-/*\r
- * PROJECT: ReactOS Native Headers\r
- * FILE: include/ndk/zwfuncs.h\r
- * PURPOSE: Defintions for Native Functions not defined in DDK/IFS\r
- * PROGRAMMER: Alex Ionescu (alex@relsoft.net)\r
- * UPDATE HISTORY:\r
- * Created 06/10/04\r
- */\r
-#ifndef _ZWFUNCS_H\r
-#define _ZWFUNCS_H\r
-\r
-/* DEPENDENCIES **************************************************************/\r
-#include "lpctypes.h"\r
-#include "zwtypes.h"\r
-#include "kdtypes.h"\r
-#include <evntrace.h>\r
-\r
-/* FUNCTION TYPES ************************************************************/\r
-\r
-/* PROTOTYPES ****************************************************************/\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAcceptConnectPort(\r
- PHANDLE PortHandle,\r
- HANDLE NamedPortHandle,\r
- PLPC_MESSAGE ServerReply,\r
- BOOLEAN AcceptIt,\r
- PLPC_SECTION_WRITE WriteMap,\r
- PLPC_SECTION_READ ReadMap\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAccessCheck(\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN HANDLE ClientToken,\r
- IN ACCESS_MASK DesiredAcces,\r
- IN PGENERIC_MAPPING GenericMapping,\r
- OUT PPRIVILEGE_SET PrivilegeSet,\r
- OUT PULONG ReturnLength,\r
- OUT PACCESS_MASK GrantedAccess,\r
- OUT PNTSTATUS AccessStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAccessCheck(\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN HANDLE ClientToken,\r
- IN ACCESS_MASK DesiredAcces,\r
- IN PGENERIC_MAPPING GenericMapping,\r
- OUT PPRIVILEGE_SET PrivilegeSet,\r
- OUT PULONG ReturnLength,\r
- OUT PACCESS_MASK GrantedAccess,\r
- OUT PNTSTATUS AccessStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAccessCheckAndAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PHANDLE ObjectHandle,\r
- IN PUNICODE_STRING ObjectTypeName,\r
- IN PUNICODE_STRING ObjectName,\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN PGENERIC_MAPPING GenericMapping,\r
- IN BOOLEAN ObjectCreation,\r
- OUT PACCESS_MASK GrantedAccess,\r
- OUT PNTSTATUS AccessStatus,\r
- OUT PBOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAddAtom(\r
- IN PWSTR AtomName,\r
- IN ULONG AtomNameLength,\r
- IN OUT PRTL_ATOM Atom\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAddAtom(\r
- IN PWSTR AtomName,\r
- IN ULONG AtomNameLength,\r
- IN OUT PRTL_ATOM Atom\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAddBootEntry(\r
- IN PUNICODE_STRING EntryName,\r
- IN PUNICODE_STRING EntryValue\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAddBootEntry(\r
- IN PUNICODE_STRING EntryName,\r
- IN PUNICODE_STRING EntryValue\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAdjustGroupsToken(\r
- IN HANDLE TokenHandle,\r
- IN BOOLEAN ResetToDefault,\r
- IN PTOKEN_GROUPS NewState,\r
- IN ULONG BufferLength,\r
- OUT PTOKEN_GROUPS PreviousState OPTIONAL,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAdjustGroupsToken(\r
- IN HANDLE TokenHandle,\r
- IN BOOLEAN ResetToDefault,\r
- IN PTOKEN_GROUPS NewState,\r
- IN ULONG BufferLength,\r
- OUT PTOKEN_GROUPS PreviousState,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAdjustPrivilegesToken(\r
- IN HANDLE TokenHandle,\r
- IN BOOLEAN DisableAllPrivileges,\r
- IN PTOKEN_PRIVILEGES NewState,\r
- IN ULONG BufferLength,\r
- OUT PTOKEN_PRIVILEGES PreviousState,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAdjustPrivilegesToken(\r
- IN HANDLE TokenHandle,\r
- IN BOOLEAN DisableAllPrivileges,\r
- IN PTOKEN_PRIVILEGES NewState,\r
- IN ULONG BufferLength,\r
- OUT PTOKEN_PRIVILEGES PreviousState,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAlertResumeThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PULONG SuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAlertResumeThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PULONG SuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAlertThread(\r
- IN HANDLE ThreadHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAlertThread(\r
- IN HANDLE ThreadHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAllocateLocallyUniqueId(\r
- OUT LUID *LocallyUniqueId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAllocateLocallyUniqueId(\r
- OUT PLUID Luid\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAllocateUuids(\r
- PULARGE_INTEGER Time,\r
- PULONG Range,\r
- PULONG Sequence,\r
- PUCHAR Seed\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAllocateUuids(\r
- PULARGE_INTEGER Time,\r
- PULONG Range,\r
- PULONG Sequence,\r
- PUCHAR Seed\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAllocateVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN OUT PVOID *BaseAddress,\r
- IN ULONG ZeroBits,\r
- IN OUT PULONG RegionSize,\r
- IN ULONG AllocationType,\r
- IN ULONG Protect\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAllocateVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN OUT PVOID *BaseAddress,\r
- IN ULONG ZeroBits,\r
- IN OUT PULONG RegionSize,\r
- IN ULONG AllocationType,\r
- IN ULONG Protect\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtAssignProcessToJobObject(\r
- HANDLE JobHandle,\r
- HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwAssignProcessToJobObject(\r
- HANDLE JobHandle,\r
- HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCallbackReturn(\r
- PVOID Result,\r
- ULONG ResultLength,\r
- NTSTATUS Status\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCallbackReturn(\r
- PVOID Result,\r
- ULONG ResultLength,\r
- NTSTATUS Status\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCancelIoFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCancelIoFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCancelTimer(\r
- IN HANDLE TimerHandle,\r
- OUT PBOOLEAN CurrentState OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtClearEvent(\r
- IN HANDLE EventHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwClearEvent(\r
- IN HANDLE EventHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateJobObject(\r
- PHANDLE JobHandle,\r
- ACCESS_MASK DesiredAccess,\r
- POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateJobObject(\r
- PHANDLE JobHandle,\r
- ACCESS_MASK DesiredAccess,\r
- POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtClose(\r
- IN HANDLE Handle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwClose(\r
- IN HANDLE Handle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCloseObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN BOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCloseObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN BOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCompleteConnectPort(\r
- HANDLE PortHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCompleteConnectPort(\r
- HANDLE PortHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtConnectPort(\r
- PHANDLE PortHandle,\r
- PUNICODE_STRING PortName,\r
- PSECURITY_QUALITY_OF_SERVICE SecurityQos,\r
- PLPC_SECTION_WRITE SectionInfo,\r
- PLPC_SECTION_READ MapInfo,\r
- PULONG MaxMessageSize,\r
- PVOID ConnectInfo,\r
- PULONG ConnectInfoLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwConnectPort(\r
- PHANDLE PortHandle,\r
- PUNICODE_STRING PortName,\r
- PSECURITY_QUALITY_OF_SERVICE SecurityQos,\r
- PLPC_SECTION_WRITE SectionInfo,\r
- PLPC_SECTION_READ MapInfo,\r
- PULONG MaxMessageSize,\r
- PVOID ConnectInfo,\r
- PULONG ConnectInfoLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtContinue(\r
- IN PCONTEXT Context,\r
- IN BOOLEAN TestAlert\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwContinue(\r
- IN PCONTEXT Context,\r
- IN CINT IrqLevel\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateDirectoryObject(\r
- OUT PHANDLE DirectoryHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateDirectoryObject(\r
- OUT PHANDLE DirectoryHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateEvent(\r
- OUT PHANDLE EventHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN EVENT_TYPE EventType,\r
- IN BOOLEAN InitialState\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateEvent(\r
- OUT PHANDLE EventHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN EVENT_TYPE EventType,\r
- IN BOOLEAN InitialState\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateEventPair(\r
- OUT PHANDLE EventPairHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateEventPair(\r
- OUT PHANDLE EventPairHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateFile(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER AllocationSize OPTIONAL,\r
- IN ULONG FileAttributes,\r
- IN ULONG ShareAccess,\r
- IN ULONG CreateDisposition,\r
- IN ULONG CreateOptions,\r
- IN PVOID EaBuffer OPTIONAL,\r
- IN ULONG EaLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateFile(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER AllocationSize OPTIONAL,\r
- IN ULONG FileAttributes,\r
- IN ULONG ShareAccess,\r
- IN ULONG CreateDisposition,\r
- IN ULONG CreateOptions,\r
- IN PVOID EaBuffer OPTIONAL,\r
- IN ULONG EaLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateIoCompletion(\r
- OUT PHANDLE IoCompletionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN ULONG NumberOfConcurrentThreads\r
- );\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateIoCompletion(\r
- OUT PHANDLE IoCompletionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN ULONG NumberOfConcurrentThreads\r
- );\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateKey(\r
- OUT PHANDLE KeyHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN ULONG TitleIndex,\r
- IN PUNICODE_STRING Class OPTIONAL,\r
- IN ULONG CreateOptions,\r
- IN PULONG Disposition OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateKey(\r
- OUT PHANDLE KeyHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN ULONG TitleIndex,\r
- IN PUNICODE_STRING Class OPTIONAL,\r
- IN ULONG CreateOptions,\r
- IN PULONG Disposition OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateMailslotFile(\r
- OUT PHANDLE MailSlotFileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG FileAttributes,\r
- IN ULONG ShareAccess,\r
- IN ULONG MaxMessageSize,\r
- IN PLARGE_INTEGER TimeOut\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateMailslotFile(\r
- OUT PHANDLE MailSlotFileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG FileAttributes,\r
- IN ULONG ShareAccess,\r
- IN ULONG MaxMessageSize,\r
- IN PLARGE_INTEGER TimeOut\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateMutant(\r
- OUT PHANDLE MutantHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN BOOLEAN InitialOwner\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateMutant(\r
- OUT PHANDLE MutantHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN BOOLEAN InitialOwner\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateNamedPipeFile(\r
- OUT PHANDLE NamedPipeFileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG ShareAccess,\r
- IN ULONG CreateDisposition,\r
- IN ULONG CreateOptions,\r
- IN ULONG WriteModeMessage,\r
- IN ULONG ReadModeMessage,\r
- IN ULONG NonBlocking,\r
- IN ULONG MaxInstances,\r
- IN ULONG InBufferSize,\r
- IN ULONG OutBufferSize,\r
- IN PLARGE_INTEGER DefaultTimeOut\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateNamedPipeFile(\r
- OUT PHANDLE NamedPipeFileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG ShareAccess,\r
- IN ULONG CreateDisposition,\r
- IN ULONG CreateOptions,\r
- IN ULONG WriteModeMessage,\r
- IN ULONG ReadModeMessage,\r
- IN ULONG NonBlocking,\r
- IN ULONG MaxInstances,\r
- IN ULONG InBufferSize,\r
- IN ULONG OutBufferSize,\r
- IN PLARGE_INTEGER DefaultTimeOut\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreatePagingFile(\r
- IN PUNICODE_STRING FileName,\r
- IN PLARGE_INTEGER InitialSize,\r
- IN PLARGE_INTEGER MaxiumSize,\r
- IN ULONG Reserved\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreatePagingFile(\r
- IN PUNICODE_STRING FileName,\r
- IN PLARGE_INTEGER InitialSize,\r
- IN PLARGE_INTEGER MaxiumSize,\r
- IN ULONG Reserved\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreatePort(\r
- PHANDLE PortHandle,\r
- POBJECT_ATTRIBUTES ObjectAttributes,\r
- ULONG MaxConnectInfoLength,\r
- ULONG MaxDataLength,\r
- ULONG NPMessageQueueSize OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreatePort(\r
- PHANDLE PortHandle,\r
- POBJECT_ATTRIBUTES ObjectAttributes,\r
- ULONG MaxConnectInfoLength,\r
- ULONG MaxDataLength,\r
- ULONG NPMessageQueueSize OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateProcess(\r
- OUT PHANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN HANDLE ParentProcess,\r
- IN BOOLEAN InheritObjectTable,\r
- IN HANDLE SectionHandle OPTIONAL,\r
- IN HANDLE DebugPort OPTIONAL,\r
- IN HANDLE ExceptionPort OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateProcess(\r
- OUT PHANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN HANDLE ParentProcess,\r
- IN BOOLEAN InheritObjectTable,\r
- IN HANDLE SectionHandle OPTIONAL,\r
- IN HANDLE DebugPort OPTIONAL,\r
- IN HANDLE ExceptionPort OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateProfile(\r
- OUT PHANDLE ProfileHandle,\r
- IN HANDLE ProcessHandle,\r
- IN PVOID ImageBase,\r
- IN ULONG ImageSize,\r
- IN ULONG Granularity,\r
- OUT PVOID Buffer,\r
- IN ULONG ProfilingSize,\r
- IN KPROFILE_SOURCE Source,\r
- IN KAFFINITY ProcessorMask\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateProfile(\r
- OUT PHANDLE ProfileHandle,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN ULONG ImageBase,\r
- IN ULONG ImageSize,\r
- IN ULONG Granularity,\r
- OUT PVOID Buffer,\r
- IN ULONG ProfilingSize,\r
- IN ULONG ClockSource,\r
- IN ULONG ProcessorMask\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateSection(\r
- OUT PHANDLE SectionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN PLARGE_INTEGER MaximumSize OPTIONAL,\r
- IN ULONG SectionPageProtection OPTIONAL,\r
- IN ULONG AllocationAttributes,\r
- IN HANDLE FileHandle OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateSection(\r
- OUT PHANDLE SectionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN PLARGE_INTEGER MaximumSize OPTIONAL,\r
- IN ULONG SectionPageProtection OPTIONAL,\r
- IN ULONG AllocationAttributes,\r
- IN HANDLE FileHandle OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateSemaphore(\r
- OUT PHANDLE SemaphoreHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN LONG InitialCount,\r
- IN LONG MaximumCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateSemaphore(\r
- OUT PHANDLE SemaphoreHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN LONG InitialCount,\r
- IN LONG MaximumCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateSymbolicLinkObject(\r
- OUT PHANDLE SymbolicLinkHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PUNICODE_STRING Name\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateSymbolicLinkObject(\r
- OUT PHANDLE SymbolicLinkHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PUNICODE_STRING Name\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateThread(\r
- OUT PHANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN HANDLE ProcessHandle,\r
- OUT PCLIENT_ID ClientId,\r
- IN PCONTEXT ThreadContext,\r
- IN PINITIAL_TEB UserStack,\r
- IN BOOLEAN CreateSuspended\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateThread(\r
- OUT PHANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN HANDLE ProcessHandle,\r
- OUT PCLIENT_ID ClientId,\r
- IN PCONTEXT ThreadContext,\r
- IN PINITIAL_TEB UserStack,\r
- IN BOOLEAN CreateSuspended\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateTimer(\r
- OUT PHANDLE TimerHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN TIMER_TYPE TimerType\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateTimer(\r
- OUT PHANDLE TimerHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN TIMER_TYPE TimerType\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateToken(\r
- OUT PHANDLE TokenHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN TOKEN_TYPE TokenType,\r
- IN PLUID AuthenticationId,\r
- IN PLARGE_INTEGER ExpirationTime,\r
- IN PTOKEN_USER TokenUser,\r
- IN PTOKEN_GROUPS TokenGroups,\r
- IN PTOKEN_PRIVILEGES TokenPrivileges,\r
- IN PTOKEN_OWNER TokenOwner,\r
- IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,\r
- IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,\r
- IN PTOKEN_SOURCE TokenSource\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateToken(\r
- OUT PHANDLE TokenHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN TOKEN_TYPE TokenType,\r
- IN PLUID AuthenticationId,\r
- IN PLARGE_INTEGER ExpirationTime,\r
- IN PTOKEN_USER TokenUser,\r
- IN PTOKEN_GROUPS TokenGroups,\r
- IN PTOKEN_PRIVILEGES TokenPrivileges,\r
- IN PTOKEN_OWNER TokenOwner,\r
- IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,\r
- IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,\r
- IN PTOKEN_SOURCE TokenSource\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtCreateWaitablePort(\r
- PHANDLE PortHandle,\r
- POBJECT_ATTRIBUTES ObjectAttributes,\r
- ULONG MaxConnectInfoLength,\r
- ULONG MaxDataLength,\r
- ULONG NPMessageQueueSize OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwCreateWaitablePort(\r
- PHANDLE PortHandle,\r
- POBJECT_ATTRIBUTES ObjectAttributes,\r
- ULONG MaxConnectInfoLength,\r
- ULONG MaxDataLength,\r
