> For the complete documentation index, see [llms.txt](https://www.pinvoke.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.pinvoke.dev/ntdll.md).

# NTDLL

- [NtAllocateVirtualMemory](https://www.pinvoke.dev/ntdll/ntallocatevirtualmemory.md)
- [NtClose](https://www.pinvoke.dev/ntdll/ntclose.md)
- [NtCreateSection](https://www.pinvoke.dev/ntdll/ntcreatesection.md)
- [NtMapViewOfSection](https://www.pinvoke.dev/ntdll/ntmapviewofsection.md)
- [NtOpenFile](https://www.pinvoke.dev/ntdll/ntopenfile.md)
- [NtOpenProcess](https://www.pinvoke.dev/ntdll/ntopenprocess.md)
- [NtProtectVirtualMemory](https://www.pinvoke.dev/ntdll/ntprotectvirtualmemory.md)
- [NtUnmapViewOfSection](https://www.pinvoke.dev/ntdll/ntunmapviewofsection.md)
- [NtWriteVirtualMemory](https://www.pinvoke.dev/ntdll/ntwritevirtualmemory.md)
- [RtlInitUnicodeString](https://www.pinvoke.dev/ntdll/rtlinitunicodestring.md)
- [NtFreeVirtualMemory](https://www.pinvoke.dev/ntdll/ntfreevirtualmemory.md)
- [LdrLoadDll](https://www.pinvoke.dev/ntdll/ldrloaddll.md)
- [LdrUnloadDll](https://www.pinvoke.dev/ntdll/ldrunloaddll.md)
- [NtCreateThreadEx](https://www.pinvoke.dev/ntdll/ntcreatethreadex.md)
- [NtOpenProcessToken](https://www.pinvoke.dev/ntdll/ntopenprocesstoken.md)
- [NtOpenThreadToken](https://www.pinvoke.dev/ntdll/ntopenthreadtoken.md)
- [NtDuplicateToken](https://www.pinvoke.dev/ntdll/ntduplicatetoken.md)
- [NtSetInformationThread](https://www.pinvoke.dev/ntdll/ntsetinformationthread.md)
- [NtAdjustPrivilegesToken](https://www.pinvoke.dev/ntdll/ntadjustprivilegestoken.md)
- [NtQueryInformationProcess](https://www.pinvoke.dev/ntdll/ntqueryinformationprocess.md)