## Vanara.PInvoke.NtDll  
PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.

- Includes methods from ntdll.dll  
- Current NuGet release: [![Nuget](https://img.shields.io/nuget/v/Vanara.PInvoke.NtDll?logo=nuget&style=flat-square)![Nuget](https://img.shields.io/nuget/dt/Vanara.PInvoke.NtDll?label=%20&style=flat-square)](https://www.nuget.org/packages/Vanara.PInvoke.NtDll)  
### Methods - 5% API coverage (35 of 628 functions)  
Native Method | Header | Managed Method  
--- | --- | ---  
[_vscprintf](https://www.google.com/search?num=5&q=_vscprintf+site%3Alearn.microsoft.com) |  |   
[ApiSetQueryApiSetPresenceEx](https://www.google.com/search?num=5&q=ApiSetQueryApiSetPresenceEx+site%3Alearn.microsoft.com) |  |   
[DbgBreakPoint](https://www.google.com/search?num=5&q=DbgBreakPoint+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.DbgBreakPoint](https://github.com/dahall/Vanara/search?l=C%23&q=DbgBreakPoint)  
[DbgPrint](https://www.google.com/search?num=5&q=DbgPrint+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.DbgPrint](https://github.com/dahall/Vanara/search?l=C%23&q=DbgPrint)  
[DbgPrintEx](https://www.google.com/search?num=5&q=DbgPrintEx+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.DbgPrintEx](https://github.com/dahall/Vanara/search?l=C%23&q=DbgPrintEx)  
[DbgPrompt](https://www.google.com/search?num=5&q=DbgPrompt+site%3Alearn.microsoft.com) | ntddk.h | [Vanara.PInvoke.NtDll.DbgPrompt](https://github.com/dahall/Vanara/search?l=C%23&q=DbgPrompt)  
[EtwCheckCoverage](https://www.google.com/search?num=5&q=EtwCheckCoverage+site%3Alearn.microsoft.com) |  |   
[LdrCallEnclave](https://www.google.com/search?num=5&q=LdrCallEnclave+site%3Alearn.microsoft.com) |  |   
[LdrControlFlowGuardEnforced](https://www.google.com/search?num=5&q=LdrControlFlowGuardEnforced+site%3Alearn.microsoft.com) |  |   
[LdrCreateEnclave](https://www.google.com/search?num=5&q=LdrCreateEnclave+site%3Alearn.microsoft.com) |  |   
[LdrDeleteEnclave](https://www.google.com/search?num=5&q=LdrDeleteEnclave+site%3Alearn.microsoft.com) |  |   
[LdrFastFailInLoaderCallout](https://www.google.com/search?num=5&q=LdrFastFailInLoaderCallout+site%3Alearn.microsoft.com) | ntldr.h | [Vanara.PInvoke.NtDll.LdrFastFailInLoaderCallout](https://github.com/dahall/Vanara/search?l=C%23&q=LdrFastFailInLoaderCallout)  
[LdrHotPatchNotify](https://www.google.com/search?num=5&q=LdrHotPatchNotify+site%3Alearn.microsoft.com) |  |   
[LdrInitializeEnclave](https://www.google.com/search?num=5&q=LdrInitializeEnclave+site%3Alearn.microsoft.com) |  |   
[LdrIsModuleSxsRedirected](https://www.google.com/search?num=5&q=LdrIsModuleSxsRedirected+site%3Alearn.microsoft.com) |  |   
[LdrLoadEnclaveModule](https://www.google.com/search?num=5&q=LdrLoadEnclaveModule+site%3Alearn.microsoft.com) |  |   
[LdrRegisterDllNotification](https://www.google.com/search?num=5&q=LdrRegisterDllNotification+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.LdrRegisterDllNotification](https://github.com/dahall/Vanara/search?l=C%23&q=LdrRegisterDllNotification)  
[LdrUnregisterDllNotification](https://www.google.com/search?num=5&q=LdrUnregisterDllNotification+site%3Alearn.microsoft.com) | ntldr.h | [Vanara.PInvoke.NtDll.LdrUnregisterDllNotification](https://github.com/dahall/Vanara/search?l=C%23&q=LdrUnregisterDllNotification)  
[MicrosoftTelemetryAssertTriggeredUM](https://www.google.com/search?num=5&q=MicrosoftTelemetryAssertTriggeredUM+site%3Alearn.microsoft.com) |  |   
[NtAcquireCrossVmMutant](https://www.google.com/search?num=5&q=NtAcquireCrossVmMutant+site%3Alearn.microsoft.com) |  |   
[NtAllocateUserPhysicalPagesEx](https://www.google.com/search?num=5&q=NtAllocateUserPhysicalPagesEx+site%3Alearn.microsoft.com) |  |   
[NtAllocateVirtualMemory](https://www.google.com/search?num=5&q=NtAllocateVirtualMemory+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtAllocateVirtualMemory](https://github.com/dahall/Vanara/search?l=C%23&q=NtAllocateVirtualMemory)  
[NtAllocateVirtualMemoryEx](https://www.google.com/search?num=5&q=NtAllocateVirtualMemoryEx+site%3Alearn.microsoft.com) |  |   
[NtCallEnclave](https://www.google.com/search?num=5&q=NtCallEnclave+site%3Alearn.microsoft.com) |  |   
[NtChangeProcessState](https://www.google.com/search?num=5&q=NtChangeProcessState+site%3Alearn.microsoft.com) |  |   
[NtChangeThreadState](https://www.google.com/search?num=5&q=NtChangeThreadState+site%3Alearn.microsoft.com) |  |   
[NtClose](https://www.google.com/search?num=5&q=NtClose+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.NtClose](https://github.com/dahall/Vanara/search?l=C%23&q=NtClose)  
[NtCommitComplete](https://www.google.com/search?num=5&q=NtCommitComplete+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCommitComplete](https://github.com/dahall/Vanara/search?l=C%23&q=NtCommitComplete)  
[NtCommitEnlistment](https://www.google.com/search?num=5&q=NtCommitEnlistment+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCommitEnlistment](https://github.com/dahall/Vanara/search?l=C%23&q=NtCommitEnlistment)  
[NtCommitTransaction](https://www.google.com/search?num=5&q=NtCommitTransaction+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCommitTransaction](https://github.com/dahall/Vanara/search?l=C%23&q=NtCommitTransaction)  
[NtCompareTokens](https://www.google.com/search?num=5&q=NtCompareTokens+site%3Alearn.microsoft.com) | Ntseapi.h | [Vanara.PInvoke.NtDll.NtCompareTokens](https://github.com/dahall/Vanara/search?l=C%23&q=NtCompareTokens)  
[NtContinueEx](https://www.google.com/search?num=5&q=NtContinueEx+site%3Alearn.microsoft.com) |  |   
[NtCopyFileChunk](https://www.google.com/search?num=5&q=NtCopyFileChunk+site%3Alearn.microsoft.com) |  |   
[NtCreateCpuPartition](https://www.google.com/search?num=5&q=NtCreateCpuPartition+site%3Alearn.microsoft.com) |  |   
[NtCreateCrossVmEvent](https://www.google.com/search?num=5&q=NtCreateCrossVmEvent+site%3Alearn.microsoft.com) |  |   
[NtCreateCrossVmMutant](https://www.google.com/search?num=5&q=NtCreateCrossVmMutant+site%3Alearn.microsoft.com) |  |   
[NtCreateEnlistment](https://www.google.com/search?num=5&q=NtCreateEnlistment+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateEnlistment](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateEnlistment)  
[NtCreateFile](https://www.google.com/search?num=5&q=NtCreateFile+site%3Alearn.microsoft.com) |  |   
[NtCreateFileA](https://www.google.com/search?num=5&q=NtCreateFileA+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtCreateFile](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateFile)  
[NtCreateFileW](https://www.google.com/search?num=5&q=NtCreateFileW+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtCreateFile](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateFile)  
[NtCreateIoRing](https://www.google.com/search?num=5&q=NtCreateIoRing+site%3Alearn.microsoft.com) |  |   
[NtCreateProcess](https://www.google.com/search?num=5&q=NtCreateProcess+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.NtCreateProcess](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateProcess)  
[NtCreateProcessEx](https://www.google.com/search?num=5&q=NtCreateProcessEx+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.NtCreateProcessEx](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateProcessEx)  
[NtCreateProcessStateChange](https://www.google.com/search?num=5&q=NtCreateProcessStateChange+site%3Alearn.microsoft.com) |  |   
[NtCreateResourceManager](https://www.google.com/search?num=5&q=NtCreateResourceManager+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateResourceManager](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateResourceManager)  
[NtCreateSection](https://www.google.com/search?num=5&q=NtCreateSection+site%3Alearn.microsoft.com) |  |   
[NtCreateSectionA](https://www.google.com/search?num=5&q=NtCreateSectionA+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtCreateSection](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateSection)  
[NtCreateSectionEx](https://www.google.com/search?num=5&q=NtCreateSectionEx+site%3Alearn.microsoft.com) |  |   
[NtCreateSectionW](https://www.google.com/search?num=5&q=NtCreateSectionW+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtCreateSection](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateSection)  
[NtCreateThreadStateChange](https://www.google.com/search?num=5&q=NtCreateThreadStateChange+site%3Alearn.microsoft.com) |  |   
[NtCreateTransaction](https://www.google.com/search?num=5&q=NtCreateTransaction+site%3Alearn.microsoft.com) |  |   
[NtCreateTransactionA](https://www.google.com/search?num=5&q=NtCreateTransactionA+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateTransaction](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateTransaction)  
[NtCreateTransactionManager](https://www.google.com/search?num=5&q=NtCreateTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtCreateTransactionManagerA](https://www.google.com/search?num=5&q=NtCreateTransactionManagerA+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateTransactionManager](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateTransactionManager)  
[NtCreateTransactionManagerW](https://www.google.com/search?num=5&q=NtCreateTransactionManagerW+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateTransactionManager](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateTransactionManager)  
[NtCreateTransactionW](https://www.google.com/search?num=5&q=NtCreateTransactionW+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtCreateTransaction](https://github.com/dahall/Vanara/search?l=C%23&q=NtCreateTransaction)  
[NtDeviceIoControlFile](https://www.google.com/search?num=5&q=NtDeviceIoControlFile+site%3Alearn.microsoft.com) |  |   
[NtDirectGraphicsCall](https://www.google.com/search?num=5&q=NtDirectGraphicsCall+site%3Alearn.microsoft.com) |  |   
[NtDuplicateToken](https://www.google.com/search?num=5&q=NtDuplicateToken+site%3Alearn.microsoft.com) |  |   
[NtEnumerateTransactionObject](https://www.google.com/search?num=5&q=NtEnumerateTransactionObject+site%3Alearn.microsoft.com) |  |   
[NtFlushBuffersFileEx](https://www.google.com/search?num=5&q=NtFlushBuffersFileEx+site%3Alearn.microsoft.com) |  |   
[NtFreeVirtualMemory](https://www.google.com/search?num=5&q=NtFreeVirtualMemory+site%3Alearn.microsoft.com) |  |   
[NtFsControlFile](https://www.google.com/search?num=5&q=NtFsControlFile+site%3Alearn.microsoft.com) |  |   
[NtGetCurrentProcessorNumber](https://www.google.com/search?num=5&q=NtGetCurrentProcessorNumber+site%3Alearn.microsoft.com) |  |   
[NtGetNotificationResourceManager](https://www.google.com/search?num=5&q=NtGetNotificationResourceManager+site%3Alearn.microsoft.com) |  |   
[NtLoadKey3](https://www.google.com/search?num=5&q=NtLoadKey3+site%3Alearn.microsoft.com) |  |   
[NtLockFile](https://www.google.com/search?num=5&q=NtLockFile+site%3Alearn.microsoft.com) |  |   
[NtManageHotPatch](https://www.google.com/search?num=5&q=NtManageHotPatch+site%3Alearn.microsoft.com) |  |   
[NtMapViewOfSectionEx](https://www.google.com/search?num=5&q=NtMapViewOfSectionEx+site%3Alearn.microsoft.com) |  |   
[NtNotifyChangeDirectoryFileEx](https://www.google.com/search?num=5&q=NtNotifyChangeDirectoryFileEx+site%3Alearn.microsoft.com) |  |   
