ReactOS 0.4.16-dev-226-g79f2289
winternl.h File Reference
#include <ntdef.h>
#include <windef.h>
Include dependency graph for winternl.h:

Go to the source code of this file.

Classes

struct  _STRING
 
struct  _UNICODE_STRING
 
struct  _FILETIME
 
struct  _TIME_FIELDS
 
struct  _RTL_TIME_ZONE_INFORMATION
 
struct  _RTL_TIME_DYNAMIC_ZONE_INFORMATION
 
struct  _CLIENT_ID
 
struct  _CURDIR
 
struct  RTL_DRIVE_LETTER_CURDIR
 
struct  tagRTL_BITMAP
 
struct  tagRTL_BITMAP_RUN
 
struct  _RTL_USER_PROCESS_PARAMETERS
 
struct  _PEB_LDR_DATA
 
struct  _GDI_TEB_BATCH
 
struct  _RTL_ACTIVATION_CONTEXT_STACK_FRAME
 
struct  _ACTIVATION_CONTEXT_STACK
 
struct  _TEB_ACTIVE_FRAME_CONTEXT
 
struct  _TEB_ACTIVE_FRAME_CONTEXT_EX
 
struct  _TEB_ACTIVE_FRAME
 
struct  _TEB_ACTIVE_FRAME_EX
 
struct  _PEB
 
struct  _TEB
 
struct  _FILE_DIRECTORY_INFORMATION
 
struct  _FILE_FULL_DIRECTORY_INFORMATION
 
struct  _FILE_ID_FULL_DIRECTORY_INFORMATION
 
struct  _FILE_BOTH_DIRECTORY_INFORMATION
 
struct  _FILE_ID_BOTH_DIRECTORY_INFORMATION
 
struct  _FILE_ID_GLOBAL_TX_DIR_INFORMATION
 
struct  _FILE_BASIC_INFORMATION
 
struct  _FILE_STANDARD_INFORMATION
 
struct  _FILE_INTERNAL_INFORMATION
 
struct  _FILE_ID_128
 
struct  _FILE_ID_INFORMATION
 
struct  _FILE_EA_INFORMATION
 
struct  _FILE_ACCESS_INFORMATION
 
struct  _FILE_NAME_INFORMATION
 
struct  _FILE_RENAME_INFORMATION
 
struct  _FILE_LINK_INFORMATION
 
struct  _FILE_NAMES_INFORMATION
 
struct  _FILE_DISPOSITION_INFORMATION
 
struct  _FILE_POSITION_INFORMATION
 
struct  _FILE_ALIGNMENT_INFORMATION
 
struct  _FILE_ALLOCATION_INFORMATION
 
struct  _FILE_END_OF_FILE_INFORMATION
 
struct  _FILE_NETWORK_OPEN_INFORMATION
 
struct  _FILE_FULL_EA_INFORMATION
 
struct  _FILE_MODE_INFORMATION
 
struct  _FILE_STREAM_INFORMATION
 
struct  _FILE_ATTRIBUTE_TAG_INFORMATION
 
struct  _FILE_MAILSLOT_QUERY_INFORMATION
 
struct  _FILE_MAILSLOT_SET_INFORMATION
 
struct  _FILE_PIPE_INFORMATION
 
struct  _FILE_PIPE_LOCAL_INFORMATION
 
struct  _FILE_OBJECTID_INFORMATION
 
struct  _FILE_QUOTA_INFORMATION
 
struct  _FILE_REPARSE_POINT_INFORMATION
 
struct  _FILE_ALL_INFORMATION
 
struct  _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
struct  _THREAD_BASIC_INFORMATION
 
struct  _THREAD_DESCRIPTOR_INFORMATION
 
struct  _KERNEL_USER_TIMES
 
struct  _MEMORY_SECTION_NAME
 
struct  _MUTANT_BASIC_INFORMATION
 
struct  _TIMER_BASIC_INFORMATION
 
struct  _SYSTEM_THREAD_INFORMATION
 
struct  _IO_STATUS_BLOCK
 
struct  _KEY_BASIC_INFORMATION
 
struct  _KEY_NODE_INFORMATION
 
struct  _KEY_FULL_INFORMATION
 
struct  _KEY_NAME_INFORMATION
 
struct  _KEY_CACHED_INFORMATION
 
struct  _KEY_VALUE_ENTRY
 
struct  _KEY_VALUE_BASIC_INFORMATION
 
struct  _KEY_VALUE_FULL_INFORMATION
 
struct  _KEY_VALUE_PARTIAL_INFORMATION
 
struct  _OBJECT_ATTRIBUTES
 
struct  _OBJECT_DATA_INFORMATION
 
struct  _OBJECT_BASIC_INFORMATION
 
struct  _OBJECT_NAME_INFORMATION
 
struct  __OBJECT_TYPE_INFORMATION
 
struct  _OBJECT_TYPES_INFORMATION
 
struct  _PROCESS_BASIC_INFORMATION
 
struct  _PROCESS_PRIORITY_CLASS
 
struct  _RTL_HEAP_DEFINITION
 
struct  _RTL_RWLOCK
 
struct  _SYSTEM_BASIC_INFORMATION
 
struct  _SYSTEM_CPU_INFORMATION
 
struct  _SYSTEM_PERFORMANCE_INFORMATION
 
struct  _SYSTEM_TIMEOFDAY_INFORMATION
 
struct  _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
struct  _SYSTEM_DRIVER_INFORMATION
 
struct  _SYSTEM_HANDLE_ENTRY
 
struct  _SYSTEM_HANDLE_INFORMATION
 
struct  _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
struct  _SYSTEM_HANDLE_INFORMATION_EX
 
struct  _SYSTEM_CACHE_INFORMATION
 
struct  _SYSTEM_INTERRUPT_INFORMATION
 
struct  _SYSTEM_CONFIGURATION_INFO
 
struct  _SYSTEM_EXCEPTION_INFORMATION
 
struct  _SYSTEM_LOOKASIDE_INFORMATION
 
struct  _SYSTEM_KERNEL_DEBUGGER_INFORMATION
 
struct  _VM_COUNTERS_
 
struct  _SYSTEM_PROCESS_INFORMATION
 
struct  _SYSTEM_REGISTRY_QUOTA_INFORMATION
 
struct  _SYSTEM_TIME_ADJUSTMENT
 
struct  _WINSTATIONINFORMATIONW
 
struct  _LDR_RESOURCE_INFO
 
struct  _DEBUG_BUFFER
 
struct  _DEBUG_MODULE_INFORMATION
 
struct  _DEBUG_HEAP_INFORMATION
 
struct  _DEBUG_LOCK_INFORMATION
 
struct  _PORT_MESSAGE_HEADER
 
struct  _ATOM_BASIC_INFORMATION
 
struct  _RTL_HANDLE
 
struct  _RTL_HANDLE_TABLE
 
struct  _RTL_QUERY_REGISTRY_TABLE
 
struct  _KEY_MULTIPLE_VALUE_INFORMATION
 
struct  _EVENT_BASIC_INFORMATION
 
struct  _SEMAPHORE_BASIC_INFORMATION
 
struct  _SECTION_BASIC_INFORMATION
 
struct  _SECTION_IMAGE_INFORMATION
 
struct  _LPC_SECTION_WRITE
 
struct  _LPC_SECTION_READ
 
struct  _LPC_MESSAGE
 
struct  _RTL_USER_PROCESS_INFORMATION
 
struct  _DIRECTORY_BASIC_INFORMATION
 
struct  _INITIAL_TEB
 
struct  _FILE_COMPLETION_INFORMATION
 
struct  _LDR_MODULE
 
struct  _LDR_DLL_LOADED_NOTIFICATION_DATA
 
struct  _LDR_DLL_UNLOADED_NOTIFICATION_DATA
 
union  _LDR_DLL_NOTIFICATION_DATA
 
struct  _SYSTEM_MODULE
 
struct  _SYSTEM_MODULE_INFORMATION
 

Macros

#define WINE_NTSTATUS_DECLARED
 
#define __STRING_DEFINED__
 
#define __UNICODE_STRING_DEFINED__
 
#define _FILETIME_
 
#define PROCESS_PARAMS_FLAG_NORMALIZED   1
 
#define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED   0x00000001
 
#define TEB_ACTIVE_FRAME_FLAG_EXTENDED   0x00000001
 
#define FILE_PIPE_DISCONNECTED_STATE   0x01
 
#define FILE_PIPE_LISTENING_STATE   0x02
 
#define FILE_PIPE_CONNECTED_STATE   0x03
 
#define FILE_PIPE_CLOSING_STATE   0x04
 
#define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS   0x1
 
#define FILE_SKIP_SET_EVENT_ON_HANDLE   0x2
 
#define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO   0x4
 
#define MEM_EXECUTE_OPTION_DISABLE   0x01
 
#define MEM_EXECUTE_OPTION_ENABLE   0x02
 
#define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION   0x04
 
#define MEM_EXECUTE_OPTION_PERMANENT   0x08
 
#define __OBJECT_ATTRIBUTES_DEFINED__
 
#define PROCESS_PRIOCLASS_IDLE   1
 
#define PROCESS_PRIOCLASS_NORMAL   2
 
#define PROCESS_PRIOCLASS_HIGH   3
 
#define PROCESS_PRIOCLASS_REALTIME   4
 
#define PROCESS_PRIOCLASS_BELOW_NORMAL   5
 
#define PROCESS_PRIOCLASS_ABOVE_NORMAL   6
 
#define CPU_FEATURE_VME   0x00000005 /* Virtual 86 Mode Extensions */
 
#define CPU_FEATURE_TSC   0x00000002 /* Time Stamp Counter available */
 
#define CPU_FEATURE_CMOV   0x00000008 /* Conditional Move instruction*/
 
#define CPU_FEATURE_PGE   0x00000014 /* Page table Entry Global bit */
 
#define CPU_FEATURE_PSE   0x00000024 /* Page Size Extension */
 
#define CPU_FEATURE_MTRR   0x00000040 /* Memory Type Range Registers */
 
#define CPU_FEATURE_CX8   0x00000080 /* Compare and eXchange 8 byte instr. */
 
#define CPU_FEATURE_MMX   0x00000100 /* Multi Media eXtensions */
 
#define CPU_FEATURE_X86   0x00000200 /* seems to be always ON, on the '86 */
 
#define CPU_FEATURE_PAT   0x00000400 /* Page Attribute Table */
 
#define CPU_FEATURE_FXSR   0x00000800 /* FXSAVE and FXSTORE instructions */
 
#define CPU_FEATURE_SEP   0x00001000 /* SYSENTER and SYSEXIT instructions */
 
#define CPU_FEATURE_SSE   0x00002000 /* SSE extensions (ext. MMX) */
 
#define CPU_FEATURE_3DNOW   0x00004000 /* 3DNOW instructions available */
 
#define CPU_FEATURE_SSE2   0x00010000 /* SSE2 extensions (XMMI64) */
 
#define CPU_FEATURE_DS   0x00020000 /* Debug Store */
 
#define CPU_FEATURE_HTT   0x00040000 /* Hyper Threading Technology */
 
#define PDI_MODULES   0x01
 
#define PDI_BACKTRACE   0x02
 
#define PDI_HEAPS   0x04
 
#define PDI_HEAP_TAGS   0x08
 
#define PDI_HEAP_BLOCKS   0x10
 
#define PDI_LOCKS   0x20
 
#define FILE_DIRECTORY_FILE   0x00000001
 
#define FILE_WRITE_THROUGH   0x00000002
 
#define FILE_SEQUENTIAL_ONLY   0x00000004
 
#define FILE_NO_INTERMEDIATE_BUFFERING   0x00000008
 
#define FILE_SYNCHRONOUS_IO_ALERT   0x00000010
 
#define FILE_SYNCHRONOUS_IO_NONALERT   0x00000020
 
#define FILE_NON_DIRECTORY_FILE   0x00000040
 
#define FILE_CREATE_TREE_CONNECTION   0x00000080
 
#define FILE_COMPLETE_IF_OPLOCKED   0x00000100
 
#define FILE_NO_EA_KNOWLEDGE   0x00000200
 
#define FILE_OPEN_FOR_RECOVERY   0x00000400
 
#define FILE_RANDOM_ACCESS   0x00000800
 
#define FILE_DELETE_ON_CLOSE   0x00001000
 
#define FILE_OPEN_BY_FILE_ID   0x00002000
 
#define FILE_OPEN_FOR_BACKUP_INTENT   0x00004000
 
#define FILE_NO_COMPRESSION   0x00008000
 
#define FILE_RESERVE_OPFILTER   0x00100000
 
#define FILE_TRANSACTED_MODE   0x00200000
 
#define FILE_OPEN_OFFLINE_FILE   0x00400000
 
#define FILE_OPEN_FOR_FREE_SPACE_QUERY   0x00800000
 
#define FILE_ATTRIBUTE_VALID_FLAGS   0x00007fb7
 
#define FILE_ATTRIBUTE_VALID_SET_FLAGS   0x000031a7
 
#define FILE_SUPERSEDED   0
 
#define FILE_OPENED   1
 
#define FILE_CREATED   2
 
#define FILE_OVERWRITTEN   3
 
#define FILE_EXISTS   4
 
#define FILE_DOES_NOT_EXIST   5
 
#define FILE_SUPERSEDE   0
 
#define FILE_OPEN   1
 
#define FILE_CREATE   2
 
#define FILE_OPEN_IF   3
 
#define FILE_OVERWRITE   4
 
#define FILE_OVERWRITE_IF   5
 
#define FILE_MAXIMUM_DISPOSITION   5
 
#define FILE_REMOVABLE_MEDIA   0x00000001
 
#define FILE_READ_ONLY_DEVICE   0x00000002
 
#define FILE_FLOPPY_DISKETTE   0x00000004
 
#define FILE_WRITE_ONE_MEDIA   0x00000008
 
#define FILE_REMOTE_DEVICE   0x00000010
 
#define FILE_DEVICE_IS_MOUNTED   0x00000020
 
#define FILE_VIRTUAL_VOLUME   0x00000040
 
#define FILE_AUTOGENERATED_DEVICE_NAME   0x00000080
 
#define FILE_DEVICE_SECURE_OPEN   0x00000100
 
#define FILE_CHARACTERISTIC_PNP_DEVICE   0x00000800
 
#define FILE_CHARACTERISTIC_TS_DEVICE   0x00001000
 
#define FILE_CHARACTERISTIC_WEBDAV_DEVICE   0x00002000
 
#define FILE_CHARACTERISTIC_CSV   0x00010000
 
#define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL   0x00020000
 
#define FILE_PORTABLE_DEVICE   0x00040000
 
#define FILE_PIPE_INBOUND   0x00000000
 
#define FILE_PIPE_OUTBOUND   0x00000001
 
#define FILE_PIPE_FULL_DUPLEX   0x00000002
 
#define FILE_PIPE_TYPE_MESSAGE   0x00000001
 
#define FILE_PIPE_TYPE_BYTE   0x00000000
 
#define FILE_PIPE_MESSAGE_MODE   0x00000001
 
#define FILE_PIPE_BYTE_STREAM_MODE   0x00000000
 
#define FILE_PIPE_COMPLETE_OPERATION   0x00000001
 
#define FILE_PIPE_QUEUE_OPERATION   0x00000000
 
#define FILE_PIPE_SERVER_END   0x00000001
 
#define FILE_PIPE_CLIENT_END   0x00000000
 
#define INTERNAL_TS_ACTIVE_CONSOLE_ID   ( *((volatile ULONG*)(0x7ffe02d8)) )
 
