916635a522f01c126c2f32ed784ef0fdad438fba
[reactos.git] / reactos / include / ndk / zwfuncs.h
1 /*
2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
6 * UPDATE HISTORY:
7 * Created 06/10/04
8 */
9 #ifndef _ZWFUNCS_H
10 #define _ZWFUNCS_H
11
12 /* DEPENDENCIES **************************************************************/
13 #include "lpctypes.h"
14 #include "zwtypes.h"
15 #include "kdtypes.h"
16
17 /* FUNCTION TYPES ************************************************************/
18
19 /* PROTOTYPES ****************************************************************/
20
21 /* FIXME: FILE NEEDS CLEANUP */
22 NTSTATUS
23 STDCALL
24 NtAcceptConnectPort(
25 PHANDLE PortHandle,
26 HANDLE NamedPortHandle,
27 PLPC_MESSAGE ServerReply,
28 BOOLEAN AcceptIt,
29 PLPC_SECTION_WRITE WriteMap,
30 PLPC_SECTION_READ ReadMap
31 );
32
33 NTSTATUS
34 STDCALL
35 NtAddBootEntry(
36 IN PUNICODE_STRING EntryName,
37 IN PUNICODE_STRING EntryValue
38 );
39
40 NTSTATUS
41 STDCALL
42 ZwAddBootEntry(
43 IN PUNICODE_STRING EntryName,
44 IN PUNICODE_STRING EntryValue
45 );
46
47 NTSTATUS
48 STDCALL
49 NtAdjustGroupsToken(
50 IN HANDLE TokenHandle,
51 IN BOOLEAN ResetToDefault,
52 IN PTOKEN_GROUPS NewState,
53 IN ULONG BufferLength,
54 OUT PTOKEN_GROUPS PreviousState OPTIONAL,
55 OUT PULONG ReturnLength
56 );
57
58 NTSTATUS
59 STDCALL
60 ZwAdjustGroupsToken(
61 IN HANDLE TokenHandle,
62 IN BOOLEAN ResetToDefault,
63 IN PTOKEN_GROUPS NewState,
64 IN ULONG BufferLength,
65 OUT PTOKEN_GROUPS PreviousState,
66 OUT PULONG ReturnLength
67 );
68
69 NTSTATUS
70 STDCALL
71 NtAdjustPrivilegesToken(
72 IN HANDLE TokenHandle,
73 IN BOOLEAN DisableAllPrivileges,
74 IN PTOKEN_PRIVILEGES NewState,
75 IN ULONG BufferLength,
76 OUT PTOKEN_PRIVILEGES PreviousState,
77 OUT PULONG ReturnLength
78 );
79
80 NTSTATUS
81 STDCALL
82 ZwAdjustPrivilegesToken(
83 IN HANDLE TokenHandle,
84 IN BOOLEAN DisableAllPrivileges,
85 IN PTOKEN_PRIVILEGES NewState,
86 IN ULONG BufferLength,
87 OUT PTOKEN_PRIVILEGES PreviousState,
88 OUT PULONG ReturnLength
89 );
90
91 NTSTATUS
92 STDCALL
93 NtAlertResumeThread(
94 IN HANDLE ThreadHandle,
95 OUT PULONG SuspendCount
96 );
97
98 NTSTATUS
99 STDCALL
100 ZwAlertResumeThread(
101 IN HANDLE ThreadHandle,
102 OUT PULONG SuspendCount
103 );
104
105 NTSTATUS
106 STDCALL
107 NtAlertThread(
108 IN HANDLE ThreadHandle
109 );
110
111 NTSTATUS
112 STDCALL
113 ZwAlertThread(
114 IN HANDLE ThreadHandle
115 );
116
117 NTSTATUS
118 STDCALL
119 NtAllocateLocallyUniqueId(
120 OUT LUID *LocallyUniqueId
121 );
122
123 NTSTATUS
124 STDCALL
125 ZwAllocateLocallyUniqueId(
126 OUT PLUID Luid
127 );
128
129 NTSTATUS
130 STDCALL
131 NtAllocateVirtualMemory (
132 IN HANDLE ProcessHandle,
133 IN OUT PVOID *BaseAddress,
134 IN ULONG ZeroBits,
135 IN OUT PULONG RegionSize,
136 IN ULONG AllocationType,
137 IN ULONG Protect
138 );
139
140 NTSTATUS
141 STDCALL
142 ZwAllocateVirtualMemory (
143 IN HANDLE ProcessHandle,
144 IN OUT PVOID *BaseAddress,
145 IN ULONG ZeroBits,
146 IN OUT PULONG RegionSize,
147 IN ULONG AllocationType,
148 IN ULONG Protect
149 );
150
151 NTSTATUS
152 STDCALL
153 NtAssignProcessToJobObject(
154 HANDLE JobHandle,
155 HANDLE ProcessHandle)
156 ;
157
158 NTSTATUS
159 STDCALL
160 ZwAssignProcessToJobObject(
161 HANDLE JobHandle,
162 HANDLE ProcessHandle
163 );
164
165 NTSTATUS
166 STDCALL
167 NtCallbackReturn(
168 PVOID Result,
169 ULONG ResultLength,
170 NTSTATUS Status
171 );
172
173 NTSTATUS
174 STDCALL
175 ZwCallbackReturn(
176 PVOID Result,
177 ULONG ResultLength,
178 NTSTATUS Status
179 );
180
181 NTSTATUS
182 STDCALL
183 NtCancelIoFile(
184 IN HANDLE FileHandle,
185 OUT PIO_STATUS_BLOCK IoStatusBlock
186 );
187
188 NTSTATUS
189 STDCALL
190 ZwCancelIoFile(
191 IN HANDLE FileHandle,
192 OUT PIO_STATUS_BLOCK IoStatusBlock
193 );
194
195 NTSTATUS
196 STDCALL
197 NtClearEvent(
198 IN HANDLE EventHandle
199 );
200
201 NTSTATUS
202 STDCALL
203 ZwClearEvent(
204 IN HANDLE EventHandle
205 );
206
207 NTSTATUS
208 STDCALL
209 NtCreateJobObject(
210 PHANDLE JobHandle,
211 ACCESS_MASK DesiredAccess,
212 POBJECT_ATTRIBUTES ObjectAttributes
213 );
214
215 NTSTATUS
216 STDCALL
217 ZwCreateJobObject(
218 PHANDLE JobHandle,
219 ACCESS_MASK DesiredAccess,
220 POBJECT_ATTRIBUTES ObjectAttributes
221 );
222
223 NTSTATUS
224 STDCALL
225 NtClose(
226 IN HANDLE Handle
227 );
228
229 NTSTATUS
230 STDCALL
231 ZwClose(
232 IN HANDLE Handle
233 );
234
235 NTSTATUS
236 STDCALL
237 NtCloseObjectAuditAlarm(
238 IN PUNICODE_STRING SubsystemName,
239 IN PVOID HandleId,
240 IN BOOLEAN GenerateOnClose
241 );
242
243 NTSTATUS
244 STDCALL
245 ZwCloseObjectAuditAlarm(
246 IN PUNICODE_STRING SubsystemName,
247 IN PVOID HandleId,
248 IN BOOLEAN GenerateOnClose
249 );
250
251 NTSTATUS
252 STDCALL
253 NtCompleteConnectPort(
254 HANDLE PortHandle
255 );
256
257 NTSTATUS
258 STDCALL
259 ZwCompleteConnectPort(
260 HANDLE PortHandle
261 );
262
263 NTSTATUS
264 STDCALL
265 NtConnectPort(
266 PHANDLE PortHandle,
267 PUNICODE_STRING PortName,
268 PSECURITY_QUALITY_OF_SERVICE SecurityQos,
269 PLPC_SECTION_WRITE SectionInfo,
270 PLPC_SECTION_READ MapInfo,
271 PULONG MaxMessageSize,
272 PVOID ConnectInfo,
273 PULONG ConnectInfoLength
274 );
275
276 NTSTATUS
277 STDCALL
278 ZwConnectPort(
279 PHANDLE PortHandle,
280 PUNICODE_STRING PortName,
281 PSECURITY_QUALITY_OF_SERVICE SecurityQos,
282 PLPC_SECTION_WRITE SectionInfo,
283 PLPC_SECTION_READ MapInfo,
284 PULONG MaxMessageSize,
285 PVOID ConnectInfo,
286 PULONG ConnectInfoLength
287 );
288
289 NTSTATUS
290 STDCALL
291 NtCreateDirectoryObject(
292 OUT PHANDLE DirectoryHandle,
293 IN ACCESS_MASK DesiredAccess,
294 IN POBJECT_ATTRIBUTES ObjectAttributes
295 );
296
297 NTSTATUS
298 STDCALL
299 ZwCreateDirectoryObject(
300 OUT PHANDLE DirectoryHandle,
301 IN ACCESS_MASK DesiredAccess,
302 IN POBJECT_ATTRIBUTES ObjectAttributes
303 );
304
305 NTSTATUS
306 STDCALL
307 NtCreateEvent(
308 OUT PHANDLE EventHandle,
309 IN ACCESS_MASK DesiredAccess,
310 IN POBJECT_ATTRIBUTES ObjectAttributes,
311 IN EVENT_TYPE EventType,
312 IN BOOLEAN InitialState
313 );
314
315 NTSTATUS
316 STDCALL
317 ZwCreateEvent(
318 OUT PHANDLE EventHandle,
319 IN ACCESS_MASK DesiredAccess,
320 IN POBJECT_ATTRIBUTES ObjectAttributes,
321 IN EVENT_TYPE EventType,
322 IN BOOLEAN InitialState
323 );
324
325 NTSTATUS
326 STDCALL
327 NtCreateEventPair(
328 OUT PHANDLE EventPairHandle,
329 IN ACCESS_MASK DesiredAccess,
330 IN POBJECT_ATTRIBUTES ObjectAttributes
331 );
332
333 NTSTATUS
334 STDCALL
335 ZwCreateEventPair(
336 OUT PHANDLE EventPairHandle,
337 IN ACCESS_MASK DesiredAccess,
338 IN POBJECT_ATTRIBUTES ObjectAttributes
339 );
340
341 NTSTATUS
342 STDCALL
343 NtCreateFile(
344 OUT PHANDLE FileHandle,
345 IN ACCESS_MASK DesiredAccess,
346 IN POBJECT_ATTRIBUTES ObjectAttributes,
347 OUT PIO_STATUS_BLOCK IoStatusBlock,
348 IN PLARGE_INTEGER AllocationSize OPTIONAL,
349 IN ULONG FileAttributes,
350 IN ULONG ShareAccess,
351 IN ULONG CreateDisposition,
352 IN ULONG CreateOptions,
353 IN PVOID EaBuffer OPTIONAL,
354 IN ULONG EaLength
355 );
356
357 NTSTATUS
358 STDCALL
359 ZwCreateFile(
360 OUT PHANDLE FileHandle,
361 IN ACCESS_MASK DesiredAccess,
362 IN POBJECT_ATTRIBUTES ObjectAttributes,
363 OUT PIO_STATUS_BLOCK IoStatusBlock,
364 IN PLARGE_INTEGER AllocationSize OPTIONAL,
365 IN ULONG FileAttributes,
366 IN ULONG ShareAccess,
367 IN ULONG CreateDisposition,
368 IN ULONG CreateOptions,
369 IN PVOID EaBuffer OPTIONAL,
370 IN ULONG EaLength
371 );
372
373 NTSTATUS
374 STDCALL
375 NtCreateIoCompletion(
376 OUT PHANDLE IoCompletionHandle,
377 IN ACCESS_MASK DesiredAccess,
378 IN POBJECT_ATTRIBUTES ObjectAttributes,
379 IN ULONG NumberOfConcurrentThreads
380 );
381
382 NTSTATUS
383 STDCALL
384 ZwCreateIoCompletion(
385 OUT PHANDLE IoCompletionHandle,
386 IN ACCESS_MASK DesiredAccess,
387 IN POBJECT_ATTRIBUTES ObjectAttributes,
388 IN ULONG NumberOfConcurrentThreads
389 );
390
391 NTSTATUS
392 STDCALL
393 NtCreateKey(
394 OUT PHANDLE KeyHandle,
395 IN ACCESS_MASK DesiredAccess,
396 IN POBJECT_ATTRIBUTES ObjectAttributes,
397 IN ULONG TitleIndex,
398 IN PUNICODE_STRING Class OPTIONAL,
399 IN ULONG CreateOptions,
400 IN PULONG Disposition OPTIONAL
401 );
402
403 NTSTATUS
404 STDCALL
405 ZwCreateKey(
406 OUT PHANDLE KeyHandle,
407 IN ACCESS_MASK DesiredAccess,
408 IN POBJECT_ATTRIBUTES ObjectAttributes,
409 IN ULONG TitleIndex,
410 IN PUNICODE_STRING Class OPTIONAL,
411 IN ULONG CreateOptions,
412 IN PULONG Disposition OPTIONAL
413 );
414
415 NTSTATUS
416 STDCALL
417 NtCreateMailslotFile(
418 OUT PHANDLE MailSlotFileHandle,
419 IN ACCESS_MASK DesiredAccess,
420 IN POBJECT_ATTRIBUTES ObjectAttributes,
421 OUT PIO_STATUS_BLOCK IoStatusBlock,
422 IN ULONG FileAttributes,
423 IN ULONG ShareAccess,
424 IN ULONG MaxMessageSize,
425 IN PLARGE_INTEGER TimeOut
426 );
427
428 NTSTATUS
429 STDCALL
430 ZwCreateMailslotFile(
431 OUT PHANDLE MailSlotFileHandle,
432 IN ACCESS_MASK DesiredAccess,
433 IN POBJECT_ATTRIBUTES ObjectAttributes,
434 OUT PIO_STATUS_BLOCK IoStatusBlock,
435 IN ULONG FileAttributes,
436 IN ULONG ShareAccess,
437 IN ULONG MaxMessageSize,
438 IN PLARGE_INTEGER TimeOut
439 );
440
441 NTSTATUS
442 STDCALL
443 NtCreateMutant(
444 OUT PHANDLE MutantHandle,
445 IN ACCESS_MASK DesiredAccess,
446 IN POBJECT_ATTRIBUTES ObjectAttributes,
447 IN BOOLEAN InitialOwner
448 );
449
450 NTSTATUS
451 STDCALL
452 ZwCreateMutant(
453 OUT PHANDLE MutantHandle,
454 IN ACCESS_MASK DesiredAccess,
455 IN POBJECT_ATTRIBUTES ObjectAttributes,
456 IN BOOLEAN InitialOwner
457 );
458
459 NTSTATUS
460 STDCALL
461 NtCreateNamedPipeFile(
462 OUT PHANDLE NamedPipeFileHandle,
463 IN ACCESS_MASK DesiredAccess,
464 IN POBJECT_ATTRIBUTES ObjectAttributes,
465 OUT PIO_STATUS_BLOCK IoStatusBlock,
466 IN ULONG ShareAccess,
467 IN ULONG CreateDisposition,
468 IN ULONG CreateOptions,
469 IN ULONG WriteModeMessage,
470 IN ULONG ReadModeMessage,
471 IN ULONG NonBlocking,
472 IN ULONG MaxInstances,
473 IN ULONG InBufferSize,
474 IN ULONG OutBufferSize,
475 IN PLARGE_INTEGER DefaultTimeOut
476 );
477
478 NTSTATUS
479 STDCALL
480 ZwCreateNamedPipeFile(
481 OUT PHANDLE NamedPipeFileHandle,
482 IN ACCESS_MASK DesiredAccess,
483 IN POBJECT_ATTRIBUTES ObjectAttributes,
484 OUT PIO_STATUS_BLOCK IoStatusBlock,
485 IN ULONG ShareAccess,
486 IN ULONG CreateDisposition,
487 IN ULONG CreateOptions,
488 IN ULONG WriteModeMessage,
489 IN ULONG ReadModeMessage,
490 IN ULONG NonBlocking,
491 IN ULONG MaxInstances,
492 IN ULONG InBufferSize,
493 IN ULONG OutBufferSize,
494 IN PLARGE_INTEGER DefaultTimeOut
495 );
496
497 NTSTATUS
498 STDCALL
499 NtCreatePort(
500 PHANDLE PortHandle,
501 POBJECT_ATTRIBUTES ObjectAttributes,
502 ULONG MaxConnectInfoLength,
503 ULONG MaxDataLength,
504 ULONG NPMessageQueueSize OPTIONAL
505 );
506
507 NTSTATUS
508 STDCALL
509 NtCreatePort(
510 PHANDLE PortHandle,
511 POBJECT_ATTRIBUTES ObjectAttributes,
512 ULONG MaxConnectInfoLength,
513 ULONG MaxDataLength,
514 ULONG NPMessageQueueSize OPTIONAL
515 );
