From: Alex Henrie alexhenrie24@gmail.com
The stub is enough for TokenViewer.exe to start up and display its user interface.
Based on a patch by Nikolay Sivov.
Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=45119 --- dlls/ntdll/ntdll.spec | 1 + dlls/ntdll/ntsyscalls.h | 652 +++++++++++++++++++------------------- dlls/ntdll/unix/process.c | 12 + dlls/wow64/process.c | 21 ++ include/winternl.h | 1 + 5 files changed, 362 insertions(+), 325 deletions(-)
diff --git a/dlls/ntdll/ntdll.spec b/dlls/ntdll/ntdll.spec index 014c221e59f..1f05f703546 100644 --- a/dlls/ntdll/ntdll.spec +++ b/dlls/ntdll/ntdll.spec @@ -231,6 +231,7 @@ @ stdcall -norelay -syscall NtGetContextThread(long ptr) @ stdcall -syscall NtGetCurrentProcessorNumber() # @ stub NtGetDevicePowerState +@ stdcall -syscall NtGetNextProcess(ptr long long long ptr) @ stdcall -syscall NtGetNextThread(ptr ptr long long long ptr) @ stdcall -syscall NtGetNlsSectionPtr(long long long ptr ptr) # @ stub NtGetPlugPlayEvent diff --git a/dlls/ntdll/ntsyscalls.h b/dlls/ntdll/ntsyscalls.h index 53045c5f6be..9d473dcb51e 100644 --- a/dlls/ntdll/ntsyscalls.h +++ b/dlls/ntdll/ntsyscalls.h @@ -77,171 +77,172 @@ SYSCALL_ENTRY( 0x0049, NtFsControlFile, 40 ) \ SYSCALL_ENTRY( 0x004a, NtGetContextThread, 8 ) \ SYSCALL_ENTRY( 0x004b, NtGetCurrentProcessorNumber, 0 ) \ - SYSCALL_ENTRY( 0x004c, NtGetNextThread, 24 ) \ - SYSCALL_ENTRY( 0x004d, NtGetNlsSectionPtr, 20 ) \ - SYSCALL_ENTRY( 0x004e, NtGetWriteWatch, 28 ) \ - SYSCALL_ENTRY( 0x004f, NtImpersonateAnonymousToken, 4 ) \ - SYSCALL_ENTRY( 0x0050, NtInitializeNlsFiles, 12 ) \ - SYSCALL_ENTRY( 0x0051, NtInitiatePowerAction, 16 ) \ - SYSCALL_ENTRY( 0x0052, NtIsProcessInJob, 8 ) \ - SYSCALL_ENTRY( 0x0053, NtListenPort, 8 ) \ - SYSCALL_ENTRY( 0x0054, NtLoadDriver, 4 ) \ - SYSCALL_ENTRY( 0x0055, NtLoadKey, 8 ) \ - SYSCALL_ENTRY( 0x0056, NtLoadKey2, 12 ) \ - SYSCALL_ENTRY( 0x0057, NtLoadKeyEx, 32 ) \ - SYSCALL_ENTRY( 0x0058, NtLockFile, 40 ) \ - SYSCALL_ENTRY( 0x0059, NtLockVirtualMemory, 16 ) \ - SYSCALL_ENTRY( 0x005a, NtMakePermanentObject, 4 ) \ - SYSCALL_ENTRY( 0x005b, NtMakeTemporaryObject, 4 ) \ - SYSCALL_ENTRY( 0x005c, NtMapViewOfSection, 40 ) \ - SYSCALL_ENTRY( 0x005d, NtMapViewOfSectionEx, 36 ) \ - SYSCALL_ENTRY( 0x005e, NtNotifyChangeDirectoryFile, 36 ) \ - SYSCALL_ENTRY( 0x005f, NtNotifyChangeKey, 40 ) \ - SYSCALL_ENTRY( 0x0060, NtNotifyChangeMultipleKeys, 48 ) \ - SYSCALL_ENTRY( 0x0061, NtOpenDirectoryObject, 12 ) \ - SYSCALL_ENTRY( 0x0062, NtOpenEvent, 12 ) \ - SYSCALL_ENTRY( 0x0063, NtOpenFile, 24 ) \ - SYSCALL_ENTRY( 0x0064, NtOpenIoCompletion, 12 ) \ - SYSCALL_ENTRY( 0x0065, NtOpenJobObject, 12 ) \ - SYSCALL_ENTRY( 0x0066, NtOpenKey, 12 ) \ - SYSCALL_ENTRY( 0x0067, NtOpenKeyEx, 16 ) \ - SYSCALL_ENTRY( 0x0068, NtOpenKeyTransacted, 16 ) \ - SYSCALL_ENTRY( 0x0069, NtOpenKeyTransactedEx, 20 ) \ - SYSCALL_ENTRY( 0x006a, NtOpenKeyedEvent, 12 ) \ - SYSCALL_ENTRY( 0x006b, NtOpenMutant, 12 ) \ - SYSCALL_ENTRY( 0x006c, NtOpenProcess, 16 ) \ - SYSCALL_ENTRY( 0x006d, NtOpenProcessToken, 12 ) \ - SYSCALL_ENTRY( 0x006e, NtOpenProcessTokenEx, 16 ) \ - SYSCALL_ENTRY( 0x006f, NtOpenSection, 12 ) \ - SYSCALL_ENTRY( 0x0070, NtOpenSemaphore, 12 ) \ - SYSCALL_ENTRY( 0x0071, NtOpenSymbolicLinkObject, 12 ) \ - SYSCALL_ENTRY( 0x0072, NtOpenThread, 16 ) \ - SYSCALL_ENTRY( 0x0073, NtOpenThreadToken, 16 ) \ - SYSCALL_ENTRY( 0x0074, NtOpenThreadTokenEx, 20 ) \ - SYSCALL_ENTRY( 0x0075, NtOpenTimer, 12 ) \ - SYSCALL_ENTRY( 0x0076, NtPowerInformation, 20 ) \ - SYSCALL_ENTRY( 0x0077, NtPrivilegeCheck, 12 ) \ - SYSCALL_ENTRY( 0x0078, NtProtectVirtualMemory, 20 ) \ - SYSCALL_ENTRY( 0x0079, NtPulseEvent, 8 ) \ - SYSCALL_ENTRY( 0x007a, NtQueryAttributesFile, 8 ) \ - SYSCALL_ENTRY( 0x007b, NtQueryDefaultLocale, 8 ) \ - SYSCALL_ENTRY( 0x007c, NtQueryDefaultUILanguage, 4 ) \ - SYSCALL_ENTRY( 0x007d, NtQueryDirectoryFile, 44 ) \ - SYSCALL_ENTRY( 0x007e, NtQueryDirectoryObject, 28 ) \ - SYSCALL_ENTRY( 0x007f, NtQueryEaFile, 36 ) \ - SYSCALL_ENTRY( 0x0080, NtQueryEvent, 20 ) \ - SYSCALL_ENTRY( 0x0081, NtQueryFullAttributesFile, 8 ) \ - SYSCALL_ENTRY( 0x0082, NtQueryInformationAtom, 20 ) \ - SYSCALL_ENTRY( 0x0083, NtQueryInformationFile, 20 ) \ - SYSCALL_ENTRY( 0x0084, NtQueryInformationJobObject, 20 ) \ - SYSCALL_ENTRY( 0x0085, NtQueryInformationProcess, 20 ) \ - SYSCALL_ENTRY( 0x0086, NtQueryInformationThread, 20 ) \ - SYSCALL_ENTRY( 0x0087, NtQueryInformationToken, 20 ) \ - SYSCALL_ENTRY( 0x0088, NtQueryInstallUILanguage, 4 ) \ - SYSCALL_ENTRY( 0x0089, NtQueryIoCompletion, 20 ) \ - SYSCALL_ENTRY( 0x008a, NtQueryKey, 20 ) \ - SYSCALL_ENTRY( 0x008b, NtQueryLicenseValue, 20 ) \ - SYSCALL_ENTRY( 0x008c, NtQueryMultipleValueKey, 24 ) \ - SYSCALL_ENTRY( 0x008d, NtQueryMutant, 20 ) \ - SYSCALL_ENTRY( 0x008e, NtQueryObject, 20 ) \ - SYSCALL_ENTRY( 0x008f, NtQueryPerformanceCounter, 8 ) \ - SYSCALL_ENTRY( 0x0090, NtQuerySection, 20 ) \ - SYSCALL_ENTRY( 0x0091, NtQuerySecurityObject, 20 ) \ - SYSCALL_ENTRY( 0x0092, NtQuerySemaphore, 20 ) \ - SYSCALL_ENTRY( 0x0093, NtQuerySymbolicLinkObject, 12 ) \ - SYSCALL_ENTRY( 0x0094, NtQuerySystemEnvironmentValue, 16 ) \ - SYSCALL_ENTRY( 0x0095, NtQuerySystemEnvironmentValueEx, 20 ) \ - SYSCALL_ENTRY( 0x0096, NtQuerySystemInformation, 16 ) \ - SYSCALL_ENTRY( 0x0097, NtQuerySystemInformationEx, 24 ) \ - SYSCALL_ENTRY( 0x0098, NtQuerySystemTime, 4 ) \ - SYSCALL_ENTRY( 0x0099, NtQueryTimer, 20 ) \ - SYSCALL_ENTRY( 0x009a, NtQueryTimerResolution, 12 ) \ - SYSCALL_ENTRY( 0x009b, NtQueryValueKey, 24 ) \ - SYSCALL_ENTRY( 0x009c, NtQueryVirtualMemory, 24 ) \ - SYSCALL_ENTRY( 0x009d, NtQueryVolumeInformationFile, 20 ) \ - SYSCALL_ENTRY( 0x009e, NtQueueApcThread, 20 ) \ - SYSCALL_ENTRY( 0x009f, NtRaiseException, 12 ) \ - SYSCALL_ENTRY( 0x00a0, NtRaiseHardError, 24 ) \ - SYSCALL_ENTRY( 0x00a1, NtReadFile, 36 ) \ - SYSCALL_ENTRY( 0x00a2, NtReadFileScatter, 36 ) \ - SYSCALL_ENTRY( 0x00a3, NtReadVirtualMemory, 20 ) \ - SYSCALL_ENTRY( 0x00a4, NtRegisterThreadTerminatePort, 4 ) \ - SYSCALL_ENTRY( 0x00a5, NtReleaseKeyedEvent, 16 ) \ - SYSCALL_ENTRY( 0x00a6, NtReleaseMutant, 8 ) \ - SYSCALL_ENTRY( 0x00a7, NtReleaseSemaphore, 12 ) \ - SYSCALL_ENTRY( 0x00a8, NtRemoveIoCompletion, 20 ) \ - SYSCALL_ENTRY( 0x00a9, NtRemoveIoCompletionEx, 24 ) \ - SYSCALL_ENTRY( 0x00aa, NtRemoveProcessDebug, 8 ) \ - SYSCALL_ENTRY( 0x00ab, NtRenameKey, 8 ) \ - SYSCALL_ENTRY( 0x00ac, NtReplaceKey, 12 ) \ - SYSCALL_ENTRY( 0x00ad, NtReplyWaitReceivePort, 16 ) \ - SYSCALL_ENTRY( 0x00ae, NtRequestWaitReplyPort, 12 ) \ - SYSCALL_ENTRY( 0x00af, NtResetEvent, 8 ) \ - SYSCALL_ENTRY( 0x00b0, NtResetWriteWatch, 12 ) \ - SYSCALL_ENTRY( 0x00b1, NtRestoreKey, 12 ) \ - SYSCALL_ENTRY( 0x00b2, NtResumeProcess, 4 ) \ - SYSCALL_ENTRY( 0x00b3, NtResumeThread, 8 ) \ - SYSCALL_ENTRY( 0x00b4, NtRollbackTransaction, 8 ) \ - SYSCALL_ENTRY( 0x00b5, NtSaveKey, 8 ) \ - SYSCALL_ENTRY( 0x00b6, NtSecureConnectPort, 36 ) \ - SYSCALL_ENTRY( 0x00b7, NtSetContextThread, 8 ) \ - SYSCALL_ENTRY( 0x00b8, NtSetDebugFilterState, 12 ) \ - SYSCALL_ENTRY( 0x00b9, NtSetDefaultLocale, 8 ) \ - SYSCALL_ENTRY( 0x00ba, NtSetDefaultUILanguage, 4 ) \ - SYSCALL_ENTRY( 0x00bb, NtSetEaFile, 16 ) \ - SYSCALL_ENTRY( 0x00bc, NtSetEvent, 8 ) \ - SYSCALL_ENTRY( 0x00bd, NtSetInformationDebugObject, 20 ) \ - SYSCALL_ENTRY( 0x00be, NtSetInformationFile, 20 ) \ - SYSCALL_ENTRY( 0x00bf, NtSetInformationJobObject, 16 ) \ - SYSCALL_ENTRY( 0x00c0, NtSetInformationKey, 16 ) \ - SYSCALL_ENTRY( 0x00c1, NtSetInformationObject, 16 ) \ - SYSCALL_ENTRY( 0x00c2, NtSetInformationProcess, 16 ) \ - SYSCALL_ENTRY( 0x00c3, NtSetInformationThread, 16 ) \ - SYSCALL_ENTRY( 0x00c4, NtSetInformationToken, 16 ) \ - SYSCALL_ENTRY( 0x00c5, NtSetInformationVirtualMemory, 24 ) \ - SYSCALL_ENTRY( 0x00c6, NtSetIntervalProfile, 8 ) \ - SYSCALL_ENTRY( 0x00c7, NtSetIoCompletion, 20 ) \ - SYSCALL_ENTRY( 0x00c8, NtSetLdtEntries, 24 ) \ - SYSCALL_ENTRY( 0x00c9, NtSetSecurityObject, 12 ) \ - SYSCALL_ENTRY( 0x00ca, NtSetSystemInformation, 12 ) \ - SYSCALL_ENTRY( 0x00cb, NtSetSystemTime, 8 ) \ - SYSCALL_ENTRY( 0x00cc, NtSetThreadExecutionState, 8 ) \ - SYSCALL_ENTRY( 0x00cd, NtSetTimer, 28 ) \ - SYSCALL_ENTRY( 0x00ce, NtSetTimerResolution, 12 ) \ - SYSCALL_ENTRY( 0x00cf, NtSetValueKey, 24 ) \ - SYSCALL_ENTRY( 0x00d0, NtSetVolumeInformationFile, 20 ) \ - SYSCALL_ENTRY( 0x00d1, NtShutdownSystem, 4 ) \ - SYSCALL_ENTRY( 0x00d2, NtSignalAndWaitForSingleObject, 16 ) \ - SYSCALL_ENTRY( 0x00d3, NtSuspendProcess, 4 ) \ - SYSCALL_ENTRY( 0x00d4, NtSuspendThread, 8 ) \ - SYSCALL_ENTRY( 0x00d5, NtSystemDebugControl, 24 ) \ - SYSCALL_ENTRY( 0x00d6, NtTerminateJobObject, 8 ) \ - SYSCALL_ENTRY( 0x00d7, NtTerminateProcess, 8 ) \ - SYSCALL_ENTRY( 0x00d8, NtTerminateThread, 8 ) \ - SYSCALL_ENTRY( 0x00d9, NtTestAlert, 0 ) \ - SYSCALL_ENTRY( 0x00da, NtTraceControl, 24 ) \ - SYSCALL_ENTRY( 0x00db, NtUnloadDriver, 4 ) \ - SYSCALL_ENTRY( 0x00dc, NtUnloadKey, 4 ) \ - SYSCALL_ENTRY( 0x00dd, NtUnlockFile, 20 ) \ - SYSCALL_ENTRY( 0x00de, NtUnlockVirtualMemory, 16 ) \ - SYSCALL_ENTRY( 0x00df, NtUnmapViewOfSection, 8 ) \ - SYSCALL_ENTRY( 0x00e0, NtUnmapViewOfSectionEx, 12 ) \ - SYSCALL_ENTRY( 0x00e1, NtWaitForAlertByThreadId, 8 ) \ - SYSCALL_ENTRY( 0x00e2, NtWaitForDebugEvent, 16 ) \ - SYSCALL_ENTRY( 0x00e3, NtWaitForKeyedEvent, 16 ) \ - SYSCALL_ENTRY( 0x00e4, NtWaitForMultipleObjects, 20 ) \ - SYSCALL_ENTRY( 0x00e5, NtWaitForSingleObject, 12 ) \ - SYSCALL_ENTRY( 0x00e6, NtWow64AllocateVirtualMemory64, 28 ) \ - SYSCALL_ENTRY( 0x00e7, NtWow64GetNativeSystemInformation, 16 ) \ - SYSCALL_ENTRY( 0x00e8, NtWow64IsProcessorFeaturePresent, 4 ) \ - SYSCALL_ENTRY( 0x00e9, NtWow64ReadVirtualMemory64, 28 ) \ - SYSCALL_ENTRY( 0x00ea, NtWow64WriteVirtualMemory64, 28 ) \ - SYSCALL_ENTRY( 0x00eb, NtWriteFile, 36 ) \ - SYSCALL_ENTRY( 0x00ec, NtWriteFileGather, 36 ) \ - SYSCALL_ENTRY( 0x00ed, NtWriteVirtualMemory, 20 ) \ - SYSCALL_ENTRY( 0x00ee, NtYieldExecution, 0 ) \ - SYSCALL_ENTRY( 0x00ef, wine_nt_to_unix_file_name, 16 ) \ - SYSCALL_ENTRY( 0x00f0, wine_unix_to_nt_file_name, 12 ) + SYSCALL_ENTRY( 0x004c, NtGetNextProcess, 20 ) \ + SYSCALL_ENTRY( 0x004d, NtGetNextThread, 24 ) \ + SYSCALL_ENTRY( 0x004e, NtGetNlsSectionPtr, 20 ) \ + SYSCALL_ENTRY( 0x004f, NtGetWriteWatch, 28 ) \ + SYSCALL_ENTRY( 0x0050, NtImpersonateAnonymousToken, 4 ) \ + SYSCALL_ENTRY( 0x0051, NtInitializeNlsFiles, 12 ) \ + SYSCALL_ENTRY( 0x0052, NtInitiatePowerAction, 16 ) \ + SYSCALL_ENTRY( 0x0053, NtIsProcessInJob, 8 ) \ + SYSCALL_ENTRY( 0x0054, NtListenPort, 8 ) \ + SYSCALL_ENTRY( 0x0055, NtLoadDriver, 4 ) \ + SYSCALL_ENTRY( 0x0056, NtLoadKey, 8 ) \ + SYSCALL_ENTRY( 0x0057, NtLoadKey2, 12 ) \ + SYSCALL_ENTRY( 0x0058, NtLoadKeyEx, 32 ) \ + SYSCALL_ENTRY( 0x0059, NtLockFile, 40 ) \ + SYSCALL_ENTRY( 0x005a, NtLockVirtualMemory, 16 ) \ + SYSCALL_ENTRY( 0x005b, NtMakePermanentObject, 4 ) \ + SYSCALL_ENTRY( 0x005c, NtMakeTemporaryObject, 4 ) \ + SYSCALL_ENTRY( 0x005d, NtMapViewOfSection, 40 ) \ + SYSCALL_ENTRY( 0x005e, NtMapViewOfSectionEx, 36 ) \ + SYSCALL_ENTRY( 0x005f, NtNotifyChangeDirectoryFile, 36 ) \ + SYSCALL_ENTRY( 0x0060, NtNotifyChangeKey, 40 ) \ + SYSCALL_ENTRY( 0x0061, NtNotifyChangeMultipleKeys, 48 ) \ + SYSCALL_ENTRY( 0x0062, NtOpenDirectoryObject, 12 ) \ + SYSCALL_ENTRY( 0x0063, NtOpenEvent, 12 ) \ + SYSCALL_ENTRY( 0x0064, NtOpenFile, 24 ) \ + SYSCALL_ENTRY( 0x0065, NtOpenIoCompletion, 12 ) \ + SYSCALL_ENTRY( 0x0066, NtOpenJobObject, 12 ) \ + SYSCALL_ENTRY( 0x0067, NtOpenKey, 12 ) \ + SYSCALL_ENTRY( 0x0068, NtOpenKeyEx, 16 ) \ + SYSCALL_ENTRY( 0x0069, NtOpenKeyTransacted, 16 ) \ + SYSCALL_ENTRY( 0x006a, NtOpenKeyTransactedEx, 20 ) \ + SYSCALL_ENTRY( 0x006b, NtOpenKeyedEvent, 12 ) \ + SYSCALL_ENTRY( 0x006c, NtOpenMutant, 12 ) \ + SYSCALL_ENTRY( 0x006d, NtOpenProcess, 16 ) \ + SYSCALL_ENTRY( 0x006e, NtOpenProcessToken, 12 ) \ + SYSCALL_ENTRY( 0x006f, NtOpenProcessTokenEx, 16 ) \ + SYSCALL_ENTRY( 0x0070, NtOpenSection, 12 ) \ + SYSCALL_ENTRY( 0x0071, NtOpenSemaphore, 12 ) \ + SYSCALL_ENTRY( 0x0072, NtOpenSymbolicLinkObject, 12 ) \ + SYSCALL_ENTRY( 0x0073, NtOpenThread, 16 ) \ + SYSCALL_ENTRY( 0x0074, NtOpenThreadToken, 16 ) \ + SYSCALL_ENTRY( 0x0075, NtOpenThreadTokenEx, 20 ) \ + SYSCALL_ENTRY( 0x0076, NtOpenTimer, 12 ) \ + SYSCALL_ENTRY( 0x0077, NtPowerInformation, 20 ) \ + SYSCALL_ENTRY( 0x0078, NtPrivilegeCheck, 12 ) \ + SYSCALL_ENTRY( 0x0079, NtProtectVirtualMemory, 20 ) \ + SYSCALL_ENTRY( 0x007a, NtPulseEvent, 8 ) \ + SYSCALL_ENTRY( 0x007b, NtQueryAttributesFile, 8 ) \ + SYSCALL_ENTRY( 0x007c, NtQueryDefaultLocale, 8 ) \ + SYSCALL_ENTRY( 0x007d, NtQueryDefaultUILanguage, 4 ) \ + SYSCALL_ENTRY( 0x007e, NtQueryDirectoryFile, 44 ) \ + SYSCALL_ENTRY( 0x007f, NtQueryDirectoryObject, 28 ) \ + SYSCALL_ENTRY( 0x0080, NtQueryEaFile, 36 ) \ + SYSCALL_ENTRY( 0x0081, NtQueryEvent, 20 ) \ + SYSCALL_ENTRY( 0x0082, NtQueryFullAttributesFile, 8 ) \ + SYSCALL_ENTRY( 0x0083, NtQueryInformationAtom, 20 ) \ + SYSCALL_ENTRY( 0x0084, NtQueryInformationFile, 20 ) \ + SYSCALL_ENTRY( 0x0085, NtQueryInformationJobObject, 20 ) \ + SYSCALL_ENTRY( 0x0086, NtQueryInformationProcess, 20 ) \ + SYSCALL_ENTRY( 0x0087, NtQueryInformationThread, 20 ) \ + SYSCALL_ENTRY( 0x0088, NtQueryInformationToken, 20 ) \ + SYSCALL_ENTRY( 0x0089, NtQueryInstallUILanguage, 4 ) \ + SYSCALL_ENTRY( 0x008a, NtQueryIoCompletion, 20 ) \ + SYSCALL_ENTRY( 0x008b, NtQueryKey, 20 ) \ + SYSCALL_ENTRY( 0x008c, NtQueryLicenseValue, 20 ) \ + SYSCALL_ENTRY( 0x008d, NtQueryMultipleValueKey, 24 ) \ + SYSCALL_ENTRY( 0x008e, NtQueryMutant, 20 ) \ + SYSCALL_ENTRY( 0x008f, NtQueryObject, 20 ) \ + SYSCALL_ENTRY( 0x0090, NtQueryPerformanceCounter, 8 ) \ + SYSCALL_ENTRY( 0x0091, NtQuerySection, 20 ) \ + SYSCALL_ENTRY( 0x0092, NtQuerySecurityObject, 20 ) \ + SYSCALL_ENTRY( 0x0093, NtQuerySemaphore, 20 ) \ + SYSCALL_ENTRY( 0x0094, NtQuerySymbolicLinkObject, 12 ) \ + SYSCALL_ENTRY( 0x0095, NtQuerySystemEnvironmentValue, 16 ) \ + SYSCALL_ENTRY( 0x0096, NtQuerySystemEnvironmentValueEx, 20 ) \ + SYSCALL_ENTRY( 0x0097, NtQuerySystemInformation, 16 ) \ + SYSCALL_ENTRY( 0x0098, NtQuerySystemInformationEx, 24 ) \ + SYSCALL_ENTRY( 0x0099, NtQuerySystemTime, 4 ) \ + SYSCALL_ENTRY( 0x009a, NtQueryTimer, 20 ) \ + SYSCALL_ENTRY( 0x009b, NtQueryTimerResolution, 12 ) \ + SYSCALL_ENTRY( 0x009c, NtQueryValueKey, 24 ) \ + SYSCALL_ENTRY( 0x009d, NtQueryVirtualMemory, 24 ) \ + SYSCALL_ENTRY( 0x009e, NtQueryVolumeInformationFile, 20 ) \ + SYSCALL_ENTRY( 