Windows NT 4.0 source code leak
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

1920 lines
38 KiB

4 years ago
  1. NTSYSAPI
  2. NTSTATUS
  3. NTAPI
  4. ZwDelayExecution (
  5. IN BOOLEAN Alertable,
  6. IN PLARGE_INTEGER DelayInterval
  7. );
  8. NTSYSAPI
  9. NTSTATUS
  10. NTAPI
  11. ZwQuerySystemEnvironmentValue (
  12. IN PUNICODE_STRING VariableName,
  13. OUT PWSTR VariableValue,
  14. IN USHORT ValueLength,
  15. OUT PUSHORT ReturnLength OPTIONAL
  16. );
  17. NTSYSAPI
  18. NTSTATUS
  19. NTAPI
  20. ZwSetSystemEnvironmentValue (
  21. IN PUNICODE_STRING VariableName,
  22. IN PUNICODE_STRING VariableValue
  23. );
  24. NTSYSAPI
  25. NTSTATUS
  26. NTAPI
  27. ZwClearEvent (
  28. IN HANDLE EventHandle
  29. );
  30. NTSYSAPI
  31. NTSTATUS
  32. NTAPI
  33. ZwCreateEvent (
  34. OUT PHANDLE EventHandle,
  35. IN ACCESS_MASK DesiredAccess,
  36. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  37. IN EVENT_TYPE EventType,
  38. IN BOOLEAN InitialState
  39. );
  40. NTSYSAPI
  41. NTSTATUS
  42. NTAPI
  43. ZwOpenEvent (
  44. OUT PHANDLE EventHandle,
  45. IN ACCESS_MASK DesiredAccess,
  46. IN POBJECT_ATTRIBUTES ObjectAttributes
  47. );
  48. NTSYSAPI
  49. NTSTATUS
  50. NTAPI
  51. ZwPulseEvent (
  52. IN HANDLE EventHandle,
  53. OUT PLONG PreviousState OPTIONAL
  54. );
  55. NTSYSAPI
  56. NTSTATUS
  57. NTAPI
  58. ZwQueryEvent (
  59. IN HANDLE EventHandle,
  60. IN EVENT_INFORMATION_CLASS EventInformationClass,
  61. OUT PVOID EventInformation,
  62. IN ULONG EventInformationLength,
  63. OUT PULONG ReturnLength OPTIONAL
  64. );
  65. NTSYSAPI
  66. NTSTATUS
  67. NTAPI
  68. ZwResetEvent (
  69. IN HANDLE EventHandle,
  70. OUT PLONG PreviousState OPTIONAL
  71. );
  72. NTSYSAPI
  73. NTSTATUS
  74. NTAPI
  75. ZwSetEvent (
  76. IN HANDLE EventHandle,
  77. OUT PLONG PreviousState OPTIONAL
  78. );
  79. NTSYSAPI
  80. NTSTATUS
  81. NTAPI
  82. ZwCreateEventPair (
  83. OUT PHANDLE EventPairHandle,
  84. IN ACCESS_MASK DesiredAccess,
  85. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
  86. );
  87. NTSYSAPI
  88. NTSTATUS
  89. NTAPI
  90. ZwOpenEventPair(
  91. OUT PHANDLE EventPairHandle,
  92. IN ACCESS_MASK DesiredAccess,
  93. IN POBJECT_ATTRIBUTES ObjectAttributes
  94. );
  95. NTSYSAPI
  96. NTSTATUS
  97. NTAPI
  98. ZwWaitLowEventPair(
  99. IN HANDLE EventPairHandle
  100. );
  101. NTSYSAPI
  102. NTSTATUS
  103. NTAPI
  104. ZwWaitHighEventPair(
  105. IN HANDLE EventPairHandle
  106. );
  107. NTSYSAPI
  108. NTSTATUS
  109. NTAPI
  110. ZwSetLowWaitHighEventPair(
  111. IN HANDLE EventPairHandle
  112. );
  113. NTSYSAPI
  114. NTSTATUS
  115. NTAPI
  116. ZwSetHighWaitLowEventPair(
  117. IN HANDLE EventPairHandle
  118. );
  119. NTSYSAPI
  120. NTSTATUS
  121. NTAPI
  122. ZwSetLowWaitHighThread(
  123. );
  124. NTSYSAPI
  125. NTSTATUS
  126. NTAPI
  127. ZwSetHighWaitLowThread(
  128. );
  129. NTSYSAPI
  130. NTSTATUS
  131. NTAPI
  132. ZwSetLowEventPair(
  133. IN HANDLE EventPairHandle
  134. );
  135. NTSYSAPI
  136. NTSTATUS
  137. NTAPI
  138. ZwSetHighEventPair(
  139. IN HANDLE EventPairHandle
  140. );
  141. NTSYSAPI
  142. NTSTATUS
  143. NTAPI
  144. ZwCreateMutant (
  145. IN PHANDLE MutantHandle,
  146. IN ACCESS_MASK DesiredAccess,
  147. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  148. IN BOOLEAN InitialOwner
  149. );
  150. NTSYSAPI
  151. NTSTATUS
  152. NTAPI
  153. ZwOpenMutant (
  154. OUT PHANDLE MutantHandle,
  155. IN ACCESS_MASK DesiredAccess,
  156. IN POBJECT_ATTRIBUTES ObjectAttributes
  157. );
  158. NTSYSAPI
  159. NTSTATUS
  160. NTAPI
  161. ZwQueryMutant (
  162. IN HANDLE MutantHandle,
  163. IN MUTANT_INFORMATION_CLASS MutantInformationClass,
  164. OUT PVOID MutantInformation,
  165. IN ULONG MutantInformationLength,
  166. OUT PULONG ReturnLength OPTIONAL
  167. );
  168. NTSYSAPI
  169. NTSTATUS
  170. NTAPI
  171. ZwReleaseMutant (
  172. IN HANDLE MutantHandle,
  173. OUT PLONG PreviousCount OPTIONAL
  174. );
  175. NTSYSAPI
  176. NTSTATUS
  177. NTAPI
  178. ZwCreateSemaphore (
  179. OUT PHANDLE SemaphoreHandle,
  180. IN ACCESS_MASK DesiredAccess,
  181. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  182. IN LONG InitialCount,
  183. IN LONG MaximumCount
  184. );
  185. NTSYSAPI
  186. NTSTATUS
  187. NTAPI
  188. ZwOpenSemaphore(
  189. OUT PHANDLE SemaphoreHandle,
  190. IN ACCESS_MASK DesiredAccess,
  191. IN POBJECT_ATTRIBUTES ObjectAttributes
  192. );
  193. NTSYSAPI
  194. NTSTATUS
  195. NTAPI
  196. ZwQuerySemaphore (
  197. IN HANDLE SemaphoreHandle,
  198. IN SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass,
  199. OUT PVOID SemaphoreInformation,
  200. IN ULONG SemaphoreInformationLength,
  201. OUT PULONG ReturnLength OPTIONAL
  202. );
  203. NTSYSAPI
  204. NTSTATUS
  205. NTAPI
  206. ZwReleaseSemaphore(
  207. IN HANDLE SemaphoreHandle,
  208. IN LONG ReleaseCount,
  209. OUT PLONG PreviousCount OPTIONAL
  210. );
  211. NTSYSAPI
  212. NTSTATUS
  213. NTAPI
  214. ZwCreateTimer (
  215. OUT PHANDLE TimerHandle,
  216. IN ACCESS_MASK DesiredAccess,
  217. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  218. IN TIMER_TYPE TimerType
  219. );
  220. NTSYSAPI
  221. NTSTATUS
  222. NTAPI
  223. ZwOpenTimer (
  224. OUT PHANDLE TimerHandle,
  225. IN ACCESS_MASK DesiredAccess,
  226. IN POBJECT_ATTRIBUTES ObjectAttributes
  227. );
  228. NTSYSAPI
  229. NTSTATUS
  230. NTAPI
  231. ZwCancelTimer (
  232. IN HANDLE TimerHandle,
  233. OUT PBOOLEAN CurrentState OPTIONAL
  234. );
  235. NTSYSAPI
  236. NTSTATUS
  237. NTAPI
  238. ZwQueryTimer (
  239. IN HANDLE TimerHandle,
  240. IN TIMER_INFORMATION_CLASS TimerInformationClass,
  241. OUT PVOID TimerInformation,
  242. IN ULONG TimerInformationLength,
  243. OUT PULONG ReturnLength OPTIONAL
  244. );
  245. NTSYSAPI
  246. NTSTATUS
  247. NTAPI
  248. ZwSetTimer (
  249. IN HANDLE TimerHandle,
  250. IN PLARGE_INTEGER DueTime,
  251. IN PTIMER_APC_ROUTINE TimerApcRoutine OPTIONAL,
  252. IN PVOID TimerContext OPTIONAL,
  253. IN BOOLEAN ResumeTimer,
  254. IN LONG Period OPTIONAL,
  255. OUT PBOOLEAN PreviousState OPTIONAL
  256. );
