2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
16 /* FUNCTION TYPES ************************************************************/
18 /* PROTOTYPES ****************************************************************/
24 PVOID PortContext OPTIONAL
,
25 PPORT_MESSAGE ConnectionRequest
,
26 BOOLEAN AcceptConnection
,
27 PPORT_VIEW ServerView OPTIONAL
,
28 PREMOTE_PORT_VIEW ClientView OPTIONAL
36 PVOID PortContext OPTIONAL
,
37 PPORT_MESSAGE ConnectionRequest
,
38 BOOLEAN AcceptConnection
,
39 PPORT_VIEW ServerView OPTIONAL
,
40 PREMOTE_PORT_VIEW ClientView OPTIONAL
46 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
47 IN HANDLE ClientToken
,
48 IN ACCESS_MASK DesiredAcces
,
49 IN PGENERIC_MAPPING GenericMapping
,
50 OUT PPRIVILEGE_SET PrivilegeSet
,
51 OUT PULONG ReturnLength
,
52 OUT PACCESS_MASK GrantedAccess
,
53 OUT PNTSTATUS AccessStatus
60 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
61 IN HANDLE ClientToken
,
62 IN ACCESS_MASK DesiredAcces
,
63 IN PGENERIC_MAPPING GenericMapping
,
64 OUT PPRIVILEGE_SET PrivilegeSet
,
65 OUT PULONG ReturnLength
,
66 OUT PACCESS_MASK GrantedAccess
,
67 OUT PNTSTATUS AccessStatus
73 NtAccessCheckAndAuditAlarm(
74 IN PUNICODE_STRING SubsystemName
,
76 IN PUNICODE_STRING ObjectTypeName
,
77 IN PUNICODE_STRING ObjectName
,
78 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
79 IN ACCESS_MASK DesiredAccess
,
80 IN PGENERIC_MAPPING GenericMapping
,
81 IN BOOLEAN ObjectCreation
,
82 OUT PACCESS_MASK GrantedAccess
,
83 OUT PNTSTATUS AccessStatus
,
84 OUT PBOOLEAN GenerateOnClose
91 IN ULONG AtomNameLength
,
100 IN ULONG AtomNameLength
,
101 IN OUT PRTL_ATOM Atom
107 IN PUNICODE_STRING EntryName
,
108 IN PUNICODE_STRING EntryValue
115 IN PUNICODE_STRING EntryName
,
116 IN PUNICODE_STRING EntryValue
123 IN HANDLE TokenHandle
,
124 IN BOOLEAN ResetToDefault
,
125 IN PTOKEN_GROUPS NewState
,
126 IN ULONG BufferLength
,
127 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
128 OUT PULONG ReturnLength
135 IN HANDLE TokenHandle
,
136 IN BOOLEAN ResetToDefault
,
137 IN PTOKEN_GROUPS NewState
,
138 IN ULONG BufferLength
,
139 OUT PTOKEN_GROUPS PreviousState
,
140 OUT PULONG ReturnLength
146 NtAdjustPrivilegesToken(
147 IN HANDLE TokenHandle
,
148 IN BOOLEAN DisableAllPrivileges
,
149 IN PTOKEN_PRIVILEGES NewState
,
150 IN ULONG BufferLength
,
151 OUT PTOKEN_PRIVILEGES PreviousState
,
152 OUT PULONG ReturnLength
158 ZwAdjustPrivilegesToken(
159 IN HANDLE TokenHandle
,
160 IN BOOLEAN DisableAllPrivileges
,
161 IN PTOKEN_PRIVILEGES NewState
,
162 IN ULONG BufferLength
,
163 OUT PTOKEN_PRIVILEGES PreviousState
,
164 OUT PULONG ReturnLength
170 IN HANDLE ThreadHandle
,
171 OUT PULONG SuspendCount
178 IN HANDLE ThreadHandle
,
179 OUT PULONG SuspendCount
185 IN HANDLE ThreadHandle
192 IN HANDLE ThreadHandle
197 NtAllocateLocallyUniqueId(
198 OUT LUID
*LocallyUniqueId
204 ZwAllocateLocallyUniqueId(
211 PULARGE_INTEGER Time
,
221 PULARGE_INTEGER Time
,
230 NtAllocateVirtualMemory(
231 IN HANDLE ProcessHandle
,
232 IN OUT PVOID
*BaseAddress
,
234 IN OUT PULONG RegionSize
,
235 IN ULONG AllocationType
,
242 ZwAllocateVirtualMemory(
243 IN HANDLE ProcessHandle
,
244 IN OUT PVOID
*BaseAddress
,
246 IN OUT PULONG RegionSize
,
247 IN ULONG AllocationType
,
253 NtAssignProcessToJobObject(
261 ZwAssignProcessToJobObject(
286 IN HANDLE FileHandle
,
287 OUT PIO_STATUS_BLOCK IoStatusBlock
294 IN HANDLE FileHandle
,
295 OUT PIO_STATUS_BLOCK IoStatusBlock
301 IN HANDLE TimerHandle
,
302 OUT PBOOLEAN CurrentState OPTIONAL
308 IN HANDLE EventHandle
315 IN HANDLE EventHandle
322 ACCESS_MASK DesiredAccess
,
323 POBJECT_ATTRIBUTES ObjectAttributes
331 ACCESS_MASK DesiredAccess
,
332 POBJECT_ATTRIBUTES ObjectAttributes
352 NtCloseObjectAuditAlarm(
353 IN PUNICODE_STRING SubsystemName
,
355 IN BOOLEAN GenerateOnClose
361 ZwCloseObjectAuditAlarm(
362 IN PUNICODE_STRING SubsystemName
,
364 IN BOOLEAN GenerateOnClose
369 NtCompleteConnectPort(
376 ZwCompleteConnectPort(
385 PUNICODE_STRING PortName
,
386 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
387 PPORT_VIEW ClientView OPTIONAL
,
388 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
389 PULONG MaxMessageLength OPTIONAL
,
390 PVOID ConnectionInformation OPTIONAL
,
391 PULONG ConnectionInformationLength OPTIONAL
399 PUNICODE_STRING PortName
,
400 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
401 PPORT_VIEW ClientView OPTIONAL
,
402 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
403 PULONG MaxMessageLength OPTIONAL
,
404 PVOID ConnectionInformation OPTIONAL
,
405 PULONG ConnectionInformationLength OPTIONAL
425 NtCreateDirectoryObject(
426 OUT PHANDLE DirectoryHandle
,
427 IN ACCESS_MASK DesiredAccess
,
428 IN POBJECT_ATTRIBUTES ObjectAttributes
434 ZwCreateDirectoryObject(
435 OUT PHANDLE DirectoryHandle
,
436 IN ACCESS_MASK DesiredAccess
,
437 IN POBJECT_ATTRIBUTES ObjectAttributes
443 OUT PHANDLE EventHandle
,
444 IN ACCESS_MASK DesiredAccess
,
445 IN POBJECT_ATTRIBUTES ObjectAttributes
,
446 IN EVENT_TYPE EventType
,
447 IN BOOLEAN InitialState
454 OUT PHANDLE EventHandle
,
455 IN ACCESS_MASK DesiredAccess
,
456 IN POBJECT_ATTRIBUTES ObjectAttributes
,
457 IN EVENT_TYPE EventType
,
458 IN BOOLEAN InitialState
464 OUT PHANDLE EventPairHandle
,
465 IN ACCESS_MASK DesiredAccess
,
466 IN POBJECT_ATTRIBUTES ObjectAttributes
473 OUT PHANDLE EventPairHandle
,
474 IN ACCESS_MASK DesiredAccess
,
475 IN POBJECT_ATTRIBUTES ObjectAttributes
482 OUT PHANDLE FileHandle
,
483 IN ACCESS_MASK DesiredAccess
,
484 IN POBJECT_ATTRIBUTES ObjectAttributes
,
485 OUT PIO_STATUS_BLOCK IoStatusBlock
,
486 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
487 IN ULONG FileAttributes
,
488 IN ULONG ShareAccess
,
489 IN ULONG CreateDisposition
,
490 IN ULONG CreateOptions
,
491 IN PVOID EaBuffer OPTIONAL
,
499 OUT PHANDLE FileHandle
,
500 IN ACCESS_MASK DesiredAccess
,
501 IN POBJECT_ATTRIBUTES ObjectAttributes
,
502 OUT PIO_STATUS_BLOCK IoStatusBlock
,
503 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
504 IN ULONG FileAttributes
,
505 IN ULONG ShareAccess
,
506 IN ULONG CreateDisposition
,
507 IN ULONG CreateOptions
,
508 IN PVOID EaBuffer OPTIONAL
,
514 NtCreateIoCompletion(
515 OUT PHANDLE IoCompletionHandle
,
516 IN ACCESS_MASK DesiredAccess
,
517 IN POBJECT_ATTRIBUTES ObjectAttributes
,
518 IN ULONG NumberOfConcurrentThreads
524 ZwCreateIoCompletion(
525 OUT PHANDLE IoCompletionHandle
,
526 IN ACCESS_MASK DesiredAccess
,
527 IN POBJECT_ATTRIBUTES ObjectAttributes
,
528 IN ULONG NumberOfConcurrentThreads
534 OUT PHANDLE KeyHandle
,
535 IN ACCESS_MASK DesiredAccess
,
536 IN POBJECT_ATTRIBUTES ObjectAttributes
,
538 IN PUNICODE_STRING Class OPTIONAL
,
539 IN ULONG CreateOptions
,
540 IN PULONG Disposition OPTIONAL
547 OUT PHANDLE KeyHandle
,
548 IN ACCESS_MASK DesiredAccess
,
549 IN POBJECT_ATTRIBUTES ObjectAttributes
,
551 IN PUNICODE_STRING Class OPTIONAL
,
552 IN ULONG CreateOptions
,
553 IN PULONG Disposition OPTIONAL
558 NtCreateMailslotFile(
559 OUT PHANDLE MailSlotFileHandle
,
560 IN ACCESS_MASK DesiredAccess
,
561 IN POBJECT_ATTRIBUTES ObjectAttributes
,
562 OUT PIO_STATUS_BLOCK IoStatusBlock
,
563 IN ULONG FileAttributes
,
564 IN ULONG ShareAccess
,
565 IN ULONG MaxMessageSize
,
566 IN PLARGE_INTEGER TimeOut
572 ZwCreateMailslotFile(
573 OUT PHANDLE MailSlotFileHandle
,
574 IN ACCESS_MASK DesiredAccess
,
575 IN POBJECT_ATTRIBUTES ObjectAttributes
