#include <uLib/NtTypes.h>

Go to the source code of this file.

Classes
struct	PACKED_OBJ_ATTRIBUTES

Macros
#define	NtCurrentPeb() (NtCurrentTeb()->ProcessEnvironmentBlock)

#define	RtlGetProcessHeap() (NtCurrentPeb()->ProcessHeap)

#define	RTL_STACK_WALKING_MODE_FRAMES_TO_SKIP_SHIFT 8

#define	RtlUshortByteSwap(_x) _byteswap_ushort((USHORT)(_x))

#define	RtlUlongByteSwap(_x) _byteswap_ulong((_x))

#define	RtlUlonglongByteSwap(_x) _byteswap_uint64((_x))

#define	RtlUnicodeStringToAnsiSize(S)

#define	RtlUnicodeStringToOemSize(S)

#define	RtlUnicodeStringToCountedOemSize(S)

#define	RtlOemStringToUnicodeSize(S)

#define	RtlOemStringToCountedUnicodeSize(S)

#define	RtlAnsiStringToUnicodeSize(S)

#define	RtlEqualMemory(Destination, Source, Length) (!memcmp( Destination, Source, Length ))

#define	RtlCopyBytes RtlCopyMemory

#define	RtlFillBytes RtlFillMemory

#define	RtlZeroBytes RtlZeroMemory

#define	RtlIsLeftChild(Links) (RtlLeftChild( RtlParent( Links )) == (PRTL_SPLAY_LINKS)(Links))

#define	RtlIsRightChild(Links) (RtlRightChild( RtlParent( Links )) == (PRTL_SPLAY_LINKS)(Links))

#define	RtlRightChild(Links) ((PRTL_SPLAY_LINKS)(Links))->RightChild

#define	RtlIsRoot(Links) (RtlParent( Links ) == (PRTL_SPLAY_LINKS)(Links))

#define	RtlLeftChild(Links) ((PRTL_SPLAY_LINKS)(Links))->LeftChild

#define	RtlParent(Links) ((PRTL_SPLAY_LINKS)(Links))->Parent

#define	RtlInitializeSplayLinks(Links)

#define	RtlInsertAsLeftChild(ParentLinks, ChildLinks)

#define	RtlInsertAsRightChild(ParentLinks, ChildLinks)

Typedefs
typedef struct _PACKED_OBJ_ATTRIBUTES *	PPACKED_OBJ_ATTRIBUTES

typedef bool(__stdcall *	PFnEnumModuleAction) (HANDLE hProcess, const PLDR_MODULE pModule, PVOID Context)

typedef VOID(NTAPI *	PLDR_CALLBACK) (PVOID CallbackContext, PCHAR Name)

Functions
bool	InitNtFunc ()
	InitNtFunc must be called before any of the NTDLL functions can be used. More...

bool	_InitializeObjectAttributes (OUT POBJECT_ATTRIBUTES pObjAttr, IN HANDLE BaseObj, IN PUNICODE_STRING ObjName, IN ULONG Attrib, OPTIN PSECURITY_DESCRIPTOR SecurityDesc, OPTIN PSECURITY_QUALITY_OF_SERVICE SecurityQoS)

PACKED_OBJ_ATTRIBUTES *	AllocPackedObjAttributes (HANDLE BaseObj, PCWSTR ObjName, ULONG Attributes, PSECURITY_DESCRIPTOR SecurityDesc, PSECURITY_QUALITY_OF_SERVICE SecurityQoS)

PPEB	GetPEBAddress (HANDLE hProcess)

bool	GetProcPEB (HANDLE hProcess, OUT PPEB pPeb)

bool	GetProcPathname (DWORD procId, OUT TSTR PathName, UINT ccPathName)

bool	CopyProcUStringBuf (HANDLE hProc, PUNICODE_STRING pProcStr, OUT WSTR wzBuf, UINT ccBuf)

UINT	GetProcDllData (HANDLE hProcess, WCSTR DllName, OUT PLDR_MODULE pModule, bool Localize)

void	FreeLdrModBuffers (PLDR_MODULE pMod)

UINT	EnumProcModules (HANDLE hProcess, PFnEnumModuleAction Action, PVOID Context)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationProcess (IN HANDLE ProcessHandle, IN PROCESSINFOCLASS ProcessInformationClass, OUT PVOID ProcessInformation, IN ULONG ProcessInformationLength, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationThread (IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationJobObject (IN HANDLE JobHandle, IN JOBOBJECTINFOCLASS JobInformationClass, OUT PVOID JobInformation, IN ULONG JobInformationLength, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtCreateProcess (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ParentProcess, IN BOOLEAN InheritObjectTable, OPTIN HANDLE SectionHandle, OPTIN HANDLE DebugPort, OPTIN HANDLE ExceptionPort)

_NTFN_EXTERN NTSTATUS	_NtCreateProcessEx (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ParentProcess, IN ULONG Flags, OPTIN HANDLE SectionHandle, OPTIN HANDLE DebugPort, OPTIN HANDLE ExceptionPort, IN BOOLEAN InJob)

_NTFN_EXTERN NTSTATUS	_NtOpenProcess (OUT PHANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OPTIN PCLIENT_ID ClientId)

_NTFN_EXTERN NTSTATUS	_NtCreateThread (OUT PHANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN HANDLE ProcessHandle, OUT PCLIENT_ID ClientId, IN PCONTEXT ThreadContext, IN PINITIAL_TEB UserStack, IN BOOLEAN CreateSuspended)

_NTFN_EXTERN NTSTATUS	_NtOpenThread (OUT PHANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PCLIENT_ID ClientId)

_NTFN_EXTERN NTSTATUS	_NtAlertThread (IN HANDLE ThreadHandle)

_NTFN_EXTERN NTSTATUS	_NtAlertResumeThread (IN HANDLE ThreadHandle, OPTOUT PULONG SuspendCount)

_NTFN_EXTERN PTEB	_NtCurrentTeb (void)

_NTFN_EXTERN NTSTATUS	_NtImpersonateThread (IN HANDLE ThreadHandle, IN HANDLE ThreadToImpersonate, IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService)

_NTFN_EXTERN NTSTATUS	_NtCreateJobObject (OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtOpenJobObject (OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtCreateJobSet (IN ULONG NumJob, IN PJOB_SET_ARRAY UserJobSet, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_NtAssignProcessToJobObject (IN HANDLE JobHandle, IN HANDLE ProcessHandle)

_NTFN_EXTERN NTSTATUS	_NtIsProcessInJob (IN HANDLE ProcessHandle, OPTIN HANDLE JobHandle)

_NTFN_EXTERN NTSTATUS	_NtApphelpCacheControl (IN APPHELPCACHESERVICECLASS Service, OPTIN PAPPHELP_CACHE_SERVICE_LOOKUP ServiceData)

_NTFN_EXTERN NTSTATUS	_NtClose (IN HANDLE Handle)

_NTFN_EXTERN NTSTATUS	_NtDuplicateObject (IN HANDLE SourceProcessHandle, IN HANDLE SourceHandle, IN HANDLE TargetProcessHandle, OUT PHANDLE TargetHandle, IN ACCESS_MASK DesiredAccess, IN ULONG HandleAttributes, IN ULONG Options)

_NTFN_EXTERN NTSTATUS	_NtMakePermanentObject (IN HANDLE Object)

_NTFN_EXTERN NTSTATUS	_NtMakeTemporaryObject (IN HANDLE Handle)

_NTFN_EXTERN NTSTATUS	_NtQueryObject (OPTIN HANDLE Handle, IN OBJECT_INFORMATION_CLASS ObjectInformationClass, OUT PVOID ObjectInformation, IN ULONG ObjectInformationLength, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtSetInformationObject (IN HANDLE ObjectHandle, IN OBJECT_INFORMATION_CLASS ObjectInformationClass, IN PVOID ObjectInformation, IN ULONG Length)

_NTFN_EXTERN NTSTATUS	_NtQuerySecurityObject (IN HANDLE Handle, IN SECURITY_INFORMATION SecurityInformation, OUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN ULONG Length, OUT PULONG LengthNeeded)

_NTFN_EXTERN NTSTATUS	_NtSetSecurityObject (IN HANDLE Handle, IN SECURITY_INFORMATION SecurityInformation, IN PSECURITY_DESCRIPTOR SecurityDescriptor)

_NTFN_EXTERN NTSTATUS	_NtWaitForSingleObject (IN HANDLE Object, IN BOOLEAN Alertable, IN PLARGE_INTEGER Timeout OPTIONAL)

_NTFN_EXTERN NTSTATUS	_NtSignalAndWaitForSingleObject (IN HANDLE SignalObject, IN HANDLE WaitObject, IN BOOLEAN Alertable, IN PLARGE_INTEGER Time)

_NTFN_EXTERN NTSTATUS	_NtWaitForMultipleObjects (IN ULONG Count, IN HANDLE Object[], IN WAIT_TYPE WaitType, IN BOOLEAN Alertable, IN PLARGE_INTEGER Time)

_NTFN_EXTERN NTSTATUS	_NtWaitForMultipleObjects32 (IN ULONG ObjectCount, IN PLONG Handles, IN WAIT_TYPE WaitType, IN BOOLEAN Alertable, IN PLARGE_INTEGER TimeOut OPTIONAL)

_NTFN_EXTERN NTSTATUS	_NtCreateDirectoryObject (OUT PHANDLE DirectoryHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtOpenDirectoryObject (OUT PHANDLE FileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQueryDirectoryObject (IN HANDLE DirectoryHandle, OUT PVOID Buffer, IN ULONG BufferLength, IN BOOLEAN ReturnSingleEntry, IN BOOLEAN RestartScan, INOUT PULONG Context, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtCreateSymbolicLinkObject (OUT PHANDLE SymbolicLinkHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PUNICODE_STRING Name)

_NTFN_EXTERN NTSTATUS	_NtOpenSymbolicLinkObject (OUT PHANDLE SymbolicLinkHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQuerySymbolicLinkObject (IN HANDLE SymLinkObjHandle, OUT PUNICODE_STRING LinkTarget, OPTOUT PULONG DataWritten)

_NTFN_EXTERN NTSTATUS	_NtCloseObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId OPTIONAL, IN BOOLEAN GenerateOnClose)

_NTFN_EXTERN NTSTATUS	_NtDeleteObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PVOID HandleId OPTIONAL, IN BOOLEAN GenerateOnClose)

_NTFN_EXTERN NTSTATUS	_NtQuerySystemInformation (IN SYSTEM_INFORMATION_CLASS SystemInformationClass, OUT PVOID SystemInformation, IN ULONG InformationLength, OPTOUT PULONG ResultLength)

_NTFN_EXTERN NTSTATUS	_NtSetSystemInformation (IN SYSTEM_INFORMATION_CLASS SystemInformationClass, IN PVOID SystemInformation, IN ULONG SystemInformationLength)

_NTFN_EXTERN NTSTATUS	_NtEnumerateSystemEnvironmentValuesEx (IN ULONG InformationClass, IN PVOID Buffer, IN ULONG BufferLength)

_NTFN_EXTERN NTSTATUS	_NtQuerySystemEnvironmentValue (IN PUNICODE_STRING Name, OUT PWSTR Value, IN ULONG Length, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtQuerySystemEnvironmentValueEx (IN PUNICODE_STRING VariableName, IN LPGUID VendorGuid, IN PVOID Value, INOUT PULONG ReturnLength, INOUT PULONG Attributes)

_NTFN_EXTERN NTSTATUS	_NtSetSystemEnvironmentValue (IN PUNICODE_STRING VariableName, IN PUNICODE_STRING Value)

_NTFN_EXTERN NTSTATUS	_NtSetSystemEnvironmentValueEx (IN PUNICODE_STRING VariableName, IN LPGUID VendorGuid, IN PVOID Value, INOUT PULONG ReturnLength, INOUT PULONG Attributes)

_NTFN_EXTERN NTSTATUS	_NtQueryDefaultUILanguage (OUT LANGID *LanguageId)

_NTFN_EXTERN NTSTATUS	_NtQueryInstallUILanguage (OUT LANGID *LanguageId)

_NTFN_EXTERN NTSTATUS	_NtSetDefaultUILanguage (IN LANGID LanguageId)

_NTFN_EXTERN NTSTATUS	_NtQueryDefaultLocale (IN BOOLEAN UserProfile, OUT PLCID DefaultLocaleId)

_NTFN_EXTERN NTSTATUS	_NtSetDefaultLocale (IN BOOLEAN UserProfile, IN LCID DefaultLocaleId)

_NTFN_EXTERN NTSTATUS	_NtAddAtom (IN PWSTR AtomName, IN ULONG AtomNameLength, INOUT PRTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_NtDeleteAtom (IN RTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_NtFindAtom (IN PWSTR AtomName, IN ULONG AtomNameLength, OPTOUT PRTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationAtom (IN RTL_ATOM Atom, IN ATOM_INFORMATION_CLASS AtomInformationClass, OUT PVOID AtomInformation, IN ULONG AtomInformationLength, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtCreateTimer (OUT PHANDLE TimerHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN TIMER_TYPE TimerType)

_NTFN_EXTERN NTSTATUS	_NtOpenTimer (OUT PHANDLE TimerHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQueryTimer (IN HANDLE TimerHandle, IN TIMER_INFORMATION_CLASS TimerInformationClass, OUT PVOID TimerInformation, IN ULONG Length, OUT PULONG ResultLength)

_NTFN_EXTERN NTSTATUS	_NtSetTimer (IN HANDLE TimerHandle, IN PLARGE_INTEGER DueTime, IN PTIMER_APC_ROUTINE TimerApcRoutine, IN PVOID TimerContext, IN BOOLEAN WakeTimer, OPTIN LONG Period, OPTOUT PBOOLEAN PreviousState)

_NTFN_EXTERN NTSTATUS	_NtCancelTimer (IN HANDLE TimerHandle, OPTOUT PBOOLEAN CurrentState)

_NTFN_EXTERN NTSTATUS	_NtCreateEvent (OUT PHANDLE EventHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN EVENT_TYPE EventType, IN BOOLEAN InitialState)

_NTFN_EXTERN NTSTATUS	_NtOpenEvent (OUT PHANDLE EventHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQueryEvent (IN HANDLE EventHandle, IN EVENT_INFORMATION_CLASS EventInformationClass, OUT PVOID EventInformation, IN ULONG EventInformationLength, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtSetEvent (IN HANDLE EventHandle, OPTOUT PLONG PreviousState)

_NTFN_EXTERN NTSTATUS	_NtResetEvent (IN HANDLE EventHandle, OPTOUT PLONG NumberOfWaitingThreads)

_NTFN_EXTERN NTSTATUS	_NtClearEvent (IN HANDLE EventHandle)

_NTFN_EXTERN NTSTATUS	_NtPulseEvent (IN HANDLE EventHandle, OPTIN PLONG PulseCount)

_NTFN_EXTERN NTSTATUS	_NtCreateKeyedEvent (OUT PHANDLE OutHandle, IN ACCESS_MASK AccessMask, IN POBJECT_ATTRIBUTES ObjectAttributes, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_NtOpenKeyedEvent (OUT PHANDLE OutHandle, IN ACCESS_MASK AccessMask, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtWaitForKeyedEvent (OPTIN HANDLE EventHandle, IN PVOID Key, IN BOOLEAN Alertable, OPTIN PLARGE_INTEGER Timeout)

_NTFN_EXTERN NTSTATUS	_NtReleaseKeyedEvent (OPTIN HANDLE EventHandle, IN PVOID Key, IN BOOLEAN Alertable, OPTIN PLARGE_INTEGER Timeout)

_NTFN_EXTERN NTSTATUS	_NtCreateEventPair (OUT PHANDLE EventPairHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtOpenEventPair (OUT PHANDLE EventPairHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtSetHighEventPair (IN HANDLE EventPair)

_NTFN_EXTERN NTSTATUS	_NtSetLowEventPair (IN HANDLE EventPair)

_NTFN_EXTERN NTSTATUS	_NtSetHighWaitLowEventPair (IN HANDLE EventPair)

