scproto.c

#define  __out __attribute__((SAL__out))
#define  __bcount __attribute__((SAL__bcount))
#define  __bcount_opt __attribute__((SAL__bcount_opt))
#define  __deref_bcount __attribute__((SAL__deref_bcount))
#define  __deref_bcount_opt __attribute__((SAL__deref_bcount_opt))
#define  __deref_ecount __attribute__((SAL__deref_ecount))
#define  __deref_ecount_opt __attribute__((SAL__deref_ecount_opt))
#define  __deref_in __attribute__((SAL__deref_in))
#define  __deref_in_bcount __attribute__((SAL__deref_in_bcount))
#define  __deref_in_bcount_opt __attribute__((SAL__deref_in_bcount_opt))
#define  __deref_in_ecount __attribute__((SAL__deref_in_ecount))
#define  __deref_in_ecount_opt __attribute__((SAL__deref_in_ecount_opt))
#define  __deref_in_opt __attribute__((SAL__deref_in_opt))
#define  __deref_inout __attribute__((SAL__deref_inout))
#define  __deref_inout_bcount __attribute__((SAL__deref_inout_bcount))
#define  __deref_inout_bcount_full __attribute__((SAL__deref_inout_bcount_full))
#define  __deref_inout_bcount_full_opt __attribute__((SAL__deref_inout_bcount_full_opt))
#define  __deref_inout_bcount_opt __attribute__((SAL__deref_inout_bcount_opt))
#define  __deref_inout_bcount_part __attribute__((SAL__deref_inout_bcount_part))
#define  __deref_inout_bcount_part_opt __attribute__((SAL__deref_inout_bcount_part_opt))
#define  __deref_inout_ecount __attribute__((SAL__deref_inout_ecount))
#define  __deref_inout_ecount_full __attribute__((SAL__deref_inout_ecount_full))
#define  __deref_inout_ecount_full_opt __attribute__((SAL__deref_inout_ecount_full_opt))
#define  __deref_inout_ecount_opt __attribute__((SAL__deref_inout_ecount_opt))
#define  __deref_inout_ecount_part __attribute__((SAL__deref_inout_ecount_part))
#define  __deref_inout_ecount_part_opt __attribute__((SAL__deref_inout_ecount_part_opt))
#define  __deref_inout_opt __attribute__((SAL__deref_inout_opt))
#define  __deref_opt_bcount __attribute__((SAL__deref_opt_bcount))
#define  __deref_opt_bcount_opt __attribute__((SAL__deref_opt_bcount_opt))
#define  __deref_opt_ecount __attribute__((SAL__deref_opt_ecount))
#define  __deref_opt_ecount_opt __attribute__((SAL__deref_opt_ecount_opt))
#define  __deref_opt_in __attribute__((SAL__deref_opt_in))
#define  __deref_opt_in_bcount __attribute__((SAL__deref_opt_in_bcount))
#define  __deref_opt_in_bcount_opt __attribute__((SAL__deref_opt_in_bcount_opt))
#define  __deref_opt_in_ecount __attribute__((SAL__deref_opt_in_ecount))
#define  __deref_opt_in_ecount_opt __attribute__((SAL__deref_opt_in_ecount_opt))
#define  __deref_opt_in_opt __attribute__((SAL__deref_opt_in_opt))
#define  __deref_opt_inout __attribute__((SAL__deref_opt_inout))
#define  __deref_opt_inout_bcount __attribute__((SAL__deref_opt_inout_bcount))
#define  __deref_opt_inout_bcount_full __attribute__((SAL__deref_opt_inout_bcount_full))
#define  __deref_opt_inout_bcount_full_opt __attribute__((SAL__deref_opt_inout_bcount_full_opt))
#define  __deref_opt_inout_bcount_opt __attribute__((SAL__deref_opt_inout_bcount_opt))
#define  __deref_opt_inout_bcount_part __attribute__((SAL__deref_opt_inout_bcount_part))
#define  __deref_opt_inout_bcount_part_opt __attribute__((SAL__deref_opt_inout_bcount_part_opt))
#define  __deref_opt_inout_ecount __attribute__((SAL__deref_opt_inout_ecount))
#define  __deref_opt_inout_ecount_full __attribute__((SAL__deref_opt_inout_ecount_full))
#define  __deref_opt_inout_ecount_full_opt __attribute__((SAL__deref_opt_inout_ecount_full_opt))
#define  __deref_opt_inout_ecount_opt __attribute__((SAL__deref_opt_inout_ecount_opt))
#define  __deref_opt_inout_ecount_part __attribute__((SAL__deref_opt_inout_ecount_part))
#define  __deref_opt_inout_ecount_part_opt __attribute__((SAL__deref_opt_inout_ecount_part_opt))
#define  __deref_opt_inout_opt __attribute__((SAL__deref_opt_inout_opt))
#define  __deref_opt_out __attribute__((SAL__deref_opt_out))
#define  __deref_opt_out_bcount __attribute__((SAL__deref_opt_out_bcount))
#define  __deref_opt_out_bcount_full __attribute__((SAL__deref_opt_out_bcount_full))
#define  __deref_opt_out_bcount_full_opt __attribute__((SAL__deref_opt_out_bcount_full_opt))
#define  __deref_opt_out_bcount_opt __attribute__((SAL__deref_opt_out_bcount_opt))
#define  __deref_opt_out_bcount_part __attribute__((SAL__deref_opt_out_bcount_part))
#define  __deref_opt_out_bcount_part_opt __attribute__((SAL__deref_opt_out_bcount_part_opt))
#define  __deref_opt_out_ecount __attribute__((SAL__deref_opt_out_ecount))
#define  __deref_opt_out_ecount_full __attribute__((SAL__deref_opt_out_ecount_full))
#define  __deref_opt_out_ecount_full_opt __attribute__((SAL__deref_opt_out_ecount_full_opt))
#define  __deref_opt_out_ecount_opt __attribute__((SAL__deref_opt_out_ecount_opt))
#define  __deref_opt_out_ecount_part __attribute__((SAL__deref_opt_out_ecount_part))
#define  __deref_opt_out_ecount_part_opt __attribute__((SAL__deref_opt_out_ecount_part_opt))
#define  __deref_opt_out_opt __attribute__((SAL__deref_opt_out_opt))
#define  __deref_out __attribute__((SAL__deref_out))
#define  __deref_out_bcount __attribute__((SAL__deref_out_bcount))
#define  __deref_out_bcount_full __attribute__((SAL__deref_out_bcount_full))
#define  __deref_out_bcount_full_opt __attribute__((SAL__deref_out_bcount_full_opt))
#define  __deref_out_bcount_opt __attribute__((SAL__deref_out_bcount_opt))
#define  __deref_out_bcount_part __attribute__((SAL__deref_out_bcount_part))
#define  __deref_out_bcount_part_opt __attribute__((SAL__deref_out_bcount_part_opt))
#define  __deref_out_ecount __attribute__((SAL__deref_out_ecount))
#define  __deref_out_ecount_full __attribute__((SAL__deref_out_ecount_full))
#define  __deref_out_ecount_full_opt __attribute__((SAL__deref_out_ecount_full_opt))
#define  __deref_out_ecount_opt __attribute__((SAL__deref_out_ecount_opt))
#define  __deref_out_ecount_part __attribute__((SAL__deref_out_ecount_part))
#define  __deref_out_ecount_part_opt __attribute__((SAL__deref_out_ecount_part_opt))
#define  __deref_out_opt __attribute__((SAL__deref_out_opt))
#define  __ecount __attribute__((SAL__ecount))
#define  __ecount_opt __attribute__((SAL__ecount_opt))
#define  __in __attribute__((SAL__in))
#define  __in_bcount(x) __attribute__((SAL__in_bcount(x)))
#define  __in_bcount_opt(x) __attribute__((SAL__in_bcount_opt(x)))
#define  __in_ecount(x) __attribute__((SAL__in_ecount(x)))
#define  __in_ecount_opt(x) __attribute__((SAL__in_ecount_opt(x)))
#define  __in_opt __attribute__((SAL__in_opt))
#define  __inout __attribute__((SAL__inout))
#define  __inout_bcount(x) __attribute__((SAL__inout_bcount(x)))
#define  __inout_bcount_full(x) __attribute__((SAL__inout_bcount_full(x)))
#define  __inout_bcount_full_opt(x) __attribute__((SAL__inout_bcount_full_opt(x)))
#define  __inout_bcount_opt(x) __attribute__((SAL__inout_bcount_opt(x)))
#define  __inout_bcount_part(x, y) __attribute__((SAL__inout_bcount_part(x, y)))
#define  __inout_bcount_part_opt(x, y) __attribute__((SAL__inout_bcount_part_opt(x, y)))
#define  __inout_ecount(x) __attribute__((SAL__inout_ecount(x)))
#define  __inout_ecount_full(x) __attribute__((SAL__inout_ecount_full(x)))
#define  __inout_ecount_full_opt(x) __attribute__((SAL__inout_ecount_full_opt(x)))
#define  __inout_ecount_opt(x) __attribute__((SAL__inout_ecount_opt(x)))
#define  __inout_ecount_part(x,y) __attribute__((SAL__inout_ecount_part))
#define  __inout_ecount_part_opt(x,y) __attribute__((SAL__inout_ecount_part_opt(x,y)))
#define  __inout_opt __attribute__((SAL__inout_opt))
#define  __out __attribute__((SAL__out))
#define  __out_bcount(x) __attribute__((SAL__out_bcount(x)))
#define  __out_bcount_full(x) __attribute__((SAL__out_bcount_full(x)))
#define  __out_bcount_full_opt(x) __attribute__((SAL__out_bcount_full_opt(x)))
#define  __out_bcount_opt(x) __attribute__((SAL__out_bcount_opt(x)))
#define  __out_bcount_part(x,y) __attribute__((SAL__out_bcount_part(x,y)))
#define  __out_bcount_part_opt(x, y) __attribute__((SAL__out_bcount_part_opt(x, y)))
#define  __out_ecount(x) __attribute__((SAL__out_ecount(x)))
#define  __out_ecount_full(x) __attribute__((SAL__out_ecount_full(x)))
#define  __out_ecount_full_opt(x) __attribute__((SAL__out_ecount_full_opt(x)))
#define  __out_ecount_opt(x) __attribute__((SAL__out_ecount_opt(x)))
#define  __out_ecount_part(x,y) __attribute__((SAL__out_ecount_part(x,y)))
#define  __out_ecount_part_opt __attribute__((SAL__out_ecount_part_opt(x,y)))
#define  __out_opt __attribute__((SAL__out_opt))

#define  _Reserved_ __attribute__((SAL_Reserved_))

typedef unsigned int NTSTATUS, *PNTSTATUS;
typedef void * HANDLE, *PHANDLE;
typedef void PORT_MESSAGE, *PPORT_MESSAGE;
typedef void VOID, *PVOID;
typedef int BOOLEAN, *PBOOLEAN;
typedef void PORT_VIEW, *PPORT_VIEW;
typedef void REMOTE_PORT_VIEW, *PREMOTE_PORT_VIEW;
typedef void SECURITY_DESCRIPTOR, *PSECURITY_DESCRIPTOR;
typedef unsigned int ACCESS_MASK, *PACCESS_MASK;
typedef void GENERIC_MAPPING, *PGENERIC_MAPPING;
typedef void PRIVILEGE_SET, *PPRIVILEGE_SET;
typedef unsigned long ULONG, *PULONG;
typedef long LONG, *PLONG;
typedef void UNICODE_STRING, *PUNICODE_STRING;
typedef void SID, *PSID;
typedef void LUID, *PLUID;
typedef void OBJECT_TYPE_LIST, *POBJECT_TYPE_LIST;
typedef unsigned int AUDIT_EVENT_TYPE, *PAUDIT_EVENT_TYPE;
typedef unsigned short WSTR, *PWSTR;
typedef void RTL_ATOM, *PRTL_ATOM;
typedef void BOOT_ENTRY, *PBOOT_ENTRY;
typedef void EFI_DRIVER_ENTRY, *PEFI_DRIVER_ENTRY;
typedef void TOKEN_GROUPS, *PTOKEN_GROUPS;
typedef void TOKEN_PRIVILEGES, *PTOKEN_PRIVILEGES;
typedef void OBJECT_ATTRIBUTES, *POBJECT_ATTRIBUTES;