,
576 OUT PIO_STATUS_BLOCK IoStatusBlock
,
577 IN ULONG FileAttributes
,
578 IN ULONG ShareAccess
,
579 IN ULONG MaxMessageSize
,
580 IN PLARGE_INTEGER TimeOut
586 OUT PHANDLE MutantHandle
,
587 IN ACCESS_MASK DesiredAccess
,
588 IN POBJECT_ATTRIBUTES ObjectAttributes
,
589 IN BOOLEAN InitialOwner
596 OUT PHANDLE MutantHandle
,
597 IN ACCESS_MASK DesiredAccess
,
598 IN POBJECT_ATTRIBUTES ObjectAttributes
,
599 IN BOOLEAN InitialOwner
604 NtCreateNamedPipeFile(
605 OUT PHANDLE NamedPipeFileHandle
,
606 IN ACCESS_MASK DesiredAccess
,
607 IN POBJECT_ATTRIBUTES ObjectAttributes
,
608 OUT PIO_STATUS_BLOCK IoStatusBlock
,
609 IN ULONG ShareAccess
,
610 IN ULONG CreateDisposition
,
611 IN ULONG CreateOptions
,
612 IN ULONG WriteModeMessage
,
613 IN ULONG ReadModeMessage
,
614 IN ULONG NonBlocking
,
615 IN ULONG MaxInstances
,
616 IN ULONG InBufferSize
,
617 IN ULONG OutBufferSize
,
618 IN PLARGE_INTEGER DefaultTimeOut
624 ZwCreateNamedPipeFile(
625 OUT PHANDLE NamedPipeFileHandle
,
626 IN ACCESS_MASK DesiredAccess
,
627 IN POBJECT_ATTRIBUTES ObjectAttributes
,
628 OUT PIO_STATUS_BLOCK IoStatusBlock
,
629 IN ULONG ShareAccess
,
630 IN ULONG CreateDisposition
,
631 IN ULONG CreateOptions
,
632 IN ULONG WriteModeMessage
,
633 IN ULONG ReadModeMessage
,
634 IN ULONG NonBlocking
,
635 IN ULONG MaxInstances
,
636 IN ULONG InBufferSize
,
637 IN ULONG OutBufferSize
,
638 IN PLARGE_INTEGER DefaultTimeOut
644 IN PUNICODE_STRING FileName
,
645 IN PLARGE_INTEGER InitialSize
,
646 IN PLARGE_INTEGER MaxiumSize
,
654 IN PUNICODE_STRING FileName
,
655 IN PLARGE_INTEGER InitialSize
,
656 IN PLARGE_INTEGER MaxiumSize
,
664 POBJECT_ATTRIBUTES ObjectAttributes
,
665 ULONG MaxConnectionInfoLength
,
666 ULONG MaxMessageLength
,
675 POBJECT_ATTRIBUTES ObjectAttributes
,
676 ULONG MaxConnectionInfoLength
,
677 ULONG MaxMessageLength
,
684 OUT PHANDLE ProcessHandle
,
685 IN ACCESS_MASK DesiredAccess
,
686 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
687 IN HANDLE ParentProcess
,
688 IN BOOLEAN InheritObjectTable
,
689 IN HANDLE SectionHandle OPTIONAL
,
690 IN HANDLE DebugPort OPTIONAL
,
691 IN HANDLE ExceptionPort OPTIONAL
698 OUT PHANDLE ProcessHandle
,
699 IN ACCESS_MASK DesiredAccess
,
700 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
701 IN HANDLE ParentProcess
,
702 IN BOOLEAN InheritObjectTable
,
703 IN HANDLE SectionHandle OPTIONAL
,
704 IN HANDLE DebugPort OPTIONAL
,
705 IN HANDLE ExceptionPort OPTIONAL
711 OUT PHANDLE ProfileHandle
,
712 IN HANDLE ProcessHandle
,
715 IN ULONG Granularity
,
717 IN ULONG ProfilingSize
,
718 IN KPROFILE_SOURCE Source
,
719 IN KAFFINITY ProcessorMask
726 OUT PHANDLE ProfileHandle
,
727 IN POBJECT_ATTRIBUTES ObjectAttributes
,
730 IN ULONG Granularity
,
732 IN ULONG ProfilingSize
,
733 IN ULONG ClockSource
,
734 IN ULONG ProcessorMask
741 OUT PHANDLE SectionHandle
,
742 IN ACCESS_MASK DesiredAccess
,
743 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
744 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
745 IN ULONG SectionPageProtection OPTIONAL
,
746 IN ULONG AllocationAttributes
,
747 IN HANDLE FileHandle OPTIONAL
754 OUT PHANDLE SectionHandle
,
755 IN ACCESS_MASK DesiredAccess
,
756 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
757 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
758 IN ULONG SectionPageProtection OPTIONAL
,
759 IN ULONG AllocationAttributes
,
760 IN HANDLE FileHandle OPTIONAL
766 OUT PHANDLE SemaphoreHandle
,
767 IN ACCESS_MASK DesiredAccess
,
768 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
769 IN LONG InitialCount
,
777 OUT PHANDLE SemaphoreHandle
,
778 IN ACCESS_MASK DesiredAccess
,
779 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
780 IN LONG InitialCount
,
786 NtCreateSymbolicLinkObject(
787 OUT PHANDLE SymbolicLinkHandle
,
788 IN ACCESS_MASK DesiredAccess
,
789 IN POBJECT_ATTRIBUTES ObjectAttributes
,
790 IN PUNICODE_STRING Name
796 ZwCreateSymbolicLinkObject(
797 OUT PHANDLE SymbolicLinkHandle
,
798 IN ACCESS_MASK DesiredAccess
,
799 IN POBJECT_ATTRIBUTES ObjectAttributes
,
800 IN PUNICODE_STRING Name
806 OUT PHANDLE ThreadHandle
,
807 IN ACCESS_MASK DesiredAccess
,
808 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
809 IN HANDLE ProcessHandle
,
810 OUT PCLIENT_ID ClientId
,
811 IN PCONTEXT ThreadContext
,
812 IN PINITIAL_TEB UserStack
,
813 IN BOOLEAN CreateSuspended
820 OUT PHANDLE ThreadHandle
,
821 IN ACCESS_MASK DesiredAccess
,
822 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
823 IN HANDLE ProcessHandle
,
824 OUT PCLIENT_ID ClientId
,
825 IN PCONTEXT ThreadContext
,
826 IN PINITIAL_TEB UserStack
,
827 IN BOOLEAN CreateSuspended
833 OUT PHANDLE TimerHandle
,
834 IN ACCESS_MASK DesiredAccess
,
835 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
836 IN TIMER_TYPE TimerType
839 #ifdef NTOS_MODE_USER
844 OUT PHANDLE TimerHandle
,
845 IN ACCESS_MASK DesiredAccess
,
846 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
847 IN TIMER_TYPE TimerType
854 OUT PHANDLE TokenHandle
,
855 IN ACCESS_MASK DesiredAccess
,
856 IN POBJECT_ATTRIBUTES ObjectAttributes
,
857 IN TOKEN_TYPE TokenType
,
858 IN PLUID AuthenticationId
,
859 IN PLARGE_INTEGER ExpirationTime
,
860 IN PTOKEN_USER TokenUser
,
861 IN PTOKEN_GROUPS TokenGroups
,
862 IN PTOKEN_PRIVILEGES TokenPrivileges
,
863 IN PTOKEN_OWNER TokenOwner
,
864 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
865 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
866 IN PTOKEN_SOURCE TokenSource
873 OUT PHANDLE TokenHandle
,
874 IN ACCESS_MASK DesiredAccess
,
875 IN POBJECT_ATTRIBUTES ObjectAttributes
,
876 IN TOKEN_TYPE TokenType
,
877 IN PLUID AuthenticationId
,
878 IN PLARGE_INTEGER ExpirationTime
,
879 IN PTOKEN_USER TokenUser
,
880 IN PTOKEN_GROUPS TokenGroups
,
881 IN PTOKEN_PRIVILEGES TokenPrivileges
,
882 IN PTOKEN_OWNER TokenOwner
,
883 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
884 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
885 IN PTOKEN_SOURCE TokenSource
890 NtCreateWaitablePort(
892 POBJECT_ATTRIBUTES ObjectAttributes
,
893 ULONG MaxConnectInfoLength
,
895 ULONG NPMessageQueueSize OPTIONAL
901 ZwCreateWaitablePort(
903 POBJECT_ATTRIBUTES ObjectAttributes
,
904 ULONG MaxConnectInfoLength
,
906 ULONG NPMessageQueueSize OPTIONAL
912 IN BOOLEAN Alertable
,
913 IN LARGE_INTEGER
*Interval
920 IN BOOLEAN Alertable
,
921 IN LARGE_INTEGER
*Interval
940 IN PUNICODE_STRING EntryName
,
941 IN PUNICODE_STRING EntryValue
948 IN PUNICODE_STRING EntryName
,
949 IN PUNICODE_STRING EntryValue
955 IN POBJECT_ATTRIBUTES ObjectAttributes
962 IN POBJECT_ATTRIBUTES ObjectAttributes
981 NtDeleteObjectAuditAlarm(
982 IN PUNICODE_STRING SubsystemName
,
984 IN BOOLEAN GenerateOnClose
990 ZwDeleteObjectAuditAlarm(
991 IN PUNICODE_STRING SubsystemName
,
993 IN BOOLEAN GenerateOnClose
1000 IN PUNICODE_STRING ValueName
1007 IN HANDLE KeyHandle
,
1008 IN PUNICODE_STRING ValueName
1014 NtDeviceIoControlFile(
1015 IN HANDLE DeviceHandle
,
1016 IN HANDLE Event OPTIONAL
,
1017 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
1018 IN PVOID UserApcContext OPTIONAL
,
1019 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1020 IN ULONG IoControlCode
,
1021 IN PVOID InputBuffer
,
1022 IN ULONG InputBufferSize
,
1023 OUT PVOID OutputBuffer
,
1024 IN ULONG OutputBufferSize
1030 ZwDeviceIoControlFile(
1031 IN HANDLE DeviceHandle
,