#define LOGONID_CURRENT   ((ULONG)-1)
 
#define OBJ_INHERIT   0x00000002
 
#define OBJ_PERMANENT   0x00000010
 
#define OBJ_EXCLUSIVE   0x00000020
 
#define OBJ_CASE_INSENSITIVE   0x00000040
 
#define OBJ_OPENIF   0x00000080
 
#define OBJ_OPENLINK   0x00000100
 
#define OBJ_KERNEL_HANDLE   0x00000200
 
#define OBJ_FORCE_ACCESS_CHECK   0x00000400
 
#define OBJ_VALID_ATTRIBUTES   0x000007F2
 
#define SERVERNAME_CURRENT   ((HANDLE)NULL)
 
#define DPFLTR_ERROR_LEVEL   0
 
#define DPFLTR_WARNING_LEVEL   1
 
#define DPFLTR_TRACE_LEVEL   2
 
#define DPFLTR_INFO_LEVEL   3
 
#define DPFLTR_MASK   0x8000000
 
#define SE_MIN_WELL_KNOWN_PRIVILEGE   2
 
#define SE_CREATE_TOKEN_PRIVILEGE   2
 
#define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE   3
 
#define SE_LOCK_MEMORY_PRIVILEGE   4
 
#define SE_INCREASE_QUOTA_PRIVILEGE   5
 
#define SE_UNSOLICITED_INPUT_PRIVILEGE   6 /* obsolete */
 
#define SE_MACHINE_ACCOUNT_PRIVILEGE   6
 
#define SE_TCB_PRIVILEGE   7
 
#define SE_SECURITY_PRIVILEGE   8
 
#define SE_TAKE_OWNERSHIP_PRIVILEGE   9
 
#define SE_LOAD_DRIVER_PRIVILEGE   10
 
#define SE_SYSTEM_PROFILE_PRIVILEGE   11
 
#define SE_SYSTEMTIME_PRIVILEGE   12
 
#define SE_PROF_SINGLE_PROCESS_PRIVILEGE   13
 
#define SE_INC_BASE_PRIORITY_PRIVILEGE   14
 
#define SE_CREATE_PAGEFILE_PRIVILEGE   15
 
#define SE_CREATE_PERMANENT_PRIVILEGE   16
 
#define SE_BACKUP_PRIVILEGE   17
 
#define SE_RESTORE_PRIVILEGE   18
 
#define SE_SHUTDOWN_PRIVILEGE   19
 
#define SE_DEBUG_PRIVILEGE   20
 
#define SE_AUDIT_PRIVILEGE   21
 
#define SE_SYSTEM_ENVIRONMENT_PRIVILEGE   22
 
#define SE_CHANGE_NOTIFY_PRIVILEGE   23
 
#define SE_REMOTE_SHUTDOWN_PRIVILEGE   24
 
#define SE_UNDOCK_PRIVILEGE   25
 
#define SE_SYNC_AGENT_PRIVILEGE   26
 
#define SE_ENABLE_DELEGATION_PRIVILEGE   27
 
#define SE_MANAGE_VOLUME_PRIVILEGE   28
 
#define SE_IMPERSONATE_PRIVILEGE   29
 
#define SE_CREATE_GLOBAL_PRIVILEGE   30
 
#define SE_MAX_WELL_KNOWN_PRIVILEGE   SE_CREATE_GLOBAL_PRIVILEGE
 
#define FLG_STOP_ON_EXCEPTION   0x00000001
 
#define FLG_SHOW_LDR_SNAPS   0x00000002
 
#define FLG_DEBUG_INITIAL_COMMAND   0x00000004
 
#define FLG_STOP_ON_HUNG_GUI   0x00000008
 
#define FLG_HEAP_ENABLE_TAIL_CHECK   0x00000010
 
#define FLG_HEAP_ENABLE_FREE_CHECK   0x00000020
 
#define FLG_HEAP_VALIDATE_PARAMETERS   0x00000040
 
#define FLG_HEAP_VALIDATE_ALL   0x00000080
 
#define FLG_APPLICATION_VERIFIER   0x00000100
 
#define FLG_POOL_ENABLE_TAGGING   0x00000400
 
#define FLG_HEAP_ENABLE_TAGGING   0x00000800
 
#define FLG_USER_STACK_TRACE_DB   0x00001000
 
#define FLG_KERNEL_STACK_TRACE_DB   0x00002000
 
#define FLG_MAINTAIN_OBJECT_TYPELIST   0x00004000
 
#define FLG_HEAP_ENABLE_TAG_BY_DLL   0x00008000
 
#define FLG_DISABLE_STACK_EXTENSION   0x00010000
 
#define FLG_ENABLE_CSRDEBUG   0x00020000
 
#define FLG_ENABLE_KDEBUG_SYMBOL_LOAD   0x00040000
 
#define FLG_DISABLE_PAGE_KERNEL_STACKS   0x00080000
 
#define FLG_ENABLE_SYSTEM_CRIT_BREAKS   0x00100000
 
#define FLG_HEAP_DISABLE_COALESCING   0x00200000
 
#define FLG_ENABLE_CLOSE_EXCEPTIONS   0x00400000
 
#define FLG_ENABLE_EXCEPTION_LOGGING   0x00800000
 
#define FLG_ENABLE_HANDLE_TYPE_TAGGING   0x01000000
 
#define FLG_HEAP_PAGE_ALLOCS   0x02000000
 
#define FLG_DEBUG_INITIAL_COMMAND_EX   0x04000000
 
#define FLG_DISABLE_DBGPRINT   0x08000000
 
#define FLG_CRITSEC_EVENT_CREATION   0x10000000
 
#define FLG_LDR_TOP_DOWN   0x20000000
 
#define FLG_ENABLE_HANDLE_EXCEPTIONS   0x40000000
 
#define FLG_DISABLE_PROTDLLS   0x80000000
 
#define RTL_REGISTRY_ABSOLUTE   0
 
#define RTL_REGISTRY_SERVICES   1
 
#define RTL_REGISTRY_CONTROL   2
 
#define RTL_REGISTRY_WINDOWS_NT   3
 
#define RTL_REGISTRY_DEVICEMAP   4
 
#define RTL_REGISTRY_USER   5
 
#define RTL_REGISTRY_HANDLE   0x40000000
 
#define RTL_REGISTRY_OPTIONAL   0x80000000
 
#define RTL_QUERY_REGISTRY_SUBKEY   0x00000001
 
#define RTL_QUERY_REGISTRY_TOPKEY   0x00000002
 
#define RTL_QUERY_REGISTRY_REQUIRED   0x00000004
 
#define RTL_QUERY_REGISTRY_NOVALUE   0x00000008
 
#define RTL_QUERY_REGISTRY_NOEXPAND   0x00000010
 
#define RTL_QUERY_REGISTRY_DIRECT   0x00000020
 
#define RTL_QUERY_REGISTRY_DELETE   0x00000040
 
#define IO_COMPLETION_QUERY_STATE   0x0001
 
#define IO_COMPLETION_MODIFY_STATE   0x0002
 
#define IO_COMPLETION_ALL_ACCESS   (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
 
#define LDR_IMAGE_IS_DLL   0x00000004
 
#define LDR_LOAD_IN_PROGRESS   0x00001000
 
#define LDR_UNLOAD_IN_PROGRESS   0x00002000
 
#define LDR_NO_DLL_CALLS   0x00040000
 
#define LDR_PROCESS_ATTACHED   0x00080000
 
#define LDR_MODULE_REBASED   0x00200000
 
#define LDR_DONT_RESOLVE_REFS   0x40000000
 
#define LDR_WINE_INTERNAL   0x80000000
 
#define LDR_ADDREF_DLL_PIN   0x00000001
 
#define MAXIMUM_FILENAME_LENGTH   256
 
#define LDR_DLL_NOTIFICATION_REASON_LOADED   1
 
#define LDR_DLL_NOTIFICATION_REASON_UNLOADED   2
 
#define THREAD_CREATE_FLAGS_CREATE_SUSPENDED   0x00000001
 
#define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH   0x00000002
 
#define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER   0x00000004
 
#define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR   0x00000010
 
#define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET   0x00000020
 
#define THREAD_CREATE_FLAGS_INITIAL_THREAD   0x00000080
 
#define InitializeObjectAttributes(p, n, a, r, s)
 
#define NtCurrentProcess()   ((HANDLE)-1)
 
#define RtlFillMemory(Destination, Length, Fill)   memset((Destination),(Fill),(Length))
 
#define RtlMoveMemory(Destination, Source, Length)   memmove((Destination),(Source),(Length))
 
#define RtlStoreUlong(p, v)   do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
 
#define RtlStoreUlonglong(p, v)   do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
 
#define RtlRetrieveUlong(p, s)   memcpy((p), (s), sizeof(ULONG))
 
#define RtlRetrieveUlonglong(p, s)   memcpy((p), (s), sizeof(ULONGLONG))
 
#define RtlZeroMemory(Destination, Length)   memset((Destination),0,(Length))
 
#define InitializeListHead(le)   (void)((le)->Flink = (le)->Blink = (le))
 
#define InsertHeadList(le, e)   do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
 
#define InsertTailList(le, e)   do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
 
#define IsListEmpty(le)   ((le)->Flink == (le))
 
#define RemoveEntryList(e)   do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
 

Typedefs

typedef LONG NTSTATUS
 
typedef const charPCSZ
 
typedef short CSHORT
 
typedef CSHORTPCSHORT
 
typedef struct _STRING STRING
 
typedef struct _STRINGPSTRING
 
typedef STRING ANSI_STRING
 
typedef PSTRING PANSI_STRING
 
typedef const STRINGPCANSI_STRING
 
typedef STRING OEM_STRING
 
typedef PSTRING POEM_STRING
 
typedef const STRINGPCOEM_STRING
 
typedef struct _UNICODE_STRING UNICODE_STRING
 
typedef struct _UNICODE_STRINGPUNICODE_STRING
 
typedef const UNICODE_STRINGPCUNICODE_STRING
 
typedef struct _FILETIME FILETIME
 
typedef struct _FILETIMEPFILETIME
 
typedef struct _FILETIMELPFILETIME
 
typedef struct _TIME_FIELDS TIME_FIELDS
 
typedef struct _TIME_FIELDSPTIME_FIELDS
 
typedef struct _RTL_TIME_ZONE_INFORMATION RTL_TIME_ZONE_INFORMATION
 
typedef struct _RTL_TIME_ZONE_INFORMATIONPRTL_TIME_ZONE_INFORMATION
 
typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION RTL_DYNAMIC_TIME_ZONE_INFORMATION
 
typedef struct _RTL_TIME_DYNAMIC_ZONE_INFORMATIONPRTL_DYNAMIC_TIME_ZONE_INFORMATION
 
typedef struct _CLIENT_ID CLIENT_ID
 
typedef struct _CLIENT_IDPCLIENT_ID
 
typedef struct _CURDIR CURDIR
 
typedef struct _CURDIRPCURDIR
 
typedef struct RTL_DRIVE_LETTER_CURDIR RTL_DRIVE_LETTER_CURDIR
 
typedef struct RTL_DRIVE_LETTER_CURDIRPRTL_DRIVE_LETTER_CURDIR
 
typedef struct tagRTL_BITMAP RTL_BITMAP
 
typedef struct tagRTL_BITMAPPRTL_BITMAP
 
typedef const RTL_BITMAPPCRTL_BITMAP
 
typedef struct tagRTL_BITMAP_RUN RTL_BITMAP_RUN
 
typedef struct tagRTL_BITMAP_RUNPRTL_BITMAP_RUN
 
typedef const RTL_BITMAP_RUNPCRTL_BITMAP_RUN
 
typedef struct _RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS
 
typedef struct _RTL_USER_PROCESS_PARAMETERSPRTL_USER_PROCESS_PARAMETERS
 
typedef struct _PEB_LDR_DATA PEB_LDR_DATA
 
typedef struct _PEB_LDR_DATAPPEB_LDR_DATA
 
typedef struct _GDI_TEB_BATCH GDI_TEB_BATCH
 
typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME RTL_ACTIVATION_CONTEXT_STACK_FRAME
 
typedef struct _RTL_ACTIVATION_CONTEXT_STACK_FRAMEPRTL_ACTIVATION_CONTEXT_STACK_FRAME
 
typedef struct _ACTIVATION_CONTEXT_STACK ACTIVATION_CONTEXT_STACK
 
typedef struct _ACTIVATION_CONTEXT_STACKPACTIVATION_CONTEXT_STACK
 
typedef struct _TEB_ACTIVE_FRAME_CONTEXT TEB_ACTIVE_FRAME_CONTEXT
 
typedef struct _TEB_ACTIVE_FRAME_CONTEXTPTEB_ACTIVE_FRAME_CONTEXT
 
typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EX TEB_ACTIVE_FRAME_CONTEXT_EX
 
typedef struct _TEB_ACTIVE_FRAME_CONTEXT_EXPTEB_ACTIVE_FRAME_CONTEXT_EX
 
typedef struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME
 
typedef struct _TEB_ACTIVE_FRAMEPTEB_ACTIVE_FRAME
 
typedef struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX
 
typedef struct _TEB_ACTIVE_FRAME_EXPTEB_ACTIVE_FRAME_EX
 
typedef struct _PEB PEB
 
typedef struct _PEBPPEB
 
typedef struct _TEB TEB
 
typedef struct _TEBPTEB
 
typedef enum _FILE_INFORMATION_CLASS FILE_INFORMATION_CLASS
 
typedef enum _FILE_INFORMATION_CLASSPFILE_INFORMATION_CLASS
 
typedef struct _FILE_DIRECTORY_INFORMATION FILE_DIRECTORY_INFORMATION
 
typedef struct _FILE_DIRECTORY_INFORMATIONPFILE_DIRECTORY_INFORMATION
 
typedef struct _FILE_FULL_DIRECTORY_INFORMATION FILE_FULL_DIRECTORY_INFORMATION
 
typedef struct _FILE_FULL_DIRECTORY_INFORMATIONPFILE_FULL_DIRECTORY_INFORMATION
 
typedef struct _FILE_FULL_DIRECTORY_INFORMATION FILE_FULL_DIR_INFORMATION
 
typedef struct _FILE_FULL_DIRECTORY_INFORMATIONPFILE_FULL_DIR_INFORMATION
 
typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATION FILE_ID_FULL_DIRECTORY_INFORMATION
 
