1 #include <msvcrt/stdlib.h>
9 RtlCreateQueryDebugBuffer(IN ULONG Size,
18 DWORD STDCALL RtlDeleteSecurityObject(DWORD x1)
27 RtlDestroyQueryDebugBuffer(IN PDEBUG_BUFFER DebugBuffer)
38 PVOID * CallersAddress
48 RtlInitializeGenericTable (
49 IN OUT PRTL_GENERIC_TABLE Table,
50 IN PVOID CompareRoutine,
51 IN PVOID AllocateRoutine,
53 IN ULONG UserParameter
63 RtlInsertElementGenericTable (
64 IN OUT PRTL_GENERIC_TABLE Table,
78 RtlIsGenericTableEmpty (
79 IN PRTL_GENERIC_TABLE Table
84 DWORD STDCALL RtlNewSecurityObject(DWORD x1,DWORD x2,DWORD x3,DWORD x4,DWORD x5,DWORD x6)
94 RtlNumberGenericTableElements (
95 IN PRTL_GENERIC_TABLE Table
105 RtlQueryProcessDebugInformation(IN ULONG ProcessId,
106 IN ULONG DebugInfoClassMask,
107 IN OUT PDEBUG_BUFFER DebugBuffer)
115 NTSTATUS STDCALL RtlWalkHeap( HANDLE heap, PVOID entry_ptr )
123 NTSTATUS STDCALL RtlpUnWaitCriticalSection(RTL_CRITICAL_SECTION *crit)
131 NTSTATUS STDCALL RtlpWaitForCriticalSection(RTL_CRITICAL_SECTION *crit)
135 int sscanf(const char* szReadFrom, const char* szFormat, ...)
143 NTSTATUS STDCALL LdrLockLoaderLock(ULONG flags, ULONG *result, ULONG *magic)
151 NTSTATUS STDCALL LdrUnlockLoaderLock(ULONG flags, ULONG magic)
159 NTSTATUS STDCALL NtPowerInformation(DWORD x1,DWORD x2,DWORD x3,DWORD x4,DWORD x5)
167 NTSTATUS STDCALL RtlAddAccessAllowedAceEx(
169 IN DWORD dwAceRevision,
180 NTSTATUS STDCALL RtlAddAccessDeniedAceEx(
182 IN DWORD dwAceRevision,
196 PCONTEXT ContextRecord
204 DWORD STDCALL RtlComputeCrc32(DWORD dwInitial, PBYTE pData, INT iLen)
212 WCHAR STDCALL RtlDowncaseUnicodeChar(WCHAR wch)
220 NTSTATUS STDCALL RtlDuplicateUnicodeString(
222 const UNICODE_STRING *source,
223 UNICODE_STRING *destination)
231 NTSTATUS STDCALL RtlFindCharInUnicodeString(
233 const UNICODE_STRING *main_str,
234 const UNICODE_STRING *search_chars,
243 ULONG STDCALL RtlFindClearRuns(PCRTL_BITMAP lpBits, PRTL_BITMAP_RUN lpSeries,
244 ULONG ulCount, BOOLEAN bLongest)
252 ULONG STDCALL RtlFindLastBackwardRunClear(PCRTL_BITMAP lpBits, ULONG ulStart, PULONG lpPos)
260 CCHAR STDCALL RtlFindLeastSignificantBit(ULONGLONG ulLong)
268 CCHAR STDCALL RtlFindMostSignificantBit(ULONGLONG ulLong)
276 ULONG STDCALL RtlFindNextForwardRunClear(PCRTL_BITMAP lpBits, ULONG ulStart, PULONG lpPos)
284 NTSTATUS STDCALL RtlInitUnicodeStringEx(PUNICODE_STRING target,PCWSTR source)
292 NTSTATUS STDCALL RtlInitializeCriticalSectionAndSpinCount(RTL_CRITICAL_SECTION *crit, DWORD spincount)
300 NTSTATUS STDCALL RtlInt64ToUnicodeString(ULONGLONG value,ULONG base,UNICODE_STRING *str)
311 ULONGLONG ConditionMask,
322 NTSTATUS STDCALL ZwPowerInformation(DWORD x1,DWORD x2,DWORD x3,DWORD x4,DWORD x5)
330 double __cdecl _CIpow(double x,double y)
338 void *_lfind(const void* match, const void* start,unsigned int* array_size, unsigned int elem_size,int (*cf)(const void*,const void*))
346 LPSTR __cdecl _ui64toa(
357 LPWSTR __cdecl _ui64tow(