1032 IN HANDLE Event OPTIONAL
,
1033 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
1034 IN PVOID UserApcContext OPTIONAL
,
1035 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1036 IN ULONG IoControlCode
,
1037 IN PVOID InputBuffer
,
1038 IN ULONG InputBufferSize
,
1039 OUT PVOID OutputBuffer
,
1040 IN ULONG OutputBufferSize
1046 IN PUNICODE_STRING DisplayString
1053 IN PUNICODE_STRING DisplayString
1059 IN HANDLE SourceProcessHandle
,
1060 IN HANDLE SourceHandle
,
1061 IN HANDLE TargetProcessHandle
,
1062 OUT PHANDLE TargetHandle
,
1063 IN ACCESS_MASK DesiredAccess
,
1064 IN ULONG HandleAttributes
,
1072 IN HANDLE SourceProcessHandle
,
1073 IN HANDLE SourceHandle
,
1074 IN HANDLE TargetProcessHandle
,
1075 OUT PHANDLE TargetHandle
,
1076 IN ACCESS_MASK DesiredAccess
,
1077 IN ULONG HandleAttributes
,
1085 IN HANDLE ExistingTokenHandle
,
1086 IN ACCESS_MASK DesiredAccess
,
1087 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1088 IN BOOLEAN EffectiveOnly
,
1089 IN TOKEN_TYPE TokenType
,
1090 OUT PHANDLE NewTokenHandle
1097 IN HANDLE ExistingTokenHandle
,
1098 IN ACCESS_MASK DesiredAccess
,
1099 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1100 IN BOOLEAN EffectiveOnly
,
1101 IN TOKEN_TYPE TokenType
,
1102 OUT PHANDLE NewTokenHandle
1107 NtEnumerateBootEntries(
1115 ZwEnumerateBootEntries(
1123 IN HANDLE KeyHandle
,
1125 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1126 OUT PVOID KeyInformation
,
1128 OUT PULONG ResultLength
1135 IN HANDLE KeyHandle
,
1137 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1138 OUT PVOID KeyInformation
,
1140 OUT PULONG ResultLength
1145 NtEnumerateValueKey(
1146 IN HANDLE KeyHandle
,
1148 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1149 OUT PVOID KeyValueInformation
,
1151 OUT PULONG ResultLength
1157 ZwEnumerateValueKey(
1158 IN HANDLE KeyHandle
,
1160 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1161 OUT PVOID KeyValueInformation
,
1163 OUT PULONG ResultLength
1169 IN HANDLE SectionHandle
,
1170 IN PLARGE_INTEGER NewMaximumSize
1177 IN HANDLE SectionHandle
,
1178 IN PLARGE_INTEGER NewMaximumSize
1185 IN ULONG AtomNameLength
,
1186 OUT PRTL_ATOM Atom OPTIONAL
1194 IN ULONG AtomNameLength
,
1195 OUT PRTL_ATOM Atom OPTIONAL
1201 IN HANDLE FileHandle
,
1202 OUT PIO_STATUS_BLOCK IoStatusBlock
1205 #ifdef NTOS_MODE_USER
1210 IN HANDLE FileHandle
,
1211 OUT PIO_STATUS_BLOCK IoStatusBlock
1217 NtFlushInstructionCache(
1218 IN HANDLE ProcessHandle
,
1219 IN PVOID BaseAddress
,
1220 IN ULONG NumberOfBytesToFlush
1238 NtFlushVirtualMemory(
1239 IN HANDLE ProcessHandle
,
1240 IN PVOID BaseAddress
,
1241 IN ULONG NumberOfBytesToFlush
,
1242 OUT PULONG NumberOfBytesFlushed OPTIONAL
1247 NtFlushWriteBuffer(VOID
);
1252 ZwFlushWriteBuffer(VOID
);
1257 NtFreeVirtualMemory(
1258 IN HANDLE ProcessHandle
,
1259 IN PVOID
*BaseAddress
,
1260 IN PULONG RegionSize
,
1267 ZwFreeVirtualMemory(
1268 IN HANDLE ProcessHandle
,
1269 IN PVOID
*BaseAddress
,
1270 IN PULONG RegionSize
,
1278 IN HANDLE DeviceHandle
,
1279 IN HANDLE Event OPTIONAL
,
1280 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1281 IN PVOID ApcContext OPTIONAL
,
1282 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1283 IN ULONG IoControlCode
,
1284 IN PVOID InputBuffer
,
1285 IN ULONG InputBufferSize
,
1286 OUT PVOID OutputBuffer
,
1287 IN ULONG OutputBufferSize
1294 IN HANDLE DeviceHandle
,
1295 IN HANDLE Event OPTIONAL
,
1296 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1297 IN PVOID ApcContext OPTIONAL
,
1298 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1299 IN ULONG IoControlCode
,
1300 IN PVOID InputBuffer
,
1301 IN ULONG InputBufferSize
,
1302 OUT PVOID OutputBuffer
,
1303 IN ULONG OutputBufferSize
1309 IN HANDLE ThreadHandle
,
1310 OUT PCONTEXT Context
1317 IN HANDLE ThreadHandle
,
1318 OUT PCONTEXT Context
1326 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1345 NtImpersonateClientOfPort(
1347 PPORT_MESSAGE ClientMessage
1353 ZwImpersonateClientOfPort(
1355 PPORT_MESSAGE ClientMessage
1360 NtImpersonateThread(
1361 IN HANDLE ThreadHandle
,
1362 IN HANDLE ThreadToImpersonate
,
1363 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1369 ZwImpersonateThread(
1370 IN HANDLE ThreadHandle
,
1371 IN HANDLE ThreadToImpersonate
,
1372 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1378 NtInitiatePowerAction(
1379 POWER_ACTION SystemAction
,
1380 SYSTEM_POWER_STATE MinSystemState
,
1382 BOOLEAN Asynchronous
1388 ZwInitiatePowerAction(
1389 POWER_ACTION SystemAction
,
1390 SYSTEM_POWER_STATE MinSystemState
,
1392 BOOLEAN Asynchronous
1397 NtInitializeRegistry(
1404 ZwInitializeRegistry(
1411 IN HANDLE ProcessHandle
,
1412 IN HANDLE JobHandle OPTIONAL
1419 IN HANDLE ProcessHandle
,
1420 IN HANDLE JobHandle OPTIONAL
1425 NtListenPort(HANDLE PortHandle
,
1426 PPORT_MESSAGE ConnectionRequest
1432 ZwListenPort(HANDLE PortHandle
,
1433 PPORT_MESSAGE ConnectionRequest
1439 IN PUNICODE_STRING DriverServiceName
1446 IN PUNICODE_STRING DriverServiceName
1452 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1453 IN POBJECT_ATTRIBUTES FileObjectAttributes
1460 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1461 IN POBJECT_ATTRIBUTES FileObjectAttributes
1467 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1468 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1476 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1477 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1485 IN HANDLE FileHandle
,
1486 IN HANDLE Event OPTIONAL
,
1487 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1488 IN PVOID ApcContext OPTIONAL
,
1489 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1490 IN PLARGE_INTEGER ByteOffset
,
1491 IN PLARGE_INTEGER Length
,
1493 IN BOOLEAN FailImmediatedly
,
1494 IN BOOLEAN ExclusiveLock
1502 IN HANDLE FileHandle
,
1503 IN HANDLE Event OPTIONAL
,
1504 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1505 IN PVOID ApcContext OPTIONAL
,
1506 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1507 IN PLARGE_INTEGER ByteOffset
,
1508 IN PLARGE_INTEGER Length
,
1510 IN BOOLEAN FailImmediatedly
,
1511 IN BOOLEAN ExclusiveLock
1516 NtLockVirtualMemory(
1517 HANDLE ProcessHandle
,
1519 ULONG NumberOfBytesToLock
,
1520 PULONG NumberOfBytesLocked
1526 ZwLockVirtualMemory(
1527 HANDLE ProcessHandle
,
1529 ULONG NumberOfBytesToLock
,
1530 PULONG NumberOfBytesLocked
1535 NtMakePermanentObject(
1542 ZwMakePermanentObject(
1548 NtMakeTemporaryObject(
1555 ZwMakeTemporaryObject(
1562 IN HANDLE SectionHandle
,
1563 IN HANDLE ProcessHandle
,
1564 IN OUT PVOID
*BaseAddress
,
1566 IN ULONG CommitSize
,
1567 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1568 IN OUT PULONG ViewSize
,
1569 IN SECTION_INHERIT InheritDisposition
,
1570 IN ULONG AllocationType
,
1571 IN ULONG AccessProtection
1578 IN HANDLE SectionHandle
,
1579 IN HANDLE ProcessHandle
,
1580 IN OUT PVOID
*BaseAddress
,
1582 IN ULONG CommitSize
,
1583 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1584 IN OUT PULONG ViewSize
,
1585 IN SECTION_INHERIT InheritDisposition
,
1586 IN ULONG AllocationType
,
1587 IN ULONG AccessProtection
1592 NtNotifyChangeDirectoryFile(
1593 IN HANDLE FileHandle
,
1594 IN HANDLE Event OPTIONAL
,
1595 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1596 IN PVOID ApcContext OPTIONAL
,
1597 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1599 IN ULONG BufferSize
