR BirthObjectId[16];
1041 UCHAR DomainId[16];
1042 } DUMMYSTRUCTNAME;
1043 UCHAR ExtendedInfo[48];
1044 } DUMMYUNIONNAME;
1045 } FILE_OBJECTID_INFORMATION, *PFILE_OBJECTID_INFORMATION;
1046
1047 typedef struct _FILE_QUOTA_INFORMATION {
1048 ULONG NextEntryOffset;
1049 ULONG SidLength;
1050 LARGE_INTEGER ChangeTime;
1051 LARGE_INTEGER QuotaUsed;
1052 LARGE_INTEGER QuotaThreshold;
1053 LARGE_INTEGER QuotaLimit;
1054 SID Sid;
1055 } FILE_QUOTA_INFORMATION, *PFILE_QUOTA_INFORMATION;
1056
1057 typedef struct _FILE_REPARSE_POINT_INFORMATION {
1058 LONGLONG FileReference;
1059 ULONG Tag;
1060 } FILE_REPARSE_POINT_INFORMATION, *PFILE_REPARSE_POINT_INFORMATION;
1061
1062 typedef struct _FILE_ALL_INFORMATION {
1063 FILE_BASIC_INFORMATION BasicInformation;
1064 FILE_STANDARD_INFORMATION StandardInformation;
1065 FILE_INTERNAL_INFORMATION InternalInformation;
1066 FILE_EA_INFORMATION EaInformation;
1067 FILE_ACCESS_INFORMATION AccessInformation;
1068 FILE_POSITION_INFORMATION PositionInformation;
1069 FILE_MODE_INFORMATION ModeInformation;
1070 FILE_ALIGNMENT_INFORMATION AlignmentInformation;
1071 FILE_NAME_INFORMATION NameInformation;
1072 } FILE_ALL_INFORMATION, *PFILE_ALL_INFORMATION;
1073
1074 typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION {
1075 ULONG Flags;
1076 } FILE_IO_COMPLETION_NOTIFICATION_INFORMATION, *PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION;
1077
1078 #define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1079 #define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1080 #define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1081
1082 typedef enum _FSINFOCLASS {
1083 FileFsVolumeInformation = 1,
1084 FileFsLabelInformation,
1085 FileFsSizeInformation,
1086 FileFsDeviceInformation,
1087 FileFsAttributeInformation,
1088 FileFsControlInformation,
1089 FileFsFullSizeInformation,
1090 FileFsObjectIdInformation,
1091 FileFsMaximumInformation
1092 } FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
1093
1094 typedef enum _KEY_INFORMATION_CLASS {
1095 KeyBasicInformation,
1096 KeyNodeInformation,
1097 KeyFullInformation,
1098 KeyNameInformation,
1099 KeyCachedInformation,
1100 KeyFlagsInformation,
1101 KeyVirtualizationInformation,
1102 KeyHandleTagsInformation,
1103 MaxKeyInfoClass
1104 } KEY_INFORMATION_CLASS;
1105
1106 typedef enum _KEY_VALUE_INFORMATION_CLASS {
1107 KeyValueBasicInformation,
1108 KeyValueFullInformation,
1109 KeyValuePartialInformation,
1110 KeyValueFullInformationAlign64,
1111 KeyValuePartialInformationAlign64
1112 } KEY_VALUE_INFORMATION_CLASS;
1113
1114 typedef enum _OBJECT_INFORMATION_CLASS {
1115 ObjectBasicInformation,
1116 ObjectNameInformation,
1117 ObjectTypeInformation,
1118 ObjectAllInformation,
1119 ObjectDataInformation
1120 } OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
1121
1122 typedef enum _PROCESSINFOCLASS {
1123 ProcessBasicInformation = 0,
1124 ProcessQuotaLimits = 1,
1125 ProcessIoCounters = 2,
1126 ProcessVmCounters = 3,
1127 ProcessTimes = 4,
1128 ProcessBasePriority = 5,
1129 ProcessRaisePriority = 6,
1130 ProcessDebugPort = 7,
1131 ProcessExceptionPort = 8,
1132 ProcessAccessToken = 9,
1133 ProcessLdtInformation = 10,
1134 ProcessLdtSize = 11,
1135 ProcessDefaultHardErrorMode = 12,
1136 ProcessIoPortHandlers = 13,
1137 ProcessPooledUsageAndLimits = 14,
1138 ProcessWorkingSetWatch = 15,
1139 ProcessUserModeIOPL = 16,
1140 ProcessEnableAlignmentFaultFixup = 17,
1141 ProcessPriorityClass = 18,
1142 ProcessWx86Information = 19,
1143 ProcessHandleCount = 20,
1144 ProcessAffinityMask = 21,
1145 ProcessPriorityBoost = 22,
1146 ProcessDeviceMap = 23,
1147 ProcessSessionInformation = 24,
1148 ProcessForegroundInformation = 25,
1149 ProcessWow64Information = 26,
1150 ProcessImageFileName = 27,
1151 ProcessLUIDDeviceMapsEnabled = 28,
1152 ProcessBreakOnTermination = 29,
1153 ProcessDebugObjectHandle = 30,
1154 ProcessDebugFlags = 31,
1155 ProcessHandleTracing = 32,
1156 ProcessExecuteFlags = 34,
1157 ProcessTlsInformation = 35,
1158 ProcessCookie = 36,
1159 ProcessImageInformation = 37,
1160 ProcessCycleTime = 38,
1161 ProcessPagePriority = 39,
1162 ProcessInstrumentationCallback = 40,
1163 ProcessThreadStackAllocation = 41,
1164 ProcessWorkingSetWatchEx = 42,
1165 ProcessImageFileNameWin32 = 43,
1166 MaxProcessInfoClass
1167 } PROCESSINFOCLASS, PROCESS_INFORMATION_CLASS;
1168
1169 #define MEM_EXECUTE_OPTION_DISABLE 0x01
1170 #define MEM_EXECUTE_OPTION_ENABLE 0x02
1171 #define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
1172 #define MEM_EXECUTE_OPTION_PERMANENT 0x08
1173
1174 typedef enum _SECTION_INHERIT {
1175 ViewShare = 1,
1176 ViewUnmap = 2
1177 } SECTION_INHERIT;
1178
1179 typedef enum _SYSTEM_INFORMATION_CLASS {
1180 SystemBasicInformation = 0,
1181 SystemCpuInformation = 1,
1182 SystemPerformanceInformation = 2,
1183 SystemTimeOfDayInformation = 3, /* was SystemTimeInformation */
1184 Unknown4,
1185 SystemProcessInformation = 5,
1186 Unknown6,
1187 Unknown7,
1188 SystemProcessorPerformanceInformation = 8,
1189 Unknown9,
1190 Unknown10,
1191 SystemModuleInformation = 11,
1192 Unknown12,
1193 Unknown13,
1194 Unknown14,
1195 Unknown15,
1196 SystemHandleInformation = 16,
1197 Unknown17,
1198 SystemPageFileInformation = 18,
1199 Unknown19,
1200 Unknown20,
1201 SystemCacheInformation = 21,
1202 Unknown22,
1203 SystemInterruptInformation = 23,
1204 SystemDpcBehaviourInformation = 24,
1205 SystemFullMemoryInformation = 25,
1206 SystemNotImplemented6 = 25,
1207 SystemLoadImage = 26,
1208 SystemUnloadImage = 27,
1209 SystemTimeAdjustmentInformation = 28,
1210 SystemTimeAdjustment = 28,
1211 SystemSummaryMemoryInformation = 29,
1212 SystemNotImplemented7 = 29,
1213 SystemNextEventIdInformation = 30,
1214 SystemNotImplemented8 = 30,
1215 SystemEventIdsInformation = 31,
1216 SystemCrashDumpInformation = 32,
1217 SystemExceptionInformation = 33,
1218 SystemCrashDumpStateInformation = 34,
1219 SystemKernelDebuggerInformation = 35,
1220 SystemContextSwitchInformation = 36,
1221 SystemRegistryQuotaInformation = 37,
1222 SystemCurrentTimeZoneInformation = 44,
1223 SystemTimeZoneInformation = 44,
1224 SystemLookasideInformation = 45,
1225 SystemSetTimeSlipEvent = 46,
1226 SystemCreateSession = 47,
1227 SystemDeleteSession = 48,
1228 SystemInvalidInfoClass4 = 49,
1229 SystemRangeStartInformation = 50,
1230 SystemVerifierInformation = 51,
1231 SystemAddVerifier = 52,
1232 SystemSessionProcessesInformation = 53,
1233 SystemLoadGdiDriverInSystemSpace = 54,
1234 SystemNumaProcessorMap = 55,
1235 SystemPrefetcherInformation = 56,
1236 SystemExtendedProcessInformation = 57,
1237 SystemRecommendedSharedDataAlignment = 58,
1238 SystemComPlusPackage = 59,
1239 SystemNumaAvailableMemory = 60,
1240 SystemProcessorPowerInformation = 61,
1241 SystemEmulationBasicInformation = 62,
1242 SystemEmulationProcessorInformation = 63,
1243 SystemExtendedHandleInformation = 64,
1244 SystemLostDelayedWriteInformation = 65,
1245 SystemBigPoolInformation = 66,
1246 SystemSessionPoolTagInformation = 67,
1247 SystemSessionMappedViewInformation = 68,
1248 SystemHotpatchInformation = 69,
1249 SystemObjectSecurityMode = 70,
1250 SystemWatchdogTimerHandler = 71,
1251 SystemWatchdogTimerInformation = 72,
1252 SystemLogicalProcessorInformation = 73,
1253 SystemWow64SharedInformation = 74,
1254 SystemRegisterFirmwareTableInformationHandler = 75,
1255 SystemFirmwareTableInformation = 76,
1256 SystemModuleInformationEx = 77,
1257 SystemVerifierTriageInformation = 78,
1258 SystemSuperfetchInformation = 79,
1259 SystemMemoryListInformation = 80,
1260 SystemFileCacheInformationEx = 81,
1261 SystemDynamicTimeZoneInformation = 102,
1262 SystemLogicalProcessorInformationEx = 107,
1263 SystemInformationClassMax
1264 } SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
1265
1266 typedef enum _THREADINFOCLASS {
1267 ThreadBasicInformation = 0,
1268 ThreadTimes,
1269 ThreadPriority,
1270 ThreadBasePriority,
1271 ThreadAffinityMask,
1272 ThreadImpersonationToken,
1273 ThreadDescriptorTableEntry,
1274 ThreadEnableAlignmentFaultFixup,
1275 ThreadEventPair_Reusable,
1276 ThreadQuerySetWin32StartAddress,
1277 ThreadZeroTlsCell,
1278 ThreadPerformanceCount,
1279 ThreadAmILastThread,
1280 ThreadIdealProcessor,
1281 ThreadPriorityBoost,
1282 ThreadSetTlsArrayAddress,
1283 ThreadIsIoPending,
1284 ThreadHideFromDebugger,
1285 ThreadBreakOnTermination,
1286 ThreadSwitchLegacyState,
1287 ThreadIsTerminated,
1288 ThreadLastSystemCall,
1289 ThreadIoPriority,
1290 ThreadCycleTime,
1291 ThreadPagePriority,
1292 ThreadActualBasePriority,
1293 ThreadTebInformation,
1294 ThreadCSwitchMon,
1295 ThreadCSwitchPmu,
1296 ThreadWow64Context,
1297 ThreadGroupInformation,
1298 ThreadUmsInformation,
1299 ThreadCounterProfiling,
1300 ThreadIdealProcessorEx,
1301 ThreadSuspendCount = 35,
1302 ThreadDescription = 38,
1303 MaxThreadInfoClass
1304 } THREADINFOCLASS;
1305
1306 typedef struct _THREAD_BASIC_INFORMATION
1307 {
1308 NTSTATUS ExitStatus;
1309 PVOID TebBaseAddress;
1310 CLIENT_ID ClientId;
1311 ULONG_PTR AffinityMask;
1312 LONG Priority;
1313 LONG BasePriority;
1314 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1315
1316 typedef struct _THREAD_DESCRIPTOR_INFORMATION
1317 {
1318 DWORD Selector;
1319 LDT_ENTRY Entry;
1320 } THREAD_DESCRIPTOR_INFORMATION, *PTHREAD_DESCRIPTOR_INFORMATION;
1321
1322 typedef struct _THREAD_DESCRIPTION_INFORMATION
1323 {
1324 UNICODE_STRING Description;
1325 } THREAD_DESCRIPTION_INFORMATION, *PTHREAD_DESCRIPTION_INFORMATION;
1326
1327 typedef struct _KERNEL_USER_TIMES {
1328 LARGE_INTEGER CreateTime;
1329 LARGE_INTEGER ExitTime;
1330 LARGE_INTEGER KernelTime;
1331 LARGE_INTEGER UserTime;
1332 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1333
1334 typedef enum _WINSTATIONINFOCLASS {
1335 WinStationInformation = 8
1336 } WINSTATIONINFOCLASS;
1337
1338 typedef enum _MEMORY_INFORMATION_CLASS {
1339 MemoryBasicInformation,
1340 MemoryWorkingSetList,
1341 MemorySectionName,
1342 MemoryBasicVlmInformation,
1343 MemoryWorkingSetExInformation
1344 } MEMORY_INFORMATION_CLASS;
1345
1346 typedef struct _MEMORY_SECTION_NAME
1347 {
1348 UNICODE_STRING SectionFileName;
1349 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1350
1351 typedef union _MEMORY_WORKING_SET_EX_BLOCK {
1352 ULONG_PTR Flags;
1353 struct {
1354 ULONG_PTR Valid : 1;
1355 ULONG_PTR ShareCount : 3;
1356 ULONG_PTR Win32Protection : 11;
1357 ULONG_PTR Shared : 1;
1358 ULONG_PTR Node : 6;
1359 ULONG_PTR Locked : 1;
1360 ULONG_PTR LargePage : 1;
1361 } DUMMYSTRUCTNAME;
1362 } MEMORY_WORKING_SET_EX_BLOCK, *PMEMORY_WORKING_SET_EX_BLOCK;
1363
1364 typedef struct _MEMORY_WORKING_SET_EX_INFORMATION {
1365 PVOID VirtualAddress;
1366 MEMORY_WORKING_SET_EX_BLOCK VirtualAttributes;
1367 } MEMORY_WORKING_SET_EX_INFORMATION, *PMEMORY_WORKING_SET_EX_INFORMATION;
1368
1369 typedef enum _MUTANT_INFORMATION_CLASS
1370 {
1371 MutantBasicInformation
1372 } MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
1373
1374 typedef struct _MUTANT_BASIC_INFORMATION {
1375 LONG CurrentCount;
1376 BOOLEAN OwnedByCaller;
1377 BOOLEAN AbandonedState;
1378 } MUTANT_BASIC_INFORMATION, *PMUTANT_BASIC_INFORMATION;
1379
1380 typedef enum _TIMER_INFORMATION_CLASS
1381 {
1382 TimerBasicInformation = 0
1383 } TIMER_INFORMATION_CLASS;
1384
1385 typedef struct _TIMER_BASIC_INFORMATION
1386 {
1387 LARGE_INTEGER RemainingTime;
1388 BOOLEAN TimerState;
1389 } TIMER_BASIC_INFORMATION, *PTIMER_BASIC_INFORMATION;
1390
1391
1392 /* return type of RtlDetermineDosPathNameType_U (FIXME: not the correct names) */
1393 typedef enum
1394 {
1395 INVALID_PATH = 0,
1396 UNC_PATH, /* "//foo" */
1397 ABSOLUTE_DRIVE_PATH, /* "c:/foo" */
1398 RELATIVE_DRIVE_PATH, /* "c:foo" */
1399 ABSOLUTE_PATH, /* "/foo" */
1400 RELATIVE_PATH, /* "foo" */
1401 DEVICE_PATH, /* "//./foo" */
1402 UNC_DOT_PATH /* "//." */
1403 } DOS_PATHNAME_TYPE;
1404
1405
1406 /***********************************************************************
1407 * Types and data structures
1408 */
1409
1410 /* This is used by NtQuerySystemInformation */
1411 typedef struct _SYSTEM_THREAD_INFORMATION
1412 { /* win32/win64 */
1413 LARGE_INTEGER KernelTime; /* 00/00 */
1414 LARGE_INTEGER UserTime; /* 08/08 */
1415 LARGE_INTEGER CreateTime; /* 10/10 */
1416 DWORD dwTickCount; /* 18/18 */
1417 LPVOID StartAddress; /* 1c/20 */
1418 CLIENT_ID ClientId; /* 20/28 */
1419 DWORD dwCurrentPriority; /* 28/38 */
1420 DWORD dwBasePriority; /* 2c/3c */
1421 DWORD dwContextSwitches; /* 30/40 */
1422 DWORD dwThreadState; /* 34/44 */
1423 DWORD dwWaitReason; /* 38/48 */
1424 DWORD dwUnknown; /* 3c/4c */
1425 } SYSTEM_THREAD_INFORMATION, *PSYSTEM_THREAD_INFORMATION;
1426
1427 typedef struct _IO_STATUS_BLOCK {
1428 union {
1429 NTSTATUS Status;
1430 PVOID Pointer;
1431 } DUMMYUNIONNAME;
1432
1433 ULONG_PTR Information;
1434 } IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
1435
1436 typedef void (WINAPI * PIO_APC_ROUTINE)(PVOID,PIO_STATUS_BLOCK,ULONG);
1437
1438 typedef struct _KEY_BASIC_INFORMATION {
1439 LARGE_INTEGER LastWriteTime;
1440 ULONG TitleIndex;
1441 ULONG NameLength;
1442 WCHAR Name[1];
1443 } KEY_BASIC_INFORMATION, *PKEY_BASIC_INFORMATION;
1444
1445 typedef struct _KEY_NODE_INFORMATION
1446 {
1447 LARGE_INTEGER LastWriteTime;
1448 ULONG TitleIndex;
1449 ULONG ClassOffset;
1450 ULONG ClassLength;
1451 ULONG NameLength;
1452 WCHAR Name[1];
1453 /* Class[1]; */
1454 } KEY_NODE_INFORMATION, *PKEY_NODE_INFORMATION;
1455
1456 typedef struct _KEY_FULL_INFORMATION
1457 {
1458 LARGE_INTEGER LastWriteTime;
1459 ULONG TitleIndex;
1460 ULONG ClassOffset;
1461 ULONG ClassLength;
1462 ULONG SubKeys;
1463 ULONG MaxNameLen;
1464 ULONG MaxClassLen;
1465 ULONG Values;
1466 ULONG MaxValueNameLen;
1467 ULONG MaxValueDataLen;
1468 WCHAR Class[1];
1469 } KEY_FULL_INFORMATION, *PKEY_FULL_INFORMATION;
1470
1471 typedef struct _KEY_NAME_INFORMATION {
1472 ULONG NameLength;
1473 WCHAR Name[1];
1474 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
1475
1476 typedef struct _KEY_CACHED_INFORMATION
1477 {
1478 LARGE_INTEGER LastWriteTime;
1479 ULONG TitleIndex;
1480 ULONG SubKeys;
1481 ULONG MaxNameLen;
1482 ULONG Values;
1483 ULONG MaxValueNameLen;
1484 ULONG MaxValueDataLen;
1485 ULONG NameLength;
1486 } KEY_CACHED_INFORMATION, *PKEY_CACHED_INFORMATION;
1487
1488 typedef struct _KEY_VALUE_ENTRY
1489 {
1490 PUNICODE_STRING ValueName;
1491 ULONG DataLength;
1492 ULONG DataOffset;
1493 ULONG Type;
1494 } KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
1495
1496 typedef struct _KEY_VALUE_BASIC_INFORMATION {
1497 ULONG TitleIndex;
1498 ULONG Type;
1499 ULONG NameLength;
1500 WCHAR Name[1];
1501 } KEY_VALUE_BASIC_INFORMATION, *PKEY_VALUE_BASIC_INFORMATION;
1502
1503 typedef struct _KEY_VALUE_FULL_INFORMATION {
1504 ULONG TitleIndex;
1505 ULONG Type;
1506 ULONG DataOffset;
1507 ULONG DataLength;
1508 ULONG NameLength;
1509 WCHAR Name[1];
1510 } KEY_VALUE_FULL_INFORMATION, *PKEY_VALUE_FULL_INFORMATION;
1511
1512 typedef struct _KEY_VALUE_PARTIAL_INFORMATION {
1513 ULONG TitleIndex;
1514 ULONG Type;
1515 ULONG DataLength;
1516 UCHAR Data[1];
1517 } KEY_VALUE_PARTIAL_INFORMATION, *PKEY_VALUE_PARTIAL_INFORMATION;
1518
1519 #ifndef __OBJECT_ATTRIBUTES_DEFINED__
1520 #define __OBJECT_ATTRIBUTES_DEFINED__
