2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
16 /* FUNCTION TYPES ************************************************************/
18 /* PROTOTYPES ****************************************************************/
24 HANDLE NamedPortHandle
,
25 PPORT_MESSAGE ServerReply
,
28 PREMOTE_PORT_VIEW ReadMap
34 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
35 IN HANDLE ClientToken
,
36 IN ACCESS_MASK DesiredAcces
,
37 IN PGENERIC_MAPPING GenericMapping
,
38 OUT PPRIVILEGE_SET PrivilegeSet
,
39 OUT PULONG ReturnLength
,
40 OUT PACCESS_MASK GrantedAccess
,
41 OUT PNTSTATUS AccessStatus
47 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
48 IN HANDLE ClientToken
,
49 IN ACCESS_MASK DesiredAcces
,
50 IN PGENERIC_MAPPING GenericMapping
,
51 OUT PPRIVILEGE_SET PrivilegeSet
,
52 OUT PULONG ReturnLength
,
53 OUT PACCESS_MASK GrantedAccess
,
54 OUT PNTSTATUS AccessStatus
59 NtAccessCheckAndAuditAlarm(
60 IN PUNICODE_STRING SubsystemName
,
61 IN PHANDLE ObjectHandle
,
62 IN PUNICODE_STRING ObjectTypeName
,
63 IN PUNICODE_STRING ObjectName
,
64 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
65 IN ACCESS_MASK DesiredAccess
,
66 IN PGENERIC_MAPPING GenericMapping
,
67 IN BOOLEAN ObjectCreation
,
68 OUT PACCESS_MASK GrantedAccess
,
69 OUT PNTSTATUS AccessStatus
,
70 OUT PBOOLEAN GenerateOnClose
77 IN ULONG AtomNameLength
,
85 IN ULONG AtomNameLength
,
92 IN PUNICODE_STRING EntryName
,
93 IN PUNICODE_STRING EntryValue
99 IN PUNICODE_STRING EntryName
,
100 IN PUNICODE_STRING EntryValue
106 IN HANDLE TokenHandle
,
107 IN BOOLEAN ResetToDefault
,
108 IN PTOKEN_GROUPS NewState
,
109 IN ULONG BufferLength
,
110 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
111 OUT PULONG ReturnLength
117 IN HANDLE TokenHandle
,
118 IN BOOLEAN ResetToDefault
,
119 IN PTOKEN_GROUPS NewState
,
120 IN ULONG BufferLength
,
121 OUT PTOKEN_GROUPS PreviousState
,
122 OUT PULONG ReturnLength
127 NtAdjustPrivilegesToken(
128 IN HANDLE TokenHandle
,
129 IN BOOLEAN DisableAllPrivileges
,
130 IN PTOKEN_PRIVILEGES NewState
,
131 IN ULONG BufferLength
,
132 OUT PTOKEN_PRIVILEGES PreviousState
,
133 OUT PULONG ReturnLength
138 ZwAdjustPrivilegesToken(
139 IN HANDLE TokenHandle
,
140 IN BOOLEAN DisableAllPrivileges
,
141 IN PTOKEN_PRIVILEGES NewState
,
142 IN ULONG BufferLength
,
143 OUT PTOKEN_PRIVILEGES PreviousState
,
144 OUT PULONG ReturnLength
150 IN HANDLE ThreadHandle
,
151 OUT PULONG SuspendCount
157 IN HANDLE ThreadHandle
,
158 OUT PULONG SuspendCount
164 IN HANDLE ThreadHandle
170 IN HANDLE ThreadHandle
175 NtAllocateLocallyUniqueId(
176 OUT LUID
*LocallyUniqueId
181 ZwAllocateLocallyUniqueId(
188 PULARGE_INTEGER Time
,
197 PULARGE_INTEGER Time
,
205 NtAllocateVirtualMemory(
206 IN HANDLE ProcessHandle
,
207 IN OUT PVOID
*BaseAddress
,
209 IN OUT PULONG RegionSize
,
210 IN ULONG AllocationType
,
216 ZwAllocateVirtualMemory(
217 IN HANDLE ProcessHandle
,
218 IN OUT PVOID
*BaseAddress
,
220 IN OUT PULONG RegionSize
,
221 IN ULONG AllocationType
,
227 NtAssignProcessToJobObject(
234 ZwAssignProcessToJobObject(
258 IN HANDLE FileHandle
,
259 OUT PIO_STATUS_BLOCK IoStatusBlock
265 IN HANDLE FileHandle
,
266 OUT PIO_STATUS_BLOCK IoStatusBlock
272 IN HANDLE TimerHandle
,
273 OUT PBOOLEAN CurrentState OPTIONAL
279 IN HANDLE EventHandle
285 IN HANDLE EventHandle
292 ACCESS_MASK DesiredAccess
,
293 POBJECT_ATTRIBUTES ObjectAttributes
300 ACCESS_MASK DesiredAccess
,
301 POBJECT_ATTRIBUTES ObjectAttributes
318 NtCloseObjectAuditAlarm(
319 IN PUNICODE_STRING SubsystemName
,
321 IN BOOLEAN GenerateOnClose
326 ZwCloseObjectAuditAlarm(
327 IN PUNICODE_STRING SubsystemName
,
329 IN BOOLEAN GenerateOnClose
334 NtCompleteConnectPort(
340 ZwCompleteConnectPort(
348 PUNICODE_STRING PortName
,
349 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
350 PPORT_VIEW SectionInfo
,
351 PREMOTE_PORT_VIEW MapInfo
,
352 PULONG MaxMessageSize
,
354 PULONG ConnectInfoLength
361 PUNICODE_STRING PortName
,
362 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
363 PPORT_VIEW SectionInfo
,
364 PREMOTE_PORT_VIEW MapInfo
,
365 PULONG MaxMessageSize
,
367 PULONG ConnectInfoLength
386 NtCreateDirectoryObject(
387 OUT PHANDLE DirectoryHandle
,
388 IN ACCESS_MASK DesiredAccess
,
389 IN POBJECT_ATTRIBUTES ObjectAttributes
394 ZwCreateDirectoryObject(
395 OUT PHANDLE DirectoryHandle
,
396 IN ACCESS_MASK DesiredAccess
,
397 IN POBJECT_ATTRIBUTES ObjectAttributes
403 OUT PHANDLE EventHandle
,
404 IN ACCESS_MASK DesiredAccess
,
405 IN POBJECT_ATTRIBUTES ObjectAttributes
,
406 IN EVENT_TYPE EventType
,
407 IN BOOLEAN InitialState
413 OUT PHANDLE EventHandle
,
414 IN ACCESS_MASK DesiredAccess
,
415 IN POBJECT_ATTRIBUTES ObjectAttributes
,
416 IN EVENT_TYPE EventType
,
417 IN BOOLEAN InitialState
423 OUT PHANDLE EventPairHandle
,
424 IN ACCESS_MASK DesiredAccess
,
425 IN POBJECT_ATTRIBUTES ObjectAttributes
431 OUT PHANDLE EventPairHandle
,
432 IN ACCESS_MASK DesiredAccess
,
433 IN POBJECT_ATTRIBUTES ObjectAttributes
439 OUT PHANDLE FileHandle
,
440 IN ACCESS_MASK DesiredAccess
,
441 IN POBJECT_ATTRIBUTES ObjectAttributes
,
442 OUT PIO_STATUS_BLOCK IoStatusBlock
,
443 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
444 IN ULONG FileAttributes
,
445 IN ULONG ShareAccess
,
446 IN ULONG CreateDisposition
,
447 IN ULONG CreateOptions
,
448 IN PVOID EaBuffer OPTIONAL
,
455 OUT PHANDLE FileHandle
,
456 IN ACCESS_MASK DesiredAccess
,
457 IN POBJECT_ATTRIBUTES ObjectAttributes
,
458 OUT PIO_STATUS_BLOCK IoStatusBlock
,
459 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
460 IN ULONG FileAttributes
,
461 IN ULONG ShareAccess
,
462 IN ULONG CreateDisposition
,
463 IN ULONG CreateOptions
,
464 IN PVOID EaBuffer OPTIONAL
,
470 NtCreateIoCompletion(
471 OUT PHANDLE IoCompletionHandle
,
472 IN ACCESS_MASK DesiredAccess
,
473 IN POBJECT_ATTRIBUTES ObjectAttributes
,
474 IN ULONG NumberOfConcurrentThreads
479 ZwCreateIoCompletion(
480 OUT PHANDLE IoCompletionHandle
,
481 IN ACCESS_MASK DesiredAccess
,
482 IN POBJECT_ATTRIBUTES ObjectAttributes
,
483 IN ULONG NumberOfConcurrentThreads
489 OUT PHANDLE KeyHandle
,
490 IN ACCESS_MASK DesiredAccess
,
491 IN POBJECT_ATTRIBUTES ObjectAttributes
,
493 IN PUNICODE_STRING Class OPTIONAL
,
494 IN ULONG CreateOptions
,
495 IN PULONG Disposition OPTIONAL
501 OUT PHANDLE KeyHandle
,
502 IN ACCESS_MASK DesiredAccess
,
503 IN POBJECT_ATTRIBUTES ObjectAttributes
,
505 IN PUNICODE_STRING Class OPTIONAL
,
506 IN ULONG CreateOptions
,
507 IN PULONG Disposition OPTIONAL
512 NtCreateMailslotFile(
513 OUT PHANDLE MailSlotFileHandle
,
514 IN ACCESS_MASK DesiredAccess
,
515 IN POBJECT_ATTRIBUTES ObjectAttributes
,
516 OUT PIO_STATUS_BLOCK IoStatusBlock
,
517 IN ULONG FileAttributes
,
518 IN ULONG ShareAccess
,
519 IN ULONG MaxMessageSize
,
520 IN PLARGE_INTEGER TimeOut
525 ZwCreateMailslotFile(
526 OUT PHANDLE MailSlotFileHandle
,
527 IN ACCESS_MASK DesiredAccess
,
528 IN POBJECT_ATTRIBUTES ObjectAttributes
,
529 OUT PIO_STATUS_BLOCK IoStatusBlock
,
530 IN ULONG FileAttributes
,
531 IN ULONG ShareAccess
,
532 IN ULONG MaxMessageSize
,
533 IN PLARGE_INTEGER TimeOut
539 OUT PHANDLE MutantHandle
,
540 IN ACCESS_MASK DesiredAccess
,
541 IN POBJECT_ATTRIBUTES ObjectAttributes
,
542 IN BOOLEAN InitialOwner