,
1600 IN ULONG CompletionFilter
,
1601 IN BOOLEAN WatchTree
1607 ZwNotifyChangeDirectoryFile(
1608 IN HANDLE FileHandle
,
1609 IN HANDLE Event OPTIONAL
,
1610 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1611 IN PVOID ApcContext OPTIONAL
,
1612 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1614 IN ULONG BufferSize
,
1615 IN ULONG CompletionFilter
,
1616 IN BOOLEAN WatchTree
1622 IN HANDLE KeyHandle
,
1624 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1625 IN PVOID ApcContext OPTIONAL
,
1626 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1627 IN ULONG CompletionFilter
,
1628 IN BOOLEAN Asynchroneous
,
1629 OUT PVOID ChangeBuffer
,
1631 IN BOOLEAN WatchSubtree
1638 IN HANDLE KeyHandle
,
1640 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1641 IN PVOID ApcContext OPTIONAL
,
1642 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1643 IN ULONG CompletionFilter
,
1644 IN BOOLEAN Asynchroneous
,
1645 OUT PVOID ChangeBuffer
,
1647 IN BOOLEAN WatchSubtree
1652 NtOpenDirectoryObject(
1653 OUT PHANDLE FileHandle
,
1654 IN ACCESS_MASK DesiredAccess
,
1655 IN POBJECT_ATTRIBUTES ObjectAttributes
1661 ZwOpenDirectoryObject(
1662 OUT PHANDLE FileHandle
,
1663 IN ACCESS_MASK DesiredAccess
,
1664 IN POBJECT_ATTRIBUTES ObjectAttributes
1670 OUT PHANDLE EventHandle
,
1671 IN ACCESS_MASK DesiredAccess
,
1672 IN POBJECT_ATTRIBUTES ObjectAttributes
1679 OUT PHANDLE EventHandle
,
1680 IN ACCESS_MASK DesiredAccess
,
1681 IN POBJECT_ATTRIBUTES ObjectAttributes
1687 OUT PHANDLE EventPairHandle
,
1688 IN ACCESS_MASK DesiredAccess
,
1689 IN POBJECT_ATTRIBUTES ObjectAttributes
1696 OUT PHANDLE EventPairHandle
,
1697 IN ACCESS_MASK DesiredAccess
,
1698 IN POBJECT_ATTRIBUTES ObjectAttributes
1705 OUT PHANDLE FileHandle
,
1706 IN ACCESS_MASK DesiredAccess
,
1707 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1708 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1709 IN ULONG ShareAccess
,
1710 IN ULONG OpenOptions
1717 OUT PHANDLE FileHandle
,
1718 IN ACCESS_MASK DesiredAccess
,
1719 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1720 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1721 IN ULONG ShareAccess
,
1722 IN ULONG OpenOptions
1728 OUT PHANDLE CompetionPort
,
1729 IN ACCESS_MASK DesiredAccess
,
1730 IN POBJECT_ATTRIBUTES ObjectAttributes
1737 OUT PHANDLE CompetionPort
,
1738 IN ACCESS_MASK DesiredAccess
,
1739 IN POBJECT_ATTRIBUTES ObjectAttributes
1746 ACCESS_MASK DesiredAccess
,
1747 POBJECT_ATTRIBUTES ObjectAttributes
1755 ACCESS_MASK DesiredAccess
,
1756 POBJECT_ATTRIBUTES ObjectAttributes
1762 OUT PHANDLE KeyHandle
,
1763 IN ACCESS_MASK DesiredAccess
,
1764 IN POBJECT_ATTRIBUTES ObjectAttributes
1771 OUT PHANDLE KeyHandle
,
1772 IN ACCESS_MASK DesiredAccess
,
1773 IN POBJECT_ATTRIBUTES ObjectAttributes
1779 OUT PHANDLE MutantHandle
,
1780 IN ACCESS_MASK DesiredAccess
,
1781 IN POBJECT_ATTRIBUTES ObjectAttributes
1788 OUT PHANDLE MutantHandle
,
1789 IN ACCESS_MASK DesiredAccess
,
1790 IN POBJECT_ATTRIBUTES ObjectAttributes
1796 NtOpenObjectAuditAlarm(
1797 IN PUNICODE_STRING SubsystemName
,
1799 IN PUNICODE_STRING ObjectTypeName
,
1800 IN PUNICODE_STRING ObjectName
,
1801 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1802 IN HANDLE ClientToken
,
1803 IN ULONG DesiredAccess
,
1804 IN ULONG GrantedAccess
,
1805 IN PPRIVILEGE_SET Privileges
,
1806 IN BOOLEAN ObjectCreation
,
1807 IN BOOLEAN AccessGranted
,
1808 OUT PBOOLEAN GenerateOnClose
1814 ZwOpenObjectAuditAlarm(
1815 IN PUNICODE_STRING SubsystemName
,
1817 IN PUNICODE_STRING ObjectTypeName
,
1818 IN PUNICODE_STRING ObjectName
,
1819 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1820 IN HANDLE ClientToken
,
1821 IN ULONG DesiredAccess
,
1822 IN ULONG GrantedAccess
,
1823 IN PPRIVILEGE_SET Privileges
,
1824 IN BOOLEAN ObjectCreation
,
1825 IN BOOLEAN AccessGranted
,
1826 OUT PBOOLEAN GenerateOnClose
1833 OUT PHANDLE ProcessHandle
,
1834 IN ACCESS_MASK DesiredAccess
,
1835 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1836 IN PCLIENT_ID ClientId
1843 OUT PHANDLE ProcessHandle
,
1844 IN ACCESS_MASK DesiredAccess
,
1845 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1846 IN PCLIENT_ID ClientId
1853 IN HANDLE ProcessHandle
,
1854 IN ACCESS_MASK DesiredAccess
,
1855 OUT PHANDLE TokenHandle
1862 IN HANDLE ProcessHandle
,
1863 IN ACCESS_MASK DesiredAccess
,
1864 OUT PHANDLE TokenHandle
1870 NtOpenProcessTokenEx(
1871 IN HANDLE ProcessHandle
,
1872 IN ACCESS_MASK DesiredAccess
,
1873 IN ULONG HandleAttributes
,
1874 OUT PHANDLE TokenHandle
1880 ZwOpenProcessTokenEx(
1881 IN HANDLE ProcessHandle
,
1882 IN ACCESS_MASK DesiredAccess
,
1883 IN ULONG HandleAttributes
,
1884 OUT PHANDLE TokenHandle
1890 OUT PHANDLE SectionHandle
,
1891 IN ACCESS_MASK DesiredAccess
,
1892 IN POBJECT_ATTRIBUTES ObjectAttributes
1899 OUT PHANDLE SectionHandle
,
1900 IN ACCESS_MASK DesiredAccess
,
1901 IN POBJECT_ATTRIBUTES ObjectAttributes
1907 OUT PHANDLE SemaphoreHandle
,
1908 IN ACCESS_MASK DesiredAcces
,
1909 IN POBJECT_ATTRIBUTES ObjectAttributes
1916 OUT PHANDLE SemaphoreHandle
,
1917 IN ACCESS_MASK DesiredAcces
,
1918 IN POBJECT_ATTRIBUTES ObjectAttributes
1923 NtOpenSymbolicLinkObject(
1924 OUT PHANDLE SymbolicLinkHandle
,
1925 IN ACCESS_MASK DesiredAccess
,
1926 IN POBJECT_ATTRIBUTES ObjectAttributes
1932 ZwOpenSymbolicLinkObject(
1933 OUT PHANDLE SymbolicLinkHandle
,
1934 IN ACCESS_MASK DesiredAccess
,
1935 IN POBJECT_ATTRIBUTES ObjectAttributes
1941 OUT PHANDLE ThreadHandle
,
1942 IN ACCESS_MASK DesiredAccess
,
1943 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1944 IN PCLIENT_ID ClientId
1951 OUT PHANDLE ThreadHandle
,
1952 IN ACCESS_MASK DesiredAccess
,
1953 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1954 IN PCLIENT_ID ClientId
1961 IN HANDLE ThreadHandle
,
1962 IN ACCESS_MASK DesiredAccess
,
1963 IN BOOLEAN OpenAsSelf
,
1964 OUT PHANDLE TokenHandle
1971 IN HANDLE ThreadHandle
,
1972 IN ACCESS_MASK DesiredAccess
,
1973 IN BOOLEAN OpenAsSelf
,
1974 OUT PHANDLE TokenHandle
1980 NtOpenThreadTokenEx(
1981 IN HANDLE ThreadHandle
,
1982 IN ACCESS_MASK DesiredAccess
,
1983 IN BOOLEAN OpenAsSelf
,
1984 IN ULONG HandleAttributes
,
1985 OUT PHANDLE TokenHandle
1991 ZwOpenThreadTokenEx(
1992 IN HANDLE ThreadHandle
,
1993 IN ACCESS_MASK DesiredAccess
,
1994 IN BOOLEAN OpenAsSelf
,
1995 IN ULONG HandleAttributes
,
1996 OUT PHANDLE TokenHandle
2002 OUT PHANDLE TimerHandle
,
2003 IN ACCESS_MASK DesiredAccess
,
2004 IN POBJECT_ATTRIBUTES ObjectAttributes
2007 #ifdef NTOS_MODE_USER
2012 OUT PHANDLE TimerHandle
,
2013 IN ACCESS_MASK DesiredAccess
,
2014 IN POBJECT_ATTRIBUTES ObjectAttributes
2021 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
2022 IN OUT PVOID Buffer
,
2030 POWER_INFORMATION_LEVEL PowerInformationLevel
,
2032 ULONG InputBufferLength
,
2034 ULONG OutputBufferLength
2041 POWER_INFORMATION_LEVEL PowerInformationLevel
,
2043 ULONG InputBufferLength
,
2045 ULONG OutputBufferLength
2052 IN HANDLE ClientToken
,
2053 IN PPRIVILEGE_SET RequiredPrivileges
,
2061 IN HANDLE ClientToken
,
2062 IN PPRIVILEGE_SET RequiredPrivileges
,
2069 NtPrivilegedServiceAuditAlarm(
2070 IN PUNICODE_STRING SubsystemName
,
2071 IN PUNICODE_STRING ServiceName
,
2072 IN HANDLE ClientToken
,
2073 IN PPRIVILEGE_SET Privileges
,
2074 IN BOOLEAN AccessGranted
2080 ZwPrivilegedServiceAuditAlarm(
2081 IN PUNICODE_STRING SubsystemName
