Module windows_native::ntzwapi

Functions

• ZwAcceptConnectPort^⚠
• ZwAccessCheck^⚠
• ZwAccessCheckAndAuditAlarm^⚠
• ZwAccessCheckByType^⚠
• ZwAccessCheckByTypeAndAuditAlarm^⚠
• ZwAccessCheckByTypeResultList^⚠
• ZwAccessCheckByTypeResultListAndAuditAlarm^⚠
• ZwAccessCheckByTypeResultListAndAuditAlarmByHandle^⚠
• ZwAcquireCMFViewOwnership^⚠
• ZwAddAtom^⚠
• ZwAddAtomEx^⚠
• ZwAddBootEntry^⚠
• ZwAddDriverEntry^⚠
• ZwAdjustGroupsToken^⚠
• ZwAdjustPrivilegesToken^⚠
• ZwAdjustTokenClaimsAndDeviceGroups^⚠
• ZwAlertResumeThread^⚠
• ZwAlertThread^⚠
• ZwAlertThreadByThreadId^⚠
• ZwAllocateReserveObject^⚠
• ZwAllocateUserPhysicalPages^⚠
• ZwAllocateUserPhysicalPagesEx^⚠
• ZwAllocateUuids^⚠
• ZwAlpcAcceptConnectPort^⚠
• ZwAlpcCancelMessage^⚠
• ZwAlpcConnectPort^⚠
• ZwAlpcConnectPortEx^⚠
• ZwAlpcCreatePort^⚠
• ZwAlpcCreatePortSection^⚠
• ZwAlpcCreateResourceReserve^⚠
• ZwAlpcCreateSectionView^⚠
• ZwAlpcCreateSecurityContext^⚠
• ZwAlpcDeletePortSection^⚠
• ZwAlpcDeleteResourceReserve^⚠
• ZwAlpcDeleteSectionView^⚠
• ZwAlpcDeleteSecurityContext^⚠
• ZwAlpcDisconnectPort^⚠
• ZwAlpcImpersonateClientContainerOfPort^⚠
• ZwAlpcImpersonateClientOfPort^⚠
• ZwAlpcOpenSenderProcess^⚠
• ZwAlpcOpenSenderThread^⚠
• ZwAlpcQueryInformation^⚠
• ZwAlpcQueryInformationMessage^⚠
• ZwAlpcRevokeSecurityContext^⚠
• ZwAlpcSendWaitReceivePort^⚠
• ZwAlpcSetInformation^⚠
• ZwAreMappedFilesTheSame^⚠
• ZwAssignProcessToJobObject^⚠
• ZwAssociateWaitCompletionPacket^⚠
• ZwCallEnclave^⚠
• ZwCallbackReturn^⚠
• ZwCancelIoFile^⚠
• ZwCancelIoFileEx^⚠
• ZwCancelSynchronousIoFile^⚠
• ZwCancelTimer2^⚠
• ZwCancelWaitCompletionPacket^⚠
• ZwChangeProcessState^⚠
• ZwChangeThreadState^⚠
• ZwClearEvent^⚠
• ZwCloseObjectAuditAlarm^⚠
• ZwCompactKeys^⚠
• ZwCompareObjects^⚠
• ZwCompareSigningLevels^⚠
• ZwCompareTokens^⚠
• ZwCompleteConnectPort^⚠
• ZwCompressKey^⚠
• ZwConnectPort^⚠
• ZwContinue^⚠
• ZwContinueEx^⚠
• ZwCreateDebugObject^⚠
• ZwCreateDirectoryObjectEx^⚠
• ZwCreateEnclave^⚠
• ZwCreateEventPair^⚠
• ZwCreateIRTimer^⚠
• ZwCreateIoCompletion^⚠
• ZwCreateJobObject^⚠
• ZwCreateJobSet^⚠
• ZwCreateKeyedEvent^⚠
• ZwCreateLowBoxToken^⚠
• ZwCreateMailslotFile^⚠
• ZwCreateMutant^⚠
