Install
| Product | Versions |
|---|---|
| .NET | |
| .NET Standard | |
| Other |
README
![]()
Vanara.PInvoke.NtDll NuGet Package
PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.
What is Vanara?
Vanara is a community project that contains various .NET assemblies which have P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries.
Issues?
First check if it's already fixed by trying the MyGet build. If you're still running into problems, file an issue.
Included in Vanara.PInvoke.NtDll
| Functions | Enumerations | Structures |
|---|---|---|
| _vscprintf | ||
| ApiSetGetImplementationHost | ||
| ApiSetQueryApiSetPresenceEx | ||
| ApiSetQuerySchema | ||
| DbgBreakPoint | ||
| DbgPrint | ||
| DbgPrintEx | ||
| DbgPrompt | ||
| DbgUiSetThreadDebugObject | ||
| EtwCheckCoverage | ||
| LdrCallEnclave | ||
| LdrControlFlowGuardEnforced | ||
| LdrCreateEnclave | ||
| LdrDeleteEnclave | ||
| LdrFastFailInLoaderCallout | ||
| LdrHotPatchNotify | ||
| LdrInitializeEnclave | ||
| LdrIsModuleSxsRedirected | ||
| LdrLoadEnclaveModule | ||
| LdrRegisterDllNotification | ||
| LdrUnregisterDllNotification | ||
| MicrosoftTelemetryAssertTriggeredUM | ||
| NtAcquireCrossVmMutant | ||
| NtAlertMultipleThreadByThreadId | ||
| NtAlertThreadByThreadIdEx | ||
| NtAllocateUserPhysicalPagesEx | ||
| NtAllocateVirtualMemory | ||
| NtAllocateVirtualMemoryEx | ||
| NtCallEnclave | ||
| NtChangeProcessState | ||
| NtChangeThreadState | ||
| NtClose | ||
| NtCommitComplete | ||
| NtCommitEnlistment | ||
| NtCommitTransaction | ||
| NtCompareTokens | ||
| NtContinueEx | ||
| NtCopyFileChunk | ||
| NtCreateCpuPartition | ||
| NtCreateCrossVmEvent | ||
| NtCreateCrossVmMutant | ||
| NtCreateEnlistment | ||
| NtCreateFile | ||
| NtCreateFileA | ||
| NtCreateFileW | ||
| NtCreateIoRing | ||
| NtCreateProcess | ||
| NtCreateProcessEx | ||
| NtCreateProcessStateChange | ||
| NtCreateResourceManager | ||
| NtCreateSection | ||
| NtCreateSectionA | ||
| NtCreateSectionEx | ||
| NtCreateSectionW | ||
| NtCreateThreadStateChange | ||
| NtCreateTransaction | ||
| NtCreateTransactionA | ||
| NtCreateTransactionManager | ||
| NtCreateTransactionManagerA | ||
| NtCreateTransactionManagerW | ||
| NtCreateTransactionW | ||
| NtDeviceIoControlFile | ||
| NtDirectGraphicsCall | ||
| NtDuplicateToken | ||
| NtEnumerateTransactionObject | ||
| NtFlushBuffersFileEx | ||
| NtFreeVirtualMemory | ||
| NtFsControlFile | ||
| NtGetCurrentProcessorNumber | ||
| NtGetNotificationResourceManager | ||
| NtLoadKey3 | ||
| NtLockFile | ||
| NtManageHotPatch | ||
| NtMapViewOfSectionEx | ||
| NtNotifyChangeDirectoryFileEx | ||
| NtNotifyChangeMultipleKeys | ||
| NtOpenCpuPartition | ||
| NtOpenDirectoryObject | ||
| NtOpenEnlistment | ||
