Vanara.PInvoke.NtDll 4.0.2

Prefix Reserved
.NET 5.0 This package targets .NET 5.0. The package is compatible with this framework or higher. .NET Core 3.1 This package targets .NET Core 3.1. The package is compatible with this framework or higher. .NET Standard 2.0 This package targets .NET Standard 2.0. The package is compatible with this framework or higher. .NET Framework 4.5 This package targets .NET Framework 4.5. The package is compatible with this framework or higher.
There is a newer version of this package available.
See the version list below for details. 
dotnet add package Vanara.PInvoke.NtDll --version 4.0.2                

                    
                

            
NuGet\Install-Package Vanara.PInvoke.NtDll -Version 4.0.2
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Vanara.PInvoke.NtDll" Version="4.0.2" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
paket add Vanara.PInvoke.NtDll --version 4.0.2                

                    
                

            
#r "nuget: Vanara.PInvoke.NtDll, 4.0.2"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
// Install Vanara.PInvoke.NtDll as a Cake Addin
#addin nuget:?package=Vanara.PInvoke.NtDll&version=4.0.2

// Install Vanara.PInvoke.NtDll as a Cake Tool
#tool nuget:?package=Vanara.PInvoke.NtDll&version=4.0.2

Vanara

Vanara.PInvoke.NtDll NuGet Package

Version Build status

PInvoke API (methods, structures and constants) imported from Windows NtDll.dll.

What is Vanara?

Vanara is a community project that contains various .NET assemblies which have P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries.

Issues?

First check if it's already fixed by trying the AppVeyor build. If you're still running into problems, file an issue.

