2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
18 /* FUNCTION TYPES ************************************************************/
20 /* PROTOTYPES ****************************************************************/
26 HANDLE NamedPortHandle
,
27 PLPC_MESSAGE ServerReply
,
29 PLPC_SECTION_WRITE WriteMap
,
30 PLPC_SECTION_READ ReadMap
36 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
37 IN HANDLE ClientToken
,
38 IN ACCESS_MASK DesiredAcces
,
39 IN PGENERIC_MAPPING GenericMapping
,
40 OUT PPRIVILEGE_SET PrivilegeSet
,
41 OUT PULONG ReturnLength
,
42 OUT PACCESS_MASK GrantedAccess
,
43 OUT PNTSTATUS AccessStatus
49 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
50 IN HANDLE ClientToken
,
51 IN ACCESS_MASK DesiredAcces
,
52 IN PGENERIC_MAPPING GenericMapping
,
53 OUT PPRIVILEGE_SET PrivilegeSet
,
54 OUT PULONG ReturnLength
,
55 OUT PACCESS_MASK GrantedAccess
,
56 OUT PNTSTATUS AccessStatus
61 NtAccessCheckAndAuditAlarm(
62 IN PUNICODE_STRING SubsystemName
,
63 IN PHANDLE ObjectHandle
,
64 IN PUNICODE_STRING ObjectTypeName
,
65 IN PUNICODE_STRING ObjectName
,
66 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
67 IN ACCESS_MASK DesiredAccess
,
68 IN PGENERIC_MAPPING GenericMapping
,
69 IN BOOLEAN ObjectCreation
,
70 OUT PACCESS_MASK GrantedAccess
,
71 OUT PNTSTATUS AccessStatus
,
72 OUT PBOOLEAN GenerateOnClose
79 IN ULONG AtomNameLength
,
87 IN ULONG AtomNameLength
,
94 IN PUNICODE_STRING EntryName
,
95 IN PUNICODE_STRING EntryValue
101 IN PUNICODE_STRING EntryName
,
102 IN PUNICODE_STRING EntryValue
108 IN HANDLE TokenHandle
,
109 IN BOOLEAN ResetToDefault
,
110 IN PTOKEN_GROUPS NewState
,
111 IN ULONG BufferLength
,
112 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
113 OUT PULONG ReturnLength
119 IN HANDLE TokenHandle
,
120 IN BOOLEAN ResetToDefault
,
121 IN PTOKEN_GROUPS NewState
,
122 IN ULONG BufferLength
,
123 OUT PTOKEN_GROUPS PreviousState
,
124 OUT PULONG ReturnLength
129 NtAdjustPrivilegesToken(
130 IN HANDLE TokenHandle
,
131 IN BOOLEAN DisableAllPrivileges
,
132 IN PTOKEN_PRIVILEGES NewState
,
133 IN ULONG BufferLength
,
134 OUT PTOKEN_PRIVILEGES PreviousState
,
135 OUT PULONG ReturnLength
140 ZwAdjustPrivilegesToken(
141 IN HANDLE TokenHandle
,
142 IN BOOLEAN DisableAllPrivileges
,
143 IN PTOKEN_PRIVILEGES NewState
,
144 IN ULONG BufferLength
,
145 OUT PTOKEN_PRIVILEGES PreviousState
,
146 OUT PULONG ReturnLength
152 IN HANDLE ThreadHandle
,
153 OUT PULONG SuspendCount
159 IN HANDLE ThreadHandle
,
160 OUT PULONG SuspendCount
166 IN HANDLE ThreadHandle
172 IN HANDLE ThreadHandle
177 NtAllocateLocallyUniqueId(
178 OUT LUID
*LocallyUniqueId
183 ZwAllocateLocallyUniqueId(
190 PULARGE_INTEGER Time
,
199 PULARGE_INTEGER Time
,
207 NtAllocateVirtualMemory(
208 IN HANDLE ProcessHandle
,
209 IN OUT PVOID
*BaseAddress
,
211 IN OUT PULONG RegionSize
,
212 IN ULONG AllocationType
,
218 ZwAllocateVirtualMemory(
219 IN HANDLE ProcessHandle
,
220 IN OUT PVOID
*BaseAddress
,
222 IN OUT PULONG RegionSize
,
223 IN ULONG AllocationType
,
229 NtAssignProcessToJobObject(
236 ZwAssignProcessToJobObject(
260 IN HANDLE FileHandle
,
261 OUT PIO_STATUS_BLOCK IoStatusBlock
267 IN HANDLE FileHandle
,
268 OUT PIO_STATUS_BLOCK IoStatusBlock
274 IN HANDLE TimerHandle
,
275 OUT PBOOLEAN CurrentState OPTIONAL
281 IN HANDLE EventHandle
287 IN HANDLE EventHandle
294 ACCESS_MASK DesiredAccess
,
295 POBJECT_ATTRIBUTES ObjectAttributes
302 ACCESS_MASK DesiredAccess
,
303 POBJECT_ATTRIBUTES ObjectAttributes
320 NtCloseObjectAuditAlarm(
321 IN PUNICODE_STRING SubsystemName
,
323 IN BOOLEAN GenerateOnClose
328 ZwCloseObjectAuditAlarm(
329 IN PUNICODE_STRING SubsystemName
,
331 IN BOOLEAN GenerateOnClose
336 NtCompleteConnectPort(
342 ZwCompleteConnectPort(
350 PUNICODE_STRING PortName
,
351 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
352 PLPC_SECTION_WRITE SectionInfo
,
353 PLPC_SECTION_READ MapInfo
,
354 PULONG MaxMessageSize
,
356 PULONG ConnectInfoLength
363 PUNICODE_STRING PortName
,
364 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
365 PLPC_SECTION_WRITE SectionInfo
,
366 PLPC_SECTION_READ MapInfo
,
367 PULONG MaxMessageSize
,
369 PULONG ConnectInfoLength
388 NtCreateDirectoryObject(
389 OUT PHANDLE DirectoryHandle
,
390 IN ACCESS_MASK DesiredAccess
,
391 IN POBJECT_ATTRIBUTES ObjectAttributes
396 ZwCreateDirectoryObject(
397 OUT PHANDLE DirectoryHandle
,
398 IN ACCESS_MASK DesiredAccess
,
399 IN POBJECT_ATTRIBUTES ObjectAttributes
405 OUT PHANDLE EventHandle
,
406 IN ACCESS_MASK DesiredAccess
,
407 IN POBJECT_ATTRIBUTES ObjectAttributes
,
408 IN EVENT_TYPE EventType
,
409 IN BOOLEAN InitialState
415 OUT PHANDLE EventHandle
,
416 IN ACCESS_MASK DesiredAccess
,
417 IN POBJECT_ATTRIBUTES ObjectAttributes
,
418 IN EVENT_TYPE EventType
,
419 IN BOOLEAN InitialState
425 OUT PHANDLE EventPairHandle
,
426 IN ACCESS_MASK DesiredAccess
,
427 IN POBJECT_ATTRIBUTES ObjectAttributes
433 OUT PHANDLE EventPairHandle
,
434 IN ACCESS_MASK DesiredAccess
,
435 IN POBJECT_ATTRIBUTES ObjectAttributes
441 OUT PHANDLE FileHandle
,
442 IN ACCESS_MASK DesiredAccess
,
443 IN POBJECT_ATTRIBUTES ObjectAttributes
,
444 OUT PIO_STATUS_BLOCK IoStatusBlock
,
445 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
446 IN ULONG FileAttributes
,
447 IN ULONG ShareAccess
,
448 IN ULONG CreateDisposition
,
449 IN ULONG CreateOptions
,
450 IN PVOID EaBuffer OPTIONAL
,
457 OUT PHANDLE FileHandle
,
458 IN ACCESS_MASK DesiredAccess
,
459 IN POBJECT_ATTRIBUTES ObjectAttributes
,
460 OUT PIO_STATUS_BLOCK IoStatusBlock
,
461 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
462 IN ULONG FileAttributes
,
463 IN ULONG ShareAccess
,
464 IN ULONG CreateDisposition
,
465 IN ULONG CreateOptions
,
466 IN PVOID EaBuffer OPTIONAL
,
472 NtCreateIoCompletion(
473 OUT PHANDLE IoCompletionHandle
,
474 IN ACCESS_MASK DesiredAccess
,
475 IN POBJECT_ATTRIBUTES ObjectAttributes
,
476 IN ULONG NumberOfConcurrentThreads
481 ZwCreateIoCompletion(
482 OUT PHANDLE IoCompletionHandle
,
483 IN ACCESS_MASK DesiredAccess
,
484 IN POBJECT_ATTRIBUTES ObjectAttributes
,
485 IN ULONG NumberOfConcurrentThreads
491 OUT PHANDLE KeyHandle
,
492 IN ACCESS_MASK DesiredAccess
,
493 IN POBJECT_ATTRIBUTES ObjectAttributes
,
495 IN PUNICODE_STRING Class OPTIONAL
,
496 IN ULONG CreateOptions
,
497 IN PULONG Disposition OPTIONAL
503 OUT PHANDLE KeyHandle
,
504 IN ACCESS_MASK DesiredAccess
,
505 IN POBJECT_ATTRIBUTES ObjectAttributes
,
507 IN PUNICODE_STRING Class OPTIONAL
,
508 IN ULONG CreateOptions
,
509 IN PULONG Disposition OPTIONAL
514 NtCreateMailslotFile(
515 OUT PHANDLE MailSlotFileHandle
,
516 IN ACCESS_MASK DesiredAccess
,
517 IN POBJECT_ATTRIBUTES ObjectAttributes
,
518 OUT PIO_STATUS_BLOCK IoStatusBlock
,
519 IN ULONG FileAttributes
,
520 IN ULONG ShareAccess
,
521 IN ULONG MaxMessageSize
,
522 IN PLARGE_INTEGER TimeOut
527 ZwCreateMailslotFile(
528 OUT PHANDLE MailSlotFileHandle
,
529 IN ACCESS_MASK DesiredAccess
,
530 IN POBJECT_ATTRIBUTES ObjectAttributes
,
531 OUT PIO_STATUS_BLOCK IoStatusBlock
,
532 IN ULONG FileAttributes
,
533 IN ULONG ShareAccess
,
534 IN ULONG MaxMessageSize
,
535 IN PLARGE_INTEGER TimeOut
541 OUT PHANDLE MutantHandle
,
542 IN ACCESS_MASK DesiredAccess
,
543 IN POBJECT_ATTRIBUTES ObjectAttributes
