Data Structures |
| struct | PSTRING |
| struct | PUNICODE_STRING |
| struct | PRTL_SYSTEM_TIME |
| struct | PRTL_TIME_ZONE_INFORMATION |
| struct | PCLIENT_ID |
| struct | PCURDIR |
| struct | PRTL_DRIVE_LETTER_CURDIR |
| struct | PRTL_BITMAP |
| struct | PRTL_BITMAP_RUN |
| struct | PRTL_USER_PROCESS_PARAMETERS |
| struct | PPEB_LDR_DATA |
| struct | PGDI_TEB_BATCH |
| struct | PRTL_ACTIVATION_CONTEXT_STACK_FRAME |
| struct | PACTIVATION_CONTEXT_STACK |
| struct | PPEB |
| struct | PTEB |
| struct | PFILE_DIRECTORY_INFORMATION |
| struct | PFILE_FULL_DIR_INFORMATION |
| struct | PFILE_ID_FULL_DIRECTORY_INFORMATION |
| struct | PFILE_BOTH_DIR_INFORMATION |
| struct | PFILE_ID_BOTH_DIRECTORY_INFORMATION |
| struct | PFILE_BASIC_INFORMATION |
| struct | PFILE_STANDARD_INFORMATION |
| struct | PFILE_INTERNAL_INFORMATION |
| struct | PFILE_EA_INFORMATION |
| struct | PFILE_ACCESS_INFORMATION |
| struct | PFILE_NAME_INFORMATION |
| struct | PFILE_RENAME_INFORMATION |
| struct | PFILE_NAMES_INFORMATION |
| struct | PFILE_DISPOSITION_INFORMATION |
| struct | PFILE_POSITION_INFORMATION |
| struct | PFILE_ALIGNMENT_INFORMATION |
| struct | PFILE_ALLOCATION_INFORMATION |
| struct | PFILE_END_OF_FILE_INFORMATION |
| struct | PFILE_NETWORK_OPEN_INFORMATION |
| struct | PFILE_FULL_EA_INFORMATION |
| struct | PFILE_MODE_INFORMATION |
| struct | PFILE_STREAM_INFORMATION |
| struct | PFILE_ATTRIBUTE_TAG_INFORMATION |
| struct | PFILE_MAILSLOT_QUERY_INFORMATION |
| struct | PFILE_MAILSLOT_SET_INFORMATION |
| struct | PFILE_PIPE_LOCAL_INFORMATION |
| struct | PFILE_ALL_INFORMATION |
| struct | PTHREAD_BASIC_INFORMATION |
| struct | PKERNEL_USER_TIMES |
| struct | PMUTANT_BASIC_INFORMATION |
| struct | PTIMER_BASIC_INFORMATION |
| struct | PSYSTEM_THREAD_INFORMATION |
| struct | PIO_STATUS_BLOCK |
| struct | PKEY_BASIC_INFORMATION |
| struct | PKEY_NODE_INFORMATION |
| struct | PKEY_FULL_INFORMATION |
| struct | PKEY_VALUE_ENTRY |
| struct | PKEY_VALUE_BASIC_INFORMATION |
| struct | PKEY_VALUE_FULL_INFORMATION |
| struct | PKEY_VALUE_PARTIAL_INFORMATION |
| struct | POBJECT_ATTRIBUTES |
| struct | POBJECT_DATA_INFORMATION |
| struct | POBJECT_BASIC_INFORMATION |
| struct | POBJECT_NAME_INFORMATION |
| struct | POBJECT_TYPE_INFORMATION |
| struct | PPROCESS_BASIC_INFORMATION |
| struct | PRTL_HEAP_DEFINITION |
| struct | LPRTL_RWLOCK |
| struct | PSYSTEM_BASIC_INFORMATION |
| struct | PSYSTEM_CPU_INFORMATION |
| struct | PSYSTEM_PERFORMANCE_INFORMATION |
| struct | PSYSTEM_TIMEOFDAY_INFORMATION |
| struct | PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION |
| struct | PSYSTEM_DRIVER_INFORMATION |
| struct | PSYSTEM_HANDLE_ENTRY |
| struct | PSYSTEM_HANDLE_INFORMATION |
| struct | PSYSTEM_CACHE_INFORMATION |
| struct | PSYSTEM_INTERRUPT_INFORMATION |
| struct | PSYSTEM_CONFIGURATION_INFO |
| struct | PSYSTEM_EXCEPTION_INFORMATION |
| struct | PSYSTEM_LOOKASIDE_INFORMATION |
| struct | PSYSTEM_KERNEL_DEBUGGER_INFORMATION |
| struct | PVM_COUNTERS |
| struct | PSYSTEM_PROCESS_INFORMATION |
| struct | PSYSTEM_REGISTRY_QUOTA_INFORMATION |
| struct | PSYSTEM_TIME_ADJUSTMENT |
| struct | PTIME_FIELDS |
| struct | PWINSTATIONINFORMATIONW |
| struct | PLDR_RESOURCE_INFO |
| struct | PDEBUG_BUFFER |
| struct | PDEBUG_MODULE_INFORMATION |
| struct | PDEBUG_HEAP_INFORMATION |
| struct | PDEBUG_LOCK_INFORMATION |
| struct | PPORT_MESSAGE |
| struct | PATOM_BASIC_INFORMATION |
| struct | RTL_HANDLE |
| struct | PRTL_HANDLE_TABLE |
| struct | PRTL_QUERY_REGISTRY_TABLE |
| struct | PKEY_MULTIPLE_VALUE_INFORMATION |
| struct | PEVENT_BASIC_INFORMATION |
| struct | PSEMAPHORE_BASIC_INFORMATION |
| struct | PSECTION_BASIC_INFORMATION |
| struct | PSECTION_IMAGE_INFORMATION |
| struct | PLPC_SECTION_WRITE |
| struct | PLPC_SECTION_READ |
| struct | PLPC_MESSAGE |
| struct | POBJDIR_INFORMATION |
| struct | PINITIAL_TEB |
| struct | PFILE_COMPLETION_INFORMATION |
| struct | PLDR_MODULE |
| struct | PSYSTEM_MODULE |
| struct | PSYSTEM_MODULE_INFORMATION |
| struct | PFILE_FS_VOLUME_INFORMATION |
Defines |
| #define | PROCESS_PARAMS_FLAG_NORMALIZED 1 |
| #define | WINE_TEB_DEFINED |
| #define | MEM_EXECUTE_OPTION_DISABLE 0x01 |
| #define | MEM_EXECUTE_OPTION_ENABLE 0x02 |
| #define | MEM_EXECUTE_OPTION_PERMANENT 0x08 |
| #define | CPU_FEATURE_VME 0x00000005 /* Virtual 86 Mode Extensions */ |
| #define | CPU_FEATURE_TSC 0x00000002 /* Time Stamp Counter available */ |
| #define | CPU_FEATURE_CMOV 0x00000008 /* Conditional Move instruction*/ |
| #define | CPU_FEATURE_PGE 0x00000014 /* Page table Entry Global bit */ |
| #define | CPU_FEATURE_PSE 0x00000024 /* Page Size Extension */ |
| #define | CPU_FEATURE_MTRR 0x00000040 /* Memory Type Range Registers */ |
| #define | CPU_FEATURE_CX8 0x00000080 /* Compare and eXchange 8 byte instr. */ |
| #define | CPU_FEATURE_MMX 0x00000100 /* Multi Media eXtensions */ |
| #define | CPU_FEATURE_X86 0x00000200 /* seems to be alway ON, on the '86 */ |
| #define | CPU_FEATURE_PAT 0x00000400 /* Page Attribute Table */ |
| #define | CPU_FEATURE_FXSR 0x00000800 /* FXSAVE and FXSTORE instructions */ |
| #define | CPU_FEATURE_SEP 0x00001000 /* SYSENTER and SYSEXIT instructions */ |
| #define | CPU_FEATURE_SSE 0x00002000 /* SSE extenstions (ext. MMX) */ |
| #define | CPU_FEATURE_3DNOW |
| #define | CPU_FEATURE_SSE2 0x00010000 /* SSE2 extensions (XMMI64) */ |
| #define | CPU_FEATURE_DS 0x00020000 /* Debug Store */ |
| #define | CPU_FEATURE_HTT 0x00040000 /* Hyper Threading Technology */ |
| #define | PDI_MODULES 0x01 |
| #define | PDI_BACKTRACE 0x02 |
| #define | PDI_HEAPS 0x04 |
| #define | PDI_HEAP_TAGS 0x08 |
| #define | PDI_HEAP_BLOCKS 0x10 |
| #define | PDI_LOCKS 0x20 |
| #define | FILE_DIRECTORY_FILE 0x00000001 |
| #define | FILE_WRITE_THROUGH 0x00000002 |
| #define | FILE_SEQUENTIAL_ONLY 0x00000004 |
| #define | FILE_NO_INTERMEDIATE_BUFFERING 0x00000008 |
| #define | FILE_SYNCHRONOUS_IO_ALERT 0x00000010 |
| #define | FILE_SYNCHRONOUS_IO_NONALERT 0x00000020 |
| #define | FILE_NON_DIRECTORY_FILE 0x00000040 |
| #define | FILE_CREATE_TREE_CONNECTION 0x00000080 |
| #define | FILE_COMPLETE_IF_OPLOCKED 0x00000100 |
| #define | FILE_NO_EA_KNOWLEDGE 0x00000200 |
| #define | FILE_OPEN_REMOTE_INSTANCE 0x00000400 |
| #define | FILE_RANDOM_ACCESS 0x00000800 |
| #define | FILE_DELETE_ON_CLOSE 0x00001000 |
| #define | FILE_OPEN_BY_FILE_ID 0x00002000 |
| #define | FILE_OPEN_FOR_BACKUP_INTENT 0x00004000 |
| #define | FILE_NO_COMPRESSION 0x00008000 |
| #define | FILE_RESERVE_OPFILTER 0x00100000 |
| #define | FILE_TRANSACTED_MODE 0x00200000 |
| #define | FILE_OPEN_OFFLINE_FILE 0x00400000 |
| #define | FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000 |
| #define | FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7 |
| #define | FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7 |
| #define | FILE_SUPERSEDED 0 |
| #define | FILE_OPENED 1 |
| #define | FILE_CREATED 2 |
| #define | FILE_OVERWRITTEN 3 |
| #define | FILE_EXISTS 4 |
| #define | FILE_DOES_NOT_EXIST 5 |
| #define | FILE_SUPERSEDE 0 |
| #define | FILE_OPEN 1 |
| #define | FILE_CREATE 2 |
| #define | FILE_OPEN_IF 3 |
| #define | FILE_OVERWRITE 4 |
| #define | FILE_OVERWRITE_IF 5 |
| #define | FILE_MAXIMUM_DISPOSITION 5 |
| #define | FILE_REMOVABLE_MEDIA 0x00000001 |
| #define | FILE_READ_ONLY_DEVICE 0x00000002 |
| #define | FILE_FLOPPY_DISKETTE 0x00000004 |
| #define | FILE_WRITE_ONE_MEDIA 0x00000008 |
| #define | FILE_REMOTE_DEVICE 0x00000010 |
| #define | FILE_DEVICE_IS_MOUNTED 0x00000020 |
| #define | FILE_VIRTUAL_VOLUME 0x00000040 |
| #define | FILE_AUTOGENERATED_DEVICE_NAME 0x00000080 |
| #define | FILE_DEVICE_SECURE_OPEN 0x00000100 |
| #define | FILE_PIPE_INBOUND 0x00000000 |
| #define | FILE_PIPE_OUTBOUND 0x00000001 |
| #define | FILE_PIPE_FULL_DUPLEX 0x00000002 |
| #define | INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) ) |
| #define | LOGONID_CURRENT ((ULONG)-1) |
| #define | OBJ_INHERIT 0x00000002L |
| #define | OBJ_PERMANENT 0x00000010L |
| #define | OBJ_EXCLUSIVE 0x00000020L |
| #define | OBJ_CASE_INSENSITIVE 0x00000040L |
| #define | OBJ_OPENIF 0x00000080L |
| #define | OBJ_OPENLINK 0x00000100L |
| #define | OBJ_KERNEL_HANDLE 0x00000200L |
| #define | OBJ_VALID_ATTRIBUTES 0x000003F2L |
| #define | SERVERNAME_CURRENT ((HANDLE)NULL) |
| #define | DPFLTR_ERROR_LEVEL 0 |
| #define | DPFLTR_WARNING_LEVEL 1 |
| #define | DPFLTR_TRACE_LEVEL 2 |
| #define | DPFLTR_INFO_LEVEL 3 |
| #define | DPFLTR_MASK 0x8000000 |
| #define | SE_MIN_WELL_KNOWN_PRIVILEGE 2L |
| #define | SE_CREATE_TOKEN_PRIVILEGE 2L |
| #define | SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3L |
| #define | SE_LOCK_MEMORY_PRIVILEGE 4L |
| #define | SE_INCREASE_QUOTA_PRIVILEGE 5L |
| #define | SE_UNSOLICITED_INPUT_PRIVILEGE 6L /* obsolete */ |
| #define | SE_MACHINE_ACCOUNT_PRIVILEGE 6L |
| #define | SE_TCB_PRIVILEGE 7L |
| #define | SE_SECURITY_PRIVILEGE 8L |
| #define | SE_TAKE_OWNERSHIP_PRIVILEGE 9L |
| #define | SE_LOAD_DRIVER_PRIVILEGE 10L |
| #define | SE_SYSTEM_PROFILE_PRIVILEGE 11L |
| #define | SE_SYSTEMTIME_PRIVILEGE 12L |
| #define | SE_PROF_SINGLE_PROCESS_PRIVILEGE 13L |
| #define | SE_INC_BASE_PRIORITY_PRIVILEGE 14L |
| #define | SE_CREATE_PAGEFILE_PRIVILEGE 15L |
| #define | SE_CREATE_PERMANENT_PRIVILEGE 16L |
| #define | SE_BACKUP_PRIVILEGE 17L |
| #define | SE_RESTORE_PRIVILEGE 18L |
| #define | SE_SHUTDOWN_PRIVILEGE 19L |
| #define | SE_DEBUG_PRIVILEGE 20L |
