21#ifndef __WINE_WINTERNL_H
22#define __WINE_WINTERNL_H
42#define FSCTL_PIPE_LISTEN CTL_CODE(FILE_DEVICE_NAMED_PIPE, 2, METHOD_BUFFERED, FILE_ANY_ACCESS)
44#define DUPLICATE_SAME_ATTRIBUTES 0x00000004
46#define THREAD_SET_LIMITED_INFORMATION 0x0400
60#define RTL_BALANCED_NODE_RESERVED_PARENT_MASK 3
98#ifndef WINE_NTSTATUS_DECLARED
99#define WINE_NTSTATUS_DECLARED
111#ifndef __STRING_DEFINED__
112#define __STRING_DEFINED__
128#ifndef __UNICODE_STRING_DEFINED__
129#define __UNICODE_STRING_DEFINED__
299#define PROCESS_PARAMS_FLAG_NORMALIZED 1
430#define CROSS_PROCESS_LIST_FLUSH 0x80000000
431#define CROSS_PROCESS_LIST_ENTRY(list,pos) \
432 ((CROSS_PROCESS_WORK_ENTRY *)((char *)(list) + ((pos) & ~CROSS_PROCESS_LIST_FLUSH)))
458#define TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED 0x00000001
459#define TEB_ACTIVE_FRAME_FLAG_EXTENDED 0x00000001
625 BOOLEAN UnalignedLoadStoreExceptions;
678 PVOID DeallocationBStore;
1362#define WOW64_TLS_CPURESERVED 1
1363#define WOW64_TLS_TEMPLIST 3
1364#define WOW64_TLS_USERCALLBACKDATA 5
1365#define WOW64_TLS_APCLIST 7
1366#define WOW64_TLS_FILESYSREDIR 8
1367#define WOW64_TLS_WOW64INFO 10
1368#define WOW64_TLS_MAX_NUMBER 19
1606#define FILE_RENAME_REPLACE_IF_EXISTS 0x00000001
1607#define FILE_RENAME_POSIX_SEMANTICS 0x00000002
1608#define FILE_RENAME_SUPPRESS_PIN_STATE_INHERITANCE 0x00000004
1609#define FILE_RENAME_SUPPRESS_STORAGE_RESERVE_INHERITANCE 0x00000008
1610#define FILE_RENAME_NO_INCREASE_AVAILABLE_SPACE 0x00000010
1611#define FILE_RENAME_NO_DECREASE_AVAILABLE_SPACE 0x00000020
1612#define FILE_RENAME_PRESERVE_AVAILABLE_SPACE 0x00000030
1613#define FILE_RENAME_IGNORE_READONLY_ATTRIBUTE 0x00000040
1625#define FILE_LINK_REPLACE_IF_EXISTS 0x00000001
1626#define FILE_LINK_POSIX_SEMANTICS 0x00000002
1627#define FILE_LINK_SUPPRESS_STORAGE_RESERVE_INHERITANCE 0x00000008
1628#define FILE_LINK_NO_INCREASE_AVAILABLE_SPACE 0x00000010
1629#define FILE_LINK_NO_DECREASE_AVAILABLE_SPACE 0x00000020
1630#define FILE_LINK_PRESERVE_AVAILABLE_SPACE 0x00000030
1631#define FILE_LINK_IGNORE_READONLY_ATTRIBUTE 0x00000040
1632#define FILE_LINK_FORCE_RESIZE_TARGET_SR 0x00000080
1633#define FILE_LINK_FORCE_RESIZE_SOURCE_SR 0x00000100
1634#define FILE_LINK_FORCE_RESIZE_SR 0x00000180
1651#define FILE_DISPOSITION_DO_NOT_DELETE 0x00000000
1652#define FILE_DISPOSITION_DELETE 0x00000001
1653#define FILE_DISPOSITION_POSIX_SEMANTICS 0x00000002
1654#define FILE_DISPOSITION_FORCE_IMAGE_SECTION_CHECK 0x00000004
1655#define FILE_DISPOSITION_ON_CLOSE 0x00000008
1656#define FILE_DISPOSITION_IGNORE_READONLY_ATTRIBUTE 0x00000010
1741#define FILE_PIPE_DISCONNECTED_STATE 0x00000001
1742#define FILE_PIPE_LISTENING_STATE 0x00000002
1743#define FILE_PIPE_CONNECTED_STATE 0x00000003
1744#define FILE_PIPE_CLOSING_STATE 0x00000004
1819#define FILE_SKIP_COMPLETION_PORT_ON_SUCCESS 0x1
1820#define FILE_SKIP_SET_EVENT_ON_HANDLE 0x2
1821#define FILE_SKIP_SET_USER_EVENT_ON_FAST_IO 0x4
1996 ProcessWineMakeProcessSystem = 1000,
1998 ProcessWineGrantAdminToken,
2002#define MEM_EXECUTE_OPTION_DISABLE 0x01
2003#define MEM_EXECUTE_OPTION_ENABLE 0x02
2004#define MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION 0x04
2005#define MEM_EXECUTE_OPTION_PERMANENT 0x08
2255 SystemWineVersionInformation = 1000,
2265#define CODEINTEGRITY_OPTION_ENABLED 0x0001
2266#define CODEINTEGRITY_OPTION_TESTSIGN 0x0002
2267#define CODEINTEGRITY_OPTION_UMCI_ENABLED 0x0004
2268#define CODEINTEGRITY_OPTION_UMCI_AUDITMODE_ENABLED 0x0008
2269#define CODEINTEGRITY_OPTION_UMCI_EXCLUSIONPATHS_ENABLED 0x0010
2270#define CODEINTEGRITY_OPTION_TEST_BUILD 0x0020
2271#define CODEINTEGRITY_OPTION_PREPRODUCTION_BUILD 0x0040
2272#define CODEINTEGRITY_OPTION_DEBUGMODE_ENABLED 0x0080
2273#define CODEINTEGRITY_OPTION_FLIGHT_BUILD 0x0100
2274#define CODEINTEGRITY_OPTION_FLIGHTING_ENABLED 0x0200
2275#define CODEINTEGRITY_OPTION_HVCI_KMCI_ENABLED 0x0400
2276#define CODEINTEGRITY_OPTION_HVCI_KMCI_AUDITMODE_ENABLED 0x0800
2277#define CODEINTEGRITY_OPTION_HVCI_KMCI_STRICTMODE_ENABLED 0x1000
2278#define CODEINTEGRITY_OPTION_HVCI_IUM_ENABLED 0x2000
2339 ThreadWineNativeThreadName = 1000,
2400 MemoryWineUnixFuncs = 1000,
2401 MemoryWineUnixWow64Funcs,
2661#ifndef __OBJECT_ATTRIBUTES_DEFINED__
2662#define __OBJECT_ATTRIBUTES_DEFINED__
2753#define PROCESS_PRIOCLASS_IDLE 1
2754#define PROCESS_PRIOCLASS_NORMAL 2
2755#define PROCESS_PRIOCLASS_HIGH 3
2756#define PROCESS_PRIOCLASS_REALTIME 4
2757#define PROCESS_PRIOCLASS_BELOW_NORMAL 5
2758#define PROCESS_PRIOCLASS_ABOVE_NORMAL 6
2830 PVOID LowestUserAddress;
2831 PVOID HighestUserAddress;
2852#define CPU_FEATURE_VME 0x00000005
2853#define CPU_FEATURE_TSC 0x00000002
2854#define CPU_FEATURE_CMOV 0x00000008
2855#define CPU_FEATURE_PGE 0x00000014
2856#define CPU_FEATURE_PSE 0x00000024
2857#define CPU_FEATURE_MTRR 0x00000040
2858#define CPU_FEATURE_CX8 0x00000080
2859#define CPU_FEATURE_MMX 0x00000100
2860#define CPU_FEATURE_X86 0x00000200
2861#define CPU_FEATURE_PAT 0x00000400
2862#define CPU_FEATURE_FXSR 0x00000800
2863#define CPU_FEATURE_SEP 0x00001000
2864#define CPU_FEATURE_SSE 0x00002000
2865#define CPU_FEATURE_3DNOW 0x00004000
2866#define CPU_FEATURE_SSE2 0x00010000
2867#define CPU_FEATURE_DS 0x00020000
2868#define CPU_FEATURE_HTT 0x00040000
2869#define CPU_FEATURE_SSE3 0x00080000
2870#define CPU_FEATURE_CX128 0x00100000
2871#define CPU_FEATURE_XSAVE 0x00800000
2872#define CPU_FEATURE_2NDLEV 0x04000000
2873#define CPU_FEATURE_VIRT 0x08000000
2874#define CPU_FEATURE_RDFS 0x10000000
2875#define CPU_FEATURE_NX 0x20000000
2878#define CPU_FEATURE_SSSE3 0x00008000
2879#define CPU_FEATURE_SSE41 0x01000000
2880#define CPU_FEATURE_SSE42 0x02000000
2881#define CPU_FEATURE_AVX 0x40000000
2882#define CPU_FEATURE_AVX2 0x80000000
2883#define CPU_FEATURE_PAE 0x00200000
2884#define CPU_FEATURE_DAZ 0x00400000
2886#define CPU_FEATURE_ARM_VFP_32 0x00000001
2887#define CPU_FEATURE_ARM_NEON 0x00000002
2888#define CPU_FEATURE_ARM_V8_CRC32 0x00000004
2889#define CPU_FEATURE_ARM_V8_CRYPTO 0x00000008
2890#define CPU_FEATURE_ARM_V81_ATOMIC 0x00000010
2891#define CPU_FEATURE_ARM_V82_DP 0x00000020
2892#define CPU_FEATURE_ARM_V83_JSCVT 0x00000040
2893#define CPU_FEATURE_ARM_V83_LRCPC 0x00000080
2894#define CPU_FEATURE_ARM_SVE 0x00000100
2895#define CPU_FEATURE_ARM_SVE2 0x00000200
2896#define CPU_FEATURE_ARM_SVE2_1 0x00000400
2897#define CPU_FEATURE_ARM_SVE_AES 0x00000800
2898#define CPU_FEATURE_ARM_SVE_PMULL128 0x00001000
2899#define CPU_FEATURE_ARM_SVE_BITPERM 0x00002000
2900#define CPU_FEATURE_ARM_SVE_BF16 0x00004000
2901#define CPU_FEATURE_ARM_SVE_EBF16 0x00008000
2902#define CPU_FEATURE_ARM_SVE_B16B16 0x00010000
2903#define CPU_FEATURE_ARM_SVE_SHA3 0x00020000
2904#define CPU_FEATURE_ARM_SVE_SM4 0x00040000
2905#define CPU_FEATURE_ARM_SVE_I8MM 0x00080000
2906#define CPU_FEATURE_ARM_SVE_F32MM 0x00100000
2907#define CPU_FEATURE_ARM_SVE_F64MM 0x00200000
3163 DWORD dwThreadCount;
3172 DWORD dwBasePriority;
3286#define PDI_MODULES 0x01
3287#define PDI_BACKTRACE 0x02
3288#define PDI_HEAPS 0x04
3289#define PDI_HEAP_TAGS 0x08
3290#define PDI_HEAP_BLOCKS 0x10
3291#define PDI_LOCKS 0x20
3399#define FILE_DIRECTORY_FILE 0x00000001
3400#define FILE_WRITE_THROUGH 0x00000002
3401#define FILE_SEQUENTIAL_ONLY 0x00000004
3402#define FILE_NO_INTERMEDIATE_BUFFERING 0x00000008
3403#define FILE_SYNCHRONOUS_IO_ALERT 0x00000010
3404#define FILE_SYNCHRONOUS_IO_NONALERT 0x00000020
3405#define FILE_NON_DIRECTORY_FILE 0x00000040
3406#define FILE_CREATE_TREE_CONNECTION 0x00000080
3407#define FILE_COMPLETE_IF_OPLOCKED 0x00000100
3408#define FILE_NO_EA_KNOWLEDGE 0x00000200
3409#define FILE_OPEN_FOR_RECOVERY 0x00000400
3410#define FILE_RANDOM_ACCESS 0x00000800
3411#define FILE_DELETE_ON_CLOSE 0x00001000
3412#define FILE_OPEN_BY_FILE_ID 0x00002000
3413#define FILE_OPEN_FOR_BACKUP_INTENT 0x00004000
3414#define FILE_NO_COMPRESSION 0x00008000
3415#define FILE_RESERVE_OPFILTER 0x00100000
3416#define FILE_OPEN_REPARSE_POINT 0x00200000
3417#define FILE_OPEN_OFFLINE_FILE 0x00400000
3418#define FILE_OPEN_FOR_FREE_SPACE_QUERY 0x00800000
3420#define FILE_ATTRIBUTE_VALID_FLAGS 0x00007fb7
3421#define FILE_ATTRIBUTE_VALID_SET_FLAGS 0x000031a7
3424#define FILE_SUPERSEDED 0
3425#define FILE_OPENED 1
3426#define FILE_CREATED 2
3427#define FILE_OVERWRITTEN 3
3428#define FILE_EXISTS 4
3429#define FILE_DOES_NOT_EXIST 5
3432#define FILE_SUPERSEDE 0
3434#define FILE_CREATE 2
3435#define FILE_OPEN_IF 3
3436#define FILE_OVERWRITE 4
3437#define FILE_OVERWRITE_IF 5
3438#define FILE_MAXIMUM_DISPOSITION 5
3441#define FILE_REMOVABLE_MEDIA 0x00000001
3442#define FILE_READ_ONLY_DEVICE 0x00000002
3443#define FILE_FLOPPY_DISKETTE 0x00000004
3444#define FILE_WRITE_ONE_MEDIA 0x00000008
3445#define FILE_REMOTE_DEVICE 0x00000010
3446#define FILE_DEVICE_IS_MOUNTED 0x00000020
3447#define FILE_VIRTUAL_VOLUME 0x00000040
3448#define FILE_AUTOGENERATED_DEVICE_NAME 0x00000080
3449#define FILE_DEVICE_SECURE_OPEN 0x00000100
3450#define FILE_CHARACTERISTIC_PNP_DEVICE 0x00000800
3451#define FILE_CHARACTERISTIC_TS_DEVICE 0x00001000
3452#define FILE_CHARACTERISTIC_WEBDAV_DEVICE 0x00002000
3453#define FILE_CHARACTERISTIC_CSV 0x00010000
3454#define FILE_DEVICE_ALLOW_APPCONTAINER_TRAVERSAL 0x00020000
3455#define FILE_PORTABLE_DEVICE 0x00040000
3458#define FILE_PIPE_INBOUND 0x00000000
3459#define FILE_PIPE_OUTBOUND 0x00000001
3460#define FILE_PIPE_FULL_DUPLEX 0x00000002
3463#define FILE_PIPE_TYPE_MESSAGE 0x00000001
3464#define FILE_PIPE_TYPE_BYTE 0x00000000
3466#define FILE_PIPE_MESSAGE_MODE 0x00000001
3467#define FILE_PIPE_BYTE_STREAM_MODE 0x00000000
3469#define FILE_PIPE_COMPLETE_OPERATION 0x00000001
3470#define FILE_PIPE_QUEUE_OPERATION 0x00000000
3472#define FILE_PIPE_SERVER_END 0x00000001
3473#define FILE_PIPE_CLIENT_END 0x00000000
3475#define INTERNAL_TS_ACTIVE_CONSOLE_ID ( *((volatile ULONG*)(0x7ffe02d8)) )
3477#define LOGONID_CURRENT ((ULONG)-1)
3479#define OBJ_PROTECT_CLOSE 0x00000001
3480#define OBJ_INHERIT 0x00000002
3481#define OBJ_PERMANENT 0x00000010
3482#define OBJ_EXCLUSIVE 0x00000020
3483#define OBJ_CASE_INSENSITIVE 0x00000040
3484#define OBJ_OPENIF 0x00000080
3485#define OBJ_OPENLINK 0x00000100
3486#define OBJ_KERNEL_HANDLE 0x00000200
3487#define OBJ_VALID_ATTRIBUTES 0x000003F2
3489#define SERVERNAME_CURRENT ((HANDLE)NULL)
3498#define DPFLTR_ERROR_LEVEL 0
3499#define DPFLTR_WARNING_LEVEL 1
3500#define DPFLTR_TRACE_LEVEL 2
3501#define DPFLTR_INFO_LEVEL 3
3502#define DPFLTR_MASK 0x8000000
3505#define SE_MIN_WELL_KNOWN_PRIVILEGE 2
3506#define SE_CREATE_TOKEN_PRIVILEGE 2
3507#define SE_ASSIGNPRIMARYTOKEN_PRIVILEGE 3
3508#define SE_LOCK_MEMORY_PRIVILEGE 4
3509#define SE_INCREASE_QUOTA_PRIVILEGE 5
3510#define SE_UNSOLICITED_INPUT_PRIVILEGE 6
3511#define SE_MACHINE_ACCOUNT_PRIVILEGE 6
3512#define SE_TCB_PRIVILEGE 7
3513#define SE_SECURITY_PRIVILEGE 8
3514#define SE_TAKE_OWNERSHIP_PRIVILEGE 9
3515#define SE_LOAD_DRIVER_PRIVILEGE 10
3516#define SE_SYSTEM_PROFILE_PRIVILEGE 11
3517#define SE_SYSTEMTIME_PRIVILEGE 12
3518#define SE_PROF_SINGLE_PROCESS_PRIVILEGE 13
3519#define SE_INC_BASE_PRIORITY_PRIVILEGE 14
3520#define SE_CREATE_PAGEFILE_PRIVILEGE 15
3521#define SE_CREATE_PERMANENT_PRIVILEGE 16
3522#define SE_BACKUP_PRIVILEGE 17
3523#define SE_RESTORE_PRIVILEGE 18
3524#define SE_SHUTDOWN_PRIVILEGE 19
3525#define SE_DEBUG_PRIVILEGE 20
3526#define SE_AUDIT_PRIVILEGE 21
3527#define SE_SYSTEM_ENVIRONMENT_PRIVILEGE 22
3528#define SE_CHANGE_NOTIFY_PRIVILEGE 23
3529#define SE_REMOTE_SHUTDOWN_PRIVILEGE 24
3530#define SE_UNDOCK_PRIVILEGE 25
3531#define SE_SYNC_AGENT_PRIVILEGE 26
3532#define SE_ENABLE_DELEGATION_PRIVILEGE 27
3533#define SE_MANAGE_VOLUME_PRIVILEGE 28
3534#define SE_IMPERSONATE_PRIVILEGE 29
3535#define SE_CREATE_GLOBAL_PRIVILEGE 30
3536#define SE_MAX_WELL_KNOWN_PRIVILEGE SE_CREATE_GLOBAL_PRIVILEGE
3539#define FLG_STOP_ON_EXCEPTION 0x00000001
3540#define FLG_SHOW_LDR_SNAPS 0x00000002
3541#define FLG_DEBUG_INITIAL_COMMAND 0x00000004
3542#define FLG_STOP_ON_HUNG_GUI 0x00000008
3543#define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
3544#define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
3545#define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
3546#define FLG_HEAP_VALIDATE_ALL 0x00000080
3547#define FLG_APPLICATION_VERIFIER 0x00000100
3548#define FLG_POOL_ENABLE_TAGGING 0x00000400
3549#define FLG_HEAP_ENABLE_TAGGING 0x00000800
3550#define FLG_USER_STACK_TRACE_DB 0x00001000
3551#define FLG_KERNEL_STACK_TRACE_DB 0x00002000
3552#define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
3553#define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
3554#define FLG_DISABLE_STACK_EXTENSION 0x00010000
3555#define FLG_ENABLE_CSRDEBUG 0x00020000
3556#define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
3557#define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
3558#define FLG_ENABLE_SYSTEM_CRIT_BREAKS 0x00100000
3559#define FLG_HEAP_DISABLE_COALESCING 0x00200000
3560#define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
3561#define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
3562#define FLG_ENABLE_HANDLE_TYPE_TAGGING 0x01000000
3563#define FLG_HEAP_PAGE_ALLOCS 0x02000000
3564#define FLG_DEBUG_INITIAL_COMMAND_EX 0x04000000
3565#define FLG_DISABLE_DBGPRINT 0x08000000
3566#define FLG_CRITSEC_EVENT_CREATION 0x10000000
3567#define FLG_LDR_TOP_DOWN 0x20000000
3568#define FLG_ENABLE_HANDLE_EXCEPTIONS 0x40000000
3569#define FLG_DISABLE_PROTDLLS 0x80000000
3572#define RTL_REGISTRY_ABSOLUTE 0
3573#define RTL_REGISTRY_SERVICES 1
3574#define RTL_REGISTRY_CONTROL 2
3575#define RTL_REGISTRY_WINDOWS_NT 3
3576#define RTL_REGISTRY_DEVICEMAP 4
3577#define RTL_REGISTRY_USER 5
3579#define RTL_REGISTRY_HANDLE 0x40000000
3580#define RTL_REGISTRY_OPTIONAL 0x80000000
3582#define RTL_QUERY_REGISTRY_SUBKEY 0x00000001
3583#define RTL_QUERY_REGISTRY_TOPKEY 0x00000002
3584#define RTL_QUERY_REGISTRY_REQUIRED 0x00000004
3585#define RTL_QUERY_REGISTRY_NOVALUE 0x00000008
3586#define RTL_QUERY_REGISTRY_NOEXPAND 0x00000010
3587#define RTL_QUERY_REGISTRY_DIRECT 0x00000020
3588#define RTL_QUERY_REGISTRY_DELETE 0x00000040
3589#define RTL_QUERY_REGISTRY_TYPECHECK 0x00000100
3591#define RTL_QUERY_REGISTRY_TYPECHECK_SHIFT 24
3784#define IO_COMPLETION_QUERY_STATE 0x0001
3785#define IO_COMPLETION_MODIFY_STATE 0x0002
3786#define IO_COMPLETION_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED|SYNCHRONIZE|0x3)
4012#define LDR_IMAGE_IS_DLL 0x00000004
4013#define LDR_LOAD_IN_PROGRESS 0x00001000
4014#define LDR_UNLOAD_IN_PROGRESS 0x00002000
4015#define LDR_NO_DLL_CALLS 0x00040000
4016#define LDR_PROCESS_ATTACHED 0x00080000
4017#define LDR_COR_IMAGE 0x00400000
4018#define LDR_COR_ILONLY 0x01000000
4021#define LDR_DONT_RESOLVE_REFS 0x40000000
4022#define LDR_WINE_INTERNAL 0x80000000
4025#define LDR_ADDREF_DLL_PIN 0x00000001
4028#define LDR_GET_DLL_HANDLE_EX_FLAG_UNCHANGED_REFCOUNT 0x00000001
4029#define LDR_GET_DLL_HANDLE_EX_FLAG_PIN 0x00000002
4031#define LDR_DLL_NOTIFICATION_REASON_LOADED 1
4032#define LDR_DLL_NOTIFICATION_REASON_UNLOADED 2
4035#define MAXIMUM_FILENAME_LENGTH 256
4057#define PROCESS_CREATE_FLAGS_BREAKAWAY 0x00000001
4058#define PROCESS_CREATE_FLAGS_NO_DEBUG_INHERIT 0x00000002
4059#define PROCESS_CREATE_FLAGS_INHERIT_HANDLES 0x00000004
4060#define PROCESS_CREATE_FLAGS_OVERRIDE_ADDRESS_SPACE 0x00000008
4061#define PROCESS_CREATE_FLAGS_LARGE_PAGES 0x00000010
4062#define PROCESS_CREATE_FLAGS_LARGE_PAGE_SYSTEM_DLL 0x00000020
4063#define PROCESS_CREATE_FLAGS_PROTECTED_PROCESS 0x00000040
4064#define PROCESS_CREATE_FLAGS_CREATE_SESSION 0x00000080
4065#define PROCESS_CREATE_FLAGS_INHERIT_FROM_PARENT 0x00000100
4066#define PROCESS_CREATE_FLAGS_SUSPENDED 0x00000200
4067#define PROCESS_CREATE_FLAGS_EXTENDED_UNKNOWN 0x00000400
4078#define THREAD_CREATE_FLAGS_CREATE_SUSPENDED 0x00000001
4079#define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH 0x00000002
4080#define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER 0x00000004
4081#define THREAD_CREATE_FLAGS_HAS_SECURITY_DESCRIPTOR 0x00000010
4082#define THREAD_CREATE_FLAGS_ACCESS_CHECK_IN_TARGET 0x00000020
4083#define THREAD_CREATE_FLAGS_INITIAL_THREAD 0x00000080
4089#define EXCEPTION_WINE_STUB 0x80000100
4090#define EXCEPTION_WINE_ASSERTION 0x80000101
4095#define EXCEPTION_WINE_NAME_THREAD 0x406D1388
4103#define EXCEPTION_WINE_CXX_EXCEPTION 0xe06d7363
4104#define EXCEPTION_WINE_CXX_FRAME_MAGIC 0x19930520
4112#define PS_ATTRIBUTE_THREAD 0x00010000
4113#define PS_ATTRIBUTE_INPUT 0x00020000
4114#define PS_ATTRIBUTE_ADDITIVE 0x00040000
4152#define PS_ATTRIBUTE_PARENT_PROCESS (PsAttributeParentProcess | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4153#define PS_ATTRIBUTE_DEBUG_PORT (PsAttributeDebugPort | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4154#define PS_ATTRIBUTE_TOKEN (PsAttributeToken | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4155#define PS_ATTRIBUTE_CLIENT_ID (PsAttributeClientId | PS_ATTRIBUTE_THREAD)
4156#define PS_ATTRIBUTE_TEB_ADDRESS (PsAttributeTebAddress | PS_ATTRIBUTE_THREAD)
4157#define PS_ATTRIBUTE_IMAGE_NAME (PsAttributeImageName | PS_ATTRIBUTE_INPUT)
4158#define PS_ATTRIBUTE_IMAGE_INFO (PsAttributeImageInfo)
4159#define PS_ATTRIBUTE_MEMORY_RESERVE (PsAttributeMemoryReserve | PS_ATTRIBUTE_INPUT)
4160#define PS_ATTRIBUTE_PRIORITY_CLASS (PsAttributePriorityClass | PS_ATTRIBUTE_INPUT)
4161#define PS_ATTRIBUTE_ERROR_MODE (PsAttributeErrorMode | PS_ATTRIBUTE_INPUT)
4162#define PS_ATTRIBUTE_STD_HANDLE_INFO (PsAttributeStdHandleInfo | PS_ATTRIBUTE_INPUT)
4163#define PS_ATTRIBUTE_HANDLE_LIST (PsAttributeHandleList | PS_ATTRIBUTE_INPUT)
4164#define PS_ATTRIBUTE_GROUP_AFFINITY (PsAttributeGroupAffinity | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
4165#define PS_ATTRIBUTE_PREFERRED_NODE (PsAttributePreferredNode | PS_ATTRIBUTE_INPUT)
4166#define PS_ATTRIBUTE_IDEAL_PROCESSOR (PsAttributeIdealProcessor | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
4167#define PS_ATTRIBUTE_MITIGATION_OPTIONS (PsAttributeMitigationOptions | PS_ATTRIBUTE_INPUT)
4168#define PS_ATTRIBUTE_PROTECTION_LEVEL (PsAttributeProtectionLevel | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4169#define PS_ATTRIBUTE_SECURE_PROCESS (PsAttributeSecureProcess | PS_ATTRIBUTE_INPUT)
4170#define PS_ATTRIBUTE_JOB_LIST (PsAttributeJobList | PS_ATTRIBUTE_INPUT)
4171#define PS_ATTRIBUTE_CHILD_PROCESS_POLICY (PsAttributeChildProcessPolicy | PS_ATTRIBUTE_INPUT)
4172#define PS_ATTRIBUTE_ALL_APPLICATION_PACKAGES_POLICY (PsAttributeAllApplicationPackagesPolicy | PS_ATTRIBUTE_INPUT)
4173#define PS_ATTRIBUTE_WIN32K_FILTER (PsAttributeWin32kFilter | PS_ATTRIBUTE_INPUT)
4174#define PS_ATTRIBUTE_SAFE_OPEN_PROMPT_ORIGIN_CLAIM (PsAttributeSafeOpenPromptOriginClaim | PS_ATTRIBUTE_INPUT)
4175#define PS_ATTRIBUTE_BNO_ISOLATION (PsAttributeBnoIsolation | PS_ATTRIBUTE_INPUT)
4176#define PS_ATTRIBUTE_DESKTOP_APP_POLICY (PsAttributeDesktopAppPolicy | PS_ATTRIBUTE_INPUT)
4177#define PS_ATTRIBUTE_CHPE (PsAttributeChpe | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4178#define PS_ATTRIBUTE_MITIGATION_AUDIT_OPTIONS (PsAttributeMitigationAuditOptions | PS_ATTRIBUTE_INPUT)
4179#define PS_ATTRIBUTE_MACHINE_TYPE (PsAttributeMachineType | PS_ATTRIBUTE_INPUT | PS_ATTRIBUTE_ADDITIVE)
4180#define PS_ATTRIBUTE_COMPONENT_FILTER (PsAttributeComponentFilter | PS_ATTRIBUTE_INPUT)
4181#define PS_ATTRIBUTE_ENABLE_OPTIONAL_XSTATE_FEATURES (PsAttributeEnableOptionalXStateFeatures | PS_ATTRIBUTE_THREAD | PS_ATTRIBUTE_INPUT)
4371#define DEBUG_READ_EVENT 0x0001
4372#define DEBUG_PROCESS_ASSIGN 0x0002
4373#define DEBUG_SET_INFORMATION 0x0004
4374#define DEBUG_QUERY_INFORMATION 0x0008
4375#define DEBUG_ALL_ACCESS (STANDARD_RIGHTS_REQUIRED | SYNCHRONIZE | 0x0f)
4377#define DEBUG_KILL_ON_CLOSE 0x1
4394#define WOW64_CPURESERVED_FLAG_RESET_STATE 1
4419#define WOW64_CPUFLAGS_MSFT64 0x01
4420#define WOW64_CPUFLAGS_SOFTWARE 0x02
4441 ULONG64 pKiUserExceptionDispatcher;
4443 ULONG64 pKiUserCallbackDispatcher;
