2 * PROJECT: ReactOS Native Headers
3 * FILE: include/ndk/zwfuncs.h
4 * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
5 * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
12 /* DEPENDENCIES **************************************************************/
16 /* FUNCTION TYPES ************************************************************/
18 /* PROTOTYPES ****************************************************************/
24 PVOID PortContext OPTIONAL
,
25 PPORT_MESSAGE ConnectionRequest
,
26 BOOLEAN AcceptConnection
,
27 PPORT_VIEW ServerView OPTIONAL
,
28 PREMOTE_PORT_VIEW ClientView OPTIONAL
35 PVOID PortContext OPTIONAL
,
36 PPORT_MESSAGE ConnectionRequest
,
37 BOOLEAN AcceptConnection
,
38 PPORT_VIEW ServerView OPTIONAL
,
39 PREMOTE_PORT_VIEW ClientView OPTIONAL
45 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
46 IN HANDLE ClientToken
,
47 IN ACCESS_MASK DesiredAcces
,
48 IN PGENERIC_MAPPING GenericMapping
,
49 OUT PPRIVILEGE_SET PrivilegeSet
,
50 OUT PULONG ReturnLength
,
51 OUT PACCESS_MASK GrantedAccess
,
52 OUT PNTSTATUS AccessStatus
58 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
59 IN HANDLE ClientToken
,
60 IN ACCESS_MASK DesiredAcces
,
61 IN PGENERIC_MAPPING GenericMapping
,
62 OUT PPRIVILEGE_SET PrivilegeSet
,
63 OUT PULONG ReturnLength
,
64 OUT PACCESS_MASK GrantedAccess
,
65 OUT PNTSTATUS AccessStatus
70 NtAccessCheckAndAuditAlarm(
71 IN PUNICODE_STRING SubsystemName
,
72 IN PHANDLE ObjectHandle
,
73 IN PUNICODE_STRING ObjectTypeName
,
74 IN PUNICODE_STRING ObjectName
,
75 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
76 IN ACCESS_MASK DesiredAccess
,
77 IN PGENERIC_MAPPING GenericMapping
,
78 IN BOOLEAN ObjectCreation
,
79 OUT PACCESS_MASK GrantedAccess
,
80 OUT PNTSTATUS AccessStatus
,
81 OUT PBOOLEAN GenerateOnClose
88 IN ULONG AtomNameLength
,
96 IN ULONG AtomNameLength
,
103 IN PUNICODE_STRING EntryName
,
104 IN PUNICODE_STRING EntryValue
110 IN PUNICODE_STRING EntryName
,
111 IN PUNICODE_STRING EntryValue
117 IN HANDLE TokenHandle
,
118 IN BOOLEAN ResetToDefault
,
119 IN PTOKEN_GROUPS NewState
,
120 IN ULONG BufferLength
,
121 OUT PTOKEN_GROUPS PreviousState OPTIONAL
,
122 OUT PULONG ReturnLength
128 IN HANDLE TokenHandle
,
129 IN BOOLEAN ResetToDefault
,
130 IN PTOKEN_GROUPS NewState
,
131 IN ULONG BufferLength
,
132 OUT PTOKEN_GROUPS PreviousState
,
133 OUT PULONG ReturnLength
138 NtAdjustPrivilegesToken(
139 IN HANDLE TokenHandle
,
140 IN BOOLEAN DisableAllPrivileges
,
141 IN PTOKEN_PRIVILEGES NewState
,
142 IN ULONG BufferLength
,
143 OUT PTOKEN_PRIVILEGES PreviousState
,
144 OUT PULONG ReturnLength
149 ZwAdjustPrivilegesToken(
150 IN HANDLE TokenHandle
,
151 IN BOOLEAN DisableAllPrivileges
,
152 IN PTOKEN_PRIVILEGES NewState
,
153 IN ULONG BufferLength
,
154 OUT PTOKEN_PRIVILEGES PreviousState
,
155 OUT PULONG ReturnLength
161 IN HANDLE ThreadHandle
,
162 OUT PULONG SuspendCount
168 IN HANDLE ThreadHandle
,
169 OUT PULONG SuspendCount
175 IN HANDLE ThreadHandle
181 IN HANDLE ThreadHandle
186 NtAllocateLocallyUniqueId(
187 OUT LUID
*LocallyUniqueId
192 ZwAllocateLocallyUniqueId(
199 PULARGE_INTEGER Time
,
208 PULARGE_INTEGER Time
,
216 NtAllocateVirtualMemory(
217 IN HANDLE ProcessHandle
,
218 IN OUT PVOID
*BaseAddress
,
220 IN OUT PULONG RegionSize
,
221 IN ULONG AllocationType
,
227 ZwAllocateVirtualMemory(
228 IN HANDLE ProcessHandle
,
229 IN OUT PVOID
*BaseAddress
,
231 IN OUT PULONG RegionSize
,
232 IN ULONG AllocationType
,
238 NtAssignProcessToJobObject(
245 ZwAssignProcessToJobObject(
269 IN HANDLE FileHandle
,
270 OUT PIO_STATUS_BLOCK IoStatusBlock
276 IN HANDLE FileHandle
,
277 OUT PIO_STATUS_BLOCK IoStatusBlock
283 IN HANDLE TimerHandle
,
284 OUT PBOOLEAN CurrentState OPTIONAL
290 IN HANDLE EventHandle
296 IN HANDLE EventHandle
303 ACCESS_MASK DesiredAccess
,
304 POBJECT_ATTRIBUTES ObjectAttributes
311 ACCESS_MASK DesiredAccess
,
312 POBJECT_ATTRIBUTES ObjectAttributes
329 NtCloseObjectAuditAlarm(
330 IN PUNICODE_STRING SubsystemName
,
332 IN BOOLEAN GenerateOnClose
337 ZwCloseObjectAuditAlarm(
338 IN PUNICODE_STRING SubsystemName
,
340 IN BOOLEAN GenerateOnClose
345 NtCompleteConnectPort(
351 ZwCompleteConnectPort(
359 PUNICODE_STRING PortName
,
360 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
361 PPORT_VIEW ClientView OPTIONAL
,
362 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
363 PULONG MaxMessageLength OPTIONAL
,
364 PVOID ConnectionInformation OPTIONAL
,
365 PULONG ConnectionInformationLength OPTIONAL
372 PUNICODE_STRING PortName
,
373 PSECURITY_QUALITY_OF_SERVICE SecurityQos
,
374 PPORT_VIEW ClientView OPTIONAL
,
375 PREMOTE_PORT_VIEW ServerView OPTIONAL
,
376 PULONG MaxMessageLength OPTIONAL
,
377 PVOID ConnectionInformation OPTIONAL
,
378 PULONG ConnectionInformationLength OPTIONAL
397 NtCreateDirectoryObject(
398 OUT PHANDLE DirectoryHandle
,
399 IN ACCESS_MASK DesiredAccess
,
400 IN POBJECT_ATTRIBUTES ObjectAttributes
405 ZwCreateDirectoryObject(
406 OUT PHANDLE DirectoryHandle
,
407 IN ACCESS_MASK DesiredAccess
,
408 IN POBJECT_ATTRIBUTES ObjectAttributes
414 OUT PHANDLE EventHandle
,
415 IN ACCESS_MASK DesiredAccess
,
416 IN POBJECT_ATTRIBUTES ObjectAttributes
,
417 IN EVENT_TYPE EventType
,
418 IN BOOLEAN InitialState
424 OUT PHANDLE EventHandle
,
425 IN ACCESS_MASK DesiredAccess
,
426 IN POBJECT_ATTRIBUTES ObjectAttributes
,
427 IN EVENT_TYPE EventType
,
428 IN BOOLEAN InitialState
434 OUT PHANDLE EventPairHandle
,
435 IN ACCESS_MASK DesiredAccess
,
436 IN POBJECT_ATTRIBUTES ObjectAttributes
442 OUT PHANDLE EventPairHandle
,
443 IN ACCESS_MASK DesiredAccess
,
444 IN POBJECT_ATTRIBUTES ObjectAttributes
450 OUT PHANDLE FileHandle
,
451 IN ACCESS_MASK DesiredAccess
,
452 IN POBJECT_ATTRIBUTES ObjectAttributes
,
453 OUT PIO_STATUS_BLOCK IoStatusBlock
,
454 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
455 IN ULONG FileAttributes
,
456 IN ULONG ShareAccess
,
457 IN ULONG CreateDisposition
,
458 IN ULONG CreateOptions
,
459 IN PVOID EaBuffer OPTIONAL
,
466 OUT PHANDLE FileHandle
,
467 IN ACCESS_MASK DesiredAccess
,
468 IN POBJECT_ATTRIBUTES ObjectAttributes
,
469 OUT PIO_STATUS_BLOCK IoStatusBlock
,
470 IN PLARGE_INTEGER AllocationSize OPTIONAL
,
471 IN ULONG FileAttributes
,
472 IN ULONG ShareAccess
,
473 IN ULONG CreateDisposition
,
474 IN ULONG CreateOptions
,
475 IN PVOID EaBuffer OPTIONAL
,
481 NtCreateIoCompletion(
482 OUT PHANDLE IoCompletionHandle
,
483 IN ACCESS_MASK DesiredAccess
,
484 IN POBJECT_ATTRIBUTES ObjectAttributes
,
485 IN ULONG NumberOfConcurrentThreads
490 ZwCreateIoCompletion(
491 OUT PHANDLE IoCompletionHandle
,
492 IN ACCESS_MASK DesiredAccess
,
493 IN POBJECT_ATTRIBUTES ObjectAttributes
,
494 IN ULONG NumberOfConcurrentThreads
500 OUT PHANDLE KeyHandle
,
501 IN ACCESS_MASK DesiredAccess
,
502 IN POBJECT_ATTRIBUTES ObjectAttributes
,
504 IN PUNICODE_STRING Class OPTIONAL
,
505 IN ULONG CreateOptions
,
506 IN PULONG Disposition OPTIONAL
512 OUT PHANDLE KeyHandle
,
513 IN ACCESS_MASK DesiredAccess
,
514 IN POBJECT_ATTRIBUTES ObjectAttributes
,
516 IN PUNICODE_STRING Class OPTIONAL
,
517 IN ULONG CreateOptions
,
518 IN PULONG Disposition OPTIONAL
523 NtCreateMailslotFile(
524 OUT PHANDLE MailSlotFileHandle
,
525 IN ACCESS_MASK DesiredAccess
,
526 IN POBJECT_ATTRIBUTES ObjectAttributes
,
