1 NTSTATUS 2 NTAPI 3 NtAcceptConnectPort( 4 OUT PHANDLE PortHandle, 5 IN PVOID PortIdentifier, 6 IN PPORT_MESSAGE Message, 7 IN BOOLEAN Accept, 8 IN OUT PPORT_VIEW ServerView OPTIONAL, 9 OUT PREMOTE_PORT_VIEW ClientView OPTIONAL 10 ); 11 12 NTSYSAPI 13 NTSTATUS 14 NTAPI 15 NtAccessCheck( 16 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 17 IN HANDLE TokenHandle, 18 IN ACCESS_MASK DesiredAccess, 19 IN PGENERIC_MAPPING GenericMapping, 20 OUT PPRIVILEGE_SET PrivilegeSet, 21 IN PULONG PrivilegeSetLength, 22 OUT PACCESS_MASK GrantedAccess, 23 OUT PBOOLEAN AccessStatus 24 ); 25 26 NTSYSAPI 27 NTSTATUS 28 NTAPI 29 NtAccessCheckAndAuditAlarm( 30 IN PUNICODE_STRING SubsystemName, 31 IN PVOID HandleId, 32 IN PUNICODE_STRING ObjectTypeName, 33 IN PUNICODE_STRING ObjectName, 34 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 35 IN ACCESS_MASK DesiredAccess, 36 IN PGENERIC_MAPPING GenericMapping, 37 IN BOOLEAN ObjectCreation, 38 OUT PACCESS_MASK GrantedAccess, 39 OUT PBOOLEAN AccessStatus, 40 OUT PBOOLEAN GenerateOnClose 41 ); 42 43 NTSYSAPI 44 NTSTATUS 45 NTAPI 46 NtAccessCheckByType( 47 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 48 IN PSID PrincipalSelfSid, 49 IN HANDLE TokenHandle, 50 IN ULONG DesiredAccess, 51 IN POBJECT_TYPE_LIST ObjectTypeList, 52 IN ULONG ObjectTypeListLength, 53 IN PGENERIC_MAPPING GenericMapping, 54 IN PPRIVILEGE_SET PrivilegeSet, 55 IN PULONG PrivilegeSetLength, 56 OUT PACCESS_MASK GrantedAccess, 57 OUT PULONG AccessStatus 58 ); 59 60 NTSYSAPI 61 NTSTATUS 62 NTAPI 63 NtAccessCheckByTypeAndAuditAlarm( 64 IN PUNICODE_STRING SubsystemName, 65 IN PVOID HandleId, 66 IN PUNICODE_STRING ObjectTypeName, 67 IN PUNICODE_STRING ObjectName, 68 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 69 IN PSID PrincipalSelfSid, 70 IN ACCESS_MASK DesiredAccess, 71 IN AUDIT_EVENT_TYPE AuditType, 72 IN ULONG Flags, 73 IN POBJECT_TYPE_LIST ObjectTypeList, 74 IN ULONG ObjectTypeListLength, 75 IN PGENERIC_MAPPING GenericMapping, 76 IN BOOLEAN ObjectCreation, 77 OUT PACCESS_MASK GrantedAccess, 78 OUT PULONG AccessStatus, 79 OUT PBOOLEAN GenerateOnClose 80 ); 81 82 NTSYSAPI 83 NTSTATUS 84 NTAPI 85 NtAccessCheckByTypeResultList( 86 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 87 IN PSID PrincipalSelfSid, 88 IN HANDLE TokenHandle, 89 IN ACCESS_MASK DesiredAccess, 90 IN POBJECT_TYPE_LIST ObjectTypeList, 91 IN ULONG ObjectTypeListLength, 92 IN PGENERIC_MAPPING GenericMapping, 93 IN PPRIVILEGE_SET PrivilegeSet, 94 IN PULONG PrivilegeSetLength, 95 OUT PACCESS_MASK GrantedAccessList, 96 OUT PULONG AccessStatusList 97 ); 98 99 NTSYSAPI 100 NTSTATUS 101 NTAPI 102 NtAccessCheckByTypeResultListAndAuditAlarm( 103 IN PUNICODE_STRING SubsystemName, 104 IN PVOID HandleId, 105 IN PUNICODE_STRING ObjectTypeName, 106 IN PUNICODE_STRING ObjectName, 107 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 108 IN PSID PrincipalSelfSid, 109 IN ACCESS_MASK DesiredAccess, 110 IN AUDIT_EVENT_TYPE AuditType, 111 IN ULONG Flags, 112 IN POBJECT_TYPE_LIST ObjectTypeList, 113 IN ULONG ObjectTypeListLength, 114 IN PGENERIC_MAPPING GenericMapping, 115 IN BOOLEAN ObjectCreation, 116 OUT PACCESS_MASK GrantedAccessList, 117 OUT PULONG AccessStatusList, 118 OUT PULONG GenerateOnClose 119 ); 120 121 NTSYSAPI 122 NTSTATUS 123 NTAPI 124 NtAccessCheckByTypeResultListAndAuditAlarmByHandle( 125 IN PUNICODE_STRING SubsystemName, 126 IN PVOID HandleId, 127 IN HANDLE TokenHandle, 128 IN PUNICODE_STRING ObjectTypeName, 129 IN PUNICODE_STRING ObjectName, 130 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 131 IN PSID PrincipalSelfSid, 132 IN ACCESS_MASK DesiredAccess, 133 IN AUDIT_EVENT_TYPE AuditType, 134 IN ULONG Flags, 135 IN POBJECT_TYPE_LIST ObjectTypeList, 136 IN ULONG ObjectTypeListLength, 137 IN PGENERIC_MAPPING GenericMapping, 138 IN BOOLEAN ObjectCreation, 139 OUT PACCESS_MASK GrantedAccessList, 140 OUT PULONG AccessStatusList, 141 OUT PULONG GenerateOnClose 142 ); 143 144 NTSYSAPI 145 NTSTATUS 146 NTAPI 147 NtAddAtom( 148 IN PWSTR String, 149 IN ULONG StringLength, 150 OUT PUSHORT Atom 151 ); 152 153 NTSYSAPI 154 NTSTATUS 155 NTAPI 156 NtAddBootEntry( 157 IN PUNICODE_STRING EntryName, 158 IN PUNICODE_STRING EntryValue 159 ); 160 161 NTSYSAPI 162 NTSTATUS 163 NTAPI 164 NtAddDriverEntry( 165 IN PUNICODE_STRING DriverName, 166 IN PUNICODE_STRING DriverPath 167 ); 168 169 NTSYSAPI 170 NTSTATUS 171 NTAPI 172 NtAdjustGroupsToken( 173 IN HANDLE TokenHandle, 174 IN BOOLEAN ResetToDefault, 175 IN PTOKEN_GROUPS NewState, 176 IN ULONG BufferLength, 177 OUT PTOKEN_GROUPS PreviousState OPTIONAL, 178 OUT PULONG ReturnLength 179 ); 180 181 NTSYSAPI 182 NTSTATUS 183 NTAPI 184 NtAdjustPrivilegesToken( 185 IN HANDLE TokenHandle, 186 IN BOOLEAN DisableAllPrivileges, 187 IN PTOKEN_PRIVILEGES NewState, 188 IN ULONG BufferLength, 189 OUT PTOKEN_PRIVILEGES PreviousState OPTIONAL, 190 OUT PULONG ReturnLength OPTIONAL 191 ); 192 193 NTSYSAPI 194 NTSTATUS 195 NTAPI 196 NtAlertResumeThread( 197 IN HANDLE ThreadHandle, 198 OUT PULONG PreviousSuspendCount OPTIONAL 199 ); 200 201 NTSYSAPI 202 NTSTATUS 203 NTAPI 204 NtAllocateLocallyUniqueId( 205 OUT PLUID Luid 206 ); 207 208 NTSYSAPI 209 NTSTATUS 210 NTAPI 211 NtAllocateUserPhysicalPages( 212 IN HANDLE ProcessHandle, 213 IN PULONG NumberOfPages, 214 OUT PULONG PageFrameNumbers 215 ); 216 217 NTSYSAPI 218 NTSTATUS 219 NTAPI 220 NtAllocateUuids( 221 OUT PLARGE_INTEGER UuidLastTimeAllocated, 222 OUT PULONG UuidDeltaTime, 223 OUT PULONG UuidSequenceNumber, 224 OUT PUCHAR UuidSeed 225 ); 226 NTSYSAPI 227 NTSTATUS 228 NTAPI 229 NtAllocateVirtualMemory( 230 IN HANDLE ProcessHandle, 231 IN OUT PVOID *BaseAddress, 232 IN ULONG ZeroBits, 233 IN OUT PULONG AllocationSize, 234 IN ULONG AllocationType, 235 IN ULONG Protect 236 ); 237 238 NTSYSAPI 239 NTSTATUS 240 NTAPI 241 NtApphelpCacheControl( 242 IN APPHELPCACHECONTROL ApphelpCacheControl, 243 IN PUNICODE_STRING ApphelpCacheObject 244 ); 245 246 NTSYSAPI 247 NTSTATUS 248 NTAPI 249 NtAreMappedFilesTheSame( 250 IN PVOID Address1, 251 IN PVOID Address2 252 ); 253 254 NTSYSAPI 255 NTSTATUS 256 NTAPI 257 NtAssignProcessToJobObject( 258 IN HANDLE JobHandle, 259 IN HANDLE ProcessHandle 260 ); 261 262 NTSYSAPI 263 NTSTATUS 264 NTAPI 265 NtCallbackReturn( 266 IN PVOID Result OPTIONAL, 267 IN ULONG ResultLength, 268 IN NTSTATUS Status 269 ); 270 271 NTSYSAPI 272 NTSTATUS 273 NTAPI 274 NtCancelDeviceWakeupRequest( 275 IN HANDLE DeviceHandle 276 ); 277 278 NTSYSAPI 279 NTSTATUS 280 NTAPI 281 NtCancelIoFile( 282 IN HANDLE FileHandle, 283 OUT PIO_STATUS_BLOCK IoStatusBlock 284 ); 285 286 NTSYSAPI 287 NTSTATUS 288 NTAPI 289 NtCancelTimer( 290 IN HANDLE TimerHandle, 291 OUT PBOOLEAN PreviousState OPTIONAL 292 ); 293 294 NTSYSAPI 295 NTSTATUS 296 NTAPI 297 NtClearEvent( 298 IN HANDLE EventHandle 299 ); 300 301 NTSYSAPI 302 NTSTATUS 303 NTAPI 304 NtClose( 305 IN HANDLE Handle 306 ); 307 308 NTSYSAPI 309 NTSTATUS 310 NTAPI 311 NtCloseObjectAuditAlarm( 312 IN PUNICODE_STRING SubsystemName, 313 IN PVOID HandleId, 314 IN BOOLEAN GenerateOnClose 315 ); 316 317 NTSYSAPI 318 NTSTATUS 319 NTAPI 320 NtCompactKeys( 321 IN ULONG Length, 322 IN HANDLE Key 323 ); 324 325 NTSYSAPI 326 NTSTATUS 327 NTAPI 328 NtCompareTokens( 329 IN HANDLE FirstTokenHandle, 330 IN HANDLE SecondTokenHandle, 331 OUT PBOOLEAN IdenticalTokens 332 ); 333 334 NTSYSAPI 335 NTSTATUS 336 NTAPI 337 NtCompleteConnectPort( 338 IN HANDLE PortHandle 339 ); 340 341 NTSYSAPI 342 NTSTATUS 343 NTAPI 344 NtCompressKey( 345 IN HANDLE Key 346 ); 347 348 NTSYSAPI 349 NTSTATUS 350 NTAPI 