2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
16 /* FUNCTION TYPES ************************************************************/
18 /* PROTOTYPES ****************************************************************/
24 PVOID PortContext OPTIONAL
,
25 PPORT_MESSAGE ConnectionRequest
,
26 BOOLEAN AcceptConnection
,
27 PPORT_VIEW ServerView OPTIONAL
,
28 PREMOTE_PORT_VIEW ClientView OPTIONAL
36 PVOID PortContext OPTIONAL
,
37 PPORT_MESSAGE ConnectionRequest
,
38 BOOLEAN AcceptConnection
,
39 PPORT_VIEW ServerView OPTIONAL
,
40 PREMOTE_PORT_VIEW ClientView OPTIONAL
46 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
47 IN HANDLE ClientToken
,
48 IN ACCESS_MASK DesiredAccess
,
49 IN PGENERIC_MAPPING GenericMapping
,
50 OUT PPRIVILEGE_SET PrivilegeSet
,
51 OUT PULONG ReturnLength
,
52 OUT PACCESS_MASK GrantedAccess
,
53 OUT PNTSTATUS AccessStatus
60 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
61 IN HANDLE ClientToken
,
62 IN ACCESS_MASK DesiredAccess
,
63 IN PGENERIC_MAPPING GenericMapping
,
64 OUT PPRIVILEGE_SET PrivilegeSet
,
65 OUT PULONG ReturnLength
,
66 OUT PACCESS_MASK GrantedAccess
,
67 OUT PNTSTATUS AccessStatus
73 NtAccessCheckAndAuditAlarm(
74 IN PUNICODE_STRING SubsystemName
,
76 IN PUNICODE_STRING ObjectTypeName
,
77 IN PUNICODE_STRING ObjectName
,
78 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
79 IN ACCESS_MASK DesiredAccess
,
80 IN PGENERIC_MAPPING GenericMapping
,
81 IN BOOLEAN ObjectCreation
,
82 OUT PACCESS_MASK GrantedAccess
,
83 OUT PNTSTATUS AccessStatus
,
84 OUT PBOOLEAN GenerateOnClose
91 IN ULONG AtomNameLength
,
100 IN ULONG AtomNameLength
,
101 IN OUT PRTL_ATOM Atom
107 IN PUNICODE_STRING EntryName
,
108 IN PUNICODE_STRING EntryValue
115 IN PUNICODE_STRING EntryName
,
116 IN PUNICODE_STRING EntryValue
123 IN HANDLE TokenHandle
,
124 IN BOOLEAN ResetToDefault
,
125 IN PTOKEN_GROUPS NewState
,
126 IN ULONG BufferLength
,
127 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
128 OUT PULONG ReturnLength
135 IN HANDLE TokenHandle
,
136 IN BOOLEAN ResetToDefault
,
137 IN PTOKEN_GROUPS NewState
,
138 IN ULONG BufferLength
,
139 OUT PTOKEN_GROUPS PreviousState
,
140 OUT PULONG ReturnLength
146 NtAdjustPrivilegesToken(
147 IN HANDLE TokenHandle
,
148 IN BOOLEAN DisableAllPrivileges
,
149 IN PTOKEN_PRIVILEGES NewState
,
150 IN ULONG BufferLength
,
151 OUT PTOKEN_PRIVILEGES PreviousState
,
152 OUT PULONG ReturnLength
158 ZwAdjustPrivilegesToken(
159 IN HANDLE TokenHandle
,
160 IN BOOLEAN DisableAllPrivileges
,
161 IN PTOKEN_PRIVILEGES NewState
,
162 IN ULONG BufferLength
,
163 OUT PTOKEN_PRIVILEGES PreviousState
,
164 OUT PULONG ReturnLength
170 IN HANDLE ThreadHandle
,
171 OUT PULONG SuspendCount
178 IN HANDLE ThreadHandle
,
179 OUT PULONG SuspendCount
185 IN HANDLE ThreadHandle
192 IN HANDLE ThreadHandle
197 NtAllocateLocallyUniqueId(
198 OUT LUID
*LocallyUniqueId
204 ZwAllocateLocallyUniqueId(
211 PULARGE_INTEGER Time
,
221 PULARGE_INTEGER Time
,
230 NtAllocateVirtualMemory(
231 IN HANDLE ProcessHandle
,
232 IN OUT PVOID
*BaseAddress
,
234 IN OUT PULONG RegionSize
,
235 IN ULONG AllocationType
,
242 ZwAllocateVirtualMemory(
243 IN HANDLE ProcessHandle
,
244 IN OUT PVOID
*BaseAddress
,
246 IN OUT PULONG RegionSize
,
247 IN ULONG AllocationType
,
253 NtAssignProcessToJobObject(
261 ZwAssignProcessToJobObject(
286 IN HANDLE FileHandle
,
287 OUT PIO_STATUS_BLOCK IoStatusBlock
294 IN HANDLE FileHandle
,
295 OUT PIO_STATUS_BLOCK IoStatusBlock
301 IN HANDLE TimerHandle
,
302 OUT PBOOLEAN CurrentState OPTIONAL
308 IN HANDLE EventHandle
315 IN HANDLE EventHandle
322 OUT PHANDLE DebugHandle
,
323 IN ACCESS_MASK DesiredAccess
,
324 IN POBJECT_ATTRIBUTES ObjectAttributes
,
325 IN BOOLEAN KillProcessOnExit
332 OUT PHANDLE DebugHandle
,
333 IN ACCESS_MASK DesiredAccess
,
334 IN POBJECT_ATTRIBUTES ObjectAttributes
,
335 IN BOOLEAN KillProcessOnExit
342 ACCESS_MASK DesiredAccess
,
343 POBJECT_ATTRIBUTES ObjectAttributes
351 ACCESS_MASK DesiredAccess
,
352 POBJECT_ATTRIBUTES ObjectAttributes
372 NtCloseObjectAuditAlarm(
373 IN PUNICODE_STRING SubsystemName
,
375 IN BOOLEAN GenerateOnClose
381 ZwCloseObjectAuditAlarm(
382 IN PUNICODE_STRING SubsystemName
,
384 IN BOOLEAN GenerateOnClose
389 NtCompleteConnectPort(
396 ZwCompleteConnectPort(
405 PUNICODE_STRING PortName
,
406 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
407 PPORT_VIEW ClientView OPTIONAL
,
408 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
409 PULONG MaxMessageLength OPTIONAL
,
410 PVOID ConnectionInformation OPTIONAL
,
411 PULONG ConnectionInformationLength OPTIONAL
419 PUNICODE_STRING PortName
,
420 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
421 PPORT_VIEW ClientView OPTIONAL
,
422 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
423 PULONG MaxMessageLength OPTIONAL
,
424 PVOID ConnectionInformation OPTIONAL
,
425 PULONG ConnectionInformationLength OPTIONAL
445 NtCreateDirectoryObject(
446 OUT PHANDLE DirectoryHandle
,
447 IN ACCESS_MASK DesiredAccess
,
448 IN POBJECT_ATTRIBUTES ObjectAttributes
454 ZwCreateDirectoryObject(
455 OUT PHANDLE DirectoryHandle
,
456 IN ACCESS_MASK DesiredAccess
,
457 IN POBJECT_ATTRIBUTES ObjectAttributes
463 OUT PHANDLE EventHandle
,
464 IN ACCESS_MASK DesiredAccess
,
465 IN POBJECT_ATTRIBUTES ObjectAttributes
,
466 IN EVENT_TYPE EventType
,
467 IN BOOLEAN InitialState
474 OUT PHANDLE EventHandle
,
475 IN ACCESS_MASK DesiredAccess
,
476 IN POBJECT_ATTRIBUTES ObjectAttributes
,
477 IN EVENT_TYPE EventType
,
478 IN BOOLEAN InitialState
484 OUT PHANDLE EventPairHandle
,
485 IN ACCESS_MASK DesiredAccess
,
486 IN POBJECT_ATTRIBUTES ObjectAttributes
493 OUT PHANDLE EventPairHandle
,
494 IN ACCESS_MASK DesiredAccess
,
495 IN POBJECT_ATTRIBUTES ObjectAttributes
502 OUT PHANDLE FileHandle
,
503 IN ACCESS_MASK DesiredAccess
,
504 IN POBJECT_ATTRIBUTES ObjectAttributes
,
505 OUT PIO_STATUS_BLOCK IoStatusBlock
,
506 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
507 IN ULONG FileAttributes
,
508 IN ULONG ShareAccess
,
509 IN ULONG CreateDisposition
,
510 IN ULONG CreateOptions
,
511 IN PVOID EaBuffer OPTIONAL
,
519 OUT PHANDLE FileHandle
,
520 IN ACCESS_MASK DesiredAccess
,
521 IN POBJECT_ATTRIBUTES ObjectAttributes
,
522 OUT PIO_STATUS_BLOCK IoStatusBlock
,
523 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
524 IN ULONG FileAttributes
,
525 IN ULONG ShareAccess
,
526 IN ULONG CreateDisposition
,
527 IN ULONG CreateOptions
,
528 IN PVOID EaBuffer OPTIONAL
,
534 NtCreateIoCompletion(
535 OUT PHANDLE IoCompletionHandle
,
536 IN ACCESS_MASK DesiredAccess
,
537 IN POBJECT_ATTRIBUTES ObjectAttributes
,
538 IN ULONG NumberOfConcurrentThreads
544 ZwCreateIoCompletion(
545 OUT PHANDLE IoCompletionHandle
,
546 IN ACCESS_MASK DesiredAccess
,
547 IN POBJECT_ATTRIBUTES ObjectAttributes
,
548 IN ULONG NumberOfConcurrentThreads
554 OUT PHANDLE KeyHandle
,
555 IN ACCESS_MASK DesiredAccess
,
556 IN POBJECT_ATTRIBUTES ObjectAttributes
,
558 IN PUNICODE_STRING Class OPTIONAL
,
559 IN ULONG CreateOptions
,
560 IN PULONG Disposition OPTIONAL
567 OUT PHANDLE KeyHandle
,
568 IN ACCESS_MASK DesiredAccess
,
569 IN POBJECT_ATTRIBUTES ObjectAttributes
,
571 IN PUNICODE_STRING Class OPTIONAL
,
572 IN ULONG CreateOptions
,
573 IN PULONG Disposition OPTIONAL
578 NtCreateMailslotFile(
579 OUT PHANDLE MailSlotFileHandle
,
580 IN ACCESS_MASK DesiredAccess
,
581 IN POBJECT_ATTRIBUTES ObjectAttributes
,
582 OUT PIO_STATUS_BLOCK IoStatusBlock
,
583 IN ULONG FileAttributes
,
584 IN ULONG ShareAccess
,
