About
UserMode
NTDLL
APC
KiUserApcDispatcher
NtAlertThread
NtCallbackReturn
NtQueueApcThread
NtTestAlert
Atoms
NtAddAtom
NtDeleteAtom
NtFindAtom
NtQueryInformationAtom
Enumerations
ATOM_INFORMATION_CLASS
Structures
ATOM_BASIC_INFORMATION
ATOM_TABLE_INFORMATION
Compression
RtlCompressBuffer
RtlDecompressBuffer
RtlGetCompressionWorkSpaceSize
Debug
DbgPrint
NtSystemDebugControl
RtlCaptureStackBackTrace
RtlGetCallersAddress
Enumerations
SYSDBG_COMMAND
Structures
Error Handling
NtDisplayString
NtRaiseException
NtRaiseHardError
NtSetDefaultHardErrorPort
Enumerations
HARDERROR_RESPONSE
HARDERROR_RESPONSE_OPTION
Structures
HARDERROR_MSG
Executable images
Environment
NtQuerySystemEnvironmentValue
NtSetSystemEnvironmentValue
RtlCreateEnvironment
RtlDestroyEnvironment
RtlExpandEnvironmentStrings_U
RtlQueryEnvironmentVariable_U
RtlSetCurrentEnvironment
RtlSetEnvironmentVariable
LdrGetDllHandle
LdrGetProcedureAddress
LdrLoadDll
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadDll
NtLoadDriver
NtUnloadDriver
RtlImageNtHeader
RtlImageRvaToVa
Hardware Control
NtFlushWriteBuffer
NtShutdownSystem
Enumerations
SHUTDOWN_ACTION
Structures
Locale
NtQueryDefaultLocale
NtSetDefaultLocale
Memory Management
Heap Memory
RtlAllocateHeap
RtlCompactHeap
RtlCreateHeap
RtlDestroyHeap
RtlEnumProcessHeaps
RtlFreeHeap
RtlGetProcessHeaps
RtlLockHeap
RtlProtectHeap
RtlReAllocateHeap
RtlSizeHeap
RtlUnlockHeap
RtlValidateHeap
RtlValidateProcessHeaps
RtlWalkHeap
Structures
RTL_HEAP_DEFINITION
Virtual Memory
NtAllocateVirtualMemory
NtFlushVirtualMemory
NtFreeVirtualMemory
NtLockVirtualMemory
NtProtectVirtualMemory
NtQueryVirtualMemory
NtReadVirtualMemory
NtUnlockVirtualMemory
NtWriteVirtualMemory
Enumerations
MEMORY_INFORMATION_CLASS
Structures
MEMORY_BASIC_INFORMATION
NT Objects
Other object functions
Type Independed
NtClose
NtDuplicateObject
NtMakeTemporaryObject
NtQueryObject
NtSetInformationObject
NtSignalAndWaitForSingleObject
NtWaitForMultipleObjects
NtWaitForSingleObject
Enumerations
OBJECT_INFORMATION_CLASS
OBJECT_WAIT_TYPE
Structures
OBJECT_BASIC_INFORMATION
OBJECT_NAME_INFORMATION
DebugObject
NtCreateDebugObject
NtDebugActiveProcess
NtRemoveProcessDebug
Enumerations
DBG_STATE
DirectoryObject
NtCreateDirectoryObject
NtOpenDirectoryObject
NtQueryDirectoryObject
Structures
OBJDIR_INFORMATION
Event
NtClearEvent
NtCreateEvent
NtOpenEvent
NtPulseEvent
NtQueryEvent
NtResetEvent
NtSetEvent
NtSetEventBoostPriority
Enumerations
EVENT_INFORMATION_CLASS
EVENT_TYPE
Structures
EVENT_BASIC_INFORMATION
EventPair
NtCreateEventPair
NtOpenEventPair
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetHighWaitLowThread
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetLowWaitHighThread
NtWaitHighEventPair
NtWaitLowEventPair
File
NtCancelIoFile
NtCreateFile
NtCreateMailslotFile
NtCreateNamedPipeFile
NtCreatePagingFile
NtDeleteFile
NtDeviceIoControlFile
NtFlushBuffersFile
NtFsControlFile
NtLockFile
NtNotifyChangeDirectoryFile
NtOpenFile
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryEaFile
NtQueryFullAttributesFile
NtQueryInformationFile
NtQueryOleDirectoryFile
NtQueryVolumeInformationFile
NtReadFile
NtReadFileScatter
NtSetEaFile
NtSetInformationFile
NtSetVolumeInformationFile
NtUnlockFile
NtWriteFile
NtWriteFileGather
Enumerations
FILE_INFORMATION_CLASS
FS_INFORMATION_CLASS
Structures
FILE_BASIC_INFORMATION
FILE_BOTH_DIR_INFORMATION
FILE_DIRECTORY_INFORMATION
FILE_FS_ATTRIBUTE_INFORMATION
FILE_FS_CONTROL_INFORMATION
FILE_FS_DEVICE_INFORMATION
FILE_FS_LABEL_INFORMATION
FILE_FS_SIZE_INFORMATION
FILE_FS_VOLUME_INFORMATION
FILE_FULL_DIR_INFORMATION
FILE_FULL_EA_INFORMATION
FILE_GET_EA_INFORMATION
FILE_INTERNAL_INFORMATION
FILE_LINK_INFORMATION
FILE_NAME_INFORMATION
FILE_NAMES_INFORMATION
FILE_NETWORK_OPEN_INFORMATION
FILE_NOTIFY_INFORMATION
