Module ntapi::ntzwapi

Functions

• ZwAcceptConnectPort^⚠
• ZwAccessCheck^⚠
• ZwAccessCheckAndAuditAlarm^⚠
• ZwAccessCheckByType^⚠
• ZwAccessCheckByTypeAndAuditAlarm^⚠
• ZwAccessCheckByTypeResultList^⚠
• ZwAccessCheckByTypeResultListAndAuditAlarm^⚠
• ZwAccessCheckByTypeResultListAndAuditAlarmByHandle^⚠
• ZwAcquireCMFViewOwnership^⚠
• ZwAddAtom^⚠
• ZwAddAtomEx^⚠
• ZwAddBootEntry^⚠
• ZwAddDriverEntry^⚠
• ZwAdjustGroupsToken^⚠
• ZwAdjustPrivilegesToken^⚠
• ZwAdjustTokenClaimsAndDeviceGroups^⚠
• ZwAlertResumeThread^⚠
• ZwAlertThread^⚠
• ZwAlertThreadByThreadId^⚠
• ZwAllocateLocallyUniqueId^⚠
• ZwAllocateReserveObject^⚠
• ZwAllocateUserPhysicalPages^⚠
• ZwAllocateUuids^⚠
• ZwAllocateVirtualMemory^⚠
• ZwAlpcAcceptConnectPort^⚠
• ZwAlpcCancelMessage^⚠
• ZwAlpcConnectPort^⚠
• ZwAlpcConnectPortEx^⚠
• ZwAlpcCreatePort^⚠
• ZwAlpcCreatePortSection^⚠
• ZwAlpcCreateResourceReserve^⚠
• ZwAlpcCreateSectionView^⚠
• ZwAlpcCreateSecurityContext^⚠
• ZwAlpcDeletePortSection^⚠
• ZwAlpcDeleteResourceReserve^⚠
• ZwAlpcDeleteSectionView^⚠
• ZwAlpcDeleteSecurityContext^⚠
• ZwAlpcDisconnectPort^⚠
• ZwAlpcImpersonateClientContainerOfPort^⚠
• ZwAlpcImpersonateClientOfPort^⚠
• ZwAlpcOpenSenderProcess^⚠
• ZwAlpcOpenSenderThread^⚠
• ZwAlpcQueryInformation^⚠
• ZwAlpcQueryInformationMessage^⚠
• ZwAlpcRevokeSecurityContext^⚠
• ZwAlpcSendWaitReceivePort^⚠
• ZwAlpcSetInformation^⚠
• ZwAreMappedFilesTheSame^⚠
• ZwAssignProcessToJobObject^⚠
• ZwAssociateWaitCompletionPacket^⚠
• ZwCallbackReturn^⚠
• ZwCancelIoFile^⚠
• ZwCancelIoFileEx^⚠
• ZwCancelSynchronousIoFile^⚠
• ZwCancelTimer^⚠
• ZwCancelTimer2^⚠
• ZwCancelWaitCompletionPacket^⚠
• ZwClearEvent^⚠
• ZwClose^⚠
• ZwCloseObjectAuditAlarm^⚠
• ZwCommitComplete^⚠
• ZwCommitEnlistment^⚠
• ZwCommitTransaction^⚠
• ZwCompactKeys^⚠
• ZwCompareObjects^⚠
• ZwCompareTokens^⚠
• ZwCompleteConnectPort^⚠
• ZwCompressKey^⚠
• ZwConnectPort^⚠
• ZwContinue^⚠
• ZwCreateDebugObject^⚠
• ZwCreateDirectoryObject^⚠
• ZwCreateDirectoryObjectEx^⚠
• ZwCreateEnlistment^⚠
• ZwCreateEvent^⚠
• ZwCreateEventPair^⚠
• ZwCreateFile^⚠
• ZwCreateIRTimer^⚠
• ZwCreateIoCompletion^⚠
• ZwCreateJobObject^⚠
• ZwCreateJobSet^⚠
• ZwCreateKey^⚠
• ZwCreateKeyTransacted^⚠