368 void* bsearch(const void* pKey, const void* pBase, size_t cntObjects, size_t sizeObject, _pfunccmp_t pfuncCmp)
376 BOOL STDCALL LdrFlushAlternateResourceModules(VOID)
384 BOOL STDCALL LdrAlternateResourcesEnabled(VOID)
395 IN ULONG ComponentId,
409 DbgPrintReturnControlC(
422 DbgQueryDebugFilterState(
423 IN ULONG ComponentId,
435 DbgSetDebugFilterState(
436 IN ULONG ComponentId,
449 NtCancelDeviceWakeupRequest(
486 NtGetDevicePowerState(
488 OUT DEVICE_POWER_STATE *State
499 NtInitiatePowerAction(
500 IN POWER_ACTION SystemAction,
501 IN SYSTEM_POWER_STATE MinSystemState,
514 NtIsSystemResumeAutomatic(
526 NtLockProductActivationKeys(
551 NtNotifyChangeMultipleKeys(
552 IN HANDLE MasterKeyHandle,
554 IN OBJECT_ATTRIBUTES SlaveObjects[],
555 IN HANDLE Event OPTIONAL,
556 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
557 IN PVOID ApcContext OPTIONAL,
558 OUT PIO_STATUS_BLOCK IoStatusBlock,
559 IN ULONG CompletionFilter,
575 IN POBJECT_ATTRIBUTES TargetKey,
576 OUT PULONG HandleCount
589 IN PUNICODE_STRING NewName
600 NtRequestDeviceWakeup(
612 NtRequestWakeupLatency(
613 IN LATENCY_TIME latency
626 IN HANDLE FileHandle,
639 IN HANDLE HighPrecedenceKeyHandle,
640 IN HANDLE LowPrecedenceKeyHandle,
652 NtSetThreadExecutionState(
653 IN EXECUTION_STATE esFlags,
654 OUT EXECUTION_STATE *PreviousFlags
666 IN POBJECT_ATTRIBUTES TargetKey,
667 IN HANDLE Event OPTIONAL
679 IN OUT PRTL_RANGE_LIST RangeList,
684 IN PVOID UserData, OPTIONAL
685 IN PVOID Owner OPTIONAL
697 OUT PRTL_RANGE_LIST CopyRangeList,
698 IN PRTL_RANGE_LIST RangeList
709 RtlDeleteOwnersRanges(
710 IN OUT PRTL_RANGE_LIST RangeList,
723 IN OUT PRTL_RANGE_LIST RangeList,
738 IN PRTL_RANGE_LIST RangeList,
739 IN ULONGLONG Minimum,
740 IN ULONGLONG Maximum,
744 IN UCHAR AttributeAvailableMask,
745 IN PVOID Context OPTIONAL,
746 IN PRTL_CONFLICT_RANGE_CALLBACK Callback OPTIONAL,
759 IN PRTL_RANGE_LIST RangeList
770 IN PUNICODE_STRING GuidString,
783 IN PRTL_RANGE_LIST RangeList,
784 OUT PRTL_RANGE_LIST_ITERATOR Iterator,
785 OUT PRTL_RANGE *Range
797 IN OUT PRTL_RANGE_LIST_ITERATOR Iterator,
798 OUT PRTL_RANGE *Range,
811 OUT PRTL_OSVERSIONINFOW lpVersionInformation
822 RtlHashUnicodeString(
823 IN const UNICODE_STRING *String,
824 IN BOOL CaseInSensitive,
825 IN ULONG HashAlgorithm,
837 RtlInitializeRangeList(
838 IN OUT PRTL_RANGE_LIST RangeList
849 OUT PRTL_RANGE_LIST InvertedRangeList,
850 IN PRTL_RANGE_LIST RangeList
862 IN PRTL_RANGE_LIST RangeList,
866 IN UCHAR AttributeAvailableMask,
867 IN PVOID Context OPTIONAL,
868 IN PRTL_CONFLICT_RANGE_CALLBACK Callback OPTIONAL,
881 OUT PRTL_RANGE_LIST MergedRangeList,
882 IN PRTL_RANGE_LIST RangeList1,
883 IN PRTL_RANGE_LIST RangeList2,
897 OUT PUNICODE_STRING GuidString
932 RtlUlonglongByteSwap(
944 RtlValidRelativeSecurityDescriptor (
945 IN PSECURITY_DESCRIPTOR SecurityDescriptorInput,
946 IN ULONG SecurityDescriptorLength,
947 IN SECURITY_INFORMATION RequiredInformation