FILE_RENAME_INFORMATION
IoCompletion
NtCreateIoCompletion
NtOpenIoCompletion
NtQueryIoCompletion
NtRemoveIoCompletion
NtSetIoCompletion
Enumerations
IO_COMPLETION_INFORMATION_CLASS
Structures
IO_COMPLETION_BASIC_INFORMATION
Key
NtCompactKeys
NtCompressKey
NtCreateKey
NtDeleteKey
NtDeleteValueKey
NtEnumerateKey
NtEnumerateValueKey
NtFlushKey
NtLoadKey
NtLoadKey2
NtNotifyChangeKey
NtOpenKey
NtQueryKey
NtQueryMultipleValueKey
NtQueryValueKey
NtReplaceKey
NtRestoreKey
NtSaveKey
NtSetInformationKey
NtSetValueKey
NtUnloadKey
RtlFormatCurrentUserKeyPath
Enumerations
Structures
KEY_MULTIPLE_VALUE_INFORMATION
KeyedEvent
NtCreateKeyedEvent
NtOpenKeyedEvent
NtReleaseKeyedEvent
NtWaitForKeyedEvent
Mutant
NtCreateMutant
NtOpenMutant
NtQueryMutant
NtReleaseMutant
Enumerations
Structures
MUTANT_BASIC_INFORMATION
Port
NtAcceptConnectPort
NtCompleteConnectPort
NtConnectPort
NtCreatePort
NtImpersonateClientOfPort
NtListenPort
NtQueryInformationPort
NtReadRequestData
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReplyPort
NtRequestPort
NtRequestWaitReplyPort
NtWriteRequestData
Enumerations
PORT_INFORMATION_CLASS
Structures
LPC_MESSAGE
LPC_SECTION_MEMORY
LPC_SECTION_OWNER_MEMORY
LPC_TERMINATION_MESSAGE
Process
NtCreateProcess
NtFlushInstructionCache
NtOpenProcess
NtQueryInformationProcess
NtSetInformationProcess
NtTerminateProcess
RtlCreateUserProcess
Enumerations
PROCESS_INFORMATION_CLASS
Structures
PEB
PEB_FREE_BLOCK
PEB_LDR_DATA
POOLED_USAGE_AND_LIMITS
PROCESS_ACCESS_TOKEN
PROCESS_WS_WATCH_INFORMATION
RTL_USER_PROCESS_PARAMETERS
RTL_USER_PROCESS_INFORMATION
RTL_DRIVE_LETTER_CURDIR
LDR_MODULE
Profile
NtCreateProfile
NtQueryIntervalProfile
NtSetIntervalProfile
NtStartProfile
NtStopProfile
Enumerations
KPROFILE_SOURCE
Structures
Section
NtCreateSection
NtExtendSection
NtMapViewOfSection
NtOpenSection
NtQuerySection
NtUnmapViewOfSection
Enumerations
SECTION_INFORMATION_CLASS
SECTION_INHERIT
Structures
SECTION_BASIC_INFORMATION
SECTION_IMAGE_INFORMATION
Semaphore
NtCreateSemaphore
NtOpenSemaphore
NtQuerySemaphore
NtReleaseSemaphore
Enumerations
SEMAPHORE_INFORMATION_CLASS
Structures
SEMAPHORE_BASIC_INFORMATION
SymbolicLink
NtCreateSymbolicLinkObject
NtOpenSymbolicLinkObject
NtQuerySymbolicLinkObject
Thread
Thread Context
NtGetContextThread
NtSetContextThread
RtlInitializeContext
NtAlertResumeThread
NtContinue
NtCreateThread
NtCurrentTeb
NtDelayExecution
NtImpersonateThread
NtOpenThread
NtQueryInformationThread
NtRegisterThreadTerminatePort
NtResumeThread
NtSetInformationThread
NtSuspendThread
NtTerminateThread
NtYieldExecution
RtlCreateUserThread
Enumerations
THREAD_INFORMATION_CLASS
Structures
INITIAL_TEB
TEB
THREAD_BASIC_INFORMATION
THREAD_TIMES_INFORMATION
Timer
NtCancelTimer
NtCreateTimer
NtOpenTimer
NtQueryTimer
NtSetTimer
Enumerations
TIMER_INFORMATION_CLASS
Structures
TIMER_BASIC_INFORMATION
Token
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtCreateToken
NtDuplicateToken
NtOpenProcessToken
NtOpenThreadToken
NtQueryInformationToken
NtSetInformationToken
Enumerations
Structures
Security
Audit Alarms
NtAccessCheckAndAuditAlarm
NtCloseObjectAuditAlarm
NtDeleteObjectAuditAlarm
NtOpenObjectAuditAlarm
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtAccessCheck
NtAllocateLocallyUniqueId
NtAllocateUuids
NtPrivilegeCheck
NtQuerySecurityObject
NtSetSecurityObject
System Information
NtQuerySystemInformation
NtSetSystemInformation
Enumerations
SYSTEM_INFORMATION_CLASS
Structures
SYSTEM_MODULE
SYSTEM_MODULE_INFORMATION
SYSTEM_PAGEFILE_INFORMATION
SYSTEM_PROCESS_INFORMATION
SYSTEM_REGISTRY_QUOTA_INFORMATION
SYSTEM_THREAD
Time
NtGetTickCount
NtQueryPerformanceCounter
NtQuerySystemTime
NtQueryTimerResolution
NtSetSystemTime
NtSetTimerResolution
RtlTimeFieldsToTime
RtlTimeToTimeFields
Enumerations
Structures
TIME_FIELDS