0x009f, NtQueueApcThread, 20 ) \ + SYSCALL_ENTRY( 0x00a0, NtRaiseException, 12 ) \ + SYSCALL_ENTRY( 0x00a1, NtRaiseHardError, 24 ) \ + SYSCALL_ENTRY( 0x00a2, NtReadFile, 36 ) \ + SYSCALL_ENTRY( 0x00a3, NtReadFileScatter, 36 ) \ + SYSCALL_ENTRY( 0x00a4, NtReadVirtualMemory, 20 ) \ + SYSCALL_ENTRY( 0x00a5, NtRegisterThreadTerminatePort, 4 ) \ + SYSCALL_ENTRY( 0x00a6, NtReleaseKeyedEvent, 16 ) \ + SYSCALL_ENTRY( 0x00a7, NtReleaseMutant, 8 ) \ + SYSCALL_ENTRY( 0x00a8, NtReleaseSemaphore, 12 ) \ + SYSCALL_ENTRY( 0x00a9, NtRemoveIoCompletion, 20 ) \ + SYSCALL_ENTRY( 0x00aa, NtRemoveIoCompletionEx, 24 ) \ + SYSCALL_ENTRY( 0x00ab, NtRemoveProcessDebug, 8 ) \ + SYSCALL_ENTRY( 0x00ac, NtRenameKey, 8 ) \ + SYSCALL_ENTRY( 0x00ad, NtReplaceKey, 12 ) \ + SYSCALL_ENTRY( 0x00ae, NtReplyWaitReceivePort, 16 ) \ + SYSCALL_ENTRY( 0x00af, NtRequestWaitReplyPort, 12 ) \ + SYSCALL_ENTRY( 0x00b0, NtResetEvent, 8 ) \ + SYSCALL_ENTRY( 0x00b1, NtResetWriteWatch, 12 ) \ + SYSCALL_ENTRY( 0x00b2, NtRestoreKey, 12 ) \ + SYSCALL_ENTRY( 0x00b3, NtResumeProcess, 4 ) \ + SYSCALL_ENTRY( 0x00b4, NtResumeThread, 8 ) \ + SYSCALL_ENTRY( 0x00b5, NtRollbackTransaction, 8 ) \ + SYSCALL_ENTRY( 0x00b6, NtSaveKey, 8 ) \ + SYSCALL_ENTRY( 0x00b7, NtSecureConnectPort, 36 ) \ + SYSCALL_ENTRY( 0x00b8, NtSetContextThread, 8 ) \ + SYSCALL_ENTRY( 0x00b9, NtSetDebugFilterState, 12 ) \ + SYSCALL_ENTRY( 0x00ba, NtSetDefaultLocale, 8 ) \ + SYSCALL_ENTRY( 0x00bb, NtSetDefaultUILanguage, 4 ) \ + SYSCALL_ENTRY( 0x00bc, NtSetEaFile, 16 ) \ + SYSCALL_ENTRY( 0x00bd, NtSetEvent, 8 ) \ + SYSCALL_ENTRY( 0x00be, NtSetInformationDebugObject, 20 ) \ + SYSCALL_ENTRY( 0x00bf, NtSetInformationFile, 20 ) \ + SYSCALL_ENTRY( 0x00c0, NtSetInformationJobObject, 16 ) \ + SYSCALL_ENTRY( 0x00c1, NtSetInformationKey, 16 ) \ + SYSCALL_ENTRY( 0x00c2, NtSetInformationObject, 16 ) \ + SYSCALL_ENTRY( 0x00c3, NtSetInformationProcess, 16 ) \ + SYSCALL_ENTRY( 0x00c4, NtSetInformationThread, 16 ) \ + SYSCALL_ENTRY( 0x00c5, NtSetInformationToken, 16 ) \ + SYSCALL_ENTRY( 0x00c6, NtSetInformationVirtualMemory, 24 ) \ + SYSCALL_ENTRY( 0x00c7, NtSetIntervalProfile, 8 ) \ + SYSCALL_ENTRY( 0x00c8, NtSetIoCompletion, 20 ) \ + SYSCALL_ENTRY( 0x00c9, NtSetLdtEntries, 24 ) \ + SYSCALL_ENTRY( 0x00ca, NtSetSecurityObject, 12 ) \ + SYSCALL_ENTRY( 0x00cb, NtSetSystemInformation, 12 ) \ + SYSCALL_ENTRY( 0x00cc, NtSetSystemTime, 8 ) \ + SYSCALL_ENTRY( 0x00cd, NtSetThreadExecutionState, 8 ) \ + SYSCALL_ENTRY( 0x00ce, NtSetTimer, 28 ) \ + SYSCALL_ENTRY( 0x00cf, NtSetTimerResolution, 12 ) \ + SYSCALL_ENTRY( 0x00d0, NtSetValueKey, 24 ) \ + SYSCALL_ENTRY( 0x00d1, NtSetVolumeInformationFile, 20 ) \ + SYSCALL_ENTRY( 0x00d2, NtShutdownSystem, 4 ) \ + SYSCALL_ENTRY( 0x00d3, NtSignalAndWaitForSingleObject, 16 ) \ + SYSCALL_ENTRY( 0x00d4, NtSuspendProcess, 4 ) \ + SYSCALL_ENTRY( 0x00d5, NtSuspendThread, 8 ) \ + SYSCALL_ENTRY( 0x00d6, NtSystemDebugControl, 24 ) \ + SYSCALL_ENTRY( 0x00d7, NtTerminateJobObject, 8 ) \ + SYSCALL_ENTRY( 0x00d8, NtTerminateProcess, 8 ) \ + SYSCALL_ENTRY( 0x00d9, NtTerminateThread, 8 ) \ + SYSCALL_ENTRY( 0x00da, NtTestAlert, 0 ) \ + SYSCALL_ENTRY( 0x00db, NtTraceControl, 24 ) \ + SYSCALL_ENTRY( 0x00dc, NtUnloadDriver, 4 ) \ + SYSCALL_ENTRY( 0x00dd, NtUnloadKey, 4 ) \ + SYSCALL_ENTRY( 0x00de, NtUnlockFile, 20 ) \ + SYSCALL_ENTRY( 0x00df, NtUnlockVirtualMemory, 16 ) \ + SYSCALL_ENTRY( 0x00e0, NtUnmapViewOfSection, 8 ) \ + SYSCALL_ENTRY( 0x00e1, NtUnmapViewOfSectionEx, 12 ) \ + SYSCALL_ENTRY( 0x00e2, NtWaitForAlertByThreadId, 8 ) \ + SYSCALL_ENTRY( 0x00e3, NtWaitForDebugEvent, 16 ) \ + SYSCALL_ENTRY( 0x00e4, NtWaitForKeyedEvent, 16 ) \ + SYSCALL_ENTRY( 0x00e5, NtWaitForMultipleObjects, 20 ) \ + SYSCALL_ENTRY( 0x00e6, NtWaitForSingleObject, 12 ) \ + SYSCALL_ENTRY( 0x00e7, NtWow64AllocateVirtualMemory64, 28 ) \ + SYSCALL_ENTRY( 0x00e8, NtWow64GetNativeSystemInformation, 16 ) \ + SYSCALL_ENTRY( 0x00e9, NtWow64IsProcessorFeaturePresent, 4 ) \ + SYSCALL_ENTRY( 0x00ea, NtWow64ReadVirtualMemory64, 28 ) \ + SYSCALL_ENTRY( 0x00eb, NtWow64WriteVirtualMemory64, 28 ) \ + SYSCALL_ENTRY( 0x00ec, NtWriteFile, 36 ) \ + SYSCALL_ENTRY( 0x00ed, NtWriteFileGather, 36 ) \ + SYSCALL_ENTRY( 0x00ee, NtWriteVirtualMemory, 20 ) \ + SYSCALL_ENTRY( 0x00ef, NtYieldExecution, 0 ) \ + SYSCALL_ENTRY( 0x00f0, wine_nt_to_unix_file_name, 16 ) \ + SYSCALL_ENTRY( 0x00f1, wine_unix_to_nt_file_name, 12 )
