//转自看雪，可以作为一个头文件使用，方便快捷
1 NTSTATUS 2 NTAPI 3 NtAcceptConnectPort( 4 OUT PHANDLE PortHandle, 5 IN PVOID PortIdentifier, 6 IN PPORT_MESSAGE Message, 7 IN BOOLEAN Accept, 8 IN OUT PPORT_VIEW ServerView OPTIONAL, 9 OUT PREMOTE_PORT_VIEW ClientView OPTIONAL 10 ); 11 12 NTSTATUS 13 NTAPI 14 NtAccessCheck( 15 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 16 IN HANDLE TokenHandle, 17 IN ACCESS_MASK DesiredAccess, 18 IN PGENERIC_MAPPING GenericMapping, 19 OUT PPRIVILEGE_SET PrivilegeSet, 20 IN PULONG PrivilegeSetLength, 21 OUT PACCESS_MASK GrantedAccess, 22 OUT PBOOLEAN AccessStatus 23 ); 24 25 NTSYSAPI 26 NTSTATUS 27 NTAPI 28 NtAccessCheckAndAuditAlarm( 29 IN PUNICODE_STRING SubsystemName, 30 IN PVOID HandleId, 31 IN PUNICODE_STRING ObjectTypeName, 32 IN PUNICODE_STRING ObjectName, 33 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 34 IN ACCESS_MASK DesiredAccess, 35 IN PGENERIC_MAPPING GenericMapping, 36 IN BOOLEAN ObjectCreation, 37 OUT PACCESS_MASK GrantedAccess, 38 OUT PBOOLEAN AccessStatus, 39 OUT PBOOLEAN GenerateOnClose 40 ); 41 42 NTSYSAPI 43 NTSTATUS 44 NTAPI 45 NtAccessCheckByType( 46 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 47 IN PSID PrincipalSelfSid, 48 IN HANDLE TokenHandle, 49 IN ULONG DesiredAccess, 50 IN POBJECT_TYPE_LIST ObjectTypeList, 51 IN ULONG ObjectTypeListLength, 52 IN PGENERIC_MAPPING GenericMapping, 53 IN PPRIVILEGE_SET PrivilegeSet, 54 IN PULONG PrivilegeSetLength, 55 OUT PACCESS_MASK GrantedAccess, 56 OUT PULONG AccessStatus 57 ); 58 59 NTSYSAPI 60 NTSTATUS 61 NTAPI 62 NtAccessCheckByTypeAndAuditAlarm( 63 IN PUNICODE_STRING SubsystemName, 64 IN PVOID HandleId, 65 IN PUNICODE_STRING ObjectTypeName, 66 IN PUNICODE_STRING ObjectName, 67 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 68 IN PSID PrincipalSelfSid, 69 IN ACCESS_MASK DesiredAccess, 70 IN AUDIT_EVENT_TYPE AuditType, 71 IN ULONG Flags, 72 IN POBJECT_TYPE_LIST ObjectTypeList, 73 IN ULONG ObjectTypeListLength, 74 IN PGENERIC_MAPPING GenericMapping, 75 IN BOOLEAN ObjectCreation, 76 OUT PACCESS_MASK GrantedAccess, 77 OUT PULONG AccessStatus, 78 OUT PBOOLEAN GenerateOnClose 79 ); 80 81 NTSYSAPI 82 NTSTATUS 83 NTAPI 84 NtAccessCheckByTypeResultList( 85 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 86 IN PSID PrincipalSelfSid, 87 IN HANDLE TokenHandle, 88 IN ACCESS_MASK DesiredAccess, 89 IN POBJECT_TYPE_LIST ObjectTypeList, 90 IN ULONG ObjectTypeListLength, 91 IN PGENERIC_MAPPING GenericMapping, 92 IN PPRIVILEGE_SET PrivilegeSet, 93 IN PULONG PrivilegeSetLength, 94 OUT PACCESS_MASK GrantedAccessList, 95 OUT PULONG AccessStatusList 96 ); 97 98 NTSYSAPI 99 NTSTATUS 100 NTAPI 101 NtAccessCheckByTypeResultListAndAuditAlarm( 102 IN PUNICODE_STRING SubsystemName, 103 IN PVOID HandleId, 104 IN PUNICODE_STRING ObjectTypeName, 105 IN PUNICODE_STRING ObjectName, 106 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 107 IN PSID PrincipalSelfSid, 108 IN ACCESS_MASK DesiredAccess, 109 IN AUDIT_EVENT_TYPE AuditType, 110 IN ULONG Flags, 111 IN POBJECT_TYPE_LIST ObjectTypeList, 112 IN ULONG ObjectTypeListLength, 113 IN PGENERIC_MAPPING GenericMapping, 114 IN BOOLEAN ObjectCreation, 115 OUT PACCESS_MASK GrantedAccessList, 116 OUT PULONG AccessStatusList, 117 OUT PULONG GenerateOnClose 118 ); 119 120 NTSYSAPI 121 NTSTATUS 122 NTAPI 123 NtAccessCheckByTypeResultListAndAuditAlarmByHandle( 124 IN PUNICODE_STRING SubsystemName, 125 IN PVOID HandleId, 126 IN HANDLE TokenHandle, 127 IN PUNICODE_STRING ObjectTypeName, 128 IN PUNICODE_STRING ObjectName, 129 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 130 IN PSID PrincipalSelfSid, 131 IN ACCESS_MASK DesiredAccess, 132 IN AUDIT_EVENT_TYPE AuditType, 133 IN ULONG Flags, 134 IN POBJECT_TYPE_LIST ObjectTypeList, 135 IN ULONG ObjectTypeListLength, 136 IN PGENERIC_MAPPING GenericMapping, 137 IN BOOLEAN ObjectCreation, 138 OUT PACCESS_MASK GrantedAccessList, 139 OUT PULONG AccessStatusList, 140 OUT PULONG GenerateOnClose 141 ); 142 143 NTSYSAPI 144 NTSTATUS 145 NTAPI 146 NtAddAtom( 147 IN PWSTR String, 148 IN ULONG StringLength, 149 OUT PUSHORT Atom 150 ); 151 152 NTSYSAPI 153 NTSTATUS 154 NTAPI 155 NtAddBootEntry( 156 IN PUNICODE_STRING EntryName, 157 IN PUNICODE_STRING EntryValue 158 ); 159 160 NTSYSAPI 161 NTSTATUS 162 NTAPI 163 NtAddDriverEntry( 164 IN PUNICODE_STRING DriverName, 165 IN PUNICODE_STRING DriverPath 166 ); 167 168 NTSYSAPI 169 NTSTATUS 170 NTAPI 171 NtAdjustGroupsToken( 172 IN HANDLE TokenHandle, 173 IN BOOLEAN ResetToDefault, 174 IN PTOKEN_GROUPS NewState, 175 IN ULONG BufferLength, 176 OUT PTOKEN_GROUPS PreviousState OPTIONAL, 177 OUT PULONG ReturnLength 178 ); 179 180 NTSYSAPI 181 NTSTATUS 182 NTAPI 183 NtAdjustPrivilegesToken( 184 IN HANDLE TokenHandle, 185 IN BOOLEAN DisableAllPrivileges, 186 IN PTOKEN_PRIVILEGES NewState, 187 IN ULONG BufferLength, 188 OUT PTOKEN_PRIVILEGES PreviousState OPTIONAL, 189 OUT PULONG ReturnLength OPTIONAL 190 ); 191 192 NTSYSAPI 193 NTSTATUS 194 NTAPI 195 NtAlertResumeThread( 196 IN HANDLE ThreadHandle, 197 OUT PULONG PreviousSuspendCount OPTIONAL 198 ); 199 200 NTSYSAPI 201 NTSTATUS 202 NTAPI 203 NtAllocateLocallyUniqueId( 204 OUT PLUID Luid 205 ); 206 207 NTSYSAPI 208 NTSTATUS 209 NTAPI 210 NtAllocateUserPhysicalPages( 211 IN HANDLE ProcessHandle, 212 IN PULONG NumberOfPages, 213 OUT PULONG PageFrameNumbers 214 ); 215 216 NTSYSAPI 217 NTSTATUS 218 NTAPI 219 NtAllocateUuids( 220 OUT PLARGE_INTEGER UuidLastTimeAllocated, 221 OUT PULONG UuidDeltaTime, 222 OUT PULONG UuidSequenceNumber, 223 OUT PUCHAR UuidSeed 224 ); 225 NTSYSAPI 226 NTSTATUS 227 NTAPI 228 NtAllocateVirtualMemory( 229 IN HANDLE ProcessHandle, 230 IN OUT PVOID *BaseAddress, 231 IN ULONG ZeroBits, 232 IN OUT PULONG AllocationSize, 233 IN ULONG AllocationType, 234 IN ULONG Protect 235 ); 236 237 NTSYSAPI 238 NTSTATUS 239 NTAPI 240 NtApphelpCacheControl( 241 IN APPHELPCACHECONTROL ApphelpCacheControl, 242 IN PUNICODE_STRING ApphelpCacheObject 243 ); 244 245 NTSYSAPI 246 NTSTATUS 247 NTAPI 248 NtAreMappedFilesTheSame( 249 IN PVOID Address1, 250 IN PVOID Address2 251 ); 252 253 NTSYSAPI 254 NTSTATUS 255 NTAPI 256 NtAssignProcessToJobObject( 257 IN HANDLE JobHandle, 258 IN HANDLE ProcessHandle 259 ); 260 261 NTSYSAPI 262 NTSTATUS 263 NTAPI 264 NtCallbackReturn( 265 IN PVOID Result OPTIONAL, 266 IN ULONG ResultLength, 267 IN NTSTATUS Status 268 ); 269 270 NTSYSAPI 271 NTSTATUS 272 NTAPI 273 NtCancelDeviceWakeupRequest( 274 IN HANDLE DeviceHandle 275 ); 276 277 NTSYSAPI 278 NTSTATUS 279 NTAPI 280 NtCancelIoFile( 281 IN HANDLE FileHandle, 282 OUT PIO_STATUS_BLOCK IoStatusBlock 283 ); 284 285 NTSYSAPI 286 NTSTATUS 287 NTAPI 288 NtCancelTimer( 289 IN HANDLE TimerHandle, 290 OUT PBOOLEAN PreviousState OPTIONAL 291 ); 292 293 NTSYSAPI 294 NTSTATUS 295 NTAPI 296 NtClearEvent( 297 IN HANDLE EventHandle 298 ); 299 300 NTSYSAPI 301 NTSTATUS 302 NTAPI 303 NtClose( 304 IN HANDLE Handle 305 ); 306 307 NTSYSAPI 308 NTSTATUS 309 NTAPI 310 NtCloseObjectAuditAlarm( 311 IN PUNICODE_STRING SubsystemName, 312 IN PVOID HandleId, 313 IN BOOLEAN GenerateOnClose 314 ); 315 316 NTSYSAPI 317 NTSTATUS 318 NTAPI 319 NtCompactKeys( 320 IN ULONG Length, 321 IN HANDLE Key 322 ); 323 324 NTSYSAPI 325 NTSTATUS 326 NTAPI 327 NtCompareTokens( 328 IN HANDLE FirstTokenHandle, 329 IN HANDLE SecondTokenHandle, 330 OUT PBOOLEAN IdenticalTokens 331 ); 332 333 NTSYSAPI 334 NTSTATUS 335 NTAPI 336 NtCompleteConnectPort( 337 IN HANDLE PortHandle 338 ); 339 340 NTSYSAPI 341 NTSTATUS 342 NTAPI 343 NtCompressKey( 344 IN HANDLE Key 345 ); 346 347 NTSYSAPI 348 NTSTATUS 