2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
19 /* FUNCTION TYPES ************************************************************/
21 /* PROTOTYPES ****************************************************************/
27 HANDLE NamedPortHandle
,
28 PPORT_MESSAGE ServerReply
,
30 PLPC_SECTION_WRITE WriteMap
,
31 PLPC_SECTION_READ ReadMap
37 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
38 IN HANDLE ClientToken
,
39 IN ACCESS_MASK DesiredAcces
,
40 IN PGENERIC_MAPPING GenericMapping
,
41 OUT PPRIVILEGE_SET PrivilegeSet
,
42 OUT PULONG ReturnLength
,
43 OUT PACCESS_MASK GrantedAccess
,
44 OUT PNTSTATUS AccessStatus
50 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
51 IN HANDLE ClientToken
,
52 IN ACCESS_MASK DesiredAcces
,
53 IN PGENERIC_MAPPING GenericMapping
,
54 OUT PPRIVILEGE_SET PrivilegeSet
,
55 OUT PULONG ReturnLength
,
56 OUT PACCESS_MASK GrantedAccess
,
57 OUT PNTSTATUS AccessStatus
62 NtAccessCheckAndAuditAlarm(
63 IN PUNICODE_STRING SubsystemName
,
64 IN PHANDLE ObjectHandle
,
65 IN PUNICODE_STRING ObjectTypeName
,
66 IN PUNICODE_STRING ObjectName
,
67 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
68 IN ACCESS_MASK DesiredAccess
,
69 IN PGENERIC_MAPPING GenericMapping
,
70 IN BOOLEAN ObjectCreation
,
71 OUT PACCESS_MASK GrantedAccess
,
72 OUT PNTSTATUS AccessStatus
,
73 OUT PBOOLEAN GenerateOnClose
80 IN ULONG AtomNameLength
,
88 IN ULONG AtomNameLength
,
95 IN PUNICODE_STRING EntryName
,
96 IN PUNICODE_STRING EntryValue
102 IN PUNICODE_STRING EntryName
,
103 IN PUNICODE_STRING EntryValue
109 IN HANDLE TokenHandle
,
110 IN BOOLEAN ResetToDefault
,
111 IN PTOKEN_GROUPS NewState
,
112 IN ULONG BufferLength
,
113 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
114 OUT PULONG ReturnLength
120 IN HANDLE TokenHandle
,
121 IN BOOLEAN ResetToDefault
,
122 IN PTOKEN_GROUPS NewState
,
123 IN ULONG BufferLength
,
124 OUT PTOKEN_GROUPS PreviousState
,
125 OUT PULONG ReturnLength
130 NtAdjustPrivilegesToken(
131 IN HANDLE TokenHandle
,
132 IN BOOLEAN DisableAllPrivileges
,
133 IN PTOKEN_PRIVILEGES NewState
,
134 IN ULONG BufferLength
,
135 OUT PTOKEN_PRIVILEGES PreviousState
,
136 OUT PULONG ReturnLength
141 ZwAdjustPrivilegesToken(
142 IN HANDLE TokenHandle
,
143 IN BOOLEAN DisableAllPrivileges
,
144 IN PTOKEN_PRIVILEGES NewState
,
145 IN ULONG BufferLength
,
146 OUT PTOKEN_PRIVILEGES PreviousState
,
147 OUT PULONG ReturnLength
153 IN HANDLE ThreadHandle
,
154 OUT PULONG SuspendCount
160 IN HANDLE ThreadHandle
,
161 OUT PULONG SuspendCount
167 IN HANDLE ThreadHandle
173 IN HANDLE ThreadHandle
178 NtAllocateLocallyUniqueId(
179 OUT LUID
*LocallyUniqueId
184 ZwAllocateLocallyUniqueId(
191 PULARGE_INTEGER Time
,
200 PULARGE_INTEGER Time
,
208 NtAllocateVirtualMemory(
209 IN HANDLE ProcessHandle
,
210 IN OUT PVOID
*BaseAddress
,
212 IN OUT PULONG RegionSize
,
213 IN ULONG AllocationType
,
219 ZwAllocateVirtualMemory(
220 IN HANDLE ProcessHandle
,
221 IN OUT PVOID
*BaseAddress
,
223 IN OUT PULONG RegionSize
,
224 IN ULONG AllocationType
,
230 NtAssignProcessToJobObject(
237 ZwAssignProcessToJobObject(
261 IN HANDLE FileHandle
,
262 OUT PIO_STATUS_BLOCK IoStatusBlock
268 IN HANDLE FileHandle
,
269 OUT PIO_STATUS_BLOCK IoStatusBlock
275 IN HANDLE TimerHandle
,
276 OUT PBOOLEAN CurrentState OPTIONAL
282 IN HANDLE EventHandle
288 IN HANDLE EventHandle
295 ACCESS_MASK DesiredAccess
,
296 POBJECT_ATTRIBUTES ObjectAttributes
303 ACCESS_MASK DesiredAccess
,
304 POBJECT_ATTRIBUTES ObjectAttributes
321 NtCloseObjectAuditAlarm(
322 IN PUNICODE_STRING SubsystemName
,
324 IN BOOLEAN GenerateOnClose
329 ZwCloseObjectAuditAlarm(
330 IN PUNICODE_STRING SubsystemName
,
332 IN BOOLEAN GenerateOnClose
337 NtCompleteConnectPort(
343 ZwCompleteConnectPort(
351 PUNICODE_STRING PortName
,
352 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
353 PLPC_SECTION_WRITE SectionInfo
,
354 PLPC_SECTION_READ MapInfo
,
355 PULONG MaxMessageSize
,
357 PULONG ConnectInfoLength
364 PUNICODE_STRING PortName
,
365 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
366 PLPC_SECTION_WRITE SectionInfo
,
367 PLPC_SECTION_READ MapInfo
,
368 PULONG MaxMessageSize
,
370 PULONG ConnectInfoLength
389 NtCreateDirectoryObject(
390 OUT PHANDLE DirectoryHandle
,
391 IN ACCESS_MASK DesiredAccess
,
392 IN POBJECT_ATTRIBUTES ObjectAttributes
397 ZwCreateDirectoryObject(
398 OUT PHANDLE DirectoryHandle
,
399 IN ACCESS_MASK DesiredAccess
,
400 IN POBJECT_ATTRIBUTES ObjectAttributes
406 OUT PHANDLE EventHandle
,
407 IN ACCESS_MASK DesiredAccess
,
408 IN POBJECT_ATTRIBUTES ObjectAttributes
,
409 IN EVENT_TYPE EventType
,
410 IN BOOLEAN InitialState
416 OUT PHANDLE EventHandle
,
417 IN ACCESS_MASK DesiredAccess
,
418 IN POBJECT_ATTRIBUTES ObjectAttributes
,
419 IN EVENT_TYPE EventType
,
420 IN BOOLEAN InitialState
426 OUT PHANDLE EventPairHandle
,
427 IN ACCESS_MASK DesiredAccess
,
428 IN POBJECT_ATTRIBUTES ObjectAttributes
434 OUT PHANDLE EventPairHandle
,
435 IN ACCESS_MASK DesiredAccess
,
436 IN POBJECT_ATTRIBUTES ObjectAttributes
442 OUT PHANDLE FileHandle
,
443 IN ACCESS_MASK DesiredAccess
,
444 IN POBJECT_ATTRIBUTES ObjectAttributes
,
445 OUT PIO_STATUS_BLOCK IoStatusBlock
,
446 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
447 IN ULONG FileAttributes
,
448 IN ULONG ShareAccess
,
449 IN ULONG CreateDisposition
,
450 IN ULONG CreateOptions
,
451 IN PVOID EaBuffer OPTIONAL
,
458 OUT PHANDLE FileHandle
,
459 IN ACCESS_MASK DesiredAccess
,
460 IN POBJECT_ATTRIBUTES ObjectAttributes
,
461 OUT PIO_STATUS_BLOCK IoStatusBlock
,
462 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
463 IN ULONG FileAttributes
,
464 IN ULONG ShareAccess
,
465 IN ULONG CreateDisposition
,
466 IN ULONG CreateOptions
,
467 IN PVOID EaBuffer OPTIONAL
,
473 NtCreateIoCompletion(
474 OUT PHANDLE IoCompletionHandle
,
475 IN ACCESS_MASK DesiredAccess
,
476 IN POBJECT_ATTRIBUTES ObjectAttributes
,
477 IN ULONG NumberOfConcurrentThreads
482 ZwCreateIoCompletion(
483 OUT PHANDLE IoCompletionHandle
,
484 IN ACCESS_MASK DesiredAccess
,
485 IN POBJECT_ATTRIBUTES ObjectAttributes
,
486 IN ULONG NumberOfConcurrentThreads
492 OUT PHANDLE KeyHandle
,
493 IN ACCESS_MASK DesiredAccess
,
494 IN POBJECT_ATTRIBUTES ObjectAttributes
,
496 IN PUNICODE_STRING Class OPTIONAL
,
497 IN ULONG CreateOptions
,
498 IN PULONG Disposition OPTIONAL
504 OUT PHANDLE KeyHandle
,
505 IN ACCESS_MASK DesiredAccess
,
506 IN POBJECT_ATTRIBUTES ObjectAttributes
,
508 IN PUNICODE_STRING Class OPTIONAL
,
509 IN ULONG CreateOptions
,
510 IN PULONG Disposition OPTIONAL
515 NtCreateMailslotFile(
516 OUT PHANDLE MailSlotFileHandle
,
517 IN ACCESS_MASK DesiredAccess
,
518 IN POBJECT_ATTRIBUTES ObjectAttributes
,
519 OUT PIO_STATUS_BLOCK IoStatusBlock
,
520 IN ULONG FileAttributes
,
521 IN ULONG ShareAccess
,
522 IN ULONG MaxMessageSize
,
523 IN PLARGE_INTEGER TimeOut
528 ZwCreateMailslotFile(
529 OUT PHANDLE MailSlotFileHandle
,
530 IN ACCESS_MASK DesiredAccess
,
531 IN POBJECT_ATTRIBUTES ObjectAttributes
,
532 OUT PIO_STATUS_BLOCK IoStatusBlock
,
533 IN ULONG FileAttributes
,
534 IN ULONG ShareAccess
,
535 IN ULONG MaxMessageSize
,
536 IN PLARGE_INTEGER TimeOut
542 OUT PHANDLE MutantHandle
,
543 IN ACCESS_MASK DesiredAccess
,
544 IN POBJECT_ATTRIBUTES ObjectAttributes