| NtOpenFile | ||
| NtOpenProcess | ||
| NtOpenProcessTokenEx | ||
| NtOpenResourceManager | ||
| NtOpenSymbolicLinkObject | ||
| NtOpenThread | ||
| NtOpenThreadTokenEx | ||
| NtOpenTransaction | ||
| NtOpenTransactionManager | ||
| NtPowerInformation | ||
| NtPrepareComplete | ||
| NtPrepareEnlistment | ||
| NtPrePrepareComplete | ||
| NtPrePrepareEnlistment | ||
| NtProtectVirtualMemory | ||
| NtPssCaptureVaSpaceBulk | ||
| NtQueryAttributesFile | ||
| NtQueryDirectoryFile | ||
| NtQueryDirectoryFileEx | ||
| NtQueryInformationCpuPartition | ||
| NtQueryInformationEnlistment | ||
| NtQueryInformationFile | ||
| NtQueryInformationProcess | ||
| NtQueryInformationResourceManager | ||
| NtQueryInformationThread | ||
| NtQueryInformationToken | ||
| NtQueryInformationTransaction | ||
| NtQueryInformationTransactionManager | ||
| NtQueryIoRingCapabilities | ||
| NtQueryKey | ||
| NtQueryMultipleValueKey | ||
| NtQueryObject | ||
| NtQueryPerformanceCounter | ||
| NtQueryQuotaInformationFile | ||
| NtQuerySecurityObject | ||
| NtQuerySymbolicLinkObject | ||
| NtQuerySystemInformation | ||
| NtQuerySystemTime | ||
| NtQueryVirtualMemory | ||
| NtQueryVolumeInformationFile | ||
| NtQueueApcThreadEx2 | ||
| NtReadFile | ||
| NtReadOnlyEnlistment | ||
| NtReadVirtualMemoryEx | ||
| NtRecoverEnlistment | ||
| NtRecoverResourceManager | ||
| NtRecoverTransactionManager | ||
| NtRemoveProcessDebug | ||
| NtRenameKey | ||
| NtRenameTransactionManager | ||
| NtRollbackComplete | ||
| NtRollbackEnlistment | ||
| NtRollbackTransaction | ||
| NtRollforwardTransactionManager | ||
| NtSetEventEx | ||
| NtSetInformationCpuPartition | ||
| NtSetInformationEnlistment | ||
| NtSetInformationFile | ||
| NtSetInformationIoRing | ||
| NtSetInformationKey | ||
| NtSetInformationResourceManager | ||
| NtSetInformationThread | ||
| NtSetInformationToken | ||
| NtSetInformationTransaction | ||
| NtSetInformationTransactionManager | ||
| NtSetQuotaInformationFile | ||
| NtSetSecurityObject | ||
| NtSinglePhaseReject | ||
| NtSubmitIoRing | ||
| NtTerminateEnclave | ||
| NtUnlockFile | ||
| NtUnmapViewOfSection | ||
| NtWaitForSingleObject | ||
| NtWow64QueryInformationProcess64 | ||
| NtWow64ReadVirtualMemory64 | ||
| NtWriteFile | ||
| RtlAbsoluteToSelfRelativeSD | ||
| RtlAddAccessAllowedAce | ||
| RtlAddAccessAllowedAceEx | ||
| RtlAddAce | ||
| RtlAddFunctionTable | ||
| RtlAddGrowableFunctionTable | ||
| RtlAllocateAndInitializeSid | ||
| RtlAllocateHeap | ||
| RtlAnsiStringToUnicodeString | ||
| RtlAppendStringToString | ||
| RtlAppendUnicodeStringToString | ||
| RtlAppendUnicodeToString | ||
| RtlAreBitsClear | ||
| RtlAreBitsClearEx | ||
| RtlAreBitsSet | ||
| RtlCallEnclave | ||
| RtlCallEnclaveReturn | ||
