ReactOS  r74622
zwfuncs.h
Go to the documentation of this file.
1 /******************************************************************************
2  * ZwXxx Functions *
3  ******************************************************************************/
4 
6 
7 /* Constants */
8 #define NtCurrentProcess() ( (HANDLE)(LONG_PTR) -1 )
9 #define ZwCurrentProcess() NtCurrentProcess()
10 #define NtCurrentThread() ( (HANDLE)(LONG_PTR) -2 )
11 #define ZwCurrentThread() NtCurrentThread()
13 
14 $if (_NTDDK_)
18 NTAPI
20  _Out_ PLUID Luid);
21 
25 NTAPI
26 ZwTerminateProcess(
29 
33 NTAPI
34 ZwOpenProcess(
35  _Out_ PHANDLE ProcessHandle,
40 $if (_NTIFS_)
41 
45 NTAPI
46 ZwQueryEaFile(
56 
60 NTAPI
61 ZwSetEaFile(
62  _In_ HANDLE FileHandle,
63  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
64  _In_reads_bytes_(Length) PVOID Buffer,
65  _In_ ULONG Length);
66 
70 NTAPI
71 ZwDuplicateToken(
72  _In_ HANDLE ExistingTokenHandle,
73  _In_ ACCESS_MASK DesiredAccess,
74  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
79 
80 #if (NTDDI_VERSION >= NTDDI_WIN2K)
81 $if (_WDMDDK_)
82 
86 NTAPI
87 ZwClose(
89 
93 NTAPI
96  _In_ ACCESS_MASK DesiredAccess,
97  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
98 
100 NTSYSAPI
101 NTSTATUS
102 NTAPI
103 ZwCreateFile(
104  _Out_ PHANDLE FileHandle,
105  _In_ ACCESS_MASK DesiredAccess,
106  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
107  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
115 );
116 
118 NTSYSAPI
119 NTSTATUS
120 NTAPI
121 ZwCreateKey(
123  _In_ ACCESS_MASK DesiredAccess,
124  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
127  _In_ ULONG CreateOptions,
129 
131 NTSYSAPI
132 NTSTATUS
133 NTAPI
134 ZwCreateSection(
135  _Out_ PHANDLE SectionHandle,
136  _In_ ACCESS_MASK DesiredAccess,
137  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
141  _In_opt_ HANDLE FileHandle);
142 
144 NTSYSAPI
145 NTSTATUS
146 NTAPI
147 ZwDeleteKey(
148  _In_ HANDLE KeyHandle);
149 
151 NTSYSAPI
152 NTSTATUS
153 NTAPI
154 ZwDeleteValueKey(
155  _In_ HANDLE KeyHandle,
157 
159 _When_(Length == 0, _Post_satisfies_(return < 0))
160 _When_(Length > 0, _Post_satisfies_(return <= 0))
161 NTSYSAPI
162 NTSTATUS
163 NTAPI
164 ZwEnumerateKey(
165  _In_ HANDLE KeyHandle,
168  _Out_writes_bytes_opt_(Length) PVOID KeyInformation,
169  _In_ ULONG Length,
171 
173 _When_(Length == 0, _Post_satisfies_(return < 0))
174 _When_(Length > 0, _Post_satisfies_(return <= 0))
175 NTSYSAPI
176 NTSTATUS
177 NTAPI
178 ZwEnumerateValueKey(
179  _In_ HANDLE KeyHandle,
180  _In_ ULONG Index,
182  _Out_writes_bytes_opt_(Length) PVOID KeyValueInformation,
183  _In_ ULONG Length,
184  _Out_ PULONG ResultLength);
185 
187 NTSYSAPI
188 NTSTATUS
189 NTAPI
190 ZwFlushKey(
191  _In_ HANDLE KeyHandle);
192 
194 NTSYSAPI
195 NTSTATUS
196 NTAPI
197 ZwLoadDriver(
198  _In_ PUNICODE_STRING DriverServiceName);
199 
201 NTSYSAPI
202 NTSTATUS
203 NTAPI
205  _In_ HANDLE Handle);
206 
208 NTSYSAPI
209 NTSTATUS
210 NTAPI
211 ZwMapViewOfSection(
212  _In_ HANDLE SectionHandle,
213  _In_ HANDLE ProcessHandle,
221  _In_ ULONG Protect);
222 
224 NTSYSAPI
225 NTSTATUS
226 NTAPI
227 ZwOpenFile(
228  _Out_ PHANDLE FileHandle,
229  _In_ ACCESS_MASK DesiredAccess,
230  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
231  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
232  _In_ ULONG ShareAccess,
234 
236 NTSYSAPI
237 NTSTATUS
238 NTAPI
239 ZwOpenKey(
240  _Out_ PHANDLE KeyHandle,
241  _In_ ACCESS_MASK DesiredAccess,
242  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
243 
245 NTSYSAPI
246 NTSTATUS
247 NTAPI
249  _Out_ PHANDLE SectionHandle,
250  _In_ ACCESS_MASK DesiredAccess,
251  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
252 
254 NTSYSAPI
255 NTSTATUS
256 NTAPI
258  _Out_ PHANDLE LinkHandle,
259  _In_ ACCESS_MASK DesiredAccess,
260  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
261 
263 NTSYSAPI
264 NTSTATUS
265 NTAPI
266 ZwQueryInformationFile(
267  _In_ HANDLE FileHandle,
268  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
270  _In_ ULONG Length,
272 
274 _When_(Length == 0, _Post_satisfies_(return < 0))
275 _When_(Length > 0, _Post_satisfies_(return <= 0))
276 NTSYSAPI
277 NTSTATUS
278 NTAPI
279 ZwQueryKey(
280  _In_ HANDLE KeyHandle,
281  _In_ KEY_INFORMATION_CLASS KeyInformationClass,
282  _Out_writes_bytes_opt_(Length) PVOID KeyInformation,
283  _In_ ULONG Length,
284  _Out_ PULONG ResultLength);
285 
287 NTSYSAPI
288 NTSTATUS
289 NTAPI
290 ZwQuerySymbolicLinkObject(
291  _In_ HANDLE LinkHandle,
294 
296 _When_(Length == 0, _Post_satisfies_(return < 0))
297 _When_(Length > 0, _Post_satisfies_(return <= 0))
298 NTSYSAPI
299 NTSTATUS
300 NTAPI
301 ZwQueryValueKey(
302  _In_ HANDLE KeyHandle,
303  _In_ PUNICODE_STRING ValueName,
304  _In_ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
305  _Out_writes_bytes_opt_(Length) PVOID KeyValueInformation,
306  _In_ ULONG Length,
307  _Out_ PULONG ResultLength);
308 
310 NTSYSAPI
311 NTSTATUS
312 NTAPI
313 ZwReadFile(
314  _In_ HANDLE FileHandle,
318  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
319  _Out_writes_bytes_(Length) PVOID Buffer,
320  _In_ ULONG Length,
323 
325 NTSYSAPI
326 NTSTATUS
327 NTAPI
328 ZwSetInformationFile(
329  _In_ HANDLE FileHandle,
330  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
331  _In_reads_bytes_(Length) PVOID FileInformation,
332  _In_ ULONG Length,
333  _In_ FILE_INFORMATION_CLASS FileInformationClass);
334 
336 NTSYSAPI
337 NTSTATUS
338 NTAPI
339 ZwSetValueKey(
340  _In_ HANDLE KeyHandle,
342  _In_opt_ ULONG TitleIndex,
343  _In_ ULONG Type,
346 
348 NTSYSAPI
349 NTSTATUS
350 NTAPI
352  _In_ PUNICODE_STRING DriverServiceName);
353 
355 NTSYSAPI
356 NTSTATUS
357 NTAPI
358 ZwUnmapViewOfSection(
359  _In_ HANDLE ProcessHandle,
360  _In_opt_ PVOID BaseAddress);
361 
363 NTSYSAPI
364 NTSTATUS
365 NTAPI
366 ZwWriteFile(
367  _In_ HANDLE FileHandle,
368  _In_opt_ HANDLE Event,
369  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
370  _In_opt_ PVOID ApcContext,
371  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
372  _In_reads_bytes_(Length) PVOID Buffer,
373  _In_ ULONG Length,
374  _In_opt_ PLARGE_INTEGER ByteOffset,
375  _In_opt_ PULONG Key);
376 
378 NTSYSAPI
379 NTSTATUS
380 NTAPI
382  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
384 
386 $if (_NTDDK_)
387 
389 NTSTATUS
390 NTAPI
391 ZwCancelTimer(
392  _In_ HANDLE TimerHandle,
394 
396 _When_(return == 0, __drv_allocatesMem(TimerObject))
397 NTSTATUS
398 NTAPI
399 ZwCreateTimer(
400  _Out_ PHANDLE TimerHandle,
401  _In_ ACCESS_MASK DesiredAccess,
402  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
404 
406 NTSTATUS
407 NTAPI
408 ZwOpenTimer(
409  _Out_ PHANDLE TimerHandle,
410  _In_ ACCESS_MASK DesiredAccess,