4445 ULONG64 pRtlpQueryProcessDebugInformationRemote;
4447 ULONG64 pLdrSystemDllInitBlock;
4449} SYSTEM_DLL_INIT_BLOCK;
4514#define KCONTINUE_FLAG_TEST_ALERT 0x01
4515#define KCONTINUE_FLAG_DELIVER_APC 0x02
4518#define HASH_STRING_ALGORITHM_DEFAULT 0
4519#define HASH_STRING_ALGORITHM_X65599 1
4520#define HASH_STRING_ALGORITHM_INVALID 0xffffffff
4571NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(
PUNICODE_STRING,
HANDLE,
PUNICODE_STRING,
PUNICODE_STRING,
PSECURITY_DESCRIPTOR,
ACCESS_MASK,
PGENERIC_MAPPING,
BOOLEAN,
PACCESS_MASK,
PBOOLEAN,
PBOOLEAN);
4604NTSYSAPI NTSTATUS WINAPI NtCreateFile(
PHANDLE,
ACCESS_MASK,
POBJECT_ATTRIBUTES,
PIO_STATUS_BLOCK,
PLARGE_INTEGER,
ULONG,
ULONG,
ULONG,
ULONG,
PVOID,
ULONG);
4613NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(
PHANDLE,
ULONG,
POBJECT_ATTRIBUTES,
PIO_STATUS_BLOCK,
ULONG,
ULONG,
ULONG,
ULONG,
ULONG,
ULONG,
ULONG,
ULONG,
ULONG,
PLARGE_INTEGER);
4622NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(
HANDLE*,
ACCESS_MASK,
OBJECT_ATTRIBUTES*,
HANDLE,
PRTL_THREAD_START_ROUTINE,
void*,
ULONG,
ULONG_PTR,
SIZE_T,
SIZE_T,
PS_ATTRIBUTE_LIST*);
4624NTSYSAPI NTSTATUS WINAPI NtCreateToken(
PHANDLE,
ACCESS_MASK,
POBJECT_ATTRIBUTES,
TOKEN_TYPE,
PLUID,
PLARGE_INTEGER,
PTOKEN_USER,
PTOKEN_GROUPS,
PTOKEN_PRIVILEGES,
PTOKEN_OWNER,
PTOKEN_PRIMARY_GROUP,
PTOKEN_DEFAULT_DACL,
PTOKEN_SOURCE);
4626NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(
HANDLE*,
HANDLE*,
ACCESS_MASK,
ACCESS_MASK,
OBJECT_ATTRIBUTES*,
OBJECT_ATTRIBUTES*,
ULONG,
ULONG,
RTL_USER_PROCESS_PARAMETERS*,
PS_CREATE_INFO*,
PS_ATTRIBUTE_LIST*);
4679NTSYSAPI NTSTATUS WINAPI NtNotifyChangeMultipleKeys(
HANDLE,
ULONG,
OBJECT_ATTRIBUTES*,
HANDLE,
PIO_APC_ROUTINE,
PVOID,
PIO_STATUS_BLOCK,
ULONG,
BOOLEAN,
PVOID,
ULONG,
BOOLEAN);
4692NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(
PUNICODE_STRING,
PHANDLE,
PUNICODE_STRING,
PUNICODE_STRING,
PSECURITY_DESCRIPTOR,
HANDLE,
ACCESS_MASK,
ACCESS_MASK,
PPRIVILEGE_SET,
BOOLEAN,
BOOLEAN,
PBOOLEAN);
4714NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(
HANDLE,
HANDLE,
PIO_APC_ROUTINE,
PVOID,
PIO_STATUS_BLOCK,
PVOID,
ULONG,
FILE_INFORMATION_CLASS,
BOOLEAN,
PUNICODE_STRING,
BOOLEAN);
4877NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(
PSID_IDENTIFIER_AUTHORITY,
BYTE,
DWORD,
DWORD,
DWORD,
DWORD,
DWORD,
DWORD,
DWORD,
DWORD,
PSID *);
4916NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(
RTL_USER_PROCESS_PARAMETERS**,
const UNICODE_STRING*,
const UNICODE_STRING*,
const UNICODE_STRING*,
const UNICODE_STRING*,
PWSTR,
const UNICODE_STRING*,
const UNICODE_STRING*,
const UNICODE_STRING*,
const UNICODE_STRING*,
ULONG);
5171NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(
PSECURITY_DESCRIPTOR,
PSECURITY_DESCRIPTOR,
PDWORD,
PACL,
PDWORD,
PACL,
PDWORD,
PSID,
PDWORD,
PSID,
PDWORD);
5351#define InitializeObjectAttributes(p,n,a,r,s) \
5353 (p)->Length = sizeof(OBJECT_ATTRIBUTES); \
5354 (p)->RootDirectory = r; \
5355 (p)->Attributes = a; \
5356 (p)->ObjectName = n; \
5357 (p)->SecurityDescriptor = s; \
5358 (p)->SecurityQualityOfService = NULL; \
5361#define NtCurrentProcess() ((HANDLE)~(ULONG_PTR)0)
5362#define NtCurrentThread() ((HANDLE)~(ULONG_PTR)1)
5364#if !defined(__REACTOS__) || !defined(RtlFillMemory)
5365#define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
5367#if !defined(__REACTOS__) || !defined(RtlMoveMemory)
5368#define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
5370#define RtlStoreUlong(p,v) do { ULONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
5371#define RtlStoreUlonglong(p,v) do { ULONGLONG _v = (v); memcpy((p), &_v, sizeof(_v)); } while (0)
5372#define RtlRetrieveUlong(p,s) memcpy((p), (s), sizeof(ULONG))
5373#define RtlRetrieveUlonglong(p,s) memcpy((p), (s), sizeof(ULONGLONG))
5374#if !defined(__REACTOS__) || !defined(RtlZeroMemory)
5375#define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
5380 if (lpBits && ulBit < lpBits->SizeOfBitMap &&
5381 lpBits->
Buffer[ulBit >> 5] & (1 << (ulBit & 31)))
5391 return (
s >> 8) | (
s << 8);
5403#define InitializeListHead(le) (void)((le)->Flink = (le)->Blink = (le))
5404#define InsertHeadList(le,e) do { PLIST_ENTRY f = (le)->Flink; (e)->Flink = f; (e)->Blink = (le); f->Blink = (e); (le)->Flink = (e); } while (0)
5405#define InsertTailList(le,e) do { PLIST_ENTRY b = (le)->Blink; (e)->Flink = (le); (e)->Blink = b; b->Flink = (e); (le)->Blink = (e); } while (0)
5406#define IsListEmpty(le) ((le)->Flink == (le))
5407#define RemoveEntryList(e) do { PLIST_ENTRY f = (e)->Flink, b = (e)->Blink; f->Blink = b; b->Flink = f; (e)->Flink = (e)->Blink = NULL; } while (0)
5418 if (
e != le)
e->Flink =
e->Blink =
NULL;
5431 if (
e != le)
e->Flink =
e->Blink =
NULL;
5453} WIN16_SUBSYSTEM_TIB;
5460 UINT sopentypelanguagetag;
5474 USHORT idigitsubstitution;
5481 UINT smondecimalsep;
5482 UINT smonthousandsep;
5494 USHORT idefaultansicodepage;
5496 USHORT idefaultmaccodepage;
5497 USHORT idefaultebcdiccodepage;
5500 BYTE islamic_cal[2];
5502 UINT sabbrevlangname;
5503 UINT siso639langname;
5505 UINT snativelangname;
5507 UINT snativectryname;
5508 UINT sabbrevctryname;
5509 UINT siso3166ctryname;
5512 UINT snativecurrname;
5514 UINT siso639langname2;
5515 UINT siso3166ctryname2;
5518 UINT sabbrevdayname;
5520 UINT sabbrevmonthname;
5521 UINT sgenitivemonth;
5522 UINT sabbrevgenitivemonth;
5531 UINT sengdisplayname;
5532 UINT snativedisplayname;
5539 UINT sabbreverastring;
5541 UINT sconsolefallbackname;
5543 UINT sshortestdayname;
5546 UINT skeyboardstoinstall;
5548 UINT srelativelongdate;
5553 UINT keyboard_layout;
5561} NLS_LOCALE_LCID_INDEX;
5568} NLS_LOCALE_LCNAME_INDEX;
5581 UINT locales_offset;
5585 UINT lcnames_offset;
5589 UINT calendars_offset;
5590 UINT strings_offset;
_OBJECT_INFORMATION_CLASS
NTSTATUS NtQueryObject(IN HANDLE Handle, IN OBJECT_INFO_CLASS ObjectInformationClass, OUT PVOID ObjectInformation, IN ULONG ObjectInformationLength, OUT PULONG ReturnLength)
unsigned long long UINT64
NTSYSAPI ULONG NTAPI vDbgPrintEx(_In_ ULONG ComponentId, _In_ ULONG Level, _In_z_ PCCH Format, _In_ va_list ap)
enum _PROCESSINFOCLASS PROCESSINFOCLASS
#define RtlInitializeBitMap
#define RtlFindNextForwardRunClear
#define RtlFindLastBackwardRunClear
#define RtlFindClearBitsAndSet
#define RtlNumberOfSetBits
#define RtlFindNextForwardRunSet
#define RtlFindLongestRunClear
#define RtlFindSetBitsAndClear
#define RtlNumberOfClearBits
enum _DBG_STATE DBG_STATE
enum _DEBUGOBJECTINFOCLASS DEBUGOBJECTINFOCLASS
static WCHAR unknown[MAX_STRING_RESOURCE_LEN]
#define RtlUlongByteSwap(_x)
#define RtlImageRvaToSection
enum _THREADINFOCLASS THREADINFOCLASS
#define RtlImageDirectoryEntryToData
static const WCHAR version[]
int align(int length, int align)
#define RemoveTailList(ListHead)
#define RemoveHeadList(ListHead)
_SYSTEM_INFORMATION_CLASS
enum _SYSTEM_INFORMATION_CLASS SYSTEM_INFORMATION_CLASS
enum _FILE_INFORMATION_CLASS FILE_INFORMATION_CLASS
enum _FSINFOCLASS FS_INFORMATION_CLASS
GLuint GLuint GLsizei GLenum type
GLboolean GLboolean GLboolean b
GLsizei GLenum const GLvoid GLsizei GLenum GLbyte GLbyte GLbyte GLdouble GLdouble GLdouble GLfloat GLfloat GLfloat GLint GLint GLint GLshort GLshort GLshort GLubyte GLubyte GLubyte GLuint GLuint GLuint GLushort GLushort GLushort GLbyte GLbyte GLbyte GLbyte GLdouble GLdouble GLdouble GLdouble GLfloat GLfloat GLfloat GLfloat GLint GLint GLint GLint GLshort GLshort GLshort GLshort GLubyte GLubyte GLubyte GLubyte GLuint GLuint GLuint GLuint GLushort GLushort GLushort GLushort GLboolean const GLdouble const GLfloat const GLint const GLshort const GLbyte const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLdouble const GLfloat const GLfloat const GLint const GLint const GLshort const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort const GLdouble const GLfloat const GLint const GLshort GLenum GLenum GLenum GLfloat GLenum GLint GLenum GLenum GLenum GLfloat GLenum GLenum GLint GLenum GLfloat GLenum GLint GLint GLushort GLenum GLenum GLfloat GLenum GLenum GLint GLfloat const GLubyte GLenum GLenum GLenum const GLfloat GLenum GLenum const GLint GLenum GLint GLint GLsizei GLsizei GLint GLenum GLenum const GLvoid GLenum GLenum const GLfloat GLenum GLenum const GLint GLenum GLenum const GLdouble GLenum GLenum const GLfloat GLenum GLenum const GLint GLsizei GLuint GLfloat GLuint GLbitfield GLfloat GLint GLuint GLboolean GLenum GLfloat GLenum GLbitfield GLenum GLfloat GLfloat GLint GLint const GLfloat GLenum GLfloat GLfloat GLint GLint GLfloat GLfloat GLint GLint const GLfloat GLint GLfloat GLfloat GLint GLfloat GLfloat GLint GLfloat GLfloat const GLdouble const GLfloat const GLdouble const GLfloat GLint i
_In_ GUID _In_ PVOID ValueData
enum _JOBOBJECTINFOCLASS JOBOBJECTINFOCLASS
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQueryInformationThread(_In_ HANDLE ThreadHandle, _In_ THREADINFOCLASS ThreadInformationClass, _Out_ PVOID ThreadInformation, _In_ ULONG ThreadInformationLength, _Out_opt_ PULONG ReturnLength)
@ FileDirectoryInformation
struct _SYSTEM_TIMEOFDAY_INFORMATION SYSTEM_TIMEOFDAY_INFORMATION
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtRenameKey(_In_ HANDLE KeyHandle, _In_ PUNICODE_STRING NewName)
NTSTATUS NTAPI RtlUnicodeStringToOemString(POEM_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtDeviceIoControlFile(_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG IoControlCode, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
struct _SYSTEM_LOOKASIDE_INFORMATION SYSTEM_LOOKASIDE_INFORMATION
BOOLEAN(WINAPI * PWINSTATIONQUERYINFORMATIONW)(HANDLE, ULONG, WINSTATIONINFOCLASS, PVOID, ULONG, PULONG)
VOID NTAPI RtlFreeUnicodeString(PUNICODE_STRING UnicodeString)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtNotifyChangeMultipleKeys(_In_ HANDLE MasterKeyHandle, _In_opt_ ULONG Count, _In_reads_opt_(Count) OBJECT_ATTRIBUTES SubordinateObjects[], _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_writes_bytes_opt_(BufferSize) PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)
const STRING * PCOEM_STRING
struct _SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION
ULONG NTAPI RtlUniform(PULONG Seed)
VOID NTAPI RtlFreeOemString(POEM_STRING OemString)
struct _SYSTEM_BASIC_INFORMATION * PSYSTEM_BASIC_INFORMATION
struct _WINSTATIONINFORMATIONW * PWINSTATIONINFORMATIONW
struct _RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS
VOID NTAPI RtlInitAnsiString(PANSI_STRING DestinationString, PCSZ SourceString)
enum _OBJECT_INFORMATION_CLASS OBJECT_INFORMATION_CLASS
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtOpenFile(_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG ShareAccess, _In_ ULONG OpenOptions)
enum _THREADINFOCLASS THREADINFOCLASS
NTSTATUS NTAPI RtlConvertSidToUnicodeString(PUNICODE_STRING UnicodeString, PSID Sid, BOOLEAN AllocateDestinationString)
enum _FILE_INFORMATION_CLASS FILE_INFORMATION_CLASS
struct _SYSTEM_PERFORMANCE_INFORMATION * PSYSTEM_PERFORMANCE_INFORMATION
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtSetInformationKey(_In_ HANDLE KeyHandle, _In_ _Strict_type_match_ KEY_SET_INFORMATION_CLASS KeySetInformationClass, _In_reads_bytes_(KeySetInformationLength) PVOID KeySetInformation, _In_ ULONG KeySetInformationLength)
struct _SYSTEM_BASIC_INFORMATION SYSTEM_BASIC_INFORMATION
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtCreateFile(_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_opt_ PLARGE_INTEGER AllocationSize, _In_ ULONG FileAttributes, _In_ ULONG ShareAccess, _In_ ULONG CreateDisposition, _In_ ULONG CreateOptions, _In_reads_bytes_opt_(EaLength) PVOID EaBuffer, _In_ ULONG EaLength)
struct _KEY_VALUE_ENTRY KEY_VALUE_ENTRY
enum _PROCESSINFOCLASS PROCESSINFOCLASS
struct _LDR_DATA_TABLE_ENTRY * PLDR_DATA_TABLE_ENTRY
struct _IO_STATUS_BLOCK IO_STATUS_BLOCK
struct _LDR_DATA_TABLE_ENTRY LDR_DATA_TABLE_ENTRY
struct _SYSTEM_EXCEPTION_INFORMATION SYSTEM_EXCEPTION_INFORMATION
BOOLEAN NTAPI RtlTimeToSecondsSince1970(PLARGE_INTEGER Time, PULONG ElapsedSeconds)
struct _OBJECT_ATTRIBUTES * POBJECT_ATTRIBUTES
struct _PEB_LDR_DATA * PPEB_LDR_DATA
VOID(NTAPI * PIO_APC_ROUTINE)(_In_ PVOID ApcContext, _In_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG Reserved)
struct _KEY_VALUE_ENTRY * PKEY_VALUE_ENTRY
NTSTATUS NTAPI RtlAnsiStringToUnicodeString(PUNICODE_STRING DestinationString, PCANSI_STRING SourceString, BOOLEAN AllocateDestinationString)
struct _IO_STATUS_BLOCK * PIO_STATUS_BLOCK
struct _SYSTEM_INTERRUPT_INFORMATION * PSYSTEM_INTERRUPT_INFORMATION
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQueryInformationProcess(_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _Out_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength, _Out_opt_ PULONG ReturnLength)
struct _WINSTATIONINFORMATIONW WINSTATIONINFORMATIONW
@ ProcessBreakOnTermination
@ ProcessBasicInformation
@ ProcessWow64Information
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQuerySystemInformation(_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass, _Out_ PVOID SystemInformation, _In_ ULONG InformationLength, _Out_opt_ PULONG ResultLength)
struct _SYSTEM_TIMEOFDAY_INFORMATION * PSYSTEM_TIMEOFDAY_INFORMATION
struct _PROCESS_BASIC_INFORMATION * PPROCESS_BASIC_INFORMATION
struct _UNICODE_STRING * PUNICODE_STRING
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtClose(_In_ HANDLE Handle)
struct _RTL_USER_PROCESS_PARAMETERS * PRTL_USER_PROCESS_PARAMETERS
NTSTATUS NTAPI RtlCharToInteger(PCSZ String, ULONG Base, PULONG Value)
BOOLEAN NTAPI RtlIsNameLegalDOS8Dot3(_In_ PUNICODE_STRING Name, _Inout_opt_ POEM_STRING OemName, _Inout_opt_ PBOOLEAN NameContainsSpaces)
enum _WINSTATIONINFOCLASS WINSTATIONINFOCLASS
VOID NTAPI RtlFreeAnsiString(PANSI_STRING AnsiString)
NTSTATUS NTAPI RtlLocalTimeToSystemTime(IN PLARGE_INTEGER LocalTime, _Out_ PLARGE_INTEGER SystemTime)
struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION * PSYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
struct _SYSTEM_PROCESS_INFORMATION * PSYSTEM_PROCESS_INFORMATION
struct _UNICODE_STRING UNICODE_STRING
struct _OBJECT_ATTRIBUTES OBJECT_ATTRIBUTES
struct _SYSTEM_PERFORMANCE_INFORMATION SYSTEM_PERFORMANCE_INFORMATION
NTSTATUS NTAPI RtlUnicodeStringToAnsiString(PANSI_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)
struct _SYSTEM_INTERRUPT_INFORMATION SYSTEM_INTERRUPT_INFORMATION
struct _SYSTEM_REGISTRY_QUOTA_INFORMATION * PSYSTEM_REGISTRY_QUOTA_INFORMATION
VOID NTAPI RtlInitString(PSTRING DestinationString, PCSZ SourceString)
VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
struct _SYSTEM_LOOKASIDE_INFORMATION * PSYSTEM_LOOKASIDE_INFORMATION
@ SystemTimeOfDayInformation
@ SystemExceptionInformation
@ SystemLookasideInformation
@ SystemRegistryQuotaInformation
@ SystemInterruptInformation
@ SystemPolicyInformation
@ SystemProcessInformation
@ SystemPerformanceInformation
@ SystemProcessorPerformanceInformation
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQuerySystemTime(_Out_ PLARGE_INTEGER SystemTime)
struct _SYSTEM_EXCEPTION_INFORMATION * PSYSTEM_EXCEPTION_INFORMATION
NTSTATUS NTAPI RtlUnicodeToMultiByteSize(_Out_ PULONG BytesInMultiByteString, _In_reads_bytes_(BytesInUnicodeString) PWCH UnicodeString, _In_ ULONG BytesInUnicodeString)
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtQueryMultipleValueKey(_In_ HANDLE KeyHandle, _Inout_updates_(EntryCount) PKEY_VALUE_ENTRY ValueEntries, _In_ ULONG EntryCount, _Out_writes_bytes_(*BufferLength) PVOID ValueBuffer, _Inout_ PULONG BufferLength, _Out_opt_ PULONG RequiredBufferLength)
enum _SYSTEM_INFORMATION_CLASS SYSTEM_INFORMATION_CLASS
struct _SYSTEM_PROCESS_INFORMATION SYSTEM_PROCESS_INFORMATION
struct _PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION
struct _PEB_LDR_DATA PEB_LDR_DATA
__kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtWaitForSingleObject(_In_ HANDLE Object, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
const UNICODE_STRING * PCUNICODE_STRING
struct _FILE_IO_COMPLETION_INFORMATION FILE_IO_COMPLETION_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQuerySection(HANDLE, SECTION_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
struct _DBGKM_EXIT_THREAD * PDBGKM_EXIT_THREAD
struct _KEY_VALUE_BASIC_INFORMATION KEY_VALUE_BASIC_INFORMATION
struct _FILE_FULL_EA_INFORMATION * PFILE_FULL_EA_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContext(DWORD, HANDLE, ULONG_PTR *)
NTSYSAPI void WINAPI RtlTimeToElapsedTimeFields(const LARGE_INTEGER *, PTIME_FIELDS)
NTSYSAPI NTSTATUS WINAPI NtTestAlert(VOID)
NTSYSAPI NTSTATUS WINAPI NtSetVolumeInformationFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
struct tagRTL_BITMAP_RUN * PRTL_BITMAP_RUN
struct _RTL_USER_PROCESS_PARAMETERS32 RTL_USER_PROCESS_PARAMETERS32
NTSYSAPI NTSTATUS WINAPI NtUnlockFile(HANDLE, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, PULONG)
struct _RTL_ATOM_TABLE_ENTRY RTL_ATOM_TABLE_ENTRY
struct _PS_ATTRIBUTE_LIST * PPS_ATTRIBUTE_LIST
struct _MEMORY_SECTION_NAME MEMORY_SECTION_NAME
NTSYSAPI void WINAPI RtlReleasePebLock(void)
NTSYSAPI WCHAR WINAPI RtlAnsiCharToUnicodeChar(LPSTR *)
struct _LDR_DLL_LOADED_NOTIFICATION_DATA * PLDR_DLL_LOADED_NOTIFICATION_DATA
NTSYSAPI void WINAPI RtlDeleteResource(LPRTL_RWLOCK)
struct _FILE_STAT_INFORMATION FILE_STAT_INFORMATION
struct _TIME_FIELDS TIME_FIELDS
NTSYSAPI NTSTATUS WINAPI NtCreatePort(PHANDLE, POBJECT_ATTRIBUTES, ULONG, ULONG, PULONG)
struct _LDR_RESOURCE_INFO * PLDR_RESOURCE_INFO
struct _FILE_STAT_INFORMATION * PFILE_STAT_INFORMATION
struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION * PFILE_IO_COMPLETION_NOTIFICATION_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryKey(HANDLE, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
NTSYSAPI NTSTATUS WINAPI NtDeleteValueKey(HANDLE, const UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, PVOID, ULONG, PVOID, ULONG)
DWORD(CALLBACK * PRTL_WORK_ITEM_ROUTINE)(LPVOID)
struct _LPC_MESSAGE * PLPC_MESSAGE
@ FilePositionInformation
@ FileMoveClusterInformation
@ FilePipeLocalInformation
@ FileEndOfFileInformation
@ FileIdGlobalTxDirectoryInformation
@ FileStorageReserveIdInformation
@ FileDesiredStorageClassInformation
@ FileCompressionInformation
@ FileIdExtdBothDirectoryInformation
@ FileHardLinkFullIdInformation
@ FileRemoteProtocolInformation
@ FileVolumeNameInformation
@ FileStandardLinkInformation
@ FilePipeRemoteInformation
@ FileDispositionInformationEx
@ FileTrackingInformation
@ FileSfioVolumeInformation
@ FileIoPriorityHintInformation
@ FileInternalInformation
@ FileAttributeTagInformation
@ FileStandardInformation
@ FileAlignmentInformation
@ FileReparsePointInformation
@ FileNormalizedNameInformation
@ FileKnownFolderInformation
@ FileObjectIdInformation
@ FileRenameInformationEx
@ FileLinkInformationExBypassAccessCheck
@ FileIdBothDirectoryInformation
@ FileAlternateNameInformation
@ FileIoCompletionNotificationInformation
@ FileRenameInformationExBypassAccessCheck
@ FileCaseSensitiveInformationForceAccessCheck
@ FileCaseSensitiveInformation
@ FileMailslotSetInformation
@ FileIsRemoteDeviceInformation
@ FileValidDataLengthInformation
@ FileLinkInformationBypassAccessCheck
@ FileIdExtdDirectoryInformation
@ FileMailslotQueryInformation
@ FileAllocationInformation
@ FileMemoryPartitionInformation
@ FileCompletionInformation
@ FileFullDirectoryInformation
@ FileRenameInformationBypassAccessCheck
@ FileSfioReserveInformation
@ FileReplaceCompletionInformation
@ FileNetworkOpenInformation
@ FileDispositionInformation
@ FileAttributeCacheInformation
@ FileShortNameInformation
@ FileNetworkPhysicalNameInformation
@ FileNumaNodeInformation
@ FileProcessIdsUsingFileInformation
@ FileBothDirectoryInformation
@ FileIoStatusBlockRangeInformation
@ FileHardLinkInformation
@ FileIdFullDirectoryInformation
NTSYSAPI NTSTATUS WINAPI LdrDisableThreadCalloutsForDll(HMODULE)
struct _DBGUI_CREATE_THREAD * PDBGUI_CREATE_THREAD
