Vanara.PInvoke.NtDll 3.4.2 The ID prefix of this package has been reserved for one of the owners of this package by NuGet.org. Prefix Reserved

.NET 5.0 .NET Core 3.1 .NET Standard 2.0 .NET Framework 4.5
Install-Package Vanara.PInvoke.NtDll -Version 3.4.2
dotnet add package Vanara.PInvoke.NtDll --version 3.4.2
<PackageReference Include="Vanara.PInvoke.NtDll" Version="3.4.2" />
For projects that support PackageReference, copy this XML node into the project file to reference the package.
paket add Vanara.PInvoke.NtDll --version 3.4.2
The NuGet Team does not provide support for this client. Please contact its maintainers for support.
#r "nuget: Vanara.PInvoke.NtDll, 3.4.2"
#r directive can be used in F# Interactive, C# scripting and .NET Interactive. Copy this into the interactive tool or source code of the script to reference the package.
// Install Vanara.PInvoke.NtDll as a Cake Addin
#addin nuget:?package=Vanara.PInvoke.NtDll&version=3.4.2

// Install Vanara.PInvoke.NtDll as a Cake Tool
#tool nuget:?package=Vanara.PInvoke.NtDll&version=3.4.2
The NuGet Team does not provide support for this client. Please contact its maintainers for support.

Vanara

Vanara.PInvoke.NtDll NuGet Package

Version Build status

PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.

What is Vanara?

Vanara is a community project that contains various .NET assemblies which have P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries.

Issues?

First check if it's already fixed by trying the AppVeyor build. If you're still running into problems, file an issue.