585 IN ULONG MaxMessageSize
,
586 IN PLARGE_INTEGER TimeOut
592 ZwCreateMailslotFile(
593 OUT PHANDLE MailSlotFileHandle
,
594 IN ACCESS_MASK DesiredAccess
,
595 IN POBJECT_ATTRIBUTES ObjectAttributes
,
596 OUT PIO_STATUS_BLOCK IoStatusBlock
,
597 IN ULONG FileAttributes
,
598 IN ULONG ShareAccess
,
599 IN ULONG MaxMessageSize
,
600 IN PLARGE_INTEGER TimeOut
606 OUT PHANDLE MutantHandle
,
607 IN ACCESS_MASK DesiredAccess
,
608 IN POBJECT_ATTRIBUTES ObjectAttributes
,
609 IN BOOLEAN InitialOwner
616 OUT PHANDLE MutantHandle
,
617 IN ACCESS_MASK DesiredAccess
,
618 IN POBJECT_ATTRIBUTES ObjectAttributes
,
619 IN BOOLEAN InitialOwner
624 NtCreateNamedPipeFile(
625 OUT PHANDLE NamedPipeFileHandle
,
626 IN ACCESS_MASK DesiredAccess
,
627 IN POBJECT_ATTRIBUTES ObjectAttributes
,
628 OUT PIO_STATUS_BLOCK IoStatusBlock
,
629 IN ULONG ShareAccess
,
630 IN ULONG CreateDisposition
,
631 IN ULONG CreateOptions
,
632 IN ULONG WriteModeMessage
,
633 IN ULONG ReadModeMessage
,
634 IN ULONG NonBlocking
,
635 IN ULONG MaxInstances
,
636 IN ULONG InBufferSize
,
637 IN ULONG OutBufferSize
,
638 IN PLARGE_INTEGER DefaultTimeOut
644 ZwCreateNamedPipeFile(
645 OUT PHANDLE NamedPipeFileHandle
,
646 IN ACCESS_MASK DesiredAccess
,
647 IN POBJECT_ATTRIBUTES ObjectAttributes
,
648 OUT PIO_STATUS_BLOCK IoStatusBlock
,
649 IN ULONG ShareAccess
,
650 IN ULONG CreateDisposition
,
651 IN ULONG CreateOptions
,
652 IN ULONG WriteModeMessage
,
653 IN ULONG ReadModeMessage
,
654 IN ULONG NonBlocking
,
655 IN ULONG MaxInstances
,
656 IN ULONG InBufferSize
,
657 IN ULONG OutBufferSize
,
658 IN PLARGE_INTEGER DefaultTimeOut
664 IN PUNICODE_STRING FileName
,
665 IN PLARGE_INTEGER InitialSize
,
666 IN PLARGE_INTEGER MaxiumSize
,
674 IN PUNICODE_STRING FileName
,
675 IN PLARGE_INTEGER InitialSize
,
676 IN PLARGE_INTEGER MaxiumSize
,
684 POBJECT_ATTRIBUTES ObjectAttributes
,
685 ULONG MaxConnectionInfoLength
,
686 ULONG MaxMessageLength
,
695 POBJECT_ATTRIBUTES ObjectAttributes
,
696 ULONG MaxConnectionInfoLength
,
697 ULONG MaxMessageLength
,
704 OUT PHANDLE ProcessHandle
,
705 IN ACCESS_MASK DesiredAccess
,
706 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
707 IN HANDLE ParentProcess
,
708 IN BOOLEAN InheritObjectTable
,
709 IN HANDLE SectionHandle OPTIONAL
,
710 IN HANDLE DebugPort OPTIONAL
,
711 IN HANDLE ExceptionPort OPTIONAL
718 OUT PHANDLE ProcessHandle
,
719 IN ACCESS_MASK DesiredAccess
,
720 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
721 IN HANDLE ParentProcess
,
722 IN BOOLEAN InheritObjectTable
,
723 IN HANDLE SectionHandle OPTIONAL
,
724 IN HANDLE DebugPort OPTIONAL
,
725 IN HANDLE ExceptionPort OPTIONAL
731 OUT PHANDLE ProfileHandle
,
732 IN HANDLE ProcessHandle
,
735 IN ULONG Granularity
,
737 IN ULONG ProfilingSize
,
738 IN KPROFILE_SOURCE Source
,
739 IN KAFFINITY ProcessorMask
746 OUT PHANDLE ProfileHandle
,
747 IN POBJECT_ATTRIBUTES ObjectAttributes
,
750 IN ULONG Granularity
,
752 IN ULONG ProfilingSize
,
753 IN ULONG ClockSource
,
754 IN ULONG ProcessorMask
761 OUT PHANDLE SectionHandle
,
762 IN ACCESS_MASK DesiredAccess
,
763 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
764 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
765 IN ULONG SectionPageProtection OPTIONAL
,
766 IN ULONG AllocationAttributes
,
767 IN HANDLE FileHandle OPTIONAL
774 OUT PHANDLE SectionHandle
,
775 IN ACCESS_MASK DesiredAccess
,
776 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
777 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
778 IN ULONG SectionPageProtection OPTIONAL
,
779 IN ULONG AllocationAttributes
,
780 IN HANDLE FileHandle OPTIONAL
786 OUT PHANDLE SemaphoreHandle
,
787 IN ACCESS_MASK DesiredAccess
,
788 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
789 IN LONG InitialCount
,
797 OUT PHANDLE SemaphoreHandle
,
798 IN ACCESS_MASK DesiredAccess
,
799 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
800 IN LONG InitialCount
,
806 NtCreateSymbolicLinkObject(
807 OUT PHANDLE SymbolicLinkHandle
,
808 IN ACCESS_MASK DesiredAccess
,
809 IN POBJECT_ATTRIBUTES ObjectAttributes
,
810 IN PUNICODE_STRING Name
816 ZwCreateSymbolicLinkObject(
817 OUT PHANDLE SymbolicLinkHandle
,
818 IN ACCESS_MASK DesiredAccess
,
819 IN POBJECT_ATTRIBUTES ObjectAttributes
,
820 IN PUNICODE_STRING Name
826 OUT PHANDLE ThreadHandle
,
827 IN ACCESS_MASK DesiredAccess
,
828 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
829 IN HANDLE ProcessHandle
,
830 OUT PCLIENT_ID ClientId
,
831 IN PCONTEXT ThreadContext
,
832 IN PINITIAL_TEB UserStack
,
833 IN BOOLEAN CreateSuspended
840 OUT PHANDLE ThreadHandle
,
841 IN ACCESS_MASK DesiredAccess
,
842 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
843 IN HANDLE ProcessHandle
,
844 OUT PCLIENT_ID ClientId
,
845 IN PCONTEXT ThreadContext
,
846 IN PINITIAL_TEB UserStack
,
847 IN BOOLEAN CreateSuspended
853 OUT PHANDLE TimerHandle
,
854 IN ACCESS_MASK DesiredAccess
,
855 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
856 IN TIMER_TYPE TimerType
859 #ifdef NTOS_MODE_USER
864 OUT PHANDLE TimerHandle
,
865 IN ACCESS_MASK DesiredAccess
,
866 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
867 IN TIMER_TYPE TimerType
874 OUT PHANDLE TokenHandle
,
875 IN ACCESS_MASK DesiredAccess
,
876 IN POBJECT_ATTRIBUTES ObjectAttributes
,
877 IN TOKEN_TYPE TokenType
,
878 IN PLUID AuthenticationId
,
879 IN PLARGE_INTEGER ExpirationTime
,
880 IN PTOKEN_USER TokenUser
,
881 IN PTOKEN_GROUPS TokenGroups
,
882 IN PTOKEN_PRIVILEGES TokenPrivileges
,
883 IN PTOKEN_OWNER TokenOwner
,
884 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
885 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
886 IN PTOKEN_SOURCE TokenSource
893 OUT PHANDLE TokenHandle
,
894 IN ACCESS_MASK DesiredAccess
,
895 IN POBJECT_ATTRIBUTES ObjectAttributes
,
896 IN TOKEN_TYPE TokenType
,
897 IN PLUID AuthenticationId
,
898 IN PLARGE_INTEGER ExpirationTime
,
899 IN PTOKEN_USER TokenUser
,
900 IN PTOKEN_GROUPS TokenGroups
,
901 IN PTOKEN_PRIVILEGES TokenPrivileges
,
902 IN PTOKEN_OWNER TokenOwner
,
903 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
904 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
905 IN PTOKEN_SOURCE TokenSource
910 NtCreateWaitablePort(
912 POBJECT_ATTRIBUTES ObjectAttributes
,
913 ULONG MaxConnectInfoLength
,
915 ULONG NPMessageQueueSize OPTIONAL
921 ZwCreateWaitablePort(
923 POBJECT_ATTRIBUTES ObjectAttributes
,
924 ULONG MaxConnectInfoLength
,
926 ULONG NPMessageQueueSize OPTIONAL
932 NtQueryDebugFilterState(
941 IN HANDLE DebugObject
,
942 IN PCLIENT_ID AppClientId
,
943 IN NTSTATUS ContinueStatus
950 IN HANDLE DebugObject
,
951 IN PCLIENT_ID AppClientId
,
952 IN NTSTATUS ContinueStatus
958 IN BOOLEAN Alertable
,
959 IN LARGE_INTEGER
*Interval
966 IN BOOLEAN Alertable
,
967 IN LARGE_INTEGER
*Interval
986 IN PUNICODE_STRING EntryName
,
987 IN PUNICODE_STRING EntryValue
994 IN PUNICODE_STRING EntryName
,
995 IN PUNICODE_STRING EntryValue
1001 IN POBJECT_ATTRIBUTES ObjectAttributes
1008 IN POBJECT_ATTRIBUTES ObjectAttributes
1027 NtDeleteObjectAuditAlarm(
1028 IN PUNICODE_STRING SubsystemName
,
1030 IN BOOLEAN GenerateOnClose
1036 ZwDeleteObjectAuditAlarm(
1037 IN PUNICODE_STRING SubsystemName
,
1039 IN BOOLEAN GenerateOnClose
1045 IN HANDLE KeyHandle
,
1046 IN PUNICODE_STRING ValueName
1053 IN HANDLE KeyHandle
,
1054 IN PUNICODE_STRING ValueName
1060 NtDeviceIoControlFile(
1061 IN HANDLE DeviceHandle
,
1062 IN HANDLE Event OPTIONAL
,
1063 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