struct _SYSTEM_TIME_ADJUSTMENT * PSYSTEM_TIME_ADJUSTMENT
NTSYSAPI LONGLONG WINAPI RtlExtendedIntegerMultiply(LONGLONG, INT)
NTSYSAPI NTSTATUS WINAPI RtlDefaultNpAcl(PACL *)
struct _MEMORY_SECTION_NAME * PMEMORY_SECTION_NAME
NTSYSAPI NTSTATUS WINAPI NtDuplicateToken(HANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, BOOLEAN, TOKEN_TYPE, PHANDLE)
struct _DBGKM_LOAD_DLL * PDBGKM_LOAD_DLL
NTSYSAPI NTSTATUS WINAPI NtRaiseException(PEXCEPTION_RECORD, PCONTEXT, BOOL)
struct _DBGKM_EXCEPTION DBGKM_EXCEPTION
NTSYSAPI BOOLEAN WINAPI RtlTimeFieldsToTime(PTIME_FIELDS, PLARGE_INTEGER)
NTSYSAPI NTSTATUS WINAPI RtlEnterCriticalSection(RTL_CRITICAL_SECTION *)
struct _FILE_ID_BOTH_DIRECTORY_INFORMATION FILE_ID_BOTH_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlDeleteRegistryValue(ULONG, PCWSTR, PCWSTR)
NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLockedByThread(RTL_CRITICAL_SECTION *)
struct _SYSTEM_PROCESS_ID_INFORMATION * PSYSTEM_PROCESS_ID_INFORMATION
NTSYSAPI void WINAPI RtlAcquireSRWLockShared(RTL_SRWLOCK *)
NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresenceEx(const UNICODE_STRING *, BOOLEAN *, BOOLEAN *)
NTSYSAPI PVOID WINAPI RtlAddressInSectionTable(const IMAGE_NT_HEADERS *, HMODULE, DWORD)
NTSYSAPI NTSTATUS WINAPI LdrQueryProcessModuleInformation(RTL_PROCESS_MODULES *, ULONG, ULONG *)
struct _OBJECT_HANDLE_FLAG_INFORMATION OBJECT_HANDLE_FLAG_INFORMATION
struct _FILE_BOTH_DIRECTORY_INFORMATION FILE_BOTH_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryInformationFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS)
NTSYSAPI NTSTATUS WINAPI RtlGetCompressionWorkSpaceSize(USHORT, PULONG, PULONG)
struct _RTL_USER_PROCESS_INFORMATION * PRTL_USER_PROCESS_INFORMATION
NTSYSAPI void WINAPI TpWaitForWork(TP_WORK *, BOOL)
NTSYSAPI BOOLEAN WINAPI RtlSetUserFlagsHeap(HANDLE, ULONG, void *, ULONG, ULONG)
struct _FILE_FULL_DIRECTORY_INFORMATION * PFILE_FULL_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI DbgUiConnectToDbg(void)
NTSYSAPI NTSTATUS WINAPI NtQueryAttributesFile(const OBJECT_ATTRIBUTES *, FILE_BASIC_INFORMATION *)
NTSYSAPI NTSTATUS WINAPI NtSetInformationJobObject(HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR)
struct _PROCESS_PRIORITY_CLASS PROCESS_PRIORITY_CLASS
NTSYSAPI NTSTATUS WINAPI RtlSetEnvironmentVariable(PWSTR *, PUNICODE_STRING, PUNICODE_STRING)
struct _SEMAPHORE_BASIC_INFORMATION SEMAPHORE_BASIC_INFORMATION
NTSYSAPI void WINAPI TpCallbackLeaveCriticalSectionOnCompletion(TP_CALLBACK_INSTANCE *, RTL_CRITICAL_SECTION *)
NTSYSAPI ULONG WINAPI RtlNtStatusToDosErrorNoTeb(NTSTATUS)
struct _SEMAPHORE_BASIC_INFORMATION * PSEMAPHORE_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetContextThread(HANDLE, const CONTEXT *)
NTSYSAPI NTSTATUS WINAPI NtOpenTimer(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI RtlQueueWorkItem(PRTL_WORK_ITEM_ROUTINE, PVOID, ULONG)
struct _SYSTEM_EXTENDED_THREAD_INFORMATION SYSTEM_EXTENDED_THREAD_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetSystemInformation(SYSTEM_INFORMATION_CLASS, PVOID, ULONG)
NTSYSAPI NTSTATUS WINAPI NtWriteRequestData(HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN)
enum _PS_CREATE_STATE PS_CREATE_STATE
NTSYSAPI NTSTATUS WINAPI NtCreateNamedPipeFile(PHANDLE, ULONG, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, ULONG, PLARGE_INTEGER)
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToAnsiString(STRING *, const UNICODE_STRING *, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtSetSystemEnvironmentValue(PUNICODE_STRING, PUNICODE_STRING)
NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void)
NTSYSAPI NTSTATUS WINAPI NtReadFileScatter(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
struct _RTL_RELATIVE_NAME * PRTL_RELATIVE_NAME
NTSYSAPI NTSTATUS WINAPI RtlWow64GetProcessMachines(HANDLE, USHORT *, USHORT *)
NTSYSAPI void WINAPI RtlSetUnhandledExceptionFilter(PRTL_EXCEPTION_FILTER)
NTSYSAPI NTSTATUS WINAPI NtCreateUserProcess(HANDLE *, HANDLE *, ACCESS_MASK, ACCESS_MASK, OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *, ULONG, ULONG, RTL_USER_PROCESS_PARAMETERS *, PS_CREATE_INFO *, PS_ATTRIBUTE_LIST *)
enum _FSINFOCLASS * PFS_INFORMATION_CLASS
NTSYSAPI BYTE WINAPI RtlAcquireResourceShared(LPRTL_RWLOCK, BYTE)
struct _UNICODE_STRING32 UNICODE_STRING32
NTSYSAPI NTSTATUS WINAPI NtAlertThreadByThreadId(HANDLE)
NTSYSAPI void WINAPI RtlReleaseResource(LPRTL_RWLOCK)
NTSYSAPI NTSTATUS WINAPI RtlWriteRegistryValue(ULONG, PCWSTR, PCWSTR, ULONG, PVOID, ULONG)
NTSYSAPI BOOLEAN WINAPI RtlValidAcl(PACL)
@ MemoryRegionInformation
@ MemoryWorkingSetExInformation
@ MemoryRegionInformationEx
@ MemoryPhysicalContiguityInformation
@ MemoryPrivilegedBasicInformation
@ MemoryEnclaveImageInformation
@ MemorySharedCommitInformation
@ MemoryBasicInformationCapped
@ MemoryMappedFilenameInformation
@ MemoryWorkingSetInformation
@ MemoryBadInformationAllProcesses
NTSYSAPI NTSTATUS WINAPI NtFindAtom(const WCHAR *, ULONG, RTL_ATOM *)
NTSYSAPI BOOLEAN WINAPI RtlIsValidIndexHandle(const RTL_HANDLE_TABLE *, ULONG Index, RTL_HANDLE **)
NTSYSAPI BOOLEAN WINAPI RtlIsCurrentProcess(HANDLE)
enum _HARDERROR_RESPONSE * PHARDERROR_RESPONSE
NTSYSAPI HANDLE WINAPI RtlCreateHeap(ULONG, PVOID, SIZE_T, SIZE_T, PVOID, PRTL_HEAP_PARAMETERS)
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionGuid(ULONG, const GUID *, ULONG, const GUID *, PVOID)
struct _LDR_SERVICE_TAG_RECORD LDR_SERVICE_TAG_RECORD
NTSYSAPI ULONG WINAPI RtlRemoveVectoredExceptionHandler(PVOID)
NTSYSAPI NTSTATUS WINAPI NtOpenKeyEx(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength2(ULONG, ULONG *, ULONG64)
struct _INITIAL_TEB INITIAL_TEB
struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 * PKEY_VALUE_PARTIAL_INFORMATION_ALIGN64
struct _FILE_ATTRIBUTE_TAG_INFORMATION FILE_ATTRIBUTE_TAG_INFORMATION
struct _FILE_NETWORK_OPEN_INFORMATION FILE_NETWORK_OPEN_INFORMATION
struct _SYSTEM_TIME_ADJUSTMENT_QUERY * PSYSTEM_TIME_ADJUSTMENT_QUERY
struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION * PRTL_DYNAMIC_TIME_ZONE_INFORMATION
NTSYSAPI NTSTATUS WINAPI DbgUiStopDebugging(HANDLE)
NTSYSAPI void WINAPI TpReleaseWork(TP_WORK *)
struct _PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
struct _FILE_ID_INFORMATION FILE_ID_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessObjectAce(PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID, BOOL, BOOL)
enum _KPROFILE_SOURCE * PKPROFILE_SOURCE
struct _DBGUI_CREATE_PROCESS * PDBGUI_CREATE_PROCESS
NTSYSAPI NTSTATUS WINAPI RtlFlsSetValue(ULONG, void *)
NTSYSAPI void WINAPI RtlTimeToTimeFields(const LARGE_INTEGER *, PTIME_FIELDS)
struct _TEB_FLS_DATA * PTEB_FLS_DATA
struct _DBGKM_LOAD_DLL DBGKM_LOAD_DLL
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowThread(VOID)
struct _KEY_MULTIPLE_VALUE_INFORMATION * PKEY_MULTIPLE_VALUE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlVerifyVersionInfo(const RTL_OSVERSIONINFOEXW *, DWORD, DWORDLONG)
struct _DBGKM_EXIT_PROCESS * PDBGKM_EXIT_PROCESS
struct _SECTION_IMAGE_INFORMATION SECTION_IMAGE_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtRestoreKey(HANDLE, HANDLE, ULONG)
NTSYSAPI NTSTATUS WINAPI NtWaitHighEventPair(HANDLE)
NTSYSAPI void WINAPI TpDisassociateCallback(TP_CALLBACK_INSTANCE *)
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedObjectAce(PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
NTSYSAPI ULONG64 WINAPI RtlGetEnabledExtendedFeatures(ULONG64)
NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE, PVOID *, SIZE_T *, ULONG)
NTSYSAPI NTSTATUS WINAPI NtIsProcessInJob(HANDLE, HANDLE)
NTSYSAPI NTSTATUS WINAPI NtSaveKey(HANDLE, HANDLE)
struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlRaiseStatus(NTSTATUS)
struct _SYSTEM_PROCESS_ID_INFORMATION SYSTEM_PROCESS_ID_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlGetLocaleFileMappingAddress(void **, LCID *, LARGE_INTEGER *)
struct _DEBUG_BUFFER * PDEBUG_BUFFER
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimer(HANDLE, HANDLE, HANDLE)
struct _PORT_MESSAGE_HEADER PORT_MESSAGE
NTSYSAPI NTSTATUS WINAPI NtExtendSection(HANDLE, PLARGE_INTEGER)
struct _OBJECT_TYPES_INFORMATION * POBJECT_TYPES_INFORMATION
struct _KEY_VALUE_FULL_INFORMATION KEY_VALUE_FULL_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetSystemTime(const LARGE_INTEGER *, LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtCreateKey(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlFindActivationContextSectionString(ULONG, const GUID *, ULONG, const UNICODE_STRING *, PVOID)
NTSYSAPI NTSTATUS WINAPI NtSetSystemPowerState(POWER_ACTION, SYSTEM_POWER_STATE, ULONG)
NTSYSAPI NTSTATUS WINAPI NtOpenDirectoryObject(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI TpQueryPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info)
NTSYSAPI NTSTATUS WINAPI RtlPinAtomInAtomTable(RTL_ATOM_TABLE, RTL_ATOM)
NTSYSAPI NTSTATUS WINAPI NtQuerySemaphore(HANDLE, SEMAPHORE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
struct _FILE_IO_COMPLETION_NOTIFICATION_INFORMATION FILE_IO_COMPLETION_NOTIFICATION_INFORMATION
NTSYSAPI void WINAPI RtlCopyUnicodeString(UNICODE_STRING *, const UNICODE_STRING *)
NTSYSAPI ULONG WINAPI RtlLengthSecurityDescriptor(PSECURITY_DESCRIPTOR)
struct _SYSTEM_CODEINTEGRITY_INFORMATION * PSYSTEM_CODEINTEGRITY_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL)
NTSYSAPI NTSTATUS WINAPI NtQueueApcThreadEx(HANDLE, HANDLE, PNTAPCFUNC, ULONG_PTR, ULONG_PTR, ULONG_PTR)
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWaitEx(HANDLE, HANDLE)
NTSYSAPI NTSTATUS WINAPI NtSuspendProcess(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlQueryAtomInAtomTable(RTL_ATOM_TABLE, RTL_ATOM, ULONG *, ULONG *, WCHAR *, ULONG *)
NTSYSAPI NTSTATUS WINAPI ApiSetQueryApiSetPresence(const UNICODE_STRING *, BOOLEAN *)
NTSYSAPI NTSTATUS WINAPI NtTraceControl(ULONG, void *, ULONG, void *, ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtSetTimerResolution(ULONG, BOOLEAN, PULONG)
@ KeyVirtualizationInformation
@ KeyHandleTagsInformation
NTSYSAPI void WINAPI RtlRestoreLastWin32Error(DWORD)
NTSYSAPI NTSTATUS WINAPI RtlZombifyActivationContext(HANDLE)
struct _RTL_PROCESS_MODULES RTL_PROCESS_MODULES
struct _SYSTEM_FIRMWARE_TABLE_INFORMATION * PSYSTEM_FIRMWARE_TABLE_INFORMATION
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerNegate(LONGLONG)
NTSYSAPI PVOID WINAPI RtlAllocateHeap(HANDLE, ULONG, SIZE_T) __WINE_ALLOC_SIZE(3) __WINE_DEALLOC(RtlFreeHeap
NTSYSAPI LPBYTE WINAPI RtlSubAuthorityCountSid(PSID)
NTSYSAPI NTSTATUS WINAPI NtCreateKeyedEvent(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG)
NTSYSAPI void WINAPI RtlInitCodePageTable(USHORT *, CPTABLEINFO *)
NTSYSAPI NTSTATUS WINAPI RtlpNtMakeTemporaryKey(HANDLE)
NTSYSAPI CCHAR WINAPI RtlFindMostSignificantBit(ULONGLONG)
NTSYSAPI NTSTATUS WINAPI NtRequestWaitReplyPort(HANDLE, PLPC_MESSAGE, PLPC_MESSAGE)
struct _THREAD_BASIC_INFORMATION THREAD_BASIC_INFORMATION
NTSYSAPI void WINAPI DbgUserBreakPoint(void)
NTSYSAPI BOOLEAN WINAPI RtlIsTextUnicode(LPCVOID, INT, INT *)
NTSYSAPI NTSTATUS WINAPI NtTerminateThread(HANDLE, LONG)
NTSYSAPI NTSTATUS WINAPI NtListenPort(HANDLE, PLPC_MESSAGE)
struct _LDRP_CSLIST * PLDRP_CSLIST
NTSYSAPI NTSTATUS WINAPI NtSetInformationVirtualMemory(HANDLE, VIRTUAL_MEMORY_INFORMATION_CLASS, ULONG_PTR, PMEMORY_RANGE_ENTRY, PVOID, ULONG)
struct _PORT_MESSAGE_HEADER * PPORT_MESSAGE_HEADER
struct _FILE_OBJECTID_BUFFER * PFILE_OBJECTID_BUFFER
NTSYSAPI NTSTATUS WINAPI NtSetTimer(HANDLE, const LARGE_INTEGER *, PTIMER_APC_ROUTINE, PVOID, BOOLEAN, ULONG, BOOLEAN *)
NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectWithMultipleInheritance(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR *, GUID **, ULONG, BOOLEAN, ULONG, HANDLE, PGENERIC_MAPPING)
NTSYSAPI void WINAPI TpStartAsyncIoOperation(TP_IO *)
NTSYSAPI void WINAPI TpReleasePool(TP_POOL *)
struct _MEMORY_IMAGE_INFORMATION * PMEMORY_IMAGE_INFORMATION
enum _SECTION_INFORMATION_CLASS SECTION_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI NtLockVirtualMemory(HANDLE, PVOID *, SIZE_T *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlEqualComputerName(const UNICODE_STRING *, const UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI NtAdjustGroupsToken(HANDLE, BOOLEAN, PTOKEN_GROUPS, ULONG, PTOKEN_GROUPS, PULONG)
NTSYSAPI NTSTATUS WINAPI NtQuerySystemInformationEx(SYSTEM_INFORMATION_CLASS, void *, ULONG, void *, ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI LdrGetDllPath(PCWSTR, ULONG, PWSTR *, PWSTR *)
struct _DBGKM_EXIT_PROCESS DBGKM_EXIT_PROCESS
NTSYSAPI NTSTATUS WINAPI NtAllocateUuids(PULARGE_INTEGER, PULONG, PULONG, PUCHAR)
struct _SECTION_BASIC_INFORMATION SECTION_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetHighWaitLowEventPair(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlInitAnsiStringEx(PANSI_STRING, PCSZ)
NTSYSAPI NTSTATUS WINAPI NtCreateMutant(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtRegisterThreadTerminatePort(HANDLE)
union _MEMORY_WORKING_SET_EX_BLOCK * PMEMORY_WORKING_SET_EX_BLOCK
NTSYSAPI NTSTATUS WINAPI wine_unix_to_nt_file_name(const char *name, WCHAR *buffer, ULONG *size)
struct _FILE_ID_FULL_DIRECTORY_INFORMATION * PFILE_ID_FULL_DIRECTORY_INFORMATION
struct _PROCESS_PRIORITY_CLASS * PPROCESS_PRIORITY_CLASS
NTSYSAPI NTSTATUS WINAPI NtQueryInformationJobObject(HANDLE, JOBOBJECTINFOCLASS, PVOID, ULONG, PULONG)
struct _CHPEV2_PROCESS_INFO CHPEV2_PROCESS_INFO
NTSYSAPI NTSTATUS WINAPI NtWow64AllocateVirtualMemory64(HANDLE, ULONG64 *, ULONG64, ULONG64 *, ULONG, ULONG)
struct _FILE_OBJECTID_INFORMATION FILE_OBJECTID_INFORMATION
NTSYSAPI BOOLEAN WINAPI RtlEqualUnicodeString(const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
NTSYSAPI void WINAPI RtlInitializeResource(LPRTL_RWLOCK)
enum _DBG_STATE DBG_STATE
struct _VM_COUNTERS_EX * PVM_COUNTERS_EX
NTSYSAPI NTSTATUS WINAPI RtlLocaleNameToLcid(const WCHAR *, LCID *, ULONG)
struct _DBGKM_CREATE_THREAD DBGKM_CREATE_THREAD
struct _KEY_NODE_INFORMATION * PKEY_NODE_INFORMATION
NTSYSAPI DWORD WINAPI RtlGetThreadErrorMode(void)
void WINAPI Wow64ApcRoutine(ULONG_PTR, ULONG_PTR, ULONG_PTR, CONTEXT *)
NTSYSAPI NTSTATUS WINAPI RtlpNtOpenKey(PHANDLE, ACCESS_MASK, OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI NtAssignProcessToJobObject(HANDLE, HANDLE)
enum _PORT_INFORMATION_CLASS * PPORT_INFORMATION_CLASS
NTSYSAPI BOOL WINAPI RtlQueryPerformanceCounter(LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryObject(HANDLE, PDIRECTORY_BASIC_INFORMATION, ULONG, BOOLEAN, BOOLEAN, PULONG, PULONG)
enum _FILE_INFORMATION_CLASS * PFILE_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI RtlNormalizeString(ULONG, const WCHAR *, INT, WCHAR *, INT *)
NTSYSAPI BOOL WINAPI RtlIsCriticalSectionLocked(RTL_CRITICAL_SECTION *)
NTSYSAPI ULONG WINAPI RtlRandom(PULONG)
NTSYSAPI NTSTATUS WINAPI RtlGUIDFromString(PUNICODE_STRING, GUID *)
CROSS_PROCESS_NOTIFICATION
@ CrossProcessPreVirtualProtect
@ CrossProcessFlushCacheHeavy
@ CrossProcessPreVirtualFree
@ CrossProcessPostVirtualFree
@ CrossProcessPreVirtualAlloc
@ CrossProcessPostVirtualAlloc
@ CrossProcessPostVirtualProtect
@ CrossProcessMemoryWrite
unsigned short * PRTL_ATOM
NTSYSAPI NTSTATUS WINAPI NtAlertThread(HANDLE ThreadHandle)
enum _IO_COMPLETION_INFORMATION_CLASS IO_COMPLETION_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG, ULONG, PVOID, ULONG)
void(CALLBACK * PLDR_DLL_NOTIFICATION_FUNCTION)(ULONG, LDR_DLL_NOTIFICATION_DATA *, void *)
NTSYSAPI NTSTATUS WINAPI NtQueryInformationPort(HANDLE, PORT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
struct _RTL_SYSTEM_TIME RTL_SYSTEM_TIME
NTSYSAPI BOOLEAN WINAPI RtlIsValidLocaleName(const WCHAR *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlGetThreadPreferredUILanguages(DWORD, ULONG *, WCHAR *, ULONG *)
NTSYSAPI void WINAPI DbgUiRemoteBreakin(void *)
const RTL_BITMAP_RUN * PCRTL_BITMAP_RUN
struct _FILE_MODE_INFORMATION FILE_MODE_INFORMATION
enum _SYSTEM_INFORMATION_CLASS * PSYSTEM_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI NtWaitLowEventPair(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlAddAtomToAtomTable(RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *)
NTSYSAPI NTSTATUS WINAPI LdrUnregisterDllNotification(void *)
enum _SHUTDOWN_ACTION SHUTDOWN_ACTION
NTSYSAPI BYTE WINAPI RtlAcquireResourceExclusive(LPRTL_RWLOCK, BYTE)
NTSYSAPI NTSTATUS WINAPI NtAllocateReserveObject(HANDLE *handle, const OBJECT_ATTRIBUTES *attr, MEMORY_RESERVE_OBJECT_TYPE type)
struct _SYSTEM_THREAD_INFORMATION * PSYSTEM_THREAD_INFORMATION
NTSYSAPI NTSTATUS WINAPI LdrGetDllHandle(LPCWSTR, ULONG, const UNICODE_STRING *, HMODULE *)
NTSYSAPI NTSTATUS WINAPI RtlUnicodeToUTF8N(LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD)
struct _FILE_IO_COMPLETION_INFORMATION * PFILE_IO_COMPLETION_INFORMATION
NTSYSAPI void WINAPI RtlWakeAllConditionVariable(RTL_CONDITION_VARIABLE *)
NTSYSAPI NTSTATUS WINAPI NtSetIntervalProfile(ULONG, KPROFILE_SOURCE)
NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserThread(ULONG)
struct _OBJECT_TYPES_INFORMATION OBJECT_TYPES_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtPrivilegeObjectAuditAlarm(PUNICODE_STRING, HANDLE, HANDLE, ULONG, PPRIVILEGE_SET, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtDeleteKey(HANDLE)
struct _MEMORY_WORKING_SET_EX_INFORMATION * PMEMORY_WORKING_SET_EX_INFORMATION
NTSYSAPI NTSTATUS WINAPI TpAllocTimer(TP_TIMER **, PTP_TIMER_CALLBACK, PVOID, TP_CALLBACK_ENVIRON *)
NTSYSAPI BOOLEAN WINAPI RtlIsActivationContextActive(HANDLE)
struct _FILE_PIPE_LOCAL_INFORMATION FILE_PIPE_LOCAL_INFORMATION
NTSYSAPI UINT WINAPI RtlEnlargedUnsignedDivide(ULONGLONG, UINT, UINT *)
NTSYSAPI BOOLEAN WINAPI RtlAreAnyAccessesGranted(ACCESS_MASK, ACCESS_MASK)
NTSYSAPI NTSTATUS WINAPI NtOpenProcessTokenEx(HANDLE, DWORD, DWORD, HANDLE *)
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePortEx(HANDLE, PVOID *, PPORT_MESSAGE, PPORT_MESSAGE, PLARGE_INTEGER)
@ KeyValuePartialInformationAlign64
@ KeyValueBasicInformation
@ KeyValuePartialInformation
@ KeyValueLayerInformation
@ KeyValueFullInformation
@ KeyValueFullInformationAlign64
NTSYSAPI NTSTATUS WINAPI RtlResetNtUserPfn(void)
struct _SYSTEM_CODEINTEGRITY_INFORMATION SYSTEM_CODEINTEGRITY_INFORMATION
NTSYSAPI BOOL WINAPI RtlEqualSid(PSID, PSID)
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerSubtract(LONGLONG, LONGLONG)
struct _NT_TIB64 NT_TIB64
struct _PEB_LDR_DATA32 * PPEB_LDR_DATA32
struct _FILE_BASIC_INFORMATION FILE_BASIC_INFORMATION
struct _DBGKM_EXCEPTION * PDBGKM_EXCEPTION
NTSYSAPI NTSTATUS WINAPI NtCancelSynchronousIoFile(HANDLE, PIO_STATUS_BLOCK, PIO_STATUS_BLOCK)
NTSYSAPI NTSTATUS WINAPI RtlWaitOnAddress(const void *, const void *, SIZE_T, const LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtCreateSection(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const LARGE_INTEGER *, ULONG, ULONG, HANDLE)
struct __OBJECT_TYPE_INFORMATION * POBJECT_TYPE_INFORMATION
NTSYSAPI PVOID WINAPI RtlReAllocateHeap(HANDLE, ULONG, PVOID, SIZE_T) __WINE_ALLOC_SIZE(4) __WINE_DEALLOC(RtlFreeHeap
NTSYSAPI NTSTATUS WINAPI NtImpersonateClientOfPort(HANDLE, PPORT_MESSAGE)
void *WINAPI Wow64AllocateTemp(SIZE_T)
NTSYSAPI void WINAPI RtlWakeAddressAll(const void *)
NTSTATUS(WINAPI * KERNEL_CALLBACK_PROC)(void *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAceEx(PACL, DWORD, DWORD, DWORD, PSID, BOOL, BOOL)
struct _FILE_ALLOCATION_INFORMATION * PFILE_ALLOCATION_INFORMATION
struct _RTL_TIME_DYNAMIC_ZONE_INFORMATION RTL_DYNAMIC_TIME_ZONE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlQueryProcessDebugInformation(ULONG, ULONG, PDEBUG_BUFFER)
NTSYSAPI PVOID WINAPI RtlEncodePointer(PVOID)
NTSYSAPI ULONG WINAPI RtlDosSearchPath_U(LPCWSTR, LPCWSTR, LPCWSTR, ULONG, LPWSTR, LPWSTR *)
NTSYSAPI void WINAPI RtlAcquirePebLock(void)
NTSYSAPI LONGLONG WINAPI RtlExtendedMagicDivide(LONGLONG, LONGLONG, INT)
