ReactOS  0.4.12-dev-396-g37af787
zwfuncs.h File Reference

Go to the source code of this file.

Macros

#define NtCurrentProcess()   ( (HANDLE)(LONG_PTR) -1 )
 
#define ZwCurrentProcess()   NtCurrentProcess()
 
#define NtCurrentThread()   ( (HANDLE)(LONG_PTR) -2 )
 
#define ZwCurrentThread()   NtCurrentThread()
 

Functions

 $if (_WDMDDK_) $endif(_WDMDDK_) $if(_NTDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwAllocateLocallyUniqueId(_Out_ PLUID Luid)
 
 _IRQL_requires_max_ (PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwTerminateProcess(_In_opt_ HANDLE ProcessHandle
 
 $endif (_NTDDK_) $if(_NTIFS_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwQueryEaFile(_In_ HANDLE FileHandle
 
_Out_ PIO_STATUS_BLOCK _Out_writes_bytes_ (Length) PVOID Buffer
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_reads_bytes_opt_ (EaListLength) PVOID EaList
 
_Out_ PIO_STATUS_BLOCK _In_reads_bytes_ (Length) PVOID Buffer
 
 $endif (_NTIFS_) $if(_WDMDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_reads_bytes_opt_ (EaLength) PVOID EaBuffer
 
 _IRQL_requires_max_ (APC_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwCreateSection(_Out_ PHANDLE SectionHandle
 
 _Post_satisfies_ (return< 0)) _When_(Length > 0
 
 _Post_satisfies_ (return<=0)) NTSYSAPI NTSTATUS NTAPI ZwEnumerateKey(_In_ HANDLE KeyHandle
 
_In_ ULONG _In_ KEY_INFORMATION_CLASS _Out_writes_bytes_opt_ (Length) PVOID KeyInformation
 
_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG _In_reads_bytes_opt_ (DataSize) PVOID Data
 
 $endif (_WDMDDK_) $if(_NTDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSTATUS NTAPI ZwCancelTimer(_In_ HANDLE TimerHandle
 
 __drv_allocatesMem (TimerObject)) NTSTATUS NTAPI ZwCreateTimer(_Out_ PHANDLE TimerHandle
 
_In_ THREADINFOCLASS _In_reads_bytes_ (ThreadInformationLength) PVOID ThreadInformation
 
 _In_reads_bytes_opt_ (InputBufferLength) PVOID InputBuffer
 
_In_ ULONG _Out_writes_bytes_opt_ (OutputBufferLength) PVOID OutputBuffer
 
_In_ OBJECT_INFORMATION_CLASS _Out_writes_bytes_opt_ (ObjectInformationLength) PVOID ObjectInformation
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _Out_writes_bytes_opt_ (BufferLength) PVOID Buffer
 
_Must_inspect_result_ _At_BaseAddress (Mem)) __kernel_entryNTSYSAPINTSTATUSNTAPIZwAllocateVirtualMemory(_In_ HANDLE ProcessHandle, _Inout_ _Outptr_result_buffer_(*RegionSize) PVOID *BaseAddress, _In_ ULONG_PTR ZeroBits, _Inout_ PSIZE_T RegionSize, _In_ ULONG AllocationType, _In_ ULONG Protect
 
_Inout_ __drv_freesMem (Mem) PVOID *BaseAddress
 
 _When_ (Timeout==NULL, _IRQL_requires_max_(APC_LEVEL)) _When_(Timeout -> QuadPart !=0
 
 _IRQL_requires_max_ (DISPATCH_LEVEL)) NTSYSAPI NTSTATUS NTAPI ZwWaitForSingleObject(_In_ HANDLE Handle
 
_In_ TOKEN_INFORMATION_CLASS _Out_writes_bytes_to_opt_ (Length, *ResultLength) PVOID TokenInformation
 
_In_ SECURITY_INFORMATION _Out_writes_bytes_to_ (Length, *ResultLength) PSECURITY_DESCRIPTOR SecurityDescriptor
 
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _Out_writes_bytes_ (TransactionManagerInformationLength) PVOID TransactionManagerInformation
 
_In_ KTMOBJECT_TYPE _Inout_updates_bytes_ (ObjectCursorLength) PKTMOBJECT_CURSOR ObjectCursor
 
_In_ TRANSACTION_INFORMATION_CLASS _Out_writes_bytes_ (TransactionInformationLength) PVOID TransactionInformation
 
_In_ RESOURCEMANAGER_INFORMATION_CLASS _Out_writes_bytes_ (ResourceManagerInformationLength) PVOID ResourceManagerInformation
 
_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_reads_bytes_ (ResourceManagerInformationLength) PVOID ResourceManagerInformation
 
_In_ ENLISTMENT_INFORMATION_CLASS _Out_writes_bytes_ (EnlistmentInformationLength) PVOID EnlistmentInformation
 
_In_ ENLISTMENT_INFORMATION_CLASS _In_reads_bytes_ (EnlistmentInformationLength) PVOID EnlistmentInformation
 
NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
 
NTSYSCALLAPI NTSTATUS NTAPI ZwSinglePhaseReject (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_reads_bytes_opt_ (SidListLength) PVOID SidList
 
NTSYSAPI NTSTATUS NTAPI ZwNotifyChangeMultipleKeys (_In_ HANDLE MasterKeyHandle, _In_opt_ ULONG Count, _In_opt_ OBJECT_ATTRIBUTES SubordinateObjects[], _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_opt_ PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)
 
NTSYSAPI NTSTATUS NTAPI ZwQueryMultipleValueKey (_In_ HANDLE KeyHandle, _Inout_ PKEY_VALUE_ENTRY ValueEntries, _In_ ULONG EntryCount, _Out_ PVOID ValueBuffer, _Inout_ PULONG BufferLength, _Out_opt_ PULONG RequiredBufferLength)
 
_In_ __drv_strictTypeMatch (__drv_typeConst) KEY_SET_INFORMATION_CLASS KeySetInformationClass
 