typedef unsigned int MEMORY_RESERVE_TYPE, *PMEMORY_RESERVE_TYPE;
typedef unsigned int ULONG_PTR, *PULONG_PTR;
typedef char CHAR, *PCHAR;
typedef void ULARGE_INTEGER, *PULARGE_INTEGER;
typedef void LARGE_INTEGER, *PLARGE_INTEGER;
typedef unsigned int SIZE_T, *PSIZE_T;
typedef unsigned int ALPC_PORT_ATTRIBUTES, *PALPC_PORT_ATTRIBUTES;
typedef unsigned int ALPC_MESSAGE_ATTRIBUTES, *PALPC_MESSAGE_ATTRIBUTES;
typedef unsigned int ALPC_CONTEXT_ATTR, *PALPC_CONTEXT_ATTR;
typedef unsigned int ALPC_SECURITY_ATTR, *PALPC_SECURITY_ATTR;
typedef unsigned int ALPC_DATA_VIEW_ATTR, *PALPC_DATA_VIEW_ATTR;
typedef void ALPC_HANDLE, *PALPC_HANDLE;
typedef unsigned int ALPC_PORT_INFORMATION_CLASS, *PALPC_PORT_INFORMATION_CLASS;
typedef unsigned int ALPC_MESSAGE_INFORMATION_CLASS, *PALPC_MESSAGE_INFORMATION_CLASS;
typedef unsigned int APPHELPCOMMAND, *PAPPHELPCOMMAND;
typedef void IO_STATUS_BLOCK, *PIO_STATUS_BLOCK;
typedef void SECURITY_QUALITY_OF_SERVICE, *PSECURITY_QUALITY_OF_SERVICE;
typedef void CONTEXT, *PCONTEXT;
typedef unsigned int NOTIFICATION_MASK, *PNOTIFICATION_MASK;
typedef unsigned int EVENT_TYPE, *PEVENT_TYPE;
typedef unsigned int KPROFILE_SOURCE, *PKPROFILE_SOURCE;
typedef unsigned int KAFFINITY, *PKAFFINITY;
typedef void JOB_SET_ARRAY, *PJOB_SET_ARRAY;
typedef void GROUP_AFFINITY, *PGROUP_AFFINITY;
typedef void GUID, *LPGUID;
typedef void CLIENT_ID, *PCLIENT_ID;
typedef void INITIAL_TEB, *PINITIAL_TEB;
typedef void PS_ATTRIBUTE_LIST, *PPS_ATTRIBUTE_LIST;
typedef unsigned int TIMER_TYPE, *PTIMER_TYPE;
typedef unsigned int TOKEN_TYPE, *PTOKEN_TYPE;
typedef unsigned int TOKEN_USER, *PTOKEN_USER;
typedef unsigned int TOKEN_OWNER, *PTOKEN_OWNER;
typedef unsigned int TOKEN_PRIMARY_GROUP, *PTOKEN_PRIMARY_GROUP;
typedef unsigned int TOKEN_DEFAULT_DACL, *PTOKEN_DEFAULT_DACL;
typedef unsigned int TOKEN_SOURCE, *PTOKEN_SOURCE;
typedef void RTL_USER_PROCESS_PARAMETERS, *PRTL_USER_PROCESS_PARAMETERS;
typedef void PROCESS_CREATE_INFO, *PPROCESS_CREATE_INFO;
typedef void PROCESS_ATTRIBUTE_LIST, *PPROCESS_ATTRIBUTE_LIST;
typedef void IO_APC_ROUTINE, *PIO_APC_ROUTINE;
typedef unsigned int KEY_INFORMATION_CLASS, *PKEY_INFORMATION_CLASS;
typedef unsigned int KTMOBJECT_TYPE, *PKTMOBJECT_TYPE;
typedef void KTMOBJECT_CURSOR, *PKTMOBJECT_CURSOR;
typedef unsigned int KEY_VALUE_INFORMATION_CLASS, *PKEY_VALUE_INFORMATION_CLASS;
typedef unsigned int LANGID, *PLANGID;
typedef unsigned int DEVICE_POWER_STATE, *PDEVICE_POWER_STATE;
typedef void TRANSACTION_NOTIFICATION, *PTRANSACTION_NOTIFICATION;
typedef void PLUGPLAY_EVENT_BLOCK, *PPLUGPLAY_EVENT_BLOCK;
typedef unsigned int LCID, *PLCID;
typedef unsigned short USHORT, *PUSHORT;
typedef unsigned int POWER_ACTION, *PPOWER_ACTION;
typedef unsigned int SYSTEM_POWER_STATE, *PSYSTEM_POWER_STATE;
typedef unsigned int SECTION_INHERIT, *PSECTION_INHERIT;
typedef unsigned int WIN32_PROTECTION_MASK, *PWIN32_PROTECTION_MASK;
typedef unsigned int PLUGPLAY_CONTROL_CLASS, *PPLUGPLAY_CONTROL_CLASS;
typedef unsigned int POWER_INFORMATION_LEVEL, *PPOWER_INFORMATION_LEVEL;
typedef void FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;
typedef void BOOT_OPTIONS, *PBOOT_OPTIONS;
typedef unsigned int FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
typedef unsigned int EVENT_INFORMATION_CLASS, *PEVENT_INFORMATION_CLASS;
typedef void FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
typedef unsigned int ATOM_INFORMATION_CLASS, *PATOM_INFORMATION_CLASS;
typedef unsigned int ENLISTMENT_INFORMATION_CLASS, *PENLISTMENT_INFORMATION_CLASS;
typedef unsigned int JOBOBJECTINFOCLASS, *PJOBOBJECTINFOCLASS;
typedef unsigned int PORT_INFORMATION_CLASS, *PPORT_INFORMATION_CLASS;
typedef unsigned int TOKEN_INFORMATION_CLASS, *PTOKEN_INFORMATION_CLASS;
typedef unsigned int TRANSACTION_INFORMATION_CLASS, *PTRANSACTION_INFORMATION_CLASS;
typedef unsigned int PROCESSINFOCLASS, *PPROCESSINFOCLASS;
typedef unsigned int THREADINFOCLASS, *PTHREADINFOCLASS;
typedef unsigned int RESOURCEMANAGER_INFORMATION_CLASS, *PRESOURCEMANAGER_INFORMATION_CLASS;
typedef unsigned int TRANSACTIONMANAGER_INFORMATION_CLASS, *PTRANSACTIONMANAGER_INFORMATION_CLASS;
typedef unsigned int WORKERFACTORYINFOCLASS, *PWORKERFACTORYINFOCLASS;
typedef unsigned int IO_COMPLETION_INFORMATION_CLASS, *PIO_COMPLETION_INFORMATION_CLASS;
typedef unsigned int MUTANT_INFORMATION_CLASS, *PMUTANT_INFORMATION_CLASS;
typedef unsigned int OBJECT_INFORMATION_CLASS, *POBJECT_INFORMATION_CLASS;
typedef unsigned int SECTION_INFORMATION_CLASS, *PSECTION_INFORMATION_CLASS;
typedef void KEY_VALUE_ENTRY, *PKEY_VALUE_ENTRY;
typedef unsigned int SECURITY_INFORMATION, *PSECURITY_INFORMATION;
typedef unsigned int SEMAPHORE_INFORMATION_CLASS, *PSEMAPHORE_INFORMATION_CLASS;
typedef unsigned int SYSTEM_INFORMATION_CLASS, *PSYSTEM_INFORMATION_CLASS;
typedef unsigned int TIMER_INFORMATION_CLASS, *PTIMER_INFORMATION_CLASS;
typedef unsigned int MEMORY_INFORMATION_CLASS, *PMEMORY_INFORMATION_CLASS;
typedef unsigned int FS_INFORMATION_CLASS, *PFS_INFORMATION_CLASS;
typedef void PS_APC_ROUTINE, *PPS_APC_ROUTINE;
typedef void EXCEPTION_RECORD, *PEXCEPTION_RECORD;
typedef void FILE_SEGMENT_ELEMENT, *PFILE_SEGMENT_ELEMENT;
typedef unsigned int CRM_PROTOCOL_ID, *PCRM_PROTOCOL_ID;
typedef void FILE_IO_COMPLETION_INFORMATION, *PFILE_IO_COMPLETION_INFORMATION;
typedef unsigned int DEBUGOBJECTINFOCLASS, *PDEBUGOBJECTINFOCLASS;
typedef unsigned int KEY_SET_INFORMATION_CLASS, *PKEY_SET_INFORMATION_CLASS;
typedef unsigned int TIMER_SET_INFORMATION_CLASS, *PTIMER_SET_INFORMATION_CLASS;
typedef unsigned int EXECUTION_STATE, *PEXECUTION_STATE;
typedef void TIMER_APC_ROUTINE, *PTIMER_APC_ROUTINE;
typedef unsigned int SHUTDOWN_ACTION, *PSHUTDOWN_ACTION;
typedef unsigned int SYSDBG_COMMAND, *PSYSDBG_COMMAND;
typedef void FILE_PATH, *PFILE_PATH;
typedef unsigned int VDMSERVICECLASS, *PVDMSERVICECLASS;
typedef void DBGUI_WAIT_STATE_CHANGE, *PDBGUI_WAIT_STATE_CHANGE;
typedef unsigned int WAIT_TYPE, *PWAIT_TYPE;
typedef unsigned int IO_SESSION_STATE, *PIO_SESSION_STATE;

NTSTATUS NtAcceptConnectPort (__out PHANDLE PortHandle, __in_opt PVOID PortContext, __in PPORT_MESSAGE ConnectionRequest, __in BOOLEAN AcceptConnection, __inout_opt PPORT_VIEW ServerView, __out_opt PREMOTE_PORT_VIEW ClientView);
NTSTATUS NtAccessCheck (__in PSECURITY_DESCRIPTOR SecurityDescriptor, __in HANDLE ClientToken, __in ACCESS_MASK DesiredAccess, __in PGENERIC_MAPPING GenericMapping, __out_bcount(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, __inout PULONG PrivilegeSetLength, __out PACCESS_MASK GrantedAccess, __out PNTSTATUS AccessStatus);
NTSTATUS NtAccessCheckAndAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in PUNICODE_STRING ObjectTypeName, __in PUNICODE_STRING ObjectName, __in PSECURITY_DESCRIPTOR SecurityDescriptor, __in ACCESS_MASK DesiredAccess, __in PGENERIC_MAPPING GenericMapping, __in BOOLEAN ObjectCreation, __out PACCESS_MASK GrantedAccess, __out PNTSTATUS AccessStatus, __out PBOOLEAN GenerateOnClose);
NTSTATUS NtAccessCheckByType (__in PSECURITY_DESCRIPTOR SecurityDescriptor, __in_opt PSID PrincipalSelfSid, __in HANDLE ClientToken, __in ACCESS_MASK DesiredAccess, __in_ecount(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, __in ULONG ObjectTypeListLength, __in PGENERIC_MAPPING GenericMapping, __out_bcount(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, __inout PULONG PrivilegeSetLength, __out PACCESS_MASK GrantedAccess, __out PNTSTATUS AccessStatus);
NTSTATUS NtAccessCheckByTypeAndAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in PUNICODE_STRING ObjectTypeName, __in PUNICODE_STRING ObjectName, __in PSECURITY_DESCRIPTOR SecurityDescriptor, __in_opt PSID PrincipalSelfSid, __in ACCESS_MASK DesiredAccess, __in AUDIT_EVENT_TYPE AuditType, __in ULONG Flags, __in_ecount_opt(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, __in ULONG ObjectTypeListLength, __in PGENERIC_MAPPING GenericMapping, __in BOOLEAN ObjectCreation, __out PACCESS_MASK GrantedAccess, __out PNTSTATUS AccessStatus, __out PBOOLEAN GenerateOnClose);
NTSTATUS NtAccessCheckByTypeResultList (__in PSECURITY_DESCRIPTOR SecurityDescriptor, __in_opt PSID PrincipalSelfSid, __in HANDLE ClientToken, __in ACCESS_MASK DesiredAccess, __in_ecount(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, __in ULONG ObjectTypeListLength, __in PGENERIC_MAPPING GenericMapping, __out_bcount(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, __inout PULONG PrivilegeSetLength, __out_ecount(ObjectTypeListLength) PACCESS_MASK GrantedAccess, __out_ecount(ObjectTypeListLength) PNTSTATUS AccessStatus);
NTSTATUS NtAccessCheckByTypeResultListAndAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in PUNICODE_STRING ObjectTypeName, __in PUNICODE_STRING ObjectName, __in PSECURITY_DESCRIPTOR SecurityDescriptor, __in_opt PSID PrincipalSelfSid, __in ACCESS_MASK DesiredAccess, __in AUDIT_EVENT_TYPE AuditType, __in ULONG Flags, __in_ecount_opt(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, __in ULONG ObjectTypeListLength, __in PGENERIC_MAPPING GenericMapping, __in BOOLEAN ObjectCreation, __out_ecount(ObjectTypeListLength) PACCESS_MASK GrantedAccess, __out_ecount(ObjectTypeListLength) PNTSTATUS AccessStatus, __out PBOOLEAN GenerateOnClose);
NTSTATUS NtAccessCheckByTypeResultListAndAuditAlarmByHandle (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in HANDLE ClientToken, __in PUNICODE_STRING ObjectTypeName, __in PUNICODE_STRING ObjectName, __in PSECURITY_DESCRIPTOR SecurityDescriptor, __in_opt PSID PrincipalSelfSid, __in ACCESS_MASK DesiredAccess, __in AUDIT_EVENT_TYPE AuditType, __in ULONG Flags, __in_ecount_opt(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, __in ULONG ObjectTypeListLength, __in PGENERIC_MAPPING GenericMapping, __in BOOLEAN ObjectCreation, __out_ecount(ObjectTypeListLength) PACCESS_MASK GrantedAccess, __out_ecount(ObjectTypeListLength) PNTSTATUS AccessStatus, __out PBOOLEAN GenerateOnClose);