  257. NTSYSAPI
  258. NTSTATUS
  259. NTAPI
  260. ZwQuerySystemTime (
  261. OUT PLARGE_INTEGER SystemTime
  262. );
  263. NTSYSAPI
  264. NTSTATUS
  265. NTAPI
  266. ZwSetSystemTime (
  267. IN PLARGE_INTEGER SystemTime,
  268. OUT PLARGE_INTEGER PreviousTime OPTIONAL
  269. );
  270. NTSYSAPI
  271. NTSTATUS
  272. NTAPI
  273. ZwQueryTimerResolution (
  274. OUT PULONG MaximumTime,
  275. OUT PULONG MinimumTime,
  276. OUT PULONG CurrentTime
  277. );
  278. NTSYSAPI
  279. NTSTATUS
  280. NTAPI
  281. ZwSetTimerResolution (
  282. IN ULONG DesiredTime,
  283. IN BOOLEAN SetResolution,
  284. OUT PULONG ActualTime
  285. );
  286. NTSYSAPI
  287. NTSTATUS
  288. NTAPI
  289. ZwAllocateLocallyUniqueId(
  290. OUT PLUID Luid
  291. );
  292. NTSYSAPI
  293. NTSTATUS
  294. NTAPI
  295. ZwAllocateUuids(
  296. OUT PULARGE_INTEGER Time,
  297. OUT PULONG Range,
  298. OUT PULONG Sequence
  299. );
  300. NTSYSAPI
  301. NTSTATUS
  302. NTAPI
  303. ZwCreateProfile (
  304. OUT PHANDLE ProfileHandle,
  305. IN HANDLE Process OPTIONAL,
  306. IN PVOID ProfileBase,
  307. IN ULONG ProfileSize,
  308. IN ULONG BucketSize,
  309. IN PULONG Buffer,
  310. IN ULONG BufferSize,
  311. IN KPROFILE_SOURCE ProfileSource,
  312. IN KAFFINITY Affinity
  313. );
  314. NTSYSAPI
  315. NTSTATUS
  316. NTAPI
  317. ZwStartProfile (
  318. IN HANDLE ProfileHandle
  319. );
  320. NTSYSAPI
  321. NTSTATUS
  322. NTAPI
  323. ZwStopProfile (
  324. IN HANDLE ProfileHandle
  325. );
  326. NTSYSAPI
  327. NTSTATUS
  328. NTAPI
  329. ZwSetIntervalProfile (
  330. IN ULONG Interval,
  331. IN KPROFILE_SOURCE Source
  332. );
  333. NTSYSAPI
  334. NTSTATUS
  335. NTAPI
  336. ZwQueryIntervalProfile (
  337. IN KPROFILE_SOURCE ProfileSource,
  338. OUT PULONG Interval
  339. );
  340. NTSYSAPI
  341. NTSTATUS
  342. NTAPI
  343. ZwQueryPerformanceCounter (
  344. OUT PLARGE_INTEGER PerformanceCounter,
  345. OUT PLARGE_INTEGER PerformanceFrequency OPTIONAL
  346. );
  347. NTSYSAPI
  348. NTSTATUS
  349. NTAPI
  350. ZwQuerySystemInformation (
  351. IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
  352. OUT PVOID SystemInformation,
  353. IN ULONG SystemInformationLength,
  354. OUT PULONG ReturnLength OPTIONAL
  355. );
  356. NTSYSAPI
  357. NTSTATUS
  358. NTAPI
  359. ZwSetSystemInformation (
  360. IN SYSTEM_INFORMATION_CLASS SystemInformationClass,
  361. IN PVOID SystemInformation,
  362. IN ULONG SystemInformationLength
  363. );
  364. NTSYSAPI
  365. NTSTATUS
  366. NTAPI
  367. ZwSystemDebugControl (
  368. IN SYSDBG_COMMAND Command,
  369. IN PVOID InputBuffer,
  370. IN ULONG InputBufferLength,
  371. OUT PVOID OutputBuffer,
  372. IN ULONG OutputBufferLength,
  373. OUT PULONG ReturnLength
  374. );
  375. NTSYSAPI
  376. NTSTATUS
  377. NTAPI
  378. ZwRaiseHardError(
  379. IN NTSTATUS ErrorStatus,
  380. IN ULONG NumberOfParameters,
  381. IN ULONG UnicodeStringParameterMask,
  382. IN PULONG Parameters,
  383. IN ULONG ValidResponseOptions,
  384. OUT PULONG Response
  385. );
  386. NTSYSAPI
  387. NTSTATUS
  388. NTAPI
  389. ZwQueryDefaultLocale(
  390. IN BOOLEAN UserProfile,
  391. OUT PLCID DefaultLocaleId
  392. );
  393. NTSYSAPI
  394. NTSTATUS
  395. NTAPI
  396. ZwSetDefaultLocale(
  397. IN BOOLEAN UserProfile,
  398. IN LCID DefaultLocaleId
  399. );
  400. NTSYSAPI
  401. NTSTATUS
  402. NTAPI
  403. ZwSetDefaultHardErrorPort(
  404. IN HANDLE DefaultHardErrorPort
  405. );
  406. NTSYSAPI
  407. NTSTATUS
  408. NTAPI
  409. ZwShutdownSystem(
  410. IN SHUTDOWN_ACTION Action
  411. );
  412. NTSYSAPI
  413. NTSTATUS
  414. NTAPI
  415. ZwDisplayString(
  416. IN PUNICODE_STRING String
  417. );
  418. NTSYSAPI
  419. NTSTATUS
  420. NTAPI
  421. ZwAddAtom(
  422. IN PWSTR AtomName OPTIONAL,
  423. IN OUT PRTL_ATOM Atom OPTIONAL
  424. );
  425. NTSYSAPI
  426. NTSTATUS
  427. NTAPI
  428. ZwFindAtom(
  429. IN PWSTR AtomName,
  430. OUT PRTL_ATOM Atom OPTIONAL
  431. );
  432. NTSYSAPI
  433. NTSTATUS
  434. NTAPI
  435. ZwDeleteAtom(
  436. IN RTL_ATOM Atom
  437. );
  438. NTSYSAPI
  439. NTSTATUS
  440. NTAPI
  441. ZwQueryInformationAtom(
  442. IN RTL_ATOM Atom,
  443. IN ATOM_INFORMATION_CLASS AtomInformationClass,
  444. OUT PVOID AtomInformation,
  445. IN ULONG AtomInformationLength,
  446. OUT PULONG ReturnLength OPTIONAL
  447. );
  448. NTSYSAPI
  449. NTSTATUS
  450. NTAPI
  451. ZwCancelIoFile(
  452. IN HANDLE FileHandle,
  453. OUT PIO_STATUS_BLOCK IoStatusBlock
  454. );
  455. NTSYSAPI
  456. NTSTATUS
  457. NTAPI
  458. ZwCreateFile(
  459. OUT PHANDLE FileHandle,
  460. IN ACCESS_MASK DesiredAccess,
  461. IN POBJECT_ATTRIBUTES ObjectAttributes,
  462. OUT PIO_STATUS_BLOCK IoStatusBlock,
  463. IN PLARGE_INTEGER AllocationSize OPTIONAL,
  464. IN ULONG FileAttributes,
  465. IN ULONG ShareAccess,
  466. IN ULONG CreateDisposition,
  467. IN ULONG CreateOptions,
  468. IN PVOID EaBuffer OPTIONAL,
  469. IN ULONG EaLength
  470. );
  471. NTSYSAPI
  472. NTSTATUS
  473. NTAPI
  474. ZwCreateNamedPipeFile(
  475. OUT PHANDLE FileHandle,
  476. IN ULONG DesiredAccess,
  477. IN POBJECT_ATTRIBUTES ObjectAttributes,
  478. OUT PIO_STATUS_BLOCK IoStatusBlock,
  479. IN ULONG ShareAccess,
  480. IN ULONG CreateDisposition,
  481. IN ULONG CreateOptions,
  482. IN ULONG NamedPipeType,
  483. IN ULONG ReadMode,
  484. IN ULONG CompletionMode,
  485. IN ULONG MaximumInstances,
  486. IN ULONG InboundQuota,
  487. IN ULONG OutboundQuota,
  488. IN PLARGE_INTEGER DefaultTimeout OPTIONAL
  489. );
  490. NTSYSAPI
  491. NTSTATUS
  492. NTAPI
  493. ZwCreateMailslotFile(
  494. OUT PHANDLE FileHandle,
  495. IN ULONG DesiredAccess,
  496. IN POBJECT_ATTRIBUTES ObjectAttributes,
  497. OUT PIO_STATUS_BLOCK IoStatusBlock,
  498. ULONG CreateOptions,
  499. IN ULONG MailslotQuota,
  500. IN ULONG MaximumMessageSize,
  501. IN PLARGE_INTEGER ReadTimeout
  502. );
  503. NTSYSAPI
  504. NTSTATUS
  505. NTAPI
  506. ZwDeleteFile(
  507. IN POBJECT_ATTRIBUTES ObjectAttributes
  508. );
  509. NTSYSAPI
  510. NTSTATUS
  511. NTAPI
  512. ZwDeviceIoControlFile(
  513. IN HANDLE FileHandle,
  514. IN HANDLE Event OPTIONAL,