• ZwCreateKeyedEvent^⚠
• ZwCreateLowBoxToken^⚠
• ZwCreateMailslotFile^⚠
• ZwCreateMutant^⚠
• ZwCreateNamedPipeFile^⚠
• ZwCreatePagingFile^⚠
• ZwCreatePartition^⚠
• ZwCreatePort^⚠
• ZwCreatePrivateNamespace^⚠
• ZwCreateProcess^⚠
• ZwCreateProcessEx^⚠
• ZwCreateProfile^⚠
• ZwCreateProfileEx^⚠
• ZwCreateResourceManager^⚠
• ZwCreateSection^⚠
• ZwCreateSemaphore^⚠
• ZwCreateSymbolicLinkObject^⚠
• ZwCreateThread^⚠
• ZwCreateThreadEx^⚠
• ZwCreateTimer^⚠
• ZwCreateTimer2^⚠
• ZwCreateToken^⚠
• ZwCreateTokenEx^⚠
• ZwCreateTransaction^⚠
• ZwCreateTransactionManager^⚠
• ZwCreateUserProcess^⚠
• ZwCreateWaitCompletionPacket^⚠
• ZwCreateWaitablePort^⚠
• ZwCreateWnfStateName^⚠
• ZwCreateWorkerFactory^⚠
• ZwDebugActiveProcess^⚠
• ZwDebugContinue^⚠
• ZwDelayExecution^⚠
• ZwDeleteAtom^⚠
• ZwDeleteBootEntry^⚠
• ZwDeleteDriverEntry^⚠
• ZwDeleteFile^⚠
• ZwDeleteKey^⚠
• ZwDeleteObjectAuditAlarm^⚠
• ZwDeletePrivateNamespace^⚠
• ZwDeleteValueKey^⚠
• ZwDeleteWnfStateData^⚠
• ZwDeleteWnfStateName^⚠
• ZwDeviceIoControlFile^⚠
• ZwDisableLastKnownGood^⚠
• ZwDisplayString^⚠
• ZwDrawText^⚠
• ZwDuplicateObject^⚠
• ZwDuplicateToken^⚠
• ZwEnableLastKnownGood^⚠
• ZwEnumerateBootEntries^⚠
• ZwEnumerateDriverEntries^⚠
• ZwEnumerateKey^⚠
• ZwEnumerateSystemEnvironmentValuesEx^⚠
• ZwEnumerateTransactionObject^⚠
• ZwEnumerateValueKey^⚠
• ZwExtendSection^⚠
• ZwFilterToken^⚠
• ZwFilterTokenEx^⚠
• ZwFindAtom^⚠
• ZwFlushBuffersFile^⚠
• ZwFlushBuffersFileEx^⚠
• ZwFlushInstallUILanguage^⚠
• ZwFlushInstructionCache^⚠
• ZwFlushKey^⚠
• ZwFlushProcessWriteBuffers^⚠
• ZwFlushWriteBuffer^⚠
• ZwFreeUserPhysicalPages^⚠
• ZwFreeVirtualMemory^⚠
• ZwFreezeRegistry^⚠
• ZwFreezeTransactions^⚠
• ZwFsControlFile^⚠
• ZwGetCachedSigningLevel^⚠
• ZwGetCompleteWnfStateSubscription^⚠
• ZwGetContextThread^⚠
• ZwGetCurrentProcessorNumber^⚠
• ZwGetDevicePowerState^⚠
• ZwGetMUIRegistryInfo^⚠
• ZwGetNextProcess^⚠
• ZwGetNextThread^⚠
• ZwGetNlsSectionPtr^⚠
• ZwGetNotificationResourceManager^⚠
• ZwGetPlugPlayEvent^⚠
• ZwGetWriteWatch^⚠
• ZwImpersonateAnonymousToken^⚠
• ZwImpersonateClientOfPort^⚠
• ZwImpersonateThread^⚠
• ZwInitializeNlsFiles^⚠
• ZwInitializeRegistry^⚠
• ZwInitiatePowerAction^⚠
• ZwIsProcessInJob^⚠