411  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
412 
414 NTSYSAPI
415 NTSTATUS
416 NTAPI
417 ZwSetInformationThread(
418  _In_ HANDLE ThreadHandle,
422 
424 NTSTATUS
425 NTAPI
426 ZwSetTimer(
427  _In_ HANDLE TimerHandle,
434 
436 NTSYSAPI
437 NTSTATUS
438 NTAPI
441 
443 NTSYSAPI
444 NTSTATUS
445 NTAPI
446 ZwPowerInformation(
447  _In_ POWER_INFORMATION_LEVEL PowerInformationLevel,
452 
454 NTSYSAPI
455 NTSTATUS
456 NTAPI
458  _In_ HANDLE FileHandle,
459  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
460  _Out_writes_bytes_(Length) PVOID FsInformation,
461  _In_ ULONG Length,
463 
465 NTSYSAPI
466 NTSTATUS
467 NTAPI
469  _In_ HANDLE FileHandle,
471  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
472  _In_opt_ PVOID ApcContext,
473  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
475  _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer,
476  _In_ ULONG InputBufferLength,
477  _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer,
478  _In_ ULONG OutputBufferLength);
479 
480 $endif (_NTDDK_)
481 $if (_NTIFS_)
482 
484 NTSYSAPI
485 NTSTATUS
486 NTAPI
487 ZwQueryObject(
488  _In_opt_ HANDLE Handle,
493 
495 NTSYSAPI
496 NTSTATUS
497 NTAPI
498 ZwNotifyChangeKey(
499  _In_ HANDLE KeyHandle,
501  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
502  _In_opt_ PVOID ApcContext,
503  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
509 
511 NTSYSAPI
512 NTSTATUS
513 NTAPI
514 ZwCreateEvent(
515  _Out_ PHANDLE EventHandle,
516  _In_ ACCESS_MASK DesiredAccess,
517  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
520 
522 NTSYSAPI
523 NTSTATUS
524 NTAPI
526  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
527 
529 NTSYSAPI
530 NTSTATUS
531 NTAPI
532 ZwQueryDirectoryFile(
533  _In_ HANDLE FileHandle,
534  _In_opt_ HANDLE Event,
535  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
536  _In_opt_ PVOID ApcContext,
537  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
538  _Out_writes_bytes_(Length) PVOID FileInformation,
539  _In_ ULONG Length,
540  _In_ FILE_INFORMATION_CLASS FileInformationClass,
541  _In_ BOOLEAN ReturnSingleEntry,
543  _In_ BOOLEAN RestartScan);
544 
546 NTSYSAPI
547 NTSTATUS
548 NTAPI
549 ZwSetVolumeInformationFile(
550  _In_ HANDLE FileHandle,
551  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
552  _In_reads_bytes_(Length) PVOID FsInformation,
553  _In_ ULONG Length,
554  _In_ FS_INFORMATION_CLASS FsInformationClass);
555 
557 NTSYSAPI
558 NTSTATUS
559 NTAPI
561  _In_ HANDLE FileHandle,
563  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
564  _In_opt_ PVOID ApcContext,
565  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
567  _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer,
568  _In_ ULONG InputBufferLength,
569  _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer,
570  _In_ ULONG OutputBufferLength);
571 
573 NTSYSAPI
574 NTSTATUS
575 NTAPI
576 ZwDuplicateObject(
577  _In_ HANDLE SourceProcessHandle,
581  _In_ ACCESS_MASK DesiredAccess,
583  _In_ ULONG Options);
584 
586 NTSYSAPI
587 NTSTATUS
588 NTAPI
590  _Out_ PHANDLE DirectoryHandle,
591  _In_ ACCESS_MASK DesiredAccess,
592  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
593 
595 _At_(*BaseAddress, __drv_allocatesMem(Mem))
597 NTSYSAPI
598 NTSTATUS
599 NTAPI
600 ZwAllocateVirtualMemory(
601  _In_ HANDLE ProcessHandle,
603  _In_ ULONG_PTR ZeroBits,
605  _In_ ULONG AllocationType,
606  _In_ ULONG Protect);
607 
609 NTSYSAPI
610 NTSTATUS
611 NTAPI
612 ZwFreeVirtualMemory(
613  _In_ HANDLE ProcessHandle,
614  _Inout_ __drv_freesMem(Mem) PVOID *BaseAddress,
615  _Inout_ PSIZE_T RegionSize,
617 
621 NTSYSAPI
622 NTSTATUS
623 NTAPI
624 ZwWaitForSingleObject(
625  _In_ HANDLE Handle,
628 
630 NTSYSAPI
631 NTSTATUS
632 NTAPI
633 ZwSetEvent(
634  _In_ HANDLE EventHandle,
635  _Out_opt_ PLONG PreviousState);
636 
638 NTSYSAPI
639 NTSTATUS
640 NTAPI
641 ZwFlushVirtualMemory(
642  _In_ HANDLE ProcessHandle,
643  _Inout_ PVOID *BaseAddress,
644  _Inout_ PSIZE_T RegionSize,
645  _Out_ PIO_STATUS_BLOCK IoStatusBlock);
646 
648 NTSYSAPI
649 NTSTATUS
650 NTAPI
651 ZwQueryInformationToken(
654  _Out_writes_bytes_to_opt_(Length,*ResultLength) PVOID TokenInformation,
655  _In_ ULONG Length,
656  _Out_ PULONG ResultLength);
657 
659 NTSYSAPI
660 NTSTATUS
661 NTAPI
662 ZwSetSecurityObject(
663  _In_ HANDLE Handle,
666 
668 NTSYSAPI
669 NTSTATUS
670 NTAPI
671 ZwQuerySecurityObject(
672  _In_ HANDLE FileHandle,
673  _In_ SECURITY_INFORMATION SecurityInformation,
674  _Out_writes_bytes_to_(Length,*ResultLength) PSECURITY_DESCRIPTOR SecurityDescriptor,
675  _In_ ULONG Length,
676  _Out_ PULONG ResultLength);
677 $endif (_NTIFS_)
678 #endif /* (NTDDI_VERSION >= NTDDI_WIN2K) */
679 
680 $if (_NTIFS_)
681 #if (NTDDI_VERSION >= NTDDI_WINXP)
682 
684 NTSYSAPI
685 NTSTATUS
686 NTAPI
688  _In_ HANDLE ProcessHandle,
689  _In_ ACCESS_MASK DesiredAccess,
690  _In_ ULONG HandleAttributes,
691  _Out_ PHANDLE TokenHandle);
692 
694 NTSYSAPI
695 NTSTATUS
696 NTAPI
698  _In_ HANDLE ThreadHandle,
699  _In_ ACCESS_MASK DesiredAccess,
701  _In_ ULONG HandleAttributes,
702  _Out_ PHANDLE TokenHandle);
703 
704 #endif /* (NTDDI_VERSION >= NTDDI_WINXP) */
705 $endif (_NTIFS_)
706 $if (_WDMDDK_)
707 
708 #if (NTDDI_VERSION >= NTDDI_WS03)
711 NTSTATUS
712 NTAPI
714  _Out_ PHANDLE EventHandle,
715  _In_ ACCESS_MASK DesiredAccess,
716  _In_ POBJECT_ATTRIBUTES ObjectAttributes);
717 #endif
719 
720 $if (_WDMDDK_ || _NTIFS_)
721 #if (NTDDI_VERSION >= NTDDI_VISTA)
723 $if (_WDMDDK_)
724 
726 NTSYSAPI
727 NTSTATUS
728 ZwCreateKeyTransacted(
729  _Out_ PHANDLE KeyHandle,
730  _In_ ACCESS_MASK DesiredAccess,
731  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
732  _Reserved_ ULONG TitleIndex,
734  _In_ ULONG CreateOptions,
736  _Out_opt_ PULONG Disposition);
737 
739 NTSYSAPI
740 NTSTATUS
741 NTAPI
742 ZwOpenKeyTransacted(
743  _Out_ PHANDLE KeyHandle,
744  _In_ ACCESS_MASK DesiredAccess,
745  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
746  _In_ HANDLE TransactionHandle);
747 
750 NTSTATUS
751 NTAPI
752 ZwCreateTransactionManager(
754  _In_ ACCESS_MASK DesiredAccess,
755  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
757  _In_opt_ ULONG CreateOptions,
759 
762 NTSTATUS
763 NTAPI
764 ZwOpenTransactionManager(
765  _Out_ PHANDLE TmHandle,
766  _In_ ACCESS_MASK DesiredAccess,
767  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
768  _In_opt_ PUNICODE_STRING LogFileName,
770  _In_opt_ ULONG OpenOptions);
771 
774 NTSTATUS
775 NTAPI
776 ZwRollforwardTransactionManager(
777  _In_ HANDLE TransactionManagerHandle,
779 
782 NTSTATUS
783 NTAPI
784 ZwRecoverTransactionManager(
785  _In_ HANDLE TransactionManagerHandle);
786 
789 NTSTATUS
790 NTAPI
791 ZwQueryInformationTransactionManager(