- ULONG NPMessageQueueSize OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDelayExecution(\r
- IN BOOLEAN Alertable,\r
- IN LARGE_INTEGER *Interval\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDelayExecution(\r
- IN BOOLEAN Alertable,\r
- IN LARGE_INTEGER *Interval\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteAtom(\r
- IN RTL_ATOM Atom\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteAtom(\r
- IN RTL_ATOM Atom\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteBootEntry(\r
- IN PUNICODE_STRING EntryName,\r
- IN PUNICODE_STRING EntryValue\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteBootEntry(\r
- IN PUNICODE_STRING EntryName,\r
- IN PUNICODE_STRING EntryValue\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteKey(\r
- IN HANDLE KeyHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteKey(\r
- IN HANDLE KeyHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN BOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN BOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeleteValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeleteValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDeviceIoControlFile(\r
- IN HANDLE DeviceHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG IoControlCode,\r
- IN PVOID InputBuffer,\r
- IN ULONG InputBufferSize,\r
- OUT PVOID OutputBuffer,\r
- IN ULONG OutputBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDeviceIoControlFile(\r
- IN HANDLE DeviceHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG IoControlCode,\r
- IN PVOID InputBuffer,\r
- IN ULONG InputBufferSize,\r
- OUT PVOID OutputBuffer,\r
- IN ULONG OutputBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDisplayString(\r
- IN PUNICODE_STRING DisplayString\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDisplayString(\r
- IN PUNICODE_STRING DisplayString\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDuplicateObject(\r
- IN HANDLE SourceProcessHandle,\r
- IN HANDLE SourceHandle,\r
- IN HANDLE TargetProcessHandle,\r
- OUT PHANDLE TargetHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN ULONG HandleAttributes,\r
- IN ULONG Options\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwDuplicateObject(\r
- IN HANDLE SourceProcessHandle,\r
- IN HANDLE SourceHandle,\r
- IN HANDLE TargetProcessHandle,\r
- OUT PHANDLE TargetHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN ULONG HandleAttributes,\r
- IN ULONG Options\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtDuplicateToken(\r
- IN HANDLE ExistingTokenHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,\r
- IN BOOLEAN EffectiveOnly,\r
- IN TOKEN_TYPE TokenType,\r
- OUT PHANDLE NewTokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtEnumerateBootEntries(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwEnumerateBootEntries(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtEnumerateKey(\r
- IN HANDLE KeyHandle,\r
- IN ULONG Index,\r
- IN KEY_INFORMATION_CLASS KeyInformationClass,\r
- OUT PVOID KeyInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwEnumerateKey(\r
- IN HANDLE KeyHandle,\r
- IN ULONG Index,\r
- IN KEY_INFORMATION_CLASS KeyInformationClass,\r
- OUT PVOID KeyInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtEnumerateValueKey(\r
- IN HANDLE KeyHandle,\r
- IN ULONG Index,\r
- IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,\r
- OUT PVOID KeyValueInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwEnumerateValueKey(\r
- IN HANDLE KeyHandle,\r
- IN ULONG Index,\r
- IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,\r
- OUT PVOID KeyValueInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtExtendSection(\r
- IN HANDLE SectionHandle,\r
- IN PLARGE_INTEGER NewMaximumSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwExtendSection(\r
- IN HANDLE SectionHandle,\r
- IN PLARGE_INTEGER NewMaximumSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFindAtom(\r
- IN PWSTR AtomName,\r
- IN ULONG AtomNameLength,\r
- OUT PRTL_ATOM Atom OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFindAtom(\r
- IN PWSTR AtomName,\r
- IN ULONG AtomNameLength,\r
- OUT PRTL_ATOM Atom OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFlushBuffersFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFlushBuffersFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFlushInstructionCache(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN UINT NumberOfBytesToFlush\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFlushKey(\r
- IN HANDLE KeyHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFlushKey(\r
- IN HANDLE KeyHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFlushVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN ULONG NumberOfBytesToFlush,\r
- OUT PULONG NumberOfBytesFlushed OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFlushWriteBuffer(VOID);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFlushWriteBuffer(VOID);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFreeVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID *BaseAddress,\r
- IN PULONG RegionSize,\r
- IN ULONG FreeType\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFreeVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID *BaseAddress,\r
- IN PULONG RegionSize,\r
- IN ULONG FreeType\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtFsControlFile(\r
- IN HANDLE DeviceHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG IoControlCode,\r
- IN PVOID InputBuffer,\r
- IN ULONG InputBufferSize,\r
- OUT PVOID OutputBuffer,\r
- IN ULONG OutputBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwFsControlFile(\r
- IN HANDLE DeviceHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG IoControlCode,\r
- IN PVOID InputBuffer,\r
- IN ULONG InputBufferSize,\r
- OUT PVOID OutputBuffer,\r
- IN ULONG OutputBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtGetContextThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PCONTEXT Context\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwGetContextThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PCONTEXT Context\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtGetPlugPlayEvent(\r
- IN ULONG Reserved1,\r
- IN ULONG Reserved2,\r
- OUT PPLUGPLAY_EVENT_BLOCK Buffer,\r
- IN ULONG BufferSize\r
-);\r
-\r
-ULONG\r
-STDCALL\r
-NtGetTickCount(\r
- VOID\r
-);\r
-\r
-ULONG\r
-STDCALL\r
-ZwGetTickCount(\r
- VOID\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtImpersonateClientOfPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE ClientMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwImpersonateClientOfPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE ClientMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtImpersonateThread(\r
- IN HANDLE ThreadHandle,\r
- IN HANDLE ThreadToImpersonate,\r
- IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwImpersonateThread(\r
- IN HANDLE ThreadHandle,\r
- IN HANDLE ThreadToImpersonate,\r
- IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtInitiatePowerAction(\r
- POWER_ACTION SystemAction,\r
- SYSTEM_POWER_STATE MinSystemState,\r
- ULONG Flags,\r
- BOOLEAN Asynchronous\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwInitiatePowerAction(\r
- POWER_ACTION SystemAction,\r
- SYSTEM_POWER_STATE MinSystemState,\r
- ULONG Flags,\r
- BOOLEAN Asynchronous\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtInitializeRegistry(\r
- BOOLEAN SetUpBoot\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwInitializeRegistry(\r
- BOOLEAN SetUpBoot\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtIsProcessInJob(\r
- IN HANDLE ProcessHandle,\r
- IN HANDLE JobHandle OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwIsProcessInJob(\r
- IN HANDLE ProcessHandle,\r
- IN HANDLE JobHandle OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtListenPort(HANDLE PortHandle,\r
- PLPC_MESSAGE LpcMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwListenPort(HANDLE PortHandle,\r
- PLPC_MESSAGE LpcMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtLoadDriver(\r
- IN PUNICODE_STRING DriverServiceName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwLoadDriver(\r
- IN PUNICODE_STRING DriverServiceName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtLoadKey(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,\r
- IN POBJECT_ATTRIBUTES FileObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwLoadKey(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,\r
- IN POBJECT_ATTRIBUTES FileObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtLoadKey2(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,\r
- IN POBJECT_ATTRIBUTES FileObjectAttributes,\r
- IN ULONG Flags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwLoadKey2(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes,\r
- IN POBJECT_ATTRIBUTES FileObjectAttributes,\r
- IN ULONG Flags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtLockFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PLARGE_INTEGER Length,\r
- IN PULONG Key,\r
- IN BOOLEAN FailImmediatedly,\r
- IN BOOLEAN ExclusiveLock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwLockFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PLARGE_INTEGER Length,\r
- IN PULONG Key,\r
- IN BOOLEAN FailImmediatedly,\r
- IN BOOLEAN ExclusiveLock\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtLockVirtualMemory(\r
- HANDLE ProcessHandle,\r
- PVOID BaseAddress,\r
- ULONG NumberOfBytesToLock,\r
- PULONG NumberOfBytesLocked\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwLockVirtualMemory(\r
- HANDLE ProcessHandle,\r
- PVOID BaseAddress,\r
- ULONG NumberOfBytesToLock,\r
- PULONG NumberOfBytesLocked\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtMakePermanentObject(\r
- IN HANDLE Object\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwMakePermanentObject(\r
- IN HANDLE Object\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtMakeTemporaryObject(\r
- IN HANDLE Handle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwMakeTemporaryObject(\r
- IN HANDLE Handle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtMapViewOfSection(\r
- IN HANDLE SectionHandle,\r
- IN HANDLE ProcessHandle,\r
- IN OUT PVOID *BaseAddress,\r
- IN ULONG ZeroBits,\r
- IN ULONG CommitSize,\r
- IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,\r
- IN OUT PULONG ViewSize,\r
- IN SECTION_INHERIT InheritDisposition,\r
- IN ULONG AllocationType,\r
- IN ULONG AccessProtection\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwMapViewOfSection(\r
- IN HANDLE SectionHandle,\r
- IN HANDLE ProcessHandle,\r
- IN OUT PVOID *BaseAddress,\r
- IN ULONG ZeroBits,\r
- IN ULONG CommitSize,\r
- IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,\r
- IN OUT PULONG ViewSize,\r
- IN SECTION_INHERIT InheritDisposition,\r
- IN ULONG AllocationType,\r
- IN ULONG AccessProtection\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtNotifyChangeDirectoryFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferSize,\r
- IN ULONG CompletionFilter,\r
- IN BOOLEAN WatchTree\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwNotifyChangeDirectoryFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferSize,\r
- IN ULONG CompletionFilter,\r
- IN BOOLEAN WatchTree\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtNotifyChangeKey(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE Event,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG CompletionFilter,\r
- IN BOOLEAN Asynchroneous,\r
- OUT PVOID ChangeBuffer,\r
- IN ULONG Length,\r
- IN BOOLEAN WatchSubtree\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwNotifyChangeKey(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE Event,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG CompletionFilter,\r
- IN BOOLEAN Asynchroneous,\r
- OUT PVOID ChangeBuffer,\r
- IN ULONG Length,\r
- IN BOOLEAN WatchSubtree\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenDirectoryObject(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenDirectoryObject(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenEvent(\r
- OUT PHANDLE EventHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenEvent(\r
- OUT PHANDLE EventHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenEventPair(\r
- OUT PHANDLE EventPairHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenEventPair(\r
- OUT PHANDLE EventPairHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenFile(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG ShareAccess,\r
- IN ULONG OpenOptions\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenFile(\r
- OUT PHANDLE FileHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN ULONG ShareAccess,\r
- IN ULONG OpenOptions\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenIoCompletion(\r
- OUT PHANDLE CompetionPort,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenIoCompletion(\r
- OUT PHANDLE CompetionPort,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenJobObject(\r
- PHANDLE JobHandle,\r
- ACCESS_MASK DesiredAccess,\r
- POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenJobObject(\r
- PHANDLE JobHandle,\r
- ACCESS_MASK DesiredAccess,\r
- POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenKey(\r
- OUT PHANDLE KeyHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenKey(\r
- OUT PHANDLE KeyHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenMutant(\r
- OUT PHANDLE MutantHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenMutant(\r
- OUT PHANDLE MutantHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN PUNICODE_STRING ObjectTypeName,\r
- IN PUNICODE_STRING ObjectName,\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN HANDLE ClientToken,\r
- IN ULONG DesiredAccess,\r
- IN ULONG GrantedAccess,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN ObjectCreation,\r
- IN BOOLEAN AccessGranted,\r
- OUT PBOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN PUNICODE_STRING ObjectTypeName,\r
- IN PUNICODE_STRING ObjectName,\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN HANDLE ClientToken,\r
- IN ULONG DesiredAccess,\r
- IN ULONG GrantedAccess,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN ObjectCreation,\r
- IN BOOLEAN AccessGranted,\r
- OUT PBOOLEAN GenerateOnClose\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenProcess(\r
- OUT PHANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PCLIENT_ID ClientId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenProcess(\r
- OUT PHANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PCLIENT_ID ClientId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenProcessToken(\r
- IN HANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenProcessToken(\r
- IN HANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenProcessTokenEx(\r
- IN HANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN ULONG HandleAttributes,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenProcessTokenEx(\r
- IN HANDLE ProcessHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN ULONG HandleAttributes,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenSection(\r
- OUT PHANDLE SectionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenSection(\r
- OUT PHANDLE SectionHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenSemaphore(\r
- OUT PHANDLE SemaphoreHandle,\r
- IN ACCESS_MASK DesiredAcces,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenSemaphore(\r
- OUT PHANDLE SemaphoreHandle,\r
- IN ACCESS_MASK DesiredAcces,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenSymbolicLinkObject(\r
- OUT PHANDLE SymbolicLinkHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenSymbolicLinkObject(\r
- OUT PHANDLE SymbolicLinkHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenThread(\r
- OUT PHANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PCLIENT_ID ClientId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenThread(\r
- OUT PHANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN PCLIENT_ID ClientId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenThreadToken(\r
- IN HANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN BOOLEAN OpenAsSelf,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenThreadToken(\r
- IN HANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN BOOLEAN OpenAsSelf,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenThreadTokenEx(\r
- IN HANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN BOOLEAN OpenAsSelf,\r
- IN ULONG HandleAttributes,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenThreadTokenEx(\r
- IN HANDLE ThreadHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN BOOLEAN OpenAsSelf,\r
- IN ULONG HandleAttributes,\r
- OUT PHANDLE TokenHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtOpenTimer(\r
- OUT PHANDLE TimerHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwOpenTimer(\r
- OUT PHANDLE TimerHandle,\r
- IN ACCESS_MASK DesiredAccess,\r
- IN POBJECT_ATTRIBUTES ObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPlugPlayControl(\r
- IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass,\r
- IN OUT PVOID Buffer,\r
- IN ULONG BufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPowerInformation(\r