516
517 NTSTATUS
518 STDCALL
519 NtCreateProcess(
520 OUT PHANDLE ProcessHandle,
521 IN ACCESS_MASK DesiredAccess,
522 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
523 IN HANDLE ParentProcess,
524 IN BOOLEAN InheritObjectTable,
525 IN HANDLE SectionHandle OPTIONAL,
526 IN HANDLE DebugPort OPTIONAL,
527 IN HANDLE ExceptionPort OPTIONAL
528 );
529
530 NTSTATUS
531 STDCALL
532 ZwCreateProcess(
533 OUT PHANDLE ProcessHandle,
534 IN ACCESS_MASK DesiredAccess,
535 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
536 IN HANDLE ParentProcess,
537 IN BOOLEAN InheritObjectTable,
538 IN HANDLE SectionHandle OPTIONAL,
539 IN HANDLE DebugPort OPTIONAL,
540 IN HANDLE ExceptionPort OPTIONAL
541 );
542
543 NTSTATUS
544 STDCALL
545 NtCreateSection(
546 OUT PHANDLE SectionHandle,
547 IN ACCESS_MASK DesiredAccess,
548 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
549 IN PLARGE_INTEGER MaximumSize OPTIONAL,
550 IN ULONG SectionPageProtection OPTIONAL,
551 IN ULONG AllocationAttributes,
552 IN HANDLE FileHandle OPTIONAL
553 );
554
555 NTSTATUS
556 STDCALL
557 ZwCreateSection(
558 OUT PHANDLE SectionHandle,
559 IN ACCESS_MASK DesiredAccess,
560 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
561 IN PLARGE_INTEGER MaximumSize OPTIONAL,
562 IN ULONG SectionPageProtection OPTIONAL,
563 IN ULONG AllocationAttributes,
564 IN HANDLE FileHandle OPTIONAL
565 );
566
567 NTSTATUS
568 STDCALL
569 NtCreateSemaphore(
570 OUT PHANDLE SemaphoreHandle,
571 IN ACCESS_MASK DesiredAccess,
572 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
573 IN LONG InitialCount,
574 IN LONG MaximumCount
575 );
576
577 NTSTATUS
578 STDCALL
579 ZwCreateSemaphore(
580 OUT PHANDLE SemaphoreHandle,
581 IN ACCESS_MASK DesiredAccess,
582 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
583 IN LONG InitialCount,
584 IN LONG MaximumCount
585 );
586
587 NTSTATUS
588 STDCALL
589 NtCreateSymbolicLinkObject(
590 OUT PHANDLE SymbolicLinkHandle,
591 IN ACCESS_MASK DesiredAccess,
592 IN POBJECT_ATTRIBUTES ObjectAttributes,
593 IN PUNICODE_STRING Name
594 );
595
596 NTSTATUS
597 STDCALL
598 ZwCreateSymbolicLinkObject(
599 OUT PHANDLE SymbolicLinkHandle,
600 IN ACCESS_MASK DesiredAccess,
601 IN POBJECT_ATTRIBUTES ObjectAttributes,
602 IN PUNICODE_STRING Name
603 );
604
605 NTSTATUS
606 STDCALL
607 NtCreateTimer(
608 OUT PHANDLE TimerHandle,
609 IN ACCESS_MASK DesiredAccess,
610 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
611 IN TIMER_TYPE TimerType
612 );
613
614 NTSTATUS
615 STDCALL
616 ZwCreateTimer(
617 OUT PHANDLE TimerHandle,
618 IN ACCESS_MASK DesiredAccess,
619 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
620 IN TIMER_TYPE TimerType
621 );
622
623 NTSTATUS
624 STDCALL
625 NtCreateToken(
626 OUT PHANDLE TokenHandle,
627 IN ACCESS_MASK DesiredAccess,
628 IN POBJECT_ATTRIBUTES ObjectAttributes,
629 IN TOKEN_TYPE TokenType,
630 IN PLUID AuthenticationId,
631 IN PLARGE_INTEGER ExpirationTime,
632 IN PTOKEN_USER TokenUser,
633 IN PTOKEN_GROUPS TokenGroups,
634 IN PTOKEN_PRIVILEGES TokenPrivileges,
635 IN PTOKEN_OWNER TokenOwner,
636 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
637 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
638 IN PTOKEN_SOURCE TokenSource
639 );
640
641 NTSTATUS
642 STDCALL
643 ZwCreateToken(
644 OUT PHANDLE TokenHandle,
645 IN ACCESS_MASK DesiredAccess,
646 IN POBJECT_ATTRIBUTES ObjectAttributes,
647 IN TOKEN_TYPE TokenType,
648 IN PLUID AuthenticationId,
649 IN PLARGE_INTEGER ExpirationTime,
650 IN PTOKEN_USER TokenUser,
651 IN PTOKEN_GROUPS TokenGroups,
652 IN PTOKEN_PRIVILEGES TokenPrivileges,
653 IN PTOKEN_OWNER TokenOwner,
654 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
655 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
656 IN PTOKEN_SOURCE TokenSource
657 );
658
659 NTSTATUS
660 STDCALL
661 NtCreateWaitablePort(
662 PHANDLE PortHandle,
663 POBJECT_ATTRIBUTES ObjectAttributes,
664 ULONG MaxConnectInfoLength,
665 ULONG MaxDataLength,
666 ULONG NPMessageQueueSize OPTIONAL
667 );
668
669 NTSTATUS
670 STDCALL
671 ZwCreateWaitablePort(
672 PHANDLE PortHandle,
673 POBJECT_ATTRIBUTES ObjectAttributes,
674 ULONG MaxConnectInfoLength,
675 ULONG MaxDataLength,
676 ULONG NPMessageQueueSize OPTIONAL
677 );
678
679 NTSTATUS
680 STDCALL
681 NtDeleteAtom(
682 IN RTL_ATOM Atom
683 );
684
685 NTSTATUS
686 STDCALL
687 ZwDeleteAtom(
688 IN RTL_ATOM Atom
689 );
690
691 NTSTATUS
692 STDCALL
693 NtDeleteBootEntry(
694 IN PUNICODE_STRING EntryName,
695 IN PUNICODE_STRING EntryValue
696 );
697
698 NTSTATUS
699 STDCALL
700 ZwDeleteBootEntry(
701 IN PUNICODE_STRING EntryName,
702 IN PUNICODE_STRING EntryValue
703 );
704
705 NTSTATUS
706 STDCALL
707 NtDeleteFile(
708 IN POBJECT_ATTRIBUTES ObjectAttributes
709 );
710
711 NTSTATUS
712 STDCALL
713 ZwDeleteFile(
714 IN POBJECT_ATTRIBUTES ObjectAttributes
715 );
716
717 NTSTATUS
718 STDCALL
719 NtDeleteKey(
720 IN HANDLE KeyHandle
721 );
722
723 NTSTATUS
724 STDCALL
725 ZwDeleteKey(
726 IN HANDLE KeyHandle
727 );
728
729 NTSTATUS
730 STDCALL
731 NtDeleteObjectAuditAlarm(
732 IN PUNICODE_STRING SubsystemName,
733 IN PVOID HandleId,
734 IN BOOLEAN GenerateOnClose
735 );
736
737 NTSTATUS
738 STDCALL
739 ZwDeleteObjectAuditAlarm(
740 IN PUNICODE_STRING SubsystemName,
741 IN PVOID HandleId,
742 IN BOOLEAN GenerateOnClose
743 );
744
745 NTSTATUS
746 STDCALL
747 NtDeleteValueKey(
748 IN HANDLE KeyHandle,
749 IN PUNICODE_STRING ValueName
750 );
751
752 NTSTATUS
753 STDCALL
754 ZwDeleteValueKey(
755 IN HANDLE KeyHandle,
756 IN PUNICODE_STRING ValueName
757 );
758
759 NTSTATUS
760 STDCALL
761 NtDeviceIoControlFile(
762 IN HANDLE DeviceHandle,
763 IN HANDLE Event OPTIONAL,
764 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
765 IN PVOID UserApcContext OPTIONAL,
766 OUT PIO_STATUS_BLOCK IoStatusBlock,
767 IN ULONG IoControlCode,
768 IN PVOID InputBuffer,
769 IN ULONG InputBufferSize,
770 OUT PVOID OutputBuffer,
771 IN ULONG OutputBufferSize
772 );
773
774 NTSTATUS
775 STDCALL
776 ZwDeviceIoControlFile(
777 IN HANDLE DeviceHandle,
778 IN HANDLE Event OPTIONAL,
779 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
780 IN PVOID UserApcContext OPTIONAL,
781 OUT PIO_STATUS_BLOCK IoStatusBlock,
782 IN ULONG IoControlCode,
783 IN PVOID InputBuffer,
784 IN ULONG InputBufferSize,
785 OUT PVOID OutputBuffer,
786 IN ULONG OutputBufferSize
787 );
788
789 NTSTATUS
790 STDCALL
791 NtDisplayString(
792 IN PUNICODE_STRING DisplayString
793 );
794
795 NTSTATUS
796 STDCALL
797 ZwDisplayString(
798 IN PUNICODE_STRING DisplayString
799 );
800
801 NTSTATUS
802 STDCALL
803 NtEnumerateBootEntries(
804 IN ULONG Unknown1,
805 IN ULONG Unknown2
806 );
807
808 NTSTATUS
809 STDCALL
810 ZwEnumerateBootEntries(
811 IN ULONG Unknown1,
812 IN ULONG Unknown2
813 );
814
815 NTSTATUS
816 STDCALL
817 NtEnumerateKey(
818 IN HANDLE KeyHandle,
819 IN ULONG Index,
820 IN KEY_INFORMATION_CLASS KeyInformationClass,
821 OUT PVOID KeyInformation,
822 IN ULONG Length,
823 OUT PULONG ResultLength
824 );
825
826 NTSTATUS
827 STDCALL
828 ZwEnumerateKey(
829 IN HANDLE KeyHandle,
830 IN ULONG Index,
831 IN KEY_INFORMATION_CLASS KeyInformationClass,
832 OUT PVOID KeyInformation,
833 IN ULONG Length,
834 OUT PULONG ResultLength
835 );
836 NTSTATUS
837 STDCALL
838 NtEnumerateValueKey(
839 IN HANDLE KeyHandle,
840 IN ULONG Index,
841 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
842 OUT PVOID KeyValueInformation,
843 IN ULONG Length,
844 OUT PULONG ResultLength
845 );
846
847 NTSTATUS
848 STDCALL
849 ZwEnumerateValueKey(
850 IN HANDLE KeyHandle,
851 IN ULONG Index,
852 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
853 OUT PVOID KeyValueInformation,
854 IN ULONG Length,
855 OUT PULONG ResultLength
856 );
857
858 NTSTATUS
859 STDCALL
860 NtFlushBuffersFile(
861 IN HANDLE FileHandle,
862 OUT PIO_STATUS_BLOCK IoStatusBlock
863 );
864
865 NTSTATUS
866 STDCALL
867 ZwFlushBuffersFile(
868 IN HANDLE FileHandle,
869 OUT PIO_STATUS_BLOCK IoStatusBlock
870 );
871
872 NTSTATUS
873 STDCALL
874 NtFlushKey(
875 IN HANDLE KeyHandle
876 );
877
878 NTSTATUS
879 STDCALL
880 ZwFlushKey(
881 IN HANDLE KeyHandle
882 );
883
884 NTSTATUS
885 STDCALL
886 NtFlushWriteBuffer(VOID);
887
888 NTSTATUS
889 STDCALL
890 ZwFlushWriteBuffer(VOID);
891
892 NTSTATUS
893 STDCALL
894 NtFreeVirtualMemory(
895 IN HANDLE ProcessHandle,
896 IN PVOID *BaseAddress,
897 IN PULONG RegionSize,
898 IN ULONG FreeType
899 );
900
901 NTSTATUS
902 STDCALL
903 ZwFreeVirtualMemory(
904 IN HANDLE ProcessHandle,
905 IN PVOID *BaseAddress,
906 IN PULONG RegionSize,
907 IN ULONG FreeType
908 );
909
910 NTSTATUS
911 STDCALL
912 NtFsControlFile(
913 IN HANDLE DeviceHandle,
914 IN HANDLE Event OPTIONAL,
915 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
916 IN PVOID ApcContext OPTIONAL,
917 OUT PIO_STATUS_BLOCK IoStatusBlock,
918 IN ULONG IoControlCode,
919 IN PVOID InputBuffer,
920 IN ULONG InputBufferSize,
921 OUT PVOID OutputBuffer,
922 IN ULONG OutputBufferSize
923 );
924
925 NTSTATUS
926 STDCALL
927 ZwFsControlFile(
928 IN HANDLE DeviceHandle,
929 IN HANDLE Event OPTIONAL,
930 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
931 IN PVOID ApcContext OPTIONAL,
932 OUT PIO_STATUS_BLOCK IoStatusBlock,
933 IN ULONG IoControlCode,
934 IN PVOID InputBuffer,
935 IN ULONG InputBufferSize,
936 OUT PVOID OutputBuffer,
937 IN ULONG OutputBufferSize
938 );
939
940 NTSTATUS
941 STDCALL
942 NtGetContextThread(
943 IN HANDLE ThreadHandle,
944 OUT PCONTEXT Context
945 );
946
947 NTSTATUS
948 STDCALL
949 ZwGetContextThread(
950 IN HANDLE ThreadHandle,
951 OUT PCONTEXT Context
952 );
953
954 NTSTATUS
955 STDCALL
956 NtImpersonateClientOfPort(
957 HANDLE PortHandle,
958 PLPC_MESSAGE ClientMessage
959 );
960
961 NTSTATUS
962 STDCALL
963 ZwImpersonateClientOfPort(
964 HANDLE PortHandle,
965 PLPC_MESSAGE ClientMessage
966 );
967
968 NTSTATUS
969 STDCALL
970 NtImpersonateThread(
971 IN HANDLE ThreadHandle,
972 IN HANDLE ThreadToImpersonate,
973 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
974 );
975
976 NTSTATUS
977 STDCALL
978 ZwImpersonateThread(
979 IN HANDLE ThreadHandle,
980 IN HANDLE ThreadToImpersonate,
981 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
982 );
983
984 NTSTATUS
985 STDCALL
986 NtInitiatePowerAction(
987 POWER_ACTION SystemAction,
988 SYSTEM_POWER_STATE MinSystemState,
989 ULONG Flags,
990 BOOLEAN Asynchronous
991 );
992
993 NTSTATUS
994 STDCALL
995 ZwInitiatePowerAction(
996 POWER_ACTION SystemAction,
997 SYSTEM_POWER_STATE MinSystemState,
998 ULONG Flags,
999 BOOLEAN Asynchronous
1000 );
1001
1002 NTSTATUS
1003 STDCALL
1004 NtInitializeRegistry(
1005 BOOLEAN SetUpBoot
1006 );
1007
1008 NTSTATUS
1009 STDCALL
1010 ZwInitializeRegistry(
1011 BOOLEAN SetUpBoot
1012 );
1013
1014 NTSTATUS
1015 STDCALL
1016 NtIsProcessInJob(
1017 IN HANDLE ProcessHandle,
1018 IN HANDLE JobHandle OPTIONAL
1019 );
1020
1021 NTSTATUS
1022 STDCALL
1023 ZwIsProcessInJob(
1024 IN HANDLE ProcessHandle,
1025 IN HANDLE JobHandle OPTIONAL