Included in Vanara.PInvoke.NtDll

Functions Enumerations Structures
_vscprintf<br>ApiSetQueryApiSetPresenceEx<br>DbgBreakPoint<br>DbgPrint<br>DbgPrintEx<br>DbgPrompt<br>EtwCheckCoverage<br>LdrCallEnclave<br>LdrControlFlowGuardEnforced<br>LdrCreateEnclave<br>LdrDeleteEnclave<br>LdrFastFailInLoaderCallout<br>LdrHotPatchNotify<br>LdrInitializeEnclave<br>LdrIsModuleSxsRedirected<br>LdrLoadEnclaveModule<br>LdrRegisterDllNotification<br>LdrUnregisterDllNotification<br>MicrosoftTelemetryAssertTriggeredUM<br>NtAcquireCrossVmMutant<br>NtAllocateUserPhysicalPagesEx<br>NtAllocateVirtualMemory<br>NtAllocateVirtualMemoryEx<br>NtCallEnclave<br>NtChangeProcessState<br>NtChangeThreadState<br>NtClose<br>NtCommitComplete<br>NtCommitEnlistment<br>NtCommitTransaction<br>NtCompareTokens<br>NtContinueEx<br>NtCreateCrossVmEvent<br>NtCreateCrossVmMutant<br>NtCreateEnlistment<br>NtCreateFile<br>NtCreateFileA<br>NtCreateFileW<br>NtCreateIoRing<br>NtCreateProcess<br>NtCreateProcessEx<br>NtCreateProcessStateChange<br>NtCreateResourceManager<br>NtCreateSection<br>NtCreateSectionA<br>NtCreateSectionEx<br>NtCreateSectionW<br>NtCreateThreadStateChange<br>NtCreateTransaction<br>NtCreateTransactionA<br>NtCreateTransactionManager<br>NtCreateTransactionManagerA<br>NtCreateTransactionManagerW<br>NtCreateTransactionW<br>NtDeviceIoControlFile<br>NtDirectGraphicsCall<br>NtDuplicateToken<br>NtEnumerateTransactionObject<br>NtFlushBuffersFileEx<br>NtFreeVirtualMemory<br>NtFsControlFile<br>NtGetCurrentProcessorNumber<br>NtGetNotificationResourceManager<br>NtLoadKey3<br>NtLockFile<br>NtManageHotPatch<br>NtMapViewOfSectionEx<br>NtNotifyChangeDirectoryFileEx<br>NtNotifyChangeMultipleKeys<br>NtOpenDirectoryObject<br>NtOpenEnlistment<br>NtOpenFile<br>NtOpenProcess<br>NtOpenProcessTokenEx<br>NtOpenResourceManager<br>NtOpenSymbolicLinkObject<br>NtOpenThread<br>NtOpenThreadTokenEx<br>NtOpenTransaction<br>NtOpenTransactionManager<br>NtPowerInformation<br>NtPrepareComplete<br>NtPrepareEnlistment<br>NtPrePrepareComplete<br>NtPrePrepareEnlistment<br>NtProtectVirtualMemory<br>NtPssCaptureVaSpaceBulk<br>NtQueryAttributesFile<br>NtQueryDirectoryFile<br>NtQueryDirectoryFileEx<br>NtQueryInformationEnlistment<br>NtQueryInformationFile<br>NtQueryInformationProcess<br>NtQueryInformationResourceManager<br>NtQueryInformationThread<br>NtQueryInformationToken<br>NtQueryInformationTransaction<br>NtQueryInformationTransactionManager<br>NtQueryIoRingCapabilities<br>NtQueryKey<br>NtQueryMultipleValueKey<br>NtQueryObject<br>NtQueryPerformanceCounter<br>NtQueryQuotaInformationFile<br>NtQuerySecurityObject<br>NtQuerySymbolicLinkObject<br>NtQuerySystemInformation<br>NtQuerySystemTime<br>NtQueryVirtualMemory<br>NtQueryVolumeInformationFile<br>NtQueueApcThreadEx2<br>NtReadFile<br>NtReadOnlyEnlistment<br>NtReadVirtualMemoryEx<br>NtRecoverEnlistment<br>NtRecoverResourceManager<br>NtRecoverTransactionManager<br>NtRenameKey<br>NtRenameTransactionManager<br>NtRollbackComplete<br>NtRollbackEnlistment<br>NtRollbackTransaction<br>NtRollforwardTransactionManager<br>NtSetInformationEnlistment<br>NtSetInformationFile<br>NtSetInformationIoRing<br>NtSetInformationKey<br>NtSetInformationResourceManager<br>NtSetInformationThread<br>NtSetInformationToken<br>NtSetInformationTransaction<br>NtSetInformationTransactionManager<br>NtSetQuotaInformationFile<br>NtSetSecurityObject<br>NtSinglePhaseReject<br>NtSubmitIoRing<br>NtTerminateEnclave<br>NtUnlockFile<br>NtUnmapViewOfSection<br>NtWaitForSingleObject<br>NtWow64QueryInformationProcess64