1521 typedef struct _OBJECT_ATTRIBUTES {
1522 ULONG Length;
1523 HANDLE RootDirectory;
1524 PUNICODE_STRING ObjectName;
1525 ULONG Attributes;
1526 PVOID SecurityDescriptor; /* type SECURITY_DESCRIPTOR */
1527 PVOID SecurityQualityOfService; /* type SECURITY_QUALITY_OF_SERVICE */
1528 } OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
1529 #endif
1530
1531 typedef struct _OBJECT_DATA_INFORMATION {
1532 BOOLEAN InheritHandle;
1533 BOOLEAN ProtectFromClose;
1534 } OBJECT_DATA_INFORMATION, *POBJECT_DATA_INFORMATION;
1535
1536 typedef struct _OBJECT_BASIC_INFORMATION {
1537 ULONG Attributes;
1538 ACCESS_MASK GrantedAccess;
1539 ULONG HandleCount;
1540 ULONG PointerCount;
1541 ULONG PagedPoolUsage;
1542 ULONG NonPagedPoolUsage;
1543 ULONG Reserved[3];
1544 ULONG NameInformationLength;
1545 ULONG TypeInformationLength;
1546 ULONG SecurityDescriptorLength;
1547 LARGE_INTEGER CreateTime;
1548 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
1549
1550 typedef struct _OBJECT_NAME_INFORMATION {
1551 UNICODE_STRING Name;
1552 } OBJECT_NAME_INFORMATION, *POBJECT_NAME_INFORMATION;
1553
1554 typedef struct __OBJECT_TYPE_INFORMATION {
1555 UNICODE_STRING TypeName;
1556 ULONG Reserved [22];
1557 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
1558
1559 typedef struct _PROCESS_BASIC_INFORMATION {
1560 #ifdef __WINESRC__
1561 DWORD_PTR ExitStatus;
1562 PPEB PebBaseAddress;
1563 DWORD_PTR AffinityMask;
1564 DWORD_PTR BasePriority;
1565 ULONG_PTR UniqueProcessId;
1566 ULONG_PTR InheritedFromUniqueProcessId;
1567 #else
1568 PVOID Reserved1;
1569 PPEB PebBaseAddress;
1570 PVOID Reserved2[2];
1571 ULONG_PTR UniqueProcessId;
1572 PVOID Reserved3;
1573 #endif
1574 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
1575
1576 #define PROCESS_PRIOCLASS_IDLE 1
1577 #define PROCESS_PRIOCLASS_NORMAL 2
1578 #define PROCESS_PRIOCLASS_HIGH 3
1579 #define PROCESS_PRIOCLASS_REALTIME 4
1580 #define PROCESS_PRIOCLASS_BELOW_NORMAL 5
1581 #define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
1582
1583 typedef struct _PROCESS_PRIORITY_CLASS {
1584 BOOLEAN Foreground;
1585 UCHAR PriorityClass;
1586 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
1587
1588 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION
1589 {
1590 SIZE_T ReserveSize;
1591 SIZE_T ZeroBits;
1592 PVOID StackBase;
1593 } PROCESS_STACK_ALLOCATION_INFORMATION, *PPROCESS_STACK_ALLOCATION_INFORMATION;
1594
1595 typedef struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX
1596 {
1597 ULONG PreferredNode;
1598 ULONG Reserved0;
1599 ULONG Reserved1;
1600 ULONG Reserved2;
1601 PROCESS_STACK_ALLOCATION_INFORMATION AllocInfo;
1602 } PROCESS_STACK_ALLOCATION_INFORMATION_EX, *PPROCESS_STACK_ALLOCATION_INFORMATION_EX;
1603
1604 typedef struct _RTL_HEAP_DEFINITION {
1605 ULONG Length; /* = sizeof(RTL_HEAP_DEFINITION) */
1606
1607 ULONG Unknown[11];
1608 } RTL_HEAP_DEFINITION, *PRTL_HEAP_DEFINITION;
1609
1610 typedef struct _RTL_RWLOCK {
1611 RTL_CRITICAL_SECTION rtlCS;
1612
1613 HANDLE hSharedReleaseSemaphore;
1614 UINT uSharedWaiters;
1615
1616 HANDLE hExclusiveReleaseSemaphore;
1617 UINT uExclusiveWaiters;
1618
1619 INT iNumberActive;
1620 HANDLE hOwningThreadId;
1621 DWORD dwTimeoutBoost;
1622 PVOID pDebugInfo;
1623 } RTL_RWLOCK, *LPRTL_RWLOCK;
1624
1625 /* System Information Class 0x00 */
1626
1627 typedef struct _SYSTEM_BASIC_INFORMATION {
1628 #ifdef __WINESRC__
1629 DWORD unknown;
1630 ULONG KeMaximumIncrement;
1631 ULONG PageSize;
1632 ULONG MmNumberOfPhysicalPages;
1633 ULONG MmLowestPhysicalPage;
1634 ULONG MmHighestPhysicalPage;
1635 ULONG_PTR AllocationGranularity;
1636 PVOID LowestUserAddress;
1637 PVOID HighestUserAddress;
1638 ULONG_PTR ActiveProcessorsAffinityMask;
1639 BYTE NumberOfProcessors;
1640 #else
1641 BYTE Reserved1[24];
1642 PVOID Reserved2[4];
1643 CCHAR NumberOfProcessors;
1644 #endif
1645 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
1646
1647 /* System Information Class 0x01 */
1648
1649 typedef struct _SYSTEM_CPU_INFORMATION {
1650 WORD Architecture;
1651 WORD Level;
1652 WORD Revision; /* combination of CPU model and stepping */
1653 WORD Reserved; /* always zero */
1654 DWORD FeatureSet; /* see bit flags below */
1655 } SYSTEM_CPU_INFORMATION, *PSYSTEM_CPU_INFORMATION;
1656
1657 /* definitions of bits in the Feature set for the x86 processors */
1658 #define CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */
1659 #define CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */
1660 #define CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/
1661 #define CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */
1662 #define CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */
1663 #define CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */
1664 #define CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */
1665 #define CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */
1666 #define CPU_FEATURE_X86 0x00000200 /* seems to be always ON, on the '86 */
1667 #define CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */
1668 #define CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */
1669 #define CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */
1670 #define CPU_FEATURE_SSE 0x00002000 /* SSE extensions (ext. MMX) */
1671 #define CPU_FEATURE_3DNOW 0x00004000 /* 3DNOW instructions available */
1672 #define CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */
1673 #define CPU_FEATURE_DS 0x00020000 /* Debug Store */
1674 #define CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */
1675 #define CPU_FEATURE_SSE3 0x00080000 /* SSE3 extensions */
1676 #define CPU_FEATURE_CX128 0x00100000 /* cmpxchg16b instruction */
1677 #define CPU_FEATURE_XSAVE 0x00800000 /* XSAVE instructions */
1678 #define CPU_FEATURE_2NDLEV 0x04000000 /* Second-level address translation */
1679 #define CPU_FEATURE_VIRT 0x08000000 /* Virtualization support */
1680 #define CPU_FEATURE_RDFS 0x10000000 /* RDFSBASE etc. instructions */
1681 #define CPU_FEATURE_NX 0x20000000 /* Data execution prevention */
1682
1683 /* FIXME: following values are made up, actual flags are unknown */
1684 #define CPU_FEATURE_PAE 0x00200000
1685 #define CPU_FEATURE_DAZ 0x00400000
1686 #define CPU_FEATURE_ARM_VFP_32 0x00000001
1687 #define CPU_FEATURE_ARM_NEON 0x00000002
1688 #define CPU_FEATURE_ARM_V8_CRC32 0x00000004
1689 #define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
1690
1691 /* System Information Class 0x02 */
1692
1693 /* Documented in "Windows NT/2000 Native API Reference" by Gary Nebbett. */
1694 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
1695 LARGE_INTEGER IdleTime;
1696 LARGE_INTEGER ReadTransferCount;
1697 LARGE_INTEGER WriteTransferCount;
1698 LARGE_INTEGER OtherTransferCount;
1699 ULONG ReadOperationCount;
1700 ULONG WriteOperationCount;
1701 ULONG OtherOperationCount;
1702 ULONG AvailablePages;
1703 ULONG TotalCommittedPages;
1704 ULONG TotalCommitLimit;
1705 ULONG PeakCommitment;
1706 ULONG PageFaults;
1707 ULONG WriteCopyFaults;
1708 ULONG TransitionFaults;
1709 ULONG Reserved1;
1710 ULONG DemandZeroFaults;
1711 ULONG PagesRead;
1712 ULONG PageReadIos;
1713 ULONG Reserved2[2];
1714 ULONG PagefilePagesWritten;
1715 ULONG PagefilePageWriteIos;
1716 ULONG MappedFilePagesWritten;
1717 ULONG MappedFilePageWriteIos;
1718 ULONG PagedPoolUsage;
1719 ULONG NonPagedPoolUsage;
1720 ULONG PagedPoolAllocs;
1721 ULONG PagedPoolFrees;
1722 ULONG NonPagedPoolAllocs;
1723 ULONG NonPagedPoolFrees;
1724 ULONG TotalFreeSystemPtes;
1725 ULONG SystemCodePage;
1726 ULONG TotalSystemDriverPages;
1727 ULONG TotalSystemCodePages;
1728 ULONG SmallNonPagedLookasideListAllocateHits;
1729 ULONG SmallPagedLookasideListAllocateHits;
1730 ULONG Reserved3;
1731 ULONG MmSystemCachePage;
1732 ULONG PagedPoolPage;
1733 ULONG SystemDriverPage;
1734 ULONG FastReadNoWait;
1735 ULONG FastReadWait;
1736 ULONG FastReadResourceMiss;
1737 ULONG FastReadNotPossible;
1738 ULONG FastMdlReadNoWait;
1739 ULONG FastMdlReadWait;
1740 ULONG FastMdlReadResourceMiss;
1741 ULONG FastMdlReadNotPossible;
1742 ULONG MapDataNoWait;
1743 ULONG MapDataWait;
1744 ULONG MapDataNoWaitMiss;
1745 ULONG MapDataWaitMiss;
1746 ULONG PinMappedDataCount;
1747 ULONG PinReadNoWait;
1748 ULONG PinReadWait;
1749 ULONG PinReadNoWaitMiss;
1750 ULONG PinReadWaitMiss;
1751 ULONG CopyReadNoWait;
1752 ULONG CopyReadWait;
1753 ULONG CopyReadNoWaitMiss;
1754 ULONG CopyReadWaitMiss;
1755 ULONG MdlReadNoWait;
1756 ULONG MdlReadWait;
1757 ULONG MdlReadNoWaitMiss;
1758 ULONG MdlReadWaitMiss;
1759 ULONG ReadAheadIos;
1760 ULONG LazyWriteIos;
1761 ULONG LazyWritePages;
1762 ULONG DataFlushes;
1763 ULONG DataPages;
1764 ULONG ContextSwitches;
1765 ULONG FirstLevelTbFills;
1766 ULONG SecondLevelTbFills;
1767 ULONG SystemCalls;
1768 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
1769
1770 /* System Information Class 0x03 */
1771
1772 typedef struct _SYSTEM_TIMEOFDAY_INFORMATION {
1773 #ifdef __WINESRC__
1774 LARGE_INTEGER BootTime;
1775 LARGE_INTEGER SystemTime;
1776 LARGE_INTEGER TimeZoneBias;
1777 ULONG TimeZoneId;
1778 ULONG Reserved;
1779 ULONGLONG BootTimeBias;
1780 ULONGLONG SleepTimeBias;
1781 #else
1782 BYTE Reserved1[48];
1783 #endif
1784 } SYSTEM_TIMEOFDAY_INFORMATION, *PSYSTEM_TIMEOFDAY_INFORMATION; /* was SYSTEM_TIME_INFORMATION */
1785
1786 /* System Information Class 0x08 */
1787
1788 typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION {
1789 LARGE_INTEGER IdleTime;
1790 LARGE_INTEGER KernelTime;
1791 LARGE_INTEGER UserTime;
1792 LARGE_INTEGER Reserved1[2];
1793 ULONG Reserved2;
1794 } SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION, *PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION;
1795
1796 /* System Information Class 0x0b */
1797
1798 typedef struct _SYSTEM_DRIVER_INFORMATION {
1799 PVOID pvAddress;
1800 DWORD dwUnknown1;
1801 DWORD dwUnknown2;
1802 DWORD dwEntryIndex;
1803 DWORD dwUnknown3;
1804 char szName[MAX_PATH + 1];
1805 } SYSTEM_DRIVER_INFORMATION, *PSYSTEM_DRIVER_INFORMATION;
1806
1807 /* System Information Class 0x10 */
1808
1809 typedef struct _SYSTEM_HANDLE_ENTRY {
1810 ULONG OwnerPid;
1811 BYTE ObjectType;
1812 BYTE HandleFlags;
1813 USHORT HandleValue;
1814 PVOID ObjectPointer;
1815 ULONG AccessMask;
1816 } SYSTEM_HANDLE_ENTRY, *PSYSTEM_HANDLE_ENTRY;
1817
1818 typedef struct _SYSTEM_HANDLE_INFORMATION {
1819 ULONG Count;
1820 SYSTEM_HANDLE_ENTRY Handle[1];
1821 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
1822
1823 /* System Information Class 0x15 */
1824
1825 typedef struct _SYSTEM_CACHE_INFORMATION {
1826 ULONG CurrentSize;
1827 ULONG PeakSize;
1828 ULONG PageFaultCount;
1829 ULONG MinimumWorkingSet;
1830 ULONG MaximumWorkingSet;
1831 ULONG unused[4];
1832 #ifdef _WIN64
1833 ULONG unknown64[7];
1834 #endif
1835 } SYSTEM_CACHE_INFORMATION, *PSYSTEM_CACHE_INFORMATION;
1836
1837 /* System Information Class 0x17 */
1838
1839 typedef struct _SYSTEM_INTERRUPT_INFORMATION {
1840 BYTE Reserved1[24];
1841 } SYSTEM_INTERRUPT_INFORMATION, *PSYSTEM_INTERRUPT_INFORMATION;
1842
1843 typedef struct _SYSTEM_CONFIGURATION_INFO {
1844 union {
1845 ULONG OemId;
1846 struct {
1847 WORD ProcessorArchitecture;
1848 WORD Reserved;
1849 } tag1;
1850 } tag2;
1851 ULONG PageSize;
1852 PVOID MinimumApplicationAddress;
1853 PVOID MaximumApplicationAddress;
1854 ULONG ActiveProcessorMask;
1855 ULONG NumberOfProcessors;
1856 ULONG ProcessorType;
1857 ULONG AllocationGranularity;
1858 WORD ProcessorLevel;
1859 WORD ProcessorRevision;
1860 } SYSTEM_CONFIGURATION_INFO, *PSYSTEM_CONFIGURATION_INFO;
1861
1862 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
1863 BYTE Reserved1[16];
1864 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
1865
1866 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
1867 BYTE Reserved1[32];
1868 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
1869
1870 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
1871 BOOLEAN DebuggerEnabled;
1872 BOOLEAN DebuggerNotPresent;
1873 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
1874
1875 typedef struct _VM_COUNTERS
1876 {
1877 SIZE_T PeakVirtualSize;
1878 SIZE_T VirtualSize;
1879 ULONG PageFaultCount;
1880 SIZE_T PeakWorkingSetSize;
1881 SIZE_T WorkingSetSize;
1882 SIZE_T QuotaPeakPagedPoolUsage;
1883 SIZE_T QuotaPagedPoolUsage;
1884 SIZE_T QuotaPeakNonPagedPoolUsage;
1885 SIZE_T QuotaNonPagedPoolUsage;
1886 SIZE_T PagefileUsage;
1887 SIZE_T PeakPagefileUsage;
1888 } VM_COUNTERS, *PVM_COUNTERS;
1889
1890 typedef struct _VM_COUNTERS_EX
1891 {
1892 SIZE_T PeakVirtualSize;
1893 SIZE_T VirtualSize;
1894 ULONG PageFaultCount;
1895 SIZE_T PeakWorkingSetSize;
1896 SIZE_T WorkingSetSize;
1897 SIZE_T QuotaPeakPagedPoolUsage;
1898 SIZE_T QuotaPagedPoolUsage;
1899 SIZE_T QuotaPeakNonPagedPoolUsage;
1900 SIZE_T QuotaNonPagedPoolUsage;
1901 SIZE_T PagefileUsage;
1902 SIZE_T PeakPagefileUsage;
1903 SIZE_T PrivateUsage;
1904 } VM_COUNTERS_EX, *PVM_COUNTERS_EX;
1905
1906 typedef struct _SYSTEM_PROCESS_INFORMATION {
1907 #ifdef __WINESRC__ /* win32/win64 */
1908 ULONG NextEntryOffset; /* 00/00 */
1909 DWORD dwThreadCount; /* 04/04 */
1910 DWORD dwUnknown1[6]; /* 08/08 */
1911 LARGE_INTEGER CreationTime; /* 20/20 */
1912 LARGE_INTEGER UserTime; /* 28/28 */
1913 LARGE_INTEGER KernelTime; /* 30/30 */
1914 UNICODE_STRING ProcessName; /* 38/38 */
1915 DWORD dwBasePriority; /* 40/48 */
1916 HANDLE UniqueProcessId; /* 44/50 */
1917 HANDLE ParentProcessId; /* 48/58 */
1918 ULONG HandleCount; /* 4c/60 */
1919 ULONG SessionId; /* 50/64 */
1920 DWORD dwUnknown4; /* 54/68 */
1921 VM_COUNTERS_EX vmCounters; /* 58/70 */
1922 IO_COUNTERS ioCounters; /* 88/d0 */
1923 SYSTEM_THREAD_INFORMATION ti[1]; /* b8/100 */
1924 #else
1925 ULONG NextEntryOffset; /* 00/00 */
1926 BYTE Reserved1[52]; /* 04/04 */
1927 PVOID Reserved2[3]; /* 38/38 */
1928 HANDLE UniqueProcessId; /* 44/50 */
1929 PVOID Reserved3; /* 48/58 */
1930 ULONG HandleCount; /* 4c/60 */
1931 BYTE Reserved4[4]; /* 50/64 */
1932 PVOID Reserved5[11]; /* 54/68 */
1933 SIZE_T PeakPagefileUsage; /* 80/c0 */
1934 SIZE_T PrivatePageCount; /* 84/c8 */
1935 LARGE_INTEGER Reserved6[6]; /* 88/d0 */
1936 #endif
1937 } SYSTEM_PROCESS_INFORMATION, *PSYSTEM_PROCESS_INFORMATION;
1938
1939 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
1940 ULONG RegistryQuotaAllowed;
1941 ULONG RegistryQuotaUsed;
1942 PVOID Reserved1;
1943 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
1944
1945 typedef struct _SYSTEM_TIME_ADJUSTMENT_QUERY {
1946 ULONG TimeAdjustment;
1947 ULONG TimeIncrement;
1948 BOOLEAN TimeAdjustmentDisabled;
1949 } SYSTEM_TIME_ADJUSTMENT_QUERY, *PSYSTEM_TIME_ADJUSTMENT_QUERY;
1950
1951 typedef struct _SYSTEM_TIME_ADJUSTMENT {
1952 ULONG TimeAdjustment;
1953 BOOLEAN TimeAdjustmentDisabled;
1954 } SYSTEM_TIME_ADJUSTMENT, *PSYSTEM_TIME_ADJUSTMENT;
1955
1956 typedef enum _SYSTEM_FIRMWARE_TABLE_ACTION
1957 {
1958 SystemFirmwareTable_Enumerate = 0,
1959 SystemFirmwareTable_Get = 1
1960 } SYSTEM_FIRMWARE_TABLE_ACTION, *PSYSTEM_FIRMWARE_TABLE_ACTION;
1961
1962 /* System Information Class 0x4C */
1963
1964 typedef struct _SYSTEM_FIRMWARE_TABLE_INFORMATION
1965 {
1966 ULONG ProviderSignature;
1967 SYSTEM_FIRMWARE_TABLE_ACTION Action;
1968 ULONG TableID;
1969 ULONG TableBufferLength;
1970 UCHAR TableBuffer[1];