NTSYSAPI NTSTATUS WINAPI NtLoadDriver(const UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI RtlQueryTimeZoneInformation(RTL_TIME_ZONE_INFORMATION *)
struct _DBGUI_WAIT_STATE_CHANGE * PDBGUI_WAIT_STATE_CHANGE
VOID(CALLBACK * PRTL_OVERLAPPED_COMPLETION_ROUTINE)(DWORD, DWORD, LPVOID)
struct _API_SET_VALUE_ENTRY API_SET_VALUE_ENTRY
struct _MEMORY_RANGE_ENTRY * PMEMORY_RANGE_ENTRY
struct _LDR_DEPENDENCY * PLDR_DEPENDENCY
NTSTATUS WINAPI Wow64RaiseException(int, EXCEPTION_RECORD *)
enum _IO_COMPLETION_INFORMATION_CLASS * PIO_COMPLETION_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletionEx(HANDLE, FILE_IO_COMPLETION_INFORMATION *, ULONG, ULONG *, LARGE_INTEGER *, BOOLEAN)
struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX * PSYSTEM_KERNEL_DEBUGGER_INFORMATION_EX
NTSYSAPI NTSTATUS WINAPI RtlSetIoCompletionCallback(HANDLE, PRTL_OVERLAPPED_COMPLETION_ROUTINE, ULONG)
NTSYSAPI NTSTATUS WINAPI NtCreateDebugObject(HANDLE *, ACCESS_MASK, OBJECT_ATTRIBUTES *, ULONG)
struct _FILE_STANDARD_INFORMATION * PFILE_STANDARD_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtInitializeRegistry(BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultUILanguage(LANGID *)
NTSYSAPI NTSTATUS WINAPI LdrAddDllDirectory(const UNICODE_STRING *, void **)
NTSYSAPI NTSTATUS WINAPI RtlCreateTimer(HANDLE, HANDLE *, RTL_WAITORTIMERCALLBACKFUNC, PVOID, DWORD, DWORD, ULONG)
struct _RTL_HANDLE_TABLE RTL_HANDLE_TABLE
NTSYSAPI LONGLONG WINAPI RtlConvertLongToLargeInteger(LONG)
NTSYSAPI NTSTATUS WINAPI TpAllocCleanupGroup(TP_CLEANUP_GROUP **)
NTSYSAPI NTSTATUS WINAPI NtPowerInformation(POWER_INFORMATION_LEVEL, PVOID, ULONG, PVOID, ULONG)
enum _MEMORY_INFORMATION_CLASS MEMORY_INFORMATION_CLASS
struct _CLIENT_ID32 CLIENT_ID32
struct _FILE_NETWORK_OPEN_INFORMATION * PFILE_NETWORK_OPEN_INFORMATION
struct _DIRECTORY_BASIC_INFORMATION DIRECTORY_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryInformationAtom(RTL_ATOM, ATOM_INFORMATION_CLASS, PVOID, ULONG, ULONG *)
struct _OBJECT_BASIC_INFORMATION OBJECT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtReplyPort(HANDLE, PLPC_MESSAGE)
NTSYSAPI NTSTATUS WINAPI NtWow64WriteVirtualMemory64(HANDLE, ULONG64, const void *, ULONG64, ULONG64 *)
struct _DBGUI_CREATE_THREAD DBGUI_CREATE_THREAD
NTSYSAPI NTSTATUS WINAPI NtMapViewOfSectionEx(HANDLE, HANDLE, PVOID *, const LARGE_INTEGER *, SIZE_T *, ULONG, ULONG, MEM_EXTENDED_PARAMETER *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedObjectAce(PACL, DWORD, DWORD, DWORD, GUID *, GUID *, PSID)
struct _CLIENT_ID CLIENT_ID
NTSYSAPI BOOLEAN WINAPI RtlIsCurrentThread(HANDLE)
VIRTUAL_MEMORY_INFORMATION_CLASS
@ VmVirtualMachinePrepopulateInformation
@ VmCfgCallTargetInformation
@ VmPhysicalContiguityInformation
@ VmPagePriorityInformation
@ VmPageDirtyStateInformation
@ VmRemoveFromWorkingSetInformation
@ VmImageHotPatchInformation
NTSYSAPI NTSTATUS WINAPI RtlInitializeSid(PSID, PSID_IDENTIFIER_AUTHORITY, BYTE)
struct _API_SET_NAMESPACE API_SET_NAMESPACE
struct _FILE_DISPOSITION_INFORMATION_EX * PFILE_DISPOSITION_INFORMATION_EX
NTSYSAPI NTSTATUS WINAPI NtResumeProcess(HANDLE)
struct _WOW64_CPU_AREA_INFO WOW64_CPU_AREA_INFO
struct _SECTION_BASIC_INFORMATION * PSECTION_BASIC_INFORMATION
struct _TEB_ACTIVE_FRAME_EX TEB_ACTIVE_FRAME_EX
NTSYSAPI void WINAPI RtlSetLastWin32ErrorAndNtStatusFromNtStatus(NTSTATUS)
NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFile(HANDLE, IO_STATUS_BLOCK *)
struct _WOW64INFO WOW64INFO
NTSYSAPI PVOID WINAPI RtlAddVectoredContinueHandler(ULONG, PVECTORED_EXCEPTION_HANDLER)
struct tagRTL_BITMAP * PRTL_BITMAP
NTSYSAPI void WINAPI DbgBreakPoint(void)
struct _SYSTEM_HANDLE_INFORMATION * PSYSTEM_HANDLE_INFORMATION
struct _SYSTEM_PROCESSOR_FEATURES_INFORMATION SYSTEM_PROCESSOR_FEATURES_INFORMATION
struct _FILE_FULL_DIRECTORY_INFORMATION * PFILE_FULL_DIR_INFORMATION
struct _LDRP_CSLIST LDRP_CSLIST
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToOemString(STRING *, const UNICODE_STRING *, BOOLEAN)
NTSYSAPI DWORD WINAPI RtlLengthSid(PSID)
struct _FILE_PIPE_INFORMATION FILE_PIPE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlInitUnicodeStringEx(PUNICODE_STRING, PCWSTR)
NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeSize(DWORD *, LPCSTR, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext2(void *, ULONG, CONTEXT_EX **, ULONG64)
struct _LDR_DEPENDENCY LDR_DEPENDENCY
NTSYSAPI PDEBUG_BUFFER WINAPI RtlCreateQueryDebugBuffer(ULONG, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtProtectVirtualMemory(HANDLE, PVOID *, SIZE_T *, ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR, PSID *, PBOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtFlushBuffersFileEx(HANDLE, ULONG, void *, ULONG, IO_STATUS_BLOCK *)
struct _SYSTEM_HANDLE_ENTRY * PSYSTEM_HANDLE_ENTRY
NTSYSAPI NTSTATUS WINAPI NtCreateLowBoxToken(HANDLE *, HANDLE, ACCESS_MASK, OBJECT_ATTRIBUTES *, SID *, ULONG, SID_AND_ATTRIBUTES *, ULONG, HANDLE *)
NTSYSAPI NTSTATUS WINAPI RtlInt64ToUnicodeString(ULONGLONG, ULONG, UNICODE_STRING *)
struct _ACTIVATION_CONTEXT_STACK ACTIVATION_CONTEXT_STACK
void WINAPI Wow64ProcessPendingCrossProcessItems(void)
NTSYSAPI NTSTATUS WINAPI NtRemoveIoCompletion(HANDLE, PULONG_PTR, PULONG_PTR, PIO_STATUS_BLOCK, PLARGE_INTEGER)
NTSYSAPI NTSTATUS WINAPI RtlSetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR, BOOLEAN, PACL, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlGetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR_CONTROL, LPDWORD)
NTSYSAPI NTSTATUS WINAPI NtCreateSymbolicLinkObject(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PUNICODE_STRING)
NTSYSAPI NTSTATUS WINAPI NtSetInformationProcess(HANDLE, PROCESSINFOCLASS, PVOID, ULONG)
NTSYSAPI NTSTATUS WINAPI LdrUnlockLoaderLock(ULONG, ULONG_PTR)
struct _ATOM_BASIC_INFORMATION ATOM_BASIC_INFORMATION
NTSYSAPI void WINAPI RtlReleaseSRWLockExclusive(RTL_SRWLOCK *)
NTSYSAPI BOOLEAN WINAPI RtlAreAllAccessesGranted(ACCESS_MASK, ACCESS_MASK)
NTSYSAPI void WINAPI RtlAddRefActivationContext(HANDLE)
struct _TIMER_BASIC_INFORMATION TIMER_BASIC_INFORMATION
struct _ACTIVATION_CONTEXT_STACK32 ACTIVATION_CONTEXT_STACK32
NTSYSAPI NTSTATUS WINAPI RtlQueryInformationAcl(PACL, LPVOID, DWORD, ACL_INFORMATION_CLASS)
struct _PS_ATTRIBUTE PS_ATTRIBUTE
NTSYSAPI void WINAPI RtlFreeUserStack(void *)
void(NTAPI * RTL_WAITORTIMERCALLBACKFUNC)(PVOID, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlAddAuditAccessAce(PACL, DWORD, DWORD, PSID, BOOL, BOOL)
struct _FILE_LINK_INFORMATION FILE_LINK_INFORMATION
struct _LIST_ENTRY64 LIST_ENTRY64
NTSYSAPI NTSTATUS WINAPI NtEnumerateValueKey(HANDLE, ULONG, KEY_VALUE_INFORMATION_CLASS, PVOID, ULONG, PULONG)
NTSYSAPI void WINAPI TpWaitForTimer(TP_TIMER *, BOOL)
NTSYSAPI BOOLEAN WINAPI RtlPrefixString(const STRING *, const STRING *, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlOemToUnicodeN(LPWSTR, DWORD, LPDWORD, LPCSTR, DWORD)
NTSYSAPI NTSTATUS WINAPI NtAddAtom(const WCHAR *, ULONG, RTL_ATOM *)
NTSYSAPI void WINAPI TpWaitForIoCompletion(TP_IO *, BOOL)
struct _SYSTEM_CPU_INFORMATION SYSTEM_CPU_INFORMATION
#define MAXIMUM_FILENAME_LENGTH
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftLeft(LONGLONG, INT)
struct _FILE_RENAME_INFORMATION * PFILE_RENAME_INFORMATION
struct _RTL_PROCESS_MODULES * PRTL_PROCESS_MODULES
NTSYSAPI NTSTATUS WINAPI RtlConvertToAutoInheritSecurityObject(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR *, GUID *, BOOL, PGENERIC_MAPPING)
struct _FILE_QUOTA_INFORMATION FILE_QUOTA_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtOpenSection(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
enum _SHUTDOWN_ACTION * PSHUTDOWN_ACTION
struct _SECTION_IMAGE_INFORMATION * PSECTION_IMAGE_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetInformationToken(HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG)
NTSYSAPI NTSTATUS WINAPI NtCreateMailslotFile(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, PIO_STATUS_BLOCK, ULONG, ULONG, ULONG, PLARGE_INTEGER)
struct _FILE_ACCESS_INFORMATION FILE_ACCESS_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetDefaultLocale(BOOLEAN, LCID)
NTSYSAPI void WINAPI TpCancelAsyncIoOperation(TP_IO *)
NTSYSAPI LONG WINAPI RtlCompareUnicodeString(const UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
NTSYSAPI ULONG WINAPI RtlGetProcessHeaps(ULONG, HANDLE *)
struct _KEY_BASIC_INFORMATION KEY_BASIC_INFORMATION
struct _FILE_FULL_DIRECTORY_INFORMATION FILE_FULL_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlCopyExtendedContext(CONTEXT_EX *, ULONG, CONTEXT_EX *)
NTSYSAPI NTSTATUS WINAPI NtReadRequestData(HANDLE, PLPC_MESSAGE, ULONG, PVOID, ULONG, PULONG)
struct _RTL_PROCESS_MODULE_INFORMATION RTL_PROCESS_MODULE_INFORMATION
struct _KEY_NAME_INFORMATION * PKEY_NAME_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings_U(PCWSTR, const UNICODE_STRING *, UNICODE_STRING *, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtSetSecurityObject(HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR)
struct _FILE_REPARSE_POINT_INFORMATION * PFILE_REPARSE_POINT_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtVdmControl(ULONG, PVOID)
NTSYSAPI NTSTATUS WINAPI RtlIdnToNameprepUnicode(DWORD, const WCHAR *, INT, WCHAR *, INT *)
struct _KERNEL_USER_TIMES KERNEL_USER_TIMES
NTSYSAPI NTSTATUS WINAPI NtSetThreadExecutionState(EXECUTION_STATE, EXECUTION_STATE *)
NTSYSAPI NTSTATUS WINAPI NtYieldExecution(void)
NTSYSAPI BOOL WINAPI TpIsTimerSet(TP_TIMER *)
NTSYSAPI NTSTATUS WINAPI RtlWalkHeap(HANDLE, PVOID)
NTSYSAPI void WINAPI RtlFreeThreadActivationContextStack(void)
struct _FILE_QUOTA_INFORMATION * PFILE_QUOTA_INFORMATION
struct _MEMORY_IMAGE_INFORMATION MEMORY_IMAGE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlMultiByteToUnicodeN(LPWSTR, DWORD, LPDWORD, LPCSTR, DWORD)
NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable_U(PWSTR, PUNICODE_STRING, PUNICODE_STRING)
NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirection(BOOLEAN)
struct _SYSTEM_HANDLE_INFORMATION SYSTEM_HANDLE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAceEx(PACL, DWORD, DWORD, DWORD, PSID)
NTSYSAPI NTSTATUS WINAPI NtOpenThreadTokenEx(HANDLE, DWORD, BOOLEAN, DWORD, HANDLE *)
struct _RTL_ATOM_TABLE * RTL_ATOM_TABLE
NTSYSAPI void WINAPI TpReleaseTimer(TP_TIMER *)
enum _KPROFILE_SOURCE KPROFILE_SOURCE
struct _PORT_MESSAGE_HEADER PORT_MESSAGE_HEADER
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAceEx(PACL, DWORD, DWORD, DWORD, PSID)
NTSYSAPI NTSTATUS WINAPI NtQueryLicenseValue(const UNICODE_STRING *, ULONG *, PVOID, ULONG, ULONG *)
NTSTATUS WINAPI Wow64SystemServiceEx(UINT, UINT *)
NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToNtPathName_U(PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
struct _SYSTEM_CONFIGURATION_INFO * PSYSTEM_CONFIGURATION_INFO
NTSYSAPI void WINAPI LdrShutdownProcess(void)
NTSYSAPI BOOLEAN WINAPI RtlFreeHandle(RTL_HANDLE_TABLE *, RTL_HANDLE *)
struct _SYSTEM_DRIVER_INFORMATION * PSYSTEM_DRIVER_INFORMATION
NTSYSAPI HANDLE WINAPI DbgUiGetThreadDebugObject(void)
struct _SYSTEM_PROCESSOR_FEATURES_INFORMATION * PSYSTEM_PROCESSOR_FEATURES_INFORMATION
enum _DBG_STATE * PDBG_STATE
NTSYSAPI void WINAPI RtlDestroyProcessParameters(RTL_USER_PROCESS_PARAMETERS *)
NTSYSAPI NTSTATUS WINAPI NtOpenKeyedEvent(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI ULONG WINAPI RtlGetFullPathName_U(PCWSTR, ULONG, PWSTR, PWSTR *)
struct _FILE_LINK_INFORMATION * PFILE_LINK_INFORMATION
struct _RTL_RWLOCK RTL_RWLOCK
enum _DEBUGOBJECTINFOCLASS DEBUGOBJECTINFOCLASS
struct _DBGKM_CREATE_PROCESS DBGKM_CREATE_PROCESS
NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParametersEx(RTL_USER_PROCESS_PARAMETERS **, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, PWSTR, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, ULONG)
struct _PROCESS_CYCLE_TIME_INFORMATION PROCESS_CYCLE_TIME_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtCompleteConnectPort(HANDLE)
NTSYSAPI void WINAPI TpPostWork(TP_WORK *)
NTSYSAPI NTSTATUS WINAPI NtRollbackTransaction(HANDLE, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtAccessCheck(PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, PGENERIC_MAPPING, PPRIVILEGE_SET, PULONG, PULONG, NTSTATUS *)
enum _HARDERROR_RESPONSE_OPTION HARDERROR_RESPONSE_OPTION
NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemory(HANDLE, PVOID *, ULONG_PTR, SIZE_T *, ULONG, ULONG)
struct _RTL_USER_PROCESS_INFORMATION RTL_USER_PROCESS_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtFlushKey(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlCompressBuffer(USHORT, PUCHAR, ULONG, PUCHAR, ULONG, ULONG, PULONG, PVOID)
NTSYSAPI USHORT WINAPI RtlWow64GetCurrentMachine(void)
NTSYSAPI NTSTATUS WINAPI NtWaitForKeyedEvent(HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI RtlCreateProcessParameters(RTL_USER_PROCESS_PARAMETERS **, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, PWSTR, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *, const UNICODE_STRING *)
@ MaxDebugObjectInfoClass
@ DebugObjectKillProcessOnExitInformation
NTSYSAPI NTSTATUS WINAPI RtlSetThreadErrorMode(DWORD, LPDWORD)
NTSYSAPI NTSTATUS WINAPI RtlDeregisterWait(HANDLE)
NTSYSAPI void WINAPI TpWaitForWait(TP_WAIT *, BOOL)
enum VIRTUAL_MEMORY_INFORMATION_CLASS * PVIRTUAL_MEMORY_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI NtRequestPort(HANDLE, PLPC_MESSAGE)
enum _MUTANT_INFORMATION_CLASS MUTANT_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI RtlOemStringToUnicodeString(UNICODE_STRING *, const STRING *, BOOLEAN)
struct _TEB_ACTIVE_FRAME_CONTEXT * PTEB_ACTIVE_FRAME_CONTEXT
NTSYSAPI NTSTATUS WINAPI LdrFindEntryForAddress(const void *, PLDR_DATA_TABLE_ENTRY *)
NTSYSAPI NTSTATUS WINAPI RtlSetProcessPreferredUILanguages(DWORD, PCZZWSTR, ULONG *)
NTSYSAPI DOS_PATHNAME_TYPE WINAPI RtlDetermineDosPathNameType_U(PCWSTR)
struct _TEB_ACTIVE_FRAME * PTEB_ACTIVE_FRAME
struct _LDR_DLL_LOADED_NOTIFICATION_DATA LDR_DLL_LOADED_NOTIFICATION_DATA
NTSYSAPI BOOL WINAPI RtlEqualPrefixSid(PSID, PSID)
enum _SYSDBG_COMMAND * PSYSDBG_COMMAND
NTSYSAPI NTSTATUS WINAPI TpAllocIoCompletion(TP_IO **, HANDLE, PTP_IO_CALLBACK, void *, TP_CALLBACK_ENVIRON *)
struct _DEBUG_MODULE_INFORMATION * PDEBUG_MODULE_INFORMATION
struct _RTL_HANDLE RTL_HANDLE
enum _SYSTEM_FIRMWARE_TABLE_ACTION * PSYSTEM_FIRMWARE_TABLE_ACTION
NTSYSAPI NTSTATUS WINAPI NtMapViewOfSection(HANDLE, HANDLE, PVOID *, ULONG_PTR, SIZE_T, const LARGE_INTEGER *, SIZE_T *, SECTION_INHERIT, ULONG, ULONG)
NTSYSAPI void WINAPI RtlGetCurrentProcessorNumberEx(PROCESSOR_NUMBER *)
struct _VM_COUNTERS VM_COUNTERS
@ ThreadActualGroupAffinity
@ ThreadEnableAlignmentFaultFixup
@ ThreadDescriptorTableEntry
@ ThreadStrongerBadHandleChecks
@ ThreadCpuAccountingInformation
@ ThreadWorkOnBehalfTicket
@ ThreadEventPair_Reusable
@ ThreadEffectiveIoPriority
@ ThreadCreateStateChange
@ ThreadActualBasePriority
@ ThreadSystemThreadInformation
@ ThreadManageWritesToExecutableMemory
@ ThreadSwitchLegacyState
@ ThreadDynamicCodePolicyInfo
@ ThreadQuerySetWin32StartAddress
@ ThreadBreakOnTermination
@ ThreadExplicitCaseSensitivity
@ ThreadPowerThrottlingState
@ ThreadImpersonationToken
@ ThreadHeterogeneousCpuPolicy
@ ThreadSetTlsArrayAddress
@ ThreadEffectivePagePriority
@ ThreadDbgkWerReportActive
@ ThreadSubsystemInformation
struct _RTL_TIME_ZONE_INFORMATION RTL_TIME_ZONE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlActivateActivationContextEx(ULONG, TEB *, HANDLE, ULONG_PTR *)
NTSYSAPI void WINAPI RtlRbRemoveNode(RTL_RB_TREE *, RTL_BALANCED_NODE *)
NTSYSAPI BOOL WINAPI RtlQueryUnbiasedInterruptTime(ULONGLONG *)
NTSYSAPI NTSTATUS WINAPI RtlAddAccessAllowedAce(PACL, DWORD, DWORD, PSID)
NTSYSAPI NTSTATUS WINAPI NtShutdownSystem(SHUTDOWN_ACTION)
NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *, ULONG)
struct _FLS_INFO_CHUNK * PFLS_INFO_CHUNK
struct _KEY_CACHED_INFORMATION * PKEY_CACHED_INFORMATION
struct _KEY_NODE_INFORMATION KEY_NODE_INFORMATION
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerArithmeticShift(LONGLONG, INT)
NTSYSAPI NTSTATUS WINAPI NtClearEvent(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *)
struct _RTL_QUERY_REGISTRY_TABLE * PRTL_QUERY_REGISTRY_TABLE
NTSYSAPI NTSTATUS WINAPI NtSetInformationFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS)
union _MEMORY_WORKING_SET_EX_BLOCK MEMORY_WORKING_SET_EX_BLOCK
NTSYSAPI NTSTATUS WINAPI NtCreateThreadEx(HANDLE *, ACCESS_MASK, OBJECT_ATTRIBUTES *, HANDLE, PRTL_THREAD_START_ROUTINE, void *, ULONG, ULONG_PTR, SIZE_T, SIZE_T, PS_ATTRIBUTE_LIST *)
struct _FILE_ALL_INFORMATION * PFILE_ALL_INFORMATION
struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX SYSTEM_KERNEL_DEBUGGER_INFORMATION_EX
NTSYSAPI void WINAPI RtlDeactivateActivationContext(DWORD, ULONG_PTR)
NTSYSAPI void *WINAPI RtlLocateExtendedFeature2(CONTEXT_EX *, ULONG, XSTATE_CONFIGURATION *, ULONG *)
struct _FILE_ID_INFORMATION * PFILE_ID_INFORMATION
NTSYSAPI void WINAPI RtlInitializeHandleTable(ULONG, ULONG, RTL_HANDLE_TABLE *)
NTSYSAPI NTSTATUS WINAPI RtlGetSearchPath(PWSTR *)
NTSYSAPI NTSTATUS WINAPI NtAdjustPrivilegesToken(HANDLE, BOOLEAN, PTOKEN_PRIVILEGES, DWORD, PTOKEN_PRIVILEGES, PDWORD)
NTSYSAPI NTSTATUS WINAPI NtDeleteAtom(RTL_ATOM)
enum _MUTANT_INFORMATION_CLASS * PMUTANT_INFORMATION_CLASS
struct _RTL_PROCESS_MODULE_INFORMATION_EX RTL_PROCESS_MODULE_INFORMATION_EX
NTSYSAPI WCHAR WINAPI RtlUpcaseUnicodeChar(WCHAR)
NTSYSAPI ULONG WINAPI RtlFindLongestRunSet(PCRTL_BITMAP, PULONG)
NTSYSAPI NTSTATUS WINAPI NtDeleteFile(POBJECT_ATTRIBUTES)
NTSYSAPI NTSTATUS WINAPI RtlDowncaseUnicodeString(UNICODE_STRING *, const UNICODE_STRING *, BOOLEAN)
_SYSTEM_FIRMWARE_TABLE_ACTION
@ SystemFirmwareTable_Enumerate
@ SystemFirmwareTable_Get
NTSYSAPI NTSTATUS WINAPI DbgUiDebugActiveProcess(HANDLE)
struct _LPC_SECTION_WRITE * PLPC_SECTION_WRITE
NTSYSAPI NTSTATUS WINAPI RtlSetThreadPreferredUILanguages(DWORD, PCZZWSTR, ULONG *)
struct _RTL_SYSTEM_TIME * PRTL_SYSTEM_TIME
struct _GLOBAL_FLS_DATA GLOBAL_FLS_DATA
NTSYSAPI NTSTATUS WINAPI NtSetLdtEntries(ULONG, LDT_ENTRY, ULONG, LDT_ENTRY)
struct _FILE_BOTH_DIRECTORY_INFORMATION * PFILE_BOTH_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtCreateProcess(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, BOOLEAN, HANDLE, HANDLE, HANDLE)
NTSYSAPI NTSTATUS WINAPI NtAllocateVirtualMemoryEx(HANDLE, PVOID *, SIZE_T *, ULONG, ULONG, MEM_EXTENDED_PARAMETER *, ULONG)
struct _KEY_BASIC_INFORMATION * PKEY_BASIC_INFORMATION
@ LoadReasonStaticDependency
@ LoadReasonStaticForwarderDependency
@ LoadReasonDynamicForwarderDependency
@ LoadReasonDelayloadDependency
NTSYSAPI NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN)
RTL_HEAP_COMMIT_ROUTINE * PRTL_HEAP_COMMIT_ROUTINE
struct _SYSTEM_THREAD_INFORMATION SYSTEM_THREAD_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlCreateTimerQueue(PHANDLE)
NTSYSAPI NTSTATUS WINAPI NtFlushVirtualMemory(HANDLE, LPCVOID *, SIZE_T *, ULONG)
NTSYSAPI NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PULONG)
enum _ATOM_INFORMATION_CLASS ATOM_INFORMATION_CLASS
struct _LDR_RESOURCE_INFO LDR_RESOURCE_INFO
struct _DBGKM_CREATE_PROCESS * PDBGKM_CREATE_PROCESS
NTSYSAPI NTSTATUS WINAPI NtOpenEventPair(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSection(HANDLE, PVOID)
NTSYSAPI NTSTATUS WINAPI NtSetEvent(HANDLE, LONG *)
NTSYSAPI NTSTATUS WINAPI NtOpenThreadToken(HANDLE, DWORD, BOOLEAN, HANDLE *)
NTSYSAPI NTSTATUS WINAPI NtOpenMutant(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI LONGLONG WINAPI RtlInterlockedCompareExchange64(LONGLONG *, LONGLONG, LONGLONG)
struct _FILE_FULL_DIRECTORY_INFORMATION FILE_FULL_DIR_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlUnicodeToMultiByteN(LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD)
NTSYSAPI NTSTATUS WINAPI RtlSetControlSecurityDescriptor(PSECURITY_DESCRIPTOR, SECURITY_DESCRIPTOR_CONTROL, SECURITY_DESCRIPTOR_CONTROL)
struct _KCONTINUE_ARGUMENT * PKCONTINUE_ARGUMENT
