Vanara.PInvoke.NtDll 3.3.8

Prefix Reserved
There is a newer version of this package available.
See the version list below for details.
dotnet add package Vanara.PInvoke.NtDll --version 3.3.8                
NuGet\Install-Package Vanara.PInvoke.NtDll -Version 3.3.8                
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="Vanara.PInvoke.NtDll" Version="3.3.8" />                
For projects that support PackageReference, copy this XML node into the project file to reference the package.
paket add Vanara.PInvoke.NtDll --version 3.3.8                
#r "nuget: Vanara.PInvoke.NtDll, 3.3.8"                
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
// Install Vanara.PInvoke.NtDll as a Cake Addin
#addin nuget:?package=Vanara.PInvoke.NtDll&version=3.3.8

// Install Vanara.PInvoke.NtDll as a Cake Tool
#tool nuget:?package=Vanara.PInvoke.NtDll&version=3.3.8                

PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.

Product Compatible and additional computed target framework versions.
.NET net5.0 is compatible.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed. 
.NET Core netcoreapp2.0 is compatible.  netcoreapp2.1 is compatible.  netcoreapp2.2 was computed.  netcoreapp3.0 is compatible.  netcoreapp3.1 is compatible. 
.NET Standard netstandard2.0 is compatible.  netstandard2.1 was computed. 
.NET Framework net20 is compatible.  net35 is compatible.  net40 is compatible.  net403 was computed.  net45 is compatible.  net451 was computed.  net452 was computed.  net46 was computed.  net461 was computed.  net462 was computed.  net463 was computed.  net47 was computed.  net471 was computed.  net472 was computed.  net48 was computed.  net481 was computed. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen40 was computed.  tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (2)

Showing the top 2 NuGet packages that depend on Vanara.PInvoke.NtDll:

Package Downloads
Vanara.SystemServices

Classes for system related items derived from the Vanara PInvoke libraries. Includes extensions for Process (privileges and elavation), FileInfo (compression info), Shared Network Drives and Devices, and ServiceController (SetStartType) that pull extended information through native API calls.

Vanara.Library

The full set of packages associated with the Vanara PInvoke Libraries.

GitHub repositories (2)

Showing the top 2 popular GitHub repositories that depend on Vanara.PInvoke.NtDll:

Repository Stars
babalae/better-genshin-impact
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集 - UI Automation Testing Tools For Genshin Impact
zhuxb711/RX-Explorer
一款优雅的UWP文件管理器 | An elegant UWP Explorer
Version Downloads Last updated
4.0.4 741 9/13/2024
4.0.3 431 8/5/2024
4.0.2 1,541 6/24/2024
4.0.1 578 4/30/2024
4.0.0 257 3/29/2024
4.0.0-beta2 221 1/22/2024
4.0.0-beta 218 11/20/2023
3.4.17 2,008 10/18/2023
3.4.16 685 8/7/2023
3.4.15 591 5/18/2023
3.4.14 450 4/15/2023
3.4.13 1,140 2/4/2023
3.4.12 746 1/15/2023
3.4.11 893 11/15/2022
3.4.10 1,119 10/25/2022
3.4.9 1,027 10/3/2022
3.4.8 1,047 9/16/2022
3.4.7 1,063 9/3/2022
3.4.6 1,235 8/7/2022
3.4.5 5,736 7/17/2022
3.4.4 1,403 7/5/2022
3.4.3 1,213 6/14/2022
3.4.2 1,754 5/13/2022
3.4.1 1,150 5/5/2022
3.4.0 1,912 3/14/2022
3.3.15 4,928 12/27/2021
3.3.14 1,060 10/26/2021
3.3.13 669 9/30/2021
3.3.12 688 8/30/2021
3.3.11 664 7/22/2021
3.3.10 753 6/4/2021
3.3.9 785 5/7/2021
3.3.8 826 4/7/2021
3.3.7 634 3/24/2021
3.3.6 577 3/19/2021
3.3.5 586 3/1/2021
3.3.4 545 2/11/2021
3.3.3 542 2/3/2021
3.3.2 617 1/21/2021
3.3.1 641 1/20/2021
3.3.0 701 11/20/2020
3.2.21 622 11/13/2020
3.2.20 739 11/8/2020
3.2.19 688 10/23/2020
3.2.18 697 10/21/2020
3.2.17 793 9/20/2020
3.2.16 672 9/7/2020
3.2.15 727 8/30/2020
3.2.14 644 8/20/2020
3.2.13 772 7/27/2020
3.2.12 707 7/13/2020
3.2.11 763 6/28/2020
3.2.10 765 6/14/2020
3.2.9 781 6/3/2020
3.2.7 777 5/4/2020
3.2.6 773 4/21/2020
3.2.5 711 4/15/2020
3.2.4 741 4/12/2020
3.2.3 718 4/1/2020
3.2.2 681 3/24/2020
3.2.1 679 3/17/2020
3.2.0 948 2/27/2020
3.1.9 753 1/17/2020
3.1.8 786 1/13/2020
3.1.7 767 1/6/2020
3.1.6 754 12/12/2019
3.1.5 855 11/26/2019
3.1.4 717 11/25/2019
3.1.3 706 11/8/2019
3.1.2 736 11/4/2019
3.1.1 712 10/17/2019
3.1.0 753 10/3/2019
3.0.1 778 9/20/2019
3.0.0 567 8/27/2019
2.3.11 822 6/9/2019
2.3.10 630 6/5/2019
2.3.9 574 5/26/2019
2.3.8 598 5/13/2019
2.3.7 655 4/24/2019
2.3.6 626 4/17/2019
2.3.5 578 4/10/2019
2.3.4 615 3/9/2019
2.3.3 602 3/8/2019
2.3.2 624 2/28/2019
2.3.1 606 2/25/2019
2.3.0 632 2/22/2019
2.2.1 688 2/12/2019
2.2.0 675 2/1/2019
2.1.2 922 1/14/2019
2.1.0 917 12/15/2018
2.0.1 736 12/7/2018
2.0.0 735 11/28/2018
1.1.0 848 9/10/2018