1971 } SYSTEM_FIRMWARE_TABLE_INFORMATION, *PSYSTEM_FIRMWARE_TABLE_INFORMATION;
1972
1973 typedef struct _TIME_FIELDS
1974 { CSHORT Year;
1975 CSHORT Month;
1976 CSHORT Day;
1977 CSHORT Hour;
1978 CSHORT Minute;
1979 CSHORT Second;
1980 CSHORT Milliseconds;
1981 CSHORT Weekday;
1982 } TIME_FIELDS, *PTIME_FIELDS;
1983
1984 typedef struct _WINSTATIONINFORMATIONW {
1985 BYTE Reserved2[70];
1986 ULONG LogonId;
1987 BYTE Reserved3[1140];
1988 } WINSTATIONINFORMATIONW, *PWINSTATIONINFORMATIONW;
1989
1990 typedef BOOLEAN (WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE,ULONG,WINSTATIONINFOCLASS,PVOID,ULONG,PULONG);
1991
1992 typedef struct _LDR_RESOURCE_INFO
1993 {
1994 ULONG_PTR Type;
1995 ULONG_PTR Name;
1996 ULONG Language;
1997 } LDR_RESOURCE_INFO, *PLDR_RESOURCE_INFO;
1998
1999
2000 /* debug buffer definitions */
2001
2002 typedef struct _DEBUG_BUFFER {
2003 HANDLE SectionHandle;
2004 PVOID SectionBase;
2005 PVOID RemoteSectionBase;
2006 ULONG SectionBaseDelta;
2007 HANDLE EventPairHandle;
2008 ULONG Unknown[2];
2009 HANDLE RemoteThreadHandle;
2010 ULONG InfoClassMask;
2011 ULONG SizeOfInfo;
2012 ULONG AllocatedSize;
2013 ULONG SectionSize;
2014 PVOID ModuleInformation;
2015 PVOID BackTraceInformation;
2016 PVOID HeapInformation;
2017 PVOID LockInformation;
2018 PVOID Reserved[8];
2019 } DEBUG_BUFFER, *PDEBUG_BUFFER;
2020
2021 #define PDI_MODULES 0x01
2022 #define PDI_BACKTRACE 0x02
2023 #define PDI_HEAPS 0x04
2024 #define PDI_HEAP_TAGS 0x08
2025 #define PDI_HEAP_BLOCKS 0x10
2026 #define PDI_LOCKS 0x20
2027
2028 typedef struct _DEBUG_MODULE_INFORMATION {
2029 ULONG Reserved[2];
2030 ULONG Base;
2031 ULONG Size;
2032 ULONG Flags;
2033 USHORT Index;
2034 USHORT Unknown;
2035 USHORT LoadCount;
2036 USHORT ModuleNameOffset;
2037 CHAR ImageName[256];
2038 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
2039
2040 typedef struct _DEBUG_HEAP_INFORMATION {
2041 ULONG Base;
2042 ULONG Flags;
2043 USHORT Granularity;
2044 USHORT Unknown;
2045 ULONG Allocated;
2046 ULONG Committed;
2047 ULONG TagCount;
2048 ULONG BlockCount;
2049 ULONG Reserved[7];
2050 PVOID Tags;
2051 PVOID Blocks;
2052 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
2053
2054 typedef struct _DEBUG_LOCK_INFORMATION {
2055 PVOID Address;
2056 USHORT Type;
2057 USHORT CreatorBackTraceIndex;
2058 ULONG OwnerThreadId;
2059 ULONG ActiveCount;
2060 ULONG ContentionCount;
2061 ULONG EntryCount;
2062 ULONG RecursionCount;
2063 ULONG NumberOfSharedWaiters;
2064 ULONG NumberOfExclusiveWaiters;
2065 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
2066
2067 typedef struct _PORT_MESSAGE_HEADER {
2068 USHORT DataSize;
2069 USHORT MessageSize;
2070 USHORT MessageType;
2071 USHORT VirtualRangesOffset;
2072 CLIENT_ID ClientId;
2073 ULONG MessageId;
2074 ULONG SectionSize;
2075 } PORT_MESSAGE_HEADER, *PPORT_MESSAGE_HEADER, PORT_MESSAGE, *PPORT_MESSAGE;
2076
2077 typedef unsigned short RTL_ATOM, *PRTL_ATOM;
2078
2079 /* Wine doesn't implement atom table as NT does:
2080 * - in NT, atom tables are user space tables, which ntdll directly accesses
2081 * - on Wine, (even local) atom tables are wineserver objects, hence a HANDLE
2082 */
2083 typedef struct atom_table *RTL_ATOM_TABLE, **PRTL_ATOM_TABLE;
2084
2085 typedef enum _ATOM_INFORMATION_CLASS {
2086 AtomBasicInformation = 0,
2087 AtomTableInformation = 1,
2088 } ATOM_INFORMATION_CLASS;
2089
2090 typedef struct _ATOM_BASIC_INFORMATION {
2091 USHORT ReferenceCount;
2092 USHORT Pinned;
2093 USHORT NameLength;
2094 WCHAR Name[1];
2095 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
2096
2097 /* FIXME: names probably not correct */
2098 typedef struct _RTL_HANDLE
2099 {
2100 struct _RTL_HANDLE * Next;
2101 } RTL_HANDLE;
2102
2103 /* FIXME: names probably not correct */
2104 typedef struct _RTL_HANDLE_TABLE
2105 {
2106 ULONG MaxHandleCount; /* 0x00 */
2107 ULONG HandleSize; /* 0x04 */
2108 ULONG Unused[2]; /* 0x08-0x0c */
2109 PVOID NextFree; /* 0x10 */
2110 PVOID FirstHandle; /* 0x14 */
2111 PVOID ReservedMemory; /* 0x18 */
2112 PVOID MaxHandle; /* 0x1c */
2113 } RTL_HANDLE_TABLE;
2114
2115 /***********************************************************************
2116 * Defines
2117 */
2118
2119 /* flags for NtCreateFile and NtOpenFile */
2120 #define FILE_DIRECTORY_FILE 0x00000001
2121 #define FILE_WRITE_THROUGH 0x00000002
2122 #define FILE_SEQUENTIAL_ONLY 0x00000004
2123 #define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
2124 #define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
2125 #define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
2126 #define FILE_NON_DIRECTORY_FILE 0x00000040
2127 #define FILE_CREATE_TREE_CONNECTION 0x00000080
2128 #define FILE_COMPLETE_IF_OPLOCKED 0x00000100
2129 #define FILE_NO_EA_KNOWLEDGE 0x00000200
2130 #define FILE_OPEN_FOR_RECOVERY 0x00000400
2131 #define FILE_RANDOM_ACCESS 0x00000800
2132 #define FILE_DELETE_ON_CLOSE 0x00001000
2133 #define FILE_OPEN_BY_FILE_ID 0x00002000
2134 #define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
2135 #define FILE_NO_COMPRESSION 0x00008000
2136 #define FILE_RESERVE_OPFILTER 0x00100000
2137 #define FILE_OPEN_REPARSE_POINT 0x00200000
2138 #define FILE_OPEN_OFFLINE_FILE 0x00400000
2139 #define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
2140
2141 #define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
2142 #define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
2143
2144 /* status for NtCreateFile or NtOpenFile */
2145 #define FILE_SUPERSEDED 0
2146 #define FILE_OPENED 1
2147 #define FILE_CREATED 2
2148 #define FILE_OVERWRITTEN 3
2149 #define FILE_EXISTS 4
2150 #define FILE_DOES_NOT_EXIST 5
2151
2152 /* disposition for NtCreateFile */
2153 #define FILE_SUPERSEDE 0
2154 #define FILE_OPEN 1
2155 #define FILE_CREATE 2
2156 #define FILE_OPEN_IF 3
2157 #define FILE_OVERWRITE 4
2158 #define FILE_OVERWRITE_IF 5
2159 #define FILE_MAXIMUM_DISPOSITION 5
2160
2161 /* Characteristics of a File System */
2162 #define FILE_REMOVABLE_MEDIA 0x00000001
2163 #define FILE_READ_ONLY_DEVICE 0x00000002
2164 #define FILE_FLOPPY_DISKETTE 0x00000004
2165 #define FILE_WRITE_ONE_MEDIA 0x00000008
2166 #define FILE_REMOTE_DEVICE 0x00000010
2167 #define FILE_DEVICE_IS_MOUNTED 0x00000020
2168 #define FILE_VIRTUAL_VOLUME 0x00000040
2169 #define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
2170 #define FILE_DEVICE_SECURE_OPEN 0x00000100
2171 #define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
2172 #define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
2173 #define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
2174 #define FILE_CHARACTERISTIC_CSV 0x00010000
2175 #define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
2176 #define FILE_PORTABLE_DEVICE 0x00040000
2177
2178 /* options for NtCreateNamedPipeFile */
2179 #define FILE_PIPE_INBOUND 0x00000000
2180 #define FILE_PIPE_OUTBOUND 0x00000001
2181 #define FILE_PIPE_FULL_DUPLEX 0x00000002
2182
2183 /* options for pipe's type */
2184 #define FILE_PIPE_TYPE_MESSAGE 0x00000001
2185 #define FILE_PIPE_TYPE_BYTE 0x00000000
2186 /* options for pipe's message mode */
2187 #define FILE_PIPE_MESSAGE_MODE 0x00000001
2188 #define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
2189 /* options for pipe's blocking mode */
2190 #define FILE_PIPE_COMPLETE_OPERATION 0x00000001
2191 #define FILE_PIPE_QUEUE_OPERATION 0x00000000
2192 /* and client / server end */
2193 #define FILE_PIPE_SERVER_END 0x00000001
2194 #define FILE_PIPE_CLIENT_END 0x00000000
2195
2196 #define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
2197
2198 #define LOGONID_CURRENT ((ULONG)-1)
2199
2200 #define OBJ_INHERIT 0x00000002
2201 #define OBJ_PERMANENT 0x00000010
2202 #define OBJ_EXCLUSIVE 0x00000020
2203 #define OBJ_CASE_INSENSITIVE 0x00000040
2204 #define OBJ_OPENIF 0x00000080
2205 #define OBJ_OPENLINK 0x00000100
2206 #define OBJ_KERNEL_HANDLE 0x00000200
2207 #define OBJ_VALID_ATTRIBUTES 0x000003F2
2208
2209 #define SERVERNAME_CURRENT ((HANDLE)NULL)
2210
2211 typedef void (CALLBACK *PNTAPCFUNC)(ULONG_PTR,ULONG_PTR,ULONG_PTR); /* FIXME: not the right name */
2212 typedef void (CALLBACK *PRTL_THREAD_START_ROUTINE)(LPVOID); /* FIXME: not the right name */
2213 typedef DWORD (CALLBACK *PRTL_WORK_ITEM_ROUTINE)(LPVOID); /* FIXME: not the right name */
2214 typedef void (NTAPI *RTL_WAITORTIMERCALLBACKFUNC)(PVOID,BOOLEAN); /* FIXME: not the right name */
2215
2216
2217 /* DbgPrintEx default levels */
2218 #define DPFLTR_ERROR_LEVEL 0
2219 #define DPFLTR_WARNING_LEVEL 1
2220 #define DPFLTR_TRACE_LEVEL 2
2221 #define DPFLTR_INFO_LEVEL 3
2222 #define DPFLTR_MASK 0x8000000
2223
2224 /* Well-known LUID values */
2225 #define SE_MIN_WELL_KNOWN_PRIVILEGE 2
2226 #define SE_CREATE_TOKEN_PRIVILEGE 2
2227 #define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
2228 #define SE_LOCK_MEMORY_PRIVILEGE 4
2229 #define SE_INCREASE_QUOTA_PRIVILEGE 5
2230 #define SE_UNSOLICITED_INPUT_PRIVILEGE 6 /* obsolete */
2231 #define SE_MACHINE_ACCOUNT_PRIVILEGE 6
2232 #define SE_TCB_PRIVILEGE 7
2233 #define SE_SECURITY_PRIVILEGE 8
2234 #define SE_TAKE_OWNERSHIP_PRIVILEGE 9
2235 #define SE_LOAD_DRIVER_PRIVILEGE 10
2236 #define SE_SYSTEM_PROFILE_PRIVILEGE 11
2237 #define SE_SYSTEMTIME_PRIVILEGE 12
2238 #define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
2239 #define SE_INC_BASE_PRIORITY_PRIVILEGE 14
2240 #define SE_CREATE_PAGEFILE_PRIVILEGE 15
2241 #define SE_CREATE_PERMANENT_PRIVILEGE 16
2242 #define SE_BACKUP_PRIVILEGE 17
2243 #define SE_RESTORE_PRIVILEGE 18
2244 #define SE_SHUTDOWN_PRIVILEGE 19
2245 #define SE_DEBUG_PRIVILEGE 20
2246 #define SE_AUDIT_PRIVILEGE 21
2247 #define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
2248 #define SE_CHANGE_NOTIFY_PRIVILEGE 23
2249 #define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
2250 #define SE_UNDOCK_PRIVILEGE 25
2251 #define SE_SYNC_AGENT_PRIVILEGE 26
2252 #define SE_ENABLE_DELEGATION_PRIVILEGE 27
2253 #define SE_MANAGE_VOLUME_PRIVILEGE 28
2254 #define SE_IMPERSONATE_PRIVILEGE 29
2255 #define SE_CREATE_GLOBAL_PRIVILEGE 30
2256 #define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
2257
2258 /* NtGlobalFlag bits */
2259 #define FLG_STOP_ON_EXCEPTION 0x00000001
2260 #define FLG_SHOW_LDR_SNAPS 0x00000002
2261 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
2262 #define FLG_STOP_ON_HUNG_GUI 0x00000008
2263 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
2264 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
2265 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
2266 #define FLG_HEAP_VALIDATE_ALL 0x00000080
2267 #define FLG_APPLICATION_VERIFIER 0x00000100
2268 #define FLG_POOL_ENABLE_TAGGING 0x00000400
2269 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
2270 #define FLG_USER_STACK_TRACE_DB 0x00001000
2271 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
2272 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
2273 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
2274 #define FLG_DISABLE_STACK_EXTENSION 0x00010000
2275 #define FLG_ENABLE_CSRDEBUG 0x00020000
2276 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
2277 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
2278 #define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
2279 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
2280 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
2281 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
2282 #define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
2283 #define FLG_HEAP_PAGE_ALLOCS 0x02000000
2284 #define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
2285 #define FLG_DISABLE_DBGPRINT 0x08000000
2286 #define FLG_CRITSEC_EVENT_CREATION 0x10000000
2287 #define FLG_LDR_TOP_DOWN 0x20000000
2288 #define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
2289 #define FLG_DISABLE_PROTDLLS 0x80000000
2290
2291 /* Rtl*Registry* functions structs and defines */
2292 #define RTL_REGISTRY_ABSOLUTE 0
2293 #define RTL_REGISTRY_SERVICES 1
2294 #define RTL_REGISTRY_CONTROL 2
2295 #define RTL_REGISTRY_WINDOWS_NT 3
2296 #define RTL_REGISTRY_DEVICEMAP 4
2297 #define RTL_REGISTRY_USER 5
2298
2299 #define RTL_REGISTRY_HANDLE 0x40000000
2300 #define RTL_REGISTRY_OPTIONAL 0x80000000
2301
2302 #define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
2303 #define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
2304 #define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
2305 #define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
2306 #define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
2307 #define RTL_QUERY_REGISTRY_DIRECT 0x00000020
2308 #define RTL_QUERY_REGISTRY_DELETE 0x00000040
2309 #define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
2310
2311 #define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
2312
2313 typedef NTSTATUS (WINAPI *PRTL_QUERY_REGISTRY_ROUTINE)( PCWSTR ValueName,
2314 ULONG ValueType,
2315 PVOID ValueData,
2316 ULONG ValueLength,
2317 PVOID Context,
2318 PVOID EntryContext);
2319
2320 typedef struct _RTL_QUERY_REGISTRY_TABLE
2321 {
2322 PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine;
2323 ULONG Flags;
2324 PWSTR Name;
2325 PVOID EntryContext;
2326 ULONG DefaultType;
2327 PVOID DefaultData;
2328 ULONG DefaultLength;
2329 } RTL_QUERY_REGISTRY_TABLE, *PRTL_QUERY_REGISTRY_TABLE;
2330
2331 typedef struct _KEY_MULTIPLE_VALUE_INFORMATION
2332 {
2333 PUNICODE_STRING ValueName;
2334 ULONG DataLength;
2335 ULONG DataOffset;
2336 ULONG Type;
2337 } KEY_MULTIPLE_VALUE_INFORMATION, *PKEY_MULTIPLE_VALUE_INFORMATION;
2338
2339 typedef VOID (CALLBACK *PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD,DWORD,LPVOID);
2340
2341 typedef VOID (CALLBACK *PTIMER_APC_ROUTINE) ( PVOID, ULONG, LONG );
2342
2343 typedef enum _EVENT_INFORMATION_CLASS {
2344 EventBasicInformation
2345 } EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
2346
2347 typedef struct _EVENT_BASIC_INFORMATION {
2348 EVENT_TYPE EventType;
2349 LONG EventState;
2350 } EVENT_BASIC_INFORMATION, *PEVENT_BASIC_INFORMATION;
2351
2352 typedef enum _SEMAPHORE_INFORMATION_CLASS {
2353 SemaphoreBasicInformation
2354 } SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
2355
2356 typedef struct _SEMAPHORE_BASIC_INFORMATION {
2357 ULONG CurrentCount;
2358 ULONG MaximumCount;
2359 } SEMAPHORE_BASIC_INFORMATION, *PSEMAPHORE_BASIC_INFORMATION;
2360
2361 typedef enum _SECTION_INFORMATION_CLASS
2362 {
2363 SectionBasicInformation,
2364 SectionImageInformation,
2365 } SECTION_INFORMATION_CLASS;
2366
2367 typedef struct _SECTION_BASIC_INFORMATION {
2368 PVOID BaseAddress;
2369 ULONG Attributes;
2370 LARGE_INTEGER Size;
2371 } SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;
2372
2373 typedef struct _SECTION_IMAGE_INFORMATION {
2374 PVOID TransferAddress;
2375 ULONG ZeroBits;
2376 SIZE_T MaximumStackSize;
2377 SIZE_T CommittedStackSize;
2378 ULONG SubSystemType;
2379 WORD SubsystemVersionLow;
2380 WORD SubsystemVersionHigh;
2381 ULONG GpValue;
2382 USHORT ImageCharacteristics;
2383 USHORT DllCharacteristics;
2384 USHORT Machine;
2385 BOOLEAN ImageContainsCode;
2386 union
2387 {
2388 UCHAR ImageFlags;
2389 struct
2390 {
2391 UCHAR ComPlusNativeReady : 1;
2392 UCHAR ComPlusILOnly : 1;
2393 UCHAR ImageDynamicallyRelocated : 1;
2394 UCHAR ImageMappedFlat : 1;
