crash.software
Projects
Pull Requests
Issues
Builds
titan
Code
Files
Commits
Branches
Tags
Pull Requests
Code Comments
Code Compare
Issues
List
Boards
Milestones
Builds
Statistics
Contributions
Source Lines
Child Projects
Projects
STRLCPY
titan
Files
🤬
Sign In
master
ROOT
/
Native.h
Search
History
22440 lines
|
windows-1252
|
524 KB
Blame
Outline
2
4
8
No wrap
Soft wrap
Outline
_NTDLL_
EXPORT_FN
IMPORT_FN
PAGE_SIZE
EXTERNAL
UNREFERENCED_PARAMETER
(
P
)
NT_SUCCESS
(
Status
)
NT_INFORMATION
(
Status
)
NT_WARNING
(
Status
)
NT_ERROR
(
Status
)
ABSOLUTE_TIME
(
wait
)
RELATIVE_TIME
(
wait
)
NANOSECONDS
(
nanos
)
MICROSECONDS
(
micros
)
MILLISECONDS
(
milli
)
SECONDS
(
seconds
)
ARGUMENT_PRESENT
(
ArgumentPointer
)
RESTORE_LIST
(
ListEntry
)
UNLINK
(
x
)
ALIGN_TO_POWER2
(
x,n
)
POI
(
addr
)
IS_PATH_SEPARATOR
(
ch
)
IS_DOT
(
s
)
IS_DOT_DOT
(
s
)
IS_PATH_SEPARATOR_U
(
ch
)
IS_DOT_U
(
s
)
IS_DOT_DOT_U
(
s
)
jmp_length
(
y,x
)
stc_jc
(
y,x
)
MODIFYBYTE
(
_base,_offset,_byte
)
MODIFYWORD
(
_base,_offset,_word
)
MODIFYDWORD
(
_base,_offset,_dword
)
MODIFYQWORD
(
_base,_offset,_qword
)
PTR_ADD_OFFSET
(
Pointer,Offset
)
WRITE_JMP
(
from,to
)
GET_JMP
(
from
)
ASSERT
(
exp
)
SHORT_SIZE
SHORT_MASK
LONG_SIZE
LONG_MASK
LOWBYTE_MASK
FIRSTBYTE
(
VALUE
)
SECONDBYTE
(
VALUE
)
THIRDBYTE
(
VALUE
)
FOURTHBYTE
(
VALUE
)
SHORT_LEAST_SIGNIFICANT_BIT
SHORT_MOST_SIGNIFICANT_BIT
LONG_LEAST_SIGNIFICANT_BIT
LONG_3RD_MOST_SIGNIFICANT_BIT
LONG_2ND_MOST_SIGNIFICANT_BIT
LONG_MOST_SIGNIFICANT_BIT
RtlStoreUshort
(
ADDRESS,VALUE
)
RtlStoreUlong
(
ADDRESS,VALUE
)
RtlRetrieveUshort
(
DEST_ADDRESS,SRC_ADDRESS
)
RtlRetrieveUlong
(
DEST_ADDRESS,SRC_ADDRESS
)
RtlOffsetToPointer
(
B,O
)
RtlPointerToOffset
(
B,P
)
ANSI_NULL
UNICODE_NULL
FIELD_OFFSET
(
type,field
)
CONTAINING_RECORD
(
address,type,field
)
IN_REGION
(
x,Base,Size
)
RVATOVA
(
base,offset
)
NOP_FUNCTION
PAGED_CODE
(
)
LPC_CLIENT_ID
LPC_SIZE_T
LPC_PVOID
LPC_HANDLE
LPC_CLIENT_ID
LPC_SIZE_T
LPC_PVOID
LPC_HANDLE
OBJ_INHERIT
OBJ_HANDLE_TAGBITS
OBJ_PERMANENT
OBJ_EXCLUSIVE
OBJ_CASE_INSENSITIVE
OBJ_OPENIF
OBJ_OPENLINK
OBJ_KERNEL_HANDLE
OBJ_FORCE_ACCESS_CHECK
OBJ_VALID_ATTRIBUTES
RTL_QUERY_PROCESS_MODULES
RTL_QUERY_PROCESS_BACKTRACES
RTL_QUERY_PROCESS_HEAP_SUMMARY
RTL_QUERY_PROCESS_HEAP_TAGS
RTL_QUERY_PROCESS_HEAP_ENTRIES
RTL_QUERY_PROCESS_LOCKS
RTL_QUERY_PROCESS_MODULES32
RTL_QUERY_PROCESS_NONINVASIVE
InitializeObjectAttributes
(
p,n,a,r,s
)
___PROCESSOR_NUMBER_DEFINED
ANSI_NULL
UNICODE_NULL
UNICODE_STRING_MAX_BYTES
UNICODE_STRING_MAX_CHARS
DECLARE_CONST_UNICODE_STRING
(
_variablename,_string
)
IsListEmpty
(
ListHead
)
InitializeListHead
(
ListHead
)
IsListEmpty
(
ListHead
)
RemoveHeadList
(
ListHead
)
RemoveTailList
(
ListHead
)
RemoveEntryList
(
Entry
)
InsertTailList
(
ListHead,Entry
)
InsertHeadList
(
ListHead,Entry
)
COUNT_IS_ALIGNED
(
Count,Pow2
)
POINTER_IS_ALIGNED
(
Ptr,Pow2
)
ROUND_DOWN_COUNT
(
Count,Pow2
)
ROUND_DOWN_POINTER
(
Ptr,Pow2
)
ROUND_UP_COUNT
(
Count,Pow2
)
ROUND_UP_POINTER
(
Ptr,Pow2
)
ALIGN_BYTE
ALIGN_CHAR
ALIGN_DESC_CHAR
ALIGN_DWORD
ALIGN_LONG
ALIGN_LPBYTE
ALIGN_LPDWORD
ALIGN_LPSTR
ALIGN_LPTSTR
ALIGN_LPVOID
ALIGN_LPWORD
ALIGN_TCHAR
ALIGN_WCHAR
ALIGN_WORD
ALIGN_QUAD
ALIGN_WORST
QUAD_ALIGN
(
VALUE
)
EXPORT_VA
(
x
)
IMPORT_VA
(
x
)
RELOC_VA
(
x
)
RESOURCE_VA
(
x
)
EXPORT_SIZE
(
x
)
IMPORT_SIZE
(
x
)
RELOC_SIZE
(
x
)
RESOURCE_SIZE
(
x
)
DEBUGDIR_VA
(
x
)
DEBUGDIR_SIZE
(
x
)
IS_VALID_HANDLE
(
hHandle
)
SIZEOF_ARRAY
(
arr
)
_FILESYSTEMFSCTL_
FSCTL_REQUEST_OPLOCK_LEVEL_1
FSCTL_REQUEST_OPLOCK_LEVEL_2
FSCTL_REQUEST_BATCH_OPLOCK
FSCTL_OPLOCK_BREAK_ACKNOWLEDGE
FSCTL_OPBATCH_ACK_CLOSE_PENDING
FSCTL_OPLOCK_BREAK_NOTIFY
FSCTL_LOCK_VOLUME
FSCTL_UNLOCK_VOLUME
FSCTL_DISMOUNT_VOLUME
FSCTL_IS_VOLUME_MOUNTED
FSCTL_IS_PATHNAME_VALID
FSCTL_MARK_VOLUME_DIRTY
FSCTL_QUERY_RETRIEVAL_POINTERS
FSCTL_GET_COMPRESSION
FSCTL_SET_COMPRESSION
FSCTL_SET_BOOTLOADER_ACCESSED
FSCTL_OPLOCK_BREAK_ACK_NO_2
FSCTL_INVALIDATE_VOLUMES
FSCTL_QUERY_FAT_BPB
FSCTL_REQUEST_FILTER_OPLOCK
FSCTL_FILESYSTEM_GET_STATISTICS
FSCTL_GET_NTFS_VOLUME_DATA
FSCTL_GET_NTFS_FILE_RECORD
FSCTL_GET_VOLUME_BITMAP
FSCTL_GET_RETRIEVAL_POINTERS
FSCTL_MOVE_FILE
FSCTL_IS_VOLUME_DIRTY
FSCTL_ALLOW_EXTENDED_DASD_IO
FSCTL_FIND_FILES_BY_SID
FSCTL_SET_OBJECT_ID
FSCTL_GET_OBJECT_ID
FSCTL_DELETE_OBJECT_ID
FSCTL_SET_REPARSE_POINT
FSCTL_GET_REPARSE_POINT
FSCTL_DELETE_REPARSE_POINT
FSCTL_ENUM_USN_DATA
FSCTL_SECURITY_ID_CHECK
FSCTL_READ_USN_JOURNAL
FSCTL_SET_OBJECT_ID_EXTENDED
FSCTL_CREATE_OR_GET_OBJECT_ID
FSCTL_SET_SPARSE
FSCTL_SET_ZERO_DATA
FSCTL_QUERY_ALLOCATED_RANGES
FSCTL_ENABLE_UPGRADE
FSCTL_SET_ENCRYPTION
FSCTL_ENCRYPTION_FSCTL_IO
FSCTL_WRITE_RAW_ENCRYPTED
FSCTL_READ_RAW_ENCRYPTED
FSCTL_CREATE_USN_JOURNAL
FSCTL_READ_FILE_USN_DATA
FSCTL_WRITE_USN_CLOSE_RECORD
FSCTL_EXTEND_VOLUME
FSCTL_QUERY_USN_JOURNAL
FSCTL_DELETE_USN_JOURNAL
FSCTL_MARK_HANDLE
FSCTL_SIS_COPYFILE
FSCTL_SIS_LINK_FILES
FSCTL_RECALL_FILE
FSCTL_READ_FROM_PLEX
FSCTL_FILE_PREFETCH
FSCTL_MAKE_MEDIA_COMPATIBLE
FSCTL_SET_DEFECT_MANAGEMENT
FSCTL_QUERY_SPARING_INFO
FSCTL_QUERY_ON_DISK_VOLUME_INFO
FSCTL_SET_VOLUME_COMPRESSION_STATE
FSCTL_TXFS_MODIFY_RM
FSCTL_TXFS_QUERY_RM_INFORMATION
FSCTL_TXFS_ROLLFORWARD_REDO
FSCTL_TXFS_ROLLFORWARD_UNDO
FSCTL_TXFS_START_RM
FSCTL_TXFS_SHUTDOWN_RM
FSCTL_TXFS_READ_BACKUP_INFORMATION
FSCTL_TXFS_WRITE_BACKUP_INFORMATION
FSCTL_TXFS_CREATE_SECONDARY_RM
FSCTL_TXFS_GET_METADATA_INFO
FSCTL_TXFS_GET_TRANSACTED_VERSION
FSCTL_TXFS_SAVEPOINT_INFORMATION
FSCTL_TXFS_CREATE_MINIVERSION
FSCTL_TXFS_TRANSACTION_ACTIVE
FSCTL_SET_ZERO_ON_DEALLOCATION
FSCTL_SET_REPAIR
FSCTL_GET_REPAIR
FSCTL_WAIT_FOR_REPAIR
FSCTL_INITIATE_REPAIR
FSCTL_CSC_INTERNAL
FSCTL_SHRINK_VOLUME
FSCTL_SET_SHORT_NAME_BEHAVIOR
FSCTL_DFSR_SET_GHOST_HANDLE_STATE
FSCTL_TXFS_LIST_TRANSACTION_LOCKED_FILES
FSCTL_TXFS_LIST_TRANSACTIONS
FSCTL_QUERY_PAGEFILE_ENCRYPTION
FSCTL_RESET_VOLUME_ALLOCATION_HINTS
FSCTL_QUERY_DEPENDENT_VOLUME
FSCTL_SD_GLOBAL_CHANGE
FSCTL_TXFS_READ_BACKUP_INFORMATION2
FSCTL_LOOKUP_STREAM_FROM_CLUSTER
FSCTL_TXFS_WRITE_BACKUP_INFORMATION2
FSCTL_FILE_TYPE_NOTIFICATION
FSCTL_GET_BOOT_AREA_INFO
FSCTL_GET_RETRIEVAL_POINTER_BASE
FSCTL_SET_PERSISTENT_VOLUME_STATE
FSCTL_QUERY_PERSISTENT_VOLUME_STATE
FSCTL_REQUEST_OPLOCK
FSCTL_CSV_TUNNEL_REQUEST
FSCTL_IS_CSV_FILE
FSCTL_QUERY_FILE_SYSTEM_RECOGNITION
FSCTL_CSV_GET_VOLUME_PATH_NAME
FSCTL_CSV_GET_VOLUME_NAME_FOR_VOLUME_MOUNT_POINT
FSCTL_CSV_GET_VOLUME_PATH_NAMES_FOR_VOLUME_NAME
FSCTL_IS_FILE_ON_CSV_VOLUME
FSCTL_MARK_AS_SYSTEM_HIVE
CSV_NAMESPACE_INFO_V1
CSV_INVALID_DEVICE_NUMBER
USN_PAGE_SIZE
USN_REASON_DATA_OVERWRITE
USN_REASON_DATA_EXTEND
USN_REASON_DATA_TRUNCATION
USN_REASON_NAMED_DATA_OVERWRITE
USN_REASON_NAMED_DATA_EXTEND
USN_REASON_NAMED_DATA_TRUNCATION
USN_REASON_FILE_CREATE
USN_REASON_FILE_DELETE
USN_REASON_EA_CHANGE
USN_REASON_SECURITY_CHANGE
USN_REASON_RENAME_OLD_NAME
USN_REASON_RENAME_NEW_NAME
USN_REASON_INDEXABLE_CHANGE
USN_REASON_BASIC_INFO_CHANGE
USN_REASON_HARD_LINK_CHANGE
USN_REASON_COMPRESSION_CHANGE
USN_REASON_ENCRYPTION_CHANGE
USN_REASON_OBJECT_ID_CHANGE
USN_REASON_REPARSE_POINT_CHANGE
USN_REASON_STREAM_CHANGE
USN_REASON_TRANSACTED_CHANGE
USN_REASON_CLOSE
USN_DELETE_FLAG_DELETE
USN_DELETE_FLAG_NOTIFY
USN_DELETE_VALID_FLAGS
USN_SOURCE_DATA_MANAGEMENT
USN_SOURCE_AUXILIARY_DATA
USN_SOURCE_REPLICATION_MANAGEMENT
MARK_HANDLE_PROTECT_CLUSTERS
MARK_HANDLE_TXF_SYSTEM_LOG
MARK_HANDLE_NOT_TXF_SYSTEM_LOG
MARK_HANDLE_REALTIME
MARK_HANDLE_NOT_REALTIME
NO_8DOT3_NAME_PRESENT
REMOVED_8DOT3_NAME
PERSISTENT_VOLUME_STATE_SHORT_NAME_CREATION_DISABLED
VOLUME_IS_DIRTY
VOLUME_UPGRADE_SCHEDULED
VOLUME_SESSION_OPEN
FILE_PREFETCH_TYPE_FOR_CREATE
FILE_PREFETCH_TYPE_FOR_DIRENUM
FILE_PREFETCH_TYPE_FOR_CREATE_EX
FILE_PREFETCH_TYPE_FOR_DIRENUM_EX
FILE_PREFETCH_TYPE_MAX
FILESYSTEM_STATISTICS_TYPE_NTFS
FILESYSTEM_STATISTICS_TYPE_FAT
FILESYSTEM_STATISTICS_TYPE_EXFAT
FILE_SET_ENCRYPTION
FILE_CLEAR_ENCRYPTION
STREAM_SET_ENCRYPTION
STREAM_CLEAR_ENCRYPTION
MAXIMUM_ENCRYPTION_VALUE
ENCRYPTION_FORMAT_DEFAULT
COMPRESSION_FORMAT_SPARSE
COPYFILE_SIS_LINK
COPYFILE_SIS_REPLACE
COPYFILE_SIS_FLAGS
SET_REPAIR_ENABLED
SET_REPAIR_VOLUME_BITMAP_SCAN
SET_REPAIR_DELETE_CROSSLINK
SET_REPAIR_WARN_ABOUT_DATA_LOSS
SET_REPAIR_DISABLED_AND_BUGCHECK_ON_CORRUPT
SET_REPAIR_VALID_MASK
TXFS_RM_FLAG_LOGGING_MODE
TXFS_RM_FLAG_RENAME_RM
TXFS_RM_FLAG_LOG_CONTAINER_COUNT_MAX
TXFS_RM_FLAG_LOG_CONTAINER_COUNT_MIN
TXFS_RM_FLAG_LOG_GROWTH_INCREMENT_NUM_CONTAINERS
TXFS_RM_FLAG_LOG_GROWTH_INCREMENT_PERCENT
TXFS_RM_FLAG_LOG_AUTO_SHRINK_PERCENTAGE
TXFS_RM_FLAG_LOG_NO_CONTAINER_COUNT_MAX
TXFS_RM_FLAG_LOG_NO_CONTAINER_COUNT_MIN
TXFS_RM_FLAG_GROW_LOG
TXFS_RM_FLAG_SHRINK_LOG
TXFS_RM_FLAG_ENFORCE_MINIMUM_SIZE
TXFS_RM_FLAG_PRESERVE_CHANGES
TXFS_RM_FLAG_RESET_RM_AT_NEXT_START
TXFS_RM_FLAG_DO_NOT_RESET_RM_AT_NEXT_START
TXFS_RM_FLAG_PREFER_CONSISTENCY
TXFS_RM_FLAG_PREFER_AVAILABILITY
TXFS_LOGGING_MODE_SIMPLE
TXFS_LOGGING_MODE_FULL
TXFS_TRANSACTION_STATE_NONE
TXFS_TRANSACTION_STATE_ACTIVE
TXFS_TRANSACTION_STATE_PREPARED
TXFS_TRANSACTION_STATE_NOTACTIVE
TXFS_MODIFY_RM_VALID_FLAGS
TXFS_RM_STATE_NOT_STARTED
TXFS_RM_STATE_STARTING
TXFS_RM_STATE_ACTIVE
TXFS_RM_STATE_SHUTTING_DOWN
TXFS_QUERY_RM_INFORMATION_VALID_FLAGS
TXFS_ROLLFORWARD_REDO_FLAG_USE_LAST_REDO_LSN
TXFS_ROLLFORWARD_REDO_FLAG_USE_LAST_VIRTUAL_CLOCK
TXFS_ROLLFORWARD_REDO_VALID_FLAGS
TXFS_START_RM_FLAG_LOG_CONTAINER_COUNT_MAX
TXFS_START_RM_FLAG_LOG_CONTAINER_COUNT_MIN
TXFS_START_RM_FLAG_LOG_CONTAINER_SIZE
TXFS_START_RM_FLAG_LOG_GROWTH_INCREMENT_NUM_CONTAINERS
TXFS_START_RM_FLAG_LOG_GROWTH_INCREMENT_PERCENT
TXFS_START_RM_FLAG_LOG_AUTO_SHRINK_PERCENTAGE
TXFS_START_RM_FLAG_LOG_NO_CONTAINER_COUNT_MAX
TXFS_START_RM_FLAG_LOG_NO_CONTAINER_COUNT_MIN
TXFS_START_RM_FLAG_RECOVER_BEST_EFFORT
TXFS_START_RM_FLAG_LOGGING_MODE
TXFS_START_RM_FLAG_PRESERVE_CHANGES
TXFS_START_RM_FLAG_PREFER_CONSISTENCY
TXFS_START_RM_FLAG_PREFER_AVAILABILITY
TXFS_START_RM_VALID_FLAGS
TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY_FLAG_CREATED
TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY_FLAG_DELETED
TXFS_TRANSACTED_VERSION_NONTRANSACTED
TXFS_TRANSACTED_VERSION_UNCOMMITTED
TXFS_SAVEPOINT_SET
TXFS_SAVEPOINT_ROLLBACK
TXFS_SAVEPOINT_CLEAR
TXFS_SAVEPOINT_CLEAR_ALL
OPLOCK_LEVEL_CACHE_READ
OPLOCK_LEVEL_CACHE_HANDLE
OPLOCK_LEVEL_CACHE_WRITE
REQUEST_OPLOCK_INPUT_FLAG_REQUEST
REQUEST_OPLOCK_INPUT_FLAG_ACK
REQUEST_OPLOCK_INPUT_FLAG_COMPLETE_ACK_ON_CLOSE
REQUEST_OPLOCK_CURRENT_VERSION
REQUEST_OPLOCK_OUTPUT_FLAG_ACK_REQUIRED
REQUEST_OPLOCK_OUTPUT_FLAG_MODES_PROVIDED
SD_GLOBAL_CHANGE_TYPE_MACHINE_SID
ENCRYPTED_DATA_INFO_SPARSE_FILE
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_FLAG_PAGE_FILE
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_FLAG_DENY_DEFRAG_SET
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_FLAG_FS_SYSTEM_FILE
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_FLAG_TXF_SYSTEM_FILE
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_ATTRIBUTE_MASK
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_ATTRIBUTE_DATA
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_ATTRIBUTE_INDEX
LOOKUP_STREAM_FROM_CLUSTER_ENTRY_ATTRIBUTE_SYSTEM
FILE_TYPE_NOTIFICATION_FLAG_USAGE_BEGIN
FILE_TYPE_NOTIFICATION_FLAG_USAGE_END
LOCK_QUEUE_WAIT
LOCK_QUEUE_WAIT_BIT
LOCK_QUEUE_OWNER
LOCK_QUEUE_OWNER_BIT
LOCK_QUEUE_TIMER_LOCK_SHIFT
LOCK_QUEUE_TIMER_TABLE_LOCKS
PROCESS_TERMINATE
PROCESS_CREATE_THREAD
PROCESS_SET_SESSIONID
PROCESS_VM_OPERATION
PROCESS_VM_READ
PROCESS_VM_WRITE
PROCESS_DUP_HANDLE
PROCESS_CREATE_PROCESS
PROCESS_SET_QUOTA
PROCESS_SET_INFORMATION
PROCESS_QUERY_INFORMATION
PROCESS_SET_PORT
PROCESS_SUSPEND_RESUME
NtCurrentThread
(
)
NtCurrentProcess
(
)
ZwCurrentProcess
(
)
ZwCurrentThread
(
)
NtLastError
(
)
NtLastStatus
(
)
NtCurrentPID
(
)
NtCurrentPID
(
)
THREAD_TERMINATE
THREAD_SUSPEND_RESUME
THREAD_ALERT
THREAD_GET_CONTEXT
THREAD_SET_CONTEXT
THREAD_SET_INFORMATION
THREAD_QUERY_INFORMATION
THREAD_SET_THREAD_TOKEN
THREAD_IMPERSONATE
THREAD_DIRECT_IMPERSONATION
JOB_OBJECT_ASSIGN_PROCESS
JOB_OBJECT_SET_ATTRIBUTES
JOB_OBJECT_QUERY
JOB_OBJECT_TERMINATE
JOB_OBJECT_SET_SECURITY_ATTRIBUTES
JOB_OBJECT_ALL_ACCESS
PEB_STDIO_HANDLE_NATIVE
PEB_STDIO_HANDLE_SUBSYS
PEB_STDIO_HANDLE_PM
PEB_STDIO_HANDLE_RESERVED
GDI_HANDLE_BUFFER_SIZE32
GDI_HANDLE_BUFFER_SIZE64
GDI_HANDLE_BUFFER_SIZE
FOREGROUND_BASE_PRIORITY
NORMAL_BASE_PRIORITY
FILE_READ_ACCESS
FILE_SUPERSEDE
FILE_OPEN
FILE_CREATE
FILE_OPEN_IF
FILE_OVERWRITE
FILE_OVERWRITE_IF
FILE_MAXIMUM_DISPOSITION
FILE_DIRECTORY_FILE
FILE_WRITE_THROUGH
FILE_SEQUENTIAL_ONLY
FILE_NO_INTERMEDIATE_BUFFERING
FILE_SYNCHRONOUS_IO_ALERT
FILE_SYNCHRONOUS_IO_NONALERT
FILE_NON_DIRECTORY_FILE
FILE_CREATE_TREE_CONNECTION
FILE_COMPLETE_IF_OPLOCKED
FILE_NO_EA_KNOWLEDGE
FILE_OPEN_FOR_RECOVERY
FILE_RANDOM_ACCESS
FILE_DELETE_ON_CLOSE
FILE_OPEN_BY_FILE_ID
FILE_OPEN_FOR_BACKUP_INTENT
FILE_NO_COMPRESSION
FILE_RESERVE_OPFILTER
FILE_OPEN_REPARSE_POINT
FILE_OPEN_NO_RECALL
FILE_OPEN_FOR_FREE_SPACE_QUERY
FILE_COPY_STRUCTURED_STORAGE
FILE_STRUCTURED_STORAGE
FILE_VALID_OPTION_FLAGS
FILE_VALID_PIPE_OPTION_FLAGS
FILE_VALID_MAILSLOT_OPTION_FLAGS
FILE_VALID_SET_FLAGS
WIN32_CLIENT_INFO_LENGTH
PIO_APC_ROUTINE_DEFINED
IO_COMPLETION_QUERY_STATE
IO_COMPLETION_MODIFY_STATE
IO_COMPLETION_ALL_ACCESS
SEMAPHORE_QUERY_STATE
SEMAPHORE_MODIFY_STATE
SEMAPHORE_ALL_ACCESS
MUTANT_QUERY_STATE
MUTANT_ALL_ACCESS
TIMER_QUERY_STATE
TIMER_MODIFY_STATE
TIMER_ALL_ACCESS
OBJ_NAME_PATH_SEPARATOR
OBJ_MAX_REPARSE_ATTEMPTS
OBJECT_TYPE_CREATE
OBJECT_TYPE_ALL_ACCESS
DIRECTORY_QUERY
DIRECTORY_TRAVERSE
DIRECTORY_CREATE_OBJECT
DIRECTORY_CREATE_SUBDIRECTORY
DIRECTORY_ALL_ACCESS
SYMBOLIC_LINK_QUERY
SYMBOLIC_LINK_ALL_ACCESS
MDL_HASH_TABLE_SIZE
MDL_HASH_MASK
MDL_HASH_INDEX
(
wch
)
HEAP_MAKE_TAG_FLAGS
(
b,o
)
RTL_HEAP_MAKE_TAG
MAXIMUM_LEADBYTES
RTL_RANGE_LIST_SHARED_OK
RTL_RANGE_LIST_NULL_CONFLICT_OK
SE_CREATE_TOKEN_NAME
SE_ASSIGNPRIMARYTOKEN_NAME
SE_LOCK_MEMORY_NAME
SE_INCREASE_QUOTA_NAME
SE_UNSOLICITED_INPUT_NAME
SE_MACHINE_ACCOUNT_NAME
SE_TCB_NAME
SE_SECURITY_NAME
SE_TAKE_OWNERSHIP_NAME
SE_LOAD_DRIVER_NAME
SE_SYSTEM_PROFILE_NAME
SE_SYSTEMTIME_NAME
SE_PROF_SINGLE_PROCESS_NAME
SE_INC_BASE_PRIORITY_NAME
SE_CREATE_PAGEFILE_NAME
SE_CREATE_PERMANENT_NAME
SE_BACKUP_NAME
SE_RESTORE_NAME
SE_SHUTDOWN_NAME
SE_DEBUG_NAME
SE_AUDIT_NAME
SE_SYSTEM_ENVIRONMENT_NAME
SE_CHANGE_NOTIFY_NAME
SE_REMOTE_SHUTDOWN_NAME
SE_UNDOCK_NAME
SE_SYNC_AGENT_NAME
SE_ENABLE_DELEGATION_NAME
SE_MANAGE_VOLUME_NAME
SE_IMPERSONATE_NAME
SE_CREATE_GLOBAL_NAME
SE_MIN_WELL_KNOWN_PRIVILEGE
SE_CREATE_TOKEN_PRIVILEGE
SE_ASSIGNPRIMARYTOKEN_PRIVILEGE
SE_LOCK_MEMORY_PRIVILEGE
SE_INCREASE_QUOTA_PRIVILEGE
SE_MACHINE_ACCOUNT_PRIVILEGE
SE_TCB_PRIVILEGE
SE_SECURITY_PRIVILEGE
SE_TAKE_OWNERSHIP_PRIVILEGE
SE_LOAD_DRIVER_PRIVILEGE
SE_SYSTEM_PROFILE_PRIVILEGE
SE_SYSTEMTIME_PRIVILEGE
SE_PROF_SINGLE_PROCESS_PRIVILEGE
SE_INC_BASE_PRIORITY_PRIVILEGE
SE_CREATE_PAGEFILE_PRIVILEGE
SE_CREATE_PERMANENT_PRIVILEGE
SE_BACKUP_PRIVILEGE
SE_RESTORE_PRIVILEGE
SE_SHUTDOWN_PRIVILEGE
SE_DEBUG_PRIVILEGE
SE_AUDIT_PRIVILEGE
SE_SYSTEM_ENVIRONMENT_PRIVILEGE
SE_CHANGE_NOTIFY_PRIVILEGE
SE_REMOTE_SHUTDOWN_PRIVILEGE
SE_UNDOCK_PRIVILEGE
SE_SYNC_AGENT_PRIVILEGE
SE_ENABLE_DELEGATION_PRIVILEGE
SE_MANAGE_VOLUME_PRIVILEGE
SE_IMPERSONATE_PRIVILEGE
SE_CREATE_GLOBAL_PRIVILEGE
SE_TRUSTED_CREDMAN_ACCESS_PRIVILEGE
SE_RELABEL_PRIVILEGE
SE_INC_WORKING_SET_PRIVILEGE
SE_TIME_ZONE_PRIVILEGE
SE_CREATE_SYMBOLIC_LINK_PRIVILEGE
SE_MAX_WELL_KNOWN_PRIVILEGE
CACHE_FULLY_ASSOCIATIVE
PROCESSOR_INTEL_386
PROCESSOR_INTEL_486
PROCESSOR_INTEL_PENTIUM
PROCESSOR_INTEL_IA64
PROCESSOR_AMD_X8664
PROCESSOR_MIPS_R4000
PROCESSOR_ALPHA_21064
PROCESSOR_PPC_601
PROCESSOR_PPC_603
PROCESSOR_PPC_604
PROCESSOR_PPC_620
PROCESSOR_HITACHI_SH3
PROCESSOR_HITACHI_SH3E
PROCESSOR_HITACHI_SH4
PROCESSOR_MOTOROLA_821
PROCESSOR_SHx_SH3
PROCESSOR_SHx_SH4
PROCESSOR_STRONGARM
PROCESSOR_ARM720
PROCESSOR_ARM820
PROCESSOR_ARM920
PROCESSOR_ARM_7TDMI
PROCESSOR_OPTIL
PROCESSOR_ARCHITECTURE_INTEL
PROCESSOR_ARCHITECTURE_MIPS
PROCESSOR_ARCHITECTURE_ALPHA
PROCESSOR_ARCHITECTURE_PPC
PROCESSOR_ARCHITECTURE_SHX
PROCESSOR_ARCHITECTURE_ARM
PROCESSOR_ARCHITECTURE_IA64
PROCESSOR_ARCHITECTURE_ALPHA64
PROCESSOR_ARCHITECTURE_MSIL
PROCESSOR_ARCHITECTURE_AMD64
PROCESSOR_ARCHITECTURE_IA32_ON_WIN64
PROCESSOR_ARCHITECTURE_UNKNOWN
PF_FLOATING_POINT_PRECISION_ERRATA
PF_FLOATING_POINT_EMULATED
PF_COMPARE_EXCHANGE_DOUBLE
PF_MMX_INSTRUCTIONS_AVAILABLE
PF_PPC_MOVEMEM_64BIT_OK
PF_ALPHA_BYTE_INSTRUCTIONS
PF_XMMI_INSTRUCTIONS_AVAILABLE
PF_3DNOW_INSTRUCTIONS_AVAILABLE
PF_RDTSC_INSTRUCTION_AVAILABLE
PF_PAE_ENABLED
PF_XMMI64_INSTRUCTIONS_AVAILABLE
PF_SSE_DAZ_MODE_AVAILABLE
PF_NX_ENABLED
PF_SSE3_INSTRUCTIONS_AVAILABLE
PF_COMPARE_EXCHANGE128
PF_COMPARE64_EXCHANGE128
PF_CHANNELS_ENABLED
MM_WORKING_SET_MAX_HARD_ENABLE
MM_WORKING_SET_MAX_HARD_DISABLE
MM_WORKING_SET_MIN_HARD_ENABLE
MM_WORKING_SET_MIN_HARD_DISABLE
FLG_HOTPATCH_KERNEL
FLG_HOTPATCH_RELOAD_NTDLL
FLG_HOTPATCH_NAME_INFO
FLG_HOTPATCH_RENAME_INFO
FLG_HOTPATCH_MAP_ATOMIC_SWAP
FLG_HOTPATCH_WOW64
FLG_HOTPATCH_ACTIVE
FLG_HOTPATCH_STATUS_FLAGS
FLG_HOTPATCH_VERIFICATION_ERROR
WDSTATE_FIRED
WDSTATE_HARDWARE_ENABLED
WDSTATE_STARTED
WDSTATE_HARDWARE_PRESENT
GDI_MAX_HANDLE_COUNT
GDI_HANDLE_INDEX_SHIFT
GDI_HANDLE_INDEX_BITS
GDI_HANDLE_INDEX_MASK
GDI_HANDLE_TYPE_SHIFT
GDI_HANDLE_TYPE_BITS
GDI_HANDLE_TYPE_MASK
GDI_HANDLE_ALTTYPE_SHIFT
GDI_HANDLE_ALTTYPE_BITS
GDI_HANDLE_ALTTYPE_MASK
GDI_HANDLE_STOCK_SHIFT
GDI_HANDLE_STOCK_BITS
GDI_HANDLE_STOCK_MASK
GDI_HANDLE_UNIQUE_SHIFT
GDI_HANDLE_UNIQUE_BITS
GDI_HANDLE_UNIQUE_MASK
GDI_HANDLE_INDEX
(
Handle
)
GDI_HANDLE_TYPE
(
Handle
)
GDI_HANDLE_ALTTYPE
(
Handle
)
GDI_HANDLE_STOCK
(
Handle
)
GDI_MAKE_HANDLE
(
Index,Unique
)
GDI_DEF_TYPE
GDI_DC_TYPE
GDI_DD_DIRECTDRAW_TYPE
GDI_DD_SURFACE_TYPE
GDI_RGN_TYPE
GDI_SURF_TYPE
GDI_CLIENTOBJ_TYPE
GDI_PATH_TYPE
GDI_PAL_TYPE
GDI_ICMLCS_TYPE
GDI_LFONT_TYPE
GDI_RFONT_TYPE
GDI_PFE_TYPE
GDI_PFT_TYPE
GDI_ICMCXF_TYPE
GDI_ICMDLL_TYPE
GDI_BRUSH_TYPE
GDI_PFF_TYPE
GDI_CACHE_TYPE
GDI_SPACE_TYPE
GDI_DBRUSH_TYPE
GDI_META_TYPE
GDI_EFSTATE_TYPE
GDI_BMFD_TYPE
GDI_VTFD_TYPE
GDI_TTFD_TYPE
GDI_RC_TYPE
GDI_TEMP_TYPE
GDI_DRVOBJ_TYPE
GDI_DCIOBJ_TYPE
GDI_SPOOL_TYPE
GDI_CLIENT_TYPE_FROM_HANDLE
(
Handle
)
GDI_CLIENT_TYPE_FROM_UNIQUE
(
Unique
)
GDI_ALTTYPE_1
GDI_ALTTYPE_2
GDI_ALTTYPE_3
GDI_CLIENT_BITMAP_TYPE
GDI_CLIENT_BRUSH_TYPE
GDI_CLIENT_CLIENTOBJ_TYPE
GDI_CLIENT_DC_TYPE
GDI_CLIENT_FONT_TYPE
GDI_CLIENT_PALETTE_TYPE
GDI_CLIENT_REGION_TYPE
GDI_CLIENT_ALTDC_TYPE
GDI_CLIENT_DIBSECTION_TYPE
GDI_CLIENT_EXTPEN_TYPE
GDI_CLIENT_METADC16_TYPE
GDI_CLIENT_METAFILE_TYPE
GDI_CLIENT_METAFILE16_TYPE
GDI_CLIENT_PEN_TYPE
FLS_MAXIMUM_AVAILABLE
TLS_MINIMUM_AVAILABLE
TLS_EXPANSION_SLOTS
DOS_MAX_COMPONENT_LENGTH
DOS_MAX_PATH_LENGTH
RTL_USER_PROC_CURDIR_CLOSE
RTL_USER_PROC_CURDIR_INHERIT
RTL_MAX_DRIVE_LETTERS
RTL_DRIVE_LETTER_VALID
WOW64_SYSTEM_DIRECTORY
WOW64_SYSTEM_DIRECTORY_U
WOW64_X86_TAG
WOW64_X86_TAG_U
SET_LAST_STATUS
(
S
)
WOW64_POINTER
(
Type
)
LDR_DATA_TABLE_ENTRY_SIZE_WINXP32
GDI_BATCH_BUFFER_SIZE
PORT_CONNECT
PORT_ALL_ACCESS
CSR_API_PORT_NAME
CSR_NORMAL_PRIORITY_CLASS
CSR_IDLE_PRIORITY_CLASS
CSR_HIGH_PRIORITY_CLASS
CSR_REALTIME_PRIORITY_CLASS
WINSS_OBJECT_DIRECTORY_NAME
CSRSRV_SERVERDLL_INDEX
CSRSRV_FIRST_API_NUMBER
BASESRV_SERVERDLL_INDEX
BASESRV_FIRST_API_NUMBER
CONSRV_SERVERDLL_INDEX
CONSRV_FIRST_API_NUMBER
USERSRV_SERVERDLL_INDEX
USERSRV_FIRST_API_NUMBER
CSR_MAKE_API_NUMBER
(
DllIndex,ApiIndex
)
CSR_APINUMBER_TO_SERVERDLLINDEX
(
ApiNumber
)
CSR_APINUMBER_TO_APITABLEINDEX
(
ApiNumber
)
GDI_BATCH_BUFFER_SIZE
STATIC_UNICODE_BUFFER_LENGTH
WIN32_CLIENT_INFO_LENGTH
WIN32_CLIENT_INFO_SPIN_COUNT
TLS_MINIMUM_AVAILABLE
LDRP_STATIC_LINK
LDRP_IMAGE_DLL
LDRP_LOAD_IN_PROGRESS
LDRP_UNLOAD_IN_PROGRESS
LDRP_ENTRY_PROCESSED
LDRP_ENTRY_INSERTED
LDRP_CURRENT_LOAD
LDRP_FAILED_BUILTIN_LOAD
LDRP_DONT_CALL_FOR_THREADS
LDRP_PROCESS_ATTACH_CALLED
LDRP_DEBUG_SYMBOLS_LOADED
LDRP_IMAGE_NOT_AT_BASE
LDRP_COR_IMAGE
LDRP_COR_OWNS_UNMAP
LDRP_SYSTEM_MAPPED
LDRP_IMAGE_VERIFYING
LDRP_DRIVER_DEPENDENT_DLL
LDRP_ENTRY_NATIVE
LDRP_REDIRECTED
LDRP_NON_PAGED_DEBUG_INFO
LDRP_MM_LOADED
LDRP_COMPAT_DATABASE_PROCESSED
LDR_GET_DLL_HANDLE_EX_UNCHANGED_REFCOUNT
LDR_GET_DLL_HANDLE_EX_PIN
LDR_ADDREF_DLL_PIN
LDR_GET_PROCEDURE_ADDRESS_DONT_RECORD_FORWARDER
LDR_LOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS
LDR_LOCK_LOADER_LOCK_FLAG_TRY_ONLY
LDR_LOCK_LOADER_LOCK_DISPOSITION_INVALID
LDR_LOCK_LOADER_LOCK_DISPOSITION_LOCK_ACQUIRED
LDR_LOCK_LOADER_LOCK_DISPOSITION_LOCK_NOT_ACQUIRED
LDR_UNLOCK_LOADER_LOCK_FLAG_RAISE_ON_ERRORS
LDR_DLL_NOTIFICATION_REASON_LOADED
LDR_DLL_NOTIFICATION_REASON_UNLOADED
DOS_MAX_COMPONENT_LENGTH
DOS_MAX_PATH_LENGTH
RTL_USER_PROC_CURDIR_CLOSE
RTL_USER_PROC_CURDIR_INHERIT
RTL_MAX_DRIVE_LETTERS
RTL_DRIVE_LETTER_VALID
ACTIVATION_CONTEXT_STACK_FLAG_QUERIES_DISABLED
TEB_ACTIVE_FRAME_CONTEXT_FLAG_EXTENDED
TEB_ACTIVE_FRAME_FLAG_EXTENDED
PcTeb
RtlGetCurrentProcessId
(
)
RtlGetCurrentThreadId
(
)
ZwCurrentProcess
(
)
WOWAddress
(
)
RtlProcessHeap
(
)
RtlAcquireLockRoutine
(
L
)
RTL_HEAP_BUSY
RTL_HEAP_SEGMENT
RTL_HEAP_SETTABLE_VALUE
RTL_HEAP_SETTABLE_FLAG1
RTL_HEAP_SETTABLE_FLAG2
RTL_HEAP_SETTABLE_FLAG3
RTL_HEAP_SETTABLE_FLAGS
RTL_HEAP_UNCOMMITTED_RANGE
RTL_HEAP_PROTECTED_ENTRY
POINTER_64
POINTER_32
POINTER_32
VER_SERVER_NT
VER_WORKSTATION_NT
VER_SUITE_SMALLBUSINESS
VER_SUITE_ENTERPRISE
VER_SUITE_BACKOFFICE
VER_SUITE_COMMUNICATIONS
VER_SUITE_TERMINAL
VER_SUITE_SMALLBUSINESS_RESTRICTED
VER_SUITE_EMBEDDEDNT
VER_SUITE_DATACENTER
VER_SUITE_SINGLEUSERTS
VER_SUITE_PERSONAL
VER_SUITE_BLADE
VER_SUITE_EMBEDDED_RESTRICTED
VER_SUITE_SECURITY_APPLIANCE
VER_SUITE_STORAGE_SERVER
VER_SUITE_COMPUTE_SERVER
EXCEPTION_CHAIN_END
MAJOR_VERSION
MINOR_VERSION
OS2_VERSION
DBG_TEB_THREADNAME
DBG_TEB_RESERVED_1
DBG_TEB_RESERVED_2
DBG_TEB_RESERVED_3
DBG_TEB_RESERVED_4
DBG_TEB_RESERVED_5
DBG_TEB_RESERVED_6
DBG_TEB_RESERVED_7
DBG_TEB_RESERVED_8
PROCESS_PRIORITY_CLASS_UNKNOWN
PROCESS_PRIORITY_CLASS_IDLE
PROCESS_PRIORITY_CLASS_NORMAL
PROCESS_PRIORITY_CLASS_HIGH
PROCESS_PRIORITY_CLASS_REALTIME
PROCESS_PRIORITY_CLASS_BELOW_NORMAL
PROCESS_PRIORITY_CLASS_ABOVE_NORMAL
FILE_PATH_VERSION
FILE_PATH_TYPE_ARC
FILE_PATH_TYPE_ARC_SIGNATURE
FILE_PATH_TYPE_NT
FILE_PATH_TYPE_EFI
FILE_PATH_TYPE_MIN
FILE_PATH_TYPE_MAX
WINDOWS_OS_OPTIONS_SIGNATURE
WINDOWS_OS_OPTIONS_VERSION
LongAlignPtr
(
Ptr
)
LongAlignSize
(
Size
)
RtlpOwnerAddrSecurityDescriptor
(
SD
)
RtlpGroupAddrSecurityDescriptor
(
SD
)
RtlpSaclAddrSecurityDescriptor
(
SD
)
RtlpDaclAddrSecurityDescriptor
(
SD
)
RtlpIdAssignableAsOwner
(
G
)
RtlpPropagateControlBits
(
NewSD,OldSD,Bits
)
RtlpAreControlBitsSet
(
SD,Bits
)
RtlpSetControlBits
(
SD,Bits
)
RtlpClearControlBits
(
SD,Bits
)
Audit_System_SecurityStateChange_defined
Audit_System_SecuritySubsystemExtension_defined
Audit_System_Integrity_defined
Audit_System_IPSecDriverEvents_defined
Audit_System_Others_defined
Audit_Logon_Logon_defined
Audit_Logon_Logoff_defined
Audit_Logon_AccountLockout_defined
Audit_Logon_IPSecMainMode_defined
Audit_Logon_IPSecQuickMode_defined
Audit_Logon_IPSecUserMode_defined
Audit_Logon_SpecialLogon_defined
Audit_Logon_Others_defined
Audit_ObjectAccess_FileSystem_defined
Audit_ObjectAccess_Registry_defined
Audit_ObjectAccess_Kernel_defined
Audit_ObjectAccess_Sam_defined
Audit_ObjectAccess_CertificationServices_defined
Audit_ObjectAccess_ApplicationGenerated_defined
Audit_ObjectAccess_Handle_defined
Audit_ObjectAccess_Share_defined
Audit_ObjectAccess_FirewallPacketDrops_defined
Audit_ObjectAccess_FirewallConnection_defined
Audit_ObjectAccess_Other_defined
Audit_PrivilegeUse_Sensitive_defined
Audit_PrivilegeUse_NonSensitive_defined
Audit_PrivilegeUse_Others_defined
Audit_DetailedTracking_ProcessCreation_defined
Audit_DetailedTracking_ProcessTermination_defined
Audit_DetailedTracking_DpapiActivity_defined
Audit_DetailedTracking_RpcCall_defined
Audit_PolicyChange_AuditPolicy_defined
Audit_PolicyChange_AuthenticationPolicy_defined
Audit_PolicyChange_AuthorizationPolicy_defined
Audit_PolicyChange_MpsscvRulePolicy_defined
Audit_PolicyChange_WfpIPSecPolicy_defined
Audit_PolicyChange_Others_defined
Audit_AccountManagement_UserAccount_defined
Audit_AccountManagement_ComputerAccount_defined
Audit_AccountManagement_SecurityGroup_defined
Audit_AccountManagement_DistributionGroup_defined
Audit_AccountManagement_ApplicationGroup_defined
Audit_AccountManagement_Others_defined
Audit_DSAccess_DSAccess_defined
Audit_DsAccess_AdAuditChanges_defined
Audit_Ds_Replication_defined
Audit_Ds_DetailedReplication_defined
Audit_AccountLogon_CredentialValidation_defined
Audit_AccountLogon_Kerberos_defined
Audit_AccountLogon_Others_defined
Audit_AccountLogon_KerbCredentialValidation_defined
Audit_Logon_NPS_defined
Audit_ObjectAccess_DetailedFileShare_defined
Audit_System_defined
Audit_Logon_defined
Audit_ObjectAccess_defined
Audit_PrivilegeUse_defined
Audit_DetailedTracking_defined
Audit_PolicyChange_defined
Audit_AccountManagement_defined
Audit_DirectoryServiceAccess_defined
Audit_AccountLogon_defined
_NTLSA_IFS_
_LSALOOKUP_
LOOKUP_VIEW_LOCAL_INFORMATION
LOOKUP_TRANSLATE_NAMES
LSA_MODE_PASSWORD_PROTECTED
LSA_MODE_INDIVIDUAL_ACCOUNTS
LSA_MODE_MANDATORY_ACCESS
LSA_MODE_LOG_FULL
_NTLSA_AUDIT_
SE_ADT_OBJECT_ONLY
SE_MAX_AUDIT_PARAMETERS
SE_MAX_GENERIC_AUDIT_PARAMETERS
SE_ADT_PARAMETERS_SELF_RELATIVE
SE_ADT_PARAMETERS_SEND_TO_LSA
SE_ADT_PARAMETER_EXTENSIBLE_AUDIT
SE_ADT_PARAMETER_GENERIC_AUDIT
SE_ADT_PARAMETER_WRITE_SYNCHRONOUS
LSAP_SE_ADT_PARAMETER_ARRAY_TRUE_SIZE
(
AuditParameters
)
POLICY_AUDIT_EVENT_UNCHANGED
POLICY_AUDIT_EVENT_SUCCESS
POLICY_AUDIT_EVENT_FAILURE
POLICY_AUDIT_EVENT_NONE
POLICY_AUDIT_EVENT_MASK
LSA_SUCCESS
(
Error
)
POLICY_VIEW_LOCAL_INFORMATION
POLICY_VIEW_AUDIT_INFORMATION
POLICY_GET_PRIVATE_INFORMATION
POLICY_TRUST_ADMIN
POLICY_CREATE_ACCOUNT
POLICY_CREATE_SECRET
POLICY_CREATE_PRIVILEGE
POLICY_SET_DEFAULT_QUOTA_LIMITS
POLICY_SET_AUDIT_REQUIREMENTS
POLICY_AUDIT_LOG_ADMIN
POLICY_SERVER_ADMIN
POLICY_LOOKUP_NAMES
POLICY_NOTIFICATION
POLICY_ALL_ACCESS
POLICY_READ
POLICY_WRITE
POLICY_EXECUTE
PER_USER_POLICY_UNCHANGED
PER_USER_AUDIT_SUCCESS_INCLUDE
PER_USER_AUDIT_SUCCESS_EXCLUDE
PER_USER_AUDIT_FAILURE_INCLUDE
PER_USER_AUDIT_FAILURE_EXCLUDE
PER_USER_AUDIT_NONE
VALID_PER_USER_AUDIT_POLICY_FLAG
POLICY_QOS_SCHANNEL_REQUIRED
POLICY_QOS_OUTBOUND_INTEGRITY
POLICY_QOS_OUTBOUND_CONFIDENTIALITY
POLICY_QOS_INBOUND_INTEGRITY
POLICY_QOS_INBOUND_CONFIDENTIALITY
POLICY_QOS_ALLOW_LOCAL_ROOT_CERT_STORE
POLICY_QOS_RAS_SERVER_ALLOWED
POLICY_QOS_DHCP_SERVER_ALLOWED
POLICY_KERBEROS_VALIDATE_CLIENT
TRUST_DIRECTION_DISABLED
TRUST_DIRECTION_INBOUND
TRUST_DIRECTION_OUTBOUND
TRUST_DIRECTION_BIDIRECTIONAL
TRUST_TYPE_DOWNLEVEL
TRUST_TYPE_UPLEVEL
TRUST_TYPE_MIT
TRUST_TYPE_DCE
TRUST_ATTRIBUTE_NON_TRANSITIVE
TRUST_ATTRIBUTE_UPLEVEL_ONLY
TRUST_ATTRIBUTE_TREE_PARENT
TRUST_ATTRIBUTE_TREE_ROOT
TRUST_ATTRIBUTES_VALID
TRUST_ATTRIBUTE_FILTER_SIDS
TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
TRUST_ATTRIBUTE_FOREST_TRANSITIVE
TRUST_ATTRIBUTE_CROSS_ORGANIZATION
TRUST_ATTRIBUTE_WITHIN_FOREST
TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
TRUST_ATTRIBUTE_TRUST_USES_RC4_ENCRYPTION
TRUST_ATTRIBUTE_TRUST_USES_AES_KEYS
TRUST_ATTRIBUTES_VALID
TRUST_ATTRIBUTES_USER
TRUST_AUTH_TYPE_NONE
TRUST_AUTH_TYPE_NT4OWF
TRUST_AUTH_TYPE_CLEAR
TRUST_AUTH_TYPE_VERSION
LSA_FOREST_TRUST_RECORD_TYPE_UNRECOGNIZED
LSA_FTRECORD_DISABLED_REASONS
LSA_TLN_DISABLED_NEW
LSA_TLN_DISABLED_ADMIN
LSA_TLN_DISABLED_CONFLICT
LSA_SID_DISABLED_ADMIN
LSA_SID_DISABLED_CONFLICT
LSA_NB_DISABLED_ADMIN
LSA_NB_DISABLED_CONFLICT
MAX_FOREST_TRUST_BINARY_DATA_SIZE
MAX_RECORDS_IN_FOREST_TRUST_INFO
SE_INTERACTIVE_LOGON_NAME
SE_NETWORK_LOGON_NAME
SE_BATCH_LOGON_NAME
SE_SERVICE_LOGON_NAME
SE_DENY_INTERACTIVE_LOGON_NAME
SE_DENY_NETWORK_LOGON_NAME
SE_DENY_BATCH_LOGON_NAME
SE_DENY_SERVICE_LOGON_NAME
SE_REMOTE_INTERACTIVE_LOGON_NAME
SE_DENY_REMOTE_INTERACTIVE_LOGON_NAME
EFI_DRIVER_ENTRY_VERSION
MAX_STACK_DEPTH
HEAP_SETTABLE_USER_VALUE
HEAP_SETTABLE_USER_FLAG1
HEAP_SETTABLE_USER_FLAG2
HEAP_SETTABLE_USER_FLAG3
HEAP_SETTABLE_USER_FLAGS
HEAP_CLASS_0
HEAP_CLASS_1
HEAP_CLASS_2
HEAP_CLASS_3
HEAP_CLASS_4
HEAP_CLASS_5
HEAP_CLASS_6
HEAP_CLASS_7
HEAP_CLASS_8
HEAP_CLASS_MASK
COMPRESSION_FORMAT_NONE
COMPRESSION_FORMAT_DEFAULT
COMPRESSION_FORMAT_LZNT1
COMPRESSION_ENGINE_STANDARD
COMPRESSION_ENGINE_MAXIMUM
COMPRESSION_ENGINE_HIBER
RTL_USER_PROC_CURDIR_CLOSE
RTL_USER_PROC_CURDIR_INHERIT
RTL_RANGE_SHARED
RTL_RANGE_CONFLICT
RTL_USER_PROC_PARAMS_NORMALIZED
RTL_USER_PROC_PROFILE_USER
RTL_USER_PROC_PROFILE_KERNEL
RTL_USER_PROC_PROFILE_SERVER
RTL_USER_PROC_RESERVE_1MB
RTL_USER_PROC_RESERVE_16MB
RTL_USER_PROC_CASE_SENSITIVE
RTL_USER_PROC_DISABLE_HEAP_DECOMMIT
RTL_USER_PROC_DLL_REDIRECTION_LOCAL
RTL_USER_PROC_APP_MANIFEST_PRESENT
RTL_USER_PROC_IMAGE_KEY_MISSING
RTL_USER_PROC_OPTIN_PROCESS
RTL_TRACE_IN_USER_MODE
RTL_TRACE_IN_KERNEL_MODE
RTL_TRACE_USE_NONPAGED_POOL
RTL_TRACE_USE_PAGED_POOL
RTL_RESOURCE_FLAG_LONG_TERM
RTL_HEAP_BUSY
RTL_HEAP_SEGMENT
RTL_HEAP_SETTABLE_VALUE
RTL_HEAP_SETTABLE_FLAG1
RTL_HEAP_SETTABLE_FLAG2
RTL_HEAP_SETTABLE_FLAG3
RTL_HEAP_SETTABLE_FLAGS
RTL_HEAP_UNCOMMITTED_RANGE
RTL_HEAP_PROTECTED_ENTRY
SET_LAST_STATUS
(
S
)
HEAP_GRANULARITY
HEAP_GRANULARITY_SHIFT
HEAP_MAXIMUM_BLOCK_SIZE
HEAP_MAXIMUM_FREELISTS
HEAP_MAXIMUM_SEGMENTS
HEAP_ENTRY_BUSY
HEAP_ENTRY_EXTRA_PRESENT
HEAP_ENTRY_FILL_PATTERN
HEAP_ENTRY_VIRTUAL_ALLOC
HEAP_ENTRY_LAST_ENTRY
HEAP_ENTRY_SETTABLE_FLAG1
HEAP_ENTRY_SETTABLE_FLAG2
HEAP_ENTRY_SETTABLE_FLAG3
HEAP_ENTRY_SETTABLE_FLAGS
NX_SUPPORT_POLICY_ALWAYSOFF
NX_SUPPORT_POLICY_ALWAYSON
NX_SUPPORT_POLICY_OPTIN
NX_SUPPORT_POLICY_OPTOUT
PROCESSOR_FEATURE_MAX
MAX_WOW64_SHARED_ENTRIES
XSTATE_LEGACY_FLOATING_POINT
XSTATE_LEGACY_SSE
XSTATE_GSSE
XSTATE_MASK_LEGACY_FLOATING_POINT
XSTATE_MASK_LEGACY_SSE
XSTATE_MASK_LEGACY
XSTATE_MASK_GSSE
MAXIMUM_XSTATE_FEATURES
SHARED_USER_DATA_VA
USER_SHARED_DATA
RTL_CLONE_PROCESS_FLAGS_CREATE_SUSPENDED
RTL_CLONE_PROCESS_FLAGS_INHERIT_HANDLES
RTL_CLONE_PROCESS_FLAGS_NO_SYNCHRONIZE
SIZEOF_BP_BUFFER
LPC_BUFFER_SIZE
DEBUG_READ_EVENT
DEBUG_PROCESS_ASSIGN
DEBUG_SET_INFORMATION
DEBUG_QUERY_INFORMATION
DEBUG_ALL_ACCESS
DEBUG_KILL_ON_CLOSE
RTL_HEAP_MAKE_TAG
MAKE_TAG
(
t
)
HEAP_USAGE_ALLOCATED_BLOCKS
HEAP_USAGE_FREE_BUFFER
HeapDebuggingInformation
PREALLOCATE_EVENT_MASK
RtlInitializeLockRoutine
(
L
)
RtlAcquireLockRoutine
(
L
)
RtlReleaseLockRoutine
(
L
)
RtlDeleteLockRoutine
(
L
)
MAX_STACK_DEPTH
RTL_HANDLE_ALLOCATED
RTL_ATOM_MAXIMUM_INTEGER_ATOM
RTL_ATOM_INVALID_ATOM
RTL_ATOM_TABLE_DEFAULT_NUMBER_OF_BUCKETS
RTL_ATOM_MAXIMUM_NAME_LENGTH
RTL_ATOM_PINNED
EVENT_MIN_LEVEL
EVENT_MAX_LEVEL
EVENT_ACTIVITY_CTRL_GET_ID
EVENT_ACTIVITY_CTRL_SET_ID
EVENT_ACTIVITY_CTRL_CREATE_ID
EVENT_ACTIVITY_CTRL_GET_SET_ID
EVENT_ACTIVITY_CTRL_CREATE_SET_ID
MAX_EVENT_DATA_DESCRIPTORS
MAX_EVENT_FILTER_DATA_SIZE
_SLIST_HEADER_
SLIST_ENTRY
_SLIST_ENTRY
PSLIST_ENTRY
RTL_UNLOAD_EVENT_TRACE_NUMBER
RtlEqualMemory
(
Destination,Source,Length
)
RtlMoveMemory
(
Destination,Source,Length