527 OUT PIO_STATUS_BLOCK IoStatusBlock
,
528 IN ULONG FileAttributes
,
529 IN ULONG ShareAccess
,
530 IN ULONG MaxMessageSize
,
531 IN PLARGE_INTEGER TimeOut
536 ZwCreateMailslotFile(
537 OUT PHANDLE MailSlotFileHandle
,
538 IN ACCESS_MASK DesiredAccess
,
539 IN POBJECT_ATTRIBUTES ObjectAttributes
,
540 OUT PIO_STATUS_BLOCK IoStatusBlock
,
541 IN ULONG FileAttributes
,
542 IN ULONG ShareAccess
,
543 IN ULONG MaxMessageSize
,
544 IN PLARGE_INTEGER TimeOut
550 OUT PHANDLE MutantHandle
,
551 IN ACCESS_MASK DesiredAccess
,
552 IN POBJECT_ATTRIBUTES ObjectAttributes
,
553 IN BOOLEAN InitialOwner
559 OUT PHANDLE MutantHandle
,
560 IN ACCESS_MASK DesiredAccess
,
561 IN POBJECT_ATTRIBUTES ObjectAttributes
,
562 IN BOOLEAN InitialOwner
567 NtCreateNamedPipeFile(
568 OUT PHANDLE NamedPipeFileHandle
,
569 IN ACCESS_MASK DesiredAccess
,
570 IN POBJECT_ATTRIBUTES ObjectAttributes
,
571 OUT PIO_STATUS_BLOCK IoStatusBlock
,
572 IN ULONG ShareAccess
,
573 IN ULONG CreateDisposition
,
574 IN ULONG CreateOptions
,
575 IN ULONG WriteModeMessage
,
576 IN ULONG ReadModeMessage
,
577 IN ULONG NonBlocking
,
578 IN ULONG MaxInstances
,
579 IN ULONG InBufferSize
,
580 IN ULONG OutBufferSize
,
581 IN PLARGE_INTEGER DefaultTimeOut
586 ZwCreateNamedPipeFile(
587 OUT PHANDLE NamedPipeFileHandle
,
588 IN ACCESS_MASK DesiredAccess
,
589 IN POBJECT_ATTRIBUTES ObjectAttributes
,
590 OUT PIO_STATUS_BLOCK IoStatusBlock
,
591 IN ULONG ShareAccess
,
592 IN ULONG CreateDisposition
,
593 IN ULONG CreateOptions
,
594 IN ULONG WriteModeMessage
,
595 IN ULONG ReadModeMessage
,
596 IN ULONG NonBlocking
,
597 IN ULONG MaxInstances
,
598 IN ULONG InBufferSize
,
599 IN ULONG OutBufferSize
,
600 IN PLARGE_INTEGER DefaultTimeOut
606 IN PUNICODE_STRING FileName
,
607 IN PLARGE_INTEGER InitialSize
,
608 IN PLARGE_INTEGER MaxiumSize
,
615 IN PUNICODE_STRING FileName
,
616 IN PLARGE_INTEGER InitialSize
,
617 IN PLARGE_INTEGER MaxiumSize
,
625 POBJECT_ATTRIBUTES ObjectAttributes
,
626 ULONG MaxConnectionInfoLength
,
627 ULONG MaxMessageLength
,
635 POBJECT_ATTRIBUTES ObjectAttributes
,
636 ULONG MaxConnectionInfoLength
,
637 ULONG MaxMessageLength
,
644 OUT PHANDLE ProcessHandle
,
645 IN ACCESS_MASK DesiredAccess
,
646 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
647 IN HANDLE ParentProcess
,
648 IN BOOLEAN InheritObjectTable
,
649 IN HANDLE SectionHandle OPTIONAL
,
650 IN HANDLE DebugPort OPTIONAL
,
651 IN HANDLE ExceptionPort OPTIONAL
657 OUT PHANDLE ProcessHandle
,
658 IN ACCESS_MASK DesiredAccess
,
659 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
660 IN HANDLE ParentProcess
,
661 IN BOOLEAN InheritObjectTable
,
662 IN HANDLE SectionHandle OPTIONAL
,
663 IN HANDLE DebugPort OPTIONAL
,
664 IN HANDLE ExceptionPort OPTIONAL
670 OUT PHANDLE ProfileHandle
,
671 IN HANDLE ProcessHandle
,
674 IN ULONG Granularity
,
676 IN ULONG ProfilingSize
,
677 IN KPROFILE_SOURCE Source
,
678 IN KAFFINITY ProcessorMask
684 OUT PHANDLE ProfileHandle
,
685 IN POBJECT_ATTRIBUTES ObjectAttributes
,
688 IN ULONG Granularity
,
690 IN ULONG ProfilingSize
,
691 IN ULONG ClockSource
,
692 IN ULONG ProcessorMask
698 OUT PHANDLE SectionHandle
,
699 IN ACCESS_MASK DesiredAccess
,
700 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
701 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
702 IN ULONG SectionPageProtection OPTIONAL
,
703 IN ULONG AllocationAttributes
,
704 IN HANDLE FileHandle OPTIONAL
710 OUT PHANDLE SectionHandle
,
711 IN ACCESS_MASK DesiredAccess
,
712 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
713 IN PLARGE_INTEGER MaximumSize OPTIONAL
,
714 IN ULONG SectionPageProtection OPTIONAL
,
715 IN ULONG AllocationAttributes
,
716 IN HANDLE FileHandle OPTIONAL
722 OUT PHANDLE SemaphoreHandle
,
723 IN ACCESS_MASK DesiredAccess
,
724 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
725 IN LONG InitialCount
,
732 OUT PHANDLE SemaphoreHandle
,
733 IN ACCESS_MASK DesiredAccess
,
734 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
735 IN LONG InitialCount
,
741 NtCreateSymbolicLinkObject(
742 OUT PHANDLE SymbolicLinkHandle
,
743 IN ACCESS_MASK DesiredAccess
,
744 IN POBJECT_ATTRIBUTES ObjectAttributes
,
745 IN PUNICODE_STRING Name
750 ZwCreateSymbolicLinkObject(
751 OUT PHANDLE SymbolicLinkHandle
,
752 IN ACCESS_MASK DesiredAccess
,
753 IN POBJECT_ATTRIBUTES ObjectAttributes
,
754 IN PUNICODE_STRING Name
760 OUT PHANDLE ThreadHandle
,
761 IN ACCESS_MASK DesiredAccess
,
762 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
763 IN HANDLE ProcessHandle
,
764 OUT PCLIENT_ID ClientId
,
765 IN PCONTEXT ThreadContext
,
766 IN PINITIAL_TEB UserStack
,
767 IN BOOLEAN CreateSuspended
773 OUT PHANDLE ThreadHandle
,
774 IN ACCESS_MASK DesiredAccess
,
775 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
776 IN HANDLE ProcessHandle
,
777 OUT PCLIENT_ID ClientId
,
778 IN PCONTEXT ThreadContext
,
779 IN PINITIAL_TEB UserStack
,
780 IN BOOLEAN CreateSuspended
786 OUT PHANDLE TimerHandle
,
787 IN ACCESS_MASK DesiredAccess
,
788 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
789 IN TIMER_TYPE TimerType
795 OUT PHANDLE TimerHandle
,
796 IN ACCESS_MASK DesiredAccess
,
797 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
798 IN TIMER_TYPE TimerType
804 OUT PHANDLE TokenHandle
,
805 IN ACCESS_MASK DesiredAccess
,
806 IN POBJECT_ATTRIBUTES ObjectAttributes
,
807 IN TOKEN_TYPE TokenType
,
808 IN PLUID AuthenticationId
,
809 IN PLARGE_INTEGER ExpirationTime
,
810 IN PTOKEN_USER TokenUser
,
811 IN PTOKEN_GROUPS TokenGroups
,
812 IN PTOKEN_PRIVILEGES TokenPrivileges
,
813 IN PTOKEN_OWNER TokenOwner
,
814 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
815 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
816 IN PTOKEN_SOURCE TokenSource
822 OUT PHANDLE TokenHandle
,
823 IN ACCESS_MASK DesiredAccess
,
824 IN POBJECT_ATTRIBUTES ObjectAttributes
,
825 IN TOKEN_TYPE TokenType
,
826 IN PLUID AuthenticationId
,
827 IN PLARGE_INTEGER ExpirationTime
,
828 IN PTOKEN_USER TokenUser
,
829 IN PTOKEN_GROUPS TokenGroups
,
830 IN PTOKEN_PRIVILEGES TokenPrivileges
,
831 IN PTOKEN_OWNER TokenOwner
,
832 IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup
,
833 IN PTOKEN_DEFAULT_DACL TokenDefaultDacl
,
834 IN PTOKEN_SOURCE TokenSource
839 NtCreateWaitablePort(
841 POBJECT_ATTRIBUTES ObjectAttributes
,
842 ULONG MaxConnectInfoLength
,
844 ULONG NPMessageQueueSize OPTIONAL
849 ZwCreateWaitablePort(
851 POBJECT_ATTRIBUTES ObjectAttributes
,
852 ULONG MaxConnectInfoLength
,
854 ULONG NPMessageQueueSize OPTIONAL
860 IN BOOLEAN Alertable
,
861 IN LARGE_INTEGER
*Interval
867 IN BOOLEAN Alertable
,
868 IN LARGE_INTEGER
*Interval
886 IN PUNICODE_STRING EntryName
,
887 IN PUNICODE_STRING EntryValue
893 IN PUNICODE_STRING EntryName
,
894 IN PUNICODE_STRING EntryValue
900 IN POBJECT_ATTRIBUTES ObjectAttributes
906 IN POBJECT_ATTRIBUTES ObjectAttributes
923 NtDeleteObjectAuditAlarm(
924 IN PUNICODE_STRING SubsystemName
,
926 IN BOOLEAN GenerateOnClose
931 ZwDeleteObjectAuditAlarm(
932 IN PUNICODE_STRING SubsystemName
,
934 IN BOOLEAN GenerateOnClose
941 IN PUNICODE_STRING ValueName
948 IN PUNICODE_STRING ValueName
953 NtDeviceIoControlFile(
954 IN HANDLE DeviceHandle
,
955 IN HANDLE Event OPTIONAL
,
956 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
957 IN PVOID UserApcContext OPTIONAL