2395 UCHAR BaseBelow4gb : 1;
2396 UCHAR Reserved : 3;
2397 } DUMMYSTRUCTNAME;
2398 } DUMMYUNIONNAME;
2399 ULONG LoaderFlags;
2400 ULONG ImageFileSize;
2401 ULONG CheckSum;
2402 } SECTION_IMAGE_INFORMATION, *PSECTION_IMAGE_INFORMATION;
2403
2404 typedef struct _LPC_SECTION_WRITE {
2405 ULONG Length;
2406 HANDLE SectionHandle;
2407 ULONG SectionOffset;
2408 ULONG ViewSize;
2409 PVOID ViewBase;
2410 PVOID TargetViewBase;
2411 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
2412
2413 typedef struct _LPC_SECTION_READ {
2414 ULONG Length;
2415 ULONG ViewSize;
2416 PVOID ViewBase;
2417 } LPC_SECTION_READ, *PLPC_SECTION_READ;
2418
2419 typedef struct _LPC_MESSAGE {
2420 USHORT DataSize;
2421 USHORT MessageSize;
2422 USHORT MessageType;
2423 USHORT VirtualRangesOffset;
2424 CLIENT_ID ClientId;
2425 ULONG_PTR MessageId;
2426 ULONG_PTR SectionSize;
2427 UCHAR Data[ANYSIZE_ARRAY];
2428 } LPC_MESSAGE, *PLPC_MESSAGE;
2429
2430 typedef struct _RTL_USER_PROCESS_INFORMATION
2431 {
2432 ULONG Length;
2433 HANDLE Process;
2434 HANDLE Thread;
2435 CLIENT_ID ClientId;
2436 SECTION_IMAGE_INFORMATION ImageInformation;
2437 } RTL_USER_PROCESS_INFORMATION, *PRTL_USER_PROCESS_INFORMATION;
2438
2439 typedef enum _SHUTDOWN_ACTION {
2440 ShutdownNoReboot,
2441 ShutdownReboot,
2442 ShutdownPowerOff
2443 } SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
2444
2445 typedef struct _COUNTED_REASON_CONTEXT
2446 {
2447 ULONG Version;
2448 ULONG Flags;
2449 union
2450 {
2451 struct
2452 {
2453 UNICODE_STRING ResourceFileName;
2454 USHORT ResourceReasonId;
2455 ULONG StringCount;
2456 UNICODE_STRING *ReasonStrings;
2457 } DUMMYSTRUCTNAME;
2458 UNICODE_STRING SimpleString;
2459 } DUMMYUNIONNAME;
2460 } COUNTED_REASON_CONTEXT, *PCOUNTED_REASON_CONTEXT;
2461
2462 typedef enum _KPROFILE_SOURCE {
2463 ProfileTime,
2464 ProfileAlignmentFixup,
2465 ProfileTotalIssues,
2466 ProfilePipelineDry,
2467 ProfileLoadInstructions,
2468 ProfilePipelineFrozen,
2469 ProfileBranchInstructions,
2470 ProfileTotalNonissues,
2471 ProfileDcacheMisses,
2472 ProfileIcacheMisses,
2473 ProfileCacheMisses,
2474 ProfileBranchMispredictions,
2475 ProfileStoreInstructions,
2476 ProfileFpInstructions,
2477 ProfileIntegerInstructions,
2478 Profile2Issue,
2479 Profile3Issue,
2480 Profile4Issue,
2481 ProfileSpecialInstructions,
2482 ProfileTotalCycles,
2483 ProfileIcacheIssues,
2484 ProfileDcacheAccesses,
2485 ProfileMemoryBarrierCycles,
2486 ProfileLoadLinkedIssues,
2487 ProfileMaximum
2488 } KPROFILE_SOURCE, *PKPROFILE_SOURCE;
2489
2490 typedef struct _DIRECTORY_BASIC_INFORMATION {
2491 UNICODE_STRING ObjectName;
2492 UNICODE_STRING ObjectTypeName;
2493 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
2494
2495 typedef struct _INITIAL_TEB {
2496 void *OldStackBase;
2497 void *OldStackLimit;
2498 void *StackBase;
2499 void *StackLimit;
2500 void *DeallocationStack;
2501 } INITIAL_TEB, *PINITIAL_TEB;
2502
2503 typedef enum _PORT_INFORMATION_CLASS {
2504 PortNoInformation
2505 } PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
2506
2507 typedef enum _IO_COMPLETION_INFORMATION_CLASS {
2508 IoCompletionBasicInformation
2509 } IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
2510
2511 typedef struct _FILE_COMPLETION_INFORMATION {
2512 HANDLE CompletionPort;
2513 ULONG_PTR CompletionKey;
2514 } FILE_COMPLETION_INFORMATION, *PFILE_COMPLETION_INFORMATION;
2515
2516 #define IO_COMPLETION_QUERY_STATE 0x0001
2517 #define IO_COMPLETION_MODIFY_STATE 0x0002
2518 #define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
2519
2520 typedef struct _FILE_IO_COMPLETION_INFORMATION {
2521 ULONG_PTR CompletionKey;
2522 ULONG_PTR CompletionValue;
2523 IO_STATUS_BLOCK IoStatusBlock;
2524 } FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
2525
2526 typedef enum _HARDERROR_RESPONSE_OPTION {
2527 OptionAbortRetryIgnore,
2528 OptionOk,
2529 OptionOkCancel,
2530 OptionRetryCancel,
2531 OptionYesNo,
2532 OptionYesNoCancel,
2533 OptionShutdownSystem
2534 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
2535
2536 typedef enum _HARDERROR_RESPONSE {
2537 ResponseReturnToCaller,
2538 ResponseNotHandled,
2539 ResponseAbort,
2540 ResponseCancel,
2541 ResponseIgnore,
2542 ResponseNo,
2543 ResponseOk,
2544 ResponseRetry,
2545 ResponseYes
2546 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
2547
2548 typedef enum _SYSDBG_COMMAND {
2549 SysDbgQueryModuleInformation,
2550 SysDbgQueryTraceInformation,
2551 SysDbgSetTracepoint,
2552 SysDbgSetSpecialCall,
2553 SysDbgClearSpecialCalls,
2554 SysDbgQuerySpecialCalls,
2555 SysDbgBreakPoint,
2556 SysDbgQueryVersion,
2557 SysDbgReadVirtual,
2558 SysDbgWriteVirtual,
2559 SysDbgReadPhysical,
2560 SysDbgWritePhysical,
2561 SysDbgReadControlSpace,
2562 SysDbgWriteControlSpace,
2563 SysDbgReadIoSpace,
2564 SysDbgWriteIoSpace,
2565 SysDbgReadMsr,
2566 SysDbgWriteMsr,
2567 SysDbgReadBusData,
2568 SysDbgWriteBusData
2569 } SYSDBG_COMMAND, *PSYSDBG_COMMAND;
2570
2571 typedef struct _CPTABLEINFO
2572 {
2573 USHORT CodePage;
2574 USHORT MaximumCharacterSize;
2575 USHORT DefaultChar;
2576 USHORT UniDefaultChar;
2577 USHORT TransDefaultChar;
2578 USHORT TransUniDefaultChar;
2579 USHORT DBCSCodePage;
2580 UCHAR LeadByte[12];
2581 USHORT *MultiByteTable;
2582 void *WideCharTable;
2583 USHORT *DBCSRanges;
2584 USHORT *DBCSOffsets;
2585 } CPTABLEINFO, *PCPTABLEINFO;
2586
2587 typedef struct _NLSTABLEINFO
2588 {
2589 CPTABLEINFO OemTableInfo;
2590 CPTABLEINFO AnsiTableInfo;
2591 USHORT *UpperCaseTable;
2592 USHORT *LowerCaseTable;
2593 } NLSTABLEINFO, *PNLSTABLEINFO;
2594
2595 /*************************************************************************
2596 * Loader structures
2597 *
2598 * Those are not part of standard Winternl.h
2599 */
2600
2601 typedef struct _LDR_SERVICE_TAG_RECORD
2602 {
2603 struct _LDR_SERVICE_TAG_RECORD *Next;
2604 ULONG ServiceTag;
2605 } LDR_SERVICE_TAG_RECORD, *PLDR_SERVICE_TAG_RECORD;
2606
2607 typedef struct _LDRP_CSLIST
2608 {
2609 SINGLE_LIST_ENTRY *Tail;
2610 } LDRP_CSLIST, *PLDRP_CSLIST;
2611
2612 typedef enum _LDR_DDAG_STATE
2613 {
2614 LdrModulesMerged = -5,
2615 LdrModulesInitError = -4,
2616 LdrModulesSnapError = -3,
2617 LdrModulesUnloaded = -2,
2618 LdrModulesUnloading = -1,
2619 LdrModulesPlaceHolder = 0,
2620 LdrModulesMapping = 1,
2621 LdrModulesMapped = 2,
2622 LdrModulesWaitingForDependencies = 3,
2623 LdrModulesSnapping = 4,
2624 LdrModulesSnapped = 5,
2625 LdrModulesCondensed = 6,
2626 LdrModulesReadyToInit = 7,
2627 LdrModulesInitializing = 8,
2628 LdrModulesReadyToRun = 9,
2629 } LDR_DDAG_STATE;
2630
2631 typedef struct _LDR_DDAG_NODE
2632 {
2633 LIST_ENTRY Modules;
2634 LDR_SERVICE_TAG_RECORD *ServiceTagList;
2635 ULONG LoadCount;
2636 ULONG ReferenceCount;
2637 ULONG DependencyCount;
2638 union
2639 {
2640 LDRP_CSLIST Dependencies;
2641 SINGLE_LIST_ENTRY RemovalLink;
2642 };
2643 LDRP_CSLIST IncomingDependencies;
2644 LDR_DDAG_STATE State;
2645 SINGLE_LIST_ENTRY CondenseLink;
2646 ULONG PreorderNumber;
2647 ULONG LowestLink;
2648 } LDR_DDAG_NODE, *PLDR_DDAG_NODE;
2649
2650 typedef enum _LDR_DLL_LOAD_REASON
2651 {
2652 LoadReasonStaticDependency,
2653 LoadReasonStaticForwarderDependency,
2654 LoadReasonDynamicForwarderDependency,
2655 LoadReasonDelayloadDependency,
2656 LoadReasonDynamicLoad,
2657 LoadReasonAsImageLoad,
2658 LoadReasonAsDataLoad,
2659 LoadReasonUnknown = -1
2660 } LDR_DLL_LOAD_REASON, *PLDR_DLL_LOAD_REASON;
2661
2662 typedef struct _LDR_DATA_TABLE_ENTRY
2663 {
2664 LIST_ENTRY InLoadOrderLinks;
2665 LIST_ENTRY InMemoryOrderLinks;
2666 LIST_ENTRY InInitializationOrderLinks;
2667 void* DllBase;
2668 void* EntryPoint;
2669 ULONG SizeOfImage;
2670 UNICODE_STRING FullDllName;
2671 UNICODE_STRING BaseDllName;
2672 ULONG Flags;
2673 SHORT LoadCount;
2674 SHORT TlsIndex;
2675 HANDLE SectionHandle;
2676 ULONG CheckSum;
2677 ULONG TimeDateStamp;
2678 HANDLE ActivationContext;
2679 void* Lock;
2680 LDR_DDAG_NODE* DdagNode;
2681 LIST_ENTRY NodeModuleLink;
2682 struct _LDRP_LOAD_CONTEXT *LoadContext;
2683 void* ParentDllBase;
2684 void* SwitchBackContext;
2685 RTL_BALANCED_NODE BaseAddressIndexNode;
2686 RTL_BALANCED_NODE MappingInfoIndexNode;
2687 ULONG_PTR OriginalBase;
2688 LARGE_INTEGER LoadTime;
2689 ULONG BaseNameHashValue;
2690 LDR_DLL_LOAD_REASON LoadReason;
2691 ULONG ImplicitPathOptions;
2692 ULONG ReferenceCount;
2693 } LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
2694
2695 typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA
2696 {
2697 ULONG Flags;
2698 const UNICODE_STRING *FullDllName;
2699 const UNICODE_STRING *BaseDllName;
2700 void *DllBase;
2701 ULONG SizeOfImage;
2702 } LDR_DLL_LOADED_NOTIFICATION_DATA, *PLDR_DLL_LOADED_NOTIFICATION_DATA;
2703
2704 typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
2705 {
2706 ULONG Flags;
2707 const UNICODE_STRING *FullDllName;
2708 const UNICODE_STRING *BaseDllName;
2709 void *DllBase;
2710 ULONG SizeOfImage;
2711 } LDR_DLL_UNLOADED_NOTIFICATION_DATA, *PLDR_DLL_UNLOADED_NOTIFICATION_DATA;
2712
2713 typedef union _LDR_DLL_NOTIFICATION_DATA
2714 {
2715 LDR_DLL_LOADED_NOTIFICATION_DATA Loaded;
2716 LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded;
2717 } LDR_DLL_NOTIFICATION_DATA, *PLDR_DLL_NOTIFICATION_DATA;
2718
2719 typedef void (CALLBACK *PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA*, void*);
2720
2721 /* those defines are (some of the) regular LDR_DATA_TABLE_ENTRY.Flags values */
2722 #define LDR_IMAGE_IS_DLL 0x00000004
2723 #define LDR_LOAD_IN_PROGRESS 0x00001000
2724 #define LDR_UNLOAD_IN_PROGRESS 0x00002000
2725 #define LDR_NO_DLL_CALLS 0x00040000
2726 #define LDR_PROCESS_ATTACHED 0x00080000
2727 #define LDR_COR_IMAGE 0x00400000
2728 #define LDR_COR_ILONLY 0x01000000
2729
2730 /* these ones is Wine specific */
2731 #define LDR_DONT_RESOLVE_REFS 0x40000000
2732 #define LDR_WINE_INTERNAL 0x80000000
2733
2734 /* flag for LdrAddRefDll */
2735 #define LDR_ADDREF_DLL_PIN 0x00000001
2736
2737 #define LDR_DLL_NOTIFICATION_REASON_LOADED 1
2738 #define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
2739
2740 /* FIXME: to be checked */
2741 #define MAXIMUM_FILENAME_LENGTH 256
2742
2743 typedef struct _SYSTEM_MODULE
2744 {
2745 PVOID Section; /* 00/00 */
2746 PVOID MappedBaseAddress; /* 04/08 */
2747 PVOID ImageBaseAddress; /* 08/10 */
2748 ULONG ImageSize; /* 0c/18 */
2749 ULONG Flags; /* 10/1c */
2750 WORD LoadOrderIndex; /* 14/20 */
2751 WORD InitOrderIndex; /* 16/22 */
2752 WORD LoadCount; /* 18/24 */
2753 WORD NameOffset; /* 1a/26 */
2754 BYTE Name[MAXIMUM_FILENAME_LENGTH]; /* 1c/28 */
2755 } SYSTEM_MODULE, *PSYSTEM_MODULE;
2756
2757 typedef struct _SYSTEM_MODULE_INFORMATION
2758 {
2759 ULONG ModulesCount;
2760 SYSTEM_MODULE Modules[1]; /* FIXME: should be Modules[0] */
2761 } SYSTEM_MODULE_INFORMATION, *PSYSTEM_MODULE_INFORMATION;
2762
2763 #define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
2764 #define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
2765 #define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
2766 #define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
2767 #define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
2768 #define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
2769 #define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
2770 #define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
2771 #define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
2772 #define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
2773 #define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
2774
2775 #define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
2776 #define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
2777 #define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
2778 #define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
2779 #define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
2780 #define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
2781
2782 typedef LONG (CALLBACK *PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS);
2783
2784 typedef void (CALLBACK *PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE,void*,void*,IO_STATUS_BLOCK*,PTP_IO);
2785
2786 #define PS_ATTRIBUTE_THREAD 0x00010000
2787 #define PS_ATTRIBUTE_INPUT 0x00020000
2788 #define PS_ATTRIBUTE_ADDITIVE 0x00040000
2789
2790 typedef enum _PS_ATTRIBUTE_NUM
2791 {
2792 PsAttributeParentProcess,
2793 PsAttributeDebugPort,
2794 PsAttributeToken,
2795 PsAttributeClientId,
2796 PsAttributeTebAddress,
2797 PsAttributeImageName,
2798 PsAttributeImageInfo,
2799 PsAttributeMemoryReserve,
2800 PsAttributePriorityClass,
2801 PsAttributeErrorMode,
2802 PsAttributeStdHandleInfo,
2803 PsAttributeHandleList,
2804 PsAttributeGroupAffinity,
2805 PsAttributePreferredNode,
2806 PsAttributeIdealProcessor,
2807 PsAttributeUmsThread,
2808 PsAttributeMitigationOptions,
2809 PsAttributeProtectionLevel,
2810 PsAttributeSecureProcess,
2811 PsAttributeJobList,
2812 PsAttributeChildProcessPolicy,
2813 PsAttributeAllApplicationPackagesPolicy,
2814 PsAttributeWin32kFilter,
2815 PsAttributeSafeOpenPromptOriginClaim,
2816 PsAttributeBnoIsolation,
2817 PsAttributeDesktopAppPolicy,
2818 PsAttributeChpe,
2819 PsAttributeMax
2820 } PS_ATTRIBUTE_NUM;
2821
2822 #define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2823 #define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2824 #define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
2825 #define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
2826 #define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
2827 #define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
2828 #define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
2829 #define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
2830 #define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
2831 #define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
2832 #define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
2833 #define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
2834 #define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2835 #define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
2836 #define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
2837 #define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2838 #define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_UNKNOWN)
2839 #define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
2840 #define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
2841 #define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
2842 #define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
2843 #define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
2844 #define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
2845 #define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
2846 #define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
2847
2848 typedef struct _PS_ATTRIBUTE
2849 {
2850 ULONG_PTR Attribute;
2851 SIZE_T Size;
2852 union
2853 {
2854 ULONG_PTR Value;
2855 void *ValuePtr;
2856 };
2857 SIZE_T *ReturnLength;
2858 } PS_ATTRIBUTE;
2859
2860 typedef struct _PS_ATTRIBUTE_LIST
2861 {
2862 SIZE_T TotalLength;
2863 PS_ATTRIBUTE Attributes[1];
2864 } PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