<br>NtWow64ReadVirtualMemory64<br>NtWriteFile<br>RtlAbsoluteToSelfRelativeSD<br>RtlAddAccessAllowedAce<br>RtlAddAccessAllowedAceEx<br>RtlAddAce<br>RtlAddFunctionTable<br>RtlAddGrowableFunctionTable<br>RtlAllocateAndInitializeSid<br>RtlAllocateHeap<br>RtlAnsiStringToUnicodeString<br>RtlAppendStringToString<br>RtlAppendUnicodeStringToString<br>RtlAppendUnicodeToString<br>RtlAreBitsClear<br>RtlAreBitsClearEx<br>RtlAreBitsSet<br>RtlCallEnclaveReturn<br>RtlCapabilityCheckForSingleSessionSku<br>RtlCaptureContext<br>RtlCaptureContext2<br>RtlCaptureStackBackTrace<br>RtlCharToInteger<br>RtlCheckRegistryKey<br>RtlCheckSystemBootStatusIntegrity<br>RtlClearAllBitsEx<br>RtlClearBitEx<br>RtlClearBits<br>RtlClearBitsEx<br>RtlCmEncodeMemIoResource<br>RtlCompareExchangePointerMapping<br>RtlCompareExchangePropertyStore<br>RtlCompareMemory<br>RtlCompareMemoryUlong<br>RtlCompareString<br>RtlCompareUnicodeString<br>RtlCompressBuffer<br>RtlConstructCrossVmEventPath<br>RtlConstructCrossVmMutexPath<br>RtlConvertHostPerfCounterToPerfCounter<br>RtlConvertSidToUnicodeString<br>RtlCopyLuid<br>RtlCopyMemoryNonTemporal<br>RtlCopySid<br>RtlCopyString<br>RtlCopyUnicodeString<br>RtlCreateAcl<br>RtlCreateHeap<br>RtlCreateProcessParametersWithTemplate<br>RtlCreateRegistryKey<br>RtlCreateSecurityDescriptor<br>RtlCreateSystemVolumeInformationFolder<br>RtlCreateUnicodeString<br>RtlCreateUserFiberShadowStack<br>RtlCustomCPToUnicodeN<br>RtlDecompressBuffer<br>RtlDecompressBufferEx<br>RtlDecompressFragment<br>RtlDelayExecution<br>RtlDelete<br>RtlDeleteAce<br>RtlDeleteElementGenericTable<br>RtlDeleteElementGenericTableAvl<br>RtlDeleteFunctionTable<br>RtlDeleteGrowableFunctionTable<br>RtlDeleteNoSplay<br>RtlDeleteRegistryValue<br>RtlDestroyHeap<br>RtlDisownModuleHeapAllocation<br>RtlDoesNameContainWildCards<br>RtlDosLongPathNameToNtPathName_U_WithStatus<br>RtlDosLongPathNameToRelativeNtPathName_U_WithStatus<br>RtlDowncaseUnicodeString<br>RtlDrainNonVolatileFlush<br>RtlEnclaveCallDispatch<br>RtlEnclaveCallDispatchReturn<br>RtlEnumerateGenericTable<br>RtlEnumerateGenericTableAvl<br>RtlEnumerateGenericTableLikeADirectory<br>RtlEnumerateGenericTableWithoutSplaying<br>RtlEnumerateGenericTableWithoutSplayingAvl<br>RtlEqualPrefixSid<br>RtlEqualSid<br>RtlEqualUnicodeString<br>RtlEthernetAddressToString<br>RtlEthernetStringToAddress<br>RtlExtendCorrelationVector<br>RtlFillMemoryNonTemporal<br>RtlFillNonVolatileMemory<br>RtlFindClearBits<br>RtlFindClearBitsAndSet<br>RtlFindClearBitsAndSetEx<br>RtlFindClearBitsEx<br>RtlFindClearRuns<br>RtlFindLastBackwardRunClear<br>RtlFindLeastSignificantBit<br>RtlFindLongestRunClear<br>RtlFindMostSignificantBit<br>RtlFindNextForwardRunClear<br>RtlFindSetBits<br>RtlFindSetBitsAndClear<br>RtlFindSetBitsAndClearEx<br>RtlFindSetBitsEx<br>RtlFirstEntrySList<br>RtlFlsGetValue<br>RtlFlsSetValue<br>RtlFlushNonVolatileMemory<br>RtlFlushNonVolatileMemoryRanges<br>RtlFreeAnsiString<br>RtlFreeHeap<br>RtlFreeNonVolatileToken<br>RtlFreeOemString<br>RtlFreeUnicodeString<br>RtlFreeUserFiberShadowStack<br>RtlFreeUTF8String<br>RtlGenerate8dot3Name<br>RtlGetAce<br>RtlGetCompressionWorkSpaceSize<br>RtlGetDaclSecurityDescriptor<br>RtlGetElementGenericTable<br>RtlGetElementGenericTableAvl<br>RtlGetEnabledExtendedFeatures<br>RtlGetExtendedContextLength2<br>RtlGetFunctionTableListHead<br>RtlGetGroupSecurityDescriptor<br>RtlGetImageFileMachines<br>RtlGetMultiTimePrecise<br>RtlGetNonVolatileToken<br>RtlGetOwnerSecurityDescriptor<br>RtlGetPersistedStateLocation<br>RtlGetReturnAddressHijackTarget<br>RtlGetSaclSecurityDescriptor<br>RtlGetSystemBootStatus<br>RtlGetSystemBootStatusEx<br>RtlGetSystemGlobalData<br>RtlGetSystemTimeAndBias<br>RtlGetUnloadEventTrace<br>RtlGetUnloadEventTraceEx<br>RtlGetVersion<br>RtlGrowFunctionTable<br>RtlGUIDFromString<br>RtlHashUnicodeString<br>RtlIncrementCorrelationVector<br>RtlInitAnsiString<br>RtlInitCodePageTable<br>RtlInitializeBitMap<br>RtlInitializeBitMapEx<br>RtlInitializeCorrelationVector<br>RtlInitializeExtendedContext2<br>RtlInitializeGenericTable<br>RtlInitializeGenericTableAvl<br>RtlInitializeSid<br>RtlInitializeSidEx<br>RtlInitializeSListHead<br>RtlInitString<br>RtlInitStringEx<br>RtlInitUnicodeString<br>RtlInitUTF8String<br>RtlInitUTF8StringEx<br>RtlInsertElementGenericTable<br>RtlInsertElementGenericTableAvl<br>RtlInsertElementGenericTableFullAvl<br>RtlInstallFunctionTableCallback<br>RtlInt64ToUnicodeString<br>RtlIntegerToUnicodeString<br>RtlInterlockedFlushSList<br>RtlInterlockedPushEntrySList<br>RtlIoDecodeMemIoResource<br>RtlIoEncodeMemIoResource<br>RtlIpv4AddressToStringA<br>RtlIpv4AddressToStringExW<br>RtlIpv4StringToAddress<br>RtlIpv4StringToAddressEx<br>RtlIpv6AddressToString<br>RtlIpv6AddressToStringExW<br>RtlIpv6StringToAddress<br>RtlIpv6StringToAddressExW<br>RtlIsApiSetImplemented<br>RtlIsCloudFilesPlaceholder<br>RtlIsCurrentProcess<br>RtlIsCurrentThread<br>RtlIsEcCode<br>RtlIsEnclaveFeaturePresent<br>RtlIsGenericTableEmpty<br>RtlIsGenericTableEmptyAvl<br>RtlIsNameInExpression<br>RtlIsNameInUnUpcasedExpression<br>RtlIsNameLegalDOS8Dot3<br>RtlIsPartialPlaceholder<br>RtlIsPartialPlaceholderFileHandle<br>RtlIsPartialPlaceholderFileInfo<br>RtlIsStateSeparationEnabled<br>RtlIsValidLocaleName<br>RtlIsZeroMemory<br>RtlLengthSecurityDescriptor<br>RtlLengthSid<br>RtlLocalTimeToSystemTime<br>RtlLookupElementGenericTable<br>RtlLookupElementGenericTableAvl<br>RtlLookupElementGenericTableFullAvl<br>RtlLookupFirstMatchingElementGenericTableAvl<br>RtlLookupFunctionEntry<br>RtlMapGenericMask<br>RtlMoveMemory<br>RtlMultiByteToUnicodeN<br>RtlMultiByteToUnicodeSize<br>RtlNormalizeSecurityDescriptor<br>RtlNotifyFeatureUsage<br>RtlNtStatusToDosError<br>RtlNumberGenericTableElements<br>RtlNumberGenericTableElementsAvl<br>RtlNumberOfClearBits<br>RtlNumberOfClearBitsEx<br>RtlNumberOfSetBits<br>RtlNumberOfSetBitsEx<br>RtlNumberOfSetBitsUlongPtr<br>RtlOemStringToUnicodeString<br>RtlOemToUnicodeN<br>RtlOpenCrossProcessEmulatorWorkConnection<br>RtlPcToFileHeader<br>RtlPrefixUnicodeString<br>RtlpTimeFieldsToTime<br>RtlpTimeToTimeFields<br>RtlpWow64CtxFromAmd64<br>RtlpWow64GetContextOnAmd64<br>RtlpWow64SetContextOnAmd64<br>RtlQueryAllFeatureConfigurations<br>RtlQueryDepthSList<br>RtlQueryFeatureConfiguration<br>RtlQueryFeatureConfigurationChangeStamp<br>RtlQueryFeatureUsageNotificationSubscriptions<br>RtlQueryImageMitigationPolicy<br>RtlQueryPointerMapping<br>RtlQueryProcessPlaceholderCompatibilityMode<br>RtlQueryPropertyStore<br>RtlQueryRegistryValues<br>RtlQueryRegistryValueWithFallback<br>RtlQueryThreadPlaceholderCompatibilityMode<br>RtlQueryTokenHostIdAsUlong64<br>RtlRaiseCustomSystemEventTrigger<br>RtlRaiseException<br>RtlRaiseExceptionForReturnAddressHijack<br>RtlRaiseNoncontinuableException<br>RtlRandom<br>RtlRandomEx<br>RtlRealPredecessor<br>RtlRealSuccessor<br>RtlRegisterFeatureConfigurationChangeNotification<br>RtlRemovePointerMapping<br>RtlRemovePropertyStore<br>RtlRestoreContext<br>RtlRestoreSystemBootStatusDefaults<br>RtlRestoreThreadPreferredUILanguages<br>RtlRunOnceBeginInitialize