1064 IN PVOID UserApcContext OPTIONAL
,
1065 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1066 IN ULONG IoControlCode
,
1067 IN PVOID InputBuffer
,
1068 IN ULONG InputBufferSize
,
1069 OUT PVOID OutputBuffer
,
1070 IN ULONG OutputBufferSize
1076 ZwDeviceIoControlFile(
1077 IN HANDLE DeviceHandle
,
1078 IN HANDLE Event OPTIONAL
,
1079 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
1080 IN PVOID UserApcContext OPTIONAL
,
1081 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1082 IN ULONG IoControlCode
,
1083 IN PVOID InputBuffer
,
1084 IN ULONG InputBufferSize
,
1085 OUT PVOID OutputBuffer
,
1086 IN ULONG OutputBufferSize
1092 IN PUNICODE_STRING DisplayString
1099 IN PUNICODE_STRING DisplayString
1105 IN HANDLE SourceProcessHandle
,
1106 IN HANDLE SourceHandle
,
1107 IN HANDLE TargetProcessHandle
,
1108 OUT PHANDLE TargetHandle
,
1109 IN ACCESS_MASK DesiredAccess
,
1110 IN ULONG HandleAttributes
,
1118 IN HANDLE SourceProcessHandle
,
1119 IN HANDLE SourceHandle
,
1120 IN HANDLE TargetProcessHandle
,
1121 OUT PHANDLE TargetHandle
,
1122 IN ACCESS_MASK DesiredAccess
,
1123 IN ULONG HandleAttributes
,
1131 IN HANDLE ExistingTokenHandle
,
1132 IN ACCESS_MASK DesiredAccess
,
1133 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1134 IN BOOLEAN EffectiveOnly
,
1135 IN TOKEN_TYPE TokenType
,
1136 OUT PHANDLE NewTokenHandle
1143 IN HANDLE ExistingTokenHandle
,
1144 IN ACCESS_MASK DesiredAccess
,
1145 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1146 IN BOOLEAN EffectiveOnly
,
1147 IN TOKEN_TYPE TokenType
,
1148 OUT PHANDLE NewTokenHandle
1153 NtEnumerateBootEntries(
1161 ZwEnumerateBootEntries(
1169 IN HANDLE KeyHandle
,
1171 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1172 OUT PVOID KeyInformation
,
1174 OUT PULONG ResultLength
1181 IN HANDLE KeyHandle
,
1183 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1184 OUT PVOID KeyInformation
,
1186 OUT PULONG ResultLength
1191 NtEnumerateValueKey(
1192 IN HANDLE KeyHandle
,
1194 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1195 OUT PVOID KeyValueInformation
,
1197 OUT PULONG ResultLength
1203 ZwEnumerateValueKey(
1204 IN HANDLE KeyHandle
,
1206 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1207 OUT PVOID KeyValueInformation
,
1209 OUT PULONG ResultLength
1215 IN HANDLE SectionHandle
,
1216 IN PLARGE_INTEGER NewMaximumSize
1223 IN HANDLE SectionHandle
,
1224 IN PLARGE_INTEGER NewMaximumSize
1231 IN ULONG AtomNameLength
,
1232 OUT PRTL_ATOM Atom OPTIONAL
1240 IN ULONG AtomNameLength
,
1241 OUT PRTL_ATOM Atom OPTIONAL
1247 IN HANDLE FileHandle
,
1248 OUT PIO_STATUS_BLOCK IoStatusBlock
1251 #ifdef NTOS_MODE_USER
1256 IN HANDLE FileHandle
,
1257 OUT PIO_STATUS_BLOCK IoStatusBlock
1263 NtFlushInstructionCache(
1264 IN HANDLE ProcessHandle
,
1265 IN PVOID BaseAddress
,
1266 IN ULONG NumberOfBytesToFlush
1284 NtFlushVirtualMemory(
1285 IN HANDLE ProcessHandle
,
1286 IN PVOID BaseAddress
,
1287 IN ULONG NumberOfBytesToFlush
,
1288 OUT PULONG NumberOfBytesFlushed OPTIONAL
1293 NtFlushWriteBuffer(VOID
);
1298 ZwFlushWriteBuffer(VOID
);
1303 NtFreeVirtualMemory(
1304 IN HANDLE ProcessHandle
,
1305 IN PVOID
*BaseAddress
,
1306 IN PULONG RegionSize
,
1313 ZwFreeVirtualMemory(
1314 IN HANDLE ProcessHandle
,
1315 IN PVOID
*BaseAddress
,
1316 IN PULONG RegionSize
,
1324 IN HANDLE DeviceHandle
,
1325 IN HANDLE Event OPTIONAL
,
1326 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1327 IN PVOID ApcContext OPTIONAL
,
1328 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1329 IN ULONG IoControlCode
,
1330 IN PVOID InputBuffer
,
1331 IN ULONG InputBufferSize
,
1332 OUT PVOID OutputBuffer
,
1333 IN ULONG OutputBufferSize
1340 IN HANDLE DeviceHandle
,
1341 IN HANDLE Event OPTIONAL
,
1342 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1343 IN PVOID ApcContext OPTIONAL
,
1344 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1345 IN ULONG IoControlCode
,
1346 IN PVOID InputBuffer
,
1347 IN ULONG InputBufferSize
,
1348 OUT PVOID OutputBuffer
,
1349 IN ULONG OutputBufferSize
1355 IN HANDLE ThreadHandle
,
1356 OUT PCONTEXT Context
1363 IN HANDLE ThreadHandle
,
1364 OUT PCONTEXT Context
1372 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1391 NtImpersonateClientOfPort(
1393 PPORT_MESSAGE ClientMessage
1399 ZwImpersonateClientOfPort(
1401 PPORT_MESSAGE ClientMessage
1406 NtImpersonateThread(
1407 IN HANDLE ThreadHandle
,
1408 IN HANDLE ThreadToImpersonate
,
1409 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1415 ZwImpersonateThread(
1416 IN HANDLE ThreadHandle
,
1417 IN HANDLE ThreadToImpersonate
,
1418 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1424 NtInitiatePowerAction(
1425 POWER_ACTION SystemAction
,
1426 SYSTEM_POWER_STATE MinSystemState
,
1428 BOOLEAN Asynchronous
1434 ZwInitiatePowerAction(
1435 POWER_ACTION SystemAction
,
1436 SYSTEM_POWER_STATE MinSystemState
,
1438 BOOLEAN Asynchronous
1443 NtInitializeRegistry(
1450 ZwInitializeRegistry(
1457 IN HANDLE ProcessHandle
,
1458 IN HANDLE JobHandle OPTIONAL
1465 IN HANDLE ProcessHandle
,
1466 IN HANDLE JobHandle OPTIONAL
1471 NtListenPort(HANDLE PortHandle
,
1472 PPORT_MESSAGE ConnectionRequest
1478 ZwListenPort(HANDLE PortHandle
,
1479 PPORT_MESSAGE ConnectionRequest
1485 IN PUNICODE_STRING DriverServiceName
1492 IN PUNICODE_STRING DriverServiceName
1498 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1499 IN POBJECT_ATTRIBUTES FileObjectAttributes
1506 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1507 IN POBJECT_ATTRIBUTES FileObjectAttributes
1513 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1514 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1522 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1523 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1531 IN HANDLE FileHandle
,
1532 IN HANDLE Event OPTIONAL
,
1533 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1534 IN PVOID ApcContext OPTIONAL
,
1535 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1536 IN PLARGE_INTEGER ByteOffset
,
1537 IN PLARGE_INTEGER Length
,
1539 IN BOOLEAN FailImmediatedly
,
1540 IN BOOLEAN ExclusiveLock
1548 IN HANDLE FileHandle
,
1549 IN HANDLE Event OPTIONAL
,
1550 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1551 IN PVOID ApcContext OPTIONAL
,
1552 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1553 IN PLARGE_INTEGER ByteOffset
,
1554 IN PLARGE_INTEGER Length
,
1556 IN BOOLEAN FailImmediatedly
,
1557 IN BOOLEAN ExclusiveLock
1562 NtLockVirtualMemory(
1563 HANDLE ProcessHandle
,
1565 ULONG NumberOfBytesToLock
,
1566 PULONG NumberOfBytesLocked
1572 ZwLockVirtualMemory(
1573 HANDLE ProcessHandle
,
1575 ULONG NumberOfBytesToLock
,
1576 PULONG NumberOfBytesLocked
1581 NtMakePermanentObject(
1588 ZwMakePermanentObject(
1594 NtMakeTemporaryObject(
1601 ZwMakeTemporaryObject(
1608 IN HANDLE SectionHandle
,
1609 IN HANDLE ProcessHandle
,
1610 IN OUT PVOID
*BaseAddress
,
1612 IN ULONG CommitSize
,
1613 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1614 IN OUT PULONG ViewSize
,
1615 IN SECTION_INHERIT InheritDisposition
,
1616 IN ULONG AllocationType
,
1617 IN ULONG AccessProtection
1624 IN HANDLE SectionHandle
,
1625 IN HANDLE ProcessHandle
,
1626 IN OUT PVOID
*BaseAddress
,
1628 IN ULONG CommitSize
,
1629 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1630 IN OUT PULONG ViewSize
,
1631 IN SECTION_INHERIT InheritDisposition
,
1632 IN ULONG AllocationType
,
1633 IN ULONG AccessProtection
1638 NtNotifyChangeDirectoryFile(
1639 IN HANDLE FileHandle