2865
2866 typedef enum _PS_CREATE_STATE
2867 {
2868 PsCreateInitialState,
2869 PsCreateFailOnFileOpen,
2870 PsCreateFailOnSectionCreate,
2871 PsCreateFailExeFormat,
2872 PsCreateFailMachineMismatch,
2873 PsCreateFailExeName,
2874 PsCreateSuccess,
2875 PsCreateMaximumStates
2876 } PS_CREATE_STATE;
2877
2878 typedef struct _PS_CREATE_INFO
2879 {
2880 SIZE_T Size;
2881 PS_CREATE_STATE State;
2882 union
2883 {
2884 struct
2885 {
2886 union
2887 {
2888 ULONG InitFlags;
2889 struct
2890 {
2891 UCHAR WriteOutputOnExit : 1;
2892 UCHAR DetectManifest : 1;
2893 UCHAR IFEOSkipDebugger : 1;
2894 UCHAR IFEODoNotPropagateKeyState : 1;
2895 UCHAR SpareBits1 : 4;
2896 UCHAR SpareBits2 : 8;
2897 USHORT ProhibitedImageCharacteristics : 16;
2898 };
2899 };
2900 ACCESS_MASK AdditionalFileAccess;
2901 } InitState;
2902 struct
2903 {
2904 HANDLE FileHandle;
2905 } FailSection;
2906 struct
2907 {
2908 USHORT DllCharacteristics;
2909 } ExeFormat;
2910 struct
2911 {
2912 HANDLE IFEOKey;
2913 } ExeName;
2914 struct
2915 {
2916 union
2917 {
2918 ULONG OutputFlags;
2919 struct
2920 {
2921 UCHAR ProtectedProcess : 1;
2922 UCHAR AddressSpaceOverride : 1;
2923 UCHAR DevOverrideEnabled : 1;
2924 UCHAR ManifestDetected : 1;
2925 UCHAR ProtectedProcessLight : 1;
2926 UCHAR SpareBits1 : 3;
2927 UCHAR SpareBits2 : 8;
2928 USHORT SpareBits3 : 16;
2929 };
2930 };
2931 HANDLE FileHandle;
2932 HANDLE SectionHandle;
2933 ULONGLONG UserProcessParametersNative;
2934 ULONG UserProcessParametersWow64;
2935 ULONG CurrentParameterFlags;
2936 ULONGLONG PebAddressNative;
2937 ULONG PebAddressWow64;
2938 ULONGLONG ManifestAddress;
2939 ULONG ManifestSize;
2940 } SuccessState;
2941 };
2942 } PS_CREATE_INFO, *PPS_CREATE_INFO;
2943
2944 /***********************************************************************
2945 * Function declarations
2946 */
2947
2948 NTSYSAPI void WINAPI DbgBreakPoint(void);
2949 NTSYSAPI NTSTATUS WINAPIV DbgPrint(LPCSTR fmt, ...);
2950 NTSYSAPI NTSTATUS WINAPIV DbgPrintEx(ULONG iComponentId, ULONG Level, LPCSTR fmt, ...);
2951 NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE);
2952 NTSYSAPI void WINAPI DbgUiRemoteBreakin(void*);
2953 NTSYSAPI void WINAPI DbgUserBreakPoint(void);
2954 NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE,const IMAGE_RESOURCE_DATA_ENTRY*,void**,PULONG);
2955 NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING*,void**);
2956 NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG,HMODULE);
2957 NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE);
2958 NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void*, PLDR_DATA_TABLE_ENTRY*);
2959 NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DIRECTORY**);
2960 NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE,const LDR_RESOURCE_INFO*,ULONG,const IMAGE_RESOURCE_DATA_ENTRY**);
2961 NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING*);
2962 NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING*, HMODULE*);
2963 NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR,ULONG,PWSTR*,PWSTR*);
2964 NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING*, ULONG, void**);
2965 NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING*, HMODULE*);
2966 NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG,ULONG*,ULONG_PTR*);
2967 IMAGE_BASE_RELOCATION * WINAPI LdrProcessRelocationBlock(void*,UINT,USHORT*,INT_PTR);
2968 NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING*,LPCWSTR,ULONG,void*,ULONG,ULONG*);
2969 NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(SYSTEM_MODULE_INFORMATION*, ULONG, ULONG*);
2970 NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG,PLDR_DLL_NOTIFICATION_FUNCTION,void*,void**);
2971 NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void*);
2972 NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG);
2973 NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING*);
2974 NTSYSAPI void WINAPI LdrShutdownProcess(void);
2975 NTSYSAPI void WINAPI LdrShutdownThread(void);
2976 NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE);
2977 NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG,ULONG_PTR);
2978 NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void*);
2979 NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE,ULONG,PLPC_MESSAGE,BOOLEAN,PLPC_SECTION_WRITE,PLPC_SECTION_READ);
2980 NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,PGENERIC_MAPPING,PPRIVILEGE_SET,PULONG,PULONG,NTSTATUS*);
2981 NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING,HANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,ACCESS_MASK,PGENERIC_MAPPING,BOOLEAN,PACCESS_MASK,PBOOLEAN,PBOOLEAN);
2982 NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR*,ULONG,RTL_ATOM*);
2983 NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE,BOOLEAN,PTOKEN_GROUPS,ULONG,PTOKEN_GROUPS,PULONG);
2984 NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE,BOOLEAN,PTOKEN_PRIVILEGES,DWORD,PTOKEN_PRIVILEGES,PDWORD);
2985 NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE,PULONG);
2986 NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle);
2987 NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid);
2988 NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER,PULONG,PULONG,PUCHAR);
2989 NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE,PVOID*,ULONG_PTR,SIZE_T*,ULONG,ULONG);
2990 NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID,PVOID);
2991 NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE,HANDLE);
2992 NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID,ULONG,NTSTATUS);
2993 NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE,PIO_STATUS_BLOCK);
2994 NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE,PIO_STATUS_BLOCK,PIO_STATUS_BLOCK);
2995 NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN*);
2996 NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE);
2997 NTSYSAPI NTSTATUS WINAPI NtClearPowerRequest(HANDLE,POWER_REQUEST_TYPE);
2998 NTSYSAPI NTSTATUS WINAPI NtClose(HANDLE);
2999 NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING,HANDLE,BOOLEAN);
3000 NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE);
3001 NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3002 NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT,BOOLEAN);
3003 NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3004 NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *,EVENT_TYPE,BOOLEAN);
3005 NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES);
3006 NTSYSAPI NTSTATUS WINAPI NtCreateFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,PLARGE_INTEGER,ULONG,ULONG,ULONG,ULONG,PVOID,ULONG);
3007 NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,ULONG);
3008 NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3009 NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3010 NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,HANDLE,ULONG*);
3011 NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3012 NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3013 NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,BOOLEAN);
3014 NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE,ULONG,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,ULONG,PLARGE_INTEGER);
3015 NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING,PLARGE_INTEGER,PLARGE_INTEGER,PLARGE_INTEGER);
3016 NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE,POBJECT_ATTRIBUTES,ULONG,ULONG,PULONG);
3017 NTSYSAPI NTSTATUS WINAPI NtCreatePowerRequest(HANDLE*,COUNTED_REASON_CONTEXT*);
3018 NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,BOOLEAN,HANDLE,HANDLE,HANDLE);
3019 NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE,HANDLE,PVOID,ULONG,ULONG,PVOID,ULONG,KPROFILE_SOURCE,KAFFINITY);
3020 NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const LARGE_INTEGER*,ULONG,ULONG,HANDLE);
3021 NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,LONG,LONG);
3022 NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PUNICODE_STRING);
3023 NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,HANDLE,PCLIENT_ID,PCONTEXT,PINITIAL_TEB,BOOLEAN);
3024 NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE*,ACCESS_MASK,OBJECT_ATTRIBUTES*,HANDLE,PRTL_THREAD_START_ROUTINE,void*,ULONG,SIZE_T,SIZE_T,SIZE_T,PS_ATTRIBUTE_LIST*);
3025 NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*, TIMER_TYPE);
3026 NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,TOKEN_TYPE,PLUID,PLARGE_INTEGER,PTOKEN_USER,PTOKEN_GROUPS,PTOKEN_PRIVILEGES,PTOKEN_OWNER,PTOKEN_PRIMARY_GROUP,PTOKEN_DEFAULT_DACL,PTOKEN_SOURCE);
3027 NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE*,HANDLE*,ACCESS_MASK,ACCESS_MASK,OBJECT_ATTRIBUTES*,OBJECT_ATTRIBUTES*,ULONG,ULONG,RTL_USER_PROCESS_PARAMETERS*,PS_CREATE_INFO*,PS_ATTRIBUTE_LIST*);
3028 NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN,const LARGE_INTEGER*);
3029 NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM);
3030 NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES);
3031 NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE);
3032 NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE,const UNICODE_STRING *);
3033 NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3034 NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING);
3035 NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE,HANDLE,HANDLE,PHANDLE,ACCESS_MASK,ULONG,ULONG);
3036 NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,SECURITY_IMPERSONATION_LEVEL,TOKEN_TYPE,PHANDLE);
3037 NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE,ULONG,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
3038 NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE,ULONG,KEY_VALUE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3039 NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE,PLARGE_INTEGER);
3040 NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR*,ULONG,RTL_ATOM*);
3041 NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE,IO_STATUS_BLOCK*);
3042 NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE,LPCVOID,SIZE_T);
3043 NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE);
3044 NTSYSAPI void WINAPI NtFlushProcessWriteBuffers(void);
3045 NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE,LPCVOID*,SIZE_T*,ULONG);
3046 NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID);
3047 NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3048 NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG);
3049 NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*);
3050 NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void);
3051 NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*);
3052 NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);
3053 NTSYSAPI ULONG WINAPI NtGetTickCount(VOID);
3054 NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE,ULONG,PVOID,SIZE_T,PVOID*,ULONG_PTR*,ULONG*);
3055 NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE);
3056 NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE,PPORT_MESSAGE);
3057 NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE,HANDLE,PSECURITY_QUALITY_OF_SERVICE);
3058 NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN);
3059 NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION,SYSTEM_POWER_STATE,ULONG,BOOLEAN);
3060 NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE,HANDLE);
3061 NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE,PLPC_MESSAGE);
3062 NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *);
3063 NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *,OBJECT_ATTRIBUTES *);
3064 NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE,HANDLE,PIO_APC_ROUTINE,void*,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,ULONG*,BOOLEAN,BOOLEAN);
3065 NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3066 NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE);
3067 NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE,HANDLE,PVOID*,ULONG_PTR,SIZE_T,const LARGE_INTEGER*,SIZE_T*,SECTION_INHERIT,ULONG,ULONG);
3068 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,ULONG,BOOLEAN);
3069 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3070 NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(HANDLE,ULONG,OBJECT_ATTRIBUTES*,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,BOOLEAN,PVOID,ULONG,BOOLEAN);
3071 NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3072 NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3073 NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3074 NTSYSAPI NTSTATUS WINAPI NtOpenFile(PHANDLE,ACCESS_MASK,POBJECT_ATTRIBUTES,PIO_STATUS_BLOCK,ULONG,ULONG);
3075 NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3076 NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3077 NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES *);
3078 NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG);
3079 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,HANDLE);
3080 NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,HANDLE);
3081 NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3082 NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3083 NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING,PHANDLE,PUNICODE_STRING,PUNICODE_STRING,PSECURITY_DESCRIPTOR,HANDLE,ACCESS_MASK,ACCESS_MASK,PPRIVILEGE_SET,BOOLEAN,BOOLEAN,PBOOLEAN);
3084 NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3085 NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE,DWORD,HANDLE *);
3086 NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE,DWORD,DWORD,HANDLE *);
3087 NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3088 NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3089 NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*);
3090 NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE*,ACCESS_MASK,const OBJECT_ATTRIBUTES*,const CLIENT_ID*);
3091 NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE,DWORD,BOOLEAN,HANDLE *);
3092 NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE,DWORD,BOOLEAN,DWORD,HANDLE *);
3093 NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE*, ACCESS_MASK, const OBJECT_ATTRIBUTES*);
3094 NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL,PVOID,ULONG,PVOID,ULONG);
3095 NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE,PPRIVILEGE_SET,PBOOLEAN);
3096 NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING,HANDLE,HANDLE,ULONG,PPRIVILEGE_SET,BOOLEAN);
3097 NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING,PUNICODE_STRING,HANDLE,PPRIVILEGE_SET,BOOLEAN);
3098 NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG,ULONG*);
3099 NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE,LONG*);
3100 NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE,PNTAPCFUNC,ULONG_PTR,ULONG_PTR,ULONG_PTR);
3101 NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES*,FILE_BASIC_INFORMATION*);
3102 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN,LCID*);
3103 NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID*);
3104 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS,BOOLEAN,PUNICODE_STRING,BOOLEAN);
3105 NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE,PDIRECTORY_BASIC_INFORMATION,ULONG,BOOLEAN,BOOLEAN,PULONG,PULONG);
3106 NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,BOOLEAN,PVOID,ULONG,PULONG,BOOLEAN);