| #define | SE_AUDIT_PRIVILEGE 21L |
| #define | SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22L |
| #define | SE_CHANGE_NOTIFY_PRIVILLEGE 23L |
| #define | SE_REMOTE_SHUTDOWN_PRIVILEGE 24L |
| #define | SE_UNDOCK_PRIVILEGE 25L |
| #define | SE_SYNC_AGENT_PRIVILEGE 26L |
| #define | SE_ENABLE_DELEGATION_PRIVILEGE 27L |
| #define | SE_MANAGE_VOLUME_PRIVILEGE 28L |
| #define | SE_IMPERSONATE_PRIVILEGE 29L |
| #define | SE_CREATE_GLOBAL_PRIVILEGE 30L |
| #define | SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE |
| #define | FLG_STOP_ON_EXCEPTION 0x00000001 |
| #define | FLG_SHOW_LDR_SNAPS 0x00000002 |
| #define | FLG_DEBUG_INITIAL_COMMAND 0x00000004 |
| #define | FLG_STOP_ON_HUNG_GUI 0x00000008 |
| #define | FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010 |
| #define | FLG_HEAP_ENABLE_FREE_CHECK 0x00000020 |
| #define | FLG_HEAP_VALIDATE_PARAMETERS 0x00000040 |
| #define | FLG_HEAP_VALIDATE_ALL 0x00000080 |
| #define | FLG_APPLICATION_VERIFIER 0x00000100 |
| #define | FLG_POOL_ENABLE_TAGGING 0x00000400 |
| #define | FLG_HEAP_ENABLE_TAGGING 0x00000800 |
| #define | FLG_USER_STACK_TRACE_DB 0x00001000 |
| #define | FLG_KERNEL_STACK_TRACE_DB 0x00002000 |
| #define | FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000 |
| #define | FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000 |
| #define | FLG_DISABLE_STACK_EXTENSION 0x00010000 |
| #define | FLG_ENABLE_CSRDEBUG 0x00020000 |
| #define | FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000 |
| #define | FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000 |
| #define | FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000 |
| #define | FLG_HEAP_DISABLE_COALESCING 0x00200000 |
| #define | FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000 |
| #define | FLG_ENABLE_EXCEPTION_LOGGING 0x00800000 |
| #define | FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000 |
| #define | FLG_HEAP_PAGE_ALLOCS 0x02000000 |
| #define | FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000 |
| #define | FLG_DISABLE_DBGPRINT 0x08000000 |
| #define | FLG_CRITSEC_EVENT_CREATION 0x10000000 |
| #define | FLG_LDR_TOP_DOWN 0x20000000 |
| #define | FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000 |
| #define | FLG_DISABLE_PROTDLLS 0x80000000 |
| #define | RTL_REGISTRY_ABSOLUTE 0 |
| #define | RTL_REGISTRY_SERVICES 1 |
| #define | RTL_REGISTRY_CONTROL 2 |
| #define | RTL_REGISTRY_WINDOWS_NT 3 |
| #define | RTL_REGISTRY_DEVICEMAP 4 |
| #define | RTL_REGISTRY_USER 5 |
| #define | RTL_REGISTRY_HANDLE 0x40000000 |
| #define | RTL_REGISTRY_OPTIONAL 0x80000000 |
| #define | RTL_QUERY_REGISTRY_SUBKEY 0x00000001 |
| #define | RTL_QUERY_REGISTRY_TOPKEY 0x00000002 |
| #define | RTL_QUERY_REGISTRY_REQUIRED 0x00000004 |
| #define | RTL_QUERY_REGISTRY_NOVALUE 0x00000008 |
| #define | RTL_QUERY_REGISTRY_NOEXPAND 0x00000010 |
| #define | RTL_QUERY_REGISTRY_DIRECT 0x00000020 |
| #define | RTL_QUERY_REGISTRY_DELETE 0x00000040 |
| #define | InitializeObjectAttributes(p, n, a, r, s) |
| #define | NtCurrentProcess() ((HANDLE)-1) |
| #define | RtlStoreUlong(p, v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0) |
| #define | RtlStoreUlonglong(p, v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0) |
| #define | RtlRetrieveUlong(p, s) memcpy((p), (s), sizeof(ULONG)) |
| #define | RtlRetrieveUlonglong(p, s) memcpy((p), (s), sizeof(ULONGLONG)) |
| #define | LDR_IMAGE_IS_DLL 0x00000004 |
| #define | LDR_LOAD_IN_PROGRESS 0x00001000 |
| #define | LDR_UNLOAD_IN_PROGRESS 0x00002000 |
| #define | LDR_NO_DLL_CALLS 0x00040000 |
| #define | LDR_PROCESS_ATTACHED 0x00080000 |
| #define | LDR_MODULE_REBASED 0x00200000 |
| #define | LDR_DONT_RESOLVE_REFS 0x40000000 |
| #define | LDR_WINE_INTERNAL 0x80000000 |
| #define | MAXIMUM_FILENAME_LENGTH 256 |
| #define | InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le)) |
| #define | InsertHeadList(le, e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0) |
| #define | InsertTailList(le, e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0) |
| #define | IsListEmpty(le) ((le)->Flink == (le)) |
| #define | RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0) |
| #define | FSCTL_PIPE_LISTEN CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2, METHOD_BUFFERED, FILE_ANY_ACCESS) |
Typedefs |
| typedef LONG | NTSTATUS |
| typedef LONG * | PNTSTATUS |
| typedef CONST char * | PCSZ |
| typedef short | CSHORT |
| typedef CSHORT * | PCSHORT |
| typedef STRING | ANSI_STRING |
| typedef PSTRING | PANSI_STRING |
| typedef const STRING * | PCANSI_STRING |
| typedef STRING | OEM_STRING |
| typedef PSTRING | POEM_STRING |
| typedef const STRING * | PCOEM_STRING |
| typedef const UNICODE_STRING * | PCUNICODE_STRING |
| typedef const RTL_BITMAP * | PCRTL_BITMAP |
| typedef const RTL_BITMAP_RUN * | PCRTL_BITMAP_RUN |
typedef enum
_FILE_INFORMATION_CLASS * | PFILE_INFORMATION_CLASS |
typedef struct
FILE_BOTH_DIRECTORY_INFORMATION * | PFILE_BOTH_DIRECTORY_INFORMATION |
| typedef enum _FSINFOCLASS * | PFS_INFORMATION_CLASS |
typedef enum
_OBJECT_INFORMATION_CLASS * | POBJECT_INFORMATION_CLASS |
typedef enum
_SYSTEM_INFORMATION_CLASS * | PSYSTEM_INFORMATION_CLASS |
typedef enum
_MUTANT_INFORMATION_CLASS * | PMUTANT_INFORMATION_CLASS |
| typedef void(WINAPI * | PIO_APC_ROUTINE )(PVOID, PIO_STATUS_BLOCK, ULONG) |
| typedef BOOLEAN(WINAPI * | PWINSTATIONQUERYINFORMATIONW )(HANDLE, ULONG, WINSTATIONINFOCLASS, PVOID, ULONG, PULONG) |
typedef struct
PORT_MESSAGE_HEADER * | PPORT_MESSAGE_HEADER |
| typedef unsigned short | RTL_ATOM |
| typedef unsigned short * | PRTL_ATOM |
| typedef struct atom_table * | RTL_ATOM_TABLE |
| typedef struct atom_table ** | PRTL_ATOM_TABLE |
| typedef void(CALLBACK * | PNTAPCFUNC )(ULONG_PTR, ULONG_PTR, ULONG_PTR) |
| typedef void(CALLBACK * | PRTL_THREAD_START_ROUTINE )(LPVOID) |
| typedef NTSTATUS(WINAPI * | PRTL_QUERY_REGISTRY_ROUTINE )(PCWSTR ValueName, ULONG ValueType, PVOID ValueData, ULONG ValueLength, PVOID Context, PVOID EntryContext) |
| typedef enum _EVENT_TYPE * | PEVENT_TYPE |
typedef enum
_EVENT_INFORMATION_CLASS * | PEVENT_INFORMATION_CLASS |
typedef enum
_SEMAPHORE_INFORMATION_CLASS * | PSEMAPHORE_INFORMATION_CLASS |
| typedef enum _SHUTDOWN_ACTION * | PSHUTDOWN_ACTION |
| typedef enum _KPROFILE_SOURCE * | PKPROFILE_SOURCE |
typedef enum
_PORT_INFORMATION_CLASS * | PPORT_INFORMATION_CLASS |
typedef enum
_IO_COMPLETION_INFORMATION_CLASS * | PIO_COMPLETION_INFORMATION_CLASS |
typedef enum
_HARDERROR_RESPONSE_OPTION * | PHARDERROR_RESPONSE_OPTION |
| typedef enum _HARDERROR_RESPONSE * | PHARDERROR_RESPONSE |
| typedef enum _SYSDBG_COMMAND * | PSYSDBG_COMMAND |
Enumerations |
| enum | FILE_INFORMATION_CLASS {
FileDirectoryInformation = 1,
FileFullDirectoryInformation,
FileBothDirectoryInformation,
FileBasicInformation,
FileStandardInformation,
FileInternalInformation,
FileEaInformation,
FileAccessInformation,
FileNameInformation,
FileRenameInformation,
FileLinkInformation,
FileNamesInformation,
FileDispositionInformation,
FilePositionInformation,
FileFullEaInformation,
FileModeInformation,
FileAlignmentInformation,
FileAllInformation,
FileAllocationInformation,
FileEndOfFileInformation,
FileAlternateNameInformation,
FileStreamInformation,
FilePipeInformation,
FilePipeLocalInformation,
FilePipeRemoteInformation,
FileMailslotQueryInformation,
FileMailslotSetInformation,
FileCompressionInformation,
FileObjectIdInformation,
FileCompletionInformation,
FileMoveClusterInformation,
FileQuotaInformation,
FileReparsePointInformation,
FileNetworkOpenInformation,
FileAttributeTagInformation,
FileTrackingInformation,
FileIdBothDirectoryInformation,
FileIdFullDirectoryInformation,
FileValidDataLengthInformation,
FileShortNameInformation,
FileIoCompletionNotificationInformation,
FileIoStatusBlockRangeInformation,
FileIoPriorityHintInformation,
FileSfioReserveInformation,
FileSfioVolumeInformation,
FileHardLinkInformation,
FileProcessIdsUsingFileInformation,
FileNormalizedNameInformation,
FileNetworkPhysicalNameInformation,
FileIdGlobalTxDirectoryInformation,
FileIsRemoteDeviceInformation,
FileAttributeCacheInformation,
FileNumaNodeInformation,
FileStandardLinkInformation,
FileRemoteProtocolInformation,
FileMaximumInformation,
FileDirectoryInformation = 1,
FileFullDirectoryInformation,
FileBothDirectoryInformation,
FileBasicInformation,
FileStandardInformation,
FileInternalInformation,
FileEaInformation,
FileAccessInformation,
FileNameInformation,
FileRenameInformation,
FileLinkInformation,
FileNamesInformation,
FileDispositionInformation,
FilePositionInformation,
FileFullEaInformation,
FileModeInformation,
FileAlignmentInformation,
FileAllInformation,
FileAllocationInformation,
FileEndOfFileInformation,
FileAlternateNameInformation,
FileStreamInformation,
FilePipeInformation,
FilePipeLocalInformation,
FilePipeRemoteInformation,
FileMailslotQueryInformation,
FileMailslotSetInformation,
FileCompressionInformation,
FileObjectIdInformation,
FileCompletionInformation,
FileMoveClusterInformation,
FileQuotaInformation,
FileReparsePointInformation,
FileNetworkOpenInformation,
FileAttributeTagInformation,
FileTrackingInformation,
FileIdBothDirectoryInformation,
FileIdFullDirectoryInformation,
FileValidDataLengthInformation,
FileShortNameInformation = 40,
FileSfioReserveInformation = 44,
FileSfioVolumeInformation = 45,
FileHardLinkInformation = 46,
FileNormalizedNameInformation = 48,
