Add NDK 1.00-pre. Needs some TLC in umtypes.h and a lot of fixes. Not used anywhere...
[reactos.git] / reactos / include / ndk / zwfuncs.h
1 /*
2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
6 * UPDATE HISTORY:
7 * Created 06/10/04
8 */
9 #ifndef _ZWFUNCS_H
10 #define _ZWFUNCS_H
11
12 /* DEPENDENCIES **************************************************************/
13 #include "lpctypes.h"
14 #include "zwtypes.h"
15
16 /* FUNCTION TYPES ************************************************************/
17
18 /* PROTOTYPES ****************************************************************/
19
20 /* FIXME: FILE NEEDS CLEANUP */
21 NTSTATUS
22 STDCALL
23 NtAcceptConnectPort(
24 PHANDLE PortHandle,
25 HANDLE NamedPortHandle,
26 PLPC_MESSAGE ServerReply,
27 BOOLEAN AcceptIt,
28 PLPC_SECTION_WRITE WriteMap,
29 PLPC_SECTION_READ ReadMap
30 );
31
32 NTSTATUS
33 STDCALL
34 NtAddBootEntry(
35 IN PUNICODE_STRING EntryName,
36 IN PUNICODE_STRING EntryValue
37 );
38
39 NTSTATUS
40 STDCALL
41 ZwAddBootEntry(
42 IN PUNICODE_STRING EntryName,
43 IN PUNICODE_STRING EntryValue
44 );
45
46 NTSTATUS
47 STDCALL
48 NtAdjustGroupsToken(
49 IN HANDLE TokenHandle,
50 IN BOOLEAN ResetToDefault,
51 IN PTOKEN_GROUPS NewState,
52 IN ULONG BufferLength,
53 OUT PTOKEN_GROUPS PreviousState OPTIONAL,
54 OUT PULONG ReturnLength
55 );
56
57 NTSTATUS
58 STDCALL
59 ZwAdjustGroupsToken(
60 IN HANDLE TokenHandle,
61 IN BOOLEAN ResetToDefault,
62 IN PTOKEN_GROUPS NewState,
63 IN ULONG BufferLength,
64 OUT PTOKEN_GROUPS PreviousState,
65 OUT PULONG ReturnLength
66 );
67
68 NTSTATUS
69 STDCALL
70 NtAdjustPrivilegesToken(
71 IN HANDLE TokenHandle,
72 IN BOOLEAN DisableAllPrivileges,
73 IN PTOKEN_PRIVILEGES NewState,
74 IN ULONG BufferLength,
75 OUT PTOKEN_PRIVILEGES PreviousState,
76 OUT PULONG ReturnLength
77 );
78
79 NTSTATUS
80 STDCALL
81 ZwAdjustPrivilegesToken(
82 IN HANDLE TokenHandle,
83 IN BOOLEAN DisableAllPrivileges,
84 IN PTOKEN_PRIVILEGES NewState,
85 IN ULONG BufferLength,
86 OUT PTOKEN_PRIVILEGES PreviousState,
87 OUT PULONG ReturnLength
88 );
89
90 NTSTATUS
91 STDCALL
92 NtAlertResumeThread(
93 IN HANDLE ThreadHandle,
94 OUT PULONG SuspendCount
95 );
96
97 NTSTATUS
98 STDCALL
99 ZwAlertResumeThread(
100 IN HANDLE ThreadHandle,
101 OUT PULONG SuspendCount
102 );
103
104 NTSTATUS
105 STDCALL
106 NtAlertThread(
107 IN HANDLE ThreadHandle
108 );
109
110 NTSTATUS
111 STDCALL
112 ZwAlertThread(
113 IN HANDLE ThreadHandle
114 );
115
116 NTSTATUS
117 STDCALL
118 NtAllocateLocallyUniqueId(
119 OUT LUID *LocallyUniqueId
120 );
121
122 NTSTATUS
123 STDCALL
124 ZwAllocateLocallyUniqueId(
125 OUT PLUID Luid
126 );
127
128 NTSTATUS
129 STDCALL
130 NtAllocateVirtualMemory (
131 IN HANDLE ProcessHandle,
132 IN OUT PVOID *BaseAddress,
133 IN ULONG ZeroBits,
134 IN OUT PULONG RegionSize,
135 IN ULONG AllocationType,
136 IN ULONG Protect
137 );
138
139 NTSTATUS
140 STDCALL
141 ZwAllocateVirtualMemory (
142 IN HANDLE ProcessHandle,
143 IN OUT PVOID *BaseAddress,
144 IN ULONG ZeroBits,
145 IN OUT PULONG RegionSize,
146 IN ULONG AllocationType,
147 IN ULONG Protect
148 );
149
150 NTSTATUS
151 STDCALL
152 NtAssignProcessToJobObject(
153 HANDLE JobHandle,
154 HANDLE ProcessHandle)
155 ;
156
157 NTSTATUS
158 STDCALL
159 ZwAssignProcessToJobObject(
160 HANDLE JobHandle,
161 HANDLE ProcessHandle
162 );
163
164 NTSTATUS
165 STDCALL
166 NtCallbackReturn(
167 PVOID Result,
168 ULONG ResultLength,
169 NTSTATUS Status
170 );
171
172 NTSTATUS
173 STDCALL
174 ZwCallbackReturn(
175 PVOID Result,
176 ULONG ResultLength,
177 NTSTATUS Status
178 );
179
180 NTSTATUS
181 STDCALL
182 NtCancelIoFile(
183 IN HANDLE FileHandle,
184 OUT PIO_STATUS_BLOCK IoStatusBlock
185 );
186
187 NTSTATUS
188 STDCALL
189 ZwCancelIoFile(
190 IN HANDLE FileHandle,
191 OUT PIO_STATUS_BLOCK IoStatusBlock
192 );
193
194 NTSTATUS
195 STDCALL
196 NtClearEvent(
197 IN HANDLE EventHandle
198 );
199
200 NTSTATUS
201 STDCALL
202 ZwClearEvent(
203 IN HANDLE EventHandle
204 );
205
206 NTSTATUS
207 STDCALL
208 NtCreateJobObject(
209 PHANDLE JobHandle,
210 ACCESS_MASK DesiredAccess,
211 POBJECT_ATTRIBUTES ObjectAttributes
212 );
213
214 NTSTATUS
215 STDCALL
216 ZwCreateJobObject(
217 PHANDLE JobHandle,
218 ACCESS_MASK DesiredAccess,
219 POBJECT_ATTRIBUTES ObjectAttributes
220 );
221
222 NTSTATUS
223 STDCALL
224 NtClose(
225 IN HANDLE Handle
226 );
227
228 NTSTATUS
229 STDCALL
230 ZwClose(
231 IN HANDLE Handle
232 );
233
234 NTSTATUS
235 STDCALL
236 NtCloseObjectAuditAlarm(
237 IN PUNICODE_STRING SubsystemName,
238 IN PVOID HandleId,
239 IN BOOLEAN GenerateOnClose
240 );
241
242 NTSTATUS
243 STDCALL
244 ZwCloseObjectAuditAlarm(
245 IN PUNICODE_STRING SubsystemName,
246 IN PVOID HandleId,
247 IN BOOLEAN GenerateOnClose
248 );
249
250 NTSTATUS
251 STDCALL
252 NtCompleteConnectPort(
253 HANDLE PortHandle
254 );
255
256 NTSTATUS
257 STDCALL
258 ZwCompleteConnectPort(
259 HANDLE PortHandle
260 );
261
262 NTSTATUS
263 STDCALL
264 NtConnectPort(
265 PHANDLE PortHandle,
266 PUNICODE_STRING PortName,
267 PSECURITY_QUALITY_OF_SERVICE SecurityQos,
268 PLPC_SECTION_WRITE SectionInfo,
269 PLPC_SECTION_READ MapInfo,
270 PULONG MaxMessageSize,
271 PVOID ConnectInfo,
272 PULONG ConnectInfoLength
273 );
274
275 NTSTATUS
276 STDCALL
277 ZwConnectPort(
278 PHANDLE PortHandle,
279 PUNICODE_STRING PortName,
280 PSECURITY_QUALITY_OF_SERVICE SecurityQos,
281 PLPC_SECTION_WRITE SectionInfo,
282 PLPC_SECTION_READ MapInfo,
283 PULONG MaxMessageSize,
284 PVOID ConnectInfo,
285 PULONG ConnectInfoLength
286 );
287
288 NTSTATUS
289 STDCALL
290 NtCreateDirectoryObject(
291 OUT PHANDLE DirectoryHandle,
292 IN ACCESS_MASK DesiredAccess,
293 IN POBJECT_ATTRIBUTES ObjectAttributes
294 );
295
296 NTSTATUS
297 STDCALL
298 ZwCreateDirectoryObject(
299 OUT PHANDLE DirectoryHandle,
300 IN ACCESS_MASK DesiredAccess,
301 IN POBJECT_ATTRIBUTES ObjectAttributes
302 );
303
304 NTSTATUS
305 STDCALL
306 NtCreateEvent(
307 OUT PHANDLE EventHandle,
308 IN ACCESS_MASK DesiredAccess,
309 IN POBJECT_ATTRIBUTES ObjectAttributes,
310 IN EVENT_TYPE EventType,
311 IN BOOLEAN InitialState
312 );
313
314 NTSTATUS
315 STDCALL
316 ZwCreateEvent(
317 OUT PHANDLE EventHandle,
318 IN ACCESS_MASK DesiredAccess,
319 IN POBJECT_ATTRIBUTES ObjectAttributes,
320 IN EVENT_TYPE EventType,
321 IN BOOLEAN InitialState
322 );
323
324 NTSTATUS
325 STDCALL
326 NtCreateEventPair(
327 OUT PHANDLE EventPairHandle,
328 IN ACCESS_MASK DesiredAccess,
329 IN POBJECT_ATTRIBUTES ObjectAttributes
330 );
331
332 NTSTATUS
333 STDCALL
334 ZwCreateEventPair(
335 OUT PHANDLE EventPairHandle,
336 IN ACCESS_MASK DesiredAccess,
337 IN POBJECT_ATTRIBUTES ObjectAttributes
338 );
339
340 NTSTATUS
341 STDCALL
342 NtCreateFile(
343 OUT PHANDLE FileHandle,
344 IN ACCESS_MASK DesiredAccess,
345 IN POBJECT_ATTRIBUTES ObjectAttributes,
346 OUT PIO_STATUS_BLOCK IoStatusBlock,
347 IN PLARGE_INTEGER AllocationSize OPTIONAL,
348 IN ULONG FileAttributes,
349 IN ULONG ShareAccess,
350 IN ULONG CreateDisposition,
351 IN ULONG CreateOptions,
352 IN PVOID EaBuffer OPTIONAL,
353 IN ULONG EaLength
354 );
355
356 NTSTATUS
357 STDCALL
358 ZwCreateFile(
359 OUT PHANDLE FileHandle,
360 IN ACCESS_MASK DesiredAccess,
361 IN POBJECT_ATTRIBUTES ObjectAttributes,
362 OUT PIO_STATUS_BLOCK IoStatusBlock,
363 IN PLARGE_INTEGER AllocationSize OPTIONAL,
364 IN ULONG FileAttributes,
365 IN ULONG ShareAccess,
366 IN ULONG CreateDisposition,
367 IN ULONG CreateOptions,
368 IN PVOID EaBuffer OPTIONAL,
369 IN ULONG EaLength
370 );
371
372 NTSTATUS
373 STDCALL
374 NtCreateIoCompletion(
375 OUT PHANDLE IoCompletionHandle,
376 IN ACCESS_MASK DesiredAccess,
377 IN POBJECT_ATTRIBUTES ObjectAttributes,
378 IN ULONG NumberOfConcurrentThreads
379 );
380
381 NTSTATUS
382 STDCALL
383 ZwCreateIoCompletion(
384 OUT PHANDLE IoCompletionHandle,
385 IN ACCESS_MASK DesiredAccess,
386 IN POBJECT_ATTRIBUTES ObjectAttributes,
387 IN ULONG NumberOfConcurrentThreads
388 );
389
390 NTSTATUS
391 STDCALL
392 NtCreateKey(
393 OUT PHANDLE KeyHandle,
394 IN ACCESS_MASK DesiredAccess,
395 IN POBJECT_ATTRIBUTES ObjectAttributes,
396 IN ULONG TitleIndex,
397 IN PUNICODE_STRING Class OPTIONAL,
398 IN ULONG CreateOptions,
399 IN PULONG Disposition OPTIONAL
400 );
401
402 NTSTATUS
403 STDCALL
404 ZwCreateKey(
405 OUT PHANDLE KeyHandle,
406 IN ACCESS_MASK DesiredAccess,
407 IN POBJECT_ATTRIBUTES ObjectAttributes,
408 IN ULONG TitleIndex,
409 IN PUNICODE_STRING Class OPTIONAL,
410 IN ULONG CreateOptions,
411 IN PULONG Disposition OPTIONAL
412 );
413
414 NTSTATUS
415 STDCALL
416 NtCreateMailslotFile(
417 OUT PHANDLE MailSlotFileHandle,
418 IN ACCESS_MASK DesiredAccess,
419 IN POBJECT_ATTRIBUTES ObjectAttributes,
420 OUT PIO_STATUS_BLOCK IoStatusBlock,
421 IN ULONG FileAttributes,
422 IN ULONG ShareAccess,
423 IN ULONG MaxMessageSize,
424 IN PLARGE_INTEGER TimeOut
425 );
426
427 NTSTATUS
428 STDCALL
429 ZwCreateMailslotFile(
430 OUT PHANDLE MailSlotFileHandle,
431 IN ACCESS_MASK DesiredAccess,
432 IN POBJECT_ATTRIBUTES ObjectAttributes,
433 OUT PIO_STATUS_BLOCK IoStatusBlock,
434 IN ULONG FileAttributes,
435 IN ULONG ShareAccess,
436 IN ULONG MaxMessageSize,
437 IN PLARGE_INTEGER TimeOut
438 );
439
440 NTSTATUS
441 STDCALL
442 NtCreateMutant(
443 OUT PHANDLE MutantHandle,
444 IN ACCESS_MASK DesiredAccess,
445 IN POBJECT_ATTRIBUTES ObjectAttributes,
446 IN BOOLEAN InitialOwner
447 );
448
449 NTSTATUS
450 STDCALL
451 ZwCreateMutant(
452 OUT PHANDLE MutantHandle,
453 IN ACCESS_MASK DesiredAccess,
454 IN POBJECT_ATTRIBUTES ObjectAttributes,
455 IN BOOLEAN InitialOwner
456 );
457
458 NTSTATUS
459 STDCALL
460 NtCreateNamedPipeFile(
461 OUT PHANDLE NamedPipeFileHandle,
462 IN ACCESS_MASK DesiredAccess,
463 IN POBJECT_ATTRIBUTES ObjectAttributes,
464 OUT PIO_STATUS_BLOCK IoStatusBlock,
465 IN ULONG ShareAccess,
466 IN ULONG CreateDisposition,
467 IN ULONG CreateOptions,
468 IN ULONG WriteModeMessage,
469 IN ULONG ReadModeMessage,
470 IN ULONG NonBlocking,
471 IN ULONG MaxInstances,
472 IN ULONG InBufferSize,
473 IN ULONG OutBufferSize,
474 IN PLARGE_INTEGER DefaultTimeOut
475 );
476
477 NTSTATUS
478 STDCALL
479 ZwCreateNamedPipeFile(
480 OUT PHANDLE NamedPipeFileHandle,
481 IN ACCESS_MASK DesiredAccess,
482 IN POBJECT_ATTRIBUTES ObjectAttributes,
483 OUT PIO_STATUS_BLOCK IoStatusBlock,
484 IN ULONG ShareAccess,
485 IN ULONG CreateDisposition,
486 IN ULONG CreateOptions,
487 IN ULONG WriteModeMessage,
488 IN ULONG ReadModeMessage,
489 IN ULONG NonBlocking,
490 IN ULONG MaxInstances,
491 IN ULONG InBufferSize,
492 IN ULONG OutBufferSize,
493 IN PLARGE_INTEGER DefaultTimeOut
494 );
495
496 NTSTATUS
497 STDCALL
498 NtCreatePort(
499 PHANDLE PortHandle,
500 POBJECT_ATTRIBUTES ObjectAttributes,
501 ULONG MaxConnectInfoLength,
502 ULONG MaxDataLength,
503 ULONG NPMessageQueueSize OPTIONAL
504 );
505
506 NTSTATUS
507 STDCALL
508 NtCreatePort(
509 PHANDLE PortHandle,
510 POBJECT_ATTRIBUTES ObjectAttributes,
511 ULONG MaxConnectInfoLength,