NTSTATUS NtAddAtom (__in_bcount_opt(Length) PWSTR AtomName, __in ULONG Length, __out_opt PRTL_ATOM Atom);
NTSTATUS NtAddBootEntry (__in PBOOT_ENTRY BootEntry, __out_opt PULONG Id);
NTSTATUS NtAddDriverEntry (__in PEFI_DRIVER_ENTRY DriverEntry, __out_opt PULONG Id);
NTSTATUS NtAdjustGroupsToken (__in HANDLE TokenHandle, __in BOOLEAN ResetToDefault, __in PTOKEN_GROUPS NewState, __in ULONG BufferLength, __out_bcount_part_opt(BufferLength, *ReturnLength) PTOKEN_GROUPS PreviousState, __out PULONG ReturnLength);
NTSTATUS NtAdjustPrivilegesToken (__in HANDLE TokenHandle, __in BOOLEAN DisableAllPrivileges, __in_opt PTOKEN_PRIVILEGES NewState, __in ULONG BufferLength, __out_bcount_part_opt(BufferLength,*ReturnLength) PTOKEN_PRIVILEGES PreviousState, __out_opt PULONG ReturnLength);
NTSTATUS NtAlertResumeThread (__in HANDLE ThreadHandle, __out_opt PULONG PreviousSuspendCount);
NTSTATUS NtAlertThread (__in HANDLE ThreadHandle);
NTSTATUS NtAllocateLocallyUniqueId (__out PLUID Luid);
NTSTATUS NtAllocateReserveObject (__out PHANDLE MemoryReserveHandle, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in MEMORY_RESERVE_TYPE Type);
NTSTATUS NtAllocateUserPhysicalPages (__in HANDLE ProcessHandle, __inout PULONG_PTR NumberOfPages, __out_ecount(*NumberOfPages) PULONG_PTR UserPfnArray);
NTSTATUS NtAllocateUuids (__out PULARGE_INTEGER Time, __out PULONG Range, __out PULONG Sequence, __out PCHAR Seed);
NTSTATUS NtAllocateVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __in ULONG_PTR ZeroBits, __inout PSIZE_T RegionSize, __in ULONG AllocationType, __in ULONG Protect);
NTSTATUS NtAlpcAcceptConnectPort (__out PHANDLE PortHandle, __in HANDLE ConnectionPortHandle, __in ULONG Flags, __in POBJECT_ATTRIBUTES ObjectAttributes, __in PALPC_PORT_ATTRIBUTES PortAttributes, __in_opt PVOID PortContext, __in PPORT_MESSAGE ConnectionRequest, __inout_opt PALPC_MESSAGE_ATTRIBUTES ConnectionMessageAttributes, __in BOOLEAN AcceptConnection);
NTSTATUS NtAlpcCancelMessage (__in HANDLE PortHandle, __in ULONG Flags, __in PALPC_CONTEXT_ATTR MessageContext);
NTSTATUS NtAlpcConnectPort (__out PHANDLE PortHandle, __in PUNICODE_STRING PortName, __in POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PALPC_PORT_ATTRIBUTES PortAttributes, __in ULONG Flags, __in_opt PSID RequiredServerSid, __inout PPORT_MESSAGE ConnectionMessage, __inout_opt PULONG BufferLength, __inout_opt PALPC_MESSAGE_ATTRIBUTES OutMessageAttributes, __inout_opt PALPC_MESSAGE_ATTRIBUTES InMessageAttributes, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtAlpcCreatePort (__out PHANDLE PortHandle, __in POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PALPC_PORT_ATTRIBUTES PortAttributes);
NTSTATUS NtAlpcCreatePortSection (__in HANDLE PortHandle, __in ULONG Flags, __in_opt HANDLE SectionHandle, __in SIZE_T SectionSize, __out PALPC_HANDLE AlpcSectionHandle, __out PSIZE_T ActualSectionSize);
NTSTATUS NtAlpcCreateResourceReserve (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in SIZE_T MessageSize, __out PALPC_HANDLE ResourceId);
NTSTATUS NtAlpcCreateSectionView (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __inout PALPC_DATA_VIEW_ATTR ViewAttributes);
NTSTATUS NtAlpcCreateSecurityContext (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __inout PALPC_SECURITY_ATTR SecurityAttribute);
NTSTATUS NtAlpcDeletePortSection (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in ALPC_HANDLE SectionHandle);
NTSTATUS NtAlpcDeleteResourceReserve (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in ALPC_HANDLE ResourceId);
NTSTATUS NtAlpcDeleteSectionView (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in PVOID ViewBase);
NTSTATUS NtAlpcDeleteSecurityContext (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in ALPC_HANDLE ContextHandle);
NTSTATUS NtAlpcDisconnectPort (__in HANDLE PortHandle, __in ULONG Flags);
NTSTATUS NtAlpcImpersonateClientOfPort (__in HANDLE PortHandle, __in PPORT_MESSAGE PortMessage, _Reserved_ PVOID Reserved);
NTSTATUS NtAlpcOpenSenderProcess (__out PHANDLE ProcessHandle, __in HANDLE PortHandle, __in PPORT_MESSAGE PortMessage, _Reserved_ ULONG Flags, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtAlpcOpenSenderThread (__out PHANDLE ThreadHandle, __in HANDLE PortHandle, __in PPORT_MESSAGE PortMessage, _Reserved_ ULONG Flags, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtAlpcQueryInformation (__in HANDLE PortHandle, __in ALPC_PORT_INFORMATION_CLASS PortInformationClass, __out_bcount(Length) PVOID PortInformation, __in ULONG Length, __out_opt PULONG ReturnLength);
NTSTATUS NtAlpcQueryInformationMessage (__in HANDLE PortHandle, __in PPORT_MESSAGE PortMessage, __in ALPC_MESSAGE_INFORMATION_CLASS MessageInformationClass, __out_bcount(Length) PVOID MessageInformation, __in ULONG Length, __out_opt PULONG ReturnLength);
NTSTATUS NtAlpcRevokeSecurityContext (__in HANDLE PortHandle, _Reserved_ ULONG Flags, __in ALPC_HANDLE ContextHandle);
NTSTATUS NtAlpcSendWaitReceivePort (__in HANDLE PortHandle, __in ULONG Flags, __in_opt PPORT_MESSAGE SendMessage, __in_opt PALPC_MESSAGE_ATTRIBUTES SendMessageAttributes, __inout_opt PPORT_MESSAGE ReceiveMessage, __inout_opt PULONG BufferLength, __inout_opt PALPC_MESSAGE_ATTRIBUTES ReceiveMessageAttributes, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtAlpcSetInformation (__in HANDLE PortHandle, __in ALPC_PORT_INFORMATION_CLASS PortInformationClass, __in_bcount(Length) PVOID PortInformation, __in ULONG Length);
NTSTATUS NtApphelpCacheControl (__in APPHELPCOMMAND type, __in PVOID buf);
NTSTATUS NtAreMappedFilesTheSame (__in PVOID File1MappedAsAnImage, __in PVOID File2MappedAsFile);
NTSTATUS NtAssignProcessToJobObject (__in HANDLE JobHandle, __in HANDLE ProcessHandle);
NTSTATUS NtCallbackReturn (__in_opt PVOID OutputBuffer, __in ULONG OutputLength, __in NTSTATUS Status);
NTSTATUS NtCancelIoFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock);
NTSTATUS NtCancelIoFileEx (__in HANDLE FileHandle, __in_opt PIO_STATUS_BLOCK IoRequestToCancel, __out PIO_STATUS_BLOCK IoStatusBlock);
NTSTATUS NtCancelSynchronousIoFile (__in HANDLE ThreadHandle, __in_opt PIO_STATUS_BLOCK IoRequestToCancel, __out PIO_STATUS_BLOCK IoStatusBlock);
NTSTATUS NtCancelTimer (__in HANDLE TimerHandle, __out_opt PBOOLEAN CurrentState);
NTSTATUS NtClearEvent (__in HANDLE EventHandle);
NTSTATUS NtClose (__in HANDLE Handle);
NTSTATUS NtCloseObjectAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in BOOLEAN GenerateOnClose);
NTSTATUS NtCommitComplete (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtCommitEnlistment (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtCommitTransaction (__in HANDLE TransactionHandle, __in BOOLEAN Wait);
NTSTATUS NtCompactKeys (__in ULONG Count, __in_ecount(Count) HANDLE KeyArray[]);
NTSTATUS NtCompareTokens (__in HANDLE FirstTokenHandle, __in HANDLE SecondTokenHandle, __out PBOOLEAN Equal);
NTSTATUS NtCompleteConnectPort (__in HANDLE PortHandle);
NTSTATUS NtCompressKey (__in HANDLE Key);
NTSTATUS NtConnectPort (__out PHANDLE PortHandle, __in PUNICODE_STRING PortName, __in PSECURITY_QUALITY_OF_SERVICE SecurityQos, __inout_opt PPORT_VIEW ClientView, __inout_opt PREMOTE_PORT_VIEW ServerView, __out_opt PULONG MaxMessageLength, __inout_opt PVOID ConnectionInformation, __inout_opt PULONG ConnectionInformationLength);
NTSTATUS NtContinue (__in PCONTEXT ContextRecord, __in BOOLEAN TestAlert);
NTSTATUS NtCreateDebugObject (__out PHANDLE DebugObjectHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG Flags);
NTSTATUS NtCreateDirectoryObject (__out PHANDLE DirectoryHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtCreateEnlistment (__out PHANDLE EnlistmentHandle, __in ACCESS_MASK DesiredAccess, __in HANDLE ResourceManagerHandle, __in HANDLE TransactionHandle, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt ULONG CreateOptions, __in NOTIFICATION_MASK NotificationMask, __in_opt PVOID EnlistmentKey);
NTSTATUS NtCreateEvent (__out PHANDLE EventHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in EVENT_TYPE EventType, __in BOOLEAN InitialState);
NTSTATUS NtCreateEventPair (__out PHANDLE EventPairHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtCreateFile (__out PHANDLE FileHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __out PIO_STATUS_BLOCK IoStatusBlock, __in_opt PLARGE_INTEGER AllocationSize, __in ULONG FileAttributes, __in ULONG ShareAccess, __in ULONG CreateDisposition, __in ULONG CreateOptions, __in_bcount_opt(EaLength) PVOID EaBuffer, __in ULONG EaLength);
NTSTATUS NtCreateIoCompletion (__out PHANDLE IoCompletionHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt ULONG Count);
NTSTATUS NtCreateJobObject (__out PHANDLE JobHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtCreateJobSet (__in ULONG NumJob, __in_ecount(NumJob) PJOB_SET_ARRAY UserJobSet, __in ULONG Flags);
NTSTATUS NtCreateKey (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, _Reserved_ ULONG TitleIndex, __in_opt PUNICODE_STRING Class, __in ULONG CreateOptions, __out_opt PULONG Disposition);
NTSTATUS NtCreateKeyTransacted (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, _Reserved_ ULONG TitleIndex, __in_opt PUNICODE_STRING Class, __in ULONG CreateOptions, __in HANDLE TransactionHandle, __out_opt PULONG Disposition);
