?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
MinGWify 'depends'
[msysgit.git] / mingw / include / ddk / ntapi.h
blob86237722df57e69b3fad2ed6a0039a69aded71b3
1 /*
2 * ntapi.h
3 *
4 * Windows NT Native API
5 *
6 * Most structures in this file is obtained from Windows NT/2000 Native API
7 * Reference by Gary Nebbett, ISBN 1578701996.
8 *
9 * This file is part of the w32api package.
10 *
11 * Contributors:
12 * Created by Casper S. Hornstrup <chorns@users.sourceforge.net>
13 *
14 * THIS SOFTWARE IS NOT COPYRIGHTED
15 *
16 * This source code is offered for use in the public domain. You may
17 * use, modify or distribute it freely.
18 *
19 * This code is distributed in the hope that it will be useful but
20 * WITHOUT ANY WARRANTY. ALL WARRANTIES, EXPRESS OR IMPLIED ARE HEREBY
21 * DISCLAIMED. This includes but is not limited to warranties of
22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
23 *
24 */
25
26 #ifndef __NTAPI_H
27 #define __NTAPI_H
28
29 #if __GNUC__ >= 3
30 #pragma GCC system_header
31 #endif
32
33 #ifdef __cplusplus
34 extern "C" {
35 #endif
36
37 #include <stdarg.h>
38 #include <winbase.h>
39 #include "ntddk.h"
40 #include "ntpoapi.h"
41
42 #pragma pack(push,4)
43
44 typedef struct _PEB *PPEB;
45
46 /* FIXME: Unknown definitions */
47 typedef PVOID POBJECT_TYPE_LIST;
48 typedef PVOID PEXECUTION_STATE;
49 typedef PVOID PLANGID;
50
51 #ifndef NtCurrentProcess
52 #define NtCurrentProcess() ((HANDLE)0xFFFFFFFF)
53 #endif /* NtCurrentProcess */
54 #ifndef NtCurrentThread
55 #define NtCurrentThread() ((HANDLE)0xFFFFFFFE)
56 #endif /* NtCurrentThread */
57
58 /* System information and control */
59
60 typedef enum _SYSTEM_INFORMATION_CLASS {
61 SystemInformationClassMin = 0,
62 SystemBasicInformation = 0,
63 SystemProcessorInformation = 1,
64 SystemPerformanceInformation = 2,
65 SystemTimeOfDayInformation = 3,
66 SystemPathInformation = 4,
67 SystemNotImplemented1 = 4,
68 SystemProcessInformation = 5,
69 SystemProcessesAndThreadsInformation = 5,
70 SystemCallCountInfoInformation = 6,
71 SystemCallCounts = 6,
72 SystemDeviceInformation = 7,
73 SystemConfigurationInformation = 7,
74 SystemProcessorPerformanceInformation = 8,
75 SystemProcessorTimes = 8,
76 SystemFlagsInformation = 9,
77 SystemGlobalFlag = 9,
78 SystemCallTimeInformation = 10,
79 SystemNotImplemented2 = 10,
80 SystemModuleInformation = 11,
81 SystemLocksInformation = 12,
82 SystemLockInformation = 12,
83 SystemStackTraceInformation = 13,
84 SystemNotImplemented3 = 13,
85 SystemPagedPoolInformation = 14,
86 SystemNotImplemented4 = 14,
87 SystemNonPagedPoolInformation = 15,
88 SystemNotImplemented5 = 15,
89 SystemHandleInformation = 16,
90 SystemObjectInformation = 17,
91 SystemPageFileInformation = 18,
92 SystemPagefileInformation = 18,
93 SystemVdmInstemulInformation = 19,
94 SystemInstructionEmulationCounts = 19,
95 SystemVdmBopInformation = 20,
96 SystemInvalidInfoClass1 = 20,
97 SystemFileCacheInformation = 21,
98 SystemCacheInformation = 21,
99 SystemPoolTagInformation = 22,
100 SystemInterruptInformation = 23,
101 SystemProcessorStatistics = 23,
102 SystemDpcBehaviourInformation = 24,
103 SystemDpcInformation = 24,
104 SystemFullMemoryInformation = 25,
105 SystemNotImplemented6 = 25,
106 SystemLoadImage = 26,
107 SystemUnloadImage = 27,
108 SystemTimeAdjustmentInformation = 28,
109 SystemTimeAdjustment = 28,
110 SystemSummaryMemoryInformation = 29,
111 SystemNotImplemented7 = 29,
112 SystemNextEventIdInformation = 30,
113 SystemNotImplemented8 = 30,
114 SystemEventIdsInformation = 31,
115 SystemNotImplemented9 = 31,
116 SystemCrashDumpInformation = 32,
117 SystemExceptionInformation = 33,
118 SystemCrashDumpStateInformation = 34,
119 SystemKernelDebuggerInformation = 35,
120 SystemContextSwitchInformation = 36,
121 SystemRegistryQuotaInformation = 37,
122 SystemLoadAndCallImage = 38,
123 SystemPrioritySeparation = 39,
124 SystemPlugPlayBusInformation = 40,
125 SystemNotImplemented10 = 40,
126 SystemDockInformation = 41,
127 SystemNotImplemented11 = 41,
128 /* SystemPowerInformation = 42, Conflicts with POWER_INFORMATION_LEVEL 1 */
129 SystemInvalidInfoClass2 = 42,
130 SystemProcessorSpeedInformation = 43,
131 SystemInvalidInfoClass3 = 43,
132 SystemCurrentTimeZoneInformation = 44,
133 SystemTimeZoneInformation = 44,
134 SystemLookasideInformation = 45,
135 SystemSetTimeSlipEvent = 46,
136 SystemCreateSession = 47,
137 SystemDeleteSession = 48,
138 SystemInvalidInfoClass4 = 49,
139 SystemRangeStartInformation = 50,
140 SystemVerifierInformation = 51,
141 SystemAddVerifier = 52,
142 SystemSessionProcessesInformation = 53,
143 SystemInformationClassMax
144 } SYSTEM_INFORMATION_CLASS;
145
146 typedef struct _SYSTEM_BASIC_INFORMATION {
147 ULONG Unknown;
148 ULONG MaximumIncrement;
149 ULONG PhysicalPageSize;
150 ULONG NumberOfPhysicalPages;
151 ULONG LowestPhysicalPage;
152 ULONG HighestPhysicalPage;
153 ULONG AllocationGranularity;
154 ULONG LowestUserAddress;
155 ULONG HighestUserAddress;
156 ULONG ActiveProcessors;
157 UCHAR NumberProcessors;
158 } SYSTEM_BASIC_INFORMATION, *PSYSTEM_BASIC_INFORMATION;
159
160 typedef struct _SYSTEM_PROCESSOR_INFORMATION {
161 USHORT ProcessorArchitecture;
162 USHORT ProcessorLevel;
163 USHORT ProcessorRevision;
164 USHORT Unknown;
165 ULONG FeatureBits;
166 } SYSTEM_PROCESSOR_INFORMATION, *PSYSTEM_PROCESSOR_INFORMATION;
167
168 typedef struct _SYSTEM_PERFORMANCE_INFORMATION {
169 LARGE_INTEGER IdleTime;
170 LARGE_INTEGER ReadTransferCount;
171 LARGE_INTEGER WriteTransferCount;
172 LARGE_INTEGER OtherTransferCount;
173 ULONG ReadOperationCount;
174 ULONG WriteOperationCount;
175 ULONG OtherOperationCount;
176 ULONG AvailablePages;
177 ULONG TotalCommittedPages;
178 ULONG TotalCommitLimit;
179 ULONG PeakCommitment;
180 ULONG PageFaults;
181 ULONG WriteCopyFaults;
182 ULONG TransitionFaults;
183 ULONG CacheTransitionFaults;
184 ULONG DemandZeroFaults;
185 ULONG PagesRead;
186 ULONG PageReadIos;
187 ULONG CacheReads;
188 ULONG CacheIos;
189 ULONG PagefilePagesWritten;
190 ULONG PagefilePageWriteIos;
191 ULONG MappedFilePagesWritten;
192 ULONG MappedFilePageWriteIos;
193 ULONG PagedPoolUsage;
194 ULONG NonPagedPoolUsage;
195 ULONG PagedPoolAllocs;
196 ULONG PagedPoolFrees;
197 ULONG NonPagedPoolAllocs;
198 ULONG NonPagedPoolFrees;
199 ULONG TotalFreeSystemPtes;
200 ULONG SystemCodePage;
201 ULONG TotalSystemDriverPages;
202 ULONG TotalSystemCodePages;
203 ULONG SmallNonPagedLookasideListAllocateHits;
204 ULONG SmallPagedLookasideListAllocateHits;
205 ULONG Reserved3;
206 ULONG MmSystemCachePage;
207 ULONG PagedPoolPage;
208 ULONG SystemDriverPage;
209 ULONG FastReadNoWait;
210 ULONG FastReadWait;
211 ULONG FastReadResourceMiss;
212 ULONG FastReadNotPossible;
213 ULONG FastMdlReadNoWait;
214 ULONG FastMdlReadWait;
215 ULONG FastMdlReadResourceMiss;
216 ULONG FastMdlReadNotPossible;
217 ULONG MapDataNoWait;
218 ULONG MapDataWait;
219 ULONG MapDataNoWaitMiss;
220 ULONG MapDataWaitMiss;
221 ULONG PinMappedDataCount;
222 ULONG PinReadNoWait;
223 ULONG PinReadWait;
224 ULONG PinReadNoWaitMiss;
225 ULONG PinReadWaitMiss;
226 ULONG CopyReadNoWait;
227 ULONG CopyReadWait;
228 ULONG CopyReadNoWaitMiss;
229 ULONG CopyReadWaitMiss;
230 ULONG MdlReadNoWait;
231 ULONG MdlReadWait;
232 ULONG MdlReadNoWaitMiss;
233 ULONG MdlReadWaitMiss;
234 ULONG ReadAheadIos;
235 ULONG LazyWriteIos;
236 ULONG LazyWritePages;
237 ULONG DataFlushes;
238 ULONG DataPages;
239 ULONG ContextSwitches;
240 ULONG FirstLevelTbFills;
241 ULONG SecondLevelTbFills;
242 ULONG SystemCalls;
243 } SYSTEM_PERFORMANCE_INFORMATION, *PSYSTEM_PERFORMANCE_INFORMATION;
244
245 typedef struct _SYSTEM_TIME_OF_DAY_INFORMATION {
246 LARGE_INTEGER BootTime;
247 LARGE_INTEGER CurrentTime;
248 LARGE_INTEGER TimeZoneBias;
249 ULONG CurrentTimeZoneId;
250 } SYSTEM_TIME_OF_DAY_INFORMATION, *PSYSTEM_TIME_OF_DAY_INFORMATION;
251
252 typedef struct _VM_COUNTERS {
253 ULONG PeakVirtualSize;
254 ULONG VirtualSize;
255 ULONG PageFaultCount;
256 ULONG PeakWorkingSetSize;
257 ULONG WorkingSetSize;
258 ULONG QuotaPeakPagedPoolUsage;
259 ULONG QuotaPagedPoolUsage;
260 ULONG QuotaPeakNonPagedPoolUsage;
261 ULONG QuotaNonPagedPoolUsage;
262 ULONG PagefileUsage;
263 ULONG PeakPagefileUsage;
264 } VM_COUNTERS;
265
266 typedef enum _THREAD_STATE {
267 StateInitialized,
268 StateReady,
269 StateRunning,
270 StateStandby,
271 StateTerminated,
272 StateWait,
273 StateTransition,
274 StateUnknown
275 } THREAD_STATE;
276
277 typedef struct _SYSTEM_THREADS {
278 LARGE_INTEGER KernelTime;
279 LARGE_INTEGER UserTime;
280 LARGE_INTEGER CreateTime;
281 ULONG WaitTime;
282 PVOID StartAddress;
283 CLIENT_ID ClientId;
284 KPRIORITY Priority;
285 KPRIORITY BasePriority;
286 ULONG ContextSwitchCount;
287 THREAD_STATE State;
288 KWAIT_REASON WaitReason;
289 } SYSTEM_THREADS, *PSYSTEM_THREADS;
290
291 typedef struct _SYSTEM_PROCESSES {
292 ULONG NextEntryDelta;
293 ULONG ThreadCount;
294 ULONG Reserved1[6];
295 LARGE_INTEGER CreateTime;
296 LARGE_INTEGER UserTime;
297 LARGE_INTEGER KernelTime;
298 UNICODE_STRING ProcessName;
299 KPRIORITY BasePriority;
300 ULONG ProcessId;
301 ULONG InheritedFromProcessId;
302 ULONG HandleCount;
303 ULONG Reserved2[2];
304 VM_COUNTERS VmCounters;
305 IO_COUNTERS IoCounters;
306 SYSTEM_THREADS Threads[1];
307 } SYSTEM_PROCESSES, *PSYSTEM_PROCESSES;
308
309 typedef struct _SYSTEM_CALLS_INFORMATION {
310 ULONG Size;
311 ULONG NumberOfDescriptorTables;
312 ULONG NumberOfRoutinesInTable[1];
313 ULONG CallCounts[ANYSIZE_ARRAY];
314 } SYSTEM_CALLS_INFORMATION, *PSYSTEM_CALLS_INFORMATION;
315
316 typedef struct _SYSTEM_CONFIGURATION_INFORMATION {
317 ULONG DiskCount;
318 ULONG FloppyCount;
319 ULONG CdRomCount;
320 ULONG TapeCount;
321 ULONG SerialCount;
322 ULONG ParallelCount;