512 ULONG MaxDataLength,
513 ULONG NPMessageQueueSize OPTIONAL
514 );
515
516 NTSTATUS
517 STDCALL
518 NtCreateProcess(
519 OUT PHANDLE ProcessHandle,
520 IN ACCESS_MASK DesiredAccess,
521 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
522 IN HANDLE ParentProcess,
523 IN BOOLEAN InheritObjectTable,
524 IN HANDLE SectionHandle OPTIONAL,
525 IN HANDLE DebugPort OPTIONAL,
526 IN HANDLE ExceptionPort OPTIONAL
527 );
528
529 NTSTATUS
530 STDCALL
531 ZwCreateProcess(
532 OUT PHANDLE ProcessHandle,
533 IN ACCESS_MASK DesiredAccess,
534 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
535 IN HANDLE ParentProcess,
536 IN BOOLEAN InheritObjectTable,
537 IN HANDLE SectionHandle OPTIONAL,
538 IN HANDLE DebugPort OPTIONAL,
539 IN HANDLE ExceptionPort OPTIONAL
540 );
541
542 NTSTATUS
543 STDCALL
544 NtCreateSection(
545 OUT PHANDLE SectionHandle,
546 IN ACCESS_MASK DesiredAccess,
547 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
548 IN PLARGE_INTEGER MaximumSize OPTIONAL,
549 IN ULONG SectionPageProtection OPTIONAL,
550 IN ULONG AllocationAttributes,
551 IN HANDLE FileHandle OPTIONAL
552 );
553
554 NTSTATUS
555 STDCALL
556 ZwCreateSection(
557 OUT PHANDLE SectionHandle,
558 IN ACCESS_MASK DesiredAccess,
559 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
560 IN PLARGE_INTEGER MaximumSize OPTIONAL,
561 IN ULONG SectionPageProtection OPTIONAL,
562 IN ULONG AllocationAttributes,
563 IN HANDLE FileHandle OPTIONAL
564 );
565
566 NTSTATUS
567 STDCALL
568 NtCreateSemaphore(
569 OUT PHANDLE SemaphoreHandle,
570 IN ACCESS_MASK DesiredAccess,
571 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
572 IN LONG InitialCount,
573 IN LONG MaximumCount
574 );
575
576 NTSTATUS
577 STDCALL
578 ZwCreateSemaphore(
579 OUT PHANDLE SemaphoreHandle,
580 IN ACCESS_MASK DesiredAccess,
581 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
582 IN LONG InitialCount,
583 IN LONG MaximumCount
584 );
585
586 NTSTATUS
587 STDCALL
588 NtCreateSymbolicLinkObject(
589 OUT PHANDLE SymbolicLinkHandle,
590 IN ACCESS_MASK DesiredAccess,
591 IN POBJECT_ATTRIBUTES ObjectAttributes,
592 IN PUNICODE_STRING Name
593 );
594
595 NTSTATUS
596 STDCALL
597 ZwCreateSymbolicLinkObject(
598 OUT PHANDLE SymbolicLinkHandle,
599 IN ACCESS_MASK DesiredAccess,
600 IN POBJECT_ATTRIBUTES ObjectAttributes,
601 IN PUNICODE_STRING Name
602 );
603
604 NTSTATUS
605 STDCALL
606 NtCreateTimer(
607 OUT PHANDLE TimerHandle,
608 IN ACCESS_MASK DesiredAccess,
609 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
610 IN TIMER_TYPE TimerType
611 );
612
613 NTSTATUS
614 STDCALL
615 ZwCreateTimer(
616 OUT PHANDLE TimerHandle,
617 IN ACCESS_MASK DesiredAccess,
618 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
619 IN TIMER_TYPE TimerType
620 );
621
622 NTSTATUS
623 STDCALL
624 NtCreateToken(
625 OUT PHANDLE TokenHandle,
626 IN ACCESS_MASK DesiredAccess,
627 IN POBJECT_ATTRIBUTES ObjectAttributes,
628 IN TOKEN_TYPE TokenType,
629 IN PLUID AuthenticationId,
630 IN PLARGE_INTEGER ExpirationTime,
631 IN PTOKEN_USER TokenUser,
632 IN PTOKEN_GROUPS TokenGroups,
633 IN PTOKEN_PRIVILEGES TokenPrivileges,
634 IN PTOKEN_OWNER TokenOwner,
635 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
636 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
637 IN PTOKEN_SOURCE TokenSource
638 );
639
640 NTSTATUS
641 STDCALL
642 ZwCreateToken(
643 OUT PHANDLE TokenHandle,
644 IN ACCESS_MASK DesiredAccess,
645 IN POBJECT_ATTRIBUTES ObjectAttributes,
646 IN TOKEN_TYPE TokenType,
647 IN PLUID AuthenticationId,
648 IN PLARGE_INTEGER ExpirationTime,
649 IN PTOKEN_USER TokenUser,
650 IN PTOKEN_GROUPS TokenGroups,
651 IN PTOKEN_PRIVILEGES TokenPrivileges,
652 IN PTOKEN_OWNER TokenOwner,
653 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
654 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
655 IN PTOKEN_SOURCE TokenSource
656 );
657
658 NTSTATUS
659 STDCALL
660 NtCreateWaitablePort(
661 PHANDLE PortHandle,
662 POBJECT_ATTRIBUTES ObjectAttributes,
663 ULONG MaxConnectInfoLength,
664 ULONG MaxDataLength,
665 ULONG NPMessageQueueSize OPTIONAL
666 );
667
668 NTSTATUS
669 STDCALL
670 ZwCreateWaitablePort(
671 PHANDLE PortHandle,
672 POBJECT_ATTRIBUTES ObjectAttributes,
673 ULONG MaxConnectInfoLength,
674 ULONG MaxDataLength,
675 ULONG NPMessageQueueSize OPTIONAL
676 );
677
678 NTSTATUS
679 STDCALL
680 NtDeleteAtom(
681 IN RTL_ATOM Atom
682 );
683
684 NTSTATUS
685 STDCALL
686 ZwDeleteAtom(
687 IN RTL_ATOM Atom
688 );
689
690 NTSTATUS
691 STDCALL
692 NtDeleteBootEntry(
693 IN PUNICODE_STRING EntryName,
694 IN PUNICODE_STRING EntryValue
695 );
696
697 NTSTATUS
698 STDCALL
699 ZwDeleteBootEntry(
700 IN PUNICODE_STRING EntryName,
701 IN PUNICODE_STRING EntryValue
702 );
703
704 NTSTATUS
705 STDCALL
706 NtDeleteFile(
707 IN POBJECT_ATTRIBUTES ObjectAttributes
708 );
709
710 NTSTATUS
711 STDCALL
712 ZwDeleteFile(
713 IN POBJECT_ATTRIBUTES ObjectAttributes
714 );
715
716 NTSTATUS
717 STDCALL
718 NtDeleteKey(
719 IN HANDLE KeyHandle
720 );
721
722 NTSTATUS
723 STDCALL
724 ZwDeleteKey(
725 IN HANDLE KeyHandle
726 );
727
728 NTSTATUS
729 STDCALL
730 NtDeleteObjectAuditAlarm(
731 IN PUNICODE_STRING SubsystemName,
732 IN PVOID HandleId,
733 IN BOOLEAN GenerateOnClose
734 );
735
736 NTSTATUS
737 STDCALL
738 ZwDeleteObjectAuditAlarm(
739 IN PUNICODE_STRING SubsystemName,
740 IN PVOID HandleId,
741 IN BOOLEAN GenerateOnClose
742 );
743
744 NTSTATUS
745 STDCALL
746 NtDeleteValueKey(
747 IN HANDLE KeyHandle,
748 IN PUNICODE_STRING ValueName
749 );
750
751 NTSTATUS
752 STDCALL
753 ZwDeleteValueKey(
754 IN HANDLE KeyHandle,
755 IN PUNICODE_STRING ValueName
756 );
757
758 NTSTATUS
759 STDCALL
760 NtDeviceIoControlFile(
761 IN HANDLE DeviceHandle,
762 IN HANDLE Event OPTIONAL,
763 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
764 IN PVOID UserApcContext OPTIONAL,
765 OUT PIO_STATUS_BLOCK IoStatusBlock,
766 IN ULONG IoControlCode,
767 IN PVOID InputBuffer,
768 IN ULONG InputBufferSize,
769 OUT PVOID OutputBuffer,
770 IN ULONG OutputBufferSize
771 );
772
773 NTSTATUS
774 STDCALL
775 ZwDeviceIoControlFile(
776 IN HANDLE DeviceHandle,
777 IN HANDLE Event OPTIONAL,
778 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
779 IN PVOID UserApcContext OPTIONAL,
780 OUT PIO_STATUS_BLOCK IoStatusBlock,
781 IN ULONG IoControlCode,
782 IN PVOID InputBuffer,
783 IN ULONG InputBufferSize,
784 OUT PVOID OutputBuffer,
785 IN ULONG OutputBufferSize
786 );
787
788 NTSTATUS
789 STDCALL
790 NtDisplayString(
791 IN PUNICODE_STRING DisplayString
792 );
793
794 NTSTATUS
795 STDCALL
796 ZwDisplayString(
797 IN PUNICODE_STRING DisplayString
798 );
799
800 NTSTATUS
801 STDCALL
802 NtEnumerateBootEntries(
803 IN ULONG Unknown1,
804 IN ULONG Unknown2
805 );
806
807 NTSTATUS
808 STDCALL
809 ZwEnumerateBootEntries(
810 IN ULONG Unknown1,
811 IN ULONG Unknown2
812 );
813
814 NTSTATUS
815 STDCALL
816 NtEnumerateKey(
817 IN HANDLE KeyHandle,
818 IN ULONG Index,
819 IN KEY_INFORMATION_CLASS KeyInformationClass,
820 OUT PVOID KeyInformation,
821 IN ULONG Length,
822 OUT PULONG ResultLength
823 );
824
825 NTSTATUS
826 STDCALL
827 ZwEnumerateKey(
828 IN HANDLE KeyHandle,
829 IN ULONG Index,
830 IN KEY_INFORMATION_CLASS KeyInformationClass,
831 OUT PVOID KeyInformation,
832 IN ULONG Length,
833 OUT PULONG ResultLength
834 );
835 NTSTATUS
836 STDCALL
837 NtEnumerateValueKey(
838 IN HANDLE KeyHandle,
839 IN ULONG Index,
840 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
841 OUT PVOID KeyValueInformation,
842 IN ULONG Length,
843 OUT PULONG ResultLength
844 );
845
846 NTSTATUS
847 STDCALL
848 ZwEnumerateValueKey(
849 IN HANDLE KeyHandle,
850 IN ULONG Index,
851 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
852 OUT PVOID KeyValueInformation,
853 IN ULONG Length,
854 OUT PULONG ResultLength
855 );
856
857 NTSTATUS
858 STDCALL
859 NtFlushBuffersFile(
860 IN HANDLE FileHandle,
861 OUT PIO_STATUS_BLOCK IoStatusBlock
862 );
863
864 NTSTATUS
865 STDCALL
866 ZwFlushBuffersFile(
867 IN HANDLE FileHandle,
868 OUT PIO_STATUS_BLOCK IoStatusBlock
869 );
870
871 NTSTATUS
872 STDCALL
873 NtFlushKey(
874 IN HANDLE KeyHandle
875 );
876
877 NTSTATUS
878 STDCALL
879 ZwFlushKey(
880 IN HANDLE KeyHandle
881 );
882
883 NTSTATUS
884 STDCALL
885 NtFlushWriteBuffer(VOID);
886
887 NTSTATUS
888 STDCALL
889 ZwFlushWriteBuffer(VOID);
890
891 NTSTATUS
892 STDCALL
893 NtFreeVirtualMemory(
894 IN HANDLE ProcessHandle,
895 IN PVOID *BaseAddress,
896 IN PULONG RegionSize,
897 IN ULONG FreeType
898 );
899
900 NTSTATUS
901 STDCALL
902 ZwFreeVirtualMemory(
903 IN HANDLE ProcessHandle,
904 IN PVOID *BaseAddress,
905 IN PULONG RegionSize,
906 IN ULONG FreeType
907 );
908
909 NTSTATUS
910 STDCALL
911 NtFsControlFile(
912 IN HANDLE DeviceHandle,
913 IN HANDLE Event OPTIONAL,
914 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
915 IN PVOID ApcContext OPTIONAL,
916 OUT PIO_STATUS_BLOCK IoStatusBlock,
917 IN ULONG IoControlCode,
918 IN PVOID InputBuffer,
919 IN ULONG InputBufferSize,
920 OUT PVOID OutputBuffer,
921 IN ULONG OutputBufferSize
922 );
923
924 NTSTATUS
925 STDCALL
926 ZwFsControlFile(
927 IN HANDLE DeviceHandle,
928 IN HANDLE Event OPTIONAL,
929 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
930 IN PVOID ApcContext OPTIONAL,
931 OUT PIO_STATUS_BLOCK IoStatusBlock,
932 IN ULONG IoControlCode,
933 IN PVOID InputBuffer,
934 IN ULONG InputBufferSize,
935 OUT PVOID OutputBuffer,
936 IN ULONG OutputBufferSize
937 );
938
939 NTSTATUS
940 STDCALL
941 NtGetContextThread(
942 IN HANDLE ThreadHandle,
943 OUT PCONTEXT Context
944 );
945
946 NTSTATUS
947 STDCALL
948 ZwGetContextThread(
949 IN HANDLE ThreadHandle,
950 OUT PCONTEXT Context
951 );
952
953 NTSTATUS
954 STDCALL
955 NtImpersonateClientOfPort(
956 HANDLE PortHandle,
957 PLPC_MESSAGE ClientMessage
958 );
959
960 NTSTATUS
961 STDCALL
962 ZwImpersonateClientOfPort(
963 HANDLE PortHandle,
964 PLPC_MESSAGE ClientMessage
965 );
966
967 NTSTATUS
968 STDCALL
969 NtImpersonateThread(
970 IN HANDLE ThreadHandle,
971 IN HANDLE ThreadToImpersonate,
972 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
973 );
974
975 NTSTATUS
976 STDCALL
977 ZwImpersonateThread(
978 IN HANDLE ThreadHandle,
979 IN HANDLE ThreadToImpersonate,
980 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
981 );
982
983 NTSTATUS
984 STDCALL
985 NtInitiatePowerAction(
986 POWER_ACTION SystemAction,
987 SYSTEM_POWER_STATE MinSystemState,
988 ULONG Flags,
989 BOOLEAN Asynchronous
990 );
991
992 NTSTATUS
993 STDCALL
994 ZwInitiatePowerAction(
995 POWER_ACTION SystemAction,
996 SYSTEM_POWER_STATE MinSystemState,
997 ULONG Flags,
998 BOOLEAN Asynchronous
999 );
1000
1001 NTSTATUS
1002 STDCALL
1003 NtInitializeRegistry(
1004 BOOLEAN SetUpBoot
1005 );
1006
1007 NTSTATUS
1008 STDCALL
1009 ZwInitializeRegistry(
1010 BOOLEAN SetUpBoot
1011 );
1012
1013 NTSTATUS
1014 STDCALL
1015 NtIsProcessInJob(
1016 IN HANDLE ProcessHandle,
1017 IN HANDLE JobHandle OPTIONAL