3107 NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE,EVENT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3108 NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES*,FILE_NETWORK_OPEN_INFORMATION*);
3109 NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM,ATOM_INFORMATION_CLASS,PVOID,ULONG,ULONG*);
3110 NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,LONG,FILE_INFORMATION_CLASS);
3111 NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG,PULONG);
3112 NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE,PORT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3113 NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess(HANDLE,PROCESSINFOCLASS,PVOID,ULONG,PULONG);
3114 NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread(HANDLE,THREADINFOCLASS,PVOID,ULONG,PULONG);
3115 NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3116 NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID*);
3117 NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE,PULONG);
3118 NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE,IO_COMPLETION_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3119 NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE,KEY_INFORMATION_CLASS,void *,DWORD,DWORD *);
3120 NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey(HANDLE,PKEY_MULTIPLE_VALUE_INFORMATION,ULONG,PVOID,ULONG,PULONG);
3121 NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE,MUTANT_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3122 NTSYSAPI NTSTATUS WINAPI NtQueryObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG);
3123 NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES,PULONG);
3124 NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER);
3125 NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR,ULONG,PULONG);
3126 NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE,SECTION_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
3127 NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE,SEMAPHORE_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3128 NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE,PUNICODE_STRING,PULONG);
3129 NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING,PWCHAR,ULONG,PULONG);
3130 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3131 NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS,void*,ULONG,void*,ULONG,ULONG*);
3132 NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime(PLARGE_INTEGER);
3133 NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE,TIMER_INFORMATION_CLASS,PVOID,ULONG,PULONG);
3134 NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG,PULONG,PULONG);
3135 NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE,const UNICODE_STRING *,KEY_VALUE_INFORMATION_CLASS,void *,DWORD,DWORD *);
3136 NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *,ULONG *,PVOID,ULONG,ULONG *);
3137 NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE,LPCVOID,MEMORY_INFORMATION_CLASS,PVOID,SIZE_T,SIZE_T*);
3138 NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
3139 NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD,PCONTEXT,BOOL);
3140 NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS,ULONG,PUNICODE_STRING,PVOID*,HARDERROR_RESPONSE_OPTION,PHARDERROR_RESPONSE);
3141 NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,PVOID,ULONG,PLARGE_INTEGER,PULONG);
3142 NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
3143 NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
3144 NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE,const void*,void*,SIZE_T,SIZE_T*);
3145 NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE);
3146 NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
3147 NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE,PLONG);
3148 NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE,ULONG,PULONG);
3149 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE,PULONG_PTR,PULONG_PTR,PIO_STATUS_BLOCK,PLARGE_INTEGER);
3150 NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE,FILE_IO_COMPLETION_INFORMATION*,ULONG,ULONG*,LARGE_INTEGER*,BOOLEAN);
3151 NTSYSAPI NTSTATUS WINAPI NtRenameKey(HANDLE,UNICODE_STRING*);
3152 NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES,HANDLE,POBJECT_ATTRIBUTES);
3153 NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE,PLPC_MESSAGE);
3154 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE,PULONG,PLPC_MESSAGE,PLPC_MESSAGE);
3155 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE,PVOID*,PPORT_MESSAGE,PPORT_MESSAGE,PLARGE_INTEGER);
3156 NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE,PLPC_MESSAGE);
3157 NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE,PLPC_MESSAGE);
3158 NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE,PLPC_MESSAGE,PLPC_MESSAGE);
3159 NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE,LONG*);
3160 NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE,PVOID,SIZE_T);
3161 NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE,HANDLE,ULONG);
3162 NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE);
3163 NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE,PULONG);
3164 NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE,HANDLE);
3165 NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE,PUNICODE_STRING,PSECURITY_QUALITY_OF_SERVICE,PLPC_SECTION_WRITE,PSID,PLPC_SECTION_READ,PULONG,PVOID,PULONG);
3166 NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE,const CONTEXT*);
3167 NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE);
3168 NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN,LCID);
3169 NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID);
3170 NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG);
3171 NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE,LONG*);
3172 NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE);
3173 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE);
3174 NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID);
3175 NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FILE_INFORMATION_CLASS);
3176 NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE,JOBOBJECTINFOCLASS,PVOID,ULONG);
3177 NTSYSAPI NTSTATUS WINAPI NtSetInformationKey(HANDLE,const int,PVOID,ULONG);
3178 NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG);
3179 NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE,PROCESS_INFORMATION_CLASS,PVOID,ULONG);
3180 NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE,THREADINFOCLASS,LPCVOID,ULONG);
3181 NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE,TOKEN_INFORMATION_CLASS,PVOID,ULONG);
3182 NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG,KPROFILE_SOURCE);
3183 NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE,ULONG_PTR,ULONG_PTR,NTSTATUS,SIZE_T);
3184 NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG,LDT_ENTRY,ULONG,LDT_ENTRY);
3185 NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE);
3186 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE);
3187 NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID);
3188 NTSYSAPI NTSTATUS WINAPI NtSetPowerRequest(HANDLE,POWER_REQUEST_TYPE);
3189 NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE,SECURITY_INFORMATION,PSECURITY_DESCRIPTOR);
3190 NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING,PUNICODE_STRING);
3191 NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS,PVOID,ULONG);
3192 NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION,SYSTEM_POWER_STATE,ULONG);
3193 NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER*,LARGE_INTEGER*);
3194 NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE,EXECUTION_STATE*);
3195 NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER*, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN*);
3196 NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG,BOOLEAN,PULONG);
3197 NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE,const UNICODE_STRING *,ULONG,ULONG,const void *,ULONG);
3198 NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE,PIO_STATUS_BLOCK,PVOID,ULONG,FS_INFORMATION_CLASS);
3199 NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE,HANDLE,BOOLEAN,const LARGE_INTEGER*);
3200 NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION);
3201 NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE);
3202 NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE);
3203 NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE);
3204 NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE,PULONG);
3205 NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND,PVOID,ULONG,PVOID,ULONG,PULONG);
3206 NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE,NTSTATUS);
3207 NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE,LONG);
3208 NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE,LONG);
3209 NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID);
3210 NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *);
3211 NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES);
3212 NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES,HANDLE);
3213 NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE,PIO_STATUS_BLOCK,PLARGE_INTEGER,PLARGE_INTEGER,PULONG);
3214 NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG);
3215 NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE,PVOID);
3216 NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG,PVOID);
3217 NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE,const void*,BOOLEAN,const LARGE_INTEGER*);
3218 NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject(HANDLE,BOOLEAN,const LARGE_INTEGER*);
3219 NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG,const HANDLE*,BOOLEAN,BOOLEAN,const LARGE_INTEGER*);
3220 NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE);
3221 NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE);
3222 NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,const void*,ULONG,PLARGE_INTEGER,PULONG);
3223 NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,FILE_SEGMENT_ELEMENT*,ULONG,PLARGE_INTEGER,PULONG);
3224 NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE,PLPC_MESSAGE,ULONG,PVOID,ULONG,PULONG);
3225 NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE,void*,const void*,SIZE_T,SIZE_T*);
3226 NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void);
3227
3228 NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PULONG);
3229 NTSYSAPI void WINAPI RtlAcquirePebLock(void);
3230 NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK,BYTE);
3231 NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK,BYTE);
3232 NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK*);
3233 NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK*);
3234 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD,HANDLE,ULONG_PTR*);
3235 NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG,TEB*,HANDLE,ULONG_PTR*);
3236 NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL,DWORD,DWORD,PACE_HEADER,DWORD);
3237 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL,DWORD,DWORD,PSID);
3238 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
3239 NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
3240 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL,DWORD,DWORD,PSID);
3241 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL,DWORD,DWORD,DWORD,PSID);
3242 NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID);
3243 NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
3244 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL,DWORD,DWORD,PSID,BOOL,BOOL);
3245 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL,DWORD,DWORD,DWORD,PSID,BOOL,BOOL);
3246 NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL,DWORD,DWORD,DWORD,GUID*,GUID*,PSID,BOOL,BOOL);
3247 NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL,DWORD,DWORD,DWORD,DWORD,PSID);
3248 NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE);
3249 NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG,PVECTORED_EXCEPTION_HANDLER);
3250 NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG,BOOLEAN,BOOLEAN,PBOOLEAN);
3251 NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY,BYTE,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,DWORD,PSID *);
3252 NTSYSAPI RTL_HANDLE * WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *,ULONG *);
3253 NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE,ULONG,SIZE_T) __WINE_ALLOC_SIZE(3);
3254 NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *);
3255 NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize(const STRING *);
3256 NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING,PCANSI_STRING,BOOLEAN);
3257 NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *,LPCSTR);
3258 NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *,const STRING *);
3259 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *,const UNICODE_STRING *);
3260 NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *,LPCWSTR);
3261 NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK,ACCESS_MASK);
3262 NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK,ACCESS_MASK);
3263 NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet(PCRTL_BITMAP,ULONG,ULONG);
3264 NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear(PCRTL_BITMAP,ULONG,ULONG);
3265 NTSYSAPI NTSTATUS WINAPI RtlCharToInteger(PCSZ,ULONG,PULONG);
3266 NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR);
3267 NTSYSAPI void WINAPI RtlClearAllBits(PRTL_BITMAP);
3268 NTSYSAPI void WINAPI RtlClearBits(PRTL_BITMAP,ULONG,ULONG);
3269 NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE*,const void*);
3270 NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG,BOOLEAN);
3271 NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG,PWSTR);
3272 NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE,ULONG);
3273 NTSYSAPI LONG WINAPI RtlCompareString(const STRING*,const STRING*,BOOLEAN);
3274 NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3275 NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR*,SIZE_T,const WCHAR*,SIZE_T,BOOLEAN);
3276 NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
3277 NTSYSAPI DWORD WINAPI RtlComputeCrc32(DWORD,const BYTE*,INT);
3278 NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString(PUNICODE_STRING,PSID,BOOLEAN);
3279 NTSYSAPI void WINAPI RtlCopyLuid(PLUID,const LUID*);
3280 NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG,const LUID_AND_ATTRIBUTES*,PLUID_AND_ATTRIBUTES);
3281 NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD,PSID,PSID);
3282 NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR);
3283 NTSYSAPI void WINAPI RtlCopyString(STRING*,const STRING*);
3284 NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING*,const UNICODE_STRING*);
3285 NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL,DWORD,DWORD);
3286 NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG,RTL_ATOM_TABLE*);
3287 NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR*);
3288 NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG,PVOID,SIZE_T,SIZE_T,PVOID,PRTL_HEAP_DEFINITION);
3289 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*);
3290 NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS**,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,PWSTR,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,const UNICODE_STRING*,ULONG);
