winternl.h header
This header is used by multiple technologies. For more information, see:
winternl.h contains the following programming interfaces:
Functions
| NtClose Deprecated. Closes the specified handle. NtClose is superseded by CloseHandle. |
| NtCreateFile Creates a new file or directory, or opens an existing file, device, directory, or volume. |
| NtDeviceIoControlFile Deprecated. Builds descriptors for the supplied buffer(s) and passes the untyped data to the device driver associated with the file handle. NtDeviceIoControlFile is superseded by DeviceIoControl. |
| NtNotifyChangeMultipleKeys Requests notification when a registry key or any of its subkeys changes. |
| NtOpenFile Opens an existing file, device, directory, or volume, and returns a handle for the file object. |
| NtQueryInformationProcess Retrieves information about the specified process. (NtQueryInformationProcess) |
| NtQueryInformationThread Retrieves information about the specified thread. (NtQueryInformationThread) |
| NtQueryMultipleValueKey Retrieves values for the specified multiple-value key. |
| NtQueryObject Retrieves various kinds of object information. |
| NtQuerySystemInformation Retrieves the specified system information. |
| NtQuerySystemTime Retrieves the current system time. |
| NtRenameKey Changes the name of the specified registry key. (NtRenameKey) |
| NtSetInformationKey Sets information for the specified registry key. |
| NtWaitForSingleObject Deprecated. Waits until the specified object attains a state of signaled. NtWaitForSingleObject is superseded by WaitForSingleObject. |
| RtlAnsiStringToUnicodeString Converts the specified ANSI source string into a Unicode string. |
| RtlCharToInteger Converts a character string to an integer. |
| RtlConvertSidToUnicodeString Converts a security identifier (SID) to its Unicode character representation. |
| RtlFreeAnsiString Frees the string buffer allocated by RtlUnicodeStringToAnsiString. |
| RtlFreeOemString Frees the string buffer allocated by RtlUnicodeStringToOemString. |
| RtlFreeUnicodeString Frees the string buffer allocated by RtlAnsiStringToUnicodeString or by RtlUpcaseUnicodeString. |
| RtlInitString Initializes a counted string. |
| RtlInitUnicodeString Initializes a counted Unicode string. |
| RtlIsNameLegalDOS8Dot3 Determines whether or not a specified name can be used to create a file on the FAT file system. |
| RtlLocalTimeToSystemTime Converts the specified local time to system time. |
| RtlNtStatusToDosError Converts the specified NTSTATUS code to its equivalent system error code. |
| RtlTimeToSecondsSince1970 Converts the specified 64-bit system time to the number of seconds since the beginning of January 1, 1970. |
| RtlUnicodeStringToAnsiString Converts the specified Unicode source string into an ANSI string. |
| RtlUnicodeStringToOemString Converts the specified Unicode source string into an OEM string. The translation is done with respect to the OEM code page (OCP). |
| RtlUnicodeToMultiByteSize Determines how many bytes are needed to represent a Unicode string as an ANSI string. |
| RtlUniform Generates a uniform random number using D.H. Lehmer's 1948 algorithm. |
Structures
| PEB Contains process information. |
| PEB_LDR_DATA Contains information about the loaded modules for the process. |
| RTL_USER_PROCESS_PARAMETERS Contains process parameter information. |
| STRING Used with the RtlUnicodeStringToOemString function. |
| TEB The Thread Environment Block (TEB structure) describes the state of a thread. |
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for