792  _In_ HANDLE TransactionManagerHandle,
796  _Out_opt_ PULONG ReturnLength);
797 
800 NTSTATUS
801 NTAPI
802 ZwSetInformationTransactionManager(
803  _In_ HANDLE TmHandle,
804  _In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass,
805  _In_ PVOID TransactionManagerInformation,
806  _In_ ULONG TransactionManagerInformationLength);
807 
810 NTSTATUS
811 NTAPI
812 ZwEnumerateTransactionObject(
813  _In_opt_ HANDLE RootObjectHandle,
817  _Out_ PULONG ReturnLength);
818 
821 NTSTATUS
822 NTAPI
823 ZwCreateTransaction(
824  _Out_ PHANDLE TransactionHandle,
825  _In_ ACCESS_MASK DesiredAccess,
826  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
828  _In_opt_ HANDLE TmHandle,
829  _In_opt_ ULONG CreateOptions,
832  _In_opt_ PLARGE_INTEGER Timeout,
834 
837 NTSTATUS
838 NTAPI
839 ZwOpenTransaction(
840  _Out_ PHANDLE TransactionHandle,
841  _In_ ACCESS_MASK DesiredAccess,
842  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
843  _In_ LPGUID Uow,
844  _In_opt_ HANDLE TmHandle);
845 
848 NTSTATUS
849 NTAPI
850 ZwQueryInformationTransaction(
851  _In_ HANDLE TransactionHandle,
855  _Out_opt_ PULONG ReturnLength);
856 
859 NTSTATUS
860 NTAPI
861 ZwSetInformationTransaction(
862  _In_ HANDLE TransactionHandle,
863  _In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass,
864  _In_ PVOID TransactionInformation,
865  _In_ ULONG TransactionInformationLength);
866 
869 NTSTATUS
870 NTAPI
871 ZwCommitTransaction(
872  _In_ HANDLE TransactionHandle,
874 
877 NTSTATUS
878 NTAPI
879 ZwRollbackTransaction(
880  _In_ HANDLE TransactionHandle,
881  _In_ BOOLEAN Wait);
882 
885 NTSTATUS
886 NTAPI
887 ZwCreateResourceManager(
889  _In_ ACCESS_MASK DesiredAccess,
890  _In_ HANDLE TmHandle,
892  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
893  _In_opt_ ULONG CreateOptions,
894  _In_opt_ PUNICODE_STRING Description);
895 
898 NTSTATUS
899 NTAPI
900 ZwOpenResourceManager(
901  _Out_ PHANDLE ResourceManagerHandle,
902  _In_ ACCESS_MASK DesiredAccess,
903  _In_ HANDLE TmHandle,
904  _In_ LPGUID ResourceManagerGuid,
905  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes);
906 
909 NTSTATUS
910 NTAPI
911 ZwRecoverResourceManager(
912  _In_ HANDLE ResourceManagerHandle);
913 
916 NTSTATUS
917 NTAPI
918 ZwGetNotificationResourceManager(
919  _In_ HANDLE ResourceManagerHandle,
922  _In_ PLARGE_INTEGER Timeout,
923  _Out_opt_ PULONG ReturnLength,
924  _In_ ULONG Asynchronous,
926 
929 NTSTATUS
930 NTAPI
931 ZwQueryInformationResourceManager(
932  _In_ HANDLE ResourceManagerHandle,
934  _Out_writes_bytes_(ResourceManagerInformationLength) PVOID ResourceManagerInformation,
936  _Out_opt_ PULONG ReturnLength);
937 
940 NTSTATUS
941 NTAPI
942 ZwSetInformationResourceManager(
943  _In_ HANDLE ResourceManagerHandle,
944  _In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass,
945  _In_reads_bytes_(ResourceManagerInformationLength) PVOID ResourceManagerInformation,
946  _In_ ULONG ResourceManagerInformationLength);
947 
950 NTSTATUS
951 NTAPI
952 ZwCreateEnlistment(
953  _Out_ PHANDLE EnlistmentHandle,
954  _In_ ACCESS_MASK DesiredAccess,
955  _In_ HANDLE ResourceManagerHandle,
956  _In_ HANDLE TransactionHandle,
957  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes,
958  _In_opt_ ULONG CreateOptions,
961 
964 NTSTATUS
965 NTAPI
966 ZwOpenEnlistment(
967  _Out_ PHANDLE EnlistmentHandle,
968  _In_ ACCESS_MASK DesiredAccess,
971  _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes);
972 
975 NTSTATUS
976 NTAPI
977 ZwQueryInformationEnlistment(
978  _In_ HANDLE EnlistmentHandle,
982  _Out_opt_ PULONG ReturnLength);
983 
986 NTSTATUS
987 NTAPI
988 ZwSetInformationEnlistment(
989  _In_ HANDLE EnlistmentHandle,
990  _In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass,
991  _In_reads_bytes_(EnlistmentInformationLength) PVOID EnlistmentInformation,
992  _In_ ULONG EnlistmentInformationLength);
993 
996 NTSTATUS
997 NTAPI
998 ZwRecoverEnlistment(
999  _In_ HANDLE EnlistmentHandle,
1000  _In_opt_ PVOID EnlistmentKey);
1001 
1004 NTSTATUS
1005 NTAPI
1006 ZwPrePrepareEnlistment(
1007  _In_ HANDLE EnlistmentHandle,
1008  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1009 
1012 NTSTATUS
1013 NTAPI
1014 ZwPrepareEnlistment(
1015  _In_ HANDLE EnlistmentHandle,
1016  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1017 
1020 NTSTATUS
1021 NTAPI
1022 ZwCommitEnlistment(
1023  _In_ HANDLE EnlistmentHandle,
1024  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1025 
1028 NTSTATUS
1029 NTAPI
1030 ZwRollbackEnlistment(
1031  _In_ HANDLE EnlistmentHandle,
1032  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1033 
1036 NTSTATUS
1037 NTAPI
1038 ZwPrePrepareComplete(
1039  _In_ HANDLE EnlistmentHandle,
1040  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1041 
1044 NTSTATUS
1045 NTAPI
1046 ZwPrepareComplete(
1047  _In_ HANDLE EnlistmentHandle,
1048  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1049 
1052 NTSTATUS
1053 NTAPI
1054 ZwCommitComplete(
1055  _In_ HANDLE EnlistmentHandle,
1056  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1057 
1060 NTSTATUS
1061 NTAPI
1062 ZwReadOnlyEnlistment(
1063  _In_ HANDLE EnlistmentHandle,
1064  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1065 
1067 NTSTATUS
1068 NTAPI
1070  _In_ HANDLE EnlistmentHandle,
1071  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1072 
1074 NTSTATUS
1075 NTAPI
1077  _In_ HANDLE EnlistmentHandle,
1078  _In_opt_ PLARGE_INTEGER TmVirtualClock);
1079 $endif (_WDMDDK_)
1080 $if (_NTIFS_)
1081 
1083 NTSYSAPI
1084 NTSTATUS
1085 NTAPI
1086 ZwLockFile(
1087  _In_ HANDLE FileHandle,
1089  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
1090  _In_opt_ PVOID ApcContext,
1091  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1092  _In_ PLARGE_INTEGER ByteOffset,
1093  _In_ PLARGE_INTEGER Length,
1094  _In_ ULONG Key,
1097 
1099 NTSYSAPI
1100 NTSTATUS
1101 NTAPI
1102 ZwUnlockFile(
1103  _In_ HANDLE FileHandle,
1104  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1105  _In_ PLARGE_INTEGER ByteOffset,
1106  _In_ PLARGE_INTEGER Length,
1107  _In_ ULONG Key);
1108 
1110 NTSYSAPI
1111 NTSTATUS
1112 NTAPI
1114  _In_ HANDLE FileHandle,
1115  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1116  _Out_writes_bytes_(Length) PVOID Buffer,
1117  _In_ ULONG Length,
1118  _In_ BOOLEAN ReturnSingleEntry,
1122  _In_ BOOLEAN RestartScan);
1123 
1125 NTSYSAPI
1126 NTSTATUS
1127 NTAPI
1129  _In_ HANDLE FileHandle,
1130  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1131  _In_reads_bytes_(Length) PVOID Buffer,
1132  _In_ ULONG Length);
1133 
1135 NTSYSAPI
1136 NTSTATUS
1137 NTAPI
1139  _In_ HANDLE FileHandle,
1140  _Out_ PIO_STATUS_BLOCK IoStatusBlock);
1141 $endif (_NTIFS_)
1142 $if (_WDMDDK_ || _NTIFS_)
