2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
16 /* FUNCTION TYPES ************************************************************/
18 /* PROTOTYPES ****************************************************************/
20 /* FIXME: FILE NEEDS CLEANUP */
25 HANDLE NamedPortHandle
,
26 PLPC_MESSAGE ServerReply
,
28 PLPC_SECTION_WRITE WriteMap
,
29 PLPC_SECTION_READ ReadMap
35 IN PUNICODE_STRING EntryName
,
36 IN PUNICODE_STRING EntryValue
42 IN PUNICODE_STRING EntryName
,
43 IN PUNICODE_STRING EntryValue
49 IN HANDLE TokenHandle
,
50 IN BOOLEAN ResetToDefault
,
51 IN PTOKEN_GROUPS NewState
,
52 IN ULONG BufferLength
,
53 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
54 OUT PULONG ReturnLength
60 IN HANDLE TokenHandle
,
61 IN BOOLEAN ResetToDefault
,
62 IN PTOKEN_GROUPS NewState
,
63 IN ULONG BufferLength
,
64 OUT PTOKEN_GROUPS PreviousState
,
65 OUT PULONG ReturnLength
70 NtAdjustPrivilegesToken(
71 IN HANDLE TokenHandle
,
72 IN BOOLEAN DisableAllPrivileges
,
73 IN PTOKEN_PRIVILEGES NewState
,
74 IN ULONG BufferLength
,
75 OUT PTOKEN_PRIVILEGES PreviousState
,
76 OUT PULONG ReturnLength
81 ZwAdjustPrivilegesToken(
82 IN HANDLE TokenHandle
,
83 IN BOOLEAN DisableAllPrivileges
,
84 IN PTOKEN_PRIVILEGES NewState
,
85 IN ULONG BufferLength
,
86 OUT PTOKEN_PRIVILEGES PreviousState
,
87 OUT PULONG ReturnLength
93 IN HANDLE ThreadHandle
,
94 OUT PULONG SuspendCount
100 IN HANDLE ThreadHandle
,
101 OUT PULONG SuspendCount
107 IN HANDLE ThreadHandle
113 IN HANDLE ThreadHandle
118 NtAllocateLocallyUniqueId(
119 OUT LUID
*LocallyUniqueId
124 ZwAllocateLocallyUniqueId(
130 NtAllocateVirtualMemory (
131 IN HANDLE ProcessHandle
,
132 IN OUT PVOID
*BaseAddress
,
134 IN OUT PULONG RegionSize
,
135 IN ULONG AllocationType
,
141 ZwAllocateVirtualMemory (
142 IN HANDLE ProcessHandle
,
143 IN OUT PVOID
*BaseAddress
,
145 IN OUT PULONG RegionSize
,
146 IN ULONG AllocationType
,
152 NtAssignProcessToJobObject(
154 HANDLE ProcessHandle
)
159 ZwAssignProcessToJobObject(
183 IN HANDLE FileHandle
,
184 OUT PIO_STATUS_BLOCK IoStatusBlock
190 IN HANDLE FileHandle
,
191 OUT PIO_STATUS_BLOCK IoStatusBlock
197 IN HANDLE EventHandle
203 IN HANDLE EventHandle
210 ACCESS_MASK DesiredAccess
,
211 POBJECT_ATTRIBUTES ObjectAttributes
218 ACCESS_MASK DesiredAccess
,
219 POBJECT_ATTRIBUTES ObjectAttributes
236 NtCloseObjectAuditAlarm(
237 IN PUNICODE_STRING SubsystemName
,
239 IN BOOLEAN GenerateOnClose
244 ZwCloseObjectAuditAlarm(
245 IN PUNICODE_STRING SubsystemName
,
247 IN BOOLEAN GenerateOnClose
252 NtCompleteConnectPort(
258 ZwCompleteConnectPort(
266 PUNICODE_STRING PortName
,
267 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
268 PLPC_SECTION_WRITE SectionInfo
,
269 PLPC_SECTION_READ MapInfo
,
270 PULONG MaxMessageSize
,
272 PULONG ConnectInfoLength
279 PUNICODE_STRING PortName
,
280 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
281 PLPC_SECTION_WRITE SectionInfo
,
282 PLPC_SECTION_READ MapInfo
,
283 PULONG MaxMessageSize
,
285 PULONG ConnectInfoLength
290 NtCreateDirectoryObject(
291 OUT PHANDLE DirectoryHandle
,
292 IN ACCESS_MASK DesiredAccess
,
293 IN POBJECT_ATTRIBUTES ObjectAttributes
298 ZwCreateDirectoryObject(
299 OUT PHANDLE DirectoryHandle
,
300 IN ACCESS_MASK DesiredAccess
,
301 IN POBJECT_ATTRIBUTES ObjectAttributes
307 OUT PHANDLE EventHandle
,
308 IN ACCESS_MASK DesiredAccess
,
309 IN POBJECT_ATTRIBUTES ObjectAttributes
,
310 IN EVENT_TYPE EventType
,
311 IN BOOLEAN InitialState
317 OUT PHANDLE EventHandle
,
318 IN ACCESS_MASK DesiredAccess
,
319 IN POBJECT_ATTRIBUTES ObjectAttributes
,
320 IN EVENT_TYPE EventType
,
321 IN BOOLEAN InitialState
327 OUT PHANDLE EventPairHandle
,
328 IN ACCESS_MASK DesiredAccess
,
329 IN POBJECT_ATTRIBUTES ObjectAttributes
335 OUT PHANDLE EventPairHandle
,
336 IN ACCESS_MASK DesiredAccess
,
337 IN POBJECT_ATTRIBUTES ObjectAttributes
343 OUT PHANDLE FileHandle
,
344 IN ACCESS_MASK DesiredAccess
,
345 IN POBJECT_ATTRIBUTES ObjectAttributes
,
346 OUT PIO_STATUS_BLOCK IoStatusBlock
,
347 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
348 IN ULONG FileAttributes
,
349 IN ULONG ShareAccess
,
350 IN ULONG CreateDisposition
,
351 IN ULONG CreateOptions
,
352 IN PVOID EaBuffer OPTIONAL
,
359 OUT PHANDLE FileHandle
,
360 IN ACCESS_MASK DesiredAccess
,
361 IN POBJECT_ATTRIBUTES ObjectAttributes
,
362 OUT PIO_STATUS_BLOCK IoStatusBlock
,
363 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
364 IN ULONG FileAttributes
,
365 IN ULONG ShareAccess
,
366 IN ULONG CreateDisposition
,
367 IN ULONG CreateOptions
,
368 IN PVOID EaBuffer OPTIONAL
,
374 NtCreateIoCompletion(
375 OUT PHANDLE IoCompletionHandle
,
376 IN ACCESS_MASK DesiredAccess
,
377 IN POBJECT_ATTRIBUTES ObjectAttributes
,
378 IN ULONG NumberOfConcurrentThreads
383 ZwCreateIoCompletion(
384 OUT PHANDLE IoCompletionHandle
,
385 IN ACCESS_MASK DesiredAccess
,
386 IN POBJECT_ATTRIBUTES ObjectAttributes
,
387 IN ULONG NumberOfConcurrentThreads
393 OUT PHANDLE KeyHandle
,
394 IN ACCESS_MASK DesiredAccess
,
395 IN POBJECT_ATTRIBUTES ObjectAttributes
,
397 IN PUNICODE_STRING Class OPTIONAL
,
398 IN ULONG CreateOptions
,
399 IN PULONG Disposition OPTIONAL
405 OUT PHANDLE KeyHandle
,
406 IN ACCESS_MASK DesiredAccess
,
407 IN POBJECT_ATTRIBUTES ObjectAttributes
,
409 IN PUNICODE_STRING Class OPTIONAL
,
410 IN ULONG CreateOptions
,
411 IN PULONG Disposition OPTIONAL
416 NtCreateMailslotFile(
417 OUT PHANDLE MailSlotFileHandle
,
418 IN ACCESS_MASK DesiredAccess
,
419 IN POBJECT_ATTRIBUTES ObjectAttributes
,
420 OUT PIO_STATUS_BLOCK IoStatusBlock
,
421 IN ULONG FileAttributes
,
422 IN ULONG ShareAccess
,
423 IN ULONG MaxMessageSize
,
424 IN PLARGE_INTEGER TimeOut
429 ZwCreateMailslotFile(
430 OUT PHANDLE MailSlotFileHandle
,
431 IN ACCESS_MASK DesiredAccess
,
432 IN POBJECT_ATTRIBUTES ObjectAttributes
,
433 OUT PIO_STATUS_BLOCK IoStatusBlock
,
434 IN ULONG FileAttributes
,
435 IN ULONG ShareAccess
,
436 IN ULONG MaxMessageSize
,
437 IN PLARGE_INTEGER TimeOut
443 OUT PHANDLE MutantHandle
,
444 IN ACCESS_MASK DesiredAccess
,
445 IN POBJECT_ATTRIBUTES ObjectAttributes
,
446 IN BOOLEAN InitialOwner
452 OUT PHANDLE MutantHandle
,
453 IN ACCESS_MASK DesiredAccess
,
454 IN POBJECT_ATTRIBUTES ObjectAttributes
,
455 IN BOOLEAN InitialOwner
460 NtCreateNamedPipeFile(
461 OUT PHANDLE NamedPipeFileHandle
,
462 IN ACCESS_MASK DesiredAccess
,
463 IN POBJECT_ATTRIBUTES ObjectAttributes
,
464 OUT PIO_STATUS_BLOCK IoStatusBlock
,
465 IN ULONG ShareAccess
,
466 IN ULONG CreateDisposition
,
467 IN ULONG CreateOptions
,
468 IN ULONG WriteModeMessage
,
469 IN ULONG ReadModeMessage
,
470 IN ULONG NonBlocking
,
471 IN ULONG MaxInstances
,
472 IN ULONG InBufferSize
,
473 IN ULONG OutBufferSize
,
474 IN PLARGE_INTEGER DefaultTimeOut
479 ZwCreateNamedPipeFile(
480 OUT PHANDLE NamedPipeFileHandle
,
481 IN ACCESS_MASK DesiredAccess
,
482 IN POBJECT_ATTRIBUTES ObjectAttributes
,
483 OUT PIO_STATUS_BLOCK IoStatusBlock
,
484 IN ULONG ShareAccess
,
485 IN ULONG CreateDisposition
,
486 IN ULONG CreateOptions
,
487 IN ULONG WriteModeMessage
,
488 IN ULONG ReadModeMessage
,
489 IN ULONG NonBlocking
,
490 IN ULONG MaxInstances