,
544 IN BOOLEAN InitialOwner
550 OUT PHANDLE MutantHandle
,
551 IN ACCESS_MASK DesiredAccess
,
552 IN POBJECT_ATTRIBUTES ObjectAttributes
,
553 IN BOOLEAN InitialOwner
558 NtCreateNamedPipeFile(
559 OUT PHANDLE NamedPipeFileHandle
,
560 IN ACCESS_MASK DesiredAccess
,
561 IN POBJECT_ATTRIBUTES ObjectAttributes
,
562 OUT PIO_STATUS_BLOCK IoStatusBlock
,
563 IN ULONG ShareAccess
,
564 IN ULONG CreateDisposition
,
565 IN ULONG CreateOptions
,
566 IN ULONG WriteModeMessage
,
567 IN ULONG ReadModeMessage
,
568 IN ULONG NonBlocking
,
569 IN ULONG MaxInstances
,
570 IN ULONG InBufferSize
,
571 IN ULONG OutBufferSize
,
572 IN PLARGE_INTEGER DefaultTimeOut
577 ZwCreateNamedPipeFile(
578 OUT PHANDLE NamedPipeFileHandle
,
579 IN ACCESS_MASK DesiredAccess
,
580 IN POBJECT_ATTRIBUTES ObjectAttributes
,
581 OUT PIO_STATUS_BLOCK IoStatusBlock
,
582 IN ULONG ShareAccess
,
583 IN ULONG CreateDisposition
,
584 IN ULONG CreateOptions
,
585 IN ULONG WriteModeMessage
,
586 IN ULONG ReadModeMessage
,
587 IN ULONG NonBlocking
,
588 IN ULONG MaxInstances
,
589 IN ULONG InBufferSize
,
590 IN ULONG OutBufferSize
,
591 IN PLARGE_INTEGER DefaultTimeOut
597 IN PUNICODE_STRING FileName
,
598 IN PLARGE_INTEGER InitialSize
,
599 IN PLARGE_INTEGER MaxiumSize
,
606 IN PUNICODE_STRING FileName
,
607 IN PLARGE_INTEGER InitialSize
,
608 IN PLARGE_INTEGER MaxiumSize
,
616 POBJECT_ATTRIBUTES ObjectAttributes
,
617 ULONG MaxConnectInfoLength
,
619 ULONG NPMessageQueueSize OPTIONAL
626 POBJECT_ATTRIBUTES ObjectAttributes
,
627 ULONG MaxConnectInfoLength
,
629 ULONG NPMessageQueueSize OPTIONAL
635 OUT PHANDLE ProcessHandle
,
636 IN ACCESS_MASK DesiredAccess
,
637 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
638 IN HANDLE ParentProcess
,
639 IN BOOLEAN InheritObjectTable
,
640 IN HANDLE SectionHandle OPTIONAL
,
641 IN HANDLE DebugPort OPTIONAL
,
642 IN HANDLE ExceptionPort OPTIONAL
648 OUT PHANDLE ProcessHandle
,
649 IN ACCESS_MASK DesiredAccess
,
650 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
651 IN HANDLE ParentProcess
,
652 IN BOOLEAN InheritObjectTable
,
653 IN HANDLE SectionHandle OPTIONAL
,
654 IN HANDLE DebugPort OPTIONAL
,
655 IN HANDLE ExceptionPort OPTIONAL
661 OUT PHANDLE ProfileHandle
,
662 IN HANDLE ProcessHandle
,
665 IN ULONG Granularity
,
667 IN ULONG ProfilingSize
,
668 IN KPROFILE_SOURCE Source
,
669 IN KAFFINITY ProcessorMask
675 OUT PHANDLE ProfileHandle
,
676 IN POBJECT_ATTRIBUTES ObjectAttributes
,
679 IN ULONG Granularity
,
681 IN ULONG ProfilingSize
,
682 IN ULONG ClockSource
,
683 IN ULONG ProcessorMask
689 OUT PHANDLE SectionHandle
,
690 IN ACCESS_MASK DesiredAccess
,
691 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
692 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
693 IN ULONG SectionPageProtection OPTIONAL
,
694 IN ULONG AllocationAttributes
,
695 IN HANDLE FileHandle OPTIONAL
701 OUT PHANDLE SectionHandle
,
702 IN ACCESS_MASK DesiredAccess
,
703 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
704 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
705 IN ULONG SectionPageProtection OPTIONAL
,
706 IN ULONG AllocationAttributes
,
707 IN HANDLE FileHandle OPTIONAL
713 OUT PHANDLE SemaphoreHandle
,
714 IN ACCESS_MASK DesiredAccess
,
715 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
716 IN LONG InitialCount
,
723 OUT PHANDLE SemaphoreHandle
,
724 IN ACCESS_MASK DesiredAccess
,
725 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
726 IN LONG InitialCount
,
732 NtCreateSymbolicLinkObject(
733 OUT PHANDLE SymbolicLinkHandle
,
734 IN ACCESS_MASK DesiredAccess
,
735 IN POBJECT_ATTRIBUTES ObjectAttributes
,
736 IN PUNICODE_STRING Name
741 ZwCreateSymbolicLinkObject(
742 OUT PHANDLE SymbolicLinkHandle
,
743 IN ACCESS_MASK DesiredAccess
,
744 IN POBJECT_ATTRIBUTES ObjectAttributes
,
745 IN PUNICODE_STRING Name
751 OUT PHANDLE ThreadHandle
,
752 IN ACCESS_MASK DesiredAccess
,
753 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
754 IN HANDLE ProcessHandle
,
755 OUT PCLIENT_ID ClientId
,
756 IN PCONTEXT ThreadContext
,
757 IN PINITIAL_TEB UserStack
,
758 IN BOOLEAN CreateSuspended
764 OUT PHANDLE ThreadHandle
,
765 IN ACCESS_MASK DesiredAccess
,
766 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
767 IN HANDLE ProcessHandle
,
768 OUT PCLIENT_ID ClientId
,
769 IN PCONTEXT ThreadContext
,
770 IN PINITIAL_TEB UserStack
,
771 IN BOOLEAN CreateSuspended
777 OUT PHANDLE TimerHandle
,
778 IN ACCESS_MASK DesiredAccess
,
779 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
780 IN TIMER_TYPE TimerType
786 OUT PHANDLE TimerHandle
,
787 IN ACCESS_MASK DesiredAccess
,
788 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
789 IN TIMER_TYPE TimerType
795 OUT PHANDLE TokenHandle
,
796 IN ACCESS_MASK DesiredAccess
,
797 IN POBJECT_ATTRIBUTES ObjectAttributes
,
798 IN TOKEN_TYPE TokenType
,
799 IN PLUID AuthenticationId
,
800 IN PLARGE_INTEGER ExpirationTime
,
801 IN PTOKEN_USER TokenUser
,
802 IN PTOKEN_GROUPS TokenGroups
,
803 IN PTOKEN_PRIVILEGES TokenPrivileges
,
804 IN PTOKEN_OWNER TokenOwner
,
805 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
806 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
807 IN PTOKEN_SOURCE TokenSource
813 OUT PHANDLE TokenHandle
,
814 IN ACCESS_MASK DesiredAccess
,
815 IN POBJECT_ATTRIBUTES ObjectAttributes
,
816 IN TOKEN_TYPE TokenType
,
817 IN PLUID AuthenticationId
,
818 IN PLARGE_INTEGER ExpirationTime
,
819 IN PTOKEN_USER TokenUser
,
820 IN PTOKEN_GROUPS TokenGroups
,
821 IN PTOKEN_PRIVILEGES TokenPrivileges
,
822 IN PTOKEN_OWNER TokenOwner
,
823 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
824 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
825 IN PTOKEN_SOURCE TokenSource
830 NtCreateWaitablePort(
832 POBJECT_ATTRIBUTES ObjectAttributes
,
833 ULONG MaxConnectInfoLength
,
835 ULONG NPMessageQueueSize OPTIONAL
840 ZwCreateWaitablePort(
842 POBJECT_ATTRIBUTES ObjectAttributes
,
843 ULONG MaxConnectInfoLength
,
845 ULONG NPMessageQueueSize OPTIONAL
851 IN BOOLEAN Alertable
,
852 IN LARGE_INTEGER
*Interval
858 IN BOOLEAN Alertable
,
859 IN LARGE_INTEGER
*Interval
877 IN PUNICODE_STRING EntryName
,
878 IN PUNICODE_STRING EntryValue
884 IN PUNICODE_STRING EntryName
,
885 IN PUNICODE_STRING EntryValue
891 IN POBJECT_ATTRIBUTES ObjectAttributes
897 IN POBJECT_ATTRIBUTES ObjectAttributes
914 NtDeleteObjectAuditAlarm(
915 IN PUNICODE_STRING SubsystemName
,
917 IN BOOLEAN GenerateOnClose
922 ZwDeleteObjectAuditAlarm(
923 IN PUNICODE_STRING SubsystemName
,
925 IN BOOLEAN GenerateOnClose
932 IN PUNICODE_STRING ValueName
939 IN PUNICODE_STRING ValueName
944 NtDeviceIoControlFile(
945 IN HANDLE DeviceHandle
,
946 IN HANDLE Event OPTIONAL
,
947 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
948 IN PVOID UserApcContext OPTIONAL
,
949 OUT PIO_STATUS_BLOCK IoStatusBlock
,
950 IN ULONG IoControlCode
,
951 IN PVOID InputBuffer
,
952 IN ULONG InputBufferSize
,
953 OUT PVOID OutputBuffer
,
954 IN ULONG OutputBufferSize
959 ZwDeviceIoControlFile(
960 IN HANDLE DeviceHandle
,
961 IN HANDLE Event OPTIONAL
,
962 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
963 IN PVOID UserApcContext OPTIONAL
,
964 OUT PIO_STATUS_BLOCK IoStatusBlock
,
965 IN ULONG IoControlCode
,
966 IN PVOID InputBuffer