958 RtlVerifyVersionInfo(
959 IN PRTL_OSVERSIONINFOEXW VersionInfo,
961 IN ULONGLONG ConditionMask
986 IN ULONG ComponentId,
999 vDbgPrintExWithPrefix(
1001 IN ULONG ComponentId,
1015 ZwCancelDeviceWakeupRequest(
1029 IN HANDLE KeyArray[]
1052 ZwGetDevicePowerState(
1054 OUT DEVICE_POWER_STATE *State
1065 ZwInitiatePowerAction(
1066 IN POWER_ACTION SystemAction,
1067 IN SYSTEM_POWER_STATE MinSystemState,
1069 IN BOOL Asynchronous
1080 ZwIsSystemResumeAutomatic(
1092 ZwLockProductActivationKeys(
1117 ZwNotifyChangeMultipleKeys(
1118 IN HANDLE MasterKeyHandle,
1120 IN OBJECT_ATTRIBUTES SlaveObjects[],
1121 IN HANDLE Event OPTIONAL,
1122 IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
1123 IN PVOID ApcContext OPTIONAL,
1124 OUT PIO_STATUS_BLOCK IoStatusBlock,
1125 IN ULONG CompletionFilter,
1128 IN ULONG BufferSize,
1129 IN BOOL Asynchronous
1141 IN POBJECT_ATTRIBUTES TargetKey,
1142 OUT PULONG HandleCount
1154 IN HANDLE KeyHandle,
1155 IN PUNICODE_STRING NewName
1166 ZwRequestDeviceWakeup(
1178 ZwRequestWakeupLatency(
1179 IN LATENCY_TIME latency
1191 IN HANDLE KeyHandle,
1192 IN HANDLE FileHandle,
1205 IN HANDLE HighPrecedenceKeyHandle,
1206 IN HANDLE LowPrecedenceKeyHandle,
1207 IN HANDLE FileHandle
1218 ZwSetThreadExecutionState(
1219 IN EXECUTION_STATE esFlags,
1220 OUT EXECUTION_STATE *PreviousFlags
1232 IN POBJECT_ATTRIBUTES TargetKey,
1233 IN HANDLE Event OPTIONAL
1242 NTSTATUS STDCALL DbgUiDebugActiveProcess(HANDLE process)
1250 NTSTATUS STDCALL DbgUiStopDebugging(HANDLE process)
1260 RtlInitializeSListHead (
1261 PSLIST_HEADER ListHead
1271 RtlInterlockedFlushSList (
1272 PSLIST_HEADER ListHead
1283 RtlInterlockedPopEntrySList (
1284 PSLIST_HEADER ListHead
1295 RtlInterlockedPushEntrySList (
1296 PSLIST_HEADER ListHead,
1297 PSLIST_ENTRY ListEntry
1308 RtlQueryDepthSList (
1309 PSLIST_HEADER ListHead
1320 RtlCreateTimer(HANDLE TimerQueue,PHANDLE phNewTimer, WAITORTIMERCALLBACK Callback,PVOID Parameter,DWORD DueTime,DWORD Period,ULONG Flags)
1330 RtlCreateTimerQueue(PHANDLE TimerQueue)
1340 RtlDeleteTimer(HANDLE TimerQueue,HANDLE Timer,HANDLE CompletionEvent)
1350 RtlUpdateTimer(HANDLE TimerQueue,HANDLE Timer,ULONG DueTime,ULONG Period)
1360 RtlDeleteTimerQueueEx(HANDLE TimerQueue,HANDLE CompletionEvent)
1370 RtlDeleteTimerQueue(HANDLE TimerQueue)
1380 RtlRegisterWait(PHANDLE hOutput, HANDLE hObject,WAITORTIMERCALLBACK Callback,PVOID Context,ULONG dwMilliseconds,ULONG dwFlags)
1402 RtlDeregisterWaitEx(
1404 HANDLE CompletionEvent
1415 RtlSetHeapInformation(
1417 HEAP_INFORMATION_CLASS HeapInformationClass,
1418 PVOID HeapInformation OPTIONAL,
1419 SIZE_T HeapInformationLength OPTIONAL
1430 RtlQueryHeapInformation(
1432 HEAP_INFORMATION_CLASS HeapInformationClass,
1433 PVOID HeapInformation OPTIONAL,
1434 SIZE_T HeapInformationLength OPTIONAL,
1435 PSIZE_T ReturnLength OPTIONAL
1448 PJOB_SET_ARRAY UserJobSet,
1461 PJOB_SET_ARRAY UserJobSet,