349 NTAPI 350 NtConnectPort( 351 OUT PHANDLE PortHandle, 352 IN PUNICODE_STRING PortName, 353 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos, 354 IN OUT PPORT_VIEW ClientView OPTIONAL, 355 OUT PREMOTE_PORT_VIEW ServerView OPTIONAL, 356 OUT PULONG MaxMessageLength OPTIONAL, 357 IN OUT PVOID ConnectInformation OPTIONAL, 358 IN OUT PULONG ConnectInformationLength OPTIONAL 359 ); 360 361 NTSYSAPI 362 NTSTATUS 363 NTAPI 364 NtContinue( 365 IN PCONTEXT Context, 366 IN BOOLEAN TestAlert 367 ); 368 369 NTSYSAPI 370 NTSTATUS 371 NTAPI 372 NtCreateDebugObject( 373 OUT PHANDLE DebugObject, 374 IN ULONG AccessRequired, 375 IN POBJECT_ATTRIBUTES ObjectAttributes, 376 IN BOOLEAN KillProcessOnExit 377 ); 378 379 NTSYSAPI 380 NTSTATUS 381 NTAPI 382 NtCreateDirectoryObject( 383 OUT PHANDLE DirectoryHandle, 384 IN ACCESS_MASK DesiredAccess, 385 IN POBJECT_ATTRIBUTES ObjectAttributes 386 ); 387 388 NTSYSAPI 389 NTSTATUS 390 NTAPI 391 NtCreateEvent( 392 OUT PHANDLE EventHandle, 393 IN ACCESS_MASK DesiredAccess, 394 IN POBJECT_ATTRIBUTES ObjectAttributes, 395 IN EVENT_TYPE EventType, 396 IN BOOLEAN InitialState 397 ); 398 399 NTSYSAPI 400 NTSTATUS 401 NTAPI 402 NtCreateEventPair( 403 OUT PHANDLE EventPairHandle, 404 IN ACCESS_MASK DesiredAccess, 405 IN POBJECT_ATTRIBUTES ObjectAttributes 406 ); 407 408 NTSYSAPI 409 NTSTATUS 410 NTAPI 411 NtCreateFile( 412 OUT PHANDLE FileHandle, 413 IN ACCESS_MASK DesiredAccess, 414 IN POBJECT_ATTRIBUTES ObjectAttributes, 415 OUT PIO_STATUS_BLOCK IoStatusBlock, 416 IN PLARGE_INTEGER AllocationSize OPTIONAL, 417 IN ULONG FileAttributes, 418 IN ULONG ShareAccess, 419 IN ULONG CreateDisposition, 420 IN ULONG CreateOptions, 421 IN PVOID EaBuffer OPTIONAL, 422 IN ULONG EaLength 423 ); 424 425 NTSYSAPI 426 NTSTATUS 427 NTAPI 428 NtCreateIoCompletion( 429 OUT PHANDLE IoCompletionHandle, 430 IN ACCESS_MASK DesiredAccess, 431 IN POBJECT_ATTRIBUTES ObjectAttributes, 432 IN ULONG NumberOfConcurrentThreads 433 ); 434 435 NTSYSAPI 436 NTSTATUS 437 NTAPI 438 NtCreateJobObject( 439 OUT PHANDLE JobHandle, 440 IN ACCESS_MASK DesiredAccess, 441 IN POBJECT_ATTRIBUTES ObjectAttributes 442 ); 443 444 NTSYSAPI 445 NTSTATUS 446 NTAPI 447 NtCreateJobSet( 448 IN ULONG Jobs, 449 IN PJOB_SET_ARRAY JobSet, 450 IN ULONG Reserved 451 ); 452 453 NTSYSAPI 454 NTSTATUS 455 NTAPI 456 NtCreateKey( 457 OUT PHANDLE KeyHandle, 458 IN ACCESS_MASK DesiredAccess, 459 IN POBJECT_ATTRIBUTES ObjectAttributes, 460 IN ULONG TitleIndex, 461 IN PUNICODE_STRING Class OPTIONAL, 462 IN ULONG CreateOptions, 463 OUT PULONG Disposition OPTIONAL 464 ); 465 466 NTSYSAPI 467 NTSTATUS 468 NTAPI 469 NtCreateKeyedEvent( 470 OUT PHANDLE KeyedEventHandle, 471 IN ACCESS_MASK DesiredAccess, 472 IN POBJECT_ATTRIBUTES ObjectAttributes, 473 IN ULONG Reserved 474 ); 475 476 NTSYSAPI 477 NTSTATUS 478 NTAPI 479 NtCreateMailslotFile( 480 OUT PHANDLE FileHandle, 481 IN ACCESS_MASK DesiredAccess, 482 IN POBJECT_ATTRIBUTES ObjectAttributes, 483 OUT PIO_STATUS_BLOCK IoStatusBlock, 484 IN ULONG CreateOptions, 485 IN ULONG InBufferSize, 486 IN ULONG MaxMessageSize, 487 IN PLARGE_INTEGER ReadTimeout OPTIONAL 488 ); 489 490 NTSYSAPI 491 NTSTATUS 492 NTAPI 493 NtCreateMutant( 494 OUT PHANDLE MutantHandle, 495 IN ACCESS_MASK DesiredAccess, 496 IN POBJECT_ATTRIBUTES ObjectAttributes, 497 IN BOOLEAN InitialOwner 498 ); 499 500 NTSYSAPI 501 NTSTATUS 502 NTAPI 503 NtCreateNamedPipeFile( 504 OUT PHANDLE FileHandle, 505 IN ACCESS_MASK DesiredAccess, 506 IN POBJECT_ATTRIBUTES ObjectAttributes, 507 OUT PIO_STATUS_BLOCK IoStatusBlock, 508 IN ULONG ShareAccess, 509 IN ULONG CreateDisposition, 510 IN ULONG CreateOptions, 511 IN BOOLEAN TypeMessage, 512 IN BOOLEAN ReadmodeMessage, 513 IN BOOLEAN Nonblocking, 514 IN ULONG MaxInstances, 515 IN ULONG InBufferSize, 516 IN ULONG OutBufferSize, 517 IN PLARGE_INTEGER DefaultTimeout OPTIONAL 518 ); 519 520 NTSYSAPI 521 NTSTATUS 522 NTAPI 523 NtCreatePagingFile( 524 IN PUNICODE_STRING FileName, 525 IN PULARGE_INTEGER InitialSize, 526 IN PULARGE_INTEGER MaximumSize, 527 IN ULONG Priority OPTIONAL 528 ); 529 530 NTSYSAPI 531 NTSTATUS 532 NTAPI 533 NtCreatePort( 534 OUT PHANDLE PortHandle, 535 IN POBJECT_ATTRIBUTES ObjectAttributes, 536 IN ULONG MaxConnectionInfoLength, 537 IN ULONG MaxMessageLength, 538 IN ULONG MaxPoolUsage 539 ); 540 541 NTSYSAPI 542 NTSTATUS 543 NTAPI 544 NtCreateProcess( 545 OUT PHANDLE ProcessHandle, 546 IN ACCESS_MASK DesiredAccess, 547 IN POBJECT_ATTRIBUTES ObjectAttributes, 548 IN HANDLE InheritFromProcessHandle, 549 IN BOOLEAN InheritHandles, 550 IN HANDLE SectionHandle OPTIONAL, 551 IN HANDLE DebugPort OPTIONAL, 552 IN HANDLE ExceptionPort OPTIONAL 553 ); 554 555 NTSYSAPI 556 NTSTATUS 557 NTAPI 558 NtCreateProcessEx( 559 OUT PHANDLE ProcessHandle, 560 IN ACCESS_MASK DesiredAccess, 561 IN POBJECT_ATTRIBUTES ObjectAttributes, 562 IN HANDLE InheritFromProcessHandle, 563 IN ULONG CreateFlags, 564 IN HANDLE SectionHandle OPTIONAL, 565 IN HANDLE DebugObject OPTIONAL, 566 IN HANDLE ExceptionPort OPTIONAL, 567 IN ULONG JobMemberLevel 568 ); 569 570 NTSYSAPI 571 NTSTATUS 572 NTAPI 573 NtCreateProfile( 574 OUT PHANDLE ProfileHandle, 575 IN HANDLE ProcessHandle, 576 IN PVOID Base, 577 IN ULONG Size, 578 IN ULONG BucketShift, 579 IN PULONG Buffer, 580 IN ULONG BufferLength, 581 IN KPROFILE_SOURCE Source, 582 IN ULONG ProcessorMask 583 ); 584 585 NTSYSAPI 586 NTSTATUS 587 NTAPI 588 NtCreateSection( 589 OUT PHANDLE SectionHandle, 590 IN ACCESS_MASK DesiredAccess, 591 IN POBJECT_ATTRIBUTES ObjectAttributes, 592 IN PLARGE_INTEGER SectionSize OPTIONAL, 593 IN ULONG Protect, 594 IN ULONG Attributes, 595 IN HANDLE FileHandle 596 ); 597 598 NTSYSAPI 599 NTSTATUS 600 NTAPI 601 NtCreateSemaphore( 602 OUT PHANDLE SemaphoreHandle, 603 IN ACCESS_MASK DesiredAccess, 604 IN POBJECT_ATTRIBUTES ObjectAttributes, 605 IN LONG InitialCount, 606 IN LONG MaximumCount 607 ); 608 609 NTSYSAPI 610 NTSTATUS 611 NTAPI 612 NtCreateSymbolicLinkObject( 613 OUT PHANDLE SymbolicLinkHandle, 614 IN ACCESS_MASK DesiredAccess, 615 IN POBJECT_ATTRIBUTES ObjectAttributes, 616 IN PUNICODE_STRING TargetName 617 ); 618 619 NTSYSAPI 620 NTSTATUS 621 NTAPI 622 NtCreateThread( 623 OUT PHANDLE ThreadHandle, 624 IN ACCESS_MASK DesiredAccess, 625 IN POBJECT_ATTRIBUTES ObjectAttributes, 626 IN HANDLE ProcessHandle, 627 OUT PCLIENT_ID ClientId, 628 IN PCONTEXT ThreadContext, 629 IN PUSER_STACK UserStack, 630 IN BOOLEAN CreateSuspended 631 ); 632 633 NTSYSAPI 634 NTSTATUS 635 NTAPI 636 NtCreateTimer( 637 OUT PHANDLE TimerHandle, 638 IN ACCESS_MASK DesiredAccess, 639 IN POBJECT_ATTRIBUTES ObjectAttributes, 640 IN TIMER_TYPE TimerType 641 ); 642 643 NTSYSAPI 644 NTSTATUS 645 NTAPI 646 NtCreateToken( 647 OUT PHANDLE TokenHandle, 648 IN ACCESS_MASK DesiredAccess, 649 IN POBJECT_ATTRIBUTES ObjectAttributes, 650 IN TOKEN_TYPE Type, 651 IN PLUID AuthenticationId, 652 IN PLARGE_INTEGER ExpirationTime, 653 IN PTOKEN_USER User, 654 IN PTOKEN_GROUPS Groups, 655 IN PTOKEN_PRIVILEGES Privileges, 656 IN PTOKEN_OWNER Owner, 657 IN PTOKEN_PRIMARY_GROUP PrimaryGroup, 658 IN PTOKEN_DEFAULT_DACL DefaultDacl, 659 IN PTOKEN_SOURCE Source 660 ); 661 662 NTSYSAPI 663 NTSTATUS 664 NTAPI 665 NtCreateWaitablePort( 666 OUT PHANDLE PortHandle, 667 IN POBJECT_ATTRIBUTES ObjectAttributes, 668 IN ULONG MaxConnectionInfoLength, 669 IN ULONG MaxMessageLength, 670 IN ULONG MaxPoolUsage 671 ); 672 673 NTSYSAPI 674 NTSTATUS 675 NTAPI 676 NtDebugActiveProcess( 677 IN HANDLE Process, 678 IN HANDLE DebugObject 679 ); 680 681 NTSYSAPI 682 NTSTATUS 683 NTAPI 684 