323 } SYSTEM_CONFIGURATION_INFORMATION, *PSYSTEM_CONFIGURATION_INFORMATION;
324
325 typedef struct _SYSTEM_PROCESSOR_TIMES {
326 LARGE_INTEGER IdleTime;
327 LARGE_INTEGER KernelTime;
328 LARGE_INTEGER UserTime;
329 LARGE_INTEGER DpcTime;
330 LARGE_INTEGER InterruptTime;
331 ULONG InterruptCount;
332 } SYSTEM_PROCESSOR_TIMES, *PSYSTEM_PROCESSOR_TIMES;
333
334 /* SYSTEM_GLOBAL_FLAG.GlobalFlag constants */
335 #define FLG_STOP_ON_EXCEPTION 0x00000001
336 #define FLG_SHOW_LDR_SNAPS 0x00000002
337 #define FLG_DEBUG_INITIAL_COMMAND 0x00000004
338 #define FLG_STOP_ON_HUNG_GUI 0x00000008
339 #define FLG_HEAP_ENABLE_TAIL_CHECK 0x00000010
340 #define FLG_HEAP_ENABLE_FREE_CHECK 0x00000020
341 #define FLG_HEAP_VALIDATE_PARAMETERS 0x00000040
342 #define FLG_HEAP_VALIDATE_ALL 0x00000080
343 #define FLG_POOL_ENABLE_TAIL_CHECK 0x00000100
344 #define FLG_POOL_ENABLE_FREE_CHECK 0x00000200
345 #define FLG_POOL_ENABLE_TAGGING 0x00000400
346 #define FLG_HEAP_ENABLE_TAGGING 0x00000800
347 #define FLG_USER_STACK_TRACE_DB 0x00001000
348 #define FLG_KERNEL_STACK_TRACE_DB 0x00002000
349 #define FLG_MAINTAIN_OBJECT_TYPELIST 0x00004000
350 #define FLG_HEAP_ENABLE_TAG_BY_DLL 0x00008000
351 #define FLG_IGNORE_DEBUG_PRIV 0x00010000
352 #define FLG_ENABLE_CSRDEBUG 0x00020000
353 #define FLG_ENABLE_KDEBUG_SYMBOL_LOAD 0x00040000
354 #define FLG_DISABLE_PAGE_KERNEL_STACKS 0x00080000
355 #define FLG_HEAP_ENABLE_CALL_TRACING 0x00100000
356 #define FLG_HEAP_DISABLE_COALESCING 0x00200000
357 #define FLG_ENABLE_CLOSE_EXCEPTIONS 0x00400000
358 #define FLG_ENABLE_EXCEPTION_LOGGING 0x00800000
359 #define FLG_ENABLE_DBGPRINT_BUFFERING 0x08000000
360
361 typedef struct _SYSTEM_GLOBAL_FLAG {
362 ULONG GlobalFlag;
363 } SYSTEM_GLOBAL_FLAG, *PSYSTEM_GLOBAL_FLAG;
364
365 typedef struct _SYSTEM_MODULE_INFORMATION_ENTRY {
366 ULONG Unknown1;
367 ULONG Unknown2;
368 PVOID Base;
369 ULONG Size;
370 ULONG Flags;
371 USHORT Index;
372 /* Length of module name not including the path, this
373 field contains valid value only for NTOSKRNL module */
374 USHORT NameLength;
375 USHORT LoadCount;
376 USHORT PathLength;
377 CHAR ImageName[256];
378 } SYSTEM_MODULE_INFORMATION_ENTRY, *PSYSTEM_MODULE_INFORMATION_ENTRY;
379
380 typedef struct _SYSTEM_MODULE_INFORMATION {
381 ULONG Count;
382 SYSTEM_MODULE_INFORMATION_ENTRY Module[1];
383 } SYSTEM_MODULE_INFORMATION, *PSYSTEM_MODULE_INFORMATION;
384
385 typedef struct _SYSTEM_LOCK_INFORMATION {
386 PVOID Address;
387 USHORT Type;
388 USHORT Reserved1;
389 ULONG ExclusiveOwnerThreadId;
390 ULONG ActiveCount;
391 ULONG ContentionCount;
392 ULONG Reserved2[2];
393 ULONG NumberOfSharedWaiters;
394 ULONG NumberOfExclusiveWaiters;
395 } SYSTEM_LOCK_INFORMATION, *PSYSTEM_LOCK_INFORMATION;
396
397 /*SYSTEM_HANDLE_INFORMATION.Flags cosntants */
398 #define PROTECT_FROM_CLOSE 0x01
399 #define INHERIT 0x02
400
401 typedef struct _SYSTEM_HANDLE_INFORMATION {
402 ULONG ProcessId;
403 UCHAR ObjectTypeNumber;
404 UCHAR Flags;
405 USHORT Handle;
406 PVOID Object;
407 ACCESS_MASK GrantedAccess;
408 } SYSTEM_HANDLE_INFORMATION, *PSYSTEM_HANDLE_INFORMATION;
409
410 typedef struct _SYSTEM_OBJECT_TYPE_INFORMATION {
411 ULONG NextEntryOffset;
412 ULONG ObjectCount;
413 ULONG HandleCount;
414 ULONG TypeNumber;
415 ULONG InvalidAttributes;
416 GENERIC_MAPPING GenericMapping;
417 ACCESS_MASK ValidAccessMask;
418 POOL_TYPE PoolType;
419 UCHAR Unknown;
420 UNICODE_STRING Name;
421 } SYSTEM_OBJECT_TYPE_INFORMATION, *PSYSTEM_OBJECT_TYPE_INFORMATION;
422
423 /* SYSTEM_OBJECT_INFORMATION.Flags constants */
424 #define FLG_SYSOBJINFO_SINGLE_HANDLE_ENTRY 0x40
425 #define FLG_SYSOBJINFO_DEFAULT_SECURITY_QUOTA 0x20
426 #define FLG_SYSOBJINFO_PERMANENT 0x10
427 #define FLG_SYSOBJINFO_EXCLUSIVE 0x08
428 #define FLG_SYSOBJINFO_CREATOR_INFO 0x04
429 #define FLG_SYSOBJINFO_KERNEL_MODE 0x02
430
431 typedef struct _SYSTEM_OBJECT_INFORMATION {
432 ULONG NextEntryOffset;
433 PVOID Object;
434 ULONG CreatorProcessId;
435 USHORT Unknown;
436 USHORT Flags;
437 ULONG PointerCount;
438 ULONG HandleCount;
439 ULONG PagedPoolUsage;
440 ULONG NonPagedPoolUsage;
441 ULONG ExclusiveProcessId;
442 PSECURITY_DESCRIPTOR SecurityDescriptor;
443 UNICODE_STRING Name;
444 } SYSTEM_OBJECT_INFORMATION, *PSYSTEM_OBJECT_INFORMATION;
445
446 typedef struct _SYSTEM_PAGEFILE_INFORMATION {
447 ULONG NextEntryOffset;
448 ULONG CurrentSize;
449 ULONG TotalUsed;
450 ULONG PeakUsed;
451 UNICODE_STRING FileName;
452 } SYSTEM_PAGEFILE_INFORMATION, *PSYSTEM_PAGEFILE_INFORMATION;
453
454 typedef struct _SYSTEM_INSTRUCTION_EMULATION_INFORMATION {
455 ULONG SegmentNotPresent;
456 ULONG TwoByteOpcode;
457 ULONG ESprefix;
458 ULONG CSprefix;
459 ULONG SSprefix;
460 ULONG DSprefix;
461 ULONG FSPrefix;
462 ULONG GSprefix;
463 ULONG OPER32prefix;
464 ULONG ADDR32prefix;
465 ULONG INSB;
466 ULONG INSW;
467 ULONG OUTSB;
468 ULONG OUTSW;
469 ULONG PUSHFD;
470 ULONG POPFD;
471 ULONG INTnn;
472 ULONG INTO;
473 ULONG IRETD;
474 ULONG INBimm;
475 ULONG INWimm;
476 ULONG OUTBimm;
477 ULONG OUTWimm;
478 ULONG INB;
479 ULONG INW;
480 ULONG OUTB;
481 ULONG OUTW;
482 ULONG LOCKprefix;
483 ULONG REPNEprefix;
484 ULONG REPprefix;
485 ULONG HLT;
486 ULONG CLI;
487 ULONG STI;
488 ULONG GenericInvalidOpcode;
489 } SYSTEM_INSTRUCTION_EMULATION_INFORMATION, *PSYSTEM_INSTRUCTION_EMULATION_INFORMATION;
490
491 typedef struct _SYSTEM_POOL_TAG_INFORMATION {
492 CHAR Tag[4];
493 ULONG PagedPoolAllocs;
494 ULONG PagedPoolFrees;
495 ULONG PagedPoolUsage;
496 ULONG NonPagedPoolAllocs;
497 ULONG NonPagedPoolFrees;
498 ULONG NonPagedPoolUsage;
499 } SYSTEM_POOL_TAG_INFORMATION, *PSYSTEM_POOL_TAG_INFORMATION;
500
501 typedef struct _SYSTEM_PROCESSOR_STATISTICS {
502 ULONG ContextSwitches;
503 ULONG DpcCount;
504 ULONG DpcRequestRate;
505 ULONG TimeIncrement;
506 ULONG DpcBypassCount;
507 ULONG ApcBypassCount;
508 } SYSTEM_PROCESSOR_STATISTICS, *PSYSTEM_PROCESSOR_STATISTICS;
509
510 typedef struct _SYSTEM_DPC_INFORMATION {
511 ULONG Reserved;
512 ULONG MaximumDpcQueueDepth;
513 ULONG MinimumDpcRate;
514 ULONG AdjustDpcThreshold;
515 ULONG IdealDpcRate;
516 } SYSTEM_DPC_INFORMATION, *PSYSTEM_DPC_INFORMATION;
517
518 typedef struct _SYSTEM_LOAD_IMAGE {
519 UNICODE_STRING ModuleName;
520 PVOID ModuleBase;
521 PVOID SectionPointer;
522 PVOID EntryPoint;
523 PVOID ExportDirectory;
524 } SYSTEM_LOAD_IMAGE, *PSYSTEM_LOAD_IMAGE;
525
526 typedef struct _SYSTEM_UNLOAD_IMAGE {
527 PVOID ModuleBase;
528 } SYSTEM_UNLOAD_IMAGE, *PSYSTEM_UNLOAD_IMAGE;
529
530 typedef struct _SYSTEM_QUERY_TIME_ADJUSTMENT {
531 ULONG TimeAdjustment;
532 ULONG MaximumIncrement;
533 BOOLEAN TimeSynchronization;
534 } SYSTEM_QUERY_TIME_ADJUSTMENT, *PSYSTEM_QUERY_TIME_ADJUSTMENT;
535
536 typedef struct _SYSTEM_SET_TIME_ADJUSTMENT {
537 ULONG TimeAdjustment;
538 BOOLEAN TimeSynchronization;
539 } SYSTEM_SET_TIME_ADJUSTMENT, *PSYSTEM_SET_TIME_ADJUSTMENT;
540
541 typedef struct _SYSTEM_CRASH_DUMP_INFORMATION {
542 HANDLE CrashDumpSectionHandle;
543 HANDLE Unknown;
544 } SYSTEM_CRASH_DUMP_INFORMATION, *PSYSTEM_CRASH_DUMP_INFORMATION;
545
546 typedef struct _SYSTEM_EXCEPTION_INFORMATION {
547 ULONG AlignmentFixupCount;
548 ULONG ExceptionDispatchCount;
549 ULONG FloatingEmulationCount;
550 ULONG Reserved;
551 } SYSTEM_EXCEPTION_INFORMATION, *PSYSTEM_EXCEPTION_INFORMATION;
552
553 typedef struct _SYSTEM_CRASH_DUMP_STATE_INFORMATION {
554 ULONG CrashDumpSectionExists;
555 ULONG Unknown;
556 } SYSTEM_CRASH_DUMP_STATE_INFORMATION, *PSYSTEM_CRASH_DUMP_STATE_INFORMATION;
557
558 typedef struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION {
559 BOOLEAN DebuggerEnabled;
560 BOOLEAN DebuggerNotPresent;
561 } SYSTEM_KERNEL_DEBUGGER_INFORMATION, *PSYSTEM_KERNEL_DEBUGGER_INFORMATION;
562
563 typedef struct _SYSTEM_CONTEXT_SWITCH_INFORMATION {
564 ULONG ContextSwitches;
565 ULONG ContextSwitchCounters[11];
566 } SYSTEM_CONTEXT_SWITCH_INFORMATION, *PSYSTEM_CONTEXT_SWITCH_INFORMATION;
567
568 typedef struct _SYSTEM_REGISTRY_QUOTA_INFORMATION {
569 ULONG RegistryQuota;
570 ULONG RegistryQuotaInUse;
571 ULONG PagedPoolSize;
572 } SYSTEM_REGISTRY_QUOTA_INFORMATION, *PSYSTEM_REGISTRY_QUOTA_INFORMATION;
573
574 typedef struct _SYSTEM_LOAD_AND_CALL_IMAGE {
575 UNICODE_STRING ModuleName;
576 } SYSTEM_LOAD_AND_CALL_IMAGE, *PSYSTEM_LOAD_AND_CALL_IMAGE;
577
578 typedef struct _SYSTEM_PRIORITY_SEPARATION {
579 ULONG PrioritySeparation;
580 } SYSTEM_PRIORITY_SEPARATION, *PSYSTEM_PRIORITY_SEPARATION;
581
582 typedef struct _SYSTEM_TIME_ZONE_INFORMATION {
583 LONG Bias;
584 WCHAR StandardName[32];
585 LARGE_INTEGER StandardDate;
586 LONG StandardBias;
587 WCHAR DaylightName[32];
588 LARGE_INTEGER DaylightDate;
589 LONG DaylightBias;
590 } SYSTEM_TIME_ZONE_INFORMATION, *PSYSTEM_TIME_ZONE_INFORMATION;
591
592 typedef struct _SYSTEM_LOOKASIDE_INFORMATION {
593 USHORT Depth;
594 USHORT MaximumDepth;
595 ULONG TotalAllocates;
596 ULONG AllocateMisses;
597 ULONG TotalFrees;
598 ULONG FreeMisses;
599 POOL_TYPE Type;
600 ULONG Tag;
601 ULONG Size;
602 } SYSTEM_LOOKASIDE_INFORMATION, *PSYSTEM_LOOKASIDE_INFORMATION;
603
604 typedef struct _SYSTEM_SET_TIME_SLIP_EVENT {
605 HANDLE TimeSlipEvent;
606 } SYSTEM_SET_TIME_SLIP_EVENT, *PSYSTEM_SET_TIME_SLIP_EVENT;
607
608 typedef struct _SYSTEM_CREATE_SESSION {
609 ULONG SessionId;
610 } SYSTEM_CREATE_SESSION, *PSYSTEM_CREATE_SESSION;
611
612 typedef struct _SYSTEM_DELETE_SESSION {
613 ULONG SessionId;
614 } SYSTEM_DELETE_SESSION, *PSYSTEM_DELETE_SESSION;
615
616 typedef struct _SYSTEM_RANGE_START_INFORMATION {
617 PVOID SystemRangeStart;
618 } SYSTEM_RANGE_START_INFORMATION, *PSYSTEM_RANGE_START_INFORMATION;
619
620 typedef struct _SYSTEM_SESSION_PROCESSES_INFORMATION {
621 ULONG SessionId;
622 ULONG BufferSize;
623 PVOID Buffer;
624 } SYSTEM_SESSION_PROCESSES_INFORMATION, *PSYSTEM_SESSION_PROCESSES_INFORMATION;
625
626 typedef struct _SYSTEM_POOL_BLOCK {
