Vanara/PInvoke/NTDll/CorrelationReport.md

60 KiB

Correlation report for ntdll.dll

Methods (4% complete, 23 of 484 functions)

Native Method Header Managed Method
_vscprintf
DbgBreakPoint wdm.h Vanara.PInvoke.NtDll.DbgBreakPoint
DbgPrint
DbgPrintEx
DbgPrompt ntddk.h Vanara.PInvoke.NtDll.DbgPrompt
EtwCheckCoverage
LdrCallEnclave
LdrControlFlowGuardEnforced
LdrCreateEnclave
LdrDeleteEnclave
LdrFastFailInLoaderCallout ntldr.h Vanara.PInvoke.NtDll.LdrFastFailInLoaderCallout
LdrInitializeEnclave
LdrLoadEnclaveModule
LdrRegisterDllNotification Vanara.PInvoke.NtDll.LdrRegisterDllNotification
LdrUnregisterDllNotification ntldr.h Vanara.PInvoke.NtDll.LdrUnregisterDllNotification
NtAllocateVirtualMemory ntifs.h Vanara.PInvoke.NtDll.NtAllocateVirtualMemory
NtAllocateVirtualMemoryEx
NtCallEnclave
NtClose winternl.h Vanara.PInvoke.NtDll.NtClose
NtCommitComplete wdm.h Vanara.PInvoke.NtDll.NtCommitComplete
NtCommitEnlistment wdm.h Vanara.PInvoke.NtDll.NtCommitEnlistment
NtCommitTransaction wdm.h Vanara.PInvoke.NtDll.NtCommitTransaction
NtCompareTokens Vanara.PInvoke.NtDll.NtCompareTokens
NtCreateEnlistment wdm.h Vanara.PInvoke.NtDll.NtCreateEnlistment
NtCreateFile
NtCreateFileA ntifs.h Vanara.PInvoke.NtDll.NtCreateFile
NtCreateFileW ntifs.h Vanara.PInvoke.NtDll.NtCreateFile
NtCreateResourceManager wdm.h Vanara.PInvoke.NtDll.NtCreateResourceManager
NtCreateSection
NtCreateSectionA ntifs.h Vanara.PInvoke.NtDll.NtCreateSection
NtCreateSectionW ntifs.h Vanara.PInvoke.NtDll.NtCreateSection
NtCreateTransaction
NtCreateTransactionA wdm.h Vanara.PInvoke.NtDll.NtCreateTransaction
NtCreateTransactionManager
NtCreateTransactionManagerA wdm.h Vanara.PInvoke.NtDll.NtCreateTransactionManager
NtCreateTransactionManagerW wdm.h Vanara.PInvoke.NtDll.NtCreateTransactionManager
NtCreateTransactionW wdm.h Vanara.PInvoke.NtDll.NtCreateTransaction
NtDeviceIoControlFile
NtDuplicateToken
NtEnumerateTransactionObject
NtFlushBuffersFileEx
NtFreeVirtualMemory
NtFsControlFile
NtGetCurrentProcessorNumber
NtGetNotificationResourceManager
NtLockFile
NtMapViewOfSectionEx
NtNotifyChangeDirectoryFileEx
NtNotifyChangeMultipleKeys
NtOpenDirectoryObject
NtOpenEnlistment
NtOpenFile
NtOpenProcess
NtOpenProcessTokenEx
NtOpenResourceManager
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadTokenEx
NtOpenTransaction
NtOpenTransactionManager
NtPowerInformation
NtPrepareComplete
NtPrepareEnlistment
NtPrePrepareComplete
NtPrePrepareEnlistment
NtProtectVirtualMemory
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryDirectoryFileEx
NtQueryInformationEnlistment
NtQueryInformationFile
NtQueryInformationProcess
NtQueryInformationResourceManager
NtQueryInformationThread
NtQueryInformationToken
NtQueryInformationTransaction
NtQueryInformationTransactionManager
NtQueryKey wdm.h Vanara.PInvoke.NtDll.NtQueryKey
NtQueryMultipleValueKey
NtQueryObject
NtQueryPerformanceCounter
NtQueryQuotaInformationFile
NtQuerySecurityObject
NtQuerySymbolicLinkObject
NtQuerySystemInformation winternl.h Vanara.PInvoke.NtDll.NtQuerySystemInformation
NtQuerySystemTime
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtReadFile
NtReadOnlyEnlistment
NtRecoverEnlistment
NtRecoverResourceManager
NtRecoverTransactionManager
NtRenameKey
NtRenameTransactionManager
NtRollbackComplete
NtRollbackEnlistment
NtRollbackTransaction