NtDebugContinue( 685 IN HANDLE DebugObject, 686 IN PCLIENT_ID AppClientId, 687 IN NTSTATUS ContinueStatus 688 ); 689 690 NTSYSAPI 691 NTSTATUS 692 NTAPI 693 NtDelayExecution( 694 IN BOOLEAN Alertable, 695 IN PLARGE_INTEGER Interval 696 ); 697 698 NTSYSAPI 699 NTSTATUS 700 NTAPI 701 NtDeleteAtom( 702 IN USHORT Atom 703 ); 704 705 NTSYSAPI 706 NTSTATUS 707 NTAPI 708 NtDeleteBootEntry( 709 IN PUNICODE_STRING EntryName, 710 IN PUNICODE_STRING EntryValue 711 ); 712 713 NTSYSAPI 714 NTSTATUS 715 NTAPI 716 NtDeleteDriverEntry( 717 IN PUNICODE_STRING DriverName, 718 IN PUNICODE_STRING DriverPath 719 ); 720 721 NTSYSAPI 722 NTSTATUS 723 NTAPI 724 NtDeleteFile( 725 IN POBJECT_ATTRIBUTES ObjectAttributes 726 ); 727 728 NTSYSAPI 729 NTSTATUS 730 NTAPI 731 NtDeleteKey( 732 IN HANDLE KeyHandle 733 ); 734 735 NTSYSAPI 736 NTSTATUS 737 NTAPI 738 NtDeleteObjectAuditAlarm( 739 IN PUNICODE_STRING SubsystemName, 740 IN PVOID HandleId, 741 IN BOOLEAN GenerateOnClose 742 ); 743 744 NTSYSAPI 745 NTSTATUS 746 NTAPI 747 NtDeleteValueKey( 748 IN HANDLE KeyHandle, 749 IN PUNICODE_STRING ValueName 750 ); 751 752 NTSYSAPI 753 NTSTATUS 754 NTAPI 755 NtDeviceIoControlFile( 756 IN HANDLE FileHandle, 757 IN HANDLE Event OPTIONAL, 758 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 759 IN PVOID ApcContext OPTIONAL, 760 OUT PIO_STATUS_BLOCK IoStatusBlock, 761 IN ULONG IoControlCode, 762 IN PVOID InputBuffer OPTIONAL, 763 IN ULONG InputBufferLength, 764 OUT PVOID OutputBuffer OPTIONAL, 765 IN ULONG OutputBufferLength 766 ); 767 768 NTSYSAPI 769 NTSTATUS 770 NTAPI 771 NtDisplayString( 772 IN PUNICODE_STRING String 773 ); 774 775 NTSYSAPI 776 NTSTATUS 777 NTAPI 778 NtDuplicateObject( 779 IN HANDLE SourceProcessHandle, 780 IN HANDLE SourceHandle, 781 IN HANDLE TargetProcessHandle, 782 OUT PHANDLE TargetHandle OPTIONAL, 783 IN ACCESS_MASK DesiredAccess, 784 IN ULONG Attributes, 785 IN ULONG Options 786 ); 787 788 NTSYSAPI 789 NTSTATUS 790 NTAPI 791 NtDuplicateToken( 792 IN HANDLE ExistingTokenHandle, 793 IN ACCESS_MASK DesiredAccess, 794 IN POBJECT_ATTRIBUTES ObjectAttributes, 795 IN BOOLEAN EffectiveOnly, 796 IN TOKEN_TYPE TokenType, 797 OUT PHANDLE NewTokenHandle 798 ); 799 800 NTSYSAPI 801 NTSTATUS 802 NTAPI 803 NtEnumerateBootEntries( 804 IN ULONG Unknown1, 805 IN ULONG Unknown2 806 ); 807 NTSYSAPI 808 NTSTATUS 809 NTAPI 810 NtEnumerateKey( 811 IN HANDLE KeyHandle, 812 IN ULONG Index, 813 IN KEY_INFORMATION_CLASS KeyInformationClass, 814 OUT PVOID KeyInformation, 815 IN ULONG KeyInformationLength, 816 OUT PULONG ResultLength 817 ); 818 819 NTSYSAPI 820 NTSTATUS 821 NTAPI 822 NtEnumerateSystemEnvironmentValuesEx( 823 IN ULONG Unknown1, 824 IN ULONG Unknown2, 825 IN ULONG Unknown3 826 ); 827 828 NTSYSAPI 829 NTSTATUS 830 NTAPI 831 NtEnumerateValueKey( 832 IN HANDLE KeyHandle, 833 IN ULONG Index, 834 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, 835 OUT PVOID KeyValueInformation, 836 IN ULONG KeyValueInformationLength, 837 OUT PULONG ResultLength 838 ); 839 840 NTSYSAPI 841 NTSTATUS 842 NTAPI 843 NtExtendSection( 844 IN HANDLE SectionHandle, 845 IN PLARGE_INTEGER SectionSize 846 ); 847 848 NTSYSAPI 849 NTSTATUS 850 NTAPI 851 NtFilterToken( 852 IN HANDLE ExistingTokenHandle, 853 IN ULONG Flags, 854 IN PTOKEN_GROUPS SidsToDisable, 855 IN PTOKEN_PRIVILEGES PrivilegesToDelete, 856 IN PTOKEN_GROUPS SidsToRestricted, 857 OUT PHANDLE NewTokenHandle 858 ); 859 860 NTSYSAPI 861 NTSTATUS 862 NTAPI 863 NtFindAtom( 864 IN PWSTR String, 865 IN ULONG StringLength, 866 OUT PUSHORT Atom 867 ); 868 869 NTSYSAPI 870 NTSTATUS 871 NTAPI 872 NtFlushBuffersFile( 873 IN HANDLE FileHandle, 874 OUT PIO_STATUS_BLOCK IoStatusBlock 875 ); 876 877 NTSYSAPI 878 NTSTATUS 879 NTAPI 880 NtFlushInstructionCache( 881 IN HANDLE ProcessHandle, 882 IN PVOID BaseAddress OPTIONAL, 883 IN ULONG FlushSize 884 ); 885 886 NTSYSAPI 887 NTSTATUS 888 NTAPI 889 NtFlushKey( 890 IN HANDLE KeyHandle 891 ); 892 893 NTSYSAPI 894 NTSTATUS 895 NTAPI 896 NtFlushVirtualMemory( 897 IN HANDLE ProcessHandle, 898 IN OUT PVOID *BaseAddress, 899 IN OUT PULONG FlushSize, 900 OUT PIO_STATUS_BLOCK IoStatusBlock 901 ); 902 903 NTSYSAPI 904 NTSTATUS 905 NTAPI 906 NtFlushWriteBuffer( 907 VOID 908 ); 909 910 NTSYSAPI 911 NTSTATUS 912 NTAPI 913 NtYieldExecution( 914 VOID 915 ); 916 917 NTSYSAPI 918 NTSTATUS 919 NTAPI 920 NtWriteVirtualMemory( 921 IN HANDLE ProcessHandle, 922 IN PVOID BaseAddress, 923 IN PVOID Buffer, 924 IN ULONG BufferLength, 925 OUT PULONG ReturnLength OPTIONAL 926 ); 927 928 NTSYSAPI 929 NTSTATUS 930 NTAPI 931 NtWriteRequestData( 932 IN HANDLE PortHandle, 933 IN PPORT_MESSAGE Message, 934 IN ULONG Index, 935 IN PVOID Buffer, 936 IN ULONG BufferLength, 937 OUT PULONG ReturnLength OPTIONAL 938 ); 939 940 NTSYSAPI 941 NTSTATUS 942 NTAPI 943 NtWriteFileGather( 944 IN HANDLE FileHandle, 945 IN HANDLE Event OPTIONAL, 946 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 947 IN PVOID ApcContext OPTIONAL, 948 OUT PIO_STATUS_BLOCK IoStatusBlock, 949 IN PFILE_SEGMENT_ELEMENT Buffer, 950 IN ULONG Length, 951 IN PLARGE_INTEGER ByteOffset OPTIONAL, 952 IN PULONG Key OPTIONAL 953 ); 954 955 NTSYSAPI 956 NTSTATUS 957 NTAPI 958 NtWriteFile( 959 IN HANDLE FileHandle, 960 IN HANDLE Event OPTIONAL, 961 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 962 IN PVOID ApcContext OPTIONAL, 963 OUT PIO_STATUS_BLOCK IoStatusBlock, 964 IN PVOID Buffer, 965 IN ULONG Length, 966 IN PLARGE_INTEGER ByteOffset OPTIONAL, 967 IN PULONG Key OPTIONAL 968 ); 969 NTSYSAPI 970 NTSTATUS 971 NTAPI 972 NtWaitLowEventPair( 973 IN HANDLE EventPairHandle 974 ); 975 976 NTSYSAPI 977 NTSTATUS 978 NTAPI 979 NtWaitHighEventPair( 980 IN HANDLE EventPairHandle 981 ); 982 983 NTSYSAPI 984 NTSTATUS 985 NTAPI 986 NtWaitForSingleObject( 987 IN HANDLE Handle, 988 IN BOOLEAN Alertable, 989 IN PLARGE_INTEGER Timeout OPTIONAL 990 ); 991 992 NTSYSAPI 993 NTSTATUS 994 NTAPI 995 NtWaitForMultipleObjects32( 996 IN ULONG HandleCount, 997 IN PHANDLE Handles, 998 IN WAIT_TYPE WaitType, 999 IN BOOLEAN Alertable, 1000 IN PLARGE_INTEGER Timeout OPTIONAL 1001 ); 1002 1003 NTSYSAPI 1004 NTSTATUS 1005 NTAPI 1006 NtWaitForMultipleObjects( 1007 IN ULONG HandleCount, 1008 IN PHANDLE Handles, 1009 IN WAIT_TYPE WaitType, 1010 IN BOOLEAN Alertable, 1011 IN PLARGE_INTEGER Timeout OPTIONAL 1012 ); 1013 1014 NTSYSAPI 1015 NTSTATUS 1016 NTAPI 1017 NtWaitForKeyedEvent( 1018 IN HANDLE KeyedEventHandle, 1019 IN PVOID Key, 1020 IN BOOLEAN Alertable, 1021 IN PLARGE_INTEGER Timeout OPTIONAL 1022 ); 1023 1024 NTSYSAPI 1025 NTSTATUS 1026 NTAPI 1027 NtWaitForDebugEvent( 1028 IN HANDLE DebugObject, 1029 IN BOOLEAN Alertable, 1030 IN PLARGE_INTEGER Timeout OPTIONAL, 1031 OUT PDBGUI_WAIT_STATE_CHANGE StateChange 1032 ); 1033 1034 NTSYSAPI 1035 NTSTATUS 1036 NTAPI 1037 NtVdmControl( 1038 IN VDMSERVICECLASS Service, 1039 IN OUT PVOID ServiceData 1040 ); 1041 1042 NTSYSAPI 1043 NTSTATUS 1044 NTAPI 1045 NtUnmapViewOfSection( 1046 IN HANDLE ProcessHandle, 1047 IN PVOID BaseAddress 1048 ); 1049 1050 NTSYSAPI 1051 NTSTATUS 1052 NTAPI 1053 NtUnlockVirtualMemory( 1054 IN HANDLE ProcessHandle, 1055 IN OUT PVOID *BaseAddress, 1056 IN OUT PULONG LockSize, 1057 IN ULONG LockType 1058 ); 1059 1060 NTSYSAPI 1061 NTSTATUS 1062 NTAPI 1063 NtUnlockFile( 1064 IN HANDLE FileHandle, 1065 OUT PIO_STATUS_BLOCK IoStatusBlock, 1066 IN PULARGE_INTEGER LockOffset, 1067 IN PULARGE_INTEGER LockLength, 1068 IN ULONG Key 1069 ); 1070 1071 NTSYSAPI 1072 NTSTATUS 1073 NTAPI 1074 NtUnloadKeyEx( 1075 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 1076 IN