,
967 IN ULONG InputBufferSize
,
968 OUT PVOID OutputBuffer
,
969 IN ULONG OutputBufferSize
975 IN PUNICODE_STRING DisplayString
981 IN PUNICODE_STRING DisplayString
987 IN HANDLE SourceProcessHandle
,
988 IN HANDLE SourceHandle
,
989 IN HANDLE TargetProcessHandle
,
990 OUT PHANDLE TargetHandle
,
991 IN ACCESS_MASK DesiredAccess
,
992 IN ULONG HandleAttributes
,
999 IN HANDLE SourceProcessHandle
,
1000 IN HANDLE SourceHandle
,
1001 IN HANDLE TargetProcessHandle
,
1002 OUT PHANDLE TargetHandle
,
1003 IN ACCESS_MASK DesiredAccess
,
1004 IN ULONG HandleAttributes
,
1011 IN HANDLE ExistingTokenHandle
,
1012 IN ACCESS_MASK DesiredAccess
,
1013 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1014 IN BOOLEAN EffectiveOnly
,
1015 IN TOKEN_TYPE TokenType
,
1016 OUT PHANDLE NewTokenHandle
1021 NtEnumerateBootEntries(
1028 ZwEnumerateBootEntries(
1036 IN HANDLE KeyHandle
,
1038 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1039 OUT PVOID KeyInformation
,
1041 OUT PULONG ResultLength
1047 IN HANDLE KeyHandle
,
1049 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1050 OUT PVOID KeyInformation
,
1052 OUT PULONG ResultLength
1057 NtEnumerateValueKey(
1058 IN HANDLE KeyHandle
,
1060 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1061 OUT PVOID KeyValueInformation
,
1063 OUT PULONG ResultLength
1068 ZwEnumerateValueKey(
1069 IN HANDLE KeyHandle
,
1071 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1072 OUT PVOID KeyValueInformation
,
1074 OUT PULONG ResultLength
1080 IN HANDLE SectionHandle
,
1081 IN PLARGE_INTEGER NewMaximumSize
1087 IN HANDLE SectionHandle
,
1088 IN PLARGE_INTEGER NewMaximumSize
1095 IN ULONG AtomNameLength
,
1096 OUT PRTL_ATOM Atom OPTIONAL
1103 IN ULONG AtomNameLength
,
1104 OUT PRTL_ATOM Atom OPTIONAL
1110 IN HANDLE FileHandle
,
1111 OUT PIO_STATUS_BLOCK IoStatusBlock
1117 IN HANDLE FileHandle
,
1118 OUT PIO_STATUS_BLOCK IoStatusBlock
1123 NtFlushInstructionCache(
1124 IN HANDLE ProcessHandle
,
1125 IN PVOID BaseAddress
,
1126 IN UINT NumberOfBytesToFlush
1143 NtFlushVirtualMemory(
1144 IN HANDLE ProcessHandle
,
1145 IN PVOID BaseAddress
,
1146 IN ULONG NumberOfBytesToFlush
,
1147 OUT PULONG NumberOfBytesFlushed OPTIONAL
1152 NtFlushWriteBuffer(VOID
);
1156 ZwFlushWriteBuffer(VOID
);
1160 NtFreeVirtualMemory(
1161 IN HANDLE ProcessHandle
,
1162 IN PVOID
*BaseAddress
,
1163 IN PULONG RegionSize
,
1169 ZwFreeVirtualMemory(
1170 IN HANDLE ProcessHandle
,
1171 IN PVOID
*BaseAddress
,
1172 IN PULONG RegionSize
,
1179 IN HANDLE DeviceHandle
,
1180 IN HANDLE Event OPTIONAL
,
1181 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1182 IN PVOID ApcContext OPTIONAL
,
1183 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1184 IN ULONG IoControlCode
,
1185 IN PVOID InputBuffer
,
1186 IN ULONG InputBufferSize
,
1187 OUT PVOID OutputBuffer
,
1188 IN ULONG OutputBufferSize
1194 IN HANDLE DeviceHandle
,
1195 IN HANDLE Event OPTIONAL
,
1196 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1197 IN PVOID ApcContext OPTIONAL
,
1198 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1199 IN ULONG IoControlCode
,
1200 IN PVOID InputBuffer
,
1201 IN ULONG InputBufferSize
,
1202 OUT PVOID OutputBuffer
,
1203 IN ULONG OutputBufferSize
1209 IN HANDLE ThreadHandle
,
1210 OUT PCONTEXT Context
1216 IN HANDLE ThreadHandle
,
1217 OUT PCONTEXT Context
1225 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1243 NtImpersonateClientOfPort(
1245 PLPC_MESSAGE ClientMessage
1250 ZwImpersonateClientOfPort(
1252 PLPC_MESSAGE ClientMessage
1257 NtImpersonateThread(
1258 IN HANDLE ThreadHandle
,
1259 IN HANDLE ThreadToImpersonate
,
1260 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1265 ZwImpersonateThread(
1266 IN HANDLE ThreadHandle
,
1267 IN HANDLE ThreadToImpersonate
,
1268 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1273 NtInitiatePowerAction(
1274 POWER_ACTION SystemAction
,
1275 SYSTEM_POWER_STATE MinSystemState
,
1277 BOOLEAN Asynchronous
1282 ZwInitiatePowerAction(
1283 POWER_ACTION SystemAction
,
1284 SYSTEM_POWER_STATE MinSystemState
,
1286 BOOLEAN Asynchronous
1291 NtInitializeRegistry(
1297 ZwInitializeRegistry(
1304 IN HANDLE ProcessHandle
,
1305 IN HANDLE JobHandle OPTIONAL
1311 IN HANDLE ProcessHandle
,
1312 IN HANDLE JobHandle OPTIONAL
1317 NtListenPort(HANDLE PortHandle
,
1318 PLPC_MESSAGE LpcMessage
1323 ZwListenPort(HANDLE PortHandle
,
1324 PLPC_MESSAGE LpcMessage
1330 IN PUNICODE_STRING DriverServiceName
1336 IN PUNICODE_STRING DriverServiceName
1342 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1343 IN POBJECT_ATTRIBUTES FileObjectAttributes
1349 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1350 IN POBJECT_ATTRIBUTES FileObjectAttributes
1356 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1357 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1364 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1365 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1372 IN HANDLE FileHandle
,
1373 IN HANDLE Event OPTIONAL
,
1374 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1375 IN PVOID ApcContext OPTIONAL
,
1376 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1377 IN PLARGE_INTEGER ByteOffset
,
1378 IN PLARGE_INTEGER Length
,
1380 IN BOOLEAN FailImmediatedly
,
1381 IN BOOLEAN ExclusiveLock
1387 IN HANDLE FileHandle
,
1388 IN HANDLE Event OPTIONAL
,
1389 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1390 IN PVOID ApcContext OPTIONAL
,
1391 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1392 IN PLARGE_INTEGER ByteOffset
,
1393 IN PLARGE_INTEGER Length
,
1395 IN BOOLEAN FailImmediatedly
,
1396 IN BOOLEAN ExclusiveLock
1401 NtLockVirtualMemory(
1402 HANDLE ProcessHandle
,
1404 ULONG NumberOfBytesToLock
,
1405 PULONG NumberOfBytesLocked
1410 ZwLockVirtualMemory(
1411 HANDLE ProcessHandle
,
1413 ULONG NumberOfBytesToLock
,
1414 PULONG NumberOfBytesLocked
1419 NtMakePermanentObject(
1425 ZwMakePermanentObject(
1431 NtMakeTemporaryObject(
1437 ZwMakeTemporaryObject(
1444 IN HANDLE SectionHandle
,
1445 IN HANDLE ProcessHandle
,
1446 IN OUT PVOID
*BaseAddress
,
1448 IN ULONG CommitSize
,
1449 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1450 IN OUT PULONG ViewSize
,
1451 IN SECTION_INHERIT InheritDisposition
,
1452 IN ULONG AllocationType
,
1453 IN ULONG AccessProtection
1459 IN HANDLE SectionHandle
,
1460 IN HANDLE ProcessHandle
,
1461 IN OUT PVOID
*BaseAddress
,
1463 IN ULONG CommitSize
,
1464 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1465 IN OUT PULONG ViewSize
,
1466 IN SECTION_INHERIT InheritDisposition
,
1467 IN ULONG AllocationType
,
1468 IN ULONG AccessProtection
1473 NtNotifyChangeDirectoryFile(
1474 IN HANDLE FileHandle
,
1475 IN HANDLE Event OPTIONAL
,
1476 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1477 IN PVOID ApcContext OPTIONAL
,
1478 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1480 IN ULONG BufferSize
,
1481 IN ULONG CompletionFilter
,
1482 IN BOOLEAN WatchTree
1487 ZwNotifyChangeDirectoryFile(
1488 IN HANDLE FileHandle
,
1489 IN HANDLE Event OPTIONAL
,
1490 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1491 IN PVOID ApcContext OPTIONAL
,
1492 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1494 IN ULONG BufferSize
,