1472 RtlReleaseActivationContext(
1483 RtlQueryInformationActivationContext(
1486 PVOID pvSubInstance,
1489 SIZE_T cbBuffer OPTIONAL,
1490 SIZE_T *pcbWrittenOrRequired OPTIONAL
1501 RtlAddRefActivationContext(
1512 RtlGetActiveActivationContext(
1523 RtlZombifyActivationContext(
1535 RtlDeactivateActivationContext(
1549 IN HANDLE HeapHandle,
1552 IN PCWSTR TagSubName
1564 IN PRTL_SPLAY_LINKS Links
1575 RtlDeleteElementGenericTable(
1576 IN PRTL_GENERIC_TABLE Table,
1589 IN PRTL_SPLAY_LINKS Links,
1590 OUT PRTL_SPLAY_LINKS *Root
1600 RtlEnumerateGenericTable(
1601 IN PRTL_GENERIC_TABLE Table,
1613 RtlEnumerateGenericTableWithoutSplaying(
1614 IN PRTL_GENERIC_TABLE Table,
1615 IN PVOID *RestartKey
1626 RtlGetElementGenericTable(
1627 IN PRTL_GENERIC_TABLE Table,
1638 RtlLookupElementGenericTable(
1639 IN PRTL_GENERIC_TABLE Table,
1665 IN HANDLE HeapHandle,
1667 IN USHORT TagNumber,
1668 IN BOOLEAN ZeroInternalTagInfo,
1669 OUT PRTL_HEAP_TAG_INFO HeapTagInfo OPTIONAL
1681 IN PRTL_SPLAY_LINKS Links
1693 IN PRTL_SPLAY_LINKS Links
1705 IN PRTL_SPLAY_LINKS Links
1716 NtAccessCheckByType(
1717 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
1718 IN PSID PrincipalSelfSid,
1719 IN HANDLE TokenHandle,
1720 IN ULONG DesiredAccess,
1721 IN POBJECT_TYPE_LIST ObjectTypeList,
1722 IN ULONG ObjectTypeListLength,
1723 IN PGENERIC_MAPPING GenericMapping,
1724 IN PPRIVILEGE_SET PrivilegeSet,
1725 IN PULONG PrivilegeSetLength,
1726 OUT PACCESS_MASK GrantedAccess,
1727 OUT PULONG AccessStatus
1738 NtAccessCheckByTypeAndAuditAlarm(
1739 IN PUNICODE_STRING SubsystemName,
1741 IN PUNICODE_STRING ObjectTypeName,
1742 IN PUNICODE_STRING ObjectName,
1743 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
1744 IN PSID PrincipalSelfSid,
1745 IN ACCESS_MASK DesiredAccess,
1746 IN AUDIT_EVENT_TYPE AuditType,
1748 IN POBJECT_TYPE_LIST ObjectTypeList,
1749 IN ULONG ObjectTypeListLength,
1750 IN PGENERIC_MAPPING GenericMapping,
1751 IN BOOLEAN ObjectCreation,
1752 OUT PACCESS_MASK GrantedAccess,
1753 OUT PULONG AccessStatus,
1754 OUT PBOOLEAN GenerateOnClose
1765 NtAccessCheckByTypeResultList(
1766 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
1767 IN PSID PrincipalSelfSid,
1768 IN HANDLE TokenHandle,
1769 IN ACCESS_MASK DesiredAccess,
1770 IN POBJECT_TYPE_LIST ObjectTypeList,
1771 IN ULONG ObjectTypeListLength,
1772 IN PGENERIC_MAPPING GenericMapping,
1773 IN PPRIVILEGE_SET PrivilegeSet,
1774 IN PULONG PrivilegeSetLength,
1775 OUT PACCESS_MASK GrantedAccessList,
1776 OUT PULONG AccessStatusList
1787 NtAccessCheckByTypeResultListAndAuditAlarm(
1788 IN PUNICODE_STRING SubsystemName,
1790 IN PUNICODE_STRING ObjectTypeName,
1791 IN PUNICODE_STRING ObjectName,
1792 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
1793 IN PSID PrincipalSelfSid,
1794 IN ACCESS_MASK DesiredAccess,
1795 IN AUDIT_EVENT_TYPE AuditType,
1797 IN POBJECT_TYPE_LIST ObjectTypeList,
1798 IN ULONG ObjectTypeListLength,