HANDLE EventHandle OPTIONAL 1077 ); 1078 1079 NTSYSAPI 1080 NTSTATUS 1081 NTAPI 1082 NtUnloadKey2( 1083 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 1084 IN BOOLEAN ForceUnload 1085 ); 1086 1087 NTSYSAPI 1088 NTSTATUS 1089 NTAPI 1090 NtUnloadKey( 1091 IN POBJECT_ATTRIBUTES KeyObjectAttributes 1092 ); 1093 1094 NTSYSAPI 1095 NTSTATUS 1096 NTAPI 1097 NtUnloadDriver( 1098 IN PUNICODE_STRING DriverServiceName 1099 ); 1100 1101 NTSYSAPI 1102 NTSTATUS 1103 NTAPI 1104 NtTranslateFilePath( 1105 PFILE_PATH InputFilePath, 1106 ULONG OutputType, 1107 PFILE_PATH OutputFilePath, 1108 ULONG OutputFilePathLength 1109 ); 1110 1111 NTSYSAPI 1112 NTSTATUS 1113 NTAPI 1114 NtTraceEvent( 1115 IN ULONG TraceHandle, 1116 IN ULONG Flags, 1117 IN ULONG TraceHeaderLength, 1118 IN PEVENT_TRACE_HEADER TraceHeader 1119 ); 1120 1121 NTSYSAPI 1122 NTSTATUS 1123 NTAPI 1124 NtTerminateThread( 1125 IN HANDLE ThreadHandle OPTIONAL, 1126 IN NTSTATUS ExitStatus 1127 ); 1128 1129 NTSYSAPI 1130 NTSTATUS 1131 NTAPI 1132 NtTerminateProcess( 1133 IN HANDLE ProcessHandle OPTIONAL, 1134 IN NTSTATUS ExitStatus 1135 ); 1136 1137 NTSYSAPI 1138 NTSTATUS 1139 NTAPI 1140 NtTerminateJobObject( 1141 IN HANDLE JobHandle, 1142 IN NTSTATUS ExitStatus 1143 ); 1144 1145 NTSYSAPI 1146 NTSTATUS 1147 NTAPI 1148 NtSystemDebugControl( 1149 IN DEBUG_CONTROL_CODE ControlCode, 1150 IN PVOID InputBuffer OPTIONAL, 1151 IN ULONG InputBufferLength, 1152 OUT PVOID OutputBuffer OPTIONAL, 1153 IN ULONG OutputBufferLength, 1154 OUT PULONG ReturnLength OPTIONAL 1155 ); 1156 1157 NTSYSAPI 1158 NTSTATUS 1159 NTAPI 1160 NtSuspendThread( 1161 IN HANDLE ThreadHandle, 1162 OUT PULONG PreviousSuspendCount OPTIONAL 1163 ); 1164 1165 NTSYSAPI 1166 NTSTATUS 1167 NTAPI 1168 NtSuspendProcess( 1169 IN HANDLE Process 1170 ); 1171 1172 NTSYSAPI 1173 NTSTATUS 1174 NTAPI 1175 NtStopProfile( 1176 IN HANDLE ProfileHandle 1177 ); 1178 NTSYSAPI 1179 NTSTATUS 1180 NTAPI 1181 NtStartProfile( 1182 IN HANDLE ProfileHandle 1183 ); 1184 1185 NTSYSAPI 1186 NTSTATUS 1187 NTAPI 1188 NtSignalAndWaitForSingleObject( 1189 IN HANDLE HandleToSignal, 1190 IN HANDLE HandleToWait, 1191 IN BOOLEAN Alertable, 1192 IN PLARGE_INTEGER Timeout OPTIONAL 1193 ); 1194 1195 NTSYSAPI 1196 NTSTATUS 1197 NTAPI 1198 NtShutdownSystem( 1199 IN SHUTDOWN_ACTION Action 1200 ); 1201 1202 NTSYSAPI 1203 NTSTATUS 1204 NTAPI 1205 NtSetVolumeInformationFile( 1206 IN HANDLE FileHandle, 1207 OUT PIO_STATUS_BLOCK IoStatusBlock, 1208 IN PVOID Buffer, 1209 IN ULONG BufferLength, 1210 IN FS_INFORMATION_CLASS VolumeInformationClass 1211 ); 1212 1213 NTSYSAPI 1214 NTSTATUS 1215 NTAPI 1216 NtSetValueKey( 1217 IN HANDLE KeyHandle, 1218 IN PUNICODE_STRING ValueName, 1219 IN ULONG TitleIndex, 1220 IN ULONG Type, 1221 IN PVOID Data, 1222 IN ULONG DataSize 1223 ); 1224 1225 NTSYSAPI 1226 NTSTATUS 1227 NTAPI 1228 NtSetUuidSeed( 1229 IN PUCHAR UuidSeed 1230 ); 1231 1232 NTSYSAPI 1233 NTSTATUS 1234 NTAPI 1235 NtSetTimerResolution( 1236 IN ULONG RequestedResolution, 1237 IN BOOLEAN Set, 1238 OUT PULONG ActualResolution 1239 ); 1240 1241 NTSYSAPI 1242 NTSTATUS 1243 NTAPI 1244 NtSetTimer( 1245 IN HANDLE TimerHandle, 1246 IN PLARGE_INTEGER DueTime, 1247 IN PTIMER_APC_ROUTINE TimerApcRoutine OPTIONAL, 1248 IN PVOID TimerContext, 1249 IN BOOLEAN Resume, 1250 IN LONG Period, 1251 OUT PBOOLEAN PreviousState OPTIONAL 1252 ); 1253 1254 NTSYSAPI 1255 NTSTATUS 1256 NTAPI 1257 NtSetThreadExecutionState( 1258 IN EXECUTION_STATE ExecutionState, 1259 OUT PEXECUTION_STATE PreviousExecutionState 1260 ); 1261 1262 NTSYSAPI 1263 NTSTATUS 1264 NTAPI 1265 NtSetSystemTime( 1266 IN PLARGE_INTEGER NewTime, 1267 OUT PLARGE_INTEGER OldTime OPTIONAL 1268 ); 1269 1270 NTSYSAPI 1271 NTSTATUS 1272 NTAPI 1273 NtSetSystemPowerState( 1274 IN POWER_ACTION SystemAction, 1275 IN SYSTEM_POWER_STATE MinSystemState, 1276 IN ULONG Flags 1277 ); 1278 1279 NTSYSAPI 1280 NTSTATUS 1281 NTAPI 1282 NtSetSystemInformation( 1283 IN SYSTEM_INFORMATION_CLASS SystemInformationClass, 1284 IN OUT PVOID SystemInformation, 1285 IN ULONG SystemInformationLength 1286 ); 1287 1288 NTSYSAPI 1289 NTSTATUS 1290 NTAPI 1291 NtSetSystemEnvironmentValue( 1292 IN PUNICODE_STRING Name, 1293 IN PUNICODE_STRING Value 1294 ); 1295 1296 NTSYSAPI 1297 NTSTATUS 1298 NTAPI 1299 NtSetSecurityObject( 1300 IN HANDLE Handle, 1301 IN SECURITY_INFORMATION SecurityInformation, 1302 IN PSECURITY_DESCRIPTOR SecurityDescriptor 1303 ); 1304 1305 NTSYSAPI 1306 NTSTATUS 1307 NTAPI 1308 NtSetQuotaInformationFile( 1309 IN HANDLE FileHandle, 1310 OUT PIO_STATUS_BLOCK IoStatusBlock, 1311 IN PFILE_USER_QUOTA_INFORMATION Buffer, 1312 IN ULONG BufferLength 1313 ); 1314 1315 NTSYSAPI 1316 NTSTATUS 1317 NTAPI 1318 NtSetLowWaitHighEventPair( 1319 IN HANDLE EventPairHandle 1320 ); 1321 1322 NTSYSAPI 1323 NTSTATUS 1324 NTAPI 1325 NtSetLowEventPair( 1326 IN HANDLE EventPairHandle 1327 ); 1328 1329 NTSYSAPI 1330 NTSTATUS 1331 NTAPI 1332 NtSetLdtEntries( 1333 IN ULONG Selector1, 1334 IN LDT_ENTRY LdtEntry1, 1335 IN ULONG Selector2, 1336 IN LDT_ENTRY LdtEntry2 1337 ); 1338 1339 NTSYSAPI 1340 NTSTATUS 1341 NTAPI 1342 NtSetIoCompletion( 1343 IN HANDLE IoCompletionHandle, 1344 IN ULONG CompletionKey, 1345 IN ULONG CompletionValue, 1346 IN NTSTATUS Status, 1347 IN ULONG Information 1348 ); 1349 1350 NTSYSAPI 1351 NTSTATUS 1352 NTAPI 1353 NtSetIntervalProfile( 1354 IN ULONG Interval, 1355 IN KPROFILE_SOURCE Source 1356 ); 1357 1358 NTSYSAPI 1359 NTSTATUS 1360 NTAPI 1361 NtSetInformationToken( 1362 IN HANDLE TokenHandle, 1363 IN TOKEN_INFORMATION_CLASS TokenInformationClass, 1364 IN PVOID TokenInformation, 1365 IN ULONG TokenInformationLength 1366 ); 1367 1368 NTSYSAPI 1369 NTSTATUS 1370 NTAPI 1371 NtSetInformationThread( 1372 IN HANDLE ThreadHandle, 1373 IN THREADINFOCLASS ThreadInformationClass, 1374 IN PVOID ThreadInformation, 1375 IN ULONG ThreadInformationLength 1376 ); 1377 1378 NTSYSAPI 1379 NTSTATUS 1380 NTAPI 1381 NtSetInformationProcess( 1382 IN HANDLE ProcessHandle, 1383 IN PROCESSINFOCLASS ProcessInformationClass, 1384 IN PVOID ProcessInformation, 1385 IN ULONG ProcessInformationLength 1386 ); 1387 1388 NTSYSAPI 1389 NTSTATUS 1390 NTAPI 1391 NtSetInformationObject( 1392 IN HANDLE ObjectHandle, 1393 IN OBJECT_INFORMATION_CLASS ObjectInformationClass, 1394 IN PVOID ObjectInformation, 1395 IN ULONG ObjectInformationLength 1396 ); 1397 1398 NTSYSAPI 1399 NTSTATUS 1400 NTAPI 1401 NtSetInformationKey( 1402 IN HANDLE KeyHandle, 1403 IN KEY_SET_INFORMATION_CLASS KeyInformationClass, 1404 IN PVOID KeyInformation, 1405 IN ULONG KeyInformationLength 1406 ); 1407 1408 NTSYSAPI 1409 NTSTATUS 1410 NTAPI 1411 NtSetInformationJobObject( 1412 IN HANDLE JobHandle, 1413 IN JOBOBJECTINFOCLASS JobInformationClass, 1414 IN PVOID JobInformation, 1415 IN ULONG JobInformationLength 1416 ); 1417 1418 NTSYSAPI 1419 NTSTATUS 1420 NTAPI 1421 NtSetInformationFile( 1422 IN HANDLE FileHandle, 1423 OUT PIO_STATUS_BLOCK IoStatusBlock, 1424 IN PVOID FileInformation, 1425 IN ULONG FileInformationLength, 1426 IN FILE_INFORMATION_CLASS FileInformationClass 1427 ); 1428 NTSYSAPI 1429 NTSTATUS 1430 NTAPI 1431 NtSetInformationDebugObject( 1432 IN HANDLE DebugObject, 1433 IN DEBUGOBJECTINFOCLASS DebugObjectInformationClass, 1434 IN PVOID DebugInformation, 1435 IN ULONG DebugInformationLength, 1436 OUT PULONG ReturnLength OPTIONAL 1437 ); 1438 1439 NTSYSAPI 1440 NTSTATUS 1441 NTAPI 1442 NtSetHighWaitLowEventPair( 1443 IN HANDLE EventPairHandle 1444 ); 1445 1446 NTSYSAPI 1447 NTSTATUS 1448 NTAPI 1449 NtSetHighEventPair( 1450 IN HANDLE EventPairHandle 