Included in Vanara.PInvoke.NtDll

Functions Enumerations Structures
_vscprintf ApiSetQueryApiSetPresenceEx DbgBreakPoint DbgPrint DbgPrintEx DbgPrompt DbgUiSetThreadDebugObject EtwCheckCoverage LdrCallEnclave LdrControlFlowGuardEnforced LdrCreateEnclave LdrDeleteEnclave LdrFastFailInLoaderCallout LdrHotPatchNotify LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadEnclaveModule LdrRegisterDllNotification LdrUnregisterDllNotification MicrosoftTelemetryAssertTriggeredUM NtAcquireCrossVmMutant NtAllocateUserPhysicalPagesEx NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtCallEnclave NtChangeProcessState NtChangeThreadState NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareTokens NtContinueEx NtCopyFileChunk NtCreateCpuPartition NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateEnlistment NtCreateFile NtCreateFileA NtCreateFileW NtCreateIoRing NtCreateProcess NtCreateProcessEx NtCreateProcessStateChange NtCreateResourceManager NtCreateSection NtCreateSectionA NtCreateSectionEx NtCreateSectionW NtCreateThreadStateChange NtCreateTransaction NtCreateTransactionA NtCreateTransactionManager NtCreateTransactionManagerA NtCreateTransactionManagerW NtCreateTransactionW NtDeviceIoControlFile NtDirectGraphicsCall NtDuplicateToken NtEnumerateTransactionObject NtFlushBuffersFileEx NtFreeVirtualMemory NtFsControlFile NtGetCurrentProcessorNumber NtGetNotificationResourceManager NtLoadKey3 NtLockFile NtManageHotPatch NtMapViewOfSectionEx NtNotifyChangeDirectoryFileEx NtNotifyChangeMultipleKeys NtOpenCpuPartition NtOpenDirectoryObject NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessTokenEx NtOpenResourceManager NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPowerInformation NtPrepareComplete NtPrepareEnlistment NtPrePrepareComplete NtPrePrepareEnlistment NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryInformationCpuPartition NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryIoRingCapabilities NtQueryKey NtQueryMultipleValueKey NtQueryObject NtQueryPerformanceCounter NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueueApcThreadEx2 NtReadFile NtReadOnlyEnlistment NtReadVirtualMemoryEx NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRemoveProcessDebug NtRenameKey NtRenameTransactionManager NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtRollforwardTransactionManager NtSetInformationCpuPartition NtSetInformationEnlistment NtSetInformationFile NtSetInformationIoRing NtSetInformationKey NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetQuotaInformationFile NtSetSecurityObject NtSinglePhaseReject NtSubmitIoRing NtTerminateEnclave NtUnlockFile NtUnmapViewOfSection NtWaitForSingleObject NtWow64QueryInformationProcess64 NtWow64ReadVirtualMemory64 NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiStringToUnicodeString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlCallEnclave RtlCallEnclaveReturn RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureContext2 RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlClearAllBitsEx RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmEncodeMemIoResource RtlCompareExchangePointerMapping RtlCompareExchangePropertyStore RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlConvertHostPerfCounterToPerfCounter RtlConvertSidToUnicodeString RtlCopyLuid RtlCopyMemoryNonTemporal RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateHeap RtlCreateProcessParametersWithTemplate RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserFiberShadowStack RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDelayExecution RtlDelete RtlDeleteAce RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDestroyHeap RtlDisownModuleHeapAllocation RtlDoesNameContainWildCards RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDowncaseUnicodeString RtlDrainNonVolatileFlush RtlEnclaveCallDispatch RtlEnclaveCallDispatchReturn RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlEthernetAddressToString RtlEthernetStringToAddress RtlExtendCorrelationVector RtlFillMemoryNonTemporal RtlFillNonVolatileMemory RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsAndSetEx RtlFindClearBitsEx RtlFindClearRuns RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFirstEntrySList RtlFlsGetValue RtlFlsSetValue RtlFlushNonVolatileMemory RtlFlushNonVolatileMemoryRanges RtlFreeAnsiString RtlFreeHeap RtlFreeNonVolatileToken RtlFreeOemString RtlFreeUnicodeString RtlFreeUserFiberShadowStack RtlFreeUTF8String RtlGenerate8dot3Name RtlGetAce RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength2 RtlGetFeatureToggleConfiguration RtlGetFeatureTogglesChangeToken RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetImageFileMachines RtlGetMultiTimePrecise RtlGetNonVolatileToken RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetSystemGlobalData RtlGetSystemTimeAndBias RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetVersion RtlGrowFunctionTable RtlGUIDFromString RtlHashUnicodeString RtlIncrementCorrelationVector RtlInitAnsiString RtlInitCodePageTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeSid RtlInitializeSidEx RtlInitializeSListHead RtlInitString RtlInitStringEx RtlInitUnicodeString RtlInitUTF8String RtlInitUTF8StringEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFullAvl RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToUnicodeString RtlInterlockedClearBitRunEx RtlInterlockedFlushSList RtlInterlockedPushEntrySList RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExW RtlIpv4StringToAddress RtlIpv4StringToAddressEx RtlIpv6AddressToString RtlIpv6AddressToStringExW RtlIpv6StringToAddress RtlIpv6StringToAddressExW RtlIsApiSetImplemented RtlIsCloudFilesPlaceholder RtlIsCurrentProcess RtlIsCurrentThread RtlIsEcCode RtlIsEnclaveFeaturePresent RtlIsFeatureEnabledForEnterprise RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsStateSeparationEnabled RtlIsValidLocaleName