NTSTATUS NtCreateKeyedEvent (__out PHANDLE KeyedEventHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG Flags);
NTSTATUS NtCreateMailslotFile (__out PHANDLE FileHandle, __in ULONG DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG CreateOptions, __in ULONG MailslotQuota, __in ULONG MaximumMessageSize, __in PLARGE_INTEGER ReadTimeout);
NTSTATUS NtCreateMutant (__out PHANDLE MutantHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in BOOLEAN InitialOwner);
NTSTATUS NtCreateNamedPipeFile (__out PHANDLE FileHandle, __in ULONG DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG ShareAccess, __in ULONG CreateDisposition, __in ULONG CreateOptions, __in ULONG NamedPipeType, __in ULONG ReadMode, __in ULONG CompletionMode, __in ULONG MaximumInstances, __in ULONG InboundQuota, __in ULONG OutboundQuota, __in_opt PLARGE_INTEGER DefaultTimeout);
NTSTATUS NtCreatePagingFile (__in PUNICODE_STRING PageFileName, __in PLARGE_INTEGER MinimumSize, __in PLARGE_INTEGER MaximumSize, __in ULONG Priority);
NTSTATUS NtCreatePort (__out PHANDLE PortHandle, __in POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG MaxConnectionInfoLength, __in ULONG MaxMessageLength, __in_opt ULONG MaxPoolUsage);
NTSTATUS NtCreatePrivateNamespace (__out PHANDLE NamespaceHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in PVOID BoundaryDescriptor);
NTSTATUS NtCreateProcess (__out PHANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE ParentProcess, __in BOOLEAN InheritObjectTable, __in_opt HANDLE SectionHandle, __in_opt HANDLE DebugPort, __in_opt HANDLE ExceptionPort);
NTSTATUS NtCreateProcessEx (__out PHANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE ParentProcess, __in ULONG Flags, __in_opt HANDLE SectionHandle, __in_opt HANDLE DebugPort, __in_opt HANDLE ExceptionPort, __in ULONG JobMemberLevel);
NTSTATUS NtCreateProfile (__out PHANDLE ProfileHandle, __in_opt HANDLE Process, __in PVOID RangeBase, __in SIZE_T RangeSize, __in ULONG BucketSize, __in PULONG Buffer, __in ULONG BufferSize, __in KPROFILE_SOURCE ProfileSource, __in KAFFINITY Affinity);
NTSTATUS NtCreateProfileEx (__out PHANDLE ProfileHandle, __in_opt HANDLE Process, __in PVOID ProfileBase, __in SIZE_T ProfileSize, __in ULONG BucketSize, __in PULONG Buffer, __in ULONG BufferSize, __in KPROFILE_SOURCE ProfileSource, __in ULONG GroupAffinityCount, __in_opt PGROUP_AFFINITY GroupAffinity);
NTSTATUS NtCreateResourceManager (__out PHANDLE ResourceManagerHandle, __in ACCESS_MASK DesiredAccess, __in HANDLE TmHandle, __in LPGUID RmGuid, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt ULONG CreateOptions, __in_opt PUNICODE_STRING Description);
NTSTATUS NtCreateSection (__out PHANDLE SectionHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PLARGE_INTEGER MaximumSize, __in ULONG SectionPageProtection, __in ULONG AllocationAttributes, __in_opt HANDLE FileHandle);
NTSTATUS NtCreateSemaphore (__out PHANDLE SemaphoreHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in LONG InitialCount, __in LONG MaximumCount);
NTSTATUS NtCreateSymbolicLinkObject (__out PHANDLE LinkHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in PUNICODE_STRING LinkTarget);
NTSTATUS NtCreateThread (__out PHANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE ProcessHandle, __out PCLIENT_ID ClientId, __in PCONTEXT ThreadContext, __in PINITIAL_TEB InitialTeb, __in BOOLEAN CreateSuspended);
NTSTATUS NtCreateThreadEx (__out PHANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE ProcessHandle, __in PVOID StartRoutine, __in_opt PVOID Argument, __in ULONG CreateFlags, __in_opt ULONG_PTR ZeroBits, __in_opt SIZE_T StackSize, __in_opt SIZE_T MaximumStackSize, __in_opt PPS_ATTRIBUTE_LIST AttributeList);
NTSTATUS NtCreateTimer (__out PHANDLE TimerHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in TIMER_TYPE TimerType);
NTSTATUS NtCreateToken (__out PHANDLE TokenHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in TOKEN_TYPE TokenType, __in PLUID AuthenticationId, __in PLARGE_INTEGER ExpirationTime, __in PTOKEN_USER User, __in PTOKEN_GROUPS Groups, __in PTOKEN_PRIVILEGES Privileges, __in_opt PTOKEN_OWNER Owner, __in PTOKEN_PRIMARY_GROUP PrimaryGroup, __in_opt PTOKEN_DEFAULT_DACL DefaultDacl, __in PTOKEN_SOURCE TokenSource);
NTSTATUS NtCreateTransaction (__out PHANDLE TransactionHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt LPGUID Uow, __in_opt HANDLE TmHandle, __in_opt ULONG CreateOptions, __in_opt ULONG IsolationLevel, __in_opt ULONG IsolationFlags, __in_opt PLARGE_INTEGER Timeout, __in_opt PUNICODE_STRING Description);
NTSTATUS NtCreateTransactionManager (__out PHANDLE TmHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PUNICODE_STRING LogFileName, __in_opt ULONG CreateOptions, __in_opt ULONG CommitStrength);
NTSTATUS NtCreateUserProcess (__out PHANDLE ProcessHandle, __out PHANDLE ThreadHandle, __in ACCESS_MASK ProcessDesiredAccess, __in ACCESS_MASK ThreadDesiredAccess, __in_opt POBJECT_ATTRIBUTES ProcessObjectAttributes, __in_opt POBJECT_ATTRIBUTES ThreadObjectAttributes, __in ULONG ProcessFlags, __in ULONG ThreadFlags, __in_opt PRTL_USER_PROCESS_PARAMETERS ProcessParameters, __in_opt PPROCESS_CREATE_INFO CreateInfo, __in_opt PPROCESS_ATTRIBUTE_LIST AttributeList);
NTSTATUS NtCreateWaitablePort (__out PHANDLE PortHandle, __in POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG MaxConnectionInfoLength, __in ULONG MaxMessageLength, __in_opt ULONG MaxPoolUsage);
NTSTATUS NtCreateWorkerFactory (__out PHANDLE WorkerFactoryHandleReturn, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE CompletionPortHandle, __in HANDLE WorkerProcessHandle, __in PVOID StartRoutine, __in_opt PVOID StartParameter, __in_opt ULONG MaxThreadCount, __in_opt SIZE_T StackReserve, __in_opt SIZE_T StackCommit);
NTSTATUS NtDebugActiveProcess (__in HANDLE ProcessHandle, __in HANDLE DebugObjectHandle);
NTSTATUS NtDebugContinue (__in HANDLE DebugObjectHandle, __in PCLIENT_ID ClientId, __in NTSTATUS ContinueStatus);
NTSTATUS NtDelayExecution (__in BOOLEAN Alertable, __in PLARGE_INTEGER DelayInterval);
NTSTATUS NtDeleteAtom (__in RTL_ATOM Atom);
NTSTATUS NtDeleteBootEntry (__in ULONG Id);
NTSTATUS NtDeleteDriverEntry (__in ULONG Id);
NTSTATUS NtDeleteFile (__in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtDeleteKey (__in HANDLE KeyHandle);
NTSTATUS NtDeleteObjectAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in BOOLEAN GenerateOnClose);
NTSTATUS NtDeletePrivateNamespace (__in HANDLE NamespaceHandle);
NTSTATUS NtDeleteValueKey (__in HANDLE KeyHandle, __in PUNICODE_STRING ValueName);
NTSTATUS NtDeviceIoControlFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG IoControlCode, __in_bcount_opt(InputBufferLength) PVOID InputBuffer, __in ULONG InputBufferLength, __out_bcount_opt(OutputBufferLength) PVOID OutputBuffer, __in ULONG OutputBufferLength);
NTSTATUS NtDisableLastKnownGood ();
NTSTATUS NtDisplayString (__in PUNICODE_STRING String);
NTSTATUS NtDrawText (__in PUNICODE_STRING Text);
NTSTATUS NtDuplicateObject (__in HANDLE SourceProcessHandle, __in HANDLE SourceHandle, __in_opt HANDLE TargetProcessHandle, __out_opt PHANDLE TargetHandle, __in ACCESS_MASK DesiredAccess, __in ULONG HandleAttributes, __in ULONG Options);
NTSTATUS NtDuplicateToken (__in HANDLE ExistingTokenHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in BOOLEAN EffectiveOnly, __in TOKEN_TYPE TokenType, __out PHANDLE NewTokenHandle);
NTSTATUS NtEnableLastKnownGood ();
NTSTATUS NtEnumerateBootEntries (__out_bcount_opt(*BufferLength) PVOID Buffer, __inout PULONG BufferLength);
NTSTATUS NtEnumerateDriverEntries (__out_bcount(*BufferLength) PVOID Buffer, __inout PULONG BufferLength);
NTSTATUS NtEnumerateKey (__in HANDLE KeyHandle, __in ULONG Index, __in KEY_INFORMATION_CLASS KeyInformationClass, __out_bcount_opt(Length) PVOID KeyInformation, __in ULONG Length, __out PULONG ResultLength);
NTSTATUS NtEnumerateSystemEnvironmentValuesEx (__in ULONG InformationClass, __out PVOID Buffer, __inout PULONG BufferLength);
NTSTATUS NtEnumerateTransactionObject (__in_opt HANDLE RootObjectHandle, __in KTMOBJECT_TYPE QueryType, __inout_bcount(ObjectCursorLength) PKTMOBJECT_CURSOR ObjectCursor, __in ULONG ObjectCursorLength, __out PULONG ReturnLength);
NTSTATUS NtEnumerateValueKey (__in HANDLE KeyHandle, __in ULONG Index, __in KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, __out_bcount_opt(Length) PVOID KeyValueInformation, __in ULONG Length, __out PULONG ResultLength);
NTSTATUS NtExtendSection (__in HANDLE SectionHandle, __inout PLARGE_INTEGER NewSectionSize);
NTSTATUS NtFilterToken (__in HANDLE ExistingTokenHandle, __in ULONG Flags, __in_opt PTOKEN_GROUPS SidsToDisable, __in_opt PTOKEN_PRIVILEGES PrivilegesToDelete, __in_opt PTOKEN_GROUPS RestrictedSids, __out PHANDLE NewTokenHandle);
NTSTATUS NtFindAtom (__in_bcount_opt(Length) PWSTR AtomName, __in ULONG Length, __out_opt PRTL_ATOM Atom);
NTSTATUS NtFlushBuffersFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock);
NTSTATUS NtFlushInstallUILanguage (__in LANGID InstallUILanguage, __in ULONG SetComittedFlag);
NTSTATUS NtFlushInstructionCache (__in HANDLE ProcessHandle, __in_opt PVOID BaseAddress, __in SIZE_T Length);
NTSTATUS NtFlushKey (__in HANDLE KeyHandle);
VOID NtFlushProcessWriteBuffers ();
NTSTATUS NtFlushVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __inout PSIZE_T RegionSize, __out PIO_STATUS_BLOCK IoStatus);
NTSTATUS NtFlushWriteBuffer ();
NTSTATUS NtFreeUserPhysicalPages (__in HANDLE ProcessHandle, __inout PULONG_PTR NumberOfPages, __in_ecount(*NumberOfPages) PULONG_PTR UserPfnArray);