548 OUT PHANDLE MutantHandle
,
549 IN ACCESS_MASK DesiredAccess
,
550 IN POBJECT_ATTRIBUTES ObjectAttributes
,
551 IN BOOLEAN InitialOwner
556 NtCreateNamedPipeFile(
557 OUT PHANDLE NamedPipeFileHandle
,
558 IN ACCESS_MASK DesiredAccess
,
559 IN POBJECT_ATTRIBUTES ObjectAttributes
,
560 OUT PIO_STATUS_BLOCK IoStatusBlock
,
561 IN ULONG ShareAccess
,
562 IN ULONG CreateDisposition
,
563 IN ULONG CreateOptions
,
564 IN ULONG WriteModeMessage
,
565 IN ULONG ReadModeMessage
,
566 IN ULONG NonBlocking
,
567 IN ULONG MaxInstances
,
568 IN ULONG InBufferSize
,
569 IN ULONG OutBufferSize
,
570 IN PLARGE_INTEGER DefaultTimeOut
575 ZwCreateNamedPipeFile(
576 OUT PHANDLE NamedPipeFileHandle
,
577 IN ACCESS_MASK DesiredAccess
,
578 IN POBJECT_ATTRIBUTES ObjectAttributes
,
579 OUT PIO_STATUS_BLOCK IoStatusBlock
,
580 IN ULONG ShareAccess
,
581 IN ULONG CreateDisposition
,
582 IN ULONG CreateOptions
,
583 IN ULONG WriteModeMessage
,
584 IN ULONG ReadModeMessage
,
585 IN ULONG NonBlocking
,
586 IN ULONG MaxInstances
,
587 IN ULONG InBufferSize
,
588 IN ULONG OutBufferSize
,
589 IN PLARGE_INTEGER DefaultTimeOut
595 IN PUNICODE_STRING FileName
,
596 IN PLARGE_INTEGER InitialSize
,
597 IN PLARGE_INTEGER MaxiumSize
,
604 IN PUNICODE_STRING FileName
,
605 IN PLARGE_INTEGER InitialSize
,
606 IN PLARGE_INTEGER MaxiumSize
,
614 POBJECT_ATTRIBUTES ObjectAttributes
,
615 ULONG MaxConnectInfoLength
,
617 ULONG NPMessageQueueSize OPTIONAL
624 POBJECT_ATTRIBUTES ObjectAttributes
,
625 ULONG MaxConnectInfoLength
,
627 ULONG NPMessageQueueSize OPTIONAL
633 OUT PHANDLE ProcessHandle
,
634 IN ACCESS_MASK DesiredAccess
,
635 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
636 IN HANDLE ParentProcess
,
637 IN BOOLEAN InheritObjectTable
,
638 IN HANDLE SectionHandle OPTIONAL
,
639 IN HANDLE DebugPort OPTIONAL
,
640 IN HANDLE ExceptionPort OPTIONAL
646 OUT PHANDLE ProcessHandle
,
647 IN ACCESS_MASK DesiredAccess
,
648 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
649 IN HANDLE ParentProcess
,
650 IN BOOLEAN InheritObjectTable
,
651 IN HANDLE SectionHandle OPTIONAL
,
652 IN HANDLE DebugPort OPTIONAL
,
653 IN HANDLE ExceptionPort OPTIONAL
659 OUT PHANDLE ProfileHandle
,
660 IN HANDLE ProcessHandle
,
663 IN ULONG Granularity
,
665 IN ULONG ProfilingSize
,
666 IN KPROFILE_SOURCE Source
,
667 IN KAFFINITY ProcessorMask
673 OUT PHANDLE ProfileHandle
,
674 IN POBJECT_ATTRIBUTES ObjectAttributes
,
677 IN ULONG Granularity
,
679 IN ULONG ProfilingSize
,
680 IN ULONG ClockSource
,
681 IN ULONG ProcessorMask
687 OUT PHANDLE SectionHandle
,
688 IN ACCESS_MASK DesiredAccess
,
689 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
690 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
691 IN ULONG SectionPageProtection OPTIONAL
,
692 IN ULONG AllocationAttributes
,
693 IN HANDLE FileHandle OPTIONAL
699 OUT PHANDLE SectionHandle
,
700 IN ACCESS_MASK DesiredAccess
,
701 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
702 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
703 IN ULONG SectionPageProtection OPTIONAL
,
704 IN ULONG AllocationAttributes
,
705 IN HANDLE FileHandle OPTIONAL
711 OUT PHANDLE SemaphoreHandle
,
712 IN ACCESS_MASK DesiredAccess
,
713 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
714 IN LONG InitialCount
,
721 OUT PHANDLE SemaphoreHandle
,
722 IN ACCESS_MASK DesiredAccess
,
723 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
724 IN LONG InitialCount
,
730 NtCreateSymbolicLinkObject(
731 OUT PHANDLE SymbolicLinkHandle
,
732 IN ACCESS_MASK DesiredAccess
,
733 IN POBJECT_ATTRIBUTES ObjectAttributes
,
734 IN PUNICODE_STRING Name
739 ZwCreateSymbolicLinkObject(
740 OUT PHANDLE SymbolicLinkHandle
,
741 IN ACCESS_MASK DesiredAccess
,
742 IN POBJECT_ATTRIBUTES ObjectAttributes
,
743 IN PUNICODE_STRING Name
749 OUT PHANDLE ThreadHandle
,
750 IN ACCESS_MASK DesiredAccess
,
751 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
752 IN HANDLE ProcessHandle
,
753 OUT PCLIENT_ID ClientId
,
754 IN PCONTEXT ThreadContext
,
755 IN PINITIAL_TEB UserStack
,
756 IN BOOLEAN CreateSuspended
762 OUT PHANDLE ThreadHandle
,
763 IN ACCESS_MASK DesiredAccess
,
764 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
765 IN HANDLE ProcessHandle
,
766 OUT PCLIENT_ID ClientId
,
767 IN PCONTEXT ThreadContext
,
768 IN PINITIAL_TEB UserStack
,
769 IN BOOLEAN CreateSuspended
775 OUT PHANDLE TimerHandle
,
776 IN ACCESS_MASK DesiredAccess
,
777 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
778 IN TIMER_TYPE TimerType
784 OUT PHANDLE TimerHandle
,
785 IN ACCESS_MASK DesiredAccess
,
786 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
787 IN TIMER_TYPE TimerType
793 OUT PHANDLE TokenHandle
,
794 IN ACCESS_MASK DesiredAccess
,
795 IN POBJECT_ATTRIBUTES ObjectAttributes
,
796 IN TOKEN_TYPE TokenType
,
797 IN PLUID AuthenticationId
,
798 IN PLARGE_INTEGER ExpirationTime
,
799 IN PTOKEN_USER TokenUser
,
800 IN PTOKEN_GROUPS TokenGroups
,
801 IN PTOKEN_PRIVILEGES TokenPrivileges
,
802 IN PTOKEN_OWNER TokenOwner
,
803 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
804 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
805 IN PTOKEN_SOURCE TokenSource
811 OUT PHANDLE TokenHandle
,
812 IN ACCESS_MASK DesiredAccess
,
813 IN POBJECT_ATTRIBUTES ObjectAttributes
,
814 IN TOKEN_TYPE TokenType
,
815 IN PLUID AuthenticationId
,
816 IN PLARGE_INTEGER ExpirationTime
,
817 IN PTOKEN_USER TokenUser
,
818 IN PTOKEN_GROUPS TokenGroups
,
819 IN PTOKEN_PRIVILEGES TokenPrivileges
,
820 IN PTOKEN_OWNER TokenOwner
,
821 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
822 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
823 IN PTOKEN_SOURCE TokenSource
828 NtCreateWaitablePort(
830 POBJECT_ATTRIBUTES ObjectAttributes
,
831 ULONG MaxConnectInfoLength
,
833 ULONG NPMessageQueueSize OPTIONAL
838 ZwCreateWaitablePort(
840 POBJECT_ATTRIBUTES ObjectAttributes
,
841 ULONG MaxConnectInfoLength
,
843 ULONG NPMessageQueueSize OPTIONAL
849 IN BOOLEAN Alertable
,
850 IN LARGE_INTEGER
*Interval
856 IN BOOLEAN Alertable
,
857 IN LARGE_INTEGER
*Interval
875 IN PUNICODE_STRING EntryName
,
876 IN PUNICODE_STRING EntryValue
882 IN PUNICODE_STRING EntryName
,
883 IN PUNICODE_STRING EntryValue
889 IN POBJECT_ATTRIBUTES ObjectAttributes
895 IN POBJECT_ATTRIBUTES ObjectAttributes
912 NtDeleteObjectAuditAlarm(
913 IN PUNICODE_STRING SubsystemName
,
915 IN BOOLEAN GenerateOnClose
920 ZwDeleteObjectAuditAlarm(
921 IN PUNICODE_STRING SubsystemName
,
923 IN BOOLEAN GenerateOnClose
930 IN PUNICODE_STRING ValueName
937 IN PUNICODE_STRING ValueName
942 NtDeviceIoControlFile(
943 IN HANDLE DeviceHandle
,
944 IN HANDLE Event OPTIONAL
,
945 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
946 IN PVOID UserApcContext OPTIONAL
,
947 OUT PIO_STATUS_BLOCK IoStatusBlock
,
948 IN ULONG IoControlCode
,
949 IN PVOID InputBuffer
,
950 IN ULONG InputBufferSize
,
951 OUT PVOID OutputBuffer
,
952 IN ULONG OutputBufferSize
957 ZwDeviceIoControlFile(
958 IN HANDLE DeviceHandle
,
959 IN HANDLE Event OPTIONAL
,
960 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
961 IN PVOID UserApcContext OPTIONAL
,
962 OUT PIO_STATUS_BLOCK IoStatusBlock
,
963 IN ULONG IoControlCode
,
964 IN PVOID InputBuffer
,
965 IN ULONG InputBufferSize
,