• ZwIsSystemResumeAutomatic^⚠
• ZwIsUILanguageComitted^⚠
• ZwListenPort^⚠
• ZwLoadDriver^⚠
• ZwLoadKey^⚠
• ZwLoadKey2^⚠
• ZwLoadKeyEx^⚠
• ZwLockFile^⚠
• ZwLockProductActivationKeys^⚠
• ZwLockRegistryKey^⚠
• ZwLockVirtualMemory^⚠
• ZwMakePermanentObject^⚠
• ZwMakeTemporaryObject^⚠
• ZwManagePartition^⚠
• ZwMapCMFModule^⚠
• ZwMapUserPhysicalPages^⚠
• ZwMapUserPhysicalPagesScatter^⚠
• ZwMapViewOfSection^⚠
• ZwModifyBootEntry^⚠
• ZwModifyDriverEntry^⚠
• ZwNotifyChangeDirectoryFile^⚠
• ZwNotifyChangeKey^⚠
• ZwNotifyChangeMultipleKeys^⚠
• ZwNotifyChangeSession^⚠
• ZwOpenDirectoryObject^⚠
• ZwOpenEnlistment^⚠
• ZwOpenEvent^⚠
• ZwOpenEventPair^⚠
• ZwOpenFile^⚠
• ZwOpenIoCompletion^⚠
• ZwOpenJobObject^⚠
• ZwOpenKey^⚠
• ZwOpenKeyEx^⚠
• ZwOpenKeyTransacted^⚠
• ZwOpenKeyTransactedEx^⚠
• ZwOpenKeyedEvent^⚠
• ZwOpenMutant^⚠
• ZwOpenObjectAuditAlarm^⚠
• ZwOpenPartition^⚠
• ZwOpenPrivateNamespace^⚠
• ZwOpenProcess^⚠
• ZwOpenProcessToken^⚠
• ZwOpenProcessTokenEx^⚠
• ZwOpenResourceManager^⚠
• ZwOpenSection^⚠
• ZwOpenSemaphore^⚠
• ZwOpenSession^⚠
• ZwOpenSymbolicLinkObject^⚠
• ZwOpenThread^⚠
• ZwOpenThreadToken^⚠
• ZwOpenThreadTokenEx^⚠
• ZwOpenTimer^⚠
• ZwOpenTransaction^⚠
• ZwOpenTransactionManager^⚠
• ZwPlugPlayControl^⚠
• ZwPowerInformation^⚠
• ZwPrePrepareComplete^⚠
• ZwPrePrepareEnlistment^⚠
• ZwPrepareComplete^⚠
• ZwPrepareEnlistment^⚠
• ZwPrivilegeCheck^⚠
• ZwPrivilegeObjectAuditAlarm^⚠
• ZwPrivilegedServiceAuditAlarm^⚠
• ZwPropagationComplete^⚠
• ZwPropagationFailed^⚠
• ZwProtectVirtualMemory^⚠
• ZwPulseEvent^⚠
• ZwQueryAttributesFile^⚠
• ZwQueryBootEntryOrder^⚠
• ZwQueryBootOptions^⚠
• ZwQueryDebugFilterState^⚠
• ZwQueryDefaultLocale^⚠
• ZwQueryDefaultUILanguage^⚠
• ZwQueryDirectoryFile^⚠
• ZwQueryDirectoryObject^⚠
• ZwQueryDriverEntryOrder^⚠
• ZwQueryEaFile^⚠
• ZwQueryEvent^⚠
• ZwQueryFullAttributesFile^⚠
• ZwQueryInformationAtom^⚠
• ZwQueryInformationEnlistment^⚠
• ZwQueryInformationFile^⚠
• ZwQueryInformationJobObject^⚠
• ZwQueryInformationPort^⚠
• ZwQueryInformationProcess^⚠
• ZwQueryInformationResourceManager^⚠
• ZwQueryInformationThread^⚠
• ZwQueryInformationToken^⚠
• ZwQueryInformationTransaction^⚠
• ZwQueryInformationTransactionManager^⚠