351 NtConnectPort( 352 OUT PHANDLE PortHandle, 353 IN PUNICODE_STRING PortName, 354 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos, 355 IN OUT PPORT_VIEW ClientView OPTIONAL, 356 OUT PREMOTE_PORT_VIEW ServerView OPTIONAL, 357 OUT PULONG MaxMessageLength OPTIONAL, 358 IN OUT PVOID ConnectInformation OPTIONAL, 359 IN OUT PULONG ConnectInformationLength OPTIONAL 360 ); 361 362 NTSYSAPI 363 NTSTATUS 364 NTAPI 365 NtContinue( 366 IN PCONTEXT Context, 367 IN BOOLEAN TestAlert 368 ); 369 370 371 372 NTSYSAPI 373 NTSTATUS 374 NTAPI 375 NtCreateDebugObject( 376 OUT PHANDLE DebugObject, 377 IN ULONG AccessRequired, 378 IN POBJECT_ATTRIBUTES ObjectAttributes, 379 IN BOOLEAN KillProcessOnExit 380 ); 381 382 NTSYSAPI 383 NTSTATUS 384 NTAPI 385 NtCreateDirectoryObject( 386 OUT PHANDLE DirectoryHandle, 387 IN ACCESS_MASK DesiredAccess, 388 IN POBJECT_ATTRIBUTES ObjectAttributes 389 ); 390 391 NTSYSAPI 392 NTSTATUS 393 NTAPI 394 NtCreateEvent( 395 OUT PHANDLE EventHandle, 396 IN ACCESS_MASK DesiredAccess, 397 IN POBJECT_ATTRIBUTES ObjectAttributes, 398 IN EVENT_TYPE EventType, 399 IN BOOLEAN InitialState 400 ); 401 402 NTSYSAPI 403 NTSTATUS 404 NTAPI 405 NtCreateEventPair( 406 OUT PHANDLE EventPairHandle, 407 IN ACCESS_MASK DesiredAccess, 408 IN POBJECT_ATTRIBUTES ObjectAttributes 409 ); 410 411 NTSYSAPI 412 NTSTATUS 413 NTAPI 414 NtCreateFile( 415 OUT PHANDLE FileHandle, 416 IN ACCESS_MASK DesiredAccess, 417 IN POBJECT_ATTRIBUTES ObjectAttributes, 418 OUT PIO_STATUS_BLOCK IoStatusBlock, 419 IN PLARGE_INTEGER AllocationSize OPTIONAL, 420 IN ULONG FileAttributes, 421 IN ULONG ShareAccess, 422 IN ULONG CreateDisposition, 423 IN ULONG CreateOptions, 424 IN PVOID EaBuffer OPTIONAL, 425 IN ULONG EaLength 426 ); 427 428 NTSYSAPI 429 NTSTATUS 430 NTAPI 431 NtCreateIoCompletion( 432 OUT PHANDLE IoCompletionHandle, 433 IN ACCESS_MASK DesiredAccess, 434 IN POBJECT_ATTRIBUTES ObjectAttributes, 435 IN ULONG NumberOfConcurrentThreads 436 ); 437 438 NTSYSAPI 439 NTSTATUS 440 NTAPI 441 NtCreateJobObject( 442 OUT PHANDLE JobHandle, 443 IN ACCESS_MASK DesiredAccess, 444 IN POBJECT_ATTRIBUTES ObjectAttributes 445 ); 446 447 NTSYSAPI 448 NTSTATUS 449 NTAPI 450 NtCreateJobSet( 451 IN ULONG Jobs, 452 IN PJOB_SET_ARRAY JobSet, 453 IN ULONG Reserved 454 ); 455 456 NTSYSAPI 457 NTSTATUS 458 NTAPI 459 NtCreateKey( 460 OUT PHANDLE KeyHandle, 461 IN ACCESS_MASK DesiredAccess, 462 IN POBJECT_ATTRIBUTES ObjectAttributes, 463 IN ULONG TitleIndex, 464 IN PUNICODE_STRING Class OPTIONAL, 465 IN ULONG CreateOptions, 466 OUT PULONG Disposition OPTIONAL 467 ); 468 469 NTSYSAPI 470 NTSTATUS 471 NTAPI 472 NtCreateKeyedEvent( 473 OUT PHANDLE KeyedEventHandle, 474 IN ACCESS_MASK DesiredAccess, 475 IN POBJECT_ATTRIBUTES ObjectAttributes, 476 IN ULONG Reserved 477 ); 478 479 NTSYSAPI 480 NTSTATUS 481 NTAPI 482 NtCreateMailslotFile( 483 OUT PHANDLE FileHandle, 484 IN ACCESS_MASK DesiredAccess, 485 IN POBJECT_ATTRIBUTES ObjectAttributes, 486 OUT PIO_STATUS_BLOCK IoStatusBlock, 487 IN ULONG CreateOptions, 488 IN ULONG InBufferSize, 489 IN ULONG MaxMessageSize, 490 IN PLARGE_INTEGER ReadTimeout OPTIONAL 491 ); 492 493 NTSYSAPI 494 NTSTATUS 495 NTAPI 496 NtCreateMutant( 497 OUT PHANDLE MutantHandle, 498 IN ACCESS_MASK DesiredAccess, 499 IN POBJECT_ATTRIBUTES ObjectAttributes, 500 IN BOOLEAN InitialOwner 501 ); 502 503 NTSYSAPI 504 NTSTATUS 505 NTAPI 506 NtCreateNamedPipeFile( 507 OUT PHANDLE FileHandle, 508 IN ACCESS_MASK DesiredAccess, 509 IN POBJECT_ATTRIBUTES ObjectAttributes, 510 OUT PIO_STATUS_BLOCK IoStatusBlock, 511 IN ULONG ShareAccess, 512 IN ULONG CreateDisposition, 513 IN ULONG CreateOptions, 514 IN BOOLEAN TypeMessage, 515 IN BOOLEAN ReadmodeMessage, 516 IN BOOLEAN Nonblocking, 517 IN ULONG MaxInstances, 518 IN ULONG InBufferSize, 519 IN ULONG OutBufferSize, 520 IN PLARGE_INTEGER DefaultTimeout OPTIONAL 521 ); 522 523 NTSYSAPI 524 NTSTATUS 525 NTAPI 526 NtCreatePagingFile( 527 IN PUNICODE_STRING FileName, 528 IN PULARGE_INTEGER InitialSize, 529 IN PULARGE_INTEGER MaximumSize, 530 IN ULONG Priority OPTIONAL 531 ); 532 533 NTSYSAPI 534 NTSTATUS 535 NTAPI 536 NtCreatePort( 537 OUT PHANDLE PortHandle, 538 IN POBJECT_ATTRIBUTES ObjectAttributes, 539 IN ULONG MaxConnectionInfoLength, 540 IN ULONG MaxMessageLength, 541 IN ULONG MaxPoolUsage 542 ); 543 544 NTSYSAPI 545 NTSTATUS 546 NTAPI 547 NtCreateProcess( 548 OUT PHANDLE ProcessHandle, 549 IN ACCESS_MASK DesiredAccess, 550 IN POBJECT_ATTRIBUTES ObjectAttributes, 551 IN HANDLE InheritFromProcessHandle, 552 IN BOOLEAN InheritHandles, 553 IN HANDLE SectionHandle OPTIONAL, 554 IN HANDLE DebugPort OPTIONAL, 555 IN HANDLE ExceptionPort OPTIONAL 556 ); 557 558 NTSYSAPI 559 NTSTATUS 560 NTAPI 561 NtCreateProcessEx( 562 OUT PHANDLE ProcessHandle, 563 IN ACCESS_MASK DesiredAccess, 564 IN POBJECT_ATTRIBUTES ObjectAttributes, 565 IN HANDLE InheritFromProcessHandle, 566 IN ULONG CreateFlags, 567 IN HANDLE SectionHandle OPTIONAL, 568 IN HANDLE DebugObject OPTIONAL, 569 IN HANDLE ExceptionPort OPTIONAL, 570 IN ULONG JobMemberLevel 571 ); 572 573 NTSYSAPI 574 NTSTATUS 575 NTAPI 576 NtCreateProfile( 577 OUT PHANDLE ProfileHandle, 578 IN HANDLE ProcessHandle, 579 IN PVOID Base, 580 IN ULONG Size, 581 IN ULONG BucketShift, 582 IN PULONG Buffer, 583 IN ULONG BufferLength, 584 IN KPROFILE_SOURCE Source, 585 IN ULONG ProcessorMask 586 ); 587 588 NTSYSAPI 589 NTSTATUS 590 NTAPI 591 NtCreateSection( 592 OUT PHANDLE SectionHandle, 593 IN ACCESS_MASK DesiredAccess, 594 IN POBJECT_ATTRIBUTES ObjectAttributes, 595 IN PLARGE_INTEGER SectionSize OPTIONAL, 596 IN ULONG Protect, 597 IN ULONG Attributes, 598 IN HANDLE FileHandle 599 ); 600 601 NTSYSAPI 602 NTSTATUS 603 NTAPI 604 NtCreateSemaphore( 605 OUT PHANDLE SemaphoreHandle, 606 IN ACCESS_MASK DesiredAccess, 607 IN POBJECT_ATTRIBUTES ObjectAttributes, 608 IN LONG InitialCount, 609 IN LONG MaximumCount 610 ); 611 612 NTSYSAPI 613 NTSTATUS 614 NTAPI 615 NtCreateSymbolicLinkObject( 616 OUT PHANDLE SymbolicLinkHandle, 617 IN ACCESS_MASK DesiredAccess, 618 IN POBJECT_ATTRIBUTES ObjectAttributes, 619 IN PUNICODE_STRING TargetName 620 ); 621 622 NTSYSAPI 623 NTSTATUS 624 NTAPI 625 NtCreateThread( 626 OUT PHANDLE ThreadHandle, 627 IN ACCESS_MASK DesiredAccess, 628 IN POBJECT_ATTRIBUTES ObjectAttributes, 629 IN HANDLE ProcessHandle, 630 OUT PCLIENT_ID ClientId, 631 IN PCONTEXT ThreadContext, 632 IN PUSER_STACK UserStack, 633 IN BOOLEAN CreateSuspended 634 ); 635 636 NTSYSAPI 637 NTSTATUS 638 NTAPI 639 NtCreateTimer( 640 OUT PHANDLE TimerHandle, 641 IN ACCESS_MASK DesiredAccess, 642 IN POBJECT_ATTRIBUTES ObjectAttributes, 643 IN TIMER_TYPE TimerType 644 ); 645 646 NTSYSAPI 647 NTSTATUS 648 NTAPI 649 NtCreateToken( 650 OUT PHANDLE TokenHandle, 651 IN ACCESS_MASK DesiredAccess, 652 IN POBJECT_ATTRIBUTES ObjectAttributes, 653 IN TOKEN_TYPE Type, 654 IN PLUID AuthenticationId, 655 IN PLARGE_INTEGER ExpirationTime, 656 IN PTOKEN_USER User, 657 IN PTOKEN_GROUPS Groups, 658 IN PTOKEN_PRIVILEGES Privileges, 659 IN PTOKEN_OWNER Owner, 660 IN PTOKEN_PRIMARY_GROUP PrimaryGroup, 661 IN PTOKEN_DEFAULT_DACL DefaultDacl, 662 IN PTOKEN_SOURCE Source 663 ); 664 665 NTSYSAPI 666 NTSTATUS 667 NTAPI 668 NtCreateWaitablePort( 669 OUT PHANDLE PortHandle, 670 IN POBJECT_ATTRIBUTES ObjectAttributes, 671 IN ULONG MaxConnectionInfoLength, 672 IN ULONG MaxMessageLength, 673 IN ULONG MaxPoolUsage 674 ); 675 676 NTSYSAPI 677 NTSTATUS 678 NTAPI 679 NtDebugActiveProcess( 680 IN HANDLE Process, 681 IN HANDLE DebugObject 682 ); 683 684 NTSYSAPI 685 NTSTATUS 686 NTAPI 687 NtDebugContinue( 