,
545 IN BOOLEAN InitialOwner
551 OUT PHANDLE MutantHandle
,
552 IN ACCESS_MASK DesiredAccess
,
553 IN POBJECT_ATTRIBUTES ObjectAttributes
,
554 IN BOOLEAN InitialOwner
559 NtCreateNamedPipeFile(
560 OUT PHANDLE NamedPipeFileHandle
,
561 IN ACCESS_MASK DesiredAccess
,
562 IN POBJECT_ATTRIBUTES ObjectAttributes
,
563 OUT PIO_STATUS_BLOCK IoStatusBlock
,
564 IN ULONG ShareAccess
,
565 IN ULONG CreateDisposition
,
566 IN ULONG CreateOptions
,
567 IN ULONG WriteModeMessage
,
568 IN ULONG ReadModeMessage
,
569 IN ULONG NonBlocking
,
570 IN ULONG MaxInstances
,
571 IN ULONG InBufferSize
,
572 IN ULONG OutBufferSize
,
573 IN PLARGE_INTEGER DefaultTimeOut
578 ZwCreateNamedPipeFile(
579 OUT PHANDLE NamedPipeFileHandle
,
580 IN ACCESS_MASK DesiredAccess
,
581 IN POBJECT_ATTRIBUTES ObjectAttributes
,
582 OUT PIO_STATUS_BLOCK IoStatusBlock
,
583 IN ULONG ShareAccess
,
584 IN ULONG CreateDisposition
,
585 IN ULONG CreateOptions
,
586 IN ULONG WriteModeMessage
,
587 IN ULONG ReadModeMessage
,
588 IN ULONG NonBlocking
,
589 IN ULONG MaxInstances
,
590 IN ULONG InBufferSize
,
591 IN ULONG OutBufferSize
,
592 IN PLARGE_INTEGER DefaultTimeOut
598 IN PUNICODE_STRING FileName
,
599 IN PLARGE_INTEGER InitialSize
,
600 IN PLARGE_INTEGER MaxiumSize
,
607 IN PUNICODE_STRING FileName
,
608 IN PLARGE_INTEGER InitialSize
,
609 IN PLARGE_INTEGER MaxiumSize
,
617 POBJECT_ATTRIBUTES ObjectAttributes
,
618 ULONG MaxConnectInfoLength
,
620 ULONG NPMessageQueueSize OPTIONAL
627 POBJECT_ATTRIBUTES ObjectAttributes
,
628 ULONG MaxConnectInfoLength
,
630 ULONG NPMessageQueueSize OPTIONAL
636 OUT PHANDLE ProcessHandle
,
637 IN ACCESS_MASK DesiredAccess
,
638 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
639 IN HANDLE ParentProcess
,
640 IN BOOLEAN InheritObjectTable
,
641 IN HANDLE SectionHandle OPTIONAL
,
642 IN HANDLE DebugPort OPTIONAL
,
643 IN HANDLE ExceptionPort OPTIONAL
649 OUT PHANDLE ProcessHandle
,
650 IN ACCESS_MASK DesiredAccess
,
651 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
652 IN HANDLE ParentProcess
,
653 IN BOOLEAN InheritObjectTable
,
654 IN HANDLE SectionHandle OPTIONAL
,
655 IN HANDLE DebugPort OPTIONAL
,
656 IN HANDLE ExceptionPort OPTIONAL
662 OUT PHANDLE ProfileHandle
,
663 IN HANDLE ProcessHandle
,
666 IN ULONG Granularity
,
668 IN ULONG ProfilingSize
,
669 IN KPROFILE_SOURCE Source
,
670 IN KAFFINITY ProcessorMask
676 OUT PHANDLE ProfileHandle
,
677 IN POBJECT_ATTRIBUTES ObjectAttributes
,
680 IN ULONG Granularity
,
682 IN ULONG ProfilingSize
,
683 IN ULONG ClockSource
,
684 IN ULONG ProcessorMask
690 OUT PHANDLE SectionHandle
,
691 IN ACCESS_MASK DesiredAccess
,
692 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
693 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
694 IN ULONG SectionPageProtection OPTIONAL
,
695 IN ULONG AllocationAttributes
,
696 IN HANDLE FileHandle OPTIONAL
702 OUT PHANDLE SectionHandle
,
703 IN ACCESS_MASK DesiredAccess
,
704 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
705 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
706 IN ULONG SectionPageProtection OPTIONAL
,
707 IN ULONG AllocationAttributes
,
708 IN HANDLE FileHandle OPTIONAL
714 OUT PHANDLE SemaphoreHandle
,
715 IN ACCESS_MASK DesiredAccess
,
716 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
717 IN LONG InitialCount
,
724 OUT PHANDLE SemaphoreHandle
,
725 IN ACCESS_MASK DesiredAccess
,
726 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
727 IN LONG InitialCount
,
733 NtCreateSymbolicLinkObject(
734 OUT PHANDLE SymbolicLinkHandle
,
735 IN ACCESS_MASK DesiredAccess
,
736 IN POBJECT_ATTRIBUTES ObjectAttributes
,
737 IN PUNICODE_STRING Name
742 ZwCreateSymbolicLinkObject(
743 OUT PHANDLE SymbolicLinkHandle
,
744 IN ACCESS_MASK DesiredAccess
,
745 IN POBJECT_ATTRIBUTES ObjectAttributes
,
746 IN PUNICODE_STRING Name
752 OUT PHANDLE ThreadHandle
,
753 IN ACCESS_MASK DesiredAccess
,
754 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
755 IN HANDLE ProcessHandle
,
756 OUT PCLIENT_ID ClientId
,
757 IN PCONTEXT ThreadContext
,
758 IN PINITIAL_TEB UserStack
,
759 IN BOOLEAN CreateSuspended
765 OUT PHANDLE ThreadHandle
,
766 IN ACCESS_MASK DesiredAccess
,
767 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
768 IN HANDLE ProcessHandle
,
769 OUT PCLIENT_ID ClientId
,
770 IN PCONTEXT ThreadContext
,
771 IN PINITIAL_TEB UserStack
,
772 IN BOOLEAN CreateSuspended
778 OUT PHANDLE TimerHandle
,
779 IN ACCESS_MASK DesiredAccess
,
780 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
781 IN TIMER_TYPE TimerType
787 OUT PHANDLE TimerHandle
,
788 IN ACCESS_MASK DesiredAccess
,
789 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
790 IN TIMER_TYPE TimerType
796 OUT PHANDLE TokenHandle
,
797 IN ACCESS_MASK DesiredAccess
,
798 IN POBJECT_ATTRIBUTES ObjectAttributes
,
799 IN TOKEN_TYPE TokenType
,
800 IN PLUID AuthenticationId
,
801 IN PLARGE_INTEGER ExpirationTime
,
802 IN PTOKEN_USER TokenUser
,
803 IN PTOKEN_GROUPS TokenGroups
,
804 IN PTOKEN_PRIVILEGES TokenPrivileges
,
805 IN PTOKEN_OWNER TokenOwner
,
806 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
807 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
808 IN PTOKEN_SOURCE TokenSource
814 OUT PHANDLE TokenHandle
,
815 IN ACCESS_MASK DesiredAccess
,
816 IN POBJECT_ATTRIBUTES ObjectAttributes
,
817 IN TOKEN_TYPE TokenType
,
818 IN PLUID AuthenticationId
,
819 IN PLARGE_INTEGER ExpirationTime
,
820 IN PTOKEN_USER TokenUser
,
821 IN PTOKEN_GROUPS TokenGroups
,
822 IN PTOKEN_PRIVILEGES TokenPrivileges
,
823 IN PTOKEN_OWNER TokenOwner
,
824 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
825 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
826 IN PTOKEN_SOURCE TokenSource
831 NtCreateWaitablePort(
833 POBJECT_ATTRIBUTES ObjectAttributes
,
834 ULONG MaxConnectInfoLength
,
836 ULONG NPMessageQueueSize OPTIONAL
841 ZwCreateWaitablePort(
843 POBJECT_ATTRIBUTES ObjectAttributes
,
844 ULONG MaxConnectInfoLength
,
846 ULONG NPMessageQueueSize OPTIONAL
852 IN BOOLEAN Alertable
,
853 IN LARGE_INTEGER
*Interval
859 IN BOOLEAN Alertable
,
860 IN LARGE_INTEGER
*Interval
878 IN PUNICODE_STRING EntryName
,
879 IN PUNICODE_STRING EntryValue
885 IN PUNICODE_STRING EntryName
,
886 IN PUNICODE_STRING EntryValue
892 IN POBJECT_ATTRIBUTES ObjectAttributes
898 IN POBJECT_ATTRIBUTES ObjectAttributes
915 NtDeleteObjectAuditAlarm(
916 IN PUNICODE_STRING SubsystemName
,
918 IN BOOLEAN GenerateOnClose
923 ZwDeleteObjectAuditAlarm(
924 IN PUNICODE_STRING SubsystemName
,
926 IN BOOLEAN GenerateOnClose
933 IN PUNICODE_STRING ValueName
940 IN PUNICODE_STRING ValueName
945 NtDeviceIoControlFile(
946 IN HANDLE DeviceHandle
,
947 IN HANDLE Event OPTIONAL
,
948 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
949 IN PVOID UserApcContext OPTIONAL
,
950 OUT PIO_STATUS_BLOCK IoStatusBlock
,
951 IN ULONG IoControlCode
,
952 IN PVOID InputBuffer
,
953 IN ULONG InputBufferSize
,
954 OUT PVOID OutputBuffer
,
955 IN ULONG OutputBufferSize
960 ZwDeviceIoControlFile(
961 IN HANDLE DeviceHandle
,
962 IN HANDLE Event OPTIONAL
,
963 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
964 IN PVOID UserApcContext OPTIONAL
,
965 OUT PIO_STATUS_BLOCK IoStatusBlock
,
966 IN ULONG IoControlCode
,
967 IN PVOID InputBuffer