| RtlCapabilityCheckForSingleSessionSku | ||
| RtlCaptureContext | ||
| RtlCaptureContext2 | ||
| RtlCaptureStackBackTrace | ||
| RtlCharToInteger | ||
| RtlCheckRegistryKey | ||
| RtlCheckSystemBootStatusIntegrity | ||
| RtlClearAllBitsEx | ||
| RtlClearBitEx | ||
| RtlClearBits | ||
| RtlClearBitsEx | ||
| RtlCmEncodeMemIoResource | ||
| RtlCompareExchangePointerMapping | ||
| RtlCompareExchangePropertyStore | ||
| RtlCompareMemory | ||
| RtlCompareMemoryUlong | ||
| RtlCompareString | ||
| RtlCompareUnicodeString | ||
| RtlCompressBuffer | ||
| RtlConstructCrossVmEventPath | ||
| RtlConstructCrossVmMutexPath | ||
| RtlConvertHostPerfCounterToPerfCounter | ||
| RtlConvertSidToUnicodeString | ||
| RtlCopyLuid | ||
| RtlCopyMemoryNonTemporal | ||
| RtlCopySid | ||
| RtlCopyString | ||
| RtlCopyUnicodeString | ||
| RtlCreateAcl | ||
| RtlCreateHeap | ||
| RtlCreateProcessParametersWithTemplate | ||
| RtlCreateRegistryKey | ||
| RtlCreateSecurityDescriptor | ||
| RtlCreateSystemVolumeInformationFolder | ||
| RtlCreateUnicodeString | ||
| RtlCreateUserFiberShadowStack | ||
| RtlCustomCPToUnicodeN | ||
| RtlDecompressBuffer | ||
| RtlDecompressBufferEx | ||
| RtlDecompressFragment | ||
| RtlDelayExecution | ||
| RtlDelete | ||
| RtlDeleteAce | ||
| RtlDeleteElementGenericTable | ||
| RtlDeleteElementGenericTableAvl | ||
| RtlDeleteFunctionTable | ||
| RtlDeleteGrowableFunctionTable | ||
| RtlDeleteNoSplay | ||
| RtlDeleteRegistryValue | ||
| RtlDestroyHeap | ||
| RtlDisownModuleHeapAllocation | ||
| RtlDoesNameContainWildCards | ||
| RtlDosLongPathNameToNtPathName_U_WithStatus | ||
| RtlDosLongPathNameToRelativeNtPathName_U_WithStatus | ||
| RtlDowncaseUnicodeString | ||
| RtlDrainNonVolatileFlush | ||
| RtlEnclaveCallDispatch | ||
| RtlEnclaveCallDispatchReturn | ||
| RtlEnumerateGenericTable | ||
| RtlEnumerateGenericTableAvl | ||
| RtlEnumerateGenericTableLikeADirectory | ||
| RtlEnumerateGenericTableWithoutSplaying | ||
| RtlEnumerateGenericTableWithoutSplayingAvl | ||
| RtlEqualPrefixSid | ||
| RtlEqualSid | ||
| RtlEqualUnicodeString | ||
| RtlEthernetAddressToString | ||
| RtlEthernetStringToAddress | ||
| RtlExtendCorrelationVector | ||
| RtlFillMemoryNonTemporal | ||
| RtlFillNonVolatileMemory | ||
| RtlFindClearBits | ||
| RtlFindClearBitsAndSet | ||
| RtlFindClearBitsAndSetEx | ||
| RtlFindClearBitsEx | ||
| RtlFindClearRuns | ||
| RtlFindLastBackwardRunClear | ||
| RtlFindLeastSignificantBit | ||
| RtlFindLongestRunClear | ||
| RtlFindMostSignificantBit | ||
| RtlFindNextForwardRunClear | ||
| RtlFindSetBits | ||
| RtlFindSetBitsAndClear | ||
| RtlFindSetBitsAndClearEx | ||
| RtlFindSetBitsEx | ||
| RtlFirstEntrySList | ||
| RtlFlsAllocEx | ||
| RtlFlsGetValue | ||