[NtNotifyChangeMultipleKeys](https://www.google.com/search?num=5&q=NtNotifyChangeMultipleKeys+site%3Alearn.microsoft.com) |  |   
[NtOpenCpuPartition](https://www.google.com/search?num=5&q=NtOpenCpuPartition+site%3Alearn.microsoft.com) |  |   
[NtOpenDirectoryObject](https://www.google.com/search?num=5&q=NtOpenDirectoryObject+site%3Alearn.microsoft.com) |  |   
[NtOpenEnlistment](https://www.google.com/search?num=5&q=NtOpenEnlistment+site%3Alearn.microsoft.com) |  |   
[NtOpenFile](https://www.google.com/search?num=5&q=NtOpenFile+site%3Alearn.microsoft.com) |  |   
[NtOpenProcess](https://www.google.com/search?num=5&q=NtOpenProcess+site%3Alearn.microsoft.com) |  |   
[NtOpenProcessTokenEx](https://www.google.com/search?num=5&q=NtOpenProcessTokenEx+site%3Alearn.microsoft.com) |  |   
[NtOpenResourceManager](https://www.google.com/search?num=5&q=NtOpenResourceManager+site%3Alearn.microsoft.com) |  |   
[NtOpenSymbolicLinkObject](https://www.google.com/search?num=5&q=NtOpenSymbolicLinkObject+site%3Alearn.microsoft.com) |  |   
[NtOpenThread](https://www.google.com/search?num=5&q=NtOpenThread+site%3Alearn.microsoft.com) |  |   
[NtOpenThreadTokenEx](https://www.google.com/search?num=5&q=NtOpenThreadTokenEx+site%3Alearn.microsoft.com) |  |   
[NtOpenTransaction](https://www.google.com/search?num=5&q=NtOpenTransaction+site%3Alearn.microsoft.com) |  |   
[NtOpenTransactionManager](https://www.google.com/search?num=5&q=NtOpenTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtPowerInformation](https://www.google.com/search?num=5&q=NtPowerInformation+site%3Alearn.microsoft.com) |  |   
[NtPrepareComplete](https://www.google.com/search?num=5&q=NtPrepareComplete+site%3Alearn.microsoft.com) |  |   
[NtPrepareEnlistment](https://www.google.com/search?num=5&q=NtPrepareEnlistment+site%3Alearn.microsoft.com) |  |   
[NtPrePrepareComplete](https://www.google.com/search?num=5&q=NtPrePrepareComplete+site%3Alearn.microsoft.com) |  |   
[NtPrePrepareEnlistment](https://www.google.com/search?num=5&q=NtPrePrepareEnlistment+site%3Alearn.microsoft.com) |  |   
[NtProtectVirtualMemory](https://www.google.com/search?num=5&q=NtProtectVirtualMemory+site%3Alearn.microsoft.com) |  |   
[NtPssCaptureVaSpaceBulk](https://www.google.com/search?num=5&q=NtPssCaptureVaSpaceBulk+site%3Alearn.microsoft.com) |  |   
[NtQueryAttributesFile](https://www.google.com/search?num=5&q=NtQueryAttributesFile+site%3Alearn.microsoft.com) |  |   
[NtQueryDirectoryFile](https://www.google.com/search?num=5&q=NtQueryDirectoryFile+site%3Alearn.microsoft.com) |  |   
[NtQueryDirectoryFileEx](https://www.google.com/search?num=5&q=NtQueryDirectoryFileEx+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationCpuPartition](https://www.google.com/search?num=5&q=NtQueryInformationCpuPartition+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationEnlistment](https://www.google.com/search?num=5&q=NtQueryInformationEnlistment+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationFile](https://www.google.com/search?num=5&q=NtQueryInformationFile+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationProcess](https://www.google.com/search?num=5&q=NtQueryInformationProcess+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.NtQueryInformationProcess](https://github.com/dahall/Vanara/search?l=C%23&q=NtQueryInformationProcess)  
[NtQueryInformationResourceManager](https://www.google.com/search?num=5&q=NtQueryInformationResourceManager+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationThread](https://www.google.com/search?num=5&q=NtQueryInformationThread+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationToken](https://www.google.com/search?num=5&q=NtQueryInformationToken+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationTransaction](https://www.google.com/search?num=5&q=NtQueryInformationTransaction+site%3Alearn.microsoft.com) |  |   
[NtQueryInformationTransactionManager](https://www.google.com/search?num=5&q=NtQueryInformationTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtQueryIoRingCapabilities](https://www.google.com/search?num=5&q=NtQueryIoRingCapabilities+site%3Alearn.microsoft.com) |  |   
[NtQueryKey](https://www.google.com/search?num=5&q=NtQueryKey+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.NtQueryKey](https://github.com/dahall/Vanara/search?l=C%23&q=NtQueryKey)  
[NtQueryMultipleValueKey](https://www.google.com/search?num=5&q=NtQueryMultipleValueKey+site%3Alearn.microsoft.com) |  |   
[NtQueryObject](https://www.google.com/search?num=5&q=NtQueryObject+site%3Alearn.microsoft.com) |  |   
[NtQueryPerformanceCounter](https://www.google.com/search?num=5&q=NtQueryPerformanceCounter+site%3Alearn.microsoft.com) |  |   
[NtQueryQuotaInformationFile](https://www.google.com/search?num=5&q=NtQueryQuotaInformationFile+site%3Alearn.microsoft.com) |  |   
[NtQuerySecurityObject](https://www.google.com/search?num=5&q=NtQuerySecurityObject+site%3Alearn.microsoft.com) |  |   
[NtQuerySymbolicLinkObject](https://www.google.com/search?num=5&q=NtQuerySymbolicLinkObject+site%3Alearn.microsoft.com) |  |   
[NtQuerySystemInformation](https://www.google.com/search?num=5&q=NtQuerySystemInformation+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.NtQuerySystemInformation](https://github.com/dahall/Vanara/search?l=C%23&q=NtQuerySystemInformation)  
[NtQuerySystemTime](https://www.google.com/search?num=5&q=NtQuerySystemTime+site%3Alearn.microsoft.com) |  |   
[NtQueryVirtualMemory](https://www.google.com/search?num=5&q=NtQueryVirtualMemory+site%3Alearn.microsoft.com) |  |   
[NtQueryVolumeInformationFile](https://www.google.com/search?num=5&q=NtQueryVolumeInformationFile+site%3Alearn.microsoft.com) |  |   
[NtQueueApcThreadEx2](https://www.google.com/search?num=5&q=NtQueueApcThreadEx2+site%3Alearn.microsoft.com) |  |   
[NtReadFile](https://www.google.com/search?num=5&q=NtReadFile+site%3Alearn.microsoft.com) |  |   
[NtReadOnlyEnlistment](https://www.google.com/search?num=5&q=NtReadOnlyEnlistment+site%3Alearn.microsoft.com) |  |   
[NtReadVirtualMemoryEx](https://www.google.com/search?num=5&q=NtReadVirtualMemoryEx+site%3Alearn.microsoft.com) |  |   
[NtRecoverEnlistment](https://www.google.com/search?num=5&q=NtRecoverEnlistment+site%3Alearn.microsoft.com) |  |   
[NtRecoverResourceManager](https://www.google.com/search?num=5&q=NtRecoverResourceManager+site%3Alearn.microsoft.com) |  |   
[NtRecoverTransactionManager](https://www.google.com/search?num=5&q=NtRecoverTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtRenameKey](https://www.google.com/search?num=5&q=NtRenameKey+site%3Alearn.microsoft.com) |  |   
[NtRenameTransactionManager](https://www.google.com/search?num=5&q=NtRenameTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtRollbackComplete](https://www.google.com/search?num=5&q=NtRollbackComplete+site%3Alearn.microsoft.com) |  |   
[NtRollbackEnlistment](https://www.google.com/search?num=5&q=NtRollbackEnlistment+site%3Alearn.microsoft.com) |  |   
[NtRollbackTransaction](https://www.google.com/search?num=5&q=NtRollbackTransaction+site%3Alearn.microsoft.com) |  |   
[NtRollforwardTransactionManager](https://www.google.com/search?num=5&q=NtRollforwardTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtSetInformationCpuPartition](https://www.google.com/search?num=5&q=NtSetInformationCpuPartition+site%3Alearn.microsoft.com) |  |   
[NtSetInformationEnlistment](https://www.google.com/search?num=5&q=NtSetInformationEnlistment+site%3Alearn.microsoft.com) |  |   
[NtSetInformationFile](https://www.google.com/search?num=5&q=NtSetInformationFile+site%3Alearn.microsoft.com) |  |   
[NtSetInformationIoRing](https://www.google.com/search?num=5&q=NtSetInformationIoRing+site%3Alearn.microsoft.com) |  |   
[NtSetInformationKey](https://www.google.com/search?num=5&q=NtSetInformationKey+site%3Alearn.microsoft.com) |  |   
[NtSetInformationResourceManager](https://www.google.com/search?num=5&q=NtSetInformationResourceManager+site%3Alearn.microsoft.com) |  |   
[NtSetInformationThread](https://www.google.com/search?num=5&q=NtSetInformationThread+site%3Alearn.microsoft.com) |  |   
[NtSetInformationToken](https://www.google.com/search?num=5&q=NtSetInformationToken+site%3Alearn.microsoft.com) |  |   
[NtSetInformationTransaction](https://www.google.com/search?num=5&q=NtSetInformationTransaction+site%3Alearn.microsoft.com) |  |   
[NtSetInformationTransactionManager](https://www.google.com/search?num=5&q=NtSetInformationTransactionManager+site%3Alearn.microsoft.com) |  |   
[NtSetQuotaInformationFile](https://www.google.com/search?num=5&q=NtSetQuotaInformationFile+site%3Alearn.microsoft.com) |  |   
[NtSetSecurityObject](https://www.google.com/search?num=5&q=NtSetSecurityObject+site%3Alearn.microsoft.com) |  |   
[NtSinglePhaseReject](https://www.google.com/search?num=5&q=NtSinglePhaseReject+site%3Alearn.microsoft.com) |  |   
[NtSubmitIoRing](https://www.google.com/search?num=5&q=NtSubmitIoRing+site%3Alearn.microsoft.com) |  |   
[NtTerminateEnclave](https://www.google.com/search?num=5&q=NtTerminateEnclave+site%3Alearn.microsoft.com) |  |   
[NtUnlockFile](https://www.google.com/search?num=5&q=NtUnlockFile+site%3Alearn.microsoft.com) |  |   
[NtUnmapViewOfSection](https://www.google.com/search?num=5&q=NtUnmapViewOfSection+site%3Alearn.microsoft.com) |  |   
[NtWaitForSingleObject](https://www.google.com/search?num=5&q=NtWaitForSingleObject+site%3Alearn.microsoft.com) |  |   
[NtWow64QueryInformationProcess64](https://www.google.com/search?num=5&q=NtWow64QueryInformationProcess64+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.NtWow64QueryInformationProcess64](https://github.com/dahall/Vanara/search?l=C%23&q=NtWow64QueryInformationProcess64)  
[NtWow64ReadVirtualMemory64](https://www.google.com/search?num=5&q=NtWow64ReadVirtualMemory64+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.NtWow64ReadVirtualMemory64](https://github.com/dahall/Vanara/search?l=C%23&q=NtWow64ReadVirtualMemory64)  
[NtWriteFile](https://www.google.com/search?num=5&q=NtWriteFile+site%3Alearn.microsoft.com) |  |   
[RtlAbsoluteToSelfRelativeSD](https://www.google.com/search?num=5&q=RtlAbsoluteToSelfRelativeSD+site%3Alearn.microsoft.com) |  |   
[RtlAddAccessAllowedAce](https://www.google.com/search?num=5&q=RtlAddAccessAllowedAce+site%3Alearn.microsoft.com) |  |   
[RtlAddAccessAllowedAceEx](https://www.google.com/search?num=5&q=RtlAddAccessAllowedAceEx+site%3Alearn.microsoft.com) |  |   
[RtlAddAce](https://www.google.com/search?num=5&q=RtlAddAce+site%3Alearn.microsoft.com) |  |   
[RtlAddFunctionTable](https://www.google.com/search?num=5&q=RtlAddFunctionTable+site%3Alearn.microsoft.com) |  |   
[RtlAddGrowableFunctionTable](https://www.google.com/search?num=5&q=RtlAddGrowableFunctionTable+site%3Alearn.microsoft.com) |  |   
[RtlAllocateAndInitializeSid](https://www.google.com/search?num=5&q=RtlAllocateAndInitializeSid+site%3Alearn.microsoft.com) |  |   
[RtlAllocateHeap](https://www.google.com/search?num=5&q=RtlAllocateHeap+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.RtlAllocateHeap](https://github.com/dahall/Vanara/search?l=C%23&q=RtlAllocateHeap)  
[RtlAnsiStringToUnicodeString](https://www.google.com/search?num=5&q=RtlAnsiStringToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlAppendStringToString](https://www.google.com/search?num=5&q=RtlAppendStringToString+site%3Alearn.microsoft.com) |  |   