1451 ); 1452 1453 NTSYSAPI 1454 NTSTATUS 1455 NTAPI 1456 NtSetEventBoostPriority( 1457 IN HANDLE EventHandle 1458 ); 1459 1460 NTSYSAPI 1461 NTSTATUS 1462 NTAPI 1463 NtSetEvent( 1464 IN HANDLE EventHandle, 1465 OUT PULONG PreviousState OPTIONAL 1466 ); 1467 1468 NTSYSAPI 1469 NTSTATUS 1470 NTAPI 1471 NtSetEaFile( 1472 IN HANDLE FileHandle, 1473 OUT PIO_STATUS_BLOCK IoStatusBlock, 1474 IN PFILE_FULL_EA_INFORMATION Buffer, 1475 IN ULONG BufferLength 1476 ); 1477 1478 NTSYSAPI 1479 NTSTATUS 1480 NTAPI 1481 NtSetDefaultUILanguage( 1482 IN LANGID LanguageId 1483 ); 1484 1485 NTSYSAPI 1486 NTSTATUS 1487 NTAPI 1488 NtSetDefaultLocale( 1489 IN BOOLEAN ThreadOrSystem, 1490 IN LCID Locale 1491 ); 1492 1493 NTSYSAPI 1494 NTSTATUS 1495 NTAPI 1496 NtSetDefaultHardErrorPort( 1497 IN HANDLE PortHandle 1498 ); 1499 1500 NTSYSAPI 1501 NTSTATUS 1502 NTAPI 1503 NtSetDebugFilterState( 1504 IN ULONG ComponentId, 1505 IN ULONG Level, 1506 IN BOOLEAN Enable 1507 ); 1508 1509 NTSYSAPI 1510 NTSTATUS 1511 NTAPI 1512 NtSetContextThread( 1513 IN HANDLE ThreadHandle, 1514 IN PCONTEXT Context 1515 ); 1516 1517 NTSYSAPI 1518 NTSTATUS 1519 NTAPI 1520 NtSetContextChannel( 1521 IN HANDLE CHannelHandle 1522 ); 1523 1524 1525 NTSYSAPI 1526 NTSTATUS 1527 NTAPI 1528 NtSetBootOptions( 1529 IN PBOOT_OPTIONS BootOptions, 1530 IN ULONG FieldsToChange 1531 ); 1532 1533 NTSYSAPI 1534 NTSTATUS 1535 NTAPI 1536 NtSetBootEntryOrder( 1537 IN ULONG Unknown1, 1538 IN ULONG Unknown2 1539 ); 1540 1541 1542 NTSYSAPI 1543 NTSTATUS 1544 NTAPI 1545 NtSecureConnectPort( 1546 OUT PHANDLE PortHandle, 1547 IN PUNICODE_STRING PortName, 1548 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos, 1549 IN OUT PPORT_VIEW ClientView OPTIONAL, 1550 IN PSID ServerSid OPTIONAL, 1551 OUT PREMOTE_PORT_VIEW ServerView OPTIONAL, 1552 OUT PULONG MaxMessageLength OPTIONAL, 1553 IN OUT PVOID ConnectInformation OPTIONAL, 1554 IN OUT PULONG ConnectInformationLength OPTIONAL 1555 ); 1556 1557 NTSYSAPI 1558 NTSTATUS 1559 NTAPI 1560 NtSaveMergedKeys( 1561 IN HANDLE KeyHandle1, 1562 IN HANDLE KeyHandle2, 1563 IN HANDLE FileHandle 1564 ); 1565 1566 NTSYSAPI 1567 NTSTATUS 1568 NTAPI 1569 NtSaveKeyEx( 1570 IN HANDLE KeyHandle, 1571 IN HANDLE FileHandle, 1572 IN ULONG Flags 1573 ); 1574 1575 NTSYSAPI 1576 NTSTATUS 1577 NTAPI 1578 NtSaveKey( 1579 IN HANDLE KeyHandle, 1580 IN HANDLE FileHandle 1581 ); 1582 1583 NTSYSAPI 1584 NTSTATUS 1585 NTAPI 1586 NtResumeThread( 1587 IN HANDLE ThreadHandle, 1588 OUT PULONG PreviousSuspendCount OPTIONAL 1589 ); 1590 1591 NTSYSAPI 1592 NTSTATUS 1593 NTAPI 1594 NtResumeProcess( 1595 IN HANDLE Process 1596 ); 1597 1598 NTSYSAPI 1599 NTSTATUS 1600 NTAPI 1601 NtRestoreKey( 1602 IN HANDLE KeyHandle, 1603 IN HANDLE FileHandle, 1604 IN ULONG Flags 1605 ); 1606 1607 NTSYSAPI 1608 NTSTATUS 1609 NTAPI 1610 NtResetWriteWatch( 1611 IN HANDLE ProcessHandle, 1612 IN PVOID BaseAddress, 1613 IN ULONG RegionSize 1614 ); 1615 1616 NTSYSAPI 1617 NTSTATUS 1618 NTAPI 1619 NtResetEvent( 1620 IN HANDLE EventHandle, 1621 OUT PULONG PreviousState OPTIONAL 1622 ); 1623 1624 NTSYSAPI 1625 NTSTATUS 1626 NTAPI 1627 NtRequestWakeupLatency( 1628 IN LATENCY_TIME Latency 1629 ); 1630 1631 NTSYSAPI 1632 NTSTATUS 1633 NTAPI 1634 NtRequestWaitReplyPort( 1635 IN HANDLE PortHandle, 1636 IN PPORT_MESSAGE RequestMessage, 1637 OUT PPORT_MESSAGE ReplyMessage 1638 ); 1639 1640 NTSYSAPI 1641 NTSTATUS 1642 NTAPI 1643 NtRequestPort( 1644 IN HANDLE PortHandle, 1645 IN PPORT_MESSAGE RequestMessage 1646 ); 1647 1648 NTSYSAPI 1649 NTSTATUS 1650 NTAPI 1651 NtRequestDeviceWakeup( 1652 IN HANDLE DeviceHandle 1653 ); 1654 1655 1656 NTSYSAPI 1657 NTSTATUS 1658 NTAPI 1659 NtReplyWaitReplyPort( 1660 IN HANDLE PortHandle, 1661 IN OUT PPORT_MESSAGE ReplyMessage 1662 ); 1663 1664 NTSYSAPI 1665 NTSTATUS 1666 NTAPI 1667 NtReplyWaitReceivePortEx( 1668 IN HANDLE PortHandle, 1669 OUT PVOID* PortIdentifier OPTIONAL, 1670 IN PPORT_MESSAGE ReplyMessage OPTIONAL, 1671 OUT PPORT_MESSAGE Message, 1672 IN PLARGE_INTEGER Timeout 1673 ); 1674 1675 NTSYSAPI 1676 NTSTATUS 1677 NTAPI 1678 NtReplyWaitReceivePort( 1679 IN HANDLE PortHandle, 1680 OUT PULONG PortIdentifier OPTIONAL, 1681 IN PPORT_MESSAGE ReplyMessage OPTIONAL, 1682 OUT PPORT_MESSAGE Message 1683 ); 1684 1685 NTSYSAPI 1686 NTSTATUS 1687 NTAPI 1688 NtReplyPort( 1689 IN HANDLE PortHandle, 1690 IN PPORT_MESSAGE ReplyMessage 1691 ); 1692 1693 NTSYSAPI 1694 NTSTATUS 1695 NTAPI 1696 NtReplaceKey( 1697 IN POBJECT_ATTRIBUTES NewFileObjectAttributes, 1698 IN HANDLE KeyHandle, 1699 IN POBJECT_ATTRIBUTES OldFileObjectAttributes 1700 ); 1701 1702 NTSYSAPI 1703 NTSTATUS 1704 NTAPI 1705 NtRenameKey( 1706 IN HANDLE KeyHandle, 1707 IN PUNICODE_STRING ReplacementName 1708 ); 1709 1710 NTSYSAPI 1711 NTSTATUS 1712 NTAPI 1713 NtRemoveProcessDebug( 1714 IN HANDLE Process, 1715 IN HANDLE DebugObject 1716 ); 1717 1718 NTSYSAPI 1719 NTSTATUS 1720 NTAPI 1721 NtRemoveIoCompletion( 1722 IN HANDLE IoCompletionHandle, 1723 OUT PULONG CompletionKey, 1724 OUT PULONG CompletionValue, 1725 OUT PIO_STATUS_BLOCK IoStatusBlock, 1726 IN PLARGE_INTEGER Timeout OPTIONAL 1727 ); 1728 1729 NTSYSAPI 1730 NTSTATUS 1731 NTAPI 1732 NtReleaseSemaphore( 1733 IN HANDLE SemaphoreHandle, 1734 IN LONG ReleaseCount, 1735 OUT PLONG PreviousCount OPTIONAL 1736 ); 1737 1738 NTSYSAPI 1739 NTSTATUS 1740 NTAPI 1741 NtReleaseMutant( 1742 IN HANDLE MutantHandle, 1743 OUT PULONG PreviousState 1744 ); 1745 1746 NTSYSAPI 1747 NTSTATUS 1748 NTAPI 1749 NtReleaseKeyedEvent( 1750 IN HANDLE KeyedEventHandle, 1751 IN PVOID Key, 1752 IN BOOLEAN Alertable, 1753 IN PLARGE_INTEGER Timeout OPTIONAL 1754 ); 1755 1756 NTSYSAPI 1757 NTSTATUS 1758 NTAPI 1759 NtRegisterThreadTerminatePort( 1760 IN HANDLE PortHandle 1761 ); 1762 1763 NTSYSAPI 1764 NTSTATUS 1765 NTAPI 1766 NtReadVirtualMemory( 1767 IN HANDLE ProcessHandle, 1768 IN PVOID BaseAddress, 1769 OUT PVOID Buffer, 1770 IN ULONG BufferLength, 1771 OUT PULONG ReturnLength OPTIONAL 1772 ); 1773 1774 NTSYSAPI 1775 NTSTATUS 1776 NTAPI 1777 NtReadRequestData( 1778 IN HANDLE PortHandle, 1779 IN PPORT_MESSAGE Message, 1780 IN ULONG Index, 1781 OUT PVOID Buffer, 1782 IN ULONG BufferLength, 1783 OUT PULONG ReturnLength OPTIONAL 1784 ); 1785 1786 NTSYSAPI 1787 NTSTATUS 1788 NTAPI 1789 NtReadFileScatter( 1790 IN HANDLE FileHandle, 1791 IN HANDLE Event OPTIONAL, 1792 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 1793 IN PVOID ApcContext OPTIONAL, 1794 OUT PIO_STATUS_BLOCK IoStatusBlock, 1795 IN PFILE_SEGMENT_ELEMENT Buffer, 1796 IN ULONG Length, 1797 IN PLARGE_INTEGER ByteOffset OPTIONAL, 1798 IN PULONG Key OPTIONAL 1799 ); 1800 1801 NTSYSAPI 1802 NTSTATUS 1803 NTAPI 1804 NtReadFile( 1805 IN HANDLE FileHandle, 1806 IN HANDLE Event OPTIONAL, 1807 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 1808 IN PVOID ApcContext OPTIONAL, 1809 OUT PIO_STATUS_BLOCK IoStatusBlock, 1810 OUT PVOID Buffer, 1811 IN ULONG Length, 1812 IN PLARGE_INTEGER ByteOffset OPTIONAL, 1813 IN PULONG Key OPTIONAL 1814 ); 1815 1816 NTSYSAPI 1817 NTSTATUS 1818 NTAPI 1819 NtRaiseHardError( 1820 IN NTSTATUS Status, 1821 IN ULONG NumberOfArguments, 1822 IN ULONG StringArgumentsMask, 1823 IN PULONG_PTR Arguments, 1824 IN HARDERROR_RESPONSE_OPTION ResponseOption, 1825 OUT PHARDERROR_RESPONSE Response 1826 ); 1827 1828 NTSYSAPI 1829 NTSTATUS 1830 NTAPI 1831 NtRaiseException( 1832 IN PEXCEPTION_RECORD ExceptionRecord, 1833 IN PCONTEXT Context, 1834 IN BOOLEAN SearchFrames 1835 ); 1836 1837 NTSYSAPI 1838 NTSTATUS 1839 NTAPI 1840 NtQueueApcThread( 1841 IN HANDLE ThreadHandle, 1842 IN PKNORMAL_ROUTINE