688 IN HANDLE DebugObject, 689 IN PCLIENT_ID AppClientId, 690 IN NTSTATUS ContinueStatus 691 ); 692 693 NTSYSAPI 694 NTSTATUS 695 NTAPI 696 NtDelayExecution( 697 IN BOOLEAN Alertable, 698 IN PLARGE_INTEGER Interval 699 ); 700 701 NTSYSAPI 702 NTSTATUS 703 NTAPI 704 NtDeleteAtom( 705 IN USHORT Atom 706 ); 707 708 NTSYSAPI 709 NTSTATUS 710 NTAPI 711 NtDeleteBootEntry( 712 IN PUNICODE_STRING EntryName, 713 IN PUNICODE_STRING EntryValue 714 ); 715 716 NTSYSAPI 717 NTSTATUS 718 NTAPI 719 NtDeleteDriverEntry( 720 IN PUNICODE_STRING DriverName, 721 IN PUNICODE_STRING DriverPath 722 ); 723 724 NTSYSAPI 725 NTSTATUS 726 NTAPI 727 NtDeleteFile( 728 IN POBJECT_ATTRIBUTES ObjectAttributes 729 ); 730 731 NTSYSAPI 732 NTSTATUS 733 NTAPI 734 NtDeleteKey( 735 IN HANDLE KeyHandle 736 ); 737 738 NTSYSAPI 739 NTSTATUS 740 NTAPI 741 NtDeleteObjectAuditAlarm( 742 IN PUNICODE_STRING SubsystemName, 743 IN PVOID HandleId, 744 IN BOOLEAN GenerateOnClose 745 ); 746 747 NTSYSAPI 748 NTSTATUS 749 NTAPI 750 NtDeleteValueKey( 751 IN HANDLE KeyHandle, 752 IN PUNICODE_STRING ValueName 753 ); 754 755 NTSYSAPI 756 NTSTATUS 757 NTAPI 758 NtDeviceIoControlFile( 759 IN HANDLE FileHandle, 760 IN HANDLE Event OPTIONAL, 761 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 762 IN PVOID ApcContext OPTIONAL, 763 OUT PIO_STATUS_BLOCK IoStatusBlock, 764 IN ULONG IoControlCode, 765 IN PVOID InputBuffer OPTIONAL, 766 IN ULONG InputBufferLength, 767 OUT PVOID OutputBuffer OPTIONAL, 768 IN ULONG OutputBufferLength 769 ); 770 771 NTSYSAPI 772 NTSTATUS 773 NTAPI 774 NtDisplayString( 775 IN PUNICODE_STRING String 776 ); 777 778 NTSYSAPI 779 NTSTATUS 780 NTAPI 781 NtDuplicateObject( 782 IN HANDLE SourceProcessHandle, 783 IN HANDLE SourceHandle, 784 IN HANDLE TargetProcessHandle, 785 OUT PHANDLE TargetHandle OPTIONAL, 786 IN ACCESS_MASK DesiredAccess, 787 IN ULONG Attributes, 788 IN ULONG Options 789 ); 790 791 NTSYSAPI 792 NTSTATUS 793 NTAPI 794 NtDuplicateToken( 795 IN HANDLE ExistingTokenHandle, 796 IN ACCESS_MASK DesiredAccess, 797 IN POBJECT_ATTRIBUTES ObjectAttributes, 798 IN BOOLEAN EffectiveOnly, 799 IN TOKEN_TYPE TokenType, 800 OUT PHANDLE NewTokenHandle 801 ); 802 803 NTSYSAPI 804 NTSTATUS 805 NTAPI 806 NtEnumerateBootEntries( 807 IN ULONG Unknown1, 808 IN ULONG Unknown2 809 ); 810 NTSYSAPI 811 NTSTATUS 812 NTAPI 813 NtEnumerateKey( 814 IN HANDLE KeyHandle, 815 IN ULONG Index, 816 IN KEY_INFORMATION_CLASS KeyInformationClass, 817 OUT PVOID KeyInformation, 818 IN ULONG KeyInformationLength, 819 OUT PULONG ResultLength 820 ); 821 822 NTSYSAPI 823 NTSTATUS 824 NTAPI 825 NtEnumerateSystemEnvironmentValuesEx( 826 IN ULONG Unknown1, 827 IN ULONG Unknown2, 828 IN ULONG Unknown3 829 ); 830 831 NTSYSAPI 832 NTSTATUS 833 NTAPI 834 NtEnumerateValueKey( 835 IN HANDLE KeyHandle, 836 IN ULONG Index, 837 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, 838 OUT PVOID KeyValueInformation, 839 IN ULONG KeyValueInformationLength, 840 OUT PULONG ResultLength 841 ); 842 843 NTSYSAPI 844 NTSTATUS 845 NTAPI 846 NtExtendSection( 847 IN HANDLE SectionHandle, 848 IN PLARGE_INTEGER SectionSize 849 ); 850 851 NTSYSAPI 852 NTSTATUS 853 NTAPI 854 NtFilterToken( 855 IN HANDLE ExistingTokenHandle, 856 IN ULONG Flags, 857 IN PTOKEN_GROUPS SidsToDisable, 858 IN PTOKEN_PRIVILEGES PrivilegesToDelete, 859 IN PTOKEN_GROUPS SidsToRestricted, 860 OUT PHANDLE NewTokenHandle 861 ); 862 863 NTSYSAPI 864 NTSTATUS 865 NTAPI 866 NtFindAtom( 867 IN PWSTR String, 868 IN ULONG StringLength, 869 OUT PUSHORT Atom 870 ); 871 872 NTSYSAPI 873 NTSTATUS 874 NTAPI 875 NtFlushBuffersFile( 876 IN HANDLE FileHandle, 877 OUT PIO_STATUS_BLOCK IoStatusBlock 878 ); 879 880 NTSYSAPI 881 NTSTATUS 882 NTAPI 883 NtFlushInstructionCache( 884 IN HANDLE ProcessHandle, 885 IN PVOID BaseAddress OPTIONAL, 886 IN ULONG FlushSize 887 ); 888 889 NTSYSAPI 890 NTSTATUS 891 NTAPI 892 NtFlushKey( 893 IN HANDLE KeyHandle 894 ); 895 896 NTSYSAPI 897 NTSTATUS 898 NTAPI 899 NtFlushVirtualMemory( 900 IN HANDLE ProcessHandle, 901 IN OUT PVOID *BaseAddress, 902 IN OUT PULONG FlushSize, 903 OUT PIO_STATUS_BLOCK IoStatusBlock 904 ); 905 906 NTSYSAPI 907 NTSTATUS 908 NTAPI 909 NtFlushWriteBuffer( 910 VOID 911 ); 912 913 NTSYSAPI 914 NTSTATUS 915 NTAPI 916 NtYieldExecution( 917 VOID 918 ); 919 920 NTSYSAPI 921 NTSTATUS 922 NTAPI 923 NtWriteVirtualMemory( 924 IN HANDLE ProcessHandle, 925 IN PVOID BaseAddress, 926 IN PVOID Buffer, 927 IN ULONG BufferLength, 928 OUT PULONG ReturnLength OPTIONAL 929 ); 930 931 NTSYSAPI 932 NTSTATUS 933 NTAPI 934 NtWriteRequestData( 935 IN HANDLE PortHandle, 936 IN PPORT_MESSAGE Message, 937 IN ULONG Index, 938 IN PVOID Buffer, 939 IN ULONG BufferLength, 940 OUT PULONG ReturnLength OPTIONAL 941 ); 942 943 NTSYSAPI 944 NTSTATUS 945 NTAPI 946 NtWriteFileGather( 947 IN HANDLE FileHandle, 948 IN HANDLE Event OPTIONAL, 949 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 950 IN PVOID ApcContext OPTIONAL, 951 OUT PIO_STATUS_BLOCK IoStatusBlock, 952 IN PFILE_SEGMENT_ELEMENT Buffer, 953 IN ULONG Length, 954 IN PLARGE_INTEGER ByteOffset OPTIONAL, 955 IN PULONG Key OPTIONAL 956 ); 957 958 NTSYSAPI 959 NTSTATUS 960 NTAPI 961 NtWriteFile( 962 IN HANDLE FileHandle, 963 IN HANDLE Event OPTIONAL, 964 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 965 IN PVOID ApcContext OPTIONAL, 966 OUT PIO_STATUS_BLOCK IoStatusBlock, 967 IN PVOID Buffer, 968 IN ULONG Length, 969 IN PLARGE_INTEGER ByteOffset OPTIONAL, 970 IN PULONG Key OPTIONAL 971 ); 972 NTSYSAPI 973 NTSTATUS 974 NTAPI 975 NtWaitLowEventPair( 976 IN HANDLE EventPairHandle 977 ); 978 979 NTSYSAPI 980 NTSTATUS 981 NTAPI 982 NtWaitHighEventPair( 983 IN HANDLE EventPairHandle 984 ); 985 986 NTSYSAPI 987 NTSTATUS 988 NTAPI 989 NtWaitForSingleObject( 990 IN HANDLE Handle, 991 IN BOOLEAN Alertable, 992 IN PLARGE_INTEGER Timeout OPTIONAL 993 ); 994 995 NTSYSAPI 996 NTSTATUS 997 NTAPI 998 NtWaitForMultipleObjects32( 999 IN ULONG HandleCount, 1000 IN PHANDLE Handles, 1001 IN WAIT_TYPE WaitType, 1002 IN BOOLEAN Alertable, 1003 IN PLARGE_INTEGER Timeout OPTIONAL 1004 ); 1005 1006 NTSYSAPI 1007 NTSTATUS 1008 NTAPI 1009 NtWaitForMultipleObjects( 1010 IN ULONG HandleCount, 1011 IN PHANDLE Handles, 1012 IN WAIT_TYPE WaitType, 1013 IN BOOLEAN Alertable, 1014 IN PLARGE_INTEGER Timeout OPTIONAL 1015 ); 1016 1017 NTSYSAPI 1018 NTSTATUS 1019 NTAPI 1020 NtWaitForKeyedEvent( 1021 IN HANDLE KeyedEventHandle, 1022 IN PVOID Key, 1023 IN BOOLEAN Alertable, 1024 IN PLARGE_INTEGER Timeout OPTIONAL 1025 ); 1026 1027 NTSYSAPI 1028 NTSTATUS 1029 NTAPI 1030 NtWaitForDebugEvent( 1031 IN HANDLE DebugObject, 1032 IN BOOLEAN Alertable, 1033 IN PLARGE_INTEGER Timeout OPTIONAL, 1034 OUT PDBGUI_WAIT_STATE_CHANGE StateChange 1035 ); 1036 1037 NTSYSAPI 1038 NTSTATUS 1039 NTAPI 1040 NtVdmControl( 1041 IN VDMSERVICECLASS Service, 1042 IN OUT PVOID ServiceData 1043 ); 1044 1045 NTSYSAPI 1046 NTSTATUS 1047 NTAPI 1048 NtUnmapViewOfSection( 1049 IN HANDLE ProcessHandle, 1050 IN PVOID BaseAddress 1051 ); 1052 1053 NTSYSAPI 1054 NTSTATUS 1055 NTAPI 1056 NtUnlockVirtualMemory( 1057 IN HANDLE ProcessHandle, 1058 IN OUT PVOID *BaseAddress, 1059 IN OUT PULONG LockSize, 1060 IN ULONG LockType 1061 ); 1062 1063 NTSYSAPI 1064 NTSTATUS 1065 NTAPI 1066 NtUnlockFile( 1067 IN HANDLE FileHandle, 1068 OUT PIO_STATUS_BLOCK IoStatusBlock, 1069 IN PULARGE_INTEGER LockOffset, 1070 IN PULARGE_INTEGER LockLength, 1071 IN ULONG Key 1072 ); 1073 1074 NTSYSAPI 1075 NTSTATUS 1076 NTAPI 1077 NtUnloadKeyEx( 1078 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 1079 IN HANDLE EventHandle