1495 IN ULONG CompletionFilter
,
1496 IN BOOLEAN WatchTree
1502 IN HANDLE KeyHandle
,
1504 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1505 IN PVOID ApcContext OPTIONAL
,
1506 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1507 IN ULONG CompletionFilter
,
1508 IN BOOLEAN Asynchroneous
,
1509 OUT PVOID ChangeBuffer
,
1511 IN BOOLEAN WatchSubtree
1517 IN HANDLE KeyHandle
,
1519 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1520 IN PVOID ApcContext OPTIONAL
,
1521 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1522 IN ULONG CompletionFilter
,
1523 IN BOOLEAN Asynchroneous
,
1524 OUT PVOID ChangeBuffer
,
1526 IN BOOLEAN WatchSubtree
1531 NtOpenDirectoryObject(
1532 OUT PHANDLE FileHandle
,
1533 IN ACCESS_MASK DesiredAccess
,
1534 IN POBJECT_ATTRIBUTES ObjectAttributes
1539 ZwOpenDirectoryObject(
1540 OUT PHANDLE FileHandle
,
1541 IN ACCESS_MASK DesiredAccess
,
1542 IN POBJECT_ATTRIBUTES ObjectAttributes
1548 OUT PHANDLE EventHandle
,
1549 IN ACCESS_MASK DesiredAccess
,
1550 IN POBJECT_ATTRIBUTES ObjectAttributes
1556 OUT PHANDLE EventHandle
,
1557 IN ACCESS_MASK DesiredAccess
,
1558 IN POBJECT_ATTRIBUTES ObjectAttributes
1564 OUT PHANDLE EventPairHandle
,
1565 IN ACCESS_MASK DesiredAccess
,
1566 IN POBJECT_ATTRIBUTES ObjectAttributes
1572 OUT PHANDLE EventPairHandle
,
1573 IN ACCESS_MASK DesiredAccess
,
1574 IN POBJECT_ATTRIBUTES ObjectAttributes
1580 OUT PHANDLE FileHandle
,
1581 IN ACCESS_MASK DesiredAccess
,
1582 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1583 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1584 IN ULONG ShareAccess
,
1585 IN ULONG OpenOptions
1591 OUT PHANDLE FileHandle
,
1592 IN ACCESS_MASK DesiredAccess
,
1593 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1594 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1595 IN ULONG ShareAccess
,
1596 IN ULONG OpenOptions
1602 OUT PHANDLE CompetionPort
,
1603 IN ACCESS_MASK DesiredAccess
,
1604 IN POBJECT_ATTRIBUTES ObjectAttributes
1610 OUT PHANDLE CompetionPort
,
1611 IN ACCESS_MASK DesiredAccess
,
1612 IN POBJECT_ATTRIBUTES ObjectAttributes
1619 ACCESS_MASK DesiredAccess
,
1620 POBJECT_ATTRIBUTES ObjectAttributes
1627 ACCESS_MASK DesiredAccess
,
1628 POBJECT_ATTRIBUTES ObjectAttributes
1634 OUT PHANDLE KeyHandle
,
1635 IN ACCESS_MASK DesiredAccess
,
1636 IN POBJECT_ATTRIBUTES ObjectAttributes
1642 OUT PHANDLE KeyHandle
,
1643 IN ACCESS_MASK DesiredAccess
,
1644 IN POBJECT_ATTRIBUTES ObjectAttributes
1650 OUT PHANDLE MutantHandle
,
1651 IN ACCESS_MASK DesiredAccess
,
1652 IN POBJECT_ATTRIBUTES ObjectAttributes
1658 OUT PHANDLE MutantHandle
,
1659 IN ACCESS_MASK DesiredAccess
,
1660 IN POBJECT_ATTRIBUTES ObjectAttributes
1665 NtOpenObjectAuditAlarm(
1666 IN PUNICODE_STRING SubsystemName
,
1668 IN PUNICODE_STRING ObjectTypeName
,
1669 IN PUNICODE_STRING ObjectName
,
1670 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1671 IN HANDLE ClientToken
,
1672 IN ULONG DesiredAccess
,
1673 IN ULONG GrantedAccess
,
1674 IN PPRIVILEGE_SET Privileges
,
1675 IN BOOLEAN ObjectCreation
,
1676 IN BOOLEAN AccessGranted
,
1677 OUT PBOOLEAN GenerateOnClose
1682 ZwOpenObjectAuditAlarm(
1683 IN PUNICODE_STRING SubsystemName
,
1685 IN PUNICODE_STRING ObjectTypeName
,
1686 IN PUNICODE_STRING ObjectName
,
1687 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1688 IN HANDLE ClientToken
,
1689 IN ULONG DesiredAccess
,
1690 IN ULONG GrantedAccess
,
1691 IN PPRIVILEGE_SET Privileges
,
1692 IN BOOLEAN ObjectCreation
,
1693 IN BOOLEAN AccessGranted
,
1694 OUT PBOOLEAN GenerateOnClose
1700 OUT PHANDLE ProcessHandle
,
1701 IN ACCESS_MASK DesiredAccess
,
1702 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1703 IN PCLIENT_ID ClientId
1709 OUT PHANDLE ProcessHandle
,
1710 IN ACCESS_MASK DesiredAccess
,
1711 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1712 IN PCLIENT_ID ClientId
1718 IN HANDLE ProcessHandle
,
1719 IN ACCESS_MASK DesiredAccess
,
1720 OUT PHANDLE TokenHandle
1726 IN HANDLE ProcessHandle
,
1727 IN ACCESS_MASK DesiredAccess
,
1728 OUT PHANDLE TokenHandle
1733 NtOpenProcessTokenEx(
1734 IN HANDLE ProcessHandle
,
1735 IN ACCESS_MASK DesiredAccess
,
1736 IN ULONG HandleAttributes
,
1737 OUT PHANDLE TokenHandle
1742 ZwOpenProcessTokenEx(
1743 IN HANDLE ProcessHandle
,
1744 IN ACCESS_MASK DesiredAccess
,
1745 IN ULONG HandleAttributes
,
1746 OUT PHANDLE TokenHandle
1752 OUT PHANDLE SectionHandle
,
1753 IN ACCESS_MASK DesiredAccess
,
1754 IN POBJECT_ATTRIBUTES ObjectAttributes
1760 OUT PHANDLE SectionHandle
,
1761 IN ACCESS_MASK DesiredAccess
,
1762 IN POBJECT_ATTRIBUTES ObjectAttributes
1768 OUT PHANDLE SemaphoreHandle
,
1769 IN ACCESS_MASK DesiredAcces
,
1770 IN POBJECT_ATTRIBUTES ObjectAttributes
1776 OUT PHANDLE SemaphoreHandle
,
1777 IN ACCESS_MASK DesiredAcces
,
1778 IN POBJECT_ATTRIBUTES ObjectAttributes
1783 NtOpenSymbolicLinkObject(
1784 OUT PHANDLE SymbolicLinkHandle
,
1785 IN ACCESS_MASK DesiredAccess
,
1786 IN POBJECT_ATTRIBUTES ObjectAttributes
1791 ZwOpenSymbolicLinkObject(
1792 OUT PHANDLE SymbolicLinkHandle
,
1793 IN ACCESS_MASK DesiredAccess
,
1794 IN POBJECT_ATTRIBUTES ObjectAttributes
1800 OUT PHANDLE ThreadHandle
,
1801 IN ACCESS_MASK DesiredAccess
,
1802 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1803 IN PCLIENT_ID ClientId
1809 OUT PHANDLE ThreadHandle
,
1810 IN ACCESS_MASK DesiredAccess
,
1811 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1812 IN PCLIENT_ID ClientId
1818 IN HANDLE ThreadHandle
,
1819 IN ACCESS_MASK DesiredAccess
,
1820 IN BOOLEAN OpenAsSelf
,
1821 OUT PHANDLE TokenHandle
1827 IN HANDLE ThreadHandle
,
1828 IN ACCESS_MASK DesiredAccess
,
1829 IN BOOLEAN OpenAsSelf
,
1830 OUT PHANDLE TokenHandle
1835 NtOpenThreadTokenEx(
1836 IN HANDLE ThreadHandle
,
1837 IN ACCESS_MASK DesiredAccess
,
1838 IN BOOLEAN OpenAsSelf
,
1839 IN ULONG HandleAttributes
,
1840 OUT PHANDLE TokenHandle
1845 ZwOpenThreadTokenEx(
1846 IN HANDLE ThreadHandle
,
1847 IN ACCESS_MASK DesiredAccess
,
1848 IN BOOLEAN OpenAsSelf
,
1849 IN ULONG HandleAttributes
,
1850 OUT PHANDLE TokenHandle
1856 OUT PHANDLE TimerHandle
,
1857 IN ACCESS_MASK DesiredAccess
,
1858 IN POBJECT_ATTRIBUTES ObjectAttributes
1863 OUT PHANDLE TimerHandle
,
1864 IN ACCESS_MASK DesiredAccess
,
1865 IN POBJECT_ATTRIBUTES ObjectAttributes
1871 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
1872 IN OUT PVOID Buffer
,
1879 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1881 ULONG InputBufferLength
,
1883 ULONG OutputBufferLength
1889 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1891 ULONG InputBufferLength
,
1893 ULONG OutputBufferLength
1899 IN HANDLE ClientToken
,
1900 IN PPRIVILEGE_SET RequiredPrivileges
,
1907 IN HANDLE ClientToken
,
1908 IN PPRIVILEGE_SET RequiredPrivileges
,
1914 NtPrivilegedServiceAuditAlarm(
1915 IN PUNICODE_STRING SubsystemName
,
1916 IN PUNICODE_STRING ServiceName
,
1917 IN HANDLE ClientToken
,
1918 IN PPRIVILEGE_SET Privileges
,
1919 IN BOOLEAN AccessGranted
1924 ZwPrivilegedServiceAuditAlarm(
1925 IN PUNICODE_STRING SubsystemName
,
1926 IN PUNICODE_STRING ServiceName
,
1927 IN HANDLE ClientToken
,
1928 IN PPRIVILEGE_SET Privileges
,
1929 IN BOOLEAN AccessGranted
1934 NtPrivilegeObjectAuditAlarm(
1935 IN PUNICODE_STRING SubsystemName
,
