2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
18 /* FUNCTION TYPES ************************************************************/
20 /* PROTOTYPES ****************************************************************/
22 /* FIXME: FILE NEEDS CLEANUP */
27 HANDLE NamedPortHandle
,
28 PLPC_MESSAGE ServerReply
,
30 PLPC_SECTION_WRITE WriteMap
,
31 PLPC_SECTION_READ ReadMap
37 IN PUNICODE_STRING EntryName
,
38 IN PUNICODE_STRING EntryValue
44 IN PUNICODE_STRING EntryName
,
45 IN PUNICODE_STRING EntryValue
51 IN HANDLE TokenHandle
,
52 IN BOOLEAN ResetToDefault
,
53 IN PTOKEN_GROUPS NewState
,
54 IN ULONG BufferLength
,
55 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
56 OUT PULONG ReturnLength
62 IN HANDLE TokenHandle
,
63 IN BOOLEAN ResetToDefault
,
64 IN PTOKEN_GROUPS NewState
,
65 IN ULONG BufferLength
,
66 OUT PTOKEN_GROUPS PreviousState
,
67 OUT PULONG ReturnLength
72 NtAdjustPrivilegesToken(
73 IN HANDLE TokenHandle
,
74 IN BOOLEAN DisableAllPrivileges
,
75 IN PTOKEN_PRIVILEGES NewState
,
76 IN ULONG BufferLength
,
77 OUT PTOKEN_PRIVILEGES PreviousState
,
78 OUT PULONG ReturnLength
83 ZwAdjustPrivilegesToken(
84 IN HANDLE TokenHandle
,
85 IN BOOLEAN DisableAllPrivileges
,
86 IN PTOKEN_PRIVILEGES NewState
,
87 IN ULONG BufferLength
,
88 OUT PTOKEN_PRIVILEGES PreviousState
,
89 OUT PULONG ReturnLength
95 IN HANDLE ThreadHandle
,
96 OUT PULONG SuspendCount
102 IN HANDLE ThreadHandle
,
103 OUT PULONG SuspendCount
109 IN HANDLE ThreadHandle
115 IN HANDLE ThreadHandle
120 NtAllocateLocallyUniqueId(
121 OUT LUID
*LocallyUniqueId
126 ZwAllocateLocallyUniqueId(
132 NtAllocateVirtualMemory (
133 IN HANDLE ProcessHandle
,
134 IN OUT PVOID
*BaseAddress
,
136 IN OUT PULONG RegionSize
,
137 IN ULONG AllocationType
,
143 ZwAllocateVirtualMemory (
144 IN HANDLE ProcessHandle
,
145 IN OUT PVOID
*BaseAddress
,
147 IN OUT PULONG RegionSize
,
148 IN ULONG AllocationType
,
154 NtAssignProcessToJobObject(
156 HANDLE ProcessHandle
)
161 ZwAssignProcessToJobObject(
185 IN HANDLE FileHandle
,
186 OUT PIO_STATUS_BLOCK IoStatusBlock
192 IN HANDLE FileHandle
,
193 OUT PIO_STATUS_BLOCK IoStatusBlock
199 IN HANDLE EventHandle
205 IN HANDLE EventHandle
212 ACCESS_MASK DesiredAccess
,
213 POBJECT_ATTRIBUTES ObjectAttributes
220 ACCESS_MASK DesiredAccess
,
221 POBJECT_ATTRIBUTES ObjectAttributes
238 NtCloseObjectAuditAlarm(
239 IN PUNICODE_STRING SubsystemName
,
241 IN BOOLEAN GenerateOnClose
246 ZwCloseObjectAuditAlarm(
247 IN PUNICODE_STRING SubsystemName
,
249 IN BOOLEAN GenerateOnClose
254 NtCompleteConnectPort(
260 ZwCompleteConnectPort(
268 PUNICODE_STRING PortName
,
269 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
270 PLPC_SECTION_WRITE SectionInfo
,
271 PLPC_SECTION_READ MapInfo
,
272 PULONG MaxMessageSize
,
274 PULONG ConnectInfoLength
281 PUNICODE_STRING PortName
,
282 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
283 PLPC_SECTION_WRITE SectionInfo
,
284 PLPC_SECTION_READ MapInfo
,
285 PULONG MaxMessageSize
,
287 PULONG ConnectInfoLength
292 NtCreateDirectoryObject(
293 OUT PHANDLE DirectoryHandle
,
294 IN ACCESS_MASK DesiredAccess
,
295 IN POBJECT_ATTRIBUTES ObjectAttributes
300 ZwCreateDirectoryObject(
301 OUT PHANDLE DirectoryHandle
,
302 IN ACCESS_MASK DesiredAccess
,
303 IN POBJECT_ATTRIBUTES ObjectAttributes
309 OUT PHANDLE EventHandle
,
310 IN ACCESS_MASK DesiredAccess
,
311 IN POBJECT_ATTRIBUTES ObjectAttributes
,
312 IN EVENT_TYPE EventType
,
313 IN BOOLEAN InitialState
319 OUT PHANDLE EventHandle
,
320 IN ACCESS_MASK DesiredAccess
,
321 IN POBJECT_ATTRIBUTES ObjectAttributes
,
322 IN EVENT_TYPE EventType
,
323 IN BOOLEAN InitialState
329 OUT PHANDLE EventPairHandle
,
330 IN ACCESS_MASK DesiredAccess
,
331 IN POBJECT_ATTRIBUTES ObjectAttributes
337 OUT PHANDLE EventPairHandle
,
338 IN ACCESS_MASK DesiredAccess
,
339 IN POBJECT_ATTRIBUTES ObjectAttributes
345 OUT PHANDLE FileHandle
,
346 IN ACCESS_MASK DesiredAccess
,
347 IN POBJECT_ATTRIBUTES ObjectAttributes
,
348 OUT PIO_STATUS_BLOCK IoStatusBlock
,
349 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
350 IN ULONG FileAttributes
,
351 IN ULONG ShareAccess
,
352 IN ULONG CreateDisposition
,
353 IN ULONG CreateOptions
,
354 IN PVOID EaBuffer OPTIONAL
,
361 OUT PHANDLE FileHandle
,
362 IN ACCESS_MASK DesiredAccess
,
363 IN POBJECT_ATTRIBUTES ObjectAttributes
,
364 OUT PIO_STATUS_BLOCK IoStatusBlock
,
365 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
366 IN ULONG FileAttributes
,
367 IN ULONG ShareAccess
,
368 IN ULONG CreateDisposition
,
369 IN ULONG CreateOptions
,
370 IN PVOID EaBuffer OPTIONAL
,
376 NtCreateIoCompletion(
377 OUT PHANDLE IoCompletionHandle
,
378 IN ACCESS_MASK DesiredAccess
,
379 IN POBJECT_ATTRIBUTES ObjectAttributes
,
380 IN ULONG NumberOfConcurrentThreads
385 ZwCreateIoCompletion(
386 OUT PHANDLE IoCompletionHandle
,
387 IN ACCESS_MASK DesiredAccess
,
388 IN POBJECT_ATTRIBUTES ObjectAttributes
,
389 IN ULONG NumberOfConcurrentThreads
395 OUT PHANDLE KeyHandle
,
396 IN ACCESS_MASK DesiredAccess
,
397 IN POBJECT_ATTRIBUTES ObjectAttributes
,
399 IN PUNICODE_STRING Class OPTIONAL
,
400 IN ULONG CreateOptions
,
401 IN PULONG Disposition OPTIONAL
407 OUT PHANDLE KeyHandle
,
408 IN ACCESS_MASK DesiredAccess
,
409 IN POBJECT_ATTRIBUTES ObjectAttributes
,
411 IN PUNICODE_STRING Class OPTIONAL
,
412 IN ULONG CreateOptions
,
413 IN PULONG Disposition OPTIONAL
418 NtCreateMailslotFile(
419 OUT PHANDLE MailSlotFileHandle
,
420 IN ACCESS_MASK DesiredAccess
,
421 IN POBJECT_ATTRIBUTES ObjectAttributes
,
422 OUT PIO_STATUS_BLOCK IoStatusBlock
,
423 IN ULONG FileAttributes
,
424 IN ULONG ShareAccess
,
425 IN ULONG MaxMessageSize
,
426 IN PLARGE_INTEGER TimeOut
431 ZwCreateMailslotFile(
432 OUT PHANDLE MailSlotFileHandle
,
433 IN ACCESS_MASK DesiredAccess
,
434 IN POBJECT_ATTRIBUTES ObjectAttributes
,
435 OUT PIO_STATUS_BLOCK IoStatusBlock
,
436 IN ULONG FileAttributes
,
437 IN ULONG ShareAccess
,
438 IN ULONG MaxMessageSize
,
439 IN PLARGE_INTEGER TimeOut
445 OUT PHANDLE MutantHandle
,
446 IN ACCESS_MASK DesiredAccess
,
447 IN POBJECT_ATTRIBUTES ObjectAttributes
,
448 IN BOOLEAN InitialOwner
454 OUT PHANDLE MutantHandle
,
455 IN ACCESS_MASK DesiredAccess
,
456 IN POBJECT_ATTRIBUTES ObjectAttributes
,
457 IN BOOLEAN InitialOwner
462 NtCreateNamedPipeFile(
463 OUT PHANDLE NamedPipeFileHandle
,
464 IN ACCESS_MASK DesiredAccess
,
465 IN POBJECT_ATTRIBUTES ObjectAttributes
,
466 OUT PIO_STATUS_BLOCK IoStatusBlock
,
467 IN ULONG ShareAccess
,
468 IN ULONG CreateDisposition
,
469 IN ULONG CreateOptions
,
470 IN ULONG WriteModeMessage
,
471 IN ULONG ReadModeMessage
,
472 IN ULONG NonBlocking
,
473 IN ULONG MaxInstances
,
474 IN ULONG InBufferSize
,
475 IN ULONG OutBufferSize
,
476 IN PLARGE_INTEGER DefaultTimeOut
481 ZwCreateNamedPipeFile(
482 OUT PHANDLE NamedPipeFileHandle
,
483 IN ACCESS_MASK DesiredAccess
,
484 IN POBJECT_ATTRIBUTES ObjectAttributes
,
485 OUT PIO_STATUS_BLOCK IoStatusBlock
,
486 IN ULONG ShareAccess
,
487 IN ULONG CreateDisposition
,
488 IN ULONG CreateOptions
,
489 IN ULONG WriteModeMessage
,
490 IN ULONG ReadModeMessage
,
491 IN ULONG NonBlocking
,
492 IN ULONG MaxInstances
,
493 IN ULONG InBufferSize
,
494 IN ULONG OutBufferSize