,
491 IN ULONG InBufferSize
,
492 IN ULONG OutBufferSize
,
493 IN PLARGE_INTEGER DefaultTimeOut
500 POBJECT_ATTRIBUTES ObjectAttributes
,
501 ULONG MaxConnectInfoLength
,
503 ULONG NPMessageQueueSize OPTIONAL
510 POBJECT_ATTRIBUTES ObjectAttributes
,
511 ULONG MaxConnectInfoLength
,
513 ULONG NPMessageQueueSize OPTIONAL
519 OUT PHANDLE ProcessHandle
,
520 IN ACCESS_MASK DesiredAccess
,
521 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
522 IN HANDLE ParentProcess
,
523 IN BOOLEAN InheritObjectTable
,
524 IN HANDLE SectionHandle OPTIONAL
,
525 IN HANDLE DebugPort OPTIONAL
,
526 IN HANDLE ExceptionPort OPTIONAL
532 OUT PHANDLE ProcessHandle
,
533 IN ACCESS_MASK DesiredAccess
,
534 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
535 IN HANDLE ParentProcess
,
536 IN BOOLEAN InheritObjectTable
,
537 IN HANDLE SectionHandle OPTIONAL
,
538 IN HANDLE DebugPort OPTIONAL
,
539 IN HANDLE ExceptionPort OPTIONAL
545 OUT PHANDLE SectionHandle
,
546 IN ACCESS_MASK DesiredAccess
,
547 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
548 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
549 IN ULONG SectionPageProtection OPTIONAL
,
550 IN ULONG AllocationAttributes
,
551 IN HANDLE FileHandle OPTIONAL
557 OUT PHANDLE SectionHandle
,
558 IN ACCESS_MASK DesiredAccess
,
559 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
560 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
561 IN ULONG SectionPageProtection OPTIONAL
,
562 IN ULONG AllocationAttributes
,
563 IN HANDLE FileHandle OPTIONAL
569 OUT PHANDLE SemaphoreHandle
,
570 IN ACCESS_MASK DesiredAccess
,
571 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
572 IN LONG InitialCount
,
579 OUT PHANDLE SemaphoreHandle
,
580 IN ACCESS_MASK DesiredAccess
,
581 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
582 IN LONG InitialCount
,
588 NtCreateSymbolicLinkObject(
589 OUT PHANDLE SymbolicLinkHandle
,
590 IN ACCESS_MASK DesiredAccess
,
591 IN POBJECT_ATTRIBUTES ObjectAttributes
,
592 IN PUNICODE_STRING Name
597 ZwCreateSymbolicLinkObject(
598 OUT PHANDLE SymbolicLinkHandle
,
599 IN ACCESS_MASK DesiredAccess
,
600 IN POBJECT_ATTRIBUTES ObjectAttributes
,
601 IN PUNICODE_STRING Name
607 OUT PHANDLE TimerHandle
,
608 IN ACCESS_MASK DesiredAccess
,
609 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
610 IN TIMER_TYPE TimerType
616 OUT PHANDLE TimerHandle
,
617 IN ACCESS_MASK DesiredAccess
,
618 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
619 IN TIMER_TYPE TimerType
625 OUT PHANDLE TokenHandle
,
626 IN ACCESS_MASK DesiredAccess
,
627 IN POBJECT_ATTRIBUTES ObjectAttributes
,
628 IN TOKEN_TYPE TokenType
,
629 IN PLUID AuthenticationId
,
630 IN PLARGE_INTEGER ExpirationTime
,
631 IN PTOKEN_USER TokenUser
,
632 IN PTOKEN_GROUPS TokenGroups
,
633 IN PTOKEN_PRIVILEGES TokenPrivileges
,
634 IN PTOKEN_OWNER TokenOwner
,
635 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
636 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
637 IN PTOKEN_SOURCE TokenSource
643 OUT PHANDLE TokenHandle
,
644 IN ACCESS_MASK DesiredAccess
,
645 IN POBJECT_ATTRIBUTES ObjectAttributes
,
646 IN TOKEN_TYPE TokenType
,
647 IN PLUID AuthenticationId
,
648 IN PLARGE_INTEGER ExpirationTime
,
649 IN PTOKEN_USER TokenUser
,
650 IN PTOKEN_GROUPS TokenGroups
,
651 IN PTOKEN_PRIVILEGES TokenPrivileges
,
652 IN PTOKEN_OWNER TokenOwner
,
653 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
654 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
655 IN PTOKEN_SOURCE TokenSource
660 NtCreateWaitablePort(
662 POBJECT_ATTRIBUTES ObjectAttributes
,
663 ULONG MaxConnectInfoLength
,
665 ULONG NPMessageQueueSize OPTIONAL
670 ZwCreateWaitablePort(
672 POBJECT_ATTRIBUTES ObjectAttributes
,
673 ULONG MaxConnectInfoLength
,
675 ULONG NPMessageQueueSize OPTIONAL
693 IN PUNICODE_STRING EntryName
,
694 IN PUNICODE_STRING EntryValue
700 IN PUNICODE_STRING EntryName
,
701 IN PUNICODE_STRING EntryValue
707 IN POBJECT_ATTRIBUTES ObjectAttributes
713 IN POBJECT_ATTRIBUTES ObjectAttributes
730 NtDeleteObjectAuditAlarm(
731 IN PUNICODE_STRING SubsystemName
,
733 IN BOOLEAN GenerateOnClose
738 ZwDeleteObjectAuditAlarm(
739 IN PUNICODE_STRING SubsystemName
,
741 IN BOOLEAN GenerateOnClose
748 IN PUNICODE_STRING ValueName
755 IN PUNICODE_STRING ValueName
760 NtDeviceIoControlFile(
761 IN HANDLE DeviceHandle
,
762 IN HANDLE Event OPTIONAL
,
763 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
764 IN PVOID UserApcContext OPTIONAL
,
765 OUT PIO_STATUS_BLOCK IoStatusBlock
,
766 IN ULONG IoControlCode
,
767 IN PVOID InputBuffer
,
768 IN ULONG InputBufferSize
,
769 OUT PVOID OutputBuffer
,
770 IN ULONG OutputBufferSize
775 ZwDeviceIoControlFile(
776 IN HANDLE DeviceHandle
,
777 IN HANDLE Event OPTIONAL
,
778 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
779 IN PVOID UserApcContext OPTIONAL
,
780 OUT PIO_STATUS_BLOCK IoStatusBlock
,
781 IN ULONG IoControlCode
,
782 IN PVOID InputBuffer
,
783 IN ULONG InputBufferSize
,
784 OUT PVOID OutputBuffer
,
785 IN ULONG OutputBufferSize
791 IN PUNICODE_STRING DisplayString
797 IN PUNICODE_STRING DisplayString
802 NtEnumerateBootEntries(
809 ZwEnumerateBootEntries(
819 IN KEY_INFORMATION_CLASS KeyInformationClass
,
820 OUT PVOID KeyInformation
,
822 OUT PULONG ResultLength
830 IN KEY_INFORMATION_CLASS KeyInformationClass
,
831 OUT PVOID KeyInformation
,
833 OUT PULONG ResultLength
840 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
841 OUT PVOID KeyValueInformation
,
843 OUT PULONG ResultLength
851 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
852 OUT PVOID KeyValueInformation
,
854 OUT PULONG ResultLength
860 IN HANDLE FileHandle
,
861 OUT PIO_STATUS_BLOCK IoStatusBlock
867 IN HANDLE FileHandle
,
868 OUT PIO_STATUS_BLOCK IoStatusBlock
885 NtFlushWriteBuffer(VOID
);
889 ZwFlushWriteBuffer(VOID
);
894 IN HANDLE ProcessHandle
,
895 IN PVOID
*BaseAddress
,
896 IN PULONG RegionSize
,
903 IN HANDLE ProcessHandle
,
904 IN PVOID
*BaseAddress
,
905 IN PULONG RegionSize
,
912 IN HANDLE DeviceHandle
,
913 IN HANDLE Event OPTIONAL
,
914 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
915 IN PVOID ApcContext OPTIONAL
,
916 OUT PIO_STATUS_BLOCK IoStatusBlock
,
917 IN ULONG IoControlCode
,
918 IN PVOID InputBuffer
,
919 IN ULONG InputBufferSize
,
920 OUT PVOID OutputBuffer
,
921 IN ULONG OutputBufferSize
927 IN HANDLE DeviceHandle
,
928 IN HANDLE Event OPTIONAL
,
929 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
930 IN PVOID ApcContext OPTIONAL
,
931 OUT PIO_STATUS_BLOCK IoStatusBlock
,
932 IN ULONG IoControlCode
,
933 IN PVOID InputBuffer
,
934 IN ULONG InputBufferSize
,
935 OUT PVOID OutputBuffer
,
936 IN ULONG OutputBufferSize
942 IN HANDLE ThreadHandle
,
949 IN HANDLE ThreadHandle
,
955 NtImpersonateClientOfPort(
957 PLPC_MESSAGE ClientMessage
962 ZwImpersonateClientOfPort(
964 PLPC_MESSAGE ClientMessage
970 IN HANDLE ThreadHandle
,
971 IN HANDLE ThreadToImpersonate
,
972 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
978 IN HANDLE ThreadHandle
,
979 IN HANDLE ThreadToImpersonate
,
980 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
985 NtInitiatePowerAction(