1937 IN HANDLE ClientToken
,
1938 IN ULONG DesiredAccess
,
1939 IN PPRIVILEGE_SET Privileges
,
1940 IN BOOLEAN AccessGranted
1945 ZwPrivilegeObjectAuditAlarm(
1946 IN PUNICODE_STRING SubsystemName
,
1948 IN HANDLE ClientToken
,
1949 IN ULONG DesiredAccess
,
1950 IN PPRIVILEGE_SET Privileges
,
1951 IN BOOLEAN AccessGranted
1956 NtProtectVirtualMemory(
1957 IN HANDLE ProcessHandle
,
1958 IN PVOID
*BaseAddress
,
1959 IN ULONG
*NumberOfBytesToProtect
,
1960 IN ULONG NewAccessProtection
,
1961 OUT PULONG OldAccessProtection
1966 ZwProtectVirtualMemory(
1967 IN HANDLE ProcessHandle
,
1968 IN PVOID
*BaseAddress
,
1969 IN ULONG
*NumberOfBytesToProtect
,
1970 IN ULONG NewAccessProtection
,
1971 OUT PULONG OldAccessProtection
1977 IN HANDLE EventHandle
,
1978 IN PLONG PulseCount OPTIONAL
1984 IN HANDLE EventHandle
,
1985 IN PLONG PulseCount OPTIONAL
1990 NtQueryAttributesFile(
1991 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1992 OUT PFILE_BASIC_INFORMATION FileInformation
1997 ZwQueryAttributesFile(
1998 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1999 OUT PFILE_BASIC_INFORMATION FileInformation
2005 NtQueryBootEntryOrder(
2012 ZwQueryBootEntryOrder(
2032 NtQueryDefaultLocale(
2033 IN BOOLEAN UserProfile
,
2034 OUT PLCID DefaultLocaleId
2039 ZwQueryDefaultLocale(
2040 IN BOOLEAN UserProfile
,
2041 OUT PLCID DefaultLocaleId
2046 NtQueryDefaultUILanguage(
2052 ZwQueryDefaultUILanguage(
2058 NtQueryDirectoryFile(
2059 IN HANDLE FileHandle
,
2060 IN HANDLE Event OPTIONAL
,
2061 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2062 IN PVOID ApcContext OPTIONAL
,
2063 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2064 OUT PVOID FileInformation
,
2066 IN FILE_INFORMATION_CLASS FileInformationClass
,
2067 IN BOOLEAN ReturnSingleEntry
,
2068 IN PUNICODE_STRING FileName OPTIONAL
,
2069 IN BOOLEAN RestartScan
2074 ZwQueryDirectoryFile(
2075 IN HANDLE FileHandle
,
2076 IN HANDLE Event OPTIONAL
,
2077 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2078 IN PVOID ApcContext OPTIONAL
,
2079 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2080 OUT PVOID FileInformation
,
2082 IN FILE_INFORMATION_CLASS FileInformationClass
,
2083 IN BOOLEAN ReturnSingleEntry
,
2084 IN PUNICODE_STRING FileName OPTIONAL
,
2085 IN BOOLEAN RestartScan
2090 NtQueryDirectoryObject(
2091 IN HANDLE DirectoryHandle
,
2093 IN ULONG BufferLength
,
2094 IN BOOLEAN ReturnSingleEntry
,
2095 IN BOOLEAN RestartScan
,
2096 IN OUT PULONG Context
,
2097 OUT PULONG ReturnLength OPTIONAL
2102 ZwQueryDirectoryObject(
2103 IN HANDLE DirectoryHandle
,
2105 IN ULONG BufferLength
,
2106 IN BOOLEAN ReturnSingleEntry
,
2107 IN BOOLEAN RestartScan
,
2108 IN OUT PULONG Context
,
2109 OUT PULONG ReturnLength OPTIONAL
2115 IN HANDLE FileHandle
,
2116 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2119 IN BOOLEAN ReturnSingleEntry
,
2120 IN PVOID EaList OPTIONAL
,
2121 IN ULONG EaListLength
,
2122 IN PULONG EaIndex OPTIONAL
,
2123 IN BOOLEAN RestartScan
2129 IN HANDLE FileHandle
,
2130 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2133 IN BOOLEAN ReturnSingleEntry
,
2134 IN PVOID EaList OPTIONAL
,
2135 IN ULONG EaListLength
,
2136 IN PULONG EaIndex OPTIONAL
,
2137 IN BOOLEAN RestartScan
2143 IN HANDLE EventHandle
,
2144 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2145 OUT PVOID EventInformation
,
2146 IN ULONG EventInformationLength
,
2147 OUT PULONG ReturnLength
2152 IN HANDLE EventHandle
,
2153 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2154 OUT PVOID EventInformation
,
2155 IN ULONG EventInformationLength
,
2156 OUT PULONG ReturnLength
2161 NtQueryFullAttributesFile(
2162 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2163 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2168 ZwQueryFullAttributesFile(
2169 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2170 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2175 NtQueryInformationAtom(
2177 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2178 OUT PVOID AtomInformation
,
2179 IN ULONG AtomInformationLength
,
2180 OUT PULONG ReturnLength OPTIONAL
2185 ZwQueryInformationAtom(
2187 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2188 OUT PVOID AtomInformation
,
2189 IN ULONG AtomInformationLength
,
2190 OUT PULONG ReturnLength OPTIONAL
2195 NtQueryInformationFile(
2196 IN HANDLE FileHandle
,
2197 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2198 OUT PVOID FileInformation
,
2200 IN FILE_INFORMATION_CLASS FileInformationClass
2205 ZwQueryInformationFile(
2207 PIO_STATUS_BLOCK IoStatusBlock
,
2208 PVOID FileInformation
,
2210 FILE_INFORMATION_CLASS FileInformationClass
2215 NtQueryInformationJobObject(
2217 JOBOBJECTINFOCLASS JobInformationClass
,
2218 PVOID JobInformation
,
2219 ULONG JobInformationLength
,
2225 ZwQueryInformationJobObject(
2227 JOBOBJECTINFOCLASS JobInformationClass
,
2228 PVOID JobInformation
,
2229 ULONG JobInformationLength
,
2235 NtQueryInformationPort(
2237 CINT PortInformationClass
,
2238 PVOID PortInformation
,
2239 ULONG PortInformationLength
,
2245 ZwQueryInformationPort(
2247 CINT PortInformationClass
,
2248 PVOID PortInformation
,
2249 ULONG PortInformationLength
,
2256 NtQueryInformationProcess(
2257 IN HANDLE ProcessHandle
,
2258 IN PROCESSINFOCLASS ProcessInformationClass
,
2259 OUT PVOID ProcessInformation
,
2260 IN ULONG ProcessInformationLength
,
2261 OUT PULONG ReturnLength OPTIONAL
2266 ZwQueryInformationProcess(
2267 IN HANDLE ProcessHandle
,
2268 IN PROCESSINFOCLASS ProcessInformationClass
,
2269 OUT PVOID ProcessInformation
,
2270 IN ULONG ProcessInformationLength
,
2271 OUT PULONG ReturnLength OPTIONAL
2277 NtQueryInformationThread(
2278 IN HANDLE ThreadHandle
,
2279 IN THREADINFOCLASS ThreadInformationClass
,
2280 OUT PVOID ThreadInformation
,
2281 IN ULONG ThreadInformationLength
,
2282 OUT PULONG ReturnLength
2287 ZwQueryInformationThread(
2288 IN HANDLE ThreadHandle
,
2289 IN THREADINFOCLASS ThreadInformationClass
,
2290 OUT PVOID ThreadInformation
,
2291 IN ULONG ThreadInformationLength
,
2292 OUT PULONG ReturnLength
2297 NtQueryInformationToken(
2298 IN HANDLE TokenHandle
,
2299 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2300 OUT PVOID TokenInformation
,
2301 IN ULONG TokenInformationLength
,
2302 OUT PULONG ReturnLength
2307 ZwQueryInformationToken(
2308 IN HANDLE TokenHandle
,
2309 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2310 OUT PVOID TokenInformation
,
2311 IN ULONG TokenInformationLength
,
2312 OUT PULONG ReturnLength
2317 NtQueryInstallUILanguage(
2323 ZwQueryInstallUILanguage(
2329 NtQueryIntervalProfile(
2330 IN KPROFILE_SOURCE ProfileSource
,
2336 ZwQueryIntervalProfile(
2337 OUT PULONG Interval
,
2338 OUT KPROFILE_SOURCE ClockSource
2343 NtQueryIoCompletion(
2344 IN HANDLE IoCompletionHandle
,
2345 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2346 OUT PVOID IoCompletionInformation
,
2347 IN ULONG IoCompletionInformationLength
,
2348 OUT PULONG ResultLength OPTIONAL
2353 ZwQueryIoCompletion(
2354 IN HANDLE IoCompletionHandle
,
2355 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2356 OUT PVOID IoCompletionInformation
,
2357 IN ULONG IoCompletionInformationLength
,
2358 OUT PULONG ResultLength OPTIONAL