[RtlAppendUnicodeStringToString](https://www.google.com/search?num=5&q=RtlAppendUnicodeStringToString+site%3Alearn.microsoft.com) |  |   
[RtlAppendUnicodeToString](https://www.google.com/search?num=5&q=RtlAppendUnicodeToString+site%3Alearn.microsoft.com) |  |   
[RtlAreBitsClear](https://www.google.com/search?num=5&q=RtlAreBitsClear+site%3Alearn.microsoft.com) |  |   
[RtlAreBitsClearEx](https://www.google.com/search?num=5&q=RtlAreBitsClearEx+site%3Alearn.microsoft.com) |  |   
[RtlAreBitsSet](https://www.google.com/search?num=5&q=RtlAreBitsSet+site%3Alearn.microsoft.com) |  |   
[RtlCallEnclave](https://www.google.com/search?num=5&q=RtlCallEnclave+site%3Alearn.microsoft.com) |  |   
[RtlCallEnclaveReturn](https://www.google.com/search?num=5&q=RtlCallEnclaveReturn+site%3Alearn.microsoft.com) |  |   
[RtlCapabilityCheckForSingleSessionSku](https://www.google.com/search?num=5&q=RtlCapabilityCheckForSingleSessionSku+site%3Alearn.microsoft.com) |  |   
[RtlCaptureContext](https://www.google.com/search?num=5&q=RtlCaptureContext+site%3Alearn.microsoft.com) |  |   
[RtlCaptureContext2](https://www.google.com/search?num=5&q=RtlCaptureContext2+site%3Alearn.microsoft.com) |  |   
[RtlCaptureStackBackTrace](https://www.google.com/search?num=5&q=RtlCaptureStackBackTrace+site%3Alearn.microsoft.com) |  |   
[RtlCharToInteger](https://www.google.com/search?num=5&q=RtlCharToInteger+site%3Alearn.microsoft.com) |  |   
[RtlCheckRegistryKey](https://www.google.com/search?num=5&q=RtlCheckRegistryKey+site%3Alearn.microsoft.com) |  |   
[RtlCheckSystemBootStatusIntegrity](https://www.google.com/search?num=5&q=RtlCheckSystemBootStatusIntegrity+site%3Alearn.microsoft.com) |  |   
[RtlClearAllBitsEx](https://www.google.com/search?num=5&q=RtlClearAllBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlClearBitEx](https://www.google.com/search?num=5&q=RtlClearBitEx+site%3Alearn.microsoft.com) |  |   
[RtlClearBits](https://www.google.com/search?num=5&q=RtlClearBits+site%3Alearn.microsoft.com) |  |   
[RtlClearBitsEx](https://www.google.com/search?num=5&q=RtlClearBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlCmEncodeMemIoResource](https://www.google.com/search?num=5&q=RtlCmEncodeMemIoResource+site%3Alearn.microsoft.com) |  |   
[RtlCompareExchangePointerMapping](https://www.google.com/search?num=5&q=RtlCompareExchangePointerMapping+site%3Alearn.microsoft.com) |  |   
[RtlCompareExchangePropertyStore](https://www.google.com/search?num=5&q=RtlCompareExchangePropertyStore+site%3Alearn.microsoft.com) |  |   
[RtlCompareMemory](https://www.google.com/search?num=5&q=RtlCompareMemory+site%3Alearn.microsoft.com) |  |   
[RtlCompareMemoryUlong](https://www.google.com/search?num=5&q=RtlCompareMemoryUlong+site%3Alearn.microsoft.com) |  |   
[RtlCompareString](https://www.google.com/search?num=5&q=RtlCompareString+site%3Alearn.microsoft.com) |  |   
[RtlCompareUnicodeString](https://www.google.com/search?num=5&q=RtlCompareUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlCompressBuffer](https://www.google.com/search?num=5&q=RtlCompressBuffer+site%3Alearn.microsoft.com) |  |   
[RtlConstructCrossVmEventPath](https://www.google.com/search?num=5&q=RtlConstructCrossVmEventPath+site%3Alearn.microsoft.com) |  |   
[RtlConstructCrossVmMutexPath](https://www.google.com/search?num=5&q=RtlConstructCrossVmMutexPath+site%3Alearn.microsoft.com) |  |   
[RtlConvertHostPerfCounterToPerfCounter](https://www.google.com/search?num=5&q=RtlConvertHostPerfCounterToPerfCounter+site%3Alearn.microsoft.com) |  |   
[RtlConvertSidToUnicodeString](https://www.google.com/search?num=5&q=RtlConvertSidToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlCopyLuid](https://www.google.com/search?num=5&q=RtlCopyLuid+site%3Alearn.microsoft.com) |  |   
[RtlCopyMemoryNonTemporal](https://www.google.com/search?num=5&q=RtlCopyMemoryNonTemporal+site%3Alearn.microsoft.com) |  |   
[RtlCopySid](https://www.google.com/search?num=5&q=RtlCopySid+site%3Alearn.microsoft.com) |  |   
[RtlCopyString](https://www.google.com/search?num=5&q=RtlCopyString+site%3Alearn.microsoft.com) |  |   
[RtlCopyUnicodeString](https://www.google.com/search?num=5&q=RtlCopyUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlCreateAcl](https://www.google.com/search?num=5&q=RtlCreateAcl+site%3Alearn.microsoft.com) |  |   
[RtlCreateHeap](https://www.google.com/search?num=5&q=RtlCreateHeap+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.RtlCreateHeap](https://github.com/dahall/Vanara/search?l=C%23&q=RtlCreateHeap)  
[RtlCreateProcessParametersWithTemplate](https://www.google.com/search?num=5&q=RtlCreateProcessParametersWithTemplate+site%3Alearn.microsoft.com) |  |   
[RtlCreateRegistryKey](https://www.google.com/search?num=5&q=RtlCreateRegistryKey+site%3Alearn.microsoft.com) |  |   
[RtlCreateSecurityDescriptor](https://www.google.com/search?num=5&q=RtlCreateSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlCreateSystemVolumeInformationFolder](https://www.google.com/search?num=5&q=RtlCreateSystemVolumeInformationFolder+site%3Alearn.microsoft.com) |  |   
[RtlCreateUnicodeString](https://www.google.com/search?num=5&q=RtlCreateUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlCreateUserFiberShadowStack](https://www.google.com/search?num=5&q=RtlCreateUserFiberShadowStack+site%3Alearn.microsoft.com) |  |   
[RtlCustomCPToUnicodeN](https://www.google.com/search?num=5&q=RtlCustomCPToUnicodeN+site%3Alearn.microsoft.com) |  |   
[RtlDecompressBuffer](https://www.google.com/search?num=5&q=RtlDecompressBuffer+site%3Alearn.microsoft.com) |  |   
[RtlDecompressBufferEx](https://www.google.com/search?num=5&q=RtlDecompressBufferEx+site%3Alearn.microsoft.com) |  |   
[RtlDecompressFragment](https://www.google.com/search?num=5&q=RtlDecompressFragment+site%3Alearn.microsoft.com) |  |   
[RtlDelayExecution](https://www.google.com/search?num=5&q=RtlDelayExecution+site%3Alearn.microsoft.com) |  |   
[RtlDelete](https://www.google.com/search?num=5&q=RtlDelete+site%3Alearn.microsoft.com) |  |   
[RtlDeleteAce](https://www.google.com/search?num=5&q=RtlDeleteAce+site%3Alearn.microsoft.com) |  |   
[RtlDeleteElementGenericTable](https://www.google.com/search?num=5&q=RtlDeleteElementGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlDeleteElementGenericTableAvl](https://www.google.com/search?num=5&q=RtlDeleteElementGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlDeleteFunctionTable](https://www.google.com/search?num=5&q=RtlDeleteFunctionTable+site%3Alearn.microsoft.com) |  |   
[RtlDeleteGrowableFunctionTable](https://www.google.com/search?num=5&q=RtlDeleteGrowableFunctionTable+site%3Alearn.microsoft.com) |  |   
[RtlDeleteNoSplay](https://www.google.com/search?num=5&q=RtlDeleteNoSplay+site%3Alearn.microsoft.com) |  |   
[RtlDeleteRegistryValue](https://www.google.com/search?num=5&q=RtlDeleteRegistryValue+site%3Alearn.microsoft.com) |  |   
[RtlDestroyHeap](https://www.google.com/search?num=5&q=RtlDestroyHeap+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.RtlDestroyHeap](https://github.com/dahall/Vanara/search?l=C%23&q=RtlDestroyHeap)  
[RtlDisownModuleHeapAllocation](https://www.google.com/search?num=5&q=RtlDisownModuleHeapAllocation+site%3Alearn.microsoft.com) |  |   
[RtlDoesNameContainWildCards](https://www.google.com/search?num=5&q=RtlDoesNameContainWildCards+site%3Alearn.microsoft.com) |  |   
[RtlDosLongPathNameToNtPathName_U_WithStatus](https://www.google.com/search?num=5&q=RtlDosLongPathNameToNtPathName_U_WithStatus+site%3Alearn.microsoft.com) |  |   
[RtlDosLongPathNameToRelativeNtPathName_U_WithStatus](https://www.google.com/search?num=5&q=RtlDosLongPathNameToRelativeNtPathName_U_WithStatus+site%3Alearn.microsoft.com) |  |   
[RtlDowncaseUnicodeString](https://www.google.com/search?num=5&q=RtlDowncaseUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlDrainNonVolatileFlush](https://www.google.com/search?num=5&q=RtlDrainNonVolatileFlush+site%3Alearn.microsoft.com) |  |   
[RtlEnclaveCallDispatch](https://www.google.com/search?num=5&q=RtlEnclaveCallDispatch+site%3Alearn.microsoft.com) |  |   
[RtlEnclaveCallDispatchReturn](https://www.google.com/search?num=5&q=RtlEnclaveCallDispatchReturn+site%3Alearn.microsoft.com) |  |   
[RtlEnumerateGenericTable](https://www.google.com/search?num=5&q=RtlEnumerateGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlEnumerateGenericTableAvl](https://www.google.com/search?num=5&q=RtlEnumerateGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlEnumerateGenericTableLikeADirectory](https://www.google.com/search?num=5&q=RtlEnumerateGenericTableLikeADirectory+site%3Alearn.microsoft.com) |  |   
[RtlEnumerateGenericTableWithoutSplaying](https://www.google.com/search?num=5&q=RtlEnumerateGenericTableWithoutSplaying+site%3Alearn.microsoft.com) |  |   
[RtlEnumerateGenericTableWithoutSplayingAvl](https://www.google.com/search?num=5&q=RtlEnumerateGenericTableWithoutSplayingAvl+site%3Alearn.microsoft.com) |  |   
[RtlEqualPrefixSid](https://www.google.com/search?num=5&q=RtlEqualPrefixSid+site%3Alearn.microsoft.com) |  |   
[RtlEqualSid](https://www.google.com/search?num=5&q=RtlEqualSid+site%3Alearn.microsoft.com) |  |   
[RtlEqualUnicodeString](https://www.google.com/search?num=5&q=RtlEqualUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlEthernetAddressToString](https://www.google.com/search?num=5&q=RtlEthernetAddressToStringA+site%3Alearn.microsoft.com) |  |   
[RtlEthernetStringToAddress](https://www.google.com/search?num=5&q=RtlEthernetStringToAddressA+site%3Alearn.microsoft.com) |  |   
[RtlExtendCorrelationVector](https://www.google.com/search?num=5&q=RtlExtendCorrelationVector+site%3Alearn.microsoft.com) |  |   
[RtlFillMemoryNonTemporal](https://www.google.com/search?num=5&q=RtlFillMemoryNonTemporal+site%3Alearn.microsoft.com) |  |   
[RtlFillNonVolatileMemory](https://www.google.com/search?num=5&q=RtlFillNonVolatileMemory+site%3Alearn.microsoft.com) |  |   
[RtlFindClearBits](https://www.google.com/search?num=5&q=RtlFindClearBits+site%3Alearn.microsoft.com) |  |   
[RtlFindClearBitsAndSet](https://www.google.com/search?num=5&q=RtlFindClearBitsAndSet+site%3Alearn.microsoft.com) |  |   
[RtlFindClearBitsAndSetEx](https://www.google.com/search?num=5&q=RtlFindClearBitsAndSetEx+site%3Alearn.microsoft.com) |  |   
[RtlFindClearBitsEx](https://www.google.com/search?num=5&q=RtlFindClearBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlFindClearRuns](https://www.google.com/search?num=5&q=RtlFindClearRuns+site%3Alearn.microsoft.com) |  |   
[RtlFindLastBackwardRunClear](https://www.google.com/search?num=5&q=RtlFindLastBackwardRunClear+site%3Alearn.microsoft.com) |  |   
[RtlFindLeastSignificantBit](https://www.google.com/search?num=5&q=RtlFindLeastSignificantBit+site%3Alearn.microsoft.com) |  |   
[RtlFindLongestRunClear](https://www.google.com/search?num=5&q=RtlFindLongestRunClear+site%3Alearn.microsoft.com) |  |   
[RtlFindMostSignificantBit](https://www.google.com/search?num=5&q=RtlFindMostSignificantBit+site%3Alearn.microsoft.com) |  |   
[RtlFindNextForwardRunClear](https://www.google.com/search?num=5&q=RtlFindNextForwardRunClear+site%3Alearn.microsoft.com) |  |   
