#define _ZWFUNCS_H
/* DEPENDENCIES **************************************************************/
-#include "lpctypes.h"
-#include "zwtypes.h"
-#include "kdtypes.h"
+#define _WMIKM_
+#include <evntrace.h>
/* FUNCTION TYPES ************************************************************/
/* PROTOTYPES ****************************************************************/
-/* FIXME: FILE NEEDS CLEANUP */
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtAcceptConnectPort(
PHANDLE PortHandle,
- HANDLE NamedPortHandle,
- PLPC_MESSAGE ServerReply,
- BOOLEAN AcceptIt,
- PLPC_SECTION_WRITE WriteMap,
- PLPC_SECTION_READ ReadMap
+ PVOID PortContext OPTIONAL,
+ PPORT_MESSAGE ConnectionRequest,
+ BOOLEAN AcceptConnection,
+ PPORT_VIEW ServerView OPTIONAL,
+ PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAcceptConnectPort(
+ PHANDLE PortHandle,
+ PVOID PortContext OPTIONAL,
+ PPORT_MESSAGE ConnectionRequest,
+ BOOLEAN AcceptConnection,
+ PPORT_VIEW ServerView OPTIONAL,
+ PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAccessCheckAndAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ IN BOOLEAN ObjectCreation,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+NTAPI
+NtAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
);
NTSTATUS
-STDCALL
+NTAPI
NtAddBootEntry(
IN PUNICODE_STRING EntryName,
IN PUNICODE_STRING EntryValue
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwAddBootEntry(
IN PUNICODE_STRING EntryName,
IN PUNICODE_STRING EntryValue
);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtAdjustGroupsToken(
IN HANDLE TokenHandle,
IN BOOLEAN ResetToDefault,
OUT PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwAdjustGroupsToken(
IN HANDLE TokenHandle,
IN BOOLEAN ResetToDefault,
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtAdjustPrivilegesToken(
IN HANDLE TokenHandle,
IN BOOLEAN DisableAllPrivileges,
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwAdjustPrivilegesToken(
IN HANDLE TokenHandle,
IN BOOLEAN DisableAllPrivileges,
);
NTSTATUS
-STDCALL
+NTAPI
NtAlertResumeThread(
IN HANDLE ThreadHandle,
OUT PULONG SuspendCount
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwAlertResumeThread(
IN HANDLE ThreadHandle,
OUT PULONG SuspendCount
);
NTSTATUS
-STDCALL
+NTAPI
NtAlertThread(
IN HANDLE ThreadHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwAlertThread(
IN HANDLE ThreadHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtAllocateLocallyUniqueId(
OUT LUID *LocallyUniqueId
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwAllocateLocallyUniqueId(
OUT PLUID Luid
);
NTSTATUS
-STDCALL
-NtAllocateVirtualMemory (
+NTAPI
+NtAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAllocateVirtualMemory(
IN HANDLE ProcessHandle,
IN OUT PVOID *BaseAddress,
IN ULONG ZeroBits,
IN ULONG Protect
);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwAllocateVirtualMemory (
+NTAPI
+ZwAllocateVirtualMemory(
IN HANDLE ProcessHandle,
IN OUT PVOID *BaseAddress,
IN ULONG ZeroBits,
IN ULONG Protect
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtAssignProcessToJobObject(
HANDLE JobHandle,
- HANDLE ProcessHandle)
-;
+ HANDLE ProcessHandle
+);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwAssignProcessToJobObject(
HANDLE JobHandle,
HANDLE ProcessHandle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCallbackReturn(
PVOID Result,
ULONG ResultLength,
NTSTATUS Status
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCallbackReturn(
PVOID Result,
ULONG ResultLength,
);
NTSTATUS
-STDCALL
+NTAPI
NtCancelIoFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCancelIoFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock
);
NTSTATUS
-STDCALL
+NTAPI
+NtCancelTimer(
+ IN HANDLE TimerHandle,
+ OUT PBOOLEAN CurrentState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtClearEvent(
- IN HANDLE EventHandle
+ IN HANDLE EventHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwClearEvent(
- IN HANDLE EventHandle
+ IN HANDLE EventHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCreateDebugObject(
+ OUT PHANDLE DebugHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN KillProcessOnExit
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateDebugObject(
+ OUT PHANDLE DebugHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN KillProcessOnExit
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCreateJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCreateJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtClose(
IN HANDLE Handle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwClose(
IN HANDLE Handle
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtCloseObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN PVOID HandleId,
IN BOOLEAN GenerateOnClose
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCloseObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN PVOID HandleId,
IN BOOLEAN GenerateOnClose
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCompleteConnectPort(
HANDLE PortHandle
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCompleteConnectPort(
HANDLE PortHandle
);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtConnectPort(
PHANDLE PortHandle,
PUNICODE_STRING PortName,
PSECURITY_QUALITY_OF_SERVICE SecurityQos,
- PLPC_SECTION_WRITE SectionInfo,
- PLPC_SECTION_READ MapInfo,
- PULONG MaxMessageSize,
- PVOID ConnectInfo,
- PULONG ConnectInfoLength
+ PPORT_VIEW ClientView OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwConnectPort(
PHANDLE PortHandle,
PUNICODE_STRING PortName,
PSECURITY_QUALITY_OF_SERVICE SecurityQos,
- PLPC_SECTION_WRITE SectionInfo,
- PLPC_SECTION_READ MapInfo,
- PULONG MaxMessageSize,
- PVOID ConnectInfo,
- PULONG ConnectInfoLength
+ PPORT_VIEW ClientView OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtContinue(
+ IN PCONTEXT Context,
+ IN BOOLEAN TestAlert
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwContinue(
+ IN PCONTEXT Context,
+ IN BOOLEAN TestAlert
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateDirectoryObject(
OUT PHANDLE DirectoryHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateDirectoryObject(
OUT PHANDLE DirectoryHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateEvent(
OUT PHANDLE EventHandle,
IN ACCESS_MASK DesiredAccess,
IN BOOLEAN InitialState
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateEvent(
OUT PHANDLE EventHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateEventPair(
OUT PHANDLE EventPairHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateEventPair(
OUT PHANDLE EventPairHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtCreateFile(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
IN ULONG EaLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateFile(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateIoCompletion(
OUT PHANDLE IoCompletionHandle,
IN ACCESS_MASK DesiredAccess,
IN ULONG NumberOfConcurrentThreads
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateIoCompletion(
OUT PHANDLE IoCompletionHandle,
IN ACCESS_MASK DesiredAccess,
IN ULONG NumberOfConcurrentThreads
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCreateKey(
OUT PHANDLE KeyHandle,
IN ACCESS_MASK DesiredAccess,
IN PULONG Disposition OPTIONAL
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCreateKey(
OUT PHANDLE KeyHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateMailslotFile(
OUT PHANDLE MailSlotFileHandle,
IN ACCESS_MASK DesiredAccess,
IN PLARGE_INTEGER TimeOut
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateMailslotFile(
OUT PHANDLE MailSlotFileHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateMutant(
OUT PHANDLE MutantHandle,
IN ACCESS_MASK DesiredAccess,
IN BOOLEAN InitialOwner
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateMutant(
OUT PHANDLE MutantHandle,
IN ACCESS_MASK DesiredAccess,
IN BOOLEAN InitialOwner
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCreateNamedPipeFile(
OUT PHANDLE NamedPipeFileHandle,
IN ACCESS_MASK DesiredAccess,
IN PLARGE_INTEGER DefaultTimeOut
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCreateNamedPipeFile(
OUT PHANDLE NamedPipeFileHandle,
IN ACCESS_MASK DesiredAccess,
IN PLARGE_INTEGER DefaultTimeOut
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
+NtCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSTATUS
+NTAPI
NtCreatePort(
PHANDLE PortHandle,
POBJECT_ATTRIBUTES ObjectAttributes,
- ULONG MaxConnectInfoLength,
- ULONG MaxDataLength,
- ULONG NPMessageQueueSize OPTIONAL
+ ULONG MaxConnectionInfoLength,
+ ULONG MaxMessageLength,
+ ULONG MaxPoolUsage
);
-NTSTATUS
-STDCALL
-NtCreatePort(
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePort(
PHANDLE PortHandle,
POBJECT_ATTRIBUTES ObjectAttributes,
- ULONG MaxConnectInfoLength,
- ULONG MaxDataLength,
- ULONG NPMessageQueueSize OPTIONAL
+ ULONG MaxConnectionInfoLength,
+ ULONG MaxMessageLength,
+ ULONG MaxPoolUsage
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
IN HANDLE ExceptionPort OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
+NtCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN HANDLE ProcessHandle,