RtlIsZeroMemory RtlLengthCurrentClearRunBackwardEx RtlLengthCurrentClearRunForwardEx RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFullAvl RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNormalizeSecurityDescriptor RtlNotifyFeatureToggleUsage RtlNotifyFeatureUsage RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCrossProcessEmulatorWorkConnection RtlOverwriteFeatureConfigurationBuffer RtlPcToFileHeader RtlPrefixUnicodeString RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpWow64CtxFromAmd64 RtlpWow64GetContextOnAmd64 RtlpWow64SetContextOnAmd64 RtlQueryAllFeatureConfigurations RtlQueryDepthSList RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryImageMitigationPolicy RtlQueryPointerMapping RtlQueryProcessPlaceholderCompatibilityMode RtlQueryPropertyStore RtlQueryRegistryValues RtlQueryRegistryValueWithFallback RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTokenHostIdAsUlong64 RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseExceptionForReturnAddressHijack RtlRaiseNoncontinuableException RtlRandom RtlRandomEx RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRemovePointerMapping RtlRemovePropertyStore RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetAllBitsEx RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetDaclSecurityDescriptor RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetImageMitigationPolicy RtlSetOwnerSecurityDescriptor RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPreferredUILanguages2 RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlTestBitEx RtlTimeFieldsToTime RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUdiv128 RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUserFiberStart RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlValidateCorrelationVector RtlValidRelativeSecurityDescriptor RtlVerifyVersionInfo RtlVirtualUnwind RtlVirtualUnwind2 RtlWow64ChangeProcessState RtlWow64ChangeThreadState RtlWow64GetEquivalentMachineCHPE RtlWow64GetSharedInfoProcess RtlWow64PopAllCrossProcessWorkFromWorkList RtlWow64PopCrossProcessWorkFromFreeList RtlWow64PushCrossProcessWorkOntoFreeList RtlWow64PushCrossProcessWorkOntoWorkList RtlWow64RequestCrossProcessHeavyFlush RtlWow64SuspendProcess RtlWriteNonVolatileMemory RtlWriteRegistryValue TpSetPoolThreadCpuSets TpWorkOnBehalfClearTicket TpWorkOnBehalfSetTicket vDbgPrintEx vDbgPrintExWithPrefix VerSetConditionMask ZwAcquireCrossVmMutant ZwAllocateLocallyUniqueId ZwAllocateUserPhysicalPagesEx ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwCallEnclave ZwChangeProcessState ZwChangeThreadState ZwClose ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwContinueEx ZwCopyFileChunk ZwCreateCpuPartition ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoRing ZwCreateKey ZwCreateKeyTransacted ZwCreateProcessStateChange ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateThreadStateChange ZwCreateTransaction ZwCreateTransactionManager ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFileEx ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwLoadDriver ZwLoadKey3 ZwLockFile ZwMakeTemporaryObject ZwManageHotPatch ZwMapViewOfSection ZwMapViewOfSectionEx ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwOpenCpuPartition ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSymbolicLinkObject ZwOpenThreadTokenEx ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrepareComplete ZwPrepareEnlistment ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPssCaptureVaSpaceBulk ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationCpuPartition ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryIoRingCapabilities ZwQueryKey ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueueApcThreadEx2 ZwReadFile ZwReadOnlyEnlistment ZwReadVirtualMemoryEx ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwRollforwardTransactionManager ZwSetEaFile ZwSetEvent ZwSetInformationCpuPartition ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationIoRing ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetValueKey ZwSetVolumeInformationFile ZwSinglePhaseReject ZwSubmitIoRing ZwSuspendProcess ZwTerminateEnclave ZwTerminateProcess ZwUnloadDriver ZwUnlockFile ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwWaitForSingleObject ZwWriteFile DPFLTR_TYPE NOTIFICATION_MASK SYSTEM_INFORMATION_CLASS NtFileCreateOptions NtFileMode KEY_INFORMATION_CLASS PROCESS_CREATE_FLAGS PROCESSINFOCLASS SUBSYSTEM_INFORMATION_TYPE CLIENT_ID KEY_NAME_INFORMATION LDR_DLL_NOTIFICATION_DATA OBJECT_ATTRIBUTES RTL_HEAP_PARAMETERS IO_STATUS_BLOCK KEY_BASIC_INFORMATION KEY_FULL_INFORMATION KEY_NODE_INFORMATION OSVERSIONINFOW KERNEL_USER_TIMES PEB PEB_WOW64 PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION_WOW64 RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS_WOW64 SYSTEM_BASIC_INFORMATION SYSTEM_PROCESS_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_THREAD_INFORMATION UNICODE_STRING UNICODE_STRING_WOW64
Product Compatible and additional computed target framework versions.
.NET net5.0 is compatible.  net5.0-windows was computed.  net6.0 is compatible.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 is compatible.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed.  net8.0-windows7.0 is compatible. 
.NET Core netcoreapp2.0 was computed.  netcoreapp2.1 was computed.  netcoreapp2.2 was computed.  netcoreapp3.0 was computed.  netcoreapp3.1 is compatible. 
.NET Standard netstandard2.0 is compatible.  netstandard2.1 was computed. 
.NET Framework net45 is compatible.  net451 was computed.  net452 was computed.  net46 was computed.  net461 was computed.  net462 was computed.  net463 was computed.  net47 was computed.  net471 was computed.  net472 was computed.  net48 is compatible.  net481 was computed. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen40 was computed.  tizen60 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (2)