986 POWER_ACTION SystemAction
,
987 SYSTEM_POWER_STATE MinSystemState
,
994 ZwInitiatePowerAction(
995 POWER_ACTION SystemAction
,
996 SYSTEM_POWER_STATE MinSystemState
,
1003 NtInitializeRegistry(
1009 ZwInitializeRegistry(
1016 IN HANDLE ProcessHandle
,
1017 IN HANDLE JobHandle OPTIONAL
1023 IN HANDLE ProcessHandle
,
1024 IN HANDLE JobHandle OPTIONAL
1029 NtListenPort(HANDLE PortHandle
,
1030 PLPC_MESSAGE LpcMessage
1035 ZwListenPort(HANDLE PortHandle
,
1036 PLPC_MESSAGE LpcMessage
1041 IN PUNICODE_STRING DriverServiceName
1047 IN PUNICODE_STRING DriverServiceName
1053 IN HANDLE FileHandle
,
1054 IN HANDLE Event OPTIONAL
,
1055 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1056 IN PVOID ApcContext OPTIONAL
,
1057 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1058 IN PLARGE_INTEGER ByteOffset
,
1059 IN PLARGE_INTEGER Length
,
1061 IN BOOLEAN FailImmediatedly
,
1062 IN BOOLEAN ExclusiveLock
1068 IN HANDLE FileHandle
,
1069 IN HANDLE Event OPTIONAL
,
1070 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1071 IN PVOID ApcContext OPTIONAL
,
1072 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1073 IN PLARGE_INTEGER ByteOffset
,
1074 IN PLARGE_INTEGER Length
,
1076 IN BOOLEAN FailImmediatedly
,
1077 IN BOOLEAN ExclusiveLock
1082 NtMakePermanentObject(
1088 ZwMakePermanentObject(
1094 NtMakeTemporaryObject(
1100 ZwMakeTemporaryObject(
1107 IN HANDLE SectionHandle
,
1108 IN HANDLE ProcessHandle
,
1109 IN OUT PVOID
*BaseAddress
,
1111 IN ULONG CommitSize
,
1112 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1113 IN OUT PULONG ViewSize
,
1114 IN SECTION_INHERIT InheritDisposition
,
1115 IN ULONG AllocationType
,
1116 IN ULONG AccessProtection
1122 IN HANDLE SectionHandle
,
1123 IN HANDLE ProcessHandle
,
1124 IN OUT PVOID
*BaseAddress
,
1126 IN ULONG CommitSize
,
1127 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1128 IN OUT PULONG ViewSize
,
1129 IN SECTION_INHERIT InheritDisposition
,
1130 IN ULONG AllocationType
,
1131 IN ULONG AccessProtection
1136 NtNotifyChangeDirectoryFile(
1137 IN HANDLE FileHandle
,
1138 IN HANDLE Event OPTIONAL
,
1139 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1140 IN PVOID ApcContext OPTIONAL
,
1141 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1143 IN ULONG BufferSize
,
1144 IN ULONG CompletionFilter
,
1145 IN BOOLEAN WatchTree
1150 ZwNotifyChangeDirectoryFile(
1151 IN HANDLE FileHandle
,
1152 IN HANDLE Event OPTIONAL
,
1153 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1154 IN PVOID ApcContext OPTIONAL
,
1155 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1157 IN ULONG BufferSize
,
1158 IN ULONG CompletionFilter
,
1159 IN BOOLEAN WatchTree
1165 IN HANDLE KeyHandle
,
1167 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1168 IN PVOID ApcContext OPTIONAL
,
1169 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1170 IN ULONG CompletionFilter
,
1171 IN BOOLEAN Asynchroneous
,
1172 OUT PVOID ChangeBuffer
,
1174 IN BOOLEAN WatchSubtree
1180 IN HANDLE KeyHandle
,
1182 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1183 IN PVOID ApcContext OPTIONAL
,
1184 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1185 IN ULONG CompletionFilter
,
1186 IN BOOLEAN Asynchroneous
,
1187 OUT PVOID ChangeBuffer
,
1189 IN BOOLEAN WatchSubtree
1194 NtOpenDirectoryObject(
1195 OUT PHANDLE FileHandle
,
1196 IN ACCESS_MASK DesiredAccess
,
1197 IN POBJECT_ATTRIBUTES ObjectAttributes
1202 ZwOpenDirectoryObject(
1203 OUT PHANDLE FileHandle
,
1204 IN ACCESS_MASK DesiredAccess
,
1205 IN POBJECT_ATTRIBUTES ObjectAttributes
1211 OUT PHANDLE EventHandle
,
1212 IN ACCESS_MASK DesiredAccess
,
1213 IN POBJECT_ATTRIBUTES ObjectAttributes
1219 OUT PHANDLE EventHandle
,
1220 IN ACCESS_MASK DesiredAccess
,
1221 IN POBJECT_ATTRIBUTES ObjectAttributes
1227 OUT PHANDLE EventPairHandle
,
1228 IN ACCESS_MASK DesiredAccess
,
1229 IN POBJECT_ATTRIBUTES ObjectAttributes
1235 OUT PHANDLE EventPairHandle
,
1236 IN ACCESS_MASK DesiredAccess
,
1237 IN POBJECT_ATTRIBUTES ObjectAttributes
1243 OUT PHANDLE FileHandle
,
1244 IN ACCESS_MASK DesiredAccess
,
1245 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1246 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1247 IN ULONG ShareAccess
,
1248 IN ULONG OpenOptions
1254 OUT PHANDLE FileHandle
,
1255 IN ACCESS_MASK DesiredAccess
,
1256 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1257 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1258 IN ULONG ShareAccess
,
1259 IN ULONG OpenOptions
1265 OUT PHANDLE CompetionPort
,
1266 IN ACCESS_MASK DesiredAccess
,
1267 IN POBJECT_ATTRIBUTES ObjectAttributes
1273 OUT PHANDLE CompetionPort
,
1274 IN ACCESS_MASK DesiredAccess
,
1275 IN POBJECT_ATTRIBUTES ObjectAttributes
1282 ACCESS_MASK DesiredAccess
,
1283 POBJECT_ATTRIBUTES ObjectAttributes
1290 ACCESS_MASK DesiredAccess
,
1291 POBJECT_ATTRIBUTES ObjectAttributes
1297 OUT PHANDLE KeyHandle
,
1298 IN ACCESS_MASK DesiredAccess
,
1299 IN POBJECT_ATTRIBUTES ObjectAttributes
1305 OUT PHANDLE KeyHandle
,
1306 IN ACCESS_MASK DesiredAccess
,
1307 IN POBJECT_ATTRIBUTES ObjectAttributes
1313 OUT PHANDLE MutantHandle
,
1314 IN ACCESS_MASK DesiredAccess
,
1315 IN POBJECT_ATTRIBUTES ObjectAttributes
1321 OUT PHANDLE MutantHandle
,
1322 IN ACCESS_MASK DesiredAccess
,
1323 IN POBJECT_ATTRIBUTES ObjectAttributes
1329 OUT PHANDLE ProcessHandle
,
1330 IN ACCESS_MASK DesiredAccess
,
1331 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1332 IN PCLIENT_ID ClientId
1338 OUT PHANDLE ProcessHandle
,
1339 IN ACCESS_MASK DesiredAccess
,
1340 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1341 IN PCLIENT_ID ClientId
1347 IN HANDLE ProcessHandle
,
1348 IN ACCESS_MASK DesiredAccess
,
1349 OUT PHANDLE TokenHandle
1355 IN HANDLE ProcessHandle
,
1356 IN ACCESS_MASK DesiredAccess
,
1357 OUT PHANDLE TokenHandle
1362 NtOpenProcessTokenEx(
1363 IN HANDLE ProcessHandle
,
1364 IN ACCESS_MASK DesiredAccess
,
1365 IN ULONG HandleAttributes
,
1366 OUT PHANDLE TokenHandle
1371 ZwOpenProcessTokenEx(
1372 IN HANDLE ProcessHandle
,
1373 IN ACCESS_MASK DesiredAccess
,
1374 IN ULONG HandleAttributes
,
1375 OUT PHANDLE TokenHandle
1381 OUT PHANDLE SectionHandle
,
1382 IN ACCESS_MASK DesiredAccess
,
1383 IN POBJECT_ATTRIBUTES ObjectAttributes
1389 OUT PHANDLE SectionHandle
,
1390 IN ACCESS_MASK DesiredAccess
,
1391 IN POBJECT_ATTRIBUTES ObjectAttributes
1397 IN HANDLE SemaphoreHandle
,
1398 IN ACCESS_MASK DesiredAcces
,
1399 IN POBJECT_ATTRIBUTES ObjectAttributes
1405 IN HANDLE SemaphoreHandle
,
1406 IN ACCESS_MASK DesiredAcces
,
1407 IN POBJECT_ATTRIBUTES ObjectAttributes
1412 NtOpenSymbolicLinkObject(
1413 OUT PHANDLE SymbolicLinkHandle
,
1414 IN ACCESS_MASK DesiredAccess
,
1415 IN POBJECT_ATTRIBUTES ObjectAttributes
1420 ZwOpenSymbolicLinkObject(
1421 OUT PHANDLE SymbolicLinkHandle
,
1422 IN ACCESS_MASK DesiredAccess
,
1423 IN POBJECT_ATTRIBUTES ObjectAttributes
1429 OUT PHANDLE ThreadHandle
,
1430 IN ACCESS_MASK DesiredAccess
,
1431 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1432 IN PCLIENT_ID ClientId
1438 OUT PHANDLE ThreadHandle
,
1439 IN ACCESS_MASK DesiredAccess
,