,
495 IN PLARGE_INTEGER DefaultTimeOut
502 POBJECT_ATTRIBUTES ObjectAttributes
,
503 ULONG MaxConnectInfoLength
,
505 ULONG NPMessageQueueSize OPTIONAL
512 POBJECT_ATTRIBUTES ObjectAttributes
,
513 ULONG MaxConnectInfoLength
,
515 ULONG NPMessageQueueSize OPTIONAL
521 OUT PHANDLE ProcessHandle
,
522 IN ACCESS_MASK DesiredAccess
,
523 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
524 IN HANDLE ParentProcess
,
525 IN BOOLEAN InheritObjectTable
,
526 IN HANDLE SectionHandle OPTIONAL
,
527 IN HANDLE DebugPort OPTIONAL
,
528 IN HANDLE ExceptionPort OPTIONAL
534 OUT PHANDLE ProcessHandle
,
535 IN ACCESS_MASK DesiredAccess
,
536 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
537 IN HANDLE ParentProcess
,
538 IN BOOLEAN InheritObjectTable
,
539 IN HANDLE SectionHandle OPTIONAL
,
540 IN HANDLE DebugPort OPTIONAL
,
541 IN HANDLE ExceptionPort OPTIONAL
547 OUT PHANDLE SectionHandle
,
548 IN ACCESS_MASK DesiredAccess
,
549 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
550 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
551 IN ULONG SectionPageProtection OPTIONAL
,
552 IN ULONG AllocationAttributes
,
553 IN HANDLE FileHandle OPTIONAL
559 OUT PHANDLE SectionHandle
,
560 IN ACCESS_MASK DesiredAccess
,
561 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
562 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
563 IN ULONG SectionPageProtection OPTIONAL
,
564 IN ULONG AllocationAttributes
,
565 IN HANDLE FileHandle OPTIONAL
571 OUT PHANDLE SemaphoreHandle
,
572 IN ACCESS_MASK DesiredAccess
,
573 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
574 IN LONG InitialCount
,
581 OUT PHANDLE SemaphoreHandle
,
582 IN ACCESS_MASK DesiredAccess
,
583 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
584 IN LONG InitialCount
,
590 NtCreateSymbolicLinkObject(
591 OUT PHANDLE SymbolicLinkHandle
,
592 IN ACCESS_MASK DesiredAccess
,
593 IN POBJECT_ATTRIBUTES ObjectAttributes
,
594 IN PUNICODE_STRING Name
599 ZwCreateSymbolicLinkObject(
600 OUT PHANDLE SymbolicLinkHandle
,
601 IN ACCESS_MASK DesiredAccess
,
602 IN POBJECT_ATTRIBUTES ObjectAttributes
,
603 IN PUNICODE_STRING Name
609 OUT PHANDLE TimerHandle
,
610 IN ACCESS_MASK DesiredAccess
,
611 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
612 IN TIMER_TYPE TimerType
618 OUT PHANDLE TimerHandle
,
619 IN ACCESS_MASK DesiredAccess
,
620 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
621 IN TIMER_TYPE TimerType
627 OUT PHANDLE TokenHandle
,
628 IN ACCESS_MASK DesiredAccess
,
629 IN POBJECT_ATTRIBUTES ObjectAttributes
,
630 IN TOKEN_TYPE TokenType
,
631 IN PLUID AuthenticationId
,
632 IN PLARGE_INTEGER ExpirationTime
,
633 IN PTOKEN_USER TokenUser
,
634 IN PTOKEN_GROUPS TokenGroups
,
635 IN PTOKEN_PRIVILEGES TokenPrivileges
,
636 IN PTOKEN_OWNER TokenOwner
,
637 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
638 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
639 IN PTOKEN_SOURCE TokenSource
645 OUT PHANDLE TokenHandle
,
646 IN ACCESS_MASK DesiredAccess
,
647 IN POBJECT_ATTRIBUTES ObjectAttributes
,
648 IN TOKEN_TYPE TokenType
,
649 IN PLUID AuthenticationId
,
650 IN PLARGE_INTEGER ExpirationTime
,
651 IN PTOKEN_USER TokenUser
,
652 IN PTOKEN_GROUPS TokenGroups
,
653 IN PTOKEN_PRIVILEGES TokenPrivileges
,
654 IN PTOKEN_OWNER TokenOwner
,
655 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
656 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
657 IN PTOKEN_SOURCE TokenSource
662 NtCreateWaitablePort(
664 POBJECT_ATTRIBUTES ObjectAttributes
,
665 ULONG MaxConnectInfoLength
,
667 ULONG NPMessageQueueSize OPTIONAL
672 ZwCreateWaitablePort(
674 POBJECT_ATTRIBUTES ObjectAttributes
,
675 ULONG MaxConnectInfoLength
,
677 ULONG NPMessageQueueSize OPTIONAL
695 IN PUNICODE_STRING EntryName
,
696 IN PUNICODE_STRING EntryValue
702 IN PUNICODE_STRING EntryName
,
703 IN PUNICODE_STRING EntryValue
709 IN POBJECT_ATTRIBUTES ObjectAttributes
715 IN POBJECT_ATTRIBUTES ObjectAttributes
732 NtDeleteObjectAuditAlarm(
733 IN PUNICODE_STRING SubsystemName
,
735 IN BOOLEAN GenerateOnClose
740 ZwDeleteObjectAuditAlarm(
741 IN PUNICODE_STRING SubsystemName
,
743 IN BOOLEAN GenerateOnClose
750 IN PUNICODE_STRING ValueName
757 IN PUNICODE_STRING ValueName
762 NtDeviceIoControlFile(
763 IN HANDLE DeviceHandle
,
764 IN HANDLE Event OPTIONAL
,
765 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
766 IN PVOID UserApcContext OPTIONAL
,
767 OUT PIO_STATUS_BLOCK IoStatusBlock
,
768 IN ULONG IoControlCode
,
769 IN PVOID InputBuffer
,
770 IN ULONG InputBufferSize
,
771 OUT PVOID OutputBuffer
,
772 IN ULONG OutputBufferSize
777 ZwDeviceIoControlFile(
778 IN HANDLE DeviceHandle
,
779 IN HANDLE Event OPTIONAL
,
780 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
781 IN PVOID UserApcContext OPTIONAL
,
782 OUT PIO_STATUS_BLOCK IoStatusBlock
,
783 IN ULONG IoControlCode
,
784 IN PVOID InputBuffer
,
785 IN ULONG InputBufferSize
,
786 OUT PVOID OutputBuffer
,
787 IN ULONG OutputBufferSize
793 IN PUNICODE_STRING DisplayString
799 IN PUNICODE_STRING DisplayString
804 NtEnumerateBootEntries(
811 ZwEnumerateBootEntries(
821 IN KEY_INFORMATION_CLASS KeyInformationClass
,
822 OUT PVOID KeyInformation
,
824 OUT PULONG ResultLength
832 IN KEY_INFORMATION_CLASS KeyInformationClass
,
833 OUT PVOID KeyInformation
,
835 OUT PULONG ResultLength
842 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
843 OUT PVOID KeyValueInformation
,
845 OUT PULONG ResultLength
853 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
854 OUT PVOID KeyValueInformation
,
856 OUT PULONG ResultLength
862 IN HANDLE FileHandle
,
863 OUT PIO_STATUS_BLOCK IoStatusBlock
869 IN HANDLE FileHandle
,
870 OUT PIO_STATUS_BLOCK IoStatusBlock
887 NtFlushWriteBuffer(VOID
);
891 ZwFlushWriteBuffer(VOID
);
896 IN HANDLE ProcessHandle
,
897 IN PVOID
*BaseAddress
,
898 IN PULONG RegionSize
,
905 IN HANDLE ProcessHandle
,
906 IN PVOID
*BaseAddress
,
907 IN PULONG RegionSize
,
914 IN HANDLE DeviceHandle
,
915 IN HANDLE Event OPTIONAL
,
916 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
917 IN PVOID ApcContext OPTIONAL
,
918 OUT PIO_STATUS_BLOCK IoStatusBlock
,
919 IN ULONG IoControlCode
,
920 IN PVOID InputBuffer
,
921 IN ULONG InputBufferSize
,
922 OUT PVOID OutputBuffer
,
923 IN ULONG OutputBufferSize
929 IN HANDLE DeviceHandle
,
930 IN HANDLE Event OPTIONAL
,
931 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
932 IN PVOID ApcContext OPTIONAL
,
933 OUT PIO_STATUS_BLOCK IoStatusBlock
,
934 IN ULONG IoControlCode
,
935 IN PVOID InputBuffer
,
936 IN ULONG InputBufferSize
,
937 OUT PVOID OutputBuffer
,
938 IN ULONG OutputBufferSize
944 IN HANDLE ThreadHandle
,
951 IN HANDLE ThreadHandle
,
960 struct _PLUGPLAY_EVENT_BLOCK
*Buffer
,
966 NtImpersonateClientOfPort(
968 PLPC_MESSAGE ClientMessage
973 ZwImpersonateClientOfPort(
975 PLPC_MESSAGE ClientMessage
981 IN HANDLE ThreadHandle
,
982 IN HANDLE ThreadToImpersonate
,
983 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
989 IN HANDLE ThreadHandle
,
990 IN HANDLE ThreadToImpersonate
,
991 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
996 NtInitiatePowerAction(
997 POWER_ACTION SystemAction
,
998 SYSTEM_POWER_STATE MinSystemState
,