- POWER_INFORMATION_LEVEL PowerInformationLevel,\r
- PVOID InputBuffer,\r
- ULONG InputBufferLength,\r
- PVOID OutputBuffer,\r
- ULONG OutputBufferLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwPowerInformation(\r
- POWER_INFORMATION_LEVEL PowerInformationLevel,\r
- PVOID InputBuffer,\r
- ULONG InputBufferLength,\r
- PVOID OutputBuffer,\r
- ULONG OutputBufferLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPrivilegeCheck(\r
- IN HANDLE ClientToken,\r
- IN PPRIVILEGE_SET RequiredPrivileges,\r
- IN PBOOLEAN Result\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwPrivilegeCheck(\r
- IN HANDLE ClientToken,\r
- IN PPRIVILEGE_SET RequiredPrivileges,\r
- IN PBOOLEAN Result\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPrivilegedServiceAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PUNICODE_STRING ServiceName,\r
- IN HANDLE ClientToken,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN AccessGranted\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwPrivilegedServiceAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PUNICODE_STRING ServiceName,\r
- IN HANDLE ClientToken,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN AccessGranted\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPrivilegeObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN HANDLE ClientToken,\r
- IN ULONG DesiredAccess,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN AccessGranted\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwPrivilegeObjectAuditAlarm(\r
- IN PUNICODE_STRING SubsystemName,\r
- IN PVOID HandleId,\r
- IN HANDLE ClientToken,\r
- IN ULONG DesiredAccess,\r
- IN PPRIVILEGE_SET Privileges,\r
- IN BOOLEAN AccessGranted\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtProtectVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID *BaseAddress,\r
- IN ULONG *NumberOfBytesToProtect,\r
- IN ULONG NewAccessProtection,\r
- OUT PULONG OldAccessProtection\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwProtectVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID *BaseAddress,\r
- IN ULONG *NumberOfBytesToProtect,\r
- IN ULONG NewAccessProtection,\r
- OUT PULONG OldAccessProtection\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtPulseEvent(\r
- IN HANDLE EventHandle,\r
- IN PLONG PulseCount OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwPulseEvent(\r
- IN HANDLE EventHandle,\r
- IN PLONG PulseCount OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryAttributesFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PFILE_BASIC_INFORMATION FileInformation\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryAttributesFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PFILE_BASIC_INFORMATION FileInformation\r
-);\r
-\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryBootEntryOrder(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryBootEntryOrder(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryBootOptions(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryBootOptions(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-NTSTATUS\r
-STDCALL\r
-NtQueryDefaultLocale(\r
- IN BOOLEAN UserProfile,\r
- OUT PLCID DefaultLocaleId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryDefaultLocale(\r
- IN BOOLEAN UserProfile,\r
- OUT PLCID DefaultLocaleId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryDefaultUILanguage(\r
- PLANGID LanguageId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryDefaultUILanguage(\r
- PLANGID LanguageId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryDirectoryFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID FileInformation,\r
- IN ULONG Length,\r
- IN FILE_INFORMATION_CLASS FileInformationClass,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PUNICODE_STRING FileName OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryDirectoryFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID FileInformation,\r
- IN ULONG Length,\r
- IN FILE_INFORMATION_CLASS FileInformationClass,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PUNICODE_STRING FileName OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryDirectoryObject(\r
- IN HANDLE DirectoryHandle,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferLength,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN BOOLEAN RestartScan,\r
- IN OUT PULONG Context,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryDirectoryObject(\r
- IN HANDLE DirectoryHandle,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferLength,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN BOOLEAN RestartScan,\r
- IN OUT PULONG Context,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryEaFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG Length,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PVOID EaList OPTIONAL,\r
- IN ULONG EaListLength,\r
- IN PULONG EaIndex OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryEaFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG Length,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PVOID EaList OPTIONAL,\r
- IN ULONG EaListLength,\r
- IN PULONG EaIndex OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryEvent(\r
- IN HANDLE EventHandle,\r
- IN EVENT_INFORMATION_CLASS EventInformationClass,\r
- OUT PVOID EventInformation,\r
- IN ULONG EventInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryEvent(\r
- IN HANDLE EventHandle,\r
- IN EVENT_INFORMATION_CLASS EventInformationClass,\r
- OUT PVOID EventInformation,\r
- IN ULONG EventInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryFullAttributesFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryFullAttributesFile(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationAtom(\r
- IN RTL_ATOM Atom,\r
- IN ATOM_INFORMATION_CLASS AtomInformationClass,\r
- OUT PVOID AtomInformation,\r
- IN ULONG AtomInformationLength,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationAtom(\r
- IN RTL_ATOM Atom,\r
- IN ATOM_INFORMATION_CLASS AtomInformationClass,\r
- OUT PVOID AtomInformation,\r
- IN ULONG AtomInformationLength,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID FileInformation,\r
- IN ULONG Length,\r
- IN FILE_INFORMATION_CLASS FileInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationFile(\r
- HANDLE FileHandle,\r
- PIO_STATUS_BLOCK IoStatusBlock,\r
- PVOID FileInformation,\r
- ULONG Length,\r
- FILE_INFORMATION_CLASS FileInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationJobObject(\r
- HANDLE JobHandle,\r
- JOBOBJECTINFOCLASS JobInformationClass,\r
- PVOID JobInformation,\r
- ULONG JobInformationLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationJobObject(\r
- HANDLE JobHandle,\r
- JOBOBJECTINFOCLASS JobInformationClass,\r
- PVOID JobInformation,\r
- ULONG JobInformationLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationPort(\r
- HANDLE PortHandle,\r
- CINT PortInformationClass,\r
- PVOID PortInformation,\r
- ULONG PortInformationLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationPort(\r
- HANDLE PortHandle,\r
- CINT PortInformationClass,\r
- PVOID PortInformation,\r
- ULONG PortInformationLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-#ifndef _NTDDK_\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationProcess(\r
- IN HANDLE ProcessHandle,\r
- IN PROCESSINFOCLASS ProcessInformationClass,\r
- OUT PVOID ProcessInformation,\r
- IN ULONG ProcessInformationLength,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationProcess(\r
- IN HANDLE ProcessHandle,\r
- IN PROCESSINFOCLASS ProcessInformationClass,\r
- OUT PVOID ProcessInformation,\r
- IN ULONG ProcessInformationLength,\r
- OUT PULONG ReturnLength OPTIONAL\r
-);\r
-#endif\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationThread(\r
- IN HANDLE ThreadHandle,\r
- IN THREADINFOCLASS ThreadInformationClass,\r
- OUT PVOID ThreadInformation,\r
- IN ULONG ThreadInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationThread(\r
- IN HANDLE ThreadHandle,\r
- IN THREADINFOCLASS ThreadInformationClass,\r
- OUT PVOID ThreadInformation,\r
- IN ULONG ThreadInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInformationToken(\r
- IN HANDLE TokenHandle,\r
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,\r
- OUT PVOID TokenInformation,\r
- IN ULONG TokenInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInformationToken(\r
- IN HANDLE TokenHandle,\r
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,\r
- OUT PVOID TokenInformation,\r
- IN ULONG TokenInformationLength,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryInstallUILanguage(\r
- PLANGID LanguageId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryInstallUILanguage(\r
- PLANGID LanguageId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryIntervalProfile(\r
- IN KPROFILE_SOURCE ProfileSource,\r
- OUT PULONG Interval\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryIntervalProfile(\r
- OUT PULONG Interval,\r
- OUT KPROFILE_SOURCE ClockSource\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryIoCompletion(\r
- IN HANDLE IoCompletionHandle,\r
- IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,\r
- OUT PVOID IoCompletionInformation,\r
- IN ULONG IoCompletionInformationLength,\r
- OUT PULONG ResultLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryIoCompletion(\r
- IN HANDLE IoCompletionHandle,\r
- IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,\r
- OUT PVOID IoCompletionInformation,\r
- IN ULONG IoCompletionInformationLength,\r
- OUT PULONG ResultLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryKey(\r
- IN HANDLE KeyHandle,\r
- IN KEY_INFORMATION_CLASS KeyInformationClass,\r
- OUT PVOID KeyInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryKey(\r
- IN HANDLE KeyHandle,\r
- IN KEY_INFORMATION_CLASS KeyInformationClass,\r
- OUT PVOID KeyInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryQuotaInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG Length,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PVOID SidList OPTIONAL,\r
- IN ULONG SidListLength,\r
- IN PSID StartSid OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryQuotaInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG Length,\r
- IN BOOLEAN ReturnSingleEntry,\r
- IN PVOID SidList OPTIONAL,\r
- IN ULONG SidListLength,\r
- IN PSID StartSid OPTIONAL,\r
- IN BOOLEAN RestartScan\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryMultipleValueKey(\r
- IN HANDLE KeyHandle,\r
- IN OUT PKEY_VALUE_ENTRY ValueList,\r
- IN ULONG NumberOfValues,\r
- OUT PVOID Buffer,\r
- IN OUT PULONG Length,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryMultipleValueKey(\r
- IN HANDLE KeyHandle,\r
- IN OUT PKEY_VALUE_ENTRY ValueList,\r
- IN ULONG NumberOfValues,\r
- OUT PVOID Buffer,\r
- IN OUT PULONG Length,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryMutant(\r
- IN HANDLE MutantHandle,\r
- IN MUTANT_INFORMATION_CLASS MutantInformationClass,\r
- OUT PVOID MutantInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryMutant(\r
- IN HANDLE MutantHandle,\r
- IN MUTANT_INFORMATION_CLASS MutantInformationClass,\r
- OUT PVOID MutantInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryObject(\r
- IN HANDLE ObjectHandle,\r
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,\r
- OUT PVOID ObjectInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryObject(\r
- IN HANDLE ObjectHandle,\r
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,\r
- OUT PVOID ObjectInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryPerformanceCounter(\r
- IN PLARGE_INTEGER Counter,\r
- IN PLARGE_INTEGER Frequency\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryPerformanceCounter(\r
- IN PLARGE_INTEGER Counter,\r
- IN PLARGE_INTEGER Frequency\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySection(\r
- IN HANDLE SectionHandle,\r
- IN SECTION_INFORMATION_CLASS SectionInformationClass,\r
- OUT PVOID SectionInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySection(\r
- IN HANDLE SectionHandle,\r
- IN SECTION_INFORMATION_CLASS SectionInformationClass,\r
- OUT PVOID SectionInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySecurityObject(\r
- IN HANDLE Handle,\r
- IN SECURITY_INFORMATION SecurityInformation,\r
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySecurityObject(\r
- IN HANDLE Handle,\r
- IN SECURITY_INFORMATION SecurityInformation,\r
- OUT PSECURITY_DESCRIPTOR SecurityDescriptor,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySemaphore(\r
- IN HANDLE SemaphoreHandle,\r
- IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,\r
- OUT PVOID SemaphoreInformation,\r
- IN ULONG Length,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySemaphore(\r
- IN HANDLE SemaphoreHandle,\r
- IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,\r
- OUT PVOID SemaphoreInformation,\r
- IN ULONG Length,\r
- OUT PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySymbolicLinkObject(\r
- IN HANDLE SymLinkObjHandle,\r
- OUT PUNICODE_STRING LinkTarget,\r
- OUT PULONG DataWritten OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySymbolicLinkObject(\r
- IN HANDLE SymLinkObjHandle,\r
- OUT PUNICODE_STRING LinkName,\r
- OUT PULONG DataWritten OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySystemEnvironmentValue(\r
- IN PUNICODE_STRING Name,\r
- OUT PWSTR Value,\r
- ULONG Length,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySystemEnvironmentValue(\r
- IN PUNICODE_STRING Name,\r
- OUT PVOID Value,\r
- ULONG Length,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySystemInformation(\r
- IN SYSTEM_INFORMATION_CLASS SystemInformationClass,\r
- OUT PVOID SystemInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySystemInformation(\r
- IN SYSTEM_INFORMATION_CLASS SystemInformationClass,\r
- OUT PVOID SystemInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQuerySystemTime(\r
- OUT PLARGE_INTEGER CurrentTime\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQuerySystemTime(\r
- OUT PLARGE_INTEGER CurrentTime\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryTimer(\r
- IN HANDLE TimerHandle,\r
- IN TIMER_INFORMATION_CLASS TimerInformationClass,\r
- OUT PVOID TimerInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryTimer(\r
- IN HANDLE TimerHandle,\r
- IN TIMER_INFORMATION_CLASS TimerInformationClass,\r
- OUT PVOID TimerInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryTimerResolution(\r
- OUT PULONG MinimumResolution,\r
- OUT PULONG MaximumResolution,\r
- OUT PULONG ActualResolution\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryTimerResolution(\r
- OUT PULONG MinimumResolution,\r
- OUT PULONG MaximumResolution,\r
- OUT PULONG ActualResolution\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName,\r
- IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,\r
- OUT PVOID KeyValueInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName,\r
- IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,\r
- OUT PVOID KeyValueInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID Address,\r
- IN IN CINT VirtualMemoryInformationClass,\r
- OUT PVOID VirtualMemoryInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID Address,\r
- IN IN CINT VirtualMemoryInformationClass,\r
- OUT PVOID VirtualMemoryInformation,\r
- IN ULONG Length,\r
- OUT PULONG ResultLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueryVolumeInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID FsInformation,\r
- IN ULONG Length,\r
- IN FS_INFORMATION_CLASS FsInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueryVolumeInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID FsInformation,\r
- IN ULONG Length,\r
- IN FS_INFORMATION_CLASS FsInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtQueueApcThread(\r
- HANDLE ThreadHandle,\r
- PKNORMAL_ROUTINE ApcRoutine,\r
- PVOID NormalContext,\r
- PVOID SystemArgument1,\r
- PVOID SystemArgument2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwQueueApcThread(\r
- HANDLE ThreadHandle,\r
- PKNORMAL_ROUTINE ApcRoutine,\r
- PVOID NormalContext,\r
- PVOID SystemArgument1,\r
- PVOID SystemArgument2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRaiseException(\r
- IN PEXCEPTION_RECORD ExceptionRecord,\r
- IN PCONTEXT Context,\r
- IN BOOLEAN SearchFrames\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRaiseException(\r
- IN PEXCEPTION_RECORD ExceptionRecord,\r
- IN PCONTEXT Context,\r
- IN BOOLEAN SearchFrames\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRaiseHardError(\r
- IN NTSTATUS ErrorStatus,\r
- IN ULONG NumberOfParameters,\r
- IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,\r
- IN PVOID *Parameters,\r
- IN HARDERROR_RESPONSE_OPTION ResponseOption,\r
- OUT PHARDERROR_RESPONSE Response\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRaiseHardError(\r
- IN NTSTATUS ErrorStatus,\r
- IN ULONG NumberOfParameters,\r
- IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,\r
- IN PVOID *Parameters,\r
- IN HARDERROR_RESPONSE_OPTION ResponseOption,\r
