windows Nt内核函数大全(5)

NTSTATUS

NTAPI

NtDeleteObjectAuditAlarm(

IN PUNICODE_STRING SubsystemName, IN PVOID HandleId,

IN BOOLEAN GenerateOnClose );

NTSYSAPI NTSTATUS NTAPI

NtDeleteValueKey(

IN HANDLE KeyHandle,

IN PUNICODE_STRING ValueName );

NTSYSAPI NTSTATUS

NTAPI

NtDeviceIoControlFile( IN HANDLE FileHandle, IN HANDLE Event OPTIONAL,

IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, IN PVOID ApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN ULONG IoControlCode,

IN PVOID InputBuffer OPTIONAL, IN ULONG InputBufferLength,

OUT PVOID OutputBuffer OPTIONAL, IN ULONG OutputBufferLength );

NTSYSAPI NTSTATUS NTAPI

NtDisplayString(

IN PUNICODE_STRING String );

NTSYSAPI NTSTATUS NTAPI

NtDuplicateObject(

IN HANDLE SourceProcessHandle, IN HANDLE SourceHandle,

IN HANDLE TargetProcessHandle,

OUT PHANDLE TargetHandle OPTIONAL, IN ACCESS_MASK DesiredAccess,

IN ULONG Attributes, IN ULONG Options );

NTSYSAPI NTSTATUS NTAPI

NtDuplicateToken(

IN HANDLE ExistingTokenHandle, IN ACCESS_MASK DesiredAccess,

IN POBJECT_ATTRIBUTES ObjectAttributes, IN BOOLEAN EffectiveOnly, IN TOKEN_TYPE TokenType, OUT PHANDLE NewTokenHandle );

NTSYSAPI NTSTATUS

NTAPI

NtEnumerateBootEntries( IN ULONG Unknown1, IN ULONG Unknown2 );

NTSYSAPI NTSTATUS NTAPI

NtEnumerateKey( IN HANDLE KeyHandle, IN ULONG Index,

IN KEY_INFORMATION_CLASS KeyInformationClass, OUT PVOID KeyInformation,

IN ULONG KeyInformationLength, OUT PULONG ResultLength );

NTSYSAPI NTSTATUS

NTAPI

NtEnumerateSystemEnvironmentValuesEx( IN ULONG Unknown1, IN ULONG Unknown2, IN ULONG Unknown3 ); NTSYSAPI

NTSTATUS NTAPI

NtEnumerateValueKey(

IN HANDLE KeyHandle,

IN ULONG Index,

IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass, OUT PVOID KeyValueInformation, IN ULONG KeyValueInformationLength, OUT PULONG ResultLength );

NTSYSAPI NTSTATUS NTAPI

NtExtendSection(

IN HANDLE SectionHandle, IN PLARGE_INTEGER SectionSize );

NTSYSAPI NTSTATUS

NTAPI

NtFilterToken(

IN HANDLE ExistingTokenHandle, IN ULONG Flags,

IN PTOKEN_GROUPS SidsToDisable, IN PTOKEN_PRIVILEGES PrivilegesToDelete, IN PTOKEN_GROUPS SidsToRestricted, OUT PHANDLE NewTokenHandle );

NTSYSAPI NTSTATUS NTAPI

NtFindAtom(

IN PWSTR String, IN ULONG StringLength, OUT PUSHORT Atom );

NTSYSAPI NTSTATUS NTAPI

NtFlushBuffersFile(

IN HANDLE FileHandle, OUT PIO_STATUS_BLOCK IoStatusBlock ); NTSYSAPI

NTSTATUS NTAPI

NtFlushInstructionCache(

IN HANDLE ProcessHandle, IN PVOID BaseAddress OPTIONAL, IN ULONG FlushSize );

NTSYSAPI NTSTATUS NTAPI

NtFlushKey(

IN HANDLE KeyHandle );

NTSYSAPI NTSTATUS

NTAPI

NtFlushVirtualMemory( IN HANDLE ProcessHandle, IN OUT PVOID *BaseAddress,

IN OUT PULONG FlushSize, OUT PIO_STATUS_BLOCK IoStatusBlock ); NTSYSAPI NTSTATUS NTAPI

NtFlushWriteBuffer( VOID );

NTSYSAPI NTSTATUS NTAPI

NtYieldExecution( VOID );

NTSYSAPI NTSTATUS NTAPI

NtWriteVirtualMemory(

IN HANDLE ProcessHandle, IN PVOID BaseAddress, IN PVOID Buffer,

IN ULONG BufferLength,

OUT PULONG ReturnLength OPTIONAL );

NTSYSAPI NTSTATUS NTAPI

NtWriteRequestData(

IN HANDLE PortHandle,

IN PPORT_MESSAGE Message, IN ULONG Index, IN PVOID Buffer, IN ULONG BufferLength,

OUT PULONG ReturnLength OPTIONAL );

NTSYSAPI NTSTATUS NTAPI

NtWriteFileGather(

IN HANDLE FileHandle,

IN HANDLE Event OPTIONAL,

IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, IN PVOID ApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PFILE_SEGMENT_ELEMENT Buffer, IN ULONG Length,

IN PLARGE_INTEGER ByteOffset OPTIONAL, IN PULONG Key OPTIONAL );

NTSYSAPI NTSTATUS NTAPI

NtWriteFile(

IN HANDLE FileHandle,

IN HANDLE Event OPTIONAL,

IN PIO_APC_ROUTINE ApcRoutine OPTIONAL, IN PVOID ApcContext OPTIONAL, OUT PIO_STATUS_BLOCK IoStatusBlock, IN PVOID Buffer,

IN ULONG Length,

IN PLARGE_INTEGER ByteOffset OPTIONAL, IN PULONG Key OPTIONAL ); NTSYSAPI NTSTATUS NTAPI

NtWaitLowEventPair( IN HANDLE EventPairHandle );

NTSYSAPI NTSTATUS