1143 #endif /* (NTDDI_VERSION >= NTDDI_VISTA) */
1144 $endif (_WDMDDK_ || _NTIFS_)
1145 #if (NTDDI_VERSION >= NTDDI_WIN7)
1146 $if (_WDMDDK_)
1147 
1149 NTSYSAPI
1150 NTSTATUS
1151 NTAPI
1152 ZwOpenKeyEx(
1153  _Out_ PHANDLE KeyHandle,
1154  _In_ ACCESS_MASK DesiredAccess,
1155  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1156  _In_ ULONG OpenOptions);
1157 
1159 NTSYSAPI
1160 NTSTATUS
1161 NTAPI
1162 ZwOpenKeyTransactedEx(
1163  _Out_ PHANDLE KeyHandle,
1164  _In_ ACCESS_MASK DesiredAccess,
1165  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1166  _In_ ULONG OpenOptions,
1167  _In_ HANDLE TransactionHandle);
1168 
1169 NTSYSAPI
1170 NTSTATUS
1171 NTAPI
1173  _In_ HANDLE MasterKeyHandle,
1175  _In_opt_ OBJECT_ATTRIBUTES SubordinateObjects[],
1176  _In_opt_ HANDLE Event,
1177  _In_opt_ PIO_APC_ROUTINE ApcRoutine,
1178  _In_opt_ PVOID ApcContext,
1179  _Out_ PIO_STATUS_BLOCK IoStatusBlock,
1182  _Out_opt_ PVOID Buffer,
1184  _In_ BOOLEAN Asynchronous);
1185 
1186 NTSYSAPI
1187 NTSTATUS
1188 NTAPI
1190  _In_ HANDLE KeyHandle,
1191  _Inout_ PKEY_VALUE_ENTRY ValueEntries,
1193  _Out_ PVOID ValueBuffer,
1194  _Inout_ PULONG BufferLength,
1195  _Out_opt_ PULONG RequiredBufferLength);
1196 
1198 NTSYSAPI
1199 NTSTATUS
1200 NTAPI
1201 ZwRenameKey(
1202  _In_ HANDLE KeyHandle,
1204 
1206 NTSYSAPI
1207 NTSTATUS
1208 NTAPI
1209 ZwSetInformationKey(
1210  _In_ HANDLE KeyHandle,
1211  _In_ __drv_strictTypeMatch(__drv_typeConst) KEY_SET_INFORMATION_CLASS KeySetInformationClass,
1212  _In_reads_bytes_(KeySetInformationLength) PVOID KeySetInformation,
1214 
1215 $endif (_WDMDDK_)
1216 $if (_NTDDK_)
1217 
1219 NTSTATUS
1220 NTAPI
1221 ZwSetTimerEx(
1222  _In_ HANDLE TimerHandle,
1226 $endif (_NTDDK_)
1227 $if (_NTIFS_)
1228 
1230 NTSYSAPI
1231 NTSTATUS
1232 NTAPI
1234  _In_ HANDLE TokenHandle,
1235  _In_ TOKEN_INFORMATION_CLASS TokenInformationClass,
1236  _In_reads_bytes_(TokenInformationLength) PVOID TokenInformation,
1238 
1239 #if (VER_PRODUCTBUILD >= 2195)
1240 NTSYSAPI
1241 NTSTATUS
1242 NTAPI
1244  _In_ HANDLE TokenHandle,
1245  _In_ BOOLEAN DisableAllPrivileges,
1246  _In_ PTOKEN_PRIVILEGES NewState,
1247  _In_ ULONG BufferLength,
1248  _Out_opt_ PTOKEN_PRIVILEGES PreviousState,
1249  _Out_ PULONG ReturnLength
1250 );
1251 #endif /* (VER_PRODUCTBUILD >= 2195) */
1252 
1253 NTSYSAPI
1254 NTSTATUS
1255 NTAPI
1256 ZwAlertThread (
1257  _In_ HANDLE ThreadHandle
1258 );
1259 
1260 NTSYSAPI
1261 NTSTATUS
1262 NTAPI
1264  _In_ PUNICODE_STRING SubsystemName,
1265  _In_ PVOID HandleId,
1268  _In_ PSECURITY_DESCRIPTOR SecurityDescriptor,
1269  _In_ ACCESS_MASK DesiredAccess,
1271  _In_ BOOLEAN ObjectCreation,
1275 );
1276 
1277 #if (VER_PRODUCTBUILD >= 2195)
1278 NTSYSAPI
1279 NTSTATUS
1280 NTAPI
1282  _In_ HANDLE FileHandle,
1283  _Out_ PIO_STATUS_BLOCK IoStatusBlock
1284 );
1285 #endif /* (VER_PRODUCTBUILD >= 2195) */
1286 
1287 NTSYSAPI
1288 NTSTATUS
1289 NTAPI
1290 ZwClearEvent (
1291  _In_ HANDLE EventHandle
1292 );
1293 
1294 NTSYSAPI
1295 NTSTATUS
1296 NTAPI
1298  _In_ PUNICODE_STRING SubsystemName,
1299  _In_ PVOID HandleId,
1301 );
1302 
1303 NTSYSAPI
1304 NTSTATUS
1305 NTAPI
1307  _Out_ PHANDLE SymbolicLinkHandle,
1308  _In_ ACCESS_MASK DesiredAccess,
1309  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1311 );
1312 
1313 NTSYSAPI
1314 NTSTATUS
1315 NTAPI
1317  _In_ HANDLE ProcessHandle,
1318  _In_opt_ PVOID BaseAddress,
1319  _In_ ULONG FlushSize
1320 );
1321 
1322 NTSYSAPI
1323 NTSTATUS
1324 NTAPI
1326  _In_ HANDLE FileHandle,
1327  _Out_ PIO_STATUS_BLOCK IoStatusBlock
1328 );
1329 
1330 #if (VER_PRODUCTBUILD >= 2195)
1331 NTSYSAPI
1332 NTSTATUS
1333 NTAPI
1335  _In_ POWER_ACTION SystemAction,
1337  _In_ ULONG Flags,
1338  _In_ BOOLEAN Asynchronous
1339 );
1340 #endif /* (VER_PRODUCTBUILD >= 2195) */
1341 
1342 NTSYSAPI
1343 NTSTATUS
1344 NTAPI
1345 ZwLoadKey (
1346  _In_ POBJECT_ATTRIBUTES KeyObjectAttributes,
1347  _In_ POBJECT_ATTRIBUTES FileObjectAttributes
1348 );
1349 
1350 NTSYSAPI
1351 NTSTATUS
1352 NTAPI
1354  _In_ HANDLE ProcessHandle,
1355  _In_ ACCESS_MASK DesiredAccess,
1356  _Out_ PHANDLE TokenHandle
1357 );
1358 
1359 NTSYSAPI
1360 NTSTATUS
1361 NTAPI
1362 ZwOpenThread (
1363  _Out_ PHANDLE ThreadHandle,
1364  _In_ ACCESS_MASK DesiredAccess,
1365  _In_ POBJECT_ATTRIBUTES ObjectAttributes,
1366  _In_ PCLIENT_ID ClientId
1367 );
1368 
1369 NTSYSAPI
1370 NTSTATUS
1371 NTAPI
1373  _In_ HANDLE ThreadHandle,
1374  _In_ ACCESS_MASK DesiredAccess,
1375  _In_ BOOLEAN OpenAsSelf,
1376  _Out_ PHANDLE TokenHandle
1377 );
1378 
1379 NTSYSAPI
1380 NTSTATUS
1381 NTAPI
1382 ZwPulseEvent (
1383  _In_ HANDLE EventHandle,
1384  _In_opt_ PLONG PulseCount
1385 );
1386 
1387 NTSYSAPI
1388 NTSTATUS
1389 NTAPI
1391  _In_ BOOLEAN UserProfile,
1392  _Out_ PLCID DefaultLocaleId
1393 );
1394 
1395 #if (VER_PRODUCTBUILD >= 2195)
1397 NTSYSAPI
1398 NTSTATUS
1399 NTAPI
1400 ZwQueryDirectoryObject(
1401  _In_ HANDLE DirectoryHandle,
1402  _Out_ PVOID Buffer,
1403  _In_ ULONG BufferLength,
1404  _In_ BOOLEAN ReturnSingleEntry,
1405  _In_ BOOLEAN RestartScan,
1407  _Out_opt_ PULONG ReturnLength
1408 );
1409 #endif /* (VER_PRODUCTBUILD >= 2195) */
1410 
1411 NTSYSAPI
1412 NTSTATUS
1413 NTAPI
1415  _In_ HANDLE ProcessHandle,
1416  _In_ PROCESSINFOCLASS ProcessInformationClass,
1417  _Out_ PVOID ProcessInformation,
1418  _In_ ULONG ProcessInformationLength,
1419  _Out_opt_ PULONG ReturnLength
1420 );
1421 
1422 NTSYSAPI
1423 NTSTATUS
1424 NTAPI
1425 ZwReplaceKey (
1426  _In_ POBJECT_ATTRIBUTES NewFileObjectAttributes,
1427  _In_ HANDLE KeyHandle,
1428  _In_ POBJECT_ATTRIBUTES OldFileObjectAttributes
1429 );
1430 
1431 NTSYSAPI
1432 NTSTATUS
1433 NTAPI
1434 ZwResetEvent (
1435  _In_ HANDLE EventHandle,
1436  _Out_opt_ PLONG NumberOfWaitingThreads
1437 );
1438 
1439 #if (VER_PRODUCTBUILD >= 2195)
1440 NTSYSAPI
1441 NTSTATUS
1442 NTAPI
1443 ZwRestoreKey (
1444  _In_ HANDLE KeyHandle,
1445  _In_ HANDLE FileHandle,
1446  _In_ ULONG Flags
1447 );
1448 #endif /* (VER_PRODUCTBUILD >= 2195) */
1449 
1450 NTSYSAPI
1451 NTSTATUS
1452 NTAPI
1453 ZwSaveKey (
1454  _In_ HANDLE KeyHandle,
1455  _In_ HANDLE FileHandle
1456 );
1457 
1458 NTSYSAPI
1459 NTSTATUS
1460 NTAPI
1462  _In_ BOOLEAN UserProfile,
1463  _In_ LCID DefaultLocaleId
1464 );
1465 
1466 #if (VER_PRODUCTBUILD >= 2195)
1467 NTSYSAPI
1468 NTSTATUS
1469 NTAPI
1472 );
1473 #endif /* (VER_PRODUCTBUILD >= 2195) */
1474 
1475 NTSYSAPI
1476 NTSTATUS
1477 NTAPI
1479  _In_ HANDLE ProcessHandle,
1480  _In_ PROCESSINFOCLASS ProcessInformationClass,
1481  _In_ PVOID ProcessInformation,
1482  _In_ ULONG ProcessInformationLength
1483 );
1484 
1485 NTSYSAPI
1486 NTSTATUS
1487 NTAPI
1489  _In_ PLARGE_INTEGER NewTime,
1490  _Out_opt_ PLARGE_INTEGER OldTime
1491 );
1492 
1493 NTSYSAPI
1494 NTSTATUS