| RtlFlsGetValue2 | ||
| RtlFlsSetValue | ||
| RtlFlushNonVolatileMemory | ||
| RtlFlushNonVolatileMemoryRanges | ||
| RtlFreeAnsiString | ||
| RtlFreeHeap | ||
| RtlFreeNonVolatileToken | ||
| RtlFreeOemString | ||
| RtlFreeUnicodeString | ||
| RtlFreeUserFiberShadowStack | ||
| RtlFreeUTF8String | ||
| RtlGenerate8dot3Name | ||
| RtlGetAce | ||
| RtlGetAcesBufferSize | ||
| RtlGetCompressionWorkSpaceSize | ||
| RtlGetCurrentThreadPrimaryGroup | ||
| RtlGetDaclSecurityDescriptor | ||
| RtlGetElementGenericTable | ||
| RtlGetElementGenericTableAvl | ||
| RtlGetEnabledExtendedFeatures | ||
| RtlGetExtendedContextLength2 | ||
| RtlGetFeatureToggleConfiguration | ||
| RtlGetFeatureTogglesChangeToken | ||
| RtlGetFunctionTableListHead | ||
| RtlGetGroupSecurityDescriptor | ||
| RtlGetImageFileMachines | ||
| RtlGetMultiTimePrecise | ||
| RtlGetNonVolatileToken | ||
| RtlGetOwnerSecurityDescriptor | ||
| RtlGetPersistedStateLocation | ||
| RtlGetReturnAddressHijackTarget | ||
| RtlGetSaclSecurityDescriptor | ||
| RtlGetSystemBootStatus | ||
| RtlGetSystemBootStatusEx | ||
| RtlGetSystemGlobalData | ||
| RtlGetSystemTimeAndBias | ||
| RtlGetUnloadEventTrace | ||
| RtlGetUnloadEventTraceEx | ||
| RtlGetVersion | ||
| RtlGrowFunctionTable | ||
| RtlGUIDFromString | ||
| RtlHashUnicodeString | ||
| RtlIncrementCorrelationVector | ||
| RtlInitAnsiString | ||
| RtlInitCodePageTable | ||
| RtlInitializeBitMap | ||
| RtlInitializeBitMapEx | ||
| RtlInitializeCorrelationVector | ||
| RtlInitializeExtendedContext2 | ||
| RtlInitializeGenericTable | ||
| RtlInitializeGenericTableAvl | ||
| RtlInitializeSid | ||
| RtlInitializeSidEx | ||
| RtlInitializeSListHead | ||
| RtlInitString | ||
| RtlInitStringEx | ||
| RtlInitUnicodeString | ||
| RtlInitUTF8String | ||
| RtlInitUTF8StringEx | ||
| RtlInsertElementGenericTable | ||
| RtlInsertElementGenericTableAvl | ||
| RtlInsertElementGenericTableFullAvl | ||
| RtlInstallFunctionTableCallback | ||
| RtlInt64ToUnicodeString | ||
| RtlIntegerToUnicodeString | ||
| RtlInterlockedClearBitRunEx | ||
| RtlInterlockedFlushSList | ||
| RtlInterlockedPushEntrySList | ||
| RtlIoDecodeMemIoResource | ||
| RtlIoEncodeMemIoResource | ||
| RtlIpv4AddressToStringA | ||
| RtlIpv4AddressToStringExW | ||
| RtlIpv4StringToAddress | ||
| RtlIpv4StringToAddressEx | ||
| RtlIpv6AddressToString | ||
| RtlIpv6AddressToStringExW | ||
| RtlIpv6StringToAddress | ||
| RtlIpv6StringToAddressExW | ||
| RtlIsApiSetImplemented | ||
| RtlIsCloudFilesPlaceholder | ||
| RtlIsCurrentProcess | ||
| RtlIsCurrentThread | ||
| RtlIsEcCode | ||
| RtlIsEnclaveFeaturePresent | ||
| RtlIsFeatureEnabledForEnterprise | ||
| RtlIsGenericTableEmpty | ||
| RtlIsGenericTableEmptyAvl | ||
| RtlIsNameInExpression | ||
