ntzwapi.h File Reference

Go to the source code of this file.

Functions
NTSYSCALLAPI NTSTATUS NTAPI	ZwAcceptConnectPort (_Out_ PHANDLE PortHandle, _In_opt_ PVOID PortContext, _In_ PPORT_MESSAGE ConnectionRequest, _In_ BOOLEAN AcceptConnection, _Inout_opt_ PPORT_VIEW ServerView, _Out_opt_ PREMOTE_PORT_VIEW ClientView)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheck (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _Out_writes_bytes_(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, _Inout_ PULONG PrivilegeSetLength, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ACCESS_MASK DesiredAccess, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckByType (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_reads_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _Out_writes_bytes_(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, _Inout_ PULONG PrivilegeSetLength, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckByTypeAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_ PACCESS_MASK GrantedAccess, _Out_ PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckByTypeResultList (_In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_reads_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _Out_writes_bytes_(*PrivilegeSetLength) PPRIVILEGE_SET PrivilegeSet, _Inout_ PULONG PrivilegeSetLength, _Out_writes_(ObjectTypeListLength) PACCESS_MASK GrantedAccess, _Out_writes_(ObjectTypeListLength) PNTSTATUS AccessStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckByTypeResultListAndAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_writes_(ObjectTypeListLength) PACCESS_MASK GrantedAccess, _Out_writes_(ObjectTypeListLength) PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAccessCheckByTypeResultListAndAuditAlarmByHandle (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ HANDLE ClientToken, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_opt_ PSID PrincipalSelfSid, _In_ ACCESS_MASK DesiredAccess, _In_ AUDIT_EVENT_TYPE AuditType, _In_ ULONG Flags, _In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ PGENERIC_MAPPING GenericMapping, _In_ BOOLEAN ObjectCreation, _Out_writes_(ObjectTypeListLength) PACCESS_MASK GrantedAccess, _Out_writes_(ObjectTypeListLength) PNTSTATUS AccessStatus, _Out_ PBOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAcquireCMFViewOwnership (_Out_ PULONGLONG TimeStamp, _Out_ PBOOLEAN tokenTaken, _In_ BOOLEAN replaceExisting)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAddAtom (_In_reads_bytes_opt_(Length) PWSTR AtomName, _In_ ULONG Length, _Out_opt_ PRTL_ATOM Atom)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAddBootEntry (_In_ PBOOT_ENTRY BootEntry, _Out_opt_ PULONG Id)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAddDriverEntry (_In_ PEFI_DRIVER_ENTRY DriverEntry, _Out_opt_ PULONG Id)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAdjustGroupsToken (_In_ HANDLE TokenHandle, _In_ BOOLEAN ResetToDefault, _In_opt_ PTOKEN_GROUPS NewState, _In_opt_ ULONG BufferLength, _Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_GROUPS PreviousState, _Out_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAdjustPrivilegesToken (_In_ HANDLE TokenHandle, _In_ BOOLEAN DisableAllPrivileges, _In_opt_ PTOKEN_PRIVILEGES NewState, _In_ ULONG BufferLength, _Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_PRIVILEGES PreviousState, _Out_ _When_(PreviousState==NULL, _Out_opt_) PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAdjustTokenClaimsAndDeviceGroups (_In_ HANDLE TokenHandle, _In_ BOOLEAN UserResetToDefault, _In_ BOOLEAN DeviceResetToDefault, _In_ BOOLEAN DeviceGroupsResetToDefault, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION NewUserState, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION NewDeviceState, _In_opt_ PTOKEN_GROUPS NewDeviceGroupsState, _In_ ULONG UserBufferLength, _Out_writes_bytes_to_opt_(UserBufferLength,*UserReturnLength) PTOKEN_SECURITY_ATTRIBUTES_INFORMATION PreviousUserState, _In_ ULONG DeviceBufferLength, _Out_writes_bytes_to_opt_(DeviceBufferLength,*DeviceReturnLength) PTOKEN_SECURITY_ATTRIBUTES_INFORMATION PreviousDeviceState, _In_ ULONG DeviceGroupsBufferLength, _Out_writes_bytes_to_opt_(DeviceGroupsBufferLength,*DeviceGroupsReturnBufferLength) PTOKEN_GROUPS PreviousDeviceGroups, _Out_opt_ PULONG UserReturnLength, _Out_opt_ PULONG DeviceReturnLength, _Out_opt_ PULONG DeviceGroupsReturnBufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlertResumeThread (_In_ HANDLE ThreadHandle, _Out_opt_ PULONG PreviousSuspendCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlertThread (_In_ HANDLE ThreadHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAllocateLocallyUniqueId (_Out_ PLUID Luid)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAllocateReserveObject (_Out_ PHANDLE MemoryReserveHandle, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ MEMORY_RESERVE_TYPE Type)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAllocateUserPhysicalPages (_In_ HANDLE ProcessHandle, _Inout_ PULONG_PTR NumberOfPages, _Out_writes_(*NumberOfPages) PULONG_PTR UserPfnArray)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAllocateUuids (_Out_ PULARGE_INTEGER Time, _Out_ PULONG Range, _Out_ PULONG Sequence, _Out_ PCHAR Seed)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAllocateVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ _At_(*BaseAddress, _Readable_bytes_(*RegionSize) _Writable_bytes_(*RegionSize) _Post_readable_byte_size_(*RegionSize)) PVOID *BaseAddress, _In_ ULONG_PTR ZeroBits, _Inout_ PSIZE_T RegionSize, _In_ ULONG AllocationType, _In_ ULONG Protect)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcAcceptConnectPort (_Out_ PHANDLE PortHandle, _In_ HANDLE ConnectionPortHandle, _In_ ULONG Flags, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PALPC_PORT_ATTRIBUTES PortAttributes, _In_opt_ PVOID PortContext, _In_reads_bytes_(ConnectionRequest->u1.s1.TotalLength) PPORT_MESSAGE ConnectionRequest, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES ConnectionMessageAttributes, _In_ BOOLEAN AcceptConnection)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCancelMessage (_In_ HANDLE PortHandle, _In_ ULONG Flags, _In_ PALPC_CONTEXT_ATTR MessageContext)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcConnectPort (_Out_ PHANDLE PortHandle, _In_ PUNICODE_STRING PortName, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PALPC_PORT_ATTRIBUTES PortAttributes, _In_ ULONG Flags, _In_opt_ PSID RequiredServerSid, _Inout_updates_bytes_to_opt_(*BufferLength,*BufferLength) PPORT_MESSAGE ConnectionMessage, _Inout_opt_ PULONG BufferLength, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES OutMessageAttributes, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES InMessageAttributes, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcConnectPortEx (_Out_ PHANDLE PortHandle, _In_ POBJECT_ATTRIBUTES ConnectionPortObjectAttributes, _In_opt_ POBJECT_ATTRIBUTES ClientPortObjectAttributes, _In_opt_ PALPC_PORT_ATTRIBUTES PortAttributes, _In_ ULONG Flags, _In_opt_ PSECURITY_DESCRIPTOR ServerSecurityRequirements, _Inout_updates_bytes_to_opt_(*BufferLength,*BufferLength) PPORT_MESSAGE ConnectionMessage, _Inout_opt_ PSIZE_T BufferLength, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES OutMessageAttributes, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES InMessageAttributes, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCreatePort (_Out_ PHANDLE PortHandle, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PALPC_PORT_ATTRIBUTES PortAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCreatePortSection (_In_ HANDLE PortHandle, _In_ ULONG Flags, _In_opt_ HANDLE SectionHandle, _In_ SIZE_T SectionSize, _Out_ PALPC_HANDLE AlpcSectionHandle, _Out_ PSIZE_T ActualSectionSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCreateResourceReserve (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ SIZE_T MessageSize, _Out_ PALPC_HANDLE ResourceId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCreateSectionView (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _Inout_ PALPC_DATA_VIEW_ATTR ViewAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcCreateSecurityContext (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _Inout_ PALPC_SECURITY_ATTR SecurityAttribute)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcDeletePortSection (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ ALPC_HANDLE SectionHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcDeleteResourceReserve (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ ALPC_HANDLE ResourceId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcDeleteSectionView (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ PVOID ViewBase)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcDeleteSecurityContext (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ ALPC_HANDLE ContextHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcDisconnectPort (_In_ HANDLE PortHandle, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcImpersonateClientContainerOfPort (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE Message, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcImpersonateClientOfPort (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE Message, _In_ PVOID Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcOpenSenderProcess (_Out_ PHANDLE ProcessHandle, _In_ HANDLE PortHandle, _In_ PPORT_MESSAGE PortMessage, _In_ ULONG Flags, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcOpenSenderThread (_Out_ PHANDLE ThreadHandle, _In_ HANDLE PortHandle, _In_ PPORT_MESSAGE PortMessage, _In_ ULONG Flags, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcQueryInformation (_In_opt_ HANDLE PortHandle, _In_ ALPC_PORT_INFORMATION_CLASS PortInformationClass, _Inout_updates_bytes_to_(Length,*ReturnLength) PVOID PortInformation, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcQueryInformationMessage (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE PortMessage, _In_ ALPC_MESSAGE_INFORMATION_CLASS MessageInformationClass, _Out_writes_bytes_to_opt_(Length,*ReturnLength) PVOID MessageInformation, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcRevokeSecurityContext (_In_ HANDLE PortHandle, _Reserved_ ULONG Flags, _In_ ALPC_HANDLE ContextHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcSendWaitReceivePort (_In_ HANDLE PortHandle, _In_ ULONG Flags, _In_reads_bytes_opt_(SendMessage->u1.s1.TotalLength) PPORT_MESSAGE SendMessage, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES SendMessageAttributes, _Out_writes_bytes_to_opt_(*BufferLength,*BufferLength) PPORT_MESSAGE ReceiveMessage, _Inout_opt_ PSIZE_T BufferLength, _Inout_opt_ PALPC_MESSAGE_ATTRIBUTES ReceiveMessageAttributes, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAlpcSetInformation (_In_ HANDLE PortHandle, _In_ ALPC_PORT_INFORMATION_CLASS PortInformationClass, _In_reads_bytes_opt_(Length) PVOID PortInformation, _In_ ULONG Length)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAreMappedFilesTheSame (_In_ PVOID File1MappedAsAnImage, _In_ PVOID File2MappedAsFile)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAssignProcessToJobObject (_In_ HANDLE JobHandle, _In_ HANDLE ProcessHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAssignProcessToSiloObject (_In_ HANDLE SiloHandle, _In_ HANDLE ProcessHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAssociateWaitCompletionPacket (_In_ HANDLE WaitCompletionPacketHandle, _In_ HANDLE IoCompletionHandle, _In_ HANDLE TargetObjectHandle, _In_opt_ PVOID KeyContext, _In_opt_ PVOID ApcContext, _In_ NTSTATUS IoStatus, _In_ ULONG_PTR IoStatusInformation, _Out_opt_ PBOOLEAN AlreadySignaled)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAttachThreadIdSiloToCurrentThread (_In_ HANDLE ThreadId, _Out_ PHANDLE PreviousSiloHandle, _Out_opt_ PBOOLEAN bChangedSilo)
NTSYSCALLAPI NTSTATUS NTAPI	ZwAttachThreadSiloToCurrentThread (_In_ HANDLE ThreadHandle, _Out_ PHANDLE PreviousSiloHandle, _Out_opt_ PBOOLEAN bChangedSilo)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCallbackReturn (_In_reads_bytes_opt_(OutputLength) PVOID OutputBuffer, _In_ ULONG OutputLength, _In_ NTSTATUS Status)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelIoFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelIoFileEx (_In_ HANDLE FileHandle, _In_opt_ PIO_STATUS_BLOCK IoRequestToCancel, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelSynchronousIoFile (_In_ HANDLE ThreadHandle, _In_opt_ PIO_STATUS_BLOCK IoRequestToCancel, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelTimer (_In_ HANDLE TimerHandle, _Out_opt_ PBOOLEAN CurrentState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelTimer2 (_In_ HANDLE TimerHandle, _In_ PT2_CANCEL_PARAMETERS Parameters)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCancelWaitCompletionPacket (_In_ HANDLE WaitCompletionPacketHandle, _In_ BOOLEAN RemoveSignaledPacket)
NTSYSCALLAPI NTSTATUS NTAPI	ZwClearEvent (_In_ HANDLE EventHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwClose (_In_ HANDLE Handle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCloseObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCommitComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCommitEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCommitTransaction (_In_ HANDLE TransactionHandle, _In_ BOOLEAN Wait)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCompactKeys (_In_ ULONG Count, _In_reads_(Count) HANDLE KeyArray[])
NTSYSCALLAPI NTSTATUS NTAPI	ZwCompareObjects (_In_ HANDLE FirstObjectHandle, _In_ HANDLE SecondObjectHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCompareTokens (_In_ HANDLE FirstTokenHandle, _In_ HANDLE SecondTokenHandle, _Out_ PBOOLEAN Equal)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCompleteConnectPort (_In_ HANDLE PortHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCompressKey (_In_ HANDLE Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwConnectPort (_Out_ PHANDLE PortHandle, _In_ PUNICODE_STRING PortName, _In_ PSECURITY_QUALITY_OF_SERVICE SecurityQos, _Inout_opt_ PPORT_VIEW ClientView, _Inout_opt_ PREMOTE_PORT_VIEW ServerView, _Out_opt_ PULONG MaxMessageLength, _Inout_updates_bytes_to_opt_(*ConnectionInformationLength,*ConnectionInformationLength) PVOID ConnectionInformation, _Inout_opt_ PULONG ConnectionInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwContinue (_In_ PCONTEXT ContextRecord, _In_ BOOLEAN TestAlert)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateDebugObject (_Out_ PHANDLE DebugObjectHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateDirectoryObject (_Out_ PHANDLE DirectoryHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateDirectoryObjectEx (_Out_ PHANDLE DirectoryHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE ShadowDirectoryHandle, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateEnlistment (_Out_ PHANDLE EnlistmentHandle, _In_ ACCESS_MASK DesiredAccess, _In_ HANDLE ResourceManagerHandle, _In_ HANDLE TransactionHandle, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ ULONG CreateOptions, _In_ NOTIFICATION_MASK NotificationMask, _In_opt_ PVOID EnlistmentKey)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateEvent (_Out_ PHANDLE EventHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ EVENT_TYPE EventType, _In_ BOOLEAN InitialState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateEventPair (_Out_ PHANDLE EventPairHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateFile (_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_opt_ PLARGE_INTEGER AllocationSize, _In_ ULONG FileAttributes, _In_ ULONG ShareAccess, _In_ ULONG CreateDisposition, _In_ ULONG CreateOptions, _In_reads_bytes_opt_(EaLength) PVOID EaBuffer, _In_ ULONG EaLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateIRTimer (_Out_ PHANDLE TimerHandle, _In_ ACCESS_MASK DesiredAccess)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateIoCompletion (_Out_ PHANDLE IoCompletionHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ ULONG Count)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateJobObject (_Out_ PHANDLE JobHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateJobSet (_In_ ULONG NumJob, _In_reads_(NumJob) PJOB_SET_ARRAY UserJobSet, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateKey (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Reserved_ ULONG TitleIndex, _In_opt_ PUNICODE_STRING Class, _In_ ULONG CreateOptions, _Out_opt_ PULONG Disposition)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateKeyTransacted (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Reserved_ ULONG TitleIndex, _In_opt_ PUNICODE_STRING Class, _In_ ULONG CreateOptions, _In_ HANDLE TransactionHandle, _Out_opt_ PULONG Disposition)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateKeyedEvent (_Out_ PHANDLE KeyedEventHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateLowBoxToken (_Out_ PHANDLE TokenHandle, _In_ HANDLE ExistingTokenHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PSID PackageSid, _In_ ULONG CapabilityCount, _In_reads_opt_(CapabilityCount) PSID_AND_ATTRIBUTES Capabilities, _In_ ULONG HandleCount, _In_reads_opt_(HandleCount) HANDLE *Handles)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateMailslotFile (_Out_ PHANDLE FileHandle, _In_ ULONG DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CreateOptions, _In_ ULONG MailslotQuota, _In_ ULONG MaximumMessageSize, _In_ PLARGE_INTEGER ReadTimeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateMutant (_Out_ PHANDLE MutantHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ BOOLEAN InitialOwner)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateNamedPipeFile (_Out_ PHANDLE FileHandle, _In_ ULONG DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG ShareAccess, _In_ ULONG CreateDisposition, _In_ ULONG CreateOptions, _In_ ULONG NamedPipeType, _In_ ULONG ReadMode, _In_ ULONG CompletionMode, _In_ ULONG MaximumInstances, _In_ ULONG InboundQuota, _In_ ULONG OutboundQuota, _In_opt_ PLARGE_INTEGER DefaultTimeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreatePagingFile (_In_ PUNICODE_STRING PageFileName, _In_ PLARGE_INTEGER MinimumSize, _In_ PLARGE_INTEGER MaximumSize, _In_ ULONG Priority)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreatePartition (_Out_ PHANDLE PartitionHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG PreferredNode)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreatePort (_Out_ PHANDLE PortHandle, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG MaxConnectionInfoLength, _In_ ULONG MaxMessageLength, _In_opt_ ULONG MaxPoolUsage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreatePrivateNamespace (_Out_ PHANDLE NamespaceHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PVOID BoundaryDescriptor)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateProcess (_Out_ PHANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE ParentProcess, _In_ BOOLEAN InheritObjectTable, _In_opt_ HANDLE SectionHandle, _In_opt_ HANDLE DebugPort, _In_opt_ HANDLE ExceptionPort)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateProcessEx (_Out_ PHANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE ParentProcess, _In_ ULONG Flags, _In_opt_ HANDLE SectionHandle, _In_opt_ HANDLE DebugPort, _In_opt_ HANDLE ExceptionPort, _In_ ULONG JobMemberLevel)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateProfile (_Out_ PHANDLE ProfileHandle, _In_opt_ HANDLE Process, _In_ PVOID ProfileBase, _In_ SIZE_T ProfileSize, _In_ ULONG BucketSize, _In_reads_bytes_(BufferSize) PULONG Buffer, _In_ ULONG BufferSize, _In_ KPROFILE_SOURCE ProfileSource, _In_ KAFFINITY Affinity)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateProfileEx (_Out_ PHANDLE ProfileHandle, _In_opt_ HANDLE Process, _In_ PVOID ProfileBase, _In_ SIZE_T ProfileSize, _In_ ULONG BucketSize, _In_reads_bytes_(BufferSize) PULONG Buffer, _In_ ULONG BufferSize, _In_ KPROFILE_SOURCE ProfileSource, _In_ USHORT GroupCount, _In_reads_(GroupCount) PGROUP_AFFINITY GroupAffinity)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateResourceManager (_Out_ PHANDLE ResourceManagerHandle, _In_ ACCESS_MASK DesiredAccess, _In_ HANDLE TmHandle, _In_ LPGUID RmGuid, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ ULONG CreateOptions, _In_opt_ PUNICODE_STRING Description)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateSection (_Out_ PHANDLE SectionHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PLARGE_INTEGER MaximumSize, _In_ ULONG SectionPageProtection, _In_ ULONG AllocationAttributes, _In_opt_ HANDLE FileHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateSemaphore (_Out_ PHANDLE SemaphoreHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ LONG InitialCount, _In_ LONG MaximumCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateSiloObject (_Out_ PHANDLE SiloHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateSymbolicLinkObject (_Out_ PHANDLE LinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PUNICODE_STRING LinkTarget)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateThread (_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE ProcessHandle, _Out_ PCLIENT_ID ClientId, _In_ PCONTEXT ThreadContext, _In_ PINITIAL_TEB InitialTeb, _In_ BOOLEAN CreateSuspended)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateThreadEx (_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE ProcessHandle, _In_ PVOID StartRoutine, _In_opt_ PVOID Argument, _In_ ULONG CreateFlags, _In_ SIZE_T ZeroBits, _In_ SIZE_T StackSize, _In_ SIZE_T MaximumStackSize, _In_opt_ PPS_ATTRIBUTE_LIST AttributeList)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateTimer (_Out_ PHANDLE TimerHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ TIMER_TYPE TimerType)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateTimer2 (_Out_ PHANDLE TimerHandle, _In_opt_ PVOID Reserved1, _In_opt_ PVOID Reserved2, _In_ ULONG Attributes, _In_ ACCESS_MASK DesiredAccess)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateToken (_Out_ PHANDLE TokenHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ TOKEN_TYPE TokenType, _In_ PLUID AuthenticationId, _In_ PLARGE_INTEGER ExpirationTime, _In_ PTOKEN_USER User, _In_ PTOKEN_GROUPS Groups, _In_ PTOKEN_PRIVILEGES Privileges, _In_opt_ PTOKEN_OWNER Owner, _In_ PTOKEN_PRIMARY_GROUP PrimaryGroup, _In_opt_ PTOKEN_DEFAULT_DACL DefaultDacl, _In_ PTOKEN_SOURCE TokenSource)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateTokenEx (_Out_ PHANDLE TokenHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ TOKEN_TYPE TokenType, _In_ PLUID AuthenticationId, _In_ PLARGE_INTEGER ExpirationTime, _In_ PTOKEN_USER User, _In_ PTOKEN_GROUPS Groups, _In_ PTOKEN_PRIVILEGES Privileges, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION UserAttributes, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION DeviceAttributes, _In_opt_ PTOKEN_GROUPS DeviceGroups, _In_opt_ PTOKEN_MANDATORY_POLICY TokenMandatoryPolicy, _In_opt_ PTOKEN_OWNER Owner, _In_ PTOKEN_PRIMARY_GROUP PrimaryGroup, _In_opt_ PTOKEN_DEFAULT_DACL DefaultDacl, _In_ PTOKEN_SOURCE TokenSource)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateTransaction (_Out_ PHANDLE TransactionHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ LPGUID Uow, _In_opt_ HANDLE TmHandle, _In_opt_ ULONG CreateOptions, _In_opt_ ULONG IsolationLevel, _In_opt_ ULONG IsolationFlags, _In_opt_ PLARGE_INTEGER Timeout, _In_opt_ PUNICODE_STRING Description)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateTransactionManager (_Out_ PHANDLE TmHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PUNICODE_STRING LogFileName, _In_opt_ ULONG CreateOptions, _In_opt_ ULONG CommitStrength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateUserProcess (_Out_ PHANDLE ProcessHandle, _Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK ProcessDesiredAccess, _In_ ACCESS_MASK ThreadDesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ProcessObjectAttributes, _In_opt_ POBJECT_ATTRIBUTES ThreadObjectAttributes, _In_ ULONG ProcessFlags, _In_ ULONG ThreadFlags, _In_opt_ PVOID ProcessParameters, _Inout_ PPS_CREATE_INFO CreateInfo, _In_opt_ PPS_ATTRIBUTE_LIST AttributeList)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateWaitCompletionPacket (_Out_ PHANDLE WaitCompletionPacketHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateWaitablePort (_Out_ PHANDLE PortHandle, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG MaxConnectionInfoLength, _In_ ULONG MaxMessageLength, _In_opt_ ULONG MaxPoolUsage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateWnfStateName (_Out_ PWNF_STATE_NAME StateName, _In_ WNF_STATE_NAME_LIFETIME NameLifetime, _In_ WNF_DATA_SCOPE DataScope, _In_ BOOLEAN PersistData, _In_opt_ PCWNF_TYPE_ID TypeId, _In_ ULONG MaximumStateSize, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
NTSYSCALLAPI NTSTATUS NTAPI	ZwCreateWorkerFactory (_Out_ PHANDLE WorkerFactoryHandleReturn, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE CompletionPortHandle, _In_ HANDLE WorkerProcessHandle, _In_ PVOID StartRoutine, _In_opt_ PVOID StartParameter, _In_opt_ ULONG MaxThreadCount, _In_opt_ SIZE_T StackReserve, _In_opt_ SIZE_T StackCommit)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDebugActiveProcess (_In_ HANDLE ProcessHandle, _In_ HANDLE DebugObjectHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDebugContinue (_In_ HANDLE DebugObjectHandle, _In_ PCLIENT_ID ClientId, _In_ NTSTATUS ContinueStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDelayExecution (_In_ BOOLEAN Alertable, _In_ PLARGE_INTEGER DelayInterval)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteAtom (_In_ RTL_ATOM Atom)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteBootEntry (_In_ ULONG Id)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteDriverEntry (_In_ ULONG Id)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteFile (_In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteKey (_In_ HANDLE KeyHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ BOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeletePrivateNamespace (_In_ HANDLE NamespaceHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteValueKey (_In_ HANDLE KeyHandle, _In_ PUNICODE_STRING ValueName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteWnfStateData (_In_ PCWNF_STATE_NAME StateName, _In_opt_ const PVOID ExplicitScope)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeleteWnfStateName (_In_ PCWNF_STATE_NAME StateName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDetachSiloFromCurrentThread (_In_ HANDLE SiloHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDeviceIoControlFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG IoControlCode, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDisableLastKnownGood (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDisplayString (_In_ PUNICODE_STRING String)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDrawText (_In_ PUNICODE_STRING String)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDuplicateObject (_In_ HANDLE SourceProcessHandle, _In_ HANDLE SourceHandle, _In_opt_ HANDLE TargetProcessHandle, _Out_opt_ PHANDLE TargetHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _In_ ULONG Options)