1495 NTAPI
1496 ZwUnloadKey (
1497  _In_ POBJECT_ATTRIBUTES KeyObjectAttributes
1498 );
1499 
1500 NTSYSAPI
1501 NTSTATUS
1502 NTAPI
1504  _In_ ULONG HandleCount,
1505  _In_ PHANDLE Handles,
1507  _In_ BOOLEAN Alertable,
1508  _In_opt_ PLARGE_INTEGER Timeout
1509 );
1510 
1511 NTSYSAPI
1512 NTSTATUS
1513 NTAPI
1515  VOID
1516 );
1517 
1518 $endif (_NTIFS_)
1519 #endif /* (NTDDI_VERSION >= NTDDI_WIN7) */
1520 
_In_ KTMOBJECT_TYPE QueryType
Definition: zwfuncs.h:814
DWORD *typedef PVOID
Definition: winlogon.h:52
NTSYSAPI NTSTATUS NTAPI ZwQueryQuotaInformationFile(_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_ PVOID Buffer, _In_ ULONG Length, _In_ BOOLEAN ReturnSingleEntry, _In_opt_ PVOID SidList, _In_ ULONG SidListLength, _In_opt_ PSID StartSid, _In_ BOOLEAN RestartScan)
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING LogFileName
Definition: zwfuncs.h:754
_In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass
Definition: zwfuncs.h:979
static POBJECTS_AND_NAME_A SE_OBJECT_TYPE LPSTR ObjectTypeName
Definition: security.c:79
$if(_WDMDDK_)$endif(_WDMDDK_) $if(_NTDDK_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwAllocateLocallyUniqueId(_Out_ PLUID Luid)
Definition: ke.h:1
_Inout_ PUNICODE_STRING _Out_opt_ PULONG ReturnedLength
Definition: zwfuncs.h:292
_In_ HANDLE ProcessHandle
Definition: zwfuncs.h:213
NTSYSAPI NTSTATUS NTAPI ZwCancelIoFile(_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG IoControlCode
Definition: zwfuncs.h:470
NTSYSAPI NTSTATUS NTAPI ZwFlushInstructionCache(_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ ULONG FlushSize)
#define _Must_inspect_result_
Definition: no_sal2.h:314
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG AllocationType
Definition: zwfuncs.h:214
NTSYSAPI NTSTATUS NTAPI ZwDeviceIoControlFile(IN HANDLE DeviceHandle, IN HANDLE Event OPTIONAL, IN PIO_APC_ROUTINE UserApcRoutine OPTIONAL, IN PVOID UserApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG IoControlCode, IN PVOID InputBuffer, IN ULONG InputBufferSize, OUT PVOID OutputBuffer, IN ULONG OutputBufferSize)
VOID(* PIO_APC_ROUTINE)(IN PVOID ApcContext, IN PIO_STATUS_BLOCK IoStatusBlock, IN ULONG Reserved)
Definition: nt_native.h:877
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG HandleAttributes
Definition: zwfuncs.h:578
_In_ TRANSACTION_INFORMATION_CLASS _In_ PVOID TransactionInformation
Definition: zwfuncs.h:863
Type
Definition: Type.h:6
NTSYSAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm(_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
_In_opt_ PLARGE_INTEGER TmVirtualClock
Definition: zwfuncs.h:778
_In_ SECURITY_INFORMATION SecurityInformation
Definition: zwfuncs.h:664
_Must_inspect_result_ _Out_ PNDIS_STATUS _In_ NDIS_HANDLE _In_ ULONG _Out_ PNDIS_STRING _Out_ PNDIS_HANDLE KeyHandle
Definition: ndis.h:4692
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE ApcRoutine
Definition: zwfuncs.h:315
NTSYSAPI NTSTATUS NTAPI ZwUnlockFile(_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_opt_ ULONG Key)
_In_ ULONG _In_ KEY_INFORMATION_CLASS KeyInformationClass
Definition: zwfuncs.h:166
NTSYSAPI NTSTATUS NTAPI ZwDeleteFile(_In_ POBJECT_ATTRIBUTES ObjectAttributes)
enum _KEY_INFORMATION_CLASS KEY_INFORMATION_CLASS
_In_ SECURITY_INFORMATION _Out_writes_bytes_to_(Length,*ResultLength) PSECURITY_DESCRIPTOR SecurityDescriptor
NTSYSAPI NTSTATUS NTAPI ZwFlushBuffersFile(_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
_In_ ACCESS_MASK _In_ HANDLE ResourceManagerHandle
Definition: zwfuncs.h:954
_In_ PSECURITY_SUBJECT_CONTEXT _In_ BOOLEAN _In_ ACCESS_MASK _In_ ACCESS_MASK _Outptr_opt_ PPRIVILEGE_SET _In_ PGENERIC_MAPPING _In_ KPROCESSOR_MODE _Out_ PACCESS_MASK _Out_ PNTSTATUS AccessStatus
Definition: sefuncs.h:13
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE _Out_ PHANDLE NewTokenHandle
Definition: zwfuncs.h:73
_In_ USHORT _In_ ULONG _In_ PSOCKADDR _In_ PSOCKADDR _Reserved_ ULONG _In_opt_ PVOID _In_opt_ const WSK_CLIENT_CONNECTION_DISPATCH _In_opt_ PEPROCESS _In_opt_ PETHREAD _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor
Definition: wsk.h:182
NTSYSAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject(_Out_ PHANDLE SymbolicLinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PUNICODE_STRING TargetName)
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER AllocationSize
Definition: zwfuncs.h:105
NTSYSAPI NTSTATUS NTAPI ZwClose(_In_ HANDLE Handle)
_Must_inspect_result_ _In_ WAIT_TYPE WaitType
Definition: fsrtlfuncs.h:1151
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG CreateOptions
Definition: zwfuncs.h:105
NTSYSAPI NTSTATUS NTAPI ZwReplaceKey(_In_ POBJECT_ATTRIBUTES NewFileObjectAttributes, _In_ HANDLE KeyHandle, _In_ POBJECT_ATTRIBUTES OldFileObjectAttributes)
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG _In_ BOOLEAN RestartScan
Definition: zwfuncs.h:53
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG SidListLength
Definition: zwfuncs.h:1120
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_opt_ PVOID EaBuffer
Definition: iofuncs.h:835
NTSYSAPI NTSTATUS NTAPI ZwOpenProcessTokenEx(_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
enum _RESOURCEMANAGER_INFORMATION_CLASS RESOURCEMANAGER_INFORMATION_CLASS
#define _NTIFS_
Definition: ifssupp.h:20
NTSYSAPI NTSTATUS NTAPI ZwWaitForMultipleObjects(_In_ ULONG HandleCount, _In_ PHANDLE Handles, _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
static HANDLE DirectoryHandle
Definition: ObType.c:48
NTSYSAPI NTSTATUS NTAPI ZwOpenDirectoryObject(_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
_In_ ACCESS_MASK _In_ HANDLE _In_ LPGUID EnlistmentGuid
Definition: zwfuncs.h:968
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG IsolationFlags
Definition: zwfuncs.h:825
_Inout_ __drv_aliasesMem PSLIST_ENTRY _Inout_ PSLIST_ENTRY _In_ ULONG Count
Definition: exfuncs.h:1015
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE TargetHandle
Definition: zwfuncs.h:578
#define _WDMDDK_
Definition: wdm.template.h:26
NTSYSCALLAPI NTSTATUS NTAPI ZwOpenEvent(_Out_ PHANDLE EventHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG IsolationLevel
Definition: zwfuncs.h:825
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN WatchTree
Definition: fltkernel.h:2239
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG FileAttributes
Definition: zwfuncs.h:105
#define NTSYSCALLAPI
Definition: ntbasedef.h:196
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES ObjectAttributes
Definition: zwfuncs.h:36
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG SectionPageProtection
Definition: zwfuncs.h:136
NTSYSAPI NTSTATUS NTAPI ZwPulseEvent(_In_ HANDLE EventHandle, _In_opt_ PLONG PulseCount)
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _Out_opt_ PULONG Disposition