966 OUT PVOID OutputBuffer
,
967 IN ULONG OutputBufferSize
973 IN PUNICODE_STRING DisplayString
979 IN PUNICODE_STRING DisplayString
985 IN HANDLE SourceProcessHandle
,
986 IN HANDLE SourceHandle
,
987 IN HANDLE TargetProcessHandle
,
988 OUT PHANDLE TargetHandle
,
989 IN ACCESS_MASK DesiredAccess
,
990 IN ULONG HandleAttributes
,
997 IN HANDLE SourceProcessHandle
,
998 IN HANDLE SourceHandle
,
999 IN HANDLE TargetProcessHandle
,
1000 OUT PHANDLE TargetHandle
,
1001 IN ACCESS_MASK DesiredAccess
,
1002 IN ULONG HandleAttributes
,
1009 IN HANDLE ExistingTokenHandle
,
1010 IN ACCESS_MASK DesiredAccess
,
1011 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1012 IN BOOLEAN EffectiveOnly
,
1013 IN TOKEN_TYPE TokenType
,
1014 OUT PHANDLE NewTokenHandle
1019 NtEnumerateBootEntries(
1026 ZwEnumerateBootEntries(
1034 IN HANDLE KeyHandle
,
1036 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1037 OUT PVOID KeyInformation
,
1039 OUT PULONG ResultLength
1045 IN HANDLE KeyHandle
,
1047 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1048 OUT PVOID KeyInformation
,
1050 OUT PULONG ResultLength
1055 NtEnumerateValueKey(
1056 IN HANDLE KeyHandle
,
1058 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1059 OUT PVOID KeyValueInformation
,
1061 OUT PULONG ResultLength
1066 ZwEnumerateValueKey(
1067 IN HANDLE KeyHandle
,
1069 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1070 OUT PVOID KeyValueInformation
,
1072 OUT PULONG ResultLength
1078 IN HANDLE SectionHandle
,
1079 IN PLARGE_INTEGER NewMaximumSize
1085 IN HANDLE SectionHandle
,
1086 IN PLARGE_INTEGER NewMaximumSize
1093 IN ULONG AtomNameLength
,
1094 OUT PRTL_ATOM Atom OPTIONAL
1101 IN ULONG AtomNameLength
,
1102 OUT PRTL_ATOM Atom OPTIONAL
1108 IN HANDLE FileHandle
,
1109 OUT PIO_STATUS_BLOCK IoStatusBlock
1115 IN HANDLE FileHandle
,
1116 OUT PIO_STATUS_BLOCK IoStatusBlock
1121 NtFlushInstructionCache(
1122 IN HANDLE ProcessHandle
,
1123 IN PVOID BaseAddress
,
1124 IN UINT NumberOfBytesToFlush
1141 NtFlushVirtualMemory(
1142 IN HANDLE ProcessHandle
,
1143 IN PVOID BaseAddress
,
1144 IN ULONG NumberOfBytesToFlush
,
1145 OUT PULONG NumberOfBytesFlushed OPTIONAL
1150 NtFlushWriteBuffer(VOID
);
1154 ZwFlushWriteBuffer(VOID
);
1158 NtFreeVirtualMemory(
1159 IN HANDLE ProcessHandle
,
1160 IN PVOID
*BaseAddress
,
1161 IN PULONG RegionSize
,
1167 ZwFreeVirtualMemory(
1168 IN HANDLE ProcessHandle
,
1169 IN PVOID
*BaseAddress
,
1170 IN PULONG RegionSize
,
1177 IN HANDLE DeviceHandle
,
1178 IN HANDLE Event OPTIONAL
,
1179 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1180 IN PVOID ApcContext OPTIONAL
,
1181 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1182 IN ULONG IoControlCode
,
1183 IN PVOID InputBuffer
,
1184 IN ULONG InputBufferSize
,
1185 OUT PVOID OutputBuffer
,
1186 IN ULONG OutputBufferSize
1192 IN HANDLE DeviceHandle
,
1193 IN HANDLE Event OPTIONAL
,
1194 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1195 IN PVOID ApcContext OPTIONAL
,
1196 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1197 IN ULONG IoControlCode
,
1198 IN PVOID InputBuffer
,
1199 IN ULONG InputBufferSize
,
1200 OUT PVOID OutputBuffer
,
1201 IN ULONG OutputBufferSize
1207 IN HANDLE ThreadHandle
,
1208 OUT PCONTEXT Context
1214 IN HANDLE ThreadHandle
,
1215 OUT PCONTEXT Context
1223 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1241 NtImpersonateClientOfPort(
1243 PPORT_MESSAGE ClientMessage
1248 ZwImpersonateClientOfPort(
1250 PPORT_MESSAGE ClientMessage
1255 NtImpersonateThread(
1256 IN HANDLE ThreadHandle
,
1257 IN HANDLE ThreadToImpersonate
,
1258 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1263 ZwImpersonateThread(
1264 IN HANDLE ThreadHandle
,
1265 IN HANDLE ThreadToImpersonate
,
1266 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1271 NtInitiatePowerAction(
1272 POWER_ACTION SystemAction
,
1273 SYSTEM_POWER_STATE MinSystemState
,
1275 BOOLEAN Asynchronous
1280 ZwInitiatePowerAction(
1281 POWER_ACTION SystemAction
,
1282 SYSTEM_POWER_STATE MinSystemState
,
1284 BOOLEAN Asynchronous
1289 NtInitializeRegistry(
1295 ZwInitializeRegistry(
1302 IN HANDLE ProcessHandle
,
1303 IN HANDLE JobHandle OPTIONAL
1309 IN HANDLE ProcessHandle
,
1310 IN HANDLE JobHandle OPTIONAL
1315 NtListenPort(HANDLE PortHandle
,
1316 PPORT_MESSAGE LpcMessage
1321 ZwListenPort(HANDLE PortHandle
,
1322 PPORT_MESSAGE LpcMessage
1328 IN PUNICODE_STRING DriverServiceName
1334 IN PUNICODE_STRING DriverServiceName
1340 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1341 IN POBJECT_ATTRIBUTES FileObjectAttributes
1347 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1348 IN POBJECT_ATTRIBUTES FileObjectAttributes
1354 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1355 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1362 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1363 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1370 IN HANDLE FileHandle
,
1371 IN HANDLE Event OPTIONAL
,
1372 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1373 IN PVOID ApcContext OPTIONAL
,
1374 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1375 IN PLARGE_INTEGER ByteOffset
,
1376 IN PLARGE_INTEGER Length
,
1378 IN BOOLEAN FailImmediatedly
,
1379 IN BOOLEAN ExclusiveLock
1385 IN HANDLE FileHandle
,
1386 IN HANDLE Event OPTIONAL
,
1387 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1388 IN PVOID ApcContext OPTIONAL
,
1389 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1390 IN PLARGE_INTEGER ByteOffset
,
1391 IN PLARGE_INTEGER Length
,
1393 IN BOOLEAN FailImmediatedly
,
1394 IN BOOLEAN ExclusiveLock
1399 NtLockVirtualMemory(
1400 HANDLE ProcessHandle
,
1402 ULONG NumberOfBytesToLock
,
1403 PULONG NumberOfBytesLocked
1408 ZwLockVirtualMemory(
1409 HANDLE ProcessHandle
,
1411 ULONG NumberOfBytesToLock
,
1412 PULONG NumberOfBytesLocked
1417 NtMakePermanentObject(
1423 ZwMakePermanentObject(
1429 NtMakeTemporaryObject(
1435 ZwMakeTemporaryObject(
1442 IN HANDLE SectionHandle
,
1443 IN HANDLE ProcessHandle
,
1444 IN OUT PVOID
*BaseAddress
,
1446 IN ULONG CommitSize
,
1447 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1448 IN OUT PULONG ViewSize
,
1449 IN SECTION_INHERIT InheritDisposition
,
1450 IN ULONG AllocationType
,
1451 IN ULONG AccessProtection
1457 IN HANDLE SectionHandle
,
1458 IN HANDLE ProcessHandle
,
1459 IN OUT PVOID
*BaseAddress
,
1461 IN ULONG CommitSize
,
1462 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1463 IN OUT PULONG ViewSize
,
1464 IN SECTION_INHERIT InheritDisposition
,
1465 IN ULONG AllocationType
,
1466 IN ULONG AccessProtection
1471 NtNotifyChangeDirectoryFile(
1472 IN HANDLE FileHandle
,
1473 IN HANDLE Event OPTIONAL
,
1474 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1475 IN PVOID ApcContext OPTIONAL
,
1476 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1478 IN ULONG BufferSize
,
1479 IN ULONG CompletionFilter
,
1480 IN BOOLEAN WatchTree
1485 ZwNotifyChangeDirectoryFile(
1486 IN HANDLE FileHandle
,
1487 IN HANDLE Event OPTIONAL
,
1488 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1489 IN PVOID ApcContext OPTIONAL
,
1490 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1492 IN ULONG BufferSize
,
1493 IN ULONG CompletionFilter
,