typedef struct _FILE_ID_FULL_DIRECTORY_INFORMATIONPFILE_ID_FULL_DIRECTORY_INFORMATION
 
typedef struct _FILE_BOTH_DIRECTORY_INFORMATION FILE_BOTH_DIRECTORY_INFORMATION
 
typedef struct _FILE_BOTH_DIRECTORY_INFORMATIONPFILE_BOTH_DIRECTORY_INFORMATION
 
typedef struct _FILE_BOTH_DIRECTORY_INFORMATION FILE_BOTH_DIR_INFORMATION
 
typedef struct _FILE_BOTH_DIRECTORY_INFORMATIONPFILE_BOTH_DIR_INFORMATION
 
typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATION FILE_ID_BOTH_DIRECTORY_INFORMATION
 
typedef struct _FILE_ID_BOTH_DIRECTORY_INFORMATIONPFILE_ID_BOTH_DIRECTORY_INFORMATION
 
typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION FILE_ID_GLOBAL_TX_DIR_INFORMATION
 
typedef struct _FILE_ID_GLOBAL_TX_DIR_INFORMATIONPFILE_ID_GLOBAL_TX_DIR_INFORMATION
 
typedef struct _FILE_BASIC_INFORMATION FILE_BASIC_INFORMATION
 
typedef struct _FILE_BASIC_INFORMATIONPFILE_BASIC_INFORMATION
 
typedef struct _FILE_STANDARD_INFORMATION FILE_STANDARD_INFORMATION
 
typedef struct _FILE_STANDARD_INFORMATIONPFILE_STANDARD_INFORMATION
 
typedef struct _FILE_INTERNAL_INFORMATION FILE_INTERNAL_INFORMATION
 
typedef struct _FILE_INTERNAL_INFORMATIONPFILE_INTERNAL_INFORMATION
 
typedef struct _FILE_ID_128 FILE_ID_128
 
typedef struct _FILE_ID_128PFILE_ID_128
 
typedef struct _FILE_ID_INFORMATION FILE_ID_INFORMATION
 
typedef struct _FILE_ID_INFORMATIONPFILE_ID_INFORMATION
 
typedef struct _FILE_EA_INFORMATION FILE_EA_INFORMATION
 
typedef struct _FILE_EA_INFORMATIONPFILE_EA_INFORMATION
 
typedef struct _FILE_ACCESS_INFORMATION FILE_ACCESS_INFORMATION
 
typedef struct _FILE_ACCESS_INFORMATIONPFILE_ACCESS_INFORMATION
 
typedef struct _FILE_NAME_INFORMATION FILE_NAME_INFORMATION
 
typedef struct _FILE_NAME_INFORMATIONPFILE_NAME_INFORMATION
 
typedef struct _FILE_RENAME_INFORMATION FILE_RENAME_INFORMATION
 
typedef struct _FILE_RENAME_INFORMATIONPFILE_RENAME_INFORMATION
 
typedef struct _FILE_LINK_INFORMATION FILE_LINK_INFORMATION
 
typedef struct _FILE_LINK_INFORMATIONPFILE_LINK_INFORMATION
 
typedef struct _FILE_NAMES_INFORMATION FILE_NAMES_INFORMATION
 
typedef struct _FILE_NAMES_INFORMATIONPFILE_NAMES_INFORMATION
 
typedef struct _FILE_DISPOSITION_INFORMATION FILE_DISPOSITION_INFORMATION
 
typedef struct _FILE_DISPOSITION_INFORMATIONPFILE_DISPOSITION_INFORMATION
 
typedef struct _FILE_POSITION_INFORMATION FILE_POSITION_INFORMATION
 
typedef struct _FILE_POSITION_INFORMATIONPFILE_POSITION_INFORMATION
 
typedef struct _FILE_ALIGNMENT_INFORMATION FILE_ALIGNMENT_INFORMATION
 
typedef struct _FILE_ALIGNMENT_INFORMATIONPFILE_ALIGNMENT_INFORMATION
 
typedef struct _FILE_ALLOCATION_INFORMATION FILE_ALLOCATION_INFORMATION
 
typedef struct _FILE_ALLOCATION_INFORMATIONPFILE_ALLOCATION_INFORMATION
 
typedef struct _FILE_END_OF_FILE_INFORMATION FILE_END_OF_FILE_INFORMATION
 
typedef struct _FILE_END_OF_FILE_INFORMATIONPFILE_END_OF_FILE_INFORMATION
 
typedef struct _FILE_NETWORK_OPEN_INFORMATION FILE_NETWORK_OPEN_INFORMATION
 
typedef struct _FILE_NETWORK_OPEN_INFORMATIONPFILE_NETWORK_OPEN_INFORMATION
 
typedef struct _FILE_FULL_EA_INFORMATION FILE_FULL_EA_INFORMATION
 
typedef struct _FILE_FULL_EA_INFORMATIONPFILE_FULL_EA_INFORMATION
 
typedef struct _FILE_MODE_INFORMATION FILE_MODE_INFORMATION
 
typedef struct _FILE_MODE_INFORMATIONPFILE_MODE_INFORMATION
 
typedef struct _FILE_STREAM_INFORMATION FILE_STREAM_INFORMATION
 
typedef struct _FILE_STREAM_INFORMATIONPFILE_STREAM_INFORMATION
 
typedef struct _FILE_ATTRIBUTE_TAG_INFORMATION FILE_ATTRIBUTE_TAG_INFORMATION
 
typedef struct _FILE_ATTRIBUTE_TAG_INFORMATIONPFILE_ATTRIBUTE_TAG_INFORMATION
 
typedef struct _FILE_MAILSLOT_QUERY_INFORMATION FILE_MAILSLOT_QUERY_INFORMATION
 
typedef struct _FILE_MAILSLOT_QUERY_INFORMATIONPFILE_MAILSLOT_QUERY_INFORMATION
 
typedef struct _FILE_MAILSLOT_SET_INFORMATION FILE_MAILSLOT_SET_INFORMATION
 
typedef struct _FILE_MAILSLOT_SET_INFORMATIONPFILE_MAILSLOT_SET_INFORMATION
 
typedef struct _FILE_PIPE_INFORMATION FILE_PIPE_INFORMATION
 
typedef struct _FILE_PIPE_INFORMATIONPFILE_PIPE_INFORMATION
 
typedef struct _FILE_PIPE_LOCAL_INFORMATION FILE_PIPE_LOCAL_INFORMATION
 
typedef struct _FILE_PIPE_LOCAL_INFORMATIONPFILE_PIPE_LOCAL_INFORMATION
 
typedef struct _FILE_OBJECTID_INFORMATION FILE_OBJECTID_INFORMATION
 
typedef struct _FILE_OBJECTID_INFORMATIONPFILE_OBJECTID_INFORMATION
 
typedef struct _FILE_QUOTA_INFORMATION FILE_QUOTA_INFORMATION
 
typedef struct _FILE_QUOTA_INFORMATIONPFILE_QUOTA_INFORMATION
 
typedef struct _FILE_REPARSE_POINT_INFORMATION FILE_REPARSE_POINT_INFORMATION
 
typedef struct _FILE_REPARSE_POINT_INFORMATIONPFILE_REPARSE_POINT_INFORMATION
 
typedef struct _FILE_ALL_INFORMATION FILE_ALL_INFORMATION
 
typedef struct _FILE_ALL_INFORMATIONPFILE_ALL_INFORMATION
 
typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
typedef struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATIONPFILE_IO_COMPLETION_NOTIFICATION_INFORMATION
 
typedef enum _FSINFOCLASS FS_INFORMATION_CLASS
 
typedef enum _FSINFOCLASSPFS_INFORMATION_CLASS
 
typedef enum _KEY_INFORMATION_CLASS KEY_INFORMATION_CLASS
 
typedef enum _KEY_VALUE_INFORMATION_CLASS KEY_VALUE_INFORMATION_CLASS
 
typedef enum _OBJECT_INFORMATION_CLASS OBJECT_INFORMATION_CLASS
 
typedef enum _OBJECT_INFORMATION_CLASSPOBJECT_INFORMATION_CLASS
 
typedef enum _PROCESSINFOCLASS PROCESSINFOCLASS
 
typedef enum _PROCESSINFOCLASS PROCESS_INFORMATION_CLASS
 
typedef enum _SECTION_INHERIT SECTION_INHERIT
 
typedef enum _SYSTEM_INFORMATION_CLASS SYSTEM_INFORMATION_CLASS
 
typedef enum _SYSTEM_INFORMATION_CLASSPSYSTEM_INFORMATION_CLASS
 
typedef enum _THREADINFOCLASS THREADINFOCLASS
 
typedef struct _THREAD_BASIC_INFORMATION THREAD_BASIC_INFORMATION
 
typedef struct _THREAD_BASIC_INFORMATIONPTHREAD_BASIC_INFORMATION
 
typedef struct _THREAD_DESCRIPTOR_INFORMATION THREAD_DESCRIPTOR_INFORMATION
 
typedef struct _THREAD_DESCRIPTOR_INFORMATIONPTHREAD_DESCRIPTOR_INFORMATION
 
typedef struct _KERNEL_USER_TIMES KERNEL_USER_TIMES
 
typedef struct _KERNEL_USER_TIMESPKERNEL_USER_TIMES
 
typedef enum _WINSTATIONINFOCLASS WINSTATIONINFOCLASS
 
typedef enum _MEMORY_INFORMATION_CLASS MEMORY_INFORMATION_CLASS
 
typedef struct _MEMORY_SECTION_NAME MEMORY_SECTION_NAME
 
typedef struct _MEMORY_SECTION_NAMEPMEMORY_SECTION_NAME
 
typedef enum _MUTANT_INFORMATION_CLASS MUTANT_INFORMATION_CLASS
 
typedef enum _MUTANT_INFORMATION_CLASSPMUTANT_INFORMATION_CLASS
 
typedef struct _MUTANT_BASIC_INFORMATION MUTANT_BASIC_INFORMATION
 
typedef struct _MUTANT_BASIC_INFORMATIONPMUTANT_BASIC_INFORMATION
 
typedef enum _TIMER_INFORMATION_CLASS TIMER_INFORMATION_CLASS
 
typedef struct _TIMER_BASIC_INFORMATION TIMER_BASIC_INFORMATION
 
typedef struct _TIMER_BASIC_INFORMATIONPTIMER_BASIC_INFORMATION
 
typedef struct _SYSTEM_THREAD_INFORMATION SYSTEM_THREAD_INFORMATION
 
typedef struct _SYSTEM_THREAD_INFORMATIONPSYSTEM_THREAD_INFORMATION
 
typedef struct _IO_STATUS_BLOCK IO_STATUS_BLOCK
 
typedef struct _IO_STATUS_BLOCKPIO_STATUS_BLOCK
 
typedef void(WINAPIPIO_APC_ROUTINE) (PVOID, PIO_STATUS_BLOCK, ULONG)
 
typedef struct _KEY_BASIC_INFORMATION KEY_BASIC_INFORMATION
 
typedef struct _KEY_BASIC_INFORMATIONPKEY_BASIC_INFORMATION
 
typedef struct _KEY_NODE_INFORMATION KEY_NODE_INFORMATION
 
typedef struct _KEY_NODE_INFORMATIONPKEY_NODE_INFORMATION
 
typedef struct _KEY_FULL_INFORMATION KEY_FULL_INFORMATION
 
typedef struct _KEY_FULL_INFORMATIONPKEY_FULL_INFORMATION
 
typedef struct _KEY_NAME_INFORMATION KEY_NAME_INFORMATION
 
typedef struct _KEY_NAME_INFORMATIONPKEY_NAME_INFORMATION
 
typedef struct _KEY_CACHED_INFORMATION KEY_CACHED_INFORMATION
 
typedef struct _KEY_CACHED_INFORMATIONPKEY_CACHED_INFORMATION
 
typedef struct _KEY_VALUE_ENTRY KEY_VALUE_ENTRY
 
typedef struct _KEY_VALUE_ENTRYPKEY_VALUE_ENTRY
 
typedef struct _KEY_VALUE_BASIC_INFORMATION KEY_VALUE_BASIC_INFORMATION
 
typedef struct _KEY_VALUE_BASIC_INFORMATIONPKEY_VALUE_BASIC_INFORMATION
 
typedef struct _KEY_VALUE_FULL_INFORMATION KEY_VALUE_FULL_INFORMATION
 
typedef struct _KEY_VALUE_FULL_INFORMATIONPKEY_VALUE_FULL_INFORMATION
 
typedef struct _KEY_VALUE_PARTIAL_INFORMATION KEY_VALUE_PARTIAL_INFORMATION
 
typedef struct _KEY_VALUE_PARTIAL_INFORMATIONPKEY_VALUE_PARTIAL_INFORMATION
 
typedef struct _OBJECT_ATTRIBUTES OBJECT_ATTRIBUTES
 
typedef struct _OBJECT_ATTRIBUTESPOBJECT_ATTRIBUTES
 
typedef struct _OBJECT_DATA_INFORMATION OBJECT_DATA_INFORMATION
 
typedef struct _OBJECT_DATA_INFORMATIONPOBJECT_DATA_INFORMATION
 
typedef struct _OBJECT_BASIC_INFORMATION OBJECT_BASIC_INFORMATION
 
typedef struct _OBJECT_BASIC_INFORMATIONPOBJECT_BASIC_INFORMATION
 
typedef struct _OBJECT_NAME_INFORMATION OBJECT_NAME_INFORMATION
 
typedef struct _OBJECT_NAME_INFORMATIONPOBJECT_NAME_INFORMATION
 
typedef struct __OBJECT_TYPE_INFORMATION OBJECT_TYPE_INFORMATION
 
typedef struct __OBJECT_TYPE_INFORMATIONPOBJECT_TYPE_INFORMATION
 
typedef struct _OBJECT_TYPES_INFORMATION OBJECT_TYPES_INFORMATION
 
typedef struct _OBJECT_TYPES_INFORMATIONPOBJECT_TYPES_INFORMATION
 
typedef struct _PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION
 
typedef struct _PROCESS_BASIC_INFORMATIONPPROCESS_BASIC_INFORMATION
 
typedef struct _PROCESS_PRIORITY_CLASS PROCESS_PRIORITY_CLASS
 
typedef struct _PROCESS_PRIORITY_CLASSPPROCESS_PRIORITY_CLASS
 
typedef struct _RTL_HEAP_DEFINITION RTL_HEAP_DEFINITION
 
typedef struct _RTL_HEAP_DEFINITIONPRTL_HEAP_DEFINITION
 
typedef struct _RTL_RWLOCK RTL_RWLOCK
 
typedef struct _RTL_RWLOCKLPRTL_RWLOCK
 
typedef struct _SYSTEM_BASIC_INFORMATION SYSTEM_BASIC_INFORMATION
 
typedef struct _SYSTEM_BASIC_INFORMATIONPSYSTEM_BASIC_INFORMATION
 
typedef struct _SYSTEM_CPU_INFORMATION SYSTEM_CPU_INFORMATION
 
typedef struct _SYSTEM_CPU_INFORMATIONPSYSTEM_CPU_INFORMATION
 
typedef struct _SYSTEM_PERFORMANCE_INFORMATION SYSTEM_PERFORMANCE_INFORMATION
 
typedef struct _SYSTEM_PERFORMANCE_INFORMATIONPSYSTEM_PERFORMANCE_INFORMATION
 
typedef struct _SYSTEM_TIMEOFDAY_INFORMATION SYSTEM_TIMEOFDAY_INFORMATION
 
typedef struct _SYSTEM_TIMEOFDAY_INFORMATIONPSYSTEM_TIMEOFDAY_INFORMATION
 
typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
typedef struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATIONPSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
 
