/* PROTOTYPES ****************************************************************/
/* FIXME: FILE NEEDS CLEANUP */
-NTSTATUS
+NTSTATUS
STDCALL
NtAcceptConnectPort(
PHANDLE PortHandle,
PLPC_SECTION_READ ReadMap
);
+NTSTATUS
+STDCALL
+NtAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAcces,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSTATUS
+STDCALL
+ZwAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAcces,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSTATUS
+STDCALL
+NtAccessCheckAndAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PHANDLE ObjectHandle,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ IN BOOLEAN ObjectCreation,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+STDCALL
+NtAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
+);
+
+NTSTATUS
+STDCALL
+ZwAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
+);
+
NTSTATUS
STDCALL
NtAddBootEntry(
IN PUNICODE_STRING EntryValue
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtAdjustGroupsToken(
IN HANDLE TokenHandle,
IN BOOLEAN ResetToDefault,
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtAdjustPrivilegesToken(
IN HANDLE TokenHandle,
IN BOOLEAN DisableAllPrivileges,
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwAdjustPrivilegesToken(
IN HANDLE TokenHandle,
IN BOOLEAN DisableAllPrivileges,
NTSTATUS
STDCALL
-NtAllocateVirtualMemory (
+NtAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSTATUS
+STDCALL
+ZwAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSTATUS
+STDCALL
+NtAllocateVirtualMemory(
IN HANDLE ProcessHandle,
IN OUT PVOID *BaseAddress,
IN ULONG ZeroBits,
NTSTATUS
STDCALL
-ZwAllocateVirtualMemory (
+ZwAllocateVirtualMemory(
IN HANDLE ProcessHandle,
IN OUT PVOID *BaseAddress,
IN ULONG ZeroBits,
IN ULONG Protect
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtAssignProcessToJobObject(
HANDLE JobHandle,
- HANDLE ProcessHandle)
-;
+ HANDLE ProcessHandle
+);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwAssignProcessToJobObject(
HANDLE JobHandle,
HANDLE ProcessHandle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtCallbackReturn(
PVOID Result,
ULONG ResultLength,
NTSTATUS Status
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwCallbackReturn(
PVOID Result,
ULONG ResultLength,
OUT PIO_STATUS_BLOCK IoStatusBlock
);
+NTSTATUS
+STDCALL
+NtCancelTimer(
+ IN HANDLE TimerHandle,
+ OUT PBOOLEAN CurrentState OPTIONAL
+);
+
NTSTATUS
STDCALL
NtClearEvent(
- IN HANDLE EventHandle
+ IN HANDLE EventHandle
);
NTSTATUS
STDCALL
ZwClearEvent(
- IN HANDLE EventHandle
+ IN HANDLE EventHandle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtCreateJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwCreateJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
IN BOOLEAN GenerateOnClose
);
-NTSTATUS
+NTSTATUS
STDCALL
NtCompleteConnectPort(
HANDLE PortHandle
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwCompleteConnectPort(
HANDLE PortHandle
);
-NTSTATUS
+NTSTATUS
STDCALL
NtConnectPort(
PHANDLE PortHandle,
PULONG ConnectInfoLength
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwConnectPort(
PHANDLE PortHandle,
PULONG ConnectInfoLength
);
+NTSTATUS
+STDCALL
+NtContinue(
+ IN PCONTEXT Context,
+ IN BOOLEAN TestAlert
+);
+
+NTSTATUS
+STDCALL
+ZwContinue(
+ IN PCONTEXT Context,
+ IN CINT IrqLevel
+);
+
NTSTATUS
STDCALL
NtCreateDirectoryObject(
IN ULONG NumberOfConcurrentThreads
);
-NTSTATUS
+NTSTATUS
STDCALL
NtCreateKey(
OUT PHANDLE KeyHandle,
IN PULONG Disposition OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwCreateKey(
OUT PHANDLE KeyHandle,
IN BOOLEAN InitialOwner
);
-NTSTATUS
+NTSTATUS
STDCALL
NtCreateNamedPipeFile(
OUT PHANDLE NamedPipeFileHandle,
IN PLARGE_INTEGER DefaultTimeOut
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwCreateNamedPipeFile(
OUT PHANDLE NamedPipeFileHandle,
IN PLARGE_INTEGER DefaultTimeOut
);
-NTSTATUS
+NTSTATUS
+STDCALL
+NtCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSTATUS
+STDCALL
+ZwCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSTATUS
STDCALL
NtCreatePort(
PHANDLE PortHandle,
ULONG NPMessageQueueSize OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
NtCreatePort(
PHANDLE PortHandle,
IN HANDLE ExceptionPort OPTIONAL
);
+NTSTATUS
+STDCALL
+NtCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN HANDLE ProcessHandle,
+ IN PVOID ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN KPROFILE_SOURCE Source,
+ IN KAFFINITY ProcessorMask
+);
+
+NTSTATUS
+STDCALL
+ZwCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN ULONG ClockSource,
+ IN ULONG ProcessorMask
+);
+
NTSTATUS
STDCALL
NtCreateSection(
IN PUNICODE_STRING Name
);
+NTSTATUS
+STDCALL
+NtCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
+NTSTATUS
+STDCALL
+ZwCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
NTSTATUS
STDCALL
NtCreateTimer(
IN PTOKEN_SOURCE TokenSource
);
-NTSTATUS
+NTSTATUS
STDCALL
NtCreateWaitablePort(
PHANDLE PortHandle,
ULONG NPMessageQueueSize OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwCreateWaitablePort(
PHANDLE PortHandle,
ULONG NPMessageQueueSize OPTIONAL
);
+NTSTATUS
+STDCALL
+NtDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
+NTSTATUS
+STDCALL
+ZwDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
NTSTATUS
STDCALL
NtDeleteAtom(
NTSTATUS
STDCALL
NtDeleteObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN BOOLEAN GenerateOnClose
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
);
NTSTATUS
STDCALL
ZwDeleteObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN BOOLEAN GenerateOnClose
-);
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
NTSTATUS
STDCALL
STDCALL
NtDeviceIoControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
- IN PVOID UserApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
STDCALL
ZwDeviceIoControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
- IN PVOID UserApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
NTSTATUS
STDCALL
-NtEnumerateBootEntries(
- IN ULONG Unknown1,
- IN ULONG Unknown2
+NtDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
);
NTSTATUS
STDCALL
-ZwEnumerateBootEntries(
- IN ULONG Unknown1,
- IN ULONG Unknown2
+ZwDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
);
NTSTATUS
STDCALL
-NtEnumerateKey(
- IN HANDLE KeyHandle,
- IN ULONG Index,
- IN KEY_INFORMATION_CLASS KeyInformationClass,
- OUT PVOID KeyInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
+NtDuplicateToken(
+ IN HANDLE ExistingTokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN BOOLEAN EffectiveOnly,
+ IN TOKEN_TYPE TokenType,
+ OUT PHANDLE NewTokenHandle
+);
+
+NTSTATUS
+STDCALL
+NtEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+STDCALL
+ZwEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+STDCALL
+NtEnumerateKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
STDCALL
ZwEnumerateKey(
IN HANDLE KeyHandle,
IN ULONG Length,
OUT PULONG ResultLength
);
+
NTSTATUS
STDCALL
NtEnumerateValueKey(
OUT PULONG ResultLength
);
+NTSTATUS
+STDCALL
+NtExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSTATUS
+STDCALL
+ZwExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSTATUS
+STDCALL
+NtFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSTATUS
+STDCALL
+ZwFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
NTSTATUS
STDCALL
NtFlushBuffersFile(
OUT PIO_STATUS_BLOCK IoStatusBlock
);
+NTSTATUS
+STDCALL
+NtFlushInstructionCache(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN UINT NumberOfBytesToFlush
+);
+
NTSTATUS
STDCALL
NtFlushKey(
ZwFlushKey(
IN HANDLE KeyHandle
);
-
-NTSTATUS
-STDCALL
+
+NTSTATUS
+STDCALL
+NtFlushVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToFlush,
+ OUT PULONG NumberOfBytesFlushed OPTIONAL
+);
+
+NTSTATUS
+STDCALL
NtFlushWriteBuffer(VOID);
-NTSTATUS
-STDCALL
-ZwFlushWriteBuffer(VOID);
+NTSTATUS
+STDCALL
+ZwFlushWriteBuffer(VOID);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtFreeVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN PULONG RegionSize,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
IN ULONG FreeType
);
-
-NTSTATUS
-STDCALL
+
+NTSTATUS
+STDCALL
ZwFreeVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN PULONG RegionSize,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
IN ULONG FreeType
);
STDCALL
NtFsControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
STDCALL
ZwFsControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
);
NTSTATUS
-STDCALL
+STDCALL
NtGetContextThread(
IN HANDLE ThreadHandle,
OUT PCONTEXT Context
);
NTSTATUS
-STDCALL
+STDCALL
ZwGetContextThread(
IN HANDLE ThreadHandle,
OUT PCONTEXT Context
);
-NTSTATUS
+NTSTATUS
STDCALL
NtGetPlugPlayEvent(
ULONG Reserved1,
ULONG BufferSize
);
-NTSTATUS
+ULONG
+STDCALL
+NtGetTickCount(
+ VOID
+);
+
+ULONG
+STDCALL
+ZwGetTickCount(
+ VOID
+);
+
+NTSTATUS
STDCALL
NtImpersonateClientOfPort(
HANDLE PortHandle,
PLPC_MESSAGE ClientMessage
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwImpersonateClientOfPort(
HANDLE PortHandle,
);
NTSTATUS
-STDCALL
+STDCALL
NtImpersonateThread(
IN HANDLE ThreadHandle,
IN HANDLE ThreadToImpersonate,
);
NTSTATUS
-STDCALL
+STDCALL
ZwImpersonateThread(
IN HANDLE ThreadHandle,
IN HANDLE ThreadToImpersonate,
);
NTSTATUS
-STDCALL
+STDCALL
NtInitializeRegistry(
BOOLEAN SetUpBoot
);
NTSTATUS
-STDCALL
+STDCALL
ZwInitializeRegistry(
BOOLEAN SetUpBoot
);
IN HANDLE JobHandle OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
NtListenPort(HANDLE PortHandle,
PLPC_MESSAGE LpcMessage
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwListenPort(HANDLE PortHandle,
PLPC_MESSAGE LpcMessage
);
NTSTATUS
-STDCALL
+STDCALL
ZwLoadDriver(
IN PUNICODE_STRING DriverServiceName
);
-NTSTATUS
+NTSTATUS
+STDCALL
+NtLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSTATUS
+STDCALL
+ZwLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSTATUS
+STDCALL
+NtLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSTATUS
+STDCALL
+ZwLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSTATUS
STDCALL
NtLockFile(
IN HANDLE FileHandle,
IN BOOLEAN ExclusiveLock
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwLockFile(
IN HANDLE FileHandle,
IN BOOLEAN ExclusiveLock
);
+NTSTATUS
+STDCALL
+NtLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
+NTSTATUS
+STDCALL
+ZwLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
NTSTATUS
STDCALL
NtMakePermanentObject(
NTSTATUS
STDCALL
NtMakeTemporaryObject(
- IN HANDLE Handle
+ IN HANDLE Handle
);
NTSTATUS
STDCALL
ZwMakeTemporaryObject(
- IN HANDLE Handle
+ IN HANDLE Handle
);
-NTSTATUS
+NTSTATUS
STDCALL
NtMapViewOfSection(
IN HANDLE SectionHandle,
STDCALL
NtNotifyChangeDirectoryFile(
IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID Buffer,
IN ULONG BufferSize,
STDCALL
ZwNotifyChangeDirectoryFile(
IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID Buffer,
IN ULONG BufferSize,
NtNotifyChangeKey(
IN HANDLE KeyHandle,
IN HANDLE Event,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG CompletionFilter,