,
1640 IN HANDLE Event OPTIONAL
,
1641 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1642 IN PVOID ApcContext OPTIONAL
,
1643 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1645 IN ULONG BufferSize
,
1646 IN ULONG CompletionFilter
,
1647 IN BOOLEAN WatchTree
1653 ZwNotifyChangeDirectoryFile(
1654 IN HANDLE FileHandle
,
1655 IN HANDLE Event OPTIONAL
,
1656 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1657 IN PVOID ApcContext OPTIONAL
,
1658 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1660 IN ULONG BufferSize
,
1661 IN ULONG CompletionFilter
,
1662 IN BOOLEAN WatchTree
1668 IN HANDLE KeyHandle
,
1670 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1671 IN PVOID ApcContext OPTIONAL
,
1672 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1673 IN ULONG CompletionFilter
,
1674 IN BOOLEAN Asynchroneous
,
1675 OUT PVOID ChangeBuffer
,
1677 IN BOOLEAN WatchSubtree
1684 IN HANDLE KeyHandle
,
1686 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1687 IN PVOID ApcContext OPTIONAL
,
1688 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1689 IN ULONG CompletionFilter
,
1690 IN BOOLEAN Asynchroneous
,
1691 OUT PVOID ChangeBuffer
,
1693 IN BOOLEAN WatchSubtree
1698 NtOpenDirectoryObject(
1699 OUT PHANDLE FileHandle
,
1700 IN ACCESS_MASK DesiredAccess
,
1701 IN POBJECT_ATTRIBUTES ObjectAttributes
1707 ZwOpenDirectoryObject(
1708 OUT PHANDLE FileHandle
,
1709 IN ACCESS_MASK DesiredAccess
,
1710 IN POBJECT_ATTRIBUTES ObjectAttributes
1716 OUT PHANDLE EventHandle
,
1717 IN ACCESS_MASK DesiredAccess
,
1718 IN POBJECT_ATTRIBUTES ObjectAttributes
1725 OUT PHANDLE EventHandle
,
1726 IN ACCESS_MASK DesiredAccess
,
1727 IN POBJECT_ATTRIBUTES ObjectAttributes
1733 OUT PHANDLE EventPairHandle
,
1734 IN ACCESS_MASK DesiredAccess
,
1735 IN POBJECT_ATTRIBUTES ObjectAttributes
1742 OUT PHANDLE EventPairHandle
,
1743 IN ACCESS_MASK DesiredAccess
,
1744 IN POBJECT_ATTRIBUTES ObjectAttributes
1751 OUT PHANDLE FileHandle
,
1752 IN ACCESS_MASK DesiredAccess
,
1753 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1754 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1755 IN ULONG ShareAccess
,
1756 IN ULONG OpenOptions
1763 OUT PHANDLE FileHandle
,
1764 IN ACCESS_MASK DesiredAccess
,
1765 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1766 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1767 IN ULONG ShareAccess
,
1768 IN ULONG OpenOptions
1774 OUT PHANDLE CompetionPort
,
1775 IN ACCESS_MASK DesiredAccess
,
1776 IN POBJECT_ATTRIBUTES ObjectAttributes
1783 OUT PHANDLE CompetionPort
,
1784 IN ACCESS_MASK DesiredAccess
,
1785 IN POBJECT_ATTRIBUTES ObjectAttributes
1792 ACCESS_MASK DesiredAccess
,
1793 POBJECT_ATTRIBUTES ObjectAttributes
1801 ACCESS_MASK DesiredAccess
,
1802 POBJECT_ATTRIBUTES ObjectAttributes
1808 OUT PHANDLE KeyHandle
,
1809 IN ACCESS_MASK DesiredAccess
,
1810 IN POBJECT_ATTRIBUTES ObjectAttributes
1817 OUT PHANDLE KeyHandle
,
1818 IN ACCESS_MASK DesiredAccess
,
1819 IN POBJECT_ATTRIBUTES ObjectAttributes
1825 OUT PHANDLE MutantHandle
,
1826 IN ACCESS_MASK DesiredAccess
,
1827 IN POBJECT_ATTRIBUTES ObjectAttributes
1834 OUT PHANDLE MutantHandle
,
1835 IN ACCESS_MASK DesiredAccess
,
1836 IN POBJECT_ATTRIBUTES ObjectAttributes
1842 NtOpenObjectAuditAlarm(
1843 IN PUNICODE_STRING SubsystemName
,
1845 IN PUNICODE_STRING ObjectTypeName
,
1846 IN PUNICODE_STRING ObjectName
,
1847 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1848 IN HANDLE ClientToken
,
1849 IN ULONG DesiredAccess
,
1850 IN ULONG GrantedAccess
,
1851 IN PPRIVILEGE_SET Privileges
,
1852 IN BOOLEAN ObjectCreation
,
1853 IN BOOLEAN AccessGranted
,
1854 OUT PBOOLEAN GenerateOnClose
1860 ZwOpenObjectAuditAlarm(
1861 IN PUNICODE_STRING SubsystemName
,
1863 IN PUNICODE_STRING ObjectTypeName
,
1864 IN PUNICODE_STRING ObjectName
,
1865 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1866 IN HANDLE ClientToken
,
1867 IN ULONG DesiredAccess
,
1868 IN ULONG GrantedAccess
,
1869 IN PPRIVILEGE_SET Privileges
,
1870 IN BOOLEAN ObjectCreation
,
1871 IN BOOLEAN AccessGranted
,
1872 OUT PBOOLEAN GenerateOnClose
1879 OUT PHANDLE ProcessHandle
,
1880 IN ACCESS_MASK DesiredAccess
,
1881 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1882 IN PCLIENT_ID ClientId
1889 OUT PHANDLE ProcessHandle
,
1890 IN ACCESS_MASK DesiredAccess
,
1891 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1892 IN PCLIENT_ID ClientId
1899 IN HANDLE ProcessHandle
,
1900 IN ACCESS_MASK DesiredAccess
,
1901 OUT PHANDLE TokenHandle
1908 IN HANDLE ProcessHandle
,
1909 IN ACCESS_MASK DesiredAccess
,
1910 OUT PHANDLE TokenHandle
1916 NtOpenProcessTokenEx(
1917 IN HANDLE ProcessHandle
,
1918 IN ACCESS_MASK DesiredAccess
,
1919 IN ULONG HandleAttributes
,
1920 OUT PHANDLE TokenHandle
1926 ZwOpenProcessTokenEx(
1927 IN HANDLE ProcessHandle
,
1928 IN ACCESS_MASK DesiredAccess
,
1929 IN ULONG HandleAttributes
,
1930 OUT PHANDLE TokenHandle
1936 OUT PHANDLE SectionHandle
,
1937 IN ACCESS_MASK DesiredAccess
,
1938 IN POBJECT_ATTRIBUTES ObjectAttributes
1945 OUT PHANDLE SectionHandle
,
1946 IN ACCESS_MASK DesiredAccess
,
1947 IN POBJECT_ATTRIBUTES ObjectAttributes
1953 OUT PHANDLE SemaphoreHandle
,
1954 IN ACCESS_MASK DesiredAcces
,
1955 IN POBJECT_ATTRIBUTES ObjectAttributes
1962 OUT PHANDLE SemaphoreHandle
,
1963 IN ACCESS_MASK DesiredAcces
,
1964 IN POBJECT_ATTRIBUTES ObjectAttributes
1969 NtOpenSymbolicLinkObject(
1970 OUT PHANDLE SymbolicLinkHandle
,
1971 IN ACCESS_MASK DesiredAccess
,
1972 IN POBJECT_ATTRIBUTES ObjectAttributes
1978 ZwOpenSymbolicLinkObject(
1979 OUT PHANDLE SymbolicLinkHandle
,
1980 IN ACCESS_MASK DesiredAccess
,
1981 IN POBJECT_ATTRIBUTES ObjectAttributes
1987 OUT PHANDLE ThreadHandle
,
1988 IN ACCESS_MASK DesiredAccess
,
1989 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1990 IN PCLIENT_ID ClientId
1997 OUT PHANDLE ThreadHandle
,
1998 IN ACCESS_MASK DesiredAccess
,
1999 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2000 IN PCLIENT_ID ClientId
2007 IN HANDLE ThreadHandle
,
2008 IN ACCESS_MASK DesiredAccess
,
2009 IN BOOLEAN OpenAsSelf
,
2010 OUT PHANDLE TokenHandle
2017 IN HANDLE ThreadHandle
,
2018 IN ACCESS_MASK DesiredAccess
,
2019 IN BOOLEAN OpenAsSelf
,
2020 OUT PHANDLE TokenHandle
2026 NtOpenThreadTokenEx(
2027 IN HANDLE ThreadHandle
,
2028 IN ACCESS_MASK DesiredAccess
,
2029 IN BOOLEAN OpenAsSelf
,
2030 IN ULONG HandleAttributes
,
2031 OUT PHANDLE TokenHandle
2037 ZwOpenThreadTokenEx(
2038 IN HANDLE ThreadHandle
,
2039 IN ACCESS_MASK DesiredAccess
,
2040 IN BOOLEAN OpenAsSelf
,
2041 IN ULONG HandleAttributes
,
2042 OUT PHANDLE TokenHandle
2048 OUT PHANDLE TimerHandle
,
2049 IN ACCESS_MASK DesiredAccess
,
2050 IN POBJECT_ATTRIBUTES ObjectAttributes
2053 #ifdef NTOS_MODE_USER
2058 OUT PHANDLE TimerHandle
,
2059 IN ACCESS_MASK DesiredAccess
,
2060 IN POBJECT_ATTRIBUTES ObjectAttributes
2067 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
2068 IN OUT PVOID Buffer
,
2076 POWER_INFORMATION_LEVEL PowerInformationLevel
,
2078 ULONG InputBufferLength
,
2080 ULONG OutputBufferLength
2087 POWER_INFORMATION_LEVEL PowerInformationLevel
,
2089 ULONG InputBufferLength
,
2091 ULONG OutputBufferLength
2098 IN HANDLE ClientToken
,
2099 IN PPRIVILEGE_SET RequiredPrivileges
,
2107 IN HANDLE ClientToken
,
2108 IN PPRIVILEGE_SET RequiredPrivileges
,
2115 NtPrivilegedServiceAuditAlarm(
2116 IN PUNICODE_STRING SubsystemName
,
2117 IN PUNICODE_STRING ServiceName
,
2118 IN HANDLE ClientToken
,
2119 IN PPRIVILEGE_SET Privileges
,