OPTIONAL 1080 ); 1081 1082 NTSYSAPI 1083 NTSTATUS 1084 NTAPI 1085 NtUnloadKey2( 1086 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 1087 IN BOOLEAN ForceUnload 1088 ); 1089 1090 NTSYSAPI 1091 NTSTATUS 1092 NTAPI 1093 NtUnloadKey( 1094 IN POBJECT_ATTRIBUTES KeyObjectAttributes 1095 ); 1096 1097 NTSYSAPI 1098 NTSTATUS 1099 NTAPI 1100 NtUnloadDriver( 1101 IN PUNICODE_STRING DriverServiceName 1102 ); 1103 1104 NTSYSAPI 1105 NTSTATUS 1106 NTAPI 1107 NtTranslateFilePath( 1108 PFILE_PATH InputFilePath, 1109 ULONG OutputType, 1110 PFILE_PATH OutputFilePath, 1111 ULONG OutputFilePathLength 1112 ); 1113 1114 NTSYSAPI 1115 NTSTATUS 1116 NTAPI 1117 NtTraceEvent( 1118 IN ULONG TraceHandle, 1119 IN ULONG Flags, 1120 IN ULONG TraceHeaderLength, 1121 IN PEVENT_TRACE_HEADER TraceHeader 1122 ); 1123 1124 NTSYSAPI 1125 NTSTATUS 1126 NTAPI 1127 NtTerminateThread( 1128 IN HANDLE ThreadHandle OPTIONAL, 1129 IN NTSTATUS ExitStatus 1130 ); 1131 1132 NTSYSAPI 1133 NTSTATUS 1134 NTAPI 1135 NtTerminateProcess( 1136 IN HANDLE ProcessHandle OPTIONAL, 1137 IN NTSTATUS ExitStatus 1138 ); 1139 1140 NTSYSAPI 1141 NTSTATUS 1142 NTAPI 1143 NtTerminateJobObject( 1144 IN HANDLE JobHandle, 1145 IN NTSTATUS ExitStatus 1146 ); 1147 1148 NTSYSAPI 1149 NTSTATUS 1150 NTAPI 1151 NtSystemDebugControl( 1152 IN DEBUG_CONTROL_CODE ControlCode, 1153 IN PVOID InputBuffer OPTIONAL, 1154 IN ULONG InputBufferLength, 1155 OUT PVOID OutputBuffer OPTIONAL, 1156 IN ULONG OutputBufferLength, 1157 OUT PULONG ReturnLength OPTIONAL 1158 ); 1159 1160 NTSYSAPI 1161 NTSTATUS 1162 NTAPI 1163 NtSuspendThread( 1164 IN HANDLE ThreadHandle, 1165 OUT PULONG PreviousSuspendCount OPTIONAL 1166 ); 1167 1168 NTSYSAPI 1169 NTSTATUS 1170 NTAPI 1171 NtSuspendProcess( 1172 IN HANDLE Process 1173 ); 1174 1175 NTSYSAPI 1176 NTSTATUS 1177 NTAPI 1178 NtStopProfile( 1179 IN HANDLE ProfileHandle 1180 ); 1181 NTSYSAPI 1182 NTSTATUS 1183 NTAPI 1184 NtStartProfile( 1185 IN HANDLE ProfileHandle 1186 ); 1187 1188 NTSYSAPI 1189 NTSTATUS 1190 NTAPI 1191 NtSignalAndWaitForSingleObject( 1192 IN HANDLE HandleToSignal, 1193 IN HANDLE HandleToWait, 1194 IN BOOLEAN Alertable, 1195 IN PLARGE_INTEGER Timeout OPTIONAL 1196 ); 1197 1198 NTSYSAPI 1199 NTSTATUS 1200 NTAPI 1201 NtShutdownSystem( 1202 IN SHUTDOWN_ACTION Action 1203 ); 1204 1205 NTSYSAPI 1206 NTSTATUS 1207 NTAPI 1208 NtSetVolumeInformationFile( 1209 IN HANDLE FileHandle, 1210 OUT PIO_STATUS_BLOCK IoStatusBlock, 1211 IN PVOID Buffer, 1212 IN ULONG BufferLength, 1213 IN FS_INFORMATION_CLASS VolumeInformationClass 1214 ); 1215 1216 NTSYSAPI 1217 NTSTATUS 1218 NTAPI 1219 NtSetValueKey( 1220 IN HANDLE KeyHandle, 1221 IN PUNICODE_STRING ValueName, 1222 IN ULONG TitleIndex, 1223 IN ULONG Type, 1224 IN PVOID Data, 1225 IN ULONG DataSize 1226 ); 1227 1228 NTSYSAPI 1229 NTSTATUS 1230 NTAPI 1231 NtSetUuidSeed( 1232 IN PUCHAR UuidSeed 1233 ); 1234 1235 NTSYSAPI 1236 NTSTATUS 1237 NTAPI 1238 NtSetTimerResolution( 1239 IN ULONG RequestedResolution, 1240 IN BOOLEAN Set, 1241 OUT PULONG ActualResolution 1242 ); 1243 1244 NTSYSAPI 1245 NTSTATUS 1246 NTAPI 1247 NtSetTimer( 1248 IN HANDLE TimerHandle, 1249 IN PLARGE_INTEGER DueTime, 1250 IN PTIMER_APC_ROUTINE TimerApcRoutine OPTIONAL, 1251 IN PVOID TimerContext, 1252 IN BOOLEAN Resume, 1253 IN LONG Period, 1254 OUT PBOOLEAN PreviousState OPTIONAL 1255 ); 1256 1257 NTSYSAPI 1258 NTSTATUS 1259 NTAPI 1260 NtSetThreadExecutionState( 1261 IN EXECUTION_STATE ExecutionState, 1262 OUT PEXECUTION_STATE PreviousExecutionState 1263 ); 1264 1265 NTSYSAPI 1266 NTSTATUS 1267 NTAPI 1268 NtSetSystemTime( 1269 IN PLARGE_INTEGER NewTime, 1270 OUT PLARGE_INTEGER OldTime OPTIONAL 1271 ); 1272 1273 NTSYSAPI 1274 NTSTATUS 1275 NTAPI 1276 NtSetSystemPowerState( 1277 IN POWER_ACTION SystemAction, 1278 IN SYSTEM_POWER_STATE MinSystemState, 1279 IN ULONG Flags 1280 ); 1281 1282 NTSYSAPI 1283 NTSTATUS 1284 NTAPI 1285 NtSetSystemInformation( 1286 IN SYSTEM_INFORMATION_CLASS SystemInformationClass, 1287 IN OUT PVOID SystemInformation, 1288 IN ULONG SystemInformationLength 1289 ); 1290 1291 NTSYSAPI 1292 NTSTATUS 1293 NTAPI 1294 NtSetSystemEnvironmentValue( 1295 IN PUNICODE_STRING Name, 1296 IN PUNICODE_STRING Value 1297 ); 1298 1299 NTSYSAPI 1300 NTSTATUS 1301 NTAPI 1302 NtSetSecurityObject( 1303 IN HANDLE Handle, 1304 IN SECURITY_INFORMATION SecurityInformation, 1305 IN PSECURITY_DESCRIPTOR SecurityDescriptor 1306 ); 1307 1308 NTSYSAPI 1309 NTSTATUS 1310 NTAPI 1311 NtSetQuotaInformationFile( 1312 IN HANDLE FileHandle, 1313 OUT PIO_STATUS_BLOCK IoStatusBlock, 1314 IN PFILE_USER_QUOTA_INFORMATION Buffer, 1315 IN ULONG BufferLength 1316 ); 1317 1318 NTSYSAPI 1319 NTSTATUS 1320 NTAPI 1321 NtSetLowWaitHighEventPair( 1322 IN HANDLE EventPairHandle 1323 ); 1324 1325 NTSYSAPI 1326 NTSTATUS 1327 NTAPI 1328 NtSetLowEventPair( 1329 IN HANDLE EventPairHandle 1330 ); 1331 1332 NTSYSAPI 1333 NTSTATUS 1334 NTAPI 1335 NtSetLdtEntries( 1336 IN ULONG Selector1, 1337 IN LDT_ENTRY LdtEntry1, 1338 IN ULONG Selector2, 1339 IN LDT_ENTRY LdtEntry2 1340 ); 1341 1342 NTSYSAPI 1343 NTSTATUS 1344 NTAPI 1345 NtSetIoCompletion( 1346 IN HANDLE IoCompletionHandle, 1347 IN ULONG CompletionKey, 1348 IN ULONG CompletionValue, 1349 IN NTSTATUS Status, 1350 IN ULONG Information 1351 ); 1352 1353 NTSYSAPI 1354 NTSTATUS 1355 NTAPI 1356 NtSetIntervalProfile( 1357 IN ULONG Interval, 1358 IN KPROFILE_SOURCE Source 1359 ); 1360 1361 NTSYSAPI 1362 NTSTATUS 1363 NTAPI 1364 NtSetInformationToken( 1365 IN HANDLE TokenHandle, 1366 IN TOKEN_INFORMATION_CLASS TokenInformationClass, 1367 IN PVOID TokenInformation, 1368 IN ULONG TokenInformationLength 1369 ); 1370 1371 NTSYSAPI 1372 NTSTATUS 1373 NTAPI 1374 NtSetInformationThread( 1375 IN HANDLE ThreadHandle, 1376 IN THREADINFOCLASS ThreadInformationClass, 1377 IN PVOID ThreadInformation, 1378 IN ULONG ThreadInformationLength 1379 ); 1380 1381 NTSYSAPI 1382 NTSTATUS 1383 NTAPI 1384 NtSetInformationProcess( 1385 IN HANDLE ProcessHandle, 1386 IN PROCESSINFOCLASS ProcessInformationClass, 1387 IN PVOID ProcessInformation, 1388 IN ULONG ProcessInformationLength 1389 ); 1390 1391 NTSYSAPI 1392 NTSTATUS 1393 NTAPI 1394 NtSetInformationObject( 1395 IN HANDLE ObjectHandle, 1396 IN OBJECT_INFORMATION_CLASS ObjectInformationClass, 1397 IN PVOID ObjectInformation, 1398 IN ULONG ObjectInformationLength 1399 ); 1400 1401 NTSYSAPI 1402 NTSTATUS 1403 NTAPI 1404 NtSetInformationKey( 1405 IN HANDLE KeyHandle, 1406 IN KEY_SET_INFORMATION_CLASS KeyInformationClass, 1407 IN PVOID KeyInformation, 1408 IN ULONG KeyInformationLength 1409 ); 1410 1411 NTSYSAPI 1412 NTSTATUS 1413 NTAPI 1414 NtSetInformationJobObject( 1415 IN HANDLE JobHandle, 1416 IN JOBOBJECTINFOCLASS JobInformationClass, 1417 IN PVOID JobInformation, 1418 IN ULONG JobInformationLength 1419 ); 1420 1421 NTSYSAPI 1422 NTSTATUS 1423 NTAPI 1424 NtSetInformationFile( 1425 IN HANDLE FileHandle, 1426 OUT PIO_STATUS_BLOCK IoStatusBlock, 1427 IN PVOID FileInformation, 1428 IN ULONG FileInformationLength, 1429 IN FILE_INFORMATION_CLASS FileInformationClass 1430 ); 1431 NTSYSAPI 1432 NTSTATUS 1433 NTAPI 1434 NtSetInformationDebugObject( 1435 IN HANDLE DebugObject, 1436 IN DEBUGOBJECTINFOCLASS DebugObjectInformationClass, 1437 IN PVOID DebugInformation, 1438 IN ULONG DebugInformationLength, 1439 OUT PULONG ReturnLength OPTIONAL 1440 ); 1441 1442 NTSYSAPI 1443 NTSTATUS 1444 NTAPI 1445 NtSetHighWaitLowEventPair( 1446 IN HANDLE EventPairHandle 1447 ); 1448 1449 NTSYSAPI 1450 NTSTATUS 1451 NTAPI 1452 NtSetHighEventPair( 1453 IN HANDLE EventPairHandle 1454 ); 1455 1456 