• ZwQueryInformationWorkerFactory^⚠
• ZwQueryInstallUILanguage^⚠
• ZwQueryIntervalProfile^⚠
• ZwQueryIoCompletion^⚠
• ZwQueryKey^⚠
• ZwQueryLicenseValue^⚠
• ZwQueryMultipleValueKey^⚠
• ZwQueryMutant^⚠
• ZwQueryObject^⚠
• ZwQueryOpenSubKeys^⚠
• ZwQueryOpenSubKeysEx^⚠
• ZwQueryPerformanceCounter^⚠
• ZwQueryPortInformationProcess^⚠
• ZwQueryQuotaInformationFile^⚠
• ZwQuerySection^⚠
• ZwQuerySecurityAttributesToken^⚠
• ZwQuerySecurityObject^⚠
• ZwQuerySemaphore^⚠
• ZwQuerySymbolicLinkObject^⚠
• ZwQuerySystemEnvironmentValue^⚠
• ZwQuerySystemEnvironmentValueEx^⚠
• ZwQuerySystemInformation^⚠
• ZwQuerySystemInformationEx^⚠
• ZwQuerySystemTime^⚠
• ZwQueryTimer^⚠
• ZwQueryTimerResolution^⚠
• ZwQueryValueKey^⚠
• ZwQueryVirtualMemory^⚠
• ZwQueryVolumeInformationFile^⚠
• ZwQueryWnfStateData^⚠
• ZwQueryWnfStateNameInformation^⚠
• ZwQueueApcThread^⚠
• ZwQueueApcThreadEx^⚠
• ZwRaiseException^⚠
• ZwRaiseHardError^⚠
• ZwReadFile^⚠
• ZwReadFileScatter^⚠
• ZwReadOnlyEnlistment^⚠
• ZwReadRequestData^⚠
• ZwReadVirtualMemory^⚠
• ZwRecoverEnlistment^⚠
• ZwRecoverResourceManager^⚠
• ZwRecoverTransactionManager^⚠
• ZwRegisterProtocolAddressInformation^⚠
• ZwRegisterThreadTerminatePort^⚠
• ZwReleaseCMFViewOwnership^⚠
• ZwReleaseKeyedEvent^⚠
• ZwReleaseMutant^⚠
• ZwReleaseSemaphore^⚠
• ZwReleaseWorkerFactoryWorker^⚠
• ZwRemoveIoCompletion^⚠
• ZwRemoveIoCompletionEx^⚠
• ZwRemoveProcessDebug^⚠
• ZwRenameKey^⚠
• ZwRenameTransactionManager^⚠
• ZwReplaceKey^⚠
• ZwReplacePartitionUnit^⚠
• ZwReplyPort^⚠
• ZwReplyWaitReceivePort^⚠
• ZwReplyWaitReceivePortEx^⚠
• ZwReplyWaitReplyPort^⚠
• ZwRequestPort^⚠
• ZwRequestWaitReplyPort^⚠
• ZwRequestWakeupLatency^⚠
• ZwResetEvent^⚠
• ZwResetWriteWatch^⚠
• ZwRestoreKey^⚠
• ZwResumeProcess^⚠
• ZwResumeThread^⚠
• ZwRevertContainerImpersonation^⚠
• ZwRollbackComplete^⚠
• ZwRollbackEnlistment^⚠
• ZwRollbackTransaction^⚠
• ZwRollforwardTransactionManager^⚠
• ZwSaveKey^⚠
• ZwSaveKeyEx^⚠
• ZwSaveMergedKeys^⚠
• ZwSecureConnectPort^⚠
• ZwSerializeBoot^⚠
• ZwSetBootEntryOrder^⚠
• ZwSetBootOptions^⚠
• ZwSetCachedSigningLevel^⚠
• ZwSetContextThread^⚠
• ZwSetDebugFilterState^⚠
• ZwSetDefaultHardErrorPort^⚠
• ZwSetDefaultLocale^⚠
• ZwSetDefaultUILanguage^⚠