,
968 IN ULONG InputBufferSize
,
969 OUT PVOID OutputBuffer
,
970 IN ULONG OutputBufferSize
976 IN PUNICODE_STRING DisplayString
982 IN PUNICODE_STRING DisplayString
988 IN HANDLE SourceProcessHandle
,
989 IN HANDLE SourceHandle
,
990 IN HANDLE TargetProcessHandle
,
991 OUT PHANDLE TargetHandle
,
992 IN ACCESS_MASK DesiredAccess
,
993 IN ULONG HandleAttributes
,
1000 IN HANDLE SourceProcessHandle
,
1001 IN HANDLE SourceHandle
,
1002 IN HANDLE TargetProcessHandle
,
1003 OUT PHANDLE TargetHandle
,
1004 IN ACCESS_MASK DesiredAccess
,
1005 IN ULONG HandleAttributes
,
1012 IN HANDLE ExistingTokenHandle
,
1013 IN ACCESS_MASK DesiredAccess
,
1014 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1015 IN BOOLEAN EffectiveOnly
,
1016 IN TOKEN_TYPE TokenType
,
1017 OUT PHANDLE NewTokenHandle
1022 NtEnumerateBootEntries(
1029 ZwEnumerateBootEntries(
1037 IN HANDLE KeyHandle
,
1039 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1040 OUT PVOID KeyInformation
,
1042 OUT PULONG ResultLength
1048 IN HANDLE KeyHandle
,
1050 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1051 OUT PVOID KeyInformation
,
1053 OUT PULONG ResultLength
1058 NtEnumerateValueKey(
1059 IN HANDLE KeyHandle
,
1061 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1062 OUT PVOID KeyValueInformation
,
1064 OUT PULONG ResultLength
1069 ZwEnumerateValueKey(
1070 IN HANDLE KeyHandle
,
1072 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1073 OUT PVOID KeyValueInformation
,
1075 OUT PULONG ResultLength
1081 IN HANDLE SectionHandle
,
1082 IN PLARGE_INTEGER NewMaximumSize
1088 IN HANDLE SectionHandle
,
1089 IN PLARGE_INTEGER NewMaximumSize
1096 IN ULONG AtomNameLength
,
1097 OUT PRTL_ATOM Atom OPTIONAL
1104 IN ULONG AtomNameLength
,
1105 OUT PRTL_ATOM Atom OPTIONAL
1111 IN HANDLE FileHandle
,
1112 OUT PIO_STATUS_BLOCK IoStatusBlock
1118 IN HANDLE FileHandle
,
1119 OUT PIO_STATUS_BLOCK IoStatusBlock
1124 NtFlushInstructionCache(
1125 IN HANDLE ProcessHandle
,
1126 IN PVOID BaseAddress
,
1127 IN UINT NumberOfBytesToFlush
1144 NtFlushVirtualMemory(
1145 IN HANDLE ProcessHandle
,
1146 IN PVOID BaseAddress
,
1147 IN ULONG NumberOfBytesToFlush
,
1148 OUT PULONG NumberOfBytesFlushed OPTIONAL
1153 NtFlushWriteBuffer(VOID
);
1157 ZwFlushWriteBuffer(VOID
);
1161 NtFreeVirtualMemory(
1162 IN HANDLE ProcessHandle
,
1163 IN PVOID
*BaseAddress
,
1164 IN PULONG RegionSize
,
1170 ZwFreeVirtualMemory(
1171 IN HANDLE ProcessHandle
,
1172 IN PVOID
*BaseAddress
,
1173 IN PULONG RegionSize
,
1180 IN HANDLE DeviceHandle
,
1181 IN HANDLE Event OPTIONAL
,
1182 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1183 IN PVOID ApcContext OPTIONAL
,
1184 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1185 IN ULONG IoControlCode
,
1186 IN PVOID InputBuffer
,
1187 IN ULONG InputBufferSize
,
1188 OUT PVOID OutputBuffer
,
1189 IN ULONG OutputBufferSize
1195 IN HANDLE DeviceHandle
,
1196 IN HANDLE Event OPTIONAL
,
1197 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1198 IN PVOID ApcContext OPTIONAL
,
1199 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1200 IN ULONG IoControlCode
,
1201 IN PVOID InputBuffer
,
1202 IN ULONG InputBufferSize
,
1203 OUT PVOID OutputBuffer
,
1204 IN ULONG OutputBufferSize
1210 IN HANDLE ThreadHandle
,
1211 OUT PCONTEXT Context
1217 IN HANDLE ThreadHandle
,
1218 OUT PCONTEXT Context
1226 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1244 NtImpersonateClientOfPort(
1246 PPORT_MESSAGE ClientMessage
1251 ZwImpersonateClientOfPort(
1253 PPORT_MESSAGE ClientMessage
1258 NtImpersonateThread(
1259 IN HANDLE ThreadHandle
,
1260 IN HANDLE ThreadToImpersonate
,
1261 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1266 ZwImpersonateThread(
1267 IN HANDLE ThreadHandle
,
1268 IN HANDLE ThreadToImpersonate
,
1269 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1274 NtInitiatePowerAction(
1275 POWER_ACTION SystemAction
,
1276 SYSTEM_POWER_STATE MinSystemState
,
1278 BOOLEAN Asynchronous
1283 ZwInitiatePowerAction(
1284 POWER_ACTION SystemAction
,
1285 SYSTEM_POWER_STATE MinSystemState
,
1287 BOOLEAN Asynchronous
1292 NtInitializeRegistry(
1298 ZwInitializeRegistry(
1305 IN HANDLE ProcessHandle
,
1306 IN HANDLE JobHandle OPTIONAL
1312 IN HANDLE ProcessHandle
,
1313 IN HANDLE JobHandle OPTIONAL
1318 NtListenPort(HANDLE PortHandle
,
1319 PPORT_MESSAGE LpcMessage
1324 ZwListenPort(HANDLE PortHandle
,
1325 PPORT_MESSAGE LpcMessage
1331 IN PUNICODE_STRING DriverServiceName
1337 IN PUNICODE_STRING DriverServiceName
1343 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1344 IN POBJECT_ATTRIBUTES FileObjectAttributes
1350 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1351 IN POBJECT_ATTRIBUTES FileObjectAttributes
1357 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1358 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1365 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1366 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1373 IN HANDLE FileHandle
,
1374 IN HANDLE Event OPTIONAL
,
1375 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1376 IN PVOID ApcContext OPTIONAL
,
1377 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1378 IN PLARGE_INTEGER ByteOffset
,
1379 IN PLARGE_INTEGER Length
,
1381 IN BOOLEAN FailImmediatedly
,
1382 IN BOOLEAN ExclusiveLock
1388 IN HANDLE FileHandle
,
1389 IN HANDLE Event OPTIONAL
,
1390 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1391 IN PVOID ApcContext OPTIONAL
,
1392 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1393 IN PLARGE_INTEGER ByteOffset
,
1394 IN PLARGE_INTEGER Length
,
1396 IN BOOLEAN FailImmediatedly
,
1397 IN BOOLEAN ExclusiveLock
1402 NtLockVirtualMemory(
1403 HANDLE ProcessHandle
,
1405 ULONG NumberOfBytesToLock
,
1406 PULONG NumberOfBytesLocked
1411 ZwLockVirtualMemory(
1412 HANDLE ProcessHandle
,
1414 ULONG NumberOfBytesToLock
,
1415 PULONG NumberOfBytesLocked
1420 NtMakePermanentObject(
1426 ZwMakePermanentObject(
1432 NtMakeTemporaryObject(
1438 ZwMakeTemporaryObject(
1445 IN HANDLE SectionHandle
,
1446 IN HANDLE ProcessHandle
,
1447 IN OUT PVOID
*BaseAddress
,
1449 IN ULONG CommitSize
,
1450 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1451 IN OUT PULONG ViewSize
,
1452 IN SECTION_INHERIT InheritDisposition
,
1453 IN ULONG AllocationType
,
1454 IN ULONG AccessProtection
1460 IN HANDLE SectionHandle
,
1461 IN HANDLE ProcessHandle
,
1462 IN OUT PVOID
*BaseAddress
,
1464 IN ULONG CommitSize
,
1465 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1466 IN OUT PULONG ViewSize
,
1467 IN SECTION_INHERIT InheritDisposition
,
1468 IN ULONG AllocationType
,
1469 IN ULONG AccessProtection
1474 NtNotifyChangeDirectoryFile(
1475 IN HANDLE FileHandle
,
1476 IN HANDLE Event OPTIONAL
,
1477 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1478 IN PVOID ApcContext OPTIONAL
,
1479 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1481 IN ULONG BufferSize
,
1482 IN ULONG CompletionFilter
,
1483 IN BOOLEAN WatchTree
1488 ZwNotifyChangeDirectoryFile(
1489 IN HANDLE FileHandle
,
1490 IN HANDLE Event OPTIONAL
,
1491 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1492 IN PVOID ApcContext OPTIONAL
,
1493 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1495 IN ULONG BufferSize
,