_In_ _In_reads_bytes_ (KeySetInformationLength) PVOID KeySetInformation
 
_In_ TIMER_SET_INFORMATION_CLASS _Inout_updates_bytes_opt_ (TimerSetInformationLength) PVOID TimerSetInformation
 
_In_ TOKEN_INFORMATION_CLASS _In_reads_bytes_ (TokenInformationLength) PVOID TokenInformation
 
NTSYSAPI NTSTATUS NTAPI ZwAlertThread (_In_ HANDLE ThreadHandle)
 
NTSYSAPI NTSTATUS NTAPI ZwAccessCheckAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PBOOLEAN AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
 
NTSYSAPI NTSTATUS NTAPI ZwClearEvent (_In_ HANDLE EventHandle)
 
NTSYSAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
 
NTSYSAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject (_Out_ PHANDLE SymbolicLinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PUNICODE_STRING TargetName)
 
NTSYSAPI NTSTATUS NTAPI ZwFlushInstructionCache (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ ULONG FlushSize)
 
NTSYSAPI NTSTATUS NTAPI ZwFlushBuffersFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
 
NTSYSAPI NTSTATUS NTAPI ZwLoadKey (_In_ POBJECT_ATTRIBUTES KeyObjectAttributes, _In_ POBJECT_ATTRIBUTES FileObjectAttributes)
 
NTSYSAPI NTSTATUS NTAPI ZwOpenProcessToken (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
 
NTSYSAPI NTSTATUS NTAPI ZwOpenThread (_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PCLIENT_ID ClientId)
 
NTSYSAPI NTSTATUS NTAPI ZwOpenThreadToken (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _Out_ PHANDLE TokenHandle)
 
NTSYSAPI NTSTATUS NTAPI ZwPulseEvent (_In_ HANDLE EventHandle, _In_opt_ PLONG PulseCount)
 
NTSYSAPI NTSTATUS NTAPI ZwQueryDefaultLocale (_In_ BOOLEAN UserProfile, _Out_ PLCID DefaultLocaleId)
 
NTSYSAPI NTSTATUS NTAPI ZwQueryInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _Out_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength, _Out_opt_ PULONG ReturnLength)
 
NTSYSAPI NTSTATUS NTAPI ZwReplaceKey (_In_ POBJECT_ATTRIBUTES NewFileObjectAttributes, _In_ HANDLE KeyHandle, _In_ POBJECT_ATTRIBUTES OldFileObjectAttributes)
 
NTSYSAPI NTSTATUS NTAPI ZwResetEvent (_In_ HANDLE EventHandle, _Out_opt_ PLONG NumberOfWaitingThreads)
 
NTSYSAPI NTSTATUS NTAPI ZwSaveKey (_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle)
 
NTSYSAPI NTSTATUS NTAPI ZwSetDefaultLocale (_In_ BOOLEAN UserProfile, _In_ LCID DefaultLocaleId)
 
NTSYSAPI NTSTATUS NTAPI ZwSetInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _In_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength)
 
NTSYSAPI NTSTATUS NTAPI ZwSetSystemTime (_In_ PLARGE_INTEGER NewTime, _Out_opt_ PLARGE_INTEGER OldTime)
 
NTSYSAPI NTSTATUS NTAPI ZwUnloadKey (_In_ POBJECT_ATTRIBUTES KeyObjectAttributes)
 
NTSYSAPI NTSTATUS NTAPI ZwWaitForMultipleObjects (_In_ ULONG HandleCount, _In_ PHANDLE Handles, _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
 
NTSYSAPI NTSTATUS NTAPI ZwYieldExecution (VOID)
 

Variables

_In_ NTSTATUS ExitStatus
 
_In_ ACCESS_MASK DesiredAccess
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES ObjectAttributes
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _In_opt_ PCLIENT_ID ClientId
 
_Out_ PIO_STATUS_BLOCK IoStatusBlock
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG Length
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN ReturnSingleEntry
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG EaListLength
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG EaIndex
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG _In_ BOOLEAN RestartScan
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN EffectiveOnly
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE TokenType
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE _Out_ PHANDLE NewTokenHandle
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER AllocationSize
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG FileAttributes
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG ShareAccess
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG CreateDisposition
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG CreateOptions
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG EaLength
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG TitleIndex
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING Class
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _Out_opt_ PULONG Disposition
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER MaximumSize
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG SectionPageProtection
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG AllocationAttributes
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_opt_ HANDLE FileHandle
 
_In_ PUNICODE_STRING ValueName
 
_In_ ULONG Index
 
_In_ ULONG _In_ KEY_INFORMATION_CLASS KeyInformationClass
 
_In_ ULONG _In_ KEY_INFORMATION_CLASS _In_ ULONG _Out_ PULONG ResultLength
 
_In_ ULONG _In_ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
 
_In_ HANDLE ProcessHandle
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOIDBaseAddress
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR ZeroBits
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T CommitSize
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER SectionOffset
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T ViewSize
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT InheritDisposition
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG AllocationType
 
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG _In_ ULONG Protect
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG OpenOptions
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS FileInformationClass
 
_Inout_ PUNICODE_STRING LinkTarget
 
_Inout_ PUNICODE_STRING _Out_opt_ PULONG ReturnedLength
 
_In_opt_ HANDLE Event
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE ApcRoutine
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID ApcContext
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_opt_ PLARGE_INTEGER ByteOffset
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_opt_ PLARGE_INTEGER _In_opt_ PULONG Key
 
_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG Type
 
_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG _In_ ULONG DataSize
 
_Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation
 
_Out_opt_ PBOOLEAN CurrentState
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ TIMER_TYPE TimerType
 
_In_ THREADINFOCLASS ThreadInformationClass
 
_In_ THREADINFOCLASS _In_ ULONG ThreadInformationLength
 
_In_ PLARGE_INTEGER DueTime
 
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE TimerApcRoutine
 
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID TimerContext
 
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN ResumeTimer
 
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG Period
 
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG _Out_opt_ PBOOLEAN PreviousState
 
_In_ ULONG InputBufferLength
 
_In_ ULONG _In_ ULONG OutputBufferLength
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FS_INFORMATION_CLASS FsInformationClass
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG IoControlCode
 
