winternl.h header

This header is used by multiple technologies. For more information, see:

winternl.h contains the following programming interfaces:

Functions

 
NtClose

Deprecated. Closes the specified handle. NtClose is superseded by CloseHandle.
NtCreateFile

Creates a new file or directory, or opens an existing file, device, directory, or volume.
NtDeviceIoControlFile

Deprecated. Builds descriptors for the supplied buffer(s) and passes the untyped data to the device driver associated with the file handle. NtDeviceIoControlFile is superseded by DeviceIoControl.
NtNotifyChangeMultipleKeys

Requests notification when a registry key or any of its subkeys changes.
NtOpenFile

Opens an existing file, device, directory, or volume, and returns a handle for the file object.
NtQueryInformationProcess

Retrieves information about the specified process. (NtQueryInformationProcess)
NtQueryInformationThread

Retrieves information about the specified thread. (NtQueryInformationThread)
NtQueryMultipleValueKey

Retrieves values for the specified multiple-value key.
NtQueryObject

Retrieves various kinds of object information.
NtQuerySystemInformation

Retrieves the specified system information.
NtQuerySystemTime

Retrieves the current system time.
NtRenameKey

Changes the name of the specified registry key. (NtRenameKey)
NtSetInformationKey

Sets information for the specified registry key.
NtWaitForSingleObject

Deprecated. Waits until the specified object attains a state of signaled. NtWaitForSingleObject is superseded by WaitForSingleObject.
RtlAnsiStringToUnicodeString

Converts the specified ANSI source string into a Unicode string.
RtlCharToInteger

Converts a character string to an integer.
RtlConvertSidToUnicodeString

Converts a security identifier (SID) to its Unicode character representation.
RtlFreeAnsiString

Frees the string buffer allocated by RtlUnicodeStringToAnsiString.
RtlFreeOemString

Frees the string buffer allocated by RtlUnicodeStringToOemString.
RtlFreeUnicodeString

Frees the string buffer allocated by RtlAnsiStringToUnicodeString or by RtlUpcaseUnicodeString.
RtlInitString

Initializes a counted string.
RtlInitUnicodeString

Initializes a counted Unicode string.
RtlIsNameLegalDOS8Dot3

Determines whether or not a specified name can be used to create a file on the FAT file system.
RtlLocalTimeToSystemTime

Converts the specified local time to system time.
RtlNtStatusToDosError

Converts the specified NTSTATUS code to its equivalent system error code.
RtlTimeToSecondsSince1970

Converts the specified 64-bit system time to the number of seconds since the beginning of January 1, 1970.
RtlUnicodeStringToAnsiString

Converts the specified Unicode source string into an ANSI string.
RtlUnicodeStringToOemString

Converts the specified Unicode source string into an OEM string. The translation is done with respect to the OEM code page (OCP).
RtlUnicodeToMultiByteSize

Determines how many bytes are needed to represent a Unicode string as an ANSI string.
RtlUniform

Generates a uniform random number using D.H. Lehmer's 1948 algorithm.

Structures

 
PEB

Contains process information.
PEB_LDR_DATA

Contains information about the loaded modules for the process.
RTL_USER_PROCESS_PARAMETERS

Contains process parameter information.
STRING

Used with the RtlUnicodeStringToOemString function.
TEB

The Thread Environment Block (TEB structure) describes the state of a thread.