- OUT PHARDERROR_RESPONSE Response\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReadFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset OPTIONAL,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReadFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- OUT PVOID Buffer,\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset OPTIONAL,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReadFileScatter(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK UserIoStatusBlock,\r
- IN FILE_SEGMENT_ELEMENT BufferDescription[],\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReadFileScatter(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,\r
- IN PVOID UserApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK UserIoStatusBlock,\r
- IN FILE_SEGMENT_ELEMENT BufferDescription[],\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReadRequestData(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE Message,\r
- ULONG Index,\r
- PVOID Buffer,\r
- ULONG BufferLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReadRequestData(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE Message,\r
- ULONG Index,\r
- PVOID Buffer,\r
- ULONG BufferLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReadVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- OUT PVOID Buffer,\r
- IN ULONG NumberOfBytesToRead,\r
- OUT PULONG NumberOfBytesRead\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwReadVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- OUT PVOID Buffer,\r
- IN ULONG NumberOfBytesToRead,\r
- OUT PULONG NumberOfBytesRead\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRegisterThreadTerminatePort(\r
- HANDLE TerminationPort\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRegisterThreadTerminatePort(\r
- HANDLE TerminationPort\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReleaseMutant(\r
- IN HANDLE MutantHandle,\r
- IN PLONG ReleaseCount OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReleaseMutant(\r
- IN HANDLE MutantHandle,\r
- IN PLONG ReleaseCount OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReleaseSemaphore(\r
- IN HANDLE SemaphoreHandle,\r
- IN LONG ReleaseCount,\r
- OUT PLONG PreviousCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReleaseSemaphore(\r
- IN HANDLE SemaphoreHandle,\r
- IN LONG ReleaseCount,\r
- OUT PLONG PreviousCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRemoveIoCompletion(\r
- IN HANDLE IoCompletionHandle,\r
- OUT PVOID *CompletionKey,\r
- OUT PVOID *CompletionContext,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER Timeout OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRemoveIoCompletion(\r
- IN HANDLE IoCompletionHandle,\r
- OUT PVOID *CompletionKey,\r
- OUT PVOID *CompletionContext,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER Timeout OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReplaceKey(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN HANDLE Key,\r
- IN POBJECT_ATTRIBUTES ReplacedObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReplaceKey(\r
- IN POBJECT_ATTRIBUTES ObjectAttributes,\r
- IN HANDLE Key,\r
- IN POBJECT_ATTRIBUTES ReplacedObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcReply\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcReply\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReplyWaitReceivePort(\r
- HANDLE PortHandle,\r
- PULONG PortId,\r
- PLPC_MESSAGE MessageReply,\r
- PLPC_MESSAGE MessageRequest\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReplyWaitReceivePort(\r
- HANDLE PortHandle,\r
- PULONG PortId,\r
- PLPC_MESSAGE MessageReply,\r
- PLPC_MESSAGE MessageRequest\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtReplyWaitReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE ReplyMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwReplyWaitReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE ReplyMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRequestPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcMessage);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRequestPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcMessage\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRequestWaitReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcReply,\r
- PLPC_MESSAGE LpcRequest\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRequestWaitReplyPort(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE LpcReply,\r
- PLPC_MESSAGE LpcRequest\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtResetEvent(\r
- HANDLE EventHandle,\r
- PLONG NumberOfWaitingThreads OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwResetEvent(\r
- HANDLE EventHandle,\r
- PLONG NumberOfWaitingThreads OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtRestoreKey(\r
- HANDLE KeyHandle,\r
- HANDLE FileHandle,\r
- ULONG RestoreFlags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwRestoreKey(\r
- HANDLE KeyHandle,\r
- HANDLE FileHandle,\r
- ULONG RestoreFlags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtResumeThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PULONG SuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwResumeThread(\r
- IN HANDLE ThreadHandle,\r
- OUT PULONG SuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtResumeProcess(\r
- IN HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwResumeProcess(\r
- IN HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSaveKey(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE FileHandle\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSaveKey(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE FileHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSaveKeyEx(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE FileHandle,\r
- IN ULONG Flags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSaveKeyEx(\r
- IN HANDLE KeyHandle,\r
- IN HANDLE FileHandle,\r
- IN ULONG Flags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetBootEntryOrder(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetBootEntryOrder(\r
- IN ULONG Unknown1,\r
- IN ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetBootOptions(\r
- ULONG Unknown1,\r
- ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetBootOptions(\r
- ULONG Unknown1,\r
- ULONG Unknown2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetContextThread(\r
- IN HANDLE ThreadHandle,\r
- IN PCONTEXT Context\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSetContextThread(\r
- IN HANDLE ThreadHandle,\r
- IN PCONTEXT Context\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetDefaultLocale(\r
- IN BOOLEAN UserProfile,\r
- IN LCID DefaultLocaleId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetDefaultLocale(\r
- IN BOOLEAN UserProfile,\r
- IN LCID DefaultLocaleId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetDefaultUILanguage(\r
- LANGID LanguageId\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetDefaultUILanguage(\r
- LANGID LanguageId\r
-);\r
-NTSTATUS\r
-STDCALL\r
-NtSetDefaultHardErrorPort(\r
- IN HANDLE PortHandle\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSetDefaultHardErrorPort(\r
- IN HANDLE PortHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetEaFile(\r
- IN HANDLE FileHandle,\r
- IN PIO_STATUS_BLOCK IoStatusBlock,\r
- PVOID EaBuffer,\r
- ULONG EaBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetEaFile(\r
- IN HANDLE FileHandle,\r
- IN PIO_STATUS_BLOCK IoStatusBlock,\r
- PVOID EaBuffer,\r
- ULONG EaBufferSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetEvent(\r
- IN HANDLE EventHandle,\r
- OUT PLONG PreviousState OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetEvent(\r
- IN HANDLE EventHandle,\r
- OUT PLONG PreviousState OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetHighEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetHighEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-NTSTATUS\r
-STDCALL\r
-NtSetHighWaitLowEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSetHighWaitLowEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationFile(\r
- IN HANDLE FileHandle,\r
- IN PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID FileInformation,\r
- IN ULONG Length,\r
- IN FILE_INFORMATION_CLASS FileInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationFile(\r
- IN HANDLE FileHandle,\r
- IN PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID FileInformation,\r
- IN ULONG Length,\r
- IN FILE_INFORMATION_CLASS FileInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationJobObject(\r
- HANDLE JobHandle,\r
- JOBOBJECTINFOCLASS JobInformationClass,\r
- PVOID JobInformation,\r
- ULONG JobInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationJobObject(\r
- HANDLE JobHandle,\r
- JOBOBJECTINFOCLASS JobInformationClass,\r
- PVOID JobInformation,\r
- ULONG JobInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationKey(\r
- IN HANDLE KeyHandle,\r
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,\r
- IN PVOID KeyInformation,\r
- IN ULONG KeyInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationKey(\r
- IN HANDLE KeyHandle,\r
- IN KEY_SET_INFORMATION_CLASS KeyInformationClass,\r
- IN PVOID KeyInformation,\r
- IN ULONG KeyInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationObject(\r
- IN HANDLE ObjectHandle,\r
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,\r
- IN PVOID ObjectInformation,\r
- IN ULONG Length\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationObject(\r
- IN HANDLE ObjectHandle,\r
- IN OBJECT_INFORMATION_CLASS ObjectInformationClass,\r
- IN PVOID ObjectInformation,\r
- IN ULONG Length\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationProcess(\r
- IN HANDLE ProcessHandle,\r
- IN PROCESSINFOCLASS ProcessInformationClass,\r
- IN PVOID ProcessInformation,\r
- IN ULONG ProcessInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationThread(\r
- IN HANDLE ThreadHandle,\r
- IN THREADINFOCLASS ThreadInformationClass,\r
- IN PVOID ThreadInformation,\r
- IN ULONG ThreadInformationLength\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationThread(\r
- IN HANDLE ThreadHandle,\r
- IN THREADINFOCLASS ThreadInformationClass,\r
- IN PVOID ThreadInformation,\r
- IN ULONG ThreadInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetInformationToken(\r
- IN HANDLE TokenHandle,\r
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,\r
- OUT PVOID TokenInformation,\r
- IN ULONG TokenInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetInformationToken(\r
- IN HANDLE TokenHandle,\r
- IN TOKEN_INFORMATION_CLASS TokenInformationClass,\r
- OUT PVOID TokenInformation,\r
- IN ULONG TokenInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetIoCompletion(\r
- IN HANDLE IoCompletionPortHandle,\r
- IN PVOID CompletionKey,\r
- IN PVOID CompletionContext,\r
- IN NTSTATUS CompletionStatus,\r
- IN ULONG CompletionInformation\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetIoCompletion(\r
- IN HANDLE IoCompletionPortHandle,\r
- IN PVOID CompletionKey,\r
- IN PVOID CompletionContext,\r
- IN NTSTATUS CompletionStatus,\r
- IN ULONG CompletionInformation\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetIntervalProfile(\r
- ULONG Interval,\r
- KPROFILE_SOURCE ClockSource\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetIntervalProfile(\r
- ULONG Interval,\r
- KPROFILE_SOURCE ClockSource\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetLdtEntries(\r
- ULONG Selector1,\r
- LDT_ENTRY LdtEntry1,\r
- ULONG Selector2,\r
- LDT_ENTRY LdtEntry2\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetLowEventPair(\r
- HANDLE EventPair\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetLowEventPair(\r
- HANDLE EventPair\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetLowWaitHighEventPair(\r
- HANDLE EventPair\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetLowWaitHighEventPair(\r
- HANDLE EventPair\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetQuotaInformationFile(\r
- HANDLE FileHandle,\r
- PIO_STATUS_BLOCK IoStatusBlock,\r
- PFILE_QUOTA_INFORMATION Buffer,\r
- ULONG BufferLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetQuotaInformationFile(\r
- HANDLE FileHandle,\r
- PIO_STATUS_BLOCK IoStatusBlock,\r
- PFILE_QUOTA_INFORMATION Buffer,\r
- ULONG BufferLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetSecurityObject(\r
- IN HANDLE Handle,\r
- IN SECURITY_INFORMATION SecurityInformation,\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetSecurityObject(\r
- IN HANDLE Handle,\r
- IN SECURITY_INFORMATION SecurityInformation,\r
- IN PSECURITY_DESCRIPTOR SecurityDescriptor\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetSystemEnvironmentValue(\r
- IN PUNICODE_STRING VariableName,\r
- IN PUNICODE_STRING Value\r
-);\r
-NTSTATUS\r
-STDCALL\r
-ZwSetSystemEnvironmentValue(\r
- IN PUNICODE_STRING VariableName,\r
- IN PUNICODE_STRING Value\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetSystemInformation(\r
- IN SYSTEM_INFORMATION_CLASS SystemInformationClass,\r
- IN PVOID SystemInformation,\r
- IN ULONG SystemInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetSystemInformation(\r
- IN SYSTEM_INFORMATION_CLASS SystemInformationClass,\r
- IN PVOID SystemInformation,\r
- IN ULONG SystemInformationLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetSystemPowerState(\r
- IN POWER_ACTION SystemAction,\r
- IN SYSTEM_POWER_STATE MinSystemState,\r
- IN ULONG Flags\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetSystemTime(\r
- IN PLARGE_INTEGER SystemTime,\r
- IN PLARGE_INTEGER NewSystemTime OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetSystemTime(\r
- IN PLARGE_INTEGER SystemTime,\r
- IN PLARGE_INTEGER NewSystemTime OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetTimer(\r
- IN HANDLE TimerHandle,\r
- IN PLARGE_INTEGER DueTime,\r
- IN PTIMER_APC_ROUTINE TimerApcRoutine,\r
- IN PVOID TimerContext,\r
- IN BOOLEAN WakeTimer,\r
- IN LONG Period OPTIONAL,\r
- OUT PBOOLEAN PreviousState OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetTimerResolution(\r
- IN ULONG RequestedResolution,\r
- IN BOOLEAN SetOrUnset,\r
- OUT PULONG ActualResolution\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetTimerResolution(\r
- IN ULONG RequestedResolution,\r
- IN BOOLEAN SetOrUnset,\r
- OUT PULONG ActualResolution\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetUuidSeed(\r
- IN PUCHAR UuidSeed\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetUuidSeed(\r
- IN PUCHAR UuidSeed\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName,\r
- IN ULONG TitleIndex OPTIONAL,\r
- IN ULONG Type,\r
- IN PVOID Data,\r
- IN ULONG DataSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetValueKey(\r
- IN HANDLE KeyHandle,\r
- IN PUNICODE_STRING ValueName,\r
- IN ULONG TitleIndex OPTIONAL,\r
- IN ULONG Type,\r
- IN PVOID Data,\r
- IN ULONG DataSize\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSetVolumeInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID FsInformation,\r
- IN ULONG Length,\r
- IN FS_INFORMATION_CLASS FsInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSetVolumeInformationFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID FsInformation,\r
- IN ULONG Length,\r
- IN FS_INFORMATION_CLASS FsInformationClass\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtShutdownSystem(\r
- IN SHUTDOWN_ACTION Action\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwShutdownSystem(\r
- IN SHUTDOWN_ACTION Action\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSignalAndWaitForSingleObject(\r
- IN HANDLE SignalObject,\r
- IN HANDLE WaitObject,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSignalAndWaitForSingleObject(\r
- IN HANDLE SignalObject,\r
- IN HANDLE WaitObject,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtStartProfile(\r
- HANDLE ProfileHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwStartProfile(\r
- HANDLE ProfileHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtStopProfile(\r
- HANDLE ProfileHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwStopProfile(\r
- HANDLE ProfileHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSuspendProcess(\r
- IN HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSuspendProcess(\r
- IN HANDLE ProcessHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSuspendThread(\r
- IN HANDLE ThreadHandle,\r
- IN PULONG PreviousSuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwSuspendThread(\r
- IN HANDLE ThreadHandle,\r
- IN PULONG PreviousSuspendCount\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtSystemDebugControl(\r
- DEBUG_CONTROL_CODE ControlCode,\r
- PVOID InputBuffer,\r
- ULONG InputBufferLength,\r
- PVOID OutputBuffer,\r
- ULONG OutputBufferLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTerminateProcess(\r
- IN HANDLE ProcessHandle,\r
- IN NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTerminateProcess(\r
- IN HANDLE ProcessHandle,\r
- IN NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTerminateThread(\r
- IN HANDLE ThreadHandle,\r
- IN NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTerminateThread(\r
- IN HANDLE ThreadHandle,\r
- IN NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTerminateJobObject(\r
- HANDLE JobHandle,\r
- NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTerminateJobObject(\r
- HANDLE JobHandle,\r
