ReactOS Development > Doxygen

include
ddk

#include <ntddk.h>
#include <excpt.h>
#include <ntdef.h>
#include <ntnls.h>
#include <ntstatus.h>
#include <bugcodes.h>
#include <ntiologc.h>
#include "csq.h"

Go to the source code of this file.

Data Structures
struct	SID_IDENTIFIER_AUTHORITY
struct	SID
struct	PSID_AND_ATTRIBUTES
struct	PSID_AND_ATTRIBUTES_HASH
struct	PACE_HEADER
struct	PACCESS_ALLOWED_ACE
struct	PACCESS_DENIED_ACE
struct	PSYSTEM_AUDIT_ACE
struct	PSYSTEM_ALARM_ACE
struct	PSYSTEM_MANDATORY_LABEL_ACE
struct	PISECURITY_DESCRIPTOR_RELATIVE
struct	SECURITY_DESCRIPTOR
struct	POBJECT_TYPE_LIST
struct	PACCESS_REASONS
struct	PSE_SECURITY_DESCRIPTOR
struct	PSE_ACCESS_REQUEST
struct	PSE_ACCESS_REPLY
struct	PSE_AUDIT_INFO
struct	PTOKEN_USER
struct	LPTOKEN_GROUPS
struct	LPTOKEN_PRIVILEGES
struct	PTOKEN_OWNER
struct	PTOKEN_PRIMARY_GROUP
struct	PTOKEN_DEFAULT_DACL
struct	PTOKEN_GROUPS_AND_PRIVILEGES
struct	PTOKEN_LINKED_TOKEN
struct	PTOKEN_ELEVATION
struct	PTOKEN_MANDATORY_LABEL
struct	PTOKEN_MANDATORY_POLICY
struct	PTOKEN_ACCESS_INFORMATION
struct	PTOKEN_AUDIT_POLICY
struct	PTOKEN_SOURCE
struct	PTOKEN_STATISTICS
struct	PTOKEN_CONTROL
struct	PTOKEN_ORIGIN
struct	PSE_EXPORTS
struct	PSECURITY_CLIENT_CONTEXT
struct	PRTL_HEAP_PARAMETERS
struct	PGENERATE_NAME_CONTEXT
struct	PPREFIX_TABLE_ENTRY
struct	PPREFIX_TABLE
struct	PUNICODE_PREFIX_TABLE_ENTRY
struct	PUNICODE_PREFIX_TABLE
struct	PCOMPRESSED_DATA_INFO
struct	PMSV1_0_INTERACTIVE_LOGON
struct	PMSV1_0_INTERACTIVE_PROFILE
struct	PMSV1_0_LM20_LOGON
struct	PMSV1_0_SUBAUTH_LOGON
struct	PMSV1_0_LM20_LOGON_PROFILE
struct	PMSV1_0_SUPPLEMENTAL_CREDENTIAL
struct	PMSV1_0_NTLM3_RESPONSE
struct	PMSV1_0_AV_PAIR
struct	PMSV1_0_LM20_CHALLENGE_REQUEST
struct	PMSV1_0_LM20_CHALLENGE_RESPONSE
struct	PMSV1_0_GETCHALLENRESP_REQUEST_V1
struct	PMSV1_0_GETCHALLENRESP_REQUEST
struct	PMSV1_0_GETCHALLENRESP_RESPONSE
struct	PMSV1_0_ENUMUSERS_REQUEST
struct	PMSV1_0_ENUMUSERS_RESPONSE
struct	PMSV1_0_GETUSERINFO_REQUEST
struct	PMSV1_0_GETUSERINFO_RESPONSE
struct	PFILE_NOTIFY_INFORMATION
struct	PFILE_DIRECTORY_INFORMATION
struct	PFILE_FULL_DIR_INFORMATION
struct	PFILE_ID_FULL_DIR_INFORMATION
struct	PFILE_BOTH_DIR_INFORMATION
struct	PFILE_ID_BOTH_DIR_INFORMATION
struct	PFILE_NAMES_INFORMATION
struct	PFILE_ID_GLOBAL_TX_DIR_INFORMATION
struct	PFILE_OBJECTID_INFORMATION
struct	PFILE_INTERNAL_INFORMATION
struct	PFILE_EA_INFORMATION
struct	PFILE_ACCESS_INFORMATION
struct	PFILE_MODE_INFORMATION
struct	PFILE_ALL_INFORMATION
struct	PFILE_ALLOCATION_INFORMATION
struct	PFILE_COMPRESSION_INFORMATION
struct	PFILE_LINK_INFORMATION
struct	PFILE_MOVE_CLUSTER_INFORMATION
struct	PFILE_RENAME_INFORMATION
struct	PFILE_STREAM_INFORMATION
struct	PFILE_TRACKING_INFORMATION
struct	PFILE_COMPLETION_INFORMATION
struct	PFILE_PIPE_INFORMATION
struct	PFILE_PIPE_LOCAL_INFORMATION
struct	PFILE_PIPE_REMOTE_INFORMATION
struct	PFILE_MAILSLOT_QUERY_INFORMATION
struct	PFILE_MAILSLOT_SET_INFORMATION
struct	PFILE_REPARSE_POINT_INFORMATION
struct	PFILE_LINK_ENTRY_INFORMATION
struct	PFILE_LINKS_INFORMATION
struct	PFILE_NETWORK_PHYSICAL_NAME_INFORMATION
struct	PFILE_STANDARD_LINK_INFORMATION
struct	PFILE_GET_EA_INFORMATION
struct	PFILE_REMOTE_PROTOCOL_INFORMATION
struct	PFILE_GET_QUOTA_INFORMATION
struct	PFILE_QUOTA_INFORMATION
struct	PFILE_FS_ATTRIBUTE_INFORMATION
struct	PFILE_FS_DRIVER_PATH_INFORMATION
struct	PFILE_FS_VOLUME_FLAGS_INFORMATION
struct	PFILE_FS_CONTROL_INFORMATION
struct	PPATHNAME_BUFFER
struct	PFSCTL_QUERY_FAT_BPB_BUFFER
struct	PFILESYSTEM_STATISTICS
struct	PFAT_STATISTICS
struct	PEXFAT_STATISTICS
struct	PNTFS_STATISTICS
struct	PREPARSE_DATA_BUFFER
struct	PREPARSE_GUID_DATA_BUFFER
struct	PREPARSE_INDEX_KEY
struct	PFILE_PIPE_ASSIGN_EVENT_BUFFER
struct	PFILE_PIPE_EVENT_BUFFER
struct	PFILE_PIPE_PEEK_BUFFER
struct	PFILE_PIPE_WAIT_FOR_BUFFER
struct	PFILE_PIPE_CLIENT_PROCESS_BUFFER
struct	PFILE_PIPE_CLIENT_PROCESS_BUFFER_EX
struct	PLINK_TRACKING_INFORMATION
struct	PREMOTE_LINK_TRACKING_INFORMATION
union	PFS_FILTER_PARAMETERS
struct	PFS_FILTER_CALLBACK_DATA
struct	PFS_FILTER_CALLBACKS
struct	PIO_PRIORITY_INFO
struct	PPUBLIC_OBJECT_BASIC_INFORMATION
struct	PPUBLIC_OBJECT_TYPE_INFORMATION
struct	PRKAPC_STATE
struct	PRKQUEUE
struct	PREAD_LIST
union	PMM_PREFETCH_FLAGS
struct	PFSRTL_COMMON_FCB_HEADER
struct	PFSRTL_ADVANCED_FCB_HEADER
struct	PFSRTL_AUXILIARY_BUFFER
struct	PFSRTL_MUP_PROVIDER_INFO_LEVEL_1
struct	PFSRTL_MUP_PROVIDER_INFO_LEVEL_2
struct	PFSRTL_PER_FILE_CONTEXT
struct	PFSRTL_PER_STREAM_CONTEXT
struct	PFSRTL_PER_FILEOBJECT_CONTEXT
struct	PFILE_LOCK_INFO
struct	PFILE_LOCK
struct	PTUNNEL
struct	PBASE_MCB
struct	PLARGE_MCB
struct	PMCB
struct	PEOF_WAIT_BLOCK
struct	POPLOCK_KEY_ECP_CONTEXT
struct	PCC_FILE_SIZES
struct	PCACHE_MANAGER_CALLBACKS
struct	PCACHE_UNINITIALIZE_EVENT
struct	PSEC_NEGOTIATION_INFO
struct	PSEC_CHANNEL_BINDINGS
struct	PSEC_WINNT_AUTH_IDENTITY_EX2
struct	PSEC_WINNT_AUTH_IDENTITY_W
struct	PSEC_WINNT_AUTH_IDENTITY_EXW
struct	PSecHandle
struct	PSecBuffer
struct	PSecBufferDesc
struct	PSecPkgInfoW
struct	PSecPkgCredentials_NamesW
struct	PSecPkgContext_NamesW
struct	PSecPkgContext_SubjectAttributes
struct	PSecPkgContext_CredInfo
struct	PSecPkgContext_NegoPackageInfo
struct	PSecPkgContext_NegoStatus
struct	PSecPkgContext_Sizes
struct	PSecPkgContext_StreamSizes
struct	PSecPkgContext_Lifespan
struct	PSecPkgContext_PasswordExpiry
struct	PSecPkgContext_ProtoInfoW
struct	PSecPkgContext_KeyInfoW
struct	PSecPkgContext_SessionKey
struct	PSecPkgContext_NegoKeys
struct	PSecPkgContext_DceInfo
struct	PSecPkgContext_PackageInfoW
struct	PSecPkgContext_UserFlags
struct	PSecPkgContext_Flags
struct	PSecPkgContext_NegotiationInfoW
struct	PSecPkgContext_AuthorityW
struct	PSecurityFunctionTableW
struct	PNETWORK_OPEN_ECP_CONTEXT
struct	PNETWORK_OPEN_ECP_CONTEXT_V0
struct	PPREFETCH_OPEN_ECP_CONTEXT
struct	PPNFS_OPEN_ECP_CONTEXT
struct	PSRV_OPEN_ECP_CONTEXT
struct	PQUERY_PATH_REQUEST
struct	PQUERY_PATH_REQUEST_EX
struct	PQUERY_PATH_RESPONSE
struct	POBJECT_BASIC_INFORMATION
struct	PBITMAP_RANGE
struct	PFILE_COPY_ON_WRITE_INFORMATION
struct	PFILE_FULL_DIRECTORY_INFORMATION
struct	PFILE_SHARED_LOCK_ENTRY
struct	PFILE_EXCLUSIVE_LOCK_ENTRY
struct	PFILE_MAILSLOT_PEEK_BUFFER
struct	PFILE_OLE_CLASSID_INFORMATION
struct	PFILE_OLE_ALL_INFORMATION
struct	PFILE_OLE_DIR_INFORMATION
struct	PFILE_OLE_INFORMATION
struct	PFILE_OLE_STATE_BITS_INFORMATION
struct	PMAPPING_PAIR
struct	PGET_RETRIEVAL_DESCRIPTOR
struct	PMBCB
struct	PMOVEFILE_DESCRIPTOR
struct	POBJECT_BASIC_INFO
struct	POBJECT_HANDLE_ATTRIBUTE_INFO
struct	POBJECT_NAME_INFO
struct	POBJECT_PROTECTION_INFO
struct	POBJECT_TYPE_INFO
struct	POBJECT_ALL_TYPES_INFO
struct	PPORT_MESSAGE
struct	PPORT_VIEW
struct	PREMOTE_PORT_VIEW
struct	PVAD_HEADER
Defines
#define	_NTIFS_INCLUDED_
#define	_GNU_NTIFS_
#define	FlagOn(_F, _SF) ((_F) & (_SF))
#define	BooleanFlagOn(F, SF) ((BOOLEAN)(((F) & (SF)) != 0))
#define	SetFlag(_F, _SF) ((_F) \|= (_SF))
#define	ClearFlag(_F, _SF) ((_F) &= ~(_SF))
#define	SID_IDENTIFIER_AUTHORITY_DEFINED
#define	SID_DEFINED
#define	SID_REVISION 1
#define	SID_MAX_SUB_AUTHORITIES 15
#define	SID_RECOMMENDED_SUB_AUTHORITIES 1
#define	SECURITY_MAX_SID_SIZE (sizeof(SID) - sizeof(ULONG) + (SID_MAX_SUB_AUTHORITIES * sizeof(ULONG)))
#define	SID_HASH_SIZE 32
#define	SECURITY_NULL_SID_AUTHORITY {0,0,0,0,0,0}
#define	SECURITY_WORLD_SID_AUTHORITY {0,0,0,0,0,1}
#define	SECURITY_LOCAL_SID_AUTHORITY {0,0,0,0,0,2}
#define	SECURITY_CREATOR_SID_AUTHORITY {0,0,0,0,0,3}
#define	SECURITY_NON_UNIQUE_AUTHORITY {0,0,0,0,0,4}
#define	SECURITY_RESOURCE_MANAGER_AUTHORITY {0,0,0,0,0,9}
#define	SECURITY_NULL_RID (0x00000000L)
#define	SECURITY_WORLD_RID (0x00000000L)
#define	SECURITY_LOCAL_RID (0x00000000L)
#define	SECURITY_LOCAL_LOGON_RID (0x00000001L)
#define	SECURITY_CREATOR_OWNER_RID (0x00000000L)
#define	SECURITY_CREATOR_GROUP_RID (0x00000001L)
#define	SECURITY_CREATOR_OWNER_SERVER_RID (0x00000002L)
#define	SECURITY_CREATOR_GROUP_SERVER_RID (0x00000003L)
#define	SECURITY_CREATOR_OWNER_RIGHTS_RID (0x00000004L)
#define	SECURITY_NT_AUTHORITY {0,0,0,0,0,5}
#define	SECURITY_DIALUP_RID (0x00000001L)
#define	SECURITY_NETWORK_RID (0x00000002L)
#define	SECURITY_BATCH_RID (0x00000003L)
#define	SECURITY_INTERACTIVE_RID (0x00000004L)
#define	SECURITY_LOGON_IDS_RID (0x00000005L)
#define	SECURITY_LOGON_IDS_RID_COUNT (3L)
#define	SECURITY_SERVICE_RID (0x00000006L)
#define	SECURITY_ANONYMOUS_LOGON_RID (0x00000007L)
#define	SECURITY_PROXY_RID (0x00000008L)
#define	SECURITY_ENTERPRISE_CONTROLLERS_RID (0x00000009L)
#define	SECURITY_SERVER_LOGON_RID SECURITY_ENTERPRISE_CONTROLLERS_RID
#define	SECURITY_PRINCIPAL_SELF_RID (0x0000000AL)
#define	SECURITY_AUTHENTICATED_USER_RID (0x0000000BL)
#define	SECURITY_RESTRICTED_CODE_RID (0x0000000CL)
#define	SECURITY_TERMINAL_SERVER_RID (0x0000000DL)
#define	SECURITY_REMOTE_LOGON_RID (0x0000000EL)
#define	SECURITY_THIS_ORGANIZATION_RID (0x0000000FL)
#define	SECURITY_IUSER_RID (0x00000011L)
#define	SECURITY_LOCAL_SYSTEM_RID (0x00000012L)
#define	SECURITY_LOCAL_SERVICE_RID (0x00000013L)
#define	SECURITY_NETWORK_SERVICE_RID (0x00000014L)
#define	SECURITY_NT_NON_UNIQUE (0x00000015L)
#define	SECURITY_NT_NON_UNIQUE_SUB_AUTH_COUNT (3L)
#define	SECURITY_ENTERPRISE_READONLY_CONTROLLERS_RID (0x00000016L)
#define	SECURITY_BUILTIN_DOMAIN_RID (0x00000020L)
#define	SECURITY_WRITE_RESTRICTED_CODE_RID (0x00000021L)
#define	SECURITY_PACKAGE_BASE_RID (0x00000040L)
#define	SECURITY_PACKAGE_RID_COUNT (2L)
#define	SECURITY_PACKAGE_NTLM_RID (0x0000000AL)
#define	SECURITY_PACKAGE_SCHANNEL_RID (0x0000000EL)
#define	SECURITY_PACKAGE_DIGEST_RID (0x00000015L)
#define	SECURITY_CRED_TYPE_BASE_RID (0x00000041L)
#define	SECURITY_CRED_TYPE_RID_COUNT (2L)
#define	SECURITY_CRED_TYPE_THIS_ORG_CERT_RID (0x00000001L)
#define	SECURITY_MIN_BASE_RID (0x00000050L)
#define	SECURITY_SERVICE_ID_BASE_RID (0x00000050L)
#define	SECURITY_SERVICE_ID_RID_COUNT (6L)
#define	SECURITY_RESERVED_ID_BASE_RID (0x00000051L)
#define	SECURITY_APPPOOL_ID_BASE_RID (0x00000052L)
#define	SECURITY_APPPOOL_ID_RID_COUNT (6L)
#define	SECURITY_VIRTUALSERVER_ID_BASE_RID (0x00000053L)
#define	SECURITY_VIRTUALSERVER_ID_RID_COUNT (6L)
#define	SECURITY_USERMODEDRIVERHOST_ID_BASE_RID (0x00000054L)
#define	SECURITY_USERMODEDRIVERHOST_ID_RID_COUNT (6L)
#define	SECURITY_CLOUD_INFRASTRUCTURE_SERVICES_ID_BASE_RID (0x00000055L)
#define	SECURITY_CLOUD_INFRASTRUCTURE_SERVICES_ID_RID_COUNT (6L)
#define	SECURITY_WMIHOST_ID_BASE_RID (0x00000056L)
#define	SECURITY_WMIHOST_ID_RID_COUNT (6L)
#define	SECURITY_TASK_ID_BASE_RID (0x00000057L)
#define	SECURITY_NFS_ID_BASE_RID (0x00000058L)
#define	SECURITY_COM_ID_BASE_RID (0x00000059L)
#define	SECURITY_VIRTUALACCOUNT_ID_RID_COUNT (6L)
#define	SECURITY_MAX_BASE_RID (0x0000006FL)
#define	SECURITY_MAX_ALWAYS_FILTERED (0x000003E7L)
#define	SECURITY_MIN_NEVER_FILTERED (0x000003E8L)
#define	SECURITY_OTHER_ORGANIZATION_RID (0x000003E8L)
#define	SECURITY_WINDOWSMOBILE_ID_BASE_RID (0x00000070L)
#define	DOMAIN_GROUP_RID_ENTERPRISE_READONLY_DOMAIN_CONTROLLERS (0x000001F2L)
#define	FOREST_USER_RID_MAX (0x000001F3L)
#define	DOMAIN_USER_RID_ADMIN (0x000001F4L)
#define	DOMAIN_USER_RID_GUEST (0x000001F5L)
#define	DOMAIN_USER_RID_KRBTGT (0x000001F6L)
#define	DOMAIN_USER_RID_MAX (0x000003E7L)
#define	DOMAIN_GROUP_RID_ADMINS (0x00000200L)
#define	DOMAIN_GROUP_RID_USERS (0x00000201L)
#define	DOMAIN_GROUP_RID_GUESTS (0x00000202L)
#define	DOMAIN_GROUP_RID_COMPUTERS (0x00000203L)
#define	DOMAIN_GROUP_RID_CONTROLLERS (0x00000204L)
#define	DOMAIN_GROUP_RID_CERT_ADMINS (0x00000205L)
#define	DOMAIN_GROUP_RID_SCHEMA_ADMINS (0x00000206L)
#define	DOMAIN_GROUP_RID_ENTERPRISE_ADMINS (0x00000207L)
#define	DOMAIN_GROUP_RID_POLICY_ADMINS (0x00000208L)
#define	DOMAIN_GROUP_RID_READONLY_CONTROLLERS (0x00000209L)
#define	DOMAIN_ALIAS_RID_ADMINS (0x00000220L)
#define	DOMAIN_ALIAS_RID_USERS (0x00000221L)
#define	DOMAIN_ALIAS_RID_GUESTS (0x00000222L)
#define	DOMAIN_ALIAS_RID_POWER_USERS (0x00000223L)
#define	DOMAIN_ALIAS_RID_ACCOUNT_OPS (0x00000224L)
#define	DOMAIN_ALIAS_RID_SYSTEM_OPS (0x00000225L)
#define	DOMAIN_ALIAS_RID_PRINT_OPS (0x00000226L)
#define	DOMAIN_ALIAS_RID_BACKUP_OPS (0x00000227L)
#define	DOMAIN_ALIAS_RID_REPLICATOR (0x00000228L)
#define	DOMAIN_ALIAS_RID_RAS_SERVERS (0x00000229L)
#define	DOMAIN_ALIAS_RID_PREW2KCOMPACCESS (0x0000022AL)
#define	DOMAIN_ALIAS_RID_REMOTE_DESKTOP_USERS (0x0000022BL)
#define	DOMAIN_ALIAS_RID_NETWORK_CONFIGURATION_OPS (0x0000022CL)
#define	DOMAIN_ALIAS_RID_INCOMING_FOREST_TRUST_BUILDERS (0x0000022DL)
#define	DOMAIN_ALIAS_RID_MONITORING_USERS (0x0000022EL)
#define	DOMAIN_ALIAS_RID_LOGGING_USERS (0x0000022FL)
#define	DOMAIN_ALIAS_RID_AUTHORIZATIONACCESS (0x00000230L)
#define	DOMAIN_ALIAS_RID_TS_LICENSE_SERVERS (0x00000231L)
#define	DOMAIN_ALIAS_RID_DCOM_USERS (0x00000232L)
#define	DOMAIN_ALIAS_RID_IUSERS (0x00000238L)
#define	DOMAIN_ALIAS_RID_CRYPTO_OPERATORS (0x00000239L)
#define	DOMAIN_ALIAS_RID_CACHEABLE_PRINCIPALS_GROUP (0x0000023BL)
#define	DOMAIN_ALIAS_RID_NON_CACHEABLE_PRINCIPALS_GROUP (0x0000023CL)
#define	DOMAIN_ALIAS_RID_EVENT_LOG_READERS_GROUP (0x0000023DL)
#define	DOMAIN_ALIAS_RID_CERTSVC_DCOM_ACCESS_GROUP (0x0000023EL)
#define	SECURITY_MANDATORY_LABEL_AUTHORITY {0,0,0,0,0,16}
#define	SECURITY_MANDATORY_UNTRUSTED_RID (0x00000000L)
#define	SECURITY_MANDATORY_LOW_RID (0x00001000L)
#define	SECURITY_MANDATORY_MEDIUM_RID (0x00002000L)
#define	SECURITY_MANDATORY_HIGH_RID (0x00003000L)
#define	SECURITY_MANDATORY_SYSTEM_RID (0x00004000L)
#define	SECURITY_MANDATORY_PROTECTED_PROCESS_RID (0x00005000L)
#define	SECURITY_MANDATORY_MAXIMUM_USER_RID SECURITY_MANDATORY_SYSTEM_RID
#define	MANDATORY_LEVEL_TO_MANDATORY_RID(IL) (IL * 0x1000)
#define	SYSTEM_LUID {0x3e7, 0x0}
#define	ANONYMOUS_LOGON_LUID {0x3e6, 0x0}
#define	LOCALSERVICE_LUID {0x3e5, 0x0}
#define	NETWORKSERVICE_LUID {0x3e4, 0x0}
#define	IUSER_LUID {0x3e3, 0x0}
#define	ACCESS_MIN_MS_ACE_TYPE (0x0)
#define	ACCESS_ALLOWED_ACE_TYPE (0x0)
#define	ACCESS_DENIED_ACE_TYPE (0x1)
#define	SYSTEM_AUDIT_ACE_TYPE (0x2)
#define	SYSTEM_ALARM_ACE_TYPE (0x3)
#define	ACCESS_MAX_MS_V2_ACE_TYPE (0x3)
#define	ACCESS_ALLOWED_COMPOUND_ACE_TYPE (0x4)
#define	ACCESS_MAX_MS_V3_ACE_TYPE (0x4)
#define	ACCESS_MIN_MS_OBJECT_ACE_TYPE (0x5)
#define	ACCESS_ALLOWED_OBJECT_ACE_TYPE (0x5)
#define	ACCESS_DENIED_OBJECT_ACE_TYPE (0x6)
#define	SYSTEM_AUDIT_OBJECT_ACE_TYPE (0x7)
#define	SYSTEM_ALARM_OBJECT_ACE_TYPE (0x8)
#define	ACCESS_MAX_MS_OBJECT_ACE_TYPE (0x8)
#define	ACCESS_MAX_MS_V4_ACE_TYPE (0x8)
#define	ACCESS_MAX_MS_ACE_TYPE (0x8)
#define	ACCESS_ALLOWED_CALLBACK_ACE_TYPE (0x9)
#define	ACCESS_DENIED_CALLBACK_ACE_TYPE (0xA)
#define	ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE (0xB)
#define	ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE (0xC)
#define	SYSTEM_AUDIT_CALLBACK_ACE_TYPE (0xD)
#define	SYSTEM_ALARM_CALLBACK_ACE_TYPE (0xE)
#define	SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE (0xF)
#define	SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE (0x10)
#define	ACCESS_MAX_MS_V5_ACE_TYPE (0x11)
#define	SYSTEM_MANDATORY_LABEL_ACE_TYPE (0x11)
#define	OBJECT_INHERIT_ACE (0x1)
#define	CONTAINER_INHERIT_ACE (0x2)
#define	NO_PROPAGATE_INHERIT_ACE (0x4)
#define	INHERIT_ONLY_ACE (0x8)
#define	INHERITED_ACE (0x10)
#define	VALID_INHERIT_FLAGS (0x1F)
#define	SUCCESSFUL_ACCESS_ACE_FLAG (0x40)
#define	FAILED_ACCESS_ACE_FLAG (0x80)
#define	SYSTEM_MANDATORY_LABEL_NO_WRITE_UP 0x1
#define	SYSTEM_MANDATORY_LABEL_NO_READ_UP 0x2
#define	SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP 0x4
#define	SYSTEM_MANDATORY_LABEL_VALID_MASK
#define	SECURITY_DESCRIPTOR_MIN_LENGTH (sizeof(SECURITY_DESCRIPTOR))
#define	SE_OWNER_DEFAULTED 0x0001
#define	SE_GROUP_DEFAULTED 0x0002
#define	SE_DACL_PRESENT 0x0004
#define	SE_DACL_DEFAULTED 0x0008
#define	SE_SACL_PRESENT 0x0010
#define	SE_SACL_DEFAULTED 0x0020
#define	SE_DACL_UNTRUSTED 0x0040
#define	SE_SERVER_SECURITY 0x0080
#define	SE_DACL_AUTO_INHERIT_REQ 0x0100
#define	SE_SACL_AUTO_INHERIT_REQ 0x0200
#define	SE_DACL_AUTO_INHERITED 0x0400
#define	SE_SACL_AUTO_INHERITED 0x0800
#define	SE_DACL_PROTECTED 0x1000
#define	SE_SACL_PROTECTED 0x2000
#define	SE_RM_CONTROL_VALID 0x4000
#define	SE_SELF_RELATIVE 0x8000
#define	ACCESS_OBJECT_GUID 0
#define	ACCESS_PROPERTY_SET_GUID 1
#define	ACCESS_PROPERTY_GUID 2
#define	ACCESS_MAX_LEVEL 4
#define	AUDIT_ALLOW_NO_PRIVILEGE 0x1
#define	ACCESS_DS_SOURCE_A "DS"
#define	ACCESS_DS_SOURCE_W L"DS"
#define	ACCESS_DS_OBJECT_TYPE_NAME_A "Directory Service Object"
#define	ACCESS_DS_OBJECT_TYPE_NAME_W L"Directory Service Object"
#define	ACCESS_REASON_TYPE_MASK 0xffff0000
#define	ACCESS_REASON_DATA_MASK 0x0000ffff
#define	SE_SECURITY_DESCRIPTOR_FLAG_NO_OWNER_ACE 0x00000001
#define	SE_SECURITY_DESCRIPTOR_FLAG_NO_LABEL_ACE 0x00000002
#define	SE_SECURITY_DESCRIPTOR_VALID_FLAGS 0x00000003
#define	TOKEN_ASSIGN_PRIMARY (0x0001)
#define	TOKEN_DUPLICATE (0x0002)
#define	TOKEN_IMPERSONATE (0x0004)
#define	TOKEN_QUERY (0x0008)
#define	TOKEN_QUERY_SOURCE (0x0010)
#define	TOKEN_ADJUST_PRIVILEGES (0x0020)
#define	TOKEN_ADJUST_GROUPS (0x0040)
#define	TOKEN_ADJUST_DEFAULT (0x0080)
#define	TOKEN_ADJUST_SESSIONID (0x0100)
#define	TOKEN_ALL_ACCESS_P
#define	TOKEN_ALL_ACCESS
#define	TOKEN_READ
#define	TOKEN_WRITE
#define	TOKEN_EXECUTE (STANDARD_RIGHTS_EXECUTE)
#define	TOKEN_MANDATORY_POLICY_OFF 0x0
#define	TOKEN_MANDATORY_POLICY_NO_WRITE_UP 0x1
#define	TOKEN_MANDATORY_POLICY_NEW_PROCESS_MIN 0x2
#define	TOKEN_MANDATORY_POLICY_VALID_MASK
#define	POLICY_AUDIT_SUBCATEGORY_COUNT (53)
#define	TOKEN_SOURCE_LENGTH 8
#define	TOKEN_HAS_TRAVERSE_PRIVILEGE 0x0001
#define	TOKEN_HAS_BACKUP_PRIVILEGE 0x0002
#define	TOKEN_HAS_RESTORE_PRIVILEGE 0x0004
#define	TOKEN_WRITE_RESTRICTED 0x0008
#define	TOKEN_IS_RESTRICTED 0x0010
#define	TOKEN_SESSION_NOT_REFERENCED 0x0020
#define	TOKEN_SANDBOX_INERT 0x0040
#define	TOKEN_HAS_IMPERSONATE_PRIVILEGE 0x0080
#define	SE_BACKUP_PRIVILEGES_CHECKED 0x0100
#define	TOKEN_VIRTUALIZE_ALLOWED 0x0200
#define	TOKEN_VIRTUALIZE_ENABLED 0x0400
#define	TOKEN_IS_FILTERED 0x0800
#define	TOKEN_UIACCESS 0x1000
#define	TOKEN_NOT_LOW 0x2000
#define	RTL_SYSTEM_VOLUME_INFORMATION_FOLDER L"System Volume Information"
#define	RTL_DUPLICATE_UNICODE_STRING_NULL_TERMINATE 1
#define	RTL_DUPLICATE_UNICODE_STRING_ALLOCATE_NULL_STRING 2
#define	RtlUnicodeStringToOemSize(STRING)
#define	RtlOemStringToUnicodeSize(STRING)
#define	RtlOemStringToCountedUnicodeSize(STRING)
#define	RtlOffsetToPointer(B, O) ((PCHAR)(((PCHAR)(B)) + ((ULONG_PTR)(O))))
#define	RtlPointerToOffset(B, P) ((ULONG)(((PCHAR)(P)) - ((PCHAR)(B))))
#define	COMPRESSION_FORMAT_NONE (0x0000)
#define	COMPRESSION_FORMAT_DEFAULT (0x0001)
#define	COMPRESSION_FORMAT_LZNT1 (0x0002)
#define	COMPRESSION_ENGINE_STANDARD (0x0000)
#define	COMPRESSION_ENGINE_MAXIMUM (0x0100)
#define	COMPRESSION_ENGINE_HIBER (0x0200)
#define	MAX_UNICODE_STACK_BUFFER_LENGTH 256
#define	METHOD_FROM_CTL_CODE(ctrlCode) ((ULONG)(ctrlCode & 3))
#define	METHOD_DIRECT_TO_HARDWARE METHOD_IN_DIRECT