+ IN PVOID ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN KPROFILE_SOURCE Source,
+ IN KAFFINITY ProcessorMask
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN ULONG ClockSource,
+ IN ULONG ProcessorMask
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtCreateSection(
OUT PHANDLE SectionHandle,
IN ACCESS_MASK DesiredAccess,
IN HANDLE FileHandle OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateSection(
OUT PHANDLE SectionHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateSemaphore(
OUT PHANDLE SemaphoreHandle,
IN ACCESS_MASK DesiredAccess,
IN LONG MaximumCount
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateSemaphore(
OUT PHANDLE SemaphoreHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtCreateSymbolicLinkObject(
OUT PHANDLE SymbolicLinkHandle,
IN ACCESS_MASK DesiredAccess,
IN PUNICODE_STRING Name
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateSymbolicLinkObject(
OUT PHANDLE SymbolicLinkHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
+NtCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
+NTSTATUS
+NTAPI
NtCreateTimer(
OUT PHANDLE TimerHandle,
IN ACCESS_MASK DesiredAccess,
IN TIMER_TYPE TimerType
);
+#ifdef NTOS_MODE_USER
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateTimer(
OUT PHANDLE TimerHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
IN TIMER_TYPE TimerType
);
+#endif
NTSTATUS
-STDCALL
+NTAPI
NtCreateToken(
OUT PHANDLE TokenHandle,
IN ACCESS_MASK DesiredAccess,
IN PTOKEN_SOURCE TokenSource
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwCreateToken(
OUT PHANDLE TokenHandle,
IN ACCESS_MASK DesiredAccess,
IN PTOKEN_SOURCE TokenSource
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtCreateWaitablePort(
PHANDLE PortHandle,
POBJECT_ATTRIBUTES ObjectAttributes,
ULONG NPMessageQueueSize OPTIONAL
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwCreateWaitablePort(
PHANDLE PortHandle,
POBJECT_ATTRIBUTES ObjectAttributes,
ULONG NPMessageQueueSize OPTIONAL
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
+NtQueryDebugFilterState(
+ ULONG ComponentId,
+ ULONG Level
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtDebugContinue(
+ IN HANDLE DebugObject,
+ IN PCLIENT_ID AppClientId,
+ IN NTSTATUS ContinueStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDebugContinue(
+ IN HANDLE DebugObject,
+ IN PCLIENT_ID AppClientId,
+ IN NTSTATUS ContinueStatus
+);
+
+NTSTATUS
+NTAPI
+NtDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
+NTSTATUS
+NTAPI
NtDeleteAtom(
IN RTL_ATOM Atom
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteAtom(
IN RTL_ATOM Atom
);
NTSTATUS
-STDCALL
+NTAPI
NtDeleteBootEntry(
IN PUNICODE_STRING EntryName,
IN PUNICODE_STRING EntryValue
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteBootEntry(
IN PUNICODE_STRING EntryName,
IN PUNICODE_STRING EntryValue
);
NTSTATUS
-STDCALL
+NTAPI
NtDeleteFile(
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteFile(
IN POBJECT_ATTRIBUTES ObjectAttributes
);
NTSTATUS
-STDCALL
+NTAPI
NtDeleteKey(
IN HANDLE KeyHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteKey(
IN HANDLE KeyHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
NtDeleteObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN BOOLEAN GenerateOnClose
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN BOOLEAN GenerateOnClose
-);
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
NTSTATUS
-STDCALL
+NTAPI
NtDeleteValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeleteValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtDeviceIoControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
- IN PVOID UserApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDeviceIoControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
- IN PVOID UserApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
);
NTSTATUS
-STDCALL
+NTAPI
NtDisplayString(
IN PUNICODE_STRING DisplayString
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwDisplayString(
IN PUNICODE_STRING DisplayString
);
NTSTATUS
-STDCALL
-NtEnumerateBootEntries(
- IN ULONG Unknown1,
- IN ULONG Unknown2
+NTAPI
+NtDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwEnumerateBootEntries(
- IN ULONG Unknown1,
- IN ULONG Unknown2
+NTAPI
+ZwDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
-NtEnumerateKey(
- IN HANDLE KeyHandle,
- IN ULONG Index,
- IN KEY_INFORMATION_CLASS KeyInformationClass,
- OUT PVOID KeyInformation,
- IN ULONG Length,
+NTAPI
+NtDuplicateToken(
+ IN HANDLE ExistingTokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN BOOLEAN EffectiveOnly,
+ IN TOKEN_TYPE TokenType,
+ OUT PHANDLE NewTokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDuplicateToken(
+ IN HANDLE ExistingTokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN BOOLEAN EffectiveOnly,
+ IN TOKEN_TYPE TokenType,
+ OUT PHANDLE NewTokenHandle
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwEnumerateKey(
IN HANDLE KeyHandle,
IN ULONG Index,
IN ULONG Length,
OUT PULONG ResultLength
);
+
NTSTATUS
-STDCALL
+NTAPI
NtEnumerateValueKey(
IN HANDLE KeyHandle,
IN ULONG Index,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwEnumerateValueKey(
IN HANDLE KeyHandle,
IN ULONG Index,
);
NTSTATUS
-STDCALL
+NTAPI
+NtExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSTATUS
+NTAPI
+NtFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtFlushBuffersFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock
);
+#ifdef NTOS_MODE_USER
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwFlushBuffersFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock
);
+#endif
+
+NTSTATUS
+NTAPI
+NtFlushInstructionCache(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToFlush
+);
NTSTATUS
-STDCALL
+NTAPI
NtFlushKey(
IN HANDLE KeyHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwFlushKey(
IN HANDLE KeyHandle
);
-
-NTSTATUS
-STDCALL
+
+NTSTATUS
+NTAPI
+NtFlushVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToFlush,
+ OUT PULONG NumberOfBytesFlushed OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtFlushWriteBuffer(VOID);
-NTSTATUS
-STDCALL
-ZwFlushWriteBuffer(VOID);
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFlushWriteBuffer(VOID);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtFreeVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN PULONG RegionSize,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
IN ULONG FreeType
);
-
-NTSTATUS
-STDCALL
+
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwFreeVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN PULONG RegionSize,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
IN ULONG FreeType
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtFsControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwFsControlFile(
IN HANDLE DeviceHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG IoControlCode,
- IN PVOID InputBuffer,
+ IN PVOID InputBuffer,
IN ULONG InputBufferSize,
OUT PVOID OutputBuffer,
IN ULONG OutputBufferSize
);
NTSTATUS
-STDCALL
+NTAPI
NtGetContextThread(
IN HANDLE ThreadHandle,
OUT PCONTEXT Context
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwGetContextThread(
IN HANDLE ThreadHandle,
OUT PCONTEXT Context
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
+NtGetPlugPlayEvent(
+ IN ULONG Reserved1,
+ IN ULONG Reserved2,
+ OUT PPLUGPLAY_EVENT_BLOCK Buffer,
+ IN ULONG BufferSize
+);
+
+ULONG
+NTAPI
+NtGetTickCount(
+ VOID
+);
+
+NTSYSAPI
+ULONG
+NTAPI
+ZwGetTickCount(
+ VOID
+);
+
+NTSTATUS
+NTAPI
NtImpersonateClientOfPort(
HANDLE PortHandle,
- PLPC_MESSAGE ClientMessage
+ PPORT_MESSAGE ClientMessage
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwImpersonateClientOfPort(
HANDLE PortHandle,
- PLPC_MESSAGE ClientMessage
+ PPORT_MESSAGE ClientMessage
);
NTSTATUS
-STDCALL
+NTAPI
NtImpersonateThread(
IN HANDLE ThreadHandle,
IN HANDLE ThreadToImpersonate,
IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwImpersonateThread(
IN HANDLE ThreadHandle,
IN HANDLE ThreadToImpersonate,
IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtInitiatePowerAction(
POWER_ACTION SystemAction,
SYSTEM_POWER_STATE MinSystemState,
BOOLEAN Asynchronous
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwInitiatePowerAction(
POWER_ACTION SystemAction,
SYSTEM_POWER_STATE MinSystemState,
);
NTSTATUS
-STDCALL
+NTAPI
NtInitializeRegistry(
BOOLEAN SetUpBoot
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwInitializeRegistry(
BOOLEAN SetUpBoot
);
NTSTATUS
-STDCALL
+NTAPI
NtIsProcessInJob(
IN HANDLE ProcessHandle,
IN HANDLE JobHandle OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwIsProcessInJob(
IN HANDLE ProcessHandle,
IN HANDLE JobHandle OPTIONAL
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtListenPort(HANDLE PortHandle,
- PLPC_MESSAGE LpcMessage
+ PPORT_MESSAGE ConnectionRequest
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwListenPort(HANDLE PortHandle,
- PLPC_MESSAGE LpcMessage
+ PPORT_MESSAGE ConnectionRequest
);
NTSTATUS
-STDCALL
+NTAPI
NtLoadDriver(
IN PUNICODE_STRING DriverServiceName