)
RtlCopyMemory
(
Destination,Source,Length
)
RtlFillMemory
(
Destination,Length,Fill
)
RtlZeroMemory
(
Destination,Length
)
NTSTATUS
:
LONG
PNTSTATUS
:
NTSTATUS*
SECURITY_STATUS
:
LONG
CCHAR
:
char
CSHORT
:
short
PCCHAR
:
CCHAR*
PCSHORT
:
CSHORT*
CLONG
:
ULONG
PCLONG
:
ULONG*
LOGICAL
:
ULONG
PLOGICAL
:
ULONG*
KPRIORITY
:
LONG
_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PCHAR
STRING
:
struct _STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PCHAR
PSTRING
:
STRING*
ANSI_STRING
:
STRING
PANSI_STRING
:
PSTRING
OEM_STRING
:
STRING
POEM_STRING
:
PSTRING
_CSTRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
char*
CSTRING
:
struct _CSTRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
char*
PCSTRING
:
CSTRING*
CANSI_STRING
:
STRING
PCANSI_STRING
:
PSTRING
_UNICODE_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PWSTR
UNICODE_STRING
:
struct _UNICODE_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PWSTR
PCUNICODE_STRING
:
const UNICODE_STRING*
_STRING32
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
ULONG
STRING32
:
struct _STRING32
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
ULONG
PSTRING32
:
STRING32*
UNICODE_STRING32
:
STRING32
PUNICODE_STRING32
:
UNICODE_STRING32*
ANSI_STRING32
:
STRING32
PANSI_STRING32
:
ANSI_STRING32*
_STRING64
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
ULONG_PTR
STRING64
:
struct _STRING64
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
ULONG_PTR
PSTRING64
:
STRING64*
UNICODE_STRING64
:
STRING64
PUNICODE_STRING64
:
UNICODE_STRING64*
ANSI_STRING64
:
STRING64
PANSI_STRING64
:
ANSI_STRING64*
RTL_ATOM
:
USHORT
PRTL_ATOM
:
RTL_ATOM*
KIRQL
:
UCHAR
PKIRQL
:
KIRQL*
PHYSICAL_ADDRESS
:
LARGE_INTEGER
PPHYSICAL_ADDRESS
:
LARGE_INTEGER*
_TRIPLE_LIST_ENTRY
Flink
:
struct _TRIPLE_LIST_ENTRY*[ 3 ]
Blink
:
struct _TRIPLE_LIST_ENTRY*
TRIPLE_LIST_ENTRY
:
struct _TRIPLE_LIST_ENTRY
Flink
:
struct _TRIPLE_LIST_ENTRY*[ 3 ]
Blink
:
struct _TRIPLE_LIST_ENTRY*
_OBJECT_ATTRIBUTES
Length
:
ULONG
RootDirectory
:
HANDLE
ObjectName
:
PUNICODE_STRING
Attributes
:
ULONG
SecurityDescriptor
:
PVOID
SecurityQualityOfService
:
PVOID
OBJECT_ATTRIBUTES
:
struct _OBJECT_ATTRIBUTES
Length
:
ULONG
RootDirectory
:
HANDLE
ObjectName
:
PUNICODE_STRING
Attributes
:
ULONG
SecurityDescriptor
:
PVOID
SecurityQualityOfService
:
PVOID
POBJECT_ATTRIBUTES
:
OBJECT_ATTRIBUTES*
_OBJECT_DIRECTORY_INFORMATION
Name
:
UNICODE_STRING
TypeName
:
UNICODE_STRING
OBJECT_DIRECTORY_INFORMATION
:
struct _OBJECT_DIRECTORY_INFORMATION
Name
:
UNICODE_STRING
TypeName
:
UNICODE_STRING
_PATHNAME_BUFFER
PathNameLength
:
ULONG
Name
:
WCHAR[1]
PATHNAME_BUFFER
:
struct _PATHNAME_BUFFER
PathNameLength
:
ULONG
Name
:
WCHAR[1]
_FSCTL_QUERY_FAT_BPB_BUFFER
First0x24BytesOfBootSector
:
UCHAR[0x24]
FSCTL_QUERY_FAT_BPB_BUFFER
:
struct _FSCTL_QUERY_FAT_BPB_BUFFER
First0x24BytesOfBootSector
:
UCHAR[0x24]
_FILESYSTEM_STATISTICS
FileSystemType
:
USHORT
Version
:
USHORT
SizeOfCompleteStructure
:
ULONG
UserFileReads
:
ULONG
UserFileReadBytes
:
ULONG
UserDiskReads
:
ULONG
UserFileWrites
:
ULONG
UserFileWriteBytes
:
ULONG
UserDiskWrites
:
ULONG
MetaDataReads
:
ULONG
MetaDataReadBytes
:
ULONG
MetaDataDiskReads
:
ULONG
MetaDataWrites
:
ULONG
MetaDataWriteBytes
:
ULONG
MetaDataDiskWrites
:
ULONG
FILESYSTEM_STATISTICS
:
struct _FILESYSTEM_STATISTICS
FileSystemType
:
USHORT
Version
:
USHORT
SizeOfCompleteStructure
:
ULONG
UserFileReads
:
ULONG
UserFileReadBytes
:
ULONG
UserDiskReads
:
ULONG
UserFileWrites
:
ULONG
UserFileWriteBytes
:
ULONG
UserDiskWrites
:
ULONG
MetaDataReads
:
ULONG
MetaDataReadBytes
:
ULONG
MetaDataDiskReads
:
ULONG
MetaDataWrites
:
ULONG
MetaDataWriteBytes
:
ULONG
MetaDataDiskWrites
:
ULONG
_FAT_STATISTICS
CreateHits
:
ULONG
SuccessfulCreates
:
ULONG
FailedCreates
:
ULONG
NonCachedReads
:
ULONG
NonCachedReadBytes
:
ULONG
NonCachedWrites
:
ULONG
NonCachedWriteBytes
:
ULONG
NonCachedDiskReads
:
ULONG
NonCachedDiskWrites
:
ULONG
FAT_STATISTICS
:
struct _FAT_STATISTICS
CreateHits
:
ULONG
SuccessfulCreates
:
ULONG
FailedCreates
:
ULONG
NonCachedReads
:
ULONG
NonCachedReadBytes
:
ULONG
NonCachedWrites
:
ULONG
NonCachedWriteBytes
:
ULONG
NonCachedDiskReads
:
ULONG
NonCachedDiskWrites
:
ULONG
_EXFAT_STATISTICS
CreateHits
:
ULONG
SuccessfulCreates
:
ULONG
FailedCreates
:
ULONG
NonCachedReads
:
ULONG
NonCachedReadBytes
:
ULONG
NonCachedWrites
:
ULONG
NonCachedWriteBytes
:
ULONG
NonCachedDiskReads
:
ULONG
NonCachedDiskWrites
:
ULONG
EXFAT_STATISTICS
:
struct _EXFAT_STATISTICS
CreateHits
:
ULONG
SuccessfulCreates
:
ULONG
FailedCreates
:
ULONG
NonCachedReads
:
ULONG
NonCachedReadBytes
:
ULONG
NonCachedWrites
:
ULONG
NonCachedWriteBytes
:
ULONG
NonCachedDiskReads
:
ULONG
NonCachedDiskWrites
:
ULONG
_NTFS_STATISTICS
LogFileFullExceptions
:
ULONG
OtherExceptions
:
ULONG
MftReads
:
ULONG
MftReadBytes
:
ULONG
MftWrites
:
ULONG
MftWriteBytes
:
ULONG
(anonymous)
MftWritesFlushForLogFileFull
:
USHORT
MftWritesLazyWriter
:
USHORT
MftWritesUserRequest
:
USHORT
Mft2Writes
:
ULONG
Mft2WriteBytes
:
ULONG
(anonymous)
Mft2WritesFlushForLogFileFull
:
USHORT
Mft2WritesLazyWriter
:
USHORT
Mft2WritesUserRequest
:
USHORT
RootIndexReads
:
ULONG
RootIndexReadBytes
:
ULONG
RootIndexWrites
:
ULONG
RootIndexWriteBytes
:
ULONG
BitmapReads
:
ULONG
BitmapReadBytes
:
ULONG
BitmapWrites
:
ULONG
BitmapWriteBytes
:
ULONG
BitmapWritesFlushForLogFileFull
:
USHORT
BitmapWritesLazyWriter
:
USHORT
BitmapWritesUserRequest
:
USHORT
(anonymous)
MftBitmapReads
:
ULONG
MftBitmapReadBytes
:
ULONG
MftBitmapWrites
:
ULONG
MftBitmapWriteBytes
:
ULONG
MftBitmapWritesFlushForLogFileFull
:
USHORT
MftBitmapWritesLazyWriter
:
USHORT
MftBitmapWritesUserRequest
:
USHORT
(anonymous)
UserIndexReads
:
ULONG
UserIndexReadBytes
:
ULONG
UserIndexWrites
:
ULONG
UserIndexWriteBytes
:
ULONG
LogFileReads
:
ULONG
LogFileReadBytes
:
ULONG
LogFileWrites
:
ULONG
LogFileWriteBytes
:
ULONG
(anonymous)
NTFS_STATISTICS
:
struct _NTFS_STATISTICS
LogFileFullExceptions
:
ULONG
OtherExceptions
:
ULONG
MftReads
:
ULONG
MftReadBytes
:
ULONG
MftWrites
:
ULONG
MftWriteBytes
:
ULONG
(anonymous)
MftWritesFlushForLogFileFull
:
USHORT
MftWritesLazyWriter
:
USHORT
MftWritesUserRequest
:
USHORT
Mft2Writes
:
ULONG
Mft2WriteBytes
:
ULONG
(anonymous)
Mft2WritesFlushForLogFileFull
:
USHORT
Mft2WritesLazyWriter
:
USHORT
Mft2WritesUserRequest
:
USHORT
RootIndexReads
:
ULONG
RootIndexReadBytes
:
ULONG
RootIndexWrites
:
ULONG
RootIndexWriteBytes
:
ULONG
BitmapReads
:
ULONG
BitmapReadBytes
:
ULONG
BitmapWrites
:
ULONG
BitmapWriteBytes
:
ULONG
BitmapWritesFlushForLogFileFull
:
USHORT
BitmapWritesLazyWriter
:
USHORT
BitmapWritesUserRequest
:
USHORT
(anonymous)
MftBitmapReads
:
ULONG
MftBitmapReadBytes
:
ULONG
MftBitmapWrites
:
ULONG
MftBitmapWriteBytes
:
ULONG
MftBitmapWritesFlushForLogFileFull
:
USHORT
MftBitmapWritesLazyWriter
:
USHORT
MftBitmapWritesUserRequest
:
USHORT
(anonymous)
UserIndexReads
:
ULONG
UserIndexReadBytes
:
ULONG
UserIndexWrites
:
ULONG
UserIndexWriteBytes
:
ULONG
LogFileReads
:
ULONG
LogFileReadBytes
:
ULONG
LogFileWrites
:
ULONG
LogFileWriteBytes
:
ULONG
(anonymous)
_SYSDBG_COMMAND
SysDbgQueryModuleInformation
SysDbgQueryTraceInformation
SysDbgSetTracepoint
SysDbgSetSpecialCall
SysDbgClearSpecialCalls
SysDbgQuerySpecialCalls
SysDbgBreakPoint
SysDbgQueryVersion
SysDbgReadVirtual
SysDbgWriteVirtual
SysDbgReadPhysical
SysDbgWritePhysical
SysDbgReadControlSpace
SysDbgWriteControlSpace
SysDbgReadIoSpace
SysDbgWriteIoSpace
SysDbgReadMsr
SysDbgWriteMsr
SysDbgReadBusData
SysDbgWriteBusData
SysDbgCheckLowMemory
SysDbgEnableKernelDebugger
SysDbgDisableKernelDebugger
SysDbgGetAutoKdEnable
SysDbgSetAutoKdEnable
SysDbgGetPrintBufferSize
SysDbgSetPrintBufferSize
SysDbgGetKdUmExceptionEnable
SysDbgSetKdUmExceptionEnable
SysDbgGetTriageDump
SysDbgGetKdBlockEnable
SysDbgSetKdBlockEnable
SysDbgRegisterForUmBreakInfo
SysDbgGetUmBreakPid
SysDbgClearUmBreakPid
SysDbgGetUmAttachPid
SysDbgClearUmAttachPid
SYSDBG_COMMAND
:
enum _SYSDBG_COMMAND
SysDbgQueryModuleInformation
SysDbgQueryTraceInformation
SysDbgSetTracepoint
SysDbgSetSpecialCall
SysDbgClearSpecialCalls
SysDbgQuerySpecialCalls
SysDbgBreakPoint
SysDbgQueryVersion
SysDbgReadVirtual
SysDbgWriteVirtual
SysDbgReadPhysical
SysDbgWritePhysical
SysDbgReadControlSpace
SysDbgWriteControlSpace
SysDbgReadIoSpace
SysDbgWriteIoSpace
SysDbgReadMsr
SysDbgWriteMsr
SysDbgReadBusData
SysDbgWriteBusData
SysDbgCheckLowMemory
SysDbgEnableKernelDebugger
SysDbgDisableKernelDebugger
SysDbgGetAutoKdEnable
SysDbgSetAutoKdEnable
SysDbgGetPrintBufferSize
SysDbgSetPrintBufferSize
SysDbgGetKdUmExceptionEnable
SysDbgSetKdUmExceptionEnable
SysDbgGetTriageDump
SysDbgGetKdBlockEnable
SysDbgSetKdBlockEnable
SysDbgRegisterForUmBreakInfo
SysDbgGetUmBreakPid
SysDbgClearUmBreakPid
SysDbgGetUmAttachPid
SysDbgClearUmAttachPid
_SYSDBG_VIRTUAL
Address
:
PVOID
Buffer
:
PVOID
Request
:
ULONG
SYSDBG_VIRTUAL
:
struct _SYSDBG_VIRTUAL
Address
:
PVOID
Buffer
:
PVOID
Request
:
ULONG
_SYSDBG_PHYSICAL
Address
:
PHYSICAL_ADDRESS
Buffer
:
PVOID
Request
:
ULONG
SYSDBG_PHYSICAL
:
struct _SYSDBG_PHYSICAL
Address
:
PHYSICAL_ADDRESS
Buffer
:
PVOID
Request
:
ULONG
_SYSDBG_CONTROL_SPACE
Address
:
ULONG64
Buffer
:
PVOID
Request
:
ULONG
Processor
:
ULONG
SYSDBG_CONTROL_SPACE
:
struct _SYSDBG_CONTROL_SPACE
Address
:
ULONG64
Buffer
:
PVOID
Request
:
ULONG
Processor
:
ULONG
_INTERFACE_TYPE
UnknownInterfaceType
INTERFACE_TYPE
:
enum _INTERFACE_TYPE
UnknownInterfaceType
_SYSDBG_IO_SPACE
Address
:
ULONG64
Buffer
:
PVOID
Request
:
ULONG
InterfaceType
:
enum _INTERFACE_TYPE
BusNumber
:
ULONG
AddressSpace
:
ULONG
SYSDBG_IO_SPACE
:
struct _SYSDBG_IO_SPACE
Address
:
ULONG64
Buffer
:
PVOID
Request
:
ULONG
InterfaceType
:
enum _INTERFACE_TYPE
BusNumber
:
ULONG
AddressSpace
:
ULONG
_SYSDBG_MSR
Msr
:
ULONG
Data
:
ULONG64
SYSDBG_MSR
:
struct _SYSDBG_MSR
Msr
:
ULONG
Data
:
ULONG64
_BUS_DATA_TYPE
ConfigurationSpaceUndefined
Cmos
EisaConfiguration
Pos
CbusConfiguration
PCIConfiguration
VMEConfiguration
NuBusConfiguration
PCMCIAConfiguration
MPIConfiguration
MPSAConfiguration
PNPISAConfiguration
SgiInternalConfiguration
MaximumBusDataType
BUS_DATA_TYPE
:
enum _BUS_DATA_TYPE
ConfigurationSpaceUndefined
Cmos
EisaConfiguration
Pos
CbusConfiguration
PCIConfiguration
VMEConfiguration
NuBusConfiguration
PCMCIAConfiguration
MPIConfiguration
MPSAConfiguration
PNPISAConfiguration
SgiInternalConfiguration
MaximumBusDataType
_SYSDBG_BUS_DATA
Address
:
ULONG
Buffer
:
PVOID
Request
:
ULONG
BusDataType
:
enum _BUS_DATA_TYPE
BusNumber
:
ULONG
SlotNumber
:
ULONG
SYSDBG_BUS_DATA
:
struct _SYSDBG_BUS_DATA
Address
:
ULONG
Buffer
:
PVOID
Request
:
ULONG
BusDataType
:
enum _BUS_DATA_TYPE
BusNumber
:
ULONG
SlotNumber
:
ULONG
_SYSDBG_TRIAGE_DUMP
Flags
:
ULONG
BugCheckCode
:
ULONG
BugCheckParam1
:
ULONG_PTR
BugCheckParam2
:
ULONG_PTR
BugCheckParam3
:
ULONG_PTR
BugCheckParam4
:
ULONG_PTR
ProcessHandles
:
ULONG
ThreadHandles
:
ULONG
Handles
:
PHANDLE
SYSDBG_TRIAGE_DUMP
:
struct _SYSDBG_TRIAGE_DUMP
Flags
:
ULONG
BugCheckCode
:
ULONG
BugCheckParam1
:
ULONG_PTR
BugCheckParam2
:
ULONG_PTR
BugCheckParam3
:
ULONG_PTR
BugCheckParam4
:
ULONG_PTR
ProcessHandles
:
ULONG
ThreadHandles
:
ULONG
Handles
:
PHANDLE
_SYSTEM_INFORMATION_CLASS
SystemBasicInformation
SystemProcessorInformation
SystemPerformanceInformation
SystemTimeOfDayInformation
SystemPathInformation
SystemProcessInformation
SystemCallCountInformation
SystemDeviceInformation
SystemProcessorPerformanceInformation
SystemFlagsInformation
SystemCallTimeInformation
SystemModuleInformation
SystemLocksInformation
SystemStackTraceInformation
SystemPagedPoolInformation
SystemNonPagedPoolInformation
SystemHandleInformation
SystemObjectInformation
SystemPageFileInformation
SystemVdmInstemulInformation
SystemVdmBopInformation
SystemFileCacheInformation
SystemPoolTagInformation
SystemInterruptInformation
SystemDpcBehaviorInformation
SystemFullMemoryInformation
SystemLoadGdiDriverInformation
SystemUnloadGdiDriverInformation
SystemTimeAdjustmentInformation
SystemSummaryMemoryInformation
SystemMirrorMemoryInformation
SystemPerformanceTraceInformation
SystemObsolete0
SystemExceptionInformation
SystemCrashDumpStateInformation
SystemKernelDebuggerInformation
SystemContextSwitchInformation
SystemRegistryQuotaInformation
SystemExtendServiceTableInformation
SystemPrioritySeperation
SystemVerifierAddDriverInformation
SystemVerifierRemoveDriverInformation
SystemProcessorIdleInformation
SystemLegacyDriverInformation
SystemCurrentTimeZoneInformation
SystemLookasideInformation
SystemTimeSlipNotification
SystemSessionCreate
SystemSessionDetach
SystemSessionInformation
SystemRangeStartInformation
SystemVerifierInformation
SystemVerifierThunkExtend
SystemSessionProcessInformation
SystemLoadGdiDriverInSystemSpace
SystemNumaProcessorMap
SystemPrefetcherInformation
SystemExtendedProcessInformation
SystemRecommendedSharedDataAlignment
SystemComPlusPackage
SystemNumaAvailableMemory
SystemProcessorPowerInformation
SystemEmulationBasicInformation
SystemEmulationProcessorInformation
SystemExtendedHandleInformation
SystemLostDelayedWriteInformation
SystemBigPoolInformation
SystemSessionPoolTagInformation
SystemSessionMappedViewInformation
SystemHotpatchInformation
SystemObjectSecurityMode
SystemWatchdogTimerHandler
SystemWatchdogTimerInformation
SystemLogicalProcessorInformation
SystemWow64SharedInformation
SystemRegisterFirmwareTableInformationHandler
SystemFirmwareTableInformation
SystemModuleInformationEx
SystemVerifierTriageInformation
SystemSuperfetchInformation
SystemMemoryListInformation
SystemFileCacheInformationEx
SystemThreadPriorityClientIdInformation
SystemProcessorIdleCycleTimeInformation
SystemVerifierCancellationInformation
SystemProcessorPowerInformationEx
SystemRefTraceInformation
SystemSpecialPoolInformation
SystemProcessIdInformation
SystemErrorPortInformation
SystemBootEnvironmentInformation
SystemHypervisorInformation
SystemVerifierInformationEx
SystemTimeZoneInformation
SystemImageFileExecutionOptionsInformation
SystemCoverageInformation
SystemPrefetchPatchInformation
SystemVerifierFaultsInformation
SystemSystemPartitionInformation
SystemSystemDiskInformation
SystemProcessorPerformanceDistribution
SystemNumaProximityNodeInformation
SystemDynamicTimeZoneInformation
SystemCodeIntegrityInformation
SystemProcessorMicrocodeUpdateInformation
SystemProcessorBrandString
SystemVirtualAddressInformation
MaxSystemInfoClass
SYSTEM_INFORMATION_CLASS
:
enum _SYSTEM_INFORMATION_CLASS
SystemBasicInformation
SystemProcessorInformation
SystemPerformanceInformation
SystemTimeOfDayInformation
SystemPathInformation
SystemProcessInformation
SystemCallCountInformation
SystemDeviceInformation
SystemProcessorPerformanceInformation
SystemFlagsInformation
SystemCallTimeInformation
SystemModuleInformation
SystemLocksInformation
SystemStackTraceInformation
SystemPagedPoolInformation
SystemNonPagedPoolInformation
SystemHandleInformation
SystemObjectInformation
SystemPageFileInformation
SystemVdmInstemulInformation
SystemVdmBopInformation
SystemFileCacheInformation
SystemPoolTagInformation
SystemInterruptInformation
SystemDpcBehaviorInformation
SystemFullMemoryInformation
SystemLoadGdiDriverInformation
SystemUnloadGdiDriverInformation
SystemTimeAdjustmentInformation
SystemSummaryMemoryInformation
SystemMirrorMemoryInformation
SystemPerformanceTraceInformation
SystemObsolete0
SystemExceptionInformation
SystemCrashDumpStateInformation
SystemKernelDebuggerInformation
SystemContextSwitchInformation
SystemRegistryQuotaInformation
SystemExtendServiceTableInformation
SystemPrioritySeperation
SystemVerifierAddDriverInformation
SystemVerifierRemoveDriverInformation
SystemProcessorIdleInformation
SystemLegacyDriverInformation
SystemCurrentTimeZoneInformation
SystemLookasideInformation
SystemTimeSlipNotification
SystemSessionCreate
SystemSessionDetach
SystemSessionInformation
SystemRangeStartInformation
SystemVerifierInformation
SystemVerifierThunkExtend
SystemSessionProcessInformation
SystemLoadGdiDriverInSystemSpace
SystemNumaProcessorMap
SystemPrefetcherInformation
SystemExtendedProcessInformation
SystemRecommendedSharedDataAlignment
SystemComPlusPackage
SystemNumaAvailableMemory
SystemProcessorPowerInformation
SystemEmulationBasicInformation
SystemEmulationProcessorInformation
SystemExtendedHandleInformation
SystemLostDelayedWriteInformation
SystemBigPoolInformation
SystemSessionPoolTagInformation
SystemSessionMappedViewInformation
SystemHotpatchInformation
SystemObjectSecurityMode
SystemWatchdogTimerHandler
SystemWatchdogTimerInformation
SystemLogicalProcessorInformation
SystemWow64SharedInformation
SystemRegisterFirmwareTableInformationHandler
SystemFirmwareTableInformation
SystemModuleInformationEx
SystemVerifierTriageInformation
SystemSuperfetchInformation
SystemMemoryListInformation
SystemFileCacheInformationEx
SystemThreadPriorityClientIdInformation
SystemProcessorIdleCycleTimeInformation
SystemVerifierCancellationInformation
SystemProcessorPowerInformationEx
SystemRefTraceInformation
SystemSpecialPoolInformation
SystemProcessIdInformation
SystemErrorPortInformation
SystemBootEnvironmentInformation
SystemHypervisorInformation
SystemVerifierInformationEx
SystemTimeZoneInformation
SystemImageFileExecutionOptionsInformation
SystemCoverageInformation
SystemPrefetchPatchInformation
SystemVerifierFaultsInformation
SystemSystemPartitionInformation
SystemSystemDiskInformation
SystemProcessorPerformanceDistribution
SystemNumaProximityNodeInformation
SystemDynamicTimeZoneInformation
SystemCodeIntegrityInformation
SystemProcessorMicrocodeUpdateInformation
SystemProcessorBrandString
SystemVirtualAddressInformation
MaxSystemInfoClass
_EVENT_TRACE_INFORMATION_CLASS
EventTraceKernelVersionInformation
EventTraceGroupMaskInformation
EventTracePerformanceInformation
EventTraceTimeProfileInformation
EventTraceSessionSecurityInformation
MaxEventTraceInfoClass
EVENT_TRACE_INFORMATION_CLASS
:
enum _EVENT_TRACE_INFORMATION_CLASS
EventTraceKernelVersionInformation
EventTraceGroupMaskInformation
EventTracePerformanceInformation
EventTraceTimeProfileInformation
EventTraceSessionSecurityInformation
MaxEventTraceInfoClass
_KSPIN_LOCK_QUEUE_NUMBER
LockQueueDispatcherLock
LockQueueUnusedSpare1
LockQueuePfnLock
LockQueueSystemSpaceLock
LockQueueVacbLock
LockQueueMasterLock
LockQueueNonPagedPoolLock
LockQueueIoCancelLock
LockQueueWorkQueueLock
LockQueueIoVpbLock
LockQueueIoDatabaseLock
LockQueueIoCompletionLock
LockQueueNtfsStructLock
LockQueueAfdWorkQueueLock
LockQueueBcbLock
LockQueueMmNonPagedPoolLock
LockQueueUnusedSpare16
LockQueueTimerTableLock
LockQueueMaximumLock
KSPIN_LOCK_QUEUE_NUMBER
:
enum _KSPIN_LOCK_QUEUE_NUMBER
LockQueueDispatcherLock
LockQueueUnusedSpare1
LockQueuePfnLock
LockQueueSystemSpaceLock
LockQueueVacbLock
LockQueueMasterLock
LockQueueNonPagedPoolLock
LockQueueIoCancelLock
LockQueueWorkQueueLock
LockQueueIoVpbLock
LockQueueIoDatabaseLock
LockQueueIoCompletionLock
LockQueueNtfsStructLock
LockQueueAfdWorkQueueLock
LockQueueBcbLock
LockQueueMmNonPagedPoolLock
LockQueueUnusedSpare16
LockQueueTimerTableLock
LockQueueMaximumLock
_KPROFILE_SOURCE
ProfileTime
ProfileAlignmentFixup
ProfileTotalIssues
ProfilePipelineDry
ProfileLoadInstructions
ProfilePipelineFrozen
ProfileBranchInstructions
ProfileTotalNonissues
ProfileDcacheMisses
ProfileIcacheMisses
ProfileCacheMisses
ProfileBranchMispredictions
ProfileStoreInstructions
ProfileFpInstructions
ProfileIntegerInstructions
Profile2Issue
Profile3Issue
Profile4Issue
ProfileSpecialInstructions
ProfileTotalCycles
ProfileIcacheIssues
ProfileDcacheAccesses
ProfileMemoryBarrierCycles
ProfileLoadLinkedIssues
ProfileMaximum
KPROFILE_SOURCE
:
enum _KPROFILE_SOURCE
ProfileTime
ProfileAlignmentFixup
ProfileTotalIssues
ProfilePipelineDry
ProfileLoadInstructions
ProfilePipelineFrozen
ProfileBranchInstructions
ProfileTotalNonissues
ProfileDcacheMisses
ProfileIcacheMisses
ProfileCacheMisses
ProfileBranchMispredictions
ProfileStoreInstructions
ProfileFpInstructions
ProfileIntegerInstructions
Profile2Issue
Profile3Issue
Profile4Issue
ProfileSpecialInstructions
ProfileTotalCycles
ProfileIcacheIssues
ProfileDcacheAccesses
ProfileMemoryBarrierCycles
ProfileLoadLinkedIssues
ProfileMaximum
_PROCESSINFOCLASS
ProcessBasicInformation
ProcessQuotaLimits
ProcessIoCounters
ProcessVmCounters
ProcessTimes
ProcessBasePriority
ProcessRaisePriority
ProcessDebugPort
ProcessExceptionPort
ProcessAccessToken
ProcessLdtInformation
ProcessLdtSize
ProcessDefaultHardErrorMode
ProcessIoPortHandlers
ProcessPooledUsageAndLimits
ProcessWorkingSetWatch
ProcessUserModeIOPL
ProcessEnableAlignmentFaultFixup
ProcessPriorityClass
ProcessWx86Information
ProcessHandleCount
ProcessAffinityMask
ProcessPriorityBoost
ProcessDeviceMap
ProcessSessionInformation
ProcessForegroundInformation
ProcessWow64Information
ProcessImageFileName
ProcessLUIDDeviceMapsEnabled
ProcessBreakOnTermination
ProcessDebugObjectHandle
ProcessDebugFlags
ProcessHandleTracing
ProcessIoPriority
ProcessExecuteFlags
ProcessTlsInformation
ProcessCookie
ProcessImageInformation
ProcessCycleTime
ProcessPagePriority
ProcessInstrumentationCallback
ProcessThreadStackAllocation
ProcessWorkingSetWatchEx
ProcessImageFileNameWin32
ProcessImageFileMapping
ProcessAffinityUpdateMode
ProcessMemoryAllocationMode
ProcessGroupInformation
ProcessTokenVirtualizationEnabled
ProcessConsoleHostProcess
ProcessWindowInformation
MaxProcessInfoClass
PROCESSINFOCLASS
:
enum _PROCESSINFOCLASS
ProcessBasicInformation
ProcessQuotaLimits
ProcessIoCounters
ProcessVmCounters
ProcessTimes
ProcessBasePriority
ProcessRaisePriority
ProcessDebugPort
ProcessExceptionPort
ProcessAccessToken
ProcessLdtInformation
ProcessLdtSize
ProcessDefaultHardErrorMode
ProcessIoPortHandlers
ProcessPooledUsageAndLimits
ProcessWorkingSetWatch
ProcessUserModeIOPL
ProcessEnableAlignmentFaultFixup
ProcessPriorityClass
ProcessWx86Information
ProcessHandleCount
ProcessAffinityMask
ProcessPriorityBoost
ProcessDeviceMap
ProcessSessionInformation
ProcessForegroundInformation
ProcessWow64Information
ProcessImageFileName
ProcessLUIDDeviceMapsEnabled
ProcessBreakOnTermination
ProcessDebugObjectHandle
ProcessDebugFlags
ProcessHandleTracing
ProcessIoPriority
ProcessExecuteFlags
ProcessTlsInformation
ProcessCookie
ProcessImageInformation
ProcessCycleTime
ProcessPagePriority
ProcessInstrumentationCallback
ProcessThreadStackAllocation
ProcessWorkingSetWatchEx
ProcessImageFileNameWin32
ProcessImageFileMapping
ProcessAffinityUpdateMode
ProcessMemoryAllocationMode
ProcessGroupInformation
ProcessTokenVirtualizationEnabled
ProcessConsoleHostProcess
ProcessWindowInformation
MaxProcessInfoClass
_THREADINFOCLASS
ThreadBasicInformation
ThreadTimes
ThreadPriority
ThreadBasePriority
ThreadAffinityMask
ThreadImpersonationToken
ThreadDescriptorTableEntry
ThreadEnableAlignmentFaultFixup
ThreadEventPair_Reusable
ThreadQuerySetWin32StartAddress
ThreadZeroTlsCell
ThreadPerformanceCount
ThreadAmILastThread
ThreadIdealProcessor
ThreadPriorityBoost
ThreadSetTlsArrayAddress
ThreadIsIoPending
ThreadHideFromDebugger
ThreadBreakOnTermination
ThreadSwitchLegacyState
ThreadIsTerminated
ThreadLastSystemCall
ThreadIoPriority
ThreadCycleTime
ThreadPagePriority
ThreadActualBasePriority
ThreadTebInformation
ThreadCSwitchMon
ThreadCSwitchPmu
ThreadWow64Context
ThreadGroupInformation
ThreadUmsInformation
ThreadCounterProfiling
ThreadIdealProcessorEx
MaxThreadInfoClass
THREADINFOCLASS
:
enum _THREADINFOCLASS
ThreadBasicInformation
ThreadTimes
ThreadPriority
ThreadBasePriority
ThreadAffinityMask
ThreadImpersonationToken
ThreadDescriptorTableEntry
ThreadEnableAlignmentFaultFixup
ThreadEventPair_Reusable
ThreadQuerySetWin32StartAddress
ThreadZeroTlsCell
ThreadPerformanceCount
ThreadAmILastThread
ThreadIdealProcessor
ThreadPriorityBoost
ThreadSetTlsArrayAddress
ThreadIsIoPending
ThreadHideFromDebugger
ThreadBreakOnTermination
ThreadSwitchLegacyState
ThreadIsTerminated
ThreadLastSystemCall
ThreadIoPriority
ThreadCycleTime
ThreadPagePriority
ThreadActualBasePriority
ThreadTebInformation
ThreadCSwitchMon
ThreadCSwitchPmu
ThreadWow64Context
ThreadGroupInformation
ThreadUmsInformation
ThreadCounterProfiling
ThreadIdealProcessorEx
MaxThreadInfoClass
_PROCESS_TLS_INFORMATION_TYPE
ProcessTlsReplaceIndex
ProcessTlsReplaceVector
MaxProcessTlsOperation
PROCESS_TLS_INFORMATION_TYPE
:
enum _PROCESS_TLS_INFORMATION_TYPE
ProcessTlsReplaceIndex
ProcessTlsReplaceVector
MaxProcessTlsOperation
GDI_HANDLE_BUFFER32
:
ULONG[GDI_HANDLE_BUFFER_SIZE32]
GDI_HANDLE_BUFFER64
:
ULONG[GDI_HANDLE_BUFFER_SIZE64]
GDI_HANDLE_BUFFER
:
ULONG[GDI_HANDLE_BUFFER_SIZE]
_FILE_INFORMATION_CLASS
FileDirectoryInformation
FileFullDirectoryInformation
FileBothDirectoryInformation
FileBasicInformation
FileStandardInformation
FileInternalInformation
FileEaInformation
FileAccessInformation
FileNameInformation
FileRenameInformation
FileLinkInformation
FileNamesInformation
FileDispositionInformation
FilePositionInformation
FileFullEaInformation
FileModeInformation
FileAlignmentInformation
FileAllInformation
FileAllocationInformation
FileEndOfFileInformation
FileAlternateNameInformation
FileStreamInformation
FilePipeInformation
FilePipeLocalInformation
FilePipeRemoteInformation
FileMailslotQueryInformation
FileMailslotSetInformation
FileCompressionInformation
FileObjectIdInformation
FileCompletionInformation
FileMoveClusterInformation
FileQuotaInformation
FileReparsePointInformation
FileNetworkOpenInformation
FileAttributeTagInformation
FileTrackingInformation
FileIdBothDirectoryInformation
FileIdFullDirectoryInformation
FileValidDataLengthInformation
FileShortNameInformation
FileIoCompletionNotificationInformation
FileIoStatusBlockRangeInformation
FileIoPriorityHintInformation
FileSfioReserveInformation
FileSfioVolumeInformation
FileHardLinkInformation
FileProcessIdsUsingFileInformation
FileNormalizedNameInformation
FileNetworkPhysicalNameInformation
FileIdGlobalTxDirectoryInformation
FileMaximumInformation
FILE_INFORMATION_CLASS
:
enum _FILE_INFORMATION_CLASS
FileDirectoryInformation
FileFullDirectoryInformation
FileBothDirectoryInformation
FileBasicInformation
FileStandardInformation
FileInternalInformation
FileEaInformation
FileAccessInformation
FileNameInformation
FileRenameInformation
FileLinkInformation
FileNamesInformation
FileDispositionInformation
FilePositionInformation
FileFullEaInformation
FileModeInformation
FileAlignmentInformation
FileAllInformation
FileAllocationInformation
FileEndOfFileInformation
FileAlternateNameInformation
FileStreamInformation
FilePipeInformation
FilePipeLocalInformation
FilePipeRemoteInformation
FileMailslotQueryInformation
FileMailslotSetInformation
FileCompressionInformation
FileObjectIdInformation
FileCompletionInformation
FileMoveClusterInformation
FileQuotaInformation
FileReparsePointInformation
FileNetworkOpenInformation
FileAttributeTagInformation
FileTrackingInformation
FileIdBothDirectoryInformation
FileIdFullDirectoryInformation
FileValidDataLengthInformation
FileShortNameInformation
FileIoCompletionNotificationInformation
FileIoStatusBlockRangeInformation
FileIoPriorityHintInformation
FileSfioReserveInformation
FileSfioVolumeInformation
FileHardLinkInformation
FileProcessIdsUsingFileInformation
FileNormalizedNameInformation
FileNetworkPhysicalNameInformation
FileIdGlobalTxDirectoryInformation
FileMaximumInformation
_FSINFOCLASS
FileFsVolumeInformation
FileFsLabelInformation
FileFsSizeInformation
FileFsDeviceInformation
FileFsAttributeInformation
FileFsControlInformation
FileFsFullSizeInformation
FileFsObjectIdInformation
FileFsDriverPathInformation
FileFsVolumeFlagsInformation
FileFsMaximumInformation
FS_INFORMATION_CLASS
:
enum _FSINFOCLASS
FileFsVolumeInformation
FileFsLabelInformation
FileFsSizeInformation
FileFsDeviceInformation
FileFsAttributeInformation
FileFsControlInformation
FileFsFullSizeInformation
FileFsObjectIdInformation
FileFsDriverPathInformation
FileFsVolumeFlagsInformation
FileFsMaximumInformation
_POOL_TYPE
NonPagedPool
PagedPool
NonPagedPoolMustSucceed
DontUseThisType
NonPagedPoolCacheAligned
PagedPoolCacheAligned
NonPagedPoolCacheAlignedMustS
MaxPoolType
NonPagedPoolSession
PagedPoolSession
NonPagedPoolMustSucceedSession
DontUseThisTypeSession
NonPagedPoolCacheAlignedSession
PagedPoolCacheAlignedSession
NonPagedPoolCacheAlignedMustSSession
POOL_TYPE
:
enum _POOL_TYPE
NonPagedPool
PagedPool
NonPagedPoolMustSucceed
DontUseThisType
NonPagedPoolCacheAligned
PagedPoolCacheAligned
NonPagedPoolCacheAlignedMustS
MaxPoolType
NonPagedPoolSession
PagedPoolSession
NonPagedPoolMustSucceedSession
DontUseThisTypeSession
NonPagedPoolCacheAlignedSession
PagedPoolCacheAlignedSession
NonPagedPoolCacheAlignedMustSSession
_MEMORY_INFORMATION_CLASS
MemoryBasicInformation
MemoryWorkingSetInformation
MemoryMappedFilenameInformation
MemoryRegionInformation
MemoryWorkingSetExInformation
MEMORY_INFORMATION_CLASS
:
enum _MEMORY_INFORMATION_CLASS
MemoryBasicInformation
MemoryWorkingSetInformation
MemoryMappedFilenameInformation
MemoryRegionInformation
MemoryWorkingSetExInformation
_REG_NOTIFY_CLASS
RegNtDeleteKey
RegNtPreDeleteKey
RegNtSetValueKey
RegNtPreSetValueKey
RegNtDeleteValueKey
RegNtPreDeleteValueKey
RegNtSetInformationKey
RegNtPreSetInformationKey
RegNtRenameKey
RegNtPreRenameKey
RegNtEnumerateKey
RegNtPreEnumerateKey
RegNtEnumerateValueKey
RegNtPreEnumerateValueKey
RegNtQueryKey
RegNtPreQueryKey
RegNtQueryValueKey
RegNtPreQueryValueKey
RegNtQueryMultipleValueKey
RegNtPreQueryMultipleValueKey
RegNtPreCreateKey
RegNtPostCreateKey
RegNtPreOpenKey
RegNtPostOpenKey
RegNtKeyHandleClose
RegNtPreKeyHandleClose
RegNtPostDeleteKey
RegNtPostSetValueKey
RegNtPostDeleteValueKey
RegNtPostSetInformationKey
RegNtPostRenameKey
RegNtPostEnumerateKey
RegNtPostEnumerateValueKey
RegNtPostQueryKey
RegNtPostQueryValueKey
RegNtPostQueryMultipleValueKey
RegNtPostKeyHandleClose
RegNtPreCreateKeyEx
RegNtPostCreateKeyEx
RegNtPreOpenKeyEx
RegNtPostOpenKeyEx
RegNtPreFlushKey
RegNtPostFlushKey
RegNtPreLoadKey
RegNtPostLoadKey
RegNtPreUnLoadKey
RegNtPostUnLoadKey
RegNtPreQueryKeySecurity
RegNtPostQueryKeySecurity
RegNtPreSetKeySecurity
RegNtPostSetKeySecurity
RegNtCallbackObjectContextCleanup
MaxRegNtNotifyClass
REG_NOTIFY_CLASS
:
enum _REG_NOTIFY_CLASS
RegNtDeleteKey
RegNtPreDeleteKey
RegNtSetValueKey
RegNtPreSetValueKey
RegNtDeleteValueKey
RegNtPreDeleteValueKey
RegNtSetInformationKey
RegNtPreSetInformationKey
RegNtRenameKey
RegNtPreRenameKey
RegNtEnumerateKey
RegNtPreEnumerateKey
RegNtEnumerateValueKey
RegNtPreEnumerateValueKey
RegNtQueryKey
RegNtPreQueryKey
RegNtQueryValueKey
RegNtPreQueryValueKey
RegNtQueryMultipleValueKey
RegNtPreQueryMultipleValueKey
RegNtPreCreateKey
RegNtPostCreateKey
RegNtPreOpenKey
RegNtPostOpenKey
RegNtKeyHandleClose
RegNtPreKeyHandleClose
RegNtPostDeleteKey
RegNtPostSetValueKey
