![Vanara](https://raw.githubusercontent.com/dahall/Vanara/master/docs/icons/VanaraHeading.png)
### **Vanara.PInvoke.NtDll NuGet Package**
[![Version](https://img.shields.io/nuget/v/Vanara.PInvoke.NtDll?label=NuGet&style=flat-square)](https://github.com/dahall/Vanara/releases)
[![Build status](https://img.shields.io/appveyor/build/dahall/vanara?label=AppVeyor%20build&style=flat-square)](https://ci.appveyor.com/project/dahall/vanara)

PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.

### **What is Vanara?**

[Vanara](https://github.com/dahall/Vanara) is a community project that contains various .NET assemblies which have P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries.

### **Issues?**

First check if it's already fixed by trying the [AppVeyor build](https://ci.appveyor.com/nuget/vanara-prerelease).
If you're still running into problems, file an [issue](https://github.com/dahall/Vanara/issues).

### **Included in Vanara.PInvoke.NtDll**

Functions | Enumerations | Structures
--- | --- | ---
_vscprintf ApiSetQueryApiSetPresenceEx DbgBreakPoint DbgPrint DbgPrintEx DbgPrompt EtwCheckCoverage LdrCallEnclave LdrControlFlowGuardEnforced LdrCreateEnclave LdrDeleteEnclave LdrFastFailInLoaderCallout LdrHotPatchNotify LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadEnclaveModule LdrRegisterDllNotification LdrUnregisterDllNotification MicrosoftTelemetryAssertTriggeredUM NtAcquireCrossVmMutant NtAllocateUserPhysicalPagesEx NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtCallEnclave NtChangeProcessState NtChangeThreadState NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareTokens NtContinueEx NtCopyFileChunk NtCreateCpuPartition NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateEnlistment NtCreateFile NtCreateFileA NtCreateFileW NtCreateIoRing NtCreateProcess NtCreateProcessEx NtCreateProcessStateChange NtCreateResourceManager NtCreateSection NtCreateSectionA NtCreateSectionEx NtCreateSectionW NtCreateThreadStateChange NtCreateTransaction NtCreateTransactionA NtCreateTransactionManager NtCreateTransactionManagerA NtCreateTransactionManagerW NtCreateTransactionW NtDeviceIoControlFile NtDirectGraphicsCall NtDuplicateToken NtEnumerateTransactionObject NtFlushBuffersFileEx NtFreeVirtualMemory NtFsControlFile NtGetCurrentProcessorNumber NtGetNotificationResourceManager NtLoadKey3 NtLockFile NtManageHotPatch NtMapViewOfSectionEx NtNotifyChangeDirectoryFileEx NtNotifyChangeMultipleKeys NtOpenCpuPartition NtOpenDirectoryObject NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessTokenEx NtOpenResourceManager NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPowerInformation NtPrepareComplete NtPrepareEnlistment NtPrePrepareComplete NtPrePrepareEnlistment NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryInformationCpuPartition NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryIoRingCapabilities NtQueryKey NtQueryMultipleValueKey NtQueryObject NtQueryPerformanceCounter NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueueApcThreadEx2 NtReadFile NtReadOnlyEnlistment NtReadVirtualMemoryEx NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRenameKey NtRenameTransactionManager NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtRollforwardTransactionManager NtSetInformationCpuPartition NtSetInformationEnlistment NtSetInformationFile NtSetInformationIoRing NtSetInformationKey NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetQuotaInformationFile NtSetSecurityObject NtSinglePhaseReject NtSubmitIoRing NtTerminateEnclave NtUnlockFile NtUnmapViewOfSection NtWaitForSingleObject NtWow64QueryInformationProcess64 NtWow64ReadVirtualMemory64 NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiStringToUnicodeString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlCallEnclave RtlCallEnclaveReturn RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureContext2 RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlClearAllBitsEx RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmEncodeMemIoResource RtlCompareExchangePointerMapping RtlCompareExchangePropertyStore RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlConvertHostPerfCounterToPerfCounter RtlConvertSidToUnicodeString RtlCopyLuid RtlCopyMemoryNonTemporal RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateHeap RtlCreateProcessParametersWithTemplate RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserFiberShadowStack RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDelayExecution RtlDelete RtlDeleteAce RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDestroyHeap RtlDisownModuleHeapAllocation RtlDoesNameContainWildCards RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDowncaseUnicodeString RtlDrainNonVolatileFlush RtlEnclaveCallDispatch RtlEnclaveCallDispatchReturn RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlEthernetAddressToString RtlEthernetStringToAddress RtlExtendCorrelationVector RtlFillMemoryNonTemporal RtlFillNonVolatileMemory RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsAndSetEx RtlFindClearBitsEx RtlFindClearRuns RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFirstEntrySList RtlFlsGetValue RtlFlsSetValue RtlFlushNonVolatileMemory RtlFlushNonVolatileMemoryRanges RtlFreeAnsiString RtlFreeHeap RtlFreeNonVolatileToken RtlFreeOemString RtlFreeUnicodeString RtlFreeUserFiberShadowStack RtlFreeUTF8String RtlGenerate8dot3Name RtlGetAce RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength2 RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetImageFileMachines RtlGetMultiTimePrecise RtlGetNonVolatileToken RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetSystemGlobalData RtlGetSystemTimeAndBias RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetVersion RtlGrowFunctionTable RtlGUIDFromString RtlHashUnicodeString RtlIncrementCorrelationVector RtlInitAnsiString RtlInitCodePageTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeSid RtlInitializeSidEx RtlInitializeSListHead RtlInitString RtlInitStringEx RtlInitUnicodeString RtlInitUTF8String RtlInitUTF8StringEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFullAvl RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToUnicodeString RtlInterlockedClearBitRunEx RtlInterlockedFlushSList RtlInterlockedPushEntrySList RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExW RtlIpv4StringToAddress RtlIpv4StringToAddressEx RtlIpv6AddressToString RtlIpv6AddressToStringExW RtlIpv6StringToAddress RtlIpv6StringToAddressExW RtlIsApiSetImplemented RtlIsCloudFilesPlaceholder RtlIsCurrentProcess RtlIsCurrentThread RtlIsEcCode RtlIsEnclaveFeaturePresent RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsStateSeparationEnabled RtlIsValidLocaleName RtlIsZeroMemory RtlLengthCurrentClearRunBackwardEx RtlLengthCurrentClearRunForwardEx RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFullAvl RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNormalizeSecurityDescriptor RtlNotifyFeatureUsage RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCrossProcessEmulatorWorkConnection RtlOverwriteFeatureConfigurationBuffer RtlPcToFileHeader RtlPrefixUnicodeString RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpWow64CtxFromAmd64 RtlpWow64GetContextOnAmd64 RtlpWow64SetContextOnAmd64 RtlQueryAllFeatureConfigurations RtlQueryDepthSList RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryImageMitigationPolicy RtlQueryPointerMapping RtlQueryProcessPlaceholderCompatibilityMode RtlQueryPropertyStore RtlQueryRegistryValues RtlQueryRegistryValueWithFallback RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTokenHostIdAsUlong64 RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseExceptionForReturnAddressHijack RtlRaiseNoncontinuableException RtlRandom RtlRandomEx RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRemovePointerMapping RtlRemovePropertyStore RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetAllBitsEx RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetDaclSecurityDescriptor RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetImageMitigationPolicy RtlSetOwnerSecurityDescriptor RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPreferredUILanguages2 RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlTestBitEx RtlTimeFieldsToTime RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUdiv128 RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUserFiberStart RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlValidateCorrelationVector RtlValidRelativeSecurityDescriptor RtlVerifyVersionInfo RtlVirtualUnwind RtlVirtualUnwind2 RtlWow64ChangeProcessState RtlWow64ChangeThreadState RtlWow64GetEquivalentMachineCHPE RtlWow64GetSharedInfoProcess RtlWow64PopAllCrossProcessWorkFromWorkList RtlWow64PopCrossProcessWorkFromFreeList RtlWow64PushCrossProcessWorkOntoFreeList RtlWow64PushCrossProcessWorkOntoWorkList RtlWow64RequestCrossProcessHeavyFlush RtlWow64SuspendProcess RtlWriteNonVolatileMemory RtlWriteRegistryValue TpSetPoolThreadCpuSets TpWorkOnBehalfClearTicket TpWorkOnBehalfSetTicket vDbgPrintEx vDbgPrintExWithPrefix VerSetConditionMask ZwAcquireCrossVmMutant ZwAllocateLocallyUniqueId ZwAllocateUserPhysicalPagesEx ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwCallEnclave ZwChangeProcessState ZwChangeThreadState ZwClose ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwContinueEx ZwCopyFileChunk ZwCreateCpuPartition ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoRing ZwCreateKey ZwCreateKeyTransacted ZwCreateProcessStateChange ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateThreadStateChange ZwCreateTransaction ZwCreateTransactionManager ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFileEx ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwLoadDriver ZwLoadKey3 ZwLockFile ZwMakeTemporaryObject ZwManageHotPatch ZwMapViewOfSection ZwMapViewOfSectionEx ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwOpenCpuPartition ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSymbolicLinkObject ZwOpenThreadTokenEx ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrepareComplete ZwPrepareEnlistment ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPssCaptureVaSpaceBulk ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationCpuPartition ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryIoRingCapabilities ZwQueryKey ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueueApcThreadEx2 ZwReadFile ZwReadOnlyEnlistment ZwReadVirtualMemoryEx ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwRollforwardTransactionManager ZwSetEaFile ZwSetEvent ZwSetInformationCpuPartition ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationIoRing ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetValueKey ZwSetVolumeInformationFile ZwSinglePhaseReject ZwSubmitIoRing ZwSuspendProcess ZwTerminateEnclave ZwTerminateProcess ZwUnloadDriver ZwUnlockFile ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwWaitForSingleObject ZwWriteFile  | DPFLTR_TYPE NOTIFICATION_MASK SYSTEM_INFORMATION_CLASS NtFileCreateOptions NtFileMode KEY_INFORMATION_CLASS PROCESS_CREATE_FLAGS PROCESSINFOCLASS SUBSYSTEM_INFORMATION_TYPE                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | CLIENT_ID KEY_NAME_INFORMATION LDR_DLL_NOTIFICATION_DATA OBJECT_ATTRIBUTES RTL_HEAP_PARAMETERS IO_STATUS_BLOCK KEY_BASIC_INFORMATION KEY_FULL_INFORMATION KEY_NODE_INFORMATION KERNEL_USER_TIMES PEB PEB_WOW64 PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION_WOW64 RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS_WOW64 SYSTEM_BASIC_INFORMATION SYSTEM_PROCESS_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_THREAD_INFORMATION UNICODE_STRING UNICODE_STRING_WOW64                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