1018 );
1019
1020 NTSTATUS
1021 STDCALL
1022 ZwIsProcessInJob(
1023 IN HANDLE ProcessHandle,
1024 IN HANDLE JobHandle OPTIONAL
1025 );
1026
1027 NTSTATUS
1028 STDCALL
1029 NtListenPort(HANDLE PortHandle,
1030 PLPC_MESSAGE LpcMessage
1031 );
1032
1033 NTSTATUS
1034 STDCALL
1035 ZwListenPort(HANDLE PortHandle,
1036 PLPC_MESSAGE LpcMessage
1037 );
1038
1039 STDCALL
1040 NtLoadDriver(
1041 IN PUNICODE_STRING DriverServiceName
1042 );
1043
1044 NTSTATUS
1045 STDCALL
1046 ZwLoadDriver(
1047 IN PUNICODE_STRING DriverServiceName
1048 );
1049
1050 NTSTATUS
1051 STDCALL
1052 NtLockFile(
1053 IN HANDLE FileHandle,
1054 IN HANDLE Event OPTIONAL,
1055 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1056 IN PVOID ApcContext OPTIONAL,
1057 OUT PIO_STATUS_BLOCK IoStatusBlock,
1058 IN PLARGE_INTEGER ByteOffset,
1059 IN PLARGE_INTEGER Length,
1060 IN PULONG Key,
1061 IN BOOLEAN FailImmediatedly,
1062 IN BOOLEAN ExclusiveLock
1063 );
1064
1065 NTSTATUS
1066 STDCALL
1067 ZwLockFile(
1068 IN HANDLE FileHandle,
1069 IN HANDLE Event OPTIONAL,
1070 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1071 IN PVOID ApcContext OPTIONAL,
1072 OUT PIO_STATUS_BLOCK IoStatusBlock,
1073 IN PLARGE_INTEGER ByteOffset,
1074 IN PLARGE_INTEGER Length,
1075 IN PULONG Key,
1076 IN BOOLEAN FailImmediatedly,
1077 IN BOOLEAN ExclusiveLock
1078 );
1079
1080 NTSTATUS
1081 STDCALL
1082 NtMakePermanentObject(
1083 IN HANDLE Object
1084 );
1085
1086 NTSTATUS
1087 STDCALL
1088 ZwMakePermanentObject(
1089 IN HANDLE Object
1090 );
1091
1092 NTSTATUS
1093 STDCALL
1094 NtMakeTemporaryObject(
1095 IN HANDLE Handle
1096 );
1097
1098 NTSTATUS
1099 STDCALL
1100 ZwMakeTemporaryObject(
1101 IN HANDLE Handle
1102 );
1103
1104 NTSTATUS
1105 STDCALL
1106 NtMapViewOfSection(
1107 IN HANDLE SectionHandle,
1108 IN HANDLE ProcessHandle,
1109 IN OUT PVOID *BaseAddress,
1110 IN ULONG ZeroBits,
1111 IN ULONG CommitSize,
1112 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
1113 IN OUT PULONG ViewSize,
1114 IN SECTION_INHERIT InheritDisposition,
1115 IN ULONG AllocationType,
1116 IN ULONG AccessProtection
1117 );
1118
1119 NTSTATUS
1120 STDCALL
1121 ZwMapViewOfSection(
1122 IN HANDLE SectionHandle,
1123 IN HANDLE ProcessHandle,
1124 IN OUT PVOID *BaseAddress,
1125 IN ULONG ZeroBits,
1126 IN ULONG CommitSize,
1127 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
1128 IN OUT PULONG ViewSize,
1129 IN SECTION_INHERIT InheritDisposition,
1130 IN ULONG AllocationType,
1131 IN ULONG AccessProtection
1132 );
1133
1134 NTSTATUS
1135 STDCALL
1136 NtNotifyChangeDirectoryFile(
1137 IN HANDLE FileHandle,
1138 IN HANDLE Event OPTIONAL,
1139 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1140 IN PVOID ApcContext OPTIONAL,
1141 OUT PIO_STATUS_BLOCK IoStatusBlock,
1142 OUT PVOID Buffer,
1143 IN ULONG BufferSize,
1144 IN ULONG CompletionFilter,
1145 IN BOOLEAN WatchTree
1146 );
1147
1148 NTSTATUS
1149 STDCALL
1150 ZwNotifyChangeDirectoryFile(
1151 IN HANDLE FileHandle,
1152 IN HANDLE Event OPTIONAL,
1153 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1154 IN PVOID ApcContext OPTIONAL,
1155 OUT PIO_STATUS_BLOCK IoStatusBlock,
1156 OUT PVOID Buffer,
1157 IN ULONG BufferSize,
1158 IN ULONG CompletionFilter,
1159 IN BOOLEAN WatchTree
1160 );
1161
1162 NTSTATUS
1163 STDCALL
1164 NtNotifyChangeKey(
1165 IN HANDLE KeyHandle,
1166 IN HANDLE Event,
1167 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1168 IN PVOID ApcContext OPTIONAL,
1169 OUT PIO_STATUS_BLOCK IoStatusBlock,
1170 IN ULONG CompletionFilter,
1171 IN BOOLEAN Asynchroneous,
1172 OUT PVOID ChangeBuffer,
1173 IN ULONG Length,
1174 IN BOOLEAN WatchSubtree
1175 );
1176
1177 NTSTATUS
1178 STDCALL
1179 ZwNotifyChangeKey(
1180 IN HANDLE KeyHandle,
1181 IN HANDLE Event,
1182 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1183 IN PVOID ApcContext OPTIONAL,
1184 OUT PIO_STATUS_BLOCK IoStatusBlock,
1185 IN ULONG CompletionFilter,
1186 IN BOOLEAN Asynchroneous,
1187 OUT PVOID ChangeBuffer,
1188 IN ULONG Length,
1189 IN BOOLEAN WatchSubtree
1190 );
1191
1192 NTSTATUS
1193 STDCALL
1194 NtOpenDirectoryObject(
1195 OUT PHANDLE FileHandle,
1196 IN ACCESS_MASK DesiredAccess,
1197 IN POBJECT_ATTRIBUTES ObjectAttributes
1198 );
1199
1200 NTSTATUS
1201 STDCALL
1202 ZwOpenDirectoryObject(
1203 OUT PHANDLE FileHandle,
1204 IN ACCESS_MASK DesiredAccess,
1205 IN POBJECT_ATTRIBUTES ObjectAttributes
1206 );
1207
1208 NTSTATUS
1209 STDCALL
1210 NtOpenEvent(
1211 OUT PHANDLE EventHandle,
1212 IN ACCESS_MASK DesiredAccess,
1213 IN POBJECT_ATTRIBUTES ObjectAttributes
1214 );
1215
1216 NTSTATUS
1217 STDCALL
1218 ZwOpenEvent(
1219 OUT PHANDLE EventHandle,
1220 IN ACCESS_MASK DesiredAccess,
1221 IN POBJECT_ATTRIBUTES ObjectAttributes
1222 );
1223
1224 NTSTATUS
1225 STDCALL
1226 NtOpenEventPair(
1227 OUT PHANDLE EventPairHandle,
1228 IN ACCESS_MASK DesiredAccess,
1229 IN POBJECT_ATTRIBUTES ObjectAttributes
1230 );
1231
1232 NTSTATUS
1233 STDCALL
1234 ZwOpenEventPair(
1235 OUT PHANDLE EventPairHandle,
1236 IN ACCESS_MASK DesiredAccess,
1237 IN POBJECT_ATTRIBUTES ObjectAttributes
1238 );
1239
1240 NTSTATUS
1241 STDCALL
1242 NtOpenFile(
1243 OUT PHANDLE FileHandle,
1244 IN ACCESS_MASK DesiredAccess,
1245 IN POBJECT_ATTRIBUTES ObjectAttributes,
1246 OUT PIO_STATUS_BLOCK IoStatusBlock,
1247 IN ULONG ShareAccess,
1248 IN ULONG OpenOptions
1249 );
1250
1251 NTSTATUS
1252 STDCALL
1253 ZwOpenFile(
1254 OUT PHANDLE FileHandle,
1255 IN ACCESS_MASK DesiredAccess,
1256 IN POBJECT_ATTRIBUTES ObjectAttributes,
1257 OUT PIO_STATUS_BLOCK IoStatusBlock,
1258 IN ULONG ShareAccess,
1259 IN ULONG OpenOptions
1260 );
1261
1262 NTSTATUS
1263 STDCALL
1264 NtOpenIoCompletion(
1265 OUT PHANDLE CompetionPort,
1266 IN ACCESS_MASK DesiredAccess,
1267 IN POBJECT_ATTRIBUTES ObjectAttributes
1268 );
1269
1270 NTSTATUS
1271 STDCALL
1272 ZwOpenIoCompletion(
1273 OUT PHANDLE CompetionPort,
1274 IN ACCESS_MASK DesiredAccess,
1275 IN POBJECT_ATTRIBUTES ObjectAttributes
1276 );
1277
1278 NTSTATUS
1279 STDCALL
1280 NtOpenJobObject(
1281 PHANDLE JobHandle,
1282 ACCESS_MASK DesiredAccess,
1283 POBJECT_ATTRIBUTES ObjectAttributes
1284 );
1285
1286 NTSTATUS
1287 STDCALL
1288 ZwOpenJobObject(
1289 PHANDLE JobHandle,
1290 ACCESS_MASK DesiredAccess,
1291 POBJECT_ATTRIBUTES ObjectAttributes
1292 );
1293
1294 NTSTATUS
1295 STDCALL
1296 NtOpenKey(
1297 OUT PHANDLE KeyHandle,
1298 IN ACCESS_MASK DesiredAccess,
1299 IN POBJECT_ATTRIBUTES ObjectAttributes
1300 );
1301
1302 NTSTATUS
1303 STDCALL
1304 ZwOpenKey(
1305 OUT PHANDLE KeyHandle,
1306 IN ACCESS_MASK DesiredAccess,
1307 IN POBJECT_ATTRIBUTES ObjectAttributes
1308 );
1309
1310 NTSTATUS
1311 STDCALL
1312 NtOpenMutant(
1313 OUT PHANDLE MutantHandle,
1314 IN ACCESS_MASK DesiredAccess,
1315 IN POBJECT_ATTRIBUTES ObjectAttributes
1316 );
1317
1318 NTSTATUS
1319 STDCALL
1320 ZwOpenMutant(
1321 OUT PHANDLE MutantHandle,
1322 IN ACCESS_MASK DesiredAccess,
1323 IN POBJECT_ATTRIBUTES ObjectAttributes
1324 );
1325
1326 NTSTATUS
1327 STDCALL
1328 NtOpenProcess(
1329 OUT PHANDLE ProcessHandle,
1330 IN ACCESS_MASK DesiredAccess,
1331 IN POBJECT_ATTRIBUTES ObjectAttributes,
1332 IN PCLIENT_ID ClientId
1333 );
1334
1335 NTSTATUS
1336 STDCALL
1337 ZwOpenProcess(
1338 OUT PHANDLE ProcessHandle,
1339 IN ACCESS_MASK DesiredAccess,
1340 IN POBJECT_ATTRIBUTES ObjectAttributes,
1341 IN PCLIENT_ID ClientId
1342 );
1343
1344 NTSTATUS
1345 STDCALL
1346 NtOpenProcessToken(
1347 IN HANDLE ProcessHandle,
1348 IN ACCESS_MASK DesiredAccess,
1349 OUT PHANDLE TokenHandle
1350 );
1351
1352 NTSTATUS
1353 STDCALL
1354 ZwOpenProcessToken(
1355 IN HANDLE ProcessHandle,
1356 IN ACCESS_MASK DesiredAccess,
1357 OUT PHANDLE TokenHandle
1358 );
1359
1360 NTSTATUS
1361 STDCALL
1362 NtOpenProcessTokenEx(
1363 IN HANDLE ProcessHandle,
1364 IN ACCESS_MASK DesiredAccess,
1365 IN ULONG HandleAttributes,
1366 OUT PHANDLE TokenHandle
1367 );
1368
1369 NTSTATUS
1370 STDCALL
1371 ZwOpenProcessTokenEx(
1372 IN HANDLE ProcessHandle,
1373 IN ACCESS_MASK DesiredAccess,
1374 IN ULONG HandleAttributes,
1375 OUT PHANDLE TokenHandle
1376 );
1377
1378 NTSTATUS
1379 STDCALL
1380 NtOpenSection(
1381 OUT PHANDLE SectionHandle,
1382 IN ACCESS_MASK DesiredAccess,
1383 IN POBJECT_ATTRIBUTES ObjectAttributes
1384 );
1385
1386 NTSTATUS
1387 STDCALL
1388 ZwOpenSection(
1389 OUT PHANDLE SectionHandle,
1390 IN ACCESS_MASK DesiredAccess,
1391 IN POBJECT_ATTRIBUTES ObjectAttributes
1392 );
1393
1394 NTSTATUS
1395 STDCALL
1396 NtOpenSemaphore(
1397 IN HANDLE SemaphoreHandle,
1398 IN ACCESS_MASK DesiredAcces,
1399 IN POBJECT_ATTRIBUTES ObjectAttributes
1400 );
1401
1402 NTSTATUS
1403 STDCALL
1404 ZwOpenSemaphore(
1405 IN HANDLE SemaphoreHandle,
1406 IN ACCESS_MASK DesiredAcces,
1407 IN POBJECT_ATTRIBUTES ObjectAttributes
1408 );
1409
1410 NTSTATUS
1411 STDCALL
1412 NtOpenSymbolicLinkObject(
1413 OUT PHANDLE SymbolicLinkHandle,
1414 IN ACCESS_MASK DesiredAccess,
1415 IN POBJECT_ATTRIBUTES ObjectAttributes
1416 );
1417
1418 NTSTATUS
1419 STDCALL
1420 ZwOpenSymbolicLinkObject(
1421 OUT PHANDLE SymbolicLinkHandle,
1422 IN ACCESS_MASK DesiredAccess,
1423 IN POBJECT_ATTRIBUTES ObjectAttributes
1424 );
1425
1426 NTSTATUS
1427 STDCALL
1428 NtOpenThread(
1429 OUT PHANDLE ThreadHandle,
1430 IN ACCESS_MASK DesiredAccess,
1431 IN POBJECT_ATTRIBUTES ObjectAttributes,
1432 IN PCLIENT_ID ClientId
1433 );
1434
1435 NTSTATUS
1436 STDCALL
1437 ZwOpenThread(
1438 OUT PHANDLE ThreadHandle,
1439 IN ACCESS_MASK DesiredAccess,
1440 IN POBJECT_ATTRIBUTES ObjectAttributes,
1441 IN PCLIENT_ID ClientId
1442 );
1443
1444 NTSTATUS
1445 STDCALL
1446 NtOpenThreadToken(
1447 IN HANDLE ThreadHandle,
1448 IN ACCESS_MASK DesiredAccess,
1449 IN BOOLEAN OpenAsSelf,
1450 OUT PHANDLE TokenHandle
1451 );
1452
1453 NTSTATUS
1454 STDCALL
1455 ZwOpenThreadToken(
1456 IN HANDLE ThreadHandle,
1457 IN ACCESS_MASK DesiredAccess,
1458 IN BOOLEAN OpenAsSelf,
1459 OUT PHANDLE TokenHandle
1460 );
1461
1462 NTSTATUS
1463 STDCALL
1464 NtOpenThreadTokenEx(
1465 IN HANDLE ThreadHandle,
1466 IN ACCESS_MASK DesiredAccess,
1467 IN BOOLEAN OpenAsSelf,
1468 IN ULONG HandleAttributes,
1469 OUT PHANDLE TokenHandle
1470 );
1471
1472 NTSTATUS
1473 STDCALL
1474 ZwOpenThreadTokenEx(
1475 IN HANDLE ThreadHandle,
1476 IN ACCESS_MASK DesiredAccess,
1477 IN BOOLEAN OpenAsSelf,
1478 IN ULONG HandleAttributes,
1479 OUT PHANDLE TokenHandle
1480 );
1481
1482 NTSTATUS
1483 STDCALL
1484 NtOpenTimer(
1485 OUT PHANDLE TimerHandle,
1486 IN ACCESS_MASK DesiredAccess,
1487 IN POBJECT_ATTRIBUTES ObjectAttributes
1488 );
1489 NTSTATUS
1490 STDCALL
1491 ZwOpenTimer(
1492 OUT PHANDLE TimerHandle,
1493 IN ACCESS_MASK DesiredAccess,
1494 IN POBJECT_ATTRIBUTES ObjectAttributes
1495 );
1496
1497 NTSTATUS
1498 STDCALL
1499 NtPowerInformation(
1500 POWER_INFORMATION_LEVEL PowerInformationLevel,
1501 PVOID InputBuffer,
1502 ULONG InputBufferLength,
1503 PVOID OutputBuffer,
1504 ULONG OutputBufferLength
1505 );
1506
1507 NTSTATUS