Definition: zwfuncs.h:123
IN CINT OUT PVOID ObjectInformation
Definition: conport.c:47
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN ReturnSingleEntry
Definition: zwfuncs.h:50
WORD LANGID
Definition: typedefs.h:80
_In_ PVOID _Out_opt_ PULONG_PTR _Outptr_opt_ PCUNICODE_STRING * ObjectName
Definition: cmfuncs.h:62
NTSYSAPI NTSTATUS NTAPI ZwOpenThreadTokenEx(_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_reads_bytes_opt_(EaListLength) PVOID EaList
_In_ SYSTEM_POWER_STATE MinSystemState
Definition: ntpoapi.h:296
NTSYSAPI NTSTATUS NTAPI ZwYieldExecution(VOID)
NTSYSAPI NTSTATUS NTAPI ZwDisplayString(_In_ PUNICODE_STRING DisplayString)
enum _FILE_INFORMATION_CLASS FILE_INFORMATION_CLASS
Definition: file.c:104
_In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass
Definition: zwfuncs.h:933
_In_ TIMER_SET_INFORMATION_CLASS _Inout_updates_bytes_opt_(TimerSetInformationLength) PVOID TimerSetInformation
NTSYSAPI NTSTATUS NTAPI ZwClearEvent(_In_ HANDLE EventHandle)
#define NTSYSAPI
Definition: ntoskrnl.h:14
enum _SYSTEM_POWER_STATE SYSTEM_POWER_STATE
_In_ TRANSACTION_INFORMATION_CLASS _In_ ULONG TransactionInformationLength
Definition: zwfuncs.h:854
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN ResumeTimer
Definition: zwfuncs.h:428
_In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass
Definition: zwfuncs.h:852
CHAR InputBuffer[80]
Definition: conmgr.c:33
#define _In_opt_
Definition: no_sal2.h:213
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID * BaseAddress
Definition: zwfuncs.h:214
_Inout_ _Inout_ PSIZE_T RegionSize
Definition: zwfuncs.h:615
uint32_t ULONG_PTR
Definition: typedefs.h:64
_In_ ACCESS_MASK _In_ HANDLE _In_opt_ LPGUID ResourceManagerGuid
Definition: zwfuncs.h:889
enum _TIMER_SET_INFORMATION_CLASS TIMER_SET_INFORMATION_CLASS
_In_ ACCESS_MASK DesiredAccess
Definition: zwfuncs.h:36
_Inout_ PUNICODE_STRING LinkTarget
Definition: zwfuncs.h:292
NTSYSAPI NTSTATUS NTAPI ZwLockFile(_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_ ULONG Key, _In_ BOOLEAN FailImmediatedly, _In_ BOOLEAN ExclusiveLock)
_Must_inspect_result_ _In_ ULONG Flags
Definition: wsk.h:170
CHAR16 * String
Definition: acefiex.h:201
_In_ RESOURCEMANAGER_INFORMATION_CLASS _In_ ULONG ResourceManagerInformationLength
Definition: zwfuncs.h:935
ULONG_PTR * PSIZE_T
Definition: typedefs.h:79
NTSTATUS(* NTAPI)(IN PFILE_FULL_EA_INFORMATION EaBuffer, IN ULONG EaLength, OUT PULONG ErrorOffset)
Definition: IoEaTest.cpp:117
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR ZeroBits
Definition: zwfuncs.h:214
enum _OBJECT_INFORMATION_CLASS OBJECT_INFORMATION_CLASS
NTSYSAPI NTSTATUS NTAPI ZwQueryInformationProcess(_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _Out_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength, _Out_opt_ PULONG ReturnLength)
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT _In_ ULONG _In_ ULONG Protect
Definition: zwfuncs.h:214
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_opt_ HANDLE FileHandle
Definition: zwfuncs.h:136
_In_ TOKEN_INFORMATION_CLASS _In_ ULONG TokenInformationLength
Definition: zwfuncs.h:1237
long LONG
Definition: pedump.c:60
DWORD SECURITY_INFORMATION
Definition: ms-dtyp.idl:311
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE _In_ BOOLEAN InitialState
Definition: zwfuncs.h:516
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG ShareAccess
Definition: zwfuncs.h:105
_When_(Timeout==NULL, _IRQL_requires_max_(APC_LEVEL)) _When_(Timeout-> QuadPart!=0
NTSYSAPI NTSTATUS NTAPI ZwSetInformationToken(_In_ HANDLE TokenHandle, _In_ TOKEN_INFORMATION_CLASS TokenInformationClass, _Out_ PVOID TokenInformation, _In_ ULONG TokenInformationLength)
NTSYSAPI NTSTATUS NTAPI ZwInitiatePowerAction(_In_ POWER_ACTION SystemAction, _In_ SYSTEM_POWER_STATE MinSystemState, _In_ ULONG Flags, _In_ BOOLEAN Asynchronous)
UINTN * BufferSize
Definition: acefiex.h:370
enum _KEY_SET_INFORMATION_CLASS KEY_SET_INFORMATION_CLASS
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN WatchSubtree
Definition: zwfuncs.h:500
_In_ HANDLE _In_opt_ HANDLE TargetProcessHandle
Definition: zwfuncs.h:578
NTSYSAPI NTSTATUS NTAPI ZwCreateDirectoryObject(_Out_ PHANDLE DirectoryHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
_IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwTerminateProcess(_In_opt_ HANDLE ProcessHandle
Definition: Messaging.c:37
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG TitleIndex
Definition: zwfuncs.h:123
NTSYSAPI NTSTATUS NTAPI ZwFsControlFile(IN HANDLE DeviceHandle, IN HANDLE Event OPTIONAL, IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, IN PVOID ApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG IoControlCode, IN PVOID InputBuffer, IN ULONG InputBufferSize, OUT PVOID OutputBuffer, IN ULONG OutputBufferSize)
_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK NotificationMask
Definition: zwfuncs.h:954
NTSYSAPI NTSTATUS NTAPI ZwSetDefaultLocale(_In_ BOOLEAN UserProfile, _In_ LCID DefaultLocaleId)
NTSYSAPI NTSTATUS NTAPI ZwQueryDefaultLocale(_In_ BOOLEAN UserProfile, _Out_ PLCID DefaultLocaleId)
_In_ OBJECT_INFORMATION_CLASS ObjectInformationClass
Definition: zwfuncs.h:489
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG CreateDisposition
Definition: zwfuncs.h:105
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FILE_INFORMATION_CLASS FileInformationClass
Definition: zwfuncs.h:270
smooth NULL
Definition: ftsmooth.c:464
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG AllocationAttributes
Definition: zwfuncs.h:136
#define _Out_
Definition: no_sal2.h:323
#define _At_(target, annos)
Definition: no_sal2.h:11
Definition: bufpool.h:45
NTSYSAPI NTSTATUS NTAPI ZwUnloadDriver(_In_ PUNICODE_STRING DriverServiceName)
return(0)
NTSYSAPI NTSTATUS NTAPI ZwLoadKey(_In_ POBJECT_ATTRIBUTES KeyObjectAttributes, _In_ POBJECT_ATTRIBUTES FileObjectAttributes)
_Must_inspect_result_ __drv_aliasesMem _In_ PDEVICE_OBJECT _In_opt_ PVOID _In_ ULONG _Out_opt_ PVOID OutputBuffer
Definition: iofuncs.h:713
NTSYSAPI NTSTATUS NTAPI ZwAllocateLocallyUniqueId(_Out_ LUID *LocallyUniqueId)
_Out_ PIO_STATUS_BLOCK _Out_writes_bytes_(Length) PVOID Buffer
_In_ THREADINFOCLASS _In_ ULONG ThreadInformationLength
Definition: zwfuncs.h:421
_In_ ULONG _In_ KEY_INFORMATION_CLASS _In_ ULONG _Out_ PULONG ResultLength
Definition: zwfuncs.h:169
enum _EVENT_TYPE EVENT_TYPE
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PULONG EaIndex
Definition: zwfuncs.h:53
static LANGID LanguageId
Definition: usetup.c:101
_In_ _In_ ULONG KeySetInformationLength
Definition: zwfuncs.h:1213
VOID(NTAPI * PTIMER_APC_ROUTINE)(_In_ PVOID TimerContext, _In_ ULONG TimerLowValue, _In_ LONG TimerHighValue)
Definition: ketypes.h:1081
#define _Out_opt_
Definition: no_sal2.h:339
_In_ HANDLE Handle