1000 BOOLEAN Asynchronous
1005 ZwInitiatePowerAction(
1006 POWER_ACTION SystemAction
,
1007 SYSTEM_POWER_STATE MinSystemState
,
1009 BOOLEAN Asynchronous
1014 NtInitializeRegistry(
1020 ZwInitializeRegistry(
1027 IN HANDLE ProcessHandle
,
1028 IN HANDLE JobHandle OPTIONAL
1034 IN HANDLE ProcessHandle
,
1035 IN HANDLE JobHandle OPTIONAL
1040 NtListenPort(HANDLE PortHandle
,
1041 PLPC_MESSAGE LpcMessage
1046 ZwListenPort(HANDLE PortHandle
,
1047 PLPC_MESSAGE LpcMessage
1053 IN PUNICODE_STRING DriverServiceName
1059 IN PUNICODE_STRING DriverServiceName
1065 IN HANDLE FileHandle
,
1066 IN HANDLE Event OPTIONAL
,
1067 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1068 IN PVOID ApcContext OPTIONAL
,
1069 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1070 IN PLARGE_INTEGER ByteOffset
,
1071 IN PLARGE_INTEGER Length
,
1073 IN BOOLEAN FailImmediatedly
,
1074 IN BOOLEAN ExclusiveLock
1080 IN HANDLE FileHandle
,
1081 IN HANDLE Event OPTIONAL
,
1082 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1083 IN PVOID ApcContext OPTIONAL
,
1084 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1085 IN PLARGE_INTEGER ByteOffset
,
1086 IN PLARGE_INTEGER Length
,
1088 IN BOOLEAN FailImmediatedly
,
1089 IN BOOLEAN ExclusiveLock
1094 NtMakePermanentObject(
1100 ZwMakePermanentObject(
1106 NtMakeTemporaryObject(
1112 ZwMakeTemporaryObject(
1119 IN HANDLE SectionHandle
,
1120 IN HANDLE ProcessHandle
,
1121 IN OUT PVOID
*BaseAddress
,
1123 IN ULONG CommitSize
,
1124 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1125 IN OUT PULONG ViewSize
,
1126 IN SECTION_INHERIT InheritDisposition
,
1127 IN ULONG AllocationType
,
1128 IN ULONG AccessProtection
1134 IN HANDLE SectionHandle
,
1135 IN HANDLE ProcessHandle
,
1136 IN OUT PVOID
*BaseAddress
,
1138 IN ULONG CommitSize
,
1139 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1140 IN OUT PULONG ViewSize
,
1141 IN SECTION_INHERIT InheritDisposition
,
1142 IN ULONG AllocationType
,
1143 IN ULONG AccessProtection
1148 NtNotifyChangeDirectoryFile(
1149 IN HANDLE FileHandle
,
1150 IN HANDLE Event OPTIONAL
,
1151 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1152 IN PVOID ApcContext OPTIONAL
,
1153 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1155 IN ULONG BufferSize
,
1156 IN ULONG CompletionFilter
,
1157 IN BOOLEAN WatchTree
1162 ZwNotifyChangeDirectoryFile(
1163 IN HANDLE FileHandle
,
1164 IN HANDLE Event OPTIONAL
,
1165 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1166 IN PVOID ApcContext OPTIONAL
,
1167 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1169 IN ULONG BufferSize
,
1170 IN ULONG CompletionFilter
,
1171 IN BOOLEAN WatchTree
1177 IN HANDLE KeyHandle
,
1179 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1180 IN PVOID ApcContext OPTIONAL
,
1181 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1182 IN ULONG CompletionFilter
,
1183 IN BOOLEAN Asynchroneous
,
1184 OUT PVOID ChangeBuffer
,
1186 IN BOOLEAN WatchSubtree
1192 IN HANDLE KeyHandle
,
1194 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1195 IN PVOID ApcContext OPTIONAL
,
1196 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1197 IN ULONG CompletionFilter
,
1198 IN BOOLEAN Asynchroneous
,
1199 OUT PVOID ChangeBuffer
,
1201 IN BOOLEAN WatchSubtree
1206 NtOpenDirectoryObject(
1207 OUT PHANDLE FileHandle
,
1208 IN ACCESS_MASK DesiredAccess
,
1209 IN POBJECT_ATTRIBUTES ObjectAttributes
1214 ZwOpenDirectoryObject(
1215 OUT PHANDLE FileHandle
,
1216 IN ACCESS_MASK DesiredAccess
,
1217 IN POBJECT_ATTRIBUTES ObjectAttributes
1223 OUT PHANDLE EventHandle
,
1224 IN ACCESS_MASK DesiredAccess
,
1225 IN POBJECT_ATTRIBUTES ObjectAttributes
1231 OUT PHANDLE EventHandle
,
1232 IN ACCESS_MASK DesiredAccess
,
1233 IN POBJECT_ATTRIBUTES ObjectAttributes
1239 OUT PHANDLE EventPairHandle
,
1240 IN ACCESS_MASK DesiredAccess
,
1241 IN POBJECT_ATTRIBUTES ObjectAttributes
1247 OUT PHANDLE EventPairHandle
,
1248 IN ACCESS_MASK DesiredAccess
,
1249 IN POBJECT_ATTRIBUTES ObjectAttributes
1255 OUT PHANDLE FileHandle
,
1256 IN ACCESS_MASK DesiredAccess
,
1257 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1258 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1259 IN ULONG ShareAccess
,
1260 IN ULONG OpenOptions
1266 OUT PHANDLE FileHandle
,
1267 IN ACCESS_MASK DesiredAccess
,
1268 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1269 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1270 IN ULONG ShareAccess
,
1271 IN ULONG OpenOptions
1277 OUT PHANDLE CompetionPort
,
1278 IN ACCESS_MASK DesiredAccess
,
1279 IN POBJECT_ATTRIBUTES ObjectAttributes
1285 OUT PHANDLE CompetionPort
,
1286 IN ACCESS_MASK DesiredAccess
,
1287 IN POBJECT_ATTRIBUTES ObjectAttributes
1294 ACCESS_MASK DesiredAccess
,
1295 POBJECT_ATTRIBUTES ObjectAttributes
1302 ACCESS_MASK DesiredAccess
,
1303 POBJECT_ATTRIBUTES ObjectAttributes
1309 OUT PHANDLE KeyHandle
,
1310 IN ACCESS_MASK DesiredAccess
,
1311 IN POBJECT_ATTRIBUTES ObjectAttributes
1317 OUT PHANDLE KeyHandle
,
1318 IN ACCESS_MASK DesiredAccess
,
1319 IN POBJECT_ATTRIBUTES ObjectAttributes
1325 OUT PHANDLE MutantHandle
,
1326 IN ACCESS_MASK DesiredAccess
,
1327 IN POBJECT_ATTRIBUTES ObjectAttributes
1333 OUT PHANDLE MutantHandle
,
1334 IN ACCESS_MASK DesiredAccess
,
1335 IN POBJECT_ATTRIBUTES ObjectAttributes
1341 OUT PHANDLE ProcessHandle
,
1342 IN ACCESS_MASK DesiredAccess
,
1343 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1344 IN PCLIENT_ID ClientId
1350 OUT PHANDLE ProcessHandle
,
1351 IN ACCESS_MASK DesiredAccess
,
1352 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1353 IN PCLIENT_ID ClientId
1359 IN HANDLE ProcessHandle
,
1360 IN ACCESS_MASK DesiredAccess
,
1361 OUT PHANDLE TokenHandle
1367 IN HANDLE ProcessHandle
,
1368 IN ACCESS_MASK DesiredAccess
,
1369 OUT PHANDLE TokenHandle
1374 NtOpenProcessTokenEx(
1375 IN HANDLE ProcessHandle
,
1376 IN ACCESS_MASK DesiredAccess
,
1377 IN ULONG HandleAttributes
,
1378 OUT PHANDLE TokenHandle
1383 ZwOpenProcessTokenEx(
1384 IN HANDLE ProcessHandle
,
1385 IN ACCESS_MASK DesiredAccess
,
1386 IN ULONG HandleAttributes
,
1387 OUT PHANDLE TokenHandle
1393 OUT PHANDLE SectionHandle
,
1394 IN ACCESS_MASK DesiredAccess
,
1395 IN POBJECT_ATTRIBUTES ObjectAttributes
1401 OUT PHANDLE SectionHandle
,
1402 IN ACCESS_MASK DesiredAccess
,
1403 IN POBJECT_ATTRIBUTES ObjectAttributes
1409 OUT PHANDLE SemaphoreHandle
,
1410 IN ACCESS_MASK DesiredAcces
,
1411 IN POBJECT_ATTRIBUTES ObjectAttributes
1417 OUT PHANDLE SemaphoreHandle
,
1418 IN ACCESS_MASK DesiredAcces
,
1419 IN POBJECT_ATTRIBUTES ObjectAttributes
1424 NtOpenSymbolicLinkObject(
1425 OUT PHANDLE SymbolicLinkHandle
,
1426 IN ACCESS_MASK DesiredAccess
,
1427 IN POBJECT_ATTRIBUTES ObjectAttributes
1432 ZwOpenSymbolicLinkObject(
1433 OUT PHANDLE SymbolicLinkHandle
,
1434 IN ACCESS_MASK DesiredAccess
,
1435 IN POBJECT_ATTRIBUTES ObjectAttributes
1441 OUT PHANDLE ThreadHandle
,
1442 IN ACCESS_MASK DesiredAccess
,
1443 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1444 IN PCLIENT_ID ClientId
1450 OUT PHANDLE ThreadHandle
,
1451 IN ACCESS_MASK DesiredAccess
,
1452 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1453 IN PCLIENT_ID ClientId
1459 IN HANDLE ThreadHandle