_NTFN_EXTERN NTSTATUS	_NtSetLowWaitHighEventPair (IN HANDLE EventPair)

_NTFN_EXTERN NTSTATUS	_NtWaitHighEventPair (IN HANDLE EventPairHandle)

_NTFN_EXTERN NTSTATUS	_NtWaitLowEventPair (IN HANDLE EventPairHandle)

_NTFN_EXTERN NTSTATUS	_NtCreateMutant (OUT PHANDLE MutantHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN BOOLEAN InitialOwner)

_NTFN_EXTERN NTSTATUS	_NtOpenMutant (OUT PHANDLE MutantHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQueryMutant (IN HANDLE MutantHandle, IN MUTANT_INFORMATION_CLASS MutantInformationClass, OUT PVOID MutantInformation, IN ULONG Length, OUT PULONG ResultLength)

_NTFN_EXTERN NTSTATUS	_NtReleaseMutant (IN HANDLE MutantHandle, OPTIN PLONG ReleaseCount)

_NTFN_EXTERN NTSTATUS	_NtCreateSemaphore (OUT PHANDLE SemaphoreHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN LONG InitialCount, IN LONG MaximumCount)

_NTFN_EXTERN NTSTATUS	_NtOpenSemaphore (OUT PHANDLE SemaphoreHandle, IN ACCESS_MASK DesiredAcces, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQuerySemaphore (IN HANDLE SemaphoreHandle, IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass, OUT PVOID SemaphoreInformation, IN ULONG Length, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtReleaseSemaphore (IN HANDLE SemaphoreHandle, IN LONG ReleaseCount, OPTOUT PLONG PreviousCount)

_NTFN_EXTERN NTSTATUS	_NtDisplayString (IN PUNICODE_STRING DisplayString)

_NTFN_EXTERN NTSTATUS	_NtRaiseHardError (IN NTSTATUS ErrorStatus, IN ULONG NumberOfParameters, IN ULONG UnicodeStringParameterMask, IN PULONG_PTR Parameters, IN ULONG ValidResponseOptions, OUT PULONG Response)

_NTFN_EXTERN NTSTATUS	_NtSetDefaultHardErrorPort (IN HANDLE PortHandle)

_NTFN_EXTERN NTSTATUS	_NtShutdownSystem (IN SHUTDOWN_ACTION Action)

_NTFN_EXTERN NTSTATUS	_NtSetEventBoostPriority (IN HANDLE EventHandle)

_NTFN_EXTERN NTSTATUS	_NtSetUuidSeed (IN PUCHAR UuidSeed)

_NTFN_EXTERN NTSTATUS	_NtTraceEvent (IN ULONG TraceHandle, IN ULONG Flags, IN ULONG TraceHeaderLength, IN PEVENT_TRACE_HEADER TraceHeader)

_NTFN_EXTERN ULONG	_NtGetCurrentProcessorNumber (VOID)

_NTFN_EXTERN NTSTATUS	_NtYieldExecution (VOID)

_NTFN_EXTERN NTSTATUS	_NtDelayExecution (IN BOOLEAN Alertable, IN LARGE_INTEGER *Interval)

_NTFN_EXTERN NTSTATUS	_NtRaiseException (IN PEXCEPTION_RECORD ExceptionRecord, IN PCONTEXT Context, IN BOOLEAN SearchFrames)

_NTFN_EXTERN NTSTATUS	_NtContinue (IN PCONTEXT Context, IN BOOLEAN TestAlert)

_NTFN_EXTERN NTSTATUS	_NtW32Call (IN ULONG RoutineIndex, IN PVOID Argument, IN ULONG ArgumentLength, OPTOUT PVOID *Result, OPTOUT PULONG ResultLength)

_NTFN_EXTERN ULONG	_NtGetTickCount (VOID)

_NTFN_EXTERN NTSTATUS	_NtQuerySystemTime (OUT PLARGE_INTEGER CurrentTime)

_NTFN_EXTERN NTSTATUS	_NtSetSystemTime (IN PLARGE_INTEGER SystemTime, OPTIN PLARGE_INTEGER NewSystemTime)

_NTFN_EXTERN NTSTATUS	_NtQueryPerformanceCounter (OUT PLARGE_INTEGER Counter, OPTOUT PLARGE_INTEGER Frequency)

_NTFN_EXTERN NTSTATUS	_NtQueryTimerResolution (OUT PULONG MinimumResolution, OUT PULONG MaximumResolution, OUT PULONG ActualResolution)

_NTFN_EXTERN NTSTATUS	_NtSetTimerResolution (IN ULONG RequestedResolution, IN BOOLEAN SetOrUnset, OUT PULONG ActualResolution)

_NTFN_EXTERN NTSTATUS	_NtGetContextThread (IN HANDLE ThreadHandle, OUT PCONTEXT Context)

_NTFN_EXTERN NTSTATUS	_NtSetContextThread (IN HANDLE ThreadHandle, IN PCONTEXT Context)

_NTFN_EXTERN NTSTATUS	_NtCreateProfile (OUT PHANDLE ProfileHandle, IN HANDLE ProcessHandle, IN PVOID ImageBase, IN SIZE_T ImageSize, IN ULONG Granularity, OUT PVOID Buffer, IN ULONG ProfilingSize, IN KPROFILE_SOURCE Source, IN KAFFINITY ProcessorMask)

_NTFN_EXTERN NTSTATUS	_NtCreateProfileEx (OUT PHANDLE ProfileHandle, IN HANDLE ProcessHandle, IN PVOID ImageBase, IN SIZE_T ImageSize, IN ULONG Granularity, OUT PVOID Buffer, IN ULONG ProfilingSize, IN KPROFILE_SOURCE Source, IN USHORT GroupCount, IN PGROUP_AFFINITY Affinity)

_NTFN_EXTERN NTSTATUS	_NtStartProfile (IN HANDLE ProfileHandle)

_NTFN_EXTERN NTSTATUS	_NtStopProfile (IN HANDLE ProfileHandle)

_NTFN_EXTERN NTSTATUS	_NtQueryIntervalProfile (IN KPROFILE_SOURCE ProfileSource, OUT PULONG Interval)

_NTFN_EXTERN NTSTATUS	_NtSetIntervalProfile (IN ULONG Interval, IN KPROFILE_SOURCE ClockSource)

_NTFN_EXTERN NTSTATUS	_NtQueueApcThread (IN HANDLE ThreadHandle, IN PKNORMAL_ROUTINE ApcRoutine, OPTIN PVOID NormalContext, OPTIN PVOID SystemArgument1, OPTIN PVOID SystemArgument2)

_NTFN_EXTERN NTSTATUS	_NtTestAlert (VOID)

_NTFN_EXTERN NTSTATUS	_NtCallbackReturn (OPTIN PVOID Result, IN ULONG ResultLength, IN NTSTATUS Status)

_NTFN_EXTERN NTSTATUS	_NtSetLdtEntries (IN ULONG Selector1, IN LDT_ENTRY LdtEntry1, IN ULONG Selector2, IN LDT_ENTRY LdtEntry2)

_NTFN_EXTERN NTSTATUS	_NtVdmControl (IN ULONG ControlCode, IN PVOID ControlData)

_NTFN_EXTERN NTSTATUS	_NtQueryDebugFilterState (ULONG ComponentId, ULONG Level)

_NTFN_EXTERN NTSTATUS	_NtSetDebugFilterState (ULONG ComponentId, ULONG Level, BOOLEAN State)

_NTFN_EXTERN NTSTATUS	_NtSystemDebugControl (SYSDBG_COMMAND ControlCode, PVOID InputBuffer, ULONG InputBufferLength, PVOID OutputBuffer, ULONG OutputBufferLength, PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtDebugActiveProcess (IN HANDLE Process, IN HANDLE DebugObject)

_NTFN_EXTERN NTSTATUS	_NtRemoveProcessDebug (IN HANDLE Process, IN HANDLE DebugObject)

_NTFN_EXTERN NTSTATUS	_NtCreateDebugObject (OUT PHANDLE DebugHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_NtDebugContinue (IN HANDLE DebugObject, IN PCLIENT_ID AppClientId, IN NTSTATUS ContinueStatus)

_NTFN_EXTERN NTSTATUS	_NtWaitForDebugEvent (IN HANDLE DebugObject, IN BOOLEAN Alertable, OPTIN PLARGE_INTEGER Timeout, OUT PDBGUI_WAIT_STATE_CHANGE StateChange)

_NTFN_EXTERN NTSTATUS	_NtSetInformationDebugObject (IN HANDLE DebugObject, IN DEBUGOBJECTINFOCLASS InformationClass, IN PVOID Information, IN ULONG InformationLength, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_DbgUiConnectToDbg (VOID)

_NTFN_EXTERN NTSTATUS	_DbgUiDebugActiveProcess (IN HANDLE Process)

_NTFN_EXTERN NTSTATUS	_DbgUiStopDebugging (IN HANDLE Process)

_NTFN_EXTERN VOID	_DbgBreakPointWithStatus (IN ULONG Status)

_NTFN_EXTERN NTSTATUS	_DbgUiContinue (IN PCLIENT_ID ClientId, IN NTSTATUS ContinueStatus)

_NTFN_EXTERN NTSTATUS	_DbgUiWaitStateChange (IN PDBGUI_WAIT_STATE_CHANGE DbgUiWaitStateCange, IN PLARGE_INTEGER TimeOut)

_NTFN_EXTERN NTSTATUS	_DbgUiConvertStateChangeStructure (IN PDBGUI_WAIT_STATE_CHANGE WaitStateChange, IN PVOID DebugEvent)

_NTFN_EXTERN VOID	_DbgUiRemoteBreakin (VOID)

_NTFN_EXTERN NTSTATUS	_DbgUiIssueRemoteBreakin (IN HANDLE Process)

_NTFN_EXTERN HANDLE	_DbgUiGetThreadDebugObject (VOID)

_NTFN_EXTERN NTSTATUS	_NtCreateFile (OUT PHANDLE FileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PIO_STATUS_BLOCK IoStatusBlock, OPTIN PLARGE_INTEGER AllocationSize, IN ULONG FileAttributes, IN ULONG ShareAccess, IN ULONG CreateDisposition, IN ULONG CreateOptions, IN PVOID EaBuffer, IN ULONG EaLength)

_NTFN_EXTERN NTSTATUS	_NtOpenFile (OUT PHANDLE FileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG ShareAccess, IN ULONG OpenOptions)

_NTFN_EXTERN NTSTATUS	_NtDeleteFile (IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtLockFile (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PLARGE_INTEGER ByteOffset, IN PLARGE_INTEGER Length, IN ULONG Key, IN BOOLEAN FailImmediatedly, IN BOOLEAN ExclusiveLock)

_NTFN_EXTERN NTSTATUS	_NtUnlockFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PLARGE_INTEGER ByteOffset, IN PLARGE_INTEGER Length, IN ULONG Key)

_NTFN_EXTERN NTSTATUS	_NtReadFile (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID Buffer, IN ULONG Length, OPTIN PLARGE_INTEGER ByteOffset, OPTIN PULONG Key)

_NTFN_EXTERN NTSTATUS	_NtReadFileScatter (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE UserApcRoutine, OPTIN PVOID UserApcContext, OUT PIO_STATUS_BLOCK UserIoStatusBlock, IN FILE_SEGMENT_ELEMENT BufferDescription[], IN ULONG BufferLength, IN PLARGE_INTEGER ByteOffset, OPTIN PULONG Key)

_NTFN_EXTERN NTSTATUS	_NtWriteFile (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PVOID Buffer, IN ULONG Length, OPTIN PLARGE_INTEGER ByteOffset, OPTIN PULONG Key)

_NTFN_EXTERN NTSTATUS	_NtWriteFileGather (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, IN FILE_SEGMENT_ELEMENT BufferDescription[], IN ULONG BufferLength, IN PLARGE_INTEGER ByteOffset, OPTIN PULONG Key)

_NTFN_EXTERN NTSTATUS	_NtCancelIoFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock)

_NTFN_EXTERN NTSTATUS	_NtFlushBuffersFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock)

_NTFN_EXTERN NTSTATUS	_NtFlushWriteBuffer (VOID)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID FileInformation, IN ULONG Length, IN FILE_INFORMATION_CLASS FileInformationClass)

_NTFN_EXTERN NTSTATUS	_NtSetInformationFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PVOID FileInformation, IN ULONG Length, IN FILE_INFORMATION_CLASS FileInformationClass)

_NTFN_EXTERN NTSTATUS	_NtQueryEaFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID Buffer, IN ULONG Length, IN BOOLEAN ReturnSingleEntry, OPTIN PVOID EaList, IN ULONG EaListLength, OPTIN PULONG EaIndex, IN BOOLEAN RestartScan)

_NTFN_EXTERN NTSTATUS	_NtSetEaFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PVOID EaBuffer, IN ULONG EaBufferSize)

_NTFN_EXTERN NTSTATUS	_NtQueryAttributesFile (IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PFILE_BASIC_INFORMATION FileInformation)

_NTFN_EXTERN NTSTATUS	_NtQueryFullAttributesFile (IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation)

_NTFN_EXTERN NTSTATUS	_NtCreateMailslotFile (OUT PHANDLE MailSlotFileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG FileAttributes, IN ULONG ShareAccess, IN ULONG MaxMessageSize, IN PLARGE_INTEGER TimeOut)

_NTFN_EXTERN NTSTATUS	_NtCreateNamedPipeFile (OUT PHANDLE NamedPipeFileHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG ShareAccess, IN ULONG CreateDisposition, IN ULONG CreateOptions, IN ULONG WriteModeMessage, IN ULONG ReadModeMessage, IN ULONG NonBlocking, IN ULONG MaxInstances, IN ULONG InBufferSize, IN ULONG OutBufferSize, IN PLARGE_INTEGER DefaultTimeOut)

_NTFN_EXTERN NTSTATUS	_NtQueryDirectoryFile (IN HANDLE DirectoryFileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID FileInformation, IN ULONG Length, IN FILE_INFORMATION_CLASS FileInformationClass, IN BOOLEAN ReturnSingleEntry, OPTIN PUNICODE_STRING FileNamePattern, IN BOOLEAN RestartScan)

_NTFN_EXTERN NTSTATUS	_NtNotifyChangeDirectoryFile (IN HANDLE DirectoryFileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID Buffer, IN ULONG BufferSize, IN ULONG CompletionFilter, IN BOOLEAN WatchTree)

_NTFN_EXTERN NTSTATUS	_NtQueryVolumeInformationFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID FsInformation, IN ULONG Length, IN FS_INFORMATION_CLASS FsInformationClass)

_NTFN_EXTERN NTSTATUS	_NtSetVolumeInformationFile (IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PVOID FsInformation, IN ULONG Length, IN FS_INFORMATION_CLASS FsInformationClass)

_NTFN_EXTERN NTSTATUS	_NtQueryQuotaInformationFile (IN HANDLE VolumeFileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID Buffer, IN ULONG Length, IN BOOLEAN ReturnSingleEntry, IN PVOID SidList, IN ULONG SidListLength, IN PSID StartSid, IN BOOLEAN RestartScan)

_NTFN_EXTERN NTSTATUS	_NtSetQuotaInformationFile (HANDLE VolumeFileHandle, PIO_STATUS_BLOCK IoStatusBlock, PVOID Buffer, ULONG BufferLength)

_NTFN_EXTERN NTSTATUS	_NtCreateIoCompletion (OUT PHANDLE IoCompletionHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN ULONG NumberOfConcurrentThreads)

_NTFN_EXTERN NTSTATUS	_NtOpenIoCompletion (OUT PHANDLE CompetionPort, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQueryIoCompletion (IN HANDLE IoCompletionHandle, IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass, OUT PVOID IoCompletionInformation, IN ULONG IoCompletionInformationLength, OUT OPTIONAL PULONG ResultLength)

_NTFN_EXTERN NTSTATUS	_NtSetIoCompletion (IN HANDLE IoCompletionPortHandle, IN PVOID CompletionKey, IN PVOID CompletionContext, IN NTSTATUS CompletionStatus, IN ULONG CompletionInformation)