| RtlIsNameInUnUpcasedExpression | ||
| RtlIsNameLegalDOS8Dot3 | ||
| RtlIsPartialPlaceholder | ||
| RtlIsPartialPlaceholderFileHandle | ||
| RtlIsPartialPlaceholderFileInfo | ||
| RtlIsStateSeparationEnabled | ||
| RtlIsValidLocaleName | ||
| RtlIsZeroMemory | ||
| RtlLengthCurrentClearRunBackwardEx | ||
| RtlLengthCurrentClearRunForwardEx | ||
| RtlLengthSecurityDescriptor | ||
| RtlLengthSid | ||
| RtlLocalTimeToSystemTime | ||
| RtlLogUnexpectedCodepath | ||
| RtlLookupElementGenericTable | ||
| RtlLookupElementGenericTableAvl | ||
| RtlLookupElementGenericTableFullAvl | ||
| RtlLookupFirstMatchingElementGenericTableAvl | ||
| RtlLookupFunctionEntry | ||
| RtlMapGenericMask | ||
| RtlMoveMemory | ||
| RtlMultiByteToUnicodeN | ||
| RtlMultiByteToUnicodeSize | ||
| RtlNormalizeSecurityDescriptor | ||
| RtlNotifyFeatureToggleUsage | ||
| RtlNotifyFeatureUsage | ||
| RtlNtStatusToDosError | ||
| RtlNumberGenericTableElements | ||
| RtlNumberGenericTableElementsAvl | ||
| RtlNumberOfClearBits | ||
| RtlNumberOfClearBitsEx | ||
| RtlNumberOfSetBits | ||
| RtlNumberOfSetBitsEx | ||
| RtlNumberOfSetBitsUlongPtr | ||
| RtlOemStringToUnicodeString | ||
| RtlOemToUnicodeN | ||
| RtlOpenCrossProcessEmulatorWorkConnection | ||
| RtlOverwriteFeatureConfigurationBuffer | ||
| RtlPcToFileHeader | ||
| RtlPrefixUnicodeString | ||
| RtlpScpCfgNtdllExports | ||
| RtlpTimeFieldsToTime | ||
| RtlpTimeToTimeFields | ||
| RtlpWow64CtxFromAmd64 | ||
| RtlpWow64GetContextOnAmd64 | ||
| RtlpWow64SetContextOnAmd64 | ||
| RtlQueryAllFeatureConfigurations | ||
| RtlQueryAllInternalFeatureConfigurations | ||
| RtlQueryAllInternalRuntimeFeatureConfigurations | ||
| RtlQueryDepthSList | ||
| RtlQueryFeatureConfiguration | ||
| RtlQueryFeatureConfigurationChangeStamp | ||
| RtlQueryFeatureUsageNotificationSubscriptions | ||
| RtlQueryImageMitigationPolicy | ||
| RtlQueryInternalFeatureConfiguration | ||
| RtlQueryPointerMapping | ||
| RtlQueryProcessPlaceholderCompatibilityMode | ||
| RtlQueryPropertyStore | ||
| RtlQueryRegistryValues | ||
| RtlQueryRegistryValueWithFallback | ||
| RtlQueryThreadPlaceholderCompatibilityMode | ||
| RtlQueryTokenHostIdAsUlong64 | ||
| RtlRaiseCustomSystemEventTrigger | ||
| RtlRaiseException | ||
| RtlRaiseExceptionForReturnAddressHijack | ||
| RtlRaiseNoncontinuableException | ||
| RtlRandom | ||
| RtlRandomEx | ||
| RtlRcuAllocate | ||
| RtlRcuFree | ||
| RtlRcuReadLock | ||
| RtlRcuReadUnlock | ||
| RtlRcuSynchronize | ||
| RtlRealPredecessor | ||
| RtlRealSuccessor | ||
| RtlRegisterFeatureConfigurationChangeNotification | ||
| RtlRemovePointerMapping | ||
| RtlRemovePropertyStore | ||
| RtlRestoreContext | ||
| RtlRestoreSystemBootStatusDefaults | ||