2120 IN BOOLEAN AccessGranted
2126 ZwPrivilegedServiceAuditAlarm(
2127 IN PUNICODE_STRING SubsystemName
,
2128 IN PUNICODE_STRING ServiceName
,
2129 IN HANDLE ClientToken
,
2130 IN PPRIVILEGE_SET Privileges
,
2131 IN BOOLEAN AccessGranted
2137 NtPrivilegeObjectAuditAlarm(
2138 IN PUNICODE_STRING SubsystemName
,
2140 IN HANDLE ClientToken
,
2141 IN ULONG DesiredAccess
,
2142 IN PPRIVILEGE_SET Privileges
,
2143 IN BOOLEAN AccessGranted
2149 ZwPrivilegeObjectAuditAlarm(
2150 IN PUNICODE_STRING SubsystemName
,
2152 IN HANDLE ClientToken
,
2153 IN ULONG DesiredAccess
,
2154 IN PPRIVILEGE_SET Privileges
,
2155 IN BOOLEAN AccessGranted
2160 NtProtectVirtualMemory(
2161 IN HANDLE ProcessHandle
,
2162 IN PVOID
*BaseAddress
,
2163 IN ULONG
*NumberOfBytesToProtect
,
2164 IN ULONG NewAccessProtection
,
2165 OUT PULONG OldAccessProtection
2171 ZwProtectVirtualMemory(
2172 IN HANDLE ProcessHandle
,
2173 IN PVOID
*BaseAddress
,
2174 IN ULONG
*NumberOfBytesToProtect
,
2175 IN ULONG NewAccessProtection
,
2176 OUT PULONG OldAccessProtection
2182 IN HANDLE EventHandle
,
2183 IN PLONG PulseCount OPTIONAL
2190 IN HANDLE EventHandle
,
2191 IN PLONG PulseCount OPTIONAL
2196 NtQueryAttributesFile(
2197 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2198 OUT PFILE_BASIC_INFORMATION FileInformation
2204 ZwQueryAttributesFile(
2205 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2206 OUT PFILE_BASIC_INFORMATION FileInformation
2212 NtQueryBootEntryOrder(
2220 ZwQueryBootEntryOrder(
2242 NtQueryDefaultLocale(
2243 IN BOOLEAN UserProfile
,
2244 OUT PLCID DefaultLocaleId
2250 ZwQueryDefaultLocale(
2251 IN BOOLEAN UserProfile
,
2252 OUT PLCID DefaultLocaleId
2257 NtQueryDefaultUILanguage(
2264 ZwQueryDefaultUILanguage(
2271 NtQueryDirectoryFile(
2272 IN HANDLE FileHandle
,
2273 IN HANDLE Event OPTIONAL
,
2274 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2275 IN PVOID ApcContext OPTIONAL
,
2276 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2277 OUT PVOID FileInformation
,
2279 IN FILE_INFORMATION_CLASS FileInformationClass
,
2280 IN BOOLEAN ReturnSingleEntry
,
2281 IN PUNICODE_STRING FileName OPTIONAL
,
2282 IN BOOLEAN RestartScan
2288 ZwQueryDirectoryFile(
2289 IN HANDLE FileHandle
,
2290 IN HANDLE Event OPTIONAL
,
2291 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2292 IN PVOID ApcContext OPTIONAL
,
2293 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2294 OUT PVOID FileInformation
,
2296 IN FILE_INFORMATION_CLASS FileInformationClass
,
2297 IN BOOLEAN ReturnSingleEntry
,
2298 IN PUNICODE_STRING FileName OPTIONAL
,
2299 IN BOOLEAN RestartScan
2304 NtQueryDirectoryObject(
2305 IN HANDLE DirectoryHandle
,
2307 IN ULONG BufferLength
,
2308 IN BOOLEAN ReturnSingleEntry
,
2309 IN BOOLEAN RestartScan
,
2310 IN OUT PULONG Context
,
2311 OUT PULONG ReturnLength OPTIONAL
2317 ZwQueryDirectoryObject(
2318 IN HANDLE DirectoryHandle
,
2320 IN ULONG BufferLength
,
2321 IN BOOLEAN ReturnSingleEntry
,
2322 IN BOOLEAN RestartScan
,
2323 IN OUT PULONG Context
,
2324 OUT PULONG ReturnLength OPTIONAL
2330 IN HANDLE FileHandle
,
2331 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2334 IN BOOLEAN ReturnSingleEntry
,
2335 IN PVOID EaList OPTIONAL
,
2336 IN ULONG EaListLength
,
2337 IN PULONG EaIndex OPTIONAL
,
2338 IN BOOLEAN RestartScan
2341 #ifdef NTOS_MODE_USER
2346 IN HANDLE FileHandle
,
2347 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2350 IN BOOLEAN ReturnSingleEntry
,
2351 IN PVOID EaList OPTIONAL
,
2352 IN ULONG EaListLength
,
2353 IN PULONG EaIndex OPTIONAL
,
2354 IN BOOLEAN RestartScan
2361 IN HANDLE EventHandle
,
2362 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2363 OUT PVOID EventInformation
,
2364 IN ULONG EventInformationLength
,
2365 OUT PULONG ReturnLength
2372 IN HANDLE EventHandle
,
2373 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2374 OUT PVOID EventInformation
,
2375 IN ULONG EventInformationLength
,
2376 OUT PULONG ReturnLength
2381 NtQueryFullAttributesFile(
2382 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2383 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2389 ZwQueryFullAttributesFile(
2390 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2391 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2396 NtQueryInformationAtom(
2398 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2399 OUT PVOID AtomInformation
,
2400 IN ULONG AtomInformationLength
,
2401 OUT PULONG ReturnLength OPTIONAL
2407 ZwQueryInformationAtom(
2409 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2410 OUT PVOID AtomInformation
,
2411 IN ULONG AtomInformationLength
,
2412 OUT PULONG ReturnLength OPTIONAL
2418 NtQueryInformationFile(
2419 IN HANDLE FileHandle
,
2420 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2421 OUT PVOID FileInformation
,
2423 IN FILE_INFORMATION_CLASS FileInformationClass
2429 ZwQueryInformationFile(
2431 PIO_STATUS_BLOCK IoStatusBlock
,
2432 PVOID FileInformation
,
2434 FILE_INFORMATION_CLASS FileInformationClass
2439 NtQueryInformationJobObject(
2441 JOBOBJECTINFOCLASS JobInformationClass
,
2442 PVOID JobInformation
,
2443 ULONG JobInformationLength
,
2450 ZwQueryInformationJobObject(
2452 JOBOBJECTINFOCLASS JobInformationClass
,
2453 PVOID JobInformation
,
2454 ULONG JobInformationLength
,
2460 NtQueryInformationPort(
2462 PORT_INFORMATION_CLASS PortInformationClass
,
2463 PVOID PortInformation
,
2464 ULONG PortInformationLength
,
2471 ZwQueryInformationPort(
2473 PORT_INFORMATION_CLASS PortInformationClass
,
2474 PVOID PortInformation
,
2475 ULONG PortInformationLength
,
2482 NtQueryInformationProcess(
2483 IN HANDLE ProcessHandle
,
2484 IN PROCESSINFOCLASS ProcessInformationClass
,
2485 OUT PVOID ProcessInformation
,
2486 IN ULONG ProcessInformationLength
,
2487 OUT PULONG ReturnLength OPTIONAL
2493 ZwQueryInformationProcess(
2494 IN HANDLE ProcessHandle
,
2495 IN PROCESSINFOCLASS ProcessInformationClass
,
2496 OUT PVOID ProcessInformation
,
2497 IN ULONG ProcessInformationLength
,
2498 OUT PULONG ReturnLength OPTIONAL
2504 NtQueryInformationThread(
2505 IN HANDLE ThreadHandle
,
2506 IN THREADINFOCLASS ThreadInformationClass
,
2507 OUT PVOID ThreadInformation
,
2508 IN ULONG ThreadInformationLength
,
2509 OUT PULONG ReturnLength
2515 ZwQueryInformationThread(
2516 IN HANDLE ThreadHandle
,
2517 IN THREADINFOCLASS ThreadInformationClass
,
2518 OUT PVOID ThreadInformation
,
2519 IN ULONG ThreadInformationLength
,
2520 OUT PULONG ReturnLength
2526 NtQueryInformationToken(
2527 IN HANDLE TokenHandle
,
2528 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2529 OUT PVOID TokenInformation
,
2530 IN ULONG TokenInformationLength
,
2531 OUT PULONG ReturnLength
2537 ZwQueryInformationToken(
2538 IN HANDLE TokenHandle
,
2539 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2540 OUT PVOID TokenInformation
,
2541 IN ULONG TokenInformationLength
,
2542 OUT PULONG ReturnLength
2547 NtQueryInstallUILanguage(
2554 ZwQueryInstallUILanguage(
2560 NtQueryIntervalProfile(
2561 IN KPROFILE_SOURCE ProfileSource
,
2568 ZwQueryIntervalProfile(
2569 OUT PULONG Interval
,
2570 OUT KPROFILE_SOURCE ClockSource
2575 NtQueryIoCompletion(
2576 IN HANDLE IoCompletionHandle
,
2577 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2578 OUT PVOID IoCompletionInformation
,
2579 IN ULONG IoCompletionInformationLength
,
2580 OUT PULONG ResultLength OPTIONAL
2586 ZwQueryIoCompletion(
2587 IN HANDLE IoCompletionHandle
,
2588 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2589 OUT PVOID IoCompletionInformation