,
958 OUT PIO_STATUS_BLOCK IoStatusBlock
,
959 IN ULONG IoControlCode
,
960 IN PVOID InputBuffer
,
961 IN ULONG InputBufferSize
,
962 OUT PVOID OutputBuffer
,
963 IN ULONG OutputBufferSize
968 ZwDeviceIoControlFile(
969 IN HANDLE DeviceHandle
,
970 IN HANDLE Event OPTIONAL
,
971 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
972 IN PVOID UserApcContext OPTIONAL
,
973 OUT PIO_STATUS_BLOCK IoStatusBlock
,
974 IN ULONG IoControlCode
,
975 IN PVOID InputBuffer
,
976 IN ULONG InputBufferSize
,
977 OUT PVOID OutputBuffer
,
978 IN ULONG OutputBufferSize
984 IN PUNICODE_STRING DisplayString
990 IN PUNICODE_STRING DisplayString
996 IN HANDLE SourceProcessHandle
,
997 IN HANDLE SourceHandle
,
998 IN HANDLE TargetProcessHandle
,
999 OUT PHANDLE TargetHandle
,
1000 IN ACCESS_MASK DesiredAccess
,
1001 IN ULONG HandleAttributes
,
1008 IN HANDLE SourceProcessHandle
,
1009 IN HANDLE SourceHandle
,
1010 IN HANDLE TargetProcessHandle
,
1011 OUT PHANDLE TargetHandle
,
1012 IN ACCESS_MASK DesiredAccess
,
1013 IN ULONG HandleAttributes
,
1020 IN HANDLE ExistingTokenHandle
,
1021 IN ACCESS_MASK DesiredAccess
,
1022 IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
,
1023 IN BOOLEAN EffectiveOnly
,
1024 IN TOKEN_TYPE TokenType
,
1025 OUT PHANDLE NewTokenHandle
1030 NtEnumerateBootEntries(
1037 ZwEnumerateBootEntries(
1045 IN HANDLE KeyHandle
,
1047 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1048 OUT PVOID KeyInformation
,
1050 OUT PULONG ResultLength
1056 IN HANDLE KeyHandle
,
1058 IN KEY_INFORMATION_CLASS KeyInformationClass
,
1059 OUT PVOID KeyInformation
,
1061 OUT PULONG ResultLength
1066 NtEnumerateValueKey(
1067 IN HANDLE KeyHandle
,
1069 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1070 OUT PVOID KeyValueInformation
,
1072 OUT PULONG ResultLength
1077 ZwEnumerateValueKey(
1078 IN HANDLE KeyHandle
,
1080 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
1081 OUT PVOID KeyValueInformation
,
1083 OUT PULONG ResultLength
1089 IN HANDLE SectionHandle
,
1090 IN PLARGE_INTEGER NewMaximumSize
1096 IN HANDLE SectionHandle
,
1097 IN PLARGE_INTEGER NewMaximumSize
1104 IN ULONG AtomNameLength
,
1105 OUT PRTL_ATOM Atom OPTIONAL
1112 IN ULONG AtomNameLength
,
1113 OUT PRTL_ATOM Atom OPTIONAL
1119 IN HANDLE FileHandle
,
1120 OUT PIO_STATUS_BLOCK IoStatusBlock
1126 IN HANDLE FileHandle
,
1127 OUT PIO_STATUS_BLOCK IoStatusBlock
1132 NtFlushInstructionCache(
1133 IN HANDLE ProcessHandle
,
1134 IN PVOID BaseAddress
,
1135 IN UINT NumberOfBytesToFlush
1152 NtFlushVirtualMemory(
1153 IN HANDLE ProcessHandle
,
1154 IN PVOID BaseAddress
,
1155 IN ULONG NumberOfBytesToFlush
,
1156 OUT PULONG NumberOfBytesFlushed OPTIONAL
1161 NtFlushWriteBuffer(VOID
);
1165 ZwFlushWriteBuffer(VOID
);
1169 NtFreeVirtualMemory(
1170 IN HANDLE ProcessHandle
,
1171 IN PVOID
*BaseAddress
,
1172 IN PULONG RegionSize
,
1178 ZwFreeVirtualMemory(
1179 IN HANDLE ProcessHandle
,
1180 IN PVOID
*BaseAddress
,
1181 IN PULONG RegionSize
,
1188 IN HANDLE DeviceHandle
,
1189 IN HANDLE Event OPTIONAL
,
1190 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1191 IN PVOID ApcContext OPTIONAL
,
1192 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1193 IN ULONG IoControlCode
,
1194 IN PVOID InputBuffer
,
1195 IN ULONG InputBufferSize
,
1196 OUT PVOID OutputBuffer
,
1197 IN ULONG OutputBufferSize
1203 IN HANDLE DeviceHandle
,
1204 IN HANDLE Event OPTIONAL
,
1205 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1206 IN PVOID ApcContext OPTIONAL
,
1207 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1208 IN ULONG IoControlCode
,
1209 IN PVOID InputBuffer
,
1210 IN ULONG InputBufferSize
,
1211 OUT PVOID OutputBuffer
,
1212 IN ULONG OutputBufferSize
1218 IN HANDLE ThreadHandle
,
1219 OUT PCONTEXT Context
1225 IN HANDLE ThreadHandle
,
1226 OUT PCONTEXT Context
1234 OUT PPLUGPLAY_EVENT_BLOCK Buffer
,
1252 NtImpersonateClientOfPort(
1254 PPORT_MESSAGE ClientMessage
1259 ZwImpersonateClientOfPort(
1261 PPORT_MESSAGE ClientMessage
1266 NtImpersonateThread(
1267 IN HANDLE ThreadHandle
,
1268 IN HANDLE ThreadToImpersonate
,
1269 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1274 ZwImpersonateThread(
1275 IN HANDLE ThreadHandle
,
1276 IN HANDLE ThreadToImpersonate
,
1277 IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
1282 NtInitiatePowerAction(
1283 POWER_ACTION SystemAction
,
1284 SYSTEM_POWER_STATE MinSystemState
,
1286 BOOLEAN Asynchronous
1291 ZwInitiatePowerAction(
1292 POWER_ACTION SystemAction
,
1293 SYSTEM_POWER_STATE MinSystemState
,
1295 BOOLEAN Asynchronous
1300 NtInitializeRegistry(
1306 ZwInitializeRegistry(
1313 IN HANDLE ProcessHandle
,
1314 IN HANDLE JobHandle OPTIONAL
1320 IN HANDLE ProcessHandle
,
1321 IN HANDLE JobHandle OPTIONAL
1326 NtListenPort(HANDLE PortHandle
,
1327 PPORT_MESSAGE ConnectionRequest
1332 ZwListenPort(HANDLE PortHandle
,
1333 PPORT_MESSAGE ConnectionRequest
1339 IN PUNICODE_STRING DriverServiceName
1345 IN PUNICODE_STRING DriverServiceName
1351 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1352 IN POBJECT_ATTRIBUTES FileObjectAttributes
1358 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1359 IN POBJECT_ATTRIBUTES FileObjectAttributes
1365 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1366 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1373 IN POBJECT_ATTRIBUTES KeyObjectAttributes
,
1374 IN POBJECT_ATTRIBUTES FileObjectAttributes
,
1381 IN HANDLE FileHandle
,
1382 IN HANDLE Event OPTIONAL
,
1383 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1384 IN PVOID ApcContext OPTIONAL
,
1385 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1386 IN PLARGE_INTEGER ByteOffset
,
1387 IN PLARGE_INTEGER Length
,
1389 IN BOOLEAN FailImmediatedly
,
1390 IN BOOLEAN ExclusiveLock
1396 IN HANDLE FileHandle
,
1397 IN HANDLE Event OPTIONAL
,
1398 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1399 IN PVOID ApcContext OPTIONAL
,
1400 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1401 IN PLARGE_INTEGER ByteOffset
,
1402 IN PLARGE_INTEGER Length
,
1404 IN BOOLEAN FailImmediatedly
,
1405 IN BOOLEAN ExclusiveLock
1410 NtLockVirtualMemory(
1411 HANDLE ProcessHandle
,
1413 ULONG NumberOfBytesToLock
,
1414 PULONG NumberOfBytesLocked
1419 ZwLockVirtualMemory(
1420 HANDLE ProcessHandle
,
1422 ULONG NumberOfBytesToLock
,
1423 PULONG NumberOfBytesLocked
1428 NtMakePermanentObject(
1434 ZwMakePermanentObject(
1440 NtMakeTemporaryObject(
1446 ZwMakeTemporaryObject(
1453 IN HANDLE SectionHandle
,
1454 IN HANDLE ProcessHandle
,
1455 IN OUT PVOID
*BaseAddress
,
1457 IN ULONG CommitSize
,
1458 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1459 IN OUT PULONG ViewSize
,
1460 IN SECTION_INHERIT InheritDisposition
,
1461 IN ULONG AllocationType
,
1462 IN ULONG AccessProtection
1468 IN HANDLE SectionHandle
,
1469 IN HANDLE ProcessHandle
,
1470 IN OUT PVOID
*BaseAddress
,
1472 IN ULONG CommitSize
,
1473 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL
,
1474 IN OUT PULONG ViewSize
,
1475 IN SECTION_INHERIT InheritDisposition
,
1476 IN ULONG AllocationType
,
1477 IN ULONG AccessProtection
1482 NtNotifyChangeDirectoryFile(
1483 IN HANDLE FileHandle
,
1484 IN HANDLE Event OPTIONAL
,
1485 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1486 IN PVOID ApcContext OPTIONAL
,