[RtlFindSetBits](https://www.google.com/search?num=5&q=RtlFindSetBits+site%3Alearn.microsoft.com) |  |   
[RtlFindSetBitsAndClear](https://www.google.com/search?num=5&q=RtlFindSetBitsAndClear+site%3Alearn.microsoft.com) |  |   
[RtlFindSetBitsAndClearEx](https://www.google.com/search?num=5&q=RtlFindSetBitsAndClearEx+site%3Alearn.microsoft.com) |  |   
[RtlFindSetBitsEx](https://www.google.com/search?num=5&q=RtlFindSetBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlFirstEntrySList](https://www.google.com/search?num=5&q=RtlFirstEntrySList+site%3Alearn.microsoft.com) |  |   
[RtlFlsGetValue](https://www.google.com/search?num=5&q=RtlFlsGetValue+site%3Alearn.microsoft.com) |  |   
[RtlFlsSetValue](https://www.google.com/search?num=5&q=RtlFlsSetValue+site%3Alearn.microsoft.com) |  |   
[RtlFlushNonVolatileMemory](https://www.google.com/search?num=5&q=RtlFlushNonVolatileMemory+site%3Alearn.microsoft.com) |  |   
[RtlFlushNonVolatileMemoryRanges](https://www.google.com/search?num=5&q=RtlFlushNonVolatileMemoryRanges+site%3Alearn.microsoft.com) |  |   
[RtlFreeAnsiString](https://www.google.com/search?num=5&q=RtlFreeAnsiString+site%3Alearn.microsoft.com) |  |   
[RtlFreeHeap](https://www.google.com/search?num=5&q=RtlFreeHeap+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.RtlFreeHeap](https://github.com/dahall/Vanara/search?l=C%23&q=RtlFreeHeap)  
[RtlFreeNonVolatileToken](https://www.google.com/search?num=5&q=RtlFreeNonVolatileToken+site%3Alearn.microsoft.com) |  |   
[RtlFreeOemString](https://www.google.com/search?num=5&q=RtlFreeOemString+site%3Alearn.microsoft.com) |  |   
[RtlFreeUnicodeString](https://www.google.com/search?num=5&q=RtlFreeUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlFreeUserFiberShadowStack](https://www.google.com/search?num=5&q=RtlFreeUserFiberShadowStack+site%3Alearn.microsoft.com) |  |   
[RtlFreeUTF8String](https://www.google.com/search?num=5&q=RtlFreeUTF8String+site%3Alearn.microsoft.com) |  |   
[RtlGenerate8dot3Name](https://www.google.com/search?num=5&q=RtlGenerate8dot3Name+site%3Alearn.microsoft.com) |  |   
[RtlGetAce](https://www.google.com/search?num=5&q=RtlGetAce+site%3Alearn.microsoft.com) |  |   
[RtlGetCompressionWorkSpaceSize](https://www.google.com/search?num=5&q=RtlGetCompressionWorkSpaceSize+site%3Alearn.microsoft.com) |  |   
[RtlGetDaclSecurityDescriptor](https://www.google.com/search?num=5&q=RtlGetDaclSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlGetElementGenericTable](https://www.google.com/search?num=5&q=RtlGetElementGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlGetElementGenericTableAvl](https://www.google.com/search?num=5&q=RtlGetElementGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlGetEnabledExtendedFeatures](https://www.google.com/search?num=5&q=RtlGetEnabledExtendedFeatures+site%3Alearn.microsoft.com) |  |   
[RtlGetExtendedContextLength2](https://www.google.com/search?num=5&q=RtlGetExtendedContextLength2+site%3Alearn.microsoft.com) |  |   
[RtlGetFunctionTableListHead](https://www.google.com/search?num=5&q=RtlGetFunctionTableListHead+site%3Alearn.microsoft.com) |  |   
[RtlGetGroupSecurityDescriptor](https://www.google.com/search?num=5&q=RtlGetGroupSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlGetImageFileMachines](https://www.google.com/search?num=5&q=RtlGetImageFileMachines+site%3Alearn.microsoft.com) |  |   
[RtlGetMultiTimePrecise](https://www.google.com/search?num=5&q=RtlGetMultiTimePrecise+site%3Alearn.microsoft.com) |  |   
[RtlGetNonVolatileToken](https://www.google.com/search?num=5&q=RtlGetNonVolatileToken+site%3Alearn.microsoft.com) |  |   
[RtlGetOwnerSecurityDescriptor](https://www.google.com/search?num=5&q=RtlGetOwnerSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlGetPersistedStateLocation](https://www.google.com/search?num=5&q=RtlGetPersistedStateLocation+site%3Alearn.microsoft.com) |  |   
[RtlGetReturnAddressHijackTarget](https://www.google.com/search?num=5&q=RtlGetReturnAddressHijackTarget+site%3Alearn.microsoft.com) |  |   
[RtlGetSaclSecurityDescriptor](https://www.google.com/search?num=5&q=RtlGetSaclSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlGetSystemBootStatus](https://www.google.com/search?num=5&q=RtlGetSystemBootStatus+site%3Alearn.microsoft.com) |  |   
[RtlGetSystemBootStatusEx](https://www.google.com/search?num=5&q=RtlGetSystemBootStatusEx+site%3Alearn.microsoft.com) |  |   
[RtlGetSystemGlobalData](https://www.google.com/search?num=5&q=RtlGetSystemGlobalData+site%3Alearn.microsoft.com) |  |   
[RtlGetSystemTimeAndBias](https://www.google.com/search?num=5&q=RtlGetSystemTimeAndBias+site%3Alearn.microsoft.com) |  |   
[RtlGetUnloadEventTrace](https://www.google.com/search?num=5&q=RtlGetUnloadEventTrace+site%3Alearn.microsoft.com) |  |   
[RtlGetUnloadEventTraceEx](https://www.google.com/search?num=5&q=RtlGetUnloadEventTraceEx+site%3Alearn.microsoft.com) |  |   
[RtlGetVersion](https://www.google.com/search?num=5&q=RtlGetVersion+site%3Alearn.microsoft.com) |  |   
[RtlGrowFunctionTable](https://www.google.com/search?num=5&q=RtlGrowFunctionTable+site%3Alearn.microsoft.com) |  |   
[RtlGUIDFromString](https://www.google.com/search?num=5&q=RtlGUIDFromString+site%3Alearn.microsoft.com) |  |   
[RtlHashUnicodeString](https://www.google.com/search?num=5&q=RtlHashUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlIncrementCorrelationVector](https://www.google.com/search?num=5&q=RtlIncrementCorrelationVector+site%3Alearn.microsoft.com) |  |   
[RtlInitAnsiString](https://www.google.com/search?num=5&q=RtlInitAnsiString+site%3Alearn.microsoft.com) |  |   
[RtlInitCodePageTable](https://www.google.com/search?num=5&q=RtlInitCodePageTable+site%3Alearn.microsoft.com) |  |   
[RtlInitializeBitMap](https://www.google.com/search?num=5&q=RtlInitializeBitMap+site%3Alearn.microsoft.com) |  |   
[RtlInitializeBitMapEx](https://www.google.com/search?num=5&q=RtlInitializeBitMapEx+site%3Alearn.microsoft.com) |  |   
[RtlInitializeCorrelationVector](https://www.google.com/search?num=5&q=RtlInitializeCorrelationVector+site%3Alearn.microsoft.com) |  |   
[RtlInitializeExtendedContext2](https://www.google.com/search?num=5&q=RtlInitializeExtendedContext2+site%3Alearn.microsoft.com) |  |   
[RtlInitializeGenericTable](https://www.google.com/search?num=5&q=RtlInitializeGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlInitializeGenericTableAvl](https://www.google.com/search?num=5&q=RtlInitializeGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlInitializeSid](https://www.google.com/search?num=5&q=RtlInitializeSid+site%3Alearn.microsoft.com) |  |   
[RtlInitializeSidEx](https://www.google.com/search?num=5&q=RtlInitializeSidEx+site%3Alearn.microsoft.com) |  |   
[RtlInitializeSListHead](https://www.google.com/search?num=5&q=RtlInitializeSListHead+site%3Alearn.microsoft.com) |  |   
[RtlInitString](https://www.google.com/search?num=5&q=RtlInitString+site%3Alearn.microsoft.com) |  |   
[RtlInitStringEx](https://www.google.com/search?num=5&q=RtlInitStringEx+site%3Alearn.microsoft.com) |  |   
[RtlInitUnicodeString](https://www.google.com/search?num=5&q=RtlInitUnicodeString+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.RtlInitUnicodeString](https://github.com/dahall/Vanara/search?l=C%23&q=RtlInitUnicodeString)  
[RtlInitUTF8String](https://www.google.com/search?num=5&q=RtlInitUTF8String+site%3Alearn.microsoft.com) |  |   
[RtlInitUTF8StringEx](https://www.google.com/search?num=5&q=RtlInitUTF8StringEx+site%3Alearn.microsoft.com) |  |   
[RtlInsertElementGenericTable](https://www.google.com/search?num=5&q=RtlInsertElementGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlInsertElementGenericTableAvl](https://www.google.com/search?num=5&q=RtlInsertElementGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlInsertElementGenericTableFullAvl](https://www.google.com/search?num=5&q=RtlInsertElementGenericTableFullAvl+site%3Alearn.microsoft.com) |  |   
[RtlInstallFunctionTableCallback](https://www.google.com/search?num=5&q=RtlInstallFunctionTableCallback+site%3Alearn.microsoft.com) |  |   
[RtlInt64ToUnicodeString](https://www.google.com/search?num=5&q=RtlInt64ToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlIntegerToUnicodeString](https://www.google.com/search?num=5&q=RtlIntegerToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlInterlockedClearBitRunEx](https://www.google.com/search?num=5&q=RtlInterlockedClearBitRunEx+site%3Alearn.microsoft.com) |  |   
[RtlInterlockedFlushSList](https://www.google.com/search?num=5&q=RtlInterlockedFlushSList+site%3Alearn.microsoft.com) |  |   
[RtlInterlockedPushEntrySList](https://www.google.com/search?num=5&q=RtlInterlockedPushEntrySList+site%3Alearn.microsoft.com) |  |   
[RtlIoDecodeMemIoResource](https://www.google.com/search?num=5&q=RtlIoDecodeMemIoResource+site%3Alearn.microsoft.com) |  |   
[RtlIoEncodeMemIoResource](https://www.google.com/search?num=5&q=RtlIoEncodeMemIoResource+site%3Alearn.microsoft.com) |  |   
[RtlIpv4AddressToStringA](https://www.google.com/search?num=5&q=RtlIpv4AddressToStringA+site%3Alearn.microsoft.com) |  |   
[RtlIpv4AddressToStringExW](https://www.google.com/search?num=5&q=RtlIpv4AddressToStringExW+site%3Alearn.microsoft.com) |  |   
[RtlIpv4StringToAddress](https://www.google.com/search?num=5&q=RtlIpv4StringToAddressA+site%3Alearn.microsoft.com) |  |   
[RtlIpv4StringToAddressEx](https://www.google.com/search?num=5&q=RtlIpv4StringToAddressExA+site%3Alearn.microsoft.com) |  |   
[RtlIpv6AddressToString](https://www.google.com/search?num=5&q=RtlIpv6AddressToStringA+site%3Alearn.microsoft.com) |  |   
[RtlIpv6AddressToStringExW](https://www.google.com/search?num=5&q=RtlIpv6AddressToStringExW+site%3Alearn.microsoft.com) |  |   
[RtlIpv6StringToAddress](https://www.google.com/search?num=5&q=RtlIpv6StringToAddressA+site%3Alearn.microsoft.com) |  |   
[RtlIpv6StringToAddressExW](https://www.google.com/search?num=5&q=RtlIpv6StringToAddressExW+site%3Alearn.microsoft.com) |  |   
[RtlIsApiSetImplemented](https://www.google.com/search?num=5&q=RtlIsApiSetImplemented+site%3Alearn.microsoft.com) |  |   
[RtlIsCloudFilesPlaceholder](https://www.google.com/search?num=5&q=RtlIsCloudFilesPlaceholder+site%3Alearn.microsoft.com) |  |   
[RtlIsCurrentProcess](https://www.google.com/search?num=5&q=RtlIsCurrentProcess+site%3Alearn.microsoft.com) |  |   
[RtlIsCurrentThread](https://www.google.com/search?num=5&q=RtlIsCurrentThread+site%3Alearn.microsoft.com) |  |   
[RtlIsEcCode](https://www.google.com/search?num=5&q=RtlIsEcCode+site%3Alearn.microsoft.com) |  |   
[RtlIsEnclaveFeaturePresent](https://www.google.com/search?num=5&q=RtlIsEnclaveFeaturePresent+site%3Alearn.microsoft.com) |  |   
[RtlIsGenericTableEmpty](https://www.google.com/search?num=5&q=RtlIsGenericTableEmpty+site%3Alearn.microsoft.com) |  |   
[RtlIsGenericTableEmptyAvl](https://www.google.com/search?num=5&q=RtlIsGenericTableEmptyAvl+site%3Alearn.microsoft.com) |  |   
[RtlIsNameInExpression](https://www.google.com/search?num=5&q=RtlIsNameInExpression+site%3Alearn.microsoft.com) |  |   
[RtlIsNameInUnUpcasedExpression](https://www.google.com/search?num=5&q=RtlIsNameInUnUpcasedExpression+site%3Alearn.microsoft.com) |  |   
[RtlIsNameLegalDOS8Dot3](https://www.google.com/search?num=5&q=RtlIsNameLegalDOS8Dot3+site%3Alearn.microsoft.com) |  |   