2364 IN HANDLE KeyHandle
,
2365 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2366 OUT PVOID KeyInformation
,
2368 OUT PULONG ResultLength
2374 IN HANDLE KeyHandle
,
2375 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2376 OUT PVOID KeyInformation
,
2378 OUT PULONG ResultLength
2383 NtQueryQuotaInformationFile(
2384 IN HANDLE FileHandle
,
2385 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2388 IN BOOLEAN ReturnSingleEntry
,
2389 IN PVOID SidList OPTIONAL
,
2390 IN ULONG SidListLength
,
2391 IN PSID StartSid OPTIONAL
,
2392 IN BOOLEAN RestartScan
2397 ZwQueryQuotaInformationFile(
2398 IN HANDLE FileHandle
,
2399 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2402 IN BOOLEAN ReturnSingleEntry
,
2403 IN PVOID SidList OPTIONAL
,
2404 IN ULONG SidListLength
,
2405 IN PSID StartSid OPTIONAL
,
2406 IN BOOLEAN RestartScan
2411 NtQueryMultipleValueKey(
2412 IN HANDLE KeyHandle
,
2413 IN OUT PKEY_VALUE_ENTRY ValueList
,
2414 IN ULONG NumberOfValues
,
2416 IN OUT PULONG Length
,
2417 OUT PULONG ReturnLength
2422 ZwQueryMultipleValueKey(
2423 IN HANDLE KeyHandle
,
2424 IN OUT PKEY_VALUE_ENTRY ValueList
,
2425 IN ULONG NumberOfValues
,
2427 IN OUT PULONG Length
,
2428 OUT PULONG ReturnLength
2434 IN HANDLE MutantHandle
,
2435 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2436 OUT PVOID MutantInformation
,
2438 OUT PULONG ResultLength
2444 IN HANDLE MutantHandle
,
2445 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2446 OUT PVOID MutantInformation
,
2448 OUT PULONG ResultLength
2454 IN HANDLE ObjectHandle
,
2455 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2456 OUT PVOID ObjectInformation
,
2458 OUT PULONG ResultLength OPTIONAL
2464 IN HANDLE ObjectHandle
,
2465 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2466 OUT PVOID ObjectInformation
,
2468 OUT PULONG ResultLength OPTIONAL
2473 NtQueryPerformanceCounter(
2474 IN PLARGE_INTEGER Counter
,
2475 IN PLARGE_INTEGER Frequency
2480 ZwQueryPerformanceCounter(
2481 IN PLARGE_INTEGER Counter
,
2482 IN PLARGE_INTEGER Frequency
2488 IN HANDLE SectionHandle
,
2489 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2490 OUT PVOID SectionInformation
,
2492 OUT PULONG ResultLength
2498 IN HANDLE SectionHandle
,
2499 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2500 OUT PVOID SectionInformation
,
2502 OUT PULONG ResultLength
2507 NtQuerySecurityObject(
2509 IN SECURITY_INFORMATION SecurityInformation
,
2510 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2512 OUT PULONG ResultLength
2517 ZwQuerySecurityObject(
2519 IN SECURITY_INFORMATION SecurityInformation
,
2520 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2522 OUT PULONG ResultLength
2528 IN HANDLE SemaphoreHandle
,
2529 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2530 OUT PVOID SemaphoreInformation
,
2532 OUT PULONG ReturnLength
2538 IN HANDLE SemaphoreHandle
,
2539 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2540 OUT PVOID SemaphoreInformation
,
2542 OUT PULONG ReturnLength
2547 NtQuerySymbolicLinkObject(
2548 IN HANDLE SymLinkObjHandle
,
2549 OUT PUNICODE_STRING LinkTarget
,
2550 OUT PULONG DataWritten OPTIONAL
2555 ZwQuerySymbolicLinkObject(
2556 IN HANDLE SymLinkObjHandle
,
2557 OUT PUNICODE_STRING LinkName
,
2558 OUT PULONG DataWritten OPTIONAL
2563 NtQuerySystemEnvironmentValue(
2564 IN PUNICODE_STRING Name
,
2572 ZwQuerySystemEnvironmentValue(
2573 IN PUNICODE_STRING Name
,
2581 NtQuerySystemInformation(
2582 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2583 OUT PVOID SystemInformation
,
2585 OUT PULONG ResultLength
2590 ZwQuerySystemInformation(
2591 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2592 OUT PVOID SystemInformation
,
2594 OUT PULONG ResultLength
2600 OUT PLARGE_INTEGER CurrentTime
2606 OUT PLARGE_INTEGER CurrentTime
2612 IN HANDLE TimerHandle
,
2613 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2614 OUT PVOID TimerInformation
,
2616 OUT PULONG ResultLength
2622 IN HANDLE TimerHandle
,
2623 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2624 OUT PVOID TimerInformation
,
2626 OUT PULONG ResultLength
2631 NtQueryTimerResolution(
2632 OUT PULONG MinimumResolution
,
2633 OUT PULONG MaximumResolution
,
2634 OUT PULONG ActualResolution
2639 ZwQueryTimerResolution(
2640 OUT PULONG MinimumResolution
,
2641 OUT PULONG MaximumResolution
,
2642 OUT PULONG ActualResolution
2648 IN HANDLE KeyHandle
,
2649 IN PUNICODE_STRING ValueName
,
2650 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2651 OUT PVOID KeyValueInformation
,
2653 OUT PULONG ResultLength
2659 IN HANDLE KeyHandle
,
2660 IN PUNICODE_STRING ValueName
,
2661 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2662 OUT PVOID KeyValueInformation
,
2664 OUT PULONG ResultLength
2669 NtQueryVirtualMemory(
2670 IN HANDLE ProcessHandle
,
2672 IN IN CINT VirtualMemoryInformationClass
,
2673 OUT PVOID VirtualMemoryInformation
,
2675 OUT PULONG ResultLength
2680 ZwQueryVirtualMemory(
2681 IN HANDLE ProcessHandle
,
2683 IN IN CINT VirtualMemoryInformationClass
,
2684 OUT PVOID VirtualMemoryInformation
,
2686 OUT PULONG ResultLength
2691 NtQueryVolumeInformationFile(
2692 IN HANDLE FileHandle
,
2693 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2694 OUT PVOID FsInformation
,
2696 IN FS_INFORMATION_CLASS FsInformationClass
2701 ZwQueryVolumeInformationFile(
2702 IN HANDLE FileHandle
,
2703 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2704 OUT PVOID FsInformation
,
2706 IN FS_INFORMATION_CLASS FsInformationClass
2712 HANDLE ThreadHandle
,
2713 PKNORMAL_ROUTINE ApcRoutine
,
2714 PVOID NormalContext
,
2715 PVOID SystemArgument1
,
2716 PVOID SystemArgument2
2722 HANDLE ThreadHandle
,
2723 PKNORMAL_ROUTINE ApcRoutine
,
2724 PVOID NormalContext
,
2725 PVOID SystemArgument1
,
2726 PVOID SystemArgument2
2732 IN PEXCEPTION_RECORD ExceptionRecord
,
2733 IN PCONTEXT Context
,
2734 IN BOOLEAN SearchFrames
2740 IN PEXCEPTION_RECORD ExceptionRecord
,
2741 IN PCONTEXT Context
,
2742 IN BOOLEAN SearchFrames
2748 IN NTSTATUS ErrorStatus
,
2749 IN ULONG NumberOfParameters
,
2750 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2751 IN PVOID
*Parameters
,
2752 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2753 OUT PHARDERROR_RESPONSE Response
2759 IN NTSTATUS ErrorStatus
,
2760 IN ULONG NumberOfParameters
,
2761 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2762 IN PVOID
*Parameters
,
2763 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2764 OUT PHARDERROR_RESPONSE Response
2770 IN HANDLE FileHandle
,
2771 IN HANDLE Event OPTIONAL
,
2772 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2773 IN PVOID UserApcContext OPTIONAL
,
2774 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2776 IN ULONG BufferLength
,
2777 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2778 IN PULONG Key OPTIONAL
2784 IN HANDLE FileHandle
,
2785 IN HANDLE Event OPTIONAL
,
2786 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2787 IN PVOID UserApcContext OPTIONAL
,
2788 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2790 IN ULONG BufferLength
,
2791 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2792 IN PULONG Key OPTIONAL
2798 IN HANDLE FileHandle
,
2799 IN HANDLE Event OPTIONAL
,