1799 IN PGENERIC_MAPPING GenericMapping,
1800 IN BOOLEAN ObjectCreation,
1801 OUT PACCESS_MASK GrantedAccessList,
1802 OUT PULONG AccessStatusList,
1803 OUT PULONG GenerateOnClose
1814 NtAccessCheckByTypeResultListAndAuditAlarmByHandle(
1815 IN PUNICODE_STRING SubsystemName,
1817 IN HANDLE TokenHandle,
1818 IN PUNICODE_STRING ObjectTypeName,
1819 IN PUNICODE_STRING ObjectName,
1820 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
1821 IN PSID PrincipalSelfSid,
1822 IN ACCESS_MASK DesiredAccess,
1823 IN AUDIT_EVENT_TYPE AuditType,
1825 IN POBJECT_TYPE_LIST ObjectTypeList,
1826 IN ULONG ObjectTypeListLength,
1827 IN PGENERIC_MAPPING GenericMapping,
1828 IN BOOLEAN ObjectCreation,
1829 OUT PACCESS_MASK GrantedAccessList,
1830 OUT PULONG AccessStatusList,
1831 OUT PULONG GenerateOnClose
1842 NtAllocateUserPhysicalPages(
1843 IN HANDLE ProcessHandle,
1844 IN PULONG NumberOfPages,
1845 OUT PULONG PageFrameNumbers
1856 NtAreMappedFilesTheSame(
1870 OUT PHANDLE JobHandle,
1871 IN ACCESS_MASK DesiredAccess,
1872 IN POBJECT_ATTRIBUTES ObjectAttributes
1884 OUT PHANDLE KeyedEventHandle,
1885 IN ACCESS_MASK DesiredAccess,
1886 IN POBJECT_ATTRIBUTES ObjectAttributes,
1899 IN HANDLE ExistingTokenHandle,
1901 IN PTOKEN_GROUPS SidsToDisable,
1902 IN PTOKEN_PRIVILEGES PrivilegesToDelete,
1903 IN PTOKEN_GROUPS SidsToRestricted,
1904 OUT PHANDLE NewTokenHandle
1915 NtFreeUserPhysicalPages(
1916 IN HANDLE ProcessHandle,
1917 IN OUT PULONG NumberOfPages,
1918 IN PULONG PageFrameNumbers
1930 IN HANDLE ProcessHandle,
1932 IN PVOID BaseAddress,
1933 IN ULONG RegionSize,
1935 IN OUT PULONG BufferEntries,
1936 OUT PULONG Granularity
1947 NtImpersonateAnonymousToken(
1948 IN HANDLE ThreadHandle
1960 IN HANDLE JobHandle,
1961 IN HANDLE ProcessHandle
1972 NtMakePermanentObject(
1984 NtMapUserPhysicalPages(
1985 IN PVOID BaseAddress,
1986 IN PULONG NumberOfPages,
1987 IN PULONG PageFrameNumbers
1998 NtMapUserPhysicalPagesScatter(
1999 IN PVOID *BaseAddresses,
2000 IN PULONG NumberOfPages,
2001 IN PULONG PageFrameNumbers
2013 OUT PHANDLE JobHandle,
2014 IN ACCESS_MASK DesiredAccess,
2015 IN POBJECT_ATTRIBUTES ObjectAttributes
2027 OUT PHANDLE KeyedEventHandle,
2028 IN PACCESS_MASK DesiredAccess,
2029 IN PUNICODE_STRING KeyedEventName
2040 NtOpenProcessTokenEx(
2041 IN HANDLE ProcessHandle,
2042 IN ACCESS_MASK DesiredAccess,
2043 IN ULONG HandleAttributes,
2044 OUT PHANDLE TokenHandle
2055 NtOpenThreadTokenEx(
2056 IN HANDLE ThreadHandle,
2057 IN ACCESS_MASK DesiredAccess,
2058 IN BOOLEAN OpenAsSelf,
2059 IN ULONG HandleAttributes,
2060 OUT PHANDLE TokenHandle
2071 NtQueryDefaultUILanguage(
2072 OUT PLANGID LanguageId
2083 NtQueryInformationJobObject(
2084 IN HANDLE JobHandle,
2085 IN JOBOBJECTINFOCLASS JobInformationClass,
2086 OUT PVOID JobInformation,
2087 IN ULONG JobInformationLength,
2088 OUT PULONG ReturnLength OPTIONAL
2099 NtQueryInstallUILanguage(
2100 OUT PLANGID LanguageId