[RtlIsPartialPlaceholder](https://www.google.com/search?num=5&q=RtlIsPartialPlaceholder+site%3Alearn.microsoft.com) |  |   
[RtlIsPartialPlaceholderFileHandle](https://www.google.com/search?num=5&q=RtlIsPartialPlaceholderFileHandle+site%3Alearn.microsoft.com) |  |   
[RtlIsPartialPlaceholderFileInfo](https://www.google.com/search?num=5&q=RtlIsPartialPlaceholderFileInfo+site%3Alearn.microsoft.com) |  |   
[RtlIsStateSeparationEnabled](https://www.google.com/search?num=5&q=RtlIsStateSeparationEnabled+site%3Alearn.microsoft.com) |  |   
[RtlIsValidLocaleName](https://www.google.com/search?num=5&q=RtlIsValidLocaleName+site%3Alearn.microsoft.com) |  |   
[RtlIsZeroMemory](https://www.google.com/search?num=5&q=RtlIsZeroMemory+site%3Alearn.microsoft.com) |  |   
[RtlLengthCurrentClearRunBackwardEx](https://www.google.com/search?num=5&q=RtlLengthCurrentClearRunBackwardEx+site%3Alearn.microsoft.com) |  |   
[RtlLengthCurrentClearRunForwardEx](https://www.google.com/search?num=5&q=RtlLengthCurrentClearRunForwardEx+site%3Alearn.microsoft.com) |  |   
[RtlLengthSecurityDescriptor](https://www.google.com/search?num=5&q=RtlLengthSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlLengthSid](https://www.google.com/search?num=5&q=RtlLengthSid+site%3Alearn.microsoft.com) |  |   
[RtlLocalTimeToSystemTime](https://www.google.com/search?num=5&q=RtlLocalTimeToSystemTime+site%3Alearn.microsoft.com) |  |   
[RtlLookupElementGenericTable](https://www.google.com/search?num=5&q=RtlLookupElementGenericTable+site%3Alearn.microsoft.com) |  |   
[RtlLookupElementGenericTableAvl](https://www.google.com/search?num=5&q=RtlLookupElementGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlLookupElementGenericTableFullAvl](https://www.google.com/search?num=5&q=RtlLookupElementGenericTableFullAvl+site%3Alearn.microsoft.com) |  |   
[RtlLookupFirstMatchingElementGenericTableAvl](https://www.google.com/search?num=5&q=RtlLookupFirstMatchingElementGenericTableAvl+site%3Alearn.microsoft.com) |  |   
[RtlLookupFunctionEntry](https://www.google.com/search?num=5&q=RtlLookupFunctionEntry+site%3Alearn.microsoft.com) |  |   
[RtlMapGenericMask](https://www.google.com/search?num=5&q=RtlMapGenericMask+site%3Alearn.microsoft.com) |  |   
[RtlMoveMemory](https://www.google.com/search?num=5&q=RtlMoveMemory+site%3Alearn.microsoft.com) |  |   
[RtlMultiByteToUnicodeN](https://www.google.com/search?num=5&q=RtlMultiByteToUnicodeN+site%3Alearn.microsoft.com) |  |   
[RtlMultiByteToUnicodeSize](https://www.google.com/search?num=5&q=RtlMultiByteToUnicodeSize+site%3Alearn.microsoft.com) |  |   
[RtlNormalizeSecurityDescriptor](https://www.google.com/search?num=5&q=RtlNormalizeSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlNotifyFeatureUsage](https://www.google.com/search?num=5&q=RtlNotifyFeatureUsage+site%3Alearn.microsoft.com) |  |   
[RtlNtStatusToDosError](https://www.google.com/search?num=5&q=RtlNtStatusToDosError+site%3Alearn.microsoft.com) |  |   
[RtlNumberGenericTableElements](https://www.google.com/search?num=5&q=RtlNumberGenericTableElements+site%3Alearn.microsoft.com) |  |   
[RtlNumberGenericTableElementsAvl](https://www.google.com/search?num=5&q=RtlNumberGenericTableElementsAvl+site%3Alearn.microsoft.com) |  |   
[RtlNumberOfClearBits](https://www.google.com/search?num=5&q=RtlNumberOfClearBits+site%3Alearn.microsoft.com) |  |   
[RtlNumberOfClearBitsEx](https://www.google.com/search?num=5&q=RtlNumberOfClearBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlNumberOfSetBits](https://www.google.com/search?num=5&q=RtlNumberOfSetBits+site%3Alearn.microsoft.com) |  |   
[RtlNumberOfSetBitsEx](https://www.google.com/search?num=5&q=RtlNumberOfSetBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlNumberOfSetBitsUlongPtr](https://www.google.com/search?num=5&q=RtlNumberOfSetBitsUlongPtr+site%3Alearn.microsoft.com) |  |   
[RtlOemStringToUnicodeString](https://www.google.com/search?num=5&q=RtlOemStringToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlOemToUnicodeN](https://www.google.com/search?num=5&q=RtlOemToUnicodeN+site%3Alearn.microsoft.com) |  |   
[RtlOpenCrossProcessEmulatorWorkConnection](https://www.google.com/search?num=5&q=RtlOpenCrossProcessEmulatorWorkConnection+site%3Alearn.microsoft.com) |  |   
[RtlOverwriteFeatureConfigurationBuffer](https://www.google.com/search?num=5&q=RtlOverwriteFeatureConfigurationBuffer+site%3Alearn.microsoft.com) |  |   
[RtlPcToFileHeader](https://www.google.com/search?num=5&q=RtlPcToFileHeader+site%3Alearn.microsoft.com) |  |   
[RtlPrefixUnicodeString](https://www.google.com/search?num=5&q=RtlPrefixUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlpTimeFieldsToTime](https://www.google.com/search?num=5&q=RtlpTimeFieldsToTime+site%3Alearn.microsoft.com) |  |   
[RtlpTimeToTimeFields](https://www.google.com/search?num=5&q=RtlpTimeToTimeFields+site%3Alearn.microsoft.com) |  |   
[RtlpWow64CtxFromAmd64](https://www.google.com/search?num=5&q=RtlpWow64CtxFromAmd64+site%3Alearn.microsoft.com) |  |   
[RtlpWow64GetContextOnAmd64](https://www.google.com/search?num=5&q=RtlpWow64GetContextOnAmd64+site%3Alearn.microsoft.com) |  |   
[RtlpWow64SetContextOnAmd64](https://www.google.com/search?num=5&q=RtlpWow64SetContextOnAmd64+site%3Alearn.microsoft.com) |  |   
[RtlQueryAllFeatureConfigurations](https://www.google.com/search?num=5&q=RtlQueryAllFeatureConfigurations+site%3Alearn.microsoft.com) |  |   
[RtlQueryDepthSList](https://www.google.com/search?num=5&q=RtlQueryDepthSList+site%3Alearn.microsoft.com) |  |   
[RtlQueryFeatureConfiguration](https://www.google.com/search?num=5&q=RtlQueryFeatureConfiguration+site%3Alearn.microsoft.com) |  |   
[RtlQueryFeatureConfigurationChangeStamp](https://www.google.com/search?num=5&q=RtlQueryFeatureConfigurationChangeStamp+site%3Alearn.microsoft.com) |  |   
[RtlQueryFeatureUsageNotificationSubscriptions](https://www.google.com/search?num=5&q=RtlQueryFeatureUsageNotificationSubscriptions+site%3Alearn.microsoft.com) |  |   
[RtlQueryImageMitigationPolicy](https://www.google.com/search?num=5&q=RtlQueryImageMitigationPolicy+site%3Alearn.microsoft.com) |  |   
[RtlQueryPointerMapping](https://www.google.com/search?num=5&q=RtlQueryPointerMapping+site%3Alearn.microsoft.com) |  |   
[RtlQueryProcessPlaceholderCompatibilityMode](https://www.google.com/search?num=5&q=RtlQueryProcessPlaceholderCompatibilityMode+site%3Alearn.microsoft.com) |  |   
[RtlQueryPropertyStore](https://www.google.com/search?num=5&q=RtlQueryPropertyStore+site%3Alearn.microsoft.com) |  |   
[RtlQueryRegistryValues](https://www.google.com/search?num=5&q=RtlQueryRegistryValues+site%3Alearn.microsoft.com) |  |   
[RtlQueryRegistryValueWithFallback](https://www.google.com/search?num=5&q=RtlQueryRegistryValueWithFallback+site%3Alearn.microsoft.com) |  |   
[RtlQueryThreadPlaceholderCompatibilityMode](https://www.google.com/search?num=5&q=RtlQueryThreadPlaceholderCompatibilityMode+site%3Alearn.microsoft.com) |  |   
[RtlQueryTokenHostIdAsUlong64](https://www.google.com/search?num=5&q=RtlQueryTokenHostIdAsUlong64+site%3Alearn.microsoft.com) |  |   
[RtlRaiseCustomSystemEventTrigger](https://www.google.com/search?num=5&q=RtlRaiseCustomSystemEventTrigger+site%3Alearn.microsoft.com) |  |   
[RtlRaiseException](https://www.google.com/search?num=5&q=RtlRaiseException+site%3Alearn.microsoft.com) |  |   
[RtlRaiseExceptionForReturnAddressHijack](https://www.google.com/search?num=5&q=RtlRaiseExceptionForReturnAddressHijack+site%3Alearn.microsoft.com) |  |   
[RtlRaiseNoncontinuableException](https://www.google.com/search?num=5&q=RtlRaiseNoncontinuableException+site%3Alearn.microsoft.com) |  |   
[RtlRandom](https://www.google.com/search?num=5&q=RtlRandom+site%3Alearn.microsoft.com) |  |   
[RtlRandomEx](https://www.google.com/search?num=5&q=RtlRandomEx+site%3Alearn.microsoft.com) |  |   
[RtlRealPredecessor](https://www.google.com/search?num=5&q=RtlRealPredecessor+site%3Alearn.microsoft.com) |  |   
[RtlRealSuccessor](https://www.google.com/search?num=5&q=RtlRealSuccessor+site%3Alearn.microsoft.com) |  |   
[RtlRegisterFeatureConfigurationChangeNotification](https://www.google.com/search?num=5&q=RtlRegisterFeatureConfigurationChangeNotification+site%3Alearn.microsoft.com) |  |   
[RtlRemovePointerMapping](https://www.google.com/search?num=5&q=RtlRemovePointerMapping+site%3Alearn.microsoft.com) |  |   
[RtlRemovePropertyStore](https://www.google.com/search?num=5&q=RtlRemovePropertyStore+site%3Alearn.microsoft.com) |  |   
[RtlRestoreContext](https://www.google.com/search?num=5&q=RtlRestoreContext+site%3Alearn.microsoft.com) |  |   
[RtlRestoreSystemBootStatusDefaults](https://www.google.com/search?num=5&q=RtlRestoreSystemBootStatusDefaults+site%3Alearn.microsoft.com) |  |   
[RtlRestoreThreadPreferredUILanguages](https://www.google.com/search?num=5&q=RtlRestoreThreadPreferredUILanguages+site%3Alearn.microsoft.com) |  |   
[RtlRunOnceBeginInitialize](https://www.google.com/search?num=5&q=RtlRunOnceBeginInitialize+site%3Alearn.microsoft.com) |  |   
[RtlRunOnceComplete](https://www.google.com/search?num=5&q=RtlRunOnceComplete+site%3Alearn.microsoft.com) |  |   
[RtlRunOnceExecuteOnce](https://www.google.com/search?num=5&q=RtlRunOnceExecuteOnce+site%3Alearn.microsoft.com) |  |   
[RtlRunOnceInitialize](https://www.google.com/search?num=5&q=RtlRunOnceInitialize+site%3Alearn.microsoft.com) |  |   
[RtlSecondsSince1970ToTime](https://www.google.com/search?num=5&q=RtlSecondsSince1970ToTime+site%3Alearn.microsoft.com) |  |   
[RtlSecondsSince1980ToTime](https://www.google.com/search?num=5&q=RtlSecondsSince1980ToTime+site%3Alearn.microsoft.com) |  |   
[RtlSelfRelativeToAbsoluteSD](https://www.google.com/search?num=5&q=RtlSelfRelativeToAbsoluteSD+site%3Alearn.microsoft.com) |  |   
[RtlSetAllBits](https://www.google.com/search?num=5&q=RtlSetAllBits+site%3Alearn.microsoft.com) |  |   
[RtlSetAllBitsEx](https://www.google.com/search?num=5&q=RtlSetAllBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlSetBitEx](https://www.google.com/search?num=5&q=RtlSetBitEx+site%3Alearn.microsoft.com) |  |   
[RtlSetBits](https://www.google.com/search?num=5&q=RtlSetBits+site%3Alearn.microsoft.com) |  |   
[RtlSetBitsEx](https://www.google.com/search?num=5&q=RtlSetBitsEx+site%3Alearn.microsoft.com) |  |   
[RtlSetDaclSecurityDescriptor](https://www.google.com/search?num=5&q=RtlSetDaclSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlSetFeatureConfigurations](https://www.google.com/search?num=5&q=RtlSetFeatureConfigurations+site%3Alearn.microsoft.com) |  |   
[RtlSetGroupSecurityDescriptor](https://www.google.com/search?num=5&q=RtlSetGroupSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlSetImageMitigationPolicy](https://www.google.com/search?num=5&q=RtlSetImageMitigationPolicy+site%3Alearn.microsoft.com) |  |   
[RtlSetOwnerSecurityDescriptor](https://www.google.com/search?num=5&q=RtlSetOwnerSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlSetProcessPlaceholderCompatibilityMode](https://www.google.com/search?num=5&q=RtlSetProcessPlaceholderCompatibilityMode+site%3Alearn.microsoft.com) |  |   
[RtlSetProxiedProcessId](https://www.google.com/search?num=5&q=RtlSetProxiedProcessId+site%3Alearn.microsoft.com) |  |   
[RtlSetSystemBootStatus](https://www.google.com/search?num=5&q=RtlSetSystemBootStatus+site%3Alearn.microsoft.com) |  |   