2800 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2801 IN PVOID UserApcContext OPTIONAL
,
2802 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2803 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2804 IN ULONG BufferLength
,
2805 IN PLARGE_INTEGER ByteOffset
,
2806 IN PULONG Key OPTIONAL
2812 IN HANDLE FileHandle
,
2813 IN HANDLE Event OPTIONAL
,
2814 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2815 IN PVOID UserApcContext OPTIONAL
,
2816 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2817 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2818 IN ULONG BufferLength
,
2819 IN PLARGE_INTEGER ByteOffset
,
2820 IN PULONG Key OPTIONAL
2827 PLPC_MESSAGE Message
,
2838 PLPC_MESSAGE Message
,
2847 NtReadVirtualMemory(
2848 IN HANDLE ProcessHandle
,
2849 IN PVOID BaseAddress
,
2851 IN ULONG NumberOfBytesToRead
,
2852 OUT PULONG NumberOfBytesRead
2856 ZwReadVirtualMemory(
2857 IN HANDLE ProcessHandle
,
2858 IN PVOID BaseAddress
,
2860 IN ULONG NumberOfBytesToRead
,
2861 OUT PULONG NumberOfBytesRead
2866 NtRegisterThreadTerminatePort(
2867 HANDLE TerminationPort
2872 ZwRegisterThreadTerminatePort(
2873 HANDLE TerminationPort
2879 IN HANDLE MutantHandle
,
2880 IN PLONG ReleaseCount OPTIONAL
2886 IN HANDLE MutantHandle
,
2887 IN PLONG ReleaseCount OPTIONAL
2893 IN HANDLE SemaphoreHandle
,
2894 IN LONG ReleaseCount
,
2895 OUT PLONG PreviousCount
2901 IN HANDLE SemaphoreHandle
,
2902 IN LONG ReleaseCount
,
2903 OUT PLONG PreviousCount
2908 NtRemoveIoCompletion(
2909 IN HANDLE IoCompletionHandle
,
2910 OUT PVOID
*CompletionKey
,
2911 OUT PVOID
*CompletionContext
,
2912 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2913 IN PLARGE_INTEGER Timeout OPTIONAL
2918 ZwRemoveIoCompletion(
2919 IN HANDLE IoCompletionHandle
,
2920 OUT PVOID
*CompletionKey
,
2921 OUT PVOID
*CompletionContext
,
2922 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2923 IN PLARGE_INTEGER Timeout OPTIONAL
2929 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2931 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2937 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2939 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2946 PLPC_MESSAGE LpcReply
2953 PLPC_MESSAGE LpcReply
2958 NtReplyWaitReceivePort(
2961 PLPC_MESSAGE MessageReply
,
2962 PLPC_MESSAGE MessageRequest
2967 ZwReplyWaitReceivePort(
2970 PLPC_MESSAGE MessageReply
,
2971 PLPC_MESSAGE MessageRequest
2976 NtReplyWaitReplyPort(
2978 PLPC_MESSAGE ReplyMessage
2983 ZwReplyWaitReplyPort(
2985 PLPC_MESSAGE ReplyMessage
2992 PLPC_MESSAGE LpcMessage
);
2998 PLPC_MESSAGE LpcMessage
3003 NtRequestWaitReplyPort(
3005 PLPC_MESSAGE LpcReply
,
3006 PLPC_MESSAGE LpcRequest
3011 ZwRequestWaitReplyPort(
3013 PLPC_MESSAGE LpcReply
,
3014 PLPC_MESSAGE LpcRequest
3021 PLONG NumberOfWaitingThreads OPTIONAL
3028 PLONG NumberOfWaitingThreads OPTIONAL
3050 IN HANDLE ThreadHandle
,
3051 OUT PULONG SuspendCount
3057 IN HANDLE ThreadHandle
,
3058 OUT PULONG SuspendCount
3064 IN HANDLE ProcessHandle
3070 IN HANDLE ProcessHandle
3076 IN HANDLE KeyHandle
,
3077 IN HANDLE FileHandle
3082 IN HANDLE KeyHandle
,
3083 IN HANDLE FileHandle
3089 IN HANDLE KeyHandle
,
3090 IN HANDLE FileHandle
,
3097 IN HANDLE KeyHandle
,
3098 IN HANDLE FileHandle
,
3104 NtSetBootEntryOrder(
3111 ZwSetBootEntryOrder(
3133 IN HANDLE ThreadHandle
,
3139 IN HANDLE ThreadHandle
,
3146 IN BOOLEAN UserProfile
,
3147 IN LCID DefaultLocaleId
3153 IN BOOLEAN UserProfile
,
3154 IN LCID DefaultLocaleId
3159 NtSetDefaultUILanguage(
3165 ZwSetDefaultUILanguage(
3170 NtSetDefaultHardErrorPort(
3171 IN HANDLE PortHandle
3175 ZwSetDefaultHardErrorPort(
3176 IN HANDLE PortHandle
3182 IN HANDLE FileHandle
,
3183 IN PIO_STATUS_BLOCK IoStatusBlock
,
3191 IN HANDLE FileHandle
,
3192 IN PIO_STATUS_BLOCK IoStatusBlock
,
3200 IN HANDLE EventHandle
,
3201 OUT PLONG PreviousState OPTIONAL
3207 IN HANDLE EventHandle
,
3208 OUT PLONG PreviousState OPTIONAL
3214 IN HANDLE EventPairHandle
3220 IN HANDLE EventPairHandle
3224 NtSetHighWaitLowEventPair(
3225 IN HANDLE EventPairHandle
3229 ZwSetHighWaitLowEventPair(
3230 IN HANDLE EventPairHandle
3235 NtSetInformationFile(
3236 IN HANDLE FileHandle
,
3237 IN PIO_STATUS_BLOCK IoStatusBlock
,
3238 IN PVOID FileInformation
,
3240 IN FILE_INFORMATION_CLASS FileInformationClass
3245 ZwSetInformationFile(
3246 IN HANDLE FileHandle
,
3247 IN PIO_STATUS_BLOCK IoStatusBlock
,
3248 IN PVOID FileInformation
,
3250 IN FILE_INFORMATION_CLASS FileInformationClass
3255 NtSetInformationJobObject(
3257 JOBOBJECTINFOCLASS JobInformationClass
,
3258 PVOID JobInformation
,
3259 ULONG JobInformationLength
3264 ZwSetInformationJobObject(
3266 JOBOBJECTINFOCLASS JobInformationClass
,
3267 PVOID JobInformation
,
3268 ULONG JobInformationLength
3273 NtSetInformationKey(
3274 IN HANDLE KeyHandle
,
3275 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3276 IN PVOID KeyInformation
,
3277 IN ULONG KeyInformationLength
3282 ZwSetInformationKey(
3283 IN HANDLE KeyHandle
,
3284 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3285 IN PVOID KeyInformation
,
3286 IN ULONG KeyInformationLength
3291 NtSetInformationObject(
3292 IN HANDLE ObjectHandle
,
3293 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3294 IN PVOID ObjectInformation
,
3300 ZwSetInformationObject(
3301 IN HANDLE ObjectHandle
,
3302 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3303 IN PVOID ObjectInformation
,
3309 NtSetInformationProcess(
3310 IN HANDLE ProcessHandle
,
3311 IN PROCESSINFOCLASS ProcessInformationClass
,
3312 IN PVOID ProcessInformation
,
3313 IN ULONG ProcessInformationLength
3318 NtSetInformationThread(
3319 IN HANDLE ThreadHandle
,
3320 IN THREADINFOCLASS ThreadInformationClass
,
3321 IN PVOID ThreadInformation
,
3322 IN ULONG ThreadInformationLength
3326 ZwSetInformationThread(
3327 IN HANDLE ThreadHandle
,
3328 IN THREADINFOCLASS ThreadInformationClass
,
3329 IN PVOID ThreadInformation
,
3330 IN ULONG ThreadInformationLength
3335 NtSetInformationToken(
3336 IN HANDLE TokenHandle
,
3337 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3338 OUT PVOID TokenInformation
,
3339 IN ULONG TokenInformationLength
3344 ZwSetInformationToken(
3345 IN HANDLE TokenHandle
,
3346 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3347 OUT PVOID TokenInformation
,
3348 IN ULONG TokenInformationLength
3354 IN HANDLE IoCompletionPortHandle
,
3355 IN PVOID CompletionKey
,
3356 IN PVOID CompletionContext
,
3357 IN NTSTATUS CompletionStatus
,
3358 IN ULONG CompletionInformation
3364 IN HANDLE IoCompletionPortHandle
,
3365 IN PVOID CompletionKey
,
3366 IN PVOID CompletionContext
,
3367 IN NTSTATUS CompletionStatus
,
3368 IN ULONG CompletionInformation
3373 NtSetIntervalProfile(
3375 KPROFILE_SOURCE ClockSource
3380 ZwSetIntervalProfile(
3382 KPROFILE_SOURCE ClockSource
3389 LDT_ENTRY LdtEntry1
,
3408 NtSetLowWaitHighEventPair(
3414 ZwSetLowWaitHighEventPair(
3420 NtSetQuotaInformationFile(
3422 PIO_STATUS_BLOCK IoStatusBlock
,
3423 PFILE_QUOTA_INFORMATION Buffer
,
3429 ZwSetQuotaInformationFile(
3431 PIO_STATUS_BLOCK IoStatusBlock
,
3432 PFILE_QUOTA_INFORMATION Buffer
,
3438 NtSetSecurityObject(
3440 IN SECURITY_INFORMATION SecurityInformation
,
3441 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3446 ZwSetSecurityObject(