,
2082 IN PUNICODE_STRING ServiceName
,
2083 IN HANDLE ClientToken
,
2084 IN PPRIVILEGE_SET Privileges
,
2085 IN BOOLEAN AccessGranted
2091 NtPrivilegeObjectAuditAlarm(
2092 IN PUNICODE_STRING SubsystemName
,
2094 IN HANDLE ClientToken
,
2095 IN ULONG DesiredAccess
,
2096 IN PPRIVILEGE_SET Privileges
,
2097 IN BOOLEAN AccessGranted
2103 ZwPrivilegeObjectAuditAlarm(
2104 IN PUNICODE_STRING SubsystemName
,
2106 IN HANDLE ClientToken
,
2107 IN ULONG DesiredAccess
,
2108 IN PPRIVILEGE_SET Privileges
,
2109 IN BOOLEAN AccessGranted
2114 NtProtectVirtualMemory(
2115 IN HANDLE ProcessHandle
,
2116 IN PVOID
*BaseAddress
,
2117 IN ULONG
*NumberOfBytesToProtect
,
2118 IN ULONG NewAccessProtection
,
2119 OUT PULONG OldAccessProtection
2125 ZwProtectVirtualMemory(
2126 IN HANDLE ProcessHandle
,
2127 IN PVOID
*BaseAddress
,
2128 IN ULONG
*NumberOfBytesToProtect
,
2129 IN ULONG NewAccessProtection
,
2130 OUT PULONG OldAccessProtection
2136 IN HANDLE EventHandle
,
2137 IN PLONG PulseCount OPTIONAL
2144 IN HANDLE EventHandle
,
2145 IN PLONG PulseCount OPTIONAL
2150 NtQueryAttributesFile(
2151 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2152 OUT PFILE_BASIC_INFORMATION FileInformation
2158 ZwQueryAttributesFile(
2159 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2160 OUT PFILE_BASIC_INFORMATION FileInformation
2166 NtQueryBootEntryOrder(
2174 ZwQueryBootEntryOrder(
2196 NtQueryDefaultLocale(
2197 IN BOOLEAN UserProfile
,
2198 OUT PLCID DefaultLocaleId
2204 ZwQueryDefaultLocale(
2205 IN BOOLEAN UserProfile
,
2206 OUT PLCID DefaultLocaleId
2211 NtQueryDefaultUILanguage(
2218 ZwQueryDefaultUILanguage(
2225 NtQueryDirectoryFile(
2226 IN HANDLE FileHandle
,
2227 IN HANDLE Event OPTIONAL
,
2228 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2229 IN PVOID ApcContext OPTIONAL
,
2230 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2231 OUT PVOID FileInformation
,
2233 IN FILE_INFORMATION_CLASS FileInformationClass
,
2234 IN BOOLEAN ReturnSingleEntry
,
2235 IN PUNICODE_STRING FileName OPTIONAL
,
2236 IN BOOLEAN RestartScan
2242 ZwQueryDirectoryFile(
2243 IN HANDLE FileHandle
,
2244 IN HANDLE Event OPTIONAL
,
2245 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2246 IN PVOID ApcContext OPTIONAL
,
2247 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2248 OUT PVOID FileInformation
,
2250 IN FILE_INFORMATION_CLASS FileInformationClass
,
2251 IN BOOLEAN ReturnSingleEntry
,
2252 IN PUNICODE_STRING FileName OPTIONAL
,
2253 IN BOOLEAN RestartScan
2258 NtQueryDirectoryObject(
2259 IN HANDLE DirectoryHandle
,
2261 IN ULONG BufferLength
,
2262 IN BOOLEAN ReturnSingleEntry
,
2263 IN BOOLEAN RestartScan
,
2264 IN OUT PULONG Context
,
2265 OUT PULONG ReturnLength OPTIONAL
2271 ZwQueryDirectoryObject(
2272 IN HANDLE DirectoryHandle
,
2274 IN ULONG BufferLength
,
2275 IN BOOLEAN ReturnSingleEntry
,
2276 IN BOOLEAN RestartScan
,
2277 IN OUT PULONG Context
,
2278 OUT PULONG ReturnLength OPTIONAL
2284 IN HANDLE FileHandle
,
2285 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2288 IN BOOLEAN ReturnSingleEntry
,
2289 IN PVOID EaList OPTIONAL
,
2290 IN ULONG EaListLength
,
2291 IN PULONG EaIndex OPTIONAL
,
2292 IN BOOLEAN RestartScan
2295 #ifdef NTOS_MODE_USER
2300 IN HANDLE FileHandle
,
2301 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2304 IN BOOLEAN ReturnSingleEntry
,
2305 IN PVOID EaList OPTIONAL
,
2306 IN ULONG EaListLength
,
2307 IN PULONG EaIndex OPTIONAL
,
2308 IN BOOLEAN RestartScan
2315 IN HANDLE EventHandle
,
2316 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2317 OUT PVOID EventInformation
,
2318 IN ULONG EventInformationLength
,
2319 OUT PULONG ReturnLength
2326 IN HANDLE EventHandle
,
2327 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2328 OUT PVOID EventInformation
,
2329 IN ULONG EventInformationLength
,
2330 OUT PULONG ReturnLength
2335 NtQueryFullAttributesFile(
2336 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2337 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2343 ZwQueryFullAttributesFile(
2344 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2345 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2350 NtQueryInformationAtom(
2352 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2353 OUT PVOID AtomInformation
,
2354 IN ULONG AtomInformationLength
,
2355 OUT PULONG ReturnLength OPTIONAL
2361 ZwQueryInformationAtom(
2363 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2364 OUT PVOID AtomInformation
,
2365 IN ULONG AtomInformationLength
,
2366 OUT PULONG ReturnLength OPTIONAL
2372 NtQueryInformationFile(
2373 IN HANDLE FileHandle
,
2374 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2375 OUT PVOID FileInformation
,
2377 IN FILE_INFORMATION_CLASS FileInformationClass
2383 ZwQueryInformationFile(
2385 PIO_STATUS_BLOCK IoStatusBlock
,
2386 PVOID FileInformation
,
2388 FILE_INFORMATION_CLASS FileInformationClass
2393 NtQueryInformationJobObject(
2395 JOBOBJECTINFOCLASS JobInformationClass
,
2396 PVOID JobInformation
,
2397 ULONG JobInformationLength
,
2404 ZwQueryInformationJobObject(
2406 JOBOBJECTINFOCLASS JobInformationClass
,
2407 PVOID JobInformation
,
2408 ULONG JobInformationLength
,
2414 NtQueryInformationPort(
2416 PORT_INFORMATION_CLASS PortInformationClass
,
2417 PVOID PortInformation
,
2418 ULONG PortInformationLength
,
2425 ZwQueryInformationPort(
2427 PORT_INFORMATION_CLASS PortInformationClass
,
2428 PVOID PortInformation
,
2429 ULONG PortInformationLength
,
2436 NtQueryInformationProcess(
2437 IN HANDLE ProcessHandle
,
2438 IN PROCESSINFOCLASS ProcessInformationClass
,
2439 OUT PVOID ProcessInformation
,
2440 IN ULONG ProcessInformationLength
,
2441 OUT PULONG ReturnLength OPTIONAL
2447 ZwQueryInformationProcess(
2448 IN HANDLE ProcessHandle
,
2449 IN PROCESSINFOCLASS ProcessInformationClass
,
2450 OUT PVOID ProcessInformation
,
2451 IN ULONG ProcessInformationLength
,
2452 OUT PULONG ReturnLength OPTIONAL
2458 NtQueryInformationThread(
2459 IN HANDLE ThreadHandle
,
2460 IN THREADINFOCLASS ThreadInformationClass
,
2461 OUT PVOID ThreadInformation
,
2462 IN ULONG ThreadInformationLength
,
2463 OUT PULONG ReturnLength
2469 ZwQueryInformationThread(
2470 IN HANDLE ThreadHandle
,
2471 IN THREADINFOCLASS ThreadInformationClass
,
2472 OUT PVOID ThreadInformation
,
2473 IN ULONG ThreadInformationLength
,
2474 OUT PULONG ReturnLength
2480 NtQueryInformationToken(
2481 IN HANDLE TokenHandle
,
2482 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2483 OUT PVOID TokenInformation
,
2484 IN ULONG TokenInformationLength
,
2485 OUT PULONG ReturnLength
2491 ZwQueryInformationToken(
2492 IN HANDLE TokenHandle
,
2493 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2494 OUT PVOID TokenInformation
,
2495 IN ULONG TokenInformationLength
,
2496 OUT PULONG ReturnLength
2501 NtQueryInstallUILanguage(
2508 ZwQueryInstallUILanguage(
2514 NtQueryIntervalProfile(
2515 IN KPROFILE_SOURCE ProfileSource
,
2522 ZwQueryIntervalProfile(
2523 OUT PULONG Interval
,
2524 OUT KPROFILE_SOURCE ClockSource
2529 NtQueryIoCompletion(
2530 IN HANDLE IoCompletionHandle
,
2531 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2532 OUT PVOID IoCompletionInformation
,
2533 IN ULONG IoCompletionInformationLength
,
2534 OUT PULONG ResultLength OPTIONAL
2540 ZwQueryIoCompletion(
2541 IN HANDLE IoCompletionHandle
,
2542 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2543 OUT PVOID IoCompletionInformation