NTSYSAPI 1457 NTSTATUS 1458 NTAPI 1459 NtSetEventBoostPriority( 1460 IN HANDLE EventHandle 1461 ); 1462 1463 NTSYSAPI 1464 NTSTATUS 1465 NTAPI 1466 NtSetEvent( 1467 IN HANDLE EventHandle, 1468 OUT PULONG PreviousState OPTIONAL 1469 ); 1470 1471 NTSYSAPI 1472 NTSTATUS 1473 NTAPI 1474 NtSetEaFile( 1475 IN HANDLE FileHandle, 1476 OUT PIO_STATUS_BLOCK IoStatusBlock, 1477 IN PFILE_FULL_EA_INFORMATION Buffer, 1478 IN ULONG BufferLength 1479 ); 1480 1481 NTSYSAPI 1482 NTSTATUS 1483 NTAPI 1484 NtSetDefaultUILanguage( 1485 IN LANGID LanguageId 1486 ); 1487 1488 NTSYSAPI 1489 NTSTATUS 1490 NTAPI 1491 NtSetDefaultLocale( 1492 IN BOOLEAN ThreadOrSystem, 1493 IN LCID Locale 1494 ); 1495 1496 NTSYSAPI 1497 NTSTATUS 1498 NTAPI 1499 NtSetDefaultHardErrorPort( 1500 IN HANDLE PortHandle 1501 ); 1502 1503 NTSYSAPI 1504 NTSTATUS 1505 NTAPI 1506 NtSetDebugFilterState( 1507 IN ULONG ComponentId, 1508 IN ULONG Level, 1509 IN BOOLEAN Enable 1510 ); 1511 1512 NTSYSAPI 1513 NTSTATUS 1514 NTAPI 1515 NtSetContextThread( 1516 IN HANDLE ThreadHandle, 1517 IN PCONTEXT Context 1518 ); 1519 1520 NTSYSAPI 1521 NTSTATUS 1522 NTAPI 1523 NtSetContextChannel( 1524 IN HANDLE CHannelHandle 1525 ); 1526 1527 1528 NTSYSAPI 1529 NTSTATUS 1530 NTAPI 1531 NtSetBootOptions( 1532 IN PBOOT_OPTIONS BootOptions, 1533 IN ULONG FieldsToChange 1534 ); 1535 1536 NTSYSAPI 1537 NTSTATUS 1538 NTAPI 1539 NtSetBootEntryOrder( 1540 IN ULONG Unknown1, 1541 IN ULONG Unknown2 1542 ); 1543 1544 1545 NTSYSAPI 1546 NTSTATUS 1547 NTAPI 1548 NtSecureConnectPort( 1549 OUT PHANDLE PortHandle, 1550 IN PUNICODE_STRING PortName, 1551 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos, 1552 IN OUT PPORT_VIEW ClientView OPTIONAL, 1553 IN PSID ServerSid OPTIONAL, 1554 OUT PREMOTE_PORT_VIEW ServerView OPTIONAL, 1555 OUT PULONG MaxMessageLength OPTIONAL, 1556 IN OUT PVOID ConnectInformation OPTIONAL, 1557 IN OUT PULONG ConnectInformationLength OPTIONAL 1558 ); 1559 1560 NTSYSAPI 1561 NTSTATUS 1562 NTAPI 1563 NtSaveMergedKeys( 1564 IN HANDLE KeyHandle1, 1565 IN HANDLE KeyHandle2, 1566 IN HANDLE FileHandle 1567 ); 1568 1569 NTSYSAPI 1570 NTSTATUS 1571 NTAPI 1572 NtSaveKeyEx( 1573 IN HANDLE KeyHandle, 1574 IN HANDLE FileHandle, 1575 IN ULONG Flags 1576 ); 1577 1578 NTSYSAPI 1579 NTSTATUS 1580 NTAPI 1581 NtSaveKey( 1582 IN HANDLE KeyHandle, 1583 IN HANDLE FileHandle 1584 ); 1585 1586 NTSYSAPI 1587 NTSTATUS 1588 NTAPI 1589 NtResumeThread( 1590 IN HANDLE ThreadHandle, 1591 OUT PULONG PreviousSuspendCount OPTIONAL 1592 ); 1593 1594 NTSYSAPI 1595 NTSTATUS 1596 NTAPI 1597 NtResumeProcess( 1598 IN HANDLE Process 1599 ); 1600 1601 NTSYSAPI 1602 NTSTATUS 1603 NTAPI 1604 NtRestoreKey( 1605 IN HANDLE KeyHandle, 1606 IN HANDLE FileHandle, 1607 IN ULONG Flags 1608 ); 1609 1610 NTSYSAPI 1611 NTSTATUS 1612 NTAPI 1613 NtResetWriteWatch( 1614 IN HANDLE ProcessHandle, 1615 IN PVOID BaseAddress, 1616 IN ULONG RegionSize 1617 ); 1618 1619 NTSYSAPI 1620 NTSTATUS 1621 NTAPI 1622 NtResetEvent( 1623 IN HANDLE EventHandle, 1624 OUT PULONG PreviousState OPTIONAL 1625 ); 1626 1627 NTSYSAPI 1628 NTSTATUS 1629 NTAPI 1630 NtRequestWakeupLatency( 1631 IN LATENCY_TIME Latency 1632 ); 1633 1634 NTSYSAPI 1635 NTSTATUS 1636 NTAPI 1637 NtRequestWaitReplyPort( 1638 IN HANDLE PortHandle, 1639 IN PPORT_MESSAGE RequestMessage, 1640 OUT PPORT_MESSAGE ReplyMessage 1641 ); 1642 1643 NTSYSAPI 1644 NTSTATUS 1645 NTAPI 1646 NtRequestPort( 1647 IN HANDLE PortHandle, 1648 IN PPORT_MESSAGE RequestMessage 1649 ); 1650 1651 NTSYSAPI 1652 NTSTATUS 1653 NTAPI 1654 NtRequestDeviceWakeup( 1655 IN HANDLE DeviceHandle 1656 ); 1657 1658 1659 NTSYSAPI 1660 NTSTATUS 1661 NTAPI 1662 NtReplyWaitReplyPort( 1663 IN HANDLE PortHandle, 1664 IN OUT PPORT_MESSAGE ReplyMessage 1665 ); 1666 1667 NTSYSAPI 1668 NTSTATUS 1669 NTAPI 1670 NtReplyWaitReceivePortEx( 1671 IN HANDLE PortHandle, 1672 OUT PVOID* PortIdentifier OPTIONAL, 1673 IN PPORT_MESSAGE ReplyMessage OPTIONAL, 1674 OUT PPORT_MESSAGE Message, 1675 IN PLARGE_INTEGER Timeout 1676 ); 1677 1678 NTSYSAPI 1679 NTSTATUS 1680 NTAPI 1681 NtReplyWaitReceivePort( 1682 IN HANDLE PortHandle, 1683 OUT PULONG PortIdentifier OPTIONAL, 1684 IN PPORT_MESSAGE ReplyMessage OPTIONAL, 1685 OUT PPORT_MESSAGE Message 1686 ); 1687 1688 NTSYSAPI 1689 NTSTATUS 1690 NTAPI 1691 NtReplyPort( 1692 IN HANDLE PortHandle, 1693 IN PPORT_MESSAGE ReplyMessage 1694 ); 1695 1696 NTSYSAPI 1697 NTSTATUS 1698 NTAPI 1699 NtReplaceKey( 1700 IN POBJECT_ATTRIBUTES NewFileObjectAttributes, 1701 IN HANDLE KeyHandle, 1702 IN POBJECT_ATTRIBUTES OldFileObjectAttributes 1703 ); 1704 1705 NTSYSAPI 1706 NTSTATUS 1707 NTAPI 1708 NtRenameKey( 1709 IN HANDLE KeyHandle, 1710 IN PUNICODE_STRING ReplacementName 1711 ); 1712 1713 NTSYSAPI 1714 NTSTATUS 1715 NTAPI 1716 NtRemoveProcessDebug( 1717 IN HANDLE Process, 1718 IN HANDLE DebugObject 1719 ); 1720 1721 NTSYSAPI 1722 NTSTATUS 1723 NTAPI 1724 NtRemoveIoCompletion( 1725 IN HANDLE IoCompletionHandle, 1726 OUT PULONG CompletionKey, 1727 OUT PULONG CompletionValue, 1728 OUT PIO_STATUS_BLOCK IoStatusBlock, 1729 IN PLARGE_INTEGER Timeout OPTIONAL 1730 ); 1731 1732 NTSYSAPI 1733 NTSTATUS 1734 NTAPI 1735 NtReleaseSemaphore( 1736 IN HANDLE SemaphoreHandle, 1737 IN LONG ReleaseCount, 1738 OUT PLONG PreviousCount OPTIONAL 1739 ); 1740 1741 NTSYSAPI 1742 NTSTATUS 1743 NTAPI 1744 NtReleaseMutant( 1745 IN HANDLE MutantHandle, 1746 OUT PULONG PreviousState 1747 ); 1748 1749 NTSYSAPI 1750 NTSTATUS 1751 NTAPI 1752 NtReleaseKeyedEvent( 1753 IN HANDLE KeyedEventHandle, 1754 IN PVOID Key, 1755 IN BOOLEAN Alertable, 1756 IN PLARGE_INTEGER Timeout OPTIONAL 1757 ); 1758 1759 NTSYSAPI 1760 NTSTATUS 1761 NTAPI 1762 NtRegisterThreadTerminatePort( 1763 IN HANDLE PortHandle 1764 ); 1765 1766 NTSYSAPI 1767 NTSTATUS 1768 NTAPI 1769 NtReadVirtualMemory( 1770 IN HANDLE ProcessHandle, 1771 IN PVOID BaseAddress, 1772 OUT PVOID Buffer, 1773 IN ULONG BufferLength, 1774 OUT PULONG ReturnLength OPTIONAL 1775 ); 1776 1777 NTSYSAPI 1778 NTSTATUS 1779 NTAPI 1780 NtReadRequestData( 1781 IN HANDLE PortHandle, 1782 IN PPORT_MESSAGE Message, 1783 IN ULONG Index, 1784 OUT PVOID Buffer, 1785 IN ULONG BufferLength, 1786 OUT PULONG ReturnLength OPTIONAL 1787 ); 1788 1789 NTSYSAPI 1790 NTSTATUS 1791 NTAPI 1792 NtReadFileScatter( 1793 IN HANDLE FileHandle, 1794 IN HANDLE Event OPTIONAL, 1795 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 1796 IN PVOID ApcContext OPTIONAL, 1797 OUT PIO_STATUS_BLOCK IoStatusBlock, 1798 IN PFILE_SEGMENT_ELEMENT Buffer, 1799 IN ULONG Length, 1800 IN PLARGE_INTEGER ByteOffset OPTIONAL, 1801 IN PULONG Key OPTIONAL 1802 ); 1803 1804 NTSYSAPI 1805 NTSTATUS 1806 NTAPI 1807 NtReadFile( 1808 IN HANDLE FileHandle, 1809 IN HANDLE Event OPTIONAL, 1810 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 1811 IN PVOID ApcContext OPTIONAL, 1812 OUT PIO_STATUS_BLOCK IoStatusBlock, 1813 OUT PVOID Buffer, 1814 IN ULONG Length, 1815 IN PLARGE_INTEGER ByteOffset OPTIONAL, 1816 IN PULONG Key OPTIONAL 1817 ); 1818 1819 NTSYSAPI 1820 NTSTATUS 1821 NTAPI 1822 NtRaiseHardError( 1823 IN NTSTATUS Status, 1824 IN ULONG NumberOfArguments, 1825 IN ULONG StringArgumentsMask, 1826 IN PULONG_PTR Arguments, 1827 IN HARDERROR_RESPONSE_OPTION ResponseOption, 1828 OUT PHARDERROR_RESPONSE Response 1829 ); 1830 1831 NTSYSAPI 1832 NTSTATUS 1833 NTAPI 1834 NtRaiseException( 1835 IN PEXCEPTION_RECORD ExceptionRecord, 1836 IN PCONTEXT Context, 1837 IN BOOLEAN SearchFrames 1838 ); 1839 1840 NTSYSAPI 1841 NTSTATUS 1842 NTAPI 1843 NtQueueApcThread( 1844 IN HANDLE ThreadHandle, 1845 IN PKNORMAL_ROUTINE ApcRoutine, 1846 