• ZwCreateNamedPipeFile^⚠
• ZwCreatePagingFile^⚠
• ZwCreatePartition^⚠
• ZwCreatePort^⚠
• ZwCreatePrivateNamespace^⚠
• ZwCreateProcess^⚠
• ZwCreateProcessEx^⚠
• ZwCreateProcessStateChange^⚠
• ZwCreateProfile^⚠
• ZwCreateProfileEx^⚠
• ZwCreateSectionEx^⚠
• ZwCreateSemaphore^⚠
• ZwCreateSymbolicLinkObject^⚠
• ZwCreateThread^⚠
• ZwCreateThreadEx^⚠
• ZwCreateThreadStateChange^⚠
• ZwCreateTimer2^⚠
• ZwCreateToken^⚠
• ZwCreateTokenEx^⚠
• ZwCreateUserProcess^⚠
• ZwCreateWaitCompletionPacket^⚠
• ZwCreateWaitablePort^⚠
• ZwCreateWnfStateName^⚠
• ZwCreateWorkerFactory^⚠
• ZwDebugActiveProcess^⚠
• ZwDebugContinue^⚠
• ZwDelayExecution^⚠
• ZwDeleteAtom^⚠
• ZwDeleteBootEntry^⚠
• ZwDeleteDriverEntry^⚠
• ZwDeleteObjectAuditAlarm^⚠
• ZwDeletePrivateNamespace^⚠
• ZwDeleteWnfStateData^⚠
• ZwDeleteWnfStateName^⚠
• ZwDisableLastKnownGood^⚠
• ZwEnableLastKnownGood^⚠
• ZwEnumerateBootEntries^⚠
• ZwEnumerateDriverEntries^⚠
• ZwEnumerateSystemEnvironmentValuesEx^⚠
• ZwExtendSection^⚠
• ZwFilterBootOption^⚠
• ZwFilterToken^⚠
• ZwFilterTokenEx^⚠
• ZwFindAtom^⚠
• ZwFlushInstallUILanguage^⚠
• ZwFlushInstructionCache^⚠
• ZwFlushProcessWriteBuffers^⚠
• ZwFlushWriteBuffer^⚠
• ZwFreeUserPhysicalPages^⚠
• ZwFreezeRegistry^⚠
• ZwFreezeTransactions^⚠
• ZwGetCachedSigningLevel^⚠
• ZwGetCompleteWnfStateSubscription^⚠
• ZwGetContextThread^⚠
• ZwGetCurrentProcessorNumber^⚠
• ZwGetCurrentProcessorNumberEx^⚠
• ZwGetDevicePowerState^⚠
• ZwGetMUIRegistryInfo^⚠
• ZwGetNextProcess^⚠
• ZwGetNextThread^⚠
• ZwGetNlsSectionPtr^⚠
• ZwGetPlugPlayEvent^⚠
• ZwGetWriteWatch^⚠
• ZwImpersonateAnonymousToken^⚠
• ZwImpersonateClientOfPort^⚠
• ZwImpersonateThread^⚠
• ZwInitializeEnclave^⚠
• ZwInitializeNlsFiles^⚠
• ZwInitializeRegistry^⚠
• ZwInitiatePowerAction^⚠
• ZwIsProcessInJob^⚠
• ZwIsSystemResumeAutomatic^⚠
• ZwIsUILanguageComitted^⚠
• ZwListenPort^⚠
• ZwLoadEnclaveData^⚠
• ZwLoadKey^⚠
• ZwLoadKey2^⚠
• ZwLoadKey3^⚠
• ZwLoadKeyEx^⚠
• ZwLockProductActivationKeys^⚠
• ZwLockRegistryKey^⚠
• ZwLockVirtualMemory^⚠
• ZwMakePermanentObject^⚠
• ZwManagePartition^⚠
• ZwMapCMFModule^⚠
• ZwMapUserPhysicalPages^⚠
• ZwMapUserPhysicalPagesScatter^⚠
• ZwModifyBootEntry^⚠