3291 NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR,DWORD);
3292 NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE);
3293 NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG);
3294 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING,LPCWSTR);
3295 NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING,LPCSTR);
3296 NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING*,ULONG,RTL_USER_PROCESS_PARAMETERS*,SECURITY_DESCRIPTOR*,SECURITY_DESCRIPTOR*,HANDLE,BOOLEAN,HANDLE,HANDLE,RTL_USER_PROCESS_INFORMATION*);
3297 NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE,SECURITY_DESCRIPTOR*,BOOLEAN,PVOID,SIZE_T,SIZE_T,PRTL_THREAD_START_ROUTINE,void*,HANDLE*,CLIENT_ID*);
3298 NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T,SIZE_T,ULONG,SIZE_T,SIZE_T,INITIAL_TEB*);
3299 NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO*,WCHAR*,DWORD,DWORD*,const char*,DWORD);
3300 NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD,ULONG_PTR);
3301 NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID);
3302 NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,PULONG);
3303 NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT,PUCHAR,ULONG,PUCHAR,ULONG,ULONG,PULONG,PVOID);
3304 NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL,DWORD);
3305 NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
3306 NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *);
3307 NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR);
3308 NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK);
3309 NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR*);
3310 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE);
3311 NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE);
3312 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
3313 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE);
3314 NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE,HANDLE);
3315 NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE);
3316 NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR);
3317 NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *);
3318 NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE);
3319 NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS*);
3320 NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER);
3321 NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR);
3322 NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void);
3323 NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR);
3324 NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
3325 NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR,PUNICODE_STRING,PWSTR*,CURDIR*);
3326 NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR*);
3327 NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR);
3328 NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3329 NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK);
3330 NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int,const UNICODE_STRING*,UNICODE_STRING*);
3331 NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE,BOOLEAN);
3332 NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID);
3333 NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *);
3334 NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING*);
3335 NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING*,const UNICODE_STRING*);
3336 NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING*,const UNICODE_STRING*);
3337 NTSYSAPI BOOLEAN WINAPI RtlEqualLuid(const LUID*,const LUID*);
3338 NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID,PSID);
3339 NTSYSAPI BOOL WINAPI RtlEqualSid(PSID,PSID);
3340 NTSYSAPI BOOLEAN WINAPI RtlEqualString(const STRING*,const STRING*,BOOLEAN);
3341 NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3342 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG);
3343 NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG);
3344 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR*,WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
3345 NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING*, UNICODE_STRING*, ULONG*);
3346 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG,const GUID*,ULONG,const UNICODE_STRING*,PVOID);
3347 NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG,const GUID*,ULONG,const GUID*,PVOID);
3348 NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int,const UNICODE_STRING*,const UNICODE_STRING*,USHORT*);
3349 NTSYSAPI ULONG WINAPI RtlFindClearBits(PCRTL_BITMAP,ULONG,ULONG);
3350 NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet(PRTL_BITMAP,ULONG,ULONG);
3351 NTSYSAPI ULONG WINAPI RtlFindClearRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
3352 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
3353 NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
3354 NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG);
3355 NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP,PULONG);
3356 NTSYSAPI ULONG WINAPI RtlFindLongestRunClear(PCRTL_BITMAP,PULONG);
3357 NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE,ULONG,ULONG,ULONG,const MESSAGE_RESOURCE_ENTRY**);
3358 NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG);
3359 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet(PCRTL_BITMAP,ULONG,PULONG);
3360 NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear(PCRTL_BITMAP,ULONG,PULONG);
3361 NTSYSAPI ULONG WINAPI RtlFindSetBits(PCRTL_BITMAP,ULONG,ULONG);
3362 NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear(PRTL_BITMAP,ULONG,ULONG);
3363 NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP,PRTL_BITMAP_RUN,ULONG,BOOLEAN);
3364 NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL,PACE_HEADER *);
3365 NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING);
3366 NTSYSAPI NTSTATUS WINAPI RtlFormatMessage(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*);
3367 NTSYSAPI NTSTATUS WINAPI RtlFormatMessageEx(LPCWSTR,ULONG,BOOLEAN,BOOLEAN,BOOLEAN,__ms_va_list *,LPWSTR,ULONG,ULONG*,ULONG);
3368 NTSYSAPI void WINAPI RtlFreeAnsiString(PANSI_STRING);
3369 NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *,RTL_HANDLE *);
3370 NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE,ULONG,PVOID);
3371 NTSYSAPI void WINAPI RtlFreeOemString(POEM_STRING);
3372 NTSYSAPI DWORD WINAPI RtlFreeSid(PSID);
3373 NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void);
3374 NTSYSAPI void WINAPI RtlFreeUnicodeString(PUNICODE_STRING);
3375 NTSYSAPI void WINAPI RtlFreeUserStack(void*);
3376 NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL,DWORD,LPVOID *);
3377 NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE*);
3378 NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT,PULONG,PULONG);
3379 NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL,LPDWORD);
3380 NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR);
3381 NTSYSAPI PEB * WINAPI RtlGetCurrentPeb(void);
3382 NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
3383 NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR,PWSTR*);
3384 NTSYSAPI TEB_ACTIVE_FRAME * WINAPI RtlGetFrame(void);
3385 NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR,ULONG,PWSTR,PWSTR*);
3386 NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
3387 NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void);
3388 NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void);
3389 NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void);
3390 NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void);
3391 NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD);
3392 NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID *,PBOOLEAN);
3393 NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG,HANDLE*);
3394 NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
3395 NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,PBOOLEAN,PACL *,PBOOLEAN);
3396 NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR*);
3397 NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
3398 NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void);
3399 NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void);
3400 NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD,ULONG*,WCHAR*,ULONG*);
3401 NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD,ULONG,ULONG*,WCHAR*,ULONG*);
3402 NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW*);
3403 NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING,GUID*);
3404 NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID);
3405 NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3406 NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3407 NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD,const WCHAR*,INT,WCHAR*,INT*);
3408 NTSYSAPI PVOID WINAPI RtlImageDirectoryEntryToData(HMODULE,BOOL,WORD,ULONG *);
3409 NTSYSAPI PIMAGE_NT_HEADERS WINAPI RtlImageNtHeader(HMODULE);
3410 NTSYSAPI PIMAGE_SECTION_HEADER WINAPI RtlImageRvaToSection(const IMAGE_NT_HEADERS *,HMODULE,DWORD);
3411 NTSYSAPI PVOID WINAPI RtlImageRvaToVa(const IMAGE_NT_HEADERS *,HMODULE,DWORD,IMAGE_SECTION_HEADER **);
3412 NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL);
3413 NTSYSAPI void WINAPI RtlInitString(PSTRING,PCSZ);
3414 NTSYSAPI void WINAPI RtlInitAnsiString(PANSI_STRING,PCSZ);
3415 NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING,PCSZ);
3416 NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT*,CPTABLEINFO*);
3417 NTSYSAPI void WINAPI RtlInitNlsTables(USHORT*,USHORT*,USHORT*,NLSTABLEINFO*);
3418 NTSYSAPI void WINAPI RtlInitUnicodeString(PUNICODE_STRING,PCWSTR);
3419 NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING,PCWSTR);
3420 NTSYSAPI void WINAPI RtlInitializeBitMap(PRTL_BITMAP,PULONG,ULONG);
3421 NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *);
3422 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *);
3423 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *,ULONG);
3424 NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *,ULONG,ULONG);
3425 NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG,ULONG,RTL_HANDLE_TABLE *);
3426 NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK);
3427 NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK*);
3428 NTSYSAPI BOOL WINAPI RtlInitializeSid(PSID,PSID_IDENTIFIER_AUTHORITY,BYTE);
3429 NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG,ULONG,UNICODE_STRING *);
3430 NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG,ULONG,ULONG,PCHAR);
3431 NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG,ULONG,UNICODE_STRING *);
3432 NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE);
3433 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *);
3434 NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *);
3435 NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR);
3436 NTSYSAPI BOOLEAN WINAPI RtlIsNameLegalDOS8Dot3(const UNICODE_STRING*,POEM_STRING,PBOOLEAN);
3437 NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG,const WCHAR*,INT,BOOLEAN*);
3438 NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT);
3439 NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID,INT,INT *);
3440 NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *);
3441 NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **);
3442 NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *);
3443 NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD);
3444 NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR);
3445 NTSYSAPI DWORD WINAPI RtlLengthSid(PSID);
3446 NTSYSAPI NTSTATUS WINAPI RtlLocalTimeToSystemTime(const LARGE_INTEGER*,PLARGE_INTEGER);
3447 NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR*,LCID*,ULONG);
3448 NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE);
3449 NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE,const WCHAR*,RTL_ATOM*);
3450 NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,LPDWORD);
3451 NTSYSAPI void WINAPI RtlMapGenericMask(PACCESS_MASK,const GENERIC_MAPPING*);
3452 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
3453 NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD*,LPCSTR,UINT);
3454 NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR*,BOOLEAN,HANDLE,PGENERIC_MAPPING);
3455 NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS*);
3456 NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG,const WCHAR*,INT,WCHAR*,INT*);
3457 NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS);
3458 NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS);
3459 NTSYSAPI ULONG WINAPI RtlNumberOfSetBits(PCRTL_BITMAP);
3460 NTSYSAPI ULONG WINAPI RtlNumberOfClearBits(PCRTL_BITMAP);
3461 NTSYSAPI UINT WINAPI RtlOemStringToUnicodeSize(const STRING*);
3462 NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING*,const STRING*,BOOLEAN);
3463 NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR,DWORD,LPDWORD,LPCSTR,DWORD);
3464 NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK,PHANDLE);
3465 NTSYSAPI PVOID WINAPI RtlPcToFileHeader(PVOID,PVOID*);
3466 NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM);
3467 NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME*);
3468 NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING*,const STRING*,BOOLEAN);
3469 NTSYSAPI BOOLEAN WINAPI RtlPrefixUnicodeString(const UNICODE_STRING*,const UNICODE_STRING*,BOOLEAN);
3470 NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME*);
3471 NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD,HANDLE,const WCHAR*,const WCHAR*,WCHAR*,SIZE_T,SIZE_T*);
3472 NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE,RTL_ATOM,ULONG*,ULONG*,WCHAR*,ULONG*);
3473 NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION*);
3474 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR*,const WCHAR*,SIZE_T,WCHAR*,SIZE_T,SIZE_T*);
3475 NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR,PUNICODE_STRING,PUNICODE_STRING);
3476 NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T,PSIZE_T);
3477 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL,LPVOID,DWORD,ACL_INFORMATION_CLASS);
3478 NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG,HANDLE,PVOID,ULONG,PVOID,SIZE_T,SIZE_T*);
3479 NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER*);
3480 NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER*);
3481 NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG,ULONG,PDEBUG_BUFFER);
3482 NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID);
3483 NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION*);
3484 NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG*);
3485 NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE,PVOID,ULONG);
3486 NTSYSAPI void WINAPI RtlRaiseException(PEXCEPTION_RECORD);
3487 NTSYSAPI void WINAPI RtlRaiseStatus(NTSTATUS);
3488 NTSYSAPI ULONG WINAPI RtlRandom(PULONG);
3489 NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE,ULONG,PVOID,SIZE_T);
3490 NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE,HANDLE,RTL_WAITORTIMERCALLBACKFUNC,PVOID,ULONG,ULONG);
3491 NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE);
3492 NTSYSAPI void WINAPI RtlReleasePath(PWSTR);
3493 NTSYSAPI void WINAPI RtlReleasePebLock(void);
3494 NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK);