_NTFN_EXTERN NTSTATUS	_NtRemoveIoCompletion (IN HANDLE IoCompletionHandle, OUT PVOID CompletionKey, OUT PVOID CompletionContext, OUT PIO_STATUS_BLOCK IoStatusBlock, OPTIN PLARGE_INTEGER Timeout)

_NTFN_EXTERN NTSTATUS	_NtDeviceIoControlFile (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG IoControlCode, IN PVOID InputBuffer, IN ULONG InputBufferLength, IN PVOID OutputBuffer, IN ULONG OutputBufferLength)

_NTFN_EXTERN NTSTATUS	_NtFsControlFile (IN HANDLE FileHandle, OPTIN HANDLE Event, OPTIN PIO_APC_ROUTINE ApcRoutine, OPTIN PVOID ApcContext, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG FsControlCode, IN PVOID InputBuffer, IN ULONG InputBufferLength, IN PVOID OutputBuffer, IN ULONG OutputBufferLength)

_NTFN_EXTERN NTSTATUS	_NtLoadDriver (IN PUNICODE_STRING DriverServiceName)

_NTFN_EXTERN NTSTATUS	_NtUnloadDriver (IN PUNICODE_STRING DriverServiceName)

_NTFN_EXTERN NTSTATUS	_NtAddDriverEntry (IN PEFI_DRIVER_ENTRY BootEntry, IN ULONG Id)

_NTFN_EXTERN NTSTATUS	_NtDeleteDriverEntry (IN ULONG Id)

_NTFN_EXTERN NTSTATUS	_NtModifyDriverEntry (IN PEFI_DRIVER_ENTRY DriverEntry)

_NTFN_EXTERN NTSTATUS	_NtEnumerateDriverEntries (IN PVOID Buffer, IN PULONG BufferLength)

_NTFN_EXTERN NTSTATUS	_NtQueryDriverEntryOrder (IN PULONG Ids, IN PULONG Count)

_NTFN_EXTERN NTSTATUS	_NtSetDriverEntryOrder (IN PULONG Ids, IN PULONG Count)

_NTFN_EXTERN NTSTATUS	_NtQueryBootOptions (IN PBOOT_OPTIONS BootOptions, IN PULONG BootOptionsLength)

_NTFN_EXTERN NTSTATUS	_NtSetBootOptions (IN PBOOT_OPTIONS BootOptions, IN ULONG FieldsToChange)

_NTFN_EXTERN NTSTATUS	_NtAddBootEntry (IN PBOOT_ENTRY BootEntry, IN ULONG Id)

_NTFN_EXTERN NTSTATUS	_NtDeleteBootEntry (IN ULONG Id)

_NTFN_EXTERN NTSTATUS	_NtModifyBootEntry (IN PBOOT_ENTRY BootEntry)

_NTFN_EXTERN NTSTATUS	_NtEnumerateBootEntries (IN PVOID Buffer, IN PULONG BufferLength)

_NTFN_EXTERN NTSTATUS	_NtQueryBootEntryOrder (IN PULONG Ids, IN PULONG Count)

_NTFN_EXTERN NTSTATUS	_NtSetBootEntryOrder (IN PULONG Ids, IN PULONG Count)

_NTFN_EXTERN NTSTATUS	_NtTranslateFilePath (IN PFILE_PATH InputFilePath, IN ULONG OutputType, OUT PFILE_PATH OutputFilePath, INOUT PULONG OutputFilePathLength)

_NTFN_EXTERN NTSTATUS	_LdrFindResource_U (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, OUT PIMAGE_RESOURCE_DATA_ENTRY *ResourceDataEntry)

_NTFN_EXTERN NTSTATUS	_LdrFindResourceDirectory_U (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, OUT PIMAGE_RESOURCE_DIRECTORY *ResourceDirectory)

_NTFN_EXTERN NTSTATUS	_LdrEnumResources (IN PVOID BaseAddress, IN PLDR_RESOURCE_INFO ResourceInfo, IN ULONG Level, INOUT ULONG ResourceCount, OUT LDR_ENUM_RESOURCE_INFO Resources)

_NTFN_EXTERN NTSTATUS	_LdrAccessResource (IN PVOID BaseAddress, IN PIMAGE_RESOURCE_DATA_ENTRY ResourceDataEntry, OPTOUT PVOID *Resource, OPTOUT PULONG Size)

_NTFN_EXTERN NTSTATUS	_LdrLoadAlternateResourceModule (IN PVOID Module, IN PWSTR Buffer)

_NTFN_EXTERN BOOLEAN	_LdrUnloadAlternateResourceModule (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrEnumerateLoadedModules (IN BOOLEAN ReservedFlag, IN PLDR_ENUM_CALLBACK EnumProc, IN PVOID Context)

_NTFN_EXTERN NTSTATUS	_LdrGetProcedureAddress (IN PVOID BaseAddress, IN PANSI_STRING Name, IN ULONG Ordinal, OUT PVOID *ProcedureAddress)

_NTFN_EXTERN NTSTATUS	_LdrLockLoaderLock (IN ULONG Flags, OPTOUT PULONG Disposition, OPTOUT PULONG Cookie)

_NTFN_EXTERN NTSTATUS	_LdrUnlockLoaderLock (IN ULONG Flags, OPTIN ULONG Cookie)

_NTFN_EXTERN BOOLEAN	_LdrVerifyMappedImageMatchesChecksum (IN PVOID BaseAddress, IN SIZE_T NumberOfBytes, IN ULONG FileLength)

_NTFN_EXTERN ULONG	_LdrRelocateImage (IN PVOID NewBase, IN PCCH LoaderName, IN ULONG Success, IN ULONG Conflict, IN ULONG Invalid)

_NTFN_EXTERN PIMAGE_BASE_RELOCATION	_LdrProcessRelocationBlockLongLong (IN ULONG_PTR Address, IN ULONG Count, IN PUSHORT TypeOffset, IN LONGLONG Delta)

_NTFN_EXTERN NTSTATUS	_LdrDisableThreadCalloutsForDll (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrLoadDll (OPTIN PWSTR SearchPath, OPTIN PULONG LoadFlags, IN PUNICODE_STRING Name, OPTOUT PVOID *BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrUnloadDll (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrAddRefDll (IN ULONG Flags, IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_LdrGetDllHandle (OPTIN PWSTR DllPath, IN PULONG DllCharacteristics, IN PUNICODE_STRING DllName, OUT HANDLE *DllHandle)

_NTFN_EXTERN NTSTATUS	_LdrGetDllHandleEx (IN ULONG Flags, OPTIN PWSTR DllPath, OPTIN PULONG DllCharacteristics, IN PUNICODE_STRING DllName, OPTOUT HANDLE *DllHandle)

_NTFN_EXTERN NTSTATUS	_LdrFindEntryForAddress (IN PVOID Address, OUT PLDR_DATA_TABLE_ENTRY *Module)

_NTFN_EXTERN NTSTATUS	_LdrQueryImageFileExecutionOptions (IN PUNICODE_STRING SubKey, IN PCWSTR ValueName, IN ULONG ValueSize, OUT PVOID Buffer, IN ULONG BufferSize, OPTOUT PULONG RetunedLength)

_NTFN_EXTERN NTSTATUS	_LdrQueryProcessModuleInformation (OPTIN PRTL_PROCESS_MODULES ModuleInformation, OPTIN ULONG Size, OUT PULONG ReturnedSize)

_NTFN_EXTERN NTSTATUS	_LdrQueryImageFileKeyOption (IN HANDLE KeyHandle, IN PCWSTR ValueName, IN ULONG Type, OUT PVOID Buffer, IN ULONG BufferSize, OPTOUT PULONG ReturnedLength)

_NTFN_EXTERN NTSTATUS	_LdrOpenImageFileOptionsKey (IN PUNICODE_STRING SubKey, IN BOOLEAN Wow64, OUT PHANDLE NewKeyHandle)

_NTFN_EXTERN VOID	_LdrSetDllManifestProber (IN PLDR_MANIFEST_PROBER_ROUTINE Routine)

_NTFN_EXTERN NTSTATUS	_LdrShutdownProcess (VOID)

_NTFN_EXTERN NTSTATUS	_LdrShutdownThread (VOID)

_NTFN_EXTERN NTSTATUS	_LdrVerifyImageMatchesChecksum (IN HANDLE FileHandle, IN PLDR_CALLBACK Callback, IN PVOID CallbackContext, OUT PUSHORT ImageCharacterstics)

_NTFN_EXTERN PIMAGE_BASE_RELOCATION	_LdrProcessRelocationBlock (IN ULONG_PTR Address, IN ULONG Count, IN PUSHORT TypeOffset, IN LONG_PTR Delta)

_NTFN_EXTERN VOID	_LdrInitializeThunk (ULONG Unknown1, ULONG Unknown2, ULONG Unknown3, ULONG Unknown4)

_NTFN_EXTERN NTSTATUS	_NtAllocateUserPhysicalPages (IN HANDLE ProcessHandle, INOUT PULONG_PTR NumberOfPages, INOUT PULONG_PTR UserPfnArray)

_NTFN_EXTERN NTSTATUS	_NtFreeUserPhysicalPages (IN HANDLE ProcessHandle, INOUT PULONG_PTR NumberOfPages, INOUT PULONG_PTR UserPfnArray)

_NTFN_EXTERN NTSTATUS	_NtMapUserPhysicalPages (IN PVOID VirtualAddresses, IN ULONG_PTR NumberOfPages, INOUT PULONG_PTR UserPfnArray)

_NTFN_EXTERN NTSTATUS	_NtMapUserPhysicalPagesScatter (IN PVOID *VirtualAddresses, IN ULONG_PTR NumberOfPages, INOUT PULONG_PTR UserPfnArray)

_NTFN_EXTERN NTSTATUS	_NtAllocateVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, IN ULONG_PTR ZeroBits, INOUT PSIZE_T RegionSize, IN ULONG AllocationType, IN ULONG Protect)

_NTFN_EXTERN NTSTATUS	_NtFreeVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, INOUT PSIZE_T RegionSize, IN ULONG FreeType)

_NTFN_EXTERN NTSTATUS	_NtQueryVirtualMemory (IN HANDLE ProcessHandle, IN PVOID Address, IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass, OUT PVOID VirtualMemoryInformation, IN SIZE_T Length, OPTOUT PSIZE_T ResultLength)

_NTFN_EXTERN NTSTATUS	_NtReadVirtualMemory (IN HANDLE ProcessHandle, IN PVOID BaseAddress, OUT PVOID Buffer, IN SIZE_T NumberOfBytesToRead, OPTOUT PSIZE_T NumberOfBytesRead)

_NTFN_EXTERN NTSTATUS	_NtWriteVirtualMemory (IN HANDLE ProcessHandle, IN PVOID BaseAddress, IN PVOID Buffer, IN SIZE_T NumberOfBytesToWrite, OPTOUT PSIZE_T NumberOfBytesWritten)

_NTFN_EXTERN NTSTATUS	_NtLockVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, INOUT PSIZE_T NumberOfBytesToLock, IN ULONG LockType)

_NTFN_EXTERN NTSTATUS	_NtUnlockVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, INOUT PSIZE_T NumberOfBytesToUnlock, IN ULONG LockType)

_NTFN_EXTERN NTSTATUS	_NtFlushVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, INOUT PSIZE_T RegionSize, OUT PIO_STATUS_BLOCK IoStatus)

_NTFN_EXTERN NTSTATUS	_NtProtectVirtualMemory (IN HANDLE ProcessHandle, INOUT PVOID BaseAddress, INOUT SIZE_T NumberOfBytesToProtect, IN ULONG NewAccessProtection, OUT PULONG OldAccessProtection)

_NTFN_EXTERN NTSTATUS	_NtCreateSection (OUT PHANDLE SectionHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, OPTIN PLARGE_INTEGER MaximumSize, IN ULONG SectionPageProtection, IN ULONG AllocationAttributes, OPTIN HANDLE FileHandle)

_NTFN_EXTERN NTSTATUS	_NtOpenSection (OUT PHANDLE SectionHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes)

_NTFN_EXTERN NTSTATUS	_NtQuerySection (IN HANDLE SectionHandle, IN SECTION_INFORMATION_CLASS SectionInformationClass, OUT PVOID SectionInformation, IN SIZE_T Length, OUT PSIZE_T ResultLength)

_NTFN_EXTERN NTSTATUS	_NtExtendSection (IN HANDLE SectionHandle, IN PLARGE_INTEGER NewMaximumSize)

_NTFN_EXTERN NTSTATUS	_NtMapViewOfSection (IN HANDLE SectionHandle, IN HANDLE ProcessHandle, INOUT PVOID *BaseAddress, IN ULONG_PTR ZeroBits, IN SIZE_T CommitSize, INOUT PLARGE_INTEGER SectionOffset OPTIONAL, INOUT PSIZE_T ViewSize, IN SECTION_INHERIT InheritDisposition, IN ULONG AllocationType, IN ULONG AccessProtection)

_NTFN_EXTERN NTSTATUS	_NtUnmapViewOfSection (IN HANDLE ProcessHandle, IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_NtGetWriteWatch (IN HANDLE ProcessHandle, IN ULONG Flags, IN PVOID BaseAddress, IN SIZE_T RegionSize, IN PVOID *UserAddressArray, OUT PULONG_PTR EntriesInUserAddressArray, OUT PULONG Granularity)

_NTFN_EXTERN NTSTATUS	_NtResetWriteWatch (IN HANDLE ProcessHandle, IN PVOID BaseAddress, IN SIZE_T RegionSize)

_NTFN_EXTERN NTSTATUS	_NtCreatePagingFile (IN PUNICODE_STRING FileName, IN PLARGE_INTEGER InitialSize, IN PLARGE_INTEGER MaxiumSize, IN ULONG Reserved)

_NTFN_EXTERN NTSTATUS	_NtAreMappedFilesTheSame (IN PVOID File1MappedAsAnImage, IN PVOID File2MappedAsFile)

_NTFN_EXTERN NTSTATUS	_NtFlushInstructionCache (IN HANDLE ProcessHandle, IN PVOID BaseAddress, IN SIZE_T NumberOfBytesToFlush)

_NTFN_EXTERN NTSTATUS	_NtOpenProcessToken (IN HANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, OUT PHANDLE TokenHandle)

_NTFN_EXTERN NTSTATUS	_NtOpenProcessTokenEx (IN HANDLE ProcessHandle, IN ACCESS_MASK DesiredAccess, IN ULONG HandleAttributes, OUT PHANDLE TokenHandle)

_NTFN_EXTERN NTSTATUS	_NtOpenThreadToken (IN HANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN BOOLEAN OpenAsSelf, OUT PHANDLE TokenHandle)

_NTFN_EXTERN NTSTATUS	_NtOpenThreadTokenEx (IN HANDLE ThreadHandle, IN ACCESS_MASK DesiredAccess, IN BOOLEAN OpenAsSelf, IN ULONG HandleAttributes, OUT PHANDLE TokenHandle)

_NTFN_EXTERN NTSTATUS	_NtCreateToken (OUT PHANDLE TokenHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN TOKEN_TYPE TokenType, IN PLUID AuthenticationId, IN PLARGE_INTEGER ExpirationTime, IN PTOKEN_USER TokenUser, IN PTOKEN_GROUPS TokenGroups, IN PTOKEN_PRIVILEGES TokenPrivileges, IN PTOKEN_OWNER TokenOwner, IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup, IN PTOKEN_DEFAULT_DACL TokenDefaultDacl, IN PTOKEN_SOURCE TokenSource)

_NTFN_EXTERN NTSTATUS	_NtDuplicateToken (IN HANDLE ExistingTokenHandle, IN ACCESS_MASK DesiredAccess, OPTIN POBJECT_ATTRIBUTES ObjectAttributes, IN BOOLEAN EffectiveOnly, IN TOKEN_TYPE TokenType, OUT PHANDLE NewTokenHandle)

_NTFN_EXTERN NTSTATUS	_NtCompareTokens (IN HANDLE FirstTokenHandle, IN HANDLE SecondTokenHandle, OUT PBOOLEAN Equal)