  515. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  516. IN PVOID ApcContext OPTIONAL,
  517. OUT PIO_STATUS_BLOCK IoStatusBlock,
  518. IN ULONG IoControlCode,
  519. IN PVOID InputBuffer OPTIONAL,
  520. IN ULONG InputBufferLength,
  521. OUT PVOID OutputBuffer OPTIONAL,
  522. IN ULONG OutputBufferLength
  523. );
  524. NTSYSAPI
  525. NTSTATUS
  526. NTAPI
  527. ZwFlushBuffersFile(
  528. IN HANDLE FileHandle,
  529. OUT PIO_STATUS_BLOCK IoStatusBlock
  530. );
  531. NTSYSAPI
  532. NTSTATUS
  533. NTAPI
  534. ZwFsControlFile(
  535. IN HANDLE FileHandle,
  536. IN HANDLE Event OPTIONAL,
  537. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  538. IN PVOID ApcContext OPTIONAL,
  539. OUT PIO_STATUS_BLOCK IoStatusBlock,
  540. IN ULONG FsControlCode,
  541. IN PVOID InputBuffer OPTIONAL,
  542. IN ULONG InputBufferLength,
  543. OUT PVOID OutputBuffer OPTIONAL,
  544. IN ULONG OutputBufferLength
  545. );
  546. NTSYSAPI
  547. NTSTATUS
  548. NTAPI
  549. ZwLockFile(
  550. IN HANDLE FileHandle,
  551. IN HANDLE Event OPTIONAL,
  552. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  553. IN PVOID ApcContext OPTIONAL,
  554. OUT PIO_STATUS_BLOCK IoStatusBlock,
  555. IN PLARGE_INTEGER ByteOffset,
  556. IN PLARGE_INTEGER Length,
  557. IN ULONG Key,
  558. IN BOOLEAN FailImmediately,
  559. IN BOOLEAN ExclusiveLock
  560. );
  561. NTSYSAPI
  562. NTSTATUS
  563. NTAPI
  564. ZwNotifyChangeDirectoryFile(
  565. IN HANDLE FileHandle,
  566. IN HANDLE Event OPTIONAL,
  567. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  568. IN PVOID ApcContext OPTIONAL,
  569. OUT PIO_STATUS_BLOCK IoStatusBlock,
  570. OUT PVOID Buffer,
  571. IN ULONG Length,
  572. IN ULONG CompletionFilter,
  573. IN BOOLEAN WatchTree
  574. );
  575. NTSYSAPI
  576. NTSTATUS
  577. NTAPI
  578. ZwOpenFile(
  579. OUT PHANDLE FileHandle,
  580. IN ACCESS_MASK DesiredAccess,
  581. IN POBJECT_ATTRIBUTES ObjectAttributes,
  582. OUT PIO_STATUS_BLOCK IoStatusBlock,
  583. IN ULONG ShareAccess,
  584. IN ULONG OpenOptions
  585. );
  586. NTSYSAPI
  587. NTSTATUS
  588. NTAPI
  589. ZwQueryAttributesFile(
  590. IN POBJECT_ATTRIBUTES ObjectAttributes,
  591. OUT PFILE_BASIC_INFORMATION FileInformation
  592. );
  593. NTSYSAPI
  594. NTSTATUS
  595. NTAPI
  596. ZwQueryDirectoryFile(
  597. IN HANDLE FileHandle,
  598. IN HANDLE Event OPTIONAL,
  599. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  600. IN PVOID ApcContext OPTIONAL,
  601. OUT PIO_STATUS_BLOCK IoStatusBlock,
  602. OUT PVOID FileInformation,
  603. IN ULONG Length,
  604. IN FILE_INFORMATION_CLASS FileInformationClass,
  605. IN BOOLEAN ReturnSingleEntry,
  606. IN PUNICODE_STRING FileName OPTIONAL,
  607. IN BOOLEAN RestartScan
  608. );
  609. NTSYSAPI
  610. NTSTATUS
  611. NTAPI
  612. ZwQueryFullAttributesFile(
  613. IN POBJECT_ATTRIBUTES ObjectAttributes,
  614. OUT PFILE_NETWORK_OPEN_INFORMATION FileInformation
  615. );
  616. NTSYSAPI
  617. NTSTATUS
  618. NTAPI
  619. ZwQueryOleDirectoryFile(
  620. IN HANDLE FileHandle,
  621. IN HANDLE Event OPTIONAL,
  622. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  623. IN PVOID ApcContext OPTIONAL,
  624. OUT PIO_STATUS_BLOCK IoStatusBlock,
  625. OUT PVOID FileInformation,
  626. IN ULONG Length,
  627. IN FILE_INFORMATION_CLASS FileInformationClass,
  628. IN BOOLEAN ReturnSingleEntry,
  629. IN PUNICODE_STRING FileName OPTIONAL,
  630. IN BOOLEAN RestartScan
  631. );
  632. NTSYSAPI
  633. NTSTATUS
  634. NTAPI
  635. ZwQueryEaFile(
  636. IN HANDLE FileHandle,
  637. OUT PIO_STATUS_BLOCK IoStatusBlock,
  638. OUT PVOID Buffer,
  639. IN ULONG Length,
  640. IN BOOLEAN ReturnSingleEntry,
  641. IN PVOID EaList OPTIONAL,
  642. IN ULONG EaListLength,
  643. IN PULONG EaIndex OPTIONAL,
  644. IN BOOLEAN RestartScan
  645. );
  646. NTSYSAPI
  647. NTSTATUS
  648. NTAPI
  649. ZwQueryInformationFile(
  650. IN HANDLE FileHandle,
  651. OUT PIO_STATUS_BLOCK IoStatusBlock,
  652. OUT PVOID FileInformation,
  653. IN ULONG Length,
  654. IN FILE_INFORMATION_CLASS FileInformationClass
  655. );
  656. NTSYSAPI
  657. NTSTATUS
  658. NTAPI
  659. ZwQueryQuotaInformationFile(
  660. IN HANDLE FileHandle,
  661. OUT PIO_STATUS_BLOCK IoStatusBlock,
  662. OUT PVOID Buffer,
  663. IN ULONG Length,
  664. IN BOOLEAN ReturnSingleEntry,
  665. IN PVOID SidList OPTIONAL,
  666. IN ULONG SidListLength,
  667. IN PSID StartSid OPTIONAL,
  668. IN BOOLEAN RestartScan
  669. );
  670. NTSYSAPI
  671. NTSTATUS
  672. NTAPI
  673. ZwQueryVolumeInformationFile(
  674. IN HANDLE FileHandle,
  675. OUT PIO_STATUS_BLOCK IoStatusBlock,
  676. OUT PVOID FsInformation,
  677. IN ULONG Length,
  678. IN FS_INFORMATION_CLASS FsInformationClass
  679. );
  680. NTSYSAPI
  681. NTSTATUS
  682. NTAPI
  683. ZwReadFile(
  684. IN HANDLE FileHandle,
  685. IN HANDLE Event OPTIONAL,
  686. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  687. IN PVOID ApcContext OPTIONAL,
  688. OUT PIO_STATUS_BLOCK IoStatusBlock,
  689. OUT PVOID Buffer,
  690. IN ULONG Length,
  691. IN PLARGE_INTEGER ByteOffset OPTIONAL,
  692. IN PULONG Key OPTIONAL
  693. );
  694. NTSYSAPI
  695. NTSTATUS
  696. NTAPI
  697. ZwReadFileScatter(
  698. IN HANDLE FileHandle,
  699. IN HANDLE Event OPTIONAL,
  700. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  701. IN PVOID ApcContext OPTIONAL,
  702. OUT PIO_STATUS_BLOCK IoStatusBlock,
  703. IN PFILE_SEGMENT_ELEMENT SegmentArray,
  704. IN ULONG Length,
  705. IN PLARGE_INTEGER ByteOffset OPTIONAL,
  706. IN PULONG Key OPTIONAL
  707. );
  708. NTSYSAPI
  709. NTSTATUS
  710. NTAPI
  711. ZwSetEaFile(
  712. IN HANDLE FileHandle,
  713. OUT PIO_STATUS_BLOCK IoStatusBlock,
  714. IN PVOID Buffer,
  715. IN ULONG Length
  716. );
  717. NTSYSAPI
  718. NTSTATUS
  719. NTAPI
  720. ZwSetInformationFile(
  721. IN HANDLE FileHandle,
  722. OUT PIO_STATUS_BLOCK IoStatusBlock,
  723. IN PVOID FileInformation,
  724. IN ULONG Length,
  725. IN FILE_INFORMATION_CLASS FileInformationClass
  726. );
  727. NTSYSAPI
  728. NTSTATUS
  729. NTAPI
  730. ZwSetQuotaInformationFile(
  731. IN HANDLE FileHandle,
  732. OUT PIO_STATUS_BLOCK IoStatusBlock,