1494 IN BOOLEAN WatchTree
1500 IN HANDLE KeyHandle
,
1502 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1503 IN PVOID ApcContext OPTIONAL
,
1504 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1505 IN ULONG CompletionFilter
,
1506 IN BOOLEAN Asynchroneous
,
1507 OUT PVOID ChangeBuffer
,
1509 IN BOOLEAN WatchSubtree
1515 IN HANDLE KeyHandle
,
1517 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1518 IN PVOID ApcContext OPTIONAL
,
1519 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1520 IN ULONG CompletionFilter
,
1521 IN BOOLEAN Asynchroneous
,
1522 OUT PVOID ChangeBuffer
,
1524 IN BOOLEAN WatchSubtree
1529 NtOpenDirectoryObject(
1530 OUT PHANDLE FileHandle
,
1531 IN ACCESS_MASK DesiredAccess
,
1532 IN POBJECT_ATTRIBUTES ObjectAttributes
1537 ZwOpenDirectoryObject(
1538 OUT PHANDLE FileHandle
,
1539 IN ACCESS_MASK DesiredAccess
,
1540 IN POBJECT_ATTRIBUTES ObjectAttributes
1546 OUT PHANDLE EventHandle
,
1547 IN ACCESS_MASK DesiredAccess
,
1548 IN POBJECT_ATTRIBUTES ObjectAttributes
1554 OUT PHANDLE EventHandle
,
1555 IN ACCESS_MASK DesiredAccess
,
1556 IN POBJECT_ATTRIBUTES ObjectAttributes
1562 OUT PHANDLE EventPairHandle
,
1563 IN ACCESS_MASK DesiredAccess
,
1564 IN POBJECT_ATTRIBUTES ObjectAttributes
1570 OUT PHANDLE EventPairHandle
,
1571 IN ACCESS_MASK DesiredAccess
,
1572 IN POBJECT_ATTRIBUTES ObjectAttributes
1578 OUT PHANDLE FileHandle
,
1579 IN ACCESS_MASK DesiredAccess
,
1580 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1581 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1582 IN ULONG ShareAccess
,
1583 IN ULONG OpenOptions
1589 OUT PHANDLE FileHandle
,
1590 IN ACCESS_MASK DesiredAccess
,
1591 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1592 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1593 IN ULONG ShareAccess
,
1594 IN ULONG OpenOptions
1600 OUT PHANDLE CompetionPort
,
1601 IN ACCESS_MASK DesiredAccess
,
1602 IN POBJECT_ATTRIBUTES ObjectAttributes
1608 OUT PHANDLE CompetionPort
,
1609 IN ACCESS_MASK DesiredAccess
,
1610 IN POBJECT_ATTRIBUTES ObjectAttributes
1617 ACCESS_MASK DesiredAccess
,
1618 POBJECT_ATTRIBUTES ObjectAttributes
1625 ACCESS_MASK DesiredAccess
,
1626 POBJECT_ATTRIBUTES ObjectAttributes
1632 OUT PHANDLE KeyHandle
,
1633 IN ACCESS_MASK DesiredAccess
,
1634 IN POBJECT_ATTRIBUTES ObjectAttributes
1640 OUT PHANDLE KeyHandle
,
1641 IN ACCESS_MASK DesiredAccess
,
1642 IN POBJECT_ATTRIBUTES ObjectAttributes
1648 OUT PHANDLE MutantHandle
,
1649 IN ACCESS_MASK DesiredAccess
,
1650 IN POBJECT_ATTRIBUTES ObjectAttributes
1656 OUT PHANDLE MutantHandle
,
1657 IN ACCESS_MASK DesiredAccess
,
1658 IN POBJECT_ATTRIBUTES ObjectAttributes
1663 NtOpenObjectAuditAlarm(
1664 IN PUNICODE_STRING SubsystemName
,
1666 IN PUNICODE_STRING ObjectTypeName
,
1667 IN PUNICODE_STRING ObjectName
,
1668 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1669 IN HANDLE ClientToken
,
1670 IN ULONG DesiredAccess
,
1671 IN ULONG GrantedAccess
,
1672 IN PPRIVILEGE_SET Privileges
,
1673 IN BOOLEAN ObjectCreation
,
1674 IN BOOLEAN AccessGranted
,
1675 OUT PBOOLEAN GenerateOnClose
1680 ZwOpenObjectAuditAlarm(
1681 IN PUNICODE_STRING SubsystemName
,
1683 IN PUNICODE_STRING ObjectTypeName
,
1684 IN PUNICODE_STRING ObjectName
,
1685 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1686 IN HANDLE ClientToken
,
1687 IN ULONG DesiredAccess
,
1688 IN ULONG GrantedAccess
,
1689 IN PPRIVILEGE_SET Privileges
,
1690 IN BOOLEAN ObjectCreation
,
1691 IN BOOLEAN AccessGranted
,
1692 OUT PBOOLEAN GenerateOnClose
1698 OUT PHANDLE ProcessHandle
,
1699 IN ACCESS_MASK DesiredAccess
,
1700 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1701 IN PCLIENT_ID ClientId
1707 OUT PHANDLE ProcessHandle
,
1708 IN ACCESS_MASK DesiredAccess
,
1709 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1710 IN PCLIENT_ID ClientId
1716 IN HANDLE ProcessHandle
,
1717 IN ACCESS_MASK DesiredAccess
,
1718 OUT PHANDLE TokenHandle
1724 IN HANDLE ProcessHandle
,
1725 IN ACCESS_MASK DesiredAccess
,
1726 OUT PHANDLE TokenHandle
1731 NtOpenProcessTokenEx(
1732 IN HANDLE ProcessHandle
,
1733 IN ACCESS_MASK DesiredAccess
,
1734 IN ULONG HandleAttributes
,
1735 OUT PHANDLE TokenHandle
1740 ZwOpenProcessTokenEx(
1741 IN HANDLE ProcessHandle
,
1742 IN ACCESS_MASK DesiredAccess
,
1743 IN ULONG HandleAttributes
,
1744 OUT PHANDLE TokenHandle
1750 OUT PHANDLE SectionHandle
,
1751 IN ACCESS_MASK DesiredAccess
,
1752 IN POBJECT_ATTRIBUTES ObjectAttributes
1758 OUT PHANDLE SectionHandle
,
1759 IN ACCESS_MASK DesiredAccess
,
1760 IN POBJECT_ATTRIBUTES ObjectAttributes
1766 OUT PHANDLE SemaphoreHandle
,
1767 IN ACCESS_MASK DesiredAcces
,
1768 IN POBJECT_ATTRIBUTES ObjectAttributes
1774 OUT PHANDLE SemaphoreHandle
,
1775 IN ACCESS_MASK DesiredAcces
,
1776 IN POBJECT_ATTRIBUTES ObjectAttributes
1781 NtOpenSymbolicLinkObject(
1782 OUT PHANDLE SymbolicLinkHandle
,
1783 IN ACCESS_MASK DesiredAccess
,
1784 IN POBJECT_ATTRIBUTES ObjectAttributes
1789 ZwOpenSymbolicLinkObject(
1790 OUT PHANDLE SymbolicLinkHandle
,
1791 IN ACCESS_MASK DesiredAccess
,
1792 IN POBJECT_ATTRIBUTES ObjectAttributes
1798 OUT PHANDLE ThreadHandle
,
1799 IN ACCESS_MASK DesiredAccess
,
1800 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1801 IN PCLIENT_ID ClientId
1807 OUT PHANDLE ThreadHandle
,
1808 IN ACCESS_MASK DesiredAccess
,
1809 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1810 IN PCLIENT_ID ClientId
1816 IN HANDLE ThreadHandle
,
1817 IN ACCESS_MASK DesiredAccess
,
1818 IN BOOLEAN OpenAsSelf
,
1819 OUT PHANDLE TokenHandle
1825 IN HANDLE ThreadHandle
,
1826 IN ACCESS_MASK DesiredAccess
,
1827 IN BOOLEAN OpenAsSelf
,
1828 OUT PHANDLE TokenHandle
1833 NtOpenThreadTokenEx(
1834 IN HANDLE ThreadHandle
,
1835 IN ACCESS_MASK DesiredAccess
,
1836 IN BOOLEAN OpenAsSelf
,
1837 IN ULONG HandleAttributes
,
1838 OUT PHANDLE TokenHandle
1843 ZwOpenThreadTokenEx(
1844 IN HANDLE ThreadHandle
,
1845 IN ACCESS_MASK DesiredAccess
,
1846 IN BOOLEAN OpenAsSelf
,
1847 IN ULONG HandleAttributes
,
1848 OUT PHANDLE TokenHandle
1854 OUT PHANDLE TimerHandle
,
1855 IN ACCESS_MASK DesiredAccess
,
1856 IN POBJECT_ATTRIBUTES ObjectAttributes
1861 OUT PHANDLE TimerHandle
,
1862 IN ACCESS_MASK DesiredAccess
,
1863 IN POBJECT_ATTRIBUTES ObjectAttributes
1869 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
1870 IN OUT PVOID Buffer
,
1877 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1879 ULONG InputBufferLength
,
1881 ULONG OutputBufferLength
1887 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1889 ULONG InputBufferLength
,
1891 ULONG OutputBufferLength
1897 IN HANDLE ClientToken
,
1898 IN PPRIVILEGE_SET RequiredPrivileges
,
1905 IN HANDLE ClientToken
,
1906 IN PPRIVILEGE_SET RequiredPrivileges
,
1912 NtPrivilegedServiceAuditAlarm(
1913 IN PUNICODE_STRING SubsystemName
,
1914 IN PUNICODE_STRING ServiceName
,
1915 IN HANDLE ClientToken
,
1916 IN PPRIVILEGE_SET Privileges
,
1917 IN BOOLEAN AccessGranted
1922 ZwPrivilegedServiceAuditAlarm(
1923 IN PUNICODE_STRING SubsystemName
,
1924 IN PUNICODE_STRING ServiceName
,
1925 IN HANDLE ClientToken
,
1926 IN PPRIVILEGE_SET Privileges
,
1927 IN BOOLEAN AccessGranted
1932 NtPrivilegeObjectAuditAlarm(
1933 IN PUNICODE_STRING SubsystemName
,
1935 IN HANDLE ClientToken
,