#define	METHOD_DIRECT_FROM_HARDWARE METHOD_OUT_DIRECT
#define	_NTLSA_IFS_
#define	MSV1_0_PACKAGE_NAME "MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
#define	MSV1_0_PACKAGE_NAMEW L"MICROSOFT_AUTHENTICATION_PACKAGE_V1_0"
#define	MSV1_0_PACKAGE_NAMEW_LENGTH sizeof(MSV1_0_PACKAGE_NAMEW) - sizeof(WCHAR)
#define	MSV1_0_SUBAUTHENTICATION_KEY "SYSTEM\\CurrentControlSet\\Control\\Lsa\\MSV1_0"
#define	MSV1_0_SUBAUTHENTICATION_VALUE "Auth"
#define	MSV1_0_CHALLENGE_LENGTH 8
#define	MSV1_0_USER_SESSION_KEY_LENGTH 16
#define	MSV1_0_LANMAN_SESSION_KEY_LENGTH 8
#define	MSV1_0_CLEARTEXT_PASSWORD_ALLOWED 0x02
#define	MSV1_0_UPDATE_LOGON_STATISTICS 0x04
#define	MSV1_0_RETURN_USER_PARAMETERS 0x08
#define	MSV1_0_DONT_TRY_GUEST_ACCOUNT 0x10
#define	MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT 0x20
#define	MSV1_0_RETURN_PASSWORD_EXPIRY 0x40
#define	MSV1_0_USE_CLIENT_CHALLENGE 0x80
#define	MSV1_0_TRY_GUEST_ACCOUNT_ONLY 0x100
#define	MSV1_0_RETURN_PROFILE_PATH 0x200
#define	MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY 0x400
#define	MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT 0x800
#define	MSV1_0_DISABLE_PERSONAL_FALLBACK 0x00001000
#define	MSV1_0_ALLOW_FORCE_GUEST 0x00002000
#define	MSV1_0_SUBAUTHENTICATION_DLL_EX 0x00100000
#define	MSV1_0_ALLOW_MSVCHAPV2 0x00010000
#define	MSV1_0_SUBAUTHENTICATION_DLL 0xFF000000
#define	MSV1_0_SUBAUTHENTICATION_DLL_SHIFT 24
#define	MSV1_0_MNS_LOGON 0x01000000
#define	MSV1_0_SUBAUTHENTICATION_DLL_RAS 2
#define	MSV1_0_SUBAUTHENTICATION_DLL_IIS 132
#define	LOGON_GUEST 0x01
#define	LOGON_NOENCRYPTION 0x02
#define	LOGON_CACHED_ACCOUNT 0x04
#define	LOGON_USED_LM_PASSWORD 0x08
#define	LOGON_EXTRA_SIDS 0x20
#define	LOGON_SUBAUTH_SESSION_KEY 0x40
#define	LOGON_SERVER_TRUST_ACCOUNT 0x80
#define	LOGON_NTLMV2_ENABLED 0x100
#define	LOGON_RESOURCE_GROUPS 0x200
#define	LOGON_PROFILE_PATH_RETURNED 0x400
#define	LOGON_NT_V2 0x800
#define	LOGON_LM_V2 0x1000
#define	LOGON_NTLM_V2 0x2000
#define	MSV1_0_SUBAUTHENTICATION_FLAGS 0xFF000000
#define	LOGON_GRACE_LOGON 0x01000000
#define	MSV1_0_OWF_PASSWORD_LENGTH 16
#define	MSV1_0_CRED_LM_PRESENT 0x1
#define	MSV1_0_CRED_NT_PRESENT 0x2
#define	MSV1_0_CRED_VERSION 0
#define	MSV1_0_NTLM3_RESPONSE_LENGTH 16
#define	MSV1_0_NTLM3_OWF_LENGTH 16
#define	MSV1_0_MAX_NTLM3_LIFE 129600
#define	MSV1_0_MAX_AVL_SIZE 64000
#define	MSV1_0_NTLM3_INPUT_LENGTH (sizeof(MSV1_0_NTLM3_RESPONSE) - MSV1_0_NTLM3_RESPONSE_LENGTH)
#define	USE_PRIMARY_PASSWORD 0x01
#define	RETURN_PRIMARY_USERNAME 0x02
#define	RETURN_PRIMARY_LOGON_DOMAINNAME 0x04
#define	RETURN_NON_NT_USER_SESSION_KEY 0x08
#define	GENERATE_CLIENT_CHALLENGE 0x10
#define	GCR_NTLM3_PARMS 0x20
#define	GCR_TARGET_INFO 0x40
#define	RETURN_RESERVED_PARAMETER 0x80
#define	GCR_ALLOW_NTLM 0x100
#define	GCR_USE_OEM_SET 0x200
#define	GCR_MACHINE_CREDENTIAL 0x400
#define	GCR_USE_OWF_PASSWORD 0x800
#define	GCR_ALLOW_LM 0x1000
#define	GCR_ALLOW_NO_TARGET 0x2000
#define	FILE_OPLOCK_BROKEN_TO_LEVEL_2 0x00000007
#define	FILE_OPLOCK_BROKEN_TO_NONE 0x00000008
#define	FILE_OPBATCH_BREAK_UNDERWAY 0x00000009
#define	FILE_NOTIFY_CHANGE_FILE_NAME 0x00000001
#define	FILE_NOTIFY_CHANGE_DIR_NAME 0x00000002
#define	FILE_NOTIFY_CHANGE_NAME 0x00000003
#define	FILE_NOTIFY_CHANGE_ATTRIBUTES 0x00000004
#define	FILE_NOTIFY_CHANGE_SIZE 0x00000008
#define	FILE_NOTIFY_CHANGE_LAST_WRITE 0x00000010
#define	FILE_NOTIFY_CHANGE_LAST_ACCESS 0x00000020
#define	FILE_NOTIFY_CHANGE_CREATION 0x00000040
#define	FILE_NOTIFY_CHANGE_EA 0x00000080
#define	FILE_NOTIFY_CHANGE_SECURITY 0x00000100
#define	FILE_NOTIFY_CHANGE_STREAM_NAME 0x00000200
#define	FILE_NOTIFY_CHANGE_STREAM_SIZE 0x00000400
#define	FILE_NOTIFY_CHANGE_STREAM_WRITE 0x00000800
#define	FILE_NOTIFY_VALID_MASK 0x00000fff
#define	FILE_ACTION_ADDED 0x00000001
#define	FILE_ACTION_REMOVED 0x00000002
#define	FILE_ACTION_MODIFIED 0x00000003
#define	FILE_ACTION_RENAMED_OLD_NAME 0x00000004
#define	FILE_ACTION_RENAMED_NEW_NAME 0x00000005
#define	FILE_ACTION_ADDED_STREAM 0x00000006
#define	FILE_ACTION_REMOVED_STREAM 0x00000007
#define	FILE_ACTION_MODIFIED_STREAM 0x00000008
#define	FILE_ACTION_REMOVED_BY_DELETE 0x00000009
#define	FILE_ACTION_ID_NOT_TUNNELLED 0x0000000A
#define	FILE_ACTION_TUNNELLED_ID_COLLISION 0x0000000B
#define	FILE_PIPE_BYTE_STREAM_TYPE 0x00000000
#define	FILE_PIPE_MESSAGE_TYPE 0x00000001
#define	FILE_PIPE_ACCEPT_REMOTE_CLIENTS 0x00000000
#define	FILE_PIPE_REJECT_REMOTE_CLIENTS 0x00000002
#define	FILE_PIPE_ACCEPT_REMOTE_CLIENTS 0x00000000
#define	FILE_PIPE_REJECT_REMOTE_CLIENTS 0x00000002
#define	FILE_PIPE_TYPE_VALID_MASK 0x00000003
#define	FILE_PIPE_BYTE_STREAM_MODE 0x00000000
#define	FILE_PIPE_MESSAGE_MODE 0x00000001
#define	FILE_PIPE_QUEUE_OPERATION 0x00000000
#define	FILE_PIPE_COMPLETE_OPERATION 0x00000001
#define	FILE_PIPE_INBOUND 0x00000000
#define	FILE_PIPE_OUTBOUND 0x00000001
#define	FILE_PIPE_FULL_DUPLEX 0x00000002
#define	FILE_PIPE_DISCONNECTED_STATE 0x00000001
#define	FILE_PIPE_LISTENING_STATE 0x00000002
#define	FILE_PIPE_CONNECTED_STATE 0x00000003
#define	FILE_PIPE_CLOSING_STATE 0x00000004
#define	FILE_PIPE_CLIENT_END 0x00000000
#define	FILE_PIPE_SERVER_END 0x00000001
#define	FILE_CASE_SENSITIVE_SEARCH 0x00000001
#define	FILE_CASE_PRESERVED_NAMES 0x00000002
#define	FILE_UNICODE_ON_DISK 0x00000004
#define	FILE_PERSISTENT_ACLS 0x00000008
#define	FILE_FILE_COMPRESSION 0x00000010
#define	FILE_VOLUME_QUOTAS 0x00000020
#define	FILE_SUPPORTS_SPARSE_FILES 0x00000040
#define	FILE_SUPPORTS_REPARSE_POINTS 0x00000080
#define	FILE_SUPPORTS_REMOTE_STORAGE 0x00000100
#define	FILE_VOLUME_IS_COMPRESSED 0x00008000
#define	FILE_SUPPORTS_OBJECT_IDS 0x00010000
#define	FILE_SUPPORTS_ENCRYPTION 0x00020000
#define	FILE_NAMED_STREAMS 0x00040000
#define	FILE_READ_ONLY_VOLUME 0x00080000
#define	FILE_SEQUENTIAL_WRITE_ONCE 0x00100000
#define	FILE_SUPPORTS_TRANSACTIONS 0x00200000
#define	FILE_SUPPORTS_HARD_LINKS 0x00400000
#define	FILE_SUPPORTS_EXTENDED_ATTRIBUTES 0x00800000
#define	FILE_SUPPORTS_OPEN_BY_FILE_ID 0x01000000
#define	FILE_SUPPORTS_USN_JOURNAL 0x02000000
#define	FILE_NEED_EA 0x00000080
#define	FILE_EA_TYPE_BINARY 0xfffe
#define	FILE_EA_TYPE_ASCII 0xfffd
#define	FILE_EA_TYPE_BITMAP 0xfffb
#define	FILE_EA_TYPE_METAFILE 0xfffa
#define	FILE_EA_TYPE_ICON 0xfff9
#define	FILE_EA_TYPE_EA 0xffee
#define	FILE_EA_TYPE_MVMT 0xffdf
#define	FILE_EA_TYPE_MVST 0xffde
#define	FILE_EA_TYPE_ASN1 0xffdd
#define	FILE_EA_TYPE_FAMILY_IDS 0xff01
#define	FILE_ID_GLOBAL_TX_DIR_INFO_FLAG_WRITELOCKED 0x00000001
#define	FILE_ID_GLOBAL_TX_DIR_INFO_FLAG_VISIBLE_TO_TX 0x00000002
#define	FILE_ID_GLOBAL_TX_DIR_INFO_FLAG_VISIBLE_OUTSIDE_TX 0x00000004
#define	ANSI_DOS_STAR ('<')
#define	ANSI_DOS_QM ('>')
#define	ANSI_DOS_DOT ('"')
#define	DOS_STAR (L'<')
#define	DOS_QM (L'>')
#define	DOS_DOT (L'"')
#define	REMOTE_PROTOCOL_FLAG_LOOPBACK 0x00000001
#define	REMOTE_PROTOCOL_FLAG_OFFLINE 0x00000002
#define	FILE_VC_QUOTA_NONE 0x00000000
#define	FILE_VC_QUOTA_TRACK 0x00000001
#define	FILE_VC_QUOTA_ENFORCE 0x00000002
#define	FILE_VC_QUOTA_MASK 0x00000003
#define	FILE_VC_CONTENT_INDEX_DISABLED 0x00000008
#define	FILE_VC_LOG_QUOTA_THRESHOLD 0x00000010
#define	FILE_VC_LOG_QUOTA_LIMIT 0x00000020
#define	FILE_VC_LOG_VOLUME_THRESHOLD 0x00000040
#define	FILE_VC_LOG_VOLUME_LIMIT 0x00000080
#define	FILE_VC_QUOTAS_INCOMPLETE 0x00000100
#define	FILE_VC_QUOTAS_REBUILDING 0x00000200
#define	FILE_VC_VALID_MASK 0x000003ff
#define	_FILESYSTEMFSCTL_
#define	FSCTL_REQUEST_OPLOCK_LEVEL_1 CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 0, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_REQUEST_OPLOCK_LEVEL_2 CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 1, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_REQUEST_BATCH_OPLOCK CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 2, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_OPLOCK_BREAK_ACKNOWLEDGE CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 3, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_OPBATCH_ACK_CLOSE_PENDING CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 4, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_OPLOCK_BREAK_NOTIFY CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 5, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_LOCK_VOLUME CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 6, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_UNLOCK_VOLUME CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 7, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_DISMOUNT_VOLUME CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 8, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_IS_VOLUME_MOUNTED CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 10, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_IS_PATHNAME_VALID CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 11, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_MARK_VOLUME_DIRTY CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 12, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_QUERY_RETRIEVAL_POINTERS CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 14, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_GET_COMPRESSION CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 15, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_SET_COMPRESSION CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 16, METHOD_BUFFERED, FILE_READ_DATA \| FILE_WRITE_DATA)
#define	FSCTL_SET_BOOTLOADER_ACCESSED CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 19, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_OPLOCK_BREAK_ACK_NO_2 CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 20, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_INVALIDATE_VOLUMES CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 21, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_QUERY_FAT_BPB CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 22, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_REQUEST_FILTER_OPLOCK CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 23, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_FILESYSTEM_GET_STATISTICS CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 24, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_MARK_AS_SYSTEM_HIVE FSCTL_SET_BOOTLOADER_ACCESSED
#define	FILESYSTEM_STATISTICS_TYPE_NTFS 1
#define	FILESYSTEM_STATISTICS_TYPE_FAT 2
#define	FILESYSTEM_STATISTICS_TYPE_EXFAT 3
#define	SYMLINK_FLAG_RELATIVE 1
#define	REPARSE_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(REPARSE_DATA_BUFFER, GenericReparseBuffer)
#define	REPARSE_GUID_DATA_BUFFER_HEADER_SIZE FIELD_OFFSET(REPARSE_GUID_DATA_BUFFER, GenericReparseBuffer)
#define	MAXIMUM_REPARSE_DATA_BUFFER_SIZE ( 16 * 1024 )
#define	IO_REPARSE_TAG_RESERVED_ZERO (0)
#define	IO_REPARSE_TAG_RESERVED_ONE (1)
#define	IO_REPARSE_TAG_RESERVED_RANGE IO_REPARSE_TAG_RESERVED_ONE
#define	IsReparseTagMicrosoft(_tag) (((_tag) & 0x80000000))
#define	IsReparseTagNameSurrogate(_tag) (((_tag) & 0x20000000))
#define	IO_REPARSE_TAG_VALID_VALUES (0xF000FFFF)
#define	IsReparseTagValid(tag)
#define	IO_REPARSE_TAG_MOUNT_POINT (0xA0000003L)
#define	IO_REPARSE_TAG_HSM (0xC0000004L)
#define	IO_REPARSE_TAG_DRIVE_EXTENDER (0x80000005L)
#define	IO_REPARSE_TAG_HSM2 (0x80000006L)
#define	IO_REPARSE_TAG_SIS (0x80000007L)
#define	IO_REPARSE_TAG_WIM (0x80000008L)
#define	IO_REPARSE_TAG_CSV (0x80000009L)
#define	IO_REPARSE_TAG_DFS (0x8000000AL)
#define	IO_REPARSE_TAG_FILTER_MANAGER (0x8000000BL)
#define	IO_REPARSE_TAG_SYMLINK (0xA000000CL)
#define	IO_REPARSE_TAG_IIS_CACHE (0xA0000010L)
#define	IO_REPARSE_TAG_DFSR (0x80000012L)
#define	FSCTL_LMR_GET_LINK_TRACKING_INFORMATION CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM,58,METHOD_BUFFERED,FILE_ANY_ACCESS)
#define	FSCTL_LMR_SET_LINK_TRACKING_INFORMATION CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM,59,METHOD_BUFFERED,FILE_ANY_ACCESS)
#define	IOCTL_LMR_ARE_FILE_OBJECTS_ON_SAME_SERVER CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM,60,METHOD_BUFFERED,FILE_ANY_ACCESS)
#define	FSCTL_PIPE_ASSIGN_EVENT CTL_CODE(FILE_DEVICE_NAMED_PIPE, 0, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_DISCONNECT CTL_CODE(FILE_DEVICE_NAMED_PIPE, 1, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_LISTEN CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_PEEK CTL_CODE(FILE_DEVICE_NAMED_PIPE, 3, METHOD_BUFFERED, FILE_READ_DATA)
#define	FSCTL_PIPE_QUERY_EVENT CTL_CODE(FILE_DEVICE_NAMED_PIPE, 4, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_TRANSCEIVE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 5, METHOD_NEITHER, FILE_READ_DATA \| FILE_WRITE_DATA)
#define	FSCTL_PIPE_WAIT CTL_CODE(FILE_DEVICE_NAMED_PIPE, 6, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_IMPERSONATE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 7, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_SET_CLIENT_PROCESS CTL_CODE(FILE_DEVICE_NAMED_PIPE, 8, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_QUERY_CLIENT_PROCESS CTL_CODE(FILE_DEVICE_NAMED_PIPE, 9, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_GET_PIPE_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 10, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_SET_PIPE_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 11, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_GET_CONNECTION_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 12, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_SET_CONNECTION_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 13, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_GET_HANDLE_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 14, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_SET_HANDLE_ATTRIBUTE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 15, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_PIPE_FLUSH CTL_CODE(FILE_DEVICE_NAMED_PIPE, 16, METHOD_BUFFERED, FILE_WRITE_DATA)
#define	FSCTL_PIPE_INTERNAL_READ CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2045, METHOD_BUFFERED, FILE_READ_DATA)
#define	FSCTL_PIPE_INTERNAL_WRITE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2046, METHOD_BUFFERED, FILE_WRITE_DATA)
#define	FSCTL_PIPE_INTERNAL_TRANSCEIVE CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2047, METHOD_NEITHER, FILE_READ_DATA \| FILE_WRITE_DATA)
#define	FSCTL_PIPE_INTERNAL_READ_OVFLOW CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2048, METHOD_BUFFERED, FILE_READ_DATA)
#define	FILE_PIPE_READ_DATA 0x00000000
#define	FILE_PIPE_WRITE_SPACE 0x00000001
#define	FILE_PIPE_COMPUTER_NAME_LENGTH 15
#define	FSCTL_MAILSLOT_PEEK CTL_CODE(FILE_DEVICE_MAILSLOT, 0, METHOD_NEITHER, FILE_READ_DATA)
#define	IO_OPEN_PAGING_FILE 0x0002
#define	IO_OPEN_TARGET_DIRECTORY 0x0004
#define	IO_STOP_ON_SYMLINK 0x0008
#define	IO_MM_PAGING_FILE 0x0010
#define	FS_FILTER_ACQUIRE_FOR_SECTION_SYNCHRONIZATION (UCHAR)-1
#define	FS_FILTER_RELEASE_FOR_SECTION_SYNCHRONIZATION (UCHAR)-2
#define	FS_FILTER_ACQUIRE_FOR_MOD_WRITE (UCHAR)-3
#define	FS_FILTER_RELEASE_FOR_MOD_WRITE (UCHAR)-4
#define	FS_FILTER_ACQUIRE_FOR_CC_FLUSH (UCHAR)-5
#define	FS_FILTER_RELEASE_FOR_CC_FLUSH (UCHAR)-6
#define	DO_VERIFY_VOLUME 0x00000002
#define	DO_BUFFERED_IO 0x00000004
#define	DO_EXCLUSIVE 0x00000008
#define	DO_DIRECT_IO 0x00000010
#define	DO_MAP_IO_BUFFER 0x00000020
#define	DO_DEVICE_HAS_NAME 0x00000040
#define	DO_DEVICE_INITIALIZING 0x00000080
#define	DO_SYSTEM_BOOT_PARTITION 0x00000100
#define	DO_LONG_TERM_REQUESTS 0x00000200
#define	DO_NEVER_LAST_DEVICE 0x00000400
#define	DO_SHUTDOWN_REGISTERED 0x00000800
#define	DO_BUS_ENUMERATED_DEVICE 0x00001000
#define	DO_POWER_PAGABLE 0x00002000
#define	DO_POWER_INRUSH 0x00004000
#define	DO_LOW_PRIORITY_FILESYSTEM 0x00010000
#define	DO_SUPPORTS_TRANSACTIONS 0x00040000
#define	DO_FORCE_NEITHER_IO 0x00080000
#define	DO_VOLUME_DEVICE_OBJECT 0x00100000
#define	DO_SYSTEM_SYSTEM_PARTITION 0x00200000
#define	DO_SYSTEM_CRITICAL_PARTITION 0x00400000
#define	DO_DISALLOW_EXECUTE 0x00800000
#define	IO_FILE_OBJECT_NON_PAGED_POOL_CHARGE 64
#define	IO_FILE_OBJECT_PAGED_POOL_CHARGE 1024
#define	SYSTEM_PAGE_PRIORITY_BITS 3
#define	SYSTEM_PAGE_PRIORITY_LEVELS (1 << SYSTEM_PAGE_PRIORITY_BITS)
#define	KAPC_STATE_ACTUAL_LENGTH (FIELD_OFFSET(KAPC_STATE, UserApcPending) + sizeof(BOOLEAN))
#define	ASSERT_QUEUE(Q) ASSERT(((Q)->Header.Type & KOBJECT_TYPE_MASK) == QueueObject);
#define	INVALID_PROCESSOR_INDEX 0xffffffff
#define	EX_PUSH_LOCK ULONG_PTR
#define	PEX_PUSH_LOCK PULONG_PTR
#define	ExDisableResourceBoost ExDisableResourceBoostLite
#define	SeLengthSid(Sid) (8 + (4 * ((SID *)Sid)->SubAuthorityCount))
#define	SeDeleteClientSecurity(C)
#define	SeStopImpersonatingClient() PsRevertToSelf()
#define	SeQuerySubjectContextToken(SubjectContext)
#define	IoIsFileOpenedExclusively(FileObject)
#define	PO_CB_SYSTEM_POWER_POLICY 0
#define	PO_CB_AC_STATUS 1
#define	PO_CB_BUTTON_COLLISION 2
#define	PO_CB_SYSTEM_STATE_LOCK 3
#define	PO_CB_LID_SWITCH_STATE 4
#define	PO_CB_PROCESSOR_POWER_POLICY 5
#define	MM_PREFETCH_FLAGS_MASK ((1 << (2*SYSTEM_PAGE_PRIORITY_BITS)) - 1)
#define	HEAP_NO_SERIALIZE 0x00000001
#define	HEAP_GROWABLE 0x00000002
#define	HEAP_GENERATE_EXCEPTIONS 0x00000004
#define	HEAP_ZERO_MEMORY 0x00000008
#define	HEAP_REALLOC_IN_PLACE_ONLY 0x00000010
#define	HEAP_TAIL_CHECKING_ENABLED 0x00000020
#define	HEAP_FREE_CHECKING_ENABLED 0x00000040
#define	HEAP_DISABLE_COALESCE_ON_FREE 0x00000080
#define	HEAP_CREATE_ALIGN_16 0x00010000
#define	HEAP_CREATE_ENABLE_TRACING 0x00020000
#define	HEAP_CREATE_ENABLE_EXECUTE 0x00040000
#define	HEAP_SETTABLE_USER_VALUE 0x00000100
#define	HEAP_SETTABLE_USER_FLAG1 0x00000200
#define	HEAP_SETTABLE_USER_FLAG2 0x00000400
#define	HEAP_SETTABLE_USER_FLAG3 0x00000800
#define	HEAP_SETTABLE_USER_FLAGS 0x00000E00
#define	HEAP_CLASS_0 0x00000000
#define	HEAP_CLASS_1 0x00001000
#define	HEAP_CLASS_2 0x00002000
#define	HEAP_CLASS_3 0x00003000
#define	HEAP_CLASS_4 0x00004000
#define	HEAP_CLASS_5 0x00005000
#define	HEAP_CLASS_6 0x00006000
#define	HEAP_CLASS_7 0x00007000
#define	HEAP_CLASS_8 0x00008000
#define	HEAP_CLASS_MASK 0x0000F000
#define	HEAP_MAXIMUM_TAG 0x0FFF
#define	HEAP_GLOBAL_TAG 0x0800
#define	HEAP_PSEUDO_TAG_FLAG 0x8000
#define	HEAP_TAG_SHIFT 18
#define	HEAP_TAG_MASK (HEAP_MAXIMUM_TAG << HEAP_TAG_SHIFT)
#define	HEAP_CREATE_VALID_MASK
#define	FSRTL_COMMON_FCB_HEADER_LAYOUT
#define	FSRTL_FCB_HEADER_V0 (0x00)
#define	FSRTL_FCB_HEADER_V1 (0x01)
#define	FSRTL_FLAG_FILE_MODIFIED (0x01)
#define	FSRTL_FLAG_FILE_LENGTH_CHANGED (0x02)
#define	FSRTL_FLAG_LIMIT_MODIFIED_PAGES (0x04)
#define	FSRTL_FLAG_ACQUIRE_MAIN_RSRC_EX (0x08)
#define	FSRTL_FLAG_ACQUIRE_MAIN_RSRC_SH (0x10)
#define	FSRTL_FLAG_USER_MAPPED_FILE (0x20)
#define	FSRTL_FLAG_ADVANCED_HEADER (0x40)
#define	FSRTL_FLAG_EOF_ADVANCE_ACTIVE (0x80)
#define	FSRTL_FLAG2_DO_MODIFIED_WRITE (0x01)
#define	FSRTL_FLAG2_SUPPORTS_FILTER_CONTEXTS (0x02)
#define	FSRTL_FLAG2_PURGE_WHEN_MAPPED (0x04)
#define	FSRTL_FLAG2_IS_PAGING_FILE (0x08)
#define	FSRTL_FSP_TOP_LEVEL_IRP (0x01)