Showing the top 2 NuGet packages that depend on Vanara.PInvoke.NtDll:

Package Downloads
Vanara.SystemServices

Classes for system related items derived from the Vanara PInvoke libraries. Includes extensions for Process (privileges and elavation), FileInfo (compression info), Shared Network Drives and Devices, and ServiceController (SetStartType) that pull extended information through native API calls.
Vanara.Library

The full set of packages associated with the Vanara PInvoke Libraries.

GitHub repositories (3)

Showing the top 3 popular GitHub repositories that depend on Vanara.PInvoke.NtDll:

Repository Stars
babalae/better-genshin-impact
📦BetterGI · 更好的原神 - 自动拾取 | 自动剧情 | 全自动钓鱼(AI) | 全自动七圣召唤 | 自动伐木 | 自动刷本 | 自动采集 - UI Automation Testing Tools For Genshin Impact
zhuxb711/RX-Explorer
一款优雅的UWP文件管理器 | An elegant UWP Explorer
babalae/better-wuthering-waves
🌊更好的鸣潮 - 后台自动剧情
Version Downloads Last updated
4.0.4 528 9/13/2024
4.0.3 419 8/5/2024
4.0.2 1,389 6/24/2024
4.0.1 545 4/30/2024
4.0.0 252 3/29/2024
4.0.0-beta2 213 1/22/2024
4.0.0-beta 212 11/20/2023
3.4.17 1,930 10/18/2023
3.4.16 680 8/7/2023
3.4.15 586 5/18/2023
3.4.14 443 4/15/2023
3.4.13 1,134 2/4/2023
3.4.12 741 1/15/2023
3.4.11 887 11/15/2022
3.4.10 1,114 10/25/2022
3.4.9 1,022 10/3/2022
3.4.8 1,042 9/16/2022
3.4.7 1,058 9/3/2022
3.4.6 1,227 8/7/2022
3.4.5 5,731 7/17/2022
3.4.4 1,395 7/5/2022
3.4.3 1,208 6/14/2022
3.4.2 1,749 5/13/2022
3.4.1 1,145 5/5/2022
3.4.0 1,905 3/14/2022
3.3.15 4,922 12/27/2021
3.3.14 1,052 10/26/2021
3.3.13 664 9/30/2021
3.3.12 683 8/30/2021
3.3.11 659 7/22/2021
3.3.10 748 6/4/2021
3.3.9 780 5/7/2021
3.3.8 821 4/7/2021
3.3.7 629 3/24/2021
3.3.6 572 3/19/2021
3.3.5 581 3/1/2021
3.3.4 540 2/11/2021
3.3.3 537 2/3/2021
3.3.2 610 1/21/2021
3.3.1 636 1/20/2021
3.3.0 696 11/20/2020
3.2.21 617 11/13/2020
3.2.20 734 11/8/2020
3.2.19 683 10/23/2020
3.2.18 692 10/21/2020
3.2.17 788 9/20/2020
3.2.16 667 9/7/2020
3.2.15 722 8/30/2020
3.2.14 639 8/20/2020
3.2.13 767 7/27/2020
3.2.12 702 7/13/2020
3.2.11 758 6/28/2020
3.2.10 760 6/14/2020
3.2.9 776 6/3/2020
3.2.7 772 5/4/2020
3.2.6 768 4/21/2020
3.2.5 706 4/15/2020
3.2.4 736 4/12/2020
3.2.3 713 4/1/2020
3.2.2 676 3/24/2020
3.2.1 674 3/17/2020
3.2.0 943 2/27/2020
3.1.9 748 1/17/2020
3.1.8 781 1/13/2020
3.1.7 762 1/6/2020
3.1.6 747 12/12/2019
3.1.5 850 11/26/2019
3.1.4 712 11/25/2019
3.1.3 701 11/8/2019
3.1.2 728 11/4/2019
3.1.1 707 10/17/2019
3.1.0 748 10/3/2019
3.0.1 772 9/20/2019
3.0.0 562 8/27/2019
2.3.11 816 6/9/2019
2.3.10 625 6/5/2019
2.3.9 569 5/26/2019
2.3.8 593 5/13/2019
2.3.7 648 4/24/2019
2.3.6 621 4/17/2019
2.3.5 573 4/10/2019
2.3.4 610 3/9/2019
2.3.3 597 3/8/2019
2.3.2 618 2/28/2019
2.3.1 601 2/25/2019
2.3.0 627 2/22/2019
2.2.1 683 2/12/2019
2.2.0 668 2/1/2019
2.1.2 917 1/14/2019
2.1.0 912 12/15/2018
2.0.1 731 12/7/2018
2.0.0 730 11/28/2018
1.1.0 842 9/10/2018

Currently implements:

Functions
ApiSetQueryApiSetPresenceEx DbgBreakPoint DbgPrint DbgPrintEx DbgPrompt DbgUiSetThreadDebugObject EtwCheckCoverage LdrCallEnclave LdrControlFlowGuardEnforced LdrCreateEnclave LdrDeleteEnclave LdrFastFailInLoaderCallout LdrHotPatchNotify LdrInitializeEnclave LdrIsModuleSxsRedirected LdrLoadEnclaveModule LdrRegisterDllNotification LdrUnregisterDllNotification MicrosoftTelemetryAssertTriggeredUM NtAcquireCrossVmMutant NtAllocateUserPhysicalPagesEx NtAllocateVirtualMemory NtAllocateVirtualMemoryEx NtCallEnclave NtChangeProcessState NtChangeThreadState NtClose NtCommitComplete NtCommitEnlistment NtCommitTransaction NtCompareTokens NtContinueEx NtCopyFileChunk NtCreateCpuPartition NtCreateCrossVmEvent NtCreateCrossVmMutant NtCreateEnlistment NtCreateFile NtCreateFileA NtCreateFileW NtCreateIoRing NtCreateProcess NtCreateProcessEx NtCreateProcessStateChange NtCreateResourceManager NtCreateSection NtCreateSectionA NtCreateSectionEx NtCreateSectionW NtCreateThreadStateChange NtCreateTransaction NtCreateTransactionA NtCreateTransactionManager NtCreateTransactionManagerA NtCreateTransactionManagerW NtCreateTransactionW NtDeviceIoControlFile NtDirectGraphicsCall NtDuplicateToken NtEnumerateTransactionObject NtFlushBuffersFileEx NtFreeVirtualMemory NtFsControlFile NtGetCurrentProcessorNumber NtGetNotificationResourceManager NtLoadKey3 NtLockFile NtManageHotPatch NtMapViewOfSectionEx NtNotifyChangeDirectoryFileEx NtNotifyChangeMultipleKeys NtOpenCpuPartition NtOpenDirectoryObject NtOpenEnlistment NtOpenFile NtOpenProcess NtOpenProcessTokenEx NtOpenResourceManager NtOpenSymbolicLinkObject NtOpenThread NtOpenThreadTokenEx NtOpenTransaction NtOpenTransactionManager NtPowerInformation NtPrepareComplete NtPrepareEnlistment NtPrePrepareComplete NtPrePrepareEnlistment NtProtectVirtualMemory NtPssCaptureVaSpaceBulk NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryFileEx NtQueryInformationCpuPartition NtQueryInformationEnlistment NtQueryInformationFile NtQueryInformationProcess NtQueryInformationResourceManager NtQueryInformationThread NtQueryInformationToken NtQueryInformationTransaction NtQueryInformationTransactionManager NtQueryIoRingCapabilities NtQueryKey NtQueryMultipleValueKey NtQueryObject NtQueryPerformanceCounter NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryVirtualMemory NtQueryVolumeInformationFile NtQueueApcThreadEx2 NtReadFile NtReadOnlyEnlistment NtReadVirtualMemoryEx NtRecoverEnlistment NtRecoverResourceManager NtRecoverTransactionManager NtRemoveProcessDebug NtRenameKey NtRenameTransactionManager NtRollbackComplete NtRollbackEnlistment NtRollbackTransaction NtRollforwardTransactionManager NtSetInformationCpuPartition NtSetInformationEnlistment NtSetInformationFile NtSetInformationIoRing NtSetInformationKey NtSetInformationResourceManager NtSetInformationThread NtSetInformationToken NtSetInformationTransaction NtSetInformationTransactionManager NtSetQuotaInformationFile NtSetSecurityObject NtSinglePhaseReject NtSubmitIoRing NtTerminateEnclave NtUnlockFile NtUnmapViewOfSection NtWaitForSingleObject NtWow64QueryInformationProcess64 NtWow64ReadVirtualMemory64 NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAce RtlAddFunctionTable RtlAddGrowableFunctionTable RtlAllocateAndInitializeSid RtlAllocateHeap RtlAnsiStringToUnicodeString RtlAppendStringToString RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlAreBitsClear RtlAreBitsClearEx RtlAreBitsSet RtlCallEnclave RtlCallEnclaveReturn RtlCapabilityCheckForSingleSessionSku RtlCaptureContext RtlCaptureContext2 RtlCaptureStackBackTrace RtlCharToInteger RtlCheckRegistryKey RtlCheckSystemBootStatusIntegrity RtlClearAllBitsEx RtlClearBitEx RtlClearBits RtlClearBitsEx RtlCmEncodeMemIoResource RtlCompareExchangePointerMapping RtlCompareExchangePropertyStore