1026 );
1027
1028 NTSTATUS
1029 STDCALL
1030 NtListenPort(HANDLE PortHandle,
1031 PLPC_MESSAGE LpcMessage
1032 );
1033
1034 NTSTATUS
1035 STDCALL
1036 ZwListenPort(HANDLE PortHandle,
1037 PLPC_MESSAGE LpcMessage
1038 );
1039
1040 NTSTATUS
1041 STDCALL
1042 NtLoadDriver(
1043 IN PUNICODE_STRING DriverServiceName
1044 );
1045
1046 NTSTATUS
1047 STDCALL
1048 ZwLoadDriver(
1049 IN PUNICODE_STRING DriverServiceName
1050 );
1051
1052 NTSTATUS
1053 STDCALL
1054 NtLockFile(
1055 IN HANDLE FileHandle,
1056 IN HANDLE Event OPTIONAL,
1057 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1058 IN PVOID ApcContext OPTIONAL,
1059 OUT PIO_STATUS_BLOCK IoStatusBlock,
1060 IN PLARGE_INTEGER ByteOffset,
1061 IN PLARGE_INTEGER Length,
1062 IN PULONG Key,
1063 IN BOOLEAN FailImmediatedly,
1064 IN BOOLEAN ExclusiveLock
1065 );
1066
1067 NTSTATUS
1068 STDCALL
1069 ZwLockFile(
1070 IN HANDLE FileHandle,
1071 IN HANDLE Event OPTIONAL,
1072 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1073 IN PVOID ApcContext OPTIONAL,
1074 OUT PIO_STATUS_BLOCK IoStatusBlock,
1075 IN PLARGE_INTEGER ByteOffset,
1076 IN PLARGE_INTEGER Length,
1077 IN PULONG Key,
1078 IN BOOLEAN FailImmediatedly,
1079 IN BOOLEAN ExclusiveLock
1080 );
1081
1082 NTSTATUS
1083 STDCALL
1084 NtMakePermanentObject(
1085 IN HANDLE Object
1086 );
1087
1088 NTSTATUS
1089 STDCALL
1090 ZwMakePermanentObject(
1091 IN HANDLE Object
1092 );
1093
1094 NTSTATUS
1095 STDCALL
1096 NtMakeTemporaryObject(
1097 IN HANDLE Handle
1098 );
1099
1100 NTSTATUS
1101 STDCALL
1102 ZwMakeTemporaryObject(
1103 IN HANDLE Handle
1104 );
1105
1106 NTSTATUS
1107 STDCALL
1108 NtMapViewOfSection(
1109 IN HANDLE SectionHandle,
1110 IN HANDLE ProcessHandle,
1111 IN OUT PVOID *BaseAddress,
1112 IN ULONG ZeroBits,
1113 IN ULONG CommitSize,
1114 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
1115 IN OUT PULONG ViewSize,
1116 IN SECTION_INHERIT InheritDisposition,
1117 IN ULONG AllocationType,
1118 IN ULONG AccessProtection
1119 );
1120
1121 NTSTATUS
1122 STDCALL
1123 ZwMapViewOfSection(
1124 IN HANDLE SectionHandle,
1125 IN HANDLE ProcessHandle,
1126 IN OUT PVOID *BaseAddress,
1127 IN ULONG ZeroBits,
1128 IN ULONG CommitSize,
1129 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
1130 IN OUT PULONG ViewSize,
1131 IN SECTION_INHERIT InheritDisposition,
1132 IN ULONG AllocationType,
1133 IN ULONG AccessProtection
1134 );
1135
1136 NTSTATUS
1137 STDCALL
1138 NtNotifyChangeDirectoryFile(
1139 IN HANDLE FileHandle,
1140 IN HANDLE Event OPTIONAL,
1141 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1142 IN PVOID ApcContext OPTIONAL,
1143 OUT PIO_STATUS_BLOCK IoStatusBlock,
1144 OUT PVOID Buffer,
1145 IN ULONG BufferSize,
1146 IN ULONG CompletionFilter,
1147 IN BOOLEAN WatchTree
1148 );
1149
1150 NTSTATUS
1151 STDCALL
1152 ZwNotifyChangeDirectoryFile(
1153 IN HANDLE FileHandle,
1154 IN HANDLE Event OPTIONAL,
1155 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1156 IN PVOID ApcContext OPTIONAL,
1157 OUT PIO_STATUS_BLOCK IoStatusBlock,
1158 OUT PVOID Buffer,
1159 IN ULONG BufferSize,
1160 IN ULONG CompletionFilter,
1161 IN BOOLEAN WatchTree
1162 );
1163
1164 NTSTATUS
1165 STDCALL
1166 NtNotifyChangeKey(
1167 IN HANDLE KeyHandle,
1168 IN HANDLE Event,
1169 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1170 IN PVOID ApcContext OPTIONAL,
1171 OUT PIO_STATUS_BLOCK IoStatusBlock,
1172 IN ULONG CompletionFilter,
1173 IN BOOLEAN Asynchroneous,
1174 OUT PVOID ChangeBuffer,
1175 IN ULONG Length,
1176 IN BOOLEAN WatchSubtree
1177 );
1178
1179 NTSTATUS
1180 STDCALL
1181 ZwNotifyChangeKey(
1182 IN HANDLE KeyHandle,
1183 IN HANDLE Event,
1184 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1185 IN PVOID ApcContext OPTIONAL,
1186 OUT PIO_STATUS_BLOCK IoStatusBlock,
1187 IN ULONG CompletionFilter,
1188 IN BOOLEAN Asynchroneous,
1189 OUT PVOID ChangeBuffer,
1190 IN ULONG Length,
1191 IN BOOLEAN WatchSubtree
1192 );
1193
1194 NTSTATUS
1195 STDCALL
1196 NtOpenDirectoryObject(
1197 OUT PHANDLE FileHandle,
1198 IN ACCESS_MASK DesiredAccess,
1199 IN POBJECT_ATTRIBUTES ObjectAttributes
1200 );
1201
1202 NTSTATUS
1203 STDCALL
1204 ZwOpenDirectoryObject(
1205 OUT PHANDLE FileHandle,
1206 IN ACCESS_MASK DesiredAccess,
1207 IN POBJECT_ATTRIBUTES ObjectAttributes
1208 );
1209
1210 NTSTATUS
1211 STDCALL
1212 NtOpenEvent(
1213 OUT PHANDLE EventHandle,
1214 IN ACCESS_MASK DesiredAccess,
1215 IN POBJECT_ATTRIBUTES ObjectAttributes
1216 );
1217
1218 NTSTATUS
1219 STDCALL
1220 ZwOpenEvent(
1221 OUT PHANDLE EventHandle,
1222 IN ACCESS_MASK DesiredAccess,
1223 IN POBJECT_ATTRIBUTES ObjectAttributes
1224 );
1225
1226 NTSTATUS
1227 STDCALL
1228 NtOpenEventPair(
1229 OUT PHANDLE EventPairHandle,
1230 IN ACCESS_MASK DesiredAccess,
1231 IN POBJECT_ATTRIBUTES ObjectAttributes
1232 );
1233
1234 NTSTATUS
1235 STDCALL
1236 ZwOpenEventPair(
1237 OUT PHANDLE EventPairHandle,
1238 IN ACCESS_MASK DesiredAccess,
1239 IN POBJECT_ATTRIBUTES ObjectAttributes
1240 );
1241
1242 NTSTATUS
1243 STDCALL
1244 NtOpenFile(
1245 OUT PHANDLE FileHandle,
1246 IN ACCESS_MASK DesiredAccess,
1247 IN POBJECT_ATTRIBUTES ObjectAttributes,
1248 OUT PIO_STATUS_BLOCK IoStatusBlock,
1249 IN ULONG ShareAccess,
1250 IN ULONG OpenOptions
1251 );
1252
1253 NTSTATUS
1254 STDCALL
1255 ZwOpenFile(
1256 OUT PHANDLE FileHandle,
1257 IN ACCESS_MASK DesiredAccess,
1258 IN POBJECT_ATTRIBUTES ObjectAttributes,
1259 OUT PIO_STATUS_BLOCK IoStatusBlock,
1260 IN ULONG ShareAccess,
1261 IN ULONG OpenOptions
1262 );
1263
1264 NTSTATUS
1265 STDCALL
1266 NtOpenIoCompletion(
1267 OUT PHANDLE CompetionPort,
1268 IN ACCESS_MASK DesiredAccess,
1269 IN POBJECT_ATTRIBUTES ObjectAttributes
1270 );
1271
1272 NTSTATUS
1273 STDCALL
1274 ZwOpenIoCompletion(
1275 OUT PHANDLE CompetionPort,
1276 IN ACCESS_MASK DesiredAccess,
1277 IN POBJECT_ATTRIBUTES ObjectAttributes
1278 );
1279
1280 NTSTATUS
1281 STDCALL
1282 NtOpenJobObject(
1283 PHANDLE JobHandle,
1284 ACCESS_MASK DesiredAccess,
1285 POBJECT_ATTRIBUTES ObjectAttributes
1286 );
1287
1288 NTSTATUS
1289 STDCALL
1290 ZwOpenJobObject(
1291 PHANDLE JobHandle,
1292 ACCESS_MASK DesiredAccess,
1293 POBJECT_ATTRIBUTES ObjectAttributes
1294 );
1295
1296 NTSTATUS
1297 STDCALL
1298 NtOpenKey(
1299 OUT PHANDLE KeyHandle,
1300 IN ACCESS_MASK DesiredAccess,
1301 IN POBJECT_ATTRIBUTES ObjectAttributes
1302 );
1303
1304 NTSTATUS
1305 STDCALL
1306 ZwOpenKey(
1307 OUT PHANDLE KeyHandle,
1308 IN ACCESS_MASK DesiredAccess,
1309 IN POBJECT_ATTRIBUTES ObjectAttributes
1310 );
1311
1312 NTSTATUS
1313 STDCALL
1314 NtOpenMutant(
1315 OUT PHANDLE MutantHandle,
1316 IN ACCESS_MASK DesiredAccess,
1317 IN POBJECT_ATTRIBUTES ObjectAttributes
1318 );
1319
1320 NTSTATUS
1321 STDCALL
1322 ZwOpenMutant(
1323 OUT PHANDLE MutantHandle,
1324 IN ACCESS_MASK DesiredAccess,
1325 IN POBJECT_ATTRIBUTES ObjectAttributes
1326 );
1327
1328 NTSTATUS
1329 STDCALL
1330 NtOpenProcess(
1331 OUT PHANDLE ProcessHandle,
1332 IN ACCESS_MASK DesiredAccess,
1333 IN POBJECT_ATTRIBUTES ObjectAttributes,
1334 IN PCLIENT_ID ClientId
1335 );
1336
1337 NTSTATUS
1338 STDCALL
1339 ZwOpenProcess(
1340 OUT PHANDLE ProcessHandle,
1341 IN ACCESS_MASK DesiredAccess,
1342 IN POBJECT_ATTRIBUTES ObjectAttributes,
1343 IN PCLIENT_ID ClientId
1344 );
1345
1346 NTSTATUS
1347 STDCALL
1348 NtOpenProcessToken(
1349 IN HANDLE ProcessHandle,
1350 IN ACCESS_MASK DesiredAccess,
1351 OUT PHANDLE TokenHandle
1352 );
1353
1354 NTSTATUS
1355 STDCALL
1356 ZwOpenProcessToken(
1357 IN HANDLE ProcessHandle,
1358 IN ACCESS_MASK DesiredAccess,
1359 OUT PHANDLE TokenHandle
1360 );
1361
1362 NTSTATUS
1363 STDCALL
1364 NtOpenProcessTokenEx(
1365 IN HANDLE ProcessHandle,
1366 IN ACCESS_MASK DesiredAccess,
1367 IN ULONG HandleAttributes,
1368 OUT PHANDLE TokenHandle
1369 );
1370
1371 NTSTATUS
1372 STDCALL
1373 ZwOpenProcessTokenEx(
1374 IN HANDLE ProcessHandle,
1375 IN ACCESS_MASK DesiredAccess,
1376 IN ULONG HandleAttributes,
1377 OUT PHANDLE TokenHandle
1378 );
1379
1380 NTSTATUS
1381 STDCALL
1382 NtOpenSection(
1383 OUT PHANDLE SectionHandle,
1384 IN ACCESS_MASK DesiredAccess,
1385 IN POBJECT_ATTRIBUTES ObjectAttributes
1386 );
1387
1388 NTSTATUS
1389 STDCALL
1390 ZwOpenSection(
1391 OUT PHANDLE SectionHandle,
1392 IN ACCESS_MASK DesiredAccess,
1393 IN POBJECT_ATTRIBUTES ObjectAttributes
1394 );
1395
1396 NTSTATUS
1397 STDCALL
1398 NtOpenSemaphore(
1399 IN HANDLE SemaphoreHandle,
1400 IN ACCESS_MASK DesiredAcces,
1401 IN POBJECT_ATTRIBUTES ObjectAttributes
1402 );
1403
1404 NTSTATUS
1405 STDCALL
1406 ZwOpenSemaphore(
1407 IN HANDLE SemaphoreHandle,
1408 IN ACCESS_MASK DesiredAcces,
1409 IN POBJECT_ATTRIBUTES ObjectAttributes
1410 );
1411
1412 NTSTATUS
1413 STDCALL
1414 NtOpenSymbolicLinkObject(
1415 OUT PHANDLE SymbolicLinkHandle,
1416 IN ACCESS_MASK DesiredAccess,
1417 IN POBJECT_ATTRIBUTES ObjectAttributes
1418 );
1419
1420 NTSTATUS
1421 STDCALL
1422 ZwOpenSymbolicLinkObject(
1423 OUT PHANDLE SymbolicLinkHandle,
1424 IN ACCESS_MASK DesiredAccess,
1425 IN POBJECT_ATTRIBUTES ObjectAttributes
1426 );
1427
1428 NTSTATUS
1429 STDCALL
1430 NtOpenThread(
1431 OUT PHANDLE ThreadHandle,
1432 IN ACCESS_MASK DesiredAccess,
1433 IN POBJECT_ATTRIBUTES ObjectAttributes,
1434 IN PCLIENT_ID ClientId
1435 );
1436
1437 NTSTATUS
1438 STDCALL
1439 ZwOpenThread(
1440 OUT PHANDLE ThreadHandle,
1441 IN ACCESS_MASK DesiredAccess,
1442 IN POBJECT_ATTRIBUTES ObjectAttributes,
1443 IN PCLIENT_ID ClientId
1444 );
1445
1446 NTSTATUS
1447 STDCALL
1448 NtOpenThreadToken(
1449 IN HANDLE ThreadHandle,
1450 IN ACCESS_MASK DesiredAccess,
1451 IN BOOLEAN OpenAsSelf,
1452 OUT PHANDLE TokenHandle
1453 );
1454
1455 NTSTATUS
1456 STDCALL
1457 ZwOpenThreadToken(
1458 IN HANDLE ThreadHandle,
1459 IN ACCESS_MASK DesiredAccess,
1460 IN BOOLEAN OpenAsSelf,
1461 OUT PHANDLE TokenHandle
1462 );
1463
1464 NTSTATUS
1465 STDCALL
1466 NtOpenThreadTokenEx(
1467 IN HANDLE ThreadHandle,
1468 IN ACCESS_MASK DesiredAccess,
1469 IN BOOLEAN OpenAsSelf,
1470 IN ULONG HandleAttributes,
1471 OUT PHANDLE TokenHandle
1472 );
1473
1474 NTSTATUS
1475 STDCALL
1476 ZwOpenThreadTokenEx(
1477 IN HANDLE ThreadHandle,
1478 IN ACCESS_MASK DesiredAccess,
1479 IN BOOLEAN OpenAsSelf,
1480 IN ULONG HandleAttributes,
1481 OUT PHANDLE TokenHandle
1482 );
1483
1484 NTSTATUS
1485 STDCALL
1486 NtOpenTimer(
1487 OUT PHANDLE TimerHandle,
1488 IN ACCESS_MASK DesiredAccess,
1489 IN POBJECT_ATTRIBUTES ObjectAttributes
1490 );
1491 NTSTATUS
1492 STDCALL
1493 ZwOpenTimer(
1494 OUT PHANDLE TimerHandle,
1495 IN ACCESS_MASK DesiredAccess,
1496 IN POBJECT_ATTRIBUTES ObjectAttributes
1497 );
1498
1499 NTSTATUS
1500 STDCALL
1501 NtPowerInformation(
1502 POWER_INFORMATION_LEVEL PowerInformationLevel,
1503 PVOID InputBuffer,
1504 ULONG InputBufferLength,
1505 PVOID OutputBuffer,
1506 ULONG OutputBufferLength
1507 );
1508
1509 NTSTATUS
1510 STDCALL
1511 ZwPowerInformation(
1512 POWER_INFORMATION_LEVEL PowerInformationLevel,
1513 PVOID InputBuffer,
1514 ULONG InputBufferLength,
1515 PVOID OutputBuffer,