| RtlRestoreThreadPreferredUILanguages | ||
| RtlRunOnceBeginInitialize | ||
| RtlRunOnceComplete | ||
| RtlRunOnceExecuteOnce | ||
| RtlRunOnceInitialize | ||
| RtlSecondsSince1970ToTime | ||
| RtlSecondsSince1980ToTime | ||
| RtlSelfRelativeToAbsoluteSD | ||
| RtlSetAllBits | ||
| RtlSetAllBitsEx | ||
| RtlSetBitEx | ||
| RtlSetBits | ||
| RtlSetBitsEx | ||
| RtlSetDaclSecurityDescriptor | ||
| RtlSetFeatureConfigurations | ||
| RtlSetGroupSecurityDescriptor | ||
| RtlSetImageMitigationPolicy | ||
| RtlSetOwnerSecurityDescriptor | ||
| RtlSetProcessPlaceholderCompatibilityMode | ||
| RtlSetProxiedProcessId | ||
| RtlSetSystemBootStatus | ||
| RtlSetSystemBootStatusEx | ||
| RtlSetThreadPlaceholderCompatibilityMode | ||
| RtlSetThreadPreferredUILanguages2 | ||
| RtlSplay | ||
| RtlStringFromGUID | ||
| RtlSubAuthorityCountSid | ||
| RtlSubAuthoritySid | ||
| RtlSubscribeForFeatureUsageNotification | ||
| RtlSubtreePredecessor | ||
| RtlSubtreeSuccessor | ||
| RtlTestBitEx | ||
| RtlTimeFieldsToTime | ||
| RtlTimeToSecondsSince1970 | ||
| RtlTimeToSecondsSince1980 | ||
| RtlTimeToTimeFields | ||
| RtlTlsAlloc | ||
| RtlTlsFree | ||
| RtlTlsSetValue | ||
| RtlUdiv128 | ||
| RtlUnicodeStringToAnsiString | ||
| RtlUnicodeStringToCountedOemString | ||
| RtlUnicodeStringToInteger | ||
| RtlUnicodeStringToOemString | ||
| RtlUnicodeStringToUTF8String | ||
| RtlUnicodeToCustomCPN | ||
| RtlUnicodeToMultiByteN | ||
| RtlUnicodeToMultiByteSize | ||
| RtlUnicodeToOemN | ||
| RtlUnicodeToUTF8N | ||
| RtlUniform | ||
| RtlUnregisterFeatureConfigurationChangeNotification | ||
| RtlUnsubscribeFromFeatureUsageNotifications | ||
| RtlUnwind | ||
| RtlUpcaseUnicodeChar | ||
| RtlUpcaseUnicodeString | ||
| RtlUpcaseUnicodeStringToCountedOemString | ||
| RtlUpcaseUnicodeStringToOemString | ||
| RtlUpcaseUnicodeToCustomCPN | ||
| RtlUpcaseUnicodeToMultiByteN | ||
| RtlUpcaseUnicodeToOemN | ||
| RtlUpperChar | ||
| RtlUpperString | ||
| RtlUserFiberStart | ||
| RtlUTF8StringToUnicodeString | ||
| RtlUTF8ToUnicodeN | ||
| RtlValidateCorrelationVector | ||
| RtlValidateUserCallTarget | ||
| RtlValidRelativeSecurityDescriptor | ||
| RtlVerifyVersionInfo | ||
| RtlVirtualUnwind | ||
| RtlVirtualUnwind2 | ||
| RtlWow64ChangeProcessState | ||
| RtlWow64ChangeThreadState | ||
| RtlWow64GetCpuAreaEnabledFeatures | ||
| RtlWow64GetEquivalentMachineCHPE | ||
| RtlWow64GetSharedInfoProcess | ||
| RtlWow64PopAllCrossProcessWorkFromWorkList | ||
| RtlWow64PopCrossProcessWorkFromFreeList | ||
| RtlWow64PushCrossProcessWorkOntoFreeList | ||
| RtlWow64PushCrossProcessWorkOntoWorkList | ||
| RtlWow64RequestCrossProcessHeavyFlush | ||
| RtlWow64SuspendProcess | ||
| RtlWriteNonVolatileMemory | ||
| RtlWriteRegistryValue | ||