1496 IN ULONG CompletionFilter
,
1497 IN BOOLEAN WatchTree
1503 IN HANDLE KeyHandle
,
1505 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1506 IN PVOID ApcContext OPTIONAL
,
1507 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1508 IN ULONG CompletionFilter
,
1509 IN BOOLEAN Asynchroneous
,
1510 OUT PVOID ChangeBuffer
,
1512 IN BOOLEAN WatchSubtree
1518 IN HANDLE KeyHandle
,
1520 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1521 IN PVOID ApcContext OPTIONAL
,
1522 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1523 IN ULONG CompletionFilter
,
1524 IN BOOLEAN Asynchroneous
,
1525 OUT PVOID ChangeBuffer
,
1527 IN BOOLEAN WatchSubtree
1532 NtOpenDirectoryObject(
1533 OUT PHANDLE FileHandle
,
1534 IN ACCESS_MASK DesiredAccess
,
1535 IN POBJECT_ATTRIBUTES ObjectAttributes
1540 ZwOpenDirectoryObject(
1541 OUT PHANDLE FileHandle
,
1542 IN ACCESS_MASK DesiredAccess
,
1543 IN POBJECT_ATTRIBUTES ObjectAttributes
1549 OUT PHANDLE EventHandle
,
1550 IN ACCESS_MASK DesiredAccess
,
1551 IN POBJECT_ATTRIBUTES ObjectAttributes
1557 OUT PHANDLE EventHandle
,
1558 IN ACCESS_MASK DesiredAccess
,
1559 IN POBJECT_ATTRIBUTES ObjectAttributes
1565 OUT PHANDLE EventPairHandle
,
1566 IN ACCESS_MASK DesiredAccess
,
1567 IN POBJECT_ATTRIBUTES ObjectAttributes
1573 OUT PHANDLE EventPairHandle
,
1574 IN ACCESS_MASK DesiredAccess
,
1575 IN POBJECT_ATTRIBUTES ObjectAttributes
1581 OUT PHANDLE FileHandle
,
1582 IN ACCESS_MASK DesiredAccess
,
1583 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1584 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1585 IN ULONG ShareAccess
,
1586 IN ULONG OpenOptions
1592 OUT PHANDLE FileHandle
,
1593 IN ACCESS_MASK DesiredAccess
,
1594 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1595 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1596 IN ULONG ShareAccess
,
1597 IN ULONG OpenOptions
1603 OUT PHANDLE CompetionPort
,
1604 IN ACCESS_MASK DesiredAccess
,
1605 IN POBJECT_ATTRIBUTES ObjectAttributes
1611 OUT PHANDLE CompetionPort
,
1612 IN ACCESS_MASK DesiredAccess
,
1613 IN POBJECT_ATTRIBUTES ObjectAttributes
1620 ACCESS_MASK DesiredAccess
,
1621 POBJECT_ATTRIBUTES ObjectAttributes
1628 ACCESS_MASK DesiredAccess
,
1629 POBJECT_ATTRIBUTES ObjectAttributes
1635 OUT PHANDLE KeyHandle
,
1636 IN ACCESS_MASK DesiredAccess
,
1637 IN POBJECT_ATTRIBUTES ObjectAttributes
1643 OUT PHANDLE KeyHandle
,
1644 IN ACCESS_MASK DesiredAccess
,
1645 IN POBJECT_ATTRIBUTES ObjectAttributes
1651 OUT PHANDLE MutantHandle
,
1652 IN ACCESS_MASK DesiredAccess
,
1653 IN POBJECT_ATTRIBUTES ObjectAttributes
1659 OUT PHANDLE MutantHandle
,
1660 IN ACCESS_MASK DesiredAccess
,
1661 IN POBJECT_ATTRIBUTES ObjectAttributes
1666 NtOpenObjectAuditAlarm(
1667 IN PUNICODE_STRING SubsystemName
,
1669 IN PUNICODE_STRING ObjectTypeName
,
1670 IN PUNICODE_STRING ObjectName
,
1671 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1672 IN HANDLE ClientToken
,
1673 IN ULONG DesiredAccess
,
1674 IN ULONG GrantedAccess
,
1675 IN PPRIVILEGE_SET Privileges
,
1676 IN BOOLEAN ObjectCreation
,
1677 IN BOOLEAN AccessGranted
,
1678 OUT PBOOLEAN GenerateOnClose
1683 ZwOpenObjectAuditAlarm(
1684 IN PUNICODE_STRING SubsystemName
,
1686 IN PUNICODE_STRING ObjectTypeName
,
1687 IN PUNICODE_STRING ObjectName
,
1688 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1689 IN HANDLE ClientToken
,
1690 IN ULONG DesiredAccess
,
1691 IN ULONG GrantedAccess
,
1692 IN PPRIVILEGE_SET Privileges
,
1693 IN BOOLEAN ObjectCreation
,
1694 IN BOOLEAN AccessGranted
,
1695 OUT PBOOLEAN GenerateOnClose
1701 OUT PHANDLE ProcessHandle
,
1702 IN ACCESS_MASK DesiredAccess
,
1703 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1704 IN PCLIENT_ID ClientId
1710 OUT PHANDLE ProcessHandle
,
1711 IN ACCESS_MASK DesiredAccess
,
1712 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1713 IN PCLIENT_ID ClientId
1719 IN HANDLE ProcessHandle
,
1720 IN ACCESS_MASK DesiredAccess
,
1721 OUT PHANDLE TokenHandle
1727 IN HANDLE ProcessHandle
,
1728 IN ACCESS_MASK DesiredAccess
,
1729 OUT PHANDLE TokenHandle
1734 NtOpenProcessTokenEx(
1735 IN HANDLE ProcessHandle
,
1736 IN ACCESS_MASK DesiredAccess
,
1737 IN ULONG HandleAttributes
,
1738 OUT PHANDLE TokenHandle
1743 ZwOpenProcessTokenEx(
1744 IN HANDLE ProcessHandle
,
1745 IN ACCESS_MASK DesiredAccess
,
1746 IN ULONG HandleAttributes
,
1747 OUT PHANDLE TokenHandle
1753 OUT PHANDLE SectionHandle
,
1754 IN ACCESS_MASK DesiredAccess
,
1755 IN POBJECT_ATTRIBUTES ObjectAttributes
1761 OUT PHANDLE SectionHandle
,
1762 IN ACCESS_MASK DesiredAccess
,
1763 IN POBJECT_ATTRIBUTES ObjectAttributes
1769 OUT PHANDLE SemaphoreHandle
,
1770 IN ACCESS_MASK DesiredAcces
,
1771 IN POBJECT_ATTRIBUTES ObjectAttributes
1777 OUT PHANDLE SemaphoreHandle
,
1778 IN ACCESS_MASK DesiredAcces
,
1779 IN POBJECT_ATTRIBUTES ObjectAttributes
1784 NtOpenSymbolicLinkObject(
1785 OUT PHANDLE SymbolicLinkHandle
,
1786 IN ACCESS_MASK DesiredAccess
,
1787 IN POBJECT_ATTRIBUTES ObjectAttributes
1792 ZwOpenSymbolicLinkObject(
1793 OUT PHANDLE SymbolicLinkHandle
,
1794 IN ACCESS_MASK DesiredAccess
,
1795 IN POBJECT_ATTRIBUTES ObjectAttributes
1801 OUT PHANDLE ThreadHandle
,
1802 IN ACCESS_MASK DesiredAccess
,
1803 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1804 IN PCLIENT_ID ClientId
1810 OUT PHANDLE ThreadHandle
,
1811 IN ACCESS_MASK DesiredAccess
,
1812 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1813 IN PCLIENT_ID ClientId
1819 IN HANDLE ThreadHandle
,
1820 IN ACCESS_MASK DesiredAccess
,
1821 IN BOOLEAN OpenAsSelf
,
1822 OUT PHANDLE TokenHandle
1828 IN HANDLE ThreadHandle
,
1829 IN ACCESS_MASK DesiredAccess
,
1830 IN BOOLEAN OpenAsSelf
,
1831 OUT PHANDLE TokenHandle
1836 NtOpenThreadTokenEx(
1837 IN HANDLE ThreadHandle
,
1838 IN ACCESS_MASK DesiredAccess
,
1839 IN BOOLEAN OpenAsSelf
,
1840 IN ULONG HandleAttributes
,
1841 OUT PHANDLE TokenHandle
1846 ZwOpenThreadTokenEx(
1847 IN HANDLE ThreadHandle
,
1848 IN ACCESS_MASK DesiredAccess
,
1849 IN BOOLEAN OpenAsSelf
,
1850 IN ULONG HandleAttributes
,
1851 OUT PHANDLE TokenHandle
1857 OUT PHANDLE TimerHandle
,
1858 IN ACCESS_MASK DesiredAccess
,
1859 IN POBJECT_ATTRIBUTES ObjectAttributes
1864 OUT PHANDLE TimerHandle
,
1865 IN ACCESS_MASK DesiredAccess
,
1866 IN POBJECT_ATTRIBUTES ObjectAttributes
1872 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
1873 IN OUT PVOID Buffer
,
1880 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1882 ULONG InputBufferLength
,
1884 ULONG OutputBufferLength
1890 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1892 ULONG InputBufferLength
,
1894 ULONG OutputBufferLength
1900 IN HANDLE ClientToken
,
1901 IN PPRIVILEGE_SET RequiredPrivileges
,
1908 IN HANDLE ClientToken
,
1909 IN PPRIVILEGE_SET RequiredPrivileges
,
1915 NtPrivilegedServiceAuditAlarm(
1916 IN PUNICODE_STRING SubsystemName
,
1917 IN PUNICODE_STRING ServiceName
,
1918 IN HANDLE ClientToken
,
1919 IN PPRIVILEGE_SET Privileges
,
1920 IN BOOLEAN AccessGranted
1925 ZwPrivilegedServiceAuditAlarm(
1926 IN PUNICODE_STRING SubsystemName
,
1927 IN PUNICODE_STRING ServiceName
,
1928 IN HANDLE ClientToken
,
1929 IN PPRIVILEGE_SET Privileges
,
1930 IN BOOLEAN AccessGranted
1935 NtPrivilegeObjectAuditAlarm(
1936 IN PUNICODE_STRING SubsystemName
,