<br>RtlRunOnceComplete<br>RtlRunOnceExecuteOnce<br>RtlRunOnceInitialize<br>RtlSecondsSince1970ToTime<br>RtlSecondsSince1980ToTime<br>RtlSelfRelativeToAbsoluteSD<br>RtlSetAllBits<br>RtlSetAllBitsEx<br>RtlSetBitEx<br>RtlSetBits<br>RtlSetBitsEx<br>RtlSetDaclSecurityDescriptor<br>RtlSetFeatureConfigurations<br>RtlSetGroupSecurityDescriptor<br>RtlSetImageMitigationPolicy<br>RtlSetOwnerSecurityDescriptor<br>RtlSetProcessPlaceholderCompatibilityMode<br>RtlSetProxiedProcessId<br>RtlSetSystemBootStatus<br>RtlSetSystemBootStatusEx<br>RtlSetThreadPlaceholderCompatibilityMode<br>RtlSetThreadPreferredUILanguages2<br>RtlSplay<br>RtlStringFromGUID<br>RtlSubAuthorityCountSid<br>RtlSubAuthoritySid<br>RtlSubscribeForFeatureUsageNotification<br>RtlSubtreePredecessor<br>RtlSubtreeSuccessor<br>RtlTestBitEx<br>RtlTimeFieldsToTime<br>RtlTimeToSecondsSince1970<br>RtlTimeToSecondsSince1980<br>RtlTimeToTimeFields<br>RtlUdiv128<br>RtlUnicodeStringToAnsiString<br>RtlUnicodeStringToCountedOemString<br>RtlUnicodeStringToInteger<br>RtlUnicodeStringToOemString<br>RtlUnicodeStringToUTF8String<br>RtlUnicodeToCustomCPN<br>RtlUnicodeToMultiByteN<br>RtlUnicodeToMultiByteSize<br>RtlUnicodeToOemN<br>RtlUnicodeToUTF8N<br>RtlUniform<br>RtlUnregisterFeatureConfigurationChangeNotification<br>RtlUnsubscribeFromFeatureUsageNotifications<br>RtlUnwind<br>RtlUpcaseUnicodeChar<br>RtlUpcaseUnicodeString<br>RtlUpcaseUnicodeStringToCountedOemString<br>RtlUpcaseUnicodeStringToOemString<br>RtlUpcaseUnicodeToCustomCPN<br>RtlUpcaseUnicodeToMultiByteN<br>RtlUpcaseUnicodeToOemN<br>RtlUpperChar<br>RtlUpperString<br>RtlUserFiberStart<br>RtlUTF8StringToUnicodeString<br>RtlUTF8ToUnicodeN<br>RtlValidateCorrelationVector<br>RtlValidRelativeSecurityDescriptor<br>RtlVerifyVersionInfo<br>RtlVirtualUnwind<br>RtlVirtualUnwind2<br>RtlWow64ChangeProcessState<br>RtlWow64ChangeThreadState<br>RtlWow64GetEquivalentMachineCHPE<br>RtlWow64GetSharedInfoProcess<br>RtlWow64PopAllCrossProcessWorkFromWorkList<br>RtlWow64PopCrossProcessWorkFromFreeList<br>RtlWow64PushCrossProcessWorkOntoFreeList<br>RtlWow64PushCrossProcessWorkOntoWorkList<br>RtlWow64RequestCrossProcessHeavyFlush<br>RtlWow64SuspendProcess<br>RtlWriteNonVolatileMemory<br>RtlWriteRegistryValue<br>TpSetPoolThreadCpuSets<br>vDbgPrintEx<br>vDbgPrintExWithPrefix<br>VerSetConditionMask<br>ZwAcquireCrossVmMutant<br>ZwAllocateLocallyUniqueId<br>ZwAllocateUserPhysicalPagesEx<br>ZwAllocateVirtualMemory<br>ZwAllocateVirtualMemoryEx<br>ZwCallEnclave<br>ZwChangeProcessState<br>ZwChangeThreadState<br>ZwClose<br>ZwCommitComplete<br>ZwCommitEnlistment<br>ZwCommitTransaction<br>ZwContinueEx<br>ZwCreateCrossVmEvent<br>ZwCreateCrossVmMutant<br>ZwCreateDirectoryObject<br>ZwCreateEnlistment<br>ZwCreateEvent<br>ZwCreateFile<br>ZwCreateIoRing<br>ZwCreateKey<br>ZwCreateKeyTransacted<br>ZwCreateProcessStateChange<br>ZwCreateResourceManager<br>ZwCreateSection<br>ZwCreateSectionEx<br>ZwCreateThreadStateChange<br>ZwCreateTransaction<br>ZwCreateTransactionManager<br>ZwDeleteFile<br>ZwDeleteKey<br>ZwDeleteValueKey<br>ZwDeviceIoControlFile<br>ZwDirectGraphicsCall<br>ZwDuplicateObject<br>ZwDuplicateToken<br>ZwEnumerateKey<br>ZwEnumerateTransactionObject<br>ZwEnumerateValueKey<br>ZwFlushBuffersFileEx<br>ZwFlushKey<br>ZwFlushVirtualMemory<br>ZwFreeVirtualMemory<br>ZwFsControlFile<br>ZwGetNotificationResourceManager<br>ZwLoadDriver<br>ZwLoadKey3<br>ZwLockFile<br>ZwMakeTemporaryObject<br>ZwManageHotPatch<br>ZwMapViewOfSection<br>ZwMapViewOfSectionEx<br>ZwNotifyChangeDirectoryFileEx<br>ZwNotifyChangeKey<br>ZwOpenDirectoryObject<br>ZwOpenEnlistment<br>ZwOpenEvent<br>ZwOpenFile<br>ZwOpenKey<br>ZwOpenKeyEx<br>ZwOpenKeyTransacted<br>ZwOpenKeyTransactedEx<br>ZwOpenProcess<br>ZwOpenProcessTokenEx<br>ZwOpenResourceManager<br>ZwOpenSection<br>ZwOpenSymbolicLinkObject<br>ZwOpenThreadTokenEx<br>ZwOpenTransaction<br>ZwOpenTransactionManager<br>ZwPowerInformation<br>ZwPrepareComplete<br>ZwPrepareEnlistment<br>ZwPrePrepareComplete<br>ZwPrePrepareEnlistment<br>ZwPssCaptureVaSpaceBulk<br>ZwQueryDirectoryFile<br>ZwQueryDirectoryFileEx<br>ZwQueryEaFile<br>ZwQueryFullAttributesFile<br>ZwQueryInformationEnlistment<br>ZwQueryInformationFile<br>ZwQueryInformationProcess<br>ZwQueryInformationResourceManager<br>ZwQueryInformationToken<br>ZwQueryInformationTransaction<br>ZwQueryInformationTransactionManager<br>ZwQueryIoRingCapabilities<br>ZwQueryKey<br>ZwQueryObject<br>ZwQueryQuotaInformationFile<br>ZwQuerySecurityObject<br>ZwQuerySymbolicLinkObject<br>ZwQuerySystemInformation<br>ZwQuerySystemInformationEx<br>ZwQueryValueKey<br>ZwQueryVirtualMemory<br>ZwQueryVolumeInformationFile<br>ZwQueueApcThreadEx2<br>ZwReadFile<br>ZwReadOnlyEnlistment<br>ZwReadVirtualMemoryEx<br>ZwRecoverEnlistment<br>ZwRecoverResourceManager<br>ZwRecoverTransactionManager<br>ZwRollbackComplete<br>ZwRollbackEnlistment<br>ZwRollbackTransaction<br>ZwRollforwardTransactionManager<br>ZwSetEaFile<br>ZwSetEvent<br>ZwSetInformationEnlistment<br>ZwSetInformationFile<br>ZwSetInformationIoRing<br>ZwSetInformationResourceManager<br>ZwSetInformationThread<br>ZwSetInformationToken<br>ZwSetInformationTransaction<br>ZwSetInformationVirtualMemory<br>ZwSetQuotaInformationFile<br>ZwSetSecurityObject<br>ZwSetValueKey<br>ZwSetVolumeInformationFile<br>ZwSinglePhaseReject<br>ZwSubmitIoRing<br>ZwSuspendProcess<br>ZwTerminateEnclave<br>ZwTerminateProcess<br>ZwUnloadDriver<br>ZwUnlockFile<br>ZwUnmapViewOfSection<br>ZwUnmapViewOfSectionEx<br>ZwWaitForSingleObject<br>ZwWriteFile<br> NOTIFICATION_MASK<br>SYSTEM_INFORMATION_CLASS<br>NtFileCreateOptions<br>NtFileMode<br>KEY_INFORMATION_CLASS<br>PROCESS_CREATE_FLAGS<br>PROCESSINFOCLASS<br>SUBSYSTEM_INFORMATION_TYPE<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br> CLIENT_ID<br>KEY_NAME_INFORMATION<br>LDR_DLL_NOTIFICATION_DATA<br>OBJECT_ATTRIBUTES<br>RTL_HEAP_PARAMETERS<br>IO_STATUS_BLOCK<br>KEY_BASIC_INFORMATION<br>KEY_FULL_INFORMATION<br>KEY_NODE_INFORMATION<br>KERNEL_USER_TIMES<br>PEB<br>PEB_WOW64<br>PROCESS_BASIC_INFORMATION<br>PROCESS_BASIC_INFORMATION_WOW64<br>RTL_USER_PROCESS_PARAMETERS<br>RTL_USER_PROCESS_PARAMETERS_WOW64<br>SYSTEM_BASIC_INFORMATION<br>SYSTEM_PROCESS_INFORMATION<br>SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION<br>SYSTEM_REGISTRY_QUOTA_INFORMATION<br>SYSTEM_THREAD_INFORMATION<br>UNICODE_STRING<br>UNICODE_STRING_WOW64<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
Product Versions
.NET net5.0 net5.0-windows net6.0 net6.0-android net6.0-ios net6.0-maccatalyst net6.0-macos net6.0-tvos net6.0-windows
.NET Core netcoreapp2.0 netcoreapp2.1 netcoreapp2.2 netcoreapp3.0 netcoreapp3.1
.NET Standard netstandard2.0 netstandard2.1
.NET Framework net45 net451 net452 net46 net461 net462 net463 net47 net471 net472 net48
MonoAndroid monoandroid
MonoMac monomac
MonoTouch monotouch
Tizen tizen40 tizen60
Xamarin.iOS xamarinios
Xamarin.Mac xamarinmac
Xamarin.TVOS xamarintvos
Xamarin.WatchOS xamarinwatchos
Compatible target framework(s)
Additional computed target framework(s)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (2)