#define ALL_SYSCALLS64 \ SYSCALL_ENTRY( 0x0000, NtAcceptConnectPort, 48 ) \ @@ -320,163 +321,164 @@ SYSCALL_ENTRY( 0x0049, NtFsControlFile, 80 ) \ SYSCALL_ENTRY( 0x004a, NtGetContextThread, 16 ) \ SYSCALL_ENTRY( 0x004b, NtGetCurrentProcessorNumber, 0 ) \ - SYSCALL_ENTRY( 0x004c, NtGetNextThread, 48 ) \ - SYSCALL_ENTRY( 0x004d, NtGetNlsSectionPtr, 40 ) \ - SYSCALL_ENTRY( 0x004e, NtGetWriteWatch, 56 ) \ - SYSCALL_ENTRY( 0x004f, NtImpersonateAnonymousToken, 8 ) \ - SYSCALL_ENTRY( 0x0050, NtInitializeNlsFiles, 24 ) \ - SYSCALL_ENTRY( 0x0051, NtInitiatePowerAction, 32 ) \ - SYSCALL_ENTRY( 0x0052, NtIsProcessInJob, 16 ) \ - SYSCALL_ENTRY( 0x0053, NtListenPort, 16 ) \ - SYSCALL_ENTRY( 0x0054, NtLoadDriver, 8 ) \ - SYSCALL_ENTRY( 0x0055, NtLoadKey, 16 ) \ - SYSCALL_ENTRY( 0x0056, NtLoadKey2, 24 ) \ - SYSCALL_ENTRY( 0x0057, NtLoadKeyEx, 64 ) \ - SYSCALL_ENTRY( 0x0058, NtLockFile, 80 ) \ - SYSCALL_ENTRY( 0x0059, NtLockVirtualMemory, 32 ) \ - SYSCALL_ENTRY( 0x005a, NtMakePermanentObject, 8 ) \ - SYSCALL_ENTRY( 0x005b, NtMakeTemporaryObject, 8 ) \ - SYSCALL_ENTRY( 0x005c, NtMapViewOfSection, 80 ) \ - SYSCALL_ENTRY( 0x005d, NtMapViewOfSectionEx, 72 ) \ - SYSCALL_ENTRY( 0x005e, NtNotifyChangeDirectoryFile, 72 ) \ - SYSCALL_ENTRY( 0x005f, NtNotifyChangeKey, 80 ) \ - SYSCALL_ENTRY( 0x0060, NtNotifyChangeMultipleKeys, 96 ) \ - SYSCALL_ENTRY( 0x0061, NtOpenDirectoryObject, 24 ) \ - SYSCALL_ENTRY( 0x0062, NtOpenEvent, 24 ) \ - SYSCALL_ENTRY( 0x0063, NtOpenFile, 48 ) \ - SYSCALL_ENTRY( 0x0064, NtOpenIoCompletion, 24 ) \ - SYSCALL_ENTRY( 0x0065, NtOpenJobObject, 24 ) \ - SYSCALL_ENTRY( 0x0066, NtOpenKey, 24 ) \ - SYSCALL_ENTRY( 0x0067, NtOpenKeyEx, 32 ) \ - SYSCALL_ENTRY( 0x0068, NtOpenKeyTransacted, 32 ) \ - SYSCALL_ENTRY( 0x0069, NtOpenKeyTransactedEx, 40 ) \ - SYSCALL_ENTRY( 0x006a, NtOpenKeyedEvent, 24 ) \ - SYSCALL_ENTRY( 0x006b, NtOpenMutant, 24 ) \ - SYSCALL_ENTRY( 0x006c, NtOpenProcess, 32 ) \ - SYSCALL_ENTRY( 0x006d, NtOpenProcessToken, 24 ) \ - SYSCALL_ENTRY( 0x006e, NtOpenProcessTokenEx, 32 ) \ - SYSCALL_ENTRY( 0x006f, NtOpenSection, 24 ) \ - SYSCALL_ENTRY( 0x0070, NtOpenSemaphore, 24 ) \ - SYSCALL_ENTRY( 0x0071, NtOpenSymbolicLinkObject, 24 ) \ - SYSCALL_ENTRY( 0x0072, NtOpenThread, 32 ) \ - SYSCALL_ENTRY( 0x0073, NtOpenThreadToken, 32 ) \ - SYSCALL_ENTRY( 0x0074, NtOpenThreadTokenEx, 40 ) \ - SYSCALL_ENTRY( 0x0075, NtOpenTimer, 24 ) \ - SYSCALL_ENTRY( 0x0076, NtPowerInformation, 40 ) \ - SYSCALL_ENTRY( 0x0077, NtPrivilegeCheck, 24 ) \ - SYSCALL_ENTRY( 0x0078, NtProtectVirtualMemory, 40 ) \ - SYSCALL_ENTRY( 0x0079, NtPulseEvent, 16 ) \ - SYSCALL_ENTRY( 0x007a, NtQueryAttributesFile, 16 ) \ - SYSCALL_ENTRY( 0x007b, NtQueryDefaultLocale, 16 ) \ - SYSCALL_ENTRY( 0x007c, NtQueryDefaultUILanguage, 8 ) \ - SYSCALL_ENTRY( 0x007d, NtQueryDirectoryFile, 88 ) \ - SYSCALL_ENTRY( 0x007e, NtQueryDirectoryObject, 56 ) \ - SYSCALL_ENTRY( 0x007f, NtQueryEaFile, 72 ) \ - SYSCALL_ENTRY( 0x0080, NtQueryEvent, 40 ) \ - SYSCALL_ENTRY( 0x0081, NtQueryFullAttributesFile, 16 ) \ - SYSCALL_ENTRY( 0x0082, NtQueryInformationAtom, 40 ) \ - SYSCALL_ENTRY( 0x0083, NtQueryInformationFile, 40 ) \ - SYSCALL_ENTRY( 0x0084, NtQueryInformationJobObject, 40 ) \ - SYSCALL_ENTRY( 0x0085, NtQueryInformationProcess, 40 ) \ - SYSCALL_ENTRY( 0x0086, NtQueryInformationThread, 40 ) \ - SYSCALL_ENTRY( 0x0087, NtQueryInformationToken, 40 ) \ - SYSCALL_ENTRY( 0x0088, NtQueryInstallUILanguage, 8 ) \ - SYSCALL_ENTRY( 0x0089, NtQueryIoCompletion, 40 ) \ - SYSCALL_ENTRY( 0x008a, NtQueryKey, 40 ) \ - SYSCALL_ENTRY( 0x008b, NtQueryLicenseValue, 40 ) \ - SYSCALL_ENTRY( 0x008c, NtQueryMultipleValueKey, 48 ) \ - SYSCALL_ENTRY( 0x008d, NtQueryMutant, 40 ) \ - SYSCALL_ENTRY( 0x008e, NtQueryObject, 40 ) \ - SYSCALL_ENTRY( 0x008f, NtQueryPerformanceCounter, 16 ) \ - SYSCALL_ENTRY( 0x0090, NtQuerySection, 40 ) \ - SYSCALL_ENTRY( 0x0091, NtQuerySecurityObject, 40 ) \ - SYSCALL_ENTRY( 0x0092, NtQuerySemaphore, 40 ) \ - SYSCALL_ENTRY( 0x0093, NtQuerySymbolicLinkObject, 24 ) \ - SYSCALL_ENTRY( 0x0094, NtQuerySystemEnvironmentValue, 32 ) \ - SYSCALL_ENTRY( 0x0095, NtQuerySystemEnvironmentValueEx, 40 ) \ - SYSCALL_ENTRY( 0x0096, NtQuerySystemInformation, 32 ) \ - SYSCALL_ENTRY( 0x0097, NtQuerySystemInformationEx, 48 ) \ - SYSCALL_ENTRY( 0x0098, NtQuerySystemTime, 8 ) \ - SYSCALL_ENTRY( 0x0099, NtQueryTimer, 40 ) \ - SYSCALL_ENTRY( 0x009a, NtQueryTimerResolution, 24 ) \ - SYSCALL_ENTRY( 0x009b, NtQueryValueKey, 48 ) \ - SYSCALL_ENTRY( 0x009c, NtQueryVirtualMemory, 48 ) \ - SYSCALL_ENTRY( 0x009d, NtQueryVolumeInformationFile, 40 ) \ - SYSCALL_ENTRY( 0x009e, NtQueueApcThread, 40 ) \ - SYSCALL_ENTRY( 0x009f, NtRaiseException, 24 ) \ - SYSCALL_ENTRY( 0x00a0, NtRaiseHardError, 48 ) \ - SYSCALL_ENTRY( 0x00a1, NtReadFile, 72 ) \ - SYSCALL_ENTRY( 0x00a2, NtReadFileScatter, 72 ) \ - SYSCALL_ENTRY( 0x00a3, NtReadVirtualMemory, 40 ) \ - SYSCALL_ENTRY( 0x00a4, NtRegisterThreadTerminatePort, 8 ) \ - SYSCALL_ENTRY( 0x00a5, NtReleaseKeyedEvent, 32 ) \ - SYSCALL_ENTRY( 0x00a6, NtReleaseMutant, 16 ) \ - SYSCALL_ENTRY( 0x00a7, NtReleaseSemaphore, 24 ) \ - SYSCALL_ENTRY( 0x00a8, NtRemoveIoCompletion, 40 ) \ - SYSCALL_ENTRY( 0x00a9, NtRemoveIoCompletionEx, 48 ) \ - SYSCALL_ENTRY( 