1938 IN HANDLE ClientToken
,
1939 IN ULONG DesiredAccess
,
1940 IN PPRIVILEGE_SET Privileges
,
1941 IN BOOLEAN AccessGranted
1946 ZwPrivilegeObjectAuditAlarm(
1947 IN PUNICODE_STRING SubsystemName
,
1949 IN HANDLE ClientToken
,
1950 IN ULONG DesiredAccess
,
1951 IN PPRIVILEGE_SET Privileges
,
1952 IN BOOLEAN AccessGranted
1957 NtProtectVirtualMemory(
1958 IN HANDLE ProcessHandle
,
1959 IN PVOID
*BaseAddress
,
1960 IN ULONG
*NumberOfBytesToProtect
,
1961 IN ULONG NewAccessProtection
,
1962 OUT PULONG OldAccessProtection
1967 ZwProtectVirtualMemory(
1968 IN HANDLE ProcessHandle
,
1969 IN PVOID
*BaseAddress
,
1970 IN ULONG
*NumberOfBytesToProtect
,
1971 IN ULONG NewAccessProtection
,
1972 OUT PULONG OldAccessProtection
1978 IN HANDLE EventHandle
,
1979 IN PLONG PulseCount OPTIONAL
1985 IN HANDLE EventHandle
,
1986 IN PLONG PulseCount OPTIONAL
1991 NtQueryAttributesFile(
1992 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1993 OUT PFILE_BASIC_INFORMATION FileInformation
1998 ZwQueryAttributesFile(
1999 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2000 OUT PFILE_BASIC_INFORMATION FileInformation
2006 NtQueryBootEntryOrder(
2013 ZwQueryBootEntryOrder(
2033 NtQueryDefaultLocale(
2034 IN BOOLEAN UserProfile
,
2035 OUT PLCID DefaultLocaleId
2040 ZwQueryDefaultLocale(
2041 IN BOOLEAN UserProfile
,
2042 OUT PLCID DefaultLocaleId
2047 NtQueryDefaultUILanguage(
2053 ZwQueryDefaultUILanguage(
2059 NtQueryDirectoryFile(
2060 IN HANDLE FileHandle
,
2061 IN HANDLE Event OPTIONAL
,
2062 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2063 IN PVOID ApcContext OPTIONAL
,
2064 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2065 OUT PVOID FileInformation
,
2067 IN FILE_INFORMATION_CLASS FileInformationClass
,
2068 IN BOOLEAN ReturnSingleEntry
,
2069 IN PUNICODE_STRING FileName OPTIONAL
,
2070 IN BOOLEAN RestartScan
2075 ZwQueryDirectoryFile(
2076 IN HANDLE FileHandle
,
2077 IN HANDLE Event OPTIONAL
,
2078 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2079 IN PVOID ApcContext OPTIONAL
,
2080 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2081 OUT PVOID FileInformation
,
2083 IN FILE_INFORMATION_CLASS FileInformationClass
,
2084 IN BOOLEAN ReturnSingleEntry
,
2085 IN PUNICODE_STRING FileName OPTIONAL
,
2086 IN BOOLEAN RestartScan
2091 NtQueryDirectoryObject(
2092 IN HANDLE DirectoryHandle
,
2094 IN ULONG BufferLength
,
2095 IN BOOLEAN ReturnSingleEntry
,
2096 IN BOOLEAN RestartScan
,
2097 IN OUT PULONG Context
,
2098 OUT PULONG ReturnLength OPTIONAL
2103 ZwQueryDirectoryObject(
2104 IN HANDLE DirectoryHandle
,
2106 IN ULONG BufferLength
,
2107 IN BOOLEAN ReturnSingleEntry
,
2108 IN BOOLEAN RestartScan
,
2109 IN OUT PULONG Context
,
2110 OUT PULONG ReturnLength OPTIONAL
2116 IN HANDLE FileHandle
,
2117 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2120 IN BOOLEAN ReturnSingleEntry
,
2121 IN PVOID EaList OPTIONAL
,
2122 IN ULONG EaListLength
,
2123 IN PULONG EaIndex OPTIONAL
,
2124 IN BOOLEAN RestartScan
2130 IN HANDLE FileHandle
,
2131 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2134 IN BOOLEAN ReturnSingleEntry
,
2135 IN PVOID EaList OPTIONAL
,
2136 IN ULONG EaListLength
,
2137 IN PULONG EaIndex OPTIONAL
,
2138 IN BOOLEAN RestartScan
2144 IN HANDLE EventHandle
,
2145 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2146 OUT PVOID EventInformation
,
2147 IN ULONG EventInformationLength
,
2148 OUT PULONG ReturnLength
2153 IN HANDLE EventHandle
,
2154 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2155 OUT PVOID EventInformation
,
2156 IN ULONG EventInformationLength
,
2157 OUT PULONG ReturnLength
2162 NtQueryFullAttributesFile(
2163 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2164 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2169 ZwQueryFullAttributesFile(
2170 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2171 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2176 NtQueryInformationAtom(
2178 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2179 OUT PVOID AtomInformation
,
2180 IN ULONG AtomInformationLength
,
2181 OUT PULONG ReturnLength OPTIONAL
2186 ZwQueryInformationAtom(
2188 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2189 OUT PVOID AtomInformation
,
2190 IN ULONG AtomInformationLength
,
2191 OUT PULONG ReturnLength OPTIONAL
2196 NtQueryInformationFile(
2197 IN HANDLE FileHandle
,
2198 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2199 OUT PVOID FileInformation
,
2201 IN FILE_INFORMATION_CLASS FileInformationClass
2206 ZwQueryInformationFile(
2208 PIO_STATUS_BLOCK IoStatusBlock
,
2209 PVOID FileInformation
,
2211 FILE_INFORMATION_CLASS FileInformationClass
2216 NtQueryInformationJobObject(
2218 JOBOBJECTINFOCLASS JobInformationClass
,
2219 PVOID JobInformation
,
2220 ULONG JobInformationLength
,
2226 ZwQueryInformationJobObject(
2228 JOBOBJECTINFOCLASS JobInformationClass
,
2229 PVOID JobInformation
,
2230 ULONG JobInformationLength
,
2236 NtQueryInformationPort(
2238 CINT PortInformationClass
,
2239 PVOID PortInformation
,
2240 ULONG PortInformationLength
,
2246 ZwQueryInformationPort(
2248 CINT PortInformationClass
,
2249 PVOID PortInformation
,
2250 ULONG PortInformationLength
,
2257 NtQueryInformationProcess(
2258 IN HANDLE ProcessHandle
,
2259 IN PROCESSINFOCLASS ProcessInformationClass
,
2260 OUT PVOID ProcessInformation
,
2261 IN ULONG ProcessInformationLength
,
2262 OUT PULONG ReturnLength OPTIONAL
2267 ZwQueryInformationProcess(
2268 IN HANDLE ProcessHandle
,
2269 IN PROCESSINFOCLASS ProcessInformationClass
,
2270 OUT PVOID ProcessInformation
,
2271 IN ULONG ProcessInformationLength
,
2272 OUT PULONG ReturnLength OPTIONAL
2278 NtQueryInformationThread(
2279 IN HANDLE ThreadHandle
,
2280 IN THREADINFOCLASS ThreadInformationClass
,
2281 OUT PVOID ThreadInformation
,
2282 IN ULONG ThreadInformationLength
,
2283 OUT PULONG ReturnLength
2288 ZwQueryInformationThread(
2289 IN HANDLE ThreadHandle
,
2290 IN THREADINFOCLASS ThreadInformationClass
,
2291 OUT PVOID ThreadInformation
,
2292 IN ULONG ThreadInformationLength
,
2293 OUT PULONG ReturnLength
2298 NtQueryInformationToken(
2299 IN HANDLE TokenHandle
,
2300 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2301 OUT PVOID TokenInformation
,
2302 IN ULONG TokenInformationLength
,
2303 OUT PULONG ReturnLength
2308 ZwQueryInformationToken(
2309 IN HANDLE TokenHandle
,
2310 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2311 OUT PVOID TokenInformation
,
2312 IN ULONG TokenInformationLength
,
2313 OUT PULONG ReturnLength
2318 NtQueryInstallUILanguage(
2324 ZwQueryInstallUILanguage(
2330 NtQueryIntervalProfile(
2331 IN KPROFILE_SOURCE ProfileSource
,
2337 ZwQueryIntervalProfile(
2338 OUT PULONG Interval
,
2339 OUT KPROFILE_SOURCE ClockSource
2344 NtQueryIoCompletion(
2345 IN HANDLE IoCompletionHandle
,
2346 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2347 OUT PVOID IoCompletionInformation
,
2348 IN ULONG IoCompletionInformationLength
,
2349 OUT PULONG ResultLength OPTIONAL
2354 ZwQueryIoCompletion(
2355 IN HANDLE IoCompletionHandle
,
2356 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2357 OUT PVOID IoCompletionInformation
,
2358 IN ULONG IoCompletionInformationLength
,
2359 OUT PULONG ResultLength OPTIONAL
2365 IN HANDLE KeyHandle