#define	FSRTL_CACHE_TOP_LEVEL_IRP (0x02)
#define	FSRTL_MOD_WRITE_TOP_LEVEL_IRP (0x03)
#define	FSRTL_FAST_IO_TOP_LEVEL_IRP (0x04)
#define	FSRTL_NETWORK1_TOP_LEVEL_IRP ((LONG_PTR)0x05)
#define	FSRTL_NETWORK2_TOP_LEVEL_IRP ((LONG_PTR)0x06)
#define	FSRTL_MAX_TOP_LEVEL_IRP_FLAG ((LONG_PTR)0xFFFF)
#define	FSRTL_AUXILIARY_FLAG_DEALLOCATE 0x00000001
#define	FSRTL_FAT_LEGAL 0x01
#define	FSRTL_HPFS_LEGAL 0x02
#define	FSRTL_NTFS_LEGAL 0x04
#define	FSRTL_WILD_CHARACTER 0x08
#define	FSRTL_OLE_LEGAL 0x10
#define	FSRTL_NTFS_STREAM_LEGAL (FSRTL_NTFS_LEGAL \| FSRTL_OLE_LEGAL)
#define	FSRTL_VOLUME_DISMOUNT 1
#define	FSRTL_VOLUME_DISMOUNT_FAILED 2
#define	FSRTL_VOLUME_LOCK 3
#define	FSRTL_VOLUME_LOCK_FAILED 4
#define	FSRTL_VOLUME_UNLOCK 5
#define	FSRTL_VOLUME_MOUNT 6
#define	FSRTL_VOLUME_NEEDS_CHKDSK 7
#define	FSRTL_VOLUME_WORM_NEAR_FULL 8
#define	FSRTL_VOLUME_WEARING_OUT 9
#define	FSRTL_VOLUME_FORCED_CLOSED 10
#define	FSRTL_VOLUME_INFO_MAKE_COMPAT 11
#define	FSRTL_VOLUME_PREPARING_EJECT 12
#define	FSRTL_VOLUME_CHANGE_SIZE 13
#define	FSRTL_VOLUME_BACKGROUND_FORMAT 14
#define	FSRTL_UNC_PROVIDER_FLAGS_MAILSLOTS_SUPPORTED 0x00000001
#define	FSRTL_UNC_PROVIDER_FLAGS_CSC_ENABLED 0x00000002
#define	FSRTL_UNC_PROVIDER_FLAGS_DOMAIN_SVC_AWARE 0x00000004
#define	FSRTL_ALLOCATE_ECPLIST_FLAG_CHARGE_QUOTA 0x00000001
#define	FSRTL_ALLOCATE_ECP_FLAG_CHARGE_QUOTA 0x00000001
#define	FSRTL_ALLOCATE_ECP_FLAG_NONPAGED_POOL 0x00000002
#define	FSRTL_ECP_LOOKASIDE_FLAG_NONPAGED_POOL 0x00000002
#define	FSRTL_VIRTDISK_FULLY_ALLOCATED 0x00000001
#define	FSRTL_VIRTDISK_NO_DRIVE_LETTER 0x00000002
#define	FSRTL_CC_FLUSH_ERROR_FLAG_NO_HARD_ERROR 0x1
#define	FSRTL_CC_FLUSH_ERROR_FLAG_NO_LOG_ENTRY 0x2
#define	MCB_FLAG_RAISE_ON_ALLOCATION_FAILURE 1
#define	OPLOCK_FLAG_COMPLETE_IF_OPLOCKED 0x00000001
#define	OPLOCK_FLAG_OPLOCK_KEY_CHECK_ONLY 0x00000002
#define	OPLOCK_FLAG_BACK_OUT_ATOMIC_OPLOCK 0x00000004
#define	OPLOCK_FLAG_IGNORE_OPLOCK_KEYS 0x00000008
#define	OPLOCK_FSCTRL_FLAG_ALL_KEYS_MATCH 0x00000001
#define	FsRtlEnterFileSystem KeEnterCriticalRegion
#define	FsRtlExitFileSystem KeLeaveCriticalRegion
#define	FsRtlFastLock(A1, A2, A3, A4, A5, A6, A7, A8, A9, A10, A11)
#define	FsRtlAreThereCurrentFileLocks(FL)
#define	FsRtlIncrementLockRequestsInProgress(FL)
#define	FsRtlDecrementLockRequestsInProgress(FL)
#define	LEGAL_ANSI_CHARACTER_ARRAY FsRtlLegalAnsiCharacterArray
#define	FsRtlIsAnsiCharacterWild(C)
#define	FsRtlIsAnsiCharacterLegalFat(C, WILD)
#define	FsRtlIsAnsiCharacterLegalHpfs(C, WILD)
#define	FsRtlIsAnsiCharacterLegalNtfs(C, WILD)
#define	FsRtlIsAnsiCharacterLegalNtfsStream(C, WILD_OK)
#define	FsRtlIsAnsiCharacterLegal(C, FLAGS)
#define	FsRtlTestAnsiCharacter(C, DEFAULT_RET, WILD_OK, FLAGS)
#define	FsRtlIsLeadDbcsCharacter(DBCS_CHAR)
#define	FsRtlIsUnicodeCharacterWild(C)
#define	FsRtlInitPerFileContext(_fc, _owner, _inst, _cb)
#define	FsRtlGetPerFileContextPointer(_fo)
#define	FsRtlSupportsPerFileContexts(_fo)
#define	FsRtlSetupAdvancedHeaderEx(_advhdr, _fmutx, _fctxptr)
#define	FsRtlGetPerStreamContextPointer(FO)
#define	FsRtlInitPerStreamContext(PSC, O, I, FC)
#define	FsRtlSupportsPerStreamContexts(FO)
#define	FsRtlLookupPerStreamContext(_sc, _oid, _iid)
#define	FsRtlInitPerFileObjectContext(_fc, _owner, _inst) ((_fc)->OwnerId = (_owner), (_fc)->InstanceId = (_inst))
#define	FsRtlCompleteRequest(IRP, STATUS)
#define	VACB_MAPPING_GRANULARITY (0x40000)
#define	VACB_OFFSET_SHIFT (18)
#define	UNINITIALIZE_CACHE_MAPS (1)
#define	DO_NOT_RETRY_PURGE (2)
#define	DO_NOT_PURGE_DIRTY_PAGES (0x4)
#define	CC_FLUSH_AND_PURGE_NO_PURGE (0x1)
#define	CcIsFileCached(FO)
#define	CcGetFileSizePointer(FO)
#define	CcReadAhead(FO, FOFF, LEN)
#define	__SSPI_H__
#define	ISSP_LEVEL 32
#define	ISSP_MODE 0
#define	MIDL_PROP(x)
#define	SEC_TEXT TEXT
#define	SEC_FAR
#define	SEC_ENTRY __stdcall
#define	KSECDDDECLSPEC __declspec(dllimport)
#define	SECQOP_WRAP_NO_ENCRYPT 0x80000001
#define	SECQOP_WRAP_OOB_DATA 0x40000000
#define	SECURITY_ENTRYPOINTW SEC_TEXT("InitSecurityInterfaceW")
#define	SECURITY_ENTRYPOINT SECURITY_ENTRYPOINTW
#define	SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION 1
#define	SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION_2 2
#define	SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION_3 3
#define	SECURITY_SUPPORT_PROVIDER_INTERFACE_VERSION_4 4
#define	SECURITY_NATIVE_DREP 0x00000010
#define	SECURITY_NETWORK_DREP 0x00000000
#define	SECPKG_ID_NONE 0xFFFF
#define	SECPKG_CRED_ATTR_NAMES 1
#define	SECPKG_CRED_ATTR_SSI_PROVIDER 2
#define	SECPKG_ATTR_SIZES 0
#define	SECPKG_ATTR_NAMES 1
#define	SECPKG_ATTR_LIFESPAN 2
#define	SECPKG_ATTR_DCE_INFO 3
#define	SECPKG_ATTR_STREAM_SIZES 4
#define	SECPKG_ATTR_KEY_INFO 5
#define	SECPKG_ATTR_AUTHORITY 6
#define	SECPKG_ATTR_PROTO_INFO 7
#define	SECPKG_ATTR_PASSWORD_EXPIRY 8
#define	SECPKG_ATTR_SESSION_KEY 9
#define	SECPKG_ATTR_PACKAGE_INFO 10
#define	SECPKG_ATTR_USER_FLAGS 11
#define	SECPKG_ATTR_NEGOTIATION_INFO 12
#define	SECPKG_ATTR_NATIVE_NAMES 13
#define	SECPKG_ATTR_FLAGS 14
#define	SECPKG_ATTR_USE_VALIDATED 15
#define	SECPKG_ATTR_CREDENTIAL_NAME 16
#define	SECPKG_ATTR_TARGET_INFORMATION 17
#define	SECPKG_ATTR_ACCESS_TOKEN 18
#define	SECPKG_ATTR_TARGET 19
#define	SECPKG_ATTR_AUTHENTICATION_ID 20
#define	SECPKG_ATTR_LOGOFF_TIME 21
#define	SECPKG_ATTR_NEGO_KEYS 22
#define	SECPKG_ATTR_PROMPTING_NEEDED 24
#define	SECPKG_ATTR_UNIQUE_BINDINGS 25
#define	SECPKG_ATTR_ENDPOINT_BINDINGS 26
#define	SECPKG_ATTR_CLIENT_SPECIFIED_TARGET 27
#define	SECPKG_ATTR_LAST_CLIENT_TOKEN_STATUS 30
#define	SECPKG_ATTR_NEGO_PKG_INFO 31
#define	SECPKG_ATTR_NEGO_STATUS 32
#define	SECPKG_ATTR_CONTEXT_DELETED 33
#define	SECPKG_FLAG_INTEGRITY 0x00000001
#define	SECPKG_FLAG_PRIVACY 0x00000002
#define	SECPKG_FLAG_TOKEN_ONLY 0x00000004
#define	SECPKG_FLAG_DATAGRAM 0x00000008
#define	SECPKG_FLAG_CONNECTION 0x00000010
#define	SECPKG_FLAG_MULTI_REQUIRED 0x00000020
#define	SECPKG_FLAG_CLIENT_ONLY 0x00000040
#define	SECPKG_FLAG_EXTENDED_ERROR 0x00000080
#define	SECPKG_FLAG_IMPERSONATION 0x00000100
#define	SECPKG_FLAG_ACCEPT_WIN32_NAME 0x00000200
#define	SECPKG_FLAG_STREAM 0x00000400
#define	SECPKG_FLAG_NEGOTIABLE 0x00000800
#define	SECPKG_FLAG_GSS_COMPATIBLE 0x00001000
#define	SECPKG_FLAG_LOGON 0x00002000
#define	SECPKG_FLAG_ASCII_BUFFERS 0x00004000
#define	SECPKG_FLAG_FRAGMENT 0x00008000
#define	SECPKG_FLAG_MUTUAL_AUTH 0x00010000
#define	SECPKG_FLAG_DELEGATION 0x00020000
#define	SECPKG_FLAG_READONLY_WITH_CHECKSUM 0x00040000
#define	SECPKG_FLAG_RESTRICTED_TOKENS 0x00080000
#define	SECPKG_FLAG_NEGO_EXTENDER 0x00100000
#define	SECPKG_FLAG_NEGOTIABLE2 0x00200000
#define	SECPKG_CRED_INBOUND 0x00000001
#define	SECPKG_CRED_OUTBOUND 0x00000002
#define	SECPKG_CRED_BOTH 0x00000003
#define	SECPKG_CRED_DEFAULT 0x00000004
#define	SECPKG_CRED_RESERVED 0xF0000000
#define	SECPKG_CRED_AUTOLOGON_RESTRICTED 0x00000010
#define	SECPKG_CRED_PROCESS_POLICY_ONLY 0x00000020
#define	SECPKG_CONTEXT_EXPORT_RESET_NEW 0x00000001
#define	SECPKG_CONTEXT_EXPORT_DELETE_OLD 0x00000002
#define	SECPKG_CONTEXT_EXPORT_TO_KERNEL 0x00000004
#define	SECPKG_ATTR_SUBJECT_SECURITY_ATTRIBUTES 128
#define	SECPKG_ATTR_NEGO_INFO_FLAG_NO_KERBEROS 0x1
#define	SECPKG_ATTR_NEGO_INFO_FLAG_NO_NTLM 0x2
#define	SecPkgContext_NativeNames SecPkgContext_NativeNamesW
#define	PSecPkgContext_NativeNames PSecPkgContext_NativeNamesW
#define	SECBUFFER_VERSION 0
#define	SECBUFFER_EMPTY 0
#define	SECBUFFER_DATA 1
#define	SECBUFFER_TOKEN 2
#define	SECBUFFER_PKG_PARAMS 3
#define	SECBUFFER_MISSING 4
#define	SECBUFFER_EXTRA 5
#define	SECBUFFER_STREAM_TRAILER 6
#define	SECBUFFER_STREAM_HEADER 7
#define	SECBUFFER_NEGOTIATION_INFO 8
#define	SECBUFFER_PADDING 9
#define	SECBUFFER_STREAM 10
#define	SECBUFFER_MECHLIST 11
#define	SECBUFFER_MECHLIST_SIGNATURE 12
#define	SECBUFFER_TARGET 13
#define	SECBUFFER_CHANNEL_BINDINGS 14
#define	SECBUFFER_CHANGE_PASS_RESPONSE 15
#define	SECBUFFER_TARGET_HOST 16
#define	SECBUFFER_ALERT 17
#define	SECBUFFER_ATTRMASK 0xF0000000
#define	SECBUFFER_READONLY 0x80000000
#define	SECBUFFER_READONLY_WITH_CHECKSUM 0x10000000
#define	SECBUFFER_RESERVED 0x60000000
#define	ISC_REQ_DELEGATE 0x00000001
#define	ISC_REQ_MUTUAL_AUTH 0x00000002
#define	ISC_REQ_REPLAY_DETECT 0x00000004
#define	ISC_REQ_SEQUENCE_DETECT 0x00000008
#define	ISC_REQ_CONFIDENTIALITY 0x00000010
#define	ISC_REQ_USE_SESSION_KEY 0x00000020
#define	ISC_REQ_PROMPT_FOR_CREDS 0x00000040
#define	ISC_REQ_USE_SUPPLIED_CREDS 0x00000080
#define	ISC_REQ_ALLOCATE_MEMORY 0x00000100
#define	ISC_REQ_USE_DCE_STYLE 0x00000200
#define	ISC_REQ_DATAGRAM 0x00000400
#define	ISC_REQ_CONNECTION 0x00000800
#define	ISC_REQ_CALL_LEVEL 0x00001000
#define	ISC_REQ_FRAGMENT_SUPPLIED 0x00002000
#define	ISC_REQ_EXTENDED_ERROR 0x00004000
#define	ISC_REQ_STREAM 0x00008000
#define	ISC_REQ_INTEGRITY 0x00010000
#define	ISC_REQ_IDENTIFY 0x00020000
#define	ISC_REQ_NULL_SESSION 0x00040000
#define	ISC_REQ_MANUAL_CRED_VALIDATION 0x00080000
#define	ISC_REQ_RESERVED1 0x00100000
#define	ISC_REQ_FRAGMENT_TO_FIT 0x00200000
#define	ISC_REQ_FORWARD_CREDENTIALS 0x00400000
#define	ISC_REQ_NO_INTEGRITY 0x00800000
#define	ISC_REQ_USE_HTTP_STYLE 0x01000000
#define	ISC_RET_DELEGATE 0x00000001
#define	ISC_RET_MUTUAL_AUTH 0x00000002
#define	ISC_RET_REPLAY_DETECT 0x00000004
#define	ISC_RET_SEQUENCE_DETECT 0x00000008
#define	ISC_RET_CONFIDENTIALITY 0x00000010
#define	ISC_RET_USE_SESSION_KEY 0x00000020
#define	ISC_RET_USED_COLLECTED_CREDS 0x00000040
#define	ISC_RET_USED_SUPPLIED_CREDS 0x00000080
#define	ISC_RET_ALLOCATED_MEMORY 0x00000100
#define	ISC_RET_USED_DCE_STYLE 0x00000200
#define	ISC_RET_DATAGRAM 0x00000400
#define	ISC_RET_CONNECTION 0x00000800
#define	ISC_RET_INTERMEDIATE_RETURN 0x00001000
#define	ISC_RET_CALL_LEVEL 0x00002000
#define	ISC_RET_EXTENDED_ERROR 0x00004000
#define	ISC_RET_STREAM 0x00008000
#define	ISC_RET_INTEGRITY 0x00010000
#define	ISC_RET_IDENTIFY 0x00020000
#define	ISC_RET_NULL_SESSION 0x00040000
#define	ISC_RET_MANUAL_CRED_VALIDATION 0x00080000
#define	ISC_RET_RESERVED1 0x00100000
#define	ISC_RET_FRAGMENT_ONLY 0x00200000
#define	ISC_RET_FORWARD_CREDENTIALS 0x00400000
#define	ISC_RET_USED_HTTP_STYLE 0x01000000
#define	ISC_RET_NO_ADDITIONAL_TOKEN 0x02000000
#define	ISC_RET_REAUTHENTICATION 0x08000000
#define	ASC_REQ_DELEGATE 0x00000001
#define	ASC_REQ_MUTUAL_AUTH 0x00000002
#define	ASC_REQ_REPLAY_DETECT 0x00000004
#define	ASC_REQ_SEQUENCE_DETECT 0x00000008
#define	ASC_REQ_CONFIDENTIALITY 0x00000010
#define	ASC_REQ_USE_SESSION_KEY 0x00000020
#define	ASC_REQ_ALLOCATE_MEMORY 0x00000100
#define	ASC_REQ_USE_DCE_STYLE 0x00000200
#define	ASC_REQ_DATAGRAM 0x00000400
#define	ASC_REQ_CONNECTION 0x00000800
#define	ASC_REQ_CALL_LEVEL 0x00001000
#define	ASC_REQ_EXTENDED_ERROR 0x00008000
#define	ASC_REQ_STREAM 0x00010000
#define	ASC_REQ_INTEGRITY 0x00020000
#define	ASC_REQ_LICENSING 0x00040000
#define	ASC_REQ_IDENTIFY 0x00080000
#define	ASC_REQ_ALLOW_NULL_SESSION 0x00100000
#define	ASC_REQ_ALLOW_NON_USER_LOGONS 0x00200000
#define	ASC_REQ_ALLOW_CONTEXT_REPLAY 0x00400000
#define	ASC_REQ_FRAGMENT_TO_FIT 0x00800000
#define	ASC_REQ_FRAGMENT_SUPPLIED 0x00002000
#define	ASC_REQ_NO_TOKEN 0x01000000
#define	ASC_REQ_PROXY_BINDINGS 0x04000000
#define	ASC_REQ_ALLOW_MISSING_BINDINGS 0x10000000
#define	ASC_RET_DELEGATE 0x00000001
#define	ASC_RET_MUTUAL_AUTH 0x00000002
#define	ASC_RET_REPLAY_DETECT 0x00000004
#define	ASC_RET_SEQUENCE_DETECT 0x00000008
#define	ASC_RET_CONFIDENTIALITY 0x00000010
#define	ASC_RET_USE_SESSION_KEY 0x00000020
#define	ASC_RET_ALLOCATED_MEMORY 0x00000100
#define	ASC_RET_USED_DCE_STYLE 0x00000200
#define	ASC_RET_DATAGRAM 0x00000400
#define	ASC_RET_CONNECTION 0x00000800
#define	ASC_RET_CALL_LEVEL 0x00002000
#define	ASC_RET_THIRD_LEG_FAILED 0x00004000
#define	ASC_RET_EXTENDED_ERROR 0x00008000
#define	ASC_RET_STREAM 0x00010000
#define	ASC_RET_INTEGRITY 0x00020000
#define	ASC_RET_LICENSING 0x00040000
#define	ASC_RET_IDENTIFY 0x00080000
#define	ASC_RET_NULL_SESSION 0x00100000
#define	ASC_RET_ALLOW_NON_USER_LOGONS 0x00200000
#define	ASC_RET_ALLOW_CONTEXT_REPLAY 0x00400000
#define	ASC_RET_FRAGMENT_ONLY 0x00800000
#define	ASC_RET_NO_TOKEN 0x01000000
#define	ASC_RET_NO_ADDITIONAL_TOKEN 0x02000000
#define	ASC_RET_NO_PROXY_BINDINGS 0x04000000
#define	ASC_RET_MISSING_BINDINGS 0x10000000
#define	SEC_DELETED_HANDLE ((ULONG_PTR)(-2))
#define	SecInvalidateHandle(x) ((PSecHandle)(x))->dwLower = ((PSecHandle)(x))->dwUpper = ((ULONG_PTR)((INT_PTR)-1));
#define	SecIsValidHandle(x)
#define	PSSPI_SEC_STRING PSECURITY_STRING
#define	__SECSTATUS_DEFINED__
#define	_AUTH_IDENTITY_EX2_DEFINED
#define	SEC_WINNT_AUTH_IDENTITY_VERSION_2 0x201
#define	_AUTH_IDENTITY_DEFINED
#define	SEC_WINNT_AUTH_IDENTITY_ANSI 0x1
#define	SEC_WINNT_AUTH_IDENTITY_UNICODE 0x2
#define	SEC_WINNT_AUTH_IDENTITY SEC_WINNT_AUTH_IDENTITY_W
#define	PSEC_WINNT_AUTH_IDENTITY PSEC_WINNT_AUTH_IDENTITY_W
#define	_SEC_WINNT_AUTH_IDENTITY _SEC_WINNT_AUTH_IDENTITY_W
#define	SEC_WINNT_AUTH_IDENTITY_VERSION 0x200
#define	SEC_WINNT_AUTH_IDENTITY_EX SEC_WINNT_AUTH_IDENTITY_EXW
#define	PSEC_WINNT_AUTH_IDENTITY_EX PSEC_WINNT_AUTH_IDENTITY_EXW
#define	__SECHANDLE_DEFINED__
#define	SecPkgInfo SecPkgInfoW
#define	PSecPkgInfo PSecPkgInfoW
#define	SecPkgCredentials_Names SecPkgCredentials_NamesW
#define	PSecPkgCredentials_Names PSecPkgCredentials_NamesW
#define	SecPkgContext_Names SecPkgContext_NamesW
#define	PSecPkgContext_Names PSecPkgContext_NamesW
#define	SecPkgContext_CredentialName SecPkgContext_CredentialNameW
#define	PSecPkgContext_CredentialName PSecPkgContext_CredentialNameW
#define	SecPkgContext_ProtoInfo SecPkgContext_ProtoInfoW
#define	PSecPkgContext_ProtoInfo PSecPkgContext_ProtoInfoW
#define	SecPkgContext_KeyInfo SecPkgContext_KeyInfoW
#define	PSecPkgContext_KeyInfo PSecPkgContext_KeyInfoW
#define	SecPkgContext_PackageInfo SecPkgContext_PackageInfoW
#define	PSecPkgContext_PackageInfo PSecPkgContext_PackageInfoW
#define	SecPkgContext_Authority SecPkgContext_AuthorityW
#define	PSecPkgContext_Authority PSecPkgContext_AuthorityW
#define	SecurityFunctionTable SecurityFunctionTableW
#define	PSecurityFunctionTable PSecurityFunctionTableW
#define	AcquireCredentialsHandle AcquireCredentialsHandleW
#define	ACQUIRE_CREDENTIALS_HANDLE_FN ACQUIRE_CREDENTIALS_HANDLE_FN_W
#define	AddCredentials AddCredentialsA
#define	ADD_CREDENTIALS_FN ADD_CREDENTIALS_FN_A
#define	EnumerateSecurityPackages EnumerateSecurityPackagesW
#define	ENUMERATE_SECURITY_PACKAGES_FN ENUMERATE_SECURITY_PACKAGES_FN_W
#define	ImportSecurityContext ImportSecurityContextW
#define	IMPORT_SECURITY_CONTEXT_FN IMPORT_SECURITY_CONTEXT_FN_W
#define	InitializeSecurityContext InitializeSecurityContextW
#define	INITIALIZE_SECURITY_CONTEXT_FN INITIALIZE_SECURITY_CONTEXT_FN_W
#define	InitSecurityInterface InitSecurityInterfaceW
#define	INIT_SECURITY_INTERFACE INIT_SECURITY_INTERFACE_W
#define	QueryContextAttributes QueryContextAttributesW
#define	QUERY_CONTEXT_ATTRIBUTES_FN QUERY_CONTEXT_ATTRIBUTES_FN_W
#define	QueryCredentialsAttributes QueryCredentialsAttributesW
#define	QUERY_CREDENTIALS_ATTRIBUTES_FN QUERY_CREDENTIALS_ATTRIBUTES_FN_W
#define	QuerySecurityPackageInfo QuerySecurityPackageInfoW
#define	QUERY_SECURITY_PACKAGE_INFO_FN QUERY_SECURITY_PACKAGE_INFO_FN_W
#define	SEC_WINNT_AUTH_IDENTITY_MARSHALLED 0x04
#define	SEC_WINNT_AUTH_IDENTITY_ONLY 0x08
#define	FreeCredentialHandle FreeCredentialsHandle
#define	NLS_OEM_LEAD_BYTE_INFO NlsOemLeadByteInfo
#define	NLS_MB_CODE_PAGE_TAG NlsMbOemCodePageTag
#define	NETWORK_OPEN_ECP_IN_FLAG_DISABLE_HANDLE_COLLAPSING 0x1
#define	NETWORK_OPEN_ECP_IN_FLAG_DISABLE_HANDLE_DURABILITY 0x2
#define	NETWORK_OPEN_ECP_IN_FLAG_FORCE_BUFFERED_SYNCHRONOUS_IO_HACK 0x80000000
#define	PIN_WAIT (1)
#define	PIN_EXCLUSIVE (2)
#define	PIN_NO_READ (4)
#define	PIN_IF_BCB (8)
#define	PIN_CALLER_TRACKS_DIRTY_DATA (32)
#define	PIN_HIGH_PRIORITY (64)
#define	MAP_WAIT 1
#define	MAP_NO_READ (16)
#define	MAP_HIGH_PRIORITY (64)
#define	IOCTL_REDIR_QUERY_PATH CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 99, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	IOCTL_REDIR_QUERY_PATH_EX CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 100, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	VOLSNAPCONTROLTYPE 0x00000053
#define	IOCTL_VOLSNAP_FLUSH_AND_HOLD_WRITES CTL_CODE(VOLSNAPCONTROLTYPE, 0, METHOD_BUFFERED, FILE_READ_ACCESS \| FILE_WRITE_ACCESS)
#define	VER_PRODUCTBUILD 10000
#define	FS_LFN_APIS 0x00004000
#define	FILE_STORAGE_TYPE_SPECIFIED 0x00000041 /* FILE_DIRECTORY_FILE \| FILE_NON_DIRECTORY_FILE */
#define	FILE_STORAGE_TYPE_DEFAULT (StorageTypeDefault << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_DIRECTORY (StorageTypeDirectory << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_FILE (StorageTypeFile << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_DOCFILE (StorageTypeDocfile << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_JUNCTION_POINT (StorageTypeJunctionPoint << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_CATALOG (StorageTypeCatalog << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_STRUCTURED_STORAGE (StorageTypeStructuredStorage << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_EMBEDDING (StorageTypeEmbedding << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_STORAGE_TYPE_STREAM (StorageTypeStream << FILE_STORAGE_TYPE_SHIFT)
#define	FILE_MINIMUM_STORAGE_TYPE FILE_STORAGE_TYPE_DEFAULT
#define	FILE_MAXIMUM_STORAGE_TYPE FILE_STORAGE_TYPE_STREAM
#define	FILE_STORAGE_TYPE_MASK 0x000f0000
#define	FILE_STORAGE_TYPE_SHIFT 16
#define	FILE_VC_QUOTAS_LOG_VIOLATIONS 0x00000004
#define	IO_ATTACH_DEVICE_API 0x80000000
#define	IO_TYPE_APC 18
#define	IO_TYPE_DPC 19
#define	IO_TYPE_DEVICE_QUEUE 20
#define	IO_TYPE_EVENT_PAIR 21
#define	IO_TYPE_INTERRUPT 22
#define	IO_TYPE_PROFILE 23
#define	IRP_BEING_VERIFIED 0x10
#define	MAILSLOT_CLASS_FIRSTCLASS 1
#define	MAILSLOT_CLASS_SECONDCLASS 2
#define	MAILSLOT_SIZE_AUTO 0
#define	MEM_DOS_LIM 0x40000000
#define	OB_TYPE_TYPE 1
#define	OB_TYPE_DIRECTORY 2
#define	OB_TYPE_SYMBOLIC_LINK 3
#define	OB_TYPE_TOKEN 4
#define	OB_TYPE_PROCESS 5
#define	OB_TYPE_THREAD 6
#define	OB_TYPE_EVENT 7
#define	OB_TYPE_EVENT_PAIR 8
#define	OB_TYPE_MUTANT 9
#define	OB_TYPE_SEMAPHORE 10
#define	OB_TYPE_TIMER 11
#define	OB_TYPE_PROFILE 12
#define	OB_TYPE_WINDOW_STATION 13
#define	OB_TYPE_DESKTOP 14
#define	OB_TYPE_SECTION 15
#define	OB_TYPE_KEY 16
#define	OB_TYPE_PORT 17
#define	OB_TYPE_ADAPTER 18
#define	OB_TYPE_CONTROLLER 19
#define	OB_TYPE_DEVICE 20
#define	OB_TYPE_DRIVER 21
#define	OB_TYPE_IO_COMPLETION 22
#define	OB_TYPE_FILE 23
#define	SEC_BASED 0x00200000
#define	TOKEN_HAS_ADMIN_GROUP 0x08
#define	FSCTL_GET_HFS_INFORMATION CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 31, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_READ_PROPERTY_DATA CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 33, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_WRITE_PROPERTY_DATA CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 34, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_DUMP_PROPERTY_DATA CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 37, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_HSM_MSG CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 66, METHOD_BUFFERED, FILE_READ_DATA \| FILE_WRITE_DATA)