,
1460 IN ACCESS_MASK DesiredAccess
,
1461 IN BOOLEAN OpenAsSelf
,
1462 OUT PHANDLE TokenHandle
1468 IN HANDLE ThreadHandle
,
1469 IN ACCESS_MASK DesiredAccess
,
1470 IN BOOLEAN OpenAsSelf
,
1471 OUT PHANDLE TokenHandle
1476 NtOpenThreadTokenEx(
1477 IN HANDLE ThreadHandle
,
1478 IN ACCESS_MASK DesiredAccess
,
1479 IN BOOLEAN OpenAsSelf
,
1480 IN ULONG HandleAttributes
,
1481 OUT PHANDLE TokenHandle
1486 ZwOpenThreadTokenEx(
1487 IN HANDLE ThreadHandle
,
1488 IN ACCESS_MASK DesiredAccess
,
1489 IN BOOLEAN OpenAsSelf
,
1490 IN ULONG HandleAttributes
,
1491 OUT PHANDLE TokenHandle
1497 OUT PHANDLE TimerHandle
,
1498 IN ACCESS_MASK DesiredAccess
,
1499 IN POBJECT_ATTRIBUTES ObjectAttributes
1504 OUT PHANDLE TimerHandle
,
1505 IN ACCESS_MASK DesiredAccess
,
1506 IN POBJECT_ATTRIBUTES ObjectAttributes
1520 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1522 ULONG InputBufferLength
,
1524 ULONG OutputBufferLength
1530 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1532 ULONG InputBufferLength
,
1534 ULONG OutputBufferLength
1540 IN HANDLE ClientToken
,
1541 IN PPRIVILEGE_SET RequiredPrivileges
,
1548 IN HANDLE ClientToken
,
1549 IN PPRIVILEGE_SET RequiredPrivileges
,
1555 NtPrivilegedServiceAuditAlarm(
1556 IN PUNICODE_STRING SubsystemName
,
1557 IN PUNICODE_STRING ServiceName
,
1558 IN HANDLE ClientToken
,
1559 IN PPRIVILEGE_SET Privileges
,
1560 IN BOOLEAN AccessGranted
1565 ZwPrivilegedServiceAuditAlarm(
1566 IN PUNICODE_STRING SubsystemName
,
1567 IN PUNICODE_STRING ServiceName
,
1568 IN HANDLE ClientToken
,
1569 IN PPRIVILEGE_SET Privileges
,
1570 IN BOOLEAN AccessGranted
1575 NtPrivilegeObjectAuditAlarm(
1576 IN PUNICODE_STRING SubsystemName
,
1578 IN HANDLE ClientToken
,
1579 IN ULONG DesiredAccess
,
1580 IN PPRIVILEGE_SET Privileges
,
1581 IN BOOLEAN AccessGranted
1586 ZwPrivilegeObjectAuditAlarm(
1587 IN PUNICODE_STRING SubsystemName
,
1589 IN HANDLE ClientToken
,
1590 IN ULONG DesiredAccess
,
1591 IN PPRIVILEGE_SET Privileges
,
1592 IN BOOLEAN AccessGranted
1598 IN HANDLE EventHandle
,
1599 IN PLONG PulseCount OPTIONAL
1605 IN HANDLE EventHandle
,
1606 IN PLONG PulseCount OPTIONAL
1611 NtQueryAttributesFile(
1612 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1613 OUT PFILE_BASIC_INFORMATION FileInformation
1618 ZwQueryAttributesFile(
1619 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1620 OUT PFILE_BASIC_INFORMATION FileInformation
1626 NtQueryBootEntryOrder(
1633 ZwQueryBootEntryOrder(
1653 NtQueryDefaultLocale(
1654 IN BOOLEAN UserProfile
,
1655 OUT PLCID DefaultLocaleId
1660 ZwQueryDefaultLocale(
1661 IN BOOLEAN UserProfile
,
1662 OUT PLCID DefaultLocaleId
1667 NtQueryDefaultUILanguage(
1673 ZwQueryDefaultUILanguage(
1679 NtQueryDirectoryFile(
1680 IN HANDLE FileHandle
,
1681 IN HANDLE Event OPTIONAL
,
1682 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1683 IN PVOID ApcContext OPTIONAL
,
1684 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1685 OUT PVOID FileInformation
,
1687 IN FILE_INFORMATION_CLASS FileInformationClass
,
1688 IN BOOLEAN ReturnSingleEntry
,
1689 IN PUNICODE_STRING FileName OPTIONAL
,
1690 IN BOOLEAN RestartScan
1695 ZwQueryDirectoryFile(
1696 IN HANDLE FileHandle
,
1697 IN HANDLE Event OPTIONAL
,
1698 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1699 IN PVOID ApcContext OPTIONAL
,
1700 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1701 OUT PVOID FileInformation
,
1703 IN FILE_INFORMATION_CLASS FileInformationClass
,
1704 IN BOOLEAN ReturnSingleEntry
,
1705 IN PUNICODE_STRING FileName OPTIONAL
,
1706 IN BOOLEAN RestartScan
1712 IN HANDLE FileHandle
,
1713 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1716 IN BOOLEAN ReturnSingleEntry
,
1717 IN PVOID EaList OPTIONAL
,
1718 IN ULONG EaListLength
,
1719 IN PULONG EaIndex OPTIONAL
,
1720 IN BOOLEAN RestartScan
1726 IN HANDLE FileHandle
,
1727 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1730 IN BOOLEAN ReturnSingleEntry
,
1731 IN PVOID EaList OPTIONAL
,
1732 IN ULONG EaListLength
,
1733 IN PULONG EaIndex OPTIONAL
,
1734 IN BOOLEAN RestartScan
1740 IN HANDLE EventHandle
,
1741 IN EVENT_INFORMATION_CLASS EventInformationClass
,
1742 OUT PVOID EventInformation
,
1743 IN ULONG EventInformationLength
,
1744 OUT PULONG ReturnLength
1749 IN HANDLE EventHandle
,
1750 IN EVENT_INFORMATION_CLASS EventInformationClass
,
1751 OUT PVOID EventInformation
,
1752 IN ULONG EventInformationLength
,
1753 OUT PULONG ReturnLength
1758 NtQueryFullAttributesFile(
1759 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1760 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1765 ZwQueryFullAttributesFile(
1766 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1767 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1772 NtQueryInformationFile(
1773 IN HANDLE FileHandle
,
1774 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1775 OUT PVOID FileInformation
,
1777 IN FILE_INFORMATION_CLASS FileInformationClass
1782 ZwQueryInformationFile(
1784 PIO_STATUS_BLOCK IoStatusBlock
,
1785 PVOID FileInformation
,
1787 FILE_INFORMATION_CLASS FileInformationClass
1792 NtQueryInformationJobObject(
1794 JOBOBJECTINFOCLASS JobInformationClass
,
1795 PVOID JobInformation
,
1796 ULONG JobInformationLength
,
1802 ZwQueryInformationJobObject(
1804 JOBOBJECTINFOCLASS JobInformationClass
,
1805 PVOID JobInformation
,
1806 ULONG JobInformationLength
,
1812 NtQueryInformationPort(
1814 CINT PortInformationClass
,
1815 PVOID PortInformation
,
1816 ULONG PortInformationLength
,
1822 ZwQueryInformationPort(
1824 CINT PortInformationClass
,
1825 PVOID PortInformation
,
1826 ULONG PortInformationLength
,
1833 NtQueryInformationProcess(
1834 IN HANDLE ProcessHandle
,
1835 IN PROCESSINFOCLASS ProcessInformationClass
,
1836 OUT PVOID ProcessInformation
,
1837 IN ULONG ProcessInformationLength
,
1838 OUT PULONG ReturnLength OPTIONAL
1843 ZwQueryInformationProcess(
1844 IN HANDLE ProcessHandle
,
1845 IN PROCESSINFOCLASS ProcessInformationClass
,
1846 OUT PVOID ProcessInformation
,
1847 IN ULONG ProcessInformationLength
,
1848 OUT PULONG ReturnLength OPTIONAL
1854 NtQueryInformationThread(
1855 IN HANDLE ThreadHandle
,
1856 IN THREADINFOCLASS ThreadInformationClass
,
1857 OUT PVOID ThreadInformation
,
1858 IN ULONG ThreadInformationLength
,
1859 OUT PULONG ReturnLength
1864 ZwQueryInformationThread(
1865 IN HANDLE ThreadHandle
,
1866 IN THREADINFOCLASS ThreadInformationClass
,
1867 OUT PVOID ThreadInformation
,
1868 IN ULONG ThreadInformationLength
,
1869 OUT PULONG ReturnLength
1874 NtQueryInformationToken(
1875 IN HANDLE TokenHandle
,
1876 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
1877 OUT PVOID TokenInformation
,
1878 IN ULONG TokenInformationLength
,
1879 OUT PULONG ReturnLength
1884 ZwQueryInformationToken(
1885 IN HANDLE TokenHandle
,
1886 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
1887 OUT PVOID TokenInformation
,
1888 IN ULONG TokenInformationLength
,
1889 OUT PULONG ReturnLength
1894 NtQueryInstallUILanguage(
1900 ZwQueryInstallUILanguage(
1906 NtQueryIoCompletion(
1907 IN HANDLE IoCompletionHandle
,
1908 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
1909 OUT PVOID IoCompletionInformation
,