_In_ OBJECT_INFORMATION_CLASS ObjectInformationClass
 
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG ObjectInformationLength
 
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG _Out_opt_ PULONG ReturnLength
 
_In_opt_ HANDLE EventHandle
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG NotifyFilter
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN WatchSubtree
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG BufferLength
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_ BOOLEAN Asynchronous
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE EventType
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE _In_ BOOLEAN InitialState
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS _In_ BOOLEAN _In_opt_ PUNICODE_STRING FileName
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG FsControlCode
 
_In_ HANDLE SourceHandle
 
_In_ HANDLE _In_opt_ HANDLE TargetProcessHandle
 
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE TargetHandle
 
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG HandleAttributes
 
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG _In_ ULONG Options
 
_Inout_ _Inout_ PSIZE_T RegionSize
 
_Inout_ _Inout_ PSIZE_T _In_ ULONG FreeType
 
_In_ BOOLEAN Alertable
 
_In_ BOOLEAN _In_opt_ PLARGE_INTEGER Timeout
 
_In_ TOKEN_INFORMATION_CLASS TokenInformationClass
 
_In_ SECURITY_INFORMATION SecurityInformation
 
_In_ SECURITY_INFORMATION _In_ PSECURITY_DESCRIPTOR SecurityDescriptor
 
_In_ ACCESS_MASK _In_ ULONG _Out_ PHANDLE TokenHandle
 
_In_ ACCESS_MASK _In_ BOOLEAN OpenAsSelf
 
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _In_ HANDLE TransactionHandle
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING LogFileName
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ ULONG _In_opt_ ULONG CommitStrength
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ LPGUID TmIdentity
 
_In_opt_ PLARGE_INTEGER TmVirtualClock
 
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass
 
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ ULONG TransactionManagerInformationLength
 
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ PVOID TransactionManagerInformation
 
_In_ KTMOBJECT_TYPE QueryType
 
_In_ KTMOBJECT_TYPE _In_ ULONG ObjectCursorLength
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID Uow
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE TmHandle
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG IsolationLevel
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG IsolationFlags
 
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG _In_opt_ PLARGE_INTEGER _In_opt_ PUNICODE_STRING Description
 
_In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass
 
_In_ TRANSACTION_INFORMATION_CLASS _In_ ULONG TransactionInformationLength
 
_In_ TRANSACTION_INFORMATION_CLASS _In_ PVOID TransactionInformation
 
_In_ BOOLEAN Wait
 
_In_ ACCESS_MASK _In_ HANDLE _In_opt_ LPGUID ResourceManagerGuid
 
_Out_ PTRANSACTION_NOTIFICATION TransactionNotification
 
_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG NotificationLength
 
_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG _In_ PLARGE_INTEGER _Out_opt_ PULONG _In_ ULONG _In_opt_ ULONG_PTR AsynchronousContext
 
_In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass
 
_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_ ULONG ResourceManagerInformationLength
 
_In_ ACCESS_MASK _In_ HANDLE ResourceManagerHandle
 
_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK NotificationMask
 
_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK _In_opt_ PVOID EnlistmentKey
 
_In_ ACCESS_MASK _In_ HANDLE RmHandle
 
_In_ ACCESS_MASK _In_ HANDLE _In_ LPGUID EnlistmentGuid
 
_In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass
 
_In_ ENLISTMENT_INFORMATION_CLASS _In_ ULONG EnlistmentInformationLength
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN FailImmediately
 
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ BOOLEAN ExclusiveLock
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG SidListLength
 
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PSID StartSid
 
_In_ PUNICODE_STRING NewName
 
_In_ _In_ ULONG KeySetInformationLength
 
_In_ TIMER_SET_INFORMATION_CLASS TimerSetInformationClass
 
_In_ TIMER_SET_INFORMATION_CLASS _In_ ULONG TimerSetInformationLength
 
_In_ TOKEN_INFORMATION_CLASS _In_ ULONG TokenInformationLength
 

Macro Definition Documentation

◆ NtCurrentProcess

#define NtCurrentProcess ( )    ( (HANDLE)(LONG_PTR) -1 )

◆ NtCurrentThread

#define NtCurrentThread ( )    ( (HANDLE)(LONG_PTR) -2 )

◆ ZwCurrentProcess

#define ZwCurrentProcess ( )    NtCurrentProcess()

◆ ZwCurrentThread

#define ZwCurrentThread ( )    NtCurrentThread()

Function Documentation

◆ $endif() [1/3]

$endif ( _NTDDK_  )

Definition at line 2487 of file iofuncs.h.

2495 {
2496  PriorityInfo->Size = sizeof(IO_PRIORITY_INFO);
2497  PriorityInfo->ThreadPriority = 0xffff;
2498  PriorityInfo->IoPriority = IoPriorityNormal;
2499  PriorityInfo->PagePriority = 0;
2500 }
struct _IO_PRIORITY_INFO IO_PRIORITY_INFO
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD _Inout_ PIO_PRIORITY_INFO PriorityInfo
Definition: fltkernel.h:2653

◆ $endif() [2/3]

$endif ( _NTIFS_  )

Definition at line 2594 of file iofuncs.h.

2620 {
2621  ASSERT(Irp->CurrentLocation <= Irp->StackCount);
2622  Irp->CurrentLocation++;
2623 #ifdef NONAMELESSUNION
2624  Irp->Tail.Overlay.s.u.CurrentStackLocation++;
2625 #else
2626  Irp->Tail.Overlay.CurrentStackLocation++;
2627 #endif
2628 }
_In_ PIRP Irp
Definition: csq.h:116
ASSERT((InvokeOnSuccess||InvokeOnError||InvokeOnCancel) ?(CompletionRoutine !=NULL) :TRUE)

◆ $endif() [3/3]

$endif ( _WDMDDK_  )

Definition at line 202 of file ke.h.