1516 ULONG OutputBufferLength
1517 );
1518
1519 NTSTATUS
1520 STDCALL
1521 NtPrivilegeCheck(
1522 IN HANDLE ClientToken,
1523 IN PPRIVILEGE_SET RequiredPrivileges,
1524 IN PBOOLEAN Result
1525 );
1526
1527 NTSTATUS
1528 STDCALL
1529 ZwPrivilegeCheck(
1530 IN HANDLE ClientToken,
1531 IN PPRIVILEGE_SET RequiredPrivileges,
1532 IN PBOOLEAN Result
1533 );
1534
1535 NTSTATUS
1536 STDCALL
1537 NtPrivilegedServiceAuditAlarm(
1538 IN PUNICODE_STRING SubsystemName,
1539 IN PUNICODE_STRING ServiceName,
1540 IN HANDLE ClientToken,
1541 IN PPRIVILEGE_SET Privileges,
1542 IN BOOLEAN AccessGranted
1543 );
1544
1545 NTSTATUS
1546 STDCALL
1547 ZwPrivilegedServiceAuditAlarm(
1548 IN PUNICODE_STRING SubsystemName,
1549 IN PUNICODE_STRING ServiceName,
1550 IN HANDLE ClientToken,
1551 IN PPRIVILEGE_SET Privileges,
1552 IN BOOLEAN AccessGranted
1553 );
1554
1555 NTSTATUS
1556 STDCALL
1557 NtPrivilegeObjectAuditAlarm(
1558 IN PUNICODE_STRING SubsystemName,
1559 IN PVOID HandleId,
1560 IN HANDLE ClientToken,
1561 IN ULONG DesiredAccess,
1562 IN PPRIVILEGE_SET Privileges,
1563 IN BOOLEAN AccessGranted
1564 );
1565
1566 NTSTATUS
1567 STDCALL
1568 ZwPrivilegeObjectAuditAlarm(
1569 IN PUNICODE_STRING SubsystemName,
1570 IN PVOID HandleId,
1571 IN HANDLE ClientToken,
1572 IN ULONG DesiredAccess,
1573 IN PPRIVILEGE_SET Privileges,
1574 IN BOOLEAN AccessGranted
1575 );
1576
1577 NTSTATUS
1578 STDCALL
1579 NtPulseEvent(
1580 IN HANDLE EventHandle,
1581 IN PLONG PulseCount OPTIONAL
1582 );
1583
1584 NTSTATUS
1585 STDCALL
1586 ZwPulseEvent(
1587 IN HANDLE EventHandle,
1588 IN PLONG PulseCount OPTIONAL
1589 );
1590
1591 NTSTATUS
1592 STDCALL
1593 NtQueryAttributesFile(
1594 IN POBJECT_ATTRIBUTES ObjectAttributes,
1595 OUT PFILE_BASIC_INFORMATION FileInformation
1596 );
1597
1598 NTSTATUS
1599 STDCALL
1600 ZwQueryAttributesFile(
1601 IN POBJECT_ATTRIBUTES ObjectAttributes,
1602 OUT PFILE_BASIC_INFORMATION FileInformation
1603 );
1604
1605
1606 NTSTATUS
1607 STDCALL
1608 NtQueryBootEntryOrder(
1609 IN ULONG Unknown1,
1610 IN ULONG Unknown2
1611 );
1612
1613 NTSTATUS
1614 STDCALL
1615 ZwQueryBootEntryOrder(
1616 IN ULONG Unknown1,
1617 IN ULONG Unknown2
1618 );
1619
1620 NTSTATUS
1621 STDCALL
1622 NtQueryBootOptions(
1623 IN ULONG Unknown1,
1624 IN ULONG Unknown2
1625 );
1626
1627 NTSTATUS
1628 STDCALL
1629 ZwQueryBootOptions(
1630 IN ULONG Unknown1,
1631 IN ULONG Unknown2
1632 );
1633 NTSTATUS
1634 STDCALL
1635 NtQueryDefaultLocale(
1636 IN BOOLEAN UserProfile,
1637 OUT PLCID DefaultLocaleId
1638 );
1639
1640 NTSTATUS
1641 STDCALL
1642 ZwQueryDefaultLocale(
1643 IN BOOLEAN UserProfile,
1644 OUT PLCID DefaultLocaleId
1645 );
1646
1647 NTSTATUS
1648 STDCALL
1649 NtQueryDefaultUILanguage(
1650 PLANGID LanguageId
1651 );
1652
1653 NTSTATUS
1654 STDCALL
1655 ZwQueryDefaultUILanguage(
1656 PLANGID LanguageId
1657 );
1658
1659 NTSTATUS
1660 STDCALL
1661 NtQueryDirectoryFile(
1662 IN HANDLE FileHandle,
1663 IN HANDLE Event OPTIONAL,
1664 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1665 IN PVOID ApcContext OPTIONAL,
1666 OUT PIO_STATUS_BLOCK IoStatusBlock,
1667 OUT PVOID FileInformation,
1668 IN ULONG Length,
1669 IN FILE_INFORMATION_CLASS FileInformationClass,
1670 IN BOOLEAN ReturnSingleEntry,
1671 IN PUNICODE_STRING FileName OPTIONAL,
1672 IN BOOLEAN RestartScan
1673 );
1674
1675 NTSTATUS
1676 STDCALL
1677 ZwQueryDirectoryFile(
1678 IN HANDLE FileHandle,
1679 IN HANDLE Event OPTIONAL,
1680 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1681 IN PVOID ApcContext OPTIONAL,
1682 OUT PIO_STATUS_BLOCK IoStatusBlock,
1683 OUT PVOID FileInformation,
1684 IN ULONG Length,
1685 IN FILE_INFORMATION_CLASS FileInformationClass,
1686 IN BOOLEAN ReturnSingleEntry,
1687 IN PUNICODE_STRING FileName OPTIONAL,
1688 IN BOOLEAN RestartScan
1689 );
1690
1691 NTSTATUS
1692 STDCALL
1693 NtQueryEaFile(
1694 IN HANDLE FileHandle,
1695 OUT PIO_STATUS_BLOCK IoStatusBlock,
1696 OUT PVOID Buffer,
1697 IN ULONG Length,
1698 IN BOOLEAN ReturnSingleEntry,
1699 IN PVOID EaList OPTIONAL,
1700 IN ULONG EaListLength,
1701 IN PULONG EaIndex OPTIONAL,
1702 IN BOOLEAN RestartScan
1703 );
1704
1705 NTSTATUS
1706 STDCALL
1707 ZwQueryEaFile(
1708 IN HANDLE FileHandle,
1709 OUT PIO_STATUS_BLOCK IoStatusBlock,
1710 OUT PVOID Buffer,
1711 IN ULONG Length,
1712 IN BOOLEAN ReturnSingleEntry,
1713 IN PVOID EaList OPTIONAL,
1714 IN ULONG EaListLength,
1715 IN PULONG EaIndex OPTIONAL,
1716 IN BOOLEAN RestartScan
1717 );
1718
1719 NTSTATUS
1720 STDCALL
1721 NtQueryEvent(
1722 IN HANDLE EventHandle,
1723 IN EVENT_INFORMATION_CLASS EventInformationClass,
1724 OUT PVOID EventInformation,
1725 IN ULONG EventInformationLength,
1726 OUT PULONG ReturnLength
1727 );
1728 NTSTATUS
1729 STDCALL
1730 ZwQueryEvent(
1731 IN HANDLE EventHandle,
1732 IN EVENT_INFORMATION_CLASS EventInformationClass,
1733 OUT PVOID EventInformation,
1734 IN ULONG EventInformationLength,
1735 OUT PULONG ReturnLength
1736 );
1737
1738 NTSTATUS
1739 STDCALL
1740 NtQueryFullAttributesFile(
1741 IN POBJECT_ATTRIBUTES ObjectAttributes,
1742 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1743 );
1744
1745 NTSTATUS
1746 STDCALL
1747 ZwQueryFullAttributesFile(
1748 IN POBJECT_ATTRIBUTES ObjectAttributes,
1749 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1750 );
1751
1752 NTSTATUS
1753 STDCALL
1754 NtQueryInformationFile(
1755 IN HANDLE FileHandle,
1756 OUT PIO_STATUS_BLOCK IoStatusBlock,
1757 OUT PVOID FileInformation,
1758 IN ULONG Length,
1759 IN FILE_INFORMATION_CLASS FileInformationClass
1760 );
1761
1762 NTSTATUS
1763 STDCALL
1764 ZwQueryInformationFile(
1765 HANDLE FileHandle,
1766 PIO_STATUS_BLOCK IoStatusBlock,
1767 PVOID FileInformation,
1768 ULONG Length,
1769 FILE_INFORMATION_CLASS FileInformationClass
1770 );
1771
1772 NTSTATUS
1773 STDCALL
1774 NtQueryInformationJobObject(
1775 HANDLE JobHandle,
1776 JOBOBJECTINFOCLASS JobInformationClass,
1777 PVOID JobInformation,
1778 ULONG JobInformationLength,
1779 PULONG ReturnLength
1780 );
1781
1782 NTSTATUS
1783 STDCALL
1784 ZwQueryInformationJobObject(
1785 HANDLE JobHandle,
1786 JOBOBJECTINFOCLASS JobInformationClass,
1787 PVOID JobInformation,
1788 ULONG JobInformationLength,
1789 PULONG ReturnLength
1790 );
1791
1792 NTSTATUS
1793 STDCALL
1794 NtQueryInformationPort(
1795 HANDLE PortHandle,
1796 CINT PortInformationClass,
1797 PVOID PortInformation,
1798 ULONG PortInformationLength,
1799 PULONG ReturnLength
1800 );
1801
1802 NTSTATUS
1803 STDCALL
1804 ZwQueryInformationPort(
1805 HANDLE PortHandle,
1806 CINT PortInformationClass,
1807 PVOID PortInformation,
1808 ULONG PortInformationLength,
1809 PULONG ReturnLength
1810 );
1811
1812 #ifndef _NTDDK_
1813 NTSTATUS
1814 STDCALL
1815 NtQueryInformationProcess(
1816 IN HANDLE ProcessHandle,
1817 IN PROCESSINFOCLASS ProcessInformationClass,
1818 OUT PVOID ProcessInformation,
1819 IN ULONG ProcessInformationLength,
1820 OUT PULONG ReturnLength OPTIONAL
1821 );
1822
1823 NTSTATUS
1824 STDCALL
1825 ZwQueryInformationProcess(
1826 IN HANDLE ProcessHandle,
1827 IN PROCESSINFOCLASS ProcessInformationClass,
1828 OUT PVOID ProcessInformation,
1829 IN ULONG ProcessInformationLength,
1830 OUT PULONG ReturnLength OPTIONAL
1831 );
1832 #endif
1833
1834 NTSTATUS
1835 STDCALL
1836 NtQueryInformationThread(
1837 IN HANDLE ThreadHandle,
1838 IN THREADINFOCLASS ThreadInformationClass,
1839 OUT PVOID ThreadInformation,
1840 IN ULONG ThreadInformationLength,
1841 OUT PULONG ReturnLength
1842 );
1843
1844 NTSTATUS
1845 STDCALL
1846 ZwQueryInformationThread(
1847 IN HANDLE ThreadHandle,
1848 IN THREADINFOCLASS ThreadInformationClass,
1849 OUT PVOID ThreadInformation,
1850 IN ULONG ThreadInformationLength,
1851 OUT PULONG ReturnLength
1852 );
1853
1854 NTSTATUS
1855 STDCALL
1856 NtQueryInformationToken(
1857 IN HANDLE TokenHandle,
1858 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
1859 OUT PVOID TokenInformation,
1860 IN ULONG TokenInformationLength,
1861 OUT PULONG ReturnLength
1862 );
1863
1864 NTSTATUS
1865 STDCALL
1866 ZwQueryInformationToken(
1867 IN HANDLE TokenHandle,
1868 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
1869 OUT PVOID TokenInformation,
1870 IN ULONG TokenInformationLength,
1871 OUT PULONG ReturnLength
1872 );
1873
1874 NTSTATUS
1875 STDCALL
1876 NtQueryInstallUILanguage(
1877 PLANGID LanguageId
1878 );
1879
1880 NTSTATUS
1881 STDCALL
1882 ZwQueryInstallUILanguage(
1883 PLANGID LanguageId
1884 );
1885
1886 NTSTATUS
1887 STDCALL
1888 NtQueryIoCompletion(
1889 IN HANDLE IoCompletionHandle,
1890 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
1891 OUT PVOID IoCompletionInformation,
1892 IN ULONG IoCompletionInformationLength,
1893 OUT PULONG ResultLength OPTIONAL
1894 );
1895
1896 NTSTATUS
1897 STDCALL
1898 ZwQueryIoCompletion(
1899 IN HANDLE IoCompletionHandle,
1900 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
1901 OUT PVOID IoCompletionInformation,
1902 IN ULONG IoCompletionInformationLength,
1903 OUT PULONG ResultLength OPTIONAL
1904 );
1905
1906 NTSTATUS
1907 STDCALL
1908 NtQueryKey(
1909 IN HANDLE KeyHandle,
1910 IN KEY_INFORMATION_CLASS KeyInformationClass,
1911 OUT PVOID KeyInformation,
1912 IN ULONG Length,
1913 OUT PULONG ResultLength
1914 );
1915
1916 NTSTATUS
1917 STDCALL
1918 ZwQueryKey(
1919 IN HANDLE KeyHandle,
1920 IN KEY_INFORMATION_CLASS KeyInformationClass,
1921 OUT PVOID KeyInformation,
1922 IN ULONG Length,
1923 OUT PULONG ResultLength
1924 );
1925
1926 NTSTATUS
1927 STDCALL
1928 NtQueryQuotaInformationFile(
1929 IN HANDLE FileHandle,
1930 OUT PIO_STATUS_BLOCK IoStatusBlock,
1931 OUT PVOID Buffer,
1932 IN ULONG Length,
1933 IN BOOLEAN ReturnSingleEntry,
1934 IN PVOID SidList OPTIONAL,
1935 IN ULONG SidListLength,
1936 IN PSID StartSid OPTIONAL,
1937 IN BOOLEAN RestartScan
1938 );
1939
1940
1941 NTSTATUS
1942 STDCALL
1943 ZwQueryQuotaInformationFile(
1944 IN HANDLE FileHandle,
1945 OUT PIO_STATUS_BLOCK IoStatusBlock,
1946 OUT PVOID Buffer,
1947 IN ULONG Length,
1948 IN BOOLEAN ReturnSingleEntry,
1949 IN PVOID SidList OPTIONAL,
1950 IN ULONG SidListLength,
1951 IN PSID StartSid OPTIONAL,
1952 IN BOOLEAN RestartScan
1953 );
1954
1955 NTSTATUS
1956 STDCALL
1957 NtQueryMultipleValueKey(
1958 IN HANDLE KeyHandle,
1959 IN OUT PKEY_VALUE_ENTRY ValueList,
1960 IN ULONG NumberOfValues,
1961 OUT PVOID Buffer,
1962 IN OUT PULONG Length,
1963 OUT PULONG ReturnLength
1964 );
1965
1966 NTSTATUS
1967 STDCALL
1968 ZwQueryMultipleValueKey(
1969 IN HANDLE KeyHandle,
1970 IN OUT PKEY_VALUE_ENTRY ValueList,
1971 IN ULONG NumberOfValues,
1972 OUT PVOID Buffer,
1973 IN OUT PULONG Length,
1974 OUT PULONG ReturnLength
1975 );
1976
1977 NTSTATUS
1978 STDCALL
1979 NtQueryMutant(
1980 IN HANDLE MutantHandle,
1981 IN MUTANT_INFORMATION_CLASS MutantInformationClass,
1982 OUT PVOID MutantInformation,
1983 IN ULONG Length,
1984 OUT PULONG ResultLength
1985 );
1986
1987 NTSTATUS
1988 STDCALL
1989 ZwQueryMutant(
1990 IN HANDLE MutantHandle,
1991 IN MUTANT_INFORMATION_CLASS MutantInformationClass,