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwLoadDriver(
IN PUNICODE_STRING DriverServiceName
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
+NtLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtLockFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN PLARGE_INTEGER ByteOffset,
IN PLARGE_INTEGER Length,
- IN PULONG Key,
+ IN ULONG Key,
IN BOOLEAN FailImmediatedly,
IN BOOLEAN ExclusiveLock
);
-NTSTATUS
-STDCALL
+
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwLockFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN PLARGE_INTEGER ByteOffset,
IN PLARGE_INTEGER Length,
- IN PULONG Key,
+ IN ULONG Key,
IN BOOLEAN FailImmediatedly,
IN BOOLEAN ExclusiveLock
);
NTSTATUS
-STDCALL
+NTAPI
+NtLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
+NTSTATUS
+NTAPI
NtMakePermanentObject(
IN HANDLE Object
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwMakePermanentObject(
IN HANDLE Object
);
NTSTATUS
-STDCALL
+NTAPI
NtMakeTemporaryObject(
- IN HANDLE Handle
+ IN HANDLE Handle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwMakeTemporaryObject(
- IN HANDLE Handle
+ IN HANDLE Handle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtMapViewOfSection(
IN HANDLE SectionHandle,
IN HANDLE ProcessHandle,
IN ULONG AccessProtection
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwMapViewOfSection(
IN HANDLE SectionHandle,
IN HANDLE ProcessHandle,
);
NTSTATUS
-STDCALL
+NTAPI
NtNotifyChangeDirectoryFile(
IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID Buffer,
IN ULONG BufferSize,
IN BOOLEAN WatchTree
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwNotifyChangeDirectoryFile(
IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID Buffer,
IN ULONG BufferSize,
);
NTSTATUS
-STDCALL
+NTAPI
NtNotifyChangeKey(
IN HANDLE KeyHandle,
IN HANDLE Event,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG CompletionFilter,
- IN BOOLEAN Asynchroneous,
+ IN BOOLEAN Asynchroneous,
OUT PVOID ChangeBuffer,
IN ULONG Length,
IN BOOLEAN WatchSubtree
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwNotifyChangeKey(
IN HANDLE KeyHandle,
IN HANDLE Event,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN ULONG CompletionFilter,
- IN BOOLEAN Asynchroneous,
+ IN BOOLEAN Asynchroneous,
OUT PVOID ChangeBuffer,
IN ULONG Length,
IN BOOLEAN WatchSubtree
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenDirectoryObject(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenDirectoryObject(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenEvent(
OUT PHANDLE EventHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenEvent(
OUT PHANDLE EventHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenEventPair(
OUT PHANDLE EventPairHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenEventPair(
OUT PHANDLE EventPairHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtOpenFile(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
IN ULONG OpenOptions
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenFile(
OUT PHANDLE FileHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenIoCompletion(
OUT PHANDLE CompetionPort,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenIoCompletion(
OUT PHANDLE CompetionPort,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtOpenJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwOpenJobObject(
- PHANDLE JobHandle,
+ PHANDLE JobHandle,
ACCESS_MASK DesiredAccess,
POBJECT_ATTRIBUTES ObjectAttributes
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenKey(
OUT PHANDLE KeyHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenKey(
OUT PHANDLE KeyHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenMutant(
OUT PHANDLE MutantHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenMutant(
OUT PHANDLE MutantHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtOpenProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
IN PCLIENT_ID ClientId
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwOpenProcess(
OUT PHANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes,
IN PCLIENT_ID ClientId
-);
+);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtOpenProcessToken(
IN HANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenProcessToken(
IN HANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtOpenProcessTokenEx(
IN HANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenProcessTokenEx(
IN HANDLE ProcessHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenSection(
OUT PHANDLE SectionHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenSection(
OUT PHANDLE SectionHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenSemaphore(
- IN HANDLE SemaphoreHandle,
+ OUT PHANDLE SemaphoreHandle,
IN ACCESS_MASK DesiredAcces,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenSemaphore(
- IN HANDLE SemaphoreHandle,
+ OUT PHANDLE SemaphoreHandle,
IN ACCESS_MASK DesiredAcces,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenSymbolicLinkObject(
OUT PHANDLE SymbolicLinkHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenSymbolicLinkObject(
OUT PHANDLE SymbolicLinkHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenThread(
OUT PHANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
IN PCLIENT_ID ClientId
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenThread(
OUT PHANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
IN PCLIENT_ID ClientId
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtOpenThreadToken(
IN HANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenThreadToken(
IN HANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtOpenThreadTokenEx(
IN HANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
OUT PHANDLE TokenHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenThreadTokenEx(
IN HANDLE ThreadHandle,
IN ACCESS_MASK DesiredAccess,
);
NTSTATUS
-STDCALL
+NTAPI
NtOpenTimer(
OUT PHANDLE TimerHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwOpenTimer(
OUT PHANDLE TimerHandle,
IN ACCESS_MASK DesiredAccess,
IN POBJECT_ATTRIBUTES ObjectAttributes
);
+#endif
+
+NTSTATUS
+NTAPI
+NtPlugPlayControl(
+ IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass,
+ IN OUT PVOID Buffer,
+ IN ULONG BufferSize
+);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtPowerInformation(
POWER_INFORMATION_LEVEL PowerInformationLevel,
- PVOID InputBuffer,
+ PVOID InputBuffer,
ULONG InputBufferLength,
PVOID OutputBuffer,
ULONG OutputBufferLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwPowerInformation(
POWER_INFORMATION_LEVEL PowerInformationLevel,
- PVOID InputBuffer,
+ PVOID InputBuffer,
ULONG InputBufferLength,
PVOID OutputBuffer,
ULONG OutputBufferLength
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtPrivilegeCheck(
IN HANDLE ClientToken,
IN PPRIVILEGE_SET RequiredPrivileges,
IN PBOOLEAN Result
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwPrivilegeCheck(
IN HANDLE ClientToken,
IN PPRIVILEGE_SET RequiredPrivileges,
IN PBOOLEAN Result
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtPrivilegedServiceAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN PUNICODE_STRING ServiceName,
IN BOOLEAN AccessGranted
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwPrivilegedServiceAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PUNICODE_STRING ServiceName,
+ IN PUNICODE_STRING SubsystemName,
+ IN PUNICODE_STRING ServiceName,
IN HANDLE ClientToken,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN AccessGranted
-);
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtPrivilegeObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN PVOID HandleId,
IN BOOLEAN AccessGranted
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwPrivilegeObjectAuditAlarm(
IN PUNICODE_STRING SubsystemName,
IN PVOID HandleId,
);
NTSTATUS
-STDCALL
+NTAPI
+NtProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
+);
+
+NTSTATUS
+NTAPI
NtPulseEvent(
IN HANDLE EventHandle,
IN PLONG PulseCount OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwPulseEvent(
IN HANDLE EventHandle,
IN PLONG PulseCount OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryAttributesFile(
IN POBJECT_ATTRIBUTES ObjectAttributes,
OUT PFILE_BASIC_INFORMATION FileInformation
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryAttributesFile(
IN POBJECT_ATTRIBUTES ObjectAttributes,
OUT PFILE_BASIC_INFORMATION FileInformation
NTSTATUS
-STDCALL
+NTAPI
NtQueryBootEntryOrder(
IN ULONG Unknown1,
IN ULONG Unknown2
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryBootEntryOrder(
IN ULONG Unknown1,
IN ULONG Unknown2
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryBootOptions(
IN ULONG Unknown1,
IN ULONG Unknown2
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryBootOptions(
IN ULONG Unknown1,
IN ULONG Unknown2
);
+
NTSTATUS
-STDCALL
+NTAPI
NtQueryDefaultLocale(
IN BOOLEAN UserProfile,
OUT PLCID DefaultLocaleId
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryDefaultLocale(
IN BOOLEAN UserProfile,
OUT PLCID DefaultLocaleId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtQueryDefaultUILanguage(
PLANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryDefaultUILanguage(
PLANGID LanguageId
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtQueryDirectoryFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
IN BOOLEAN RestartScan
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryDirectoryFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
);
NTSTATUS
-STDCALL
-NtQueryEaFile(
- IN HANDLE FileHandle,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
- OUT PVOID Buffer,
- IN ULONG Length,
- IN BOOLEAN ReturnSingleEntry,
- IN PVOID EaList OPTIONAL,
- IN ULONG EaListLength,
- IN PULONG EaIndex OPTIONAL,
- IN BOOLEAN RestartScan
-);
+NTAPI
+NtQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryEaFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG Length,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PVOID EaList OPTIONAL,
+ IN ULONG EaListLength,
+ IN PULONG EaIndex OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+#ifdef NTOS_MODE_USER
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryEaFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN PULONG EaIndex OPTIONAL,
IN BOOLEAN RestartScan
);
+#endif
NTSTATUS
-STDCALL
+NTAPI
NtQueryEvent(
IN HANDLE EventHandle,
IN EVENT_INFORMATION_CLASS EventInformationClass,
IN ULONG EventInformationLength,
OUT PULONG ReturnLength
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryEvent(
IN HANDLE EventHandle,
IN EVENT_INFORMATION_CLASS EventInformationClass,
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryFullAttributesFile(
IN POBJECT_ATTRIBUTES ObjectAttributes,
OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryFullAttributesFile(
IN POBJECT_ATTRIBUTES ObjectAttributes,
OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
);
NTSTATUS
-STDCALL
+NTAPI
+NtQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtQueryInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN FILE_INFORMATION_CLASS FileInformationClass
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryInformationFile(
HANDLE FileHandle,
PIO_STATUS_BLOCK IoStatusBlock,
FILE_INFORMATION_CLASS FileInformationClass
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtQueryInformationJobObject(
HANDLE JobHandle,
- JOBOBJECTINFOCLASS JobInformationClass,
+ JOBOBJECTINFOCLASS JobInformationClass,
PVOID JobInformation,
- ULONG JobInformationLength,
+ ULONG JobInformationLength,
PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryInformationJobObject(
HANDLE JobHandle,
- JOBOBJECTINFOCLASS JobInformationClass,
+ JOBOBJECTINFOCLASS JobInformationClass,
PVOID JobInformation,
- ULONG JobInformationLength,
+ ULONG JobInformationLength,
PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtQueryInformationPort(
HANDLE PortHandle,
- CINT PortInformationClass,
+ PORT_INFORMATION_CLASS PortInformationClass,
PVOID PortInformation,
ULONG PortInformationLength,
PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryInformationPort(
HANDLE PortHandle,
- CINT PortInformationClass,
+ PORT_INFORMATION_CLASS PortInformationClass,
PVOID PortInformation,
ULONG PortInformationLength,
PULONG ReturnLength
#ifndef _NTDDK_
NTSTATUS
-STDCALL
+NTAPI
NtQueryInformationProcess(
IN HANDLE ProcessHandle,
IN PROCESSINFOCLASS ProcessInformationClass,
IN ULONG ProcessInformationLength,
OUT PULONG ReturnLength OPTIONAL
);
-
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryInformationProcess(
IN HANDLE ProcessHandle,
IN PROCESSINFOCLASS ProcessInformationClass,
#endif
NTSTATUS
-STDCALL
+NTAPI
NtQueryInformationThread(
IN HANDLE ThreadHandle,
IN THREADINFOCLASS ThreadInformationClass,
OUT PVOID ThreadInformation,
IN ULONG ThreadInformationLength,
- OUT PULONG ReturnLength
+ OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryInformationThread(
IN HANDLE ThreadHandle,
IN THREADINFOCLASS ThreadInformationClass,
OUT PVOID ThreadInformation,
- IN ULONG ThreadInformationLength,
+ IN ULONG ThreadInformationLength,
OUT PULONG ReturnLength
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtQueryInformationToken(
IN HANDLE TokenHandle,
IN TOKEN_INFORMATION_CLASS TokenInformationClass,
OUT PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryInformationToken(
IN HANDLE TokenHandle,
IN TOKEN_INFORMATION_CLASS TokenInformationClass,
OUT PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtQueryInstallUILanguage(
PLANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwQueryInstallUILanguage(
PLANGID LanguageId
);
NTSTATUS
-STDCALL
+NTAPI
+NtQueryIntervalProfile(
+ IN KPROFILE_SOURCE ProfileSource,
+ OUT PULONG Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryIntervalProfile(
+ OUT PULONG Interval,
+ OUT KPROFILE_SOURCE ClockSource
+);
+
+NTSTATUS
+NTAPI
NtQueryIoCompletion(
IN HANDLE IoCompletionHandle,
IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
OUT PULONG ResultLength OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryIoCompletion(
IN HANDLE IoCompletionHandle,
IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryKey(
IN HANDLE KeyHandle,
IN KEY_INFORMATION_CLASS KeyInformationClass,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryKey(
IN HANDLE KeyHandle,
IN KEY_INFORMATION_CLASS KeyInformationClass,
OUT PULONG ResultLength
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtQueryQuotaInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN BOOLEAN RestartScan
);
-
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryQuotaInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryMultipleValueKey(
IN HANDLE KeyHandle,
IN OUT PKEY_VALUE_ENTRY ValueList,
OUT PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryMultipleValueKey(
IN HANDLE KeyHandle,
IN OUT PKEY_VALUE_ENTRY ValueList,
);
NTSTATUS
-STDCALL
+NTAPI
NtQueryMutant(
IN HANDLE MutantHandle,
IN MUTANT_INFORMATION_CLASS MutantInformationClass,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryMutant(
IN HANDLE MutantHandle,
IN MUTANT_INFORMATION_CLASS MutantInformationClass,
);
NTSTATUS
-STDCALL
+NTAPI
+NtQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtQueryPerformanceCounter(
IN PLARGE_INTEGER Counter,
IN PLARGE_INTEGER Frequency
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryPerformanceCounter(
IN PLARGE_INTEGER Counter,
IN PLARGE_INTEGER Frequency
);
NTSTATUS
-STDCALL
+NTAPI
+NtQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
NtQuerySemaphore(
IN HANDLE SemaphoreHandle,
IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
OUT PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQuerySemaphore(
IN HANDLE SemaphoreHandle,
IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
);
NTSTATUS
-STDCALL
+NTAPI
NtQuerySymbolicLinkObject(
IN HANDLE SymLinkObjHandle,
OUT PUNICODE_STRING LinkTarget,
OUT PULONG DataWritten OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQuerySymbolicLinkObject(
IN HANDLE SymLinkObjHandle,
OUT PUNICODE_STRING LinkName,
OUT PULONG DataWritten OPTIONAL
-);
+);
NTSTATUS
-STDCALL
+NTAPI
NtQuerySystemEnvironmentValue(
IN PUNICODE_STRING Name,
- OUT PVOID Value,
+ OUT PWSTR Value,
ULONG Length,
PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQuerySystemEnvironmentValue(
IN PUNICODE_STRING Name,
OUT PVOID Value,
);
NTSTATUS
-STDCALL
+NTAPI
NtQuerySystemInformation(
IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
OUT PVOID SystemInformation,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQuerySystemInformation(
IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
OUT PVOID SystemInformation,
);
NTSTATUS
-STDCALL
-NtQuerySystemTime (
+NTAPI
+NtQuerySystemTime(
+ OUT PLARGE_INTEGER CurrentTime
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySystemTime(
OUT PLARGE_INTEGER CurrentTime
);
-
+
NTSTATUS
-STDCALL
+NTAPI
NtQueryTimer(
IN HANDLE TimerHandle,
IN TIMER_INFORMATION_CLASS TimerInformationClass,
IN ULONG Length,
OUT PULONG ResultLength
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryTimer(
IN HANDLE TimerHandle,
IN TIMER_INFORMATION_CLASS TimerInformationClass,
);
NTSTATUS
-STDCALL
-NtQueryTimerResolution (
+NTAPI
+NtQueryTimerResolution(
OUT PULONG MinimumResolution,
- OUT PULONG MaximumResolution,
- OUT PULONG ActualResolution
-);
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwQueryTimerResolution (
+NTAPI
+ZwQueryTimerResolution(
OUT PULONG MinimumResolution,
- OUT PULONG MaximumResolution,
- OUT PULONG ActualResolution
-);
-
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
+
NTSTATUS
-STDCALL
+NTAPI
NtQueryValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName,
OUT PULONG ResultLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName,
);
NTSTATUS
-STDCALL
+NTAPI
+NtQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtQueryVolumeInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
OUT PVOID FsInformation,
IN ULONG Length,
- IN FS_INFORMATION_CLASS FsInformationClass
+ IN FS_INFORMATION_CLASS FsInformationClass
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueryVolumeInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
);
NTSTATUS
-STDCALL
+NTAPI
NtQueueApcThread(
HANDLE ThreadHandle,
PKNORMAL_ROUTINE ApcRoutine,