Definition: extypes.h:390
unsigned char BOOLEAN
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ EVENT_TYPE EventType
Definition: zwfuncs.h:516
_In_ ULONG _In_ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass
Definition: zwfuncs.h:180
enum _TOKEN_TYPE TOKEN_TYPE
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN FailImmediately
Definition: zwfuncs.h:1088
enum _ENLISTMENT_INFORMATION_CLASS ENLISTMENT_INFORMATION_CLASS
_In_ TOKEN_INFORMATION_CLASS TokenInformationClass
Definition: zwfuncs.h:653
#define __kernel_entry
Definition: specstrings.h:50
enum _FSINFOCLASS FS_INFORMATION_CLASS
NTSYSAPI NTSTATUS NTAPI ZwUnloadKey(_In_ POBJECT_ATTRIBUTES KeyObjectAttributes)
_In_ BOOLEAN _In_opt_ PLARGE_INTEGER Timeout
Definition: zwfuncs.h:626
enum _TRANSACTIONMANAGER_INFORMATION_CLASS TRANSACTIONMANAGER_INFORMATION_CLASS
_In_ KTMOBJECT_TYPE _Inout_updates_bytes_(ObjectCursorLength) PKTMOBJECT_CURSOR ObjectCursor
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T ViewSize
Definition: zwfuncs.h:214
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ ULONG OpenOptions
Definition: zwfuncs.h:229
#define _Outptr_result_buffer_(size)
Definition: no_sal2.h:414
_In_ ENLISTMENT_INFORMATION_CLASS _In_ ULONG EnlistmentInformationLength
Definition: zwfuncs.h:981
_In_ TIMER_SET_INFORMATION_CLASS TimerSetInformationClass
Definition: zwfuncs.h:1223
_Must_inspect_result_ NTSYSAPI NTSTATUS NTAPI ZwAdjustPrivilegesToken(_In_ HANDLE TokenHandle, _In_ BOOLEAN DisableAllPrivileges, _In_opt_ PTOKEN_PRIVILEGES NewState, _In_ ULONG BufferLength, _Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_PRIVILEGES PreviousState, _When_(PreviousState!=NULL, _Out_) PULONG ReturnLength)
NTSYSAPI NTSTATUS NTAPI ZwQueryFullAttributesFile(_In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation)
enum _POWER_INFORMATION_LEVEL POWER_INFORMATION_LEVEL
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG BufferLength
Definition: zwfuncs.h:507
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_opt_ PSID StartSid
Definition: zwfuncs.h:1120
_In_opt_ PVOID _In_opt_ PUNICODE_STRING _In_ PSECURITY_DESCRIPTOR _In_ PACCESS_STATE _In_ BOOLEAN _In_ BOOLEAN _In_ KPROCESSOR_MODE _In_opt_ GUID _Out_ PBOOLEAN GenerateOnClose
Definition: sefuncs.h:414
enum _WAIT_TYPE WAIT_TYPE
NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackComplete(_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
#define _Inout_
Definition: no_sal2.h:244
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ PVOID TransactionManagerInformation
Definition: zwfuncs.h:804
_In_ ULONG Index
Definition: zwfuncs.h:166
_In_ THREADINFOCLASS ThreadInformationClass
Definition: zwfuncs.h:419
enum _TOKEN_INFORMATION_CLASS TOKEN_INFORMATION_CLASS
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS _In_ ULONG TransactionManagerInformationLength
Definition: zwfuncs.h:795
NTSYSAPI NTSTATUS NTAPI ZwQueryVolumeInformationFile(IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock, OUT PVOID FsInformation, IN ULONG Length, IN FS_INFORMATION_CLASS FsInformationClass)
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T CommitSize
Definition: zwfuncs.h:214
NTSYSAPI NTSTATUS NTAPI ZwOpenFile(_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG ShareAccess, _In_ ULONG OpenOptions)
enum _TIMER_TYPE TIMER_TYPE
#define _Reserved_
Definition: no_sal2.h:573
_In_opt_ HANDLE EventHandle
Definition: zwfuncs.h:500
NTSYSAPI NTSTATUS NTAPI ZwSetInformationProcess(_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _In_ PVOID ProcessInformation, _In_ ULONG ProcessInformationLength)
char * PBOOLEAN
Definition: retypes.h:11
NTSYSAPI NTSTATUS NTAPI ZwSetQuotaInformationFile(_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PVOID Buffer, _In_ ULONG BufferLength)
_In_ BOOLEAN Alertable
Definition: zwfuncs.h:626
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ TIMER_TYPE TimerType
Definition: zwfuncs.h:401
_In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass
Definition: zwfuncs.h:793
VOID UINTN Length
Definition: acefiex.h:718
POWER_ACTION
Definition: ntpoapi.h:122
PVOID *typedef PHANDLE
Definition: ntsecpkg.h:411
WCHAR TargetName[256]
Definition: arping.c:27
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ ULONG _In_opt_ ULONG CommitStrength
Definition: zwfuncs.h:754
NTSYSAPI NTSTATUS NTAPI ZwSaveKey(_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle)
_In_ TOKEN_INFORMATION_CLASS _Out_writes_bytes_to_opt_(Length,*ResultLength) PVOID TokenInformation
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE _In_opt_ ULONG _In_opt_ ULONG _In_opt_ ULONG _In_opt_ PLARGE_INTEGER _In_opt_ PUNICODE_STRING Description
Definition: zwfuncs.h:825
#define PASSIVE_LEVEL
Definition: env_spec_w32.h:693
NTSYSAPI NTSTATUS NTAPI ZwSetEvent(_In_ HANDLE EventHandle, _Out_opt_ PLONG PreviousState)
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID ApcContext
Definition: zwfuncs.h:315
_In_ __drv_strictTypeMatch(__drv_typeConst) KEY_SET_INFORMATION_CLASS KeySetInformationClass
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG EaListLength
Definition: zwfuncs.h:53
UINT64 UINTN DataSize
Definition: acefiex.h:494
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG Period
Definition: zwfuncs.h:428
__drv_allocatesMem(TimerObject)) NTSTATUS NTAPI ZwCreateTimer(_Out_ PHANDLE TimerHandle
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _In_opt_ PCLIENT_ID ClientId
Definition: zwfuncs.h:36
_In_ TIMER_SET_INFORMATION_CLASS _In_ ULONG TimerSetInformationLength
Definition: zwfuncs.h:1225
ACPI_EFI_STATUS ExitStatus
Definition: acefiex.h:480
#define DISPATCH_LEVEL
Definition: env_spec_w32.h:696
#define _In_
Definition: no_sal2.h:204
enum _TRANSACTION_INFORMATION_CLASS TRANSACTION_INFORMATION_CLASS
_Post_satisfies_(return< 0)) _When_(Length > 0
ULONG_PTR SIZE_T
Definition: typedefs.h:79
static GENERIC_MAPPING GenericMapping
Definition: SeInheritance.c:11
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID _In_ BOOLEAN _In_opt_ LONG _Out_opt_ PBOOLEAN PreviousState
Definition: zwfuncs.h:428
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER _Inout_ PSIZE_T _In_ SECTION_INHERIT InheritDisposition
Definition: zwfuncs.h:214
_Inout_ __drv_freesMem(Mem) PVOID *BaseAddress
Definition: exfuncs.h:1315
DWORD *typedef HANDLE
Definition: winlogon.h:52
LONG NTSTATUS
Definition: DriverTester.h:11
NTSYSAPI NTSTATUS NTAPI ZwOpenThread(_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PCLIENT_ID ClientId)
_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG NotificationLength
Definition: zwfuncs.h:920
enum _THREADINFOCLASS THREADINFOCLASS
Definition: thread.c:104
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_opt_ PLARGE_INTEGER ByteOffset
Definition: zwfuncs.h:320