3448 IN SECURITY_INFORMATION SecurityInformation
,
3449 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3454 NtSetSystemEnvironmentValue(
3455 IN PUNICODE_STRING VariableName
,
3456 IN PUNICODE_STRING Value
3460 ZwSetSystemEnvironmentValue(
3461 IN PUNICODE_STRING VariableName
,
3462 IN PUNICODE_STRING Value
3467 NtSetSystemInformation(
3468 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3469 IN PVOID SystemInformation
,
3470 IN ULONG SystemInformationLength
3475 ZwSetSystemInformation(
3476 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3477 IN PVOID SystemInformation
,
3478 IN ULONG SystemInformationLength
3483 NtSetSystemPowerState(
3484 IN POWER_ACTION SystemAction
,
3485 IN SYSTEM_POWER_STATE MinSystemState
,
3492 IN PLARGE_INTEGER SystemTime
,
3493 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3499 IN PLARGE_INTEGER SystemTime
,
3500 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3506 IN HANDLE TimerHandle
,
3507 IN PLARGE_INTEGER DueTime
,
3508 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3509 IN PVOID TimerContext
,
3510 IN BOOLEAN WakeTimer
,
3511 IN LONG Period OPTIONAL
,
3512 OUT PBOOLEAN PreviousState OPTIONAL
3517 NtSetTimerResolution(
3518 IN ULONG RequestedResolution
,
3519 IN BOOLEAN SetOrUnset
,
3520 OUT PULONG ActualResolution
3525 ZwSetTimerResolution(
3526 IN ULONG RequestedResolution
,
3527 IN BOOLEAN SetOrUnset
,
3528 OUT PULONG ActualResolution
3546 IN HANDLE KeyHandle
,
3547 IN PUNICODE_STRING ValueName
,
3548 IN ULONG TitleIndex OPTIONAL
,
3557 IN HANDLE KeyHandle
,
3558 IN PUNICODE_STRING ValueName
,
3559 IN ULONG TitleIndex OPTIONAL
,
3567 NtSetVolumeInformationFile(
3568 IN HANDLE FileHandle
,
3569 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3570 IN PVOID FsInformation
,
3572 IN FS_INFORMATION_CLASS FsInformationClass
3577 ZwSetVolumeInformationFile(
3578 IN HANDLE FileHandle
,
3579 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3580 IN PVOID FsInformation
,
3582 IN FS_INFORMATION_CLASS FsInformationClass
3588 IN SHUTDOWN_ACTION Action
3594 IN SHUTDOWN_ACTION Action
3599 NtSignalAndWaitForSingleObject(
3600 IN HANDLE SignalObject
,
3601 IN HANDLE WaitObject
,
3602 IN BOOLEAN Alertable
,
3603 IN PLARGE_INTEGER Time
3608 ZwSignalAndWaitForSingleObject(
3609 IN HANDLE SignalObject
,
3610 IN HANDLE WaitObject
,
3611 IN BOOLEAN Alertable
,
3612 IN PLARGE_INTEGER Time
3618 HANDLE ProfileHandle
3624 HANDLE ProfileHandle
3630 HANDLE ProfileHandle
3636 HANDLE ProfileHandle
3642 IN HANDLE ProcessHandle
3648 IN HANDLE ProcessHandle
3654 IN HANDLE ThreadHandle
,
3655 IN PULONG PreviousSuspendCount
3661 IN HANDLE ThreadHandle
,
3662 IN PULONG PreviousSuspendCount
3667 NtSystemDebugControl(
3668 DEBUG_CONTROL_CODE ControlCode
,
3670 ULONG InputBufferLength
,
3672 ULONG OutputBufferLength
,
3679 IN HANDLE ProcessHandle
,
3680 IN NTSTATUS ExitStatus
3686 IN HANDLE ProcessHandle
,
3687 IN NTSTATUS ExitStatus
3693 IN HANDLE ThreadHandle
,
3694 IN NTSTATUS ExitStatus
3700 IN HANDLE ThreadHandle
,
3701 IN NTSTATUS ExitStatus
3706 NtTerminateJobObject(
3713 ZwTerminateJobObject(
3733 IN ULONG TraceHandle
,
3735 IN ULONG TraceHeaderLength
,
3736 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3742 IN ULONG TraceHandle
,
3744 IN ULONG TraceHeaderLength
,
3745 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3750 NtTranslateFilePath(
3758 ZwTranslateFilePath(
3767 IN PUNICODE_STRING DriverServiceName
3773 IN PUNICODE_STRING DriverServiceName
3779 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3785 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3791 IN HANDLE FileHandle
,
3792 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3793 IN PLARGE_INTEGER ByteOffset
,
3794 IN PLARGE_INTEGER Lenght
,
3795 OUT PULONG Key OPTIONAL
3801 IN HANDLE FileHandle
,
3802 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3803 IN PLARGE_INTEGER ByteOffset
,
3804 IN PLARGE_INTEGER Lenght
,
3805 OUT PULONG Key OPTIONAL
3810 NtUnlockVirtualMemory(
3811 IN HANDLE ProcessHandle
,
3812 IN PVOID BaseAddress
,
3813 IN ULONG NumberOfBytesToUnlock
,
3814 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3819 ZwUnlockVirtualMemory(
3820 IN HANDLE ProcessHandle
,
3821 IN PVOID BaseAddress
,
3822 IN ULONG NumberOfBytesToUnlock
,
3823 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3828 NtUnmapViewOfSection(
3829 IN HANDLE ProcessHandle
,
3830 IN PVOID BaseAddress
3835 ZwUnmapViewOfSection(
3836 IN HANDLE ProcessHandle
,
3837 IN PVOID BaseAddress
3850 IN ULONG RoutineIndex
,
3852 IN ULONG ArgumentLength
,
3853 OUT PVOID
* Result OPTIONAL
,
3854 OUT PULONG ResultLength OPTIONAL
3859 NtWaitForMultipleObjects(
3862 IN WAIT_TYPE WaitType
,
3863 IN BOOLEAN Alertable
,
3864 IN PLARGE_INTEGER Time
3869 ZwWaitForMultipleObjects(
3872 IN WAIT_TYPE WaitType
,
3873 IN BOOLEAN Alertable
,
3874 IN PLARGE_INTEGER Time
3879 NtWaitForSingleObject(
3881 IN BOOLEAN Alertable
,
3882 IN PLARGE_INTEGER Time
3887 ZwWaitForSingleObject(
3889 IN BOOLEAN Alertable
,
3890 IN PLARGE_INTEGER Time
3895 NtWaitHighEventPair(
3896 IN HANDLE EventPairHandle
3901 ZwWaitHighEventPair(
3902 IN HANDLE EventPairHandle
3908 IN HANDLE EventPairHandle
3914 IN HANDLE EventPairHandle
3920 IN HANDLE FileHandle
,
3921 IN HANDLE Event OPTIONAL
,
3922 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3923 IN PVOID ApcContext OPTIONAL
,
3924 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3927 IN PLARGE_INTEGER ByteOffset
,
3928 IN PULONG Key OPTIONAL
3934 IN HANDLE FileHandle
,
3935 IN HANDLE Event OPTIONAL
,
3936 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3937 IN PVOID ApcContext OPTIONAL
,
3938 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3941 IN PLARGE_INTEGER ByteOffset
,
3942 IN PULONG Key OPTIONAL
3948 IN HANDLE FileHandle
,
3949 IN HANDLE Event OPTIONAL
,
3950 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3951 IN PVOID ApcContext OPTIONAL
,
3952 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3953 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3954 IN ULONG BufferLength
,
3955 IN PLARGE_INTEGER ByteOffset
,
3956 IN PULONG Key OPTIONAL
3962 IN HANDLE FileHandle
,
3963 IN HANDLE Event OPTIONAL
,
3964 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3965 IN PVOID ApcContext OPTIONAL
,
3966 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3967 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3968 IN ULONG BufferLength
,
3969 IN PLARGE_INTEGER ByteOffset
,
3970 IN PULONG Key OPTIONAL
3977 PLPC_MESSAGE Message
,
3988 PLPC_MESSAGE Message
,
3997 NtWriteVirtualMemory(
3998 IN HANDLE ProcessHandle
,
3999 IN PVOID BaseAddress
,
4001 IN ULONG NumberOfBytesToWrite
,
4002 OUT PULONG NumberOfBytesWritten
4007 ZwWriteVirtualMemory(
4008 IN HANDLE ProcessHandle
,
4009 IN PVOID BaseAddress
,
4011 IN ULONG NumberOfBytesToWrite
,
4012 OUT PULONG NumberOfBytesWritten
4028 static __inline
struct _PEB
* NtCurrentPeb (void)
4032 #if defined(__GNUC__)
4034 __asm__ __volatile__
4036 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4037 : "=r" (pPeb
) /* can't have two memory operands */
4041 #elif defined(_MSC_VER)
4043 __asm mov eax
, fs
:0x30;
4047 #error Unknown compiler for inline assembler