627 BOOLEAN Allocated;
628 USHORT Unknown;
629 ULONG Size;
630 CHAR Tag[4];
631 } SYSTEM_POOL_BLOCK, *PSYSTEM_POOL_BLOCK;
632
633 typedef struct _SYSTEM_POOL_BLOCKS_INFORMATION {
634 ULONG PoolSize;
635 PVOID PoolBase;
636 USHORT Unknown;
637 ULONG NumberOfBlocks;
638 SYSTEM_POOL_BLOCK PoolBlocks[1];
639 } SYSTEM_POOL_BLOCKS_INFORMATION, *PSYSTEM_POOL_BLOCKS_INFORMATION;
640
641 typedef struct _SYSTEM_MEMORY_USAGE {
642 PVOID Name;
643 USHORT Valid;
644 USHORT Standby;
645 USHORT Modified;
646 USHORT PageTables;
647 } SYSTEM_MEMORY_USAGE, *PSYSTEM_MEMORY_USAGE;
648
649 typedef struct _SYSTEM_MEMORY_USAGE_INFORMATION {
650 ULONG Reserved;
651 PVOID EndOfData;
652 SYSTEM_MEMORY_USAGE MemoryUsage[1];
653 } SYSTEM_MEMORY_USAGE_INFORMATION, *PSYSTEM_MEMORY_USAGE_INFORMATION;
654
655 NTOSAPI
656 NTSTATUS
657 NTAPI
658 NtQuerySystemInformation(
659 /*IN*/ SYSTEM_INFORMATION_CLASS SystemInformationClass,
660 /*IN OUT*/ PVOID SystemInformation,
661 /*IN*/ ULONG SystemInformationLength,
662 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
663
664 NTOSAPI
665 NTSTATUS
666 NTAPI
667 ZwQuerySystemInformation(
668 /*IN*/ SYSTEM_INFORMATION_CLASS SystemInformationClass,
669 /*IN OUT*/ PVOID SystemInformation,
670 /*IN*/ ULONG SystemInformationLength,
671 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
672
673 NTOSAPI
674 NTAPI
675 NTSTATUS
676 NtQueryFullAttributesFile(
677 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
678 /*OUT*/ PFILE_NETWORK_OPEN_INFORMATION FileInformation);
679
680 NTOSAPI
681 NTAPI
682 NTSTATUS
683 ZwQueryFullAttributesFile(
684 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
685 /*OUT*/ PFILE_NETWORK_OPEN_INFORMATION FileInformation);
686
687 NTOSAPI
688 NTSTATUS
689 NTAPI
690 ZwSetSystemInformation(
691 /*IN*/ SYSTEM_INFORMATION_CLASS SystemInformationClass,
692 /*IN OUT*/ PVOID SystemInformation,
693 /*IN*/ ULONG SystemInformationLength);
694
695 NTOSAPI
696 NTSTATUS
697 NTAPI
698 ZwQuerySystemEnvironmentValue(
699 /*IN*/ PUNICODE_STRING Name,
700 /*OUT*/ PVOID Value,
701 /*IN*/ ULONG ValueLength,
702 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
703
704 NTOSAPI
705 NTSTATUS
706 NTAPI
707 ZwSetSystemEnvironmentValue(
708 /*IN*/ PUNICODE_STRING Name,
709 /*IN*/ PUNICODE_STRING Value);
710
711 typedef enum _SHUTDOWN_ACTION {
712 ShutdownNoReboot,
713 ShutdownReboot,
714 ShutdownPowerOff
715 } SHUTDOWN_ACTION;
716
717 NTOSAPI
718 NTSTATUS
719 NTAPI
720 NtShutdownSystem(
721 /*IN*/ SHUTDOWN_ACTION Action);
722
723 typedef enum _DEBUG_CONTROL_CODE {
724 DebugGetTraceInformation = 1,
725 DebugSetInternalBreakpoint,
726 DebugSetSpecialCall,
727 DebugClearSpecialCalls,
728 DebugQuerySpecialCalls,
729 DebugDbgBreakPoint,
730 DebugMaximum
731 } DEBUG_CONTROL_CODE;
732
733
734 NTOSAPI
735 NTSTATUS
736 NTAPI
737 ZwSystemDebugControl(
738 /*IN*/ DEBUG_CONTROL_CODE ControlCode,
739 /*IN*/ PVOID InputBuffer /*OPTIONAL*/,
740 /*IN*/ ULONG InputBufferLength,
741 /*OUT*/ PVOID OutputBuffer /*OPTIONAL*/,
742 /*IN*/ ULONG OutputBufferLength,
743 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
744
745
746
747 /* Objects, Object directories, and symbolic links */
748
749 typedef enum _OBJECT_INFORMATION_CLASS {
750 ObjectBasicInformation,
751 ObjectNameInformation,
752 ObjectTypeInformation,
753 ObjectAllTypesInformation,
754 ObjectHandleInformation
755 } OBJECT_INFORMATION_CLASS;
756
757 NTOSAPI
758 NTSTATUS
759 NTAPI
760 ZwQueryObject(
761 /*IN*/ HANDLE ObjectHandle,
762 /*IN*/ OBJECT_INFORMATION_CLASS ObjectInformationClass,
763 /*OUT*/ PVOID ObjectInformation,
764 /*IN*/ ULONG ObjectInformationLength,
765 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
766
767 NTOSAPI
768 NTSTATUS
769 NTAPI
770 ZwSetInformationObject(
771 /*IN*/ HANDLE ObjectHandle,
772 /*IN*/ OBJECT_INFORMATION_CLASS ObjectInformationClass,
773 /*IN*/ PVOID ObjectInformation,
774 /*IN*/ ULONG ObjectInformationLength);
775
776 /* OBJECT_BASIC_INFORMATION.Attributes constants */
777 /* also in winbase.h */
778 #define HANDLE_FLAG_INHERIT 0x01
779 #define HANDLE_FLAG_PROTECT_FROM_CLOSE 0x02
780 /* end winbase.h */
781 #define PERMANENT 0x10
782 #define EXCLUSIVE 0x20
783
784 typedef struct _OBJECT_BASIC_INFORMATION {
785 ULONG Attributes;
786 ACCESS_MASK GrantedAccess;
787 ULONG HandleCount;
788 ULONG PointerCount;
789 ULONG PagedPoolUsage;
790 ULONG NonPagedPoolUsage;
791 ULONG Reserved[3];
792 ULONG NameInformationLength;
793 ULONG TypeInformationLength;
794 ULONG SecurityDescriptorLength;
795 LARGE_INTEGER CreateTime;
796 } OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
797 #if 0
798 /* FIXME: Enable later */
799 typedef struct _OBJECT_TYPE_INFORMATION {
800 UNICODE_STRING Name;
801 ULONG ObjectCount;
802 ULONG HandleCount;
803 ULONG Reserved1[4];
804 ULONG PeakObjectCount;
805 ULONG PeakHandleCount;
806 ULONG Reserved2[4];
807 ULONG InvalidAttributes;
808 GENERIC_MAPPING GenericMapping;
809 ULONG ValidAccess;
810 UCHAR Unknown;
811 BOOLEAN MaintainHandleDatabase;
812 POOL_TYPE PoolType;
813 ULONG PagedPoolUsage;
814 ULONG NonPagedPoolUsage;
815 } OBJECT_TYPE_INFORMATION, *POBJECT_TYPE_INFORMATION;
816
817 typedef struct _OBJECT_ALL_TYPES_INFORMATION {
818 ULONG NumberOfTypes;
819 OBJECT_TYPE_INFORMATION TypeInformation;
820 } OBJECT_ALL_TYPES_INFORMATION, *POBJECT_ALL_TYPES_INFORMATION;
821 #endif
822 typedef struct _OBJECT_HANDLE_ATTRIBUTE_INFORMATION {
823 BOOLEAN Inherit;
824 BOOLEAN ProtectFromClose;
825 } OBJECT_HANDLE_ATTRIBUTE_INFORMATION, *POBJECT_HANDLE_ATTRIBUTE_INFORMATION;
826
827 NTOSAPI
828 NTSTATUS
829 NTAPI
830 NtDuplicateObject(
831 /*IN*/ HANDLE SourceProcessHandle,
832 /*IN*/ HANDLE SourceHandle,
833 /*IN*/ HANDLE TargetProcessHandle,
834 /*OUT*/ PHANDLE TargetHandle /*OPTIONAL*/,
835 /*IN*/ ACCESS_MASK DesiredAccess,
836 /*IN*/ ULONG Attributes,
837 /*IN*/ ULONG Options);
838
839 NTOSAPI
840 NTSTATUS
841 NTAPI
842 ZwDuplicateObject(
843 /*IN*/ HANDLE SourceProcessHandle,
844 /*IN*/ HANDLE SourceHandle,
845 /*IN*/ HANDLE TargetProcessHandle,
846 /*OUT*/ PHANDLE TargetHandle /*OPTIONAL*/,
847 /*IN*/ ACCESS_MASK DesiredAccess,
848 /*IN*/ ULONG Attributes,
849 /*IN*/ ULONG Options);
850
851 NTOSAPI
852 NTSTATUS
853 NTAPI
854 NtQuerySecurityObject(
855 /*IN*/ HANDLE Handle,
856 /*IN*/ SECURITY_INFORMATION SecurityInformation,
857 /*OUT*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
858 /*IN*/ ULONG SecurityDescriptorLength,
859 /*OUT*/ PULONG ReturnLength);
860
861 NTOSAPI
862 NTSTATUS
863 NTAPI
864 ZwQuerySecurityObject(
865 /*IN*/ HANDLE Handle,
866 /*IN*/ SECURITY_INFORMATION SecurityInformation,
867 /*OUT*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
868 /*IN*/ ULONG SecurityDescriptorLength,
869 /*OUT*/ PULONG ReturnLength);
870
871 NTOSAPI
872 NTSTATUS
873 NTAPI
874 NtSetSecurityObject(
875 /*IN*/ HANDLE Handle,
876 /*IN*/ SECURITY_INFORMATION SecurityInformation,
877 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor);
878
879 NTOSAPI
880 NTSTATUS
881 NTAPI
882 ZwSetSecurityObject(
883 /*IN*/ HANDLE Handle,
884 /*IN*/ SECURITY_INFORMATION SecurityInformation,
885 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor);
886
887 NTOSAPI
888 NTSTATUS
889 NTAPI
890 ZwOpenDirectoryObject(
891 /*OUT*/ PHANDLE DirectoryHandle,
892 /*IN*/ ACCESS_MASK DesiredAccess,
893 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes);
894
895 NTOSAPI
896 NTSTATUS
897 NTAPI
898 ZwQueryDirectoryObject(
899 /*IN*/ HANDLE DirectoryHandle,
900 /*OUT*/ PVOID Buffer,
901 /*IN*/ ULONG BufferLength,
902 /*IN*/ BOOLEAN ReturnSingleEntry,
903 /*IN*/ BOOLEAN RestartScan,
904 /*IN OUT*/ PULONG Context,
905 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
906
907 typedef struct _DIRECTORY_BASIC_INFORMATION {
908 UNICODE_STRING ObjectName;
909 UNICODE_STRING ObjectTypeName;
910 } DIRECTORY_BASIC_INFORMATION, *PDIRECTORY_BASIC_INFORMATION;
911
912 NTOSAPI
913 NTSTATUS
914 NTAPI
915 ZwCreateSymbolicLinkObject(
916 /*OUT*/ PHANDLE SymbolicLinkHandle,
917 /*IN*/ ACCESS_MASK DesiredAccess,
918 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
919 /*IN*/ PUNICODE_STRING TargetName);
920
921
922
923
924 /* Virtual memory */
925
926 typedef enum _MEMORY_INFORMATION_CLASS {
927 MemoryBasicInformation,
928 MemoryWorkingSetList,
929 MemorySectionName,
930 MemoryBasicVlmInformation
931 } MEMORY_INFORMATION_CLASS;
932
933 NTOSAPI
934 NTSTATUS
935 NTAPI
936 NtAllocateVirtualMemory(
937 /*IN*/ HANDLE ProcessHandle,
938 /*IN OUT*/ PVOID *BaseAddress,
939 /*IN*/ ULONG ZeroBits,
940 /*IN OUT*/ PULONG AllocationSize,
941 /*IN*/ ULONG AllocationType,
942 /*IN*/ ULONG Protect);
943
944 NTOSAPI
945 NTSTATUS
946 NTAPI
947 ZwAllocateVirtualMemory(
948 /*IN*/ HANDLE ProcessHandle,
949 /*IN OUT*/ PVOID *BaseAddress,
950 /*IN*/ ULONG ZeroBits,
951 /*IN OUT*/ PULONG AllocationSize,
952 /*IN*/ ULONG AllocationType,
953 /*IN*/ ULONG Protect);
954
955 NTOSAPI
956 NTSTATUS
957 NTAPI
958 NtFreeVirtualMemory(
959 /*IN*/ HANDLE ProcessHandle,
960 /*IN OUT*/ PVOID *BaseAddress,
961 /*IN OUT*/ PULONG FreeSize,
962 /*IN*/ ULONG FreeType);
963
964 NTOSAPI
965 NTSTATUS
966 NTAPI
967 ZwFreeVirtualMemory(
968 /*IN*/ HANDLE ProcessHandle,
969 /*IN OUT*/ PVOID *BaseAddress,
970 /*IN OUT*/ PULONG FreeSize,
971 /*IN*/ ULONG FreeType);
972
973 NTOSAPI
974 NTSTATUS
975 NTAPI
976 ZwQueryVirtualMemory(
977 /*IN*/ HANDLE ProcessHandle,
978 /*IN*/ PVOID BaseAddress,
979 /*IN*/ MEMORY_INFORMATION_CLASS MemoryInformationClass,
980 /*OUT*/ PVOID MemoryInformation,
981 /*IN*/ ULONG MemoryInformationLength,
982 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
983
984 /* MEMORY_WORKING_SET_LIST.WorkingSetList constants */
985 #define WSLE_PAGE_READONLY 0x001
986 #define WSLE_PAGE_EXECUTE 0x002
987 #define WSLE_PAGE_READWRITE 0x004
988 #define WSLE_PAGE_EXECUTE_READ 0x003