_MEMORY_RESERVE_OBJECT_TYPE
@ MemoryReserveObjectTypeIoCompletion
@ MemoryReserveObjectTypeUserApc
NTSYSAPI NTSTATUS WINAPI NtMakeTemporaryObject(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlGetNativeSystemInformation(SYSTEM_INFORMATION_CLASS, void *, ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtCommitTransaction(HANDLE, BOOLEAN)
NTSYSAPI void WINAPI TpSetWait(TP_WAIT *, HANDLE, LARGE_INTEGER *)
struct _FILE_OBJECTID_BUFFER FILE_OBJECTID_BUFFER
struct _TEB_ACTIVE_FRAME TEB_ACTIVE_FRAME
NTSYSAPI NTSTATUS WINAPI NtSetInformationDebugObject(HANDLE, DEBUGOBJECTINFOCLASS, PVOID, ULONG, ULONG *)
struct _CLIENT_ID64 CLIENT_ID64
struct _ATOM_BASIC_INFORMATION * PATOM_BASIC_INFORMATION
NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockShared(RTL_SRWLOCK *)
NTSYSAPI NTSTATUS WINAPI TpAllocPool(TP_POOL **, PVOID)
struct _FLS_INFO_CHUNK FLS_INFO_CHUNK
enum _SYSTEM_FIRMWARE_TABLE_ACTION SYSTEM_FIRMWARE_TABLE_ACTION
@ SysDbgQuerySpecialCalls
@ SysDbgGetPrintBufferSize
@ SysDbgQueryTraceInformation
@ SysDbgClearSpecialCalls
@ SysDbgWriteControlSpace
@ SysDbgEnableKernelDebugger
@ SysDbgGetKdUmExceptionEnable
@ SysDbgSetKdUmExceptionEnable
@ SysDbgGetLiveKernelDump
@ SysDbgSetPrintBufferSize
@ SysDbgQueryModuleInformation
@ SysDbgDisableKernelDebugger
@ SysDbgRegisterForUmBreakInfo
struct _SYSTEM_EXTENDED_THREAD_INFORMATION * PSYSTEM_EXTENDED_THREAD_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlAppendAsciizToString(STRING *, LPCSTR)
NTSYSAPI void WINAPI RtlReleaseActivationContext(HANDLE)
struct _PROCESS_INSTRUMENTATION_CALLBACK_INFORMATION * PPROCESS_INSTRUMENTATION_CALLBACK_INFORMATION
NTSYSAPI void WINAPI DbgUiSetThreadDebugObject(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlUpdateTimer(HANDLE, HANDLE, DWORD, DWORD)
@ ObjectSessionInformation
@ ObjectHandleFlagInformation
@ ObjectSessionObjectInformation
NTSYSAPI NTSTATUS WINAPI NtWriteFileGather(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, FILE_SEGMENT_ELEMENT *, ULONG, PLARGE_INTEGER, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlWow64GetSharedInfoProcess(HANDLE, BOOLEAN *, WOW64INFO *)
NTSYSAPI NTSTATUS WINAPI RtlEqualDomainName(const UNICODE_STRING *, const UNICODE_STRING *)
struct _LDR_SERVICE_TAG_RECORD * PLDR_SERVICE_TAG_RECORD
struct _CHPEV2_PROCESS_INFO * PCHPEV2_PROCESS_INFO
NTSYSAPI NTSTATUS WINAPI RtlGetProcessPreferredUILanguages(DWORD, ULONG *, WCHAR *, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtQueryVolumeInformationFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS)
struct _SYSTEM_HANDLE_ENTRY SYSTEM_HANDLE_ENTRY
struct _LDR_DDAG_NODE * PLDR_DDAG_NODE
NTSYSAPI NTSTATUS WINAPI NtStartProfile(HANDLE)
struct _API_SET_NAMESPACE_ENTRY API_SET_NAMESPACE_ENTRY
enum _KCONTINUE_TYPE KCONTINUE_TYPE
NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSectionEx(RTL_CRITICAL_SECTION *, ULONG, ULONG)
struct _MUTANT_BASIC_INFORMATION * PMUTANT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlLeaveCriticalSection(RTL_CRITICAL_SECTION *)
NTSYSAPI NTSTATUS WINAPI NtUnmapViewOfSectionEx(HANDLE, PVOID, ULONG)
NTSYSAPI BOOL WINAPI RtlQueryPerformanceFrequency(LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI RtlIntegerToChar(ULONG, ULONG, ULONG, PCHAR)
struct _RTL_RELATIVE_NAME RTL_RELATIVE_NAME
NTSYSAPI NTSTATUS WINAPI RtlStringFromGUID(REFGUID, PUNICODE_STRING)
struct _FILE_NAME_INFORMATION FILE_NAME_INFORMATION
struct _TIME_FIELDS * PTIME_FIELDS
NTSYSAPI NTSTATUS WINAPI NtOpenSemaphore(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
struct tagRTL_BITMAP RTL_BITMAP
const RTL_BITMAP * PCRTL_BITMAP
enum _EVENT_INFORMATION_CLASS EVENT_INFORMATION_CLASS
struct _FILE_STREAM_INFORMATION * PFILE_STREAM_INFORMATION
struct _FILE_POSITION_INFORMATION FILE_POSITION_INFORMATION
NTSYSAPI NTSTATUS WINAPI DbgUiWaitStateChange(DBGUI_WAIT_STATE_CHANGE *, LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtConnectPort(PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
NTSYSAPI NTSTATUS WINAPI NtQueryTimer(HANDLE, TIMER_INFORMATION_CLASS, PVOID, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlQueryDynamicTimeZoneInformation(RTL_DYNAMIC_TIME_ZONE_INFORMATION *)
NTSYSAPI DWORD WINAPI RtlFreeSid(PSID)
NTSYSAPI NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(PSECURITY_DESCRIPTOR, PSID, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlDeleteCriticalSection(RTL_CRITICAL_SECTION *)
NTSYSAPI NTSTATUS WINAPI NtQuerySymbolicLinkObject(HANDLE, PUNICODE_STRING, PULONG)
struct _KEY_FULL_INFORMATION KEY_FULL_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtCreateKeyTransacted(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, HANDLE, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtOpenEvent(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI NtPrivilegeCheck(HANDLE, PPRIVILEGE_SET, PBOOLEAN)
struct _FILE_NAME_INFORMATION * PFILE_NAME_INFORMATION
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerShiftRight(LONGLONG, INT)
NTSYSAPI NTSTATUS WINAPI LdrRegisterDllNotification(ULONG, PLDR_DLL_NOTIFICATION_FUNCTION, void *, void **)
NTSYSAPI NTSTATUS WINAPI RtlLcidToLocaleName(LCID, UNICODE_STRING *, ULONG, BOOLEAN)
struct _DEBUG_MODULE_INFORMATION DEBUG_MODULE_INFORMATION
struct _FILE_RENAME_INFORMATION FILE_RENAME_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlIdnToAscii(DWORD, const WCHAR *, INT, WCHAR *, INT *)
NTSYSAPI NTSTATUS WINAPI RtlDecompressFragment(USHORT, PUCHAR, ULONG, PUCHAR, ULONG, ULONG, PULONG, PVOID)
enum _SECTION_INHERIT SECTION_INHERIT
NTSYSAPI DWORD WINAPI RtlGetLongestNtPathLength(void)
NTSYSAPI NTSTATUS WINAPI NtQueryEaFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, BOOLEAN, PVOID, ULONG, PULONG, BOOLEAN)
struct _SYSTEM_CACHE_INFORMATION * PSYSTEM_CACHE_INFORMATION
struct _MANAGE_WRITES_TO_EXECUTABLE_MEMORY MANAGE_WRITES_TO_EXECUTABLE_MEMORY
NTSYSAPI NTSTATUS WINAPI NtOpenProcess(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
NTSYSAPI void WINAPI RtlRbInsertNodeEx(RTL_RB_TREE *, RTL_BALANCED_NODE *, BOOLEAN, RTL_BALANCED_NODE *)
NTSYSAPI NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR, PBOOLEAN, PACL *, PBOOLEAN)
NTSYSAPI TEB_ACTIVE_FRAME *WINAPI RtlGetFrame(void)
NTSYSAPI NTSTATUS WINAPI LdrUnloadDll(HMODULE)
struct _DIRECTORY_BASIC_INFORMATION * PDIRECTORY_BASIC_INFORMATION
struct _OBJECT_NAME_INFORMATION OBJECT_NAME_INFORMATION
struct _KEY_CACHED_INFORMATION KEY_CACHED_INFORMATION
NTSYSAPI DWORD WINAPI RtlLengthRequiredSid(DWORD)
NTSYSAPI void WINAPI RtlReleasePath(PWSTR)
struct _DBGKM_UNLOAD_DLL DBGKM_UNLOAD_DLL
NTSYSAPI NTSTATUS WINAPI RtlGetLastNtStatus(void)
NTSYSAPI void WINAPI RtlAcquireSRWLockExclusive(RTL_SRWLOCK *)
enum _DEBUGOBJECTINFOCLASS * PDEBUGOBJECTINFOCLASS
struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION SYSTEM_KERNEL_DEBUGGER_INFORMATION
struct _FILE_END_OF_FILE_INFORMATION * PFILE_END_OF_FILE_INFORMATION
NTSYSAPI RTL_HANDLE *WINAPI RtlAllocateHandle(RTL_HANDLE_TABLE *, ULONG *)
struct _EVENT_BASIC_INFORMATION EVENT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtLockFile(HANDLE, HANDLE, PIO_APC_ROUTINE, void *, PIO_STATUS_BLOCK, PLARGE_INTEGER, PLARGE_INTEGER, ULONG *, BOOLEAN, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI LdrQueryImageFileExecutionOptions(const UNICODE_STRING *, LPCWSTR, ULONG, void *, ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtQueryDefaultLocale(BOOLEAN, LCID *)
NTSYSAPI NTSTATUS WINAPI NtCancelIoFileEx(HANDLE, PIO_STATUS_BLOCK, PIO_STATUS_BLOCK)
NTSYSAPI NTSTATUS WINAPI NtQueryInstallUILanguage(LANGID *)
NTSYSAPI NTSTATUS WINAPI RtlUnicodeToOemN(LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD)
struct _DBGKM_EXIT_THREAD DBGKM_EXIT_THREAD
struct _KEY_MULTIPLE_VALUE_INFORMATION KEY_MULTIPLE_VALUE_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtOpenObjectAuditAlarm(PUNICODE_STRING, PHANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, HANDLE, ACCESS_MASK, ACCESS_MASK, PPRIVILEGE_SET, BOOLEAN, BOOLEAN, PBOOLEAN)
NTSYSAPI BOOLEAN WINAPI RtlValidateHeap(HANDLE, ULONG, LPCVOID)
NTSYSAPI NTSTATUS WINAPI NtStopProfile(HANDLE)
NTSYSAPI BOOLEAN WINAPI RtlTimeToSecondsSince1980(const LARGE_INTEGER *, LPDWORD)
struct _NT_TIB32 NT_TIB32
struct _THREAD_DESCRIPTOR_INFORMATION THREAD_DESCRIPTOR_INFORMATION
union _LDR_DLL_NOTIFICATION_DATA LDR_DLL_NOTIFICATION_DATA
struct _FILE_EA_INFORMATION * PFILE_EA_INFORMATION
NTSYSAPI void WINAPI TpCallbackUnloadDllOnCompletion(TP_CALLBACK_INSTANCE *, HMODULE)
NTSYSAPI NTSTATUS WINAPI RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *)
NTSYSAPI NTSTATUS WINAPI NtCallbackReturn(PVOID, ULONG, NTSTATUS)
struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA * PLDR_DLL_UNLOADED_NOTIFICATION_DATA
NTSYSAPI NTSTATUS WINAPI NtCreateTimer(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, TIMER_TYPE)
NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObjectEx(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR *, GUID *, BOOLEAN, ULONG, HANDLE, PGENERIC_MAPPING)
struct _OBJECT_NAME_INFORMATION * POBJECT_NAME_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtDuplicateObject(HANDLE, HANDLE, HANDLE, PHANDLE, ACCESS_MASK, ULONG, ULONG)
struct _NLSTABLEINFO NLSTABLEINFO
struct _FILETIME * PFILETIME
NTSYSAPI NTSTATUS WINAPI LdrGetProcedureAddress(HMODULE, const ANSI_STRING *, ULONG, void **)
NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableCS(RTL_CONDITION_VARIABLE *, RTL_CRITICAL_SECTION *, const LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtCreateThread(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, HANDLE, PCLIENT_ID, PCONTEXT, PINITIAL_TEB, BOOLEAN)
enum _OBJECT_INFORMATION_CLASS * POBJECT_INFORMATION_CLASS
NTSYSAPI ULONG WINAPI RtlIsDosDeviceName_U(PCWSTR)
NTSYSAPI void *WINAPI RtlLocateExtendedFeature(CONTEXT_EX *, ULONG, ULONG *)
struct _FILE_BASIC_INFORMATION * PFILE_BASIC_INFORMATION
struct _THREAD_NAME_INFORMATION THREAD_NAME_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtOpenJobObject(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
struct _FILE_REPARSE_POINT_INFORMATION FILE_REPARSE_POINT_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtDebugActiveProcess(HANDLE, HANDLE)
struct _CPTABLEINFO * PCPTABLEINFO
NTSYSAPI NTSTATUS WINAPI LdrSetDllDirectory(const UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI NtAccessCheckAndAuditAlarm(PUNICODE_STRING, HANDLE, PUNICODE_STRING, PUNICODE_STRING, PSECURITY_DESCRIPTOR, ACCESS_MASK, PGENERIC_MAPPING, BOOLEAN, PACCESS_MASK, PBOOLEAN, PBOOLEAN)
struct _RTL_ATOM_TABLE ** PRTL_ATOM_TABLE
NTSYSAPI NTSTATUS WINAPI RtlQueryRegistryValues(ULONG, PCWSTR, PRTL_QUERY_REGISTRY_TABLE, PVOID, PVOID)
NTSYSAPI ULONG WINAPI RtlGetCurrentDirectory_U(ULONG, LPWSTR)
NTSYSAPI NTSTATUS WINAPI NtWaitForMultipleObjects(ULONG, const HANDLE *, BOOLEAN, BOOLEAN, const LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI RtlDeleteAce(PACL, DWORD)
struct _FILE_ACCESS_INFORMATION * PFILE_ACCESS_INFORMATION
NTSYSAPI SIZE_T WINAPI RtlSizeHeap(HANDLE, ULONG, const void *)
NTSYSAPI NTSTATUS WINAPI NtSetDebugFilterState(ULONG, ULONG, BOOLEAN)
struct _PS_CREATE_INFO * PPS_CREATE_INFO
struct _PEB_LDR_DATA64 * PPEB_LDR_DATA64
struct _DEBUG_HEAP_INFORMATION DEBUG_HEAP_INFORMATION
NTSYSAPI BOOLEAN WINAPI RtlFreeHeap(HANDLE, ULONG, PVOID)
struct _PROCESS_CYCLE_TIME_INFORMATION * PPROCESS_CYCLE_TIME_INFORMATION
struct _FILETIME FILETIME
NTSYSAPI CCHAR WINAPI RtlFindLeastSignificantBit(ULONGLONG)
NTSYSAPI NTSTATUS WINAPI LdrGetDllFullName(HMODULE, UNICODE_STRING *)
NTSYSAPI LONGLONG WINAPI RtlLargeIntegerAdd(LONGLONG, LONGLONG)
struct _FILETIME * LPFILETIME
struct _MEMORY_RANGE_ENTRY MEMORY_RANGE_ENTRY
struct tagRTL_BITMAP_RUN RTL_BITMAP_RUN
struct _FILE_DISPOSITION_INFORMATION FILE_DISPOSITION_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtOpenKey(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
struct _KERNEL_USER_TIMES * PKERNEL_USER_TIMES
NTSYSAPI NTSTATUS WINAPI NtSetValueKey(HANDLE, const UNICODE_STRING *, ULONG, ULONG, const void *, ULONG)
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME RTL_ACTIVATION_CONTEXT_STACK_FRAME
NTSYSAPI NTSTATUS WINAPI RtlSleepConditionVariableSRW(RTL_CONDITION_VARIABLE *, RTL_SRWLOCK *, const LARGE_INTEGER *, ULONG)
struct _LIST_ENTRY32 LIST_ENTRY32
struct _FILE_ALIGNMENT_INFORMATION FILE_ALIGNMENT_INFORMATION
@ LdrModulesWaitingForDependencies
NTSYSAPI NTSTATUS WINAPI NtQueryTimerResolution(PULONG, PULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI LdrAccessResource(HMODULE, const IMAGE_RESOURCE_DATA_ENTRY *, void **, PULONG)
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeKey(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, ULONG, BOOLEAN, PVOID, ULONG, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtUnloadKeyEx(POBJECT_ATTRIBUTES, HANDLE)
NTSYSAPI DWORD WINAPI RtlGetLastWin32Error(void)
@ ProcessEnableOptionalXStateFeatures
@ ProcessLUIDDeviceMapsEnabled
@ ProcessMemoryAllocationMode
@ ProcessManageWritesToExecutableMemory
@ ProcessEffectivePagePriority
@ ProcessEnableReadWriteVmLogging
@ ProcessDynamicEHContinuationTargets
@ ProcessCommitReleaseInformation
@ ProcessSubsystemInformation
@ ProcessEffectiveIoPriority
@ ProcessReserved3Information
@ ProcessFiberShadowStackAllocation
@ ProcessConsoleHostProcess
@ ProcessRevokeFileHandles
@ ProcessSessionInformation
@ ProcessPowerThrottlingState
@ ProcessCheckStackExtentsMode
@ ProcessApplyStateChange
@ ProcessWorkingSetWatchEx
@ ProcessInstrumentationCallback
@ ProcessImageFileMapping
@ ProcessAssignCpuPartitions
@ ProcessChildProcessInformation
@ ProcessDynamicFunctionTableInformation
@ ProcessLeapSecondInformation
@ ProcessAllowedCpuSetsInformation
@ ProcessDebugAuthInformation
@ ProcessTokenVirtualizationEnabled
@ ProcessImageInformation
@ ProcessSubsystemProcess
@ ProcessCommandLineInformation
@ ProcessCombineSecurityDomainsInformation
@ ProcessFaultInformation
@ ProcessPooledUsageAndLimits
@ ProcessFreeFiberShadowStackAllocation
@ ProcessDefaultCpuSetsInformation
@ ProcessImageFileNameWin32
@ ProcessMemoryExhaustion
@ ProcessDefaultHardErrorMode
@ ProcessAffinityUpdateMode
@ ProcessEnableAlignmentFaultFixup
@ ProcessRaiseUMExceptionOnInvalidHandleClose
@ ProcessHandleInformation
@ ProcessSecurityDomainInformation
@ ProcessSystemResourceManagement
@ ProcessTelemetryIdInformation
@ ProcessJobMemoryInformation
@ ProcessCreateStateChange
@ ProcessThreadStackAllocation
@ ProcessAltSystemCallInformation
@ ProcessForegroundInformation
@ ProcessWindowInformation
@ ProcessAltPrefetchParam
@ ProcessDebugObjectHandle
@ ProcessDynamicEnforcedCetCompatibleRanges
@ ProcessWin32kSyscallFilterInformation
@ ProcessHandleCheckingMode
@ ProcessCaptureTrustletLiveDump
@ ProcessDisableSystemAllowedCpuSets
@ ProcessEnergyTrackingState
@ ProcessProtectionInformation
@ ProcessMembershipInformation
@ ProcessGroupInformation
@ ProcessMitigationPolicy
@ ProcessUptimeInformation
@ ProcessIumChallengeResponse
@ ProcessTelemetryCoverage
@ ProcessWorkingSetControl
@ ProcessHighGraphicsPriorityInformation
@ ProcessEnclaveInformation
NTSYSAPI NTSTATUS WINAPI NtReleaseMutant(HANDLE, PLONG)
NTSYSAPI void WINAPI TpReleaseIoCompletion(TP_IO *)
NTSYSAPI NTSTATUS WINAPI RtlSetHeapInformation(HANDLE, HEAP_INFORMATION_CLASS, PVOID, SIZE_T)
struct _TEB_ACTIVE_FRAME_EX * PTEB_ACTIVE_FRAME_EX
void(CALLBACK * PNTAPCFUNC)(ULONG_PTR, ULONG_PTR, ULONG_PTR)
NTSYSAPI void WINAPI RtlDumpResource(LPRTL_RWLOCK)
struct _FILE_COMPLETION_INFORMATION * PFILE_COMPLETION_INFORMATION
struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION FILE_ID_GLOBAL_TX_DIR_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlFlsAlloc(PFLS_CALLBACK_FUNCTION, ULONG *)
struct _FILE_ALLOCATION_INFORMATION FILE_ALLOCATION_INFORMATION
struct _FILE_NAMES_INFORMATION * PFILE_NAMES_INFORMATION
struct _OBJECT_HANDLE_FLAG_INFORMATION * POBJECT_HANDLE_FLAG_INFORMATION
@ FileFsVolumeFlagsInformation
@ FileFsControlInformation
@ FileFsSectorSizeInformation
@ FileFsDeviceInformation
@ FileFsAttributeInformation
@ FileFsVolumeInformation
@ FileFsObjectIdInformation
@ FileFsMaximumInformation
@ FileFsDriverPathInformation
@ FileFsMetadataSizeInformation
@ FileFsFullSizeInformationEx
@ FileFsDataCopyInformation
@ FileFsFullSizeInformation
struct _GDI_TEB_BATCH GDI_TEB_BATCH
struct _WOW64_CPU_AREA_INFO * PWOW64_CPU_AREA_INFO
struct _KEY_VALUE_PARTIAL_INFORMATION KEY_VALUE_PARTIAL_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlGetUserPreferredUILanguages(DWORD, ULONG, ULONG *, WCHAR *, ULONG *)
NTSYSAPI NTSTATUS WINAPI RtlMakeSelfRelativeSD(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, LPDWORD)
struct _DEBUG_LOCK_INFORMATION DEBUG_LOCK_INFORMATION
@ SemaphoreBasicInformation
NTSYSAPI NTSTATUS WINAPI LdrRemoveDllDirectory(void *)
struct _RTL_RWLOCK * LPRTL_RWLOCK
NTSYSAPI NTSTATUS WINAPI RtlNewSecurityObject(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR *, BOOLEAN, HANDLE, PGENERIC_MAPPING)
NTSYSAPI NTSTATUS WINAPI RtlSetGroupSecurityDescriptor(PSECURITY_DESCRIPTOR, PSID, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtWriteVirtualMemory(HANDLE, void *, const void *, SIZE_T, SIZE_T *)
NTSYSAPI NTSTATUS WINAPI RtlFlsFree(ULONG)
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToMultiByteN(LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD)
NTSYSAPI void WINAPI RtlCopyLuidAndAttributesArray(ULONG, const LUID_AND_ATTRIBUTES *, PLUID_AND_ATTRIBUTES)
NTSYSAPI NTSTATUS WINAPI RtlInitializeExtendedContext(void *, ULONG, CONTEXT_EX **)
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighEventPair(HANDLE)
NTSYSAPI NTSTATUS WINAPI NtCreateIoCompletion(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, ULONG)
struct _FILE_MAILSLOT_QUERY_INFORMATION FILE_MAILSLOT_QUERY_INFORMATION
NTSYSAPI NTSTATUS WINAPI LdrGetDllDirectory(UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI RtlFlsGetValue(ULONG, void **)
enum _KEY_VALUE_INFORMATION_CLASS KEY_VALUE_INFORMATION_CLASS
NTSYSAPI void WINAPI RtlGetNtVersionNumbers(LPDWORD, LPDWORD, LPDWORD)
NTSYSAPI NTSTATUS WINAPI RtlDeleteSecurityObject(PSECURITY_DESCRIPTOR *)
NTSYSAPI void WINAPI RtlProcessFlsData(void *, ULONG)
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransactedEx(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, HANDLE)
NTSYSAPI PVOID WINAPI RtlAddVectoredExceptionHandler(ULONG, PVECTORED_EXCEPTION_HANDLER)
NTSYSAPI PVOID WINAPI RtlDecodePointer(PVOID)
NTSYSAPI NTSTATUS WINAPI NtUnloadDriver(const UNICODE_STRING *)
struct _GLOBAL_FLS_DATA * PGLOBAL_FLS_DATA
NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValueEx(PUNICODE_STRING, GUID *, void *, ULONG *, ULONG *)
NTSYSAPI NTSTATUS WINAPI RtlGetVersion(RTL_OSVERSIONINFOEXW *)
struct _FILE_ATTRIBUTE_TAG_INFORMATION * PFILE_ATTRIBUTE_TAG_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlGetExePath(PCWSTR, PWSTR *)
struct _DBGKM_UNLOAD_DLL * PDBGKM_UNLOAD_DLL
NTSYSAPI NTSTATUS WINAPI NtQueryOpenSubKeys(POBJECT_ATTRIBUTES, PULONG)
@ PsAttributeStdHandleInfo
@ PsAttributePriorityClass
@ PsAttributeWin32kFilter
@ PsAttributeBnoIsolation
@ PsAttributePreferredNode
@ PsAttributeSafeOpenPromptOriginClaim
@ PsAttributeMemoryReserve
@ PsAttributeProtectionLevel
@ PsAttributeGroupAffinity
@ PsAttributeMitigationAuditOptions
@ PsAttributeChildProcessPolicy
@ PsAttributeAllApplicationPackagesPolicy
@ PsAttributeMitigationOptions
@ PsAttributeSecureProcess
@ PsAttributeIdealProcessor
@ PsAttributeParentProcess
@ PsAttributeComponentFilter
@ PsAttributeEnableOptionalXStateFeatures
@ PsAttributeDesktopAppPolicy
NTSYSAPI NTSTATUS WINAPI RtlRetrieveNtUserPfn(const void **, const void **, const void **)
NTSYSAPI NTSTATUS WINAPI NtInitiatePowerAction(POWER_ACTION, SYSTEM_POWER_STATE, ULONG, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlQueryEnvironmentVariable(WCHAR *, const WCHAR *, SIZE_T, WCHAR *, SIZE_T, SIZE_T *)