NTSTATUS NtFreeVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __inout PSIZE_T RegionSize, __in ULONG FreeType);
NTSTATUS NtFreezeRegistry (__in ULONG TimeOutInSeconds);
NTSTATUS NtFreezeTransactions (__in PLARGE_INTEGER FreezeTimeout, __in PLARGE_INTEGER ThawTimeout);
NTSTATUS NtFsControlFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG IoControlCode, __in_bcount_opt(InputBufferLength) PVOID InputBuffer, __in ULONG InputBufferLength, __out_bcount_opt(OutputBufferLength) PVOID OutputBuffer, __in ULONG OutputBufferLength);
NTSTATUS NtGetContextThread (__in HANDLE ThreadHandle, __inout PCONTEXT ThreadContext);
ULONG NtGetCurrentProcessorNumber ();
NTSTATUS NtGetDevicePowerState (__in HANDLE Device, __out DEVICE_POWER_STATE *State);
NTSTATUS NtGetMUIRegistryInfo (__in ULONG Flags, __inout PULONG DataSize, __out PVOID Data);
NTSTATUS NtGetNextProcess (__in HANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __in ULONG HandleAttributes, __in ULONG Flags, __out PHANDLE NewProcessHandle);
NTSTATUS NtGetNextThread (__in HANDLE ProcessHandle, __in HANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in ULONG HandleAttributes, __in ULONG Flags, __out PHANDLE NewThreadHandle);
NTSTATUS NtGetNlsSectionPtr (__in ULONG SectionType, __in ULONG SectionData, __in PVOID ContextData, __out PVOID *SectionPointer, __out PULONG SectionSize);
NTSTATUS NtGetNotificationResourceManager (__in HANDLE ResourceManagerHandle, __out PTRANSACTION_NOTIFICATION TransactionNotification, __in ULONG NotificationLength, __in_opt PLARGE_INTEGER Timeout, __out_opt PULONG ReturnLength, __in ULONG Asynchronous, __in_opt ULONG_PTR AsynchronousContext);
NTSTATUS NtGetPlugPlayEvent (__in HANDLE EventHandle, __in_opt PVOID Context, __out_bcount(EventBufferSize) PPLUGPLAY_EVENT_BLOCK EventBlock, __in ULONG EventBufferSize);
NTSTATUS NtGetWriteWatch (__in HANDLE ProcessHandle, __in ULONG Flags, __in PVOID BaseAddress, __in SIZE_T RegionSize, __out_ecount(*EntriesInUserAddressArray) PVOID *UserAddressArray, __inout PULONG_PTR EntriesInUserAddressArray, __out PULONG Granularity);
NTSTATUS NtImpersonateAnonymousToken (__in HANDLE ThreadHandle);
NTSTATUS NtImpersonateClientOfPort (__in HANDLE PortHandle, __in PPORT_MESSAGE Message);
NTSTATUS NtImpersonateThread (__in HANDLE ServerThreadHandle, __in HANDLE ClientThreadHandle, __in PSECURITY_QUALITY_OF_SERVICE SecurityQos);
NTSTATUS NtInitializeNlsFiles (__out PVOID *BaseAddress, __out PLCID DefaultLocaleId, __out PLARGE_INTEGER DefaultCasingTableSize);
NTSTATUS NtInitializeRegistry (__in USHORT BootCondition);
NTSTATUS NtInitiatePowerAction (__in POWER_ACTION SystemAction, __in SYSTEM_POWER_STATE MinSystemState, __in ULONG Flags, __in BOOLEAN Asynchronous);
NTSTATUS NtIsProcessInJob (__in HANDLE ProcessHandle, __in_opt HANDLE JobHandle);
BOOLEAN NtIsSystemResumeAutomatic ();
NTSTATUS NtIsUILanguageComitted ();
NTSTATUS NtListenPort (__in HANDLE PortHandle, __out PPORT_MESSAGE ConnectionRequest);
NTSTATUS NtLoadDriver (__in PUNICODE_STRING DriverServiceName);
NTSTATUS NtLoadKey (__in POBJECT_ATTRIBUTES TargetKey, __in POBJECT_ATTRIBUTES SourceFile);
NTSTATUS NtLoadKey2 (__in POBJECT_ATTRIBUTES TargetKey, __in POBJECT_ATTRIBUTES SourceFile, __in ULONG Flags);
NTSTATUS NtLoadKeyEx (__in POBJECT_ATTRIBUTES TargetKey, __in POBJECT_ATTRIBUTES SourceFile, __in ULONG Flags, __in_opt HANDLE TrustClassKey );
NTSTATUS NtLockFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in PLARGE_INTEGER ByteOffset, __in PLARGE_INTEGER Length, __in ULONG Key, __in BOOLEAN FailImmediately, __in BOOLEAN ExclusiveLock);
NTSTATUS NtLockProductActivationKeys (__inout_opt ULONG *pPrivateVer, __out_opt ULONG *pSafeMode);
NTSTATUS NtLockRegistryKey (__in HANDLE KeyHandle);
NTSTATUS NtLockVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __inout PSIZE_T RegionSize, __in ULONG MapType);
NTSTATUS NtMakePermanentObject (__in HANDLE Handle);
NTSTATUS NtMakeTemporaryObject (__in HANDLE Handle);
NTSTATUS NtMapCMFModule (__in ULONG What, __in ULONG Index, __out_opt PULONG CacheIndexOut, __out_opt PULONG CacheFlagsOut, __out_opt PULONG ViewSizeOut, __out_opt PVOID *BaseAddress);
NTSTATUS NtMapUserPhysicalPages (__in PVOID VirtualAddress, __in ULONG_PTR NumberOfPages, __in_ecount_opt(NumberOfPages) PULONG_PTR UserPfnArray);
NTSTATUS NtMapUserPhysicalPagesScatter (__in_ecount(NumberOfPages) PVOID *VirtualAddresses, __in ULONG_PTR NumberOfPages, __in_ecount_opt(NumberOfPages) PULONG_PTR UserPfnArray);
NTSTATUS NtMapViewOfSection (__in HANDLE SectionHandle, __in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __in ULONG_PTR ZeroBits, __in SIZE_T CommitSize, __inout_opt PLARGE_INTEGER SectionOffset, __inout PSIZE_T ViewSize, __in SECTION_INHERIT InheritDisposition, __in ULONG AllocationType, __in WIN32_PROTECTION_MASK Win32Protect);
NTSTATUS NtModifyBootEntry (__in PBOOT_ENTRY BootEntry);
NTSTATUS NtModifyDriverEntry (__in PEFI_DRIVER_ENTRY DriverEntry);
NTSTATUS NtNotifyChangeDirectoryFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID Buffer, __in ULONG Length, __in ULONG CompletionFilter, __in BOOLEAN WatchTree);
NTSTATUS NtNotifyChangeKey (__in HANDLE KeyHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG CompletionFilter, __in BOOLEAN WatchTree, __out_bcount_opt(BufferSize) PVOID Buffer, __in ULONG BufferSize, __in BOOLEAN Asynchronous);
NTSTATUS NtNotifyChangeMultipleKeys (__in HANDLE MasterKeyHandle, __in_opt ULONG Count, __in_ecount_opt(Count) OBJECT_ATTRIBUTES SlaveObjects[], __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG CompletionFilter, __in BOOLEAN WatchTree, __out_bcount_opt(BufferSize) PVOID Buffer, __in ULONG BufferSize, __in BOOLEAN Asynchronous);
NTSTATUS NtOpenDirectoryObject (__out PHANDLE DirectoryHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenEnlistment (__out PHANDLE EnlistmentHandle, __in ACCESS_MASK DesiredAccess, __in HANDLE ResourceManagerHandle, __in LPGUID EnlistmentGuid, __in_opt POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenEvent (__out PHANDLE EventHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenEventPair (__out PHANDLE EventPairHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenFile (__out PHANDLE FileHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __out PIO_STATUS_BLOCK IoStatusBlock, __in ULONG ShareAccess, __in ULONG OpenOptions);
NTSTATUS NtOpenIoCompletion (__out PHANDLE IoCompletionHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenJobObject (__out PHANDLE JobHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenKey (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenKeyEx (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG OpenOptions);
NTSTATUS NtOpenKeyTransacted (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in HANDLE TransactionHandle);
NTSTATUS NtOpenKeyTransactedEx (__out PHANDLE KeyHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in ULONG OpenOptions, __in HANDLE TransactionHandle);
NTSTATUS NtOpenKeyedEvent (__out PHANDLE KeyedEventHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenMutant (__out PHANDLE MutantHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenObjectAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in PUNICODE_STRING ObjectTypeName, __in PUNICODE_STRING ObjectName, __in_opt PSECURITY_DESCRIPTOR SecurityDescriptor, __in HANDLE ClientToken, __in ACCESS_MASK DesiredAccess, __in ACCESS_MASK GrantedAccess, __in_opt PPRIVILEGE_SET Privileges, __in BOOLEAN ObjectCreation, __in BOOLEAN AccessGranted, __out PBOOLEAN GenerateOnClose);
NTSTATUS NtOpenPrivateNamespace (__out PHANDLE NamespaceHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in PVOID BoundaryDescriptor);
NTSTATUS NtOpenProcess (__out PHANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PCLIENT_ID ClientId);
NTSTATUS NtOpenProcessToken (__in HANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __out PHANDLE TokenHandle);
NTSTATUS NtOpenProcessTokenEx (__in HANDLE ProcessHandle, __in ACCESS_MASK DesiredAccess, __in ULONG HandleAttributes, __out PHANDLE TokenHandle);
NTSTATUS NtOpenResourceManager (__out PHANDLE ResourceManagerHandle, __in ACCESS_MASK DesiredAccess, __in HANDLE TmHandle, __in_opt LPGUID ResourceManagerGuid, __in_opt POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenSection (__out PHANDLE SectionHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenSemaphore (__out PHANDLE SemaphoreHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenSession (__out PHANDLE SessionHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenSymbolicLinkObject (__out PHANDLE LinkHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenThread (__out PHANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PCLIENT_ID ClientId);
NTSTATUS NtOpenThreadToken (__in HANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in BOOLEAN OpenAsSelf, __out PHANDLE TokenHandle);
NTSTATUS NtOpenThreadTokenEx (__in HANDLE ThreadHandle, __in ACCESS_MASK DesiredAccess, __in BOOLEAN OpenAsSelf, __in ULONG HandleAttributes, __out PHANDLE TokenHandle);
NTSTATUS NtOpenTimer (__out PHANDLE TimerHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes);
NTSTATUS NtOpenTransaction (__out PHANDLE TransactionHandle, __in ACCESS_MASK DesiredAccess, __in POBJECT_ATTRIBUTES ObjectAttributes, __in LPGUID Uow, __in_opt HANDLE TmHandle);
NTSTATUS NtOpenTransactionManager (__out PHANDLE TmHandle, __in ACCESS_MASK DesiredAccess, __in_opt POBJECT_ATTRIBUTES ObjectAttributes, __in_opt PUNICODE_STRING LogFileName, __in_opt LPGUID TmIdentity, __in_opt ULONG OpenOptions);
NTSTATUS NtPlugPlayControl (__in PLUGPLAY_CONTROL_CLASS PnPControlClass, __inout_bcount(PnPControlDataLength) PVOID PnPControlData, __in ULONG PnPControlDataLength);