#define	FSCTL_NSS_CONTROL CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 67, METHOD_BUFFERED, FILE_WRITE_DATA)
#define	FSCTL_HSM_DATA CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 68, METHOD_NEITHER, FILE_READ_DATA \| FILE_WRITE_DATA)
#define	FSCTL_NSS_RCONTROL CTL_CODE(FILE_DEVICE_FILE_SYSTEM, 70, METHOD_BUFFERED, FILE_READ_DATA)
#define	FSCTL_NETWORK_SET_CONFIGURATION_INFO CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 102, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_GET_CONFIGURATION_INFO CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 103, METHOD_OUT_DIRECT, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_GET_CONNECTION_INFO CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 104, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_ENUMERATE_CONNECTIONS CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 105, METHOD_NEITHER, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_DELETE_CONNECTION CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 107, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_GET_STATISTICS CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 116, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_SET_DOMAIN_NAME CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 120, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	FSCTL_NETWORK_REMOTE_BOOT_INIT_SCRT CTL_CODE(FILE_DEVICE_NETWORK_FILE_SYSTEM, 250, METHOD_BUFFERED, FILE_ANY_ACCESS)
#define	LPC_CLIENT_ID CLIENT_ID
#define	LPC_SIZE_T SIZE_T
#define	LPC_PVOID PVOID
#define	LPC_HANDLE HANDLE
#define	LPC_KERNELMODE_MESSAGE (CSHORT)((USHORT)0x8000)
#define	PsDereferenceImpersonationToken(T)
#define	SeEnableAccessToExports() SeExports = (PSE_EXPORTS )SeExports;
Typedefs
typedef UNICODE_STRING	LSA_UNICODE_STRING
typedef UNICODE_STRING *	PLSA_UNICODE_STRING
typedef STRING	LSA_STRING
typedef STRING *	PLSA_STRING
typedef OBJECT_ATTRIBUTES	LSA_OBJECT_ATTRIBUTES
typedef OBJECT_ATTRIBUTES *	PLSA_OBJECT_ATTRIBUTES
typedef enum _SID_NAME_USE *	PSID_NAME_USE
typedef SID_AND_ATTRIBUTES	SID_AND_ATTRIBUTES_ARRAY [ANYSIZE_ARRAY]
typedef SID_AND_ATTRIBUTES_ARRAY *	PSID_AND_ATTRIBUTES_ARRAY
typedef ULONG_PTR	SID_HASH_ENTRY
typedef ULONG_PTR *	PSID_HASH_ENTRY
typedef USHORT	SECURITY_DESCRIPTOR_CONTROL
typedef USHORT *	PSECURITY_DESCRIPTOR_CONTROL
typedef enum _AUDIT_EVENT_TYPE *	PAUDIT_EVENT_TYPE
typedef ULONG	ACCESS_REASON
typedef enum _SE_AUDIT_OPERATION *	PSE_AUDIT_OPERATION
typedef enum _TOKEN_TYPE *	PTOKEN_TYPE
typedef enum _TOKEN_INFORMATION_CLASS *	PTOKEN_INFORMATION_CLASS
typedef enum _MANDATORY_LEVEL *	PMANDATORY_LEVEL
typedef NTSTATUS(NTAPI *	PSE_LOGON_SESSION_TERMINATED_ROUTINE )(IN PLUID LogonId)
typedef VOID(NTAPI *	PRTL_FREE_STRING_ROUTINE )(_In_ __drv_freesMem(Mem) _Post_invalid_ PVOID Buffer)
typedef ULONG	LSA_OPERATIONAL_MODE
typedef ULONG *	PLSA_OPERATIONAL_MODE
typedef enum _SECURITY_LOGON_TYPE *	PSECURITY_LOGON_TYPE
typedef enum _MSV1_0_LOGON_SUBMIT_TYPE *	PMSV1_0_LOGON_SUBMIT_TYPE
typedef enum _MSV1_0_PROFILE_BUFFER_TYPE *	PMSV1_0_PROFILE_BUFFER_TYPE
typedef enum _MSV1_0_PROTOCOL_MESSAGE_TYPE *	PMSV1_0_PROTOCOL_MESSAGE_TYPE
typedef enum _LINK_TRACKING_INFORMATION_TYPE *	PLINK_TRACKING_INFORMATION_TYPE
typedef _In_ BOOLEAN	FsActive
typedef enum _FS_FILTER_SECTION_SYNC_TYPE *	PFS_FILTER_SECTION_SYNC_TYPE
typedef enum _FS_FILTER_STREAM_FO_NOTIFICATION_TYPE *	PFS_FILTER_STREAM_FO_NOTIFICATION_TYPE
typedef _Out_ PVOID *	CompletionContext
typedef _In_ NTSTATUS	OperationStatus
typedef struct KAPC_STATE *	PKAPC_STATE
typedef struct KQUEUE *	PKQUEUE
typedef ULONG	LBN
typedef LBN *	PLBN
typedef ULONG	VBN
typedef VBN *	PVBN
typedef VOID(NTAPI *	PFSRTL_STACK_OVERFLOW_ROUTINE )(_In_ PVOID Context, _In_ PKEVENT Event)
typedef VOID(*	PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK )(_Inout_ PVOID EcpContext, _In_ LPCGUID EcpType)
typedef struct _ECP_LIST	ECP_LIST
typedef struct _ECP_LIST *	PECP_LIST
typedef ULONG	FSRTL_ALLOCATE_ECPLIST_FLAGS
typedef ULONG	FSRTL_ALLOCATE_ECP_FLAGS
typedef ULONG	FSRTL_ECP_LOOKASIDE_FLAGS
typedef enum _FSRTL_CHANGE_BACKING_TYPE *	PFSRTL_CHANGE_BACKING_TYPE
typedef VOID(*	PFN_FSRTLTEARDOWNPERSTREAMCONTEXTS )(_In_ PFSRTL_ADVANCED_FCB_HEADER AdvancedHeader)
typedef _In_ PIRP	Irp
typedef _In_ PFILE_LOCK_INFO	FileLockInfo
typedef PVOID	OPLOCK
typedef PVOID *	POPLOCK
typedef PVOID	PNOTIFY_SYNC
typedef struct _ECP_HEADER	ECP_HEADER
typedef struct _ECP_HEADER *	PECP_HEADER
typedef _In_opt_ PVOID	TargetContext
typedef _In_opt_ PVOID _In_ PSECURITY_SUBJECT_CONTEXT	SubjectContext
typedef _In_ PVOID	FilterContext
typedef _In_ BOOLEAN	Wait
typedef _In_ PLARGE_INTEGER	FileOffset
typedef _In_ PLARGE_INTEGER _In_ ULONG	Length
typedef _In_ PLARGE_INTEGER _In_ ULONG _In_ PLARGE_INTEGER	OldestLsn
typedef _In_ PLARGE_INTEGER _In_ ULONG _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER	NewestLsn
typedef _In_ PLARGE_INTEGER _In_ ULONG _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ PVOID	Context1
typedef _In_ PLARGE_INTEGER _In_ ULONG _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ PVOID _In_ PVOID	Context2
typedef _In_ LARGE_INTEGER	Lsn
typedef WCHAR	SEC_WCHAR
typedef CHAR	SEC_CHAR
typedef LARGE_INTEGER	_SECURITY_INTEGER
typedef LARGE_INTEGER	SECURITY_INTEGER
typedef LARGE_INTEGER *	PSECURITY_INTEGER
typedef SECURITY_INTEGER	TimeStamp
typedef SECURITY_INTEGER *	PTimeStamp
typedef UNICODE_STRING	SECURITY_STRING
typedef UNICODE_STRING *	PSECURITY_STRING
typedef PVOID	PSEC_WINNT_AUTH_IDENTITY_OPAQUE
typedef LONG	SECURITY_STATUS
typedef enum _SECPKG_CRED_CLASS *	PSECPKG_CRED_CLASS
typedef SecHandle	CredHandle
typedef SecHandle *	PCredHandle
typedef SecHandle	CtxtHandle
typedef SecHandle *	PCtxtHandle
typedef VOID(SEC_ENTRY *	SEC_GET_KEY_FN )(PVOID Arg, PVOID Principal, ULONG KeyVer, PVOID Key, SECURITY_STATUS Status)
typedef SECURITY_STATUS(SEC_ENTRY *	ACCEPT_SECURITY_CONTEXT_FN )(PCredHandle, PCtxtHandle, PSecBufferDesc, ULONG, ULONG, PCtxtHandle, PSecBufferDesc, PULONG, PTimeStamp)
typedef SECURITY_STATUS(SEC_ENTRY *	ACQUIRE_CREDENTIALS_HANDLE_FN_W )(PSSPI_SEC_STRING, PSSPI_SEC_STRING, ULONG, PVOID, PVOID, SEC_GET_KEY_FN, PVOID, PCredHandle, PTimeStamp)
typedef SECURITY_STATUS(SEC_ENTRY *	ADD_CREDENTIALS_FN_A )(PCredHandle, SEC_CHAR , SEC_CHAR , ULONG, PVOID, SEC_GET_KEY_FN, PVOID, PTimeStamp)
typedef SECURITY_STATUS(SEC_ENTRY *	ADD_CREDENTIALS_FN_W )(PCredHandle, PSSPI_SEC_STRING, PSSPI_SEC_STRING, ULONG, PVOID, SEC_GET_KEY_FN, PVOID, PTimeStamp)
typedef SECURITY_STATUS(SEC_ENTRY *	APPLY_CONTROL_TOKEN_FN )(PCtxtHandle, PSecBufferDesc)
typedef SECURITY_STATUS(SEC_ENTRY *	COMPLETE_AUTH_TOKEN_FN )(PCtxtHandle, PSecBufferDesc)
typedef SECURITY_STATUS(SEC_ENTRY *	DECRYPT_MESSAGE_FN )(PCtxtHandle, PSecBufferDesc, ULONG, PULONG)
typedef SECURITY_STATUS(SEC_ENTRY *	DELETE_SECURITY_CONTEXT_FN )(PCtxtHandle)
typedef SECURITY_STATUS(SEC_ENTRY *	ENCRYPT_MESSAGE_FN )(PCtxtHandle, ULONG, PSecBufferDesc, ULONG)
typedef SECURITY_STATUS(SEC_ENTRY *	ENUMERATE_SECURITY_PACKAGES_FN_W )(PULONG, PSecPkgInfoW *)
typedef SECURITY_STATUS(SEC_ENTRY *	EXPORT_SECURITY_CONTEXT_FN )(PCtxtHandle, ULONG, PSecBuffer, PVOID *)
typedef SECURITY_STATUS(SEC_ENTRY *	FREE_CONTEXT_BUFFER_FN )(_Inout_ PVOID)
typedef SECURITY_STATUS(SEC_ENTRY *	FREE_CREDENTIALS_HANDLE_FN )(PCredHandle)
typedef SECURITY_STATUS(SEC_ENTRY *	IMPERSONATE_SECURITY_CONTEXT_FN )(PCtxtHandle)
typedef SECURITY_STATUS(SEC_ENTRY *	IMPORT_SECURITY_CONTEXT_FN_W )(PSSPI_SEC_STRING, PSecBuffer, PVOID, PCtxtHandle)
typedef SECURITY_STATUS(SEC_ENTRY *	INITIALIZE_SECURITY_CONTEXT_FN_W )(PCredHandle, PCtxtHandle, PSSPI_SEC_STRING, ULONG, ULONG, ULONG, PSecBufferDesc, ULONG, PCtxtHandle, PSecBufferDesc, PULONG, PTimeStamp)
typedef PSecurityFunctionTableW(SEC_ENTRY *	INIT_SECURITY_INTERFACE_W )(VOID)
typedef SECURITY_STATUS(SEC_ENTRY *	MAKE_SIGNATURE_FN )(PCtxtHandle, ULONG, PSecBufferDesc, ULONG)
typedef SECURITY_STATUS(SEC_ENTRY *	QUERY_CONTEXT_ATTRIBUTES_FN_W )(PCtxtHandle, ULONG, PVOID)
typedef SECURITY_STATUS(SEC_ENTRY *	QUERY_CREDENTIALS_ATTRIBUTES_FN_W )(PCredHandle, ULONG, PVOID)
typedef SECURITY_STATUS(SEC_ENTRY *	QUERY_SECURITY_CONTEXT_TOKEN_FN )(PCtxtHandle, PVOID *)
typedef SECURITY_STATUS(SEC_ENTRY *	QUERY_SECURITY_PACKAGE_INFO_FN_W )(PSSPI_SEC_STRING, PSecPkgInfoW *)
typedef SECURITY_STATUS(SEC_ENTRY *	REVERT_SECURITY_CONTEXT_FN )(PCtxtHandle)
typedef SECURITY_STATUS(SEC_ENTRY *	VERIFY_SIGNATURE_FN )(PCtxtHandle, PSecBufferDesc, ULONG, PULONG)
typedef struct sockaddr_storage *	PSOCKADDR_STORAGE_NFS
Enumerations
enum	SID_NAME_USE { SidTypeUser = 1, SidTypeGroup, SidTypeDomain, SidTypeAlias, SidTypeWellKnownGroup, SidTypeDeletedAccount, SidTypeInvalid, SidTypeUnknown, SidTypeComputer, SidTypeLabel, SidTypeUser = 1, SidTypeGroup, SidTypeDomain, SidTypeAlias, SidTypeWellKnownGroup, SidTypeDeletedAccount, SidTypeInvalid, SidTypeUnknown, SidTypeComputer, SidTypeLabel, SidTypeUser = 1, SidTypeGroup, SidTypeDomain, SidTypeAlias, SidTypeWellKnownGroup, SidTypeDeletedAccount, SidTypeInvalid, SidTypeUnknown, SidTypeComputer, SidTypeLabel, SidTypeUser = 1, SidTypeGroup, SidTypeDomain, SidTypeAlias, SidTypeWellKnownGroup, SidTypeDeletedAccount, SidTypeInvalid, SidTypeUnknown, SidTypeUser = 1, SidTypeGroup, SidTypeDomain, SidTypeAlias, SidTypeWellKnownGroup, SidTypeDeletedAccount, SidTypeInvalid, SidTypeUnknown, SidTypeComputer, SidTypeLabel }
enum	AUDIT_EVENT_TYPE { AuditEventObjectAccess, AuditEventDirectoryServiceAccess, AuditEventObjectAccess, AuditEventDirectoryServiceAccess, AuditEventObjectAccess, AuditEventDirectoryServiceAccess }
enum	ACCESS_REASON_TYPE { AccessReasonNone = 0x00000000, AccessReasonAllowedAce = 0x00010000, AccessReasonDeniedAce = 0x00020000, AccessReasonAllowedParentAce = 0x00030000, AccessReasonDeniedParentAce = 0x00040000, AccessReasonMissingPrivilege = 0x00100000, AccessReasonFromPrivilege = 0x00200000, AccessReasonIntegrityLevel = 0x00300000, AccessReasonOwnership = 0x00400000, AccessReasonNullDacl = 0x00500000, AccessReasonEmptyDacl = 0x00600000, AccessReasonNoSD = 0x00700000, AccessReasonNoGrant = 0x00800000, AccessReasonNone = 0x00000000, AccessReasonAllowedAce = 0x00010000, AccessReasonDeniedAce = 0x00020000, AccessReasonAllowedParentAce = 0x00030000, AccessReasonDeniedParentAce = 0x00040000, AccessReasonMissingPrivilege = 0x00100000, AccessReasonFromPrivilege = 0x00200000, AccessReasonIntegrityLevel = 0x00300000, AccessReasonOwnership = 0x00400000, AccessReasonNullDacl = 0x00500000, AccessReasonEmptyDacl = 0x00600000, AccessReasonNoSD = 0x00700000, AccessReasonNoGrant = 0x00800000 }
enum	SE_AUDIT_OPERATION { AuditPrivilegeObject, AuditPrivilegeService, AuditAccessCheck, AuditOpenObject, AuditOpenObjectWithTransaction, AuditCloseObject, AuditDeleteObject, AuditOpenObjectForDelete, AuditOpenObjectForDeleteWithTransaction, AuditCloseNonObject, AuditOpenNonObject, AuditObjectReference, AuditHandleCreation, AuditPrivilegeObject, AuditPrivilegeService, AuditAccessCheck, AuditOpenObject, AuditOpenObjectWithTransaction, AuditCloseObject, AuditDeleteObject, AuditOpenObjectForDelete, AuditOpenObjectForDeleteWithTransaction, AuditCloseNonObject, AuditOpenNonObject, AuditObjectReference, AuditHandleCreation }
enum	TOKEN_TYPE { TokenPrimary = 1, TokenImpersonation, TokenPrimary = 1, TokenImpersonation, TokenPrimary = 1, TokenImpersonation }
enum	TOKEN_INFORMATION_CLASS { TokenUser = 1, TokenGroups, TokenPrivileges, TokenOwner, TokenPrimaryGroup, TokenDefaultDacl, TokenSource, TokenImpersonationLevel, TokenStatistics, TokenRestrictedSids, TokenSessionId, TokenGroupsAndPrivileges, TokenSessionReference, TokenSandBoxInert, TokenAuditPolicy, TokenOrigin, TokenElevationType, TokenLinkedToken, TokenElevation, TokenHasRestrictions, TokenAccessInformation, TokenVirtualizationAllowed, TokenVirtualizationEnabled, TokenIntegrityLevel, TokenUIAccess, TokenMandatoryPolicy, TokenLogonSid, MaxTokenInfoClass, TokenUser = 1, TokenGroups, TokenPrivileges, TokenOwner, TokenPrimaryGroup, TokenDefaultDacl, TokenSource, TokenType, TokenImpersonationLevel, TokenStatistics, TokenRestrictedSids, TokenSessionId, TokenGroupsAndPrivileges, TokenSessionReference, TokenSandBoxInert, TokenAuditPolicy, TokenOrigin, TokenElevationType, TokenLinkedToken, TokenElevation, TokenHasRestrictions, TokenAccessInformation, TokenVirtualizationAllowed, TokenVirtualizationEnabled, TokenIntegrityLevel, TokenUIAccess, TokenMandatoryPolicy, TokenLogonSid, MaxTokenInfoClass, TokenUser = 1, TokenGroups, TokenPrivileges, TokenOwner, TokenPrimaryGroup, TokenDefaultDacl, TokenSource, TokenType, TokenImpersonationLevel, TokenStatistics, TokenRestrictedSids, TokenSessionId, TokenGroupsAndPrivileges, TokenSessionReference, TokenSandBoxInert, TokenAuditPolicy, TokenOrigin, TokenElevationType, TokenLinkedToken, TokenElevation, TokenHasRestrictions, TokenAccessInformation, TokenVirtualizationAllowed, TokenVirtualizationEnabled, TokenIntegrityLevel, TokenUIAccess, TokenMandatoryPolicy, TokenLogonSid, MaxTokenInfoClass }
enum	MANDATORY_LEVEL { MandatoryLevelUntrusted = 0, MandatoryLevelLow, MandatoryLevelMedium, MandatoryLevelHigh, MandatoryLevelSystem, MandatoryLevelSecureProcess, MandatoryLevelCount, MandatoryLevelUntrusted = 0, MandatoryLevelLow, MandatoryLevelMedium, MandatoryLevelHigh, MandatoryLevelSystem, MandatoryLevelSecureProcess, MandatoryLevelCount }
enum	OBJECT_INFORMATION_CLASS { ObjectBasicInformation = 0, ObjectTypeInformation = 2, ObjectNameInformation = 1, ObjectTypesInformation = 3, ObjectHandleFlagInformation = 4, ObjectSessionInformation = 5, MaxObjectInfoClass, ObjectBasicInformation, ObjectNameInformation, ObjectTypeInformation, ObjectAllInformation, ObjectDataInformation }
enum	SECURITY_LOGON_TYPE { UndefinedLogonType = 0, Interactive = 2, Network, Batch, Service, Proxy, Unlock, NetworkCleartext, NewCredentials, Interactive = 2, Network, Batch, Service, Proxy, Unlock, UndefinedLogonType = 0, Interactive = 2, Network, Batch, Service, Proxy, Unlock, NetworkCleartext, NewCredentials }
enum	MSV1_0_LOGON_SUBMIT_TYPE { MsV1_0InteractiveLogon = 2, MsV1_0Lm20Logon, MsV1_0NetworkLogon, MsV1_0SubAuthLogon, MsV1_0WorkstationUnlockLogon = 7, MsV1_0S4ULogon = 12, MsV1_0VirtualLogon = 82, MsV1_0InteractiveLogon = 2, MsV1_0Lm20Logon, MsV1_0NetworkLogon, MsV1_0SubAuthLogon, MsV1_0WorkstationUnlockLogon = 7, MsV1_0InteractiveLogon = 2, MsV1_0Lm20Logon, MsV1_0NetworkLogon, MsV1_0SubAuthLogon, MsV1_0WorkstationUnlockLogon = 7, MsV1_0S4ULogon = 12, MsV1_0VirtualLogon = 82 }
enum	MSV1_0_PROFILE_BUFFER_TYPE { MsV1_0InteractiveProfile = 2, MsV1_0Lm20LogonProfile, MsV1_0SmartCardProfile, MsV1_0InteractiveProfile = 2, MsV1_0Lm20LogonProfile, MsV1_0SmartCardProfile, MsV1_0InteractiveProfile = 2, MsV1_0Lm20LogonProfile, MsV1_0SmartCardProfile }
enum	MSV1_0_AVID { MsvAvEOL, MsvAvNbComputerName, MsvAvNbDomainName, MsvAvDnsComputerName, MsvAvDnsDomainName, MsvAvEOL, MsvAvNbComputerName, MsvAvNbDomainName, MsvAvDnsComputerName, MsvAvDnsDomainName, MsvAvEOL, MsvAvNbComputerName, MsvAvNbDomainName, MsvAvDnsComputerName, MsvAvDnsDomainName }
enum	MSV1_0_PROTOCOL_MESSAGE_TYPE { MsV1_0Lm20ChallengeRequest = 0, MsV1_0Lm20GetChallengeResponse, MsV1_0EnumerateUsers, MsV1_0GetUserInfo, MsV1_0ReLogonUsers, MsV1_0ChangePassword, MsV1_0ChangeCachedPassword, MsV1_0GenericPassthrough, MsV1_0CacheLogon, MsV1_0SubAuth, MsV1_0DeriveCredential, MsV1_0CacheLookup, MsV1_0Lm20ChallengeRequest = 0, MsV1_0Lm20GetChallengeResponse, MsV1_0EnumerateUsers, MsV1_0GetUserInfo, MsV1_0ReLogonUsers, MsV1_0ChangePassword, MsV1_0ChangeCachedPassword, MsV1_0GenericPassthrough, MsV1_0CacheLogon, MsV1_0SubAuth, MsV1_0DeriveCredential, MsV1_0CacheLookup, MsV1_0Lm20ChallengeRequest = 0, MsV1_0Lm20GetChallengeResponse, MsV1_0EnumerateUsers, MsV1_0GetUserInfo, MsV1_0ReLogonUsers, MsV1_0ChangePassword, MsV1_0ChangeCachedPassword, MsV1_0GenericPassthrough, MsV1_0CacheLogon, MsV1_0SubAuth, MsV1_0DeriveCredential, MsV1_0CacheLookup }
enum	LINK_TRACKING_INFORMATION_TYPE { NtfsLinkTrackingInformation, DfsLinkTrackingInformation, NtfsLinkTrackingInformation, DfsLinkTrackingInformation }
enum	FS_FILTER_SECTION_SYNC_TYPE { SyncTypeOther = 0, SyncTypeCreateSection, SyncTypeOther = 0, SyncTypeCreateSection }
enum	FS_FILTER_STREAM_FO_NOTIFICATION_TYPE { NotifyTypeCreate = 0, NotifyTypeRetired, NotifyTypeCreate = 0, NotifyTypeRetired }
enum	MMFLUSH_TYPE { MmFlushForDelete, MmFlushForWrite }
enum	FSRTL_COMPARISON_RESULT { LessThan = -1, EqualTo = 0, GreaterThan = 1, LessThan = -1, EqualTo = 0, GreaterThan = 1 }
enum	FSRTL_CHANGE_BACKING_TYPE { ChangeDataControlArea, ChangeImageControlArea, ChangeSharedCacheMap, ChangeDataControlArea, ChangeImageControlArea, ChangeSharedCacheMap }
enum	FAST_IO_POSSIBLE { FastIoIsNotPossible = 0, FastIoIsPossible, FastIoIsQuestionable, FastIoIsNotPossible = 0, FastIoIsPossible, FastIoIsQuestionable }
enum	SECPKG_CRED_CLASS { SecPkgCredClass_None = 0, SecPkgCredClass_Ephemeral = 10, SecPkgCredClass_PersistedGeneric = 20, SecPkgCredClass_PersistedSpecific = 30, SecPkgCredClass_Explicit = 40, SecPkgCredClass_None = 0, SecPkgCredClass_Ephemeral = 10, SecPkgCredClass_PersistedGeneric = 20, SecPkgCredClass_PersistedSpecific = 30, SecPkgCredClass_Explicit = 40 }
enum	NETWORK_OPEN_LOCATION_QUALIFIER { NetworkOpenLocationAny, NetworkOpenLocationRemote, NetworkOpenLocationLoopback, NetworkOpenLocationAny, NetworkOpenLocationRemote, NetworkOpenLocationLoopback }
enum	NETWORK_OPEN_INTEGRITY_QUALIFIER { NetworkOpenIntegrityAny, NetworkOpenIntegrityNone, NetworkOpenIntegritySigned, NetworkOpenIntegrityEncrypted, NetworkOpenIntegrityMaximum, NetworkOpenIntegrityAny, NetworkOpenIntegrityNone, NetworkOpenIntegritySigned, NetworkOpenIntegrityEncrypted, NetworkOpenIntegrityMaximum }
enum	FILE_STORAGE_TYPE { StorageTypeDefault = 1, StorageTypeDirectory, StorageTypeFile, StorageTypeJunctionPoint, StorageTypeCatalog, StorageTypeStructuredStorage, StorageTypeEmbedding, StorageTypeStream, StorageTypeDefault = 1, StorageTypeDirectory, StorageTypeFile, StorageTypeJunctionPoint, StorageTypeCatalog, StorageTypeStructuredStorage, StorageTypeEmbedding, StorageTypeStream }
Functions
	_Function_class_ (RTL_ALLOCATE_STRING_ROUTINE) _IRQL_requires_max_(PASSIVE_LEVEL) __drv_allocatesMem(Mem) typedef PVOID(NTAPI *PRTL_ALLOCATE_STRING_ROUTINE)(_In_ SIZE_T NumberOfBytes)
	_Function_class_ (RTL_HEAP_COMMIT_ROUTINE) _IRQL_requires_same_ typedef NTSTATUS(NTAPI *PRTL_HEAP_COMMIT_ROUTINE)(_In_ PVOID Base
_Must_inspect_result_ _Ret_maybenull_	_Post_writable_byte_size_ (Size) NTSYSAPI PVOID NTAPI RtlAllocateHeap(_In_ HANDLE HeapHandle
	_Success_ (return!=0) NTSYSAPI BOOLEAN NTAPI RtlFreeHeap(_In_ PVOID HeapHandle