1910 IN ULONG IoCompletionInformationLength
,
1911 OUT PULONG ResultLength OPTIONAL
1916 ZwQueryIoCompletion(
1917 IN HANDLE IoCompletionHandle
,
1918 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
1919 OUT PVOID IoCompletionInformation
,
1920 IN ULONG IoCompletionInformationLength
,
1921 OUT PULONG ResultLength OPTIONAL
1927 IN HANDLE KeyHandle
,
1928 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1929 OUT PVOID KeyInformation
,
1931 OUT PULONG ResultLength
1937 IN HANDLE KeyHandle
,
1938 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1939 OUT PVOID KeyInformation
,
1941 OUT PULONG ResultLength
1946 NtQueryQuotaInformationFile(
1947 IN HANDLE FileHandle
,
1948 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1951 IN BOOLEAN ReturnSingleEntry
,
1952 IN PVOID SidList OPTIONAL
,
1953 IN ULONG SidListLength
,
1954 IN PSID StartSid OPTIONAL
,
1955 IN BOOLEAN RestartScan
1961 ZwQueryQuotaInformationFile(
1962 IN HANDLE FileHandle
,
1963 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1966 IN BOOLEAN ReturnSingleEntry
,
1967 IN PVOID SidList OPTIONAL
,
1968 IN ULONG SidListLength
,
1969 IN PSID StartSid OPTIONAL
,
1970 IN BOOLEAN RestartScan
1975 NtQueryMultipleValueKey(
1976 IN HANDLE KeyHandle
,
1977 IN OUT PKEY_VALUE_ENTRY ValueList
,
1978 IN ULONG NumberOfValues
,
1980 IN OUT PULONG Length
,
1981 OUT PULONG ReturnLength
1986 ZwQueryMultipleValueKey(
1987 IN HANDLE KeyHandle
,
1988 IN OUT PKEY_VALUE_ENTRY ValueList
,
1989 IN ULONG NumberOfValues
,
1991 IN OUT PULONG Length
,
1992 OUT PULONG ReturnLength
1998 IN HANDLE MutantHandle
,
1999 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2000 OUT PVOID MutantInformation
,
2002 OUT PULONG ResultLength
2008 IN HANDLE MutantHandle
,
2009 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2010 OUT PVOID MutantInformation
,
2012 OUT PULONG ResultLength
2017 NtQueryPerformanceCounter(
2018 IN PLARGE_INTEGER Counter
,
2019 IN PLARGE_INTEGER Frequency
2024 ZwQueryPerformanceCounter(
2025 IN PLARGE_INTEGER Counter
,
2026 IN PLARGE_INTEGER Frequency
2032 IN HANDLE SemaphoreHandle
,
2033 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2034 OUT PVOID SemaphoreInformation
,
2036 OUT PULONG ReturnLength
2042 IN HANDLE SemaphoreHandle
,
2043 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2044 OUT PVOID SemaphoreInformation
,
2046 OUT PULONG ReturnLength
2051 NtQuerySymbolicLinkObject(
2052 IN HANDLE SymLinkObjHandle
,
2053 OUT PUNICODE_STRING LinkTarget
,
2054 OUT PULONG DataWritten OPTIONAL
2059 ZwQuerySymbolicLinkObject(
2060 IN HANDLE SymLinkObjHandle
,
2061 OUT PUNICODE_STRING LinkName
,
2062 OUT PULONG DataWritten OPTIONAL
2067 NtQuerySystemEnvironmentValue(
2068 IN PUNICODE_STRING Name
,
2076 ZwQuerySystemEnvironmentValue(
2077 IN PUNICODE_STRING Name
,
2085 NtQuerySystemInformation(
2086 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2087 OUT PVOID SystemInformation
,
2089 OUT PULONG ResultLength
2094 ZwQuerySystemInformation(
2095 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2096 OUT PVOID SystemInformation
,
2098 OUT PULONG ResultLength
2104 OUT PLARGE_INTEGER CurrentTime
2110 IN HANDLE TimerHandle
,
2111 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2112 OUT PVOID TimerInformation
,
2114 OUT PULONG ResultLength
2119 IN HANDLE TimerHandle
,
2120 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2121 OUT PVOID TimerInformation
,
2123 OUT PULONG ResultLength
2128 NtQueryTimerResolution (
2129 OUT PULONG MinimumResolution
,
2130 OUT PULONG MaximumResolution
,
2131 OUT PULONG ActualResolution
2136 ZwQueryTimerResolution (
2137 OUT PULONG MinimumResolution
,
2138 OUT PULONG MaximumResolution
,
2139 OUT PULONG ActualResolution
2145 IN HANDLE KeyHandle
,
2146 IN PUNICODE_STRING ValueName
,
2147 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2148 OUT PVOID KeyValueInformation
,
2150 OUT PULONG ResultLength
2156 IN HANDLE KeyHandle
,
2157 IN PUNICODE_STRING ValueName
,
2158 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2159 OUT PVOID KeyValueInformation
,
2161 OUT PULONG ResultLength
2166 NtQueryVolumeInformationFile(
2167 IN HANDLE FileHandle
,
2168 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2169 OUT PVOID FsInformation
,
2171 IN FS_INFORMATION_CLASS FsInformationClass
2176 ZwQueryVolumeInformationFile(
2177 IN HANDLE FileHandle
,
2178 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2179 OUT PVOID FsInformation
,
2181 IN FS_INFORMATION_CLASS FsInformationClass
2187 HANDLE ThreadHandle
,
2188 PKNORMAL_ROUTINE ApcRoutine
,
2189 PVOID NormalContext
,
2190 PVOID SystemArgument1
,
2191 PVOID SystemArgument2
2197 HANDLE ThreadHandle
,
2198 PKNORMAL_ROUTINE ApcRoutine
,
2199 PVOID NormalContext
,
2200 PVOID SystemArgument1
,
2201 PVOID SystemArgument2
2207 IN PEXCEPTION_RECORD ExceptionRecord
,
2208 IN PCONTEXT Context
,
2209 IN BOOLEAN SearchFrames
2215 IN PEXCEPTION_RECORD ExceptionRecord
,
2216 IN PCONTEXT Context
,
2217 IN BOOLEAN SearchFrames
2223 IN HANDLE FileHandle
,
2224 IN HANDLE Event OPTIONAL
,
2225 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2226 IN PVOID UserApcContext OPTIONAL
,
2227 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2229 IN ULONG BufferLength
,
2230 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2231 IN PULONG Key OPTIONAL
2237 IN HANDLE FileHandle
,
2238 IN HANDLE Event OPTIONAL
,
2239 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2240 IN PVOID UserApcContext OPTIONAL
,
2241 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2243 IN ULONG BufferLength
,
2244 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2245 IN PULONG Key OPTIONAL
2251 IN HANDLE FileHandle
,
2252 IN HANDLE Event OPTIONAL
,
2253 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2254 IN PVOID UserApcContext OPTIONAL
,
2255 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2256 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2257 IN ULONG BufferLength
,
2258 IN PLARGE_INTEGER ByteOffset
,
2259 IN PULONG Key OPTIONAL
2265 IN HANDLE FileHandle
,
2266 IN HANDLE Event OPTIONAL
,
2267 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2268 IN PVOID UserApcContext OPTIONAL
,
2269 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2270 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2271 IN ULONG BufferLength
,
2272 IN PLARGE_INTEGER ByteOffset
,
2273 IN PULONG Key OPTIONAL
2280 PLPC_MESSAGE Message
,
2291 PLPC_MESSAGE Message
,
2300 NtReadVirtualMemory(
2301 IN HANDLE ProcessHandle
,
2302 IN PVOID BaseAddress
,
2304 IN ULONG NumberOfBytesToRead
,
2305 OUT PULONG NumberOfBytesRead
2309 ZwReadVirtualMemory(
2310 IN HANDLE ProcessHandle
,
2311 IN PVOID BaseAddress
,
2313 IN ULONG NumberOfBytesToRead
,
2314 OUT PULONG NumberOfBytesRead
2319 NtRegisterThreadTerminatePort(
2320 HANDLE TerminationPort
2325 ZwRegisterThreadTerminatePort(
2326 HANDLE TerminationPort
2332 IN HANDLE MutantHandle
,
2333 IN PLONG ReleaseCount OPTIONAL
2339 IN HANDLE MutantHandle
,
2340 IN PLONG ReleaseCount OPTIONAL
2346 IN HANDLE SemaphoreHandle
,
2347 IN LONG ReleaseCount
,
2348 OUT PLONG PreviousCount
2354 IN HANDLE SemaphoreHandle
,
2355 IN LONG ReleaseCount
,
2356 OUT PLONG PreviousCount