IN PVOID ApcContext OPTIONAL, 1847 IN PVOID Argument1 OPTIONAL, 1848 IN PVOID Argument2 OPTIONAL 1849 ); 1850 1851 NTSYSAPI 1852 NTSTATUS 1853 NTAPI 1854 NtQueryVolumeInformationFile( 1855 IN HANDLE FileHandle, 1856 OUT PIO_STATUS_BLOCK IoStatusBlock, 1857 OUT PVOID VolumeInformation, 1858 IN ULONG VolumeInformationLength, 1859 IN FS_INFORMATION_CLASS VolumeInformationClass 1860 ); 1861 1862 NTSYSAPI 1863 NTSTATUS 1864 NTAPI 1865 NtQueryVirtualMemory( 1866 IN HANDLE ProcessHandle, 1867 IN PVOID BaseAddress, 1868 IN MEMORY_INFORMATION_CLASS MemoryInformationClass, 1869 OUT PVOID MemoryInformation, 1870 IN ULONG MemoryInformationLength, 1871 OUT PULONG ReturnLength OPTIONAL 1872 ); 1873 1874 NTSYSAPI 1875 NTSTATUS 1876 NTAPI 1877 NtQueryValueKey( 1878 IN HANDLE KeyHandle, 1879 IN PUNICODE_STRING ValueName, 1880 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, 1881 OUT PVOID KeyValueInformation, 1882 IN ULONG KeyValueInformationLength, 1883 OUT PULONG ResultLength 1884 ); 1885 1886 NTSYSAPI 1887 NTSTATUS 1888 NTAPI 1889 NtQueryTimerResolution( 1890 OUT PULONG CoarsestResolution, 1891 OUT PULONG FinestResolution, 1892 OUT PULONG ActualResolution 1893 ); 1894 1895 NTSYSAPI 1896 NTSTATUS 1897 NTAPI 1898 NtQueryTimer( 1899 IN HANDLE TimerHandle, 1900 IN TIMER_INFORMATION_CLASS TimerInformationClass, 1901 OUT PVOID TimerInformation, 1902 IN ULONG TimerInformationLength, 1903 OUT PULONG ResultLength OPTIONAL 1904 ); 1905 1906 NTSYSAPI 1907 NTSTATUS 1908 NTAPI 1909 NtQuerySystemTime( 1910 OUT PLARGE_INTEGER CurrentTime 1911 ); 1912 1913 NTSYSAPI 1914 NTSTATUS 1915 NTAPI 1916 NtQuerySystemInformation( 1917 IN SYSTEM_INFORMATION_CLASS SystemInformationClass, 1918 IN OUT PVOID SystemInformation, 1919 IN ULONG SystemInformationLength, 1920 OUT PULONG ReturnLength OPTIONAL 1921 ); 1922 1923 NTSYSAPI 1924 NTSTATUS 1925 NTAPI 1926 NtQuerySystemEnvironmentValueEx( 1927 IN ULONG Unknown1, 1928 IN ULONG Unknown2, 1929 IN ULONG Unknown3, 1930 IN ULONG Unknown4, 1931 IN ULONG Unknown5 1932 ); 1933 1934 NTSYSAPI 1935 NTSTATUS 1936 NTAPI 1937 NtQuerySystemEnvironmentValue( 1938 IN PUNICODE_STRING Name, 1939 OUT PVOID Value, 1940 IN ULONG ValueLength, 1941 OUT PULONG ReturnLength OPTIONAL 1942 ); 1943 1944 NTSYSAPI 1945 NTSTATUS 1946 NTAPI 1947 NtQuerySymbolicLinkObject( 1948 IN HANDLE SymbolicLinkHandle, 1949 IN OUT PUNICODE_STRING TargetName, 1950 OUT PULONG ReturnLength OPTIONAL 1951 ); 1952 1953 NTSYSAPI 1954 NTSTATUS 1955 NTAPI 1956 NtQuerySemaphore( 1957 IN HANDLE SemaphoreHandle, 1958 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass, 1959 OUT PVOID SemaphoreInformation, 1960 IN ULONG SemaphoreInformationLength, 1961 OUT PULONG ResultLength OPTIONAL 1962 ); 1963 1964 NTSYSAPI 1965 NTSTATUS 1966 NTAPI 1967 NtQuerySecurityObject( 1968 IN HANDLE Handle, 1969 IN SECURITY_INFORMATION SecurityInformation, 1970 OUT PSECURITY_DESCRIPTOR SecurityDescriptor, 1971 IN ULONG SecurityDescriptorLength, 1972 OUT PULONG ReturnLength 1973 ); 1974 1975 NTSYSAPI 1976 NTSTATUS 1977 NTAPI 1978 NtQuerySection( 1979 IN HANDLE SectionHandle, 1980 IN SECTION_INFORMATION_CLASS SectionInformationClass, 1981 OUT PVOID SectionInformation, 1982 IN ULONG SectionInformationLength, 1983 OUT PULONG ResultLength OPTIONAL 1984 ); 1985 1986 NTSYSAPI 1987 NTSTATUS 1988 NTAPI 1989 NtQueryQuotaInformationFile( 1990 IN HANDLE FileHandle, 1991 OUT PIO_STATUS_BLOCK IoStatusBlock, 1992 OUT PFILE_USER_QUOTA_INFORMATION Buffer, 1993 IN ULONG BufferLength, 1994 IN BOOLEAN ReturnSingleEntry, 1995 IN PFILE_QUOTA_LIST_INFORMATION QuotaList OPTIONAL, 1996 IN ULONG QuotaListLength, 1997 IN PSID ResumeSid OPTIONAL, 1998 IN BOOLEAN RestartScan 1999 ); 2000 2001 NTSYSAPI 2002 BOOLEAN 2003 NTAPI 2004 NtQueryPortInformationProcess( 2005 VOID 2006 ); 2007 2008 NTSYSAPI 2009 NTSTATUS 2010 NTAPI 2011 NtQueryPerformanceCounter( 2012 OUT PLARGE_INTEGER PerformanceCount, 2013 OUT PLARGE_INTEGER PerformanceFrequency OPTIONAL 2014 ); 2015 2016 NTSYSAPI 2017 NTSTATUS 2018 NTAPI 2019 NtQueryOpenSubKeys( 2020 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2021 OUT PULONG NumberOfKeys 2022 ); 2023 2024 2025 2026 NTSYSAPI 2027 NTSTATUS 2028 NTAPI 2029 NtQueryObject( 2030 IN HANDLE ObjectHandle, 2031 IN OBJECT_INFORMATION_CLASS ObjectInformationClass, 2032 OUT PVOID ObjectInformation, 2033 IN ULONG ObjectInformationLength, 2034 OUT PULONG ReturnLength OPTIONAL 2035 ); 2036 2037 NTSYSAPI 2038 NTSTATUS 2039 NTAPI 2040 NtQueryMutant( 2041 IN HANDLE MutantHandle, 2042 IN MUTANT_INFORMATION_CLASS MutantInformationClass, 2043 OUT PVOID MutantInformation, 2044 IN ULONG MutantInformationLength, 2045 OUT PULONG ResultLength OPTIONAL 2046 ); 2047 2048 NTSYSAPI 2049 NTSTATUS 2050 NTAPI 2051 NtQueryMultipleValueKey( 2052 IN HANDLE KeyHandle, 2053 IN OUT PKEY_VALUE_ENTRY ValueList, 2054 IN ULONG NumberOfValues, 2055 OUT PVOID Buffer, 2056 IN OUT PULONG Length, 2057 OUT PULONG ReturnLength 2058 ); 2059 2060 NTSYSAPI 2061 NTSTATUS 2062 NTAPI 2063 NtQueryKey( 2064 IN HANDLE KeyHandle, 2065 IN KEY_INFORMATION_CLASS KeyInformationClass, 2066 OUT PVOID KeyInformation, 2067 IN ULONG KeyInformationLength, 2068 OUT PULONG ResultLength 2069 ); 2070 2071 NTSYSAPI 2072 NTSTATUS 2073 NTAPI 2074 NtQueryIoCompletion( 2075 IN HANDLE IoCompletionHandle, 2076 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass, 2077 OUT PVOID IoCompletionInformation, 2078 IN ULONG IoCompletionInformationLength, 2079 OUT PULONG ResultLength OPTIONAL 2080 ); 2081 2082 NTSYSAPI 2083 NTSTATUS 2084 NTAPI 2085 NtQueryIntervalProfile( 2086 IN KPROFILE_SOURCE Source, 2087 OUT PULONG Interval 2088 ); 2089 2090 NTSYSAPI 2091 NTSTATUS 2092 NTAPI 2093 NtQueryInstallUILanguage( 2094 OUT PLANGID LanguageId 2095 ); 2096 2097 NTSYSAPI 2098 NTSTATUS 2099 NTAPI 2100 NtQueryInformationToken( 2101 IN HANDLE TokenHandle, 2102 IN TOKEN_INFORMATION_CLASS TokenInformationClass, 2103 OUT PVOID TokenInformation, 2104 IN ULONG TokenInformationLength, 2105 OUT PULONG ReturnLength 2106 ); 2107 2108 NTSYSAPI 2109 NTSTATUS 2110 NTAPI 2111 NtQueryInformationThread( 2112 IN HANDLE ThreadHandle, 2113 IN THREADINFOCLASS ThreadInformationClass, 2114 OUT PVOID ThreadInformation, 2115 IN ULONG ThreadInformationLength, 2116 OUT PULONG ReturnLength OPTIONAL 2117 ); 2118 2119 NTSYSAPI 2120 NTSTATUS 2121 NTAPI 2122 NtQueryInformationProcess( 2123 IN HANDLE ProcessHandle, 2124 IN PROCESSINFOCLASS ProcessInformationClass, 2125 OUT PVOID ProcessInformation, 2126 IN ULONG ProcessInformationLength, 2127 OUT PULONG ReturnLength OPTIONAL 2128 ); 2129 2130 NTSYSAPI 2131 NTSTATUS 2132 NTAPI 2133 NtQueryInformationPort( 2134 IN HANDLE PortHandle, 2135 IN PORT_INFORMATION_CLASS PortInformationClass, 2136 OUT PVOID PortInformation, 2137 IN ULONG PortInformationLength, 2138 OUT PULONG ReturnLength OPTIONAL 2139 ); 2140 2141 NTSYSAPI 2142 NTSTATUS 2143 NTAPI 2144 NtQueryInformationJobObject( 2145 IN HANDLE JobHandle, 2146 IN JOBOBJECTINFOCLASS JobInformationClass, 2147 OUT PVOID JobInformation, 2148 IN ULONG JobInformationLength, 2149 OUT PULONG ReturnLength OPTIONAL 2150 ); 2151 2152 NTSYSAPI 2153 NTSTATUS 2154 NTAPI 2155 NtQueryInformationFile( 2156 IN HANDLE FileHandle, 2157 OUT PIO_STATUS_BLOCK IoStatusBlock, 2158 OUT PVOID FileInformation, 2159 IN ULONG FileInformationLength, 2160 IN FILE_INFORMATION_CLASS FileInformationClass 2161 ); 2162 2163 NTSYSAPI 2164 NTSTATUS 2165 NTAPI 2166 NtQueryInformationAtom( 2167 IN USHORT Atom, 2168 IN ATOM_INFORMATION_CLASS AtomInformationClass, 2169 OUT PVOID AtomInformation, 2170 IN ULONG