1508 STDCALL
1509 ZwPowerInformation(
1510 POWER_INFORMATION_LEVEL PowerInformationLevel,
1511 PVOID InputBuffer,
1512 ULONG InputBufferLength,
1513 PVOID OutputBuffer,
1514 ULONG OutputBufferLength
1515 );
1516
1517 NTSTATUS
1518 STDCALL
1519 NtPrivilegeCheck(
1520 IN HANDLE ClientToken,
1521 IN PPRIVILEGE_SET RequiredPrivileges,
1522 IN PBOOLEAN Result
1523 );
1524
1525 NTSTATUS
1526 STDCALL
1527 ZwPrivilegeCheck(
1528 IN HANDLE ClientToken,
1529 IN PPRIVILEGE_SET RequiredPrivileges,
1530 IN PBOOLEAN Result
1531 );
1532
1533 NTSTATUS
1534 STDCALL
1535 NtPrivilegedServiceAuditAlarm(
1536 IN PUNICODE_STRING SubsystemName,
1537 IN PUNICODE_STRING ServiceName,
1538 IN HANDLE ClientToken,
1539 IN PPRIVILEGE_SET Privileges,
1540 IN BOOLEAN AccessGranted
1541 );
1542
1543 NTSTATUS
1544 STDCALL
1545 ZwPrivilegedServiceAuditAlarm(
1546 IN PUNICODE_STRING SubsystemName,
1547 IN PUNICODE_STRING ServiceName,
1548 IN HANDLE ClientToken,
1549 IN PPRIVILEGE_SET Privileges,
1550 IN BOOLEAN AccessGranted
1551 );
1552
1553 NTSTATUS
1554 STDCALL
1555 NtPrivilegeObjectAuditAlarm(
1556 IN PUNICODE_STRING SubsystemName,
1557 IN PVOID HandleId,
1558 IN HANDLE ClientToken,
1559 IN ULONG DesiredAccess,
1560 IN PPRIVILEGE_SET Privileges,
1561 IN BOOLEAN AccessGranted
1562 );
1563
1564 NTSTATUS
1565 STDCALL
1566 ZwPrivilegeObjectAuditAlarm(
1567 IN PUNICODE_STRING SubsystemName,
1568 IN PVOID HandleId,
1569 IN HANDLE ClientToken,
1570 IN ULONG DesiredAccess,
1571 IN PPRIVILEGE_SET Privileges,
1572 IN BOOLEAN AccessGranted
1573 );
1574
1575 NTSTATUS
1576 STDCALL
1577 NtPulseEvent(
1578 IN HANDLE EventHandle,
1579 IN PLONG PulseCount OPTIONAL
1580 );
1581
1582 NTSTATUS
1583 STDCALL
1584 ZwPulseEvent(
1585 IN HANDLE EventHandle,
1586 IN PLONG PulseCount OPTIONAL
1587 );
1588
1589 NTSTATUS
1590 STDCALL
1591 NtQueryAttributesFile(
1592 IN POBJECT_ATTRIBUTES ObjectAttributes,
1593 OUT PFILE_BASIC_INFORMATION FileInformation
1594 );
1595
1596 NTSTATUS
1597 STDCALL
1598 ZwQueryAttributesFile(
1599 IN POBJECT_ATTRIBUTES ObjectAttributes,
1600 OUT PFILE_BASIC_INFORMATION FileInformation
1601 );
1602
1603
1604 NTSTATUS
1605 STDCALL
1606 NtQueryBootEntryOrder(
1607 IN ULONG Unknown1,
1608 IN ULONG Unknown2
1609 );
1610
1611 NTSTATUS
1612 STDCALL
1613 ZwQueryBootEntryOrder(
1614 IN ULONG Unknown1,
1615 IN ULONG Unknown2
1616 );
1617
1618 NTSTATUS
1619 STDCALL
1620 NtQueryBootOptions(
1621 IN ULONG Unknown1,
1622 IN ULONG Unknown2
1623 );
1624
1625 NTSTATUS
1626 STDCALL
1627 ZwQueryBootOptions(
1628 IN ULONG Unknown1,
1629 IN ULONG Unknown2
1630 );
1631 NTSTATUS
1632 STDCALL
1633 NtQueryDefaultLocale(
1634 IN BOOLEAN UserProfile,
1635 OUT PLCID DefaultLocaleId
1636 );
1637
1638 NTSTATUS
1639 STDCALL
1640 ZwQueryDefaultLocale(
1641 IN BOOLEAN UserProfile,
1642 OUT PLCID DefaultLocaleId
1643 );
1644
1645 NTSTATUS
1646 STDCALL
1647 NtQueryDefaultUILanguage(
1648 PLANGID LanguageId
1649 );
1650
1651 NTSTATUS
1652 STDCALL
1653 ZwQueryDefaultUILanguage(
1654 PLANGID LanguageId
1655 );
1656
1657 NTSTATUS
1658 STDCALL
1659 NtQueryDirectoryFile(
1660 IN HANDLE FileHandle,
1661 IN HANDLE Event OPTIONAL,
1662 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1663 IN PVOID ApcContext OPTIONAL,
1664 OUT PIO_STATUS_BLOCK IoStatusBlock,
1665 OUT PVOID FileInformation,
1666 IN ULONG Length,
1667 IN FILE_INFORMATION_CLASS FileInformationClass,
1668 IN BOOLEAN ReturnSingleEntry,
1669 IN PUNICODE_STRING FileName OPTIONAL,
1670 IN BOOLEAN RestartScan
1671 );
1672
1673 NTSTATUS
1674 STDCALL
1675 ZwQueryDirectoryFile(
1676 IN HANDLE FileHandle,
1677 IN HANDLE Event OPTIONAL,
1678 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1679 IN PVOID ApcContext OPTIONAL,
1680 OUT PIO_STATUS_BLOCK IoStatusBlock,
1681 OUT PVOID FileInformation,
1682 IN ULONG Length,
1683 IN FILE_INFORMATION_CLASS FileInformationClass,
1684 IN BOOLEAN ReturnSingleEntry,
1685 IN PUNICODE_STRING FileName OPTIONAL,
1686 IN BOOLEAN RestartScan
1687 );
1688
1689 NTSTATUS
1690 STDCALL
1691 NtQueryEaFile(
1692 IN HANDLE FileHandle,
1693 OUT PIO_STATUS_BLOCK IoStatusBlock,
1694 OUT PVOID Buffer,
1695 IN ULONG Length,
1696 IN BOOLEAN ReturnSingleEntry,
1697 IN PVOID EaList OPTIONAL,
1698 IN ULONG EaListLength,
1699 IN PULONG EaIndex OPTIONAL,
1700 IN BOOLEAN RestartScan
1701 );
1702
1703 NTSTATUS
1704 STDCALL
1705 ZwQueryEaFile(
1706 IN HANDLE FileHandle,
1707 OUT PIO_STATUS_BLOCK IoStatusBlock,
1708 OUT PVOID Buffer,
1709 IN ULONG Length,
1710 IN BOOLEAN ReturnSingleEntry,
1711 IN PVOID EaList OPTIONAL,
1712 IN ULONG EaListLength,
1713 IN PULONG EaIndex OPTIONAL,
1714 IN BOOLEAN RestartScan
1715 );
1716
1717 NTSTATUS
1718 STDCALL
1719 NtQueryEvent(
1720 IN HANDLE EventHandle,
1721 IN EVENT_INFORMATION_CLASS EventInformationClass,
1722 OUT PVOID EventInformation,
1723 IN ULONG EventInformationLength,
1724 OUT PULONG ReturnLength
1725 );
1726 NTSTATUS
1727 STDCALL
1728 ZwQueryEvent(
1729 IN HANDLE EventHandle,
1730 IN EVENT_INFORMATION_CLASS EventInformationClass,
1731 OUT PVOID EventInformation,
1732 IN ULONG EventInformationLength,
1733 OUT PULONG ReturnLength
1734 );
1735
1736 NTSTATUS
1737 STDCALL
1738 NtQueryFullAttributesFile(
1739 IN POBJECT_ATTRIBUTES ObjectAttributes,
1740 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1741 );
1742
1743 NTSTATUS
1744 STDCALL
1745 ZwQueryFullAttributesFile(
1746 IN POBJECT_ATTRIBUTES ObjectAttributes,
1747 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1748 );
1749
1750 NTSTATUS
1751 STDCALL
1752 NtQueryInformationFile(
1753 IN HANDLE FileHandle,
1754 OUT PIO_STATUS_BLOCK IoStatusBlock,
1755 OUT PVOID FileInformation,
1756 IN ULONG Length,
1757 IN FILE_INFORMATION_CLASS FileInformationClass
1758 );
1759
1760 NTSTATUS
1761 STDCALL
1762 ZwQueryInformationFile(
1763 HANDLE FileHandle,
1764 PIO_STATUS_BLOCK IoStatusBlock,
1765 PVOID FileInformation,
1766 ULONG Length,
1767 FILE_INFORMATION_CLASS FileInformationClass
1768 );
1769
1770 NTSTATUS
1771 STDCALL
1772 NtQueryInformationJobObject(
1773 HANDLE JobHandle,
1774 JOBOBJECTINFOCLASS JobInformationClass,
1775 PVOID JobInformation,
1776 ULONG JobInformationLength,
1777 PULONG ReturnLength
1778 );
1779
1780 NTSTATUS
1781 STDCALL
1782 ZwQueryInformationJobObject(
1783 HANDLE JobHandle,
1784 JOBOBJECTINFOCLASS JobInformationClass,
1785 PVOID JobInformation,
1786 ULONG JobInformationLength,
1787 PULONG ReturnLength
1788 );
1789
1790 NTSTATUS
1791 STDCALL
1792 NtQueryInformationPort(
1793 HANDLE PortHandle,
1794 CINT PortInformationClass,
1795 PVOID PortInformation,
1796 ULONG PortInformationLength,
1797 PULONG ReturnLength
1798 );
1799
1800 NTSTATUS
1801 STDCALL
1802 ZwQueryInformationPort(
1803 HANDLE PortHandle,
1804 CINT PortInformationClass,
1805 PVOID PortInformation,
1806 ULONG PortInformationLength,
1807 PULONG ReturnLength
1808 );
1809
1810 #ifndef _NTDDK_
1811 NTSTATUS
1812 STDCALL
1813 NtQueryInformationProcess(
1814 IN HANDLE ProcessHandle,
1815 IN PROCESSINFOCLASS ProcessInformationClass,
1816 OUT PVOID ProcessInformation,
1817 IN ULONG ProcessInformationLength,
1818 OUT PULONG ReturnLength OPTIONAL
1819 );
1820
1821 NTSTATUS
1822 STDCALL
1823 ZwQueryInformationProcess(
1824 IN HANDLE ProcessHandle,
1825 IN PROCESSINFOCLASS ProcessInformationClass,
1826 OUT PVOID ProcessInformation,
1827 IN ULONG ProcessInformationLength,
1828 OUT PULONG ReturnLength OPTIONAL
1829 );
1830 #endif
1831
1832 NTSTATUS
1833 STDCALL
1834 NtQueryInformationThread(
1835 IN HANDLE ThreadHandle,
1836 IN THREADINFOCLASS ThreadInformationClass,
1837 OUT PVOID ThreadInformation,
1838 IN ULONG ThreadInformationLength,
1839 OUT PULONG ReturnLength
1840 );
1841
1842 NTSTATUS
1843 STDCALL
1844 ZwQueryInformationThread(
1845 IN HANDLE ThreadHandle,
1846 IN THREADINFOCLASS ThreadInformationClass,
1847 OUT PVOID ThreadInformation,
1848 IN ULONG ThreadInformationLength,
1849 OUT PULONG ReturnLength
1850 );
1851
1852 NTSTATUS
1853 STDCALL
1854 NtQueryInformationToken(
1855 IN HANDLE TokenHandle,
1856 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
1857 OUT PVOID TokenInformation,
1858 IN ULONG TokenInformationLength,
1859 OUT PULONG ReturnLength
1860 );
1861
1862 NTSTATUS
1863 STDCALL
1864 ZwQueryInformationToken(
1865 IN HANDLE TokenHandle,
1866 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
1867 OUT PVOID TokenInformation,
1868 IN ULONG TokenInformationLength,
1869 OUT PULONG ReturnLength
1870 );
1871
1872 NTSTATUS
1873 STDCALL
1874 NtQueryInstallUILanguage(
1875 PLANGID LanguageId
1876 );
1877
1878 NTSTATUS
1879 STDCALL
1880 ZwQueryInstallUILanguage(
1881 PLANGID LanguageId
1882 );
1883
1884 NTSTATUS
1885 STDCALL
1886 NtQueryIoCompletion(
1887 IN HANDLE IoCompletionHandle,
1888 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
1889 OUT PVOID IoCompletionInformation,
1890 IN ULONG IoCompletionInformationLength,
1891 OUT PULONG ResultLength OPTIONAL
1892 );
1893
1894 NTSTATUS
1895 STDCALL
1896 ZwQueryIoCompletion(
1897 IN HANDLE IoCompletionHandle,
1898 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
1899 OUT PVOID IoCompletionInformation,
1900 IN ULONG IoCompletionInformationLength,
1901 OUT PULONG ResultLength OPTIONAL
1902 );
1903
1904 NTSTATUS
1905 STDCALL
1906 NtQueryKey(
1907 IN HANDLE KeyHandle,
1908 IN KEY_INFORMATION_CLASS KeyInformationClass,
1909 OUT PVOID KeyInformation,
1910 IN ULONG Length,
1911 OUT PULONG ResultLength
1912 );
1913
1914 NTSTATUS
1915 STDCALL
1916 ZwQueryKey(
1917 IN HANDLE KeyHandle,
1918 IN KEY_INFORMATION_CLASS KeyInformationClass,
1919 OUT PVOID KeyInformation,
1920 IN ULONG Length,
1921 OUT PULONG ResultLength
1922 );
1923
1924 NTSTATUS
1925 STDCALL
1926 NtQueryQuotaInformationFile(
1927 IN HANDLE FileHandle,
1928 OUT PIO_STATUS_BLOCK IoStatusBlock,
1929 OUT PVOID Buffer,
1930 IN ULONG Length,
1931 IN BOOLEAN ReturnSingleEntry,
1932 IN PVOID SidList OPTIONAL,
1933 IN ULONG SidListLength,
1934 IN PSID StartSid OPTIONAL,
1935 IN BOOLEAN RestartScan
1936 );
1937
1938
1939 NTSTATUS
1940 STDCALL
1941 ZwQueryQuotaInformationFile(
1942 IN HANDLE FileHandle,
1943 OUT PIO_STATUS_BLOCK IoStatusBlock,
1944 OUT PVOID Buffer,
1945 IN ULONG Length,
1946 IN BOOLEAN ReturnSingleEntry,
1947 IN PVOID SidList OPTIONAL,
1948 IN ULONG SidListLength,
1949 IN PSID StartSid OPTIONAL,
1950 IN BOOLEAN RestartScan
1951 );
1952
1953 NTSTATUS
1954 STDCALL
1955 NtQueryMultipleValueKey(
1956 IN HANDLE KeyHandle,
1957 IN OUT PKEY_VALUE_ENTRY ValueList,
1958 IN ULONG NumberOfValues,
1959 OUT PVOID Buffer,
1960 IN OUT PULONG Length,
1961 OUT PULONG ReturnLength
1962 );
1963
1964 NTSTATUS
1965 STDCALL
1966 ZwQueryMultipleValueKey(
1967 IN HANDLE KeyHandle,
1968 IN OUT PKEY_VALUE_ENTRY ValueList,
1969 IN ULONG NumberOfValues,
1970 OUT PVOID Buffer,
1971 IN OUT PULONG Length,
1972 OUT PULONG ReturnLength
1973 );
1974
1975 NTSTATUS
1976 STDCALL
1977 NtQueryMutant(
1978 IN HANDLE MutantHandle,
1979 IN MUTANT_INFORMATION_CLASS MutantInformationClass,