Showing the top 2 NuGet packages that depend on Vanara.PInvoke.NtDll:

Package Downloads
Vanara.SystemServices The ID prefix of this package has been reserved for one of the owners of this package by NuGet.org.

Classes for system related items derived from the Vanara PInvoke libraries. Includes extensions for Process (privileges and elavation), FileInfo (compression info), Shared Network Drives and Devices, and ServiceController (SetStartType) that pull extended information through native API calls.

Vanara.Library The ID prefix of this package has been reserved for one of the owners of this package by NuGet.org.

The full set of packages associated with the Vanara PInvoke Libraries.

GitHub repositories (1)

Showing the top 1 popular GitHub repositories that depend on Vanara.PInvoke.NtDll:

Repository Stars
zhuxb711/RX-Explorer
一款优雅的UWP文件管理器 | An elegant UWP Explorer
Version Downloads Last updated
3.4.2 56 5/13/2022
3.4.1 86 5/5/2022
3.4.0 409 3/14/2022
3.3.15 711 12/27/2021
3.3.14 559 10/26/2021
3.3.13 309 9/30/2021
3.3.12 337 8/30/2021
3.3.11 381 7/22/2021
3.3.10 438 6/4/2021
3.3.9 467 5/7/2021
3.3.8 481 4/7/2021
3.3.7 305 3/24/2021
3.3.6 272 3/19/2021
3.3.5 235 3/1/2021
3.3.4 241 2/11/2021
3.3.3 242 2/3/2021
3.3.2 296 1/21/2021
3.3.1 305 1/20/2021
3.3.0 361 11/20/2020
3.2.21 305 11/13/2020
3.2.20 391 11/8/2020
3.2.19 364 10/23/2020
3.2.18 339 10/21/2020
3.2.17 447 9/20/2020
3.2.16 345 9/7/2020
3.2.15 393 8/30/2020
3.2.14 340 8/20/2020
3.2.13 421 7/27/2020
3.2.12 378 7/13/2020
3.2.11 429 6/28/2020
3.2.10 405 6/14/2020
3.2.9 395 6/3/2020
3.2.7 387 5/4/2020
3.2.6 417 4/21/2020
3.2.5 359 4/15/2020
3.2.4 389 4/12/2020
3.2.3 386 4/1/2020
3.2.2 357 3/24/2020
3.2.1 340 3/17/2020
3.2.0 584 2/27/2020
3.1.9 453 1/17/2020
3.1.8 405 1/13/2020
3.1.7 414 1/6/2020
3.1.6 425 12/12/2019
3.1.5 480 11/26/2019
3.1.4 383 11/25/2019
3.1.3 397 11/8/2019
3.1.2 378 11/4/2019
3.1.1 402 10/17/2019
3.1.0 393 10/3/2019
3.0.1 450 9/20/2019
3.0.0 361 8/27/2019
2.3.11 565 6/9/2019
2.3.10 405 6/5/2019
2.3.9 368 5/26/2019
2.3.8 391 5/13/2019
2.3.7 446 4/24/2019
2.3.6 408 4/17/2019
2.3.5 380 4/10/2019
2.3.4 402 3/9/2019
2.3.3 389 3/8/2019
2.3.2 410 2/28/2019
2.3.1 396 2/25/2019
2.3.0 409 2/22/2019
2.2.1 463 2/12/2019
2.2.0 454 2/1/2019
2.1.2 674 1/14/2019
2.1.0 656 12/15/2018
2.0.1 513 12/7/2018
2.0.0 506 11/28/2018
1.1.0 589 9/10/2018