ApcRoutine, 1843 IN PVOID ApcContext OPTIONAL, 1844 IN PVOID Argument1 OPTIONAL, 1845 IN PVOID Argument2 OPTIONAL 1846 ); 1847 1848 NTSYSAPI 1849 NTSTATUS 1850 NTAPI 1851 NtQueryVolumeInformationFile( 1852 IN HANDLE FileHandle, 1853 OUT PIO_STATUS_BLOCK IoStatusBlock, 1854 OUT PVOID VolumeInformation, 1855 IN ULONG VolumeInformationLength, 1856 IN FS_INFORMATION_CLASS VolumeInformationClass 1857 ); 1858 1859 NTSYSAPI 1860 NTSTATUS 1861 NTAPI 1862 NtQueryVirtualMemory( 1863 IN HANDLE ProcessHandle, 1864 IN PVOID BaseAddress, 1865 IN MEMORY_INFORMATION_CLASS MemoryInformationClass, 1866 OUT PVOID MemoryInformation, 1867 IN ULONG MemoryInformationLength, 1868 OUT PULONG ReturnLength OPTIONAL 1869 ); 1870 1871 NTSYSAPI 1872 NTSTATUS 1873 NTAPI 1874 NtQueryValueKey( 1875 IN HANDLE KeyHandle, 1876 IN PUNICODE_STRING ValueName, 1877 IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, 1878 OUT PVOID KeyValueInformation, 1879 IN ULONG KeyValueInformationLength, 1880 OUT PULONG ResultLength 1881 ); 1882 1883 NTSYSAPI 1884 NTSTATUS 1885 NTAPI 1886 NtQueryTimerResolution( 1887 OUT PULONG CoarsestResolution, 1888 OUT PULONG FinestResolution, 1889 OUT PULONG ActualResolution 1890 ); 1891 1892 NTSYSAPI 1893 NTSTATUS 1894 NTAPI 1895 NtQueryTimer( 1896 IN HANDLE TimerHandle, 1897 IN TIMER_INFORMATION_CLASS TimerInformationClass, 1898 OUT PVOID TimerInformation, 1899 IN ULONG TimerInformationLength, 1900 OUT PULONG ResultLength OPTIONAL 1901 ); 1902 1903 NTSYSAPI 1904 NTSTATUS 1905 NTAPI 1906 NtQuerySystemTime( 1907 OUT PLARGE_INTEGER CurrentTime 1908 ); 1909 1910 NTSYSAPI 1911 NTSTATUS 1912 NTAPI 1913 NtQuerySystemInformation( 1914 IN SYSTEM_INFORMATION_CLASS SystemInformationClass, 1915 IN OUT PVOID SystemInformation, 1916 IN ULONG SystemInformationLength, 1917 OUT PULONG ReturnLength OPTIONAL 1918 ); 1919 1920 NTSYSAPI 1921 NTSTATUS 1922 NTAPI 1923 NtQuerySystemEnvironmentValueEx( 1924 IN ULONG Unknown1, 1925 IN ULONG Unknown2, 1926 IN ULONG Unknown3, 1927 IN ULONG Unknown4, 1928 IN ULONG Unknown5 1929 ); 1930 1931 NTSYSAPI 1932 NTSTATUS 1933 NTAPI 1934 NtQuerySystemEnvironmentValue( 1935 IN PUNICODE_STRING Name, 1936 OUT PVOID Value, 1937 IN ULONG ValueLength, 1938 OUT PULONG ReturnLength OPTIONAL 1939 ); 1940 1941 NTSYSAPI 1942 NTSTATUS 1943 NTAPI 1944 NtQuerySymbolicLinkObject( 1945 IN HANDLE SymbolicLinkHandle, 1946 IN OUT PUNICODE_STRING TargetName, 1947 OUT PULONG ReturnLength OPTIONAL 1948 ); 1949 1950 NTSYSAPI 1951 NTSTATUS 1952 NTAPI 1953 NtQuerySemaphore( 1954 IN HANDLE SemaphoreHandle, 1955 IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass, 1956 OUT PVOID SemaphoreInformation, 1957 IN ULONG SemaphoreInformationLength, 1958 OUT PULONG ResultLength OPTIONAL 1959 ); 1960 1961 NTSYSAPI 1962 NTSTATUS 1963 NTAPI 1964 NtQuerySecurityObject( 1965 IN HANDLE Handle, 1966 IN SECURITY_INFORMATION SecurityInformation, 1967 OUT PSECURITY_DESCRIPTOR SecurityDescriptor, 1968 IN ULONG SecurityDescriptorLength, 1969 OUT PULONG ReturnLength 1970 ); 1971 1972 NTSYSAPI 1973 NTSTATUS 1974 NTAPI 1975 NtQuerySection( 1976 IN HANDLE SectionHandle, 1977 IN SECTION_INFORMATION_CLASS SectionInformationClass, 1978 OUT PVOID SectionInformation, 1979 IN ULONG SectionInformationLength, 1980 OUT PULONG ResultLength OPTIONAL 1981 ); 1982 1983 NTSYSAPI 1984 NTSTATUS 1985 NTAPI 1986 NtQueryQuotaInformationFile( 1987 IN HANDLE FileHandle, 1988 OUT PIO_STATUS_BLOCK IoStatusBlock, 1989 OUT PFILE_USER_QUOTA_INFORMATION Buffer, 1990 IN ULONG BufferLength, 1991 IN BOOLEAN ReturnSingleEntry, 1992 IN PFILE_QUOTA_LIST_INFORMATION QuotaList OPTIONAL, 1993 IN ULONG QuotaListLength, 1994 IN PSID ResumeSid OPTIONAL, 1995 IN BOOLEAN RestartScan 1996 ); 1997 1998 NTSYSAPI 1999 BOOLEAN 2000 NTAPI 2001 NtQueryPortInformationProcess( 2002 VOID 2003 ); 2004 2005 NTSYSAPI 2006 NTSTATUS 2007 NTAPI 2008 NtQueryPerformanceCounter( 2009 OUT PLARGE_INTEGER PerformanceCount, 2010 OUT PLARGE_INTEGER PerformanceFrequency OPTIONAL 2011 ); 2012 2013 NTSYSAPI 2014 NTSTATUS 2015 NTAPI 2016 NtQueryOpenSubKeys( 2017 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2018 OUT PULONG NumberOfKeys 2019 ); 2020 2021 NTSYSAPI 2022 NTSTATUS 2023 NTAPI 2024 NtQueryObject( 2025 IN HANDLE ObjectHandle, 2026 IN OBJECT_INFORMATION_CLASS ObjectInformationClass, 2027 OUT PVOID ObjectInformation, 2028 IN ULONG ObjectInformationLength, 2029 OUT PULONG ReturnLength OPTIONAL 2030 ); 2031 2032 NTSYSAPI 2033 NTSTATUS 2034 NTAPI 2035 NtQueryMutant( 2036 IN HANDLE MutantHandle, 2037 IN MUTANT_INFORMATION_CLASS MutantInformationClass, 2038 OUT PVOID MutantInformation, 2039 IN ULONG MutantInformationLength, 2040 OUT PULONG ResultLength OPTIONAL 2041 ); 2042 2043 NTSYSAPI 2044 NTSTATUS 2045 NTAPI 2046 NtQueryMultipleValueKey( 2047 IN HANDLE KeyHandle, 2048 IN OUT PKEY_VALUE_ENTRY ValueList, 2049 IN ULONG NumberOfValues, 2050 OUT PVOID Buffer, 2051 IN OUT PULONG Length, 2052 OUT PULONG ReturnLength 2053 ); 2054 2055 NTSYSAPI 2056 NTSTATUS 2057 NTAPI 2058 NtQueryKey( 2059 IN HANDLE KeyHandle, 2060 IN KEY_INFORMATION_CLASS KeyInformationClass, 2061 OUT PVOID KeyInformation, 2062 IN ULONG KeyInformationLength, 2063 OUT PULONG ResultLength 2064 ); 2065 2066 NTSYSAPI 2067 NTSTATUS 2068 NTAPI 2069 NtQueryIoCompletion( 2070 IN HANDLE IoCompletionHandle, 2071 IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass, 2072 OUT PVOID IoCompletionInformation, 2073 IN ULONG IoCompletionInformationLength, 2074 OUT PULONG ResultLength OPTIONAL 2075 ); 2076 2077 NTSYSAPI 2078 NTSTATUS 2079 NTAPI 2080 NtQueryIntervalProfile( 2081 IN KPROFILE_SOURCE Source, 2082 OUT PULONG Interval 2083 ); 2084 2085 NTSYSAPI 2086 NTSTATUS 2087 NTAPI 2088 NtQueryInstallUILanguage( 2089 OUT PLANGID LanguageId 2090 ); 2091 2092 NTSYSAPI 2093 NTSTATUS 2094 NTAPI 2095 NtQueryInformationToken( 2096 IN HANDLE TokenHandle, 2097 IN TOKEN_INFORMATION_CLASS TokenInformationClass, 2098 OUT PVOID TokenInformation, 2099 IN ULONG TokenInformationLength, 2100 OUT PULONG ReturnLength 2101 ); 2102 2103 NTSYSAPI 2104 NTSTATUS 2105 NTAPI 2106 NtQueryInformationThread( 2107 IN HANDLE ThreadHandle, 2108 IN THREADINFOCLASS ThreadInformationClass, 2109 OUT PVOID ThreadInformation, 2110 IN ULONG ThreadInformationLength, 2111 OUT PULONG ReturnLength OPTIONAL 2112 ); 2113 2114 NTSYSAPI 2115 NTSTATUS 2116 NTAPI 2117 NtQueryInformationProcess( 2118 IN HANDLE ProcessHandle, 2119 IN PROCESSINFOCLASS ProcessInformationClass, 2120 OUT PVOID ProcessInformation, 2121 IN ULONG ProcessInformationLength, 2122 OUT PULONG ReturnLength OPTIONAL 2123 ); 2124 2125 NTSYSAPI 2126 NTSTATUS 2127 NTAPI 2128 NtQueryInformationPort( 2129 IN HANDLE PortHandle, 2130 IN PORT_INFORMATION_CLASS PortInformationClass, 2131 OUT PVOID PortInformation, 2132 IN ULONG PortInformationLength, 2133 OUT PULONG ReturnLength OPTIONAL 2134 ); 2135 2136 NTSYSAPI 2137 NTSTATUS 2138 NTAPI 2139 NtQueryInformationJobObject( 2140 IN HANDLE JobHandle, 2141 IN JOBOBJECTINFOCLASS JobInformationClass, 2142 OUT PVOID JobInformation, 2143 IN ULONG JobInformationLength, 2144 OUT PULONG ReturnLength OPTIONAL 2145 ); 2146 2147 NTSYSAPI 2148 NTSTATUS 2149 NTAPI 2150 NtQueryInformationFile( 2151 IN HANDLE FileHandle, 2152 OUT PIO_STATUS_BLOCK IoStatusBlock, 2153 OUT PVOID FileInformation, 2154 IN ULONG FileInformationLength, 2155 IN FILE_INFORMATION_CLASS FileInformationClass 2156 ); 2157 2158 NTSYSAPI 2159 NTSTATUS 2160 NTAPI 2161 NtQueryInformationAtom( 2162 IN USHORT Atom, 2163 IN ATOM_INFORMATION_CLASS AtomInformationClass, 2164 OUT PVOID AtomInformation, 2165 