RegNtPostDeleteValueKey
RegNtPostSetInformationKey
RegNtPostRenameKey
RegNtPostEnumerateKey
RegNtPostEnumerateValueKey
RegNtPostQueryKey
RegNtPostQueryValueKey
RegNtPostQueryMultipleValueKey
RegNtPostKeyHandleClose
RegNtPreCreateKeyEx
RegNtPostCreateKeyEx
RegNtPreOpenKeyEx
RegNtPostOpenKeyEx
RegNtPreFlushKey
RegNtPostFlushKey
RegNtPreLoadKey
RegNtPostLoadKey
RegNtPreUnLoadKey
RegNtPostUnLoadKey
RegNtPreQueryKeySecurity
RegNtPostQueryKeySecurity
RegNtPreSetKeySecurity
RegNtPostSetKeySecurity
RegNtCallbackObjectContextCleanup
MaxRegNtNotifyClass
_HAL_QUERY_INFORMATION_CLASS
HalInstalledBusInformation
HalProfileSourceInformation
HalInformationClassUnused1
HalPowerInformation
HalProcessorSpeedInformation
HalCallbackInformation
HalMapRegisterInformation
HalMcaLogInformation
HalFrameBufferCachingInformation
HalDisplayBiosInformation
HalProcessorFeatureInformation
HalNumaTopologyInterface
HalErrorInformation
HalCmcLogInformation
HalCpeLogInformation
HalQueryMcaInterface
HalQueryAMLIIllegalIOPortAddresses
HalQueryMaxHotPlugMemoryAddress
HalPartitionIpiInterface
HalPlatformInformation
HalQueryProfileSourceList
HalInitLogInformation
HalFrequencyInformation
HalProcessorBrandString
HAL_QUERY_INFORMATION_CLASS
:
enum _HAL_QUERY_INFORMATION_CLASS
HalInstalledBusInformation
HalProfileSourceInformation
HalInformationClassUnused1
HalPowerInformation
HalProcessorSpeedInformation
HalCallbackInformation
HalMapRegisterInformation
HalMcaLogInformation
HalFrameBufferCachingInformation
HalDisplayBiosInformation
HalProcessorFeatureInformation
HalNumaTopologyInterface
HalErrorInformation
HalCmcLogInformation
HalCpeLogInformation
HalQueryMcaInterface
HalQueryAMLIIllegalIOPortAddresses
HalQueryMaxHotPlugMemoryAddress
HalPartitionIpiInterface
HalPlatformInformation
HalQueryProfileSourceList
HalInitLogInformation
HalFrequencyInformation
HalProcessorBrandString
_IO_STATUS_BLOCK
(anonymous)
Information
:
ULONG_PTR
IO_STATUS_BLOCK
:
struct _IO_STATUS_BLOCK
(anonymous)
Information
:
ULONG_PTR
_X86_FLOATING_SAVE_AREA
ControlWord
:
ULONG
StatusWord
:
ULONG
TagWord
:
ULONG
ErrorOffset
:
ULONG
ErrorSelector
:
ULONG
DataOffset
:
ULONG
DataSelector
:
ULONG
RegisterArea
:
UCHAR[ 80 ]
Cr0NpxState
:
ULONG
X86_FLOATING_SAVE_AREA
:
struct _X86_FLOATING_SAVE_AREA
ControlWord
:
ULONG
StatusWord
:
ULONG
TagWord
:
ULONG
ErrorOffset
:
ULONG
ErrorSelector
:
ULONG
DataOffset
:
ULONG
DataSelector
:
ULONG
RegisterArea
:
UCHAR[ 80 ]
Cr0NpxState
:
ULONG
_X86_CONTEXT
ContextFlags
:
ULONG
Dr0
:
ULONG
Dr1
:
ULONG
Dr2
:
ULONG
Dr3
:
ULONG
Dr6
:
ULONG
Dr7
:
ULONG
FloatSave
:
X86_FLOATING_SAVE_AREA
SegGs
:
ULONG
SegFs
:
ULONG
SegEs
:
ULONG
SegDs
:
ULONG
Edi
:
ULONG
Esi
:
ULONG
Ebx
:
ULONG
Edx
:
ULONG
Ecx
:
ULONG
Eax
:
ULONG
Ebp
:
ULONG
Eip
:
ULONG
SegCs
:
ULONG
EFlags
:
ULONG
Esp
:
ULONG
SegSs
:
ULONG
X86_CONTEXT
:
struct _X86_CONTEXT
ContextFlags
:
ULONG
Dr0
:
ULONG
Dr1
:
ULONG
Dr2
:
ULONG
Dr3
:
ULONG
Dr6
:
ULONG
Dr7
:
ULONG
FloatSave
:
X86_FLOATING_SAVE_AREA
SegGs
:
ULONG
SegFs
:
ULONG
SegEs
:
ULONG
SegDs
:
ULONG
Edi
:
ULONG
Esi
:
ULONG
Ebx
:
ULONG
Edx
:
ULONG
Ecx
:
ULONG
Eax
:
ULONG
Ebp
:
ULONG
Eip
:
ULONG
SegCs
:
ULONG
EFlags
:
ULONG
Esp
:
ULONG
SegSs
:
ULONG
_PORT_VIEW
Length
:
ULONG
SectionHandle
:
LPC_HANDLE
SectionOffset
:
ULONG
ViewSize
:
LPC_SIZE_T
ViewBase
:
LPC_PVOID
ViewRemoteBase
:
LPC_PVOID
PORT_VIEW
:
struct _PORT_VIEW
Length
:
ULONG
SectionHandle
:
LPC_HANDLE
SectionOffset
:
ULONG
ViewSize
:
LPC_SIZE_T
ViewBase
:
LPC_PVOID
ViewRemoteBase
:
LPC_PVOID
_REMOTE_PORT_VIEW
Length
:
ULONG
ViewSize
:
LPC_SIZE_T
ViewBase
:
LPC_PVOID
REMOTE_PORT_VIEW
:
struct _REMOTE_PORT_VIEW
Length
:
ULONG
ViewSize
:
LPC_SIZE_T
ViewBase
:
LPC_PVOID
_IO_COMPLETION_INFORMATION_CLASS
IoCompletionBasicInformation
IO_COMPLETION_INFORMATION_CLASS
:
enum _IO_COMPLETION_INFORMATION_CLASS
IoCompletionBasicInformation
_PORT_INFORMATION_CLASS
PortBasicInformation
PORT_INFORMATION_CLASS
:
enum _PORT_INFORMATION_CLASS
PortBasicInformation
_SECTION_INHERIT
ViewShare
ViewUnmap
SECTION_INHERIT
:
enum _SECTION_INHERIT
ViewShare
ViewUnmap
_MEMORY_WORKING_SET_BLOCK
Protection
:
ULONG_PTRProtection : 5
ShareCount
:
ULONG_PTRShareCount : 3
Shared
:
ULONG_PTRShared : 1
Node
:
ULONG_PTRNode : 3
VirtualPage
:
ULONGVirtualPage : 20
MEMORY_WORKING_SET_BLOCK
:
struct _MEMORY_WORKING_SET_BLOCK
Protection
:
ULONG_PTRProtection : 5
ShareCount
:
ULONG_PTRShareCount : 3
Shared
:
ULONG_PTRShared : 1
Node
:
ULONG_PTRNode : 3
VirtualPage
:
ULONGVirtualPage : 20
_MEMORY_WORKING_SET_INFORMATION
NumberOfEntries
:
ULONG_PTR
WorkingSetInfo
:
MEMORY_WORKING_SET_BLOCK[1]
MEMORY_WORKING_SET_INFORMATION
:
struct _MEMORY_WORKING_SET_INFORMATION
NumberOfEntries
:
ULONG_PTR
WorkingSetInfo
:
MEMORY_WORKING_SET_BLOCK[1]
_MEMORY_WORKING_SET_EX_BLOCK
Valid
:
ULONG_PTRValid : 1
ShareCount
:
ULONG_PTRShareCount : 3
Win32Protection
:
ULONG_PTRWin32Protection : 11
Shared
:
ULONG_PTRShared : 1
Node
:
ULONG_PTRNode : 6
Locked
:
ULONG_PTRLocked : 1
LargePage
:
ULONG_PTRLargePage : 1
Priority
:
ULONG_PTRPriority : 3
Reserved
:
ULONG_PTRReserved : 5
MEMORY_WORKING_SET_EX_BLOCK
:
struct _MEMORY_WORKING_SET_EX_BLOCK
Valid
:
ULONG_PTRValid : 1
ShareCount
:
ULONG_PTRShareCount : 3
Win32Protection
:
ULONG_PTRWin32Protection : 11
Shared
:
ULONG_PTRShared : 1
Node
:
ULONG_PTRNode : 6
Locked
:
ULONG_PTRLocked : 1
LargePage
:
ULONG_PTRLargePage : 1
Priority
:
ULONG_PTRPriority : 3
Reserved
:
ULONG_PTRReserved : 5
_MEMORY_REGION_INFORMATION
AllocationBase
:
PVOID
AllocationProtect
:
ULONG
RegionType
:
ULONG
RegionSize
:
SIZE_T
MEMORY_REGION_INFORMATION
:
struct _MEMORY_REGION_INFORMATION
AllocationBase
:
PVOID
AllocationProtect
:
ULONG
RegionType
:
ULONG
RegionSize
:
SIZE_T
_MEMORY_WORKING_SET_EX_INFORMATION
VirtualAddress
:
PVOID
(anonymous)
MEMORY_WORKING_SET_EX_INFORMATION
:
struct _MEMORY_WORKING_SET_EX_INFORMATION
VirtualAddress
:
PVOID
(anonymous)
_SHUTDOWN_ACTION
ShutdownNoReboot
ShutdownReboot
ShutdownPowerOff
SHUTDOWN_ACTION
:
enum _SHUTDOWN_ACTION
ShutdownNoReboot
ShutdownReboot
ShutdownPowerOff
_ATOM_INFORMATION_CLASS
AtomBasicInformation
AtomTableInformation
ATOM_INFORMATION_CLASS
:
enum _ATOM_INFORMATION_CLASS
AtomBasicInformation
AtomTableInformation
_ATOM_BASIC_INFORMATION
UsageCount
:
USHORT
Flags
:
USHORT
NameLength
:
USHORT
Name
:
WCHAR[1]
ATOM_BASIC_INFORMATION
:
struct _ATOM_BASIC_INFORMATION
UsageCount
:
USHORT
Flags
:
USHORT
NameLength
:
USHORT
Name
:
WCHAR[1]
_ATOM_TABLE_INFORMATION
NumberOfAtoms
:
ULONG
Atoms
:
RTL_ATOM[1]
ATOM_TABLE_INFORMATION
:
struct _ATOM_TABLE_INFORMATION
NumberOfAtoms
:
ULONG
Atoms
:
RTL_ATOM[1]
_SEMAPHORE_INFORMATION_CLASS
SemaphoreBasicInformation
SEMAPHORE_INFORMATION_CLASS
:
enum _SEMAPHORE_INFORMATION_CLASS
SemaphoreBasicInformation
_SEMAPHORE_BASIC_INFORMATION
CurrentCount
:
LONG
MaximumCount
:
LONG
SEMAPHORE_BASIC_INFORMATION
:
struct _SEMAPHORE_BASIC_INFORMATION
CurrentCount
:
LONG
MaximumCount
:
LONG
_MUTANT_INFORMATION_CLASS
MutantBasicInformation
MUTANT_INFORMATION_CLASS
:
enum _MUTANT_INFORMATION_CLASS
MutantBasicInformation
_MUTANT_BASIC_INFORMATION
CurrentCount
:
LONG
OwnedByCaller
:
BOOLEAN
AbandonedState
:
BOOLEAN
MUTANT_BASIC_INFORMATION
:
struct _MUTANT_BASIC_INFORMATION
CurrentCount
:
LONG
OwnedByCaller
:
BOOLEAN
AbandonedState
:
BOOLEAN
_TIMER_INFORMATION_CLASS
TimerBasicInformation
TIMER_INFORMATION_CLASS
:
enum _TIMER_INFORMATION_CLASS
TimerBasicInformation
_TIMER_BASIC_INFORMATION
RemainingTime
:
LARGE_INTEGER
TimerState
:
BOOLEAN
TIMER_BASIC_INFORMATION
:
struct _TIMER_BASIC_INFORMATION
RemainingTime
:
LARGE_INTEGER
TimerState
:
BOOLEAN
_SECTION_INFORMATION_CLASS
SectionBasicInformation
SectionImageInformation
MaxSectionInfoClass
SECTION_INFORMATION_CLASS
:
enum _SECTION_INFORMATION_CLASS
SectionBasicInformation
SectionImageInformation
MaxSectionInfoClass
_OBJECT_INFORMATION_CLASS
ObjectBasicInformation
ObjectNameInformation
ObjectTypeInformation
ObjectTypesInformation
ObjectHandleFlagInformation
ObjectSessionInformation
MaxObjectInfoClass
OBJECT_INFORMATION_CLASS
:
enum _OBJECT_INFORMATION_CLASS
ObjectBasicInformation
ObjectNameInformation
ObjectTypeInformation
ObjectTypesInformation
ObjectHandleFlagInformation
ObjectSessionInformation
MaxObjectInfoClass
_OBJECT_BASIC_INFORMATION
Attributes
:
ULONG
GrantedAccess
:
ACCESS_MASK
HandleCount
:
ULONG
PointerCount
:
ULONG
PagedPoolCharge
:
ULONG
NonPagedPoolCharge
:
ULONG
Reserved
:
ULONG[ 3 ]
NameInfoSize
:
ULONG
TypeInfoSize
:
ULONG
SecurityDescriptorSize
:
ULONG
CreationTime
:
LARGE_INTEGER
OBJECT_BASIC_INFORMATION
:
struct _OBJECT_BASIC_INFORMATION
Attributes
:
ULONG
GrantedAccess
:
ACCESS_MASK
HandleCount
:
ULONG
PointerCount
:
ULONG
PagedPoolCharge
:
ULONG
NonPagedPoolCharge
:
ULONG
Reserved
:
ULONG[ 3 ]
NameInfoSize
:
ULONG
TypeInfoSize
:
ULONG
SecurityDescriptorSize
:
ULONG
CreationTime
:
LARGE_INTEGER
_OBJECT_NAME_INFORMATION
Name
:
UNICODE_STRING
OBJECT_NAME_INFORMATION
:
struct _OBJECT_NAME_INFORMATION
Name
:
UNICODE_STRING
_OBJECT_TYPE_INFORMATION
TypeName
:
UNICODE_STRING
TotalNumberOfObjects
:
ULONG
TotalNumberOfHandles
:
ULONG
TotalPagedPoolUsage
:
ULONG
TotalNonPagedPoolUsage
:
ULONG
TotalNamePoolUsage
:
ULONG
TotalHandleTableUsage
:
ULONG
HighWaterNumberOfObjects
:
ULONG
HighWaterNumberOfHandles
:
ULONG
HighWaterPagedPoolUsage
:
ULONG
HighWaterNonPagedPoolUsage
:
ULONG
HighWaterNamePoolUsage
:
ULONG
HighWaterHandleTableUsage
:
ULONG
InvalidAttributes
:
ULONG
GenericMapping
:
GENERIC_MAPPING
ValidAccessMask
:
ULONG
SecurityRequired
:
BOOLEAN
MaintainHandleCount
:
BOOLEAN
PoolType
:
ULONG
DefaultPagedPoolCharge
:
ULONG
DefaultNonPagedPoolCharge
:
ULONG
OBJECT_TYPE_INFORMATION
:
struct _OBJECT_TYPE_INFORMATION
TypeName
:
UNICODE_STRING
TotalNumberOfObjects
:
ULONG
TotalNumberOfHandles
:
ULONG
TotalPagedPoolUsage
:
ULONG
TotalNonPagedPoolUsage
:
ULONG
TotalNamePoolUsage
:
ULONG
TotalHandleTableUsage
:
ULONG
HighWaterNumberOfObjects
:
ULONG
HighWaterNumberOfHandles
:
ULONG
HighWaterPagedPoolUsage
:
ULONG
HighWaterNonPagedPoolUsage
:
ULONG
HighWaterNamePoolUsage
:
ULONG
HighWaterHandleTableUsage
:
ULONG
InvalidAttributes
:
ULONG
GenericMapping
:
GENERIC_MAPPING
ValidAccessMask
:
ULONG
SecurityRequired
:
BOOLEAN
MaintainHandleCount
:
BOOLEAN
PoolType
:
ULONG
DefaultPagedPoolCharge
:
ULONG
DefaultNonPagedPoolCharge
:
ULONG
_OBJECT_TYPES_INFORMATION
NumberOfTypes
:
ULONG
TypeInformation
:
OBJECT_TYPE_INFORMATION
OBJECT_TYPES_INFORMATION
:
struct _OBJECT_TYPES_INFORMATION
NumberOfTypes
:
ULONG
TypeInformation
:
OBJECT_TYPE_INFORMATION
_OBJECT_HANDLE_FLAG_INFORMATION
Inherit
:
BOOLEAN
ProtectFromClose
:
BOOLEAN
OBJECT_HANDLE_FLAG_INFORMATION
:
struct _OBJECT_HANDLE_FLAG_INFORMATION
Inherit
:
BOOLEAN
ProtectFromClose
:
BOOLEAN
_PLUGPLAY_EVENT_CATEGORY
HardwareProfileChangeEvent
TargetDeviceChangeEvent
DeviceClassChangeEvent
CustomDeviceEvent
DeviceInstallEvent
DeviceArrivalEvent
PowerEvent
VetoEvent
BlockedDriverEvent
InvalidIDEvent
MaxPlugEventCategory
PLUGPLAY_EVENT_CATEGORY
:
enum _PLUGPLAY_EVENT_CATEGORY
HardwareProfileChangeEvent
TargetDeviceChangeEvent
DeviceClassChangeEvent
CustomDeviceEvent
DeviceInstallEvent
DeviceArrivalEvent
PowerEvent
VetoEvent
BlockedDriverEvent
InvalidIDEvent
MaxPlugEventCategory
_PNP_VETO_TYPE
PNP_VetoTypeUnknown
PNP_VetoLegacyDevice
PNP_VetoPendingClose
PNP_VetoWindowsApp
PNP_VetoWindowsService
PNP_VetoOutstandingOpen
PNP_VetoDevice
PNP_VetoDriver
PNP_VetoIllegalDeviceRequest
PNP_VetoInsufficientPower
PNP_VetoNonDisableable
PNP_VetoLegacyDriver
PNP_VetoInsufficientRights
PNP_VETO_TYPE
:
enum _PNP_VETO_TYPE
PNP_VetoTypeUnknown
PNP_VetoLegacyDevice
PNP_VetoPendingClose
PNP_VetoWindowsApp
PNP_VetoWindowsService
PNP_VetoOutstandingOpen
PNP_VetoDevice
PNP_VetoDriver
PNP_VetoIllegalDeviceRequest
PNP_VetoInsufficientPower
PNP_VetoNonDisableable
PNP_VetoLegacyDriver
PNP_VetoInsufficientRights
_PLUGPLAY_EVENT_BLOCK
EventGuid
:
GUID
EventCategory
:
PLUGPLAY_EVENT_CATEGORY
Result
:
PULONG
Flags
:
ULONG
TotalSize
:
ULONG
DeviceObject
:
PVOID
(anonymous)
PLUGPLAY_EVENT_BLOCK
:
struct _PLUGPLAY_EVENT_BLOCK
EventGuid
:
GUID
EventCategory
:
PLUGPLAY_EVENT_CATEGORY
Result
:
PULONG
Flags
:
ULONG
TotalSize
:
ULONG
DeviceObject
:
PVOID
(anonymous)
PHYSICAL_ADDRESS
:
LARGE_INTEGER
PPHYSICAL_ADDRESS
:
LARGE_INTEGER*
_TIME_FIELDS
Year
:
CSHORT
Month
:
CSHORT
Day
:
CSHORT
Hour
:
CSHORT
Minute
:
CSHORT
Second
:
CSHORT
Milliseconds
:
CSHORT
Weekday
:
CSHORT
TIME_FIELDS
:
struct _TIME_FIELDS
Year
:
CSHORT
Month
:
CSHORT
Day
:
CSHORT
Hour
:
CSHORT
Minute
:
CSHORT
Second
:
CSHORT
Milliseconds
:
CSHORT
Weekday
:
CSHORT
PTIME_FIELDS
:
TIME_FIELDS*
_RTL_TIME_ZONE_INFORMATION
Bias
:
LONG
StandardName
:
WCHAR[ 32 ]
StandardStart
:
TIME_FIELDS
StandardBias
:
LONG
DaylightName
:
WCHAR[ 32 ]
DaylightStart
:
TIME_FIELDS
DaylightBias
:
LONG
RTL_TIME_ZONE_INFORMATION
:
struct _RTL_TIME_ZONE_INFORMATION
Bias
:
LONG
StandardName
:
WCHAR[ 32 ]
StandardStart
:
TIME_FIELDS
StandardBias
:
LONG
DaylightName
:
WCHAR[ 32 ]
DaylightStart
:
TIME_FIELDS
DaylightBias
:
LONG
_RTL_BITMAP_RUN
StartingIndex
:
ULONG
NumberOfBits
:
ULONG
RTL_BITMAP_RUN
:
struct _RTL_BITMAP_RUN
StartingIndex
:
ULONG
NumberOfBits
:
ULONG
PRTL_BITMAP_RUN
:
RTL_BITMAP_RUN*
_PARSE_MESSAGE_CONTEXT
fFlags
:
ULONG
cwSavColumn
:
ULONG
iwSrc
:
SIZE_T
iwDst
:
SIZE_T
iwDstSpace
:
SIZE_T
lpvArgStart
:
va_list
PARSE_MESSAGE_CONTEXT
:
struct _PARSE_MESSAGE_CONTEXT
fFlags
:
ULONG
cwSavColumn
:
ULONG
iwSrc
:
SIZE_T
iwDst
:
SIZE_T
iwDstSpace
:
SIZE_T
lpvArgStart
:
va_list
_RTL_RXACT_OPERATION
RtlRXactOperationDelete
RtlRXactOperationSetValue
RtlRXactOperationDelAttribute
RtlRXactOperationSetAttribute
RTL_RXACT_OPERATION
:
enum _RTL_RXACT_OPERATION
RtlRXactOperationDelete
RtlRXactOperationSetValue
RtlRXactOperationDelAttribute
RtlRXactOperationSetAttribute
_RTL_RXACT_LOG
OperationCount
:
ULONG
LogSize
:
ULONG
LogSizeInUse
:
ULONG
RTL_RXACT_LOG
:
struct _RTL_RXACT_LOG
OperationCount
:
ULONG
LogSize
:
ULONG
LogSizeInUse
:
ULONG
_RTL_RXACT_CONTEXT
RootRegistryKey
:
HANDLE
RXactKey
:
HANDLE
HandlesValid
:
BOOLEAN
RXactLog
:
PRTL_RXACT_LOG
RTL_RXACT_CONTEXT
:
struct _RTL_RXACT_CONTEXT
RootRegistryKey
:
HANDLE
RXactKey
:
HANDLE
HandlesValid
:
BOOLEAN
RXactLog
:
PRTL_RXACT_LOG
_CPTABLEINFO
CodePage
:
USHORT
MaximumCharacterSize
:
USHORT
DefaultChar
:
USHORT
UniDefaultChar
:
USHORT
TransDefaultChar
:
USHORT
TransUniDefaultChar
:
USHORT
DBCSCodePage
:
USHORT
LeadByte
:
UCHAR[MAXIMUM_LEADBYTES]
MultiByteTable
:
PUSHORT
WideCharTable
:
PVOID
DBCSRanges
:
PUSHORT
DBCSOffsets
:
PUSHORT
CPTABLEINFO
:
struct _CPTABLEINFO
CodePage
:
USHORT
MaximumCharacterSize
:
USHORT
DefaultChar
:
USHORT
UniDefaultChar
:
USHORT
TransDefaultChar
:
USHORT
TransUniDefaultChar
:
USHORT
DBCSCodePage
:
USHORT
LeadByte
:
UCHAR[MAXIMUM_LEADBYTES]
MultiByteTable
:
PUSHORT
WideCharTable
:
PVOID
DBCSRanges
:
PUSHORT
DBCSOffsets
:
PUSHORT
_NLSTABLEINFO
OemTableInfo
:
CPTABLEINFO
AnsiTableInfo
:
CPTABLEINFO
UpperCaseTable
:
PUSHORT
LowerCaseTable
:
PUSHORT
NLSTABLEINFO
:
struct _NLSTABLEINFO
OemTableInfo
:
CPTABLEINFO
AnsiTableInfo
:
CPTABLEINFO
UpperCaseTable
:
PUSHORT
LowerCaseTable
:
PUSHORT
_RTL_RANGE
Start
:
ULONGLONG
End
:
ULONGLONG
UserData
:
PVOID
Owner
:
PVOID
Attributes
:
UCHAR
Flags
:
UCHAR
RTL_RANGE
:
struct _RTL_RANGE
Start
:
ULONGLONG
End
:
ULONGLONG
UserData
:
PVOID
Owner
:
PVOID
Attributes
:
UCHAR
Flags
:
UCHAR
_EVENT_INFORMATION_CLASS
EventBasicInformation
EVENT_INFORMATION_CLASS
:
enum _EVENT_INFORMATION_CLASS
EventBasicInformation
_PLUGPLAY_CONTROL_CLASS
PlugPlayControlEnumerateDevice
PlugPlayControlRegisterNewDevice
PlugPlayControlDeregisterDevice
PlugPlayControlInitializeDevice
PlugPlayControlStartDevice
PlugPlayControlUnlockDevice
PlugPlayControlQueryAndRemoveDevice
PlugPlayControlUserResponse
PlugPlayControlGenerateLegacyDevice
PlugPlayControlGetInterfaceDeviceList
PlugPlayControlProperty
PlugPlayControlDeviceClassAssociation
PlugPlayControlGetRelatedDevice
PlugPlayControlGetInterfaceDeviceAlias
PlugPlayControlDeviceStatus
PlugPlayControlGetDeviceDepth
PlugPlayControlQueryDeviceRelations
PlugPlayControlTargetDeviceRelation
PlugPlayControlQueryConflictList
PlugPlayControlRetrieveDock
PlugPlayControlResetDevice
PlugPlayControlHaltDevice
PlugPlayControlGetBlockedDriverList
MaxPlugPlayControl
PLUGPLAY_CONTROL_CLASS
:
enum _PLUGPLAY_CONTROL_CLASS
PlugPlayControlEnumerateDevice
PlugPlayControlRegisterNewDevice
PlugPlayControlDeregisterDevice
PlugPlayControlInitializeDevice
PlugPlayControlStartDevice
PlugPlayControlUnlockDevice
PlugPlayControlQueryAndRemoveDevice
PlugPlayControlUserResponse
PlugPlayControlGenerateLegacyDevice
PlugPlayControlGetInterfaceDeviceList
PlugPlayControlProperty
PlugPlayControlDeviceClassAssociation
PlugPlayControlGetRelatedDevice
PlugPlayControlGetInterfaceDeviceAlias
PlugPlayControlDeviceStatus
PlugPlayControlGetDeviceDepth
PlugPlayControlQueryDeviceRelations
PlugPlayControlTargetDeviceRelation
PlugPlayControlQueryConflictList
PlugPlayControlRetrieveDock
PlugPlayControlResetDevice
PlugPlayControlHaltDevice
PlugPlayControlGetBlockedDriverList
MaxPlugPlayControl
_KEY_INFORMATION_CLASS
KeyBasicInformation
KeyNodeInformation
KeyFullInformation
KeyNameInformation
KeyCachedInformation
KeyFlagsInformation
MaxKeyInfoClass
KEY_INFORMATION_CLASS
:
enum _KEY_INFORMATION_CLASS
KeyBasicInformation
KeyNodeInformation
KeyFullInformation
KeyNameInformation
KeyCachedInformation
KeyFlagsInformation
MaxKeyInfoClass
_KEY_BASIC_INFORMATION
LastWriteTime
:
LARGE_INTEGER
TitleIndex
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
KEY_BASIC_INFORMATION
:
struct _KEY_BASIC_INFORMATION
LastWriteTime
:
LARGE_INTEGER
TitleIndex
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
_KEY_VALUE_INFORMATION_CLASS
KeyValueBasicInformation
KeyValueFullInformation
KeyValuePartialInformation
KeyValueFullInformationAlign64
KeyValuePartialInformationAlign64
MaxKeyValueInfoClass
KEY_VALUE_INFORMATION_CLASS
:
enum _KEY_VALUE_INFORMATION_CLASS
KeyValueBasicInformation
KeyValueFullInformation
KeyValuePartialInformation
KeyValueFullInformationAlign64
KeyValuePartialInformationAlign64
MaxKeyValueInfoClass
_KEY_VALUE_BASIC_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
KEY_VALUE_BASIC_INFORMATION
:
struct _KEY_VALUE_BASIC_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
_KEY_VALUE_FULL_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
DataOffset
:
ULONG
DataLength
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
KEY_VALUE_FULL_INFORMATION
:
struct _KEY_VALUE_FULL_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
DataOffset
:
ULONG
DataLength
:
ULONG
NameLength
:
ULONG
Name
:
WCHAR[1]
_KEY_VALUE_PARTIAL_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
DataLength
:
ULONG
Data
:
UCHAR[1]
KEY_VALUE_PARTIAL_INFORMATION
:
struct _KEY_VALUE_PARTIAL_INFORMATION
TitleIndex
:
ULONG
Type
:
ULONG
DataLength
:
ULONG
Data
:
UCHAR[1]
_KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
Type
:
ULONG
DataLength
:
ULONG
Data
:
UCHAR[1]
KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
:
struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64
Type
:
ULONG
DataLength
:
ULONG
Data
:
UCHAR[1]
_KEY_VALUE_ENTRY
ValueName
:
PUNICODE_STRING
DataLength
:
ULONG
DataOffset
:
ULONG
Type
:
ULONG
KEY_VALUE_ENTRY
:
struct _KEY_VALUE_ENTRY
ValueName
:
PUNICODE_STRING
DataLength
:
ULONG
DataOffset
:
ULONG
Type
:
ULONG
_KEY_SET_INFORMATION_CLASS
KeyWriteTimeInformation
KeyUserFlagsInformation
MaxKeySetInfoClass
KEY_SET_INFORMATION_CLASS
:
enum _KEY_SET_INFORMATION_CLASS
KeyWriteTimeInformation
KeyUserFlagsInformation
MaxKeySetInfoClass
_CLIENT_ID
UniqueProcess
:
HANDLE
UniqueThread
:
HANDLE
CLIENT_ID
:
struct _CLIENT_ID
UniqueProcess
:
HANDLE
UniqueThread
:
HANDLE
_CLIENT_ID32
UniqueProcess
:
ULONG
UniqueThread
:
ULONG
CLIENT_ID32
:
struct _CLIENT_ID32
UniqueProcess
:
ULONG
UniqueThread
:
ULONG
_CLIENT_ID64
UniqueProcess
:
ULONGLONG
UniqueThread
:
ULONGLONG
CLIENT_ID64
:
struct _CLIENT_ID64
UniqueProcess
:
ULONGLONG
UniqueThread
:
ULONGLONG
_KSYSTEM_TIME
LowPart
:
ULONG
High1Time
:
LONG
High2Time
:
LONG
KSYSTEM_TIME
:
struct _KSYSTEM_TIME
LowPart
:
ULONG
High1Time
:
LONG
High2Time
:
LONG
_FILE_BASIC_INFORMATION
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
FileAttributes
:
ULONG
FILE_BASIC_INFORMATION
:
struct _FILE_BASIC_INFORMATION
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
FileAttributes
:
ULONG
_FILE_STANDARD_INFORMATION
AllocationSize
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
NumberOfLinks
:
ULONG
DeletePending
:
UCHAR
Directory
:
UCHAR
FILE_STANDARD_INFORMATION
:
struct _FILE_STANDARD_INFORMATION
AllocationSize
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
NumberOfLinks
:
ULONG
DeletePending
:
UCHAR
Directory
:
UCHAR
_FILE_INTERNAL_INFORMATION
IndexNumber
:
LARGE_INTEGER
FILE_INTERNAL_INFORMATION
:
struct _FILE_INTERNAL_INFORMATION
IndexNumber
:
LARGE_INTEGER
_FILE_EA_INFORMATION
EaSize
:
ULONG
FILE_EA_INFORMATION
:
struct _FILE_EA_INFORMATION
EaSize
:
ULONG
_FILE_ACCESS_INFORMATION
AccessFlags
:
ACCESS_MASK
FILE_ACCESS_INFORMATION
:
struct _FILE_ACCESS_INFORMATION
AccessFlags
:
ACCESS_MASK
_FILE_POSITION_INFORMATION
CurrentByteOffset
:
LARGE_INTEGER
FILE_POSITION_INFORMATION
:
struct _FILE_POSITION_INFORMATION
CurrentByteOffset
:
LARGE_INTEGER
_FILE_MODE_INFORMATION
Mode
:
ULONG
FILE_MODE_INFORMATION
:
struct _FILE_MODE_INFORMATION
Mode
:
ULONG
_FILE_ALIGNMENT_INFORMATION
AlignmentRequirement
:
ULONG
FILE_ALIGNMENT_INFORMATION
:
struct _FILE_ALIGNMENT_INFORMATION
AlignmentRequirement
:
ULONG
_FILE_NAME_INFORMATION
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_NAME_INFORMATION
:
struct _FILE_NAME_INFORMATION
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_ALL_INFORMATION
BasicInformation
:
FILE_BASIC_INFORMATION
StandardInformation
:
FILE_STANDARD_INFORMATION
InternalInformation
:
FILE_INTERNAL_INFORMATION
EaInformation
:
FILE_EA_INFORMATION
AccessInformation
:
FILE_ACCESS_INFORMATION
PositionInformation
:
FILE_POSITION_INFORMATION
ModeInformation
:
FILE_MODE_INFORMATION
AlignmentInformation
:
FILE_ALIGNMENT_INFORMATION
NameInformation
:
FILE_NAME_INFORMATION
FILE_ALL_INFORMATION
:
struct _FILE_ALL_INFORMATION
BasicInformation
:
FILE_BASIC_INFORMATION
StandardInformation
:
FILE_STANDARD_INFORMATION
InternalInformation
:
FILE_INTERNAL_INFORMATION
EaInformation
:
FILE_EA_INFORMATION
AccessInformation
:
FILE_ACCESS_INFORMATION
PositionInformation
:
FILE_POSITION_INFORMATION
ModeInformation
:
FILE_MODE_INFORMATION
AlignmentInformation
:
FILE_ALIGNMENT_INFORMATION
NameInformation
:
FILE_NAME_INFORMATION
_FILE_NETWORK_OPEN_INFORMATION
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
FileAttributes
:
ULONG
FILE_NETWORK_OPEN_INFORMATION
:
struct _FILE_NETWORK_OPEN_INFORMATION
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
FileAttributes
:
ULONG
_FILE_ATTRIBUTE_TAG_INFORMATION
FileAttributes
:
ULONG
ReparseTag
:
ULONG
FILE_ATTRIBUTE_TAG_INFORMATION
:
struct _FILE_ATTRIBUTE_TAG_INFORMATION
FileAttributes
:
ULONG
ReparseTag
:
ULONG
_FILE_ALLOCATION_INFORMATION
AllocationSize
:
LARGE_INTEGER
FILE_ALLOCATION_INFORMATION
:
struct _FILE_ALLOCATION_INFORMATION
AllocationSize
:
LARGE_INTEGER
_FILE_COMPRESSION_INFORMATION
CompressedFileSize
:
LARGE_INTEGER
CompressionFormat
:
USHORT
CompressionUnitShift
:
UCHAR
ChunkShift
:
UCHAR
ClusterShift
:
UCHAR
Reserved
:
UCHAR[3]
FILE_COMPRESSION_INFORMATION
:
struct _FILE_COMPRESSION_INFORMATION
CompressedFileSize
:
LARGE_INTEGER
CompressionFormat
:
USHORT
CompressionUnitShift
:
UCHAR
ChunkShift
:
UCHAR
ClusterShift
:
UCHAR
Reserved
:
UCHAR[3]
_FILE_DISPOSITION_INFORMATION
DeleteFile
:
BOOLEAN
FILE_DISPOSITION_INFORMATION
:
struct _FILE_DISPOSITION_INFORMATION
DeleteFile
:
BOOLEAN
_FILE_END_OF_FILE_INFORMATION
EndOfFile
:
LARGE_INTEGER
FILE_END_OF_FILE_INFORMATION
:
struct _FILE_END_OF_FILE_INFORMATION
EndOfFile
:
LARGE_INTEGER
_FILE_VALID_DATA_LENGTH_INFORMATION
ValidDataLength
:
LARGE_INTEGER
FILE_VALID_DATA_LENGTH_INFORMATION
:
struct _FILE_VALID_DATA_LENGTH_INFORMATION
ValidDataLength
:
LARGE_INTEGER
_FILE_LINK_INFORMATION
ReplaceIfExists
:
BOOLEAN
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_LINK_INFORMATION
:
struct _FILE_LINK_INFORMATION
ReplaceIfExists
:
BOOLEAN
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_MOVE_CLUSTER_INFORMATION
ClusterCount
:
ULONG
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_MOVE_CLUSTER_INFORMATION
:
struct _FILE_MOVE_CLUSTER_INFORMATION
ClusterCount
:
ULONG
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_RENAME_INFORMATION
ReplaceIfExists
:
BOOLEAN
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_RENAME_INFORMATION
:
struct _FILE_RENAME_INFORMATION
ReplaceIfExists
:
BOOLEAN
RootDirectory
:
HANDLE
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_STREAM_INFORMATION
NextEntryOffset
:
ULONG
StreamNameLength
:
ULONG
StreamSize
:
LARGE_INTEGER
StreamAllocationSize
:
LARGE_INTEGER
StreamName
:
WCHAR[1]
FILE_STREAM_INFORMATION
:
struct _FILE_STREAM_INFORMATION
NextEntryOffset
:
ULONG
StreamNameLength
:
ULONG
StreamSize
:
LARGE_INTEGER
StreamAllocationSize
:
LARGE_INTEGER
StreamName
:
WCHAR[1]
_FILE_TRACKING_INFORMATION
DestinationFile
:
HANDLE
ObjectInformationLength
:
ULONG
ObjectInformation
:
CHAR[1]
FILE_TRACKING_INFORMATION
:
struct _FILE_TRACKING_INFORMATION
DestinationFile
:
HANDLE
ObjectInformationLength
:
ULONG
ObjectInformation
:
CHAR[1]
_FILE_COMPLETION_INFORMATION
Port
:
HANDLE
Key
:
PVOID
FILE_COMPLETION_INFORMATION
:
struct _FILE_COMPLETION_INFORMATION
Port
:
HANDLE
Key
:
PVOID
_FILE_PIPE_INFORMATION
ReadMode
:
ULONG
CompletionMode
:
ULONG
FILE_PIPE_INFORMATION
:
struct _FILE_PIPE_INFORMATION
ReadMode
:
ULONG
CompletionMode
:
ULONG
_FILE_PIPE_LOCAL_INFORMATION
NamedPipeType
:
ULONG
NamedPipeConfiguration
:
ULONG
MaximumInstances
:
ULONG
CurrentInstances
:
ULONG
InboundQuota
:
ULONG
ReadDataAvailable
:
ULONG
OutboundQuota
:
ULONG
WriteQuotaAvailable
:
ULONG
NamedPipeState
:
ULONG
NamedPipeEnd
:
ULONG
FILE_PIPE_LOCAL_INFORMATION
:
struct _FILE_PIPE_LOCAL_INFORMATION
NamedPipeType
:
ULONG
NamedPipeConfiguration
:
ULONG
MaximumInstances
:
ULONG
CurrentInstances
:
ULONG
InboundQuota
:
ULONG
ReadDataAvailable
:
ULONG
OutboundQuota
:
ULONG
WriteQuotaAvailable
:
ULONG
NamedPipeState
:
ULONG
NamedPipeEnd
:
ULONG
_FILE_PIPE_REMOTE_INFORMATION
CollectDataTime
:
LARGE_INTEGER
MaximumCollectionCount
:
ULONG
FILE_PIPE_REMOTE_INFORMATION
:
struct _FILE_PIPE_REMOTE_INFORMATION
CollectDataTime
:
LARGE_INTEGER
MaximumCollectionCount
:
ULONG
_FILE_MAILSLOT_QUERY_INFORMATION
MaximumMessageSize
:
ULONG
MailslotQuota
:
ULONG
NextMessageSize
:
ULONG
MessagesAvailable
:
ULONG
ReadTimeout
:
LARGE_INTEGER
FILE_MAILSLOT_QUERY_INFORMATION
:
struct _FILE_MAILSLOT_QUERY_INFORMATION
MaximumMessageSize
:
ULONG
MailslotQuota
:
ULONG
NextMessageSize
:
ULONG
MessagesAvailable
:
ULONG
ReadTimeout
:
LARGE_INTEGER
_FILE_MAILSLOT_SET_INFORMATION
ReadTimeout
:
PLARGE_INTEGER
FILE_MAILSLOT_SET_INFORMATION
:
struct _FILE_MAILSLOT_SET_INFORMATION
ReadTimeout
:
PLARGE_INTEGER
_FILE_REPARSE_POINT_INFORMATION
FileReference
:
LONGLONG
Tag
:
ULONG
FILE_REPARSE_POINT_INFORMATION
:
struct _FILE_REPARSE_POINT_INFORMATION
FileReference
:
LONGLONG
Tag
:
ULONG
_FILE_FULL_EA_INFORMATION
NextEntryOffset
:
ULONG
Flags
:
UCHAR
EaNameLength
:
UCHAR
EaValueLength
:
USHORT
EaName
:
CHAR[1]
FILE_FULL_EA_INFORMATION
:
struct _FILE_FULL_EA_INFORMATION
NextEntryOffset
:
ULONG
Flags
:
UCHAR
EaNameLength
:
UCHAR
EaValueLength
:
USHORT
EaName
:
CHAR[1]
_FILE_GET_EA_INFORMATION
NextEntryOffset
:
ULONG
EaNameLength
:
UCHAR
EaName
:
CHAR[1]
FILE_GET_EA_INFORMATION
:
struct _FILE_GET_EA_INFORMATION
NextEntryOffset
:
ULONG
EaNameLength
:
UCHAR
EaName
:
CHAR[1]
_FILE_GET_QUOTA_INFORMATION
NextEntryOffset
:
ULONG
SidLength
:
ULONG
Sid
:
SID
FILE_GET_QUOTA_INFORMATION
:
struct _FILE_GET_QUOTA_INFORMATION
NextEntryOffset
:
ULONG
SidLength
:
ULONG
Sid
:
SID
_FILE_QUOTA_INFORMATION
NextEntryOffset
:
ULONG
SidLength
:
ULONG
ChangeTime
:
LARGE_INTEGER
QuotaUsed
:
LARGE_INTEGER
QuotaThreshold
:
LARGE_INTEGER
QuotaLimit
:
LARGE_INTEGER
Sid
:
SID
FILE_QUOTA_INFORMATION
:
struct _FILE_QUOTA_INFORMATION
NextEntryOffset
:
ULONG
SidLength
:
ULONG
ChangeTime
:
LARGE_INTEGER
QuotaUsed
:
LARGE_INTEGER
QuotaThreshold
:
LARGE_INTEGER
QuotaLimit
:
LARGE_INTEGER
Sid
:
SID
_FILE_DIRECTORY_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_DIRECTORY_INFORMATION
:
struct _FILE_DIRECTORY_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_FULL_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
FileName
:
WCHAR[1]
FILE_FULL_DIR_INFORMATION
:
struct _FILE_FULL_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
FileName
:
WCHAR[1]
_FILE_ID_FULL_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
FileId
:
LARGE_INTEGER
FileName
:
WCHAR[1]
FILE_ID_FULL_DIR_INFORMATION
:
struct _FILE_ID_FULL_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
FileId
:
LARGE_INTEGER
FileName
:
WCHAR[1]
_FILE_BOTH_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
ShortNameLength
:
CCHAR
ShortName
:
WCHAR[12]
FileName
:
WCHAR[1]
FILE_BOTH_DIR_INFORMATION
:
struct _FILE_BOTH_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
ShortNameLength
:
CCHAR
ShortName
:
WCHAR[12]
FileName
:
WCHAR[1]
_FILE_ID_BOTH_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
ShortNameLength
:
CCHAR
ShortName
:
WCHAR[12]
FileId
:
LARGE_INTEGER
FileName
:
WCHAR[1]
FILE_ID_BOTH_DIR_INFORMATION
:
struct _FILE_ID_BOTH_DIR_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
CreationTime
:
LARGE_INTEGER
LastAccessTime
:
LARGE_INTEGER
LastWriteTime
:
LARGE_INTEGER
ChangeTime
:
LARGE_INTEGER
EndOfFile
:
LARGE_INTEGER
AllocationSize
:
LARGE_INTEGER
FileAttributes
:
ULONG
FileNameLength
:
ULONG
EaSize
:
ULONG
ShortNameLength
:
CCHAR
ShortName
:
WCHAR[12]
FileId
:
LARGE_INTEGER
FileName
:
WCHAR[1]
_FILE_NAMES_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
FILE_NAMES_INFORMATION
:
struct _FILE_NAMES_INFORMATION
NextEntryOffset
:
ULONG
FileIndex
:
ULONG
FileNameLength
:
ULONG
FileName
:
WCHAR[1]
_FILE_OBJECTID_INFORMATION
FileReference
:
LONGLONG
ObjectId
:
UCHAR[16]
(anonymous)
FILE_OBJECTID_INFORMATION
:
struct _FILE_OBJECTID_INFORMATION
FileReference
:
LONGLONG
ObjectId
:
UCHAR[16]
(anonymous)
_SYSTEM_GDI_DRIVER_INFORMATION
DriverName
:
UNICODE_STRING
ImageAddress
:
PVOID
SectionPointer
:
PVOID
EntryPoint
:
PVOID
ExportSectionPointer
:
PIMAGE_EXPORT_DIRECTORY
ImageLength
:
ULONG
SYSTEM_GDI_DRIVER_INFORMATION
:
struct _SYSTEM_GDI_DRIVER_INFORMATION
DriverName
:
UNICODE_STRING
ImageAddress
:
PVOID
SectionPointer
:
PVOID
EntryPoint
:
PVOID
ExportSectionPointer
:
PIMAGE_EXPORT_DIRECTORY
ImageLength
:
ULONG
_SYSTEM_EXCEPTION_INFORMATION
AlignmentFixupCount
:
ULONG
ExceptionDispatchCount
:
ULONG
FloatingEmulationCount
:
ULONG
ByteWordEmulationCount
:
ULONG