2111 NtQueryPortInformationProcess(
2123 NtReleaseKeyedEvent(
2124 IN HANDLE KeyedEventHandle,
2126 IN BOOLEAN Alertable,
2127 IN PLARGE_INTEGER Timeout OPTIONAL
2138 NtReplyWaitReceivePortEx(
2139 IN HANDLE PortHandle,
2140 OUT PULONG PortIdentifier OPTIONAL,
2141 IN PPORT_MESSAGE ReplyMessage OPTIONAL,
2142 OUT PPORT_MESSAGE Message,
2143 IN PLARGE_INTEGER Timeout
2155 IN HANDLE ProcessHandle,
2156 IN PVOID BaseAddress,
2180 NtSecureConnectPort(
2181 OUT PHANDLE PortHandle,
2182 IN PUNICODE_STRING PortName,
2183 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos,
2184 IN OUT PPORT_SECTION_WRITE WriteSection OPTIONAL,
2185 IN PSID ServerSid OPTIONAL,
2186 IN OUT PPORT_SECTION_READ ReadSection OPTIONAL,
2187 OUT PULONG MaxMessageSize OPTIONAL,
2188 IN OUT PVOID ConnectData OPTIONAL,
2189 IN OUT PULONG ConnectDataLength OPTIONAL
2200 NtSetDefaultUILanguage(
2201 IN LANGID LanguageId
2212 NtSetInformationJobObject(
2213 IN HANDLE JobHandle,
2214 IN JOBOBJECTINFOCLASS JobInformationClass,
2215 IN PVOID JobInformation,
2216 IN ULONG JobInformationLength
2227 NtSetQuotaInformationFile(
2228 IN HANDLE FileHandle,
2229 OUT PIO_STATUS_BLOCK IoStatusBlock,
2230 IN PFILE_USER_QUOTA_INFORMATION Buffer,
2231 IN ULONG BufferLength
2266 NtTerminateJobObject(
2267 IN HANDLE JobHandle,
2268 IN NTSTATUS ExitStatus
2279 NtWaitForKeyedEvent(
2280 IN HANDLE KeyedEventHandle,
2282 IN BOOLEAN Alertable,
2283 IN PLARGE_INTEGER Timeout OPTIONAL
2294 RtlDllShutdownInProgress(
2330 RtlGetLastWin32Error(
2342 RtlGetNativeSystemInformation(
2343 IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
2344 IN OUT PVOID SystemInformation,
2345 IN ULONG SystemInformationLength,
2346 OUT PULONG ReturnLength OPTIONAL
2357 RtlLogStackBackTrace(
2370 LPTHREAD_START_ROUTINE Function,
2383 RtlRestoreLastWin32Error(
2394 RtlSetCriticalSectionSpinCount(
2395 IN PRTL_CRITICAL_SECTION CriticalSection
2406 RtlSetIoCompletionCallback(
2407 IN HANDLE FileHandle,
2408 IN POVERLAPPED_COMPLETION_ROUTINE CompletionRoutine,
2420 RtlSetLastWin32Error(
2431 RtlSetLastWin32ErrorAndNtStatusFromNtStatus(
2432 IN NTSTATUS NtStatus
2442 ZwAccessCheckByType(
2443 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
2444 IN PSID PrincipalSelfSid,
2445 IN HANDLE TokenHandle,
2446 IN ULONG DesiredAccess,
2447 IN POBJECT_TYPE_LIST ObjectTypeList,
2448 IN ULONG ObjectTypeListLength,
2449 IN PGENERIC_MAPPING GenericMapping,
2450 IN PPRIVILEGE_SET PrivilegeSet,
2451 IN PULONG PrivilegeSetLength,
2452 OUT PACCESS_MASK GrantedAccess,
2453 OUT PULONG AccessStatus
2464 ZwAccessCheckByTypeAndAuditAlarm(
2465 IN PUNICODE_STRING SubsystemName,
2467 IN PUNICODE_STRING ObjectTypeName,
2468 IN PUNICODE_STRING ObjectName,
2469 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
2470 IN PSID PrincipalSelfSid,
2471 IN ACCESS_MASK DesiredAccess,
2472 IN AUDIT_EVENT_TYPE AuditType,
2474 IN POBJECT_TYPE_LIST ObjectTypeList,
2475 IN ULONG ObjectTypeListLength,
