SECFORCE-SharpWhispers/data/json/Delegates-Additional.json

{"NtOpenThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": true}, {"name": "DesiredAccess", "type": "int", "in": false, "out": false, "ref": false}, {"name": "ObjectAttributes", "type": "Data.Native.OBJECT_ATTRIBUTES", "in": false, "out": false, "ref": true}, {"name": "ClientId", "type": "Data.Native.CLIENT_ID", "in": false, "out": false, "ref": true}]}, "NtQueueApcThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcRoutine", "type": "IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcArgument1", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcArgument2", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcArgument3", "type": "System.IntPtr", "in": false, "out": false, "ref": false}]}, "NtOpenSection": {"type": "Data.Native.NTSTATUS", "params": [{"name": "SectionHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": true}, {"name": "DesiredAccess", "type": "int", "in": false, "out": false, "ref": false}, {"name": "ObjectAttributes", "type": "Data.Native.OBJECT_ATTRIBUTES", "in": false, "out": false, "ref": true}]}, "NtSuspendThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "PreviousSuspendCount", "type": "int", "in": false, "out": false, "ref": true}]}, "NtQueryInformationFile": {"type": "Data.Native.NTSTATUS", "params": [{"name": "FileHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "IoStatusBlock", "type": "Data.Native.IO_STATUS_BLOCK", "in": false, "out": false, "ref": true}, {"name": "FileInformation", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "Length", "type": "int", "in": false, "out": false, "ref": false}, {"name": "FileInformationClass", "type": "Data.Native.FILE_INFORMATION_CLASS", "in": false, "out": false, "ref": false}]}, "NtSetContextThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "Context", "type": "Data.Native.CONTEXT", "in": false, "out": false, "ref": true}]}, "NtResumeProcess": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ProcessHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}]}, "NtOpenProcessToken": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ProcessHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "DesiredAccess", "type": "int", "in": false, "out": false, "ref": false}, {"name": "TokenHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": true}]}, "NtWaitForMultipleObjects": {"type": "Data.Native.NTSTATUS", "params": [{"name": "Count", "type": "int", "in": false, "out": false, "ref": false}, {"name": "Handles", "type": "System.IntPtr", "in": false, "out": false, "ref": true}, {"name": "WaitType", "type": "Data.Native.WAIT_TYPE", "in": false, "out": false, "ref": false}, {"name": "Alertable", "type": "byte", "in": false, "out": false, "ref": false}, {"name": "Timeout", "type": "Data.Native.LARGE_INTEGER", "in": false, "out": false, "ref": true}]}, "NtQueryDirectoryFile": {"type": "Data.Native.NTSTATUS", "params": [{"name": "FileHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "Event", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcRoutine", "type": "IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcContext", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "IoStatusBlock", "type": "Data.Native.IO_STATUS_BLOCK", "in": false, "out": false, "ref": true}, {"name": "FileInformation", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "Length", "type": "int", "in": false, "out": false, "ref": false}, {"name": "FileInformationClass", "type": "Data.Native.FILE_INFORMATION_CLASS", "in": false, "out": false, "ref": false}, {"name": "ReturnSingleEntry", "type": "byte", "in": false, "out": false, "ref": false}, {"name": "FileName", "type": "Data.Native.UNICODE_STRING", "in": false, "out": false, "ref": true}, {"name": "RestartScan", "type": "byte", "in": false, "out": false, "ref": false}]}, "NtAdjustPrivilegesToken": {"type": "Data.Native.NTSTATUS", "params": [{"name": "TokenHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "DisableAllPrivileges", "type": "byte", "in": false, "out": false, "ref": false}, {"name": "NewState", "type": "Data.Native.TOKEN_PRIVILEGES", "in": false, "out": false, "ref": true}, {"name": "BufferLength", "type": "int", "in": false, "out": false, "ref": false}, {"name": "PreviousState", "type": "Data.Native.TOKEN_PRIVILEGES", "in": false, "out": false, "ref": true}, {"name": "ReturnLength", "type": "int", "in": false, "out": false, "ref": true}]}, "NtQuerySystemInformation": {"type": "Data.Native.NTSTATUS", "params": [{"name": "SystemInformationClass", "type": "Data.Native.SYSTEM_INFORMATION_CLASS", "in": false, "out": false, "ref": false}, {"name": "SystemInformation", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "SystemInformationLength", "type": "int", "in": false, "out": false, "ref": false}, {"name": "ReturnLength", "type": "int", "in": false, "out": false, "ref": true}]}, "NtDeviceIoControlFile": {"type": "Data.Native.NTSTATUS", "params": [{"name": "FileHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "Event", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcRoutine", "type": "IntPtr", "in": false, "out": false, "ref": false}, {"name": "ApcContext", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "IoStatusBlock", "type": "Data.Native.IO_STATUS_BLOCK", "in": false, "out": false, "ref": true}, {"name": "IoControlCode", "type": "int", "in": false, "out": false, "ref": false}, {"name": "InputBuffer", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "InputBufferLength", "type": "int", "in": false, "out": false, "ref": false}, {"name": "OutputBuffer", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "OutputBufferLength", "type": "int", "in": false, "out": false, "ref": false}]}, "NtResumeThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "PreviousSuspendCount", "type": "int", "in": false, "out": false, "ref": true}]}, "NtCreateProcess": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ProcessHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": true}, {"name": "DesiredAccess", "type": "int", "in": false, "out": false, "ref": false}, {"name": "ObjectAttributes", "type": "Data.Native.OBJECT_ATTRIBUTES", "in": false, "out": false, "ref": true}, {"name": "ParentProcess", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "InheritObjectTable", "type": "byte", "in": false, "out": false, "ref": false}, {"name": "SectionHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "DebugPort", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ExceptionPort", "type": "System.IntPtr", "in": false, "out": false, "ref": false}]}, "NtSuspendProcess": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ProcessHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}]}, "NtGetContextThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ThreadContext", "type": "Data.Native.CONTEXT", "in": false, "out": false, "ref": true}]}, "NtClose": {"type": "Data.Native.NTSTATUS", "params": [{"name": "Handle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}]}, "NtQueryInformationThread": {"type": "Data.Native.NTSTATUS", "params": [{"name": "ThreadHandle", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ThreadInformationClass", "type": "Data.Native.THREADINFOCLASS", "in": false, "out": false, "ref": false}, {"name": "ThreadInformation", "type": "System.IntPtr", "in": false, "out": false, "ref": false}, {"name": "ThreadInformationLength", "type": "int", "in": false, "out": false, "ref": false}, {"name": "ReturnLength", "type": "int", "in": false, "out": false, "ref": true}]}, "NtTestAlert": {"type": "Data.Native.NTSTATUS", "params": []}}