Currently implements:

Functions
ApiSetQueryApiSetPresenceEx DbgBreakPoint DbgPrint DbgPrintEx DbgPrompt EtwCheckCoverage LdrCallEnclave LdrControlFlowGuardEnforced LdrCreateEnclave LdrDeleteEnclave LdrFastFailInLoaderCallout LdrHotPatchNotify LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadEnclaveModule LdrRegisterDllNotification LdrUnregisterDllNotification MicrosoftTelemetryAssertTriggeredUM NtAcquireCrossVmMutant NtAllocateUserPhysicalPagesEx NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtCallEnclave NtChangeProcessState NtChangeThreadState NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareTokens NtContinueEx NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateEnlistment NtCreateFile NtCreateFileA NtCreateFileW NtCreateIoRing NtCreateProcess NtCreateProcessEx NtCreateProcessStateChange NtCreateResourceManager NtCreateSection NtCreateSectionA NtCreateSectionEx NtCreateSectionW NtCreateThreadStateChange NtCreateTransaction NtCreateTransactionA NtCreateTransactionManager NtCreateTransactionManagerA NtCreateTransactionManagerW NtCreateTransactionW NtDeviceIoControlFile NtDirectGraphicsCall NtDuplicateToken NtEnumerateTransactionObject NtFlushBuffersFileEx NtFreeVirtualMemory NtFsControlFile NtGetCurrentProcessorNumber NtGetNotificationResourceManager NtLoadKey3 NtLockFile NtManageHotPatch NtMapViewOfSectionEx NtNotifyChangeDirectoryFileEx NtNotifyChangeMultipleKeys NtOpenDirectoryObject NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessTokenEx NtOpenResourceManager NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPowerInformation NtPrepareComplete NtPrepareEnlistment NtPrePrepareComplete NtPrePrepareEnlistment NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryIoRingCapabilities NtQueryKey NtQueryMultipleValueKey NtQueryObject NtQueryPerformanceCounter NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueueApcThreadEx2 NtReadFile NtReadOnlyEnlistment NtReadVirtualMemoryEx NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRenameKey NtRenameTransactionManager NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtRollforwardTransactionManager NtSetInformationEnlistment NtSetInformationFile NtSetInformationIoRing NtSetInformationKey NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetQuotaInformationFile NtSetSecurityObject NtSinglePhaseReject NtSubmitIoRing NtTerminateEnclave NtUnlockFile NtUnmapViewOfSection NtWaitForSingleObject NtWow64QueryInformationProcess64 NtWow64ReadVirtualMemory64 NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiStringToUnicodeString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlCallEnclaveReturn RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureContext2 RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlClearAllBitsEx RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmEncodeMemIoResource RtlCompareExchangePointerMapping RtlCompareExchangePropertyStore RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlConvertHostPerfCounterToPerfCounter RtlConvertSidToUnicodeString RtlCopyLuid RtlCopyMemoryNonTemporal RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateHeap RtlCreateProcessParametersWithTemplate RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserFiberShadowStack RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDelayExecution RtlDelete RtlDeleteAce RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDestroyHeap RtlDisownModuleHeapAllocation RtlDoesNameContainWildCards RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDowncaseUnicodeString RtlDrainNonVolatileFlush RtlEnclaveCallDispatch RtlEnclaveCallDispatchReturn RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlEthernetAddressToString RtlEthernetStringToAddress RtlExtendCorrelationVector RtlFillMemoryNonTemporal RtlFillNonVolatileMemory RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsAndSetEx RtlFindClearBitsEx RtlFindClearRuns RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFirstEntrySList RtlFlsGetValue RtlFlsSetValue RtlFlushNonVolatileMemory RtlFlushNonVolatileMemoryRanges RtlFreeAnsiString RtlFreeHeap RtlFreeNonVolatileToken RtlFreeOemString RtlFreeUnicodeString RtlFreeUserFiberShadowStack RtlFreeUTF8String RtlGenerate8dot3Name RtlGetAce RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength2 RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetImageFileMachines RtlGetMultiTimePrecise RtlGetNonVolatileToken RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetSystemGlobalData RtlGetSystemTimeAndBias RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetVersion RtlGrowFunctionTable RtlGUIDFromString RtlHashUnicodeString RtlIncrementCorrelationVector RtlInitAnsiString RtlInitCodePageTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeSid RtlInitializeSidEx RtlInitializeSListHead RtlInitString RtlInitStringEx RtlInitUnicodeString RtlInitUTF8String RtlInitUTF8StringEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFullAvl RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToUnicodeString RtlInterlockedFlushSList RtlInterlockedPushEntrySList RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExW RtlIpv4StringToAddress RtlIpv4StringToAddressEx RtlIpv6AddressToString RtlIpv6AddressToStringExW RtlIpv6StringToAddress RtlIpv6StringToAddressExW RtlIsApiSetImplemented RtlIsCloudFilesPlaceholder RtlIsCurrentProcess RtlIsCurrentThread RtlIsEcCode RtlIsEnclaveFeaturePresent RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsStateSeparationEnabled RtlIsValidLocaleName RtlIsZeroMemory RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFullAvl RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNormalizeSecurityDescriptor RtlNotifyFeatureUsage RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCrossProcessEmulatorWorkConnection RtlPcToFileHeader RtlPrefixUnicodeString RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpWow64CtxFromAmd64 RtlpWow64GetContextOnAmd64 RtlpWow64SetContextOnAmd64 RtlQueryAllFeatureConfigurations RtlQueryDepthSList RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryImageMitigationPolicy RtlQueryPointerMapping RtlQueryProcessPlaceholderCompatibilityMode RtlQueryPropertyStore RtlQueryRegistryValues RtlQueryRegistryValueWithFallback RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTokenHostIdAsUlong64 RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseExceptionForReturnAddressHijack RtlRaiseNoncontinuableException RtlRandom RtlRandomEx RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRemovePointerMapping RtlRemovePropertyStore RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetAllBitsEx RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetDaclSecurityDescriptor RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetImageMitigationPolicy RtlSetOwnerSecurityDescriptor RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPreferredUILanguages2 RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlTestBitEx RtlTimeFieldsToTime RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUdiv128 RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUserFiberStart RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlValidateCorrelationVector RtlValidRelativeSecurityDescriptor RtlVerifyVersionInfo RtlVirtualUnwind RtlVirtualUnwind2 RtlWow64ChangeProcessState RtlWow64ChangeThreadState RtlWow64GetEquivalentMachineCHPE RtlWow64GetSharedInfoProcess RtlWow64PopAllCrossProcessWorkFromWorkList RtlWow64PopCrossProcessWorkFromFreeList RtlWow64PushCrossProcessWorkOntoFreeList RtlWow64PushCrossProcessWorkOntoWorkList RtlWow64RequestCrossProcessHeavyFlush RtlWow64SuspendProcess RtlWriteNonVolatileMemory RtlWriteRegistryValue TpSetPoolThreadCpuSets vDbgPrintEx vDbgPrintExWithPrefix VerSetConditionMask ZwAcquireCrossVmMutant ZwAllocateLocallyUniqueId ZwAllocateUserPhysicalPagesEx ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwCallEnclave ZwChangeProcessState ZwChangeThreadState ZwClose ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwContinueEx ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoRing ZwCreateKey ZwCreateKeyTransacted ZwCreateProcessStateChange ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateThreadStateChange ZwCreateTransaction ZwCreateTransactionManager ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFileEx ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwLoadDriver ZwLoadKey3 ZwLockFile ZwMakeTemporaryObject ZwManageHotPatch ZwMapViewOfSection ZwMapViewOfSectionEx ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSymbolicLinkObject ZwOpenThreadTokenEx ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrepareComplete ZwPrepareEnlistment ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPssCaptureVaSpaceBulk ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryIoRingCapabilities ZwQueryKey ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueueApcThreadEx2 ZwReadFile ZwReadOnlyEnlistment ZwReadVirtualMemoryEx ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwRollforwardTransactionManager ZwSetEaFile ZwSetEvent ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationIoRing ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetValueKey ZwSetVolumeInformationFile ZwSinglePhaseReject ZwSubmitIoRing ZwSuspendProcess ZwTerminateEnclave ZwTerminateProcess ZwUnloadDriver ZwUnlockFile ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwWaitForSingleObject ZwWriteFile _vscprintf

Structures
CLIENT_ID IO_STATUS_BLOCK KERNEL_USER_TIMES KEY_BASIC_INFORMATION KEY_FULL_INFORMATION KEY_NAME_INFORMATION KEY_NODE_INFORMATION LDR_DLL_NOTIFICATION_DATA OBJECT_ATTRIBUTES PEB PEB_WOW64 PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION_WOW64 RTL_HEAP_PARAMETERS RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS_WOW64 SYSTEM_BASIC_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_PROCESS_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_THREAD_INFORMATION UNICODE_STRING UNICODE_STRING_WOW64