NTSYSAPI VOID NTAPI	RtlCaptureContext (_Out_ PCONTEXT ContextRecord)
	_Ret_range_ (<, MAXLONG) NTSYSAPI ULONG NTAPI RtlRandom(_Inout_ PULONG Seed)
	_IRQL_requires_max_ (APC_LEVEL) _Success_(return!=0) _Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI RtlCreateUnicodeString(_Out_ _At_(DestinationString->Buffer
	__drv_allocatesMem (Mem)) PUNICODE_STRING DestinationString
	_IRQL_requires_max_ (PASSIVE_LEVEL) _Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI RtlOemStringToUnicodeString(_When_(AllocateDestinationString
_Out_	_At_ (DestinationString->Buffer, __drv_allocatesMem(Mem))) _When_(!AllocateDestinationString
_Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI	RtlDowncaseUnicodeString (_When_(AllocateDestinationString, _Out_ _At_(UniDest->Buffer, __drv_allocatesMem(Mem))) _When_(!AllocateDestinationString, _Inout_) PUNICODE_STRING UniDest, _In_ PCUNICODE_STRING UniSource, _In_ BOOLEAN AllocateDestinationString)
	__drv_freesMem (Mem)) POEM_STRING OemString)
*BytesInUnicodeString PWCH _In_ ULONG _Out_opt_ PULONG	_In_reads_bytes_ (BytesInMultiByteString) const CHAR *MultiByteString
	_In_reads_bytes_ (BytesInUnicodeString) PCWCH UnicodeString
*BytesInUnicodeString PWSTR _In_ ULONG _Out_opt_ PULONG	_In_reads_bytes_ (BytesInOemString) PCCH OemString
_Must_inspect_result_ NTSYSAPI SIZE_T NTAPI	RtlCompareMemoryUlong (_In_reads_bytes_(Length) PVOID Source, _In_ SIZE_T Length, _In_ ULONG Pattern)
NTSYSAPI VOID NTAPI	RtlSecondsSince1980ToTime (_In_ ULONG ElapsedSeconds, _Out_ PLARGE_INTEGER Time)
NTSYSAPI VOID NTAPI	RtlSecondsSince1970ToTime (_In_ ULONG ElapsedSeconds, _Out_ PLARGE_INTEGER Time)
_Must_inspect_result_ NTSYSAPI BOOLEAN NTAPI	RtlEqualSid (_In_ PSID Sid1, _In_ PSID Sid2)
NTSYSAPI PVOID NTAPI	RtlFreeSid (_In_ _Post_invalid_ PSID Sid)
_Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI	RtlAllocateAndInitializeSid (_In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, _In_ UCHAR SubAuthorityCount, _In_ ULONG SubAuthority0, _In_ ULONG SubAuthority1, _In_ ULONG SubAuthority2, _In_ ULONG SubAuthority3, _In_ ULONG SubAuthority4, _In_ ULONG SubAuthority5, _In_ ULONG SubAuthority6, _In_ ULONG SubAuthority7, _Outptr_ PSID *Sid)
NTSYSAPI PULONG NTAPI	RtlSubAuthoritySid (_In_ PSID Sid, _In_ ULONG SubAuthority)
	_Post_satisfies_ (return >=8 &&return<=SECURITY_MAX_SID_SIZE) NTSYSAPI ULONG NTAPI RtlLengthSid(_In_ PSID Sid)
	_Out_writes_bytes_ (Length) PSID Destination
_In_ ULONG _In_ ULONG	_In_reads_bytes_ (AceListLength) PVOID AceList
NTSYSAPI NTSTATUS NTAPI	RtlGetAce (_In_ PACL Acl, _In_ ULONG AceIndex, _Outptr_ PVOID *Ace)
NTSYSAPI NTSTATUS NTAPI	RtlGetDaclSecurityDescriptor (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Out_ PBOOLEAN DaclPresent, _Out_ PACL *Dacl, _Out_ PBOOLEAN DaclDefaulted)
	_Out_range_ (>, 0)) _When_(Status >=0
	_Out_writes_bytes_to_ (MaxBytesInUnicodeString,*BytesInUnicodeString) PWCH UnicodeString
_In_ ULONG _Out_opt_ PULONG	_In_reads_bytes_ (BytesInCustomCPString) PCH CustomCPString
	_Out_writes_bytes_to_ (MaxBytesInCustomCPString,*BytesInCustomCPString) PCH CustomCPString
_Must_inspect_result_ NTSYSAPI PVOID NTAPI	RtlCreateHeap (_In_ ULONG Flags, _In_opt_ PVOID HeapBase, _In_opt_ SIZE_T ReserveSize, _In_opt_ SIZE_T CommitSize, _In_opt_ PVOID Lock, _In_opt_ PRTL_HEAP_PARAMETERS Parameters)
NTSYSAPI PVOID NTAPI	RtlDestroyHeap (_In_ _Post_invalid_ PVOID HeapHandle)
NTSYSAPI USHORT NTAPI	RtlCaptureStackBackTrace (_In_ ULONG FramesToSkip, _In_ ULONG FramesToCapture, _Out_writes_to_(FramesToCapture, return) PVOID *BackTrace, _Out_opt_ PULONG BackTraceHash)
	_IRQL_requires_max_ (DISPATCH_LEVEL) NTSYSAPI NTSTATUS NTAPI RtlInitUnicodeStringEx(_Out_ PUNICODE_STRING DestinationString
_Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI	RtlValidateUnicodeString (_In_ ULONG Flags, _In_ PCUNICODE_STRING String)
NTSYSAPI NTSTATUS NTAPI	RtlGetCompressionWorkSpaceSize (_In_ USHORT CompressionFormatAndEngine, _Out_ PULONG CompressBufferWorkSpaceSize, _Out_ PULONG CompressFragmentWorkSpaceSize)
NTSYSAPI NTSTATUS NTAPI	RtlCompressBuffer (_In_ USHORT CompressionFormatAndEngine, _In_reads_bytes_(UncompressedBufferSize) PUCHAR UncompressedBuffer, _In_ ULONG UncompressedBufferSize, _Out_writes_bytes_to_(CompressedBufferSize,*FinalCompressedSize) PUCHAR CompressedBuffer, _In_ ULONG CompressedBufferSize, _In_ ULONG UncompressedChunkSize, _Out_ PULONG FinalCompressedSize, _In_ PVOID WorkSpace)
	_Out_writes_bytes_to_ (UncompressedBufferSize,*FinalUncompressedSize) PUCHAR UncompressedBuffer
_In_ ULONG	_In_reads_bytes_ (CompressedBufferSize) PUCHAR CompressedBuffer
	_Out_writes_bytes_to_ (UncompressedFragmentSize,*FinalUncompressedSize) PUCHAR UncompressedFragment
_In_ ULONG _In_ ULONG	_In_range_ (<, CompressedBufferSize) ULONG FragmentOffset
_In_ ULONG _In_ ULONG	_In_reads_bytes_ (CompressedTailSize) PUCHAR CompressedTail
_In_ ULONG	_Out_writes_bytes_ (CompressedBufferSize) PUCHAR CompressedBuffer
_In_ ULONG	_In_range_ (>=,(UncompressedBufferSize-(UncompressedBufferSize/16))) ULONG CompressedBufferSize
_In_ ULONG	_Inout_updates_bytes_ (CompressedDataInfoLength) PCOMPRESSED_DATA_INFO CompressedDataInfo
_In_ ULONG	_In_range_ (>, sizeof(COMPRESSED_DATA_INFO)) ULONG CompressedDataInfoLength
NTSYSAPI PUCHAR NTAPI	RtlSubAuthorityCountSid (_In_ PSID Sid)
	_When_ (Status< 0, _Out_range_(>, 0)) _When_(Status >=0
NTSYSAPI VOID NTAPI	RtlFillMemoryUlong (OUT PVOID Destination, IN SIZE_T Length, IN ULONG Pattern)
NTSYSAPI VOID NTAPI	RtlFillMemoryUlonglong (_Out_writes_bytes_all_(Length) PVOID Destination, _In_ SIZE_T Length, _In_ ULONGLONG Pattern)
NTSYSAPI NTSTATUS NTAPI	RtlNormalizeString (_In_ ULONG NormForm, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_writes_to_(DestinationStringLength,DestinationStringLength) PWSTR DestinationString, _Inout_ PLONG DestinationStringLength)
NTSYSAPI NTSTATUS NTAPI	RtlIsNormalizedString (_In_ ULONG NormForm, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_ PBOOLEAN Normalized)
NTSYSAPI NTSTATUS NTAPI	RtlIdnToAscii (_In_ ULONG Flags, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_writes_to_(DestinationStringLength,DestinationStringLength) PWSTR DestinationString, _Inout_ PLONG DestinationStringLength)
NTSYSAPI NTSTATUS NTAPI	RtlIdnToUnicode (IN ULONG Flags, IN PCWSTR SourceString, IN LONG SourceStringLength, OUT PWSTR DestinationString, IN OUT PLONG DestinationStringLength)
NTSYSAPI NTSTATUS NTAPI	RtlIdnToNameprepUnicode (_In_ ULONG Flags, _In_ PCWSTR SourceString, _In_ LONG SourceStringLength, _Out_writes_to_(DestinationStringLength,DestinationStringLength) PWSTR DestinationString, _Inout_ PLONG DestinationStringLength)
NTSYSAPI NTSTATUS NTAPI	RtlCreateServiceSid (_In_ PUNICODE_STRING ServiceName, _Out_writes_bytes_opt_(*ServiceSidLength) PSID ServiceSid, _Inout_ PULONG ServiceSidLength)
NTSYSAPI LONG NTAPI	RtlCompareAltitudes (_In_ PCUNICODE_STRING Altitude1, _In_ PCUNICODE_STRING Altitude2)
*UTF8StringActualByteCount PCHAR _In_ ULONG _Out_ PULONG	_In_reads_bytes_ (UnicodeStringByteCount) PCWCH UnicodeStringSource
*UnicodeStringActualByteCount PWSTR _In_ ULONG _Out_ PULONG	_In_reads_bytes_ (UTF8StringByteCount) PCCH UTF8StringSource
NTSYSAPI NTSTATUS NTAPI	RtlCreateVirtualAccountSid (_In_ PCUNICODE_STRING Name, _In_ ULONG BaseSubAuthority, _Out_writes_bytes_(*SidLength) PSID Sid, _Inout_ PULONG SidLength)
_In_ OBJECT_INFORMATION_CLASS	_Out_writes_bytes_opt_ (ObjectInformationLength) PVOID ObjectInformation
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenThreadToken (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _Out_ PHANDLE TokenHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenProcessToken (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
	_When_ (TokenInformationClass==TokenAccessInformation, _At_(TokenInformationLength, _In_range_(>=, sizeof(TOKEN_ACCESS_INFORMATION)))) _Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQueryInformationToken(_In_ HANDLE TokenHandle
_In_ TOKEN_INFORMATION_CLASS	_Out_writes_bytes_to_opt_ (TokenInformationLength,*ReturnLength) PVOID TokenInformation
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAdjustPrivilegesToken (_In_ HANDLE TokenHandle, _In_ BOOLEAN DisableAllPrivileges, _In_opt_ PTOKEN_PRIVILEGES NewState, _In_ ULONG BufferLength, _Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_PRIVILEGES PreviousState, _Out_ _When_(PreviousState==NULL, _Out_opt_) PULONG ReturnLength)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtCreateFile (_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_opt_ PLARGE_INTEGER AllocationSize, _In_ ULONG FileAttributes, _In_ ULONG ShareAccess, _In_ ULONG CreateDisposition, _In_ ULONG CreateOptions, _In_reads_bytes_opt_(EaLength) PVOID EaBuffer, _In_ ULONG EaLength)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtDeviceIoControlFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG IoControlCode, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtFsControlFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG FsControlCode, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtLockFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_ ULONG Key, _In_ BOOLEAN FailImmediately, _In_ BOOLEAN ExclusiveLock)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenFile (_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG ShareAccess, _In_ ULONG OpenOptions)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtQueryDirectoryFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass, _In_ BOOLEAN ReturnSingleEntry, _In_opt_ PUNICODE_STRING FileName, _In_ BOOLEAN RestartScan)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtQueryInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtQueryQuotaInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_ BOOLEAN ReturnSingleEntry, _In_reads_bytes_opt_(SidListLength) PVOID SidList, _In_ ULONG SidListLength, _In_reads_bytes_opt_((8+(4 ((SID ) StartSid)->SubAuthorityCount))) PSID StartSid, _In_ BOOLEAN RestartScan)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtQueryVolumeInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FsInformation, _In_ ULONG Length, _In_ FS_INFORMATION_CLASS FsInformationClass)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtReadFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtSetInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtSetQuotaInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID Buffer, _In_ ULONG Length)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtSetVolumeInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID FsInformation, _In_ ULONG Length, _In_ FS_INFORMATION_CLASS FsInformationClass)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtWriteFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtUnlockFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_ ULONG Key)
_In_ SECURITY_INFORMATION	_Out_writes_bytes_opt_ (Length) PSECURITY_DESCRIPTOR SecurityDescriptor
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtFreeVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ __drv_freesMem(Mem) PVOID *BaseAddress, _Inout_ PSIZE_T RegionSize, _In_ ULONG FreeType)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenThreadTokenEx (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenProcessTokenEx (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
_Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI	NtOpenJobObjectToken (_In_ HANDLE JobHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtDuplicateToken (_In_ HANDLE ExistingTokenHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ BOOLEAN EffectiveOnly, _In_ TOKEN_TYPE TokenType, _Out_ PHANDLE NewTokenHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtFilterToken (_In_ HANDLE ExistingTokenHandle, _In_ ULONG Flags, _In_opt_ PTOKEN_GROUPS SidsToDisable, _In_opt_ PTOKEN_PRIVILEGES PrivilegesToDelete, _In_opt_ PTOKEN_GROUPS RestrictedSids, _Out_ PHANDLE NewTokenHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtImpersonateAnonymousToken (_In_ HANDLE ThreadHandle)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtSetInformationToken (_In_ HANDLE TokenHandle, _In_ TOKEN_INFORMATION_CLASS TokenInformationClass, _In_reads_bytes_(TokenInformationLength) PVOID TokenInformation, _In_ ULONG TokenInformationLength)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAdjustGroupsToken (_In_ HANDLE TokenHandle, _In_ BOOLEAN ResetToDefault, _In_opt_ PTOKEN_GROUPS NewState, _In_opt_ ULONG BufferLength, _Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_GROUPS PreviousState, _Out_ PULONG ReturnLength)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtPrivilegeCheck (_In_ HANDLE ClientToken, _Inout_ PPRIVILEGE_SET RequiredPrivileges, _Out_ PBOOLEAN Result)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAccessCheckAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAccessCheckByTypeAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAccessCheckByTypeResultListAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_writes_(ObjectTypeListLength) PACCESS_MASK GrantedAccess, _Out_writes_(ObjectTypeListLength) PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtAccessCheckByTypeResultListAndAuditAlarmByHandle (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ HANDLE ClientToken, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_writes_(ObjectTypeListLength) PACCESS_MASK GrantedAccess, _Out_writes_(ObjectTypeListLength) PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtOpenObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_ ACCESS_MASK GrantedAccess, _In_opt_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN ObjectCreation, _In_ BOOLEAN AccessGranted, _Out_ PBOOLEAN GenerateOnClose)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtPrivilegeObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN AccessGranted)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtCloseObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtDeleteObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtPrivilegedServiceAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PUNICODE_STRING ServiceName, _In_ HANDLE ClientToken, _In_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN AccessGranted)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtSetInformationThread (_In_ HANDLE ThreadHandle, _In_ THREADINFOCLASS ThreadInformationClass, _In_reads_bytes_(ThreadInformationLength) PVOID ThreadInformation, _In_ ULONG ThreadInformationLength)
_Must_inspect_result_ __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI	NtCreateSection (_Out_ PHANDLE SectionHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PLARGE_INTEGER MaximumSize, _In_ ULONG SectionPageProtection, _In_ ULONG AllocationAttributes, _In_opt_ HANDLE FileHandle)
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG	_In_reads_bytes_ (AuthenticationInformationLength) PVOID AuthenticationInformation
_IRQL_requires_same_ NTSTATUS NTAPI	LsaFreeReturnBuffer (_In_ PVOID Buffer)
typedef	VOID (NTAPI *PDRIVER_FS_NOTIFICATION)(_In_ PDEVICE_OBJECT DeviceObject
typedef	NTSTATUS (NTAPI *PFS_FILTER_CALLBACK)(_In_ PFS_FILTER_CALLBACK_DATA Data
NTKERNELAPI NTSTATUS NTAPI	FsRtlRegisterFileSystemFilterCallbacks (_In_ struct _DRIVER_OBJECT *FilterDriverObject, _In_ PFS_FILTER_CALLBACKS Callbacks)
NTKERNELAPI NTSTATUS NTAPI	FsRtlNotifyStreamFileObject (_In_ struct _FILE_OBJECT StreamFileObject, _In_opt_ struct _DEVICE_OBJECT DeviceObjectHint, _In_ FS_FILTER_STREAM_FO_NOTIFICATION_TYPE NotificationType, _In_ BOOLEAN SafeToRecurse)
NTSTATUS NTAPI	KeGetProcessorNumberFromIndex (_In_ ULONG ProcIndex, _Out_ PPROCESSOR_NUMBER ProcNumber)
ULONG NTAPI	KeGetProcessorIndexFromNumber (_In_ PPROCESSOR_NUMBER ProcNumber)
NTKERNELAPI VOID NTAPI	KeInitializeMutant (_Out_ PRKMUTANT Mutant, _In_ BOOLEAN InitialOwner)
	_When_ (Wait==0, _IRQL_requires_max_(DISPATCH_LEVEL)) _When_(Wait
NTKERNELAPI VOID NTAPI	KeInitializeQueue (_Out_ PRKQUEUE Queue, _In_ ULONG Count)
	_IRQL_requires_min_ (PASSIVE_LEVEL) _IRQL_requires_max_(DISPATCH_LEVEL) NTKERNELAPI LONG NTAPI KeInsertQueue(_Inout_ PRKQUEUE Queue
_Requires_lock_not_held_ SpinLock _Acquires_lock_ SpinLock	_IRQL_raises_ (SYNCH_LEVEL) _IRQL_saves_ NTKERNELAPI KIRQL KeAcquireSpinLockRaiseToSynch(_Inout_ PKSPIN_LOCK SpinLock)
	_Requires_lock_not_held_ (Number) _Acquires_lock_(Number) _IRQL_raises_(DISPATCH_LEVEL) _DECL_HAL_KE_IMPORT KIRQL FASTCALL KeAcquireQueuedSpinLock(_In_ KSPIN_LOCK_QUEUE_NUMBER Number)
	_Requires_lock_held_ (Number) _Releases_lock_(Number) _DECL_HAL_KE_IMPORT VOID FASTCALL KeReleaseQueuedSpinLock(_In_ KSPIN_LOCK_QUEUE_NUMBER Number
_Must_inspect_result_	_Post_satisfies_ (return==1\|\|return==0) _DECL_HAL_KE_IMPORT LOGICAL FASTCALL KeTryToAcquireQueuedSpinLock(_In_ KSPIN_LOCK_QUEUE_NUMBER Number = =0
VOID	ExInitializePushLock (_Out_ PEX_PUSH_LOCK PushLock)
PSLIST_ENTRY FASTCALL	InterlockedPushListSList (_Inout_ PSLIST_HEADER ListHead, _Inout_ __drv_aliasesMem PSLIST_ENTRY List, _Inout_ PSLIST_ENTRY ListEnd, _In_ ULONG Count)
NTKERNELAPI VOID NTAPI	SeReleaseSubjectContext (_Inout_ PSECURITY_SUBJECT_CONTEXT SubjectContext)
NTKERNELAPI BOOLEAN NTAPI	SePrivilegeCheck (_Inout_ PPRIVILEGE_SET RequiredPrivileges, _In_ PSECURITY_SUBJECT_CONTEXT SubjectContext, _In_ KPROCESSOR_MODE AccessMode)
NTKERNELAPI VOID NTAPI	SeOpenObjectAuditAlarm (_In_ PUNICODE_STRING ObjectTypeName, _In_opt_ PVOID Object, _In_opt_ PUNICODE_STRING AbsoluteObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PACCESS_STATE AccessState, _In_ BOOLEAN ObjectCreated, _In_ BOOLEAN AccessGranted, _In_ KPROCESSOR_MODE AccessMode, _Out_ PBOOLEAN GenerateOnClose)
NTKERNELAPI VOID NTAPI	SeOpenObjectForDeleteAuditAlarm (_In_ PUNICODE_STRING ObjectTypeName, _In_opt_ PVOID Object, _In_opt_ PUNICODE_STRING AbsoluteObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PACCESS_STATE AccessState, _In_ BOOLEAN ObjectCreated, _In_ BOOLEAN AccessGranted, _In_ KPROCESSOR_MODE AccessMode, _Out_ PBOOLEAN GenerateOnClose)
NTKERNELAPI VOID NTAPI	SeDeleteObjectAuditAlarm (_In_ PVOID Object, _In_ HANDLE Handle)
NTKERNELAPI TOKEN_TYPE NTAPI	SeTokenType (_In_ PACCESS_TOKEN Token)
NTKERNELAPI BOOLEAN NTAPI	SeTokenIsAdmin (_In_ PACCESS_TOKEN Token)
NTKERNELAPI BOOLEAN NTAPI	SeTokenIsRestricted (_In_ PACCESS_TOKEN Token)
NTKERNELAPI NTSTATUS NTAPI	SeQueryAuthenticationIdToken (_In_ PACCESS_TOKEN Token, _Out_ PLUID AuthenticationId)
NTKERNELAPI NTSTATUS NTAPI	SeQuerySessionIdToken (_In_ PACCESS_TOKEN Token, _Out_ PULONG SessionId)
NTKERNELAPI NTSTATUS NTAPI	SeCreateClientSecurity (_In_ PETHREAD ClientThread, _In_ PSECURITY_QUALITY_OF_SERVICE ClientSecurityQos, _In_ BOOLEAN RemoteSession, _Out_ PSECURITY_CLIENT_CONTEXT ClientContext)
NTKERNELAPI VOID NTAPI	SeImpersonateClient (_In_ PSECURITY_CLIENT_CONTEXT ClientContext, _In_opt_ PETHREAD ServerThread)
NTKERNELAPI NTSTATUS NTAPI	SeImpersonateClientEx (_In_ PSECURITY_CLIENT_CONTEXT ClientContext, _In_opt_ PETHREAD ServerThread)