2476 IN PGENERIC_MAPPING GenericMapping,
2477 IN BOOLEAN ObjectCreation,
2478 OUT PACCESS_MASK GrantedAccess,
2479 OUT PULONG AccessStatus,
2480 OUT PBOOLEAN GenerateOnClose
2491 ZwAccessCheckByTypeResultList(
2492 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
2493 IN PSID PrincipalSelfSid,
2494 IN HANDLE TokenHandle,
2495 IN ACCESS_MASK DesiredAccess,
2496 IN POBJECT_TYPE_LIST ObjectTypeList,
2497 IN ULONG ObjectTypeListLength,
2498 IN PGENERIC_MAPPING GenericMapping,
2499 IN PPRIVILEGE_SET PrivilegeSet,
2500 IN PULONG PrivilegeSetLength,
2501 OUT PACCESS_MASK GrantedAccessList,
2502 OUT PULONG AccessStatusList
2513 ZwAccessCheckByTypeResultListAndAuditAlarm(
2514 IN PUNICODE_STRING SubsystemName,
2516 IN PUNICODE_STRING ObjectTypeName,
2517 IN PUNICODE_STRING ObjectName,
2518 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
2519 IN PSID PrincipalSelfSid,
2520 IN ACCESS_MASK DesiredAccess,
2521 IN AUDIT_EVENT_TYPE AuditType,
2523 IN POBJECT_TYPE_LIST ObjectTypeList,
2524 IN ULONG ObjectTypeListLength,
2525 IN PGENERIC_MAPPING GenericMapping,
2526 IN BOOLEAN ObjectCreation,
2527 OUT PACCESS_MASK GrantedAccessList,
2528 OUT PULONG AccessStatusList,
2529 OUT PULONG GenerateOnClose
2540 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle(
2541 IN PUNICODE_STRING SubsystemName,
2543 IN HANDLE TokenHandle,
2544 IN PUNICODE_STRING ObjectTypeName,
2545 IN PUNICODE_STRING ObjectName,
2546 IN PSECURITY_DESCRIPTOR SecurityDescriptor,
2547 IN PSID PrincipalSelfSid,
2548 IN ACCESS_MASK DesiredAccess,
2549 IN AUDIT_EVENT_TYPE AuditType,
2551 IN POBJECT_TYPE_LIST ObjectTypeList,
2552 IN ULONG ObjectTypeListLength,
2553 IN PGENERIC_MAPPING GenericMapping,
2554 IN BOOLEAN ObjectCreation,
2555 OUT PACCESS_MASK GrantedAccessList,
2556 OUT PULONG AccessStatusList,
2557 OUT PULONG GenerateOnClose
2568 ZwAllocateUserPhysicalPages(
2569 IN HANDLE ProcessHandle,
2570 IN PULONG NumberOfPages,
2571 OUT PULONG PageFrameNumbers
2582 ZwAreMappedFilesTheSame(
2595 ZwAssignProcessToJobObject(
2596 IN HANDLE JobHandle,
2597 IN HANDLE ProcessHandle
2609 OUT PHANDLE JobHandle,
2610 IN ACCESS_MASK DesiredAccess,
2611 IN POBJECT_ATTRIBUTES ObjectAttributes
2623 OUT PHANDLE KeyedEventHandle,
2624 IN ACCESS_MASK DesiredAccess,
2625 IN POBJECT_ATTRIBUTES ObjectAttributes,
2638 IN HANDLE ExistingTokenHandle,
2640 IN PTOKEN_GROUPS SidsToDisable,
2641 IN PTOKEN_PRIVILEGES PrivilegesToDelete,
2642 IN PTOKEN_GROUPS SidsToRestricted,
2643 OUT PHANDLE NewTokenHandle
2654 ZwFreeUserPhysicalPages(
2655 IN HANDLE ProcessHandle,
2656 IN OUT PULONG NumberOfPages,
2657 IN PULONG PageFrameNumbers
2669 IN HANDLE ProcessHandle,
2671 IN PVOID BaseAddress,
2672 IN ULONG RegionSize,
2674 IN OUT PULONG BufferEntries,
2675 OUT PULONG Granularity
2686 ZwImpersonateAnonymousToken(
2687 IN HANDLE ThreadHandle
2699 IN HANDLE JobHandle,
2700 IN HANDLE ProcessHandle
2711 ZwMakePermanentObject(