1992 OUT PVOID MutantInformation,
1993 IN ULONG Length,
1994 OUT PULONG ResultLength
1995 );
1996
1997 NTSTATUS
1998 STDCALL
1999 NtQueryPerformanceCounter(
2000 IN PLARGE_INTEGER Counter,
2001 IN PLARGE_INTEGER Frequency
2002 );
2003
2004 NTSTATUS
2005 STDCALL
2006 ZwQueryPerformanceCounter(
2007 IN PLARGE_INTEGER Counter,
2008 IN PLARGE_INTEGER Frequency
2009 );
2010
2011 NTSTATUS
2012 STDCALL
2013 NtQuerySemaphore(
2014 IN HANDLE SemaphoreHandle,
2015 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
2016 OUT PVOID SemaphoreInformation,
2017 IN ULONG Length,
2018 OUT PULONG ReturnLength
2019 );
2020
2021 NTSTATUS
2022 STDCALL
2023 ZwQuerySemaphore(
2024 IN HANDLE SemaphoreHandle,
2025 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
2026 OUT PVOID SemaphoreInformation,
2027 IN ULONG Length,
2028 OUT PULONG ReturnLength
2029 );
2030
2031 NTSTATUS
2032 STDCALL
2033 NtQuerySymbolicLinkObject(
2034 IN HANDLE SymLinkObjHandle,
2035 OUT PUNICODE_STRING LinkTarget,
2036 OUT PULONG DataWritten OPTIONAL
2037 );
2038
2039 NTSTATUS
2040 STDCALL
2041 ZwQuerySymbolicLinkObject(
2042 IN HANDLE SymLinkObjHandle,
2043 OUT PUNICODE_STRING LinkName,
2044 OUT PULONG DataWritten OPTIONAL
2045 );
2046
2047 NTSTATUS
2048 STDCALL
2049 NtQuerySystemEnvironmentValue(
2050 IN PUNICODE_STRING Name,
2051 OUT PVOID Value,
2052 ULONG Length,
2053 PULONG ReturnLength
2054 );
2055
2056 NTSTATUS
2057 STDCALL
2058 ZwQuerySystemEnvironmentValue(
2059 IN PUNICODE_STRING Name,
2060 OUT PVOID Value,
2061 ULONG Length,
2062 PULONG ReturnLength
2063 );
2064
2065 NTSTATUS
2066 STDCALL
2067 NtQuerySystemInformation(
2068 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2069 OUT PVOID SystemInformation,
2070 IN ULONG Length,
2071 OUT PULONG ResultLength
2072 );
2073
2074 NTSTATUS
2075 STDCALL
2076 ZwQuerySystemInformation(
2077 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2078 OUT PVOID SystemInformation,
2079 IN ULONG Length,
2080 OUT PULONG ResultLength
2081 );
2082
2083 NTSTATUS
2084 STDCALL
2085 NtQuerySystemTime (
2086 OUT PLARGE_INTEGER CurrentTime
2087 );
2088
2089 NTSTATUS
2090 STDCALL
2091 NtQueryTimer(
2092 IN HANDLE TimerHandle,
2093 IN TIMER_INFORMATION_CLASS TimerInformationClass,
2094 OUT PVOID TimerInformation,
2095 IN ULONG Length,
2096 OUT PULONG ResultLength
2097 );
2098 NTSTATUS
2099 STDCALL
2100 ZwQueryTimer(
2101 IN HANDLE TimerHandle,
2102 IN TIMER_INFORMATION_CLASS TimerInformationClass,
2103 OUT PVOID TimerInformation,
2104 IN ULONG Length,
2105 OUT PULONG ResultLength
2106 );
2107
2108 NTSTATUS
2109 STDCALL
2110 NtQueryTimerResolution (
2111 OUT PULONG MinimumResolution,
2112 OUT PULONG MaximumResolution,
2113 OUT PULONG ActualResolution
2114 );
2115
2116 NTSTATUS
2117 STDCALL
2118 ZwQueryTimerResolution (
2119 OUT PULONG MinimumResolution,
2120 OUT PULONG MaximumResolution,
2121 OUT PULONG ActualResolution
2122 );
2123
2124 NTSTATUS
2125 STDCALL
2126 NtQueryValueKey(
2127 IN HANDLE KeyHandle,
2128 IN PUNICODE_STRING ValueName,
2129 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
2130 OUT PVOID KeyValueInformation,
2131 IN ULONG Length,
2132 OUT PULONG ResultLength
2133 );
2134
2135 NTSTATUS
2136 STDCALL
2137 ZwQueryValueKey(
2138 IN HANDLE KeyHandle,
2139 IN PUNICODE_STRING ValueName,
2140 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
2141 OUT PVOID KeyValueInformation,
2142 IN ULONG Length,
2143 OUT PULONG ResultLength
2144 );
2145
2146 NTSTATUS
2147 STDCALL
2148 NtQueryVolumeInformationFile(
2149 IN HANDLE FileHandle,
2150 OUT PIO_STATUS_BLOCK IoStatusBlock,
2151 OUT PVOID FsInformation,
2152 IN ULONG Length,
2153 IN FS_INFORMATION_CLASS FsInformationClass
2154 );
2155
2156 NTSTATUS
2157 STDCALL
2158 ZwQueryVolumeInformationFile(
2159 IN HANDLE FileHandle,
2160 OUT PIO_STATUS_BLOCK IoStatusBlock,
2161 OUT PVOID FsInformation,
2162 IN ULONG Length,
2163 IN FS_INFORMATION_CLASS FsInformationClass
2164 );
2165
2166 NTSTATUS
2167 STDCALL
2168 NtQueueApcThread(
2169 HANDLE ThreadHandle,
2170 PKNORMAL_ROUTINE ApcRoutine,
2171 PVOID NormalContext,
2172 PVOID SystemArgument1,
2173 PVOID SystemArgument2
2174 );
2175
2176 NTSTATUS
2177 STDCALL
2178 ZwQueueApcThread(
2179 HANDLE ThreadHandle,
2180 PKNORMAL_ROUTINE ApcRoutine,
2181 PVOID NormalContext,
2182 PVOID SystemArgument1,
2183 PVOID SystemArgument2
2184 );
2185
2186 NTSTATUS
2187 STDCALL
2188 NtRaiseException(
2189 IN PEXCEPTION_RECORD ExceptionRecord,
2190 IN PCONTEXT Context,
2191 IN BOOLEAN SearchFrames
2192 );
2193
2194 NTSTATUS
2195 STDCALL
2196 ZwRaiseException(
2197 IN PEXCEPTION_RECORD ExceptionRecord,
2198 IN PCONTEXT Context,
2199 IN BOOLEAN SearchFrames
2200 );
2201
2202 NTSTATUS
2203 STDCALL
2204 NtReadFile(
2205 IN HANDLE FileHandle,
2206 IN HANDLE Event OPTIONAL,
2207 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2208 IN PVOID UserApcContext OPTIONAL,
2209 OUT PIO_STATUS_BLOCK IoStatusBlock,
2210 OUT PVOID Buffer,
2211 IN ULONG BufferLength,
2212 IN PLARGE_INTEGER ByteOffset OPTIONAL,
2213 IN PULONG Key OPTIONAL
2214 );
2215
2216 NTSTATUS
2217 STDCALL
2218 ZwReadFile(
2219 IN HANDLE FileHandle,
2220 IN HANDLE Event OPTIONAL,
2221 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2222 IN PVOID UserApcContext OPTIONAL,
2223 OUT PIO_STATUS_BLOCK IoStatusBlock,
2224 OUT PVOID Buffer,
2225 IN ULONG BufferLength,
2226 IN PLARGE_INTEGER ByteOffset OPTIONAL,
2227 IN PULONG Key OPTIONAL
2228 );
2229
2230 NTSTATUS
2231 STDCALL
2232 NtReadFileScatter(
2233 IN HANDLE FileHandle,
2234 IN HANDLE Event OPTIONAL,
2235 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2236 IN PVOID UserApcContext OPTIONAL,
2237 OUT PIO_STATUS_BLOCK UserIoStatusBlock,
2238 IN FILE_SEGMENT_ELEMENT BufferDescription[],
2239 IN ULONG BufferLength,
2240 IN PLARGE_INTEGER ByteOffset,
2241 IN PULONG Key OPTIONAL
2242 );
2243
2244 NTSTATUS
2245 STDCALL
2246 ZwReadFileScatter(
2247 IN HANDLE FileHandle,
2248 IN HANDLE Event OPTIONAL,
2249 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2250 IN PVOID UserApcContext OPTIONAL,
2251 OUT PIO_STATUS_BLOCK UserIoStatusBlock,
2252 IN FILE_SEGMENT_ELEMENT BufferDescription[],
2253 IN ULONG BufferLength,
2254 IN PLARGE_INTEGER ByteOffset,
2255 IN PULONG Key OPTIONAL
2256 );
2257
2258 NTSTATUS
2259 STDCALL
2260 NtReadRequestData(
2261 HANDLE PortHandle,
2262 PLPC_MESSAGE Message,
2263 ULONG Index,
2264 PVOID Buffer,
2265 ULONG BufferLength,
2266 PULONG ReturnLength
2267 );
2268
2269 NTSTATUS
2270 STDCALL
2271 ZwReadRequestData(
2272 HANDLE PortHandle,
2273 PLPC_MESSAGE Message,
2274 ULONG Index,
2275 PVOID Buffer,
2276 ULONG BufferLength,
2277 PULONG ReturnLength
2278 );
2279
2280 NTSTATUS
2281 STDCALL
2282 NtReadVirtualMemory(
2283 IN HANDLE ProcessHandle,
2284 IN PVOID BaseAddress,
2285 OUT PVOID Buffer,
2286 IN ULONG NumberOfBytesToRead,
2287 OUT PULONG NumberOfBytesRead
2288 );
2289 NTSTATUS
2290 STDCALL
2291 ZwReadVirtualMemory(
2292 IN HANDLE ProcessHandle,
2293 IN PVOID BaseAddress,
2294 OUT PVOID Buffer,
2295 IN ULONG NumberOfBytesToRead,
2296 OUT PULONG NumberOfBytesRead
2297 );
2298
2299 NTSTATUS
2300 STDCALL
2301 NtRegisterThreadTerminatePort(
2302 HANDLE TerminationPort
2303 );
2304
2305 NTSTATUS
2306 STDCALL
2307 ZwRegisterThreadTerminatePort(
2308 HANDLE TerminationPort
2309 );
2310
2311 NTSTATUS
2312 STDCALL
2313 NtReleaseMutant(
2314 IN HANDLE MutantHandle,
2315 IN PLONG ReleaseCount OPTIONAL
2316 );
2317
2318 NTSTATUS
2319 STDCALL
2320 ZwReleaseMutant(
2321 IN HANDLE MutantHandle,
2322 IN PLONG ReleaseCount OPTIONAL
2323 );
2324
2325 NTSTATUS
2326 STDCALL
2327 NtReleaseSemaphore(
2328 IN HANDLE SemaphoreHandle,
2329 IN LONG ReleaseCount,
2330 OUT PLONG PreviousCount
2331 );
2332
2333 NTSTATUS
2334 STDCALL
2335 ZwReleaseSemaphore(
2336 IN HANDLE SemaphoreHandle,
2337 IN LONG ReleaseCount,
2338 OUT PLONG PreviousCount
2339 );
2340
2341 NTSTATUS
2342 STDCALL
2343 NtRemoveIoCompletion(
2344 IN HANDLE IoCompletionHandle,
2345 OUT PVOID *CompletionKey,
2346 OUT PVOID *CompletionContext,
2347 OUT PIO_STATUS_BLOCK IoStatusBlock,
2348 IN PLARGE_INTEGER Timeout OPTIONAL
2349 );
2350
2351 NTSTATUS
2352 STDCALL
2353 ZwRemoveIoCompletion(
2354 IN HANDLE IoCompletionHandle,
2355 OUT PVOID *CompletionKey,
2356 OUT PVOID *CompletionContext,
2357 OUT PIO_STATUS_BLOCK IoStatusBlock,
2358 IN PLARGE_INTEGER Timeout OPTIONAL
2359 );
2360
2361 NTSTATUS
2362 STDCALL
2363 NtReplaceKey(
2364 IN POBJECT_ATTRIBUTES ObjectAttributes,
2365 IN HANDLE Key,
2366 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2367 );
2368 NTSTATUS
2369 STDCALL
2370 ZwReplaceKey(
2371 IN POBJECT_ATTRIBUTES ObjectAttributes,
2372 IN HANDLE Key,
2373 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2374 );
2375
2376 NTSTATUS
2377 STDCALL
2378 NtReplyPort(
2379 HANDLE PortHandle,
2380 PLPC_MESSAGE LpcReply
2381 );
2382
2383 NTSTATUS
2384 STDCALL
2385 ZwReplyPort(
2386 HANDLE PortHandle,
2387 PLPC_MESSAGE LpcReply
2388 );
2389
2390 NTSTATUS
2391 STDCALL
2392 NtReplyWaitReceivePort(
2393 HANDLE PortHandle,
2394 PULONG PortId,
2395 PLPC_MESSAGE MessageReply,
2396 PLPC_MESSAGE MessageRequest
2397 );
2398
2399 NTSTATUS
2400 STDCALL
2401 ZwReplyWaitReceivePort(
2402 HANDLE PortHandle,
2403 PULONG PortId,
2404 PLPC_MESSAGE MessageReply,
2405 PLPC_MESSAGE MessageRequest
2406 );
2407
2408 NTSTATUS
2409 STDCALL
2410 NtReplyWaitReplyPort(
2411 HANDLE PortHandle,
2412 PLPC_MESSAGE ReplyMessage
2413 );
2414
2415 NTSTATUS
2416 STDCALL
2417 ZwReplyWaitReplyPort(
2418 HANDLE PortHandle,
2419 PLPC_MESSAGE ReplyMessage
2420 );
2421
2422 NTSTATUS
2423 STDCALL
2424 NtRequestPort(
2425 HANDLE PortHandle,
2426 PLPC_MESSAGE LpcMessage);
2427
2428 NTSTATUS
2429 STDCALL
2430 ZwRequestPort(
2431 HANDLE PortHandle,
2432 PLPC_MESSAGE LpcMessage
2433 );
2434
2435 NTSTATUS
2436 STDCALL
2437 NtRequestWaitReplyPort(
2438 HANDLE PortHandle,
2439 PLPC_MESSAGE LpcReply,
2440 PLPC_MESSAGE LpcRequest
2441 );
2442
2443 NTSTATUS
2444 STDCALL
2445 ZwRequestWaitReplyPort(
2446 HANDLE PortHandle,
2447 PLPC_MESSAGE LpcReply,
2448 PLPC_MESSAGE LpcRequest
2449 );
2450
2451 NTSTATUS
2452 STDCALL
2453 NtResetEvent(
2454 HANDLE EventHandle,
2455 PLONG NumberOfWaitingThreads OPTIONAL
2456 );
2457
2458 NTSTATUS
2459 STDCALL
2460 ZwResetEvent(
2461 HANDLE EventHandle,
2462 PLONG NumberOfWaitingThreads OPTIONAL
2463 );
2464
2465 NTSTATUS
2466 STDCALL
2467 NtRestoreKey(
2468 HANDLE KeyHandle,
2469 HANDLE FileHandle,
2470 ULONG RestoreFlags
2471 );
2472
2473 NTSTATUS
2474 STDCALL
2475 ZwRestoreKey(
2476 HANDLE KeyHandle,
2477 HANDLE FileHandle,
2478 ULONG RestoreFlags
2479 );
2480
2481 NTSTATUS
2482 STDCALL
2483 NtResumeThread(
2484 IN HANDLE ThreadHandle,
2485 OUT PULONG SuspendCount
2486 );
2487
2488 NTSTATUS
2489 STDCALL
2490 ZwResumeThread(
2491 IN HANDLE ThreadHandle,
2492 OUT PULONG SuspendCount
2493 );
2494
2495 NTSTATUS
2496 STDCALL
2497 NtResumeProcess(
2498 IN HANDLE ProcessHandle
2499 );
2500
2501 NTSTATUS
2502 STDCALL
2503 ZwResumeProcess(
2504 IN HANDLE ProcessHandle