989 #define WSLE_PAGE_WRITECOPY 0x005
990 #define WSLE_PAGE_EXECUTE_READWRITE 0x006
991 #define WSLE_PAGE_EXECUTE_WRITECOPY 0x007
992 #define WSLE_PAGE_SHARE_COUNT_MASK 0x0E0
993 #define WSLE_PAGE_SHAREABLE 0x100
994
995 typedef struct _MEMORY_WORKING_SET_LIST {
996 ULONG NumberOfPages;
997 ULONG WorkingSetList[1];
998 } MEMORY_WORKING_SET_LIST, *PMEMORY_WORKING_SET_LIST;
999
1000 typedef struct _MEMORY_SECTION_NAME {
1001 UNICODE_STRING SectionFileName;
1002 } MEMORY_SECTION_NAME, *PMEMORY_SECTION_NAME;
1003
1004 /* Zw[Lock|Unlock]VirtualMemory.LockType constants */
1005 #define LOCK_VM_IN_WSL 0x01
1006 #define LOCK_VM_IN_RAM 0x02
1007
1008 NTOSAPI
1009 NTSTATUS
1010 NTAPI
1011 ZwLockVirtualMemory(
1012 /*IN*/ HANDLE ProcessHandle,
1013 /*IN OUT*/ PVOID *BaseAddress,
1014 /*IN OUT*/ PULONG LockSize,
1015 /*IN*/ ULONG LockType);
1016
1017 NTOSAPI
1018 NTSTATUS
1019 NTAPI
1020 ZwUnlockVirtualMemory(
1021 /*IN*/ HANDLE ProcessHandle,
1022 /*IN OUT*/ PVOID *BaseAddress,
1023 /*IN OUT*/ PULONG LockSize,
1024 /*IN*/ ULONG LockType);
1025
1026 NTOSAPI
1027 NTSTATUS
1028 NTAPI
1029 ZwReadVirtualMemory(
1030 /*IN*/ HANDLE ProcessHandle,
1031 /*IN*/ PVOID BaseAddress,
1032 /*OUT*/ PVOID Buffer,
1033 /*IN*/ ULONG BufferLength,
1034 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1035
1036 NTOSAPI
1037 NTSTATUS
1038 NTAPI
1039 ZwWriteVirtualMemory(
1040 /*IN*/ HANDLE ProcessHandle,
1041 /*IN*/ PVOID BaseAddress,
1042 /*IN*/ PVOID Buffer,
1043 /*IN*/ ULONG BufferLength,
1044 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1045
1046 NTOSAPI
1047 NTSTATUS
1048 NTAPI
1049 ZwProtectVirtualMemory(
1050 /*IN*/ HANDLE ProcessHandle,
1051 /*IN OUT*/ PVOID *BaseAddress,
1052 /*IN OUT*/ PULONG ProtectSize,
1053 /*IN*/ ULONG NewProtect,
1054 /*OUT*/ PULONG OldProtect);
1055
1056 NTOSAPI
1057 NTSTATUS
1058 NTAPI
1059 ZwFlushVirtualMemory(
1060 /*IN*/ HANDLE ProcessHandle,
1061 /*IN OUT*/ PVOID *BaseAddress,
1062 /*IN OUT*/ PULONG FlushSize,
1063 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock);
1064
1065 NTOSAPI
1066 NTSTATUS
1067 NTAPI
1068 ZwAllocateUserPhysicalPages(
1069 /*IN*/ HANDLE ProcessHandle,
1070 /*IN*/ PULONG NumberOfPages,
1071 /*OUT*/ PULONG PageFrameNumbers);
1072
1073 NTOSAPI
1074 NTSTATUS
1075 NTAPI
1076 ZwFreeUserPhysicalPages(
1077 /*IN*/ HANDLE ProcessHandle,
1078 /*IN OUT*/ PULONG NumberOfPages,
1079 /*IN*/ PULONG PageFrameNumbers);
1080
1081 NTOSAPI
1082 NTSTATUS
1083 NTAPI
1084 ZwMapUserPhysicalPages(
1085 /*IN*/ PVOID BaseAddress,
1086 /*IN*/ PULONG NumberOfPages,
1087 /*IN*/ PULONG PageFrameNumbers);
1088
1089 NTOSAPI
1090 NTSTATUS
1091 NTAPI
1092 ZwMapUserPhysicalPagesScatter(
1093 /*IN*/ PVOID *BaseAddresses,
1094 /*IN*/ PULONG NumberOfPages,
1095 /*IN*/ PULONG PageFrameNumbers);
1096
1097 NTOSAPI
1098 NTSTATUS
1099 NTAPI
1100 ZwGetWriteWatch(
1101 /*IN*/ HANDLE ProcessHandle,
1102 /*IN*/ ULONG Flags,
1103 /*IN*/ PVOID BaseAddress,
1104 /*IN*/ ULONG RegionSize,
1105 /*OUT*/ PULONG Buffer,
1106 /*IN OUT*/ PULONG BufferEntries,
1107 /*OUT*/ PULONG Granularity);
1108
1109 NTOSAPI
1110 NTSTATUS
1111 NTAPI
1112 ZwResetWriteWatch(
1113 /*IN*/ HANDLE ProcessHandle,
1114 /*IN*/ PVOID BaseAddress,
1115 /*IN*/ ULONG RegionSize);
1116
1117
1118
1119
1120 /* Sections */
1121
1122 typedef enum _SECTION_INFORMATION_CLASS {
1123 SectionBasicInformation,
1124 SectionImageInformation
1125 } SECTION_INFORMATION_CLASS;
1126
1127 NTOSAPI
1128 NTSTATUS
1129 NTAPI
1130 NtCreateSection(
1131 /*OUT*/ PHANDLE SectionHandle,
1132 /*IN*/ ACCESS_MASK DesiredAccess,
1133 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1134 /*IN*/ PLARGE_INTEGER SectionSize /*OPTIONAL*/,
1135 /*IN*/ ULONG Protect,
1136 /*IN*/ ULONG Attributes,
1137 /*IN*/ HANDLE FileHandle);
1138
1139 NTOSAPI
1140 NTSTATUS
1141 NTAPI
1142 ZwCreateSection(
1143 /*OUT*/ PHANDLE SectionHandle,
1144 /*IN*/ ACCESS_MASK DesiredAccess,
1145 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1146 /*IN*/ PLARGE_INTEGER SectionSize /*OPTIONAL*/,
1147 /*IN*/ ULONG Protect,
1148 /*IN*/ ULONG Attributes,
1149 /*IN*/ HANDLE FileHandle);
1150
1151 NTOSAPI
1152 NTSTATUS
1153 NTAPI
1154 ZwQuerySection(
1155 /*IN*/ HANDLE SectionHandle,
1156 /*IN*/ SECTION_INFORMATION_CLASS SectionInformationClass,
1157 /*OUT*/ PVOID SectionInformation,
1158 /*IN*/ ULONG SectionInformationLength,
1159 /*OUT*/ PULONG ResultLength /*OPTIONAL*/);
1160
1161 NTOSAPI
1162 NTSTATUS
1163 NTAPI
1164 ZwExtendSection(
1165 /*IN*/ HANDLE SectionHandle,
1166 /*IN*/ PLARGE_INTEGER SectionSize);
1167
1168 NTOSAPI
1169 NTSTATUS
1170 NTAPI
1171 ZwAreMappedFilesTheSame(
1172 /*IN*/ PVOID Address1,
1173 /*IN*/ PVOID Address2);
1174
1175
1176
1177
1178 /* Threads */
1179
1180 typedef struct _USER_STACK {
1181 PVOID FixedStackBase;
1182 PVOID FixedStackLimit;
1183 PVOID ExpandableStackBase;
1184 PVOID ExpandableStackLimit;
1185 PVOID ExpandableStackBottom;
1186 } USER_STACK, *PUSER_STACK;
1187
1188 NTOSAPI
1189 NTSTATUS
1190 NTAPI
1191 ZwCreateThread(
1192 /*OUT*/ PHANDLE ThreadHandle,
1193 /*IN*/ ACCESS_MASK DesiredAccess,
1194 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1195 /*IN*/ HANDLE ProcessHandle,
1196 /*OUT*/ PCLIENT_ID ClientId,
1197 /*IN*/ PCONTEXT ThreadContext,
1198 /*IN*/ PUSER_STACK UserStack,
1199 /*IN*/ BOOLEAN CreateSuspended);
1200
1201 NTOSAPI
1202 NTSTATUS
1203 NTAPI
1204 NtOpenThread(
1205 /*OUT*/ PHANDLE ThreadHandle,
1206 /*IN*/ ACCESS_MASK DesiredAccess,
1207 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1208 /*IN*/ PCLIENT_ID ClientId);
1209
1210 NTOSAPI
1211 NTSTATUS
1212 NTAPI
1213 ZwOpenThread(
1214 /*OUT*/ PHANDLE ThreadHandle,
1215 /*IN*/ ACCESS_MASK DesiredAccess,
1216 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1217 /*IN*/ PCLIENT_ID ClientId);
1218
1219 NTOSAPI
1220 NTSTATUS
1221 NTAPI
1222 ZwTerminateThread(
1223 /*IN*/ HANDLE ThreadHandle /*OPTIONAL*/,
1224 /*IN*/ NTSTATUS ExitStatus);
1225
1226 NTOSAPI
1227 NTSTATUS
1228 NTAPI
1229 NtQueryInformationThread(
1230 /*IN*/ HANDLE ThreadHandle,
1231 /*IN*/ THREADINFOCLASS ThreadInformationClass,
1232 /*OUT*/ PVOID ThreadInformation,
1233 /*IN*/ ULONG ThreadInformationLength,
1234 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1235
1236 NTOSAPI
1237 NTSTATUS
1238 NTAPI
1239 ZwQueryInformationThread(
1240 /*IN*/ HANDLE ThreadHandle,
1241 /*IN*/ THREADINFOCLASS ThreadInformationClass,
1242 /*OUT*/ PVOID ThreadInformation,
1243 /*IN*/ ULONG ThreadInformationLength,
1244 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1245
1246 NTOSAPI
1247 NTSTATUS
1248 NTAPI
1249 NtSetInformationThread(
1250 /*IN*/ HANDLE ThreadHandle,
1251 /*IN*/ THREADINFOCLASS ThreadInformationClass,
1252 /*IN*/ PVOID ThreadInformation,
1253 /*IN*/ ULONG ThreadInformationLength);
1254
1255 typedef struct _THREAD_BASIC_INFORMATION {
1256 NTSTATUS ExitStatus;
1257 PNT_TIB TebBaseAddress;
1258 CLIENT_ID ClientId;
1259 KAFFINITY AffinityMask;
1260 KPRIORITY Priority;
1261 KPRIORITY BasePriority;
1262 } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION;
1263
1264 typedef struct _KERNEL_USER_TIMES {
1265 LARGE_INTEGER CreateTime;
1266 LARGE_INTEGER ExitTime;
1267 LARGE_INTEGER KernelTime;
1268 LARGE_INTEGER UserTime;
1269 } KERNEL_USER_TIMES, *PKERNEL_USER_TIMES;
1270
1271 NTOSAPI
1272 NTSTATUS
1273 NTAPI
1274 ZwSuspendThread(
1275 /*IN*/ HANDLE ThreadHandle,
1276 /*OUT*/ PULONG PreviousSuspendCount /*OPTIONAL*/);
1277
1278 NTOSAPI
1279 NTSTATUS
1280 NTAPI
1281 ZwResumeThread(
1282 /*IN*/ HANDLE ThreadHandle,
1283 /*OUT*/ PULONG PreviousSuspendCount /*OPTIONAL*/);
1284
1285 NTOSAPI
1286 NTSTATUS
1287 NTAPI
1288 ZwGetContextThread(
1289 /*IN*/ HANDLE ThreadHandle,
1290 /*OUT*/ PCONTEXT Context);
1291
1292 NTOSAPI
1293 NTSTATUS
1294 NTAPI
1295 ZwSetContextThread(
1296 /*IN*/ HANDLE ThreadHandle,
1297 /*IN*/ PCONTEXT Context);
1298
1299 NTOSAPI
1300 NTSTATUS
1301 NTAPI
1302 ZwQueueApcThread(
1303 /*IN*/ HANDLE ThreadHandle,
1304 /*IN*/ PKNORMAL_ROUTINE ApcRoutine,
1305 /*IN*/ PVOID ApcContext /*OPTIONAL*/,
1306 /*IN*/ PVOID Argument1 /*OPTIONAL*/,
1307 /*IN*/ PVOID Argument2 /*OPTIONAL*/);
1308
1309 NTOSAPI
1310 NTSTATUS
1311 NTAPI
1312 ZwTestAlert(
1313 VOID);
1314
1315 NTOSAPI
1316 NTSTATUS
1317 NTAPI
1318 ZwAlertThread(
1319 /*IN*/ HANDLE ThreadHandle);
1320
1321 NTOSAPI
1322 NTSTATUS
1323 NTAPI
1324 ZwAlertResumeThread(
1325 /*IN*/ HANDLE ThreadHandle,
1326 /*OUT*/ PULONG PreviousSuspendCount /*OPTIONAL*/);
1327
1328 NTOSAPI
1329 NTSTATUS
1330 NTAPI
1331 ZwRegisterThreadTerminatePort(
1332 /*IN*/ HANDLE PortHandle);
1333
1334 NTOSAPI
1335 NTSTATUS
1336 NTAPI
1337 ZwImpersonateThread(
1338 /*IN*/ HANDLE ThreadHandle,
1339 /*IN*/ HANDLE TargetThreadHandle,
1340 /*IN*/ PSECURITY_QUALITY_OF_SERVICE SecurityQos);
1341
1342 NTOSAPI
1343 NTSTATUS
1344 NTAPI
1345 ZwImpersonateAnonymousToken(
1346 /*IN*/ HANDLE ThreadHandle);
1347
1348
1349
1350
1351 /* Processes */
1352
1353 NTOSAPI
1354 NTSTATUS
1355 NTAPI
1356 ZwCreateProcess(
1357 /*OUT*/ PHANDLE ProcessHandle,
1358 /*IN*/ ACCESS_MASK DesiredAccess,
1359 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1360 /*IN*/ HANDLE InheritFromProcessHandle,
1361 /*IN*/ BOOLEAN InheritHandles,
1362 /*IN*/ HANDLE SectionHandle /*OPTIONAL*/,
1363 /*IN*/ HANDLE DebugPort /*OPTIONAL*/,
1364 /*IN*/ HANDLE ExceptionPort /*OPTIONAL*/);
1365
1366 NTOSAPI
1367 NTSTATUS
1368 NTAPI
1369 ZwCreateProcess(
1370 /*OUT*/ PHANDLE ProcessHandle,
1371 /*IN*/ ACCESS_MASK DesiredAccess,
1372 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1373 /*IN*/ HANDLE InheritFromProcessHandle,
1374 /*IN*/ BOOLEAN InheritHandles,
1375 /*IN*/ HANDLE SectionHandle /*OPTIONAL*/,
1376 /*IN*/ HANDLE DebugPort /*OPTIONAL*/,
1377 /*IN*/ HANDLE ExceptionPort /*OPTIONAL*/);
1378
1379 NTOSAPI
1380 NTSTATUS
1381 NTAPI
1382 ZwTerminateProcess(