,
2590 IN ULONG IoCompletionInformationLength
,
2591 OUT PULONG ResultLength OPTIONAL
2597 IN HANDLE KeyHandle
,
2598 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2599 OUT PVOID KeyInformation
,
2601 OUT PULONG ResultLength
2608 IN HANDLE KeyHandle
,
2609 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2610 OUT PVOID KeyInformation
,
2612 OUT PULONG ResultLength
2618 NtQueryQuotaInformationFile(
2619 IN HANDLE FileHandle
,
2620 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2623 IN BOOLEAN ReturnSingleEntry
,
2624 IN PVOID SidList OPTIONAL
,
2625 IN ULONG SidListLength
,
2626 IN PSID StartSid OPTIONAL
,
2627 IN BOOLEAN RestartScan
2633 ZwQueryQuotaInformationFile(
2634 IN HANDLE FileHandle
,
2635 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2638 IN BOOLEAN ReturnSingleEntry
,
2639 IN PVOID SidList OPTIONAL
,
2640 IN ULONG SidListLength
,
2641 IN PSID StartSid OPTIONAL
,
2642 IN BOOLEAN RestartScan
2647 NtQueryMultipleValueKey(
2648 IN HANDLE KeyHandle
,
2649 IN OUT PKEY_VALUE_ENTRY ValueList
,
2650 IN ULONG NumberOfValues
,
2652 IN OUT PULONG Length
,
2653 OUT PULONG ReturnLength
2659 ZwQueryMultipleValueKey(
2660 IN HANDLE KeyHandle
,
2661 IN OUT PKEY_VALUE_ENTRY ValueList
,
2662 IN ULONG NumberOfValues
,
2664 IN OUT PULONG Length
,
2665 OUT PULONG ReturnLength
2671 IN HANDLE MutantHandle
,
2672 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2673 OUT PVOID MutantInformation
,
2675 OUT PULONG ResultLength
2682 IN HANDLE MutantHandle
,
2683 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2684 OUT PVOID MutantInformation
,
2686 OUT PULONG ResultLength
2692 IN HANDLE ObjectHandle
,
2693 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2694 OUT PVOID ObjectInformation
,
2696 OUT PULONG ResultLength OPTIONAL
2703 IN HANDLE ObjectHandle
,
2704 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2705 OUT PVOID ObjectInformation
,
2707 OUT PULONG ResultLength OPTIONAL
2712 NtQueryPerformanceCounter(
2713 IN PLARGE_INTEGER Counter
,
2714 IN PLARGE_INTEGER Frequency
2720 ZwQueryPerformanceCounter(
2721 IN PLARGE_INTEGER Counter
,
2722 IN PLARGE_INTEGER Frequency
2728 IN HANDLE SectionHandle
,
2729 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2730 OUT PVOID SectionInformation
,
2732 OUT PULONG ResultLength
2739 IN HANDLE SectionHandle
,
2740 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2741 OUT PVOID SectionInformation
,
2743 OUT PULONG ResultLength
2749 NtQuerySecurityObject(
2751 IN SECURITY_INFORMATION SecurityInformation
,
2752 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2754 OUT PULONG ResultLength
2760 ZwQuerySecurityObject(
2762 IN SECURITY_INFORMATION SecurityInformation
,
2763 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2765 OUT PULONG ResultLength
2771 IN HANDLE SemaphoreHandle
,
2772 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2773 OUT PVOID SemaphoreInformation
,
2775 OUT PULONG ReturnLength
2782 IN HANDLE SemaphoreHandle
,
2783 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2784 OUT PVOID SemaphoreInformation
,
2786 OUT PULONG ReturnLength
2791 NtQuerySymbolicLinkObject(
2792 IN HANDLE SymLinkObjHandle
,
2793 OUT PUNICODE_STRING LinkTarget
,
2794 OUT PULONG DataWritten OPTIONAL
2800 ZwQuerySymbolicLinkObject(
2801 IN HANDLE SymLinkObjHandle
,
2802 OUT PUNICODE_STRING LinkName
,
2803 OUT PULONG DataWritten OPTIONAL
2808 NtQuerySystemEnvironmentValue(
2809 IN PUNICODE_STRING Name
,
2818 ZwQuerySystemEnvironmentValue(
2819 IN PUNICODE_STRING Name
,
2827 NtQuerySystemInformation(
2828 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2829 OUT PVOID SystemInformation
,
2831 OUT PULONG ResultLength
2837 ZwQuerySystemInformation(
2838 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2839 OUT PVOID SystemInformation
,
2841 OUT PULONG ResultLength
2847 OUT PLARGE_INTEGER CurrentTime
2854 OUT PLARGE_INTEGER CurrentTime
2860 IN HANDLE TimerHandle
,
2861 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2862 OUT PVOID TimerInformation
,
2864 OUT PULONG ResultLength
2871 IN HANDLE TimerHandle
,
2872 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2873 OUT PVOID TimerInformation
,
2875 OUT PULONG ResultLength
2880 NtQueryTimerResolution(
2881 OUT PULONG MinimumResolution
,
2882 OUT PULONG MaximumResolution
,
2883 OUT PULONG ActualResolution
2889 ZwQueryTimerResolution(
2890 OUT PULONG MinimumResolution
,
2891 OUT PULONG MaximumResolution
,
2892 OUT PULONG ActualResolution
2898 IN HANDLE KeyHandle
,
2899 IN PUNICODE_STRING ValueName
,
2900 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2901 OUT PVOID KeyValueInformation
,
2903 OUT PULONG ResultLength
2910 IN HANDLE KeyHandle
,
2911 IN PUNICODE_STRING ValueName
,
2912 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2913 OUT PVOID KeyValueInformation
,
2915 OUT PULONG ResultLength
2920 NtQueryVirtualMemory(
2921 IN HANDLE ProcessHandle
,
2923 IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass
,
2924 OUT PVOID VirtualMemoryInformation
,
2926 OUT PULONG ResultLength
2932 ZwQueryVirtualMemory(
2933 IN HANDLE ProcessHandle
,
2935 IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass
,
2936 OUT PVOID VirtualMemoryInformation
,
2938 OUT PULONG ResultLength
2944 NtQueryVolumeInformationFile(
2945 IN HANDLE FileHandle
,
2946 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2947 OUT PVOID FsInformation
,
2949 IN FS_INFORMATION_CLASS FsInformationClass
2955 ZwQueryVolumeInformationFile(
2956 IN HANDLE FileHandle
,
2957 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2958 OUT PVOID FsInformation
,
2960 IN FS_INFORMATION_CLASS FsInformationClass
2966 HANDLE ThreadHandle
,
2967 PKNORMAL_ROUTINE ApcRoutine
,
2968 PVOID NormalContext
,
2969 PVOID SystemArgument1
,
2970 PVOID SystemArgument2
2977 HANDLE ThreadHandle
,
2978 PKNORMAL_ROUTINE ApcRoutine
,
2979 PVOID NormalContext
,
2980 PVOID SystemArgument1
,
2981 PVOID SystemArgument2
2987 IN PEXCEPTION_RECORD ExceptionRecord
,
2988 IN PCONTEXT Context
,
2989 IN BOOLEAN SearchFrames
2996 IN PEXCEPTION_RECORD ExceptionRecord
,
2997 IN PCONTEXT Context
,
2998 IN BOOLEAN SearchFrames
3004 IN NTSTATUS ErrorStatus
,
3005 IN ULONG NumberOfParameters
,
3006 IN ULONG UnicodeStringParameterMask
,
3007 IN PULONG_PTR Parameters
,
3008 IN ULONG ValidResponseOptions
,
3016 IN NTSTATUS ErrorStatus
,
3017 IN ULONG NumberOfParameters
,
3018 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
3019 IN PVOID
*Parameters
,
3020 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
3021 OUT PHARDERROR_RESPONSE Response
3028 IN HANDLE FileHandle
,
3029 IN HANDLE Event OPTIONAL
,
3030 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3031 IN PVOID UserApcContext OPTIONAL
,
3032 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3034 IN ULONG BufferLength
,
3035 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
3036 IN PULONG Key OPTIONAL
3043 IN HANDLE FileHandle
,
3044 IN HANDLE Event OPTIONAL
,
3045 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3046 IN PVOID UserApcContext OPTIONAL
,
3047 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3049 IN ULONG BufferLength
,
3050 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
3051 IN PULONG Key OPTIONAL
3057 IN HANDLE FileHandle
,
3058 IN HANDLE Event OPTIONAL
,
3059 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3060 IN PVOID UserApcContext OPTIONAL
,
3061 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