2505 );
2506
2507 NTSTATUS
2508 STDCALL
2509 NtSaveKey(
2510 IN HANDLE KeyHandle,
2511 IN HANDLE FileHandle
2512 );
2513 NTSTATUS
2514 STDCALL
2515 ZwSaveKey(
2516 IN HANDLE KeyHandle,
2517 IN HANDLE FileHandle
2518 );
2519
2520 NTSTATUS
2521 STDCALL
2522 NtSaveKeyEx(
2523 IN HANDLE KeyHandle,
2524 IN HANDLE FileHandle,
2525 IN ULONG Flags
2526 );
2527
2528 NTSTATUS
2529 STDCALL
2530 ZwSaveKeyEx(
2531 IN HANDLE KeyHandle,
2532 IN HANDLE FileHandle,
2533 IN ULONG Flags
2534 );
2535
2536 NTSTATUS
2537 STDCALL
2538 NtSetBootEntryOrder(
2539 IN ULONG Unknown1,
2540 IN ULONG Unknown2
2541 );
2542
2543 NTSTATUS
2544 STDCALL
2545 ZwSetBootEntryOrder(
2546 IN ULONG Unknown1,
2547 IN ULONG Unknown2
2548 );
2549
2550 NTSTATUS
2551 STDCALL
2552 NtSetBootOptions(
2553 ULONG Unknown1,
2554 ULONG Unknown2
2555 );
2556
2557 NTSTATUS
2558 STDCALL
2559 ZwSetBootOptions(
2560 ULONG Unknown1,
2561 ULONG Unknown2
2562 );
2563
2564 NTSTATUS
2565 STDCALL
2566 NtSetContextThread(
2567 IN HANDLE ThreadHandle,
2568 IN PCONTEXT Context
2569 );
2570 NTSTATUS
2571 STDCALL
2572 ZwSetContextThread(
2573 IN HANDLE ThreadHandle,
2574 IN PCONTEXT Context
2575 );
2576
2577 NTSTATUS
2578 STDCALL
2579 NtSetDefaultLocale(
2580 IN BOOLEAN UserProfile,
2581 IN LCID DefaultLocaleId
2582 );
2583
2584 NTSTATUS
2585 STDCALL
2586 ZwSetDefaultLocale(
2587 IN BOOLEAN UserProfile,
2588 IN LCID DefaultLocaleId
2589 );
2590
2591 NTSTATUS
2592 STDCALL
2593 NtSetDefaultUILanguage(
2594 LANGID LanguageId
2595 );
2596
2597 NTSTATUS
2598 STDCALL
2599 ZwSetDefaultUILanguage(
2600 LANGID LanguageId
2601 );
2602 NTSTATUS
2603 STDCALL
2604 NtSetDefaultHardErrorPort(
2605 IN HANDLE PortHandle
2606 );
2607 NTSTATUS
2608 STDCALL
2609 ZwSetDefaultHardErrorPort(
2610 IN HANDLE PortHandle
2611 );
2612
2613 NTSTATUS
2614 STDCALL
2615 NtSetEaFile(
2616 IN HANDLE FileHandle,
2617 IN PIO_STATUS_BLOCK IoStatusBlock,
2618 PVOID EaBuffer,
2619 ULONG EaBufferSize
2620 );
2621
2622 NTSTATUS
2623 STDCALL
2624 ZwSetEaFile(
2625 IN HANDLE FileHandle,
2626 IN PIO_STATUS_BLOCK IoStatusBlock,
2627 PVOID EaBuffer,
2628 ULONG EaBufferSize
2629 );
2630
2631 NTSTATUS
2632 STDCALL
2633 NtSetEvent(
2634 IN HANDLE EventHandle,
2635 OUT PLONG PreviousState OPTIONAL
2636 );
2637
2638 NTSTATUS
2639 STDCALL
2640 ZwSetEvent(
2641 IN HANDLE EventHandle,
2642 OUT PLONG PreviousState OPTIONAL
2643 );
2644
2645 NTSTATUS
2646 STDCALL
2647 NtSetHighEventPair(
2648 IN HANDLE EventPairHandle
2649 );
2650
2651 NTSTATUS
2652 STDCALL
2653 ZwSetHighEventPair(
2654 IN HANDLE EventPairHandle
2655 );
2656 NTSTATUS
2657 STDCALL
2658 NtSetHighWaitLowEventPair(
2659 IN HANDLE EventPairHandle
2660 );
2661 NTSTATUS
2662 STDCALL
2663 ZwSetHighWaitLowEventPair(
2664 IN HANDLE EventPairHandle
2665 );
2666
2667 NTSTATUS
2668 STDCALL
2669 NtSetInformationFile(
2670 IN HANDLE FileHandle,
2671 IN PIO_STATUS_BLOCK IoStatusBlock,
2672 IN PVOID FileInformation,
2673 IN ULONG Length,
2674 IN FILE_INFORMATION_CLASS FileInformationClass
2675 );
2676
2677 NTSTATUS
2678 STDCALL
2679 ZwSetInformationFile(
2680 IN HANDLE FileHandle,
2681 IN PIO_STATUS_BLOCK IoStatusBlock,
2682 IN PVOID FileInformation,
2683 IN ULONG Length,
2684 IN FILE_INFORMATION_CLASS FileInformationClass
2685 );
2686
2687 NTSTATUS
2688 STDCALL
2689 NtSetInformationJobObject(
2690 HANDLE JobHandle,
2691 JOBOBJECTINFOCLASS JobInformationClass,
2692 PVOID JobInformation,
2693 ULONG JobInformationLength
2694 );
2695
2696 NTSTATUS
2697 STDCALL
2698 ZwSetInformationJobObject(
2699 HANDLE JobHandle,
2700 JOBOBJECTINFOCLASS JobInformationClass,
2701 PVOID JobInformation,
2702 ULONG JobInformationLength
2703 );
2704
2705 NTSTATUS
2706 STDCALL
2707 NtSetInformationThread(
2708 IN HANDLE ThreadHandle,
2709 IN THREADINFOCLASS ThreadInformationClass,
2710 IN PVOID ThreadInformation,
2711 IN ULONG ThreadInformationLength
2712 );
2713 NTSTATUS
2714 STDCALL
2715 ZwSetInformationThread(
2716 IN HANDLE ThreadHandle,
2717 IN THREADINFOCLASS ThreadInformationClass,
2718 IN PVOID ThreadInformation,
2719 IN ULONG ThreadInformationLength
2720 );
2721
2722 NTSTATUS
2723 STDCALL
2724 NtSetInformationToken(
2725 IN HANDLE TokenHandle,
2726 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
2727 OUT PVOID TokenInformation,
2728 IN ULONG TokenInformationLength
2729 );
2730
2731 NTSTATUS
2732 STDCALL
2733 ZwSetInformationToken(
2734 IN HANDLE TokenHandle,
2735 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
2736 OUT PVOID TokenInformation,
2737 IN ULONG TokenInformationLength
2738 );
2739
2740 NTSTATUS
2741 STDCALL
2742 NtSetIoCompletion(
2743 IN HANDLE IoCompletionPortHandle,
2744 IN PVOID CompletionKey,
2745 IN PVOID CompletionContext,
2746 IN NTSTATUS CompletionStatus,
2747 IN ULONG CompletionInformation
2748 );
2749
2750 NTSTATUS
2751 STDCALL
2752 ZwSetIoCompletion(
2753 IN HANDLE IoCompletionPortHandle,
2754 IN PVOID CompletionKey,
2755 IN PVOID CompletionContext,
2756 IN NTSTATUS CompletionStatus,
2757 IN ULONG CompletionInformation
2758 );
2759
2760 NTSTATUS
2761 STDCALL
2762 NtSetIntervalProfile(
2763 ULONG Interval,
2764 KPROFILE_SOURCE ClockSource
2765 );
2766
2767 NTSTATUS
2768 STDCALL
2769 ZwSetIntervalProfile(
2770 ULONG Interval,
2771 KPROFILE_SOURCE ClockSource
2772 );
2773
2774 NTSTATUS
2775 STDCALL
2776 NtSetLowEventPair(
2777 HANDLE EventPair
2778 );
2779
2780 NTSTATUS
2781 STDCALL
2782 ZwSetLowEventPair(
2783 HANDLE EventPair
2784 );
2785
2786 NTSTATUS
2787 STDCALL
2788 NtSetLowWaitHighEventPair(
2789 HANDLE EventPair
2790 );
2791
2792 NTSTATUS
2793 STDCALL
2794 ZwSetLowWaitHighEventPair(
2795 HANDLE EventPair
2796 );
2797
2798 NTSTATUS
2799 STDCALL
2800 NtSetQuotaInformationFile(
2801 HANDLE FileHandle,
2802 PIO_STATUS_BLOCK IoStatusBlock,
2803 PFILE_QUOTA_INFORMATION Buffer,
2804 ULONG BufferLength
2805 );
2806
2807 NTSTATUS
2808 STDCALL
2809 ZwSetQuotaInformationFile(
2810 HANDLE FileHandle,
2811 PIO_STATUS_BLOCK IoStatusBlock,
2812 PFILE_QUOTA_INFORMATION Buffer,
2813 ULONG BufferLength
2814 );
2815
2816 NTSTATUS
2817 STDCALL
2818 NtSetSecurityObject(
2819 IN HANDLE Handle,
2820 IN SECURITY_INFORMATION SecurityInformation,
2821 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2822 );
2823
2824 NTSTATUS
2825 STDCALL
2826 ZwSetSecurityObject(
2827 IN HANDLE Handle,
2828 IN SECURITY_INFORMATION SecurityInformation,
2829 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2830 );
2831
2832 NTSTATUS
2833 STDCALL
2834 NtSetSystemEnvironmentValue(
2835 IN PUNICODE_STRING VariableName,
2836 IN PUNICODE_STRING Value
2837 );
2838 NTSTATUS
2839 STDCALL
2840 ZwSetSystemEnvironmentValue(
2841 IN PUNICODE_STRING VariableName,
2842 IN PUNICODE_STRING Value
2843 );
2844
2845 NTSTATUS
2846 STDCALL
2847 NtSetSystemInformation(
2848 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2849 IN PVOID SystemInformation,
2850 IN ULONG SystemInformationLength
2851 );
2852
2853 NTSTATUS
2854 STDCALL
2855 ZwSetSystemInformation(
2856 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2857 IN PVOID SystemInformation,
2858 IN ULONG SystemInformationLength
2859 );
2860
2861 NTSTATUS
2862 STDCALL
2863 NtSetSystemTime(
2864 IN PLARGE_INTEGER SystemTime,
2865 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2866 );
2867
2868 NTSTATUS
2869 STDCALL
2870 ZwSetSystemTime(
2871 IN PLARGE_INTEGER SystemTime,
2872 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2873 );
2874
2875 NTSTATUS
2876 STDCALL
2877 NtSetTimerResolution(
2878 IN ULONG RequestedResolution,
2879 IN BOOLEAN SetOrUnset,
2880 OUT PULONG ActualResolution
2881 );
2882
2883 NTSTATUS
2884 STDCALL
2885 ZwSetTimerResolution(
2886 IN ULONG RequestedResolution,
2887 IN BOOLEAN SetOrUnset,
2888 OUT PULONG ActualResolution
2889 );
2890
2891 NTSTATUS
2892 STDCALL
2893 NtSetUuidSeed(
2894 IN PUCHAR UuidSeed
2895 );
2896
2897 NTSTATUS
2898 STDCALL
2899 ZwSetUuidSeed(
2900 IN PUCHAR UuidSeed
2901 );
2902
2903 NTSTATUS
2904 STDCALL
2905 NtSetValueKey(
2906 IN HANDLE KeyHandle,
2907 IN PUNICODE_STRING ValueName,
2908 IN ULONG TitleIndex OPTIONAL,
2909 IN ULONG Type,
2910 IN PVOID Data,
2911 IN ULONG DataSize
2912 );
2913
2914 NTSTATUS
2915 STDCALL
2916 ZwSetValueKey(
2917 IN HANDLE KeyHandle,
2918 IN PUNICODE_STRING ValueName,
2919 IN ULONG TitleIndex OPTIONAL,
2920 IN ULONG Type,
2921 IN PVOID Data,
2922 IN ULONG DataSize
2923 );
2924
2925 NTSTATUS
2926 STDCALL
2927 NtSetVolumeInformationFile(
2928 IN HANDLE FileHandle,
2929 OUT PIO_STATUS_BLOCK IoStatusBlock,
2930 IN PVOID FsInformation,
2931 IN ULONG Length,
2932 IN FS_INFORMATION_CLASS FsInformationClass
2933 );
2934
2935 NTSTATUS
2936 STDCALL
2937 ZwSetVolumeInformationFile(
2938 IN HANDLE FileHandle,
2939 OUT PIO_STATUS_BLOCK IoStatusBlock,
2940 IN PVOID FsInformation,
2941 IN ULONG Length,
2942 IN FS_INFORMATION_CLASS FsInformationClass
2943 );
2944
2945 NTSTATUS
2946 STDCALL
2947 NtShutdownSystem(
2948 IN ULONG Action
2949 );
2950
2951 NTSTATUS
2952 STDCALL
2953 ZwShutdownSystem(
2954 IN ULONG Action
2955 );
2956
2957 NTSTATUS
2958 STDCALL
2959 NtSignalAndWaitForSingleObject(
2960 IN HANDLE SignalObject,
2961 IN HANDLE WaitObject,
2962 IN BOOLEAN Alertable,
2963 IN PLARGE_INTEGER Time
2964 );
2965
2966 NTSTATUS
2967 STDCALL
2968 ZwSignalAndWaitForSingleObject(
2969 IN HANDLE SignalObject,
2970 IN HANDLE WaitObject,
2971 IN BOOLEAN Alertable,
2972 IN PLARGE_INTEGER Time
2973 );
2974
2975 NTSTATUS
2976 STDCALL
2977 NtStartProfile(
2978 HANDLE ProfileHandle
2979 );
2980
2981 NTSTATUS
2982 STDCALL
2983 ZwStartProfile(
2984 HANDLE ProfileHandle
2985 );
2986
2987 NTSTATUS
2988 STDCALL
2989 NtStopProfile(
2990 HANDLE ProfileHandle
2991 );
2992
2993 NTSTATUS
2994 STDCALL
2995 ZwStopProfile(
2996 HANDLE ProfileHandle
2997 );
2998
2999 NTSTATUS
3000 STDCALL
3001 NtTerminateProcess(
3002 IN HANDLE ProcessHandle,
3003 IN NTSTATUS ExitStatus
3004 );
3005
3006 NTSTATUS
3007 STDCALL
3008 ZwTerminateProcess(
3009 IN HANDLE ProcessHandle,
3010 IN NTSTATUS ExitStatus
3011 );
3012
3013 NTSTATUS
3014 STDCALL
3015 NtTerminateJobObject(
3016 HANDLE JobHandle,
3017 NTSTATUS ExitStatus
3018 );
3019
3020 NTSTATUS
3021 STDCALL
3022 ZwTerminateJobObject(
3023 HANDLE JobHandle,
3024 NTSTATUS ExitStatus
3025 );
3026
3027 NTSTATUS
3028 STDCALL
3029 NtTraceEvent(
3030 IN ULONG TraceHandle,
3031 IN ULONG Flags,
3032 IN ULONG TraceHeaderLength,
3033 IN struct _EVENT_TRACE_HEADER* TraceHeader
3034 );
3035
3036 NTSTATUS
3037 STDCALL
3038 ZwTraceEvent(
3039 IN ULONG TraceHandle,
3040 IN ULONG Flags,
3041 IN ULONG TraceHeaderLength,
3042 IN struct _EVENT_TRACE_HEADER* TraceHeader
3043 );
3044
3045 NTSTATUS
3046 STDCALL
3047 NtTranslateFilePath(
3048 ULONG Unknown1,
3049 ULONG Unknown2,
3050 ULONG Unknown3
3051 );
3052
3053 NTSTATUS
3054 STDCALL
3055 ZwTranslateFilePath(
3056 ULONG Unknown1,
3057 ULONG Unknown2,
3058 ULONG Unknown3
3059 );
3060
3061 NTSTATUS
3062 STDCALL
3063 NtUnloadDriver(
3064 IN PUNICODE_STRING DriverServiceName
3065 );
3066
3067 NTSTATUS
3068 STDCALL
3069 ZwUnloadDriver(