1383 /*IN*/ HANDLE ProcessHandle /*OPTIONAL*/,
1384 /*IN*/ NTSTATUS ExitStatus);
1385
1386 NTOSAPI
1387 NTSTATUS
1388 NTAPI
1389 ZwQueryInformationProcess(
1390 /*IN*/ HANDLE ProcessHandle,
1391 /*IN*/ PROCESSINFOCLASS ProcessInformationClass,
1392 /*OUT*/ PVOID ProcessInformation,
1393 /*IN*/ ULONG ProcessInformationLength,
1394 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1395
1396 NTOSAPI
1397 NTSTATUS
1398 NTAPI
1399 NtSetInformationProcess(
1400 /*IN*/ HANDLE ProcessHandle,
1401 /*IN*/ PROCESSINFOCLASS ProcessInformationClass,
1402 /*IN*/ PVOID ProcessInformation,
1403 /*IN*/ ULONG ProcessInformationLength);
1404
1405 NTOSAPI
1406 NTSTATUS
1407 NTAPI
1408 ZwSetInformationProcess(
1409 /*IN*/ HANDLE ProcessHandle,
1410 /*IN*/ PROCESSINFOCLASS ProcessInformationClass,
1411 /*IN*/ PVOID ProcessInformation,
1412 /*IN*/ ULONG ProcessInformationLength);
1413
1414 typedef struct _PROCESS_BASIC_INFORMATION {
1415 NTSTATUS ExitStatus;
1416 PPEB PebBaseAddress;
1417 KAFFINITY AffinityMask;
1418 KPRIORITY BasePriority;
1419 ULONG UniqueProcessId;
1420 ULONG InheritedFromUniqueProcessId;
1421 } PROCESS_BASIC_INFORMATION, *PPROCESS_BASIC_INFORMATION;
1422
1423 typedef struct _PROCESS_ACCESS_TOKEN {
1424 HANDLE Token;
1425 HANDLE Thread;
1426 } PROCESS_ACCESS_TOKEN, *PPROCESS_ACCESS_TOKEN;
1427
1428 /* DefaultHardErrorMode constants */
1429 /* also in winbase.h */
1430 #define SEM_FAILCRITICALERRORS 0x0001
1431 #define SEM_NOGPFAULTERRORBOX 0x0002
1432 #define SEM_NOALIGNMENTFAULTEXCEPT 0x0004
1433 #define SEM_NOOPENFILEERRORBOX 0x8000
1434 /* end winbase.h */
1435 typedef struct _POOLED_USAGE_AND_LIMITS {
1436 ULONG PeakPagedPoolUsage;
1437 ULONG PagedPoolUsage;
1438 ULONG PagedPoolLimit;
1439 ULONG PeakNonPagedPoolUsage;
1440 ULONG NonPagedPoolUsage;
1441 ULONG NonPagedPoolLimit;
1442 ULONG PeakPagefileUsage;
1443 ULONG PagefileUsage;
1444 ULONG PagefileLimit;
1445 } POOLED_USAGE_AND_LIMITS, *PPOOLED_USAGE_AND_LIMITS;
1446
1447 typedef struct _PROCESS_WS_WATCH_INFORMATION {
1448 PVOID FaultingPc;
1449 PVOID FaultingVa;
1450 } PROCESS_WS_WATCH_INFORMATION, *PPROCESS_WS_WATCH_INFORMATION;
1451
1452 /* PROCESS_PRIORITY_CLASS.PriorityClass constants */
1453 #define PC_IDLE 1
1454 #define PC_NORMAL 2
1455 #define PC_HIGH 3
1456 #define PC_REALTIME 4
1457 #define PC_BELOW_NORMAL 5
1458 #define PC_ABOVE_NORMAL 6
1459
1460 typedef struct _PROCESS_PRIORITY_CLASS {
1461 BOOLEAN Foreground;
1462 UCHAR PriorityClass;
1463 } PROCESS_PRIORITY_CLASS, *PPROCESS_PRIORITY_CLASS;
1464
1465 /* PROCESS_DEVICEMAP_INFORMATION.DriveType constants */
1466 #define DRIVE_UNKNOWN 0
1467 #define DRIVE_NO_ROOT_DIR 1
1468 #define DRIVE_REMOVABLE 2
1469 #define DRIVE_FIXED 3
1470 #define DRIVE_REMOTE 4
1471 #define DRIVE_CDROM 5
1472 #define DRIVE_RAMDISK 6
1473
1474 typedef struct _PROCESS_DEVICEMAP_INFORMATION {
1475 _ANONYMOUS_UNION union {
1476 struct {
1477 HANDLE DirectoryHandle;
1478 } Set;
1479 struct {
1480 ULONG DriveMap;
1481 UCHAR DriveType[32];
1482 } Query;
1483 } DUMMYUNIONNAME;
1484 } PROCESS_DEVICEMAP_INFORMATION, *PPROCESS_DEVICEMAP_INFORMATION;
1485
1486 typedef struct _PROCESS_SESSION_INFORMATION {
1487 ULONG SessionId;
1488 } PROCESS_SESSION_INFORMATION, *PPROCESS_SESSION_INFORMATION;
1489
1490 typedef struct _RTL_USER_PROCESS_PARAMETERS {
1491 ULONG AllocationSize;
1492 ULONG Size;
1493 ULONG Flags;
1494 ULONG DebugFlags;
1495 HANDLE hConsole;
1496 ULONG ProcessGroup;
1497 HANDLE hStdInput;
1498 HANDLE hStdOutput;
1499 HANDLE hStdError;
1500 UNICODE_STRING CurrentDirectoryName;
1501 HANDLE CurrentDirectoryHandle;
1502 UNICODE_STRING DllPath;
1503 UNICODE_STRING ImagePathName;
1504 UNICODE_STRING CommandLine;
1505 PWSTR Environment;
1506 ULONG dwX;
1507 ULONG dwY;
1508 ULONG dwXSize;
1509 ULONG dwYSize;
1510 ULONG dwXCountChars;
1511 ULONG dwYCountChars;
1512 ULONG dwFillAttribute;
1513 ULONG dwFlags;
1514 ULONG wShowWindow;
1515 UNICODE_STRING WindowTitle;
1516 UNICODE_STRING DesktopInfo;
1517 UNICODE_STRING ShellInfo;
1518 UNICODE_STRING RuntimeInfo;
1519 } RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
1520
1521 NTSTATUS
1522 NTAPI
1523 RtlCreateProcessParameters(
1524 /*OUT*/ PRTL_USER_PROCESS_PARAMETERS *ProcessParameters,
1525 /*IN*/ PUNICODE_STRING ImageFile,
1526 /*IN*/ PUNICODE_STRING DllPath /*OPTIONAL*/,
1527 /*IN*/ PUNICODE_STRING CurrentDirectory /*OPTIONAL*/,
1528 /*IN*/ PUNICODE_STRING CommandLine /*OPTIONAL*/,
1529 /*IN*/ PWSTR Environment /*OPTIONAL*/,
1530 /*IN*/ PUNICODE_STRING WindowTitle /*OPTIONAL*/,
1531 /*IN*/ PUNICODE_STRING DesktopInfo /*OPTIONAL*/,
1532 /*IN*/ PUNICODE_STRING ShellInfo /*OPTIONAL*/,
1533 /*IN*/ PUNICODE_STRING RuntimeInfo /*OPTIONAL*/);
1534
1535 NTSTATUS
1536 NTAPI
1537 RtlDestroyProcessParameters(
1538 /*IN*/ PRTL_USER_PROCESS_PARAMETERS ProcessParameters);
1539
1540 typedef struct _DEBUG_BUFFER {
1541 HANDLE SectionHandle;
1542 PVOID SectionBase;
1543 PVOID RemoteSectionBase;
1544 ULONG SectionBaseDelta;
1545 HANDLE EventPairHandle;
1546 ULONG Unknown[2];
1547 HANDLE RemoteThreadHandle;
1548 ULONG InfoClassMask;
1549 ULONG SizeOfInfo;
1550 ULONG AllocatedSize;
1551 ULONG SectionSize;
1552 PVOID ModuleInformation;
1553 PVOID BackTraceInformation;
1554 PVOID HeapInformation;
1555 PVOID LockInformation;
1556 PVOID Reserved[8];
1557 } DEBUG_BUFFER, *PDEBUG_BUFFER;
1558
1559 PDEBUG_BUFFER
1560 NTAPI
1561 RtlCreateQueryDebugBuffer(
1562 /*IN*/ ULONG Size,
1563 /*IN*/ BOOLEAN EventPair);
1564
1565 /* RtlQueryProcessDebugInformation.DebugInfoClassMask constants */
1566 #define PDI_MODULES 0x01
1567 #define PDI_BACKTRACE 0x02
1568 #define PDI_HEAPS 0x04
1569 #define PDI_HEAP_TAGS 0x08
1570 #define PDI_HEAP_BLOCKS 0x10
1571 #define PDI_LOCKS 0x20
1572
1573 NTSTATUS
1574 NTAPI
1575 RtlQueryProcessDebugInformation(
1576 /*IN*/ ULONG ProcessId,
1577 /*IN*/ ULONG DebugInfoClassMask,
1578 /*IN OUT*/ PDEBUG_BUFFER DebugBuffer);
1579
1580 NTSTATUS
1581 NTAPI
1582 RtlDestroyQueryDebugBuffer(
1583 /*IN*/ PDEBUG_BUFFER DebugBuffer);
1584
1585 /* DEBUG_MODULE_INFORMATION.Flags constants */
1586 #define LDRP_STATIC_LINK 0x00000002
1587 #define LDRP_IMAGE_DLL 0x00000004
1588 #define LDRP_LOAD_IN_PROGRESS 0x00001000
1589 #define LDRP_UNLOAD_IN_PROGRESS 0x00002000
1590 #define LDRP_ENTRY_PROCESSED 0x00004000
1591 #define LDRP_ENTRY_INSERTED 0x00008000
1592 #define LDRP_CURRENT_LOAD 0x00010000
1593 #define LDRP_FAILED_BUILTIN_LOAD 0x00020000
1594 #define LDRP_DONT_CALL_FOR_THREADS 0x00040000
1595 #define LDRP_PROCESS_ATTACH_CALLED 0x00080000
1596 #define LDRP_DEBUG_SYMBOLS_LOADED 0x00100000
1597 #define LDRP_IMAGE_NOT_AT_BASE 0x00200000
1598 #define LDRP_WX86_IGNORE_MACHINETYPE 0x00400000
1599
1600 typedef struct _DEBUG_MODULE_INFORMATION {
1601 ULONG Reserved[2];
1602 ULONG Base;
1603 ULONG Size;
1604 ULONG Flags;
1605 USHORT Index;
1606 USHORT Unknown;
1607 USHORT LoadCount;
1608 USHORT ModuleNameOffset;
1609 CHAR ImageName[256];
1610 } DEBUG_MODULE_INFORMATION, *PDEBUG_MODULE_INFORMATION;
1611
1612 typedef struct _DEBUG_HEAP_INFORMATION {
1613 ULONG Base;
1614 ULONG Flags;
1615 USHORT Granularity;
1616 USHORT Unknown;
1617 ULONG Allocated;
1618 ULONG Committed;
1619 ULONG TagCount;
1620 ULONG BlockCount;
1621 ULONG Reserved[7];
1622 PVOID Tags;
1623 PVOID Blocks;
1624 } DEBUG_HEAP_INFORMATION, *PDEBUG_HEAP_INFORMATION;
1625
1626 typedef struct _DEBUG_LOCK_INFORMATION {
1627 PVOID Address;
1628 USHORT Type;
1629 USHORT CreatorBackTraceIndex;
1630 ULONG OwnerThreadId;
1631 ULONG ActiveCount;
1632 ULONG ContentionCount;
1633 ULONG EntryCount;
1634 ULONG RecursionCount;
1635 ULONG NumberOfSharedWaiters;
1636 ULONG NumberOfExclusiveWaiters;
1637 } DEBUG_LOCK_INFORMATION, *PDEBUG_LOCK_INFORMATION;
1638
1639
1640
1641 /* Jobs */
1642
1643 NTOSAPI
1644 NTSTATUS
1645 NTAPI
1646 ZwCreateJobObject(
1647 /*OUT*/ PHANDLE JobHandle,
1648 /*IN*/ ACCESS_MASK DesiredAccess,
1649 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes);
1650
1651 NTOSAPI
1652 NTSTATUS
1653 NTAPI
1654 ZwOpenJobObject(
1655 /*OUT*/ PHANDLE JobHandle,
1656 /*IN*/ ACCESS_MASK DesiredAccess,
1657 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes);
1658
1659 NTOSAPI
1660 NTSTATUS
1661 NTAPI
1662 ZwTerminateJobObject(
1663 /*IN*/ HANDLE JobHandle,
1664 /*IN*/ NTSTATUS ExitStatus);
1665
1666 NTOSAPI
1667 NTSTATUS
1668 NTAPI
1669 ZwAssignProcessToJobObject(
1670 /*IN*/ HANDLE JobHandle,
1671 /*IN*/ HANDLE ProcessHandle);
1672
1673 NTOSAPI
1674 NTSTATUS
1675 NTAPI
1676 ZwQueryInformationJobObject(
1677 /*IN*/ HANDLE JobHandle,
1678 /*IN*/ JOBOBJECTINFOCLASS JobInformationClass,
1679 /*OUT*/ PVOID JobInformation,
1680 /*IN*/ ULONG JobInformationLength,
1681 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
1682
1683 NTOSAPI
1684 NTSTATUS
1685 NTAPI
1686 ZwSetInformationJobObject(
1687 /*IN*/ HANDLE JobHandle,
1688 /*IN*/ JOBOBJECTINFOCLASS JobInformationClass,
1689 /*IN*/ PVOID JobInformation,
1690 /*IN*/ ULONG JobInformationLength);
1691
1692
1693 /* Tokens */
1694
1695 NTOSAPI
1696 NTSTATUS
1697 NTAPI
1698 ZwCreateToken(
1699 /*OUT*/ PHANDLE TokenHandle,
1700 /*IN*/ ACCESS_MASK DesiredAccess,
1701 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1702 /*IN*/ TOKEN_TYPE Type,
1703 /*IN*/ PLUID AuthenticationId,
1704 /*IN*/ PLARGE_INTEGER ExpirationTime,
1705 /*IN*/ PTOKEN_USER User,
1706 /*IN*/ PTOKEN_GROUPS Groups,
1707 /*IN*/ PTOKEN_PRIVILEGES Privileges,
1708 /*IN*/ PTOKEN_OWNER Owner,
1709 /*IN*/ PTOKEN_PRIMARY_GROUP PrimaryGroup,
1710 /*IN*/ PTOKEN_DEFAULT_DACL DefaultDacl,
1711 /*IN*/ PTOKEN_SOURCE Source
1712 );
1713
1714 NTOSAPI
1715 NTSTATUS
1716 NTAPI
1717 NtOpenProcessToken(
1718 /*IN*/ HANDLE ProcessHandle,
1719 /*IN*/ ACCESS_MASK DesiredAccess,
1720 /*OUT*/ PHANDLE TokenHandle);
1721
1722 NTOSAPI
1723 NTSTATUS
1724 NTAPI
1725 ZwOpenProcessToken(