_NTFN_EXTERN NTSTATUS	_NtPrivilegeCheck (IN HANDLE ClientToken, INOUT PPRIVILEGE_SET RequiredPrivileges, OUT PBOOLEAN Result)

_NTFN_EXTERN NTSTATUS	_NtAdjustPrivilegesToken (IN HANDLE TokenHandle, IN BOOLEAN DisableAllPrivileges, OPTIN PTOKEN_PRIVILEGES NewState, IN ULONG BufferLength, OPTOUT PTOKEN_PRIVILEGES PreviousState, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtAdjustGroupsToken (IN HANDLE TokenHandle, IN BOOLEAN ResetToDefault, OPTIN PTOKEN_GROUPS NewState, OPTIN ULONG BufferLength, OPTOUT PTOKEN_GROUPS PreviousState, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtQueryInformationToken (IN HANDLE TokenHandle, IN TOKEN_INFORMATION_CLASS TokenInformationClass, OPTOUT PVOID TokenInformation, IN ULONG TokenInformationLength, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_NtSetInformationToken (IN HANDLE TokenHandle, IN TOKEN_INFORMATION_CLASS TokenInformationClass, IN PVOID TokenInformation, IN ULONG TokenInformationLength)

_NTFN_EXTERN NTSTATUS	_NtImpersonateAnonymousToken (IN HANDLE Thread)

_NTFN_EXTERN NTSTATUS	_NtAllocateLocallyUniqueId (OUT LUID *LocallyUniqueId)

_NTFN_EXTERN NTSTATUS	_NtAllocateUuids (OUT PULARGE_INTEGER Time, OUT PULONG Range, OUT PULONG Sequence, OUT PUCHAR Seed)

_NTFN_EXTERN NTSTATUS	_NtAccessCheck (IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN HANDLE ClientToken, IN ACCESS_MASK DesiredAccess, IN PGENERIC_MAPPING GenericMapping, OUT PPRIVILEGE_SET PrivilegeSet, OUT PULONG ReturnLength, OUT PACCESS_MASK GrantedAccess, OUT PNTSTATUS AccessStatus)

_NTFN_EXTERN NTSTATUS	_NtAccessCheckByType (IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN PSID PrincipalSelfSid, IN HANDLE ClientToken, IN ACCESS_MASK DesiredAccess, IN POBJECT_TYPE_LIST ObjectTypeList, IN ULONG ObjectTypeLength, IN PGENERIC_MAPPING GenericMapping, IN PPRIVILEGE_SET PrivilegeSet, INOUT PULONG PrivilegeSetLength, OUT PACCESS_MASK GrantedAccess, OUT PNTSTATUS AccessStatus)

_NTFN_EXTERN NTSTATUS	_NtAccessCheckByTypeResultList (IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN PSID PrincipalSelfSid, IN HANDLE ClientToken, IN ACCESS_MASK DesiredAccess, IN POBJECT_TYPE_LIST ObjectTypeList, IN ULONG ObjectTypeLength, IN PGENERIC_MAPPING GenericMapping, IN PPRIVILEGE_SET PrivilegeSet, INOUT PULONG PrivilegeSetLength, OUT PACCESS_MASK GrantedAccess, OUT PNTSTATUS AccessStatus)

_NTFN_EXTERN NTSTATUS	_NtAccessCheckAndAuditAlarm (IN PUNICODE_STRING SubsystemName, OPTIN PVOID HandleId, IN PUNICODE_STRING ObjectTypeName, IN PUNICODE_STRING ObjectName, IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN ACCESS_MASK DesiredAccess, IN PGENERIC_MAPPING GenericMapping, IN BOOLEAN ObjectCreation, OUT PACCESS_MASK GrantedAccess, OUT PNTSTATUS AccessStatus, OUT PBOOLEAN GenerateOnClose)

_NTFN_EXTERN NTSTATUS	_NtOpenObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, OPTIN PVOID HandleId, IN PUNICODE_STRING ObjectTypeName, IN PUNICODE_STRING ObjectName, OPTIN PSECURITY_DESCRIPTOR SecurityDescriptor, IN HANDLE ClientToken, IN ACCESS_MASK DesiredAccess, IN ACCESS_MASK GrantedAccess, OPTIN PPRIVILEGE_SET Privileges, IN BOOLEAN ObjectCreation, IN BOOLEAN AccessGranted, OUT PBOOLEAN GenerateOnClose)

_NTFN_EXTERN NTSTATUS	_NtPrivilegedServiceAuditAlarm (IN PUNICODE_STRING SubsystemName, IN PUNICODE_STRING ServiceName, IN HANDLE ClientToken, IN PPRIVILEGE_SET Privileges, IN BOOLEAN AccessGranted)

_NTFN_EXTERN NTSTATUS	_NtPrivilegeObjectAuditAlarm (IN PUNICODE_STRING SubsystemName, OPTIN PVOID HandleId, IN HANDLE ClientToken, IN ACCESS_MASK DesiredAccess, IN PPRIVILEGE_SET Privileges, IN BOOLEAN AccessGranted)

_NTFN_EXTERN PVOID	_RtlAddVectoredExceptionHandler (IN ULONG FirstHandler, IN PVECTORED_EXCEPTION_HANDLER VectoredHandler)

_NTFN_EXTERN VOID	_RtlAssert (IN PVOID FailedAssertion, IN PVOID FileName, IN ULONG LineNumber, OPTIN PCHAR Message)

_NTFN_EXTERN VOID	_RtlSetUnhandledExceptionFilter (IN PRTLP_UNHANDLED_EXCEPTION_FILTER TopLevelExceptionFilter)

_NTFN_EXTERN LONG	_RtlUnhandledExceptionFilter (IN struct _EXCEPTION_POINTERS *ExceptionInfo)

_NTFN_EXTERN PVOID	_RtlEncodePointer (IN PVOID Pointer)

_NTFN_EXTERN PVOID	_RtlDecodePointer (IN PVOID Pointer)

_NTFN_EXTERN PVOID	_RtlEncodeSystemPointer (IN PVOID Pointer)

_NTFN_EXTERN PVOID	_RtlDecodeSystemPointer (IN PVOID Pointer)

_NTFN_EXTERN NTSTATUS	_RtlGetLastNtStatus (VOID)

_NTFN_EXTERN ULONG	_RtlGetLastWin32Error (VOID)

_NTFN_EXTERN VOID	_RtlSetLastWin32Error (IN ULONG LastError)

_NTFN_EXTERN VOID	_RtlSetLastWin32ErrorAndNtStatusFromNtStatus (IN NTSTATUS Status)

_NTFN_EXTERN NTSTATUS	_RtlSetThreadErrorMode (IN ULONG NewMode, OPTOUT PULONG OldMode)

_NTFN_EXTERN ULONG	_RtlGetThreadErrorMode (VOID)

_NTFN_EXTERN VOID	_RtlCaptureContext (OUT PCONTEXT ContextRecord)

_NTFN_EXTERN BOOLEAN	_RtlDispatchException (IN PEXCEPTION_RECORD ExceptionRecord, IN PCONTEXT Context)

_NTFN_EXTERN ULONG	_RtlNtStatusToDosError (IN NTSTATUS Status)

_NTFN_EXTERN ULONG	_RtlNtStatusToDosErrorNoTeb (IN NTSTATUS Status)

_NTFN_EXTERN NTSTATUS	_RtlMapSecurityErrorToNtStatus (IN ULONG SecurityError)

_NTFN_EXTERN VOID	_RtlRaiseException (IN PEXCEPTION_RECORD ExceptionRecord)

_NTFN_EXTERN VOID	_RtlRaiseStatus (IN NTSTATUS Status)

_NTFN_EXTERN VOID	_RtlUnwind (OPTIN PVOID TargetFrame, OPTIN PVOID TargetIp, OPTIN PEXCEPTION_RECORD ExceptionRecord, IN PVOID ReturnValue)

_NTFN_EXTERN ULONG	_RtlWalkFrameChain (OUT PVOID *Callers, IN ULONG Count, IN ULONG Flags)

_NTFN_EXTERN USHORT	_RtlLogStackBackTrace (VOID)

_NTFN_EXTERN PVOID	_RtlAllocateHeap (IN PVOID HeapHandle, OPTIN ULONG Flags, IN SIZE_T Size)

_NTFN_EXTERN PVOID	_RtlCreateHeap (IN ULONG Flags, OPTIN PVOID BaseAddress, OPTIN SIZE_T SizeToReserve, OPTIN SIZE_T SizeToCommit, OPTIN PVOID Lock, OPTIN PRTL_HEAP_PARAMETERS Parameters)

_NTFN_EXTERN ULONG	_RtlCreateTagHeap (IN HANDLE HeapHandle, IN ULONG Flags, IN PWSTR TagName, IN PWSTR TagSubName)

_NTFN_EXTERN ULONG	_RtlCompactHeap (IN HANDLE Heap, IN ULONG Flags)

_NTFN_EXTERN PVOID	_RtlDebugCreateHeap (IN ULONG Flags, OPTIN PVOID BaseAddress, OPTIN SIZE_T SizeToReserve, OPTIN SIZE_T SizeToCommit, OPTIN PVOID Lock, OPTIN PRTL_HEAP_PARAMETERS Parameters)

_NTFN_EXTERN HANDLE	_RtlDestroyHeap (IN HANDLE Heap)

_NTFN_EXTERN ULONG	_RtlExtendHeap (IN HANDLE Heap, IN ULONG Flags, IN PVOID P, IN SIZE_T Size)

_NTFN_EXTERN BOOLEAN	_RtlFreeHeap (IN HANDLE HeapHandle, OPTIN ULONG Flags, IN PVOID P)

_NTFN_EXTERN ULONG	_RtlGetProcessHeaps (IN ULONG HeapCount, OUT HANDLE *HeapArray)

_NTFN_EXTERN BOOLEAN	_RtlGetUserInfoHeap (IN PVOID HeapHandle, IN ULONG Flags, IN PVOID BaseAddress, OPTIO PVOID *UserValue, OPTOUT PULONG UserFlags)

_NTFN_EXTERN PVOID	_RtlProtectHeap (IN PVOID HeapHandle, IN BOOLEAN Protect)

_NTFN_EXTERN NTSTATUS	_RtlQueryHeapInformation (IN PVOID HeapHandle, IN HEAP_INFORMATION_CLASS HeapInformationClass, OUT PVOID HeapInformation, IN SIZE_T HeapInformationLength, OPTOUT PSIZE_T ReturnLength)

_NTFN_EXTERN PWSTR	_RtlQueryTagHeap (IN PVOID HeapHandle, IN ULONG Flags, IN USHORT TagIndex, IN BOOLEAN ResetCounters, OUT PRTL_HEAP_TAG_INFO HeapTagInfo)

_NTFN_EXTERN PVOID	_RtlReAllocateHeap (IN HANDLE Heap, OPTIN ULONG Flags, IN PVOID Ptr, IN SIZE_T Size)

_NTFN_EXTERN NTSTATUS	_RtlSetHeapInformation (IN PVOID HeapHandle, IN HEAP_INFORMATION_CLASS HeapInformationClass, IN PVOID HeapInformation, IN SIZE_T HeapInformationLength)

_NTFN_EXTERN BOOLEAN	_RtlLockHeap (IN HANDLE Heap)

_NTFN_EXTERN NTSTATUS	_RtlMultipleAllocateHeap (IN HANDLE HeapHandle, IN ULONG Flags, IN SIZE_T Size, IN ULONG Count, OUT PVOID *Array)

_NTFN_EXTERN NTSTATUS	_RtlMultipleFreeHeap (IN HANDLE HeapHandle, IN ULONG Flags, IN ULONG Count, IN PVOID *Array)

_NTFN_EXTERN NTSTATUS	_RtlUsageHeap (IN HANDLE Heap, IN ULONG Flags, OUT PRTL_HEAP_USAGE Usage)

_NTFN_EXTERN BOOLEAN	_RtlUnlockHeap (IN HANDLE Heap)

_NTFN_EXTERN BOOLEAN	_RtlSetUserValueHeap (IN PVOID HeapHandle, IN ULONG Flags, IN PVOID BaseAddress, IN PVOID UserValue)

_NTFN_EXTERN BOOLEAN	_RtlSetUserFlagsHeap (IN PVOID HeapHandle, IN ULONG Flags, IN PVOID BaseAddress, IN ULONG UserFlagsReset, IN ULONG UserFlagsSet)

_NTFN_EXTERN BOOLEAN	_RtlValidateHeap (IN HANDLE Heap, IN ULONG Flags, OPTIN PVOID P)

_NTFN_EXTERN NTSTATUS	_RtlWalkHeap (IN HANDLE HeapHandle, IN PVOID HeapEntry)

_NTFN_EXTERN SIZE_T	_RtlSizeHeap (IN PVOID HeapHandle, IN ULONG Flags, IN PVOID MemoryPointer)

_NTFN_EXTERN NTSTATUS	_RtlAbsoluteToSelfRelativeSD (IN PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, OUT PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, INOUT PULONG BufferLength)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessAllowedAce (INOUT PACL Acl, IN ULONG Revision, IN ACCESS_MASK AccessMask, IN PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessAllowedAceEx (INOUT PACL pAcl, IN ULONG dwAceRevision, IN ULONG AceFlags, IN ACCESS_MASK AccessMask, IN PSID pSid)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessAllowedObjectAce (IN OUT PACL pAcl, IN ULONG dwAceRevision, IN ULONG AceFlags, IN ACCESS_MASK AccessMask, IN OPTIONAL GUID ObjectTypeGuid, IN OPTIONAL GUID InheritedObjectTypeGuid, IN PSID pSid)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessDeniedAce (IN OUT PACL Acl, IN ULONG Revision, IN ACCESS_MASK AccessMask, IN PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessDeniedAceEx (INOUT PACL Acl, IN ULONG Revision, IN ULONG Flags, IN ACCESS_MASK AccessMask, IN PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlAddAccessDeniedObjectAce (INOUT PACL pAcl, IN ULONG dwAceRevision, IN ULONG AceFlags, IN ACCESS_MASK AccessMask, OPTIN GUID ObjectTypeGuid, OPTIN GUID InheritedObjectTypeGuid, IN PSID pSid)

_NTFN_EXTERN NTSTATUS	_RtlAddAce (INOUT PACL Acl, IN ULONG AceRevision, IN ULONG StartingAceIndex, IN PVOID AceList, IN ULONG AceListLength)

_NTFN_EXTERN NTSTATUS	_RtlAddAuditAccessAce (INOUT PACL Acl, IN ULONG Revision, IN ACCESS_MASK AccessMask, IN PSID Sid, IN BOOLEAN Success, IN BOOLEAN Failure)

_NTFN_EXTERN NTSTATUS	_RtlAcquirePrivilege (IN PULONG Privilege, IN ULONG NumPriv, IN ULONG Flags, OUT PVOID *ReturnedState)

_NTFN_EXTERN NTSTATUS	_RtlAddAuditAccessAceEx (IN OUT PACL Acl, IN ULONG Revision, IN ULONG Flags, IN ACCESS_MASK AccessMask, IN PSID Sid, IN BOOLEAN Success, IN BOOLEAN Failure)

_NTFN_EXTERN NTSTATUS	_RtlAddAuditAccessObjectAce (INOUT PACL Acl, IN ULONG Revision, IN ULONG Flags, IN ACCESS_MASK AccessMask, OPTIN GUID ObjectTypeGuid, OPTIN GUID InheritedObjectTypeGuid, IN PSID Sid, IN BOOLEAN Success, IN BOOLEAN Failure)

_NTFN_EXTERN NTSTATUS	_RtlAddMandatoryAce (INOUT PACL Acl, IN ULONG Revision, IN ULONG Flags, IN ULONG MandatoryFlags, IN UCHAR AceType, IN PSID LabelSid)

_NTFN_EXTERN NTSTATUS	_RtlAdjustPrivilege (IN ULONG Privilege, IN BOOLEAN NewValue, IN BOOLEAN ForThread, OUT PBOOLEAN OldValue)