,
2366 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2367 OUT PVOID KeyInformation
,
2369 OUT PULONG ResultLength
2375 IN HANDLE KeyHandle
,
2376 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2377 OUT PVOID KeyInformation
,
2379 OUT PULONG ResultLength
2384 NtQueryQuotaInformationFile(
2385 IN HANDLE FileHandle
,
2386 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2389 IN BOOLEAN ReturnSingleEntry
,
2390 IN PVOID SidList OPTIONAL
,
2391 IN ULONG SidListLength
,
2392 IN PSID StartSid OPTIONAL
,
2393 IN BOOLEAN RestartScan
2398 ZwQueryQuotaInformationFile(
2399 IN HANDLE FileHandle
,
2400 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2403 IN BOOLEAN ReturnSingleEntry
,
2404 IN PVOID SidList OPTIONAL
,
2405 IN ULONG SidListLength
,
2406 IN PSID StartSid OPTIONAL
,
2407 IN BOOLEAN RestartScan
2412 NtQueryMultipleValueKey(
2413 IN HANDLE KeyHandle
,
2414 IN OUT PKEY_VALUE_ENTRY ValueList
,
2415 IN ULONG NumberOfValues
,
2417 IN OUT PULONG Length
,
2418 OUT PULONG ReturnLength
2423 ZwQueryMultipleValueKey(
2424 IN HANDLE KeyHandle
,
2425 IN OUT PKEY_VALUE_ENTRY ValueList
,
2426 IN ULONG NumberOfValues
,
2428 IN OUT PULONG Length
,
2429 OUT PULONG ReturnLength
2435 IN HANDLE MutantHandle
,
2436 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2437 OUT PVOID MutantInformation
,
2439 OUT PULONG ResultLength
2445 IN HANDLE MutantHandle
,
2446 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2447 OUT PVOID MutantInformation
,
2449 OUT PULONG ResultLength
2455 IN HANDLE ObjectHandle
,
2456 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2457 OUT PVOID ObjectInformation
,
2459 OUT PULONG ResultLength OPTIONAL
2465 IN HANDLE ObjectHandle
,
2466 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2467 OUT PVOID ObjectInformation
,
2469 OUT PULONG ResultLength OPTIONAL
2474 NtQueryPerformanceCounter(
2475 IN PLARGE_INTEGER Counter
,
2476 IN PLARGE_INTEGER Frequency
2481 ZwQueryPerformanceCounter(
2482 IN PLARGE_INTEGER Counter
,
2483 IN PLARGE_INTEGER Frequency
2489 IN HANDLE SectionHandle
,
2490 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2491 OUT PVOID SectionInformation
,
2493 OUT PULONG ResultLength
2499 IN HANDLE SectionHandle
,
2500 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2501 OUT PVOID SectionInformation
,
2503 OUT PULONG ResultLength
2508 NtQuerySecurityObject(
2510 IN SECURITY_INFORMATION SecurityInformation
,
2511 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2513 OUT PULONG ResultLength
2518 ZwQuerySecurityObject(
2520 IN SECURITY_INFORMATION SecurityInformation
,
2521 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2523 OUT PULONG ResultLength
2529 IN HANDLE SemaphoreHandle
,
2530 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2531 OUT PVOID SemaphoreInformation
,
2533 OUT PULONG ReturnLength
2539 IN HANDLE SemaphoreHandle
,
2540 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2541 OUT PVOID SemaphoreInformation
,
2543 OUT PULONG ReturnLength
2548 NtQuerySymbolicLinkObject(
2549 IN HANDLE SymLinkObjHandle
,
2550 OUT PUNICODE_STRING LinkTarget
,
2551 OUT PULONG DataWritten OPTIONAL
2556 ZwQuerySymbolicLinkObject(
2557 IN HANDLE SymLinkObjHandle
,
2558 OUT PUNICODE_STRING LinkName
,
2559 OUT PULONG DataWritten OPTIONAL
2564 NtQuerySystemEnvironmentValue(
2565 IN PUNICODE_STRING Name
,
2573 ZwQuerySystemEnvironmentValue(
2574 IN PUNICODE_STRING Name
,
2582 NtQuerySystemInformation(
2583 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2584 OUT PVOID SystemInformation
,
2586 OUT PULONG ResultLength
2591 ZwQuerySystemInformation(
2592 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2593 OUT PVOID SystemInformation
,
2595 OUT PULONG ResultLength
2601 OUT PLARGE_INTEGER CurrentTime
2607 OUT PLARGE_INTEGER CurrentTime
2613 IN HANDLE TimerHandle
,
2614 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2615 OUT PVOID TimerInformation
,
2617 OUT PULONG ResultLength
2623 IN HANDLE TimerHandle
,
2624 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2625 OUT PVOID TimerInformation
,
2627 OUT PULONG ResultLength
2632 NtQueryTimerResolution(
2633 OUT PULONG MinimumResolution
,
2634 OUT PULONG MaximumResolution
,
2635 OUT PULONG ActualResolution
2640 ZwQueryTimerResolution(
2641 OUT PULONG MinimumResolution
,
2642 OUT PULONG MaximumResolution
,
2643 OUT PULONG ActualResolution
2649 IN HANDLE KeyHandle
,
2650 IN PUNICODE_STRING ValueName
,
2651 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2652 OUT PVOID KeyValueInformation
,
2654 OUT PULONG ResultLength
2660 IN HANDLE KeyHandle
,
2661 IN PUNICODE_STRING ValueName
,
2662 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2663 OUT PVOID KeyValueInformation
,
2665 OUT PULONG ResultLength
2670 NtQueryVirtualMemory(
2671 IN HANDLE ProcessHandle
,
2673 IN IN CINT VirtualMemoryInformationClass
,
2674 OUT PVOID VirtualMemoryInformation
,
2676 OUT PULONG ResultLength
2681 ZwQueryVirtualMemory(
2682 IN HANDLE ProcessHandle
,
2684 IN IN CINT VirtualMemoryInformationClass
,
2685 OUT PVOID VirtualMemoryInformation
,
2687 OUT PULONG ResultLength
2692 NtQueryVolumeInformationFile(
2693 IN HANDLE FileHandle
,
2694 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2695 OUT PVOID FsInformation
,
2697 IN FS_INFORMATION_CLASS FsInformationClass
2702 ZwQueryVolumeInformationFile(
2703 IN HANDLE FileHandle
,
2704 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2705 OUT PVOID FsInformation
,
2707 IN FS_INFORMATION_CLASS FsInformationClass
2713 HANDLE ThreadHandle
,
2714 PKNORMAL_ROUTINE ApcRoutine
,
2715 PVOID NormalContext
,
2716 PVOID SystemArgument1
,
2717 PVOID SystemArgument2
2723 HANDLE ThreadHandle
,
2724 PKNORMAL_ROUTINE ApcRoutine
,
2725 PVOID NormalContext
,
2726 PVOID SystemArgument1
,
2727 PVOID SystemArgument2
2733 IN PEXCEPTION_RECORD ExceptionRecord
,
2734 IN PCONTEXT Context
,
2735 IN BOOLEAN SearchFrames
2741 IN PEXCEPTION_RECORD ExceptionRecord
,
2742 IN PCONTEXT Context
,
2743 IN BOOLEAN SearchFrames
2749 IN NTSTATUS ErrorStatus
,
2750 IN ULONG NumberOfParameters
,
2751 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2752 IN PVOID
*Parameters
,
2753 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2754 OUT PHARDERROR_RESPONSE Response
2760 IN NTSTATUS ErrorStatus
,
2761 IN ULONG NumberOfParameters
,
2762 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2763 IN PVOID
*Parameters
,
2764 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2765 OUT PHARDERROR_RESPONSE Response
2771 IN HANDLE FileHandle
,
2772 IN HANDLE Event OPTIONAL
,
2773 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2774 IN PVOID UserApcContext OPTIONAL
,
2775 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2777 IN ULONG BufferLength
,
2778 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2779 IN PULONG Key OPTIONAL
2785 IN HANDLE FileHandle
,
2786 IN HANDLE Event OPTIONAL
,
2787 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2788 IN PVOID UserApcContext OPTIONAL
,
2789 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2791 IN ULONG BufferLength
,
2792 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2793 IN PULONG Key OPTIONAL
2799 IN HANDLE FileHandle
,
2800 IN HANDLE Event OPTIONAL
,