• ZwModifyDriverEntry^⚠
• ZwNotifyChangeDirectoryFile^⚠
• ZwNotifyChangeDirectoryFileEx^⚠
• ZwNotifyChangeMultipleKeys^⚠
• ZwNotifyChangeSession^⚠
• ZwOpenEventPair^⚠
• ZwOpenIoCompletion^⚠
• ZwOpenJobObject^⚠
• ZwOpenKeyedEvent^⚠
• ZwOpenMutant^⚠
• ZwOpenObjectAuditAlarm^⚠
• ZwOpenPartition^⚠
• ZwOpenPrivateNamespace^⚠
• ZwOpenSemaphore^⚠
• ZwOpenSession^⚠
• ZwOpenThread^⚠
• ZwOpenThreadToken^⚠
• ZwPlugPlayControl^⚠
• ZwPrivilegeCheck^⚠
• ZwPrivilegeObjectAuditAlarm^⚠
• ZwPrivilegedServiceAuditAlarm^⚠
• ZwPropagationComplete^⚠
• ZwPropagationFailed^⚠
• ZwProtectVirtualMemory^⚠
• ZwPulseEvent^⚠
• ZwQueryAttributesFile^⚠
• ZwQueryBootEntryOrder^⚠
• ZwQueryBootOptions^⚠
• ZwQueryDebugFilterState^⚠
• ZwQueryDefaultLocale^⚠
• ZwQueryDefaultUILanguage^⚠
• ZwQueryDirectoryObject^⚠
• ZwQueryDriverEntryOrder^⚠
• ZwQueryEvent^⚠
• ZwQueryInformationAtom^⚠
• ZwQueryInformationJobObject^⚠
• ZwQueryInformationPort^⚠
• ZwQueryInformationProcess^⚠
• ZwQueryInformationThread^⚠
• ZwQueryInformationWorkerFactory^⚠
• ZwQueryInstallUILanguage^⚠
• ZwQueryIntervalProfile^⚠
• ZwQueryIoCompletion^⚠
• ZwQueryLicenseValue^⚠
• ZwQueryMultipleValueKey^⚠
• ZwQueryMutant^⚠
• ZwQueryOpenSubKeys^⚠
• ZwQueryOpenSubKeysEx^⚠
• ZwQueryPerformanceCounter^⚠
• ZwQuerySection^⚠
• ZwQuerySecurityAttributesToken^⚠
• ZwQuerySemaphore^⚠
• ZwQuerySystemEnvironmentValue^⚠
• ZwQuerySystemEnvironmentValueEx^⚠
• ZwQuerySystemInformation^⚠
• ZwQuerySystemInformationEx^⚠
• ZwQuerySystemTime^⚠
• ZwQueryTimer^⚠
• ZwQueryTimerResolution^⚠
• ZwQueryWnfStateData^⚠
• ZwQueryWnfStateNameInformation^⚠
• ZwQueueApcThread^⚠
• ZwQueueApcThreadEx^⚠
• ZwQueueApcThreadEx2^⚠
• ZwRaiseException^⚠
• ZwRaiseHardError^⚠
• ZwReadFileScatter^⚠
• ZwReadRequestData^⚠
• ZwReadVirtualMemory^⚠
• ZwRegisterProtocolAddressInformation^⚠
• ZwRegisterThreadTerminatePort^⚠
• ZwReleaseCMFViewOwnership^⚠
• ZwReleaseKeyedEvent^⚠
• ZwReleaseMutant^⚠
• ZwReleaseSemaphore^⚠
• ZwReleaseWorkerFactoryWorker^⚠
• ZwRemoveIoCompletion^⚠
• ZwRemoveIoCompletionEx^⚠
• ZwRemoveProcessDebug^⚠
• ZwRenameTransactionManager^⚠
• ZwReplaceKey^⚠
• ZwReplacePartitionUnit^⚠
• ZwReplyPort^⚠
• ZwReplyWaitReceivePort^⚠