1440 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1441 IN PCLIENT_ID ClientId
1447 IN HANDLE ThreadHandle
,
1448 IN ACCESS_MASK DesiredAccess
,
1449 IN BOOLEAN OpenAsSelf
,
1450 OUT PHANDLE TokenHandle
1456 IN HANDLE ThreadHandle
,
1457 IN ACCESS_MASK DesiredAccess
,
1458 IN BOOLEAN OpenAsSelf
,
1459 OUT PHANDLE TokenHandle
1464 NtOpenThreadTokenEx(
1465 IN HANDLE ThreadHandle
,
1466 IN ACCESS_MASK DesiredAccess
,
1467 IN BOOLEAN OpenAsSelf
,
1468 IN ULONG HandleAttributes
,
1469 OUT PHANDLE TokenHandle
1474 ZwOpenThreadTokenEx(
1475 IN HANDLE ThreadHandle
,
1476 IN ACCESS_MASK DesiredAccess
,
1477 IN BOOLEAN OpenAsSelf
,
1478 IN ULONG HandleAttributes
,
1479 OUT PHANDLE TokenHandle
1485 OUT PHANDLE TimerHandle
,
1486 IN ACCESS_MASK DesiredAccess
,
1487 IN POBJECT_ATTRIBUTES ObjectAttributes
1492 OUT PHANDLE TimerHandle
,
1493 IN ACCESS_MASK DesiredAccess
,
1494 IN POBJECT_ATTRIBUTES ObjectAttributes
1500 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1502 ULONG InputBufferLength
,
1504 ULONG OutputBufferLength
1510 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1512 ULONG InputBufferLength
,
1514 ULONG OutputBufferLength
1520 IN HANDLE ClientToken
,
1521 IN PPRIVILEGE_SET RequiredPrivileges
,
1528 IN HANDLE ClientToken
,
1529 IN PPRIVILEGE_SET RequiredPrivileges
,
1535 NtPrivilegedServiceAuditAlarm(
1536 IN PUNICODE_STRING SubsystemName
,
1537 IN PUNICODE_STRING ServiceName
,
1538 IN HANDLE ClientToken
,
1539 IN PPRIVILEGE_SET Privileges
,
1540 IN BOOLEAN AccessGranted
1545 ZwPrivilegedServiceAuditAlarm(
1546 IN PUNICODE_STRING SubsystemName
,
1547 IN PUNICODE_STRING ServiceName
,
1548 IN HANDLE ClientToken
,
1549 IN PPRIVILEGE_SET Privileges
,
1550 IN BOOLEAN AccessGranted
1555 NtPrivilegeObjectAuditAlarm(
1556 IN PUNICODE_STRING SubsystemName
,
1558 IN HANDLE ClientToken
,
1559 IN ULONG DesiredAccess
,
1560 IN PPRIVILEGE_SET Privileges
,
1561 IN BOOLEAN AccessGranted
1566 ZwPrivilegeObjectAuditAlarm(
1567 IN PUNICODE_STRING SubsystemName
,
1569 IN HANDLE ClientToken
,
1570 IN ULONG DesiredAccess
,
1571 IN PPRIVILEGE_SET Privileges
,
1572 IN BOOLEAN AccessGranted
1578 IN HANDLE EventHandle
,
1579 IN PLONG PulseCount OPTIONAL
1585 IN HANDLE EventHandle
,
1586 IN PLONG PulseCount OPTIONAL
1591 NtQueryAttributesFile(
1592 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1593 OUT PFILE_BASIC_INFORMATION FileInformation
1598 ZwQueryAttributesFile(
1599 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1600 OUT PFILE_BASIC_INFORMATION FileInformation
1606 NtQueryBootEntryOrder(
1613 ZwQueryBootEntryOrder(
1633 NtQueryDefaultLocale(
1634 IN BOOLEAN UserProfile
,
1635 OUT PLCID DefaultLocaleId
1640 ZwQueryDefaultLocale(
1641 IN BOOLEAN UserProfile
,
1642 OUT PLCID DefaultLocaleId
1647 NtQueryDefaultUILanguage(
1653 ZwQueryDefaultUILanguage(
1659 NtQueryDirectoryFile(
1660 IN HANDLE FileHandle
,
1661 IN HANDLE Event OPTIONAL
,
1662 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1663 IN PVOID ApcContext OPTIONAL
,
1664 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1665 OUT PVOID FileInformation
,
1667 IN FILE_INFORMATION_CLASS FileInformationClass
,
1668 IN BOOLEAN ReturnSingleEntry
,
1669 IN PUNICODE_STRING FileName OPTIONAL
,
1670 IN BOOLEAN RestartScan
1675 ZwQueryDirectoryFile(
1676 IN HANDLE FileHandle
,
1677 IN HANDLE Event OPTIONAL
,
1678 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1679 IN PVOID ApcContext OPTIONAL
,
1680 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1681 OUT PVOID FileInformation
,
1683 IN FILE_INFORMATION_CLASS FileInformationClass
,
1684 IN BOOLEAN ReturnSingleEntry
,
1685 IN PUNICODE_STRING FileName OPTIONAL
,
1686 IN BOOLEAN RestartScan
1692 IN HANDLE FileHandle
,
1693 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1696 IN BOOLEAN ReturnSingleEntry
,
1697 IN PVOID EaList OPTIONAL
,
1698 IN ULONG EaListLength
,
1699 IN PULONG EaIndex OPTIONAL
,
1700 IN BOOLEAN RestartScan
1706 IN HANDLE FileHandle
,
1707 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1710 IN BOOLEAN ReturnSingleEntry
,
1711 IN PVOID EaList OPTIONAL
,
1712 IN ULONG EaListLength
,
1713 IN PULONG EaIndex OPTIONAL
,
1714 IN BOOLEAN RestartScan
1720 IN HANDLE EventHandle
,
1721 IN EVENT_INFORMATION_CLASS EventInformationClass
,
1722 OUT PVOID EventInformation
,
1723 IN ULONG EventInformationLength
,
1724 OUT PULONG ReturnLength
1729 IN HANDLE EventHandle
,
1730 IN EVENT_INFORMATION_CLASS EventInformationClass
,
1731 OUT PVOID EventInformation
,
1732 IN ULONG EventInformationLength
,
1733 OUT PULONG ReturnLength
1738 NtQueryFullAttributesFile(
1739 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1740 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1745 ZwQueryFullAttributesFile(
1746 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1747 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
1752 NtQueryInformationFile(
1753 IN HANDLE FileHandle
,
1754 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1755 OUT PVOID FileInformation
,
1757 IN FILE_INFORMATION_CLASS FileInformationClass
1762 ZwQueryInformationFile(
1764 PIO_STATUS_BLOCK IoStatusBlock
,
1765 PVOID FileInformation
,
1767 FILE_INFORMATION_CLASS FileInformationClass
1772 NtQueryInformationJobObject(
1774 JOBOBJECTINFOCLASS JobInformationClass
,
1775 PVOID JobInformation
,
1776 ULONG JobInformationLength
,
1782 ZwQueryInformationJobObject(
1784 JOBOBJECTINFOCLASS JobInformationClass
,
1785 PVOID JobInformation
,
1786 ULONG JobInformationLength
,
1792 NtQueryInformationPort(
1794 CINT PortInformationClass
,
1795 PVOID PortInformation
,
1796 ULONG PortInformationLength
,
1802 ZwQueryInformationPort(
1804 CINT PortInformationClass
,
1805 PVOID PortInformation
,
1806 ULONG PortInformationLength
,
1813 NtQueryInformationProcess(
1814 IN HANDLE ProcessHandle
,
1815 IN PROCESSINFOCLASS ProcessInformationClass
,
1816 OUT PVOID ProcessInformation
,
1817 IN ULONG ProcessInformationLength
,
1818 OUT PULONG ReturnLength OPTIONAL
1823 ZwQueryInformationProcess(
1824 IN HANDLE ProcessHandle
,
1825 IN PROCESSINFOCLASS ProcessInformationClass
,
1826 OUT PVOID ProcessInformation
,
1827 IN ULONG ProcessInformationLength
,
1828 OUT PULONG ReturnLength OPTIONAL
1834 NtQueryInformationThread(
1835 IN HANDLE ThreadHandle
,
1836 IN THREADINFOCLASS ThreadInformationClass
,
1837 OUT PVOID ThreadInformation
,
1838 IN ULONG ThreadInformationLength
,
1839 OUT PULONG ReturnLength
1844 ZwQueryInformationThread(
1845 IN HANDLE ThreadHandle
,
1846 IN THREADINFOCLASS ThreadInformationClass
,
1847 OUT PVOID ThreadInformation
,
1848 IN ULONG ThreadInformationLength
,
1849 OUT PULONG ReturnLength
1854 NtQueryInformationToken(
1855 IN HANDLE TokenHandle
,
1856 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
1857 OUT PVOID TokenInformation
,
1858 IN ULONG TokenInformationLength
,
1859 OUT PULONG ReturnLength
1864 ZwQueryInformationToken(
1865 IN HANDLE TokenHandle
,
1866 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
1867 OUT PVOID TokenInformation
,
1868 IN ULONG TokenInformationLength
,
1869 OUT PULONG ReturnLength
1874 NtQueryInstallUILanguage(
1880 ZwQueryInstallUILanguage(