NtRollforwardTransactionManager
NtSetInformationEnlistment
NtSetInformationFile
NtSetInformationKey
NtSetInformationResourceManager
NtSetInformationThread
NtSetInformationToken
NtSetInformationTransaction
NtSetInformationTransactionManager
NtSetQuotaInformationFile
NtSetSecurityObject
NtSinglePhaseReject
NtTerminateEnclave
NtUnlockFile
NtUnmapViewOfSection
NtWaitForSingleObject
NtWriteFile
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAce
RtlAddFunctionTable
RtlAddGrowableFunctionTable
RtlAllocateAndInitializeSid
RtlAllocateHeap
RtlAnsiStringToUnicodeString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlAreBitsClear
RtlAreBitsSet
RtlCallEnclaveReturn
RtlCapabilityCheckForSingleSessionSku
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckRegistryKey
RtlCheckSystemBootStatusIntegrity
RtlClearBits
RtlCmEncodeMemIoResource
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConvertSidToUnicodeString
RtlCopyLuid
RtlCopyMemoryNonTemporal
RtlCopySid
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateHeap
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateSystemVolumeInformationFolder
RtlCreateUnicodeString
RtlCustomCPToUnicodeN
RtlDecompressBuffer
RtlDecompressBufferEx
RtlDecompressFragment
RtlDelete
RtlDeleteAce
RtlDeleteElementGenericTable
RtlDeleteElementGenericTableAvl
RtlDeleteFunctionTable
RtlDeleteGrowableFunctionTable
RtlDeleteNoSplay
RtlDeleteRegistryValue
RtlDestroyHeap
RtlDosLongPathNameToNtPathName_U_WithStatus
RtlDosLongPathNameToRelativeNtPathName_U_WithStatus
RtlDowncaseUnicodeString
RtlDrainNonVolatileFlush
RtlEnclaveCallDispatch
RtlEnclaveCallDispatchReturn
RtlEnumerateGenericTable
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableLikeADirectory
RtlEnumerateGenericTableWithoutSplaying
RtlEnumerateGenericTableWithoutSplayingAvl
RtlEqualPrefixSid
RtlEqualSid
RtlEqualUnicodeString
RtlEthernetAddressToString
RtlEthernetStringToAddress
RtlExtendCorrelationVector
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindClearRuns
RtlFindLastBackwardRunClear
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMostSignificantBit
RtlFindNextForwardRunClear
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstEntrySList
RtlFlushNonVolatileMemory
RtlFlushNonVolatileMemoryRanges
RtlFreeAnsiString
RtlFreeHeap
RtlFreeNonVolatileToken
RtlFreeOemString
RtlFreeUnicodeString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCompressionWorkSpaceSize
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetElementGenericTableAvl
RtlGetEnabledExtendedFeatures
RtlGetFunctionTableListHead
RtlGetGroupSecurityDescriptor
RtlGetNonVolatileToken
RtlGetOwnerSecurityDescriptor
RtlGetPersistedStateLocation
RtlGetSaclSecurityDescriptor
RtlGetSystemBootStatus
RtlGetSystemBootStatusEx
RtlGetUnloadEventTrace
RtlGetUnloadEventTraceEx
RtlGetVersion
RtlGrowFunctionTable
RtlGUIDFromString
RtlHashUnicodeString
RtlIncrementCorrelationVector
RtlInitAnsiString
RtlInitCodePageTable
RtlInitializeBitMap
RtlInitializeBitMapEx
RtlInitializeCorrelationVector
RtlInitializeGenericTable
RtlInitializeGenericTableAvl
RtlInitializeSid
RtlInitializeSidEx
RtlInitializeSListHead
RtlInitString
RtlInitStringEx
RtlInitUnicodeString
RtlInsertElementGenericTable
RtlInsertElementGenericTableAvl
RtlInsertElementGenericTableFullAvl
RtlInstallFunctionTableCallback