  733. IN PVOID Buffer,
  734. IN ULONG Length
  735. );
  736. NTSYSAPI
  737. NTSTATUS
  738. NTAPI
  739. ZwSetVolumeInformationFile(
  740. IN HANDLE FileHandle,
  741. OUT PIO_STATUS_BLOCK IoStatusBlock,
  742. IN PVOID FsInformation,
  743. IN ULONG Length,
  744. IN FS_INFORMATION_CLASS FsInformationClass
  745. );
  746. NTSYSAPI
  747. NTSTATUS
  748. NTAPI
  749. ZwUnlockFile(
  750. IN HANDLE FileHandle,
  751. OUT PIO_STATUS_BLOCK IoStatusBlock,
  752. IN PLARGE_INTEGER ByteOffset,
  753. IN PLARGE_INTEGER Length,
  754. IN ULONG Key
  755. );
  756. NTSYSAPI
  757. NTSTATUS
  758. NTAPI
  759. ZwWriteFile(
  760. IN HANDLE FileHandle,
  761. IN HANDLE Event OPTIONAL,
  762. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  763. IN PVOID ApcContext OPTIONAL,
  764. OUT PIO_STATUS_BLOCK IoStatusBlock,
  765. IN PVOID Buffer,
  766. IN ULONG Length,
  767. IN PLARGE_INTEGER ByteOffset OPTIONAL,
  768. IN PULONG Key OPTIONAL
  769. );
  770. NTSYSAPI
  771. NTSTATUS
  772. NTAPI
  773. ZwWriteFileGather(
  774. IN HANDLE FileHandle,
  775. IN HANDLE Event OPTIONAL,
  776. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  777. IN PVOID ApcContext OPTIONAL,
  778. OUT PIO_STATUS_BLOCK IoStatusBlock,
  779. IN PFILE_SEGMENT_ELEMENT SegmentArray,
  780. IN ULONG Length,
  781. IN PLARGE_INTEGER ByteOffset OPTIONAL,
  782. IN PULONG Key OPTIONAL
  783. );
  784. NTSYSAPI
  785. NTSTATUS
  786. NTAPI
  787. ZwLoadDriver(
  788. IN PUNICODE_STRING DriverServiceName
  789. );
  790. NTSYSAPI
  791. NTSTATUS
  792. NTAPI
  793. ZwUnloadDriver(
  794. IN PUNICODE_STRING DriverServiceName
  795. );
  796. NTSYSAPI
  797. NTSTATUS
  798. NTAPI
  799. ZwCreateIoCompletion (
  800. OUT PHANDLE IoCompletionHandle,
  801. IN ACCESS_MASK DesiredAccess,
  802. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  803. IN ULONG Count OPTIONAL
  804. );
  805. NTSYSAPI
  806. NTSTATUS
  807. NTAPI
  808. ZwOpenIoCompletion (
  809. OUT PHANDLE IoCompletionHandle,
  810. IN ACCESS_MASK DesiredAccess,
  811. IN POBJECT_ATTRIBUTES ObjectAttributes
  812. );
  813. NTSYSAPI
  814. NTSTATUS
  815. NTAPI
  816. ZwQueryIoCompletion (
  817. IN HANDLE IoCompletionHandle,
  818. IN IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass,
  819. OUT PVOID IoCompletionInformation,
  820. IN ULONG IoCompletionInformationLength,
  821. OUT PULONG ReturnLength OPTIONAL
  822. );
  823. NTSYSAPI
  824. NTSTATUS
  825. NTAPI
  826. ZwSetIoCompletion (
  827. IN HANDLE IoCompletionHandle,
  828. IN ULONG KeyContext,
  829. IN PVOID ApcContext,
  830. IN NTSTATUS IoStatus,
  831. IN ULONG IoStatusInformation
  832. );
  833. NTSYSAPI
  834. NTSTATUS
  835. NTAPI
  836. ZwRemoveIoCompletion (
  837. IN HANDLE IoCompletionHandle,
  838. OUT PVOID *KeyContext,
  839. OUT PVOID *ApcContext,
  840. PIO_STATUS_BLOCK IoStatusBlock,
  841. IN PLARGE_INTEGER Timeout
  842. );
  843. NTSYSAPI
  844. NTSTATUS
  845. NTAPI
  846. ZwCallbackReturn (
  847. IN PVOID OutputBuffer OPTIONAL,
  848. IN ULONG OutputLength,
  849. IN NTSTATUS Status
  850. );
  851. NTSYSAPI
  852. NTSTATUS
  853. NTAPI
  854. ZwW32Call (
  855. IN ULONG ApiNumber,
  856. IN PVOID InputBuffer,
  857. IN ULONG InputLength,
  858. OUT PVOID *OutputBuffer,
  859. OUT PULONG OutputLength
  860. );
  861. NTSYSAPI
  862. NTSTATUS
  863. NTAPI
  864. ZwYieldExecution (
  865. VOID
  866. );
  867. NTSYSAPI
  868. NTSTATUS
  869. NTAPI
  870. ZwCreateChannel (
  871. OUT PHANDLE ChannelHandle,
  872. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL
  873. );
  874. NTSYSAPI
  875. NTSTATUS
  876. NTAPI
  877. ZwOpenChannel (
  878. OUT PHANDLE ChannelHandle,
  879. IN POBJECT_ATTRIBUTES ObjectAttributes
  880. );
  881. NTSYSAPI
  882. NTSTATUS
  883. NTAPI
  884. ZwListenChannel (
  885. IN HANDLE ChannelHandle,
  886. OUT PCHANNEL_MESSAGE *Message
  887. );
  888. NTSYSAPI
  889. NTSTATUS
  890. NTAPI
  891. ZwSendWaitReplyChannel (
  892. IN HANDLE ChannelHandle,
  893. IN PVOID Text,
  894. IN ULONG Length,
  895. OUT PCHANNEL_MESSAGE *Message
  896. );
  897. NTSYSAPI
  898. NTSTATUS
  899. NTAPI
  900. ZwReplyWaitSendChannel (
  901. IN PVOID Text,
  902. IN ULONG Length,
  903. OUT PCHANNEL_MESSAGE *Message
  904. );
  905. NTSYSAPI
  906. NTSTATUS
  907. NTAPI
  908. ZwSetContextChannel (
  909. IN PVOID Context
  910. );
  911. NTSYSAPI
  912. NTSTATUS
  913. NTAPI
  914. ZwCreatePort(
  915. OUT PHANDLE PortHandle,
  916. IN POBJECT_ATTRIBUTES ObjectAttributes,
  917. IN ULONG MaxConnectionInfoLength,
  918. IN ULONG MaxMessageLength,
  919. IN ULONG MaxPoolUsage
  920. );
  921. NTSYSAPI
  922. NTSTATUS
  923. NTAPI
  924. ZwConnectPort(
  925. OUT PHANDLE PortHandle,
  926. IN PUNICODE_STRING PortName,
  927. IN PSECURITY_QUALITY_OF_SERVICE SecurityQos,
  928. IN OUT PPORT_VIEW ClientView OPTIONAL,
  929. OUT PREMOTE_PORT_VIEW ServerView OPTIONAL,
  930. OUT PULONG MaxMessageLength OPTIONAL,
  931. IN OUT PVOID ConnectionInformation OPTIONAL,
  932. IN OUT PULONG ConnectionInformationLength OPTIONAL
  933. );
  934. NTSYSAPI
  935. NTSTATUS
  936. NTAPI
  937. ZwListenPort(
  938. IN HANDLE PortHandle,
  939. OUT PPORT_MESSAGE ConnectionRequest
  940. );
  941. NTSYSAPI
  942. NTSTATUS
  943. NTAPI
  944. ZwAcceptConnectPort(
  945. OUT PHANDLE PortHandle,
  946. IN PVOID PortContext,
  947. IN PPORT_MESSAGE ConnectionRequest,
  948. IN BOOLEAN AcceptConnection,
  949. IN OUT PPORT_VIEW ServerView OPTIONAL,
  950. OUT PREMOTE_PORT_VIEW ClientView OPTIONAL
  951. );
  952. NTSYSAPI
  953. NTSTATUS
  954. NTAPI
  955. ZwCompleteConnectPort(
  956. IN HANDLE PortHandle
  957. );
  958. NTSYSAPI
  959. NTSTATUS
  960. NTAPI
  961. ZwRequestPort(
  962. IN HANDLE PortHandle,
  963. IN PPORT_MESSAGE RequestMessage
  964. );
  965. NTSYSAPI
  966. NTSTATUS
  967. NTAPI
  968. ZwRequestWaitReplyPort(
  969. IN HANDLE PortHandle,
  970. IN PPORT_MESSAGE RequestMessage,
  971. OUT PPORT_MESSAGE ReplyMessage
  972. );
  973. NTSYSAPI
  974. NTSTATUS
  975. NTAPI
  976. ZwReplyPort(
  977. IN HANDLE PortHandle,
  978. IN PPORT_MESSAGE ReplyMessage
  979. );
  980. NTSYSAPI
  981. NTSTATUS
  982. NTAPI