NTSYSAPI NTSTATUS NTAPI ZwNotifyChangeMultipleKeys(_In_ HANDLE MasterKeyHandle, _In_opt_ ULONG Count, _In_opt_ OBJECT_ATTRIBUTES SubordinateObjects[], _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_opt_ PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)
_Out_ PTRANSACTION_NOTIFICATION _In_ ULONG _In_ PLARGE_INTEGER _Out_opt_ PULONG _In_ ULONG _In_opt_ ULONG_PTR AsynchronousContext
Definition: zwfuncs.h:920
_In_ HANDLE _Outptr_result_bytebuffer_ ViewSize PVOID _In_ ULONG_PTR _In_ SIZE_T _Inout_opt_ PLARGE_INTEGER SectionOffset
Definition: zwfuncs.h:214
NTSYSAPI NTSTATUS NTAPI ZwOpenProcessToken(_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
NTSYSAPI NTSTATUS NTAPI ZwOpenThreadToken(_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _Out_ PHANDLE TokenHandle)
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Out_ PIO_STATUS_BLOCK _In_opt_ PLARGE_INTEGER _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG _In_ ULONG EaLength
Definition: zwfuncs.h:115
_Inout_ _Inout_ PSIZE_T _In_ ULONG FreeType
Definition: zwfuncs.h:615
_Out_ PIO_STATUS_BLOCK IoStatusBlock
Definition: zwfuncs.h:48
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ BOOLEAN _In_ BOOLEAN ExclusiveLock
Definition: zwfuncs.h:1088
_Out_ PIO_STATUS_BLOCK _In_reads_bytes_(Length) PVOID Buffer
unsigned int * PULONG
Definition: retypes.h:1
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG _Out_opt_ PULONG ReturnLength
Definition: zwfuncs.h:491
_Inout_ PLIST_ENTRY _In_ PVOID _In_ PSTRING _In_ BOOLEAN _In_ BOOLEAN _In_ ULONG CompletionFilter
Definition: fltkernel.h:2239
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PUNICODE_STRING _In_opt_ LPGUID TmIdentity
Definition: zwfuncs.h:766
_In_ ULONG InputBufferLength
Definition: zwfuncs.h:449
_In_ PLARGE_INTEGER DueTime
Definition: zwfuncs.h:428
_In_ BOOLEAN Wait
Definition: cctypes.h:23
_In_ ACCESS_MASK _In_ POBJECT_ATTRIBUTES _Reserved_ ULONG _In_opt_ PUNICODE_STRING _In_ ULONG _In_ HANDLE TransactionHandle
Definition: zwfuncs.h:730
_In_ KTMOBJECT_TYPE _In_ ULONG ObjectCursorLength
Definition: zwfuncs.h:816
_In_ HANDLE _In_opt_ HANDLE _Out_opt_ PHANDLE _In_ ACCESS_MASK _In_ ULONG _In_ ULONG Options
Definition: zwfuncs.h:578
_In_ OBJECT_INFORMATION_CLASS _In_ ULONG ObjectInformationLength
Definition: zwfuncs.h:491
_In_ ACCESS_MASK _In_ ULONG _Out_ PHANDLE TokenHandle
Definition: zwfuncs.h:689
_In_ PUNICODE_STRING NewName
Definition: zwfuncs.h:1203
enum _PROCESSINFOCLASS PROCESSINFOCLASS
Definition: loader.c:59
Definition: nt_native.h:1172
_Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation
Definition: zwfuncs.h:383
enum _KTMOBJECT_TYPE KTMOBJECT_TYPE
$endif(_NTDDK_) $if(_NTIFS_) _IRQL_requires_max_(PASSIVE_LEVEL) NTSYSAPI NTSTATUS NTAPI ZwQueryEaFile(_In_ HANDLE FileHandle
Definition: iofuncs.h:2487
#define _Outptr_result_bytebuffer_(size)
Definition: no_sal2.h:420
ret QuadPart
Definition: rtlfuncs.h:3091
* PLCID
Definition: ntbasedef.h:508
unsigned int ULONG
Definition: retypes.h:1
ACCESS_MASK * PACCESS_MASK
Definition: nt_native.h:41
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE _In_opt_ PVOID TimerContext
Definition: zwfuncs.h:428
_In_ ACCESS_MASK _In_ BOOLEAN OpenAsSelf
Definition: zwfuncs.h:699
NTSYSAPI NTSTATUS NTAPI ZwQueryMultipleValueKey(_In_ HANDLE KeyHandle, _Inout_ PKEY_VALUE_ENTRY ValueEntries, _In_ ULONG EntryCount, _Out_ PVOID ValueBuffer, _Inout_ PULONG BufferLength, _Out_opt_ PULONG RequiredBufferLength)
_In_ PLARGE_INTEGER _In_opt_ PTIMER_APC_ROUTINE TimerApcRoutine
Definition: zwfuncs.h:428
NTSYSAPI NTSTATUS NTAPI ZwSetSystemTime(_In_ PLARGE_INTEGER NewTime, _Out_opt_ PLARGE_INTEGER OldTime)
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG FsControlCode
Definition: zwfuncs.h:562
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN EffectiveOnly
Definition: zwfuncs.h:73
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ PLARGE_INTEGER MaximumSize
Definition: zwfuncs.h:136
NTSYSAPI NTSTATUS NTAPI ZwResetEvent(_In_ HANDLE EventHandle, _Out_opt_ PLONG NumberOfWaitingThreads)
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID Uow
Definition: zwfuncs.h:825
NTSYSAPI NTSTATUS NTAPI ZwAccessCheckAndAuditAlarm(_In_ PUNICODE_STRING SubsystemName, _In_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PBOOLEAN AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
_In_ PUNICODE_STRING ValueName
Definition: zwfuncs.h:156
_Out_ PTRANSACTION_NOTIFICATION TransactionNotification
Definition: zwfuncs.h:920
NTSYSAPI NTSTATUS NTAPI ZwOpenSection(_Out_ PHANDLE SectionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
_In_ PSECURITY_SUBJECT_CONTEXT _In_ BOOLEAN _In_ ACCESS_MASK _In_ ACCESS_MASK _Outptr_opt_ PPRIVILEGE_SET _In_ PGENERIC_MAPPING _In_ KPROCESSOR_MODE _Out_ PACCESS_MASK GrantedAccess
Definition: sefuncs.h:13
_Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ FS_INFORMATION_CLASS FsInformationClass
Definition: zwfuncs.h:461
_In_ ULONG _In_ ULONG OutputBufferLength
Definition: zwfuncs.h:451
ULONG NOTIFICATION_MASK
Definition: ktmtypes.h:99
DWORD LCID
Definition: nls.h:14
signed int * PLONG
Definition: retypes.h:5
enum _SECTION_INHERIT SECTION_INHERIT
NTSYSAPI NTSTATUS NTAPI ZwMakeTemporaryObject(_In_ HANDLE Handle)
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_ BOOLEAN _In_ TOKEN_TYPE TokenType
Definition: zwfuncs.h:73
_In_ ACCESS_MASK _In_ HANDLE _In_ HANDLE _In_opt_ POBJECT_ATTRIBUTES _In_opt_ ULONG _In_ NOTIFICATION_MASK _In_opt_ PVOID EnlistmentKey
Definition: zwfuncs.h:954
_In_ ACCESS_MASK _In_opt_ POBJECT_ATTRIBUTES _In_opt_ LPGUID _In_opt_ HANDLE TmHandle
Definition: zwfuncs.h:825
#define APC_LEVEL
Definition: env_spec_w32.h:695
ACPI_EFI_GUID ACPI_EFI_OPEN_PROTOCOL_INFORMATION_ENTRY UINTN * EntryCount
Definition: acefiex.h:668
ULONG ACCESS_MASK
Definition: nt_native.h:40
NTSYSAPI NTSTATUS NTAPI ZwAlertThread(_In_ HANDLE ThreadHandle)
#define _NTDDK_
NTSYSAPI NTSTATUS NTAPI ZwSetDefaultUILanguage(LANGID LanguageId)
_Out_opt_ PBOOLEAN CurrentState
Definition: zwfuncs.h:393
_In_ ACCESS_MASK _In_ HANDLE RmHandle
Definition: zwfuncs.h:968
_In_ HANDLE SourceHandle
Definition: zwfuncs.h:578
NTSYSCALLAPI NTSTATUS NTAPI ZwSinglePhaseReject(_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG NotifyFilter
Definition: zwfuncs.h:500
NTSYSAPI NTSTATUS NTAPI ZwOpenSymbolicLinkObject(_Out_ PHANDLE SymbolicLinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
enum _KEY_VALUE_INFORMATION_CLASS KEY_VALUE_INFORMATION_CLASS
Definition: reg.c:135
#define _Inout_opt_
Definition: no_sal2.h:258
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE _In_opt_ PVOID _Out_ PIO_STATUS_BLOCK _In_ ULONG _In_ BOOLEAN _In_ ULONG _In_ BOOLEAN Asynchronous
Definition: zwfuncs.h:507
_In_ ULONG _In_ KEY_INFORMATION_CLASS _Out_writes_bytes_opt_(Length) PVOID KeyInformation