1726 /*IN*/ HANDLE ProcessHandle,
1727 /*IN*/ ACCESS_MASK DesiredAccess,
1728 /*OUT*/ PHANDLE TokenHandle);
1729
1730 NTOSAPI
1731 NTSTATUS
1732 NTAPI
1733 NtOpenThreadToken(
1734 /*IN*/ HANDLE ThreadHandle,
1735 /*IN*/ ACCESS_MASK DesiredAccess,
1736 /*IN*/ BOOLEAN OpenAsSelf,
1737 /*OUT*/ PHANDLE TokenHandle);
1738
1739 NTOSAPI
1740 NTSTATUS
1741 NTAPI
1742 ZwOpenThreadToken(
1743 /*IN*/ HANDLE ThreadHandle,
1744 /*IN*/ ACCESS_MASK DesiredAccess,
1745 /*IN*/ BOOLEAN OpenAsSelf,
1746 /*OUT*/ PHANDLE TokenHandle);
1747
1748 NTOSAPI
1749 NTSTATUS
1750 NTAPI
1751 NtDuplicateToken(
1752 /*IN*/ HANDLE ExistingTokenHandle,
1753 /*IN*/ ACCESS_MASK DesiredAccess,
1754 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1755 /*IN*/ BOOLEAN EffectiveOnly,
1756 /*IN*/ TOKEN_TYPE TokenType,
1757 /*OUT*/ PHANDLE NewTokenHandle);
1758
1759 NTOSAPI
1760 NTSTATUS
1761 NTAPI
1762 ZwDuplicateToken(
1763 /*IN*/ HANDLE ExistingTokenHandle,
1764 /*IN*/ ACCESS_MASK DesiredAccess,
1765 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1766 /*IN*/ BOOLEAN EffectiveOnly,
1767 /*IN*/ TOKEN_TYPE TokenType,
1768 /*OUT*/ PHANDLE NewTokenHandle);
1769
1770 NTOSAPI
1771 NTSTATUS
1772 NTAPI
1773 ZwFilterToken(
1774 /*IN*/ HANDLE ExistingTokenHandle,
1775 /*IN*/ ULONG Flags,
1776 /*IN*/ PTOKEN_GROUPS SidsToDisable,
1777 /*IN*/ PTOKEN_PRIVILEGES PrivilegesToDelete,
1778 /*IN*/ PTOKEN_GROUPS SidsToRestricted,
1779 /*OUT*/ PHANDLE NewTokenHandle);
1780
1781 NTOSAPI
1782 NTSTATUS
1783 NTAPI
1784 NtAdjustPrivilegesToken(
1785 /*IN*/ HANDLE TokenHandle,
1786 /*IN*/ BOOLEAN DisableAllPrivileges,
1787 /*IN*/ PTOKEN_PRIVILEGES NewState,
1788 /*IN*/ ULONG BufferLength,
1789 /*OUT*/ PTOKEN_PRIVILEGES PreviousState /*OPTIONAL*/,
1790 /*OUT*/ PULONG ReturnLength);
1791
1792 NTOSAPI
1793 NTSTATUS
1794 NTAPI
1795 ZwAdjustPrivilegesToken(
1796 /*IN*/ HANDLE TokenHandle,
1797 /*IN*/ BOOLEAN DisableAllPrivileges,
1798 /*IN*/ PTOKEN_PRIVILEGES NewState,
1799 /*IN*/ ULONG BufferLength,
1800 /*OUT*/ PTOKEN_PRIVILEGES PreviousState /*OPTIONAL*/,
1801 /*OUT*/ PULONG ReturnLength);
1802
1803 NTOSAPI
1804 NTSTATUS
1805 NTAPI
1806 ZwAdjustGroupsToken(
1807 /*IN*/ HANDLE TokenHandle,
1808 /*IN*/ BOOLEAN ResetToDefault,
1809 /*IN*/ PTOKEN_GROUPS NewState,
1810 /*IN*/ ULONG BufferLength,
1811 /*OUT*/ PTOKEN_GROUPS PreviousState /*OPTIONAL*/,
1812 /*OUT*/ PULONG ReturnLength);
1813
1814 NTOSAPI
1815 NTSTATUS
1816 NTAPI
1817 NtQueryInformationToken(
1818 /*IN*/ HANDLE TokenHandle,
1819 /*IN*/ TOKEN_INFORMATION_CLASS TokenInformationClass,
1820 /*OUT*/ PVOID TokenInformation,
1821 /*IN*/ ULONG TokenInformationLength,
1822 /*OUT*/ PULONG ReturnLength);
1823
1824 NTOSAPI
1825 NTSTATUS
1826 NTAPI
1827 ZwQueryInformationToken(
1828 /*IN*/ HANDLE TokenHandle,
1829 /*IN*/ TOKEN_INFORMATION_CLASS TokenInformationClass,
1830 /*OUT*/ PVOID TokenInformation,
1831 /*IN*/ ULONG TokenInformationLength,
1832 /*OUT*/ PULONG ReturnLength);
1833
1834 NTOSAPI
1835 NTSTATUS
1836 NTAPI
1837 ZwSetInformationToken(
1838 /*IN*/ HANDLE TokenHandle,
1839 /*IN*/ TOKEN_INFORMATION_CLASS TokenInformationClass,
1840 /*IN*/ PVOID TokenInformation,
1841 /*IN*/ ULONG TokenInformationLength);
1842
1843
1844
1845
1846 /* Time */
1847
1848 NTOSAPI
1849 NTSTATUS
1850 NTAPI
1851 ZwQuerySystemTime(
1852 /*OUT*/ PLARGE_INTEGER CurrentTime);
1853
1854 NTOSAPI
1855 NTSTATUS
1856 NTAPI
1857 ZwSetSystemTime(
1858 /*IN*/ PLARGE_INTEGER NewTime,
1859 /*OUT*/ PLARGE_INTEGER OldTime /*OPTIONAL*/);
1860
1861 NTOSAPI
1862 NTSTATUS
1863 NTAPI
1864 ZwQueryPerformanceCounter(
1865 /*OUT*/ PLARGE_INTEGER PerformanceCount,
1866 /*OUT*/ PLARGE_INTEGER PerformanceFrequency /*OPTIONAL*/);
1867
1868 NTOSAPI
1869 NTSTATUS
1870 NTAPI
1871 ZwQueryPerformanceCounter(
1872 /*OUT*/ PLARGE_INTEGER PerformanceCount,
1873 /*OUT*/ PLARGE_INTEGER PerformanceFrequency /*OPTIONAL*/);
1874
1875 NTOSAPI
1876 NTSTATUS
1877 NTAPI
1878 ZwQueryTimerResolution(
1879 /*OUT*/ PULONG CoarsestResolution,
1880 /*OUT*/ PULONG FinestResolution,
1881 /*OUT*/ PULONG ActualResolution);
1882
1883 NTOSAPI
1884 NTSTATUS
1885 NTAPI
1886 ZwDelayExecution(
1887 /*IN*/ BOOLEAN Alertable,
1888 /*IN*/ PLARGE_INTEGER Interval);
1889
1890 NTOSAPI
1891 NTSTATUS
1892 NTAPI
1893 ZwYieldExecution(
1894 VOID);
1895
1896 NTOSAPI
1897 ULONG
1898 NTAPI
1899 ZwGetTickCount(
1900 VOID);
1901
1902
1903
1904
1905 /* Execution profiling */
1906
1907 NTOSAPI
1908 NTSTATUS
1909 NTAPI
1910 ZwCreateProfile(
1911 /*OUT*/ PHANDLE ProfileHandle,
1912 /*IN*/ HANDLE ProcessHandle,
1913 /*IN*/ PVOID Base,
1914 /*IN*/ ULONG Size,
1915 /*IN*/ ULONG BucketShift,
1916 /*IN*/ PULONG Buffer,
1917 /*IN*/ ULONG BufferLength,
1918 /*IN*/ KPROFILE_SOURCE Source,
1919 /*IN*/ ULONG ProcessorMask);
1920
1921 NTOSAPI
1922 NTSTATUS
1923 NTAPI
1924 ZwSetIntervalProfile(
1925 /*IN*/ ULONG Interval,
1926 /*IN*/ KPROFILE_SOURCE Source);
1927
1928 NTOSAPI
1929 NTSTATUS
1930 NTAPI
1931 ZwQueryIntervalProfile(
1932 /*IN*/ KPROFILE_SOURCE Source,
1933 /*OUT*/ PULONG Interval);
1934
1935 NTOSAPI
1936 NTSTATUS
1937 NTAPI
1938 ZwStartProfile(
1939 /*IN*/ HANDLE ProfileHandle);
1940
1941 NTOSAPI
1942 NTSTATUS
1943 NTAPI
1944 ZwStopProfile(
1945 /*IN*/ HANDLE ProfileHandle);
1946
1947 /* Local Procedure Call (LPC) */
1948
1949 typedef struct _LPC_MESSAGE {
1950 USHORT DataSize;
1951 USHORT MessageSize;
1952 USHORT MessageType;
1953 USHORT VirtualRangesOffset;
1954 CLIENT_ID ClientId;
1955 ULONG MessageId;
1956 ULONG SectionSize;
1957 UCHAR Data[ANYSIZE_ARRAY];
1958 } LPC_MESSAGE, *PLPC_MESSAGE;
1959
1960 #define LPC_MESSAGE_BASE_SIZE 24
1961
1962 typedef enum _LPC_TYPE {
1963 LPC_NEW_MESSAGE,
1964 LPC_REQUEST,
1965 LPC_REPLY,
1966 LPC_DATAGRAM,
1967 LPC_LOST_REPLY,
1968 LPC_PORT_CLOSED,
1969 LPC_CLIENT_DIED,
1970 LPC_EXCEPTION,
1971 LPC_DEBUG_EVENT,
1972 LPC_ERROR_EVENT,
1973 LPC_CONNECTION_REQUEST,
1974 LPC_CONNECTION_REFUSED,
1975 LPC_MAXIMUM
1976 } LPC_TYPE;
1977
1978 typedef struct _LPC_SECTION_WRITE {
1979 ULONG Length;
1980 HANDLE SectionHandle;
1981 ULONG SectionOffset;
1982 ULONG ViewSize;
1983 PVOID ViewBase;
1984 PVOID TargetViewBase;
1985 } LPC_SECTION_WRITE, *PLPC_SECTION_WRITE;
1986
1987 typedef struct _LPC_SECTION_READ {
1988 ULONG Length;
1989 ULONG ViewSize;
1990 PVOID ViewBase;
1991 } LPC_SECTION_READ, *PLPC_SECTION_READ;
1992
1993 NTOSAPI
1994 NTSTATUS
1995 NTAPI
1996 ZwCreatePort(
1997 /*OUT*/ PHANDLE PortHandle,
1998 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
1999 /*IN*/ ULONG MaxDataSize,
2000 /*IN*/ ULONG MaxMessageSize,
2001 /*IN*/ ULONG Reserved);
2002
2003 NTOSAPI
2004 NTSTATUS
2005 NTAPI
2006 ZwCreateWaitablePort(
2007 /*OUT*/ PHANDLE PortHandle,
2008 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes,
2009 /*IN*/ ULONG MaxDataSize,
2010 /*IN*/ ULONG MaxMessageSize,
2011 /*IN*/ ULONG Reserved);
2012
2013 NTOSAPI
2014 NTSTATUS
2015 NTAPI
2016 NtConnectPort(
2017 /*OUT*/ PHANDLE PortHandle,
2018 /*IN*/ PUNICODE_STRING PortName,
2019 /*IN*/ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
2020 /*IN OUT*/ PLPC_SECTION_WRITE WriteSection /*OPTIONAL*/,
2021 /*IN OUT*/ PLPC_SECTION_READ ReadSection /*OPTIONAL*/,
2022 /*OUT*/ PULONG MaxMessageSize /*OPTIONAL*/,
2023 /*IN OUT*/ PVOID ConnectData /*OPTIONAL*/,
2024 /*IN OUT*/ PULONG ConnectDataLength /*OPTIONAL*/);
2025
2026 NTOSAPI
2027 NTSTATUS
2028 NTAPI
2029 ZwConnectPort(
2030 /*OUT*/ PHANDLE PortHandle,
2031 /*IN*/ PUNICODE_STRING PortName,
2032 /*IN*/ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
2033 /*IN OUT*/ PLPC_SECTION_WRITE WriteSection /*OPTIONAL*/,
2034 /*IN OUT*/ PLPC_SECTION_READ ReadSection /*OPTIONAL*/,
2035 /*OUT*/ PULONG MaxMessageSize /*OPTIONAL*/,
2036 /*IN OUT*/ PVOID ConnectData /*OPTIONAL*/,
2037 /*IN OUT*/ PULONG ConnectDataLength /*OPTIONAL*/);
2038
2039 NTOSAPI
2040 NTSTATUS
2041 NTAPI
2042 ZwConnectPort(
2043 /*OUT*/ PHANDLE PortHandle,
2044 /*IN*/ PUNICODE_STRING PortName,
2045 /*IN*/ PSECURITY_QUALITY_OF_SERVICE SecurityQos,
2046 /*IN OUT*/ PLPC_SECTION_WRITE WriteSection /*OPTIONAL*/,
2047 /*IN OUT*/ PLPC_SECTION_READ ReadSection /*OPTIONAL*/,
2048 /*OUT*/ PULONG MaxMessageSize /*OPTIONAL*/,
2049 /*IN OUT*/ PVOID ConnectData /*OPTIONAL*/,
2050 /*IN OUT*/ PULONG ConnectDataLength /*OPTIONAL*/);
2051
2052 NTOSAPI
2053 NTSTATUS
2054 NTAPI
2055 ZwListenPort(
2056 /*IN*/ HANDLE PortHandle,
2057 /*OUT*/ PLPC_MESSAGE Message);
2058
2059 NTOSAPI
2060 NTSTATUS
2061 NTAPI
2062 ZwAcceptConnectPort(
2063 /*OUT*/ PHANDLE PortHandle,
2064 /*IN*/ ULONG PortIdentifier,
2065 /*IN*/ PLPC_MESSAGE Message,
2066 /*IN*/ BOOLEAN Accept,
2067 /*IN OUT*/ PLPC_SECTION_WRITE WriteSection /*OPTIONAL*/,
2068 /*IN OUT*/ PLPC_SECTION_READ ReadSection /*OPTIONAL*/);
2069
2070 NTOSAPI
2071 NTSTATUS
2072 NTAPI
2073 ZwCompleteConnectPort(
2074 /*IN*/ HANDLE PortHandle);
2075
2076 NTOSAPI
2077 NTSTATUS
2078 NTAPI
2079 NtRequestPort(
2080 /*IN*/ HANDLE PortHandle,
2081 /*IN*/ PLPC_MESSAGE RequestMessage);
2082
2083 NTOSAPI
2084 NTSTATUS
2085 NTAPI
2086 NtRequestWaitReplyPort(
2087 /*IN*/ HANDLE PortHandle,
2088 /*IN*/ PLPC_MESSAGE RequestMessage,
2089 /*OUT*/ PLPC_MESSAGE ReplyMessage);
2090
2091 NTOSAPI
2092 NTSTATUS
2093 NTAPI
2094 ZwRequestWaitReplyPort(
2095 /*IN*/ HANDLE PortHandle,
2096 /*IN*/ PLPC_MESSAGE RequestMessage,
2097 /*OUT*/ PLPC_MESSAGE ReplyMessage);
2098
2099 NTOSAPI
2100 NTSTATUS
2101 NTAPI
2102 ZwReplyPort(
2103 /*IN*/ HANDLE PortHandle,
2104 /*IN*/ PLPC_MESSAGE ReplyMessage);
2105
2106 NTOSAPI
2107 NTSTATUS
2108 NTAPI
2109 ZwReplyWaitReplyPort(
2110 /*IN*/ HANDLE PortHandle,
2111 /*IN OUT*/ PLPC_MESSAGE ReplyMessage);
2112
2113 NTOSAPI
2114 NTSTATUS
2115 NTAPI
2116 ZwReplyWaitReceivePort(
2117 /*IN*/ HANDLE PortHandle,
2118 /*OUT*/ PULONG PortIdentifier /*OPTIONAL*/,
2119 /*IN*/ PLPC_MESSAGE ReplyMessage /*OPTIONAL*/,
2120 /*OUT*/ PLPC_MESSAGE Message);
2121
2122 NTOSAPI