NTKERNELAPI NTSTATUS NTAPI	SeCreateClientSecurityFromSubjectContext (_In_ PSECURITY_SUBJECT_CONTEXT SubjectContext, _In_ PSECURITY_QUALITY_OF_SERVICE ClientSecurityQos, _In_ BOOLEAN ServerIsRemote, _Out_ PSECURITY_CLIENT_CONTEXT ClientContext)
NTKERNELAPI NTSTATUS NTAPI	SeQuerySecurityDescriptorInfo (_In_ PSECURITY_INFORMATION SecurityInformation, _Out_writes_bytes_(Length) PSECURITY_DESCRIPTOR SecurityDescriptor, _Inout_ PULONG Length, _Inout_ PSECURITY_DESCRIPTOR ObjectsSecurityDescriptor)
NTKERNELAPI NTSTATUS NTAPI	SeSetSecurityDescriptorInfo (_In_opt_ PVOID Object, _In_ PSECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _Inout_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, _In_ POOL_TYPE PoolType, _In_ PGENERIC_MAPPING GenericMapping)
NTKERNELAPI NTSTATUS NTAPI	SeSetSecurityDescriptorInfoEx (_In_opt_ PVOID Object, _In_ PSECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR ModificationDescriptor, _Inout_ PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, _In_ ULONG AutoInheritFlags, _In_ POOL_TYPE PoolType, _In_ PGENERIC_MAPPING GenericMapping)
NTKERNELAPI NTSTATUS NTAPI	SeAppendPrivileges (_Inout_ PACCESS_STATE AccessState, _In_ PPRIVILEGE_SET Privileges)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingFileEvents (_In_ BOOLEAN AccessGranted, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingFileOrGlobalEvents (_In_ BOOLEAN AccessGranted, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext)
VOID NTAPI	SeSetAccessStateGenericMapping (_Inout_ PACCESS_STATE AccessState, _In_ PGENERIC_MAPPING GenericMapping)
NTKERNELAPI NTSTATUS NTAPI	SeRegisterLogonSessionTerminatedRoutine (_In_ PSE_LOGON_SESSION_TERMINATED_ROUTINE CallbackRoutine)
NTKERNELAPI NTSTATUS NTAPI	SeUnregisterLogonSessionTerminatedRoutine (_In_ PSE_LOGON_SESSION_TERMINATED_ROUTINE CallbackRoutine)
NTKERNELAPI NTSTATUS NTAPI	SeMarkLogonSessionForTerminationNotification (_In_ PLUID LogonId)
NTKERNELAPI NTSTATUS NTAPI	SeQueryInformationToken (_In_ PACCESS_TOKEN Token, _In_ TOKEN_INFORMATION_CLASS TokenInformationClass, _Outptr_result_buffer_(_Inexpressible_(token-dependent)) PVOID *TokenInformation)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingHardLinkEvents (_In_ BOOLEAN AccessGranted, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
NTKERNELAPI NTSTATUS NTAPI	SeFilterToken (_In_ PACCESS_TOKEN ExistingToken, _In_ ULONG Flags, _In_opt_ PTOKEN_GROUPS SidsToDisable, _In_opt_ PTOKEN_PRIVILEGES PrivilegesToDelete, _In_opt_ PTOKEN_GROUPS RestrictedSids, _Outptr_ PACCESS_TOKEN *FilteredToken)
NTKERNELAPI VOID NTAPI	SeAuditHardLinkCreation (_In_ PUNICODE_STRING FileName, _In_ PUNICODE_STRING LinkName, _In_ BOOLEAN bSuccess)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingFileEventsWithContext (_In_ BOOLEAN AccessGranted, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingHardLinkEventsWithContext (_In_ BOOLEAN AccessGranted, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext)
NTKERNELAPI VOID NTAPI	SeOpenObjectAuditAlarmWithTransaction (_In_ PUNICODE_STRING ObjectTypeName, _In_opt_ PVOID Object, _In_opt_ PUNICODE_STRING AbsoluteObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PACCESS_STATE AccessState, _In_ BOOLEAN ObjectCreated, _In_ BOOLEAN AccessGranted, _In_ KPROCESSOR_MODE AccessMode, _In_opt_ GUID *TransactionId, _Out_ PBOOLEAN GenerateOnClose)
NTKERNELAPI VOID NTAPI	SeOpenObjectForDeleteAuditAlarmWithTransaction (_In_ PUNICODE_STRING ObjectTypeName, _In_opt_ PVOID Object, _In_opt_ PUNICODE_STRING AbsoluteObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PACCESS_STATE AccessState, _In_ BOOLEAN ObjectCreated, _In_ BOOLEAN AccessGranted, _In_ KPROCESSOR_MODE AccessMode, _In_opt_ GUID *TransactionId, _Out_ PBOOLEAN GenerateOnClose)
NTKERNELAPI VOID NTAPI	SeExamineSacl (_In_ PACL Sacl, _In_ PACCESS_TOKEN Token, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN AccessGranted, _Out_ PBOOLEAN GenerateAudit, _Out_ PBOOLEAN GenerateAlarm)
NTKERNELAPI VOID NTAPI	SeDeleteObjectAuditAlarmWithTransaction (_In_ PVOID Object, _In_ HANDLE Handle, _In_opt_ GUID *TransactionId)
NTKERNELAPI VOID NTAPI	SeQueryTokenIntegrity (_In_ PACCESS_TOKEN Token, _Inout_ PSID_AND_ATTRIBUTES IntegritySA)
NTKERNELAPI NTSTATUS NTAPI	SeSetSessionIdToken (_In_ PACCESS_TOKEN Token, _In_ ULONG SessionId)
NTKERNELAPI VOID NTAPI	SeAuditHardLinkCreationWithTransaction (_In_ PUNICODE_STRING FileName, _In_ PUNICODE_STRING LinkName, _In_ BOOLEAN bSuccess, _In_opt_ GUID *TransactionId)
NTKERNELAPI VOID NTAPI	SeAuditTransactionStateChange (_In_ GUID TransactionId, _In_ GUID ResourceManagerId, _In_ ULONG NewTransactionState)
NTKERNELAPI BOOLEAN NTAPI	SeTokenIsWriteRestricted (_In_ PACCESS_TOKEN Token)
NTKERNELAPI BOOLEAN NTAPI	SeAuditingAnyFileEventsWithContext (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSECURITY_SUBJECT_CONTEXT SubjectSecurityContext, _Out_opt_ PBOOLEAN StagingEnabled)
NTKERNELAPI VOID NTAPI	SeExamineGlobalSacl (_In_ PUNICODE_STRING ObjectType, _In_ PACL ResourceSacl, _In_ PACCESS_TOKEN Token, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN AccessGranted, _Inout_ PBOOLEAN GenerateAudit, _Inout_opt_ PBOOLEAN GenerateAlarm)
NTKERNELAPI VOID NTAPI	SeMaximumAuditMaskFromGlobalSacl (_In_opt_ PUNICODE_STRING ObjectTypeName, _In_ ACCESS_MASK GrantedAccess, _In_ PACCESS_TOKEN Token, _Inout_ PACCESS_MASK AuditMask)
NTSTATUS NTAPI	SeReportSecurityEventWithSubCategory (_In_ ULONG Flags, _In_ PUNICODE_STRING SourceName, _In_opt_ PSID UserSid, _In_ PSE_ADT_PARAMETER_ARRAY AuditParameters, _In_ ULONG AuditSubcategoryId)
BOOLEAN NTAPI	SeAccessCheckFromState (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ PTOKEN_ACCESS_INFORMATION PrimaryTokenInformation, _In_opt_ PTOKEN_ACCESS_INFORMATION ClientTokenInformation, _In_ ACCESS_MASK DesiredAccess, _In_ ACCESS_MASK PreviouslyGrantedAccess, _Outptr_opt_result_maybenull_ PPRIVILEGE_SET *Privileges, _In_ PGENERIC_MAPPING GenericMapping, _In_ KPROCESSOR_MODE AccessMode, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus)
NTKERNELAPI VOID NTAPI	SeFreePrivileges (_In_ PPRIVILEGE_SET Privileges)
NTSTATUS NTAPI	SeLocateProcessImageName (_Inout_ PEPROCESS Process, _Outptr_ PUNICODE_STRING *pImageFileName)
NTKERNELAPI BOOLEAN NTAPI	PsIsSystemThread (_In_ PETHREAD Thread)
NTKERNELAPI NTSTATUS NTAPI	IoRegisterFsRegistrationChangeEx (_In_ PDRIVER_OBJECT DriverObject, _In_ PDRIVER_FS_NOTIFICATION DriverNotificationRoutine)
NTKERNELAPI VOID NTAPI	IoAcquireVpbSpinLock (_Out_ PKIRQL Irql)
NTKERNELAPI NTSTATUS NTAPI	IoCheckDesiredAccess (_Inout_ PACCESS_MASK DesiredAccess, _In_ ACCESS_MASK GrantedAccess)
NTKERNELAPI NTSTATUS NTAPI	IoCheckEaBufferValidity (_In_ PFILE_FULL_EA_INFORMATION EaBuffer, _In_ ULONG EaLength, _Out_ PULONG ErrorOffset)
NTKERNELAPI NTSTATUS NTAPI	IoCheckFunctionAccess (_In_ ACCESS_MASK GrantedAccess, _In_ UCHAR MajorFunction, _In_ UCHAR MinorFunction, _In_ ULONG IoControlCode, _In_opt_ PVOID Argument1, _In_opt_ PVOID Argument2)
NTKERNELAPI NTSTATUS NTAPI	IoCheckQuerySetFileInformation (_In_ FILE_INFORMATION_CLASS FileInformationClass, _In_ ULONG Length, _In_ BOOLEAN SetOperation)
NTKERNELAPI NTSTATUS NTAPI	IoCheckQuerySetVolumeInformation (_In_ FS_INFORMATION_CLASS FsInformationClass, _In_ ULONG Length, _In_ BOOLEAN SetOperation)
NTKERNELAPI NTSTATUS NTAPI	IoCheckQuotaBufferValidity (_In_ PFILE_QUOTA_INFORMATION QuotaBuffer, _In_ ULONG QuotaLength, _Out_ PULONG ErrorOffset)
NTKERNELAPI PFILE_OBJECT NTAPI	IoCreateStreamFileObject (_In_opt_ PFILE_OBJECT FileObject, _In_opt_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI PFILE_OBJECT NTAPI	IoCreateStreamFileObjectLite (_In_opt_ PFILE_OBJECT FileObject, _In_opt_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI BOOLEAN NTAPI	IoFastQueryNetworkAttributes (_In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG OpenOptions, _Out_ PIO_STATUS_BLOCK IoStatus, _Out_ PFILE_NETWORK_OPEN_INFORMATION Buffer)
NTKERNELAPI NTSTATUS NTAPI	IoPageRead (_In_ PFILE_OBJECT FileObject, _In_ PMDL Mdl, _In_ PLARGE_INTEGER Offset, _In_ PKEVENT Event, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTKERNELAPI PDEVICE_OBJECT NTAPI	IoGetBaseFileSystemDeviceObject (_In_ PFILE_OBJECT FileObject)
NTKERNELAPI ULONG NTAPI	IoGetRequestorProcessId (_In_ PIRP Irp)
NTKERNELAPI PEPROCESS NTAPI	IoGetRequestorProcess (_In_ PIRP Irp)
NTKERNELAPI PIRP NTAPI	IoGetTopLevelIrp (VOID)
NTKERNELAPI BOOLEAN NTAPI	IoIsOperationSynchronous (_In_ PIRP Irp)
NTKERNELAPI BOOLEAN NTAPI	IoIsSystemThread (_In_ PETHREAD Thread)
NTKERNELAPI BOOLEAN NTAPI	IoIsValidNameGraftingBuffer (_In_ PIRP Irp, _In_ PREPARSE_DATA_BUFFER ReparseBuffer)
NTKERNELAPI NTSTATUS NTAPI	IoQueryFileInformation (_In_ PFILE_OBJECT FileObject, _In_ FILE_INFORMATION_CLASS FileInformationClass, _In_ ULONG Length, _Out_ PVOID FileInformation, _Out_ PULONG ReturnedLength)
NTKERNELAPI NTSTATUS NTAPI	IoQueryVolumeInformation (_In_ PFILE_OBJECT FileObject, _In_ FS_INFORMATION_CLASS FsInformationClass, _In_ ULONG Length, _Out_ PVOID FsInformation, _Out_ PULONG ReturnedLength)
NTKERNELAPI VOID NTAPI	IoQueueThreadIrp (_In_ PIRP Irp)
NTKERNELAPI VOID NTAPI	IoRegisterFileSystem (_In_ __drv_aliasesMem PDEVICE_OBJECT DeviceObject)
NTKERNELAPI NTSTATUS NTAPI	IoRegisterFsRegistrationChange (_In_ PDRIVER_OBJECT DriverObject, _In_ PDRIVER_FS_NOTIFICATION DriverNotificationRoutine)
NTKERNELAPI VOID NTAPI	IoReleaseVpbSpinLock (_In_ KIRQL Irql)
NTKERNELAPI VOID NTAPI	IoSetDeviceToVerify (_In_ PETHREAD Thread, _In_opt_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI NTSTATUS NTAPI	IoSetInformation (_In_ PFILE_OBJECT FileObject, _In_ FILE_INFORMATION_CLASS FileInformationClass, _In_ ULONG Length, _In_ PVOID FileInformation)
NTKERNELAPI VOID NTAPI	IoSetTopLevelIrp (_In_opt_ PIRP Irp)
NTKERNELAPI NTSTATUS NTAPI	IoSynchronousPageWrite (_In_ PFILE_OBJECT FileObject, _In_ PMDL Mdl, _In_ PLARGE_INTEGER FileOffset, _In_ PKEVENT Event, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTKERNELAPI PEPROCESS NTAPI	IoThreadToProcess (_In_ PETHREAD Thread)
NTKERNELAPI VOID NTAPI	IoUnregisterFileSystem (_In_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI VOID NTAPI	IoUnregisterFsRegistrationChange (_In_ PDRIVER_OBJECT DriverObject, _In_ PDRIVER_FS_NOTIFICATION DriverNotificationRoutine)
NTKERNELAPI NTSTATUS NTAPI	IoVerifyVolume (_In_ PDEVICE_OBJECT DeviceObject, _In_ BOOLEAN AllowRawMount)
NTKERNELAPI NTSTATUS NTAPI	IoGetRequestorSessionId (_In_ PIRP Irp, _Out_ PULONG pSessionId)
NTKERNELAPI PFILE_OBJECT NTAPI	IoCreateStreamFileObjectEx (_In_opt_ PFILE_OBJECT FileObject, _In_opt_ PDEVICE_OBJECT DeviceObject, _Out_opt_ PHANDLE FileObjectHandle)
NTKERNELAPI NTSTATUS NTAPI	IoQueryFileDosDeviceName (_In_ PFILE_OBJECT FileObject, _Out_ POBJECT_NAME_INFORMATION *ObjectNameInformation)
NTKERNELAPI NTSTATUS NTAPI	IoEnumerateDeviceObjectList (_In_ PDRIVER_OBJECT DriverObject, _Out_writes_bytes_to_opt_(DeviceObjectListSize,(ActualNumberDeviceObjects)sizeof(PDEVICE_OBJECT)) PDEVICE_OBJECT *DeviceObjectList, _In_ ULONG DeviceObjectListSize, _Out_ PULONG ActualNumberDeviceObjects)
NTKERNELAPI PDEVICE_OBJECT NTAPI	IoGetLowerDeviceObject (_In_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI PDEVICE_OBJECT NTAPI	IoGetDeviceAttachmentBaseRef (_In_ PDEVICE_OBJECT DeviceObject)
NTKERNELAPI NTSTATUS NTAPI	IoGetDiskDeviceObject (_In_ PDEVICE_OBJECT FileSystemDeviceObject, _Out_ PDEVICE_OBJECT *DiskDeviceObject)
NTKERNELAPI NTSTATUS NTAPI	IoEnumerateRegisteredFiltersList (_Out_writes_bytes_to_opt_(DriverObjectListSize,(ActualNumberDriverObjects)sizeof(PDRIVER_OBJECT)) PDRIVER_OBJECT *DriverObjectList, _In_ ULONG DriverObjectListSize, _Out_ PULONG ActualNumberDriverObjects)
FORCEINLINE VOID NTAPI	IoInitializePriorityInfo (_In_ PIO_PRIORITY_INFO PriorityInfo)
NTKERNELAPI NTSTATUS NTAPI	IoRegisterFsRegistrationChangeMountAware (_In_ PDRIVER_OBJECT DriverObject, _In_ PDRIVER_FS_NOTIFICATION DriverNotificationRoutine, _In_ BOOLEAN SynchronizeWithMounts)
NTKERNELAPI NTSTATUS NTAPI	IoReplaceFileObjectName (_In_ PFILE_OBJECT FileObject, _In_reads_bytes_(FileNameLength) PWSTR NewFileName, _In_ USHORT FileNameLength)
FORCEINLINE ULONG	HEAP_MAKE_TAG_FLAGS (_In_ ULONG TagBase, _In_ ULONG Tag)
NTKERNELAPI BOOLEAN NTAPI	MmIsRecursiveIoFault (VOID)
	_In_reads_ (NumberOfLists) PREAD_LIST *ReadLists)
NTKERNELAPI NTSTATUS NTAPI	ObInsertObject (_In_ PVOID Object, _Inout_opt_ PACCESS_STATE PassedAccessState, _In_opt_ ACCESS_MASK DesiredAccess, _In_ ULONG ObjectPointerBias, _Out_opt_ PVOID *NewObject, _Out_opt_ PHANDLE Handle)
NTKERNELAPI NTSTATUS NTAPI	ObOpenObjectByPointer (_In_ PVOID Object, _In_ ULONG HandleAttributes, _In_opt_ PACCESS_STATE PassedAccessState, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_TYPE ObjectType, _In_ KPROCESSOR_MODE AccessMode, _Out_ PHANDLE Handle)
NTKERNELAPI VOID NTAPI	ObMakeTemporaryObject (_In_ PVOID Object)
NTKERNELAPI NTSTATUS NTAPI	ObQueryNameString (_In_ PVOID Object, _Out_writes_bytes_opt_(Length) POBJECT_NAME_INFORMATION ObjectNameInfo, _In_ ULONG Length, _Out_ PULONG ReturnLength)
NTKERNELAPI NTSTATUS NTAPI	ObQueryObjectAuditingByHandle (_In_ HANDLE Handle, _Out_ PBOOLEAN GenerateOnClose)
NTKERNELAPI BOOLEAN NTAPI	ObIsKernelHandle (_In_ HANDLE Handle)
NTKERNELAPI NTSTATUS NTAPI	ObOpenObjectByPointerWithTag (_In_ PVOID Object, _In_ ULONG HandleAttributes, _In_opt_ PACCESS_STATE PassedAccessState, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_TYPE ObjectType, _In_ KPROCESSOR_MODE AccessMode, _In_ ULONG Tag, _Out_ PHANDLE Handle)
	DEFINE_GUID (GUID_ECP_OPLOCK_KEY, 0x48850596, 0x3050, 0x4be7, 0x98, 0x63, 0xfe, 0xc3, 0x50, 0xce, 0x8d, 0x7f)
typedef	BOOLEAN (NTAPI *PCHECK_FOR_TRAVERSE_ACCESS)(_In_ PVOID NotifyContext
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ ULONG	_In_reads_bytes_ (Length) PVOID Buffer
_Must_inspect_result_ NTKERNELAPI BOOLEAN NTAPI	FsRtlIsTotalDeviceFailure (_In_ NTSTATUS Status)
_Must_inspect_result_ Obsolete NTKERNELAPI BOOLEAN NTAPI	FsRtlPrivateLock (_In_ PFILE_LOCK FileLock, _In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ PLARGE_INTEGER Length, _In_ PEPROCESS Process, _In_ ULONG Key, _In_ BOOLEAN FailImmediately, _In_ BOOLEAN ExclusiveLock, _Out_ PIO_STATUS_BLOCK IoStatus, _In_opt_ PIRP Irp, _In_opt_ __drv_aliasesMem PVOID Context, _In_ BOOLEAN AlreadySynchronized)
_In_ ULONGLONG _In_ PUNICODE_STRING _In_ PUNICODE_STRING _In_ BOOLEAN _In_ ULONG	_In_reads_bytes_ (DataLength) PVOID Data)
NTKERNELAPI NTSTATUS NTAPI	FsRtlNormalizeNtstatus (_In_ NTSTATUS Exception, _In_ NTSTATUS GenericException)
_Must_inspect_result_ NTKERNELAPI BOOLEAN NTAPI	FsRtlIsNtstatusExpected (_In_ NTSTATUS Ntstatus)
The FsRtlAllocateResource routine is but is exported to support existing driver binaries Use ExAllocateFromNPagedLookasideList and ExInitializeResourceLite instead NTKERNELAPI PERESOURCE NTAPI	FsRtlAllocateResource (VOID)
Obsolete NTKERNELAPI VOID NTAPI	FsRtlInitializeMcb (_Out_ PMCB Mcb, _In_ POOL_TYPE PoolType)
	_When_ (CompletionRoutine!=NULL, _Must_inspect_result_) _IRQL_requires_max_(APC_LEVEL) NTKERNELAPI NTSTATUS NTAPI FsRtlCheckOplock(_In_ POPLOCK Oplock
_Must_inspect_result_ _In_ PCUNICODE_STRING _In_ BOOLEAN	_In_reads_opt_ (0x10000) PCWCH UpcaseTable)
NTKERNELAPI VOID NTAPI	FsRtlIncrementCcFastReadNotPossible (VOID)
NTKERNELAPI VOID NTAPI	FsRtlIncrementCcFastReadWait (VOID)
NTKERNELAPI VOID NTAPI	FsRtlIncrementCcFastReadNoWait (VOID)
NTKERNELAPI VOID NTAPI	FsRtlIncrementCcFastReadResourceMiss (VOID)
	_When_ (!Flags &MCB_FLAG_RAISE_ON_ALLOCATION_FAILURE, _Must_inspect_result_) _IRQL_requires_max_(APC_LEVEL) BOOLEAN NTAPI FsRtlInitializeBaseMcbEx(_Out_ PBASE_MCB Mcb
_Must_inspect_result_	_When_ (Irp!=NULL, _IRQL_requires_max_(PASSIVE_LEVEL)) _When_(Irp
_Must_inspect_result_	_In_reads_ (Count) PVOID ObjectArray[]
NTKERNELAPI VOID NTAPI	FsRtlIncrementCcFastMdlReadWait (VOID)
_Must_inspect_result_	_In_reads_bytes_ (BufferLength) PREPARSE_DATA_BUFFER ReparseBuffer)
_Must_inspect_result_ _In_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _In_ ULONG	_Outptr_result_bytebuffer_ (SizeOfContext) PVOID *EcpContext)
	_When_ (Flags\|FSRTL_ECP_LOOKASIDE_FLAG_NONPAGED_POOL, _IRQL_requires_max_(DISPATCH_LEVEL)) _When_(!(Flags\|FSRTL_ECP_LOOKASIDE_FLAG_NONPAGED_POOL)
NTKERNELAPI ULONG NTAPI	FsRtlQueryMaximumVirtualDiskNestingLevel (VOID)
NTKERNELAPI NTSTATUS NTAPI	FsRtlGetVirtualDiskNestingLevel (_In_ PDEVICE_OBJECT DeviceObject, _Out_ PULONG NestingLevel, _Out_opt_ PULONG NestingFlags)
	_When_ (Flags\|OPLOCK_FLAG_BACK_OUT_ATOMIC_OPLOCK, _Must_inspect_result_) _IRQL_requires_max_(APC_LEVEL) NTKERNELAPI NTSTATUS NTAPI FsRtlCheckOplockEx(_In_ POPLOCK Oplock
NTKERNELAPI NTSTATUS NTAPI	FsRtlInitializeExtraCreateParameterList (_Inout_ PECP_LIST EcpList)
NTKERNELAPI VOID NTAPI	FsRtlInitializeExtraCreateParameter (_Out_ PECP_HEADER Ecp, _In_ ULONG EcpFlags, _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK CleanupCallback, _In_ ULONG TotalSize, _In_ LPCGUID EcpType, _In_opt_ PVOID ListAllocatedFrom)
NTKERNELAPI VOID NTAPI	CcInitializeCacheMap (_In_ PFILE_OBJECT FileObject, _In_ PCC_FILE_SIZES FileSizes, _In_ BOOLEAN PinAccess, _In_ PCACHE_MANAGER_CALLBACKS Callbacks, _In_ PVOID LazyWriteContext)
NTKERNELAPI BOOLEAN NTAPI	CcUninitializeCacheMap (_In_ PFILE_OBJECT FileObject, _In_opt_ PLARGE_INTEGER TruncateSize, _In_opt_ PCACHE_UNINITIALIZE_EVENT UninitializeCompleteEvent)
NTKERNELAPI VOID NTAPI	CcSetFileSizes (IN PFILE_OBJECT FileObject, IN PCC_FILE_SIZES FileSizes)
NTKERNELAPI VOID NTAPI	CcSetDirtyPageThreshold (_In_ PFILE_OBJECT FileObject, _In_ ULONG DirtyPageThreshold)
NTKERNELAPI VOID NTAPI	CcFlushCache (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer, _In_opt_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _Out_opt_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI LARGE_INTEGER NTAPI	CcGetFlushedValidData (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer, _In_ BOOLEAN BcbListHeld)
NTKERNELAPI BOOLEAN NTAPI	CcZeroData (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER StartOffset, _In_ PLARGE_INTEGER EndOffset, _In_ BOOLEAN Wait)
NTKERNELAPI PVOID NTAPI	CcRemapBcb (_In_ PVOID Bcb)
NTKERNELAPI VOID NTAPI	CcRepinBcb (_In_ PVOID Bcb)
NTKERNELAPI VOID NTAPI	CcUnpinRepinnedBcb (_In_ PVOID Bcb, _In_ BOOLEAN WriteThrough, _Out_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI PFILE_OBJECT NTAPI	CcGetFileObjectFromSectionPtrs (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer)
NTKERNELAPI PFILE_OBJECT NTAPI	CcGetFileObjectFromBcb (_In_ PVOID Bcb)
NTKERNELAPI BOOLEAN NTAPI	CcCanIWrite (_In_opt_ PFILE_OBJECT FileObject, _In_ ULONG BytesToWrite, _In_ BOOLEAN Wait, _In_ BOOLEAN Retrying)
NTKERNELAPI VOID NTAPI	CcDeferWrite (_In_ PFILE_OBJECT FileObject, _In_ PCC_POST_DEFERRED_WRITE PostRoutine, _In_ PVOID Context1, _In_ PVOID Context2, _In_ ULONG BytesToWrite, _In_ BOOLEAN Retrying)