NTSYSAPI NTSTATUS WINAPI RtlDuplicateUnicodeString(int, const UNICODE_STRING *, UNICODE_STRING *)
NTSYSAPI HANDLE WINAPI RtlDestroyHeap(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlSetSearchPathMode(ULONG)
NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE, CONTEXT *)
struct _TEB_FLS_DATA TEB_FLS_DATA
NTSYSAPI NTSTATUS WINAPI NtCreateToken(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, TOKEN_TYPE, PLUID, PLARGE_INTEGER, PTOKEN_USER, PTOKEN_GROUPS, PTOKEN_PRIVILEGES, PTOKEN_OWNER, PTOKEN_PRIMARY_GROUP, PTOKEN_DEFAULT_DACL, PTOKEN_SOURCE)
NTSYSAPI LONG WINAPI RtlCompareUnicodeStrings(const WCHAR *, SIZE_T, const WCHAR *, SIZE_T, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtNotifyChangeDirectoryFile(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, ULONG, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtTerminateJobObject(HANDLE, NTSTATUS)
struct _THREAD_NAME_INFORMATION * PTHREAD_NAME_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlUnicodeToCustomCPN(CPTABLEINFO *, char *, DWORD, DWORD *, const WCHAR *, DWORD)
struct _FILE_MAILSLOT_SET_INFORMATION * PFILE_MAILSLOT_SET_INFORMATION
struct _FILE_INTERNAL_INFORMATION FILE_INTERNAL_INFORMATION
NTSYSAPI LPDWORD WINAPI RtlSubAuthoritySid(PSID, DWORD)
struct _VM_COUNTERS * PVM_COUNTERS
NTSYSAPI NTSTATUS WINAPI NtDebugContinue(HANDLE, CLIENT_ID *, NTSTATUS)
struct _INITIAL_TEB * PINITIAL_TEB
void(CALLBACK * PRTL_THREAD_START_ROUTINE)(LPVOID)
NTSYSAPI NTSTATUS WINAPI TpAllocWait(TP_WAIT **, PTP_WAIT_CALLBACK, PVOID, TP_CALLBACK_ENVIRON *)
NTSYSAPI NTSTATUS WINAPI RtlDestroyAtomTable(RTL_ATOM_TABLE)
NTSYSAPI NTSTATUS WINAPI NtQueryIntervalProfile(KPROFILE_SOURCE, PULONG)
struct _FLS_CALLBACK * PFLS_CALLBACK
NTSYSAPI PEB *WINAPI RtlGetCurrentPeb(void)
NTSYSAPI NTSTATUS WINAPI NtAcceptConnectPort(PHANDLE, ULONG, PLPC_MESSAGE, BOOLEAN, PLPC_SECTION_WRITE, PLPC_SECTION_READ)
NTSYSAPI BOOLEAN WINAPI RtlValidRelativeSecurityDescriptor(PSECURITY_DESCRIPTOR, ULONG, SECURITY_INFORMATION)
NTSYSAPI NTSTATUS WINAPI NtQueueApcThread(HANDLE, PNTAPCFUNC, ULONG_PTR, ULONG_PTR, ULONG_PTR)
NTSYSAPI NTSTATUS WINAPI NtQuerySystemEnvironmentValue(PUNICODE_STRING, PWCHAR, ULONG, PULONG)
NTSYSAPI ULONGLONG WINAPI RtlConvertUlongToLargeInteger(ULONG)
NTSYSAPI NTSTATUS WINAPI RtlInitializeNtUserPfn(const void *, ULONG, const void *, ULONG, const void *, ULONG)
struct _FILE_ID_BOTH_DIRECTORY_INFORMATION * PFILE_ID_BOTH_DIRECTORY_INFORMATION
struct _SYSTEM_CPU_INFORMATION * PSYSTEM_CPU_INFORMATION
enum _SEMAPHORE_INFORMATION_CLASS * PSEMAPHORE_INFORMATION_CLASS
struct _MEMORY_WORKING_SET_EX_INFORMATION MEMORY_WORKING_SET_EX_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetLowEventPair(HANDLE)
struct _FILE_DISPOSITION_INFORMATION_EX FILE_DISPOSITION_INFORMATION_EX
struct _FILE_OBJECTID_INFORMATION * PFILE_OBJECTID_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlDeleteTimerQueueEx(HANDLE, HANDLE)
NTSYSAPI NTSTATUS WINAPI NtRaiseHardError(NTSTATUS, ULONG, ULONG, PVOID *, HARDERROR_RESPONSE_OPTION, PHARDERROR_RESPONSE)
struct _LPC_MESSAGE LPC_MESSAGE
NTSYSAPI NTSTATUS WINAPI NtPrivilegedServiceAuditAlarm(PUNICODE_STRING, PUNICODE_STRING, HANDLE, PPRIVILEGE_SET, BOOLEAN)
enum _KEY_INFORMATION_CLASS KEY_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeStringToCountedOemString(STRING *, const UNICODE_STRING *, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlFindMessage(HMODULE, ULONG, ULONG, ULONG, const MESSAGE_RESOURCE_ENTRY **)
NTSYSAPI NTSTATUS WINAPI NtQuerySecurityObject(HANDLE, SECURITY_INFORMATION, PSECURITY_DESCRIPTOR, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI NtCancelIoFile(HANDLE, PIO_STATUS_BLOCK)
NTSYSAPI NTSTATUS WINAPI NtLoadKey2(const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *, ULONG)
NTSYSAPI void WINAPI RtlReleaseRelativeName(RTL_RELATIVE_NAME *)
NTSYSAPI ULONG WINAPI RtlFindSetRuns(PCRTL_BITMAP, PRTL_BITMAP_RUN, ULONG, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtReleaseSemaphore(HANDLE, ULONG, PULONG)
NTSYSAPI void WINAPI RtlSecondsSince1970ToTime(DWORD, LARGE_INTEGER *)
struct _THREAD_BASIC_INFORMATION * PTHREAD_BASIC_INFORMATION
struct _FILE_ALIGNMENT_INFORMATION * PFILE_ALIGNMENT_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtLoadKeyEx(const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *, ULONG, HANDLE, HANDLE, ACCESS_MASK, HANDLE *, IO_STATUS_BLOCK *)
NTSYSAPI NTSTATUS WINAPI NtReadVirtualMemory(HANDLE, const void *, void *, SIZE_T, SIZE_T *)
struct _WOW64_CPURESERVED * PWOW64_CPURESERVED
struct _SYSTEM_CACHE_INFORMATION SYSTEM_CACHE_INFORMATION
NTSYSAPI void WINAPI TpSetPoolMaxThreads(TP_POOL *, DWORD)
NTSYSAPI void WINAPI TpCallbackReleaseMutexOnCompletion(TP_CALLBACK_INSTANCE *, HANDLE)
NTSYSAPI NTSTATUS WINAPI NtSetIoCompletionEx(HANDLE, HANDLE, ULONG_PTR, ULONG_PTR, NTSTATUS, SIZE_T)
NTSYSAPI NTSTATUS WINAPI RtlUnicodeStringToInteger(const UNICODE_STRING *, ULONG, ULONG *)
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeStringFromAsciiz(PUNICODE_STRING, LPCSTR)
NTSYSAPI NTSTATUS WINAPI NtQueryVirtualMemory(HANDLE, LPCVOID, MEMORY_INFORMATION_CLASS, PVOID, SIZE_T, SIZE_T *)
NTSYSAPI NTSTATUS WINAPI NtCreateJobObject(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
NTSYSAPI NTSTATUS WINAPI NtLoadKey(const OBJECT_ATTRIBUTES *, OBJECT_ATTRIBUTES *)
NTSYSAPI BOOLEAN WINAPI RtlIsValidHandle(const RTL_HANDLE_TABLE *, const RTL_HANDLE *)
NTSYSAPI NTSTATUS WINAPI RtlCheckRegistryKey(ULONG, PWSTR)
NTSYSAPI NTSTATUS WINAPI LdrSetDefaultDllDirectories(ULONG)
NTSYSAPI NTSTATUS WINAPI NtAlertResumeThread(HANDLE, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlDestroyHandleTable(RTL_HANDLE_TABLE *)
enum _LDR_DLL_LOAD_REASON LDR_DLL_LOAD_REASON
NTSYSAPI NTSTATUS WINAPI RtlDecompressBuffer(USHORT, PUCHAR, ULONG, PUCHAR, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeStringToString(UNICODE_STRING *, const UNICODE_STRING *)
struct _WOW64_CPURESERVED WOW64_CPURESERVED
NTSYSAPI NTSTATUS WINAPI NtImpersonateAnonymousToken(HANDLE)
struct _FILE_ID_128 * PFILE_ID_128
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToOemN(LPSTR, DWORD, LPDWORD, LPCWSTR, DWORD)
NTSYSAPI NTSTATUS WINAPI LdrFindResource_U(HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DATA_ENTRY **)
struct _KEY_VALUE_PARTIAL_INFORMATION * PKEY_VALUE_PARTIAL_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlAddMandatoryAce(PACL, DWORD, DWORD, DWORD, DWORD, PSID)
NTSYSAPI BOOLEAN WINAPI RtlUnlockHeap(HANDLE)
NTSYSAPI NTSTATUS WINAPI NtFlushInstructionCache(HANDLE, LPCVOID, SIZE_T)
struct _KEY_VALUE_BASIC_INFORMATION * PKEY_VALUE_BASIC_INFORMATION
struct _PS_CREATE_INFO PS_CREATE_INFO
NTSYSAPI NTSTATUS WINAPI RtlDeleteAtomFromAtomTable(RTL_ATOM_TABLE, RTL_ATOM)
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReplyPort(HANDLE, PLPC_MESSAGE)
NTSYSAPI NTSTATUS WINAPI NtFilterToken(HANDLE, ULONG, TOKEN_GROUPS *, TOKEN_PRIVILEGES *, TOKEN_GROUPS *, HANDLE *)
struct __OBJECT_TYPE_INFORMATION OBJECT_TYPE_INFORMATION
struct _KEY_NAME_INFORMATION KEY_NAME_INFORMATION
struct _MANAGE_WRITES_TO_EXECUTABLE_MEMORY * PMANAGE_WRITES_TO_EXECUTABLE_MEMORY
NTSYSAPI NTSTATUS WINAPI RtlCreateRegistryKey(ULONG, PWSTR)
NTSYSAPI void WINAPI TpCallbackReleaseSemaphoreOnCompletion(TP_CALLBACK_INSTANCE *, HANDLE, DWORD)
struct RTL_DRIVE_LETTER_CURDIR * PRTL_DRIVE_LETTER_CURDIR
NTSYSAPI NTSTATUS WINAPI RtlSystemTimeToLocalTime(const LARGE_INTEGER *, PLARGE_INTEGER)
struct _PEB_LDR_DATA32 PEB_LDR_DATA32
NTSYSAPI NTSTATUS WINAPI RtlGetAce(PACL, DWORD, LPVOID *)
struct _MEMORY_REGION_INFORMATION * PMEMORY_REGION_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtCreateProfile(PHANDLE, HANDLE, PVOID, ULONG, ULONG, PVOID, ULONG, KPROFILE_SOURCE, KAFFINITY)
struct _FILE_COMPLETION_INFORMATION FILE_COMPLETION_INFORMATION
NTSYSAPI NTSTATUS WINAPI TpAllocWork(TP_WORK **, PTP_WORK_CALLBACK, PVOID, TP_CALLBACK_ENVIRON *)
NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlDeNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS *)
NTSYSAPI NTSTATUS WINAPI RtlAddAce(PACL, DWORD, DWORD, PACE_HEADER, DWORD)
NTSYSAPI NTSTATUS WINAPI RtlSetCurrentDirectory_U(const UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI DbgUiConvertStateChangeStructure(DBGUI_WAIT_STATE_CHANGE *, struct _DEBUG_EVENT *)
NTSYSAPI void WINAPI RtlWakeConditionVariable(RTL_CONDITION_VARIABLE *)
NTSYSAPI NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(PSECURITY_DESCRIPTOR, PSECURITY_DESCRIPTOR, PDWORD, PACL, PDWORD, PACL, PDWORD, PSID, PDWORD, PSID, PDWORD)
struct _FILE_STANDARD_INFORMATION FILE_STANDARD_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlCreateUserProcess(UNICODE_STRING *, ULONG, RTL_USER_PROCESS_PARAMETERS *, SECURITY_DESCRIPTOR *, SECURITY_DESCRIPTOR *, HANDLE, BOOLEAN, HANDLE, HANDLE, RTL_USER_PROCESS_INFORMATION *)
NTSYSAPI NTSTATUS WINAPI NtFlushWriteBuffer(VOID)
NTSYSAPI void WINAPI RtlSetExtendedFeaturesMask(CONTEXT_EX *, ULONG64)
struct _MEMORY_REGION_INFORMATION MEMORY_REGION_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlIntegerToUnicodeString(ULONG, ULONG, UNICODE_STRING *)
NTSYSAPI NTSTATUS WINAPI NtGetNextThread(HANDLE, HANDLE, ACCESS_MASK, ULONG, ULONG, HANDLE *)
struct _TEB_ACTIVE_FRAME_CONTEXT TEB_ACTIVE_FRAME_CONTEXT
NTSYSAPI NTSTATUS WINAPI NtWriteFile(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, const void *, ULONG, PLARGE_INTEGER, PULONG)
struct _DBGUI_CREATE_PROCESS DBGUI_CREATE_PROCESS
NTSYSAPI NTSTATUS WINAPI RtlWow64EnableFsRedirectionEx(ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI RtlQueryPackageIdentity(HANDLE, WCHAR *, SIZE_T *, WCHAR *, SIZE_T *, BOOLEAN *)
struct _THREAD_DESCRIPTOR_INFORMATION * PTHREAD_DESCRIPTOR_INFORMATION
NTSYSAPI ULONG WINAPI RtlNtStatusToDosError(NTSTATUS)
struct _FILE_EA_INFORMATION FILE_EA_INFORMATION
struct _RTL_HEAP_PARAMETERS * PRTL_HEAP_PARAMETERS
NTSYSAPI ULONGLONG WINAPI RtlEnlargedUnsignedMultiply(UINT, UINT)
NTSYSAPI NTSTATUS WINAPI NtContinue(PCONTEXT, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtAreMappedFilesTheSame(PVOID, PVOID)
struct _SYSTEM_DRIVER_INFORMATION SYSTEM_DRIVER_INFORMATION
struct _FLS_CALLBACK FLS_CALLBACK
NTSYSAPI NTSTATUS WINAPI NtQueryMutant(HANDLE, MUTANT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
NTSYSAPI void WINAPI RtlPushFrame(TEB_ACTIVE_FRAME *)
NTSYSAPI NTSTATUS WINAPI RtlCreateActivationContext(HANDLE *, const void *)
NTSYSAPI NTSTATUS WINAPI NtPulseEvent(HANDLE, LONG *)
NTSYSAPI NTSTATUS WINAPI NtCancelTimer(HANDLE, BOOLEAN *)
struct _FILE_MAILSLOT_QUERY_INFORMATION * PFILE_MAILSLOT_QUERY_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlCreateUserThread(HANDLE, SECURITY_DESCRIPTOR *, BOOLEAN, ULONG, SIZE_T, SIZE_T, PRTL_THREAD_START_ROUTINE, void *, HANDLE *, CLIENT_ID *)
NTSYSAPI NTSTATUS WINAPI RtlInitializeCriticalSection(RTL_CRITICAL_SECTION *)
struct _LDR_DDAG_NODE LDR_DDAG_NODE
NTSYSAPI void WINAPI TpReleaseCleanupGroupMembers(TP_CLEANUP_GROUP *, BOOL, PVOID)
NTSYSAPI void DECLSPEC_NORETURN WINAPI RtlExitUserProcess(ULONG)
NTSYSAPI NTSTATUS WINAPI NtReplaceKey(POBJECT_ATTRIBUTES, HANDLE, POBJECT_ATTRIBUTES)
NTSYSAPI WCHAR WINAPI RtlDowncaseUnicodeChar(WCHAR)
NTSYSAPI void WINAPI RtlWakeAddressSingle(const void *)
NTSYSAPI void *WINAPI RtlLocateLegacyContext(CONTEXT_EX *, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtOpenKeyTransacted(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, HANDLE)
NTSYSAPI void WINAPI TpReleaseCleanupGroup(TP_CLEANUP_GROUP *)
NTSYSAPI void WINAPI RtlInitNlsTables(USHORT *, USHORT *, USHORT *, NLSTABLEINFO *)
struct _SYSTEM_TIME_ADJUSTMENT SYSTEM_TIME_ADJUSTMENT
NTSYSAPI NTSTATUS WINAPI RtlLargeIntegerToChar(const ULONGLONG *, ULONG, ULONG, PCHAR)
NTSYSAPI NTSTATUS WINAPI RtlCreateAcl(PACL, DWORD, DWORD)
NTSYSAPI NTSTATUS WINAPI NtSystemDebugControl(SYSDBG_COMMAND, PVOID, ULONG, PVOID, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI wine_nt_to_unix_file_name(const OBJECT_ATTRIBUTES *attr, char *nameA, ULONG *size, UINT disposition)
NTSYSAPI NTSTATUS WINAPI NtResetWriteWatch(HANDLE, PVOID, SIZE_T)
NTSYSAPI NTSTATUS WINAPI NtCompareTokens(HANDLE, HANDLE, BOOLEAN *)
NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToNtPathName_U_WithStatus(PCWSTR, PUNICODE_STRING, PWSTR *, CURDIR *)
NTSYSAPI ULONG64 WINAPI RtlGetExtendedFeaturesMask(CONTEXT_EX *)
NTSYSAPI NTSTATUS WINAPI NtWaitForAlertByThreadId(const void *, const LARGE_INTEGER *)
enum _FSINFOCLASS FS_INFORMATION_CLASS
struct _FILE_DIRECTORY_INFORMATION * PFILE_DIRECTORY_INFORMATION
struct _FILE_PIPE_INFORMATION * PFILE_PIPE_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryInformationToken(HANDLE, TOKEN_INFORMATION_CLASS, PVOID, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI LdrAddRefDll(ULONG, HMODULE)
NTSYSAPI NTSTATUS WINAPI NtGetWriteWatch(HANDLE, ULONG, PVOID, SIZE_T, PVOID *, ULONG_PTR *, ULONG *)
union _LDR_DLL_NOTIFICATION_DATA * PLDR_DLL_NOTIFICATION_DATA
NTSYSAPI void WINAPI TpSetTimer(TP_TIMER *, LARGE_INTEGER *, LONG, LONG)
NTSYSAPI void WINAPI RtlResetRtlTranslations(const NLSTABLEINFO *)
NTSYSAPI void WINAPI RtlUserThreadStart(PRTL_THREAD_START_ROUTINE, void *)
enum _PS_ATTRIBUTE_NUM PS_ATTRIBUTE_NUM
NTSYSAPI NTSTATUS WINAPI RtlFindCharInUnicodeString(int, const UNICODE_STRING *, const UNICODE_STRING *, USHORT *)
NTSYSAPI NTSTATUS WINAPI NtReadFile(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, PLARGE_INTEGER, PULONG)
NTSYSAPI void *WINAPI RtlFindExportedRoutineByName(HMODULE, const char *)
struct _RTL_QUERY_REGISTRY_TABLE RTL_QUERY_REGISTRY_TABLE
NTSYSAPI NTSTATUS WINAPI NtRemoveProcessDebug(HANDLE, HANDLE)
struct _FILE_DISPOSITION_INFORMATION * PFILE_DISPOSITION_INFORMATION
NTSYSAPI void WINAPI TpCallbackSetEventOnCompletion(TP_CALLBACK_INSTANCE *, HANDLE)
enum _SEMAPHORE_INFORMATION_CLASS SEMAPHORE_INFORMATION_CLASS
struct _FILE_MODE_INFORMATION * PFILE_MODE_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlQueryHeapInformation(HANDLE, HEAP_INFORMATION_CLASS, PVOID, SIZE_T, PSIZE_T)
struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX PROCESS_STACK_ALLOCATION_INFORMATION_EX
struct _FILE_ID_128 FILE_ID_128
NTSYSAPI BOOLEAN WINAPI RtlGetUserInfoHeap(HANDLE, ULONG, void *, void **, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtContinueEx(CONTEXT *, KCONTINUE_ARGUMENT *)
NTSYSAPI BOOLEAN WINAPI RtlGetNtProductType(LPDWORD)
struct _KEY_FULL_INFORMATION * PKEY_FULL_INFORMATION
struct _FILE_STREAM_INFORMATION FILE_STREAM_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlIdnToUnicode(DWORD, const WCHAR *, INT, WCHAR *, INT *)
NTSYSAPI LONGLONG WINAPI RtlGetSystemTimePrecise(void)
struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG, ULONG, void *, void **, SIZE_T *)
NTSYSAPI NTSTATUS WINAPI NtResumeThread(HANDLE, PULONG)
NTSYSAPI NTSTATUS WINAPI NtMakePermanentObject(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlpNtSetValueKey(HANDLE, ULONG, const void *, ULONG)
struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION * PFILE_ID_GLOBAL_TX_DIR_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtWow64ReadVirtualMemory64(HANDLE, ULONG64, void *, ULONG64, ULONG64 *)
NTSYSAPI NTSTATUS WINAPI RtlOpenCurrentUser(ACCESS_MASK, PHANDLE)
enum _LDR_DLL_LOAD_REASON * PLDR_DLL_LOAD_REASON
NTSYSAPI NTSTATUS WINAPI NtReleaseKeyedEvent(HANDLE, const void *, BOOLEAN, const LARGE_INTEGER *)
NTSYSAPI NTSTATUS WINAPI NtCreateEvent(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, EVENT_TYPE, BOOLEAN)
struct RTL_DRIVE_LETTER_CURDIR RTL_DRIVE_LETTER_CURDIR
NTSYSAPI void WINAPI RtlSecondsSince1980ToTime(DWORD, LARGE_INTEGER *)
struct _FILE_POSITION_INFORMATION * PFILE_POSITION_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlGetActiveActivationContext(HANDLE *)
NTSYSAPI LONGLONG WINAPI RtlEnlargedIntegerMultiply(INT, INT)
struct _PROCESS_STACK_ALLOCATION_INFORMATION PROCESS_STACK_ALLOCATION_INFORMATION
struct _PROCESS_BASIC_INFORMATION64 PROCESS_BASIC_INFORMATION64
NTSYSAPI NTSTATUS WINAPI RtlCreateUserStack(SIZE_T, SIZE_T, ULONG, SIZE_T, SIZE_T, INITIAL_TEB *)
NTSYSAPI BOOLEAN WINAPI RtlIsProcessorFeaturePresent(UINT)
NTSYSAPI void WINAPI RtlInitializeSRWLock(RTL_SRWLOCK *)
NTSYSAPI NTSTATUS WINAPI NtSuspendThread(HANDLE, PULONG)
NTSYSAPI NTSTATUS WINAPI TpSimpleTryPost(PTP_SIMPLE_CALLBACK, PVOID, TP_CALLBACK_ENVIRON *)
NTSYSAPI NTSTATUS WINAPI NtSetDefaultUILanguage(LANGID)
NTSYSAPI NTSTATUS WINAPI RtlDestroyEnvironment(PWSTR)
NTSYSAPI NTSTATUS WINAPI RtlSetTimeZoneInformation(const RTL_TIME_ZONE_INFORMATION *)
struct _LPC_SECTION_READ * PLPC_SECTION_READ
NTSYSAPI NTSTATUS WINAPI RtlSetDaclSecurityDescriptor(PSECURITY_DESCRIPTOR, BOOLEAN, PACL, BOOLEAN)
NTSYSAPI NTSTATUS WINAPI RtlCreateAtomTable(ULONG, RTL_ATOM_TABLE *)
NTSYSAPI PRTL_USER_PROCESS_PARAMETERS WINAPI RtlNormalizeProcessParams(RTL_USER_PROCESS_PARAMETERS *)
struct _RTL_PROCESS_MODULE_INFORMATION * PRTL_PROCESS_MODULE_INFORMATION
struct _KCONTINUE_ARGUMENT KCONTINUE_ARGUMENT
NTSYSAPI NTSTATUS WINAPI NtWaitForDebugEvent(HANDLE, BOOLEAN, LARGE_INTEGER *, DBGUI_WAIT_STATE_CHANGE *)
struct _SYSTEM_HANDLE_INFORMATION_EX SYSTEM_HANDLE_INFORMATION_EX
struct _FILE_BOTH_DIRECTORY_INFORMATION * PFILE_BOTH_DIR_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlGetExtendedContextLength(ULONG, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtOpenSymbolicLinkObject(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
struct _ACTIVATION_CONTEXT_STACK * PACTIVATION_CONTEXT_STACK
@ SystemFullProcessInformation
@ SystemMemoryChannelInformation
@ SystemCodeIntegrityPolicyInformation
@ SystemSessionInformation
@ SystemDifClearRuleClassInformation
@ SystemSupportedProcessorArchitectures
@ SystemErrorPortTimeouts
@ SystemSystemPtesInformationEx
@ SystemPortableWorkspaceEfiLauncherInformation
@ SystemCodeIntegrityCertificateInformation
@ SystemIntegrityQuotaInformation
@ SystemRegistryAppendString
@ SystemCodeIntegrityPolicyFullInformation
@ SystemCurrentTimeZoneInformation
@ SystemFlags2Information
@ SystemVerifierCancellationInformation
@ SystemSuperfetchInformation
@ SystemProcessorMicrocodeUpdateInformation
@ SystemTimeSlipNotification
@ SystemConsoleInformation
@ SystemScrubPhysicalMemoryInformation
@ SystemSecureBootInformation
@ SystemHypervisorSharedPageInformation
@ SystemProcessorPerformanceDistribution
@ SystemKernelDebuggerInformation
@ SystemWheaIpmiHardwareInformation
@ SystemBasicPerformanceInformation
@ SystemProcessorPowerInformation
@ SystemElamCertificateInformation
@ SystemPlatformBinaryInformation
@ SystemFirmwareTableInformation
@ SystemWorkloadAllowedCpuSetsInformation
@ SystemAllowedCpuSetsInformation
@ SystemOfflineDumpConfigInformation
@ SystemProcessorBrandString
@ SystemMemoryTopologyInformation
@ SystemAffinitizedInterruptProcessorInformation
@ SystemNumaProximityNodeInformation
@ SystemWin32WerStartCallout
@ SystemDifSetRuleClassInformation
@ SystemBootLogoInformation
@ SystemLogicalProcessorInformation
@ SystemCodeIntegrityPlatformManifestInformation
@ SystemSecureKernelDebuggerInformation
@ SystemSingleModuleInformation
@ SystemModuleInformation
@ SystemMemoryListInformation
@ SystemSecureKernelProfileInformation
@ SystemBuildVersionInformation
@ SystemCodeIntegrityPoliciesFullInformation
@ SystemProcessorIdleMaskInformation
@ SystemVerifierTriageInformation
@ SystemVerifierInformation
@ SystemDpcBehaviorInformation
@ SystemProcessorPerformanceInformationEx
@ SystemEmulationBasicInformation
@ SystemBigPoolInformation
@ SystemSpecialPoolInformation
@ SystemSingleProcessorRelationshipInformation
@ SystemSessionProcessesInformation
@ SystemSecureBootPolicyInformation
@ SystemCoverageInformation
@ SystemSpacesBootInformation
@ SystemVdmInstemulInformation
@ SystemProcessorCycleStatsInformation
@ SystemImageFileExecutionOptionsInformation
@ SystemVerifierAddDriverInformation
@ SystemCodeIntegrityInformation
@ SystemTrustedPlatformModuleInformation
@ SystemModuleInformationEx