1487 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1489 IN ULONG BufferSize
,
1490 IN ULONG CompletionFilter
,
1491 IN BOOLEAN WatchTree
1496 ZwNotifyChangeDirectoryFile(
1497 IN HANDLE FileHandle
,
1498 IN HANDLE Event OPTIONAL
,
1499 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1500 IN PVOID ApcContext OPTIONAL
,
1501 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1503 IN ULONG BufferSize
,
1504 IN ULONG CompletionFilter
,
1505 IN BOOLEAN WatchTree
1511 IN HANDLE KeyHandle
,
1513 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1514 IN PVOID ApcContext OPTIONAL
,
1515 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1516 IN ULONG CompletionFilter
,
1517 IN BOOLEAN Asynchroneous
,
1518 OUT PVOID ChangeBuffer
,
1520 IN BOOLEAN WatchSubtree
1526 IN HANDLE KeyHandle
,
1528 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
1529 IN PVOID ApcContext OPTIONAL
,
1530 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1531 IN ULONG CompletionFilter
,
1532 IN BOOLEAN Asynchroneous
,
1533 OUT PVOID ChangeBuffer
,
1535 IN BOOLEAN WatchSubtree
1540 NtOpenDirectoryObject(
1541 OUT PHANDLE FileHandle
,
1542 IN ACCESS_MASK DesiredAccess
,
1543 IN POBJECT_ATTRIBUTES ObjectAttributes
1548 ZwOpenDirectoryObject(
1549 OUT PHANDLE FileHandle
,
1550 IN ACCESS_MASK DesiredAccess
,
1551 IN POBJECT_ATTRIBUTES ObjectAttributes
1557 OUT PHANDLE EventHandle
,
1558 IN ACCESS_MASK DesiredAccess
,
1559 IN POBJECT_ATTRIBUTES ObjectAttributes
1565 OUT PHANDLE EventHandle
,
1566 IN ACCESS_MASK DesiredAccess
,
1567 IN POBJECT_ATTRIBUTES ObjectAttributes
1573 OUT PHANDLE EventPairHandle
,
1574 IN ACCESS_MASK DesiredAccess
,
1575 IN POBJECT_ATTRIBUTES ObjectAttributes
1581 OUT PHANDLE EventPairHandle
,
1582 IN ACCESS_MASK DesiredAccess
,
1583 IN POBJECT_ATTRIBUTES ObjectAttributes
1589 OUT PHANDLE FileHandle
,
1590 IN ACCESS_MASK DesiredAccess
,
1591 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1592 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1593 IN ULONG ShareAccess
,
1594 IN ULONG OpenOptions
1600 OUT PHANDLE FileHandle
,
1601 IN ACCESS_MASK DesiredAccess
,
1602 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1603 OUT PIO_STATUS_BLOCK IoStatusBlock
,
1604 IN ULONG ShareAccess
,
1605 IN ULONG OpenOptions
1611 OUT PHANDLE CompetionPort
,
1612 IN ACCESS_MASK DesiredAccess
,
1613 IN POBJECT_ATTRIBUTES ObjectAttributes
1619 OUT PHANDLE CompetionPort
,
1620 IN ACCESS_MASK DesiredAccess
,
1621 IN POBJECT_ATTRIBUTES ObjectAttributes
1628 ACCESS_MASK DesiredAccess
,
1629 POBJECT_ATTRIBUTES ObjectAttributes
1636 ACCESS_MASK DesiredAccess
,
1637 POBJECT_ATTRIBUTES ObjectAttributes
1643 OUT PHANDLE KeyHandle
,
1644 IN ACCESS_MASK DesiredAccess
,
1645 IN POBJECT_ATTRIBUTES ObjectAttributes
1651 OUT PHANDLE KeyHandle
,
1652 IN ACCESS_MASK DesiredAccess
,
1653 IN POBJECT_ATTRIBUTES ObjectAttributes
1659 OUT PHANDLE MutantHandle
,
1660 IN ACCESS_MASK DesiredAccess
,
1661 IN POBJECT_ATTRIBUTES ObjectAttributes
1667 OUT PHANDLE MutantHandle
,
1668 IN ACCESS_MASK DesiredAccess
,
1669 IN POBJECT_ATTRIBUTES ObjectAttributes
1674 NtOpenObjectAuditAlarm(
1675 IN PUNICODE_STRING SubsystemName
,
1677 IN PUNICODE_STRING ObjectTypeName
,
1678 IN PUNICODE_STRING ObjectName
,
1679 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1680 IN HANDLE ClientToken
,
1681 IN ULONG DesiredAccess
,
1682 IN ULONG GrantedAccess
,
1683 IN PPRIVILEGE_SET Privileges
,
1684 IN BOOLEAN ObjectCreation
,
1685 IN BOOLEAN AccessGranted
,
1686 OUT PBOOLEAN GenerateOnClose
1691 ZwOpenObjectAuditAlarm(
1692 IN PUNICODE_STRING SubsystemName
,
1694 IN PUNICODE_STRING ObjectTypeName
,
1695 IN PUNICODE_STRING ObjectName
,
1696 IN PSECURITY_DESCRIPTOR SecurityDescriptor
,
1697 IN HANDLE ClientToken
,
1698 IN ULONG DesiredAccess
,
1699 IN ULONG GrantedAccess
,
1700 IN PPRIVILEGE_SET Privileges
,
1701 IN BOOLEAN ObjectCreation
,
1702 IN BOOLEAN AccessGranted
,
1703 OUT PBOOLEAN GenerateOnClose
1709 OUT PHANDLE ProcessHandle
,
1710 IN ACCESS_MASK DesiredAccess
,
1711 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1712 IN PCLIENT_ID ClientId
1718 OUT PHANDLE ProcessHandle
,
1719 IN ACCESS_MASK DesiredAccess
,
1720 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1721 IN PCLIENT_ID ClientId
1727 IN HANDLE ProcessHandle
,
1728 IN ACCESS_MASK DesiredAccess
,
1729 OUT PHANDLE TokenHandle
1735 IN HANDLE ProcessHandle
,
1736 IN ACCESS_MASK DesiredAccess
,
1737 OUT PHANDLE TokenHandle
1742 NtOpenProcessTokenEx(
1743 IN HANDLE ProcessHandle
,
1744 IN ACCESS_MASK DesiredAccess
,
1745 IN ULONG HandleAttributes
,
1746 OUT PHANDLE TokenHandle
1751 ZwOpenProcessTokenEx(
1752 IN HANDLE ProcessHandle
,
1753 IN ACCESS_MASK DesiredAccess
,
1754 IN ULONG HandleAttributes
,
1755 OUT PHANDLE TokenHandle
1761 OUT PHANDLE SectionHandle
,
1762 IN ACCESS_MASK DesiredAccess
,
1763 IN POBJECT_ATTRIBUTES ObjectAttributes
1769 OUT PHANDLE SectionHandle
,
1770 IN ACCESS_MASK DesiredAccess
,
1771 IN POBJECT_ATTRIBUTES ObjectAttributes
1777 OUT PHANDLE SemaphoreHandle
,
1778 IN ACCESS_MASK DesiredAcces
,
1779 IN POBJECT_ATTRIBUTES ObjectAttributes
1785 OUT PHANDLE SemaphoreHandle
,
1786 IN ACCESS_MASK DesiredAcces
,
1787 IN POBJECT_ATTRIBUTES ObjectAttributes
1792 NtOpenSymbolicLinkObject(
1793 OUT PHANDLE SymbolicLinkHandle
,
1794 IN ACCESS_MASK DesiredAccess
,
1795 IN POBJECT_ATTRIBUTES ObjectAttributes
1800 ZwOpenSymbolicLinkObject(
1801 OUT PHANDLE SymbolicLinkHandle
,
1802 IN ACCESS_MASK DesiredAccess
,
1803 IN POBJECT_ATTRIBUTES ObjectAttributes
1809 OUT PHANDLE ThreadHandle
,
1810 IN ACCESS_MASK DesiredAccess
,
1811 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1812 IN PCLIENT_ID ClientId
1818 OUT PHANDLE ThreadHandle
,
1819 IN ACCESS_MASK DesiredAccess
,
1820 IN POBJECT_ATTRIBUTES ObjectAttributes
,
1821 IN PCLIENT_ID ClientId
1827 IN HANDLE ThreadHandle
,
1828 IN ACCESS_MASK DesiredAccess
,
1829 IN BOOLEAN OpenAsSelf
,
1830 OUT PHANDLE TokenHandle
1836 IN HANDLE ThreadHandle
,
1837 IN ACCESS_MASK DesiredAccess
,
1838 IN BOOLEAN OpenAsSelf
,
1839 OUT PHANDLE TokenHandle
1844 NtOpenThreadTokenEx(
1845 IN HANDLE ThreadHandle
,
1846 IN ACCESS_MASK DesiredAccess
,
1847 IN BOOLEAN OpenAsSelf
,
1848 IN ULONG HandleAttributes
,
1849 OUT PHANDLE TokenHandle
1854 ZwOpenThreadTokenEx(
1855 IN HANDLE ThreadHandle
,
1856 IN ACCESS_MASK DesiredAccess
,
1857 IN BOOLEAN OpenAsSelf
,
1858 IN ULONG HandleAttributes
,
1859 OUT PHANDLE TokenHandle
1865 OUT PHANDLE TimerHandle
,
1866 IN ACCESS_MASK DesiredAccess
,
1867 IN POBJECT_ATTRIBUTES ObjectAttributes
1872 OUT PHANDLE TimerHandle
,
1873 IN ACCESS_MASK DesiredAccess
,
1874 IN POBJECT_ATTRIBUTES ObjectAttributes
1880 IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass
,
1881 IN OUT PVOID Buffer
,
1888 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1890 ULONG InputBufferLength
,
1892 ULONG OutputBufferLength
1898 POWER_INFORMATION_LEVEL PowerInformationLevel
,
1900 ULONG InputBufferLength
,
1902 ULONG OutputBufferLength
1908 IN HANDLE ClientToken
,
1909 IN PPRIVILEGE_SET RequiredPrivileges
,
1916 IN HANDLE ClientToken
,
1917 IN PPRIVILEGE_SET RequiredPrivileges
,
1923 NtPrivilegedServiceAuditAlarm(
1924 IN PUNICODE_STRING SubsystemName
,
1925 IN PUNICODE_STRING ServiceName
,
1926 IN HANDLE ClientToken
,
1927 IN PPRIVILEGE_SET Privileges
,