3070 IN PUNICODE_STRING DriverServiceName
3071 );
3072
3073 NTSTATUS
3074 STDCALL
3075 NtUnmapViewOfSection(
3076 IN HANDLE ProcessHandle,
3077 IN PVOID BaseAddress
3078 );
3079
3080 NTSTATUS
3081 STDCALL
3082 ZwUnmapViewOfSection(
3083 IN HANDLE ProcessHandle,
3084 IN PVOID BaseAddress
3085 );
3086
3087 NTSTATUS
3088 STDCALL
3089 NtWriteRequestData(
3090 HANDLE PortHandle,
3091 PLPC_MESSAGE Message,
3092 ULONG Index,
3093 PVOID Buffer,
3094 ULONG BufferLength,
3095 PULONG ReturnLength
3096 );
3097
3098 NTSTATUS
3099 STDCALL
3100 ZwWriteRequestData(
3101 HANDLE PortHandle,
3102 PLPC_MESSAGE Message,
3103 ULONG Index,
3104 PVOID Buffer,
3105 ULONG BufferLength,
3106 PULONG ReturnLength
3107 );
3108
3109 NTSTATUS
3110 STDCALL
3111 NtWriteVirtualMemory(
3112 IN HANDLE ProcessHandle,
3113 IN PVOID BaseAddress,
3114 IN PVOID Buffer,
3115 IN ULONG NumberOfBytesToWrite,
3116 OUT PULONG NumberOfBytesWritten
3117 );
3118
3119 NTSTATUS
3120 STDCALL
3121 ZwWriteVirtualMemory(
3122 IN HANDLE ProcessHandle,
3123 IN PVOID BaseAddress,
3124 IN PVOID Buffer,
3125 IN ULONG NumberOfBytesToWrite,
3126 OUT PULONG NumberOfBytesWritten
3127 );
3128
3129
3130 NTSTATUS
3131 STDCALL
3132 NtWaitForSingleObject (
3133 IN HANDLE Object,
3134 IN BOOLEAN Alertable,
3135 IN PLARGE_INTEGER Time
3136 );
3137
3138 NTSTATUS
3139 STDCALL
3140 ZwWaitForSingleObject (
3141 IN HANDLE Object,
3142 IN BOOLEAN Alertable,
3143 IN PLARGE_INTEGER Time
3144 );
3145
3146
3147 NTSTATUS
3148 STDCALL
3149 NtWaitHighEventPair(
3150 IN HANDLE EventPairHandle
3151 );
3152
3153 NTSTATUS
3154 STDCALL
3155 ZwWaitHighEventPair(
3156 IN HANDLE EventPairHandle
3157 );
3158
3159 NTSTATUS
3160 STDCALL
3161 NtWaitLowEventPair(
3162 IN HANDLE EventPairHandle
3163 );
3164
3165 NTSTATUS
3166 STDCALL
3167 ZwWaitLowEventPair(
3168 IN HANDLE EventPairHandle
3169 );
3170
3171 NTSTATUS
3172 STDCALL
3173 NtUnlockFile(
3174 IN HANDLE FileHandle,
3175 OUT PIO_STATUS_BLOCK IoStatusBlock,
3176 IN PLARGE_INTEGER ByteOffset,
3177 IN PLARGE_INTEGER Lenght,
3178 OUT PULONG Key OPTIONAL
3179 );
3180 NTSTATUS
3181 STDCALL
3182 ZwUnlockFile(
3183 IN HANDLE FileHandle,
3184 OUT PIO_STATUS_BLOCK IoStatusBlock,
3185 IN PLARGE_INTEGER ByteOffset,
3186 IN PLARGE_INTEGER Lenght,
3187 OUT PULONG Key OPTIONAL
3188 );
3189
3190
3191 NTSTATUS
3192 STDCALL
3193 NtWriteFile(
3194 IN HANDLE FileHandle,
3195 IN HANDLE Event OPTIONAL,
3196 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3197 IN PVOID ApcContext OPTIONAL,
3198 OUT PIO_STATUS_BLOCK IoStatusBlock,
3199 IN PVOID Buffer,
3200 IN ULONG Length,
3201 IN PLARGE_INTEGER ByteOffset,
3202 IN PULONG Key OPTIONAL
3203 );
3204
3205 NTSTATUS
3206 STDCALL
3207 ZwWriteFile(
3208 IN HANDLE FileHandle,
3209 IN HANDLE Event OPTIONAL,
3210 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3211 IN PVOID ApcContext OPTIONAL,
3212 OUT PIO_STATUS_BLOCK IoStatusBlock,
3213 IN PVOID Buffer,
3214 IN ULONG Length,
3215 IN PLARGE_INTEGER ByteOffset ,
3216 IN PULONG Key OPTIONAL
3217 );
3218
3219 NTSTATUS
3220 STDCALL
3221 NtWriteFileGather(
3222 IN HANDLE FileHandle,
3223 IN HANDLE Event OPTIONAL,
3224 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3225 IN PVOID ApcContext OPTIONAL,
3226 OUT PIO_STATUS_BLOCK IoStatusBlock,
3227 IN FILE_SEGMENT_ELEMENT BufferDescription[],
3228 IN ULONG BufferLength,
3229 IN PLARGE_INTEGER ByteOffset,
3230 IN PULONG Key OPTIONAL
3231 );
3232
3233 NTSTATUS
3234 STDCALL
3235 ZwWriteFileGather(
3236 IN HANDLE FileHandle,
3237 IN HANDLE Event OPTIONAL,
3238 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3239 IN PVOID ApcContext OPTIONAL,
3240 OUT PIO_STATUS_BLOCK IoStatusBlock,
3241 IN FILE_SEGMENT_ELEMENT BufferDescription[],
3242 IN ULONG BufferLength,
3243 IN PLARGE_INTEGER ByteOffset,
3244 IN PULONG Key OPTIONAL
3245 );
3246
3247 NTSTATUS
3248 STDCALL
3249 NtSuspendThread(
3250 IN HANDLE ThreadHandle,
3251 IN PULONG PreviousSuspendCount
3252 );
3253
3254 NTSTATUS
3255 STDCALL
3256 ZwSuspendThread(
3257 IN HANDLE ThreadHandle,
3258 IN PULONG PreviousSuspendCount
3259 );
3260
3261 NTSTATUS
3262 STDCALL
3263 NtSuspendProcess(
3264 IN HANDLE ProcessHandle
3265 );
3266
3267 NTSTATUS
3268 STDCALL
3269 ZwSuspendProcess(
3270 IN HANDLE ProcessHandle
3271 );
3272
3273 NTSTATUS
3274 STDCALL
3275 NtTerminateThread(
3276 IN HANDLE ThreadHandle ,
3277 IN NTSTATUS ExitStatus
3278 );
3279 NTSTATUS
3280 STDCALL
3281 ZwTerminateThread(
3282 IN HANDLE ThreadHandle ,
3283 IN NTSTATUS ExitStatus
3284 );
3285
3286 NTSTATUS
3287 STDCALL
3288 NtTestAlert(
3289 VOID
3290 );
3291 NTSTATUS
3292 STDCALL
3293 ZwTestAlert(
3294 VOID
3295 );
3296
3297 NTSTATUS
3298 STDCALL
3299 NtYieldExecution(
3300 VOID
3301 );
3302
3303 NTSTATUS
3304 STDCALL
3305 ZwYieldExecution(
3306 VOID
3307 );
3308
3309 NTSTATUS
3310 STDCALL
3311 NtPlugPlayControl(
3312 DWORD Unknown1,
3313 DWORD Unknown2,
3314 DWORD Unknown3
3315 );
3316
3317 NTSTATUS
3318 STDCALL
3319 NtGetPlugPlayEvent(
3320 ULONG Reserved1,
3321 ULONG Reserved2,
3322 PVOID Buffer,
3323 ULONG BufferLength
3324 );
3325
3326 NTSTATUS
3327 STDCALL
3328 NtSetSystemPowerState(
3329 IN POWER_ACTION SystemAction,
3330 IN SYSTEM_POWER_STATE MinSystemState,
3331 IN ULONG Flags
3332 );
3333
3334 NTSTATUS
3335 STDCALL
3336 NtSystemDebugControl(
3337 DEBUG_CONTROL_CODE ControlCode,
3338 PVOID InputBuffer,
3339 ULONG InputBufferLength,
3340 PVOID OutputBuffer,
3341 ULONG OutputBufferLength,
3342 PULONG ReturnLength
3343 );
3344
3345 NTSTATUS
3346 STDCALL
3347 NtVdmControl(
3348 ULONG ControlCode,
3349 PVOID ControlData
3350 );
3351
3352 NTSTATUS
3353 STDCALL
3354 NtW32Call(
3355 IN ULONG RoutineIndex,
3356 IN PVOID Argument,
3357 IN ULONG ArgumentLength,
3358 OUT PVOID* Result OPTIONAL,
3359 OUT PULONG ResultLength OPTIONAL
3360 );
3361
3362 NTSTATUS
3363 STDCALL
3364 NtCreateChannel(
3365 VOID
3366 );
3367
3368 NTSTATUS
3369 STDCALL
3370 NtListenChannel(
3371 VOID
3372 );
3373
3374 NTSTATUS
3375 STDCALL
3376 NtOpenChannel(
3377 VOID
3378 );
3379
3380 NTSTATUS
3381 STDCALL
3382 NtReplyWaitSendChannel(
3383 VOID
3384 );
3385
3386 NTSTATUS
3387 STDCALL
3388 NtSendWaitReplyChannel(
3389 VOID
3390 );
3391
3392 NTSTATUS
3393 STDCALL
3394 NtSetContextChannel(
3395 VOID
3396 );
3397
3398 NTSTATUS
3399 STDCALL
3400 NtSetLdtEntries(
3401 ULONG Selector1,
3402 LDT_ENTRY LdtEntry1,
3403 ULONG Selector2,
3404 LDT_ENTRY LdtEntry2
3405 );
3406
3407 NTSTATUS
3408 STDCALL
3409 NtQueryOleDirectoryFile(
3410 VOID
3411 );
3412
3413 NTSTATUS
3414 STDCALL
3415 NtAccessCheck(
3416 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3417 IN HANDLE ClientToken,
3418 IN ACCESS_MASK DesiredAcces,
3419 IN PGENERIC_MAPPING GenericMapping,
3420 OUT PPRIVILEGE_SET PrivilegeSet,
3421 OUT PULONG ReturnLength,
3422 OUT PACCESS_MASK GrantedAccess,
3423 OUT PNTSTATUS AccessStatus
3424 );
3425
3426 NTSTATUS
3427 STDCALL
3428 ZwAccessCheck(
3429 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3430 IN HANDLE ClientToken,
3431 IN ACCESS_MASK DesiredAcces,
3432 IN PGENERIC_MAPPING GenericMapping,
3433 OUT PPRIVILEGE_SET PrivilegeSet,
3434 OUT PULONG ReturnLength,
3435 OUT PACCESS_MASK GrantedAccess,
3436 OUT PNTSTATUS AccessStatus
3437 );
3438
3439 NTSTATUS
3440 STDCALL
3441 NtAccessCheckAndAuditAlarm(
3442 IN PUNICODE_STRING SubsystemName,
3443 IN PHANDLE ObjectHandle,
3444 IN PUNICODE_STRING ObjectTypeName,
3445 IN PUNICODE_STRING ObjectName,
3446 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3447 IN ACCESS_MASK DesiredAccess,
3448 IN PGENERIC_MAPPING GenericMapping,
3449 IN BOOLEAN ObjectCreation,
3450 OUT PACCESS_MASK GrantedAccess,
3451 OUT PNTSTATUS AccessStatus,
3452 OUT PBOOLEAN GenerateOnClose
3453 );
3454
3455 NTSTATUS
3456 STDCALL
3457 NtCancelTimer(
3458 IN HANDLE TimerHandle,
3459 OUT PBOOLEAN CurrentState OPTIONAL
3460 );
3461
3462
3463 NTSTATUS
3464 STDCALL
3465 NtContinue(
3466 IN PCONTEXT Context,
3467 IN BOOLEAN TestAlert
3468 );
3469
3470 NTSTATUS
3471 STDCALL
3472 NtCreatePagingFile(
3473 IN PUNICODE_STRING FileName,
3474 IN PLARGE_INTEGER InitialSize,
3475 IN PLARGE_INTEGER MaxiumSize,
3476 IN ULONG Reserved
3477 );
3478
3479 NTSTATUS
3480 STDCALL
3481 NtCreateProfile(
3482 OUT PHANDLE ProfileHandle,
3483 IN HANDLE ProcessHandle,
3484 IN PVOID ImageBase,
3485 IN ULONG ImageSize,
3486 IN ULONG Granularity,
3487 OUT PVOID Buffer,
3488 IN ULONG ProfilingSize,
3489 IN KPROFILE_SOURCE Source,
3490 IN KAFFINITY ProcessorMask
3491 );
3492
3493 NTSTATUS
3494 STDCALL
3495 NtCreateThread(
3496 OUT PHANDLE ThreadHandle,
3497 IN ACCESS_MASK DesiredAccess,
3498 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3499 IN HANDLE ProcessHandle,
3500 OUT PCLIENT_ID ClientId,
3501 IN PCONTEXT ThreadContext,
3502 IN PINITIAL_TEB UserStack,
3503 IN BOOLEAN CreateSuspended
3504 );
3505
3506 NTSTATUS
3507 STDCALL
3508 NtDelayExecution(
3509 IN BOOLEAN Alertable,
3510 IN LARGE_INTEGER *Interval
3511 );
3512
3513 NTSTATUS
3514 STDCALL
3515 NtExtendSection(
3516 IN HANDLE SectionHandle,
3517 IN PLARGE_INTEGER NewMaximumSize
3518 );
3519
3520 NTSTATUS
3521 STDCALL
3522 NtFlushInstructionCache(
3523 IN HANDLE ProcessHandle,
3524 IN PVOID BaseAddress,
3525 IN UINT NumberOfBytesToFlush
3526 );
3527
3528 NTSTATUS
3529 STDCALL
3530 NtFlushVirtualMemory(
3531 IN HANDLE ProcessHandle,
3532 IN PVOID BaseAddress,
3533 IN ULONG NumberOfBytesToFlush,
3534 OUT PULONG NumberOfBytesFlushed OPTIONAL
3535 );
3536
3537 ULONG
3538 STDCALL
3539 NtGetTickCount(
3540 VOID
3541 );
3542
3543 NTSTATUS
3544 STDCALL
3545 NtLoadKey(
3546 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
3547 IN POBJECT_ATTRIBUTES FileObjectAttributes
3548 );
3549
3550
3551 NTSTATUS
3552 STDCALL
3553 NtLockVirtualMemory(
3554 HANDLE ProcessHandle,
3555 PVOID BaseAddress,
3556 ULONG NumberOfBytesToLock,
3557 PULONG NumberOfBytesLocked
3558 );
3559
3560 NTSTATUS
3561 STDCALL
3562 NtOpenObjectAuditAlarm(
3563 IN PUNICODE_STRING SubsystemName,
3564 IN PVOID HandleId,
3565 IN PUNICODE_STRING ObjectTypeName,
3566 IN PUNICODE_STRING ObjectName,
3567 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3568 IN HANDLE ClientToken,
3569 IN ULONG DesiredAccess,
3570 IN ULONG GrantedAccess,
3571 IN PPRIVILEGE_SET Privileges,
3572 IN BOOLEAN ObjectCreation,
3573 IN BOOLEAN AccessGranted,
3574 OUT PBOOLEAN GenerateOnClose
3575 );
3576
3577 NTSTATUS
3578 STDCALL
3579 NtProtectVirtualMemory(
3580 IN HANDLE ProcessHandle,
3581 IN PVOID *BaseAddress,
3582 IN ULONG *NumberOfBytesToProtect,
3583 IN ULONG NewAccessProtection,
3584 OUT PULONG OldAccessProtection
3585 );
3586
3587 NTSTATUS
3588 STDCALL
3589 NtQueryDirectoryObject(
3590 IN HANDLE DirectoryHandle,
3591 OUT PVOID Buffer,
3592 IN ULONG BufferLength,
3593 IN BOOLEAN ReturnSingleEntry,
3594 IN BOOLEAN RestartScan,
3595 IN OUT PULONG Context,
3596 OUT PULONG ReturnLength OPTIONAL
3597 );
3598
3599 NTSTATUS
3600 STDCALL
3601 NtQueryIntervalProfile(
3602 IN KPROFILE_SOURCE ProfileSource,
3603 OUT PULONG Interval
3604 );
3605
3606 NTSTATUS
3607 STDCALL