FileIdGlobalTxDirectoryInformation = 50,
FileStandardLinkInformation = 54,
FileMaximumInformation,
FileDirectoryInformation = 1,
FileFullDirectoryInformation,
FileBothDirectoryInformation,
FileBasicInformation,
FileStandardInformation,
FileInternalInformation,
FileEaInformation,
FileAccessInformation,
FileNameInformation,
FileRenameInformation,
FileLinkInformation,
FileNamesInformation,
FileDispositionInformation,
FilePositionInformation,
FileFullEaInformation,
FileModeInformation,
FileAlignmentInformation,
FileAllInformation,
FileAllocationInformation,
FileEndOfFileInformation,
FileAlternateNameInformation,
FileStreamInformation,
FilePipeInformation,
FilePipeLocalInformation,
FilePipeRemoteInformation,
FileMailslotQueryInformation,
FileMailslotSetInformation,
FileCompressionInformation,
FileObjectIdInformation,
FileCompletionInformation,
FileMoveClusterInformation,
FileQuotaInformation,
FileReparsePointInformation,
FileNetworkOpenInformation,
FileAttributeTagInformation,
FileTrackingInformation,
FileIdBothDirectoryInformation,
FileIdFullDirectoryInformation,
FileValidDataLengthInformation,
FileShortNameInformation,
FileIoCompletionNotificationInformation,
FileIoStatusBlockRangeInformation,
FileIoPriorityHintInformation,
FileSfioReserveInformation,
FileSfioVolumeInformation,
FileHardLinkInformation,
FileProcessIdsUsingFileInformation,
FileNormalizedNameInformation,
FileNetworkPhysicalNameInformation,
FileIdGlobalTxDirectoryInformation,
FileIsRemoteDeviceInformation,
FileAttributeCacheInformation,
FileNumaNodeInformation,
FileStandardLinkInformation,
FileRemoteProtocolInformation,
FileMaximumInformation
} |
| enum | FS_INFORMATION_CLASS {
FileFsVolumeInformation = 1,
FileFsLabelInformation,
FileFsSizeInformation,
FileFsDeviceInformation,
FileFsAttributeInformation,
FileFsControlInformation,
FileFsFullSizeInformation,
FileFsObjectIdInformation,
FileFsDriverPathInformation,
FileFsVolumeFlagsInformation,
FileFsMaximumInformation,
FileFsVolumeInformation = 1,
FileFsLabelInformation,
FileFsSizeInformation,
FileFsDeviceInformation,
FileFsAttributeInformation,
FileFsControlInformation,
FileFsFullSizeInformation,
FileFsObjectIdInformation,
FileFsMaximumInformation,
FileFsVolumeInformation = 1,
FileFsLabelInformation,
FileFsSizeInformation,
FileFsDeviceInformation,
FileFsAttributeInformation,
FileFsControlInformation,
FileFsFullSizeInformation,
FileFsObjectIdInformation,
FileFsDriverPathInformation,
FileFsVolumeFlagsInformation,
FileFsMaximumInformation
} |
| enum | KEY_INFORMATION_CLASS {
KeyBasicInformation,
KeyNodeInformation,
KeyFullInformation,
KeyNameInformation,
KeyCachedInformation,
KeyFlagsInformation,
KeyVirtualizationInformation,
KeyHandleTagsInformation,
MaxKeyInfoClass,
KeyBasicInformation,
KeyNodeInformation,
KeyFullInformation,
KeyBasicInformation,
KeyNodeInformation,
KeyFullInformation,
KeyNameInformation,
KeyCachedInformation,
KeyFlagsInformation,
KeyVirtualizationInformation,
KeyHandleTagsInformation,
MaxKeyInfoClass
} |
| enum | KEY_VALUE_INFORMATION_CLASS {
KeyValueBasicInformation,
KeyValueFullInformation,
KeyValuePartialInformation,
KeyValueFullInformationAlign64,
KeyValuePartialInformationAlign64,
KeyValueBasicInformation,
KeyValueFullInformation,
KeyValuePartialInformation,
KeyValueFullInformationAlign64,
KeyValuePartialInformationAlign64,
KeyValueBasicInformation,
KeyValueFullInformation,
KeyValuePartialInformation,
KeyValueFullInformationAlign64,
KeyValuePartialInformationAlign64
} |
| enum | OBJECT_INFORMATION_CLASS {
ObjectBasicInformation = 0,
ObjectTypeInformation = 2,
ObjectNameInformation = 1,
ObjectTypesInformation = 3,
ObjectHandleFlagInformation = 4,
ObjectSessionInformation = 5,
MaxObjectInfoClass,
ObjectBasicInformation,
ObjectNameInformation,
ObjectTypeInformation,
ObjectAllInformation,
ObjectDataInformation
} |
| enum | PROCESS_INFORMATION_CLASS {
ProcessBasicInformation = 0,
ProcessQuotaLimits = 1,
ProcessIoCounters = 2,
ProcessVmCounters = 3,
ProcessTimes = 4,
ProcessBasePriority = 5,
ProcessRaisePriority = 6,
ProcessDebugPort = 7,
ProcessExceptionPort = 8,
ProcessAccessToken = 9,
ProcessLdtInformation = 10,
ProcessLdtSize = 11,
ProcessDefaultHardErrorMode = 12,
ProcessIoPortHandlers = 13,
ProcessPooledUsageAndLimits = 14,
ProcessWorkingSetWatch = 15,
ProcessUserModeIOPL = 16,
ProcessEnableAlignmentFaultFixup = 17,
ProcessPriorityClass = 18,
ProcessWx86Information = 19,
ProcessHandleCount = 20,
ProcessAffinityMask = 21,
ProcessPriorityBoost = 22,
ProcessDeviceMap = 23,
ProcessSessionInformation = 24,
ProcessForegroundInformation = 25,
ProcessWow64Information = 26,
ProcessImageFileName = 27,
ProcessLUIDDeviceMapsEnabled = 28,
ProcessBreakOnTermination = 29,
ProcessDebugObjectHandle = 30,
ProcessDebugFlags = 31,
ProcessHandleTracing = 32,
ProcessExecuteFlags = 34,
MaxProcessInfoClass
} |
| enum | SECTION_INHERIT {
ViewShare = 1,
ViewUnmap = 2,
ViewShare = 1,
ViewUnmap = 2,
ViewShare = 1,
ViewUnmap = 2
} |
| enum | SYSTEM_INFORMATION_CLASS {
SystemBasicInformation,
SystemProcessorInformation,
SystemPerformanceInformation,
SystemTimeOfDayInformation,
SystemPathInformation,
SystemProcessInformation,
SystemCallCountInformation,
SystemDeviceInformation,
SystemProcessorPerformanceInformation,
SystemFlagsInformation,
SystemCallTimeInformation,
SystemModuleInformation,
SystemLocksInformation,
SystemStackTraceInformation,
SystemPagedPoolInformation,
SystemNonPagedPoolInformation,
SystemHandleInformation,
SystemObjectInformation,
SystemPageFileInformation,
SystemVdmInstemulInformation,
SystemVdmBopInformation,
SystemFileCacheInformation,
SystemPoolTagInformation,
SystemInterruptInformation,
SystemDpcBehaviorInformation,
SystemFullMemoryInformation,
SystemLoadGdiDriverInformation,
SystemUnloadGdiDriverInformation,
SystemTimeAdjustmentInformation,
SystemSummaryMemoryInformation,
SystemNextEventIdInformation,
SystemEventIdsInformation,
SystemCrashDumpInformation,
SystemExceptionInformation,
SystemCrashDumpStateInformation,
SystemKernelDebuggerInformation,
SystemContextSwitchInformation,
SystemRegistryQuotaInformation,
SystemExtendServiceTableInformation,
SystemPrioritySeperation,
SystemPlugPlayBusInformation,
SystemDockInformation,
SystemPowerInformation,
SystemProcessorSpeedInformation,
SystemCurrentTimeZoneInformation,
SystemLookasideInformation,
SystemBasicInformation,
SystemProcessorInformation,
SystemPerformanceInformation,
SystemTimeOfDayInformation,
SystemPathInformation,
SystemProcessInformation,
SystemCallCountInformation,
SystemDeviceInformation,
SystemProcessorPerformanceInformation,
SystemFlagsInformation,
SystemCallTimeInformation,
SystemModuleInformation,
SystemLocksInformation,
SystemStackTraceInformation,
SystemPagedPoolInformation,
SystemNonPagedPoolInformation,
SystemHandleInformation,
SystemObjectInformation,
SystemPageFileInformation,
SystemVdmInstemulInformation,
SystemVdmBopInformation,
SystemFileCacheInformation,
SystemPoolTagInformation,
SystemInterruptInformation,
SystemDpcBehaviorInformation,
SystemFullMemoryInformation,
SystemLoadGdiDriverInformation,
SystemUnloadGdiDriverInformation,
SystemTimeAdjustmentInformation,
SystemSummaryMemoryInformation,
SystemMirrorMemoryInformation,
SystemPerformanceTraceInformation,
SystemObsolete0,
SystemExceptionInformation,
SystemCrashDumpStateInformation,
SystemKernelDebuggerInformation,
SystemContextSwitchInformation,
SystemRegistryQuotaInformation,
SystemExtendServiceTableInformation,
SystemPrioritySeperation,
SystemPlugPlayBusInformation,
SystemDockInformation,
SystemPowerInformationNative,
SystemProcessorSpeedInformation,
SystemCurrentTimeZoneInformation,
SystemLookasideInformation,
SystemTimeSlipNotification,
SystemSessionCreate,
SystemSessionDetach,
SystemSessionInformation,
SystemRangeStartInformation,
SystemVerifierInformation,
SystemAddVerifier,
SystemSessionProcessesInformation,
SystemLoadGdiDriverInSystemSpaceInformation,
SystemNumaProcessorMap,
SystemPrefetcherInformation,
SystemExtendedProcessInformation,
SystemRecommendedSharedDataAlignment,
SystemComPlusPackage,
SystemNumaAvailableMemory,
SystemProcessorPowerInformation,
SystemEmulationBasicInformation,
SystemEmulationProcessorInformation,
SystemExtendedHanfleInformation,
SystemLostDelayedWriteInformation,
SystemBigPoolInformation,
SystemSessionPoolTagInformation,
SystemSessionMappedViewInformation,
SystemHotpatchInformation,
SystemObjectSecurityMode,
SystemWatchDogTimerHandler,
SystemWatchDogTimerInformation,
SystemLogicalProcessorInformation,
SystemWow64SharedInformationObsolete,
SystemRegisterFirmwareTableInformationHandler,
SystemFirmwareTableInformation,
SystemModuleInformationEx,
SystemVerifierTriageInformation,
SystemSuperfetchInformation,
SystemMemoryListInformation,
SystemFileCacheInformationEx,
SystemThreadPriorityClientIdInformation,
SystemProcessorIdleCycleTimeInformation,
SystemVerifierCancellationInformation,
SystemProcessorPowerInformationEx,
SystemRefTraceInformation,
SystemSpecialPoolInformation,
SystemProcessIdInformation,
SystemErrorPortInformation,
SystemBootEnvironmentInformation,
SystemHypervisorInformation,
SystemVerifierInformationEx,
SystemTimeZoneInformation,
SystemImageFileExecutionOptionsInformation,
SystemCoverageInformation,
SystemPrefetchPathInformation,
SystemVerifierFaultsInformation,
MaxSystemInfoClass,
SystemBasicInformation = 0,
SystemCpuInformation = 1,
SystemPerformanceInformation = 2,
SystemTimeOfDayInformation = 3,
Unknown4,
SystemProcessInformation = 5,