1928 IN BOOLEAN AccessGranted
1933 ZwPrivilegedServiceAuditAlarm(
1934 IN PUNICODE_STRING SubsystemName
,
1935 IN PUNICODE_STRING ServiceName
,
1936 IN HANDLE ClientToken
,
1937 IN PPRIVILEGE_SET Privileges
,
1938 IN BOOLEAN AccessGranted
1943 NtPrivilegeObjectAuditAlarm(
1944 IN PUNICODE_STRING SubsystemName
,
1946 IN HANDLE ClientToken
,
1947 IN ULONG DesiredAccess
,
1948 IN PPRIVILEGE_SET Privileges
,
1949 IN BOOLEAN AccessGranted
1954 ZwPrivilegeObjectAuditAlarm(
1955 IN PUNICODE_STRING SubsystemName
,
1957 IN HANDLE ClientToken
,
1958 IN ULONG DesiredAccess
,
1959 IN PPRIVILEGE_SET Privileges
,
1960 IN BOOLEAN AccessGranted
1965 NtProtectVirtualMemory(
1966 IN HANDLE ProcessHandle
,
1967 IN PVOID
*BaseAddress
,
1968 IN ULONG
*NumberOfBytesToProtect
,
1969 IN ULONG NewAccessProtection
,
1970 OUT PULONG OldAccessProtection
1975 ZwProtectVirtualMemory(
1976 IN HANDLE ProcessHandle
,
1977 IN PVOID
*BaseAddress
,
1978 IN ULONG
*NumberOfBytesToProtect
,
1979 IN ULONG NewAccessProtection
,
1980 OUT PULONG OldAccessProtection
1986 IN HANDLE EventHandle
,
1987 IN PLONG PulseCount OPTIONAL
1993 IN HANDLE EventHandle
,
1994 IN PLONG PulseCount OPTIONAL
1999 NtQueryAttributesFile(
2000 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2001 OUT PFILE_BASIC_INFORMATION FileInformation
2006 ZwQueryAttributesFile(
2007 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2008 OUT PFILE_BASIC_INFORMATION FileInformation
2014 NtQueryBootEntryOrder(
2021 ZwQueryBootEntryOrder(
2041 NtQueryDefaultLocale(
2042 IN BOOLEAN UserProfile
,
2043 OUT PLCID DefaultLocaleId
2048 ZwQueryDefaultLocale(
2049 IN BOOLEAN UserProfile
,
2050 OUT PLCID DefaultLocaleId
2055 NtQueryDefaultUILanguage(
2061 ZwQueryDefaultUILanguage(
2067 NtQueryDirectoryFile(
2068 IN HANDLE FileHandle
,
2069 IN HANDLE Event OPTIONAL
,
2070 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2071 IN PVOID ApcContext OPTIONAL
,
2072 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2073 OUT PVOID FileInformation
,
2075 IN FILE_INFORMATION_CLASS FileInformationClass
,
2076 IN BOOLEAN ReturnSingleEntry
,
2077 IN PUNICODE_STRING FileName OPTIONAL
,
2078 IN BOOLEAN RestartScan
2083 ZwQueryDirectoryFile(
2084 IN HANDLE FileHandle
,
2085 IN HANDLE Event OPTIONAL
,
2086 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
2087 IN PVOID ApcContext OPTIONAL
,
2088 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2089 OUT PVOID FileInformation
,
2091 IN FILE_INFORMATION_CLASS FileInformationClass
,
2092 IN BOOLEAN ReturnSingleEntry
,
2093 IN PUNICODE_STRING FileName OPTIONAL
,
2094 IN BOOLEAN RestartScan
2099 NtQueryDirectoryObject(
2100 IN HANDLE DirectoryHandle
,
2102 IN ULONG BufferLength
,
2103 IN BOOLEAN ReturnSingleEntry
,
2104 IN BOOLEAN RestartScan
,
2105 IN OUT PULONG Context
,
2106 OUT PULONG ReturnLength OPTIONAL
2111 ZwQueryDirectoryObject(
2112 IN HANDLE DirectoryHandle
,
2114 IN ULONG BufferLength
,
2115 IN BOOLEAN ReturnSingleEntry
,
2116 IN BOOLEAN RestartScan
,
2117 IN OUT PULONG Context
,
2118 OUT PULONG ReturnLength OPTIONAL
2124 IN HANDLE FileHandle
,
2125 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2128 IN BOOLEAN ReturnSingleEntry
,
2129 IN PVOID EaList OPTIONAL
,
2130 IN ULONG EaListLength
,
2131 IN PULONG EaIndex OPTIONAL
,
2132 IN BOOLEAN RestartScan
2138 IN HANDLE FileHandle
,
2139 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2142 IN BOOLEAN ReturnSingleEntry
,
2143 IN PVOID EaList OPTIONAL
,
2144 IN ULONG EaListLength
,
2145 IN PULONG EaIndex OPTIONAL
,
2146 IN BOOLEAN RestartScan
2152 IN HANDLE EventHandle
,
2153 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2154 OUT PVOID EventInformation
,
2155 IN ULONG EventInformationLength
,
2156 OUT PULONG ReturnLength
2161 IN HANDLE EventHandle
,
2162 IN EVENT_INFORMATION_CLASS EventInformationClass
,
2163 OUT PVOID EventInformation
,
2164 IN ULONG EventInformationLength
,
2165 OUT PULONG ReturnLength
2170 NtQueryFullAttributesFile(
2171 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2172 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2177 ZwQueryFullAttributesFile(
2178 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2179 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
2184 NtQueryInformationAtom(
2186 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2187 OUT PVOID AtomInformation
,
2188 IN ULONG AtomInformationLength
,
2189 OUT PULONG ReturnLength OPTIONAL
2194 ZwQueryInformationAtom(
2196 IN ATOM_INFORMATION_CLASS AtomInformationClass
,
2197 OUT PVOID AtomInformation
,
2198 IN ULONG AtomInformationLength
,
2199 OUT PULONG ReturnLength OPTIONAL
2204 NtQueryInformationFile(
2205 IN HANDLE FileHandle
,
2206 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2207 OUT PVOID FileInformation
,
2209 IN FILE_INFORMATION_CLASS FileInformationClass
2214 ZwQueryInformationFile(
2216 PIO_STATUS_BLOCK IoStatusBlock
,
2217 PVOID FileInformation
,
2219 FILE_INFORMATION_CLASS FileInformationClass
2224 NtQueryInformationJobObject(
2226 JOBOBJECTINFOCLASS JobInformationClass
,
2227 PVOID JobInformation
,
2228 ULONG JobInformationLength
,
2234 ZwQueryInformationJobObject(
2236 JOBOBJECTINFOCLASS JobInformationClass
,
2237 PVOID JobInformation
,
2238 ULONG JobInformationLength
,
2244 NtQueryInformationPort(
2246 CINT PortInformationClass
,
2247 PVOID PortInformation
,
2248 ULONG PortInformationLength
,
2254 ZwQueryInformationPort(
2256 CINT PortInformationClass
,
2257 PVOID PortInformation
,
2258 ULONG PortInformationLength
,
2265 NtQueryInformationProcess(
2266 IN HANDLE ProcessHandle
,
2267 IN PROCESSINFOCLASS ProcessInformationClass
,
2268 OUT PVOID ProcessInformation
,
2269 IN ULONG ProcessInformationLength
,
2270 OUT PULONG ReturnLength OPTIONAL
2275 ZwQueryInformationProcess(
2276 IN HANDLE ProcessHandle
,
2277 IN PROCESSINFOCLASS ProcessInformationClass
,
2278 OUT PVOID ProcessInformation
,
2279 IN ULONG ProcessInformationLength
,
2280 OUT PULONG ReturnLength OPTIONAL
2286 NtQueryInformationThread(
2287 IN HANDLE ThreadHandle
,
2288 IN THREADINFOCLASS ThreadInformationClass
,
2289 OUT PVOID ThreadInformation
,
2290 IN ULONG ThreadInformationLength
,
2291 OUT PULONG ReturnLength
2296 ZwQueryInformationThread(
2297 IN HANDLE ThreadHandle
,
2298 IN THREADINFOCLASS ThreadInformationClass
,
2299 OUT PVOID ThreadInformation
,
2300 IN ULONG ThreadInformationLength
,
2301 OUT PULONG ReturnLength
2306 NtQueryInformationToken(
2307 IN HANDLE TokenHandle
,
2308 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2309 OUT PVOID TokenInformation
,
2310 IN ULONG TokenInformationLength
,
2311 OUT PULONG ReturnLength
2316 ZwQueryInformationToken(
2317 IN HANDLE TokenHandle
,
2318 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
2319 OUT PVOID TokenInformation
,
2320 IN ULONG TokenInformationLength
,
2321 OUT PULONG ReturnLength
2326 NtQueryInstallUILanguage(
2332 ZwQueryInstallUILanguage(
2338 NtQueryIntervalProfile(
2339 IN KPROFILE_SOURCE ProfileSource
,
2345 ZwQueryIntervalProfile(
2346 OUT PULONG Interval
,
2347 OUT KPROFILE_SOURCE ClockSource
2352 NtQueryIoCompletion(
2353 IN HANDLE IoCompletionHandle
,
2354 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2355 OUT PVOID IoCompletionInformation
,
2356 IN ULONG IoCompletionInformationLength
,
2357 OUT PULONG ResultLength OPTIONAL