0x00aa, NtRemoveProcessDebug, 16 ) \ - SYSCALL_ENTRY( 0x00ab, NtRenameKey, 16 ) \ - SYSCALL_ENTRY( 0x00ac, NtReplaceKey, 24 ) \ - SYSCALL_ENTRY( 0x00ad, NtReplyWaitReceivePort, 32 ) \ - SYSCALL_ENTRY( 0x00ae, NtRequestWaitReplyPort, 24 ) \ - SYSCALL_ENTRY( 0x00af, NtResetEvent, 16 ) \ - SYSCALL_ENTRY( 0x00b0, NtResetWriteWatch, 24 ) \ - SYSCALL_ENTRY( 0x00b1, NtRestoreKey, 24 ) \ - SYSCALL_ENTRY( 0x00b2, NtResumeProcess, 8 ) \ - SYSCALL_ENTRY( 0x00b3, NtResumeThread, 16 ) \ - SYSCALL_ENTRY( 0x00b4, NtRollbackTransaction, 16 ) \ - SYSCALL_ENTRY( 0x00b5, NtSaveKey, 16 ) \ - SYSCALL_ENTRY( 0x00b6, NtSecureConnectPort, 72 ) \ - SYSCALL_ENTRY( 0x00b7, NtSetContextThread, 16 ) \ - SYSCALL_ENTRY( 0x00b8, NtSetDebugFilterState, 24 ) \ - SYSCALL_ENTRY( 0x00b9, NtSetDefaultLocale, 16 ) \ - SYSCALL_ENTRY( 0x00ba, NtSetDefaultUILanguage, 8 ) \ - SYSCALL_ENTRY( 0x00bb, NtSetEaFile, 32 ) \ - SYSCALL_ENTRY( 0x00bc, NtSetEvent, 16 ) \ - SYSCALL_ENTRY( 0x00bd, NtSetInformationDebugObject, 40 ) \ - SYSCALL_ENTRY( 0x00be, NtSetInformationFile, 40 ) \ - SYSCALL_ENTRY( 0x00bf, NtSetInformationJobObject, 32 ) \ - SYSCALL_ENTRY( 0x00c0, NtSetInformationKey, 32 ) \ - SYSCALL_ENTRY( 0x00c1, NtSetInformationObject, 32 ) \ - SYSCALL_ENTRY( 0x00c2, NtSetInformationProcess, 32 ) \ - SYSCALL_ENTRY( 0x00c3, NtSetInformationThread, 32 ) \ - SYSCALL_ENTRY( 0x00c4, NtSetInformationToken, 32 ) \ - SYSCALL_ENTRY( 0x00c5, NtSetInformationVirtualMemory, 48 ) \ - SYSCALL_ENTRY( 0x00c6, NtSetIntervalProfile, 16 ) \ - SYSCALL_ENTRY( 0x00c7, NtSetIoCompletion, 40 ) \ - SYSCALL_ENTRY( 0x00c8, NtSetLdtEntries, 32 ) \ - SYSCALL_ENTRY( 0x00c9, NtSetSecurityObject, 24 ) \ - SYSCALL_ENTRY( 0x00ca, NtSetSystemInformation, 24 ) \ - SYSCALL_ENTRY( 0x00cb, NtSetSystemTime, 16 ) \ - SYSCALL_ENTRY( 0x00cc, NtSetThreadExecutionState, 16 ) \ - SYSCALL_ENTRY( 0x00cd, NtSetTimer, 56 ) \ - SYSCALL_ENTRY( 0x00ce, NtSetTimerResolution, 24 ) \ - SYSCALL_ENTRY( 0x00cf, NtSetValueKey, 48 ) \ - SYSCALL_ENTRY( 0x00d0, NtSetVolumeInformationFile, 40 ) \ - SYSCALL_ENTRY( 0x00d1, NtShutdownSystem, 8 ) \ - SYSCALL_ENTRY( 0x00d2, NtSignalAndWaitForSingleObject, 32 ) \ - SYSCALL_ENTRY( 0x00d3, NtSuspendProcess, 8 ) \ - SYSCALL_ENTRY( 0x00d4, NtSuspendThread, 16 ) \ - SYSCALL_ENTRY( 0x00d5, NtSystemDebugControl, 48 ) \ - SYSCALL_ENTRY( 0x00d6, NtTerminateJobObject, 16 ) \ - SYSCALL_ENTRY( 0x00d7, NtTerminateProcess, 16 ) \ - SYSCALL_ENTRY( 0x00d8, NtTerminateThread, 16 ) \ - SYSCALL_ENTRY( 0x00d9, NtTestAlert, 0 ) \ - SYSCALL_ENTRY( 0x00da, NtTraceControl, 48 ) \ - SYSCALL_ENTRY( 0x00db, NtUnloadDriver, 8 ) \ - SYSCALL_ENTRY( 0x00dc, NtUnloadKey, 8 ) \ - SYSCALL_ENTRY( 0x00dd, NtUnlockFile, 40 ) \ - SYSCALL_ENTRY( 0x00de, NtUnlockVirtualMemory, 32 ) \ - SYSCALL_ENTRY( 0x00df, NtUnmapViewOfSection, 16 ) \ - SYSCALL_ENTRY( 0x00e0, NtUnmapViewOfSectionEx, 24 ) \ - SYSCALL_ENTRY( 0x00e1, NtWaitForAlertByThreadId, 16 ) \ - SYSCALL_ENTRY( 0x00e2, NtWaitForDebugEvent, 32 ) \ - SYSCALL_ENTRY( 0x00e3, NtWaitForKeyedEvent, 32 ) \ - SYSCALL_ENTRY( 0x00e4, NtWaitForMultipleObjects, 40 ) \ - SYSCALL_ENTRY( 0x00e5, NtWaitForSingleObject, 24 ) \ - SYSCALL_ENTRY( 0x00e6, NtWriteFile, 72 ) \ - SYSCALL_ENTRY( 0x00e7, NtWriteFileGather, 72 ) \ - SYSCALL_ENTRY( 0x00e8, NtWriteVirtualMemory, 40 ) \ - SYSCALL_ENTRY( 0x00e9, NtYieldExecution, 0 ) \ - SYSCALL_ENTRY( 0x00ea, wine_nt_to_unix_file_name, 32 ) \ - SYSCALL_ENTRY( 0x00eb, wine_unix_to_nt_file_name, 24 ) + SYSCALL_ENTRY( 0x004c, NtGetNextProcess, 40 ) \ + SYSCALL_ENTRY( 0x004d, NtGetNextThread, 48 ) \ + SYSCALL_ENTRY( 0x004e, NtGetNlsSectionPtr, 40 ) \ + SYSCALL_ENTRY( 0x004f, NtGetWriteWatch, 56 ) \ + SYSCALL_ENTRY( 0x0050, NtImpersonateAnonymousToken, 8 ) \ + SYSCALL_ENTRY( 0x0051, NtInitializeNlsFiles, 24 ) \ + SYSCALL_ENTRY( 0x0052, NtInitiatePowerAction, 32 ) \ + SYSCALL_ENTRY( 0x0053, NtIsProcessInJob, 16 ) \ + SYSCALL_ENTRY( 0x0054, NtListenPort, 16 ) \ + SYSCALL_ENTRY( 0x0055, NtLoadDriver, 8 ) \ + SYSCALL_ENTRY( 0x0056, NtLoadKey, 16 ) \ + SYSCALL_ENTRY( 0x0057, NtLoadKey2, 24 ) \ + SYSCALL_ENTRY( 0x0058, NtLoadKeyEx, 64 ) \ + SYSCALL_ENTRY( 0x0059, NtLockFile, 80 ) \ + SYSCALL_ENTRY( 0x005a, NtLockVirtualMemory, 32 ) \ + SYSCALL_ENTRY( 0x005b, NtMakePermanentObject, 8 ) \ + SYSCALL_ENTRY( 0x005c, NtMakeTemporaryObject, 8 ) \ + SYSCALL_ENTRY( 0x005d, NtMapViewOfSection, 80 ) \ + SYSCALL_ENTRY( 0x005e, NtMapViewOfSectionEx, 72 ) \ + SYSCALL_ENTRY( 0x005f, NtNotifyChangeDirectoryFile, 72 ) \ + SYSCALL_ENTRY( 0x0060, NtNotifyChangeKey, 80 ) \ + SYSCALL_ENTRY( 0x0061, NtNotifyChangeMultipleKeys, 96 ) \ + SYSCALL_ENTRY( 0x0062, NtOpenDirectoryObject, 24 ) \ + SYSCALL_ENTRY( 0x0063, NtOpenEvent, 24 ) \ + SYSCALL_ENTRY( 0x0064, NtOpenFile, 48 ) \ + SYSCALL_ENTRY( 0x0065, NtOpenIoCompletion, 24 ) \ + SYSCALL_ENTRY( 