PVOID SystemArgument2
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwQueueApcThread(
HANDLE ThreadHandle,
PKNORMAL_ROUTINE ApcRoutine,
);
NTSTATUS
-STDCALL
+NTAPI
NtRaiseException(
IN PEXCEPTION_RECORD ExceptionRecord,
IN PCONTEXT Context,
IN BOOLEAN SearchFrames
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwRaiseException(
IN PEXCEPTION_RECORD ExceptionRecord,
IN PCONTEXT Context,
);
NTSTATUS
-STDCALL
+NTAPI
+NtRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN ULONG UnicodeStringParameterMask,
+ IN PULONG_PTR Parameters,
+ IN ULONG ValidResponseOptions,
+ OUT PULONG Response
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
+ IN PVOID *Parameters,
+ IN HARDERROR_RESPONSE_OPTION ResponseOption,
+ OUT PHARDERROR_RESPONSE Response
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtReadFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
OUT PVOID Buffer,
IN ULONG BufferLength,
IN PLARGE_INTEGER ByteOffset OPTIONAL,
- IN PULONG Key OPTIONAL
+ IN PULONG Key OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwReadFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
OUT PVOID Buffer,
IN ULONG BufferLength,
IN PLARGE_INTEGER ByteOffset OPTIONAL,
- IN PULONG Key OPTIONAL
+ IN PULONG Key OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
NtReadFileScatter(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
IN PULONG Key OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwReadFileScatter(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
IN PULONG Key OPTIONAL
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtReadRequestData(
HANDLE PortHandle,
- PLPC_MESSAGE Message,
+ PPORT_MESSAGE Message,
ULONG Index,
PVOID Buffer,
ULONG BufferLength,
PULONG ReturnLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwReadRequestData(
HANDLE PortHandle,
- PLPC_MESSAGE Message,
+ PPORT_MESSAGE Message,
ULONG Index,
PVOID Buffer,
ULONG BufferLength,
);
NTSTATUS
-STDCALL
-NtReadVirtualMemory(
+NTAPI
+NtReadVirtualMemory(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
OUT PVOID Buffer,
IN ULONG NumberOfBytesToRead,
OUT PULONG NumberOfBytesRead
-);
+);
+
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwReadVirtualMemory(
+NTAPI
+ZwReadVirtualMemory(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress,
OUT PVOID Buffer,
IN ULONG NumberOfBytesToRead,
OUT PULONG NumberOfBytesRead
-);
+);
NTSTATUS
-STDCALL
+NTAPI
NtRegisterThreadTerminatePort(
HANDLE TerminationPort
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwRegisterThreadTerminatePort(
HANDLE TerminationPort
);
NTSTATUS
-STDCALL
+NTAPI
NtReleaseMutant(
IN HANDLE MutantHandle,
IN PLONG ReleaseCount OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwReleaseMutant(
IN HANDLE MutantHandle,
IN PLONG ReleaseCount OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
NtReleaseSemaphore(
IN HANDLE SemaphoreHandle,
IN LONG ReleaseCount,
OUT PLONG PreviousCount
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwReleaseSemaphore(
IN HANDLE SemaphoreHandle,
IN LONG ReleaseCount,
);
NTSTATUS
-STDCALL
+NTAPI
NtRemoveIoCompletion(
IN HANDLE IoCompletionHandle,
OUT PVOID *CompletionKey,
IN PLARGE_INTEGER Timeout OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwRemoveIoCompletion(
IN HANDLE IoCompletionHandle,
OUT PVOID *CompletionKey,
);
NTSTATUS
-STDCALL
+NTAPI
NtReplaceKey(
IN POBJECT_ATTRIBUTES ObjectAttributes,
IN HANDLE Key,
IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwReplaceKey(
IN POBJECT_ATTRIBUTES ObjectAttributes,
IN HANDLE Key,
IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcReply
+ PPORT_MESSAGE LpcReply
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcReply
+ PPORT_MESSAGE LpcReply
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtReplyWaitReceivePort(
HANDLE PortHandle,
- PULONG PortId,
- PLPC_MESSAGE MessageReply,
- PLPC_MESSAGE MessageRequest
+ PVOID *PortContext OPTIONAL,
+ PPORT_MESSAGE ReplyMessage OPTIONAL,
+ PPORT_MESSAGE ReceiveMessage
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwReplyWaitReceivePort(
HANDLE PortHandle,
- PULONG PortId,
- PLPC_MESSAGE MessageReply,
- PLPC_MESSAGE MessageRequest
+ PVOID *PortContext OPTIONAL,
+ PPORT_MESSAGE ReplyMessage,
+ PPORT_MESSAGE ReceiveMessage
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtReplyWaitReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE ReplyMessage
+ PPORT_MESSAGE ReplyMessage
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwReplyWaitReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE ReplyMessage
+ PPORT_MESSAGE ReplyMessage
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtRequestPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcMessage);
+ PPORT_MESSAGE LpcMessage);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwRequestPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcMessage
+ PPORT_MESSAGE LpcMessage
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtRequestWaitReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcReply,
- PLPC_MESSAGE LpcRequest
+ PPORT_MESSAGE LpcReply,
+ PPORT_MESSAGE LpcRequest
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwRequestWaitReplyPort(
HANDLE PortHandle,
- PLPC_MESSAGE LpcReply,
- PLPC_MESSAGE LpcRequest
+ PPORT_MESSAGE LpcReply,
+ PPORT_MESSAGE LpcRequest
);
NTSTATUS
-STDCALL
+NTAPI
NtResetEvent(
HANDLE EventHandle,
PLONG NumberOfWaitingThreads OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwResetEvent(
HANDLE EventHandle,
PLONG NumberOfWaitingThreads OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
NtRestoreKey(
HANDLE KeyHandle,
HANDLE FileHandle,
ULONG RestoreFlags
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwRestoreKey(
HANDLE KeyHandle,
HANDLE FileHandle,
);
NTSTATUS
-STDCALL
+NTAPI
NtResumeThread(
IN HANDLE ThreadHandle,
OUT PULONG SuspendCount
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwResumeThread(
IN HANDLE ThreadHandle,
OUT PULONG SuspendCount
);
NTSTATUS
-STDCALL
+NTAPI
NtResumeProcess(
IN HANDLE ProcessHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwResumeProcess(
IN HANDLE ProcessHandle
);
-
+
NTSTATUS
-STDCALL
+NTAPI
NtSaveKey(
IN HANDLE KeyHandle,
IN HANDLE FileHandle
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSaveKey(
IN HANDLE KeyHandle,
IN HANDLE FileHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtSaveKeyEx(
IN HANDLE KeyHandle,
IN HANDLE FileHandle,
IN ULONG Flags
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSaveKeyEx(
IN HANDLE KeyHandle,
IN HANDLE FileHandle,
IN ULONG Flags
);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSecureConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PSID Sid OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
+ZwSecureConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PSID Sid OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtSetBootEntryOrder(
IN ULONG Unknown1,
IN ULONG Unknown2
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetBootEntryOrder(
IN ULONG Unknown1,
IN ULONG Unknown2
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtSetBootOptions(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwSetBootOptions(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2
);
NTSTATUS
-STDCALL
+NTAPI
NtSetContextThread(
IN HANDLE ThreadHandle,
IN PCONTEXT Context
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetContextThread(
IN HANDLE ThreadHandle,
IN PCONTEXT Context
);
+NTSYSAPI
+NTSTATUS
+NTAPI
+NtSetDebugFilterState(
+ ULONG ComponentId,
+ ULONG Level,
+ BOOLEAN State
+);
+
NTSTATUS
-STDCALL
+NTAPI
NtSetDefaultLocale(
IN BOOLEAN UserProfile,
IN LCID DefaultLocaleId
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetDefaultLocale(
IN BOOLEAN UserProfile,
IN LCID DefaultLocaleId
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtSetDefaultUILanguage(
LANGID LanguageId
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwSetDefaultUILanguage(
LANGID LanguageId
);
+
NTSTATUS
-STDCALL
+NTAPI
NtSetDefaultHardErrorPort(
IN HANDLE PortHandle
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetDefaultHardErrorPort(
IN HANDLE PortHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtSetEaFile(
IN HANDLE FileHandle,
IN PIO_STATUS_BLOCK IoStatusBlock,
ULONG EaBufferSize
);
+#ifdef NTOS_MODE_USER
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetEaFile(
IN HANDLE FileHandle,
IN PIO_STATUS_BLOCK IoStatusBlock,
PVOID EaBuffer,
ULONG EaBufferSize
);
+#endif
NTSTATUS
-STDCALL
+NTAPI
NtSetEvent(
IN HANDLE EventHandle,
OUT PLONG PreviousState OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetEvent(
IN HANDLE EventHandle,
OUT PLONG PreviousState OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
NtSetHighEventPair(
IN HANDLE EventPairHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetHighEventPair(
IN HANDLE EventPairHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtSetHighWaitLowEventPair(
IN HANDLE EventPairHandle
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetHighWaitLowEventPair(
IN HANDLE EventPairHandle
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtSetInformationFile(