_NTFN_EXTERN NTSTATUS	_RtlAllocateAndInitializeSid (IN PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, IN UCHAR SubAuthorityCount, IN ULONG SubAuthority0, IN ULONG SubAuthority1, IN ULONG SubAuthority2, IN ULONG SubAuthority3, IN ULONG SubAuthority4, IN ULONG SubAuthority5, IN ULONG SubAuthority6, IN ULONG SubAuthority7, OUT PSID *Sid)

_NTFN_EXTERN BOOLEAN	_RtlAreAllAccessesGranted (ACCESS_MASK GrantedAccess, ACCESS_MASK DesiredAccess)

_NTFN_EXTERN BOOLEAN	_RtlAreAnyAccessesGranted (ACCESS_MASK GrantedAccess, ACCESS_MASK DesiredAccess)

_NTFN_EXTERN VOID	_RtlCopyLuid (OUT PLUID DestinationLuid, IN PLUID SourceLuid)

_NTFN_EXTERN VOID	_RtlCopyLuidAndAttributesArray (ULONG Count, PLUID_AND_ATTRIBUTES Src, PLUID_AND_ATTRIBUTES Dest)

_NTFN_EXTERN NTSTATUS	_RtlCopySidAndAttributesArray (ULONG Count, PSID_AND_ATTRIBUTES Src, ULONG SidAreaSize, PSID_AND_ATTRIBUTES Dest, PVOID SidArea, PVOID *RemainingSidArea, PULONG RemainingSidAreaSize)

_NTFN_EXTERN NTSTATUS	_RtlConvertSidToUnicodeString (INOUT PUNICODE_STRING UnicodeString, IN PSID Sid, IN BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlCopySid (IN ULONG DestinationSidLength, OUT PSID DestinationSid, IN PSID SourceSid)

_NTFN_EXTERN NTSTATUS	_RtlCreateAcl (PACL Acl, ULONG AclSize, ULONG AclRevision)

_NTFN_EXTERN NTSTATUS	_RtlCreateSecurityDescriptor (OUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN ULONG Revision)

_NTFN_EXTERN NTSTATUS	_RtlCreateSecurityDescriptorRelative (OUT PISECURITY_DESCRIPTOR_RELATIVE SecurityDescriptor, IN ULONG Revision)

_NTFN_EXTERN NTSTATUS	_RtlCopySecurityDescriptor (IN PSECURITY_DESCRIPTOR pSourceSecurityDescriptor, OUT PSECURITY_DESCRIPTOR *pDestinationSecurityDescriptor)

_NTFN_EXTERN NTSTATUS	_RtlDeleteAce (PACL Acl, ULONG AceIndex)

_NTFN_EXTERN BOOLEAN	_RtlEqualPrefixSid (PSID Sid1, PSID Sid2)

_NTFN_EXTERN BOOLEAN	_RtlEqualSid (IN PSID Sid1, IN PSID Sid2)

_NTFN_EXTERN BOOLEAN	_RtlFirstFreeAce (PACL Acl, PACE *Ace)

_NTFN_EXTERN PVOID	_RtlFreeSid (IN PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlGetAce (PACL Acl, ULONG AceIndex, PVOID *Ace)

_NTFN_EXTERN NTSTATUS	_RtlGetControlSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PSECURITY_DESCRIPTOR_CONTROL Control, OUT PULONG Revision)

_NTFN_EXTERN NTSTATUS	_RtlGetDaclSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PBOOLEAN DaclPresent, OUT PACL *Dacl, OUT PBOOLEAN DaclDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlGetSaclSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PBOOLEAN SaclPresent, OUT PACL *Sacl, OUT PBOOLEAN SaclDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlGetGroupSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PSID *Group, OUT PBOOLEAN GroupDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlGetOwnerSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PSID *Owner, OUT PBOOLEAN OwnerDefaulted)

_NTFN_EXTERN BOOLEAN	_RtlGetSecurityDescriptorRMControl (IN PSECURITY_DESCRIPTOR SecurityDescriptor, OUT PUCHAR RMControl)

_NTFN_EXTERN PSID_IDENTIFIER_AUTHORITY	_RtlIdentifierAuthoritySid (PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlImpersonateSelf (IN SECURITY_IMPERSONATION_LEVEL ImpersonationLevel)

_NTFN_EXTERN NTSTATUS	_RtlInitializeSid (OUT PSID Sid, IN PSID_IDENTIFIER_AUTHORITY IdentifierAuthority, IN UCHAR SubAuthorityCount)

_NTFN_EXTERN ULONG	_RtlLengthRequiredSid (IN ULONG SubAuthorityCount)

_NTFN_EXTERN ULONG	_RtlLengthSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor)

_NTFN_EXTERN ULONG	_RtlLengthSid (IN PSID Sid)

_NTFN_EXTERN NTSTATUS	_RtlMakeSelfRelativeSD (IN PSECURITY_DESCRIPTOR AbsoluteSD, OUT PSECURITY_DESCRIPTOR SelfRelativeSD, INOUT PULONG BufferLength)

_NTFN_EXTERN VOID	_RtlMapGenericMask (PACCESS_MASK AccessMask, PGENERIC_MAPPING GenericMapping)

_NTFN_EXTERN NTSTATUS	_RtlQueryInformationAcl (PACL Acl, PVOID Information, ULONG InformationLength, ACL_INFORMATION_CLASS InformationClass)

_NTFN_EXTERN VOID	_RtlReleasePrivilege (IN PVOID ReturnedState)

_NTFN_EXTERN NTSTATUS	_RtlSelfRelativeToAbsoluteSD (IN PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor, OUT PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor, INOUT PULONG AbsoluteSecurityDescriptorSize, OUT PACL Dacl, INOUT PULONG DaclSize, OUT PACL Sacl, INOUT PULONG SaclSize, OUT PSID Owner, INOUT PULONG OwnerSize, OUT PSID PrimaryGroup, INOUT PULONG PrimaryGroupSize)

_NTFN_EXTERN NTSTATUS	_RtlSelfRelativeToAbsoluteSD2 (IN OUT PSECURITY_DESCRIPTOR SelfRelativeSD, OUT PULONG BufferSize)

_NTFN_EXTERN NTSTATUS	_RtlSetAttributesSecurityDescriptor (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN SECURITY_DESCRIPTOR_CONTROL Control, OUT PULONG Revision)

_NTFN_EXTERN NTSTATUS	_RtlSetControlSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor, IN SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest, IN SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet)

_NTFN_EXTERN NTSTATUS	_RtlSetDaclSecurityDescriptor (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN BOOLEAN DaclPresent, OPTIN PACL Dacl, OPTIN BOOLEAN DaclDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlSetGroupSecurityDescriptor (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, OPTIN PSID Group, OPTIN BOOLEAN GroupDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlSetInformationAcl (PACL Acl, PVOID Information, ULONG InformationLength, ACL_INFORMATION_CLASS InformationClass)

_NTFN_EXTERN NTSTATUS	_RtlSetOwnerSecurityDescriptor (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, OPTIN PSID Owner, OPTIN BOOLEAN OwnerDefaulted)

_NTFN_EXTERN NTSTATUS	_RtlSetSaclSecurityDescriptor (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN BOOLEAN SaclPresent, IN PACL Sacl, IN BOOLEAN SaclDefaulted)

_NTFN_EXTERN VOID	_RtlSetSecurityDescriptorRMControl (INOUT PSECURITY_DESCRIPTOR SecurityDescriptor, IN PUCHAR RMControl)

_NTFN_EXTERN PUCHAR	_RtlSubAuthorityCountSid (IN PSID Sid)

_NTFN_EXTERN PULONG	_RtlSubAuthoritySid (IN PSID Sid, IN ULONG SubAuthority)

_NTFN_EXTERN BOOLEAN	_RtlValidRelativeSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptorInput, IN ULONG SecurityDescriptorLength, IN SECURITY_INFORMATION RequiredInformation)

_NTFN_EXTERN BOOLEAN	_RtlValidSecurityDescriptor (IN PSECURITY_DESCRIPTOR SecurityDescriptor)

_NTFN_EXTERN BOOLEAN	_RtlValidSid (IN PSID Sid)

_NTFN_EXTERN BOOLEAN	_RtlValidAcl (PACL Acl)

_NTFN_EXTERN NTSTATUS	_RtlDeleteSecurityObject (IN PSECURITY_DESCRIPTOR *ObjectDescriptor)

_NTFN_EXTERN NTSTATUS	_RtlNewSecurityObject (IN PSECURITY_DESCRIPTOR ParentDescriptor, IN PSECURITY_DESCRIPTOR CreatorDescriptor, OUT PSECURITY_DESCRIPTOR *NewDescriptor, IN BOOLEAN IsDirectoryObject, IN HANDLE Token, IN PGENERIC_MAPPING GenericMapping)

_NTFN_EXTERN NTSTATUS	_RtlQuerySecurityObject (IN PSECURITY_DESCRIPTOR ObjectDescriptor, IN SECURITY_INFORMATION SecurityInformation, OUT PSECURITY_DESCRIPTOR ResultantDescriptor, IN ULONG DescriptorLength, OUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_RtlSetSecurityObject (IN SECURITY_INFORMATION SecurityInformation, IN PSECURITY_DESCRIPTOR ModificationDescriptor, OUT PSECURITY_DESCRIPTOR *ObjectsSecurityDescriptor, IN PGENERIC_MAPPING GenericMapping, IN HANDLE Token)

_NTFN_EXTERN NTSTATUS	_RtlLargeIntegerToChar (IN PLARGE_INTEGER Value, IN ULONG Base, IN ULONG Length, OUT PCHAR String)

_NTFN_EXTERN CHAR	_RtlUpperChar (CHAR Source)

_NTFN_EXTERN WCHAR	_RtlUpcaseUnicodeChar (WCHAR Source)

_NTFN_EXTERN WCHAR	_RtlDowncaseUnicodeChar (IN WCHAR Source)

_NTFN_EXTERN NTSTATUS	_RtlIntegerToChar (IN ULONG Value, IN ULONG Base, IN ULONG Length, OUT PCHAR String)

_NTFN_EXTERN NTSTATUS	_RtlIntegerToUnicode (IN ULONG Value, OPTIN ULONG Base, OPTIN ULONG Length, INOUT LPWSTR String)

_NTFN_EXTERN NTSTATUS	_RtlIntegerToUnicodeString (IN ULONG Value, OPTIN ULONG Base, INOUT PUNICODE_STRING String)

_NTFN_EXTERN NTSTATUS	_RtlCharToInteger (PCSZ String, ULONG Base, PULONG Value)

_NTFN_EXTERN ULONG	_RtlxUnicodeStringToAnsiSize (IN PCUNICODE_STRING UnicodeString)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeStringToAnsiString (PANSI_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlUpcaseUnicodeStringToOemString (POEM_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlUpcaseUnicodeStringToCountedOemString (OUT POEM_STRING DestinationString, IN PCUNICODE_STRING SourceString, IN BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeStringToOemString (POEM_STRING DestinationString, PCUNICODE_STRING SourceString, BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlUpcaseUnicodeToOemN (PCHAR OemString, ULONG OemSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize)

_NTFN_EXTERN ULONG	_RtlxUnicodeStringToOemSize (IN PCUNICODE_STRING UnicodeString)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeToOemN (PCHAR OemString, ULONG OemSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeToMultiByteN (PCHAR MbString, ULONG MbSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize)

_NTFN_EXTERN NTSTATUS	_RtlUpcaseUnicodeToMultiByteN (PCHAR MbString, ULONG MbSize, PULONG ResultSize, PCWCH UnicodeString, ULONG UnicodeSize)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeToMultiByteSize (PULONG MbSize, PCWCH UnicodeString, ULONG UnicodeSize)

_NTFN_EXTERN ULONG	_RtlxOemStringToUnicodeSize (IN PCOEM_STRING OemString)

_NTFN_EXTERN NTSTATUS	_RtlOemStringToUnicodeString (PUNICODE_STRING DestinationString, PCOEM_STRING SourceString, BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlOemToUnicodeN (OUT PWCH UnicodeString, IN ULONG MaxBytesInUnicodeString, OPTOUT PULONG BytesInUnicodeString, IN PCCH OemString, IN ULONG BytesInOemString)

_NTFN_EXTERN WCHAR	_RtlAnsiCharToUnicodeChar (INOUT PUCHAR *SourceCharacter)

_NTFN_EXTERN NTSTATUS	_RtlAnsiStringToUnicodeString (PUNICODE_STRING DestinationString, PCANSI_STRING SourceString, BOOLEAN AllocateDestinationString)

_NTFN_EXTERN ULONG	_RtlxAnsiStringToUnicodeSize (PCANSI_STRING AnsiString)

_NTFN_EXTERN BOOLEAN	_RtlCreateUnicodeStringFromAsciiz (OUT PUNICODE_STRING Destination, IN PCSZ Source)

_NTFN_EXTERN NTSTATUS	_RtlAppendUnicodeToString (PUNICODE_STRING Destination, PCWSTR Source)

_NTFN_EXTERN NTSTATUS	_RtlAppendUnicodeStringToString (PUNICODE_STRING Destination, PCUNICODE_STRING Source)

_NTFN_EXTERN LONG	_RtlCompareUnicodeString (PCUNICODE_STRING String1, PCUNICODE_STRING String2, BOOLEAN CaseInsensitive)

_NTFN_EXTERN VOID	_RtlCopyUnicodeString (PUNICODE_STRING DestinationString, PCUNICODE_STRING SourceString)

_NTFN_EXTERN BOOLEAN	_RtlCreateUnicodeString (PUNICODE_STRING DestinationString, PCWSTR SourceString)

_NTFN_EXTERN NTSTATUS	_RtlDowncaseUnicodeString (INOUT PUNICODE_STRING UniDest, IN PCUNICODE_STRING UniSource, IN BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlDuplicateUnicodeString (IN ULONG Flags, IN PCUNICODE_STRING SourceString, OUT PUNICODE_STRING DestinationString)

_NTFN_EXTERN VOID	_RtlFillMemoryUlong (IN PVOID Destination, IN SIZE_T Length, IN ULONG Fill)

_NTFN_EXTERN VOID	_RtlFillMemoryUlonglong (OUT PVOID Destination, IN SIZE_T Length, IN ULONGLONG Pattern)

_NTFN_EXTERN NTSTATUS	_RtlCopyMappedMemory (OUT PVOID Destination, IN const VOID *Source, IN SIZE_T Size)

_NTFN_EXTERN SIZE_T	_RtlCompareMemoryUlong (IN PVOID Source, IN SIZE_T Length, IN ULONG Pattern)

_NTFN_EXTERN BOOLEAN	_RtlEqualUnicodeString (PCUNICODE_STRING String1, PCUNICODE_STRING String2, BOOLEAN CaseInsensitive)

_NTFN_EXTERN NTSTATUS	_RtlFindCharInUnicodeString (IN ULONG Flags, IN PCUNICODE_STRING SearchString, IN PCUNICODE_STRING MatchString, OUT PUSHORT Position)

_NTFN_EXTERN VOID	_RtlFreeUnicodeString (INOUT PUNICODE_STRING UnicodeString)

_NTFN_EXTERN VOID	_RtlEraseUnicodeString (INOUT PUNICODE_STRING String)

_NTFN_EXTERN NTSTATUS	_RtlHashUnicodeString (IN CONST UNICODE_STRING *String, IN BOOLEAN CaseInSensitive, IN ULONG HashAlgorithm, OUT PULONG HashValue)

_NTFN_EXTERN VOID	_RtlInitUnicodeString (OUT PUNICODE_STRING DestinationString, IN PCWSTR SourceString)

_NTFN_EXTERN NTSTATUS	_RtlInitUnicodeStringEx (OUT PUNICODE_STRING DestinationString, IN PCWSTR SourceString)

_NTFN_EXTERN BOOLEAN	_RtlIsTextUnicode (IN CONST VOID Buffer, IN INT Size, OPTIO INT Flags)

_NTFN_EXTERN BOOLEAN	_RtlPrefixString (IN const STRING String1, IN const STRING String2, IN BOOLEAN CaseInsensitive)

_NTFN_EXTERN BOOLEAN	_RtlPrefixUnicodeString (IN PCUNICODE_STRING String1, IN PCUNICODE_STRING String2, IN BOOLEAN CaseInsensitive)