SYSTEM_EXCEPTION_INFORMATION
:
struct _SYSTEM_EXCEPTION_INFORMATION
AlignmentFixupCount
:
ULONG
ExceptionDispatchCount
:
ULONG
FloatingEmulationCount
:
ULONG
ByteWordEmulationCount
:
ULONG
_THREAD_STATE
StateInitialized
StateReady
StateRunning
StateStandby
StateTerminated
StateWait
StateTransition
StateUnknown
THREAD_STATE
:
enum _THREAD_STATE
StateInitialized
StateReady
StateRunning
StateStandby
StateTerminated
StateWait
StateTransition
StateUnknown
_KWAIT_REASON
Executive
FreePage
PageIn
PoolAllocation
DelayExecution
Suspended
UserRequest
WrExecutive
WrFreePage
WrPageIn
WrPoolAllocation
WrDelayExecution
WrSuspended
WrUserRequest
WrEventPair
WrQueue
WrLpcReceive
WrLpcReply
WrVirtualMemory
WrPageOut
WrRendezvous
Spare2
Spare3
Spare4
Spare5
Spare6
WrKernel
WrResource
WrPushLock
WrMutex
WrQuantumEnd
WrDispatchInt
WrPreempted
WrYieldExecution
WrFastMutex
WrGuardedMutex
WrRundown
MaximumWaitReason
KWAIT_REASON
:
enum _KWAIT_REASON
Executive
FreePage
PageIn
PoolAllocation
DelayExecution
Suspended
UserRequest
WrExecutive
WrFreePage
WrPageIn
WrPoolAllocation
WrDelayExecution
WrSuspended
WrUserRequest
WrEventPair
WrQueue
WrLpcReceive
WrLpcReply
WrVirtualMemory
WrPageOut
WrRendezvous
Spare2
Spare3
Spare4
Spare5
Spare6
WrKernel
WrResource
WrPushLock
WrMutex
WrQuantumEnd
WrDispatchInt
WrPreempted
WrYieldExecution
WrFastMutex
WrGuardedMutex
WrRundown
MaximumWaitReason
_SYSTEM_THREAD_INFORMATION
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
WaitTime
:
ULONG
StartAddress
:
PVOID
ClientId
:
CLIENT_ID
Priority
:
KPRIORITY
BasePriority
:
KPRIORITY
ContextSwitchCount
:
ULONG
State
:
THREAD_STATE
WaitReason
:
KWAIT_REASON
SYSTEM_THREAD_INFORMATION
:
struct _SYSTEM_THREAD_INFORMATION
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
WaitTime
:
ULONG
StartAddress
:
PVOID
ClientId
:
CLIENT_ID
Priority
:
KPRIORITY
BasePriority
:
KPRIORITY
ContextSwitchCount
:
ULONG
State
:
THREAD_STATE
WaitReason
:
KWAIT_REASON
_SYSTEM_EXTENDED_THREAD_INFORMATION
ThreadInfo
:
SYSTEM_THREAD_INFORMATION
StackBase
:
PVOID
StackLimit
:
PVOID
Win32StartAddress
:
PVOID
Reserved1
:
ULONG_PTR
Reserved2
:
ULONG_PTR
Reserved3
:
ULONG_PTR
Reserved4
:
ULONG_PTR
SYSTEM_EXTENDED_THREAD_INFORMATION
:
struct _SYSTEM_EXTENDED_THREAD_INFORMATION
ThreadInfo
:
SYSTEM_THREAD_INFORMATION
StackBase
:
PVOID
StackLimit
:
PVOID
Win32StartAddress
:
PVOID
Reserved1
:
ULONG_PTR
Reserved2
:
ULONG_PTR
Reserved3
:
ULONG_PTR
Reserved4
:
ULONG_PTR
_SYSTEM_POOL_ENTRY
Allocated
:
BOOLEAN
Spare0
:
BOOLEAN
AllocatorBackTraceIndex
:
USHORT
Size
:
ULONG
(anonymous)
SYSTEM_POOL_ENTRY
:
struct _SYSTEM_POOL_ENTRY
Allocated
:
BOOLEAN
Spare0
:
BOOLEAN
AllocatorBackTraceIndex
:
USHORT
Size
:
ULONG
(anonymous)
_SYSTEM_POOL_INFORMATION
TotalSize
:
SIZE_T
FirstEntry
:
PVOID
EntryOverhead
:
USHORT
PoolTagPresent
:
BOOLEAN
Spare0
:
BOOLEAN
NumberOfEntries
:
ULONG
Entries
:
SYSTEM_POOL_ENTRY[1]
SYSTEM_POOL_INFORMATION
:
struct _SYSTEM_POOL_INFORMATION
TotalSize
:
SIZE_T
FirstEntry
:
PVOID
EntryOverhead
:
USHORT
PoolTagPresent
:
BOOLEAN
Spare0
:
BOOLEAN
NumberOfEntries
:
ULONG
Entries
:
SYSTEM_POOL_ENTRY[1]
_SYSTEM_POOLTAG
(anonymous)
PagedAllocs
:
ULONG
PagedFrees
:
ULONG
PagedUsed
:
SIZE_T
NonPagedAllocs
:
ULONG
NonPagedFrees
:
ULONG
NonPagedUsed
:
SIZE_T
SYSTEM_POOLTAG
:
struct _SYSTEM_POOLTAG
(anonymous)
PagedAllocs
:
ULONG
PagedFrees
:
ULONG
PagedUsed
:
SIZE_T
NonPagedAllocs
:
ULONG
NonPagedFrees
:
ULONG
NonPagedUsed
:
SIZE_T
_SYSTEM_BIGPOOL_ENTRY
(anonymous)
SizeInBytes
:
SIZE_T
(anonymous)
SYSTEM_BIGPOOL_ENTRY
:
struct _SYSTEM_BIGPOOL_ENTRY
(anonymous)
SizeInBytes
:
SIZE_T
(anonymous)
_SYSTEM_POOLTAG_INFORMATION
Count
:
ULONG
TagInfo
:
SYSTEM_POOLTAG[ 1 ]
SYSTEM_POOLTAG_INFORMATION
:
struct _SYSTEM_POOLTAG_INFORMATION
Count
:
ULONG
TagInfo
:
SYSTEM_POOLTAG[ 1 ]
_SYSTEM_SESSION_POOLTAG_INFORMATION
NextEntryOffset
:
SIZE_T
SessionId
:
ULONG
Count
:
ULONG
TagInfo
:
SYSTEM_POOLTAG[ 1 ]
SYSTEM_SESSION_POOLTAG_INFORMATION
:
struct _SYSTEM_SESSION_POOLTAG_INFORMATION
NextEntryOffset
:
SIZE_T
SessionId
:
ULONG
Count
:
ULONG
TagInfo
:
SYSTEM_POOLTAG[ 1 ]
_SYSTEM_BIGPOOL_INFORMATION
Count
:
ULONG
AllocatedInfo
:
SYSTEM_BIGPOOL_ENTRY[ 1 ]
SYSTEM_BIGPOOL_INFORMATION
:
struct _SYSTEM_BIGPOOL_INFORMATION
Count
:
ULONG
AllocatedInfo
:
SYSTEM_BIGPOOL_ENTRY[ 1 ]
_SYSTEM_HANDLE_TABLE_ENTRY_INFO
UniqueProcessId
:
USHORT
CreatorBackTraceIndex
:
USHORT
ObjectTypeIndex
:
UCHAR
HandleAttributes
:
UCHAR
HandleValue
:
USHORT
Object
:
PVOID
GrantedAccess
:
ULONG
SYSTEM_HANDLE_TABLE_ENTRY_INFO
:
struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO
UniqueProcessId
:
USHORT
CreatorBackTraceIndex
:
USHORT
ObjectTypeIndex
:
UCHAR
HandleAttributes
:
UCHAR
HandleValue
:
USHORT
Object
:
PVOID
GrantedAccess
:
ULONG
_SYSTEM_HANDLE_INFORMATION
NumberOfHandles
:
ULONG
Handles
:
SYSTEM_HANDLE_TABLE_ENTRY_INFO[ 1 ]
SYSTEM_HANDLE_INFORMATION
:
struct _SYSTEM_HANDLE_INFORMATION
NumberOfHandles
:
ULONG
Handles
:
SYSTEM_HANDLE_TABLE_ENTRY_INFO[ 1 ]
_SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
Object
:
PVOID
UniqueProcessId
:
ULONG
HandleValue
:
ULONG
GrantedAccess
:
ULONG
CreatorBackTraceIndex
:
USHORT
ObjectTypeIndex
:
USHORT
HandleAttributes
:
ULONG
Reserved
:
ULONG
SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
:
struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX
Object
:
PVOID
UniqueProcessId
:
ULONG
HandleValue
:
ULONG
GrantedAccess
:
ULONG
CreatorBackTraceIndex
:
USHORT
ObjectTypeIndex
:
USHORT
HandleAttributes
:
ULONG
Reserved
:
ULONG
_SYSTEM_HANDLE_INFORMATION_EX
NumberOfHandles
:
ULONG
Reserved
:
ULONG
Handles
:
struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX[ 1 ]
SYSTEM_HANDLE_INFORMATION_EX
:
struct _SYSTEM_HANDLE_INFORMATION_EX
NumberOfHandles
:
ULONG
Reserved
:
ULONG
Handles
:
struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX[ 1 ]
_SYSTEM_SPECIAL_POOL_INFORMATION
PoolTag
:
ULONG
Flags
:
ULONG
SYSTEM_SPECIAL_POOL_INFORMATION
:
struct _SYSTEM_SPECIAL_POOL_INFORMATION
PoolTag
:
ULONG
Flags
:
ULONG
_SYSTEM_OBJECTTYPE_INFORMATION
NextEntryOffset
:
ULONG
NumberOfObjects
:
ULONG
NumberOfHandles
:
ULONG
TypeIndex
:
ULONG
InvalidAttributes
:
ULONG
GenericMapping
:
GENERIC_MAPPING
ValidAccessMask
:
ULONG
PoolType
:
ULONG
SecurityRequired
:
UCHAR
WaitableObject
:
UCHAR
TypeName
:
UNICODE_STRING
SYSTEM_OBJECTTYPE_INFORMATION
:
struct _SYSTEM_OBJECTTYPE_INFORMATION
NextEntryOffset
:
ULONG
NumberOfObjects
:
ULONG
NumberOfHandles
:
ULONG
TypeIndex
:
ULONG
InvalidAttributes
:
ULONG
GenericMapping
:
GENERIC_MAPPING
ValidAccessMask
:
ULONG
PoolType
:
ULONG
SecurityRequired
:
UCHAR
WaitableObject
:
UCHAR
TypeName
:
UNICODE_STRING
_SYSTEM_HIBERFILE_INFORMATION
NumberOfMcbPairs
:
ULONG
Mcb
:
LARGE_INTEGER[ 1 ]
SYSTEM_HIBERFILE_INFORMATION
:
struct _SYSTEM_HIBERFILE_INFORMATION
NumberOfMcbPairs
:
ULONG
Mcb
:
LARGE_INTEGER[ 1 ]
_SYSTEM_KERNEL_DEBUGGER_INFORMATION
KernelDebuggerEnabled
:
BOOLEAN
KernelDebuggerNotPresent
:
BOOLEAN
SYSTEM_KERNEL_DEBUGGER_INFORMATION
:
struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION
KernelDebuggerEnabled
:
BOOLEAN
KernelDebuggerNotPresent
:
BOOLEAN
_SYSTEM_REGISTRY_QUOTA_INFORMATION
RegistryQuotaAllowed
:
ULONG
RegistryQuotaUsed
:
ULONG
PagedPoolSize
:
SIZE_T
SYSTEM_REGISTRY_QUOTA_INFORMATION
:
struct _SYSTEM_REGISTRY_QUOTA_INFORMATION
RegistryQuotaAllowed
:
ULONG
RegistryQuotaUsed
:
ULONG
PagedPoolSize
:
SIZE_T
_SYSTEM_CONTEXT_SWITCH_INFORMATION
ContextSwitches
:
ULONG
FindAny
:
ULONG
FindLast
:
ULONG
FindIdeal
:
ULONG
IdleAny
:
ULONG
IdleCurrent
:
ULONG
IdleLast
:
ULONG
IdleIdeal
:
ULONG
PreemptAny
:
ULONG
PreemptCurrent
:
ULONG
PreemptLast
:
ULONG
SwitchToIdle
:
ULONG
SYSTEM_CONTEXT_SWITCH_INFORMATION
:
struct _SYSTEM_CONTEXT_SWITCH_INFORMATION
ContextSwitches
:
ULONG
FindAny
:
ULONG
FindLast
:
ULONG
FindIdeal
:
ULONG
IdleAny
:
ULONG
IdleCurrent
:
ULONG
IdleLast
:
ULONG
IdleIdeal
:
ULONG
PreemptAny
:
ULONG
PreemptCurrent
:
ULONG
PreemptLast
:
ULONG
SwitchToIdle
:
ULONG
_SYSTEM_SESSION_MAPPED_VIEW_INFORMATION
NextEntryOffset
:
SIZE_T
SessionId
:
ULONG
ViewFailures
:
ULONG
NumberOfBytesAvailable
:
SIZE_T
NumberOfBytesAvailableContiguous
:
SIZE_T
SYSTEM_SESSION_MAPPED_VIEW_INFORMATION
:
struct _SYSTEM_SESSION_MAPPED_VIEW_INFORMATION
NextEntryOffset
:
SIZE_T
SessionId
:
ULONG
ViewFailures
:
ULONG
NumberOfBytesAvailable
:
SIZE_T
NumberOfBytesAvailableContiguous
:
SIZE_T
_SYSTEM_INTERRUPT_INFORMATION
ContextSwitches
:
ULONG
DpcCount
:
ULONG
DpcRate
:
ULONG
TimeIncrement
:
ULONG
DpcBypassCount
:
ULONG
ApcBypassCount
:
ULONG
SYSTEM_INTERRUPT_INFORMATION
:
struct _SYSTEM_INTERRUPT_INFORMATION
ContextSwitches
:
ULONG
DpcCount
:
ULONG
DpcRate
:
ULONG
TimeIncrement
:
ULONG
DpcBypassCount
:
ULONG
ApcBypassCount
:
ULONG
_SYSTEM_DPC_BEHAVIOR_INFORMATION
Spare
:
ULONG
DpcQueueDepth
:
ULONG
MinimumDpcRate
:
ULONG
AdjustDpcThreshold
:
ULONG
IdealDpcRate
:
ULONG
SYSTEM_DPC_BEHAVIOR_INFORMATION
:
struct _SYSTEM_DPC_BEHAVIOR_INFORMATION
Spare
:
ULONG
DpcQueueDepth
:
ULONG
MinimumDpcRate
:
ULONG
AdjustDpcThreshold
:
ULONG
IdealDpcRate
:
ULONG
_SYSTEM_LOOKASIDE_INFORMATION
CurrentDepth
:
USHORT
MaximumDepth
:
USHORT
TotalAllocates
:
ULONG
AllocateMisses
:
ULONG
TotalFrees
:
ULONG
FreeMisses
:
ULONG
Type
:
ULONG
Tag
:
ULONG
Size
:
ULONG
SYSTEM_LOOKASIDE_INFORMATION
:
struct _SYSTEM_LOOKASIDE_INFORMATION
CurrentDepth
:
USHORT
MaximumDepth
:
USHORT
TotalAllocates
:
ULONG
AllocateMisses
:
ULONG
TotalFrees
:
ULONG
FreeMisses
:
ULONG
Type
:
ULONG
Tag
:
ULONG
Size
:
ULONG
_SYSTEM_LEGACY_DRIVER_INFORMATION
VetoType
:
ULONG
VetoList
:
UNICODE_STRING
SYSTEM_LEGACY_DRIVER_INFORMATION
:
struct _SYSTEM_LEGACY_DRIVER_INFORMATION
VetoType
:
ULONG
VetoList
:
UNICODE_STRING
_SYSTEM_VDM_INSTEMUL_INFO
SegmentNotPresent
:
ULONG
VdmOpcode0F
:
ULONG
OpcodeESPrefix
:
ULONG
OpcodeCSPrefix
:
ULONG
OpcodeSSPrefix
:
ULONG
OpcodeDSPrefix
:
ULONG
OpcodeFSPrefix
:
ULONG
OpcodeGSPrefix
:
ULONG
OpcodeOPER32Prefix
:
ULONG
OpcodeADDR32Prefix
:
ULONG
OpcodeINSB
:
ULONG
OpcodeINSW
:
ULONG
OpcodeOUTSB
:
ULONG
OpcodeOUTSW
:
ULONG
OpcodePUSHF
:
ULONG
OpcodePOPF
:
ULONG
OpcodeINTnn
:
ULONG
OpcodeINTO
:
ULONG
OpcodeIRET
:
ULONG
OpcodeINBimm
:
ULONG
OpcodeINWimm
:
ULONG
OpcodeOUTBimm
:
ULONG
OpcodeOUTWimm
:
ULONG
OpcodeINB
:
ULONG
OpcodeINW
:
ULONG
OpcodeOUTB
:
ULONG
OpcodeOUTW
:
ULONG
OpcodeLOCKPrefix
:
ULONG
OpcodeREPNEPrefix
:
ULONG
OpcodeREPPrefix
:
ULONG
OpcodeHLT
:
ULONG
OpcodeCLI
:
ULONG
OpcodeSTI
:
ULONG
BopCount
:
ULONG
SYSTEM_VDM_INSTEMUL_INFO
:
struct _SYSTEM_VDM_INSTEMUL_INFO
SegmentNotPresent
:
ULONG
VdmOpcode0F
:
ULONG
OpcodeESPrefix
:
ULONG
OpcodeCSPrefix
:
ULONG
OpcodeSSPrefix
:
ULONG
OpcodeDSPrefix
:
ULONG
OpcodeFSPrefix
:
ULONG
OpcodeGSPrefix
:
ULONG
OpcodeOPER32Prefix
:
ULONG
OpcodeADDR32Prefix
:
ULONG
OpcodeINSB
:
ULONG
OpcodeINSW
:
ULONG
OpcodeOUTSB
:
ULONG
OpcodeOUTSW
:
ULONG
OpcodePUSHF
:
ULONG
OpcodePOPF
:
ULONG
OpcodeINTnn
:
ULONG
OpcodeINTO
:
ULONG
OpcodeIRET
:
ULONG
OpcodeINBimm
:
ULONG
OpcodeINWimm
:
ULONG
OpcodeOUTBimm
:
ULONG
OpcodeOUTWimm
:
ULONG
OpcodeINB
:
ULONG
OpcodeINW
:
ULONG
OpcodeOUTB
:
ULONG
OpcodeOUTW
:
ULONG
OpcodeLOCKPrefix
:
ULONG
OpcodeREPNEPrefix
:
ULONG
OpcodeREPPrefix
:
ULONG
OpcodeHLT
:
ULONG
OpcodeCLI
:
ULONG
OpcodeSTI
:
ULONG
BopCount
:
ULONG
_SYSTEM_TIMEOFDAY_INFORMATION
BootTime
:
LARGE_INTEGER
CurrentTime
:
LARGE_INTEGER
TimeZoneBias
:
LARGE_INTEGER
TimeZoneId
:
ULONG
Reserved
:
ULONG
BootTimeBias
:
ULONGLONG
SleepTimeBias
:
ULONGLONG
SYSTEM_TIMEOFDAY_INFORMATION
:
struct _SYSTEM_TIMEOFDAY_INFORMATION
BootTime
:
LARGE_INTEGER
CurrentTime
:
LARGE_INTEGER
TimeZoneBias
:
LARGE_INTEGER
TimeZoneId
:
ULONG
Reserved
:
ULONG
BootTimeBias
:
ULONGLONG
SleepTimeBias
:
ULONGLONG
SYSINF_PAGE_COUNT
:
SIZE_T
_SYSTEM_BASIC_INFORMATION
Reserved
:
ULONG
TimerResolution
:
ULONG
PageSize
:
ULONG
NumberOfPhysicalPages
:
SYSINF_PAGE_COUNT
LowestPhysicalPageNumber
:
SYSINF_PAGE_COUNT
HighestPhysicalPageNumber
:
SYSINF_PAGE_COUNT
AllocationGranularity
:
ULONG
MinimumUserModeAddress
:
ULONG_PTR
MaximumUserModeAddress
:
ULONG_PTR
ActiveProcessorsAffinityMask
:
ULONG_PTR
NumberOfProcessors
:
CCHAR
SYSTEM_BASIC_INFORMATION
:
struct _SYSTEM_BASIC_INFORMATION
Reserved
:
ULONG
TimerResolution
:
ULONG
PageSize
:
ULONG
NumberOfPhysicalPages
:
SYSINF_PAGE_COUNT
LowestPhysicalPageNumber
:
SYSINF_PAGE_COUNT
HighestPhysicalPageNumber
:
SYSINF_PAGE_COUNT
AllocationGranularity
:
ULONG
MinimumUserModeAddress
:
ULONG_PTR
MaximumUserModeAddress
:
ULONG_PTR
ActiveProcessorsAffinityMask
:
ULONG_PTR
NumberOfProcessors
:
CCHAR
_SYSTEM_PROCESSOR_INFORMATION
ProcessorArchitecture
:
USHORT
ProcessorLevel
:
USHORT
ProcessorRevision
:
USHORT
Reserved
:
USHORT
ProcessorFeatureBits
:
ULONG
SYSTEM_PROCESSOR_INFORMATION
:
struct _SYSTEM_PROCESSOR_INFORMATION
ProcessorArchitecture
:
USHORT
ProcessorLevel
:
USHORT
ProcessorRevision
:
USHORT
Reserved
:
USHORT
ProcessorFeatureBits
:
ULONG
_SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
IdleTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
DpcTime
:
LARGE_INTEGER
InterruptTime
:
LARGE_INTEGER
InterruptCount
:
ULONG
SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
:
struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
IdleTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
DpcTime
:
LARGE_INTEGER
InterruptTime
:
LARGE_INTEGER
InterruptCount
:
ULONG
_SYSTEM_PROCESSOR_IDLE_INFORMATION
IdleTime
:
ULONGLONG
C1Time
:
ULONGLONG
C2Time
:
ULONGLONG
C3Time
:
ULONGLONG
C1Transitions
:
ULONG
C2Transitions
:
ULONG
C3Transitions
:
ULONG
Padding
:
ULONG
SYSTEM_PROCESSOR_IDLE_INFORMATION
:
struct _SYSTEM_PROCESSOR_IDLE_INFORMATION
IdleTime
:
ULONGLONG
C1Time
:
ULONGLONG
C2Time
:
ULONGLONG
C3Time
:
ULONGLONG
C1Transitions
:
ULONG
C2Transitions
:
ULONG
C3Transitions
:
ULONG
Padding
:
ULONG
_SYSTEM_NUMA_INFORMATION
HighestNodeNumber
:
ULONG
Reserved
:
ULONG
(anonymous)
SYSTEM_NUMA_INFORMATION
:
struct _SYSTEM_NUMA_INFORMATION
HighestNodeNumber
:
ULONG
Reserved
:
ULONG
(anonymous)
_LOGICAL_PROCESSOR_RELATIONSHIP
RelationProcessorCore
RelationNumaNode
RelationCache
RelationProcessorPackage
LOGICAL_PROCESSOR_RELATIONSHIP
:
enum _LOGICAL_PROCESSOR_RELATIONSHIP
RelationProcessorCore
RelationNumaNode
RelationCache
RelationProcessorPackage
_PROCESSOR_CACHE_TYPE
CacheUnified
CacheInstruction
CacheData
CacheTrace
PROCESSOR_CACHE_TYPE
:
enum _PROCESSOR_CACHE_TYPE
CacheUnified
CacheInstruction
CacheData
CacheTrace
_CACHE_DESCRIPTOR
Level
:
BYTE
Associativity
:
BYTE
LineSize
:
WORD
Size
:
DWORD
Type
:
PROCESSOR_CACHE_TYPE
CACHE_DESCRIPTOR
:
struct _CACHE_DESCRIPTOR
Level
:
BYTE
Associativity
:
BYTE
LineSize
:
WORD
Size
:
DWORD
Type
:
PROCESSOR_CACHE_TYPE
_SYSTEM_LOGICAL_PROCESSOR_INFORMATION
ProcessorMask
:
ULONG_PTR
Relationship
:
LOGICAL_PROCESSOR_RELATIONSHIP
(anonymous)
SYSTEM_LOGICAL_PROCESSOR_INFORMATION
:
struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION
ProcessorMask
:
ULONG_PTR
Relationship
:
LOGICAL_PROCESSOR_RELATIONSHIP
(anonymous)
_MEMORY_BASIC_INFORMATION
BaseAddress
:
PVOID
AllocationBase
:
PVOID
AllocationProtect
:
DWORD
RegionSize
:
SIZE_T
State
:
DWORD
Protect
:
DWORD
Type
:
DWORD
MEMORY_BASIC_INFORMATION
:
struct _MEMORY_BASIC_INFORMATION
BaseAddress
:
PVOID
AllocationBase
:
PVOID
AllocationProtect
:
DWORD
RegionSize
:
SIZE_T
State
:
DWORD
Protect
:
DWORD
Type
:
DWORD
_SYSTEM_PROCESSOR_POWER_INFORMATION
CurrentFrequency
:
UCHAR
ThermalLimitFrequency
:
UCHAR
ConstantThrottleFrequency
:
UCHAR
DegradedThrottleFrequency
:
UCHAR
LastBusyFrequency
:
UCHAR
LastC3Frequency
:
UCHAR
LastAdjustedBusyFrequency
:
UCHAR
ProcessorMinThrottle
:
UCHAR
ProcessorMaxThrottle
:
UCHAR
NumberOfFrequencies
:
ULONG
PromotionCount
:
ULONG
DemotionCount
:
ULONG
ErrorCount
:
ULONG
RetryCount
:
ULONG
CurrentFrequencyTime
:
ULONG64
CurrentProcessorTime
:
ULONG64
CurrentProcessorIdleTime
:
ULONG64
LastProcessorTime
:
ULONG64
LastProcessorIdleTime
:
ULONG64
SYSTEM_PROCESSOR_POWER_INFORMATION
:
struct _SYSTEM_PROCESSOR_POWER_INFORMATION
CurrentFrequency
:
UCHAR
ThermalLimitFrequency
:
UCHAR
ConstantThrottleFrequency
:
UCHAR
DegradedThrottleFrequency
:
UCHAR
LastBusyFrequency
:
UCHAR
LastC3Frequency
:
UCHAR
LastAdjustedBusyFrequency
:
UCHAR
ProcessorMinThrottle
:
UCHAR
ProcessorMaxThrottle
:
UCHAR
NumberOfFrequencies
:
ULONG
PromotionCount
:
ULONG
DemotionCount
:
ULONG
ErrorCount
:
ULONG
RetryCount
:
ULONG
CurrentFrequencyTime
:
ULONG64
CurrentProcessorTime
:
ULONG64
CurrentProcessorIdleTime
:
ULONG64
LastProcessorTime
:
ULONG64
LastProcessorIdleTime
:
ULONG64
_SYSTEM_QUERY_TIME_ADJUST_INFORMATION
TimeAdjustment
:
ULONG
TimeIncrement
:
ULONG
Enable
:
BOOLEAN
SYSTEM_QUERY_TIME_ADJUST_INFORMATION
:
struct _SYSTEM_QUERY_TIME_ADJUST_INFORMATION
TimeAdjustment
:
ULONG
TimeIncrement
:
ULONG
Enable
:
BOOLEAN
_SYSTEM_SET_TIME_ADJUST_INFORMATION
TimeAdjustment
:
ULONG
Enable
:
BOOLEAN
SYSTEM_SET_TIME_ADJUST_INFORMATION
:
struct _SYSTEM_SET_TIME_ADJUST_INFORMATION
TimeAdjustment
:
ULONG
Enable
:
BOOLEAN
_SYSTEM_PERFORMANCE_INFORMATION
IdleProcessTime
:
LARGE_INTEGER
IoReadTransferCount
:
LARGE_INTEGER
IoWriteTransferCount
:
LARGE_INTEGER
IoOtherTransferCount
:
LARGE_INTEGER
IoReadOperationCount
:
ULONG
IoWriteOperationCount
:
ULONG
IoOtherOperationCount
:
ULONG
AvailablePages
:
ULONG
CommittedPages
:
SYSINF_PAGE_COUNT
CommitLimit
:
SYSINF_PAGE_COUNT
PeakCommitment
:
SYSINF_PAGE_COUNT
PageFaultCount
:
ULONG
CopyOnWriteCount
:
ULONG
TransitionCount
:
ULONG
CacheTransitionCount
:
ULONG
DemandZeroCount
:
ULONG
PageReadCount
:
ULONG
PageReadIoCount
:
ULONG
CacheReadCount
:
ULONG
CacheIoCount
:
ULONG
DirtyPagesWriteCount
:
ULONG
DirtyWriteIoCount
:
ULONG
MappedPagesWriteCount
:
ULONG
MappedWriteIoCount
:
ULONG
PagedPoolPages
:
ULONG
NonPagedPoolPages
:
ULONG
PagedPoolAllocs
:
ULONG
PagedPoolFrees
:
ULONG
NonPagedPoolAllocs
:
ULONG
NonPagedPoolFrees
:
ULONG
FreeSystemPtes
:
ULONG
ResidentSystemCodePage
:
ULONG
TotalSystemDriverPages
:
ULONG
TotalSystemCodePages
:
ULONG
NonPagedPoolLookasideHits
:
ULONG
PagedPoolLookasideHits
:
ULONG
AvailablePagedPoolPages
:
ULONG
ResidentSystemCachePage
:
ULONG
ResidentPagedPoolPage
:
ULONG
ResidentSystemDriverPage
:
ULONG
CcFastReadNoWait
:
ULONG
CcFastReadWait
:
ULONG
CcFastReadResourceMiss
:
ULONG
CcFastReadNotPossible
:
ULONG
CcFastMdlReadNoWait
:
ULONG
CcFastMdlReadWait
:
ULONG
CcFastMdlReadResourceMiss
:
ULONG
CcFastMdlReadNotPossible
:
ULONG
CcMapDataNoWait
:
ULONG
CcMapDataWait
:
ULONG
CcMapDataNoWaitMiss
:
ULONG
CcMapDataWaitMiss
:
ULONG
CcPinMappedDataCount
:
ULONG
CcPinReadNoWait
:
ULONG
CcPinReadWait
:
ULONG
CcPinReadNoWaitMiss
:
ULONG
CcPinReadWaitMiss
:
ULONG
CcCopyReadNoWait
:
ULONG
CcCopyReadWait
:
ULONG
CcCopyReadNoWaitMiss
:
ULONG
CcCopyReadWaitMiss
:
ULONG
CcMdlReadNoWait
:
ULONG
CcMdlReadWait
:
ULONG
CcMdlReadNoWaitMiss
:
ULONG
CcMdlReadWaitMiss
:
ULONG
CcReadAheadIos
:
ULONG
CcLazyWriteIos
:
ULONG
CcLazyWritePages
:
ULONG
CcDataFlushes
:
ULONG
CcDataPages
:
ULONG
ContextSwitches
:
ULONG
FirstLevelTbFills
:
ULONG
SecondLevelTbFills
:
ULONG
SystemCalls
:
ULONG
SYSTEM_PERFORMANCE_INFORMATION
:
struct _SYSTEM_PERFORMANCE_INFORMATION
IdleProcessTime
:
LARGE_INTEGER
IoReadTransferCount
:
LARGE_INTEGER
IoWriteTransferCount
:
LARGE_INTEGER
IoOtherTransferCount
:
LARGE_INTEGER
IoReadOperationCount
:
ULONG
IoWriteOperationCount
:
ULONG
IoOtherOperationCount
:
ULONG
AvailablePages
:
ULONG
CommittedPages
:
SYSINF_PAGE_COUNT
CommitLimit
:
SYSINF_PAGE_COUNT
PeakCommitment
:
SYSINF_PAGE_COUNT
PageFaultCount
:
ULONG
CopyOnWriteCount
:
ULONG
TransitionCount
:
ULONG
CacheTransitionCount
:
ULONG
DemandZeroCount
:
ULONG
PageReadCount
:
ULONG
PageReadIoCount
:
ULONG
CacheReadCount
:
ULONG
CacheIoCount
:
ULONG
DirtyPagesWriteCount
:
ULONG
DirtyWriteIoCount
:
ULONG
MappedPagesWriteCount
:
ULONG
MappedWriteIoCount
:
ULONG
PagedPoolPages
:
ULONG
NonPagedPoolPages
:
ULONG
PagedPoolAllocs
:
ULONG
PagedPoolFrees
:
ULONG
NonPagedPoolAllocs
:
ULONG
NonPagedPoolFrees
:
ULONG
FreeSystemPtes
:
ULONG
ResidentSystemCodePage
:
ULONG
TotalSystemDriverPages
:
ULONG
TotalSystemCodePages
:
ULONG
NonPagedPoolLookasideHits
:
ULONG
PagedPoolLookasideHits
:
ULONG
AvailablePagedPoolPages
:
ULONG
ResidentSystemCachePage
:
ULONG
ResidentPagedPoolPage
:
ULONG
ResidentSystemDriverPage
:
ULONG
CcFastReadNoWait
:
ULONG
CcFastReadWait
:
ULONG
CcFastReadResourceMiss
:
ULONG
CcFastReadNotPossible
:
ULONG
CcFastMdlReadNoWait
:
ULONG
CcFastMdlReadWait
:
ULONG
CcFastMdlReadResourceMiss
:
ULONG
CcFastMdlReadNotPossible
:
ULONG
CcMapDataNoWait
:
ULONG
CcMapDataWait
:
ULONG
CcMapDataNoWaitMiss
:
ULONG
CcMapDataWaitMiss
:
ULONG
CcPinMappedDataCount
:
ULONG
CcPinReadNoWait
:
ULONG
CcPinReadWait
:
ULONG
CcPinReadNoWaitMiss
:
ULONG
CcPinReadWaitMiss
:
ULONG
CcCopyReadNoWait
:
ULONG
CcCopyReadWait
:
ULONG
CcCopyReadNoWaitMiss
:
ULONG
CcCopyReadWaitMiss
:
ULONG
CcMdlReadNoWait
:
ULONG
CcMdlReadWait
:
ULONG
CcMdlReadNoWaitMiss
:
ULONG
CcMdlReadWaitMiss
:
ULONG
CcReadAheadIos
:
ULONG
CcLazyWriteIos
:
ULONG
CcLazyWritePages
:
ULONG
CcDataFlushes
:
ULONG
CcDataPages
:
ULONG
ContextSwitches
:
ULONG
FirstLevelTbFills
:
ULONG
SecondLevelTbFills
:
ULONG
SystemCalls
:
ULONG
_SYSTEM_PROCESS_INFORMATION
NextEntryOffset
:
ULONG
NumberOfThreads
:
ULONG
SpareLi1
:
LARGE_INTEGER
SpareLi2
:
LARGE_INTEGER
SpareLi3
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
ImageName
:
UNICODE_STRING
BasePriority
:
KPRIORITY
UniqueProcessId
:
HANDLE
InheritedFromUniqueProcessId
:
HANDLE
HandleCount
:
ULONG
SessionId
:
ULONG
PageDirectoryBase
:
ULONG_PTR
PeakVirtualSize
:
SIZE_T
VirtualSize
:
SIZE_T
PageFaultCount
:
ULONG
PeakWorkingSetSize
:
SIZE_T
WorkingSetSize
:
SIZE_T
QuotaPeakPagedPoolUsage
:
SIZE_T
QuotaPagedPoolUsage
:
SIZE_T
QuotaPeakNonPagedPoolUsage
:
SIZE_T
QuotaNonPagedPoolUsage
:
SIZE_T
PagefileUsage
:
SIZE_T
PeakPagefileUsage
:
SIZE_T
PrivatePageCount
:
SIZE_T
ReadOperationCount
:
LARGE_INTEGER
WriteOperationCount
:
LARGE_INTEGER
OtherOperationCount
:
LARGE_INTEGER
ReadTransferCount
:
LARGE_INTEGER
WriteTransferCount
:
LARGE_INTEGER
OtherTransferCount
:
LARGE_INTEGER
SYSTEM_PROCESS_INFORMATION
:
struct _SYSTEM_PROCESS_INFORMATION
NextEntryOffset
:
ULONG
NumberOfThreads
:
ULONG
SpareLi1
:
LARGE_INTEGER
SpareLi2
:
LARGE_INTEGER
SpareLi3
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
ImageName
:
UNICODE_STRING
BasePriority
:
KPRIORITY
UniqueProcessId
:
HANDLE
InheritedFromUniqueProcessId
:
HANDLE
HandleCount
:
ULONG
SessionId
:
ULONG
PageDirectoryBase
:
ULONG_PTR
PeakVirtualSize
:
SIZE_T
VirtualSize
:
SIZE_T
PageFaultCount
:
ULONG
PeakWorkingSetSize
:
SIZE_T
WorkingSetSize
:
SIZE_T
QuotaPeakPagedPoolUsage
:
SIZE_T
QuotaPagedPoolUsage
:
SIZE_T
QuotaPeakNonPagedPoolUsage
:
SIZE_T
QuotaNonPagedPoolUsage
:
SIZE_T
PagefileUsage
:
SIZE_T
PeakPagefileUsage
:
SIZE_T
PrivatePageCount
:
SIZE_T
ReadOperationCount
:
LARGE_INTEGER
WriteOperationCount
:
LARGE_INTEGER
OtherOperationCount
:
LARGE_INTEGER
ReadTransferCount
:
LARGE_INTEGER
WriteTransferCount
:
LARGE_INTEGER
OtherTransferCount
:
LARGE_INTEGER
_SYSTEM_SESSION_PROCESS_INFORMATION
SessionId
:
ULONG
SizeOfBuf
:
ULONG
Buffer
:
PVOID
SYSTEM_SESSION_PROCESS_INFORMATION
:
struct _SYSTEM_SESSION_PROCESS_INFORMATION
SessionId
:
ULONG
SizeOfBuf
:
ULONG
Buffer
:
PVOID
_SYSTEM_MEMORY_INFO
StringOffset
:
PUCHAR
ValidCount
:
USHORT
TransitionCount
:
USHORT
ModifiedCount
:
USHORT
PageTableCount
:
USHORT
SYSTEM_MEMORY_INFO
:
struct _SYSTEM_MEMORY_INFO
StringOffset
:
PUCHAR
ValidCount
:
USHORT
TransitionCount
:
USHORT
ModifiedCount
:
USHORT
PageTableCount
:
USHORT
_SYSTEM_MEMORY_INFORMATION
InfoSize
:
ULONG
StringStart
:
ULONG_PTR
Memory
:
SYSTEM_MEMORY_INFO[ 1 ]
SYSTEM_MEMORY_INFORMATION
:
struct _SYSTEM_MEMORY_INFORMATION
InfoSize
:
ULONG
StringStart
:
ULONG_PTR
Memory
:
SYSTEM_MEMORY_INFO[ 1 ]
_SYSTEM_CALL_COUNT_INFORMATION
Length
:
ULONG
NumberOfTables
:
ULONG
SYSTEM_CALL_COUNT_INFORMATION
:
struct _SYSTEM_CALL_COUNT_INFORMATION
Length
:
ULONG
NumberOfTables
:
ULONG
_SYSTEM_DEVICE_INFORMATION
NumberOfDisks
:
ULONG
NumberOfFloppies
:
ULONG
NumberOfCdRoms
:
ULONG
NumberOfTapes
:
ULONG
NumberOfSerialPorts
:
ULONG
NumberOfParallelPorts
:
ULONG
SYSTEM_DEVICE_INFORMATION
:
struct _SYSTEM_DEVICE_INFORMATION
NumberOfDisks
:
ULONG
NumberOfFloppies
:
ULONG
NumberOfCdRoms
:
ULONG
NumberOfTapes
:
ULONG
NumberOfSerialPorts
:
ULONG
NumberOfParallelPorts
:
ULONG
_SYSTEM_FLAGS_INFORMATION
Flags
:
ULONG
SYSTEM_FLAGS_INFORMATION
:
struct _SYSTEM_FLAGS_INFORMATION
Flags
:
ULONG
_SYSTEM_CALL_TIME_INFORMATION
Length
:
ULONG
TotalCalls
:
ULONG
TimeOfCalls
:
LARGE_INTEGER[1]
SYSTEM_CALL_TIME_INFORMATION
:
struct _SYSTEM_CALL_TIME_INFORMATION
Length
:
ULONG
TotalCalls
:
ULONG
TimeOfCalls
:
LARGE_INTEGER[1]
_SYSTEM_OBJECT_INFORMATION
NextEntryOffset
:
ULONG
Object
:
PVOID
CreatorUniqueProcess
:
HANDLE
CreatorBackTraceIndex
:
USHORT
Flags
:
USHORT
PointerCount
:
LONG
HandleCount
:
LONG
PagedPoolCharge
:
ULONG
NonPagedPoolCharge
:
ULONG
ExclusiveProcessId
:
HANDLE
SecurityDescriptor
:
PVOID
NameInfo
:
OBJECT_NAME_INFORMATION
SYSTEM_OBJECT_INFORMATION
:
struct _SYSTEM_OBJECT_INFORMATION
NextEntryOffset
:
ULONG
Object
:
PVOID
CreatorUniqueProcess
:
HANDLE
CreatorBackTraceIndex
:
USHORT
Flags
:
USHORT
PointerCount
:
LONG
HandleCount
:
LONG
PagedPoolCharge
:
ULONG
NonPagedPoolCharge
:
ULONG
ExclusiveProcessId
:
HANDLE
SecurityDescriptor
:
PVOID
NameInfo
:
OBJECT_NAME_INFORMATION
_SYSTEM_PAGEFILE_INFORMATION
NextEntryOffset
:
ULONG
TotalSize
:
ULONG
TotalInUse
:
ULONG
PeakUsage
:
ULONG
PageFileName
:
UNICODE_STRING
SYSTEM_PAGEFILE_INFORMATION
:
struct _SYSTEM_PAGEFILE_INFORMATION
NextEntryOffset
:
ULONG
TotalSize
:
ULONG
TotalInUse
:
ULONG
PeakUsage
:
ULONG
PageFileName
:
UNICODE_STRING
_SYSTEM_VERIFIER_INFORMATION
NextEntryOffset
:
ULONG
Level
:
ULONG
DriverName
:
UNICODE_STRING
RaiseIrqls
:
ULONG
AcquireSpinLocks
:
ULONG
SynchronizeExecutions
:
ULONG
AllocationsAttempted
:
ULONG
AllocationsSucceeded
:
ULONG
AllocationsSucceededSpecialPool
:
ULONG
AllocationsWithNoTag
:
ULONG
TrimRequests
:
ULONG
Trims
:
ULONG
AllocationsFailed
:
ULONG
AllocationsFailedDeliberately
:
ULONG
Loads
:
ULONG
Unloads
:
ULONG
UnTrackedPool
:
ULONG
CurrentPagedPoolAllocations
:
ULONG
CurrentNonPagedPoolAllocations
:
ULONG
PeakPagedPoolAllocations
:
ULONG
PeakNonPagedPoolAllocations
:
ULONG
PagedPoolUsageInBytes
:
SIZE_T
NonPagedPoolUsageInBytes
:
SIZE_T
PeakPagedPoolUsageInBytes
:
SIZE_T
PeakNonPagedPoolUsageInBytes
:
SIZE_T
SYSTEM_VERIFIER_INFORMATION
:
struct _SYSTEM_VERIFIER_INFORMATION
NextEntryOffset
:
ULONG
Level
:
ULONG
DriverName
:
UNICODE_STRING
RaiseIrqls
:
ULONG
AcquireSpinLocks
:
ULONG
SynchronizeExecutions
:
ULONG
AllocationsAttempted
:
ULONG
AllocationsSucceeded
:
ULONG
AllocationsSucceededSpecialPool
:
ULONG
AllocationsWithNoTag
:
ULONG
TrimRequests
:
ULONG
Trims
:
ULONG
AllocationsFailed
:
ULONG
AllocationsFailedDeliberately
:
ULONG
Loads
:
ULONG
Unloads
:
ULONG
UnTrackedPool
:
ULONG
CurrentPagedPoolAllocations
:
ULONG
CurrentNonPagedPoolAllocations
:
ULONG
PeakPagedPoolAllocations
:
ULONG
PeakNonPagedPoolAllocations
:
ULONG
PagedPoolUsageInBytes
:
SIZE_T
NonPagedPoolUsageInBytes
:
SIZE_T
PeakPagedPoolUsageInBytes
:
SIZE_T
PeakNonPagedPoolUsageInBytes
:
SIZE_T
_SYSTEM_VERIFIER_INFORMATION_EX
VerifyMode
:
ULONG
OptionChanges
:
ULONG
PreviousBucketName
:
UNICODE_STRING
Reserved
:
ULONG[ 4 ]
SYSTEM_VERIFIER_INFORMATION_EX
:
struct _SYSTEM_VERIFIER_INFORMATION_EX
VerifyMode
:
ULONG
OptionChanges
:
ULONG
PreviousBucketName
:
UNICODE_STRING
Reserved
:
ULONG[ 4 ]
_SYSTEM_FILECACHE_INFORMATION
CurrentSize
:
SIZE_T
PeakSize
:
SIZE_T
PageFaultCount
:
ULONG
MinimumWorkingSet
:
SIZE_T
MaximumWorkingSet
:
SIZE_T
CurrentSizeIncludingTransitionInPages
:
SIZE_T
PeakSizeIncludingTransitionInPages
:
SIZE_T
TransitionRePurposeCount
:
ULONG
Flags
:
ULONG
SYSTEM_FILECACHE_INFORMATION
:
struct _SYSTEM_FILECACHE_INFORMATION
CurrentSize
:
SIZE_T
PeakSize
:
SIZE_T
PageFaultCount
:
ULONG
MinimumWorkingSet
:
SIZE_T
MaximumWorkingSet
:
SIZE_T
CurrentSizeIncludingTransitionInPages
:
SIZE_T
PeakSizeIncludingTransitionInPages
:
SIZE_T
TransitionRePurposeCount
:
ULONG
Flags
:
ULONG
_HOTPATCH_HOOK_DESCRIPTOR
TargetAddress
:
ULONG_PTR
MappedAddress
:
PVOID
CodeOffset
:
ULONG
CodeSize
:
ULONG
OrigCodeOffset
:
ULONG
ValidationOffset
:
ULONG
ValidationSize
:
ULONG
HOTPATCH_HOOK_DESCRIPTOR
:
struct _HOTPATCH_HOOK_DESCRIPTOR
TargetAddress
:
ULONG_PTR
MappedAddress
:
PVOID
CodeOffset
:
ULONG
CodeSize
:
ULONG
OrigCodeOffset
:
ULONG
ValidationOffset
:
ULONG
ValidationSize
:
ULONG
_SYSTEM_HOTPATCH_CODE_INFORMATION
Flags
:
ULONG
InfoSize
:
ULONG
(anonymous)
SYSTEM_HOTPATCH_CODE_INFORMATION
:
struct _SYSTEM_HOTPATCH_CODE_INFORMATION
Flags
:
ULONG
InfoSize
:
ULONG
(anonymous)
_KERNEL_USER_TIMES
CreateTime
:
LARGE_INTEGER
ExitTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
KERNEL_USER_TIMES
:
struct _KERNEL_USER_TIMES
CreateTime
:
LARGE_INTEGER
ExitTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
PKERNEL_USER_TIMES
:
KERNEL_USER_TIMES*
_WATCHDOG_HANDLER_ACTION
WdActionSetTimeoutValue
WdActionQueryTimeoutValue
WdActionResetTimer
WdActionStopTimer
WdActionStartTimer
WdActionSetTriggerAction
WdActionQueryTriggerAction
WdActionQueryState
WdActionSleep
WdActionWake
WATCHDOG_HANDLER_ACTION
:
enum _WATCHDOG_HANDLER_ACTION
WdActionSetTimeoutValue
WdActionQueryTimeoutValue
WdActionResetTimer
WdActionStopTimer
WdActionStartTimer
WdActionSetTriggerAction
WdActionQueryTriggerAction
WdActionQueryState
WdActionSleep
WdActionWake
_WATCHDOG_INFORMATION_CLASS
WdInfoTimeoutValue
WdInfoResetTimer
WdInfoStopTimer
WdInfoStartTimer
WdInfoTriggerAction
WdInfoState
WATCHDOG_INFORMATION_CLASS
:
enum _WATCHDOG_INFORMATION_CLASS
WdInfoTimeoutValue
WdInfoResetTimer
WdInfoStopTimer
WdInfoStartTimer
WdInfoTriggerAction
WdInfoState
_SYSTEM_WATCHDOG_HANDLER_INFORMATION
WdHandler
:
PWD_HANDLER
Context
:
PVOID
SYSTEM_WATCHDOG_HANDLER_INFORMATION
:
struct _SYSTEM_WATCHDOG_HANDLER_INFORMATION
WdHandler
:
PWD_HANDLER
Context
:
PVOID
_SYSTEM_WATCHDOG_TIMER_INFORMATION
WdInfoClass
:
WATCHDOG_INFORMATION_CLASS
DataValue
:
ULONG
SYSTEM_WATCHDOG_TIMER_INFORMATION
:
struct _SYSTEM_WATCHDOG_TIMER_INFORMATION
WdInfoClass
:
WATCHDOG_INFORMATION_CLASS
DataValue
:
ULONG
_GDI_HANDLE_ENTRY
(anonymous)
(anonymous)
Unique
:
USHORT
Type
:
UCHAR
Flags
:
UCHAR
UserPointer
:
PVOID
GDI_HANDLE_ENTRY
:
struct _GDI_HANDLE_ENTRY
(anonymous)
(anonymous)
Unique
:
USHORT
Type
:
UCHAR
Flags
:
UCHAR
UserPointer
:
PVOID
_GDI_SHARED_MEMORY
Handles
:
GDI_HANDLE_ENTRY[GDI_MAX_HANDLE_COUNT]
GDI_SHARED_MEMORY
:
struct _GDI_SHARED_MEMORY
Handles
:
GDI_HANDLE_ENTRY[GDI_MAX_HANDLE_COUNT]
_CURDIR
DosPath
:
UNICODE_STRING
Handle
:
HANDLE
CURDIR
:
struct _CURDIR
DosPath
:
UNICODE_STRING
Handle
:
HANDLE
_RTL_DRIVE_LETTER_CURDIR
Flags
:
USHORT
Length
:
USHORT
TimeStamp
:
ULONG
DosPath
:
STRING
RTL_DRIVE_LETTER_CURDIR
:
struct _RTL_DRIVE_LETTER_CURDIR
Flags
:
USHORT
Length
:
USHORT