@ SystemCodeIntegrityClearDynamicStores
@ SystemNodeDistanceInformation
@ SystemBadPageInformation
@ SystemMirrorMemoryInformation
@ SystemExtendServiceTableInformation
@ SystemNonPagedPoolInformation
@ SystemProcessIdInformation
@ SystemFeatureUsageSubscriptionInformation
@ SystemLostDelayedWriteInformation
@ SystemCpuQuotaInformation
@ SystemCodeIntegrityAddDynamicStore
@ SystemPointerAuthInformation
@ SystemBootEnvironmentInformation
@ SystemProcessorFeaturesInformation
@ SystemHypervisorDetailInformation
@ SystemSecureDumpEncryptionInformation
@ SystemSecureSpeculationControlInformation
@ SystemHypervisorMinrootInformation
@ SystemDynamicTimeZoneInformation
@ SystemUnloadGdiDriverInformation
@ SystemBootGraphicsInformation
@ SystemFileCacheInformation
@ SystemPoolZeroingInformation
@ SystemPrioritySeparation
@ SystemRecommendedSharedDataAlignment
@ SystemKernelDebuggerInformationEx
@ SystemRefTraceInformation
@ SystemWriteConstraintInformation
@ SystemExtendedHandleInformation
@ SystemWatchdogTimerHandler
@ SystemVerifierFaultsInformation
@ SystemSecurityModelInformation
@ SystemIsolatedUserModeInformation
@ SystemPoolLimitInformation
@ SystemTimeZoneInformation
@ SystemXfgCheckFailureInformation
@ SystemActivityModerationExeState
@ SystemVirtualAddressInformation
@ SystemVerifierCountersInformation
@ SystemProcessorIdleInformation
@ SystemSessionMappedViewInformation
@ SystemHandleInformation
@ SystemEmulationProcessorInformation
@ SystemLogicalProcessorInformationEx
@ SystemSpeculationControlInformation
@ SystemPagedPoolInformationEx
@ SystemVdmBopInformation
@ SystemFeatureConfigurationSectionInformation
@ SystemVerifierRemoveDriverInformation
@ SystemSupportedProcessorArchitectures2
@ SystemLowPriorityIoInformation
@ SystemDifApplyPluginVerificationOnDriver
@ SystemProcessorPowerInformationEx
@ SystemWatchdogTimerInformation
@ SystemCodeIntegrityUnlockModeInformation
@ SystemCallTimeInformation
@ SystemKernelDebuggingAllowed
@ SystemCodeIntegritySyntheticCacheInformation
@ SystemExtendedProcessInformation
@ SystemThreadPriorityClientIdInformation
@ SystemContextSwitchInformation
@ SystemEntropyInterruptTimingRawInformation
@ SystemDifRemovePluginVerificationOnDriver
@ SystemVerifierInformationEx
@ SystemCpuSetInformation
@ SystemTimeAdjustmentInformation
@ SystemQueryPerformanceCounterInformation
@ SystemFullMemoryInformation
@ SystemPhysicalMemoryInformation
@ SystemLeapSecondInformation
@ SystemSystemDiskInformation
@ SystemRangeStartInformation
@ SystemObjectSecurityMode
@ SystemNativeBasicInformation
@ SystemRegisterFirmwareTableInformationHandler
@ SystemCodeIntegrityUnlockInformation
@ SystemFeatureConfigurationInformation
@ SystemEnergyEstimationConfigInformation
@ SystemSoftRebootInformation
@ SystemPageFileInformation
@ SystemFwRamdiskInformation
@ SystemOriginalImageFeatureInformation
@ SystemKernelVaShadowInformation
@ SystemStackTraceInformation
@ SystemVmGenerationCountInformation
@ SystemBootMetadataInformation
@ SystemPageFileInformationEx
@ SystemDeviceDataInformation
@ SystemVerifierThunkExtend
@ SystemPrefetchPatchInformation
@ SystemCriticalProcessErrorLogInformation
@ SystemShadowStackInformation
@ SystemEnclaveLaunchControlInformation
@ SystemSecureBootPolicyFullInformation
@ SystemObjectInformation
@ SystemCpuSetTagInformation
@ SystemInterruptCpuSetsInformation
@ SystemSessionPoolTagInformation
@ SystemLoadGdiDriverInformation
@ SystemHypervisorInformation
@ SystemAcpiAuditInformation
@ SystemCombinePhysicalMemoryInformation
@ SystemSessionBigPoolInformation
@ SystemHardwareSecurityTestInterfaceResultsInformation
@ SystemMemoryUsageInformation
@ SystemFileCacheInformationEx
@ SystemHypervisorBootPagesInformation
@ SystemProcessorIdleCycleTimeInformation
@ SystemErrorPortInformation
@ SystemProcessorProfileControlArea
@ SystemDeviceInformation
@ SystemSummaryMemoryInformation
@ SystemFirmwareBootPerformanceInformation
@ SystemHotpatchInformation
@ SystemPagedPoolInformation
@ SystemDeviceDataEnumerationInformation
@ SystemCrashDumpStateInformation
@ SystemVsmProtectionInformation
@ SystemCodeIntegrityVerificationInformation
@ SystemDpcWatchdogInformation
@ SystemDmaGuardPolicyInformation
@ SystemRegistryReconciliationInformation
@ SystemWow64SharedInformationObsolete
@ SystemPerformanceTraceInformation
@ SystemDifPoolTrackingInformation
@ SystemCallCountInformation
@ SystemVhdBootInformation
@ SystemSystemPartitionInformation
@ SystemPoolTagInformation
@ SystemLoadGdiDriverInSystemSpace
@ SystemIommuStateInformation
@ SystemFirmwarePartitionInformation
@ SystemManufacturingInformation
@ SystemControlFlowTransition
@ SystemRootSiloInformation
@ SystemEntropyInterruptTimingInformation
@ SystemNumaAvailableMemory
@ SystemProcessorCycleTimeInformation
@ SystemActivityModerationUserSettings
@ SystemTpmBootEntropyInformation
@ SystemKernelDebuggerFlags
@ SystemLegacyDriverInformation
@ SystemDpcWatchdogInformation2
@ SystemPrefetcherInformation
@ SystemHypervisorProcessorCountInformation
@ SystemInterruptSteeringInformation
enum _LDR_DDAG_STATE LDR_DDAG_STATE
NTSYSAPI void WINAPI LdrShutdownThread(void)
NTSYSAPI NTSTATUS WINAPI DbgUiIssueRemoteBreakin(HANDLE)
NTSYSAPI NTSTATUS WINAPI RtlLookupAtomInAtomTable(RTL_ATOM_TABLE, const WCHAR *, RTL_ATOM *)
NTSYSAPI NTSTATUS WINAPI LdrFindResourceDirectory_U(HMODULE, const LDR_RESOURCE_INFO *, ULONG, const IMAGE_RESOURCE_DIRECTORY **)
NTSTATUS WINAPI Wow64KiUserCallbackDispatcher(ULONG, void *, ULONG, void **, ULONG *)
struct _DBGUI_WAIT_STATE_CHANGE DBGUI_WAIT_STATE_CHANGE
NTSYSAPI HANDLE WINAPI RtlGetCurrentTransaction(void)
NTSYSAPI NTSTATUS WINAPI TpCallbackMayRunLong(TP_CALLBACK_INSTANCE *)
NTSYSAPI NTSTATUS WINAPI RtlFormatCurrentUserKeyPath(PUNICODE_STRING)
NTSYSAPI NTSTATUS WINAPI RtlUpcaseUnicodeToCustomCPN(CPTABLEINFO *, char *, DWORD, DWORD *, const WCHAR *, DWORD)
NTSYSAPI NTSTATUS WINAPI RtlAppendUnicodeToString(UNICODE_STRING *, LPCWSTR)
NTSYSAPI BOOLEAN WINAPI RtlTryAcquireSRWLockExclusive(RTL_SRWLOCK *)
VOID(CALLBACK * PTIMER_APC_ROUTINE)(PVOID, ULONG, LONG)
NTSYSAPI BOOL WINAPI RtlTryEnterCriticalSection(RTL_CRITICAL_SECTION *)
struct _FILE_ALL_INFORMATION FILE_ALL_INFORMATION
NTSYSAPI BOOLEAN WINAPI RtlGetProductInfo(DWORD, DWORD, DWORD, DWORD, PDWORD)
struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA LDR_DLL_UNLOADED_NOTIFICATION_DATA
struct _PROCESS_STACK_ALLOCATION_INFORMATION * PPROCESS_STACK_ALLOCATION_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtCreateEventPair(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
NTSYSAPI NTSTATUS WINAPI RtlHashUnicodeString(const UNICODE_STRING *, BOOLEAN, ULONG, ULONG *)
struct _FILE_FULL_EA_INFORMATION FILE_FULL_EA_INFORMATION
@ SectionRelocationInformation
@ SectionBasicInformation
@ SectionImageInformation
@ SectionOriginalBaseInformation
@ SectionInternalImageInformation
struct _PS_ATTRIBUTE_LIST PS_ATTRIBUTE_LIST
NTSYSAPI NTSTATUS WINAPI RtlQueryInformationActivationContext(ULONG, HANDLE, PVOID, ULONG, PVOID, SIZE_T, SIZE_T *)
struct _SYSTEM_TIME_ADJUSTMENT_QUERY SYSTEM_TIME_ADJUSTMENT_QUERY
struct _FILE_INTERNAL_INFORMATION * PFILE_INTERNAL_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlCreateEnvironment(BOOLEAN, PWSTR *)
NTSYSAPI NTSTATUS WINAPI NtOpenIoCompletion(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *)
struct _FILE_PIPE_LOCAL_INFORMATION * PFILE_PIPE_LOCAL_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlpNtCreateKey(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, ULONG, const UNICODE_STRING *, ULONG, PULONG)
NTSYSAPI NTSTATUS WINAPI NtEnumerateKey(HANDLE, ULONG, KEY_INFORMATION_CLASS, void *, DWORD, DWORD *)
NTSYSAPI NTSTATUS WINAPI RtlIsNormalizedString(ULONG, const WCHAR *, INT, BOOLEAN *)
struct _TEB_ACTIVE_FRAME_CONTEXT_EX * PTEB_ACTIVE_FRAME_CONTEXT_EX
NTSYSAPI NTSTATUS WINAPI RtlAddAccessDeniedAce(PACL, DWORD, DWORD, PSID)
NTSYSAPI NTSTATUS WINAPI RtlpNtEnumerateSubKey(HANDLE, UNICODE_STRING *, ULONG)
NTSYSAPI NTSTATUS WINAPI NtSetEaFile(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG)
struct _RTL_ATOM_TABLE_ENTRY * PRTL_ATOM_TABLE_ENTRY
NTSYSAPI NTSTATUS WINAPI NtSetIoCompletion(HANDLE, ULONG_PTR, ULONG_PTR, NTSTATUS, SIZE_T)
struct _CHPE_V2_CPU_AREA_INFO * PCHPE_V2_CPU_AREA_INFO
NTSYSAPI BOOLEAN WINAPI RtlLockHeap(HANDLE)
struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION * PSYSTEM_KERNEL_DEBUGGER_INFORMATION
struct _NLSTABLEINFO * PNLSTABLEINFO
enum _TIMER_INFORMATION_CLASS TIMER_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI RtlAdjustPrivilege(ULONG, BOOLEAN, BOOLEAN, PBOOLEAN)
NTSYSAPI NTSTATUS WINAPI NtTerminateProcess(HANDLE, LONG)
NTSYSAPI NTSTATUS WINAPI NtQueryDirectoryFile(HANDLE, HANDLE, PIO_APC_ROUTINE, PVOID, PIO_STATUS_BLOCK, PVOID, ULONG, FILE_INFORMATION_CLASS, BOOLEAN, PUNICODE_STRING, BOOLEAN)
struct _UNICODE_STRING64 UNICODE_STRING64
NTSYSAPI void WINAPI RtlSetLastWin32Error(DWORD)
NTSYSAPI NTSTATUS WINAPI DbgUiContinue(CLIENT_ID *, NTSTATUS)
NTSYSAPI NTSTATUS WINAPI LdrGetDllHandleEx(ULONG, LPCWSTR, ULONG *, const UNICODE_STRING *, HMODULE *)
NTSYSAPI NTSTATUS WINAPI NtCompareObjects(HANDLE, HANDLE)
struct _FILE_BOTH_DIRECTORY_INFORMATION FILE_BOTH_DIR_INFORMATION
struct _CHPE_V2_CPU_AREA_INFO CHPE_V2_CPU_AREA_INFO
struct _OBJECT_BASIC_INFORMATION * POBJECT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryFullAttributesFile(const OBJECT_ATTRIBUTES *, FILE_NETWORK_OPEN_INFORMATION *)
@ DbgBreakpointStateChange
@ DbgCreateProcessStateChange
@ DbgCreateThreadStateChange
@ DbgExitProcessStateChange
@ DbgExceptionStateChange
@ DbgUnloadDllStateChange
@ DbgExitThreadStateChange
@ DbgSingleStepStateChange
struct _EVENT_BASIC_INFORMATION * PEVENT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtWow64GetNativeSystemInformation(SYSTEM_INFORMATION_CLASS, void *, ULONG, ULONG *)
struct _LPC_SECTION_READ LPC_SECTION_READ
struct _CURDIR64 CURDIR64
struct _RTL_USER_PROCESS_PARAMETERS64 RTL_USER_PROCESS_PARAMETERS64
@ IoCompletionBasicInformation
NTSYSAPI NTSTATUS WINAPI NtSetLowWaitHighThread(VOID)
enum _MEMORY_RESERVE_OBJECT_TYPE PMEMORY_RESERVE_OBJECT_TYPE
struct _CURDIR32 CURDIR32
NTSYSAPI NTSTATUS WINAPI LdrLoadDll(LPCWSTR, DWORD, const UNICODE_STRING *, HMODULE *)
void(CALLBACK * PTP_IO_CALLBACK)(PTP_CALLBACK_INSTANCE, void *, void *, IO_STATUS_BLOCK *, PTP_IO)
NTSYSAPI NTSTATUS WINAPI NtSetHighEventPair(HANDLE)
NTSYSAPI void WINAPI RtlReleaseSRWLockShared(RTL_SRWLOCK *)
NTSYSAPI NTSTATUS WINAPI NtReplyWaitReceivePort(HANDLE, PULONG, PLPC_MESSAGE, PLPC_MESSAGE)
NTSYSAPI NTSTATUS WINAPI NtAllocateLocallyUniqueId(PLUID lpLuid)
NTSYSAPI BOOL WINAPI TpSetPoolMinThreads(TP_POOL *, DWORD)
NTSYSAPI NTSTATUS WINAPI NtCreateSemaphore(PHANDLE, ACCESS_MASK, const OBJECT_ATTRIBUTES *, LONG, LONG)
NTSYSAPI NTSTATUS WINAPI NtImpersonateThread(HANDLE, HANDLE, PSECURITY_QUALITY_OF_SERVICE)
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME * PRTL_ACTIVATION_CONTEXT_STACK_FRAME
NTSYSAPI void WINAPI RtlInitializeConditionVariable(RTL_CONDITION_VARIABLE *)
NTSYSAPI BOOLEAN WINAPI RtlValidSid(PSID)
NTSYSAPI NTSTATUS WINAPI RtlAllocateAndInitializeSid(PSID_IDENTIFIER_AUTHORITY, BYTE, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, DWORD, PSID *)
NTSYSAPI NTSTATUS WINAPI RtlQueryActivationContextApplicationSettings(DWORD, HANDLE, const WCHAR *, const WCHAR *, WCHAR *, SIZE_T, SIZE_T *)
NTSYSAPI BOOLEAN WINAPI RtlCreateUnicodeString(PUNICODE_STRING, LPCWSTR)
NTSYSAPI NTSTATUS WINAPI NtUnloadKey(POBJECT_ATTRIBUTES)
NTSYSAPI NTSTATUS WINAPI NtWow64IsProcessorFeaturePresent(UINT)
NTSYSAPI ULONG WINAPI RtlRandomEx(PULONG)
NTSYSAPI NTSTATUS WINAPI NtSetDefaultHardErrorPort(HANDLE)
struct _CPTABLEINFO CPTABLEINFO
NTSYSAPI NTSTATUS WINAPI NtCreateDirectoryObject(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES)
struct _FILE_ID_FULL_DIRECTORY_INFORMATION FILE_ID_FULL_DIRECTORY_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryValueKey(HANDLE, const UNICODE_STRING *, KEY_VALUE_INFORMATION_CLASS, void *, DWORD, DWORD *)
NTSYSAPI ULONG WINAPI RtlFindLastBackwardRunSet(PCRTL_BITMAP, ULONG, PULONG)
struct _RTL_TIME_ZONE_INFORMATION * PRTL_TIME_ZONE_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtSetInformationThread(HANDLE, THREADINFOCLASS, LPCVOID, ULONG)
NTSYSAPI NTSTATUS WINAPI NtDelayExecution(BOOLEAN, const LARGE_INTEGER *)
NTSYSAPI ULONG WINAPI RtlRemoveVectoredContinueHandler(PVOID)
NTSYSAPI ULONG WINAPI RtlGetNtGlobalFlags(void)
NTSYSAPI BOOLEAN WINAPI RtlSetUserValueHeap(HANDLE, ULONG, void *, void *)
NTSYSAPI PVOID WINAPI __WINE_MALLOC
NTSYSAPI NTSTATUS WINAPI RtlDestroyQueryDebugBuffer(PDEBUG_BUFFER)
struct _LPC_SECTION_WRITE LPC_SECTION_WRITE
NTSYSAPI NTSTATUS WINAPI NtFlushProcessWriteBuffers(void)
struct _FILE_NAMES_INFORMATION FILE_NAMES_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryEvent(HANDLE, EVENT_INFORMATION_CLASS, PVOID, ULONG, PULONG)
enum _MEMORY_RESERVE_OBJECT_TYPE MEMORY_RESERVE_OBJECT_TYPE
NTSYSAPI LONGLONG WINAPI RtlExtendedLargeIntegerDivide(LONGLONG, INT, INT *)
struct _DEBUG_HEAP_INFORMATION * PDEBUG_HEAP_INFORMATION
NTSYSAPI NTSTATUS WINAPI RtlAppendStringToString(STRING *, const STRING *)
NTSYSAPI NTSTATUS WINAPI NtCreatePagingFile(PUNICODE_STRING, PLARGE_INTEGER, PLARGE_INTEGER, PLARGE_INTEGER)
struct _API_SET_HASH_ENTRY API_SET_HASH_ENTRY
struct _KEY_VALUE_FULL_INFORMATION * PKEY_VALUE_FULL_INFORMATION
struct _MUTANT_BASIC_INFORMATION MUTANT_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtQueryPerformanceCounter(PLARGE_INTEGER, PLARGE_INTEGER)
NTSYSAPI NTSTATUS WINAPI LdrLockLoaderLock(ULONG, ULONG *, ULONG_PTR *)
struct _ACTIVATION_CONTEXT_STACK64 ACTIVATION_CONTEXT_STACK64
NTSYSAPI BOOLEAN WINAPI RtlValidSecurityDescriptor(PSECURITY_DESCRIPTOR)
@ PsCreateFailOnSectionCreate
@ PsCreateFailMachineMismatch
NTSYSAPI NTSTATUS WINAPI NtCloseObjectAuditAlarm(PUNICODE_STRING, HANDLE, BOOLEAN)
IMAGE_BASE_RELOCATION *WINAPI LdrProcessRelocationBlock(void *, UINT, USHORT *, INT_PTR)
NTSYSAPI void WINAPI RtlFreeActivationContextStack(ACTIVATION_CONTEXT_STACK *)
void WINAPI Wow64PassExceptionToGuest(EXCEPTION_POINTERS *)
struct _TEB_ACTIVE_FRAME_CONTEXT_EX TEB_ACTIVE_FRAME_CONTEXT_EX
struct _PORT_MESSAGE_HEADER * PPORT_MESSAGE
enum _SYSDBG_COMMAND SYSDBG_COMMAND
NTSYSAPI ULONG WINAPI RtlSetCriticalSectionSpinCount(RTL_CRITICAL_SECTION *, ULONG)
struct _FILE_MAILSLOT_SET_INFORMATION FILE_MAILSLOT_SET_INFORMATION
void WINAPI Wow64PrepareForException(EXCEPTION_RECORD *, CONTEXT *)
NTSYSAPI BOOLEAN WINAPI RtlDoesFileExists_U(LPCWSTR)
struct _TIMER_BASIC_INFORMATION * PTIMER_BASIC_INFORMATION
NTSYSAPI NTSTATUS WINAPI NtDisplayString(PUNICODE_STRING)
NTSYSAPI void WINAPI RtlCopyLuid(PLUID, const LUID *)
struct _DBGKM_CREATE_THREAD * PDBGKM_CREATE_THREAD
struct _PEB_LDR_DATA64 PEB_LDR_DATA64
NTSYSAPI PVOID WINAPI NTSYSAPI NTSTATUS WINAPI RtlRegisterWait(PHANDLE, HANDLE, RTL_WAITORTIMERCALLBACKFUNC, PVOID, ULONG, ULONG)
NTSYSAPI BOOLEAN WINAPI RtlCopySid(DWORD, PSID, PSID)
NTSYSAPI NTSTATUS WINAPI RtlEmptyAtomTable(RTL_ATOM_TABLE, BOOLEAN)
struct _CLIENT_ID * PCLIENT_ID
NTSYSAPI void WINAPI RtlSetCurrentEnvironment(PWSTR, PWSTR *)
NTSYSAPI NTSTATUS WINAPI RtlCopyContext(CONTEXT *, DWORD, CONTEXT *)
struct _VM_COUNTERS_EX VM_COUNTERS_EX
NTSYSAPI NTSTATUS WINAPI RtlWow64IsWowGuestMachineSupported(USHORT, BOOLEAN *)
NTSYSAPI BOOLEAN WINAPI RtlDllShutdownInProgress(void)
NTSYSAPI NTSTATUS WINAPI TpSetPoolStackInformation(TP_POOL *, TP_POOL_STACK_INFORMATION *stack_info)
NTSYSAPI NTSTATUS WINAPI NtSecureConnectPort(PHANDLE, PUNICODE_STRING, PSECURITY_QUALITY_OF_SERVICE, PLPC_SECTION_WRITE, PSID, PLPC_SECTION_READ, PULONG, PVOID, PULONG)
NTSYSAPI NTSTATUS WINAPI NtCreateTransaction(PHANDLE, ACCESS_MASK, POBJECT_ATTRIBUTES, LPGUID, HANDLE, ULONG, ULONG, ULONG, PLARGE_INTEGER, PUNICODE_STRING)
NTSYSAPI BOOL WINAPI RtlSetCurrentTransaction(HANDLE)
NTSYSAPI NTSTATUS WINAPI NtOpenProcessToken(HANDLE, DWORD, HANDLE *)
NTSYSAPI NTSTATUS WINAPI NtSetInformationObject(HANDLE, OBJECT_INFORMATION_CLASS, PVOID, ULONG)
struct _FILE_DIRECTORY_INFORMATION FILE_DIRECTORY_INFORMATION
@ ProfileIntegerInstructions
@ ProfileBranchMispredictions
@ ProfileStoreInstructions
@ ProfileMemoryBarrierCycles
@ ProfileLoadLinkedIssues
@ ProfileSpecialInstructions
@ ProfileBranchInstructions
@ ProfileLoadInstructions
NTSYSAPI NTSTATUS WINAPI NtUnlockVirtualMemory(HANDLE, PVOID *, SIZE_T *, ULONG)
NTSYSAPI NTSTATUS WINAPI NtSignalAndWaitForSingleObject(HANDLE, HANDLE, BOOLEAN, const LARGE_INTEGER *)
LONG(CALLBACK * PRTL_EXCEPTION_FILTER)(PEXCEPTION_POINTERS)
NTSYSAPI NTSTATUS WINAPI RtlExpandEnvironmentStrings(const WCHAR *, WCHAR *, SIZE_T, WCHAR *, SIZE_T, SIZE_T *)
struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX * PPROCESS_STACK_ALLOCATION_INFORMATION_EX
struct _FILE_END_OF_FILE_INFORMATION FILE_END_OF_FILE_INFORMATION
NTSYSAPI ULONG WINAPI RtlCompactHeap(HANDLE, ULONG)
NTSYSAPI NTSTATUS WINAPI NtQueryIoCompletion(HANDLE, IO_COMPLETION_INFORMATION_CLASS, PVOID, ULONG, PULONG)
NTSYSAPI BOOLEAN WINAPI RtlDosPathNameToRelativeNtPathName_U(PCWSTR, PUNICODE_STRING, PWSTR *, RTL_RELATIVE_NAME *)
NTSYSAPI BOOLEAN WINAPI RtlFirstFreeAce(PACL, PACE_HEADER *)
NTSYSAPI NTSTATUS WINAPI RtlDosPathNameToRelativeNtPathName_U_WithStatus(PCWSTR, PUNICODE_STRING, PWSTR *, RTL_RELATIVE_NAME *)
struct _SYSTEM_CONFIGURATION_INFO SYSTEM_CONFIGURATION_INFO
NTSYSAPI NTSTATUS WINAPI NtInitializeNlsFiles(void **, LCID *, LARGE_INTEGER *)
NTSYSAPI void WINAPI TpReleaseWait(TP_WAIT *)
struct _SYSTEM_FIRMWARE_TABLE_INFORMATION SYSTEM_FIRMWARE_TABLE_INFORMATION
NTSYSAPI PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid(PSID)
NTSYSAPI NTSTATUS WINAPI NtOpenThread(HANDLE *, ACCESS_MASK, const OBJECT_ATTRIBUTES *, const CLIENT_ID *)
struct _DEBUG_LOCK_INFORMATION * PDEBUG_LOCK_INFORMATION
enum _HARDERROR_RESPONSE HARDERROR_RESPONSE
NTSYSAPI NTSTATUS WINAPI RtlCustomCPToUnicodeN(CPTABLEINFO *, WCHAR *, DWORD, DWORD *, const char *, DWORD)
NTSYSAPI NTSTATUS WINAPI RtlGetSystemPreferredUILanguages(DWORD, ULONG, ULONG *, WCHAR *, ULONG *)
NTSYSAPI NTSTATUS WINAPI NtWow64QueryInformationProcess64(HANDLE, PROCESSINFOCLASS, void *, ULONG, ULONG *)
struct _DEBUG_BUFFER DEBUG_BUFFER
NTSYSAPI NTSTATUS WINAPI NtResetEvent(HANDLE, LONG *)
NTSYSAPI NTSTATUS WINAPI RtlCreateSecurityDescriptor(PSECURITY_DESCRIPTOR, DWORD)
NTSYSAPI void WINAPI RtlEraseUnicodeString(UNICODE_STRING *)
enum _PORT_INFORMATION_CLASS PORT_INFORMATION_CLASS
NTSYSAPI NTSTATUS WINAPI RtlAddProcessTrustLabelAce(PACL, DWORD, DWORD, PSID, DWORD, DWORD)
enum _EVENT_INFORMATION_CLASS * PEVENT_INFORMATION_CLASS
struct _RTL_HEAP_PARAMETERS RTL_HEAP_PARAMETERS
NTSYSAPI void WINAPI RtlPopFrame(TEB_ACTIVE_FRAME *)
enum _HARDERROR_RESPONSE_OPTION * PHARDERROR_RESPONSE_OPTION
unsigned long long DWORDLONG
#define DbgPrintEx(cmpid, lvl, fmt,...)
enum _PORT_INFORMATION_CLASS PORT_INFORMATION_CLASS
enum _SECURITY_IMPERSONATION_LEVEL SECURITY_IMPERSONATION_LEVEL
WORD SECURITY_DESCRIPTOR_CONTROL
WORD * PSECURITY_DESCRIPTOR_CONTROL
PFN_NUMBER MmLowestPhysicalPage
PFN_NUMBER MmHighestPhysicalPage
struct atom_table * RTL_ATOM_TABLE
DWORD SECURITY_INFORMATION
enum _HARDERROR_RESPONSE * PHARDERROR_RESPONSE
enum _SHUTDOWN_ACTION SHUTDOWN_ACTION
enum _HARDERROR_RESPONSE_OPTION HARDERROR_RESPONSE_OPTION
enum _MUTANT_INFORMATION_CLASS MUTANT_INFORMATION_CLASS
_HARDERROR_RESPONSE_OPTION
enum _ATOM_INFORMATION_CLASS ATOM_INFORMATION_CLASS
enum _EVENT_INFORMATION_CLASS EVENT_INFORMATION_CLASS
_SEMAPHORE_INFORMATION_CLASS
_MUTANT_INFORMATION_CLASS
enum _SEMAPHORE_INFORMATION_CLASS SEMAPHORE_INFORMATION_CLASS
enum _TIMER_INFORMATION_CLASS TIMER_INFORMATION_CLASS
enum _IO_COMPLETION_INFORMATION_CLASS IO_COMPLETION_INFORMATION_CLASS
_IO_COMPLETION_INFORMATION_CLASS
enum _SYSDBG_COMMAND SYSDBG_COMMAND
struct _RTL_RB_TREE RTL_RB_TREE
FIXME: should move to rtltypes.h, but we can't include it here.