,
2544 IN ULONG IoCompletionInformationLength
,
2545 OUT PULONG ResultLength OPTIONAL
2551 IN HANDLE KeyHandle
,
2552 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2553 OUT PVOID KeyInformation
,
2555 OUT PULONG ResultLength
2562 IN HANDLE KeyHandle
,
2563 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2564 OUT PVOID KeyInformation
,
2566 OUT PULONG ResultLength
2572 NtQueryQuotaInformationFile(
2573 IN HANDLE FileHandle
,
2574 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2577 IN BOOLEAN ReturnSingleEntry
,
2578 IN PVOID SidList OPTIONAL
,
2579 IN ULONG SidListLength
,
2580 IN PSID StartSid OPTIONAL
,
2581 IN BOOLEAN RestartScan
2587 ZwQueryQuotaInformationFile(
2588 IN HANDLE FileHandle
,
2589 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2592 IN BOOLEAN ReturnSingleEntry
,
2593 IN PVOID SidList OPTIONAL
,
2594 IN ULONG SidListLength
,
2595 IN PSID StartSid OPTIONAL
,
2596 IN BOOLEAN RestartScan
2601 NtQueryMultipleValueKey(
2602 IN HANDLE KeyHandle
,
2603 IN OUT PKEY_VALUE_ENTRY ValueList
,
2604 IN ULONG NumberOfValues
,
2606 IN OUT PULONG Length
,
2607 OUT PULONG ReturnLength
2613 ZwQueryMultipleValueKey(
2614 IN HANDLE KeyHandle
,
2615 IN OUT PKEY_VALUE_ENTRY ValueList
,
2616 IN ULONG NumberOfValues
,
2618 IN OUT PULONG Length
,
2619 OUT PULONG ReturnLength
2625 IN HANDLE MutantHandle
,
2626 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2627 OUT PVOID MutantInformation
,
2629 OUT PULONG ResultLength
2636 IN HANDLE MutantHandle
,
2637 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2638 OUT PVOID MutantInformation
,
2640 OUT PULONG ResultLength
2646 IN HANDLE ObjectHandle
,
2647 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2648 OUT PVOID ObjectInformation
,
2650 OUT PULONG ResultLength OPTIONAL
2657 IN HANDLE ObjectHandle
,
2658 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2659 OUT PVOID ObjectInformation
,
2661 OUT PULONG ResultLength OPTIONAL
2666 NtQueryPerformanceCounter(
2667 IN PLARGE_INTEGER Counter
,
2668 IN PLARGE_INTEGER Frequency
2674 ZwQueryPerformanceCounter(
2675 IN PLARGE_INTEGER Counter
,
2676 IN PLARGE_INTEGER Frequency
2682 IN HANDLE SectionHandle
,
2683 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2684 OUT PVOID SectionInformation
,
2686 OUT PULONG ResultLength
2693 IN HANDLE SectionHandle
,
2694 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2695 OUT PVOID SectionInformation
,
2697 OUT PULONG ResultLength
2703 NtQuerySecurityObject(
2705 IN SECURITY_INFORMATION SecurityInformation
,
2706 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2708 OUT PULONG ResultLength
2714 ZwQuerySecurityObject(
2716 IN SECURITY_INFORMATION SecurityInformation
,
2717 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2719 OUT PULONG ResultLength
2725 IN HANDLE SemaphoreHandle
,
2726 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2727 OUT PVOID SemaphoreInformation
,
2729 OUT PULONG ReturnLength
2736 IN HANDLE SemaphoreHandle
,
2737 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2738 OUT PVOID SemaphoreInformation
,
2740 OUT PULONG ReturnLength
2745 NtQuerySymbolicLinkObject(
2746 IN HANDLE SymLinkObjHandle
,
2747 OUT PUNICODE_STRING LinkTarget
,
2748 OUT PULONG DataWritten OPTIONAL
2754 ZwQuerySymbolicLinkObject(
2755 IN HANDLE SymLinkObjHandle
,
2756 OUT PUNICODE_STRING LinkName
,
2757 OUT PULONG DataWritten OPTIONAL
2762 NtQuerySystemEnvironmentValue(
2763 IN PUNICODE_STRING Name
,
2772 ZwQuerySystemEnvironmentValue(
2773 IN PUNICODE_STRING Name
,
2781 NtQuerySystemInformation(
2782 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2783 OUT PVOID SystemInformation
,
2785 OUT PULONG ResultLength
2791 ZwQuerySystemInformation(
2792 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2793 OUT PVOID SystemInformation
,
2795 OUT PULONG ResultLength
2801 OUT PLARGE_INTEGER CurrentTime
2808 OUT PLARGE_INTEGER CurrentTime
2814 IN HANDLE TimerHandle
,
2815 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2816 OUT PVOID TimerInformation
,
2818 OUT PULONG ResultLength
2825 IN HANDLE TimerHandle
,
2826 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2827 OUT PVOID TimerInformation
,
2829 OUT PULONG ResultLength
2834 NtQueryTimerResolution(
2835 OUT PULONG MinimumResolution
,
2836 OUT PULONG MaximumResolution
,
2837 OUT PULONG ActualResolution
2843 ZwQueryTimerResolution(
2844 OUT PULONG MinimumResolution
,
2845 OUT PULONG MaximumResolution
,
2846 OUT PULONG ActualResolution
2852 IN HANDLE KeyHandle
,
2853 IN PUNICODE_STRING ValueName
,
2854 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2855 OUT PVOID KeyValueInformation
,
2857 OUT PULONG ResultLength
2864 IN HANDLE KeyHandle
,
2865 IN PUNICODE_STRING ValueName
,
2866 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2867 OUT PVOID KeyValueInformation
,
2869 OUT PULONG ResultLength
2874 NtQueryVirtualMemory(
2875 IN HANDLE ProcessHandle
,
2877 IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass
,
2878 OUT PVOID VirtualMemoryInformation
,
2880 OUT PULONG ResultLength
2886 ZwQueryVirtualMemory(
2887 IN HANDLE ProcessHandle
,
2889 IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass
,
2890 OUT PVOID VirtualMemoryInformation
,
2892 OUT PULONG ResultLength
2898 NtQueryVolumeInformationFile(
2899 IN HANDLE FileHandle
,
2900 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2901 OUT PVOID FsInformation
,
2903 IN FS_INFORMATION_CLASS FsInformationClass
2909 ZwQueryVolumeInformationFile(
2910 IN HANDLE FileHandle
,
2911 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2912 OUT PVOID FsInformation
,
2914 IN FS_INFORMATION_CLASS FsInformationClass
2920 HANDLE ThreadHandle
,
2921 PKNORMAL_ROUTINE ApcRoutine
,
2922 PVOID NormalContext
,
2923 PVOID SystemArgument1
,
2924 PVOID SystemArgument2
2931 HANDLE ThreadHandle
,
2932 PKNORMAL_ROUTINE ApcRoutine
,
2933 PVOID NormalContext
,
2934 PVOID SystemArgument1
,
2935 PVOID SystemArgument2
2941 IN PEXCEPTION_RECORD ExceptionRecord
,
2942 IN PCONTEXT Context
,
2943 IN BOOLEAN SearchFrames
2950 IN PEXCEPTION_RECORD ExceptionRecord
,
2951 IN PCONTEXT Context
,
2952 IN BOOLEAN SearchFrames
2958 IN NTSTATUS ErrorStatus
,
2959 IN ULONG NumberOfParameters
,
2960 IN ULONG UnicodeStringParameterMask
,
2961 IN PULONG_PTR Parameters
,
2962 IN ULONG ValidResponseOptions
,
2970 IN NTSTATUS ErrorStatus
,
2971 IN ULONG NumberOfParameters
,
2972 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2973 IN PVOID
*Parameters
,
2974 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2975 OUT PHARDERROR_RESPONSE Response
2982 IN HANDLE FileHandle
,
2983 IN HANDLE Event OPTIONAL
,
2984 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2985 IN PVOID UserApcContext OPTIONAL
,
2986 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2988 IN ULONG BufferLength
,
2989 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2990 IN PULONG Key OPTIONAL
2997 IN HANDLE FileHandle
,
2998 IN HANDLE Event OPTIONAL
,
2999 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3000 IN PVOID UserApcContext OPTIONAL
,
3001 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3003 IN ULONG BufferLength
,
3004 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
3005 IN PULONG Key OPTIONAL
3011 IN HANDLE FileHandle
,
3012 IN HANDLE Event OPTIONAL
,
3013 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3014 IN PVOID UserApcContext OPTIONAL