Unknown6,
Unknown7,
SystemProcessorPerformanceInformation = 8,
Unknown9,
Unknown10,
SystemModuleInformation = 11,
Unknown12,
Unknown13,
Unknown14,
Unknown15,
SystemHandleInformation = 16,
Unknown17,
SystemPageFileInformation = 18,
Unknown19,
Unknown20,
SystemCacheInformation = 21,
Unknown22,
SystemInterruptInformation = 23,
SystemDpcBehaviourInformation = 24,
SystemFullMemoryInformation = 25,
SystemNotImplemented6 = 25,
SystemLoadImage = 26,
SystemUnloadImage = 27,
SystemTimeAdjustmentInformation = 28,
SystemTimeAdjustment = 28,
SystemSummaryMemoryInformation = 29,
SystemNotImplemented7 = 29,
SystemNextEventIdInformation = 30,
SystemNotImplemented8 = 30,
SystemEventIdsInformation = 31,
SystemCrashDumpInformation = 32,
SystemExceptionInformation = 33,
SystemCrashDumpStateInformation = 34,
SystemKernelDebuggerInformation = 35,
SystemContextSwitchInformation = 36,
SystemRegistryQuotaInformation = 37,
SystemCurrentTimeZoneInformation = 44,
SystemTimeZoneInformation = 44,
SystemLookasideInformation = 45,
SystemSetTimeSlipEvent = 46,
SystemCreateSession = 47,
SystemDeleteSession = 48,
SystemInvalidInfoClass4 = 49,
SystemRangeStartInformation = 50,
SystemVerifierInformation = 51,
SystemAddVerifier = 52,
SystemSessionProcessesInformation = 53,
SystemInformationClassMax
} |
| enum | TIMER_TYPE { NotificationTimer,
SynchronizationTimer,
NotificationTimer,
SynchronizationTimer
} |
| enum | THREADINFOCLASS {
ThreadBasicInformation,
ThreadTimes,
ThreadPriority,
ThreadBasePriority,
ThreadAffinityMask,
ThreadImpersonationToken,
ThreadDescriptorTableEntry,
ThreadEnableAlignmentFaultFixup,
ThreadEventPair_Reusable,
ThreadQuerySetWin32StartAddress,
ThreadZeroTlsCell,
ThreadPerformanceCount,
ThreadAmILastThread,
ThreadIdealProcessor,
ThreadPriorityBoost,
ThreadSetTlsArrayAddress,
ThreadIsIoPending,
ThreadHideFromDebugger,
ThreadBreakOnTermination,
ThreadSwitchLegacyState,
ThreadIsTerminated,
ThreadLastSystemCall,
ThreadIoPriority,
ThreadCycleTime,
ThreadPagePriority,
ThreadActualBasePriority,
ThreadTebInformation,
ThreadCSwitchMon,
ThreadCSwitchPmu,
ThreadWow64Context,
ThreadGroupInformation,
ThreadUmsInformation,
ThreadCounterProfiling,
ThreadIdealProcessorEx,
MaxThreadInfoClass,
ThreadBasicInformation,
ThreadTimes,
ThreadPriority,
ThreadBasePriority,
ThreadAffinityMask,
ThreadImpersonationToken,
ThreadDescriptorTableEntry,
ThreadEnableAlignmentFaultFixup,
ThreadEventPair_Reusable,
ThreadQuerySetWin32StartAddress,
ThreadZeroTlsCell,
ThreadPerformanceCount,
ThreadAmILastThread,
ThreadIdealProcessor,
ThreadPriorityBoost,
ThreadSetTlsArrayAddress,
ThreadIsIoPending,
MaxThreadInfoClass,
ThreadBasicInformation,
ThreadTimes,
ThreadPriority,
ThreadBasePriority,
ThreadAffinityMask,
ThreadImpersonationToken,
ThreadDescriptorTableEntry,
ThreadEnableAlignmentFaultFixup,
ThreadEventPair_Reusable,
ThreadQuerySetWin32StartAddress,
ThreadZeroTlsCell,
ThreadPerformanceCount,
ThreadAmILastThread,
ThreadIdealProcessor,
ThreadPriorityBoost,
ThreadSetTlsArrayAddress,
ThreadIsIoPending,
ThreadHideFromDebugger,
ThreadBreakOnTermination,
ThreadSwitchLegacyState,
ThreadIsTerminated,
ThreadLastSystemCall,
ThreadIoPriority,
ThreadCycleTime,
ThreadPagePriority,
ThreadActualBasePriority,
ThreadTebInformation,
ThreadCSwitchMon,
ThreadCSwitchPmu,
ThreadWow64Context,
ThreadGroupInformation,
ThreadUmsInformation,
ThreadCounterProfiling,
ThreadIdealProcessorEx,
MaxThreadInfoClass
} |
| enum | WINSTATIONINFOCLASS { WinStationInformation = 8
} |
| enum | MEMORY_INFORMATION_CLASS {
MemoryBasicInformation,
MemoryWorkingSetList,
MemorySectionName,
MemoryBasicVlmInformation,
MemoryBasicInformation,
MemoryWorkingSetList,
MemorySectionName,
MemoryBasicVlmInformation
} |
| enum | MUTANT_INFORMATION_CLASS { MutantBasicInformation,
MutantOwnerInformation,
MutantBasicInformation
} |
| enum | TIMER_INFORMATION_CLASS { TimerBasicInformation,
TimerBasicInformation = 0
} |
| enum | DOS_PATHNAME_TYPE {
INVALID_PATH = 0,
UNC_PATH,
ABSOLUTE_DRIVE_PATH,
RELATIVE_DRIVE_PATH,
ABSOLUTE_PATH,
RELATIVE_PATH,
DEVICE_PATH,
UNC_DOT_PATH
} |
| enum | ATOM_INFORMATION_CLASS { AtomBasicInformation,
AtomTableInformation,
AtomBasicInformation = 0,
AtomTableInformation = 1
} |
| enum | EVENT_TYPE { NotificationEvent,
SynchronizationEvent,
NotificationEvent,
SynchronizationEvent
} |
| enum | EVENT_INFORMATION_CLASS { EventBasicInformation,
EventBasicInformation
} |
| enum | SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation,
SemaphoreBasicInformation
} |
| enum | SECTION_INFORMATION_CLASS { SectionBasicInformation,
SectionImageInformation,
SectionBasicInformation,
SectionImageInformation
} |
| enum | SHUTDOWN_ACTION {
ShutdownNoReboot,
ShutdownReboot,
ShutdownPowerOff,
ShutdownNoReboot,
ShutdownReboot,
ShutdownPowerOff,
ShutdownNoReboot,
ShutdownReboot,
ShutdownPowerOff
} |
| enum | KPROFILE_SOURCE {
ProfileTime,
ProfileAlignmentFixup,
ProfileTotalIssues,
ProfilePipelineDry,
ProfileLoadInstructions,
ProfilePipelineFrozen,
ProfileBranchInstructions,
ProfileTotalNonissues,
ProfileDcacheMisses,
ProfileIcacheMisses,
ProfileCacheMisses,
ProfileBranchMispredictions,
ProfileStoreInstructions,
ProfileFpInstructions,
ProfileIntegerInstructions,
Profile2Issue,
Profile3Issue,
Profile4Issue,
ProfileSpecialInstructions,
ProfileTotalCycles,
ProfileIcacheIssues,
ProfileDcacheAccesses,
ProfileMemoryBarrierCycles,
ProfileLoadLinkedIssues,
ProfileMaximum,
ProfileTime,
ProfileAlignmentFixup,
ProfileTotalIssues,
ProfilePipelineDry,
ProfileLoadInstructions,
ProfilePipelineFrozen,
ProfileBranchInstructions,
ProfileTotalNonissues,
ProfileDcacheMisses,
ProfileIcacheMisses,
ProfileCacheMisses,
ProfileBranchMispredictions,
ProfileStoreInstructions,
ProfileFpInstructions,
ProfileIntegerInstructions,
Profile2Issue,
Profile3Issue,
Profile4Issue,
ProfileSpecialInstructions,
ProfileTotalCycles,
ProfileIcacheIssues,
ProfileDcacheAccesses,
ProfileMemoryBarrierCycles,
ProfileLoadLinkedIssues,
ProfileMaximum,
ProfileTime,
ProfileAlignmentFixup,
ProfileTotalIssues,
ProfilePipelineDry,
ProfileLoadInstructions,
ProfilePipelineFrozen,
ProfileBranchInstructions,
ProfileTotalNonissues,
ProfileDcacheMisses,
ProfileIcacheMisses,
ProfileCacheMisses,
ProfileBranchMispredictions,
ProfileStoreInstructions,
ProfileFpInstructions,
ProfileIntegerInstructions,
Profile2Issue,
Profile3Issue,
Profile4Issue,
ProfileSpecialInstructions,
ProfileTotalCycles,
ProfileIcacheIssues,
ProfileDcacheAccesses,
ProfileMemoryBarrierCycles,
ProfileLoadLinkedIssues,
ProfileMaximum
} |
| enum | PORT_INFORMATION_CLASS { PortNoInformation,
PortNoInformation
} |
| enum | IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation,
IoCompletionBasicInformation
} |
| enum | HARDERROR_RESPONSE_OPTION {
OptionAbortRetryIgnore,
OptionOk,
OptionOkCancel,
OptionRetryCancel,
OptionYesNo,
OptionYesNoCancel,
OptionShutdownSystem,
OptionOkNoWait,
OptionCancelTryContinue,
OptionAbortRetryIgnore,
OptionOk,
OptionOkCancel,
OptionRetryCancel,
OptionYesNo,
OptionYesNoCancel,
OptionShutdownSystem
} |
| enum | HARDERROR_RESPONSE {
ResponseReturnToCaller,
ResponseNotHandled,
ResponseAbort,
ResponseCancel,
ResponseIgnore,
ResponseNo,
ResponseOk,
ResponseRetry,
ResponseYes,
ResponseTryAgain,
ResponseContinue,
ResponseReturnToCaller,
ResponseNotHandled,
ResponseAbort,
ResponseCancel,
ResponseIgnore,
ResponseNo,
ResponseOk,
ResponseRetry,
ResponseYes
} |
| enum | SYSDBG_COMMAND {
SysDbgQueryModuleInformation = 0,
SysDbgQueryTraceInformation = 1,
SysDbgSetTracepoint = 2,
SysDbgSetSpecialCall = 3,
SysDbgClearSpecialCalls = 4,
SysDbgQuerySpecialCalls = 5,
SysDbgBreakPoint = 6,
SysDbgQueryVersion = 7,
SysDbgReadVirtual = 8,
SysDbgWriteVirtual = 9,
SysDbgReadPhysical = 10,
SysDbgWritePhysical = 11,
SysDbgReadControlSpace = 12,
SysDbgWriteControlSpace = 13,
SysDbgReadIoSpace = 14,
SysDbgWriteIoSpace = 15,
SysDbgReadMsr = 16,
SysDbgWriteMsr = 17,
SysDbgReadBusData = 18,
SysDbgWriteBusData = 19,
SysDbgCheckLowMemory = 20,
SysDbgEnableKernelDebugger = 21,
SysDbgDisableKernelDebugger = 22,
SysDbgGetAutoKdEnable = 23,
SysDbgSetAutoKdEnable = 24,
SysDbgGetPrintBufferSize = 25,
SysDbgSetPrintBufferSize = 26,
SysDbgGetKdUmExceptionEnable = 27,
SysDbgSetKdUmExceptionEnable = 28,
SysDbgGetTriageDump = 29,
SysDbgGetKdBlockEnable = 30,
SysDbgSetKdBlockEnable = 31,
SysDbgRegisterForUmBreakInfo = 32,
SysDbgGetUmBreakPid = 33,
SysDbgClearUmBreakPid = 34,
SysDbgGetUmAttachPid = 35,
SysDbgClearUmAttachPid = 36,
SysDbgQueryModuleInformation,
SysDbgQueryTraceInformation,
SysDbgSetTracepoint,
SysDbgSetSpecialCall,
SysDbgClearSpecialCalls,
SysDbgQuerySpecialCalls
} |
Functions |
| typedef | VOID (CALLBACK *PTIMER_APC_ROUTINE)(PVOID |
| void WINAPI | DbgBreakPoint (void) |
| void WINAPI | DbgUserBreakPoint (void) |
| NTSTATUS WINAPIV | DbgPrintEx (ULONG iComponentId, ULONG Level, LPCSTR fmt,...) |
| NTSTATUS WINAPI | LdrAccessResource (HMODULE, const IMAGE_RESOURCE_DATA_ENTRY *, void **, PULONG) |
| NTSTATUS WINAPI | LdrFindResourceDirectory_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DIRECTORY **) |
| NTSTATUS WINAPI | LdrFindResource_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DATA_ENTRY **) |
| NTSTATUS WINAPI | LdrGetDllHandle (ULONG, ULONG, const UNICODE_STRING *, HMODULE *) |
| NTSTATUS WINAPI | LdrGetDllHandleEx (ULONG, PWSTR, PULONG, PUNICODE_STRING, PVOID) |
| NTSTATUS WINAPI | LdrGetProcedureAddress (HMODULE, const ANSI_STRING *, ULONG, void **) |
| void WINAPI | LdrInitializeThunk (HANDLE, ULONG, ULONG, ULONG) |