Currently implements:

Functions
ApiSetQueryApiSetPresenceEx DbgBreakPoint DbgPrint DbgPrintEx DbgPrompt EtwCheckCoverage LdrCallEnclave LdrControlFlowGuardEnforced LdrCreateEnclave LdrDeleteEnclave LdrFastFailInLoaderCallout LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadEnclaveModule LdrRegisterDllNotification LdrUnregisterDllNotification NtAcquireCrossVmMutant NtAllocateUserPhysicalPagesEx NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtCallEnclave NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareTokens NtContinueEx NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateEnlistment NtCreateFile NtCreateFileA NtCreateFileW NtCreateResourceManager NtCreateSection NtCreateSectionA NtCreateSectionEx NtCreateSectionW NtCreateTransaction NtCreateTransactionA NtCreateTransactionManager NtCreateTransactionManagerA NtCreateTransactionManagerW NtCreateTransactionW NtDeviceIoControlFile NtDirectGraphicsCall NtDuplicateToken NtEnumerateTransactionObject NtFlushBuffersFileEx NtFreeVirtualMemory NtFsControlFile NtGetCurrentProcessorNumber NtGetNotificationResourceManager NtLoadKey3 NtLockFile NtManageHotPatch NtMapViewOfSectionEx NtNotifyChangeDirectoryFileEx NtNotifyChangeMultipleKeys NtOpenDirectoryObject NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessTokenEx NtOpenResourceManager NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPowerInformation NtPrepareComplete NtPrepareEnlistment NtPrePrepareComplete NtPrePrepareEnlistment NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryKey NtQueryMultipleValueKey NtQueryObject NtQueryPerformanceCounter NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryVirtualMemory NtQueryVolumeInformationFile NtReadFile NtReadOnlyEnlistment NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRenameKey NtRenameTransactionManager NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtRollforwardTransactionManager NtSetInformationEnlistment NtSetInformationFile NtSetInformationKey NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetQuotaInformationFile NtSetSecurityObject NtSinglePhaseReject NtTerminateEnclave NtUnlockFile NtUnmapViewOfSection NtWaitForSingleObject NtWow64QueryInformationProcess64 NtWow64ReadVirtualMemory64 NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiStringToUnicodeString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlCallEnclaveReturn RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureContext2 RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlClearAllBitsEx RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmEncodeMemIoResource RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlConvertSidToUnicodeString RtlCopyLuid RtlCopyMemoryNonTemporal RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateHeap RtlCreateProcessParametersWithTemplate RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserFiberShadowStack RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDelete RtlDeleteAce RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDestroyHeap RtlDisownModuleHeapAllocation RtlDoesNameContainWildCards RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDowncaseUnicodeString RtlDrainNonVolatileFlush RtlEnclaveCallDispatch RtlEnclaveCallDispatchReturn RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlEthernetAddressToString RtlEthernetStringToAddress RtlExtendCorrelationVector RtlFillMemoryNonTemporal RtlFillNonVolatileMemory RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsEx RtlFindClearRuns RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFirstEntrySList RtlFlsGetValue RtlFlsSetValue RtlFlushNonVolatileMemory RtlFlushNonVolatileMemoryRanges RtlFreeAnsiString RtlFreeHeap RtlFreeNonVolatileToken RtlFreeOemString RtlFreeUnicodeString RtlFreeUserFiberShadowStack RtlFreeUTF8String RtlGenerate8dot3Name RtlGetAce RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength2 RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetMultiTimePrecise RtlGetNonVolatileToken RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetVersion RtlGrowFunctionTable RtlGUIDFromString RtlHashUnicodeString RtlIncrementCorrelationVector RtlInitAnsiString RtlInitCodePageTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeSid RtlInitializeSidEx RtlInitializeSListHead RtlInitString RtlInitStringEx RtlInitUnicodeString RtlInitUTF8String RtlInitUTF8StringEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFullAvl RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToUnicodeString RtlInterlockedFlushSList RtlInterlockedPushEntrySList RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExW RtlIpv4StringToAddress RtlIpv4StringToAddressEx RtlIpv6AddressToString RtlIpv6AddressToStringExW RtlIpv6StringToAddress RtlIpv6StringToAddressExW RtlIsCloudFilesPlaceholder RtlIsCurrentProcess RtlIsCurrentThread RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsStateSeparationEnabled RtlIsValidLocaleName RtlIsZeroMemory RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFullAvl RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNormalizeSecurityDescriptor RtlNotifyFeatureUsage RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeString RtlOemToUnicodeN RtlPcToFileHeader RtlPrefixUnicodeString RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpWow64CtxFromAmd64 RtlpWow64GetContextOnAmd64 RtlpWow64SetContextOnAmd64 RtlQueryAllFeatureConfigurations RtlQueryDepthSList RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryImageMitigationPolicy RtlQueryProcessPlaceholderCompatibilityMode RtlQueryRegistryValues RtlQueryRegistryValueWithFallback RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTokenHostIdAsUlong64 RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseExceptionForReturnAddressHijack RtlRaiseNoncontinuableException RtlRandom RtlRandomEx RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetAllBitsEx RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetDaclSecurityDescriptor RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetImageMitigationPolicy RtlSetOwnerSecurityDescriptor RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPreferredUILanguages2 RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlTestBitEx RtlTimeFieldsToTime RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUdiv128 RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUserFiberStart RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlValidateCorrelationVector RtlValidRelativeSecurityDescriptor RtlVerifyVersionInfo RtlVirtualUnwind RtlWow64GetEquivalentMachineCHPE RtlWow64GetSharedInfoProcess RtlWow64PopAllCrossProcessWorkFromWorkList RtlWow64PopCrossProcessWorkFromFreeList RtlWow64PushCrossProcessWorkOntoFreeList RtlWow64PushCrossProcessWorkOntoWorkList RtlWow64RequestCrossProcessHeavyFlush RtlWow64SuspendProcess RtlWriteNonVolatileMemory RtlWriteRegistryValue TpSetPoolThreadCpuSets vDbgPrintEx vDbgPrintExWithPrefix VerSetConditionMask ZwAcquireCrossVmMutant ZwAllocateLocallyUniqueId ZwAllocateUserPhysicalPagesEx ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwCallEnclave ZwClose ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwContinueEx ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateKey ZwCreateKeyTransacted ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateTransaction ZwCreateTransactionManager ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFileEx ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwLoadDriver ZwLoadKey3 ZwLockFile ZwMakeTemporaryObject ZwManageHotPatch ZwMapViewOfSection ZwMapViewOfSectionEx ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSymbolicLinkObject ZwOpenThreadTokenEx ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrepareComplete ZwPrepareEnlistment ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPssCaptureVaSpaceBulk ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryKey ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwReadFile ZwReadOnlyEnlistment ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwRollforwardTransactionManager ZwSetEaFile ZwSetEvent ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetValueKey ZwSetVolumeInformationFile ZwSinglePhaseReject ZwSuspendProcess ZwTerminateEnclave ZwTerminateProcess ZwUnloadDriver ZwUnlockFile ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwWaitForSingleObject ZwWriteFile _vscprintf

Structures
CLIENT_ID IO_STATUS_BLOCK KEY_BASIC_INFORMATION KEY_FULL_INFORMATION KEY_NAME_INFORMATION KEY_NODE_INFORMATION LDR_DLL_NOTIFICATION_DATA OBJECT_ATTRIBUTES PEB PEB_WOW64 PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION_WOW64 RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS_WOW64 SYSTEM_BASIC_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_PROCESS_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_THREAD_INFORMATION UNICODE_STRING UNICODE_STRING_WOW64