226 {
227  ULONGLONG Low;
228  LONGLONG High;
229 } NEON128, *PNEON128;
Definition: strmini.h:380
int64_t LONGLONG
Definition: typedefs.h:66
uint64_t ULONGLONG
Definition: typedefs.h:65
Definition: strmini.h:378
NEON128
Definition: ke.h:229
* PNEON128
Definition: ke.h:229

◆ $if()

$if ( _WDMDDK_  )

Kernel definitions for AMD64

Kernel definitions for ARM

Kernel definitions for AMD64

Kernel definitions for ARM

Kernel definitions for x86

Definition at line 1 of file ke.h.

31 {
32  ULONG Dummy;
struct _KFLOATING_SAVE KFLOATING_SAVE
struct _KFLOATING_SAVE * PKFLOATING_SAVE
unsigned int ULONG
Definition: retypes.h:1

◆ __drv_allocatesMem()

__drv_allocatesMem ( TimerObject  )

◆ __drv_freesMem()

_Inout_ __drv_freesMem ( Mem  )

Definition at line 1315 of file exfuncs.h.

1316 {
1317  Lookaside->L.TotalFrees++;
1318 #ifdef NONAMELESSUNION
1319  if (ExQueryDepthSList(&Lookaside->L.u.ListHead) >= Lookaside->L.Depth) {
1320  Lookaside->L.u3.FreeMisses++;
1321  (Lookaside->L.u5.Free)(Entry);
1322  } else {
1323 #if defined(_WIN2K_COMPAT_SLIST_USAGE) && defined(_X86_)
1324  ExInterlockedPushEntrySList(&Lookaside->L.u.ListHead,
1326  &Lookaside->Lock__ObsoleteButDoNotDelete);
1327 #else
1329 #endif
1330  }
1331 #else /* NONAMELESSUNION */
1332  if (ExQueryDepthSList(&Lookaside->L.ListHead) >= Lookaside->L.Depth) {
1333  Lookaside->L.FreeMisses++;
1334  (Lookaside->L.Free)(Entry);
1335  } else {
1336 #if defined(_WIN2K_COMPAT_SLIST_USAGE) && defined(_X86_)
1339  &Lookaside->Lock__ObsoleteButDoNotDelete);
1340 #else
1342 #endif
1343  }
1344 #endif /* NONAMELESSUNION */
1345 }
#define ExInterlockedPushEntrySList(SListHead, SListEntry, Lock)
Definition: exfuncs.h:163
_Inout_ PVOID Lookaside
Definition: fltkernel.h:2532
#define PSLIST_ENTRY
Definition: rtltypes.h:130
FORCEINLINE USHORT ExQueryDepthSList(_In_ PSLIST_HEADER SListHead)
Definition: exfuncs.h:153
NTKERNELAPI PSLIST_ENTRY FASTCALL InterlockedPushEntrySList(IN PSLIST_HEADER ListHead, IN PSLIST_ENTRY ListEntry)
Definition: interlocked.c:82
base of all file and directory entries
Definition: entries.h:82

◆ __drv_strictTypeMatch()

_In_ __drv_strictTypeMatch ( __drv_typeConst  )

◆ _In_reads_bytes_() [1/6]

_Out_ PIO_STATUS_BLOCK _In_reads_bytes_ ( Length  )

◆ _In_reads_bytes_() [2/6]

◆ _In_reads_bytes_() [3/6]

◆ _In_reads_bytes_() [4/6]

◆ _In_reads_bytes_() [5/6]

_In_ _In_reads_bytes_ ( KeySetInformationLength  )

◆ _In_reads_bytes_() [6/6]

◆ _In_reads_bytes_opt_() [1/5]

◆ _In_reads_bytes_opt_() [2/5]

◆ _In_reads_bytes_opt_() [3/5]

_In_ PUNICODE_STRING _In_opt_ ULONG _In_ ULONG _In_reads_bytes_opt_ ( DataSize  )

◆ _In_reads_bytes_opt_() [4/5]

_In_reads_bytes_opt_ ( InputBufferLength  )

◆ _In_reads_bytes_opt_() [5/5]

◆ _Inout_updates_bytes_()

_In_ KTMOBJECT_TYPE _Inout_updates_bytes_ ( ObjectCursorLength  )

◆ _Inout_updates_bytes_opt_()

◆ _IRQL_requires_max_() [1/3]

_IRQL_requires_max_ ( PASSIVE_LEVEL  )

Definition at line 64 of file Messaging.c.