typedef struct _SYSTEM_DRIVER_INFORMATION SYSTEM_DRIVER_INFORMATION
 
typedef struct _SYSTEM_DRIVER_INFORMATIONPSYSTEM_DRIVER_INFORMATION
 
typedef struct _SYSTEM_HANDLE_ENTRY SYSTEM_HANDLE_ENTRY
 
typedef struct _SYSTEM_HANDLE_ENTRYPSYSTEM_HANDLE_ENTRY
 
typedef struct _SYSTEM_HANDLE_INFORMATION SYSTEM_HANDLE_INFORMATION
 
typedef struct _SYSTEM_HANDLE_INFORMATIONPSYSTEM_HANDLE_INFORMATION
 
typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
typedef struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EXPSYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
 
typedef struct _SYSTEM_HANDLE_INFORMATION_EX SYSTEM_HANDLE_INFORMATION_EX
 
typedef struct _SYSTEM_HANDLE_INFORMATION_EXPSYSTEM_HANDLE_INFORMATION_EX
 
typedef struct _SYSTEM_CACHE_INFORMATION SYSTEM_CACHE_INFORMATION
 
typedef struct _SYSTEM_CACHE_INFORMATIONPSYSTEM_CACHE_INFORMATION
 
typedef struct _SYSTEM_INTERRUPT_INFORMATION SYSTEM_INTERRUPT_INFORMATION
 
typedef struct _SYSTEM_INTERRUPT_INFORMATIONPSYSTEM_INTERRUPT_INFORMATION
 
typedef struct _SYSTEM_CONFIGURATION_INFO SYSTEM_CONFIGURATION_INFO
 
typedef struct _SYSTEM_CONFIGURATION_INFOPSYSTEM_CONFIGURATION_INFO
 
typedef struct _SYSTEM_EXCEPTION_INFORMATION SYSTEM_EXCEPTION_INFORMATION
 
typedef struct _SYSTEM_EXCEPTION_INFORMATIONPSYSTEM_EXCEPTION_INFORMATION
 
typedef struct _SYSTEM_LOOKASIDE_INFORMATION SYSTEM_LOOKASIDE_INFORMATION
 
typedef struct _SYSTEM_LOOKASIDE_INFORMATIONPSYSTEM_LOOKASIDE_INFORMATION
 
typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION SYSTEM_KERNEL_DEBUGGER_INFORMATION
 
typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATIONPSYSTEM_KERNEL_DEBUGGER_INFORMATION
 
typedef struct _VM_COUNTERS_ VM_COUNTERS
 
typedef struct _VM_COUNTERS_PVM_COUNTERS
 
typedef struct _SYSTEM_PROCESS_INFORMATION SYSTEM_PROCESS_INFORMATION
 
typedef struct _SYSTEM_PROCESS_INFORMATIONPSYSTEM_PROCESS_INFORMATION
 
typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION
 
typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATIONPSYSTEM_REGISTRY_QUOTA_INFORMATION
 
typedef struct _SYSTEM_TIME_ADJUSTMENT SYSTEM_TIME_ADJUSTMENT
 
typedef struct _SYSTEM_TIME_ADJUSTMENTPSYSTEM_TIME_ADJUSTMENT
 
typedef struct _WINSTATIONINFORMATIONW WINSTATIONINFORMATIONW
 
typedef struct _WINSTATIONINFORMATIONWPWINSTATIONINFORMATIONW
 
typedef BOOLEAN(WINAPIPWINSTATIONQUERYINFORMATIONW) (HANDLE, ULONG, WINSTATIONINFOCLASS, PVOID, ULONG, PULONG)
 
typedef struct _LDR_RESOURCE_INFO LDR_RESOURCE_INFO
 
typedef struct _LDR_RESOURCE_INFOPLDR_RESOURCE_INFO
 
typedef struct _DEBUG_BUFFER DEBUG_BUFFER
 
typedef struct _DEBUG_BUFFERPDEBUG_BUFFER
 
typedef struct _DEBUG_MODULE_INFORMATION DEBUG_MODULE_INFORMATION
 
typedef struct _DEBUG_MODULE_INFORMATIONPDEBUG_MODULE_INFORMATION
 
typedef struct _DEBUG_HEAP_INFORMATION DEBUG_HEAP_INFORMATION
 
typedef struct _DEBUG_HEAP_INFORMATIONPDEBUG_HEAP_INFORMATION
 
typedef struct _DEBUG_LOCK_INFORMATION DEBUG_LOCK_INFORMATION
 
typedef struct _DEBUG_LOCK_INFORMATIONPDEBUG_LOCK_INFORMATION
 
typedef struct _PORT_MESSAGE_HEADER PORT_MESSAGE_HEADER
 
typedef struct _PORT_MESSAGE_HEADERPPORT_MESSAGE_HEADER
 
typedef struct _PORT_MESSAGE_HEADER PORT_MESSAGE
 
typedef struct _PORT_MESSAGE_HEADERPPORT_MESSAGE
 
typedef unsigned short RTL_ATOM
 
typedef unsigned shortPRTL_ATOM
 
typedef struct atom_table * RTL_ATOM_TABLE
 
typedef struct atom_table ** PRTL_ATOM_TABLE
 
typedef enum _ATOM_INFORMATION_CLASS ATOM_INFORMATION_CLASS
 
typedef struct _ATOM_BASIC_INFORMATION ATOM_BASIC_INFORMATION
 
typedef struct _ATOM_BASIC_INFORMATIONPATOM_BASIC_INFORMATION
 
typedef struct _RTL_HANDLE RTL_HANDLE
 
typedef struct _RTL_HANDLE_TABLE RTL_HANDLE_TABLE
 
typedef void(CALLBACKPNTAPCFUNC) (ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
typedef void(CALLBACKPRTL_THREAD_START_ROUTINE) (LPVOID)
 
typedef DWORD(CALLBACKPRTL_WORK_ITEM_ROUTINE) (LPVOID)
 
typedef void(NTAPIRTL_WAITORTIMERCALLBACKFUNC) (PVOID, BOOLEAN)
 
typedef NTSTATUS(WINAPIPRTL_QUERY_REGISTRY_ROUTINE) (PCWSTR ValueName, ULONG ValueType, PVOID ValueData, ULONG ValueLength, PVOID Context, PVOID EntryContext)
 
typedef struct _RTL_QUERY_REGISTRY_TABLE RTL_QUERY_REGISTRY_TABLE
 
typedef struct _RTL_QUERY_REGISTRY_TABLEPRTL_QUERY_REGISTRY_TABLE
 
typedef struct _KEY_MULTIPLE_VALUE_INFORMATION KEY_MULTIPLE_VALUE_INFORMATION
 
typedef struct _KEY_MULTIPLE_VALUE_INFORMATIONPKEY_MULTIPLE_VALUE_INFORMATION
 
typedef VOID(CALLBACKPRTL_OVERLAPPED_COMPLETION_ROUTINE) (DWORD, DWORD, LPVOID)
 
typedef VOID(CALLBACKPTIMER_APC_ROUTINE) (PVOID, ULONG, LONG)
 
typedef enum _EVENT_INFORMATION_CLASS EVENT_INFORMATION_CLASS
 
typedef enum _EVENT_INFORMATION_CLASSPEVENT_INFORMATION_CLASS
 
typedef struct _EVENT_BASIC_INFORMATION EVENT_BASIC_INFORMATION
 
typedef struct _EVENT_BASIC_INFORMATIONPEVENT_BASIC_INFORMATION
 
typedef enum _SEMAPHORE_INFORMATION_CLASS SEMAPHORE_INFORMATION_CLASS
 
typedef enum _SEMAPHORE_INFORMATION_CLASSPSEMAPHORE_INFORMATION_CLASS
 
typedef struct _SEMAPHORE_BASIC_INFORMATION SEMAPHORE_BASIC_INFORMATION
 
typedef struct _SEMAPHORE_BASIC_INFORMATIONPSEMAPHORE_BASIC_INFORMATION
 
typedef enum _SECTION_INFORMATION_CLASS SECTION_INFORMATION_CLASS
 
typedef struct _SECTION_BASIC_INFORMATION SECTION_BASIC_INFORMATION
 
typedef struct _SECTION_BASIC_INFORMATIONPSECTION_BASIC_INFORMATION
 
typedef struct _SECTION_IMAGE_INFORMATION SECTION_IMAGE_INFORMATION
 
typedef struct _SECTION_IMAGE_INFORMATIONPSECTION_IMAGE_INFORMATION
 
typedef struct _LPC_SECTION_WRITE LPC_SECTION_WRITE
 
typedef struct _LPC_SECTION_WRITEPLPC_SECTION_WRITE
 
typedef struct _LPC_SECTION_READ LPC_SECTION_READ
 
typedef struct _LPC_SECTION_READPLPC_SECTION_READ
 
typedef struct _LPC_MESSAGE LPC_MESSAGE
 
typedef struct _LPC_MESSAGEPLPC_MESSAGE
 
typedef struct _RTL_USER_PROCESS_INFORMATION RTL_USER_PROCESS_INFORMATION
 
typedef struct _RTL_USER_PROCESS_INFORMATIONPRTL_USER_PROCESS_INFORMATION
 
typedef enum _SHUTDOWN_ACTION SHUTDOWN_ACTION
 
typedef enum _SHUTDOWN_ACTIONPSHUTDOWN_ACTION
 
typedef enum _KPROFILE_SOURCE KPROFILE_SOURCE
 
typedef enum _KPROFILE_SOURCEPKPROFILE_SOURCE
 
typedef struct _DIRECTORY_BASIC_INFORMATION DIRECTORY_BASIC_INFORMATION
 
typedef struct _DIRECTORY_BASIC_INFORMATIONPDIRECTORY_BASIC_INFORMATION
 
typedef struct _INITIAL_TEB INITIAL_TEB
 
typedef struct _INITIAL_TEBPINITIAL_TEB
 
typedef enum _PORT_INFORMATION_CLASS PORT_INFORMATION_CLASS
 
typedef enum _PORT_INFORMATION_CLASSPPORT_INFORMATION_CLASS
 
typedef enum _IO_COMPLETION_INFORMATION_CLASS IO_COMPLETION_INFORMATION_CLASS
 
typedef enum _IO_COMPLETION_INFORMATION_CLASSPIO_COMPLETION_INFORMATION_CLASS
 
typedef struct _FILE_COMPLETION_INFORMATION FILE_COMPLETION_INFORMATION
 
typedef struct _FILE_COMPLETION_INFORMATIONPFILE_COMPLETION_INFORMATION
 
typedef enum _HARDERROR_RESPONSE_OPTION HARDERROR_RESPONSE_OPTION
 
typedef enum _HARDERROR_RESPONSE_OPTIONPHARDERROR_RESPONSE_OPTION
 
typedef enum _HARDERROR_RESPONSE HARDERROR_RESPONSE
 
typedef enum _HARDERROR_RESPONSEPHARDERROR_RESPONSE
 
typedef enum _SYSDBG_COMMAND SYSDBG_COMMAND
 
typedef enum _SYSDBG_COMMANDPSYSDBG_COMMAND
 
typedef struct _LDR_MODULE LDR_MODULE
 
typedef struct _LDR_MODULEPLDR_MODULE
 
typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATA LDR_DLL_LOADED_NOTIFICATION_DATA
 
typedef struct _LDR_DLL_LOADED_NOTIFICATION_DATAPLDR_DLL_LOADED_NOTIFICATION_DATA
 
typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA LDR_DLL_UNLOADED_NOTIFICATION_DATA
 
typedef struct _LDR_DLL_UNLOADED_NOTIFICATION_DATAPLDR_DLL_UNLOADED_NOTIFICATION_DATA
 
typedef union _LDR_DLL_NOTIFICATION_DATA LDR_DLL_NOTIFICATION_DATA
 
typedef union _LDR_DLL_NOTIFICATION_DATAPLDR_DLL_NOTIFICATION_DATA
 
typedef void(CALLBACKPLDR_DLL_NOTIFICATION_FUNCTION) (ULONG, LDR_DLL_NOTIFICATION_DATA *, void *)
 