TimeStamp
:
ULONG
DosPath
:
STRING
_RTL_USER_PROCESS_PARAMETERS
MaximumLength
:
ULONG
Length
:
ULONG
Flags
:
ULONG
DebugFlags
:
ULONG
ConsoleHandle
:
HANDLE
ConsoleFlags
:
ULONG
StandardInput
:
HANDLE
StandardOutput
:
HANDLE
StandardError
:
HANDLE
CurrentDirectory
:
CURDIR
DllPath
:
UNICODE_STRING
ImagePathName
:
UNICODE_STRING
CommandLine
:
UNICODE_STRING
Environment
:
PVOID
StartingX
:
ULONG
StartingY
:
ULONG
CountX
:
ULONG
CountY
:
ULONG
CountCharsX
:
ULONG
CountCharsY
:
ULONG
FillAttribute
:
ULONG
WindowFlags
:
ULONG
ShowWindowFlags
:
ULONG
WindowTitle
:
UNICODE_STRING
DesktopInfo
:
UNICODE_STRING
ShellInfo
:
UNICODE_STRING
RuntimeData
:
UNICODE_STRING
CurrentDirectories
:
RTL_DRIVE_LETTER_CURDIR[RTL_MAX_DRIVE_LETTERS]
EnvironmentSize
:
ULONG
EnvironmentVersion
:
ULONG
RTL_USER_PROCESS_PARAMETERS
:
struct _RTL_USER_PROCESS_PARAMETERS
MaximumLength
:
ULONG
Length
:
ULONG
Flags
:
ULONG
DebugFlags
:
ULONG
ConsoleHandle
:
HANDLE
ConsoleFlags
:
ULONG
StandardInput
:
HANDLE
StandardOutput
:
HANDLE
StandardError
:
HANDLE
CurrentDirectory
:
CURDIR
DllPath
:
UNICODE_STRING
ImagePathName
:
UNICODE_STRING
CommandLine
:
UNICODE_STRING
Environment
:
PVOID
StartingX
:
ULONG
StartingY
:
ULONG
CountX
:
ULONG
CountY
:
ULONG
CountCharsX
:
ULONG
CountCharsY
:
ULONG
FillAttribute
:
ULONG
WindowFlags
:
ULONG
ShowWindowFlags
:
ULONG
WindowTitle
:
UNICODE_STRING
DesktopInfo
:
UNICODE_STRING
ShellInfo
:
UNICODE_STRING
RuntimeData
:
UNICODE_STRING
CurrentDirectories
:
RTL_DRIVE_LETTER_CURDIR[RTL_MAX_DRIVE_LETTERS]
EnvironmentSize
:
ULONG
EnvironmentVersion
:
ULONG
_WOW64_SHARED_INFORMATION
SharedNtdll32LdrInitializeThunk
SharedNtdll32KiUserExceptionDispatcher
SharedNtdll32KiUserApcDispatcher
SharedNtdll32KiUserCallbackDispatcher
SharedNtdll32LdrHotPatchRoutine
SharedNtdll32ExpInterlockedPopEntrySListFault
SharedNtdll32ExpInterlockedPopEntrySListResume
SharedNtdll32ExpInterlockedPopEntrySListEnd
SharedNtdll32RtlUserThreadStart
SharedNtdll32pQueryProcessDebugInformationRemote
SharedNtdll32EtwpNotificationThread
SharedNtdll32BaseAddress
Wow64SharedPageEntriesCount
WOW64_SHARED_INFORMATION
:
enum _WOW64_SHARED_INFORMATION
SharedNtdll32LdrInitializeThunk
SharedNtdll32KiUserExceptionDispatcher
SharedNtdll32KiUserApcDispatcher
SharedNtdll32KiUserCallbackDispatcher
SharedNtdll32LdrHotPatchRoutine
SharedNtdll32ExpInterlockedPopEntrySListFault
SharedNtdll32ExpInterlockedPopEntrySListResume
SharedNtdll32ExpInterlockedPopEntrySListEnd
SharedNtdll32RtlUserThreadStart
SharedNtdll32pQueryProcessDebugInformationRemote
SharedNtdll32EtwpNotificationThread
SharedNtdll32BaseAddress
Wow64SharedPageEntriesCount
LIST_ENTRY32
Flink
:
DWORD
Blink
:
DWORD
LIST_ENTRY32
:
struct LIST_ENTRY32
Flink
:
DWORD
Blink
:
DWORD
PLIST_ENTRY32
:
LIST_ENTRY32*
LIST_ENTRY64
Flink
:
ULONGLONG
Blink
:
ULONGLONG
LIST_ENTRY64
:
struct LIST_ENTRY64
Flink
:
ULONGLONG
Blink
:
ULONGLONG
PLIST_ENTRY64
:
LIST_ENTRY64*
_PEB_LDR_DATA32
Length
:
ULONG
Initialized
:
BOOLEAN
SsHandle
:
WOW64_POINTER(HANDLE)
InLoadOrderModuleList
:
LIST_ENTRY32
InMemoryOrderModuleList
:
LIST_ENTRY32
InInitializationOrderModuleList
:
LIST_ENTRY32
EntryInProgress
:
WOW64_POINTER(PVOID)
ShutdownInProgress
:
BOOLEAN
ShutdownThreadId
:
WOW64_POINTER(HANDLE)
PEB_LDR_DATA32
:
struct _PEB_LDR_DATA32
Length
:
ULONG
Initialized
:
BOOLEAN
SsHandle
:
WOW64_POINTER(HANDLE)
InLoadOrderModuleList
:
LIST_ENTRY32
InMemoryOrderModuleList
:
LIST_ENTRY32
InInitializationOrderModuleList
:
LIST_ENTRY32
EntryInProgress
:
WOW64_POINTER(PVOID)
ShutdownInProgress
:
BOOLEAN
ShutdownThreadId
:
WOW64_POINTER(HANDLE)
_LDR_DATA_TABLE_ENTRY32
InLoadOrderLinks
:
LIST_ENTRY32
InMemoryOrderLinks
:
LIST_ENTRY32
InInitializationOrderLinks
:
LIST_ENTRY32
DllBase
:
WOW64_POINTER(PVOID)
EntryPoint
:
WOW64_POINTER(PVOID)
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING32
BaseDllName
:
UNICODE_STRING32
Flags
:
ULONG
LoadCount
:
USHORT
TlsIndex
:
USHORT
(anonymous)
(anonymous)
EntryPointActivationContext
:
WOW64_POINTER(PVOID)
PatchInformation
:
WOW64_POINTER(PVOID)
ForwarderLinks
:
LIST_ENTRY32
ServiceTagLinks
:
LIST_ENTRY32
StaticLinks
:
LIST_ENTRY32
ContextInformation
:
WOW64_POINTER(PVOID)
OriginalBase
:
WOW64_POINTER(ULONG_PTR)
LoadTime
:
LARGE_INTEGER
LDR_DATA_TABLE_ENTRY32
:
struct _LDR_DATA_TABLE_ENTRY32
InLoadOrderLinks
:
LIST_ENTRY32
InMemoryOrderLinks
:
LIST_ENTRY32
InInitializationOrderLinks
:
LIST_ENTRY32
DllBase
:
WOW64_POINTER(PVOID)
EntryPoint
:
WOW64_POINTER(PVOID)
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING32
BaseDllName
:
UNICODE_STRING32
Flags
:
ULONG
LoadCount
:
USHORT
TlsIndex
:
USHORT
(anonymous)
(anonymous)
EntryPointActivationContext
:
WOW64_POINTER(PVOID)
PatchInformation
:
WOW64_POINTER(PVOID)
ForwarderLinks
:
LIST_ENTRY32
ServiceTagLinks
:
LIST_ENTRY32
StaticLinks
:
LIST_ENTRY32
ContextInformation
:
WOW64_POINTER(PVOID)
OriginalBase
:
WOW64_POINTER(ULONG_PTR)
LoadTime
:
LARGE_INTEGER
_CURDIR32
DosPath
:
UNICODE_STRING32
Handle
:
WOW64_POINTER(HANDLE)
CURDIR32
:
struct _CURDIR32
DosPath
:
UNICODE_STRING32
Handle
:
WOW64_POINTER(HANDLE)
_RTL_DRIVE_LETTER_CURDIR32
Flags
:
USHORT
Length
:
USHORT
TimeStamp
:
ULONG
DosPath
:
STRING32
RTL_DRIVE_LETTER_CURDIR32
:
struct _RTL_DRIVE_LETTER_CURDIR32
Flags
:
USHORT
Length
:
USHORT
TimeStamp
:
ULONG
DosPath
:
STRING32
_RTL_USER_PROCESS_PARAMETERS32
MaximumLength
:
ULONG
Length
:
ULONG
Flags
:
ULONG
DebugFlags
:
ULONG
ConsoleHandle
:
WOW64_POINTER(HANDLE)
ConsoleFlags
:
ULONG
StandardInput
:
WOW64_POINTER(HANDLE)
StandardOutput
:
WOW64_POINTER(HANDLE)
StandardError
:
WOW64_POINTER(HANDLE)
CurrentDirectory
:
CURDIR32
DllPath
:
UNICODE_STRING32
ImagePathName
:
UNICODE_STRING32
CommandLine
:
UNICODE_STRING32
Environment
:
WOW64_POINTER(PVOID)
StartingX
:
ULONG
StartingY
:
ULONG
CountX
:
ULONG
CountY
:
ULONG
CountCharsX
:
ULONG
CountCharsY
:
ULONG
FillAttribute
:
ULONG
WindowFlags
:
ULONG
ShowWindowFlags
:
ULONG
WindowTitle
:
UNICODE_STRING32
DesktopInfo
:
UNICODE_STRING32
ShellInfo
:
UNICODE_STRING32
RuntimeData
:
UNICODE_STRING32
CurrentDirectories
:
RTL_DRIVE_LETTER_CURDIR32[RTL_MAX_DRIVE_LETTERS]
EnvironmentSize
:
ULONG
EnvironmentVersion
:
ULONG
RTL_USER_PROCESS_PARAMETERS32
:
struct _RTL_USER_PROCESS_PARAMETERS32
MaximumLength
:
ULONG
Length
:
ULONG
Flags
:
ULONG
DebugFlags
:
ULONG
ConsoleHandle
:
WOW64_POINTER(HANDLE)
ConsoleFlags
:
ULONG
StandardInput
:
WOW64_POINTER(HANDLE)
StandardOutput
:
WOW64_POINTER(HANDLE)
StandardError
:
WOW64_POINTER(HANDLE)
CurrentDirectory
:
CURDIR32
DllPath
:
UNICODE_STRING32
ImagePathName
:
UNICODE_STRING32
CommandLine
:
UNICODE_STRING32
Environment
:
WOW64_POINTER(PVOID)
StartingX
:
ULONG
StartingY
:
ULONG
CountX
:
ULONG
CountY
:
ULONG
CountCharsX
:
ULONG
CountCharsY
:
ULONG
FillAttribute
:
ULONG
WindowFlags
:
ULONG
ShowWindowFlags
:
ULONG
WindowTitle
:
UNICODE_STRING32
DesktopInfo
:
UNICODE_STRING32
ShellInfo
:
UNICODE_STRING32
RuntimeData
:
UNICODE_STRING32
CurrentDirectories
:
RTL_DRIVE_LETTER_CURDIR32[RTL_MAX_DRIVE_LETTERS]
EnvironmentSize
:
ULONG
EnvironmentVersion
:
ULONG
_PEB32
InheritedAddressSpace
:
BOOLEAN
ReadImageFileExecOptions
:
BOOLEAN
BeingDebugged
:
BOOLEAN
(anonymous)
Mutant
:
WOW64_POINTER(HANDLE)
ImageBaseAddress
:
WOW64_POINTER(PVOID)
Ldr
:
WOW64_POINTER(PPEB_LDR_DATA)
ProcessParameters
:
WOW64_POINTER(PRTL_USER_PROCESS_PARAMETERS)
SubSystemData
:
WOW64_POINTER(PVOID)
ProcessHeap
:
WOW64_POINTER(PVOID)
FastPebLock
:
WOW64_POINTER(PRTL_CRITICAL_SECTION)
AtlThunkSListPtr
:
WOW64_POINTER(PVOID)
IFEOKey
:
WOW64_POINTER(PVOID)
(anonymous)
(anonymous)
SystemReserved
:
ULONG[1]
AtlThunkSListPtr32
:
ULONG
ApiSetMap
:
WOW64_POINTER(PVOID)
TlsExpansionCounter
:
ULONG
TlsBitmap
:
WOW64_POINTER(PVOID)
TlsBitmapBits
:
ULONG[2]
ReadOnlySharedMemoryBase
:
WOW64_POINTER(PVOID)
HotpatchInformation
:
WOW64_POINTER(PVOID)
ReadOnlyStaticServerData
:
WOW64_POINTER(PPVOID)
AnsiCodePageData
:
WOW64_POINTER(PVOID)
OemCodePageData
:
WOW64_POINTER(PVOID)
UnicodeCaseTableData
:
WOW64_POINTER(PVOID)
NumberOfProcessors
:
ULONG
NtGlobalFlag
:
ULONG
CriticalSectionTimeout
:
LARGE_INTEGER
HeapSegmentReserve
:
WOW64_POINTER(SIZE_T)
HeapSegmentCommit
:
WOW64_POINTER(SIZE_T)
HeapDeCommitTotalFreeThreshold
:
WOW64_POINTER(SIZE_T)
HeapDeCommitFreeBlockThreshold
:
WOW64_POINTER(SIZE_T)
NumberOfHeaps
:
ULONG
MaximumNumberOfHeaps
:
ULONG
ProcessHeaps
:
WOW64_POINTER(PPVOID)
GdiSharedHandleTable
:
WOW64_POINTER(PVOID)
ProcessStarterHelper
:
WOW64_POINTER(PVOID)
GdiDCAttributeList
:
ULONG
LoaderLock
:
WOW64_POINTER(PRTL_CRITICAL_SECTION)
OSMajorVersion
:
ULONG
OSMinorVersion
:
ULONG
OSBuildNumber
:
USHORT
OSCSDVersion
:
USHORT
OSPlatformId
:
ULONG
ImageSubsystem
:
ULONG
ImageSubsystemMajorVersion
:
ULONG
ImageSubsystemMinorVersion
:
ULONG
ImageProcessAffinityMask
:
WOW64_POINTER(ULONG_PTR)
GdiHandleBuffer
:
GDI_HANDLE_BUFFER32
PostProcessInitRoutine
:
WOW64_POINTER(PVOID)
TlsExpansionBitmap
:
WOW64_POINTER(PVOID)
TlsExpansionBitmapBits
:
ULONG[32]
SessionId
:
ULONG
PEB32
:
struct _PEB32
InheritedAddressSpace
:
BOOLEAN
ReadImageFileExecOptions
:
BOOLEAN
BeingDebugged
:
BOOLEAN
(anonymous)
Mutant
:
WOW64_POINTER(HANDLE)
ImageBaseAddress
:
WOW64_POINTER(PVOID)
Ldr
:
WOW64_POINTER(PPEB_LDR_DATA)
ProcessParameters
:
WOW64_POINTER(PRTL_USER_PROCESS_PARAMETERS)
SubSystemData
:
WOW64_POINTER(PVOID)
ProcessHeap
:
WOW64_POINTER(PVOID)
FastPebLock
:
WOW64_POINTER(PRTL_CRITICAL_SECTION)
AtlThunkSListPtr
:
WOW64_POINTER(PVOID)
IFEOKey
:
WOW64_POINTER(PVOID)
(anonymous)
(anonymous)
SystemReserved
:
ULONG[1]
AtlThunkSListPtr32
:
ULONG
ApiSetMap
:
WOW64_POINTER(PVOID)
TlsExpansionCounter
:
ULONG
TlsBitmap
:
WOW64_POINTER(PVOID)
TlsBitmapBits
:
ULONG[2]
ReadOnlySharedMemoryBase
:
WOW64_POINTER(PVOID)
HotpatchInformation
:
WOW64_POINTER(PVOID)
ReadOnlyStaticServerData
:
WOW64_POINTER(PPVOID)
AnsiCodePageData
:
WOW64_POINTER(PVOID)
OemCodePageData
:
WOW64_POINTER(PVOID)
UnicodeCaseTableData
:
WOW64_POINTER(PVOID)
NumberOfProcessors
:
ULONG
NtGlobalFlag
:
ULONG
CriticalSectionTimeout
:
LARGE_INTEGER
HeapSegmentReserve
:
WOW64_POINTER(SIZE_T)
HeapSegmentCommit
:
WOW64_POINTER(SIZE_T)
HeapDeCommitTotalFreeThreshold
:
WOW64_POINTER(SIZE_T)
HeapDeCommitFreeBlockThreshold
:
WOW64_POINTER(SIZE_T)
NumberOfHeaps
:
ULONG
MaximumNumberOfHeaps
:
ULONG
ProcessHeaps
:
WOW64_POINTER(PPVOID)
GdiSharedHandleTable
:
WOW64_POINTER(PVOID)
ProcessStarterHelper
:
WOW64_POINTER(PVOID)
GdiDCAttributeList
:
ULONG
LoaderLock
:
WOW64_POINTER(PRTL_CRITICAL_SECTION)
OSMajorVersion
:
ULONG
OSMinorVersion
:
ULONG
OSBuildNumber
:
USHORT
OSCSDVersion
:
USHORT
OSPlatformId
:
ULONG
ImageSubsystem
:
ULONG
ImageSubsystemMajorVersion
:
ULONG
ImageSubsystemMinorVersion
:
ULONG
ImageProcessAffinityMask
:
WOW64_POINTER(ULONG_PTR)
GdiHandleBuffer
:
GDI_HANDLE_BUFFER32
PostProcessInitRoutine
:
WOW64_POINTER(PVOID)
TlsExpansionBitmap
:
WOW64_POINTER(PVOID)
TlsExpansionBitmapBits
:
ULONG[32]
SessionId
:
ULONG
_GDI_TEB_BATCH32
Offset
:
ULONG
HDC
:
WOW64_POINTER(ULONG_PTR)
Buffer
:
ULONG[GDI_BATCH_BUFFER_SIZE]
GDI_TEB_BATCH32
:
struct _GDI_TEB_BATCH32
Offset
:
ULONG
HDC
:
WOW64_POINTER(ULONG_PTR)
Buffer
:
ULONG[GDI_BATCH_BUFFER_SIZE]
_NT_TIB32
ExceptionList
:
DWORD
StackBase
:
DWORD
StackLimit
:
DWORD
SubSystemTib
:
DWORD
(anonymous)
ArbitraryUserPointer
:
DWORD
Self
:
DWORD
NT_TIB32
:
struct _NT_TIB32
ExceptionList
:
DWORD
StackBase
:
DWORD
StackLimit
:
DWORD
SubSystemTib
:
DWORD
(anonymous)
ArbitraryUserPointer
:
DWORD
Self
:
DWORD
_NT_TIB64
ExceptionList
:
DWORD64
StackBase
:
DWORD64
StackLimit
:
DWORD64
SubSystemTib
:
DWORD64
(anonymous)
ArbitraryUserPointer
:
DWORD64
Self
:
DWORD64
NT_TIB64
:
struct _NT_TIB64
ExceptionList
:
DWORD64
StackBase
:
DWORD64
StackLimit
:
DWORD64
SubSystemTib
:
DWORD64
(anonymous)
ArbitraryUserPointer
:
DWORD64
Self
:
DWORD64
_TEB32
NtTib
:
NT_TIB32
EnvironmentPointer
:
WOW64_POINTER(PVOID)
ClientId
:
CLIENT_ID32
ActiveRpcHandle
:
WOW64_POINTER(PVOID)
ThreadLocalStoragePointer
:
WOW64_POINTER(PVOID)
ProcessEnvironmentBlock
:
WOW64_POINTER(PPEB)
LastErrorValue
:
ULONG
CountOfOwnedCriticalSections
:
ULONG
CsrClientThread
:
WOW64_POINTER(PVOID)
Win32ThreadInfo
:
WOW64_POINTER(PVOID)
User32Reserved
:
ULONG[26]
UserReserved
:
ULONG[5]
WOW32Reserved
:
WOW64_POINTER(PVOID)
CurrentLocale
:
LCID
FpSoftwareStatusRegister
:
ULONG
SystemReserved1
:
WOW64_POINTER(PVOID)[54]
ExceptionCode
:
NTSTATUS
ActivationContextStackPointer
:
WOW64_POINTER(PVOID)
SpareBytes
:
BYTE[36]
TxFsContext
:
ULONG
GdiTebBatch
:
GDI_TEB_BATCH32
RealClientId
:
CLIENT_ID32
GdiCachedProcessHandle
:
WOW64_POINTER(HANDLE)
GdiClientPID
:
ULONG
GdiClientTID
:
ULONG
GdiThreadLocalInfo
:
WOW64_POINTER(PVOID)
Win32ClientInfo
:
WOW64_POINTER(ULONG_PTR)[62]
glDispatchTable
:
WOW64_POINTER(PVOID)[233]
glReserved1
:
WOW64_POINTER(ULONG_PTR)[29]
glReserved2
:
WOW64_POINTER(PVOID)
glSectionInfo
:
WOW64_POINTER(PVOID)
glSection
:
WOW64_POINTER(PVOID)
glTable
:
WOW64_POINTER(PVOID)
glCurrentRC
:
WOW64_POINTER(PVOID)
glContext
:
WOW64_POINTER(PVOID)
LastStatusValue
:
NTSTATUS
StaticUnicodeString
:
UNICODE_STRING32
StaticUnicodeBuffer
:
WCHAR[261]
DeallocationStack
:
WOW64_POINTER(PVOID)
TlsSlots
:
WOW64_POINTER(PVOID)[64]
TlsLinks
:
LIST_ENTRY32
TEB32
:
struct _TEB32
NtTib
:
NT_TIB32
EnvironmentPointer
:
WOW64_POINTER(PVOID)
ClientId
:
CLIENT_ID32
ActiveRpcHandle
:
WOW64_POINTER(PVOID)
ThreadLocalStoragePointer
:
WOW64_POINTER(PVOID)
ProcessEnvironmentBlock
:
WOW64_POINTER(PPEB)
LastErrorValue
:
ULONG
CountOfOwnedCriticalSections
:
ULONG
CsrClientThread
:
WOW64_POINTER(PVOID)
Win32ThreadInfo
:
WOW64_POINTER(PVOID)
User32Reserved
:
ULONG[26]
UserReserved
:
ULONG[5]
WOW32Reserved
:
WOW64_POINTER(PVOID)
CurrentLocale
:
LCID
FpSoftwareStatusRegister
:
ULONG
SystemReserved1
:
WOW64_POINTER(PVOID)[54]
ExceptionCode
:
NTSTATUS
ActivationContextStackPointer
:
WOW64_POINTER(PVOID)
SpareBytes
:
BYTE[36]
TxFsContext
:
ULONG
GdiTebBatch
:
GDI_TEB_BATCH32
RealClientId
:
CLIENT_ID32
GdiCachedProcessHandle
:
WOW64_POINTER(HANDLE)
GdiClientPID
:
ULONG
GdiClientTID
:
ULONG
GdiThreadLocalInfo
:
WOW64_POINTER(PVOID)
Win32ClientInfo
:
WOW64_POINTER(ULONG_PTR)[62]
glDispatchTable
:
WOW64_POINTER(PVOID)[233]
glReserved1
:
WOW64_POINTER(ULONG_PTR)[29]
glReserved2
:
WOW64_POINTER(PVOID)
glSectionInfo
:
WOW64_POINTER(PVOID)
glSection
:
WOW64_POINTER(PVOID)
glTable
:
WOW64_POINTER(PVOID)
glCurrentRC
:
WOW64_POINTER(PVOID)
glContext
:
WOW64_POINTER(PVOID)
LastStatusValue
:
NTSTATUS
StaticUnicodeString
:
UNICODE_STRING32
StaticUnicodeBuffer
:
WCHAR[261]
DeallocationStack
:
WOW64_POINTER(PVOID)
TlsSlots
:
WOW64_POINTER(PVOID)[64]
TlsLinks
:
LIST_ENTRY32
_TIB
ExceptionList
:
struct _EXCEPTION_REGISTRATION_RECORD*
StackBase
:
PVOID
StackLimit
:
PVOID
SubSystemTib
:
PVOID
(anonymous)
ArbitraryUserPointer
:
PVOID
Self
:
struct _TIB*
TIB
:
struct _TIB
ExceptionList
:
struct _EXCEPTION_REGISTRATION_RECORD*
StackBase
:
PVOID
StackLimit
:
PVOID
SubSystemTib
:
PVOID
(anonymous)
ArbitraryUserPointer
:
PVOID
Self
:
struct _TIB*
PTIB
:
TIB*
_NLS_USER_INFO
iCountry
:
WCHAR[80]
sCountry
:
WCHAR[80]
sList
:
WCHAR[80]
iMeasure
:
WCHAR[80]
iPaperSize
:
WCHAR[80]
sDecimal
:
WCHAR[80]
sThousand
:
WCHAR[80]
sGrouping
:
WCHAR[80]
iDigits
:
WCHAR[80]
iLZero
:
WCHAR[80]
iNegNumber
:
WCHAR[80]
sNativeDigits
:
WCHAR[80]
iDigitSubstitution
:
WCHAR[80]
sCurrency
:
WCHAR[80]
sMonDecSep
:
WCHAR[80]
sMonThouSep
:
WCHAR[80]
sMonGrouping
:
WCHAR[80]
iCurrDigits
:
WCHAR[80]
iCurrency
:
WCHAR[80]
iNegCurr
:
WCHAR[80]
sPosSign
:
WCHAR[80]
sNegSign
:
WCHAR[80]
sTimeFormat
:
WCHAR[80]
s1159
:
WCHAR[80]
s2359
:
WCHAR[80]
sShortDate
:
WCHAR[80]
sYearMonth
:
WCHAR[80]
sLongDate
:
WCHAR[80]
iCalType
:
WCHAR[80]
iFirstDay
:
WCHAR[80]
iFirstWeek
:
WCHAR[80]
sLocale
:
WCHAR[80]
sLocaleName
:
WCHAR[85]
UserLocaleId
:
ULONG
InteractiveUserLuid
:
struct _LUID
InteractiveUserSid
:
UCHAR[68]
ulCacheUpdateCount
:
ULONG
NLS_USER_INFO
:
struct _NLS_USER_INFO
iCountry
:
WCHAR[80]
sCountry
:
WCHAR[80]
sList
:
WCHAR[80]
iMeasure
:
WCHAR[80]
iPaperSize
:
WCHAR[80]
sDecimal
:
WCHAR[80]
sThousand
:
WCHAR[80]
sGrouping
:
WCHAR[80]
iDigits
:
WCHAR[80]
iLZero
:
WCHAR[80]
iNegNumber
:
WCHAR[80]
sNativeDigits
:
WCHAR[80]
iDigitSubstitution
:
WCHAR[80]
sCurrency
:
WCHAR[80]
sMonDecSep
:
WCHAR[80]
sMonThouSep
:
WCHAR[80]
sMonGrouping
:
WCHAR[80]
iCurrDigits
:
WCHAR[80]
iCurrency
:
WCHAR[80]
iNegCurr
:
WCHAR[80]
sPosSign
:
WCHAR[80]
sNegSign
:
WCHAR[80]
sTimeFormat
:
WCHAR[80]
s1159
:
WCHAR[80]
s2359
:
WCHAR[80]
sShortDate
:
WCHAR[80]
sYearMonth
:
WCHAR[80]
sLongDate
:
WCHAR[80]
iCalType
:
WCHAR[80]
iFirstDay
:
WCHAR[80]
iFirstWeek
:
WCHAR[80]
sLocale
:
WCHAR[80]
sLocaleName
:
WCHAR[85]
UserLocaleId
:
ULONG
InteractiveUserLuid
:
struct _LUID
InteractiveUserSid
:
UCHAR[68]
ulCacheUpdateCount
:
ULONG
_INIFILE_MAPPING_TARGET
Next
:
struct _INIFILE_MAPPING_TARGET*
RegistryPath
:
struct _UNICODE_STRING
INIFILE_MAPPING_TARGET
:
struct _INIFILE_MAPPING_TARGET
Next
:
struct _INIFILE_MAPPING_TARGET*
RegistryPath
:
struct _UNICODE_STRING
_INIFILE_MAPPING_VARNAME
Next
:
struct _INIFILE_MAPPING_VARNAME*
Name
:
UNICODE_STRING
MappingFlags
:
ULONG
MappingTarget
:
struct _INIFILE_MAPPING_TARGET*
INIFILE_MAPPING_VARNAME
:
struct _INIFILE_MAPPING_VARNAME
Next
:
struct _INIFILE_MAPPING_VARNAME*
Name
:
UNICODE_STRING
MappingFlags
:
ULONG
MappingTarget
:
struct _INIFILE_MAPPING_TARGET*
_INIFILE_MAPPING_APPNAME
Next
:
struct _INIFILE_MAPPING_APPNAME*
Name
:
UNICODE_STRING
VariableNames
:
struct _INIFILE_MAPPING_VARNAME*
DefaultVarNameMapping
:
struct _INIFILE_MAPPING_VARNAME*
INIFILE_MAPPING_APPNAME
:
struct _INIFILE_MAPPING_APPNAME
Next
:
struct _INIFILE_MAPPING_APPNAME*
Name
:
UNICODE_STRING
VariableNames
:
struct _INIFILE_MAPPING_VARNAME*
DefaultVarNameMapping
:
struct _INIFILE_MAPPING_VARNAME*
_INIFILE_MAPPING_FILENAME
Next
:
struct _INIFILE_MAPPING_FILENAME*
Name
:
UNICODE_STRING
ApplicationNames
:
struct _INIFILE_MAPPING_APPNAME*
DefaultAppNameMapping
:
struct _INIFILE_MAPPING_APPNAME*
INIFILE_MAPPING_FILENAME
:
struct _INIFILE_MAPPING_FILENAME
Next
:
struct _INIFILE_MAPPING_FILENAME*
Name
:
UNICODE_STRING
ApplicationNames
:
struct _INIFILE_MAPPING_APPNAME*
DefaultAppNameMapping
:
struct _INIFILE_MAPPING_APPNAME*
_INIFILE_MAPPING
FileNames
:
struct _INIFILE_MAPPING_FILENAME*
DefaultFileNameMapping
:
struct _INIFILE_MAPPING_FILENAME*
WinIniFileMapping
:
struct _INIFILE_MAPPING_FILENAME*
Reserved
:
ULONG
INIFILE_MAPPING
:
struct _INIFILE_MAPPING
FileNames
:
struct _INIFILE_MAPPING_FILENAME*
DefaultFileNameMapping
:
struct _INIFILE_MAPPING_FILENAME*
WinIniFileMapping
:
struct _INIFILE_MAPPING_FILENAME*
Reserved
:
ULONG
_PORT_MESSAGE
(anonymous)
(anonymous)
(anonymous)
MessageId
:
ULONG
(anonymous)
PORT_MESSAGE
:
struct _PORT_MESSAGE
(anonymous)
(anonymous)
(anonymous)
MessageId
:
ULONG
(anonymous)
_PORT_DATA_ENTRY
Base
:
LPC_PVOID
Size
:
ULONG
PORT_DATA_ENTRY
:
struct _PORT_DATA_ENTRY
Base
:
LPC_PVOID
Size
:
ULONG
_PORT_DATA_INFORMATION
CountDataEntries
:
ULONG
DataEntries
:
PORT_DATA_ENTRY[1]
PORT_DATA_INFORMATION
:
struct _PORT_DATA_INFORMATION
CountDataEntries
:
ULONG
DataEntries
:
PORT_DATA_ENTRY[1]
CSR_API_NUMBER
:
ULONG
_CSR_API_CONNECTINFO
ObjectDirectory
:
HANDLE
SharedSectionBase
:
PVOID
SharedStaticServerData
:
PVOID
SharedSectionHeap
:
PVOID
DebugFlags
:
ULONG
SizeOfPebData
:
ULONG
SizeOfTebData
:
ULONG
NumberOfServerDllNames
:
ULONG
ServerProcessId
:
HANDLE
CSR_API_CONNECTINFO
:
struct _CSR_API_CONNECTINFO
ObjectDirectory
:
HANDLE
SharedSectionBase
:
PVOID
SharedStaticServerData
:
PVOID
SharedSectionHeap
:
PVOID
DebugFlags
:
ULONG
SizeOfPebData
:
ULONG
SizeOfTebData
:
ULONG
NumberOfServerDllNames
:
ULONG
ServerProcessId
:
HANDLE
_CSR_CLIENTCONNECT_MSG
ServerDllIndex
:
ULONG
ConnectionInformation
:
PVOID
ConnectionInformationLength
:
ULONG
CSR_CLIENTCONNECT_MSG
:
struct _CSR_CLIENTCONNECT_MSG
ServerDllIndex
:
ULONG
ConnectionInformation
:
PVOID
ConnectionInformationLength
:
ULONG
_CSR_CAPTURE_HEADER
Length
:
ULONG
RelatedCaptureBuffer
:
PVOID
CountMessagePointers
:
ULONG
FreeSpace
:
PCHAR
MessagePointerOffsets
:
ULONG_PTR[1]
CSR_CAPTURE_HEADER
:
struct _CSR_CAPTURE_HEADER
Length
:
ULONG
RelatedCaptureBuffer
:
PVOID
CountMessagePointers
:
ULONG
FreeSpace
:
PCHAR
MessagePointerOffsets
:
ULONG_PTR[1]
_CSR_NT_SESSION
SessionLink
:
struct _LIST_ENTRY
SessionId
:
ULONG
ReferenceCount
:
ULONG
RootDirectory
:
STRING
CSR_NT_SESSION
:
struct _CSR_NT_SESSION
SessionLink
:
struct _LIST_ENTRY
SessionId
:
ULONG
ReferenceCount
:
ULONG
RootDirectory
:
STRING
_CSR_API_MSG
h
:
PORT_MESSAGE
(anonymous)
CSR_API_MSG
:
struct _CSR_API_MSG
h
:
PORT_MESSAGE
(anonymous)
_CSR_CALLBACK_INFO
ApiNumberBase
:
ULONG
MaxApiNumber
:
ULONG
CallbackDispatchTable
:
PCSR_CALLBACK_ROUTINE*
CSR_CALLBACK_INFO
:
struct _CSR_CALLBACK_INFO
ApiNumberBase
:
ULONG
MaxApiNumber
:
ULONG
CallbackDispatchTable
:
PCSR_CALLBACK_ROUTINE*
_RTL_DYNAMIC_TIME_ZONE_INFORMATION
tzi
:
struct _RTL_TIME_ZONE_INFORMATION
TimeZoneKeyName
:
WCHAR[ 128 ]
DynamicDaylightTimeDisabled
:
UCHAR
RTL_DYNAMIC_TIME_ZONE_INFORMATION
:
struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION
tzi
:
struct _RTL_TIME_ZONE_INFORMATION
TimeZoneKeyName
:
WCHAR[ 128 ]
DynamicDaylightTimeDisabled
:
UCHAR
_BASESRV_API_CONNECTINFO
ExpectedVersion
:
ULONG
DefaultObjectDirectory
:
HANDLE
WindowsVersion
:
ULONG
CurrentVersion
:
ULONG
DebugFlags
:
ULONG
WindowsDirectory
:
WCHAR[ MAX_PATH ]
WindowsSystemDirectory
:
WCHAR[ MAX_PATH ]
BASESRV_API_CONNECTINFO
:
struct _BASESRV_API_CONNECTINFO
ExpectedVersion
:
ULONG
DefaultObjectDirectory
:
HANDLE
WindowsVersion
:
ULONG
CurrentVersion
:
ULONG
DebugFlags
:
ULONG
WindowsDirectory
:
WCHAR[ MAX_PATH ]
WindowsSystemDirectory
:
WCHAR[ MAX_PATH ]
_BASESRV_API_NUMBER
BasepCreateProcess
BasepCreateThread
BasepGetTempFile
BasepExitProcess
BasepDebugProcess
BasepCheckVDM
BasepUpdateVDMEntry
BasepGetNextVDMCommand
BasepExitVDM
BasepIsFirstVDM
BasepGetVDMExitCode
BasepSetReenterCount
BasepSetProcessShutdownParam
BasepGetProcessShutdownParam
BasepSetVDMCurDirs
BasepGetVDMCurDirs
BasepBatNotification
BasepRegisterWowExec
BasepSoundSentryNotification
BasepRefreshIniFileMapping
BasepDefineDosDevice
BasepSetTermsrvAppInstallMode
BasepSetTermsrvClientTimeZone
BasepSxsCreateActivationContext
BasepDebugProcessStop
BasepRegisterThread
BasepDeferredCreateProcess
BasepNlsGetUserInfo
BasepNlsSetUserInfo
BasepNlsUpdateCacheCount
BasepMaxApiNumber
BASESRV_API_NUMBER
:
enum _BASESRV_API_NUMBER
BasepCreateProcess
BasepCreateThread
BasepGetTempFile
BasepExitProcess
BasepDebugProcess
BasepCheckVDM
BasepUpdateVDMEntry
BasepGetNextVDMCommand
BasepExitVDM
BasepIsFirstVDM
BasepGetVDMExitCode
BasepSetReenterCount
BasepSetProcessShutdownParam
BasepGetProcessShutdownParam
BasepSetVDMCurDirs
BasepGetVDMCurDirs
BasepBatNotification
BasepRegisterWowExec
BasepSoundSentryNotification
BasepRefreshIniFileMapping
BasepDefineDosDevice
BasepSetTermsrvAppInstallMode
BasepSetTermsrvClientTimeZone
BasepSxsCreateActivationContext
BasepDebugProcessStop
BasepRegisterThread
BasepDeferredCreateProcess
BasepNlsGetUserInfo
BasepNlsSetUserInfo
BasepNlsUpdateCacheCount
BasepMaxApiNumber
_BASE_NLS_SET_USER_INFO_MSG
LCType
:
ULONG
pData
:
USHORT*
DataLength
:
ULONG
BASE_NLS_SET_USER_INFO_MSG
:
struct _BASE_NLS_SET_USER_INFO_MSG
LCType
:
ULONG
pData
:
USHORT*
DataLength
:
ULONG
_BASE_NLS_GET_USER_INFO_MSG
pData
:
struct _NLS_USER_INFO*
DataLength
:
ULONG
BASE_NLS_GET_USER_INFO_MSG
:
struct _BASE_NLS_GET_USER_INFO_MSG
pData
:
struct _NLS_USER_INFO*
DataLength
:
ULONG
_BASE_NLS_UPDATE_CACHE_COUNT_MSG
Reserved
:
ULONG
BASE_NLS_UPDATE_CACHE_COUNT_MSG
:
struct _BASE_NLS_UPDATE_CACHE_COUNT_MSG
Reserved
:
ULONG
_BASE_UPDATE_VDM_ENTRY_MSG
iTask
:
ULONG
BinaryType
:
ULONG
ConsoleHandle
:
PVOID
VDMProcessHandle
:
PVOID
WaitObjectForParent
:
PVOID
EntryIndex
:
USHORT
VDMCreationState
:
USHORT
BASE_UPDATE_VDM_ENTRY_MSG
:
struct _BASE_UPDATE_VDM_ENTRY_MSG
iTask
:
ULONG
BinaryType
:
ULONG
ConsoleHandle
:
PVOID
VDMProcessHandle
:
PVOID
WaitObjectForParent
:
PVOID
EntryIndex
:
USHORT
VDMCreationState
:
USHORT
_BASE_GET_NEXT_VDM_COMMAND_MSG
iTask
:
ULONG
ConsoleHandle
:
PVOID
WaitObjectForVDM
:
PVOID
StdIn
:
PVOID
StdOut
:
PVOID
StdErr
:
PVOID
CodePage
:
ULONG
dwCreationFlags
:
ULONG
ExitCode
:
ULONG
CmdLine
:
PCHAR
AppName
:
PCHAR
PifFile
:
PCHAR
CurDirectory
:
PCHAR
Env
:
PCHAR
EnvLen
:
ULONG
StartupInfo
:
struct _STARTUPINFOA*
Desktop
:
PCHAR
DesktopLen
:
ULONG
Title
:
PCHAR
TitleLen
:
ULONG
Reserved
:
PCHAR
ReservedLen
:
ULONG
CurrentDrive
:
USHORT
CmdLen
:
USHORT
AppLen
:
USHORT
PifLen
:
USHORT
CurDirectoryLen
:
USHORT
VDMState
:
USHORT
fComingFromBat
:
UCHAR
BASE_GET_NEXT_VDM_COMMAND_MSG
:
struct _BASE_GET_NEXT_VDM_COMMAND_MSG
iTask
:
ULONG
ConsoleHandle
:
PVOID
WaitObjectForVDM
:
PVOID
StdIn
:
PVOID
StdOut
:
PVOID
StdErr
:
PVOID
CodePage
:
ULONG
dwCreationFlags
:
ULONG
ExitCode
:
ULONG
CmdLine
:
PCHAR
AppName
:
PCHAR
PifFile
:
PCHAR
CurDirectory
:
PCHAR
Env
:
PCHAR
EnvLen
:
ULONG
StartupInfo
:
struct _STARTUPINFOA*
Desktop
:
PCHAR
DesktopLen
:
ULONG
Title
:
PCHAR
TitleLen
:
ULONG
Reserved
:
PCHAR
ReservedLen
:
ULONG
CurrentDrive
:
USHORT
CmdLen
:
USHORT
AppLen
:
USHORT
PifLen
:
USHORT
CurDirectoryLen
:
USHORT
VDMState
:
USHORT
fComingFromBat
:
UCHAR
_BASE_SHUTDOWNPARAM_MSG
ShutdownLevel
:
ULONG
ShutdownFlags
:
ULONG
BASE_SHUTDOWNPARAM_MSG
:
struct _BASE_SHUTDOWNPARAM_MSG
ShutdownLevel
:
ULONG
ShutdownFlags
:
ULONG
_BASE_GETTEMPFILE_MSG
uUnique
:
ULONG
BASE_GETTEMPFILE_MSG
:
struct _BASE_GETTEMPFILE_MSG
uUnique
:
ULONG
_BASE_DEBUGPROCESS_MSG
dwProcessId
:
ULONG
DebuggerClientId
:
CLIENT_ID
AttachCompleteRoutine
:
PVOID
BASE_DEBUGPROCESS_MSG
:
struct _BASE_DEBUGPROCESS_MSG
dwProcessId
:
ULONG
DebuggerClientId
:
CLIENT_ID
AttachCompleteRoutine
:
PVOID
_BASE_CHECKVDM_MSG
iTask
:
ULONG
ConsoleHandle
:
HANDLE
BinaryType
:
ULONG
WaitObjectForParent
:
HANDLE
StdIn
:
HANDLE
StdOut
:
HANDLE
StdErr
:
HANDLE
CodePage
:
ULONG
dwCreationFlags
:
ULONG
CmdLine
:
PCHAR
AppName
:
PCHAR
PifFile
:
PCHAR
CurDirectory
:
PCHAR
Env
:
PCHAR
EnvLen
:
ULONG
StartupInfo
:
LPSTARTUPINFOA
Desktop
:
PCHAR
DesktopLen
:
ULONG
Title
:
PCHAR
TitleLen
:
ULONG
Reserved
:
PCHAR
ReservedLen
:
ULONG
CmdLen
:
USHORT
AppLen
:
USHORT
PifLen
:
USHORT
CurDirectoryLen
:
USHORT
CurDrive
:
USHORT
VDMState
:
USHORT
UserLuid
:
struct _LUID*
BASE_CHECKVDM_MSG
:
struct _BASE_CHECKVDM_MSG
iTask
:
ULONG
ConsoleHandle
:
HANDLE
BinaryType
:
ULONG
WaitObjectForParent
:
HANDLE
StdIn
:
HANDLE
StdOut
:
HANDLE
StdErr
:
HANDLE
CodePage
:
ULONG
dwCreationFlags
:
ULONG
CmdLine
:
PCHAR
AppName
:
PCHAR
PifFile
:
PCHAR
CurDirectory
:
PCHAR
Env
:
PCHAR
EnvLen
:
ULONG
StartupInfo
:
LPSTARTUPINFOA
Desktop
:
PCHAR
DesktopLen
:
ULONG
Title
:
PCHAR
TitleLen
:
ULONG
Reserved
:
PCHAR
ReservedLen
:
ULONG
CmdLen
:
USHORT
AppLen
:
USHORT
PifLen
:
USHORT
CurDirectoryLen
:
USHORT
CurDrive
:
USHORT
VDMState
:
USHORT
UserLuid
:
struct _LUID*
_BASE_GET_VDM_EXIT_CODE_MSG
ConsoleHandle
:
PVOID
hParent
:
PVOID
ExitCode
:
ULONG
BASE_GET_VDM_EXIT_CODE_MSG
:
struct _BASE_GET_VDM_EXIT_CODE_MSG
ConsoleHandle
:
PVOID
hParent
:
PVOID
ExitCode
:
ULONG
_BASE_DEFERREDCREATEPROCESS_MSG
ClientId
:
struct _CLIENT_ID*
NtUserFlags
:
ULONG
BASE_DEFERREDCREATEPROCESS_MSG
:
struct _BASE_DEFERREDCREATEPROCESS_MSG
ClientId
:
struct _CLIENT_ID*
NtUserFlags
:
ULONG
_BASE_EXITPROCESS_MSG
uExitCode
:
NTSTATUS
BASE_EXITPROCESS_MSG
:
struct _BASE_EXITPROCESS_MSG
uExitCode
:
NTSTATUS
_BASE_GET_SET_VDM_CUR_DIRS_MSG
ConsoleHandle
:
PVOID
lpszzCurDirs
:
PCHAR
cchCurDirs
:
ULONG
BASE_GET_SET_VDM_CUR_DIRS_MSG
:
struct _BASE_GET_SET_VDM_CUR_DIRS_MSG
ConsoleHandle
:
PVOID
lpszzCurDirs
:
PCHAR
cchCurDirs
:
ULONG
_BASE_SET_REENTER_COUNT
ConsoleHandle
:
PVOID
fIncDec
:
ULONG
BASE_SET_REENTER_COUNT
:
struct _BASE_SET_REENTER_COUNT
ConsoleHandle
:
PVOID
fIncDec
:
ULONG
(anonymous)
ACTCTX_RUN_LEVEL_UNSPECIFIED
ACTCTX_RUN_LEVEL_AS_INVOKER
ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE
ACTCTX_RUN_LEVEL_REQUIRE_ADMIN
ACTCTX_RUN_LEVEL_NUMBERS
ACTCTX_REQUESTED_RUN_LEVEL
:
enum
ACTCTX_RUN_LEVEL_UNSPECIFIED
ACTCTX_RUN_LEVEL_AS_INVOKER
ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE
ACTCTX_RUN_LEVEL_REQUIRE_ADMIN
ACTCTX_RUN_LEVEL_NUMBERS
_ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
ulFlags
:
DWORD
RunLevel
:
ACTCTX_REQUESTED_RUN_LEVEL
UiAccess
:
DWORD
ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
:
struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
ulFlags
:
DWORD
RunLevel
:
ACTCTX_REQUESTED_RUN_LEVEL
UiAccess
:
DWORD
PCACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
:
const struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION*
_BASE_SXS_CREATEPROCESS_MSG
Flags
:
ULONG
ProcessParameterFlags
:
ULONG
(anonymous)
BASE_SXS_CREATEPROCESS_MSG
:
struct _BASE_SXS_CREATEPROCESS_MSG
Flags
:
ULONG
ProcessParameterFlags
:
ULONG
(anonymous)
_BASE_CREATEPROCESS_MSG
ProcessHandle
:
PVOID
ThreadHandle
:
PVOID
ClientId
:
CLIENT_ID
CreationFlags
:
ULONG
VdmBinaryType
:
ULONG
VdmTask
:
ULONG
hVDM
:
PVOID
Sxs
:
struct _BASE_SXS_CREATEPROCESS_MSG
PebAddressNative
:
ULONGLONG
PebAddressWow64
:
ULONG
ProcessorArchitecture
:
USHORT
BASE_CREATEPROCESS_MSG
:
struct _BASE_CREATEPROCESS_MSG
ProcessHandle
:
PVOID
ThreadHandle
:
PVOID
ClientId
:
CLIENT_ID
CreationFlags
:
ULONG
VdmBinaryType
:
ULONG
VdmTask
:
ULONG
hVDM
:
PVOID
Sxs
:
struct _BASE_SXS_CREATEPROCESS_MSG
PebAddressNative
:
ULONGLONG
PebAddressWow64
:
ULONG
ProcessorArchitecture
:
USHORT
_BASE_CREATETHREAD_MSG
ThreadHandle
:
PVOID
ClientId
:
CLIENT_ID
BASE_CREATETHREAD_MSG
:
struct _BASE_CREATETHREAD_MSG
ThreadHandle
:
PVOID
ClientId
:
CLIENT_ID
_BASE_MSG_SXS_HANDLES
File
:
PVOID
Process
:
PVOID
Section
:
PVOID
ViewBase
:
ULONGLONG
BASE_MSG_SXS_HANDLES
:
struct _BASE_MSG_SXS_HANDLES
File
:
PVOID
Process
:
PVOID
Section
:
PVOID
ViewBase
:
ULONGLONG
_BASE_EXIT_VDM_MSG
ConsoleHandle
:
PVOID
iWowTask
:
ULONG
WaitObjectForVDM
:
PVOID
BASE_EXIT_VDM_MSG
:
struct _BASE_EXIT_VDM_MSG
ConsoleHandle
:
PVOID
iWowTask
:
ULONG
WaitObjectForVDM
:
PVOID
_BASE_IS_FIRST_VDM_MSG
FirstVDM
:
__int32
BASE_IS_FIRST_VDM_MSG
:
struct _BASE_IS_FIRST_VDM_MSG
FirstVDM
:
__int32
_BASE_SET_REENTER_COUNT_MSG
ConsoleHandle
:
PVOID
fIncDec
:
ULONG
BASE_SET_REENTER_COUNT_MSG
:
struct _BASE_SET_REENTER_COUNT_MSG
ConsoleHandle
:
PVOID
fIncDec
:
ULONG
_BASE_BAT_NOTIFICATION_MSG
ConsoleHandle
:
PVOID
fBeginEnd
:
ULONG
BASE_BAT_NOTIFICATION_MSG
:
struct _BASE_BAT_NOTIFICATION_MSG
ConsoleHandle
:
PVOID
fBeginEnd
:
ULONG
_BASE_REGISTER_WOWEXEC_MSG
hEventWowExec
:
PVOID
ConsoleHandle
:
PVOID
BASE_REGISTER_WOWEXEC_MSG
:
struct _BASE_REGISTER_WOWEXEC_MSG
hEventWowExec
:
PVOID
ConsoleHandle
:
PVOID
_BASE_REFRESHINIFILEMAPPING_MSG
IniFileName
:
UNICODE_STRING
BASE_REFRESHINIFILEMAPPING_MSG
:
struct _BASE_REFRESHINIFILEMAPPING_MSG
IniFileName
:
UNICODE_STRING
_BASE_SET_TERMSRVCLIENTTIMEZONE
pDTZInfo
:
struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION*
ulDTZInfoSize
:
ULONG
RealBias
:
KSYSTEM_TIME
TimeZoneId
:
ULONG
BASE_SET_TERMSRVCLIENTTIMEZONE
:
struct _BASE_SET_TERMSRVCLIENTTIMEZONE
pDTZInfo
:
struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION*
ulDTZInfoSize
:
ULONG
RealBias
:
KSYSTEM_TIME
TimeZoneId
:
ULONG
_BASE_SET_TERMSRVAPPINSTALLMODE
bState
:
__int32
BASE_SET_TERMSRVAPPINSTALLMODE
:
struct _BASE_SET_TERMSRVAPPINSTALLMODE
bState
:
__int32
_BASE_SOUNDSENTRY_NOTIFICATION_MSG
VideoMode
:
ULONG
BASE_SOUNDSENTRY_NOTIFICATION_MSG
:
struct _BASE_SOUNDSENTRY_NOTIFICATION_MSG
VideoMode
:
ULONG
_BASE_DEFINEDOSDEVICE_MSG
Flags
:
ULONG
DeviceName
:
UNICODE_STRING
TargetPath
:
UNICODE_STRING
BASE_DEFINEDOSDEVICE_MSG
:
struct _BASE_DEFINEDOSDEVICE_MSG
Flags
:
ULONG
DeviceName
:
UNICODE_STRING
TargetPath
:
UNICODE_STRING
_BASE_MSG_SXS_STREAM
FileType
:
UCHAR
PathType
:
UCHAR
HandleType
:
UCHAR
Path
:
UNICODE_STRING
FileHandle
:
PVOID
Handle
:
HANDLE
Size
:
ULONG
BASE_MSG_SXS_STREAM
:
struct _BASE_MSG_SXS_STREAM
FileType
:
UCHAR
PathType
:
UCHAR
HandleType
:
UCHAR
Path
:
UNICODE_STRING
FileHandle
:
PVOID
Handle
:
HANDLE
Size
:
ULONG
_BASE_SXS_CREATE_ACTIVATION_CONTEXT_MSG
Flags
:
ULONG
ProcessorArchitecture
:
USHORT
CultureFallbacks
:
UNICODE_STRING
Manifest
:
struct _BASE_MSG_SXS_STREAM
Policy
:
struct _BASE_MSG_SXS_STREAM
AssemblyDirectory
:
UNICODE_STRING
TextualAssemblyIdentity
:
UNICODE_STRING
ResourceName
:
ULONG
ActivationContextData
:
PVOID
RunLevel
:
struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
AssemblyName
:
UNICODE_STRING
BASE_SXS_CREATE_ACTIVATION_CONTEXT_MSG
:
struct _BASE_SXS_CREATE_ACTIVATION_CONTEXT_MSG
Flags
:
ULONG
ProcessorArchitecture
:
USHORT
CultureFallbacks
:
UNICODE_STRING
Manifest
:
struct _BASE_MSG_SXS_STREAM
Policy
:
struct _BASE_MSG_SXS_STREAM
AssemblyDirectory
:
UNICODE_STRING
TextualAssemblyIdentity
:
UNICODE_STRING
ResourceName
:
ULONG
ActivationContextData
:
PVOID
RunLevel
:
struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION
AssemblyName
:
UNICODE_STRING
_BASE_API_MSG
h
:
PORT_MESSAGE
CaptureBuffer
:
struct _CSR_CAPTURE_HEADER*
ApiNumber
:
CSR_API_NUMBER
ReturnValue
:
ULONG
Reserved
:
ULONG
(anonymous)
BASE_API_MSG
:
struct _BASE_API_MSG
h
:
PORT_MESSAGE
CaptureBuffer
:
struct _CSR_CAPTURE_HEADER*
ApiNumber
:
CSR_API_NUMBER
ReturnValue
:
ULONG
Reserved
:
ULONG
(anonymous)
_BASE_STATIC_SERVER_DATA
WindowsDirectory
:
UNICODE_STRING
WindowsSystemDirectory
:
UNICODE_STRING
NamedObjectDirectory
:
UNICODE_STRING
WindowsMajorVersion
:
USHORT
WindowsMinorVersion
:
USHORT
BuildNumber
:
USHORT
CSDNumber
:
USHORT
RCNumber
:
USHORT
CSDVersion
:
WCHAR[128]
SysInfo
:
SYSTEM_BASIC_INFORMATION
TimeOfDay
:
SYSTEM_TIMEOFDAY_INFORMATION
IniFileMapping
:
struct _INIFILE_MAPPING*
NlsUserInfo
:
NLS_USER_INFO
DefaultSeparateVDM
:
UCHAR
IsWowTaskReady
:
UCHAR
WindowsSys32x86Directory
:
UNICODE_STRING
fTermsrvAppInstallMode
:
UCHAR
tziTermsrvClientTimeZone
:
RTL_DYNAMIC_TIME_ZONE_INFORMATION
ktTermsrvClientBias
:
KSYSTEM_TIME
TermsrvClientTimeZoneId
:
ULONG
LUIDDeviceMapsEnabled
:
UCHAR
TermsrvClientTimeZoneChangeNum
:
ULONG
BASE_STATIC_SERVER_DATA
:
struct _BASE_STATIC_SERVER_DATA
WindowsDirectory
:
UNICODE_STRING
WindowsSystemDirectory
:
UNICODE_STRING
NamedObjectDirectory
:
UNICODE_STRING
WindowsMajorVersion
:
USHORT
WindowsMinorVersion
:
USHORT
BuildNumber
:
USHORT
CSDNumber
:
USHORT
RCNumber
:
USHORT
CSDVersion
:
WCHAR[128]
SysInfo
:
SYSTEM_BASIC_INFORMATION
TimeOfDay
:
SYSTEM_TIMEOFDAY_INFORMATION
IniFileMapping
:
struct _INIFILE_MAPPING*
NlsUserInfo
:
NLS_USER_INFO
DefaultSeparateVDM
:
UCHAR
IsWowTaskReady
:
UCHAR
WindowsSys32x86Directory
:
UNICODE_STRING
fTermsrvAppInstallMode
:
UCHAR
tziTermsrvClientTimeZone
:
RTL_DYNAMIC_TIME_ZONE_INFORMATION
ktTermsrvClientBias
:
KSYSTEM_TIME
TermsrvClientTimeZoneId
:
ULONG
LUIDDeviceMapsEnabled
:
UCHAR
TermsrvClientTimeZoneChangeNum
:
ULONG
_GDI_TEB_BATCH
Offset
:
ULONG
Alignment
:
UCHAR[4]
HDC
:
ULONG_PTR
Buffer
:
ULONG[GDI_BATCH_BUFFER_SIZE]
GDI_TEB_BATCH
:
struct _GDI_TEB_BATCH
Offset
:
ULONG
Alignment
:
UCHAR[4]
HDC
:
ULONG_PTR
Buffer
:
ULONG[GDI_BATCH_BUFFER_SIZE]
_EVENT_TYPE
NotificationEvent
SynchronizationEvent
EVENT_TYPE
:
enum _EVENT_TYPE
NotificationEvent
SynchronizationEvent
_TIMER_TYPE
NotificationTimer
SynchronizationTimer
TIMER_TYPE
:
enum _TIMER_TYPE
NotificationTimer
SynchronizationTimer
_WAIT_TYPE
WaitAll
WaitAny
WAIT_TYPE
:
enum _WAIT_TYPE
WaitAll
WaitAny
PPVOID
:
PVOID*
_ASSEMBLY_STORAGE_MAP_ENTRY
Flags
:
ULONG
DosPath
:
UNICODE_STRING
Handle
:
PVOID
ASSEMBLY_STORAGE_MAP_ENTRY
:
struct _ASSEMBLY_STORAGE_MAP_ENTRY
Flags
:
ULONG
DosPath
:
UNICODE_STRING
Handle
:
PVOID
_ASSEMBLY_STORAGE_MAP
Flags
:
ULONG
AssemblyCount
:
ULONG
AssemblyArray
:
struct _ASSEMBLY_STORAGE_MAP_ENTRY**
ASSEMBLY_STORAGE_MAP
:
struct _ASSEMBLY_STORAGE_MAP
Flags
:
ULONG
AssemblyCount
:
ULONG
AssemblyArray
:
struct _ASSEMBLY_STORAGE_MAP_ENTRY**
_ACTIVATION_CONTEXT_DATA
Magic
:
ULONG
HeaderSize
:
ULONG
FormatVersion
:
ULONG
TotalSize
:
ULONG
DefaultTocOffset
:
ULONG
ExtendedTocOffset
:
ULONG
AssemblyRosterOffset
:
ULONG
Flags
:
ULONG
ACTIVATION_CONTEXT_DATA
:
struct _ACTIVATION_CONTEXT_DATA
Magic
:
ULONG
HeaderSize
:
ULONG
FormatVersion
:
ULONG
TotalSize
:
ULONG
DefaultTocOffset
:
ULONG
ExtendedTocOffset
:
ULONG
AssemblyRosterOffset
:
ULONG
Flags
:
ULONG
_ACTIVATION_CONTEXT
RefCount
:
LONG
Flags
:
ULONG
Links
:
LIST_ENTRY
ActivationContextData
:
struct _ACTIVATION_CONTEXT_DATA*
NotificationRoutine
:
struct _ACTIVATION_CONTEXT*
NotificationContext
:
PVOID
SentNotifications
:
ULONG[8]
DisabledNotifications
:
ULONG[8]
StorageMap
:
struct _ASSEMBLY_STORAGE_MAP
InlineStorageMapEntries
:
struct _ASSEMBLY_STORAGE_MAP_ENTRY*[32]
StackTraceIndex
:
ULONG
StackTraces
:
PVOID[4][4]
ACTIVATION_CONTEXT
:
struct _ACTIVATION_CONTEXT
RefCount
:
LONG
Flags
:
ULONG
Links
:
LIST_ENTRY
ActivationContextData
:
struct _ACTIVATION_CONTEXT_DATA*
NotificationRoutine
:
struct _ACTIVATION_CONTEXT*
NotificationContext
:
PVOID
SentNotifications
:
ULONG[8]
DisabledNotifications
:
ULONG[8]
StorageMap
:
struct _ASSEMBLY_STORAGE_MAP
InlineStorageMapEntries
:
struct _ASSEMBLY_STORAGE_MAP_ENTRY*[32]
StackTraceIndex
:
ULONG
StackTraces
:
PVOID[4][4]
_PEB_FREE_BLOCK
Next
:
struct _PEB_FREE_BLOCK*
Size
:
ULONG
PEB_FREE_BLOCK
:
struct _PEB_FREE_BLOCK
Next
:
struct _PEB_FREE_BLOCK*
Size
:
ULONG
_PEB_LDR_DATA
Length
:
ULONG
Initialized
:
BOOLEAN
SsHandle
:
HANDLE
InLoadOrderModuleList
:
LIST_ENTRY
InMemoryOrderModuleList
:
LIST_ENTRY
InInitializationOrderModuleList
:
LIST_ENTRY
EntryInProgress
:
PVOID
ShutdownInProgress
:
BOOLEAN
ShutdownThreadId
:
HANDLE
PEB_LDR_DATA
:
struct _PEB_LDR_DATA
Length
:
ULONG
Initialized
:
BOOLEAN
SsHandle
:
HANDLE
InLoadOrderModuleList
:
LIST_ENTRY
InMemoryOrderModuleList
:
LIST_ENTRY
InInitializationOrderModuleList
:
LIST_ENTRY
EntryInProgress
:
PVOID
ShutdownInProgress
:
BOOLEAN
ShutdownThreadId
:
HANDLE
_INITIAL_TEB
(anonymous)
StackBase
:
PVOID
StackLimit
:
PVOID
StackAllocationBase
:
PVOID
INITIAL_TEB
:
struct _INITIAL_TEB
(anonymous)
StackBase
:
PVOID
StackLimit
:
PVOID
StackAllocationBase
:
PVOID
_WOW64_PROCESS
Wow64
:
PVOID
WOW64_PROCESS
:
struct _WOW64_PROCESS
Wow64
:
PVOID
_LDR_DLL_LOADED_NOTIFICATION_DATA
Flags
:
ULONG
FullDllName
:
PUNICODE_STRING
BaseDllName
:
PUNICODE_STRING
DllBase
:
PVOID
SizeOfImage
:
ULONG
LDR_DLL_LOADED_NOTIFICATION_DATA
:
struct _LDR_DLL_LOADED_NOTIFICATION_DATA
Flags
:
ULONG
FullDllName
:
PUNICODE_STRING
BaseDllName
:
PUNICODE_STRING
DllBase
:
PVOID
SizeOfImage
:
ULONG
_LDR_DLL_UNLOADED_NOTIFICATION_DATA
Flags
:
ULONG
FullDllName
:
PCUNICODE_STRING
BaseDllName
:
PCUNICODE_STRING
DllBase
:
PVOID
SizeOfImage
:
ULONG
LDR_DLL_UNLOADED_NOTIFICATION_DATA
:
struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA
Flags
:
ULONG
FullDllName
:
PCUNICODE_STRING
BaseDllName
:
PCUNICODE_STRING
DllBase
:
PVOID
SizeOfImage
:
ULONG
_LDR_DLL_NOTIFICATION_DATA
Loaded
:
LDR_DLL_LOADED_NOTIFICATION_DATA
Unloaded
:
LDR_DLL_UNLOADED_NOTIFICATION_DATA
LDR_DLL_NOTIFICATION_DATA
:
union _LDR_DLL_NOTIFICATION_DATA
Loaded
:
LDR_DLL_LOADED_NOTIFICATION_DATA
Unloaded
:
LDR_DLL_UNLOADED_NOTIFICATION_DATA
_RTL_PROCESS_MODULE_INFORMATION
Section
:
HANDLE
MappedBase
:
PVOID
ImageBase
:
PVOID
ImageSize
:
ULONG
Flags
:
ULONG
LoadOrderIndex
:
USHORT
InitOrderIndex
:
USHORT
LoadCount
:
USHORT
OffsetToFileName
:
USHORT
FullPathName
:
UCHAR[256]
RTL_PROCESS_MODULE_INFORMATION
:
struct _RTL_PROCESS_MODULE_INFORMATION
Section
:
HANDLE
MappedBase
:
PVOID
ImageBase
:
PVOID
ImageSize
:
ULONG
Flags
:
ULONG
LoadOrderIndex
:
USHORT
InitOrderIndex
:
USHORT
LoadCount
:
USHORT
OffsetToFileName
:
USHORT
FullPathName
:
UCHAR[256]
_RTL_PROCESS_MODULES
NumberOfModules
:
ULONG
Modules
:
RTL_PROCESS_MODULE_INFORMATION[1]
RTL_PROCESS_MODULES
:
struct _RTL_PROCESS_MODULES
NumberOfModules
:
ULONG
Modules
:
RTL_PROCESS_MODULE_INFORMATION[1]
_RTL_PROCESS_MODULE_INFORMATION_EX
NextOffset
:
USHORT
BaseInfo
:
RTL_PROCESS_MODULE_INFORMATION
ImageChecksum
:
ULONG
TimeDateStamp
:
ULONG
DefaultBase
:
PVOID
RTL_PROCESS_MODULE_INFORMATION_EX
:
struct _RTL_PROCESS_MODULE_INFORMATION_EX
NextOffset
:
USHORT
BaseInfo
:
RTL_PROCESS_MODULE_INFORMATION
ImageChecksum
:
ULONG
TimeDateStamp
:
ULONG
DefaultBase
:
PVOID
LIST_ENTRY_EX
unk1
:
BYTE[8]
base
:
HANDLE
unk2
:
BYTE[20]
name
:
WCHAR*
_LDR_DATA_TABLE_ENTRY
InLoadOrderLinks
:
LIST_ENTRY
InMemoryOrderLinks
:
LIST_ENTRY
InInitializationOrderLinks
:
LIST_ENTRY
DllBase
:
PVOID
EntryPoint
:
PVOID
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING
BaseDllName
:
UNICODE_STRING
Flags
:
ULONG
LoadCount
:
USHORT
TlsIndex
:
USHORT
(anonymous)
(anonymous)
EntryPointActivationContext
:
PVOID
PatchInformation
:
PVOID
ForwarderLinks
:
LIST_ENTRY
ServiceTagLinks
:
LIST_ENTRY
StaticLinks
:
LIST_ENTRY
ContextInformation
:
PVOID
OriginalBase
:
ULONG_PTR
LoadTime
:
LARGE_INTEGER
LDR_DATA_TABLE_ENTRY
:
struct _LDR_DATA_TABLE_ENTRY
InLoadOrderLinks
:
LIST_ENTRY
InMemoryOrderLinks
:
LIST_ENTRY
InInitializationOrderLinks
:
LIST_ENTRY
DllBase
:
PVOID
EntryPoint
:
PVOID
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING
BaseDllName
:
UNICODE_STRING
Flags
:
ULONG
LoadCount
:
USHORT
TlsIndex
:
USHORT
(anonymous)
(anonymous)
EntryPointActivationContext
:
PVOID
PatchInformation
:
PVOID
ForwarderLinks
:
LIST_ENTRY
ServiceTagLinks
:
LIST_ENTRY
StaticLinks
:
LIST_ENTRY
ContextInformation
:
PVOID
OriginalBase
:
ULONG_PTR
LoadTime
:
LARGE_INTEGER
PCLDR_DATA_TABLE_ENTRY
:
const struct _LDR_DATA_TABLE_ENTRY*
LDR_RELOCATE_IMAGE_RETURN_TYPE
:
NTSTATUS
_RTL_RELATIVE_NAME
RelativeName
:
STRING
ContainingDirectory
:
HANDLE
RTL_RELATIVE_NAME
:
struct _RTL_RELATIVE_NAME
RelativeName
:
STRING
ContainingDirectory
:
HANDLE
PRTLP_CURDIR_REF
:
struct _RTLP_CURDIR_REF*
_RTL_RELATIVE_NAME_U
RelativeName
:
UNICODE_STRING
ContainingDirectory
:
HANDLE
CurDirRef
:
PRTLP_CURDIR_REF
RTL_RELATIVE_NAME_U
:
struct _RTL_RELATIVE_NAME_U
RelativeName
:
UNICODE_STRING
ContainingDirectory
:
HANDLE
CurDirRef
:
PRTLP_CURDIR_REF
_RTL_PATH_TYPE
RtlPathTypeUnknown
RtlPathTypeUncAbsolute
RtlPathTypeDriveAbsolute
RtlPathTypeDriveRelative
RtlPathTypeRooted
RtlPathTypeRelative
RtlPathTypeLocalDevice
RtlPathTypeRootLocalDevice
RTL_PATH_TYPE
:
enum _RTL_PATH_TYPE
RtlPathTypeUnknown
RtlPathTypeUncAbsolute
RtlPathTypeDriveAbsolute
RtlPathTypeDriveRelative
RtlPathTypeRooted
RtlPathTypeRelative
RtlPathTypeLocalDevice
RtlPathTypeRootLocalDevice
_PEB
InheritedAddressSpace
:
BOOLEAN
ReadImageFileExecOptions
:
BOOLEAN
BeingDebugged
:
BOOLEAN
(anonymous)
Mutant
:
HANDLE
ImageBaseAddress
:
PVOID
Ldr
:
PPEB_LDR_DATA
ProcessParameters
:
PRTL_USER_PROCESS_PARAMETERS
SubSystemData
:
PVOID
ProcessHeap
:
PVOID
FastPebLock
:
PRTL_CRITICAL_SECTION
AtlThunkSListPtr
:
PVOID
IFEOKey
:
PVOID
(anonymous)
(anonymous)
SystemReserved
:
ULONG[1]
AtlThunkSListPtr32
:
ULONG
ApiSetMap
:
PVOID
TlsExpansionCounter
:
ULONG
TlsBitmap
:
PVOID
TlsBitmapBits
:
ULONG[2]
ReadOnlySharedMemoryBase
:
PVOID
HotpatchInformation
:
PVOID
ReadOnlyStaticServerData
:
PPVOID
AnsiCodePageData
:
PVOID
OemCodePageData
:
PVOID
UnicodeCaseTableData
:
PVOID
NumberOfProcessors
:
ULONG
NtGlobalFlag
:
ULONG
CriticalSectionTimeout
:
LARGE_INTEGER
HeapSegmentReserve
:
SIZE_T
HeapSegmentCommit
:
SIZE_T
HeapDeCommitTotalFreeThreshold
:
SIZE_T
HeapDeCommitFreeBlockThreshold
:
SIZE_T
NumberOfHeaps
:
ULONG
MaximumNumberOfHeaps
:
ULONG
ProcessHeaps
:
PPVOID
GdiSharedHandleTable
:
PVOID
ProcessStarterHelper
:
PVOID
GdiDCAttributeList
:
ULONG
LoaderLock
:
PRTL_CRITICAL_SECTION
OSMajorVersion
:
ULONG
OSMinorVersion
:
ULONG
OSBuildNumber
:
USHORT
OSCSDVersion
:
USHORT
OSPlatformId
:
ULONG
ImageSubsystem
:
ULONG
ImageSubsystemMajorVersion
:
ULONG
ImageSubsystemMinorVersion
:
ULONG
ImageProcessAffinityMask
:
ULONG_PTR
GdiHandleBuffer
:
GDI_HANDLE_BUFFER
PostProcessInitRoutine
:
PVOID
TlsExpansionBitmap
:
PVOID
TlsExpansionBitmapBits
:
ULONG[32]
SessionId
:
ULONG
AppCompatFlags
:
ULARGE_INTEGER
AppCompatFlagsUser
:
ULARGE_INTEGER
pShimData
:
PVOID
AppCompatInfo
:
PVOID
CSDVersion
:
UNICODE_STRING
ActivationContextData
:
PVOID
ProcessAssemblyStorageMap
:
PVOID
SystemDefaultActivationContextData
:
PVOID
SystemAssemblyStorageMap
:
PVOID
MinimumStackCommit
:
SIZE_T
FlsCallback
:
PPVOID
FlsListHead
:
LIST_ENTRY
FlsBitmap
:
PVOID
FlsBitmapBits
:
ULONG[FLS_MAXIMUM_AVAILABLE / (sizeof(ULONG) * 8)]
FlsHighIndex
:
ULONG
WerRegistrationData
:
PVOID
WerShipAssertPtr
:
PVOID
pContextData
:
PVOID
pImageHeaderHash
:
PVOID
(anonymous)
PEB
:
struct _PEB
InheritedAddressSpace
:
BOOLEAN
ReadImageFileExecOptions
:
BOOLEAN
BeingDebugged
:
BOOLEAN
(anonymous)
Mutant
:
HANDLE
ImageBaseAddress
:
PVOID
Ldr
:
PPEB_LDR_DATA
ProcessParameters
:
PRTL_USER_PROCESS_PARAMETERS
SubSystemData
:
PVOID
ProcessHeap
:
PVOID
FastPebLock
:
PRTL_CRITICAL_SECTION
AtlThunkSListPtr
:
PVOID
IFEOKey
:
PVOID
(anonymous)
(anonymous)
SystemReserved
:
ULONG[1]
AtlThunkSListPtr32
:
ULONG
ApiSetMap
:
PVOID
TlsExpansionCounter
:
ULONG
TlsBitmap
:
PVOID
TlsBitmapBits
:
ULONG[2]
ReadOnlySharedMemoryBase
:
PVOID
HotpatchInformation
:
PVOID
ReadOnlyStaticServerData
:
PPVOID
AnsiCodePageData
:
PVOID
OemCodePageData
:
PVOID
UnicodeCaseTableData
:
PVOID
NumberOfProcessors
:
ULONG
NtGlobalFlag
:
ULONG
CriticalSectionTimeout
:
LARGE_INTEGER
HeapSegmentReserve
:
SIZE_T
HeapSegmentCommit
:
SIZE_T
HeapDeCommitTotalFreeThreshold
:
SIZE_T
HeapDeCommitFreeBlockThreshold
:
SIZE_T
NumberOfHeaps
:
ULONG
MaximumNumberOfHeaps
:
ULONG
ProcessHeaps
:
PPVOID
GdiSharedHandleTable
:
PVOID
ProcessStarterHelper
:
PVOID
GdiDCAttributeList
:
ULONG
LoaderLock
:
PRTL_CRITICAL_SECTION
OSMajorVersion
:
ULONG
OSMinorVersion
:
ULONG
OSBuildNumber
:
USHORT
OSCSDVersion
:
USHORT
OSPlatformId
:
ULONG
ImageSubsystem
:
ULONG
ImageSubsystemMajorVersion
:
ULONG
ImageSubsystemMinorVersion
:
ULONG
ImageProcessAffinityMask
:
ULONG_PTR
GdiHandleBuffer
:
GDI_HANDLE_BUFFER
PostProcessInitRoutine
:
PVOID
TlsExpansionBitmap
:
PVOID
TlsExpansionBitmapBits
:
ULONG[32]
SessionId
:
ULONG
AppCompatFlags
:
ULARGE_INTEGER
AppCompatFlagsUser
:
ULARGE_INTEGER
pShimData
:
PVOID
AppCompatInfo
:
PVOID
CSDVersion
:
UNICODE_STRING
ActivationContextData
:
PVOID
ProcessAssemblyStorageMap
:
PVOID
SystemDefaultActivationContextData
:
PVOID
SystemAssemblyStorageMap
:
PVOID
MinimumStackCommit
:
SIZE_T
FlsCallback
:
PPVOID
FlsListHead
:
LIST_ENTRY
FlsBitmap
:
PVOID
FlsBitmapBits
:
ULONG[FLS_MAXIMUM_AVAILABLE / (sizeof(ULONG) * 8)]
FlsHighIndex
:
ULONG
WerRegistrationData
:
PVOID
WerShipAssertPtr
:
PVOID
pContextData
:
PVOID
pImageHeaderHash
:
PVOID
(anonymous)
_RTL_ACTIVATION_CONTEXT_STACK_FRAME
Previous
:
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME*
ActivationContext
:
struct _ACTIVATION_CONTEXT*
Flags
:
ULONG
RTL_ACTIVATION_CONTEXT_STACK_FRAME
:
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME
Previous
:
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME*
ActivationContext
:
struct _ACTIVATION_CONTEXT*
Flags
:
ULONG
_ACTIVATION_CONTEXT_STACK
ActiveFrame
:
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME*
FrameListCache
:
struct _LIST_ENTRY
Flags
:
ULONG
NextCookieSequenceNumber
:
ULONG
StackId
:
ULONG
ACTIVATION_CONTEXT_STACK
:
struct _ACTIVATION_CONTEXT_STACK
ActiveFrame
:
struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME*
FrameListCache
:
struct _LIST_ENTRY
Flags
:
ULONG
NextCookieSequenceNumber
:
ULONG
StackId
:
ULONG
PCACTIVATION_CONTEXT_STACK
:
const ACTIVATION_CONTEXT_STACK*
_TEB_ACTIVE_FRAME_CONTEXT
Flags
:
ULONG
FrameName
:
PSTR
TEB_ACTIVE_FRAME_CONTEXT
:
struct _TEB_ACTIVE_FRAME_CONTEXT
Flags
:
ULONG
FrameName
:
PSTR
PCTEB_ACTIVE_FRAME_CONTEXT
:
const TEB_ACTIVE_FRAME_CONTEXT*
_TEB_ACTIVE_FRAME_CONTEXT_EX
BasicContext
:
TEB_ACTIVE_FRAME_CONTEXT
SourceLocation
:
PCSTR
TEB_ACTIVE_FRAME_CONTEXT_EX
:
struct _TEB_ACTIVE_FRAME_CONTEXT_EX
BasicContext
:
TEB_ACTIVE_FRAME_CONTEXT
SourceLocation
:
PCSTR
PCTEB_ACTIVE_FRAME_CONTEXT_EX
:
const TEB_ACTIVE_FRAME_CONTEXT_EX*
_TEB_ACTIVE_FRAME
Flags
:
ULONG
Previous
:
struct _TEB_ACTIVE_FRAME*
Context
:
PTEB_ACTIVE_FRAME_CONTEXT
TEB_ACTIVE_FRAME
:
struct _TEB_ACTIVE_FRAME
Flags
:
ULONG
Previous
:
struct _TEB_ACTIVE_FRAME*
Context
:
PTEB_ACTIVE_FRAME_CONTEXT
PCTEB_ACTIVE_FRAME
:
const TEB_ACTIVE_FRAME*
_TEB_ACTIVE_FRAME_EX
BasicFrame
:
TEB_ACTIVE_FRAME
ExtensionIdentifier
:
PVOID
TEB_ACTIVE_FRAME_EX
:
struct _TEB_ACTIVE_FRAME_EX
BasicFrame
:
TEB_ACTIVE_FRAME
ExtensionIdentifier
:
PVOID
PCTEB_ACTIVE_FRAME_EX
:
const TEB_ACTIVE_FRAME_EX*
_TEB
NtTib
:
NT_TIB
EnvironmentPointer
:
PVOID
ClientId
:
CLIENT_ID
ActiveRpcHandle
:
PVOID
ThreadLocalStoragePointer
:
PVOID
ProcessEnvironmentBlock
:
PPEB
LastErrorValue
:
ULONG
CountOfOwnedCriticalSections
:
ULONG
CsrClientThread
:
PVOID
Win32ThreadInfo
:
PVOID
User32Reserved
:
ULONG[26]
UserReserved
:
ULONG[5]
WOW32Reserved
:
PVOID
CurrentLocale
:
LCID
FpSoftwareStatusRegister
:
ULONG
SystemReserved1
:
PVOID[54]
ExceptionCode
:
NTSTATUS
ActivationContextStackPointer
:
PVOID
SpareBytes
:
UCHAR[36]
TxFsContext
:
ULONG
GdiTebBatch
:
GDI_TEB_BATCH
RealClientId
:
CLIENT_ID
GdiCachedProcessHandle
:
HANDLE
GdiClientPID
:
ULONG
GdiClientTID
:
ULONG
GdiThreadLocalInfo
:
PVOID
Win32ClientInfo
:
ULONG_PTR[62]
glDispatchTable
:
PVOID[233]
glReserved1
:
ULONG_PTR[29]
glReserved2
:
PVOID
glSectionInfo
:
PVOID
glSection
:
PVOID
glTable
:
PVOID
glCurrentRC
:
PVOID
glContext
:
PVOID
LastStatusValue
:
NTSTATUS
StaticUnicodeString
:
UNICODE_STRING
StaticUnicodeBuffer
:
WCHAR[261]
DeallocationStack
:
PVOID
TlsSlots
:
PVOID[64]
TlsLinks
:
LIST_ENTRY
Vdm
:
PVOID
ReservedForNtRpc
:
PVOID
DbgSsReserved
:
PVOID[2]
HardErrorMode
:
ULONG
Instrumentation
:
PVOID[9]
ActivityId
:
GUID
SubProcessTag
:
PVOID
EtwLocalData
:
PVOID
EtwTraceData
:
PVOID
WinSockData
:
PVOID
GdiBatchCount
:
ULONG
(anonymous)
GuaranteedStackBytes
:
ULONG
ReservedForPerf
:
PVOID
ReservedForOle
:
PVOID
WaitingOnLoaderLock
:
ULONG
SavedPriorityState
:
PVOID
SoftPatchPtr1
:
ULONG_PTR
ThreadPoolData
:
PVOID
TlsExpansionSlots
:
PPVOID
MuiGeneration
:
ULONG
IsImpersonating
:
ULONG
NlsCache
:
PVOID
pShimData
:
PVOID
HeapVirtualAffinity
:
ULONG
CurrentTransactionHandle
:
HANDLE
ActiveFrame
:
PTEB_ACTIVE_FRAME
FlsData
:
PVOID
PreferredLanguages
:
PVOID
UserPrefLanguages
:
PVOID
MergedPrefLanguages
:
PVOID
MuiImpersonation
:
ULONG
(anonymous)
(anonymous)
TxnScopeEnterCallback
:
PVOID
TxnScopeExitCallback
:
PVOID
TxnScopeContext
:
PVOID
LockCount
:
ULONG
SpareUlong0
:
ULONG
ResourceRetValue
:
PVOID
TEB
:
struct _TEB
NtTib
:
NT_TIB
EnvironmentPointer
:
PVOID
ClientId
:
CLIENT_ID
ActiveRpcHandle
:
PVOID
ThreadLocalStoragePointer
:
PVOID
ProcessEnvironmentBlock
:
PPEB
LastErrorValue
:
ULONG
CountOfOwnedCriticalSections
:
ULONG
CsrClientThread
:
PVOID
Win32ThreadInfo
:
PVOID
User32Reserved
:
ULONG[26]
UserReserved
:
ULONG[5]
WOW32Reserved
:
PVOID
CurrentLocale
:
LCID
FpSoftwareStatusRegister
:
ULONG
SystemReserved1
:
PVOID[54]
ExceptionCode
:
NTSTATUS
ActivationContextStackPointer
:
PVOID
SpareBytes
:
UCHAR[36]
TxFsContext
:
ULONG
GdiTebBatch
:
GDI_TEB_BATCH
RealClientId
:
CLIENT_ID
GdiCachedProcessHandle
:
HANDLE
GdiClientPID
:
ULONG
GdiClientTID
:
ULONG
GdiThreadLocalInfo
:
PVOID
Win32ClientInfo
:
ULONG_PTR[62]
glDispatchTable
:
PVOID[233]
glReserved1
:
ULONG_PTR[29]
glReserved2
:
PVOID
glSectionInfo
:
PVOID
glSection
:
PVOID
glTable
:
PVOID
glCurrentRC
:
PVOID
glContext
:
PVOID
LastStatusValue
:
NTSTATUS
StaticUnicodeString
:
UNICODE_STRING
StaticUnicodeBuffer
:
WCHAR[261]
DeallocationStack
:
PVOID
TlsSlots
:
PVOID[64]
TlsLinks
:
LIST_ENTRY
Vdm
:
PVOID
ReservedForNtRpc
:
PVOID
DbgSsReserved
:
PVOID[2]
HardErrorMode
:
ULONG
Instrumentation
:
PVOID[9]
ActivityId
:
GUID
SubProcessTag
:
PVOID
EtwLocalData
:
PVOID
EtwTraceData
:
PVOID
WinSockData
:
PVOID
GdiBatchCount
:
ULONG
(anonymous)
GuaranteedStackBytes
:
ULONG
ReservedForPerf
:
PVOID
ReservedForOle
:
PVOID
WaitingOnLoaderLock
:
ULONG
SavedPriorityState
:
PVOID
SoftPatchPtr1
:
ULONG_PTR
ThreadPoolData
:
PVOID
TlsExpansionSlots
:
PPVOID
MuiGeneration
:
ULONG
IsImpersonating
:
ULONG
NlsCache
:
PVOID
pShimData
:
PVOID
HeapVirtualAffinity
:
ULONG
CurrentTransactionHandle
:
HANDLE
ActiveFrame
:
PTEB_ACTIVE_FRAME
FlsData
:
PVOID
PreferredLanguages
:
PVOID
UserPrefLanguages
:
PVOID
MergedPrefLanguages
:
PVOID
MuiImpersonation
:
ULONG
(anonymous)
(anonymous)
TxnScopeEnterCallback
:
PVOID
TxnScopeExitCallback
:
PVOID
TxnScopeContext
:
PVOID
LockCount
:
ULONG
SpareUlong0
:
ULONG
ResourceRetValue
:
PVOID
NtCurrentPeb
(
)
{...}
:
__inline struct _PEB*
_THREAD_BASIC_INFORMATION
ExitStatus
:
NTSTATUS
TebBaseAddress
:
PTEB
ClientId
:
CLIENT_ID
AffinityMask
:
KAFFINITY
Priority
:
KPRIORITY
BasePriority
:
KPRIORITY
THREAD_BASIC_INFORMATION
:
struct _THREAD_BASIC_INFORMATION
ExitStatus
:
NTSTATUS
TebBaseAddress
:
PTEB
ClientId
:
CLIENT_ID
AffinityMask
:
KAFFINITY
Priority
:
KPRIORITY
BasePriority
:
KPRIORITY
_PROCESS_DEVICEMAP_INFORMATION
(anonymous)
PROCESS_DEVICEMAP_INFORMATION
:
struct _PROCESS_DEVICEMAP_INFORMATION
(anonymous)
_PROCESS_DEVICEMAP_INFORMATION_EX
(anonymous)
Flags
:
ULONG
PROCESS_DEVICEMAP_INFORMATION_EX
:
struct _PROCESS_DEVICEMAP_INFORMATION_EX
(anonymous)
Flags
:
ULONG
_PROCESS_BASIC_INFORMATION
ExitStatus
:
NTSTATUS
PebBaseAddress
:
PPEB
AffinityMask
:
ULONG_PTR
BasePriority
:
KPRIORITY
UniqueProcessId
:
ULONG_PTR
InheritedFromUniqueProcessId
:
ULONG_PTR
PROCESS_BASIC_INFORMATION
:
struct _PROCESS_BASIC_INFORMATION
ExitStatus
:
NTSTATUS
PebBaseAddress
:
PPEB
AffinityMask
:
ULONG_PTR
BasePriority
:
KPRIORITY
UniqueProcessId
:
ULONG_PTR
InheritedFromUniqueProcessId
:
ULONG_PTR
PPROCESS_BASIC_INFORMATION
:
PROCESS_BASIC_INFORMATION*
_PROCESS_EXTENDED_BASIC_INFORMATION
Size
:
SIZE_T
BasicInfo
:
PROCESS_BASIC_INFORMATION
(anonymous)
PROCESS_EXTENDED_BASIC_INFORMATION
:
struct _PROCESS_EXTENDED_BASIC_INFORMATION
Size
:
SIZE_T
BasicInfo
:
PROCESS_BASIC_INFORMATION
(anonymous)
_RTL_HEAP_ENTRY
Size
:
SIZE_T
Flags
:
USHORT
AllocatorBackTraceIndex
:
USHORT
(anonymous)
RTL_HEAP_ENTRY
:
struct _RTL_HEAP_ENTRY
Size
:
SIZE_T
Flags
:
USHORT
AllocatorBackTraceIndex
:
USHORT
(anonymous)
_RTL_HEAP_TAG
NumberOfAllocations
:
ULONG
NumberOfFrees
:
ULONG
BytesAllocated
:
SIZE_T
TagIndex
:
USHORT
CreatorBackTraceIndex
:
USHORT
TagName
:
WCHAR[ 24 ]
RTL_HEAP_TAG
:
struct _RTL_HEAP_TAG
NumberOfAllocations
:
ULONG
NumberOfFrees
:
ULONG
BytesAllocated
:
SIZE_T
TagIndex
:
USHORT
CreatorBackTraceIndex
:
USHORT
TagName
:
WCHAR[ 24 ]
_RTL_HEAP_INFORMATION
BaseAddress
:
PVOID
Flags
:
ULONG
EntryOverhead
:
USHORT
CreatorBackTraceIndex
:
USHORT
BytesAllocated
:
SIZE_T
BytesCommitted
:
SIZE_T
NumberOfTags
:
ULONG
NumberOfEntries
:
ULONG
NumberOfPseudoTags
:
ULONG
PseudoTagGranularity
:
ULONG
Reserved
:
ULONG[ 5 ]
Tags
:
PRTL_HEAP_TAG
Entries
:
PRTL_HEAP_ENTRY
RTL_HEAP_INFORMATION
:
struct _RTL_HEAP_INFORMATION
BaseAddress
:
PVOID
Flags
:
ULONG
EntryOverhead
:
USHORT
CreatorBackTraceIndex
:
USHORT
BytesAllocated
:
SIZE_T
BytesCommitted
:
SIZE_T
NumberOfTags
:
ULONG
NumberOfEntries
:
ULONG
NumberOfPseudoTags
:
ULONG
PseudoTagGranularity
:
ULONG
Reserved
:
ULONG[ 5 ]
Tags
:
PRTL_HEAP_TAG
Entries
:
PRTL_HEAP_ENTRY
_RTL_PROCESS_HEAPS
NumberOfHeaps
:
ULONG
Heaps
:
RTL_HEAP_INFORMATION[ 1 ]
RTL_PROCESS_HEAPS
:
struct _RTL_PROCESS_HEAPS
NumberOfHeaps
:
ULONG
Heaps
:
RTL_HEAP_INFORMATION[ 1 ]
_RTL_PROCESS_LOCK_INFORMATION
Address
:
PVOID
Type
:
USHORT
CreatorBackTraceIndex
:
USHORT
OwningThread
:
HANDLE
LockCount
:
LONG
ContentionCount
:
ULONG
EntryCount
:
ULONG
RecursionCount
:
LONG
NumberOfWaitingShared
:
ULONG
NumberOfWaitingExclusive
:
ULONG
RTL_PROCESS_LOCK_INFORMATION
:
struct _RTL_PROCESS_LOCK_INFORMATION
Address
:
PVOID
Type
:
USHORT
CreatorBackTraceIndex
:
USHORT
OwningThread
:
HANDLE
LockCount
:
LONG
ContentionCount
:
ULONG
EntryCount
:
ULONG
RecursionCount
:
LONG
NumberOfWaitingShared
:
ULONG
NumberOfWaitingExclusive
:
ULONG
(anonymous)
Unknown
:
ULONG[6]
State
:
ULONG[5]
Count
:
ULONG[2]
Buffer
:
UCHAR[64]
ASHA_CTX
:
struct
Unknown
:
ULONG[6]
State
:
ULONG[5]
Count
:
ULONG[2]
Buffer
:
UCHAR[64]
_EXCEPTION_REGISTRATION_RECORD
Next
:
struct _EXCEPTION_REGISTRATION_RECORD*
Handler
:
PEXCEPTION_ROUTINE
EXCEPTION_REGISTRATION_RECORD
:
struct _EXCEPTION_REGISTRATION_RECORD
Next
:
struct _EXCEPTION_REGISTRATION_RECORD*
Handler
:
PEXCEPTION_ROUTINE
PEXCEPTION_REGISTRATION_RECORD
:
EXCEPTION_REGISTRATION_RECORD*
_NT_PRODUCT_TYPE
NtProductWinNt
NtProductLanManNt
NtProductServer
NT_PRODUCT_TYPE
:
enum _NT_PRODUCT_TYPE
NtProductWinNt
NtProductLanManNt
NtProductServer
_SUITE_TYPE
SmallBusiness
Enterprise
BackOffice
CommunicationServer
TerminalServer
SmallBusinessRestricted
EmbeddedNT
DataCenter
SingleUserTS
Personal
Blade
EmbeddedRestricted
SecurityAppliance
StorageServer
ComputeServer
MaxSuiteType
SUITE_TYPE
:
enum _SUITE_TYPE
SmallBusiness
Enterprise
BackOffice
CommunicationServer
TerminalServer
SmallBusinessRestricted
EmbeddedNT
DataCenter
SingleUserTS
Personal
Blade
EmbeddedRestricted
SecurityAppliance
StorageServer
ComputeServer
MaxSuiteType
_CONTEXT
ContextFlags
:
DWORD
Dr0
:
DWORD
Dr1
:
DWORD
Dr2
:
DWORD
Dr3
:
DWORD
Dr6
:
DWORD
Dr7
:
DWORD
FloatSave
:
FLOATING_SAVE_AREA
SegGs
:
DWORD
SegFs
:
DWORD
SegEs
:
DWORD
SegDs
:
DWORD
Edi
:
DWORD
Esi
:
DWORD
Ebx
:
DWORD
Edx
:
DWORD
Ecx
:
DWORD
Eax
:
DWORD
Ebp
:
DWORD
Eip
:
DWORD
SegCs
:
DWORD
EFlags
:
DWORD
Esp
:
DWORD
SegSs
:
DWORD
ExtendedRegisters
:
BYTE[MAXIMUM_SUPPORTED_EXTENSION]
CONTEXT
:
struct _CONTEXT
ContextFlags
:
DWORD
Dr0
:
DWORD
Dr1
:
DWORD
Dr2
:
DWORD
Dr3
:
DWORD
Dr6
:
DWORD
Dr7
:
DWORD
FloatSave
:
FLOATING_SAVE_AREA
SegGs
:
DWORD
SegFs
:
DWORD
SegEs
:
DWORD
SegDs
:
DWORD
Edi
:
DWORD
Esi
:
DWORD
Ebx
:
DWORD
Edx
:
DWORD
Ecx
:
DWORD
Eax
:
DWORD
Ebp
:
DWORD
Eip
:
DWORD
SegCs
:
DWORD
EFlags
:
DWORD
Esp
:
DWORD
SegSs
:
DWORD
ExtendedRegisters
:
BYTE[MAXIMUM_SUPPORTED_EXTENSION]
_EXCEPTION_RECORD
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
struct _EXCEPTION_RECORD*
ExceptionAddress
:
PVOID
NumberParameters
:
DWORD
ExceptionInformation
:
ULONG_PTR[EXCEPTION_MAXIMUM_PARAMETERS]
EXCEPTION_RECORD
:
struct _EXCEPTION_RECORD
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
struct _EXCEPTION_RECORD*
ExceptionAddress
:
PVOID
NumberParameters
:
DWORD
ExceptionInformation
:
ULONG_PTR[EXCEPTION_MAXIMUM_PARAMETERS]
_EXCEPTION_RECORD32
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
DWORD
ExceptionAddress
:
DWORD
NumberParameters
:
DWORD
ExceptionInformation
:
DWORD[EXCEPTION_MAXIMUM_PARAMETERS]
EXCEPTION_RECORD32
:
struct _EXCEPTION_RECORD32
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
DWORD
ExceptionAddress
:
DWORD
NumberParameters
:
DWORD
ExceptionInformation
:
DWORD[EXCEPTION_MAXIMUM_PARAMETERS]
_EXCEPTION_RECORD64
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
DWORD64
ExceptionAddress
:
DWORD64
NumberParameters
:
DWORD
__unusedAlignment
:
DWORD
ExceptionInformation
:
DWORD64[EXCEPTION_MAXIMUM_PARAMETERS]
EXCEPTION_RECORD64
:
struct _EXCEPTION_RECORD64
ExceptionCode
:
DWORD
ExceptionFlags
:
DWORD
ExceptionRecord
:
DWORD64
ExceptionAddress
:
DWORD64
NumberParameters
:
DWORD
__unusedAlignment
:
DWORD
ExceptionInformation
:
DWORD64[EXCEPTION_MAXIMUM_PARAMETERS]
_EXCEPTION_POINTERS
ExceptionRecord
:
PEXCEPTION_RECORD
ContextRecord
:
PCONTEXT
EXCEPTION_POINTERS
:
struct _EXCEPTION_POINTERS
ExceptionRecord
:
PEXCEPTION_RECORD
ContextRecord
:
PCONTEXT
_RTL_QUERY_REGISTRY_TABLE
QueryRoutine
:
PRTL_QUERY_REGISTRY_ROUTINE
Flags
:
ULONG
Name
:
PWSTR
EntryContext
:
PVOID
DefaultType
:
ULONG
DefaultData
:
PVOID
DefaultLength
:
ULONG
RTL_QUERY_REGISTRY_TABLE
:
struct _RTL_QUERY_REGISTRY_TABLE
QueryRoutine
:
PRTL_QUERY_REGISTRY_ROUTINE
Flags
:
ULONG
Name
:
PWSTR
EntryContext
:
PVOID
DefaultType
:
ULONG
DefaultData
:
PVOID
DefaultLength
:
ULONG
_PROCESS_PRIORITY_CLASS
Foreground
:
BOOLEAN
PriorityClass
:
UCHAR
PROCESS_PRIORITY_CLASS
:
struct _PROCESS_PRIORITY_CLASS
Foreground
:
BOOLEAN
PriorityClass
:
UCHAR
_PROCESS_FOREGROUND_BACKGROUND
Foreground
:
BOOLEAN
PROCESS_FOREGROUND_BACKGROUND
:
struct _PROCESS_FOREGROUND_BACKGROUND
Foreground
:
BOOLEAN
_FILE_PATH
Version
:
ULONG
Length
:
ULONG
Type
:
ULONG
FilePath
:
UCHAR[ANYSIZE_ARRAY]
FILE_PATH
:
struct _FILE_PATH
Version
:
ULONG
Length
:
ULONG
Type
:
ULONG
FilePath
:
UCHAR[ANYSIZE_ARRAY]
_WINDOWS_OS_OPTIONS
Signature
:
UCHAR[8]
Version
:
ULONG
Length
:
ULONG
OsLoadPathOffset
:
ULONG
OsLoadOptions
:
WCHAR[ANYSIZE_ARRAY]
WINDOWS_OS_OPTIONS
:
struct _WINDOWS_OS_OPTIONS
Signature
:
UCHAR[8]
Version
:
ULONG
Length
:
ULONG
OsLoadPathOffset
:
ULONG
OsLoadOptions
:
WCHAR[ANYSIZE_ARRAY]
_BOOT_ENTRY
Version
:
ULONG
Length
:
ULONG
Id
:
ULONG
Attributes
:
ULONG
FriendlyNameOffset
:
ULONG
BootFilePathOffset
:
ULONG
OsOptionsLength
:
ULONG
OsOptions
:
UCHAR[ANYSIZE_ARRAY]
BOOT_ENTRY
:
struct _BOOT_ENTRY
Version
:
ULONG
Length
:
ULONG
Id
:
ULONG
Attributes
:
ULONG
FriendlyNameOffset
:
ULONG
BootFilePathOffset
:
ULONG
OsOptionsLength
:
ULONG
OsOptions
:
UCHAR[ANYSIZE_ARRAY]
_BOOT_OPTIONS
Version
:
ULONG
Length
:
ULONG
Timeout
:
ULONG
CurrentBootEntryId
:
ULONG
NextBootEntryId
:
ULONG
HeadlessRedirection
:
WCHAR[ANYSIZE_ARRAY]
BOOT_OPTIONS
:
struct _BOOT_OPTIONS
Version
:
ULONG
Length
:
ULONG
Timeout
:
ULONG
CurrentBootEntryId
:
ULONG
NextBootEntryId
:
ULONG
HeadlessRedirection
:
WCHAR[ANYSIZE_ARRAY]
_USER_SID
sidAuthority
:
SID_IDENTIFIER_AUTHORITY
UserGroupId
:
ULONG
UserId
:
ULONG
USER_SID
:
struct _USER_SID
sidAuthority
:
SID_IDENTIFIER_AUTHORITY
UserGroupId
:
ULONG
UserId
:
ULONG
_USER_PERMISSION
UserSid
:
USER_SID
dwAccessType
:
ULONG
bInherit
:
BOOL
dwAccessMask
:
ULONG
dwInheritMask
:
ULONG
dwInheritAccessMask
:
ULONG
USER_PERMISSION
:
struct _USER_PERMISSION
UserSid
:
USER_SID
dwAccessType
:
ULONG
bInherit
:
BOOL
dwAccessMask
:
ULONG
dwInheritMask
:
ULONG
dwInheritAccessMask
:
ULONG