3062 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3063 IN ULONG BufferLength
,
3064 IN PLARGE_INTEGER ByteOffset
,
3065 IN PULONG Key OPTIONAL
3072 IN HANDLE FileHandle
,
3073 IN HANDLE Event OPTIONAL
,
3074 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
3075 IN PVOID UserApcContext OPTIONAL
,
3076 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
3077 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3078 IN ULONG BufferLength
,
3079 IN PLARGE_INTEGER ByteOffset
,
3080 IN PULONG Key OPTIONAL
3087 PPORT_MESSAGE Message
,
3099 PPORT_MESSAGE Message
,
3108 NtReadVirtualMemory(
3109 IN HANDLE ProcessHandle
,
3110 IN PVOID BaseAddress
,
3112 IN ULONG NumberOfBytesToRead
,
3113 OUT PULONG NumberOfBytesRead
3119 ZwReadVirtualMemory(
3120 IN HANDLE ProcessHandle
,
3121 IN PVOID BaseAddress
,
3123 IN ULONG NumberOfBytesToRead
,
3124 OUT PULONG NumberOfBytesRead
3129 NtRegisterThreadTerminatePort(
3130 HANDLE TerminationPort
3136 ZwRegisterThreadTerminatePort(
3137 HANDLE TerminationPort
3143 IN HANDLE MutantHandle
,
3144 IN PLONG ReleaseCount OPTIONAL
3151 IN HANDLE MutantHandle
,
3152 IN PLONG ReleaseCount OPTIONAL
3158 IN HANDLE SemaphoreHandle
,
3159 IN LONG ReleaseCount
,
3160 OUT PLONG PreviousCount
3167 IN HANDLE SemaphoreHandle
,
3168 IN LONG ReleaseCount
,
3169 OUT PLONG PreviousCount
3174 NtRemoveIoCompletion(
3175 IN HANDLE IoCompletionHandle
,
3176 OUT PVOID
*CompletionKey
,
3177 OUT PVOID
*CompletionContext
,
3178 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3179 IN PLARGE_INTEGER Timeout OPTIONAL
3185 ZwRemoveIoCompletion(
3186 IN HANDLE IoCompletionHandle
,
3187 OUT PVOID
*CompletionKey
,
3188 OUT PVOID
*CompletionContext
,
3189 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3190 IN PLARGE_INTEGER Timeout OPTIONAL
3196 IN POBJECT_ATTRIBUTES ObjectAttributes
,
3198 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
3205 IN POBJECT_ATTRIBUTES ObjectAttributes
,
3207 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
3214 PPORT_MESSAGE LpcReply
3222 PPORT_MESSAGE LpcReply
3227 NtReplyWaitReceivePort(
3229 PVOID
*PortContext OPTIONAL
,
3230 PPORT_MESSAGE ReplyMessage OPTIONAL
,
3231 PPORT_MESSAGE ReceiveMessage
3237 ZwReplyWaitReceivePort(
3239 PVOID
*PortContext OPTIONAL
,
3240 PPORT_MESSAGE ReplyMessage
,
3241 PPORT_MESSAGE ReceiveMessage
3246 NtReplyWaitReplyPort(
3248 PPORT_MESSAGE ReplyMessage
3254 ZwReplyWaitReplyPort(
3256 PPORT_MESSAGE ReplyMessage
3263 PPORT_MESSAGE LpcMessage
);
3270 PPORT_MESSAGE LpcMessage
3276 NtRequestWaitReplyPort(
3278 PPORT_MESSAGE LpcReply
,
3279 PPORT_MESSAGE LpcRequest
3285 ZwRequestWaitReplyPort(
3287 PPORT_MESSAGE LpcReply
,
3288 PPORT_MESSAGE LpcRequest
3295 PLONG NumberOfWaitingThreads OPTIONAL
3303 PLONG NumberOfWaitingThreads OPTIONAL
3326 IN HANDLE ThreadHandle
,
3327 OUT PULONG SuspendCount
3334 IN HANDLE ThreadHandle
,
3335 OUT PULONG SuspendCount
3341 IN HANDLE ProcessHandle
3348 IN HANDLE ProcessHandle
3354 IN HANDLE KeyHandle
,
3355 IN HANDLE FileHandle
3362 IN HANDLE KeyHandle
,
3363 IN HANDLE FileHandle
3369 IN HANDLE KeyHandle
,
3370 IN HANDLE FileHandle
,
3378 IN HANDLE KeyHandle
,
3379 IN HANDLE FileHandle
,
3387 NtSecureConnectPort(
3389 PUNICODE_STRING PortName
,
3390 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
3391 PPORT_VIEW ClientView OPTIONAL
,
3393 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
3394 PULONG MaxMessageLength OPTIONAL
,
3395 PVOID ConnectionInformation OPTIONAL
,
3396 PULONG ConnectionInformationLength OPTIONAL
3402 ZwSecureConnectPort(
3404 PUNICODE_STRING PortName
,
3405 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
3406 PPORT_VIEW ClientView OPTIONAL
,
3408 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
3409 PULONG MaxMessageLength OPTIONAL
,
3410 PVOID ConnectionInformation OPTIONAL
,
3411 PULONG ConnectionInformationLength OPTIONAL
3416 NtSetBootEntryOrder(
3424 ZwSetBootEntryOrder(
3447 IN HANDLE ThreadHandle
,
3455 IN HANDLE ThreadHandle
,
3462 NtSetDebugFilterState(
3471 IN BOOLEAN UserProfile
,
3472 IN LCID DefaultLocaleId
3479 IN BOOLEAN UserProfile
,
3480 IN LCID DefaultLocaleId
3485 NtSetDefaultUILanguage(
3492 ZwSetDefaultUILanguage(
3498 NtSetDefaultHardErrorPort(
3499 IN HANDLE PortHandle
3505 ZwSetDefaultHardErrorPort(
3506 IN HANDLE PortHandle
3512 IN HANDLE FileHandle
,
3513 IN PIO_STATUS_BLOCK IoStatusBlock
,
3518 #ifdef NTOS_MODE_USER
3523 IN HANDLE FileHandle
,
3524 IN PIO_STATUS_BLOCK IoStatusBlock
,
3533 IN HANDLE EventHandle
,
3534 OUT PLONG PreviousState OPTIONAL
3541 IN HANDLE EventHandle
,
3542 OUT PLONG PreviousState OPTIONAL
3548 IN HANDLE EventPairHandle
3555 IN HANDLE EventPairHandle
3559 NtSetHighWaitLowEventPair(
3560 IN HANDLE EventPairHandle
3566 ZwSetHighWaitLowEventPair(
3567 IN HANDLE EventPairHandle
3573 NtSetInformationFile(
3574 IN HANDLE FileHandle
,
3575 IN PIO_STATUS_BLOCK IoStatusBlock
,
3576 IN PVOID FileInformation
,
3578 IN FILE_INFORMATION_CLASS FileInformationClass
3584 ZwSetInformationFile(
3585 IN HANDLE FileHandle
,
3586 IN PIO_STATUS_BLOCK IoStatusBlock
,
3587 IN PVOID FileInformation
,
3589 IN FILE_INFORMATION_CLASS FileInformationClass
3594 NtSetInformationJobObject(
3596 JOBOBJECTINFOCLASS JobInformationClass
,
3597 PVOID JobInformation
,
3598 ULONG JobInformationLength
3604 ZwSetInformationJobObject(
3606 JOBOBJECTINFOCLASS JobInformationClass
,
3607 PVOID JobInformation
,
3608 ULONG JobInformationLength
3613 NtSetInformationKey(
3614 IN HANDLE KeyHandle
,
3615 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3616 IN PVOID KeyInformation
,
3617 IN ULONG KeyInformationLength
3623 ZwSetInformationKey(
3624 IN HANDLE KeyHandle
,
3625 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3626 IN PVOID KeyInformation
,
3627 IN ULONG KeyInformationLength
3632 NtSetInformationObject(
3633 IN HANDLE ObjectHandle
,
3634 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3635 IN PVOID ObjectInformation
,
3642 ZwSetInformationObject(
3643 IN HANDLE ObjectHandle
,
3644 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3645 IN PVOID ObjectInformation
,
3651 NtSetInformationProcess(
3652 IN HANDLE ProcessHandle
,
3653 IN PROCESSINFOCLASS ProcessInformationClass
,
3654 IN PVOID ProcessInformation
,
3655 IN ULONG ProcessInformationLength
3661 NtSetInformationThread(
3662 IN HANDLE ThreadHandle
,
3663 IN THREADINFOCLASS ThreadInformationClass
,
3664 IN PVOID ThreadInformation
,
3665 IN ULONG ThreadInformationLength
3671 ZwSetInformationThread(
3672 IN HANDLE ThreadHandle
,
3673 IN THREADINFOCLASS ThreadInformationClass
,
3674 IN PVOID ThreadInformation
,
3675 IN ULONG ThreadInformationLength
3681 NtSetInformationToken(
3682 IN HANDLE TokenHandle
,
3683 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3684 OUT PVOID TokenInformation
,
3685 IN ULONG TokenInformationLength
3691 ZwSetInformationToken(
3692 IN HANDLE TokenHandle
,
3693 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3694 OUT PVOID TokenInformation
,
3695 IN ULONG TokenInformationLength
3701 IN HANDLE IoCompletionPortHandle
,
3702 IN PVOID CompletionKey
,
3703 IN PVOID CompletionContext
,
3704 IN NTSTATUS CompletionStatus
,
3705 IN ULONG CompletionInformation
3712 IN HANDLE IoCompletionPortHandle
,
3713 IN PVOID CompletionKey
,
3714 IN PVOID CompletionContext
,
3715 IN NTSTATUS CompletionStatus
,
3716 IN ULONG CompletionInformation
3721 NtSetIntervalProfile(
3723 KPROFILE_SOURCE ClockSource
3729 ZwSetIntervalProfile(
3731 KPROFILE_SOURCE ClockSource
3738 LDT_ENTRY LdtEntry1
,
3758 NtSetLowWaitHighEventPair(