IN HANDLE FileHandle,
IN PIO_STATUS_BLOCK IoStatusBlock,
IN FILE_INFORMATION_CLASS FileInformationClass
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetInformationFile(
IN HANDLE FileHandle,
IN PIO_STATUS_BLOCK IoStatusBlock,
IN FILE_INFORMATION_CLASS FileInformationClass
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtSetInformationJobObject(
HANDLE JobHandle,
JOBOBJECTINFOCLASS JobInformationClass,
- PVOID JobInformation,
+ PVOID JobInformation,
ULONG JobInformationLength
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwSetInformationJobObject(
HANDLE JobHandle,
JOBOBJECTINFOCLASS JobInformationClass,
- PVOID JobInformation,
+ PVOID JobInformation,
ULONG JobInformationLength
);
NTSTATUS
-STDCALL
-NtSetInformationThread(
- IN HANDLE ThreadHandle,
- IN THREADINFOCLASS ThreadInformationClass,
- IN PVOID ThreadInformation,
- IN ULONG ThreadInformationLength
-);
-NTSTATUS
-STDCALL
-ZwSetInformationThread(
- IN HANDLE ThreadHandle,
- IN THREADINFOCLASS ThreadInformationClass,
- IN PVOID ThreadInformation,
- IN ULONG ThreadInformationLength
+NTAPI
+NtSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
-NtSetInformationToken(
- IN HANDLE TokenHandle,
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,
- OUT PVOID TokenInformation,
- IN ULONG TokenInformationLength
+NTAPI
+ZwSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
);
NTSTATUS
-STDCALL
-ZwSetInformationToken(
- IN HANDLE TokenHandle,
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,
- OUT PVOID TokenInformation,
- IN ULONG TokenInformationLength
+NTAPI
+NtSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationProcess(
+ IN HANDLE ProcessHandle,
+ IN PROCESSINFOCLASS ProcessInformationClass,
+ IN PVOID ProcessInformation,
+ IN ULONG ProcessInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ IN PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ IN PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
);
NTSTATUS
-STDCALL
+NTAPI
NtSetIoCompletion(
IN HANDLE IoCompletionPortHandle,
IN PVOID CompletionKey,
IN ULONG CompletionInformation
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetIoCompletion(
IN HANDLE IoCompletionPortHandle,
IN PVOID CompletionKey,
IN ULONG CompletionInformation
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtSetIntervalProfile(
ULONG Interval,
KPROFILE_SOURCE ClockSource
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwSetIntervalProfile(
ULONG Interval,
KPROFILE_SOURCE ClockSource
);
NTSTATUS
-STDCALL
+NTAPI
+NtSetLdtEntries(
+ ULONG Selector1,
+ LDT_ENTRY LdtEntry1,
+ ULONG Selector2,
+ LDT_ENTRY LdtEntry2
+);
+
+NTSTATUS
+NTAPI
NtSetLowEventPair(
HANDLE EventPair
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetLowEventPair(
HANDLE EventPair
);
NTSTATUS
-STDCALL
+NTAPI
NtSetLowWaitHighEventPair(
HANDLE EventPair
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetLowWaitHighEventPair(
HANDLE EventPair
);
-NTSTATUS
-STDCALL
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
NtSetQuotaInformationFile(
HANDLE FileHandle,
- PIO_STATUS_BLOCK IoStatusBlock,
- PFILE_QUOTA_INFORMATION Buffer,
+ PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID Buffer,
ULONG BufferLength
-);
+);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwSetQuotaInformationFile(
HANDLE FileHandle,
- PIO_STATUS_BLOCK IoStatusBlock,
- PFILE_QUOTA_INFORMATION Buffer,
+ PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID Buffer,
ULONG BufferLength
-);
+);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtSetSecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor
-);
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetSecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor
-);
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
NTSTATUS
-STDCALL
+NTAPI
NtSetSystemEnvironmentValue(
IN PUNICODE_STRING VariableName,
IN PUNICODE_STRING Value
);
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetSystemEnvironmentValue(
IN PUNICODE_STRING VariableName,
IN PUNICODE_STRING Value
);
NTSTATUS
-STDCALL
+NTAPI
NtSetSystemInformation(
IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
IN PVOID SystemInformation,
IN ULONG SystemInformationLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetSystemInformation(
IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
IN PVOID SystemInformation,
IN ULONG SystemInformationLength
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
+NtSetSystemPowerState(
+ IN POWER_ACTION SystemAction,
+ IN SYSTEM_POWER_STATE MinSystemState,
+ IN ULONG Flags
+);
+
+NTSTATUS
+NTAPI
NtSetSystemTime(
IN PLARGE_INTEGER SystemTime,
IN PLARGE_INTEGER NewSystemTime OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetSystemTime(
IN PLARGE_INTEGER SystemTime,
IN PLARGE_INTEGER NewSystemTime OPTIONAL
);
NTSTATUS
-STDCALL
+NTAPI
+NtSetTimer(
+ IN HANDLE TimerHandle,
+ IN PLARGE_INTEGER DueTime,
+ IN PTIMER_APC_ROUTINE TimerApcRoutine,
+ IN PVOID TimerContext,
+ IN BOOLEAN WakeTimer,
+ IN LONG Period OPTIONAL,
+ OUT PBOOLEAN PreviousState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtSetTimerResolution(
IN ULONG RequestedResolution,
IN BOOLEAN SetOrUnset,
OUT PULONG ActualResolution
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetTimerResolution(
IN ULONG RequestedResolution,
IN BOOLEAN SetOrUnset,
);
NTSTATUS
-STDCALL
+NTAPI
NtSetUuidSeed(
IN PUCHAR UuidSeed
);
-
+
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetUuidSeed(
IN PUCHAR UuidSeed
);
NTSTATUS
-STDCALL
+NTAPI
NtSetValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName,
IN ULONG DataSize
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetValueKey(
IN HANDLE KeyHandle,
IN PUNICODE_STRING ValueName,
IN ULONG DataSize
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtSetVolumeInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN FS_INFORMATION_CLASS FsInformationClass
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSetVolumeInformationFile(
IN HANDLE FileHandle,
OUT PIO_STATUS_BLOCK IoStatusBlock,
);
NTSTATUS
-STDCALL
+NTAPI
NtShutdownSystem(
- IN ULONG Action
+ IN SHUTDOWN_ACTION Action
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwShutdownSystem(
- IN ULONG Action
+ IN SHUTDOWN_ACTION Action
);
NTSTATUS
-STDCALL
+NTAPI
NtSignalAndWaitForSingleObject(
IN HANDLE SignalObject,
IN HANDLE WaitObject,
IN PLARGE_INTEGER Time
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwSignalAndWaitForSingleObject(
IN HANDLE SignalObject,
IN HANDLE WaitObject,
);
NTSTATUS
-STDCALL
+NTAPI
NtStartProfile(
HANDLE ProfileHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwStartProfile(
HANDLE ProfileHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtStopProfile(
HANDLE ProfileHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwStopProfile(
HANDLE ProfileHandle
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
+NtSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+NTAPI
+NtSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSTATUS
+NTAPI
+NtSystemDebugControl(
+ DEBUG_CONTROL_CODE ControlCode,
+ PVOID InputBuffer,
+ ULONG InputBufferLength,
+ PVOID OutputBuffer,
+ ULONG OutputBufferLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
NtTerminateProcess(
IN HANDLE ProcessHandle,
IN NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwTerminateProcess(
IN HANDLE ProcessHandle,
IN NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
+NtTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSTATUS
+NTAPI
NtTerminateJobObject(
- HANDLE JobHandle,
+ HANDLE JobHandle,
NTSTATUS ExitStatus
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwTerminateJobObject(
- HANDLE JobHandle,
+ HANDLE JobHandle,
NTSTATUS ExitStatus
);
NTSTATUS
-STDCALL
+NTAPI
+NtTestAlert(
+ VOID
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTestAlert(
+ VOID
+);
+
+NTSTATUS
+NTAPI
NtTraceEvent(
IN ULONG TraceHandle,
IN ULONG Flags,
IN struct _EVENT_TRACE_HEADER* TraceHeader
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwTraceEvent(
IN ULONG TraceHandle,
IN ULONG Flags,
IN struct _EVENT_TRACE_HEADER* TraceHeader
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtTranslateFilePath(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2,
ULONG Unknown3
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwTranslateFilePath(
- ULONG Unknown1,
+ ULONG Unknown1,
ULONG Unknown2,
ULONG Unknown3
);
-NTSTATUS
-STDCALL
+NTSTATUS
+NTAPI
NtUnloadDriver(
IN PUNICODE_STRING DriverServiceName
);
-NTSTATUS
-STDCALL
+NTSYSAPI
+NTSTATUS
+NTAPI
ZwUnloadDriver(
IN PUNICODE_STRING DriverServiceName
);
NTSTATUS
-STDCALL
+NTAPI
+NtUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT ULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT ULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtUnlockVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSTATUS
+NTAPI
NtUnmapViewOfSection(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwUnmapViewOfSection(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress
);
-NTSTATUS
-STDCALL
-NtWriteRequestData(
- HANDLE PortHandle,