NTKERNELAPI BOOLEAN NTAPI	CcCopyRead (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ BOOLEAN Wait, _Out_writes_bytes_(Length) PVOID Buffer, _Out_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI VOID NTAPI	CcFastCopyRead (_In_ PFILE_OBJECT FileObject, _In_ ULONG FileOffset, _In_ ULONG Length, _In_ ULONG PageCount, _Out_writes_bytes_(Length) PVOID Buffer, _Out_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI BOOLEAN NTAPI	CcCopyWrite (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ BOOLEAN Wait, _In_reads_bytes_(Length) PVOID Buffer)
NTKERNELAPI VOID NTAPI	CcFastCopyWrite (_In_ PFILE_OBJECT FileObject, _In_ ULONG FileOffset, _In_ ULONG Length, _In_reads_bytes_(Length) PVOID Buffer)
NTKERNELAPI VOID NTAPI	CcMdlRead (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _Out_ PMDL *MdlChain, _Out_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI VOID NTAPI	CcMdlReadComplete (_In_ PFILE_OBJECT FileObject, _In_ PMDL MdlChain)
NTKERNELAPI VOID NTAPI	CcPrepareMdlWrite (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _Out_ PMDL *MdlChain, _Out_ PIO_STATUS_BLOCK IoStatus)
NTKERNELAPI VOID NTAPI	CcMdlWriteComplete (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ PMDL MdlChain)
NTKERNELAPI VOID NTAPI	CcScheduleReadAhead (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length)
NTKERNELAPI NTSTATUS NTAPI	CcWaitForCurrentLazyWriterActivity (VOID)
NTKERNELAPI VOID NTAPI	CcSetReadAheadGranularity (_In_ PFILE_OBJECT FileObject, _In_ ULONG Granularity)
NTKERNELAPI BOOLEAN NTAPI	CcPinRead (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ ULONG Flags, _Outptr_ PVOID Bcb, _Outptr_result_bytebuffer_(Length) PVOID Buffer)
NTKERNELAPI BOOLEAN NTAPI	CcPinMappedData (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ ULONG Flags, _Inout_ PVOID *Bcb)
NTKERNELAPI BOOLEAN NTAPI	CcPreparePinWrite (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ BOOLEAN Zero, _In_ ULONG Flags, _Outptr_ PVOID Bcb, _Outptr_result_bytebuffer_(Length) PVOID Buffer)
NTKERNELAPI VOID NTAPI	CcSetDirtyPinnedData (_In_ PVOID BcbVoid, _In_opt_ PLARGE_INTEGER Lsn)
NTKERNELAPI VOID NTAPI	CcUnpinData (_In_ PVOID Bcb)
NTKERNELAPI VOID NTAPI	CcSetBcbOwnerPointer (_In_ PVOID Bcb, _In_ PVOID OwnerPointer)
NTKERNELAPI VOID NTAPI	CcUnpinDataForThread (_In_ PVOID Bcb, _In_ ERESOURCE_THREAD ResourceThreadId)
NTKERNELAPI VOID NTAPI	CcSetAdditionalCacheAttributes (_In_ PFILE_OBJECT FileObject, _In_ BOOLEAN DisableReadAhead, _In_ BOOLEAN DisableWriteBehind)
NTKERNELAPI BOOLEAN NTAPI	CcIsThereDirtyData (_In_ PVPB Vpb)
NTKERNELAPI VOID NTAPI	CcMdlWriteAbort (_In_ PFILE_OBJECT FileObject, _In_ PMDL MdlChain)
NTKERNELAPI VOID NTAPI	CcSetLogHandleForFile (_In_ PFILE_OBJECT FileObject, _In_ PVOID LogHandle, _In_ PFLUSH_TO_LSN FlushToLsnRoutine)
NTKERNELAPI LARGE_INTEGER NTAPI	CcGetDirtyPages (_In_ PVOID LogHandle, _In_ PDIRTY_PAGE_ROUTINE DirtyPageRoutine, _In_ PVOID Context1, _In_ PVOID Context2)
NTKERNELAPI BOOLEAN NTAPI	CcMapData (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ ULONG Flags, _Outptr_ PVOID Bcb, _Outptr_result_bytebuffer_(Length) PVOID Buffer)
NTKERNELAPI NTSTATUS NTAPI	CcSetFileSizesEx (_In_ PFILE_OBJECT FileObject, _In_ PCC_FILE_SIZES FileSizes)
NTKERNELAPI PFILE_OBJECT NTAPI	CcGetFileObjectFromSectionPtrsRef (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer)
NTKERNELAPI VOID NTAPI	CcSetParallelFlushFile (_In_ PFILE_OBJECT FileObject, _In_ BOOLEAN EnableParallelFlush)
NTKERNELAPI BOOLEAN	CcIsThereDirtyDataEx (_In_ PVPB Vpb, _In_opt_ PULONG NumberOfDirtyPages)
NTKERNELAPI VOID NTAPI	CcCoherencyFlushAndPurgeCache (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer, _In_opt_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _Out_ PIO_STATUS_BLOCK IoStatus, _In_opt_ ULONG Flags)
NTKERNELAPI BOOLEAN NTAPI	CcPurgeCacheSection (_In_ PSECTION_OBJECT_POINTERS SectionObjectPointer, _In_opt_ PLARGE_INTEGER FileOffset, _In_ ULONG Length, _In_ ULONG Flags)
NTKERNELAPI BOOLEAN NTAPI	CcCopyWriteWontFlush (_In_ PFILE_OBJECT FileObject, _In_ PLARGE_INTEGER FileOffset, _In_ ULONG Length)
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_In_reads_bytes_opt_ (EaListLength) PVOID EaList
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_Out_writes_bytes_opt_ (BufferLength) PVOID Buffer
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	_In_reads_bytes_opt_ (InputBufferLength) PVOID InputBuffer
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG	_Out_writes_bytes_opt_ (OutputBufferLength) PVOID OutputBuffer
	__drv_allocatesMem (Region)) NTSYSAPI NTSTATUS NTAPI ZwAllocateVirtualMemory(_In_ HANDLE ProcessHandle
	__drv_freesMem (Region)) NTSYSAPI NTSTATUS NTAPI ZwFreeVirtualMemory(_In_ HANDLE ProcessHandle
	_When_ (Timeout==NULL, _IRQL_requires_max_(APC_LEVEL)) _When_(Timeout->QuadPart!=0
_In_ TOKEN_INFORMATION_CLASS	_Out_writes_bytes_to_opt_ (Length,*ResultLength) PVOID TokenInformation
_In_ SECURITY_INFORMATION	_Out_writes_bytes_to_ (Length,*ResultLength) PSECURITY_DESCRIPTOR SecurityDescriptor
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	_In_reads_bytes_opt_ (SidListLength) PVOID SidList
_In_ TOKEN_INFORMATION_CLASS	_In_reads_bytes_ (TokenInformationLength) PVOID TokenInformation
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	AcceptSecurityContext (_In_opt_ PCredHandle phCredential, _In_opt_ PCtxtHandle phContext, _In_opt_ PSecBufferDesc pInput, _In_ ULONG fContextReq, _In_ ULONG TargetDataRep, _In_opt_ PCtxtHandle phNewContext, _In_opt_ PSecBufferDesc pOutput, _Out_ PULONG pfContextAttr, _Out_opt_ PTimeStamp ptsExpiry)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	AcquireCredentialsHandleW (_In_opt_ PSSPI_SEC_STRING pPrincipal, _In_ PSSPI_SEC_STRING pPackage, _In_ ULONG fCredentialUse, _In_opt_ PVOID pvLogonId, _In_opt_ PVOID pAuthData, _In_opt_ SEC_GET_KEY_FN pGetKeyFn, _In_opt_ PVOID pvGetKeyArgument, _Out_ PCredHandle phCredential, _Out_opt_ PTimeStamp ptsExpiry)
SECURITY_STATUS SEC_ENTRY	AddCredentialsA (_In_ PCredHandle hCredentials, _In_opt_ LPSTR pszPrincipal, _In_ LPSTR pszPackage, _In_ ULONG fCredentialUse, _In_opt_ PVOID pAuthData, _In_opt_ SEC_GET_KEY_FN pGetKeyFn, _In_opt_ PVOID pvGetKeyArgument, _Out_opt_ PTimeStamp ptsExpiry)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	AddCredentialsW (_In_ PCredHandle hCredentials, _In_opt_ PSSPI_SEC_STRING pPrincipal, _In_ PSSPI_SEC_STRING pPackage, _In_ ULONG fCredentialUse, _In_opt_ PVOID pAuthData, _In_opt_ SEC_GET_KEY_FN pGetKeyFn, _In_opt_ PVOID pvGetKeyArgument, _Out_opt_ PTimeStamp ptsExpiry)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	ApplyControlToken (_In_ PCtxtHandle phContext, _In_ PSecBufferDesc pInput)
SECURITY_STATUS SEC_ENTRY	CompleteAuthToken (_In_ PCtxtHandle phContext, _In_ PSecBufferDesc pToken)
SECURITY_STATUS SEC_ENTRY	DecryptMessage (_In_ PCtxtHandle phContext, _Inout_ PSecBufferDesc pMessage, _In_ ULONG MessageSeqNo, _Out_opt_ PULONG pfQOP)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	DeleteSecurityContext (_In_ PCtxtHandle phContext)
SECURITY_STATUS SEC_ENTRY	EncryptMessage (_In_ PCtxtHandle phContext, _In_ ULONG fQOP, _Inout_ PSecBufferDesc pMessage, _In_ ULONG MessageSeqNo)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	EnumerateSecurityPackagesW (_Out_ PULONG pcPackages, _Deref_out_ PSecPkgInfoW *ppPackageInfo)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	ExportSecurityContext (_In_ PCtxtHandle phContext, _In_ ULONG fFlags, _Out_ PSecBuffer pPackedContext, _Out_ PVOID *pToken)
SECURITY_STATUS SEC_ENTRY	FreeContextBuffer (_Inout_ PVOID pvContextBuffer)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	FreeCredentialsHandle (_In_ PCredHandle phCredential)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	ImpersonateSecurityContext (_In_ PCtxtHandle phContext)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	ImportSecurityContextW (_In_ PSSPI_SEC_STRING pszPackage, _In_ PSecBuffer pPackedContext, _In_ PVOID Token, _Out_ PCtxtHandle phContext)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	InitializeSecurityContextW (_In_opt_ PCredHandle phCredential, _In_opt_ PCtxtHandle phContext, _In_opt_ PSSPI_SEC_STRING pTargetName, _In_ ULONG fContextReq, _In_ ULONG Reserved1, _In_ ULONG TargetDataRep, _In_opt_ PSecBufferDesc pInput, _In_ ULONG Reserved2, _Inout_opt_ PCtxtHandle phNewContext, _Inout_opt_ PSecBufferDesc pOutput, _Out_ PULONG pfContextAttr, _Out_opt_ PTimeStamp ptsExpiry)
KSECDDDECLSPEC PSecurityFunctionTableW SEC_ENTRY	InitSecurityInterfaceW (VOID)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	MakeSignature (_In_ PCtxtHandle phContext, _In_ ULONG fQOP, _In_ PSecBufferDesc pMessage, _In_ ULONG MessageSeqNo)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	QueryContextAttributesW (_In_ PCtxtHandle phContext, _In_ ULONG ulAttribute, _Out_ PVOID pBuffer)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	QueryCredentialsAttributesW (_In_ PCredHandle phCredential, _In_ ULONG ulAttribute, _Inout_ PVOID pBuffer)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	QuerySecurityContextToken (_In_ PCtxtHandle phContext, _Out_ PVOID *Token)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	QuerySecurityPackageInfoW (_In_ PSSPI_SEC_STRING pPackageName, _Deref_out_ PSecPkgInfoW *ppPackageInfo)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	RevertSecurityContext (_In_ PCtxtHandle phContext)
KSECDDDECLSPEC SECURITY_STATUS SEC_ENTRY	VerifySignature (_In_ PCtxtHandle phContext, _In_ PSecBufferDesc pMessage, _In_ ULONG MessageSeqNo, _Out_ PULONG pfQOP)
KSECDDDECLSPEC NTSTATUS NTAPI	SecMakeSPN (_In_ PUNICODE_STRING ServiceClass, _In_ PUNICODE_STRING ServiceName, _In_opt_ PUNICODE_STRING InstanceName, _In_opt_ USHORT InstancePort, _In_opt_ PUNICODE_STRING Referrer, _Inout_ PUNICODE_STRING Spn, _Out_opt_ PULONG Length, _In_ BOOLEAN Allocate)
KSECDDDECLSPEC NTSTATUS NTAPI	SecMakeSPNEx (_In_ PUNICODE_STRING ServiceClass, _In_ PUNICODE_STRING ServiceName, _In_opt_ PUNICODE_STRING InstanceName, _In_opt_ USHORT InstancePort, _In_opt_ PUNICODE_STRING Referrer, _In_opt_ PUNICODE_STRING TargetInfo, _Inout_ PUNICODE_STRING Spn, _Out_ PULONG Length OPTIONAL, _In_ BOOLEAN Allocate)
KSECDDDECLSPEC NTSTATUS SEC_ENTRY	SecLookupAccountSid (_In_ PSID Sid, _Out_ PULONG NameSize, _Inout_ PUNICODE_STRING NameBuffer, _Out_ PULONG DomainSize OPTIONAL, _Out_opt_ PUNICODE_STRING DomainBuffer, _Out_ PSID_NAME_USE NameUse)
KSECDDDECLSPEC NTSTATUS SEC_ENTRY	SecLookupAccountName (_In_ PUNICODE_STRING Name, _Inout_ PULONG SidSize, _Out_ PSID Sid, _Out_ PSID_NAME_USE NameUse, _Out_opt_ PULONG DomainSize, _Inout_opt_ PUNICODE_STRING ReferencedDomain)
KSECDDDECLSPEC NTSTATUS SEC_ENTRY	SecLookupWellKnownSid (_In_ WELL_KNOWN_SID_TYPE SidType, _Out_ PSID Sid, _In_ ULONG SidBufferSize, _Inout_opt_ PULONG SidSize)
KSECDDDECLSPEC NTSTATUS NTAPI	SecMakeSPNEx2 (_In_ PUNICODE_STRING ServiceClass, _In_ PUNICODE_STRING ServiceName, _In_opt_ PUNICODE_STRING InstanceName, _In_opt_ USHORT InstancePort, _In_opt_ PUNICODE_STRING Referrer, _In_opt_ PUNICODE_STRING InTargetInfo, _Inout_ PUNICODE_STRING Spn, _Out_opt_ PULONG TotalSize, _In_ BOOLEAN Allocate, _In_ BOOLEAN IsTargetInfoMarshaled)
SECURITY_STATUS SEC_ENTRY	SspiEncodeAuthIdentityAsStrings (_In_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE pAuthIdentity, _Deref_out_opt_ PCWSTR ppszUserName, _Deref_out_opt_ PCWSTR ppszDomainName, _Deref_opt_out_opt_ PCWSTR *ppszPackedCredentialsString)
SECURITY_STATUS SEC_ENTRY	SspiValidateAuthIdentity (_In_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthData)
SECURITY_STATUS SEC_ENTRY	SspiCopyAuthIdentity (_In_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthData, _Deref_out_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE *AuthDataCopy)
VOID SEC_ENTRY	SspiFreeAuthIdentity (_In_opt_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthData)
VOID SEC_ENTRY	SspiZeroAuthIdentity (_In_opt_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthData)
VOID SEC_ENTRY	SspiLocalFree (_In_opt_ PVOID DataBuffer)
SECURITY_STATUS SEC_ENTRY	SspiEncodeStringsAsAuthIdentity (_In_opt_ PCWSTR pszUserName, _In_opt_ PCWSTR pszDomainName, _In_opt_ PCWSTR pszPackedCredentialsString, _Deref_out_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE *ppAuthIdentity)
SECURITY_STATUS SEC_ENTRY	SspiCompareAuthIdentities (_In_opt_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthIdentity1, _In_opt_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthIdentity2, _Out_opt_ PBOOLEAN SameSuppliedUser, _Out_opt_ PBOOLEAN SameSuppliedIdentity)
SECURITY_STATUS SEC_ENTRY	SspiMarshalAuthIdentity (_In_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthIdentity, _Out_ PULONG AuthIdentityLength, _Outptr_result_bytebuffer_(AuthIdentityLength) PCHAR AuthIdentityByteArray)
SECURITY_STATUS SEC_ENTRY	SspiUnmarshalAuthIdentity (_In_ PULONG AuthIdentityLength, _In_reads_bytes_(AuthIdentityLength) PCHAR AuthIdentityByteArray, _Outptr_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE *ppAuthIdentity)
BOOLEAN SEC_ENTRY	SspiIsPromptingNeeded (_In_ PULONG ErrorOrNtStatus)
SECURITY_STATUS SEC_ENTRY	SspiGetTargetHostName (_In_ PCWSTR pszTargetName, _Outptr_ PWSTR *pszHostName)
SECURITY_STATUS SEC_ENTRY	SspiExcludePackage (_In_opt_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE AuthIdentity, _In_ PCWSTR pszPackageName, _Outptr_ PSEC_WINNT_AUTH_IDENTITY_OPAQUE *ppNewAuthIdentity)
	C_ASSERT (sizeof(ERESOURCE)==0x38)
	C_ASSERT (FIELD_OFFSET(ERESOURCE, ActiveCount)==0x0c)
	C_ASSERT (FIELD_OFFSET(ERESOURCE, Flag)==0x0e)
	DEFINE_GUID (GUID_ECP_NETWORK_OPEN_CONTEXT, 0xc584edbf, 0x00df, 0x4d28, 0xb8, 0x84, 0x35, 0xba, 0xca, 0x89, 0x11, 0xe8)
	DEFINE_GUID (GUID_ECP_PREFETCH_OPEN, 0xe1777b21, 0x847e, 0x4837, 0xaa, 0x45, 0x64, 0x16, 0x1d, 0x28, 0x6, 0x55)
	DEFINE_GUID (GUID_ECP_NFS_OPEN, 0xf326d30c, 0xe5f8, 0x4fe7, 0xab, 0x74, 0xf5, 0xa3, 0x19, 0x6d, 0x92, 0xdb)
	DEFINE_GUID (GUID_ECP_SRV_OPEN, 0xbebfaebc, 0xaabf, 0x489d, 0x9d, 0x2c, 0xe9, 0xe3, 0x61, 0x10, 0x28, 0x53)
NTKERNELAPI LARGE_INTEGER NTAPI	CcGetLsnForFileObject (IN PFILE_OBJECT FileObject, OUT PLARGE_INTEGER OldestLsn OPTIONAL)
NTKERNELAPI PVOID NTAPI	FsRtlAllocatePool (IN POOL_TYPE PoolType, IN ULONG NumberOfBytes)
NTKERNELAPI PVOID NTAPI	FsRtlAllocatePoolWithQuota (IN POOL_TYPE PoolType, IN ULONG NumberOfBytes)
NTKERNELAPI PVOID NTAPI	FsRtlAllocatePoolWithQuotaTag (IN POOL_TYPE PoolType, IN ULONG NumberOfBytes, IN ULONG Tag)
NTKERNELAPI PVOID NTAPI	FsRtlAllocatePoolWithTag (IN POOL_TYPE PoolType, IN ULONG NumberOfBytes, IN ULONG Tag)
NTKERNELAPI BOOLEAN NTAPI	FsRtlMdlReadComplete (IN PFILE_OBJECT FileObject, IN PMDL MdlChain)
NTKERNELAPI BOOLEAN NTAPI	FsRtlMdlWriteComplete (IN PFILE_OBJECT FileObject, IN PLARGE_INTEGER FileOffset, IN PMDL MdlChain)
NTKERNELAPI VOID NTAPI	FsRtlNotifyChangeDirectory (IN PNOTIFY_SYNC NotifySync, IN PVOID FsContext, IN PSTRING FullDirectoryName, IN PLIST_ENTRY NotifyList, IN BOOLEAN WatchTree, IN ULONG CompletionFilter, IN PIRP NotifyIrp)
NTKERNELAPI NTSTATUS NTAPI	ObCreateObject (IN KPROCESSOR_MODE ObjectAttributesAccessMode OPTIONAL, IN POBJECT_TYPE ObjectType, IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL, IN KPROCESSOR_MODE AccessMode, IN OUT PVOID ParseContext OPTIONAL, IN ULONG ObjectSize, IN ULONG PagedPoolCharge OPTIONAL, IN ULONG NonPagedPoolCharge OPTIONAL, OUT PVOID *Object)
NTKERNELAPI ULONG NTAPI	ObGetObjectPointerCount (IN PVOID Object)
NTKERNELAPI NTSTATUS NTAPI	ObReferenceObjectByName (IN PUNICODE_STRING ObjectName, IN ULONG Attributes, IN PACCESS_STATE PassedAccessState OPTIONAL, IN ACCESS_MASK DesiredAccess OPTIONAL, IN POBJECT_TYPE ObjectType, IN KPROCESSOR_MODE AccessMode, IN OUT PVOID ParseContext OPTIONAL, OUT PVOID *Object)
NTKERNELAPI NTSTATUS NTAPI	PsLookupProcessThreadByCid (IN PCLIENT_ID Cid, OUT PEPROCESS Process OPTIONAL, OUT PETHREAD Thread)
NTSYSAPI NTSTATUS NTAPI	RtlSetSaclSecurityDescriptor (IN OUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN BOOLEAN SaclPresent, IN PACL Sacl, IN BOOLEAN SaclDefaulted)
NTSYSAPI NTSTATUS NTAPI	ZwAdjustPrivilegesToken (IN HANDLE TokenHandle, IN BOOLEAN DisableAllPrivileges, IN PTOKEN_PRIVILEGES NewState, IN ULONG BufferLength, OUT PTOKEN_PRIVILEGES PreviousState OPTIONAL, OUT PULONG ReturnLength)
NTSYSAPI NTSTATUS NTAPI	ZwAlertThread (IN HANDLE ThreadHandle)
NTSYSAPI NTSTATUS NTAPI	ZwAccessCheckAndAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId, IN PUNICODE_STRING ObjectTypeName, IN PUNICODE_STRING ObjectName, IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN ACCESS_MASK DesiredAccess, IN PGENERIC_MAPPING GenericMapping, IN BOOLEAN ObjectCreation, OUT PACCESS_MASK GrantedAccess, OUT PBOOLEAN AccessStatus, OUT PBOOLEAN GenerateOnClose)
NTSYSAPI NTSTATUS NTAPI	ZwCancelIoFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock)
NTSYSAPI NTSTATUS NTAPI	ZwClearEvent (IN HANDLE EventHandle)
NTSYSAPI NTSTATUS NTAPI	ZwCloseObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId, IN BOOLEAN GenerateOnClose)
NTSYSAPI NTSTATUS NTAPI	ZwCreateSymbolicLinkObject (OUT PHANDLE SymbolicLinkHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PUNICODE_STRING TargetName)
NTSYSAPI NTSTATUS NTAPI	ZwFlushInstructionCache (IN HANDLE ProcessHandle, IN PVOID BaseAddress OPTIONAL, IN ULONG FlushSize)
NTSYSAPI NTSTATUS NTAPI	ZwFlushBuffersFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock)
NTSYSAPI NTSTATUS NTAPI	ZwInitiatePowerAction (IN POWER_ACTION SystemAction, IN SYSTEM_POWER_STATE MinSystemState, IN ULONG Flags, IN BOOLEAN Asynchronous)
NTSYSAPI NTSTATUS NTAPI	ZwLoadKey (IN POBJECT_ATTRIBUTES KeyObjectAttributes, IN POBJECT_ATTRIBUTES FileObjectAttributes)
NTSYSAPI NTSTATUS NTAPI	ZwOpenProcessToken (IN HANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OUT PHANDLE TokenHandle)
NTSYSAPI NTSTATUS NTAPI	ZwOpenThread (OUT PHANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PCLIENT_ID ClientId)
NTSYSAPI NTSTATUS NTAPI	ZwOpenThreadToken (IN HANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN BOOLEAN OpenAsSelf, OUT PHANDLE TokenHandle)
NTSYSAPI NTSTATUS NTAPI	ZwPulseEvent (IN HANDLE EventHandle, OUT PLONG PreviousState OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwQueryDefaultLocale (IN BOOLEAN ThreadOrSystem, OUT PLCID Locale)
NTSYSAPI NTSTATUS NTAPI	ZwQueryDirectoryObject (IN HANDLE DirectoryHandle, OUT PVOID Buffer, IN ULONG Length, IN BOOLEAN ReturnSingleEntry, IN BOOLEAN RestartScan, IN OUT PULONG Context, OUT PULONG ReturnLength OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwQueryInformationProcess (IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OUT PULONG ReturnLength OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwReplaceKey (IN POBJECT_ATTRIBUTES NewFileObjectAttributes, IN HANDLE KeyHandle, IN POBJECT_ATTRIBUTES OldFileObjectAttributes)
NTSYSAPI NTSTATUS NTAPI	ZwResetEvent (IN HANDLE EventHandle, OUT PLONG PreviousState OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwRestoreKey (IN HANDLE KeyHandle, IN HANDLE FileHandle, IN ULONG Flags)