| RtlXRestore | ||
| RtlXSave | ||
| TpSetPoolThreadCpuSets | ||
| TpWorkOnBehalfClearTicket | ||
| TpWorkOnBehalfSetTicket | ||
| vDbgPrintEx | ||
| vDbgPrintExWithPrefix | ||
| VerSetConditionMask | ||
| ZwAcquireCrossVmMutant | ||
| ZwAlertMultipleThreadByThreadId | ||
| ZwAlertThreadByThreadIdEx | ||
| ZwAllocateLocallyUniqueId | ||
| ZwAllocateUserPhysicalPagesEx | ||
| ZwAllocateVirtualMemory | ||
| ZwAllocateVirtualMemoryEx | ||
| ZwCallEnclave | ||
| ZwChangeProcessState | ||
| ZwChangeThreadState | ||
| ZwClose | ||
| ZwCommitComplete | ||
| ZwCommitEnlistment | ||
| ZwCommitTransaction | ||
| ZwContinueEx | ||
| ZwCopyFileChunk | ||
| ZwCreateCpuPartition | ||
| ZwCreateCrossVmEvent | ||
| ZwCreateCrossVmMutant | ||
| ZwCreateDirectoryObject | ||
| ZwCreateEnlistment | ||
| ZwCreateEvent | ||
| ZwCreateFile | ||
| ZwCreateIoRing | ||
| ZwCreateKey | ||
| ZwCreateKeyTransacted | ||
| ZwCreateProcessStateChange | ||
| ZwCreateResourceManager | ||
| ZwCreateSection | ||
| ZwCreateSectionEx | ||
| ZwCreateThreadStateChange | ||
| ZwCreateTransaction | ||
| ZwCreateTransactionManager | ||
| ZwDeleteFile | ||
| ZwDeleteKey | ||
| ZwDeleteValueKey | ||
| ZwDeviceIoControlFile | ||
| ZwDirectGraphicsCall | ||
| ZwDuplicateObject | ||
| ZwDuplicateToken | ||
| ZwEnumerateKey | ||
| ZwEnumerateTransactionObject | ||
| ZwEnumerateValueKey | ||
| ZwFlushBuffersFileEx | ||
| ZwFlushKey | ||
| ZwFlushVirtualMemory | ||
| ZwFreeVirtualMemory | ||
| ZwFsControlFile | ||
| ZwGetNotificationResourceManager | ||
| ZwLoadDriver | ||
| ZwLoadKey3 | ||
| ZwLockFile | ||
| ZwMakeTemporaryObject | ||
| ZwManageHotPatch | ||
| ZwMapViewOfSection | ||
| ZwMapViewOfSectionEx | ||
| ZwNotifyChangeDirectoryFileEx | ||
| ZwNotifyChangeKey | ||
| ZwOpenCpuPartition | ||
| ZwOpenDirectoryObject | ||
| ZwOpenEnlistment | ||
| ZwOpenEvent | ||
| ZwOpenFile | ||
| ZwOpenKey | ||
| ZwOpenKeyEx | ||
| ZwOpenKeyTransacted | ||
| ZwOpenKeyTransactedEx | ||
| ZwOpenProcess | ||
| ZwOpenProcessTokenEx | ||
| ZwOpenResourceManager | ||
| ZwOpenSection | ||
| ZwOpenSymbolicLinkObject | ||
| ZwOpenThreadTokenEx | ||
| ZwOpenTransaction | ||
| ZwOpenTransactionManager | ||
| ZwPowerInformation | ||
| ZwPrepareComplete | ||
| ZwPrepareEnlistment | ||
| ZwPrePrepareComplete | ||
| ZwPrePrepareEnlistment | ||
| ZwPssCaptureVaSpaceBulk | ||
| ZwQueryDirectoryFile | ||
| ZwQueryDirectoryFileEx | ||
| ZwQueryEaFile | ||
| ZwQueryFullAttributesFile | ||
| ZwQueryInformationCpuPartition | ||
| ZwQueryInformationEnlistment | ||
| ZwQueryInformationFile | ||
| ZwQueryInformationProcess | ||
| ZwQueryInformationResourceManager | ||
| ZwQueryInformationToken | ||
| ZwQueryInformationTransaction | ||
| ZwQueryInformationTransactionManager | ||