1980 OUT PVOID MutantInformation,
1981 IN ULONG Length,
1982 OUT PULONG ResultLength
1983 );
1984
1985 NTSTATUS
1986 STDCALL
1987 ZwQueryMutant(
1988 IN HANDLE MutantHandle,
1989 IN MUTANT_INFORMATION_CLASS MutantInformationClass,
1990 OUT PVOID MutantInformation,
1991 IN ULONG Length,
1992 OUT PULONG ResultLength
1993 );
1994
1995 NTSTATUS
1996 STDCALL
1997 NtQueryPerformanceCounter(
1998 IN PLARGE_INTEGER Counter,
1999 IN PLARGE_INTEGER Frequency
2000 );
2001
2002 NTSTATUS
2003 STDCALL
2004 ZwQueryPerformanceCounter(
2005 IN PLARGE_INTEGER Counter,
2006 IN PLARGE_INTEGER Frequency
2007 );
2008
2009 NTSTATUS
2010 STDCALL
2011 NtQuerySemaphore(
2012 IN HANDLE SemaphoreHandle,
2013 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
2014 OUT PVOID SemaphoreInformation,
2015 IN ULONG Length,
2016 OUT PULONG ReturnLength
2017 );
2018
2019 NTSTATUS
2020 STDCALL
2021 ZwQuerySemaphore(
2022 IN HANDLE SemaphoreHandle,
2023 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
2024 OUT PVOID SemaphoreInformation,
2025 IN ULONG Length,
2026 OUT PULONG ReturnLength
2027 );
2028
2029 NTSTATUS
2030 STDCALL
2031 NtQuerySymbolicLinkObject(
2032 IN HANDLE SymLinkObjHandle,
2033 OUT PUNICODE_STRING LinkTarget,
2034 OUT PULONG DataWritten OPTIONAL
2035 );
2036
2037 NTSTATUS
2038 STDCALL
2039 ZwQuerySymbolicLinkObject(
2040 IN HANDLE SymLinkObjHandle,
2041 OUT PUNICODE_STRING LinkName,
2042 OUT PULONG DataWritten OPTIONAL
2043 );
2044
2045 NTSTATUS
2046 STDCALL
2047 NtQuerySystemEnvironmentValue(
2048 IN PUNICODE_STRING Name,
2049 OUT PVOID Value,
2050 ULONG Length,
2051 PULONG ReturnLength
2052 );
2053
2054 NTSTATUS
2055 STDCALL
2056 ZwQuerySystemEnvironmentValue(
2057 IN PUNICODE_STRING Name,
2058 OUT PVOID Value,
2059 ULONG Length,
2060 PULONG ReturnLength
2061 );
2062
2063 NTSTATUS
2064 STDCALL
2065 NtQuerySystemInformation(
2066 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2067 OUT PVOID SystemInformation,
2068 IN ULONG Length,
2069 OUT PULONG ResultLength
2070 );
2071
2072 NTSTATUS
2073 STDCALL
2074 ZwQuerySystemInformation(
2075 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2076 OUT PVOID SystemInformation,
2077 IN ULONG Length,
2078 OUT PULONG ResultLength
2079 );
2080
2081 NTSTATUS
2082 STDCALL
2083 NtQuerySystemTime (
2084 OUT PLARGE_INTEGER CurrentTime
2085 );
2086
2087 NTSTATUS
2088 STDCALL
2089 NtQueryTimer(
2090 IN HANDLE TimerHandle,
2091 IN TIMER_INFORMATION_CLASS TimerInformationClass,
2092 OUT PVOID TimerInformation,
2093 IN ULONG Length,
2094 OUT PULONG ResultLength
2095 );
2096 NTSTATUS
2097 STDCALL
2098 ZwQueryTimer(
2099 IN HANDLE TimerHandle,
2100 IN TIMER_INFORMATION_CLASS TimerInformationClass,
2101 OUT PVOID TimerInformation,
2102 IN ULONG Length,
2103 OUT PULONG ResultLength
2104 );
2105
2106 NTSTATUS
2107 STDCALL
2108 NtQueryTimerResolution (
2109 OUT PULONG MinimumResolution,
2110 OUT PULONG MaximumResolution,
2111 OUT PULONG ActualResolution
2112 );
2113
2114 NTSTATUS
2115 STDCALL
2116 ZwQueryTimerResolution (
2117 OUT PULONG MinimumResolution,
2118 OUT PULONG MaximumResolution,
2119 OUT PULONG ActualResolution
2120 );
2121
2122 NTSTATUS
2123 STDCALL
2124 NtQueryValueKey(
2125 IN HANDLE KeyHandle,
2126 IN PUNICODE_STRING ValueName,
2127 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
2128 OUT PVOID KeyValueInformation,
2129 IN ULONG Length,
2130 OUT PULONG ResultLength
2131 );
2132
2133 NTSTATUS
2134 STDCALL
2135 ZwQueryValueKey(
2136 IN HANDLE KeyHandle,
2137 IN PUNICODE_STRING ValueName,
2138 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
2139 OUT PVOID KeyValueInformation,
2140 IN ULONG Length,
2141 OUT PULONG ResultLength
2142 );
2143
2144 NTSTATUS
2145 STDCALL
2146 NtQueryVolumeInformationFile(
2147 IN HANDLE FileHandle,
2148 OUT PIO_STATUS_BLOCK IoStatusBlock,
2149 OUT PVOID FsInformation,
2150 IN ULONG Length,
2151 IN FS_INFORMATION_CLASS FsInformationClass
2152 );
2153
2154 NTSTATUS
2155 STDCALL
2156 ZwQueryVolumeInformationFile(
2157 IN HANDLE FileHandle,
2158 OUT PIO_STATUS_BLOCK IoStatusBlock,
2159 OUT PVOID FsInformation,
2160 IN ULONG Length,
2161 IN FS_INFORMATION_CLASS FsInformationClass
2162 );
2163
2164 NTSTATUS
2165 STDCALL
2166 NtQueueApcThread(
2167 HANDLE ThreadHandle,
2168 PKNORMAL_ROUTINE ApcRoutine,
2169 PVOID NormalContext,
2170 PVOID SystemArgument1,
2171 PVOID SystemArgument2
2172 );
2173
2174 NTSTATUS
2175 STDCALL
2176 ZwQueueApcThread(
2177 HANDLE ThreadHandle,
2178 PKNORMAL_ROUTINE ApcRoutine,
2179 PVOID NormalContext,
2180 PVOID SystemArgument1,
2181 PVOID SystemArgument2
2182 );
2183
2184 NTSTATUS
2185 STDCALL
2186 NtRaiseException(
2187 IN PEXCEPTION_RECORD ExceptionRecord,
2188 IN PCONTEXT Context,
2189 IN BOOLEAN SearchFrames
2190 );
2191
2192 NTSTATUS
2193 STDCALL
2194 ZwRaiseException(
2195 IN PEXCEPTION_RECORD ExceptionRecord,
2196 IN PCONTEXT Context,
2197 IN BOOLEAN SearchFrames
2198 );
2199
2200 NTSTATUS
2201 STDCALL
2202 NtReadFile(
2203 IN HANDLE FileHandle,
2204 IN HANDLE Event OPTIONAL,
2205 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2206 IN PVOID UserApcContext OPTIONAL,
2207 OUT PIO_STATUS_BLOCK IoStatusBlock,
2208 OUT PVOID Buffer,
2209 IN ULONG BufferLength,
2210 IN PLARGE_INTEGER ByteOffset OPTIONAL,
2211 IN PULONG Key OPTIONAL
2212 );
2213
2214 NTSTATUS
2215 STDCALL
2216 ZwReadFile(
2217 IN HANDLE FileHandle,
2218 IN HANDLE Event OPTIONAL,
2219 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2220 IN PVOID UserApcContext OPTIONAL,
2221 OUT PIO_STATUS_BLOCK IoStatusBlock,
2222 OUT PVOID Buffer,
2223 IN ULONG BufferLength,
2224 IN PLARGE_INTEGER ByteOffset OPTIONAL,
2225 IN PULONG Key OPTIONAL
2226 );
2227
2228 NTSTATUS
2229 STDCALL
2230 NtReadFileScatter(
2231 IN HANDLE FileHandle,
2232 IN HANDLE Event OPTIONAL,
2233 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2234 IN PVOID UserApcContext OPTIONAL,
2235 OUT PIO_STATUS_BLOCK UserIoStatusBlock,
2236 IN FILE_SEGMENT_ELEMENT BufferDescription[],
2237 IN ULONG BufferLength,
2238 IN PLARGE_INTEGER ByteOffset,
2239 IN PULONG Key OPTIONAL
2240 );
2241
2242 NTSTATUS
2243 STDCALL
2244 ZwReadFileScatter(
2245 IN HANDLE FileHandle,
2246 IN HANDLE Event OPTIONAL,
2247 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
2248 IN PVOID UserApcContext OPTIONAL,
2249 OUT PIO_STATUS_BLOCK UserIoStatusBlock,
2250 IN FILE_SEGMENT_ELEMENT BufferDescription[],
2251 IN ULONG BufferLength,
2252 IN PLARGE_INTEGER ByteOffset,
2253 IN PULONG Key OPTIONAL
2254 );
2255
2256 NTSTATUS
2257 STDCALL
2258 NtReadRequestData(
2259 HANDLE PortHandle,
2260 PLPC_MESSAGE Message,
2261 ULONG Index,
2262 PVOID Buffer,
2263 ULONG BufferLength,
2264 PULONG ReturnLength
2265 );
2266
2267 NTSTATUS
2268 STDCALL
2269 ZwReadRequestData(
2270 HANDLE PortHandle,
2271 PLPC_MESSAGE Message,
2272 ULONG Index,
2273 PVOID Buffer,
2274 ULONG BufferLength,
2275 PULONG ReturnLength
2276 );
2277
2278 NTSTATUS
2279 STDCALL
2280 NtReadVirtualMemory(
2281 IN HANDLE ProcessHandle,
2282 IN PVOID BaseAddress,
2283 OUT PVOID Buffer,
2284 IN ULONG NumberOfBytesToRead,
2285 OUT PULONG NumberOfBytesRead
2286 );
2287 NTSTATUS
2288 STDCALL
2289 ZwReadVirtualMemory(
2290 IN HANDLE ProcessHandle,
2291 IN PVOID BaseAddress,
2292 OUT PVOID Buffer,
2293 IN ULONG NumberOfBytesToRead,
2294 OUT PULONG NumberOfBytesRead
2295 );
2296
2297 NTSTATUS
2298 STDCALL
2299 NtRegisterThreadTerminatePort(
2300 HANDLE TerminationPort
2301 );
2302
2303 NTSTATUS
2304 STDCALL
2305 ZwRegisterThreadTerminatePort(
2306 HANDLE TerminationPort
2307 );
2308
2309 NTSTATUS
2310 STDCALL
2311 NtReleaseMutant(
2312 IN HANDLE MutantHandle,
2313 IN PLONG ReleaseCount OPTIONAL
2314 );
2315
2316 NTSTATUS
2317 STDCALL
2318 ZwReleaseMutant(
2319 IN HANDLE MutantHandle,
2320 IN PLONG ReleaseCount OPTIONAL
2321 );
2322
2323 NTSTATUS
2324 STDCALL
2325 NtReleaseSemaphore(
2326 IN HANDLE SemaphoreHandle,
2327 IN LONG ReleaseCount,
2328 OUT PLONG PreviousCount
2329 );
2330
2331 NTSTATUS
2332 STDCALL
2333 ZwReleaseSemaphore(
2334 IN HANDLE SemaphoreHandle,
2335 IN LONG ReleaseCount,
2336 OUT PLONG PreviousCount
2337 );
2338
2339 NTSTATUS
2340 STDCALL
2341 NtRemoveIoCompletion(
2342 IN HANDLE IoCompletionHandle,
2343 OUT PVOID *CompletionKey,
2344 OUT PVOID *CompletionContext,
2345 OUT PIO_STATUS_BLOCK IoStatusBlock,
2346 IN PLARGE_INTEGER Timeout OPTIONAL
2347 );
2348
2349 NTSTATUS
2350 STDCALL
2351 ZwRemoveIoCompletion(
2352 IN HANDLE IoCompletionHandle,
2353 OUT PVOID *CompletionKey,
2354 OUT PVOID *CompletionContext,
2355 OUT PIO_STATUS_BLOCK IoStatusBlock,
2356 IN PLARGE_INTEGER Timeout OPTIONAL
2357 );
2358
2359 NTSTATUS
2360 STDCALL
2361 NtReplaceKey(
2362 IN POBJECT_ATTRIBUTES ObjectAttributes,
2363 IN HANDLE Key,
2364 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2365 );
2366 NTSTATUS
2367 STDCALL
2368 ZwReplaceKey(
2369 IN POBJECT_ATTRIBUTES ObjectAttributes,
2370 IN HANDLE Key,
2371 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2372 );
2373
2374 NTSTATUS
2375 STDCALL
2376 NtReplyPort(
2377 HANDLE PortHandle,
2378 PLPC_MESSAGE LpcReply
2379 );
2380
2381 NTSTATUS
2382 STDCALL
2383 ZwReplyPort(
2384 HANDLE PortHandle,
2385 PLPC_MESSAGE LpcReply
2386 );
2387
2388 NTSTATUS
2389 STDCALL
2390 NtReplyWaitReceivePort(
2391 HANDLE PortHandle,
2392 PULONG PortId,
2393 PLPC_MESSAGE MessageReply,
2394 PLPC_MESSAGE MessageRequest
2395 );
2396
2397 NTSTATUS
2398 STDCALL
2399 ZwReplyWaitReceivePort(
2400 HANDLE PortHandle,
2401 PULONG PortId,
2402 PLPC_MESSAGE MessageReply,
2403 PLPC_MESSAGE MessageRequest
2404 );
2405
2406 NTSTATUS
2407 STDCALL
2408 NtReplyWaitReplyPort(
2409 HANDLE PortHandle,
2410 PLPC_MESSAGE ReplyMessage
2411 );
2412
2413 NTSTATUS
2414 STDCALL
2415 ZwReplyWaitReplyPort(
2416 HANDLE PortHandle,
2417 PLPC_MESSAGE ReplyMessage
2418 );
2419
2420 NTSTATUS
2421 STDCALL
2422 NtRequestPort(
2423 HANDLE PortHandle,
2424 PLPC_MESSAGE LpcMessage);
2425
2426 NTSTATUS
2427 STDCALL
2428 ZwRequestPort(
2429 HANDLE PortHandle,
2430 PLPC_MESSAGE LpcMessage
2431 );
2432
2433 NTSTATUS
2434 STDCALL
2435 NtRequestWaitReplyPort(
2436 HANDLE PortHandle,
2437 PLPC_MESSAGE LpcReply,
2438 PLPC_MESSAGE LpcRequest
2439 );
2440
2441 NTSTATUS
2442 STDCALL
2443 ZwRequestWaitReplyPort(
2444 HANDLE PortHandle,
2445 PLPC_MESSAGE LpcReply,
2446 PLPC_MESSAGE LpcRequest
2447 );
2448
2449 NTSTATUS
2450 STDCALL
2451 NtResetEvent(
2452 HANDLE EventHandle,
2453 PLONG NumberOfWaitingThreads OPTIONAL
2454 );
2455
2456 NTSTATUS
2457 STDCALL
2458 ZwResetEvent(
2459 HANDLE EventHandle,
2460 PLONG NumberOfWaitingThreads OPTIONAL
2461 );
2462
2463 NTSTATUS
2464 STDCALL
2465 NtRestoreKey(
2466 HANDLE KeyHandle,
2467 HANDLE FileHandle,
2468 ULONG RestoreFlags
2469 );
2470
2471 NTSTATUS
2472 STDCALL
2473 ZwRestoreKey(
2474 HANDLE KeyHandle,
2475 HANDLE FileHandle,
2476 ULONG RestoreFlags
2477 );
2478
2479 NTSTATUS
2480 STDCALL
2481 NtResumeThread(
2482 IN HANDLE ThreadHandle,
2483 OUT PULONG SuspendCount
2484 );