_LSA_UNICODE_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PWSTR
LSA_UNICODE_STRING
:
struct _LSA_UNICODE_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PWSTR
_LSA_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PCHAR
LSA_STRING
:
struct _LSA_STRING
Length
:
USHORT
MaximumLength
:
USHORT
Buffer
:
PCHAR
_LSA_OBJECT_ATTRIBUTES
Length
:
ULONG
RootDirectory
:
HANDLE
ObjectName
:
PLSA_UNICODE_STRING
Attributes
:
ULONG
SecurityDescriptor
:
PVOID
SecurityQualityOfService
:
PVOID
LSA_OBJECT_ATTRIBUTES
:
struct _LSA_OBJECT_ATTRIBUTES
Length
:
ULONG
RootDirectory
:
HANDLE
ObjectName
:
PLSA_UNICODE_STRING
Attributes
:
ULONG
SecurityDescriptor
:
PVOID
SecurityQualityOfService
:
PVOID
_LSA_TRUST_INFORMATION
Name
:
LSA_UNICODE_STRING
Sid
:
PSID
LSA_TRUST_INFORMATION
:
struct _LSA_TRUST_INFORMATION
Name
:
LSA_UNICODE_STRING
Sid
:
PSID
_LSA_REFERENCED_DOMAIN_LIST
Entries
:
ULONG
Domains
:
PLSA_TRUST_INFORMATION
LSA_REFERENCED_DOMAIN_LIST
:
struct _LSA_REFERENCED_DOMAIN_LIST
Entries
:
ULONG
Domains
:
PLSA_TRUST_INFORMATION
_LSA_TRANSLATED_NAME
Use
:
SID_NAME_USE
Name
:
LSA_UNICODE_STRING
DomainIndex
:
LONG
LSA_TRANSLATED_NAME
:
struct _LSA_TRANSLATED_NAME
Use
:
SID_NAME_USE
Name
:
LSA_UNICODE_STRING
DomainIndex
:
LONG
_POLICY_ACCOUNT_DOMAIN_INFO
DomainName
:
LSA_UNICODE_STRING
DomainSid
:
PSID
POLICY_ACCOUNT_DOMAIN_INFO
:
struct _POLICY_ACCOUNT_DOMAIN_INFO
DomainName
:
LSA_UNICODE_STRING
DomainSid
:
PSID
_POLICY_DNS_DOMAIN_INFO
Name
:
LSA_UNICODE_STRING
DnsDomainName
:
LSA_UNICODE_STRING
DnsForestName
:
LSA_UNICODE_STRING
DomainGuid
:
GUID
Sid
:
PSID
POLICY_DNS_DOMAIN_INFO
:
struct _POLICY_DNS_DOMAIN_INFO
Name
:
LSA_UNICODE_STRING
DnsDomainName
:
LSA_UNICODE_STRING
DnsForestName
:
LSA_UNICODE_STRING
DomainGuid
:
GUID
Sid
:
PSID
_LSA_LOOKUP_DOMAIN_INFO_CLASS
AccountDomainInformation
DnsDomainInformation
LSA_LOOKUP_DOMAIN_INFO_CLASS
:
enum _LSA_LOOKUP_DOMAIN_INFO_CLASS
AccountDomainInformation
DnsDomainInformation
LSA_LOOKUP_HANDLE
:
PVOID
PLSA_LOOKUP_HANDLE
:
PVOID*
_SECURITY_LOGON_TYPE
UndefinedLogonType
Interactive
Network
Batch
Service
Proxy
Unlock
NetworkCleartext
NewCredentials
SECURITY_LOGON_TYPE
:
enum _SECURITY_LOGON_TYPE
UndefinedLogonType
Interactive
Network
Batch
Service
Proxy
Unlock
NetworkCleartext
NewCredentials
LSA_OPERATIONAL_MODE
:
ULONG
PLSA_OPERATIONAL_MODE
:
ULONG*
_SE_ADT_PARAMETER_TYPE
SeAdtParmTypeNone
SeAdtParmTypeString
SeAdtParmTypeFileSpec
SeAdtParmTypeUlong
SeAdtParmTypeSid
SeAdtParmTypeLogonId
SeAdtParmTypeNoLogonId
SeAdtParmTypeAccessMask
SeAdtParmTypePrivs
SeAdtParmTypeObjectTypes
SeAdtParmTypeHexUlong
SeAdtParmTypePtr
SeAdtParmTypeTime
SeAdtParmTypeGuid
SeAdtParmTypeLuid
SeAdtParmTypeHexInt64
SeAdtParmTypeStringList
SeAdtParmTypeSidList
SeAdtParmTypeDuration
SeAdtParmTypeUserAccountControl
SeAdtParmTypeNoUac
SeAdtParmTypeMessage
SeAdtParmTypeDateTime
SeAdtParmTypeSockAddr
SeAdtParmTypeSD
SeAdtParmTypeLogonHours
SeAdtParmTypeLogonIdNoSid
SeAdtParmTypeUlongNoConv
SeAdtParmTypeSockAddrNoPort
SeAdtParmTypeAccessReason
SE_ADT_PARAMETER_TYPE
:
enum _SE_ADT_PARAMETER_TYPE
SeAdtParmTypeNone
SeAdtParmTypeString
SeAdtParmTypeFileSpec
SeAdtParmTypeUlong
SeAdtParmTypeSid
SeAdtParmTypeLogonId
SeAdtParmTypeNoLogonId
SeAdtParmTypeAccessMask
SeAdtParmTypePrivs
SeAdtParmTypeObjectTypes
SeAdtParmTypeHexUlong
SeAdtParmTypePtr
SeAdtParmTypeTime
SeAdtParmTypeGuid
SeAdtParmTypeLuid
SeAdtParmTypeHexInt64
SeAdtParmTypeStringList
SeAdtParmTypeSidList
SeAdtParmTypeDuration
SeAdtParmTypeUserAccountControl
SeAdtParmTypeNoUac
SeAdtParmTypeMessage
SeAdtParmTypeDateTime
SeAdtParmTypeSockAddr
SeAdtParmTypeSD
SeAdtParmTypeLogonHours
SeAdtParmTypeLogonIdNoSid
SeAdtParmTypeUlongNoConv
SeAdtParmTypeSockAddrNoPort
SeAdtParmTypeAccessReason
_SE_ADT_OBJECT_TYPE
ObjectType
:
GUID
Flags
:
USHORT
Level
:
USHORT
AccessMask
:
ACCESS_MASK
SE_ADT_OBJECT_TYPE
:
struct _SE_ADT_OBJECT_TYPE
ObjectType
:
GUID
Flags
:
USHORT
Level
:
USHORT
AccessMask
:
ACCESS_MASK
_SE_ADT_PARAMETER_ARRAY_ENTRY
Type
:
SE_ADT_PARAMETER_TYPE
Length
:
ULONG
Data
:
ULONG_PTR[2]
Address
:
PVOID
SE_ADT_PARAMETER_ARRAY_ENTRY
:
struct _SE_ADT_PARAMETER_ARRAY_ENTRY
Type
:
SE_ADT_PARAMETER_TYPE
Length
:
ULONG
Data
:
ULONG_PTR[2]
Address
:
PVOID
_SE_ADT_ACCESS_REASON
AccessMask
:
ACCESS_MASK
AccessReasons
:
ULONG[32]
ObjectTypeIndex
:
ULONG
AccessGranted
:
ULONG
SecurityDescriptor
:
PSECURITY_DESCRIPTOR
SE_ADT_ACCESS_REASON
:
struct _SE_ADT_ACCESS_REASON
AccessMask
:
ACCESS_MASK
AccessReasons
:
ULONG[32]
ObjectTypeIndex
:
ULONG
AccessGranted
:
ULONG
SecurityDescriptor
:
PSECURITY_DESCRIPTOR
_SE_ADT_PARAMETER_ARRAY
CategoryId
:
ULONG
AuditId
:
ULONG
ParameterCount
:
ULONG
Length
:
ULONG
FlatSubCategoryId
:
USHORT
Type
:
USHORT
Flags
:
ULONG
Parameters
:
SE_ADT_PARAMETER_ARRAY_ENTRY[ SE_MAX_AUDIT_PARAMETERS ]
SE_ADT_PARAMETER_ARRAY
:
struct _SE_ADT_PARAMETER_ARRAY
CategoryId
:
ULONG
AuditId
:
ULONG
ParameterCount
:
ULONG
Length
:
ULONG
FlatSubCategoryId
:
USHORT
Type
:
USHORT
Flags
:
ULONG
Parameters
:
SE_ADT_PARAMETER_ARRAY_ENTRY[ SE_MAX_AUDIT_PARAMETERS ]
_POLICY_AUDIT_EVENT_TYPE
AuditCategorySystem
AuditCategoryLogon
AuditCategoryObjectAccess
AuditCategoryPrivilegeUse
AuditCategoryDetailedTracking
AuditCategoryPolicyChange
AuditCategoryAccountManagement
AuditCategoryDirectoryServiceAccess
AuditCategoryAccountLogon
POLICY_AUDIT_EVENT_TYPE
:
enum _POLICY_AUDIT_EVENT_TYPE
AuditCategorySystem
AuditCategoryLogon
AuditCategoryObjectAccess
AuditCategoryPrivilegeUse
AuditCategoryDetailedTracking
AuditCategoryPolicyChange
AuditCategoryAccountManagement
AuditCategoryDirectoryServiceAccess
AuditCategoryAccountLogon
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
_LSA_TRANSLATED_SID
Use
:
SID_NAME_USE
RelativeId
:
ULONG
DomainIndex
:
LONG
LSA_TRANSLATED_SID
:
struct _LSA_TRANSLATED_SID
Use
:
SID_NAME_USE
RelativeId
:
ULONG
DomainIndex
:
LONG
_POLICY_LSA_SERVER_ROLE
PolicyServerRoleBackup
PolicyServerRolePrimary
POLICY_LSA_SERVER_ROLE
:
enum _POLICY_LSA_SERVER_ROLE
PolicyServerRoleBackup
PolicyServerRolePrimary
_POLICY_SERVER_ENABLE_STATE
PolicyServerEnabled
PolicyServerDisabled
POLICY_SERVER_ENABLE_STATE
:
enum _POLICY_SERVER_ENABLE_STATE
PolicyServerEnabled
PolicyServerDisabled
POLICY_AUDIT_EVENT_OPTIONS
:
ULONG
PPOLICY_AUDIT_EVENT_OPTIONS
:
ULONG*
_POLICY_INFORMATION_CLASS
PolicyAuditLogInformation
PolicyAuditEventsInformation
PolicyPrimaryDomainInformation
PolicyPdAccountInformation
PolicyAccountDomainInformation
PolicyLsaServerRoleInformation
PolicyReplicaSourceInformation
PolicyDefaultQuotaInformation
PolicyModificationInformation
PolicyAuditFullSetInformation
PolicyAuditFullQueryInformation
PolicyDnsDomainInformation
PolicyDnsDomainInformationInt
PolicyLocalAccountDomainInformation
PolicyLastEntry
POLICY_INFORMATION_CLASS
:
enum _POLICY_INFORMATION_CLASS
PolicyAuditLogInformation
PolicyAuditEventsInformation
PolicyPrimaryDomainInformation
PolicyPdAccountInformation
PolicyAccountDomainInformation
PolicyLsaServerRoleInformation
PolicyReplicaSourceInformation
PolicyDefaultQuotaInformation
PolicyModificationInformation
PolicyAuditFullSetInformation
PolicyAuditFullQueryInformation
PolicyDnsDomainInformation
PolicyDnsDomainInformationInt
PolicyLocalAccountDomainInformation
PolicyLastEntry
_POLICY_AUDIT_LOG_INFO
AuditLogPercentFull
:
ULONG
MaximumLogSize
:
ULONG
AuditRetentionPeriod
:
LARGE_INTEGER
AuditLogFullShutdownInProgress
:
BOOLEAN
TimeToShutdown
:
LARGE_INTEGER
NextAuditRecordId
:
ULONG
POLICY_AUDIT_LOG_INFO
:
struct _POLICY_AUDIT_LOG_INFO
AuditLogPercentFull
:
ULONG
MaximumLogSize
:
ULONG
AuditRetentionPeriod
:
LARGE_INTEGER
AuditLogFullShutdownInProgress
:
BOOLEAN
TimeToShutdown
:
LARGE_INTEGER
NextAuditRecordId
:
ULONG
_POLICY_AUDIT_EVENTS_INFO
AuditingMode
:
BOOLEAN
EventAuditingOptions
:
PPOLICY_AUDIT_EVENT_OPTIONS
MaximumAuditEventCount
:
ULONG
POLICY_AUDIT_EVENTS_INFO
:
struct _POLICY_AUDIT_EVENTS_INFO
AuditingMode
:
BOOLEAN
EventAuditingOptions
:
PPOLICY_AUDIT_EVENT_OPTIONS
MaximumAuditEventCount
:
ULONG
_POLICY_AUDIT_SUBCATEGORIES_INFO
MaximumSubCategoryCount
:
ULONG
EventAuditingOptions
:
PPOLICY_AUDIT_EVENT_OPTIONS
POLICY_AUDIT_SUBCATEGORIES_INFO
:
struct _POLICY_AUDIT_SUBCATEGORIES_INFO
MaximumSubCategoryCount
:
ULONG
EventAuditingOptions
:
PPOLICY_AUDIT_EVENT_OPTIONS
_POLICY_AUDIT_CATEGORIES_INFO
MaximumCategoryCount
:
ULONG
SubCategoriesInfo
:
PPOLICY_AUDIT_SUBCATEGORIES_INFO
POLICY_AUDIT_CATEGORIES_INFO
:
struct _POLICY_AUDIT_CATEGORIES_INFO
MaximumCategoryCount
:
ULONG
SubCategoriesInfo
:
PPOLICY_AUDIT_SUBCATEGORIES_INFO
_POLICY_PRIMARY_DOMAIN_INFO
Name
:
LSA_UNICODE_STRING
Sid
:
PSID
POLICY_PRIMARY_DOMAIN_INFO
:
struct _POLICY_PRIMARY_DOMAIN_INFO
Name
:
LSA_UNICODE_STRING
Sid
:
PSID
_POLICY_PD_ACCOUNT_INFO
Name
:
LSA_UNICODE_STRING
POLICY_PD_ACCOUNT_INFO
:
struct _POLICY_PD_ACCOUNT_INFO
Name
:
LSA_UNICODE_STRING
_POLICY_LSA_SERVER_ROLE_INFO
LsaServerRole
:
POLICY_LSA_SERVER_ROLE
POLICY_LSA_SERVER_ROLE_INFO
:
struct _POLICY_LSA_SERVER_ROLE_INFO
LsaServerRole
:
POLICY_LSA_SERVER_ROLE
_POLICY_REPLICA_SOURCE_INFO
ReplicaSource
:
LSA_UNICODE_STRING
ReplicaAccountName
:
LSA_UNICODE_STRING
POLICY_REPLICA_SOURCE_INFO
:
struct _POLICY_REPLICA_SOURCE_INFO
ReplicaSource
:
LSA_UNICODE_STRING
ReplicaAccountName
:
LSA_UNICODE_STRING
_POLICY_DEFAULT_QUOTA_INFO
QuotaLimits
:
QUOTA_LIMITS
POLICY_DEFAULT_QUOTA_INFO
:
struct _POLICY_DEFAULT_QUOTA_INFO
QuotaLimits
:
QUOTA_LIMITS
_POLICY_MODIFICATION_INFO
ModifiedId
:
LARGE_INTEGER
DatabaseCreationTime
:
LARGE_INTEGER
POLICY_MODIFICATION_INFO
:
struct _POLICY_MODIFICATION_INFO
ModifiedId
:
LARGE_INTEGER
DatabaseCreationTime
:
LARGE_INTEGER
_POLICY_AUDIT_FULL_SET_INFO
ShutDownOnFull
:
BOOLEAN
POLICY_AUDIT_FULL_SET_INFO
:
struct _POLICY_AUDIT_FULL_SET_INFO
ShutDownOnFull
:
BOOLEAN
_POLICY_AUDIT_FULL_QUERY_INFO
ShutDownOnFull
:
BOOLEAN
LogIsFull
:
BOOLEAN
POLICY_AUDIT_FULL_QUERY_INFO
:
struct _POLICY_AUDIT_FULL_QUERY_INFO
ShutDownOnFull
:
BOOLEAN
LogIsFull
:
BOOLEAN
_POLICY_DOMAIN_INFORMATION_CLASS
PolicyDomainQualityOfServiceInformation
PolicyDomainEfsInformation
PolicyDomainKerberosTicketInformation
POLICY_DOMAIN_INFORMATION_CLASS
:
enum _POLICY_DOMAIN_INFORMATION_CLASS
PolicyDomainQualityOfServiceInformation
PolicyDomainEfsInformation
PolicyDomainKerberosTicketInformation
_POLICY_DOMAIN_EFS_INFO
InfoLength
:
ULONG
EfsBlob
:
PUCHAR
POLICY_DOMAIN_EFS_INFO
:
struct _POLICY_DOMAIN_EFS_INFO
InfoLength
:
ULONG
EfsBlob
:
PUCHAR
_POLICY_DOMAIN_KERBEROS_TICKET_INFO
AuthenticationOptions
:
ULONG
MaxServiceTicketAge
:
LARGE_INTEGER
MaxTicketAge
:
LARGE_INTEGER
MaxRenewAge
:
LARGE_INTEGER
MaxClockSkew
:
LARGE_INTEGER
Reserved
:
LARGE_INTEGER
POLICY_DOMAIN_KERBEROS_TICKET_INFO
:
struct _POLICY_DOMAIN_KERBEROS_TICKET_INFO
AuthenticationOptions
:
ULONG
MaxServiceTicketAge
:
LARGE_INTEGER
MaxTicketAge
:
LARGE_INTEGER
MaxRenewAge
:
LARGE_INTEGER
MaxClockSkew
:
LARGE_INTEGER
Reserved
:
LARGE_INTEGER
_POLICY_NOTIFICATION_INFORMATION_CLASS
PolicyNotifyAuditEventsInformation
PolicyNotifyAccountDomainInformation
PolicyNotifyServerRoleInformation
PolicyNotifyDnsDomainInformation
PolicyNotifyDomainEfsInformation
PolicyNotifyDomainKerberosTicketInformation
PolicyNotifyMachineAccountPasswordInformation
PolicyNotifyGlobalSaclInformation
PolicyNotifyMax
POLICY_NOTIFICATION_INFORMATION_CLASS
:
enum _POLICY_NOTIFICATION_INFORMATION_CLASS
PolicyNotifyAuditEventsInformation
PolicyNotifyAccountDomainInformation
PolicyNotifyServerRoleInformation
PolicyNotifyDnsDomainInformation
PolicyNotifyDomainEfsInformation
PolicyNotifyDomainKerberosTicketInformation
PolicyNotifyMachineAccountPasswordInformation
PolicyNotifyGlobalSaclInformation
PolicyNotifyMax
LSA_HANDLE
:
PVOID
PLSA_HANDLE
:
PVOID*
_TRUSTED_INFORMATION_CLASS
TrustedDomainNameInformation
TrustedControllersInformation
TrustedPosixOffsetInformation
TrustedPasswordInformation
TrustedDomainInformationBasic
TrustedDomainInformationEx
TrustedDomainAuthInformation
TrustedDomainFullInformation
TrustedDomainAuthInformationInternal
TrustedDomainFullInformationInternal
TrustedDomainInformationEx2Internal
TrustedDomainFullInformation2Internal
TrustedDomainSupportedEncryptionTypes
TRUSTED_INFORMATION_CLASS
:
enum _TRUSTED_INFORMATION_CLASS
TrustedDomainNameInformation
TrustedControllersInformation
TrustedPosixOffsetInformation
TrustedPasswordInformation
TrustedDomainInformationBasic
TrustedDomainInformationEx
TrustedDomainAuthInformation
TrustedDomainFullInformation
TrustedDomainAuthInformationInternal
TrustedDomainFullInformationInternal
TrustedDomainInformationEx2Internal
TrustedDomainFullInformation2Internal
TrustedDomainSupportedEncryptionTypes
_TRUSTED_DOMAIN_NAME_INFO
Name
:
LSA_UNICODE_STRING
TRUSTED_DOMAIN_NAME_INFO
:
struct _TRUSTED_DOMAIN_NAME_INFO
Name
:
LSA_UNICODE_STRING
_TRUSTED_CONTROLLERS_INFO
Entries
:
ULONG
Names
:
PLSA_UNICODE_STRING
TRUSTED_CONTROLLERS_INFO
:
struct _TRUSTED_CONTROLLERS_INFO
Entries
:
ULONG
Names
:
PLSA_UNICODE_STRING
_TRUSTED_POSIX_OFFSET_INFO
Offset
:
ULONG
TRUSTED_POSIX_OFFSET_INFO
:
struct _TRUSTED_POSIX_OFFSET_INFO
Offset
:
ULONG
_TRUSTED_PASSWORD_INFO
Password
:
LSA_UNICODE_STRING
OldPassword
:
LSA_UNICODE_STRING
TRUSTED_PASSWORD_INFO
:
struct _TRUSTED_PASSWORD_INFO
Password
:
LSA_UNICODE_STRING
OldPassword
:
LSA_UNICODE_STRING
TRUSTED_DOMAIN_INFORMATION_BASIC
:
LSA_TRUST_INFORMATION
PTRUSTED_DOMAIN_INFORMATION_BASIC
:
PLSA_TRUST_INFORMATION
_TRUSTED_DOMAIN_INFORMATION_EX
Name
:
LSA_UNICODE_STRING
FlatName
:
LSA_UNICODE_STRING
Sid
:
PSID
TrustDirection
:
ULONG
TrustType
:
ULONG
TrustAttributes
:
ULONG
TRUSTED_DOMAIN_INFORMATION_EX
:
struct _TRUSTED_DOMAIN_INFORMATION_EX
Name
:
LSA_UNICODE_STRING
FlatName
:
LSA_UNICODE_STRING
Sid
:
PSID
TrustDirection
:
ULONG
TrustType
:
ULONG
TrustAttributes
:
ULONG
_TRUSTED_DOMAIN_INFORMATION_EX2
Name
:
LSA_UNICODE_STRING
FlatName
:
LSA_UNICODE_STRING
Sid
:
PSID
TrustDirection
:
ULONG
TrustType
:
ULONG
TrustAttributes
:
ULONG
ForestTrustLength
:
ULONG
ForestTrustInfo
:
PUCHAR
TRUSTED_DOMAIN_INFORMATION_EX2
:
struct _TRUSTED_DOMAIN_INFORMATION_EX2
Name
:
LSA_UNICODE_STRING
FlatName
:
LSA_UNICODE_STRING
Sid
:
PSID
TrustDirection
:
ULONG
TrustType
:
ULONG
TrustAttributes
:
ULONG
ForestTrustLength
:
ULONG
ForestTrustInfo
:
PUCHAR
_LSA_AUTH_INFORMATION
LastUpdateTime
:
LARGE_INTEGER
AuthType
:
ULONG
AuthInfoLength
:
ULONG
AuthInfo
:
PUCHAR
LSA_AUTH_INFORMATION
:
struct _LSA_AUTH_INFORMATION
LastUpdateTime
:
LARGE_INTEGER
AuthType
:
ULONG
AuthInfoLength
:
ULONG
AuthInfo
:
PUCHAR
_TRUSTED_DOMAIN_AUTH_INFORMATION
IncomingAuthInfos
:
ULONG
IncomingAuthenticationInformation
:
PLSA_AUTH_INFORMATION
IncomingPreviousAuthenticationInformation
:
PLSA_AUTH_INFORMATION
OutgoingAuthInfos
:
ULONG
OutgoingAuthenticationInformation
:
PLSA_AUTH_INFORMATION
OutgoingPreviousAuthenticationInformation
:
PLSA_AUTH_INFORMATION
TRUSTED_DOMAIN_AUTH_INFORMATION
:
struct _TRUSTED_DOMAIN_AUTH_INFORMATION
IncomingAuthInfos
:
ULONG
IncomingAuthenticationInformation
:
PLSA_AUTH_INFORMATION
IncomingPreviousAuthenticationInformation
:
PLSA_AUTH_INFORMATION
OutgoingAuthInfos
:
ULONG
OutgoingAuthenticationInformation
:
PLSA_AUTH_INFORMATION
OutgoingPreviousAuthenticationInformation
:
PLSA_AUTH_INFORMATION
_TRUSTED_DOMAIN_FULL_INFORMATION
Information
:
TRUSTED_DOMAIN_INFORMATION_EX
PosixOffset
:
TRUSTED_POSIX_OFFSET_INFO
AuthInformation
:
TRUSTED_DOMAIN_AUTH_INFORMATION
TRUSTED_DOMAIN_FULL_INFORMATION
:
struct _TRUSTED_DOMAIN_FULL_INFORMATION
Information
:
TRUSTED_DOMAIN_INFORMATION_EX
PosixOffset
:
TRUSTED_POSIX_OFFSET_INFO
AuthInformation
:
TRUSTED_DOMAIN_AUTH_INFORMATION
_TRUSTED_DOMAIN_FULL_INFORMATION2
Information
:
TRUSTED_DOMAIN_INFORMATION_EX2
PosixOffset
:
TRUSTED_POSIX_OFFSET_INFO
AuthInformation
:
TRUSTED_DOMAIN_AUTH_INFORMATION
TRUSTED_DOMAIN_FULL_INFORMATION2
:
struct _TRUSTED_DOMAIN_FULL_INFORMATION2
Information
:
TRUSTED_DOMAIN_INFORMATION_EX2
PosixOffset
:
TRUSTED_POSIX_OFFSET_INFO
AuthInformation
:
TRUSTED_DOMAIN_AUTH_INFORMATION
_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
SupportedEncryptionTypes
:
ULONG
TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
:
struct _TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
SupportedEncryptionTypes
:
ULONG
(anonymous)
ForestTrustTopLevelName
ForestTrustTopLevelNameEx
ForestTrustDomainInfo
ForestTrustRecordTypeLast
LSA_FOREST_TRUST_RECORD_TYPE
:
enum
ForestTrustTopLevelName
ForestTrustTopLevelNameEx
ForestTrustDomainInfo
ForestTrustRecordTypeLast
_LSA_FOREST_TRUST_DOMAIN_INFO
Sid
:
PSID
DnsName
:
LSA_UNICODE_STRING
NetbiosName
:
LSA_UNICODE_STRING
LSA_FOREST_TRUST_DOMAIN_INFO
:
struct _LSA_FOREST_TRUST_DOMAIN_INFO
Sid
:
PSID
DnsName
:
LSA_UNICODE_STRING
NetbiosName
:
LSA_UNICODE_STRING
_LSA_FOREST_TRUST_BINARY_DATA
Length
:
ULONG
Buffer
:
PUCHAR
LSA_FOREST_TRUST_BINARY_DATA
:
struct _LSA_FOREST_TRUST_BINARY_DATA
Length
:
ULONG
Buffer
:
PUCHAR
_LSA_FOREST_TRUST_RECORD
Flags
:
ULONG
ForestTrustType
:
LSA_FOREST_TRUST_RECORD_TYPE
Time
:
LARGE_INTEGER
(anonymous)
LSA_FOREST_TRUST_RECORD
:
struct _LSA_FOREST_TRUST_RECORD
Flags
:
ULONG
ForestTrustType
:
LSA_FOREST_TRUST_RECORD_TYPE
Time
:
LARGE_INTEGER
(anonymous)
_LSA_FOREST_TRUST_INFORMATION
RecordCount
:
ULONG
Entries
:
PLSA_FOREST_TRUST_RECORD*
LSA_FOREST_TRUST_INFORMATION
:
struct _LSA_FOREST_TRUST_INFORMATION
RecordCount
:
ULONG
Entries
:
PLSA_FOREST_TRUST_RECORD*
(anonymous)
CollisionTdo
CollisionXref
CollisionOther
LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
:
enum
CollisionTdo
CollisionXref
CollisionOther
_LSA_FOREST_TRUST_COLLISION_RECORD
Index
:
ULONG
Type
:
LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
Flags
:
ULONG
Name
:
LSA_UNICODE_STRING
LSA_FOREST_TRUST_COLLISION_RECORD
:
struct _LSA_FOREST_TRUST_COLLISION_RECORD
Index
:
ULONG
Type
:
LSA_FOREST_TRUST_COLLISION_RECORD_TYPE
Flags
:
ULONG
Name
:
LSA_UNICODE_STRING
_LSA_FOREST_TRUST_COLLISION_INFORMATION
RecordCount
:
ULONG
Entries
:
PLSA_FOREST_TRUST_COLLISION_RECORD*
LSA_FOREST_TRUST_COLLISION_INFORMATION
:
struct _LSA_FOREST_TRUST_COLLISION_INFORMATION
RecordCount
:
ULONG
Entries
:
PLSA_FOREST_TRUST_COLLISION_RECORD*
LSA_ENUMERATION_HANDLE
:
ULONG
PLSA_ENUMERATION_HANDLE
:
ULONG*
_LSA_ENUMERATION_INFORMATION
Sid
:
PSID
LSA_ENUMERATION_INFORMATION
:
struct _LSA_ENUMERATION_INFORMATION
Sid
:
PSID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
_EFI_DRIVER_ENTRY
Version
:
ULONG
Length
:
ULONG
Id
:
ULONG
FriendlyNameOffset
:
ULONG
DriverFilePathOffset
:
ULONG
EFI_DRIVER_ENTRY
:
struct _EFI_DRIVER_ENTRY
Version
:
ULONG
Length
:
ULONG
Id
:
ULONG
FriendlyNameOffset
:
ULONG
DriverFilePathOffset
:
ULONG
_EFI_DRIVER_ENTRY_LIST
NextEntryOffset
:
ULONG
DriverEntry
:
EFI_DRIVER_ENTRY
EFI_DRIVER_ENTRY_LIST
:
struct _EFI_DRIVER_ENTRY_LIST
NextEntryOffset
:
ULONG
DriverEntry
:
EFI_DRIVER_ENTRY
_RTL_STACK_CONTEXT_ENTRY
Address
:
ULONG_PTR
Data
:
ULONG_PTR
RTL_STACK_CONTEXT_ENTRY
:
struct _RTL_STACK_CONTEXT_ENTRY
Address
:
ULONG_PTR
Data
:
ULONG_PTR
_RTL_STACK_CONTEXT
NumberOfEntries
:
ULONG
Entry
:
RTL_STACK_CONTEXT_ENTRY[1]
RTL_STACK_CONTEXT
:
struct _RTL_STACK_CONTEXT
NumberOfEntries
:
ULONG
Entry
:
RTL_STACK_CONTEXT_ENTRY[1]
_RTL_HEAP_PARAMETERS
Length
:
ULONG
SegmentReserve
:
SIZE_T
SegmentCommit
:
SIZE_T
DeCommitFreeBlockThreshold
:
SIZE_T
DeCommitTotalFreeThreshold
:
SIZE_T
MaximumAllocationSize
:
SIZE_T
VirtualMemoryThreshold
:
SIZE_T
InitialCommit
:
SIZE_T
InitialReserve
:
SIZE_T
CommitRoutine
:
PRTL_HEAP_COMMIT_ROUTINE
Reserved
:
SIZE_T[2]
RTL_HEAP_PARAMETERS
:
struct _RTL_HEAP_PARAMETERS
Length
:
ULONG
SegmentReserve
:
SIZE_T
SegmentCommit
:
SIZE_T
DeCommitFreeBlockThreshold
:
SIZE_T
DeCommitTotalFreeThreshold
:
SIZE_T
MaximumAllocationSize
:
SIZE_T
VirtualMemoryThreshold
:
SIZE_T
InitialCommit
:
SIZE_T
InitialReserve
:
SIZE_T
CommitRoutine
:
PRTL_HEAP_COMMIT_ROUTINE
Reserved
:
SIZE_T[2]
_RTL_SPLAY_LINKS
Parent
:
struct _RTL_SPLAY_LINKS*
LeftChild
:
struct _RTL_SPLAY_LINKS*
RightChild
:
struct _RTL_SPLAY_LINKS*
RTL_SPLAY_LINKS
:
struct _RTL_SPLAY_LINKS
Parent
:
struct _RTL_SPLAY_LINKS*
LeftChild
:
struct _RTL_SPLAY_LINKS*
RightChild
:
struct _RTL_SPLAY_LINKS*
PRTL_SPLAY_LINKS
:
RTL_SPLAY_LINKS*
_TABLE_SEARCH_RESULT
TableEmptyTree
TableFoundNode
TableInsertAsLeft
TableInsertAsRight
TABLE_SEARCH_RESULT
:
enum _TABLE_SEARCH_RESULT
TableEmptyTree
TableFoundNode
TableInsertAsLeft
TableInsertAsRight
_RTL_GENERIC_COMPARE_RESULTS
GenericLessThan
GenericGreaterThan
GenericEqual
RTL_GENERIC_COMPARE_RESULTS
:
enum _RTL_GENERIC_COMPARE_RESULTS
GenericLessThan
GenericGreaterThan
GenericEqual
_RTL_BALANCED_LINKS
Parent
:
struct _RTL_BALANCED_LINKS*
LeftChild
:
struct _RTL_BALANCED_LINKS*
RightChild
:
struct _RTL_BALANCED_LINKS*
Balance
:
CHAR
Reserved
:
UCHAR[3]
RTL_BALANCED_LINKS
:
struct _RTL_BALANCED_LINKS
Parent
:
struct _RTL_BALANCED_LINKS*
LeftChild
:
struct _RTL_BALANCED_LINKS*
RightChild
:
struct _RTL_BALANCED_LINKS*
Balance
:
CHAR
Reserved
:
UCHAR[3]
_RTL_AVL_TABLE
BalancedRoot
:
RTL_BALANCED_LINKS
OrderedPointer
:
PVOID
WhichOrderedElement
:
ULONG
NumberGenericTableElements
:
ULONG
DepthOfTree
:
ULONG
RestartKey
:
PRTL_BALANCED_LINKS
DeleteCount
:
ULONG
CompareRoutine
:
PRTL_AVL_COMPARE_ROUTINE
AllocateRoutine
:
PRTL_AVL_ALLOCATE_ROUTINE
FreeRoutine
:
PRTL_AVL_FREE_ROUTINE
TableContext
:
PVOID
RTL_AVL_TABLE
:
struct _RTL_AVL_TABLE
BalancedRoot
:
RTL_BALANCED_LINKS
OrderedPointer
:
PVOID
WhichOrderedElement
:
ULONG
NumberGenericTableElements
:
ULONG
DepthOfTree
:
ULONG
RestartKey
:
PRTL_BALANCED_LINKS
DeleteCount
:
ULONG
CompareRoutine
:
PRTL_AVL_COMPARE_ROUTINE
AllocateRoutine
:
PRTL_AVL_ALLOCATE_ROUTINE
FreeRoutine
:
PRTL_AVL_FREE_ROUTINE
TableContext
:
PVOID
_RTL_GENERIC_TABLE
TableRoot
:
PRTL_SPLAY_LINKS
InsertOrderList
:
LIST_ENTRY
OrderedPointer
:
PLIST_ENTRY
WhichOrderedElement
:
ULONG
NumberGenericTableElements
:
ULONG
CompareRoutine
:
PRTL_GENERIC_COMPARE_ROUTINE
AllocateRoutine
:
PRTL_GENERIC_ALLOCATE_ROUTINE
FreeRoutine
:
PRTL_GENERIC_FREE_ROUTINE
TableContext
:
PVOID
RTL_GENERIC_TABLE
:
struct _RTL_GENERIC_TABLE
TableRoot
:
PRTL_SPLAY_LINKS
InsertOrderList
:
LIST_ENTRY
OrderedPointer
:
PLIST_ENTRY
WhichOrderedElement
:
ULONG
NumberGenericTableElements
:
ULONG
CompareRoutine
:
PRTL_GENERIC_COMPARE_ROUTINE
AllocateRoutine
:
PRTL_GENERIC_ALLOCATE_ROUTINE
FreeRoutine
:
PRTL_GENERIC_FREE_ROUTINE
TableContext
:
PVOID
PRTL_GENERIC_TABLE
:
RTL_GENERIC_TABLE*
_GENERATE_NAME_CONTEXT
Checksum
:
USHORT
ChecksumInserted
:
BOOLEAN
NameLength
:
UCHAR
NameBuffer
:
WCHAR[8]
ExtensionLength
:
ULONG
ExtensionBuffer
:
WCHAR[4]
LastIndexValue
:
ULONG
GENERATE_NAME_CONTEXT
:
struct _GENERATE_NAME_CONTEXT
Checksum
:
USHORT
ChecksumInserted
:
BOOLEAN
NameLength
:
UCHAR
NameBuffer
:
WCHAR[8]
ExtensionLength
:
ULONG
ExtensionBuffer
:
WCHAR[4]
LastIndexValue
:
ULONG
PGENERATE_NAME_CONTEXT
:
GENERATE_NAME_CONTEXT*
_PREFIX_TABLE_ENTRY
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
struct _PREFIX_TABLE_ENTRY*
Links
:
RTL_SPLAY_LINKS
Prefix
:
PSTRING
PREFIX_TABLE_ENTRY
:
struct _PREFIX_TABLE_ENTRY
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
struct _PREFIX_TABLE_ENTRY*
Links
:
RTL_SPLAY_LINKS
Prefix
:
PSTRING
PPREFIX_TABLE_ENTRY
:
PREFIX_TABLE_ENTRY*
_PREFIX_TABLE
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
PPREFIX_TABLE_ENTRY
PREFIX_TABLE
:
struct _PREFIX_TABLE
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
PPREFIX_TABLE_ENTRY
PPREFIX_TABLE
:
PREFIX_TABLE*
_UNICODE_PREFIX_TABLE_ENTRY
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
struct _UNICODE_PREFIX_TABLE_ENTRY*
CaseMatch
:
struct _UNICODE_PREFIX_TABLE_ENTRY*
Links
:
RTL_SPLAY_LINKS
Prefix
:
PUNICODE_STRING
UNICODE_PREFIX_TABLE_ENTRY
:
struct _UNICODE_PREFIX_TABLE_ENTRY
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
struct _UNICODE_PREFIX_TABLE_ENTRY*
CaseMatch
:
struct _UNICODE_PREFIX_TABLE_ENTRY*
Links
:
RTL_SPLAY_LINKS
Prefix
:
PUNICODE_STRING
PUNICODE_PREFIX_TABLE_ENTRY
:
UNICODE_PREFIX_TABLE_ENTRY*
_UNICODE_PREFIX_TABLE
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
PUNICODE_PREFIX_TABLE_ENTRY
LastNextEntry
:
PUNICODE_PREFIX_TABLE_ENTRY
UNICODE_PREFIX_TABLE
:
struct _UNICODE_PREFIX_TABLE
NodeTypeCode
:
CSHORT
NameLength
:
CSHORT
NextPrefixTree
:
PUNICODE_PREFIX_TABLE_ENTRY
LastNextEntry
:
PUNICODE_PREFIX_TABLE_ENTRY
PUNICODE_PREFIX_TABLE
:
UNICODE_PREFIX_TABLE*
_COMPRESSED_DATA_INFO
CompressionFormatAndEngine
:
USHORT
CompressionUnitShift
:
UCHAR
ChunkShift
:
UCHAR
ClusterShift
:
UCHAR
Reserved
:
UCHAR
NumberOfChunks
:
USHORT
CompressedChunkSizes
:
ULONG[ANYSIZE_ARRAY]
COMPRESSED_DATA_INFO
:
struct _COMPRESSED_DATA_INFO
CompressionFormatAndEngine
:
USHORT
CompressionUnitShift
:
UCHAR
ChunkShift
:
UCHAR
ClusterShift
:
UCHAR
Reserved
:
UCHAR
NumberOfChunks
:
USHORT
CompressedChunkSizes
:
ULONG[ANYSIZE_ARRAY]
PCOMPRESSED_DATA_INFO
:
COMPRESSED_DATA_INFO*
_SECTION_IMAGE_INFORMATION
TransferAddress
:
PVOID
ZeroBits
:
ULONG
Alignment
:
UCHAR[4]
MaximumStackSize
:
SIZE_T
CommittedStackSize
:
SIZE_T
SubSystemType
:
ULONG
(anonymous)
GpValue
:
ULONG
ImageCharacteristics
:
USHORT
DllCharacteristics
:
USHORT
Machine
:
USHORT
ImageContainsCode
:
BOOLEAN
(anonymous)
LoaderFlags
:
ULONG
ImageFileSize
:
ULONG
CheckSum
:
ULONG
SECTION_IMAGE_INFORMATION
:
struct _SECTION_IMAGE_INFORMATION
TransferAddress
:
PVOID
ZeroBits
:
ULONG
Alignment
:
UCHAR[4]
MaximumStackSize
:
SIZE_T
CommittedStackSize
:
SIZE_T
SubSystemType
:
ULONG
(anonymous)
GpValue
:
ULONG
ImageCharacteristics
:
USHORT
DllCharacteristics
:
USHORT
Machine
:
USHORT
ImageContainsCode
:
BOOLEAN
(anonymous)
LoaderFlags
:
ULONG
ImageFileSize
:
ULONG
CheckSum
:
ULONG
_SECTION_IMAGE_INFORMATION64
TransferAddress
:
ULONGLONG
ZeroBits
:
ULONG
MaximumStackSize
:
ULONGLONG
CommittedStackSize
:
ULONGLONG
SubSystemType
:
ULONG
(anonymous)
GpValue
:
ULONG
ImageCharacteristics
:
USHORT
DllCharacteristics
:
USHORT
Machine
:
USHORT
ImageContainsCode
:
BOOLEAN
Spare1
:
BOOLEAN
LoaderFlags
:
ULONG
ImageFileSize
:
ULONG
Reserved
:
ULONG[ 1 ]
SECTION_IMAGE_INFORMATION64
:
struct _SECTION_IMAGE_INFORMATION64
TransferAddress
:
ULONGLONG
ZeroBits
:
ULONG
MaximumStackSize
:
ULONGLONG
CommittedStackSize
:
ULONGLONG
SubSystemType
:
ULONG
(anonymous)
GpValue
:
ULONG
ImageCharacteristics
:
USHORT
DllCharacteristics
:
USHORT
Machine
:
USHORT
ImageContainsCode
:
BOOLEAN
Spare1
:
BOOLEAN
LoaderFlags
:
ULONG
ImageFileSize
:
ULONG
Reserved
:
ULONG[ 1 ]
_RTL_BITMAP
SizeOfBitMap
:
ULONG
Padding
:
UCHAR[4]
Buffer
:
PULONG
RTL_BITMAP
:
struct _RTL_BITMAP
SizeOfBitMap
:
ULONG
Padding
:
UCHAR[4]
Buffer
:
PULONG
PRTL_BITMAP
:
RTL_BITMAP*
_RTL_RANGE_LIST
ListHead
:
LIST_ENTRY
Flags
:
ULONG
Count
:
ULONG
Stamp
:
ULONG
RTL_RANGE_LIST
:
struct _RTL_RANGE_LIST
ListHead
:
LIST_ENTRY
Flags
:
ULONG
Count
:
ULONG
Stamp
:
ULONG
(anonymous)
RtlBsdItemVersionNumber
RtlBsdItemProductType
RtlBsdItemAabEnabled
RtlBsdItemAabTimeout
RtlBsdItemBootGood
RtlBsdItemBootShutdown
RtlBsdItemMax
RTL_BSD_ITEM_TYPE
:
enum
RtlBsdItemVersionNumber
RtlBsdItemProductType
RtlBsdItemAabEnabled
RtlBsdItemAabTimeout
RtlBsdItemBootGood
RtlBsdItemBootShutdown
RtlBsdItemMax
_RANGE_LIST_ITERATOR
RangeListHead
:
PLIST_ENTRY
MergedHead
:
PLIST_ENTRY
Current
:
PVOID
Stamp
:
ULONG
RTL_RANGE_LIST_ITERATOR
:
struct _RANGE_LIST_ITERATOR
RangeListHead
:
PLIST_ENTRY
MergedHead
:
PLIST_ENTRY
Current
:
PVOID
Stamp
:
ULONG
_STARTUP_ARGUMENT
Unknown
:
UNICODE_STRING[ 3 ]
Environment
:
PRTL_USER_PROCESS_PARAMETERS
STARTUP_ARGUMENT
:
struct _STARTUP_ARGUMENT
Unknown
:
UNICODE_STRING[ 3 ]
Environment
:
PRTL_USER_PROCESS_PARAMETERS
_RTL_USER_PROCESS_INFORMATION
Length
:
ULONG
Process
:
HANDLE
Thread
:
HANDLE
ClientId
:
CLIENT_ID
ImageInformation
:
SECTION_IMAGE_INFORMATION
RTL_USER_PROCESS_INFORMATION
:
struct _RTL_USER_PROCESS_INFORMATION
Length
:
ULONG
Process
:
HANDLE
Thread
:
HANDLE
ClientId
:
CLIENT_ID
ImageInformation
:
SECTION_IMAGE_INFORMATION
_RTL_USER_PROCESS_INFORMATION64
Length
:
ULONG
Process
:
LONGLONG
Thread
:
LONGLONG
ClientId
:
CLIENT_ID64
ImageInformation
:
SECTION_IMAGE_INFORMATION64
RTL_USER_PROCESS_INFORMATION64
:
struct _RTL_USER_PROCESS_INFORMATION64
Length
:
ULONG
Process
:
LONGLONG
Thread
:
LONGLONG
ClientId
:
CLIENT_ID64
ImageInformation
:
SECTION_IMAGE_INFORMATION64
_RTL_RESOURCE
CriticalSection
:
RTL_CRITICAL_SECTION
SharedSemaphore
:
HANDLE
NumberOfWaitingShared
:
ULONG
ExclusiveSemaphore
:
HANDLE
NumberOfWaitingExclusive
:
ULONG
NumberOfActive
:
LONG
ExclusiveOwnerThread
:
HANDLE
Flags
:
ULONG
DebugInfo
:
PRTL_RESOURCE_DEBUG
RTL_RESOURCE
:
struct _RTL_RESOURCE
CriticalSection
:
RTL_CRITICAL_SECTION
SharedSemaphore
:
HANDLE
NumberOfWaitingShared
:
ULONG
ExclusiveSemaphore
:
HANDLE
NumberOfWaitingExclusive
:
ULONG
NumberOfActive
:
LONG
ExclusiveOwnerThread
:
HANDLE
Flags
:
ULONG
DebugInfo
:
PRTL_RESOURCE_DEBUG
_RTL_TRACE_BLOCK
Magic
:
ULONG
Count
:
ULONG
Size
:
ULONG
UserCount
:
SIZE_T
UserSize
:
SIZE_T
UserContext
:
PVOID
Next
:
struct _RTL_TRACE_BLOCK*
Trace
:
PVOID*
RTL_TRACE_BLOCK
:
struct _RTL_TRACE_BLOCK
Magic
:
ULONG
Count
:
ULONG
Size
:
ULONG
UserCount
:
SIZE_T
UserSize
:
SIZE_T
UserContext
:
PVOID
Next
:
struct _RTL_TRACE_BLOCK*
Trace
:
PVOID*
PRTL_TRACE_DATABASE
:
struct _RTL_TRACE_DATABASE*
_RTL_TRACE_ENUMERATE
Database
:
PRTL_TRACE_DATABASE
Index
:
ULONG
Block
:
PRTL_TRACE_BLOCK
RTL_TRACE_ENUMERATE
:
struct _RTL_TRACE_ENUMERATE
Database
:
PRTL_TRACE_DATABASE
Index
:
ULONG
Block
:
PRTL_TRACE_BLOCK
_KLDR_DATA_TABLE_ENTRY
InLoadOrderLinks
:
LIST_ENTRY
ExceptionTable
:
PVOID
ExceptionTableSize
:
ULONG
GpValue
:
PVOID
NonPagedDebugInfo
:
struct _NON_PAGED_DEBUG_INFO*
DllBase
:
PVOID
EntryPoint
:
PVOID
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING
BaseDllName
:
UNICODE_STRING
Flags
:
ULONG
LoadCount
:
USHORT
__Unused5
:
USHORT
SectionPointer
:
PVOID
CheckSum
:
ULONG
CoverageSectionSize
:
ULONG
CoverageSection
:
PVOID
LoadedImports
:
PVOID
PatchInformation
:
PVOID
KLDR_DATA_TABLE_ENTRY
:
struct _KLDR_DATA_TABLE_ENTRY
InLoadOrderLinks
:
LIST_ENTRY
ExceptionTable
:
PVOID
ExceptionTableSize
:
ULONG
GpValue
:
PVOID
NonPagedDebugInfo
:
struct _NON_PAGED_DEBUG_INFO*
DllBase
:
PVOID
EntryPoint
:
PVOID
SizeOfImage
:
ULONG
FullDllName
:
UNICODE_STRING
BaseDllName
:
UNICODE_STRING
Flags
:
ULONG
LoadCount
:
USHORT
__Unused5
:
USHORT
SectionPointer
:
PVOID
CheckSum
:
ULONG
CoverageSectionSize
:
ULONG
CoverageSection
:
PVOID
LoadedImports
:
PVOID
PatchInformation
:
PVOID
_DISPATCHER_HEADER
(anonymous)
SignalState
:
LONG
WaitListHead
:
LIST_ENTRY
DISPATCHER_HEADER
:
struct _DISPATCHER_HEADER
(anonymous)
SignalState
:
LONG
WaitListHead
:
LIST_ENTRY
_KEVENT
Header
:
DISPATCHER_HEADER
KEVENT
:
struct _KEVENT
Header
:
DISPATCHER_HEADER
_KGATE
Header
:
DISPATCHER_HEADER
KGATE
:
struct _KGATE
Header
:
DISPATCHER_HEADER
_KSEMAPHORE
Header
:
DISPATCHER_HEADER
Limit
:
LONG
KSEMAPHORE
:
struct _KSEMAPHORE
Header
:
DISPATCHER_HEADER
Limit
:
LONG
_OWNER_ENTRY
OwnerThread
:
ULONG
OwnerCount