75 {
76  PFLT_SERVER_PORT_OBJECT PortObject;
78 
79  /* The caller must allow at least one connection */
80  if (MaxConnections == 0)
81  {
83  }
84 
85  /* The request must be for a kernel handle */
86  if (!(ObjectAttributes->Attributes & OBJ_KERNEL_HANDLE))
87  {
89  }
90 
91  /*
92  * Get rundown protection on the target to stop the owner
93  * from unloading whilst this port object is open. It gets
94  * removed in the FltpServerPortClose callback
95  */
97  if (!NT_SUCCESS(Status))
98  {
99  return Status;
100  }
101 
102  /* Create the server port object for this filter */
106  KernelMode,
107  NULL,
108  sizeof(FLT_SERVER_PORT_OBJECT),
109  0,
110  0,
111  (PVOID *)&PortObject);
112  if (NT_SUCCESS(Status))
113  {
114  /* Zero out the struct */
115  RtlZeroMemory(PortObject, sizeof(FLT_SERVER_PORT_OBJECT));
116 
117  /* Increment the ref count on the target filter */
119 
120  /* Setup the filter port object */
121  PortObject->Filter = Filter;
122  PortObject->ConnectNotify = ConnectNotifyCallback;
124  PortObject->MessageNotify = MessageNotifyCallback;
125  PortObject->Cookie = ServerPortCookie;
126  PortObject->MaxConnections = MaxConnections;
127 
128  /* Insert the object */
129  Status = ObInsertObject(PortObject,
130  NULL,
132  0,
133  NULL,
135  if (NT_SUCCESS(Status))
136  {
137  /* Lock the connection list */
139 
140  /* Add the new port object to the connection list and increment the count */
143 
144  /* Unlock the connection list*/
146  }
147  }
148 
149  if (!NT_SUCCESS(Status))
150  {
151  /* Allow the filter to be cleaned up */
153  }
154 
155  return Status;
156 }
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
Definition: conport.c:35
#define STATUS_INVALID_PARAMETER
Definition: udferr_usr.h:135
_Must_inspect_result_ _Outptr_ PFLT_PORT * ServerPort
Definition: fltkernel.h:1873
PFLT_CONNECT_NOTIFY ConnectNotify
Definition: fltmgrint.h:191
VOID FLTAPI FltObjectDereference(_Inout_ PVOID Object)
Definition: Object.c:53
LONG NTSTATUS
Definition: precomp.h:26
#define InsertTailList(ListHead, Entry)
VOID FASTCALL ExReleaseFastMutex(IN PFAST_MUTEX FastMutex)
Definition: fmutex.c:31
ULONG FltpObjectPointerReference(_In_ PFLT_OBJECT Object)
Definition: Object.c:322
LIST_ENTRY mList
Definition: fltmgrint.h:56
_Must_inspect_result_ _In_opt_ PFLT_FILTER Filter
Definition: fltkernel.h:1802
#define FILE_READ_DATA
Definition: nt_native.h:628
smooth NULL
Definition: ftsmooth.c:416
NTSTATUS NTAPI ObCreateObject(IN KPROCESSOR_MODE ProbeMode OPTIONAL, IN POBJECT_TYPE Type, IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL, IN KPROCESSOR_MODE AccessMode, IN OUT PVOID ParseContext OPTIONAL, IN ULONG ObjectSize, IN ULONG PagedPoolCharge OPTIONAL, IN ULONG NonPagedPoolCharge OPTIONAL, OUT PVOID *Object)
Definition: oblife.c:952
POBJECT_TYPE ServerPortObjectType
Definition: Messaging.c:24
#define NT_SUCCESS(StatCode)
Definition: apphelp.c:24
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY DisconnectNotifyCallback
Definition: fltkernel.h:1873
PVOID *typedef PHANDLE
Definition: ntsecpkg.h:414
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY ConnectNotifyCallback
Definition: fltkernel.h:1873
Status
Definition: gdiplustypes.h:24
NTSTATUS NTAPI ObInsertObject(IN PVOID Object, IN PACCESS_STATE AccessState OPTIONAL, IN ACCESS_MASK DesiredAccess, IN ULONG ObjectPointerBias, OUT PVOID *NewObject OPTIONAL, OUT PHANDLE Handle)
Definition: obhandle.c:2926
#define STANDARD_RIGHTS_ALL
Definition: nt_native.h:69
VOID FASTCALL ExAcquireFastMutex(IN PFAST_MUTEX FastMutex)
Definition: fmutex.c:23
NTSTATUS FLTAPI FltObjectReference(_Inout_ PVOID Object)
Definition: Object.c:41
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID ServerPortCookie
Definition: fltkernel.h:1873
FAST_MUTEX mLock
Definition: fltmgrint.h:55
PFLT_MESSAGE_NOTIFY MessageNotify
Definition: fltmgrint.h:193
#define RtlZeroMemory(Destination, Length)
Definition: typedefs.h:261
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY _In_opt_ PFLT_MESSAGE_NOTIFY _In_ LONG MaxConnections
Definition: fltkernel.h:1873
PFLT_DISCONNECT_NOTIFY DisconnectNotify
Definition: fltmgrint.h:192
#define OBJ_KERNEL_HANDLE
Definition: winternl.h:231
_Must_inspect_result_ _Outptr_ PFLT_PORT _In_ POBJECT_ATTRIBUTES _In_opt_ PVOID _In_ PFLT_CONNECT_NOTIFY _In_ PFLT_DISCONNECT_NOTIFY _In_opt_ PFLT_MESSAGE_NOTIFY MessageNotifyCallback
Definition: fltkernel.h:1873
FLT_MUTEX_LIST_HEAD ConnectionList
Definition: fltmgrint.h:121

◆ _IRQL_requires_max_() [2/3]

_IRQL_requires_max_ ( APC_LEVEL  )

◆ _IRQL_requires_max_() [3/3]

_IRQL_requires_max_ ( DISPATCH_LEVEL  )

Definition at line 30 of file rmap.c.

36 {
38 }
#define TAG_RMAP
Definition: tag.h:133
#define P(row, col)
#define ExFreePoolWithTag(_P, _T)
Definition: module.h:1099

◆ _Out_writes_bytes_() [1/5]

_Out_ PIO_STATUS_BLOCK _Out_writes_bytes_ ( Length  )

◆ _Out_writes_bytes_() [2/5]

◆ _Out_writes_bytes_() [3/5]

◆ _Out_writes_bytes_() [4/5]

◆ _Out_writes_bytes_() [5/5]

◆ _Out_writes_bytes_opt_() [1/4]

_In_ ULONG _In_ KEY_INFORMATION_CLASS _Out_writes_bytes_opt_ ( Length  )

◆ _Out_writes_bytes_opt_() [2/4]

_In_ ULONG _Out_writes_bytes_opt_ ( OutputBufferLength  )

◆ _Out_writes_bytes_opt_() [3/4]

◆ _Out_writes_bytes_opt_() [4/4]

◆ _Out_writes_bytes_to_()

_In_ SECURITY_INFORMATION _Out_writes_bytes_to_ ( Length  ,
ResultLength 
)

◆ _Out_writes_bytes_to_opt_()

_In_ TOKEN_INFORMATION_CLASS _Out_writes_bytes_to_opt_ ( Length  ,
ResultLength 
)

◆ _Post_satisfies_() [1/2]

_Post_satisfies_ ( )

◆ _Post_satisfies_() [2/2]

_Post_satisfies_ ( return<=  0)

◆ _When_()

_When_ ( Timeout  = NULL,
_IRQL_requires_max_(APC_LEVEL  
) -> QuadPart !
pure virtual

◆ BaseAddress()

_Must_inspect_result_ _At_* BaseAddress ( Mem  )

◆ ZwAccessCheckAndAuditAlarm()