1936 IN ULONG DesiredAccess
,
1937 IN PPRIVILEGE_SET Privileges
,
1938 IN BOOLEAN AccessGranted
1943 ZwPrivilegeObjectAuditAlarm(
1944 IN PUNICODE_STRING SubsystemName
,
1946 IN HANDLE ClientToken
,
1947 IN ULONG DesiredAccess
,
1948 IN PPRIVILEGE_SET Privileges
,
1949 IN BOOLEAN AccessGranted
1954 NtProtectVirtualMemory(
1955 IN HANDLE ProcessHandle
,
1956 IN PVOID
*BaseAddress
,
1957 IN ULONG
*NumberOfBytesToProtect
,
1958 IN ULONG NewAccessProtection
,
1959 OUT PULONG OldAccessProtection
1964 ZwProtectVirtualMemory(
1965 IN HANDLE ProcessHandle
,
1966 IN PVOID
*BaseAddress
,
1967 IN ULONG
*NumberOfBytesToProtect
,
1968 IN ULONG NewAccessProtection
,
1969 OUT PULONG OldAccessProtection
1975 IN HANDLE EventHandle
,
1976 IN PLONG PulseCount OPTIONAL
1982 IN HANDLE EventHandle
,
1983 IN PLONG PulseCount OPTIONAL
1988 NtQueryAttributesFile(
1989 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1990 OUT PFILE_BASIC_INFORMATION FileInformation
1995 ZwQueryAttributesFile(
1996 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1997 OUT PFILE_BASIC_INFORMATION FileInformation
2003 NtQueryBootEntryOrder(
2010 ZwQueryBootEntryOrder(
2030 NtQueryDefaultLocale(
2031 IN BOOLEAN UserProfile
,
2032 OUT PLCID DefaultLocaleId
2037 ZwQueryDefaultLocale(
2038 IN BOOLEAN UserProfile
,
2039 OUT PLCID DefaultLocaleId
2044 NtQueryDefaultUILanguage(
2050 ZwQueryDefaultUILanguage(
2056 NtQueryDirectoryFile(
2057 IN HANDLE FileHandle
,
2058 IN HANDLE Event OPTIONAL
,
2059 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2060 IN PVOID ApcContext OPTIONAL
,
2061 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2062 OUT PVOID FileInformation
,
2064 IN FILE_INFORMATION_CLASS FileInformationClass
,
2065 IN BOOLEAN ReturnSingleEntry
,
2066 IN PUNICODE_STRING FileName OPTIONAL
,
2067 IN BOOLEAN RestartScan
2072 ZwQueryDirectoryFile(
2073 IN HANDLE FileHandle
,
2074 IN HANDLE Event OPTIONAL
,
2075 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2076 IN PVOID ApcContext OPTIONAL
,
2077 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2078 OUT PVOID FileInformation
,
2080 IN FILE_INFORMATION_CLASS FileInformationClass
,
2081 IN BOOLEAN ReturnSingleEntry
,
2082 IN PUNICODE_STRING FileName OPTIONAL
,
2083 IN BOOLEAN RestartScan
2088 NtQueryDirectoryObject(
2089 IN HANDLE DirectoryHandle
,
2091 IN ULONG BufferLength
,
2092 IN BOOLEAN ReturnSingleEntry
,
2093 IN BOOLEAN RestartScan
,
2094 IN OUT PULONG Context
,
2095 OUT PULONG ReturnLength OPTIONAL
2100 ZwQueryDirectoryObject(
2101 IN HANDLE DirectoryHandle
,
2103 IN ULONG BufferLength
,
2104 IN BOOLEAN ReturnSingleEntry
,
2105 IN BOOLEAN RestartScan
,
2106 IN OUT PULONG Context
,
2107 OUT PULONG ReturnLength OPTIONAL
2113 IN HANDLE FileHandle
,
2114 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2117 IN BOOLEAN ReturnSingleEntry
,
2118 IN PVOID EaList OPTIONAL
,
2119 IN ULONG EaListLength
,
2120 IN PULONG EaIndex OPTIONAL
,
2121 IN BOOLEAN RestartScan
2127 IN HANDLE FileHandle
,
2128 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2131 IN BOOLEAN ReturnSingleEntry
,
2132 IN PVOID EaList OPTIONAL
,
2133 IN ULONG EaListLength
,
2134 IN PULONG EaIndex OPTIONAL
,
2135 IN BOOLEAN RestartScan
2141 IN HANDLE EventHandle
,
2142 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2143 OUT PVOID EventInformation
,
2144 IN ULONG EventInformationLength
,
2145 OUT PULONG ReturnLength
2150 IN HANDLE EventHandle
,
2151 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2152 OUT PVOID EventInformation
,
2153 IN ULONG EventInformationLength
,
2154 OUT PULONG ReturnLength
2159 NtQueryFullAttributesFile(
2160 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2161 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2166 ZwQueryFullAttributesFile(
2167 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2168 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2173 NtQueryInformationAtom(
2175 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2176 OUT PVOID AtomInformation
,
2177 IN ULONG AtomInformationLength
,
2178 OUT PULONG ReturnLength OPTIONAL
2183 ZwQueryInformationAtom(
2185 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2186 OUT PVOID AtomInformation
,
2187 IN ULONG AtomInformationLength
,
2188 OUT PULONG ReturnLength OPTIONAL
2193 NtQueryInformationFile(
2194 IN HANDLE FileHandle
,
2195 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2196 OUT PVOID FileInformation
,
2198 IN FILE_INFORMATION_CLASS FileInformationClass
2203 ZwQueryInformationFile(
2205 PIO_STATUS_BLOCK IoStatusBlock
,
2206 PVOID FileInformation
,
2208 FILE_INFORMATION_CLASS FileInformationClass
2213 NtQueryInformationJobObject(
2215 JOBOBJECTINFOCLASS JobInformationClass
,
2216 PVOID JobInformation
,
2217 ULONG JobInformationLength
,
2223 ZwQueryInformationJobObject(
2225 JOBOBJECTINFOCLASS JobInformationClass
,
2226 PVOID JobInformation
,
2227 ULONG JobInformationLength
,
2233 NtQueryInformationPort(
2235 CINT PortInformationClass
,
2236 PVOID PortInformation
,
2237 ULONG PortInformationLength
,
2243 ZwQueryInformationPort(
2245 CINT PortInformationClass
,
2246 PVOID PortInformation
,
2247 ULONG PortInformationLength
,
2254 NtQueryInformationProcess(
2255 IN HANDLE ProcessHandle
,
2256 IN PROCESSINFOCLASS ProcessInformationClass
,
2257 OUT PVOID ProcessInformation
,
2258 IN ULONG ProcessInformationLength
,
2259 OUT PULONG ReturnLength OPTIONAL
2264 ZwQueryInformationProcess(
2265 IN HANDLE ProcessHandle
,
2266 IN PROCESSINFOCLASS ProcessInformationClass
,
2267 OUT PVOID ProcessInformation
,
2268 IN ULONG ProcessInformationLength
,
2269 OUT PULONG ReturnLength OPTIONAL
2275 NtQueryInformationThread(
2276 IN HANDLE ThreadHandle
,
2277 IN THREADINFOCLASS ThreadInformationClass
,
2278 OUT PVOID ThreadInformation
,
2279 IN ULONG ThreadInformationLength
,
2280 OUT PULONG ReturnLength
2285 ZwQueryInformationThread(
2286 IN HANDLE ThreadHandle
,
2287 IN THREADINFOCLASS ThreadInformationClass
,
2288 OUT PVOID ThreadInformation
,
2289 IN ULONG ThreadInformationLength
,
2290 OUT PULONG ReturnLength
2295 NtQueryInformationToken(
2296 IN HANDLE TokenHandle
,
2297 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2298 OUT PVOID TokenInformation
,
2299 IN ULONG TokenInformationLength
,
2300 OUT PULONG ReturnLength
2305 ZwQueryInformationToken(
2306 IN HANDLE TokenHandle
,
2307 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2308 OUT PVOID TokenInformation
,
2309 IN ULONG TokenInformationLength
,
2310 OUT PULONG ReturnLength
2315 NtQueryInstallUILanguage(
2321 ZwQueryInstallUILanguage(
2327 NtQueryIntervalProfile(
2328 IN KPROFILE_SOURCE ProfileSource
,
2334 ZwQueryIntervalProfile(
2335 OUT PULONG Interval
,
2336 OUT KPROFILE_SOURCE ClockSource
2341 NtQueryIoCompletion(
2342 IN HANDLE IoCompletionHandle
,
2343 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2344 OUT PVOID IoCompletionInformation
,
2345 IN ULONG IoCompletionInformationLength
,
2346 OUT PULONG ResultLength OPTIONAL
2351 ZwQueryIoCompletion(
2352 IN HANDLE IoCompletionHandle
,
2353 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2354 OUT PVOID IoCompletionInformation
,
2355 IN ULONG IoCompletionInformationLength
,
2356 OUT PULONG ResultLength OPTIONAL
2362 IN HANDLE KeyHandle
,