  983. ZwReplyWaitReplyPort(
  984. IN HANDLE PortHandle,
  985. IN OUT PPORT_MESSAGE ReplyMessage
  986. );
  987. NTSYSAPI
  988. NTSTATUS
  989. NTAPI
  990. ZwReplyWaitReceivePort(
  991. IN HANDLE PortHandle,
  992. OUT PVOID *PortContext OPTIONAL,
  993. IN PPORT_MESSAGE ReplyMessage OPTIONAL,
  994. OUT PPORT_MESSAGE ReceiveMessage
  995. );
  996. NTSYSAPI
  997. NTSTATUS
  998. NTAPI
  999. ZwImpersonateClientOfPort(
  1000. IN HANDLE PortHandle,
  1001. IN PPORT_MESSAGE Message
  1002. );
  1003. NTSYSAPI
  1004. NTSTATUS
  1005. NTAPI
  1006. ZwReadRequestData(
  1007. IN HANDLE PortHandle,
  1008. IN PPORT_MESSAGE Message,
  1009. IN ULONG DataEntryIndex,
  1010. OUT PVOID Buffer,
  1011. IN ULONG BufferSize,
  1012. OUT PULONG NumberOfBytesRead OPTIONAL
  1013. );
  1014. NTSYSAPI
  1015. NTSTATUS
  1016. NTAPI
  1017. ZwWriteRequestData(
  1018. IN HANDLE PortHandle,
  1019. IN PPORT_MESSAGE Message,
  1020. IN ULONG DataEntryIndex,
  1021. IN PVOID Buffer,
  1022. IN ULONG BufferSize,
  1023. OUT PULONG NumberOfBytesWritten OPTIONAL
  1024. );
  1025. NTSYSAPI
  1026. NTSTATUS
  1027. NTAPI
  1028. ZwQueryInformationPort(
  1029. IN HANDLE PortHandle,
  1030. IN PORT_INFORMATION_CLASS PortInformationClass,
  1031. OUT PVOID PortInformation,
  1032. IN ULONG Length,
  1033. OUT PULONG ReturnLength OPTIONAL
  1034. );
  1035. NTSYSAPI
  1036. NTSTATUS
  1037. NTAPI
  1038. ZwCreateSection (
  1039. OUT PHANDLE SectionHandle,
  1040. IN ACCESS_MASK DesiredAccess,
  1041. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  1042. IN PLARGE_INTEGER MaximumSize OPTIONAL,
  1043. IN ULONG SectionPageProtection,
  1044. IN ULONG AllocationAttributes,
  1045. IN HANDLE FileHandle OPTIONAL
  1046. );
  1047. NTSYSAPI
  1048. NTSTATUS
  1049. NTAPI
  1050. ZwOpenSection(
  1051. OUT PHANDLE SectionHandle,
  1052. IN ACCESS_MASK DesiredAccess,
  1053. IN POBJECT_ATTRIBUTES ObjectAttributes
  1054. );
  1055. NTSYSAPI
  1056. NTSTATUS
  1057. NTAPI
  1058. ZwMapViewOfSection(
  1059. IN HANDLE SectionHandle,
  1060. IN HANDLE ProcessHandle,
  1061. IN OUT PVOID *BaseAddress,
  1062. IN ULONG ZeroBits,
  1063. IN ULONG CommitSize,
  1064. IN OUT PLARGE_INTEGER SectionOffset OPTIONAL,
  1065. IN OUT PULONG ViewSize,
  1066. IN SECTION_INHERIT InheritDisposition,
  1067. IN ULONG AllocationType,
  1068. IN ULONG Protect
  1069. );
  1070. NTSYSAPI
  1071. NTSTATUS
  1072. NTAPI
  1073. ZwUnmapViewOfSection(
  1074. IN HANDLE ProcessHandle,
  1075. IN PVOID BaseAddress
  1076. );
  1077. NTSYSAPI
  1078. NTSTATUS
  1079. NTAPI
  1080. ZwExtendSection(
  1081. IN HANDLE SectionHandle,
  1082. IN OUT PLARGE_INTEGER NewSectionSize
  1083. );
  1084. NTSYSAPI
  1085. NTSTATUS
  1086. NTAPI
  1087. ZwAllocateVirtualMemory(
  1088. IN HANDLE ProcessHandle,
  1089. IN OUT PVOID *BaseAddress,
  1090. IN ULONG ZeroBits,
  1091. IN OUT PULONG RegionSize,
  1092. IN ULONG AllocationType,
  1093. IN ULONG Protect
  1094. );
  1095. NTSYSAPI
  1096. NTSTATUS
  1097. NTAPI
  1098. ZwFreeVirtualMemory(
  1099. IN HANDLE ProcessHandle,
  1100. IN OUT PVOID *BaseAddress,
  1101. IN OUT PULONG RegionSize,
  1102. IN ULONG FreeType
  1103. );
  1104. NTSYSAPI
  1105. NTSTATUS
  1106. NTAPI
  1107. ZwReadVirtualMemory(
  1108. IN HANDLE ProcessHandle,
  1109. IN PVOID BaseAddress,
  1110. OUT PVOID Buffer,
  1111. IN ULONG BufferSize,
  1112. OUT PULONG NumberOfBytesRead OPTIONAL
  1113. );
  1114. NTSYSAPI
  1115. NTSTATUS
  1116. NTAPI
  1117. ZwWriteVirtualMemory(
  1118. IN HANDLE ProcessHandle,
  1119. OUT PVOID BaseAddress,
  1120. IN PVOID Buffer,
  1121. IN ULONG BufferSize,
  1122. OUT PULONG NumberOfBytesWritten OPTIONAL
  1123. );
  1124. NTSYSAPI
  1125. NTSTATUS
  1126. NTAPI
  1127. ZwFlushVirtualMemory(
  1128. IN HANDLE ProcessHandle,
  1129. IN OUT PVOID *BaseAddress,
  1130. IN OUT PULONG RegionSize,
  1131. OUT PIO_STATUS_BLOCK IoStatus
  1132. );
  1133. NTSYSAPI
  1134. NTSTATUS
  1135. NTAPI
  1136. ZwLockVirtualMemory(
  1137. IN HANDLE ProcessHandle,
  1138. IN OUT PVOID *BaseAddress,
  1139. IN OUT PULONG RegionSize,
  1140. IN ULONG MapType
  1141. );
  1142. NTSYSAPI
  1143. NTSTATUS
  1144. NTAPI
  1145. ZwUnlockVirtualMemory(
  1146. IN HANDLE ProcessHandle,
  1147. IN OUT PVOID *BaseAddress,
  1148. IN OUT PULONG RegionSize,
  1149. IN ULONG MapType
  1150. );
  1151. NTSYSAPI
  1152. NTSTATUS
  1153. NTAPI
  1154. ZwProtectVirtualMemory(
  1155. IN HANDLE ProcessHandle,
  1156. IN OUT PVOID *BaseAddress,
  1157. IN OUT PULONG RegionSize,
  1158. IN ULONG NewProtect,
  1159. OUT PULONG OldProtect
  1160. );
  1161. NTSYSAPI
  1162. NTSTATUS
  1163. NTAPI
  1164. ZwQueryVirtualMemory(
  1165. IN HANDLE ProcessHandle,
  1166. IN PVOID BaseAddress,
  1167. IN MEMORY_INFORMATION_CLASS MemoryInformationClass,
  1168. OUT PVOID MemoryInformation,
  1169. IN ULONG MemoryInformationLength,
  1170. OUT PULONG ReturnLength OPTIONAL
  1171. );
  1172. NTSYSAPI
  1173. NTSTATUS
  1174. NTAPI
  1175. ZwQuerySection(
  1176. IN HANDLE SectionHandle,
  1177. IN SECTION_INFORMATION_CLASS SectionInformationClass,
  1178. OUT PVOID SectionInformation,
  1179. IN ULONG SectionInformationLength,
  1180. OUT PULONG ReturnLength OPTIONAL
  1181. );
  1182. NTSYSAPI
  1183. NTSTATUS
  1184. NTAPI
  1185. ZwCreatePagingFile (
  1186. IN PUNICODE_STRING PageFileName,
  1187. IN PLARGE_INTEGER MinimumSize,
  1188. IN PLARGE_INTEGER MaximumSize,
  1189. IN ULONG Priority OPTIONAL
  1190. );
  1191. NTSYSAPI
  1192. NTSTATUS
  1193. NTAPI
  1194. ZwFlushInstructionCache (
  1195. IN HANDLE ProcessHandle,
  1196. IN PVOID BaseAddress OPTIONAL,
  1197. IN ULONG Length
  1198. );
  1199. NTSYSAPI
  1200. NTSTATUS
  1201. NTAPI
  1202. ZwFlushWriteBuffer (
  1203. VOID
  1204. );
  1205. NTSYSAPI
  1206. NTSTATUS
  1207. NTAPI
  1208. ZwQueryObject(
  1209. IN HANDLE Handle,
  1210. IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
  1211. OUT PVOID ObjectInformation,
  1212. IN ULONG Length,
  1213. OUT PULONG ReturnLength OPTIONAL
  1214. );
  1215. NTSYSAPI
  1216. NTSTATUS
  1217. NTAPI
  1218. ZwSetInformationObject(
  1219. IN HANDLE Handle,