,
3015 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
3016 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3017 IN ULONG BufferLength
,
3018 IN PLARGE_INTEGER ByteOffset
,
3019 IN PULONG Key OPTIONAL
3026 IN HANDLE FileHandle
,
3027 IN HANDLE Event OPTIONAL
,
3028 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3029 IN PVOID UserApcContext OPTIONAL
,
3030 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
3031 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3032 IN ULONG BufferLength
,
3033 IN PLARGE_INTEGER ByteOffset
,
3034 IN PULONG Key OPTIONAL
3041 PPORT_MESSAGE Message
,
3053 PPORT_MESSAGE Message
,
3062 NtReadVirtualMemory(
3063 IN HANDLE ProcessHandle
,
3064 IN PVOID BaseAddress
,
3066 IN ULONG NumberOfBytesToRead
,
3067 OUT PULONG NumberOfBytesRead
3073 ZwReadVirtualMemory(
3074 IN HANDLE ProcessHandle
,
3075 IN PVOID BaseAddress
,
3077 IN ULONG NumberOfBytesToRead
,
3078 OUT PULONG NumberOfBytesRead
3083 NtRegisterThreadTerminatePort(
3084 HANDLE TerminationPort
3090 ZwRegisterThreadTerminatePort(
3091 HANDLE TerminationPort
3097 IN HANDLE MutantHandle
,
3098 IN PLONG ReleaseCount OPTIONAL
3105 IN HANDLE MutantHandle
,
3106 IN PLONG ReleaseCount OPTIONAL
3112 IN HANDLE SemaphoreHandle
,
3113 IN LONG ReleaseCount
,
3114 OUT PLONG PreviousCount
3121 IN HANDLE SemaphoreHandle
,
3122 IN LONG ReleaseCount
,
3123 OUT PLONG PreviousCount
3128 NtRemoveIoCompletion(
3129 IN HANDLE IoCompletionHandle
,
3130 OUT PVOID
*CompletionKey
,
3131 OUT PVOID
*CompletionContext
,
3132 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3133 IN PLARGE_INTEGER Timeout OPTIONAL
3139 ZwRemoveIoCompletion(
3140 IN HANDLE IoCompletionHandle
,
3141 OUT PVOID
*CompletionKey
,
3142 OUT PVOID
*CompletionContext
,
3143 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3144 IN PLARGE_INTEGER Timeout OPTIONAL
3150 IN POBJECT_ATTRIBUTES ObjectAttributes
,
3152 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
3159 IN POBJECT_ATTRIBUTES ObjectAttributes
,
3161 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
3168 PPORT_MESSAGE LpcReply
3176 PPORT_MESSAGE LpcReply
3181 NtReplyWaitReceivePort(
3183 PVOID
*PortContext OPTIONAL
,
3184 PPORT_MESSAGE ReplyMessage OPTIONAL
,
3185 PPORT_MESSAGE ReceiveMessage
3191 ZwReplyWaitReceivePort(
3193 PVOID
*PortContext OPTIONAL
,
3194 PPORT_MESSAGE ReplyMessage
,
3195 PPORT_MESSAGE ReceiveMessage
3200 NtReplyWaitReplyPort(
3202 PPORT_MESSAGE ReplyMessage
3208 ZwReplyWaitReplyPort(
3210 PPORT_MESSAGE ReplyMessage
3217 PPORT_MESSAGE LpcMessage
);
3224 PPORT_MESSAGE LpcMessage
3230 NtRequestWaitReplyPort(
3232 PPORT_MESSAGE LpcReply
,
3233 PPORT_MESSAGE LpcRequest
3239 ZwRequestWaitReplyPort(
3241 PPORT_MESSAGE LpcReply
,
3242 PPORT_MESSAGE LpcRequest
3249 PLONG NumberOfWaitingThreads OPTIONAL
3257 PLONG NumberOfWaitingThreads OPTIONAL
3280 IN HANDLE ThreadHandle
,
3281 OUT PULONG SuspendCount
3288 IN HANDLE ThreadHandle
,
3289 OUT PULONG SuspendCount
3295 IN HANDLE ProcessHandle
3302 IN HANDLE ProcessHandle
3308 IN HANDLE KeyHandle
,
3309 IN HANDLE FileHandle
3316 IN HANDLE KeyHandle
,
3317 IN HANDLE FileHandle
3323 IN HANDLE KeyHandle
,
3324 IN HANDLE FileHandle
,
3332 IN HANDLE KeyHandle
,
3333 IN HANDLE FileHandle
,
3341 NtSecureConnectPort(
3343 PUNICODE_STRING PortName
,
3344 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
3345 PPORT_VIEW ClientView OPTIONAL
,
3347 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
3348 PULONG MaxMessageLength OPTIONAL
,
3349 PVOID ConnectionInformation OPTIONAL
,
3350 PULONG ConnectionInformationLength OPTIONAL
3356 ZwSecureConnectPort(
3358 PUNICODE_STRING PortName
,
3359 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
3360 PPORT_VIEW ClientView OPTIONAL
,
3362 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
3363 PULONG MaxMessageLength OPTIONAL
,
3364 PVOID ConnectionInformation OPTIONAL
,
3365 PULONG ConnectionInformationLength OPTIONAL
3370 NtSetBootEntryOrder(
3378 ZwSetBootEntryOrder(
3401 IN HANDLE ThreadHandle
,
3409 IN HANDLE ThreadHandle
,
3416 IN BOOLEAN UserProfile
,
3417 IN LCID DefaultLocaleId
3424 IN BOOLEAN UserProfile
,
3425 IN LCID DefaultLocaleId
3430 NtSetDefaultUILanguage(
3437 ZwSetDefaultUILanguage(
3443 NtSetDefaultHardErrorPort(
3444 IN HANDLE PortHandle
3450 ZwSetDefaultHardErrorPort(
3451 IN HANDLE PortHandle
3457 IN HANDLE FileHandle
,
3458 IN PIO_STATUS_BLOCK IoStatusBlock
,
3463 #ifdef NTOS_MODE_USER
3468 IN HANDLE FileHandle
,
3469 IN PIO_STATUS_BLOCK IoStatusBlock
,
3478 IN HANDLE EventHandle
,
3479 OUT PLONG PreviousState OPTIONAL
3486 IN HANDLE EventHandle
,
3487 OUT PLONG PreviousState OPTIONAL
3493 IN HANDLE EventPairHandle
3500 IN HANDLE EventPairHandle
3504 NtSetHighWaitLowEventPair(
3505 IN HANDLE EventPairHandle
3511 ZwSetHighWaitLowEventPair(
3512 IN HANDLE EventPairHandle
3518 NtSetInformationFile(
3519 IN HANDLE FileHandle
,
3520 IN PIO_STATUS_BLOCK IoStatusBlock
,
3521 IN PVOID FileInformation
,
3523 IN FILE_INFORMATION_CLASS FileInformationClass
3529 ZwSetInformationFile(
3530 IN HANDLE FileHandle
,
3531 IN PIO_STATUS_BLOCK IoStatusBlock
,
3532 IN PVOID FileInformation
,
3534 IN FILE_INFORMATION_CLASS FileInformationClass
3539 NtSetInformationJobObject(
3541 JOBOBJECTINFOCLASS JobInformationClass
,
3542 PVOID JobInformation
,
3543 ULONG JobInformationLength
3549 ZwSetInformationJobObject(
3551 JOBOBJECTINFOCLASS JobInformationClass
,
3552 PVOID JobInformation
,
3553 ULONG JobInformationLength
3558 NtSetInformationKey(
3559 IN HANDLE KeyHandle
,
3560 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3561 IN PVOID KeyInformation
,
3562 IN ULONG KeyInformationLength
3568 ZwSetInformationKey(
3569 IN HANDLE KeyHandle
,
3570 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3571 IN PVOID KeyInformation
,
3572 IN ULONG KeyInformationLength
3577 NtSetInformationObject(
3578 IN HANDLE ObjectHandle
,
3579 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3580 IN PVOID ObjectInformation
,
3587 ZwSetInformationObject(
3588 IN HANDLE ObjectHandle
,
3589 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3590 IN PVOID ObjectInformation
,
3596 NtSetInformationProcess(
3597 IN HANDLE ProcessHandle
,
3598 IN PROCESSINFOCLASS ProcessInformationClass
,
3599 IN PVOID ProcessInformation
,
3600 IN ULONG ProcessInformationLength
3606 NtSetInformationThread(
3607 IN HANDLE ThreadHandle
,
3608 IN THREADINFOCLASS ThreadInformationClass
,
3609 IN PVOID ThreadInformation
,
3610 IN ULONG ThreadInformationLength
3616 ZwSetInformationThread(
3617 IN HANDLE ThreadHandle
,
3618 IN THREADINFOCLASS ThreadInformationClass
,
3619 IN PVOID ThreadInformation
,
3620 IN ULONG ThreadInformationLength
3626 NtSetInformationToken(
3627 IN HANDLE TokenHandle
,
3628 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3629 OUT PVOID TokenInformation
,
3630 IN ULONG TokenInformationLength
3636 ZwSetInformationToken(
3637 IN HANDLE TokenHandle
,
3638 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3639 OUT PVOID TokenInformation
,
3640 IN ULONG TokenInformationLength
3646 IN HANDLE IoCompletionPortHandle
,
3647 IN PVOID CompletionKey
,
3648 IN PVOID CompletionContext
,
3649 IN NTSTATUS CompletionStatus
,
3650 IN ULONG CompletionInformation
3657 IN HANDLE IoCompletionPortHandle
,
3658 IN PVOID CompletionKey
,
3659 IN PVOID CompletionContext
,
3660 IN NTSTATUS CompletionStatus