_NTFN_EXTERN NTSTATUS	_RtlUpcaseUnicodeString (OUT PUNICODE_STRING DestinationString, IN PCUNICODE_STRING SourceString, IN BOOLEAN AllocateDestinationString)

_NTFN_EXTERN NTSTATUS	_RtlUnicodeStringToInteger (IN PCUNICODE_STRING String, OPTIN ULONG Base, OUT PULONG Value)

_NTFN_EXTERN NTSTATUS	_RtlValidateUnicodeString (IN ULONG Flags, IN PCUNICODE_STRING String)

_NTFN_EXTERN VOID	_RtlUpperString (INOUT PSTRING DestinationString, IN const STRING *SourceString)

_NTFN_EXTERN LONG	_RtlCompareString (IN const STRING String1, IN const STRING String2, IN BOOLEAN CaseInSensitive)

_NTFN_EXTERN VOID	_RtlCopyString (OUT PSTRING DestinationString, OPTIN const STRING *SourceString)

_NTFN_EXTERN BOOLEAN	_RtlEqualString (IN const STRING String1, IN const STRING String2, IN BOOLEAN CaseInSensitive)

_NTFN_EXTERN NTSTATUS	_RtlAppendStringToString (INOUT PSTRING Destination, IN const STRING *Source)

_NTFN_EXTERN VOID	_RtlFreeAnsiString (INOUT PANSI_STRING AnsiString)

_NTFN_EXTERN VOID	_RtlInitAnsiString (OUT PANSI_STRING DestinationString, IN PCSZ SourceString)

_NTFN_EXTERN NTSTATUS	_RtlInitAnsiStringEx (OUT PANSI_STRING DestinationString, IN PCSZ SourceString)

_NTFN_EXTERN VOID	_RtlFreeOemString (INOUT POEM_STRING OemString)

_NTFN_EXTERN NTSTATUS	_RtlMultiByteToUnicodeN (OUT PWCH UnicodeString, IN ULONG MaxBytesInUnicodeString, OPTOUT PULONG BytesInUnicodeString, IN const CHAR *MultiByteString, IN ULONG BytesInMultiByteString)

_NTFN_EXTERN NTSTATUS	_RtlMultiByteToUnicodeSize (OUT PULONG BytesInUnicodeString, IN const CHAR *MultiByteString, IN ULONG BytesInMultiByteString)

_NTFN_EXTERN NTSTATUS	_RtlAddAtomToAtomTable (IN PRTL_ATOM_TABLE AtomTable, IN PWSTR AtomName, OUT PRTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_RtlCreateAtomTable (IN ULONG TableSize, INOUT PRTL_ATOM_TABLE *AtomTable)

_NTFN_EXTERN NTSTATUS	_RtlDeleteAtomFromAtomTable (IN PRTL_ATOM_TABLE AtomTable, IN RTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_RtlDestroyAtomTable (IN PRTL_ATOM_TABLE AtomTable)

_NTFN_EXTERN NTSTATUS	_RtlQueryAtomInAtomTable (IN PRTL_ATOM_TABLE AtomTable, IN RTL_ATOM Atom, OPTOUT PULONG RefCount, OPTOUT PULONG PinCount, OUT PWSTR AtomName, OPTIO PULONG NameLength)

_NTFN_EXTERN NTSTATUS	_RtlPinAtomInAtomTable (IN PRTL_ATOM_TABLE AtomTable, IN RTL_ATOM Atom)

_NTFN_EXTERN NTSTATUS	_RtlLookupAtomInAtomTable (IN PRTL_ATOM_TABLE AtomTable, IN PWSTR AtomName, OUT PRTL_ATOM Atom)

_NTFN_EXTERN PPEB	_RtlGetCurrentPeb (VOID)

_NTFN_EXTERN VOID	_RtlAcquirePebLock (VOID)

_NTFN_EXTERN VOID	_RtlReleasePebLock (VOID)

_NTFN_EXTERN NTSTATUS	_RtlCreateProcessParameters (OUT PRTL_USER_PROCESS_PARAMETERS *ProcessParameters, IN PUNICODE_STRING ImagePathName, OPTIN PUNICODE_STRING DllPath, OPTIN PUNICODE_STRING CurrentDirectory, OPTIN PUNICODE_STRING CommandLine, OPTIN PWSTR Environment, OPTIN PUNICODE_STRING WindowTitle, OPTIN PUNICODE_STRING DesktopInfo, OPTIN PUNICODE_STRING ShellInfo, OPTIN PUNICODE_STRING RuntimeInfo)

_NTFN_EXTERN NTSTATUS	_RtlCreateUserProcess (IN PUNICODE_STRING ImageFileName, IN ULONG Attributes, IN PRTL_USER_PROCESS_PARAMETERS ProcessParameters, OPTIN PSECURITY_DESCRIPTOR ProcessSecutityDescriptor, OPTIN PSECURITY_DESCRIPTOR ThreadSecurityDescriptor, OPTIN HANDLE ParentProcess, IN BOOLEAN CurrentDirectory, OPTIN HANDLE DebugPort, OPTIN HANDLE ExceptionPort, OUT PRTL_USER_PROCESS_INFORMATION ProcessInfo)

_NTFN_EXTERN NTSTATUS	_RtlCreateUserThread (IN PVOID ThreadContext, OUT HANDLE *OutThreadHandle, PVOID Reserved1, PVOID Reserved2, PVOID Reserved3, PVOID Reserved4, PVOID Reserved5, PVOID Reserved6, PVOID Reserved7, PVOID Reserved8)

_NTFN_EXTERN PRTL_USER_PROCESS_PARAMETERS	_RtlDeNormalizeProcessParams (IN PRTL_USER_PROCESS_PARAMETERS ProcessParameters)

_NTFN_EXTERN NTSTATUS	_RtlDestroyProcessParameters (IN PRTL_USER_PROCESS_PARAMETERS ProcessParameters)

_NTFN_EXTERN VOID	_RtlExitUserThread (IN NTSTATUS Status)

_NTFN_EXTERN VOID	_RtlInitializeContext (IN HANDLE ProcessHandle, OUT PCONTEXT ThreadContext, OPTIN PVOID ThreadStartParam, IN PTHREAD_START_ROUTINE ThreadStartAddress, IN PINITIAL_TEB InitialTeb)

_NTFN_EXTERN BOOLEAN	_RtlIsThreadWithinLoaderCallout (VOID)

_NTFN_EXTERN PRTL_USER_PROCESS_PARAMETERS	_RtlNormalizeProcessParams (IN PRTL_USER_PROCESS_PARAMETERS ProcessParameters)

_NTFN_EXTERN NTSTATUS	_RtlRemoteCall (IN HANDLE Process, IN HANDLE Thread, IN PVOID CallSite, IN ULONG ArgumentCount, IN PULONG Arguments, IN BOOLEAN PassContext, IN BOOLEAN AlreadySuspended)

_NTFN_EXTERN NTSTATUS __cdecl	_RtlSetProcessIsCritical (IN BOOLEAN NewValue, OPTOUT PBOOLEAN OldValue, IN BOOLEAN NeedBreaks)

_NTFN_EXTERN NTSTATUS __cdecl	_RtlSetThreadIsCritical (IN BOOLEAN NewValue, OPTOUT PBOOLEAN OldValue, IN BOOLEAN NeedBreaks)

_NTFN_EXTERN ULONG	_RtlGetCurrentProcessorNumber (VOID)

_NTFN_EXTERN NTSTATUS	_RtlSetThreadPoolStartFunc (IN PRTL_START_POOL_THREAD StartPoolThread, IN PRTL_EXIT_POOL_THREAD ExitPoolThread)

_NTFN_EXTERN NTSTATUS	_RtlDeregisterWaitEx (IN HANDLE hWaitHandle, OPTIN HANDLE hCompletionEvent)

_NTFN_EXTERN NTSTATUS	_RtlDeregisterWait (IN HANDLE hWaitHandle)

_NTFN_EXTERN NTSTATUS	_RtlQueueWorkItem (IN WORKERCALLBACKFUNC Function, OPTIN PVOID Context, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_RtlSetIoCompletionCallback (IN HANDLE FileHandle, IN PIO_APC_ROUTINE Callback, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_RtlRegisterWait (IN PHANDLE phNewWaitObject, IN HANDLE hObject, IN WAITORTIMERCALLBACKFUNC Callback, IN PVOID pvContext, IN ULONG ulMilliseconds, IN ULONG ulFlags)

_NTFN_EXTERN NTSTATUS	_RtlCreateEnvironment (IN BOOLEAN Clone, OUT PWSTR *Environment)

_NTFN_EXTERN NTSTATUS	_RtlComputePrivatizedDllName_U (IN PUNICODE_STRING DllName, OUT PUNICODE_STRING RealName, OUT PUNICODE_STRING LocalName)

_NTFN_EXTERN VOID	_RtlDestroyEnvironment (IN PWSTR Environment)

_NTFN_EXTERN BOOLEAN	_RtlDoesFileExists_U (IN PCWSTR FileName)

_NTFN_EXTERN RTL_PATH_TYPE	_RtlDetermineDosPathNameType_U (IN PCWSTR Path)

_NTFN_EXTERN ULONG	_RtlDosSearchPath_U (IN PCWSTR Path, IN PCWSTR FileName, IN PCWSTR Extension, IN ULONG BufferSize, OUT PWSTR Buffer, OUT PWSTR *PartName)

_NTFN_EXTERN NTSTATUS	_RtlDosSearchPath_Ustr (IN ULONG Flags, IN PUNICODE_STRING PathString, IN PUNICODE_STRING FileNameString, IN PUNICODE_STRING ExtensionString, IN PUNICODE_STRING CallerBuffer, OPTIO PUNICODE_STRING DynamicString, OPTOUT PUNICODE_STRING *FullNameOut, OPTOUT PSIZE_T FilePartSize, OPTOUT PSIZE_T LengthNeeded)

_NTFN_EXTERN BOOLEAN	_RtlDosPathNameToNtPathName_U (OPTIN PCWSTR DosPathName, OUT PUNICODE_STRING NtPathName, OPTOUT PCWSTR *NtFileNamePart, OPTOUT PRTL_RELATIVE_NAME_U DirectoryInfo)

_NTFN_EXTERN BOOLEAN	_RtlDosPathNameToRelativeNtPathName_U (IN PCWSTR DosName, OUT PUNICODE_STRING NtName, OUT PCWSTR *PartName, OUT PRTL_RELATIVE_NAME_U RelativeName)

_NTFN_EXTERN NTSTATUS	_RtlExpandEnvironmentStrings_U (IN PWSTR Environment, IN PUNICODE_STRING Source, INOUT PUNICODE_STRING Destination, OUT PULONG Length)

_NTFN_EXTERN ULONG	_RtlGetCurrentDirectory_U (IN ULONG MaximumLength, OUT PWSTR Buffer)

_NTFN_EXTERN ULONG	_RtlGetFullPathName_U (IN PCWSTR FileName, IN ULONG Size, OUT PWSTR Buffer, OPTOUT PWSTR *ShortName)

_NTFN_EXTERN NTSTATUS	_RtlGetFullPathName_UEx (IN PWSTR FileName, IN ULONG BufferLength, OUT PWSTR Buffer, OPTOUT PWSTR FilePart, OPTOUT RTL_PATH_TYPE InputPathType)

_NTFN_EXTERN NTSTATUS	_RtlGetFullPathName_UstrEx (IN PUNICODE_STRING FileName, OPTIN PUNICODE_STRING StaticString, OPTIN PUNICODE_STRING DynamicString, OPTOUT PUNICODE_STRING StringUsed, OPTOUT PSIZE_T FilePartSize, OPTOUT PBOOLEAN NameInvalid, OUT RTL_PATH_TYPE PathType, OPTOUT PSIZE_T LengthNeeded)

_NTFN_EXTERN NTSTATUS	_RtlGetLengthWithoutTrailingPathSeperators (IN ULONG Flags, IN PCUNICODE_STRING PathString, OUT PULONG Length)

_NTFN_EXTERN ULONG	_RtlGetLongestNtPathLength (VOID)

_NTFN_EXTERN ULONG	_RtlIsDosDeviceName_U (IN PCWSTR Name)

_NTFN_EXTERN ULONG	_RtlIsDosDeviceName_Ustr (IN PCUNICODE_STRING Name)

_NTFN_EXTERN BOOLEAN	_RtlIsNameLegalDOS8Dot3 (IN PCUNICODE_STRING Name, IN OUT OPTIONAL POEM_STRING OemName, OUT OPTIONAL PBOOLEAN NameContainsSpaces)

_NTFN_EXTERN NTSTATUS	_RtlQueryEnvironmentVariable_U (IN OPTIONAL PWSTR Environment, IN PUNICODE_STRING Name, OUT PUNICODE_STRING Value)

_NTFN_EXTERN VOID	_RtlReleaseRelativeName (IN PRTL_RELATIVE_NAME_U RelativeName)

_NTFN_EXTERN NTSTATUS	_RtlSetCurrentDirectory_U (IN PUNICODE_STRING name)

_NTFN_EXTERN NTSTATUS	_RtlSetEnvironmentVariable (IN PWSTR *Environment, IN PUNICODE_STRING Name, IN PUNICODE_STRING Value)

_NTFN_EXTERN NTSTATUS	_RtlDeleteCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN NTSTATUS	_RtlEnterCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN NTSTATUS	_RtlInitializeCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN NTSTATUS	_RtlInitializeCriticalSectionAndSpinCount (IN PRTL_CRITICAL_SECTION CriticalSection, IN ULONG SpinCount)

_NTFN_EXTERN NTSTATUS	_RtlLeaveCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN BOOLEAN	_RtlTryEnterCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN VOID	_RtlpUnWaitCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN NTSTATUS	_RtlpWaitForCriticalSection (IN PRTL_CRITICAL_SECTION CriticalSection)

_NTFN_EXTERN BOOLEAN	_RtlAcquireResourceExclusive (IN PRTL_RESOURCE Resource, IN BOOLEAN Wait)

_NTFN_EXTERN BOOLEAN	_RtlAcquireResourceShared (IN PRTL_RESOURCE Resource, IN BOOLEAN Wait)

_NTFN_EXTERN VOID	_RtlConvertExclusiveToShared (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN VOID	_RtlConvertSharedToExclusive (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN VOID	_RtlDeleteResource (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN VOID	_RtlDumpResource (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN VOID	_RtlInitializeResource (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN VOID	_RtlReleaseResource (IN PRTL_RESOURCE Resource)

_NTFN_EXTERN NTSTATUS	_RtlCompressBuffer (IN USHORT CompressionFormatAndEngine, IN PUCHAR UncompressedBuffer, IN ULONG UncompressedBufferSize, OUT PUCHAR CompressedBuffer, IN ULONG CompressedBufferSize, IN ULONG UncompressedChunkSize, OUT PULONG FinalCompressedSize, IN PVOID WorkSpace)

_NTFN_EXTERN NTSTATUS	_RtlDecompressBuffer (IN USHORT CompressionFormat, OUT PUCHAR UncompressedBuffer, IN ULONG UncompressedBufferSize, IN PUCHAR CompressedBuffer, IN ULONG CompressedBufferSize, OUT PULONG FinalUncompressedSize)

_NTFN_EXTERN NTSTATUS	_RtlGetCompressionWorkSpaceSize (IN USHORT CompressionFormatAndEngine, OUT PULONG CompressBufferWorkSpaceSize, OUT PULONG CompressFragmentWorkSpaceSize)

_NTFN_EXTERN VOID	_RtlPopFrame (IN PTEB_ACTIVE_FRAME Frame)

_NTFN_EXTERN VOID	_RtlPushFrame (IN PTEB_ACTIVE_FRAME Frame)

_NTFN_EXTERN PTEB_ACTIVE_FRAME	_RtlGetFrame (VOID)

_NTFN_EXTERN PRTL_DEBUG_INFORMATION	_RtlCreateQueryDebugBuffer (IN ULONG Size, IN BOOLEAN EventPair)