1886 NtQueryIoCompletion(
1887 IN HANDLE IoCompletionHandle
,
1888 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
1889 OUT PVOID IoCompletionInformation
,
1890 IN ULONG IoCompletionInformationLength
,
1891 OUT PULONG ResultLength OPTIONAL
1896 ZwQueryIoCompletion(
1897 IN HANDLE IoCompletionHandle
,
1898 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
1899 OUT PVOID IoCompletionInformation
,
1900 IN ULONG IoCompletionInformationLength
,
1901 OUT PULONG ResultLength OPTIONAL
1907 IN HANDLE KeyHandle
,
1908 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1909 OUT PVOID KeyInformation
,
1911 OUT PULONG ResultLength
1917 IN HANDLE KeyHandle
,
1918 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1919 OUT PVOID KeyInformation
,
1921 OUT PULONG ResultLength
1926 NtQueryQuotaInformationFile(
1927 IN HANDLE FileHandle
,
1928 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1931 IN BOOLEAN ReturnSingleEntry
,
1932 IN PVOID SidList OPTIONAL
,
1933 IN ULONG SidListLength
,
1934 IN PSID StartSid OPTIONAL
,
1935 IN BOOLEAN RestartScan
1941 ZwQueryQuotaInformationFile(
1942 IN HANDLE FileHandle
,
1943 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1946 IN BOOLEAN ReturnSingleEntry
,
1947 IN PVOID SidList OPTIONAL
,
1948 IN ULONG SidListLength
,
1949 IN PSID StartSid OPTIONAL
,
1950 IN BOOLEAN RestartScan
1955 NtQueryMultipleValueKey(
1956 IN HANDLE KeyHandle
,
1957 IN OUT PKEY_VALUE_ENTRY ValueList
,
1958 IN ULONG NumberOfValues
,
1960 IN OUT PULONG Length
,
1961 OUT PULONG ReturnLength
1966 ZwQueryMultipleValueKey(
1967 IN HANDLE KeyHandle
,
1968 IN OUT PKEY_VALUE_ENTRY ValueList
,
1969 IN ULONG NumberOfValues
,
1971 IN OUT PULONG Length
,
1972 OUT PULONG ReturnLength
1978 IN HANDLE MutantHandle
,
1979 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
1980 OUT PVOID MutantInformation
,
1982 OUT PULONG ResultLength
1988 IN HANDLE MutantHandle
,
1989 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
1990 OUT PVOID MutantInformation
,
1992 OUT PULONG ResultLength
1997 NtQueryPerformanceCounter(
1998 IN PLARGE_INTEGER Counter
,
1999 IN PLARGE_INTEGER Frequency
2004 ZwQueryPerformanceCounter(
2005 IN PLARGE_INTEGER Counter
,
2006 IN PLARGE_INTEGER Frequency
2012 IN HANDLE SemaphoreHandle
,
2013 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2014 OUT PVOID SemaphoreInformation
,
2016 OUT PULONG ReturnLength
2022 IN HANDLE SemaphoreHandle
,
2023 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2024 OUT PVOID SemaphoreInformation
,
2026 OUT PULONG ReturnLength
2031 NtQuerySymbolicLinkObject(
2032 IN HANDLE SymLinkObjHandle
,
2033 OUT PUNICODE_STRING LinkTarget
,
2034 OUT PULONG DataWritten OPTIONAL
2039 ZwQuerySymbolicLinkObject(
2040 IN HANDLE SymLinkObjHandle
,
2041 OUT PUNICODE_STRING LinkName
,
2042 OUT PULONG DataWritten OPTIONAL
2047 NtQuerySystemEnvironmentValue(
2048 IN PUNICODE_STRING Name
,
2056 ZwQuerySystemEnvironmentValue(
2057 IN PUNICODE_STRING Name
,
2065 NtQuerySystemInformation(
2066 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2067 OUT PVOID SystemInformation
,
2069 OUT PULONG ResultLength
2074 ZwQuerySystemInformation(
2075 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2076 OUT PVOID SystemInformation
,
2078 OUT PULONG ResultLength
2084 OUT PLARGE_INTEGER CurrentTime
2090 IN HANDLE TimerHandle
,
2091 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2092 OUT PVOID TimerInformation
,
2094 OUT PULONG ResultLength
2099 IN HANDLE TimerHandle
,
2100 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2101 OUT PVOID TimerInformation
,
2103 OUT PULONG ResultLength
2108 NtQueryTimerResolution (
2109 OUT PULONG MinimumResolution
,
2110 OUT PULONG MaximumResolution
,
2111 OUT PULONG ActualResolution
2116 ZwQueryTimerResolution (
2117 OUT PULONG MinimumResolution
,
2118 OUT PULONG MaximumResolution
,
2119 OUT PULONG ActualResolution
2125 IN HANDLE KeyHandle
,
2126 IN PUNICODE_STRING ValueName
,
2127 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2128 OUT PVOID KeyValueInformation
,
2130 OUT PULONG ResultLength
2136 IN HANDLE KeyHandle
,
2137 IN PUNICODE_STRING ValueName
,
2138 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2139 OUT PVOID KeyValueInformation
,
2141 OUT PULONG ResultLength
2146 NtQueryVolumeInformationFile(
2147 IN HANDLE FileHandle
,
2148 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2149 OUT PVOID FsInformation
,
2151 IN FS_INFORMATION_CLASS FsInformationClass
2156 ZwQueryVolumeInformationFile(
2157 IN HANDLE FileHandle
,
2158 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2159 OUT PVOID FsInformation
,
2161 IN FS_INFORMATION_CLASS FsInformationClass
2167 HANDLE ThreadHandle
,
2168 PKNORMAL_ROUTINE ApcRoutine
,
2169 PVOID NormalContext
,
2170 PVOID SystemArgument1
,
2171 PVOID SystemArgument2
2177 HANDLE ThreadHandle
,
2178 PKNORMAL_ROUTINE ApcRoutine
,
2179 PVOID NormalContext
,
2180 PVOID SystemArgument1
,
2181 PVOID SystemArgument2
2187 IN PEXCEPTION_RECORD ExceptionRecord
,
2188 IN PCONTEXT Context
,
2189 IN BOOLEAN SearchFrames
2195 IN PEXCEPTION_RECORD ExceptionRecord
,
2196 IN PCONTEXT Context
,
2197 IN BOOLEAN SearchFrames
2203 IN HANDLE FileHandle
,
2204 IN HANDLE Event OPTIONAL
,
2205 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2206 IN PVOID UserApcContext OPTIONAL
,
2207 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2209 IN ULONG BufferLength
,
2210 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2211 IN PULONG Key OPTIONAL
2217 IN HANDLE FileHandle
,
2218 IN HANDLE Event OPTIONAL
,
2219 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2220 IN PVOID UserApcContext OPTIONAL
,
2221 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2223 IN ULONG BufferLength
,
2224 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2225 IN PULONG Key OPTIONAL
2231 IN HANDLE FileHandle
,
2232 IN HANDLE Event OPTIONAL
,
2233 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2234 IN PVOID UserApcContext OPTIONAL
,
2235 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2236 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2237 IN ULONG BufferLength
,
2238 IN PLARGE_INTEGER ByteOffset
,
2239 IN PULONG Key OPTIONAL
2245 IN HANDLE FileHandle
,
2246 IN HANDLE Event OPTIONAL
,
2247 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2248 IN PVOID UserApcContext OPTIONAL
,
2249 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2250 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2251 IN ULONG BufferLength
,
2252 IN PLARGE_INTEGER ByteOffset
,
2253 IN PULONG Key OPTIONAL
2260 PLPC_MESSAGE Message
,
2271 PLPC_MESSAGE Message
,
2280 NtReadVirtualMemory(
2281 IN HANDLE ProcessHandle
,
2282 IN PVOID BaseAddress
,
2284 IN ULONG NumberOfBytesToRead
,
2285 OUT PULONG NumberOfBytesRead
2289 ZwReadVirtualMemory(
2290 IN HANDLE ProcessHandle
,
2291 IN PVOID BaseAddress
,
2293 IN ULONG NumberOfBytesToRead
,
2294 OUT PULONG NumberOfBytesRead
2299 NtRegisterThreadTerminatePort(
2300 HANDLE TerminationPort
2305 ZwRegisterThreadTerminatePort(
2306 HANDLE TerminationPort
2312 IN HANDLE MutantHandle
,
2313 IN PLONG ReleaseCount OPTIONAL
2319 IN HANDLE MutantHandle
,