NTSYSCALLAPI NTSTATUS NTAPI	ZwDuplicateToken (_In_ HANDLE ExistingTokenHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ BOOLEAN EffectiveOnly, _In_ TOKEN_TYPE TokenType, _Out_ PHANDLE NewTokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnableLastKnownGood (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateBootEntries (_Out_writes_bytes_opt_(*BufferLength) PVOID Buffer, _Inout_ PULONG BufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateDriverEntries (_Out_writes_bytes_opt_(*BufferLength) PVOID Buffer, _Inout_ PULONG BufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateKey (_In_ HANDLE KeyHandle, _In_ ULONG Index, _In_ KEY_INFORMATION_CLASS KeyInformationClass, _Out_writes_bytes_opt_(Length) PVOID KeyInformation, _In_ ULONG Length, _Out_ PULONG ResultLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateSystemEnvironmentValuesEx (_In_ ULONG InformationClass, _Out_ PVOID Buffer, _Inout_ PULONG BufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateTransactionObject (_In_opt_ HANDLE RootObjectHandle, _In_ KTMOBJECT_TYPE QueryType, _Inout_updates_bytes_(ObjectCursorLength) PKTMOBJECT_CURSOR ObjectCursor, _In_ ULONG ObjectCursorLength, _Out_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwEnumerateValueKey (_In_ HANDLE KeyHandle, _In_ ULONG Index, _In_ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, _Out_writes_bytes_opt_(Length) PVOID KeyValueInformation, _In_ ULONG Length, _Out_ PULONG ResultLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwExtendSection (_In_ HANDLE SectionHandle, _Inout_ PLARGE_INTEGER NewSectionSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFilterBootOption (_In_ FILTER_BOOT_OPTION_OPERATION FilterOperation, _In_ ULONG ObjectType, _In_ ULONG ElementType, _In_reads_bytes_opt_(DataSize) PVOID Data, _In_ ULONG DataSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFilterToken (_In_ HANDLE ExistingTokenHandle, _In_ ULONG Flags, _In_opt_ PTOKEN_GROUPS SidsToDisable, _In_opt_ PTOKEN_PRIVILEGES PrivilegesToDelete, _In_opt_ PTOKEN_GROUPS RestrictedSids, _Out_ PHANDLE NewTokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFilterTokenEx (_In_ HANDLE ExistingTokenHandle, _In_ ULONG Flags, _In_opt_ PTOKEN_GROUPS SidsToDisable, _In_opt_ PTOKEN_PRIVILEGES PrivilegesToDelete, _In_opt_ PTOKEN_GROUPS RestrictedSids, _In_ ULONG DisableUserClaimsCount, _In_opt_ PUNICODE_STRING UserClaimsToDisable, _In_ ULONG DisableDeviceClaimsCount, _In_opt_ PUNICODE_STRING DeviceClaimsToDisable, _In_opt_ PTOKEN_GROUPS DeviceGroupsToDisable, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION RestrictedUserAttributes, _In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION RestrictedDeviceAttributes, _In_opt_ PTOKEN_GROUPS RestrictedDeviceGroups, _Out_ PHANDLE NewTokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFindAtom (_In_reads_bytes_opt_(Length) PWSTR AtomName, _In_ ULONG Length, _Out_opt_ PRTL_ATOM Atom)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushBuffersFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushBuffersFileEx (_In_ HANDLE FileHandle, _In_ ULONG Flags, _In_reads_bytes_(ParametersSize) PVOID Parameters, _In_ ULONG ParametersSize, _Out_ PIO_STATUS_BLOCK IoStatusBlock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushInstallUILanguage (_In_ LANGID InstallUILanguage, _In_ ULONG SetComittedFlag)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushInstructionCache (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ SIZE_T Length)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushKey (_In_ HANDLE KeyHandle)
NTSYSCALLAPI VOID NTAPI	ZwFlushProcessWriteBuffers (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFlushWriteBuffer (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFreeUserPhysicalPages (_In_ HANDLE ProcessHandle, _Inout_ PULONG_PTR NumberOfPages, _In_reads_(*NumberOfPages) PULONG_PTR UserPfnArray)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFreeVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ PVOID *BaseAddress, _Inout_ PSIZE_T RegionSize, _In_ ULONG FreeType)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFreezeRegistry (_In_ ULONG TimeOutInSeconds)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFreezeTransactions (_In_ PLARGE_INTEGER FreezeTimeout, _In_ PLARGE_INTEGER ThawTimeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwFsControlFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG FsControlCode, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetCachedSigningLevel (_In_ HANDLE File, _Out_ PULONG Flags, _Out_ PSE_SIGNING_LEVEL SigningLevel, _Out_writes_bytes_to_opt_(*ThumbprintSize,*ThumbprintSize) PUCHAR Thumbprint, _Inout_opt_ PULONG ThumbprintSize, _Out_opt_ PULONG ThumbprintAlgorithm)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetCompleteWnfStateSubscription (_In_opt_ PWNF_STATE_NAME OldDescriptorStateName, _In_opt_ ULONG64 *OldSubscriptionId, _In_opt_ ULONG OldDescriptorEventMask, _In_opt_ ULONG OldDescriptorStatus, _Out_writes_bytes_(DescriptorSize) PWNF_DELIVERY_DESCRIPTOR NewDeliveryDescriptor, _In_ ULONG DescriptorSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetContextThread (_In_ HANDLE ThreadHandle, _Inout_ PCONTEXT ThreadContext)
NTSYSCALLAPI ULONG NTAPI	ZwGetCurrentProcessorNumber (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetDevicePowerState (_In_ HANDLE Device, _Out_ PDEVICE_POWER_STATE State)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetMUIRegistryInfo (_In_ ULONG Flags, _Inout_ PULONG DataSize, _Out_ PVOID Data)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetNextProcess (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _In_ ULONG Flags, _Out_ PHANDLE NewProcessHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetNextThread (_In_ HANDLE ProcessHandle, _In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _In_ ULONG Flags, _Out_ PHANDLE NewThreadHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetNlsSectionPtr (_In_ ULONG SectionType, _In_ ULONG SectionData, _In_ PVOID ContextData, _Out_ PVOID *SectionPointer, _Out_ PULONG SectionSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetNotificationResourceManager (_In_ HANDLE ResourceManagerHandle, _Out_ PTRANSACTION_NOTIFICATION TransactionNotification, _In_ ULONG NotificationLength, _In_opt_ PLARGE_INTEGER Timeout, _Out_opt_ PULONG ReturnLength, _In_ ULONG Asynchronous, _In_opt_ ULONG_PTR AsynchronousContext)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetPlugPlayEvent (_In_ HANDLE EventHandle, _In_opt_ PVOID Context, _Out_writes_bytes_(EventBufferSize) PPLUGPLAY_EVENT_BLOCK EventBlock, _In_ ULONG EventBufferSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwGetWriteWatch (_In_ HANDLE ProcessHandle, _In_ ULONG Flags, _In_ PVOID BaseAddress, _In_ SIZE_T RegionSize, _Out_writes_(*EntriesInUserAddressArray) PVOID *UserAddressArray, _Inout_ PULONG_PTR EntriesInUserAddressArray, _Out_ PULONG Granularity)
NTSYSCALLAPI NTSTATUS NTAPI	ZwImpersonateAnonymousToken (_In_ HANDLE ThreadHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwImpersonateClientOfPort (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE Message)
NTSYSCALLAPI NTSTATUS NTAPI	ZwImpersonateThread (_In_ HANDLE ServerThreadHandle, _In_ HANDLE ClientThreadHandle, _In_ PSECURITY_QUALITY_OF_SERVICE SecurityQos)
NTSYSCALLAPI NTSTATUS NTAPI	ZwInitializeNlsFiles (_Out_ PVOID *BaseAddress, _Out_ PLCID DefaultLocaleId, _Out_ PLARGE_INTEGER DefaultCasingTableSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwInitializeRegistry (_In_ USHORT BootCondition)
NTSYSCALLAPI NTSTATUS NTAPI	ZwInitiatePowerAction (_In_ POWER_ACTION SystemAction, _In_ SYSTEM_POWER_STATE LightestSystemState, _In_ ULONG Flags, _In_ BOOLEAN Asynchronous)
NTSYSCALLAPI NTSTATUS NTAPI	ZwIsProcessInJob (_In_ HANDLE ProcessHandle, _In_opt_ HANDLE JobHandle)
NTSYSCALLAPI BOOLEAN NTAPI	ZwIsSystemResumeAutomatic (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwIsUILanguageComitted (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwListenPort (_In_ HANDLE PortHandle, _Out_ PPORT_MESSAGE ConnectionRequest)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLoadDriver (_In_ PUNICODE_STRING DriverServiceName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLoadKey (_In_ POBJECT_ATTRIBUTES TargetKey, _In_ POBJECT_ATTRIBUTES SourceFile)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLoadKey2 (_In_ POBJECT_ATTRIBUTES TargetKey, _In_ POBJECT_ATTRIBUTES SourceFile, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLoadKeyEx (_In_ POBJECT_ATTRIBUTES TargetKey, _In_ POBJECT_ATTRIBUTES SourceFile, _In_ ULONG Flags, _In_opt_ HANDLE TrustClassKey, _In_opt_ HANDLE Event, _In_opt_ ACCESS_MASK DesiredAccess, _Out_opt_ PHANDLE RootHandle, _Out_opt_ PIO_STATUS_BLOCK IoStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLockFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_ ULONG Key, _In_ BOOLEAN FailImmediately, _In_ BOOLEAN ExclusiveLock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLockProductActivationKeys (_Inout_opt_ ULONG *pPrivateVer, _Out_opt_ ULONG *pSafeMode)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLockRegistryKey (_In_ HANDLE KeyHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwLockVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ PVOID *BaseAddress, _Inout_ PSIZE_T RegionSize, _In_ ULONG MapType)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMakePermanentObject (_In_ HANDLE Handle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMakeTemporaryObject (_In_ HANDLE Handle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwManagePartition (_In_ MEMORY_PARTITION_INFORMATION_CLASS PartitionInformationClass, _In_ PVOID PartitionInformation, _In_ ULONG PartitionInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMapCMFModule (_In_ ULONG What, _In_ ULONG Index, _Out_opt_ PULONG CacheIndexOut, _Out_opt_ PULONG CacheFlagsOut, _Out_opt_ PULONG ViewSizeOut, _Out_opt_ PVOID *BaseAddress)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMapUserPhysicalPages (_In_ PVOID VirtualAddress, _In_ ULONG_PTR NumberOfPages, _In_reads_opt_(NumberOfPages) PULONG_PTR UserPfnArray)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMapUserPhysicalPagesScatter (_In_reads_(NumberOfPages) PVOID *VirtualAddresses, _In_ ULONG_PTR NumberOfPages, _In_reads_opt_(NumberOfPages) PULONG_PTR UserPfnArray)
NTSYSCALLAPI NTSTATUS NTAPI	ZwMapViewOfSection (_In_ HANDLE SectionHandle, _In_ HANDLE ProcessHandle, _Inout_ _At_(*BaseAddress, _Readable_bytes_(*ViewSize) _Writable_bytes_(*ViewSize) _Post_readable_byte_size_(*ViewSize)) PVOID *BaseAddress, _In_ ULONG_PTR ZeroBits, _In_ SIZE_T CommitSize, _Inout_opt_ PLARGE_INTEGER SectionOffset, _Inout_ PSIZE_T ViewSize, _In_ SECTION_INHERIT InheritDisposition, _In_ ULONG AllocationType, _In_ ULONG Win32Protect)
NTSYSCALLAPI NTSTATUS NTAPI	ZwModifyBootEntry (_In_ PBOOT_ENTRY BootEntry)
NTSYSCALLAPI NTSTATUS NTAPI	ZwModifyDriverEntry (_In_ PEFI_DRIVER_ENTRY DriverEntry)
NTSYSCALLAPI NTSTATUS NTAPI	ZwNotifyChangeDirectoryFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree)
NTSYSCALLAPI NTSTATUS NTAPI	ZwNotifyChangeKey (_In_ HANDLE KeyHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_writes_bytes_opt_(BufferSize) PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)
NTSYSCALLAPI NTSTATUS NTAPI	ZwNotifyChangeMultipleKeys (_In_ HANDLE MasterKeyHandle, _In_opt_ ULONG Count, _In_reads_opt_(Count) OBJECT_ATTRIBUTES SubordinateObjects[], _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG CompletionFilter, _In_ BOOLEAN WatchTree, _Out_writes_bytes_opt_(BufferSize) PVOID Buffer, _In_ ULONG BufferSize, _In_ BOOLEAN Asynchronous)
NTSYSCALLAPI NTSTATUS NTAPI	ZwNotifyChangeSession (_In_ HANDLE SessionHandle, _In_ ULONG ChangeSequenceNumber, _In_ PLARGE_INTEGER ChangeTimeStamp, _In_ IO_SESSION_EVENT Event, _In_ IO_SESSION_STATE NewState, _In_ IO_SESSION_STATE PreviousState, _In_reads_bytes_opt_(PayloadSize) PVOID Payload, _In_ ULONG PayloadSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenDirectoryObject (_Out_ PHANDLE DirectoryHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenEnlistment (_Out_ PHANDLE EnlistmentHandle, _In_ ACCESS_MASK DesiredAccess, _In_ HANDLE ResourceManagerHandle, _In_ LPGUID EnlistmentGuid, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenEvent (_Out_ PHANDLE EventHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenEventPair (_Out_ PHANDLE EventPairHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenFile (_Out_ PHANDLE FileHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ ULONG ShareAccess, _In_ ULONG OpenOptions)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenIoCompletion (_Out_ PHANDLE IoCompletionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenJobObject (_Out_ PHANDLE JobHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenJobObjectToken (_In_ HANDLE JobHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenKey (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenKeyEx (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG OpenOptions)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenKeyTransacted (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ HANDLE TransactionHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenKeyTransactedEx (_Out_ PHANDLE KeyHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ ULONG OpenOptions, _In_ HANDLE TransactionHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenKeyedEvent (_Out_ PHANDLE KeyedEventHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenMutant (_Out_ PHANDLE MutantHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ PUNICODE_STRING ObjectTypeName, _In_ PUNICODE_STRING ObjectName, _In_opt_ PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_ ACCESS_MASK GrantedAccess, _In_opt_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN ObjectCreation, _In_ BOOLEAN AccessGranted, _Out_ PBOOLEAN GenerateOnClose)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenPartition (_Out_ PHANDLE PartitionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenPrivateNamespace (_Out_ PHANDLE NamespaceHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ PVOID BoundaryDescriptor)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenProcess (_Out_ PHANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PCLIENT_ID ClientId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenProcessToken (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _Out_ PHANDLE TokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenProcessTokenEx (_In_ HANDLE ProcessHandle, _In_ ACCESS_MASK DesiredAccess, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenResourceManager (_Out_ PHANDLE ResourceManagerHandle, _In_ ACCESS_MASK DesiredAccess, _In_ HANDLE TmHandle, _In_opt_ LPGUID ResourceManagerGuid, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenSection (_Out_ PHANDLE SectionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenSemaphore (_Out_ PHANDLE SemaphoreHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenSession (_Out_ PHANDLE SessionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenSiloObject (_Out_ PHANDLE SiloHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ HANDLE SiloId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenSymbolicLinkObject (_Out_ PHANDLE LinkHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenThread (_Out_ PHANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PCLIENT_ID ClientId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenThreadToken (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _Out_ PHANDLE TokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenThreadTokenEx (_In_ HANDLE ThreadHandle, _In_ ACCESS_MASK DesiredAccess, _In_ BOOLEAN OpenAsSelf, _In_ ULONG HandleAttributes, _Out_ PHANDLE TokenHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenTimer (_Out_ PHANDLE TimerHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenTransaction (_Out_ PHANDLE TransactionHandle, _In_ ACCESS_MASK DesiredAccess, _In_ POBJECT_ATTRIBUTES ObjectAttributes, _In_ LPGUID Uow, _In_opt_ HANDLE TmHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwOpenTransactionManager (_Out_ PHANDLE TmHandle, _In_ ACCESS_MASK DesiredAccess, _In_opt_ POBJECT_ATTRIBUTES ObjectAttributes, _In_opt_ PUNICODE_STRING LogFileName, _In_opt_ LPGUID TmIdentity, _In_opt_ ULONG OpenOptions)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPlugPlayControl (_In_ PLUGPLAY_CONTROL_CLASS PnPControlClass, _Inout_updates_bytes_(PnPControlDataLength) PVOID PnPControlData, _In_ ULONG PnPControlDataLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPowerInformation (_In_ POWER_INFORMATION_LEVEL InformationLevel, _In_reads_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrePrepareComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrePrepareEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrepareComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrepareEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrivilegeCheck (_In_ HANDLE ClientToken, _Inout_ PPRIVILEGE_SET RequiredPrivileges, _Out_ PBOOLEAN Result)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrivilegeObjectAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_opt_ PVOID HandleId, _In_ HANDLE ClientToken, _In_ ACCESS_MASK DesiredAccess, _In_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN AccessGranted)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPrivilegedServiceAuditAlarm (_In_ PUNICODE_STRING SubsystemName, _In_ PUNICODE_STRING ServiceName, _In_ HANDLE ClientToken, _In_ PPRIVILEGE_SET Privileges, _In_ BOOLEAN AccessGranted)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPropagationComplete (_In_ HANDLE ResourceManagerHandle, _In_ ULONG RequestCookie, _In_ ULONG BufferLength, _In_ PVOID Buffer)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPropagationFailed (_In_ HANDLE ResourceManagerHandle, _In_ ULONG RequestCookie, _In_ NTSTATUS PropStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwProtectVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ PVOID *BaseAddress, _Inout_ PSIZE_T RegionSize, _In_ ULONG NewProtect, _Out_ PULONG OldProtect)
NTSYSCALLAPI NTSTATUS NTAPI	ZwPulseEvent (_In_ HANDLE EventHandle, _Out_opt_ PLONG PreviousState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryAttributesFile (_In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PFILE_BASIC_INFORMATION FileInformation)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryBootEntryOrder (_Out_writes_opt_(*Count) PULONG Ids, _Inout_ PULONG Count)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryBootOptions (_Out_writes_bytes_opt_(*BootOptionsLength) PBOOT_OPTIONS BootOptions, _Inout_ PULONG BootOptionsLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDebugFilterState (_In_ ULONG ComponentId, _In_ ULONG Level)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDefaultLocale (_In_ BOOLEAN UserProfile, _Out_ PLCID DefaultLocaleId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDefaultUILanguage (_Out_ LANGID *DefaultUILanguageId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDirectoryFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass, _In_ BOOLEAN ReturnSingleEntry, _In_opt_ PUNICODE_STRING FileName, _In_ BOOLEAN RestartScan)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDirectoryObject (_In_ HANDLE DirectoryHandle, _Out_writes_bytes_opt_(Length) PVOID Buffer, _In_ ULONG Length, _In_ BOOLEAN ReturnSingleEntry, _In_ BOOLEAN RestartScan, _Inout_ PULONG Context, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryDriverEntryOrder (_Out_writes_opt_(*Count) PULONG Ids, _Inout_ PULONG Count)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryEaFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_ BOOLEAN ReturnSingleEntry, _In_reads_bytes_opt_(EaListLength) PVOID EaList, _In_ ULONG EaListLength, _In_opt_ PULONG EaIndex, _In_ BOOLEAN RestartScan)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryEvent (_In_ HANDLE EventHandle, _In_ EVENT_INFORMATION_CLASS EventInformationClass, _Out_writes_bytes_(EventInformationLength) PVOID EventInformation, _In_ ULONG EventInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryFullAttributesFile (_In_ POBJECT_ATTRIBUTES ObjectAttributes, _Out_ PFILE_NETWORK_OPEN_INFORMATION FileInformation)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationAtom (_In_ RTL_ATOM Atom, _In_ ATOM_INFORMATION_CLASS AtomInformationClass, _Out_writes_bytes_(AtomInformationLength) PVOID AtomInformation, _In_ ULONG AtomInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationEnlistment (_In_ HANDLE EnlistmentHandle, _In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass, _Out_writes_bytes_(EnlistmentInformationLength) PVOID EnlistmentInformation, _In_ ULONG EnlistmentInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationJobObject (_In_opt_ HANDLE JobHandle, _In_ JOBOBJECTINFOCLASS JobObjectInformationClass, _Out_writes_bytes_(JobObjectInformationLength) PVOID JobObjectInformation, _In_ ULONG JobObjectInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationPort (_In_ HANDLE PortHandle, _In_ PORT_INFORMATION_CLASS PortInformationClass, _Out_writes_bytes_to_(Length,*ReturnLength) PVOID PortInformation, _In_ ULONG Length, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _Out_writes_bytes_(ProcessInformationLength) PVOID ProcessInformation, _In_ ULONG ProcessInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationResourceManager (_In_ HANDLE ResourceManagerHandle, _In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass, _Out_writes_bytes_(ResourceManagerInformationLength) PVOID ResourceManagerInformation, _In_ ULONG ResourceManagerInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationSiloObject (_In_opt_ HANDLE SiloHandle, _In_ SILOOBJECTINFOCLASS SiloObjectInformationClass, _Out_writes_bytes_(SiloObjectInformationLength) PVOID SiloObjectInformation, _In_ ULONG SiloObjectInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationThread (_In_ HANDLE ThreadHandle, _In_ THREADINFOCLASS ThreadInformationClass, _Out_writes_bytes_(ThreadInformationLength) PVOID ThreadInformation, _In_ ULONG ThreadInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationToken (_In_ HANDLE TokenHandle, _In_ TOKEN_INFORMATION_CLASS TokenInformationClass, _Out_writes_bytes_(TokenInformationLength) PVOID TokenInformation, _In_ ULONG TokenInformationLength, _Out_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationTransaction (_In_ HANDLE TransactionHandle, _In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass, _Out_writes_bytes_(TransactionInformationLength) PVOID TransactionInformation, _In_ ULONG TransactionInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationTransactionManager (_In_ HANDLE TransactionManagerHandle, _In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass, _Out_writes_bytes_(TransactionManagerInformationLength) PVOID TransactionManagerInformation, _In_ ULONG TransactionManagerInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInformationWorkerFactory (_In_ HANDLE WorkerFactoryHandle, _In_ WORKERFACTORYINFOCLASS WorkerFactoryInformationClass, _Out_writes_bytes_(WorkerFactoryInformationLength) PVOID WorkerFactoryInformation, _In_ ULONG WorkerFactoryInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryInstallUILanguage (_Out_ LANGID *InstallUILanguageId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryIntervalProfile (_In_ KPROFILE_SOURCE ProfileSource, _Out_ PULONG Interval)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryIoCompletion (_In_ HANDLE IoCompletionHandle, _In_ IO_COMPLETION_INFORMATION_CLASS IoCompletionInformationClass, _Out_writes_bytes_(IoCompletionInformation) PVOID IoCompletionInformation, _In_ ULONG IoCompletionInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryKey (_In_ HANDLE KeyHandle, _In_ KEY_INFORMATION_CLASS KeyInformationClass, _Out_writes_bytes_opt_(Length) PVOID KeyInformation, _In_ ULONG Length, _Out_ PULONG ResultLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryLicenseValue (_In_ PUNICODE_STRING ValueName, _Out_opt_ PULONG Type, _Out_writes_bytes_to_opt_(DataSize,*ResultDataSize) PVOID Data, _In_ ULONG DataSize, _Out_ PULONG ResultDataSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryMultipleValueKey (_In_ HANDLE KeyHandle, _Inout_updates_(EntryCount) PKEY_VALUE_ENTRY ValueEntries, _In_ ULONG EntryCount, _Out_writes_bytes_(*BufferLength) PVOID ValueBuffer, _Inout_ PULONG BufferLength, _Out_opt_ PULONG RequiredBufferLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryMutant (_In_ HANDLE MutantHandle, _In_ MUTANT_INFORMATION_CLASS MutantInformationClass, _Out_writes_bytes_(MutantInformationLength) PVOID MutantInformation, _In_ ULONG MutantInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryObject (_In_ HANDLE Handle, _In_ OBJECT_INFORMATION_CLASS ObjectInformationClass, _Out_writes_bytes_opt_(ObjectInformationLength) PVOID ObjectInformation, _In_ ULONG ObjectInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryOpenSubKeys (_In_ POBJECT_ATTRIBUTES TargetKey, _Out_ PULONG HandleCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryOpenSubKeysEx (_In_ POBJECT_ATTRIBUTES TargetKey, _In_ ULONG BufferLength, _Out_writes_bytes_(BufferLength) PVOID Buffer, _Out_ PULONG RequiredSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryPerformanceCounter (_Out_ PLARGE_INTEGER PerformanceCounter, _Out_opt_ PLARGE_INTEGER PerformanceFrequency)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryPortInformationProcess (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryQuotaInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_ BOOLEAN ReturnSingleEntry, _In_reads_bytes_opt_(SidListLength) PVOID SidList, _In_ ULONG SidListLength, _In_opt_ PSID StartSid, _In_ BOOLEAN RestartScan)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySection (_In_ HANDLE SectionHandle, _In_ SECTION_INFORMATION_CLASS SectionInformationClass, _Out_writes_bytes_(SectionInformationLength) PVOID SectionInformation, _In_ SIZE_T SectionInformationLength, _Out_opt_ PSIZE_T ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySecurityAttributesToken (_In_ HANDLE TokenHandle, _In_reads_opt_(NumberOfAttributes) PUNICODE_STRING Attributes, _In_ ULONG NumberOfAttributes, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _Out_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySecurityObject (_In_ HANDLE Handle, _In_ SECURITY_INFORMATION SecurityInformation, _Out_writes_bytes_opt_(Length) PSECURITY_DESCRIPTOR SecurityDescriptor, _In_ ULONG Length, _Out_ PULONG LengthNeeded)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySemaphore (_In_ HANDLE SemaphoreHandle, _In_ SEMAPHORE_INFORMATION_CLASS SemaphoreInformationClass, _Out_writes_bytes_(SemaphoreInformationLength) PVOID SemaphoreInformation, _In_ ULONG SemaphoreInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySymbolicLinkObject (_In_ HANDLE LinkHandle, _Inout_ PUNICODE_STRING LinkTarget, _Out_opt_ PULONG ReturnedLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySystemEnvironmentValue (_In_ PUNICODE_STRING VariableName, _Out_writes_bytes_(ValueLength) PWSTR VariableValue, _In_ USHORT ValueLength, _Out_opt_ PUSHORT ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySystemEnvironmentValueEx (_In_ PUNICODE_STRING VariableName, _In_ LPGUID VendorGuid, _Out_writes_bytes_opt_(*ValueLength) PVOID Value, _Inout_ PULONG ValueLength, _Out_opt_ PULONG Attributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySystemInformation (_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass, _Out_writes_bytes_opt_(SystemInformationLength) PVOID SystemInformation, _In_ ULONG SystemInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySystemInformationEx (_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass, _In_reads_bytes_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(SystemInformationLength) PVOID SystemInformation, _In_ ULONG SystemInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQuerySystemTime (_Out_ PLARGE_INTEGER SystemTime)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryTimer (_In_ HANDLE TimerHandle, _In_ TIMER_INFORMATION_CLASS TimerInformationClass, _Out_writes_bytes_(TimerInformationLength) PVOID TimerInformation, _In_ ULONG TimerInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryTimerResolution (_Out_ PULONG MaximumTime, _Out_ PULONG MinimumTime, _Out_ PULONG CurrentTime)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryValueKey (_In_ HANDLE KeyHandle, _In_ PUNICODE_STRING ValueName, _In_ KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, _Out_writes_bytes_opt_(Length) PVOID KeyValueInformation, _In_ ULONG Length, _Out_ PULONG ResultLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryVirtualMemory (_In_ HANDLE ProcessHandle, _In_ PVOID BaseAddress, _In_ MEMORY_INFORMATION_CLASS MemoryInformationClass, _Out_writes_bytes_(MemoryInformationLength) PVOID MemoryInformation, _In_ SIZE_T MemoryInformationLength, _Out_opt_ PSIZE_T ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryVolumeInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID FsInformation, _In_ ULONG Length, _In_ FSINFOCLASS FsInformationClass)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryWnfStateData (_In_ PCWNF_STATE_NAME StateName, _In_opt_ PCWNF_TYPE_ID TypeId, _In_opt_ const VOID *ExplicitScope, _Out_ PWNF_CHANGE_STAMP ChangeStamp, _Out_writes_bytes_to_opt_(*BufferSize,*BufferSize) PVOID Buffer, _Inout_ PULONG BufferSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueryWnfStateNameInformation (_In_ PCWNF_STATE_NAME StateName, _In_ WNF_STATE_NAME_INFORMATION NameInfoClass, _In_opt_ const PVOID ExplicitScope, _Out_writes_bytes_(InfoBufferSize) PVOID InfoBuffer, _In_ ULONG InfoBufferSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueueApcThread (_In_ HANDLE ThreadHandle, _In_ PPS_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcArgument1, _In_opt_ PVOID ApcArgument2, _In_opt_ PVOID ApcArgument3)