2361 NtRemoveIoCompletion(
2362 IN HANDLE IoCompletionHandle
,
2363 OUT PVOID
*CompletionKey
,
2364 OUT PVOID
*CompletionContext
,
2365 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2366 IN PLARGE_INTEGER Timeout OPTIONAL
2371 ZwRemoveIoCompletion(
2372 IN HANDLE IoCompletionHandle
,
2373 OUT PVOID
*CompletionKey
,
2374 OUT PVOID
*CompletionContext
,
2375 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2376 IN PLARGE_INTEGER Timeout OPTIONAL
2382 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2384 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2389 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2391 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2398 PLPC_MESSAGE LpcReply
2405 PLPC_MESSAGE LpcReply
2410 NtReplyWaitReceivePort(
2413 PLPC_MESSAGE MessageReply
,
2414 PLPC_MESSAGE MessageRequest
2419 ZwReplyWaitReceivePort(
2422 PLPC_MESSAGE MessageReply
,
2423 PLPC_MESSAGE MessageRequest
2428 NtReplyWaitReplyPort(
2430 PLPC_MESSAGE ReplyMessage
2435 ZwReplyWaitReplyPort(
2437 PLPC_MESSAGE ReplyMessage
2444 PLPC_MESSAGE LpcMessage
);
2450 PLPC_MESSAGE LpcMessage
2455 NtRequestWaitReplyPort(
2457 PLPC_MESSAGE LpcReply
,
2458 PLPC_MESSAGE LpcRequest
2463 ZwRequestWaitReplyPort(
2465 PLPC_MESSAGE LpcReply
,
2466 PLPC_MESSAGE LpcRequest
2473 PLONG NumberOfWaitingThreads OPTIONAL
2480 PLONG NumberOfWaitingThreads OPTIONAL
2502 IN HANDLE ThreadHandle
,
2503 OUT PULONG SuspendCount
2509 IN HANDLE ThreadHandle
,
2510 OUT PULONG SuspendCount
2516 IN HANDLE ProcessHandle
2522 IN HANDLE ProcessHandle
2528 IN HANDLE KeyHandle
,
2529 IN HANDLE FileHandle
2534 IN HANDLE KeyHandle
,
2535 IN HANDLE FileHandle
2541 IN HANDLE KeyHandle
,
2542 IN HANDLE FileHandle
,
2549 IN HANDLE KeyHandle
,
2550 IN HANDLE FileHandle
,
2556 NtSetBootEntryOrder(
2563 ZwSetBootEntryOrder(
2585 IN HANDLE ThreadHandle
,
2591 IN HANDLE ThreadHandle
,
2598 IN BOOLEAN UserProfile
,
2599 IN LCID DefaultLocaleId
2605 IN BOOLEAN UserProfile
,
2606 IN LCID DefaultLocaleId
2611 NtSetDefaultUILanguage(
2617 ZwSetDefaultUILanguage(
2622 NtSetDefaultHardErrorPort(
2623 IN HANDLE PortHandle
2627 ZwSetDefaultHardErrorPort(
2628 IN HANDLE PortHandle
2634 IN HANDLE FileHandle
,
2635 IN PIO_STATUS_BLOCK IoStatusBlock
,
2643 IN HANDLE FileHandle
,
2644 IN PIO_STATUS_BLOCK IoStatusBlock
,
2652 IN HANDLE EventHandle
,
2653 OUT PLONG PreviousState OPTIONAL
2659 IN HANDLE EventHandle
,
2660 OUT PLONG PreviousState OPTIONAL
2666 IN HANDLE EventPairHandle
2672 IN HANDLE EventPairHandle
2676 NtSetHighWaitLowEventPair(
2677 IN HANDLE EventPairHandle
2681 ZwSetHighWaitLowEventPair(
2682 IN HANDLE EventPairHandle
2687 NtSetInformationFile(
2688 IN HANDLE FileHandle
,
2689 IN PIO_STATUS_BLOCK IoStatusBlock
,
2690 IN PVOID FileInformation
,
2692 IN FILE_INFORMATION_CLASS FileInformationClass
2697 ZwSetInformationFile(
2698 IN HANDLE FileHandle
,
2699 IN PIO_STATUS_BLOCK IoStatusBlock
,
2700 IN PVOID FileInformation
,
2702 IN FILE_INFORMATION_CLASS FileInformationClass
2707 NtSetInformationJobObject(
2709 JOBOBJECTINFOCLASS JobInformationClass
,
2710 PVOID JobInformation
,
2711 ULONG JobInformationLength
2716 ZwSetInformationJobObject(
2718 JOBOBJECTINFOCLASS JobInformationClass
,
2719 PVOID JobInformation
,
2720 ULONG JobInformationLength
2725 NtSetInformationThread(
2726 IN HANDLE ThreadHandle
,
2727 IN THREADINFOCLASS ThreadInformationClass
,
2728 IN PVOID ThreadInformation
,
2729 IN ULONG ThreadInformationLength
2733 ZwSetInformationThread(
2734 IN HANDLE ThreadHandle
,
2735 IN THREADINFOCLASS ThreadInformationClass
,
2736 IN PVOID ThreadInformation
,
2737 IN ULONG ThreadInformationLength
2742 NtSetInformationToken(
2743 IN HANDLE TokenHandle
,
2744 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2745 OUT PVOID TokenInformation
,
2746 IN ULONG TokenInformationLength
2751 ZwSetInformationToken(
2752 IN HANDLE TokenHandle
,
2753 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2754 OUT PVOID TokenInformation
,
2755 IN ULONG TokenInformationLength
2761 IN HANDLE IoCompletionPortHandle
,
2762 IN PVOID CompletionKey
,
2763 IN PVOID CompletionContext
,
2764 IN NTSTATUS CompletionStatus
,
2765 IN ULONG CompletionInformation
2771 IN HANDLE IoCompletionPortHandle
,
2772 IN PVOID CompletionKey
,
2773 IN PVOID CompletionContext
,
2774 IN NTSTATUS CompletionStatus
,
2775 IN ULONG CompletionInformation
2780 NtSetIntervalProfile(
2782 KPROFILE_SOURCE ClockSource
2787 ZwSetIntervalProfile(
2789 KPROFILE_SOURCE ClockSource
2806 NtSetLowWaitHighEventPair(
2812 ZwSetLowWaitHighEventPair(
2818 NtSetQuotaInformationFile(
2820 PIO_STATUS_BLOCK IoStatusBlock
,
2821 PFILE_QUOTA_INFORMATION Buffer
,
2827 ZwSetQuotaInformationFile(
2829 PIO_STATUS_BLOCK IoStatusBlock
,
2830 PFILE_QUOTA_INFORMATION Buffer
,
2836 NtSetSecurityObject(
2838 IN SECURITY_INFORMATION SecurityInformation
,
2839 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2844 ZwSetSecurityObject(
2846 IN SECURITY_INFORMATION SecurityInformation
,
2847 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2852 NtSetSystemEnvironmentValue(
2853 IN PUNICODE_STRING VariableName
,
2854 IN PUNICODE_STRING Value
2858 ZwSetSystemEnvironmentValue(
2859 IN PUNICODE_STRING VariableName
,
2860 IN PUNICODE_STRING Value
2865 NtSetSystemInformation(
2866 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2867 IN PVOID SystemInformation
,
2868 IN ULONG SystemInformationLength
2873 ZwSetSystemInformation(
2874 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2875 IN PVOID SystemInformation
,
2876 IN ULONG SystemInformationLength
2882 IN PLARGE_INTEGER SystemTime
,
2883 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2889 IN PLARGE_INTEGER SystemTime
,
2890 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2895 NtSetTimerResolution(
2896 IN ULONG RequestedResolution
,
2897 IN BOOLEAN SetOrUnset
,
2898 OUT PULONG ActualResolution
2903 ZwSetTimerResolution(
2904 IN ULONG RequestedResolution
,
2905 IN BOOLEAN SetOrUnset
,
2906 OUT PULONG ActualResolution
2924 IN HANDLE KeyHandle
,
2925 IN PUNICODE_STRING ValueName
,
2926 IN ULONG TitleIndex OPTIONAL
,
2935 IN HANDLE KeyHandle
,
2936 IN PUNICODE_STRING ValueName
,
2937 IN ULONG TitleIndex OPTIONAL
,
2945 NtSetVolumeInformationFile(
2946 IN HANDLE FileHandle
,
2947 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2948 IN PVOID FsInformation
,
2950 IN FS_INFORMATION_CLASS FsInformationClass
2955 ZwSetVolumeInformationFile(
2956 IN HANDLE FileHandle
,
2957 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2958 IN PVOID FsInformation
,
2960 IN FS_INFORMATION_CLASS FsInformationClass
2966 IN SHUTDOWN_ACTION Action
2972 IN SHUTDOWN_ACTION Action
2977 NtSignalAndWaitForSingleObject(
2978 IN HANDLE SignalObject
,
2979 IN HANDLE WaitObject
,
2980 IN BOOLEAN Alertable
,
2981 IN PLARGE_INTEGER Time
2986 ZwSignalAndWaitForSingleObject(
2987 IN HANDLE SignalObject
,
2988 IN HANDLE WaitObject
,
2989 IN BOOLEAN Alertable
,
2990 IN PLARGE_INTEGER Time
2996 HANDLE ProfileHandle
3002 HANDLE ProfileHandle
3008 HANDLE ProfileHandle
3014 HANDLE ProfileHandle
3020 IN HANDLE ProcessHandle
,
3021 IN NTSTATUS ExitStatus
3027 IN HANDLE ProcessHandle
,
3028 IN NTSTATUS ExitStatus
3033 NtTerminateJobObject(