2320 IN PLONG ReleaseCount OPTIONAL
2326 IN HANDLE SemaphoreHandle
,
2327 IN LONG ReleaseCount
,
2328 OUT PLONG PreviousCount
2334 IN HANDLE SemaphoreHandle
,
2335 IN LONG ReleaseCount
,
2336 OUT PLONG PreviousCount
2341 NtRemoveIoCompletion(
2342 IN HANDLE IoCompletionHandle
,
2343 OUT PVOID
*CompletionKey
,
2344 OUT PVOID
*CompletionContext
,
2345 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2346 IN PLARGE_INTEGER Timeout OPTIONAL
2351 ZwRemoveIoCompletion(
2352 IN HANDLE IoCompletionHandle
,
2353 OUT PVOID
*CompletionKey
,
2354 OUT PVOID
*CompletionContext
,
2355 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2356 IN PLARGE_INTEGER Timeout OPTIONAL
2362 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2364 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2369 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2371 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2378 PLPC_MESSAGE LpcReply
2385 PLPC_MESSAGE LpcReply
2390 NtReplyWaitReceivePort(
2393 PLPC_MESSAGE MessageReply
,
2394 PLPC_MESSAGE MessageRequest
2399 ZwReplyWaitReceivePort(
2402 PLPC_MESSAGE MessageReply
,
2403 PLPC_MESSAGE MessageRequest
2408 NtReplyWaitReplyPort(
2410 PLPC_MESSAGE ReplyMessage
2415 ZwReplyWaitReplyPort(
2417 PLPC_MESSAGE ReplyMessage
2424 PLPC_MESSAGE LpcMessage
);
2430 PLPC_MESSAGE LpcMessage
2435 NtRequestWaitReplyPort(
2437 PLPC_MESSAGE LpcReply
,
2438 PLPC_MESSAGE LpcRequest
2443 ZwRequestWaitReplyPort(
2445 PLPC_MESSAGE LpcReply
,
2446 PLPC_MESSAGE LpcRequest
2453 PLONG NumberOfWaitingThreads OPTIONAL
2460 PLONG NumberOfWaitingThreads OPTIONAL
2482 IN HANDLE ThreadHandle
,
2483 OUT PULONG SuspendCount
2489 IN HANDLE ThreadHandle
,
2490 OUT PULONG SuspendCount
2496 IN HANDLE KeyHandle
,
2497 IN HANDLE FileHandle
2502 IN HANDLE KeyHandle
,
2503 IN HANDLE FileHandle
2509 IN HANDLE KeyHandle
,
2510 IN HANDLE FileHandle
,
2517 IN HANDLE KeyHandle
,
2518 IN HANDLE FileHandle
,
2524 NtSetBootEntryOrder(
2531 ZwSetBootEntryOrder(
2553 IN HANDLE ThreadHandle
,
2559 IN HANDLE ThreadHandle
,
2566 IN BOOLEAN UserProfile
,
2567 IN LCID DefaultLocaleId
2573 IN BOOLEAN UserProfile
,
2574 IN LCID DefaultLocaleId
2579 NtSetDefaultUILanguage(
2585 ZwSetDefaultUILanguage(
2590 NtSetDefaultHardErrorPort(
2591 IN HANDLE PortHandle
2595 ZwSetDefaultHardErrorPort(
2596 IN HANDLE PortHandle
2602 IN HANDLE FileHandle
,
2603 IN PIO_STATUS_BLOCK IoStatusBlock
,
2611 IN HANDLE FileHandle
,
2612 IN PIO_STATUS_BLOCK IoStatusBlock
,
2620 IN HANDLE EventHandle
,
2621 OUT PLONG PreviousState OPTIONAL
2627 IN HANDLE EventHandle
,
2628 OUT PLONG PreviousState OPTIONAL
2634 IN HANDLE EventPairHandle
2640 IN HANDLE EventPairHandle
2644 NtSetHighWaitLowEventPair(
2645 IN HANDLE EventPairHandle
2649 ZwSetHighWaitLowEventPair(
2650 IN HANDLE EventPairHandle
2655 NtSetInformationFile(
2656 IN HANDLE FileHandle
,
2657 IN PIO_STATUS_BLOCK IoStatusBlock
,
2658 IN PVOID FileInformation
,
2660 IN FILE_INFORMATION_CLASS FileInformationClass
2665 ZwSetInformationFile(
2666 IN HANDLE FileHandle
,
2667 IN PIO_STATUS_BLOCK IoStatusBlock
,
2668 IN PVOID FileInformation
,
2670 IN FILE_INFORMATION_CLASS FileInformationClass
2675 NtSetInformationJobObject(
2677 JOBOBJECTINFOCLASS JobInformationClass
,
2678 PVOID JobInformation
,
2679 ULONG JobInformationLength
2684 ZwSetInformationJobObject(
2686 JOBOBJECTINFOCLASS JobInformationClass
,
2687 PVOID JobInformation
,
2688 ULONG JobInformationLength
2693 NtSetInformationThread(
2694 IN HANDLE ThreadHandle
,
2695 IN THREADINFOCLASS ThreadInformationClass
,
2696 IN PVOID ThreadInformation
,
2697 IN ULONG ThreadInformationLength
2701 ZwSetInformationThread(
2702 IN HANDLE ThreadHandle
,
2703 IN THREADINFOCLASS ThreadInformationClass
,
2704 IN PVOID ThreadInformation
,
2705 IN ULONG ThreadInformationLength
2710 NtSetInformationToken(
2711 IN HANDLE TokenHandle
,
2712 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2713 OUT PVOID TokenInformation
,
2714 IN ULONG TokenInformationLength
2719 ZwSetInformationToken(
2720 IN HANDLE TokenHandle
,
2721 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2722 OUT PVOID TokenInformation
,
2723 IN ULONG TokenInformationLength
2729 IN HANDLE IoCompletionPortHandle
,
2730 IN PVOID CompletionKey
,
2731 IN PVOID CompletionContext
,
2732 IN NTSTATUS CompletionStatus
,
2733 IN ULONG CompletionInformation
2739 IN HANDLE IoCompletionPortHandle
,
2740 IN PVOID CompletionKey
,
2741 IN PVOID CompletionContext
,
2742 IN NTSTATUS CompletionStatus
,
2743 IN ULONG CompletionInformation
2748 NtSetIntervalProfile(
2750 KPROFILE_SOURCE ClockSource
2755 ZwSetIntervalProfile(
2757 KPROFILE_SOURCE ClockSource
2774 NtSetLowWaitHighEventPair(
2780 ZwSetLowWaitHighEventPair(
2786 NtSetQuotaInformationFile(
2788 PIO_STATUS_BLOCK IoStatusBlock
,
2789 PFILE_USER_QUOTA_INFORMATION Buffer
,
2795 ZwSetQuotaInformationFile(
2797 PIO_STATUS_BLOCK IoStatusBlock
,
2798 PFILE_USER_QUOTA_INFORMATION Buffer
,
2804 NtSetSecurityObject(
2806 IN SECURITY_INFORMATION SecurityInformation
,
2807 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2812 ZwSetSecurityObject(
2814 IN SECURITY_INFORMATION SecurityInformation
,
2815 IN PSECURITY_DESCRIPTOR SecurityDescriptor
2820 NtSetSystemEnvironmentValue(
2821 IN PUNICODE_STRING VariableName
,
2822 IN PUNICODE_STRING Value
2826 ZwSetSystemEnvironmentValue(
2827 IN PUNICODE_STRING VariableName
,
2828 IN PUNICODE_STRING Value
2833 NtSetSystemInformation(
2834 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2835 IN PVOID SystemInformation
,
2836 IN ULONG SystemInformationLength
2841 ZwSetSystemInformation(
2842 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2843 IN PVOID SystemInformation
,
2844 IN ULONG SystemInformationLength
2850 IN PLARGE_INTEGER SystemTime
,
2851 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2857 IN PLARGE_INTEGER SystemTime
,
2858 IN PLARGE_INTEGER NewSystemTime OPTIONAL
2863 NtSetTimerResolution(
2864 IN ULONG RequestedResolution
,
2865 IN BOOLEAN SetOrUnset
,
2866 OUT PULONG ActualResolution
2871 ZwSetTimerResolution(
2872 IN ULONG RequestedResolution
,
2873 IN BOOLEAN SetOrUnset
,
2874 OUT PULONG ActualResolution
2892 IN HANDLE KeyHandle
,
2893 IN PUNICODE_STRING ValueName
,
2894 IN ULONG TitleIndex OPTIONAL
,
2903 IN HANDLE KeyHandle
,
2904 IN PUNICODE_STRING ValueName
,
2905 IN ULONG TitleIndex OPTIONAL
,
2913 NtSetVolumeInformationFile(
2914 IN HANDLE FileHandle
,
2915 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2916 IN PVOID FsInformation
,
2918 IN FS_INFORMATION_CLASS FsInformationClass
2923 ZwSetVolumeInformationFile(
2924 IN HANDLE FileHandle
,
2925 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2926 IN PVOID FsInformation
,
2928 IN FS_INFORMATION_CLASS FsInformationClass
2934 IN SHUTDOWN_ACTION Action
2940 IN SHUTDOWN_ACTION Action
2945 NtSignalAndWaitForSingleObject(
2946 IN HANDLE SignalObject
,
2947 IN HANDLE WaitObject
,
2948 IN BOOLEAN Alertable
,
2949 IN PLARGE_INTEGER Time
2954 ZwSignalAndWaitForSingleObject(
2955 IN HANDLE SignalObject
,
2956 IN HANDLE WaitObject
,
2957 IN BOOLEAN Alertable
,
2958 IN PLARGE_INTEGER Time
2964 HANDLE ProfileHandle