NTSYSAPI NTSTATUS NTAPI ZwAccessCheckAndAuditAlarm ( _In_ PUNICODE_STRING  SubsystemName,
_In_ PVOID  HandleId,
_In_ PUNICODE_STRING  ObjectTypeName,
_In_ PUNICODE_STRING  ObjectName,
_In_ PSECURITY_DESCRIPTOR  SecurityDescriptor,
_In_ ACCESS_MASK  DesiredAccess,
_In_ PGENERIC_MAPPING  GenericMapping,
_In_ BOOLEAN  ObjectCreation,
_Out_ PACCESS_MASK  GrantedAccess,
_Out_ PBOOLEAN  AccessStatus,
_Out_ PBOOLEAN  GenerateOnClose 
)

◆ ZwAlertThread()

NTSYSAPI NTSTATUS NTAPI ZwAlertThread ( _In_ HANDLE  ThreadHandle)

◆ ZwClearEvent()

NTSYSAPI NTSTATUS NTAPI ZwClearEvent ( _In_ HANDLE  EventHandle)

◆ ZwCloseObjectAuditAlarm()

NTSYSAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm ( _In_ PUNICODE_STRING  SubsystemName,
_In_ PVOID  HandleId,
_In_ BOOLEAN  GenerateOnClose 
)

◆ ZwCreateSymbolicLinkObject()

NTSYSAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject ( _Out_ PHANDLE  SymbolicLinkHandle,
_In_ ACCESS_MASK  DesiredAccess,
_In_ POBJECT_ATTRIBUTES  ObjectAttributes,
_In_ PUNICODE_STRING  TargetName 
)

◆ ZwFlushBuffersFile()

NTSYSAPI NTSTATUS NTAPI ZwFlushBuffersFile ( _In_ HANDLE  FileHandle,
_Out_ PIO_STATUS_BLOCK  IoStatusBlock 
)

◆ ZwFlushInstructionCache()

NTSYSAPI NTSTATUS NTAPI ZwFlushInstructionCache ( _In_ HANDLE  ProcessHandle,
_In_opt_ PVOID  BaseAddress,
_In_ ULONG  FlushSize 
)

◆ ZwLoadKey()

NTSYSAPI NTSTATUS NTAPI ZwLoadKey ( _In_ POBJECT_ATTRIBUTES  KeyObjectAttributes,
_In_ POBJECT_ATTRIBUTES  FileObjectAttributes 
)

◆ ZwNotifyChangeMultipleKeys()

NTSYSAPI NTSTATUS NTAPI ZwNotifyChangeMultipleKeys ( _In_ HANDLE  MasterKeyHandle,
_In_opt_ ULONG  Count,
_In_opt_ OBJECT_ATTRIBUTES  SubordinateObjects[],
_In_opt_ HANDLE  Event,
_In_opt_ PIO_APC_ROUTINE  ApcRoutine,
_In_opt_ PVOID  ApcContext,
_Out_ PIO_STATUS_BLOCK  IoStatusBlock,
_In_ ULONG  CompletionFilter,
_In_ BOOLEAN  WatchTree,
_Out_opt_ PVOID  Buffer,
_In_ ULONG  BufferSize,
_In_ BOOLEAN  Asynchronous 
)

◆ ZwOpenProcessToken()

NTSYSAPI NTSTATUS NTAPI ZwOpenProcessToken ( _In_ HANDLE  ProcessHandle,
_In_ ACCESS_MASK  DesiredAccess,
_Out_ PHANDLE  TokenHandle 
)

◆ ZwOpenThread()

NTSYSAPI NTSTATUS NTAPI ZwOpenThread ( _Out_ PHANDLE  ThreadHandle,
_In_ ACCESS_MASK  DesiredAccess,
_In_ POBJECT_ATTRIBUTES  ObjectAttributes,
_In_ PCLIENT_ID  ClientId 
)

◆ ZwOpenThreadToken()

NTSYSAPI NTSTATUS NTAPI ZwOpenThreadToken ( _In_ HANDLE  ThreadHandle,
_In_ ACCESS_MASK  DesiredAccess,
_In_ BOOLEAN  OpenAsSelf,
_Out_ PHANDLE  TokenHandle 
)

◆ ZwPulseEvent()

NTSYSAPI NTSTATUS NTAPI ZwPulseEvent ( _In_ HANDLE  EventHandle,
_In_opt_ PLONG  PulseCount 
)

◆ ZwQueryDefaultLocale()

NTSYSAPI NTSTATUS NTAPI ZwQueryDefaultLocale ( _In_ BOOLEAN  UserProfile,
_Out_ PLCID  DefaultLocaleId 
)

◆ ZwQueryInformationProcess()

NTSYSAPI NTSTATUS NTAPI ZwQueryInformationProcess ( _In_ HANDLE  ProcessHandle,
_In_ PROCESSINFOCLASS  ProcessInformationClass,
_Out_ PVOID  ProcessInformation,
_In_ ULONG  ProcessInformationLength,
_Out_opt_ PULONG  ReturnLength 
)

◆ ZwQueryMultipleValueKey()

NTSYSAPI NTSTATUS NTAPI ZwQueryMultipleValueKey ( _In_ HANDLE  KeyHandle,
_Inout_ PKEY_VALUE_ENTRY  ValueEntries,
_In_ ULONG  EntryCount,
_Out_ PVOID  ValueBuffer,
_Inout_ PULONG  BufferLength,
_Out_opt_ PULONG  RequiredBufferLength 
)

◆ ZwReplaceKey()

NTSYSAPI NTSTATUS NTAPI ZwReplaceKey ( _In_ POBJECT_ATTRIBUTES  NewFileObjectAttributes,
_In_ HANDLE  KeyHandle,
_In_ POBJECT_ATTRIBUTES  OldFileObjectAttributes 
)

◆ ZwResetEvent()

NTSYSAPI NTSTATUS NTAPI ZwResetEvent ( _In_ HANDLE  EventHandle,
_Out_opt_ PLONG  NumberOfWaitingThreads 
)

◆ ZwRollbackComplete()

NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackComplete ( _In_ HANDLE  EnlistmentHandle,
_In_opt_ PLARGE_INTEGER  TmVirtualClock 
)