NTSTATUS NtPowerInformation (__in POWER_INFORMATION_LEVEL InformationLevel, __in_bcount_opt(InputBufferLength) PVOID InputBuffer, __in ULONG InputBufferLength, __out_bcount_opt(OutputBufferLength) PVOID OutputBuffer, __in ULONG OutputBufferLength);
NTSTATUS NtPrePrepareComplete (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtPrePrepareEnlistment (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtPrepareComplete (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtPrepareEnlistment (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtPrivilegeCheck (__in HANDLE ClientToken, __inout PPRIVILEGE_SET RequiredPrivileges, __out PBOOLEAN Result);
NTSTATUS NtPrivilegeObjectAuditAlarm (__in PUNICODE_STRING SubsystemName, __in_opt PVOID HandleId, __in HANDLE ClientToken, __in ACCESS_MASK DesiredAccess, __in PPRIVILEGE_SET Privileges, __in BOOLEAN AccessGranted);
NTSTATUS NtPrivilegedServiceAuditAlarm (__in PUNICODE_STRING SubsystemName, __in PUNICODE_STRING ServiceName, __in HANDLE ClientToken, __in PPRIVILEGE_SET Privileges, __in BOOLEAN AccessGranted);
NTSTATUS NtPropagationComplete (__in HANDLE ResourceManagerHandle, __in ULONG RequestCookie, __in ULONG BufferLength, __in PVOID Buffer);
NTSTATUS NtPropagationFailed (__in HANDLE ResourceManagerHandle, __in ULONG RequestCookie, __in NTSTATUS PropStatus);
NTSTATUS NtProtectVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __inout PSIZE_T RegionSize, __in WIN32_PROTECTION_MASK NewProtectWin32, __out PULONG OldProtect);
NTSTATUS NtPulseEvent (__in HANDLE EventHandle, __out_opt PLONG PreviousState);
NTSTATUS NtQueryAttributesFile (__in POBJECT_ATTRIBUTES ObjectAttributes, __out PFILE_BASIC_INFORMATION FileInformation);
NTSTATUS NtQueryBootEntryOrder (__out_ecount_opt(*Count) PULONG Ids, __inout PULONG Count);
NTSTATUS NtQueryBootOptions (__out_bcount_opt(*BootOptionsLength) PBOOT_OPTIONS BootOptions, __inout PULONG BootOptionsLength);
NTSTATUS NtQueryDebugFilterState (__in ULONG ComponentId, __in ULONG Level);
NTSTATUS NtQueryDefaultLocale (__in BOOLEAN UserProfile, __out PLCID DefaultLocaleId);
NTSTATUS NtQueryDefaultUILanguage (__out LANGID *DefaultUILanguageId);
NTSTATUS NtQueryDirectoryFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID FileInformation, __in ULONG Length, __in FILE_INFORMATION_CLASS FileInformationClass, __in BOOLEAN ReturnSingleEntry, __in_opt PUNICODE_STRING FileName, __in BOOLEAN RestartScan);
NTSTATUS NtQueryDirectoryObject (__in HANDLE DirectoryHandle, __out_bcount_opt(Length) PVOID Buffer, __in ULONG Length, __in BOOLEAN ReturnSingleEntry, __in BOOLEAN RestartScan, __inout PULONG Context, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryDriverEntryOrder (__out_ecount(*Count) PULONG Ids, __inout PULONG Count);
NTSTATUS NtQueryEaFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID Buffer, __in ULONG Length, __in BOOLEAN ReturnSingleEntry, __in_bcount_opt(EaListLength) PVOID EaList, __in ULONG EaListLength, __in_opt PULONG EaIndex, __in BOOLEAN RestartScan);
NTSTATUS NtQueryEvent (__in HANDLE EventHandle, __in EVENT_INFORMATION_CLASS EventInformationClass, __out_bcount(EventInformationLength) PVOID EventInformation, __in ULONG EventInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryFullAttributesFile (__in POBJECT_ATTRIBUTES ObjectAttributes, __out PFILE_NETWORK_OPEN_INFORMATION FileInformation);
NTSTATUS NtQueryInformationAtom (__in RTL_ATOM Atom, __in ATOM_INFORMATION_CLASS InformationClass, __out_bcount(AtomInformationLength) PVOID AtomInformation, __in ULONG AtomInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationEnlistment (__in HANDLE EnlistmentHandle, __in ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass, __out_bcount(EnlistmentInformationLength) PVOID EnlistmentInformation, __in ULONG EnlistmentInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID FileInformation, __in ULONG Length, __in FILE_INFORMATION_CLASS FileInformationClass);
NTSTATUS NtQueryInformationJobObject (__in_opt HANDLE JobHandle, __in JOBOBJECTINFOCLASS JobObjectInformationClass, __out_bcount(JobObjectInformationLength) PVOID JobObjectInformation, __in ULONG JobObjectInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationPort (__in HANDLE PortHandle, __in PORT_INFORMATION_CLASS PortInformationClass, __out_bcount(Length) PVOID PortInformation, __in ULONG Length, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationProcess (__in HANDLE ProcessHandle, __in PROCESSINFOCLASS ProcessInformationClass, __out_bcount(ProcessInformationLength) PVOID ProcessInformation, __in ULONG ProcessInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationResourceManager (__in HANDLE ResourceManagerHandle, __in RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass, __out_bcount(ResourceManagerInformationLength) PVOID ResourceManagerInformation, __in ULONG ResourceManagerInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationThread (__in HANDLE ThreadHandle, __in THREADINFOCLASS ThreadInformationClass, __out_bcount(ThreadInformationLength) PVOID ThreadInformation, __in ULONG ThreadInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationToken (__in HANDLE TokenHandle, __in TOKEN_INFORMATION_CLASS TokenInformationClass, __out_bcount_part_opt(TokenInformationLength,*ReturnLength) PVOID TokenInformation, __in ULONG TokenInformationLength, __out PULONG ReturnLength);
NTSTATUS NtQueryInformationTransaction (__in HANDLE TransactionHandle, __in TRANSACTION_INFORMATION_CLASS TransactionInformationClass, __out_bcount(TransactionInformationLength) PVOID TransactionInformation, __in ULONG TransactionInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationTransactionManager (__in HANDLE TransactionManagerHandle, __in TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass, __out_bcount(TransactionManagerInformationLength) PVOID TransactionManagerInformation, __in ULONG TransactionManagerInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInformationWorkerFactory (__in HANDLE WorkerFactoryHandle, __in WORKERFACTORYINFOCLASS WorkerFactoryInformationClass, __out_bcount(WorkerFactoryInformationLength) PVOID WorkerFactoryInformation, __in ULONG WorkerFactoryInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryInstallUILanguage (__out LANGID *InstallUILanguageId);
NTSTATUS NtQueryIntervalProfile (__in KPROFILE_SOURCE ProfileSource, __out PULONG Interval);
NTSTATUS NtQueryIoCompletion (__in HANDLE IoCompletionHandle, __in IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass, __out_bcount(IoCompletionInformationLength) PVOID IoCompletionInformation, __in ULONG IoCompletionInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryKey (__in HANDLE KeyHandle, __in KEY_INFORMATION_CLASS KeyInformationClass, __out_bcount_opt(Length) PVOID KeyInformation, __in ULONG Length, __out PULONG ResultLength);
NTSTATUS NtQueryMultipleValueKey (__in HANDLE KeyHandle, __inout_ecount(EntryCount) PKEY_VALUE_ENTRY ValueEntries, __in ULONG EntryCount, __out_bcount(*BufferLength) PVOID ValueBuffer, __inout PULONG BufferLength, __out_opt PULONG RequiredBufferLength);
NTSTATUS NtQueryMutant (__in HANDLE MutantHandle, __in MUTANT_INFORMATION_CLASS MutantInformationClass, __out_bcount(MutantInformationLength) PVOID MutantInformation, __in ULONG MutantInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryObject (__in HANDLE Handle, __in OBJECT_INFORMATION_CLASS ObjectInformationClass, __out_bcount_opt(ObjectInformationLength) PVOID ObjectInformation, __in ULONG ObjectInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryOpenSubKeys (__in POBJECT_ATTRIBUTES TargetKey, __out PULONG HandleCount);
NTSTATUS NtQueryOpenSubKeysEx (__in POBJECT_ATTRIBUTES TargetKey, __in ULONG BufferLength, __out_bcount(BufferLength) PVOID Buffer, __out PULONG RequiredSize);
NTSTATUS NtQueryPerformanceCounter (__out PLARGE_INTEGER PerformanceCounter, __out_opt PLARGE_INTEGER PerformanceFrequency);
NTSTATUS NtQueryPortInformationProcess ();
NTSTATUS NtQueryQuotaInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID Buffer, __in ULONG Length, __in BOOLEAN ReturnSingleEntry, __in_bcount_opt(SidListLength) PVOID SidList, __in ULONG SidListLength, __in_opt PULONG StartSid, __in BOOLEAN RestartScan);
NTSTATUS NtQuerySection (__in HANDLE SectionHandle, __in SECTION_INFORMATION_CLASS SectionInformationClass, __out_bcount(SectionInformationLength) PVOID SectionInformation, __in SIZE_T SectionInformationLength, __out_opt PSIZE_T ReturnLength);
NTSTATUS NtQuerySecurityAttributesToken (__in HANDLE TokenHandle, __in_ecount_opt(NumberOfAttributes) PUNICODE_STRING Attributes, __in ULONG NumberOfAttributes, __out_bcount(Length) PVOID Buffer, __in ULONG Length, __out PULONG ReturnLength);
NTSTATUS NtQuerySecurityObject (__in HANDLE Handle, __in SECURITY_INFORMATION SecurityInformation, __out_bcount_opt(Length) PSECURITY_DESCRIPTOR SecurityDescriptor, __in ULONG Length, __out PULONG LengthNeeded);
NTSTATUS NtQuerySemaphore (__in HANDLE SemaphoreHandle, __in SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass, __out_bcount(SemaphoreInformationLength) PVOID SemaphoreInformation, __in ULONG SemaphoreInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQuerySymbolicLinkObject (__in HANDLE LinkHandle, __inout PUNICODE_STRING LinkTarget, __out_opt PULONG ReturnedLength);
NTSTATUS NtQuerySystemEnvironmentValue (__in PUNICODE_STRING VariableName, __out_bcount(ValueLength) PWSTR VariableValue, __in USHORT ValueLength, __out_opt PUSHORT ReturnLength);