| NTSTATUS WINAPI | LdrLoadDll (LPCWSTR, DWORD, const UNICODE_STRING *, HMODULE *) |
| void WINAPI | LdrShutdownProcess (void) |
| void WINAPI | LdrShutdownThread (void) |
| NTSTATUS WINAPI | NtAcceptConnectPort (PHANDLE, ULONG, PLPC_MESSAGE, BOOLEAN, PLPC_SECTION_WRITE, PLPC_SECTION_READ) |
| NTSTATUS WINAPI | NtAccessCheck (PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, PGENERIC_MAPPING, PPRIVILEGE_SET, PULONG, PULONG, NTSTATUS *) |
| NTSTATUS WINAPI | NtAccessCheckAndAuditAlarm (PUNICODE_STRING, HANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, ACCESS_MASK, PGENERIC_MAPPING, BOOLEAN, PULONG, PULONG, PBOOLEAN) |
| NTSTATUS WINAPI | NtAddAtom (const WCHAR *, ULONG, RTL_ATOM *) |
| NTSTATUS WINAPI | NtAdjustGroupsToken (HANDLE, BOOLEAN, PTOKEN_GROUPS, ULONG, PTOKEN_GROUPS, PULONG) |
| NTSTATUS WINAPI | NtAdjustPrivilegesToken (HANDLE, BOOLEAN, PTOKEN_PRIVILEGES, DWORD, PTOKEN_PRIVILEGES, PDWORD) |
| NTSTATUS WINAPI | NtAlertResumeThread (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtAlertThread (HANDLE ThreadHandle) |
| NTSTATUS WINAPI | NtAllocateLocallyUniqueId (PLUID lpLuid) |
| NTSTATUS WINAPI | NtAllocateUuids (PULARGE_INTEGER, PULONG, PULONG) |
| NTSTATUS WINAPI | NtAllocateVirtualMemory (HANDLE, PVOID *, ULONG, SIZE_T *, ULONG, ULONG) |
| NTSTATUS WINAPI | NtCallbackReturn (PVOID, ULONG, NTSTATUS) |
| NTSTATUS WINAPI | NtCancelIoFile (HANDLE, PIO_STATUS_BLOCK) |
| NTSTATUS WINAPI | NtCancelTimer (HANDLE, BOOLEAN *) |
| NTSTATUS WINAPI | NtClearEvent (HANDLE) |
| NTSTATUS WINAPI | NtClose (HANDLE) |
| NTSTATUS WINAPI | NtCloseObjectAuditAlarm (PUNICODE_STRING, HANDLE, BOOLEAN) |
| NTSTATUS WINAPI | NtCompleteConnectPort (HANDLE) |
| NTSTATUS WINAPI | NtConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PLPC_SECTION_READ, PULONG, PVOID, PULONG) |
| NTSTATUS WINAPI | NtContinue (PCONTEXT, BOOLEAN) |
| NTSTATUS WINAPI | NtCreateDirectoryObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtCreateEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, BOOLEAN, BOOLEAN) |
| NTSTATUS WINAPI | NtCreateEventPair (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtCreateFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, PLARGE_INTEGER, ULONG, ULONG, ULONG, ULONG, PVOID, ULONG) |
| NTSTATUS WINAPI | NtCreateIoCompletion (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, ULONG) |
| NTSTATUS WINAPI | NtCreateKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG) |
| NTSTATUS WINAPI | NtCreateMailslotFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtCreateMutant (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, BOOLEAN) |
| NTSTATUS WINAPI | NtCreateNamedPipeFile (PHANDLE, ULONG, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtCreatePagingFile (PUNICODE_STRING, PLARGE_INTEGER, PLARGE_INTEGER, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtCreatePort (PHANDLE, POBJECT_ATTRIBUTES, ULONG, ULONG, PULONG) |
| NTSTATUS WINAPI | NtCreateProcess (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, BOOLEAN, HANDLE, HANDLE, HANDLE) |
| NTSTATUS WINAPI | NtCreateSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const LARGE_INTEGER *, ULONG, ULONG, HANDLE) |
| NTSTATUS WINAPI | NtCreateSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, LONG, LONG) |
| NTSTATUS WINAPI | NtCreateSymbolicLinkObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PUNICODE_STRING) |
| NTSTATUS WINAPI | NtCreateThread (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, PCLIENT_ID, PCONTEXT, PINITIAL_TEB, BOOLEAN) |
| NTSTATUS WINAPI | NtCreateTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, TIMER_TYPE) |
| NTSTATUS WINAPI | NtCreateToken (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, TOKEN_TYPE, PLUID, PLARGE_INTEGER, PTOKEN_USER, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_OWNER, PTOKEN_PRIMARY_GROUP, PTOKEN_DEFAULT_DACL, PTOKEN_SOURCE) |
| NTSTATUS WINAPI | NtDelayExecution (BOOLEAN, const LARGE_INTEGER *) |
| NTSTATUS WINAPI | NtDeleteAtom (RTL_ATOM) |
| NTSTATUS WINAPI | NtDeleteFile (POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtDeleteKey (HANDLE) |
| NTSTATUS WINAPI | NtDeleteValueKey (HANDLE, const UNICODE_STRING *) |
| NTSTATUS WINAPI | NtDeviceIoControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG) |
| NTSTATUS WINAPI | NtDisplayString (PUNICODE_STRING) |
| NTSTATUS WINAPI | NtDuplicateObject (HANDLE, HANDLE, HANDLE, PHANDLE, ACCESS_MASK, ULONG, ULONG) |
| NTSTATUS WINAPI | NtDuplicateToken (HANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, SECURITY_IMPERSONATION_LEVEL, TOKEN_TYPE, PHANDLE) |
| NTSTATUS WINAPI | NtEnumerateKey (HANDLE, ULONG, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *) |
| NTSTATUS WINAPI | NtEnumerateValueKey (HANDLE, ULONG, KEY_VALUE_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtExtendSection (HANDLE, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtFindAtom (const WCHAR *, ULONG, RTL_ATOM *) |
| NTSTATUS WINAPI | NtFlushBuffersFile (HANDLE, IO_STATUS_BLOCK *) |
| NTSTATUS WINAPI | NtFlushInstructionCache (HANDLE, LPCVOID, SIZE_T) |
| NTSTATUS WINAPI | NtFlushKey (HANDLE) |
| NTSTATUS WINAPI | NtFlushVirtualMemory (HANDLE, LPCVOID *, SIZE_T *, PIO_STATUS_BLOCK) |
| NTSTATUS WINAPI | NtFlushWriteBuffer (VOID) |
| NTSTATUS WINAPI | NtFreeVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG) |
| NTSTATUS WINAPI | NtFsControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG) |
| NTSTATUS WINAPI | NtGetContextThread (HANDLE, CONTEXT *) |
| NTSTATUS WINAPI | NtGetPlugPlayEvent (ULONG, ULONG, PVOID, ULONG) |
| ULONG WINAPI | NtGetTickCount (VOID) |
| NTSTATUS WINAPI | NtImpersonateAnonymousToken (HANDLE) |
| NTSTATUS WINAPI | NtImpersonateClientOfPort (HANDLE, PPORT_MESSAGE) |
| NTSTATUS WINAPI | NtImpersonateThread (HANDLE, HANDLE, PSECURITY_QUALITY_OF_SERVICE) |
| NTSTATUS WINAPI | NtInitializeRegistry (BOOLEAN) |
| NTSTATUS WINAPI | NtInitiatePowerAction (POWER_ACTION, SYSTEM_POWER_STATE, ULONG, BOOLEAN) |
| NTSTATUS WINAPI | NtListenPort (HANDLE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtLoadDriver (const UNICODE_STRING *) |
| NTSTATUS WINAPI | NtLoadKey (const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtLockFile (HANDLE, HANDLE, PIO_APC_ROUTINE, void *, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, ULONG *, BOOLEAN, BOOLEAN) |
| NTSTATUS WINAPI | NtLockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG) |
| NTSTATUS WINAPI | NtMakeTemporaryObject (HANDLE) |
| NTSTATUS WINAPI | NtMapViewOfSection (HANDLE, HANDLE, PVOID *, ULONG, SIZE_T, const LARGE_INTEGER *, SIZE_T *, SECTION_INHERIT, ULONG, ULONG) |
| NTSTATUS WINAPI | NtNotifyChangeDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, ULONG, BOOLEAN) |
| NTSTATUS WINAPI | NtNotifyChangeKey (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN) |
| NTSTATUS WINAPI | NtOpenDirectoryObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtOpenEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtOpenEventPair (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtOpenFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG) |
| NTSTATUS WINAPI | NtOpenIoCompletion (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtOpenKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtOpenMutant (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtOpenObjectAuditAlarm (PUNICODE_STRING, PHANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, ACCESS_MASK, PPRIVILEGE_SET, BOOLEAN, BOOLEAN, PBOOLEAN) |
| NTSTATUS WINAPI | NtOpenProcess (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *) |
| NTSTATUS WINAPI | NtOpenProcessToken (HANDLE, DWORD, HANDLE *) |
| NTSTATUS WINAPI | NtOpenSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtOpenSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtOpenSymbolicLinkObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtOpenThread (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *) |
| NTSTATUS WINAPI | NtOpenThreadToken (HANDLE, DWORD, BOOLEAN, HANDLE *) |
| NTSTATUS WINAPI | NtOpenTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *) |
| NTSTATUS WINAPI | NtPowerInformation (POWER_INFORMATION_LEVEL, PVOID, ULONG, PVOID, ULONG) |
| NTSTATUS WINAPI | NtPrivilegeCheck (HANDLE, PPRIVILEGE_SET, PBOOLEAN) |
| NTSTATUS WINAPI | NtPrivilegeObjectAuditAlarm (PUNICODE_STRING, HANDLE, HANDLE, ULONG, PPRIVILEGE_SET, BOOLEAN) |
| NTSTATUS WINAPI | NtPrivilegedServiceAuditAlarm (PUNICODE_STRING, PUNICODE_STRING, HANDLE, PPRIVILEGE_SET, BOOLEAN) |
| NTSTATUS WINAPI | NtProtectVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG, ULONG *) |
| NTSTATUS WINAPI | NtPulseEvent (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtQueueApcThread (HANDLE, PNTAPCFUNC, ULONG_PTR, ULONG_PTR, ULONG_PTR) |
| NTSTATUS WINAPI | NtQueryAttributesFile (const OBJECT_ATTRIBUTES *, FILE_BASIC_INFORMATION *) |
| NTSTATUS WINAPI | NtQueryDefaultLocale (BOOLEAN, LCID *) |
| NTSTATUS WINAPI | NtQueryDefaultUILanguage (LANGID *) |
| NTSTATUS WINAPI | NtQueryDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS, BOOLEAN, PUNICODE_STRING, BOOLEAN) |
| NTSTATUS WINAPI | NtQueryDirectoryObject (HANDLE, POBJDIR_INFORMATION, ULONG, BOOLEAN, BOOLEAN, PULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, BOOLEAN, PVOID, ULONG, PVOID, BOOLEAN) |
| NTSTATUS WINAPI | NtQueryEvent (HANDLE, EVENT_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryFullAttributesFile (const OBJECT_ATTRIBUTES *, FILE_NETWORK_OPEN_INFORMATION *) |