2123 NTSTATUS
2124 NTAPI
2125 ZwReplyWaitReceivePortEx(
2126 /*IN*/ HANDLE PortHandle,
2127 /*OUT*/ PULONG PortIdentifier /*OPTIONAL*/,
2128 /*IN*/ PLPC_MESSAGE ReplyMessage /*OPTIONAL*/,
2129 /*OUT*/ PLPC_MESSAGE Message,
2130 /*IN*/ PLARGE_INTEGER Timeout);
2131
2132 NTOSAPI
2133 NTSTATUS
2134 NTAPI
2135 ZwReadRequestData(
2136 /*IN*/ HANDLE PortHandle,
2137 /*IN*/ PLPC_MESSAGE Message,
2138 /*IN*/ ULONG Index,
2139 /*OUT*/ PVOID Buffer,
2140 /*IN*/ ULONG BufferLength,
2141 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
2142
2143 NTOSAPI
2144 NTSTATUS
2145 NTAPI
2146 ZwWriteRequestData(
2147 /*IN*/ HANDLE PortHandle,
2148 /*IN*/ PLPC_MESSAGE Message,
2149 /*IN*/ ULONG Index,
2150 /*IN*/ PVOID Buffer,
2151 /*IN*/ ULONG BufferLength,
2152 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
2153
2154 typedef enum _PORT_INFORMATION_CLASS {
2155 PortBasicInformation
2156 } PORT_INFORMATION_CLASS;
2157
2158 NTOSAPI
2159 NTSTATUS
2160 NTAPI
2161 ZwQueryInformationPort(
2162 /*IN*/ HANDLE PortHandle,
2163 /*IN*/ PORT_INFORMATION_CLASS PortInformationClass,
2164 /*OUT*/ PVOID PortInformation,
2165 /*IN*/ ULONG PortInformationLength,
2166 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
2167
2168 NTOSAPI
2169 NTSTATUS
2170 NTAPI
2171 ZwImpersonateClientOfPort(
2172 /*IN*/ HANDLE PortHandle,
2173 /*IN*/ PLPC_MESSAGE Message);
2174
2175
2176
2177
2178 /* Files */
2179
2180 NTOSAPI
2181 NTSTATUS
2182 NTAPI
2183 NtDeleteFile(
2184 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes);
2185
2186 NTOSAPI
2187 NTSTATUS
2188 NTAPI
2189 ZwDeleteFile(
2190 /*IN*/ POBJECT_ATTRIBUTES ObjectAttributes);
2191
2192 NTOSAPI
2193 NTSTATUS
2194 NTAPI
2195 ZwFlushBuffersFile(
2196 /*IN*/ HANDLE FileHandle,
2197 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock);
2198
2199 NTOSAPI
2200 NTSTATUS
2201 NTAPI
2202 ZwCancelIoFile(
2203 /*IN*/ HANDLE FileHandle,
2204 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock);
2205
2206 NTOSAPI
2207 NTSTATUS
2208 NTAPI
2209 ZwReadFileScatter(
2210 /*IN*/ HANDLE FileHandle,
2211 /*IN*/ HANDLE Event /*OPTIONAL*/,
2212 /*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
2213 /*IN*/ PVOID ApcContext /*OPTIONAL*/,
2214 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
2215 /*IN*/ PFILE_SEGMENT_ELEMENT Buffer,
2216 /*IN*/ ULONG Length,
2217 /*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
2218 /*IN*/ PULONG Key /*OPTIONAL*/);
2219
2220 NTOSAPI
2221 NTSTATUS
2222 NTAPI
2223 ZwWriteFileGather(
2224 /*IN*/ HANDLE FileHandle,
2225 /*IN*/ HANDLE Event /*OPTIONAL*/,
2226 /*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
2227 /*IN*/ PVOID ApcContext /*OPTIONAL*/,
2228 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
2229 /*IN*/ PFILE_SEGMENT_ELEMENT Buffer,
2230 /*IN*/ ULONG Length,
2231 /*IN*/ PLARGE_INTEGER ByteOffset /*OPTIONAL*/,
2232 /*IN*/ PULONG Key /*OPTIONAL*/);
2233
2234
2235
2236
2237 /* Registry keys */
2238
2239 NTOSAPI
2240 NTSTATUS
2241 NTAPI
2242 ZwSaveKey(
2243 /*IN*/ HANDLE KeyHandle,
2244 /*IN*/ HANDLE FileHandle);
2245
2246 NTOSAPI
2247 NTSTATUS
2248 NTAPI
2249 ZwSaveMergedKeys(
2250 /*IN*/ HANDLE KeyHandle1,
2251 /*IN*/ HANDLE KeyHandle2,
2252 /*IN*/ HANDLE FileHandle);
2253
2254 NTOSAPI
2255 NTSTATUS
2256 NTAPI
2257 ZwRestoreKey(
2258 /*IN*/ HANDLE KeyHandle,
2259 /*IN*/ HANDLE FileHandle,
2260 /*IN*/ ULONG Flags);
2261
2262 NTOSAPI
2263 NTSTATUS
2264 NTAPI
2265 ZwLoadKey(
2266 /*IN*/ POBJECT_ATTRIBUTES KeyObjectAttributes,
2267 /*IN*/ POBJECT_ATTRIBUTES FileObjectAttributes);
2268
2269 NTOSAPI
2270 NTSTATUS
2271 NTAPI
2272 ZwLoadKey2(
2273 /*IN*/ POBJECT_ATTRIBUTES KeyObjectAttributes,
2274 /*IN*/ POBJECT_ATTRIBUTES FileObjectAttributes,
2275 /*IN*/ ULONG Flags);
2276
2277 NTOSAPI
2278 NTSTATUS
2279 NTAPI
2280 ZwUnloadKey(
2281 /*IN*/ POBJECT_ATTRIBUTES KeyObjectAttributes);
2282
2283 NTOSAPI
2284 NTSTATUS
2285 NTAPI
2286 ZwQueryOpenSubKeys(
2287 /*IN*/ POBJECT_ATTRIBUTES KeyObjectAttributes,
2288 /*OUT*/ PULONG NumberOfKeys);
2289
2290 NTOSAPI
2291 NTSTATUS
2292 NTAPI
2293 ZwReplaceKey(
2294 /*IN*/ POBJECT_ATTRIBUTES NewFileObjectAttributes,
2295 /*IN*/ HANDLE KeyHandle,
2296 /*IN*/ POBJECT_ATTRIBUTES OldFileObjectAttributes);
2297
2298 typedef enum _KEY_SET_INFORMATION_CLASS {
2299 KeyLastWriteTimeInformation
2300 } KEY_SET_INFORMATION_CLASS;
2301
2302 NTOSAPI
2303 NTSTATUS
2304 NTAPI
2305 ZwSetInformationKey(
2306 /*IN*/ HANDLE KeyHandle,
2307 /*IN*/ KEY_SET_INFORMATION_CLASS KeyInformationClass,
2308 /*IN*/ PVOID KeyInformation,
2309 /*IN*/ ULONG KeyInformationLength);
2310
2311 typedef struct _KEY_LAST_WRITE_TIME_INFORMATION {
2312 LARGE_INTEGER LastWriteTime;
2313 } KEY_LAST_WRITE_TIME_INFORMATION, *PKEY_LAST_WRITE_TIME_INFORMATION;
2314
2315 typedef struct _KEY_NAME_INFORMATION {
2316 ULONG NameLength;
2317 WCHAR Name[1];
2318 } KEY_NAME_INFORMATION, *PKEY_NAME_INFORMATION;
2319
2320 NTOSAPI
2321 NTSTATUS
2322 NTAPI
2323 ZwNotifyChangeKey(
2324 /*IN*/ HANDLE KeyHandle,
2325 /*IN*/ HANDLE EventHandle /*OPTIONAL*/,
2326 /*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
2327 /*IN*/ PVOID ApcContext /*OPTIONAL*/,
2328 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
2329 /*IN*/ ULONG NotifyFilter,
2330 /*IN*/ BOOLEAN WatchSubtree,
2331 /*IN*/ PVOID Buffer,
2332 /*IN*/ ULONG BufferLength,
2333 /*IN*/ BOOLEAN Asynchronous);
2334
2335 /* ZwNotifyChangeMultipleKeys.Flags constants */
2336 #define REG_MONITOR_SINGLE_KEY 0x00
2337 #define REG_MONITOR_SECOND_KEY 0x01
2338
2339 NTOSAPI
2340 NTSTATUS
2341 NTAPI
2342 ZwNotifyChangeMultipleKeys(
2343 /*IN*/ HANDLE KeyHandle,
2344 /*IN*/ ULONG Flags,
2345 /*IN*/ POBJECT_ATTRIBUTES KeyObjectAttributes,
2346 /*IN*/ HANDLE EventHandle /*OPTIONAL*/,
2347 /*IN*/ PIO_APC_ROUTINE ApcRoutine /*OPTIONAL*/,
2348 /*IN*/ PVOID ApcContext /*OPTIONAL*/,
2349 /*OUT*/ PIO_STATUS_BLOCK IoStatusBlock,
2350 /*IN*/ ULONG NotifyFilter,
2351 /*IN*/ BOOLEAN WatchSubtree,
2352 /*IN*/ PVOID Buffer,
2353 /*IN*/ ULONG BufferLength,
2354 /*IN*/ BOOLEAN Asynchronous);
2355
2356 NTOSAPI
2357 NTSTATUS
2358 NTAPI
2359 ZwQueryMultipleValueKey(
2360 /*IN*/ HANDLE KeyHandle,
2361 /*IN OUT*/ PKEY_VALUE_ENTRY ValueList,
2362 /*IN*/ ULONG NumberOfValues,
2363 /*OUT*/ PVOID Buffer,
2364 /*IN OUT*/ PULONG Length,
2365 /*OUT*/ PULONG ReturnLength);
2366
2367 NTOSAPI
2368 NTSTATUS
2369 NTAPI
2370 ZwInitializeRegistry(
2371 /*IN*/ BOOLEAN Setup);
2372
2373
2374
2375
2376 /* Security and auditing */
2377
2378 NTOSAPI
2379 NTSTATUS
2380 NTAPI
2381 ZwPrivilegeCheck(
2382 /*IN*/ HANDLE TokenHandle,
2383 /*IN*/ PPRIVILEGE_SET RequiredPrivileges,
2384 /*OUT*/ PBOOLEAN Result);
2385
2386 NTOSAPI
2387 NTSTATUS
2388 NTAPI
2389 ZwPrivilegeObjectAuditAlarm(
2390 /*IN*/ PUNICODE_STRING SubsystemName,
2391 /*IN*/ PVOID HandleId,
2392 /*IN*/ HANDLE TokenHandle,
2393 /*IN*/ ACCESS_MASK DesiredAccess,
2394 /*IN*/ PPRIVILEGE_SET Privileges,
2395 /*IN*/ BOOLEAN AccessGranted);
2396
2397 NTOSAPI
2398 NTSTATUS
2399 NTAPI
2400 ZwPrivilegeObjectAuditAlarm(
2401 /*IN*/ PUNICODE_STRING SubsystemName,
2402 /*IN*/ PVOID HandleId,
2403 /*IN*/ HANDLE TokenHandle,
2404 /*IN*/ ACCESS_MASK DesiredAccess,
2405 /*IN*/ PPRIVILEGE_SET Privileges,
2406 /*IN*/ BOOLEAN AccessGranted);
2407
2408 NTOSAPI
2409 NTSTATUS
2410 NTAPI
2411 ZwAccessCheck(
2412 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2413 /*IN*/ HANDLE TokenHandle,
2414 /*IN*/ ACCESS_MASK DesiredAccess,
2415 /*IN*/ PGENERIC_MAPPING GenericMapping,
2416 /*IN*/ PPRIVILEGE_SET PrivilegeSet,
2417 /*IN*/ PULONG PrivilegeSetLength,
2418 /*OUT*/ PACCESS_MASK GrantedAccess,
2419 /*OUT*/ PBOOLEAN AccessStatus);
2420
2421 NTOSAPI
2422 NTSTATUS
2423 NTAPI
2424 ZwAccessCheckAndAuditAlarm(
2425 /*IN*/ PUNICODE_STRING SubsystemName,
2426 /*IN*/ PVOID HandleId,
2427 /*IN*/ PUNICODE_STRING ObjectTypeName,
2428 /*IN*/ PUNICODE_STRING ObjectName,
2429 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2430 /*IN*/ ACCESS_MASK DesiredAccess,
2431 /*IN*/ PGENERIC_MAPPING GenericMapping,
2432 /*IN*/ BOOLEAN ObjectCreation,
2433 /*OUT*/ PACCESS_MASK GrantedAccess,
2434 /*OUT*/ PBOOLEAN AccessStatus,
2435 /*OUT*/ PBOOLEAN GenerateOnClose);
2436
2437 NTOSAPI
2438 NTSTATUS
2439 NTAPI
2440 ZwAccessCheckByType(
2441 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2442 /*IN*/ PSID PrincipalSelfSid,
2443 /*IN*/ HANDLE TokenHandle,
2444 /*IN*/ ULONG DesiredAccess,
2445 /*IN*/ POBJECT_TYPE_LIST ObjectTypeList,
2446 /*IN*/ ULONG ObjectTypeListLength,
2447 /*IN*/ PGENERIC_MAPPING GenericMapping,
2448 /*IN*/ PPRIVILEGE_SET PrivilegeSet,
2449 /*IN*/ PULONG PrivilegeSetLength,
2450 /*OUT*/ PACCESS_MASK GrantedAccess,
2451 /*OUT*/ PULONG AccessStatus);
2452
2453 typedef enum _AUDIT_EVENT_TYPE {
2454 AuditEventObjectAccess,
2455 AuditEventDirectoryServiceAccess
2456 } AUDIT_EVENT_TYPE, *PAUDIT_EVENT_TYPE;
2457
2458 NTOSAPI
2459 NTSTATUS
2460 NTAPI
2461 ZwAccessCheckByTypeAndAuditAlarm(
2462 /*IN*/ PUNICODE_STRING SubsystemName,
2463 /*IN*/ PVOID HandleId,
2464 /*IN*/ PUNICODE_STRING ObjectTypeName,
2465 /*IN*/ PUNICODE_STRING ObjectName,
2466 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2467 /*IN*/ PSID PrincipalSelfSid,
2468 /*IN*/ ACCESS_MASK DesiredAccess,
2469 /*IN*/ AUDIT_EVENT_TYPE AuditType,
2470 /*IN*/ ULONG Flags,
2471 /*IN*/ POBJECT_TYPE_LIST ObjectTypeList,
2472 /*IN*/ ULONG ObjectTypeListLength,
2473 /*IN*/ PGENERIC_MAPPING GenericMapping,
2474 /*IN*/ BOOLEAN ObjectCreation,
2475 /*OUT*/ PACCESS_MASK GrantedAccess,
2476 /*OUT*/ PULONG AccessStatus,
2477 /*OUT*/ PBOOLEAN GenerateOnClose);
2478
2479 NTOSAPI
2480 NTSTATUS
2481 NTAPI
2482 ZwAccessCheckByTypeResultList(
2483 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2484 /*IN*/ PSID PrincipalSelfSid,
2485 /*IN*/ HANDLE TokenHandle,
2486 /*IN*/ ACCESS_MASK DesiredAccess,