2363 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2364 OUT PVOID KeyInformation
,
2366 OUT PULONG ResultLength
2372 IN HANDLE KeyHandle
,
2373 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2374 OUT PVOID KeyInformation
,
2376 OUT PULONG ResultLength
2381 NtQueryQuotaInformationFile(
2382 IN HANDLE FileHandle
,
2383 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2386 IN BOOLEAN ReturnSingleEntry
,
2387 IN PVOID SidList OPTIONAL
,
2388 IN ULONG SidListLength
,
2389 IN PSID StartSid OPTIONAL
,
2390 IN BOOLEAN RestartScan
2395 ZwQueryQuotaInformationFile(
2396 IN HANDLE FileHandle
,
2397 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2400 IN BOOLEAN ReturnSingleEntry
,
2401 IN PVOID SidList OPTIONAL
,
2402 IN ULONG SidListLength
,
2403 IN PSID StartSid OPTIONAL
,
2404 IN BOOLEAN RestartScan
2409 NtQueryMultipleValueKey(
2410 IN HANDLE KeyHandle
,
2411 IN OUT PKEY_VALUE_ENTRY ValueList
,
2412 IN ULONG NumberOfValues
,
2414 IN OUT PULONG Length
,
2415 OUT PULONG ReturnLength
2420 ZwQueryMultipleValueKey(
2421 IN HANDLE KeyHandle
,
2422 IN OUT PKEY_VALUE_ENTRY ValueList
,
2423 IN ULONG NumberOfValues
,
2425 IN OUT PULONG Length
,
2426 OUT PULONG ReturnLength
2432 IN HANDLE MutantHandle
,
2433 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2434 OUT PVOID MutantInformation
,
2436 OUT PULONG ResultLength
2442 IN HANDLE MutantHandle
,
2443 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2444 OUT PVOID MutantInformation
,
2446 OUT PULONG ResultLength
2452 IN HANDLE ObjectHandle
,
2453 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2454 OUT PVOID ObjectInformation
,
2456 OUT PULONG ResultLength OPTIONAL
2462 IN HANDLE ObjectHandle
,
2463 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2464 OUT PVOID ObjectInformation
,
2466 OUT PULONG ResultLength OPTIONAL
2471 NtQueryPerformanceCounter(
2472 IN PLARGE_INTEGER Counter
,
2473 IN PLARGE_INTEGER Frequency
2478 ZwQueryPerformanceCounter(
2479 IN PLARGE_INTEGER Counter
,
2480 IN PLARGE_INTEGER Frequency
2486 IN HANDLE SectionHandle
,
2487 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2488 OUT PVOID SectionInformation
,
2490 OUT PULONG ResultLength
2496 IN HANDLE SectionHandle
,
2497 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2498 OUT PVOID SectionInformation
,
2500 OUT PULONG ResultLength
2505 NtQuerySecurityObject(
2507 IN SECURITY_INFORMATION SecurityInformation
,
2508 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2510 OUT PULONG ResultLength
2515 ZwQuerySecurityObject(
2517 IN SECURITY_INFORMATION SecurityInformation
,
2518 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2520 OUT PULONG ResultLength
2526 IN HANDLE SemaphoreHandle
,
2527 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2528 OUT PVOID SemaphoreInformation
,
2530 OUT PULONG ReturnLength
2536 IN HANDLE SemaphoreHandle
,
2537 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2538 OUT PVOID SemaphoreInformation
,
2540 OUT PULONG ReturnLength
2545 NtQuerySymbolicLinkObject(
2546 IN HANDLE SymLinkObjHandle
,
2547 OUT PUNICODE_STRING LinkTarget
,
2548 OUT PULONG DataWritten OPTIONAL
2553 ZwQuerySymbolicLinkObject(
2554 IN HANDLE SymLinkObjHandle
,
2555 OUT PUNICODE_STRING LinkName
,
2556 OUT PULONG DataWritten OPTIONAL
2561 NtQuerySystemEnvironmentValue(
2562 IN PUNICODE_STRING Name
,
2570 ZwQuerySystemEnvironmentValue(
2571 IN PUNICODE_STRING Name
,
2579 NtQuerySystemInformation(
2580 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2581 OUT PVOID SystemInformation
,
2583 OUT PULONG ResultLength
2588 ZwQuerySystemInformation(
2589 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2590 OUT PVOID SystemInformation
,
2592 OUT PULONG ResultLength
2598 OUT PLARGE_INTEGER CurrentTime
2604 OUT PLARGE_INTEGER CurrentTime
2610 IN HANDLE TimerHandle
,
2611 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2612 OUT PVOID TimerInformation
,
2614 OUT PULONG ResultLength
2620 IN HANDLE TimerHandle
,
2621 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2622 OUT PVOID TimerInformation
,
2624 OUT PULONG ResultLength
2629 NtQueryTimerResolution(
2630 OUT PULONG MinimumResolution
,
2631 OUT PULONG MaximumResolution
,
2632 OUT PULONG ActualResolution
2637 ZwQueryTimerResolution(
2638 OUT PULONG MinimumResolution
,
2639 OUT PULONG MaximumResolution
,
2640 OUT PULONG ActualResolution
2646 IN HANDLE KeyHandle
,
2647 IN PUNICODE_STRING ValueName
,
2648 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2649 OUT PVOID KeyValueInformation
,
2651 OUT PULONG ResultLength
2657 IN HANDLE KeyHandle
,
2658 IN PUNICODE_STRING ValueName
,
2659 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2660 OUT PVOID KeyValueInformation
,
2662 OUT PULONG ResultLength
2667 NtQueryVirtualMemory(
2668 IN HANDLE ProcessHandle
,
2670 IN IN CINT VirtualMemoryInformationClass
,
2671 OUT PVOID VirtualMemoryInformation
,
2673 OUT PULONG ResultLength
2678 ZwQueryVirtualMemory(
2679 IN HANDLE ProcessHandle
,
2681 IN IN CINT VirtualMemoryInformationClass
,
2682 OUT PVOID VirtualMemoryInformation
,
2684 OUT PULONG ResultLength
2689 NtQueryVolumeInformationFile(
2690 IN HANDLE FileHandle
,
2691 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2692 OUT PVOID FsInformation
,
2694 IN FS_INFORMATION_CLASS FsInformationClass
2699 ZwQueryVolumeInformationFile(
2700 IN HANDLE FileHandle
,
2701 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2702 OUT PVOID FsInformation
,
2704 IN FS_INFORMATION_CLASS FsInformationClass
2710 HANDLE ThreadHandle
,
2711 PKNORMAL_ROUTINE ApcRoutine
,
2712 PVOID NormalContext
,
2713 PVOID SystemArgument1
,
2714 PVOID SystemArgument2
2720 HANDLE ThreadHandle
,
2721 PKNORMAL_ROUTINE ApcRoutine
,
2722 PVOID NormalContext
,
2723 PVOID SystemArgument1
,
2724 PVOID SystemArgument2
2730 IN PEXCEPTION_RECORD ExceptionRecord
,
2731 IN PCONTEXT Context
,
2732 IN BOOLEAN SearchFrames
2738 IN PEXCEPTION_RECORD ExceptionRecord
,
2739 IN PCONTEXT Context
,
2740 IN BOOLEAN SearchFrames
2746 IN NTSTATUS ErrorStatus
,
2747 IN ULONG NumberOfParameters
,
2748 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2749 IN PVOID
*Parameters
,
2750 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2751 OUT PHARDERROR_RESPONSE Response
2757 IN NTSTATUS ErrorStatus
,
2758 IN ULONG NumberOfParameters
,
2759 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2760 IN PVOID
*Parameters
,
2761 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2762 OUT PHARDERROR_RESPONSE Response
2768 IN HANDLE FileHandle
,
2769 IN HANDLE Event OPTIONAL
,
2770 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2771 IN PVOID UserApcContext OPTIONAL
,
2772 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2774 IN ULONG BufferLength
,
2775 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2776 IN PULONG Key OPTIONAL
2782 IN HANDLE FileHandle
,
2783 IN HANDLE Event OPTIONAL
,
2784 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2785 IN PVOID UserApcContext OPTIONAL
,
2786 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2788 IN ULONG BufferLength
,
2789 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2790 IN PULONG Key OPTIONAL
2796 IN HANDLE FileHandle
,
2797 IN HANDLE Event OPTIONAL
,