2362 ZwQueryIoCompletion(
2363 IN HANDLE IoCompletionHandle
,
2364 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass
,
2365 OUT PVOID IoCompletionInformation
,
2366 IN ULONG IoCompletionInformationLength
,
2367 OUT PULONG ResultLength OPTIONAL
2373 IN HANDLE KeyHandle
,
2374 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2375 OUT PVOID KeyInformation
,
2377 OUT PULONG ResultLength
2383 IN HANDLE KeyHandle
,
2384 IN KEY_INFORMATION_CLASS KeyInformationClass
,
2385 OUT PVOID KeyInformation
,
2387 OUT PULONG ResultLength
2392 NtQueryQuotaInformationFile(
2393 IN HANDLE FileHandle
,
2394 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2397 IN BOOLEAN ReturnSingleEntry
,
2398 IN PVOID SidList OPTIONAL
,
2399 IN ULONG SidListLength
,
2400 IN PSID StartSid OPTIONAL
,
2401 IN BOOLEAN RestartScan
2406 ZwQueryQuotaInformationFile(
2407 IN HANDLE FileHandle
,
2408 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2411 IN BOOLEAN ReturnSingleEntry
,
2412 IN PVOID SidList OPTIONAL
,
2413 IN ULONG SidListLength
,
2414 IN PSID StartSid OPTIONAL
,
2415 IN BOOLEAN RestartScan
2420 NtQueryMultipleValueKey(
2421 IN HANDLE KeyHandle
,
2422 IN OUT PKEY_VALUE_ENTRY ValueList
,
2423 IN ULONG NumberOfValues
,
2425 IN OUT PULONG Length
,
2426 OUT PULONG ReturnLength
2431 ZwQueryMultipleValueKey(
2432 IN HANDLE KeyHandle
,
2433 IN OUT PKEY_VALUE_ENTRY ValueList
,
2434 IN ULONG NumberOfValues
,
2436 IN OUT PULONG Length
,
2437 OUT PULONG ReturnLength
2443 IN HANDLE MutantHandle
,
2444 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2445 OUT PVOID MutantInformation
,
2447 OUT PULONG ResultLength
2453 IN HANDLE MutantHandle
,
2454 IN MUTANT_INFORMATION_CLASS MutantInformationClass
,
2455 OUT PVOID MutantInformation
,
2457 OUT PULONG ResultLength
2463 IN HANDLE ObjectHandle
,
2464 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2465 OUT PVOID ObjectInformation
,
2467 OUT PULONG ResultLength OPTIONAL
2473 IN HANDLE ObjectHandle
,
2474 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
2475 OUT PVOID ObjectInformation
,
2477 OUT PULONG ResultLength OPTIONAL
2482 NtQueryPerformanceCounter(
2483 IN PLARGE_INTEGER Counter
,
2484 IN PLARGE_INTEGER Frequency
2489 ZwQueryPerformanceCounter(
2490 IN PLARGE_INTEGER Counter
,
2491 IN PLARGE_INTEGER Frequency
2497 IN HANDLE SectionHandle
,
2498 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2499 OUT PVOID SectionInformation
,
2501 OUT PULONG ResultLength
2507 IN HANDLE SectionHandle
,
2508 IN SECTION_INFORMATION_CLASS SectionInformationClass
,
2509 OUT PVOID SectionInformation
,
2511 OUT PULONG ResultLength
2516 NtQuerySecurityObject(
2518 IN SECURITY_INFORMATION SecurityInformation
,
2519 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2521 OUT PULONG ResultLength
2526 ZwQuerySecurityObject(
2528 IN SECURITY_INFORMATION SecurityInformation
,
2529 OUT PSECURITY_DESCRIPTOR SecurityDescriptor
,
2531 OUT PULONG ResultLength
2537 IN HANDLE SemaphoreHandle
,
2538 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2539 OUT PVOID SemaphoreInformation
,
2541 OUT PULONG ReturnLength
2547 IN HANDLE SemaphoreHandle
,
2548 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass
,
2549 OUT PVOID SemaphoreInformation
,
2551 OUT PULONG ReturnLength
2556 NtQuerySymbolicLinkObject(
2557 IN HANDLE SymLinkObjHandle
,
2558 OUT PUNICODE_STRING LinkTarget
,
2559 OUT PULONG DataWritten OPTIONAL
2564 ZwQuerySymbolicLinkObject(
2565 IN HANDLE SymLinkObjHandle
,
2566 OUT PUNICODE_STRING LinkName
,
2567 OUT PULONG DataWritten OPTIONAL
2572 NtQuerySystemEnvironmentValue(
2573 IN PUNICODE_STRING Name
,
2581 ZwQuerySystemEnvironmentValue(
2582 IN PUNICODE_STRING Name
,
2590 NtQuerySystemInformation(
2591 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2592 OUT PVOID SystemInformation
,
2594 OUT PULONG ResultLength
2599 ZwQuerySystemInformation(
2600 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
2601 OUT PVOID SystemInformation
,
2603 OUT PULONG ResultLength
2609 OUT PLARGE_INTEGER CurrentTime
2615 OUT PLARGE_INTEGER CurrentTime
2621 IN HANDLE TimerHandle
,
2622 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2623 OUT PVOID TimerInformation
,
2625 OUT PULONG ResultLength
2631 IN HANDLE TimerHandle
,
2632 IN TIMER_INFORMATION_CLASS TimerInformationClass
,
2633 OUT PVOID TimerInformation
,
2635 OUT PULONG ResultLength
2640 NtQueryTimerResolution(
2641 OUT PULONG MinimumResolution
,
2642 OUT PULONG MaximumResolution
,
2643 OUT PULONG ActualResolution
2648 ZwQueryTimerResolution(
2649 OUT PULONG MinimumResolution
,
2650 OUT PULONG MaximumResolution
,
2651 OUT PULONG ActualResolution
2657 IN HANDLE KeyHandle
,
2658 IN PUNICODE_STRING ValueName
,
2659 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2660 OUT PVOID KeyValueInformation
,
2662 OUT PULONG ResultLength
2668 IN HANDLE KeyHandle
,
2669 IN PUNICODE_STRING ValueName
,
2670 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
,
2671 OUT PVOID KeyValueInformation
,
2673 OUT PULONG ResultLength
2678 NtQueryVirtualMemory(
2679 IN HANDLE ProcessHandle
,
2681 IN IN CINT VirtualMemoryInformationClass
,
2682 OUT PVOID VirtualMemoryInformation
,
2684 OUT PULONG ResultLength
2689 ZwQueryVirtualMemory(
2690 IN HANDLE ProcessHandle
,
2692 IN IN CINT VirtualMemoryInformationClass
,
2693 OUT PVOID VirtualMemoryInformation
,
2695 OUT PULONG ResultLength
2700 NtQueryVolumeInformationFile(
2701 IN HANDLE FileHandle
,
2702 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2703 OUT PVOID FsInformation
,
2705 IN FS_INFORMATION_CLASS FsInformationClass
2710 ZwQueryVolumeInformationFile(
2711 IN HANDLE FileHandle
,
2712 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2713 OUT PVOID FsInformation
,
2715 IN FS_INFORMATION_CLASS FsInformationClass
2721 HANDLE ThreadHandle
,
2722 PKNORMAL_ROUTINE ApcRoutine
,
2723 PVOID NormalContext
,
2724 PVOID SystemArgument1
,
2725 PVOID SystemArgument2
2731 HANDLE ThreadHandle
,
2732 PKNORMAL_ROUTINE ApcRoutine
,
2733 PVOID NormalContext
,
2734 PVOID SystemArgument1
,
2735 PVOID SystemArgument2
2741 IN PEXCEPTION_RECORD ExceptionRecord
,
2742 IN PCONTEXT Context
,
2743 IN BOOLEAN SearchFrames
2749 IN PEXCEPTION_RECORD ExceptionRecord
,
2750 IN PCONTEXT Context
,
2751 IN BOOLEAN SearchFrames
2757 IN NTSTATUS ErrorStatus
,
2758 IN ULONG NumberOfParameters
,
2759 IN ULONG UnicodeStringParameterMask
,
2760 IN PULONG_PTR Parameters
,
2761 IN ULONG ValidResponseOptions
,
2768 IN NTSTATUS ErrorStatus
,
2769 IN ULONG NumberOfParameters
,
2770 IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL
,
2771 IN PVOID
*Parameters
,
2772 IN HARDERROR_RESPONSE_OPTION ResponseOption
,
2773 OUT PHARDERROR_RESPONSE Response
2779 IN HANDLE FileHandle
,
2780 IN HANDLE Event OPTIONAL
,
2781 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2782 IN PVOID UserApcContext OPTIONAL
,
2783 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2785 IN ULONG BufferLength
,
2786 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2787 IN PULONG Key OPTIONAL
2793 IN HANDLE FileHandle
,
2794 IN HANDLE Event OPTIONAL
,
2795 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2796 IN PVOID UserApcContext OPTIONAL
,
2797 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2799 IN ULONG BufferLength
,
2800 IN PLARGE_INTEGER ByteOffset OPTIONAL