2723 ZwMapUserPhysicalPages(
2724 IN PVOID BaseAddress,
2725 IN PULONG NumberOfPages,
2726 IN PULONG PageFrameNumbers
2737 ZwMapUserPhysicalPagesScatter(
2738 IN PVOID *BaseAddresses,
2739 IN PULONG NumberOfPages,
2740 IN PULONG PageFrameNumbers
2752 OUT PHANDLE JobHandle,
2753 IN ACCESS_MASK DesiredAccess,
2754 IN POBJECT_ATTRIBUTES ObjectAttributes
2766 OUT PHANDLE KeyedEventHandle,
2767 IN PACCESS_MASK DesiredAccess,
2768 IN PUNICODE_STRING KeyedEventName
2779 ZwOpenProcessTokenEx(
2780 IN HANDLE ProcessHandle,
2781 IN ACCESS_MASK DesiredAccess,
2782 IN ULONG HandleAttributes,
2783 OUT PHANDLE TokenHandle
2794 ZwOpenThreadTokenEx(
2795 IN HANDLE ThreadHandle,
2796 IN ACCESS_MASK DesiredAccess,
2797 IN BOOLEAN OpenAsSelf,
2798 IN ULONG HandleAttributes,
2799 OUT PHANDLE TokenHandle
2810 ZwQueryDefaultUILanguage(
2811 OUT PLANGID LanguageId
2822 ZwQueryInformationJobObject(
2823 IN HANDLE JobHandle,
2824 IN JOBOBJECTINFOCLASS JobInformationClass,
2825 OUT PVOID JobInformation,
2826 IN ULONG JobInformationLength,
2827 OUT PULONG ReturnLength OPTIONAL
2838 ZwQueryInstallUILanguage(
2839 OUT PLANGID LanguageId
2850 ZwQueryPortInformationProcess(
2862 ZwQueryQuotaInformationFile(
2863 IN HANDLE FileHandle,
2864 OUT PIO_STATUS_BLOCK IoStatusBlock,
2865 OUT PFILE_USER_QUOTA_INFORMATION Buffer,
2866 IN ULONG BufferLength,
2867 IN BOOLEAN ReturnSingleEntry,
2868 IN PFILE_QUOTA_LIST_INFORMATION QuotaList OPTIONAL,
2869 IN ULONG QuotaListLength,
2870 IN PSID ResumeSid OPTIONAL,
2871 IN BOOLEAN RestartScan
2882 ZwReleaseKeyedEvent(
2883 IN HANDLE KeyedEventHandle,
2885 IN BOOLEAN Alertable,
2886 IN PLARGE_INTEGER Timeout OPTIONAL
2897 ZwReplyWaitReceivePortEx(
2898 IN HANDLE PortHandle,
2899 OUT PULONG PortIdentifier OPTIONAL,
2900 IN PPORT_MESSAGE ReplyMessage OPTIONAL,
2901 OUT PPORT_MESSAGE Message,
2902 IN PLARGE_INTEGER Timeout
2914 IN HANDLE ProcessHandle,
2915 IN PVOID BaseAddress,
2939 ZwSecureConnectPort(
2940 OUT PHANDLE PortHandle,
2941 IN PUNICODE_STRING PortName,
2942 IN PSECURITY_QUALITY_OF_SERVICE SecurityQos,
2943 IN OUT PPORT_SECTION_WRITE WriteSection OPTIONAL,
2944 IN PSID ServerSid OPTIONAL,
2945 IN OUT PPORT_SECTION_READ ReadSection OPTIONAL,
2946 OUT PULONG MaxMessageSize OPTIONAL,
2947 IN OUT PVOID ConnectData OPTIONAL,
2948 IN OUT PULONG ConnectDataLength OPTIONAL
2959 ZwSetDefaultUILanguage(
2960 IN LANGID LanguageId
2971 ZwSetInformationJobObject(
2972 IN HANDLE JobHandle,
2973 IN JOBOBJECTINFOCLASS JobInformationClass,
2974 IN PVOID JobInformation,
2975 IN ULONG JobInformationLength
2986 ZwSetQuotaInformationFile(
2987 IN HANDLE FileHandle,
2988 OUT PIO_STATUS_BLOCK IoStatusBlock,
2989 IN PFILE_USER_QUOTA_INFORMATION Buffer,
2990 IN ULONG BufferLength
3025 ZwTerminateJobObject(
3026 IN HANDLE JobHandle,
3027 IN NTSTATUS ExitStatus
3038 ZwWaitForKeyedEvent(
3039 IN HANDLE KeyedEventHandle,
3041 IN BOOLEAN Alertable,
3042 IN PLARGE_INTEGER Timeout OPTIONAL