RtlCompareMemory RtlCompareMemoryUlong RtlCompareString RtlCompareUnicodeString RtlCompressBuffer RtlConstructCrossVmEventPath RtlConstructCrossVmMutexPath RtlConvertHostPerfCounterToPerfCounter RtlConvertSidToUnicodeString RtlCopyLuid RtlCopyMemoryNonTemporal RtlCopySid RtlCopyString RtlCopyUnicodeString RtlCreateAcl RtlCreateHeap RtlCreateProcessParametersWithTemplate RtlCreateRegistryKey RtlCreateSecurityDescriptor RtlCreateSystemVolumeInformationFolder RtlCreateUnicodeString RtlCreateUserFiberShadowStack RtlCustomCPToUnicodeN RtlDecompressBuffer RtlDecompressBufferEx RtlDecompressFragment RtlDelayExecution RtlDelete RtlDeleteAce RtlDeleteElementGenericTable RtlDeleteElementGenericTableAvl RtlDeleteFunctionTable RtlDeleteGrowableFunctionTable RtlDeleteNoSplay RtlDeleteRegistryValue RtlDestroyHeap RtlDisownModuleHeapAllocation RtlDoesNameContainWildCards RtlDosLongPathNameToNtPathName_U_WithStatus RtlDosLongPathNameToRelativeNtPathName_U_WithStatus RtlDowncaseUnicodeString RtlDrainNonVolatileFlush RtlEnclaveCallDispatch RtlEnclaveCallDispatchReturn RtlEnumerateGenericTable RtlEnumerateGenericTableAvl RtlEnumerateGenericTableLikeADirectory RtlEnumerateGenericTableWithoutSplaying RtlEnumerateGenericTableWithoutSplayingAvl RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlEthernetAddressToString RtlEthernetStringToAddress RtlExtendCorrelationVector RtlFillMemoryNonTemporal RtlFillNonVolatileMemory RtlFindClearBits RtlFindClearBitsAndSet RtlFindClearBitsAndSetEx RtlFindClearBitsEx RtlFindClearRuns RtlFindLastBackwardRunClear RtlFindLeastSignificantBit RtlFindLongestRunClear RtlFindMostSignificantBit RtlFindNextForwardRunClear RtlFindSetBits RtlFindSetBitsAndClear RtlFindSetBitsAndClearEx RtlFindSetBitsEx RtlFirstEntrySList RtlFlsGetValue RtlFlsSetValue RtlFlushNonVolatileMemory RtlFlushNonVolatileMemoryRanges RtlFreeAnsiString RtlFreeHeap RtlFreeNonVolatileToken RtlFreeOemString RtlFreeUnicodeString RtlFreeUserFiberShadowStack RtlFreeUTF8String RtlGenerate8dot3Name RtlGetAce RtlGetCompressionWorkSpaceSize RtlGetDaclSecurityDescriptor RtlGetElementGenericTable RtlGetElementGenericTableAvl RtlGetEnabledExtendedFeatures RtlGetExtendedContextLength2 RtlGetFeatureToggleConfiguration RtlGetFeatureTogglesChangeToken RtlGetFunctionTableListHead RtlGetGroupSecurityDescriptor RtlGetImageFileMachines RtlGetMultiTimePrecise RtlGetNonVolatileToken RtlGetOwnerSecurityDescriptor RtlGetPersistedStateLocation RtlGetReturnAddressHijackTarget RtlGetSaclSecurityDescriptor RtlGetSystemBootStatus RtlGetSystemBootStatusEx RtlGetSystemGlobalData RtlGetSystemTimeAndBias RtlGetUnloadEventTrace RtlGetUnloadEventTraceEx RtlGetVersion RtlGrowFunctionTable RtlGUIDFromString RtlHashUnicodeString RtlIncrementCorrelationVector RtlInitAnsiString RtlInitCodePageTable RtlInitializeBitMap RtlInitializeBitMapEx RtlInitializeCorrelationVector RtlInitializeExtendedContext2 RtlInitializeGenericTable RtlInitializeGenericTableAvl RtlInitializeSid RtlInitializeSidEx RtlInitializeSListHead RtlInitString RtlInitStringEx RtlInitUnicodeString RtlInitUTF8String RtlInitUTF8StringEx RtlInsertElementGenericTable RtlInsertElementGenericTableAvl RtlInsertElementGenericTableFullAvl RtlInstallFunctionTableCallback RtlInt64ToUnicodeString RtlIntegerToUnicodeString RtlInterlockedClearBitRunEx RtlInterlockedFlushSList RtlInterlockedPushEntrySList RtlIoDecodeMemIoResource RtlIoEncodeMemIoResource RtlIpv4AddressToStringA RtlIpv4AddressToStringExW RtlIpv4StringToAddress RtlIpv4StringToAddressEx RtlIpv6AddressToString RtlIpv6AddressToStringExW RtlIpv6StringToAddress RtlIpv6StringToAddressExW RtlIsApiSetImplemented RtlIsCloudFilesPlaceholder RtlIsCurrentProcess RtlIsCurrentThread RtlIsEcCode RtlIsEnclaveFeaturePresent RtlIsFeatureEnabledForEnterprise