#ifndef _NTRTL_H

// private
typedef struct _RTL_DEBUG_INFORMATION
{
    HANDLE SectionHandleClient;                         // Debug buffer section handle (client view)
    PVOID ViewBaseClient;                               // Debug buffer view base (client process)
    PVOID ViewBaseTarget;                               // Debug buffer view base (target process)
    ULONG_PTR ViewBaseDelta;                            // Offset between client and target view bases
    HANDLE EventPairClient;                             // Event pair for synchronization (client)
    HANDLE EventPairTarget;                             // Event pair for synchronization (target)
    HANDLE TargetProcessId;                             // Target process ID or current process (if RTL_QUERY_PROCESS_USE_CURRENT_PROCESS set)
    HANDLE TargetThreadHandle;                          // Target thread handle
    ULONG Flags;                                        // Query flags (RTL_QUERY_PROCESS_* flags)
    SIZE_T OffsetFree;                                  // Offset of free space in debug buffer
    SIZE_T CommitSize;                                  // Committed size of debug buffer
    SIZE_T ViewSize;                                    // Total view size of debug buffer
    union
    {
        PRTL_PROCESS_MODULES Modules;                   // Module list // RtlQueryProcessModuleInformation // RTL_QUERY_PROCESS_MODULES // RTL_QUERY_PROCESS_MODULES32 // RTL_QUERY_PROCESS_MODULESEX
        PRTL_PROCESS_MODULE_INFORMATION_EX ModulesEx;   // Extended module list // RtlQueryProcessModuleInformation // RTL_QUERY_PROCESS_MODULES // RTL_QUERY_PROCESS_MODULES32 // RTL_QUERY_PROCESS_MODULESEX
    };
    PRTL_PROCESS_BACKTRACES BackTraces;                 // Stack backtraces // RtlQueryProcessBackTraceInformation // RTL_QUERY_PROCESS_BACKTRACES
    PVOID Heaps;                                        // Heap information // RtlQueryProcessHeapInformation // RTL_QUERY_PROCESS_HEAP_SUMMARY // RTL_QUERY_PROCESS_HEAP_TAGS // RTL_QUERY_PROCESS_HEAP_ENTRIES // RTL_QUERY_PROCESS_HEAP_SEGMENTS
    PRTL_PROCESS_LOCKS Locks;                           // Lock information // RtlQueryProcessLockInformation // RTL_QUERY_PROCESS_LOCKS
    PVOID SpecificHeap;                                 // Target heap to query
    HANDLE TargetProcessHandle;                         // Target process to query
    PRTL_PROCESS_VERIFIER_OPTIONS VerifierOptions;      // Verifier options // AVrfpQueryProcessVerifierOptions // RTL_QUERY_PROCESS_VERIFIER_OPTIONS
    PVOID ProcessHeap;                                  // Process heap reference
    HANDLE CriticalSectionHandle;                       // Critical section handle // RtlQueryCriticalSectionOwner // RTL_QUERY_PROCESS_CS_OWNER // RTL_QUERY_PROCESS_NONINVASIVE_CS_OWNER
    HANDLE CriticalSectionOwnerThread;                  // Critical section owner thread // RtlQueryCriticalSectionOwner
    PVOID Reserved[4];
} RTL_DEBUG_INFORMATION, *PRTL_DEBUG_INFORMATION;

#endif
View code on GitHub