3040 ZwTerminateJobObject(
3048 IN ULONG TraceHandle
,
3050 IN ULONG TraceHeaderLength
,
3051 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3057 IN ULONG TraceHandle
,
3059 IN ULONG TraceHeaderLength
,
3060 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3065 NtTranslateFilePath(
3073 ZwTranslateFilePath(
3082 IN PUNICODE_STRING DriverServiceName
3088 IN PUNICODE_STRING DriverServiceName
3093 NtUnmapViewOfSection(
3094 IN HANDLE ProcessHandle
,
3095 IN PVOID BaseAddress
3100 ZwUnmapViewOfSection(
3101 IN HANDLE ProcessHandle
,
3102 IN PVOID BaseAddress
3109 PLPC_MESSAGE Message
,
3120 PLPC_MESSAGE Message
,
3129 NtWriteVirtualMemory(
3130 IN HANDLE ProcessHandle
,
3131 IN PVOID BaseAddress
,
3133 IN ULONG NumberOfBytesToWrite
,
3134 OUT PULONG NumberOfBytesWritten
3139 ZwWriteVirtualMemory(
3140 IN HANDLE ProcessHandle
,
3141 IN PVOID BaseAddress
,
3143 IN ULONG NumberOfBytesToWrite
,
3144 OUT PULONG NumberOfBytesWritten
3150 NtWaitForSingleObject (
3152 IN BOOLEAN Alertable
,
3153 IN PLARGE_INTEGER Time
3158 ZwWaitForSingleObject (
3160 IN BOOLEAN Alertable
,
3161 IN PLARGE_INTEGER Time
3167 NtWaitHighEventPair(
3168 IN HANDLE EventPairHandle
3173 ZwWaitHighEventPair(
3174 IN HANDLE EventPairHandle
3180 IN HANDLE EventPairHandle
3186 IN HANDLE EventPairHandle
3192 IN HANDLE FileHandle
,
3193 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3194 IN PLARGE_INTEGER ByteOffset
,
3195 IN PLARGE_INTEGER Lenght
,
3196 OUT PULONG Key OPTIONAL
3201 IN HANDLE FileHandle
,
3202 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3203 IN PLARGE_INTEGER ByteOffset
,
3204 IN PLARGE_INTEGER Lenght
,
3205 OUT PULONG Key OPTIONAL
3212 IN HANDLE FileHandle
,
3213 IN HANDLE Event OPTIONAL
,
3214 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3215 IN PVOID ApcContext OPTIONAL
,
3216 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3219 IN PLARGE_INTEGER ByteOffset
,
3220 IN PULONG Key OPTIONAL
3226 IN HANDLE FileHandle
,
3227 IN HANDLE Event OPTIONAL
,
3228 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3229 IN PVOID ApcContext OPTIONAL
,
3230 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3233 IN PLARGE_INTEGER ByteOffset
,
3234 IN PULONG Key OPTIONAL
3240 IN HANDLE FileHandle
,
3241 IN HANDLE Event OPTIONAL
,
3242 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3243 IN PVOID ApcContext OPTIONAL
,
3244 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3245 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3246 IN ULONG BufferLength
,
3247 IN PLARGE_INTEGER ByteOffset
,
3248 IN PULONG Key OPTIONAL
3254 IN HANDLE FileHandle
,
3255 IN HANDLE Event OPTIONAL
,
3256 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3257 IN PVOID ApcContext OPTIONAL
,
3258 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3259 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3260 IN ULONG BufferLength
,
3261 IN PLARGE_INTEGER ByteOffset
,
3262 IN PULONG Key OPTIONAL
3268 IN HANDLE ThreadHandle
,
3269 IN PULONG PreviousSuspendCount
3275 IN HANDLE ThreadHandle
,
3276 IN PULONG PreviousSuspendCount
3282 IN HANDLE ProcessHandle
3288 IN HANDLE ProcessHandle
3294 IN HANDLE ThreadHandle
,
3295 IN NTSTATUS ExitStatus
3300 IN HANDLE ThreadHandle
,
3301 IN NTSTATUS ExitStatus
3329 NtSetSystemPowerState(
3330 IN POWER_ACTION SystemAction
,
3331 IN SYSTEM_POWER_STATE MinSystemState
,
3337 NtSystemDebugControl(
3338 DEBUG_CONTROL_CODE ControlCode
,
3340 ULONG InputBufferLength
,
3342 ULONG OutputBufferLength
,
3356 IN ULONG RoutineIndex
,
3358 IN ULONG ArgumentLength
,
3359 OUT PVOID
* Result OPTIONAL
,
3360 OUT PULONG ResultLength OPTIONAL
3383 NtReplyWaitSendChannel(
3389 NtSendWaitReplyChannel(
3395 NtSetContextChannel(
3403 LDT_ENTRY LdtEntry1
,
3410 NtQueryOleDirectoryFile(
3417 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3418 IN HANDLE ClientToken
,
3419 IN ACCESS_MASK DesiredAcces
,
3420 IN PGENERIC_MAPPING GenericMapping
,
3421 OUT PPRIVILEGE_SET PrivilegeSet
,
3422 OUT PULONG ReturnLength
,
3423 OUT PACCESS_MASK GrantedAccess
,
3424 OUT PNTSTATUS AccessStatus
3430 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3431 IN HANDLE ClientToken
,
3432 IN ACCESS_MASK DesiredAcces
,
3433 IN PGENERIC_MAPPING GenericMapping
,
3434 OUT PPRIVILEGE_SET PrivilegeSet
,
3435 OUT PULONG ReturnLength
,
3436 OUT PACCESS_MASK GrantedAccess
,
3437 OUT PNTSTATUS AccessStatus
3442 NtAccessCheckAndAuditAlarm(
3443 IN PUNICODE_STRING SubsystemName
,
3444 IN PHANDLE ObjectHandle
,
3445 IN PUNICODE_STRING ObjectTypeName
,
3446 IN PUNICODE_STRING ObjectName
,
3447 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3448 IN ACCESS_MASK DesiredAccess
,
3449 IN PGENERIC_MAPPING GenericMapping
,
3450 IN BOOLEAN ObjectCreation
,
3451 OUT PACCESS_MASK GrantedAccess
,
3452 OUT PNTSTATUS AccessStatus
,
3453 OUT PBOOLEAN GenerateOnClose
3459 IN HANDLE TimerHandle
,
3460 OUT PBOOLEAN CurrentState OPTIONAL
3467 IN PCONTEXT Context
,
3468 IN BOOLEAN TestAlert
3474 IN PUNICODE_STRING FileName
,
3475 IN PLARGE_INTEGER InitialSize
,
3476 IN PLARGE_INTEGER MaxiumSize
,
3483 OUT PHANDLE ProfileHandle
,
3484 IN HANDLE ProcessHandle
,
3487 IN ULONG Granularity
,
3489 IN ULONG ProfilingSize
,
3490 IN KPROFILE_SOURCE Source
,
3491 IN KAFFINITY ProcessorMask
3497 OUT PHANDLE ThreadHandle
,
3498 IN ACCESS_MASK DesiredAccess
,
3499 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3500 IN HANDLE ProcessHandle
,
3501 OUT PCLIENT_ID ClientId
,
3502 IN PCONTEXT ThreadContext
,
3503 IN PINITIAL_TEB UserStack
,
3504 IN BOOLEAN CreateSuspended
3510 IN BOOLEAN Alertable
,
3511 IN LARGE_INTEGER
*Interval
3517 IN HANDLE SectionHandle
,
3518 IN PLARGE_INTEGER NewMaximumSize
3523 NtFlushInstructionCache(
3524 IN HANDLE ProcessHandle
,
3525 IN PVOID BaseAddress
,
3526 IN UINT NumberOfBytesToFlush
3531 NtFlushVirtualMemory(
3532 IN HANDLE ProcessHandle
,
3533 IN PVOID BaseAddress
,
3534 IN ULONG NumberOfBytesToFlush
,
3535 OUT PULONG NumberOfBytesFlushed OPTIONAL
3547 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
3548 IN POBJECT_ATTRIBUTES FileObjectAttributes
3554 NtLockVirtualMemory(
3555 HANDLE ProcessHandle
,
3557 ULONG NumberOfBytesToLock
,
3558 PULONG NumberOfBytesLocked
3563 NtOpenObjectAuditAlarm(
3564 IN PUNICODE_STRING SubsystemName
,
3566 IN PUNICODE_STRING ObjectTypeName
,
3567 IN PUNICODE_STRING ObjectName
,
3568 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3569 IN HANDLE ClientToken
,
3570 IN ULONG DesiredAccess
,
3571 IN ULONG GrantedAccess
,
3572 IN PPRIVILEGE_SET Privileges
,
3573 IN BOOLEAN ObjectCreation
,
3574 IN BOOLEAN AccessGranted
,
3575 OUT PBOOLEAN GenerateOnClose
3580 NtProtectVirtualMemory(
3581 IN HANDLE ProcessHandle
,
3582 IN PVOID
*BaseAddress
,
3583 IN ULONG
*NumberOfBytesToProtect
,
3584 IN ULONG NewAccessProtection
,
3585 OUT PULONG OldAccessProtection
3590 NtQueryDirectoryObject(
3591 IN HANDLE DirectoryHandle
,
3593 IN ULONG BufferLength
,
3594 IN BOOLEAN ReturnSingleEntry
,
3595 IN BOOLEAN RestartScan
,
3596 IN OUT PULONG Context
,
3597 OUT PULONG ReturnLength OPTIONAL
3602 NtQueryIntervalProfile(
3603 IN KPROFILE_SOURCE ProfileSource
,
3610 IN HANDLE SectionHandle
,
3611 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