2487 /*IN*/ POBJECT_TYPE_LIST ObjectTypeList,
2488 /*IN*/ ULONG ObjectTypeListLength,
2489 /*IN*/ PGENERIC_MAPPING GenericMapping,
2490 /*IN*/ PPRIVILEGE_SET PrivilegeSet,
2491 /*IN*/ PULONG PrivilegeSetLength,
2492 /*OUT*/ PACCESS_MASK GrantedAccessList,
2493 /*OUT*/ PULONG AccessStatusList);
2494
2495 NTOSAPI
2496 NTSTATUS
2497 NTAPI
2498 ZwAccessCheckByTypeResultListAndAuditAlarm(
2499 /*IN*/ PUNICODE_STRING SubsystemName,
2500 /*IN*/ PVOID HandleId,
2501 /*IN*/ PUNICODE_STRING ObjectTypeName,
2502 /*IN*/ PUNICODE_STRING ObjectName,
2503 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2504 /*IN*/ PSID PrincipalSelfSid,
2505 /*IN*/ ACCESS_MASK DesiredAccess,
2506 /*IN*/ AUDIT_EVENT_TYPE AuditType,
2507 /*IN*/ ULONG Flags,
2508 /*IN*/ POBJECT_TYPE_LIST ObjectTypeList,
2509 /*IN*/ ULONG ObjectTypeListLength,
2510 /*IN*/ PGENERIC_MAPPING GenericMapping,
2511 /*IN*/ BOOLEAN ObjectCreation,
2512 /*OUT*/ PACCESS_MASK GrantedAccessList,
2513 /*OUT*/ PULONG AccessStatusList,
2514 /*OUT*/ PULONG GenerateOnClose);
2515
2516 NTOSAPI
2517 NTSTATUS
2518 NTAPI
2519 ZwAccessCheckByTypeResultListAndAuditAlarmByHandle(
2520 /*IN*/ PUNICODE_STRING SubsystemName,
2521 /*IN*/ PVOID HandleId,
2522 /*IN*/ HANDLE TokenHandle,
2523 /*IN*/ PUNICODE_STRING ObjectTypeName,
2524 /*IN*/ PUNICODE_STRING ObjectName,
2525 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2526 /*IN*/ PSID PrincipalSelfSid,
2527 /*IN*/ ACCESS_MASK DesiredAccess,
2528 /*IN*/ AUDIT_EVENT_TYPE AuditType,
2529 /*IN*/ ULONG Flags,
2530 /*IN*/ POBJECT_TYPE_LIST ObjectTypeList,
2531 /*IN*/ ULONG ObjectTypeListLength,
2532 /*IN*/ PGENERIC_MAPPING GenericMapping,
2533 /*IN*/ BOOLEAN ObjectCreation,
2534 /*OUT*/ PACCESS_MASK GrantedAccessList,
2535 /*OUT*/ PULONG AccessStatusList,
2536 /*OUT*/ PULONG GenerateOnClose);
2537
2538 NTOSAPI
2539 NTSTATUS
2540 NTAPI
2541 ZwOpenObjectAuditAlarm(
2542 /*IN*/ PUNICODE_STRING SubsystemName,
2543 /*IN*/ PVOID *HandleId,
2544 /*IN*/ PUNICODE_STRING ObjectTypeName,
2545 /*IN*/ PUNICODE_STRING ObjectName,
2546 /*IN*/ PSECURITY_DESCRIPTOR SecurityDescriptor,
2547 /*IN*/ HANDLE TokenHandle,
2548 /*IN*/ ACCESS_MASK DesiredAccess,
2549 /*IN*/ ACCESS_MASK GrantedAccess,
2550 /*IN*/ PPRIVILEGE_SET Privileges /*OPTIONAL*/,
2551 /*IN*/ BOOLEAN ObjectCreation,
2552 /*IN*/ BOOLEAN AccessGranted,
2553 /*OUT*/ PBOOLEAN GenerateOnClose);
2554
2555 NTOSAPI
2556 NTSTATUS
2557 NTAPI
2558 ZwCloseObjectAuditAlarm(
2559 /*IN*/ PUNICODE_STRING SubsystemName,
2560 /*IN*/ PVOID HandleId,
2561 /*IN*/ BOOLEAN GenerateOnClose);
2562
2563 NTOSAPI
2564 NTSTATUS
2565 NTAPI
2566 ZwDeleteObjectAuditAlarm(
2567 /*IN*/ PUNICODE_STRING SubsystemName,
2568 /*IN*/ PVOID HandleId,
2569 /*IN*/ BOOLEAN GenerateOnClose);
2570
2571
2572
2573
2574 /* Plug and play and power management */
2575
2576 NTOSAPI
2577 NTSTATUS
2578 NTAPI
2579 ZwRequestWakeupLatency(
2580 /*IN*/ LATENCY_TIME Latency);
2581
2582 NTOSAPI
2583 NTSTATUS
2584 NTAPI
2585 ZwRequestDeviceWakeup(
2586 /*IN*/ HANDLE DeviceHandle);
2587
2588 NTOSAPI
2589 NTSTATUS
2590 NTAPI
2591 ZwCancelDeviceWakeupRequest(
2592 /*IN*/ HANDLE DeviceHandle);
2593
2594 NTOSAPI
2595 BOOLEAN
2596 NTAPI
2597 ZwIsSystemResumeAutomatic(
2598 VOID);
2599
2600 NTOSAPI
2601 NTSTATUS
2602 NTAPI
2603 ZwSetThreadExecutionState(
2604 /*IN*/ EXECUTION_STATE ExecutionState,
2605 /*OUT*/ PEXECUTION_STATE PreviousExecutionState);
2606
2607 NTOSAPI
2608 NTSTATUS
2609 NTAPI
2610 ZwGetDevicePowerState(
2611 /*IN*/ HANDLE DeviceHandle,
2612 /*OUT*/ PDEVICE_POWER_STATE DevicePowerState);
2613
2614 NTOSAPI
2615 NTSTATUS
2616 NTAPI
2617 ZwSetSystemPowerState(
2618 /*IN*/ POWER_ACTION SystemAction,
2619 /*IN*/ SYSTEM_POWER_STATE MinSystemState,
2620 /*IN*/ ULONG Flags);
2621
2622 NTOSAPI
2623 NTSTATUS
2624 NTAPI
2625 ZwInitiatePowerAction(
2626 /*IN*/ POWER_ACTION SystemAction,
2627 /*IN*/ SYSTEM_POWER_STATE MinSystemState,
2628 /*IN*/ ULONG Flags,
2629 /*IN*/ BOOLEAN Asynchronous);
2630
2631 NTOSAPI
2632 NTSTATUS
2633 NTAPI
2634 ZwPowerInformation(
2635 /*IN*/ POWER_INFORMATION_LEVEL PowerInformationLevel,
2636 /*IN*/ PVOID InputBuffer /*OPTIONAL*/,
2637 /*IN*/ ULONG InputBufferLength,
2638 /*OUT*/ PVOID OutputBuffer /*OPTIONAL*/,
2639 /*IN*/ ULONG OutputBufferLength);
2640
2641 NTOSAPI
2642 NTSTATUS
2643 NTAPI
2644 ZwPlugPlayControl(
2645 /*IN*/ ULONG ControlCode,
2646 /*IN OUT*/ PVOID Buffer,
2647 /*IN*/ ULONG BufferLength);
2648
2649 NTOSAPI
2650 NTSTATUS
2651 NTAPI
2652 ZwGetPlugPlayEvent(
2653 /*IN*/ ULONG Reserved1,
2654 /*IN*/ ULONG Reserved2,
2655 /*OUT*/ PVOID Buffer,
2656 /*IN*/ ULONG BufferLength);
2657
2658
2659
2660
2661 /* Miscellany */
2662
2663 NTOSAPI
2664 NTSTATUS
2665 NTAPI
2666 ZwRaiseException(
2667 /*IN*/ PEXCEPTION_RECORD ExceptionRecord,
2668 /*IN*/ PCONTEXT Context,
2669 /*IN*/ BOOLEAN SearchFrames);
2670
2671 NTOSAPI
2672 NTSTATUS
2673 NTAPI
2674 ZwContinue(
2675 /*IN*/ PCONTEXT Context,
2676 /*IN*/ BOOLEAN TestAlert);
2677
2678 NTOSAPI
2679 NTSTATUS
2680 NTAPI
2681 ZwW32Call(
2682 /*IN*/ ULONG RoutineIndex,
2683 /*IN*/ PVOID Argument,
2684 /*IN*/ ULONG ArgumentLength,
2685 /*OUT*/ PVOID *Result /*OPTIONAL*/,
2686 /*OUT*/ PULONG ResultLength /*OPTIONAL*/);
2687
2688 NTOSAPI
2689 NTSTATUS
2690 NTAPI
2691 ZwSetLowWaitHighThread(
2692 VOID);
2693
2694 NTOSAPI
2695 NTSTATUS
2696 NTAPI
2697 ZwSetHighWaitLowThread(
2698 VOID);
2699
2700 NTOSAPI
2701 NTSTATUS
2702 NTAPI
2703 ZwLoadDriver(
2704 /*IN*/ PUNICODE_STRING DriverServiceName);
2705
2706 NTOSAPI
2707 NTSTATUS
2708 NTAPI
2709 ZwUnloadDriver(
2710 /*IN*/ PUNICODE_STRING DriverServiceName);
2711
2712 NTOSAPI
2713 NTSTATUS
2714 NTAPI
2715 ZwFlushInstructionCache(
2716 /*IN*/ HANDLE ProcessHandle,
2717 /*IN*/ PVOID BaseAddress /*OPTIONAL*/,
2718 /*IN*/ ULONG FlushSize);
2719
2720 NTOSAPI
2721 NTSTATUS
2722 NTAPI
2723 ZwFlushWriteBuffer(
2724 VOID);
2725
2726 NTOSAPI
2727 NTSTATUS
2728 NTAPI
2729 ZwQueryDefaultLocale(
2730 /*IN*/ BOOLEAN ThreadOrSystem,
2731 /*OUT*/ PLCID Locale);
2732
2733 NTOSAPI
2734 NTSTATUS
2735 NTAPI
2736 ZwSetDefaultLocale(
2737 /*IN*/ BOOLEAN ThreadOrSystem,
2738 /*IN*/ LCID Locale);
2739
2740 NTOSAPI
2741 NTSTATUS
2742 NTAPI
2743 ZwQueryDefaultUILanguage(
2744 /*OUT*/ PLANGID LanguageId);
2745
2746 NTOSAPI
2747 NTSTATUS
2748 NTAPI
2749 ZwSetDefaultUILanguage(
2750 /*IN*/ LANGID LanguageId);
2751
2752 NTOSAPI
2753 NTSTATUS
2754 NTAPI
2755 ZwQueryInstallUILanguage(
2756 /*OUT*/ PLANGID LanguageId);
2757
2758 NTOSAPI
2759 NTSTATUS
2760 NTAPI
2761 NtAllocateLocallyUniqueId(
2762 /*OUT*/ PLUID Luid);
2763
2764 NTOSAPI
2765 NTSTATUS
2766 NTAPI
2767 NtAllocateUuids(
2768 /*OUT*/ PLARGE_INTEGER UuidLastTimeAllocated,
2769 /*OUT*/ PULONG UuidDeltaTime,
2770 /*OUT*/ PULONG UuidSequenceNumber,
2771 /*OUT*/ PUCHAR UuidSeed);
2772
2773 NTOSAPI
2774 NTSTATUS
2775 NTAPI
2776 ZwSetUuidSeed(
2777 /*IN*/ PUCHAR UuidSeed);
2778
2779 typedef enum _HARDERROR_RESPONSE_OPTION {
2780 OptionAbortRetryIgnore,
2781 OptionOk,
2782 OptionOkCancel,
2783 OptionRetryCancel,
2784 OptionYesNo,
2785 OptionYesNoCancel,
2786 OptionShutdownSystem
2787 } HARDERROR_RESPONSE_OPTION, *PHARDERROR_RESPONSE_OPTION;
2788
2789 typedef enum _HARDERROR_RESPONSE {
2790 ResponseReturnToCaller,
2791 ResponseNotHandled,
2792 ResponseAbort,
2793 ResponseCancel,
2794 ResponseIgnore,
2795 ResponseNo,
2796 ResponseOk,
2797 ResponseRetry,
2798 ResponseYes
2799 } HARDERROR_RESPONSE, *PHARDERROR_RESPONSE;
2800
2801 NTOSAPI
2802 NTSTATUS
2803 NTAPI
2804 ZwRaiseHardError(
2805 /*IN*/ NTSTATUS Status,
2806 /*IN*/ ULONG NumberOfArguments,
2807 /*IN*/ ULONG StringArgumentsMask,
2808 /*IN*/ PULONG Arguments,
2809 /*IN*/ HARDERROR_RESPONSE_OPTION ResponseOption,
2810 /*OUT*/ PHARDERROR_RESPONSE Response);
2811
2812 NTOSAPI
2813 NTSTATUS
2814 NTAPI
2815 ZwSetDefaultHardErrorPort(
2816 /*IN*/ HANDLE PortHandle);
2817
2818 NTOSAPI
2819 NTSTATUS
2820 NTAPI
2821 ZwDisplayString(
2822 /*IN*/ PUNICODE_STRING String);
2823
2824 NTOSAPI
2825 NTSTATUS
2826 NTAPI
2827 ZwCreatePagingFile(
2828 /*IN*/ PUNICODE_STRING FileName,
2829 /*IN*/ PULARGE_INTEGER InitialSize,
2830 /*IN*/ PULARGE_INTEGER MaximumSize,
2831 /*IN*/ ULONG Reserved);
2832
2833 typedef USHORT RTL_ATOM, *PRTL_ATOM;
2834
2835 NTOSAPI
2836 NTSTATUS
2837 NTAPI
2838 NtAddAtom(
2839 /*IN*/ PWSTR AtomName,
2840 /*IN*/ ULONG AtomNameLength,
2841 /*OUT*/ PRTL_ATOM Atom);
2842
2843 NTOSAPI
2844 NTSTATUS
2845 NTAPI
2846 NtFindAtom(
2847 /*IN*/ PWSTR AtomName,
2848 /*IN*/ ULONG AtomNameLength,
2849 /*OUT*/ PRTL_ATOM Atom);
2850
2851 NTOSAPI
2852 NTSTATUS
2853 NTAPI
2854 NtDeleteAtom(
2855 /*IN*/ RTL_ATOM Atom);
2856
2857 typedef enum _ATOM_INFORMATION_CLASS {
2858 AtomBasicInformation,
2859 AtomListInformation
2860 } ATOM_INFORMATION_CLASS;
2861
2862 NTOSAPI
2863 NTSTATUS
2864 NTAPI
2865 NtQueryInformationAtom(
2866 /*IN*/ RTL_ATOM Atom,
2867 /*IN*/ ATOM_INFORMATION_CLASS AtomInformationClass,
2868 /*OUT*/ PVOID AtomInformation,
2869 /*IN*/ ULONG AtomInformationLength,
2870 /*OUT*/ PULONG ReturnLength /*OPTIONAL*/);
2871
2872 typedef struct _ATOM_BASIC_INFORMATION {
2873 USHORT ReferenceCount;
2874 USHORT Pinned;
2875 USHORT NameLength;
2876 WCHAR Name[1];
2877 } ATOM_BASIC_INFORMATION, *PATOM_BASIC_INFORMATION;
2878
2879 typedef struct _ATOM_LIST_INFORMATION {
2880 ULONG NumberOfAtoms;
2881 ATOM Atoms[1];
2882 } ATOM_LIST_INFORMATION, *PATOM_LIST_INFORMATION;
2883
2884 NTOSAPI
2885 NTSTATUS
2886 NTAPI
2887 ZwSetLdtEntries(
2888 /*IN*/ ULONG Selector1,
2889 /*IN*/ LDT_ENTRY LdtEntry1,
2890 /*IN*/ ULONG Selector2,
2891 /*IN*/ LDT_ENTRY LdtEntry2);
2892
2893 NTOSAPI
2894 NTSTATUS
2895 NTAPI
2896 NtVdmControl(
2897 /*IN*/ ULONG ControlCode,
2898 /*IN*/ PVOID ControlData);
2899
2900 #pragma pack(pop)
2901
2902 #ifdef __cplusplus
2903 }
2904 #endif
2905
2906 #endif /* __NTAPI_H */
msysGit -- the development environment for 'Git for Windows'