AtomInformationLength, 2171 OUT PULONG ReturnLength OPTIONAL 2172 ); 2173 2174 NTSYSAPI 2175 NTSTATUS 2176 NTAPI 2177 NtQueryFullAttributesFile( 2178 IN POBJECT_ATTRIBUTES ObjectAttributes, 2179 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation 2180 ); 2181 2182 NTSYSAPI 2183 NTSTATUS 2184 NTAPI 2185 NtQueryEvent( 2186 IN HANDLE EventHandle, 2187 IN EVENT_INFORMATION_CLASS EventInformationClass, 2188 OUT PVOID EventInformation, 2189 IN ULONG EventInformationLength, 2190 OUT PULONG ResultLength OPTIONAL 2191 ); 2192 2193 NTSYSAPI 2194 NTSTATUS 2195 NTAPI 2196 NtQueryEaFile( 2197 IN HANDLE FileHandle, 2198 OUT PIO_STATUS_BLOCK IoStatusBlock, 2199 OUT PFILE_FULL_EA_INFORMATION Buffer, 2200 IN ULONG BufferLength, 2201 IN BOOLEAN ReturnSingleEntry, 2202 IN PFILE_GET_EA_INFORMATION EaList OPTIONAL, 2203 IN ULONG EaListLength, 2204 IN PULONG EaIndex OPTIONAL, 2205 IN BOOLEAN RestartScan 2206 ); 2207 2208 NTSYSAPI 2209 NTSTATUS 2210 NTAPI 2211 NtQueryDirectoryObject( 2212 IN HANDLE DirectoryHandle, 2213 OUT PVOID Buffer, 2214 IN ULONG BufferLength, 2215 IN BOOLEAN ReturnSingleEntry, 2216 IN BOOLEAN RestartScan, 2217 IN OUT PULONG Context, 2218 OUT PULONG ReturnLength OPTIONAL 2219 ); 2220 2221 NTSYSAPI 2222 NTSTATUS 2223 NTAPI 2224 NtQueryDirectoryFile( 2225 IN HANDLE FileHandle, 2226 IN HANDLE Event OPTIONAL, 2227 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2228 IN PVOID ApcContext OPTIONAL, 2229 OUT PIO_STATUS_BLOCK IoStatusBlock, 2230 OUT PVOID FileInformation, 2231 IN ULONG FileInformationLength, 2232 IN FILE_INFORMATION_CLASS FileInformationClass, 2233 IN BOOLEAN ReturnSingleEntry, 2234 IN PUNICODE_STRING FileName OPTIONAL, 2235 IN BOOLEAN RestartScan 2236 ); 2237 2238 NTSYSAPI 2239 NTSTATUS 2240 NTAPI 2241 NtQueryDefaultUILanguage( 2242 OUT PLANGID LanguageId 2243 ); 2244 2245 NTSYSAPI 2246 NTSTATUS 2247 NTAPI 2248 NtQueryDefaultLocale( 2249 IN BOOLEAN ThreadOrSystem, 2250 OUT PLCID Locale 2251 ); 2252 2253 NTSYSAPI 2254 NTSTATUS 2255 NTAPI 2256 NtQueryDebugFilterState( 2257 IN ULONG ComponentId, 2258 IN ULONG Level 2259 ); 2260 2261 NTSYSAPI 2262 NTSTATUS 2263 NTAPI 2264 NtQueryBootOptions( 2265 IN ULONG Unknown1, 2266 IN ULONG Unknown2 2267 ); 2268 2269 NTSYSAPI 2270 NTSTATUS 2271 NTAPI 2272 NtQueryBootEntryOrder( 2273 IN ULONG Unknown1, 2274 IN ULONG Unknown2 2275 ); 2276 2277 NTSYSAPI 2278 NTSTATUS 2279 NTAPI 2280 NtQueryAttributesFile( 2281 IN POBJECT_ATTRIBUTES ObjectAttributes, 2282 OUT PFILE_BASIC_INFORMATION FileInformation 2283 ); 2284 2285 NTSYSAPI 2286 NTSTATUS 2287 NTAPI 2288 NtPulseEvent( 2289 IN HANDLE EventHandle, 2290 OUT PULONG PreviousState OPTIONAL 2291 ); 2292 2293 NTSYSAPI 2294 NTSTATUS 2295 NTAPI 2296 NtProtectVirtualMemory( 2297 IN HANDLE ProcessHandle, 2298 IN OUT PVOID *BaseAddress, 2299 IN OUT PULONG ProtectSize, 2300 IN ULONG NewProtect, 2301 OUT PULONG OldProtect 2302 ); 2303 2304 NTSYSAPI 2305 NTSTATUS 2306 NTAPI 2307 NtPrivilegedServiceAuditAlarm( 2308 IN PUNICODE_STRING SubsystemName, 2309 IN PUNICODE_STRING ServiceName, 2310 IN HANDLE TokenHandle, 2311 IN PPRIVILEGE_SET Privileges, 2312 IN BOOLEAN AccessGranted 2313 ); 2314 2315 NTSYSAPI 2316 NTSTATUS 2317 NTAPI 2318 NtPrivilegeObjectAuditAlarm( 2319 IN PUNICODE_STRING SubsystemName, 2320 IN PVOID HandleId, 2321 IN HANDLE TokenHandle, 2322 IN ACCESS_MASK DesiredAccess, 2323 IN PPRIVILEGE_SET Privileges, 2324 IN BOOLEAN AccessGranted 2325 ); 2326 2327 NTSYSAPI 2328 NTSTATUS 2329 NTAPI 2330 NtPrivilegeCheck( 2331 IN HANDLE TokenHandle, 2332 IN PPRIVILEGE_SET RequiredPrivileges, 2333 OUT PBOOLEAN Result 2334 ); 2335 2336 NTSYSAPI 2337 NTSTATUS 2338 NTAPI 2339 NtPowerInformation( 2340 IN POWER_INFORMATION_LEVEL PowerInformationLevel, 2341 IN PVOID InputBuffer OPTIONAL, 2342 IN ULONG InputBufferLength, 2343 OUT PVOID OutputBuffer OPTIONAL, 2344 IN ULONG OutputBufferLength 2345 ); 2346 2347 NTSYSAPI 2348 NTSTATUS 2349 NTAPI 2350 NtPlugPlayControl( 2351 IN ULONG ControlCode, 2352 IN OUT PVOID Buffer, 2353 IN ULONG BufferLength 2354 ); 2355 NTSYSAPI 2356 NTSTATUS 2357 NTAPI 2358 NtPlugPlayControl( 2359 IN ULONG ControlCode, 2360 IN OUT PVOID Buffer, 2361 IN ULONG BufferLength, 2362 IN PVOID Unknown OPTIONAL 2363 ); 2364 2365 NTSYSAPI 2366 NTSTATUS 2367 NTAPI 2368 NtOpenTimer( 2369 OUT PHANDLE TimerHandle, 2370 IN ACCESS_MASK DesiredAccess, 2371 IN POBJECT_ATTRIBUTES ObjectAttributes 2372 ); 2373 2374 NTSYSAPI 2375 NTSTATUS 2376 NTAPI 2377 NtOpenThreadTokenEx( 2378 IN HANDLE ThreadHandle, 2379 IN ACCESS_MASK DesiredAccess, 2380 IN BOOLEAN OpenAsSelf, 2381 IN ULONG HandleAttributes, 2382 OUT PHANDLE TokenHandle 2383 ); 2384 2385 NTSYSAPI 2386 NTSTATUS 2387 NTAPI 2388 NtOpenThreadToken( 2389 IN HANDLE ThreadHandle, 2390 IN ACCESS_MASK DesiredAccess, 2391 IN BOOLEAN OpenAsSelf, 2392 OUT PHANDLE TokenHandle 2393 ); 2394 2395 NTSYSAPI 2396 NTSTATUS 2397 NTAPI 2398 NtOpenThread( 2399 OUT PHANDLE ThreadHandle, 2400 IN ACCESS_MASK DesiredAccess, 2401 IN POBJECT_ATTRIBUTES ObjectAttributes, 2402 IN PCLIENT_ID ClientId 2403 ); 2404 2405 NTSYSAPI 2406 NTSTATUS 2407 NTAPI 2408 NtOpenSymbolicLinkObject( 2409 OUT PHANDLE SymbolicLinkHandle, 2410 IN ACCESS_MASK DesiredAccess, 2411 IN POBJECT_ATTRIBUTES ObjectAttributes 2412 ); 2413 2414 NTSYSAPI 2415 NTSTATUS 2416 NTAPI 2417 NtOpenSemaphore( 2418 OUT PHANDLE SemaphoreHandle, 2419 IN ACCESS_MASK DesiredAccess, 2420 IN POBJECT_ATTRIBUTES ObjectAttributes 2421 ); 2422 2423 NTSYSAPI 2424 NTSTATUS 2425 NTAPI 2426 NtOpenSection( 2427 OUT PHANDLE SectionHandle, 2428 IN ACCESS_MASK DesiredAccess, 2429 IN POBJECT_ATTRIBUTES ObjectAttributes 2430 ); 2431 2432 NTSYSAPI 2433 NTSTATUS 2434 NTAPI 2435 NtOpenProcessTokenEx( 2436 IN HANDLE ProcessHandle, 2437 IN ACCESS_MASK DesiredAccess, 2438 IN ULONG HandleAttributes, 2439 OUT PHANDLE TokenHandle 2440 ); 2441 2442 NTSYSAPI 2443 NTSTATUS 2444 NTAPI 2445 NtOpenProcessToken( 2446 IN HANDLE ProcessHandle, 2447 IN ACCESS_MASK DesiredAccess, 2448 OUT PHANDLE TokenHandle 2449 ); 2450 2451 NTSYSAPI 2452 NTSTATUS 2453 NTAPI 2454 NtOpenProcess( 2455 OUT PHANDLE ProcessHandle, 2456 IN ACCESS_MASK DesiredAccess, 2457 IN POBJECT_ATTRIBUTES ObjectAttributes, 2458 IN PCLIENT_ID ClientId OPTIONAL 2459 ); 2460 2461 NTSYSAPI 2462 NTSTATUS 2463 NTAPI 2464 NtOpenObjectAuditAlarm( 2465 IN PUNICODE_STRING SubsystemName, 2466 IN PVOID *HandleId, 2467 IN PUNICODE_STRING ObjectTypeName, 2468 IN PUNICODE_STRING ObjectName, 2469 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 2470 IN HANDLE TokenHandle, 2471 IN ACCESS_MASK DesiredAccess, 2472 IN ACCESS_MASK GrantedAccess, 2473 IN PPRIVILEGE_SET Privileges OPTIONAL, 2474 IN BOOLEAN ObjectCreation, 2475 IN BOOLEAN AccessGranted, 2476 OUT PBOOLEAN GenerateOnClose 2477 ); 2478 2479 NTSYSAPI 2480 NTSTATUS 2481 NTAPI 2482 NtOpenMutant( 2483 OUT PHANDLE MutantHandle, 2484 IN ACCESS_MASK DesiredAccess, 2485 IN POBJECT_ATTRIBUTES ObjectAttributes 2486 ); 2487 2488 NTSYSAPI 2489 NTSTATUS 2490 NTAPI 2491 NtOpenKeyedEvent( 2492 OUT PHANDLE KeyedEventHandle, 2493 IN ACCESS_MASK DesiredAccess, 2494 IN POBJECT_ATTRIBUTES ObjectAttributes 2495 ); 2496 2497 NTSYSAPI 2498 NTSTATUS 2499 NTAPI 2500 NtOpenKey( 2501 OUT PHANDLE KeyHandle, 2502 IN ACCESS_MASK DesiredAccess, 2503 IN POBJECT_ATTRIBUTES ObjectAttributes 2504 ); 2505 2506 NTSYSAPI 2507 NTSTATUS 2508 NTAPI 2509 NtOpenJobObject( 2510 OUT PHANDLE JobHandle, 2511 IN ACCESS_MASK DesiredAccess, 2512 IN POBJECT_ATTRIBUTES ObjectAttributes 2513 ); 2514 2515 NTSYSAPI 2516 NTSTATUS 2517 NTAPI 2518 NtOpenIoCompletion( 2519 OUT PHANDLE IoCompletionHandle, 2520 