- NTSTATUS ExitStatus\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTestAlert(\r
- VOID\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTestAlert(\r
- VOID\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTraceEvent(\r
- IN ULONG TraceHandle,\r
- IN ULONG Flags,\r
- IN ULONG TraceHeaderLength,\r
- IN struct _EVENT_TRACE_HEADER* TraceHeader\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTraceEvent(\r
- IN ULONG TraceHandle,\r
- IN ULONG Flags,\r
- IN ULONG TraceHeaderLength,\r
- IN struct _EVENT_TRACE_HEADER* TraceHeader\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtTranslateFilePath(\r
- ULONG Unknown1,\r
- ULONG Unknown2,\r
- ULONG Unknown3\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwTranslateFilePath(\r
- ULONG Unknown1,\r
- ULONG Unknown2,\r
- ULONG Unknown3\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtUnloadDriver(\r
- IN PUNICODE_STRING DriverServiceName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwUnloadDriver(\r
- IN PUNICODE_STRING DriverServiceName\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtUnloadKey(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwUnloadKey(\r
- IN POBJECT_ATTRIBUTES KeyObjectAttributes\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtUnlockFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PLARGE_INTEGER Lenght,\r
- OUT PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwUnlockFile(\r
- IN HANDLE FileHandle,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PLARGE_INTEGER Lenght,\r
- OUT PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtUnlockVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN ULONG NumberOfBytesToUnlock,\r
- OUT PULONG NumberOfBytesUnlocked OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwUnlockVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN ULONG NumberOfBytesToUnlock,\r
- OUT PULONG NumberOfBytesUnlocked OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtUnmapViewOfSection(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwUnmapViewOfSection(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtVdmControl(\r
- ULONG ControlCode,\r
- PVOID ControlData\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtW32Call(\r
- IN ULONG RoutineIndex,\r
- IN PVOID Argument,\r
- IN ULONG ArgumentLength,\r
- OUT PVOID* Result OPTIONAL,\r
- OUT PULONG ResultLength OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWaitForMultipleObjects(\r
- IN ULONG Count,\r
- IN HANDLE Object[],\r
- IN WAIT_TYPE WaitType,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWaitForMultipleObjects(\r
- IN ULONG Count,\r
- IN HANDLE Object[],\r
- IN WAIT_TYPE WaitType,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWaitForSingleObject(\r
- IN HANDLE Object,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWaitForSingleObject(\r
- IN HANDLE Object,\r
- IN BOOLEAN Alertable,\r
- IN PLARGE_INTEGER Time\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWaitHighEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWaitHighEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWaitLowEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWaitLowEventPair(\r
- IN HANDLE EventPairHandle\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWriteFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID Buffer,\r
- IN ULONG Length,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWriteFile(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN PVOID Buffer,\r
- IN ULONG Length,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWriteFileGather(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN FILE_SEGMENT_ELEMENT BufferDescription[],\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWriteFileGather(\r
- IN HANDLE FileHandle,\r
- IN HANDLE Event OPTIONAL,\r
- IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,\r
- IN PVOID ApcContext OPTIONAL,\r
- OUT PIO_STATUS_BLOCK IoStatusBlock,\r
- IN FILE_SEGMENT_ELEMENT BufferDescription[],\r
- IN ULONG BufferLength,\r
- IN PLARGE_INTEGER ByteOffset,\r
- IN PULONG Key OPTIONAL\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWriteRequestData(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE Message,\r
- ULONG Index,\r
- PVOID Buffer,\r
- ULONG BufferLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWriteRequestData(\r
- HANDLE PortHandle,\r
- PLPC_MESSAGE Message,\r
- ULONG Index,\r
- PVOID Buffer,\r
- ULONG BufferLength,\r
- PULONG ReturnLength\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtWriteVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN PVOID Buffer,\r
- IN ULONG NumberOfBytesToWrite,\r
- OUT PULONG NumberOfBytesWritten\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwWriteVirtualMemory(\r
- IN HANDLE ProcessHandle,\r
- IN PVOID BaseAddress,\r
- IN PVOID Buffer,\r
- IN ULONG NumberOfBytesToWrite,\r
- OUT PULONG NumberOfBytesWritten\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-NtYieldExecution(\r
- VOID\r
-);\r
-\r
-NTSTATUS\r
-STDCALL\r
-ZwYieldExecution(\r
- VOID\r
-);\r
-\r
-\r
-static __inline struct _PEB* NtCurrentPeb (void) \r
-{\r
- struct _PEB * pPeb;\r
-\r
-#if defined(__GNUC__)\r
-\r
- __asm__ __volatile__\r
- (\r
- "movl %%fs:0x30, %0\n" /* fs:30h == Teb->Peb */\r
- : "=r" (pPeb) /* can't have two memory operands */\r
- : /* no inputs */\r
- );\r
-\r
-#elif defined(_MSC_VER)\r
-\r
- __asm mov eax, fs:0x30;\r
- __asm mov pPeb, eax\r
-\r
-#else\r
-#error Unknown compiler for inline assembler\r
-#endif\r
-\r
- return pPeb;\r
-}\r
-#endif\r
+/*
+ * PROJECT: ReactOS Native Headers
+ * FILE: include/ndk/zwfuncs.h
+ * PURPOSE: Defintions for Native Functions not defined in DDK/IFS
+ * PROGRAMMER: Alex Ionescu (alex@relsoft.net)
+ * UPDATE HISTORY:
+ * Created 06/10/04
+ */
+#ifndef _ZWFUNCS_H
+#define _ZWFUNCS_H
+
+/* DEPENDENCIES **************************************************************/
+#define _WMIKM_
+#include <evntrace.h>
+
+/* FUNCTION TYPES ************************************************************/
+
+/* PROTOTYPES ****************************************************************/
+
+NTSTATUS
+NTAPI
+NtAcceptConnectPort(
+ PHANDLE PortHandle,
+ PVOID PortContext OPTIONAL,
+ PPORT_MESSAGE ConnectionRequest,
+ BOOLEAN AcceptConnection,
+ PPORT_VIEW ServerView OPTIONAL,
+ PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAcceptConnectPort(
+ PHANDLE PortHandle,
+ PVOID PortContext OPTIONAL,
+ PPORT_MESSAGE ConnectionRequest,
+ BOOLEAN AcceptConnection,
+ PPORT_VIEW ServerView OPTIONAL,
+ PREMOTE_PORT_VIEW ClientView OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAccessCheck(
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ OUT PPRIVILEGE_SET PrivilegeSet,
+ OUT PULONG ReturnLength,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAccessCheckAndAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ACCESS_MASK DesiredAccess,
+ IN PGENERIC_MAPPING GenericMapping,
+ IN BOOLEAN ObjectCreation,
+ OUT PACCESS_MASK GrantedAccess,
+ OUT PNTSTATUS AccessStatus,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+NTAPI
+NtAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAddAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ IN OUT PRTL_ATOM Atom
+);
+
+NTSTATUS
+NTAPI
+NtAddBootEntry(
+ IN PUNICODE_STRING EntryName,
+ IN PUNICODE_STRING EntryValue
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAddBootEntry(
+ IN PUNICODE_STRING EntryName,
+ IN PUNICODE_STRING EntryValue
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAdjustGroupsToken(
+ IN HANDLE TokenHandle,
+ IN BOOLEAN ResetToDefault,
+ IN PTOKEN_GROUPS NewState,
+ IN ULONG BufferLength,
+ OUT PTOKEN_GROUPS PreviousState OPTIONAL,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAdjustGroupsToken(
+ IN HANDLE TokenHandle,
+ IN BOOLEAN ResetToDefault,
+ IN PTOKEN_GROUPS NewState,
+ IN ULONG BufferLength,
+ OUT PTOKEN_GROUPS PreviousState,
+ OUT PULONG ReturnLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAdjustPrivilegesToken(
+ IN HANDLE TokenHandle,
+ IN BOOLEAN DisableAllPrivileges,
+ IN PTOKEN_PRIVILEGES NewState,
+ IN ULONG BufferLength,
+ OUT PTOKEN_PRIVILEGES PreviousState,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAdjustPrivilegesToken(
+ IN HANDLE TokenHandle,
+ IN BOOLEAN DisableAllPrivileges,
+ IN PTOKEN_PRIVILEGES NewState,
+ IN ULONG BufferLength,
+ OUT PTOKEN_PRIVILEGES PreviousState,
+ OUT PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtAlertResumeThread(
+ IN HANDLE ThreadHandle,
+ OUT PULONG SuspendCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAlertResumeThread(
+ IN HANDLE ThreadHandle,
+ OUT PULONG SuspendCount
+);
+
+NTSTATUS
+NTAPI
+NtAlertThread(
+ IN HANDLE ThreadHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAlertThread(
+ IN HANDLE ThreadHandle
+);
+
+NTSTATUS
+NTAPI
+NtAllocateLocallyUniqueId(
+ OUT LUID *LocallyUniqueId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAllocateLocallyUniqueId(
+ OUT PLUID Luid
+);
+
+NTSTATUS
+NTAPI
+NtAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAllocateUuids(
+ PULARGE_INTEGER Time,
+ PULONG Range,
+ PULONG Sequence,
+ PUCHAR Seed
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtAllocateVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN OUT PVOID *BaseAddress,
+ IN ULONG ZeroBits,
+ IN OUT PULONG RegionSize,
+ IN ULONG AllocationType,
+ IN ULONG Protect
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAllocateVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN OUT PVOID *BaseAddress,
+ IN ULONG ZeroBits,
+ IN OUT PULONG RegionSize,
+ IN ULONG AllocationType,
+ IN ULONG Protect
+);
+
+NTSTATUS
+NTAPI
+NtAssignProcessToJobObject(
+ HANDLE JobHandle,
+ HANDLE ProcessHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwAssignProcessToJobObject(
+ HANDLE JobHandle,
+ HANDLE ProcessHandle
+);
+
+NTSTATUS
+NTAPI
+NtCallbackReturn(
+ PVOID Result,
+ ULONG ResultLength,
+ NTSTATUS Status
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCallbackReturn(
+ PVOID Result,
+ ULONG ResultLength,
+ NTSTATUS Status
+);
+
+NTSTATUS
+NTAPI
+NtCancelIoFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCancelIoFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock
+);
+
+NTSTATUS
+NTAPI
+NtCancelTimer(
+ IN HANDLE TimerHandle,
+ OUT PBOOLEAN CurrentState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtClearEvent(
+ IN HANDLE EventHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwClearEvent(
+ IN HANDLE EventHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCreateDebugObject(
+ OUT PHANDLE DebugHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN KillProcessOnExit
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateDebugObject(
+ OUT PHANDLE DebugHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN KillProcessOnExit
+);
+
+NTSTATUS
+NTAPI
+NtCreateJobObject(
+ PHANDLE JobHandle,
+ ACCESS_MASK DesiredAccess,
+ POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateJobObject(
+ PHANDLE JobHandle,
+ ACCESS_MASK DesiredAccess,
+ POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtClose(
+ IN HANDLE Handle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwClose(
+ IN HANDLE Handle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCloseObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCloseObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+NTAPI
+NtCompleteConnectPort(
+ HANDLE PortHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCompleteConnectPort(
+ HANDLE PortHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtContinue(
+ IN PCONTEXT Context,
+ IN BOOLEAN TestAlert
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwContinue(
+ IN PCONTEXT Context,
+ IN BOOLEAN TestAlert
+);
+
+NTSTATUS
+NTAPI
+NtCreateDirectoryObject(
+ OUT PHANDLE DirectoryHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateDirectoryObject(
+ OUT PHANDLE DirectoryHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtCreateEvent(
+ OUT PHANDLE EventHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN EVENT_TYPE EventType,
+ IN BOOLEAN InitialState
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateEvent(
+ OUT PHANDLE EventHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN EVENT_TYPE EventType,
+ IN BOOLEAN InitialState
+);
+
+NTSTATUS
+NTAPI
+NtCreateEventPair(
+ OUT PHANDLE EventPairHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateEventPair(
+ OUT PHANDLE EventPairHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCreateFile(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER AllocationSize OPTIONAL,
+ IN ULONG FileAttributes,
+ IN ULONG ShareAccess,
+ IN ULONG CreateDisposition,
+ IN ULONG CreateOptions,
+ IN PVOID EaBuffer OPTIONAL,
+ IN ULONG EaLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateFile(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER AllocationSize OPTIONAL,
+ IN ULONG FileAttributes,
+ IN ULONG ShareAccess,
+ IN ULONG CreateDisposition,
+ IN ULONG CreateOptions,
+ IN PVOID EaBuffer OPTIONAL,
+ IN ULONG EaLength
+);
+
+NTSTATUS
+NTAPI
+NtCreateIoCompletion(
+ OUT PHANDLE IoCompletionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG NumberOfConcurrentThreads
+ );
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateIoCompletion(
+ OUT PHANDLE IoCompletionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG NumberOfConcurrentThreads
+ );
+
+NTSTATUS
+NTAPI
+NtCreateKey(
+ OUT PHANDLE KeyHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG TitleIndex,
+ IN PUNICODE_STRING Class OPTIONAL,
+ IN ULONG CreateOptions,
+ IN PULONG Disposition OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateKey(
+ OUT PHANDLE KeyHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG TitleIndex,
+ IN PUNICODE_STRING Class OPTIONAL,
+ IN ULONG CreateOptions,
+ IN PULONG Disposition OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtCreateMailslotFile(
+ OUT PHANDLE MailSlotFileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG FileAttributes,
+ IN ULONG ShareAccess,
+ IN ULONG MaxMessageSize,
+ IN PLARGE_INTEGER TimeOut
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateMailslotFile(
+ OUT PHANDLE MailSlotFileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG FileAttributes,
+ IN ULONG ShareAccess,
+ IN ULONG MaxMessageSize,
+ IN PLARGE_INTEGER TimeOut
+);
+
+NTSTATUS
+NTAPI
+NtCreateMutant(
+ OUT PHANDLE MutantHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN InitialOwner
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateMutant(
+ OUT PHANDLE MutantHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN BOOLEAN InitialOwner
+);
+
+NTSTATUS
+NTAPI
+NtCreateNamedPipeFile(
+ OUT PHANDLE NamedPipeFileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG ShareAccess,
+ IN ULONG CreateDisposition,
+ IN ULONG CreateOptions,
+ IN ULONG WriteModeMessage,
+ IN ULONG ReadModeMessage,
+ IN ULONG NonBlocking,
+ IN ULONG MaxInstances,
+ IN ULONG InBufferSize,
+ IN ULONG OutBufferSize,
+ IN PLARGE_INTEGER DefaultTimeOut
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateNamedPipeFile(
+ OUT PHANDLE NamedPipeFileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG ShareAccess,
+ IN ULONG CreateDisposition,
+ IN ULONG CreateOptions,
+ IN ULONG WriteModeMessage,
+ IN ULONG ReadModeMessage,
+ IN ULONG NonBlocking,
+ IN ULONG MaxInstances,
+ IN ULONG InBufferSize,
+ IN ULONG OutBufferSize,
+ IN PLARGE_INTEGER DefaultTimeOut
+);
+
+NTSTATUS
+NTAPI
+NtCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePagingFile(
+ IN PUNICODE_STRING FileName,
+ IN PLARGE_INTEGER InitialSize,
+ IN PLARGE_INTEGER MaxiumSize,
+ IN ULONG Reserved
+);
+
+NTSTATUS
+NTAPI
+NtCreatePort(
+ PHANDLE PortHandle,
+ POBJECT_ATTRIBUTES ObjectAttributes,
+ ULONG MaxConnectionInfoLength,
+ ULONG MaxMessageLength,
+ ULONG MaxPoolUsage
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreatePort(
+ PHANDLE PortHandle,
+ POBJECT_ATTRIBUTES ObjectAttributes,
+ ULONG MaxConnectionInfoLength,
+ ULONG MaxMessageLength,
+ ULONG MaxPoolUsage
+);
+
+NTSTATUS
+NTAPI
+NtCreateProcess(
+ OUT PHANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ParentProcess,
+ IN BOOLEAN InheritObjectTable,
+ IN HANDLE SectionHandle OPTIONAL,
+ IN HANDLE DebugPort OPTIONAL,
+ IN HANDLE ExceptionPort OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateProcess(
+ OUT PHANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ParentProcess,
+ IN BOOLEAN InheritObjectTable,
+ IN HANDLE SectionHandle OPTIONAL,
+ IN HANDLE DebugPort OPTIONAL,
+ IN HANDLE ExceptionPort OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN HANDLE ProcessHandle,
+ IN PVOID ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN KPROFILE_SOURCE Source,
+ IN KAFFINITY ProcessorMask
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateProfile(
+ OUT PHANDLE ProfileHandle,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN ULONG ImageBase,
+ IN ULONG ImageSize,
+ IN ULONG Granularity,
+ OUT PVOID Buffer,
+ IN ULONG ProfilingSize,
+ IN ULONG ClockSource,
+ IN ULONG ProcessorMask
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtCreateSection(
+ OUT PHANDLE SectionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN PLARGE_INTEGER MaximumSize OPTIONAL,
+ IN ULONG SectionPageProtection OPTIONAL,