struct _RTL_RB_TREE * PRTL_RB_TREE
_MEMORY_INFORMATION_CLASS
enum _SECTION_INFORMATION_CLASS SECTION_INFORMATION_CLASS
enum _MEMORY_INFORMATION_CLASS MEMORY_INFORMATION_CLASS
_SECTION_INFORMATION_CLASS
_In_ PCWSTR _Inout_ _At_ QueryTable EntryContext
LONG(NTAPI * PVECTORED_EXCEPTION_HANDLER)(PEXCEPTION_POINTERS ExceptionPointers)
enum _HEAP_INFORMATION_CLASS HEAP_INFORMATION_CLASS
_KEY_VALUE_INFORMATION_CLASS
ACCESS_MASK * PACCESS_MASK
enum _SECTION_INHERIT SECTION_INHERIT
enum _KEY_VALUE_INFORMATION_CLASS KEY_VALUE_INFORMATION_CLASS
enum _KEY_INFORMATION_CLASS KEY_INFORMATION_CLASS
#define RtlAnsiStringToUnicodeSize(STRING)
#define DECLSPEC_NORETURN
_NullNull_terminated_ CONST WCHAR * PCZZWSTR
enum _SYSTEM_FIRMWARE_TABLE_ACTION SYSTEM_FIRMWARE_TABLE_ACTION
_In_ ULONG _In_ ULONG _In_ ULONG Length
enum _TIMER_TYPE TIMER_TYPE
struct _RTL_BALANCED_NODE RTL_BALANCED_NODE
enum _EVENT_TYPE EVENT_TYPE
struct _RTL_BALANCED_NODE * PRTL_BALANCED_NODE
PFN_COUNT MmNumberOfPhysicalPages
enum _POWER_INFORMATION_LEVEL POWER_INFORMATION_LEVEL
enum _SYSTEM_POWER_STATE SYSTEM_POWER_STATE
#define RtlUTF8ToUnicodeN
ULONG NTAPI vDbgPrintExWithPrefix(IN LPCSTR Prefix, IN ULONG ComponentId, IN ULONG Level, IN LPCSTR Format, IN va_list ap)
NTSTATUS NTAPI RtlFormatMessage(IN PWSTR Message, IN ULONG MaxWidth OPTIONAL, IN BOOLEAN IgnoreInserts, IN BOOLEAN ArgumentsAreAnsi, IN BOOLEAN ArgumentsAreAnArray, IN va_list *Arguments, OUT PWSTR Buffer, IN ULONG BufferSize, OUT PULONG ReturnLength OPTIONAL)
NTSTATUS NTAPI RtlFormatMessageEx(IN PWSTR Message, IN ULONG MaxWidth OPTIONAL, IN BOOLEAN IgnoreInserts, IN BOOLEAN ArgumentsAreAnsi, IN BOOLEAN ArgumentsAreAnArray, IN va_list *Arguments, OUT PWSTR Buffer, IN ULONG BufferSize, OUT PULONG ReturnLength OPTIONAL, IN ULONG Flags)
CROSS_PROCESS_WORK_HDR work_list
CROSS_PROCESS_WORK_HDR free_list
LIST_ENTRY32 FrameListCache
ULONG NextCookieSequenceNumber
ULONG NextCookieSequenceNumber
LIST_ENTRY64 FrameListCache
LIST_ENTRY FrameListCache
RTL_ACTIVATION_CONTEXT_STACK_FRAME * ActiveFrame
ULONG NextCookieSequenceNumber
USHORT EmulatedMachineType
CROSS_PROCESS_WORK_LIST * CrossProcessWorkList
ARM64EC_NT_CONTEXT * ContextAmd64
ULONG64 EmulatorDataInline
ULONG64 LoadingModuleModflag
ULONG64 EmulatorStackBase
ULONG64 EmulatorStackLimit
BOOLEAN InSyscallCallback
UCHAR LeadByte[MAXIMUM_LEADBYTES]
USHORT MaximumCharacterSize
USHORT TransUniDefaultChar
DBGKM_CREATE_THREAD InitialThread
ULONG DebugInfoFileOffset
EXCEPTION_RECORD ExceptionRecord
ULONG DebugInfoFileOffset
DBGKM_CREATE_PROCESS NewProcess
DBGKM_CREATE_THREAD NewThread
DBGKM_EXIT_PROCESS ExitProcess
union _DBGUI_WAIT_STATE_CHANGE::@2588 StateInfo
DBGKM_UNLOAD_DLL UnloadDll
DBGKM_EXIT_THREAD ExitThread
DBGKM_EXCEPTION Exception
DBGUI_CREATE_THREAD CreateThread
DBGUI_CREATE_PROCESS CreateProcessInfo
PVOID BackTraceInformation
HANDLE RemoteThreadHandle
union _FILE_OBJECTID_BUFFER::@3874 DUMMYUNIONNAME
struct _FILE_OBJECTID_BUFFER::@3874::@3875 DUMMYSTRUCTNAME
PFLS_CALLBACK_FUNCTION callback
FLS_CALLBACK callbacks[1]
FLS_INFO_CHUNK * fls_callback_chunks[8]
union _IO_STATUS_BLOCK::@3536 DUMMYUNIONNAME
KCONTINUE_TYPE ContinueType
PUNICODE_STRING ValueName
struct _LDRP_LOAD_CONTEXT * LoadContext
ULONG ImplicitPathOptions
LDR_DLL_LOAD_REASON LoadReason
RTL_BALANCED_NODE MappingInfoIndexNode
UNICODE_STRING FullDllName
LIST_ENTRY InLoadOrderLinks
LIST_ENTRY InInitializationOrderLinks
LIST_ENTRY InMemoryOrderLinks
RTL_BALANCED_NODE BaseAddressIndexNode
UNICODE_STRING BaseDllName
LIST_ENTRY NodeModuleLink
SINGLE_LIST_ENTRY CondenseLink
ULONG LoadWhileUnloadingCount
LDRP_CSLIST IncomingDependencies
LDR_SERVICE_TAG_RECORD * ServiceTagList
SINGLE_LIST_ENTRY dependency_from_entry
struct _LDR_DDAG_NODE * dependency_from
SINGLE_LIST_ENTRY dependency_to_entry
struct _LDR_DDAG_NODE * dependency_to
const UNICODE_STRING * FullDllName
const UNICODE_STRING * BaseDllName
const UNICODE_STRING * FullDllName
const UNICODE_STRING * BaseDllName
struct _LDR_SERVICE_TAG_RECORD * Next
struct _LIST_ENTRY * Blink
struct _LIST_ENTRY * Flink
USHORT VirtualRangesOffset
ULONG ProcessEnableWriteExceptions
PVOID KernelWriteToExecutableSignal
UNICODE_STRING SectionFileName
CPTABLEINFO AnsiTableInfo
ULONG ArbitraryUserPointer
ULONG64 ArbitraryUserPointer
PVOID SecurityQualityOfService
PUNICODE_STRING ObjectName
ULARGE_INTEGER AppCompatFlags
ULONG TlsExpansionCounter
ULONG WaitOnAddressHashTable[0x80]
ULONG WerRegistrationData
UCHAR ImageUsedLargePages
ULONG HeapDeCommitFreeBlockThreshold
ULONG MaximumNumberOfHeaps
ULONG TlsExpansionBitmapBits[32]
ULONG ProcessInitializing
ULONG ImageSubSystemMinorVersion
ULONG GdiHandleBuffer[34]
UNICODE_STRING32 CSDVersion
ULONG TelemetryCoverageHeader
BOOLEAN InheritedAddressSpace
UCHAR IsLongPathAwareProcess
ULONG ReadOnlySharedMemoryBase
ULONG CritSecTracingEnabled
ULONG LibLoaderTracingEnabled
ULONG ActiveProcessAffinityMask
ULONG ActivationContextData
ULONG UnicodeCaseTableData
BOOLEAN ReadImageFileExecOptions
ULONG SystemAssemblyStorageMap
ULONG ProcessCurrentlyThrottled
ULONG ProcessAssemblyStorageMap
ULONG ProcessPreviouslyThrottled
LARGE_INTEGER CriticalSectionTimeout
ULONG PostProcessInitRoutine
ULONGLONG CsrServerReadOnlySharedMemoryBase
ULONG ProcessStarterHelper
UCHAR IsImageDynamicallyRelocated
CHAR PlaceholderCompatibilityModeReserved[7]
ULONG ProcessImagesHotPatched
UCHAR IsProtectedProcessLight
ULONG KernelCallbackTable
ULONG ReadOnlyStaticServerData
ULONG ImageSubSystemMajorVersion
ULONG GdiSharedHandleTable
CHAR PlaceholderCompatibilityMode
ULONG SystemDefaultActivationData
ULONG HeapDeCommitTotalFreeThreshold
ULARGE_INTEGER AppCompatFlagsUser
UCHAR SkipPatchingUser32Forwarders
LIST_ENTRY32 TppWorkerpList
ULONG GdiHandleBuffer[60]
ULONG64 HeapSegmentCommit
ULARGE_INTEGER AppCompatFlags
UCHAR IsProtectedProcessLight
ULONG64 ProcessParameters
ULONG64 TelemetryCoverageHeader
ULONG64 ReadOnlySharedMemoryBase
ULARGE_INTEGER AppCompatFlagsUser
LARGE_INTEGER CriticalSectionTimeout
ULONG64 SystemAssemblyStorageMap
ULONG64 WaitOnAddressHashTable[0x80]
ULONG64 ProcessAssemblyStorageMap
CHAR PlaceholderCompatibilityModeReserved[7]
UCHAR IsLongPathAwareProcess
ULONG64 WerRegistrationData
ULONG64 HeapDeCommitTotalFreeThreshold
ULONG ProcessPreviouslyThrottled
ULONG64 KernelCallbackTable
ULONG TlsExpansionCounter
ULONG64 GdiDCAttributeList
ULONG64 MinimumStackCommit
ULONG ImageSubSystemMajorVersion
ULONG64 GdiSharedHandleTable
ULONG64 ActivationContextData
ULONG ImageSubSystemMinorVersion
UCHAR SkipPatchingUser32Forwarders
ULONG ProcessInitializing
ULONG64 ChpeV2ProcessInfo
LIST_ENTRY64 TppWorkerpList
ULONG MaximumNumberOfHeaps
ULONG ProcessCurrentlyThrottled
ULONG64 ActiveProcessAffinityMask
ULONG64 PostProcessInitRoutine
ULONG64 ProcessStarterHelper
ULONG64 UnicodeCaseTableData
ULONG64 SystemDefaultActivationData
ULONG64 TlsExpansionBitmap
BOOLEAN ReadImageFileExecOptions
ULONG ProcessImagesHotPatched
ULONG64 HeapSegmentReserve
UNICODE_STRING64 CSDVersion
ULONG CritSecTracingEnabled
ULONG TlsExpansionBitmapBits[32]
ULONG64 HeapDeCommitFreeBlockThreshold
CHAR PlaceholderCompatibilityMode
BOOLEAN InheritedAddressSpace
ULONG64 ReadOnlyStaticServerData
ULONG LibLoaderTracingEnabled
ULONGLONG CsrServerReadOnlySharedMemoryBase
UCHAR ImageUsedLargePages
UCHAR IsImageDynamicallyRelocated
BOOLEAN ShutdownInProgress
LIST_ENTRY32 InInitializationOrderModuleList
LIST_ENTRY32 InLoadOrderModuleList
LIST_ENTRY32 InMemoryOrderModuleList
BOOLEAN ShutdownInProgress
LIST_ENTRY64 InInitializationOrderModuleList
LIST_ENTRY64 InMemoryOrderModuleList
LIST_ENTRY64 InLoadOrderModuleList
BOOLEAN ShutdownInProgress
LIST_ENTRY InInitializationOrderModuleList
LIST_ENTRY InMemoryOrderModuleList
LIST_ENTRY InLoadOrderModuleList
UCHAR IsLongPathAwareProcess
UNICODE_STRING CSDVersion
ULONG ImageSubSystemMinorVersion
SIZE_T HeapDeCommitTotalFreeThreshold
UCHAR ImageUsedLargePages
PVOID TelemetryCoverageHeader
ULONG ProcessCurrentlyThrottled
BOOLEAN ReadImageFileExecOptions
ULONG ProcessPreviouslyThrottled
PVOID ProcessStarterHelper
PVOID SystemDefaultActivationData
KERNEL_CALLBACK_PROC * KernelCallbackTable
UCHAR IsProtectedProcessLight
PVOID ActivationContextData
KAFFINITY ActiveProcessAffinityMask
PVOID PostProcessInitRoutine
PVOID WaitOnAddressHashTable[0x80]
RTL_USER_PROCESS_PARAMETERS * ProcessParameters
PVOID SystemAssemblyStorageMap
LARGE_INTEGER CriticalSectionTimeout
UCHAR SkipPatchingUser32Forwarders
ULONG TlsExpansionBitmapBits[32]
PVOID GdiSharedHandleTable
ULONG MaximumNumberOfHeaps
PVOID WerRegistrationData
PVOID ReadOnlySharedMemoryBase
ULONG TlsExpansionCounter
ULONG CritSecTracingEnabled
ULARGE_INTEGER AppCompatFlagsUser
SIZE_T HeapSegmentReserve
ULONG GdiHandleBuffer[GDI_HANDLE_BUFFER_SIZE]
LIST_ENTRY TppWorkerpList
ULONG ProcessImagesHotPatched
CHAR PlaceholderCompatibilityModeReserved[7]
SIZE_T MinimumStackCommit
PRTL_CRITICAL_SECTION FastPebLock
ULONG ProcessInitializing
ULONG ImageSubSystemMajorVersion
PVOID * ReadOnlyStaticServerData
ULARGE_INTEGER AppCompatFlags
ULONG LibLoaderTracingEnabled
CHAR PlaceholderCompatibilityMode
PVOID ProcessAssemblyStorageMap
BOOLEAN InheritedAddressSpace
PRTL_BITMAP TlsExpansionBitmap
ULONGLONG CsrServerReadOnlySharedMemoryBase
SIZE_T HeapDeCommitFreeBlockThreshold
PVOID UnicodeCaseTableData
UCHAR IsImageDynamicallyRelocated
ULONGLONG PebAddressNative
USHORT DllCharacteristics
UCHAR ProtectedProcessLight
struct _PS_CREATE_INFO::@3892::@3897 ExeName
ACCESS_MASK AdditionalFileAccess
ULONG CurrentParameterFlags
USHORT ProhibitedImageCharacteristics
ULONGLONG UserProcessParametersNative
struct _PS_CREATE_INFO::@3892::@3894 InitState
UCHAR IFEODoNotPropagateKeyState
UCHAR AddressSpaceOverride
struct _PS_CREATE_INFO::@3892::@3895 FailSection
ULONG UserProcessParametersWow64
struct _PS_CREATE_INFO::@3892::@3898 SuccessState
ULONGLONG ManifestAddress
struct _PS_CREATE_INFO::@3892::@3896 ExeFormat
struct _ACTIVATION_CONTEXT * ActivationContext
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME * Previous
struct _RTL_ATOM_TABLE_ENTRY * HashLink
PRTL_ATOM_TABLE_ENTRY Buckets[1]
RTL_HANDLE_TABLE HandleTable
RTL_CRITICAL_SECTION CriticalSection
struct _RTL_BALANCED_NODE * Children[2]
_ANONYMOUS_STRUCT struct _RTL_BALANCED_NODE::@4392::@4394 DUMMYSTRUCTNAME
_ANONYMOUS_UNION union _RTL_BALANCED_NODE::@4393 DUMMYUNIONNAME2
struct _RTL_BALANCED_NODE * Right
struct _RTL_BALANCED_NODE * Left
_ANONYMOUS_UNION union _RTL_BALANCED_NODE::@4392 DUMMYUNIONNAME
struct _RTL_HANDLE * Next
SIZE_T DeCommitFreeblockThreshold
SIZE_T VirtualMemoryThreshold
SIZE_T DeCommitTotalFreeThreshold
SIZE_T MaximumAllocationSize
PRTL_HEAP_COMMIT_ROUTINE CommitRoutine
RTL_PROCESS_MODULE_INFORMATION Modules[1]
PRTL_QUERY_REGISTRY_ROUTINE QueryRoutine
FIXME: should move to rtltypes.h, but we can't include it here.
HANDLE ContainerDirectory
UNICODE_STRING RelativeName
HANDLE hSharedReleaseSemaphore
RTL_CRITICAL_SECTION rtlCS
HANDLE hExclusiveReleaseSemaphore
UNICODE_STRING32 CommandLine
UNICODE_STRING32 ShellInfo
CURDIR32 CurrentDirectory
RTL_DRIVE_LETTER_CURDIR32 DLCurrentDirectory[0x20]
UNICODE_STRING32 ImagePathName
ULONG PackageDependencyData
UNICODE_STRING32 RuntimeInfo
UNICODE_STRING32 WindowTitle
RTL_DRIVE_LETTER_CURDIR64 DLCurrentDirectory[0x20]
UNICODE_STRING64 ShellInfo
ULONG64 PackageDependencyData
UNICODE_STRING64 RuntimeInfo
CURDIR64 CurrentDirectory
UNICODE_STRING64 WindowTitle
ULONG64 EnvironmentVersion
UNICODE_STRING64 CommandLine
UNICODE_STRING64 ImagePathName
UNICODE_STRING CommandLine
ULONG_PTR EnvironmentVersion
PVOID PackageDependencyData
UNICODE_STRING RuntimeInfo
UNICODE_STRING ImagePathName
ULONG_PTR EnvironmentSize
UNICODE_STRING WindowTitle
RTL_DRIVE_LETTER_CURDIR DLCurrentDirectory[0x20]
WORD ProcessorArchitecture
PVOID MaximumApplicationAddress
union _SYSTEM_CONFIGURATION_INFO::@3886 tag2
ULONG AllocationGranularity
ULONG ActiveProcessorMask
PVOID MinimumApplicationAddress
struct _SYSTEM_CONFIGURATION_INFO::@3886::@3887 tag1
USHORT CreatorBackTraceIndex
ULONG_PTR UniqueProcessId
BOOLEAN TimeAdjustmentDisabled
BOOLEAN TimeAdjustmentDisabled
ULONG glDispatchTable[233]
ULONG TxnScopeEnterCallback
BOOLEAN InstrumentationCallbackDisabled
ULONG GdiThreadLocaleInfo
ULONG WaitingOnLoaderLock
char PlaceholderReserved[10]
WCHAR StaticUnicodeBuffer[261]
ULONG IdealProcessorValue
ULONG ThreadLocalStoragePointer
GUID EffectiveContainerId
ULONG CountOfOwnedCriticalSections
ULONG GuaranteedStackBytes
ULONG InstrumentationCallbackPreviousPc
char PlaceholderCompatibilityMode
ULONG ReservedForDebuggerInstrumentation[16]
ULONG ReservedForCodeCoverage
UNICODE_STRING32 StaticUnicodeString
ULONG SystemReserved1[26]
ULONG TxnScopeExitCallback
ULONG CurrentTransactionHandle
ULONG Win32ClientInfo[62]
ULONG InstrumentationCallbackPreviousSp
ACTIVATION_CONTEXT_STACK32 ActivationContextStack
ULONG MergedPrefLanguages
UCHAR WorkingOnBehalfOfTicket[8]
BOOLEAN PlaceholderHydrationAlwaysExplicit
ULONG GdiCachedProcessHandle
ULONG FpSoftwareStatusRegister
ULONG InstrumentationCallbackSp
ULONG HeapVirtualAffinity
ULONG ActivationContextStackPointer
ULONG64 ReservedForCodeCoverage
ULONG64 ThreadLocalStoragePointer
ULONG64 ActivationContextStackPointer
BOOLEAN UnalignedLoadStoreExceptions
UCHAR WorkingOnBehalfOfTicket[8]
ULONG64 InstrumentationCallbackPreviousSp
ULONG64 SavedPriorityState
UNICODE_STRING64 StaticUnicodeString
ULONG GuaranteedStackBytes
ULONG64 Instrumentation[11]
ULONG WaitingOnLoaderLock
BOOLEAN InstrumentationCallbackDisabled
ULONG HeapVirtualAffinity
ULONG FpSoftwareStatusRegister
ULONG64 EnvironmentPointer
ULONG64 glDispatchTable[233]
ULONG64 DeallocationStack
WCHAR StaticUnicodeBuffer[261]
ULONG64 ReservedForDebuggerInstrumentation[16]
ULONG64 CurrentTransactionHandle
ULONG64 SystemReserved1[30]
ULONG64 TlsExpansionSlots
ULONG64 DeallocationBStore
char PlaceholderCompatibilityMode
ULONG64 TxnScopeEnterCallback
ULONG64 PreferredLanguages
ULONG64 InstrumentationCallbackPreviousPc
ULONG64 UserPrefLanguages
char PlaceholderReserved[10]
ULONG64 ChpeV2CpuAreaInfo
union _TEB64::@3871 DUMMYUNIONNAME
ULONG64 MergedPrefLanguages
ULONG64 GdiThreadLocaleInfo
GUID EffectiveContainerId
ULONG IdealProcessorValue
ACTIVATION_CONTEXT_STACK64 ActivationContextStack
ULONG64 Win32ClientInfo[62]
ULONG64 GdiTebBatch[0x9d]
ULONG CountOfOwnedCriticalSections
ULONG64 GdiCachedProcessHandle
BOOLEAN PlaceholderHydrationAlwaysExplicit
ULONG64 TxnScopeExitCallback
ULONG64 InstrumentationCallbackSp
const char * SourceLocation
TEB_ACTIVE_FRAME_CONTEXT BasicContext
TEB_ACTIVE_FRAME BasicFrame
void * ExtensionIdentifier
struct _TEB_ACTIVE_FRAME * Previous
TEB_ACTIVE_FRAME_CONTEXT * Context
LIST_ENTRY fls_list_entry
void ** fls_data_chunks[8]
ACTIVATION_CONTEXT_STACK ActivationContextStack
ULONG_PTR InstrumentationCallbackSp
ULONG_PTR ReservedForCodeCoverage
PVOID SystemReserved1[54]
WCHAR StaticUnicodeBuffer[261]
UCHAR WorkingOnBehalfOfTicket[8]
ULONG Win32ClientInfo[31]
HANDLE GdiCachedProcessHandle
ULONG WaitingOnLoaderLock
ULONG FpSoftwareStatusRegister
ULONG_PTR InstrumentationCallbackPreviousPc
char PlaceholderCompatibilityMode
ULONG_PTR InstrumentationCallbackPreviousSp
ULONG HeapVirtualAffinity
PVOID Instrumentation[16]
PVOID * TlsExpansionSlots
GDI_TEB_BATCH GdiTebBatch
PVOID TxnScopeEnterCallback
ULONG CountOfOwnedCriticalSections
PVOID glDispatchTable[280]
ULONG GuaranteedStackBytes
UNICODE_STRING StaticUnicodeString
PVOID ThreadLocalStoragePointer
PVOID CurrentTransactionHandle
TEB_ACTIVE_FRAME * ActiveFrame
BOOLEAN InstrumentationCallbackDisabled
PVOID GdiThreadLocaleInfo
PVOID MergedPrefLanguages
PVOID ReservedForDebuggerInstrumentation[16]
PVOID TxnScopeExitCallback
ACTIVATION_CONTEXT_STACK * ActivationContextStackPointer
BOOLEAN PlaceholderHydrationAlwaysExplicit
GUID EffectiveContainerId
ULONG IdealProcessorValue
char PlaceholderReserved[10]
SIZE_T QuotaNonPagedPoolUsage
SIZE_T PeakWorkingSetSize
SIZE_T QuotaPeakNonPagedPoolUsage
SIZE_T QuotaPeakPagedPoolUsage
SIZE_T QuotaPagedPoolUsage
SIZE_T PeakWorkingSetSize
SIZE_T QuotaPagedPoolUsage
SIZE_T QuotaPeakPagedPoolUsage
SIZE_T QuotaPeakNonPagedPoolUsage
SIZE_T QuotaNonPagedPoolUsage
ULONGLONG CrossProcessWorkList
ULONG NativeSystemPageSize
USHORT EmulatedMachineType
void * ContextFlagsLocation
WOW64_CPURESERVED * CpuReserved
LDR_DLL_LOADED_NOTIFICATION_DATA Loaded
LDR_DLL_UNLOADED_NOTIFICATION_DATA Unloaded
ULONG_PTR Win32Protection
struct _MEMORY_WORKING_SET_EX_BLOCK::@3878 DUMMYSTRUCTNAME
_In_ WDFCOLLECTION _In_ ULONG Index
_Must_inspect_result_ _In_ WDFDMAENABLER _In_ _In_opt_ PWDF_OBJECT_ATTRIBUTES Attributes
_In_ WDFDMATRANSACTION _In_ size_t MaximumLength
_Must_inspect_result_ _In_ WDFKEY _In_ PCUNICODE_STRING _In_ ULONG _Out_opt_ PULONG _Out_opt_ PULONG ValueType
_Must_inspect_result_ _In_ WDFKEY _In_ PCUNICODE_STRING ValueName
_Must_inspect_result_ _In_ WDFKEY _In_ PCUNICODE_STRING _In_ ULONG ValueLength
VOID(WINAPI * PFLS_CALLBACK_FUNCTION)(PVOID)
_Reserved_ PVOID Reserved
#define __WINE_ALLOC_SIZE(...)
enum _ACL_INFORMATION_CLASS ACL_INFORMATION_CLASS
struct _TP_CLEANUP_GROUP TP_CLEANUP_GROUP
VOID(NTAPI * PTP_WAIT_CALLBACK)(PTP_CALLBACK_INSTANCE, PVOID, PTP_WAIT, TP_WAIT_RESULT)
struct _TP_CALLBACK_INSTANCE * PTP_CALLBACK_INSTANCE
#define __WINE_DEALLOC(...)
VOID(NTAPI * PTP_WORK_CALLBACK)(_Inout_ PTP_CALLBACK_INSTANCE Instance, _Inout_opt_ PVOID Context, _Inout_ PTP_WORK Work)
struct _TP_TIMER TP_TIMER
VOID(NTAPI * PTP_SIMPLE_CALLBACK)(_Inout_ PTP_CALLBACK_INSTANCE Instance, _Inout_opt_ PVOID Context)
VOID(NTAPI * PTP_TIMER_CALLBACK)(PTP_CALLBACK_INSTANCE, PVOID, PTP_TIMER)
struct _TP_CALLBACK_INSTANCE TP_CALLBACK_INSTANCE
_IRQL_requires_same_ typedef _In_ ULONG _In_ UCHAR Level
struct _CONTEXT_CHUNK * PCONTEXT_CHUNK
struct _CONTEXT_EX CONTEXT_EX
struct _CONTEXT_EX * PCONTEXT_EX
struct _CONTEXT_CHUNK CONTEXT_CHUNK
#define RtlUlonglongByteSwap(_x)
#define RtlOemStringToUnicodeSize(STRING)
#define RtlUnicodeStringToOemSize(STRING)
#define RtlEqualLuid(Luid1, Luid2)
#define RtlUshortByteSwap(_x)
#define RtlUnicodeStringToAnsiSize(String)
RTL_QUERY_REGISTRY_ROUTINE * PRTL_QUERY_REGISTRY_ROUTINE
struct _EXCEPTION_POINTERS * PEXCEPTION_POINTERS
enum _TOKEN_INFORMATION_CLASS TOKEN_INFORMATION_CLASS
* PSID_IDENTIFIER_AUTHORITY