  1220. IN OBJECT_INFORMATION_CLASS ObjectInformationClass,
  1221. IN PVOID ObjectInformation,
  1222. IN ULONG ObjectInformationLength
  1223. );
  1224. NTSYSAPI
  1225. NTSTATUS
  1226. NTAPI
  1227. ZwDuplicateObject(
  1228. IN HANDLE SourceProcessHandle,
  1229. IN HANDLE SourceHandle,
  1230. IN HANDLE TargetProcessHandle OPTIONAL,
  1231. OUT PHANDLE TargetHandle OPTIONAL,
  1232. IN ACCESS_MASK DesiredAccess,
  1233. IN ULONG HandleAttributes,
  1234. IN ULONG Options
  1235. );
  1236. NTSYSAPI
  1237. NTSTATUS
  1238. NTAPI
  1239. ZwMakeTemporaryObject(
  1240. IN HANDLE Handle
  1241. );
  1242. NTSYSAPI
  1243. NTSTATUS
  1244. NTAPI
  1245. ZwSignalAndWaitForSingleObject(
  1246. IN HANDLE SignalHandle,
  1247. IN HANDLE WaitHandle,
  1248. IN BOOLEAN Alertable,
  1249. IN PLARGE_INTEGER Timeout OPTIONAL
  1250. );
  1251. NTSYSAPI
  1252. NTSTATUS
  1253. NTAPI
  1254. ZwWaitForSingleObject(
  1255. IN HANDLE Handle,
  1256. IN BOOLEAN Alertable,
  1257. IN PLARGE_INTEGER Timeout OPTIONAL
  1258. );
  1259. NTSYSAPI
  1260. NTSTATUS
  1261. NTAPI
  1262. ZwWaitForMultipleObjects(
  1263. IN ULONG Count,
  1264. IN HANDLE Handles[],
  1265. IN WAIT_TYPE WaitType,
  1266. IN BOOLEAN Alertable,
  1267. IN PLARGE_INTEGER Timeout OPTIONAL
  1268. );
  1269. NTSYSAPI
  1270. NTSTATUS
  1271. NTAPI
  1272. ZwSetSecurityObject(
  1273. IN HANDLE Handle,
  1274. IN SECURITY_INFORMATION SecurityInformation,
  1275. IN PSECURITY_DESCRIPTOR SecurityDescriptor
  1276. );
  1277. NTSYSAPI
  1278. NTSTATUS
  1279. NTAPI
  1280. ZwQuerySecurityObject(
  1281. IN HANDLE Handle,
  1282. IN SECURITY_INFORMATION SecurityInformation,
  1283. OUT PSECURITY_DESCRIPTOR SecurityDescriptor,
  1284. IN ULONG Length,
  1285. OUT PULONG LengthNeeded
  1286. );
  1287. NTSYSAPI
  1288. NTSTATUS
  1289. NTAPI
  1290. ZwClose(
  1291. IN HANDLE Handle
  1292. );
  1293. NTSYSAPI
  1294. NTSTATUS
  1295. NTAPI
  1296. ZwCreateDirectoryObject(
  1297. OUT PHANDLE DirectoryHandle,
  1298. IN ACCESS_MASK DesiredAccess,
  1299. IN POBJECT_ATTRIBUTES ObjectAttributes
  1300. );
  1301. NTSYSAPI
  1302. NTSTATUS
  1303. NTAPI
  1304. ZwOpenDirectoryObject(
  1305. OUT PHANDLE DirectoryHandle,
  1306. IN ACCESS_MASK DesiredAccess,
  1307. IN POBJECT_ATTRIBUTES ObjectAttributes
  1308. );
  1309. NTSYSAPI
  1310. NTSTATUS
  1311. NTAPI
  1312. ZwQueryDirectoryObject(
  1313. IN HANDLE DirectoryHandle,
  1314. OUT PVOID Buffer,
  1315. IN ULONG Length,
  1316. IN BOOLEAN ReturnSingleEntry,
  1317. IN BOOLEAN RestartScan,
  1318. IN OUT PULONG Context,
  1319. OUT PULONG ReturnLength OPTIONAL
  1320. );
  1321. NTSYSAPI
  1322. NTSTATUS
  1323. NTAPI
  1324. ZwCreateSymbolicLinkObject(
  1325. OUT PHANDLE LinkHandle,
  1326. IN ACCESS_MASK DesiredAccess,
  1327. IN POBJECT_ATTRIBUTES ObjectAttributes,
  1328. IN PUNICODE_STRING LinkTarget
  1329. );
  1330. NTSYSAPI
  1331. NTSTATUS
  1332. NTAPI
  1333. ZwOpenSymbolicLinkObject(
  1334. OUT PHANDLE LinkHandle,
  1335. IN ACCESS_MASK DesiredAccess,
  1336. IN POBJECT_ATTRIBUTES ObjectAttributes
  1337. );
  1338. NTSYSAPI
  1339. NTSTATUS
  1340. NTAPI
  1341. ZwQuerySymbolicLinkObject(
  1342. IN HANDLE LinkHandle,
  1343. IN OUT PUNICODE_STRING LinkTarget,
  1344. OUT PULONG ReturnedLength OPTIONAL
  1345. );
  1346. NTSYSAPI
  1347. NTSTATUS
  1348. NTAPI
  1349. ZwGetPlugPlayEvent(
  1350. IN PPLUGPLAY_APC_ROUTINE PnPApcRoutine OPTIONAL,
  1351. IN PVOID PnPContext OPTIONAL,
  1352. OUT PPLUGPLAY_EVENT_BLOCK PnPEvent,
  1353. IN ULONG EventBufferLength
  1354. );
  1355. NTSYSAPI
  1356. NTSTATUS
  1357. NTAPI
  1358. ZwPlugPlayControl(
  1359. IN PLUGPLAY_CONTROL_CLASS PnPControlClass,
  1360. IN OUT PVOID PnPControlData,
  1361. IN ULONG PnPControlDataLength,
  1362. OUT PULONG RequiredLength OPTIONAL
  1363. );
  1364. NTSYSAPI
  1365. NTSTATUS
  1366. NTAPI
  1367. ZwSetSystemPowerState(
  1368. IN POWER_STATE SystemPowerState,
  1369. IN BOOLEAN NoResumeAlarm,
  1370. IN BOOLEAN ForcePowerDown
  1371. );
  1372. NTSYSAPI
  1373. NTSTATUS
  1374. NTAPI
  1375. ZwCreateProcess(
  1376. OUT PHANDLE ProcessHandle,
  1377. IN ACCESS_MASK DesiredAccess,
  1378. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  1379. IN HANDLE ParentProcess,
  1380. IN BOOLEAN InheritObjectTable,
  1381. IN HANDLE SectionHandle OPTIONAL,
  1382. IN HANDLE DebugPort OPTIONAL,
  1383. IN HANDLE ExceptionPort OPTIONAL
  1384. );
  1385. NTSYSAPI
  1386. NTSTATUS
  1387. NTAPI
  1388. ZwOpenProcess (
  1389. OUT PHANDLE ProcessHandle,
  1390. IN ACCESS_MASK DesiredAccess,
  1391. IN POBJECT_ATTRIBUTES ObjectAttributes,
  1392. IN PCLIENT_ID ClientId OPTIONAL
  1393. );
  1394. NTSYSAPI
  1395. NTSTATUS
  1396. NTAPI
  1397. ZwTerminateProcess(
  1398. IN HANDLE ProcessHandle OPTIONAL,
  1399. IN NTSTATUS ExitStatus
  1400. );
  1401. NTSYSAPI
  1402. NTSTATUS
  1403. NTAPI
  1404. ZwQueryInformationProcess(
  1405. IN HANDLE ProcessHandle,
  1406. IN PROCESSINFOCLASS ProcessInformationClass,
  1407. OUT PVOID ProcessInformation,
  1408. IN ULONG ProcessInformationLength,
  1409. OUT PULONG ReturnLength OPTIONAL
  1410. );
  1411. NTSYSAPI
  1412. NTSTATUS
  1413. NTAPI
  1414. ZwSetInformationProcess(
  1415. IN HANDLE ProcessHandle,
  1416. IN PROCESSINFOCLASS ProcessInformationClass,
  1417. IN PVOID ProcessInformation,
  1418. IN ULONG ProcessInformationLength
  1419. );
  1420. NTSYSAPI
  1421. NTSTATUS
  1422. NTAPI
  1423. ZwCreateThread(
  1424. OUT PHANDLE ThreadHandle,
  1425. IN ACCESS_MASK DesiredAccess,
  1426. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  1427. IN HANDLE ProcessHandle,
  1428. OUT PCLIENT_ID ClientId,
  1429. IN PCONTEXT ThreadContext,
  1430. IN PINITIAL_TEB InitialTeb,
  1431. IN BOOLEAN CreateSuspended
  1432. );
  1433. NTSYSAPI
  1434. NTSTATUS
  1435. NTAPI
  1436. ZwOpenThread (
  1437. OUT PHANDLE ThreadHandle,
  1438. IN ACCESS_MASK DesiredAccess,
  1439. IN POBJECT_ATTRIBUTES ObjectAttributes,
  1440. IN PCLIENT_ID ClientId OPTIONAL
  1441. );
  1442. NTSYSAPI
  1443. NTSTATUS
  1444. NTAPI
  1445. ZwTerminateThread(
  1446. IN HANDLE ThreadHandle OPTIONAL,
  1447. IN NTSTATUS ExitStatus
  1448. );
  1449. NTSYSAPI