0x0066, NtOpenJobObject, 24 ) \ + SYSCALL_ENTRY( 0x0067, NtOpenKey, 24 ) \ + SYSCALL_ENTRY( 0x0068, NtOpenKeyEx, 32 ) \ + SYSCALL_ENTRY( 0x0069, NtOpenKeyTransacted, 32 ) \ + SYSCALL_ENTRY( 0x006a, NtOpenKeyTransactedEx, 40 ) \ + SYSCALL_ENTRY( 0x006b, NtOpenKeyedEvent, 24 ) \ + SYSCALL_ENTRY( 0x006c, NtOpenMutant, 24 ) \ + SYSCALL_ENTRY( 0x006d, NtOpenProcess, 32 ) \ + SYSCALL_ENTRY( 0x006e, NtOpenProcessToken, 24 ) \ + SYSCALL_ENTRY( 0x006f, NtOpenProcessTokenEx, 32 ) \ + SYSCALL_ENTRY( 0x0070, NtOpenSection, 24 ) \ + SYSCALL_ENTRY( 0x0071, NtOpenSemaphore, 24 ) \ + SYSCALL_ENTRY( 0x0072, NtOpenSymbolicLinkObject, 24 ) \ + SYSCALL_ENTRY( 0x0073, NtOpenThread, 32 ) \ + SYSCALL_ENTRY( 0x0074, NtOpenThreadToken, 32 ) \ + SYSCALL_ENTRY( 0x0075, NtOpenThreadTokenEx, 40 ) \ + SYSCALL_ENTRY( 0x0076, NtOpenTimer, 24 ) \ + SYSCALL_ENTRY( 0x0077, NtPowerInformation, 40 ) \ + SYSCALL_ENTRY( 0x0078, NtPrivilegeCheck, 24 ) \ + SYSCALL_ENTRY( 0x0079, NtProtectVirtualMemory, 40 ) \ + SYSCALL_ENTRY( 0x007a, NtPulseEvent, 16 ) \ + SYSCALL_ENTRY( 0x007b, NtQueryAttributesFile, 16 ) \ + SYSCALL_ENTRY( 0x007c, NtQueryDefaultLocale, 16 ) \ + SYSCALL_ENTRY( 0x007d, NtQueryDefaultUILanguage, 8 ) \ + SYSCALL_ENTRY( 0x007e, NtQueryDirectoryFile, 88 ) \ + SYSCALL_ENTRY( 0x007f, NtQueryDirectoryObject, 56 ) \ + SYSCALL_ENTRY( 0x0080, NtQueryEaFile, 72 ) \ + SYSCALL_ENTRY( 0x0081, NtQueryEvent, 40 ) \ + SYSCALL_ENTRY( 0x0082, NtQueryFullAttributesFile, 16 ) \ + SYSCALL_ENTRY( 0x0083, NtQueryInformationAtom, 40 ) \ + SYSCALL_ENTRY( 0x0084, NtQueryInformationFile, 40 ) \ + SYSCALL_ENTRY( 0x0085, NtQueryInformationJobObject, 40 ) \ + SYSCALL_ENTRY( 0x0086, NtQueryInformationProcess, 40 ) \ + SYSCALL_ENTRY( 0x0087, NtQueryInformationThread, 40 ) \ + SYSCALL_ENTRY( 0x0088, NtQueryInformationToken, 40 ) \ + SYSCALL_ENTRY( 0x0089, NtQueryInstallUILanguage, 8 ) \ + SYSCALL_ENTRY( 0x008a, NtQueryIoCompletion, 40 ) \ + SYSCALL_ENTRY( 0x008b, NtQueryKey, 40 ) \ + SYSCALL_ENTRY( 0x008c, NtQueryLicenseValue, 40 ) \ + SYSCALL_ENTRY( 0x008d, NtQueryMultipleValueKey, 48 ) \ + SYSCALL_ENTRY( 0x008e, NtQueryMutant, 40 ) \ + SYSCALL_ENTRY( 0x008f, NtQueryObject, 40 ) \ + SYSCALL_ENTRY( 0x0090, NtQueryPerformanceCounter, 16 ) \ + SYSCALL_ENTRY( 0x0091, NtQuerySection, 40 ) \ + SYSCALL_ENTRY( 0x0092, NtQuerySecurityObject, 40 ) \ + SYSCALL_ENTRY( 0x0093, NtQuerySemaphore, 40 ) \ + SYSCALL_ENTRY( 0x0094, NtQuerySymbolicLinkObject, 24 ) \ + SYSCALL_ENTRY( 0x0095, NtQuerySystemEnvironmentValue, 32 ) \ + SYSCALL_ENTRY( 0x0096, NtQuerySystemEnvironmentValueEx, 40 ) \ + SYSCALL_ENTRY( 0x0097, NtQuerySystemInformation, 32 ) \ + SYSCALL_ENTRY( 0x0098, NtQuerySystemInformationEx, 48 ) \ + SYSCALL_ENTRY( 0x0099, NtQuerySystemTime, 8 ) \ + SYSCALL_ENTRY( 0x009a, NtQueryTimer, 40 ) \ + SYSCALL_ENTRY( 0x009b, NtQueryTimerResolution, 24 ) \ + SYSCALL_ENTRY( 0x009c, NtQueryValueKey, 48 ) \ + SYSCALL_ENTRY( 0x009d, NtQueryVirtualMemory, 48 ) \ + SYSCALL_ENTRY( 0x009e, NtQueryVolumeInformationFile, 40 ) \ + SYSCALL_ENTRY( 0x009f, NtQueueApcThread, 40 ) \ + SYSCALL_ENTRY( 0x00a0, NtRaiseException, 24 ) \ + SYSCALL_ENTRY( 0x00a1, NtRaiseHardError, 48 ) \ + SYSCALL_ENTRY( 0x00a2, NtReadFile, 72 ) \ + SYSCALL_ENTRY( 0x00a3, NtReadFileScatter, 72 ) \ + SYSCALL_ENTRY( 0x00a4, NtReadVirtualMemory, 40 ) \ + SYSCALL_ENTRY( 0x00a5, NtRegisterThreadTerminatePort, 8 ) \ + SYSCALL_ENTRY( 0x00a6, NtReleaseKeyedEvent, 32 ) \ + SYSCALL_ENTRY( 0x00a7, NtReleaseMutant, 16 ) \ + SYSCALL_ENTRY( 0x00a8, NtReleaseSemaphore, 24 ) \ + SYSCALL_ENTRY( 0x00a9, NtRemoveIoCompletion, 40 ) \ + SYSCALL_ENTRY( 0x00aa, NtRemoveIoCompletionEx, 48 ) \ + SYSCALL_ENTRY( 0x00ab, NtRemoveProcessDebug, 16 ) \ + SYSCALL_ENTRY( 0x00ac, NtRenameKey, 16 ) \ + SYSCALL_ENTRY( 0x00ad, NtReplaceKey, 24 ) \ + SYSCALL_ENTRY( 0x00ae, NtReplyWaitReceivePort, 32 ) \ + SYSCALL_ENTRY( 0x00af, NtRequestWaitReplyPort, 24 ) \ + SYSCALL_ENTRY( 0x00b0, NtResetEvent, 16 ) \ + SYSCALL_ENTRY( 0x00b1, NtResetWriteWatch, 24 ) \ + SYSCALL_ENTRY( 0x00b2, NtRestoreKey, 24 ) \ + SYSCALL_ENTRY( 0x00b3, NtResumeProcess, 8 ) \ + SYSCALL_ENTRY( 0x00b4, NtResumeThread, 16 ) \ + SYSCALL_ENTRY( 0x00b5, NtRollbackTransaction, 16 ) \ + SYSCALL_ENTRY( 0x00b6, NtSaveKey, 16 ) \ + SYSCALL_ENTRY( 0x00b7, NtSecureConnectPort, 72 ) \ + SYSCALL_ENTRY( 0x00b8, NtSetContextThread, 16 ) \ + SYSCALL_ENTRY( 0x00b9, NtSetDebugFilterState, 24 ) \ + SYSCALL_ENTRY( 0x00ba, NtSetDefaultLocale, 16 ) \ + SYSCALL_ENTRY( 0x00bb, NtSetDefaultUILanguage, 8 ) \ + SYSCALL_ENTRY( 0x00bc, NtSetEaFile, 32 ) \ + SYSCALL_ENTRY( 0x00bd, NtSetEvent, 16 ) \ + SYSCALL_ENTRY( 0x00be, NtSetInformationDebugObject, 40 ) \ + SYSCALL_ENTRY( 0x00bf, NtSetInformationFile, 40 ) \ + SYSCALL_ENTRY( 0x00c0, NtSetInformationJobObject, 32 ) \ + SYSCALL_ENTRY( 