RtlIsGenericTableEmpty RtlIsGenericTableEmptyAvl RtlIsNameInExpression RtlIsNameInUnUpcasedExpression RtlIsNameLegalDOS8Dot3 RtlIsPartialPlaceholder RtlIsPartialPlaceholderFileHandle RtlIsPartialPlaceholderFileInfo RtlIsStateSeparationEnabled RtlIsValidLocaleName RtlIsZeroMemory RtlLengthCurrentClearRunBackwardEx RtlLengthCurrentClearRunForwardEx RtlLengthSecurityDescriptor RtlLengthSid RtlLocalTimeToSystemTime RtlLookupElementGenericTable RtlLookupElementGenericTableAvl RtlLookupElementGenericTableFullAvl RtlLookupFirstMatchingElementGenericTableAvl RtlLookupFunctionEntry RtlMapGenericMask RtlMoveMemory RtlMultiByteToUnicodeN RtlMultiByteToUnicodeSize RtlNormalizeSecurityDescriptor RtlNotifyFeatureToggleUsage RtlNotifyFeatureUsage RtlNtStatusToDosError RtlNumberGenericTableElements RtlNumberGenericTableElementsAvl RtlNumberOfClearBits RtlNumberOfClearBitsEx RtlNumberOfSetBits RtlNumberOfSetBitsEx RtlNumberOfSetBitsUlongPtr RtlOemStringToUnicodeString RtlOemToUnicodeN RtlOpenCrossProcessEmulatorWorkConnection RtlOverwriteFeatureConfigurationBuffer RtlPcToFileHeader RtlPrefixUnicodeString RtlpTimeFieldsToTime RtlpTimeToTimeFields RtlpWow64CtxFromAmd64 RtlpWow64GetContextOnAmd64 RtlpWow64SetContextOnAmd64 RtlQueryAllFeatureConfigurations RtlQueryDepthSList RtlQueryFeatureConfiguration RtlQueryFeatureConfigurationChangeStamp RtlQueryFeatureUsageNotificationSubscriptions RtlQueryImageMitigationPolicy RtlQueryPointerMapping RtlQueryProcessPlaceholderCompatibilityMode RtlQueryPropertyStore RtlQueryRegistryValues RtlQueryRegistryValueWithFallback RtlQueryThreadPlaceholderCompatibilityMode RtlQueryTokenHostIdAsUlong64 RtlRaiseCustomSystemEventTrigger RtlRaiseException RtlRaiseExceptionForReturnAddressHijack RtlRaiseNoncontinuableException RtlRandom RtlRandomEx RtlRealPredecessor RtlRealSuccessor RtlRegisterFeatureConfigurationChangeNotification RtlRemovePointerMapping RtlRemovePropertyStore RtlRestoreContext RtlRestoreSystemBootStatusDefaults RtlRestoreThreadPreferredUILanguages RtlRunOnceBeginInitialize RtlRunOnceComplete RtlRunOnceExecuteOnce RtlRunOnceInitialize RtlSecondsSince1970ToTime RtlSecondsSince1980ToTime RtlSelfRelativeToAbsoluteSD RtlSetAllBits RtlSetAllBitsEx RtlSetBitEx RtlSetBits RtlSetBitsEx RtlSetDaclSecurityDescriptor RtlSetFeatureConfigurations RtlSetGroupSecurityDescriptor RtlSetImageMitigationPolicy RtlSetOwnerSecurityDescriptor RtlSetProcessPlaceholderCompatibilityMode RtlSetProxiedProcessId RtlSetSystemBootStatus RtlSetSystemBootStatusEx RtlSetThreadPlaceholderCompatibilityMode RtlSetThreadPreferredUILanguages2 RtlSplay RtlStringFromGUID RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeForFeatureUsageNotification RtlSubtreePredecessor RtlSubtreeSuccessor RtlTestBitEx RtlTimeFieldsToTime RtlTimeToSecondsSince1970 RtlTimeToSecondsSince1980 RtlTimeToTimeFields RtlUdiv128 RtlUnicodeStringToAnsiString RtlUnicodeStringToCountedOemString RtlUnicodeStringToInteger RtlUnicodeStringToOemString RtlUnicodeStringToUTF8String RtlUnicodeToCustomCPN RtlUnicodeToMultiByteN RtlUnicodeToMultiByteSize RtlUnicodeToOemN RtlUnicodeToUTF8N RtlUniform RtlUnregisterFeatureConfigurationChangeNotification RtlUnsubscribeFromFeatureUsageNotifications RtlUnwind RtlUpcaseUnicodeChar RtlUpcaseUnicodeString RtlUpcaseUnicodeStringToCountedOemString RtlUpcaseUnicodeStringToOemString RtlUpcaseUnicodeToCustomCPN RtlUpcaseUnicodeToMultiByteN RtlUpcaseUnicodeToOemN RtlUpperChar RtlUpperString RtlUserFiberStart RtlUTF8StringToUnicodeString RtlUTF8ToUnicodeN RtlValidateCorrelationVector RtlValidRelativeSecurityDescriptor RtlVerifyVersionInfo RtlVirtualUnwind RtlVirtualUnwind2 RtlWow64ChangeProcessState RtlWow64ChangeThreadState RtlWow64GetEquivalentMachineCHPE RtlWow64GetSharedInfoProcess RtlWow64PopAllCrossProcessWorkFromWorkList