RtlInt64ToUnicodeString
RtlIntegerToUnicodeString
RtlInterlockedFlushSList
RtlInterlockedPushEntrySList
RtlIoDecodeMemIoResource
RtlIoEncodeMemIoResource
RtlIpv4AddressToStringA
RtlIpv4AddressToStringExW
RtlIpv4StringToAddress
RtlIpv4StringToAddressEx
RtlIpv6AddressToString
RtlIpv6AddressToStringExW
RtlIpv6StringToAddress
RtlIpv6StringToAddressExW
RtlIsCloudFilesPlaceholder
RtlIsCurrentProcess
RtlIsCurrentThread
RtlIsGenericTableEmpty
RtlIsGenericTableEmptyAvl
RtlIsNameInExpression
RtlIsNameInUnUpcasedExpression
RtlIsNameLegalDOS8Dot3
RtlIsPartialPlaceholder
RtlIsPartialPlaceholderFileHandle
RtlIsPartialPlaceholderFileInfo
RtlIsStateSeparationEnabled
RtlIsValidLocaleName
RtlLengthSecurityDescriptor
RtlLengthSid
RtlLocalTimeToSystemTime
RtlLookupElementGenericTable
RtlLookupElementGenericTableAvl
RtlLookupElementGenericTableFullAvl
RtlLookupFirstMatchingElementGenericTableAvl
RtlLookupFunctionEntry
RtlMapGenericMask
RtlMoveMemory
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlNtStatusToDosError
RtlNumberGenericTableElements
RtlNumberGenericTableElementsAvl
RtlNumberOfClearBits
RtlNumberOfSetBits
RtlNumberOfSetBitsUlongPtr
RtlOemStringToUnicodeString
RtlOemToUnicodeN
RtlPcToFileHeader
RtlPrefixUnicodeString
RtlQueryDepthSList
RtlQueryImageMitigationPolicy
RtlQueryProcessPlaceholderCompatibilityMode
RtlQueryRegistryValues
RtlQueryRegistryValueWithFallback
RtlQueryThreadPlaceholderCompatibilityMode
RtlQueryTokenHostIdAsUlong64
RtlRaiseCustomSystemEventTrigger
RtlRaiseException
RtlRandom
RtlRandomEx
RtlRealPredecessor
RtlRealSuccessor
RtlRestoreContext
RtlRestoreSystemBootStatusDefaults
RtlRunOnceBeginInitialize
RtlRunOnceComplete
RtlRunOnceExecuteOnce
RtlRunOnceInitialize
RtlSecondsSince1970ToTime
RtlSecondsSince1980ToTime
RtlSelfRelativeToAbsoluteSD
RtlSetAllBits
RtlSetBits
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetImageMitigationPolicy
RtlSetOwnerSecurityDescriptor
RtlSetProcessPlaceholderCompatibilityMode
RtlSetProxiedProcessId
RtlSetSystemBootStatus
RtlSetSystemBootStatusEx
RtlSetThreadPlaceholderCompatibilityMode
RtlSplay
RtlStringFromGUID
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlSubtreePredecessor
RtlSubtreeSuccessor
RtlTestBitEx
RtlTimeFieldsToTime
RtlTimeToSecondsSince1970
RtlTimeToSecondsSince1980
RtlTimeToTimeFields
RtlUnicodeStringToAnsiString
RtlUnicodeStringToCountedOemString
RtlUnicodeStringToInteger
RtlUnicodeStringToOemString
RtlUnicodeToCustomCPN
RtlUnicodeToMultiByteN
RtlUnicodeToMultiByteSize
RtlUnicodeToOemN
RtlUnicodeToUTF8N
RtlUniform
RtlUnwind
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
RtlUpcaseUnicodeStringToCountedOemString
RtlUpcaseUnicodeStringToOemString
RtlUpcaseUnicodeToCustomCPN
RtlUpcaseUnicodeToMultiByteN
RtlUpcaseUnicodeToOemN
RtlUpperChar
RtlUpperString
RtlUTF8ToUnicodeN
RtlValidateCorrelationVector
RtlValidRelativeSecurityDescriptor
RtlVerifyVersionInfo
RtlVirtualUnwind
RtlWow64GetEquivalentMachineCHPE
RtlWow64GetSharedInfoProcess
RtlWow64PopAllCrossProcessWork
RtlWow64PopCrossProcessWork
RtlWow64PushCrossProcessWork
RtlWriteNonVolatileMemory
RtlWriteRegistryValue
vDbgPrintEx
vDbgPrintExWithPrefix
VerSetConditionMask
ZwAllocateLocallyUniqueId
ZwAllocateVirtualMemory
ZwAllocateVirtualMemoryEx
ZwCallEnclave
ZwClose
ZwCommitComplete
ZwCommitEnlistment
ZwCommitTransaction