+ IN ULONG AllocationAttributes,
+ IN HANDLE FileHandle OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateSection(
+ OUT PHANDLE SectionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN PLARGE_INTEGER MaximumSize OPTIONAL,
+ IN ULONG SectionPageProtection OPTIONAL,
+ IN ULONG AllocationAttributes,
+ IN HANDLE FileHandle OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtCreateSemaphore(
+ OUT PHANDLE SemaphoreHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN LONG InitialCount,
+ IN LONG MaximumCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateSemaphore(
+ OUT PHANDLE SemaphoreHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN LONG InitialCount,
+ IN LONG MaximumCount
+);
+
+NTSTATUS
+NTAPI
+NtCreateSymbolicLinkObject(
+ OUT PHANDLE SymbolicLinkHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PUNICODE_STRING Name
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateSymbolicLinkObject(
+ OUT PHANDLE SymbolicLinkHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PUNICODE_STRING Name
+);
+
+NTSTATUS
+NTAPI
+NtCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN HANDLE ProcessHandle,
+ OUT PCLIENT_ID ClientId,
+ IN PCONTEXT ThreadContext,
+ IN PINITIAL_TEB UserStack,
+ IN BOOLEAN CreateSuspended
+);
+
+NTSTATUS
+NTAPI
+NtCreateTimer(
+ OUT PHANDLE TimerHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN TIMER_TYPE TimerType
+);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateTimer(
+ OUT PHANDLE TimerHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN TIMER_TYPE TimerType
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtCreateToken(
+ OUT PHANDLE TokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN TOKEN_TYPE TokenType,
+ IN PLUID AuthenticationId,
+ IN PLARGE_INTEGER ExpirationTime,
+ IN PTOKEN_USER TokenUser,
+ IN PTOKEN_GROUPS TokenGroups,
+ IN PTOKEN_PRIVILEGES TokenPrivileges,
+ IN PTOKEN_OWNER TokenOwner,
+ IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
+ IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
+ IN PTOKEN_SOURCE TokenSource
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateToken(
+ OUT PHANDLE TokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN TOKEN_TYPE TokenType,
+ IN PLUID AuthenticationId,
+ IN PLARGE_INTEGER ExpirationTime,
+ IN PTOKEN_USER TokenUser,
+ IN PTOKEN_GROUPS TokenGroups,
+ IN PTOKEN_PRIVILEGES TokenPrivileges,
+ IN PTOKEN_OWNER TokenOwner,
+ IN PTOKEN_PRIMARY_GROUP TokenPrimaryGroup,
+ IN PTOKEN_DEFAULT_DACL TokenDefaultDacl,
+ IN PTOKEN_SOURCE TokenSource
+);
+
+NTSTATUS
+NTAPI
+NtCreateWaitablePort(
+ PHANDLE PortHandle,
+ POBJECT_ATTRIBUTES ObjectAttributes,
+ ULONG MaxConnectInfoLength,
+ ULONG MaxDataLength,
+ ULONG NPMessageQueueSize OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwCreateWaitablePort(
+ PHANDLE PortHandle,
+ POBJECT_ATTRIBUTES ObjectAttributes,
+ ULONG MaxConnectInfoLength,
+ ULONG MaxDataLength,
+ ULONG NPMessageQueueSize OPTIONAL
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryDebugFilterState(
+ ULONG ComponentId,
+ ULONG Level
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtDebugContinue(
+ IN HANDLE DebugObject,
+ IN PCLIENT_ID AppClientId,
+ IN NTSTATUS ContinueStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDebugContinue(
+ IN HANDLE DebugObject,
+ IN PCLIENT_ID AppClientId,
+ IN NTSTATUS ContinueStatus
+);
+
+NTSTATUS
+NTAPI
+NtDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDelayExecution(
+ IN BOOLEAN Alertable,
+ IN LARGE_INTEGER *Interval
+);
+
+NTSTATUS
+NTAPI
+NtDeleteAtom(
+ IN RTL_ATOM Atom
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteAtom(
+ IN RTL_ATOM Atom
+);
+
+NTSTATUS
+NTAPI
+NtDeleteBootEntry(
+ IN PUNICODE_STRING EntryName,
+ IN PUNICODE_STRING EntryValue
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteBootEntry(
+ IN PUNICODE_STRING EntryName,
+ IN PUNICODE_STRING EntryValue
+);
+
+NTSTATUS
+NTAPI
+NtDeleteFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtDeleteKey(
+ IN HANDLE KeyHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteKey(
+ IN HANDLE KeyHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+NtDeleteObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN BOOLEAN GenerateOnClose
+);
+
+NTSTATUS
+NTAPI
+NtDeleteValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeleteValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtDeviceIoControlFile(
+ IN HANDLE DeviceHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG IoControlCode,
+ IN PVOID InputBuffer,
+ IN ULONG InputBufferSize,
+ OUT PVOID OutputBuffer,
+ IN ULONG OutputBufferSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDeviceIoControlFile(
+ IN HANDLE DeviceHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG IoControlCode,
+ IN PVOID InputBuffer,
+ IN ULONG InputBufferSize,
+ OUT PVOID OutputBuffer,
+ IN ULONG OutputBufferSize
+);
+
+NTSTATUS
+NTAPI
+NtDisplayString(
+ IN PUNICODE_STRING DisplayString
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDisplayString(
+ IN PUNICODE_STRING DisplayString
+);
+
+NTSTATUS
+NTAPI
+NtDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDuplicateObject(
+ IN HANDLE SourceProcessHandle,
+ IN HANDLE SourceHandle,
+ IN HANDLE TargetProcessHandle,
+ OUT PHANDLE TargetHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ IN ULONG Options
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtDuplicateToken(
+ IN HANDLE ExistingTokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN BOOLEAN EffectiveOnly,
+ IN TOKEN_TYPE TokenType,
+ OUT PHANDLE NewTokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwDuplicateToken(
+ IN HANDLE ExistingTokenHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
+ IN BOOLEAN EffectiveOnly,
+ IN TOKEN_TYPE TokenType,
+ OUT PHANDLE NewTokenHandle
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwEnumerateBootEntries(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwEnumerateKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtEnumerateValueKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
+ OUT PVOID KeyValueInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwEnumerateValueKey(
+ IN HANDLE KeyHandle,
+ IN ULONG Index,
+ IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
+ OUT PVOID KeyValueInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwExtendSection(
+ IN HANDLE SectionHandle,
+ IN PLARGE_INTEGER NewMaximumSize
+);
+
+NTSTATUS
+NTAPI
+NtFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFindAtom(
+ IN PWSTR AtomName,
+ IN ULONG AtomNameLength,
+ OUT PRTL_ATOM Atom OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtFlushBuffersFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock
+);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFlushBuffersFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtFlushInstructionCache(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToFlush
+);
+
+NTSTATUS
+NTAPI
+NtFlushKey(
+ IN HANDLE KeyHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFlushKey(
+ IN HANDLE KeyHandle
+);
+
+NTSTATUS
+NTAPI
+NtFlushVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToFlush,
+ OUT PULONG NumberOfBytesFlushed OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtFlushWriteBuffer(VOID);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFlushWriteBuffer(VOID);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtFreeVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
+ IN ULONG FreeType
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFreeVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN PULONG RegionSize,
+ IN ULONG FreeType
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtFsControlFile(
+ IN HANDLE DeviceHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG IoControlCode,
+ IN PVOID InputBuffer,
+ IN ULONG InputBufferSize,
+ OUT PVOID OutputBuffer,
+ IN ULONG OutputBufferSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwFsControlFile(
+ IN HANDLE DeviceHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG IoControlCode,
+ IN PVOID InputBuffer,
+ IN ULONG InputBufferSize,
+ OUT PVOID OutputBuffer,
+ IN ULONG OutputBufferSize
+);
+
+NTSTATUS
+NTAPI
+NtGetContextThread(
+ IN HANDLE ThreadHandle,
+ OUT PCONTEXT Context
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwGetContextThread(
+ IN HANDLE ThreadHandle,
+ OUT PCONTEXT Context
+);
+
+NTSTATUS
+NTAPI
+NtGetPlugPlayEvent(
+ IN ULONG Reserved1,
+ IN ULONG Reserved2,
+ OUT PPLUGPLAY_EVENT_BLOCK Buffer,
+ IN ULONG BufferSize
+);
+
+ULONG
+NTAPI
+NtGetTickCount(
+ VOID
+);
+
+NTSYSAPI
+ULONG
+NTAPI
+ZwGetTickCount(
+ VOID
+);
+
+NTSTATUS
+NTAPI
+NtImpersonateClientOfPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE ClientMessage
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwImpersonateClientOfPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE ClientMessage
+);
+
+NTSTATUS
+NTAPI
+NtImpersonateThread(
+ IN HANDLE ThreadHandle,
+ IN HANDLE ThreadToImpersonate,
+ IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwImpersonateThread(
+ IN HANDLE ThreadHandle,
+ IN HANDLE ThreadToImpersonate,
+ IN PSECURITY_QUALITY_OF_SERVICE SecurityQualityOfService
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtInitiatePowerAction(
+ POWER_ACTION SystemAction,
+ SYSTEM_POWER_STATE MinSystemState,
+ ULONG Flags,
+ BOOLEAN Asynchronous
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwInitiatePowerAction(
+ POWER_ACTION SystemAction,
+ SYSTEM_POWER_STATE MinSystemState,
+ ULONG Flags,
+ BOOLEAN Asynchronous
+);
+
+NTSTATUS
+NTAPI
+NtInitializeRegistry(
+ BOOLEAN SetUpBoot
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwInitializeRegistry(
+ BOOLEAN SetUpBoot
+);
+
+NTSTATUS
+NTAPI
+NtIsProcessInJob(
+ IN HANDLE ProcessHandle,
+ IN HANDLE JobHandle OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwIsProcessInJob(
+ IN HANDLE ProcessHandle,
+ IN HANDLE JobHandle OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtListenPort(HANDLE PortHandle,
+ PPORT_MESSAGE ConnectionRequest
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwListenPort(HANDLE PortHandle,
+ PPORT_MESSAGE ConnectionRequest
+);
+
+NTSTATUS
+NTAPI
+NtLoadDriver(
+ IN PUNICODE_STRING DriverServiceName
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadDriver(
+ IN PUNICODE_STRING DriverServiceName
+);
+
+NTSTATUS
+NTAPI
+NtLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLoadKey2(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes,
+ IN POBJECT_ATTRIBUTES FileObjectAttributes,
+ IN ULONG Flags
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtLockFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Length,
+ IN ULONG Key,
+ IN BOOLEAN FailImmediatedly,
+ IN BOOLEAN ExclusiveLock
+);
+
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLockFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Length,
+ IN ULONG Key,
+ IN BOOLEAN FailImmediatedly,
+ IN BOOLEAN ExclusiveLock
+);
+
+NTSTATUS
+NTAPI
+NtLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwLockVirtualMemory(
+ HANDLE ProcessHandle,
+ PVOID BaseAddress,
+ ULONG NumberOfBytesToLock,
+ PULONG NumberOfBytesLocked
+);
+
+NTSTATUS
+NTAPI
+NtMakePermanentObject(
+ IN HANDLE Object
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwMakePermanentObject(
+ IN HANDLE Object
+);
+
+NTSTATUS
+NTAPI
+NtMakeTemporaryObject(
+ IN HANDLE Handle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwMakeTemporaryObject(
+ IN HANDLE Handle
+);
+
+NTSTATUS
+NTAPI
+NtMapViewOfSection(
+ IN HANDLE SectionHandle,
+ IN HANDLE ProcessHandle,
+ IN OUT PVOID *BaseAddress,
+ IN ULONG ZeroBits,
+ IN ULONG CommitSize,
+ IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
+ IN OUT PULONG ViewSize,
+ IN SECTION_INHERIT InheritDisposition,
+ IN ULONG AllocationType,
+ IN ULONG AccessProtection
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwMapViewOfSection(
+ IN HANDLE SectionHandle,
+ IN HANDLE ProcessHandle,
+ IN OUT PVOID *BaseAddress,
+ IN ULONG ZeroBits,
+ IN ULONG CommitSize,
+ IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
+ IN OUT PULONG ViewSize,
+ IN SECTION_INHERIT InheritDisposition,
+ IN ULONG AllocationType,
+ IN ULONG AccessProtection
+);
+
+NTSTATUS
+NTAPI
+NtNotifyChangeDirectoryFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG BufferSize,
+ IN ULONG CompletionFilter,
+ IN BOOLEAN WatchTree
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwNotifyChangeDirectoryFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG BufferSize,
+ IN ULONG CompletionFilter,
+ IN BOOLEAN WatchTree
+);
+
+NTSTATUS
+NTAPI
+NtNotifyChangeKey(
+ IN HANDLE KeyHandle,
+ IN HANDLE Event,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG CompletionFilter,
+ IN BOOLEAN Asynchroneous,
+ OUT PVOID ChangeBuffer,
+ IN ULONG Length,
+ IN BOOLEAN WatchSubtree
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwNotifyChangeKey(
+ IN HANDLE KeyHandle,
+ IN HANDLE Event,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG CompletionFilter,
+ IN BOOLEAN Asynchroneous,
+ OUT PVOID ChangeBuffer,
+ IN ULONG Length,
+ IN BOOLEAN WatchSubtree
+);
+
+NTSTATUS
+NTAPI
+NtOpenDirectoryObject(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenDirectoryObject(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenEvent(
+ OUT PHANDLE EventHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenEvent(
+ OUT PHANDLE EventHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenEventPair(
+ OUT PHANDLE EventPairHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenEventPair(
+ OUT PHANDLE EventPairHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenFile(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG ShareAccess,
+ IN ULONG OpenOptions
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenFile(
+ OUT PHANDLE FileHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN ULONG ShareAccess,
+ IN ULONG OpenOptions
+);
+
+NTSTATUS
+NTAPI
+NtOpenIoCompletion(
+ OUT PHANDLE CompetionPort,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenIoCompletion(
+ OUT PHANDLE CompetionPort,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenJobObject(
+ PHANDLE JobHandle,
+ ACCESS_MASK DesiredAccess,
+ POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenJobObject(
+ PHANDLE JobHandle,
+ ACCESS_MASK DesiredAccess,
+ POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenKey(
+ OUT PHANDLE KeyHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenKey(
+ OUT PHANDLE KeyHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenMutant(
+ OUT PHANDLE MutantHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenMutant(
+ OUT PHANDLE MutantHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN PUNICODE_STRING ObjectTypeName,
+ IN PUNICODE_STRING ObjectName,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN ULONG GrantedAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN ObjectCreation,
+ IN BOOLEAN AccessGranted,
+ OUT PBOOLEAN GenerateOnClose
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenProcess(
+ OUT PHANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PCLIENT_ID ClientId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenProcess(
+ OUT PHANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PCLIENT_ID ClientId
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenProcessToken(
+ IN HANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenProcessToken(
+ IN HANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenProcessTokenEx(
+ IN HANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenProcessTokenEx(
+ IN HANDLE ProcessHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN ULONG HandleAttributes,
+ OUT PHANDLE TokenHandle
+);
+
+NTSTATUS
+NTAPI
+NtOpenSection(
+ OUT PHANDLE SectionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenSection(
+ OUT PHANDLE SectionHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenSemaphore(
+ OUT PHANDLE SemaphoreHandle,
+ IN ACCESS_MASK DesiredAcces,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenSemaphore(
+ OUT PHANDLE SemaphoreHandle,
+ IN ACCESS_MASK DesiredAcces,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenSymbolicLinkObject(
+ OUT PHANDLE SymbolicLinkHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenSymbolicLinkObject(
+ OUT PHANDLE SymbolicLinkHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtOpenThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PCLIENT_ID ClientId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenThread(
+ OUT PHANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN PCLIENT_ID ClientId
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenThreadToken(
+ IN HANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN BOOLEAN OpenAsSelf,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenThreadToken(
+ IN HANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN BOOLEAN OpenAsSelf,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtOpenThreadTokenEx(
+ IN HANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN BOOLEAN OpenAsSelf,
+ IN ULONG HandleAttributes,
+ OUT PHANDLE TokenHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenThreadTokenEx(
+ IN HANDLE ThreadHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN BOOLEAN OpenAsSelf,