  1450. NTSTATUS
  1451. NTAPI
  1452. ZwSuspendThread(
  1453. IN HANDLE ThreadHandle,
  1454. OUT PULONG PreviousSuspendCount OPTIONAL
  1455. );
  1456. NTSYSAPI
  1457. NTSTATUS
  1458. NTAPI
  1459. ZwResumeThread(
  1460. IN HANDLE ThreadHandle,
  1461. OUT PULONG PreviousSuspendCount OPTIONAL
  1462. );
  1463. NTSYSAPI
  1464. NTSTATUS
  1465. NTAPI
  1466. ZwGetContextThread(
  1467. IN HANDLE ThreadHandle,
  1468. IN OUT PCONTEXT ThreadContext
  1469. );
  1470. NTSYSAPI
  1471. NTSTATUS
  1472. NTAPI
  1473. ZwSetContextThread(
  1474. IN HANDLE ThreadHandle,
  1475. IN PCONTEXT ThreadContext
  1476. );
  1477. NTSYSAPI
  1478. NTSTATUS
  1479. NTAPI
  1480. ZwQueryInformationThread(
  1481. IN HANDLE ThreadHandle,
  1482. IN THREADINFOCLASS ThreadInformationClass,
  1483. OUT PVOID ThreadInformation,
  1484. IN ULONG ThreadInformationLength,
  1485. OUT PULONG ReturnLength OPTIONAL
  1486. );
  1487. NTSYSAPI
  1488. NTSTATUS
  1489. NTAPI
  1490. ZwSetInformationThread(
  1491. IN HANDLE ThreadHandle,
  1492. IN THREADINFOCLASS ThreadInformationClass,
  1493. IN PVOID ThreadInformation,
  1494. IN ULONG ThreadInformationLength
  1495. );
  1496. NTSYSAPI
  1497. NTSTATUS
  1498. NTAPI
  1499. ZwAlertThread(
  1500. IN HANDLE ThreadHandle
  1501. );
  1502. NTSYSAPI
  1503. NTSTATUS
  1504. NTAPI
  1505. ZwAlertResumeThread(
  1506. IN HANDLE ThreadHandle,
  1507. OUT PULONG PreviousSuspendCount OPTIONAL
  1508. );
  1509. NTSYSAPI
  1510. NTSTATUS
  1511. NTAPI
  1512. ZwImpersonateThread(
  1513. IN HANDLE ServerThreadHandle,
  1514. IN HANDLE ClientThreadHandle,
  1515. IN PSECURITY_QUALITY_OF_SERVICE SecurityQos
  1516. );
  1517. NTSYSAPI
  1518. NTSTATUS
  1519. NTAPI
  1520. ZwTestAlert(
  1521. VOID
  1522. );
  1523. NTSYSAPI
  1524. NTSTATUS
  1525. NTAPI
  1526. ZwRegisterThreadTerminatePort(
  1527. IN HANDLE PortHandle
  1528. );
  1529. NTSYSAPI
  1530. NTSTATUS
  1531. NTAPI
  1532. ZwSetLdtEntries(
  1533. IN ULONG Selector0,
  1534. IN ULONG Entry0Low,
  1535. IN ULONG Entry0Hi,
  1536. IN ULONG Selector1,
  1537. IN ULONG Entry1Low,
  1538. IN ULONG Entry1High
  1539. );
  1540. NTSYSAPI
  1541. NTSTATUS
  1542. NTAPI
  1543. ZwQueueApcThread(
  1544. IN HANDLE ThreadHandle,
  1545. IN PPS_APC_ROUTINE ApcRoutine,
  1546. IN PVOID ApcArgument1,
  1547. IN PVOID ApcArgument2,
  1548. IN PVOID ApcArgument3
  1549. );
  1550. NTSYSAPI
  1551. NTSTATUS
  1552. NTAPI
  1553. ZwCreateKey(
  1554. OUT PHANDLE KeyHandle,
  1555. IN ACCESS_MASK DesiredAccess,
  1556. IN POBJECT_ATTRIBUTES ObjectAttributes,
  1557. IN ULONG TitleIndex,
  1558. IN PUNICODE_STRING Class OPTIONAL,
  1559. IN ULONG CreateOptions,
  1560. OUT PULONG Disposition OPTIONAL
  1561. );
  1562. NTSYSAPI
  1563. NTSTATUS
  1564. NTAPI
  1565. ZwDeleteKey(
  1566. IN HANDLE KeyHandle
  1567. );
  1568. NTSYSAPI
  1569. NTSTATUS
  1570. NTAPI
  1571. ZwDeleteValueKey(
  1572. IN HANDLE KeyHandle,
  1573. IN PUNICODE_STRING ValueName
  1574. );
  1575. NTSYSAPI
  1576. NTSTATUS
  1577. NTAPI
  1578. ZwEnumerateKey(
  1579. IN HANDLE KeyHandle,
  1580. IN ULONG Index,
  1581. IN KEY_INFORMATION_CLASS KeyInformationClass,
  1582. OUT PVOID KeyInformation,
  1583. IN ULONG Length,
  1584. OUT PULONG ResultLength
  1585. );
  1586. NTSYSAPI
  1587. NTSTATUS
  1588. NTAPI
  1589. ZwEnumerateValueKey(
  1590. IN HANDLE KeyHandle,
  1591. IN ULONG Index,
  1592. IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
  1593. OUT PVOID KeyValueInformation,
  1594. IN ULONG Length,
  1595. OUT PULONG ResultLength
  1596. );
  1597. NTSYSAPI
  1598. NTSTATUS
  1599. NTAPI
  1600. ZwFlushKey(
  1601. IN HANDLE KeyHandle
  1602. );
  1603. NTSYSAPI
  1604. NTSTATUS
  1605. NTAPI
  1606. ZwInitializeRegistry(
  1607. IN BOOLEAN SetupBoot
  1608. );
  1609. NTSYSAPI
  1610. NTSTATUS
  1611. NTAPI
  1612. ZwNotifyChangeKey(
  1613. IN HANDLE KeyHandle,
  1614. IN HANDLE Event OPTIONAL,
  1615. IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
  1616. IN PVOID ApcContext OPTIONAL,
  1617. OUT PIO_STATUS_BLOCK IoStatusBlock,
  1618. IN ULONG CompletionFilter,
  1619. IN BOOLEAN WatchTree,
  1620. OUT PVOID Buffer,
  1621. IN ULONG BufferSize,
  1622. IN BOOLEAN Asynchronous
  1623. );
  1624. NTSYSAPI
  1625. NTSTATUS
  1626. NTAPI
  1627. ZwLoadKey(
  1628. IN POBJECT_ATTRIBUTES TargetKey,
  1629. IN POBJECT_ATTRIBUTES SourceFile
  1630. );
  1631. NTSYSAPI
  1632. NTSTATUS
  1633. NTAPI
  1634. ZwLoadKey2(
  1635. IN POBJECT_ATTRIBUTES TargetKey,
  1636. IN POBJECT_ATTRIBUTES SourceFile,
  1637. IN ULONG Flags
  1638. );
  1639. NTSYSAPI
  1640. NTSTATUS
  1641. NTAPI
  1642. ZwOpenKey(
  1643. OUT PHANDLE KeyHandle,
  1644. IN ACCESS_MASK DesiredAccess,
  1645. IN POBJECT_ATTRIBUTES ObjectAttributes
  1646. );
  1647. NTSYSAPI
  1648. NTSTATUS
  1649. NTAPI
  1650. ZwQueryKey(
  1651. IN HANDLE KeyHandle,
  1652. IN KEY_INFORMATION_CLASS KeyInformationClass,
  1653. OUT PVOID KeyInformation,
  1654. IN ULONG Length,
  1655. OUT PULONG ResultLength
  1656. );
  1657. NTSYSAPI
  1658. NTSTATUS
  1659. NTAPI
  1660. ZwQueryValueKey(
  1661. IN HANDLE KeyHandle,
  1662. IN PUNICODE_STRING ValueName,
  1663. IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
  1664. OUT PVOID KeyValueInformation,
  1665. IN ULONG Length,
  1666. OUT PULONG ResultLength
  1667. );
  1668. NTSYSAPI
  1669. NTSTATUS
  1670. NTAPI
  1671. ZwQueryMultipleValueKey(
  1672. IN HANDLE KeyHandle,
  1673. IN PKEY_VALUE_ENTRY ValueEntries,
  1674. IN ULONG EntryCount,
  1675. OUT PVOID ValueBuffer,
  1676. IN OUT PULONG BufferLength,
  1677. OUT OPTIONAL PULONG RequiredBufferLength
  1678. );
  1679. NTSYSAPI
  1680. NTSTATUS
  1681. NTAPI
  1682. ZwReplaceKey(
  1683. IN POBJECT_ATTRIBUTES NewFile,
  1684. IN HANDLE TargetHandle,
  1685. IN POBJECT_ATTRIBUTES OldFile
  1686. );
  1687. NTSYSAPI
  1688. NTSTATUS
  1689. NTAPI
  1690. ZwRestoreKey(
  1691. IN HANDLE KeyHandle,
  1692. IN HANDLE FileHandle,
  1693. IN ULONG Flags
  1694. );
  1695. NTSYSAPI
  1696. NTSTATUS
  1697. NTAPI
  1698. ZwSaveKey(
  1699. IN HANDLE KeyHandle,
  1700. IN HANDLE FileHandle
  1701. );
  1702. NTSYSAPI