_NTFN_EXTERN NTSTATUS	_RtlDestroyQueryDebugBuffer (IN PRTL_DEBUG_INFORMATION DebugBuffer)

_NTFN_EXTERN NTSTATUS	_RtlQueryProcessDebugInformation (IN ULONG ProcessId, IN ULONG DebugInfoClassMask, INOUT PRTL_DEBUG_INFORMATION DebugBuffer)

_NTFN_EXTERN BOOLEAN	_RtlAreBitsClear (IN PRTL_BITMAP BitMapHeader, IN ULONG StartingIndex, IN ULONG Length)

_NTFN_EXTERN BOOLEAN	_RtlAreBitsSet (IN PRTL_BITMAP BitMapHeader, IN ULONG StartingIndex, IN ULONG Length)

_NTFN_EXTERN VOID	_RtlClearAllBits (IN PRTL_BITMAP BitMapHeader)

_NTFN_EXTERN VOID	_RtlClearBits (IN PRTL_BITMAP BitMapHeader, IN ULONG StartingIndex, IN ULONG NumberToClear)

_NTFN_EXTERN ULONG	_RtlFindClearBits (IN PRTL_BITMAP BitMapHeader, IN ULONG NumberToFind, IN ULONG HintIndex)

_NTFN_EXTERN ULONG	_RtlFindClearBitsAndSet (IN PRTL_BITMAP BitMapHeader, IN ULONG NumberToFind, IN ULONG HintIndex)

_NTFN_EXTERN ULONG	_RtlFindFirstRunClear (IN PRTL_BITMAP BitMapHeader, OUT PULONG StartingIndex)

_NTFN_EXTERN ULONG	_RtlFindClearRuns (IN PRTL_BITMAP BitMapHeader, OUT PRTL_BITMAP_RUN RunArray, IN ULONG SizeOfRunArray, IN BOOLEAN LocateLongestRuns)

_NTFN_EXTERN ULONG	_RtlFindLastBackwardRunClear (IN PRTL_BITMAP BitMapHeader, IN ULONG FromIndex, OUT PULONG StartingRunIndex)

_NTFN_EXTERN CCHAR	_RtlFindLeastSignificantBit (IN ULONGLONG Value)

_NTFN_EXTERN CCHAR	_RtlFindMostSignificantBit (IN ULONGLONG Value)

_NTFN_EXTERN ULONG	_RtlFindNextForwardRunClear (IN PRTL_BITMAP BitMapHeader, IN ULONG FromIndex, OUT PULONG StartingRunIndex)

_NTFN_EXTERN ULONG	_RtlFindNextForwardRunSet (IN PRTL_BITMAP BitMapHeader, IN ULONG FromIndex, OUT PULONG StartingRunIndex)

_NTFN_EXTERN ULONG	_RtlFindSetBits (IN PRTL_BITMAP BitMapHeader, IN ULONG NumberToFind, IN ULONG HintIndex)

_NTFN_EXTERN ULONG	_RtlFindSetBitsAndClear (IN PRTL_BITMAP BitMapHeader, IN ULONG NumberToFind, IN ULONG HintIndex)

_NTFN_EXTERN VOID	_RtlInitializeBitMap (OUT PRTL_BITMAP BitMapHeader, OPTIN PULONG BitMapBuffer, OPTIN ULONG SizeOfBitMap)

_NTFN_EXTERN ULONG	_RtlNumberOfClearBits (IN PRTL_BITMAP BitMapHeader)

_NTFN_EXTERN ULONG	_RtlNumberOfSetBits (IN PRTL_BITMAP BitMapHeader)

_NTFN_EXTERN VOID	_RtlSetBit (IN PRTL_BITMAP BitMapHeader, IN ULONG BitNumber)

_NTFN_EXTERN VOID	_RtlSetBits (IN PRTL_BITMAP BitMapHeader, IN ULONG StartingIndex, IN ULONG NumberToSet)

_NTFN_EXTERN VOID	_RtlSetAllBits (IN PRTL_BITMAP BitMapHeader)

_NTFN_EXTERN BOOLEAN	_RtlTestBit (IN PRTL_BITMAP BitMapHeader, IN ULONG BitNumber)

_NTFN_EXTERN NTSTATUS	_RtlCreateTimer (IN HANDLE TimerQueue, IN PHANDLE phNewTimer, IN WAITORTIMERCALLBACKFUNC Callback, IN PVOID Parameter, IN ULONG DueTime, IN ULONG Period, IN ULONG Flags)

_NTFN_EXTERN NTSTATUS	_RtlCreateTimerQueue (OUT PHANDLE TimerQueue)

_NTFN_EXTERN NTSTATUS	_RtlDeleteTimer (IN HANDLE TimerQueue, IN HANDLE Timer, IN HANDLE CompletionEvent)

_NTFN_EXTERN NTSTATUS	_RtlUpdateTimer (IN HANDLE TimerQueue, IN HANDLE Timer, IN ULONG DueTime, IN ULONG Period)

_NTFN_EXTERN NTSTATUS	_RtlDeleteTimerQueueEx (IN HANDLE TimerQueue, OPTIN HANDLE CompletionEvent)

_NTFN_EXTERN NTSTATUS	_RtlDeleteTimerQueue (HANDLE TimerQueue)

_NTFN_EXTERN PSLIST_ENTRY	_InterlockedPushListSList (INOUT PSLIST_HEADER ListHead, INOUT PSLIST_ENTRY List, INOUT PSLIST_ENTRY ListEnd, IN ULONG Count)

_NTFN_EXTERN VOID	_RtlInitializeRangeList (INOUT PRTL_RANGE_LIST RangeList)

_NTFN_EXTERN VOID	_RtlFreeRangeList (IN PRTL_RANGE_LIST RangeList)

_NTFN_EXTERN NTSTATUS	_RtlAddRange (INOUT PRTL_RANGE_LIST RangeList, IN ULONGLONG Start, IN ULONGLONG End, IN UCHAR Attributes, IN ULONG Flags, OPTIN PVOID UserData, OPTIN PVOID Owner)

_NTFN_EXTERN ULONG __cdecl	_DbgPrint (IN PCSTR Format,...)

_NTFN_EXTERN ULONG __cdecl	_DbgPrintEx (IN ULONG ComponentId, IN ULONG Level, IN PCSTR Format,...)

_NTFN_EXTERN ULONG	_DbgPrompt (IN PCCH Prompt, OUT PCH Response, IN ULONG MaximumResponseLength)

_NTFN_EXTERN VOID	_DbgBreakPoint (VOID)

_NTFN_EXTERN VOID	_DbgLoadImageSymbols (IN PSTRING Name, IN PVOID Base, IN ULONG_PTR ProcessId)

_NTFN_EXTERN VOID	_DbgUnLoadImageSymbols (IN PSTRING Name, IN PVOID Base, IN ULONG_PTR ProcessId)

_NTFN_EXTERN VOID	_DbgCommandString (IN PCCH Name, IN PCCH Command)

_NTFN_EXTERN PRTL_HANDLE_TABLE_ENTRY	_RtlAllocateHandle (IN PRTL_HANDLE_TABLE HandleTable, INOUT PULONG Index)

_NTFN_EXTERN VOID	_RtlDestroyHandleTable (INOUT PRTL_HANDLE_TABLE HandleTable)

_NTFN_EXTERN BOOLEAN	_RtlFreeHandle (IN PRTL_HANDLE_TABLE HandleTable, IN PRTL_HANDLE_TABLE_ENTRY Handle)

_NTFN_EXTERN VOID	_RtlInitializeHandleTable (IN ULONG TableSize, IN ULONG HandleSize, IN PRTL_HANDLE_TABLE HandleTable)

_NTFN_EXTERN BOOLEAN	_RtlIsValidHandle (IN PRTL_HANDLE_TABLE HandleTable, IN PRTL_HANDLE_TABLE_ENTRY Handle)

_NTFN_EXTERN BOOLEAN	_RtlIsValidIndexHandle (IN PRTL_HANDLE_TABLE HandleTable, IN ULONG Index, OUT PRTL_HANDLE_TABLE_ENTRY *Handle)

_NTFN_EXTERN NTSTATUS	_RtlFindMessage (IN PVOID BaseAddress, IN ULONG Type, IN ULONG Language, IN ULONG MessageId, OUT PMESSAGE_RESOURCE_ENTRY *MessageResourceEntry)

_NTFN_EXTERN ULONG	_RtlGetNtGlobalFlags (VOID)

_NTFN_EXTERN PVOID	_RtlImageDirectoryEntryToData (IN PVOID BaseAddress, IN BOOLEAN MappedAsImage, IN USHORT Directory, OUT PULONG Size)

_NTFN_EXTERN PVOID	_RtlImageRvaToVa (IN PIMAGE_NT_HEADERS NtHeader, IN PVOID BaseAddress, IN ULONG Rva, OPTIO PIMAGE_SECTION_HEADER *SectionHeader)

_NTFN_EXTERN PIMAGE_NT_HEADERS	_RtlImageNtHeader (IN PVOID BaseAddress)

_NTFN_EXTERN NTSTATUS	_RtlImageNtHeaderEx (IN ULONG Flags, IN PVOID BaseAddress, IN ULONGLONG Size, OUT PIMAGE_NT_HEADERS *NtHeader)

_NTFN_EXTERN PIMAGE_SECTION_HEADER	_RtlImageRvaToSection (IN PIMAGE_NT_HEADERS NtHeader, IN PVOID BaseAddress, IN ULONG Rva)

_NTFN_EXTERN ULONG	_LdrRelocateImageWithBias (IN PVOID NewAddress, IN LONGLONG AdditionalBias, IN PCCH LoaderName, IN ULONG Success, IN ULONG Conflict, IN ULONG Invalid)

_NTFN_EXTERN NTSTATUS	_RtlActivateActivationContextEx (IN ULONG Flags, IN PTEB Teb, IN PVOID Context, OUT PULONG_PTR Cookie)

_NTFN_EXTERN NTSTATUS	_RtlActivateActivationContext (IN ULONG Flags, IN HANDLE Handle, OUT PULONG_PTR Cookie)

_NTFN_EXTERN VOID	_RtlAddRefActivationContext (IN PVOID Context)

_NTFN_EXTERN PRTL_ACTIVATION_CONTEXT_STACK_FRAME	_RtlActivateActivationContextUnsafeFast (IN PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame, IN PVOID Context)

_NTFN_EXTERN NTSTATUS	_RtlAllocateActivationContextStack (IN PACTIVATION_CONTEXT_STACK *Stack)

_NTFN_EXTERN NTSTATUS	_RtlCreateActivationContext (IN ULONG Flags, IN PACTIVATION_CONTEXT_DATA ActivationContextData, IN ULONG ExtraBytes, IN PVOID NotificationRoutine, IN PVOID NotificationContext, OUT PACTIVATION_CONTEXT *ActCtx)

_NTFN_EXTERN NTSTATUS	_RtlGetActiveActivationContext (IN PVOID *Context)

_NTFN_EXTERN VOID	_RtlReleaseActivationContext (IN HANDLE handle)

_NTFN_EXTERN NTSTATUS	_RtlDeactivateActivationContext (IN ULONG dwFlags, IN ULONG_PTR ulCookie)

_NTFN_EXTERN VOID	_RtlFreeActivationContextStack (IN PACTIVATION_CONTEXT_STACK Stack)

_NTFN_EXTERN VOID	_RtlFreeThreadActivationContextStack (VOID)

_NTFN_EXTERN PRTL_ACTIVATION_CONTEXT_STACK_FRAME	_RtlDeactivateActivationContextUnsafeFast (IN PRTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED Frame)

_NTFN_EXTERN NTSTATUS	_RtlDosApplyFileIsolationRedirection_Ustr (IN ULONG Flags, IN PUNICODE_STRING OriginalName, IN PUNICODE_STRING Extension, INOUT PUNICODE_STRING StaticString, INOUT PUNICODE_STRING DynamicString, INOUT PUNICODE_STRING *NewName, IN PULONG NewFlags, IN PSIZE_T FileNameSize, IN PSIZE_T RequiredLength)

_NTFN_EXTERN NTSTATUS	_RtlFindActivationContextSectionString (IN ULONG dwFlags, IN const GUID ExtensionGuid, IN ULONG SectionType, IN const UNICODE_STRING SectionName, INOUT PVOID ReturnedData)

_NTFN_EXTERN NTSTATUS	_RtlQueryInformationActivationContext (IN DWORD dwFlags, OPTIN PVOID Context, OPTIN PVOID pvSubInstance, IN ULONG ulInfoClass, OUT PVOID pvBuffer, OPTIN SIZE_T cbBuffer, OPTOUT SIZE_T *pcbWrittenOrRequired)

_NTFN_EXTERN NTSTATUS	_RtlQueryInformationActiveActivationContext (IN ULONG ulInfoClass, OUT PVOID pvBuffer, OPTIN SIZE_T cbBuffer, OPTOUT SIZE_T *pcbWrittenOrRequired)

_NTFN_EXTERN NTSTATUS	_RtlZombifyActivationContext (PVOID Context)

_NTFN_EXTERN NTSTATUS	_RtlWow64EnableFsRedirection (IN BOOLEAN Wow64FsEnableRedirection)

_NTFN_EXTERN NTSTATUS	_RtlWow64EnableFsRedirectionEx (IN PVOID Wow64FsEnableRedirection, OUT PVOID *OldFsRedirectionLevel)

_NTFN_EXTERN NTSTATUS	_RtlCheckRegistryKey (IN ULONG RelativeTo, IN PWSTR Path)

_NTFN_EXTERN NTSTATUS	_RtlCreateRegistryKey (IN ULONG RelativeTo, IN PWSTR Path)

_NTFN_EXTERN NTSTATUS	_RtlFormatCurrentUserKeyPath (OUT PUNICODE_STRING KeyPath)

_NTFN_EXTERN NTSTATUS	_RtlOpenCurrentUser (IN ACCESS_MASK DesiredAccess, OUT PHANDLE KeyHandle)

_NTFN_EXTERN NTSTATUS	_RtlQueryRegistryValues (IN ULONG RelativeTo, IN PCWSTR Path, INOUT PRTL_QUERY_REGISTRY_TABLE QueryTable, OPTIN PVOID Context, OPTIN PVOID Environment)

_NTFN_EXTERN NTSTATUS	_RtlWriteRegistryValue (IN ULONG RelativeTo, IN PCWSTR Path, IN PCWSTR ValueName, IN ULONG ValueType, IN PVOID ValueData, IN ULONG ValueLength)

_NTFN_EXTERN NTSTATUS	_RtlpNtCreateKey (OUT HANDLE KeyHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN ULONG TitleIndex, IN PUNICODE_STRING Class, OUT PULONG Disposition)

_NTFN_EXTERN NTSTATUS	_RtlpNtEnumerateSubKey (IN HANDLE KeyHandle, INOUT PUNICODE_STRING SubKeyName, IN ULONG Index, IN ULONG Unused)

_NTFN_EXTERN NTSTATUS	_RtlpNtMakeTemporaryKey (IN HANDLE KeyHandle)

_NTFN_EXTERN NTSTATUS	_RtlpNtOpenKey (OUT HANDLE KeyHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, IN ULONG Unused)

_NTFN_EXTERN NTSTATUS	_RtlpNtQueryValueKey (IN HANDLE KeyHandle, OPTOUT PULONG Type, OPTOUT PVOID Data, OPTIO PULONG DataLength, IN ULONG Unused)

_NTFN_EXTERN NTSTATUS	_RtlpNtSetValueKey (IN HANDLE KeyHandle, IN ULONG Type, IN PVOID Data, IN ULONG DataLength)

_NTFN_EXTERN NTSTATUS	_NtRenameKey (IN HANDLE KeyHandle, IN PUNICODE_STRING NewName)

_NTFN_EXTERN VOID	_RtlGetDefaultCodePage (OUT PUSHORT AnsiCodePage, OUT PUSHORT OemCodePage)

_NTFN_EXTERN VOID	_RtlInitNlsTables (IN PUSHORT AnsiTableBase, IN PUSHORT OemTableBase, IN PUSHORT CaseTableBase, OUT PNLSTABLEINFO NlsTable)

_NTFN_EXTERN VOID	_RtlInitCodePageTable (IN PUSHORT TableBase, OUT PCPTABLEINFO CodePageTable)

_NTFN_EXTERN VOID	_RtlResetRtlTranslations (IN PNLSTABLEINFO NlsTable)

_NTFN_EXTERN LARGE_INTEGER	_RtlExtendedLargeIntegerDivide (IN LARGE_INTEGER Dividend, IN ULONG Divisor, OPTOUT PULONG Remainder)
	defined(NO_RTL_INLINES) More...