,
2801 IN PULONG Key OPTIONAL
2807 IN HANDLE FileHandle
,
2808 IN HANDLE Event OPTIONAL
,
2809 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2810 IN PVOID UserApcContext OPTIONAL
,
2811 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2812 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2813 IN ULONG BufferLength
,
2814 IN PLARGE_INTEGER ByteOffset
,
2815 IN PULONG Key OPTIONAL
2821 IN HANDLE FileHandle
,
2822 IN HANDLE Event OPTIONAL
,
2823 IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL
,
2824 IN PVOID UserApcContext OPTIONAL
,
2825 OUT PIO_STATUS_BLOCK UserIoStatusBlock
,
2826 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
2827 IN ULONG BufferLength
,
2828 IN PLARGE_INTEGER ByteOffset
,
2829 IN PULONG Key OPTIONAL
2836 PPORT_MESSAGE Message
,
2847 PPORT_MESSAGE Message
,
2856 NtReadVirtualMemory(
2857 IN HANDLE ProcessHandle
,
2858 IN PVOID BaseAddress
,
2860 IN ULONG NumberOfBytesToRead
,
2861 OUT PULONG NumberOfBytesRead
2865 ZwReadVirtualMemory(
2866 IN HANDLE ProcessHandle
,
2867 IN PVOID BaseAddress
,
2869 IN ULONG NumberOfBytesToRead
,
2870 OUT PULONG NumberOfBytesRead
2875 NtRegisterThreadTerminatePort(
2876 HANDLE TerminationPort
2881 ZwRegisterThreadTerminatePort(
2882 HANDLE TerminationPort
2888 IN HANDLE MutantHandle
,
2889 IN PLONG ReleaseCount OPTIONAL
2895 IN HANDLE MutantHandle
,
2896 IN PLONG ReleaseCount OPTIONAL
2902 IN HANDLE SemaphoreHandle
,
2903 IN LONG ReleaseCount
,
2904 OUT PLONG PreviousCount
2910 IN HANDLE SemaphoreHandle
,
2911 IN LONG ReleaseCount
,
2912 OUT PLONG PreviousCount
2917 NtRemoveIoCompletion(
2918 IN HANDLE IoCompletionHandle
,
2919 OUT PVOID
*CompletionKey
,
2920 OUT PVOID
*CompletionContext
,
2921 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2922 IN PLARGE_INTEGER Timeout OPTIONAL
2927 ZwRemoveIoCompletion(
2928 IN HANDLE IoCompletionHandle
,
2929 OUT PVOID
*CompletionKey
,
2930 OUT PVOID
*CompletionContext
,
2931 OUT PIO_STATUS_BLOCK IoStatusBlock
,
2932 IN PLARGE_INTEGER Timeout OPTIONAL
2938 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2940 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2946 IN POBJECT_ATTRIBUTES ObjectAttributes
,
2948 IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
2955 PPORT_MESSAGE LpcReply
2962 PPORT_MESSAGE LpcReply
2967 NtReplyWaitReceivePort(
2969 PVOID
*PortContext OPTIONAL
,
2970 PPORT_MESSAGE ReplyMessage OPTIONAL
,
2971 PPORT_MESSAGE ReceiveMessage
2976 ZwReplyWaitReceivePort(
2978 PVOID
*PortContext OPTIONAL
,
2979 PPORT_MESSAGE ReplyMessage
,
2980 PPORT_MESSAGE ReceiveMessage
2985 NtReplyWaitReplyPort(
2987 PPORT_MESSAGE ReplyMessage
2992 ZwReplyWaitReplyPort(
2994 PPORT_MESSAGE ReplyMessage
3001 PPORT_MESSAGE LpcMessage
);
3007 PPORT_MESSAGE LpcMessage
3012 NtRequestWaitReplyPort(
3014 PPORT_MESSAGE LpcReply
,
3015 PPORT_MESSAGE LpcRequest
3020 ZwRequestWaitReplyPort(
3022 PPORT_MESSAGE LpcReply
,
3023 PPORT_MESSAGE LpcRequest
3030 PLONG NumberOfWaitingThreads OPTIONAL
3037 PLONG NumberOfWaitingThreads OPTIONAL
3059 IN HANDLE ThreadHandle
,
3060 OUT PULONG SuspendCount
3066 IN HANDLE ThreadHandle
,
3067 OUT PULONG SuspendCount
3073 IN HANDLE ProcessHandle
3079 IN HANDLE ProcessHandle
3085 IN HANDLE KeyHandle
,
3086 IN HANDLE FileHandle
3091 IN HANDLE KeyHandle
,
3092 IN HANDLE FileHandle
3098 IN HANDLE KeyHandle
,
3099 IN HANDLE FileHandle
,
3106 IN HANDLE KeyHandle
,
3107 IN HANDLE FileHandle
,
3113 NtSetBootEntryOrder(
3120 ZwSetBootEntryOrder(
3142 IN HANDLE ThreadHandle
,
3148 IN HANDLE ThreadHandle
,
3155 IN BOOLEAN UserProfile
,
3156 IN LCID DefaultLocaleId
3162 IN BOOLEAN UserProfile
,
3163 IN LCID DefaultLocaleId
3168 NtSetDefaultUILanguage(
3174 ZwSetDefaultUILanguage(
3179 NtSetDefaultHardErrorPort(
3180 IN HANDLE PortHandle
3184 ZwSetDefaultHardErrorPort(
3185 IN HANDLE PortHandle
3191 IN HANDLE FileHandle
,
3192 IN PIO_STATUS_BLOCK IoStatusBlock
,
3200 IN HANDLE FileHandle
,
3201 IN PIO_STATUS_BLOCK IoStatusBlock
,
3209 IN HANDLE EventHandle
,
3210 OUT PLONG PreviousState OPTIONAL
3216 IN HANDLE EventHandle
,
3217 OUT PLONG PreviousState OPTIONAL
3223 IN HANDLE EventPairHandle
3229 IN HANDLE EventPairHandle
3233 NtSetHighWaitLowEventPair(
3234 IN HANDLE EventPairHandle
3238 ZwSetHighWaitLowEventPair(
3239 IN HANDLE EventPairHandle
3244 NtSetInformationFile(
3245 IN HANDLE FileHandle
,
3246 IN PIO_STATUS_BLOCK IoStatusBlock
,
3247 IN PVOID FileInformation
,
3249 IN FILE_INFORMATION_CLASS FileInformationClass
3254 ZwSetInformationFile(
3255 IN HANDLE FileHandle
,
3256 IN PIO_STATUS_BLOCK IoStatusBlock
,
3257 IN PVOID FileInformation
,
3259 IN FILE_INFORMATION_CLASS FileInformationClass
3264 NtSetInformationJobObject(
3266 JOBOBJECTINFOCLASS JobInformationClass
,
3267 PVOID JobInformation
,
3268 ULONG JobInformationLength
3273 ZwSetInformationJobObject(
3275 JOBOBJECTINFOCLASS JobInformationClass
,
3276 PVOID JobInformation
,
3277 ULONG JobInformationLength
3282 NtSetInformationKey(
3283 IN HANDLE KeyHandle
,
3284 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3285 IN PVOID KeyInformation
,
3286 IN ULONG KeyInformationLength
3291 ZwSetInformationKey(
3292 IN HANDLE KeyHandle
,
3293 IN KEY_SET_INFORMATION_CLASS KeyInformationClass
,
3294 IN PVOID KeyInformation
,
3295 IN ULONG KeyInformationLength
3300 NtSetInformationObject(
3301 IN HANDLE ObjectHandle
,
3302 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3303 IN PVOID ObjectInformation
,
3309 ZwSetInformationObject(
3310 IN HANDLE ObjectHandle
,
3311 IN OBJECT_INFORMATION_CLASS ObjectInformationClass
,
3312 IN PVOID ObjectInformation
,
3318 NtSetInformationProcess(
3319 IN HANDLE ProcessHandle
,
3320 IN PROCESSINFOCLASS ProcessInformationClass
,
3321 IN PVOID ProcessInformation
,
3322 IN ULONG ProcessInformationLength
3327 NtSetInformationThread(
3328 IN HANDLE ThreadHandle
,
3329 IN THREADINFOCLASS ThreadInformationClass
,
3330 IN PVOID ThreadInformation
,
3331 IN ULONG ThreadInformationLength
3335 ZwSetInformationThread(
3336 IN HANDLE ThreadHandle
,
3337 IN THREADINFOCLASS ThreadInformationClass
,
3338 IN PVOID ThreadInformation
,
3339 IN ULONG ThreadInformationLength
3344 NtSetInformationToken(
3345 IN HANDLE TokenHandle
,
3346 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3347 OUT PVOID TokenInformation
,
3348 IN ULONG TokenInformationLength
3353 ZwSetInformationToken(
3354 IN HANDLE TokenHandle
,
3355 IN TOKEN_INFORMATION_CLASS TokenInformationClass
,
3356 OUT PVOID TokenInformation
,
3357 IN ULONG TokenInformationLength
3363 IN HANDLE IoCompletionPortHandle
,
3364 IN PVOID CompletionKey
,
3365 IN PVOID CompletionContext
,
3366 IN NTSTATUS CompletionStatus
,
3367 IN ULONG CompletionInformation
3373 IN HANDLE IoCompletionPortHandle
,
3374 IN PVOID CompletionKey
,
3375 IN PVOID CompletionContext
,
3376 IN NTSTATUS CompletionStatus
,
3377 IN ULONG CompletionInformation
3382 NtSetIntervalProfile(
3384 KPROFILE_SOURCE ClockSource
3389 ZwSetIntervalProfile(
3391 KPROFILE_SOURCE ClockSource
3398 LDT_ENTRY LdtEntry1
,
3417 NtSetLowWaitHighEventPair(
3423 ZwSetLowWaitHighEventPair(
3429 NtSetQuotaInformationFile(
3431 PIO_STATUS_BLOCK IoStatusBlock
,
3432 PFILE_QUOTA_INFORMATION Buffer
,
3438 ZwSetQuotaInformationFile(
3440 PIO_STATUS_BLOCK IoStatusBlock
,
3441 PFILE_QUOTA_INFORMATION Buffer
,