| NTSTATUS WINAPI | NtQueryInformationAtom (RTL_ATOM, ATOM_INFORMATION_CLASS, RTL_ATOM_TABLE, ULONG, ULONG *) |
| NTSTATUS WINAPI | NtQueryInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, LONG, FILE_INFORMATION_CLASS) |
| NTSTATUS WINAPI | NtQueryInformationPort (HANDLE, PORT_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryInformationProcess (HANDLE, PROCESSINFOCLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryInformationThread (HANDLE, THREADINFOCLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryInformationToken (HANDLE, DWORD, LPVOID, DWORD, LPDWORD) |
| NTSTATUS WINAPI | NtQueryInstallUILanguage (LANGID *) |
| NTSTATUS WINAPI | NtQueryIntervalProfile (KPROFILE_SOURCE, PULONG) |
| NTSTATUS WINAPI | NtQueryIoCompletion (HANDLE, IO_COMPLETION_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryKey (HANDLE, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *) |
| NTSTATUS WINAPI | NtQueryMultipleValueKey (HANDLE, PKEY_MULTIPLE_VALUE_INFORMATION, ULONG, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryMutant (HANDLE, MUTANT_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryOpenSubKeys (POBJECT_ATTRIBUTES, PULONG) |
| NTSTATUS WINAPI | NtQueryPerformanceCounter (PLARGE_INTEGER, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtQuerySecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQuerySection (HANDLE, SECTION_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQuerySemaphore (HANDLE, SEMAPHORE_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQuerySymbolicLinkObject (HANDLE, PUNICODE_STRING, PULONG) |
| NTSTATUS WINAPI | NtQuerySystemEnvironmentValue (PUNICODE_STRING, PWCHAR, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQuerySystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQuerySystemTime (PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtQueryTimer (HANDLE, TIMER_INFORMATION_CLASS, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryTimerResolution (PULONG, PULONG, PULONG) |
| NTSTATUS WINAPI | NtQueryValueKey (HANDLE, const UNICODE_STRING *, KEY_VALUE_INFORMATION_CLASS, void *, DWORD, DWORD *) |
| NTSTATUS WINAPI | NtQueryVirtualMemory (HANDLE, LPCVOID, MEMORY_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *) |
| NTSTATUS WINAPI | NtQueryVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS) |
| void WINAPI | NtRaiseException (PEXCEPTION_RECORD, PCONTEXT, BOOL) |
| NTSTATUS WINAPI | NtRaiseHardError (NTSTATUS, ULONG, PUNICODE_STRING, PVOID *, HARDERROR_RESPONSE_OPTION, PHARDERROR_RESPONSE) |
| NTSTATUS WINAPI | NtReadFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, PLARGE_INTEGER, PULONG) |
| NTSTATUS WINAPI | NtReadFileScatter (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT, ULONG, PLARGE_INTEGER, PULONG) |
| NTSTATUS WINAPI | NtReadRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtReadVirtualMemory (HANDLE, const void *, void *, SIZE_T, SIZE_T *) |
| NTSTATUS WINAPI | NtRegisterThreadTerminatePort (HANDLE) |
| NTSTATUS WINAPI | NtReleaseMutant (HANDLE, PLONG) |
| NTSTATUS WINAPI | NtReleaseSemaphore (HANDLE, ULONG, PULONG) |
| NTSTATUS WINAPI | NtRemoveIoCompletion (HANDLE, PULONG, PULONG, PIO_STATUS_BLOCK, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtReplaceKey (POBJECT_ATTRIBUTES, HANDLE, POBJECT_ATTRIBUTES) |
| NTSTATUS WINAPI | NtReplyPort (HANDLE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtReplyWaitReceivePort (HANDLE, PULONG, PLPC_MESSAGE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtReplyWaitReceivePortEx (HANDLE, PVOID *, PPORT_MESSAGE, PPORT_MESSAGE, PLARGE_INTEGER) |
| NTSTATUS WINAPI | NtReplyWaitReplyPort (HANDLE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtRequestPort (HANDLE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtRequestWaitReplyPort (HANDLE, PLPC_MESSAGE, PLPC_MESSAGE) |
| NTSTATUS WINAPI | NtResetEvent (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtRestoreKey (HANDLE, HANDLE, ULONG) |
| NTSTATUS WINAPI | NtResumeThread (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtSaveKey (HANDLE, HANDLE) |
| NTSTATUS WINAPI | NtSecureConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PSID, PLPC_SECTION_READ, PULONG, PVOID, PULONG) |
| NTSTATUS WINAPI | NtSetContextThread (HANDLE, const CONTEXT *) |
| NTSTATUS WINAPI | NtSetDefaultHardErrorPort (HANDLE) |
| NTSTATUS WINAPI | NtSetDefaultLocale (BOOLEAN, LCID) |
| NTSTATUS WINAPI | NtSetDefaultUILanguage (LANGID) |
| NTSTATUS WINAPI | NtSetEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetEvent (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtSetHighEventPair (HANDLE) |
| NTSTATUS WINAPI | NtSetHighWaitLowEventPair (HANDLE) |
| NTSTATUS WINAPI | NtSetHighWaitLowThread (VOID) |
| NTSTATUS WINAPI | NtSetInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS) |
| NTSTATUS WINAPI | NtSetInformationKey (HANDLE, const int, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetInformationObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetInformationProcess (HANDLE, PROCESS_INFORMATION_CLASS, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetInformationThread (HANDLE, THREADINFOCLASS, LPCVOID, ULONG) |
| NTSTATUS WINAPI | NtSetInformationToken (HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetIntervalProfile (ULONG, KPROFILE_SOURCE) |
| NTSTATUS WINAPI | NtSetIoCompletion (HANDLE, ULONG, ULONG, NTSTATUS, ULONG) |
| NTSTATUS WINAPI | NtSetLdtEntries (ULONG, LDT_ENTRY, ULONG, LDT_ENTRY) |
| NTSTATUS WINAPI | NtSetLowEventPair (HANDLE) |
| NTSTATUS WINAPI | NtSetLowWaitHighEventPair (HANDLE) |
| NTSTATUS WINAPI | NtSetLowWaitHighThread (VOID) |
| NTSTATUS WINAPI | NtSetSecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR) |
| NTSTATUS WINAPI | NtSetSystemEnvironmentValue (PUNICODE_STRING, PUNICODE_STRING) |
| NTSTATUS WINAPI | NtSetSystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG) |
| NTSTATUS WINAPI | NtSetSystemPowerState (POWER_ACTION, SYSTEM_POWER_STATE, ULONG) |
| NTSTATUS WINAPI | NtSetSystemTime (const LARGE_INTEGER *, LARGE_INTEGER *) |
| NTSTATUS WINAPI | NtSetTimer (HANDLE, const LARGE_INTEGER *, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN *) |
| NTSTATUS WINAPI | NtSetTimerResolution (ULONG, BOOLEAN, PULONG) |
| NTSTATUS WINAPI | NtSetValueKey (HANDLE, const UNICODE_STRING *, ULONG, ULONG, const void *, ULONG) |
| NTSTATUS WINAPI | NtSetVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS) |
| NTSTATUS WINAPI | NtSignalAndWaitForSingleObject (HANDLE, HANDLE, BOOLEAN, const LARGE_INTEGER *) |
| NTSTATUS WINAPI | NtShutdownSystem (SHUTDOWN_ACTION) |
| NTSTATUS WINAPI | NtStartProfile (HANDLE) |
| NTSTATUS WINAPI | NtStopProfile (HANDLE) |
| NTSTATUS WINAPI | NtSuspendThread (HANDLE, PULONG) |
| NTSTATUS WINAPI | NtSystemDebugControl (SYSDBG_COMMAND, PVOID, ULONG, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtTerminateProcess (HANDLE, LONG) |
| NTSTATUS WINAPI | NtTerminateThread (HANDLE, LONG) |
| NTSTATUS WINAPI | NtTestAlert (VOID) |
| NTSTATUS WINAPI | NtUnloadDriver (const UNICODE_STRING *) |
| NTSTATUS WINAPI | NtUnloadKey (HANDLE) |
| NTSTATUS WINAPI | NtUnloadKeyEx (POBJECT_ATTRIBUTES, HANDLE) |
| NTSTATUS WINAPI | NtUnlockFile (HANDLE, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, PULONG) |
| NTSTATUS WINAPI | NtUnlockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG) |
| NTSTATUS WINAPI | NtUnmapViewOfSection (HANDLE, PVOID) |
| NTSTATUS WINAPI | NtVdmControl (ULONG, PVOID) |
| NTSTATUS WINAPI | NtWaitForSingleObject (HANDLE, BOOLEAN, const LARGE_INTEGER *) |
| NTSTATUS WINAPI | NtWaitForMultipleObjects (ULONG, const HANDLE *, BOOLEAN, BOOLEAN, const LARGE_INTEGER *) |
| NTSTATUS WINAPI | NtWaitHighEventPair (HANDLE) |
| NTSTATUS WINAPI | NtWaitLowEventPair (HANDLE) |
| NTSTATUS WINAPI | NtWriteFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, const void *, ULONG, PLARGE_INTEGER, PULONG) |
| NTSTATUS WINAPI | NtWriteFileGather (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT, ULONG, PLARGE_INTEGER, PULONG) |
| NTSTATUS WINAPI | NtWriteRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG) |
| NTSTATUS WINAPI | NtWriteVirtualMemory (HANDLE, void *, const void *, SIZE_T, SIZE_T *) |
| NTSTATUS WINAPI | NtYieldExecution (void) |
| void WINAPI | RtlAcquirePebLock (void) |
| BYTE WINAPI | RtlAcquireResourceExclusive (LPRTL_RWLOCK, BYTE) |
| BYTE WINAPI | RtlAcquireResourceShared (LPRTL_RWLOCK, BYTE) |
| NTSTATUS WINAPI | RtlAddAce (PACL, DWORD, DWORD, PACE_HEADER, DWORD) |
| NTSTATUS WINAPI | RtlAddAccessAllowedAce (PACL, DWORD, DWORD, PSID) |
| NTSTATUS WINAPI | RtlAddAccessAllowedAceEx (PACL, DWORD, DWORD, DWORD, PSID) |
| NTSTATUS WINAPI | RtlAddAccessDeniedAce (PACL, DWORD, DWORD, PSID) |
| NTSTATUS WINAPI | RtlAddAccessDeniedAceEx (PACL, DWORD, DWORD, DWORD, PSID) |
| NTSTATUS WINAPI | RtlAddAtomToAtomTable (RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *) |
| NTSTATUS WINAPI | RtlAddAuditAccessAce (PACL, DWORD, DWORD, PSID, BOOL, BOOL) |
| PVOID WINAPI | RtlAddVectoredExceptionHandler (ULONG, PVECTORED_EXCEPTION_HANDLER) |
| NTSTATUS WINAPI | RtlAdjustPrivilege (ULONG, BOOLEAN, BOOLEAN, PBOOLEAN) |
| NTSTATUS WINAPI | RtlAllocateAndInitializeSid (PSID_IDENTIFIER_AUTHORITY, BYTE, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, PSID *) |
| RTL_HANDLE *WINAPI | RtlAllocateHandle (RTL_HANDLE_TABLE *, ULONG *) |