◆ ZwSaveKey()

NTSYSAPI NTSTATUS NTAPI ZwSaveKey ( _In_ HANDLE  KeyHandle,
_In_ HANDLE  FileHandle 
)

◆ ZwSetDefaultLocale()

NTSYSAPI NTSTATUS NTAPI ZwSetDefaultLocale ( _In_ BOOLEAN  UserProfile,
_In_ LCID  DefaultLocaleId 
)

◆ ZwSetInformationProcess()

NTSYSAPI NTSTATUS NTAPI ZwSetInformationProcess ( _In_ HANDLE  ProcessHandle,
_In_ PROCESSINFOCLASS  ProcessInformationClass,
_In_ PVOID  ProcessInformation,
_In_ ULONG  ProcessInformationLength 
)

◆ ZwSetSystemTime()

NTSYSAPI NTSTATUS NTAPI ZwSetSystemTime ( _In_ PLARGE_INTEGER  NewTime,
_Out_opt_ PLARGE_INTEGER  OldTime 
)

◆ ZwSinglePhaseReject()

NTSYSCALLAPI NTSTATUS NTAPI ZwSinglePhaseReject ( _In_ HANDLE  EnlistmentHandle,
_In_opt_ PLARGE_INTEGER  TmVirtualClock 
)

◆ ZwUnloadKey()

NTSYSAPI NTSTATUS NTAPI ZwUnloadKey ( _In_ POBJECT_ATTRIBUTES  KeyObjectAttributes)

◆ ZwWaitForMultipleObjects()

NTSYSAPI NTSTATUS NTAPI ZwWaitForMultipleObjects ( _In_ ULONG  HandleCount,
_In_ PHANDLE  Handles,
_In_ WAIT_TYPE  WaitType,
_In_ BOOLEAN  Alertable,
_In_opt_ PLARGE_INTEGER  Timeout 
)

◆ ZwYieldExecution()

NTSYSAPI NTSTATUS NTAPI ZwYieldExecution ( VOID  )

Variable Documentation

◆ Alertable

_In_ BOOLEAN Alertable

Definition at line 626 of file zwfuncs.h.

◆ AllocationAttributes

Definition at line 136 of file zwfuncs.h.

◆ AllocationSize

◆ AllocationType

◆ ApcContext

Definition at line 315 of file zwfuncs.h.

◆ ApcRoutine

Definition at line 315 of file zwfuncs.h.

◆ Asynchronous

◆ AsynchronousContext

◆ BaseAddress

_Inout_ PVOID* BaseAddress

Definition at line 214 of file zwfuncs.h.

◆ BufferLength

◆ ByteOffset

Definition at line 320 of file zwfuncs.h.

◆ Class

◆ ClientId

Definition at line 36 of file zwfuncs.h.

◆ CommitSize

◆ CommitStrength

◆ CreateDisposition

◆ CreateOptions

◆ CurrentState

_Out_opt_ PBOOLEAN CurrentState

◆ DataSize

Definition at line 345 of file zwfuncs.h.

◆ Description

◆ DesiredAccess

_In_ ACCESS_MASK DesiredAccess

Definition at line 36 of file zwfuncs.h.

◆ Disposition

◆ DueTime

Definition at line 428 of file zwfuncs.h.

◆ EaIndex

◆ EaLength

◆ EaListLength

Definition at line 53 of file zwfuncs.h.

◆ EffectiveOnly

Definition at line 73 of file zwfuncs.h.

◆ EnlistmentGuid

Definition at line 968 of file zwfuncs.h.

◆ EnlistmentInformationClass

_In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass

Definition at line 979 of file zwfuncs.h.

◆ EnlistmentInformationLength

_In_ ENLISTMENT_INFORMATION_CLASS _In_ ULONG EnlistmentInformationLength

Definition at line 981 of file zwfuncs.h.

◆ EnlistmentKey

_In_opt_ PVOID EnlistmentKey

Definition at line 954 of file zwfuncs.h.

◆ Event

Definition at line 315 of file zwfuncs.h.

◆ EventHandle

_In_opt_ HANDLE EventHandle

Definition at line 500 of file zwfuncs.h.

◆ EventType

Definition at line 516 of file zwfuncs.h.

◆ ExclusiveLock

◆ ExitStatus

_In_ NTSTATUS ExitStatus

Definition at line 28 of file zwfuncs.h.

◆ FailImmediately

◆ FileAttributes

◆ FileHandle

◆ FileInformation

Definition at line 383 of file zwfuncs.h.

◆ FileInformationClass

◆ FileName

◆ FreeType

Definition at line 615 of file zwfuncs.h.

◆ FsControlCode

◆ FsInformationClass

Definition at line 461 of file zwfuncs.h.

◆ HandleAttributes

_In_ ACCESS_MASK _In_ BOOLEAN _In_ ULONG HandleAttributes

Definition at line 578 of file zwfuncs.h.

◆ Index

_In_ ULONG Index

Definition at line 166 of file zwfuncs.h.

◆ InheritDisposition

◆ InitialState

Definition at line 516 of file zwfuncs.h.

◆ InputBufferLength

◆ IoControlCode

◆ IoStatusBlock

_Out_ PIO_STATUS_BLOCK IoStatusBlock

Definition at line 48 of file zwfuncs.h.

◆ IsolationFlags

◆ IsolationLevel

◆ Key

◆ KeyInformationClass

◆ KeySetInformationLength

_In_ _In_ ULONG KeySetInformationLength

Definition at line 1213 of file zwfuncs.h.

◆ KeyValueInformationClass

Definition at line 180 of file zwfuncs.h.

◆ Length

Definition at line 50 of file zwfuncs.h.

◆ LinkTarget

◆ LogFileName

◆ MaximumSize

◆ NewName

◆ NewTokenHandle

◆ NotificationLength

Definition at line 920 of file zwfuncs.h.

◆ NotificationMask

◆ NotifyFilter

◆ ObjectAttributes

Definition at line 36 of file zwfuncs.h.

◆ ObjectCursorLength

_In_ KTMOBJECT_TYPE _In_ ULONG ObjectCursorLength

Definition at line 816 of file zwfuncs.h.