3608 NtQuerySection(
3609 IN HANDLE SectionHandle,
3610 IN CINT SectionInformationClass,
3611 OUT PVOID SectionInformation,
3612 IN ULONG Length,
3613 OUT PULONG ResultLength
3614 );
3615
3616 NTSTATUS
3617 STDCALL
3618 NtQueryVirtualMemory(
3619 IN HANDLE ProcessHandle,
3620 IN PVOID Address,
3621 IN IN CINT VirtualMemoryInformationClass,
3622 OUT PVOID VirtualMemoryInformation,
3623 IN ULONG Length,
3624 OUT PULONG ResultLength
3625 );
3626
3627 NTSTATUS
3628 STDCALL
3629 NtRaiseHardError(
3630 IN NTSTATUS ErrorStatus,
3631 IN ULONG NumberOfParameters,
3632 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
3633 IN PVOID *Parameters,
3634 IN HARDERROR_RESPONSE_OPTION ResponseOption,
3635 OUT PHARDERROR_RESPONSE Response
3636 );
3637
3638 NTSTATUS
3639 STDCALL
3640 NtSetInformationKey(
3641 IN HANDLE KeyHandle,
3642 IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
3643 IN PVOID KeyInformation,
3644 IN ULONG KeyInformationLength
3645 );
3646
3647 NTSTATUS
3648 STDCALL
3649 NtSetInformationObject(
3650 IN HANDLE ObjectHandle,
3651 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3652 IN PVOID ObjectInformation,
3653 IN ULONG Length
3654 );
3655
3656 NTSTATUS
3657 STDCALL
3658 NtSetTimer(
3659 IN HANDLE TimerHandle,
3660 IN PLARGE_INTEGER DueTime,
3661 IN PTIMER_APC_ROUTINE TimerApcRoutine,
3662 IN PVOID TimerContext,
3663 IN BOOLEAN WakeTimer,
3664 IN LONG Period OPTIONAL,
3665 OUT PBOOLEAN PreviousState OPTIONAL
3666 );
3667
3668 NTSTATUS
3669 STDCALL
3670 NtUnloadKey(
3671 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3672 );
3673
3674 NTSTATUS
3675 STDCALL
3676 NtUnlockVirtualMemory(
3677 IN HANDLE ProcessHandle,
3678 IN PVOID BaseAddress,
3679 IN ULONG NumberOfBytesToUnlock,
3680 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3681 );
3682
3683 NTSTATUS
3684 STDCALL
3685 NtWaitForMultipleObjects(
3686 IN ULONG Count,
3687 IN HANDLE Object[],
3688 IN WAIT_TYPE WaitType,
3689 IN BOOLEAN Alertable,
3690 IN PLARGE_INTEGER Time
3691 );
3692
3693 NTSTATUS
3694 STDCALL
3695 ZwContinue(
3696 IN PCONTEXT Context,
3697 IN CINT IrqLevel
3698 );
3699
3700 NTSTATUS
3701 STDCALL
3702 ZwQuerySystemTime (
3703 OUT PLARGE_INTEGER CurrentTime
3704 );
3705
3706
3707 NTSTATUS
3708 STDCALL
3709 NtDuplicateObject(
3710 IN HANDLE SourceProcessHandle,
3711 IN HANDLE SourceHandle,
3712 IN HANDLE TargetProcessHandle,
3713 OUT PHANDLE TargetHandle,
3714 IN ACCESS_MASK DesiredAccess,
3715 IN ULONG HandleAttributes,
3716 IN ULONG Options
3717 );
3718
3719 NTSTATUS
3720 STDCALL
3721 ZwDuplicateObject(
3722 IN HANDLE SourceProcessHandle,
3723 IN HANDLE SourceHandle,
3724 IN HANDLE TargetProcessHandle,
3725 OUT PHANDLE TargetHandle,
3726 IN ACCESS_MASK DesiredAccess,
3727 IN ULONG HandleAttributes,
3728 IN ULONG Options
3729 );
3730
3731 NTSTATUS
3732 STDCALL
3733 NtAddAtom(
3734 IN PWSTR AtomName,
3735 IN ULONG AtomNameLength,
3736 IN OUT PRTL_ATOM Atom
3737 );
3738
3739 NTSTATUS
3740 STDCALL
3741 ZwAddAtom(
3742 IN PWSTR AtomName,
3743 IN ULONG AtomNameLength,
3744 IN OUT PRTL_ATOM Atom
3745 );
3746
3747 NTSTATUS
3748 STDCALL
3749 NtAllocateUuids(
3750 PULARGE_INTEGER Time,
3751 PULONG Range,
3752 PULONG Sequence,
3753 PUCHAR Seed
3754 );
3755
3756 NTSTATUS
3757 STDCALL
3758 ZwAllocateUuids(
3759 PULARGE_INTEGER Time,
3760 PULONG Range,
3761 PULONG Sequence,
3762 PUCHAR Seed
3763 );
3764
3765 NTSTATUS
3766 STDCALL
3767 ZwCreatePagingFile(
3768 IN PUNICODE_STRING FileName,
3769 IN PLARGE_INTEGER InitialSize,
3770 IN PLARGE_INTEGER MaxiumSize,
3771 IN ULONG Reserved
3772 );
3773
3774 NTSTATUS
3775 STDCALL
3776 ZwCreateThread(
3777 OUT PHANDLE ThreadHandle,
3778 IN ACCESS_MASK DesiredAccess,
3779 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3780 IN HANDLE ProcessHandle,
3781 OUT PCLIENT_ID ClientId,
3782 IN PCONTEXT ThreadContext,
3783 IN PINITIAL_TEB UserStack,
3784 IN BOOLEAN CreateSuspended
3785 );
3786
3787 NTSTATUS
3788 STDCALL
3789 NtDuplicateToken(
3790 IN HANDLE ExistingTokenHandle,
3791 IN ACCESS_MASK DesiredAccess,
3792 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3793 IN BOOLEAN EffectiveOnly,
3794 IN TOKEN_TYPE TokenType,
3795 OUT PHANDLE NewTokenHandle
3796 );
3797
3798 NTSTATUS
3799 STDCALL
3800 NtFindAtom(
3801 IN PWSTR AtomName,
3802 IN ULONG AtomNameLength,
3803 OUT PRTL_ATOM Atom OPTIONAL
3804 );
3805
3806 NTSTATUS
3807 STDCALL
3808 ZwFindAtom(
3809 IN PWSTR AtomName,
3810 IN ULONG AtomNameLength,
3811 OUT PRTL_ATOM Atom OPTIONAL
3812 );
3813
3814 ULONG
3815 STDCALL
3816 ZwGetTickCount(
3817 VOID
3818 );
3819
3820 NTSTATUS
3821 STDCALL
3822 ZwLoadKey(
3823 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
3824 IN POBJECT_ATTRIBUTES FileObjectAttributes
3825 );
3826
3827 NTSTATUS
3828 STDCALL
3829 ZwLockVirtualMemory(
3830 HANDLE ProcessHandle,
3831 PVOID BaseAddress,
3832 ULONG NumberOfBytesToLock,
3833 PULONG NumberOfBytesLocked
3834 );
3835
3836 NTSTATUS
3837 STDCALL
3838 ZwOpenObjectAuditAlarm(
3839 IN PUNICODE_STRING SubsystemName,
3840 IN PVOID HandleId,
3841 IN PUNICODE_STRING ObjectTypeName,
3842 IN PUNICODE_STRING ObjectName,
3843 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3844 IN HANDLE ClientToken,
3845 IN ULONG DesiredAccess,
3846 IN ULONG GrantedAccess,
3847 IN PPRIVILEGE_SET Privileges,
3848 IN BOOLEAN ObjectCreation,
3849 IN BOOLEAN AccessGranted,
3850 OUT PBOOLEAN GenerateOnClose
3851 );
3852
3853 NTSTATUS
3854 STDCALL
3855 ZwProtectVirtualMemory(
3856 IN HANDLE ProcessHandle,
3857 IN PVOID *BaseAddress,
3858 IN ULONG *NumberOfBytesToProtect,
3859 IN ULONG NewAccessProtection,
3860 OUT PULONG OldAccessProtection
3861 );
3862
3863 NTSTATUS
3864 STDCALL
3865 NtQueryInformationAtom(
3866 IN RTL_ATOM Atom,
3867 IN ATOM_INFORMATION_CLASS AtomInformationClass,
3868 OUT PVOID AtomInformation,
3869 IN ULONG AtomInformationLength,
3870 OUT PULONG ReturnLength OPTIONAL
3871 );
3872
3873 NTSTATUS
3874 STDCALL
3875 ZwQueryInformationAtom(
3876 IN RTL_ATOM Atom,
3877 IN ATOM_INFORMATION_CLASS AtomInformationClass,
3878 OUT PVOID AtomInformation,
3879 IN ULONG AtomInformationLength,
3880 OUT PULONG ReturnLength OPTIONAL
3881 );
3882
3883 NTSTATUS
3884 STDCALL
3885 ZwQueryDirectoryObject(
3886 IN HANDLE DirectoryHandle,
3887 OUT PVOID Buffer,
3888 IN ULONG BufferLength,
3889 IN BOOLEAN ReturnSingleEntry,
3890 IN BOOLEAN RestartScan,
3891 IN OUT PULONG Context,
3892 OUT PULONG ReturnLength OPTIONAL
3893 );
3894
3895 NTSTATUS
3896 STDCALL
3897 ZwQueryIntervalProfile(
3898 OUT PULONG Interval,
3899 OUT KPROFILE_SOURCE ClockSource
3900 );
3901
3902 NTSTATUS
3903 STDCALL
3904 ZwQueryObject(
3905 IN HANDLE ObjectHandle,
3906 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3907 OUT PVOID ObjectInformation,
3908 IN ULONG Length,
3909 OUT PULONG ResultLength OPTIONAL
3910 );
3911
3912 NTSTATUS
3913 STDCALL
3914 NtQuerySecurityObject(
3915 IN HANDLE Handle,
3916 IN SECURITY_INFORMATION SecurityInformation,
3917 OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
3918 IN ULONG Length,
3919 OUT PULONG ResultLength
3920 );
3921
3922 NTSTATUS
3923 STDCALL
3924 ZwQuerySecurityObject(
3925 IN HANDLE Handle,
3926 IN SECURITY_INFORMATION SecurityInformation,
3927 OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
3928 IN ULONG Length,
3929 OUT PULONG ResultLength
3930 );
3931
3932
3933 NTSTATUS
3934 STDCALL
3935 ZwQueryVirtualMemory(
3936 IN HANDLE ProcessHandle,
3937 IN PVOID Address,
3938 IN IN CINT VirtualMemoryInformationClass,
3939 OUT PVOID VirtualMemoryInformation,
3940 IN ULONG Length,
3941 OUT PULONG ResultLength
3942 );
3943
3944 NTSTATUS
3945 STDCALL
3946 ZwRaiseHardError(
3947 IN NTSTATUS Status,
3948 ULONG Unknown2,
3949 ULONG Unknown3,
3950 ULONG Unknown4,
3951 ULONG Unknown5,
3952 ULONG Unknown6
3953 );
3954
3955 NTSTATUS
3956 STDCALL
3957 ZwSetInformationKey(
3958 IN HANDLE KeyHandle,
3959 IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
3960 IN PVOID KeyInformation,
3961 IN ULONG KeyInformationLength
3962 );
3963
3964 NTSTATUS
3965 STDCALL
3966 ZwSetInformationObject(
3967 IN HANDLE ObjectHandle,
3968 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3969 IN PVOID ObjectInformation,
3970 IN ULONG Length
3971 );
3972
3973 NTSTATUS
3974 STDCALL
3975 NtSetInformationProcess(
3976 IN HANDLE ProcessHandle,
3977 IN PROCESSINFOCLASS ProcessInformationClass,
3978 IN PVOID ProcessInformation,
3979 IN ULONG ProcessInformationLength
3980 );
3981
3982 NTSTATUS
3983 STDCALL
3984 ZwUnloadKey(
3985 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3986 );
3987
3988 NTSTATUS
3989 STDCALL
3990 ZwUnlockVirtualMemory(
3991 IN HANDLE ProcessHandle,
3992 IN PVOID BaseAddress,
3993 IN ULONG NumberOfBytesToUnlock,
3994 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3995 );
3996
3997 NTSTATUS
3998 STDCALL
3999 ZwWaitForMultipleObjects (
4000 IN ULONG Count,
4001 IN HANDLE Object[],
4002 IN WAIT_TYPE WaitType,
4003 IN BOOLEAN Alertable,
4004 IN PLARGE_INTEGER Time
4005 );
4006
4007 NTSTATUS
4008 STDCALL
4009 ZwCreateProfile(
4010 OUT PHANDLE ProfileHandle,
4011 IN POBJECT_ATTRIBUTES ObjectAttributes,
4012 IN ULONG ImageBase,
4013 IN ULONG ImageSize,
4014 IN ULONG Granularity,
4015 OUT PVOID Buffer,
4016 IN ULONG ProfilingSize,
4017 IN ULONG ClockSource,
4018 IN ULONG ProcessorMask
4019 );
4020
4021 NTSTATUS
4022 STDCALL
4023 ZwDelayExecution(
4024 IN BOOLEAN Alertable,
4025 IN LARGE_INTEGER *Interval
4026 );
4027
4028 NTSTATUS
4029 STDCALL
4030 ZwExtendSection(
4031 IN HANDLE SectionHandle,
4032 IN PLARGE_INTEGER NewMaximumSize
4033 );
4034
4035 NTSTATUS
4036 STDCALL
4037 ZwQuerySection(
4038 IN HANDLE SectionHandle,
4039 IN CINT SectionInformationClass,
4040 OUT PVOID SectionInformation,
4041 IN ULONG Length,
4042 OUT PULONG ResultLength
4043 );
4044
4045 NTSTATUS
4046 STDCALL
4047 NtLoadKey2(
4048 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
4049 IN POBJECT_ATTRIBUTES FileObjectAttributes,
4050 IN ULONG Flags
4051 );
4052
4053 NTSTATUS
4054 STDCALL
4055 ZwLoadKey2(
4056 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
4057 IN POBJECT_ATTRIBUTES FileObjectAttributes,
4058 IN ULONG Flags
4059 );
4060
4061 NTSTATUS
4062 STDCALL
4063 NtQuerySystemTime (
4064 OUT PLARGE_INTEGER CurrentTime
4065 );
4066
4067 NTSTATUS
4068 STDCALL
4069 NtQueryObject(
4070 IN HANDLE ObjectHandle,
4071 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
4072 OUT PVOID ObjectInformation,
4073 IN ULONG Length,
4074 OUT PULONG ResultLength OPTIONAL
4075 );
4076
4077 static inline struct _PEB * NtCurrentPeb(void)
4078 {
4079 struct _PEB * pPeb;
4080
4081 #if defined(__GNUC__)
4082
4083 __asm__ __volatile__
4084 (
4085 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4086 : "=r" (pPeb) /* can't have two memory operands */
4087 : /* no inputs */
4088 );
4089
4090 #elif defined(_MSC_VER)
4091
4092 __asm mov eax, fs:0x30;
4093 __asm mov pPeb, eax
4094
4095 #else
4096 #error Unknown compiler for inline assembler
4097 #endif
4098
4099 return pPeb;
4100 }
4101 #endif