typedef struct _SYSTEM_MODULE SYSTEM_MODULE
 
typedef struct _SYSTEM_MODULEPSYSTEM_MODULE
 
typedef struct _SYSTEM_MODULE_INFORMATION SYSTEM_MODULE_INFORMATION
 
typedef struct _SYSTEM_MODULE_INFORMATIONPSYSTEM_MODULE_INFORMATION
 

Enumerations

enum  _FILE_INFORMATION_CLASS {
  FileDirectoryInformation = 1 , FileFullDirectoryInformation , FileBothDirectoryInformation , FileBasicInformation ,
  FileStandardInformation , FileInternalInformation , FileEaInformation , FileAccessInformation ,
  FileNameInformation , FileRenameInformation , FileLinkInformation , FileNamesInformation ,
  FileDispositionInformation , FilePositionInformation , FileFullEaInformation , FileModeInformation ,
  FileAlignmentInformation , FileAllInformation , FileAllocationInformation , FileEndOfFileInformation ,
  FileAlternateNameInformation , FileStreamInformation , FilePipeInformation , FilePipeLocalInformation ,
  FilePipeRemoteInformation , FileMailslotQueryInformation , FileMailslotSetInformation , FileCompressionInformation ,
  FileObjectIdInformation , FileCompletionInformation , FileMoveClusterInformation , FileQuotaInformation ,
  FileReparsePointInformation , FileNetworkOpenInformation , FileAttributeTagInformation , FileTrackingInformation ,
  FileIdBothDirectoryInformation , FileIdFullDirectoryInformation , FileValidDataLengthInformation , FileShortNameInformation ,
  FileIoCompletionNotificationInformation , FileIoStatusBlockRangeInformation , FileIoPriorityHintInformation , FileSfioReserveInformation ,
  FileSfioVolumeInformation , FileHardLinkInformation , FileProcessIdsUsingFileInformation , FileNormalizedNameInformation ,
  FileNetworkPhysicalNameInformation , FileIdGlobalTxDirectoryInformation , FileMaximumInformation , FileDirectoryInformation = 1 ,
  FileFullDirectoryInformation , FileBothDirectoryInformation , FileBasicInformation , FileStandardInformation ,
  FileInternalInformation , FileEaInformation , FileAccessInformation , FileNameInformation ,
  FileRenameInformation , FileLinkInformation , FileNamesInformation , FileDispositionInformation ,
  FilePositionInformation , FileFullEaInformation , FileModeInformation , FileAlignmentInformation ,
  FileAllInformation , FileAllocationInformation , FileEndOfFileInformation , FileAlternateNameInformation ,
  FileStreamInformation , FilePipeInformation , FilePipeLocalInformation , FilePipeRemoteInformation ,
  FileMailslotQueryInformation , FileMailslotSetInformation , FileCompressionInformation , FileCopyOnWriteInformation ,
  FileCompletionInformation , FileMoveClusterInformation , FileOleClassIdInformation , FileOleStateBitsInformation ,
  FileNetworkOpenInformation , FileObjectIdInformation , FileOleAllInformation , FileOleDirectoryInformation ,
  FileContentIndexInformation , FileInheritContentIndexInformation , FileOleInformation , FileMaximumInformation ,
  FileDirectoryInformation = 1 , FileFullDirectoryInformation , FileBothDirectoryInformation , FileBasicInformation ,
  FileStandardInformation , FileInternalInformation , FileEaInformation , FileAccessInformation ,
  FileNameInformation , FileRenameInformation , FileLinkInformation , FileNamesInformation ,
  FileDispositionInformation , FilePositionInformation , FileFullEaInformation , FileModeInformation ,
  FileAlignmentInformation , FileAllInformation , FileAllocationInformation , FileEndOfFileInformation ,
  FileAlternateNameInformation , FileStreamInformation , FilePipeInformation , FilePipeLocalInformation ,
  FilePipeRemoteInformation , FileMailslotQueryInformation , FileMailslotSetInformation , FileCompressionInformation ,
  FileCopyOnWriteInformation , FileCompletionInformation , FileMoveClusterInformation , FileOleClassIdInformation ,
  FileOleStateBitsInformation , FileNetworkOpenInformation , FileObjectIdInformation , FileOleAllInformation ,
  FileOleDirectoryInformation , FileContentIndexInformation , FileInheritContentIndexInformation , FileOleInformation ,
  FileMaximumInformation , FileDirectoryInformation = 1 , FileDirectoryInformation = 1 , FileFullDirectoryInformation ,
  FileBothDirectoryInformation , FileBasicInformation , FileStandardInformation , FileInternalInformation ,
  FileEaInformation , FileAccessInformation , FileNameInformation , FileRenameInformation ,
  FileLinkInformation , FileNamesInformation , FileDispositionInformation , FilePositionInformation ,
  FileFullEaInformation , FileModeInformation , FileAlignmentInformation , FileAllInformation ,
  FileAllocationInformation , FileEndOfFileInformation , FileAlternateNameInformation , FileStreamInformation ,
  FilePipeInformation , FilePipeLocalInformation , FilePipeRemoteInformation , FileMailslotQueryInformation ,
  FileMailslotSetInformation , FileCompressionInformation , FileObjectIdInformation , FileCompletionInformation ,
  FileMoveClusterInformation , FileQuotaInformation , FileReparsePointInformation , FileNetworkOpenInformation ,
  FileAttributeTagInformation , FileTrackingInformation , FileIdBothDirectoryInformation , FileIdFullDirectoryInformation ,
  FileValidDataLengthInformation , FileShortNameInformation , FileIoCompletionNotificationInformation , FileIoStatusBlockRangeInformation ,
  FileIoPriorityHintInformation , FileSfioReserveInformation , FileSfioVolumeInformation , FileHardLinkInformation ,
  FileProcessIdsUsingFileInformation , FileNormalizedNameInformation , FileNetworkPhysicalNameInformation , FileIdGlobalTxDirectoryInformation ,
  FileIsRemoteDeviceInformation , FileAttributeCacheInformation , FileNumaNodeInformation , FileStandardLinkInformation ,
  FileRemoteProtocolInformation , FileRenameInformationBypassAccessCheck , FileLinkInformationBypassAccessCheck , FileVolumeNameInformation ,
  FileIdInformation , FileIdExtdDirectoryInformation , FileReplaceCompletionInformation , FileHardLinkFullIdInformation ,
  FileIdExtdBothDirectoryInformation , FileMaximumInformation , FileDirectoryInformation = 1 , FileFullDirectoryInformation ,
  FileBothDirectoryInformation , FileBasicInformation , FileStandardInformation , FileInternalInformation ,
  FileEaInformation , FileAccessInformation , FileNameInformation , FileRenameInformation ,
  FileLinkInformation , FileNamesInformation , FileDispositionInformation , FilePositionInformation ,
  FileFullEaInformation , FileModeInformation , FileAlignmentInformation , FileAllInformation ,
  FileAllocationInformation , FileEndOfFileInformation , FileAlternateNameInformation , FileStreamInformation ,
  FilePipeInformation , FilePipeLocalInformation , FilePipeRemoteInformation , FileMailslotQueryInformation ,
  FileMailslotSetInformation , FileCompressionInformation , FileObjectIdInformation , FileCompletionInformation ,
  FileMoveClusterInformation , FileQuotaInformation , FileReparsePointInformation , FileNetworkOpenInformation ,
  FileAttributeTagInformation , FileTrackingInformation , FileIdBothDirectoryInformation , FileIdFullDirectoryInformation ,
  FileValidDataLengthInformation , FileShortNameInformation , FileIoCompletionNotificationInformation , FileIoStatusBlockRangeInformation ,
  FileIoPriorityHintInformation , FileSfioReserveInformation , FileSfioVolumeInformation , FileHardLinkInformation ,
  FileProcessIdsUsingFileInformation , FileNormalizedNameInformation , FileNetworkPhysicalNameInformation , FileIdGlobalTxDirectoryInformation ,
  FileIsRemoteDeviceInformation , FileAttributeCacheInformation , FileNumaNodeInformation , FileStandardLinkInformation ,
  FileRemoteProtocolInformation , FileMaximumInformation
}
 
enum  _FSINFOCLASS {
  FileFsVolumeInformation = 1 , FileFsLabelInformation , FileFsSizeInformation , FileFsDeviceInformation ,
  FileFsAttributeInformation , FileFsControlInformation , FileFsFullSizeInformation , FileFsObjectIdInformation ,
  FileFsDriverPathInformation , FileFsVolumeFlagsInformation , FileFsMaximumInformation , FileFsVolumeInformation = 1 ,
  FileFsLabelInformation , FileFsSizeInformation , FileFsDeviceInformation , FileFsAttributeInformation ,
  FileFsControlInformation , FileFsQuotaQueryInformation , FileFsQuotaSetInformation , FileFsMaximumInformation ,
  FileFsVolumeInformation = 1 , FileFsLabelInformation , FileFsSizeInformation , FileFsDeviceInformation ,
  FileFsAttributeInformation , FileFsControlInformation , FileFsFullSizeInformation , FileFsObjectIdInformation ,
  FileFsDriverPathInformation , FileFsMaximumInformation , FileFsVolumeInformation = 1 , FileFsLabelInformation ,
  FileFsSizeInformation , FileFsDeviceInformation , FileFsAttributeInformation , FileFsControlInformation ,
  FileFsFullSizeInformation , FileFsObjectIdInformation , FileFsMaximumInformation , FileFsVolumeInformation = 1 ,
  FileFsLabelInformation , FileFsSizeInformation , FileFsDeviceInformation , FileFsAttributeInformation ,
  FileFsControlInformation , FileFsFullSizeInformation , FileFsObjectIdInformation , FileFsDriverPathInformation ,
  FileFsVolumeFlagsInformation , FileFsMaximumInformation
}
 
enum  _KEY_INFORMATION_CLASS {
  KeyBasicInformation , KeyNodeInformation , KeyFullInformation , KeyBasicInformation ,
  KeyNodeInformation , KeyFullInformation , KeyNameInformation , KeyCachedInformation ,
  KeyFlagsInformation , KeyVirtualizationInformation , KeyHandleTagsInformation , MaxKeyInfoClass ,
  KeyBasicInformation , KeyNodeInformation , KeyFullInformation , KeyNameInformation ,
  KeyCachedInformation , KeyFlagsInformation , KeyVirtualizationInformation , KeyHandleTagsInformation ,
  MaxKeyInfoClass
}
 
enum  _KEY_VALUE_INFORMATION_CLASS {
  KeyValueBasicInformation , KeyValueFullInformation , KeyValuePartialInformation , KeyValueBasicInformation ,
  KeyValueFullInformation , KeyValuePartialInformation , KeyValueFullInformationAlign64 , KeyValuePartialInformationAlign64 ,
  KeyValueBasicInformation , KeyValueFullInformation , KeyValuePartialInformation , KeyValueFullInformationAlign64 ,
  KeyValuePartialInformationAlign64 , KeyValueBasicInformation , KeyValueFullInformation , KeyValuePartialInformation ,
  KeyValueFullInformationAlign64 , KeyValuePartialInformationAlign64
}
 
enum  _OBJECT_INFORMATION_CLASS {
  ObjectBasicInformation , ObjectNameInformation , ObjectTypeInformation , ObjectAllTypesInformation ,
  ObjectHandleInformation , ObjectBasicInformation = 0 , ObjectTypeInformation = 2 , ObjectBasicInformation ,
  ObjectNameInformation , ObjectTypeInformation , ObjectTypesInformation , ObjectDataInformation
}
 
enum  _PROCESSINFOCLASS {
  ProcessBasicInformation = 0 , ProcessDebugPort = 7 , ProcessWow64Information = 26 , ProcessImageFileName = 27 ,
  ProcessBreakOnTermination = 29 , ProcessBasicInformation = 0 , ProcessQuotaLimits = 1 , ProcessIoCounters = 2 ,
  ProcessVmCounters = 3 , ProcessTimes = 4 , ProcessBasePriority = 5 , ProcessRaisePriority = 6 ,
  ProcessDebugPort = 7 , ProcessExceptionPort = 8 , ProcessAccessToken = 9 , ProcessLdtInformation = 10 ,
  ProcessLdtSize = 11 , ProcessDefaultHardErrorMode = 12 , ProcessIoPortHandlers = 13 , ProcessPooledUsageAndLimits = 14 ,
  ProcessWorkingSetWatch = 15 , ProcessUserModeIOPL = 16 , ProcessEnableAlignmentFaultFixup = 17 , ProcessPriorityClass = 18 ,
  ProcessWx86Information = 19 , ProcessHandleCount = 20 , ProcessAffinityMask = 21 , ProcessPriorityBoost = 22 ,
  ProcessDeviceMap = 23 , ProcessSessionInformation = 24 , ProcessForegroundInformation = 25 , ProcessWow64Information = 26 ,
  ProcessImageFileName = 27 , ProcessLUIDDeviceMapsEnabled = 28 , ProcessBreakOnTermination = 29 , ProcessDebugObjectHandle = 30 ,
  ProcessDebugFlags = 31 , ProcessHandleTracing = 32 , ProcessExecuteFlags = 34 , ProcessTlsInformation = 35 ,
  ProcessCookie = 36 , ProcessImageInformation = 37 , ProcessCycleTime = 38 , ProcessPagePriority = 39 ,
  ProcessInstrumentationCallback = 40 , ProcessThreadStackAllocation = 41 , ProcessWorkingSetWatchEx = 42 , ProcessImageFileNameWin32 = 43 ,
  ProcessImageFileMapping = 44 , ProcessAffinityUpdateMode = 45 , ProcessMemoryAllocationMode = 46 , ProcessGroupInformation = 47 ,
  ProcessTokenVirtualizationEnabled = 48 , ProcessConsoleHostProcess = 49 , ProcessWindowInformation = 50 , MaxProcessInfoClass ,
  ProcessBasicInformation , ProcessQuotaLimits , ProcessIoCounters , ProcessVmCounters ,
  ProcessTimes , ProcessBasePriority , ProcessRaisePriority , ProcessDebugPort ,
  ProcessExceptionPort , ProcessAccessToken , ProcessLdtInformation , ProcessLdtSize ,
  ProcessDefaultHardErrorMode , ProcessIoPortHandlers , ProcessPooledUsageAndLimits , ProcessWorkingSetWatch ,
  ProcessUserModeIOPL , ProcessEnableAlignmentFaultFixup , ProcessPriorityClass , ProcessWx86Information ,
  ProcessHandleCount , ProcessAffinityMask , ProcessPriorityBoost , ProcessDeviceMap ,
  ProcessSessionInformation , ProcessForegroundInformation , ProcessWow64Information , ProcessImageFileName ,
  ProcessLUIDDeviceMapsEnabled , ProcessBreakOnTermination , ProcessDebugObjectHandle , ProcessDebugFlags ,
  ProcessHandleTracing , ProcessIoPriority , ProcessExecuteFlags , ProcessTlsInformation ,
  ProcessCookie , ProcessImageInformation , ProcessCycleTime , ProcessPagePriority ,
  ProcessInstrumentationCallback , ProcessThreadStackAllocation , ProcessWorkingSetWatchEx , ProcessImageFileNameWin32 ,
  ProcessImageFileMapping , ProcessAffinityUpdateMode , ProcessMemoryAllocationMode , ProcessGroupInformation ,
  ProcessTokenVirtualizationEnabled , ProcessConsoleHostProcess , ProcessWindowInformation , MaxProcessInfoClass ,
  ProcessBasicInformation = 0 , ProcessDebugPort = 7 , ProcessWow64Information = 26 , ProcessImageFileName = 27 ,
  ProcessBreakOnTermination = 29
}
 