NTSTATUS NtQuerySystemEnvironmentValueEx (__in PUNICODE_STRING VariableName, __in LPGUID VendorGuid, __out_bcount_opt(*ValueLength) PVOID Value, __inout PULONG ValueLength, __out_opt PULONG Attributes);
NTSTATUS NtQuerySystemInformation (__in SYSTEM_INFORMATION_CLASS SystemInformationClass, __out_bcount_opt(SystemInformationLength) PVOID SystemInformation, __in ULONG SystemInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQuerySystemInformationEx (__in SYSTEM_INFORMATION_CLASS SystemInformationClass, __in_bcount(QueryInformationLength) PVOID QueryInformation, __in ULONG QueryInformationLength, __out_bcount_opt(SystemInformationLength) PVOID SystemInformation, __in ULONG SystemInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQuerySystemTime (__out PLARGE_INTEGER SystemTime);
NTSTATUS NtQueryTimer (__in HANDLE TimerHandle, __in TIMER_INFORMATION_CLASS TimerInformationClass, __out_bcount(TimerInformationLength) PVOID TimerInformation, __in ULONG TimerInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtQueryTimerResolution (__out PULONG MaximumTime, __out PULONG MinimumTime, __out PULONG CurrentTime);
NTSTATUS NtQueryValueKey (__in HANDLE KeyHandle, __in PUNICODE_STRING ValueName, __in KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, __out_bcount_opt(Length) PVOID KeyValueInformation, __in ULONG Length, __out PULONG ResultLength);
NTSTATUS NtQueryVirtualMemory (__in HANDLE ProcessHandle, __in PVOID BaseAddress, __in MEMORY_INFORMATION_CLASS MemoryInformationClass, __out_bcount(MemoryInformationLength) PVOID MemoryInformation, __in SIZE_T MemoryInformationLength, __out_opt PSIZE_T ReturnLength);
NTSTATUS NtQueryVolumeInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID FsInformation, __in ULONG Length, __in FS_INFORMATION_CLASS FsInformationClass);
NTSTATUS NtQueueApcThread (__in HANDLE ThreadHandle, __in PPS_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcArgument1, __in_opt PVOID ApcArgument2, __in_opt PVOID ApcArgument3);
NTSTATUS NtQueueApcThreadEx (__in HANDLE ThreadHandle, __in_opt HANDLE UserApcReserveHandle, __in PPS_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcArgument1, __in_opt PVOID ApcArgument2, __in_opt PVOID ApcArgument3);
NTSTATUS NtRaiseException (__in PEXCEPTION_RECORD ExceptionRecord, __in PCONTEXT ContextRecord, __in BOOLEAN FirstChance);
NTSTATUS NtRaiseHardError (__in NTSTATUS ErrorStatus, __in ULONG NumberOfParameters, __in ULONG UnicodeStringParameterMask, __in_ecount(NumberOfParameters) PULONG_PTR Parameters, __in ULONG ValidResponseOptions, __out PULONG Response);
NTSTATUS NtReadFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __out_bcount(Length) PVOID Buffer, __in ULONG Length, __in_opt PLARGE_INTEGER ByteOffset, __in_opt PULONG Key);
NTSTATUS NtReadFileScatter (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in PFILE_SEGMENT_ELEMENT SegmentArray, __in ULONG Length, __in_opt PLARGE_INTEGER ByteOffset, __in_opt PULONG Key);
NTSTATUS NtReadOnlyEnlistment (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtReadRequestData (__in HANDLE PortHandle, __in PPORT_MESSAGE Message, __in ULONG DataEntryIndex, __out_bcount(BufferSize) PVOID Buffer, __in SIZE_T BufferSize, __out_opt PSIZE_T NumberOfBytesRead);
NTSTATUS NtReadVirtualMemory (__in HANDLE ProcessHandle, __in_opt PVOID BaseAddress, __out_bcount(BufferSize) PVOID Buffer, __in SIZE_T BufferSize, __out_opt PSIZE_T NumberOfBytesRead);
NTSTATUS NtRecoverEnlistment (__in HANDLE EnlistmentHandle, __in_opt PVOID EnlistmentKey);
NTSTATUS NtRecoverResourceManager (__in HANDLE ResourceManagerHandle);
NTSTATUS NtRecoverTransactionManager (__in HANDLE TransactionManagerHandle);
NTSTATUS NtRegisterProtocolAddressInformation (__in HANDLE ResourceManager, __in PCRM_PROTOCOL_ID ProtocolId, __in ULONG ProtocolInformationSize, __in PVOID ProtocolInformation, __in_opt ULONG CreateOptions);
NTSTATUS NtRegisterThreadTerminatePort (__in HANDLE PortHandle);
NTSTATUS NtReleaseKeyedEvent (__in HANDLE KeyedEventHandle, __in PVOID KeyValue, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtReleaseMutant (__in HANDLE MutantHandle, __out_opt PLONG PreviousCount);
NTSTATUS NtReleaseSemaphore (__in HANDLE SemaphoreHandle, __in LONG ReleaseCount, __out_opt PLONG PreviousCount);
NTSTATUS NtReleaseWorkerFactoryWorker (__in HANDLE WorkerFactoryHandle);
NTSTATUS NtRemoveIoCompletion (__in HANDLE IoCompletionHandle, __out PVOID *KeyContext, __out PVOID *ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtRemoveIoCompletionEx (__in HANDLE IoCompletionHandle, __out_ecount(Count) PFILE_IO_COMPLETION_INFORMATION IoCompletionInformation, __in ULONG Count, __out PULONG NumEntriesRemoved, __in_opt PLARGE_INTEGER Timeout, __in BOOLEAN Alertable);
NTSTATUS NtRemoveProcessDebug (__in HANDLE ProcessHandle, __in HANDLE DebugObjectHandle);
NTSTATUS NtRenameKey (__in HANDLE KeyHandle, __in PUNICODE_STRING NewName);
NTSTATUS NtRenameTransactionManager (__in PUNICODE_STRING LogFileName, __in LPGUID ExistingTransactionManagerGuid);
NTSTATUS NtReplaceKey (__in POBJECT_ATTRIBUTES NewFile, __in HANDLE TargetHandle, __in POBJECT_ATTRIBUTES OldFile);
NTSTATUS NtReplacePartitionUnit (__in PUNICODE_STRING TargetInstancePath, __in PUNICODE_STRING SpareInstancePath, __in ULONG Flags);
NTSTATUS NtReplyPort (__in HANDLE PortHandle, __in PPORT_MESSAGE ReplyMessage);
NTSTATUS NtReplyWaitReceivePort (__in HANDLE PortHandle, __out_opt PVOID *PortContext , __in_opt PPORT_MESSAGE ReplyMessage, __out PPORT_MESSAGE ReceiveMessage);
NTSTATUS NtReplyWaitReceivePortEx (__in HANDLE PortHandle, __out_opt PVOID *PortContext, __in_opt PPORT_MESSAGE ReplyMessage, __out PPORT_MESSAGE ReceiveMessage, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtReplyWaitReplyPort (__in HANDLE PortHandle, __inout PPORT_MESSAGE ReplyMessage);
NTSTATUS NtRequestPort (__in HANDLE PortHandle, __in PPORT_MESSAGE RequestMessage);
NTSTATUS NtRequestWaitReplyPort (__in HANDLE PortHandle, __in PPORT_MESSAGE RequestMessage, __out PPORT_MESSAGE ReplyMessage);
NTSTATUS NtResetEvent (__in HANDLE EventHandle, __out_opt PLONG PreviousState);
NTSTATUS NtResetWriteWatch (__in HANDLE ProcessHandle, __in PVOID BaseAddress, __in SIZE_T RegionSize);
NTSTATUS NtRestoreKey (__in HANDLE KeyHandle, __in HANDLE FileHandle, __in ULONG Flags);
NTSTATUS NtResumeProcess (__in HANDLE ProcessHandle);
NTSTATUS NtResumeThread (__in HANDLE ThreadHandle, __out_opt PULONG PreviousSuspendCount);
NTSTATUS NtRollbackComplete (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtRollbackEnlistment (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtRollbackTransaction (__in HANDLE TransactionHandle, __in BOOLEAN Wait);
NTSTATUS NtRollforwardTransactionManager (__in HANDLE TransactionManagerHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtSaveKey (__in HANDLE KeyHandle, __in HANDLE FileHandle);
NTSTATUS NtSaveKeyEx (__in HANDLE KeyHandle, __in HANDLE FileHandle, __in ULONG Format);
NTSTATUS NtSaveMergedKeys (__in HANDLE HighPrecedenceKeyHandle, __in HANDLE LowPrecedenceKeyHandle, __in HANDLE FileHandle);
NTSTATUS NtSecureConnectPort (__out PHANDLE PortHandle, __in PUNICODE_STRING PortName, __in PSECURITY_QUALITY_OF_SERVICE SecurityQos, __inout_opt PPORT_VIEW ClientView, __in_opt PSID RequiredServerSid, __inout_opt PREMOTE_PORT_VIEW ServerView, __out_opt PULONG MaxMessageLength, __inout_opt PVOID ConnectionInformation, __inout_opt PULONG ConnectionInformationLength);
NTSTATUS NtSerializeBoot ();
NTSTATUS NtSetBootEntryOrder (__in_ecount(Count) PULONG Ids, __in ULONG Count);
NTSTATUS NtSetBootOptions (__in PBOOT_OPTIONS BootOptions, __in ULONG FieldsToChange);
NTSTATUS NtSetContextThread (__in HANDLE ThreadHandle, __in PCONTEXT ThreadContext);
NTSTATUS NtSetDebugFilterState (__in ULONG ComponentId, __in ULONG Level, __in BOOLEAN State);
NTSTATUS NtSetDefaultHardErrorPort (__in HANDLE DefaultHardErrorPort);
NTSTATUS NtSetDefaultLocale (__in BOOLEAN UserProfile, __in LCID DefaultLocaleId);
NTSTATUS NtSetDefaultUILanguage (__in LANGID DefaultUILanguageId);
NTSTATUS NtSetDriverEntryOrder (__in_ecount(Count) PULONG Ids, __in ULONG Count);
NTSTATUS NtSetEaFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __in_bcount(Length) PVOID Buffer, __in ULONG Length);
NTSTATUS NtSetEvent (__in HANDLE EventHandle, __out_opt PLONG PreviousState);
NTSTATUS NtSetEventBoostPriority (__in HANDLE EventHandle);
NTSTATUS NtSetHighEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtSetHighWaitLowEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtSetInformationDebugObject (__in HANDLE DebugObjectHandle, __in DEBUGOBJECTINFOCLASS DebugObjectInformationClass, __in PVOID DebugInformation, __in ULONG DebugInformationLength, __out_opt PULONG ReturnLength);
NTSTATUS NtSetInformationEnlistment (__in_opt HANDLE EnlistmentHandle, __in ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass, __in_bcount(EnlistmentInformationLength) PVOID EnlistmentInformation, __in ULONG EnlistmentInformationLength);
NTSTATUS NtSetInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __in_bcount(Length) PVOID FileInformation, __in ULONG Length, __in FILE_INFORMATION_CLASS FileInformationClass);
NTSTATUS NtSetInformationJobObject (__in HANDLE JobHandle, __in JOBOBJECTINFOCLASS JobObjectInformationClass, __in_bcount(JobObjectInformationLength) PVOID JobObjectInformation, __in ULONG JobObjectInformationLength);
NTSTATUS NtSetInformationKey (__in HANDLE KeyHandle, __in KEY_SET_INFORMATION_CLASS KeySetInformationClass, __in_bcount(KeySetInformationLength) PVOID KeySetInformation, __in ULONG KeySetInformationLength);