| PVOID WINAPI | RtlAllocateHeap (HANDLE, ULONG, SIZE_T) |
| WCHAR WINAPI | RtlAnsiCharToUnicodeChar (LPSTR *) |
| DWORD WINAPI | RtlAnsiStringToUnicodeSize (const STRING *) |
| NTSTATUS WINAPI | RtlAnsiStringToUnicodeString (PUNICODE_STRING, PCANSI_STRING, BOOLEAN) |
| NTSTATUS WINAPI | RtlAppendAsciizToString (STRING *, LPCSTR) |
| NTSTATUS WINAPI | RtlAppendStringToString (STRING *, const STRING *) |
| NTSTATUS WINAPI | RtlAppendUnicodeStringToString (UNICODE_STRING *, const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlAppendUnicodeToString (UNICODE_STRING *, LPCWSTR) |
| BOOLEAN WINAPI | RtlAreAllAccessesGranted (ACCESS_MASK, ACCESS_MASK) |
| BOOLEAN WINAPI | RtlAreAnyAccessesGranted (ACCESS_MASK, ACCESS_MASK) |
| BOOLEAN WINAPI | RtlAreBitsSet (PCRTL_BITMAP, ULONG, ULONG) |
| BOOLEAN WINAPI | RtlAreBitsClear (PCRTL_BITMAP, ULONG, ULONG) |
| NTSTATUS WINAPI | RtlCharToInteger (PCSZ, ULONG, PULONG) |
| NTSTATUS WINAPI | RtlCheckRegistryKey (ULONG, PWSTR) |
| void WINAPI | RtlClearAllBits (PRTL_BITMAP) |
| void WINAPI | RtlClearBits (PRTL_BITMAP, ULONG, ULONG) |
| PDEBUG_BUFFER WINAPI | RtlCreateQueryDebugBuffer (ULONG, BOOLEAN) |
| ULONG WINAPI | RtlCompactHeap (HANDLE, ULONG) |
| LONG WINAPI | RtlCompareString (const STRING *, const STRING *, BOOLEAN) |
| LONG WINAPI | RtlCompareUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN) |
| DWORD WINAPI | RtlComputeCrc32 (DWORD, PBYTE, INT) |
| NTSTATUS WINAPI | RtlConvertSidToUnicodeString (PUNICODE_STRING, PSID, BOOLEAN) |
| LONGLONG WINAPI | RtlConvertLongToLargeInteger (LONG) |
| ULONGLONG WINAPI | RtlConvertUlongToLargeInteger (ULONG) |
| void WINAPI | RtlCopyLuid (PLUID, const LUID *) |
| void WINAPI | RtlCopyLuidAndAttributesArray (ULONG, const LUID_AND_ATTRIBUTES *, PLUID_AND_ATTRIBUTES) |
| BOOLEAN WINAPI | RtlCopySid (DWORD, PSID, PSID) |
| NTSTATUS WINAPI | RtlCopySecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR) |
| void WINAPI | RtlCopyString (STRING *, const STRING *) |
| void WINAPI | RtlCopyUnicodeString (UNICODE_STRING *, const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlCreateAcl (PACL, DWORD, DWORD) |
| NTSTATUS WINAPI | RtlCreateAtomTable (ULONG, RTL_ATOM_TABLE *) |
| NTSTATUS WINAPI | RtlCreateEnvironment (BOOLEAN, PWSTR *) |
| HANDLE WINAPI | RtlCreateHeap (ULONG, PVOID, SIZE_T, SIZE_T, PVOID, PRTL_HEAP_DEFINITION) |
| NTSTATUS WINAPI | RtlCreateProcessParameters (RTL_USER_PROCESS_PARAMETERS **, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, PWSTR, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR, DWORD) |
| BOOLEAN WINAPI | RtlCreateUnicodeString (PUNICODE_STRING, LPCWSTR) |
| BOOLEAN WINAPI | RtlCreateUnicodeStringFromAsciiz (PUNICODE_STRING, LPCSTR) |
| NTSTATUS WINAPI | RtlCreateUserThread (HANDLE, const SECURITY_DESCRIPTOR *, BOOLEAN, PVOID, SIZE_T, SIZE_T, PRTL_THREAD_START_ROUTINE, void *, HANDLE *, CLIENT_ID *) |
| NTSTATUS WINAPI | RtlDeleteAce (PACL, DWORD) |
| NTSTATUS WINAPI | RtlDeleteAtomFromAtomTable (RTL_ATOM_TABLE, RTL_ATOM) |
| NTSTATUS WINAPI | RtlDeleteCriticalSection (RTL_CRITICAL_SECTION *) |
| NTSTATUS WINAPI | RtlDeleteRegistryValue (ULONG, PCWSTR, PCWSTR) |
| void WINAPI | RtlDeleteResource (LPRTL_RWLOCK) |
| DWORD WINAPI | RtlDeleteSecurityObject (DWORD) |
| PRTL_USER_PROCESS_PARAMETERS WINAPI | RtlDeNormalizeProcessParams (RTL_USER_PROCESS_PARAMETERS *) |
| NTSTATUS WINAPI | RtlDestroyAtomTable (RTL_ATOM_TABLE) |
| NTSTATUS WINAPI | RtlDestroyEnvironment (PWSTR) |
| NTSTATUS WINAPI | RtlDestroyHandleTable (RTL_HANDLE_TABLE *) |
| HANDLE WINAPI | RtlDestroyHeap (HANDLE) |
| void WINAPI | RtlDestroyProcessParameters (RTL_USER_PROCESS_PARAMETERS *) |
| NTSTATUS WINAPI | RtlDestroyQueryDebugBuffer (PDEBUG_BUFFER) |
| DOS_PATHNAME_TYPE WINAPI | RtlDetermineDosPathNameType_U (PCWSTR) |
| BOOLEAN WINAPI | RtlDoesFileExists_U (LPCWSTR) |
| BOOLEAN WINAPI | RtlDosPathNameToNtPathName_U (PCWSTR, PUNICODE_STRING, PCWSTR *, CURDIR *) |
| ULONG WINAPI | RtlDosSearchPath_U (LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR *) |
| WCHAR WINAPI | RtlDowncaseUnicodeChar (WCHAR) |
| NTSTATUS WINAPI | RtlDowncaseUnicodeString (UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN) |
| void WINAPI | RtlDumpResource (LPRTL_RWLOCK) |
| NTSTATUS WINAPI | RtlDuplicateUnicodeString (int, const UNICODE_STRING *, UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlEmptyAtomTable (RTL_ATOM_TABLE, BOOLEAN) |
| LONGLONG WINAPI | RtlEnlargedIntegerMultiply (INT, INT) |
| ULONGLONG WINAPI | RtlEnlargedUnsignedMultiply (UINT, UINT) |
| UINT WINAPI | RtlEnlargedUnsignedDivide (ULONGLONG, UINT, UINT *) |
| NTSTATUS WINAPI | RtlEnterCriticalSection (RTL_CRITICAL_SECTION *) |
| void WINAPI | RtlEraseUnicodeString (UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlEqualComputerName (const UNICODE_STRING *, const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlEqualDomainName (const UNICODE_STRING *, const UNICODE_STRING *) |
| BOOLEAN WINAPI | RtlEqualLuid (const LUID *, const LUID *) |
| BOOL WINAPI | RtlEqualPrefixSid (PSID, PSID) |
| BOOL WINAPI | RtlEqualSid (PSID, PSID) |
| BOOLEAN WINAPI | RtlEqualString (const STRING *, const STRING *, BOOLEAN) |
| BOOLEAN WINAPI | RtlEqualUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN) |
| DECLSPEC_NORETURN void WINAPI | RtlExitUserThread (ULONG) |
| NTSTATUS WINAPI | RtlExpandEnvironmentStrings_U (PWSTR, const UNICODE_STRING *, UNICODE_STRING *, ULONG *) |
| LONGLONG WINAPI | RtlExtendedMagicDivide (LONGLONG, LONGLONG, INT) |
| LONGLONG WINAPI | RtlExtendedIntegerMultiply (LONGLONG, INT) |
| LONGLONG WINAPI | RtlExtendedLargeIntegerDivide (LONGLONG, INT, INT *) |
| NTSTATUS WINAPI | RtlFindCharInUnicodeString (int, const UNICODE_STRING *, const UNICODE_STRING *, USHORT *) |
| ULONG WINAPI | RtlFindClearBits (PCRTL_BITMAP, ULONG, ULONG) |
| ULONG WINAPI | RtlFindClearBitsAndSet (PRTL_BITMAP, ULONG, ULONG) |
| ULONG WINAPI | RtlFindClearRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN) |
| ULONG WINAPI | RtlFindLastBackwardRunSet (PCRTL_BITMAP, ULONG, PULONG) |
| ULONG WINAPI | RtlFindLastBackwardRunClear (PCRTL_BITMAP, ULONG, PULONG) |
| CCHAR WINAPI | RtlFindLeastSignificantBit (ULONGLONG) |
| ULONG WINAPI | RtlFindLongestRunSet (PCRTL_BITMAP, PULONG) |
| ULONG WINAPI | RtlFindLongestRunClear (PCRTL_BITMAP, PULONG) |
| NTSTATUS WINAPI | RtlFindMessage (HMODULE, ULONG, ULONG, ULONG, const MESSAGE_RESOURCE_ENTRY **) |
| CCHAR WINAPI | RtlFindMostSignificantBit (ULONGLONG) |
| ULONG WINAPI | RtlFindNextForwardRunSet (PCRTL_BITMAP, ULONG, PULONG) |
| ULONG WINAPI | RtlFindNextForwardRunClear (PCRTL_BITMAP, ULONG, PULONG) |
| ULONG WINAPI | RtlFindSetBits (PCRTL_BITMAP, ULONG, ULONG) |
| ULONG WINAPI | RtlFindSetBitsAndClear (PRTL_BITMAP, ULONG, ULONG) |
| ULONG WINAPI | RtlFindSetRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN) |
| BOOLEAN WINAPI | RtlFirstFreeAce (PACL, PACE_HEADER *) |
| NTSTATUS WINAPI | RtlFormatCurrentUserKeyPath (PUNICODE_STRING) |
| NTSTATUS WINAPI | RtlFormatMessage (LPWSTR, UCHAR, BOOLEAN, BOOLEAN, BOOLEAN, va_list *, LPWSTR, ULONG) |
| void WINAPI | RtlFreeAnsiString (PANSI_STRING) |
| BOOLEAN WINAPI | RtlFreeHandle (RTL_HANDLE_TABLE *, RTL_HANDLE *) |
| BOOLEAN WINAPI | RtlFreeHeap (HANDLE, ULONG, PVOID) |
| void WINAPI | RtlFreeOemString (POEM_STRING) |
| DWORD WINAPI | RtlFreeSid (PSID) |
| void WINAPI | RtlFreeUnicodeString (PUNICODE_STRING) |
| NTSTATUS WINAPI | RtlGetAce (PACL, DWORD, LPVOID *) |
| NTSTATUS WINAPI | RtlGetControlSecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL, LPDWORD) |
| NTSTATUS WINAPI | RtlGetCurrentDirectory_U (ULONG, LPWSTR) |
| PEB *WINAPI | RtlGetCurrentPeb (void) |
| NTSTATUS WINAPI | RtlGetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN) |
| ULONG WINAPI | RtlGetFullPathName_U (PCWSTR, ULONG, PWSTR, PWSTR *) |
| NTSTATUS WINAPI | RtlGetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN) |
| NTSTATUS WINAPI | RtlGetLastNtStatus (void) |
| DWORD WINAPI | RtlGetLastWin32Error (void) |
| DWORD WINAPI | RtlGetLongestNtPathLength (void) |
| BOOLEAN WINAPI | RtlGetNtProductType (LPDWORD) |
| NTSTATUS WINAPI | RtlGetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN) |
| ULONG WINAPI | RtlGetProcessHeaps (ULONG, HANDLE *) |
| NTSTATUS WINAPI | RtlGetSaclSecurityDescriptor (PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN) |
| NTSTATUS WINAPI | RtlGUIDFromString (PUNICODE_STRING, GUID *) |
| PSID_IDENTIFIER_AUTHORITY WINAPI | RtlIdentifierAuthoritySid (PSID) |
| PVOID WINAPI | RtlImageDirectoryEntryToData (HMODULE, BOOL, WORD, ULONG *) |
| PIMAGE_NT_HEADERS WINAPI | RtlImageNtHeader (HMODULE) |
| PIMAGE_SECTION_HEADER WINAPI | RtlImageRvaToSection (const IMAGE_NT_HEADERS *, HMODULE, DWORD) |
| PVOID WINAPI | RtlImageRvaToVa (const IMAGE_NT_HEADERS *, HMODULE, DWORD, IMAGE_SECTION_HEADER **) |
| NTSTATUS WINAPI | RtlImpersonateSelf (SECURITY_IMPERSONATION_LEVEL) |
| void WINAPI | RtlInitString (PSTRING, PCSZ) |
| void WINAPI | RtlInitAnsiString (PANSI_STRING, PCSZ) |
| void WINAPI | RtlInitUnicodeString (PUNICODE_STRING, PCWSTR) |
| NTSTATUS WINAPI | RtlInitUnicodeStringEx (PUNICODE_STRING, PCWSTR) |
| NTSTATUS WINAPI | RtlInitializeCriticalSection (RTL_CRITICAL_SECTION *) |
| NTSTATUS WINAPI | RtlInitializeCriticalSectionAndSpinCount (RTL_CRITICAL_SECTION *, DWORD) |
| void WINAPI | RtlInitializeBitMap (PRTL_BITMAP, PULONG, ULONG) |