2798 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2799 IN PVOID UserApcContext OPTIONAL
,
2800 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2801 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2802 IN ULONG BufferLength
,
2803 IN PLARGE_INTEGER ByteOffset
,
2804 IN PULONG Key OPTIONAL
2810 IN HANDLE FileHandle
,
2811 IN HANDLE Event OPTIONAL
,
2812 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2813 IN PVOID UserApcContext OPTIONAL
,
2814 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2815 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2816 IN ULONG BufferLength
,
2817 IN PLARGE_INTEGER ByteOffset
,
2818 IN PULONG Key OPTIONAL
2825 PPORT_MESSAGE Message
,
2836 PPORT_MESSAGE Message
,
2845 NtReadVirtualMemory(
2846 IN HANDLE ProcessHandle
,
2847 IN PVOID BaseAddress
,
2849 IN ULONG NumberOfBytesToRead
,
2850 OUT PULONG NumberOfBytesRead
2854 ZwReadVirtualMemory(
2855 IN HANDLE ProcessHandle
,
2856 IN PVOID BaseAddress
,
2858 IN ULONG NumberOfBytesToRead
,
2859 OUT PULONG NumberOfBytesRead
2864 NtRegisterThreadTerminatePort(
2865 HANDLE TerminationPort
2870 ZwRegisterThreadTerminatePort(
2871 HANDLE TerminationPort
2877 IN HANDLE MutantHandle
,
2878 IN PLONG ReleaseCount OPTIONAL
2884 IN HANDLE MutantHandle
,
2885 IN PLONG ReleaseCount OPTIONAL
2891 IN HANDLE SemaphoreHandle
,
2892 IN LONG ReleaseCount
,
2893 OUT PLONG PreviousCount
2899 IN HANDLE SemaphoreHandle
,
2900 IN LONG ReleaseCount
,
2901 OUT PLONG PreviousCount
2906 NtRemoveIoCompletion(
2907 IN HANDLE IoCompletionHandle
,
2908 OUT PVOID
*CompletionKey
,
2909 OUT PVOID
*CompletionContext
,
2910 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2911 IN PLARGE_INTEGER Timeout OPTIONAL
2916 ZwRemoveIoCompletion(
2917 IN HANDLE IoCompletionHandle
,
2918 OUT PVOID
*CompletionKey
,
2919 OUT PVOID
*CompletionContext
,
2920 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2921 IN PLARGE_INTEGER Timeout OPTIONAL
2927 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2929 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2935 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2937 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2944 PPORT_MESSAGE LpcReply
2951 PPORT_MESSAGE LpcReply
2956 NtReplyWaitReceivePort(
2959 PPORT_MESSAGE MessageReply
,
2960 PPORT_MESSAGE MessageRequest
2965 ZwReplyWaitReceivePort(
2968 PPORT_MESSAGE MessageReply
,
2969 PPORT_MESSAGE MessageRequest
2974 NtReplyWaitReplyPort(
2976 PPORT_MESSAGE ReplyMessage
2981 ZwReplyWaitReplyPort(
2983 PPORT_MESSAGE ReplyMessage
2990 PPORT_MESSAGE LpcMessage
);
2996 PPORT_MESSAGE LpcMessage
3001 NtRequestWaitReplyPort(
3003 PPORT_MESSAGE LpcReply
,
3004 PPORT_MESSAGE LpcRequest
3009 ZwRequestWaitReplyPort(
3011 PPORT_MESSAGE LpcReply
,
3012 PPORT_MESSAGE LpcRequest
3019 PLONG NumberOfWaitingThreads OPTIONAL
3026 PLONG NumberOfWaitingThreads OPTIONAL
3048 IN HANDLE ThreadHandle
,
3049 OUT PULONG SuspendCount
3055 IN HANDLE ThreadHandle
,
3056 OUT PULONG SuspendCount
3062 IN HANDLE ProcessHandle
3068 IN HANDLE ProcessHandle
3074 IN HANDLE KeyHandle
,
3075 IN HANDLE FileHandle
3080 IN HANDLE KeyHandle
,
3081 IN HANDLE FileHandle
3087 IN HANDLE KeyHandle
,
3088 IN HANDLE FileHandle
,
3095 IN HANDLE KeyHandle
,
3096 IN HANDLE FileHandle
,
3102 NtSetBootEntryOrder(
3109 ZwSetBootEntryOrder(
3131 IN HANDLE ThreadHandle
,
3137 IN HANDLE ThreadHandle
,
3144 IN BOOLEAN UserProfile
,
3145 IN LCID DefaultLocaleId
3151 IN BOOLEAN UserProfile
,
3152 IN LCID DefaultLocaleId
3157 NtSetDefaultUILanguage(
3163 ZwSetDefaultUILanguage(
3168 NtSetDefaultHardErrorPort(
3169 IN HANDLE PortHandle
3173 ZwSetDefaultHardErrorPort(
3174 IN HANDLE PortHandle
3180 IN HANDLE FileHandle
,
3181 IN PIO_STATUS_BLOCK IoStatusBlock
,
3189 IN HANDLE FileHandle
,
3190 IN PIO_STATUS_BLOCK IoStatusBlock
,
3198 IN HANDLE EventHandle
,
3199 OUT PLONG PreviousState OPTIONAL
3205 IN HANDLE EventHandle
,
3206 OUT PLONG PreviousState OPTIONAL
3212 IN HANDLE EventPairHandle
3218 IN HANDLE EventPairHandle
3222 NtSetHighWaitLowEventPair(
3223 IN HANDLE EventPairHandle
3227 ZwSetHighWaitLowEventPair(
3228 IN HANDLE EventPairHandle
3233 NtSetInformationFile(
3234 IN HANDLE FileHandle
,
3235 IN PIO_STATUS_BLOCK IoStatusBlock
,
3236 IN PVOID FileInformation
,
3238 IN FILE_INFORMATION_CLASS FileInformationClass
3243 ZwSetInformationFile(
3244 IN HANDLE FileHandle
,
3245 IN PIO_STATUS_BLOCK IoStatusBlock
,
3246 IN PVOID FileInformation
,
3248 IN FILE_INFORMATION_CLASS FileInformationClass
3253 NtSetInformationJobObject(
3255 JOBOBJECTINFOCLASS JobInformationClass
,
3256 PVOID JobInformation
,
3257 ULONG JobInformationLength
3262 ZwSetInformationJobObject(
3264 JOBOBJECTINFOCLASS JobInformationClass
,
3265 PVOID JobInformation
,
3266 ULONG JobInformationLength
3271 NtSetInformationKey(
3272 IN HANDLE KeyHandle
,
3273 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3274 IN PVOID KeyInformation
,
3275 IN ULONG KeyInformationLength
3280 ZwSetInformationKey(
3281 IN HANDLE KeyHandle
,
3282 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3283 IN PVOID KeyInformation
,
3284 IN ULONG KeyInformationLength
3289 NtSetInformationObject(
3290 IN HANDLE ObjectHandle
,
3291 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3292 IN PVOID ObjectInformation
,
3298 ZwSetInformationObject(
3299 IN HANDLE ObjectHandle
,
3300 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3301 IN PVOID ObjectInformation
,
3307 NtSetInformationProcess(
3308 IN HANDLE ProcessHandle
,
3309 IN PROCESSINFOCLASS ProcessInformationClass
,
3310 IN PVOID ProcessInformation
,
3311 IN ULONG ProcessInformationLength
3316 NtSetInformationThread(
3317 IN HANDLE ThreadHandle
,
3318 IN THREADINFOCLASS ThreadInformationClass
,
3319 IN PVOID ThreadInformation
,
3320 IN ULONG ThreadInformationLength
3324 ZwSetInformationThread(
3325 IN HANDLE ThreadHandle
,
3326 IN THREADINFOCLASS ThreadInformationClass
,
3327 IN PVOID ThreadInformation
,
3328 IN ULONG ThreadInformationLength
3333 NtSetInformationToken(
3334 IN HANDLE TokenHandle
,
3335 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3336 OUT PVOID TokenInformation
,
3337 IN ULONG TokenInformationLength
3342 ZwSetInformationToken(
3343 IN HANDLE TokenHandle
,
3344 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3345 OUT PVOID TokenInformation
,
3346 IN ULONG TokenInformationLength
3352 IN HANDLE IoCompletionPortHandle
,
3353 IN PVOID CompletionKey
,
3354 IN PVOID CompletionContext
,
3355 IN NTSTATUS CompletionStatus
,
3356 IN ULONG CompletionInformation
3362 IN HANDLE IoCompletionPortHandle
,
3363 IN PVOID CompletionKey
,
3364 IN PVOID CompletionContext
,
3365 IN NTSTATUS CompletionStatus
,
3366 IN ULONG CompletionInformation
3371 NtSetIntervalProfile(
3373 KPROFILE_SOURCE ClockSource
3378 ZwSetIntervalProfile(
3380 KPROFILE_SOURCE ClockSource
3387 LDT_ENTRY LdtEntry1
,
3406 NtSetLowWaitHighEventPair(
3412 ZwSetLowWaitHighEventPair(
3418 NtSetQuotaInformationFile(
3420 PIO_STATUS_BLOCK IoStatusBlock
,
3421 PFILE_QUOTA_INFORMATION Buffer
,
3427 ZwSetQuotaInformationFile(
3429 PIO_STATUS_BLOCK IoStatusBlock
,
3430 PFILE_QUOTA_INFORMATION Buffer
,
3436 NtSetSecurityObject(
3438 IN SECURITY_INFORMATION SecurityInformation
,
3439 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3444 ZwSetSecurityObject(