:
LONG
TableSize
:
ULONG
OWNER_ENTRY
:
struct _OWNER_ENTRY
OwnerThread
:
ULONG
OwnerCount
:
LONG
TableSize
:
ULONG
_ERESOURCE
SystemResourcesList
:
LIST_ENTRY
OwnerTable
:
OWNER_ENTRY*
ActiveCount
:
SHORT
Flag
:
USHORT
SharedWaiters
:
KSEMAPHORE*
ExclusiveWaiters
:
KEVENT*
OwnerEntry
:
OWNER_ENTRY
ActiveEntries
:
ULONG
ContentionCount
:
ULONG
NumberOfSharedWaiters
:
ULONG
NumberOfExclusiveWaiters
:
ULONG
Address
:
PVOID
CreatorBackTraceIndex
:
ULONG
SpinLock
:
ULONG
ERESOURCE
:
struct _ERESOURCE
SystemResourcesList
:
LIST_ENTRY
OwnerTable
:
OWNER_ENTRY*
ActiveCount
:
SHORT
Flag
:
USHORT
SharedWaiters
:
KSEMAPHORE*
ExclusiveWaiters
:
KEVENT*
OwnerEntry
:
OWNER_ENTRY
ActiveEntries
:
ULONG
ContentionCount
:
ULONG
NumberOfSharedWaiters
:
ULONG
NumberOfExclusiveWaiters
:
ULONG
Address
:
PVOID
CreatorBackTraceIndex
:
ULONG
SpinLock
:
ULONG
_HEAP_LOCK
(anonymous)
HEAP_LOCK
:
struct _HEAP_LOCK
(anonymous)
_HEAP_TUNING_PARAMETERS
CommittThresholdShift
:
ULONG
MaxPreCommittThreshold
:
ULONG
HEAP_TUNING_PARAMETERS
:
struct _HEAP_TUNING_PARAMETERS
CommittThresholdShift
:
ULONG
MaxPreCommittThreshold
:
ULONG
_HEAP_PSEUDO_TAG_ENTRY
Allocs
:
ULONG
Frees
:
ULONG
Size
:
ULONG
HEAP_PSEUDO_TAG_ENTRY
:
struct _HEAP_PSEUDO_TAG_ENTRY
Allocs
:
ULONG
Frees
:
ULONG
Size
:
ULONG
_HEAP_TAG_ENTRY
Allocs
:
ULONG
Frees
:
ULONG
Size
:
ULONG
TagIndex
:
USHORT
CreatorBackTraceIndex
:
USHORT
TagName
:
WCHAR[ 24 ]
HEAP_TAG_ENTRY
:
struct _HEAP_TAG_ENTRY
Allocs
:
ULONG
Frees
:
ULONG
Size
:
ULONG
TagIndex
:
USHORT
CreatorBackTraceIndex
:
USHORT
TagName
:
WCHAR[ 24 ]
_HEAP_ENTRY
Size
:
USHORT
Flags
:
UCHAR
SmallTagIndex
:
UCHAR
SubSegmentCode
:
PVOID
PreviousSize
:
USHORT
SegmentOffset
:
UCHAR
LFHFlags
:
UCHAR
UnusedBytes
:
UCHAR
FunctionIndex
:
USHORT
ContextValue
:
USHORT
InterceptorValue
:
ULONG
UnusedBytesLength
:
USHORT
EntryOffset
:
UCHAR
ExtendedBlockSignature
:
UCHAR
Code1
:
ULONG
Code2
:
USHORT
Code3
:
UCHAR
Code4
:
UCHAR
AgregateCode
:
ULONG64
HEAP_ENTRY
:
struct _HEAP_ENTRY
Size
:
USHORT
Flags
:
UCHAR
SmallTagIndex
:
UCHAR
SubSegmentCode
:
PVOID
PreviousSize
:
USHORT
SegmentOffset
:
UCHAR
LFHFlags
:
UCHAR
UnusedBytes
:
UCHAR
FunctionIndex
:
USHORT
ContextValue
:
USHORT
InterceptorValue
:
ULONG
UnusedBytesLength
:
USHORT
EntryOffset
:
UCHAR
ExtendedBlockSignature
:
UCHAR
Code1
:
ULONG
Code2
:
USHORT
Code3
:
UCHAR
Code4
:
UCHAR
AgregateCode
:
ULONG64
_HEAP_COUNTERS
TotalMemoryReserved
:
ULONG
TotalMemoryCommitted
:
ULONG
TotalMemoryLargeUCR
:
ULONG
TotalSizeInVirtualBlocks
:
ULONG
TotalSegments
:
ULONG
TotalUCRs
:
ULONG
CommittOps
:
ULONG
DeCommitOps
:
ULONG
LockAcquires
:
ULONG
LockCollisions
:
ULONG
CommitRate
:
ULONG
DecommittRate
:
ULONG
CommitFailures
:
ULONG
InBlockCommitFailures
:
ULONG
CompactHeapCalls
:
ULONG
CompactedUCRs
:
ULONG
InBlockDeccommits
:
ULONG
InBlockDeccomitSize
:
ULONG
HEAP_COUNTERS
:
struct _HEAP_COUNTERS
TotalMemoryReserved
:
ULONG
TotalMemoryCommitted
:
ULONG
TotalMemoryLargeUCR
:
ULONG
TotalSizeInVirtualBlocks
:
ULONG
TotalSegments
:
ULONG
TotalUCRs
:
ULONG
CommittOps
:
ULONG
DeCommitOps
:
ULONG
LockAcquires
:
ULONG
LockCollisions
:
ULONG
CommitRate
:
ULONG
DecommittRate
:
ULONG
CommitFailures
:
ULONG
InBlockCommitFailures
:
ULONG
CompactHeapCalls
:
ULONG
CompactedUCRs
:
ULONG
InBlockDeccommits
:
ULONG
InBlockDeccomitSize
:
ULONG
_HEAP
Entry
:
HEAP_ENTRY
SegmentSignature
:
ULONG
SegmentFlags
:
ULONG
SegmentListEntry
:
LIST_ENTRY
Heap
:
struct _HEAP*
BaseAddress
:
PVOID
NumberOfPages
:
ULONG
FirstEntry
:
PHEAP_ENTRY
LastValidEntry
:
PHEAP_ENTRY
NumberOfUnCommittedPages
:
ULONG
NumberOfUnCommittedRanges
:
ULONG
SegmentAllocatorBackTraceIndex
:
USHORT
Reserved
:
USHORT
UCRSegmentList
:
LIST_ENTRY
Flags
:
ULONG
ForceFlags
:
ULONG
CompatibilityFlags
:
ULONG
EncodeFlagMask
:
ULONG
Encoding
:
HEAP_ENTRY
PointerKey
:
ULONG
Interceptor
:
ULONG
VirtualMemoryThreshold
:
ULONG
Signature
:
ULONG
SegmentReserve
:
ULONG
SegmentCommit
:
ULONG
DeCommitFreeBlockThreshold
:
ULONG
DeCommitTotalFreeThreshold
:
ULONG
TotalFreeSize
:
ULONG
MaximumAllocationSize
:
ULONG
ProcessHeapsListIndex
:
USHORT
HeaderValidateLength
:
USHORT
HeaderValidateCopy
:
PVOID
NextAvailableTagIndex
:
USHORT
MaximumTagIndex
:
USHORT
TagEntries
:
PHEAP_TAG_ENTRY
UCRList
:
LIST_ENTRY
AlignRound
:
ULONG
AlignMask
:
ULONG
VirtualAllocdBlocks
:
LIST_ENTRY
SegmentList
:
LIST_ENTRY
AllocatorBackTraceIndex
:
USHORT
NonDedicatedListLength
:
ULONG
BlocksIndex
:
PVOID
UCRIndex
:
PVOID
PseudoTagEntries
:
PHEAP_PSEUDO_TAG_ENTRY
FreeLists
:
LIST_ENTRY
LockVariable
:
PHEAP_LOCK
CommitRoutine
:
LONG*
FrontEndHeap
:
PVOID
FrontHeapLockCount
:
USHORT
FrontEndHeapType
:
UCHAR
Counters
:
HEAP_COUNTERS
TuningParameters
:
HEAP_TUNING_PARAMETERS
HEAP
:
struct _HEAP
Entry
:
HEAP_ENTRY
SegmentSignature
:
ULONG
SegmentFlags
:
ULONG
SegmentListEntry
:
LIST_ENTRY
Heap
:
struct _HEAP*
BaseAddress
:
PVOID
NumberOfPages
:
ULONG
FirstEntry
:
PHEAP_ENTRY
LastValidEntry
:
PHEAP_ENTRY
NumberOfUnCommittedPages
:
ULONG
NumberOfUnCommittedRanges
:
ULONG
SegmentAllocatorBackTraceIndex
:
USHORT
Reserved
:
USHORT
UCRSegmentList
:
LIST_ENTRY
Flags
:
ULONG
ForceFlags
:
ULONG
CompatibilityFlags
:
ULONG
EncodeFlagMask
:
ULONG
Encoding
:
HEAP_ENTRY
PointerKey
:
ULONG
Interceptor
:
ULONG
VirtualMemoryThreshold
:
ULONG
Signature
:
ULONG
SegmentReserve
:
ULONG
SegmentCommit
:
ULONG
DeCommitFreeBlockThreshold
:
ULONG
DeCommitTotalFreeThreshold
:
ULONG
TotalFreeSize
:
ULONG
MaximumAllocationSize
:
ULONG
ProcessHeapsListIndex
:
USHORT
HeaderValidateLength
:
USHORT
HeaderValidateCopy
:
PVOID
NextAvailableTagIndex
:
USHORT
MaximumTagIndex
:
USHORT
TagEntries
:
PHEAP_TAG_ENTRY
UCRList
:
LIST_ENTRY
AlignRound
:
ULONG
AlignMask
:
ULONG
VirtualAllocdBlocks
:
LIST_ENTRY
SegmentList
:
LIST_ENTRY
AllocatorBackTraceIndex
:
USHORT
NonDedicatedListLength
:
ULONG
BlocksIndex
:
PVOID
UCRIndex
:
PVOID
PseudoTagEntries
:
PHEAP_PSEUDO_TAG_ENTRY
FreeLists
:
LIST_ENTRY
LockVariable
:
PHEAP_LOCK
CommitRoutine
:
LONG*
FrontEndHeap
:
PVOID
FrontHeapLockCount
:
USHORT
FrontEndHeapType
:
UCHAR
Counters
:
HEAP_COUNTERS
TuningParameters
:
HEAP_TUNING_PARAMETERS
_HEAP_FREE_ENTRY_EXTRA
TagIndex
:
USHORT
FreeBackTraceIndex
:
USHORT
HEAP_FREE_ENTRY_EXTRA
:
struct _HEAP_FREE_ENTRY_EXTRA
TagIndex
:
USHORT
FreeBackTraceIndex
:
USHORT
_HEAP_ENTRY_EXTRA
AllocatorBackTraceIndex
:
USHORT
TagIndex
:
USHORT
Settable
:
ULONG
ZeroInit
:
ULONG64
HEAP_ENTRY_EXTRA
:
struct _HEAP_ENTRY_EXTRA
AllocatorBackTraceIndex
:
USHORT
TagIndex
:
USHORT
Settable
:
ULONG
ZeroInit
:
ULONG64
_HEAP_VIRTUAL_ALLOC_ENTRY
Entry
:
LIST_ENTRY
ExtraStuff
:
HEAP_ENTRY_EXTRA
CommitSize
:
ULONG
ReserveSize
:
ULONG
BusyBlock
:
HEAP_ENTRY
HEAP_VIRTUAL_ALLOC_ENTRY
:
struct _HEAP_VIRTUAL_ALLOC_ENTRY
Entry
:
LIST_ENTRY
ExtraStuff
:
HEAP_ENTRY_EXTRA
CommitSize
:
ULONG
ReserveSize
:
ULONG
BusyBlock
:
HEAP_ENTRY
_HARDERROR_RESPONSE_OPTION
OptionAbortRetryIgnore
OptionOk
OptionOkCancel
OptionRetryCancel
OptionYesNo
OptionYesNoCancel
OptionShutdownSystem
OptionOkNoWait
OptionCancelTryContinue
HARDERROR_RESPONSE_OPTION
:
enum _HARDERROR_RESPONSE_OPTION
OptionAbortRetryIgnore
OptionOk
OptionOkCancel
OptionRetryCancel
OptionYesNo
OptionYesNoCancel
OptionShutdownSystem
OptionOkNoWait
OptionCancelTryContinue
_HARDERROR_RESPONSE
ResponseReturnToCaller
ResponseNotHandled
ResponseAbort
ResponseCancel
ResponseIgnore
ResponseNo
ResponseOk
ResponseRetry
ResponseYes
ResponseTryAgain
ResponseContinue
HARDERROR_RESPONSE
:
enum _HARDERROR_RESPONSE
ResponseReturnToCaller
ResponseNotHandled
ResponseAbort
ResponseCancel
ResponseIgnore
ResponseNo
ResponseOk
ResponseRetry
ResponseYes
ResponseTryAgain
ResponseContinue
_ALTERNATIVE_ARCHITECTURE_TYPE
StandardDesign
NEC98x86
EndAlternatives
ALTERNATIVE_ARCHITECTURE_TYPE
:
enum _ALTERNATIVE_ARCHITECTURE_TYPE
StandardDesign
NEC98x86
EndAlternatives
_KUSER_SHARED_DATA
TickCountLowDeprecated
:
ULONG
TickCountMultiplier
:
ULONG
InterruptTime
:
volatile KSYSTEM_TIME
SystemTime
:
volatile KSYSTEM_TIME
TimeZoneBias
:
volatile KSYSTEM_TIME
ImageNumberLow
:
USHORT
ImageNumberHigh
:
USHORT
NtSystemRoot
:
WCHAR[260]
MaxStackTraceDepth
:
ULONG
CryptoExponent
:
ULONG
TimeZoneId
:
ULONG
LargePageMinimum
:
ULONG
Reserved2
:
ULONG[7]
NtProductType
:
ULONG
ProductTypeIsValid
:
BOOLEAN
NtMajorVersion
:
ULONG
NtMinorVersion
:
ULONG
ProcessorFeatures
:
BOOLEAN[PROCESSOR_FEATURE_MAX]
Reserved1
:
ULONG
Reserved3
:
ULONG
TimeSlip
:
volatile ULONG
AlternativeArchitecture
:
ALTERNATIVE_ARCHITECTURE_TYPE
SystemExpirationDate
:
LARGE_INTEGER
SuiteMask
:
ULONG
KdDebuggerEnabled
:
BOOLEAN
NXSupportPolicy
:
UCHAR
ActiveConsoleId
:
volatile ULONG
DismountCount
:
volatile ULONG
ComPlusPackage
:
ULONG
LastSystemRITEventTickCount
:
ULONG
NumberOfPhysicalPages
:
ULONG
SafeBootMode
:
BOOLEAN
(anonymous)
TscQpcPad
:
UCHAR[2]
(anonymous)
DataFlagsPad
:
ULONG[1]
TestRetInstruction
:
ULONGLONG
SystemCall
:
ULONG
SystemCallReturn
:
ULONG
SystemCallPad
:
ULONGLONG[3]
(anonymous)
Cookie
:
ULONG
CookiePad
:
ULONG[1]
ConsoleSessionForegroundProcessId
:
LONGLONG
Wow64SharedInformation
:
ULONG[MAX_WOW64_SHARED_ENTRIES]
UserModeGlobalLogger
:
USHORT[16]
ImageFileExecutionOptions
:
ULONG
LangGenerationCount
:
ULONG
(anonymous)
InterruptTimeBias
:
volatile ULONG64
TscQpcBias
:
volatile ULONG64
ActiveProcessorCount
:
volatile ULONG
ActiveGroupCount
:
volatile USHORT
Reserved4
:
USHORT
AitSamplingValue
:
volatile ULONG
AppCompatFlag
:
volatile ULONG
SystemDllNativeRelocation
:
ULONGLONG
SystemDllWowRelocation
:
ULONG
XStatePad
:
ULONG[1]
XState
:
XSTATE_CONFIGURATION
KUSER_SHARED_DATA
:
struct _KUSER_SHARED_DATA
TickCountLowDeprecated
:
ULONG
TickCountMultiplier
:
ULONG
InterruptTime
:
volatile KSYSTEM_TIME
SystemTime
:
volatile KSYSTEM_TIME
TimeZoneBias
:
volatile KSYSTEM_TIME
ImageNumberLow
:
USHORT
ImageNumberHigh
:
USHORT
NtSystemRoot
:
WCHAR[260]
MaxStackTraceDepth
:
ULONG
CryptoExponent
:
ULONG
TimeZoneId
:
ULONG
LargePageMinimum
:
ULONG
Reserved2
:
ULONG[7]
NtProductType
:
ULONG
ProductTypeIsValid
:
BOOLEAN
NtMajorVersion
:
ULONG
NtMinorVersion
:
ULONG
ProcessorFeatures
:
BOOLEAN[PROCESSOR_FEATURE_MAX]
Reserved1
:
ULONG
Reserved3
:
ULONG
TimeSlip
:
volatile ULONG
AlternativeArchitecture
:
ALTERNATIVE_ARCHITECTURE_TYPE
SystemExpirationDate
:
LARGE_INTEGER
SuiteMask
:
ULONG
KdDebuggerEnabled
:
BOOLEAN
NXSupportPolicy
:
UCHAR
ActiveConsoleId
:
volatile ULONG
DismountCount
:
volatile ULONG
ComPlusPackage
:
ULONG
LastSystemRITEventTickCount
:
ULONG
NumberOfPhysicalPages
:
ULONG
SafeBootMode
:
BOOLEAN
(anonymous)
TscQpcPad
:
UCHAR[2]
(anonymous)
DataFlagsPad
:
ULONG[1]
TestRetInstruction
:
ULONGLONG
SystemCall
:
ULONG
SystemCallReturn
:
ULONG
SystemCallPad
:
ULONGLONG[3]
(anonymous)
Cookie
:
ULONG
CookiePad
:
ULONG[1]
ConsoleSessionForegroundProcessId
:
LONGLONG
Wow64SharedInformation
:
ULONG[MAX_WOW64_SHARED_ENTRIES]
UserModeGlobalLogger
:
USHORT[16]
ImageFileExecutionOptions
:
ULONG
LangGenerationCount
:
ULONG
(anonymous)
InterruptTimeBias
:
volatile ULONG64
TscQpcBias
:
volatile ULONG64
ActiveProcessorCount
:
volatile ULONG
ActiveGroupCount
:
volatile USHORT
Reserved4
:
USHORT
AitSamplingValue
:
volatile ULONG
AppCompatFlag
:
volatile ULONG
SystemDllNativeRelocation
:
ULONGLONG
SystemDllWowRelocation
:
ULONG
XStatePad
:
ULONG[1]
XState
:
XSTATE_CONFIGURATION
GetKUserSharedData
(
)
{...}
:
__inline struct _KUSER_SHARED_DATA*
NtGetTickCount
(
)
{...}
:
ULONG
_RTL_PROCESS_REFLECTION_INFORMATION
Process
:
HANDLE
Thread
:
HANDLE
ClientId
:
CLIENT_ID
RTL_PROCESS_REFLECTION_INFORMATION
:
struct _RTL_PROCESS_REFLECTION_INFORMATION
Process
:
HANDLE
Thread
:
HANDLE
ClientId
:
CLIENT_ID
_VM_COUNTERS
PeakVirtualSize
:
SIZE_T
VirtualSize
:
SIZE_T
PageFaultCount
:
ULONG
PeakWorkingSetSize
:
SIZE_T
WorkingSetSize
:
SIZE_T
QuotaPeakPagedPoolUsage
:
SIZE_T
QuotaPagedPoolUsage
:
SIZE_T
QuotaPeakNonPagedPoolUsage
:
SIZE_T
QuotaNonPagedPoolUsage
:
SIZE_T
PagefileUsage
:
SIZE_T
PeakPagefileUsage
:
SIZE_T
PrivatePageCount
:
SIZE_T
VM_COUNTERS
:
struct _VM_COUNTERS
PeakVirtualSize
:
SIZE_T
VirtualSize
:
SIZE_T
PageFaultCount
:
ULONG
PeakWorkingSetSize
:
SIZE_T
WorkingSetSize
:
SIZE_T
QuotaPeakPagedPoolUsage
:
SIZE_T
QuotaPagedPoolUsage
:
SIZE_T
QuotaPeakNonPagedPoolUsage
:
SIZE_T
QuotaNonPagedPoolUsage
:
SIZE_T
PagefileUsage
:
SIZE_T
PeakPagefileUsage
:
SIZE_T
PrivatePageCount
:
SIZE_T
PVM_COUNTERS
:
VM_COUNTERS*
_IO_COUNTERS
ReadOperationCount
:
ULONGLONG
WriteOperationCount
:
ULONGLONG
OtherOperationCount
:
ULONGLONG
ReadTransferCount
:
ULONGLONG
WriteTransferCount
:
ULONGLONG
OtherTransferCount
:
ULONGLONG
IO_COUNTERS
:
struct _IO_COUNTERS
ReadOperationCount
:
ULONGLONG
WriteOperationCount
:
ULONGLONG
OtherOperationCount
:
ULONGLONG
ReadTransferCount
:
ULONGLONG
WriteTransferCount
:
ULONGLONG
OtherTransferCount
:
ULONGLONG
PIO_COUNTERS
:
IO_COUNTERS*
_SYSTEM_PROCESSES_INFORMATION
NextEntryDelta
:
ULONG
ThreadCount
:
ULONG
SpareLi1
:
LARGE_INTEGER
SpareLi2
:
LARGE_INTEGER
SpareLi3
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
ImageName
:
UNICODE_STRING
BasePriority
:
KPRIORITY
UniqueProcessId
:
HANDLE
InheritedFromUniqueProcessId
:
HANDLE
HandleCount
:
ULONG
SessionId
:
ULONG
PageDirectoryBase
:
ULONG_PTR
VmCounters
:
VM_COUNTERS
IoCounters
:
IO_COUNTERS
Threads
:
SYSTEM_THREAD_INFORMATION[1]
SYSTEM_PROCESSES_INFORMATION
:
struct _SYSTEM_PROCESSES_INFORMATION
NextEntryDelta
:
ULONG
ThreadCount
:
ULONG
SpareLi1
:
LARGE_INTEGER
SpareLi2
:
LARGE_INTEGER
SpareLi3
:
LARGE_INTEGER
CreateTime
:
LARGE_INTEGER
UserTime
:
LARGE_INTEGER
KernelTime
:
LARGE_INTEGER
ImageName
:
UNICODE_STRING
BasePriority
:
KPRIORITY
UniqueProcessId
:
HANDLE
InheritedFromUniqueProcessId
:
HANDLE
HandleCount
:
ULONG
SessionId
:
ULONG
PageDirectoryBase
:
ULONG_PTR
VmCounters
:
VM_COUNTERS
IoCounters
:
IO_COUNTERS
Threads
:
SYSTEM_THREAD_INFORMATION[1]
_DBGKM_EXCEPTION
ExceptionRecord
:
EXCEPTION_RECORD
FirstChance
:
ULONG
DBGKM_EXCEPTION
:
struct _DBGKM_EXCEPTION
ExceptionRecord
:
EXCEPTION_RECORD
FirstChance
:
ULONG
_DBGKM_CREATE_THREAD
SubSystemKey
:
ULONG
StartAddress
:
PVOID
DBGKM_CREATE_THREAD
:
struct _DBGKM_CREATE_THREAD
SubSystemKey
:
ULONG
StartAddress
:
PVOID
_DBGKM_CREATE_PROCESS
SubSystemKey
:
ULONG
FileHandle
:
HANDLE
BaseOfImage
:
PVOID
DebugInfoFileOffset
:
ULONG
DebugInfoSize
:
ULONG
InitialThread
:
DBGKM_CREATE_THREAD
DBGKM_CREATE_PROCESS
:
struct _DBGKM_CREATE_PROCESS
SubSystemKey
:
ULONG
FileHandle
:
HANDLE
BaseOfImage
:
PVOID
DebugInfoFileOffset
:
ULONG
DebugInfoSize
:
ULONG
InitialThread
:
DBGKM_CREATE_THREAD
_DBGKM_EXIT_THREAD
ExitStatus
:
NTSTATUS
DBGKM_EXIT_THREAD
:
struct _DBGKM_EXIT_THREAD
ExitStatus
:
NTSTATUS
_DBGKM_EXIT_PROCESS
ExitStatus
:
NTSTATUS
DBGKM_EXIT_PROCESS
:
struct _DBGKM_EXIT_PROCESS
ExitStatus
:
NTSTATUS
_DBGKM_LOAD_DLL
FileHandle
:
HANDLE
BaseOfDll
:
PVOID
DebugInfoFileOffset
:
ULONG
DebugInfoSize
:
ULONG
NamePointer
:
PVOID
DBGKM_LOAD_DLL
:
struct _DBGKM_LOAD_DLL
FileHandle
:
HANDLE
BaseOfDll
:
PVOID
DebugInfoFileOffset
:
ULONG
DebugInfoSize
:
ULONG
NamePointer
:
PVOID
_DBGKM_UNLOAD_DLL
BaseAddress
:
PVOID
DBGKM_UNLOAD_DLL
:
struct _DBGKM_UNLOAD_DLL
BaseAddress
:
PVOID
_DBG_STATE
DbgIdle
DbgReplyPending
DbgCreateThreadStateChange
DbgCreateProcessStateChange
DbgExitThreadStateChange
DbgExitProcessStateChange
DbgExceptionStateChange
DbgBreakpointStateChange
DbgSingleStepStateChange
DbgLoadDllStateChange
DbgUnloadDllStateChange
DBG_STATE
:
enum _DBG_STATE
DbgIdle
DbgReplyPending
DbgCreateThreadStateChange
DbgCreateProcessStateChange
DbgExitThreadStateChange
DbgExitProcessStateChange
DbgExceptionStateChange
DbgBreakpointStateChange
DbgSingleStepStateChange
DbgLoadDllStateChange
DbgUnloadDllStateChange
_DBGUI_CREATE_THREAD
HandleToThread
:
HANDLE
NewThread
:
DBGKM_CREATE_THREAD
DBGUI_CREATE_THREAD
:
struct _DBGUI_CREATE_THREAD
HandleToThread
:
HANDLE
NewThread
:
DBGKM_CREATE_THREAD
_DBGUI_CREATE_PROCESS
HandleToProcess
:
HANDLE
HandleToThread
:
HANDLE
NewProcess
:
DBGKM_CREATE_PROCESS
DBGUI_CREATE_PROCESS
:
struct _DBGUI_CREATE_PROCESS
HandleToProcess
:
HANDLE
HandleToThread
:
HANDLE
NewProcess
:
DBGKM_CREATE_PROCESS
_DBGUI_WAIT_STATE_CHANGE
NewState
:
DBG_STATE
AppClientId
:
CLIENT_ID
(anonymous)
DBGUI_WAIT_STATE_CHANGE
:
struct _DBGUI_WAIT_STATE_CHANGE
NewState
:
DBG_STATE
AppClientId
:
CLIENT_ID
(anonymous)
_DEBUGOBJECTINFOCLASS
DebugObjectFlags
MaxDebugObjectInfoClass
DEBUGOBJECTINFOCLASS
:
enum _DEBUGOBJECTINFOCLASS
DebugObjectFlags
MaxDebugObjectInfoClass
_RTL_HEAP_TAG_INFO
NumberOfAllocations
:
ULONG
NumberOfFrees
:
ULONG
BytesAllocated
:
SIZE_T
RTL_HEAP_TAG_INFO
:
struct _RTL_HEAP_TAG_INFO
NumberOfAllocations
:
ULONG
NumberOfFrees
:
ULONG
BytesAllocated
:
SIZE_T
_RTL_HEAP_USAGE_ENTRY
Next
:
struct _RTL_HEAP_USAGE_ENTRY*
Address
:
PVOID
Size
:
SIZE_T
AllocatorBackTraceIndex
:
USHORT
TagIndex
:
USHORT
RTL_HEAP_USAGE_ENTRY
:
struct _RTL_HEAP_USAGE_ENTRY
Next
:
struct _RTL_HEAP_USAGE_ENTRY*
Address
:
PVOID
Size
:
SIZE_T
AllocatorBackTraceIndex
:
USHORT
TagIndex
:
USHORT
_RTL_HEAP_USAGE
Length
:
ULONG
BytesAllocated
:
SIZE_T
BytesCommitted
:
SIZE_T
BytesReserved
:
SIZE_T
BytesReservedMaximum
:
SIZE_T
Entries
:
PRTL_HEAP_USAGE_ENTRY
AddedEntries
:
PRTL_HEAP_USAGE_ENTRY
RemovedEntries
:
PRTL_HEAP_USAGE_ENTRY
Reserved
:
ULONG_PTR[8]
RTL_HEAP_USAGE
:
struct _RTL_HEAP_USAGE
Length
:
ULONG
BytesAllocated
:
SIZE_T
BytesCommitted
:
SIZE_T
BytesReserved
:
SIZE_T
BytesReservedMaximum
:
SIZE_T
Entries
:
PRTL_HEAP_USAGE_ENTRY
AddedEntries
:
PRTL_HEAP_USAGE_ENTRY
RemovedEntries
:
PRTL_HEAP_USAGE_ENTRY
Reserved
:
ULONG_PTR[8]
_RTL_HEAP_WALK_ENTRY
DataAddress
:
PVOID
DataSize
:
SIZE_T
OverheadBytes
:
UCHAR
SegmentIndex
:
UCHAR
Flags
:
USHORT
(anonymous)
RTL_HEAP_WALK_ENTRY
:
struct _RTL_HEAP_WALK_ENTRY
DataAddress
:
PVOID
DataSize
:
SIZE_T
OverheadBytes
:
UCHAR
SegmentIndex
:
UCHAR
Flags
:
USHORT
(anonymous)
_HEAP_DEBUGGING_INFORMATION
InterceptorFunction
:
PVOID
InterceptorValue
:
USHORT
ExtendedOptions
:
ULONG
StackTraceDepth
:
ULONG
MinTotalBlockSize
:
SIZE_T
MaxTotalBlockSize
:
SIZE_T
HeapLeakEnumerationRoutine
:
PRTL_HEAP_LEAK_ENUMERATION_ROUTINE
HEAP_DEBUGGING_INFORMATION
:
struct _HEAP_DEBUGGING_INFORMATION
InterceptorFunction
:
PVOID
InterceptorValue
:
USHORT
ExtendedOptions
:
ULONG
StackTraceDepth
:
ULONG
MinTotalBlockSize
:
SIZE_T
MaxTotalBlockSize
:
SIZE_T
HeapLeakEnumerationRoutine
:
PRTL_HEAP_LEAK_ENUMERATION_ROUTINE
_RTL_MEMORY_ZONE_SEGMENT
NextSegment
:
struct _RTL_MEMORY_ZONE_SEGMENT*
Size
:
SIZE_T
Next
:
PVOID
Limit
:
PVOID
RTL_MEMORY_ZONE_SEGMENT
:
struct _RTL_MEMORY_ZONE_SEGMENT
NextSegment
:
struct _RTL_MEMORY_ZONE_SEGMENT*
Size
:
SIZE_T
Next
:
PVOID
Limit
:
PVOID
_RTL_MEMORY_ZONE
Segment
:
RTL_MEMORY_ZONE_SEGMENT
Lock
:
RTL_SRWLOCK
LockCount
:
ULONG
FirstSegment
:
PRTL_MEMORY_ZONE_SEGMENT
RTL_MEMORY_ZONE
:
struct _RTL_MEMORY_ZONE
Segment
:
RTL_MEMORY_ZONE_SEGMENT
Lock
:
RTL_SRWLOCK
LockCount
:
ULONG
FirstSegment
:
PRTL_MEMORY_ZONE_SEGMENT
_RTL_PROCESS_VERIFIER_OPTIONS
SizeStruct
:
ULONG
Option
:
ULONG
OptionData
:
UCHAR[1]
RTL_PROCESS_VERIFIER_OPTIONS
:
struct _RTL_PROCESS_VERIFIER_OPTIONS
SizeStruct
:
ULONG
Option
:
ULONG
OptionData
:
UCHAR[1]
_RTL_PROCESS_LOCKS
NumberOfLocks
:
ULONG
Locks
:
RTL_PROCESS_LOCK_INFORMATION[ 1 ]
RTL_PROCESS_LOCKS
:
struct _RTL_PROCESS_LOCKS
NumberOfLocks
:
ULONG
Locks
:
RTL_PROCESS_LOCK_INFORMATION[ 1 ]
_RTL_PROCESS_BACKTRACE_INFORMATION
SymbolicBackTrace
:
PCHAR
TraceCount
:
ULONG
Index
:
USHORT
Depth
:
USHORT
BackTrace
:
PVOID[ MAX_STACK_DEPTH ]
RTL_PROCESS_BACKTRACE_INFORMATION
:
struct _RTL_PROCESS_BACKTRACE_INFORMATION
SymbolicBackTrace
:
PCHAR
TraceCount
:
ULONG
Index
:
USHORT
Depth
:
USHORT
BackTrace
:
PVOID[ MAX_STACK_DEPTH ]
_RTL_PROCESS_BACKTRACES
CommittedMemory
:
ULONG
ReservedMemory
:
ULONG
NumberOfBackTraceLookups
:
ULONG
NumberOfBackTraces
:
ULONG
BackTraces
:
RTL_PROCESS_BACKTRACE_INFORMATION[ 1 ]
RTL_PROCESS_BACKTRACES
:
struct _RTL_PROCESS_BACKTRACES
CommittedMemory
:
ULONG
ReservedMemory
:
ULONG
NumberOfBackTraceLookups
:
ULONG
NumberOfBackTraces
:
ULONG
BackTraces
:
RTL_PROCESS_BACKTRACE_INFORMATION[ 1 ]
_RTL_DEBUG_INFORMATION
SectionHandleClient
:
HANDLE
ViewBaseClient
:
PVOID
ViewBaseTarget
:
PVOID
ViewBaseDelta
:
ULONG_PTR
EventPairClient
:
HANDLE
EventPairTarget
:
HANDLE
TargetProcessId
:
HANDLE
TargetThreadHandle
:
HANDLE
Flags
:
ULONG
OffsetFree
:
SIZE_T
CommitSize
:
SIZE_T
ViewSize
:
SIZE_T
(anonymous)
BackTraces
:
PRTL_PROCESS_BACKTRACES
Heaps
:
PRTL_PROCESS_HEAPS
Locks
:
PRTL_PROCESS_LOCKS
SpecificHeap
:
PVOID
TargetProcessHandle
:
HANDLE
VerifierOptions
:
PRTL_PROCESS_VERIFIER_OPTIONS
ProcessHeap
:
PVOID
CriticalSectionHandle
:
HANDLE
CriticalSectionOwnerThread
:
HANDLE
Reserved
:
PVOID[4]
RTL_DEBUG_INFORMATION
:
struct _RTL_DEBUG_INFORMATION
SectionHandleClient
:
HANDLE
ViewBaseClient
:
PVOID
ViewBaseTarget
:
PVOID
ViewBaseDelta
:
ULONG_PTR
EventPairClient
:
HANDLE
EventPairTarget
:
HANDLE
TargetProcessId
:
HANDLE
TargetThreadHandle
:
HANDLE
Flags
:
ULONG
OffsetFree
:
SIZE_T
CommitSize
:
SIZE_T
ViewSize
:
SIZE_T
(anonymous)
BackTraces
:
PRTL_PROCESS_BACKTRACES
Heaps
:
PRTL_PROCESS_HEAPS
Locks
:
PRTL_PROCESS_LOCKS
SpecificHeap
:
PVOID
TargetProcessHandle
:
HANDLE
VerifierOptions
:
PRTL_PROCESS_VERIFIER_OPTIONS
ProcessHeap
:
PVOID
CriticalSectionHandle
:
HANDLE
CriticalSectionOwnerThread
:
HANDLE
Reserved
:
PVOID[4]
PRTL_MEMORY_STREAM_DATA
:
struct _RTL_MEMORY_STREAM_DATA*
PRTL_MEMORY_STREAM_WITH_VTABLE
:
struct _RTL_MEMORY_STREAM_WITH_VTABLE*
PRTL_OUT_OF_PROCESS_MEMORY_STREAM_DATA
:
struct _RTL_OUT_OF_PROCESS_MEMORY_STREAM_DATA*
NTAPI
:
HRESULT
NTAPI
:
HRESULT
NTAPI
:
HRESULT
NTAPI
:
HRESULT
NTAPI
:
NTSTATUS
_RTL_HANDLE_TABLE_ENTRY
(anonymous)
RTL_HANDLE_TABLE_ENTRY
:
struct _RTL_HANDLE_TABLE_ENTRY
(anonymous)
_RTL_HANDLE_TABLE
MaximumNumberOfHandles
:
ULONG
SizeOfHandleTableEntry
:
ULONG
Reserved
:
ULONG[2]
FreeHandles
:
PRTL_HANDLE_TABLE_ENTRY
CommittedHandles
:
PRTL_HANDLE_TABLE_ENTRY
UnCommittedHandles
:
PRTL_HANDLE_TABLE_ENTRY
MaxReservedHandles
:
PRTL_HANDLE_TABLE_ENTRY
RTL_HANDLE_TABLE
:
struct _RTL_HANDLE_TABLE
MaximumNumberOfHandles
:
ULONG
SizeOfHandleTableEntry
:
ULONG
Reserved
:
ULONG[2]
FreeHandles
:
PRTL_HANDLE_TABLE_ENTRY
CommittedHandles
:
PRTL_HANDLE_TABLE_ENTRY
UnCommittedHandles
:
PRTL_HANDLE_TABLE_ENTRY
MaxReservedHandles
:
PRTL_HANDLE_TABLE_ENTRY
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
PRTL_HANDLE_TABLE_ENTRY
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
REGHANDLE
:
ULONGLONG
PREGHANDLE
:
ULONGLONG*
_EVENT_DATA_DESCRIPTOR
Ptr
:
ULONG_PTR
Size
:
ULONG
Reserved
:
ULONG
EVENT_DATA_DESCRIPTOR
:
struct _EVENT_DATA_DESCRIPTOR
Ptr
:
ULONG_PTR
Size
:
ULONG
Reserved
:
ULONG
_EVENT_DESCRIPTOR
Id
:
USHORT
Version
:
UCHAR
Channel
:
UCHAR
Level
:
UCHAR
Opcode
:
UCHAR
Task
:
USHORT
Keyword
:
ULONGLONG
EVENT_DESCRIPTOR
:
struct _EVENT_DESCRIPTOR
Id
:
USHORT
Version
:
UCHAR
Channel
:
UCHAR
Level
:
UCHAR
Opcode
:
UCHAR
Task
:
USHORT
Keyword
:
ULONGLONG
PCEVENT_DESCRIPTOR
:
const EVENT_DESCRIPTOR*
_EVENT_FILTER_DESCRIPTOR
Ptr
:
ULONG_PTR
Size
:
ULONG
Type
:
ULONG
EVENT_FILTER_DESCRIPTOR
:
struct _EVENT_FILTER_DESCRIPTOR
Ptr
:
ULONG_PTR
Size
:
ULONG
Type
:
ULONG
_CHANNEL_MESSAGE
Text
:
PVOID
Length
:
ULONG
Context
:
PVOID
Base
:
PVOID
(anonymous)
CHANNEL_MESSAGE
:
struct _CHANNEL_MESSAGE
Text
:
PVOID
Length
:
ULONG
Context
:
PVOID
Base
:
PVOID
(anonymous)
_HOTPATCH_HEADER
Signature
:
ULONG
Version
:
ULONG
FixupRgnCount
:
ULONG
FixupRgnRva
:
ULONG
ValidationCount
:
ULONG
ValidationArrayRva
:
ULONG
HookCount
:
ULONG
HookArrayRva
:
ULONG
OrigHotpBaseAddress
:
ULONG_PTR
OrigTargetBaseAddress
:
ULONG_PTR
TargetNameRva
:
ULONG
ModuleIdMethod
:
ULONG
(anonymous)
HOTPATCH_HEADER
:
struct _HOTPATCH_HEADER
Signature
:
ULONG
Version
:
ULONG
FixupRgnCount
:
ULONG
FixupRgnRva
:
ULONG
ValidationCount
:
ULONG
ValidationArrayRva
:
ULONG
HookCount
:
ULONG
HookArrayRva
:
ULONG
OrigHotpBaseAddress
:
ULONG_PTR
OrigTargetBaseAddress
:
ULONG_PTR
TargetNameRva
:
ULONG
ModuleIdMethod
:
ULONG
(anonymous)
_HOTPATCH_MODULE_DATA
HotpatchImageNameLength
:
USHORT
ColdpatchImagePathLength
:
USHORT
NameBuffer
:
WCHAR[ 1 ]
HOTPATCH_MODULE_DATA
:
struct _HOTPATCH_MODULE_DATA
HotpatchImageNameLength
:
USHORT
ColdpatchImagePathLength
:
USHORT
NameBuffer
:
WCHAR[ 1 ]
_HOTPATCH_MODULE_ENTRY
ListEntry
:
struct _TRIPLE_LIST_ENTRY
Data
:
struct _HOTPATCH_MODULE_DATA
HOTPATCH_MODULE_ENTRY
:
struct _HOTPATCH_MODULE_ENTRY
ListEntry
:
struct _TRIPLE_LIST_ENTRY
Data
:
struct _HOTPATCH_MODULE_DATA
_HOTPATCH_HOOK
HookType
:
USHORT
HookOptions
:
USHORT
HookRva
:
ULONG
HotpRva
:
ULONG
ValidationRva
:
ULONG
HOTPATCH_HOOK
:
struct _HOTPATCH_HOOK
HookType
:
USHORT
HookOptions
:
USHORT
HookRva
:
ULONG
HotpRva
:
ULONG
ValidationRva
:
ULONG
_RTL_PATCH_HEADER
PatchList
:
LIST_ENTRY
PatchImageBase
:
PVOID
NextPatch
:
struct _RTL_PATCH_HEADER*
PatchFlags
:
ULONG
PatchRefCount
:
LONG
HotpatchHeader
:
struct _HOTPATCH_HEADER*
TargetDllName
:
UNICODE_STRING
TargetDllBase
:
HANDLE
TargetLdrDataTableEntry
:
PLDR_DATA_TABLE_ENTRY
PatchLdrDataTableEntry
:
PLDR_DATA_TABLE_ENTRY
CodeInfo
:
PSYSTEM_HOTPATCH_CODE_INFORMATION
ColdpatchFileHandle
:
PVOID
HotpatchModuleEntry
:
HOTPATCH_MODULE_ENTRY
RTL_PATCH_HEADER
:
struct _RTL_PATCH_HEADER
PatchList
:
LIST_ENTRY
PatchImageBase
:
PVOID
NextPatch
:
struct _RTL_PATCH_HEADER*
PatchFlags
:
ULONG
PatchRefCount
:
LONG
HotpatchHeader
:
struct _HOTPATCH_HEADER*
TargetDllName
:
UNICODE_STRING
TargetDllBase
:
HANDLE
TargetLdrDataTableEntry
:
PLDR_DATA_TABLE_ENTRY
PatchLdrDataTableEntry
:
PLDR_DATA_TABLE_ENTRY
CodeInfo
:
PSYSTEM_HOTPATCH_CODE_INFORMATION
ColdpatchFileHandle
:
PVOID
HotpatchModuleEntry
:
HOTPATCH_MODULE_ENTRY
_SLIST_HEADER
Alignment
:
ULONGLONG
(anonymous)
SLIST_HEADER
:
union _SLIST_HEADER
Alignment
:
ULONGLONG
(anonymous)
__fastcall
:
PSLIST_ENTRY
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
BOOLEAN
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
ULONG
NTAPI
:
BOOLEAN
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
VOID
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
PRTL_SPLAY_LINKS
NTAPI
:
VOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
BOOLEAN
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
ULONG
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
BOOLEAN
NTAPI
:
SIZE_T
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
USHORT
NTAPI
:
ULONG
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
PVOID
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
ULONG
NTAPI
:
PWSTR
NTAPI
:
NTSTATUS
NTAPI
:
SIZE_T
NTAPI
:
BOOLEAN
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTSTATUS
:
NTSYSAPI
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
HANDLE
NTAPI
:
LOGICAL
NTAPI
:
PRTL_DEBUG_INFORMATION
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PSTR
NTAPI
:
PSTR
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PWSTR
NTAPI
:
PWSTR
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
CHAR
NTAPI
:
LONG
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
WCHAR
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
LONG
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
WCHAR
NTAPI
:
WCHAR
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
STDAPIVCALLTYPE
:
NTSTATUS
STDAPIVCALLTYPE
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
PPREFIX_TABLE_ENTRY
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
PUNICODE_PREFIX_TABLE_ENTRY
NTAPI
:
PUNICODE_PREFIX_TABLE_ENTRY
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PRTL_USER_PROCESS_PARAMETERS
NTAPI
:
PRTL_USER_PROCESS_PARAMETERS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
PIMAGE_NT_HEADERS
NTAPI
:
PVOID
NTAPI
:
PIMAGE_SECTION_HEADER
NTAPI
:
NTSTATUS
NTAPI
:
PIMAGE_SECTION_HEADER
NTAPI
:
PVOID
NTAPI
:
VOID
__fastcall
:
VOID
NTAPI
:
SIZE_T
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
LONG
NTAPI
:
LONG
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
CCHAR
NTAPI
:
CCHAR
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
ULONG
NTAPI
:
PVOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PSID_IDENTIFIER_AUTHORITY
NTAPI
:
PULONG
NTAPI
:
PUCHAR
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
ULONG
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
LONG
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline ULONG
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
LARGE_INTEGER
NTAPI
:
LARGE_INTEGER
NTAPI
:
LARGE_INTEGER
NTAPI
:
LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline LARGE_INTEGER
NTAPI
:
__inline BOOLEAN
NTAPI
:
BOOLEAN
NTAPI
:
PIMAGE_NT_HEADERS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
LOGICAL
NTAPI
:
LOGICAL
NTAPI
:
ULONG
NTAPI
:
LOGICAL
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PIMAGE_BASE_RELOCATION
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
void
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
PVOID
NTAPI
:
PVOID
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
_RTL_UNLOAD_EVENT_TRACE
BaseAddress
:
PVOID
SizeOfImage
:
SIZE_T
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
RTL_UNLOAD_EVENT_TRACE
:
struct _RTL_UNLOAD_EVENT_TRACE
BaseAddress
:
PVOID
SizeOfImage
:
SIZE_T
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
_RTL_UNLOAD_EVENT_TRACE64
BaseAddress
:
ULONGLONG
SizeOfImage
:
ULONGLONG
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
RTL_UNLOAD_EVENT_TRACE64
:
struct _RTL_UNLOAD_EVENT_TRACE64
BaseAddress
:
ULONGLONG
SizeOfImage
:
ULONGLONG
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
_RTL_UNLOAD_EVENT_TRACE32
BaseAddress
:
ULONG
SizeOfImage
:
ULONG
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
RTL_UNLOAD_EVENT_TRACE32
:
struct _RTL_UNLOAD_EVENT_TRACE32
BaseAddress
:
ULONG
SizeOfImage
:
ULONG
Sequence
:
ULONG
TimeDateStamp
:
ULONG
CheckSum
:
ULONG
ImageName
:
WCHAR[32]
NTAPI
:
PRTL_UNLOAD_EVENT_TRACE
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
PRTLP_UNHANDLED_EXCEPTION_FILTER
:
RTLP_UNHANDLED_EXCEPTION_FILTER*
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PCSR_CAPTURE_HEADER
NTAPI
:
VOID
NTAPI
:
ULONG
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
PLARGE_INTEGER
NTAPI
:
VOID
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
PRTL_DEBUG_INFORMATION
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
BOOLEAN
NTAPI
:
void
NTAPI
:
ULONG
NTAPI
:
LONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
ULONG
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
ULONG
NTAPI
:
void
NTAPI
:
NTSTATUS
NTAPI
:
int
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
void
NTAPI
:
PCSR_CAPTURE_HEADER
NTAPI
:
ULONG
NTAPI
:
void
NTAPI
:
void
NTAPI
:
NTSTATUS
NTAPI
:
void
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
HANDLE
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
VOID
NTAPI
:
NTSTATUS
NTAPI
:
NTSTATUS
NTAPI
:
LRESULT
NTAPI
:
LRESULT
NTAPI
:
NTSTATUS
All occurrences
Please wait...
Page is in error, reload to recover