| ZwQueryIoRingCapabilities | ||
| ZwQueryKey | ||
| ZwQueryObject | ||
| ZwQueryQuotaInformationFile | ||
| ZwQuerySecurityObject | ||
| ZwQuerySymbolicLinkObject | ||
| ZwQuerySystemInformation | ||
| ZwQuerySystemInformationEx | ||
| ZwQueryValueKey | ||
| ZwQueryVirtualMemory | ||
| ZwQueryVolumeInformationFile | ||
| ZwQueueApcThreadEx2 | ||
| ZwReadFile | ||
| ZwReadOnlyEnlistment | ||
| ZwReadVirtualMemoryEx | ||
| ZwRecoverEnlistment | ||
| ZwRecoverResourceManager | ||
| ZwRecoverTransactionManager | ||
| ZwRollbackComplete | ||
| ZwRollbackEnlistment | ||
| ZwRollbackTransaction | ||
| ZwRollforwardTransactionManager | ||
| ZwSetEaFile | ||
| ZwSetEvent | ||
| ZwSetEventEx | ||
| ZwSetInformationCpuPartition | ||
| ZwSetInformationEnlistment | ||
| ZwSetInformationFile | ||
| ZwSetInformationIoRing | ||
| ZwSetInformationResourceManager | ||
| ZwSetInformationThread | ||
| ZwSetInformationToken | ||
| ZwSetInformationTransaction | ||
| ZwSetInformationVirtualMemory | ||
| ZwSetQuotaInformationFile | ||
| ZwSetSecurityObject | ||
| ZwSetValueKey | ||
| ZwSetVolumeInformationFile | ||
| ZwSinglePhaseReject | ||
| ZwSubmitIoRing | ||
| ZwSuspendProcess | ||
| ZwTerminateEnclave | ||
| ZwTerminateProcess | ||
| ZwUnloadDriver | ||
| ZwUnlockFile | ||
| ZwUnmapViewOfSection | ||
| ZwUnmapViewOfSectionEx | ||
| ZwWaitForSingleObject | ||
| ZwWriteFile | ||
| DPFLTR_TYPE | ||
| NOTIFICATION_MASK | ||
| SYSTEM_INFORMATION_CLASS | ||
| NtFileCreateOptions | ||
| NtFileMode | ||
| FILE_INFORMATION_CLASS | ||
| KEY_INFORMATION_CLASS | ||
| PROCESS_CREATE_FLAGS | ||
| PROCESSINFOCLASS | ||
| SUBSYSTEM_INFORMATION_TYPE |
| CLIENT_ID
KEY_NAME_INFORMATION
LDR_DLL_NOTIFICATION_DATA
OBJECT_ATTRIBUTES
FILE_ACCESS_INFORMATION
FILE_BASIC_INFORMATION
FILE_BOTH_DIR_INFORMATION
FILE_DIRECTORY_INFORMATION
FILE_EA_INFORMATION
FILE_FULL_DIR_INFORMATION
FILE_INTERNAL_INFORMATION
FILE_NAME_INFORMATION
FILE_STANDARD_INFORMATION
RTL_HEAP_PARAMETERS
IO_STATUS_BLOCK
KEY_BASIC_INFORMATION
KEY_FULL_INFORMATION
KEY_NODE_INFORMATION
OSVERSIONINFOW
KERNEL_USER_TIMES
PEB
PEB_WOW64
PROCESS_BASIC_INFORMATION
PROCESS_BASIC_INFORMATION_WOW64
RTL_USER_PROCESS_PARAMETERS
RTL_USER_PROCESS_PARAMETERS_WOW64
SYSTEM_BASIC_INFORMATION
SYSTEM_PROCESS_INFORMATION
SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
SYSTEM_REGISTRY_QUOTA_INFORMATION
SYSTEM_THREAD_INFORMATION
UNICODE_STRING
UNICODE_STRING_WOW64
Changes from Previous Version
Adoption Assessment
A verified publisher signal is available. Assess fit from the package's supported frameworks, license and dependency graph rather than popularity alone.
Related Guides & Workflows
Learn how to evaluate, integrate, or audit this package in your .NET project.