2485
2486 NTSTATUS
2487 STDCALL
2488 ZwResumeThread(
2489 IN HANDLE ThreadHandle,
2490 OUT PULONG SuspendCount
2491 );
2492
2493 NTSTATUS
2494 STDCALL
2495 NtSaveKey(
2496 IN HANDLE KeyHandle,
2497 IN HANDLE FileHandle
2498 );
2499 NTSTATUS
2500 STDCALL
2501 ZwSaveKey(
2502 IN HANDLE KeyHandle,
2503 IN HANDLE FileHandle
2504 );
2505
2506 NTSTATUS
2507 STDCALL
2508 NtSaveKeyEx(
2509 IN HANDLE KeyHandle,
2510 IN HANDLE FileHandle,
2511 IN ULONG Flags
2512 );
2513
2514 NTSTATUS
2515 STDCALL
2516 ZwSaveKeyEx(
2517 IN HANDLE KeyHandle,
2518 IN HANDLE FileHandle,
2519 IN ULONG Flags
2520 );
2521
2522 NTSTATUS
2523 STDCALL
2524 NtSetBootEntryOrder(
2525 IN ULONG Unknown1,
2526 IN ULONG Unknown2
2527 );
2528
2529 NTSTATUS
2530 STDCALL
2531 ZwSetBootEntryOrder(
2532 IN ULONG Unknown1,
2533 IN ULONG Unknown2
2534 );
2535
2536 NTSTATUS
2537 STDCALL
2538 NtSetBootOptions(
2539 ULONG Unknown1,
2540 ULONG Unknown2
2541 );
2542
2543 NTSTATUS
2544 STDCALL
2545 ZwSetBootOptions(
2546 ULONG Unknown1,
2547 ULONG Unknown2
2548 );
2549
2550 NTSTATUS
2551 STDCALL
2552 NtSetContextThread(
2553 IN HANDLE ThreadHandle,
2554 IN PCONTEXT Context
2555 );
2556 NTSTATUS
2557 STDCALL
2558 ZwSetContextThread(
2559 IN HANDLE ThreadHandle,
2560 IN PCONTEXT Context
2561 );
2562
2563 NTSTATUS
2564 STDCALL
2565 NtSetDefaultLocale(
2566 IN BOOLEAN UserProfile,
2567 IN LCID DefaultLocaleId
2568 );
2569
2570 NTSTATUS
2571 STDCALL
2572 ZwSetDefaultLocale(
2573 IN BOOLEAN UserProfile,
2574 IN LCID DefaultLocaleId
2575 );
2576
2577 NTSTATUS
2578 STDCALL
2579 NtSetDefaultUILanguage(
2580 LANGID LanguageId
2581 );
2582
2583 NTSTATUS
2584 STDCALL
2585 ZwSetDefaultUILanguage(
2586 LANGID LanguageId
2587 );
2588 NTSTATUS
2589 STDCALL
2590 NtSetDefaultHardErrorPort(
2591 IN HANDLE PortHandle
2592 );
2593 NTSTATUS
2594 STDCALL
2595 ZwSetDefaultHardErrorPort(
2596 IN HANDLE PortHandle
2597 );
2598
2599 NTSTATUS
2600 STDCALL
2601 NtSetEaFile(
2602 IN HANDLE FileHandle,
2603 IN PIO_STATUS_BLOCK IoStatusBlock,
2604 PVOID EaBuffer,
2605 ULONG EaBufferSize
2606 );
2607
2608 NTSTATUS
2609 STDCALL
2610 ZwSetEaFile(
2611 IN HANDLE FileHandle,
2612 IN PIO_STATUS_BLOCK IoStatusBlock,
2613 PVOID EaBuffer,
2614 ULONG EaBufferSize
2615 );
2616
2617 NTSTATUS
2618 STDCALL
2619 NtSetEvent(
2620 IN HANDLE EventHandle,
2621 OUT PLONG PreviousState OPTIONAL
2622 );
2623
2624 NTSTATUS
2625 STDCALL
2626 ZwSetEvent(
2627 IN HANDLE EventHandle,
2628 OUT PLONG PreviousState OPTIONAL
2629 );
2630
2631 NTSTATUS
2632 STDCALL
2633 NtSetHighEventPair(
2634 IN HANDLE EventPairHandle
2635 );
2636
2637 NTSTATUS
2638 STDCALL
2639 ZwSetHighEventPair(
2640 IN HANDLE EventPairHandle
2641 );
2642 NTSTATUS
2643 STDCALL
2644 NtSetHighWaitLowEventPair(
2645 IN HANDLE EventPairHandle
2646 );
2647 NTSTATUS
2648 STDCALL
2649 ZwSetHighWaitLowEventPair(
2650 IN HANDLE EventPairHandle
2651 );
2652
2653 NTSTATUS
2654 STDCALL
2655 NtSetInformationFile(
2656 IN HANDLE FileHandle,
2657 IN PIO_STATUS_BLOCK IoStatusBlock,
2658 IN PVOID FileInformation,
2659 IN ULONG Length,
2660 IN FILE_INFORMATION_CLASS FileInformationClass
2661 );
2662
2663 NTSTATUS
2664 STDCALL
2665 ZwSetInformationFile(
2666 IN HANDLE FileHandle,
2667 IN PIO_STATUS_BLOCK IoStatusBlock,
2668 IN PVOID FileInformation,
2669 IN ULONG Length,
2670 IN FILE_INFORMATION_CLASS FileInformationClass
2671 );
2672
2673 NTSTATUS
2674 STDCALL
2675 NtSetInformationJobObject(
2676 HANDLE JobHandle,
2677 JOBOBJECTINFOCLASS JobInformationClass,
2678 PVOID JobInformation,
2679 ULONG JobInformationLength
2680 );
2681
2682 NTSTATUS
2683 STDCALL
2684 ZwSetInformationJobObject(
2685 HANDLE JobHandle,
2686 JOBOBJECTINFOCLASS JobInformationClass,
2687 PVOID JobInformation,
2688 ULONG JobInformationLength
2689 );
2690
2691 NTSTATUS
2692 STDCALL
2693 NtSetInformationThread(
2694 IN HANDLE ThreadHandle,
2695 IN THREADINFOCLASS ThreadInformationClass,
2696 IN PVOID ThreadInformation,
2697 IN ULONG ThreadInformationLength
2698 );
2699 NTSTATUS
2700 STDCALL
2701 ZwSetInformationThread(
2702 IN HANDLE ThreadHandle,
2703 IN THREADINFOCLASS ThreadInformationClass,
2704 IN PVOID ThreadInformation,
2705 IN ULONG ThreadInformationLength
2706 );
2707
2708 NTSTATUS
2709 STDCALL
2710 NtSetInformationToken(
2711 IN HANDLE TokenHandle,
2712 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
2713 OUT PVOID TokenInformation,
2714 IN ULONG TokenInformationLength
2715 );
2716
2717 NTSTATUS
2718 STDCALL
2719 ZwSetInformationToken(
2720 IN HANDLE TokenHandle,
2721 IN TOKEN_INFORMATION_CLASS TokenInformationClass,
2722 OUT PVOID TokenInformation,
2723 IN ULONG TokenInformationLength
2724 );
2725
2726 NTSTATUS
2727 STDCALL
2728 NtSetIoCompletion(
2729 IN HANDLE IoCompletionPortHandle,
2730 IN PVOID CompletionKey,
2731 IN PVOID CompletionContext,
2732 IN NTSTATUS CompletionStatus,
2733 IN ULONG CompletionInformation
2734 );
2735
2736 NTSTATUS
2737 STDCALL
2738 ZwSetIoCompletion(
2739 IN HANDLE IoCompletionPortHandle,
2740 IN PVOID CompletionKey,
2741 IN PVOID CompletionContext,
2742 IN NTSTATUS CompletionStatus,
2743 IN ULONG CompletionInformation
2744 );
2745
2746 NTSTATUS
2747 STDCALL
2748 NtSetIntervalProfile(
2749 ULONG Interval,
2750 KPROFILE_SOURCE ClockSource
2751 );
2752
2753 NTSTATUS
2754 STDCALL
2755 ZwSetIntervalProfile(
2756 ULONG Interval,
2757 KPROFILE_SOURCE ClockSource
2758 );
2759
2760 NTSTATUS
2761 STDCALL
2762 NtSetLowEventPair(
2763 HANDLE EventPair
2764 );
2765
2766 NTSTATUS
2767 STDCALL
2768 ZwSetLowEventPair(
2769 HANDLE EventPair
2770 );
2771
2772 NTSTATUS
2773 STDCALL
2774 NtSetLowWaitHighEventPair(
2775 HANDLE EventPair
2776 );
2777
2778 NTSTATUS
2779 STDCALL
2780 ZwSetLowWaitHighEventPair(
2781 HANDLE EventPair
2782 );
2783
2784 NTSTATUS
2785 STDCALL
2786 NtSetQuotaInformationFile(
2787 HANDLE FileHandle,
2788 PIO_STATUS_BLOCK IoStatusBlock,
2789 PFILE_USER_QUOTA_INFORMATION Buffer,
2790 ULONG BufferLength
2791 );
2792
2793 NTSTATUS
2794 STDCALL
2795 ZwSetQuotaInformationFile(
2796 HANDLE FileHandle,
2797 PIO_STATUS_BLOCK IoStatusBlock,
2798 PFILE_USER_QUOTA_INFORMATION Buffer,
2799 ULONG BufferLength
2800 );
2801
2802 NTSTATUS
2803 STDCALL
2804 NtSetSecurityObject(
2805 IN HANDLE Handle,
2806 IN SECURITY_INFORMATION SecurityInformation,
2807 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2808 );
2809
2810 NTSTATUS
2811 STDCALL
2812 ZwSetSecurityObject(
2813 IN HANDLE Handle,
2814 IN SECURITY_INFORMATION SecurityInformation,
2815 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2816 );
2817
2818 NTSTATUS
2819 STDCALL
2820 NtSetSystemEnvironmentValue(
2821 IN PUNICODE_STRING VariableName,
2822 IN PUNICODE_STRING Value
2823 );
2824 NTSTATUS
2825 STDCALL
2826 ZwSetSystemEnvironmentValue(
2827 IN PUNICODE_STRING VariableName,
2828 IN PUNICODE_STRING Value
2829 );
2830
2831 NTSTATUS
2832 STDCALL
2833 NtSetSystemInformation(
2834 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2835 IN PVOID SystemInformation,
2836 IN ULONG SystemInformationLength
2837 );
2838
2839 NTSTATUS
2840 STDCALL
2841 ZwSetSystemInformation(
2842 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2843 IN PVOID SystemInformation,
2844 IN ULONG SystemInformationLength
2845 );
2846
2847 NTSTATUS
2848 STDCALL
2849 NtSetSystemTime(
2850 IN PLARGE_INTEGER SystemTime,
2851 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2852 );
2853
2854 NTSTATUS
2855 STDCALL
2856 ZwSetSystemTime(
2857 IN PLARGE_INTEGER SystemTime,
2858 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2859 );
2860
2861 NTSTATUS
2862 STDCALL
2863 NtSetTimerResolution(
2864 IN ULONG RequestedResolution,
2865 IN BOOLEAN SetOrUnset,
2866 OUT PULONG ActualResolution
2867 );
2868
2869 NTSTATUS
2870 STDCALL
2871 ZwSetTimerResolution(
2872 IN ULONG RequestedResolution,
2873 IN BOOLEAN SetOrUnset,
2874 OUT PULONG ActualResolution
2875 );
2876
2877 NTSTATUS
2878 STDCALL
2879 NtSetUuidSeed(
2880 IN PUCHAR UuidSeed
2881 );
2882
2883 NTSTATUS
2884 STDCALL
2885 ZwSetUuidSeed(
2886 IN PUCHAR UuidSeed
2887 );
2888
2889 NTSTATUS
2890 STDCALL
2891 NtSetValueKey(
2892 IN HANDLE KeyHandle,
2893 IN PUNICODE_STRING ValueName,
2894 IN ULONG TitleIndex OPTIONAL,
2895 IN ULONG Type,
2896 IN PVOID Data,
2897 IN ULONG DataSize
2898 );
2899
2900 NTSTATUS
2901 STDCALL
2902 ZwSetValueKey(
2903 IN HANDLE KeyHandle,
2904 IN PUNICODE_STRING ValueName,
2905 IN ULONG TitleIndex OPTIONAL,
2906 IN ULONG Type,
2907 IN PVOID Data,
2908 IN ULONG DataSize
2909 );
2910
2911 NTSTATUS
2912 STDCALL
2913 NtSetVolumeInformationFile(
2914 IN HANDLE FileHandle,
2915 OUT PIO_STATUS_BLOCK IoStatusBlock,
2916 IN PVOID FsInformation,
2917 IN ULONG Length,
2918 IN FS_INFORMATION_CLASS FsInformationClass
2919 );
2920
2921 NTSTATUS
2922 STDCALL
2923 ZwSetVolumeInformationFile(
2924 IN HANDLE FileHandle,
2925 OUT PIO_STATUS_BLOCK IoStatusBlock,
2926 IN PVOID FsInformation,
2927 IN ULONG Length,
2928 IN FS_INFORMATION_CLASS FsInformationClass
2929 );
2930
2931 NTSTATUS
2932 STDCALL
2933 NtShutdownSystem(
2934 IN SHUTDOWN_ACTION Action
2935 );
2936
2937 NTSTATUS
2938 STDCALL
2939 ZwShutdownSystem(
2940 IN SHUTDOWN_ACTION Action
2941 );
2942
2943 NTSTATUS
2944 STDCALL
2945 NtSignalAndWaitForSingleObject(
2946 IN HANDLE SignalObject,
2947 IN HANDLE WaitObject,
2948 IN BOOLEAN Alertable,
2949 IN PLARGE_INTEGER Time
2950 );
2951
2952 NTSTATUS
2953 STDCALL
2954 ZwSignalAndWaitForSingleObject(
2955 IN HANDLE SignalObject,
2956 IN HANDLE WaitObject,
2957 IN BOOLEAN Alertable,
2958 IN PLARGE_INTEGER Time
2959 );
2960
2961 NTSTATUS
2962 STDCALL
2963 NtStartProfile(
2964 HANDLE ProfileHandle
2965 );
2966
2967 NTSTATUS
2968 STDCALL
2969 ZwStartProfile(
2970 HANDLE ProfileHandle
2971 );
2972
2973 NTSTATUS
2974 STDCALL
2975 NtStopProfile(
2976 HANDLE ProfileHandle
2977 );
2978
2979 NTSTATUS
2980 STDCALL
2981 ZwStopProfile(
2982 HANDLE ProfileHandle
2983 );
2984
2985 NTSTATUS
2986 STDCALL
2987 NtTerminateProcess(
2988 IN HANDLE ProcessHandle,
2989 IN NTSTATUS ExitStatus
2990 );
2991
2992 NTSTATUS
2993 STDCALL
2994 ZwTerminateProcess(
2995 IN HANDLE ProcessHandle,
2996 IN NTSTATUS ExitStatus
2997 );
2998
2999 NTSTATUS
3000 STDCALL
3001 NtTerminateJobObject(
3002 HANDLE JobHandle,
3003 NTSTATUS ExitStatus
3004 );
3005
3006 NTSTATUS
3007 STDCALL
3008 ZwTerminateJobObject(
3009 HANDLE JobHandle,
3010 NTSTATUS ExitStatus
3011 );
3012
3013 NTSTATUS
3014 STDCALL
3015 NtTraceEvent(
3016 IN ULONG TraceHandle,
3017 IN ULONG Flags,
3018 IN ULONG TraceHeaderLength,
3019 IN struct _EVENT_TRACE_HEADER* TraceHeader
3020 );
3021
3022 NTSTATUS
3023 STDCALL
3024 ZwTraceEvent(
3025 IN ULONG TraceHandle,
3026 IN ULONG Flags,
3027 IN ULONG TraceHeaderLength,
3028 IN struct _EVENT_TRACE_HEADER* TraceHeader
3029 );
3030
3031 NTSTATUS
3032 STDCALL
3033 NtTranslateFilePath(
3034 ULONG Unknown1,
3035 ULONG Unknown2,
3036 ULONG Unknown3
3037 );
3038
3039 NTSTATUS
3040 STDCALL
3041 ZwTranslateFilePath(
3042 ULONG Unknown1,
3043 ULONG Unknown2,