3446 IN SECURITY_INFORMATION SecurityInformation
,
3447 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3452 NtSetSystemEnvironmentValue(
3453 IN PUNICODE_STRING VariableName
,
3454 IN PUNICODE_STRING Value
3458 ZwSetSystemEnvironmentValue(
3459 IN PUNICODE_STRING VariableName
,
3460 IN PUNICODE_STRING Value
3465 NtSetSystemInformation(
3466 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3467 IN PVOID SystemInformation
,
3468 IN ULONG SystemInformationLength
3473 ZwSetSystemInformation(
3474 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3475 IN PVOID SystemInformation
,
3476 IN ULONG SystemInformationLength
3481 NtSetSystemPowerState(
3482 IN POWER_ACTION SystemAction
,
3483 IN SYSTEM_POWER_STATE MinSystemState
,
3490 IN PLARGE_INTEGER SystemTime
,
3491 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3497 IN PLARGE_INTEGER SystemTime
,
3498 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3504 IN HANDLE TimerHandle
,
3505 IN PLARGE_INTEGER DueTime
,
3506 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3507 IN PVOID TimerContext
,
3508 IN BOOLEAN WakeTimer
,
3509 IN LONG Period OPTIONAL
,
3510 OUT PBOOLEAN PreviousState OPTIONAL
3515 NtSetTimerResolution(
3516 IN ULONG RequestedResolution
,
3517 IN BOOLEAN SetOrUnset
,
3518 OUT PULONG ActualResolution
3523 ZwSetTimerResolution(
3524 IN ULONG RequestedResolution
,
3525 IN BOOLEAN SetOrUnset
,
3526 OUT PULONG ActualResolution
3544 IN HANDLE KeyHandle
,
3545 IN PUNICODE_STRING ValueName
,
3546 IN ULONG TitleIndex OPTIONAL
,
3555 IN HANDLE KeyHandle
,
3556 IN PUNICODE_STRING ValueName
,
3557 IN ULONG TitleIndex OPTIONAL
,
3565 NtSetVolumeInformationFile(
3566 IN HANDLE FileHandle
,
3567 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3568 IN PVOID FsInformation
,
3570 IN FS_INFORMATION_CLASS FsInformationClass
3575 ZwSetVolumeInformationFile(
3576 IN HANDLE FileHandle
,
3577 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3578 IN PVOID FsInformation
,
3580 IN FS_INFORMATION_CLASS FsInformationClass
3586 IN SHUTDOWN_ACTION Action
3592 IN SHUTDOWN_ACTION Action
3597 NtSignalAndWaitForSingleObject(
3598 IN HANDLE SignalObject
,
3599 IN HANDLE WaitObject
,
3600 IN BOOLEAN Alertable
,
3601 IN PLARGE_INTEGER Time
3606 ZwSignalAndWaitForSingleObject(
3607 IN HANDLE SignalObject
,
3608 IN HANDLE WaitObject
,
3609 IN BOOLEAN Alertable
,
3610 IN PLARGE_INTEGER Time
3616 HANDLE ProfileHandle
3622 HANDLE ProfileHandle
3628 HANDLE ProfileHandle
3634 HANDLE ProfileHandle
3640 IN HANDLE ProcessHandle
3646 IN HANDLE ProcessHandle
3652 IN HANDLE ThreadHandle
,
3653 IN PULONG PreviousSuspendCount
3659 IN HANDLE ThreadHandle
,
3660 IN PULONG PreviousSuspendCount
3665 NtSystemDebugControl(
3666 DEBUG_CONTROL_CODE ControlCode
,
3668 ULONG InputBufferLength
,
3670 ULONG OutputBufferLength
,
3677 IN HANDLE ProcessHandle
,
3678 IN NTSTATUS ExitStatus
3684 IN HANDLE ProcessHandle
,
3685 IN NTSTATUS ExitStatus
3691 IN HANDLE ThreadHandle
,
3692 IN NTSTATUS ExitStatus
3698 IN HANDLE ThreadHandle
,
3699 IN NTSTATUS ExitStatus
3704 NtTerminateJobObject(
3711 ZwTerminateJobObject(
3731 IN ULONG TraceHandle
,
3733 IN ULONG TraceHeaderLength
,
3734 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3740 IN ULONG TraceHandle
,
3742 IN ULONG TraceHeaderLength
,
3743 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3748 NtTranslateFilePath(
3756 ZwTranslateFilePath(
3765 IN PUNICODE_STRING DriverServiceName
3771 IN PUNICODE_STRING DriverServiceName
3777 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3783 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3789 IN HANDLE FileHandle
,
3790 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3791 IN PLARGE_INTEGER ByteOffset
,
3792 IN PLARGE_INTEGER Lenght
,
3793 OUT PULONG Key OPTIONAL
3799 IN HANDLE FileHandle
,
3800 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3801 IN PLARGE_INTEGER ByteOffset
,
3802 IN PLARGE_INTEGER Lenght
,
3803 OUT PULONG Key OPTIONAL
3808 NtUnlockVirtualMemory(
3809 IN HANDLE ProcessHandle
,
3810 IN PVOID BaseAddress
,
3811 IN ULONG NumberOfBytesToUnlock
,
3812 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3817 ZwUnlockVirtualMemory(
3818 IN HANDLE ProcessHandle
,
3819 IN PVOID BaseAddress
,
3820 IN ULONG NumberOfBytesToUnlock
,
3821 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3826 NtUnmapViewOfSection(
3827 IN HANDLE ProcessHandle
,
3828 IN PVOID BaseAddress
3833 ZwUnmapViewOfSection(
3834 IN HANDLE ProcessHandle
,
3835 IN PVOID BaseAddress
3848 IN ULONG RoutineIndex
,
3850 IN ULONG ArgumentLength
,
3851 OUT PVOID
* Result OPTIONAL
,
3852 OUT PULONG ResultLength OPTIONAL
3857 NtWaitForMultipleObjects(
3860 IN WAIT_TYPE WaitType
,
3861 IN BOOLEAN Alertable
,
3862 IN PLARGE_INTEGER Time
3867 ZwWaitForMultipleObjects(
3870 IN WAIT_TYPE WaitType
,
3871 IN BOOLEAN Alertable
,
3872 IN PLARGE_INTEGER Time
3877 NtWaitForSingleObject(
3879 IN BOOLEAN Alertable
,
3880 IN PLARGE_INTEGER Time
3885 ZwWaitForSingleObject(
3887 IN BOOLEAN Alertable
,
3888 IN PLARGE_INTEGER Time
3893 NtWaitHighEventPair(
3894 IN HANDLE EventPairHandle
3899 ZwWaitHighEventPair(
3900 IN HANDLE EventPairHandle
3906 IN HANDLE EventPairHandle
3912 IN HANDLE EventPairHandle
3918 IN HANDLE FileHandle
,
3919 IN HANDLE Event OPTIONAL
,
3920 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3921 IN PVOID ApcContext OPTIONAL
,
3922 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3925 IN PLARGE_INTEGER ByteOffset
,
3926 IN PULONG Key OPTIONAL
3932 IN HANDLE FileHandle
,
3933 IN HANDLE Event OPTIONAL
,
3934 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3935 IN PVOID ApcContext OPTIONAL
,
3936 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3939 IN PLARGE_INTEGER ByteOffset
,
3940 IN PULONG Key OPTIONAL
3946 IN HANDLE FileHandle
,
3947 IN HANDLE Event OPTIONAL
,
3948 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3949 IN PVOID ApcContext OPTIONAL
,
3950 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3951 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3952 IN ULONG BufferLength
,
3953 IN PLARGE_INTEGER ByteOffset
,
3954 IN PULONG Key OPTIONAL
3960 IN HANDLE FileHandle
,
3961 IN HANDLE Event OPTIONAL
,
3962 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3963 IN PVOID ApcContext OPTIONAL
,
3964 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3965 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3966 IN ULONG BufferLength
,
3967 IN PLARGE_INTEGER ByteOffset
,
3968 IN PULONG Key OPTIONAL
3975 PPORT_MESSAGE Message
,
3986 PPORT_MESSAGE Message
,
3995 NtWriteVirtualMemory(
3996 IN HANDLE ProcessHandle
,
3997 IN PVOID BaseAddress
,
3999 IN ULONG NumberOfBytesToWrite
,
4000 OUT PULONG NumberOfBytesWritten
4005 ZwWriteVirtualMemory(
4006 IN HANDLE ProcessHandle
,
4007 IN PVOID BaseAddress
,
4009 IN ULONG NumberOfBytesToWrite
,
4010 OUT PULONG NumberOfBytesWritten
4026 static __inline
struct _PEB
* NtCurrentPeb (void)
4030 #if defined(__GNUC__)
4032 __asm__ __volatile__
4034 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4035 : "=r" (pPeb
) /* can't have two memory operands */
4039 #elif defined(_MSC_VER)
4041 __asm mov eax
, fs
:0x30;
4045 #error Unknown compiler for inline assembler