3765 ZwSetLowWaitHighEventPair(
3772 NtSetQuotaInformationFile(
3774 PIO_STATUS_BLOCK IoStatusBlock
,
3782 ZwSetQuotaInformationFile(
3784 PIO_STATUS_BLOCK IoStatusBlock
,
3792 NtSetSecurityObject(
3794 IN SECURITY_INFORMATION SecurityInformation
,
3795 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3801 ZwSetSecurityObject(
3803 IN SECURITY_INFORMATION SecurityInformation
,
3804 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3809 NtSetSystemEnvironmentValue(
3810 IN PUNICODE_STRING VariableName
,
3811 IN PUNICODE_STRING Value
3817 ZwSetSystemEnvironmentValue(
3818 IN PUNICODE_STRING VariableName
,
3819 IN PUNICODE_STRING Value
3824 NtSetSystemInformation(
3825 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3826 IN PVOID SystemInformation
,
3827 IN ULONG SystemInformationLength
3833 ZwSetSystemInformation(
3834 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3835 IN PVOID SystemInformation
,
3836 IN ULONG SystemInformationLength
3842 NtSetSystemPowerState(
3843 IN POWER_ACTION SystemAction
,
3844 IN SYSTEM_POWER_STATE MinSystemState
,
3851 IN PLARGE_INTEGER SystemTime
,
3852 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3859 IN PLARGE_INTEGER SystemTime
,
3860 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3866 IN HANDLE TimerHandle
,
3867 IN PLARGE_INTEGER DueTime
,
3868 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3869 IN PVOID TimerContext
,
3870 IN BOOLEAN WakeTimer
,
3871 IN LONG Period OPTIONAL
,
3872 OUT PBOOLEAN PreviousState OPTIONAL
3877 NtSetTimerResolution(
3878 IN ULONG RequestedResolution
,
3879 IN BOOLEAN SetOrUnset
,
3880 OUT PULONG ActualResolution
3886 ZwSetTimerResolution(
3887 IN ULONG RequestedResolution
,
3888 IN BOOLEAN SetOrUnset
,
3889 OUT PULONG ActualResolution
3908 IN HANDLE KeyHandle
,
3909 IN PUNICODE_STRING ValueName
,
3910 IN ULONG TitleIndex OPTIONAL
,
3920 IN HANDLE KeyHandle
,
3921 IN PUNICODE_STRING ValueName
,
3922 IN ULONG TitleIndex OPTIONAL
,
3931 NtSetVolumeInformationFile(
3932 IN HANDLE FileHandle
,
3933 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3934 IN PVOID FsInformation
,
3936 IN FS_INFORMATION_CLASS FsInformationClass
3942 ZwSetVolumeInformationFile(
3943 IN HANDLE FileHandle
,
3944 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3945 IN PVOID FsInformation
,
3947 IN FS_INFORMATION_CLASS FsInformationClass
3953 IN SHUTDOWN_ACTION Action
3960 IN SHUTDOWN_ACTION Action
3965 NtSignalAndWaitForSingleObject(
3966 IN HANDLE SignalObject
,
3967 IN HANDLE WaitObject
,
3968 IN BOOLEAN Alertable
,
3969 IN PLARGE_INTEGER Time
3975 ZwSignalAndWaitForSingleObject(
3976 IN HANDLE SignalObject
,
3977 IN HANDLE WaitObject
,
3978 IN BOOLEAN Alertable
,
3979 IN PLARGE_INTEGER Time
3985 HANDLE ProfileHandle
3992 HANDLE ProfileHandle
3998 HANDLE ProfileHandle
4005 HANDLE ProfileHandle
4011 IN HANDLE ProcessHandle
4018 IN HANDLE ProcessHandle
4024 IN HANDLE ThreadHandle
,
4025 IN PULONG PreviousSuspendCount
4032 IN HANDLE ThreadHandle
,
4033 IN PULONG PreviousSuspendCount
4038 NtSystemDebugControl(
4039 DEBUG_CONTROL_CODE ControlCode
,
4041 ULONG InputBufferLength
,
4043 ULONG OutputBufferLength
,
4050 IN HANDLE ProcessHandle
,
4051 IN NTSTATUS ExitStatus
4058 IN HANDLE ProcessHandle
,
4059 IN NTSTATUS ExitStatus
4065 IN HANDLE ThreadHandle
,
4066 IN NTSTATUS ExitStatus
4073 IN HANDLE ThreadHandle
,
4074 IN NTSTATUS ExitStatus
4079 NtTerminateJobObject(
4087 ZwTerminateJobObject(
4108 IN ULONG TraceHandle
,
4110 IN ULONG TraceHeaderLength
,
4111 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
4118 IN ULONG TraceHandle
,
4120 IN ULONG TraceHeaderLength
,
4121 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
4126 NtTranslateFilePath(
4135 ZwTranslateFilePath(
4144 IN PUNICODE_STRING DriverServiceName
4151 IN PUNICODE_STRING DriverServiceName
4157 IN POBJECT_ATTRIBUTES KeyObjectAttributes
4164 IN POBJECT_ATTRIBUTES KeyObjectAttributes
4171 IN HANDLE FileHandle
,
4172 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4173 IN PLARGE_INTEGER ByteOffset
,
4174 IN PLARGE_INTEGER Lenght
,
4175 OUT ULONG Key OPTIONAL
4182 IN HANDLE FileHandle
,
4183 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4184 IN PLARGE_INTEGER ByteOffset
,
4185 IN PLARGE_INTEGER Lenght
,
4186 OUT ULONG Key OPTIONAL
4191 NtUnlockVirtualMemory(
4192 IN HANDLE ProcessHandle
,
4193 IN PVOID BaseAddress
,
4194 IN ULONG NumberOfBytesToUnlock
,
4195 OUT PULONG NumberOfBytesUnlocked OPTIONAL
4201 ZwUnlockVirtualMemory(
4202 IN HANDLE ProcessHandle
,
4203 IN PVOID BaseAddress
,
4204 IN ULONG NumberOfBytesToUnlock
,
4205 OUT PULONG NumberOfBytesUnlocked OPTIONAL
4210 NtUnmapViewOfSection(
4211 IN HANDLE ProcessHandle
,
4212 IN PVOID BaseAddress
4218 ZwUnmapViewOfSection(
4219 IN HANDLE ProcessHandle
,
4220 IN PVOID BaseAddress
4233 IN ULONG RoutineIndex
,
4235 IN ULONG ArgumentLength
,
4236 OUT PVOID
* Result OPTIONAL
,
4237 OUT PULONG ResultLength OPTIONAL
4243 NtWaitForDebugEvent(
4244 IN HANDLE DebugObject
,
4245 IN BOOLEAN Alertable
,
4246 IN PLARGE_INTEGER Timeout OPTIONAL
,
4247 OUT PDBGUI_WAIT_STATE_CHANGE StateChange
4253 ZwWaitForDebugEvent(
4254 IN HANDLE DebugObject
,
4255 IN BOOLEAN Alertable
,
4256 IN PLARGE_INTEGER Timeout OPTIONAL
,
4257 OUT PDBGUI_WAIT_STATE_CHANGE StateChange
4262 NtWaitForMultipleObjects(
4265 IN WAIT_TYPE WaitType
,
4266 IN BOOLEAN Alertable
,
4267 IN PLARGE_INTEGER Time
4273 ZwWaitForMultipleObjects(
4276 IN WAIT_TYPE WaitType
,
4277 IN BOOLEAN Alertable
,
4278 IN PLARGE_INTEGER Time
4283 NtWaitForSingleObject(
4285 IN BOOLEAN Alertable
,
4286 IN PLARGE_INTEGER Time
4292 ZwWaitForSingleObject(
4294 IN BOOLEAN Alertable
,
4295 IN PLARGE_INTEGER Time
4300 NtWaitHighEventPair(
4301 IN HANDLE EventPairHandle
4307 ZwWaitHighEventPair(
4308 IN HANDLE EventPairHandle
4314 IN HANDLE EventPairHandle
4321 IN HANDLE EventPairHandle
4328 IN HANDLE FileHandle
,
4329 IN HANDLE Event OPTIONAL
,
4330 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4331 IN PVOID ApcContext OPTIONAL
,
4332 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4335 IN PLARGE_INTEGER ByteOffset
,
4336 IN PULONG Key OPTIONAL
4343 IN HANDLE FileHandle
,
4344 IN HANDLE Event OPTIONAL
,
4345 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4346 IN PVOID ApcContext OPTIONAL
,
4347 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4350 IN PLARGE_INTEGER ByteOffset
,
4351 IN PULONG Key OPTIONAL
4357 IN HANDLE FileHandle
,
4358 IN HANDLE Event OPTIONAL
,
4359 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4360 IN PVOID ApcContext OPTIONAL
,
4361 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4362 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
4363 IN ULONG BufferLength
,
4364 IN PLARGE_INTEGER ByteOffset
,
4365 IN PULONG Key OPTIONAL
4372 IN HANDLE FileHandle
,
4373 IN HANDLE Event OPTIONAL
,
4374 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
4375 IN PVOID ApcContext OPTIONAL
,
4376 OUT PIO_STATUS_BLOCK IoStatusBlock
,
4377 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
4378 IN ULONG BufferLength
,
4379 IN PLARGE_INTEGER ByteOffset
,
4380 IN PULONG Key OPTIONAL
4387 PPORT_MESSAGE Message
,
4399 PPORT_MESSAGE Message
,
4408 NtWriteVirtualMemory(
4409 IN HANDLE ProcessHandle
,
4410 IN PVOID BaseAddress
,
4412 IN ULONG NumberOfBytesToWrite
,
4413 OUT PULONG NumberOfBytesWritten
4419 ZwWriteVirtualMemory(
4420 IN HANDLE ProcessHandle
,
4421 IN PVOID BaseAddress
,
4423 IN ULONG NumberOfBytesToWrite
,
4424 OUT PULONG NumberOfBytesWritten