NTSYSAPI NTSTATUS NTAPI	ZwSaveKey (IN HANDLE KeyHandle, IN HANDLE FileHandle)
NTSYSAPI NTSTATUS NTAPI	ZwSetDefaultLocale (IN BOOLEAN ThreadOrSystem, IN LCID Locale)
NTSYSAPI NTSTATUS NTAPI	ZwSetDefaultUILanguage (IN LANGID LanguageId)
NTSYSAPI NTSTATUS NTAPI	ZwSetInformationProcess (IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, IN PVOID ProcessInformation, IN ULONG ProcessInformationLength)
NTSYSAPI NTSTATUS NTAPI	ZwSetSystemTime (IN PLARGE_INTEGER NewTime, OUT PLARGE_INTEGER OldTime OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwUnloadKey (IN POBJECT_ATTRIBUTES KeyObjectAttributes)
NTSYSAPI NTSTATUS NTAPI	ZwWaitForMultipleObjects (IN ULONG HandleCount, IN PHANDLE Handles, IN WAIT_TYPE WaitType, IN BOOLEAN Alertable, IN PLARGE_INTEGER Timeout OPTIONAL)
NTSYSAPI NTSTATUS NTAPI	ZwYieldExecution (VOID)
Variables
const PRTL_ALLOCATE_STRING_ROUTINE	RtlAllocateStringRoutine
const PRTL_FREE_STRING_ROUTINE	RtlFreeStringRoutine
_Inout_ PVOID *	CommitAddress
_Inout_ PVOID _Inout_ PSIZE_T	CommitSize
_Must_inspect_result_ _Ret_maybenull_ _In_opt_ ULONG	Flags
_Must_inspect_result_ _Ret_maybenull_ _In_opt_ ULONG _In_ SIZE_T	Size
_In_opt_ ULONG _In_ _Post_invalid_ PVOID	BaseAddress
_In_z_ PCWSTR	SourceString
_In_ const STRING *	Source
_Out_ _Inout_ PUNICODE_STRING	DestinationString
_Out_ _Inout_ PUNICODE_STRING _In_ PCOEM_STRING _In_ BOOLEAN	AllocateDestinationString
*BytesInUnicodeString PWCH	UnicodeString
*BytesInUnicodeString PWCH _In_ ULONG	MaxBytesInUnicodeString
*BytesInUnicodeString PWCH _In_ ULONG _Out_opt_ PULONG	BytesInUnicodeString
*BytesInUnicodeString PWCH _In_ ULONG _Out_opt_ PULONG _In_ ULONG	BytesInMultiByteString
*BytesInMultiByteString PCHAR	MultiByteString
*BytesInMultiByteString PCHAR _In_ ULONG	MaxBytesInMultiByteString
*BytesInUnicodeString PWSTR _In_ ULONG _Out_opt_ PULONG _In_ ULONG	BytesInOemString
*BytesInOemString PCHAR	OemString
*BytesInOemString PCHAR _In_ ULONG	MaxBytesInOemString
_In_ BOOLEAN	AllowExtendedCharacters
_In_ BOOLEAN _Inout_ PGENERATE_NAME_CONTEXT	Context
_In_ BOOLEAN _Inout_ PGENERATE_NAME_CONTEXT _Inout_ PUNICODE_STRING	Name8dot3
_Inout_opt_ POEM_STRING	OemName
_Inout_opt_ POEM_STRING _Out_opt_ PBOOLEAN	NameContainsSpaces
_In_ __drv_aliasesMem PSTRING	Prefix
_In_ __drv_aliasesMem PSTRING _Out_ PPREFIX_TABLE_ENTRY	PrefixTableEntry
_In_ PSTRING	FullName
_In_ PUNICODE_STRING _In_ ULONG	CaseInsensitiveIndex
_In_ BOOLEAN	Restart
_Out_ PULONG	ElapsedSeconds
_In_ PSID	Sid2
_In_ PSID_IDENTIFIER_AUTHORITY	IdentifierAuthority
_In_ PSID_IDENTIFIER_AUTHORITY _In_ UCHAR	SubAuthorityCount
_In_ PSID	Sid
_In_ PLUID	SourceLuid
_In_ ULONG	AclLength
_In_ ULONG _In_ ULONG	AclRevision
_In_ ULONG	AceRevision
_In_ ULONG _In_ ULONG	StartingAceIndex
_In_ ULONG _In_ ULONG _In_ ULONG	AceListLength
_In_ ULONG	AceIndex
_In_ ULONG _In_ ACCESS_MASK	AccessMask
_In_ ULONG _In_ ULONG	AceFlags
_In_ ULONG	Revision
_In_opt_ PSID	Owner
_In_opt_ PSID _In_opt_ BOOLEAN	OwnerDefaulted
_In_ ULONG _Out_opt_ PULONG _In_ ULONG	BytesInCustomCPString
_In_ ULONG	MaxBytesInCustomCPString
_Inout_ PCPTABLEINFO	CodePageTable
_In_ ULONG	UncompressedBufferSize
_In_ ULONG _In_ ULONG	CompressedBufferSize
_In_ ULONG _In_ ULONG _Out_ PULONG	FinalUncompressedSize
_In_ ULONG	UncompressedFragmentSize
_In_ ULONG _In_ ULONG _Out_ PULONG _In_ PVOID	WorkSpace
_Inout_ PUCHAR *	CompressedBuffer
_Inout_ PUCHAR _In_ PUCHAR	EndOfCompressedBufferPlus1
_Inout_ PUCHAR _In_ PUCHAR _Out_ PUCHAR *	ChunkBuffer
_Inout_ PUCHAR _In_ PUCHAR _Out_ PUCHAR _Out_ PULONG	ChunkSize
_In_ ULONG _In_ ULONG _In_ ULONG	CompressedTailSize
_In_ ULONG _In_ ULONG _In_ ULONG _In_ PCOMPRESSED_DATA_INFO	CompressedDataInfo
_Out_ PBOOLEAN	SaclPresent
_Out_ PBOOLEAN _Out_ PACL *	Sacl
_Out_ PBOOLEAN _Out_ PACL _Out_ PBOOLEAN	SaclDefaulted
_In_opt_ PSID	Group
_In_opt_ PSID _In_opt_ BOOLEAN	GroupDefaulted
_Out_writes_bytes_to_opt_ BufferLength PSECURITY_DESCRIPTOR	SelfRelativeSecurityDescriptor
_Out_writes_bytes_to_opt_ BufferLength PSECURITY_DESCRIPTOR _Inout_ PULONG	BufferLength
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR	AbsoluteSecurityDescriptor
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG	AbsoluteSecurityDescriptorSize
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL	Dacl
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL _Inout_ PULONG	DaclSize
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ SaclSize PACL _Inout_ PULONG	SaclSize
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ SaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ OwnerSize PSID _Inout_ PULONG	OwnerSize
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ SaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ OwnerSize PSID _Inout_ PULONG _Out_writes_bytes_to_opt_ PrimaryGroupSize PSID	PrimaryGroup
_Out_writes_bytes_to_opt_ AbsoluteSecurityDescriptorSize PSECURITY_DESCRIPTOR _Inout_ PULONG _Out_writes_bytes_to_opt_ DaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ SaclSize PACL _Inout_ PULONG _Out_writes_bytes_to_opt_ OwnerSize PSID _Inout_ PULONG _Out_writes_bytes_to_opt_ PrimaryGroupSize PSID _Inout_ PULONG	PrimaryGroupSize
*UTF8StringActualByteCount PCHAR	UTF8StringDestination
*UTF8StringActualByteCount PCHAR _In_ ULONG	UTF8StringMaxByteCount
*UTF8StringActualByteCount PCHAR _In_ ULONG _Out_ PULONG	UTF8StringActualByteCount
*UTF8StringActualByteCount PCHAR _In_ ULONG _Out_ PULONG _In_ ULONG	UnicodeStringByteCount
*UnicodeStringActualByteCount PWSTR	UnicodeStringDestination
*UnicodeStringActualByteCount PWSTR _In_ ULONG	UnicodeStringMaxByteCount
*UnicodeStringActualByteCount PWSTR _In_ ULONG _Out_ PULONG	UnicodeStringActualByteCount
*UnicodeStringActualByteCount PWSTR _In_ ULONG _Out_ PULONG _In_ ULONG	UTF8StringByteCount
_In_ PSID	OldSid
_In_ PSID _In_ PSID	NewSid
_In_ PSID _In_ PSID _Out_ ULONG *	NumChanges
_In_ OBJECT_INFORMATION_CLASS	ObjectInformationClass
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG	ObjectInformationLength
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG _Out_opt_ PULONG	ReturnLength
_In_ TOKEN_INFORMATION_CLASS	TokenInformationClass
_In_ TOKEN_INFORMATION_CLASS _In_ ULONG	TokenInformationLength
_In_ SECURITY_INFORMATION	SecurityInformation
_In_ SECURITY_INFORMATION _In_ PSECURITY_DESCRIPTOR	SecurityDescriptor
_In_ SECURITY_INFORMATION _In_ ULONG _Out_ PULONG	LengthNeeded
_Must_inspect_result_ _Outptr_result_bytebuffer_ RegionSize PVOID _In_ ULONG_PTR	ZeroBits
_Must_inspect_result_ _Outptr_result_bytebuffer_ RegionSize PVOID _In_ ULONG_PTR _Inout_ PSIZE_T	RegionSize
_Must_inspect_result_ _Outptr_result_bytebuffer_ RegionSize PVOID _In_ ULONG_PTR _Inout_ PSIZE_T _In_ ULONG	AllocationType
_Must_inspect_result_ _Outptr_result_bytebuffer_ RegionSize PVOID _In_ ULONG_PTR _Inout_ PSIZE_T _In_ ULONG _In_ ULONG	Protect
_IRQL_requires_same_ _Out_ PHANDLE	LsaHandle
_IRQL_requires_same_ _Out_ PHANDLE _Out_ PLSA_OPERATIONAL_MODE	SecurityMode
_IRQL_requires_same_ _In_ PLSA_STRING	OriginName
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE	LogonType
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG	AuthenticationPackage
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG	AuthenticationInformationLength
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS	LocalGroups
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE	SourceContext
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID *	ProfileBuffer
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID _Out_ PULONG	ProfileBufferLength
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID _Out_ PULONG _Inout_ PLUID	LogonId
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID _Out_ PULONG _Inout_ PLUID _Out_ PHANDLE	Token
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID _Out_ PULONG _Inout_ PLUID _Out_ PHANDLE _Out_ PQUOTA_LIMITS	Quotas
_IRQL_requires_same_ _In_ PLSA_STRING _In_ SECURITY_LOGON_TYPE _In_ ULONG _In_ ULONG _In_opt_ PTOKEN_GROUPS _In_ PTOKEN_SOURCE _Out_ PVOID _Out_ PULONG _Inout_ PLUID _Out_ PHANDLE _Out_ PQUOTA_LIMITS _Out_ PNTSTATUS	SubStatus
KSPIN_LOCK	IoStatisticsLock
ULONG	IoReadOperationCount
ULONG	IoWriteOperationCount
ULONG	IoOtherOperationCount
LARGE_INTEGER	IoReadTransferCount
LARGE_INTEGER	IoWriteTransferCount
LARGE_INTEGER	IoOtherTransferCount
_In_ KPRIORITY	Increment
_In_ KPRIORITY _In_ BOOLEAN	Abandoned
_Inout_ PLIST_ENTRY	Entry
_Out_ PKAPC_STATE	ApcState
_In_ UCHAR	Processor
_In_ KIRQL	OldIrql
_Out_ PCLIENT_ID	ClientId
_Out_ PBOOLEAN	QuotaCharged
NTKERNELAPI PSE_EXPORTS	SeExports
_Must_inspect_result_ _Outptr_ PEPROCESS *	Process
_Must_inspect_result_ _Outptr_ PETHREAD *	Thread
_Out_ PBOOLEAN	CopyOnOpen
_Out_ PBOOLEAN _Out_ PBOOLEAN	EffectiveOnly
_Out_ PBOOLEAN _Out_ PBOOLEAN _Out_ PSECURITY_IMPERSONATION_LEVEL	ImpersonationLevel
_Inout_ PSE_IMPERSONATION_STATE	ImpersonationState
_In_ POOL_TYPE	PoolType
_In_ POOL_TYPE _In_ ULONG_PTR	Amount
_In_ BOOLEAN	DelayClose
_In_ MMFLUSH_TYPE	FlushType
_In_opt_ PLARGE_INTEGER	NewFileSize
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ ULONG	LockKey
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ ULONG _Out_ PIO_STATUS_BLOCK	IoStatus
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ ULONG _Out_ PIO_STATUS_BLOCK _In_ PDEVICE_OBJECT	DeviceObject
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _Outptr_ PMDL *	MdlChain
_Must_inspect_result_ _Out_ PLARGE_INTEGER	FileSize
_Must_inspect_result_ _In_opt_ PUNLOCK_ROUTINE	UnlockRoutine
_In_opt_ PCOMPLETE_LOCK_IRP_ROUTINE	CompleteLockIrpRoutine
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG	Key
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT	FileObject
_In_ PFILE_OBJECT _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ PEPROCESS _In_ ULONG _In_opt_ PVOID _In_ BOOLEAN	AlreadySynchronized
_In_ ULONGLONG	DirectoryKey
_In_ ULONGLONG _In_ PUNICODE_STRING	ShortName
_In_ ULONGLONG _In_ PUNICODE_STRING _In_ PUNICODE_STRING	LongName
_In_ ULONGLONG _In_ PUNICODE_STRING _In_ PUNICODE_STRING _In_ BOOLEAN	KeyByShortName
_In_ ULONGLONG _In_ PUNICODE_STRING _In_ PUNICODE_STRING _In_ BOOLEAN _In_ ULONG	DataLength
_Must_inspect_result_ _In_ ULONGLONG _In_ PUNICODE_STRING	Name
_Must_inspect_result_ _In_ ULONGLONG _In_ PUNICODE_STRING _Out_ PUNICODE_STRING _Out_ PUNICODE_STRING _Inout_ PULONG _Out_writes_bytes_to_ DataLength PVOID	Data
_Out_ PANSI_STRING	FirstPart
_Out_ PANSI_STRING _Out_ PANSI_STRING	RemainingPart
_Must_inspect_result_ _In_ BOOLEAN	WildCardsPermissible
_Must_inspect_result_ _In_ BOOLEAN _In_ BOOLEAN	PathNamePermissible
_Must_inspect_result_ _In_ BOOLEAN _In_ BOOLEAN _In_ BOOLEAN	LeadingBackslashPermissible
The FsRtlAllocateResource routine is	obsolete
_In_ BOOLEAN	SelfSynchronized
_In_ LONGLONG	Vbn
_Must_inspect_result_ _In_ LONGLONG _In_ LONGLONG	Lbn
_Must_inspect_result_ _In_ LONGLONG _In_ LONGLONG _In_ LONGLONG	SectorCount
_In_ LONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG	SectorCountFromLbn
_In_ LONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG	StartingLbn
_In_ LONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG	SectorCountFromStartingLbn
_In_ LONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PLONGLONG _Out_opt_ PULONG	Index
_Out_ PLONGLONG	LargeVbn
_Out_ PLONGLONG _Out_ PLONGLONG	LargeLbn
_Must_inspect_result_ _In_ ULONG	RunIndex
_Must_inspect_result_ _In_ PIRP _In_ ULONG	OpenCount
_In_ PIRP _In_opt_ PVOID _In_opt_ POPLOCK_WAIT_COMPLETE_ROUTINE	CompletionRoutine
_In_ PIRP _In_opt_ PVOID _In_opt_ POPLOCK_WAIT_COMPLETE_ROUTINE _In_opt_ POPLOCK_FS_PREPOST_IRP	PostIrpRoutine
_In_ ULONG	EventCode
_In_ PLIST_ENTRY	NotifyList
_In_ PLIST_ENTRY _In_ PVOID	FsContext
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING	FullDirectoryName
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN	WatchTree
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN	IgnoreBuffer
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG	CompletionFilter
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_opt_ PIRP	NotifyIrp
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_opt_ PIRP _In_opt_ PCHECK_FOR_TRAVERSE_ACCESS	TraverseCallback
_In_ PLIST_ENTRY _In_ PSTRING	FullTargetName
_In_ PLIST_ENTRY _In_ PSTRING _In_ USHORT	TargetNameOffset
_In_ PLIST_ENTRY _In_ PSTRING _In_ USHORT _In_opt_ PSTRING	StreamName
_In_ PLIST_ENTRY _In_ PSTRING _In_ USHORT _In_opt_ PSTRING _In_opt_ PSTRING	NormalizedParentName
_In_ PLIST_ENTRY _In_ PSTRING _In_ USHORT _In_opt_ PSTRING _In_opt_ PSTRING _In_ ULONG	FilterMatch
_In_ PLIST_ENTRY _In_ PSTRING _In_ USHORT _In_opt_ PSTRING _In_opt_ PSTRING _In_ ULONG _In_ ULONG	Action
_Must_inspect_result_ _In_ PCUNICODE_STRING	Name2
_Must_inspect_result_ _In_ PCUNICODE_STRING _In_ BOOLEAN	IgnoreCase
_Must_inspect_result_ _In_ PUNICODE_STRING _In_ BOOLEAN _In_opt_ PWCHAR	UpcaseTable
_In_ PKEVENT	Event
_In_ PKEVENT _In_ PFSRTL_STACK_OVERFLOW_ROUTINE	StackOverflowRoutine
_Must_inspect_result_ _In_ PUNICODE_STRING	RedirectorDeviceName
_Must_inspect_result_ _In_ PUNICODE_STRING _In_ BOOLEAN	MailslotsSupported
_Must_inspect_result_ _Outptr_ PVOID *	SectionObject
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER	SectionFileSize
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER _In_ PFILE_OBJECT _In_ ACCESS_MASK	DesiredAccess
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER _In_ PFILE_OBJECT _In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER _In_ PFILE_OBJECT _In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER	MaximumSize
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER _In_ PFILE_OBJECT _In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG	SectionPageProtection
_Must_inspect_result_ _Outptr_ PVOID _Out_opt_ PLARGE_INTEGER _In_ PFILE_OBJECT _In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG	AllocationAttributes
_In_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG _In_opt_ PIRP _In_opt_ PCHECK_FOR_TRAVERSE_ACCESS _In_opt_ PSECURITY_SUBJECT_CONTEXT _In_opt_ PFILTER_REPORT_CHANGE	FilterCallback
_Must_inspect_result_ _In_ PFSRTL_PER_STREAM_CONTEXT	Ptr
_Must_inspect_result_ _In_opt_ PVOID	OwnerId
_Must_inspect_result_ _In_opt_ PVOID _In_opt_ PVOID	InstanceId
_Must_inspect_result_ _In_opt_ PIO_STACK_LOCATION	IrpSp
_Must_inspect_result_ _In_ PUNICODE_STRING	RedirDevName
_Must_inspect_result_ _In_opt_ PLARGE_INTEGER	Timeout
_Must_inspect_result_ _In_ WAIT_TYPE	WaitType
_Must_inspect_result_ _In_ WAIT_TYPE _In_opt_ PLARGE_INTEGER _In_opt_ PKWAIT_BLOCK	WaitBlockArray
_Must_inspect_result_ _In_ ULONG	Level
_Must_inspect_result_ _In_ ULONG _Out_writes_bytes_ pBufferSize PVOID	pBuffer
_Must_inspect_result_ _In_ ULONG _Out_writes_bytes_ pBufferSize PVOID _Inout_ PULONG	pBufferSize
_Must_inspect_result_ _Out_ PULONG32	pProviderId
_Must_inspect_result_ _In_ USHORT	PathLength
_Must_inspect_result_ _In_ USHORT _Out_ USHORT *	NewLength
_Must_inspect_result_ _Outptr_ PECP_LIST *	EcpList
_Must_inspect_result_ _In_ ULONG	SizeOfContext
_Must_inspect_result_ _In_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK	CleanupCallback
_Must_inspect_result_ _In_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _In_ ULONG	PoolTag
_In_ FSRTL_ECP_LOOKASIDE_FLAGS _In_ SIZE_T _In_ ULONG	Tag
_Must_inspect_result_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _Inout_ PVOID	LookasideList
_Must_inspect_result_ ULONG _In_ FSRTL_ALLOCATE_ECP_FLAGS _In_opt_ PFSRTL_EXTRA_CREATE_PARAMETER_CLEANUP_CALLBACK _Inout_ PVOID _Outptr_ PVOID *	EcpContext
_Must_inspect_result_ _In_ LPCGUID	EcpType
_Must_inspect_result_ _In_ LPCGUID _Outptr_opt_ PVOID _Out_opt_ ULONG *	EcpContextSize
_Must_inspect_result_ _In_opt_ PVOID	CurrentEcpContext
_Must_inspect_result_ _In_opt_ PVOID _Out_opt_ LPGUID	NextEcpType
_Must_inspect_result_ _In_opt_ PVOID _Out_opt_ LPGUID _Outptr_opt_ PVOID *	NextEcpContext
_Must_inspect_result_ _In_opt_ PVOID _Out_opt_ LPGUID _Outptr_opt_ PVOID _Out_opt_ ULONG *	NextEcpContextSize
_Must_inspect_result_ _In_ PFILE_OBJECT	NewFileObject
_Must_inspect_result_ _In_ PFILE_OBJECT _In_ FSRTL_CHANGE_BACKING_TYPE	ChangeBackingType
_Must_inspect_result_ _In_ PDEVICE_OBJECT _In_ PSECTION_OBJECT_POINTERS	SectionObjectPointer
_Must_inspect_result_ _In_ PDEVICE_OBJECT _In_ PSECTION_OBJECT_POINTERS _In_ NTSTATUS	FlushError
_In_opt_ PFILE_OBJECT	Fo2
NTKERNELAPI const UCHAR *const	FsRtlLegalAnsiCharacterArray
*	PPUBLIC_BCB
ULONG	CcFastMdlReadWait
_Out_ PIO_STATUS_BLOCK	IoStatusBlock
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	ReturnSingleEntry
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG	EaListLength
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG	EaIndex
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG _In_ BOOLEAN	RestartScan
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE	TokenType
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE _Out_ PHANDLE	NewTokenHandle
_In_opt_ HANDLE	EventHandle
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE	ApcRoutine
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID	ApcContext
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	NotifyFilter
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN	WatchSubtree
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_ BOOLEAN	Asynchronous
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE	EventType
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE _In_ BOOLEAN	InitialState
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS	FileInformationClass
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS _In_ BOOLEAN _In_opt_ PUNICODE_STRING	FileName
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FS_INFORMATION_CLASS	FsInformationClass
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG	FsControlCode
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG	InputBufferLength
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG _In_ ULONG	OutputBufferLength
_In_ HANDLE	SourceHandle
_In_ HANDLE _In_opt_ HANDLE	TargetProcessHandle
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE	TargetHandle
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG	HandleAttributes
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG _In_ ULONG	Options
_Inout_ PVOID _Inout_ PSIZE_T _In_ ULONG	FreeType
_In_ BOOLEAN	Alertable
_Out_opt_ PLONG	PreviousState
_In_ TOKEN_INFORMATION_CLASS _In_ ULONG _Out_ PULONG	ResultLength
_In_ ACCESS_MASK _In_ ULONG _Out_ PHANDLE	TokenHandle
_In_ ACCESS_MASK _In_ BOOLEAN	OpenAsSelf
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER	ByteOffset
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN	FailImmediately
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ BOOLEAN	ExclusiveLock
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG	SidListLength
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PSID	StartSid
NTKERNELAPI PUSHORT	NlsOemLeadByteInfo

Generated on Sun May 27 2012 05:30:27 for ReactOS by

1.7.6.1

ReactOS Development > Doxygen

Data Structures

Defines

Typedefs

Enumerations

Functions

Variables