[RtlSetSystemBootStatusEx](https://www.google.com/search?num=5&q=RtlSetSystemBootStatusEx+site%3Alearn.microsoft.com) |  |   
[RtlSetThreadPlaceholderCompatibilityMode](https://www.google.com/search?num=5&q=RtlSetThreadPlaceholderCompatibilityMode+site%3Alearn.microsoft.com) |  |   
[RtlSetThreadPreferredUILanguages2](https://www.google.com/search?num=5&q=RtlSetThreadPreferredUILanguages2+site%3Alearn.microsoft.com) |  |   
[RtlSplay](https://www.google.com/search?num=5&q=RtlSplay+site%3Alearn.microsoft.com) |  |   
[RtlStringFromGUID](https://www.google.com/search?num=5&q=RtlStringFromGUID+site%3Alearn.microsoft.com) |  |   
[RtlSubAuthorityCountSid](https://www.google.com/search?num=5&q=RtlSubAuthorityCountSid+site%3Alearn.microsoft.com) |  |   
[RtlSubAuthoritySid](https://www.google.com/search?num=5&q=RtlSubAuthoritySid+site%3Alearn.microsoft.com) |  |   
[RtlSubscribeForFeatureUsageNotification](https://www.google.com/search?num=5&q=RtlSubscribeForFeatureUsageNotification+site%3Alearn.microsoft.com) |  |   
[RtlSubtreePredecessor](https://www.google.com/search?num=5&q=RtlSubtreePredecessor+site%3Alearn.microsoft.com) |  |   
[RtlSubtreeSuccessor](https://www.google.com/search?num=5&q=RtlSubtreeSuccessor+site%3Alearn.microsoft.com) |  |   
[RtlTestBitEx](https://www.google.com/search?num=5&q=RtlTestBitEx+site%3Alearn.microsoft.com) |  |   
[RtlTimeFieldsToTime](https://www.google.com/search?num=5&q=RtlTimeFieldsToTime+site%3Alearn.microsoft.com) |  |   
[RtlTimeToSecondsSince1970](https://www.google.com/search?num=5&q=RtlTimeToSecondsSince1970+site%3Alearn.microsoft.com) |  |   
[RtlTimeToSecondsSince1980](https://www.google.com/search?num=5&q=RtlTimeToSecondsSince1980+site%3Alearn.microsoft.com) |  |   
[RtlTimeToTimeFields](https://www.google.com/search?num=5&q=RtlTimeToTimeFields+site%3Alearn.microsoft.com) |  |   
[RtlUdiv128](https://www.google.com/search?num=5&q=RtlUdiv128+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeStringToAnsiString](https://www.google.com/search?num=5&q=RtlUnicodeStringToAnsiString+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeStringToCountedOemString](https://www.google.com/search?num=5&q=RtlUnicodeStringToCountedOemString+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeStringToInteger](https://www.google.com/search?num=5&q=RtlUnicodeStringToInteger+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeStringToOemString](https://www.google.com/search?num=5&q=RtlUnicodeStringToOemString+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeStringToUTF8String](https://www.google.com/search?num=5&q=RtlUnicodeStringToUTF8String+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeToCustomCPN](https://www.google.com/search?num=5&q=RtlUnicodeToCustomCPN+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeToMultiByteN](https://www.google.com/search?num=5&q=RtlUnicodeToMultiByteN+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeToMultiByteSize](https://www.google.com/search?num=5&q=RtlUnicodeToMultiByteSize+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeToOemN](https://www.google.com/search?num=5&q=RtlUnicodeToOemN+site%3Alearn.microsoft.com) |  |   
[RtlUnicodeToUTF8N](https://www.google.com/search?num=5&q=RtlUnicodeToUTF8N+site%3Alearn.microsoft.com) |  |   
[RtlUniform](https://www.google.com/search?num=5&q=RtlUniform+site%3Alearn.microsoft.com) |  |   
[RtlUnregisterFeatureConfigurationChangeNotification](https://www.google.com/search?num=5&q=RtlUnregisterFeatureConfigurationChangeNotification+site%3Alearn.microsoft.com) |  |   
[RtlUnsubscribeFromFeatureUsageNotifications](https://www.google.com/search?num=5&q=RtlUnsubscribeFromFeatureUsageNotifications+site%3Alearn.microsoft.com) |  |   
[RtlUnwind](https://www.google.com/search?num=5&q=RtlUnwind+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeChar](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeChar+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeString](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeStringToCountedOemString](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeStringToCountedOemString+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeStringToOemString](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeStringToOemString+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeToCustomCPN](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeToCustomCPN+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeToMultiByteN](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeToMultiByteN+site%3Alearn.microsoft.com) |  |   
[RtlUpcaseUnicodeToOemN](https://www.google.com/search?num=5&q=RtlUpcaseUnicodeToOemN+site%3Alearn.microsoft.com) |  |   
[RtlUpperChar](https://www.google.com/search?num=5&q=RtlUpperChar+site%3Alearn.microsoft.com) |  |   
[RtlUpperString](https://www.google.com/search?num=5&q=RtlUpperString+site%3Alearn.microsoft.com) |  |   
[RtlUserFiberStart](https://www.google.com/search?num=5&q=RtlUserFiberStart+site%3Alearn.microsoft.com) |  |   
[RtlUTF8StringToUnicodeString](https://www.google.com/search?num=5&q=RtlUTF8StringToUnicodeString+site%3Alearn.microsoft.com) |  |   
[RtlUTF8ToUnicodeN](https://www.google.com/search?num=5&q=RtlUTF8ToUnicodeN+site%3Alearn.microsoft.com) |  |   
[RtlValidateCorrelationVector](https://www.google.com/search?num=5&q=RtlValidateCorrelationVector+site%3Alearn.microsoft.com) |  |   
[RtlValidRelativeSecurityDescriptor](https://www.google.com/search?num=5&q=RtlValidRelativeSecurityDescriptor+site%3Alearn.microsoft.com) |  |   
[RtlVerifyVersionInfo](https://www.google.com/search?num=5&q=RtlVerifyVersionInfo+site%3Alearn.microsoft.com) |  |   
[RtlVirtualUnwind](https://www.google.com/search?num=5&q=RtlVirtualUnwind+site%3Alearn.microsoft.com) |  |   
[RtlVirtualUnwind2](https://www.google.com/search?num=5&q=RtlVirtualUnwind2+site%3Alearn.microsoft.com) |  |   
[RtlWow64ChangeProcessState](https://www.google.com/search?num=5&q=RtlWow64ChangeProcessState+site%3Alearn.microsoft.com) |  |   
[RtlWow64ChangeThreadState](https://www.google.com/search?num=5&q=RtlWow64ChangeThreadState+site%3Alearn.microsoft.com) |  |   
[RtlWow64GetEquivalentMachineCHPE](https://www.google.com/search?num=5&q=RtlWow64GetEquivalentMachineCHPE+site%3Alearn.microsoft.com) |  |   
[RtlWow64GetSharedInfoProcess](https://www.google.com/search?num=5&q=RtlWow64GetSharedInfoProcess+site%3Alearn.microsoft.com) |  |   
[RtlWow64PopAllCrossProcessWorkFromWorkList](https://www.google.com/search?num=5&q=RtlWow64PopAllCrossProcessWorkFromWorkList+site%3Alearn.microsoft.com) |  |   
[RtlWow64PopCrossProcessWorkFromFreeList](https://www.google.com/search?num=5&q=RtlWow64PopCrossProcessWorkFromFreeList+site%3Alearn.microsoft.com) |  |   
[RtlWow64PushCrossProcessWorkOntoFreeList](https://www.google.com/search?num=5&q=RtlWow64PushCrossProcessWorkOntoFreeList+site%3Alearn.microsoft.com) |  |   
[RtlWow64PushCrossProcessWorkOntoWorkList](https://www.google.com/search?num=5&q=RtlWow64PushCrossProcessWorkOntoWorkList+site%3Alearn.microsoft.com) |  |   
[RtlWow64RequestCrossProcessHeavyFlush](https://www.google.com/search?num=5&q=RtlWow64RequestCrossProcessHeavyFlush+site%3Alearn.microsoft.com) |  |   
[RtlWow64SuspendProcess](https://www.google.com/search?num=5&q=RtlWow64SuspendProcess+site%3Alearn.microsoft.com) |  |   
[RtlWriteNonVolatileMemory](https://www.google.com/search?num=5&q=RtlWriteNonVolatileMemory+site%3Alearn.microsoft.com) |  |   
[RtlWriteRegistryValue](https://www.google.com/search?num=5&q=RtlWriteRegistryValue+site%3Alearn.microsoft.com) |  |   
[TpSetPoolThreadCpuSets](https://www.google.com/search?num=5&q=TpSetPoolThreadCpuSets+site%3Alearn.microsoft.com) |  |   
[TpWorkOnBehalfClearTicket](https://www.google.com/search?num=5&q=TpWorkOnBehalfClearTicket+site%3Alearn.microsoft.com) |  |   
[TpWorkOnBehalfSetTicket](https://www.google.com/search?num=5&q=TpWorkOnBehalfSetTicket+site%3Alearn.microsoft.com) |  |   
[vDbgPrintEx](https://www.google.com/search?num=5&q=vDbgPrintEx+site%3Alearn.microsoft.com) |  |   
[vDbgPrintExWithPrefix](https://www.google.com/search?num=5&q=vDbgPrintExWithPrefix+site%3Alearn.microsoft.com) |  |   
[VerSetConditionMask](https://www.google.com/search?num=5&q=VerSetConditionMask+site%3Alearn.microsoft.com) |  |   
[ZwAcquireCrossVmMutant](https://www.google.com/search?num=5&q=ZwAcquireCrossVmMutant+site%3Alearn.microsoft.com) |  |   
[ZwAllocateLocallyUniqueId](https://www.google.com/search?num=5&q=ZwAllocateLocallyUniqueId+site%3Alearn.microsoft.com) |  |   
[ZwAllocateUserPhysicalPagesEx](https://www.google.com/search?num=5&q=ZwAllocateUserPhysicalPagesEx+site%3Alearn.microsoft.com) |  |   
[ZwAllocateVirtualMemory](https://www.google.com/search?num=5&q=ZwAllocateVirtualMemory+site%3Alearn.microsoft.com) |  |   
[ZwAllocateVirtualMemoryEx](https://www.google.com/search?num=5&q=ZwAllocateVirtualMemoryEx+site%3Alearn.microsoft.com) |  |   
[ZwCallEnclave](https://www.google.com/search?num=5&q=ZwCallEnclave+site%3Alearn.microsoft.com) |  |   
[ZwChangeProcessState](https://www.google.com/search?num=5&q=ZwChangeProcessState+site%3Alearn.microsoft.com) |  |   
[ZwChangeThreadState](https://www.google.com/search?num=5&q=ZwChangeThreadState+site%3Alearn.microsoft.com) |  |   
[ZwClose](https://www.google.com/search?num=5&q=ZwClose+site%3Alearn.microsoft.com) |  |   
[ZwCommitComplete](https://www.google.com/search?num=5&q=ZwCommitComplete+site%3Alearn.microsoft.com) |  |   
[ZwCommitEnlistment](https://www.google.com/search?num=5&q=ZwCommitEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwCommitTransaction](https://www.google.com/search?num=5&q=ZwCommitTransaction+site%3Alearn.microsoft.com) |  |   
[ZwContinueEx](https://www.google.com/search?num=5&q=ZwContinueEx+site%3Alearn.microsoft.com) |  |   
[ZwCopyFileChunk](https://www.google.com/search?num=5&q=ZwCopyFileChunk+site%3Alearn.microsoft.com) |  |   
[ZwCreateCpuPartition](https://www.google.com/search?num=5&q=ZwCreateCpuPartition+site%3Alearn.microsoft.com) |  |   
[ZwCreateCrossVmEvent](https://www.google.com/search?num=5&q=ZwCreateCrossVmEvent+site%3Alearn.microsoft.com) |  |   
[ZwCreateCrossVmMutant](https://www.google.com/search?num=5&q=ZwCreateCrossVmMutant+site%3Alearn.microsoft.com) |  |   
[ZwCreateDirectoryObject](https://www.google.com/search?num=5&q=ZwCreateDirectoryObject+site%3Alearn.microsoft.com) |  |   
[ZwCreateEnlistment](https://www.google.com/search?num=5&q=ZwCreateEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwCreateEvent](https://www.google.com/search?num=5&q=ZwCreateEvent+site%3Alearn.microsoft.com) |  |   
[ZwCreateFile](https://www.google.com/search?num=5&q=ZwCreateFile+site%3Alearn.microsoft.com) |  |   
[ZwCreateIoRing](https://www.google.com/search?num=5&q=ZwCreateIoRing+site%3Alearn.microsoft.com) |  |   
[ZwCreateKey](https://www.google.com/search?num=5&q=ZwCreateKey+site%3Alearn.microsoft.com) |  |   
[ZwCreateKeyTransacted](https://www.google.com/search?num=5&q=ZwCreateKeyTransacted+site%3Alearn.microsoft.com) |  |   
[ZwCreateProcessStateChange](https://www.google.com/search?num=5&q=ZwCreateProcessStateChange+site%3Alearn.microsoft.com) |  |   
[ZwCreateResourceManager](https://www.google.com/search?num=5&q=ZwCreateResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwCreateSection](https://www.google.com/search?num=5&q=ZwCreateSection+site%3Alearn.microsoft.com) |  |   