◆ ObjectInformationClass

_In_ OBJECT_INFORMATION_CLASS ObjectInformationClass

Definition at line 489 of file zwfuncs.h.

◆ ObjectInformationLength

_In_ OBJECT_INFORMATION_CLASS _In_ ULONG ObjectInformationLength

Definition at line 491 of file zwfuncs.h.

◆ OpenAsSelf

Definition at line 699 of file zwfuncs.h.

Referenced by NtOpenThreadToken(), NtOpenThreadTokenEx(), OpenThreadToken(), and START_TEST().

◆ OpenOptions

Definition at line 229 of file zwfuncs.h.

◆ Options

◆ OutputBufferLength

◆ Period

◆ PreviousState

◆ ProcessHandle

_In_ HANDLE ProcessHandle

Definition at line 213 of file zwfuncs.h.

◆ Protect

◆ QueryType

_In_ KTMOBJECT_TYPE QueryType

Definition at line 814 of file zwfuncs.h.

◆ RegionSize

Definition at line 615 of file zwfuncs.h.

◆ ResourceManagerGuid

_In_ ACCESS_MASK _In_ HANDLE _In_ LPGUID ResourceManagerGuid

Definition at line 889 of file zwfuncs.h.

◆ ResourceManagerHandle

_In_ ACCESS_MASK _In_ HANDLE ResourceManagerHandle

Definition at line 954 of file zwfuncs.h.

◆ ResourceManagerInformationClass

_In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass

Definition at line 933 of file zwfuncs.h.

◆ ResourceManagerInformationLength

_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_ ULONG ResourceManagerInformationLength

Definition at line 935 of file zwfuncs.h.

◆ RestartScan

◆ ResultLength

Definition at line 169 of file zwfuncs.h.

◆ ResumeTimer

◆ ReturnedLength

Definition at line 292 of file zwfuncs.h.

◆ ReturnLength

Definition at line 491 of file zwfuncs.h.

◆ ReturnSingleEntry

Definition at line 50 of file zwfuncs.h.

◆ RmHandle

Definition at line 968 of file zwfuncs.h.

◆ SectionOffset

◆ SectionPageProtection

Definition at line 136 of file zwfuncs.h.

◆ SecurityDescriptor

◆ SecurityInformation

_In_ SECURITY_INFORMATION SecurityInformation

Definition at line 664 of file zwfuncs.h.

◆ ShareAccess

◆ SidListLength

Definition at line 1120 of file zwfuncs.h.

◆ SourceHandle

_In_ HANDLE SourceHandle

Definition at line 578 of file zwfuncs.h.

◆ StartSid

Definition at line 1120 of file zwfuncs.h.

◆ TargetHandle

Definition at line 578 of file zwfuncs.h.

◆ TargetProcessHandle

_In_ HANDLE _In_opt_ HANDLE TargetProcessHandle

Definition at line 578 of file zwfuncs.h.

◆ ThreadInformationClass

_In_ THREADINFOCLASS ThreadInformationClass

Definition at line 419 of file zwfuncs.h.

◆ ThreadInformationLength

_In_ THREADINFOCLASS _In_ ULONG ThreadInformationLength

Definition at line 421 of file zwfuncs.h.

◆ Timeout

◆ TimerApcRoutine

Definition at line 428 of file zwfuncs.h.

Referenced by NtSetTimer().

◆ TimerContext

◆ TimerSetInformationClass

_In_ TIMER_SET_INFORMATION_CLASS TimerSetInformationClass

Definition at line 1223 of file zwfuncs.h.

◆ TimerSetInformationLength

_In_ TIMER_SET_INFORMATION_CLASS _In_ ULONG TimerSetInformationLength

Definition at line 1225 of file zwfuncs.h.

◆ TimerType

Definition at line 401 of file zwfuncs.h.

Referenced by NtCreateTimer().

◆ TitleIndex

Definition at line 123 of file zwfuncs.h.

◆ TmHandle

Definition at line 825 of file zwfuncs.h.

◆ TmIdentity

◆ TmVirtualClock

_In_opt_ PLARGE_INTEGER TmVirtualClock

Definition at line 778 of file zwfuncs.h.

◆ TokenHandle

Definition at line 689 of file zwfuncs.h.

◆ TokenInformationClass

_In_ TOKEN_INFORMATION_CLASS TokenInformationClass

Definition at line 653 of file zwfuncs.h.

◆ TokenInformationLength

_In_ TOKEN_INFORMATION_CLASS _In_ ULONG TokenInformationLength

Definition at line 1237 of file zwfuncs.h.

◆ TokenType

◆ TransactionHandle

Definition at line 730 of file zwfuncs.h.

◆ TransactionInformation

_In_ TRANSACTION_INFORMATION_CLASS _In_ PVOID TransactionInformation

Definition at line 863 of file zwfuncs.h.

◆ TransactionInformationClass

_In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass

Definition at line 852 of file zwfuncs.h.

◆ TransactionInformationLength

_In_ TRANSACTION_INFORMATION_CLASS _In_ PVOID _In_ ULONG TransactionInformationLength

Definition at line 854 of file zwfuncs.h.

◆ TransactionManagerInformation

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ PVOID TransactionManagerInformation

Definition at line 804 of file zwfuncs.h.

◆ TransactionManagerInformationClass

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass

Definition at line 793 of file zwfuncs.h.

◆ TransactionManagerInformationLength

_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ PVOID _In_ ULONG TransactionManagerInformationLength

Definition at line 795 of file zwfuncs.h.

◆ TransactionNotification

_Out_ PTRANSACTION_NOTIFICATION TransactionNotification

Definition at line 920 of file zwfuncs.h.

◆ Type

Definition at line 341 of file zwfuncs.h.

◆ Uow

◆ ValueName

_In_ PUNICODE_STRING ValueName

Definition at line 156 of file zwfuncs.h.

◆ ViewSize

◆ Wait

_In_ BOOLEAN Wait

Definition at line 873 of file zwfuncs.h.

◆ WatchSubtree

◆ ZeroBits