- PLPC_MESSAGE Message,
- ULONG Index,
- PVOID Buffer,
- ULONG BufferLength,
- PULONG ReturnLength
+NTSTATUS
+NTAPI
+NtVdmControl(
+ ULONG ControlCode,
+ PVOID ControlData
);
-NTSTATUS
-STDCALL
-ZwWriteRequestData(
- HANDLE PortHandle,
- PLPC_MESSAGE Message,
- ULONG Index,
- PVOID Buffer,
- ULONG BufferLength,
- PULONG ReturnLength
+NTSTATUS
+NTAPI
+NtW32Call(
+ IN ULONG RoutineIndex,
+ IN PVOID Argument,
+ IN ULONG ArgumentLength,
+ OUT PVOID* Result OPTIONAL,
+ OUT PULONG ResultLength OPTIONAL
);
+NTSYSCALLAPI
NTSTATUS
-STDCALL
-NtWriteVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN PVOID Buffer,
- IN ULONG NumberOfBytesToWrite,
- OUT PULONG NumberOfBytesWritten
+NTAPI
+NtWaitForDebugEvent(
+ IN HANDLE DebugObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Timeout OPTIONAL,
+ OUT PDBGUI_WAIT_STATE_CHANGE StateChange
);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwWriteVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN PVOID Buffer,
- IN ULONG NumberOfBytesToWrite,
- OUT PULONG NumberOfBytesWritten
+NTAPI
+ZwWaitForDebugEvent(
+ IN HANDLE DebugObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Timeout OPTIONAL,
+ OUT PDBGUI_WAIT_STATE_CHANGE StateChange
+);
+
+NTSTATUS
+NTAPI
+NtWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
);
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
NTSTATUS
-STDCALL
-NtWaitForSingleObject (
+NTAPI
+NtWaitForSingleObject(
IN HANDLE Object,
IN BOOLEAN Alertable,
IN PLARGE_INTEGER Time
);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwWaitForSingleObject (
+NTAPI
+ZwWaitForSingleObject(
IN HANDLE Object,
IN BOOLEAN Alertable,
IN PLARGE_INTEGER Time
);
-
NTSTATUS
-STDCALL
+NTAPI
NtWaitHighEventPair(
IN HANDLE EventPairHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwWaitHighEventPair(
IN HANDLE EventPairHandle
);
NTSTATUS
-STDCALL
+NTAPI
NtWaitLowEventPair(
IN HANDLE EventPairHandle
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwWaitLowEventPair(
IN HANDLE EventPairHandle
);
-NTSTATUS
-STDCALL
-NtUnlockFile(
- IN HANDLE FileHandle,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN PLARGE_INTEGER ByteOffset,
- IN PLARGE_INTEGER Lenght,
- OUT PULONG Key OPTIONAL
-);
-NTSTATUS
-STDCALL
-ZwUnlockFile(
- IN HANDLE FileHandle,
- OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN PLARGE_INTEGER ByteOffset,
- IN PLARGE_INTEGER Lenght,
- OUT PULONG Key OPTIONAL
-);
-
-
+NTSYSCALLAPI
NTSTATUS
-STDCALL
+NTAPI
NtWriteFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
IN PULONG Key OPTIONAL
);
+NTSYSAPI
NTSTATUS
-STDCALL
+NTAPI
ZwWriteFile(
IN HANDLE FileHandle,
IN HANDLE Event OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
IN PVOID Buffer,
IN ULONG Length,
- IN PLARGE_INTEGER ByteOffset ,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
);
NTSTATUS
-STDCALL
-NtWriteFileGather(
- IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+NTAPI
+NtWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN FILE_SEGMENT_ELEMENT BufferDescription[],
- IN ULONG BufferLength,
- IN PLARGE_INTEGER ByteOffset,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
-);
+);
+NTSYSAPI
NTSTATUS
-STDCALL
-ZwWriteFileGather(
- IN HANDLE FileHandle,
- IN HANDLE Event OPTIONAL,
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
- IN PVOID ApcContext OPTIONAL,
+NTAPI
+ZwWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
OUT PIO_STATUS_BLOCK IoStatusBlock,
- IN FILE_SEGMENT_ELEMENT BufferDescription[],
- IN ULONG BufferLength,
- IN PLARGE_INTEGER ByteOffset,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
IN PULONG Key OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtSuspendThread(
- IN HANDLE ThreadHandle,
- IN PULONG PreviousSuspendCount
-);
-
-NTSTATUS
-STDCALL
-ZwSuspendThread(
- IN HANDLE ThreadHandle,
- IN PULONG PreviousSuspendCount
-);
-
-NTSTATUS
-STDCALL
-NtSuspendProcess(
- IN HANDLE ProcessHandle
-);
-
-NTSTATUS
-STDCALL
-ZwSuspendProcess(
- IN HANDLE ProcessHandle
-);
-
-NTSTATUS
-STDCALL
-NtTerminateThread(
- IN HANDLE ThreadHandle ,
- IN NTSTATUS ExitStatus
-);
-NTSTATUS
-STDCALL
-ZwTerminateThread(
- IN HANDLE ThreadHandle ,
- IN NTSTATUS ExitStatus
-);
-
-NTSTATUS
-STDCALL
-NtTestAlert(
- VOID
-);
-NTSTATUS
-STDCALL
-ZwTestAlert(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtYieldExecution(
- VOID
-);
-
-NTSTATUS
-STDCALL
-ZwYieldExecution(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtPlugPlayControl(
- DWORD Unknown1,
- DWORD Unknown2,
- DWORD Unknown3
);
NTSTATUS
-STDCALL
-NtGetPlugPlayEvent(
- ULONG Reserved1,
- ULONG Reserved2,
+NTAPI
+NtWriteRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
PVOID Buffer,
- ULONG BufferLength
-);
-
-NTSTATUS
-STDCALL
-NtSetSystemPowerState(
- IN POWER_ACTION SystemAction,
- IN SYSTEM_POWER_STATE MinSystemState,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-NtSystemDebugControl(
- DEBUG_CONTROL_CODE ControlCode,
- PVOID InputBuffer,
- ULONG InputBufferLength,
- PVOID OutputBuffer,
- ULONG OutputBufferLength,
+ ULONG BufferLength,
PULONG ReturnLength
);
+NTSYSAPI
NTSTATUS
-STDCALL
-NtVdmControl(
- ULONG ControlCode,
- PVOID ControlData
-);
-
-NTSTATUS
-STDCALL
-NtW32Call(
- IN ULONG RoutineIndex,
- IN PVOID Argument,
- IN ULONG ArgumentLength,
- OUT PVOID* Result OPTIONAL,
- OUT PULONG ResultLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtCreateChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtListenChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtOpenChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtReplyWaitSendChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtSendWaitReplyChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtSetContextChannel(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtSetLdtEntries(
- ULONG Selector1,
- LDT_ENTRY LdtEntry1,
- ULONG Selector2,
- LDT_ENTRY LdtEntry2
-);
-
-NTSTATUS
-STDCALL
-NtQueryOleDirectoryFile(
- VOID
-);
-
-NTSTATUS
-STDCALL
-NtAccessCheck(
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ACCESS_MASK DesiredAcces,
- IN PGENERIC_MAPPING GenericMapping,
- OUT PPRIVILEGE_SET PrivilegeSet,
- OUT PULONG ReturnLength,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-ZwAccessCheck(
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ACCESS_MASK DesiredAcces,
- IN PGENERIC_MAPPING GenericMapping,
- OUT PPRIVILEGE_SET PrivilegeSet,
- OUT PULONG ReturnLength,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus
-);
-
-NTSTATUS
-STDCALL
-NtAccessCheckAndAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PHANDLE ObjectHandle,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ACCESS_MASK DesiredAccess,
- IN PGENERIC_MAPPING GenericMapping,
- IN BOOLEAN ObjectCreation,
- OUT PACCESS_MASK GrantedAccess,
- OUT PNTSTATUS AccessStatus,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtCancelTimer(
- IN HANDLE TimerHandle,
- OUT PBOOLEAN CurrentState OPTIONAL
-);
-
-
-NTSTATUS
-STDCALL
-NtContinue(
- IN PCONTEXT Context,
- IN BOOLEAN TestAlert
+NTAPI
+ZwWriteRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
);
NTSTATUS
-STDCALL
-NtCreatePagingFile(
- IN PUNICODE_STRING FileName,
- IN PLARGE_INTEGER InitialSize,
- IN PLARGE_INTEGER MaxiumSize,
- IN ULONG Reserved
-);
-
-NTSTATUS
-STDCALL
-NtCreateProfile(
- OUT PHANDLE ProfileHandle,
+NTAPI
+NtWriteVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID ImageBase,
- IN ULONG ImageSize,
- IN ULONG Granularity,
- OUT PVOID Buffer,
- IN ULONG ProfilingSize,
- IN KPROFILE_SOURCE Source,
- IN KAFFINITY ProcessorMask
-);
-
-NTSTATUS
-STDCALL
-NtCreateThread(
- OUT PHANDLE ThreadHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN HANDLE ProcessHandle,
- OUT PCLIENT_ID ClientId,
- IN PCONTEXT ThreadContext,
- IN PINITIAL_TEB UserStack,
- IN BOOLEAN CreateSuspended
-);
-
-NTSTATUS
-STDCALL
-NtDelayExecution(
- IN BOOLEAN Alertable,
- IN LARGE_INTEGER *Interval
-);
-
-NTSTATUS
-STDCALL
-NtExtendSection(
- IN HANDLE SectionHandle,
- IN PLARGE_INTEGER NewMaximumSize
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
);
+NTSYSAPI
NTSTATUS
-STDCALL
-NtFlushInstructionCache(
+NTAPI
+ZwWriteVirtualMemory(
IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN UINT NumberOfBytesToFlush
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
);
NTSTATUS
-STDCALL
-NtFlushVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToFlush,
- OUT PULONG NumberOfBytesFlushed OPTIONAL
-);
-
-ULONG
-STDCALL
-NtGetTickCount(
+NTAPI
+NtYieldExecution(
VOID
);
+NTSYSAPI
NTSTATUS
-STDCALL
-NtLoadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-
-NTSTATUS
-STDCALL
-NtLockVirtualMemory(
- HANDLE ProcessHandle,
- PVOID BaseAddress,
- ULONG NumberOfBytesToLock,
- PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-NtOpenObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ULONG DesiredAccess,
- IN ULONG GrantedAccess,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN ObjectCreation,
- IN BOOLEAN AccessGranted,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-NtProtectVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN ULONG *NumberOfBytesToProtect,