IN ACCESS_MASK DesiredAccess, 2521 IN POBJECT_ATTRIBUTES ObjectAttributes 2522 ); 2523 2524 NTSYSAPI 2525 NTSTATUS 2526 NTAPI 2527 NtOpenFile( 2528 OUT PHANDLE FileHandle, 2529 IN ACCESS_MASK DesiredAccess, 2530 IN POBJECT_ATTRIBUTES ObjectAttributes, 2531 OUT PIO_STATUS_BLOCK IoStatusBlock, 2532 IN ULONG ShareAccess, 2533 IN ULONG OpenOptions 2534 ); 2535 2536 NTSYSAPI 2537 NTSTATUS 2538 NTAPI 2539 NtOpenEventPair( 2540 OUT PHANDLE EventPairHandle, 2541 IN ACCESS_MASK DesiredAccess, 2542 IN POBJECT_ATTRIBUTES ObjectAttributes 2543 ); 2544 2545 NTSYSAPI 2546 NTSTATUS 2547 NTAPI 2548 NtOpenEvent( 2549 OUT PHANDLE EventHandle, 2550 IN ACCESS_MASK DesiredAccess, 2551 IN POBJECT_ATTRIBUTES ObjectAttributes 2552 ); 2553 2554 NTSYSAPI 2555 NTSTATUS 2556 NTAPI 2557 NtOpenDirectoryObject( 2558 OUT PHANDLE DirectoryHandle, 2559 IN ACCESS_MASK DesiredAccess, 2560 IN POBJECT_ATTRIBUTES ObjectAttributes 2561 ); 2562 2563 2564 NTSYSAPI 2565 NTSTATUS 2566 NTAPI 2567 NtNotifyChangeMultipleKeys( 2568 IN HANDLE KeyHandle, 2569 IN ULONG Flags, 2570 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2571 IN HANDLE EventHandle OPTIONAL, 2572 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2573 IN PVOID ApcContext OPTIONAL, 2574 OUT PIO_STATUS_BLOCK IoStatusBlock, 2575 IN ULONG NotifyFilter, 2576 IN BOOLEAN WatchSubtree, 2577 IN PVOID Buffer, 2578 IN ULONG BufferLength, 2579 IN BOOLEAN Asynchronous 2580 ); 2581 2582 NTSYSAPI 2583 NTSTATUS 2584 NTAPI 2585 NtNotifyChangeKey( 2586 IN HANDLE KeyHandle, 2587 IN HANDLE EventHandle OPTIONAL, 2588 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2589 IN PVOID ApcContext OPTIONAL, 2590 OUT PIO_STATUS_BLOCK IoStatusBlock, 2591 IN ULONG NotifyFilter, 2592 IN BOOLEAN WatchSubtree, 2593 IN PVOID Buffer, 2594 IN ULONG BufferLength, 2595 IN BOOLEAN Asynchronous 2596 ); 2597 2598 NTSYSAPI 2599 NTSTATUS 2600 NTAPI 2601 NtNotifyChangeDirectoryFile( 2602 IN HANDLE FileHandle, 2603 IN HANDLE Event OPTIONAL, 2604 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2605 IN PVOID ApcContext OPTIONAL, 2606 OUT PIO_STATUS_BLOCK IoStatusBlock, 2607 OUT PFILE_NOTIFY_INFORMATION Buffer, 2608 IN ULONG BufferLength, 2609 IN ULONG NotifyFilter, 2610 IN BOOLEAN WatchSubtree 2611 ); 2612 2613 NTSYSAPI 2614 NTSTATUS 2615 NTAPI 2616 NtModifyDriverEntry( 2617 IN PUNICODE_STRING DriverName, 2618 IN PUNICODE_STRING DriverPath 2619 ); 2620 2621 NTSYSAPI 2622 NTSTATUS 2623 NTAPI 2624 NtModifyBootEntry( 2625 IN PUNICODE_STRING EntryName, 2626 IN PUNICODE_STRING EntryValue 2627 ); 2628 2629 NTSYSAPI 2630 NTSTATUS 2631 NTAPI 2632 NtMapViewOfSection( 2633 IN HANDLE SectionHandle, 2634 IN HANDLE ProcessHandle, 2635 IN OUT PVOID *BaseAddress, 2636 IN ULONG ZeroBits, 2637 IN ULONG CommitSize, 2638 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL, 2639 IN OUT PULONG ViewSize, 2640 IN SECTION_INHERIT InheritDisposition, 2641 IN ULONG AllocationType, 2642 IN ULONG Protect 2643 ); 2644 2645 NTSYSAPI 2646 NTSTATUS 2647 NTAPI 2648 NtMapUserPhysicalPagesScatter( 2649 IN PVOID *BaseAddresses, 2650 IN PULONG NumberOfPages, 2651 IN PULONG PageFrameNumbers 2652 ); 2653 2654 NTSYSAPI 2655 NTSTATUS 2656 NTAPI 2657 NtMapUserPhysicalPages( 2658 IN PVOID BaseAddress, 2659 IN PULONG NumberOfPages, 2660 IN PULONG PageFrameNumbers 2661 ); 2662 2663 NTSYSAPI 2664 NTSTATUS 2665 NTAPI 2666 NtMakeTemporaryObject( 2667 IN HANDLE Handle 2668 ); 2669 2670 NTSYSAPI 2671 NTSTATUS 2672 NTAPI 2673 NtMakePermanentObject( 2674 IN HANDLE Object 2675 ); 2676 2677 NTSYSAPI 2678 NTSTATUS 2679 NTAPI 2680 NtLockVirtualMemory( 2681 IN HANDLE ProcessHandle, 2682 IN OUT PVOID *BaseAddress, 2683 IN OUT PULONG LockSize, 2684 IN ULONG LockType 2685 ); 2686 2687 NTSYSAPI 2688 NTSTATUS 2689 NTAPI 2690 NtLockRegistryKey( 2691 IN HANDLE Key 2692 ); 2693 2694 NTSYSAPI 2695 NTSTATUS 2696 NTAPI 2697 NtLockProductActivationKeys( 2698 IN OUT PULONG ProductBuild OPTIONAL, 2699 OUT PSAFEBOOT_MODE InitSafeBootMode OPTIONAL 2700 ); 2701 2702 NTSYSAPI 2703 NTSTATUS 2704 NTAPI 2705 NtLockFile( 2706 IN HANDLE FileHandle, 2707 IN HANDLE Event OPTIONAL, 2708 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2709 IN PVOID ApcContext OPTIONAL, 2710 OUT PIO_STATUS_BLOCK IoStatusBlock, 2711 IN PULARGE_INTEGER LockOffset, 2712 IN PULARGE_INTEGER LockLength, 2713 IN ULONG Key, 2714 IN BOOLEAN FailImmediately, 2715 IN BOOLEAN ExclusiveLock 2716 ); 2717 2718 NTSYSAPI 2719 NTSTATUS 2720 NTAPI 2721 NtLoadKey2( 2722 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2723 IN POBJECT_ATTRIBUTES FileObjectAttributes, 2724 IN ULONG Flags 2725 ); 2726 2727 NTSYSAPI 2728 NTSTATUS 2729 NTAPI 2730 NtLoadKey( 2731 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2732 IN POBJECT_ATTRIBUTES FileObjectAttributes 2733 ); 2734 2735 NTSYSAPI 2736 NTSTATUS 2737 NTAPI 2738 NtLoadDriver( 2739 IN PUNICODE_STRING DriverServiceName 2740 ); 2741 2742 NTSYSAPI 2743 NTSTATUS 2744 NTAPI 2745 NtListenPort( 2746 IN HANDLE PortHandle, 2747 OUT PPORT_MESSAGE Message 2748 ); 2749 2750 2751 NTSYSAPI 2752 NTSTATUS 2753 NTAPI 2754 NtFreeUserPhysicalPages( 2755 IN HANDLE ProcessHandle, 2756 IN OUT PULONG NumberOfPages, 2757 IN PULONG PageFrameNumbers 2758 ); 2759 2760 NTSYSAPI 2761 NTSTATUS 2762 NTAPI 2763 NtFreeVirtualMemory( 2764 IN HANDLE ProcessHandle, 2765 IN OUT PVOID *BaseAddress, 2766 IN OUT PULONG FreeSize, 2767 IN ULONG FreeType 2768 ); 2769 2770 NTSYSAPI 2771 NTSTATUS 2772 NTAPI 2773 NtFsControlFile( 2774 IN HANDLE FileHandle, 2775 IN HANDLE Event OPTIONAL, 2776 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2777 IN PVOID ApcContext OPTIONAL, 2778 OUT PIO_STATUS_BLOCK IoStatusBlock, 2779 IN ULONG FsControlCode, 2780 IN PVOID InputBuffer OPTIONAL, 2781 IN ULONG InputBufferLength, 2782 OUT PVOID OutputBuffer OPTIONAL, 2783 IN ULONG OutputBufferLength 2784 ); 2785 2786 NTSYSAPI 2787 NTSTATUS 2788 NTAPI 2789 NtGetContextThread( 2790 IN HANDLE ThreadHandle, 2791 OUT PCONTEXT Context 2792 ); 2793 2794 NTSYSAPI 2795 NTSTATUS 2796 NTAPI 2797 NtGetDevicePowerState( 2798 IN HANDLE DeviceHandle, 2799 OUT PDEVICE_POWER_STATE DevicePowerState 2800 ); 2801 2802 NTSYSAPI 2803 NTSTATUS 2804 NTAPI 2805 NtGetPlugPlayEvent( 2806 IN ULONG Reserved1, 2807 IN ULONG Reserved2, 2808 OUT PVOID Buffer, 2809 IN ULONG BufferLength 2810 ); 2811 2812 NTSYSAPI 2813 NTSTATUS 2814 NTAPI 2815 NtGetWriteWatch( 2816 IN HANDLE ProcessHandle, 2817 IN ULONG Flags, 2818 IN PVOID BaseAddress, 2819 IN ULONG RegionSize, 2820 OUT PULONG Buffer, 2821 IN OUT PULONG BufferEntries, 2822 OUT PULONG Granularity 2823 ); 2824 2825 NTSYSAPI 2826 NTSTATUS 2827 NTAPI 2828 NtImpersonateAnonymousToken( 2829 IN HANDLE ThreadHandle 2830 ); 2831 2832 NTSYSAPI 2833 NTSTATUS 2834 NTAPI 2835 NtImpersonateClientOfPort( 2836 IN HANDLE PortHandle, 2837 IN PPORT_MESSAGE Message 2838 ); 2839 2840 NTSYSAPI 2841 NTSTATUS 2842 NTAPI 2843 NtImpersonateThread( 2844 IN HANDLE ThreadHandle, 2845 IN HANDLE TargetThreadHandle, 2846 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos 2847 ); 2848 2849 NTSYSAPI 2850 NTSTATUS 2851 NTAPI 2852 NtInitializeRegistry( 2853 IN BOOLEAN Setup 2854 ); 2855 2856 NTSYSAPI 2857 NTSTATUS 2858 NTAPI 2859 NtInitiatePowerAction( 2860 IN POWER_ACTION SystemAction, 2861 IN SYSTEM_POWER_STATE MinSystemState, 2862 IN ULONG Flags, 2863 IN BOOLEAN Asynchronous 2864 ); 2865 2866 NTSYSAPI 2867 NTSTATUS 2868 NTAPI 2869 NtIsProcessInJob( 2870 IN HANDLE ProcessHandle, 2871 IN HANDLE JobHandle OPTIONAL 2872 ); 2873 2874 NTSYSAPI 2875 BOOLEAN 2876 NTAPI 2877 NtIsSystemResumeAutomatic( 2878 VOID 2879 );