enum  _SECTION_INHERIT {
  ViewShare = 1 , ViewUnmap = 2 , ViewShare = 1 , ViewUnmap = 2 ,
  ViewShare = 1 , ViewUnmap = 2
}
 
enum  _SYSTEM_INFORMATION_CLASS {
  SystemBasicInformation , SystemProcessorInformation , SystemPerformanceInformation , SystemTimeOfDayInformation ,
  SystemPathInformation , SystemProcessInformation , SystemCallCountInformation , SystemDeviceInformation ,
  SystemProcessorPerformanceInformation , SystemFlagsInformation , SystemCallTimeInformation , SystemModuleInformation ,
  SystemLocksInformation , SystemStackTraceInformation , SystemPagedPoolInformation , SystemNonPagedPoolInformation ,
  SystemHandleInformation , SystemObjectInformation , SystemPageFileInformation , SystemVdmInstemulInformation ,
  SystemVdmBopInformation , SystemFileCacheInformation , SystemPoolTagInformation , SystemInterruptInformation ,
  SystemDpcBehaviorInformation , SystemFullMemoryInformation , SystemLoadGdiDriverInformation , SystemUnloadGdiDriverInformation ,
  SystemTimeAdjustmentInformation , SystemSummaryMemoryInformation , SystemNextEventIdInformation , SystemEventIdsInformation ,
  SystemCrashDumpInformation , SystemExceptionInformation , SystemCrashDumpStateInformation , SystemKernelDebuggerInformation ,
  SystemContextSwitchInformation , SystemRegistryQuotaInformation , SystemExtendServiceTableInformation , SystemPrioritySeperation ,
  SystemPlugPlayBusInformation , SystemDockInformation , SystemPowerInformation , SystemProcessorSpeedInformation ,
  SystemCurrentTimeZoneInformation , SystemLookasideInformation , SystemBasicInformation , SystemProcessorInformation ,
  SystemPerformanceInformation , SystemTimeOfDayInformation , SystemPathInformation , SystemProcessInformation ,
  SystemCallCountInformation , SystemDeviceInformation , SystemProcessorPerformanceInformation , SystemFlagsInformation ,
  SystemCallTimeInformation , SystemModuleInformation , SystemLocksInformation , SystemStackTraceInformation ,
  SystemPagedPoolInformation , SystemNonPagedPoolInformation , SystemHandleInformation , SystemObjectInformation ,
  SystemPageFileInformation , SystemVdmInstemulInformation , SystemVdmBopInformation , SystemFileCacheInformation ,
  SystemPoolTagInformation , SystemInterruptInformation , SystemDpcBehaviorInformation , SystemFullMemoryInformation ,
  SystemLoadGdiDriverInformation , SystemUnloadGdiDriverInformation , SystemTimeAdjustmentInformation , SystemSummaryMemoryInformation ,
  SystemNextEventIdInformation , SystemEventIdsInformation , SystemCrashDumpInformation , SystemExceptionInformation ,
  SystemCrashDumpStateInformation , SystemKernelDebuggerInformation , SystemContextSwitchInformation , SystemRegistryQuotaInformation ,
  SystemExtendServiceTableInformation , SystemPrioritySeperation , SystemPlugPlayBusInformation , SystemDockInformation ,
  SystemPowerInformation , SystemProcessorSpeedInformation , SystemCurrentTimeZoneInformation , SystemLookasideInformation ,
  SystemBasicInformation , SystemProcessorInformation , SystemPerformanceInformation , SystemTimeOfDayInformation ,
  SystemPathInformation , SystemProcessInformation , SystemCallCountInformation , SystemDeviceInformation ,
  SystemProcessorPerformanceInformation , SystemFlagsInformation , SystemCallTimeInformation , SystemModuleInformation ,
  SystemLocksInformation , SystemStackTraceInformation , SystemPagedPoolInformation , SystemNonPagedPoolInformation ,
  SystemHandleInformation , SystemObjectInformation , SystemPageFileInformation , SystemVdmInstemulInformation ,
  SystemVdmBopInformation , SystemFileCacheInformation , SystemPoolTagInformation , SystemInterruptInformation ,
  SystemDpcBehaviorInformation , SystemFullMemoryInformation , SystemLoadGdiDriverInformation , SystemUnloadGdiDriverInformation ,
  SystemTimeAdjustmentInformation , SystemSummaryMemoryInformation , SystemMirrorMemoryInformation , SystemPerformanceTraceInformation ,
  SystemObsolete0 , SystemExceptionInformation , SystemCrashDumpStateInformation , SystemKernelDebuggerInformation ,
  SystemContextSwitchInformation , SystemRegistryQuotaInformation , SystemExtendServiceTableInformation , SystemPrioritySeperation ,
  SystemPlugPlayBusInformation , SystemDockInformation , SystemPowerInformationNative , SystemProcessorSpeedInformation ,
  SystemCurrentTimeZoneInformation , SystemLookasideInformation , SystemTimeSlipNotification , SystemSessionCreate ,
  SystemSessionDetach , SystemSessionInformation , SystemRangeStartInformation , SystemVerifierInformation ,
  SystemAddVerifier , SystemSessionProcessesInformation , SystemLoadGdiDriverInSystemSpaceInformation , SystemNumaProcessorMap ,
  SystemPrefetcherInformation , SystemExtendedProcessInformation , SystemRecommendedSharedDataAlignment , SystemComPlusPackage ,
  SystemNumaAvailableMemory , SystemProcessorPowerInformation , SystemEmulationBasicInformation , SystemEmulationProcessorInformation ,
  SystemExtendedHandleInformation , SystemLostDelayedWriteInformation , SystemBigPoolInformation , SystemSessionPoolTagInformation ,
  SystemSessionMappedViewInformation , SystemHotpatchInformation , SystemObjectSecurityMode , SystemWatchDogTimerHandler ,
  SystemWatchDogTimerInformation , SystemLogicalProcessorInformation , SystemWow64SharedInformationObsolete , SystemRegisterFirmwareTableInformationHandler ,
  SystemFirmwareTableInformation , SystemModuleInformationEx , SystemVerifierTriageInformation , SystemSuperfetchInformation ,
  SystemMemoryListInformation , SystemFileCacheInformationEx , SystemThreadPriorityClientIdInformation , SystemProcessorIdleCycleTimeInformation ,
  SystemVerifierCancellationInformation , SystemProcessorPowerInformationEx , SystemRefTraceInformation , SystemSpecialPoolInformation ,
  SystemProcessIdInformation , SystemErrorPortInformation , SystemBootEnvironmentInformation , SystemHypervisorInformation ,
  SystemVerifierInformationEx , SystemTimeZoneInformation , SystemImageFileExecutionOptionsInformation , SystemCoverageInformation ,
  SystemPrefetchPathInformation , SystemVerifierFaultsInformation , MaxSystemInfoClass , SystemBasicInformation = 0 ,
  SystemPerformanceInformation = 2 , SystemTimeOfDayInformation = 3 , SystemProcessInformation = 5 , SystemProcessorPerformanceInformation = 8 ,
  SystemInterruptInformation = 23 , SystemExceptionInformation = 33 , SystemRegistryQuotaInformation = 37 , SystemLookasideInformation = 45 ,
  SystemPolicyInformation = 134 , SystemBasicInformation = 0 , SystemCpuInformation = 1 , SystemPerformanceInformation = 2 ,
  SystemTimeOfDayInformation = 3 , Unknown4 , SystemProcessInformation = 5 , Unknown6 ,
  Unknown7 , SystemProcessorPerformanceInformation = 8 , Unknown9 , Unknown10 ,
  SystemModuleInformation = 11 , Unknown12 , Unknown13 , Unknown14 ,
  Unknown15 , SystemHandleInformation = 16 , Unknown17 , SystemPageFileInformation = 18 ,
  Unknown19 , Unknown20 , SystemCacheInformation = 21 , Unknown22 ,
  SystemInterruptInformation = 23 , SystemDpcBehaviourInformation = 24 , SystemFullMemoryInformation = 25 , SystemNotImplemented6 = 25 ,
  SystemLoadImage = 26 , SystemUnloadImage = 27 , SystemTimeAdjustmentInformation = 28 , SystemTimeAdjustment = 28 ,
  SystemSummaryMemoryInformation = 29 , SystemNotImplemented7 = 29 , SystemNextEventIdInformation = 30 , SystemNotImplemented8 = 30 ,
  SystemEventIdsInformation = 31 , SystemCrashDumpInformation = 32 , SystemExceptionInformation = 33 , SystemCrashDumpStateInformation = 34 ,
  SystemKernelDebuggerInformation = 35 , SystemContextSwitchInformation = 36 , SystemRegistryQuotaInformation = 37 , SystemCurrentTimeZoneInformation = 44 ,
  SystemTimeZoneInformation = 44 , SystemLookasideInformation = 45 , SystemSetTimeSlipEvent = 46 , SystemCreateSession = 47 ,
  SystemDeleteSession = 48 , SystemInvalidInfoClass4 = 49 , SystemRangeStartInformation = 50 , SystemVerifierInformation = 51 ,
  SystemAddVerifier = 52 , SystemSessionProcessesInformation = 53 , SystemLoadGdiDriverInSystemSpace = 54 , SystemNumaProcessorMap = 55 ,
  SystemPrefetcherInformation = 56 , SystemExtendedProcessInformation = 57 , SystemRecommendedSharedDataAlignment = 58 , SystemComPlusPackage = 59 ,
  SystemNumaAvailableMemory = 60 , SystemProcessorPowerInformation = 61 , SystemEmulationBasicInformation = 62 , SystemEmulationProcessorInformation = 63 ,
  SystemExtendedHandleInformation = 64 , SystemLostDelayedWriteInformation = 65 , SystemBigPoolInformation = 66 , SystemSessionPoolTagInformation = 67 ,
  SystemSessionMappedViewInformation = 68 , SystemHotpatchInformation = 69 , SystemObjectSecurityMode = 70 , SystemWatchdogTimerHandler = 71 ,
  SystemWatchdogTimerInformation = 72 , SystemLogicalProcessorInformation = 73 , SystemWow64SharedInformation = 74 , SystemRegisterFirmwareTableInformationHandler = 75 ,
  SystemFirmwareTableInformation = 76 , SystemModuleInformationEx = 77 , SystemVerifierTriageInformation = 78 , SystemSuperfetchInformation = 79 ,
  SystemMemoryListInformation = 80 , SystemFileCacheInformationEx = 81 , SystemLogicalProcessorInformationEx = 107 , SystemInformationClassMax
}
 
enum  _THREADINFOCLASS {
  ThreadBasicInformation , ThreadTimes , ThreadPriority , ThreadBasePriority ,
  ThreadAffinityMask , ThreadImpersonationToken , ThreadDescriptorTableEntry , ThreadEnableAlignmentFaultFixup ,
  ThreadEventPair_Reusable , ThreadQuerySetWin32StartAddress , ThreadZeroTlsCell , ThreadPerformanceCount ,
  ThreadAmILastThread , ThreadIdealProcessor , ThreadPriorityBoost , ThreadSetTlsArrayAddress ,
  ThreadIsIoPending , ThreadHideFromDebugger , ThreadBreakOnTermination , ThreadSwitchLegacyState ,
  ThreadIsTerminated , ThreadLastSystemCall , ThreadIoPriority , ThreadCycleTime ,
  ThreadPagePriority , ThreadActualBasePriority , ThreadTebInformation , ThreadCSwitchMon ,
  ThreadCSwitchPmu , ThreadWow64Context , ThreadGroupInformation , ThreadUmsInformation ,
  ThreadCounterProfiling , ThreadIdealProcessorEx , MaxThreadInfoClass , ThreadIsIoPending = 16 ,
  ThreadBasicInformation , ThreadTimes , ThreadPriority , ThreadBasePriority ,
  ThreadAffinityMask , ThreadImpersonationToken , ThreadDescriptorTableEntry , ThreadEnableAlignmentFaultFixup ,
  ThreadEventPair_Reusable , ThreadQuerySetWin32StartAddress , ThreadZeroTlsCell , ThreadPerformanceCount ,
  ThreadAmILastThread , ThreadIdealProcessor , ThreadPriorityBoost , ThreadSetTlsArrayAddress ,
  ThreadIsIoPending , ThreadHideFromDebugger , ThreadBreakOnTermination , ThreadSwitchLegacyState ,
  ThreadIsTerminated , ThreadLastSystemCall , ThreadIoPriority , ThreadCycleTime ,
  ThreadPagePriority , ThreadActualBasePriority , ThreadTebInformation , ThreadCSwitchMon ,
  ThreadCSwitchPmu , ThreadWow64Context , ThreadGroupInformation , ThreadUmsInformation ,
  ThreadCounterProfiling , ThreadIdealProcessorEx , MaxThreadInfoClass , ThreadBasicInformation ,
  ThreadTimes , ThreadPriority , ThreadBasePriority , ThreadAffinityMask ,
  ThreadImpersonationToken , ThreadDescriptorTableEntry , ThreadEnableAlignmentFaultFixup , ThreadEventPair_Reusable ,
  ThreadQuerySetWin32StartAddress , ThreadZeroTlsCell , ThreadPerformanceCount , ThreadAmILastThread ,
  ThreadIdealProcessor , ThreadPriorityBoost , ThreadSetTlsArrayAddress , ThreadIsIoPending ,
  ThreadHideFromDebugger , ThreadBreakOnTermination , ThreadSwitchLegacyState , ThreadIsTerminated ,
  ThreadLastSystemCall , ThreadIoPriority , ThreadCycleTime , ThreadPagePriority ,
  ThreadActualBasePriority , ThreadTebInformation , ThreadCSwitchMon , ThreadCSwitchPmu ,
  ThreadWow64Context , ThreadGroupInformation , ThreadUmsInformation , ThreadCounterProfiling ,
  ThreadIdealProcessorEx , MaxThreadInfoClass
}
 
enum  _WINSTATIONINFOCLASS { WinStationInformation = 8 , WinStationInformation = 8 }
 
enum  _MEMORY_INFORMATION_CLASS {
  MemoryBasicInformation , MemoryWorkingSetList , MemorySectionName , MemoryBasicVlmInformation ,
  MemoryWorkingSetExList , MemoryBasicInformation , MemoryWorkingSetList , MemorySectionName ,
  MemoryBasicVlmInformation
}
 
enum  _MUTANT_INFORMATION_CLASS { MutantBasicInformation , MutantOwnerInformation , MutantBasicInformation }
 
enum  _TIMER_INFORMATION_CLASS { TimerBasicInformation , TimerBasicInformation = 0 }
 