3044 ULONG Unknown3
3045 );
3046
3047 NTSTATUS
3048 STDCALL
3049 NtUnloadDriver(
3050 IN PUNICODE_STRING DriverServiceName
3051 );
3052
3053 NTSTATUS
3054 STDCALL
3055 ZwUnloadDriver(
3056 IN PUNICODE_STRING DriverServiceName
3057 );
3058
3059 NTSTATUS
3060 STDCALL
3061 NtUnmapViewOfSection(
3062 IN HANDLE ProcessHandle,
3063 IN PVOID BaseAddress
3064 );
3065
3066 NTSTATUS
3067 STDCALL
3068 ZwUnmapViewOfSection(
3069 IN HANDLE ProcessHandle,
3070 IN PVOID BaseAddress
3071 );
3072
3073 NTSTATUS
3074 STDCALL
3075 NtWriteRequestData(
3076 HANDLE PortHandle,
3077 PLPC_MESSAGE Message,
3078 ULONG Index,
3079 PVOID Buffer,
3080 ULONG BufferLength,
3081 PULONG ReturnLength
3082 );
3083
3084 NTSTATUS
3085 STDCALL
3086 ZwWriteRequestData(
3087 HANDLE PortHandle,
3088 PLPC_MESSAGE Message,
3089 ULONG Index,
3090 PVOID Buffer,
3091 ULONG BufferLength,
3092 PULONG ReturnLength
3093 );
3094
3095 NTSTATUS
3096 STDCALL
3097 NtWriteVirtualMemory(
3098 IN HANDLE ProcessHandle,
3099 IN PVOID BaseAddress,
3100 IN PVOID Buffer,
3101 IN ULONG NumberOfBytesToWrite,
3102 OUT PULONG NumberOfBytesWritten
3103 );
3104
3105 NTSTATUS
3106 STDCALL
3107 ZwWriteVirtualMemory(
3108 IN HANDLE ProcessHandle,
3109 IN PVOID BaseAddress,
3110 IN PVOID Buffer,
3111 IN ULONG NumberOfBytesToWrite,
3112 OUT PULONG NumberOfBytesWritten
3113 );
3114
3115
3116 NTSTATUS
3117 STDCALL
3118 NtWaitForSingleObject (
3119 IN HANDLE Object,
3120 IN BOOLEAN Alertable,
3121 IN PLARGE_INTEGER Time
3122 );
3123
3124 NTSTATUS
3125 STDCALL
3126 ZwWaitForSingleObject (
3127 IN HANDLE Object,
3128 IN BOOLEAN Alertable,
3129 IN PLARGE_INTEGER Time
3130 );
3131
3132
3133 NTSTATUS
3134 STDCALL
3135 NtWaitHighEventPair(
3136 IN HANDLE EventPairHandle
3137 );
3138
3139 NTSTATUS
3140 STDCALL
3141 ZwWaitHighEventPair(
3142 IN HANDLE EventPairHandle
3143 );
3144
3145 NTSTATUS
3146 STDCALL
3147 NtWaitLowEventPair(
3148 IN HANDLE EventPairHandle
3149 );
3150
3151 NTSTATUS
3152 STDCALL
3153 ZwWaitLowEventPair(
3154 IN HANDLE EventPairHandle
3155 );
3156
3157 NTSTATUS
3158 STDCALL
3159 NtUnlockFile(
3160 IN HANDLE FileHandle,
3161 OUT PIO_STATUS_BLOCK IoStatusBlock,
3162 IN PLARGE_INTEGER ByteOffset,
3163 IN PLARGE_INTEGER Lenght,
3164 OUT PULONG Key OPTIONAL
3165 );
3166 NTSTATUS
3167 STDCALL
3168 ZwUnlockFile(
3169 IN HANDLE FileHandle,
3170 OUT PIO_STATUS_BLOCK IoStatusBlock,
3171 IN PLARGE_INTEGER ByteOffset,
3172 IN PLARGE_INTEGER Lenght,
3173 OUT PULONG Key OPTIONAL
3174 );
3175
3176
3177 NTSTATUS
3178 STDCALL
3179 NtWriteFile(
3180 IN HANDLE FileHandle,
3181 IN HANDLE Event OPTIONAL,
3182 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3183 IN PVOID ApcContext OPTIONAL,
3184 OUT PIO_STATUS_BLOCK IoStatusBlock,
3185 IN PVOID Buffer,
3186 IN ULONG Length,
3187 IN PLARGE_INTEGER ByteOffset,
3188 IN PULONG Key OPTIONAL
3189 );
3190
3191 NTSTATUS
3192 STDCALL
3193 ZwWriteFile(
3194 IN HANDLE FileHandle,
3195 IN HANDLE Event OPTIONAL,
3196 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3197 IN PVOID ApcContext OPTIONAL,
3198 OUT PIO_STATUS_BLOCK IoStatusBlock,
3199 IN PVOID Buffer,
3200 IN ULONG Length,
3201 IN PLARGE_INTEGER ByteOffset ,
3202 IN PULONG Key OPTIONAL
3203 );
3204
3205 NTSTATUS
3206 STDCALL
3207 NtWriteFileGather(
3208 IN HANDLE FileHandle,
3209 IN HANDLE Event OPTIONAL,
3210 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3211 IN PVOID ApcContext OPTIONAL,
3212 OUT PIO_STATUS_BLOCK IoStatusBlock,
3213 IN FILE_SEGMENT_ELEMENT BufferDescription[],
3214 IN ULONG BufferLength,
3215 IN PLARGE_INTEGER ByteOffset,
3216 IN PULONG Key OPTIONAL
3217 );
3218
3219 NTSTATUS
3220 STDCALL
3221 ZwWriteFileGather(
3222 IN HANDLE FileHandle,
3223 IN HANDLE Event OPTIONAL,
3224 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
3225 IN PVOID ApcContext OPTIONAL,
3226 OUT PIO_STATUS_BLOCK IoStatusBlock,
3227 IN FILE_SEGMENT_ELEMENT BufferDescription[],
3228 IN ULONG BufferLength,
3229 IN PLARGE_INTEGER ByteOffset,
3230 IN PULONG Key OPTIONAL
3231 );
3232
3233 NTSTATUS
3234 STDCALL
3235 NtSuspendThread(
3236 IN HANDLE ThreadHandle,
3237 IN PULONG PreviousSuspendCount
3238 );
3239
3240 NTSTATUS
3241 STDCALL
3242 ZwSuspendThread(
3243 IN HANDLE ThreadHandle,
3244 IN PULONG PreviousSuspendCount
3245 );
3246
3247 NTSTATUS
3248 STDCALL
3249 NtTerminateThread(
3250 IN HANDLE ThreadHandle ,
3251 IN NTSTATUS ExitStatus
3252 );
3253 NTSTATUS
3254 STDCALL
3255 ZwTerminateThread(
3256 IN HANDLE ThreadHandle ,
3257 IN NTSTATUS ExitStatus
3258 );
3259
3260 NTSTATUS
3261 STDCALL
3262 NtTestAlert(
3263 VOID
3264 );
3265 NTSTATUS
3266 STDCALL
3267 ZwTestAlert(
3268 VOID
3269 );
3270
3271 NTSTATUS
3272 STDCALL
3273 NtYieldExecution(
3274 VOID
3275 );
3276
3277 NTSTATUS
3278 STDCALL
3279 ZwYieldExecution(
3280 VOID
3281 );
3282
3283 NTSTATUS
3284 STDCALL
3285 NtPlugPlayControl(
3286 DWORD Unknown1,
3287 DWORD Unknown2,
3288 DWORD Unknown3
3289 );
3290
3291 NTSTATUS
3292 STDCALL
3293 NtGetPlugPlayEvent(
3294 ULONG Reserved1,
3295 ULONG Reserved2,
3296 PVOID Buffer,
3297 ULONG BufferLength
3298 );
3299
3300 NTSTATUS
3301 STDCALL
3302 NtSetSystemPowerState(
3303 IN POWER_ACTION SystemAction,
3304 IN SYSTEM_POWER_STATE MinSystemState,
3305 IN ULONG Flags
3306 );
3307
3308 NTSTATUS
3309 STDCALL
3310 NtSystemDebugControl(
3311 DEBUG_CONTROL_CODE ControlCode,
3312 PVOID InputBuffer,
3313 ULONG InputBufferLength,
3314 PVOID OutputBuffer,
3315 ULONG OutputBufferLength,
3316 PULONG ReturnLength
3317 );
3318
3319 NTSTATUS
3320 STDCALL
3321 NtVdmControl(
3322 ULONG ControlCode,
3323 PVOID ControlData
3324 );
3325
3326 NTSTATUS
3327 STDCALL
3328 NtW32Call(
3329 IN ULONG RoutineIndex,
3330 IN PVOID Argument,
3331 IN ULONG ArgumentLength,
3332 OUT PVOID* Result OPTIONAL,
3333 OUT PULONG ResultLength OPTIONAL
3334 );
3335
3336 NTSTATUS
3337 STDCALL
3338 NtCreateChannel(
3339 VOID
3340 );
3341
3342 NTSTATUS
3343 STDCALL
3344 NtListenChannel(
3345 VOID
3346 );
3347
3348 NTSTATUS
3349 STDCALL
3350 NtOpenChannel(
3351 VOID
3352 );
3353
3354 NTSTATUS
3355 STDCALL
3356 NtReplyWaitSendChannel(
3357 VOID
3358 );
3359
3360 NTSTATUS
3361 STDCALL
3362 NtSendWaitReplyChannel(
3363 VOID
3364 );
3365
3366 NTSTATUS
3367 STDCALL
3368 NtSetContextChannel(
3369 VOID
3370 );
3371
3372 NTSTATUS
3373 STDCALL
3374 NtSetLdtEntries(
3375 ULONG Selector1,
3376 LDT_ENTRY LdtEntry1,
3377 ULONG Selector2,
3378 LDT_ENTRY LdtEntry2
3379 );
3380
3381 NTSTATUS
3382 STDCALL
3383 NtQueryOleDirectoryFile(
3384 VOID
3385 );
3386
3387 NTSTATUS
3388 STDCALL
3389 NtAccessCheck(
3390 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3391 IN HANDLE ClientToken,
3392 IN ACCESS_MASK DesiredAcces,
3393 IN PGENERIC_MAPPING GenericMapping,
3394 OUT PPRIVILEGE_SET PrivilegeSet,
3395 OUT PULONG ReturnLength,
3396 OUT PACCESS_MASK GrantedAccess,
3397 OUT PNTSTATUS AccessStatus
3398 );
3399
3400 NTSTATUS
3401 STDCALL
3402 ZwAccessCheck(
3403 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3404 IN HANDLE ClientToken,
3405 IN ACCESS_MASK DesiredAcces,
3406 IN PGENERIC_MAPPING GenericMapping,
3407 OUT PPRIVILEGE_SET PrivilegeSet,
3408 OUT PULONG ReturnLength,
3409 OUT PACCESS_MASK GrantedAccess,
3410 OUT PNTSTATUS AccessStatus
3411 );
3412
3413 NTSTATUS
3414 STDCALL
3415 NtAccessCheckAndAuditAlarm(
3416 IN PUNICODE_STRING SubsystemName,
3417 IN PHANDLE ObjectHandle,
3418 IN PUNICODE_STRING ObjectTypeName,
3419 IN PUNICODE_STRING ObjectName,
3420 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3421 IN ACCESS_MASK DesiredAccess,
3422 IN PGENERIC_MAPPING GenericMapping,
3423 IN BOOLEAN ObjectCreation,
3424 OUT PACCESS_MASK GrantedAccess,
3425 OUT PNTSTATUS AccessStatus,
3426 OUT PBOOLEAN GenerateOnClose
3427 );
3428
3429 NTSTATUS
3430 STDCALL
3431 NtCancelTimer(
3432 IN HANDLE TimerHandle,
3433 OUT PBOOLEAN CurrentState OPTIONAL
3434 );
3435
3436
3437 NTSTATUS
3438 STDCALL
3439 NtContinue(
3440 IN PCONTEXT Context,
3441 IN BOOLEAN TestAlert
3442 );
3443
3444 NTSTATUS
3445 STDCALL
3446 NtCreatePagingFile(
3447 IN PUNICODE_STRING FileName,
3448 IN PLARGE_INTEGER InitialSize,
3449 IN PLARGE_INTEGER MaxiumSize,
3450 IN ULONG Reserved
3451 );
3452
3453 NTSTATUS
3454 STDCALL
3455 NtCreateProfile(
3456 OUT PHANDLE ProfileHandle,
3457 IN HANDLE ProcessHandle,
3458 IN PVOID ImageBase,
3459 IN ULONG ImageSize,
3460 IN ULONG Granularity,
3461 OUT PVOID Buffer,
3462 IN ULONG ProfilingSize,
3463 IN KPROFILE_SOURCE Source,
3464 IN KAFFINITY ProcessorMask
3465 );
3466
3467 NTSTATUS
3468 STDCALL
3469 NtCreateThread(
3470 OUT PHANDLE ThreadHandle,
3471 IN ACCESS_MASK DesiredAccess,
3472 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3473 IN HANDLE ProcessHandle,
3474 OUT PCLIENT_ID ClientId,
3475 IN PCONTEXT ThreadContext,
3476 IN PINITIAL_TEB UserStack,
3477 IN BOOLEAN CreateSuspended
3478 );
3479
3480 NTSTATUS
3481 STDCALL
3482 NtDelayExecution(
3483 IN ULONG Alertable,
3484 IN LARGE_INTEGER *Interval
3485 );
3486
3487 NTSTATUS
3488 STDCALL
3489 NtExtendSection(
3490 IN HANDLE SectionHandle,
3491 IN PLARGE_INTEGER NewMaximumSize
3492 );
3493
3494 NTSTATUS
3495 STDCALL
3496 NtFlushInstructionCache(
3497 IN HANDLE ProcessHandle,
3498 IN PVOID BaseAddress,
3499 IN UINT NumberOfBytesToFlush
3500 );
3501
3502 NTSTATUS
3503 STDCALL
3504 NtFlushVirtualMemory(
3505 IN HANDLE ProcessHandle,
3506 IN PVOID BaseAddress,
3507 IN ULONG NumberOfBytesToFlush,
3508 OUT PULONG NumberOfBytesFlushed OPTIONAL
3509 );
3510
3511 ULONG
3512 STDCALL
3513 NtGetTickCount(
3514 VOID
3515 );
3516
3517 NTSTATUS
3518 STDCALL
3519 NtLoadKey(
3520 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
3521 IN POBJECT_ATTRIBUTES FileObjectAttributes
3522 );
3523
3524
3525 NTSTATUS
3526 STDCALL
3527 NtLockVirtualMemory(
3528 HANDLE ProcessHandle,
3529 PVOID BaseAddress,
3530 ULONG NumberOfBytesToLock,
3531 PULONG NumberOfBytesLocked
3532 );
3533
3534 NTSTATUS
3535 STDCALL
3536 NtOpenObjectAuditAlarm(
3537 IN PUNICODE_STRING SubsystemName,
3538 IN PVOID HandleId,
3539 IN PUNICODE_STRING ObjectTypeName,
3540 IN PUNICODE_STRING ObjectName,
3541 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3542 IN HANDLE ClientToken,
3543 IN ULONG DesiredAccess,
3544 IN ULONG GrantedAccess,
3545 IN PPRIVILEGE_SET Privileges,
3546 IN BOOLEAN ObjectCreation,
3547 IN BOOLEAN AccessGranted,
3548 OUT PBOOLEAN GenerateOnClose
3549 );
3550
3551 NTSTATUS
3552 STDCALL
3553 NtProtectVirtualMemory(
3554 IN HANDLE ProcessHandle,
3555 IN PVOID *BaseAddress,
3556 IN ULONG *NumberOfBytesToProtect,
3557 IN ULONG NewAccessProtection,
3558 OUT PULONG OldAccessProtection
3559 );
3560
3561 NTSTATUS
3562 STDCALL
3563 NtQueryDirectoryObject(
3564 IN HANDLE DirectoryHandle,
3565 OUT PVOID Buffer,
3566 IN ULONG BufferLength,
3567 IN BOOLEAN ReturnSingleEntry,
3568 IN BOOLEAN RestartScan,
3569 IN OUT PULONG Context,
3570 OUT PULONG ReturnLength OPTIONAL
3571 );
3572
3573 NTSTATUS
3574 STDCALL
3575 NtQueryIntervalProfile(
3576 IN KPROFILE_SOURCE ProfileSource,