[ZwCreateSectionEx](https://www.google.com/search?num=5&q=ZwCreateSectionEx+site%3Alearn.microsoft.com) |  |   
[ZwCreateThreadStateChange](https://www.google.com/search?num=5&q=ZwCreateThreadStateChange+site%3Alearn.microsoft.com) |  |   
[ZwCreateTransaction](https://www.google.com/search?num=5&q=ZwCreateTransaction+site%3Alearn.microsoft.com) |  |   
[ZwCreateTransactionManager](https://www.google.com/search?num=5&q=ZwCreateTransactionManager+site%3Alearn.microsoft.com) |  |   
[ZwDeleteFile](https://www.google.com/search?num=5&q=ZwDeleteFile+site%3Alearn.microsoft.com) |  |   
[ZwDeleteKey](https://www.google.com/search?num=5&q=ZwDeleteKey+site%3Alearn.microsoft.com) |  |   
[ZwDeleteValueKey](https://www.google.com/search?num=5&q=ZwDeleteValueKey+site%3Alearn.microsoft.com) |  |   
[ZwDeviceIoControlFile](https://www.google.com/search?num=5&q=ZwDeviceIoControlFile+site%3Alearn.microsoft.com) |  |   
[ZwDirectGraphicsCall](https://www.google.com/search?num=5&q=ZwDirectGraphicsCall+site%3Alearn.microsoft.com) |  |   
[ZwDuplicateObject](https://www.google.com/search?num=5&q=ZwDuplicateObject+site%3Alearn.microsoft.com) |  |   
[ZwDuplicateToken](https://www.google.com/search?num=5&q=ZwDuplicateToken+site%3Alearn.microsoft.com) |  |   
[ZwEnumerateKey](https://www.google.com/search?num=5&q=ZwEnumerateKey+site%3Alearn.microsoft.com) |  |   
[ZwEnumerateTransactionObject](https://www.google.com/search?num=5&q=ZwEnumerateTransactionObject+site%3Alearn.microsoft.com) |  |   
[ZwEnumerateValueKey](https://www.google.com/search?num=5&q=ZwEnumerateValueKey+site%3Alearn.microsoft.com) |  |   
[ZwFlushBuffersFileEx](https://www.google.com/search?num=5&q=ZwFlushBuffersFileEx+site%3Alearn.microsoft.com) |  |   
[ZwFlushKey](https://www.google.com/search?num=5&q=ZwFlushKey+site%3Alearn.microsoft.com) |  |   
[ZwFlushVirtualMemory](https://www.google.com/search?num=5&q=ZwFlushVirtualMemory+site%3Alearn.microsoft.com) |  |   
[ZwFreeVirtualMemory](https://www.google.com/search?num=5&q=ZwFreeVirtualMemory+site%3Alearn.microsoft.com) |  |   
[ZwFsControlFile](https://www.google.com/search?num=5&q=ZwFsControlFile+site%3Alearn.microsoft.com) |  |   
[ZwGetNotificationResourceManager](https://www.google.com/search?num=5&q=ZwGetNotificationResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwLoadDriver](https://www.google.com/search?num=5&q=ZwLoadDriver+site%3Alearn.microsoft.com) |  |   
[ZwLoadKey3](https://www.google.com/search?num=5&q=ZwLoadKey3+site%3Alearn.microsoft.com) |  |   
[ZwLockFile](https://www.google.com/search?num=5&q=ZwLockFile+site%3Alearn.microsoft.com) |  |   
[ZwMakeTemporaryObject](https://www.google.com/search?num=5&q=ZwMakeTemporaryObject+site%3Alearn.microsoft.com) |  |   
[ZwManageHotPatch](https://www.google.com/search?num=5&q=ZwManageHotPatch+site%3Alearn.microsoft.com) |  |   
[ZwMapViewOfSection](https://www.google.com/search?num=5&q=ZwMapViewOfSection+site%3Alearn.microsoft.com) |  |   
[ZwMapViewOfSectionEx](https://www.google.com/search?num=5&q=ZwMapViewOfSectionEx+site%3Alearn.microsoft.com) |  |   
[ZwNotifyChangeDirectoryFileEx](https://www.google.com/search?num=5&q=ZwNotifyChangeDirectoryFileEx+site%3Alearn.microsoft.com) |  |   
[ZwNotifyChangeKey](https://www.google.com/search?num=5&q=ZwNotifyChangeKey+site%3Alearn.microsoft.com) |  |   
[ZwOpenCpuPartition](https://www.google.com/search?num=5&q=ZwOpenCpuPartition+site%3Alearn.microsoft.com) |  |   
[ZwOpenDirectoryObject](https://www.google.com/search?num=5&q=ZwOpenDirectoryObject+site%3Alearn.microsoft.com) |  |   
[ZwOpenEnlistment](https://www.google.com/search?num=5&q=ZwOpenEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwOpenEvent](https://www.google.com/search?num=5&q=ZwOpenEvent+site%3Alearn.microsoft.com) |  |   
[ZwOpenFile](https://www.google.com/search?num=5&q=ZwOpenFile+site%3Alearn.microsoft.com) |  |   
[ZwOpenKey](https://www.google.com/search?num=5&q=ZwOpenKey+site%3Alearn.microsoft.com) |  |   
[ZwOpenKeyEx](https://www.google.com/search?num=5&q=ZwOpenKeyEx+site%3Alearn.microsoft.com) |  |   
[ZwOpenKeyTransacted](https://www.google.com/search?num=5&q=ZwOpenKeyTransacted+site%3Alearn.microsoft.com) |  |   
[ZwOpenKeyTransactedEx](https://www.google.com/search?num=5&q=ZwOpenKeyTransactedEx+site%3Alearn.microsoft.com) |  |   
[ZwOpenProcess](https://www.google.com/search?num=5&q=ZwOpenProcess+site%3Alearn.microsoft.com) |  |   
[ZwOpenProcessTokenEx](https://www.google.com/search?num=5&q=ZwOpenProcessTokenEx+site%3Alearn.microsoft.com) |  |   
[ZwOpenResourceManager](https://www.google.com/search?num=5&q=ZwOpenResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwOpenSection](https://www.google.com/search?num=5&q=ZwOpenSection+site%3Alearn.microsoft.com) |  |   
[ZwOpenSymbolicLinkObject](https://www.google.com/search?num=5&q=ZwOpenSymbolicLinkObject+site%3Alearn.microsoft.com) |  |   
[ZwOpenThreadTokenEx](https://www.google.com/search?num=5&q=ZwOpenThreadTokenEx+site%3Alearn.microsoft.com) |  |   
[ZwOpenTransaction](https://www.google.com/search?num=5&q=ZwOpenTransaction+site%3Alearn.microsoft.com) |  |   
[ZwOpenTransactionManager](https://www.google.com/search?num=5&q=ZwOpenTransactionManager+site%3Alearn.microsoft.com) |  |   
[ZwPowerInformation](https://www.google.com/search?num=5&q=ZwPowerInformation+site%3Alearn.microsoft.com) |  |   
[ZwPrepareComplete](https://www.google.com/search?num=5&q=ZwPrepareComplete+site%3Alearn.microsoft.com) |  |   
[ZwPrepareEnlistment](https://www.google.com/search?num=5&q=ZwPrepareEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwPrePrepareComplete](https://www.google.com/search?num=5&q=ZwPrePrepareComplete+site%3Alearn.microsoft.com) |  |   
[ZwPrePrepareEnlistment](https://www.google.com/search?num=5&q=ZwPrePrepareEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwPssCaptureVaSpaceBulk](https://www.google.com/search?num=5&q=ZwPssCaptureVaSpaceBulk+site%3Alearn.microsoft.com) |  |   
[ZwQueryDirectoryFile](https://www.google.com/search?num=5&q=ZwQueryDirectoryFile+site%3Alearn.microsoft.com) |  |   
[ZwQueryDirectoryFileEx](https://www.google.com/search?num=5&q=ZwQueryDirectoryFileEx+site%3Alearn.microsoft.com) |  |   
[ZwQueryEaFile](https://www.google.com/search?num=5&q=ZwQueryEaFile+site%3Alearn.microsoft.com) |  |   
[ZwQueryFullAttributesFile](https://www.google.com/search?num=5&q=ZwQueryFullAttributesFile+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationCpuPartition](https://www.google.com/search?num=5&q=ZwQueryInformationCpuPartition+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationEnlistment](https://www.google.com/search?num=5&q=ZwQueryInformationEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationFile](https://www.google.com/search?num=5&q=ZwQueryInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationProcess](https://www.google.com/search?num=5&q=ZwQueryInformationProcess+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationResourceManager](https://www.google.com/search?num=5&q=ZwQueryInformationResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationToken](https://www.google.com/search?num=5&q=ZwQueryInformationToken+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationTransaction](https://www.google.com/search?num=5&q=ZwQueryInformationTransaction+site%3Alearn.microsoft.com) |  |   
[ZwQueryInformationTransactionManager](https://www.google.com/search?num=5&q=ZwQueryInformationTransactionManager+site%3Alearn.microsoft.com) |  |   
[ZwQueryIoRingCapabilities](https://www.google.com/search?num=5&q=ZwQueryIoRingCapabilities+site%3Alearn.microsoft.com) |  |   
[ZwQueryKey](https://www.google.com/search?num=5&q=ZwQueryKey+site%3Alearn.microsoft.com) |  |   
[ZwQueryObject](https://www.google.com/search?num=5&q=ZwQueryObject+site%3Alearn.microsoft.com) |  |   
[ZwQueryQuotaInformationFile](https://www.google.com/search?num=5&q=ZwQueryQuotaInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwQuerySecurityObject](https://www.google.com/search?num=5&q=ZwQuerySecurityObject+site%3Alearn.microsoft.com) |  |   
[ZwQuerySymbolicLinkObject](https://www.google.com/search?num=5&q=ZwQuerySymbolicLinkObject+site%3Alearn.microsoft.com) |  |   
[ZwQuerySystemInformation](https://www.google.com/search?num=5&q=ZwQuerySystemInformation+site%3Alearn.microsoft.com) |  |   
[ZwQuerySystemInformationEx](https://www.google.com/search?num=5&q=ZwQuerySystemInformationEx+site%3Alearn.microsoft.com) |  |   
[ZwQueryValueKey](https://www.google.com/search?num=5&q=ZwQueryValueKey+site%3Alearn.microsoft.com) |  |   
[ZwQueryVirtualMemory](https://www.google.com/search?num=5&q=ZwQueryVirtualMemory+site%3Alearn.microsoft.com) |  |   
[ZwQueryVolumeInformationFile](https://www.google.com/search?num=5&q=ZwQueryVolumeInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwQueueApcThreadEx2](https://www.google.com/search?num=5&q=ZwQueueApcThreadEx2+site%3Alearn.microsoft.com) |  |   
[ZwReadFile](https://www.google.com/search?num=5&q=ZwReadFile+site%3Alearn.microsoft.com) |  |   
[ZwReadOnlyEnlistment](https://www.google.com/search?num=5&q=ZwReadOnlyEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwReadVirtualMemoryEx](https://www.google.com/search?num=5&q=ZwReadVirtualMemoryEx+site%3Alearn.microsoft.com) |  |   
[ZwRecoverEnlistment](https://www.google.com/search?num=5&q=ZwRecoverEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwRecoverResourceManager](https://www.google.com/search?num=5&q=ZwRecoverResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwRecoverTransactionManager](https://www.google.com/search?num=5&q=ZwRecoverTransactionManager+site%3Alearn.microsoft.com) |  |   
[ZwRollbackComplete](https://www.google.com/search?num=5&q=ZwRollbackComplete+site%3Alearn.microsoft.com) |  |   
[ZwRollbackEnlistment](https://www.google.com/search?num=5&q=ZwRollbackEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwRollbackTransaction](https://www.google.com/search?num=5&q=ZwRollbackTransaction+site%3Alearn.microsoft.com) |  |   
[ZwRollforwardTransactionManager](https://www.google.com/search?num=5&q=ZwRollforwardTransactionManager+site%3Alearn.microsoft.com) |  |   
[ZwSetEaFile](https://www.google.com/search?num=5&q=ZwSetEaFile+site%3Alearn.microsoft.com) |  |   
[ZwSetEvent](https://www.google.com/search?num=5&q=ZwSetEvent+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationCpuPartition](https://www.google.com/search?num=5&q=ZwSetInformationCpuPartition+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationEnlistment](https://www.google.com/search?num=5&q=ZwSetInformationEnlistment+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationFile](https://www.google.com/search?num=5&q=ZwSetInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationIoRing](https://www.google.com/search?num=5&q=ZwSetInformationIoRing+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationResourceManager](https://www.google.com/search?num=5&q=ZwSetInformationResourceManager+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationThread](https://www.google.com/search?num=5&q=ZwSetInformationThread+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationToken](https://www.google.com/search?num=5&q=ZwSetInformationToken+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationTransaction](https://www.google.com/search?num=5&q=ZwSetInformationTransaction+site%3Alearn.microsoft.com) |  |   