  1703. NTSTATUS
  1704. NTAPI
  1705. ZwSetValueKey(
  1706. IN HANDLE KeyHandle,
  1707. IN PUNICODE_STRING ValueName,
  1708. IN ULONG TitleIndex OPTIONAL,
  1709. IN ULONG Type,
  1710. IN PVOID Data,
  1711. IN ULONG DataSize
  1712. );
  1713. NTSYSAPI
  1714. NTSTATUS
  1715. NTAPI
  1716. ZwUnloadKey(
  1717. IN POBJECT_ATTRIBUTES TargetKey
  1718. );
  1719. NTSYSAPI
  1720. NTSTATUS
  1721. NTAPI
  1722. ZwSetInformationKey(
  1723. IN HANDLE KeyHandle,
  1724. IN KEY_SET_INFORMATION_CLASS KeySetInformationClass,
  1725. IN PVOID KeySetInformation,
  1726. IN ULONG KeySetInformationLength
  1727. );
  1728. NTSYSAPI
  1729. NTSTATUS
  1730. NTAPI
  1731. ZwAccessCheck (
  1732. IN PSECURITY_DESCRIPTOR SecurityDescriptor,
  1733. IN HANDLE ClientToken,
  1734. IN ACCESS_MASK DesiredAccess,
  1735. IN PGENERIC_MAPPING GenericMapping,
  1736. OUT PPRIVILEGE_SET PrivilegeSet,
  1737. IN OUT PULONG PrivilegeSetLength,
  1738. OUT PACCESS_MASK GrantedAccess,
  1739. OUT PNTSTATUS AccessStatus
  1740. );
  1741. NTSYSAPI
  1742. NTSTATUS
  1743. NTAPI
  1744. ZwCreateToken(
  1745. OUT PHANDLE TokenHandle,
  1746. IN ACCESS_MASK DesiredAccess,
  1747. IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  1748. IN TOKEN_TYPE TokenType,
  1749. IN PLUID AuthenticationId,
  1750. IN PLARGE_INTEGER ExpirationTime,
  1751. IN PTOKEN_USER User,
  1752. IN PTOKEN_GROUPS Groups,
  1753. IN PTOKEN_PRIVILEGES Privileges,
  1754. IN PTOKEN_OWNER Owner OPTIONAL,
  1755. IN PTOKEN_PRIMARY_GROUP PrimaryGroup,
  1756. IN PTOKEN_DEFAULT_DACL DefaultDacl OPTIONAL,
  1757. IN PTOKEN_SOURCE TokenSource
  1758. );
  1759. NTSYSAPI
  1760. NTSTATUS
  1761. NTAPI
  1762. ZwOpenProcessToken(
  1763. IN HANDLE ProcessHandle,
  1764. IN ACCESS_MASK DesiredAccess,
  1765. OUT PHANDLE TokenHandle
  1766. );
  1767. NTSYSAPI
  1768. NTSTATUS
  1769. NTAPI
  1770. ZwOpenThreadToken(
  1771. IN HANDLE ThreadHandle,
  1772. IN ACCESS_MASK DesiredAccess,
  1773. IN BOOLEAN OpenAsSelf,
  1774. OUT PHANDLE TokenHandle
  1775. );
  1776. NTSYSAPI
  1777. NTSTATUS
  1778. NTAPI
  1779. ZwDuplicateToken(
  1780. IN HANDLE ExistingTokenHandle,
  1781. IN ACCESS_MASK DesiredAccess,
  1782. IN POBJECT_ATTRIBUTES ObjectAttributes,
  1783. IN BOOLEAN EffectiveOnly,
  1784. IN TOKEN_TYPE TokenType,
  1785. OUT PHANDLE NewTokenHandle
  1786. );
  1787. NTSYSAPI
  1788. NTSTATUS
  1789. NTAPI
  1790. ZwQueryInformationToken (
  1791. IN HANDLE TokenHandle,
  1792. IN TOKEN_INFORMATION_CLASS TokenInformationClass,
  1793. OUT PVOID TokenInformation,
  1794. IN ULONG TokenInformationLength,
  1795. OUT PULONG ReturnLength
  1796. );
  1797. NTSYSAPI
  1798. NTSTATUS
  1799. NTAPI
  1800. ZwSetInformationToken (
  1801. IN HANDLE TokenHandle,
  1802. IN TOKEN_INFORMATION_CLASS TokenInformationClass,
  1803. IN PVOID TokenInformation,
  1804. IN ULONG TokenInformationLength
  1805. );
  1806. NTSYSAPI
  1807. NTSTATUS
  1808. NTAPI
  1809. ZwAdjustPrivilegesToken (
  1810. IN HANDLE TokenHandle,
  1811. IN BOOLEAN DisableAllPrivileges,
  1812. IN PTOKEN_PRIVILEGES NewState OPTIONAL,
  1813. IN ULONG BufferLength OPTIONAL,
  1814. IN PTOKEN_PRIVILEGES PreviousState OPTIONAL,
  1815. OUT PULONG ReturnLength
  1816. );
  1817. NTSYSAPI
  1818. NTSTATUS
  1819. NTAPI
  1820. ZwAdjustGroupsToken (
  1821. IN HANDLE TokenHandle,
  1822. IN BOOLEAN ResetToDefault,
  1823. IN PTOKEN_GROUPS NewState OPTIONAL,
  1824. IN ULONG BufferLength OPTIONAL,
  1825. IN PTOKEN_GROUPS PreviousState OPTIONAL,
  1826. OUT PULONG ReturnLength
  1827. );
  1828. NTSYSAPI
  1829. NTSTATUS
  1830. NTAPI
  1831. ZwPrivilegeCheck (
  1832. IN HANDLE ClientToken,
  1833. IN OUT PPRIVILEGE_SET RequiredPrivileges,
  1834. OUT PBOOLEAN Result
  1835. );
  1836. NTSYSAPI
  1837. NTSTATUS
  1838. NTAPI
  1839. ZwAccessCheckAndAuditAlarm (
  1840. IN PUNICODE_STRING SubsystemName,
  1841. IN PVOID HandleId,
  1842. IN PUNICODE_STRING ObjectTypeName,
  1843. IN PUNICODE_STRING ObjectName,
  1844. IN PSECURITY_DESCRIPTOR SecurityDescriptor,
  1845. IN ACCESS_MASK DesiredAccess,
  1846. IN PGENERIC_MAPPING GenericMapping,
  1847. IN BOOLEAN ObjectCreation,
  1848. OUT PACCESS_MASK GrantedAccess,
  1849. OUT PNTSTATUS AccessStatus,
  1850. OUT PBOOLEAN GenerateOnClose
  1851. );
  1852. NTSYSAPI
  1853. NTSTATUS
  1854. NTAPI
  1855. ZwOpenObjectAuditAlarm (
  1856. IN PUNICODE_STRING SubsystemName,
  1857. IN PVOID HandleId OPTIONAL,
  1858. IN PUNICODE_STRING ObjectTypeName,
  1859. IN PUNICODE_STRING ObjectName,
  1860. IN PSECURITY_DESCRIPTOR SecurityDescriptor OPTIONAL,
  1861. IN HANDLE ClientToken,
  1862. IN ACCESS_MASK DesiredAccess,
  1863. IN ACCESS_MASK GrantedAccess,
  1864. IN PPRIVILEGE_SET Privileges OPTIONAL,
  1865. IN BOOLEAN ObjectCreation,
  1866. IN BOOLEAN AccessGranted,
  1867. OUT PBOOLEAN GenerateOnClose
  1868. );
  1869. NTSYSAPI
  1870. NTSTATUS
  1871. NTAPI
  1872. ZwPrivilegeObjectAuditAlarm (
  1873. IN PUNICODE_STRING SubsystemName,
  1874. IN PVOID HandleId,
  1875. IN HANDLE ClientToken,
  1876. IN ACCESS_MASK DesiredAccess,
  1877. IN PPRIVILEGE_SET Privileges,
  1878. IN BOOLEAN AccessGranted
  1879. );
  1880. NTSYSAPI
  1881. NTSTATUS
  1882. NTAPI
  1883. ZwCloseObjectAuditAlarm (
  1884. IN PUNICODE_STRING SubsystemName,
  1885. IN PVOID HandleId,
  1886. IN BOOLEAN GenerateOnClose
  1887. );
  1888. NTSYSAPI
  1889. NTSTATUS
  1890. NTAPI
  1891. ZwDeleteObjectAuditAlarm (
  1892. IN PUNICODE_STRING SubsystemName,
  1893. IN PVOID HandleId,
  1894. IN BOOLEAN GenerateOnClose
  1895. );
  1896. NTSYSAPI
  1897. NTSTATUS
  1898. NTAPI
  1899. ZwPrivilegedServiceAuditAlarm (
  1900. IN PUNICODE_STRING SubsystemName,
  1901. IN PUNICODE_STRING ServiceName,
  1902. IN HANDLE ClientToken,
  1903. IN PPRIVILEGE_SET Privileges,
  1904. IN BOOLEAN AccessGranted
  1905. );
  1906. NTSYSAPI
  1907. NTSTATUS
  1908. NTAPI
  1909. ZwContinue (
  1910. IN PCONTEXT ContextRecord,
  1911. IN BOOLEAN TestAlert
  1912. );
  1913. NTSYSAPI
  1914. NTSTATUS
  1915. NTAPI
  1916. ZwRaiseException (
  1917. IN PEXCEPTION_RECORD ExceptionRecord,
  1918. IN PCONTEXT ContextRecord,
  1919. IN BOOLEAN FirstChance
  1920. );