+ IN ULONG HandleAttributes,
+ OUT PHANDLE TokenHandle
+);
+
+NTSTATUS
+NTAPI
+NtOpenTimer(
+ OUT PHANDLE TimerHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwOpenTimer(
+ OUT PHANDLE TimerHandle,
+ IN ACCESS_MASK DesiredAccess,
+ IN POBJECT_ATTRIBUTES ObjectAttributes
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtPlugPlayControl(
+ IN PLUGPLAY_CONTROL_CLASS PlugPlayControlClass,
+ IN OUT PVOID Buffer,
+ IN ULONG BufferSize
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtPowerInformation(
+ POWER_INFORMATION_LEVEL PowerInformationLevel,
+ PVOID InputBuffer,
+ ULONG InputBufferLength,
+ PVOID OutputBuffer,
+ ULONG OutputBufferLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwPowerInformation(
+ POWER_INFORMATION_LEVEL PowerInformationLevel,
+ PVOID InputBuffer,
+ ULONG InputBufferLength,
+ PVOID OutputBuffer,
+ ULONG OutputBufferLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtPrivilegeCheck(
+ IN HANDLE ClientToken,
+ IN PPRIVILEGE_SET RequiredPrivileges,
+ IN PBOOLEAN Result
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwPrivilegeCheck(
+ IN HANDLE ClientToken,
+ IN PPRIVILEGE_SET RequiredPrivileges,
+ IN PBOOLEAN Result
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtPrivilegedServiceAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PUNICODE_STRING ServiceName,
+ IN HANDLE ClientToken,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwPrivilegedServiceAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PUNICODE_STRING ServiceName,
+ IN HANDLE ClientToken,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtPrivilegeObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwPrivilegeObjectAuditAlarm(
+ IN PUNICODE_STRING SubsystemName,
+ IN PVOID HandleId,
+ IN HANDLE ClientToken,
+ IN ULONG DesiredAccess,
+ IN PPRIVILEGE_SET Privileges,
+ IN BOOLEAN AccessGranted
+);
+
+NTSTATUS
+NTAPI
+NtProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwProtectVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID *BaseAddress,
+ IN ULONG *NumberOfBytesToProtect,
+ IN ULONG NewAccessProtection,
+ OUT PULONG OldAccessProtection
+);
+
+NTSTATUS
+NTAPI
+NtPulseEvent(
+ IN HANDLE EventHandle,
+ IN PLONG PulseCount OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwPulseEvent(
+ IN HANDLE EventHandle,
+ IN PLONG PulseCount OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryAttributesFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PFILE_BASIC_INFORMATION FileInformation
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryAttributesFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PFILE_BASIC_INFORMATION FileInformation
+);
+
+
+NTSTATUS
+NTAPI
+NtQueryBootEntryOrder(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryBootEntryOrder(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtQueryBootOptions(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryBootOptions(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtQueryDefaultLocale(
+ IN BOOLEAN UserProfile,
+ OUT PLCID DefaultLocaleId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDefaultLocale(
+ IN BOOLEAN UserProfile,
+ OUT PLCID DefaultLocaleId
+);
+
+NTSTATUS
+NTAPI
+NtQueryDefaultUILanguage(
+ PLANGID LanguageId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDefaultUILanguage(
+ PLANGID LanguageId
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryDirectoryFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID FileInformation,
+ IN ULONG Length,
+ IN FILE_INFORMATION_CLASS FileInformationClass,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PUNICODE_STRING FileName OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDirectoryFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID FileInformation,
+ IN ULONG Length,
+ IN FILE_INFORMATION_CLASS FileInformationClass,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PUNICODE_STRING FileName OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+
+NTSTATUS
+NTAPI
+NtQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryDirectoryObject(
+ IN HANDLE DirectoryHandle,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN BOOLEAN ReturnSingleEntry,
+ IN BOOLEAN RestartScan,
+ IN OUT PULONG Context,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryEaFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG Length,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PVOID EaList OPTIONAL,
+ IN ULONG EaListLength,
+ IN PULONG EaIndex OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryEaFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG Length,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PVOID EaList OPTIONAL,
+ IN ULONG EaListLength,
+ IN PULONG EaIndex OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtQueryEvent(
+ IN HANDLE EventHandle,
+ IN EVENT_INFORMATION_CLASS EventInformationClass,
+ OUT PVOID EventInformation,
+ IN ULONG EventInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryEvent(
+ IN HANDLE EventHandle,
+ IN EVENT_INFORMATION_CLASS EventInformationClass,
+ OUT PVOID EventInformation,
+ IN ULONG EventInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryFullAttributesFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryFullAttributesFile(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
+);
+
+NTSTATUS
+NTAPI
+NtQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationAtom(
+ IN RTL_ATOM Atom,
+ IN ATOM_INFORMATION_CLASS AtomInformationClass,
+ OUT PVOID AtomInformation,
+ IN ULONG AtomInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID FileInformation,
+ IN ULONG Length,
+ IN FILE_INFORMATION_CLASS FileInformationClass
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationFile(
+ HANDLE FileHandle,
+ PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID FileInformation,
+ ULONG Length,
+ FILE_INFORMATION_CLASS FileInformationClass
+);
+
+NTSTATUS
+NTAPI
+NtQueryInformationJobObject(
+ HANDLE JobHandle,
+ JOBOBJECTINFOCLASS JobInformationClass,
+ PVOID JobInformation,
+ ULONG JobInformationLength,
+ PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationJobObject(
+ HANDLE JobHandle,
+ JOBOBJECTINFOCLASS JobInformationClass,
+ PVOID JobInformation,
+ ULONG JobInformationLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryInformationPort(
+ HANDLE PortHandle,
+ PORT_INFORMATION_CLASS PortInformationClass,
+ PVOID PortInformation,
+ ULONG PortInformationLength,
+ PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationPort(
+ HANDLE PortHandle,
+ PORT_INFORMATION_CLASS PortInformationClass,
+ PVOID PortInformation,
+ ULONG PortInformationLength,
+ PULONG ReturnLength
+);
+
+#ifndef _NTDDK_
+NTSTATUS
+NTAPI
+NtQueryInformationProcess(
+ IN HANDLE ProcessHandle,
+ IN PROCESSINFOCLASS ProcessInformationClass,
+ OUT PVOID ProcessInformation,
+ IN ULONG ProcessInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationProcess(
+ IN HANDLE ProcessHandle,
+ IN PROCESSINFOCLASS ProcessInformationClass,
+ OUT PVOID ProcessInformation,
+ IN ULONG ProcessInformationLength,
+ OUT PULONG ReturnLength OPTIONAL
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtQueryInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ OUT PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ OUT PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength,
+ OUT PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryInstallUILanguage(
+ PLANGID LanguageId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryInstallUILanguage(
+ PLANGID LanguageId
+);
+
+NTSTATUS
+NTAPI
+NtQueryIntervalProfile(
+ IN KPROFILE_SOURCE ProfileSource,
+ OUT PULONG Interval
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryIntervalProfile(
+ OUT PULONG Interval,
+ OUT KPROFILE_SOURCE ClockSource
+);
+
+NTSTATUS
+NTAPI
+NtQueryIoCompletion(
+ IN HANDLE IoCompletionHandle,
+ IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
+ OUT PVOID IoCompletionInformation,
+ IN ULONG IoCompletionInformationLength,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryIoCompletion(
+ IN HANDLE IoCompletionHandle,
+ IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
+ OUT PVOID IoCompletionInformation,
+ IN ULONG IoCompletionInformationLength,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryKey(
+ IN HANDLE KeyHandle,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryKey(
+ IN HANDLE KeyHandle,
+ IN KEY_INFORMATION_CLASS KeyInformationClass,
+ OUT PVOID KeyInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryQuotaInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG Length,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PVOID SidList OPTIONAL,
+ IN ULONG SidListLength,
+ IN PSID StartSid OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryQuotaInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG Length,
+ IN BOOLEAN ReturnSingleEntry,
+ IN PVOID SidList OPTIONAL,
+ IN ULONG SidListLength,
+ IN PSID StartSid OPTIONAL,
+ IN BOOLEAN RestartScan
+);
+
+NTSTATUS
+NTAPI
+NtQueryMultipleValueKey(
+ IN HANDLE KeyHandle,
+ IN OUT PKEY_VALUE_ENTRY ValueList,
+ IN ULONG NumberOfValues,
+ OUT PVOID Buffer,
+ IN OUT PULONG Length,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryMultipleValueKey(
+ IN HANDLE KeyHandle,
+ IN OUT PKEY_VALUE_ENTRY ValueList,
+ IN ULONG NumberOfValues,
+ OUT PVOID Buffer,
+ IN OUT PULONG Length,
+ OUT PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryMutant(
+ IN HANDLE MutantHandle,
+ IN MUTANT_INFORMATION_CLASS MutantInformationClass,
+ OUT PVOID MutantInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryMutant(
+ IN HANDLE MutantHandle,
+ IN MUTANT_INFORMATION_CLASS MutantInformationClass,
+ OUT PVOID MutantInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ OUT PVOID ObjectInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQueryPerformanceCounter(
+ IN PLARGE_INTEGER Counter,
+ IN PLARGE_INTEGER Frequency
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryPerformanceCounter(
+ IN PLARGE_INTEGER Counter,
+ IN PLARGE_INTEGER Frequency
+);
+
+NTSTATUS
+NTAPI
+NtQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySection(
+ IN HANDLE SectionHandle,
+ IN SECTION_INFORMATION_CLASS SectionInformationClass,
+ OUT PVOID SectionInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtQuerySemaphore(
+ IN HANDLE SemaphoreHandle,
+ IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
+ OUT PVOID SemaphoreInformation,
+ IN ULONG Length,
+ OUT PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySemaphore(
+ IN HANDLE SemaphoreHandle,
+ IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
+ OUT PVOID SemaphoreInformation,
+ IN ULONG Length,
+ OUT PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQuerySymbolicLinkObject(
+ IN HANDLE SymLinkObjHandle,
+ OUT PUNICODE_STRING LinkTarget,
+ OUT PULONG DataWritten OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySymbolicLinkObject(
+ IN HANDLE SymLinkObjHandle,
+ OUT PUNICODE_STRING LinkName,
+ OUT PULONG DataWritten OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtQuerySystemEnvironmentValue(
+ IN PUNICODE_STRING Name,
+ OUT PWSTR Value,
+ ULONG Length,
+ PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySystemEnvironmentValue(
+ IN PUNICODE_STRING Name,
+ OUT PVOID Value,
+ ULONG Length,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtQuerySystemInformation(
+ IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
+ OUT PVOID SystemInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySystemInformation(
+ IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
+ OUT PVOID SystemInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtQuerySystemTime(
+ OUT PLARGE_INTEGER CurrentTime
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQuerySystemTime(
+ OUT PLARGE_INTEGER CurrentTime
+);
+
+NTSTATUS
+NTAPI
+NtQueryTimer(
+ IN HANDLE TimerHandle,
+ IN TIMER_INFORMATION_CLASS TimerInformationClass,
+ OUT PVOID TimerInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryTimer(
+ IN HANDLE TimerHandle,
+ IN TIMER_INFORMATION_CLASS TimerInformationClass,
+ OUT PVOID TimerInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryTimerResolution(
+ OUT PULONG MinimumResolution,
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryTimerResolution(
+ OUT PULONG MinimumResolution,
+ OUT PULONG MaximumResolution,
+ OUT PULONG ActualResolution
+);
+
+NTSTATUS
+NTAPI
+NtQueryValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName,
+ IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
+ OUT PVOID KeyValueInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName,
+ IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
+ OUT PVOID KeyValueInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSTATUS
+NTAPI
+NtQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID Address,
+ IN MEMORY_INFORMATION_CLASS VirtualMemoryInformationClass,
+ OUT PVOID VirtualMemoryInformation,
+ IN ULONG Length,
+ OUT PULONG ResultLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtQueryVolumeInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID FsInformation,
+ IN ULONG Length,
+ IN FS_INFORMATION_CLASS FsInformationClass
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueryVolumeInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID FsInformation,
+ IN ULONG Length,
+ IN FS_INFORMATION_CLASS FsInformationClass
+);
+
+NTSTATUS
+NTAPI
+NtQueueApcThread(
+ HANDLE ThreadHandle,
+ PKNORMAL_ROUTINE ApcRoutine,
+ PVOID NormalContext,
+ PVOID SystemArgument1,
+ PVOID SystemArgument2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwQueueApcThread(
+ HANDLE ThreadHandle,
+ PKNORMAL_ROUTINE ApcRoutine,
+ PVOID NormalContext,
+ PVOID SystemArgument1,
+ PVOID SystemArgument2
+);
+
+NTSTATUS
+NTAPI
+NtRaiseException(
+ IN PEXCEPTION_RECORD ExceptionRecord,
+ IN PCONTEXT Context,
+ IN BOOLEAN SearchFrames
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRaiseException(
+ IN PEXCEPTION_RECORD ExceptionRecord,
+ IN PCONTEXT Context,
+ IN BOOLEAN SearchFrames
+);
+
+NTSTATUS
+NTAPI
+NtRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN ULONG UnicodeStringParameterMask,
+ IN PULONG_PTR Parameters,
+ IN ULONG ValidResponseOptions,
+ OUT PULONG Response
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRaiseHardError(
+ IN NTSTATUS ErrorStatus,
+ IN ULONG NumberOfParameters,
+ IN PUNICODE_STRING UnicodeStringParameterMask OPTIONAL,
+ IN PVOID *Parameters,
+ IN HARDERROR_RESPONSE_OPTION ResponseOption,
+ OUT PHARDERROR_RESPONSE Response
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtReadFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset OPTIONAL,
+ IN PULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReadFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ OUT PVOID Buffer,
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset OPTIONAL,
+ IN PULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtReadFileScatter(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK UserIoStatusBlock,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReadFileScatter(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL,
+ IN PVOID UserApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK UserIoStatusBlock,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtReadRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReadRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtReadVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ OUT PVOID Buffer,
+ IN ULONG NumberOfBytesToRead,
+ OUT PULONG NumberOfBytesRead
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReadVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ OUT PVOID Buffer,
+ IN ULONG NumberOfBytesToRead,
+ OUT PULONG NumberOfBytesRead
+);
+
+NTSTATUS
+NTAPI
+NtRegisterThreadTerminatePort(
+ HANDLE TerminationPort
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRegisterThreadTerminatePort(
+ HANDLE TerminationPort
+);
+
+NTSTATUS
+NTAPI
+NtReleaseMutant(
+ IN HANDLE MutantHandle,
+ IN PLONG ReleaseCount OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReleaseMutant(
+ IN HANDLE MutantHandle,
+ IN PLONG ReleaseCount OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtReleaseSemaphore(
+ IN HANDLE SemaphoreHandle,
+ IN LONG ReleaseCount,
+ OUT PLONG PreviousCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReleaseSemaphore(
+ IN HANDLE SemaphoreHandle,
+ IN LONG ReleaseCount,
+ OUT PLONG PreviousCount
+);
+
+NTSTATUS
+NTAPI
+NtRemoveIoCompletion(
+ IN HANDLE IoCompletionHandle,
+ OUT PVOID *CompletionKey,
+ OUT PVOID *CompletionContext,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER Timeout OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRemoveIoCompletion(
+ IN HANDLE IoCompletionHandle,
+ OUT PVOID *CompletionKey,
+ OUT PVOID *CompletionContext,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER Timeout OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtReplaceKey(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN HANDLE Key,
+ IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReplaceKey(
+ IN POBJECT_ATTRIBUTES ObjectAttributes,
+ IN HANDLE Key,
+ IN POBJECT_ATTRIBUTES ReplacedObjectAttributes
+);
+
+NTSTATUS
+NTAPI
+NtReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcReply
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcReply
+);
+
+NTSTATUS
+NTAPI
+NtReplyWaitReceivePort(
+ HANDLE PortHandle,
+ PVOID *PortContext OPTIONAL,
+ PPORT_MESSAGE ReplyMessage OPTIONAL,
+ PPORT_MESSAGE ReceiveMessage
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReplyWaitReceivePort(
+ HANDLE PortHandle,
+ PVOID *PortContext OPTIONAL,
+ PPORT_MESSAGE ReplyMessage,
+ PPORT_MESSAGE ReceiveMessage
+);
+
+NTSTATUS
+NTAPI
+NtReplyWaitReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE ReplyMessage
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwReplyWaitReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE ReplyMessage
+);
+
+NTSTATUS
+NTAPI
+NtRequestPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcMessage);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRequestPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcMessage
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtRequestWaitReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcReply,
+ PPORT_MESSAGE LpcRequest
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRequestWaitReplyPort(
+ HANDLE PortHandle,
+ PPORT_MESSAGE LpcReply,
+ PPORT_MESSAGE LpcRequest
+);
+
+NTSTATUS
+NTAPI
+NtResetEvent(
+ HANDLE EventHandle,
+ PLONG NumberOfWaitingThreads OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwResetEvent(
+ HANDLE EventHandle,
+ PLONG NumberOfWaitingThreads OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtRestoreKey(
+ HANDLE KeyHandle,
+ HANDLE FileHandle,
+ ULONG RestoreFlags
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwRestoreKey(
+ HANDLE KeyHandle,
+ HANDLE FileHandle,
+ ULONG RestoreFlags
+);
+
+NTSTATUS
+NTAPI
+NtResumeThread(
+ IN HANDLE ThreadHandle,
+ OUT PULONG SuspendCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwResumeThread(
+ IN HANDLE ThreadHandle,
+ OUT PULONG SuspendCount
+);
+
+NTSTATUS
+NTAPI
+NtResumeProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwResumeProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+NTAPI
+NtSaveKey(
+ IN HANDLE KeyHandle,
+ IN HANDLE FileHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSaveKey(
+ IN HANDLE KeyHandle,
+ IN HANDLE FileHandle
+);
+
+NTSTATUS
+NTAPI
+NtSaveKeyEx(
+ IN HANDLE KeyHandle,
+ IN HANDLE FileHandle,
+ IN ULONG Flags
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSaveKeyEx(
+ IN HANDLE KeyHandle,
+ IN HANDLE FileHandle,
+ IN ULONG Flags
+);
+
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSecureConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PSID Sid OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSecureConnectPort(
+ PHANDLE PortHandle,
+ PUNICODE_STRING PortName,
+ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
+ PPORT_VIEW ClientView OPTIONAL,
+ PSID Sid OPTIONAL,
+ PREMOTE_PORT_VIEW ServerView OPTIONAL,
+ PULONG MaxMessageLength OPTIONAL,
+ PVOID ConnectionInformation OPTIONAL,
+ PULONG ConnectionInformationLength OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtSetBootEntryOrder(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetBootEntryOrder(
+ IN ULONG Unknown1,
+ IN ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtSetBootOptions(
+ ULONG Unknown1,
+ ULONG Unknown2
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetBootOptions(
+ ULONG Unknown1,
+ ULONG Unknown2
+);
+
+NTSTATUS
+NTAPI
+NtSetContextThread(
+ IN HANDLE ThreadHandle,
+ IN PCONTEXT Context
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetContextThread(
+ IN HANDLE ThreadHandle,
+ IN PCONTEXT Context
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+NtSetDebugFilterState(
+ ULONG ComponentId,
+ ULONG Level,
+ BOOLEAN State
+);
+
+NTSTATUS
+NTAPI
+NtSetDefaultLocale(
+ IN BOOLEAN UserProfile,
+ IN LCID DefaultLocaleId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetDefaultLocale(
+ IN BOOLEAN UserProfile,
+ IN LCID DefaultLocaleId
+);
+
+NTSTATUS
+NTAPI
+NtSetDefaultUILanguage(
+ LANGID LanguageId
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetDefaultUILanguage(
+ LANGID LanguageId
+);
+
+NTSTATUS
+NTAPI
+NtSetDefaultHardErrorPort(
+ IN HANDLE PortHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetDefaultHardErrorPort(
+ IN HANDLE PortHandle
+);
+
+NTSTATUS
+NTAPI
+NtSetEaFile(
+ IN HANDLE FileHandle,
+ IN PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID EaBuffer,
+ ULONG EaBufferSize
+);
+
+#ifdef NTOS_MODE_USER
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetEaFile(
+ IN HANDLE FileHandle,
+ IN PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID EaBuffer,
+ ULONG EaBufferSize
+);
+#endif
+
+NTSTATUS
+NTAPI
+NtSetEvent(
+ IN HANDLE EventHandle,
+ OUT PLONG PreviousState OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetEvent(
+ IN HANDLE EventHandle,
+ OUT PLONG PreviousState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtSetHighEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetHighEventPair(
+ IN HANDLE EventPairHandle
+);
+NTSTATUS
+NTAPI
+NtSetHighWaitLowEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetHighWaitLowEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationFile(
+ IN HANDLE FileHandle,
+ IN PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID FileInformation,
+ IN ULONG Length,
+ IN FILE_INFORMATION_CLASS FileInformationClass
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationFile(
+ IN HANDLE FileHandle,
+ IN PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID FileInformation,
+ IN ULONG Length,
+ IN FILE_INFORMATION_CLASS FileInformationClass
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationJobObject(
+ HANDLE JobHandle,
+ JOBOBJECTINFOCLASS JobInformationClass,
+ PVOID JobInformation,
+ ULONG JobInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationJobObject(
+ HANDLE JobHandle,
+ JOBOBJECTINFOCLASS JobInformationClass,
+ PVOID JobInformation,
+ ULONG JobInformationLength
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationKey(
+ IN HANDLE KeyHandle,
+ IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
+ IN PVOID KeyInformation,
+ IN ULONG KeyInformationLength
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationObject(
+ IN HANDLE ObjectHandle,
+ IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
+ IN PVOID ObjectInformation,
+ IN ULONG Length
+);
+
+NTSTATUS
+NTAPI
+NtSetInformationProcess(
+ IN HANDLE ProcessHandle,
+ IN PROCESSINFOCLASS ProcessInformationClass,
+ IN PVOID ProcessInformation,
+ IN ULONG ProcessInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ IN PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationThread(
+ IN HANDLE ThreadHandle,
+ IN THREADINFOCLASS ThreadInformationClass,
+ IN PVOID ThreadInformation,
+ IN ULONG ThreadInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetInformationToken(
+ IN HANDLE TokenHandle,
+ IN TOKEN_INFORMATION_CLASS TokenInformationClass,
+ OUT PVOID TokenInformation,
+ IN ULONG TokenInformationLength
+);
+
+NTSTATUS
+NTAPI
+NtSetIoCompletion(
+ IN HANDLE IoCompletionPortHandle,
+ IN PVOID CompletionKey,
+ IN PVOID CompletionContext,
+ IN NTSTATUS CompletionStatus,
+ IN ULONG CompletionInformation
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetIoCompletion(
+ IN HANDLE IoCompletionPortHandle,
+ IN PVOID CompletionKey,
+ IN PVOID CompletionContext,
+ IN NTSTATUS CompletionStatus,
+ IN ULONG CompletionInformation
+);
+
+NTSTATUS
+NTAPI
+NtSetIntervalProfile(
+ ULONG Interval,
+ KPROFILE_SOURCE ClockSource
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetIntervalProfile(
+ ULONG Interval,
+ KPROFILE_SOURCE ClockSource
+);
+
+NTSTATUS
+NTAPI
+NtSetLdtEntries(
+ ULONG Selector1,
+ LDT_ENTRY LdtEntry1,
+ ULONG Selector2,
+ LDT_ENTRY LdtEntry2
+);
+
+NTSTATUS
+NTAPI
+NtSetLowEventPair(
+ HANDLE EventPair
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetLowEventPair(
+ HANDLE EventPair
+);
+
+NTSTATUS
+NTAPI
+NtSetLowWaitHighEventPair(
+ HANDLE EventPair
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetLowWaitHighEventPair(
+ HANDLE EventPair
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetQuotaInformationFile(
+ HANDLE FileHandle,
+ PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID Buffer,
+ ULONG BufferLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetQuotaInformationFile(
+ HANDLE FileHandle,
+ PIO_STATUS_BLOCK IoStatusBlock,
+ PVOID Buffer,
+ ULONG BufferLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetSecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetSecurityObject(
+ IN HANDLE Handle,
+ IN SECURITY_INFORMATION SecurityInformation,
+ IN PSECURITY_DESCRIPTOR SecurityDescriptor
+);
+
+NTSTATUS
+NTAPI
+NtSetSystemEnvironmentValue(
+ IN PUNICODE_STRING VariableName,
+ IN PUNICODE_STRING Value
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetSystemEnvironmentValue(
+ IN PUNICODE_STRING VariableName,
+ IN PUNICODE_STRING Value
+);
+
+NTSTATUS
+NTAPI
+NtSetSystemInformation(
+ IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
+ IN PVOID SystemInformation,
+ IN ULONG SystemInformationLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetSystemInformation(
+ IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
+ IN PVOID SystemInformation,
+ IN ULONG SystemInformationLength
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetSystemPowerState(
+ IN POWER_ACTION SystemAction,
+ IN SYSTEM_POWER_STATE MinSystemState,
+ IN ULONG Flags
+);
+
+NTSTATUS
+NTAPI
+NtSetSystemTime(
+ IN PLARGE_INTEGER SystemTime,
+ IN PLARGE_INTEGER NewSystemTime OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetSystemTime(
+ IN PLARGE_INTEGER SystemTime,
+ IN PLARGE_INTEGER NewSystemTime OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtSetTimer(
+ IN HANDLE TimerHandle,
+ IN PLARGE_INTEGER DueTime,
+ IN PTIMER_APC_ROUTINE TimerApcRoutine,
+ IN PVOID TimerContext,
+ IN BOOLEAN WakeTimer,
+ IN LONG Period OPTIONAL,
+ OUT PBOOLEAN PreviousState OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtSetTimerResolution(
+ IN ULONG RequestedResolution,
+ IN BOOLEAN SetOrUnset,
+ OUT PULONG ActualResolution
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetTimerResolution(
+ IN ULONG RequestedResolution,
+ IN BOOLEAN SetOrUnset,
+ OUT PULONG ActualResolution
+);
+
+NTSTATUS
+NTAPI
+NtSetUuidSeed(
+ IN PUCHAR UuidSeed
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetUuidSeed(
+ IN PUCHAR UuidSeed
+);
+
+NTSTATUS
+NTAPI
+NtSetValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName,
+ IN ULONG TitleIndex OPTIONAL,
+ IN ULONG Type,
+ IN PVOID Data,
+ IN ULONG DataSize
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetValueKey(
+ IN HANDLE KeyHandle,
+ IN PUNICODE_STRING ValueName,
+ IN ULONG TitleIndex OPTIONAL,
+ IN ULONG Type,
+ IN PVOID Data,
+ IN ULONG DataSize
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtSetVolumeInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID FsInformation,
+ IN ULONG Length,
+ IN FS_INFORMATION_CLASS FsInformationClass
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSetVolumeInformationFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID FsInformation,
+ IN ULONG Length,
+ IN FS_INFORMATION_CLASS FsInformationClass
+);
+
+NTSTATUS
+NTAPI
+NtShutdownSystem(
+ IN SHUTDOWN_ACTION Action
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwShutdownSystem(
+ IN SHUTDOWN_ACTION Action
+);
+
+NTSTATUS
+NTAPI
+NtSignalAndWaitForSingleObject(
+ IN HANDLE SignalObject,
+ IN HANDLE WaitObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSignalAndWaitForSingleObject(
+ IN HANDLE SignalObject,
+ IN HANDLE WaitObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+NTAPI
+NtStartProfile(
+ HANDLE ProfileHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwStartProfile(
+ HANDLE ProfileHandle
+);
+
+NTSTATUS
+NTAPI
+NtStopProfile(
+ HANDLE ProfileHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwStopProfile(
+ HANDLE ProfileHandle
+);
+
+NTSTATUS
+NTAPI
+NtSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendProcess(
+ IN HANDLE ProcessHandle
+);
+
+NTSTATUS
+NTAPI
+NtSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwSuspendThread(
+ IN HANDLE ThreadHandle,
+ IN PULONG PreviousSuspendCount
+);
+
+NTSTATUS
+NTAPI
+NtSystemDebugControl(
+ DEBUG_CONTROL_CODE ControlCode,
+ PVOID InputBuffer,
+ ULONG InputBufferLength,
+ PVOID OutputBuffer,
+ ULONG OutputBufferLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtTerminateProcess(
+ IN HANDLE ProcessHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTerminateProcess(
+ IN HANDLE ProcessHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSTATUS
+NTAPI
+NtTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTerminateThread(
+ IN HANDLE ThreadHandle,
+ IN NTSTATUS ExitStatus
+);
+
+NTSTATUS
+NTAPI
+NtTerminateJobObject(
+ HANDLE JobHandle,
+ NTSTATUS ExitStatus
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTerminateJobObject(
+ HANDLE JobHandle,
+ NTSTATUS ExitStatus
+);
+
+NTSTATUS
+NTAPI
+NtTestAlert(
+ VOID
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTestAlert(
+ VOID
+);
+
+NTSTATUS
+NTAPI
+NtTraceEvent(
+ IN ULONG TraceHandle,
+ IN ULONG Flags,
+ IN ULONG TraceHeaderLength,
+ IN struct _EVENT_TRACE_HEADER* TraceHeader
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTraceEvent(
+ IN ULONG TraceHandle,
+ IN ULONG Flags,
+ IN ULONG TraceHeaderLength,
+ IN struct _EVENT_TRACE_HEADER* TraceHeader
+);
+
+NTSTATUS
+NTAPI
+NtTranslateFilePath(
+ ULONG Unknown1,
+ ULONG Unknown2,
+ ULONG Unknown3
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwTranslateFilePath(
+ ULONG Unknown1,
+ ULONG Unknown2,
+ ULONG Unknown3
+);
+
+NTSTATUS
+NTAPI
+NtUnloadDriver(
+ IN PUNICODE_STRING DriverServiceName
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnloadDriver(
+ IN PUNICODE_STRING DriverServiceName
+);
+
+NTSTATUS
+NTAPI
+NtUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnloadKey(
+ IN POBJECT_ATTRIBUTES KeyObjectAttributes
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT ULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockFile(
+ IN HANDLE FileHandle,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PLARGE_INTEGER Lenght,
+ OUT ULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtUnlockVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnlockVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN ULONG NumberOfBytesToUnlock,
+ OUT PULONG NumberOfBytesUnlocked OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtUnmapViewOfSection(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwUnmapViewOfSection(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress
+);
+
+NTSTATUS
+NTAPI
+NtVdmControl(
+ ULONG ControlCode,
+ PVOID ControlData
+);
+
+NTSTATUS
+NTAPI
+NtW32Call(
+ IN ULONG RoutineIndex,
+ IN PVOID Argument,
+ IN ULONG ArgumentLength,
+ OUT PVOID* Result OPTIONAL,
+ OUT PULONG ResultLength OPTIONAL
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtWaitForDebugEvent(
+ IN HANDLE DebugObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Timeout OPTIONAL,
+ OUT PDBGUI_WAIT_STATE_CHANGE StateChange
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitForDebugEvent(
+ IN HANDLE DebugObject,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Timeout OPTIONAL,
+ OUT PDBGUI_WAIT_STATE_CHANGE StateChange
+);
+
+NTSTATUS
+NTAPI
+NtWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitForMultipleObjects(
+ IN ULONG Count,
+ IN HANDLE Object[],
+ IN WAIT_TYPE WaitType,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+NTAPI
+NtWaitForSingleObject(
+ IN HANDLE Object,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitForSingleObject(
+ IN HANDLE Object,
+ IN BOOLEAN Alertable,
+ IN PLARGE_INTEGER Time
+);
+
+NTSTATUS
+NTAPI
+NtWaitHighEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitHighEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSTATUS
+NTAPI
+NtWaitLowEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWaitLowEventPair(
+ IN HANDLE EventPairHandle
+);
+
+NTSYSCALLAPI
+NTSTATUS
+NTAPI
+NtWriteFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID Buffer,
+ IN ULONG Length,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWriteFile(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN PVOID Buffer,
+ IN ULONG Length,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWriteFileGather(
+ IN HANDLE FileHandle,
+ IN HANDLE Event OPTIONAL,
+ IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
+ IN PVOID ApcContext OPTIONAL,
+ OUT PIO_STATUS_BLOCK IoStatusBlock,
+ IN FILE_SEGMENT_ELEMENT BufferDescription[],
+ IN ULONG BufferLength,
+ IN PLARGE_INTEGER ByteOffset,
+ IN PULONG Key OPTIONAL
+);
+
+NTSTATUS
+NTAPI
+NtWriteRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWriteRequestData(
+ HANDLE PortHandle,
+ PPORT_MESSAGE Message,
+ ULONG Index,
+ PVOID Buffer,
+ ULONG BufferLength,
+ PULONG ReturnLength
+);
+
+NTSTATUS
+NTAPI
+NtWriteVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwWriteVirtualMemory(
+ IN HANDLE ProcessHandle,
+ IN PVOID BaseAddress,
+ IN PVOID Buffer,
+ IN ULONG NumberOfBytesToWrite,
+ OUT PULONG NumberOfBytesWritten
+);
+
+NTSTATUS
+NTAPI
+NtYieldExecution(
+ VOID
+);
+
+NTSYSAPI
+NTSTATUS
+NTAPI
+ZwYieldExecution(
+ VOID
+);
+
+#endif