2970 HANDLE ProfileHandle
2976 HANDLE ProfileHandle
2982 HANDLE ProfileHandle
2988 IN HANDLE ProcessHandle
,
2989 IN NTSTATUS ExitStatus
2995 IN HANDLE ProcessHandle
,
2996 IN NTSTATUS ExitStatus
3001 NtTerminateJobObject(
3008 ZwTerminateJobObject(
3016 IN ULONG TraceHandle
,
3018 IN ULONG TraceHeaderLength
,
3019 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3025 IN ULONG TraceHandle
,
3027 IN ULONG TraceHeaderLength
,
3028 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3033 NtTranslateFilePath(
3041 ZwTranslateFilePath(
3050 IN PUNICODE_STRING DriverServiceName
3056 IN PUNICODE_STRING DriverServiceName
3061 NtUnmapViewOfSection(
3062 IN HANDLE ProcessHandle
,
3063 IN PVOID BaseAddress
3068 ZwUnmapViewOfSection(
3069 IN HANDLE ProcessHandle
,
3070 IN PVOID BaseAddress
3077 PLPC_MESSAGE Message
,
3088 PLPC_MESSAGE Message
,
3097 NtWriteVirtualMemory(
3098 IN HANDLE ProcessHandle
,
3099 IN PVOID BaseAddress
,
3101 IN ULONG NumberOfBytesToWrite
,
3102 OUT PULONG NumberOfBytesWritten
3107 ZwWriteVirtualMemory(
3108 IN HANDLE ProcessHandle
,
3109 IN PVOID BaseAddress
,
3111 IN ULONG NumberOfBytesToWrite
,
3112 OUT PULONG NumberOfBytesWritten
3118 NtWaitForSingleObject (
3120 IN BOOLEAN Alertable
,
3121 IN PLARGE_INTEGER Time
3126 ZwWaitForSingleObject (
3128 IN BOOLEAN Alertable
,
3129 IN PLARGE_INTEGER Time
3135 NtWaitHighEventPair(
3136 IN HANDLE EventPairHandle
3141 ZwWaitHighEventPair(
3142 IN HANDLE EventPairHandle
3148 IN HANDLE EventPairHandle
3154 IN HANDLE EventPairHandle
3160 IN HANDLE FileHandle
,
3161 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3162 IN PLARGE_INTEGER ByteOffset
,
3163 IN PLARGE_INTEGER Lenght
,
3164 OUT PULONG Key OPTIONAL
3169 IN HANDLE FileHandle
,
3170 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3171 IN PLARGE_INTEGER ByteOffset
,
3172 IN PLARGE_INTEGER Lenght
,
3173 OUT PULONG Key OPTIONAL
3180 IN HANDLE FileHandle
,
3181 IN HANDLE Event OPTIONAL
,
3182 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3183 IN PVOID ApcContext OPTIONAL
,
3184 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3187 IN PLARGE_INTEGER ByteOffset
,
3188 IN PULONG Key OPTIONAL
3194 IN HANDLE FileHandle
,
3195 IN HANDLE Event OPTIONAL
,
3196 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3197 IN PVOID ApcContext OPTIONAL
,
3198 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3201 IN PLARGE_INTEGER ByteOffset
,
3202 IN PULONG Key OPTIONAL
3208 IN HANDLE FileHandle
,
3209 IN HANDLE Event OPTIONAL
,
3210 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3211 IN PVOID ApcContext OPTIONAL
,
3212 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3213 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3214 IN ULONG BufferLength
,
3215 IN PLARGE_INTEGER ByteOffset
,
3216 IN PULONG Key OPTIONAL
3222 IN HANDLE FileHandle
,
3223 IN HANDLE Event OPTIONAL
,
3224 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3225 IN PVOID ApcContext OPTIONAL
,
3226 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3227 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3228 IN ULONG BufferLength
,
3229 IN PLARGE_INTEGER ByteOffset
,
3230 IN PULONG Key OPTIONAL
3236 IN HANDLE ThreadHandle
,
3237 IN PULONG PreviousSuspendCount
3243 IN HANDLE ThreadHandle
,
3244 IN PULONG PreviousSuspendCount
3250 IN HANDLE ThreadHandle
,
3251 IN NTSTATUS ExitStatus
3256 IN HANDLE ThreadHandle
,
3257 IN NTSTATUS ExitStatus
3302 NtSetSystemPowerState(
3303 IN POWER_ACTION SystemAction
,
3304 IN SYSTEM_POWER_STATE MinSystemState
,
3310 NtSystemDebugControl(
3311 DEBUG_CONTROL_CODE ControlCode
,
3313 ULONG InputBufferLength
,
3315 ULONG OutputBufferLength
,
3329 IN ULONG RoutineIndex
,
3331 IN ULONG ArgumentLength
,
3332 OUT PVOID
* Result OPTIONAL
,
3333 OUT PULONG ResultLength OPTIONAL
3356 NtReplyWaitSendChannel(
3362 NtSendWaitReplyChannel(
3368 NtSetContextChannel(
3376 LDT_ENTRY LdtEntry1
,
3383 NtQueryOleDirectoryFile(
3390 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3391 IN HANDLE ClientToken
,
3392 IN ACCESS_MASK DesiredAcces
,
3393 IN PGENERIC_MAPPING GenericMapping
,
3394 OUT PPRIVILEGE_SET PrivilegeSet
,
3395 OUT PULONG ReturnLength
,
3396 OUT PACCESS_MASK GrantedAccess
,
3397 OUT PNTSTATUS AccessStatus
3403 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3404 IN HANDLE ClientToken
,
3405 IN ACCESS_MASK DesiredAcces
,
3406 IN PGENERIC_MAPPING GenericMapping
,
3407 OUT PPRIVILEGE_SET PrivilegeSet
,
3408 OUT PULONG ReturnLength
,
3409 OUT PACCESS_MASK GrantedAccess
,
3410 OUT PNTSTATUS AccessStatus
3415 NtAccessCheckAndAuditAlarm(
3416 IN PUNICODE_STRING SubsystemName
,
3417 IN PHANDLE ObjectHandle
,
3418 IN PUNICODE_STRING ObjectTypeName
,
3419 IN PUNICODE_STRING ObjectName
,
3420 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3421 IN ACCESS_MASK DesiredAccess
,
3422 IN PGENERIC_MAPPING GenericMapping
,
3423 IN BOOLEAN ObjectCreation
,
3424 OUT PACCESS_MASK GrantedAccess
,
3425 OUT PNTSTATUS AccessStatus
,
3426 OUT PBOOLEAN GenerateOnClose
3432 IN HANDLE TimerHandle
,
3433 OUT PBOOLEAN CurrentState OPTIONAL
3440 IN PCONTEXT Context
,
3441 IN BOOLEAN TestAlert
3447 IN PUNICODE_STRING FileName
,
3448 IN PLARGE_INTEGER InitialSize
,
3449 IN PLARGE_INTEGER MaxiumSize
,
3456 OUT PHANDLE ProfileHandle
,
3457 IN HANDLE ProcessHandle
,
3460 IN ULONG Granularity
,
3462 IN ULONG ProfilingSize
,
3463 IN KPROFILE_SOURCE Source
,
3464 IN KAFFINITY ProcessorMask
3470 OUT PHANDLE ThreadHandle
,
3471 IN ACCESS_MASK DesiredAccess
,
3472 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3473 IN HANDLE ProcessHandle
,
3474 OUT PCLIENT_ID ClientId
,
3475 IN PCONTEXT ThreadContext
,
3476 IN PINITIAL_TEB UserStack
,
3477 IN BOOLEAN CreateSuspended
3484 IN LARGE_INTEGER
*Interval
3490 IN HANDLE SectionHandle
,
3491 IN PLARGE_INTEGER NewMaximumSize
3496 NtFlushInstructionCache(
3497 IN HANDLE ProcessHandle
,
3498 IN PVOID BaseAddress
,
3499 IN UINT NumberOfBytesToFlush
3504 NtFlushVirtualMemory(
3505 IN HANDLE ProcessHandle
,
3506 IN PVOID BaseAddress
,
3507 IN ULONG NumberOfBytesToFlush
,
3508 OUT PULONG NumberOfBytesFlushed OPTIONAL
3520 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
3521 IN POBJECT_ATTRIBUTES FileObjectAttributes
3527 NtLockVirtualMemory(
3528 HANDLE ProcessHandle
,
3530 ULONG NumberOfBytesToLock
,
3531 PULONG NumberOfBytesLocked
3536 NtOpenObjectAuditAlarm(
3537 IN PUNICODE_STRING SubsystemName
,
3539 IN PUNICODE_STRING ObjectTypeName
,
3540 IN PUNICODE_STRING ObjectName
,
3541 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3542 IN HANDLE ClientToken
,
3543 IN ULONG DesiredAccess
,
3544 IN ULONG GrantedAccess
,
3545 IN PPRIVILEGE_SET Privileges
,
3546 IN BOOLEAN ObjectCreation
,
3547 IN BOOLEAN AccessGranted
,
3548 OUT PBOOLEAN GenerateOnClose
3553 NtProtectVirtualMemory(
3554 IN HANDLE ProcessHandle
,
3555 IN PVOID
*BaseAddress
,
3556 IN ULONG
*NumberOfBytesToProtect
,
3557 IN ULONG NewAccessProtection
,
3558 OUT PULONG OldAccessProtection
3563 NtQueryDirectoryObject(
3564 IN HANDLE DirectoryHandle
,
3566 IN ULONG BufferLength
,
3567 IN BOOLEAN ReturnSingleEntry
,
3568 IN BOOLEAN RestartScan
,