IN ULONG AtomInformationLength, 2166 OUT PULONG ReturnLength OPTIONAL 2167 ); 2168 2169 NTSYSAPI 2170 NTSTATUS 2171 NTAPI 2172 NtQueryFullAttributesFile( 2173 IN POBJECT_ATTRIBUTES ObjectAttributes, 2174 OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation 2175 ); 2176 2177 NTSYSAPI 2178 NTSTATUS 2179 NTAPI 2180 NtQueryEvent( 2181 IN HANDLE EventHandle, 2182 IN EVENT_INFORMATION_CLASS EventInformationClass, 2183 OUT PVOID EventInformation, 2184 IN ULONG EventInformationLength, 2185 OUT PULONG ResultLength OPTIONAL 2186 ); 2187 2188 NTSYSAPI 2189 NTSTATUS 2190 NTAPI 2191 NtQueryEaFile( 2192 IN HANDLE FileHandle, 2193 OUT PIO_STATUS_BLOCK IoStatusBlock, 2194 OUT PFILE_FULL_EA_INFORMATION Buffer, 2195 IN ULONG BufferLength, 2196 IN BOOLEAN ReturnSingleEntry, 2197 IN PFILE_GET_EA_INFORMATION EaList OPTIONAL, 2198 IN ULONG EaListLength, 2199 IN PULONG EaIndex OPTIONAL, 2200 IN BOOLEAN RestartScan 2201 ); 2202 2203 NTSYSAPI 2204 NTSTATUS 2205 NTAPI 2206 NtQueryDirectoryObject( 2207 IN HANDLE DirectoryHandle, 2208 OUT PVOID Buffer, 2209 IN ULONG BufferLength, 2210 IN BOOLEAN ReturnSingleEntry, 2211 IN BOOLEAN RestartScan, 2212 IN OUT PULONG Context, 2213 OUT PULONG ReturnLength OPTIONAL 2214 ); 2215 2216 NTSYSAPI 2217 NTSTATUS 2218 NTAPI 2219 NtQueryDirectoryFile( 2220 IN HANDLE FileHandle, 2221 IN HANDLE Event OPTIONAL, 2222 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2223 IN PVOID ApcContext OPTIONAL, 2224 OUT PIO_STATUS_BLOCK IoStatusBlock, 2225 OUT PVOID FileInformation, 2226 IN ULONG FileInformationLength, 2227 IN FILE_INFORMATION_CLASS FileInformationClass, 2228 IN BOOLEAN ReturnSingleEntry, 2229 IN PUNICODE_STRING FileName OPTIONAL, 2230 IN BOOLEAN RestartScan 2231 ); 2232 2233 NTSYSAPI 2234 NTSTATUS 2235 NTAPI 2236 NtQueryDefaultUILanguage( 2237 OUT PLANGID LanguageId 2238 ); 2239 2240 NTSYSAPI 2241 NTSTATUS 2242 NTAPI 2243 NtQueryDefaultLocale( 2244 IN BOOLEAN ThreadOrSystem, 2245 OUT PLCID Locale 2246 ); 2247 2248 NTSYSAPI 2249 NTSTATUS 2250 NTAPI 2251 NtQueryDebugFilterState( 2252 IN ULONG ComponentId, 2253 IN ULONG Level 2254 ); 2255 2256 NTSYSAPI 2257 NTSTATUS 2258 NTAPI 2259 NtQueryBootOptions( 2260 IN ULONG Unknown1, 2261 IN ULONG Unknown2 2262 ); 2263 2264 NTSYSAPI 2265 NTSTATUS 2266 NTAPI 2267 NtQueryBootEntryOrder( 2268 IN ULONG Unknown1, 2269 IN ULONG Unknown2 2270 ); 2271 2272 NTSYSAPI 2273 NTSTATUS 2274 NTAPI 2275 NtQueryAttributesFile( 2276 IN POBJECT_ATTRIBUTES ObjectAttributes, 2277 OUT PFILE_BASIC_INFORMATION FileInformation 2278 ); 2279 2280 NTSYSAPI 2281 NTSTATUS 2282 NTAPI 2283 NtPulseEvent( 2284 IN HANDLE EventHandle, 2285 OUT PULONG PreviousState OPTIONAL 2286 ); 2287 2288 NTSYSAPI 2289 NTSTATUS 2290 NTAPI 2291 NtProtectVirtualMemory( 2292 IN HANDLE ProcessHandle, 2293 IN OUT PVOID *BaseAddress, 2294 IN OUT PULONG ProtectSize, 2295 IN ULONG NewProtect, 2296 OUT PULONG OldProtect 2297 ); 2298 2299 NTSYSAPI 2300 NTSTATUS 2301 NTAPI 2302 NtPrivilegedServiceAuditAlarm( 2303 IN PUNICODE_STRING SubsystemName, 2304 IN PUNICODE_STRING ServiceName, 2305 IN HANDLE TokenHandle, 2306 IN PPRIVILEGE_SET Privileges, 2307 IN BOOLEAN AccessGranted 2308 ); 2309 2310 NTSYSAPI 2311 NTSTATUS 2312 NTAPI 2313 NtPrivilegeObjectAuditAlarm( 2314 IN PUNICODE_STRING SubsystemName, 2315 IN PVOID HandleId, 2316 IN HANDLE TokenHandle, 2317 IN ACCESS_MASK DesiredAccess, 2318 IN PPRIVILEGE_SET Privileges, 2319 IN BOOLEAN AccessGranted 2320 ); 2321 2322 NTSYSAPI 2323 NTSTATUS 2324 NTAPI 2325 NtPrivilegeCheck( 2326 IN HANDLE TokenHandle, 2327 IN PPRIVILEGE_SET RequiredPrivileges, 2328 OUT PBOOLEAN Result 2329 ); 2330 2331 NTSYSAPI 2332 NTSTATUS 2333 NTAPI 2334 NtPowerInformation( 2335 IN POWER_INFORMATION_LEVEL PowerInformationLevel, 2336 IN PVOID InputBuffer OPTIONAL, 2337 IN ULONG InputBufferLength, 2338 OUT PVOID OutputBuffer OPTIONAL, 2339 IN ULONG OutputBufferLength 2340 ); 2341 2342 NTSYSAPI 2343 NTSTATUS 2344 NTAPI 2345 NtPlugPlayControl( 2346 IN ULONG ControlCode, 2347 IN OUT PVOID Buffer, 2348 IN ULONG BufferLength 2349 ); 2350 NTSYSAPI 2351 NTSTATUS 2352 NTAPI 2353 NtPlugPlayControl( 2354 IN ULONG ControlCode, 2355 IN OUT PVOID Buffer, 2356 IN ULONG BufferLength, 2357 IN PVOID Unknown OPTIONAL 2358 ); 2359 2360 NTSYSAPI 2361 NTSTATUS 2362 NTAPI 2363 NtOpenTimer( 2364 OUT PHANDLE TimerHandle, 2365 IN ACCESS_MASK DesiredAccess, 2366 IN POBJECT_ATTRIBUTES ObjectAttributes 2367 ); 2368 2369 NTSYSAPI 2370 NTSTATUS 2371 NTAPI 2372 NtOpenThreadTokenEx( 2373 IN HANDLE ThreadHandle, 2374 IN ACCESS_MASK DesiredAccess, 2375 IN BOOLEAN OpenAsSelf, 2376 IN ULONG HandleAttributes, 2377 OUT PHANDLE TokenHandle 2378 ); 2379 2380 NTSYSAPI 2381 NTSTATUS 2382 NTAPI 2383 NtOpenThreadToken( 2384 IN HANDLE ThreadHandle, 2385 IN ACCESS_MASK DesiredAccess, 2386 IN BOOLEAN OpenAsSelf, 2387 OUT PHANDLE TokenHandle 2388 ); 2389 2390 NTSYSAPI 2391 NTSTATUS 2392 NTAPI 2393 NtOpenThread( 2394 OUT PHANDLE ThreadHandle, 2395 IN ACCESS_MASK DesiredAccess, 2396 IN POBJECT_ATTRIBUTES ObjectAttributes, 2397 IN PCLIENT_ID ClientId 2398 ); 2399 2400 NTSYSAPI 2401 NTSTATUS 2402 NTAPI 2403 NtOpenSymbolicLinkObject( 2404 OUT PHANDLE SymbolicLinkHandle, 2405 IN ACCESS_MASK DesiredAccess, 2406 IN POBJECT_ATTRIBUTES ObjectAttributes 2407 ); 2408 2409 NTSYSAPI 2410 NTSTATUS 2411 NTAPI 2412 NtOpenSemaphore( 2413 OUT PHANDLE SemaphoreHandle, 2414 IN ACCESS_MASK DesiredAccess, 2415 IN POBJECT_ATTRIBUTES ObjectAttributes 2416 ); 2417 2418 NTSYSAPI 2419 NTSTATUS 2420 NTAPI 2421 NtOpenSection( 2422 OUT PHANDLE SectionHandle, 2423 IN ACCESS_MASK DesiredAccess, 2424 IN POBJECT_ATTRIBUTES ObjectAttributes 2425 ); 2426 2427 NTSYSAPI 2428 NTSTATUS 2429 NTAPI 2430 NtOpenProcessTokenEx( 2431 IN HANDLE ProcessHandle, 2432 IN ACCESS_MASK DesiredAccess, 2433 IN ULONG HandleAttributes, 2434 OUT PHANDLE TokenHandle 2435 ); 2436 2437 NTSYSAPI 2438 NTSTATUS 2439 NTAPI 2440 NtOpenProcessToken( 2441 IN HANDLE ProcessHandle, 2442 IN ACCESS_MASK DesiredAccess, 2443 OUT PHANDLE TokenHandle 2444 ); 2445 2446 NTSYSAPI 2447 NTSTATUS 2448 NTAPI 2449 NtOpenProcess( 2450 OUT PHANDLE ProcessHandle, 2451 IN ACCESS_MASK DesiredAccess, 2452 IN POBJECT_ATTRIBUTES ObjectAttributes, 2453 IN PCLIENT_ID ClientId OPTIONAL 2454 ); 2455 2456 NTSYSAPI 2457 NTSTATUS 2458 NTAPI 2459 NtOpenObjectAuditAlarm( 2460 IN PUNICODE_STRING SubsystemName, 2461 IN PVOID *HandleId, 2462 IN PUNICODE_STRING ObjectTypeName, 2463 IN PUNICODE_STRING ObjectName, 2464 IN PSECURITY_DESCRIPTOR SecurityDescriptor, 2465 IN HANDLE TokenHandle, 2466 IN ACCESS_MASK DesiredAccess, 2467 IN ACCESS_MASK GrantedAccess, 2468 IN PPRIVILEGE_SET Privileges OPTIONAL, 2469 IN BOOLEAN ObjectCreation, 2470 IN BOOLEAN AccessGranted, 2471 OUT PBOOLEAN GenerateOnClose 2472 ); 2473 2474 NTSYSAPI 2475 NTSTATUS 2476 NTAPI 2477 NtOpenMutant( 2478 OUT PHANDLE MutantHandle, 2479 IN ACCESS_MASK DesiredAccess, 2480 IN POBJECT_ATTRIBUTES ObjectAttributes 2481 ); 2482 2483 NTSYSAPI 2484 NTSTATUS 2485 NTAPI 2486 NtOpenKeyedEvent( 2487 OUT PHANDLE KeyedEventHandle, 2488 IN ACCESS_MASK DesiredAccess, 2489 IN POBJECT_ATTRIBUTES ObjectAttributes 2490 ); 2491 2492 NTSYSAPI 2493 NTSTATUS 2494 NTAPI 2495 NtOpenKey( 2496 OUT PHANDLE KeyHandle, 2497 IN ACCESS_MASK DesiredAccess, 2498 IN POBJECT_ATTRIBUTES ObjectAttributes 2499 ); 2500 2501 NTSYSAPI 2502 NTSTATUS 2503 NTAPI 2504 NtOpenJobObject( 2505 OUT PHANDLE JobHandle, 2506 IN ACCESS_MASK DesiredAccess, 2507 IN POBJECT_ATTRIBUTES ObjectAttributes 2508 ); 2509 2510 NTSYSAPI 2511 NTSTATUS 2512 NTAPI 2513 NtOpenIoCompletion( 2514 OUT PHANDLE IoCompletionHandle, 