SECFORCE-SharpWhispers/data/json/function_wrappers-Additional.json

{"NtOpenThread": "public static  Data.Native.NTSTATUS NtOpenThread(\n    ref System.IntPtr ThreadHandle,\n    int DesiredAccess,\n    ref Data.Native.OBJECT_ATTRIBUTES ObjectAttributes,\n    ref Data.Native.CLIENT_ID ClientId)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, DesiredAccess, ObjectAttributes, ClientId\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtOpenThread\", typeof(Delegate.NtOpenThread), ref funcargs);\n\n\t\tClientId = (Data.Native.CLIENT_ID) funcargs[3];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtQueueApcThread": "public static  Data.Native.NTSTATUS NtQueueApcThread(\n    System.IntPtr ThreadHandle,\n    // KNORMAL_ROUTINE\n    IntPtr ApcRoutine,\n    System.IntPtr ApcArgument1,\n    System.IntPtr ApcArgument2,\n    System.IntPtr ApcArgument3)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, ApcRoutine, ApcArgument1, ApcArgument2, ApcArgument3\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtQueueApcThread\", typeof(Delegate.NtQueueApcThread), ref funcargs);\n\n\t\t\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtOpenSection": "public static  Data.Native.NTSTATUS NtOpenSection(\n    ref System.IntPtr SectionHandle,\n    int DesiredAccess,\n    ref Data.Native.OBJECT_ATTRIBUTES ObjectAttributes)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tSectionHandle, DesiredAccess, ObjectAttributes\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtOpenSection\", typeof(Delegate.NtOpenSection), ref funcargs);\n\n\t\tObjectAttributes = (Data.Native.OBJECT_ATTRIBUTES) funcargs[2];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtSuspendThread": "public static  Data.Native.NTSTATUS NtSuspendThread(\n    System.IntPtr ThreadHandle,\n    ref int PreviousSuspendCount)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, PreviousSuspendCount\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtSuspendThread\", typeof(Delegate.NtSuspendThread), ref funcargs);\n\n\t\tPreviousSuspendCount = (int) funcargs[1];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtQueryInformationFile": "public static  Data.Native.NTSTATUS NtQueryInformationFile(\n    System.IntPtr FileHandle,\n    ref Data.Native.IO_STATUS_BLOCK IoStatusBlock,\n    System.IntPtr FileInformation,\n    int Length,\n    Data.Native.FILE_INFORMATION_CLASS FileInformationClass)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tFileHandle, IoStatusBlock, FileInformation, Length, FileInformationClass\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtQueryInformationFile\", typeof(Delegate.NtQueryInformationFile), ref funcargs);\n\n\t\tIoStatusBlock = (Data.Native.IO_STATUS_BLOCK) funcargs[1];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtSetContextThread": "public static  Data.Native.NTSTATUS NtSetContextThread(\n    System.IntPtr ThreadHandle,\n    ref Data.Native.CONTEXT Context)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, Context\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtSetContextThread\", typeof(Delegate.NtSetContextThread), ref funcargs);\n\n\t\tContext = (Data.Native.CONTEXT) funcargs[1];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtResumeProcess": "public static  Data.Native.NTSTATUS NtResumeProcess(\n    System.IntPtr ProcessHandle)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tProcessHandle\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtResumeProcess\", typeof(Delegate.NtResumeProcess), ref funcargs);\n\n\t\t\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtOpenProcessToken": "public static  Data.Native.NTSTATUS NtOpenProcessToken(\n    System.IntPtr ProcessHandle,\n    int DesiredAccess,\n    ref System.IntPtr TokenHandle)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tProcessHandle, DesiredAccess, TokenHandle\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtOpenProcessToken\", typeof(Delegate.NtOpenProcessToken), ref funcargs);\n\n\t\tTokenHandle = (System.IntPtr) funcargs[2];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtWaitForMultipleObjects": "public static  Data.Native.NTSTATUS NtWaitForMultipleObjects(\n    int Count,\n    ref System.IntPtr Handles,\n    Data.Native.WAIT_TYPE WaitType,\n    byte Alertable,\n    ref Data.Native.LARGE_INTEGER Timeout)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tCount, Handles, WaitType, Alertable, Timeout\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtWaitForMultipleObjects\", typeof(Delegate.NtWaitForMultipleObjects), ref funcargs);\n\n\t\tTimeout = (Data.Native.LARGE_INTEGER) funcargs[4];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtQueryDirectoryFile": "public static  Data.Native.NTSTATUS NtQueryDirectoryFile(\n    System.IntPtr FileHandle,\n    System.IntPtr Event,\n    // PIO_APC_ROUTINE\n    IntPtr ApcRoutine,\n    System.IntPtr ApcContext,\n    ref Data.Native.IO_STATUS_BLOCK IoStatusBlock,\n    System.IntPtr FileInformation,\n    int Length,\n    Data.Native.FILE_INFORMATION_CLASS FileInformationClass,\n    byte ReturnSingleEntry,\n    ref Data.Native.UNICODE_STRING FileName,\n    byte RestartScan)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tFileHandle, Event, ApcRoutine, ApcContext, IoStatusBlock, FileInformation, Length, FileInformationClass, ReturnSingleEntry, FileName, RestartScan\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtQueryDirectoryFile\", typeof(Delegate.NtQueryDirectoryFile), ref funcargs);\n\n\t\tFileName = (Data.Native.UNICODE_STRING) funcargs[9];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtAdjustPrivilegesToken": "public static  Data.Native.NTSTATUS NtAdjustPrivilegesToken(\n    System.IntPtr TokenHandle,\n    byte DisableAllPrivileges,\n    ref Data.Native.TOKEN_PRIVILEGES NewState,\n    int BufferLength,\n    ref Data.Native.TOKEN_PRIVILEGES PreviousState,\n    ref int ReturnLength)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tTokenHandle, DisableAllPrivileges, NewState, BufferLength, PreviousState, ReturnLength\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtAdjustPrivilegesToken\", typeof(Delegate.NtAdjustPrivilegesToken), ref funcargs);\n\n\t\tReturnLength = (int) funcargs[5];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtQuerySystemInformation": "public static  Data.Native.NTSTATUS NtQuerySystemInformation(\n    Data.Native.SYSTEM_INFORMATION_CLASS SystemInformationClass,\n    System.IntPtr SystemInformation,\n    int SystemInformationLength,\n    ref int ReturnLength)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tSystemInformationClass, SystemInformation, SystemInformationLength, ReturnLength\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtQuerySystemInformation\", typeof(Delegate.NtQuerySystemInformation), ref funcargs);\n\n\t\tReturnLength = (int) funcargs[3];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtDeviceIoControlFile": "public static  Data.Native.NTSTATUS NtDeviceIoControlFile(\n    System.IntPtr FileHandle,\n    System.IntPtr Event,\n    // PIO_APC_ROUTINE\n    IntPtr ApcRoutine,\n    System.IntPtr ApcContext,\n    ref Data.Native.IO_STATUS_BLOCK IoStatusBlock,\n    int IoControlCode,\n    System.IntPtr InputBuffer,\n    int InputBufferLength,\n    System.IntPtr OutputBuffer,\n    int OutputBufferLength)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tFileHandle, Event, ApcRoutine, ApcContext, IoStatusBlock, IoControlCode, InputBuffer, InputBufferLength, OutputBuffer, OutputBufferLength\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtDeviceIoControlFile\", typeof(Delegate.NtDeviceIoControlFile), ref funcargs);\n\n\t\tIoStatusBlock = (Data.Native.IO_STATUS_BLOCK) funcargs[4];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtResumeThread": "public static  Data.Native.NTSTATUS NtResumeThread(\n    System.IntPtr ThreadHandle,\n    ref int PreviousSuspendCount)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, PreviousSuspendCount\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtResumeThread\", typeof(Delegate.NtResumeThread), ref funcargs);\n\n\t\tPreviousSuspendCount = (int) funcargs[1];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtCreateProcess": "public static  Data.Native.NTSTATUS NtCreateProcess(\n    ref System.IntPtr ProcessHandle,\n    int DesiredAccess,\n    ref Data.Native.OBJECT_ATTRIBUTES ObjectAttributes,\n    System.IntPtr ParentProcess,\n    byte InheritObjectTable,\n    System.IntPtr SectionHandle,\n    System.IntPtr DebugPort,\n    System.IntPtr ExceptionPort)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tProcessHandle, DesiredAccess, ObjectAttributes, ParentProcess, InheritObjectTable, SectionHandle, DebugPort, ExceptionPort\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtCreateProcess\", typeof(Delegate.NtCreateProcess), ref funcargs);\n\n\t\tObjectAttributes = (Data.Native.OBJECT_ATTRIBUTES) funcargs[2];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtSuspendProcess": "public static  Data.Native.NTSTATUS NtSuspendProcess(\n    System.IntPtr ProcessHandle)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tProcessHandle\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtSuspendProcess\", typeof(Delegate.NtSuspendProcess), ref funcargs);\n\n\t\t\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtGetContextThread": "public static  Data.Native.NTSTATUS NtGetContextThread(\n    System.IntPtr ThreadHandle,\n    ref Data.Native.CONTEXT ThreadContext)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, ThreadContext\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtGetContextThread\", typeof(Delegate.NtGetContextThread), ref funcargs);\n\n\t\tThreadContext = (Data.Native.CONTEXT) funcargs[1];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtClose": "public static  Data.Native.NTSTATUS NtClose(\n    System.IntPtr Handle)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tHandle\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtClose\", typeof(Delegate.NtClose), ref funcargs);\n\n\t\t\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtQueryInformationThread": "public static  Data.Native.NTSTATUS NtQueryInformationThread(\n    System.IntPtr ThreadHandle,\n    Data.Native.THREADINFOCLASS ThreadInformationClass,\n    System.IntPtr ThreadInformation,\n    int ThreadInformationLength,\n    ref int ReturnLength)\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\tThreadHandle, ThreadInformationClass, ThreadInformation, ThreadInformationLength, ReturnLength\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtQueryInformationThread\", typeof(Delegate.NtQueryInformationThread), ref funcargs);\n\n\t\tReturnLength = (int) funcargs[4];\n\n\t\treturn retValue;\n\t}\n\t\t\n\n", "NtTestAlert": "public static  Data.Native.NTSTATUS NtTestAlert()\n\t{  \n\t\t// Craft an array for the arguments\n\t\tobject[] funcargs =\n\t\t{\n\t\t\t\n\t\t};\n\n\t\tData.Native.NTSTATUS retValue = (Data.Native.NTSTATUS)DynamicSysInvoke.DynamicSyscallInvoke(\"NtTestAlert\", typeof(Delegate.NtTestAlert), ref funcargs);\n\n\t\t\n\n\t\treturn retValue;\n\t}\n\t\t\n\n"}