3569 IN OUT PULONG Context
,
3570 OUT PULONG ReturnLength OPTIONAL
3575 NtQueryIntervalProfile(
3576 IN KPROFILE_SOURCE ProfileSource
,
3583 IN HANDLE SectionHandle
,
3584 IN CINT SectionInformationClass
,
3585 OUT PVOID SectionInformation
,
3587 OUT PULONG ResultLength
3592 NtQueryVirtualMemory(
3593 IN HANDLE ProcessHandle
,
3595 IN IN CINT VirtualMemoryInformationClass
,
3596 OUT PVOID VirtualMemoryInformation
,
3598 OUT PULONG ResultLength
3614 NtSetInformationKey(
3615 IN HANDLE KeyHandle
,
3616 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3617 IN PVOID KeyInformation
,
3618 IN ULONG KeyInformationLength
3623 NtSetInformationObject(
3624 IN HANDLE ObjectHandle
,
3625 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3626 IN PVOID ObjectInformation
,
3633 IN HANDLE TimerHandle
,
3634 IN PLARGE_INTEGER DueTime
,
3635 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3636 IN PVOID TimerContext
,
3637 IN BOOLEAN WakeTimer
,
3638 IN LONG Period OPTIONAL
,
3639 OUT PBOOLEAN PreviousState OPTIONAL
3645 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3650 NtUnlockVirtualMemory(
3651 IN HANDLE ProcessHandle
,
3652 IN PVOID BaseAddress
,
3653 IN ULONG NumberOfBytesToUnlock
,
3654 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3659 NtWaitForMultipleObjects(
3662 IN WAIT_TYPE WaitType
,
3663 IN BOOLEAN Alertable
,
3664 IN PLARGE_INTEGER Time
3670 IN PCONTEXT Context
,
3677 OUT PLARGE_INTEGER CurrentTime
3684 IN HANDLE SourceProcessHandle
,
3685 IN HANDLE SourceHandle
,
3686 IN HANDLE TargetProcessHandle
,
3687 OUT PHANDLE TargetHandle
,
3688 IN ACCESS_MASK DesiredAccess
,
3689 IN BOOLEAN InheritHandle
,
3696 IN HANDLE SourceProcessHandle
,
3697 IN HANDLE SourceHandle
,
3698 IN HANDLE TargetProcessHandle
,
3699 OUT PHANDLE TargetHandle
,
3700 IN ACCESS_MASK DesiredAccess
,
3701 IN BOOLEAN InheritHandle
,
3709 IN ULONG AtomNameLength
,
3710 IN OUT PRTL_ATOM Atom
3717 IN ULONG AtomNameLength
,
3718 IN OUT PRTL_ATOM Atom
3724 PULARGE_INTEGER Time
,
3733 PULARGE_INTEGER Time
,
3742 IN PUNICODE_STRING FileName
,
3743 IN PLARGE_INTEGER InitialSize
,
3744 IN PLARGE_INTEGER MaxiumSize
,
3751 OUT PHANDLE ThreadHandle
,
3752 IN ACCESS_MASK DesiredAccess
,
3753 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3754 IN HANDLE ProcessHandle
,
3755 OUT PCLIENT_ID ClientId
,
3756 IN PCONTEXT ThreadContext
,
3757 IN PINITIAL_TEB UserStack
,
3758 IN BOOLEAN CreateSuspended
3764 IN HANDLE ExistingTokenHandle
,
3765 IN ACCESS_MASK DesiredAccess
,
3766 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
3767 IN BOOLEAN EffectiveOnly
,
3768 IN TOKEN_TYPE TokenType
,
3769 OUT PHANDLE NewTokenHandle
3776 IN ULONG AtomNameLength
,
3777 OUT PRTL_ATOM Atom OPTIONAL
3784 IN ULONG AtomNameLength
,
3785 OUT PRTL_ATOM Atom OPTIONAL
3797 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
3798 IN POBJECT_ATTRIBUTES FileObjectAttributes
3803 ZwLockVirtualMemory(
3804 HANDLE ProcessHandle
,
3806 ULONG NumberOfBytesToLock
,
3807 PULONG NumberOfBytesLocked
3812 ZwOpenObjectAuditAlarm(
3813 IN PUNICODE_STRING SubsystemName
,
3815 IN PUNICODE_STRING ObjectTypeName
,
3816 IN PUNICODE_STRING ObjectName
,
3817 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
3818 IN HANDLE ClientToken
,
3819 IN ULONG DesiredAccess
,
3820 IN ULONG GrantedAccess
,
3821 IN PPRIVILEGE_SET Privileges
,
3822 IN BOOLEAN ObjectCreation
,
3823 IN BOOLEAN AccessGranted
,
3824 OUT PBOOLEAN GenerateOnClose
3829 ZwProtectVirtualMemory(
3830 IN HANDLE ProcessHandle
,
3831 IN PVOID
*BaseAddress
,
3832 IN ULONG
*NumberOfBytesToProtect
,
3833 IN ULONG NewAccessProtection
,
3834 OUT PULONG OldAccessProtection
3839 NtQueryInformationAtom(
3841 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
3842 OUT PVOID AtomInformation
,
3843 IN ULONG AtomInformationLength
,
3844 OUT PULONG ReturnLength OPTIONAL
3849 ZwQueryInformationAtom(
3851 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
3852 OUT PVOID AtomInformation
,
3853 IN ULONG AtomInformationLength
,
3854 OUT PULONG ReturnLength OPTIONAL
3859 ZwQueryDirectoryObject(
3860 IN HANDLE DirectoryHandle
,
3862 IN ULONG BufferLength
,
3863 IN BOOLEAN ReturnSingleEntry
,
3864 IN BOOLEAN RestartScan
,
3865 IN OUT PULONG Context
,
3866 OUT PULONG ReturnLength OPTIONAL
3871 ZwQueryIntervalProfile(
3872 OUT PULONG Interval
,
3873 OUT KPROFILE_SOURCE ClockSource
3879 IN HANDLE ObjectHandle
,
3880 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3881 OUT PVOID ObjectInformation
,
3883 OUT PULONG ResultLength OPTIONAL
3888 NtQuerySecurityObject(
3890 IN SECURITY_INFORMATION SecurityInformation
,
3891 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
3893 OUT PULONG ResultLength
3898 ZwQuerySecurityObject(
3900 IN SECURITY_INFORMATION SecurityInformation
,
3901 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
3903 OUT PULONG ResultLength
3909 ZwQueryVirtualMemory(
3910 IN HANDLE ProcessHandle
,
3912 IN IN CINT VirtualMemoryInformationClass
,
3913 OUT PVOID VirtualMemoryInformation
,
3915 OUT PULONG ResultLength
3931 ZwSetInformationKey(
3932 IN HANDLE KeyHandle
,
3933 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3934 IN PVOID KeyInformation
,
3935 IN ULONG KeyInformationLength
3940 ZwSetInformationObject(
3941 IN HANDLE ObjectHandle
,
3942 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3943 IN PVOID ObjectInformation
,
3949 NtSetInformationProcess(
3950 IN HANDLE ProcessHandle
,
3951 IN PROCESSINFOCLASS ProcessInformationClass
,
3952 IN PVOID ProcessInformation
,
3953 IN ULONG ProcessInformationLength
3959 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3964 ZwUnlockVirtualMemory(
3965 IN HANDLE ProcessHandle
,
3966 IN PVOID BaseAddress
,
3967 IN ULONG NumberOfBytesToUnlock
,
3968 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3973 ZwWaitForMultipleObjects (
3976 IN WAIT_TYPE WaitType
,
3977 IN BOOLEAN Alertable
,
3978 IN PLARGE_INTEGER Time
3984 OUT PHANDLE ProfileHandle
,
3985 IN POBJECT_ATTRIBUTES ObjectAttributes
,
3988 IN ULONG Granularity
,
3990 IN ULONG ProfilingSize
,
3991 IN ULONG ClockSource
,
3992 IN ULONG ProcessorMask
3998 IN BOOLEAN Alertable
,
3999 IN LARGE_INTEGER
*Interval
4005 IN HANDLE SectionHandle
,
4006 IN PLARGE_INTEGER NewMaximumSize
4012 IN HANDLE SectionHandle
,
4013 IN CINT SectionInformationClass
,
4014 OUT PVOID SectionInformation
,
4016 OUT PULONG ResultLength
4022 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
4023 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
4030 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
4031 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
4038 OUT PLARGE_INTEGER CurrentTime
4044 IN HANDLE ObjectHandle
,
4045 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
4046 OUT PVOID ObjectInformation
,
4048 OUT PULONG ResultLength OPTIONAL
4051 static inline struct _PEB
* NtCurrentPeb(void)
4055 #if defined(__GNUC__)
4057 __asm__ __volatile__
4059 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4060 : "=r" (pPeb
) /* can't have two memory operands */
4064 #elif defined(_MSC_VER)
4066 __asm mov eax
, fs
:0x30;
4070 #error Unknown compiler for inline assembler