- IN BOOLEAN Asynchroneous,
+ IN BOOLEAN Asynchroneous,
OUT PVOID ChangeBuffer,
IN ULONG Length,
IN BOOLEAN WatchSubtree
ZwNotifyChangeKey(
IN HANDLE KeyHandle,
IN HANDLE Event,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG CompletionFilter,
- IN BOOLEAN Asynchroneous,
+ IN BOOLEAN Asynchroneous,
OUT PVOID ChangeBuffer,
IN ULONG Length,
IN BOOLEAN WatchSubtree
IN POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtOpenJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwOpenJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
IN POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
+NTSTATUS
+STDCALL
+NtOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+STDCALL
+ZwOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
STDCALL
NtOpenProcess(
OUT PHANDLE ProcessHandle,
IN PCLIENT_ID ClientId
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwOpenProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes,
IN PCLIENT_ID ClientId
-);
+);
NTSTATUS
STDCALL
IN POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
+NTSTATUS
STDCALL
NtPlugPlayControl(
ULONG ControlCode,
PVOID Buffer,
ULONG BufferSize
);
-
-NTSTATUS
-STDCALL
+
+NTSTATUS
+STDCALL
NtPowerInformation(
POWER_INFORMATION_LEVEL PowerInformationLevel,
- PVOID InputBuffer,
+ PVOID InputBuffer,
ULONG InputBufferLength,
PVOID OutputBuffer,
ULONG OutputBufferLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwPowerInformation(
POWER_INFORMATION_LEVEL PowerInformationLevel,
- PVOID InputBuffer,
+ PVOID InputBuffer,
ULONG InputBufferLength,
PVOID OutputBuffer,
ULONG OutputBufferLength
NTSTATUS
STDCALL
ZwPrivilegedServiceAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PUNICODE_STRING ServiceName,
+ IN PUNICODE_STRING SubsystemName,
+ IN PUNICODE_STRING ServiceName,
IN HANDLE ClientToken,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN AccessGranted
-);
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
NTSTATUS
STDCALL
NTSTATUS
STDCALL
-NtPulseEvent(
- IN HANDLE EventHandle,
- IN PLONG PulseCount OPTIONAL
+NtProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
);
NTSTATUS
STDCALL
-ZwPulseEvent(
- IN HANDLE EventHandle,
- IN PLONG PulseCount OPTIONAL
-);
-
+ZwProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
+);
+
+NTSTATUS
+STDCALL
+NtPulseEvent(
+ IN HANDLE EventHandle,
+ IN PLONG PulseCount OPTIONAL
+);
+
+NTSTATUS
+STDCALL
+ZwPulseEvent(
+ IN HANDLE EventHandle,
+ IN PLONG PulseCount OPTIONAL
+);
+
NTSTATUS
STDCALL
NtQueryAttributesFile(
OUT PLCID DefaultLocaleId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtQueryDefaultUILanguage(
PLANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwQueryDefaultUILanguage(
PLANGID LanguageId
);
IN BOOLEAN RestartScan
);
+NTSTATUS
+STDCALL
+NtQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSTATUS
+STDCALL
+ZwQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
NTSTATUS
STDCALL
NtQueryEaFile(
OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwQueryFullAttributesFile(
IN POBJECT_ATTRIBUTES ObjectAttributes,
OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
+NTSTATUS
+STDCALL
+NtQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSTATUS
+STDCALL
+ZwQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
NTSTATUS
STDCALL
NtQueryInformationFile(
FILE_INFORMATION_CLASS FileInformationClass
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtQueryInformationJobObject(
HANDLE JobHandle,
- JOBOBJECTINFOCLASS JobInformationClass,
+ JOBOBJECTINFOCLASS JobInformationClass,
PVOID JobInformation,
- ULONG JobInformationLength,
+ ULONG JobInformationLength,
PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwQueryInformationJobObject(
HANDLE JobHandle,
- JOBOBJECTINFOCLASS JobInformationClass,
+ JOBOBJECTINFOCLASS JobInformationClass,
PVOID JobInformation,
- ULONG JobInformationLength,
+ ULONG JobInformationLength,
PULONG ReturnLength
);
-NTSTATUS
+NTSTATUS
STDCALL
NtQueryInformationPort(
HANDLE PortHandle,
PULONG ReturnLength
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwQueryInformationPort(
HANDLE PortHandle,
IN ULONG ProcessInformationLength,
OUT PULONG ReturnLength OPTIONAL
);
-
+
NTSTATUS
STDCALL
ZwQueryInformationProcess(
IN THREADINFOCLASS ThreadInformationClass,
OUT PVOID ThreadInformation,
IN ULONG ThreadInformationLength,
- OUT PULONG ReturnLength
+ OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwQueryInformationThread(
IN HANDLE ThreadHandle,
IN THREADINFOCLASS ThreadInformationClass,
OUT PVOID ThreadInformation,
- IN ULONG ThreadInformationLength,
+ IN ULONG ThreadInformationLength,
OUT PULONG ReturnLength
);
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtQueryInstallUILanguage(
PLANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwQueryInstallUILanguage(
PLANGID LanguageId
);
+NTSTATUS
+STDCALL
+NtQueryIntervalProfile(
+ IN KPROFILE_SOURCE ProfileSource,
+ OUT PULONG Interval
+);
+
+NTSTATUS
+STDCALL
+ZwQueryIntervalProfile(
+ OUT PULONG Interval,
+ OUT KPROFILE_SOURCE ClockSource
+);
+
NTSTATUS
STDCALL
NtQueryIoCompletion(
IN BOOLEAN RestartScan
);
-
NTSTATUS
STDCALL
ZwQueryQuotaInformationFile(
OUT PULONG ResultLength
);
+NTSTATUS
+STDCALL
+NtQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSTATUS
+STDCALL
+ZwQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
NTSTATUS
STDCALL
NtQueryPerformanceCounter(
IN PLARGE_INTEGER Frequency
);
+NTSTATUS
+STDCALL
+NtQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+STDCALL
+ZwQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+STDCALL
+NtQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+STDCALL
+ZwQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
NTSTATUS
STDCALL
NtQuerySemaphore(
IN HANDLE SymLinkObjHandle,
OUT PUNICODE_STRING LinkName,
OUT PULONG DataWritten OPTIONAL
-);
+);
NTSTATUS
STDCALL
NTSTATUS
STDCALL
-NtQuerySystemTime (
+NtQuerySystemTime(
+ OUT PLARGE_INTEGER CurrentTime
+);
+
+NTSTATUS
+STDCALL
+ZwQuerySystemTime(
OUT PLARGE_INTEGER CurrentTime
);
-
+
NTSTATUS
STDCALL
NtQueryTimer(
IN ULONG Length,
OUT PULONG ResultLength
);
+
NTSTATUS
STDCALL
ZwQueryTimer(
);
NTSTATUS
-STDCALL
-NtQueryTimerResolution (
+STDCALL
+NtQueryTimerResolution(
OUT PULONG MinimumResolution,
- OUT PULONG MaximumResolution,
- OUT PULONG ActualResolution
-);
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
NTSTATUS
-STDCALL
-ZwQueryTimerResolution (
+STDCALL
+ZwQueryTimerResolution(
OUT PULONG MinimumResolution,
- OUT PULONG MaximumResolution,
- OUT PULONG ActualResolution
-);
-
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
+
NTSTATUS
STDCALL
NtQueryValueKey(
OUT PULONG ResultLength
);
+NTSTATUS
+STDCALL
+NtQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN IN CINT VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+STDCALL
+ZwQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN IN CINT VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
NTSTATUS
STDCALL
NtQueryVolumeInformationFile(
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID FsInformation,
IN ULONG Length,
- IN FS_INFORMATION_CLASS FsInformationClass
+ IN FS_INFORMATION_CLASS FsInformationClass
);
NTSTATUS
IN BOOLEAN SearchFrames
);
+NTSTATUS
+STDCALL
+NtRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
+ IN PVOID *Parameters,
+ IN HARDERROR_RESPONSE_OPTION ResponseOption,
+ OUT PHARDERROR_RESPONSE Response
+);
+
+NTSTATUS
+STDCALL
+ZwRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
+ IN PVOID *Parameters,
+ IN HARDERROR_RESPONSE_OPTION ResponseOption,
+ OUT PHARDERROR_RESPONSE Response
+);
+
NTSTATUS
STDCALL
NtReadFile(
OUT PVOID Buffer,
IN ULONG BufferLength,
IN PLARGE_INTEGER ByteOffset OPTIONAL,
- IN PULONG Key OPTIONAL
+ IN PULONG Key OPTIONAL
);
NTSTATUS
OUT PVOID Buffer,
IN ULONG BufferLength,
IN PLARGE_INTEGER ByteOffset OPTIONAL,
- IN PULONG Key OPTIONAL
+ IN PULONG Key OPTIONAL
);
NTSTATUS
IN PULONG Key OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
NtReadRequestData(
HANDLE PortHandle,
PULONG ReturnLength
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwReadRequestData(
HANDLE PortHandle,
NTSTATUS
STDCALL
-NtReadVirtualMemory(
+NtReadVirtualMemory(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
OUT PVOID Buffer,
IN ULONG NumberOfBytesToRead,
OUT PULONG NumberOfBytesRead
-);
+);
NTSTATUS
STDCALL
-ZwReadVirtualMemory(
+ZwReadVirtualMemory(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
OUT PVOID Buffer,
IN ULONG NumberOfBytesToRead,
OUT PULONG NumberOfBytesRead
-);
+);
NTSTATUS
-STDCALL
+STDCALL
NtRegisterThreadTerminatePort(
HANDLE TerminationPort
);
NTSTATUS
-STDCALL
+STDCALL
ZwRegisterThreadTerminatePort(
HANDLE TerminationPort
);
NTSTATUS
-STDCALL
+STDCALL
NtReleaseMutant(
IN HANDLE MutantHandle,
IN PLONG ReleaseCount OPTIONAL
);
NTSTATUS
-STDCALL
+STDCALL
ZwReleaseMutant(
IN HANDLE MutantHandle,
IN PLONG ReleaseCount OPTIONAL
IN HANDLE Key,
IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
);
+
NTSTATUS
STDCALL
ZwReplaceKey(
IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
);
-NTSTATUS
+NTSTATUS
STDCALL
NtReplyPort(
HANDLE PortHandle,
PLPC_MESSAGE LpcReply
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwReplyPort(
HANDLE PortHandle,
PLPC_MESSAGE LpcReply
);
-NTSTATUS
+NTSTATUS
STDCALL
NtReplyWaitReceivePort(
HANDLE PortHandle,
PLPC_MESSAGE MessageRequest
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwReplyWaitReceivePort(
HANDLE PortHandle,
PLPC_MESSAGE MessageRequest
);
-NTSTATUS
+NTSTATUS
STDCALL
NtReplyWaitReplyPort(
HANDLE PortHandle,
PLPC_MESSAGE ReplyMessage
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwReplyWaitReplyPort(
HANDLE PortHandle,
PLPC_MESSAGE ReplyMessage
);
-NTSTATUS
+NTSTATUS
STDCALL
NtRequestPort(
HANDLE PortHandle,
PLPC_MESSAGE LpcMessage);
-NTSTATUS
+NTSTATUS
STDCALL
ZwRequestPort(
HANDLE PortHandle,
PLPC_MESSAGE LpcRequest
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwRequestWaitReplyPort(
HANDLE PortHandle,
ZwResumeProcess(
IN HANDLE ProcessHandle
);
-
+
NTSTATUS
STDCALL
NtSaveKey(
IN ULONG Unknown2
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtSetBootOptions(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwSetBootOptions(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2
);
IN LCID DefaultLocaleId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtSetDefaultUILanguage(
LANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwSetDefaultUILanguage(
LANGID LanguageId
);
IN FILE_INFORMATION_CLASS FileInformationClass
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtSetInformationJobObject(
HANDLE JobHandle,
JOBOBJECTINFOCLASS JobInformationClass,
- PVOID JobInformation,
+ PVOID JobInformation,
ULONG JobInformationLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwSetInformationJobObject(
HANDLE JobHandle,
JOBOBJECTINFOCLASS JobInformationClass,
- PVOID JobInformation,
+ PVOID JobInformation,
ULONG JobInformationLength
);
+NTSTATUS
+STDCALL
+NtSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
+);
+
+NTSTATUS
+STDCALL
+ZwSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
+);
+
+NTSTATUS
+STDCALL
+NtSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSTATUS
+STDCALL
+ZwSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSTATUS
+STDCALL
+NtSetInformationProcess(
+ IN HANDLE ProcessHandle,
+ IN PROCESSINFOCLASS ProcessInformationClass,
+ IN PVOID ProcessInformation,
+ IN ULONG ProcessInformationLength
+);
+
NTSTATUS
STDCALL
NtSetInformationThread(
NTSTATUS
STDCALL
NtSetInformationToken(
- IN HANDLE TokenHandle,
+ IN HANDLE TokenHandle,
IN TOKEN_INFORMATION_CLASS TokenInformationClass,
- OUT PVOID TokenInformation,
- IN ULONG TokenInformationLength
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
);
NTSTATUS
STDCALL
ZwSetInformationToken(
- IN HANDLE TokenHandle,
+ IN HANDLE TokenHandle,
IN TOKEN_INFORMATION_CLASS TokenInformationClass,
- OUT PVOID TokenInformation,
- IN ULONG TokenInformationLength
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
);
NTSTATUS
IN ULONG CompletionInformation
);
-NTSTATUS
+NTSTATUS
STDCALL
NtSetIntervalProfile(
ULONG Interval,
KPROFILE_SOURCE ClockSource
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwSetIntervalProfile(
ULONG Interval,
KPROFILE_SOURCE ClockSource
);
+NTSTATUS
+STDCALL
+NtSetLdtEntries(
+ ULONG Selector1,
+ LDT_ENTRY LdtEntry1,
+ ULONG Selector2,
+ LDT_ENTRY LdtEntry2
+);
+
NTSTATUS
STDCALL
NtSetLowEventPair(
HANDLE EventPair
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtSetQuotaInformationFile(
HANDLE FileHandle,
- PIO_STATUS_BLOCK IoStatusBlock,
+ PIO_STATUS_BLOCK IoStatusBlock,
PFILE_QUOTA_INFORMATION Buffer,
ULONG BufferLength
-);
+);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwSetQuotaInformationFile(
HANDLE FileHandle,
- PIO_STATUS_BLOCK IoStatusBlock,
+ PIO_STATUS_BLOCK IoStatusBlock,
PFILE_QUOTA_INFORMATION Buffer,
ULONG BufferLength
-);
+);
NTSTATUS
STDCALL
NtSetSecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor
-);
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
NTSTATUS
STDCALL
ZwSetSecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor
-);
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
NTSTATUS
STDCALL
IN ULONG SystemInformationLength
);
+NTSTATUS
+STDCALL
+NtSetSystemPowerState(
+ IN POWER_ACTION SystemAction,
+ IN SYSTEM_POWER_STATE MinSystemState,
+ IN ULONG Flags
+);
+
NTSTATUS
STDCALL
NtSetSystemTime(
IN PLARGE_INTEGER NewSystemTime OPTIONAL
);
+NTSTATUS
+STDCALL
+NtSetTimer(
+ IN HANDLE TimerHandle,
+ IN PLARGE_INTEGER DueTime,
+ IN PTIMER_APC_ROUTINE TimerApcRoutine,
+ IN PVOID TimerContext,
+ IN BOOLEAN WakeTimer,
+ IN LONG Period OPTIONAL,
+ OUT PBOOLEAN PreviousState OPTIONAL
+);
+
NTSTATUS
STDCALL
NtSetTimerResolution(
NtSetUuidSeed(
IN PUCHAR UuidSeed
);
-
+
NTSTATUS
STDCALL
ZwSetUuidSeed(
HANDLE ProfileHandle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
+NtSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+STDCALL
+ZwSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+STDCALL
+NtSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSTATUS
+STDCALL
+ZwSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSTATUS
+STDCALL
+NtSystemDebugControl(
+ DEBUG_CONTROL_CODE ControlCode,
+ PVOID InputBuffer,
+ ULONG InputBufferLength,
+ PVOID OutputBuffer,
+ ULONG OutputBufferLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+STDCALL
NtTerminateProcess(
IN HANDLE ProcessHandle,
IN NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwTerminateProcess(
IN HANDLE ProcessHandle,
IN NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
+NtTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+NTSTATUS
+STDCALL
+ZwTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSTATUS
+STDCALL
NtTerminateJobObject(
- HANDLE JobHandle,
+ HANDLE JobHandle,
NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwTerminateJobObject(
- HANDLE JobHandle,
+ HANDLE JobHandle,
NTSTATUS ExitStatus
);
+NTSTATUS
+STDCALL
+NtTestAlert(
+ VOID
+);
+
+NTSTATUS
+STDCALL
+ZwTestAlert(
+ VOID
+);
+
NTSTATUS
STDCALL
NtTraceEvent(
IN struct _EVENT_TRACE_HEADER* TraceHeader
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
NtTranslateFilePath(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2,
ULONG Unknown3
);
-NTSTATUS
-STDCALL
+NTSTATUS
+STDCALL
ZwTranslateFilePath(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2,
ULONG Unknown3
);
-NTSTATUS
+NTSTATUS
STDCALL
NtUnloadDriver(
IN PUNICODE_STRING DriverServiceName
);
-NTSTATUS
+NTSTATUS
STDCALL
ZwUnloadDriver(
IN PUNICODE_STRING DriverServiceName
NTSTATUS
STDCALL
-NtUnmapViewOfSection(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress
+NtUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
);
NTSTATUS
STDCALL
-ZwUnmapViewOfSection(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress
+ZwUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
);
-NTSTATUS
+NTSTATUS
STDCALL
-NtWriteRequestData(
- HANDLE PortHandle,
- PLPC_MESSAGE Message,
- ULONG Index,
- PVOID Buffer,
- ULONG BufferLength,
- PULONG ReturnLength
+NtUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT PULONG Key OPTIONAL
);
-NTSTATUS
+NTSTATUS
STDCALL
-ZwWriteRequestData(
- HANDLE PortHandle,
- PLPC_MESSAGE Message,
- ULONG Index,
- PVOID Buffer,
- ULONG BufferLength,
- PULONG ReturnLength
+ZwUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT PULONG Key OPTIONAL
);
NTSTATUS
-STDCALL
-NtWriteVirtualMemory(
+STDCALL
+NtUnlockVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN PVOID Buffer,
- IN ULONG NumberOfBytesToWrite,
- OUT PULONG NumberOfBytesWritten
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
);
NTSTATUS
-STDCALL
-ZwWriteVirtualMemory(
+STDCALL
+ZwUnlockVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN PVOID Buffer,
- IN ULONG NumberOfBytesToWrite,
- OUT PULONG NumberOfBytesWritten
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
);
-
NTSTATUS
STDCALL
-NtWaitForSingleObject (
- IN HANDLE Object,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
+NtUnmapViewOfSection(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress
);
NTSTATUS
STDCALL
-ZwWaitForSingleObject (
- IN HANDLE Object,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
+ZwUnmapViewOfSection(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress
);
-
NTSTATUS
STDCALL
-NtWaitHighEventPair(
- IN HANDLE EventPairHandle
+NtVdmControl(
+ ULONG ControlCode,
+ PVOID ControlData
);
NTSTATUS
STDCALL
-ZwWaitHighEventPair(
- IN HANDLE EventPairHandle
+NtW32Call(
+ IN ULONG RoutineIndex,
+ IN PVOID Argument,
+ IN ULONG ArgumentLength,
+ OUT PVOID* Result OPTIONAL,
+ OUT PULONG ResultLength OPTIONAL
);
NTSTATUS
STDCALL
-NtWaitLowEventPair(
+NtWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+STDCALL
+ZwWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+STDCALL
+NtWaitForSingleObject(
+ IN HANDLE Object,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+STDCALL
+ZwWaitForSingleObject(
+ IN HANDLE Object,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+STDCALL
+NtWaitHighEventPair(
IN HANDLE EventPairHandle
);
NTSTATUS
STDCALL
-ZwWaitLowEventPair(
+ZwWaitHighEventPair(
IN HANDLE EventPairHandle
);
-NTSTATUS
+NTSTATUS
STDCALL
-NtUnlockFile(
- IN HANDLE FileHandle,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN PLARGE_INTEGER ByteOffset,
- IN PLARGE_INTEGER Lenght,
- OUT PULONG Key OPTIONAL
+NtWaitLowEventPair(
+ IN HANDLE EventPairHandle
);
-NTSTATUS
+
+NTSTATUS
STDCALL
-ZwUnlockFile(
- IN HANDLE FileHandle,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN PLARGE_INTEGER ByteOffset,
- IN PLARGE_INTEGER Lenght,
- OUT PULONG Key OPTIONAL
+ZwWaitLowEventPair(
+ IN HANDLE EventPairHandle
);
-
NTSTATUS
STDCALL
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN PVOID Buffer,
IN ULONG Length,
- IN PLARGE_INTEGER ByteOffset ,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
);
NTSTATUS
-STDCALL
-NtWriteFileGather(
- IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+STDCALL
+NtWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN FILE_SEGMENT_ELEMENT BufferDescription[],
- IN ULONG BufferLength,
- IN PLARGE_INTEGER ByteOffset,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
-);
+);
NTSTATUS
-STDCALL
-ZwWriteFileGather(
- IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+STDCALL
+ZwWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN FILE_SEGMENT_ELEMENT BufferDescription[],
- IN ULONG BufferLength,
- IN PLARGE_INTEGER ByteOffset,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtSuspendThread(
- IN HANDLE ThreadHandle,
- IN PULONG PreviousSuspendCount
-);
-
-NTSTATUS
-STDCALL
-ZwSuspendThread(
- IN HANDLE ThreadHandle,
- IN PULONG PreviousSuspendCount
);
NTSTATUS
STDCALL
-NtSuspendProcess(
- IN HANDLE ProcessHandle
+NtWriteRequestData(
+ HANDLE PortHandle,
+ PLPC_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
);
NTSTATUS
STDCALL
-ZwSuspendProcess(
- IN HANDLE ProcessHandle
+ZwWriteRequestData(
+ HANDLE PortHandle,
+ PLPC_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
);
-NTSTATUS
-STDCALL
-NtTerminateThread(
- IN HANDLE ThreadHandle ,
- IN NTSTATUS ExitStatus
-);
-NTSTATUS
-STDCALL
-ZwTerminateThread(
- IN HANDLE ThreadHandle ,
- IN NTSTATUS ExitStatus
+NTSTATUS
+STDCALL
+NtWriteVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
);
-NTSTATUS
-STDCALL
-NtTestAlert(
- VOID
-);
-NTSTATUS
-STDCALL
-ZwTestAlert(
- VOID
+NTSTATUS
+STDCALL
+ZwWriteVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
);
NTSTATUS
-STDCALL
+STDCALL
NtYieldExecution(
VOID
);
NTSTATUS
-STDCALL
+STDCALL
ZwYieldExecution(
VOID
);
-NTSTATUS
-STDCALL
-NtSetSystemPowerState(
- IN POWER_ACTION SystemAction,
- IN SYSTEM_POWER_STATE MinSystemState,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-NtSystemDebugControl(
- DEBUG_CONTROL_CODE ControlCode,
- PVOID InputBuffer,
- ULONG InputBufferLength,
- PVOID OutputBuffer,
- ULONG OutputBufferLength,
- PULONG ReturnLength
-);
-
-NTSTATUS
-STDCALL
-NtVdmControl(
- ULONG ControlCode,
- PVOID ControlData
-);
-
-NTSTATUS
-STDCALL
-NtW32Call(
- IN ULONG RoutineIndex,
- IN PVOID Argument,
- IN ULONG ArgumentLength,
- OUT PVOID* Result OPTIONAL,
- OUT PULONG ResultLength OPTIONAL
-);
NTSTATUS
STDCALL
VOID
);
-NTSTATUS
-STDCALL
-NtSetLdtEntries(
- ULONG Selector1,
- LDT_ENTRY LdtEntry1,
- ULONG Selector2,
- LDT_ENTRY LdtEntry2
-);
-
NTSTATUS
STDCALL
NtQueryOleDirectoryFile(
VOID
);
-NTSTATUS
-STDCALL
-NtAccessCheck(
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ACCESS_MASK DesiredAcces,
- IN PGENERIC_MAPPING GenericMapping,
- OUT PPRIVILEGE_SET PrivilegeSet,
- OUT PULONG ReturnLength,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-ZwAccessCheck(
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ACCESS_MASK DesiredAcces,
- IN PGENERIC_MAPPING GenericMapping,
- OUT PPRIVILEGE_SET PrivilegeSet,
- OUT PULONG ReturnLength,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-NtAccessCheckAndAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PHANDLE ObjectHandle,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ACCESS_MASK DesiredAccess,
- IN PGENERIC_MAPPING GenericMapping,
- IN BOOLEAN ObjectCreation,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtCancelTimer(
- IN HANDLE TimerHandle,
- OUT PBOOLEAN CurrentState OPTIONAL
-);
-
-
-NTSTATUS
-STDCALL
-NtContinue(
- IN PCONTEXT Context,
- IN BOOLEAN TestAlert
-);
-
-NTSTATUS
-STDCALL
-NtCreatePagingFile(
- IN PUNICODE_STRING FileName,
- IN PLARGE_INTEGER InitialSize,
- IN PLARGE_INTEGER MaxiumSize,
- IN ULONG Reserved
-);
-
-NTSTATUS
-STDCALL
-NtCreateProfile(
- OUT PHANDLE ProfileHandle,
- IN HANDLE ProcessHandle,
- IN PVOID ImageBase,
- IN ULONG ImageSize,
- IN ULONG Granularity,
- OUT PVOID Buffer,
- IN ULONG ProfilingSize,
- IN KPROFILE_SOURCE Source,
- IN KAFFINITY ProcessorMask
-);
-NTSTATUS
-STDCALL
-NtCreateThread(
- OUT PHANDLE ThreadHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN HANDLE ProcessHandle,
- OUT PCLIENT_ID ClientId,
- IN PCONTEXT ThreadContext,
- IN PINITIAL_TEB UserStack,
- IN BOOLEAN CreateSuspended
-);
+static inline struct _PEB * NtCurrentPeb(void)
+{
+ struct _PEB * pPeb;
-NTSTATUS
-STDCALL
-NtDelayExecution(
- IN BOOLEAN Alertable,
- IN LARGE_INTEGER *Interval
-);
+#if defined(__GNUC__)
-NTSTATUS
-STDCALL
-NtExtendSection(
- IN HANDLE SectionHandle,
- IN PLARGE_INTEGER NewMaximumSize
-);
-
-NTSTATUS
-STDCALL
-NtFlushInstructionCache(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN UINT NumberOfBytesToFlush
-);
-
-NTSTATUS
-STDCALL
-NtFlushVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToFlush,
- OUT PULONG NumberOfBytesFlushed OPTIONAL
-);
-
-ULONG
-STDCALL
-NtGetTickCount(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtLoadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-
-NTSTATUS
-STDCALL
-NtLockVirtualMemory(
- HANDLE ProcessHandle,
- PVOID BaseAddress,
- ULONG NumberOfBytesToLock,
- PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-NtOpenObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ULONG DesiredAccess,
- IN ULONG GrantedAccess,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN ObjectCreation,
- IN BOOLEAN AccessGranted,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtProtectVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN ULONG *NumberOfBytesToProtect,
- IN ULONG NewAccessProtection,
- OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryDirectoryObject(
- IN HANDLE DirectoryHandle,
- OUT PVOID Buffer,
- IN ULONG BufferLength,
- IN BOOLEAN ReturnSingleEntry,
- IN BOOLEAN RestartScan,
- IN OUT PULONG Context,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQueryIntervalProfile(
- IN KPROFILE_SOURCE ProfileSource,
- OUT PULONG Interval
-);
-
-NTSTATUS
-STDCALL
-NtQuerySection(
- IN HANDLE SectionHandle,
- IN SECTION_INFORMATION_CLASS SectionInformationClass,
- OUT PVOID SectionInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtQueryVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID Address,
- IN IN CINT VirtualMemoryInformationClass,
- OUT PVOID VirtualMemoryInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtRaiseHardError(
- IN NTSTATUS ErrorStatus,
- IN ULONG NumberOfParameters,
- IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
- IN PVOID *Parameters,
- IN HARDERROR_RESPONSE_OPTION ResponseOption,
- OUT PHARDERROR_RESPONSE Response
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationKey(
- IN HANDLE KeyHandle,
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
- IN PVOID KeyInformation,
- IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- IN PVOID ObjectInformation,
- IN ULONG Length
-);
-
-NTSTATUS
-STDCALL
-NtSetTimer(
- IN HANDLE TimerHandle,
- IN PLARGE_INTEGER DueTime,
- IN PTIMER_APC_ROUTINE TimerApcRoutine,
- IN PVOID TimerContext,
- IN BOOLEAN WakeTimer,
- IN LONG Period OPTIONAL,
- OUT PBOOLEAN PreviousState OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtUnloadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-NtUnlockVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToUnlock,
- OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtWaitForMultipleObjects(
- IN ULONG Count,
- IN HANDLE Object[],
- IN WAIT_TYPE WaitType,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
-);
-
-NTSTATUS
-STDCALL
-ZwContinue(
- IN PCONTEXT Context,
- IN CINT IrqLevel
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySystemTime (
- OUT PLARGE_INTEGER CurrentTime
-);
-
-
-NTSTATUS
-STDCALL
-NtDuplicateObject(
- IN HANDLE SourceProcessHandle,
- IN HANDLE SourceHandle,
- IN HANDLE TargetProcessHandle,
- OUT PHANDLE TargetHandle,
- IN ACCESS_MASK DesiredAccess,
- IN ULONG HandleAttributes,
- IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-ZwDuplicateObject(
- IN HANDLE SourceProcessHandle,
- IN HANDLE SourceHandle,
- IN HANDLE TargetProcessHandle,
- OUT PHANDLE TargetHandle,
- IN ACCESS_MASK DesiredAccess,
- IN ULONG HandleAttributes,
- IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-NtAddAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- IN OUT PRTL_ATOM Atom
-);
-
-NTSTATUS
-STDCALL
-ZwAddAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- IN OUT PRTL_ATOM Atom
-);
-
-NTSTATUS
-STDCALL
-NtAllocateUuids(
- PULARGE_INTEGER Time,
- PULONG Range,
- PULONG Sequence,
- PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwAllocateUuids(
- PULARGE_INTEGER Time,