• ZwReplyWaitReceivePortEx^⚠
• ZwReplyWaitReplyPort^⚠
• ZwRequestPort^⚠
• ZwRequestWaitReplyPort^⚠
• ZwRequestWakeupLatency^⚠
• ZwResetEvent^⚠
• ZwResetWriteWatch^⚠
• ZwResumeProcess^⚠
• ZwResumeThread^⚠
• ZwRevertContainerImpersonation^⚠
• ZwSaveMergedKeys^⚠
• ZwSecureConnectPort^⚠
• ZwSerializeBoot^⚠
• ZwSetBootEntryOrder^⚠
• ZwSetBootOptions^⚠
• ZwSetCachedSigningLevel^⚠
• ZwSetContextThread^⚠
• ZwSetDebugFilterState^⚠
• ZwSetDefaultHardErrorPort^⚠
• ZwSetDefaultLocale^⚠
• ZwSetDefaultUILanguage^⚠
• ZwSetDriverEntryOrder^⚠
• ZwSetEventBoostPriority^⚠
• ZwSetHighEventPair^⚠
• ZwSetHighWaitLowEventPair^⚠
• ZwSetIRTimer^⚠
• ZwSetInformationDebugObject^⚠
• ZwSetInformationJobObject^⚠
• ZwSetInformationObject^⚠
• ZwSetInformationProcess^⚠
• ZwSetInformationSymbolicLink^⚠
• ZwSetInformationWorkerFactory^⚠
• ZwSetIntervalProfile^⚠
• ZwSetIoCompletion^⚠
• ZwSetIoCompletionEx^⚠
• ZwSetLdtEntries^⚠
• ZwSetLowEventPair^⚠
• ZwSetLowWaitHighEventPair^⚠
• ZwSetSystemEnvironmentValue^⚠
• ZwSetSystemEnvironmentValueEx^⚠
• ZwSetSystemInformation^⚠
• ZwSetSystemPowerState^⚠
• ZwSetSystemTime^⚠
• ZwSetThreadExecutionState^⚠
• ZwSetTimer2^⚠
• ZwSetTimerResolution^⚠
• ZwSetUuidSeed^⚠
• ZwSetWnfProcessNotificationEvent^⚠
• ZwShutdownSystem^⚠
• ZwShutdownWorkerFactory^⚠
• ZwSignalAndWaitForSingleObject^⚠
• ZwStartProfile^⚠
• ZwStopProfile^⚠
• ZwSubscribeWnfStateChange^⚠
• ZwSuspendProcess^⚠
• ZwSuspendThread^⚠
• ZwSystemDebugControl^⚠
• ZwTerminateEnclave^⚠
• ZwTerminateJobObject^⚠
• ZwTerminateThread^⚠
• ZwTestAlert^⚠
• ZwThawRegistry^⚠
• ZwThawTransactions^⚠
• ZwTraceControl^⚠
• ZwTraceEvent^⚠
• ZwTranslateFilePath^⚠
• ZwUmsThreadYield^⚠
• ZwUnloadKey^⚠
• ZwUnloadKey2^⚠
• ZwUnloadKeyEx^⚠
• ZwUnlockVirtualMemory^⚠
• ZwUnmapViewOfSectionEx^⚠
• ZwUnsubscribeWnfStateChange^⚠
• ZwUpdateWnfStateData^⚠
• ZwVdmControl^⚠
• ZwWaitForAlertByThreadId^⚠
• ZwWaitForDebugEvent^⚠
• ZwWaitForKeyedEvent^⚠
• ZwWaitForMultipleObjects^⚠
• ZwWaitForMultipleObjects32^⚠
• ZwWaitForWorkViaWorkerFactory^⚠
• ZwWaitHighEventPair^⚠
• ZwWaitLowEventPair^⚠
• ZwWorkerFactoryWorkerReady^⚠
• ZwWriteFileGather^⚠
• ZwWriteRequestData^⚠
• ZwWriteVirtualMemory^⚠
• ZwYieldExecution^⚠