enum  DOS_PATHNAME_TYPE {
  INVALID_PATH = 0 , UNC_PATH , ABSOLUTE_DRIVE_PATH , RELATIVE_DRIVE_PATH ,
  ABSOLUTE_PATH , RELATIVE_PATH , DEVICE_PATH , UNC_DOT_PATH
}
 
enum  _ATOM_INFORMATION_CLASS { AtomBasicInformation , AtomTableInformation , AtomBasicInformation = 0 , AtomTableInformation = 1 }
 
enum  _EVENT_INFORMATION_CLASS { EventBasicInformation , EventBasicInformation }
 
enum  _SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation , SemaphoreBasicInformation }
 
enum  _SECTION_INFORMATION_CLASS { SectionBasicInformation , SectionImageInformation , SectionBasicInformation , SectionImageInformation }
 
enum  _SHUTDOWN_ACTION {
  ShutdownNoReboot , ShutdownReboot , ShutdownPowerOff , ShutdownNoReboot ,
  ShutdownReboot , ShutdownPowerOff
}
 
enum  _KPROFILE_SOURCE {
  ProfileTime , ProfileAlignmentFixup , ProfileTotalIssues , ProfilePipelineDry ,
  ProfileLoadInstructions , ProfilePipelineFrozen , ProfileBranchInstructions , ProfileTotalNonissues ,
  ProfileDcacheMisses , ProfileIcacheMisses , ProfileCacheMisses , ProfileBranchMispredictions ,
  ProfileStoreInstructions , ProfileFpInstructions , ProfileIntegerInstructions , Profile2Issue ,
  Profile3Issue , Profile4Issue , ProfileSpecialInstructions , ProfileTotalCycles ,
  ProfileIcacheIssues , ProfileDcacheAccesses , ProfileMemoryBarrierCycles , ProfileLoadLinkedIssues ,
  ProfileMaximum , ProfileTime , ProfileAlignmentFixup , ProfileTotalIssues ,
  ProfilePipelineDry , ProfileLoadInstructions , ProfilePipelineFrozen , ProfileBranchInstructions ,
  ProfileTotalNonissues , ProfileDcacheMisses , ProfileIcacheMisses , ProfileCacheMisses ,
  ProfileBranchMispredictions , ProfileStoreInstructions , ProfileFpInstructions , ProfileIntegerInstructions ,
  Profile2Issue , Profile3Issue , Profile4Issue , ProfileSpecialInstructions ,
  ProfileTotalCycles , ProfileIcacheIssues , ProfileDcacheAccesses , ProfileMemoryBarrierCycles ,
  ProfileLoadLinkedIssues , ProfileMaximum
}
 
enum  _PORT_INFORMATION_CLASS { PortNoInformation , PortNoInformation }
 
enum  _IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation , IoCompletionBasicInformation }
 
enum  _HARDERROR_RESPONSE_OPTION {
  OptionAbortRetryIgnore , OptionOk , OptionOkCancel , OptionRetryCancel ,
  OptionYesNo , OptionYesNoCancel , OptionShutdownSystem , OptionOkNoWait ,
  OptionCancelTryContinue , OptionAbortRetryIgnore , OptionOk , OptionOkCancel ,
  OptionRetryCancel , OptionYesNo , OptionYesNoCancel , OptionShutdownSystem
}
 
enum  _HARDERROR_RESPONSE {
  ResponseReturnToCaller , ResponseNotHandled , ResponseAbort , ResponseCancel ,
  ResponseIgnore , ResponseNo , ResponseOk , ResponseRetry ,
  ResponseYes , ResponseTryAgain , ResponseContinue , ResponseReturnToCaller ,
  ResponseNotHandled , ResponseAbort , ResponseCancel , ResponseIgnore ,
  ResponseNo , ResponseOk , ResponseRetry , ResponseYes
}
 
enum  _SYSDBG_COMMAND {
  SysDbgQueryModuleInformation = 0 , SysDbgQueryTraceInformation = 1 , SysDbgSetTracepoint = 2 , SysDbgSetSpecialCall = 3 ,
  SysDbgClearSpecialCalls = 4 , SysDbgQuerySpecialCalls = 5 , SysDbgBreakPoint = 6 , SysDbgQueryVersion = 7 ,
  SysDbgReadVirtual = 8 , SysDbgWriteVirtual = 9 , SysDbgReadPhysical = 10 , SysDbgWritePhysical = 11 ,
  SysDbgReadControlSpace = 12 , SysDbgWriteControlSpace = 13 , SysDbgReadIoSpace = 14 , SysDbgWriteIoSpace = 15 ,
  SysDbgReadMsr = 16 , SysDbgWriteMsr = 17 , SysDbgReadBusData = 18 , SysDbgWriteBusData = 19 ,
  SysDbgCheckLowMemory = 20 , SysDbgEnableKernelDebugger = 21 , SysDbgDisableKernelDebugger = 22 , SysDbgGetAutoKdEnable = 23 ,
  SysDbgSetAutoKdEnable = 24 , SysDbgGetPrintBufferSize = 25 , SysDbgSetPrintBufferSize = 26 , SysDbgGetKdUmExceptionEnable = 27 ,
  SysDbgSetKdUmExceptionEnable = 28 , SysDbgGetTriageDump = 29 , SysDbgGetKdBlockEnable = 30 , SysDbgSetKdBlockEnable = 31 ,
  SysDbgRegisterForUmBreakInfo = 32 , SysDbgGetUmBreakPid = 33 , SysDbgClearUmBreakPid = 34 , SysDbgGetUmAttachPid = 35 ,
  SysDbgClearUmAttachPid = 36 , SysDbgQueryModuleInformation , SysDbgQueryTraceInformation , SysDbgSetTracepoint ,
  SysDbgSetSpecialCall , SysDbgClearSpecialCalls , SysDbgQuerySpecialCalls , SysDbgBreakPoint ,
  SysDbgQueryVersion , SysDbgReadVirtual , SysDbgWriteVirtual , SysDbgReadPhysical ,
  SysDbgWritePhysical , SysDbgReadControlSpace , SysDbgWriteControlSpace , SysDbgReadIoSpace ,
  SysDbgWriteIoSpace , SysDbgReadMsr , SysDbgWriteMsr , SysDbgReadBusData ,
  SysDbgWriteBusData
}
 

Functions

NTSYSAPI void WINAPI DbgBreakPoint (void)
 
NTSYSAPI void WINAPI DbgUserBreakPoint (void)
 
NTSYSAPI NTSTATUS WINAPIV DbgPrint (LPCSTR fmt,...)
 
NTSYSAPI NTSTATUS WINAPIV DbgPrintEx (ULONG iComponentId, ULONG Level, LPCSTR fmt,...)
 
NTSYSAPI NTSTATUS WINAPI LdrAccessResource (HMODULE, const IMAGE_RESOURCE_DATA_ENTRY *, void **, PULONG)
 
NTSYSAPI NTSTATUS WINAPI LdrAddRefDll (ULONG, HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DIRECTORY **)
 
NTSYSAPI NTSTATUS WINAPI LdrFindResource_U (HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DATA_ENTRY **)
 
NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll (HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress (const void *, PLDR_MODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle (LPCWSTR, ULONG, const UNICODE_STRING *, HMODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress (HMODULE, const ANSI_STRING *, ULONG, void **)
 
NTSYSAPI void WINAPI LdrInitializeThunk (void *, ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI LdrLoadDll (LPCWSTR, DWORD, const UNICODE_STRING *, HMODULE *)
 
NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock (ULONG, ULONG *, ULONG_PTR *)
 
IMAGE_BASE_RELOCATION *WINAPI LdrProcessRelocationBlock (void *, UINT, USHORT *, INT_PTR)
 
NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions (const UNICODE_STRING *, LPCWSTR, ULONG, void *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation (SYSTEM_MODULE_INFORMATION *, ULONG, ULONG *)
 
NTSYSAPI void WINAPI LdrShutdownProcess (void)
 
NTSYSAPI void WINAPI LdrShutdownThread (void)
 
NTSYSAPI NTSTATUS WINAPI LdrUnloadDll (HMODULE)
 
NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock (ULONG, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort (PHANDLE, ULONG, PLPC_MESSAGE, BOOLEAN, PLPC_SECTION_WRITE, PLPC_SECTION_READ)
 
NTSYSAPI NTSTATUS WINAPI NtAccessCheck (PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, PGENERIC_MAPPING, PPRIVILEGE_SET, PULONG, PULONG, NTSTATUS *)
 
NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm (PUNICODE_STRING, HANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, ACCESS_MASK, PGENERIC_MAPPING, BOOLEAN, PACCESS_MASK, PBOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtAddAtom (const WCHAR *, ULONG, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken (HANDLE, BOOLEAN, PTOKEN_GROUPS, ULONG, PTOKEN_GROUPS, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken (HANDLE, BOOLEAN, PTOKEN_PRIVILEGES, DWORD, PTOKEN_PRIVILEGES, PDWORD)
 
NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAlertThread (HANDLE ThreadHandle)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId (PLUID lpLuid)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateUuids (PULARGE_INTEGER, PULONG, PULONG, PUCHAR)
 
NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory (HANDLE, PVOID *, ULONG, SIZE_T *, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame (PVOID, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCallbackReturn (PVOID, ULONG, NTSTATUS)
 
NTSYSAPI NTSTATUS WINAPI NtCancelIoFile (HANDLE, PIO_STATUS_BLOCK)
 
NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx (HANDLE, PIO_STATUS_BLOCK, PIO_STATUS_BLOCK)
 
NTSYSAPI NTSTATUS WINAPI NtCancelTimer (HANDLE, BOOLEAN *)
 
NTSYSAPI NTSTATUS WINAPI NtClearEvent (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtClose (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm (PUNICODE_STRING, HANDLE, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtContinue (PCONTEXT, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtCreateEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, EVENT_TYPE, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateEventPair (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtCreateFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, PLARGE_INTEGER, ULONG, ULONG, ULONG, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateJobObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, HANDLE, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreateMutant (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile (PHANDLE, ULONG, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile (PUNICODE_STRING, PLARGE_INTEGER, PLARGE_INTEGER, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtCreatePort (PHANDLE, POBJECT_ATTRIBUTES, ULONG, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateProcess (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, BOOLEAN, HANDLE, HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateProfile (PHANDLE, HANDLE, PVOID, ULONG, ULONG, PVOID, ULONG, KPROFILE_SOURCE, KAFFINITY)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const LARGE_INTEGER *, ULONG, ULONG, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, LONG, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtCreateThread (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, PCLIENT_ID, PCONTEXT, PINITIAL_TEB, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtCreateTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, TIMER_TYPE)
 
NTSYSAPI NTSTATUS WINAPI NtCreateToken (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, TOKEN_TYPE, PLUID, PLARGE_INTEGER, PTOKEN_USER, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_OWNER, PTOKEN_PRIMARY_GROUP, PTOKEN_DEFAULT_DACL, PTOKEN_SOURCE)
 
NTSYSAPI NTSTATUS WINAPI NtDelayExecution (BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteAtom (RTL_ATOM)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteFile (POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteKey (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey (HANDLE, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtDeviceIoControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtDisplayString (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtDuplicateObject (HANDLE, HANDLE, HANDLE, PHANDLE, ACCESS_MASK, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtDuplicateToken (HANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, SECURITY_IMPERSONATION_LEVEL, TOKEN_TYPE, PHANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtEnumerateKey (HANDLE, ULONG, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey (HANDLE, ULONG, KEY_VALUE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtExtendSection (HANDLE, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtFilterToken (HANDLE, ULONG, TOKEN_GROUPS *, TOKEN_PRIVILEGES *, TOKEN_GROUPS *, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtFindAtom (const WCHAR *, ULONG, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile (HANDLE, IO_STATUS_BLOCK *)
 
NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache (HANDLE, LPCVOID, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtFlushKey (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory (HANDLE, LPCVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtFsControlFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtGetContextThread (HANDLE, CONTEXT *)
 
NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber (void)
 
NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent (ULONG, ULONG, PVOID, ULONG)
 
NTSYSAPI ULONG WINAPI NtGetTickCount (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch (HANDLE, ULONG, PVOID, SIZE_T, PVOID *, ULONG_PTR *, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort (HANDLE, PPORT_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtImpersonateThread (HANDLE, HANDLE, PSECURITY_QUALITY_OF_SERVICE)
 
NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry (BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction (POWER_ACTION, SYSTEM_POWER_STATE, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtListenPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtLoadDriver (const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtLoadKey (const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtLockFile (HANDLE, HANDLE, PIO_APC_ROUTINE, void *, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, ULONG *, BOOLEAN, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection (HANDLE, HANDLE, PVOID *, ULONG, SIZE_T, const LARGE_INTEGER *, SIZE_T *, SECTION_INHERIT, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys (HANDLE, ULONG, OBJECT_ATTRIBUTES *, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenEvent (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenEventPair (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenFile (PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenJobObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKey (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenMutant (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm (PUNICODE_STRING, PHANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, ACCESS_MASK, PPRIVILEGE_SET, BOOLEAN, BOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcess (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken (HANDLE, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx (HANDLE, DWORD, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSection (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject (PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThread (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken (HANDLE, DWORD, BOOLEAN, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx (HANDLE, DWORD, BOOLEAN, DWORD, HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI NtOpenTimer (HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
 
NTSYSAPI NTSTATUS WINAPI NtPowerInformation (POWER_INFORMATION_LEVEL, PVOID, ULONG, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck (HANDLE, PPRIVILEGE_SET, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm (PUNICODE_STRING, HANDLE, HANDLE, ULONG, PPRIVILEGE_SET, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm (PUNICODE_STRING, PUNICODE_STRING, HANDLE, PPRIVILEGE_SET, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtPulseEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueueApcThread (HANDLE, PNTAPCFUNC, ULONG_PTR, ULONG_PTR, ULONG_PTR)
 
NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile (const OBJECT_ATTRIBUTES *, FILE_BASIC_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale (BOOLEAN, LCID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage (LANGID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS, BOOLEAN, PUNICODE_STRING, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject (HANDLE, PDIRECTORY_BASIC_INFORMATION, ULONG, BOOLEAN, BOOLEAN, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, BOOLEAN, PVOID, ULONG, PULONG, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI NtQueryEvent (HANDLE, EVENT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile (const OBJECT_ATTRIBUTES *, FILE_NETWORK_OPEN_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom (RTL_ATOM, ATOM_INFORMATION_CLASS, PVOID, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, LONG, FILE_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject (HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort (HANDLE, PORT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationProcess (HANDLE, PROCESSINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationThread (HANDLE, THREADINFOCLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken (HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage (LANGID *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile (KPROFILE_SOURCE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion (HANDLE, IO_COMPLETION_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryKey (HANDLE, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryMultipleValueKey (HANDLE, PKEY_MULTIPLE_VALUE_INFORMATION, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryMutant (HANDLE, MUTANT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys (POBJECT_ATTRIBUTES, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter (PLARGE_INTEGER, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySection (HANDLE, SECTION_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore (HANDLE, SEMAPHORE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject (HANDLE, PUNICODE_STRING, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue (PUNICODE_STRING, PWCHAR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx (SYSTEM_INFORMATION_CLASS, void *, ULONG, void *, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQuerySystemTime (PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtQueryTimer (HANDLE, TIMER_INFORMATION_CLASS, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution (PULONG, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtQueryValueKey (HANDLE, const UNICODE_STRING *, KEY_VALUE_INFORMATION_CLASS, void *, DWORD, DWORD *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue (const UNICODE_STRING *, ULONG *, PVOID, ULONG, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory (HANDLE, LPCVOID, MEMORY_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtRaiseException (PEXCEPTION_RECORD, PCONTEXT, BOOL)
 
NTSYSAPI NTSTATUS WINAPI NtRaiseHardError (NTSTATUS, ULONG, PUNICODE_STRING, PVOID *, HARDERROR_RESPONSE_OPTION, PHARDERROR_RESPONSE)
 
NTSYSAPI NTSTATUS WINAPI NtReadFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadFileScatter (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory (HANDLE, const void *, void *, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent (HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseMutant (HANDLE, PLONG)
 
NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore (HANDLE, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion (HANDLE, PULONG_PTR, PULONG_PTR, PIO_STATUS_BLOCK, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtRenameKey (HANDLE, UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtReplaceKey (POBJECT_ATTRIBUTES, HANDLE, POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtReplyPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort (HANDLE, PULONG, PLPC_MESSAGE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx (HANDLE, PVOID *, PPORT_MESSAGE, PPORT_MESSAGE, PLARGE_INTEGER)
 
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtRequestPort (HANDLE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort (HANDLE, PLPC_MESSAGE, PLPC_MESSAGE)
 
NTSYSAPI NTSTATUS WINAPI NtResetEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch (HANDLE, PVOID, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtRestoreKey (HANDLE, HANDLE, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtResumeThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSaveKey (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort (PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PSID, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetContextThread (HANDLE, const CONTEXT *)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale (BOOLEAN, LCID)
 
NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage (LANGID)
 
NTSYSAPI NTSTATUS WINAPI NtSetEaFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetEvent (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject (HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationKey (HANDLE, const int, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationObject (HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess (HANDLE, PROCESS_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationThread (HANDLE, THREADINFOCLASS, LPCVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetInformationToken (HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile (ULONG, KPROFILE_SOURCE)
 
NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion (HANDLE, ULONG_PTR, ULONG_PTR, NTSTATUS, SIZE_T)
 
NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries (ULONG, ULONG, ULONG, ULONG, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject (HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue (PUNICODE_STRING, PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation (SYSTEM_INFORMATION_CLASS, PVOID, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState (POWER_ACTION, SYSTEM_POWER_STATE, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetSystemTime (const LARGE_INTEGER *, LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtSetTimer (HANDLE, const LARGE_INTEGER *, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN *)
 
NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution (ULONG, BOOLEAN, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetValueKey (HANDLE, const UNICODE_STRING *, ULONG, ULONG, const void *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile (HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
 
NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject (HANDLE, HANDLE, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtShutdownSystem (SHUTDOWN_ACTION)
 
NTSYSAPI NTSTATUS WINAPI NtStartProfile (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtStopProfile (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtSuspendThread (HANDLE, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl (SYSDBG_COMMAND, PVOID, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject (HANDLE, NTSTATUS)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateProcess (HANDLE, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtTerminateThread (HANDLE, LONG)
 
NTSYSAPI NTSTATUS WINAPI NtTestAlert (VOID)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadDriver (const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadKey (POBJECT_ATTRIBUTES)
 
NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx (POBJECT_ATTRIBUTES, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtUnlockFile (HANDLE, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory (HANDLE, PVOID *, SIZE_T *, ULONG)
 
NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection (HANDLE, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtVdmControl (ULONG, PVOID)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent (HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForSingleObject (HANDLE, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects (ULONG, const HANDLE *, BOOLEAN, BOOLEAN, const LARGE_INTEGER *)
 
NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI NtWriteFile (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, const void *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteFileGather (HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteRequestData (HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory (HANDLE, void *, const void *, SIZE_T, SIZE_T *)
 
NTSYSAPI NTSTATUS WINAPI NtYieldExecution (void)
 
NTSYSAPI void WINAPI RtlAcquirePebLock (void)
 
NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive (LPRTL_RWLOCK, BYTE)
 
NTSYSAPI BYTE WINAPI RtlAcquireResourceShared (LPRTL_RWLOCK, BYTE)
 
NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive (RTL_SRWLOCK *)
 
NTSYSAPI void WINAPI RtlAcquireSRWLockShared (RTL_SRWLOCK *)
 
NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext (DWORD, HANDLE, ULONG_PTR *)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAce (PACL, DWORD, DWORD, PACE_HEADER, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce (PACL, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx (PACL, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce (PACL, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx (PACL, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable (RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce (PACL, DWORD, DWORD, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx (PACL, DWORD, DWORD, DWORD, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce (PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID, BOOL, BOOL)
 
NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce (PACL, DWORD, DWORD, DWORD, DWORD, PSID)
 
NTSYSAPI void WINAPI RtlAddRefActivationContext (HANDLE)
 
NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler (ULONG, PVECTORED_EXCEPTION_HANDLER)
 
NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege (ULONG, BOOLEAN, BOOLEAN, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid (PSID_IDENTIFIER_AUTHORITY, BYTE, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, PSID *)
 
NTSYSAPI RTL_HANDLE *WINAPI RtlAllocateHandle (RTL_HANDLE_TABLE *, ULONG *)
 
NTSYSAPI PVOID WINAPI RtlAllocateHeap (HANDLE, ULONG, SIZE_T) __WINE_ALLOC_SIZE(3)
 
NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar (LPSTR *)
 
NTSYSAPI DWORD WINAPI RtlAnsiStringToUnicodeSize (const STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAnsiStringToUnicodeString (PUNICODE_STRING, PCANSI_STRING, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString (STRING *, LPCSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString (STRING *, const STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString (UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString (UNICODE_STRING *, LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted (ACCESS_MASK, ACCESS_MASK)
 
NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted (ACCESS_MASK, ACCESS_MASK)
 
NTSYSAPI BOOLEAN WINAPI RtlAreBitsSet (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI BOOLEAN WINAPI RtlAreBitsClear (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCharToInteger (PCSZ, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey (ULONG, PWSTR)
 
NTSYSAPI void WINAPI RtlClearAllBits (PRTL_BITMAP)
 
NTSYSAPI void WINAPI RtlClearBits (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext (HANDLE *, const void *)
 
NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer (ULONG, BOOLEAN)
 
NTSYSAPI ULONG WINAPI RtlCompactHeap (HANDLE, ULONG)
 
NTSYSAPI LONG WINAPI RtlCompareString (const STRING *, const STRING *, BOOLEAN)
 
NTSYSAPI LONG WINAPI RtlCompareUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings (const WCHAR *, SIZE_T, const WCHAR *, SIZE_T, BOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer (USHORT, PUCHAR, ULONG, PUCHAR, ULONG, ULONG, PULONG, PVOID)
 
NTSYSAPI DWORD WINAPI RtlComputeCrc32 (DWORD, const BYTE *, INT)
 
NTSYSAPI NTSTATUS WINAPI RtlConvertSidToUnicodeString (PUNICODE_STRING, PSID, BOOLEAN)
 
NTSYSAPI void WINAPI RtlCopyLuid (PLUID, const LUID *)
 
NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray (ULONG, const LUID_AND_ATTRIBUTES *, PLUID_AND_ATTRIBUTES)
 
NTSYSAPI BOOLEAN WINAPI RtlCopySid (DWORD, PSID, PSID)
 
NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR)
 
NTSYSAPI void WINAPI RtlCopyString (STRING *, const STRING *)
 
NTSYSAPI void WINAPI RtlCopyUnicodeString (UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateAcl (PACL, DWORD, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable (ULONG, RTL_ATOM_TABLE *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment (BOOLEAN, PWSTR *)
 
NTSYSAPI HANDLE WINAPI RtlCreateHeap (ULONG, PVOID, SIZE_T, SIZE_T, PVOID, PRTL_HEAP_DEFINITION)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters (RTL_USER_PROCESS_PARAMETERS **, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, PWSTR, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor (PSECURITY_DESCRIPTOR, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue (PHANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateTimer (PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG)
 
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString (PUNICODE_STRING, LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz (PUNICODE_STRING, LPCSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess (UNICODE_STRING *, ULONG, RTL_USER_PROCESS_PARAMETERS *, SECURITY_DESCRIPTOR *, SECURITY_DESCRIPTOR *, HANDLE, BOOLEAN, HANDLE, HANDLE, RTL_USER_PROCESS_INFORMATION *)
 
NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread (HANDLE, const SECURITY_DESCRIPTOR *, BOOLEAN, PVOID, SIZE_T, SIZE_T, PRTL_THREAD_START_ROUTINE, void *, HANDLE *, CLIENT_ID *)
 
NTSYSAPI void WINAPI RtlDeactivateActivationContext (DWORD, ULONG_PTR)
 
NTSYSAPI PVOID WINAPI RtlDecodePointer (PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer (USHORT, PUCHAR, ULONG, PUCHAR, ULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteAce (PACL, DWORD)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable (RTL_ATOM_TABLE, RTL_ATOM)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection (RTL_CRITICAL_SECTION *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue (ULONG, PCWSTR, PCWSTR)
 
NTSYSAPI void WINAPI RtlDeleteResource (LPRTL_RWLOCK)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject (PSECURITY_DESCRIPTOR *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer (HANDLE, HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx (HANDLE, HANDLE)
 
NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams (RTL_USER_PROCESS_PARAMETERS *)
 
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait (HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx (HANDLE, HANDLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable (RTL_ATOM_TABLE)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment (PWSTR)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable (RTL_HANDLE_TABLE *)
 
NTSYSAPI HANDLE WINAPI RtlDestroyHeap (HANDLE)
 
NTSYSAPI void WINAPI RtlDestroyProcessParameters (RTL_USER_PROCESS_PARAMETERS *)
 
NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer (PDEBUG_BUFFER)
 
NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U (PCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress (void)
 
NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U (LPCWSTR)
 
NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U (PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
 
NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus (PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
 
NTSYSAPI ULONG WINAPI RtlDosSearchPath_U (LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR *)
 
NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar (WCHAR)
 
NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString (UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI void WINAPI RtlDumpResource (LPRTL_RWLOCK)
 
NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString (int, const UNICODE_STRING *, UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable (RTL_ATOM_TABLE, BOOLEAN)
 
NTSYSAPI PVOID WINAPI RtlEncodePointer (PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection (RTL_CRITICAL_SECTION *)
 
NTSYSAPI void WINAPI RtlEraseUnicodeString (UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName (const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName (const UNICODE_STRING *, const UNICODE_STRING *)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualLuid (const LUID *, const LUID *)
 
NTSYSAPI BOOL WINAPI RtlEqualPrefixSid (PSID, PSID)
 
NTSYSAPI BOOL WINAPI RtlEqualSid (PSID, PSID)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualString (const STRING *, const STRING *, BOOLEAN)
 
NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString (const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
 
NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess (ULONG)
 
NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread (ULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U (PCWSTR, const UNICODE_STRING *, UNICODE_STRING *, ULONG *)
 
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString (ULONG, const GUID *, ULONG, const UNICODE_STRING *, PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid (ULONG, const GUID *, ULONG, const GUID *, PVOID)
 
NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString (int, const UNICODE_STRING *, const UNICODE_STRING *, USHORT *)
 
NTSYSAPI ULONG WINAPI RtlFindClearBits (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindClearBitsAndSet (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindClearRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN)
 
NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunClear (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit (ULONGLONG)
 
NTSYSAPI ULONG WINAPI RtlFindLongestRunSet (PCRTL_BITMAP, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindLongestRunClear (PCRTL_BITMAP, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlFindMessage (HMODULE, ULONG, ULONG, ULONG, const MESSAGE_RESOURCE_ENTRY **)
 
NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit (ULONGLONG)
 
NTSYSAPI ULONG WINAPI RtlFindNextForwardRunSet (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindNextForwardRunClear (PCRTL_BITMAP, ULONG, PULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetBits (PCRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetBitsAndClear (PRTL_BITMAP, ULONG, ULONG)
 
NTSYSAPI ULONG WINAPI RtlFindSetRuns (PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN)
 
NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce (PACL, PACE_HEADER *)
 
NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI RtlFormatMessage (LPWSTR, UCHAR, BOOLEAN, BOOLEAN, BOOLEAN, __ms_va_list *, LPWSTR, ULONG)
 
NTSYSAPI void WINAPI RtlFreeAnsiString (PANSI_STRING)
 
NTSYSAPI BOOLEAN WINAPI RtlFreeHandle (RTL_HANDLE_TABLE *, RTL_HANDLE *)
 
NTSYSAPI BOOLEAN WINAPI RtlFreeHeap (HANDLE, ULONG, PVOID)
 
NTSYSAPI void WINAPI RtlFreeOemString (POEM_STRING)
 
NTSYSAPI DWORD WINAPI RtlFreeSid (PSID)
 
NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack (void)
 
NTSYSAPI void WINAPI RtlFreeUnicodeString (PUNICODE_STRING)
 
NTSYSAPI NTSTATUS WINAPI RtlGetAce (PACL, DWORD, LPVOID *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext (HANDLE *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize (USHORT, PULONG, PULONG)
 
NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor (PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL, LPDWORD)
 
NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U (ULONG, LPWSTR)
 
NTSYSAPI PEB *WINAPI RtlGetCurrentPeb (void)
 
NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor (PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN)
 
NTSYSAPI TEB_ACTIVE_FRAME *WINAPI RtlGetFrame (void)
 
NTSYSAPI ULONG WINAPI RtlGetFullPathName_U (PCWSTR, ULONG, PWSTR, PWSTR *)
 
NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor (PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN)
 
NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus (void)
 
NTSYSAPI DWORD WINAPI RtlGetLastWin32Error (void)