3612 OUT PVOID SectionInformation
,
3614 OUT PULONG ResultLength
3619 NtQueryVirtualMemory(
3620 IN HANDLE ProcessHandle
,
3622 IN IN CINT VirtualMemoryInformationClass
,
3623 OUT PVOID VirtualMemoryInformation
,
3625 OUT PULONG ResultLength
3631 IN NTSTATUS ErrorStatus
,
3632 IN ULONG NumberOfParameters
,
3633 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
3634 IN PVOID
*Parameters
,
3635 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
3636 OUT PHARDERROR_RESPONSE Response
3641 NtSetInformationKey(
3642 IN HANDLE KeyHandle
,
3643 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3644 IN PVOID KeyInformation
,
3645 IN ULONG KeyInformationLength
3650 NtSetInformationObject(
3651 IN HANDLE ObjectHandle
,
3652 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3653 IN PVOID ObjectInformation
,
3660 IN HANDLE TimerHandle
,
3661 IN PLARGE_INTEGER DueTime
,
3662 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3663 IN PVOID TimerContext
,
3664 IN BOOLEAN WakeTimer
,
3665 IN LONG Period OPTIONAL
,
3666 OUT PBOOLEAN PreviousState OPTIONAL
3672 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3677 NtUnlockVirtualMemory(
3678 IN HANDLE ProcessHandle
,
3679 IN PVOID BaseAddress
,
3680 IN ULONG NumberOfBytesToUnlock
,
3681 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3686 NtWaitForMultipleObjects(
3689 IN WAIT_TYPE WaitType
,
3690 IN BOOLEAN Alertable
,
3691 IN PLARGE_INTEGER Time
3697 IN PCONTEXT Context
,
3704 OUT PLARGE_INTEGER CurrentTime
3711 IN HANDLE SourceProcessHandle
,
3712 IN HANDLE SourceHandle
,
3713 IN HANDLE TargetProcessHandle
,
3714 OUT PHANDLE TargetHandle
,
3715 IN ACCESS_MASK DesiredAccess
,
3716 IN ULONG HandleAttributes
,
3723 IN HANDLE SourceProcessHandle
,
3724 IN HANDLE SourceHandle
,
3725 IN HANDLE TargetProcessHandle
,
3726 OUT PHANDLE TargetHandle
,
3727 IN ACCESS_MASK DesiredAccess
,
3728 IN ULONG HandleAttributes
,
3736 IN ULONG AtomNameLength
,
3737 IN OUT PRTL_ATOM Atom
3744 IN ULONG AtomNameLength
,
3745 IN OUT PRTL_ATOM Atom
3751 PULARGE_INTEGER Time
,
3760 PULARGE_INTEGER Time
,
3769 IN PUNICODE_STRING FileName
,
3770 IN PLARGE_INTEGER InitialSize
,
3771 IN PLARGE_INTEGER MaxiumSize
,
3778 OUT PHANDLE ThreadHandle
,
3779 IN ACCESS_MASK DesiredAccess
,
3780 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3781 IN HANDLE ProcessHandle
,
3782 OUT PCLIENT_ID ClientId
,
3783 IN PCONTEXT ThreadContext
,
3784 IN PINITIAL_TEB UserStack
,
3785 IN BOOLEAN CreateSuspended
3791 IN HANDLE ExistingTokenHandle
,
3792 IN ACCESS_MASK DesiredAccess
,
3793 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3794 IN BOOLEAN EffectiveOnly
,
3795 IN TOKEN_TYPE TokenType
,
3796 OUT PHANDLE NewTokenHandle
3803 IN ULONG AtomNameLength
,
3804 OUT PRTL_ATOM Atom OPTIONAL
3811 IN ULONG AtomNameLength
,
3812 OUT PRTL_ATOM Atom OPTIONAL
3824 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
3825 IN POBJECT_ATTRIBUTES FileObjectAttributes
3830 ZwLockVirtualMemory(
3831 HANDLE ProcessHandle
,
3833 ULONG NumberOfBytesToLock
,
3834 PULONG NumberOfBytesLocked
3839 ZwOpenObjectAuditAlarm(
3840 IN PUNICODE_STRING SubsystemName
,
3842 IN PUNICODE_STRING ObjectTypeName
,
3843 IN PUNICODE_STRING ObjectName
,
3844 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3845 IN HANDLE ClientToken
,
3846 IN ULONG DesiredAccess
,
3847 IN ULONG GrantedAccess
,
3848 IN PPRIVILEGE_SET Privileges
,
3849 IN BOOLEAN ObjectCreation
,
3850 IN BOOLEAN AccessGranted
,
3851 OUT PBOOLEAN GenerateOnClose
3856 ZwProtectVirtualMemory(
3857 IN HANDLE ProcessHandle
,
3858 IN PVOID
*BaseAddress
,
3859 IN ULONG
*NumberOfBytesToProtect
,
3860 IN ULONG NewAccessProtection
,
3861 OUT PULONG OldAccessProtection
3866 NtQueryInformationAtom(
3868 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
3869 OUT PVOID AtomInformation
,
3870 IN ULONG AtomInformationLength
,
3871 OUT PULONG ReturnLength OPTIONAL
3876 ZwQueryInformationAtom(
3878 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
3879 OUT PVOID AtomInformation
,
3880 IN ULONG AtomInformationLength
,
3881 OUT PULONG ReturnLength OPTIONAL
3886 ZwQueryDirectoryObject(
3887 IN HANDLE DirectoryHandle
,
3889 IN ULONG BufferLength
,
3890 IN BOOLEAN ReturnSingleEntry
,
3891 IN BOOLEAN RestartScan
,
3892 IN OUT PULONG Context
,
3893 OUT PULONG ReturnLength OPTIONAL
3898 ZwQueryIntervalProfile(
3899 OUT PULONG Interval
,
3900 OUT KPROFILE_SOURCE ClockSource
3906 IN HANDLE ObjectHandle
,
3907 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3908 OUT PVOID ObjectInformation
,
3910 OUT PULONG ResultLength OPTIONAL
3915 NtQuerySecurityObject(
3917 IN SECURITY_INFORMATION SecurityInformation
,
3918 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
3920 OUT PULONG ResultLength
3925 ZwQuerySecurityObject(
3927 IN SECURITY_INFORMATION SecurityInformation
,
3928 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
3930 OUT PULONG ResultLength
3936 ZwQueryVirtualMemory(
3937 IN HANDLE ProcessHandle
,
3939 IN IN CINT VirtualMemoryInformationClass
,
3940 OUT PVOID VirtualMemoryInformation
,
3942 OUT PULONG ResultLength
3958 ZwSetInformationKey(
3959 IN HANDLE KeyHandle
,
3960 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3961 IN PVOID KeyInformation
,
3962 IN ULONG KeyInformationLength
3967 ZwSetInformationObject(
3968 IN HANDLE ObjectHandle
,
3969 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3970 IN PVOID ObjectInformation
,
3976 NtSetInformationProcess(
3977 IN HANDLE ProcessHandle
,
3978 IN PROCESSINFOCLASS ProcessInformationClass
,
3979 IN PVOID ProcessInformation
,
3980 IN ULONG ProcessInformationLength
3986 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3991 ZwUnlockVirtualMemory(
3992 IN HANDLE ProcessHandle
,
3993 IN PVOID BaseAddress
,
3994 IN ULONG NumberOfBytesToUnlock
,
3995 OUT PULONG NumberOfBytesUnlocked OPTIONAL
4000 ZwWaitForMultipleObjects (
4003 IN WAIT_TYPE WaitType
,
4004 IN BOOLEAN Alertable
,
4005 IN PLARGE_INTEGER Time
4011 OUT PHANDLE ProfileHandle
,
4012 IN POBJECT_ATTRIBUTES ObjectAttributes
,
4015 IN ULONG Granularity
,
4017 IN ULONG ProfilingSize
,
4018 IN ULONG ClockSource
,
4019 IN ULONG ProcessorMask
4025 IN BOOLEAN Alertable
,
4026 IN LARGE_INTEGER
*Interval
4032 IN HANDLE SectionHandle
,
4033 IN PLARGE_INTEGER NewMaximumSize
4039 IN HANDLE SectionHandle
,
4040 IN CINT SectionInformationClass
,
4041 OUT PVOID SectionInformation
,
4043 OUT PULONG ResultLength
4049 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
4050 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
4057 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
4058 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
4065 OUT PLARGE_INTEGER CurrentTime
4071 IN HANDLE ObjectHandle
,
4072 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
4073 OUT PVOID ObjectInformation
,
4075 OUT PULONG ResultLength OPTIONAL
4078 static inline struct _PEB
* NtCurrentPeb(void)
4082 #if defined(__GNUC__)
4084 __asm__ __volatile__
4086 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4087 : "=r" (pPeb
) /* can't have two memory operands */
4091 #elif defined(_MSC_VER)
4093 __asm mov eax
, fs
:0x30;
4097 #error Unknown compiler for inline assembler