2801 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2802 IN PVOID UserApcContext OPTIONAL
,
2803 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2804 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2805 IN ULONG BufferLength
,
2806 IN PLARGE_INTEGER ByteOffset
,
2807 IN PULONG Key OPTIONAL
2813 IN HANDLE FileHandle
,
2814 IN HANDLE Event OPTIONAL
,
2815 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2816 IN PVOID UserApcContext OPTIONAL
,
2817 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2818 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2819 IN ULONG BufferLength
,
2820 IN PLARGE_INTEGER ByteOffset
,
2821 IN PULONG Key OPTIONAL
2828 PPORT_MESSAGE Message
,
2839 PPORT_MESSAGE Message
,
2848 NtReadVirtualMemory(
2849 IN HANDLE ProcessHandle
,
2850 IN PVOID BaseAddress
,
2852 IN ULONG NumberOfBytesToRead
,
2853 OUT PULONG NumberOfBytesRead
2857 ZwReadVirtualMemory(
2858 IN HANDLE ProcessHandle
,
2859 IN PVOID BaseAddress
,
2861 IN ULONG NumberOfBytesToRead
,
2862 OUT PULONG NumberOfBytesRead
2867 NtRegisterThreadTerminatePort(
2868 HANDLE TerminationPort
2873 ZwRegisterThreadTerminatePort(
2874 HANDLE TerminationPort
2880 IN HANDLE MutantHandle
,
2881 IN PLONG ReleaseCount OPTIONAL
2887 IN HANDLE MutantHandle
,
2888 IN PLONG ReleaseCount OPTIONAL
2894 IN HANDLE SemaphoreHandle
,
2895 IN LONG ReleaseCount
,
2896 OUT PLONG PreviousCount
2902 IN HANDLE SemaphoreHandle
,
2903 IN LONG ReleaseCount
,
2904 OUT PLONG PreviousCount
2909 NtRemoveIoCompletion(
2910 IN HANDLE IoCompletionHandle
,
2911 OUT PVOID
*CompletionKey
,
2912 OUT PVOID
*CompletionContext
,
2913 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2914 IN PLARGE_INTEGER Timeout OPTIONAL
2919 ZwRemoveIoCompletion(
2920 IN HANDLE IoCompletionHandle
,
2921 OUT PVOID
*CompletionKey
,
2922 OUT PVOID
*CompletionContext
,
2923 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2924 IN PLARGE_INTEGER Timeout OPTIONAL
2930 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2932 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2938 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2940 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2947 PPORT_MESSAGE LpcReply
2954 PPORT_MESSAGE LpcReply
2959 NtReplyWaitReceivePort(
2962 PPORT_MESSAGE MessageReply
,
2963 PPORT_MESSAGE MessageRequest
2968 ZwReplyWaitReceivePort(
2971 PPORT_MESSAGE MessageReply
,
2972 PPORT_MESSAGE MessageRequest
2977 NtReplyWaitReplyPort(
2979 PPORT_MESSAGE ReplyMessage
2984 ZwReplyWaitReplyPort(
2986 PPORT_MESSAGE ReplyMessage
2993 PPORT_MESSAGE LpcMessage
);
2999 PPORT_MESSAGE LpcMessage
3004 NtRequestWaitReplyPort(
3006 PPORT_MESSAGE LpcReply
,
3007 PPORT_MESSAGE LpcRequest
3012 ZwRequestWaitReplyPort(
3014 PPORT_MESSAGE LpcReply
,
3015 PPORT_MESSAGE LpcRequest
3022 PLONG NumberOfWaitingThreads OPTIONAL
3029 PLONG NumberOfWaitingThreads OPTIONAL
3051 IN HANDLE ThreadHandle
,
3052 OUT PULONG SuspendCount
3058 IN HANDLE ThreadHandle
,
3059 OUT PULONG SuspendCount
3065 IN HANDLE ProcessHandle
3071 IN HANDLE ProcessHandle
3077 IN HANDLE KeyHandle
,
3078 IN HANDLE FileHandle
3083 IN HANDLE KeyHandle
,
3084 IN HANDLE FileHandle
3090 IN HANDLE KeyHandle
,
3091 IN HANDLE FileHandle
,
3098 IN HANDLE KeyHandle
,
3099 IN HANDLE FileHandle
,
3105 NtSetBootEntryOrder(
3112 ZwSetBootEntryOrder(
3134 IN HANDLE ThreadHandle
,
3140 IN HANDLE ThreadHandle
,
3147 IN BOOLEAN UserProfile
,
3148 IN LCID DefaultLocaleId
3154 IN BOOLEAN UserProfile
,
3155 IN LCID DefaultLocaleId
3160 NtSetDefaultUILanguage(
3166 ZwSetDefaultUILanguage(
3171 NtSetDefaultHardErrorPort(
3172 IN HANDLE PortHandle
3176 ZwSetDefaultHardErrorPort(
3177 IN HANDLE PortHandle
3183 IN HANDLE FileHandle
,
3184 IN PIO_STATUS_BLOCK IoStatusBlock
,
3192 IN HANDLE FileHandle
,
3193 IN PIO_STATUS_BLOCK IoStatusBlock
,
3201 IN HANDLE EventHandle
,
3202 OUT PLONG PreviousState OPTIONAL
3208 IN HANDLE EventHandle
,
3209 OUT PLONG PreviousState OPTIONAL
3215 IN HANDLE EventPairHandle
3221 IN HANDLE EventPairHandle
3225 NtSetHighWaitLowEventPair(
3226 IN HANDLE EventPairHandle
3230 ZwSetHighWaitLowEventPair(
3231 IN HANDLE EventPairHandle
3236 NtSetInformationFile(
3237 IN HANDLE FileHandle
,
3238 IN PIO_STATUS_BLOCK IoStatusBlock
,
3239 IN PVOID FileInformation
,
3241 IN FILE_INFORMATION_CLASS FileInformationClass
3246 ZwSetInformationFile(
3247 IN HANDLE FileHandle
,
3248 IN PIO_STATUS_BLOCK IoStatusBlock
,
3249 IN PVOID FileInformation
,
3251 IN FILE_INFORMATION_CLASS FileInformationClass
3256 NtSetInformationJobObject(
3258 JOBOBJECTINFOCLASS JobInformationClass
,
3259 PVOID JobInformation
,
3260 ULONG JobInformationLength
3265 ZwSetInformationJobObject(
3267 JOBOBJECTINFOCLASS JobInformationClass
,
3268 PVOID JobInformation
,
3269 ULONG JobInformationLength
3274 NtSetInformationKey(
3275 IN HANDLE KeyHandle
,
3276 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3277 IN PVOID KeyInformation
,
3278 IN ULONG KeyInformationLength
3283 ZwSetInformationKey(
3284 IN HANDLE KeyHandle
,
3285 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3286 IN PVOID KeyInformation
,
3287 IN ULONG KeyInformationLength
3292 NtSetInformationObject(
3293 IN HANDLE ObjectHandle
,
3294 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3295 IN PVOID ObjectInformation
,
3301 ZwSetInformationObject(
3302 IN HANDLE ObjectHandle
,
3303 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3304 IN PVOID ObjectInformation
,
3310 NtSetInformationProcess(
3311 IN HANDLE ProcessHandle
,
3312 IN PROCESSINFOCLASS ProcessInformationClass
,
3313 IN PVOID ProcessInformation
,
3314 IN ULONG ProcessInformationLength
3319 NtSetInformationThread(
3320 IN HANDLE ThreadHandle
,
3321 IN THREADINFOCLASS ThreadInformationClass
,
3322 IN PVOID ThreadInformation
,
3323 IN ULONG ThreadInformationLength
3327 ZwSetInformationThread(
3328 IN HANDLE ThreadHandle
,
3329 IN THREADINFOCLASS ThreadInformationClass
,
3330 IN PVOID ThreadInformation
,
3331 IN ULONG ThreadInformationLength
3336 NtSetInformationToken(
3337 IN HANDLE TokenHandle
,
3338 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3339 OUT PVOID TokenInformation
,
3340 IN ULONG TokenInformationLength
3345 ZwSetInformationToken(
3346 IN HANDLE TokenHandle
,
3347 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3348 OUT PVOID TokenInformation
,
3349 IN ULONG TokenInformationLength
3355 IN HANDLE IoCompletionPortHandle
,
3356 IN PVOID CompletionKey
,
3357 IN PVOID CompletionContext
,
3358 IN NTSTATUS CompletionStatus
,
3359 IN ULONG CompletionInformation
3365 IN HANDLE IoCompletionPortHandle
,
3366 IN PVOID CompletionKey
,
3367 IN PVOID CompletionContext
,
3368 IN NTSTATUS CompletionStatus
,
3369 IN ULONG CompletionInformation
3374 NtSetIntervalProfile(
3376 KPROFILE_SOURCE ClockSource
3381 ZwSetIntervalProfile(
3383 KPROFILE_SOURCE ClockSource
3390 LDT_ENTRY LdtEntry1
,
3409 NtSetLowWaitHighEventPair(
3415 ZwSetLowWaitHighEventPair(
3421 NtSetQuotaInformationFile(
3423 PIO_STATUS_BLOCK IoStatusBlock
,
3424 PFILE_QUOTA_INFORMATION Buffer
,
3430 ZwSetQuotaInformationFile(
3432 PIO_STATUS_BLOCK IoStatusBlock
,
3433 PFILE_QUOTA_INFORMATION Buffer
,
3439 NtSetSecurityObject(
3441 IN SECURITY_INFORMATION SecurityInformation
,
3442 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3447 ZwSetSecurityObject(