• ZwSetDriverEntryOrder^⚠
• ZwSetEaFile^⚠
• ZwSetEvent^⚠
• ZwSetEventBoostPriority^⚠
• ZwSetHighEventPair^⚠
• ZwSetHighWaitLowEventPair^⚠
• ZwSetIRTimer^⚠
• ZwSetInformationDebugObject^⚠
• ZwSetInformationEnlistment^⚠
• ZwSetInformationFile^⚠
• ZwSetInformationJobObject^⚠
• ZwSetInformationKey^⚠
• ZwSetInformationObject^⚠
• ZwSetInformationProcess^⚠
• ZwSetInformationResourceManager^⚠
• ZwSetInformationThread^⚠
• ZwSetInformationToken^⚠
• ZwSetInformationTransaction^⚠
• ZwSetInformationTransactionManager^⚠
• ZwSetInformationVirtualMemory^⚠
• ZwSetInformationWorkerFactory^⚠
• ZwSetIntervalProfile^⚠
• ZwSetIoCompletion^⚠
• ZwSetIoCompletionEx^⚠
• ZwSetLdtEntries^⚠
• ZwSetLowEventPair^⚠
• ZwSetLowWaitHighEventPair^⚠
• ZwSetQuotaInformationFile^⚠
• ZwSetSecurityObject^⚠
• ZwSetSystemEnvironmentValue^⚠
• ZwSetSystemEnvironmentValueEx^⚠
• ZwSetSystemInformation^⚠
• ZwSetSystemPowerState^⚠
• ZwSetSystemTime^⚠
• ZwSetThreadExecutionState^⚠
• ZwSetTimer^⚠
• ZwSetTimer2^⚠
• ZwSetTimerEx^⚠
• ZwSetTimerResolution^⚠
• ZwSetUuidSeed^⚠
• ZwSetValueKey^⚠
• ZwSetVolumeInformationFile^⚠
• ZwSetWnfProcessNotificationEvent^⚠
• ZwShutdownSystem^⚠
• ZwShutdownWorkerFactory^⚠
• ZwSignalAndWaitForSingleObject^⚠
• ZwSinglePhaseReject^⚠
• ZwStartProfile^⚠
• ZwStopProfile^⚠
• ZwSubscribeWnfStateChange^⚠
• ZwSuspendProcess^⚠
• ZwSuspendThread^⚠
• ZwSystemDebugControl^⚠
• ZwTerminateJobObject^⚠
• ZwTerminateProcess^⚠
• ZwTerminateThread^⚠
• ZwTestAlert^⚠
• ZwThawRegistry^⚠
• ZwThawTransactions^⚠
• ZwTraceControl^⚠
• ZwTraceEvent^⚠
• ZwTranslateFilePath^⚠
• ZwUmsThreadYield^⚠
• ZwUnloadDriver^⚠
• ZwUnloadKey^⚠
• ZwUnloadKey2^⚠
• ZwUnloadKeyEx^⚠
• ZwUnlockFile^⚠
• ZwUnlockVirtualMemory^⚠
• ZwUnmapViewOfSection^⚠
• ZwUnmapViewOfSectionEx^⚠
• ZwUnsubscribeWnfStateChange^⚠
• ZwUpdateWnfStateData^⚠
• ZwVdmControl^⚠
• ZwWaitForAlertByThreadId^⚠
• ZwWaitForDebugEvent^⚠
• ZwWaitForKeyedEvent^⚠
• ZwWaitForMultipleObjects^⚠
• ZwWaitForMultipleObjects32^⚠
• ZwWaitForSingleObject^⚠
• ZwWaitForWorkViaWorkerFactory^⚠
• ZwWaitHighEventPair^⚠
• ZwWaitLowEventPair^⚠
• ZwWorkerFactoryWorkerReady^⚠
• ZwWriteFile^⚠
• ZwWriteFileGather^⚠
• ZwWriteRequestData^⚠
• ZwWriteVirtualMemory^⚠
• ZwYieldExecution^⚠