| void WINAPI | RtlInitializeHandleTable (ULONG, ULONG, RTL_HANDLE_TABLE *) |
| void WINAPI | RtlInitializeResource (LPRTL_RWLOCK) |
| BOOL WINAPI | RtlInitializeSid (PSID, PSID_IDENTIFIER_AUTHORITY, BYTE) |
| NTSTATUS WINAPI | RtlInt64ToUnicodeString (ULONGLONG, ULONG, UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlIntegerToChar (ULONG, ULONG, ULONG, PCHAR) |
| NTSTATUS WINAPI | RtlIntegerToUnicodeString (ULONG, ULONG, UNICODE_STRING *) |
| ULONG WINAPI | RtlIsDosDeviceName_U (PCWSTR) |
| BOOLEAN WINAPI | RtlIsNameLegalDOS8Dot3 (const UNICODE_STRING *, POEM_STRING, PBOOLEAN) |
| BOOLEAN WINAPI | RtlIsTextUnicode (LPCVOID, INT, INT *) |
| BOOLEAN WINAPI | RtlIsValidHandle (const RTL_HANDLE_TABLE *, const RTL_HANDLE *) |
| BOOLEAN WINAPI | RtlIsValidIndexHandle (const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **) |
| LONGLONG WINAPI | RtlLargeIntegerAdd (LONGLONG, LONGLONG) |
| LONGLONG WINAPI | RtlLargeIntegerArithmeticShift (LONGLONG, INT) |
| ULONGLONG WINAPI | RtlLargeIntegerDivide (ULONGLONG, ULONGLONG, ULONGLONG *) |
| LONGLONG WINAPI | RtlLargeIntegerNegate (LONGLONG) |
| LONGLONG WINAPI | RtlLargeIntegerShiftLeft (LONGLONG, INT) |
| LONGLONG WINAPI | RtlLargeIntegerShiftRight (LONGLONG, INT) |
| LONGLONG WINAPI | RtlLargeIntegerSubtract (LONGLONG, LONGLONG) |
| NTSTATUS WINAPI | RtlLargeIntegerToChar (const ULONGLONG *, ULONG, ULONG, PCHAR) |
| NTSTATUS WINAPI | RtlLeaveCriticalSection (RTL_CRITICAL_SECTION *) |
| DWORD WINAPI | RtlLengthRequiredSid (DWORD) |
| ULONG WINAPI | RtlLengthSecurityDescriptor (PSECURITY_DESCRIPTOR) |
| DWORD WINAPI | RtlLengthSid (PSID) |
| NTSTATUS WINAPI | RtlLocalTimeToSystemTime (const LARGE_INTEGER *, PLARGE_INTEGER) |
| BOOLEAN WINAPI | RtlLockHeap (HANDLE) |
| NTSTATUS WINAPI | RtlLookupAtomInAtomTable (RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *) |
| NTSTATUS WINAPI | RtlMakeSelfRelativeSD (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, LPDWORD) |
| void WINAPI | RtlMapGenericMask (PACCESS_MASK, const GENERIC_MAPPING *) |
| NTSTATUS WINAPI | RtlMultiByteToUnicodeN (LPWSTR, DWORD, LPDWORD, LPCSTR, DWORD) |
| NTSTATUS WINAPI | RtlMultiByteToUnicodeSize (DWORD *, LPCSTR, UINT) |
| DWORD WINAPI | RtlNewSecurityObject (DWORD, DWORD, DWORD, DWORD, DWORD, DWORD) |
| PRTL_USER_PROCESS_PARAMETERS WINAPI | RtlNormalizeProcessParams (RTL_USER_PROCESS_PARAMETERS *) |
| ULONG WINAPI | RtlNtStatusToDosError (NTSTATUS) |
| ULONG WINAPI | RtlNtStatusToDosErrorNoTeb (NTSTATUS) |
| ULONG WINAPI | RtlNumberOfSetBits (PCRTL_BITMAP) |
| ULONG WINAPI | RtlNumberOfClearBits (PCRTL_BITMAP) |
| UINT WINAPI | RtlOemStringToUnicodeSize (const STRING *) |
| NTSTATUS WINAPI | RtlOemStringToUnicodeString (UNICODE_STRING *, const STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlOemToUnicodeN (LPWSTR, DWORD, LPDWORD, LPCSTR, DWORD) |
| DWORD WINAPI | RtlOpenCurrentUser (ACCESS_MASK, PHANDLE) |
| NTSTATUS WINAPI | RtlPinAtomInAtomTable (PRTL_ATOM_TABLE, RTL_ATOM) |
| BOOLEAN WINAPI | RtlPrefixString (const STRING *, const STRING *, BOOLEAN) |
| BOOLEAN WINAPI | RtlPrefixUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlQueryAtomInAtomTable (RTL_ATOM_TABLE, RTL_ATOM, ULONG *, ULONG *, WCHAR *, ULONG *) |
| NTSTATUS WINAPI | RtlQueryEnvironmentVariable_U (PWSTR, PUNICODE_STRING, PUNICODE_STRING) |
| NTSTATUS WINAPI | RtlQueryInformationAcl (PACL, LPVOID, DWORD, ACL_INFORMATION_CLASS) |
| NTSTATUS WINAPI | RtlQueryProcessDebugInformation (ULONG, ULONG, PDEBUG_BUFFER) |
| NTSTATUS WINAPI | RtlQueryRegistryValues (ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID) |
| NTSTATUS WINAPI | RtlQueryTimeZoneInformation (RTL_TIME_ZONE_INFORMATION *) |
| void WINAPI | RtlRaiseException (PEXCEPTION_RECORD) |
| void WINAPI | RtlRaiseStatus (NTSTATUS) |
| ULONG WINAPI | RtlRandom (PULONG) |
| PVOID WINAPI | RtlReAllocateHeap (HANDLE, ULONG, PVOID, SIZE_T) |
| void WINAPI | RtlReleasePebLock (void) |
| void WINAPI | RtlReleaseResource (LPRTL_RWLOCK) |
| ULONG WINAPI | RtlRemoveVectoredExceptionHandler (PVOID) |
| void WINAPI | RtlRestoreLastWin32Error (DWORD) |
| void WINAPI | RtlSecondsSince1970ToTime (DWORD, LARGE_INTEGER *) |
| void WINAPI | RtlSecondsSince1980ToTime (DWORD, LARGE_INTEGER *) |
| NTSTATUS WINAPI | RtlSelfRelativeToAbsoluteSD (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PDWORD, PACL, PDWORD, PACL, PDWORD, PSID, PDWORD, PSID, PDWORD) |
| void WINAPI | RtlSetAllBits (PRTL_BITMAP) |
| void WINAPI | RtlSetBits (PRTL_BITMAP, ULONG, ULONG) |
| ULONG WINAPI | RtlSetCriticalSectionSpinCount (RTL_CRITICAL_SECTION *, ULONG) |
| NTSTATUS WINAPI | RtlSetCurrentDirectory_U (const UNICODE_STRING *) |
| void WINAPI | RtlSetCurrentEnvironment (PWSTR, PWSTR *) |
| NTSTATUS WINAPI | RtlSetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR, BOOLEAN, PACL, BOOLEAN) |
| NTSTATUS WINAPI | RtlSetEnvironmentVariable (PWSTR *, PUNICODE_STRING, PUNICODE_STRING) |
| NTSTATUS WINAPI | RtlSetOwnerSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID, BOOLEAN) |
| NTSTATUS WINAPI | RtlSetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID, BOOLEAN) |
| void WINAPI | RtlSetLastWin32Error (DWORD) |
| void WINAPI | RtlSetLastWin32ErrorAndNtStatusFromNtStatus (NTSTATUS) |
| NTSTATUS WINAPI | RtlSetSaclSecurityDescriptor (PSECURITY_DESCRIPTOR, BOOLEAN, PACL, BOOLEAN) |
| NTSTATUS WINAPI | RtlSetTimeZoneInformation (const RTL_TIME_ZONE_INFORMATION *) |
| SIZE_T WINAPI | RtlSizeHeap (HANDLE, ULONG, PVOID) |
| NTSTATUS WINAPI | RtlStringFromGUID (REFGUID, PUNICODE_STRING) |
| LPDWORD WINAPI | RtlSubAuthoritySid (PSID, DWORD) |
| LPBYTE WINAPI | RtlSubAuthorityCountSid (PSID) |
| NTSTATUS WINAPI | RtlSystemTimeToLocalTime (const LARGE_INTEGER *, PLARGE_INTEGER) |
| void WINAPI | RtlTimeToTimeFields (const LARGE_INTEGER *, PTIME_FIELDS) |
| BOOLEAN WINAPI | RtlTimeFieldsToTime (PTIME_FIELDS, PLARGE_INTEGER) |
| void WINAPI | RtlTimeToElapsedTimeFields (const LARGE_INTEGER *, PTIME_FIELDS) |
| BOOLEAN WINAPI | RtlTimeToSecondsSince1970 (const LARGE_INTEGER *, LPDWORD) |
| BOOLEAN WINAPI | RtlTimeToSecondsSince1980 (const LARGE_INTEGER *, LPDWORD) |
| BOOL WINAPI | RtlTryEnterCriticalSection (RTL_CRITICAL_SECTION *) |
| ULONGLONG __cdecl | RtlUlonglongByteSwap (ULONGLONG) |
| DWORD WINAPI | RtlUnicodeStringToAnsiSize (const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlUnicodeStringToAnsiString (PANSI_STRING, PCUNICODE_STRING, BOOLEAN) |
| NTSTATUS WINAPI | RtlUnicodeStringToInteger (const UNICODE_STRING *, ULONG, ULONG *) |
| DWORD WINAPI | RtlUnicodeStringToOemSize (const UNICODE_STRING *) |
| NTSTATUS WINAPI | RtlUnicodeStringToOemString (POEM_STRING, PCUNICODE_STRING, BOOLEAN) |
| NTSTATUS WINAPI | RtlUnicodeToMultiByteN (LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD) |
| NTSTATUS WINAPI | RtlUnicodeToMultiByteSize (PULONG, PCWSTR, ULONG) |
| NTSTATUS WINAPI | RtlUnicodeToOemN (LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD) |
| ULONG WINAPI | RtlUniform (PULONG) |
| BOOLEAN WINAPI | RtlUnlockHeap (HANDLE) |
| WCHAR WINAPI | RtlUpcaseUnicodeChar (WCHAR) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeString (UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeStringToAnsiString (STRING *, const UNICODE_STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeStringToCountedOemString (STRING *, const UNICODE_STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeStringToOemString (STRING *, const UNICODE_STRING *, BOOLEAN) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeToMultiByteN (LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD) |
| NTSTATUS WINAPI | RtlUpcaseUnicodeToOemN (LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD) |
| CHAR WINAPI | RtlUpperChar (CHAR) |
| void WINAPI | RtlUpperString (STRING *, const STRING *) |
| NTSTATUS WINAPI | RtlValidSecurityDescriptor (PSECURITY_DESCRIPTOR) |
| BOOLEAN WINAPI | RtlValidAcl (PACL) |
| BOOLEAN WINAPI | RtlValidSid (PSID) |
| BOOLEAN WINAPI | RtlValidateHeap (HANDLE, ULONG, LPCVOID) |
| NTSTATUS WINAPI | RtlWalkHeap (HANDLE, PVOID) |
| NTSTATUS WINAPI | RtlpNtCreateKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG) |
| NTSTATUS WINAPI | RtlpWaitForCriticalSection (RTL_CRITICAL_SECTION *) |
| NTSTATUS WINAPI | RtlpUnWaitCriticalSection (RTL_CRITICAL_SECTION *) |
| ULONG WINAPI | vDbgPrintEx (IN ULONG ComponentId, IN ULONG Level, IN LPCSTR Format, IN va_list ap) |
| ULONG WINAPI | vDbgPrintExWithPrefix (IN LPCSTR Prefix, IN ULONG ComponentId, IN ULONG Level, IN LPCSTR Format, IN va_list ap) |
| NTSTATUS | wine_nt_to_unix_file_name (const UNICODE_STRING *nameW, ANSI_STRING *unix_name_ret, UINT disposition, BOOLEAN check_case) |
| static __inline BOOLEAN | RtlCheckBit (PCRTL_BITMAP lpBits, ULONG ulBit) |
| static __inline USHORT | RtlUshortByteSwap (USHORT s) |
| static __inline ULONG | RtlUlongByteSwap (ULONG i) |
| NTSTATUS WINAPI | LdrDisableThreadCalloutsForDll (HMODULE) |
| NTSTATUS WINAPI | LdrFindEntryForAddress (const void *, PLDR_MODULE *) |
| NTSTATUS WINAPI | LdrLockLoaderLock (ULONG, ULONG *, ULONG *) |
| NTSTATUS WINAPI | LdrQueryProcessModuleInformation (SYSTEM_MODULE_INFORMATION *, ULONG, ULONG *) |
| NTSTATUS WINAPI | LdrUnloadDll (HMODULE) |
| NTSTATUS WINAPI | LdrUnlockLoaderLock (ULONG, ULONG) |
| static __inline PLIST_ENTRY | RemoveHeadList (PLIST_ENTRY le) |
| static __inline PLIST_ENTRY | RemoveTailList (PLIST_ENTRY le) |
Variables |
| typedef | ULONG |
| typedef | LONG |
1.7.6.1