3449 IN SECURITY_INFORMATION SecurityInformation
,
3450 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3455 NtSetSystemEnvironmentValue(
3456 IN PUNICODE_STRING VariableName
,
3457 IN PUNICODE_STRING Value
3461 ZwSetSystemEnvironmentValue(
3462 IN PUNICODE_STRING VariableName
,
3463 IN PUNICODE_STRING Value
3468 NtSetSystemInformation(
3469 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3470 IN PVOID SystemInformation
,
3471 IN ULONG SystemInformationLength
3476 ZwSetSystemInformation(
3477 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3478 IN PVOID SystemInformation
,
3479 IN ULONG SystemInformationLength
3484 NtSetSystemPowerState(
3485 IN POWER_ACTION SystemAction
,
3486 IN SYSTEM_POWER_STATE MinSystemState
,
3493 IN PLARGE_INTEGER SystemTime
,
3494 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3500 IN PLARGE_INTEGER SystemTime
,
3501 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3507 IN HANDLE TimerHandle
,
3508 IN PLARGE_INTEGER DueTime
,
3509 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3510 IN PVOID TimerContext
,
3511 IN BOOLEAN WakeTimer
,
3512 IN LONG Period OPTIONAL
,
3513 OUT PBOOLEAN PreviousState OPTIONAL
3518 NtSetTimerResolution(
3519 IN ULONG RequestedResolution
,
3520 IN BOOLEAN SetOrUnset
,
3521 OUT PULONG ActualResolution
3526 ZwSetTimerResolution(
3527 IN ULONG RequestedResolution
,
3528 IN BOOLEAN SetOrUnset
,
3529 OUT PULONG ActualResolution
3547 IN HANDLE KeyHandle
,
3548 IN PUNICODE_STRING ValueName
,
3549 IN ULONG TitleIndex OPTIONAL
,
3558 IN HANDLE KeyHandle
,
3559 IN PUNICODE_STRING ValueName
,
3560 IN ULONG TitleIndex OPTIONAL
,
3568 NtSetVolumeInformationFile(
3569 IN HANDLE FileHandle
,
3570 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3571 IN PVOID FsInformation
,
3573 IN FS_INFORMATION_CLASS FsInformationClass
3578 ZwSetVolumeInformationFile(
3579 IN HANDLE FileHandle
,
3580 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3581 IN PVOID FsInformation
,
3583 IN FS_INFORMATION_CLASS FsInformationClass
3589 IN SHUTDOWN_ACTION Action
3595 IN SHUTDOWN_ACTION Action
3600 NtSignalAndWaitForSingleObject(
3601 IN HANDLE SignalObject
,
3602 IN HANDLE WaitObject
,
3603 IN BOOLEAN Alertable
,
3604 IN PLARGE_INTEGER Time
3609 ZwSignalAndWaitForSingleObject(
3610 IN HANDLE SignalObject
,
3611 IN HANDLE WaitObject
,
3612 IN BOOLEAN Alertable
,
3613 IN PLARGE_INTEGER Time
3619 HANDLE ProfileHandle
3625 HANDLE ProfileHandle
3631 HANDLE ProfileHandle
3637 HANDLE ProfileHandle
3643 IN HANDLE ProcessHandle
3649 IN HANDLE ProcessHandle
3655 IN HANDLE ThreadHandle
,
3656 IN PULONG PreviousSuspendCount
3662 IN HANDLE ThreadHandle
,
3663 IN PULONG PreviousSuspendCount
3668 NtSystemDebugControl(
3669 DEBUG_CONTROL_CODE ControlCode
,
3671 ULONG InputBufferLength
,
3673 ULONG OutputBufferLength
,
3680 IN HANDLE ProcessHandle
,
3681 IN NTSTATUS ExitStatus
3687 IN HANDLE ProcessHandle
,
3688 IN NTSTATUS ExitStatus
3694 IN HANDLE ThreadHandle
,
3695 IN NTSTATUS ExitStatus
3701 IN HANDLE ThreadHandle
,
3702 IN NTSTATUS ExitStatus
3707 NtTerminateJobObject(
3714 ZwTerminateJobObject(
3734 IN ULONG TraceHandle
,
3736 IN ULONG TraceHeaderLength
,
3737 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3743 IN ULONG TraceHandle
,
3745 IN ULONG TraceHeaderLength
,
3746 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3751 NtTranslateFilePath(
3759 ZwTranslateFilePath(
3768 IN PUNICODE_STRING DriverServiceName
3774 IN PUNICODE_STRING DriverServiceName
3780 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3786 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3792 IN HANDLE FileHandle
,
3793 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3794 IN PLARGE_INTEGER ByteOffset
,
3795 IN PLARGE_INTEGER Lenght
,
3796 OUT PULONG Key OPTIONAL
3802 IN HANDLE FileHandle
,
3803 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3804 IN PLARGE_INTEGER ByteOffset
,
3805 IN PLARGE_INTEGER Lenght
,
3806 OUT PULONG Key OPTIONAL
3811 NtUnlockVirtualMemory(
3812 IN HANDLE ProcessHandle
,
3813 IN PVOID BaseAddress
,
3814 IN ULONG NumberOfBytesToUnlock
,
3815 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3820 ZwUnlockVirtualMemory(
3821 IN HANDLE ProcessHandle
,
3822 IN PVOID BaseAddress
,
3823 IN ULONG NumberOfBytesToUnlock
,
3824 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3829 NtUnmapViewOfSection(
3830 IN HANDLE ProcessHandle
,
3831 IN PVOID BaseAddress
3836 ZwUnmapViewOfSection(
3837 IN HANDLE ProcessHandle
,
3838 IN PVOID BaseAddress
3851 IN ULONG RoutineIndex
,
3853 IN ULONG ArgumentLength
,
3854 OUT PVOID
* Result OPTIONAL
,
3855 OUT PULONG ResultLength OPTIONAL
3860 NtWaitForMultipleObjects(
3863 IN WAIT_TYPE WaitType
,
3864 IN BOOLEAN Alertable
,
3865 IN PLARGE_INTEGER Time
3870 ZwWaitForMultipleObjects(
3873 IN WAIT_TYPE WaitType
,
3874 IN BOOLEAN Alertable
,
3875 IN PLARGE_INTEGER Time
3880 NtWaitForSingleObject(
3882 IN BOOLEAN Alertable
,
3883 IN PLARGE_INTEGER Time
3888 ZwWaitForSingleObject(
3890 IN BOOLEAN Alertable
,
3891 IN PLARGE_INTEGER Time
3896 NtWaitHighEventPair(
3897 IN HANDLE EventPairHandle
3902 ZwWaitHighEventPair(
3903 IN HANDLE EventPairHandle
3909 IN HANDLE EventPairHandle
3915 IN HANDLE EventPairHandle
3921 IN HANDLE FileHandle
,
3922 IN HANDLE Event OPTIONAL
,
3923 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3924 IN PVOID ApcContext OPTIONAL
,
3925 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3928 IN PLARGE_INTEGER ByteOffset
,
3929 IN PULONG Key OPTIONAL
3935 IN HANDLE FileHandle
,
3936 IN HANDLE Event OPTIONAL
,
3937 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3938 IN PVOID ApcContext OPTIONAL
,
3939 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3942 IN PLARGE_INTEGER ByteOffset
,
3943 IN PULONG Key OPTIONAL
3949 IN HANDLE FileHandle
,
3950 IN HANDLE Event OPTIONAL
,
3951 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3952 IN PVOID ApcContext OPTIONAL
,
3953 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3954 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3955 IN ULONG BufferLength
,
3956 IN PLARGE_INTEGER ByteOffset
,
3957 IN PULONG Key OPTIONAL
3963 IN HANDLE FileHandle
,
3964 IN HANDLE Event OPTIONAL
,
3965 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3966 IN PVOID ApcContext OPTIONAL
,
3967 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3968 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3969 IN ULONG BufferLength
,
3970 IN PLARGE_INTEGER ByteOffset
,
3971 IN PULONG Key OPTIONAL
3978 PPORT_MESSAGE Message
,
3989 PPORT_MESSAGE Message
,
3998 NtWriteVirtualMemory(
3999 IN HANDLE ProcessHandle
,
4000 IN PVOID BaseAddress
,
4002 IN ULONG NumberOfBytesToWrite
,
4003 OUT PULONG NumberOfBytesWritten
4008 ZwWriteVirtualMemory(
4009 IN HANDLE ProcessHandle
,
4010 IN PVOID BaseAddress
,
4012 IN ULONG NumberOfBytesToWrite
,
4013 OUT PULONG NumberOfBytesWritten
4029 static __inline
struct _PEB
* NtCurrentPeb (void)
4033 #if defined(__GNUC__)
4035 __asm__ __volatile__
4037 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4038 : "=r" (pPeb
) /* can't have two memory operands */
4042 #elif defined(_MSC_VER)
4044 __asm mov eax
, fs
:0x30;
4048 #error Unknown compiler for inline assembler