_NTFN_EXTERN ULONG	_RtlUniform (IN PULONG Seed)

_NTFN_EXTERN ULONG	_RtlRandom (INOUT PULONG Seed)

_NTFN_EXTERN ULONG	_RtlComputeCrc32 (IN ULONG InitialCrc, IN PUCHAR Buffer, IN ULONG Length)

_NTFN_EXTERN LPSTR	_RtlIpv4AddressToStringA (IN const struct in_addr *Addr, OUT PCHAR S)

_NTFN_EXTERN PWSTR	_RtlIpv4AddressToStringW (IN const struct in_addr *Addr, OUT PWCHAR S)

_NTFN_EXTERN NTSTATUS	_RtlIpv4AddressToStringExA (IN const struct in_addr *Address, IN USHORT Port, OUT PCHAR AddressString, INOUT PULONG AddressStringLength)

_NTFN_EXTERN NTSTATUS	_RtlIpv4AddressToStringExW (IN const struct in_addr *Address, IN USHORT Port, OUT PWCHAR AddressString, INOUT PULONG AddressStringLength)

_NTFN_EXTERN NTSTATUS	_RtlIpv4StringToAddressA (IN PCSTR String, IN BOOLEAN Strict, OUT PCSTR Terminator, OUT struct in_addr Addr)

_NTFN_EXTERN NTSTATUS	_RtlIpv4StringToAddressW (IN PCWSTR String, IN BOOLEAN Strict, OUT PCWSTR Terminator, OUT struct in_addr Addr)

_NTFN_EXTERN NTSTATUS	_RtlIpv4StringToAddressExA (IN PCSTR AddressString, IN BOOLEAN Strict, OUT struct in_addr *Address, OUT PUSHORT Port)

_NTFN_EXTERN NTSTATUS	_RtlIpv4StringToAddressExW (IN PCWSTR AddressString, IN BOOLEAN Strict, OUT struct in_addr *Address, OUT PUSHORT Port)

_NTFN_EXTERN LPSTR	_RtlIpv6AddressToStringA (IN const struct in6_addr *Addr, OUT TSTR S)

_NTFN_EXTERN PWSTR	_RtlIpv6AddressToStringW (IN const struct in6_addr *Addr, OUT PWSTR S)

_NTFN_EXTERN NTSTATUS	_RtlIpv6AddressToStringExA (IN const struct in6_addr *Address, IN ULONG ScopeId, IN USHORT Port, OUT TSTR AddressString, INOUT PULONG AddressStringLength)

_NTFN_EXTERN NTSTATUS	_RtlIpv6AddressToStringExW (IN const struct in6_addr *Address, IN ULONG ScopeId, IN USHORT Port, OUT PWCHAR AddressString, INOUT PULONG AddressStringLength)

_NTFN_EXTERN NTSTATUS	_RtlIpv6StringToAddressA (IN PCSTR String, OUT PCSTR Terminator, OUT struct in6_addr Addr)

_NTFN_EXTERN NTSTATUS	_RtlIpv6StringToAddressW (IN PCWSTR String, OUT PCWSTR Terminator, OUT struct in6_addr Addr)

_NTFN_EXTERN NTSTATUS	_RtlIpv6StringToAddressExA (IN PCSTR AddressString, OUT struct in6_addr *Address, OUT PULONG ScopeId, OUT PUSHORT Port)

_NTFN_EXTERN NTSTATUS	_RtlIpv6StringToAddressExW (IN PCWSTR AddressString, OUT struct in6_addr *Address, OUT PULONG ScopeId, OUT PUSHORT Port)

_NTFN_EXTERN NTSTATUS	_RtlQueryTimeZoneInformation (OUT PRTL_TIME_ZONE_INFORMATION TimeZoneInformation)

_NTFN_EXTERN VOID	_RtlSecondsSince1970ToTime (IN ULONG SecondsSince1970, OUT PLARGE_INTEGER Time)

_NTFN_EXTERN NTSTATUS	_RtlSetTimeZoneInformation (IN PRTL_TIME_ZONE_INFORMATION TimeZoneInformation)

_NTFN_EXTERN BOOLEAN	_RtlTimeFieldsToTime (IN PTIME_FIELDS TimeFields, OUT PLARGE_INTEGER Time)

_NTFN_EXTERN BOOLEAN	_RtlTimeToSecondsSince1970 (IN PLARGE_INTEGER Time, OUT PULONG ElapsedSeconds)

_NTFN_EXTERN VOID	_RtlTimeToTimeFields (PLARGE_INTEGER Time, PTIME_FIELDS TimeFields)

_NTFN_EXTERN NTSTATUS	_RtlSystemTimeToLocalTime (IN PLARGE_INTEGER SystemTime, OUT PLARGE_INTEGER LocalTime)

_NTFN_EXTERN NTSTATUS	_RtlVerifyVersionInfo (IN PRTL_OSVERSIONINFOEXW VersionInfo, IN ULONG TypeMask, IN ULONGLONG ConditionMask)

_NTFN_EXTERN NTSTATUS	_RtlGetVersion (OUT PRTL_OSVERSIONINFOW lpVersionInformation)

_NTFN_EXTERN BOOLEAN	_RtlGetNtProductType (OUT PNT_PRODUCT_TYPE ProductType)

_NTFN_EXTERN NTSTATUS	_RtlRegisterSecureMemoryCacheCallback (IN PRTL_SECURE_MEMORY_CACHE_CALLBACK Callback)

_NTFN_EXTERN BOOLEAN	_RtlFlushSecureMemoryCache (IN PVOID MemoryCache, OPTIN SIZE_T MemoryLength)

_NTFN_EXTERN NTSTATUS	_RtlCreateBootStatusDataFile (VOID)

_NTFN_EXTERN NTSTATUS	_RtlGetSetBootStatusData (IN HANDLE FileHandle, IN BOOLEAN WriteMode, IN RTL_BSD_ITEM_TYPE DataClass, IN PVOID Buffer, IN ULONG BufferSize, OPTOUT PULONG ReturnLength)

_NTFN_EXTERN NTSTATUS	_RtlLockBootStatusData (OUT PHANDLE FileHandle)

_NTFN_EXTERN NTSTATUS	_RtlUnlockBootStatusData (IN HANDLE FileHandle)

_NTFN_EXTERN NTSTATUS	_RtlGUIDFromString (IN PUNICODE_STRING GuidString, OUT GUID *Guid)

_NTFN_EXTERN NTSTATUS	_RtlStringFromGUID (IN REFGUID Guid, OUT PUNICODE_STRING GuidString)

_NTFN_EXTERN NTSTATUS	_RtlComputeImportTableHash (IN HANDLE hFile, OUT PCHAR Hash, IN ULONG ImportTableHashRevision)

_NTFN_EXTERN VOID	_RtlInitMemoryStream (OUT PRTL_MEMORY_STREAM Stream)

_NTFN_EXTERN VOID	_RtlInitOutOfProcessMemoryStream (OUT PRTL_MEMORY_STREAM Stream)

_NTFN_EXTERN VOID	_RtlFinalReleaseOutOfProcessMemoryStream (IN PRTL_MEMORY_STREAM Stream)

_NTFN_EXTERN HRESULT	_RtlQueryInterfaceMemoryStream (IN struct IStream This, IN REFIID RequestedIid, OUT PVOID ResultObject)

_NTFN_EXTERN ULONG	_RtlAddRefMemoryStream (IN struct IStream *This)

_NTFN_EXTERN ULONG	_RtlReleaseMemoryStream (IN struct IStream *This)

_NTFN_EXTERN HRESULT	_RtlReadMemoryStream (IN struct IStream *This, OUT PVOID Buffer, IN ULONG Length, OPTOUT PULONG BytesRead)

_NTFN_EXTERN HRESULT	_RtlReadOutOfProcessMemoryStream (IN struct IStream *This, OUT PVOID Buffer, IN ULONG Length, OPTOUT PULONG BytesRead)

_NTFN_EXTERN HRESULT	_RtlSeekMemoryStream (IN struct IStream *This, IN LARGE_INTEGER RelativeOffset, IN ULONG Origin, OPTOUT PULARGE_INTEGER ResultOffset)

_NTFN_EXTERN HRESULT	_RtlCopyMemoryStreamTo (IN struct IStream This, IN struct IStream Target, IN ULARGE_INTEGER Length, OPTOUT PULARGE_INTEGER BytesRead, OPTOUT PULARGE_INTEGER BytesWritten)

_NTFN_EXTERN HRESULT	_RtlCopyOutOfProcessMemoryStreamTo (IN struct IStream This, IN struct IStream Target, IN ULARGE_INTEGER Length, OPTOUT PULARGE_INTEGER BytesRead, OPTOUT PULARGE_INTEGER BytesWritten)

_NTFN_EXTERN HRESULT	_RtlStatMemoryStream (IN struct IStream This, OUT struct tagSTATSTG Stats, IN ULONG Flags)

_NTFN_EXTERN HRESULT	_RtlWriteMemoryStream (IN struct IStream This, IN CONST VOID Buffer, IN ULONG Length, OPTOUT PULONG BytesWritten)

_NTFN_EXTERN HRESULT	_RtlSetMemoryStreamSize (IN struct IStream *This, IN ULARGE_INTEGER NewSize)

_NTFN_EXTERN HRESULT	_RtlCommitMemoryStream (IN struct IStream *This, IN ULONG CommitFlags)

_NTFN_EXTERN HRESULT	_RtlRevertMemoryStream (IN struct IStream *This)

_NTFN_EXTERN HRESULT	_RtlLockMemoryStreamRegion (IN struct IStream *This, IN ULARGE_INTEGER Offset, IN ULARGE_INTEGER Length, IN ULONG LockType)

_NTFN_EXTERN HRESULT	_RtlUnlockMemoryStreamRegion (IN struct IStream *This, IN ULARGE_INTEGER Offset, IN ULARGE_INTEGER Length, IN ULONG LockType)

_NTFN_EXTERN HRESULT	_RtlCloneMemoryStream (IN struct IStream This, OUT struct IStream *ResultStream)

_NTFN_EXTERN NTSTATUS	_RtlFindActivationContextSectionGuid (ULONG flags, const GUID extguid, ULONG section_kind, const GUID guid, void *ptr)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlSplay (INOUT PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlDelete (IN PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN VOID	_RtlDeleteNoSplay (IN PRTL_SPLAY_LINKS Links, INOUT PRTL_SPLAY_LINKS *Root)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlSubtreeSuccessor (IN PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlSubtreePredecessor (IN PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlRealSuccessor (IN PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN PRTL_SPLAY_LINKS	_RtlRealPredecessor (IN PRTL_SPLAY_LINKS Links)

_NTFN_EXTERN VOID	_RtlInitializeGenericTableAvl (OUT PRTL_AVL_TABLE Table, IN PRTL_AVL_COMPARE_ROUTINE CompareRoutine, OPTIN PRTL_AVL_ALLOCATE_ROUTINE AllocateRoutine, OPTIN PRTL_AVL_FREE_ROUTINE FreeRoutine, OPTIN PVOID TableContext)

_NTFN_EXTERN PVOID	_RtlInsertElementGenericTableAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer, IN CLONG BufferSize, OPTOUT PBOOLEAN NewElement)

_NTFN_EXTERN PVOID	_RtlInsertElementGenericTableFullAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer, IN CLONG BufferSize, OPTOUT PBOOLEAN NewElement, IN PVOID NodeOrParent, IN TABLE_SEARCH_RESULT SearchResult)

_NTFN_EXTERN BOOLEAN	_RtlDeleteElementGenericTableAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer)

_NTFN_EXTERN PVOID	_RtlLookupElementGenericTableAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer)

_NTFN_EXTERN PVOID	_RtlLookupElementGenericTableFullAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer, OUT PVOID NodeOrParent, OUT TABLE_SEARCH_RESULT SearchResult)

_NTFN_EXTERN PVOID	_RtlEnumerateGenericTableAvl (IN PRTL_AVL_TABLE Table, IN BOOLEAN Restart)

_NTFN_EXTERN PVOID	_RtlEnumerateGenericTableWithoutSplayingAvl (IN PRTL_AVL_TABLE Table, INOUT PVOID *RestartKey)

_NTFN_EXTERN PVOID	_RtlLookupFirstMatchingElementGenericTableAvl (IN PRTL_AVL_TABLE Table, IN PVOID Buffer, OUT PVOID *RestartKey)

_NTFN_EXTERN PVOID	_RtlEnumerateGenericTableLikeADirectory (IN PRTL_AVL_TABLE Table, OPTIN PRTL_AVL_MATCH_FUNCTION MatchFunction, OPTIN PVOID MatchData, IN ULONG NextFlag, INOUT PVOID *RestartKey, INOUT PULONG DeleteCount, IN PVOID Buffer)

_NTFN_EXTERN PVOID	_RtlGetElementGenericTableAvl (IN PRTL_AVL_TABLE Table, IN ULONG I)

_NTFN_EXTERN ULONG	_RtlNumberGenericTableElementsAvl (IN PRTL_AVL_TABLE Table)

_NTFN_EXTERN BOOLEAN	_RtlIsGenericTableEmptyAvl (IN PRTL_AVL_TABLE Table)

_NTFN_EXTERN VOID	_RtlInitializeGenericTable (OUT PRTL_GENERIC_TABLE Table, IN PRTL_GENERIC_COMPARE_ROUTINE CompareRoutine, OPTIN PRTL_GENERIC_ALLOCATE_ROUTINE AllocateRoutine, OPTIN PRTL_GENERIC_FREE_ROUTINE FreeRoutine, OPTIN PVOID TableContext)
	RTL_USE_AVL_TABLES. More...

_NTFN_EXTERN PVOID	_RtlInsertElementGenericTable (IN PRTL_GENERIC_TABLE Table, IN PVOID Buffer, IN CLONG BufferSize, OPTOUT PBOOLEAN NewElement)

_NTFN_EXTERN PVOID	_RtlInsertElementGenericTableFull (IN PRTL_GENERIC_TABLE Table, IN PVOID Buffer, IN CLONG BufferSize, OPTOUT PBOOLEAN NewElement, IN PVOID NodeOrParent, IN TABLE_SEARCH_RESULT SearchResult)

_NTFN_EXTERN BOOLEAN	_RtlDeleteElementGenericTable (IN PRTL_GENERIC_TABLE Table, IN PVOID Buffer)

_NTFN_EXTERN PVOID	_RtlLookupElementGenericTable (IN PRTL_GENERIC_TABLE Table, IN PVOID Buffer)

_NTFN_EXTERN PVOID	_RtlLookupElementGenericTableFull (IN PRTL_GENERIC_TABLE Table, IN PVOID Buffer, OUT PVOID NodeOrParent, OUT TABLE_SEARCH_RESULT SearchResult)

_NTFN_EXTERN PVOID	_RtlEnumerateGenericTable (IN PRTL_GENERIC_TABLE Table, IN BOOLEAN Restart)

_NTFN_EXTERN PVOID	_RtlEnumerateGenericTableWithoutSplaying (IN PRTL_GENERIC_TABLE Table, INOUT PVOID *RestartKey)

_NTFN_EXTERN PVOID	_RtlGetElementGenericTable (IN PRTL_GENERIC_TABLE Table, IN ULONG I)

_NTFN_EXTERN ULONG	_RtlNumberGenericTableElements (IN PRTL_GENERIC_TABLE Table)

_NTFN_EXTERN BOOLEAN	_RtlIsGenericTableEmpty (IN PRTL_GENERIC_TABLE Table)

Classes

Macros

Typedefs

Functions