2515 IN ACCESS_MASK DesiredAccess, 2516 IN POBJECT_ATTRIBUTES ObjectAttributes 2517 ); 2518 2519 NTSYSAPI 2520 NTSTATUS 2521 NTAPI 2522 NtOpenFile( 2523 OUT PHANDLE FileHandle, 2524 IN ACCESS_MASK DesiredAccess, 2525 IN POBJECT_ATTRIBUTES ObjectAttributes, 2526 OUT PIO_STATUS_BLOCK IoStatusBlock, 2527 IN ULONG ShareAccess, 2528 IN ULONG OpenOptions 2529 ); 2530 2531 NTSYSAPI 2532 NTSTATUS 2533 NTAPI 2534 NtOpenEventPair( 2535 OUT PHANDLE EventPairHandle, 2536 IN ACCESS_MASK DesiredAccess, 2537 IN POBJECT_ATTRIBUTES ObjectAttributes 2538 ); 2539 2540 NTSYSAPI 2541 NTSTATUS 2542 NTAPI 2543 NtOpenEvent( 2544 OUT PHANDLE EventHandle, 2545 IN ACCESS_MASK DesiredAccess, 2546 IN POBJECT_ATTRIBUTES ObjectAttributes 2547 ); 2548 2549 NTSYSAPI 2550 NTSTATUS 2551 NTAPI 2552 NtOpenDirectoryObject( 2553 OUT PHANDLE DirectoryHandle, 2554 IN ACCESS_MASK DesiredAccess, 2555 IN POBJECT_ATTRIBUTES ObjectAttributes 2556 ); 2557 2558 2559 NTSYSAPI 2560 NTSTATUS 2561 NTAPI 2562 NtNotifyChangeMultipleKeys( 2563 IN HANDLE KeyHandle, 2564 IN ULONG Flags, 2565 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2566 IN HANDLE EventHandle OPTIONAL, 2567 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2568 IN PVOID ApcContext OPTIONAL, 2569 OUT PIO_STATUS_BLOCK IoStatusBlock, 2570 IN ULONG NotifyFilter, 2571 IN BOOLEAN WatchSubtree, 2572 IN PVOID Buffer, 2573 IN ULONG BufferLength, 2574 IN BOOLEAN Asynchronous 2575 ); 2576 2577 NTSYSAPI 2578 NTSTATUS 2579 NTAPI 2580 NtNotifyChangeKey( 2581 IN HANDLE KeyHandle, 2582 IN HANDLE EventHandle OPTIONAL, 2583 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2584 IN PVOID ApcContext OPTIONAL, 2585 OUT PIO_STATUS_BLOCK IoStatusBlock, 2586 IN ULONG NotifyFilter, 2587 IN BOOLEAN WatchSubtree, 2588 IN PVOID Buffer, 2589 IN ULONG BufferLength, 2590 IN BOOLEAN Asynchronous 2591 ); 2592 2593 NTSYSAPI 2594 NTSTATUS 2595 NTAPI 2596 NtNotifyChangeDirectoryFile( 2597 IN HANDLE FileHandle, 2598 IN HANDLE Event OPTIONAL, 2599 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2600 IN PVOID ApcContext OPTIONAL, 2601 OUT PIO_STATUS_BLOCK IoStatusBlock, 2602 OUT PFILE_NOTIFY_INFORMATION Buffer, 2603 IN ULONG BufferLength, 2604 IN ULONG NotifyFilter, 2605 IN BOOLEAN WatchSubtree 2606 ); 2607 2608 NTSYSAPI 2609 NTSTATUS 2610 NTAPI 2611 NtModifyDriverEntry( 2612 IN PUNICODE_STRING DriverName, 2613 IN PUNICODE_STRING DriverPath 2614 ); 2615 2616 NTSYSAPI 2617 NTSTATUS 2618 NTAPI 2619 NtModifyBootEntry( 2620 IN PUNICODE_STRING EntryName, 2621 IN PUNICODE_STRING EntryValue 2622 ); 2623 2624 NTSYSAPI 2625 NTSTATUS 2626 NTAPI 2627 NtMapViewOfSection( 2628 IN HANDLE SectionHandle, 2629 IN HANDLE ProcessHandle, 2630 IN OUT PVOID *BaseAddress, 2631 IN ULONG ZeroBits, 2632 IN ULONG CommitSize, 2633 IN OUT PLARGE_INTEGER SectionOffset OPTIONAL, 2634 IN OUT PULONG ViewSize, 2635 IN SECTION_INHERIT InheritDisposition, 2636 IN ULONG AllocationType, 2637 IN ULONG Protect 2638 ); 2639 2640 NTSYSAPI 2641 NTSTATUS 2642 NTAPI 2643 NtMapUserPhysicalPagesScatter( 2644 IN PVOID *BaseAddresses, 2645 IN PULONG NumberOfPages, 2646 IN PULONG PageFrameNumbers 2647 ); 2648 2649 NTSYSAPI 2650 NTSTATUS 2651 NTAPI 2652 NtMapUserPhysicalPages( 2653 IN PVOID BaseAddress, 2654 IN PULONG NumberOfPages, 2655 IN PULONG PageFrameNumbers 2656 ); 2657 2658 NTSYSAPI 2659 NTSTATUS 2660 NTAPI 2661 NtMakeTemporaryObject( 2662 IN HANDLE Handle 2663 ); 2664 2665 NTSYSAPI 2666 NTSTATUS 2667 NTAPI 2668 NtMakePermanentObject( 2669 IN HANDLE Object 2670 ); 2671 2672 NTSYSAPI 2673 NTSTATUS 2674 NTAPI 2675 NtLockVirtualMemory( 2676 IN HANDLE ProcessHandle, 2677 IN OUT PVOID *BaseAddress, 2678 IN OUT PULONG LockSize, 2679 IN ULONG LockType 2680 ); 2681 2682 NTSYSAPI 2683 NTSTATUS 2684 NTAPI 2685 NtLockRegistryKey( 2686 IN HANDLE Key 2687 ); 2688 2689 NTSYSAPI 2690 NTSTATUS 2691 NTAPI 2692 NtLockProductActivationKeys( 2693 IN OUT PULONG ProductBuild OPTIONAL, 2694 OUT PSAFEBOOT_MODE InitSafeBootMode OPTIONAL 2695 ); 2696 2697 NTSYSAPI 2698 NTSTATUS 2699 NTAPI 2700 NtLockFile( 2701 IN HANDLE FileHandle, 2702 IN HANDLE Event OPTIONAL, 2703 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2704 IN PVOID ApcContext OPTIONAL, 2705 OUT PIO_STATUS_BLOCK IoStatusBlock, 2706 IN PULARGE_INTEGER LockOffset, 2707 IN PULARGE_INTEGER LockLength, 2708 IN ULONG Key, 2709 IN BOOLEAN FailImmediately, 2710 IN BOOLEAN ExclusiveLock 2711 ); 2712 2713 NTSYSAPI 2714 NTSTATUS 2715 NTAPI 2716 NtLoadKey2( 2717 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2718 IN POBJECT_ATTRIBUTES FileObjectAttributes, 2719 IN ULONG Flags 2720 ); 2721 2722 NTSYSAPI 2723 NTSTATUS 2724 NTAPI 2725 NtLoadKey( 2726 IN POBJECT_ATTRIBUTES KeyObjectAttributes, 2727 IN POBJECT_ATTRIBUTES FileObjectAttributes 2728 ); 2729 2730 NTSYSAPI 2731 NTSTATUS 2732 NTAPI 2733 NtLoadDriver( 2734 IN PUNICODE_STRING DriverServiceName 2735 ); 2736 2737 NTSYSAPI 2738 NTSTATUS 2739 NTAPI 2740 NtListenPort( 2741 IN HANDLE PortHandle, 2742 OUT PPORT_MESSAGE Message 2743 ); 2744 2745 2746 NTSYSAPI 2747 NTSTATUS 2748 NTAPI 2749 NtFreeUserPhysicalPages( 2750 IN HANDLE ProcessHandle, 2751 IN OUT PULONG NumberOfPages, 2752 IN PULONG PageFrameNumbers 2753 ); 2754 2755 NTSYSAPI 2756 NTSTATUS 2757 NTAPI 2758 NtFreeVirtualMemory( 2759 IN HANDLE ProcessHandle, 2760 IN OUT PVOID *BaseAddress, 2761 IN OUT PULONG FreeSize, 2762 IN ULONG FreeType 2763 ); 2764 2765 NTSYSAPI 2766 NTSTATUS 2767 NTAPI 2768 NtFsControlFile( 2769 IN HANDLE FileHandle, 2770 IN HANDLE Event OPTIONAL, 2771 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, 2772 IN PVOID ApcContext OPTIONAL, 2773 OUT PIO_STATUS_BLOCK IoStatusBlock, 2774 IN ULONG FsControlCode, 2775 IN PVOID InputBuffer OPTIONAL, 2776 IN ULONG InputBufferLength, 2777 OUT PVOID OutputBuffer OPTIONAL, 2778 IN ULONG OutputBufferLength 2779 ); 2780 2781 NTSYSAPI 2782 NTSTATUS 2783 NTAPI 2784 NtGetContextThread( 2785 IN HANDLE ThreadHandle, 2786 OUT PCONTEXT Context 2787 ); 2788 2789 NTSYSAPI 2790 NTSTATUS 2791 NTAPI 2792 NtGetDevicePowerState( 2793 IN HANDLE DeviceHandle, 2794 OUT PDEVICE_POWER_STATE DevicePowerState 2795 ); 2796 2797 NTSYSAPI 2798 NTSTATUS 2799 NTAPI 2800 NtGetPlugPlayEvent( 2801 IN ULONG Reserved1, 2802 IN ULONG Reserved2, 2803 OUT PVOID Buffer, 2804 IN ULONG BufferLength 2805 ); 2806 2807 NTSYSAPI 2808 NTSTATUS 2809 NTAPI 2810 NtGetWriteWatch( 2811 IN HANDLE ProcessHandle, 2812 IN ULONG Flags, 2813 IN PVOID BaseAddress, 2814 IN ULONG RegionSize, 2815 OUT PULONG Buffer, 2816 IN OUT PULONG BufferEntries, 2817 OUT PULONG Granularity 2818 ); 2819 2820 NTSYSAPI 2821 NTSTATUS 2822 NTAPI 2823 NtImpersonateAnonymousToken( 2824 IN HANDLE ThreadHandle 2825 ); 2826 2827 NTSYSAPI 2828 NTSTATUS 2829 NTAPI 2830 NtImpersonateClientOfPort( 2831 IN HANDLE PortHandle, 2832 IN PPORT_MESSAGE Message 2833 ); 2834 2835 NTSYSAPI 2836 NTSTATUS 2837 NTAPI 2838 NtImpersonateThread( 2839 IN HANDLE ThreadHandle, 2840 IN HANDLE TargetThreadHandle, 2841 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos 2842 ); 2843 2844 NTSYSAPI 2845 NTSTATUS 2846 NTAPI 2847 NtInitializeRegistry( 2848 IN BOOLEAN Setup 2849 ); 2850 2851 NTSYSAPI 2852 NTSTATUS 2853 NTAPI 2854 NtInitiatePowerAction( 2855 IN POWER_ACTION SystemAction, 2856 IN SYSTEM_POWER_STATE MinSystemState, 2857 IN ULONG Flags, 2858 IN BOOLEAN Asynchronous 2859 ); 2860 2861 NTSYSAPI 2862 NTSTATUS 2863 NTAPI 2864 NtIsProcessInJob( 2865 IN HANDLE ProcessHandle, 2866 IN HANDLE JobHandle OPTIONAL 2867 ); 2868 2869 NTSYSAPI 2870 BOOLEAN 2871 NTAPI 2872 NtIsSystemResumeAutomatic( 2873 VOID 2874 );