NTSYSCALLAPI NTSTATUS NTAPI	ZwQueueApcThreadEx (_In_ HANDLE ThreadHandle, _In_opt_ HANDLE UserApcReserveHandle, _In_ PPS_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcArgument1, _In_opt_ PVOID ApcArgument2, _In_opt_ PVOID ApcArgument3)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRaiseException (_In_ PEXCEPTION_RECORD ExceptionRecord, _In_ PCONTEXT ContextRecord, _In_ BOOLEAN FirstChance)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRaiseHardError (_In_ NTSTATUS ErrorStatus, _In_ ULONG NumberOfParameters, _In_ ULONG UnicodeStringParameterMask, _In_reads_(NumberOfParameters) PULONG_PTR Parameters, _In_ ULONG ValidResponseOptions, _Out_ PULONG Response)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReadFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _Out_writes_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReadFileScatter (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PFILE_SEGMENT_ELEMENT SegmentArray, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReadOnlyEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReadRequestData (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE Message, _In_ ULONG DataEntryIndex, _Out_writes_bytes_to_(BufferSize,*NumberOfBytesRead) PVOID Buffer, _In_ SIZE_T BufferSize, _Out_opt_ PSIZE_T NumberOfBytesRead)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReadVirtualMemory (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _Out_writes_bytes_(BufferSize) PVOID Buffer, _In_ SIZE_T BufferSize, _Out_opt_ PSIZE_T NumberOfBytesRead)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRecoverEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PVOID EnlistmentKey)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRecoverResourceManager (_In_ HANDLE ResourceManagerHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRecoverTransactionManager (_In_ HANDLE TransactionManagerHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRegisterProtocolAddressInformation (_In_ HANDLE ResourceManager, _In_ PCRM_PROTOCOL_ID ProtocolId, _In_ ULONG ProtocolInformationSize, _In_ PVOID ProtocolInformation, _In_opt_ ULONG CreateOptions)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRegisterThreadTerminatePort (_In_ HANDLE PortHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReleaseCMFViewOwnership (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReleaseKeyedEvent (_In_ HANDLE KeyedEventHandle, _In_ PVOID KeyValue, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReleaseMutant (_In_ HANDLE MutantHandle, _Out_opt_ PLONG PreviousCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReleaseSemaphore (_In_ HANDLE SemaphoreHandle, _In_ LONG ReleaseCount, _Out_opt_ PLONG PreviousCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReleaseWorkerFactoryWorker (_In_ HANDLE WorkerFactoryHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRemoveIoCompletion (_In_ HANDLE IoCompletionHandle, _Out_ PVOID *KeyContext, _Out_ PVOID *ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRemoveIoCompletionEx (_In_ HANDLE IoCompletionHandle, _Out_writes_to_(Count,*NumEntriesRemoved) PFILE_IO_COMPLETION_INFORMATION IoCompletionInformation, _In_ ULONG Count, _Out_ PULONG NumEntriesRemoved, _In_opt_ PLARGE_INTEGER Timeout, _In_ BOOLEAN Alertable)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRemoveProcessDebug (_In_ HANDLE ProcessHandle, _In_ HANDLE DebugObjectHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRenameKey (_In_ HANDLE KeyHandle, _In_ PUNICODE_STRING NewName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRenameTransactionManager (_In_ PUNICODE_STRING LogFileName, _In_ LPGUID ExistingTransactionManagerGuid)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplaceKey (_In_ POBJECT_ATTRIBUTES NewFile, _In_ HANDLE TargetHandle, _In_ POBJECT_ATTRIBUTES OldFile)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplacePartitionUnit (_In_ PUNICODE_STRING TargetInstancePath, _In_ PUNICODE_STRING SpareInstancePath, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplyPort (_In_ HANDLE PortHandle, _In_reads_bytes_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE ReplyMessage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplyWaitReceivePort (_In_ HANDLE PortHandle, _Out_opt_ PVOID *PortContext, _In_reads_bytes_opt_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE ReplyMessage, _Out_ PPORT_MESSAGE ReceiveMessage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplyWaitReceivePortEx (_In_ HANDLE PortHandle, _Out_opt_ PVOID *PortContext, _In_reads_bytes_opt_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE ReplyMessage, _Out_ PPORT_MESSAGE ReceiveMessage, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwReplyWaitReplyPort (_In_ HANDLE PortHandle, _Inout_ PPORT_MESSAGE ReplyMessage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRequestPort (_In_ HANDLE PortHandle, _In_reads_bytes_(RequestMessage->u1.s1.TotalLength) PPORT_MESSAGE RequestMessage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRequestWaitReplyPort (_In_ HANDLE PortHandle, _In_reads_bytes_(RequestMessage->u1.s1.TotalLength) PPORT_MESSAGE RequestMessage, _Out_ PPORT_MESSAGE ReplyMessage)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRequestWakeupLatency (_In_ LATENCY_TIME latency)
NTSYSCALLAPI NTSTATUS NTAPI	ZwResetEvent (_In_ HANDLE EventHandle, _Out_opt_ PLONG PreviousState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwResetWriteWatch (_In_ HANDLE ProcessHandle, _In_ PVOID BaseAddress, _In_ SIZE_T RegionSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRestoreKey (_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwResumeProcess (_In_ HANDLE ProcessHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwResumeThread (_In_ HANDLE ThreadHandle, _Out_opt_ PULONG PreviousSuspendCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRevertContainerImpersonation (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRollbackComplete (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRollbackEnlistment (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRollbackTransaction (_In_ HANDLE TransactionHandle, _In_ BOOLEAN Wait)
NTSYSCALLAPI NTSTATUS NTAPI	ZwRollforwardTransactionManager (_In_ HANDLE TransactionManagerHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSaveKey (_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSaveKeyEx (_In_ HANDLE KeyHandle, _In_ HANDLE FileHandle, _In_ ULONG Format)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSaveMergedKeys (_In_ HANDLE HighPrecedenceKeyHandle, _In_ HANDLE LowPrecedenceKeyHandle, _In_ HANDLE FileHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSecureConnectPort (_Out_ PHANDLE PortHandle, _In_ PUNICODE_STRING PortName, _In_ PSECURITY_QUALITY_OF_SERVICE SecurityQos, _Inout_opt_ PPORT_VIEW ClientView, _In_opt_ PSID RequiredServerSid, _Inout_opt_ PREMOTE_PORT_VIEW ServerView, _Out_opt_ PULONG MaxMessageLength, _Inout_updates_bytes_to_opt_(*ConnectionInformationLength,*ConnectionInformationLength) PVOID ConnectionInformation, _Inout_opt_ PULONG ConnectionInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSerializeBoot (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetBootEntryOrder (_In_reads_(Count) PULONG Ids, _In_ ULONG Count)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetBootOptions (_In_ PBOOT_OPTIONS BootOptions, _In_ ULONG FieldsToChange)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetCachedSigningLevel (_In_ ULONG Flags, _In_ SE_SIGNING_LEVEL InputSigningLevel, _In_reads_(SourceFileCount) PHANDLE SourceFiles, _In_ ULONG SourceFileCount, _In_opt_ HANDLE TargetFile)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetContextThread (_In_ HANDLE ThreadHandle, _In_ PCONTEXT ThreadContext)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetDebugFilterState (_In_ ULONG ComponentId, _In_ ULONG Level, _In_ BOOLEAN State)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetDefaultHardErrorPort (_In_ HANDLE DefaultHardErrorPort)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetDefaultLocale (_In_ BOOLEAN UserProfile, _In_ LCID DefaultLocaleId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetDefaultUILanguage (_In_ LANGID DefaultUILanguageId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetDriverEntryOrder (_In_reads_(Count) PULONG Ids, _In_ ULONG Count)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetEaFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID Buffer, _In_ ULONG Length)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetEvent (_In_ HANDLE EventHandle, _Out_opt_ PLONG PreviousState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetEventBoostPriority (_In_ HANDLE EventHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetHighEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetHighWaitLowEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetIRTimer (_In_ HANDLE TimerHandle, _In_opt_ PLARGE_INTEGER DueTime)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationDebugObject (_In_ HANDLE DebugObjectHandle, _In_ DEBUGOBJECTINFOCLASS DebugObjectInformationClass, _In_ PVOID DebugInformation, _In_ ULONG DebugInformationLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationEnlistment (_In_opt_ HANDLE EnlistmentHandle, _In_ ENLISTMENT_INFORMATION_CLASS EnlistmentInformationClass, _In_reads_bytes_(EnlistmentInformationLength) PVOID EnlistmentInformation, _In_ ULONG EnlistmentInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID FileInformation, _In_ ULONG Length, _In_ FILE_INFORMATION_CLASS FileInformationClass)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationJobObject (_In_ HANDLE JobHandle, _In_ JOBOBJECTINFOCLASS JobObjectInformationClass, _In_reads_bytes_(JobObjectInformationLength) PVOID JobObjectInformation, _In_ ULONG JobObjectInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationKey (_In_ HANDLE KeyHandle, _In_ KEY_SET_INFORMATION_CLASS KeySetInformationClass, _In_reads_bytes_(KeySetInformationLength) PVOID KeySetInformation, _In_ ULONG KeySetInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationObject (_In_ HANDLE Handle, _In_ OBJECT_INFORMATION_CLASS ObjectInformationClass, _In_reads_bytes_(ObjectInformationLength) PVOID ObjectInformation, _In_ ULONG ObjectInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationProcess (_In_ HANDLE ProcessHandle, _In_ PROCESSINFOCLASS ProcessInformationClass, _In_reads_bytes_(ProcessInformationLength) PVOID ProcessInformation, _In_ ULONG ProcessInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationResourceManager (_In_ HANDLE ResourceManagerHandle, _In_ RESOURCEMANAGER_INFORMATION_CLASS ResourceManagerInformationClass, _In_reads_bytes_(ResourceManagerInformationLength) PVOID ResourceManagerInformation, _In_ ULONG ResourceManagerInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationSiloObject (_In_opt_ HANDLE SiloHandle, _In_ SILOOBJECTINFOCLASS SiloObjectInformationClass, _In_reads_bytes_(SiloObjectInformationLength) PVOID SiloObjectInformation, _In_ ULONG SiloObjectInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationThread (_In_ HANDLE ThreadHandle, _In_ THREADINFOCLASS ThreadInformationClass, _In_reads_bytes_(ThreadInformationLength) PVOID ThreadInformation, _In_ ULONG ThreadInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationToken (_In_ HANDLE TokenHandle, _In_ TOKEN_INFORMATION_CLASS TokenInformationClass, _In_reads_bytes_(TokenInformationLength) PVOID TokenInformation, _In_ ULONG TokenInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationTransaction (_In_ HANDLE TransactionHandle, _In_ TRANSACTION_INFORMATION_CLASS TransactionInformationClass, _In_reads_bytes_(TransactionInformationLength) PVOID TransactionInformation, _In_ ULONG TransactionInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationTransactionManager (_In_opt_ HANDLE TmHandle, _In_ TRANSACTIONMANAGER_INFORMATION_CLASS TransactionManagerInformationClass, _In_reads_bytes_(TransactionManagerInformationLength) PVOID TransactionManagerInformation, _In_ ULONG TransactionManagerInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationVirtualMemory (_In_ HANDLE ProcessHandle, _In_ VIRTUAL_MEMORY_INFORMATION_CLASS VmInformationClass, _In_ ULONG_PTR NumberOfEntries, _In_reads_(NumberOfEntries) PMEMORY_RANGE_ENTRY VirtualAddresses, _In_reads_bytes_(VmInformationLength) PVOID VmInformation, _In_ ULONG VmInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetInformationWorkerFactory (_In_ HANDLE WorkerFactoryHandle, _In_ WORKERFACTORYINFOCLASS WorkerFactoryInformationClass, _In_reads_bytes_(WorkerFactoryInformationLength) PVOID WorkerFactoryInformation, _In_ ULONG WorkerFactoryInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetIntervalProfile (_In_ ULONG Interval, _In_ KPROFILE_SOURCE Source)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetIoCompletion (_In_ HANDLE IoCompletionHandle, _In_opt_ PVOID KeyContext, _In_opt_ PVOID ApcContext, _In_ NTSTATUS IoStatus, _In_ ULONG_PTR IoStatusInformation)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetIoCompletionEx (_In_ HANDLE IoCompletionHandle, _In_ HANDLE IoCompletionPacketHandle, _In_opt_ PVOID KeyContext, _In_opt_ PVOID ApcContext, _In_ NTSTATUS IoStatus, _In_ ULONG_PTR IoStatusInformation)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetLdtEntries (_In_ ULONG Selector0, _In_ ULONG Entry0Low, _In_ ULONG Entry0Hi, _In_ ULONG Selector1, _In_ ULONG Entry1Low, _In_ ULONG Entry1Hi)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetLowEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetLowWaitHighEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetQuotaInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID Buffer, _In_ ULONG Length)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSecurityObject (_In_ HANDLE Handle, _In_ SECURITY_INFORMATION SecurityInformation, _In_ PSECURITY_DESCRIPTOR SecurityDescriptor)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSystemEnvironmentValue (_In_ PUNICODE_STRING VariableName, _In_ PUNICODE_STRING VariableValue)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSystemEnvironmentValueEx (_In_ PUNICODE_STRING VariableName, _In_ LPGUID VendorGuid, _In_reads_bytes_opt_(ValueLength) PVOID Value, _In_ ULONG ValueLength, _In_ ULONG Attributes)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSystemInformation (_In_ SYSTEM_INFORMATION_CLASS SystemInformationClass, _In_reads_bytes_opt_(SystemInformationLength) PVOID SystemInformation, _In_ ULONG SystemInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSystemPowerState (_In_ POWER_ACTION SystemAction, _In_ SYSTEM_POWER_STATE LightestSystemState, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetSystemTime (_In_opt_ PLARGE_INTEGER SystemTime, _Out_opt_ PLARGE_INTEGER PreviousTime)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetThreadExecutionState (_In_ EXECUTION_STATE NewFlags, _Out_ EXECUTION_STATE *PreviousFlags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetTimer (_In_ HANDLE TimerHandle, _In_ PLARGE_INTEGER DueTime, _In_opt_ PTIMER_APC_ROUTINE TimerApcRoutine, _In_opt_ PVOID TimerContext, _In_ BOOLEAN ResumeTimer, _In_opt_ LONG Period, _Out_opt_ PBOOLEAN PreviousState)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetTimer2 (_In_ HANDLE TimerHandle, _In_ PLARGE_INTEGER DueTime, _In_opt_ PLARGE_INTEGER Period, _In_ PT2_SET_PARAMETERS Parameters)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetTimerEx (_In_ HANDLE TimerHandle, _In_ TIMER_SET_INFORMATION_CLASS TimerSetInformationClass, _Inout_updates_bytes_opt_(TimerSetInformationLength) PVOID TimerSetInformation, _In_ ULONG TimerSetInformationLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetTimerResolution (_In_ ULONG DesiredTime, _In_ BOOLEAN SetResolution, _Out_ PULONG ActualTime)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetUuidSeed (_In_ PCHAR Seed)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetValueKey (_In_ HANDLE KeyHandle, _In_ PUNICODE_STRING ValueName, _In_opt_ ULONG TitleIndex, _In_ ULONG Type, _In_reads_bytes_opt_(DataSize) PVOID Data, _In_ ULONG DataSize)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetVolumeInformationFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID FsInformation, _In_ ULONG Length, _In_ FSINFOCLASS FsInformationClass)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSetWnfProcessNotificationEvent (_In_ HANDLE NotificationEvent)
NTSYSCALLAPI NTSTATUS NTAPI	ZwShutdownSystem (_In_ SHUTDOWN_ACTION Action)
NTSYSCALLAPI NTSTATUS NTAPI	ZwShutdownWorkerFactory (_In_ HANDLE WorkerFactoryHandle, _Inout_ volatile LONG *PendingWorkerCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSignalAndWaitForSingleObject (_In_ HANDLE SignalHandle, _In_ HANDLE WaitHandle, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSinglePhaseReject (_In_ HANDLE EnlistmentHandle, _In_opt_ PLARGE_INTEGER TmVirtualClock)
NTSYSCALLAPI NTSTATUS NTAPI	ZwStartProfile (_In_ HANDLE ProfileHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwStopProfile (_In_ HANDLE ProfileHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSubscribeWnfStateChange (_In_ PCWNF_STATE_NAME StateName, _In_opt_ WNF_CHANGE_STAMP ChangeStamp, _In_ ULONG EventMask, _Out_opt_ PULONG64 SubscriptionId)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSuspendProcess (_In_ HANDLE ProcessHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSuspendThread (_In_ HANDLE ThreadHandle, _Out_opt_ PULONG PreviousSuspendCount)
NTSYSCALLAPI NTSTATUS NTAPI	ZwSystemDebugControl (_In_ SYSDBG_COMMAND Command, _Inout_updates_bytes_opt_(InputBufferLength) PVOID InputBuffer, _In_ ULONG InputBufferLength, _Out_writes_bytes_opt_(OutputBufferLength) PVOID OutputBuffer, _In_ ULONG OutputBufferLength, _Out_opt_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTerminateJobObject (_In_ HANDLE JobHandle, _In_ NTSTATUS ExitStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTerminateProcess (_In_opt_ HANDLE ProcessHandle, _In_ NTSTATUS ExitStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTerminateSiloObject (_In_ HANDLE SiloHandle, _In_ NTSTATUS ExitStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTerminateThread (_In_opt_ HANDLE ThreadHandle, _In_ NTSTATUS ExitStatus)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTestAlert (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwThawRegistry (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwThawTransactions (VOID)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTraceControl (_In_ ULONG FunctionCode, _In_reads_bytes_opt_(InBufferLen) PVOID InBuffer, _In_ ULONG InBufferLen, _Out_writes_bytes_opt_(OutBufferLen) PVOID OutBuffer, _In_ ULONG OutBufferLen, _Out_ PULONG ReturnLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTraceEvent (_In_ HANDLE TraceHandle, _In_ ULONG Flags, _In_ ULONG FieldSize, _In_ PVOID Fields)
NTSYSCALLAPI NTSTATUS NTAPI	ZwTranslateFilePath (_In_ PFILE_PATH InputFilePath, _In_ ULONG OutputType, _Out_writes_bytes_opt_(*OutputFilePathLength) PFILE_PATH OutputFilePath, _Inout_opt_ PULONG OutputFilePathLength)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUmsThreadYield (_In_ PVOID SchedulerParam)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnloadDriver (_In_ PUNICODE_STRING DriverServiceName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnloadKey (_In_ POBJECT_ATTRIBUTES TargetKey)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnloadKey2 (_In_ POBJECT_ATTRIBUTES TargetKey, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnloadKeyEx (_In_ POBJECT_ATTRIBUTES TargetKey, _In_opt_ HANDLE Event)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnlockFile (_In_ HANDLE FileHandle, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PLARGE_INTEGER ByteOffset, _In_ PLARGE_INTEGER Length, _In_ ULONG Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnlockVirtualMemory (_In_ HANDLE ProcessHandle, _Inout_ PVOID *BaseAddress, _Inout_ PSIZE_T RegionSize, _In_ ULONG MapType)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnmapViewOfSection (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnmapViewOfSectionEx (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_ ULONG Flags)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUnsubscribeWnfStateChange (_In_ PCWNF_STATE_NAME StateName)
NTSYSCALLAPI NTSTATUS NTAPI	ZwUpdateWnfStateData (_In_ PCWNF_STATE_NAME StateName, _In_reads_bytes_opt_(Length) const VOID *Buffer, _In_opt_ ULONG Length, _In_opt_ PCWNF_TYPE_ID TypeId, _In_opt_ const PVOID ExplicitScope, _In_ WNF_CHANGE_STAMP MatchingChangeStamp, _In_ LOGICAL CheckStamp)
NTSYSCALLAPI NTSTATUS NTAPI	ZwVdmControl (_In_ VDMSERVICECLASS Service, _Inout_ PVOID ServiceData)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForDebugEvent (_In_ HANDLE DebugObjectHandle, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout, _Out_ PVOID WaitStateChange)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForKeyedEvent (_In_ HANDLE KeyedEventHandle, _In_ PVOID KeyValue, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForMultipleObjects (_In_ ULONG Count, _In_reads_(Count) HANDLE Handles[], _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForMultipleObjects32 (_In_ ULONG Count, _In_reads_(Count) LONG Handles[], _In_ WAIT_TYPE WaitType, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForSingleObject (_In_ HANDLE Handle, _In_ BOOLEAN Alertable, _In_opt_ PLARGE_INTEGER Timeout)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitForWorkViaWorkerFactory (_In_ HANDLE WorkerFactoryHandle, _Out_ struct _FILE_IO_COMPLETION_INFORMATION *MiniPacket)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitHighEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWaitLowEventPair (_In_ HANDLE EventPairHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWorkerFactoryWorkerReady (_In_ HANDLE WorkerFactoryHandle)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWriteFile (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_reads_bytes_(Length) PVOID Buffer, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWriteFileGather (_In_ HANDLE FileHandle, _In_opt_ HANDLE Event, _In_opt_ PIO_APC_ROUTINE ApcRoutine, _In_opt_ PVOID ApcContext, _Out_ PIO_STATUS_BLOCK IoStatusBlock, _In_ PFILE_SEGMENT_ELEMENT SegmentArray, _In_ ULONG Length, _In_opt_ PLARGE_INTEGER ByteOffset, _In_opt_ PULONG Key)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWriteRequestData (_In_ HANDLE PortHandle, _In_ PPORT_MESSAGE Message, _In_ ULONG DataEntryIndex, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ SIZE_T BufferSize, _Out_opt_ PSIZE_T NumberOfBytesWritten)
NTSYSCALLAPI NTSTATUS NTAPI	ZwWriteVirtualMemory (_In_ HANDLE ProcessHandle, _In_opt_ PVOID BaseAddress, _In_reads_bytes_(BufferSize) PVOID Buffer, _In_ SIZE_T BufferSize, _Out_opt_ PSIZE_T NumberOfBytesWritten)
NTSYSCALLAPI NTSTATUS NTAPI	ZwYieldExecution (VOID)