3447 NtSetSecurityObject(
3449 IN SECURITY_INFORMATION SecurityInformation
,
3450 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3455 ZwSetSecurityObject(
3457 IN SECURITY_INFORMATION SecurityInformation
,
3458 IN PSECURITY_DESCRIPTOR SecurityDescriptor
3463 NtSetSystemEnvironmentValue(
3464 IN PUNICODE_STRING VariableName
,
3465 IN PUNICODE_STRING Value
3469 ZwSetSystemEnvironmentValue(
3470 IN PUNICODE_STRING VariableName
,
3471 IN PUNICODE_STRING Value
3476 NtSetSystemInformation(
3477 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3478 IN PVOID SystemInformation
,
3479 IN ULONG SystemInformationLength
3484 ZwSetSystemInformation(
3485 IN SYSTEM_INFORMATION_CLASS SystemInformationClass
,
3486 IN PVOID SystemInformation
,
3487 IN ULONG SystemInformationLength
3492 NtSetSystemPowerState(
3493 IN POWER_ACTION SystemAction
,
3494 IN SYSTEM_POWER_STATE MinSystemState
,
3501 IN PLARGE_INTEGER SystemTime
,
3502 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3508 IN PLARGE_INTEGER SystemTime
,
3509 IN PLARGE_INTEGER NewSystemTime OPTIONAL
3515 IN HANDLE TimerHandle
,
3516 IN PLARGE_INTEGER DueTime
,
3517 IN PTIMER_APC_ROUTINE TimerApcRoutine
,
3518 IN PVOID TimerContext
,
3519 IN BOOLEAN WakeTimer
,
3520 IN LONG Period OPTIONAL
,
3521 OUT PBOOLEAN PreviousState OPTIONAL
3526 NtSetTimerResolution(
3527 IN ULONG RequestedResolution
,
3528 IN BOOLEAN SetOrUnset
,
3529 OUT PULONG ActualResolution
3534 ZwSetTimerResolution(
3535 IN ULONG RequestedResolution
,
3536 IN BOOLEAN SetOrUnset
,
3537 OUT PULONG ActualResolution
3555 IN HANDLE KeyHandle
,
3556 IN PUNICODE_STRING ValueName
,
3557 IN ULONG TitleIndex OPTIONAL
,
3566 IN HANDLE KeyHandle
,
3567 IN PUNICODE_STRING ValueName
,
3568 IN ULONG TitleIndex OPTIONAL
,
3576 NtSetVolumeInformationFile(
3577 IN HANDLE FileHandle
,
3578 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3579 IN PVOID FsInformation
,
3581 IN FS_INFORMATION_CLASS FsInformationClass
3586 ZwSetVolumeInformationFile(
3587 IN HANDLE FileHandle
,
3588 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3589 IN PVOID FsInformation
,
3591 IN FS_INFORMATION_CLASS FsInformationClass
3597 IN SHUTDOWN_ACTION Action
3603 IN SHUTDOWN_ACTION Action
3608 NtSignalAndWaitForSingleObject(
3609 IN HANDLE SignalObject
,
3610 IN HANDLE WaitObject
,
3611 IN BOOLEAN Alertable
,
3612 IN PLARGE_INTEGER Time
3617 ZwSignalAndWaitForSingleObject(
3618 IN HANDLE SignalObject
,
3619 IN HANDLE WaitObject
,
3620 IN BOOLEAN Alertable
,
3621 IN PLARGE_INTEGER Time
3627 HANDLE ProfileHandle
3633 HANDLE ProfileHandle
3639 HANDLE ProfileHandle
3645 HANDLE ProfileHandle
3651 IN HANDLE ProcessHandle
3657 IN HANDLE ProcessHandle
3663 IN HANDLE ThreadHandle
,
3664 IN PULONG PreviousSuspendCount
3670 IN HANDLE ThreadHandle
,
3671 IN PULONG PreviousSuspendCount
3676 NtSystemDebugControl(
3677 DEBUG_CONTROL_CODE ControlCode
,
3679 ULONG InputBufferLength
,
3681 ULONG OutputBufferLength
,
3688 IN HANDLE ProcessHandle
,
3689 IN NTSTATUS ExitStatus
3695 IN HANDLE ProcessHandle
,
3696 IN NTSTATUS ExitStatus
3702 IN HANDLE ThreadHandle
,
3703 IN NTSTATUS ExitStatus
3709 IN HANDLE ThreadHandle
,
3710 IN NTSTATUS ExitStatus
3715 NtTerminateJobObject(
3722 ZwTerminateJobObject(
3742 IN ULONG TraceHandle
,
3744 IN ULONG TraceHeaderLength
,
3745 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3751 IN ULONG TraceHandle
,
3753 IN ULONG TraceHeaderLength
,
3754 IN
struct _EVENT_TRACE_HEADER
* TraceHeader
3759 NtTranslateFilePath(
3767 ZwTranslateFilePath(
3776 IN PUNICODE_STRING DriverServiceName
3782 IN PUNICODE_STRING DriverServiceName
3788 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3794 IN POBJECT_ATTRIBUTES KeyObjectAttributes
3800 IN HANDLE FileHandle
,
3801 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3802 IN PLARGE_INTEGER ByteOffset
,
3803 IN PLARGE_INTEGER Lenght
,
3804 OUT PULONG Key OPTIONAL
3810 IN HANDLE FileHandle
,
3811 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3812 IN PLARGE_INTEGER ByteOffset
,
3813 IN PLARGE_INTEGER Lenght
,
3814 OUT PULONG Key OPTIONAL
3819 NtUnlockVirtualMemory(
3820 IN HANDLE ProcessHandle
,
3821 IN PVOID BaseAddress
,
3822 IN ULONG NumberOfBytesToUnlock
,
3823 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3828 ZwUnlockVirtualMemory(
3829 IN HANDLE ProcessHandle
,
3830 IN PVOID BaseAddress
,
3831 IN ULONG NumberOfBytesToUnlock
,
3832 OUT PULONG NumberOfBytesUnlocked OPTIONAL
3837 NtUnmapViewOfSection(
3838 IN HANDLE ProcessHandle
,
3839 IN PVOID BaseAddress
3844 ZwUnmapViewOfSection(
3845 IN HANDLE ProcessHandle
,
3846 IN PVOID BaseAddress
3859 IN ULONG RoutineIndex
,
3861 IN ULONG ArgumentLength
,
3862 OUT PVOID
* Result OPTIONAL
,
3863 OUT PULONG ResultLength OPTIONAL
3868 NtWaitForMultipleObjects(
3871 IN WAIT_TYPE WaitType
,
3872 IN BOOLEAN Alertable
,
3873 IN PLARGE_INTEGER Time
3878 ZwWaitForMultipleObjects(
3881 IN WAIT_TYPE WaitType
,
3882 IN BOOLEAN Alertable
,
3883 IN PLARGE_INTEGER Time
3888 NtWaitForSingleObject(
3890 IN BOOLEAN Alertable
,
3891 IN PLARGE_INTEGER Time
3896 ZwWaitForSingleObject(
3898 IN BOOLEAN Alertable
,
3899 IN PLARGE_INTEGER Time
3904 NtWaitHighEventPair(
3905 IN HANDLE EventPairHandle
3910 ZwWaitHighEventPair(
3911 IN HANDLE EventPairHandle
3917 IN HANDLE EventPairHandle
3923 IN HANDLE EventPairHandle
3929 IN HANDLE FileHandle
,
3930 IN HANDLE Event OPTIONAL
,
3931 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3932 IN PVOID ApcContext OPTIONAL
,
3933 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3936 IN PLARGE_INTEGER ByteOffset
,
3937 IN PULONG Key OPTIONAL
3943 IN HANDLE FileHandle
,
3944 IN HANDLE Event OPTIONAL
,
3945 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3946 IN PVOID ApcContext OPTIONAL
,
3947 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3950 IN PLARGE_INTEGER ByteOffset
,
3951 IN PULONG Key OPTIONAL
3957 IN HANDLE FileHandle
,
3958 IN HANDLE Event OPTIONAL
,
3959 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3960 IN PVOID ApcContext OPTIONAL
,
3961 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3962 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3963 IN ULONG BufferLength
,
3964 IN PLARGE_INTEGER ByteOffset
,
3965 IN PULONG Key OPTIONAL
3971 IN HANDLE FileHandle
,
3972 IN HANDLE Event OPTIONAL
,
3973 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL
,
3974 IN PVOID ApcContext OPTIONAL
,
3975 OUT PIO_STATUS_BLOCK IoStatusBlock
,
3976 IN FILE_SEGMENT_ELEMENT BufferDescription
[],
3977 IN ULONG BufferLength
,
3978 IN PLARGE_INTEGER ByteOffset
,
3979 IN PULONG Key OPTIONAL
3986 PPORT_MESSAGE Message
,
3997 PPORT_MESSAGE Message
,
4006 NtWriteVirtualMemory(
4007 IN HANDLE ProcessHandle
,
4008 IN PVOID BaseAddress
,
4010 IN ULONG NumberOfBytesToWrite
,
4011 OUT PULONG NumberOfBytesWritten
4016 ZwWriteVirtualMemory(
4017 IN HANDLE ProcessHandle
,
4018 IN PVOID BaseAddress
,
4020 IN ULONG NumberOfBytesToWrite
,
4021 OUT PULONG NumberOfBytesWritten
4037 static __inline
struct _PEB
* NtCurrentPeb (void)
4041 #if defined(__GNUC__)
4043 __asm__ __volatile__
4045 "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
4046 : "=r" (pPeb
) /* can't have two memory operands */
4050 #elif defined(_MSC_VER)
4052 __asm mov eax
, fs
:0x30;
4056 #error Unknown compiler for inline assembler