RtlWow64PopCrossProcessWorkFromFreeList RtlWow64PushCrossProcessWorkOntoFreeList RtlWow64PushCrossProcessWorkOntoWorkList RtlWow64RequestCrossProcessHeavyFlush RtlWow64SuspendProcess RtlWriteNonVolatileMemory RtlWriteRegistryValue TpSetPoolThreadCpuSets TpWorkOnBehalfClearTicket TpWorkOnBehalfSetTicket vDbgPrintEx vDbgPrintExWithPrefix VerSetConditionMask ZwAcquireCrossVmMutant ZwAllocateLocallyUniqueId ZwAllocateUserPhysicalPagesEx ZwAllocateVirtualMemory ZwAllocateVirtualMemoryEx ZwCallEnclave ZwChangeProcessState ZwChangeThreadState ZwClose ZwCommitComplete ZwCommitEnlistment ZwCommitTransaction ZwContinueEx ZwCopyFileChunk ZwCreateCpuPartition ZwCreateCrossVmEvent ZwCreateCrossVmMutant ZwCreateDirectoryObject ZwCreateEnlistment ZwCreateEvent ZwCreateFile ZwCreateIoRing ZwCreateKey ZwCreateKeyTransacted ZwCreateProcessStateChange ZwCreateResourceManager ZwCreateSection ZwCreateSectionEx ZwCreateThreadStateChange ZwCreateTransaction ZwCreateTransactionManager ZwDeleteFile ZwDeleteKey ZwDeleteValueKey ZwDeviceIoControlFile ZwDirectGraphicsCall ZwDuplicateObject ZwDuplicateToken ZwEnumerateKey ZwEnumerateTransactionObject ZwEnumerateValueKey ZwFlushBuffersFileEx ZwFlushKey ZwFlushVirtualMemory ZwFreeVirtualMemory ZwFsControlFile ZwGetNotificationResourceManager ZwLoadDriver ZwLoadKey3 ZwLockFile ZwMakeTemporaryObject ZwManageHotPatch ZwMapViewOfSection ZwMapViewOfSectionEx ZwNotifyChangeDirectoryFileEx ZwNotifyChangeKey ZwOpenCpuPartition ZwOpenDirectoryObject ZwOpenEnlistment ZwOpenEvent ZwOpenFile ZwOpenKey ZwOpenKeyEx ZwOpenKeyTransacted ZwOpenKeyTransactedEx ZwOpenProcess ZwOpenProcessTokenEx ZwOpenResourceManager ZwOpenSection ZwOpenSymbolicLinkObject ZwOpenThreadTokenEx ZwOpenTransaction ZwOpenTransactionManager ZwPowerInformation ZwPrepareComplete ZwPrepareEnlistment ZwPrePrepareComplete ZwPrePrepareEnlistment ZwPssCaptureVaSpaceBulk ZwQueryDirectoryFile ZwQueryDirectoryFileEx ZwQueryEaFile ZwQueryFullAttributesFile ZwQueryInformationCpuPartition ZwQueryInformationEnlistment ZwQueryInformationFile ZwQueryInformationProcess ZwQueryInformationResourceManager ZwQueryInformationToken ZwQueryInformationTransaction ZwQueryInformationTransactionManager ZwQueryIoRingCapabilities ZwQueryKey ZwQueryObject ZwQueryQuotaInformationFile ZwQuerySecurityObject ZwQuerySymbolicLinkObject ZwQuerySystemInformation ZwQuerySystemInformationEx ZwQueryValueKey ZwQueryVirtualMemory ZwQueryVolumeInformationFile ZwQueueApcThreadEx2 ZwReadFile ZwReadOnlyEnlistment ZwReadVirtualMemoryEx ZwRecoverEnlistment ZwRecoverResourceManager ZwRecoverTransactionManager ZwRollbackComplete ZwRollbackEnlistment ZwRollbackTransaction ZwRollforwardTransactionManager ZwSetEaFile ZwSetEvent ZwSetInformationCpuPartition ZwSetInformationEnlistment ZwSetInformationFile ZwSetInformationIoRing ZwSetInformationResourceManager ZwSetInformationThread ZwSetInformationToken ZwSetInformationTransaction ZwSetInformationVirtualMemory ZwSetQuotaInformationFile ZwSetSecurityObject ZwSetValueKey ZwSetVolumeInformationFile ZwSinglePhaseReject ZwSubmitIoRing ZwSuspendProcess ZwTerminateEnclave ZwTerminateProcess ZwUnloadDriver ZwUnlockFile ZwUnmapViewOfSection ZwUnmapViewOfSectionEx ZwWaitForSingleObject ZwWriteFile _vscprintf

Structures
CLIENT_ID IO_STATUS_BLOCK KERNEL_USER_TIMES KEY_BASIC_INFORMATION KEY_FULL_INFORMATION KEY_NAME_INFORMATION KEY_NODE_INFORMATION LDR_DLL_NOTIFICATION_DATA OBJECT_ATTRIBUTES OSVERSIONINFOW PEB PEB_WOW64 PROCESS_BASIC_INFORMATION PROCESS_BASIC_INFORMATION_WOW64 RTL_HEAP_PARAMETERS RTL_USER_PROCESS_PARAMETERS RTL_USER_PROCESS_PARAMETERS_WOW64 SYSTEM_BASIC_INFORMATION SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION SYSTEM_PROCESS_INFORMATION SYSTEM_REGISTRY_QUOTA_INFORMATION SYSTEM_THREAD_INFORMATION UNICODE_STRING UNICODE_STRING_WOW64