Function Documentation

NTSYSCALLAPI NTSTATUS NTAPI ZwAcceptConnectPort	(	_Out_ PHANDLE	PortHandle,
		_In_opt_ PVOID	PortContext,
		_In_ PPORT_MESSAGE	ConnectionRequest,
		_In_ BOOLEAN	AcceptConnection,
		_Inout_opt_ PPORT_VIEW	ServerView,
		_Out_opt_ PREMOTE_PORT_VIEW	ClientView
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheck	(	_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_ HANDLE	ClientToken,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_Out_writes_bytes_ *PrivilegeSetLength PPRIVILEGE_SET	PrivilegeSet,
		_Inout_ PULONG	PrivilegeSetLength,
		_Out_ PACCESS_MASK	GrantedAccess,
		_Out_ PNTSTATUS	AccessStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckAndAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_In_ BOOLEAN	ObjectCreation,
		_Out_ PACCESS_MASK	GrantedAccess,
		_Out_ PNTSTATUS	AccessStatus,
		_Out_ PBOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckByType	(	_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_opt_ PSID	PrincipalSelfSid,
		_In_ HANDLE	ClientToken,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_reads_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_Out_writes_bytes_ *PrivilegeSetLength PPRIVILEGE_SET	PrivilegeSet,
		_Inout_ PULONG	PrivilegeSetLength,
		_Out_ PACCESS_MASK	GrantedAccess,
		_Out_ PNTSTATUS	AccessStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckByTypeAndAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_opt_ PSID	PrincipalSelfSid,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ AUDIT_EVENT_TYPE	AuditType,
		_In_ ULONG	Flags,
		_In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_In_ BOOLEAN	ObjectCreation,
		_Out_ PACCESS_MASK	GrantedAccess,
		_Out_ PNTSTATUS	AccessStatus,
		_Out_ PBOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckByTypeResultList	(	_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_opt_ PSID	PrincipalSelfSid,
		_In_ HANDLE	ClientToken,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_reads_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_Out_writes_bytes_ *PrivilegeSetLength PPRIVILEGE_SET	PrivilegeSet,
		_Inout_ PULONG	PrivilegeSetLength,
		_Out_writes_(ObjectTypeListLength) PACCESS_MASK	GrantedAccess,
		_Out_writes_(ObjectTypeListLength) PNTSTATUS	AccessStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckByTypeResultListAndAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_opt_ PSID	PrincipalSelfSid,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ AUDIT_EVENT_TYPE	AuditType,
		_In_ ULONG	Flags,
		_In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_In_ BOOLEAN	ObjectCreation,
		_Out_writes_(ObjectTypeListLength) PACCESS_MASK	GrantedAccess,
		_Out_writes_(ObjectTypeListLength) PNTSTATUS	AccessStatus,
		_Out_ PBOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAccessCheckByTypeResultListAndAuditAlarmByHandle	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ HANDLE	ClientToken,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_opt_ PSID	PrincipalSelfSid,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ AUDIT_EVENT_TYPE	AuditType,
		_In_ ULONG	Flags,
		_In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ PGENERIC_MAPPING	GenericMapping,
		_In_ BOOLEAN	ObjectCreation,
		_Out_writes_(ObjectTypeListLength) PACCESS_MASK	GrantedAccess,
		_Out_writes_(ObjectTypeListLength) PNTSTATUS	AccessStatus,
		_Out_ PBOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAcquireCMFViewOwnership	(	_Out_ PULONGLONG	TimeStamp,
		_Out_ PBOOLEAN	tokenTaken,
		_In_ BOOLEAN	replaceExisting
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAddAtom	(	_In_reads_bytes_opt_(Length) PWSTR	AtomName,
		_In_ ULONG	Length,
		_Out_opt_ PRTL_ATOM	Atom
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAddBootEntry	(	_In_ PBOOT_ENTRY	BootEntry,
		_Out_opt_ PULONG	Id
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAddDriverEntry	(	_In_ PEFI_DRIVER_ENTRY	DriverEntry,
		_Out_opt_ PULONG	Id
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAdjustGroupsToken	(	_In_ HANDLE	TokenHandle,
		_In_ BOOLEAN	ResetToDefault,
		_In_opt_ PTOKEN_GROUPS	NewState,
		_In_opt_ ULONG	BufferLength,
		_Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_GROUPS	PreviousState,
		_Out_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAdjustPrivilegesToken	(	_In_ HANDLE	TokenHandle,
		_In_ BOOLEAN	DisableAllPrivileges,
		_In_opt_ PTOKEN_PRIVILEGES	NewState,
		_In_ ULONG	BufferLength,
		_Out_writes_bytes_to_opt_(BufferLength,*ReturnLength) PTOKEN_PRIVILEGES	PreviousState,
		_Out_ _When_(PreviousState==NULL, _Out_opt_) PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAdjustTokenClaimsAndDeviceGroups	(	_In_ HANDLE	TokenHandle,
		_In_ BOOLEAN	UserResetToDefault,
		_In_ BOOLEAN	DeviceResetToDefault,
		_In_ BOOLEAN	DeviceGroupsResetToDefault,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	NewUserState,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	NewDeviceState,
		_In_opt_ PTOKEN_GROUPS	NewDeviceGroupsState,
		_In_ ULONG	UserBufferLength,
		_Out_writes_bytes_to_opt_(UserBufferLength,*UserReturnLength) PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	PreviousUserState,
		_In_ ULONG	DeviceBufferLength,
		_Out_writes_bytes_to_opt_(DeviceBufferLength,*DeviceReturnLength) PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	PreviousDeviceState,
		_In_ ULONG	DeviceGroupsBufferLength,
		_Out_writes_bytes_to_opt_(DeviceGroupsBufferLength,*DeviceGroupsReturnBufferLength) PTOKEN_GROUPS	PreviousDeviceGroups,
		_Out_opt_ PULONG	UserReturnLength,
		_Out_opt_ PULONG	DeviceReturnLength,
		_Out_opt_ PULONG	DeviceGroupsReturnBufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlertResumeThread	(	_In_ HANDLE	ThreadHandle,
		_Out_opt_ PULONG	PreviousSuspendCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlertThread

(

_In_ HANDLE

ThreadHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwAllocateLocallyUniqueId

(

_Out_ PLUID

Luid

)

NTSYSCALLAPI NTSTATUS NTAPI ZwAllocateReserveObject	(	_Out_ PHANDLE	MemoryReserveHandle,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ MEMORY_RESERVE_TYPE	Type
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAllocateUserPhysicalPages	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PULONG_PTR	NumberOfPages,
		_Out_writes_ *NumberOfPages PULONG_PTR	UserPfnArray
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAllocateUuids	(	_Out_ PULARGE_INTEGER	Time,
		_Out_ PULONG	Range,
		_Out_ PULONG	Sequence,
		_Out_ PCHAR	Seed
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAllocateVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_Inout_ _At_(*,*RegionSize _Writable_bytes_ *RegionSize _Post_readable_byte_size_ *	RegionSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcAcceptConnectPort	(	_Out_ PHANDLE	PortHandle,
		_In_ HANDLE	ConnectionPortHandle,
		_In_ ULONG	Flags,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PALPC_PORT_ATTRIBUTES	PortAttributes,
		_In_opt_ PVOID	PortContext,
		_In_reads_bytes_(ConnectionRequest->u1.s1.TotalLength) PPORT_MESSAGE	ConnectionRequest,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	ConnectionMessageAttributes,
		_In_ BOOLEAN	AcceptConnection
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCancelMessage	(	_In_ HANDLE	PortHandle,
		_In_ ULONG	Flags,
		_In_ PALPC_CONTEXT_ATTR	MessageContext
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcConnectPort	(	_Out_ PHANDLE	PortHandle,
		_In_ PUNICODE_STRING	PortName,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PALPC_PORT_ATTRIBUTES	PortAttributes,
		_In_ ULONG	Flags,
		_In_opt_ PSID	RequiredServerSid,
		_Inout_updates_bytes_to_opt_ *,*BufferLength PPORT_MESSAGE	ConnectionMessage,
		_Inout_opt_ PULONG	BufferLength,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	OutMessageAttributes,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	InMessageAttributes,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcConnectPortEx	(	_Out_ PHANDLE	PortHandle,
		_In_ POBJECT_ATTRIBUTES	ConnectionPortObjectAttributes,
		_In_opt_ POBJECT_ATTRIBUTES	ClientPortObjectAttributes,
		_In_opt_ PALPC_PORT_ATTRIBUTES	PortAttributes,
		_In_ ULONG	Flags,
		_In_opt_ PSECURITY_DESCRIPTOR	ServerSecurityRequirements,
		_Inout_updates_bytes_to_opt_ *,*BufferLength PPORT_MESSAGE	ConnectionMessage,
		_Inout_opt_ PSIZE_T	BufferLength,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	OutMessageAttributes,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	InMessageAttributes,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCreatePort	(	_Out_ PHANDLE	PortHandle,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PALPC_PORT_ATTRIBUTES	PortAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCreatePortSection	(	_In_ HANDLE	PortHandle,
		_In_ ULONG	Flags,
		_In_opt_ HANDLE	SectionHandle,
		_In_ SIZE_T	SectionSize,
		_Out_ PALPC_HANDLE	AlpcSectionHandle,
		_Out_ PSIZE_T	ActualSectionSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCreateResourceReserve	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ SIZE_T	MessageSize,
		_Out_ PALPC_HANDLE	ResourceId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCreateSectionView	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_Inout_ PALPC_DATA_VIEW_ATTR	ViewAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCreateSecurityContext	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_Inout_ PALPC_SECURITY_ATTR	SecurityAttribute
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcDeletePortSection	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ ALPC_HANDLE	SectionHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcDeleteResourceReserve	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ ALPC_HANDLE	ResourceId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcDeleteSectionView	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ PVOID	ViewBase
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcDeleteSecurityContext	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ ALPC_HANDLE	ContextHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcDisconnectPort	(	_In_ HANDLE	PortHandle,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcImpersonateClientContainerOfPort	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	Message,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcImpersonateClientOfPort	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	Message,
		_In_ PVOID	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcOpenSenderProcess	(	_Out_ PHANDLE	ProcessHandle,
		_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	PortMessage,
		_In_ ULONG	Flags,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcOpenSenderThread	(	_Out_ PHANDLE	ThreadHandle,
		_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	PortMessage,
		_In_ ULONG	Flags,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcQueryInformation	(	_In_opt_ HANDLE	PortHandle,
		_In_ ALPC_PORT_INFORMATION_CLASS	PortInformationClass,
		_Inout_updates_bytes_to_(Length,*ReturnLength) PVOID	PortInformation,
		_In_ ULONG	Length,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcQueryInformationMessage	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	PortMessage,
		_In_ ALPC_MESSAGE_INFORMATION_CLASS	MessageInformationClass,
		_Out_writes_bytes_to_opt_(Length,*ReturnLength) PVOID	MessageInformation,
		_In_ ULONG	Length,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcRevokeSecurityContext	(	_In_ HANDLE	PortHandle,
		_Reserved_ ULONG	Flags,
		_In_ ALPC_HANDLE	ContextHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcSendWaitReceivePort	(	_In_ HANDLE	PortHandle,
		_In_ ULONG	Flags,
		_In_reads_bytes_opt_(SendMessage->u1.s1.TotalLength) PPORT_MESSAGE	SendMessage,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	SendMessageAttributes,
		_Out_writes_bytes_to_opt_ *,*BufferLength PPORT_MESSAGE	ReceiveMessage,
		_Inout_opt_ PSIZE_T	BufferLength,
		_Inout_opt_ PALPC_MESSAGE_ATTRIBUTES	ReceiveMessageAttributes,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcSetInformation	(	_In_ HANDLE	PortHandle,
		_In_ ALPC_PORT_INFORMATION_CLASS	PortInformationClass,
		_In_reads_bytes_opt_(Length) PVOID	PortInformation,
		_In_ ULONG	Length
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAreMappedFilesTheSame	(	_In_ PVOID	File1MappedAsAnImage,
		_In_ PVOID	File2MappedAsFile
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAssignProcessToJobObject	(	_In_ HANDLE	JobHandle,
		_In_ HANDLE	ProcessHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAssignProcessToSiloObject	(	_In_ HANDLE	SiloHandle,
		_In_ HANDLE	ProcessHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAssociateWaitCompletionPacket	(	_In_ HANDLE	WaitCompletionPacketHandle,
		_In_ HANDLE	IoCompletionHandle,
		_In_ HANDLE	TargetObjectHandle,
		_In_opt_ PVOID	KeyContext,
		_In_opt_ PVOID	ApcContext,
		_In_ NTSTATUS	IoStatus,
		_In_ ULONG_PTR	IoStatusInformation,
		_Out_opt_ PBOOLEAN	AlreadySignaled
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAttachThreadIdSiloToCurrentThread	(	_In_ HANDLE	ThreadId,
		_Out_ PHANDLE	PreviousSiloHandle,
		_Out_opt_ PBOOLEAN	bChangedSilo
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwAttachThreadSiloToCurrentThread	(	_In_ HANDLE	ThreadHandle,
		_Out_ PHANDLE	PreviousSiloHandle,
		_Out_opt_ PBOOLEAN	bChangedSilo
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCallbackReturn	(	_In_reads_bytes_opt_(OutputLength) PVOID	OutputBuffer,
		_In_ ULONG	OutputLength,
		_In_ NTSTATUS	Status
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelIoFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelIoFileEx	(	_In_ HANDLE	FileHandle,
		_In_opt_ PIO_STATUS_BLOCK	IoRequestToCancel,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelSynchronousIoFile	(	_In_ HANDLE	ThreadHandle,
		_In_opt_ PIO_STATUS_BLOCK	IoRequestToCancel,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelTimer	(	_In_ HANDLE	TimerHandle,
		_Out_opt_ PBOOLEAN	CurrentState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelTimer2	(	_In_ HANDLE	TimerHandle,
		_In_ PT2_CANCEL_PARAMETERS	Parameters
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCancelWaitCompletionPacket	(	_In_ HANDLE	WaitCompletionPacketHandle,
		_In_ BOOLEAN	RemoveSignaledPacket
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwClearEvent

(

_In_ HANDLE

EventHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwClose

(

_In_ HANDLE

Handle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ BOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCommitComplete	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCommitEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCommitTransaction	(	_In_ HANDLE	TransactionHandle,
		_In_ BOOLEAN	Wait
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCompactKeys	(	_In_ ULONG	Count,
		_In_reads_(Count) HANDLE	KeyArray[]
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCompareObjects	(	_In_ HANDLE	FirstObjectHandle,
		_In_ HANDLE	SecondObjectHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCompareTokens	(	_In_ HANDLE	FirstTokenHandle,
		_In_ HANDLE	SecondTokenHandle,
		_Out_ PBOOLEAN	Equal
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCompleteConnectPort

(

_In_ HANDLE

PortHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwCompressKey

(

_In_ HANDLE

Key

)

NTSYSCALLAPI NTSTATUS NTAPI ZwConnectPort	(	_Out_ PHANDLE	PortHandle,
		_In_ PUNICODE_STRING	PortName,
		_In_ PSECURITY_QUALITY_OF_SERVICE	SecurityQos,
		_Inout_opt_ PPORT_VIEW	ClientView,
		_Inout_opt_ PREMOTE_PORT_VIEW	ServerView,
		_Out_opt_ PULONG	MaxMessageLength,
		_Inout_updates_bytes_to_opt_ *,*ConnectionInformationLength PVOID	ConnectionInformation,
		_Inout_opt_ PULONG	ConnectionInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwContinue	(	_In_ PCONTEXT	ContextRecord,
		_In_ BOOLEAN	TestAlert
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateDebugObject	(	_Out_ PHANDLE	DebugObjectHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateDirectoryObject	(	_Out_ PHANDLE	DirectoryHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateDirectoryObjectEx	(	_Out_ PHANDLE	DirectoryHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	ShadowDirectoryHandle,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateEnlistment	(	_Out_ PHANDLE	EnlistmentHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ HANDLE	ResourceManagerHandle,
		_In_ HANDLE	TransactionHandle,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ ULONG	CreateOptions,
		_In_ NOTIFICATION_MASK	NotificationMask,
		_In_opt_ PVOID	EnlistmentKey
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateEvent	(	_Out_ PHANDLE	EventHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ EVENT_TYPE	EventType,
		_In_ BOOLEAN	InitialState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateEventPair	(	_Out_ PHANDLE	EventPairHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateFile	(	_Out_ PHANDLE	FileHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_opt_ PLARGE_INTEGER	AllocationSize,
		_In_ ULONG	FileAttributes,
		_In_ ULONG	ShareAccess,
		_In_ ULONG	CreateDisposition,
		_In_ ULONG	CreateOptions,
		_In_reads_bytes_opt_(EaLength) PVOID	EaBuffer,
		_In_ ULONG	EaLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateIoCompletion	(	_Out_ PHANDLE	IoCompletionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ ULONG	Count
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateIRTimer	(	_Out_ PHANDLE	TimerHandle,
		_In_ ACCESS_MASK	DesiredAccess
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateJobObject	(	_Out_ PHANDLE	JobHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateJobSet	(	_In_ ULONG	NumJob,
		_In_reads_(NumJob) PJOB_SET_ARRAY	UserJobSet,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateKey	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Reserved_ ULONG	TitleIndex,
		_In_opt_ PUNICODE_STRING	Class,
		_In_ ULONG	CreateOptions,
		_Out_opt_ PULONG	Disposition
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateKeyedEvent	(	_Out_ PHANDLE	KeyedEventHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateKeyTransacted	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Reserved_ ULONG	TitleIndex,
		_In_opt_ PUNICODE_STRING	Class,
		_In_ ULONG	CreateOptions,
		_In_ HANDLE	TransactionHandle,
		_Out_opt_ PULONG	Disposition
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateLowBoxToken	(	_Out_ PHANDLE	TokenHandle,
		_In_ HANDLE	ExistingTokenHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PSID	PackageSid,
		_In_ ULONG	CapabilityCount,
		_In_reads_opt_(CapabilityCount) PSID_AND_ATTRIBUTES	Capabilities,
		_In_ ULONG	HandleCount,
		_In_reads_opt_(HandleCount) HANDLE *	Handles
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateMailslotFile	(	_Out_ PHANDLE	FileHandle,
		_In_ ULONG	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	CreateOptions,
		_In_ ULONG	MailslotQuota,
		_In_ ULONG	MaximumMessageSize,
		_In_ PLARGE_INTEGER	ReadTimeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateMutant	(	_Out_ PHANDLE	MutantHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ BOOLEAN	InitialOwner
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateNamedPipeFile	(	_Out_ PHANDLE	FileHandle,
		_In_ ULONG	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	ShareAccess,
		_In_ ULONG	CreateDisposition,
		_In_ ULONG	CreateOptions,
		_In_ ULONG	NamedPipeType,
		_In_ ULONG	ReadMode,
		_In_ ULONG	CompletionMode,
		_In_ ULONG	MaximumInstances,
		_In_ ULONG	InboundQuota,
		_In_ ULONG	OutboundQuota,
		_In_opt_ PLARGE_INTEGER	DefaultTimeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreatePagingFile	(	_In_ PUNICODE_STRING	PageFileName,
		_In_ PLARGE_INTEGER	MinimumSize,
		_In_ PLARGE_INTEGER	MaximumSize,
		_In_ ULONG	Priority
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreatePartition	(	_Out_ PHANDLE	PartitionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	PreferredNode
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreatePort	(	_Out_ PHANDLE	PortHandle,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	MaxConnectionInfoLength,
		_In_ ULONG	MaxMessageLength,
		_In_opt_ ULONG	MaxPoolUsage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreatePrivateNamespace	(	_Out_ PHANDLE	NamespaceHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PVOID	BoundaryDescriptor
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateProcess	(	_Out_ PHANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	ParentProcess,
		_In_ BOOLEAN	InheritObjectTable,
		_In_opt_ HANDLE	SectionHandle,
		_In_opt_ HANDLE	DebugPort,
		_In_opt_ HANDLE	ExceptionPort
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateProcessEx	(	_Out_ PHANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	ParentProcess,
		_In_ ULONG	Flags,
		_In_opt_ HANDLE	SectionHandle,
		_In_opt_ HANDLE	DebugPort,
		_In_opt_ HANDLE	ExceptionPort,
		_In_ ULONG	JobMemberLevel
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateProfile	(	_Out_ PHANDLE	ProfileHandle,
		_In_opt_ HANDLE	Process,
		_In_ PVOID	ProfileBase,
		_In_ SIZE_T	ProfileSize,
		_In_ ULONG	BucketSize,
		_In_reads_bytes_(BufferSize) PULONG	Buffer,
		_In_ ULONG	BufferSize,
		_In_ KPROFILE_SOURCE	ProfileSource,
		_In_ KAFFINITY	Affinity
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateProfileEx	(	_Out_ PHANDLE	ProfileHandle,
		_In_opt_ HANDLE	Process,
		_In_ PVOID	ProfileBase,
		_In_ SIZE_T	ProfileSize,
		_In_ ULONG	BucketSize,
		_In_reads_bytes_(BufferSize) PULONG	Buffer,
		_In_ ULONG	BufferSize,
		_In_ KPROFILE_SOURCE	ProfileSource,
		_In_ USHORT	GroupCount,
		_In_reads_(GroupCount) PGROUP_AFFINITY	GroupAffinity
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateResourceManager	(	_Out_ PHANDLE	ResourceManagerHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ HANDLE	TmHandle,
		_In_ LPGUID	RmGuid,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ ULONG	CreateOptions,
		_In_opt_ PUNICODE_STRING	Description
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateSection	(	_Out_ PHANDLE	SectionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PLARGE_INTEGER	MaximumSize,
		_In_ ULONG	SectionPageProtection,
		_In_ ULONG	AllocationAttributes,
		_In_opt_ HANDLE	FileHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateSemaphore	(	_Out_ PHANDLE	SemaphoreHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ LONG	InitialCount,
		_In_ LONG	MaximumCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateSiloObject	(	_Out_ PHANDLE	SiloHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject	(	_Out_ PHANDLE	LinkHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PUNICODE_STRING	LinkTarget
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateThread	(	_Out_ PHANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	ProcessHandle,
		_Out_ PCLIENT_ID	ClientId,
		_In_ PCONTEXT	ThreadContext,
		_In_ PINITIAL_TEB	InitialTeb,
		_In_ BOOLEAN	CreateSuspended
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateThreadEx	(	_Out_ PHANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	ProcessHandle,
		_In_ PVOID	StartRoutine,
		_In_opt_ PVOID	Argument,
		_In_ ULONG	CreateFlags,
		_In_ SIZE_T	ZeroBits,
		_In_ SIZE_T	StackSize,
		_In_ SIZE_T	MaximumStackSize,
		_In_opt_ PPS_ATTRIBUTE_LIST	AttributeList
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateTimer	(	_Out_ PHANDLE	TimerHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ TIMER_TYPE	TimerType
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateTimer2	(	_Out_ PHANDLE	TimerHandle,
		_In_opt_ PVOID	Reserved1,
		_In_opt_ PVOID	Reserved2,
		_In_ ULONG	Attributes,
		_In_ ACCESS_MASK	DesiredAccess
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateToken	(	_Out_ PHANDLE	TokenHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ TOKEN_TYPE	TokenType,
		_In_ PLUID	AuthenticationId,
		_In_ PLARGE_INTEGER	ExpirationTime,
		_In_ PTOKEN_USER	User,
		_In_ PTOKEN_GROUPS	Groups,
		_In_ PTOKEN_PRIVILEGES	Privileges,
		_In_opt_ PTOKEN_OWNER	Owner,
		_In_ PTOKEN_PRIMARY_GROUP	PrimaryGroup,
		_In_opt_ PTOKEN_DEFAULT_DACL	DefaultDacl,
		_In_ PTOKEN_SOURCE	TokenSource
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateTokenEx	(	_Out_ PHANDLE	TokenHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ TOKEN_TYPE	TokenType,
		_In_ PLUID	AuthenticationId,
		_In_ PLARGE_INTEGER	ExpirationTime,
		_In_ PTOKEN_USER	User,
		_In_ PTOKEN_GROUPS	Groups,
		_In_ PTOKEN_PRIVILEGES	Privileges,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	UserAttributes,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	DeviceAttributes,
		_In_opt_ PTOKEN_GROUPS	DeviceGroups,
		_In_opt_ PTOKEN_MANDATORY_POLICY	TokenMandatoryPolicy,
		_In_opt_ PTOKEN_OWNER	Owner,
		_In_ PTOKEN_PRIMARY_GROUP	PrimaryGroup,
		_In_opt_ PTOKEN_DEFAULT_DACL	DefaultDacl,
		_In_ PTOKEN_SOURCE	TokenSource
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateTransaction	(	_Out_ PHANDLE	TransactionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ LPGUID	Uow,
		_In_opt_ HANDLE	TmHandle,
		_In_opt_ ULONG	CreateOptions,
		_In_opt_ ULONG	IsolationLevel,
		_In_opt_ ULONG	IsolationFlags,
		_In_opt_ PLARGE_INTEGER	Timeout,
		_In_opt_ PUNICODE_STRING	Description
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateTransactionManager	(	_Out_ PHANDLE	TmHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PUNICODE_STRING	LogFileName,
		_In_opt_ ULONG	CreateOptions,
		_In_opt_ ULONG	CommitStrength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateUserProcess	(	_Out_ PHANDLE	ProcessHandle,
		_Out_ PHANDLE	ThreadHandle,
		_In_ ACCESS_MASK	ProcessDesiredAccess,
		_In_ ACCESS_MASK	ThreadDesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ProcessObjectAttributes,
		_In_opt_ POBJECT_ATTRIBUTES	ThreadObjectAttributes,
		_In_ ULONG	ProcessFlags,
		_In_ ULONG	ThreadFlags,
		_In_opt_ PVOID	ProcessParameters,
		_Inout_ PPS_CREATE_INFO	CreateInfo,
		_In_opt_ PPS_ATTRIBUTE_LIST	AttributeList
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateWaitablePort	(	_Out_ PHANDLE	PortHandle,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	MaxConnectionInfoLength,
		_In_ ULONG	MaxMessageLength,
		_In_opt_ ULONG	MaxPoolUsage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateWaitCompletionPacket	(	_Out_ PHANDLE	WaitCompletionPacketHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateWnfStateName	(	_Out_ PWNF_STATE_NAME	StateName,
		_In_ WNF_STATE_NAME_LIFETIME	NameLifetime,
		_In_ WNF_DATA_SCOPE	DataScope,
		_In_ BOOLEAN	PersistData,
		_In_opt_ PCWNF_TYPE_ID	TypeId,
		_In_ ULONG	MaximumStateSize,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwCreateWorkerFactory	(	_Out_ PHANDLE	WorkerFactoryHandleReturn,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	CompletionPortHandle,
		_In_ HANDLE	WorkerProcessHandle,
		_In_ PVOID	StartRoutine,
		_In_opt_ PVOID	StartParameter,
		_In_opt_ ULONG	MaxThreadCount,
		_In_opt_ SIZE_T	StackReserve,
		_In_opt_ SIZE_T	StackCommit
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDebugActiveProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ HANDLE	DebugObjectHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDebugContinue	(	_In_ HANDLE	DebugObjectHandle,
		_In_ PCLIENT_ID	ClientId,
		_In_ NTSTATUS	ContinueStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDelayExecution	(	_In_ BOOLEAN	Alertable,
		_In_ PLARGE_INTEGER	DelayInterval
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteAtom

(

_In_ RTL_ATOM

Atom

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteBootEntry

(

_In_ ULONG

Id

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteDriverEntry

(

_In_ ULONG

Id

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteFile

(

_In_ POBJECT_ATTRIBUTES

ObjectAttributes

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteKey

(

_In_ HANDLE

KeyHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteObjectAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ BOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeletePrivateNamespace

(

_In_ HANDLE

NamespaceHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteValueKey	(	_In_ HANDLE	KeyHandle,
		_In_ PUNICODE_STRING	ValueName
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteWnfStateData	(	_In_ PCWNF_STATE_NAME	StateName,
		_In_opt_ const PVOID	ExplicitScope
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeleteWnfStateName

(

_In_ PCWNF_STATE_NAME

StateName

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDetachSiloFromCurrentThread

(

_In_ HANDLE

SiloHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDeviceIoControlFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	IoControlCode,
		_In_reads_bytes_opt_(InputBufferLength) PVOID	InputBuffer,
		_In_ ULONG	InputBufferLength,
		_Out_writes_bytes_opt_(OutputBufferLength) PVOID	OutputBuffer,
		_In_ ULONG	OutputBufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDisableLastKnownGood

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDisplayString

(

_In_ PUNICODE_STRING

String

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDrawText

(

_In_ PUNICODE_STRING

String

)

NTSYSCALLAPI NTSTATUS NTAPI ZwDuplicateObject	(	_In_ HANDLE	SourceProcessHandle,
		_In_ HANDLE	SourceHandle,
		_In_opt_ HANDLE	TargetProcessHandle,
		_Out_opt_ PHANDLE	TargetHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ ULONG	HandleAttributes,
		_In_ ULONG	Options
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwDuplicateToken	(	_In_ HANDLE	ExistingTokenHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ BOOLEAN	EffectiveOnly,
		_In_ TOKEN_TYPE	TokenType,
		_Out_ PHANDLE	NewTokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnableLastKnownGood

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateBootEntries	(	_Out_writes_bytes_opt_ *BufferLength PVOID	Buffer,
		_Inout_ PULONG	BufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateDriverEntries	(	_Out_writes_bytes_opt_ *BufferLength PVOID	Buffer,
		_Inout_ PULONG	BufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateKey	(	_In_ HANDLE	KeyHandle,
		_In_ ULONG	Index,
		_In_ KEY_INFORMATION_CLASS	KeyInformationClass,
		_Out_writes_bytes_opt_(Length) PVOID	KeyInformation,
		_In_ ULONG	Length,
		_Out_ PULONG	ResultLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateSystemEnvironmentValuesEx	(	_In_ ULONG	InformationClass,
		_Out_ PVOID	Buffer,
		_Inout_ PULONG	BufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateTransactionObject	(	_In_opt_ HANDLE	RootObjectHandle,
		_In_ KTMOBJECT_TYPE	QueryType,
		_Inout_updates_bytes_(ObjectCursorLength) PKTMOBJECT_CURSOR	ObjectCursor,
		_In_ ULONG	ObjectCursorLength,
		_Out_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwEnumerateValueKey	(	_In_ HANDLE	KeyHandle,
		_In_ ULONG	Index,
		_In_ KEY_VALUE_INFORMATION_CLASS	KeyValueInformationClass,
		_Out_writes_bytes_opt_(Length) PVOID	KeyValueInformation,
		_In_ ULONG	Length,
		_Out_ PULONG	ResultLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwExtendSection	(	_In_ HANDLE	SectionHandle,
		_Inout_ PLARGE_INTEGER	NewSectionSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFilterBootOption	(	_In_ FILTER_BOOT_OPTION_OPERATION	FilterOperation,
		_In_ ULONG	ObjectType,
		_In_ ULONG	ElementType,
		_In_reads_bytes_opt_(DataSize) PVOID	Data,
		_In_ ULONG	DataSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFilterToken	(	_In_ HANDLE	ExistingTokenHandle,
		_In_ ULONG	Flags,
		_In_opt_ PTOKEN_GROUPS	SidsToDisable,
		_In_opt_ PTOKEN_PRIVILEGES	PrivilegesToDelete,
		_In_opt_ PTOKEN_GROUPS	RestrictedSids,
		_Out_ PHANDLE	NewTokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFilterTokenEx	(	_In_ HANDLE	ExistingTokenHandle,
		_In_ ULONG	Flags,
		_In_opt_ PTOKEN_GROUPS	SidsToDisable,
		_In_opt_ PTOKEN_PRIVILEGES	PrivilegesToDelete,
		_In_opt_ PTOKEN_GROUPS	RestrictedSids,
		_In_ ULONG	DisableUserClaimsCount,
		_In_opt_ PUNICODE_STRING	UserClaimsToDisable,
		_In_ ULONG	DisableDeviceClaimsCount,
		_In_opt_ PUNICODE_STRING	DeviceClaimsToDisable,
		_In_opt_ PTOKEN_GROUPS	DeviceGroupsToDisable,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	RestrictedUserAttributes,
		_In_opt_ PTOKEN_SECURITY_ATTRIBUTES_INFORMATION	RestrictedDeviceAttributes,
		_In_opt_ PTOKEN_GROUPS	RestrictedDeviceGroups,
		_Out_ PHANDLE	NewTokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFindAtom	(	_In_reads_bytes_opt_(Length) PWSTR	AtomName,
		_In_ ULONG	Length,
		_Out_opt_ PRTL_ATOM	Atom
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushBuffersFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushBuffersFileEx	(	_In_ HANDLE	FileHandle,
		_In_ ULONG	Flags,
		_In_reads_bytes_(ParametersSize) PVOID	Parameters,
		_In_ ULONG	ParametersSize,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushInstallUILanguage	(	_In_ LANGID	InstallUILanguage,
		_In_ ULONG	SetComittedFlag
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushInstructionCache	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress,
		_In_ SIZE_T	Length
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushKey

(

_In_ HANDLE

KeyHandle

)

NTSYSCALLAPI VOID NTAPI ZwFlushProcessWriteBuffers

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwFlushWriteBuffer

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwFreeUserPhysicalPages	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PULONG_PTR	NumberOfPages,
		_In_reads_ *NumberOfPages PULONG_PTR	UserPfnArray
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFreeVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PVOID *	BaseAddress,
		_Inout_ PSIZE_T	RegionSize,
		_In_ ULONG	FreeType
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFreezeRegistry

(

_In_ ULONG

TimeOutInSeconds

)

NTSYSCALLAPI NTSTATUS NTAPI ZwFreezeTransactions	(	_In_ PLARGE_INTEGER	FreezeTimeout,
		_In_ PLARGE_INTEGER	ThawTimeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwFsControlFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	FsControlCode,
		_In_reads_bytes_opt_(InputBufferLength) PVOID	InputBuffer,
		_In_ ULONG	InputBufferLength,
		_Out_writes_bytes_opt_(OutputBufferLength) PVOID	OutputBuffer,
		_In_ ULONG	OutputBufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetCachedSigningLevel	(	_In_ HANDLE	File,
		_Out_ PULONG	Flags,
		_Out_ PSE_SIGNING_LEVEL	SigningLevel,
		_Out_writes_bytes_to_opt_ *,*ThumbprintSize PUCHAR	Thumbprint,
		_Inout_opt_ PULONG	ThumbprintSize,
		_Out_opt_ PULONG	ThumbprintAlgorithm
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetCompleteWnfStateSubscription	(	_In_opt_ PWNF_STATE_NAME	OldDescriptorStateName,
		_In_opt_ ULONG64 *	OldSubscriptionId,
		_In_opt_ ULONG	OldDescriptorEventMask,
		_In_opt_ ULONG	OldDescriptorStatus,
		_Out_writes_bytes_(DescriptorSize) PWNF_DELIVERY_DESCRIPTOR	NewDeliveryDescriptor,
		_In_ ULONG	DescriptorSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetContextThread	(	_In_ HANDLE	ThreadHandle,
		_Inout_ PCONTEXT	ThreadContext
	)

NTSYSCALLAPI ULONG NTAPI ZwGetCurrentProcessorNumber

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetDevicePowerState	(	_In_ HANDLE	Device,
		_Out_ PDEVICE_POWER_STATE	State
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetMUIRegistryInfo	(	_In_ ULONG	Flags,
		_Inout_ PULONG	DataSize,
		_Out_ PVOID	Data
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetNextProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ ULONG	HandleAttributes,
		_In_ ULONG	Flags,
		_Out_ PHANDLE	NewProcessHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetNextThread	(	_In_ HANDLE	ProcessHandle,
		_In_ HANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ ULONG	HandleAttributes,
		_In_ ULONG	Flags,
		_Out_ PHANDLE	NewThreadHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetNlsSectionPtr	(	_In_ ULONG	SectionType,
		_In_ ULONG	SectionData,
		_In_ PVOID	ContextData,
		_Out_ PVOID *	SectionPointer,
		_Out_ PULONG	SectionSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetNotificationResourceManager	(	_In_ HANDLE	ResourceManagerHandle,
		_Out_ PTRANSACTION_NOTIFICATION	TransactionNotification,
		_In_ ULONG	NotificationLength,
		_In_opt_ PLARGE_INTEGER	Timeout,
		_Out_opt_ PULONG	ReturnLength,
		_In_ ULONG	Asynchronous,
		_In_opt_ ULONG_PTR	AsynchronousContext
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetPlugPlayEvent	(	_In_ HANDLE	EventHandle,
		_In_opt_ PVOID	Context,
		_Out_writes_bytes_(EventBufferSize) PPLUGPLAY_EVENT_BLOCK	EventBlock,
		_In_ ULONG	EventBufferSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwGetWriteWatch	(	_In_ HANDLE	ProcessHandle,
		_In_ ULONG	Flags,
		_In_ PVOID	BaseAddress,
		_In_ SIZE_T	RegionSize,
		_Out_writes_ *EntriesInUserAddressArray PVOID *	UserAddressArray,
		_Inout_ PULONG_PTR	EntriesInUserAddressArray,
		_Out_ PULONG	Granularity
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwImpersonateAnonymousToken

(

_In_ HANDLE

ThreadHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwImpersonateClientOfPort	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	Message
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwImpersonateThread	(	_In_ HANDLE	ServerThreadHandle,
		_In_ HANDLE	ClientThreadHandle,
		_In_ PSECURITY_QUALITY_OF_SERVICE	SecurityQos
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwInitializeNlsFiles	(	_Out_ PVOID *	BaseAddress,
		_Out_ PLCID	DefaultLocaleId,
		_Out_ PLARGE_INTEGER	DefaultCasingTableSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwInitializeRegistry

(

_In_ USHORT

BootCondition

)

NTSYSCALLAPI NTSTATUS NTAPI ZwInitiatePowerAction	(	_In_ POWER_ACTION	SystemAction,
		_In_ SYSTEM_POWER_STATE	LightestSystemState,
		_In_ ULONG	Flags,
		_In_ BOOLEAN	Asynchronous
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwIsProcessInJob	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ HANDLE	JobHandle
	)

NTSYSCALLAPI BOOLEAN NTAPI ZwIsSystemResumeAutomatic

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwIsUILanguageComitted

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwListenPort	(	_In_ HANDLE	PortHandle,
		_Out_ PPORT_MESSAGE	ConnectionRequest
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLoadDriver

(

_In_ PUNICODE_STRING

DriverServiceName

)

NTSYSCALLAPI NTSTATUS NTAPI ZwLoadKey	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_ POBJECT_ATTRIBUTES	SourceFile
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLoadKey2	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_ POBJECT_ATTRIBUTES	SourceFile,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLoadKeyEx	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_ POBJECT_ATTRIBUTES	SourceFile,
		_In_ ULONG	Flags,
		_In_opt_ HANDLE	TrustClassKey,
		_In_opt_ HANDLE	Event,
		_In_opt_ ACCESS_MASK	DesiredAccess,
		_Out_opt_ PHANDLE	RootHandle,
		_Out_opt_ PIO_STATUS_BLOCK	IoStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLockFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ PLARGE_INTEGER	ByteOffset,
		_In_ PLARGE_INTEGER	Length,
		_In_ ULONG	Key,
		_In_ BOOLEAN	FailImmediately,
		_In_ BOOLEAN	ExclusiveLock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLockProductActivationKeys	(	_Inout_opt_ ULONG *	pPrivateVer,
		_Out_opt_ ULONG *	pSafeMode
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwLockRegistryKey

(

_In_ HANDLE

KeyHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwLockVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PVOID *	BaseAddress,
		_Inout_ PSIZE_T	RegionSize,
		_In_ ULONG	MapType
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwMakePermanentObject

(

_In_ HANDLE

Handle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwMakeTemporaryObject

(

_In_ HANDLE

Handle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwManagePartition	(	_In_ MEMORY_PARTITION_INFORMATION_CLASS	PartitionInformationClass,
		_In_ PVOID	PartitionInformation,
		_In_ ULONG	PartitionInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwMapCMFModule	(	_In_ ULONG	What,
		_In_ ULONG	Index,
		_Out_opt_ PULONG	CacheIndexOut,
		_Out_opt_ PULONG	CacheFlagsOut,
		_Out_opt_ PULONG	ViewSizeOut,
		_Out_opt_ PVOID *	BaseAddress
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwMapUserPhysicalPages	(	_In_ PVOID	VirtualAddress,
		_In_ ULONG_PTR	NumberOfPages,
		_In_reads_opt_(NumberOfPages) PULONG_PTR	UserPfnArray
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwMapUserPhysicalPagesScatter	(	_In_reads_(NumberOfPages) PVOID *	VirtualAddresses,
		_In_ ULONG_PTR	NumberOfPages,
		_In_reads_opt_(NumberOfPages) PULONG_PTR	UserPfnArray
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwMapViewOfSection	(	_In_ HANDLE	SectionHandle,
		_In_ HANDLE	ProcessHandle,
		_Inout_ _At_(*,*ViewSize _Writable_bytes_ *ViewSize _Post_readable_byte_size_ *	ViewSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwModifyBootEntry

(

_In_ PBOOT_ENTRY

BootEntry

)

NTSYSCALLAPI NTSTATUS NTAPI ZwModifyDriverEntry

(

_In_ PEFI_DRIVER_ENTRY

DriverEntry

)

NTSYSCALLAPI NTSTATUS NTAPI ZwNotifyChangeDirectoryFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_ ULONG	CompletionFilter,
		_In_ BOOLEAN	WatchTree
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwNotifyChangeKey	(	_In_ HANDLE	KeyHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	CompletionFilter,
		_In_ BOOLEAN	WatchTree,
		_Out_writes_bytes_opt_(BufferSize) PVOID	Buffer,
		_In_ ULONG	BufferSize,
		_In_ BOOLEAN	Asynchronous
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwNotifyChangeMultipleKeys	(	_In_ HANDLE	MasterKeyHandle,
		_In_opt_ ULONG	Count,
		_In_reads_opt_(Count) OBJECT_ATTRIBUTES	SubordinateObjects[],
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	CompletionFilter,
		_In_ BOOLEAN	WatchTree,
		_Out_writes_bytes_opt_(BufferSize) PVOID	Buffer,
		_In_ ULONG	BufferSize,
		_In_ BOOLEAN	Asynchronous
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwNotifyChangeSession	(	_In_ HANDLE	SessionHandle,
		_In_ ULONG	ChangeSequenceNumber,
		_In_ PLARGE_INTEGER	ChangeTimeStamp,
		_In_ IO_SESSION_EVENT	Event,
		_In_ IO_SESSION_STATE	NewState,
		_In_ IO_SESSION_STATE	PreviousState,
		_In_reads_bytes_opt_(PayloadSize) PVOID	Payload,
		_In_ ULONG	PayloadSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenDirectoryObject	(	_Out_ PHANDLE	DirectoryHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenEnlistment	(	_Out_ PHANDLE	EnlistmentHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ HANDLE	ResourceManagerHandle,
		_In_ LPGUID	EnlistmentGuid,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenEvent	(	_Out_ PHANDLE	EventHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenEventPair	(	_Out_ PHANDLE	EventPairHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenFile	(	_Out_ PHANDLE	FileHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ ULONG	ShareAccess,
		_In_ ULONG	OpenOptions
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenIoCompletion	(	_Out_ PHANDLE	IoCompletionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenJobObject	(	_Out_ PHANDLE	JobHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenJobObjectToken	(	_In_ HANDLE	JobHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_Out_ PHANDLE	TokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenKey	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenKeyedEvent	(	_Out_ PHANDLE	KeyedEventHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenKeyEx	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	OpenOptions
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenKeyTransacted	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ HANDLE	TransactionHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenKeyTransactedEx	(	_Out_ PHANDLE	KeyHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ ULONG	OpenOptions,
		_In_ HANDLE	TransactionHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenMutant	(	_Out_ PHANDLE	MutantHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenObjectAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ PUNICODE_STRING	ObjectTypeName,
		_In_ PUNICODE_STRING	ObjectName,
		_In_opt_ PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_ HANDLE	ClientToken,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ ACCESS_MASK	GrantedAccess,
		_In_opt_ PPRIVILEGE_SET	Privileges,
		_In_ BOOLEAN	ObjectCreation,
		_In_ BOOLEAN	AccessGranted,
		_Out_ PBOOLEAN	GenerateOnClose
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenPartition	(	_Out_ PHANDLE	PartitionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenPrivateNamespace	(	_Out_ PHANDLE	NamespaceHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ PVOID	BoundaryDescriptor
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenProcess	(	_Out_ PHANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PCLIENT_ID	ClientId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenProcessToken	(	_In_ HANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_Out_ PHANDLE	TokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenProcessTokenEx	(	_In_ HANDLE	ProcessHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ ULONG	HandleAttributes,
		_Out_ PHANDLE	TokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenResourceManager	(	_Out_ PHANDLE	ResourceManagerHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ HANDLE	TmHandle,
		_In_opt_ LPGUID	ResourceManagerGuid,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenSection	(	_Out_ PHANDLE	SectionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenSemaphore	(	_Out_ PHANDLE	SemaphoreHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenSession	(	_Out_ PHANDLE	SessionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenSiloObject	(	_Out_ PHANDLE	SiloHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ HANDLE	SiloId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenSymbolicLinkObject	(	_Out_ PHANDLE	LinkHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenThread	(	_Out_ PHANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PCLIENT_ID	ClientId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenThreadToken	(	_In_ HANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ BOOLEAN	OpenAsSelf,
		_Out_ PHANDLE	TokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenThreadTokenEx	(	_In_ HANDLE	ThreadHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ BOOLEAN	OpenAsSelf,
		_In_ ULONG	HandleAttributes,
		_Out_ PHANDLE	TokenHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenTimer	(	_Out_ PHANDLE	TimerHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenTransaction	(	_Out_ PHANDLE	TransactionHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_ LPGUID	Uow,
		_In_opt_ HANDLE	TmHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwOpenTransactionManager	(	_Out_ PHANDLE	TmHandle,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_opt_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_In_opt_ PUNICODE_STRING	LogFileName,
		_In_opt_ LPGUID	TmIdentity,
		_In_opt_ ULONG	OpenOptions
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPlugPlayControl	(	_In_ PLUGPLAY_CONTROL_CLASS	PnPControlClass,
		_Inout_updates_bytes_(PnPControlDataLength) PVOID	PnPControlData,
		_In_ ULONG	PnPControlDataLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPowerInformation	(	_In_ POWER_INFORMATION_LEVEL	InformationLevel,
		_In_reads_bytes_opt_(InputBufferLength) PVOID	InputBuffer,
		_In_ ULONG	InputBufferLength,
		_Out_writes_bytes_opt_(OutputBufferLength) PVOID	OutputBuffer,
		_In_ ULONG	OutputBufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrepareComplete	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrepareEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrePrepareComplete	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrePrepareEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrivilegeCheck	(	_In_ HANDLE	ClientToken,
		_Inout_ PPRIVILEGE_SET	RequiredPrivileges,
		_Out_ PBOOLEAN	Result
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrivilegedServiceAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_ PUNICODE_STRING	ServiceName,
		_In_ HANDLE	ClientToken,
		_In_ PPRIVILEGE_SET	Privileges,
		_In_ BOOLEAN	AccessGranted
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPrivilegeObjectAuditAlarm	(	_In_ PUNICODE_STRING	SubsystemName,
		_In_opt_ PVOID	HandleId,
		_In_ HANDLE	ClientToken,
		_In_ ACCESS_MASK	DesiredAccess,
		_In_ PPRIVILEGE_SET	Privileges,
		_In_ BOOLEAN	AccessGranted
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPropagationComplete	(	_In_ HANDLE	ResourceManagerHandle,
		_In_ ULONG	RequestCookie,
		_In_ ULONG	BufferLength,
		_In_ PVOID	Buffer
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPropagationFailed	(	_In_ HANDLE	ResourceManagerHandle,
		_In_ ULONG	RequestCookie,
		_In_ NTSTATUS	PropStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwProtectVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PVOID *	BaseAddress,
		_Inout_ PSIZE_T	RegionSize,
		_In_ ULONG	NewProtect,
		_Out_ PULONG	OldProtect
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwPulseEvent	(	_In_ HANDLE	EventHandle,
		_Out_opt_ PLONG	PreviousState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryAttributesFile	(	_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PFILE_BASIC_INFORMATION	FileInformation
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryBootEntryOrder	(	_Out_writes_opt_ *Count PULONG	Ids,
		_Inout_ PULONG	Count
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryBootOptions	(	_Out_writes_bytes_opt_ *BootOptionsLength PBOOT_OPTIONS	BootOptions,
		_Inout_ PULONG	BootOptionsLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDebugFilterState	(	_In_ ULONG	ComponentId,
		_In_ ULONG	Level
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDefaultLocale	(	_In_ BOOLEAN	UserProfile,
		_Out_ PLCID	DefaultLocaleId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDefaultUILanguage

(

_Out_ LANGID *

DefaultUILanguageId

)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDirectoryFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	FileInformation,
		_In_ ULONG	Length,
		_In_ FILE_INFORMATION_CLASS	FileInformationClass,
		_In_ BOOLEAN	ReturnSingleEntry,
		_In_opt_ PUNICODE_STRING	FileName,
		_In_ BOOLEAN	RestartScan
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDirectoryObject	(	_In_ HANDLE	DirectoryHandle,
		_Out_writes_bytes_opt_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_ BOOLEAN	ReturnSingleEntry,
		_In_ BOOLEAN	RestartScan,
		_Inout_ PULONG	Context,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryDriverEntryOrder	(	_Out_writes_opt_ *Count PULONG	Ids,
		_Inout_ PULONG	Count
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryEaFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_ BOOLEAN	ReturnSingleEntry,
		_In_reads_bytes_opt_(EaListLength) PVOID	EaList,
		_In_ ULONG	EaListLength,
		_In_opt_ PULONG	EaIndex,
		_In_ BOOLEAN	RestartScan
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryEvent	(	_In_ HANDLE	EventHandle,
		_In_ EVENT_INFORMATION_CLASS	EventInformationClass,
		_Out_writes_bytes_(EventInformationLength) PVOID	EventInformation,
		_In_ ULONG	EventInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryFullAttributesFile	(	_In_ POBJECT_ATTRIBUTES	ObjectAttributes,
		_Out_ PFILE_NETWORK_OPEN_INFORMATION	FileInformation
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationAtom	(	_In_ RTL_ATOM	Atom,
		_In_ ATOM_INFORMATION_CLASS	AtomInformationClass,
		_Out_writes_bytes_(AtomInformationLength) PVOID	AtomInformation,
		_In_ ULONG	AtomInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_ ENLISTMENT_INFORMATION_CLASS	EnlistmentInformationClass,
		_Out_writes_bytes_(EnlistmentInformationLength) PVOID	EnlistmentInformation,
		_In_ ULONG	EnlistmentInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	FileInformation,
		_In_ ULONG	Length,
		_In_ FILE_INFORMATION_CLASS	FileInformationClass
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationJobObject	(	_In_opt_ HANDLE	JobHandle,
		_In_ JOBOBJECTINFOCLASS	JobObjectInformationClass,
		_Out_writes_bytes_(JobObjectInformationLength) PVOID	JobObjectInformation,
		_In_ ULONG	JobObjectInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationPort	(	_In_ HANDLE	PortHandle,
		_In_ PORT_INFORMATION_CLASS	PortInformationClass,
		_Out_writes_bytes_to_(Length,*ReturnLength) PVOID	PortInformation,
		_In_ ULONG	Length,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ PROCESSINFOCLASS	ProcessInformationClass,
		_Out_writes_bytes_(ProcessInformationLength) PVOID	ProcessInformation,
		_In_ ULONG	ProcessInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationResourceManager	(	_In_ HANDLE	ResourceManagerHandle,
		_In_ RESOURCEMANAGER_INFORMATION_CLASS	ResourceManagerInformationClass,
		_Out_writes_bytes_(ResourceManagerInformationLength) PVOID	ResourceManagerInformation,
		_In_ ULONG	ResourceManagerInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationSiloObject	(	_In_opt_ HANDLE	SiloHandle,
		_In_ SILOOBJECTINFOCLASS	SiloObjectInformationClass,
		_Out_writes_bytes_(SiloObjectInformationLength) PVOID	SiloObjectInformation,
		_In_ ULONG	SiloObjectInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationThread	(	_In_ HANDLE	ThreadHandle,
		_In_ THREADINFOCLASS	ThreadInformationClass,
		_Out_writes_bytes_(ThreadInformationLength) PVOID	ThreadInformation,
		_In_ ULONG	ThreadInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationToken	(	_In_ HANDLE	TokenHandle,
		_In_ TOKEN_INFORMATION_CLASS	TokenInformationClass,
		_Out_writes_bytes_(TokenInformationLength) PVOID	TokenInformation,
		_In_ ULONG	TokenInformationLength,
		_Out_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationTransaction	(	_In_ HANDLE	TransactionHandle,
		_In_ TRANSACTION_INFORMATION_CLASS	TransactionInformationClass,
		_Out_writes_bytes_(TransactionInformationLength) PVOID	TransactionInformation,
		_In_ ULONG	TransactionInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationTransactionManager	(	_In_ HANDLE	TransactionManagerHandle,
		_In_ TRANSACTIONMANAGER_INFORMATION_CLASS	TransactionManagerInformationClass,
		_Out_writes_bytes_(TransactionManagerInformationLength) PVOID	TransactionManagerInformation,
		_In_ ULONG	TransactionManagerInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInformationWorkerFactory	(	_In_ HANDLE	WorkerFactoryHandle,
		_In_ WORKERFACTORYINFOCLASS	WorkerFactoryInformationClass,
		_Out_writes_bytes_(WorkerFactoryInformationLength) PVOID	WorkerFactoryInformation,
		_In_ ULONG	WorkerFactoryInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryInstallUILanguage

(

_Out_ LANGID *

InstallUILanguageId

)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryIntervalProfile	(	_In_ KPROFILE_SOURCE	ProfileSource,
		_Out_ PULONG	Interval
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryIoCompletion	(	_In_ HANDLE	IoCompletionHandle,
		_In_ IO_COMPLETION_INFORMATION_CLASS	IoCompletionInformationClass,
		_Out_writes_bytes_(IoCompletionInformation) PVOID	IoCompletionInformation,
		_In_ ULONG	IoCompletionInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryKey	(	_In_ HANDLE	KeyHandle,
		_In_ KEY_INFORMATION_CLASS	KeyInformationClass,
		_Out_writes_bytes_opt_(Length) PVOID	KeyInformation,
		_In_ ULONG	Length,
		_Out_ PULONG	ResultLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryLicenseValue	(	_In_ PUNICODE_STRING	ValueName,
		_Out_opt_ PULONG	Type,
		_Out_writes_bytes_to_opt_(DataSize,*ResultDataSize) PVOID	Data,
		_In_ ULONG	DataSize,
		_Out_ PULONG	ResultDataSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryMultipleValueKey	(	_In_ HANDLE	KeyHandle,
		_Inout_updates_(EntryCount) PKEY_VALUE_ENTRY	ValueEntries,
		_In_ ULONG	EntryCount,
		_Out_writes_bytes_ *BufferLength PVOID	ValueBuffer,
		_Inout_ PULONG	BufferLength,
		_Out_opt_ PULONG	RequiredBufferLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryMutant	(	_In_ HANDLE	MutantHandle,
		_In_ MUTANT_INFORMATION_CLASS	MutantInformationClass,
		_Out_writes_bytes_(MutantInformationLength) PVOID	MutantInformation,
		_In_ ULONG	MutantInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryObject	(	_In_ HANDLE	Handle,
		_In_ OBJECT_INFORMATION_CLASS	ObjectInformationClass,
		_Out_writes_bytes_opt_(ObjectInformationLength) PVOID	ObjectInformation,
		_In_ ULONG	ObjectInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryOpenSubKeys	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_Out_ PULONG	HandleCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryOpenSubKeysEx	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_ ULONG	BufferLength,
		_Out_writes_bytes_(BufferLength) PVOID	Buffer,
		_Out_ PULONG	RequiredSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryPerformanceCounter	(	_Out_ PLARGE_INTEGER	PerformanceCounter,
		_Out_opt_ PLARGE_INTEGER	PerformanceFrequency
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryPortInformationProcess

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryQuotaInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_ BOOLEAN	ReturnSingleEntry,
		_In_reads_bytes_opt_(SidListLength) PVOID	SidList,
		_In_ ULONG	SidListLength,
		_In_opt_ PSID	StartSid,
		_In_ BOOLEAN	RestartScan
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySection	(	_In_ HANDLE	SectionHandle,
		_In_ SECTION_INFORMATION_CLASS	SectionInformationClass,
		_Out_writes_bytes_(SectionInformationLength) PVOID	SectionInformation,
		_In_ SIZE_T	SectionInformationLength,
		_Out_opt_ PSIZE_T	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySecurityAttributesToken	(	_In_ HANDLE	TokenHandle,
		_In_reads_opt_(NumberOfAttributes) PUNICODE_STRING	Attributes,
		_In_ ULONG	NumberOfAttributes,
		_Out_writes_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_Out_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySecurityObject	(	_In_ HANDLE	Handle,
		_In_ SECURITY_INFORMATION	SecurityInformation,
		_Out_writes_bytes_opt_(Length) PSECURITY_DESCRIPTOR	SecurityDescriptor,
		_In_ ULONG	Length,
		_Out_ PULONG	LengthNeeded
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySemaphore	(	_In_ HANDLE	SemaphoreHandle,
		_In_ SEMAPHORE_INFORMATION_CLASS	SemaphoreInformationClass,
		_Out_writes_bytes_(SemaphoreInformationLength) PVOID	SemaphoreInformation,
		_In_ ULONG	SemaphoreInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySymbolicLinkObject	(	_In_ HANDLE	LinkHandle,
		_Inout_ PUNICODE_STRING	LinkTarget,
		_Out_opt_ PULONG	ReturnedLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySystemEnvironmentValue	(	_In_ PUNICODE_STRING	VariableName,
		_Out_writes_bytes_(ValueLength) PWSTR	VariableValue,
		_In_ USHORT	ValueLength,
		_Out_opt_ PUSHORT	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySystemEnvironmentValueEx	(	_In_ PUNICODE_STRING	VariableName,
		_In_ LPGUID	VendorGuid,
		_Out_writes_bytes_opt_ *ValueLength PVOID	Value,
		_Inout_ PULONG	ValueLength,
		_Out_opt_ PULONG	Attributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySystemInformation	(	_In_ SYSTEM_INFORMATION_CLASS	SystemInformationClass,
		_Out_writes_bytes_opt_(SystemInformationLength) PVOID	SystemInformation,
		_In_ ULONG	SystemInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySystemInformationEx	(	_In_ SYSTEM_INFORMATION_CLASS	SystemInformationClass,
		_In_reads_bytes_(InputBufferLength) PVOID	InputBuffer,
		_In_ ULONG	InputBufferLength,
		_Out_writes_bytes_opt_(SystemInformationLength) PVOID	SystemInformation,
		_In_ ULONG	SystemInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQuerySystemTime

(

_Out_ PLARGE_INTEGER

SystemTime

)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryTimer	(	_In_ HANDLE	TimerHandle,
		_In_ TIMER_INFORMATION_CLASS	TimerInformationClass,
		_Out_writes_bytes_(TimerInformationLength) PVOID	TimerInformation,
		_In_ ULONG	TimerInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryTimerResolution	(	_Out_ PULONG	MaximumTime,
		_Out_ PULONG	MinimumTime,
		_Out_ PULONG	CurrentTime
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryValueKey	(	_In_ HANDLE	KeyHandle,
		_In_ PUNICODE_STRING	ValueName,
		_In_ KEY_VALUE_INFORMATION_CLASS	KeyValueInformationClass,
		_Out_writes_bytes_opt_(Length) PVOID	KeyValueInformation,
		_In_ ULONG	Length,
		_Out_ PULONG	ResultLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_In_ PVOID	BaseAddress,
		_In_ MEMORY_INFORMATION_CLASS	MemoryInformationClass,
		_Out_writes_bytes_(MemoryInformationLength) PVOID	MemoryInformation,
		_In_ SIZE_T	MemoryInformationLength,
		_Out_opt_ PSIZE_T	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryVolumeInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	FsInformation,
		_In_ ULONG	Length,
		_In_ FSINFOCLASS	FsInformationClass
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryWnfStateData	(	_In_ PCWNF_STATE_NAME	StateName,
		_In_opt_ PCWNF_TYPE_ID	TypeId,
		_In_opt_ const VOID *	ExplicitScope,
		_Out_ PWNF_CHANGE_STAMP	ChangeStamp,
		_Out_writes_bytes_to_opt_ *,*BufferSize PVOID	Buffer,
		_Inout_ PULONG	BufferSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueryWnfStateNameInformation	(	_In_ PCWNF_STATE_NAME	StateName,
		_In_ WNF_STATE_NAME_INFORMATION	NameInfoClass,
		_In_opt_ const PVOID	ExplicitScope,
		_Out_writes_bytes_(InfoBufferSize) PVOID	InfoBuffer,
		_In_ ULONG	InfoBufferSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueueApcThread	(	_In_ HANDLE	ThreadHandle,
		_In_ PPS_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcArgument1,
		_In_opt_ PVOID	ApcArgument2,
		_In_opt_ PVOID	ApcArgument3
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwQueueApcThreadEx	(	_In_ HANDLE	ThreadHandle,
		_In_opt_ HANDLE	UserApcReserveHandle,
		_In_ PPS_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcArgument1,
		_In_opt_ PVOID	ApcArgument2,
		_In_opt_ PVOID	ApcArgument3
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRaiseException	(	_In_ PEXCEPTION_RECORD	ExceptionRecord,
		_In_ PCONTEXT	ContextRecord,
		_In_ BOOLEAN	FirstChance
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRaiseHardError	(	_In_ NTSTATUS	ErrorStatus,
		_In_ ULONG	NumberOfParameters,
		_In_ ULONG	UnicodeStringParameterMask,
		_In_reads_(NumberOfParameters) PULONG_PTR	Parameters,
		_In_ ULONG	ValidResponseOptions,
		_Out_ PULONG	Response
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReadFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_Out_writes_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_opt_ PLARGE_INTEGER	ByteOffset,
		_In_opt_ PULONG	Key
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReadFileScatter	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ PFILE_SEGMENT_ELEMENT	SegmentArray,
		_In_ ULONG	Length,
		_In_opt_ PLARGE_INTEGER	ByteOffset,
		_In_opt_ PULONG	Key
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReadOnlyEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReadRequestData	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	Message,
		_In_ ULONG	DataEntryIndex,
		_Out_writes_bytes_to_(BufferSize,*NumberOfBytesRead) PVOID	Buffer,
		_In_ SIZE_T	BufferSize,
		_Out_opt_ PSIZE_T	NumberOfBytesRead
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReadVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress,
		_Out_writes_bytes_(BufferSize) PVOID	Buffer,
		_In_ SIZE_T	BufferSize,
		_Out_opt_ PSIZE_T	NumberOfBytesRead
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRecoverEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PVOID	EnlistmentKey
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRecoverResourceManager

(

_In_ HANDLE

ResourceManagerHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwRecoverTransactionManager

(

_In_ HANDLE

TransactionManagerHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwRegisterProtocolAddressInformation	(	_In_ HANDLE	ResourceManager,
		_In_ PCRM_PROTOCOL_ID	ProtocolId,
		_In_ ULONG	ProtocolInformationSize,
		_In_ PVOID	ProtocolInformation,
		_In_opt_ ULONG	CreateOptions
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRegisterThreadTerminatePort

(

_In_ HANDLE

PortHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwReleaseCMFViewOwnership

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwReleaseKeyedEvent	(	_In_ HANDLE	KeyedEventHandle,
		_In_ PVOID	KeyValue,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReleaseMutant	(	_In_ HANDLE	MutantHandle,
		_Out_opt_ PLONG	PreviousCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReleaseSemaphore	(	_In_ HANDLE	SemaphoreHandle,
		_In_ LONG	ReleaseCount,
		_Out_opt_ PLONG	PreviousCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReleaseWorkerFactoryWorker

(

_In_ HANDLE

WorkerFactoryHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwRemoveIoCompletion	(	_In_ HANDLE	IoCompletionHandle,
		_Out_ PVOID *	KeyContext,
		_Out_ PVOID *	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRemoveIoCompletionEx	(	_In_ HANDLE	IoCompletionHandle,
		_Out_writes_to_(Count,*NumEntriesRemoved) PFILE_IO_COMPLETION_INFORMATION	IoCompletionInformation,
		_In_ ULONG	Count,
		_Out_ PULONG	NumEntriesRemoved,
		_In_opt_ PLARGE_INTEGER	Timeout,
		_In_ BOOLEAN	Alertable
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRemoveProcessDebug	(	_In_ HANDLE	ProcessHandle,
		_In_ HANDLE	DebugObjectHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRenameKey	(	_In_ HANDLE	KeyHandle,
		_In_ PUNICODE_STRING	NewName
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRenameTransactionManager	(	_In_ PUNICODE_STRING	LogFileName,
		_In_ LPGUID	ExistingTransactionManagerGuid
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplaceKey	(	_In_ POBJECT_ATTRIBUTES	NewFile,
		_In_ HANDLE	TargetHandle,
		_In_ POBJECT_ATTRIBUTES	OldFile
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplacePartitionUnit	(	_In_ PUNICODE_STRING	TargetInstancePath,
		_In_ PUNICODE_STRING	SpareInstancePath,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplyPort	(	_In_ HANDLE	PortHandle,
		_In_reads_bytes_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE	ReplyMessage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplyWaitReceivePort	(	_In_ HANDLE	PortHandle,
		_Out_opt_ PVOID *	PortContext,
		_In_reads_bytes_opt_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE	ReplyMessage,
		_Out_ PPORT_MESSAGE	ReceiveMessage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplyWaitReceivePortEx	(	_In_ HANDLE	PortHandle,
		_Out_opt_ PVOID *	PortContext,
		_In_reads_bytes_opt_(ReplyMessage->u1.s1.TotalLength) PPORT_MESSAGE	ReplyMessage,
		_Out_ PPORT_MESSAGE	ReceiveMessage,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwReplyWaitReplyPort	(	_In_ HANDLE	PortHandle,
		_Inout_ PPORT_MESSAGE	ReplyMessage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRequestPort	(	_In_ HANDLE	PortHandle,
		_In_reads_bytes_(RequestMessage->u1.s1.TotalLength) PPORT_MESSAGE	RequestMessage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRequestWaitReplyPort	(	_In_ HANDLE	PortHandle,
		_In_reads_bytes_(RequestMessage->u1.s1.TotalLength) PPORT_MESSAGE	RequestMessage,
		_Out_ PPORT_MESSAGE	ReplyMessage
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRequestWakeupLatency

(

_In_ LATENCY_TIME

latency

)

NTSYSCALLAPI NTSTATUS NTAPI ZwResetEvent	(	_In_ HANDLE	EventHandle,
		_Out_opt_ PLONG	PreviousState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwResetWriteWatch	(	_In_ HANDLE	ProcessHandle,
		_In_ PVOID	BaseAddress,
		_In_ SIZE_T	RegionSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRestoreKey	(	_In_ HANDLE	KeyHandle,
		_In_ HANDLE	FileHandle,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwResumeProcess

(

_In_ HANDLE

ProcessHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwResumeThread	(	_In_ HANDLE	ThreadHandle,
		_Out_opt_ PULONG	PreviousSuspendCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRevertContainerImpersonation

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackComplete	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackEnlistment	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRollbackTransaction	(	_In_ HANDLE	TransactionHandle,
		_In_ BOOLEAN	Wait
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwRollforwardTransactionManager	(	_In_ HANDLE	TransactionManagerHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSaveKey	(	_In_ HANDLE	KeyHandle,
		_In_ HANDLE	FileHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSaveKeyEx	(	_In_ HANDLE	KeyHandle,
		_In_ HANDLE	FileHandle,
		_In_ ULONG	Format
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSaveMergedKeys	(	_In_ HANDLE	HighPrecedenceKeyHandle,
		_In_ HANDLE	LowPrecedenceKeyHandle,
		_In_ HANDLE	FileHandle
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSecureConnectPort	(	_Out_ PHANDLE	PortHandle,
		_In_ PUNICODE_STRING	PortName,
		_In_ PSECURITY_QUALITY_OF_SERVICE	SecurityQos,
		_Inout_opt_ PPORT_VIEW	ClientView,
		_In_opt_ PSID	RequiredServerSid,
		_Inout_opt_ PREMOTE_PORT_VIEW	ServerView,
		_Out_opt_ PULONG	MaxMessageLength,
		_Inout_updates_bytes_to_opt_ *,*ConnectionInformationLength PVOID	ConnectionInformation,
		_Inout_opt_ PULONG	ConnectionInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSerializeBoot

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetBootEntryOrder	(	_In_reads_(Count) PULONG	Ids,
		_In_ ULONG	Count
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetBootOptions	(	_In_ PBOOT_OPTIONS	BootOptions,
		_In_ ULONG	FieldsToChange
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetCachedSigningLevel	(	_In_ ULONG	Flags,
		_In_ SE_SIGNING_LEVEL	InputSigningLevel,
		_In_reads_(SourceFileCount) PHANDLE	SourceFiles,
		_In_ ULONG	SourceFileCount,
		_In_opt_ HANDLE	TargetFile
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetContextThread	(	_In_ HANDLE	ThreadHandle,
		_In_ PCONTEXT	ThreadContext
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetDebugFilterState	(	_In_ ULONG	ComponentId,
		_In_ ULONG	Level,
		_In_ BOOLEAN	State
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetDefaultHardErrorPort

(

_In_ HANDLE

DefaultHardErrorPort

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetDefaultLocale	(	_In_ BOOLEAN	UserProfile,
		_In_ LCID	DefaultLocaleId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetDefaultUILanguage

(

_In_ LANGID

DefaultUILanguageId

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetDriverEntryOrder	(	_In_reads_(Count) PULONG	Ids,
		_In_ ULONG	Count
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetEaFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_reads_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetEvent	(	_In_ HANDLE	EventHandle,
		_Out_opt_ PLONG	PreviousState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetEventBoostPriority

(

_In_ HANDLE

EventHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetHighEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetHighWaitLowEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationDebugObject	(	_In_ HANDLE	DebugObjectHandle,
		_In_ DEBUGOBJECTINFOCLASS	DebugObjectInformationClass,
		_In_ PVOID	DebugInformation,
		_In_ ULONG	DebugInformationLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationEnlistment	(	_In_opt_ HANDLE	EnlistmentHandle,
		_In_ ENLISTMENT_INFORMATION_CLASS	EnlistmentInformationClass,
		_In_reads_bytes_(EnlistmentInformationLength) PVOID	EnlistmentInformation,
		_In_ ULONG	EnlistmentInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_reads_bytes_(Length) PVOID	FileInformation,
		_In_ ULONG	Length,
		_In_ FILE_INFORMATION_CLASS	FileInformationClass
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationJobObject	(	_In_ HANDLE	JobHandle,
		_In_ JOBOBJECTINFOCLASS	JobObjectInformationClass,
		_In_reads_bytes_(JobObjectInformationLength) PVOID	JobObjectInformation,
		_In_ ULONG	JobObjectInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationKey	(	_In_ HANDLE	KeyHandle,
		_In_ KEY_SET_INFORMATION_CLASS	KeySetInformationClass,
		_In_reads_bytes_(KeySetInformationLength) PVOID	KeySetInformation,
		_In_ ULONG	KeySetInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationObject	(	_In_ HANDLE	Handle,
		_In_ OBJECT_INFORMATION_CLASS	ObjectInformationClass,
		_In_reads_bytes_(ObjectInformationLength) PVOID	ObjectInformation,
		_In_ ULONG	ObjectInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationProcess	(	_In_ HANDLE	ProcessHandle,
		_In_ PROCESSINFOCLASS	ProcessInformationClass,
		_In_reads_bytes_(ProcessInformationLength) PVOID	ProcessInformation,
		_In_ ULONG	ProcessInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationResourceManager	(	_In_ HANDLE	ResourceManagerHandle,
		_In_ RESOURCEMANAGER_INFORMATION_CLASS	ResourceManagerInformationClass,
		_In_reads_bytes_(ResourceManagerInformationLength) PVOID	ResourceManagerInformation,
		_In_ ULONG	ResourceManagerInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationSiloObject	(	_In_opt_ HANDLE	SiloHandle,
		_In_ SILOOBJECTINFOCLASS	SiloObjectInformationClass,
		_In_reads_bytes_(SiloObjectInformationLength) PVOID	SiloObjectInformation,
		_In_ ULONG	SiloObjectInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationThread	(	_In_ HANDLE	ThreadHandle,
		_In_ THREADINFOCLASS	ThreadInformationClass,
		_In_reads_bytes_(ThreadInformationLength) PVOID	ThreadInformation,
		_In_ ULONG	ThreadInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationToken	(	_In_ HANDLE	TokenHandle,
		_In_ TOKEN_INFORMATION_CLASS	TokenInformationClass,
		_In_reads_bytes_(TokenInformationLength) PVOID	TokenInformation,
		_In_ ULONG	TokenInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationTransaction	(	_In_ HANDLE	TransactionHandle,
		_In_ TRANSACTION_INFORMATION_CLASS	TransactionInformationClass,
		_In_reads_bytes_(TransactionInformationLength) PVOID	TransactionInformation,
		_In_ ULONG	TransactionInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationTransactionManager	(	_In_opt_ HANDLE	TmHandle,
		_In_ TRANSACTIONMANAGER_INFORMATION_CLASS	TransactionManagerInformationClass,
		_In_reads_bytes_(TransactionManagerInformationLength) PVOID	TransactionManagerInformation,
		_In_ ULONG	TransactionManagerInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_In_ VIRTUAL_MEMORY_INFORMATION_CLASS	VmInformationClass,
		_In_ ULONG_PTR	NumberOfEntries,
		_In_reads_(NumberOfEntries) PMEMORY_RANGE_ENTRY	VirtualAddresses,
		_In_reads_bytes_(VmInformationLength) PVOID	VmInformation,
		_In_ ULONG	VmInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetInformationWorkerFactory	(	_In_ HANDLE	WorkerFactoryHandle,
		_In_ WORKERFACTORYINFOCLASS	WorkerFactoryInformationClass,
		_In_reads_bytes_(WorkerFactoryInformationLength) PVOID	WorkerFactoryInformation,
		_In_ ULONG	WorkerFactoryInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetIntervalProfile	(	_In_ ULONG	Interval,
		_In_ KPROFILE_SOURCE	Source
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetIoCompletion	(	_In_ HANDLE	IoCompletionHandle,
		_In_opt_ PVOID	KeyContext,
		_In_opt_ PVOID	ApcContext,
		_In_ NTSTATUS	IoStatus,
		_In_ ULONG_PTR	IoStatusInformation
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetIoCompletionEx	(	_In_ HANDLE	IoCompletionHandle,
		_In_ HANDLE	IoCompletionPacketHandle,
		_In_opt_ PVOID	KeyContext,
		_In_opt_ PVOID	ApcContext,
		_In_ NTSTATUS	IoStatus,
		_In_ ULONG_PTR	IoStatusInformation
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetIRTimer	(	_In_ HANDLE	TimerHandle,
		_In_opt_ PLARGE_INTEGER	DueTime
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetLdtEntries	(	_In_ ULONG	Selector0,
		_In_ ULONG	Entry0Low,
		_In_ ULONG	Entry0Hi,
		_In_ ULONG	Selector1,
		_In_ ULONG	Entry1Low,
		_In_ ULONG	Entry1Hi
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetLowEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetLowWaitHighEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetQuotaInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_reads_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSecurityObject	(	_In_ HANDLE	Handle,
		_In_ SECURITY_INFORMATION	SecurityInformation,
		_In_ PSECURITY_DESCRIPTOR	SecurityDescriptor
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSystemEnvironmentValue	(	_In_ PUNICODE_STRING	VariableName,
		_In_ PUNICODE_STRING	VariableValue
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSystemEnvironmentValueEx	(	_In_ PUNICODE_STRING	VariableName,
		_In_ LPGUID	VendorGuid,
		_In_reads_bytes_opt_(ValueLength) PVOID	Value,
		_In_ ULONG	ValueLength,
		_In_ ULONG	Attributes
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSystemInformation	(	_In_ SYSTEM_INFORMATION_CLASS	SystemInformationClass,
		_In_reads_bytes_opt_(SystemInformationLength) PVOID	SystemInformation,
		_In_ ULONG	SystemInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSystemPowerState	(	_In_ POWER_ACTION	SystemAction,
		_In_ SYSTEM_POWER_STATE	LightestSystemState,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetSystemTime	(	_In_opt_ PLARGE_INTEGER	SystemTime,
		_Out_opt_ PLARGE_INTEGER	PreviousTime
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetThreadExecutionState	(	_In_ EXECUTION_STATE	NewFlags,
		_Out_ EXECUTION_STATE *	PreviousFlags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetTimer	(	_In_ HANDLE	TimerHandle,
		_In_ PLARGE_INTEGER	DueTime,
		_In_opt_ PTIMER_APC_ROUTINE	TimerApcRoutine,
		_In_opt_ PVOID	TimerContext,
		_In_ BOOLEAN	ResumeTimer,
		_In_opt_ LONG	Period,
		_Out_opt_ PBOOLEAN	PreviousState
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetTimer2	(	_In_ HANDLE	TimerHandle,
		_In_ PLARGE_INTEGER	DueTime,
		_In_opt_ PLARGE_INTEGER	Period,
		_In_ PT2_SET_PARAMETERS	Parameters
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetTimerEx	(	_In_ HANDLE	TimerHandle,
		_In_ TIMER_SET_INFORMATION_CLASS	TimerSetInformationClass,
		_Inout_updates_bytes_opt_(TimerSetInformationLength) PVOID	TimerSetInformation,
		_In_ ULONG	TimerSetInformationLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetTimerResolution	(	_In_ ULONG	DesiredTime,
		_In_ BOOLEAN	SetResolution,
		_Out_ PULONG	ActualTime
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetUuidSeed

(

_In_ PCHAR

Seed

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetValueKey	(	_In_ HANDLE	KeyHandle,
		_In_ PUNICODE_STRING	ValueName,
		_In_opt_ ULONG	TitleIndex,
		_In_ ULONG	Type,
		_In_reads_bytes_opt_(DataSize) PVOID	Data,
		_In_ ULONG	DataSize
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetVolumeInformationFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_reads_bytes_(Length) PVOID	FsInformation,
		_In_ ULONG	Length,
		_In_ FSINFOCLASS	FsInformationClass
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSetWnfProcessNotificationEvent

(

_In_ HANDLE

NotificationEvent

)

NTSYSCALLAPI NTSTATUS NTAPI ZwShutdownSystem

(

_In_ SHUTDOWN_ACTION

Action

)

NTSYSCALLAPI NTSTATUS NTAPI ZwShutdownWorkerFactory	(	_In_ HANDLE	WorkerFactoryHandle,
		_Inout_ volatile LONG *	PendingWorkerCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSignalAndWaitForSingleObject	(	_In_ HANDLE	SignalHandle,
		_In_ HANDLE	WaitHandle,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSinglePhaseReject	(	_In_ HANDLE	EnlistmentHandle,
		_In_opt_ PLARGE_INTEGER	TmVirtualClock
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwStartProfile

(

_In_ HANDLE

ProfileHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwStopProfile

(

_In_ HANDLE

ProfileHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSubscribeWnfStateChange	(	_In_ PCWNF_STATE_NAME	StateName,
		_In_opt_ WNF_CHANGE_STAMP	ChangeStamp,
		_In_ ULONG	EventMask,
		_Out_opt_ PULONG64	SubscriptionId
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSuspendProcess

(

_In_ HANDLE

ProcessHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwSuspendThread	(	_In_ HANDLE	ThreadHandle,
		_Out_opt_ PULONG	PreviousSuspendCount
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwSystemDebugControl	(	_In_ SYSDBG_COMMAND	Command,
		_Inout_updates_bytes_opt_(InputBufferLength) PVOID	InputBuffer,
		_In_ ULONG	InputBufferLength,
		_Out_writes_bytes_opt_(OutputBufferLength) PVOID	OutputBuffer,
		_In_ ULONG	OutputBufferLength,
		_Out_opt_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTerminateJobObject	(	_In_ HANDLE	JobHandle,
		_In_ NTSTATUS	ExitStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTerminateProcess	(	_In_opt_ HANDLE	ProcessHandle,
		_In_ NTSTATUS	ExitStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTerminateSiloObject	(	_In_ HANDLE	SiloHandle,
		_In_ NTSTATUS	ExitStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTerminateThread	(	_In_opt_ HANDLE	ThreadHandle,
		_In_ NTSTATUS	ExitStatus
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTestAlert

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwThawRegistry

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwThawTransactions

(

VOID

)

NTSYSCALLAPI NTSTATUS NTAPI ZwTraceControl	(	_In_ ULONG	FunctionCode,
		_In_reads_bytes_opt_(InBufferLen) PVOID	InBuffer,
		_In_ ULONG	InBufferLen,
		_Out_writes_bytes_opt_(OutBufferLen) PVOID	OutBuffer,
		_In_ ULONG	OutBufferLen,
		_Out_ PULONG	ReturnLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTraceEvent	(	_In_ HANDLE	TraceHandle,
		_In_ ULONG	Flags,
		_In_ ULONG	FieldSize,
		_In_ PVOID	Fields
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwTranslateFilePath	(	_In_ PFILE_PATH	InputFilePath,
		_In_ ULONG	OutputType,
		_Out_writes_bytes_opt_ *OutputFilePathLength PFILE_PATH	OutputFilePath,
		_Inout_opt_ PULONG	OutputFilePathLength
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUmsThreadYield

(

_In_ PVOID

SchedulerParam

)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnloadDriver

(

_In_ PUNICODE_STRING

DriverServiceName

)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnloadKey

(

_In_ POBJECT_ATTRIBUTES

TargetKey

)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnloadKey2	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnloadKeyEx	(	_In_ POBJECT_ATTRIBUTES	TargetKey,
		_In_opt_ HANDLE	Event
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnlockFile	(	_In_ HANDLE	FileHandle,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ PLARGE_INTEGER	ByteOffset,
		_In_ PLARGE_INTEGER	Length,
		_In_ ULONG	Key
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnlockVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_Inout_ PVOID *	BaseAddress,
		_Inout_ PSIZE_T	RegionSize,
		_In_ ULONG	MapType
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnmapViewOfSection	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnmapViewOfSectionEx	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress,
		_In_ ULONG	Flags
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwUnsubscribeWnfStateChange

(

_In_ PCWNF_STATE_NAME

StateName

)

NTSYSCALLAPI NTSTATUS NTAPI ZwUpdateWnfStateData	(	_In_ PCWNF_STATE_NAME	StateName,
		_In_reads_bytes_opt_(Length) const VOID *	Buffer,
		_In_opt_ ULONG	Length,
		_In_opt_ PCWNF_TYPE_ID	TypeId,
		_In_opt_ const PVOID	ExplicitScope,
		_In_ WNF_CHANGE_STAMP	MatchingChangeStamp,
		_In_ LOGICAL	CheckStamp
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwVdmControl	(	_In_ VDMSERVICECLASS	Service,
		_Inout_ PVOID	ServiceData
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForDebugEvent	(	_In_ HANDLE	DebugObjectHandle,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout,
		_Out_ PVOID	WaitStateChange
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForKeyedEvent	(	_In_ HANDLE	KeyedEventHandle,
		_In_ PVOID	KeyValue,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForMultipleObjects	(	_In_ ULONG	Count,
		_In_reads_(Count) HANDLE	Handles[],
		_In_ WAIT_TYPE	WaitType,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForMultipleObjects32	(	_In_ ULONG	Count,
		_In_reads_(Count) LONG	Handles[],
		_In_ WAIT_TYPE	WaitType,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForSingleObject	(	_In_ HANDLE	Handle,
		_In_ BOOLEAN	Alertable,
		_In_opt_ PLARGE_INTEGER	Timeout
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitForWorkViaWorkerFactory	(	_In_ HANDLE	WorkerFactoryHandle,
		_Out_ struct _FILE_IO_COMPLETION_INFORMATION *	MiniPacket
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitHighEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwWaitLowEventPair

(

_In_ HANDLE

EventPairHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwWorkerFactoryWorkerReady

(

_In_ HANDLE

WorkerFactoryHandle

)

NTSYSCALLAPI NTSTATUS NTAPI ZwWriteFile	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_reads_bytes_(Length) PVOID	Buffer,
		_In_ ULONG	Length,
		_In_opt_ PLARGE_INTEGER	ByteOffset,
		_In_opt_ PULONG	Key
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWriteFileGather	(	_In_ HANDLE	FileHandle,
		_In_opt_ HANDLE	Event,
		_In_opt_ PIO_APC_ROUTINE	ApcRoutine,
		_In_opt_ PVOID	ApcContext,
		_Out_ PIO_STATUS_BLOCK	IoStatusBlock,
		_In_ PFILE_SEGMENT_ELEMENT	SegmentArray,
		_In_ ULONG	Length,
		_In_opt_ PLARGE_INTEGER	ByteOffset,
		_In_opt_ PULONG	Key
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWriteRequestData	(	_In_ HANDLE	PortHandle,
		_In_ PPORT_MESSAGE	Message,
		_In_ ULONG	DataEntryIndex,
		_In_reads_bytes_(BufferSize) PVOID	Buffer,
		_In_ SIZE_T	BufferSize,
		_Out_opt_ PSIZE_T	NumberOfBytesWritten
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwWriteVirtualMemory	(	_In_ HANDLE	ProcessHandle,
		_In_opt_ PVOID	BaseAddress,
		_In_reads_bytes_(BufferSize) PVOID	Buffer,
		_In_ SIZE_T	BufferSize,
		_Out_opt_ PSIZE_T	NumberOfBytesWritten
	)

NTSYSCALLAPI NTSTATUS NTAPI ZwYieldExecution

(

VOID

)