- IN ULONG NewAccessProtection,
- OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryDirectoryObject(
- IN HANDLE DirectoryHandle,
- OUT PVOID Buffer,
- IN ULONG BufferLength,
- IN BOOLEAN ReturnSingleEntry,
- IN BOOLEAN RestartScan,
- IN OUT PULONG Context,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQueryIntervalProfile(
- IN KPROFILE_SOURCE ProfileSource,
- OUT PULONG Interval
-);
-
-NTSTATUS
-STDCALL
-NtQuerySection(
- IN HANDLE SectionHandle,
- IN CINT SectionInformationClass,
- OUT PVOID SectionInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtQueryVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID Address,
- IN IN CINT VirtualMemoryInformationClass,
- OUT PVOID VirtualMemoryInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtRaiseHardError(
- IN NTSTATUS ErrorStatus,
- IN ULONG NumberOfParameters,
- IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
- IN PVOID *Parameters,
- IN HARDERROR_RESPONSE_OPTION ResponseOption,
- OUT PHARDERROR_RESPONSE Response
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationKey(
- IN HANDLE KeyHandle,
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
- IN PVOID KeyInformation,
- IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- IN PVOID ObjectInformation,
- IN ULONG Length
-);
-
-NTSTATUS
-STDCALL
-NtSetTimer(
- IN HANDLE TimerHandle,
- IN PLARGE_INTEGER DueTime,
- IN PTIMER_APC_ROUTINE TimerApcRoutine,
- IN PVOID TimerContext,
- IN BOOLEAN WakeTimer,
- IN LONG Period OPTIONAL,
- OUT PBOOLEAN PreviousState OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtUnloadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-NtUnlockVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToUnlock,
- OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtWaitForMultipleObjects(
- IN ULONG Count,
- IN HANDLE Object[],
- IN WAIT_TYPE WaitType,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
-);
-
-NTSTATUS
-STDCALL
-ZwContinue(
- IN PCONTEXT Context,
- IN CINT IrqLevel
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySystemTime (
- OUT PLARGE_INTEGER CurrentTime
-);
-
-
-NTSTATUS
-STDCALL
-NtDuplicateObject(
- IN HANDLE SourceProcessHandle,
- IN HANDLE SourceHandle,
- IN HANDLE TargetProcessHandle,
- OUT PHANDLE TargetHandle,
- IN ACCESS_MASK DesiredAccess,
- IN ULONG HandleAttributes,
- IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-ZwDuplicateObject(
- IN HANDLE SourceProcessHandle,
- IN HANDLE SourceHandle,
- IN HANDLE TargetProcessHandle,
- OUT PHANDLE TargetHandle,
- IN ACCESS_MASK DesiredAccess,
- IN ULONG HandleAttributes,
- IN ULONG Options
-);
-
-NTSTATUS
-STDCALL
-NtAddAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- IN OUT PRTL_ATOM Atom
-);
-
-NTSTATUS
-STDCALL
-ZwAddAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- IN OUT PRTL_ATOM Atom
-);
-
-NTSTATUS
-STDCALL
-NtAllocateUuids(
- PULARGE_INTEGER Time,
- PULONG Range,
- PULONG Sequence,
- PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwAllocateUuids(
- PULARGE_INTEGER Time,
- PULONG Range,
- PULONG Sequence,
- PUCHAR Seed
-);
-
-NTSTATUS
-STDCALL
-ZwCreatePagingFile(
- IN PUNICODE_STRING FileName,
- IN PLARGE_INTEGER InitialSize,
- IN PLARGE_INTEGER MaxiumSize,
- IN ULONG Reserved
-);
-
-NTSTATUS
-STDCALL
-ZwCreateThread(
- OUT PHANDLE ThreadHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN HANDLE ProcessHandle,
- OUT PCLIENT_ID ClientId,
- IN PCONTEXT ThreadContext,
- IN PINITIAL_TEB UserStack,
- IN BOOLEAN CreateSuspended
-);
-
-NTSTATUS
-STDCALL
-NtDuplicateToken(
- IN HANDLE ExistingTokenHandle,
- IN ACCESS_MASK DesiredAccess,
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
- IN BOOLEAN EffectiveOnly,
- IN TOKEN_TYPE TokenType,
- OUT PHANDLE NewTokenHandle
-);
-
-NTSTATUS
-STDCALL
-NtFindAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- OUT PRTL_ATOM Atom OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwFindAtom(
- IN PWSTR AtomName,
- IN ULONG AtomNameLength,
- OUT PRTL_ATOM Atom OPTIONAL
-);
-
-ULONG
-STDCALL
-ZwGetTickCount(
+NTAPI
+ZwYieldExecution(
VOID
);
-NTSTATUS
-STDCALL
-ZwLoadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-ZwLockVirtualMemory(
- HANDLE ProcessHandle,
- PVOID BaseAddress,
- ULONG NumberOfBytesToLock,
- PULONG NumberOfBytesLocked
-);
-
-NTSTATUS
-STDCALL
-ZwOpenObjectAuditAlarm(
- IN PUNICODE_STRING SubsystemName,
- IN PVOID HandleId,
- IN PUNICODE_STRING ObjectTypeName,
- IN PUNICODE_STRING ObjectName,
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN HANDLE ClientToken,
- IN ULONG DesiredAccess,
- IN ULONG GrantedAccess,
- IN PPRIVILEGE_SET Privileges,
- IN BOOLEAN ObjectCreation,
- IN BOOLEAN AccessGranted,
- OUT PBOOLEAN GenerateOnClose
-);
-
-NTSTATUS
-STDCALL
-ZwProtectVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID *BaseAddress,
- IN ULONG *NumberOfBytesToProtect,
- IN ULONG NewAccessProtection,
- OUT PULONG OldAccessProtection
-);
-
-NTSTATUS
-STDCALL
-NtQueryInformationAtom(
- IN RTL_ATOM Atom,
- IN ATOM_INFORMATION_CLASS AtomInformationClass,
- OUT PVOID AtomInformation,
- IN ULONG AtomInformationLength,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryInformationAtom(
- IN RTL_ATOM Atom,
- IN ATOM_INFORMATION_CLASS AtomInformationClass,
- OUT PVOID AtomInformation,
- IN ULONG AtomInformationLength,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryDirectoryObject(
- IN HANDLE DirectoryHandle,
- OUT PVOID Buffer,
- IN ULONG BufferLength,
- IN BOOLEAN ReturnSingleEntry,
- IN BOOLEAN RestartScan,
- IN OUT PULONG Context,
- OUT PULONG ReturnLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwQueryIntervalProfile(
- OUT PULONG Interval,
- OUT KPROFILE_SOURCE ClockSource
-);
-
-NTSTATUS
-STDCALL
-ZwQueryObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- OUT PVOID ObjectInformation,
- IN ULONG Length,
- OUT PULONG ResultLength OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-NtQuerySecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySecurityObject(
- IN HANDLE Handle,
- IN SECURITY_INFORMATION SecurityInformation,
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-
-NTSTATUS
-STDCALL
-ZwQueryVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID Address,
- IN IN CINT VirtualMemoryInformationClass,
- OUT PVOID VirtualMemoryInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-ZwRaiseHardError(
- IN NTSTATUS Status,
- ULONG Unknown2,
- ULONG Unknown3,
- ULONG Unknown4,
- ULONG Unknown5,
- ULONG Unknown6
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationKey(
- IN HANDLE KeyHandle,
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
- IN PVOID KeyInformation,
- IN ULONG KeyInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwSetInformationObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- IN PVOID ObjectInformation,
- IN ULONG Length
-);
-
-NTSTATUS
-STDCALL
-NtSetInformationProcess(
- IN HANDLE ProcessHandle,
- IN PROCESSINFOCLASS ProcessInformationClass,
- IN PVOID ProcessInformation,
- IN ULONG ProcessInformationLength
-);
-
-NTSTATUS
-STDCALL
-ZwUnloadKey(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes
-);
-
-NTSTATUS
-STDCALL
-ZwUnlockVirtualMemory(
- IN HANDLE ProcessHandle,
- IN PVOID BaseAddress,
- IN ULONG NumberOfBytesToUnlock,
- OUT PULONG NumberOfBytesUnlocked OPTIONAL
-);
-
-NTSTATUS
-STDCALL
-ZwWaitForMultipleObjects (
- IN ULONG Count,
- IN HANDLE Object[],
- IN WAIT_TYPE WaitType,
- IN BOOLEAN Alertable,
- IN PLARGE_INTEGER Time
-);
-
-NTSTATUS
-STDCALL
-ZwCreateProfile(
- OUT PHANDLE ProfileHandle,
- IN POBJECT_ATTRIBUTES ObjectAttributes,
- IN ULONG ImageBase,
- IN ULONG ImageSize,
- IN ULONG Granularity,
- OUT PVOID Buffer,
- IN ULONG ProfilingSize,
- IN ULONG ClockSource,
- IN ULONG ProcessorMask
-);
-
-NTSTATUS
-STDCALL
-ZwDelayExecution(
- IN BOOLEAN Alertable,
- IN LARGE_INTEGER *Interval
-);
-
-NTSTATUS
-STDCALL
-ZwExtendSection(
- IN HANDLE SectionHandle,
- IN PLARGE_INTEGER NewMaximumSize
-);
-
-NTSTATUS
-STDCALL
-ZwQuerySection(
- IN HANDLE SectionHandle,
- IN CINT SectionInformationClass,
- OUT PVOID SectionInformation,
- IN ULONG Length,
- OUT PULONG ResultLength
-);
-
-NTSTATUS
-STDCALL
-NtLoadKey2(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-ZwLoadKey2(
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,
- IN POBJECT_ATTRIBUTES FileObjectAttributes,
- IN ULONG Flags
-);
-
-NTSTATUS
-STDCALL
-NtQuerySystemTime (
- OUT PLARGE_INTEGER CurrentTime
-);
-
-NTSTATUS
-STDCALL
-NtQueryObject(
- IN HANDLE ObjectHandle,
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
- OUT PVOID ObjectInformation,
- IN ULONG Length,
- OUT PULONG ResultLength OPTIONAL
-);
-
-static inline struct _PEB * NtCurrentPeb(void)
-{
- struct _PEB * pPeb;
-
-#if defined(__GNUC__)
-
- __asm__ __volatile__
- (
- "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */
- : "=r" (pPeb) /* can't have two memory operands */
- : /* no inputs */
- );
-
-#elif defined(_MSC_VER)
-
- __asm mov eax, fs:0x30;
- __asm mov pPeb, eax
-
-#else
-#error Unknown compiler for inline assembler
-#endif
-
- return pPeb;
-}
#endif