- PULONG Range,
- PULONG Sequence,
- PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwCreatePagingFile(
- IN PUNICODE_STRING FileName,
- IN PLARGE_INTEGER InitialSize,
- IN PLARGE_INTEGER MaxiumSize,
- IN ULONG Reserved
-);
-
-NTSTATUS
-STDCALL
-ZwCreateThread(
- OUT PHANDLE ThreadHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN HANDLE ProcessHandle,
- OUT PCLIENT_ID ClientId,
- IN PCONTEXT ThreadContext,
- IN PINITIAL_TEB UserStack,
- IN BOOLEAN CreateSuspended
-);
-
-NTSTATUS
-STDCALL
-NtDuplicateToken(
- IN HANDLE ExistingTokenHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN BOOLEAN EffectiveOnly,
- IN TOKEN_TYPE TokenType,
- OUT PHANDLE NewTokenHandle
-);
-
-NTSTATUS
-STDCALL
-NtFindAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- OUT PRTL_ATOM Atom OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwFindAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- OUT PRTL_ATOM Atom OPTIONAL
-);
-
-ULONG
-STDCALL
-ZwGetTickCount(
- VOID
-);
-
-NTSTATUS
-STDCALL
-ZwLoadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-ZwLockVirtualMemory(
- HANDLE ProcessHandle,
- PVOID BaseAddress,
- ULONG NumberOfBytesToLock,
- PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-ZwOpenObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ULONG DesiredAccess,
- IN ULONG GrantedAccess,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN ObjectCreation,
- IN BOOLEAN AccessGranted,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-ZwProtectVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN ULONG *NumberOfBytesToProtect,
- IN ULONG NewAccessProtection,
- OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryInformationAtom(
- IN RTL_ATOM Atom,
- IN ATOM_INFORMATION_CLASS AtomInformationClass,
- OUT PVOID AtomInformation,
- IN ULONG AtomInformationLength,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryInformationAtom(
- IN RTL_ATOM Atom,
- IN ATOM_INFORMATION_CLASS AtomInformationClass,
- OUT PVOID AtomInformation,
- IN ULONG AtomInformationLength,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryDirectoryObject(
- IN HANDLE DirectoryHandle,
- OUT PVOID Buffer,
- IN ULONG BufferLength,
- IN BOOLEAN ReturnSingleEntry,
- IN BOOLEAN RestartScan,
- IN OUT PULONG Context,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryIntervalProfile(
- OUT PULONG Interval,
- OUT KPROFILE_SOURCE ClockSource
-);
-
-NTSTATUS
-STDCALL
-ZwQueryObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- OUT PVOID ObjectInformation,
- IN ULONG Length,
- OUT PULONG ResultLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQuerySecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-
-NTSTATUS
-STDCALL
-ZwQueryVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID Address,
- IN IN CINT VirtualMemoryInformationClass,
- OUT PVOID VirtualMemoryInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwRaiseHardError(
- IN NTSTATUS Status,
- ULONG Unknown2,
- ULONG Unknown3,
- ULONG Unknown4,
- ULONG Unknown5,
- ULONG Unknown6
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationKey(
- IN HANDLE KeyHandle,
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
- IN PVOID KeyInformation,
- IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- IN PVOID ObjectInformation,
- IN ULONG Length
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationProcess(
- IN HANDLE ProcessHandle,
- IN PROCESSINFOCLASS ProcessInformationClass,
- IN PVOID ProcessInformation,
- IN ULONG ProcessInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwUnloadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-ZwUnlockVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToUnlock,
- OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwWaitForMultipleObjects (
- IN ULONG Count,
- IN HANDLE Object[],
- IN WAIT_TYPE WaitType,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
-);
-
-NTSTATUS
-STDCALL
-ZwCreateProfile(
- OUT PHANDLE ProfileHandle,
- IN POBJECT_ATTRIBUTES ObjectAttributes,
- IN ULONG ImageBase,
- IN ULONG ImageSize,
- IN ULONG Granularity,
- OUT PVOID Buffer,
- IN ULONG ProfilingSize,
- IN ULONG ClockSource,
- IN ULONG ProcessorMask
-);
-
-NTSTATUS
-STDCALL
-ZwDelayExecution(
- IN BOOLEAN Alertable,
- IN LARGE_INTEGER *Interval
-);
-
-NTSTATUS
-STDCALL
-ZwExtendSection(
- IN HANDLE SectionHandle,
- IN PLARGE_INTEGER NewMaximumSize
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySection(
- IN HANDLE SectionHandle,
- IN CINT SectionInformationClass,
- OUT PVOID SectionInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtLoadKey2(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-ZwLoadKey2(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-NtQuerySystemTime (
- OUT PLARGE_INTEGER CurrentTime
-);
-
-NTSTATUS
-STDCALL
-NtQueryObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- OUT PVOID ObjectInformation,
- IN ULONG Length,
- OUT PULONG ResultLength OPTIONAL
-);
-
-static inline struct _PEB * NtCurrentPeb(void)
-{
- struct _PEB * pPeb;
-
-#if defined(__GNUC__)
-
- __asm__ __volatile__
- (
- "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
- : "=r" (pPeb) /* can't have two memory operands */
- : /* no inputs */
- );
+ __asm__ __volatile__
+ (
+ "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
+ : "=r" (pPeb) /* can't have two memory operands */
+ : /* no inputs */
+ );
#elif defined(_MSC_VER)
#error Unknown compiler for inline assembler
#endif
- return pPeb;
-}
+ return pPeb;
+}
#endif