3577 OUT PULONG Interval
3578 );
3579
3580 NTSTATUS
3581 STDCALL
3582 NtQuerySection(
3583 IN HANDLE SectionHandle,
3584 IN CINT SectionInformationClass,
3585 OUT PVOID SectionInformation,
3586 IN ULONG Length,
3587 OUT PULONG ResultLength
3588 );
3589
3590 NTSTATUS
3591 STDCALL
3592 NtQueryVirtualMemory(
3593 IN HANDLE ProcessHandle,
3594 IN PVOID Address,
3595 IN IN CINT VirtualMemoryInformationClass,
3596 OUT PVOID VirtualMemoryInformation,
3597 IN ULONG Length,
3598 OUT PULONG ResultLength
3599 );
3600
3601 NTSTATUS
3602 STDCALL
3603 NtRaiseHardError(
3604 IN NTSTATUS Status,
3605 ULONG Unknown2,
3606 ULONG Unknown3,
3607 ULONG Unknown4,
3608 ULONG Unknown5,
3609 ULONG Unknown6
3610 );
3611
3612 NTSTATUS
3613 STDCALL
3614 NtSetInformationKey(
3615 IN HANDLE KeyHandle,
3616 IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
3617 IN PVOID KeyInformation,
3618 IN ULONG KeyInformationLength
3619 );
3620
3621 NTSTATUS
3622 STDCALL
3623 NtSetInformationObject(
3624 IN HANDLE ObjectHandle,
3625 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3626 IN PVOID ObjectInformation,
3627 IN ULONG Length
3628 );
3629
3630 NTSTATUS
3631 STDCALL
3632 NtSetTimer(
3633 IN HANDLE TimerHandle,
3634 IN PLARGE_INTEGER DueTime,
3635 IN PTIMER_APC_ROUTINE TimerApcRoutine,
3636 IN PVOID TimerContext,
3637 IN BOOLEAN WakeTimer,
3638 IN LONG Period OPTIONAL,
3639 OUT PBOOLEAN PreviousState OPTIONAL
3640 );
3641
3642 NTSTATUS
3643 STDCALL
3644 NtUnloadKey(
3645 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3646 );
3647
3648 NTSTATUS
3649 STDCALL
3650 NtUnlockVirtualMemory(
3651 IN HANDLE ProcessHandle,
3652 IN PVOID BaseAddress,
3653 IN ULONG NumberOfBytesToUnlock,
3654 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3655 );
3656
3657 NTSTATUS
3658 STDCALL
3659 NtWaitForMultipleObjects(
3660 IN ULONG Count,
3661 IN HANDLE Object[],
3662 IN WAIT_TYPE WaitType,
3663 IN BOOLEAN Alertable,
3664 IN PLARGE_INTEGER Time
3665 );
3666
3667 NTSTATUS
3668 STDCALL
3669 ZwContinue(
3670 IN PCONTEXT Context,
3671 IN CINT IrqLevel
3672 );
3673
3674 NTSTATUS
3675 STDCALL
3676 ZwQuerySystemTime (
3677 OUT PLARGE_INTEGER CurrentTime
3678 );
3679
3680
3681 NTSTATUS
3682 STDCALL
3683 NtDuplicateObject(
3684 IN HANDLE SourceProcessHandle,
3685 IN HANDLE SourceHandle,
3686 IN HANDLE TargetProcessHandle,
3687 OUT PHANDLE TargetHandle,
3688 IN ACCESS_MASK DesiredAccess,
3689 IN BOOLEAN InheritHandle,
3690 IN ULONG Options
3691 );
3692
3693 NTSTATUS
3694 STDCALL
3695 ZwDuplicateObject(
3696 IN HANDLE SourceProcessHandle,
3697 IN HANDLE SourceHandle,
3698 IN HANDLE TargetProcessHandle,
3699 OUT PHANDLE TargetHandle,
3700 IN ACCESS_MASK DesiredAccess,
3701 IN BOOLEAN InheritHandle,
3702 IN ULONG Options
3703 );
3704
3705 NTSTATUS
3706 STDCALL
3707 NtAddAtom(
3708 IN PWSTR AtomName,
3709 IN ULONG AtomNameLength,
3710 IN OUT PRTL_ATOM Atom
3711 );
3712
3713 NTSTATUS
3714 STDCALL
3715 ZwAddAtom(
3716 IN PWSTR AtomName,
3717 IN ULONG AtomNameLength,
3718 IN OUT PRTL_ATOM Atom
3719 );
3720
3721 NTSTATUS
3722 STDCALL
3723 NtAllocateUuids(
3724 PULARGE_INTEGER Time,
3725 PULONG Range,
3726 PULONG Sequence,
3727 PUCHAR Seed
3728 );
3729
3730 NTSTATUS
3731 STDCALL
3732 ZwAllocateUuids(
3733 PULARGE_INTEGER Time,
3734 PULONG Range,
3735 PULONG Sequence,
3736 PUCHAR Seed
3737 );
3738
3739 NTSTATUS
3740 STDCALL
3741 ZwCreatePagingFile(
3742 IN PUNICODE_STRING FileName,
3743 IN PLARGE_INTEGER InitialSize,
3744 IN PLARGE_INTEGER MaxiumSize,
3745 IN ULONG Reserved
3746 );
3747
3748 NTSTATUS
3749 STDCALL
3750 ZwCreateThread(
3751 OUT PHANDLE ThreadHandle,
3752 IN ACCESS_MASK DesiredAccess,
3753 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3754 IN HANDLE ProcessHandle,
3755 OUT PCLIENT_ID ClientId,
3756 IN PCONTEXT ThreadContext,
3757 IN PINITIAL_TEB UserStack,
3758 IN BOOLEAN CreateSuspended
3759 );
3760
3761 NTSTATUS
3762 STDCALL
3763 NtDuplicateToken(
3764 IN HANDLE ExistingTokenHandle,
3765 IN ACCESS_MASK DesiredAccess,
3766 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
3767 IN BOOLEAN EffectiveOnly,
3768 IN TOKEN_TYPE TokenType,
3769 OUT PHANDLE NewTokenHandle
3770 );
3771
3772 NTSTATUS
3773 STDCALL
3774 NtFindAtom(
3775 IN PWSTR AtomName,
3776 IN ULONG AtomNameLength,
3777 OUT PRTL_ATOM Atom OPTIONAL
3778 );
3779
3780 NTSTATUS
3781 STDCALL
3782 ZwFindAtom(
3783 IN PWSTR AtomName,
3784 IN ULONG AtomNameLength,
3785 OUT PRTL_ATOM Atom OPTIONAL
3786 );
3787
3788 ULONG
3789 STDCALL
3790 ZwGetTickCount(
3791 VOID
3792 );
3793
3794 NTSTATUS
3795 STDCALL
3796 ZwLoadKey(
3797 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
3798 IN POBJECT_ATTRIBUTES FileObjectAttributes
3799 );
3800
3801 NTSTATUS
3802 STDCALL
3803 ZwLockVirtualMemory(
3804 HANDLE ProcessHandle,
3805 PVOID BaseAddress,
3806 ULONG NumberOfBytesToLock,
3807 PULONG NumberOfBytesLocked
3808 );
3809
3810 NTSTATUS
3811 STDCALL
3812 ZwOpenObjectAuditAlarm(
3813 IN PUNICODE_STRING SubsystemName,
3814 IN PVOID HandleId,
3815 IN PUNICODE_STRING ObjectTypeName,
3816 IN PUNICODE_STRING ObjectName,
3817 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
3818 IN HANDLE ClientToken,
3819 IN ULONG DesiredAccess,
3820 IN ULONG GrantedAccess,
3821 IN PPRIVILEGE_SET Privileges,
3822 IN BOOLEAN ObjectCreation,
3823 IN BOOLEAN AccessGranted,
3824 OUT PBOOLEAN GenerateOnClose
3825 );
3826
3827 NTSTATUS
3828 STDCALL
3829 ZwProtectVirtualMemory(
3830 IN HANDLE ProcessHandle,
3831 IN PVOID *BaseAddress,
3832 IN ULONG *NumberOfBytesToProtect,
3833 IN ULONG NewAccessProtection,
3834 OUT PULONG OldAccessProtection
3835 );
3836
3837 NTSTATUS
3838 STDCALL
3839 NtQueryInformationAtom(
3840 IN RTL_ATOM Atom,
3841 IN ATOM_INFORMATION_CLASS AtomInformationClass,
3842 OUT PVOID AtomInformation,
3843 IN ULONG AtomInformationLength,
3844 OUT PULONG ReturnLength OPTIONAL
3845 );
3846
3847 NTSTATUS
3848 STDCALL
3849 ZwQueryInformationAtom(
3850 IN RTL_ATOM Atom,
3851 IN ATOM_INFORMATION_CLASS AtomInformationClass,
3852 OUT PVOID AtomInformation,
3853 IN ULONG AtomInformationLength,
3854 OUT PULONG ReturnLength OPTIONAL
3855 );
3856
3857 NTSTATUS
3858 STDCALL
3859 ZwQueryDirectoryObject(
3860 IN HANDLE DirectoryHandle,
3861 OUT PVOID Buffer,
3862 IN ULONG BufferLength,
3863 IN BOOLEAN ReturnSingleEntry,
3864 IN BOOLEAN RestartScan,
3865 IN OUT PULONG Context,
3866 OUT PULONG ReturnLength OPTIONAL
3867 );
3868
3869 NTSTATUS
3870 STDCALL
3871 ZwQueryIntervalProfile(
3872 OUT PULONG Interval,
3873 OUT KPROFILE_SOURCE ClockSource
3874 );
3875
3876 NTSTATUS
3877 STDCALL
3878 ZwQueryObject(
3879 IN HANDLE ObjectHandle,
3880 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3881 OUT PVOID ObjectInformation,
3882 IN ULONG Length,
3883 OUT PULONG ResultLength OPTIONAL
3884 );
3885
3886 NTSTATUS
3887 STDCALL
3888 NtQuerySecurityObject(
3889 IN HANDLE Handle,
3890 IN SECURITY_INFORMATION SecurityInformation,
3891 OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
3892 IN ULONG Length,
3893 OUT PULONG ResultLength
3894 );
3895
3896 NTSTATUS
3897 STDCALL
3898 ZwQuerySecurityObject(
3899 IN HANDLE Handle,
3900 IN SECURITY_INFORMATION SecurityInformation,
3901 OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
3902 IN ULONG Length,
3903 OUT PULONG ResultLength
3904 );
3905
3906
3907 NTSTATUS
3908 STDCALL
3909 ZwQueryVirtualMemory(
3910 IN HANDLE ProcessHandle,
3911 IN PVOID Address,
3912 IN IN CINT VirtualMemoryInformationClass,
3913 OUT PVOID VirtualMemoryInformation,
3914 IN ULONG Length,
3915 OUT PULONG ResultLength
3916 );
3917
3918 NTSTATUS
3919 STDCALL
3920 ZwRaiseHardError(
3921 IN NTSTATUS Status,
3922 ULONG Unknown2,
3923 ULONG Unknown3,
3924 ULONG Unknown4,
3925 ULONG Unknown5,
3926 ULONG Unknown6
3927 );
3928
3929 NTSTATUS
3930 STDCALL
3931 ZwSetInformationKey(
3932 IN HANDLE KeyHandle,
3933 IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
3934 IN PVOID KeyInformation,
3935 IN ULONG KeyInformationLength
3936 );
3937
3938 NTSTATUS
3939 STDCALL
3940 ZwSetInformationObject(
3941 IN HANDLE ObjectHandle,
3942 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
3943 IN PVOID ObjectInformation,
3944 IN ULONG Length
3945 );
3946
3947 NTSTATUS
3948 STDCALL
3949 NtSetInformationProcess(
3950 IN HANDLE ProcessHandle,
3951 IN PROCESSINFOCLASS ProcessInformationClass,
3952 IN PVOID ProcessInformation,
3953 IN ULONG ProcessInformationLength
3954 );
3955
3956 NTSTATUS
3957 STDCALL
3958 ZwUnloadKey(
3959 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3960 );
3961
3962 NTSTATUS
3963 STDCALL
3964 ZwUnlockVirtualMemory(
3965 IN HANDLE ProcessHandle,
3966 IN PVOID BaseAddress,
3967 IN ULONG NumberOfBytesToUnlock,
3968 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3969 );
3970
3971 NTSTATUS
3972 STDCALL
3973 ZwWaitForMultipleObjects (
3974 IN ULONG Count,
3975 IN HANDLE Object[],
3976 IN WAIT_TYPE WaitType,
3977 IN BOOLEAN Alertable,
3978 IN PLARGE_INTEGER Time
3979 );
3980
3981 NTSTATUS
3982 STDCALL
3983 ZwCreateProfile(
3984 OUT PHANDLE ProfileHandle,
3985 IN POBJECT_ATTRIBUTES ObjectAttributes,
3986 IN ULONG ImageBase,
3987 IN ULONG ImageSize,
3988 IN ULONG Granularity,
3989 OUT PVOID Buffer,
3990 IN ULONG ProfilingSize,
3991 IN ULONG ClockSource,
3992 IN ULONG ProcessorMask
3993 );
3994
3995 NTSTATUS
3996 STDCALL
3997 ZwDelayExecution(
3998 IN BOOLEAN Alertable,
3999 IN LARGE_INTEGER *Interval
4000 );
4001
4002 NTSTATUS
4003 STDCALL
4004 ZwExtendSection(
4005 IN HANDLE SectionHandle,
4006 IN PLARGE_INTEGER NewMaximumSize
4007 );
4008
4009 NTSTATUS
4010 STDCALL
4011 ZwQuerySection(
4012 IN HANDLE SectionHandle,
4013 IN CINT SectionInformationClass,
4014 OUT PVOID SectionInformation,
4015 IN ULONG Length,
4016 OUT PULONG ResultLength
4017 );
4018
4019 NTSTATUS
4020 STDCALL
4021 NtLoadKey2(
4022 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
4023 IN POBJECT_ATTRIBUTES FileObjectAttributes,
4024 IN ULONG Flags
4025 );
4026
4027 NTSTATUS
4028 STDCALL
4029 ZwLoadKey2(
4030 IN POBJECT_ATTRIBUTES KeyObjectAttributes,
4031 IN POBJECT_ATTRIBUTES FileObjectAttributes,
4032 IN ULONG Flags
4033 );
4034
4035 NTSTATUS
4036 STDCALL
4037 NtQuerySystemTime (
4038 OUT PLARGE_INTEGER CurrentTime
4039 );
4040
4041 NTSTATUS
4042 STDCALL
4043 NtQueryObject(
4044 IN HANDLE ObjectHandle,
4045 IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
4046 OUT PVOID ObjectInformation,
4047 IN ULONG Length,
4048 OUT PULONG ResultLength OPTIONAL
4049 );
4050
4051 static inline struct _PEB * NtCurrentPeb(void)
4052 {
4053 struct _PEB * pPeb;
4054
4055 #if defined(__GNUC__)
4056
4057 __asm__ __volatile__
4058 (
4059 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4060 : "=r" (pPeb) /* can't have two memory operands */
4061 : /* no inputs */
4062 );
4063
4064 #elif defined(_MSC_VER)
4065
4066 __asm mov eax, fs:0x30;
4067 __asm mov pPeb, eax
4068
4069 #else
4070 #error Unknown compiler for inline assembler
4071 #endif
4072
4073 return pPeb;
4074 }
4075 #endif