3495 NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK*);
3496 NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK*);
3497 NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID);
3498 NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO*);
3499 NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD);
3500 NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD,LARGE_INTEGER *);
3501 NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD,LARGE_INTEGER *);
3502 NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR,PSECURITY_DESCRIPTOR,PDWORD,PACL,PDWORD,PACL,PDWORD,PSID,PDWORD,PSID,PDWORD);
3503 NTSYSAPI void WINAPI RtlSetAllBits(PRTL_BITMAP);
3504 NTSYSAPI void WINAPI RtlSetBits(PRTL_BITMAP,ULONG,ULONG);
3505 NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION*,ULONG);
3506 NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR,SECURITY_DESCRIPTOR_CONTROL,SECURITY_DESCRIPTOR_CONTROL);
3507 NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING*);
3508 NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR*);
3509 NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
3510 NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR*,PUNICODE_STRING,PUNICODE_STRING);
3511 NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE,HEAP_INFORMATION_CLASS,PVOID,SIZE_T);
3512 NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
3513 NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR,PSID,BOOLEAN);
3514 NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE,PRTL_OVERLAPPED_COMPLETION_ROUTINE,ULONG);
3515 NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD);
3516 NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS);
3517 NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
3518 NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR,BOOLEAN,PACL,BOOLEAN);
3519 NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG);
3520 NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD,LPDWORD);
3521 NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD,PCZZWSTR,ULONG*);
3522 NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION*);
3523 NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER);
3524 NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE,ULONG,const void*);
3525 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE*,RTL_CRITICAL_SECTION*,const LARGE_INTEGER*);
3526 NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE*,RTL_SRWLOCK*,const LARGE_INTEGER*,ULONG);
3527 NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID,PUNICODE_STRING);
3528 NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID,DWORD);
3529 NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID);
3530 NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER*,PLARGE_INTEGER);
3531 NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER*,PTIME_FIELDS);
3532 NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS,PLARGE_INTEGER);
3533 NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *,PTIME_FIELDS);
3534 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1970(const LARGE_INTEGER *,LPDWORD);
3535 NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *,LPDWORD);
3536 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *);
3537 NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *);
3538 NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *);
3539 NTSYSAPI NTSTATUS WINAPI RtlUTF8ToUnicodeN(WCHAR*,DWORD,DWORD*,const char*,DWORD);
3540 NTSYSAPI ULONGLONG __cdecl RtlUlonglongByteSwap(ULONGLONG);
3541 NTSYSAPI DWORD WINAPI RtlUnicodeStringToAnsiSize(const UNICODE_STRING*);
3542 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToAnsiString(PANSI_STRING,PCUNICODE_STRING,BOOLEAN);
3543 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *,ULONG,ULONG *);
3544 NTSYSAPI DWORD WINAPI RtlUnicodeStringToOemSize(const UNICODE_STRING*);
3545 NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToOemString(POEM_STRING,PCUNICODE_STRING,BOOLEAN);
3546 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
3547 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3548 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteSize(PULONG,PCWSTR,ULONG);
3549 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3550 NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3551 NTSYSAPI ULONG WINAPI RtlUniform(PULONG);
3552 NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE);
3553 NTSYSAPI void WINAPI RtlUnwind(PVOID,PVOID,PEXCEPTION_RECORD,PVOID);
3554 #ifdef __x86_64__
3555 NTSYSAPI void WINAPI RtlUnwindEx(PVOID,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
3556 #elif defined(__ia64__)
3557 NTSYSAPI void WINAPI RtlUnwind2(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT);
3558 NTSYSAPI void WINAPI RtlUnwindEx(FRAME_POINTERS,PVOID,PEXCEPTION_RECORD,PVOID,PCONTEXT,PUNWIND_HISTORY_TABLE);
3559 #endif
3560 NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR);
3561 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeString(UNICODE_STRING*,const UNICODE_STRING *,BOOLEAN);
3562 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING*,const UNICODE_STRING*,BOOLEAN);
3563 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
3564 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING*,const UNICODE_STRING*,BOOLEAN);
3565 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO*,char*,DWORD,DWORD*,const WCHAR*,DWORD);
3566 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3567 NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR,DWORD,LPDWORD,LPCWSTR,DWORD);
3568 NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD);
3569 NTSYSAPI CHAR WINAPI RtlUpperChar(CHAR);
3570 NTSYSAPI void WINAPI RtlUpperString(STRING *,const STRING *);
3571 NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE,void*);
3572 NTSYSAPI NTSTATUS WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR);
3573 NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR,ULONG,SECURITY_INFORMATION);
3574 NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL);
3575 NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID);
3576 NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE,ULONG,LPCVOID);
3577 NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW*,DWORD,DWORDLONG);
3578 NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *,const void *,SIZE_T,const LARGE_INTEGER *);
3579 NTSYSAPI void WINAPI RtlWakeAddressAll(const void *);
3580 NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *);
3581 NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *);
3582 NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *);
3583 NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE,PVOID);
3584 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN);
3585 NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG,ULONG*);
3586 #ifdef __x86_64__
3587 NTSYSAPI NTSTATUS WINAPI RtlWow64GetThreadContext(HANDLE, WOW64_CONTEXT *);
3588 NTSYSAPI NTSTATUS WINAPI RtlWow64SetThreadContext(HANDLE, const WOW64_CONTEXT *);
3589 #endif
3590 NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG,PCWSTR,PCWSTR,ULONG,PVOID,ULONG);
3591 NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE);
3592 NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE,ACCESS_MASK,const OBJECT_ATTRIBUTES*,ULONG,const UNICODE_STRING*,ULONG,PULONG);
3593 NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE,UNICODE_STRING *, ULONG);
3594 NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *);
3595 NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *);
3596 NTSYSAPI NTSTATUS WINAPI vDbgPrintEx(ULONG,ULONG,LPCSTR,__ms_va_list);
3597 NTSYSAPI NTSTATUS WINAPI vDbgPrintExWithPrefix(LPCSTR,ULONG,ULONG,LPCSTR,__ms_va_list);
3598
3599 NTSYSAPI int __cdecl _strnicmp(LPCSTR,LPCSTR,size_t);
3600
3601 /* 32-bit only functions */
3602
3603 #ifndef _WIN64
3604 NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG);
3605 NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG);
3606 NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT,INT);
3607 NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT,UINT);
3608 NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG,UINT,UINT *);
3609 NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG,LONGLONG,INT);
3610 NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG,INT);
3611 NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG,INT,INT *);
3612 NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG*,LONGLONG,LONGLONG);
3613 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG,LONGLONG);
3614 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG,INT);
3615 NTSYSAPI ULONGLONG WINAPI RtlLargeIntegerDivide( ULONGLONG,ULONGLONG,ULONGLONG *);
3616 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG);
3617 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG,INT);
3618 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG,INT);
3619 NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG,LONGLONG);
3620 NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *,ULONG,ULONG,PCHAR);
3621 #endif
3622
3623 /* Threadpool functions */
3624
3625 NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **);
3626 NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **,HANDLE,PTP_IO_CALLBACK,void *,TP_CALLBACK_ENVIRON *);
3627 NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **,PVOID);
3628 NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **,PTP_TIMER_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3629 NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **,PTP_WAIT_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3630 NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **,PTP_WORK_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3631 NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *,RTL_CRITICAL_SECTION *);
3632 NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *);
3633 NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
3634 NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE,DWORD);
3635 NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *,HANDLE);
3636 NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *,HMODULE);
3637 NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *);
3638 NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *);
3639 NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *);
3640 NTSYSAPI void WINAPI TpPostWork(TP_WORK *);
3641 NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
3642 NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *);
3643 NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *,BOOL,PVOID);
3644 NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *);
3645 NTSYSAPI void WINAPI TpReleasePool(TP_POOL *);
3646 NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *);
3647 NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *);
3648 NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *);
3649 NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *,DWORD);
3650 NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *,DWORD);
3651 NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info);
3652 NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *,LONG,LONG);
3653 NTSYSAPI void WINAPI TpSetWait(TP_WAIT *,HANDLE,LARGE_INTEGER *);
3654 NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK,PVOID,TP_CALLBACK_ENVIRON *);
3655 NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *);
3656 NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *,BOOL);
3657 NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *,BOOL);
3658 NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *,BOOL);
3659 NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *,BOOL);
3660
3661 /* Wine internal functions */
3662
3663 NTSYSAPI NTSTATUS CDECL wine_nt_to_unix_file_name( const UNICODE_STRING *nameW, char *nameA, SIZE_T *size,
3664 UINT disposition );
3665 NTSYSAPI NTSTATUS CDECL wine_unix_to_nt_file_name( const char *name, WCHAR *buffer, SIZE_T *size );
3666
3667
3668 /***********************************************************************
3669 * Inline functions
3670 */
3671
3672 #define InitializeObjectAttributes(p,n,a,r,s) \
3673 do { \
3674 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
3675 (p)->RootDirectory = r; \
3676 (p)->Attributes = a; \
3677 (p)->ObjectName = n; \
3678 (p)->SecurityDescriptor = s; \
3679 (p)->SecurityQualityOfService = NULL; \
3680 } while (0)
3681
3682 #define NtCurrentProcess() ((HANDLE)-1)
3683
3684 #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
3685 #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
3686 #define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3687 #define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
3688 #define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
3689 #define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
3690 #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
3691
3692 static inline BOOLEAN RtlCheckBit(PCRTL_BITMAP lpBits, ULONG ulBit)
3693 {
3694 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
3695 lpBits->Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
3696 return TRUE;
3697 return FALSE;
3698 }
3699
3700 /* These are implemented as __fastcall, so we can't let Winelib apps link with them */
3701 static inline USHORT RtlUshortByteSwap(USHORT s)
3702 {
3703 return (s >> 8) | (s << 8);
3704 }
3705 static inline ULONG RtlUlongByteSwap(ULONG i)
3706 {
3707 #if defined(__i386__) && defined(__GNUC__)
3708 ULONG ret;
3709 __asm__("bswap %0" : "=r" (ret) : "0" (i) );
3710 return ret;
3711 #else
3712 return ((ULONG)RtlUshortByteSwap((USHORT)i) << 16) | RtlUshortByteSwap((USHORT)(i >> 16));
3713 #endif
3714 }
3715
3716 /* list manipulation macros */
3717 #define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
3718 #define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
3719 #define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
3720 #define IsListEmpty(le) ((le)->Flink == (le))
3721 #define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
3722 static inline PLIST_ENTRY RemoveHeadList(PLIST_ENTRY le)
3723 {
3724 PLIST_ENTRY f, b, e;
3725
3726 e = le->Flink;
3727 f = le->Flink->Flink;
3728 b = le->Flink->Blink;
3729 f->Blink = b;
3730 b->Flink = f;
3731
3732 if (e != le) e->Flink = e->Blink = NULL;
3733 return e;
3734 }
3735 static inline PLIST_ENTRY RemoveTailList(PLIST_ENTRY le)
3736 {
3737 PLIST_ENTRY f, b, e;
3738
3739 e = le->Blink;
3740 f = le->Blink->Flink;
3741 b = le->Blink->Blink;
3742 f->Blink = b;
3743 b->Flink = f;
3744
3745 if (e != le) e->Flink = e->Blink = NULL;
3746 return e;
3747 }
3748
3749
3750 #ifdef __WINESRC__
3751
3752 /* The thread information for 16-bit threads */
3753 /* NtCurrentTeb()->SubSystemTib points to this */
3754 typedef struct
3755 {
3756 void *unknown; /* 00 unknown */
3757 UNICODE_STRING *exe_name; /* 04 exe module name */
3758
3759 /* the following fields do not exist under Windows */
3760 UNICODE_STRING exe_str; /* exe name string pointed to by exe_name */
3761 CURDIR curdir; /* current directory */
3762 WCHAR curdir_buffer[MAX_PATH];
3763 } WIN16_SUBSYSTEM_TIB;
3764
3765 #endif /* __WINESRC__ */
3766
3767 #ifdef __cplusplus
3768 } /* extern "C" */
3769 #endif /* defined(__cplusplus) */
3770
3771 #endif /* __WINE_WINTERNL_H */
Windows API implementation