ZwCreateDirectoryObject
ZwCreateEnlistment
ZwCreateEvent
ZwCreateFile
ZwCreateKey
ZwCreateKeyTransacted
ZwCreateResourceManager
ZwCreateSection
ZwCreateTransaction
ZwCreateTransactionManager
ZwDeleteFile
ZwDeleteKey
ZwDeleteValueKey
ZwDeviceIoControlFile
ZwDuplicateObject
ZwDuplicateToken
ZwEnumerateKey
ZwEnumerateTransactionObject
ZwEnumerateValueKey
ZwFlushBuffersFileEx
ZwFlushKey
ZwFlushVirtualMemory
ZwFreeVirtualMemory
ZwFsControlFile
ZwGetNotificationResourceManager
ZwLoadDriver
ZwLockFile
ZwMakeTemporaryObject
ZwMapViewOfSection
ZwMapViewOfSectionEx
ZwNotifyChangeDirectoryFileEx
ZwNotifyChangeKey
ZwOpenDirectoryObject
ZwOpenEnlistment
ZwOpenEvent
ZwOpenFile
ZwOpenKey
ZwOpenKeyEx
ZwOpenKeyTransacted
ZwOpenKeyTransactedEx
ZwOpenProcess
ZwOpenProcessTokenEx
ZwOpenResourceManager
ZwOpenSection
ZwOpenSymbolicLinkObject
ZwOpenThreadTokenEx
ZwOpenTransaction
ZwOpenTransactionManager
ZwPowerInformation
ZwPrepareComplete
ZwPrepareEnlistment
ZwPrePrepareComplete
ZwPrePrepareEnlistment
ZwQueryDirectoryFile
ZwQueryDirectoryFileEx
ZwQueryEaFile
ZwQueryFullAttributesFile
ZwQueryInformationEnlistment
ZwQueryInformationFile
ZwQueryInformationProcess
ZwQueryInformationResourceManager
ZwQueryInformationToken
ZwQueryInformationTransaction
ZwQueryInformationTransactionManager
ZwQueryKey
ZwQueryObject
ZwQueryQuotaInformationFile
ZwQuerySecurityObject
ZwQuerySymbolicLinkObject
ZwQuerySystemInformation
ZwQuerySystemInformationEx
ZwQueryValueKey
ZwQueryVirtualMemory
ZwQueryVolumeInformationFile
ZwReadFile
ZwReadOnlyEnlistment
ZwRecoverEnlistment
ZwRecoverResourceManager
ZwRecoverTransactionManager
ZwRollbackComplete
ZwRollbackEnlistment
ZwRollbackTransaction
ZwRollforwardTransactionManager
ZwSetEaFile
ZwSetEvent
ZwSetInformationEnlistment
ZwSetInformationFile
ZwSetInformationResourceManager
ZwSetInformationThread
ZwSetInformationToken
ZwSetInformationTransaction
ZwSetInformationVirtualMemory
ZwSetQuotaInformationFile
ZwSetSecurityObject
ZwSetValueKey
ZwSetVolumeInformationFile
ZwSinglePhaseReject
ZwSuspendProcess
ZwTerminateEnclave
ZwTerminateProcess
ZwUnloadDriver
ZwUnlockFile
ZwUnmapViewOfSection
ZwUnmapViewOfSectionEx
ZwWaitForSingleObject
ZwWriteFile

Structures

Native Structure Header Managed Structure
CLIENT_ID Vanara.PInvoke.NtDll.CLIENT_ID
IO_STATUS_BLOCK wdm.h Vanara.PInvoke.NtDll.IO_STATUS_BLOCK
KEY_BASIC_INFORMATION wdm.h Vanara.PInvoke.NtDll.KEY_BASIC_INFORMATION
KEY_FULL_INFORMATION wdm.h Vanara.PInvoke.NtDll.KEY_FULL_INFORMATION
KEY_NAME_INFORMATION ntddk.h Vanara.PInvoke.NtDll.KEY_NAME_INFORMATION
KEY_NODE_INFORMATION wdm.h Vanara.PInvoke.NtDll.KEY_NODE_INFORMATION
LDR_DLL_NOTIFICATION_DATA ntldr.h Vanara.PInvoke.NtDll.LDR_DLL_NOTIFICATION_DATA
OBJECT_ATTRIBUTES wudfwdm.h Vanara.PInvoke.NtDll.OBJECT_ATTRIBUTES
SYSTEM_BASIC_INFORMATION winternl.h Vanara.PInvoke.NtDll.SYSTEM_BASIC_INFORMATION
SYSTEM_PROCESS_INFORMATION winternl.h Vanara.PInvoke.NtDll.SYSTEM_PROCESS_INFORMATION
SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION winternl.h Vanara.PInvoke.NtDll.SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION
SYSTEM_REGISTRY_QUOTA_INFORMATION winternl.h Vanara.PInvoke.NtDll.SYSTEM_REGISTRY_QUOTA_INFORMATION
SYSTEM_THREAD_INFORMATION winternl.h Vanara.PInvoke.NtDll.SYSTEM_THREAD_INFORMATION
UNICODE_STRING wudfwdm.h Vanara.PInvoke.NtDll.UNICODE_STRING