NTSTATUS NtSetInformationObject (__in HANDLE Handle, __in OBJECT_INFORMATION_CLASS ObjectInformationClass, __in_bcount(ObjectInformationLength) PVOID ObjectInformation, __in ULONG ObjectInformationLength);
NTSTATUS NtSetInformationProcess (__in HANDLE ProcessHandle, __in PROCESSINFOCLASS ProcessInformationClass, __in_bcount(ProcessInformationLength) PVOID ProcessInformation, __in ULONG ProcessInformationLength);
NTSTATUS NtSetInformationResourceManager (__in HANDLE ResourceManagerHandle, __in RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass, __in_bcount(ResourceManagerInformationLength) PVOID ResourceManagerInformation, __in ULONG ResourceManagerInformationLength);
NTSTATUS NtSetInformationThread (__in HANDLE ThreadHandle, __in THREADINFOCLASS ThreadInformationClass, __in_bcount(ThreadInformationLength) PVOID ThreadInformation, __in ULONG ThreadInformationLength);
NTSTATUS NtSetInformationToken (__in HANDLE TokenHandle, __in TOKEN_INFORMATION_CLASS TokenInformationClass, __in_bcount(TokenInformationLength) PVOID TokenInformation, __in ULONG TokenInformationLength);
NTSTATUS NtSetInformationTransaction (__in HANDLE TransactionHandle, __in TRANSACTION_INFORMATION_CLASS TransactionInformationClass, __in_bcount(TransactionInformationLength) PVOID TransactionInformation, __in ULONG TransactionInformationLength);
NTSTATUS NtSetInformationTransactionManager (__in_opt HANDLE TmHandle, __in TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass, __in_bcount(TransactionManagerInformationLength) PVOID TransactionManagerInformation, __in ULONG TransactionManagerInformationLength);
NTSTATUS NtSetInformationWorkerFactory (__in HANDLE WorkerFactoryHandle, __in WORKERFACTORYINFOCLASS WorkerFactoryInformationClass, __in_bcount(WorkerFactoryInformationLength) PVOID WorkerFactoryInformation, __in ULONG WorkerFactoryInformationLength);
NTSTATUS NtSetIntervalProfile (__in ULONG Interval, __in KPROFILE_SOURCE Source);
NTSTATUS NtSetIoCompletion (__in HANDLE IoCompletionHandle, __in PVOID KeyContext, __in_opt PVOID ApcContext, __in NTSTATUS IoStatus, __in ULONG_PTR IoStatusInformation);
NTSTATUS NtSetIoCompletionEx (__in HANDLE IoCompletionHandle, __in HANDLE IoCompletionReserveHandle, __in PVOID KeyContext, __in_opt PVOID ApcContext, __in NTSTATUS IoStatus, __in ULONG_PTR IoStatusInformation);
NTSTATUS NtSetLdtEntries (__in ULONG Selector0, __in ULONG Entry0Low, __in ULONG Entry0Hi, __in ULONG Selector1, __in ULONG Entry1Low, __in ULONG Entry1Hi);
NTSTATUS NtSetLowEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtSetLowWaitHighEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtSetQuotaInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __in_bcount(Length) PVOID Buffer, __in ULONG Length);
NTSTATUS NtSetSecurityObject (__in HANDLE Handle, __in SECURITY_INFORMATION SecurityInformation, __in PSECURITY_DESCRIPTOR SecurityDescriptor);
NTSTATUS NtSetSystemEnvironmentValue (__in PUNICODE_STRING VariableName, __in PUNICODE_STRING VariableValue);
NTSTATUS NtSetSystemEnvironmentValueEx (__in PUNICODE_STRING VariableName, __in LPGUID VendorGuid, __in_bcount_opt(ValueLength) PVOID Value, __in ULONG ValueLength, __in ULONG Attributes);
NTSTATUS NtSetSystemInformation (__in SYSTEM_INFORMATION_CLASS SystemInformationClass, __in_bcount_opt(SystemInformationLength) PVOID SystemInformation, __in ULONG SystemInformationLength);
NTSTATUS NtSetSystemPowerState (__in POWER_ACTION SystemAction, __in SYSTEM_POWER_STATE MinSystemState, __in ULONG Flags);
NTSTATUS NtSetSystemTime (__in_opt PLARGE_INTEGER SystemTime, __out_opt PLARGE_INTEGER PreviousTime);
NTSTATUS NtSetThreadExecutionState (__in EXECUTION_STATE esFlags, __out PEXECUTION_STATE PreviousFlags);
NTSTATUS NtSetTimer (__in HANDLE TimerHandle, __in PLARGE_INTEGER DueTime, __in_opt PTIMER_APC_ROUTINE TimerApcRoutine, __in_opt PVOID TimerContext, __in BOOLEAN WakeTimer, __in_opt LONG Period, __out_opt PBOOLEAN PreviousState);
NTSTATUS NtSetTimerEx (__in HANDLE TimerHandle, __in TIMER_SET_INFORMATION_CLASS TimerSetInformationClass, __inout_bcount(TimerSetInformationLength) PVOID TimerSetInformation, __in ULONG TimerSetInformationLength);
NTSTATUS NtSetTimerResolution (__in ULONG DesiredTime, __in BOOLEAN SetResolution, __out PULONG ActualTime);
NTSTATUS NtSetUuidSeed (__in PCHAR Seed);
NTSTATUS NtSetValueKey (__in HANDLE KeyHandle, __in PUNICODE_STRING ValueName, __in_opt ULONG TitleIndex, __in ULONG Type, __in_bcount_opt(DataSize) PVOID Data, __in ULONG DataSize);
NTSTATUS NtSetVolumeInformationFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __in_bcount(Length) PVOID FsInformation, __in ULONG Length, __in FS_INFORMATION_CLASS FsInformationClass);
NTSTATUS NtShutdownSystem (__in SHUTDOWN_ACTION Action);
NTSTATUS NtShutdownWorkerFactory (__in HANDLE WorkerFactoryHandle, __inout LONG *PendingWorkerCount);
NTSTATUS NtSignalAndWaitForSingleObject (__in HANDLE SignalHandle, __in HANDLE WaitHandle, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtSinglePhaseReject (__in HANDLE EnlistmentHandle, __in_opt PLARGE_INTEGER TmVirtualClock);
NTSTATUS NtStartProfile (__in HANDLE ProfileHandle);
NTSTATUS NtStopProfile (__in HANDLE ProfileHandle);
NTSTATUS NtSuspendProcess (__in HANDLE ProcessHandle);
NTSTATUS NtSuspendThread (__in HANDLE ThreadHandle, __out_opt PULONG PreviousSuspendCount);
NTSTATUS NtSystemDebugControl (__in SYSDBG_COMMAND Command, __inout_bcount_opt(InputBufferLength) PVOID InputBuffer, __in ULONG InputBufferLength, __out_bcount_opt(OutputBufferLength) PVOID OutputBuffer, __in ULONG OutputBufferLength, __out_opt PULONG ReturnLength);
NTSTATUS NtTerminateJobObject (__in HANDLE JobHandle, __in NTSTATUS ExitStatus);
NTSTATUS NtTerminateProcess (__in_opt HANDLE ProcessHandle, __in NTSTATUS ExitStatus);
NTSTATUS NtTerminateThread (__in_opt HANDLE ThreadHandle, __in NTSTATUS ExitStatus);
NTSTATUS NtTestAlert ();
NTSTATUS NtThawRegistry ();
NTSTATUS NtThawTransactions ();
NTSTATUS NtTraceControl (__in ULONG FunctionCode, __in_bcount_opt(InBufferLen) PVOID InBuffer, __in ULONG InBufferLen, __out_bcount_opt(OutBufferLen) PVOID OutBuffer, __in ULONG OutBufferLen, __out PULONG ReturnLength);
NTSTATUS NtTraceEvent (__in HANDLE TraceHandle, __in ULONG Flags, __in ULONG FieldSize, __in PVOID Fields);
NTSTATUS NtTranslateFilePath (__in PFILE_PATH InputFilePath, __in ULONG OutputType, __out_bcount_opt(*OutputFilePathLength) PFILE_PATH OutputFilePath, __inout_opt PULONG OutputFilePathLength);
NTSTATUS NtUmsThreadYield (__in PVOID SchedulerParam);
NTSTATUS NtUnloadDriver (__in PUNICODE_STRING DriverServiceName);
NTSTATUS NtUnloadKey (__in POBJECT_ATTRIBUTES TargetKey);
NTSTATUS NtUnloadKey2 (__in POBJECT_ATTRIBUTES TargetKey, __in ULONG Flags);
NTSTATUS NtUnloadKeyEx (__in POBJECT_ATTRIBUTES TargetKey, __in_opt HANDLE Event);
NTSTATUS NtUnlockFile (__in HANDLE FileHandle, __out PIO_STATUS_BLOCK IoStatusBlock, __in PLARGE_INTEGER ByteOffset, __in PLARGE_INTEGER Length, __in ULONG Key);
NTSTATUS NtUnlockVirtualMemory (__in HANDLE ProcessHandle, __inout PVOID *BaseAddress, __inout PSIZE_T RegionSize, __in ULONG MapType);
NTSTATUS NtUnmapViewOfSection (__in HANDLE ProcessHandle, __in PVOID BaseAddress);
NTSTATUS NtVdmControl (__in VDMSERVICECLASS Service, __inout PVOID ServiceData);
NTSTATUS NtWaitForDebugEvent (__in HANDLE DebugObjectHandle, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout, __out PDBGUI_WAIT_STATE_CHANGE WaitStateChange);
NTSTATUS NtWaitForKeyedEvent (__in HANDLE KeyedEventHandle, __in PVOID KeyValue, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtWaitForMultipleObjects (__in ULONG Count, __in_ecount(Count) HANDLE Handles[], __in WAIT_TYPE WaitType, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtWaitForMultipleObjects32 (__in ULONG Count, __in_ecount(Count) LONG Handles[], __in WAIT_TYPE WaitType, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtWaitForSingleObject (__in HANDLE Handle, __in BOOLEAN Alertable, __in_opt PLARGE_INTEGER Timeout);
NTSTATUS NtWaitForWorkViaWorkerFactory (__in HANDLE WorkerFactoryHandle, __out PFILE_IO_COMPLETION_INFORMATION MiniPacket);
NTSTATUS NtWaitHighEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtWaitLowEventPair (__in HANDLE EventPairHandle);
NTSTATUS NtWorkerFactoryWorkerReady (__in HANDLE WorkerFactoryHandle);
NTSTATUS NtWriteFile (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in_bcount(Length) PVOID Buffer, __in ULONG Length, __in_opt PLARGE_INTEGER ByteOffset, __in_opt PULONG Key);
NTSTATUS NtWriteFileGather (__in HANDLE FileHandle, __in_opt HANDLE Event, __in_opt PIO_APC_ROUTINE ApcRoutine, __in_opt PVOID ApcContext, __out PIO_STATUS_BLOCK IoStatusBlock, __in PFILE_SEGMENT_ELEMENT SegmentArray, __in ULONG Length, __in_opt PLARGE_INTEGER ByteOffset, __in_opt PULONG Key);
NTSTATUS NtWriteRequestData (__in HANDLE PortHandle, __in PPORT_MESSAGE Message, __in ULONG DataEntryIndex, __in_bcount(BufferSize) PVOID Buffer, __in SIZE_T BufferSize, __out_opt PSIZE_T NumberOfBytesWritten);
NTSTATUS NtWriteVirtualMemory (__in HANDLE ProcessHandle, __in_opt PVOID BaseAddress, __in_bcount(BufferSize) PVOID Buffer, __in SIZE_T BufferSize, __out_opt PSIZE_T NumberOfBytesWritten);
NTSTATUS NtYieldExecution ();
NTSTATUS NtNotifyChangeSession (__in HANDLE Session, __in ULONG IoStateSequence, __in PVOID Reserved, __in ULONG Action, __in IO_SESSION_STATE IoState, __in IO_SESSION_STATE IoState2, __in PVOID Buffer, __in ULONG BufferSize);
NTSTATUS NtQueryLicenseValue (__in PUNICODE_STRING Name, __out_opt PULONG Type, __out_bcount(*ReturnedLength) PVOID Buffer, __in ULONG Length, __out PULONG ReturnedLength);