0x00c1, NtSetInformationKey, 32 ) \ + SYSCALL_ENTRY( 0x00c2, NtSetInformationObject, 32 ) \ + SYSCALL_ENTRY( 0x00c3, NtSetInformationProcess, 32 ) \ + SYSCALL_ENTRY( 0x00c4, NtSetInformationThread, 32 ) \ + SYSCALL_ENTRY( 0x00c5, NtSetInformationToken, 32 ) \ + SYSCALL_ENTRY( 0x00c6, NtSetInformationVirtualMemory, 48 ) \ + SYSCALL_ENTRY( 0x00c7, NtSetIntervalProfile, 16 ) \ + SYSCALL_ENTRY( 0x00c8, NtSetIoCompletion, 40 ) \ + SYSCALL_ENTRY( 0x00c9, NtSetLdtEntries, 32 ) \ + SYSCALL_ENTRY( 0x00ca, NtSetSecurityObject, 24 ) \ + SYSCALL_ENTRY( 0x00cb, NtSetSystemInformation, 24 ) \ + SYSCALL_ENTRY( 0x00cc, NtSetSystemTime, 16 ) \ + SYSCALL_ENTRY( 0x00cd, NtSetThreadExecutionState, 16 ) \ + SYSCALL_ENTRY( 0x00ce, NtSetTimer, 56 ) \ + SYSCALL_ENTRY( 0x00cf, NtSetTimerResolution, 24 ) \ + SYSCALL_ENTRY( 0x00d0, NtSetValueKey, 48 ) \ + SYSCALL_ENTRY( 0x00d1, NtSetVolumeInformationFile, 40 ) \ + SYSCALL_ENTRY( 0x00d2, NtShutdownSystem, 8 ) \ + SYSCALL_ENTRY( 0x00d3, NtSignalAndWaitForSingleObject, 32 ) \ + SYSCALL_ENTRY( 0x00d4, NtSuspendProcess, 8 ) \ + SYSCALL_ENTRY( 0x00d5, NtSuspendThread, 16 ) \ + SYSCALL_ENTRY( 0x00d6, NtSystemDebugControl, 48 ) \ + SYSCALL_ENTRY( 0x00d7, NtTerminateJobObject, 16 ) \ + SYSCALL_ENTRY( 0x00d8, NtTerminateProcess, 16 ) \ + SYSCALL_ENTRY( 0x00d9, NtTerminateThread, 16 ) \ + SYSCALL_ENTRY( 0x00da, NtTestAlert, 0 ) \ + SYSCALL_ENTRY( 0x00db, NtTraceControl, 48 ) \ + SYSCALL_ENTRY( 0x00dc, NtUnloadDriver, 8 ) \ + SYSCALL_ENTRY( 0x00dd, NtUnloadKey, 8 ) \ + SYSCALL_ENTRY( 0x00de, NtUnlockFile, 40 ) \ + SYSCALL_ENTRY( 0x00df, NtUnlockVirtualMemory, 32 ) \ + SYSCALL_ENTRY( 0x00e0, NtUnmapViewOfSection, 16 ) \ + SYSCALL_ENTRY( 0x00e1, NtUnmapViewOfSectionEx, 24 ) \ + SYSCALL_ENTRY( 0x00e2, NtWaitForAlertByThreadId, 16 ) \ + SYSCALL_ENTRY( 0x00e3, NtWaitForDebugEvent, 32 ) \ + SYSCALL_ENTRY( 0x00e4, NtWaitForKeyedEvent, 32 ) \ + SYSCALL_ENTRY( 0x00e5, NtWaitForMultipleObjects, 40 ) \ + SYSCALL_ENTRY( 0x00e6, NtWaitForSingleObject, 24 ) \ + SYSCALL_ENTRY( 0x00e7, NtWriteFile, 72 ) \ + SYSCALL_ENTRY( 0x00e8, NtWriteFileGather, 72 ) \ + SYSCALL_ENTRY( 0x00e9, NtWriteVirtualMemory, 40 ) \ + SYSCALL_ENTRY( 0x00ea, NtYieldExecution, 0 ) \ + SYSCALL_ENTRY( 0x00eb, wine_nt_to_unix_file_name, 32 ) \ + SYSCALL_ENTRY( 0x00ec, wine_unix_to_nt_file_name, 24 ) diff --git a/dlls/ntdll/unix/process.c b/dlls/ntdll/unix/process.c index 2c6dc1b43cc..5ff9e2b465c 100644 --- a/dlls/ntdll/unix/process.c +++ b/dlls/ntdll/unix/process.c @@ -1792,6 +1792,18 @@ NTSTATUS WINAPI NtResumeProcess( HANDLE handle ) }
+/********************************************************************** + * NtGetNextProcess (NTDLL.@) + */ +NTSTATUS WINAPI NtGetNextProcess( HANDLE process, ACCESS_MASK access, ULONG attributes, + ULONG flags, HANDLE *handle ) +{ + FIXME( "process %p, access %#x, attributes %#x, flags %#x, handle %p. stub!\n", + process, (int)access, (int)attributes, (int)flags, handle ); + return STATUS_NOT_IMPLEMENTED; +} + + /********************************************************************** * NtDebugActiveProcess (NTDLL.@) */ diff --git a/dlls/wow64/process.c b/dlls/wow64/process.c index 8b543d2a859..5502e7f767b 100644 --- a/dlls/wow64/process.c +++ b/dlls/wow64/process.c @@ -436,6 +436,27 @@ NTSTATUS WINAPI wow64_NtFlushProcessWriteBuffers( UINT *args ) }
+/********************************************************************** + * wow64_NtGetNextProcess + */ +NTSTATUS WINAPI wow64_NtGetNextProcess( UINT *args ) +{ + HANDLE process = get_handle( &args ); + ACCESS_MASK access = get_ulong( &args ); + ULONG attributes = get_ulong( &args ); + ULONG flags = get_ulong( &args ); + ULONG *handle_ptr = get_ptr( &args ); + + HANDLE handle = 0; + NTSTATUS status; + + *handle_ptr = 0; + status = NtGetNextProcess( process, access, attributes, flags, &handle ); + put_handle( handle_ptr, handle ); + return status; +} + + /********************************************************************** * wow64_NtGetNextThread */ diff --git a/include/winternl.h b/include/winternl.h index c39d6427e52..206665588b3 100644 --- a/include/winternl.h +++ b/include/winternl.h @@ -4461,6 +4461,7 @@ NTSYSAPI NTSTATUS WINAPI NtFreeVirtualMemory(HANDLE,PVOID*,SIZE_T*,ULONG); NTSYSAPI NTSTATUS WINAPI NtFsControlFile(HANDLE,HANDLE,PIO_APC_ROUTINE,PVOID,PIO_STATUS_BLOCK,ULONG,PVOID,ULONG,PVOID,ULONG); NTSYSAPI NTSTATUS WINAPI NtGetContextThread(HANDLE,CONTEXT*); NTSYSAPI ULONG WINAPI NtGetCurrentProcessorNumber(void); +NTSYSAPI NTSTATUS WINAPI NtGetNextProcess(HANDLE,ACCESS_MASK,ULONG,ULONG,HANDLE*); NTSYSAPI NTSTATUS WINAPI NtGetNextThread(HANDLE,HANDLE,ACCESS_MASK,ULONG,ULONG,HANDLE*); NTSYSAPI NTSTATUS WINAPI NtGetNlsSectionPtr(ULONG,ULONG,void*,void**,SIZE_T*); NTSYSAPI NTSTATUS WINAPI NtGetPlugPlayEvent(ULONG,ULONG,PVOID,ULONG);