[ZwSetInformationVirtualMemory](https://www.google.com/search?num=5&q=ZwSetInformationVirtualMemory+site%3Alearn.microsoft.com) |  |   
[ZwSetQuotaInformationFile](https://www.google.com/search?num=5&q=ZwSetQuotaInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwSetSecurityObject](https://www.google.com/search?num=5&q=ZwSetSecurityObject+site%3Alearn.microsoft.com) |  |   
[ZwSetValueKey](https://www.google.com/search?num=5&q=ZwSetValueKey+site%3Alearn.microsoft.com) |  |   
[ZwSetVolumeInformationFile](https://www.google.com/search?num=5&q=ZwSetVolumeInformationFile+site%3Alearn.microsoft.com) |  |   
[ZwSinglePhaseReject](https://www.google.com/search?num=5&q=ZwSinglePhaseReject+site%3Alearn.microsoft.com) |  |   
[ZwSubmitIoRing](https://www.google.com/search?num=5&q=ZwSubmitIoRing+site%3Alearn.microsoft.com) |  |   
[ZwSuspendProcess](https://www.google.com/search?num=5&q=ZwSuspendProcess+site%3Alearn.microsoft.com) |  |   
[ZwTerminateEnclave](https://www.google.com/search?num=5&q=ZwTerminateEnclave+site%3Alearn.microsoft.com) |  |   
[ZwTerminateProcess](https://www.google.com/search?num=5&q=ZwTerminateProcess+site%3Alearn.microsoft.com) |  |   
[ZwUnloadDriver](https://www.google.com/search?num=5&q=ZwUnloadDriver+site%3Alearn.microsoft.com) |  |   
[ZwUnlockFile](https://www.google.com/search?num=5&q=ZwUnlockFile+site%3Alearn.microsoft.com) |  |   
[ZwUnmapViewOfSection](https://www.google.com/search?num=5&q=ZwUnmapViewOfSection+site%3Alearn.microsoft.com) |  |   
[ZwUnmapViewOfSectionEx](https://www.google.com/search?num=5&q=ZwUnmapViewOfSectionEx+site%3Alearn.microsoft.com) |  |   
[ZwWaitForSingleObject](https://www.google.com/search?num=5&q=ZwWaitForSingleObject+site%3Alearn.microsoft.com) |  |   
[ZwWriteFile](https://www.google.com/search?num=5&q=ZwWriteFile+site%3Alearn.microsoft.com) |  |   
### Enumerations  
Native Enum | Header | Managed Enum  
--- | --- | ---  
[DPFLTR_TYPE](https://www.google.com/search?num=5&q=DPFLTR_TYPE+site%3Alearn.microsoft.com) | dpfilter.h | [Vanara.PInvoke.NtDll.DPFLTR_TYPE](https://github.com/dahall/Vanara/search?l=C%23&q=DPFLTR_TYPE)  
[KEY_INFORMATION_CLASS](https://www.google.com/search?num=5&q=KEY_INFORMATION_CLASS+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.KEY_INFORMATION_CLASS](https://github.com/dahall/Vanara/search?l=C%23&q=KEY_INFORMATION_CLASS)  
[NOTIFICATION_MASK](https://www.google.com/search?num=5&q=NOTIFICATION_MASK+site%3Alearn.microsoft.com) | ktmtypes.h | [Vanara.PInvoke.NtDll.NOTIFICATION_MASK](https://github.com/dahall/Vanara/search?l=C%23&q=NOTIFICATION_MASK)  
[NtFileCreateOptions](https://www.google.com/search?num=5&q=NtFileCreateOptions+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtFileCreateOptions](https://github.com/dahall/Vanara/search?l=C%23&q=NtFileCreateOptions)  
[NtFileMode](https://www.google.com/search?num=5&q=NtFileMode+site%3Alearn.microsoft.com) | ntifs.h | [Vanara.PInvoke.NtDll.NtFileMode](https://github.com/dahall/Vanara/search?l=C%23&q=NtFileMode)  
[PROCESS_CREATE_FLAGS](https://www.google.com/search?num=5&q=PROCESS_CREATE_FLAGS+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.PROCESS_CREATE_FLAGS](https://github.com/dahall/Vanara/search?l=C%23&q=PROCESS_CREATE_FLAGS)  
[PROCESSINFOCLASS](https://www.google.com/search?num=5&q=PROCESSINFOCLASS+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.PROCESSINFOCLASS](https://github.com/dahall/Vanara/search?l=C%23&q=PROCESSINFOCLASS)  
[SUBSYSTEM_INFORMATION_TYPE](https://www.google.com/search?num=5&q=SUBSYSTEM_INFORMATION_TYPE+site%3Alearn.microsoft.com) | ntddk.h | [Vanara.PInvoke.NtDll.SUBSYSTEM_INFORMATION_TYPE](https://github.com/dahall/Vanara/search?l=C%23&q=SUBSYSTEM_INFORMATION_TYPE)  
[SYSTEM_INFORMATION_CLASS](https://www.google.com/search?num=5&q=SYSTEM_INFORMATION_CLASS+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_INFORMATION_CLASS](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_INFORMATION_CLASS)  
### Structures  
Native Structure | Header | Managed Structure  
--- | --- | ---  
[CLIENT_ID](https://www.google.com/search?num=5&q=CLIENT_ID+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.CLIENT_ID](https://github.com/dahall/Vanara/search?l=C%23&q=CLIENT_ID)  
[IO_STATUS_BLOCK](https://www.google.com/search?num=5&q=IO_STATUS_BLOCK+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.IO_STATUS_BLOCK](https://github.com/dahall/Vanara/search?l=C%23&q=IO_STATUS_BLOCK)  
[KERNEL_USER_TIMES](https://www.google.com/search?num=5&q=KERNEL_USER_TIMES+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.KERNEL_USER_TIMES](https://github.com/dahall/Vanara/search?l=C%23&q=KERNEL_USER_TIMES)  
[KEY_BASIC_INFORMATION](https://www.google.com/search?num=5&q=KEY_BASIC_INFORMATION+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.KEY_BASIC_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=KEY_BASIC_INFORMATION)  
[KEY_FULL_INFORMATION](https://www.google.com/search?num=5&q=KEY_FULL_INFORMATION+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.KEY_FULL_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=KEY_FULL_INFORMATION)  
[KEY_NAME_INFORMATION](https://www.google.com/search?num=5&q=KEY_NAME_INFORMATION+site%3Alearn.microsoft.com) | ntddk.h | [Vanara.PInvoke.NtDll.KEY_NAME_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=KEY_NAME_INFORMATION)  
[KEY_NODE_INFORMATION](https://www.google.com/search?num=5&q=KEY_NODE_INFORMATION+site%3Alearn.microsoft.com) | wdm.h | [Vanara.PInvoke.NtDll.KEY_NODE_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=KEY_NODE_INFORMATION)  
[LDR_DLL_NOTIFICATION_DATA](https://www.google.com/search?num=5&q=LDR_DLL_NOTIFICATION_DATA+site%3Alearn.microsoft.com) | ntldr.h | [Vanara.PInvoke.NtDll.LDR_DLL_NOTIFICATION_DATA](https://github.com/dahall/Vanara/search?l=C%23&q=LDR_DLL_NOTIFICATION_DATA)  
[OBJECT_ATTRIBUTES](https://www.google.com/search?num=5&q=OBJECT_ATTRIBUTES+site%3Alearn.microsoft.com) | wudfwdm.h | [Vanara.PInvoke.NtDll.OBJECT_ATTRIBUTES](https://github.com/dahall/Vanara/search?l=C%23&q=OBJECT_ATTRIBUTES)  
[PEB](https://www.google.com/search?num=5&q=PEB+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.PEB](https://github.com/dahall/Vanara/search?l=C%23&q=PEB)  
[PEB_WOW64](https://www.google.com/search?num=5&q=PEB_WOW64+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.PEB_WOW64](https://github.com/dahall/Vanara/search?l=C%23&q=PEB_WOW64)  
[PROCESS_BASIC_INFORMATION](https://www.google.com/search?num=5&q=PROCESS_BASIC_INFORMATION+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.PROCESS_BASIC_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=PROCESS_BASIC_INFORMATION)  
[PROCESS_BASIC_INFORMATION_WOW64](https://www.google.com/search?num=5&q=PROCESS_BASIC_INFORMATION_WOW64+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.PROCESS_BASIC_INFORMATION_WOW64](https://github.com/dahall/Vanara/search?l=C%23&q=PROCESS_BASIC_INFORMATION_WOW64)  
[RTL_HEAP_PARAMETERS](https://www.google.com/search?num=5&q=RTL_HEAP_PARAMETERS+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.RTL_HEAP_PARAMETERS](https://github.com/dahall/Vanara/search?l=C%23&q=RTL_HEAP_PARAMETERS)  
[RTL_USER_PROCESS_PARAMETERS](https://www.google.com/search?num=5&q=RTL_USER_PROCESS_PARAMETERS+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.RTL_USER_PROCESS_PARAMETERS](https://github.com/dahall/Vanara/search?l=C%23&q=RTL_USER_PROCESS_PARAMETERS)  
[RTL_USER_PROCESS_PARAMETERS_WOW64](https://www.google.com/search?num=5&q=RTL_USER_PROCESS_PARAMETERS_WOW64+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.RTL_USER_PROCESS_PARAMETERS_WOW64](https://github.com/dahall/Vanara/search?l=C%23&q=RTL_USER_PROCESS_PARAMETERS_WOW64)  
[SYSTEM_BASIC_INFORMATION](https://www.google.com/search?num=5&q=SYSTEM_BASIC_INFORMATION+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_BASIC_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_BASIC_INFORMATION)  
[SYSTEM_PROCESS_INFORMATION](https://www.google.com/search?num=5&q=SYSTEM_PROCESS_INFORMATION+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_PROCESS_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_PROCESS_INFORMATION)  
[SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION](https://www.google.com/search?num=5&q=SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION)  
[SYSTEM_REGISTRY_QUOTA_INFORMATION](https://www.google.com/search?num=5&q=SYSTEM_REGISTRY_QUOTA_INFORMATION+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_REGISTRY_QUOTA_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_REGISTRY_QUOTA_INFORMATION)  
[SYSTEM_THREAD_INFORMATION](https://www.google.com/search?num=5&q=SYSTEM_THREAD_INFORMATION+site%3Alearn.microsoft.com) | winternl.h | [Vanara.PInvoke.NtDll.SYSTEM_THREAD_INFORMATION](https://github.com/dahall/Vanara/search?l=C%23&q=SYSTEM_THREAD_INFORMATION)  
[UNICODE_STRING](https://www.google.com/search?num=5&q=UNICODE_STRING+site%3Alearn.microsoft.com) | wudfwdm.h | [Vanara.PInvoke.NtDll.UNICODE_STRING](https://github.com/dahall/Vanara/search?l=C%23&q=UNICODE_STRING)  
[UNICODE_STRING_WOW64](https://www.google.com/search?num=5&q=UNICODE_STRING_WOW64+site%3Alearn.microsoft.com) | wudfwdm.h | [Vanara.PInvoke.NtDll.UNICODE_STRING_WOW64](https://github.com/dahall/Vanara/search?l=C%23&q=UNICODE_STRING_WOW64)  
### Classes  
Native Class | Header | Managed Class  
--- | --- | ---  
[NtQueryResult](https://www.google.com/search?num=5&q=NtQueryResult+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.NtQueryResult](https://github.com/dahall/Vanara/search?l=C%23&q=NtQueryResult)  
[SafeEnlistmentHandle](https://www.google.com/search?num=5&q=SafeEnlistmentHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeEnlistmentHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeEnlistmentHandle)  
[SafeNtHandle](https://www.google.com/search?num=5&q=SafeNtHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeNtHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeNtHandle)  
[SafeResourceManagerHandle](https://www.google.com/search?num=5&q=SafeResourceManagerHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeResourceManagerHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeResourceManagerHandle)  
[SafeSectionHandle](https://www.google.com/search?num=5&q=SafeSectionHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeSectionHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeSectionHandle)  
[SafeTransactionHandle](https://www.google.com/search?num=5&q=SafeTransactionHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeTransactionHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeTransactionHandle)  
[SafeTransactionManagerHandle](https://www.google.com/search?num=5&q=SafeTransactionManagerHandle+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeTransactionManagerHandle](https://github.com/dahall/Vanara/search?l=C%23&q=SafeTransactionManagerHandle)  
[SafeUNICODE_STRING](https://www.google.com/search?num=5&q=SafeUNICODE_STRING+site%3Alearn.microsoft.com) |  | [Vanara.PInvoke.NtDll.SafeUNICODE_STRING](https://github.com/dahall/Vanara/search?l=C%23&q=SafeUNICODE_STRING)