,
3661 IN ULONG CompletionInformation
3666 NtSetIntervalProfile(
3668 KPROFILE_SOURCE ClockSource
3674 ZwSetIntervalProfile(
3676 KPROFILE_SOURCE ClockSource
3683 LDT_ENTRY LdtEntry1
,
3703 NtSetLowWaitHighEventPair(
3710 ZwSetLowWaitHighEventPair(
3717 NtSetQuotaInformationFile(
3719 PIO_STATUS_BLOCK IoStatusBlock
,
3727 ZwSetQuotaInformationFile(
3729 PIO_STATUS_BLOCK IoStatusBlock
,
3737 NtSetSecurityObject(
3739 IN SECURITY_INFORMATION SecurityInformation
,
3740 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3746 ZwSetSecurityObject(
3748 IN SECURITY_INFORMATION SecurityInformation
,
3749 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3754 NtSetSystemEnvironmentValue(
3755 IN PUNICODE_STRING VariableName
,
3756 IN PUNICODE_STRING Value
3762 ZwSetSystemEnvironmentValue(
3763 IN PUNICODE_STRING VariableName
,
3764 IN PUNICODE_STRING Value
3769 NtSetSystemInformation(
3770 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3771 IN PVOID SystemInformation
,
3772 IN ULONG SystemInformationLength
3778 ZwSetSystemInformation(
3779 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3780 IN PVOID SystemInformation
,
3781 IN ULONG SystemInformationLength
3787 NtSetSystemPowerState(
3788 IN POWER_ACTION SystemAction
,
3789 IN SYSTEM_POWER_STATE MinSystemState
,
3796 IN PLARGE_INTEGER SystemTime
,
3797 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3804 IN PLARGE_INTEGER SystemTime
,
3805 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3811 IN HANDLE TimerHandle
,
3812 IN PLARGE_INTEGER DueTime
,
3813 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3814 IN PVOID TimerContext
,
3815 IN BOOLEAN WakeTimer
,
3816 IN LONG Period OPTIONAL
,
3817 OUT PBOOLEAN PreviousState OPTIONAL
3822 NtSetTimerResolution(
3823 IN ULONG RequestedResolution
,
3824 IN BOOLEAN SetOrUnset
,
3825 OUT PULONG ActualResolution
3831 ZwSetTimerResolution(
3832 IN ULONG RequestedResolution
,
3833 IN BOOLEAN SetOrUnset
,
3834 OUT PULONG ActualResolution
3853 IN HANDLE KeyHandle
,
3854 IN PUNICODE_STRING ValueName
,
3855 IN ULONG TitleIndex OPTIONAL
,
3865 IN HANDLE KeyHandle
,
3866 IN PUNICODE_STRING ValueName
,
3867 IN ULONG TitleIndex OPTIONAL
,
3876 NtSetVolumeInformationFile(
3877 IN HANDLE FileHandle
,
3878 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3879 IN PVOID FsInformation
,
3881 IN FS_INFORMATION_CLASS FsInformationClass
3887 ZwSetVolumeInformationFile(
3888 IN HANDLE FileHandle
,
3889 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3890 IN PVOID FsInformation
,
3892 IN FS_INFORMATION_CLASS FsInformationClass
3898 IN SHUTDOWN_ACTION Action
3905 IN SHUTDOWN_ACTION Action
3910 NtSignalAndWaitForSingleObject(
3911 IN HANDLE SignalObject
,
3912 IN HANDLE WaitObject
,
3913 IN BOOLEAN Alertable
,
3914 IN PLARGE_INTEGER Time
3920 ZwSignalAndWaitForSingleObject(
3921 IN HANDLE SignalObject
,
3922 IN HANDLE WaitObject
,
3923 IN BOOLEAN Alertable
,
3924 IN PLARGE_INTEGER Time
3930 HANDLE ProfileHandle
3937 HANDLE ProfileHandle
3943 HANDLE ProfileHandle
3950 HANDLE ProfileHandle
3956 IN HANDLE ProcessHandle
3963 IN HANDLE ProcessHandle
3969 IN HANDLE ThreadHandle
,
3970 IN PULONG PreviousSuspendCount
3977 IN HANDLE ThreadHandle
,
3978 IN PULONG PreviousSuspendCount
3983 NtSystemDebugControl(
3984 DEBUG_CONTROL_CODE ControlCode
,
3986 ULONG InputBufferLength
,
3988 ULONG OutputBufferLength
,
3995 IN HANDLE ProcessHandle
,
3996 IN NTSTATUS ExitStatus
4003 IN HANDLE ProcessHandle
,
4004 IN NTSTATUS ExitStatus
4010 IN HANDLE ThreadHandle
,
4011 IN NTSTATUS ExitStatus
4018 IN HANDLE ThreadHandle
,
4019 IN NTSTATUS ExitStatus
4024 NtTerminateJobObject(
4032 ZwTerminateJobObject(
4053 IN ULONG TraceHandle
,
4055 IN ULONG TraceHeaderLength
,
4056 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
4063 IN ULONG TraceHandle
,
4065 IN ULONG TraceHeaderLength
,
4066 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
4071 NtTranslateFilePath(
4080 ZwTranslateFilePath(
4089 IN PUNICODE_STRING DriverServiceName
4096 IN PUNICODE_STRING DriverServiceName
4102 IN POBJECT_ATTRIBUTES KeyObjectAttributes
4109 IN POBJECT_ATTRIBUTES KeyObjectAttributes
4116 IN HANDLE FileHandle
,
4117 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4118 IN PLARGE_INTEGER ByteOffset
,
4119 IN PLARGE_INTEGER Lenght
,
4120 OUT ULONG Key OPTIONAL
4127 IN HANDLE FileHandle
,
4128 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4129 IN PLARGE_INTEGER ByteOffset
,
4130 IN PLARGE_INTEGER Lenght
,
4131 OUT ULONG Key OPTIONAL
4136 NtUnlockVirtualMemory(
4137 IN HANDLE ProcessHandle
,
4138 IN PVOID BaseAddress
,
4139 IN ULONG NumberOfBytesToUnlock
,
4140 OUT PULONG NumberOfBytesUnlocked OPTIONAL
4146 ZwUnlockVirtualMemory(
4147 IN HANDLE ProcessHandle
,
4148 IN PVOID BaseAddress
,
4149 IN ULONG NumberOfBytesToUnlock
,
4150 OUT PULONG NumberOfBytesUnlocked OPTIONAL
4155 NtUnmapViewOfSection(
4156 IN HANDLE ProcessHandle
,
4157 IN PVOID BaseAddress
4163 ZwUnmapViewOfSection(
4164 IN HANDLE ProcessHandle
,
4165 IN PVOID BaseAddress
4178 IN ULONG RoutineIndex
,
4180 IN ULONG ArgumentLength
,
4181 OUT PVOID
* Result OPTIONAL
,
4182 OUT PULONG ResultLength OPTIONAL
4187 NtWaitForMultipleObjects(
4190 IN WAIT_TYPE WaitType
,
4191 IN BOOLEAN Alertable
,
4192 IN PLARGE_INTEGER Time
4198 ZwWaitForMultipleObjects(
4201 IN WAIT_TYPE WaitType
,
4202 IN BOOLEAN Alertable
,
4203 IN PLARGE_INTEGER Time
4208 NtWaitForSingleObject(
4210 IN BOOLEAN Alertable
,
4211 IN PLARGE_INTEGER Time
4217 ZwWaitForSingleObject(
4219 IN BOOLEAN Alertable
,
4220 IN PLARGE_INTEGER Time
4225 NtWaitHighEventPair(
4226 IN HANDLE EventPairHandle
4232 ZwWaitHighEventPair(
4233 IN HANDLE EventPairHandle
4239 IN HANDLE EventPairHandle
4246 IN HANDLE EventPairHandle
4253 IN HANDLE FileHandle
,
4254 IN HANDLE Event OPTIONAL
,
4255 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4256 IN PVOID ApcContext OPTIONAL
,
4257 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4260 IN PLARGE_INTEGER ByteOffset
,
4261 IN PULONG Key OPTIONAL
4268 IN HANDLE FileHandle
,
4269 IN HANDLE Event OPTIONAL
,
4270 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4271 IN PVOID ApcContext OPTIONAL
,
4272 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4275 IN PLARGE_INTEGER ByteOffset
,
4276 IN PULONG Key OPTIONAL
4282 IN HANDLE FileHandle
,
4283 IN HANDLE Event OPTIONAL
,
4284 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4285 IN PVOID ApcContext OPTIONAL
,
4286 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4287 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
4288 IN ULONG BufferLength
,
4289 IN PLARGE_INTEGER ByteOffset
,
4290 IN PULONG Key OPTIONAL
4297 IN HANDLE FileHandle
,
4298 IN HANDLE Event OPTIONAL
,
4299 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4300 IN PVOID ApcContext OPTIONAL
,
4301 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4302 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
4303 IN ULONG BufferLength
,
4304 IN PLARGE_INTEGER ByteOffset
,
4305 IN PULONG Key OPTIONAL
4312 PPORT_MESSAGE Message
,
4324 PPORT_MESSAGE Message
,
4333 NtWriteVirtualMemory(
4334 IN HANDLE ProcessHandle
,
4335 IN PVOID BaseAddress
,
4337 IN ULONG NumberOfBytesToWrite
,
4338 OUT PULONG NumberOfBytesWritten
4344 ZwWriteVirtualMemory(
4345 IN HANDLE ProcessHandle
,
4346 IN PVOID BaseAddress
,
4348 IN ULONG NumberOfBytesToWrite
,
4349 OUT PULONG NumberOfBytesWritten